Malware Analysis Report

2025-01-18 20:28

Sample ID 241202-a37fgszqgs
Target b5f6194854416152e53a361df49f56d8_JaffaCakes118
SHA256 03cc93c01b8f1d37d59b3017d1686b6c0ce7f2fe23a252456d3c62e458fd3f55
Tags
upx xorist credential_access discovery persistence ransomware spyware stealer
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

03cc93c01b8f1d37d59b3017d1686b6c0ce7f2fe23a252456d3c62e458fd3f55

Threat Level: Known bad

The file b5f6194854416152e53a361df49f56d8_JaffaCakes118 was found to be: Known bad.

Malicious Activity Summary

upx xorist credential_access discovery persistence ransomware spyware stealer

Xorist family

Detected Xorist Ransomware

Xorist Ransomware

Renames multiple (21577) files with added filename extension

Renames multiple (17524) files with added filename extension

Boot or Logon Autostart Execution: Active Setup

Manipulates Digital Signatures

Drops file in Drivers directory

Reads user/profile data of web browsers

Drops startup file

Credentials from Password Stores: Windows Credential Manager

Adds Run key to start application

Drops desktop.ini file(s)

Drops file in System32 directory

UPX packed file

Drops autorun.inf file

Drops file in Windows directory

Drops file in Program Files directory

Browser Information Discovery

System Location Discovery: System Language Discovery

Unsigned PE

Suspicious use of AdjustPrivilegeToken

Suspicious use of SendNotifyMessage

Modifies registry class

Suspicious use of FindShellTrayWindow

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-12-02 00:45

Signatures

Detected Xorist Ransomware

Description Indicator Process Target
N/A N/A N/A N/A

Xorist family

xorist

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-12-02 00:45

Reported

2024-12-02 00:47

Platform

win7-20240903-en

Max time kernel

141s

Max time network

120s

Command Line

"C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe"

Signatures

Detected Xorist Ransomware

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Xorist Ransomware

ransomware xorist

Xorist family

xorist

Renames multiple (17524) files with added filename extension

ransomware

Drops file in Drivers directory

Description Indicator Process Target
File opened for modification C:\Windows\SysWOW64\drivers\de-DE\scfilter.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\SysWOW64\drivers\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\es-ES\pacer.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\fr-FR\pacer.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\it-IT\bfe.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\de-DE\bfe.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\en-US\ndiscap.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\en-US\qwavedrv.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\en-US\tcpip.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\gm.dls C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\de-DE\qwavedrv.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\en-US\pacer.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\en-US\scfilter.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\fr-FR\tcpip.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\SysWOW64\drivers\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\SysWOW64\drivers\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\de-DE\pacer.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\es-ES\ndiscap.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\es-ES\scfilter.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\fr-FR\bfe.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\it-IT\scfilter.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\ja-JP\bfe.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\en-US\bfe.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\es-ES\qwavedrv.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\es-ES\tcpip.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\it-IT\ndiscap.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\ja-JP\ndiscap.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\ja-JP\scfilter.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\ja-JP\tcpip.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\de-DE\tcpip.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\es-ES\bfe.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\fr-FR\qwavedrv.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\fr-FR\scfilter.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\SysWOW64\drivers\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\ja-JP\qwavedrv.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\wimmount.sys C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\fr-FR\ndiscap.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\gmreadme.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\it-IT\qwavedrv.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\it-IT\tcpip.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\SysWOW64\drivers\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\de-DE\ndiscap.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\SysWOW64\drivers\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\SysWOW64\drivers\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\it-IT\pacer.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\ja-JP\pacer.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A

Manipulates Digital Signatures

Description Indicator Process Target
File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\pwrshsip.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\wintrust.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A

Credentials from Password Stores: Windows Credential Manager

credential_access stealer

Drops startup file

Description Indicator Process Target
File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A

Reads user/profile data of web browsers

spyware stealer

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\Alcmeter = "C:\\Users\\Admin\\AppData\\Local\\Temp\\uL2M9MClrHDfQNW.exe" C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Windows\Web\Wallpaper\Landscapes\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_microsoft-windows-s..ktopini-accessories_31bf3856ad364e35_6.1.7600.16385_none_480c0d8bd31ae43f\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\assembly\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\Web\Wallpaper\Scenes\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_microsoft-windows-ie-offlinefavorites_31bf3856ad364e35_11.2.9600.16428_none_4382f60666c7c23b\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_microsoft-windows-m..-us-links-component_31bf3856ad364e35_6.1.7601.17514_none_b325aa489d61d3a5\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_microsoft-windows-s..ini-accessoriesuser_31bf3856ad364e35_6.1.7600.16385_none_7ff91f5d2dd6c770\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_microsoft-windows-s..undthemes-landscape_31bf3856ad364e35_6.1.7600.16385_none_7a83a914edc3de49\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y8O71085\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Public\Downloads\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\Media\Cityscape\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\Searches\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\Media\Landscape\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Hearts\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\DataServices\DESKTOP.INI C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\Desktop\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Public\Recorded TV\Sample Media\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\Offline Web Pages\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_microsoft-windows-m..ttheme-ca-component_31bf3856ad364e35_6.1.7601.17514_none_fae061a2e0ae5019\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_microsoft-windows-m..ttheme-za-component_31bf3856ad364e35_6.1.7601.17514_none_a5926b147a413e6a\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_microsoft-windows-photosamples_31bf3856ad364e35_6.1.7600.16385_none_f36e0e659b8042be\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\Contacts\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_microsoft-windows-s..i-accessibilityuser_31bf3856ad364e35_6.1.7600.16385_none_bf396ba9226e0702\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_microsoft-windows-s..soundthemes-savanna_31bf3856ad364e35_6.1.7600.16385_none_8501e89d0b011992\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Public\Music\Sample Music\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\Media\Delta\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\Media\Quirky\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\SendTo\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\Downloads\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7601.17514_none_f35f9773adf74c06\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_microsoft-windows-ehome-reg-inf_31bf3856ad364e35_6.1.7601.17514_none_535245f3d98ecb9a\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7601.17514_none_4f7e32f76654bd3c\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_microsoft-windows-s..ini-systemtoolsuser_31bf3856ad364e35_6.1.7600.16385_none_7ca09f65fd387e58\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\L7XNHY48\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\Web\Wallpaper\Architecture\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\Saved Games\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_microsoft-windows-s..oundthemes-heritage_31bf3856ad364e35_6.1.7600.16385_none_5872c0830d0c4747\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Public\Pictures\Sample Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\Globalization\MCT\MCT-GB\Wallpaper\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Microsoft Games\FreeCell\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Mahjong\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_microsoft-windows-s..allpaper-characters_31bf3856ad364e35_6.1.7600.16385_none_bde0eaed84920a21\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Chess\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Public\Videos\Sample Videos\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\GY8QW6M2\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\75GKCLJR\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\Media\Afternoon\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A

Drops autorun.inf file

Description Indicator Process Target
File opened for modification C:\Windows\BitLockerDiscoveryVolumeContents\autorun.inf C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\x86_microsoft-windows-s..ccessagent-binaries_31bf3856ad364e35_6.1.7600.16385_none_de06b4fbd5b45f78\autorun.inf C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\System32\DriverStore\FileRepository\prnbr004.inf_amd64_neutral_a78e168d6944619a\Amd64\brci08ui.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\prnep003.inf_amd64_neutral_92ed2d842e0dd4ea\Amd64\EP0LB030.INI C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\fr-FR\Licenses\_Default\Enterprise\license.rtf C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-Bluetooth-Config\BthMigPlugin.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\prnso002.inf_amd64_neutral_c3b7ce4e6f71641f\Amd64\SODPP2.INI C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\it-IT\iirsp2.inf_loc C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\ja-JP\wiaacmgr.exe.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\ja-JP\wuapi.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerToPeer-Full-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\fr-FR\prnnr002.inf_loc C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\it-IT\Licenses\_Default\Professional\license.rtf C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\DriverStore\it-IT\netpgm.inf_loc C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\de-DE\accessibilitycpl.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\mdmpn1.inf_amd64_neutral_e44cc033b67e7d04\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\prnlx00c.inf_amd64_neutral_79ebe29715d2fa47\Amd64\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\SysWOW64\en-US\Licenses\_Default\ProfessionalE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\es-ES\about_split.help.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\prnep00a.inf_amd64_neutral_92a4c727cdf4c2f7\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\it-IT\usbport.inf_loc C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\com\MigRegDB.exe C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\wiaep003.inf_amd64_neutral_c2a98813147bf34e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\DriverStore\it-IT\netserv.inf_loc C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\it-IT\prnky006.inf_loc C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\es-ES\azroles.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\it-IT\pcwum.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Win8IP-Microsoft-Windows-DownlevelApisets-Windows-WinIP-Package~31bf3856ad364e35~amd64~pl-PL~7.1.7601.16492.cat C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\es-ES\prnky009.inf_loc C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\avmx64c.inf_amd64_neutral_8ebb15bf548db022\avmc2064.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\prnlx004.inf_amd64_neutral_2cf95f307381e481\Amd64\LM2590.GPD C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\wiasa002.inf_amd64_neutral_6429a42f1243419a\SA4x26.icc C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\fr-FR\about_types.ps1xml.help.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\rdpendp.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\wbem\it-IT\wscenter.mfl C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\de-DE\mssph.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\es-ES\smartcrd.inf_loc C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\mdmtdk.inf_amd64_neutral_e567adb271831b5d\mdmtdk.inf C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\netr28x.inf_amd64_neutral_c86d6d5c3810fc04\netr28x.inf C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\en-US\xpsfilt.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\de-DE\dssec.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\de-DE\PeerDistSh.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\it-IT\dcomcnfg.exe.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\mshtmler.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\ja-JP\msrle32.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\de-DE\netprof.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\prngt002.inf_amd64_neutral_df2060d80de9ff13\Amd64\GSC2000.GPD C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\prnnr002.inf_amd64_neutral_37896c5e81c8d488\Amd64\NR161.GPD C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\prnnr002.inf_amd64_neutral_37896c5e81c8d488\Amd64\NRC410D.GPD C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\it-IT\prnky004.inf_loc C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\prnsv004.inf_amd64_neutral_fc4526bbfbd5feb1\Amd64\SV2192E3.PPD C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\wiaca00i.inf_amd64_neutral_de104aaa48ee4b00\CNFRAO.ICC C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\en-US\PresentationHost.exe.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\mchgr.inf_amd64_neutral_407146dba80d1566\libxprmc.sys C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\prngt002.inf_amd64_neutral_df2060d80de9ff13\Amd64\GSC420D.GPD C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hpd2600a.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\prnle004.inf_amd64_neutral_beb9bf23b7202bff\Amd64\LAMPC203.PPD C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\prnrc303.inf_amd64_ja-jp_b0dcc6693f67451a\Amd64\RI1352D3.PPD C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\es-ES\pwrshplugin.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\winver.exe C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\DriverStore\de-DE\netpgm.inf_loc C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\netl160a.inf_amd64_neutral_f8bdd2cbac28a8fd\l160x64.sys C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\prnep004.inf_amd64_neutral_63b22bfb6b93eaba\Amd64\EP7MDL0O.DLL C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\prnnr004.inf_amd64_neutral_3319ff2548f89fd8\Amd64\NR1401E3.PPD C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\prnok002.inf_amd64_neutral_616c1e9b7df7d5a9\Amd64\OKML5590.GPD C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\fr-FR\netvg62a.inf_loc C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.security.win32.x86_64_1.0.100.v20130327-1442.jar C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-keyring.jar C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Jamaica C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_h.png C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\item_hover_floating.png C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099186.JPG C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\it\Microsoft.Build.Engine.resources.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.jarprocessor_1.0.300.v20131211-1531.jar C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\de-DE\js\slideShow.js C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\it-IT\TipBand.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME32.CSS C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\RECS.ICO C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\de-DE\gadget.xml C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB01741L.GIF C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libbluray-j2se-1.3.2.jar C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Windows Journal\ja-JP\JNTFiltr.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\fr\UIAutomationClientsideProviders.resources.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libscaletempo_pitch_plugin.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00526_.WMF C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00350_.WMF C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\etc\visualvm.clusters C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\it\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\ado\msado27.tlb C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01568_.WMF C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN095.XML C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\logo.png C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\MSEnv\PublicAssemblies\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\fr-FR\settings.html C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Internet Explorer\Timeline_is.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00199_.WMF C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\es-ES\msadcfr.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\eclipse_1655.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libball_plugin.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\es-ES\js\highDpiImageSwap.js C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\InkObj.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG_PAL.wmv C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libadaptive_plugin.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\ja-JP\js\init.js C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\ONLINE.ICO C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\msadcf.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libedgedetection_plugin.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\mlib_image.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15132_.GIF C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\REPORTL.ICO C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OMML2MML.XSL C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSEngine.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\title.htm C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0287645.JPG C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libfps_plugin.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01236U.BMP C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Windows Journal\Templates\Month_Calendar.jtp C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_left_hover.png C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AdobeUpdater.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\1033\VBENDF98.CHM C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.SharePoint.BusinessData.Administration.Client.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\FrameworkList.xml C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099188.JPG C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Services.Design.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.widgets.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-templates.xml C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\winsxs\amd64_microsoft-windows-dns-client_31bf3856ad364e35_6.1.7601.17514_none_4008824c98f8edac\dnsapi.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\Manifests\amd64_microsoft-windows-keyiso.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_0902c5cb80bac1cd.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\Manifests\amd64_microsoft-windows-t..ty-client.resources_31bf3856ad364e35_6.1.7600.16385_it-it_28f578f08c80b956.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\winsxs\x86_netfx35cdf-csd_cdf_installer_31bf3856ad364e35_6.1.7600.16385_none_58326e688d4907c6\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\ehome\CreateDisc\Components\tables\1cb0 C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\security0.aspx C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\Manifests\amd64_microsoft-windows-d..tshow-asf.resources_31bf3856ad364e35_6.1.7600.16385_es-es_3427d17b0379fa20.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\wow64_microsoft-windows-tapicore_31bf3856ad364e35_6.1.7600.16385_none_4a83748394a862f9\tapiui.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\servicing\Packages\Microsoft-Windows-SNMP-Package~31bf3856ad364e35~amd64~fr-FR~6.1.7601.17514.mum C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_microsoft-windows-p..i-asyncui.resources_31bf3856ad364e35_6.1.7600.16385_it-it_1f1786254b60d826\prnntfy.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_prnbr00a.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_9f384458f3d0aaa7\brmzui13.DLL.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_prnky004.inf_31bf3856ad364e35_6.1.7600.16385_none_3dd58b93065f62f8\Amd64\KYW7AUT4.INI C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement.resources\3.5.0.0_fr_b77a5c561934e089\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\winsxs\amd64_netfx-mscorsecr_dll_b03f5f7f11d50a3a_6.1.7600.16385_none_326f915d96565d95\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_netfx-weblowtrust_config_default_b03f5f7f11d50a3a_6.1.7600.16385_none_4ce9dc6ecc5205aa\web_lowtrust.config.default C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\Manifests\x86_microsoft-windows-setupapi.resources_31bf3856ad364e35_6.1.7600.16385_es-es_6a028059d8dcbea2.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\Backup\amd64_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.17727_none_ca4e9bcdcac7feed.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\Manifests\amd64_microsoft-windows-cbsapi_31bf3856ad364e35_6.1.7600.16385_none_aa56c4bd0a17fd9b.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\x86_microsoft-windows-r..ne-editor.resources_31bf3856ad364e35_6.1.7600.16385_de-de_0a82216671c9b806\reg.exe.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_microsoft-windows-g...scrptadm.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_090ca43c458ce514\scrptadm.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\winsxs\amd64_microsoft-windows-p..topeerdrt.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_b0b4db7a1899e2c9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\Manifests\amd64_microsoft-windows-s..rotection.resources_31bf3856ad364e35_6.1.7600.16385_es-es_1b5e409ca9d9e556.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\Manifests\amd64_microsoft-windows-t..trolpanel.resources_31bf3856ad364e35_6.1.7601.17514_de-de_86e7cd68353f748e.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\winsxs\x86_wsdapi.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1b1016d1c6be19c5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\servicing\Packages\Microsoft-Windows-IE-Troubleshooters-Package~31bf3856ad364e35~amd64~de-DE~6.1.7601.17514.mum C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_microsoft-windows-help-mobctr.resources_31bf3856ad364e35_6.1.7600.16385_de-de_c0c7d754a6dc5046\mobctr.h1s C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\Manifests\x86_microsoft-windows-h..ragelayer.resources_31bf3856ad364e35_6.1.7600.16385_es-es_a1e2bcd9e0aceb23.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_mdmbr004.inf_31bf3856ad364e35_6.1.7600.16385_none_c1068df43a3b115a\mdmbr004.inf C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\Manifests\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.1.7600.16385_nb-no_da24c6000f208238.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\msil_system.web.mobile_b03f5f7f11d50a3a_6.1.7601.17514_none_ac4cc83a8cbcb7cf\System.Web.Mobile.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\x86_taskschedulersettings.resources_31bf3856ad364e35_6.1.7600.16385_es-es_f30ebe0d8f324a27\taskschd.msc C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\winsxs\amd64_microsoft-windows-taskkill.resources_31bf3856ad364e35_6.1.7600.16385_es-es_5c09135938130c02\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\Manifests\x86_microsoft-windows-m..ponents-mdac-rds-ce_31bf3856ad364e35_6.1.7600.16385_none_476d9c0f63df91b0.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\Backup\amd64_microsoft-windows-mlang.resources_31bf3856ad364e35_6.1.7600.16385_th-th_6c5db85765f279c8_mlang.dll.mui_2904864a C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\Manifests\x86_microsoft-windows-d..airingdll.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_ee843d138fc2c852.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\da5da08245467818759aa44c4eb948e1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_prnca00x.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_20983167eda7589c\CNBPCOMM.DLL.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\winsxs\amd64_microsoft-windows-p..etoolsgui.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b17e83915d6bc522\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_microsoft-windows-w..extension.resources_31bf3856ad364e35_6.1.7600.16385_it-it_27142c6c640d1503\wlanext.exe.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\Backup\amd64_microsoft-windows-rasserver_31bf3856ad364e35_6.1.7601.17514_none_09cf3ec67e6c6b50_iprtprio.dll_5829c3c7 C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\Manifests\amd64_microsoft-windows-help-legapp.resources_31bf3856ad364e35_6.1.7600.16385_es-es_dfa289134fab93f2.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\Manifests\amd64_microsoft-windows-s..oyment-languagepack_31bf3856ad364e35_6.1.7600.16385_en-us_99fe045407bd44b1.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\x86_microsoft-windows-imapiv2-base.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_7b74d8625e02568b\imapi2.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_microsoft-windows-ie-iexpress.resources_31bf3856ad364e35_8.0.7600.16385_it-it_26df87bb7fb125fe\iexpress.exe.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_microsoft-windows-p..ecounters.resources_31bf3856ad364e35_6.1.7600.16385_es-es_8154a3b9f1217339\perfnet.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\x86_microsoft-windows-s..on0viewer.resources_31bf3856ad364e35_6.1.7600.16385_it-it_86f4799f9ab76989\ui0detect.exe.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\inf\SMSvcHost 4.0.0.0\0011\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\winsxs\amd64_microsoft-windows-fax-common.resources_31bf3856ad364e35_6.1.7600.16385_de-de_fcb2dd5d6182f5ae\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\Manifests\x86_microsoft-windows-s..licytools.resources_31bf3856ad364e35_6.1.7600.16385_es-es_e4adcb4ce3343e50.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\assembly\GAC_MSIL\System.Data.OracleClient.resources\2.0.0.0_de_b77a5c561934e089\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Design\52873358b397c328168f0a5be7f3b9ae\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_ksfilter.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d6a123c7de7e6168\ksfilter.inf_loc C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_microsoft-windows-wusa.resources_31bf3856ad364e35_6.1.7600.16385_de-de_1d2fb4457475e775\wusa.exe.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\PolicyDefinitions\es-ES\Windows.adml C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\servicing\Packages\Microsoft-Windows-WindowsMediaPlayer-Troubleshooters-Package~31bf3856ad364e35~amd64~es-ES~6.1.7601.17514.mum C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\x86_microsoft-windows-i..onal-codepage-20105_31bf3856ad364e35_6.1.7600.16385_none_51440d1748090239\C_20105.NLS C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.1.7601.17514_it-it_b5c96023e4e0ea00\winlogon.exe.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\Manifests\amd64_wdmaudio.inf-languagepack_31bf3856ad364e35_6.1.7601.17514_es-es_b5b8ddca9efcfa90.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.7600.16385_hr-hr_f92ec94d1bc52a9e\comctl32.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\winsxs\x86_microsoft-windows-d..rectplay4.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_1f6725588fa7ac8e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\x86_microsoft-windows-dsquery.resources_31bf3856ad364e35_6.1.7600.16385_en-us_56e561a9c9acbe85\dsquery.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\winsxs\amd64_microsoft-windows-d..services-sam-netapi_31bf3856ad364e35_6.1.7601.17514_none_e4e845f8dcca9f23\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\amd64_microsoft-windows-s..packerror.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_75746173b0d5e8c9\sperror.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\winsxs\Manifests\amd64_microsoft-windows-l..omebasice.resources_31bf3856ad364e35_6.1.7600.16385_de-de_61da96604705f464.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A

Browser Information Discovery

discovery

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TFNEWKTXNVVHHGM\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\uL2M9MClrHDfQNW.exe,0" C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TFNEWKTXNVVHHGM\shell\open\command C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TFNEWKTXNVVHHGM\shell\open C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TFNEWKTXNVVHHGM\ = "CRYPTED!" C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.EnCiPhErEd\ = "TFNEWKTXNVVHHGM" C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TFNEWKTXNVVHHGM C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TFNEWKTXNVVHHGM\DefaultIcon C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TFNEWKTXNVVHHGM\shell C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TFNEWKTXNVVHHGM\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\uL2M9MClrHDfQNW.exe" C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.EnCiPhErEd C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe

"C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe"

Network

N/A

Files

memory/2364-0-0x0000000000400000-0x000000000040C000-memory.dmp

C:\$Recycle.Bin\S-1-5-21-1846800975-3917212583-2893086201-1000\desktop.ini

MD5 9d97d56f58af7dca2def8d4373e9da34
SHA1 7364b16cf9beb49efd73f8e3f58484606b40efff
SHA256 e74273c045a3fa5ef2121cb9c40dafbb447be09e47dc6bb81fe2379c3f3f06be
SHA512 e9a76d3298aae71a3e4ba48a489cb0ab8207b278f90cac1896c13f4ec540a8153d13375bcee54b29ed180c293aa5005bff8e63908bcffc8c1d10c6167c9070b5

C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt

MD5 a3ec34211b3dfbbf151f3b72e326bc5f
SHA1 2e2e479be798861cea2e5377b53046442c70c20f
SHA256 8cc0c2e1bb7851ddcda243e1a5c2263f9372d5cadb640c519d79264b88091cc6
SHA512 996fe5179e4022c58dd13137b9feb39c886c2e7338112090cb9b8a0c6fba12245d2065481eb2f05be1fe301f8f2deb3c283cd474bf5e33d0e16f50b517220a8f

C:\Program Files\Java\jdk1.7.0_80\db\bin\sysinfo

MD5 be1285c51b92c1c1c4591c91f4c8ab3a
SHA1 1057362e66ef093ca58dc0c3f8d6da1050ca4e55
SHA256 e81b3b875fdc73d728259d6a187a8ed6880e845401d4458e116b71c2b77c4ae3
SHA512 850a96db41f5b643f572e44a95bc8e1e16d121f1c59cf3f2f3812d4e6ccfacd3c516146da1ab88dd1766b5495f0037fcd9b8654e53dc7896b4600151158f4100

C:\Program Files\Java\jdk1.7.0_80\jre\bin\plugin2\msvcr100.dll

MD5 548df1cc87f523e9c891778f449261a3
SHA1 50b9671eb6afa67bd0ee26e48295b09ca8843b43
SHA256 101b898357b3575febfa11d8efa38af35927c9f01daffae2650d76a8cf8f192e
SHA512 66a4b29885c4aabde3e94c501e41251df6bd087019ec67a823b1c250e8ef00d5542ef5787969e87cf5655d7a089001c2d3f8d8e5b427c617cfb4c895742988dc

C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif

MD5 1f2a1874a537edd7265f476fe6d8fed3
SHA1 d6578ae80edb391e327d07182336c824b758ff97
SHA256 6a2876266142ab94286d74af48027bd43cb6c284fcba6d518c460cd1d55649d9
SHA512 ae521e4a665cf059da993c23623d6ccb340e16bc9eafe0ba0e185208b711de5a911fe8436fed4e39f3d291767f60f1100f6f6f084454f7efe69ffeb305b918f9

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\epl-v10.html

MD5 2b436cb05a8f8e358b8700669509d9d5
SHA1 85854b3ef8cd211ea67493d5adb1c212eb4c3523
SHA256 f6ce7e5456e4ff396a54ea9af0012babbe889490c2080c5fb948963fd85acf1c
SHA512 7b026b2f5680923766cb99a0c25482b12ad69da601df2150406d2d38aaa295ff80f7af642f84ccd6ae75014e6be99708ce7f32e0f5be83c7e60c07a2bd4002ec

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\license.html

MD5 acdf0a1273e5fa3ec6dbb1edc3595380
SHA1 6b208fe56d8e6ba140dcc63570d9a2f879807883
SHA256 077b1005b2e2d4df7b4e77d112c23cab2c2e5e1c35db22434057258d90b7967c
SHA512 76855ecf0737ce486ff8b630912d8b8f0bf29a2f0e34a646be9d2872dab754b6c391f37e104794375cff1a7ffa2568d044a50fce838e3d18fc62df576dd868c5

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\eclipse.inf

MD5 8464b66ec84b6aef01fc0016c94992b9
SHA1 b4b199ace44049238bb2b1fdc394772a7abf282b
SHA256 ca4081b666fab76000b033c447f3f348b3331c93fd2ef230a9b13b6ff8f4231d
SHA512 4444eb60eac68694b26ab1c20549428b4a1133be050a96678c04088ea8a28dad9d57fb0e17d123da8b51260b843f778d7f1e77a94243ea8b78f54e8e7c08d3ed

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\asl-v20.txt

MD5 9e53b5ced68c26a4b83e561d712ad0e8
SHA1 badd9a1ebd18d9fcab419fba399caddb2735015e
SHA256 34a4916da04902ac5ec5f7ab90d1f57ce6347dccc2839f375b77bb727f90c1d2
SHA512 da2f5e9c3f84aad50e5dd74e685bb904f0fda33cac54d21ad36a8d5dac2ed492a5deb5ebb4edd8edd2dc539785efd9e75e1a76214876e87378d512ff35a007ee

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.RSA

MD5 4d3f30c7f184159efe54f296ab84348f
SHA1 9d9ec98ed392dfe1660474c72ec0a03a5dd46b1f
SHA256 0dd787e797223d0005c6d47a437c0d2426495d0e90a9fa9c9486521b189a0cb8
SHA512 06bf90b20eca3f2a4f06bb633a453f61fc6f2b87d1553512d743525aaefabc5e0354705b6785f930cfcc9d483d0754b483d239858a942d15b7c633e22a32b6e1

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\ECLIPSE_.RSA

MD5 da389e0c4967904e58399b55ebc7ab28
SHA1 936d336241cf65853d247114d031d84ced750169
SHA256 fd0d4725693033fca6b0620ab6f1acb8ec3e7796c2642240d4b4f64830532a15
SHA512 5b46738ebc9b768c6332847a3f9541c469f263d86c2b874a4b5c3b045cc6d51a94573802bd7c56152cf031dde00f0eacf9145b5ccec54611176c5a34e0348cc4

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\META-INF\MANIFEST.MF

MD5 a05920eebc8abb7f524dcac4c929852a
SHA1 f808812747ec2e533a97c8ef6852b121fcce9cc7
SHA256 fa591633d8432cda28c437c7153932ff816df5a987a3fb9ac1e7577f15b2bf6a
SHA512 9094b57bacbb3ab986d775e98cff836e6b31d615e3fb31f8a990b0525d62aff390a5383d95cf4edef8882c3256bd7d5eca214aeb7a0f6a703d3cfb35fde64b07

C:\Program Files\Java\jre7\COPYRIGHT

MD5 b2d615206b827b0ef7c0d514b1dc0c2a
SHA1 3741b781d834bf2b35921eeb548c85e26a45441d
SHA256 fea6be4d7bf8641bd201ab85c8d1b31ebf5c0d8c7a8e9f24f496ee821f33ab35
SHA512 d751ee05e7a1a953710798dea6226f6ba955d547ad58999fee9ed4992de9896c2d920ebd5f5da4aeaad562cde267df619297c948184e188842839247d6235635

C:\Program Files\Java\jre7\lib\deploy\messages_zh_HK.properties

MD5 95eef50102f745de0c93f935f434c7bd
SHA1 3a6070d223c97d53d5a52d34688977182347d54a
SHA256 d5de8f3558e2be81085b59bca8919cac2a4d663a859abaa632c0bcb4ae55bb4d
SHA512 470cf55a0c1fa325cffff2d3c60efbad9113fc38676b488c1eca19b78c91312b4b655548451ed4b800bebd84d3009601e1af85b08b01241eed9268189b3f9429

C:\Program Files\Java\jre7\LICENSE

MD5 ed9d12e4733a510a4e88b3f4ef2c5034
SHA1 9db149392be0b6be0df4d54ae90112a0b0b53cd9
SHA256 8a4fc7d733a5eabfa05bbf674a5e3ebbd9893d0f05beeeec01de3753ff7c3ce0
SHA512 31dccb5e79c5790dc6b918a21aaee58703fbbdd1fb7fb789200b0a2b36de1c3b2db0605e0409b174baabfb6d1bc2d257ae3d4064223a70166c07078ed1428a85

C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME-JAVAFX.txt

MD5 e8909bff8831deda9c16fade83adc88f
SHA1 0bdead2427917af0313eb64868247f7efc6c5f87
SHA256 7bd0ae1401f21414827f8ca79c037835eed55bd2f4a89195dd38f4acf8316810
SHA512 e0ec7569856aaf74c935b881d5c726e0cfdcd3704faacea6fc2d83a20038b88862f2bc62bb728eeec8ae20d0dfd2832b7e88a7addb951b8a8a7136ca8ec6181b

C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME.txt

MD5 5dc69cbb2cdca072316b7e74756e56a1
SHA1 36f457b018fecff99b6ac18ae0145d394652abe0
SHA256 5d9082b482d881ebfa32bdb325fe0ebc74ac709f2363cd54c620ae01e0805f2b
SHA512 64f1824d2fb84099bd7ebc247c20f00782242f4e5739c5330c1e9915e687b07534f97fc1a445de5d25e07d3ab84127808f917a45b9ae3a756e17ce8767ab7051

C:\Program Files\VideoLAN\VLC\locale\da\LC_MESSAGES\vlc.mo

MD5 91e969a0f2126416a08496a2db82ab09
SHA1 a81c070019edd8c7433c4dd3ad3fe5beeabcb402
SHA256 c3463b6dadc6e0285aeba0dbe52357e3bd5962ccc13f94621c336055fb3899e1
SHA512 2f58e901a113b3515601c7ca637ac5d724873224e14c21fc94a5e6cbdda9abffc10f55784edb747ff013c02f5dbaf1f478f1229b468e8a735e0d5000a46b73a3

memory/2364-6515-0x0000000000400000-0x000000000040C000-memory.dmp

memory/2364-6516-0x0000000000400000-0x000000000040C000-memory.dmp

C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\TAB_OFF.GIF

MD5 f62e2ceb7a95140e87d0bd7684d38c92
SHA1 5a98315625d49b4c1c0074200d03f748871e1446
SHA256 dc0f78a9f6e6e03bca8ae8b00894385eb960a4770ccfa3f16d53e6cb6c99f247
SHA512 75c4e243b33b363ce8f1576d1adf386b4f851840d20557ce3a28d4e78d9fa0e723df735c36e2fc42d246aea09c93bcf9ad3882655bbdb507f83c3a72a5491b57

C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\TAB_ON.GIF

MD5 665f1a4ace7275a2275728f6adee4b07
SHA1 197ce3a68cf62a78a467dc95aec3145735742cec
SHA256 d3a7f97bc94f26a4e1ccfb1afee589c5947d13ff54960f2de37578b520b525d8
SHA512 95a65ae6ba4779004d75515bfab07a3a9f20a232e39b0f4234065fb60be0ff6f3a51dfb561f95e655a3c6e5316e01b0a2462394a76305d45f9f894c37ba2e30a

C:\Program Files (x86)\Microsoft Office\Office14\1033\MSOUC_F_COL.HXK

MD5 ad063ed5edea1dd4823520533a35bcca
SHA1 f4b13462c14685321fcbc95be39c9028c9687c0d
SHA256 36ba0e539ccffd1291a945efaf54e5d87716c181f07c2040eed8dfed3e309c65
SHA512 0baade1a8070b43fdd6dab42c228f5c3b193c9fb2c5ae47bfecc1290b14c2bafea09022d0aff6582cce727ea34b977894bb0dc4364ddef00ffa4079dfdf35aa3

C:\Program Files (x86)\Microsoft Office\Office14\1033\MSOUC_K_COL.HXK

MD5 39719f9e123f38c34464a5c788388e87
SHA1 ea3e4445c7e04c3825289f5c27b56cf89a79b715
SHA256 8149def540093f60b04f986ab36ed9fa4c93cc70a55fcfdaf92bf775d8bf8c8b
SHA512 9a7df1df0ab694d25fdb6a579e3277eff442048fdb86ef8d8624b6a465f9fd020dc31e344483cf4237eca7ac438e1ad0bf8a98b46289a7e04bbd4f5fccf4caa5

memory/2364-14431-0x0000000000400000-0x000000000040C000-memory.dmp

C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLOOK.DEV_F_COL.HXK

MD5 138d555037db0cd5c57f6cca8fe563c2
SHA1 ba965b9cbe84407d80e010b758437001b4369f1a
SHA256 637f76bbc06d244dc11249b32f37a3d2493ced8c3173365e1b33c98c7baff9d7
SHA512 c1c5019ca5fd9bfcd219eb1b1400d228a35bfb489865672097c642df067f2dcd57750226e731516ac6a2252df49991ed2648ef044ce7b64fa254a96e672e253b

C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLOOK.DEV_K_COL.HXK

MD5 993dd8f411117742ef8e06df7ce0544d
SHA1 d9c8e161bae6aafcbd7bf129f25786624e409079
SHA256 3312b16be02ea07729bd27ba91aa43e31401a85bbbf60790a6c26e6b5eec742a
SHA512 df4ce2c313f283c4973f1bee622341a13f8c08d384f39b1a1ac6ee30ecb1ea310992c99217f77d54872302f443d26843296031327591874482e838291e8be9ba

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\BG_ADOBE.GIF

MD5 9a7afde1e3b1ead0f3f7d119e1e457ee
SHA1 672e7729eef4f508b220592b567b9d783d245b1f
SHA256 a9b22ce65b8f0d95602ac079aa1f6029360e0705e15dc84367116b493e70b095
SHA512 da96f4215678291f423d9a21c364daf59097eab31dc509ed94b2ab3a3a345822b8d810f3fc67ea9b3341469cf5e77046850cdd60229123fafd7b761dbe18da9a

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Casual.gif

MD5 12ffd5af7186b1acaa74fdc0a7cc0951
SHA1 3cfb39e64e6041ed9e3e45d471064e00ac00cb3c
SHA256 dc363e0cddf2733c0a4c57cacda926457f7727c3cd8aa989f16c4b517312cdc0
SHA512 84081926e3554206fc60c581fab8c4dd02a27e485f5543778ac3cab691821c25630d2552a1f1cde3d02740a63aecc10cf89ac9fe9a949e3a2af5bc1c36c00a0d

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Country.gif

MD5 de392b0c61ae350ba1c6e7497b9368bc
SHA1 6ea1d365309865944e9c2e22b299955ab0e8517b
SHA256 ca1bd144772d7140b2375446899d758e029dbe8364923672b25093b546e1e393
SHA512 4bd9055710a28aebfe8b81c439668511fa74751e7ece178a686864bf19285eb1ead063d9d5999b935f8912d7ba3f903b7f462df7ce210c02c6c7c23424270f2a

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Earthy.gif

MD5 c4ae9d1a4991947024b7470ef9c91db7
SHA1 4a3e2ac4cb40e343087a926cb1c562dd8393915c
SHA256 86e750d29eefd63e07f02a0877b8fcbf4cea2e68668577ad1793e7e09f8836a8
SHA512 ce8591c6556f1b112ff56cbb524f5987f04f4cde192996019d7ecfccc4cb122b81abbbce2a1ecc1baeb676a1476e1fc680482abd79076d9d8f16889738d08975

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_GreenTea.gif

MD5 798acd98e995d5fec38b405960013967
SHA1 e922fe56d95aa39f640ad33c61f2a9ee3e532016
SHA256 3ac38bc45bdf62b20b9ef6e67ea4761c3129fd8e476d7cf1fb71a9ab65f4f107
SHA512 84c3372082cae981374804bd8a206e5be2d00bd0672b2d22a352045451ac30d72505dbdb099b15a9b9d88dc89a6950389045d81c20781b6d6e2f741748089775

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Groove.gif

MD5 1c8ab53fd1afc1f76b32719835a25c32
SHA1 0b19d3fb1df00a6566aca82f31656713c583417c
SHA256 b30998b54d85b486c85017439d2b9969096c06545c390f8b1fc9e35c37b41d51
SHA512 4f0ad44713b802fb21e7dbea583d8de5e16ea11e310d9ff3e3201bff1f309be532911604e3b1580d6d390f7214c9f07d0ed6424124c6c0a35b2e692d08747919

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_LightSpirit.gif

MD5 98527fe2ca921239bc36bcb600ad5614
SHA1 7522c4fec2e92b6578ebcddc7c7589c14072f172
SHA256 84dbbf4362f599212c070e0066302e2dc594eddfb3a75039afa2fc8749e88af0
SHA512 93337d935d09d7e57e093ebce4c3e6767234ce30f706168933cb510173d241fda767aee03e401307fda467284b6c634052c7c9b574ed47d702dce26339f087a9

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_OliveGreen.gif

MD5 f499ccb234339cc5b4e9b831ddff46ab
SHA1 1fc0e5ced8f73a536746bb162c1169d7bc96cc72
SHA256 73d2394d855dd0cd75334de1609dc0add74b54e46f321081a2850e2f31dce0dd
SHA512 e9006c899a5291679f848b4c931a2acce17531bcbe8fe96472658296cee5e85d819986784a337f23da7269065df1ff632c728007f801ba170299d0989133a66a

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Premium.gif

MD5 7757780ca38992daf2102ece4a1a61fb
SHA1 3d4f4afd07f456017ad1afcb9220e72fff83bd57
SHA256 cc516abebea76fbf32d686a1582355a8102b66d399dd3add6c3e678250a99809
SHA512 45d83a186046f64d7277359f86dff519bd6e00e5dda7c6a1a6952fe810671ede327e36b1484a62e3d7f81204df5db5efcc2d95c64f44b0d98fb44f8c5f292333

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_SlateBlue.gif

MD5 61eab93fd276521645df83cf25ffc103
SHA1 590748c2235dd3a032148f6e8b55360fc530c3c2
SHA256 a3149e30123ab2cc6cbce92d38b3af2c6bb18225ed544f4313f45c7b58564227
SHA512 fcd3ba78201cd3857b79cd73be7d1305d6756d7484add9447bbc135e2575c31b4f85bfd39a8ba4faf4a7d815cd0c6b129bed63be03275e21186f022802da2f6f

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_TexturedBlue.gif

MD5 8aa04fda8ad8caee1c11fd04a7612c66
SHA1 130ed416b86fcb585bf1e93139ccc9ccd888a666
SHA256 87ad6707686916ae057d43dfa0d37579f237d501a9fcc853df600f1eb46a1e8c
SHA512 2d1b29bca2bd454db03276413b1d854d36b2f804b52bbacf9715ecf0f8711f00118e6e2657783a0e82938750d05fee05978559d961dd165e5e935620a9007c7f

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_VelvetRose.gif

MD5 e0177d8ccc8a08ab4808a8932bb13478
SHA1 adb863b7c7023524c96b716e890710b7182d88ed
SHA256 7d1d7e4f973a49bde5557536e6da26685052778715b6c92ee42de0517ce7a00b
SHA512 c22e93d0e50ba75ba26a57e6dd3216a4e22cb7072baaa354f3d4b840954c350e873fac5b752a773d41fa016aed8b2c153c4fddf149a4aff96a404b4dd0684c54

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue\BUTTON.GIF

MD5 d7dbefae48a8189150bcc8508380c79d
SHA1 a7cbce7b374f8662118cd34345827b3159eb6a71
SHA256 a203bbfb3bd8f86376db37cc07ca3e15202a08def8698a7722cdc0c582d88806
SHA512 be9c6bab8630888d9473106e802cde44745bc1eca4d921774a429e99cf6b74dad35a0a49b31ddb4dd23f2d14f6a10c73f2f93428603de993b7adf48e91e2baf5

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\TAB_OFF.GIF

MD5 d09784dafd241580e5033e6d13e6e7e9
SHA1 55961d56aa8f9450da698063459861c28a6e19a4
SHA256 9d01aa17531b91e141cf4f9e970efeb786fe04905b4b88d64c422d6b2adc8201
SHA512 83eec78246f4ce709d3e1283f9d40d7ca4735e0c80de949641a8327aa485071e4df965f033310a7fa4f40aa1ced8c29afca40b608c20c3844b3030fb404b43b2

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\TAB_ON.GIF

MD5 867a93757f97c6e2bcbc77080b73ae45
SHA1 52996ad60ec59f4cabcbbc9f465c41c0c94d788d
SHA256 7a543a82fe5c42b4fccc86d53be4f29a7f1320d3f98a113583b22c7a168e5b5d
SHA512 8fc73b85a4728120bd18e17846212c4c6fd04ff2f00fd66fb806e3898467c36064538fb35ea0eaa7fcafce55426af3d46f153f87f1adb2a0e59b79409e3dab6e

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_off.gif

MD5 e47920ecf68fa7055bbce580e4dde94c
SHA1 f8a120348969bf3e844ad3235414a39670f7d590
SHA256 60f6290d823c1e4743ba6e5bae81b38d1af651e6790316c2df1bb24bc824bcdb
SHA512 5627df7a88da59556623480150bd69e03a27a601f47bf21e38ed23f12da529bb49950927be844edd27717aad5ffc4be2f302c68a85ce32f0ffe2a0f89e39903f

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_on.gif

MD5 895f2f8dd68f6686cced2a5a8d300813
SHA1 a9690e7893b8a122cb3c86f5865253673d021b62
SHA256 384453b04af98552fdd006dc2eed78f0a064b02bcc329efa20cd1ef5d74884bb
SHA512 e2d2c3241c8634c6b8e6ce7043acc9cd4a8c051803190b753d979909437b9baa20f9566bc85785926e10d9b79d1a201b7125958becb459ed8f6c49b80e39d53a

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrow.jpg

MD5 9d3691365f6d76b717b38ceb7aef96b1
SHA1 9682cca0edcf9309aa28b4865df569fba964645a
SHA256 7b28e3e65b0a7c01013a6d55da2ebdf6d3cce9517025d00bb31c12cec6ad1a9e
SHA512 a779a1bbc92a295b620b5cd5fa36c49eea6143852a2c15df105e2b40f80d4cc87f535a022824a2b168b5cb551da58867a16e3dd7a67b31101d13ff259b65f364

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrowMask.bmp

MD5 863e9173f7306046ca66371489659748
SHA1 018e6b78375c727f284f3386d09b69c9c1d9fc0a
SHA256 b80c608e344f5db51661838e08e40467367f0086e657b7635af52f7c26947660
SHA512 02e7f7aebb2a585bce1417221fb4c352514768ad3ebb381ba1f34950c647ebf93c0840926707c11ac8a5e1f6d4026bfc66757086d2d44662f719e22c5adde22b

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\attention.gif

MD5 0f03d15c9897874f02a2116e888f756b
SHA1 e31ed5b1819ecaa4771287e6245f9e46efd4035d
SHA256 812e7c34ba0ac310efa68225df44c6d7ba4b5be44dbe5e97272aeac99b27e841
SHA512 773eed901d5dc5ce125e777cd7d6c20e22b02dd9aade77f497c30f59dc67d3c9df96203477efe9cdb1711de49022ce9700c2a91186fbf4db5a5295cda0aee92c

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePageBlank.gif

MD5 ce4ea85d868e42d5ce06b72d281d64e5
SHA1 d3b46d5cdcec58bff872231f9bcc0f6f62ddfb77
SHA256 fac0bc1da73d831f5a5a945b28f5b38173faeaf472a6afd185d5a19a24e8543f
SHA512 f25da3ebb5985b4f01ddb5c5b05ccb691b88653eb5316da15a0ad89cfabd6abe840b03724c23ba24d3887caaeca979ec9b2b0d4c708896397d5c9ae23a4282e5

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FORM.ICO

MD5 a33a8c68e2f895d203ea9fce6b53c598
SHA1 51d2ed1e791c07dce3f405c51e465e81a90a5034
SHA256 9a5a4bdca5b908728b845ea0c37be2d84e8578af9ef83cd2fbbe15f006c99c3e
SHA512 3ca6120ead8b10dfe380d51a00c487bae5a7239b9abd10285e1c303cd6718ab066adfa9bf3df03129890cf7d63e337806ceac2523174d7814799822433465f9f

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue\HEADER.GIF

MD5 0b238546798b01bf52ca038af1994e12
SHA1 50826625691ba1ec32a5acbf85d2672753583d7d
SHA256 3ad73b3ebaf1b505aca23ff1f165bab13ba249029c8cf0941509ccb94dcc56d6
SHA512 d0c0fa5bb76894e770c8582cde36ca4b26c303491f7f27acaefa2112afa9198f2122f1ae4477db7bd031a2310fe4f71a38e8e71e5c885b04088f07e1239e459f

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\background.gif

MD5 b903e6f76449b55f72caf8786b73d6bb
SHA1 bbda3ce20d5aea36f3e5b1e0e16795462151e642
SHA256 0554d4b01f27c79b5fcb177c6b1da2ebd511d273bf2096c8378fec105e8f1922
SHA512 ac983f68040d167dbd01d830f3ca59dc7822aa659e6b817c28a64e0e27c407eace1ae727175268835265e8397c1d71622b166b9f7b32471c90d610e297ad1b6b

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow\HEADER.GIF

MD5 aaa598f4e8533500a9c7447d5dd9d163
SHA1 0413cd544ccf385a854047124945070ec20ba63f
SHA256 c36811899e07a164abb58937045a8f324f1b6943ae9edd6d2d357e17a7bd6834
SHA512 e7e2010ee7a8dc994fe50ba7bb437a3417c27f4d7f231e6a1c834ecf685cc3e9f3938058d51d752aef0e690ff5f41d34d76e410e6a31f8c405cd6ef9f54372c9

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\HEADER.GIF

MD5 4e583cca4d877112907225cd1bd07cdb
SHA1 9e9107f0af9c423053af3f482a2e76b1d21b8da8
SHA256 259d9874109b8aad04fd9666c3707d4d6caff39c3fed443d35b4d7461affd272
SHA512 96f6c09aa9d9e2cb65ea5dba75611d2fc32f5e2fded2fa5344fa10d255751e7b8cd4cd519a1533c826592317781df8c452cbf1074032da3181498b72c1f1dd62

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck\HEADER.GIF

MD5 43af40e9c7dfd1759526e3394dad4c6c
SHA1 b66074367d5d23520a029fee2b337af06e01415e
SHA256 9bbe96dd446f43192b01017d5799c745e4a9ee787833a5dc6fa8b0d474bf5c40
SHA512 930c185bcc6dfc30a06cfbf14647e7308059d50fd0823899ab7401f2a6f375aa160e1123ef0c824dd0295a10fdd074e88e350bb3c5cb2d1f5b021bf7cb49f31c

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\TAB_OFF.GIF

MD5 11a1185159f72dcbf4c730a5c46276d2
SHA1 67c5a7be598edfdd49fbbd4cf019d6acd5a6dc12
SHA256 b817eba7511b265f50928307184ac4c6614861c11d166bf75188894a92838019
SHA512 b397415cbbde5cbdba0eb413e243a8f2c40a3670b0cc744c14f35417a9b9e6b5085559b774a45c69b7531323a7594d59db6da0238652a92020eb5b6c94f7bf4b

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\TAB_ON.GIF

MD5 f4c2ea140c4514552935e06a91541cfa
SHA1 1147b22f731d42594e623a120f22326a5a1d4a75
SHA256 6a8f97f98f362c87990077cc3a642de1ba4910ece83874e70fda8045dd17c094
SHA512 2d18de71ed5d064b2fcf80216f9e5f2abaeaaf4661aeeb89a614e12b580160722e56bf7ab93e8ecbef232078b954321a987eb008d4b6cf28ecf43a3f2a7716a7

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis\HEADER.GIF

MD5 767233c059b8694b7f4ea947f5f1c4a3
SHA1 6e68b65e66ced20f4edc85a39287e0a7daf30f35
SHA256 ef1cc137e89f26d8f0b7773cd758226c7cb3ad9a28d7fc8cca0513dbb23c9ed3
SHA512 b61a5b979ac51b283069f37d36667d3dfab1671060b8b94030504b268967e9a4041962977901bb30b0f018694f2bc9c89287e1006e8d82cb8b866d97b149d935

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\TAB_OFF.GIF

MD5 919f7ce9c326ed0c60e60be0f5e75d0e
SHA1 16dc62122f7039581159898dd2d77c91b484aeed
SHA256 e9cca0a97e3e51242c2be83ab95cc622f5453914e8627a66a01caefa141e005c
SHA512 2ff7055656756f14eff3ec1af9dd9ae6554b673a80fa8ac0d8bc66a11d31adeb25602758454f0bcb4d006060e9a0d29077c7a54ab92b73d2a6dd2388b5d3cd8c

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\TAB_ON.GIF

MD5 cf74326bd4cbe98bde7e225ca7db5973
SHA1 a22a1d48e9b8b49be77d3f7ed1b013a18ec69c05
SHA256 71499e8e5e109472ca45472f0b6497eee5513ab3937b01e52db7c442d165d216
SHA512 0eb14d38607f10f62e5140d3aaa374f926e8dd65aec195b316c17f78e832faeb1f819a653231608e763d40aa8f6c2ff3a96e5b58e5099af0833a44e8201ca064

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\background.gif

MD5 0d8d2463a85fa3e1812db3d45624396d
SHA1 ab29aeef4ad9b903b7fc42bb42204255fb9068ce
SHA256 f1c4c8cb63d18235f451015a65c77c87a12daad820666e5576152aa44dbb12d8
SHA512 cdb352b0a226e09260083e39e486ad9ed1b5ec6786a840a9a25520c812b86c8212bfecae99185032edf28ae0b8fba7fae6d51e1efd9a420432f43ce17ed5d511

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen\BUTTON.GIF

MD5 4d022789bccc926cd00ba540f6621332
SHA1 695dba8b0b6dce599e2b20e18d7633efd20500a0
SHA256 d406d8ab4b106d458817291c3fa9193a05993cd0797ba15343a2bab3891bf8ec
SHA512 3a90ebddae327e858beee4330bd6c2190fd8996e3d8094c8b464c610c66e3fc7db699f720a8ee022263e19891ee63633ff35151ab38c11aaf0e4c5f2090319e9

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\background.gif

MD5 e995e80ab47bbb18eea58413c9fb8538
SHA1 e2dbe8c006842e4544eae48071928879677e367d
SHA256 be050c78c067a1bdc3aff362534d5216774c0a445dfcccf6c5074e762b84cc69
SHA512 2e0d2bf8b5647b5ea4e1fa6d376c9fccc83a7cc3de2bf36ae7b4fbaae65b6cc0c2da38747b4dc7eba5e96b92998cc6c6af26dbae6b022d21c43a91d6ac3bbb72

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\background.gif

MD5 f4fde5b8edeaaaacf4068456b8d35c62
SHA1 a78ea1d30aaaf4acd695e5ed4eee17e41ac38722
SHA256 c38599ecfdc7a04575fd28fa56a3d42aff119259b759f1a7ad81f01b17e9c8f2
SHA512 b13f52d4fb5070e457e230fc02d791f985791092db43646d15efb1417643f22d2b78af6f8272a98edde1ab10b7a8a5cea565dfce518e42fb2217652a8fd08ec9

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormToolImages.jpg

MD5 577ba23f91a240672313e560c9d4fb67
SHA1 82ff67035bbb731c4a6e9e93d4f729cfc1770e5d
SHA256 07ee908f5394bc9db387b97f405fea19a7d93dae5e03ad13c2e511750dd42521
SHA512 f63758c7df17021995810005e28b817efa26c43e0f6d443882e1e9c1936f4f35974488d37288012c784e2a01a95244643a18ba0b5fcd66c0dee352a8fdbc45d0

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\RTF_BOLD.GIF

MD5 fd955b6cbd11131e168250a944b9ae06
SHA1 bd14983a70c983aec262d12d500fdc3240a66c92
SHA256 ea2cd47d5e7b716663eb46f398cb5be5b7cfa140506a4d08ff85146cc3709575
SHA512 e3ee1236101e40ed673c4ef0185a6fd464890d242a7d268821568aaff05b40ceb5a0d9bbdb59f0c565b757acaf77a465b4b2f4f663550ab57647c42da44f679e

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_choosefont.gif

MD5 45423a2bacb30d1f711963c6b20fa47e
SHA1 31ccd3d6ce0f702b3553c1bee736de0be25bdc2b
SHA256 b1b5c1b28b7b8f08ff66fb72003f0fa69986cf4c84b1b0744289b7ff8ba80edd
SHA512 28946afed1f9d257c74c5b3170d5734920d68858955249a6e81aa8540fdf9769b35fec2c8f5305f1d6783d11342e06442099e13672ae67d74ffd60c4966708bc

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_italic.gif

MD5 8bc5297958778d267ea236b7bce1b3cb
SHA1 8927aad5409a89489b21599fa28eb702a6073686
SHA256 ba33f49fac33095ecf0e2fb5a9161af5fbe4706c621954dfe1a334fc022e920b
SHA512 ab08b65ec45ce37b244c398388f0d3bce080470b0b044fbd2fba6cd47c54f41e59da65c6779d45a728aadc4cbb92d85a207f79b36728b8be239241a18e359d24

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_underline.gif

MD5 1e28f60fd8fd03183fc47930e626aefb
SHA1 c6fbbde228480f90de77d6b55c565dee0581e267
SHA256 d8098eddd8e96a97e2cc0e271339baa86e1ceb8adde07bdfc4d3d54f7a3a5ea8
SHA512 a50cca2f7c2bb174c48033b9722c58d7108a968791bcf6ecf59be50afd8c3a3fdf7673f923a1b8cc05c89d86a54fbeb0bc461b9b866abe895471b22faae5a759

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\VIEW.ICO

MD5 2b66d9bfb8906493360d2598b1378ebe
SHA1 6454772948c7edbaa78870e36ef3889638046bd8
SHA256 ee361b06c842cb7b0d84e2dae77b6efbff2041ee12035d19c816fcbba8957ea4
SHA512 e8a673e89bef5b10f04b55c2ea76ee89d1fbba3dcf2622712e6c9a3be9cb5e609c73f615546f302fa0d4315743a8492eb26abfd756b83c043968db77dd3ac10b

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ViewHeaderPreview.jpg

MD5 9dabefff2406255af8ca8f7e6df9b352
SHA1 9a8b1f8d7d4b13882398d3e349c603407b2cd951
SHA256 0b0ce58ab0e6872f2a4cbcdbd1147b2627dae382e566f394eace469d11990c3f
SHA512 c3c768803b8594c2115fca0fc07c607d3c9322dc4fc1a42f0715d494dbc989eb0d0938816abe010bf03dde429d9f8487173f6849039571b1b14de66baa92ba1c

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\ADD.GIF

MD5 1e02d9b274dcd42c3f938f0991558ed8
SHA1 05ff03097b8379603eb1555bb2922f975d125a61
SHA256 6914a1a76d55ad445c869d53f8c53ef9d2bdab0825dab4c547f1f377056c8eca
SHA512 586228b05a0a95e5250ab7c01b2b455e34e76cabe85436f8f2cda5ea917cddfd4a6f6376e1192dfe5b00b800f852a68b5206097210bbe9e8005f6591b870601d

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\CALENDAR.GIF

MD5 0a07c0a51caeb9a348be0372f6af4855
SHA1 786458bb641d6c42bd500eed6952144ecaf05551
SHA256 8d1164f9e59940b6a8e0414c2a6ed6c595e248d57b896491e4951fa692f01567
SHA512 623592ff92a8cd8d6d64c7f2d0401077c3d80abc28d7e3303a57ec7e06cf95f681040454117afaebf6367b671d1cef7a466f6a9d6bb69484d49a000a824ca236

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\DELETE.GIF

MD5 24871b26bceb288bffb282963cf824ba
SHA1 b19fcd00d9ea113b5a636baa223b580793ec2bd1
SHA256 81997ae68ec8e9c8bc2f69f39f524a716e92ec2158f6a29ad9a0d8e546387736
SHA512 09a1f6cee8e249fba00d94b9256432fc3a774e5c53629941a2f61cd7190d66988abecaf928f3c15bc2a5e6b559019ed2f96a89ca4bd43bdc163fb587356f4fea

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\ERROR.GIF

MD5 9a3e527a7db76cff0f26aa1411d9464f
SHA1 702b6c2fbf2301bc11831c12d86daf012440b0fd
SHA256 ca6936afb174a96801110add95b1c31f6501763c6ff7546b80c8339a8e30f9bc
SHA512 032dda4b873e98941c12832b65c669a29537f3802a69aea5eb41278b31a6986916a1d13e3de91bf7f5bd71fcb1cfcd6356a07f4522c9ae59b9980c407af30d3c

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIcons.jpg

MD5 015b78d6b4881c08631a00ef712f79bf
SHA1 79fc9a572c4fb23538f8f943fa3a8efd8813e049
SHA256 5b2b7e9498859d8d8b1ffeadebf9489d2efdf00fb762f8172d58487677020b0e
SHA512 ae203bc6c3f93c13489e6fde505c259f72a0db76a22c6d4e029aafd7b61df4f8ebcc1e3a08889fce0cbe92004ccac1b3a3bb4bb9935420842759704d051f65b0

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIconsMask.bmp

MD5 901c5af398c409af6e6318482e4b17f9
SHA1 4687705ce6c4216171beba2c884147d87223ef4a
SHA256 71f2c3ac3eb48b9a263ce31d2c61be89205041a95ca3b2618aaaaddafc583f6e
SHA512 37f4ab2a4e4eaecce87c931bb8bcab84d44ce2112c78a95d59c07355fa71e79a116447122d1d2399ffbeb2a95cbba514d83f862a59443fd54f19d8b87646e0ac

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\LAUNCH.GIF

MD5 80b6392839512a8c77aa680e5d41c88a
SHA1 142e550d433c2ae5a3194537771518323f707322
SHA256 ce8a69511a6bb05d82105acc5f83b8d5b610a092109097a7b17c3eaa142a58d1
SHA512 e008426fe9ce5a2bc2e3a0508052f9b6cc8fc13baa44c0a3cd587255851ce198bad49c8111b49ae4adfd80f459e9d4f33dcdc12f4836a553e8e4b88584799899

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignleft.gif

MD5 8eabeacf9d104318f4c5c1b3d3c8f228
SHA1 6d6560db08ae26e0acd8f92ff359ad48f152cc16
SHA256 fd9322623898495ea8203b3f29b6036a0f077a0ccdc86547588b4d0b0d8cf22b
SHA512 17e559df12444b06a63a53bee5613445fbe3fa6d5acdf279ff6000a6dc39bb77e2d88816ce09790e7298d8bf8ed7c8dc090ccbd4718c7963721ac0366e2c4501

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignright.gif

MD5 c3e848bc3268c7894c56adf02c3b4c06
SHA1 803d4a1038c02818d40384a32970926cad1b0dad
SHA256 37e6165a6770d323b0df555e3d5eb7b158587b22ad5b56477e281f84edae9ee9
SHA512 13b73ad929abbad56f4f638d34fd97faf6c8f2e75ad1d8af9c5b87166679c9b952a3bfeae6a1787604a9d7f02788dc90d6ce0bb8f669a4aa57a27d305bb630f8

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_bullets.gif

MD5 282558b741123723e87aa911a1560d2b
SHA1 d4970c5d88c3ed88cac8e0845ea2a14d59c6475e
SHA256 978c7c8c3ff4f192f982f2a716274b3142507ac76440e38864fb0ad02f9a8fd8
SHA512 c4ecc6d115d0c955b3ff39025185069ec707ba6d42e3022b2c15d89afc8f30f9736e8c0e6a2731e126301d8a96887cd9523da9437f686e13fd6fc005158b27a7

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_center.gif

MD5 28c4ec968666708e7f38c669d96d7b04
SHA1 98310c6c852770143c1bba8072f1d04571839382
SHA256 216e5baad6126f5f06d2358944e96805492742f6430878196e5ce67e6bd90399
SHA512 c9c75872e4dba3bbbea9bddc6b905038b907afe71cea60c89099e1aca4746ed78f2c8fed996e276f1d8340c98cdbc9533b501795a853095366caf0a9c5e7dd0a

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_decreaseindent.gif

MD5 5a9357894ce3e5236c54aad77077329a
SHA1 4534e77579563d0ec7aec4327e52e389bb35efd6
SHA256 16cf073e3921dee56b4f730fe0042647cf473bbbc3b9ad5e35af5be766a8ed80
SHA512 932d2436cf6fb8818ab792abf53421357a1d885f4a817380b013e6f4745a425a608b6c5e1bb618a9dbb46be91e7bfe07bac8ab016dd2feafa77b8e1236d372f8

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_increaseindent.gif

MD5 8e38ced1738241900532e0168cea7491
SHA1 8edd1a43f65b6734a94a7906ac0366da3f1a7ea5
SHA256 223c77cde73184fac336ceaed6315e488f61c0aea719a520cf74f2402a93386d
SHA512 fb85b775596e2a7282183ca756c747b2861ad893307f60679c12da9906f1d9ecf6583041c4538c1465ca665c401f1b585486b19868103f11c802ab4b97f6c72c

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_justify.gif

MD5 7dcbbfa8ac51b9296c804f0301b83823
SHA1 f9dea79645062017aa50f78567420074f327f4da
SHA256 e5da9796b186ffcf2ae9acc647f9c6b955229c3ee87939c648d89b549fe68b21
SHA512 2d945a7293003b29ae404dbd5995abcb416b001fcfe6d6a35b6308d1e2f8af7eabf2f99c222d6db89c362e1190c030b6bd5efc2f6a14b2fdc14d2005ff87c1a1

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_pressed.gif

MD5 673fca3ed81e5d5dc9260c253359dd3b
SHA1 c16cc55ecf3223737aae007506fe26139a6d86c6
SHA256 3ae15347e4a3f3ad5c39ea792d333c863d3073494f2c20cd1d5170a3da39c27f
SHA512 dc031dc91bb925891ddabaabdf62f072c922abc3a8e1f3c47f88a0ce9a2da29ad9280f2aa0bafcb69f91658fd2baa9e1a66915e8c46db09f3e52d83f6a737c0d

C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMV12\Microsoft.Office.InfoPath.xml

MD5 ca0e7194af7de28faaad3267f11bb2db
SHA1 d5c4c4bfc9a19649782ba712777192891df95374
SHA256 c12cc3c653dd44a5a25f0517207148df15bfd0fff924d2d4328ef38cb702f227
SHA512 3721045ec7434dd0152ec38c1e2e90cf6539ba6e2a65b5fbefcb6432b8b16ea6d1740ec7c056575f0cc796e272523541868a0657983b8ca0155a37f883170184

C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.XML

MD5 5b10a769a505b318f56c19fa37b318be
SHA1 0ed6c8a11b9f06beb3ede195e4874920401abd8b
SHA256 44dd301a057d6436ddd49082b78729daf4516874f99d43744b9eba5aade0acdb
SHA512 f2223ac9665b351eb5d03b5db41cdbe862231347c24c08359a9cad4cacf5b33de35d9c10408db1e3b4df1fa8ba9832501baab1a2bc3e5a5cd4d52f5c03f64217

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\CiAD0001.000

MD5 503dc91113298dc751d711c5688d6155
SHA1 134340836da0cef7b54ac476c0ba325195489861
SHA256 53a8ae06b161e1df1184d00046ad2c1a7ff8aa5c00f60ec93f6c6f5ba162cd81
SHA512 83b61b0e53689f5ddf75281bcc62f7bc3fb83efc94d3b682692023cfb6c612fad98b82b2eaeb73b9681ea505bee06b6707e84af17d972d667d54eb7630abc590

memory/2364-19568-0x0000000000400000-0x000000000040C000-memory.dmp

C:\ProgramData\Package Cache\{662A0088-6FCD-45DD-9EA7-68674058AED5}v14.30.30704\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi

MD5 825183f1bec137cf6a91767185a06898
SHA1 c9612f7784b9697eb6c800acf4a962713979e6ff
SHA256 4437629f130e1af951ade93bd1bcf77d8f44a24fd7d5731d681e4d82d1982c9f
SHA512 56090f86f157b8daa6c09b24bb83c0dbf7f796ed8fe120fba22d3251442a717796f96ec06c91f282fc064af339e419d7f79f95866141b533bb1c6d4b630d396e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_2

MD5 0f3c5a465ec1445fdad26fda216ec372
SHA1 3a3c6edc0363660e21d380fead022b8950f8c4a1
SHA256 f528b4cac82c1305173d476fbadc1414545ec6ff72a8a028ea516baa911e9175
SHA512 e642826b78185595b916a0a47a1008d2cfacd20c21c2b23f88b47352089c599b369e2126dacf2623378fa8292b799ecf42b434e794eb4db64334f5a2813195f9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_0

MD5 3c8c9742924b237c7009c7c7785dd4df
SHA1 e9cbd5e7e8061e64ec8e25d501d0cd8f8ade57ad
SHA256 3955cf3ff88ab3ffcca3b6fd61cc1b2329e7c2d6141773cccc39a40982949cfd
SHA512 72c35d5a5fe212e6733b70c9d074143786abbbf517d75f02b483b1db4932a43d227bd5874139a8162f8d1bf2177d0a6bc3bc5714782e30212316e5b5268c9659

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_1

MD5 d8fc04649ade52ba4ca3a3e5e91444a9
SHA1 0d633e6f5594c2b477f3c86928c58cc6c7195592
SHA256 e07afe5b75e32bba7690ad6c26e851a2ff44d3f1b88c582878bf5e0f36239ff4
SHA512 ba9c29434df2aa4fa997a4eba61e1ddf2f24afde17286cbe418cbbfc60d00310e9ebb5466343c5997fe1e14eac90f8fd0f452271bfb1cc0cdd402cd8661b45c6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_3

MD5 aa1878e05cf53fddb8708df0d24b673b
SHA1 487047bd606654764fbfb8b6ab4697c414708c15
SHA256 a98eff907c8dfda644a12ab6ad40fd025d94dbe053ddd5d1bb0e65a44698d92b
SHA512 699c9349de1963a0319009a3e12bbc357e9907cdeb178832799366b3ff674f85bef21c50c7d772935e123809366ce4bda3b0425b26127d15d931276f0795b8c8

C:\Users\Admin\AppData\Local\Microsoft\Feeds\Microsoft Feeds~\MSNBC News~.feed-ms

MD5 5690ccd89bb8f1dab017269696b4c1a5
SHA1 2efbe825fe213c20f8ad73d32cb0b5ba1197907f
SHA256 3a3ef9cb40bb581f6806d9c6df1335334ca8e7a4a41dd205570dd55f9545a8e8
SHA512 d8d9c566f26eb1704b3ca44a6182863d2119d9fa2a9e01f40b9bdb18329b6a57ddc920e6392924ef5690f45c93b2082b7134d0ae3f30d875441718b4f0bca26e

C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\GKATPXW1\desktop.ini

MD5 31f5b0999a8c1649b75729f468df6cfa
SHA1 6e1862a179ddb7197658fcf7e046e47af0d01744
SHA256 a02694d900163a9bdb9c4585cb8519a37d07f93168e08aa9f98347227ba05494
SHA512 d0faef6c69267758f88af609770ceb9a3467ada8d02c14d9f47427866930b87135edef143e177fdf67be9768c6b0e322881fdb11bba20301886e23da8876a295

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Desktop.ini

MD5 fc8e21eaa6bd87033eb75586ec224190
SHA1 c3386d121a6f47382b5a6eb74c13f5ef586ab7b3
SHA256 951bee2f6a82da76095c2b6cc8f106d0dec9553671d3a529e2edbf7c84b163a0
SHA512 90f6ab9dfe12b73fba315fecf22dc852f7a677694c003c977529251d52d2cef49c294fc502dc98fdc64495f81d7358af38c42c37aa090176c3008ed575fb9e88

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\CiAD0001.000.EnCiPhErEd

MD5 0dacec83416858e460d3c80c2074ee99
SHA1 8722893e1f5949896e57e7a1c00fea80c649c3f6
SHA256 bc3544d895ee358e82f2101e8f94a61a8fb8fb1c62b29ecbd7a3e09b8550f17a
SHA512 5de2ebd1011b6b6285539a24357aa2772f36f26c96a7324b9ccef59a4bdbb3213ddd41401284258bfe4d2792818d537323c987a29cf247c927827d6c0afbd9b7

C:\ProgramData\Package Cache\{662A0088-6FCD-45DD-9EA7-68674058AED5}v14.30.30704\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi.EnCiPhErEd

MD5 7a0bcda8c8900ec5c50780067f33cf19
SHA1 e4e0d2c4f435a5e83c3d5f1aeefeb72c69534c9e
SHA256 1af3a54ed00902160f389869ba7eac8c228cde0d94d31752e25958d15d8055c2
SHA512 59a1db3319647d72eb0a65539b9ab6be4394eba01c91a80ef9f8f18f5f51dda8e88e16eda2f235e9c51ab294064b90be09d5c13a89b10f81051dfbd57d882a52

C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk

MD5 c9c1e3ae30cc19ce3cb4c56deea35745
SHA1 cc0a6771118f5324e317e6a64d72739de5ebb940
SHA256 03b96b2a720a51b1c8ab75235547279f3f960ba4b672331a3e143470773fbf7b
SHA512 ed5cc26ff8e16caba7c9e7f5e572b619c9e37a12d35f590a64c0445f1b2fd6548ce1a579c160f898442b29990ac25e1fffb0f3f6d8bb788a352a48f39f8b7005

memory/2364-24214-0x0000000000400000-0x000000000040C000-memory.dmp

C:\Windows\inf\.NET CLR Networking 4.0.0.0\0006\_Networkingperfcounters.ini

MD5 a89156184dd458f6851d403ccd2839bd
SHA1 fb175da9820ecd42765927fd5d67a3a126838caf
SHA256 1ca23bb739f82909004adfbe178b5e69435655d3672f7d18ad3a8e0d45255f12
SHA512 a4b3ee98dd58c78d880a39a7069a74321b92631c34c0fa52271e8fa3ee7edd8d19af20d783fb522cb4760747e44d0f7082d1f30bf5b3766f135aba397891072b

C:\Windows\inf\ASP.NET\0005\aspnet_perf2.ini

MD5 63f0e0df5b9b3df467327adb5cad329a
SHA1 7a8c7c09f155158084b1102495ad3fe6a41f363c
SHA256 e5e9e36463bf5ab6095bf5c5d35ccde98e5b59ab2ba561a968a9fd07df7fd7b3
SHA512 259782f674cc7d0d6848d64e5e8d0d4f794a2ddae5668ec03e3c411d60961873192a1f4ebb1f27ba98b0d8696ee508a294462c5b4691e52fd0ddc215ea235e18

C:\Windows\inf\ASP.NET_4.0.30319\0005\aspnet_perf.ini

MD5 c3bb821dd42b3b49a7dd46a3453fc509
SHA1 170f94ce06e50471e9abeecdea291a708c2fc752
SHA256 07d1fda65ee7327e24d9da7d4de87cf238fd748751ec8e51a769a8ed00948548
SHA512 1baca730d395af8b3072eb7f08aa1377c695ff0564b2e5a5dbc313d753d0170db18b7afc9c8df0581f4c4f33d6382d64c7be624091b3fb0c8c172ef0fdd0414d

C:\Windows\inf\aspnet_state\0005\aspnet_state_perf.ini

MD5 6c0e6e804efec9d0e28b70682f8b6aeb
SHA1 963d8a9de67c1a0c2a9a6d6127c5b5a231fbd9cc
SHA256 07471e14a9b94879047dac051243e45048c48b1403f0d19ab13047ab4a601ff1
SHA512 c60fdb20189701321e959e77559d2e90455bd0e7cc85194fe782978ac18c219518cd1011962b2c7c0b11698c027239b6547b834ccd9cc9c88c9a2f1b4ee7b054

memory/2364-28088-0x0000000000400000-0x000000000040C000-memory.dmp

C:\Windows\inf\MSDTC Bridge 4.0.0.0\0006\_TransactionBridgePerfCounters.ini

MD5 52649bcab081a2e5e789954f10ac4334
SHA1 941a9a6c3d46191b80f5b8c0d49f3c3f07548f03
SHA256 8ebc17b8b725e7945f94c5870037255f4b42dfa1c6584dbd731fd659441bf478
SHA512 6228b0594a08e981d711b12d7ebdefa481c7ad655687421b67c5b6472daaf52507a82aed09f2d41e14f9962ac9110941fd49f3925c91ec59fb8e191c3202a48f

C:\Windows\inf\PERFLIB\0409\perfc.dat

MD5 e1618e25c83f729df454f5a90cd8117d
SHA1 42c7fc89e1aef298c72ca6cd5fd30e83950486a0
SHA256 116be6b000b86481f41b1493e5b4048fd037048cbc56b9e4d2df806b73e67dc7
SHA512 eebc7be8bdea59e22fc4b8c8a772ff136bea1dbed3d370ac0310d495812210f36436d25cb8eb5f6c0e568cda71a41d43b55a734bab91eb2f0e4914a4a90230f3

C:\Windows\inf\PERFLIB\0409\perfh.dat

MD5 d24c71a105ddfcc6ebb9e51788b7ee8b
SHA1 7c78070141a55bb78e3fd1610433856f90fcd7cb
SHA256 e13d5a3c3397ec7d4b3d01b0d72b7e7db3a4938daf3d60ab2123ec67ec3d9a92
SHA512 7264babd9e5227eee0c81fd95c7c7b7fa417dcad31166ca0713023db956a7e4c8155d5ec4202e1131a7b64a635cb05a7e4e71f1d5d530cc941e626ad0126a3c6

C:\Windows\inf\SMSvcHost 4.0.0.0\0006\_SMSvcHostPerfCounters.ini

MD5 bac5bf089d06ef239bb44adbf919e1ba
SHA1 19b03b2d31f95652a9f26892df2b84058af3d21e
SHA256 0b1b517dfc4e4a92390abeb7bc20569b3ed561e9568f485105b96fec24bd0812
SHA512 87d5582d01f66edf2e2782f0be82dde7b562ac6ef3b1bb202959c5adb226fe493310b8abb1d8a3aa3f8fb9d11293c7a73b4f52cfb0b7972943e7d76dcb396d54

C:\Windows\inf\Windows Workflow Foundation 4.0.0.0\0006\PerfCounters.ini

MD5 212e444da6c2ab45910ceaa0888a1db3
SHA1 4191105925105b4fd39846f0f59479df05403637
SHA256 9f76359686d01fa6ca1eaa1b57e551c1dcf68c7920ec441f320bed82fea4f7ec
SHA512 9c0c41026458e927a38b9e037268750892e88508f01679fbff5aedacfaf1e5005f10115586680eee4310df703d61dbf341a3f2b94492a892ef0f0b3c557f02a9

C:\Windows\Installer\35cd.msi

MD5 cc971dc6f3122ec382c995ab7f6a5c29
SHA1 5c9c6c558f5f3790ca549f7ec6eeb3805f06bbf2
SHA256 27d9e20557ec7a192a923747f5bb5129d100a611d8255879bce78d1576fb1f0d
SHA512 0d6d533e3315123ec7ba0b46459763de8dcf70fd32b6243419b265cd52c5e1daf615560f784ae1a6f2252f9dd2aab8bc23c9761e70c5c40ac7c9c1742ba0cdaf

C:\Windows\Media\Characters\Desktop.ini

MD5 4a76675b13a09de50e2527caeab4b849
SHA1 1a8676e93df6525835283c3100a9ea3cd5ccb063
SHA256 0740ada46a4717e1bca71027d528834f4cd231c6985048149d7e1167936623e8
SHA512 bb1ce0168e7f4569d643d6d858fb26f3a952e0c9611b62d1498b4da7e6df41fe63a539cb7b17c8c278c3a75c26f0e6b3e89ae159493a2b418106cbb142ae3687

C:\Windows\Microsoft.NET\Framework\1040\admin.chm

MD5 8c5227b92afd9453dad5124047bc5a81
SHA1 2d433d558c2546cd25b0187922ef8db012ea3b77
SHA256 333d5015db5ab8c0ba9a2fb4a57245083b49b0aa0c3a3e59460ec0d4c1ab3806
SHA512 45fb2a82b42ba2c8fa53d05064fd823909aea7d87f261845b6f909672e70fd0a9da8956fe1bb80d5b6b83a930dc00f5d10c6d96589c98d2f839b5ac9ee04c31d

C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\it\ServiceModel.mfl.uninstall

MD5 0e6454ee5f4645369301cd73a5fd9a24
SHA1 877b41f028382bfc842131acb1914853d2f05e99
SHA256 386a81bed8de4e30ec1cc6737005d47e5d76d2398fddc517e9ca514149ae15b6
SHA512 4461d8127e106a8f598547d6ef73f60ff20fe73ead5ebbc289cdc4187502d11399ac11d9f42cdecda919955fa0f87720f9f4951227d1bd8fa41f2adb36d8a3f7

C:\Windows\Microsoft.NET\Framework\v3.5\MOF\fr\ServiceModel35.mfl.uninstall

MD5 30b4a9ec76aadf49b5cf51b48c07ba55
SHA1 2990e3f55d7305a1570cd85473cec60f647cfb29
SHA256 bea4622debda4f4ba2bdbb53a81c3bd1489870aa6a696c9b7b4536055bfe17ce
SHA512 f58650c903aef7af8577854376f559f95301c9c5a853efeb376b8177541e7b3ee5f4843e7296e38f3bca368fbdda445b38ae607d33edab3b0cbe240cbf66aeb4

C:\Windows\Microsoft.NET\Framework\v3.5\SQL\fr\DropSqlPersistenceProviderLogic.sql

MD5 66e8526682ab816e8b857614a4e0f615
SHA1 a8b96ded4baeee67a4c08fc61b9c0601eaba5346
SHA256 3a7594a74bdf96ba130e7a5817af03696f12c6907fde608937061f1e8c6f2494
SHA512 ad64e7e6913772787f7cee632f01f74b6bf82dfebe12ba23b6e89b146b2b0dbb7f268b17767b2657549166ba8c82a6e8f5623418bc2878b502df08bce63aec0c

C:\Windows\Microsoft.NET\Framework\v3.5\SQL\fr\SqlPersistenceProviderLogic.sql

MD5 592fc4cc6b28c5a4ceb22dbb77ac0e48
SHA1 f56c82e61a827e2abc5d2d05666882ecbdf4e930
SHA256 0e16da6fdf16c5e2c1361145df7dfcd5c40154e27d0d69d606815fd31a8771e5
SHA512 e804eaf6d85df861d0bf905210863feec5c7c3cbddae6537e4348b15ba1aba0a687e25ea3deb8c26b5396eb37aedb983ca1b452dbf06a19355877a8757f4617e

C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInUtil.exe.config

MD5 fafecb1b0c0dd9d78330ff0f05bfd750
SHA1 3dc321842877ba5944eeaa6b5aebb20e90556e22
SHA256 66221db5c6960c6b16fd03403e72a17f16264263eed7da0d4c1004b2f1024d40
SHA512 2bd223b0d713179cdede68d6921fe21c0cf575e6a78bffb78e7d0682254aa32e56a19a1e29f1b6c50ebeef0534a134a061a4a9b855a02fe28362d3fe37dca806

C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_perf.h

MD5 6299590d08ad580994ae6721b91f8da7
SHA1 e0200b3cb1b701db8204b5e84588fa3dded06641
SHA256 b27afe59df5b1d9e3546d21e4c5471427b24aa7b8602f4cfca2d206e55a1fb3d
SHA512 e8d94caa0e575bc1848977098a25da38ca6ed19a09a9052a95072643d74a1186a47b91bec8d153f14bcd38dcbfaa386f6c743562eefa80c4d540f8dc690377c8

C:\Windows\Microsoft.NET\Framework\v4.0.30319\normidna.nlp

MD5 1c4da2f7f9e929fda0042ea5aba718c6
SHA1 6a6b013fbb9e95a0ede546d8ed50deedc925fb1f
SHA256 e8427f22ce1984425bd012d053ed00d3d97f42e6543585bdb25e02d9178584d4
SHA512 cff28093b2050430495fc5f9df9cebc4fa855797e7e9bbc5659e9dcfc1d8dc7ec82895fdf3ec4d3395133dcc42e6d00a7648dc8ad2ab992691b6da7c6cc74da8

C:\Windows\Microsoft.NET\Framework\v4.0.30319\normnfc.nlp

MD5 50d6a3e863004f4da5386d0f944b9edc
SHA1 e468391052259e0ad1b3f745df8790d2c09e2606
SHA256 171648c1773d44ca24ed2539c92e16d986e96e7c8f2a494725bffbddc4ae56d4
SHA512 f9837ad39c5ded78f51f2d3436de7558039f8e3ed55cba8cbede10a84cf9206c33f1ee37804d417c40eeb6c717d6bfccd8c6d2017c3b72254152d77125d0baac

C:\Windows\Microsoft.NET\Framework\v4.0.30319\normnfd.nlp

MD5 8346b6e114fcb806c29aaaafdc2f9120
SHA1 1df063d5f0dd2ab8e47b9b8d0c65205a76156306
SHA256 ac1fd4adc338ed3bdc9e0ca880292f8ec6614ee2509b491bf9a69ac1e74c0328
SHA512 3ff881c4780e34ab8c547f08213b2dbd8e87ee7a8ab9b636e09d2c13771c397248021194552c12d17e512d7d7c2451eabe46333e1193009b450f1c4aefd50a45

C:\Windows\Microsoft.NET\Framework\v4.0.30319\normnfkc.nlp

MD5 ea38400b5d643a9dd48d91dc00b6b42c
SHA1 45b2888643c4a560958096458c3ce109c418c679
SHA256 a0a39c0337249fe7cef01cf8ce0a63b4020abb2a6976f30f04211d716b1b0a62
SHA512 ec6f0c770ebbfdc40d7ba94e2ee826036f6b31c90deff5c4bcc5846035801ea4b9709d5c61939c8452c38e07498a4d7b77d48810eb7ac0b37987da51ff137407

C:\Windows\Microsoft.NET\Framework\v4.0.30319\normnfkd.nlp

MD5 b5b03c284359c1232f365ef1fe37ed0b
SHA1 281660735ffdfdee347f47fc36a80f526565b77e
SHA256 f1f596fb9ce5044505e839837dbb098e7424fac602fc9fd514aff5890380ebf7
SHA512 36e9256f0398705d9d2d10482a520e6d551288cd1f1ab42633d404ebf20e7af4d8162c2aff6434974933a5a2e75dd72748d2147a0afef545325f665d652e91da

C:\Windows\Microsoft.NET\Framework\v4.0.30319\PerfCounters.h

MD5 151be5b0fe565ef9822af0de09c12a74
SHA1 651ece0e22888bc4f5d593f50b5c2038b2e81e2e
SHA256 8d15ddf76c8d26b66a1da08c36eedbbe93c96197cd8d46570a2e924fd386d98f
SHA512 3a529d1b5b5bbf9f914801e5f2cd0fd9a489b124c7b621a0ec93c93e60973b7bbcba5b9eeca32cf7052c9d33edd2bd88a86a07266df1220b5f556fc0b20c50fb

C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\NlsLexicons0009.dll

MD5 89fb95922b3925cbfb7f771b32b70c73
SHA1 03e1ee0ca2e2bcc38d950fafd1689fe5650a8914
SHA256 4e20dbdd38b28bbc5d2ec9029eefde45e9432dc431a47ba214a615046864d5e1
SHA512 7f18b17f0538ff961f0415a340f7671d03b8e7078da93b418d3d6cdc0955637507b4defc9deba96c8d4c294126f15848108327ee4868a3339b745408712858ba

C:\Windows\Microsoft.NET\Framework\v4.0.30319\_SMSvcHostPerfCounters.h

MD5 dc1330f04931d98887aab863ba15d058
SHA1 83c1f91dc186e171562dda973b894b9fd564182d
SHA256 f1c77e2888bccd02f9f74ca7798a64db75fd15d0b54d74909e850a22ee08f895
SHA512 16e464fd7e6f495318733f1cc02f8172bab9a43244198a986c01f64e6b101b69cd9d0bcce97d3657b547e7cbb6f35018c17a151756f6094b9c6e4b4c49b07b36

C:\Windows\Microsoft.NET\Framework\v4.0.30319\_TransactionBridgePerfCounters.h

MD5 3312f3ebc4d9e7a68999df052e6af610
SHA1 7e5ba1c4a6a7c401bc32757bb6aa3c84f3c5efe4
SHA256 259bd37bce29198ea627e62075462bcc4f464b6276816f1a5bcd09281596f33f
SHA512 598f86bf6e754c3bc877c80e56d9b2527450de9013b8876168a2eb2e4b228689a268174042e0a07ed1c891f98c415af7d248d4a44ead9e661e5b550c923b7bce

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\AppConfigHome.aspx.resx

MD5 5fd27befee81595664b0ceac7939b8fb
SHA1 e864aa514979a010045cd3612e4ee47f48bfccea
SHA256 384e5139ab3711d678d8a205c247a93028a3d8d6d6fdc250c739eba297435ad5
SHA512 7aa79b3bd1669a4ef6053b137db93c9639df22c32270644910080748115712c546475458411284b8a5cfa248e119e70c77c71d37b6f784f151f8e96a008ba463

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\AppSetting.ascx.resx

MD5 6f8bb235a6791e1d03855c710ffeddc6
SHA1 2415b7ca288d0ab0f35335566dc29ef4269cf9f6
SHA256 9374dd9e202f6d2d3b376f1d8833d7bf6a3933897144879d3e2de8d7d68b8929
SHA512 4c21b8bf479c062abc7fad67f92dbb9056f88de82b676b7cf0d68a56ad3322912a776a51b36eb9abf80adf0768d181dc9752593c4274852200dd54724b704e50

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\CreateAppSetting.aspx.resx

MD5 984c97c9b59c791203d66cba1b88660c
SHA1 a3f9ca2df9c159759855ed6c00db91851cc6a8f4
SHA256 a7c966cf02423b198c6b922c001851282bc4aed271c53fda103576a9bdfe6b8a
SHA512 e55dede38cf20f021cd91a60e3c008095363ce60e3495c667b637558018753b8ddafcbcb8b271b95a7a44e7793ac5073d54789fcac0c782282892c0365726695

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\DebugAndTrace.aspx.resx

MD5 93924541be5442201c3b9c564b54039a
SHA1 19e71f53bb97da6e24c321bde8ec6cb1cb73a5e3
SHA256 717cf6e05d7d0549a24f49a679d72ed446e568a8223ff9b14b343c2d3efb70df
SHA512 bfc7b2d162069b0255e30cba75b0924600046f0051979525329b6222053e13a66006fe2a4b08d33faeb4a8983f24177e434ef94b8fffb41d3af1292f88d1e9f8

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\DefineErrorPage.aspx.resx

MD5 0d843636d694a18b9789ed028b7e3a42
SHA1 104c9f50dbb2ef6fb983999571b6011e4d8044e5
SHA256 4f62444f53bafff29aeffc98771311cc9678e8a4fdf702b0f1060cc64cc5c0bd
SHA512 68cf3fc452b489a03bf7f5a871234995acc91f13257802b48b6740a8d5d9e28767d4a13c428c83ba994b9b70caceffd2ba6f0d7c517d01b916a640a957c19520

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\EditAppSetting.aspx.resx

MD5 003a41169f06c2ab6942867b2f4752bf
SHA1 4cdbf8658f133729d61265161d2d012c64587ff6
SHA256 97619063786f696a0766d90a605e1b2df61eb902d6e4c0ba34189ed24643ed6c
SHA512 cc3dc544f2f0a349aa09414ce5524a5574ec6fd996517cf02083e299763a97579289af4d5a4c9ebfacdf46fd8646fcdb8e6f1e218a4c5d224b2d045e0b8499b7

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\ManageAppSettings.aspx.resx

MD5 dcd31c6f9cf8d5a50f43efad50c0de94
SHA1 46ca1acf66700403efc9afbe021e2054e0fa804c
SHA256 a25171483a473c6ae3f16718ec1070f3aa3366065d2951c8a5aedf1f52394d93
SHA512 47ca3478f770b3c33434beb0c4ddace3dbaa539819de82671442c03b0bd0eb6c9e951b6ffb9ac206b07807194a2d58ab770798eda4d3ce8f632e71fb43295629

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\SmtpSettings.aspx.resx

MD5 f74f79ff672178e3ea7fc9d4bc1f98df
SHA1 08d28c2545b7926f8c2722ad19c5dc3a682f5b2c
SHA256 d3116a725965958b00c90362a7e1011133ce992232cc06001d964fe7221a764d
SHA512 e079dcb3f5632301c364b0104b7c308e495597a6d176e7537d4ead618987e12dded2c4ae9ba6356f71dbb3bb0f19524c1e1dba7f9830446f6d58a408dfb2d693

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_GlobalResources\AppConfigCommon.resx

MD5 6d9edf64ed2ed0893005451c22ad5a31
SHA1 c4272cfd08fc2eee81e0cdfe6e854501b7096635
SHA256 20cef277633fdd5bf08d636ebb7fedf988ba154eeeeab4fbc01270fb380583d2
SHA512 005b2d60016ebf64bba9959a166e46858234646caff27e43a240a6c7d53ce44bbaae460675f210e97f69fe4fb3cc4303fe01f937434b50828458bb6383acc340

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\default.aspx.resx

MD5 235d85f4a0faa9799274ce954ed09212
SHA1 6d9e6947e615c88f9da6dabbde25b15485b23e78
SHA256 c84afaeaf674804f7a6aee3b03f290735996f02b103c7a904accdd8edb16aafa
SHA512 4b60206219d98b49f610c0b1d2f7b7883302fe1264e0e92a01c6e7c9b72fadeb49349139f67684a27cd43e07e007cfa51ad4a86325acdc212ca2a8edbf30030d

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\error.aspx.resx

MD5 5369a962399809904135b26374c56646
SHA1 c1922092f1c97034804c2a7aa039506b8dc8d201
SHA256 bb1304fc1ee9fbbe255bbb1d2ca52f441e5e35023c2adacfdd5afb7f4f62c8d4
SHA512 e4ac110079d21e0254435d6b3d8a5d2cbe14102c8095aa113c95eabf856321ea6f6f192db9aa13e5b1393bbec5495c00761294ca3e1611b4cce206a593a8b175

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\home0.aspx.resx

MD5 5d593b4042a18a9a50bceb9ad4681f12
SHA1 cd495a22600bea8df249e00aa5931d1090dbf4b2
SHA256 840985e34c7f6b1aec5477cfba0c6d019e297b8a8065465f812abc9673508784
SHA512 83c3a88a171f4e3e3fea9624947534f096a9281da81d8db1f8d9375c6e42c6ec09fd55743ae9635fa8f8e4df6f0c78d02b82dfe8bb20ca3470a110da842c1181

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\home1.aspx.resx

MD5 c8ffb1b3b0adf0912fba11a02566be0e
SHA1 ac89601e1715960350c303c08b2fcb8958b76d9b
SHA256 410c383c0c60e791ec0bfddaf100232b6d327c8601b036171f61f4cfea33d190
SHA512 e649adecce8fcd7711c667e413697966d8b0f11451242e540f92ed0ccb4f62095c98d344daf3fd5ae106f5ed56885106b2df6214254e66848c1cfff9cd444e56

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\home2.aspx.resx

MD5 5bfa015bf0b35b5b0944eba3bea49378
SHA1 f44a591f08c028d3cf72f710c7355fbcbc3a5c3e
SHA256 f3880456eaeb490e14e3ef824d95bc0845350d7081af54b677f373d0ecfb862e
SHA512 d173904c8be8ba8bc5361376d3e595257a8c493545032e1fce37d36f65427696961723951b4532a9a40ab24f3a3f8f0545778ced47a24c81a72d7c316572d7cd

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\navigationBar.ascx.resx

MD5 cd9a901d124b61d2b521334fc65c2461
SHA1 54fae4fcf7c6479d6ef43ba9a6c0161e64a175f3
SHA256 0a62bd74522e2899b2e555ff8af31f2d159c0a9d1e9fbb075e459b138ecbf541
SHA512 8da215d57c3e2d3c90ac3ca09b46e25bdb9abc6fdb6e01c18aee93f2fa323e76fe361305b1bd6df1d7624600d215963be758d4fd4593aa8eb32d3c0f168159b1

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\WebAdminHelp.aspx.resx

MD5 7be9c958c5a871ae4bdffd741a6dfced
SHA1 ba707627a9a84314abfab87d76d761c868d0ab0b
SHA256 10cf85fc34f106635d505064ddc606c5a613006f03d6f1c676e0ef3ba445607e
SHA512 a1d7ee3bbc21fe92364287b7ecc3d66f6f367ebe0559caee5bc180e5a594ca0c460a74008ff49185d8146bcc936a7090d5904f54c0bce7da802116e61873eac5

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\WebAdminHelp_Application.aspx.resx

MD5 479b930e73531d8fb19fa39ae5161cdc
SHA1 f05766495b33085dbc89f3cb7a807049cc451f42
SHA256 84a3a5078c15f1df1da8305719c2b2357aff496c8f3509e6c96a95bae27d0f80
SHA512 5243b2fd799b990e55f187d1af77f7ac8e2bba19471c66b68add35307f477a443e2204465c221cb3e26f379148fe86f91670696983662f20bcb5b02e607e5107

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\WebAdminHelp_Internals.aspx.resx

MD5 cad975ee576dcc1c6540e9fb2909bb34
SHA1 3628dc7209598846224d1f5abe01b0cc4485aca8
SHA256 f044b868dec40536ecf2acb7dd1ae8e9ed9e054e3bea5cdcd1a9b79630d28a61
SHA512 c8efedcf7ad5e7927a63086c0bc07e74ef432c93194948d8245dddb4a75802ca16aed6381d457de78b000ab38ee57cf899f2f4ad3a27ad953aadbedff495c244

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\WebAdminHelp_Provider.aspx.resx

MD5 c1f761e8cbe301575460b7af91f230a4
SHA1 668e0c9ea83edebcaeb525cb5cb617247b4ebf3c
SHA256 28c3da2e820a8688cfbcddc90364bd2a343fc60499705800056180a7abfb6d5b
SHA512 82542372d9f8543364ed4270f5253c6f7e2da672b609140cd56ce96e70301b5ce0618108e2bdcc51162e5090dceb9214024204272121c3b716e104e4021dfbb0

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\WebAdminHelp_Security.aspx.resx

MD5 55e3f2b49f1b9019702194db79222186
SHA1 3ae21589af5f8f365dca55239bd52fe6eb31b4e6
SHA256 474be842bab15ad5259e84d8d8a0e0f8662d468621c385d5923f38f9d3ce4502
SHA512 3bf1af250c4cf400a420b175827835f6129f49faf261b954b9fd2d69c6c1b101c0f712c71fb413d8cbcd270e3b8f6dfbe2e69555234b5b9db37913545af7137f

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\security_watermark.jpg

MD5 ea06c4fe8fcf872f02db7d7ba6ddcfcb
SHA1 c50f75e98eb4676614b437ed964640352369b6a4
SHA256 b376f7214414cc7a55951948ef8080eef4f1e3ba0fc345ff764d7073619747d9
SHA512 29421fb63f39895185136497a0eaf0a3caed86419a6b1f815ef8bbde173bf06ccebe34e0720748e35fa4235e23af6e1ef78632f669675671205c6da04237a51b

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\App_LocalResources\chooseProviderManagement.aspx.resx

MD5 fc842071660d0856d0e23a121e09133d
SHA1 36b7c0d8e619217da0cd884dc7e604233af8d29c
SHA256 6e021fd755f71fbfca645503b2942a32efd63dfc901b293d78746c26a1978140
SHA512 0377d0f1f3e58d2834f495d07c228b7e7c5a720c89463570b06b507b26be9c337172b881df708bd8bc71b3e222a03b30d403fcdc8fc7372946aa084b022ca69c

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\App_LocalResources\manageconsolidatedProviders.aspx.resx

MD5 162240ed7ec0b19316302ae8a96a0ca0
SHA1 b7de34a1a73f5eb7d8df86eef35862cc90179798
SHA256 ccd3e2478538711293f6437dae6aa7257b4458ea40cd0c5aa4fab6b44f1ad3c3
SHA512 2aadb5eb8090d1afb42b86e5d6b0e0b73f9ea573c94e2ce703a0b920d41f9697376f8d3676d498ca5849ecbf78843941915cdaeb2406884fc309b2ec48d69169

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\App_LocalResources\manageProviders.aspx.resx

MD5 835e8f66c2f77f009f4cff664fb47bfe
SHA1 1f234d771995d44f40c1b1609170cec5a29c49cb
SHA256 79afcd03111db67895223fa45e58cbeee84c6a3999434535313f9b4ef73c8666
SHA512 27ebdc2fd81aed474f737194f419ff75cfdeb2aebfc52eaf937ba46cd4066a96aac25c0874cdd9a0e740cf59115e79f711f0f2e51091ecb0bddbf7ddff2037aa

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\App_LocalResources\providerList.ascx.resx

MD5 acdbffd970831acaf52c8e4ca711068a
SHA1 b94cf92c87fa84f83b72baf619afd75ebede053a
SHA256 4a088238bc94cfa5a6e485e044d0a666786644c8d2e0148dc8e564d579c58389
SHA512 26bee1c611cc8d48101edadcf8bb70370e5ae2c6e29faed577c73ca1a5409cd7ea42fb857468d7dbfb5c35b24e0f535622a7a61c7a3ec9056c11a2fbcf986866

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\App_LocalResources\security.aspx.resx

MD5 cd2db7e34425926b18b07a61f7b91a66
SHA1 98d11b326e855968db911772769ab8200e586380
SHA256 11da691df5e22780a301f8574311b7ca7375406e27c261b7162e83a85d178f07
SHA512 14a08db9fa1331b9d57c927f0b4b02930f437a46c5c3b9abfdb69549f876c81f24a5cdf9e1d144bba5e2f79076ff93f01c97f42c6b4022dd35e2d31370c5608e

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\App_LocalResources\security0.aspx.resx

MD5 9978b7072d4899415f0dc4d138cc80d0
SHA1 8f9e70d3a438325e3322212ae8678a5e80e60ba9
SHA256 42eca24f798cc47d7e5323ad743732dd6ebc31804cf5332334afe6e0d205f6f4
SHA512 4f3b7657e08f2b817239775e87b73f7bf16ecb1476c5262043ac9767008e134f6ea50eb7023d80b8baf39c80e3e0e1dfbaf6db1d67e08606a063aa33880c20d4

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\App_LocalResources\setUpAuthentication.aspx.resx

MD5 019a3d5f525c8694ef26dc5152103399
SHA1 d650825b11f8db966fd88432cd1b1fd22618acf5
SHA256 96a10f995e295ce0bab86f8c010ab2c7fd3f3236c542d54a12f8cde415c4581c
SHA512 ebb902a4d922ac54fe70ed688296e7ae57ed2c3a3c2d0098b0711877ee6089a14306048abddf92cd66cb26d4647b5f0cdbd8dae072076b88095489286e3d298c

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions\App_LocalResources\createPermission.aspx.resx

MD5 65fd5439746c6e94db7e74fdd48711ea
SHA1 6794deb73ca28f6f0be6eff640598a682cd8c78d
SHA256 5815188e453ec7054bf0f431de0ed8de3669f2572bca701610a9d5e3fab0d1ef
SHA512 50425b2e2ef6fa54f63151f0668a32cfc3b478e33f1c08a3f1f7e13227ea4d1f2835775cdf2f90d7f8b284b60e4746fb39865ba0a8865e605f7fbbe75bd2d38a

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions\App_LocalResources\managePermissions.aspx.resx

MD5 ff6d7768988bf41908c3627522ace378
SHA1 261e3548230bde5ca3395493f2fe908e3dea5d35
SHA256 cf5bcb0413f9db2e82bb0f137e0336c3dbd8996792916e077a0ac37232be560f
SHA512 7abe8cba8c43ee1c1c7a9a37f537f926bca2618c74a3e79f883b45456fa1ed66d55398b3064ee058cdb0c6d2bcfc2aaed96d8185472263bb020bfecf1a205f1f

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Roles\App_LocalResources\manageAllRoles.aspx.resx

MD5 ca32aba00352b2d31e6a62f6a50b590d
SHA1 e8d27510c2fd8f8267f87c76777273b7c8d771e7
SHA256 bd612e9d90556514d7a94dfdbf0370203246f0cad496f5afde3a81b2ee44802b
SHA512 0784a8cc057c00060d1ed1c5e7e9b3a631677e387ca02614d08d365c2679668cbe344df0885a5a2df65c0144be635478d440473c90898334efec4dccc6efe806

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Roles\App_LocalResources\manageSingleRole.aspx.resx

MD5 c47d18de57a8d3310ed35f676c4fcec5
SHA1 bd5b3134ec89ec6a04509b0b07bab365916849fe
SHA256 4a4c5a2f4f2c66ce60c5cd4ea05df2cd7e03047c560ce2c1445fd5273cefe792
SHA512 1a9bfdac5a6e04fd9ff44523ed7d155df12dd2249320ee07245e046135cb23c183b250849fc11d119cc40a0b1679abb7527153ef291a77af0cc1a55208eaad6d

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\addUser.aspx.resx

MD5 af5bb5a2896686ef16636b4db378c009
SHA1 1ce04203b530ff3ef7f5b943ae5c195b457f1b86
SHA256 e627de6fc6f2f6851b2ee9eee118bae6036bf6bb3b65a255c65d720abe66602c
SHA512 0b5348710dec8b43730fc0a058244785a3b0c97e7cffdfeb96b51d59064358e8a2be5a2603bc80884ff3d1e9de94e8a7a9685fdf5e2ba4da938d170538479afd

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\editUser.aspx.resx

MD5 88bd6b27bddb189cb5047a5a26c24da0
SHA1 76ff6dbe69f8fa8bf56e8dec46ceef18cb7470ff
SHA256 c2e0b84f02530ac336187cea109996654f306bc3ebdc08088d2022cc675f174f
SHA512 e0eb71726041b255ceef1e72841ab0589a6f2c5cb3e27b832b02e169483a04b09516a48b2510ba03e54ad0f0d3bf2d52da0da9140e6583fc78d1d2ad5b3defba

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\findUsers.aspx.resx

MD5 6deb97e2a64e30caacf24dadfa029b93
SHA1 62a42324b875a03bbfda2dd95b13213d948f09c0
SHA256 b3bb948ca951f68bf30e35e6dfc8c00fb3184950e31a32608f31406f9f1dc238
SHA512 3202d8ae74d714aea7e2c79a961e8df79172cecbf8cb3b6409702688e46dcf953529e53da551e02368dcf7c1bcc0c4ceb6dbc7d02b46c3322d552125fc9cf4b9

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\manageUsers.aspx.resx

MD5 73cd209197539d567bb841489e8e6a6c
SHA1 292618f51683f901bdfdf2356ee7b7ef177e54bf
SHA256 3662e0478e98825543c74ac1e7bc6def3cdc619a2a1d07fd5b2e19829ccf91ff
SHA512 a454dfe184a6b3e2ca14003cd82cfdd20b5df0ee2e44c63599a7dc4d807756dbcfda46dd12853321ae0dde52f9e39d61cefe2394245e397e2a2b87bb9db0919c

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\confirmation.ascx.resx

MD5 c0e43ec93a182584f8a2a2c4a8bf3204
SHA1 b5833178d655352b6839307df9ae2f7ef18aa6ab
SHA256 e689a7312a354b529b67671c10ad2897d07902319b78175eda33bdbab892d920
SHA512 797d0d56346655b707914d55d5422ebc7b61f72b2d0be4c421431a2950b72c79f9b9445d9a02ea15835e1a3354d536b261f818ae63acc902287c71d1a659ed41

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizard.aspx.resx

MD5 16d61e2bb2f34c46f020abfab263570d
SHA1 3678117b2dd617d5ea43be3493984fb2a9fcd568
SHA256 dd8009cc7d64029cd838d50ad8a0a902b085967072af7e094c410f1504e08081
SHA512 19d83b16dbfc9fc755fa01a76c33dfa57856688478e1d146faadf6ac504751a7bb2e69c139e9bf6224056da0c489d85bcf1b22927b7a576450983dbef8da0ab7

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardAddUser.ascx.resx

MD5 cbc80487ae24d3939cfba665ea40fb7c
SHA1 ddc3143421b9a68714661bb21a50bf8566f7b10e
SHA256 959c78f7c59ab3bedd37f611f6e1c596e9c86dfdc115866b84019e7fd9f669b8
SHA512 dfa3f9491e96ffa7645c96f7dd63f71cd9af0975b8d4ff6705459b966b2ea4b8193dafc01ed926e4d15baea9dbfae71dc01227671a3fceb07b75f14d34d6e7fd

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardAuthentication.ascx.resx

MD5 211c2765a167fb86a04ee1b2ff1c5dc8
SHA1 dae3b9ff8e6c7f399e499ab23caf695d1b8290e9
SHA256 a33a4fe06ef100adc14ea3c5ab29574c140525be09959e3fd9c00f5a02598def
SHA512 6457ccb5643e65e2ccd584aa221bded7ca8d0d9e94eebea93ed1c1475d5ecf7c40d0c89aaacc0df292330c0721a70a3743d420e8d136baa52e61a5240e0adbce

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardCreateRoles.ascx.resx

MD5 f1ef6e7f84d9841f3471d6326a2181c4
SHA1 ce65de8a2112d8be83f4b820186de2ce57066575
SHA256 6212fbdbf8454fa474d4010ae094429ce7f43e4c91826aa5ee2e7e70ca706011
SHA512 8d2a76aecc7f25a312ca9963641b54e4a43f83c5b365d9a8bdc9f62e47266db35f75127407419453dbadae0b10b6fad56c1cee35882ca5d7261080319e29f6d5

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardFinish.ascx.resx

MD5 6772f4c7153058161201fbfd4e3cd06f
SHA1 e847e424998b9dc2ccaa0d3ddec327cf3e2864f2
SHA256 8ba20df192e365bb3d8f128c758e1534d60e5fe3ec60648987b197fcae8e3602
SHA512 9a58f1ec6fc62203b42231eb8bb9f2a22461eeda60c1e9814e97e896907783b22479963a6645d2cec372f87ad2b85f860b4041d8b5050bae0080ab8382a72fab

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardInit.ascx.resx

MD5 cc0f768b313e57336c10db2821ca70c2
SHA1 779181ee30ca6d8111f070a72297428223d77f1b
SHA256 fdf3b8f95f9489bb2b202b8014f4964b745e4e9a6178b1006c929c65d3ad49c6
SHA512 ad6a957a88ff42ec40fcbe30eb461355303e75c610811bbcdc3bbc34a8b6b75c0a178b757d40aad1a0463c213845f238f883f49e902dd2fe699e488a7df388d8

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardPermission.ascx.resx

MD5 44111d540a615c3b06ed82aa9dcf22bd
SHA1 7316e3638f3ede02da26ee9b8f030b11879968f5
SHA256 717574b30aa3c4bdf65bf8d988ab8b165c363b0f2acf8c14a89608228462c692
SHA512 596b2eb388cee55eb91ec29081c9e2be91d3f362d67e085982db8fe07bcc8e4306f83e5ac1490758d8e3beebdb569fc1bf7e0dc1a4c490b64a015935fd309675

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardProviderInfo.ascx.resx

MD5 9169d56e74957f62e550f8ec03863058
SHA1 2e8a3d7cb8ba1541abb16fc83ab47623e85b0fd9
SHA256 731bc33a56ec487a4935f62c726ff0de7c11ec9fb5358b5571acd64dedd4e0d6
SHA512 cb6c4beebf2cce5a754f52b92c8ee1c386e8f63907817ffbe3aeeabf9f1e310f209148ed5e837ca70abd3402d0ceb112214542f104291f8be2c2bb5d4e6286f9

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp.aspx

MD5 8c412c2d2003680e8094ce0abb1335e3
SHA1 e86047dbf5ba9f1b723504810cb79b36c600fc8c
SHA256 f65892d8818f3b54fc56be892de259104febd404451d7dd54f5564ec20ec838f
SHA512 8764db932f0c84c860c4cb5172e816c41992a6f1159b9d85c77afd31ea8f2bab9f36dc3d2f1c3be798e6f8dc90df170dba72d2d87f79b5f3a3425019f3fc05e5

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Application.aspx

MD5 506d5f25fff403e67c27f29ec32a3cef
SHA1 e7a2640c45bdf36a0448f2f755074d47dbd5e859
SHA256 c8c37eb3c36f5399fd6e3e9ad9e306c153200403770cff49ef208f8f779c46f4
SHA512 ef021daf08049bd37089b98924bf103219d170d8c814e2618bd92971e9075cc91ce579bbf74ba30c2815efb22869566b63a4e9f0bc4764f126485306e9bca74f

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Internals.aspx

MD5 6fbda9edd82d2922589953aec084bdd2
SHA1 19d318a6bccb31e11d62fc82e861843074457949
SHA256 3099a9d02766510507b5701634bbd73ac6c9e7b56f5a9235d39fd3f7f0eb217e
SHA512 c3876109765e8715ba76d811de5ab93e670e21d600d6ce209539abc789ceb3f74fa1cca8b6c7c768e5d18272204a4a22e6995612fb63d07b5fa4b16439a734b1

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Provider.aspx

MD5 98c29e5447e7b09e9681d1e1685fb144
SHA1 a222c452c71368ebe20fe9a1445bc5602cdb882e
SHA256 97a421f889b63566c3e23bab71d40c3305c3fd94bf84f9554ae82a447a441fba
SHA512 73fb2b8a74bb617c4c79ae12e899e6f5139ceec4ba371dc966386cd14762c70258b34f14230242f3b5e51c505d9d4360280453aa3a5561fe0c7474590a13b877

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Security.aspx

MD5 c91d9de91bd207413fd140631d898f29
SHA1 3ff0c64e3e9e9afe9858638d164e94d93adf434f
SHA256 555878dd94ca7c0f750c0f19eeff4a87aec06b86be3fdcefc9a54add85e01bbf
SHA512 8716e67251e787f5d60482553e4aba6e2083b22730eda475ffdf5a595d53453efd88f87aa52beea0df11223554c24d19d917ffa7f43f3283a3ca73f0105c2da9

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\DefaultWsdlHelpGenerator.aspx

MD5 72b403cd7e01a4aa88965618e89cdb3a
SHA1 8aab04bcc912a2a17f0d7b6d6505dfaf59f9d2e0
SHA256 675c93ba430dc3fb0c33f057a02b80d2b6603bceb7c739601b400e8ae31b2ba7
SHA512 14763361ad81588745ab1f846cc9d17af2447c22577c4a80bec3502870b0ff7fba2d03cc8ae35d23737dfc25d8baffbe5fa0928bd677808a187a7032b59d0019

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ieexec.exe.config

MD5 978a1b170e96ecce7a846b72d03efc45
SHA1 79422833049957a220d4c250e4d9c92d6293e813
SHA256 41e8ea3848f589c5dcd0365f7317b672c967f575247286ca15378085e25f0d29
SHA512 dfe86af7d12e3f18dab7c58cd01b96b2f71067ab779728f9cc6d3ace1e44f139b476919a140d0bf22c27675b1e4d95164cf081bd030600ad1d32666391608178

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallCommon.sql

MD5 e046096dbe12713d6c73ac7da7f88a08
SHA1 2da0267e3992120bb4622db8cf2956649fbdb50c
SHA256 585653b6f2ec0808657cdd3110644deb8c7137fc2922fbf4e6ea61b9997dfbca
SHA512 143d19d30e00cbe8aece6406d9eaeffef9bfc08e787871ccf88afc42dd6e49fd05ebac941ccf04d9bf6b8ea3cd5e8acd8b93e72bb9d84f7f507f9f01ab4db8cf

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallMembership.sql

MD5 7d38d0a2e4e3e11e16b4acb26da18d4d
SHA1 8c0d81441df4b7b0998cf483b10227c6ef72a7f5
SHA256 d99ca8c0b0ca88209368c4ac4198615583a3c5c3b1e214cdbaf66f1ec5ead033
SHA512 99348f64d9df8f495a924255960d74a05f16ab3af10fa10c356e66ebac506ca0a341b03535c93f7d36b986baee8025398fe5cac29931faa84ca3febe3016c783

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallPersistSqlState.sql

MD5 0dfe70a2a8d1bcd045ac7ddf4b3acfd8
SHA1 e083757b28a84fafc708b2fdc3c7e77700cb01c9
SHA256 2120604c6947ac18a5e8ee0c46b916e81892eaec503e48fe0909de8315737239
SHA512 5121cc008975b5fdd41db380daf953c6ad1b4c567e5b74536c4e3fb66dc74fb3e91a1a4f44321e1d4f6d50eaf07ed789a3cbab6c9282dd7a167b48b66b5b76b6

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallPersonalization.sql

MD5 6b04aa7561032ef315fd9810061160c5
SHA1 b52c97ad660ac39417dd3d336d107c306c8d4f19
SHA256 a8118236517b9ed0694ccc4fe5833eee8750f6aaca9a1517f677727c95396590
SHA512 c58dbcb0d3d053eb858600b704d57fe863e10904f659874eecc512e13b0a96e8a9734c4460dd2c9a5fb6d1f1792ab36dcb91ff719b6e50fb34ba7840e5fa2c7b

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallProfile.SQL

MD5 b5d75cadb29d7a2cc1d23afa49f6f424
SHA1 5ab09c94a1750d77b022deb32e270f62009c49c9
SHA256 646d7821082508530e456a20ab57109d107cd5afcadaea950e68cfaae3420269
SHA512 2a97a3b93ac55b3c5bc8bbd91fb573064a6a2bf7c6e24b7e1274c0ede7823b05ea33f8ea89916713f9ca39f0db3d504bd490c6c3c29afab517a9b1971f75a14e

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallRoles.sql

MD5 e802b73914fffb62b49bbbbc86d8ed2b
SHA1 413a71aa10f0d5a2f49794c7e3a19cb4ac851bd7
SHA256 921c76cc127d66f1d62724bd13c7961b08bf89d1712f7708ecc420c301294aa8
SHA512 d1cade60ce3e9f8aec326c5547c883d88dc11879723a7bb075806c513c450a5019a90910e89a0fb186af1831a8608a2336d690025bec38ffb12ef8e9051d3ddc

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallSqlState.sql

MD5 f58c7a3bf2154025edce6621db6e4189
SHA1 5daaa4a0f0f90fcd1e1bd518514bf14555cfbd76
SHA256 a8a4413e39ea40aa86c5b11afd6da97eee2c792f3d51115bc557a6c6e4fd7efb
SHA512 e85811773d4048f41c552bdd26dd64220702da12f393c86f0b378f01029f33a0d3037f4bdbcf63fbd781c1f52198e7e3dfbdcfa46b1ab88754acc9e2793604db

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallSqlStateTemplate.sql

MD5 3659b789d2098a466668b5332f75f1f8
SHA1 0c3b782c6967a6bd62cde2db6ad6227b2ddb63fc
SHA256 a8faec45a30c263b2e946a829ec05e23db60e5ef88e12ab8ea0e0557fbbbb437
SHA512 af2939a3ed92f162a1daa74d50e92c3b4900a7346177974388524a97144036cfec00e582c7bd59e499974d9df2863e9af019c808629bf767d3efcd94377274bb

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallWebEventSqlProvider.sql

MD5 3dc53c0cdf23185c6782c8f33fa23356
SHA1 dde8af6d2b463bf64bbab345dd5ac7807b6da8e0
SHA256 e074a633fde6e717a4aeeb5ec616ca48a126d7f2bd45c1ae65d7318e8d77cdbb
SHA512 93953dab006c043f1837b0876029a564cf2104fcf0439f0cc5768c0651db80817caf2e6ef29ac44ef0b2a5ddcb5358b809d1d9caac8d6acbe4e998d0e0f80303

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\MSBuild.rsp

MD5 c1c9c93a8a0837d991040c876d9e7396
SHA1 e2fb51690a0a0d772387fbd428d327978380ab48
SHA256 9fc39186a977c44461f07fdd3d944c1c5473b3095be8dccc34267f2240cd7e63
SHA512 23fd488d30d6bcaeb07bbb0f7daa83dfbf333d050e3e2c6a044c226766a68d307d5bec19e5a7229e9027f76542382b4d02a2c2e05dd313ce4c393eccefec73de

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\regasm.exe.config

MD5 80bcaf4f7af4a061cc88809328c535ae
SHA1 0245df2f5a5df95dc5c791d6194f4becfc7aa53b
SHA256 c511ca05e6ba41d2a19b7e3a5ee61c100f963c480386725f4add3ed63a0a5555
SHA512 e025194a59e3033a54acbcf55a27c4cee1b1b3f6ab73924ac6d48d5cd2004798262477902986c578ebe245d716164a52c85042930e520a627ac67d55a3513abf

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallCommon.sql

MD5 22fd95051fc1c7695b9162d9feea7ccb
SHA1 b454324a0b55bb732ca8e8e181b6d07638a1f79f
SHA256 db81123be9ac2f47592c48ca538702a30250860437b79c2b4d6a320b41549c25
SHA512 5dfe3797222fb15295279e69e8592e009f8e7e1faf15986dd6c172516a014f4f9f96f0e4c68bb68861b4325be4a88e80c9d9736b879e1485d52c65eb50d35e6a

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallMembership.sql

MD5 c91089b9816f3b0b3903dce9401c1cc0
SHA1 99b18b74ff496b58b1968806f3b59f69574e83f1
SHA256 afcfd066f3cd8dc5098e7c86fce013e966a3086c1bb966624298088789780721
SHA512 5138bbfeaeec5fc5d8782aedfc221348feab844c5523f3931125c873085be50d698e8d17122bdcf3b945452bbd7bd5a06a302267407512184959efd9f9ec9604

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallPersistSqlState.sql

MD5 e6d0aec82bbc13d3e02050a02adb11b1
SHA1 3f88434ff0808e9ad2e4f6bb78bb1def082790c0
SHA256 57db1ebf38ff5cc43ac7abf931a7e7777c24afa30d17cbce7022b552b5998a16
SHA512 63487160e8ad10e871f68af571e1ba8a6729886537fd6bf3afab21ee3404003530def470792503f7bdeb0397f64033f6f0b1ac0bd3eab17a405e9fe78732174d

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallPersonalization.sql

MD5 103d0801280b1b77743a7716fda09767
SHA1 8de8793242d91bfa36867c130c076f41d0f70e2a
SHA256 78744a467468c56002ada99766a8609c0213c803b53426862b212579d615c061
SHA512 bf11f091dec34a7f8e2bfc4980b70beab865717aaa57cfc052492d4fe2f3da8a0b9864594b71aafaf7f181b00863f39edccc25ad15d8b5664f9f698aa2eb2d68

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UnInstallProfile.SQL

MD5 34bf7809a0a8590f8decfd1316949554
SHA1 564942c8b01271ee6fca6a541f64f2cc3f38f37e
SHA256 028b4d8b094b735d74536a3e276fff5f9456be77d1ad164a6a1092534a41ec8b
SHA512 4c7e3e44c89abcd53155bddcc053cae562b3a50c7cc222baff48466805991dde53e51f1824c3efa7e8da6b769da5838a09aa3b87cb5e30cd7b34952380d0ef14

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallRoles.sql

MD5 f2c021860c4cd47ffa203e2a8b170f2b
SHA1 a505b706cb0cc3247b3867a86ead8680aa8d0caf
SHA256 ab1d0faf6dde9bf3c0b7c9a1e4b8a636bcf6bb4cb469b7231ca4d7f8a83ca906
SHA512 c4a497ed5fb75fbabdde322b81f9b655090290c4f920d3a3ff8c9cc348396c7382ce667f1cd08209f2644a157e7b5e9b011f1e71506c16eb37ae9c8f68a70cc6

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallSqlState.sql

MD5 9bcd636ff139e213038c18b165b5d628
SHA1 53cf7b9a038c2231c0ea99fa7e1d28caa1958f63
SHA256 d02f4e651e780c859cac311c70d7d8b467ede1ca36792fe626a9d51188aceede
SHA512 da99fc7524ef570a15000b4f02e9d1c34e4f72c0056a7d03ed7ab8e77f58668974cdf4607f6cd1e234bac8a67c503b6c20214b93da1fec2567795ae70b1b43b5

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallSqlStateTemplate.sql

MD5 329bda20577cc03964b3c777ccab97bf
SHA1 ffb65f3546a360d520d3294bc237d911f1218070
SHA256 dc26f9ccf253dd41a82b68432036168ae091fc228bb0500102e37708d8f688b4
SHA512 48da23d687eff93e0fbcf2ad7f95f12f08031be8fc3b06143486c96d0a635ecef9bf716a4ccac89a16b98ef5989aa70ccafbd834cc40ef6f83da002d75afcc3c

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallWebEventSqlProvider.sql

MD5 fd1f3aa99e075898374ccc30a6980da9
SHA1 1cc820639036adc3bf202e8b19964951b0204042
SHA256 d7502bfdfa5501770bee3f95f6a8349e18eaaf52d3af4510daf77caf24e37812
SHA512 3f8540cc77692fd8c272d319d12be1feb2d689280f0361049d18c6848b77338ecd88754d2c349c8d48b54680df0ff288757ee215b2c0fa90b210d18c40323d0a

C:\Windows\Microsoft.NET\Framework64\v3.5\DataSvcUtil.exe.config

MD5 9e45ca9d3ee48584e1b328550b26a174
SHA1 6c044202cf4508c0011ead5d29d0f61a4c50cac3
SHA256 dc075f81cfbda05939fd51d36e64ad96ccdd7c11453904e16c1ab54f265c0c91
SHA512 e8fb02303934510f1f9acbe5af9169339e3ea154da840142f9e09b73b7d9bcb80523b2068a71ac5f2c1b3aeeba5e585919e77f11d08e080112b3934125e1041e

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Accessibility.dll

MD5 9a247189c97bc767e0da24340f650c3b
SHA1 b31dd3f72ddbecdfc51d642e22ca1002649d84d2
SHA256 9d7be9ba5cc45284d34c7810924323f79e57ba1705dbed0b0cdf23b4c19c5727
SHA512 20a1de8e9dcbc8a23e74b94085de89c1a9ade52550060a878dda32091221357909879d94a79235979edcf82c8dd3213c31ddd122258603f1b779f602d54789be

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\CreateAppSetting.aspx

MD5 5a3bd908f064ea807a4e7fdaa6bf9718
SHA1 e802356a542767b4dd8393b53ea4893cf0a22967
SHA256 a9fbbb5de12679797570abd962b4ca88f6a3a500d6989e02e2e0614c120371b8
SHA512 755810b1ab2e48b0b316c9be15b92302938d4e431eb1ad10cdea1f3ec40b0e734b89a08c3c7bf12207db3d69d8cd6d611729e5a8bc5f3b9b1bb1c77108a58a04

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\EditAppSetting.aspx

MD5 c8abb6b17b25d93d58a6423dbb6a1d23
SHA1 a0f3bb6fa12bc2e21347fa64d8ac0f02a4bc7804
SHA256 43fae9ee5745e7c731cfe60752c4aacfe1b92d8a2f7294a565c81f4828c3ff60
SHA512 6a5658ddbb949d6c38142dd396a514b6a12c20e1c0af0ee85def7b2f871ee87276aee2aace53e5471265832298394a146f59afd4fdab396263adb3fc473b4449

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\ManageAppSettings.aspx

MD5 15c63734589000e2b92b076471dac7ef
SHA1 7217e539774d5c1950b4143bbcb5df25c94355d1
SHA256 760b4177a7c8874bfdf20edaf7f740059fd0c36f7357dc011b0994556a67527f
SHA512 769cc37791b48741fcd73d4cf4466e792c8b3040ae1d74388c900266a96ec729a347b4c068f437eeefe82c8ff4b5dcf8cb6890b1a149456e9d46bca1346eee67

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\App_Data\GroupedProviders.xml

MD5 168217748da9b0572dd9376825d9930b
SHA1 a83d9502dd84e59e7dbe3f6a1734563e593c345f
SHA256 3a7c4dd5d79d7a2f8496930d1aaec61c8f9c29d7878c42605a4680d5fe5d743c
SHA512 c3ae2bc2ae08881cda5376fcf3cbd284198aef4463e02cedc0b7fd568630cb5afa144c17ac0764ae1b6384b9bdec473e219e20ee49f75845ee141083479fb785

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\default.aspx

MD5 59531ae3c0b4c36a6d512cba81b0233d
SHA1 0dd86e6926fe89bb7b435b05f42c13cc24c42843
SHA256 00cc3beed27b1885ca53a7bdf4d66fc226bf977267d10033a75df198c1136469
SHA512 741fe9c6e5b9961e33bffb2172d5f2c42112dde2be982e4f6dafb1aa4e72a4b572a818be22307ea377259724b2d79079b2c6acfea1bb21879d97810f47701a44

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\error.aspx

MD5 08c47302dc762ff6bde6492a120a8bfb
SHA1 611ab209f91301de4725be6057fb73d5241b866c
SHA256 70edb1a8ec1dcfe004dae06b25c3bdade50119971c949e7928fd45a14fc60301
SHA512 cb61ede8940fa1e8929ea05497238d6c2c1b17a9bc7673a082e46194048e87bac8a54411495f7050504b629bb616901b4fd29ac9890ed625e9f6bb8749f3b4ae

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\home0.aspx

MD5 bba8a20893e9610b13bd9dfe280191df
SHA1 90f2987b4ad88507aa08358e3e3cb82fc7ed0016
SHA256 c46dcec7c6b618fc95ce8a3341cd307fa103cc46cf1a0d3bef7fa5181b277cd8
SHA512 68a6de63dd8af4390ad97678cc9ef8d3ab9a31dfbd0882ec6c6fafb86fc97f4a660587015b69de45e0fe2e258d578162b85fb2586e0371b14cd1761f931b14fc

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\home1.aspx

MD5 30a7945a6e4bce18593876d8d36dc9bd
SHA1 4590e792e8874e70351624d526ff65a163bdeec3
SHA256 3e449c7cff85ea092d5c30c4063b34f8545ff531108363569b2e1d5b79455008
SHA512 7c2aebbc870821272443580e89581179acb8e41126a0e61f7e0c38a71964ec465075e4f1ee118b79c34cc91ca3fff529e2685b92f9f7aa4fc44712f43c569a41

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\home2.aspx

MD5 3ae13f663639415c9f4e4b08f197af45
SHA1 c48ea2b334c1a783788dd6f339236895308067a5
SHA256 29fbe1e946e9802f1747c9a4b788ba0064c29ff758b0e06b1cb54e6a4f20ab2c
SHA512 2e2c7f36cccf032ce32085888c7468635c29be1165fa24b6d7ffa25cc12631281707bd93529e5ad6cb8bce9aa90b96740718c69336172f86b58433d5f4765614

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\alert_lrg.gif

MD5 573c0ee706f590b8894c1baced6d24d5
SHA1 e017d8df6eab104a4663dd6cb270b9af3785c820
SHA256 b998d67c5af2ff41b51bc2a4d61c301868cc35dd1e56cd01e05adaf0f9751288
SHA512 fb0a5e1f63e9f814e2b3a2c5e6e23e89d5f8faa35bc44f82f550514a8ca2351539532b36668fa5ddb61235ce9988fc9ee390604f93c571c080fecbce5b1ba42d

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

MD5 2967c028384642e6cc0c23f01e89f1e7
SHA1 c6fba53e15762b98ee178691a130f47366783172
SHA256 d737785d2ff7244e06487a0ffc62ba5892125044f164bae4fb704e01d408774a
SHA512 8d22d5c58eecd8a30d38fc61da6b3e7e156f0ba39df8d946a276d832259e48e18cda7facf7d4ab276d157ce0b821ebb56c7a7d38b16716f20ac5595c62556315

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\aspx_file.gif

MD5 ec88464421b154416d22b52c19ed3ef0
SHA1 60e22d49a9c3985a7d4ce05a2971db6872c31a32
SHA256 86686a7d176eebd89e9eb75eed4c448148690f14847081ee60901f73d3b86564
SHA512 ef297b5f2d189fb9e11838559197941514706966fb297caabc50b7aea9102aef07d5d006900fcc1c1845d4c0c205bf5c122ecaddf78e8cb2093a0e4297d3ce89

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\branding_Full2.gif

MD5 07776d4c4c0d859a8908c9330e9612bb
SHA1 60af7878a255749922a197a31f14b00ecc694fe7
SHA256 f4bef23007404fd8096d636caf8cc211a2d2274ed14706bb8ce2bbab1fb1b6ae
SHA512 1bed116b54eff8236b9ffdbf94a1e397b8db53fc46a00543914460daf15403e12a14adceeef4c1c56837853bc28d142b990e11a14b8959767c9c455e287e9900

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

MD5 305105cdb2fd3bb4af94eb966a838d61
SHA1 27f142ae83e30122cd14679607d181b76eb36dcb
SHA256 1b2fb221a77ce276ae7c1cc67b68ecd87872f34dc7fb0a31b9331c7faeedf466
SHA512 7261dff92fe81a262b4a9ca3417c261fe12e850a30e3bcf892b9fda805439d10e83912a828596ed892321367ea97d5b07d7898e9f6a849fc93e4d2602589ef31

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\deselectedTab_1x1.gif

MD5 7c2b9e420e27f2c18933e7460109d2a7
SHA1 a75862dac6701c40cfecb15b5672c8b98f935bfa
SHA256 14960bbb8e2def6e7b4a7a9210cbae4718fa6904be937a8b2dcaf5f21eaa30c3
SHA512 efaf444af937e421e56f8f5dd017f67cc0c361dcf81a04e716da40bd5414cd09477a13cb1ad2ac1284f1ab235f484304d99df73549dcd3ec38ff0e6ba102b460

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\folder.gif

MD5 a354b4dcaa6a50b983fbb198d23b2b21
SHA1 7e544ef88913f091f1ba723f30da94b99572f6e9
SHA256 b4899846efe770bdecd1974fe7224528b5754d66b94c27f3b4dbb71899105ab8
SHA512 e59bea03a52d3dc865d96261fa93ae9e0e669f3c1906e7f901fd708d279482d78207fce1e8dc3113219b56c87b3fbe836673ef7c0440738f6d77b82441f2cf77

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif

MD5 3c44d7699158eb5d492d72d7599dab1a
SHA1 89b55b7eb0e0001f3edc429ffb464ae402f3f108
SHA256 5c5e41d8eac07d35da86748d9c39b2d061d3743bf0989c361e85a7968d0508b6
SHA512 4ce6639b0fce90f12419efe2eea876713efd7d2d727bea3030cb19bc52827a31f3b1a782bfa19eff525f088502cba4ae7bf5df76689100448702d373e88f6503

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif

MD5 234ec5ec7b2fa07096c9ba370330d055
SHA1 0235ec7cf3d27ea23521c6c085ab651331ab240d
SHA256 51db4a465c5baa1e4fc470366bce4f88d3cb79461116a2bd59e594c35cb01409
SHA512 29aef924c713ff13cf4cfcbc417742f25457da3a9949cccab376efc19499a566af1cee1d13fb54a9bd9c04134e98ebb6ff50d265e6bac78b00d0c3d7dd6dbbbe

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif

MD5 ccbf93a2e224729dee7bd62ba2fa7442
SHA1 18f929077340d5cf6e0386e1b61fe63e25cf5fa1
SHA256 ded932655d2464c9b15dda1271a4c55c927f2b7bbf0c12025271cfd12617c5d4
SHA512 7d99879e32c9b41aa60fa68058c5e00e15aa872bb32f65c0c59742f2a881ea128120db24bb42b2790b0bdf3db07005a2a01e61dbe442669bfccf03391ec2cc86

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\help.jpg

MD5 e4b8e8bbffdd16ac168d474c70c0749d
SHA1 fecd55a9da4044c81c829e4c298fea1c81d73987
SHA256 0cf443ab53f205c513e3a7fdde83113495a524c26fbde825e60b170438496658
SHA512 10f871157254a4cd64c598d9e6c7c735f9a22cfd2bcb1e0f346fea4ae644d5f4ee03dba4e4a0a2a1714dcaf72a753f2a195fc65ebee2a7e875e25e5000603223

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

MD5 a96f1aafae53af56fbdbe5748a385eab
SHA1 d0ea7148b839c22297043c39a8c65a9186b49697
SHA256 6731c3dedc523d9127db4ba801f20334dc3e9c24b3430e9927576568b56814bd
SHA512 d4a180300342092394c9d5ee57c7e5e01c5a24f5a60d23a2ae1c022ffc8d4a8f56be7b5178fd4d3e03ddb6ac8211d70bc4805b6338a7c7412841bd3148c24a6f

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\image1.gif

MD5 d900a0f612137543530d2da6daa50f7d
SHA1 83974b94bcdb3a68e464a256861c4eed64734ae9
SHA256 0c333736c1316caad7db4ed545e5035d285bb4460908dfe67b9a72fcd07916b0
SHA512 6bf4773c0b93c8695805807fe50edb11ab22342187b87853ec7743e8aeefe3fa25d276b79616b28a7d4bce0502634652ec5ea130c968c9cefaac40fec6a2c4ec

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\image2.gif

MD5 71985a294b8eb3d0eaebcb487e3406c1
SHA1 b46f6ac7bd3b068afb6e0eeb52fd65b1e96fb3b3
SHA256 81994ec40934edd15e8befe490a5c6ea10f31ce5ffb64f287cf6594401ecbc7c
SHA512 edc213fbb326fa9ce2b86590d3280525f79a339ac30a1b0156f00a7ef26c6d8f5d397913abbb788c45afcb0ec0b919378a8e68c241c0c0edd143ce28036ea94a

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\requiredBang.gif

MD5 02acdd140a79ff0184a1bc48c5069e9d
SHA1 21073f8a18ba6eef82b04242431ff83c7581f9c9
SHA256 e035320b72bda39d89b7068e85d4fd58645235771b854e426974e3d06e76da79
SHA512 8f5564c22daca8f5432189bb49aba1be7169465b347131e1010637c287b47534af58cb183cc4edb862eaf977a4d134d3bb22e55f9921336388ca83f2cb1b24b3

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\selectedTab_leftCorner.gif

MD5 f500797e67b42feceb1cbc3ce7cd9f60
SHA1 33a8cd44da0e2ff42ffa8c7386d3af89361739a9
SHA256 2c16305a8ba4ef0029f47bf1a3f1cc4cd357095b92b1dd813669f138eca3a24e
SHA512 843f6b1907640b189ad64218e235c2c1966fcf49d405d63c5d203a3feed2ab772e78f9077190d6f878db9a9f77562e93f933eda90d65b40260bc5c09f2bbca67

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\selectedTab_rightCorner.gif

MD5 c00e2ec4d6df5c9172a81284d41c658a
SHA1 6455855cf0a42f1730273571d4a99b2a3873bc5a
SHA256 f223f5c4fb3e90417ead90809b290f124c73835e642eac157c710e72e57ba025
SHA512 d5c614c805095e21d5ae58fba5b4bd983737b99e362f041b3e90076a5ec03a4f5636d81a6fed0e84aefc62e2e2b85acbed25d71395b879c6210005851d6f5988

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

MD5 9bafcad83589b37dac57f63ebe0d8765
SHA1 efb073731f8bffc5b58e90ab7963c249cae3db4a
SHA256 9d130403a572860596b2850b22b134456d936b695998b2dc700438437cdedec7
SHA512 7cba4298892492a2dd549717c85a5749f06d2eb46ea34161e6a520c3ad61252d11337759dcaa465f0d8b7459a3c852953e0aa4fbb65d7a8d2e08a5ce4b5fcda3

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\unSelectedTab_leftCorner.gif

MD5 f2392b06e3437749cc8f97a2bd6030ac
SHA1 53c94c41c8f82312cc0fbc1ff7adf21c7e06bc72
SHA256 0c58267b2e7ce1bb685f4fa0f56e9a4199455aad9724d0dd36df9feb6ba3d241
SHA512 3642f1ef497d4a76507eacf1ef96fd5ee14985a138a568dd11087c46fb828a43d7b7aa2662f025b2df2069008f02a2691f9483cb97ca063bf933c2f5a6582d8d

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\unSelectedTab_rightCorner.gif

MD5 05c8834c07a3725687fd04ba62d65af4
SHA1 bfc2a3d6c8d3030694dcba97b1a139078c09dd94
SHA256 af80a796df13aa477e643ec00f0b8fac85cc35980b329ae3ad3ae87cbaacdabe
SHA512 30ddf975196746d576edfabf10ff2a40ceec2291f0d266af795f05a0399a8b534047e209319ceab46f29f0a7d2c3d4dc449830ef34b41ed139dfb71c3607f4c1

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

MD5 08675e367b9b7f194f0d02362c180d7a
SHA1 4e384a9dde4e0e4233b1bdfe55feef614b59cd4b
SHA256 3985da08d7a86eab692271b14bd20c121dd73c2fc64f9e1becaeea120c79f052
SHA512 7e537ebc5678f75d8e71ec13991359ac97f22af33a87cc09b3961cb13ea36443b34d8fb0ad8ea6337d25b83cf42dca1df58c242cf2ff464cfd91bf2750ab0461

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\navigationBar.ascx

MD5 41887befb510da5260b479decab26768
SHA1 15b91589c485ec80ccd4fa83cb9fdfa74706029c
SHA256 e946ec195830e84e6b97776d9ab12c03f065e8af00cfa6529527797fd57b73f7
SHA512 68eca0df8b42c61f1a4314b300e3d0288f117e7636da1a148f14722c7f8a03a015428d055c5890f6d8bd157f4898f53c906664c1e2979e4eb2dfb96d9c17873b

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\chooseProviderManagement.aspx

MD5 e4fd004f8d7a119b6931eaf09d66938b
SHA1 f693706c4160c30be7f6534eb53b76388db70815
SHA256 a28e99a595eca96541f6681f841ebbbc62e536fd0e8f1814a546f5cd8e1f0819
SHA512 a3cd8da970b364bfd4fb0334545b29074af2c52379da1da7028689ab9a8362301d81c2b59e3fe435885b55696f7afb5926dfc946f7ccdc75cdbefbacd4cb8921

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\ManageConsolidatedProviders.aspx

MD5 8ed475a39624a86c7596f27e9d818a57
SHA1 7a7c32e982676b28fa9871f2c8d30ef89276f20a
SHA256 455fe723b8f994a0a384ecd434535424505517634c7151e0bc67e241effa4eef
SHA512 68af3d4615005d6d8bab281f3b42b0bcdbd408ac5a01f10bff79b46018be9b055b7fbb98be125b85a8cb190cd0b337afa2b3229dda23dd62e2e17b18538409e7

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\ManageProviders.aspx

MD5 db61e57e1a93ec3ead9a5a8ce9c43392
SHA1 4245b3407ac179b003a2d3b32e8639552de5d7e2
SHA256 7b7eb31e05fd26e8fe83166c0284d313a27225102d8dbfd44fe766da36cc7915
SHA512 80cb7b9a53434b87ac8995d8aed5c95d5990d0e2e8b1f3bde7dfae4fac750ff3314111245e666587b1c2d0d93cde1976c5005e24e6df83ac3a4169bad629e6f9

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\ProviderList.ascx

MD5 84807fa37159c267c02bbe664f62cab0
SHA1 a72ab43b7f0506dfcee723120dfce4958fe1d502
SHA256 03fbee2a78dd87767f3976206a2da732189520b90bccf321c7d2bab003ac5c31
SHA512 e6bac18873b95b5840d1d5554d67f7423746e26604e60b872f877f5610f3fb234d5f70e8e3f832e59775bf18bbef5e4ef24a39042967030f9aa97d0b397de87a

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\createPermission.aspx

MD5 cde6bb66ef1fe708fb00adab349ccc92
SHA1 7cf6dc7338cb37cd9036c9e22dd7d058c7ca30a5
SHA256 b2862138a798d23a9cd713918ffc4aa5ed6d2e5dd6221393ff410e9ed7158979
SHA512 b8d0e4d361bf175e6055f31d51c0f662c98db49be4ff7787f60929a38f040528d3a13aab894cc4446b58bad68674afb97f8fd135a7cc2052e062bbbd80a1c98c

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\managePermissions.aspx

MD5 3b5242a35aa12056f44712e558747128
SHA1 89c9ffd55d8c78aa8a162ce0ac468921dbf85f0e
SHA256 ebbb391dbd284f3982e1cdbbf29f85b0b0d0408d6af79ec0b8619408583e23cf
SHA512 f2df97959236e089d743e1cc9caa23f00b0d1739041f027d13bade08ce1170db4105b0aaef80349a5cb85fd7b4bca1f996df3b4df0a839eab87bb7eb0501e96e

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\security.aspx

MD5 f80c2e6131f7bfd7b8cea1f09067966e
SHA1 8ec9e04de5b6d2f59f864d32bcff136bce7e56f4
SHA256 14886ba542cf2e4f2941b6f5ca9bba5f8a2587e36b9271688d58493fff18b27d
SHA512 67cadaf32f4ad9b1155e7ef7cf0a143a599a0f35e424efd68cfe90797b77d8f9dac3641ad770db9df35c450d6eb887d9e62294e75b7d0ad5aa9deee4143404a6

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\security0.aspx

MD5 e7fc367b7c96f85c6250aa8a510442cf
SHA1 d443dea5572b8188da05be84398847fbf5579a81
SHA256 42918ff4d31995d50c0125cbbfc9387ec47f341086cd471c5b086ff713fa443f
SHA512 58456ea83c67ce73cd3d1f2aa27cafe430de9a77c531009c1055feab72553147d1923af6304448d27a000500ce0cde2f8dc57441b16d1cfd6d4dbeaf7f64a67b

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\setUpAuthentication.aspx

MD5 deb2bfe8e5899b088d8beec19b538008
SHA1 df2959126be4ea3aaac062da1568e0bfa31f95fd
SHA256 cf1bab42f68a54c0032c8d91f5f59525bd5b78744de608005e1f86aed8fa0c4c
SHA512 149ad0847f58af8db162eb20890e8afeb76435175929e065a3929fe56e5431233eec9999e3c84401aa2738ba916d37ecad3a67bde44d08f73b5bb2a5dafe042c

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Users\editUser.aspx

MD5 90fcafc33a745c43c8fd53eb7fe9bd9e
SHA1 d10afda40dc82cda4ce0474c32ec49f6caa79c53
SHA256 405e875e31e5c0d65030fdfb095d8fe9192581af83599d7636f6d3df5d226af1
SHA512 5af3753bfc54c99265f667ae2108c4497bc2798c37d2a0dc5b539e84042bcdc5b64a47877130effbf2db8c1cd3d471286e5de96faa75be26cb9c50b7a06acef2

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizard.aspx

MD5 d6752d53a554537c7d513cba326b849d
SHA1 cac2c33c625d6708f7f77358aec9aabbde77c917
SHA256 3820a6ed05786d8e33f48b39559fd072c39542db53ee432c9d545ad3923b88cb
SHA512 08c36a9088b5eda0c1b4001bd8d13c2ebb14c3164d82baeebf653df9902d230f1fd55140f257650a73a1e17ea1dee5d216c1782d412115db0bda1b7fa5b24452

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardAuthentication.ascx

MD5 7d99c29ec5c16229286df7ffbf7c60cb
SHA1 eeb1dda795695e8814e7864fb77c5e45b411430c
SHA256 ac515c96151df0909467f02425b5992af435b8fe8c429c2eb12bbf3e55ee4a28
SHA512 48cb669e9142076d6703ae4fb34c35659363d61920f046731b54e2daf7b64d0c05ec48494ab06f342d98ae5f7c47096e2222fb9d8406a4b27f619cf1e0347ac7

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardCreateRoles.ascx

MD5 2a99aa1ada4c8e004970f5da9a4f8157
SHA1 7208c8b7eea3a3de867f8b8dd9f905fafc07051f
SHA256 e67233d991987f55b0cc0403951eac3de3c56ff9e429bca12bc4e4bb30e8493e
SHA512 12ed34f1370b131a896cd7de42a1d2e0d4eeb1c7d82c9e4f1d4b149f498238ec30f37d31047b7cc2bbdd0437b80a09db8d92bd411f45fb3934fdcf647e145f04

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardFinish.ascx

MD5 cc406afbdcc918fe69a0d710cdb91af5
SHA1 984460808ffee41b36d9076febaa0b6ebed4fbf7
SHA256 851c8f128d20141bbeb5c715eb1ae81fdf299328e092dc12d296c1297b6acdcd
SHA512 2592cdaa372f3b042766ab04de7923519f93efcab936c115a84197ca74caf3ca61e17c64775871055e90be19c7a2864a5662e6cae776081dea946c5260a6fa1a

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardInit.ascx

MD5 2303c957312cd1794b94c7accc1ff7ff
SHA1 60cfc43c72e12103d1b081c1db095902b8be5d57
SHA256 7e3bc7633f6c8d752eab30803f1ff39d0709b19f732b6b05e50aa6299198b7e7
SHA512 6379b92ed0a858ab277b51a0f15ce16b63bfc380b416173c143164e005beba7886a4bed1937016f56008d7b23ebc5808ee3c84f01d30a5b82e89dcc140d0fcbc

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardPermission.ascx

MD5 082a005302e65d184987cf983fe73137
SHA1 006213bbcf0b80c41df75fde67c5c52f549a3503
SHA256 9dcd973fca9f64ab79a8f0161bf84f3b8e2995506b7fffa01b933a15784e5624
SHA512 e7e162e16f4d31ab5f7a459e06cd171cea8df2617f1c1fc943c7c5bb9aa47af360a55940aa894ef804233cb8fe9023551a74a2f741bc2b51dbb93375d680c4ff

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardProviderInfo.ascx

MD5 7d9793ccbfb9dc3a0b075b8c5bc7e421
SHA1 8ae1f4672669258a7c680adebc3c2192e43f7c00
SHA256 e945769541df3dda4f86edb46217a969c54aeb4e0852909f3e93564ee3180476
SHA512 bee1f899ac15f7726eae542f047ebda283f3a69106e16e9de1358cf6230ab6006e638bb90b6bbce6504512e56732be91017a5789af35036fcda6060fad9bdb42

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\webAdminButtonRow.master

MD5 fba51c5009b447b9497044dd30eee644
SHA1 1e59d32949f133128717817cb2d025201f6338b5
SHA256 abd4cdafa55d3579557767eb968028a2f48502d71aa35be238fdb8ebd7e37ad9
SHA512 4f6756a2faf57dd17afe6c6da9c0e4d57286ad270d280d84e89ad02ac570871b135e2bd029616d33644c7aa79142f34ef694855446e1ba629eddfe7da7590b50

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\webAdminNoButtonRow.master

MD5 b6471801d6702bd49a723f7a914db9d4
SHA1 48e86c1bdfde0b2e7d73119f834c8452525195d7
SHA256 625b455d7458ec2fbbd50daa1954c937cab2cff220f804f0193c716fd2d1a7f6
SHA512 8c4f33ec5855441ed6a4e75cdafd2d056d7ef41a9401d963b2c0c171961547f3bcc3c59fd73f97236fd59fa30b2d86aa6b978c6b1f395b546b40ba8a5f1dcbd0

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AspNetMMCExt.dll

MD5 8848bad8ae033fbc9bfc89fc24d1a37b
SHA1 4dd9f093f97b6fb2ca396c477a913f7b3d501ef8
SHA256 3bb6e3603d574ba20c2d991748b48d6e4f9a0d2588d170737d03274cb4924291
SHA512 60745d1e9fa7988b3122e4a5a5c4cc53a007e934d090556475be1e64f90e10efb6ddf12aa3bdacb75904e02386a005c668c77d12c6cc3e8db9515f5c2721df37

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state_perf.h

MD5 408a2d182c99ad5d5f83a8e3233f3411
SHA1 a05e09cdef98f6772c4f10c069b7caa46fc8c328
SHA256 ee0513aac7ae92b217791b9ae6a08ffe2f1664fe63fe39c8e7ef0826c0bcb995
SHA512 6f72878c412f0b76df5ae22a4ba85a239253ff9fc814be43d2a0422e1fc64a6c1b6ecc9df339a843a90a6652082870daa7bf3309d89e32b77987bc3752bae184

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\legacy.web_hightrust.config

MD5 3594cac5b3090fde8c677673ae67dbd9
SHA1 6e378258618bde4db3205019bed29c16bd3fd1c7
SHA256 00cdfefdcdb4a153366799fecc8ca395581cc6c494d2b04a09856b1b839a6b70
SHA512 f96cf1bbb6670398e10d8042596c70aa59ea560e187a9d47e7aa10576d515f4fca9c4d419556f1cec8dfd9a6f3be10c29ac95a759405cabec9a42b6df9dd1d47

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\legacy.web_lowtrust.config

MD5 06915c7071764336251db10c33a9de4e
SHA1 8b05842bb266b566d9dc0be3e0dea270f4e205b9
SHA256 aefad49d82b7fbb6e474eadf3c91cb31ce807efa24b1c76aee8f2e2c5d7974ce
SHA512 267f51ef228849e978b12cc98b85dd3cf752555e75b01e0695d50cdd4aba2fbf91f8c7ed449c6bdef5b212777b9d65f621b4eb9ca712e33aebe0ae29b526c958

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\legacy.web_mediumtrust.config

MD5 2ce86a31bfe9104a692f55dcec8b520a
SHA1 677cba10c8b430e4106bbd706aa6783c81ac1cbd
SHA256 fc3214de3c3920cee08de1c4a5caca99453036ea329863a5748a4094fc17f896
SHA512 c58502d5cc8fbed76d5576db71701d3427f286f5b57ee28d4d42c55a38dfe28e25ad77e15779404ed8980ba0b211f311c2ac9623f4e157ef4f802a7ba77b8684

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\legacy.web_minimaltrust.config

MD5 a8f6ea87fd3c968321dd56cf289881cd
SHA1 1172f60b6d70aadfa88c471bf48820cbdd924490
SHA256 1eb28502f76b9e82f7daaab9f4805f20ca42be031de77cb784da35cee6c46279
SHA512 7668e90092ebf16de88a041ee31aa7bc18e9f7ad56a2402595eda5c5875440aabf5a6c949125fbf5b80e042b97a7a7edb5885567cd5ee0805191a4f9b7f08f1b

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\machine.config

MD5 b48bd4326d347f65cdaeea597e8b346a
SHA1 4ac4b0e655838fcde1bbfb353476ce4ca48d4302
SHA256 1a85269f9ea2b58494af1a4a42a093ee126f4f58fe83ddf8ea0d21b5beecefcd
SHA512 fce597d05ee462ab097b56b446ce6edd44d2eda42dc9765a905ccff29ecc3b0fc7b000d98401cc2db65d639b54e6c60efdde51f43aa815d384d0cc1b5fd53454

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\web.config

MD5 9dee3be8a13a61d9236c0025062763ff
SHA1 c39be9cd10835270ff7a336219741ccd4905ca40
SHA256 863128360f735b9209e51b2cdfd8030488a71e39d9574b755ff3afc9bd7b2132
SHA512 8a0cd9d9b07c10179a03aec66993d9b23ecd0f589e80def05e703d06b4bff41ebc737e0899e44dbdb68164d89d2d20da252789907a749aacd63499daf52cf8d1

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\web_hightrust.config

MD5 e507fc7457ef95238965a67dc20c2bc2
SHA1 c60fc55b2f2657073b3dd26fd1c36dd56e8f1448
SHA256 5053026a6e2fdbd46e00251d6ae893168a73f01959c14724ce6c0c871e63f19c
SHA512 60c9b692488370d47370687f93aab6379e15bfacc161147b163b7ed5d683d01aa039c550ac709a9a99f09710a4be9ca728ce2b73fd944ab30691749287f8520e

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\web_lowtrust.config

MD5 84ae57e5a7a34fba747761f89973598e
SHA1 3f3eeb5861bb91bd401cc6a578553bb99c7ade9d
SHA256 eeeedb59975c6535e949d1488697e287ccda549dca63aff82e4056a654d2454e
SHA512 64c476923374b57b7fd92195e4f8aaa331945a71b120d51d95fab16807038e8dc5433ab87fb9912906e2c08880d44fc2643b9de4ea260d4e6252fde68f2b1dfc

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\web_mediumtrust.config

MD5 13d4bd81e340b6899fea6f00e70c486a
SHA1 2662dc8731e0baaf18cb30d96e1e72a016b33e38
SHA256 6556c7778e83588d9537fe32760c99344558b0e76db5fee5708b987fe7cbf685
SHA512 3a9a4478c774155f996ea5c8dafb24ad313252680e3d6e6566180ff736c8abd956333a75800f537730c6c9f329162ace1ab948556965a3478e49c0ec3f4d6c57

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\web_minimaltrust.config

MD5 0121df5f10af8db57209312d278b5c90
SHA1 f0f66fec88c8710358d1d50f7d27b3157999f569
SHA256 8b44936284331e4cfb5959bc52d5eb7c4d2124f88a77afe1f536844682d4c0fa
SHA512 047ea46e32fe375c5f6ad1973fd6864ac56a510662e2ee3e93a56e4f1116aeabf64123a2d7e75cb2fb2a25f3cf3b22a78dfd173778f2a6946d0a006aee9d3d84

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Activities.Build.dll

MD5 49e1c424ae73c873c893815a79d630c1
SHA1 bbf229766ce79e7ca9bb183deb8d7989f6836161
SHA256 fd2177a9aee86c9fd0f2e2cc533bfade38611e1de484c4687fc21dc932cce002
SHA512 cc11f6869fb5cc8d1f25ab898678ea6a2541437ca304d535d26aabaddad9f6bed95e7c018a2a264915c7d23685ec41875d269a47a58ad974c2332828fe8f5f61

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.Conversion.v4.0.dll

MD5 cd9a81b0d254bc0cd8b7287bf37524ce
SHA1 ebc20eeac1423106a53df18cd1bdb2aea303ac3f
SHA256 ca0f42e8c18383f3a659fa38d7fa4746414267bf25d6259f8baa87f732782a79
SHA512 e71282e3319f182de54cb03eb2049b0c4fb8964b95c383899b3a74cb1172714026a9c9be0c3f27c4a74634188a7afd3a1b235c27f33738878e92ada534449acd

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.dll

MD5 2054794fac508a7b6f0c48f09c551ac2
SHA1 949b7bab26a61ae8bc98ddf4a52f9cab1d70d1d1
SHA256 0583599a5bdb339552dfdd668d770adfe33ab9eba3b4445d0b5f84dc6389624b
SHA512 129b3fd125de06ee4fb1e2ef66502a08ca74c431b29bfd486b9d81320a8242627166f6ef4794cb018ee0822f66cf43c39fe2c66f3ef384bab96bc4d16d18a26c

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.Engine.dll

MD5 e7f6a733fe1cd3d19bf6248a79e40ef1
SHA1 529d8072a00f5a9e1e6b378d25790e0044aecd92
SHA256 94e3fae4084a4d3ac12314c6386652682bb9acd47eb34ff4302f07f5963ccda1
SHA512 eaf433601b3ffbdb3b45ee7fb7946c1275917d383c79cc684583f004ac169f97573432c59ca2877df68996e8168ce7006350b425779338e082c23344fc777227

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.Framework.dll

MD5 bf800d9b1bb108c8c4af8e33ea73311a
SHA1 0f34de17dde980e2b1cba84537d7ea8275b8afb9
SHA256 b16e02a598c4cdddd498d837effc102a2ea21258ab67e030a5d377c97925c0f0
SHA512 c9f9eba1d226ce55ae3d72c8c306194ca77adf9685f3720377a7e226b95c6a81ff5a4c7d763dc658cb88388835a0a7f2e2629a83d9c536db7d89a26e5a876537

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.Tasks.v4.0.dll

MD5 713eb0d945ff5eeccd35512a870e063d
SHA1 7d17d81aa5503925ba96e6d9a064a59d63121717
SHA256 60e76cd57ee421e303ca43f446c915149399f953ff241668055666c3cc9daa69
SHA512 1637663c5523d213ffb360ba76677c9f5ba41e54723eb3b320d2517f848ade7f04715fc32bdb95bc829f10404bdcef9e16fad7c3fe7a8044779a0db99f18ec80

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Build.Utilities.v4.0.dll

MD5 1a093050bf85e3095c34e385986aa57f
SHA1 7bb8d7670aafd72b2419fa6d778abd3979653ebc
SHA256 0f88c0a4626339886b00c7ab88dea4d347c3a9df3fdc0f2be36e6a5784d973d6
SHA512 983dee3264db2a29f01f2b15aea3c2c348b4eb3962466d57dc31adc8c1f370dac3490bda7f14eadf6235128ecd9855d7de837065aebb4201cc5fb3c47e0821c0

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.CSharp.dll

MD5 4a206c0381ebffe18c8e42f36ed8d4da
SHA1 812273f7406f57fea65a30bc4b2f8d3dbabc69d2
SHA256 22fabe07677ef8409c429c125f12289a2a87925920225beae8810145bdadfea9
SHA512 9d9d86749888e14af542b6cfbd6c52d9b8d32028b1d9195cba684d3f436aec3954f99bf5660832f6870456e6dc42182be45e9763df0fedcaebd35e5327487233

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Data.Entity.Build.Tasks.dll

MD5 ab76aab984b9860b30d16f101408b65d
SHA1 f2da099f71e77ab930cc251ad11260766496369a
SHA256 90e35d8f141e113c5b0f26f4b1747a5818822e45293fdd690d09e31f815ee501
SHA512 7f7714a8844f76629a4fcc4651fe59327f9809c3cbcc5d7741a784b0c4025ac1f8e89d1a690d4c6c3553621ead7c43b848901772da63b2e4d3f20e77cd16bf96

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Internal.Tasks.Dataflow.dll

MD5 d1924a6d09c8dc4a35e5557aedf7f15e
SHA1 81a1be2148daa621402d07607925bd97dd9f1d42
SHA256 d8667d41c766280c09410642731964ed831cf2fe103a1e19bb233388c581e01b
SHA512 2afbe3357dcf27e68793680ac8c61385e082e3df667d642ddcc34591de1788d7975e1a0d75e2af58ba36fd233ed43c404f35ae9710069ac4df68cf3f9004d444

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.JScript.dll

MD5 01df9cf8a578cb178063600e794231ee
SHA1 11f1059db1b438aef94bc99f77db315cc8658225
SHA256 1da938844fade0fd2e999bc15cd3b79a1cc0f3bf8e6ddbc6274dec6fef0cf675
SHA512 170c0a7bd269b18aa47f510f2e4433717a0660000084cf5f6a9b5f759c4aca67c2c1486579f6e33782794ed400594e82c5b15daf2f46834029fd0ed3a7540f67

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Transactions.Bridge.dll

MD5 745f13993cff9ba145b023d6e220bd06
SHA1 4e48861778a4020ab31c9e3280d3567a31870559
SHA256 c363d20d3a2c700d0dd5a99df2b381a8fc4907e08ee541f91c0d85d122120f96
SHA512 a7819711d7b77340178662594fd5b4399fa2f8210708f841ae87d99ac1146a6778f503d74c1c698c772143d087c0f00c046a580375f27fa395fe4d55df8de543

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.VisualBasic.Compatibility.Data.dll

MD5 de7e5379fbfa83afeb8da52dd475984a
SHA1 1c37e32e8b10bf6deae4b6191ab401f2e449ef7c
SHA256 ddc5626c5388fa046eabb3123da01e317d8187dc4bc052ceb054bdce50538c88
SHA512 cd311c4b757b41a9ad3a93623a328e813823f2029092c4575d4d14c661d502935e46d84ac0a4c7e23458eab13516672e6d6b0a4cb7907b19fe3305c10067cc0d

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.VisualBasic.Compatibility.dll

MD5 759d44739ee9c4115cae6beb82778aea
SHA1 3e93111240dbe2eff60c3746530713900d3e8683
SHA256 3171499f6d0b9bc02484880ca80fcd6a5c1a112c02a2beedbb8e84e2b2b0fd28
SHA512 18f56e6b11ed94903440b405cacdf1dd37f17bc5c645d8ba35b48cf96dcc96a8bc9333f9098a61554829cc85987126f3b4d2b1e6955cded7a65c5916c0a4853f

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.VisualBasic.dll

MD5 92d1ba22ebeef22888c3dde11073f3d7
SHA1 1332746df72be51a9505f93e3f8eac932c183e4f
SHA256 c402444ee0cc0d7cb392ed8b5659522d46678be2fbd0d58aac1dab32acfe5b86
SHA512 7c22ea6a69995626832abe86f5e5b31d11cb66b31f03d11a60bf1112c07e494236ebc3c2adf2f3ba6e10b359c1714a60f3d2fb48e408af0b37eea22df2b82602

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.VisualC.Dll

MD5 bc5262611cdcd45a2b4c7f1f084e2468
SHA1 2281058c47d5673b3b12ea55ee0c76f8c4b0c7cf
SHA256 875efe778348e3e1d91901c01fe629cc9f46a6fa427d2163ae30e08e6c5a9c84
SHA512 bd76a10a59b6c8c34fe1ccb6cb0f2ed3d5a0289523c477a1d9f208f525f81620477dfc85f7ebaad6a7d4f60018986fe83ab41950396bb1c5fa63825868b0cd6a

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.VisualC.STLCLR.dll

MD5 0e2d5e5d7af1741b23af3e2eea840fdf
SHA1 95ca21e88bc7b29fc3c59c11a00a88354d491fd1
SHA256 e36d11fc21d0a6764cbcf29937591262db9bcd9444d3839b419669fdcd69ea84
SHA512 8508c5f81b99727b0b7b8291907c15c91252f69d81e996055825c5cbb228e074bfb7db987a888e6fa96012753ee9908ce5eda3c3103062050be801978ed7fb46

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Win32.Primitives.dll

MD5 41868f9edf7cc27573651c11437aa1fc
SHA1 ff047a1b23672cc200c4632f2efda8179a7eee9c
SHA256 09acb61c3dbb56e5004c0c1728b0133b91fe5485906776a57b3cb2c2c1da81a2
SHA512 b599b2d3b93712ebf53f6ee9a1532d619e1eb22464771de94d112b785b7c8f721ef80ef63cb1663756798ab3b8f661a94d911590e02cd0f4849d8b2f5fe9e9e7

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Windows.ApplicationServer.Applications.dll

MD5 055f3f1d957c3501955a05a0f27d11ed
SHA1 c88bef6d85cb5f77f2304d21115ab66c23d4b9a8
SHA256 9bf939e9209ee0e0cf3f11984fea7c656825172423f8a50a8a3c4dc2323ae0cc
SHA512 ae3c720fc85c86a1575614a77acb2552aa7f14f366252aba635337774fd3bf235f8c8054d800f2a614ec3e1e939972ffa8aa6192a72a06888c774e4fe50df97d

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Workflow.Compiler.exe

MD5 bbe1563e99cfc4720dac3a4a0e7bf208
SHA1 9ef385a36c037196efcd8ba50bd4119be32ecd0a
SHA256 55fae4b487beadd5cd878049a7bc51939e5954be2367e75568b5ec1f23bd46cd
SHA512 d7b2168c9574b4cd9e53858e676563ede716feddeb7ab46adede2577f5cd34c5d97455e673b3f71d5d30fbe5b26b0752a8c92ba9cc9867c4cb531dc51da08897

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\netmemorycache.h

MD5 65c58090b878c4a573e14aac6dfce260
SHA1 343a8afec3feb76bb05d60c785c5ddccdf3f7b59
SHA256 5975839b624cb3bc325878aefd6653a64f3c5f84494ef63f79624498bb3815a2
SHA512 26a13ef5b847bf233bcab23982a717b3d259798840746fb26c8306ff9c4b8836f2d253355ef4bc75fa5ec41632aae4b9bb2a90468c0f41c8c61da207ef50a570

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\netmemorycache.ini

MD5 9bc570cc7a440cd6215a45ea460ec56f
SHA1 8e307984904ee6f43131c3378152827672b2ef4c
SHA256 cbbe0e5e6336e7528e27154a6946a6811e5b39a144f38c62ab8870a7f4c7a227
SHA512 2663b4ccf284a721606973b524edd0a7e9617ab1560d6abdae9a20d25e1b075e37a708bf9422ece2d2d4c02449ce53862bf4b735278a6fca711bd9f05bdc69e1

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\netstandard.dll

MD5 bf03800748444ff6bf78c4e4c92b7022
SHA1 339df7f2f6ee03de29408be68019aa64555aadcd
SHA256 b60045da208e439201a498fcfc9c6181702ae9ffdf2f5d67682577b7cf9c46a1
SHA512 323123d5a1729d36bb0943f4b2b3fc95954b7335231701ebc49e25b32591fa8872d7aff94ed80001a7d1c9efe69db38b323e0c6c36e2277d70df6e7f70864f40

memory/2364-35041-0x0000000000400000-0x000000000040C000-memory.dmp

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMDiagnostics.dll

MD5 8c835ad42b95a87e2183f0a89e5e490d
SHA1 94e85f471b2582dfad30d49f14f6e88f97abc15d
SHA256 cfddc3a80a3a41c01c8cdc6047352f487cdc2cac266704f343789b261746248a
SHA512 52dd7b8e0f44147a95c6a4b32eeb6e3386c33f29a8738119e75b2f06706e75b5945cd66a45894b12f2ecc08da665ecb0a5beb72db0af0e7fe8605de303288a48

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\SqlPersistenceService_Logic.sql

MD5 0225393fa76ee15a7dedbef1636851b8
SHA1 c5d5911ace75559dfcc34f385d207d6c915c00ba
SHA256 e4dc1d903e2f2e8ef6e198bd7dd4f360b958ec1003a75ddb184c3902c545d2f8
SHA512 acdc5499876e1d21b87e7ca3d0d2619173a2c900f8b1a9df690d1e42fc0951e15c3a0b36e3a322edb22a5af8cf1aadd0443b690a145d7fb65126eeb76f0913fd

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\SqlPersistenceService_Schema.sql

MD5 0b6dab34f1d32e54d130a6c0c2e3433f
SHA1 d523f80a96227dd6e23f5fb0dbb934b5f9f10373
SHA256 10d38b7459b746bfee3ead7e025f4873c6cd5d09cde085d10067df6e2e7e3bef
SHA512 acaae9f7cd38f5376bb881b6db91f5aded7fd356f4d4b1d6537b2707714d5048bde8c3fefd399b3a3a2224c684a4e2beb99f10f20e06ef6c7fd51693cfe76fd9

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\Tracking_Logic.sql

MD5 97d1a8032555a4c18eb6be88cae8fd2e
SHA1 977ee8211d724228e910b4fd885046189fe66b03
SHA256 8e23fcb9e7a3e2d1e602417ac836dbc64bf308fcdb06cff4e792a438b76eeb1d
SHA512 5a71ff5264793995b06810ed50e7cb3f325ca5fc98049c4fa422aa787fc4b18cbf6ec052a0d98cc426d00827d73ca4e40a1b77e8296ad3fde643708b8cea3bbf

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\Tracking_Schema.sql

MD5 a94b8f17ef847f50c02fe9ce01faff77
SHA1 3313e4f3a6de7082c8744652f57b377deea2b79f
SHA256 cfc1a32f3a7f2b08f47a949a03f13c9f3524e2f0b02576f17743cda52df73a0a
SHA512 e477df9f6e56948fbffcaf2bd788594f984ea59610a9ac408d912ac898607ebcac59860c08c5fae2de40b6394416bcea854bf32a8e9db7937b553c311500448a

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\sysglobl.dll

MD5 786506efa86c71bdef00e12b40c16b9c
SHA1 014fc4f5f6a7ad548aadf5db4231860d0e9cc3e6
SHA256 b963ddca6fb94884aa1fbef8b85574807511f715291830831b3ae5c075174ccc
SHA512 b4b61da1461c5f5522321256f34ced798fc5412119fb70e8dba684794e5d84ee7b794a6a0c1327618c073849a284c6bb7ace225ac0210cc3155eb5203762a7d4

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Activities.Core.Presentation.dll

MD5 4a6e0c5b95b94d1562a83b4103b5dfd9
SHA1 93b421179fea652814443006e28fe2a6eafc627b
SHA256 d77340155b7fe5708030671853b2f01dad0fab9812dba0e44dbf531edad0410a
SHA512 ab635d9eaf1835e79656ad743b7235e18c180aeec219a2c630151562c77ceba3b6394166059ab053aa389f1b16da8adefb6c9dbc6b8fdba3e43016b1b7514a54

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Activities.dll

MD5 7e57f1b7d7862750364e7ce1443220af
SHA1 bee99dda5dfd14b62025953b21ace934a75caa7f
SHA256 81aa33902eb30687c09e741b17f2acf3c16e372004b165f945bf1b2632aca147
SHA512 93be966e8100f0240ea345c076dd90a206e02ae7c594f705d06db1d605f30335bd68e580c85d11bc3b476d19489cd0cd949ad0ef2b511975afa293e8dabb30bc

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Activities.DurableInstancing.dll

MD5 5be6eecf2f40bbc747c0d6a24074e215
SHA1 a819a8b15e2966c4ac8a664208c5f4af81b9ae0d
SHA256 fe0209b3605538599b1d7e87fb216d2868c3f03473e303a8868e67c6a6a896fb
SHA512 9bd7c66d82bb620cf5c1947ca3de40c29bce71fc7b7f32698960535ef424afd91d36498289ff3169113dd70dda82b0071091a4cee877aa6d98ae883674a76119

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Activities.Presentation.dll

MD5 4e41ac6419db1220c6a49d46d56c3465
SHA1 0a178ca4bc9d4d52adbf191e6aebc89e0ca18a19
SHA256 3bd39fc18038ba9c5835c55597c862ed6ab481001483dd876d576164b93e9e7a
SHA512 4960684fc333034329b5931edc1de66f73920f3a5d81e5fe07230db89ffcad553a47d0383a236242f43851317470a0f32762211cc84b02ffd2ad595c15391336

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.AddIn.Contract.dll

MD5 d09150c655f37022c3c105b06f17f66c
SHA1 e37efefaf0faf0127e1d07bd391c0d30d90422f4
SHA256 ff904175ec0f5c100f01f24bd8b96fa5eedbd49c12d928f8b8b71b9206d08885
SHA512 cfe59f9a36627f29cdd7f6a2c7288b07ad4bf063c17468afb5c9c8546bc22802e289cf198a9cf1b70f70f023fdf793e1514d747e55f89c246f7146ab41d16eb0

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.AddIn.dll

MD5 f9ac1630ce2913e5e156daa2ae640d46
SHA1 e7981ebb0aeb8dcc8e3e66363c3c2051d85e8f0b
SHA256 85d8eb93063b71e00764006a2abe6a084641b7872e27273ac7f99971506e82f0
SHA512 288018a0853f0e37f2730781f3b3253c78255d2e7a2df5b67e68fd48ce69e894edc5b72120478df3cc71b639f343086834c904dac76286567bd5d37c38c25440

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.AppContext.dll

MD5 4b8d321cc59e8319b7474a5c2ecdfff3
SHA1 c5e028d50f4978168f98dc44def3c6b5bc45c370
SHA256 d6b5556cb20e54d6dd3e7c7404dca6445f1f1ce5bdc4344e4002ca58046a2d23
SHA512 f3cacaa181d6fa4cc2045ddaf307b2a999237b2bed32b8218d7178be89f3677c1d6ceae759a0253650f7124c1bec7505a15b707aea63ed4e31c91846895b1c33

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Collections.Concurrent.dll

MD5 fb17258d996f4f7d8adc362f87f4ad92
SHA1 c38bb55eaed059e7648bb13c99e60a90bd2d38fe
SHA256 c865ea2f035874abf76249fc892cb611191ebd2815686e5e685a8d65ab1bcc12
SHA512 0385197df87b68a719bf4bb57f5883153b50e13eabef3b4b12b772e3e0748c9aa37cdf4a15c688387bf1bec0174546cfa793a1cd04aae078c5d550419a0a6016

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Collections.dll

MD5 0e8d4896b8e46e4289a5eff110df263d
SHA1 23ae296158fa35e04b3b682c8b8a43d06a8f0fa4
SHA256 4ee0e67480c8dd2022886feefba5c2b922eba187a59541313ac43e3af586f2a4
SHA512 b034f6bf9c29646f4b49df7108bd3075045a4403d578fee7d82a3b02e97bc832eef2c595a38600c39d197079fad4a96a8febf1b3bfa98201751931effca27fde

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Collections.NonGeneric.dll

MD5 2ac238165c37946091a99ad419d14446
SHA1 05a159d2ad80146374617da80e4984e408973a33
SHA256 64f8718d943038654dcfdf3461afcdc0662dd54a9bf987127dbb1f453390c01f
SHA512 079fd1d6b2c54acd4d04c0120d84a9141166f593ae4172b6a0c25e5b78770b237fb6135948d83790fa25d292d7addd7d3f827bf857eede8e33d23974f07c1ecf

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Collections.Specialized.dll

MD5 f77ca014092f765ce92786aaf8dbdf4a
SHA1 2b3961957680fa05235897bc7308b18808a7587f
SHA256 1f13455369534c3739e990c68cc3613715778623f35d631268cbbb01300cb738
SHA512 e2d0223f340f6ef75a3b33f657428dc105fbc2411031c23263aba5fe9c0217f0ebe39c599aa25b8dd26453c46cdefe76e980e7ced0fbcd13fb79d642ea195a20

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.Annotations.dll

MD5 f10c4ad4e24d32386377c44951b739df
SHA1 7d140ad96db583953f6c9710f2d81a7285ad7953
SHA256 9ffeabaedd2e9d9d97d47a96c1b59f9018dab1d6849e25337891fcea47ef9fe4
SHA512 7d62df2b682a505e944e9adfba78f789fcc92a97e5ebb9a18edb56b21e7011657a6a409a1b7cc69728610f69502a92a108974b4883fada8e6f608503ea3df636

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.Composition.dll

MD5 1ea6ccfedf2fee561690a76f90bffe1d
SHA1 71ad0d1c5f452677d3e262ca3265f7e0d3301d81
SHA256 c4f7c53cb8830ef76b29ef9d50587a0cca0193ab0813cf2d17a107d990946c21
SHA512 c6573135ead230d1f1bfd87e0a4b6bd0c1ba38183fd66b78829a4f2fb14953041272e39fe186f01490449c2c1caeb234b1a0526bb0514241fbfd34dcb609a131

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.DataAnnotations.dll

MD5 3798f456f7dcf0d7810a8f5ec69c55a1
SHA1 6a1721b5514b9f767fb64e8206f9af930ba18624
SHA256 c1a28a6830b52685118be8cad3032d2faaabb7d9d751dfea46f198eb20399bf6
SHA512 616891fd80c78d2faded445c3ada0841c2ece2ef4f7ef95bd916022c895ef45b4a2a9ebc444002962db87fa1293e482f987ca5a4d5b1b699e5da52f7100d2447

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.dll

MD5 62459910ec8658fcd4daf6800bc3b7c0
SHA1 faa3dae3164fbe5af3f55265a9d2e8ab417ecf09
SHA256 0088677ef1d8f991b7d98f388538f5327e7e320d155c120d797c7b523e817107
SHA512 94eef6777c2c6e1739a07688e00ff2f9ce27bc2d3a3cefdfbe19be5f916da290380400bf7f9d81142669deb4762ae898d9137a34d852b69521df2de8b1dfd8d4

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.EventBasedAsync.dll

MD5 46e76a1b0ab470aad0e4621318388778
SHA1 203720d2977d9593c9db64c084d28e0159005e34
SHA256 ae6a9c8b917d7e00cfa59f68fe1768c88d4a4a922b1226067f92e2adc3b4b200
SHA512 4279e9136e431d2883acdeac819060ad4fc2c524eed4e8df4b4c3d79a4359a5448992a0b12e0d27e4f61000463ec70e2ae0f54e4e3d82d3c0c34a4fd301dff47

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.Primitives.dll

MD5 2d7df5c66fc50f028297730cb025a830
SHA1 3cef4d5395342375c610f618daa82e30e6b30440
SHA256 129a4e31a7e1c0170ec86a48209f64c6116f4f564fa14b9f8b4132515c8ee7c0
SHA512 d5ae13b7b0f52ef87ae08ac187ea56d563180a1b1791761d94adb82ed81352843fc1c4426d8d7c8e3c027164a70366c539d2e0adf9836f510de47b67d9812c27

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ComponentModel.TypeConverter.dll

MD5 24e150bc08e3a38104728552b3752776
SHA1 d6321d151fed8deabcd1bf6e45b51e4b3fd3fdb0
SHA256 3b051880d4f23d23ec00b023f0172c278a33e77c5a98a5705862271a41617a5e
SHA512 ca567a7eeb48570ce1e590209488c369f0036d14874a8f1f8cf26ce9a36efeb5e65cac9f7dd16964c1ff254d512c031053fc189a5292ddc67d23a2ed74c8d5f8

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Configuration.dll

MD5 feb49716e6e6db5164d69119a2aa5d90
SHA1 b6171da3ad00fb2ee9bfe776d1c781e9b2bd870f
SHA256 e24629351994e53d2a4992ce961b0d7bf93fea2eee706e2f633449a07fc1ee86
SHA512 410b39b616302b872edf4fd92d63e4752d19c3d3ee03cb5aac429c60872e4bb65ac54791543590b58447d8b351da1d526e66cedd7e29fba2d6c087f69fd2a349

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Configuration.Install.dll

MD5 e111131ba9494716adefe4bff298e776
SHA1 cd9376bd231e4461fcd23e625aa56ba64d671a70
SHA256 002e4e432ef15bc34ff0de55a6f43ff22e3a55f08868f4d422a5a3f607297165
SHA512 7b03fccddf3e94bd2d55bd01232625a98c0a3cce3067c6e5d2bf14b1396ceef117232709cff2d589380cdf1ec551a6293eafddb7a9c9b5ffd2ace675e965751c

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Console.dll

MD5 f2bd977f8b73075960fae02e4cab127f
SHA1 9d888f52c80d284e7dead89466282f24e88c477d
SHA256 fed8780ac6a81439279ff88151ad8983c2bba02c3be6144bf58c1e4ae06dd3fd
SHA512 6760665489db557e072dfcbac8259627ef53751c4dffae194062d54f94f3273ff1fa3860a20fbf28f4a7a35b20607a684af9a474884b30d8db745ec49c54fc8a

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Core.dll

MD5 00fe67b879ae20626378cdc122a6343d
SHA1 445cd2b05b0fd4cf21b147b0400bcd4d2440ab97
SHA256 7e5351166f8637d02a305e050ec040daccd773d7fe0eecc991469ec9d03a1ee4
SHA512 03c7ecdaa08b64ac8bee5e76a4e2c5cf39bde8379fad3f9ec6707dde43a783ccbb8e1e8debe05573ce82244bc9801b10c7e039b5d5b0e8af85696bfd4d8d111e

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Common.dll

MD5 6bb6e0bf0f8cbcead5f8c9c1664cb521
SHA1 6440b3e0fde85da17dd26ffb5abec9cb595768b3
SHA256 39dd2fd2626fcec6dd63ca964ef3861833153cb6dcb6535ef0a10d4e6a4d6024
SHA512 fe58c0a68af61b7b2b6c4180e2818c810c6ca4f84c1f2f298031737ba3d3c7f5bad88af612b00b0cdf703c1fd473ec557d294fe2361c76fb0607c6efb6adcf4e

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.DataSetExtensions.dll

MD5 fc3807788944ad5eb1cd27e379d0e732
SHA1 66fdd473e3403c9c8bac371793b44ee27a2aabda
SHA256 1d6f60fafda4170781f265bbc0e21e45ee1b896620b9b6cb8df2925fb1ea477f
SHA512 04c3c9af372262cd107cde1c04a600d29ac369e5e92f520a61b0b4bb4734e99c66598f140803551060eb767987c941899107d56e5788ef065491b9af42bd5674

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Entity.Design.dll

MD5 6b4d19d0092050bc48159935a09881e9
SHA1 9405faf895abec7b6da1e585d610fdeb89f949bc
SHA256 db1727f6e35440b5cb1f718adf22307bc1fff5ce1db37790e1f4a1b5a03c2c17
SHA512 ff0358a8677632df22f88c71ce8e69adc4d059644863c0f942062cbf449a4e91c30b9c3653d2033ea6fdef100ba6d9c6e78bccb42b4f27b13a08a00c1ef431a4

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Entity.dll

MD5 8a1a51bf3125b36536cd8d54b6089b52
SHA1 7b5c0d777ac743edaa685f8598d796b3f565dde3
SHA256 df3b41d7ee599411fbcec8d4808c846f5196af05101e9ed4c5f046190dd0a2aa
SHA512 b8510cb8531e7c98549831bdd428e4dac7f6a553eac6a4bc65f87b36a9aa707221be4a118f6989e3cf5d2b4534d5efb2bbe4fbb074876c175cfb155a25646115

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Linq.dll

MD5 2bb22eab696068982730507c2e64cc69
SHA1 949599b58e1880af630608bda5f71220ed4964a2
SHA256 3d3e31c22a3b3494e530450d32b03f4e33374f0b7048e9ec8113d0cebbc6d9e5
SHA512 05ee94d22e40ba07f866dcea3e11d4beff120531c830b8e41d85ed667e1424e4bb6669d9a62b9aa4eaf82eff8f9300ddf09214c5635d912e1f5453b841e9a2b8

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Services.Client.dll

MD5 365962063ff1357bbb28d892024036ca
SHA1 eb7fc2eae5ded14cf6e03fb06d55d98b2ab827ef
SHA256 106eae933309f1f007f8bc4caeb9c9afb14338e9088d82db1868df0e61d81e66
SHA512 a346cd09049b62f80e991c22afacec3991b68c09044a813054275c86fba503210dba44901be45689e5a9bb9a0fa1951257fc7e7b299126fc72747868b37b17da

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Services.Design.dll

MD5 5d320557ab17eab1ba8c848fddc28b8f
SHA1 d1719ac01a2c0692a6680f7069648c26af10729d
SHA256 38ed0ef6e3c61a08d589b3ade27ec58d5edcd58aa70a0c03b61d0e3b60db3279
SHA512 c7593d8d0c73c7720c337b72fd02c3a9344c15be8b97ebcbdcc3ff1f5cccc2efa99c8ac44a14fcc9b7e66443515ff36e5e23d9ced6183531e50d36ddb9f7130d

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.Services.dll

MD5 6a484206cea157b591b70a6fc1b47362
SHA1 2c52a1dbbfbb77211d2614aca7ce764b419f9f20
SHA256 ff247c6c237669a3b18af523f85f1e59a841766b6a3cd356dd9664bd3f45386d
SHA512 97ee88d01a3d37a314df2020d39e304817852d7734e23fe3ee0f1f1df79cfae8f872db794e8bb4ee903260a4b5d6495ea56e0877b268f4b1c7189aa46a0cc4ce

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Data.SqlXml.dll

MD5 b860d970934ace2cd20e956643893c84
SHA1 c27464770464e920496f23c9930804a05a79b5f8
SHA256 742fa6aa91bc1f84ae5fbcb909da07be79df12b39a6208a35932a20c3cbddb4a
SHA512 cd06ab6a312acfd1b7371601846fc92cedd88ee394754439475f1b5a8048db927c39f560c011c6478341e8f82d5df69f7f9aa293c8d051be5e458b516e4fe0e8

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Deployment.dll

MD5 be236cbfdd6ce3247f6664e5b1508ad2
SHA1 7d1949d62cd11427d77ef5a4a3555907e1610c7d
SHA256 dc1c0ad164a1b98635e20e76022a46c52323c2d29db0983b37fa351d85615aa3
SHA512 4da6810d2da79ba7f8b89ee13261e4948ba737e552e15d065dfd0c24251ad4d7fd50a92b50818602d341ad5093e3a11796e7c1d5a0011ba16c9fea6764ba59ca

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Device.dll

MD5 425d190c82d3266cdd453de1346f2819
SHA1 145255774f47e59d321556e2561f03d755ec69bb
SHA256 babc581c4fb7c746a79422215f75fd88c7282bd864c13d75e81e662e1d772e3c
SHA512 8d73de9b825c2b8f203bcb83a00fe5727b02e4a0537cdb3dfc4d1748e43be38739c5cf9ffb868036a6f915ca07c8ced91333d10bdf16d48b794262fa90504b33

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.Contracts.dll

MD5 c673ac641f9b8845856545e5c7c0772e
SHA1 9f232ba5ca29b2c2aff13ab52b1a8e9ab5ece976
SHA256 af28d3ef938b88878b9d479240884762d4b6a6dbf10acefc36de70a39e51f767
SHA512 59dfcf63d3c37301748fdc5305b3bd7fb7103f46a9e8c20096e09ebb3696528076d729c25578ccc285682e53031fcf8e169ec7255643a59669fbd2bf6d8eea38

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Design.dll

MD5 ca58ca6a81ba0831d1b526cb27d102d5
SHA1 8e811df9a6e75488e9b6f6fe1d9a43906e80631d
SHA256 6891aed5cb9e79c3ab4da1911039e71a4c28a387c5485b2f80d664cb794205d0
SHA512 2de034f8e4777c3b79045d0c0fc68a3f005c5b5e1d00dfaa63401f744be0401d2e0dddeae88faa7321c7422217f71c7e712e2767cc63fb8b8c2dccbbdcee81c4

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.FileVersionInfo.dll

MD5 0ce4d505d1875fb9bb35efcaba24a6db
SHA1 15c7dfab6ae466755c06339f6a9149471850b434
SHA256 11b1400c5772506550d1a6334e6c58481ed906bdf9b3bdf2ebf98085b7881f69
SHA512 c533ab99a8cbe3f72488345cbf40e35b42a3ca92d55a9ef36e318de3afa2f727ef90b505633ecb3bed156ea24abd181b9ff6a4d049e2e8dd70b940578107eef8

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.Process.dll

MD5 4e1d83cf9e7efcdb4bdbe73f7f70cb87
SHA1 8e96f8ba5e44e7fdb58a2da257d86203789fa0dd
SHA256 abd4f2bf727d5b53a10413b4dd08ad4aa93ebdba9c4027094e5fbddb2b010c96
SHA512 1f3fd0fbbb5c780476a26ad01f086da33647c5529a9533eda2d7bae067ee7c7506545dd44ce0e2adc5d46e380e1c24845e25097f2f1120651de576f00109d4c6

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.TextWriterTraceListener.dll

MD5 70771cc9a8c8ef2f174fb3fc9621f3c8
SHA1 e3bca030dfe2c7b8cfa1cd6baf5616604cbb48c2
SHA256 afcf496d1a0b73337a3660ad2a65aaca75edf1585a6eaf6f68c71997d7c415b5
SHA512 aa18a9ff457bd9ed886e22f49c3554d458439e63d2ab7ab34c6f7d293662fcda10bc60e0e3365ead8b12c28ae01f1b718a5db5a3bbcf873f498ed98efbfed852

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.TraceSource.dll

MD5 0c474b91ea6f65f1f382b056b11a0373
SHA1 8a6d679b3bc89a1770533e9a467c24d08f8fdb05
SHA256 ac946cd085ee0f8378091d9b65213c18d9d024825bc9fe6489326d85472336df
SHA512 c76abc921a623ddf49f3491a612bb8118e19ff4841cd8a4119a0737fe5804f7539cb3a09a38787bf83288be2e0daa1803559ec84d7173fdc2a810459b4346e6d

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.DirectoryServices.AccountManagement.dll

MD5 55b03309f8aa3df34cbf5488bce7edb3
SHA1 3d5d38f4310b85ad8c473cf5bde481148bda820d
SHA256 7cff9180f73f0c1b26bdcbde90dd72903068a410dcf21dae37d5428d66084234
SHA512 7e688d5b142934f355d23fe7cae3682b0a71c15d1359528a4260772aa50032b2c6b3666f4da39026e248718e1862724467dd6f6b9eb8bdbe79b0377b5f06a109

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.DirectoryServices.dll

MD5 2853a031055724e60d9950ab0c872b23
SHA1 e6dcc4cae5aa917b064a5ec8c58e9d2ac659a1f6
SHA256 d5674a630453dbd7c4a2dd00ec5e9a3c41799ad3dd1ca06031ca1df6f18d25aa
SHA512 9267156a4d3cb66060cbc26d509d9d37ec25c1bf4745c1d6e28d935c9de1fbf9057d709996ae385f47a6b9d69daee2135397a0ad895cd80bc40f399d73e2f6e2

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.DirectoryServices.Protocols.dll

MD5 2da80bde2be84b44eb8dcf7ab202bcf7
SHA1 48c652aeb4d6513234bb885a813d492067db7a25
SHA256 8cafd43ab5367f4f10a37bd154622026d569b60d5f05ebff4ca356c568d08a05
SHA512 5a72d72720fe9c3aaa4cabbf371c4b7d4da0ebdf312942905f9cd15b87c09f1fdc021650a4240ef82c974ac0e5ecf96e43d05dbe65d8b13c7ef693c1ad3277c2

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.Tracing.dll

MD5 601b328956bdbbf5d9146f74cd7ad771
SHA1 84fe31c570d9629b842a568e5879818da48c38ad
SHA256 c3a640e7edf079723b9a8f61f636d1fb375fe0b8357c6200a7799a0dcd09289d
SHA512 cda75cbccaf79004c73c214d06838ad98dbda532301f2f38d3e4326952872caf57ea86b2bd7e739a34cb65a1b9da107671d3ab089c2b6b2514d96cf41d0f43c0

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.Tools.dll

MD5 d89ac77b1e4f039b0f99a23c12122e59
SHA1 71002eca121b8a0cce60eaa2333e7193f96158af
SHA256 14314a0a026e3c4ecaf280a01c5bba849612d084d45f8a043f915f97d88d4fc2
SHA512 836897b871301ce6502de64bf42942cea842cc94c25acc330c67fcb683183b36aa7be486b5e476fc5c3490f0131ed5cdfdf871c7bace1f3e87e2ec98e8d4ba3b

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.StackTrace.dll

MD5 71421ac4ef7b01ec9c6776287f44c4d7
SHA1 b98a652b2b21dbc837c7e4eb93922c6030d04651
SHA256 da3ca48ff8ea062cbbbc803b83e4c52a325b1987e6e4a1428f2b5de01cd8a93d
SHA512 09d3528921c244b9e23a57249158a262f8461aa7eeab5d7fcfa6c3bd53f605a0823abe2a296cf1316c2046bdd482e6c76681e3bb3c651171aaf65889b989f5de

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Diagnostics.Debug.dll

MD5 23a26c51f97a36b1b4a465bbd1e58843
SHA1 3ef8c5189f7a8be5bcb57a9a5ca9d1101c158d0d
SHA256 5d4e299be4eb660efb179cc25722fb64f741f31e2407a89be27e53264a551043
SHA512 2ba64a58a72c439826bc7ec62b9dc56e6fd7addf50a6a6b21399d1a970a12aae8256207a9b376647687f37db1f9019f6a1e860759a0d8e64f8db26a33f5fae57

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.dll

MD5 c0df939e5683521a75e93176e1198ba4
SHA1 451c66d2b00bbcd344781917739dc7ccc75879a7
SHA256 2ef6ad3c94826af7d7205f26d605f982ad2b6cd7c9be263a190bf0c127c67dfb
SHA512 c74d64d0e5ff031ed35348b3a449d44fc5b2ee290ce9803c259601053cd4f9a6e6ac933d38e5e63ff7563351008fce40a49d0820a3c3a014fbf4997734d5125d

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Drawing.Design.dll

MD5 5acadefa75bc8d51792a44a8d8c93749
SHA1 b2c13bb8d97614c5db815f7459574312e6cf98de
SHA256 9fecb80089489af41c6968767894ca6e0a76f2023e9765be40f15027781a34b2
SHA512 40152133a6eaee8f15ce287c7c34e40be51e454c9240bafbdedab32fd8b855212ef97ea346b1ed124897e72df142df7a39e1648ff1ec4043982ad0434979605f

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Drawing.dll

MD5 4bb67b796a5889765b51c3fd10332861
SHA1 ae8bfd10dc9d00d2e15e2c8af888e1b45433b415
SHA256 964242c65bf06e54ec27397ea95be7a36d79388609a11f6b191789cf9006a2a1
SHA512 3e54c7b6b58e8a1e51f9a1b20edb84709a9fd57c8ecfc88d1e6be264b987710c8d84987ea572f6ea6a9c363161283d2c6f5c98ac9e2fd9360f3e7a27929ed0f9

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Drawing.Primitives.dll

MD5 132c6f9fc9c90af8d5d67c84040fa9c8
SHA1 bb0c1c68780ca37d3ec0c7884eb80c471bc629f6
SHA256 64da49db80e358657f94ca1fa9e8df2346c7be4e9d2fe039c1a2fdc804436c41
SHA512 d01c1c4dee5c4ac1707718afe48a5d3c9832562c0ee9f4b6d4dd2913f01dccf8695de405e521335053fd73e9aa0a6fcd8a251af6a7938365b166df80e3dc4baa

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Dynamic.dll

MD5 74686be835163965dc93882bd2f6cb9c
SHA1 8f7f09416301a306772879795581d7f0f7d38438
SHA256 48d80e079636ad107aee3e771e5ba0c53e867ee712b4e78762a35ff4b8a0c4a1
SHA512 11abca5b0f82b990b6568cf122f9cf9519262d1b38058c933e75b7a0467fdc0cfcc38d8bef23950eb2606170f053b20b006949f26d48f0c4a921be5d12542ea9

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Dynamic.Runtime.dll

MD5 a0ca9f83255ed0878dc42b0d837ade6e
SHA1 ef1b4a1335391cf283682c2ba074e2db11f9fd29
SHA256 e713c80599c803578cf522d3594054f2b982732e71a2c932e5f60f4122b9efb6
SHA512 ad788a12af325b30fbc1d615383e4e47d226537c567929a0ce9fda49fead595f5cda0738e7f4bdaca9799d8f9d0f05365e0d037a8ae10b8c548ee5731e711d64

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Globalization.Calendars.dll

MD5 edcdcb0b47a967d743884c83fadd2e1f
SHA1 8a0e95d53bd74765fd7539dcfd70d170040a173e
SHA256 855451ec22a267cc3347b552d37b7d14f88aed9d6796af2fb476b53751918625
SHA512 9b8cb2b86ab14ebf0aa98b57fff7e06135c2456903e5f2da94e240625ae2e7907d380a4668dc7ae8860e9581d427954e044452f72a992229dc8c56a49414eb7a

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Globalization.dll

MD5 3c12fbccb999cf59cc33ec1781c85f9f
SHA1 26fd257651b897d53f6d4904e4c46a1b6d86b059
SHA256 42325dc351cb215293ef4611b28f552dbd4467ae8b7629604bfbd17463092423
SHA512 03a6ef7b17da2bd3024034e98d686ca3ab15ec414b085bd8613f096ecac231dd1bc8d465c2ba4d32353391259ffca6888250798f3dc2dc196cfc7d7831d09324

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Globalization.Extensions.dll

MD5 112ea970f48043bc376545f1451449bb
SHA1 1092b2df9bba9e4ebfbe50248bb78a2b01130628
SHA256 96a37273e69bc6d1a7201af2624cfc175ec2559cb0c274d9bd4e309cce59b743
SHA512 07865ef7265d33c26e0c889c05c88ec0e4cd735315e66804ff35f22d4506ed854942defcf5730b502909a1ce115d91f94db24b1de5c97e864925b7d142ea935c

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IdentityModel.dll

MD5 6ce8bc5a53092bb37177555363b1e0c4
SHA1 8d4085d62144ba03152a8ac354d7e684230ef472
SHA256 97d6fe444841516c1e2c33459b931922fc89b25e9803311db0c7f4d79c15e89a
SHA512 277d3eb6f2a56d3f32ffee558b691b257ea6e5da7398f421cdab1d49a6519d4238059e5b50d30311e74fc38550246b3283d5f3de08d015c2b13794eed88cb41d

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IdentityModel.Selectors.dll

MD5 e0bbdfb937c2ccdc53dd2da86780728c
SHA1 143a75eaea93304b1d6f270e59870fad5972ddbc
SHA256 d2389f9f72cd3d42fc29b439c46a7c87c44602c5449d5cf6deff54d70fe5be6d
SHA512 37d7cce9418fe497e4be7f26f40bc291b59733354556575694941f49121989bac1b6a69a75a26ebec9d3a31d6e84b03b183476fbcb3fcfffba46cea2854dd716

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IdentityModel.Services.dll

MD5 6c34c916e48a1c083c1ca486b321253d
SHA1 7be8aef13df7eeba8475761ae9ae00ec625455cb
SHA256 9d4647b27a479d13dc8f7f619d3d9795aea3c0ace897e80b32dc2435853b4993
SHA512 6a03cac3ea0b294f2e86db0c061670d4a0c1c08884c29c88db79bf8dc66d5aaee7b73d0f8efb5a0f5e254bef1f1d4b54eb61c3e4d177a9534fe58d4c8358ed26

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.Compression.dll

MD5 e540a66a1ea47fdfbf936f7bf92546ac
SHA1 c84a6a4899faed9e5f45c2c39d694dc3f57f8193
SHA256 562efad5dfb16d7e791fff0d3c8454bae7c486d5350fe18a1b31c7b4cd9109ce
SHA512 209306c309db970d67d8e74d005cfc4baaf5d5362e2742ecd1c836c90b5ac8affabf2ddcbc98c45aeeda08aa96ed681ddb252451125dd480c0056a4f8fa96e36

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.Compression.FileSystem.dll

MD5 c3cd04444aea70b14851f6f2070f7781
SHA1 d64e192addb8e02569e5c0eb7e40097a58883186
SHA256 1393a6b6c6a61220bc2973de71cd24a4492c4241eb921a6f4a3b7767ba6d5461
SHA512 d8e44041106c37d88143bcd70643d282ef39d38339f6a40b85e0b2299b1147dcd018df200527a6e9cb50352b2d4fed472410d7593c588d21bc815ae020967027

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.Compression.ZipFile.dll

MD5 374de0fa3940329b2cdecd1266faf752
SHA1 f2e6bf87f72014391e3eecbfae5137bbdd755ae4
SHA256 081ffea36e46d4489c0357659a1d30aedeea6f82a00584e380902828d396dd01
SHA512 ebd87e8799b707223a9a19618803a11cbde8537ab4b6d000f0ac6c46870fd05881a858fa8475e70f6cea7a0a043caf3879da483d0c49e7019dda40758d92cd13

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.dll

MD5 2aa0a0d94aa8c97b9d59941e07ab0b94
SHA1 1360750ec75d804b3711311e920db1b70f577639
SHA256 1e4090c131ec4020ebb6914d8d8e96cf6c65a43daa7dd07971e10bf8b6142549
SHA512 218e0a3082b3bc368fb4ad8bee46e2d38e07ebb99e1fc3b38f9bb27b6238313625336caf0a8d6809c245d9699336776d417cf6b81f47ff279a8d6423b51d995b

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.FileSystem.dll

MD5 3444444df12a9fdfc2eb26bb99e2a0f1
SHA1 06a30a859f92208b2e1ed82185436f621c6ff8b4
SHA256 b81b52ecafaa7b378ef4cb6cf345ca84a799e30440274fffb5967ab40c63767a
SHA512 08a10bcee70a40892dba1b2eb8c91f24440489766664ba9697427a2395bd251c86dc88a65449d36f6ec50a75f128c48473f7273ee7a898a6981421cba857d861

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.FileSystem.DriveInfo.dll

MD5 1fb782d16dd22f4c19bbdefdd030b238
SHA1 053b120be4a76f9c72063a844c28a85b8e2944e9
SHA256 068f6bfcbb3472828f4fd66d37e2dd2ecc9bb4ca45f583eeaf01a5db97ffeaa8
SHA512 b6e4889ecad03b96e16dbc7fd386f25f168be8d6754447287c68aeae3e8fb4ec4f85dc7cbb8104119be56d86f39725253a0bdef511f84065ce131eddc6371ed9

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.FileSystem.Primitives.dll

MD5 b87c608cffb15e4f0a4bc155f74f689e
SHA1 20961e9245d46dc438224d1f3daa20432123f708
SHA256 a37fb6d0e0947f27a79989421974f24424a8b93c90836c0dfeb859687560f566
SHA512 efd566d37fafd5982f5a02b5607ab35a78edd2308a1d556b80c187d0c11dde8e88543c77567a9dbb5d545f1170d4c1a986aa935fa1ffb6e226a9b09299dcb5a4

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.FileSystem.Watcher.dll

MD5 a9bd0e9f27fc850fdb400f4ac3e2db23
SHA1 c57b27a37a01edeff033c3d29f01e094e373885a
SHA256 460ddf2927f20c4caf8bd42bc1e9cf6d86e9efe424c235695a7846c686a0e752
SHA512 f37721ab1eb3a36f24dd5dd88bb79670816f61525775cb78a99807fb6344b3de3f2ffe1fa2061f51dc5c8999356ca4d8fbe72720eecccfcd6149167ac944ddcc

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.IsolatedStorage.dll

MD5 11efce3752529b0c1ad2301acc49c9b8
SHA1 99560fb0f5eb696889d063b74fc8a60e3cae5448
SHA256 be324aa030444796e622ecaf032239cbf545235f9f0e4af3d4fb958404ad2405
SHA512 ca2ae90f3ea530519506996e4227a34545d22076193b43b63b9465676e5c5bae1dac6e147676216c58122d0148cd674ebf6890db149b0628397354347f7a8e64

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.Log.dll

MD5 cbf14a7d397b76f7a4e62c1ceca1db40
SHA1 067367ae8ab4534b65d6f66f2f790e534e680263
SHA256 f376a17e08344d39eac3485041a7d307c0d499a7e402a5215fb59e61e85e6b83
SHA512 662318fad5b839f2f4dafe35675d645e85744012d79a858c582c544d88a590e7670d3c57399a175fb1e43ec2dbe35d72bda04aed586d4ee9acfeddd0d620844e

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.MemoryMappedFiles.dll

MD5 4267f028cc8ba487f33e056b7316ab96
SHA1 f2e9bf27ad805b3aca464cdad12be2d9b946de21
SHA256 a222ca9ceb6489aec986ed43c8dd1463de7a9b9c4a0a2131466e409bbae88923
SHA512 1daeb9f3c0b749569fe4ff168dc9cd7380ba7eb18b2353185af3443cc35c3cf88e9281e43c8eb312b10c8fd513b5d0959faa7723942df95a847dfbab260ef845

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.Pipes.dll

MD5 5fdbafb0445f7ff6f25ddd00abdb9788
SHA1 47cf6d03b0b6df194544298dd91c2b64ac3123b9
SHA256 9902093bf401990c12d025cf46ef7f62ab31eeca245f8c65a9dfc8b58b85faa3
SHA512 76a93c265c1ab90e76eab430db7b8f7178f9fcdefa0a6621bb2a29855d5470655589887649a28bd4982e229d9438db842f1d82f0cbd582b3238fea3a43b575a3

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.IO.UnmanagedMemoryStream.dll

MD5 4728f94e44644695a5ef2507096c8e4e
SHA1 f9e67fa84f2d60e4405d64c74bfc00d050511e3e
SHA256 e04b064c6dd2df180672cf4c97394eaae55a2656f3164f1355261fbf4326e631
SHA512 e3fa9ea5da1baefbf78c2faa5af06580147d946c8ad173684c12a3dc6ad3fe0af9fbd689f9066ee9b5c978138c44255832c57b19b18fa22af05417bd6010639a

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Linq.dll

MD5 8769f7f22848559a39ae53574d17e8e9
SHA1 bb677de965c2ed27b69121a9f0ba5ca5f7b09fc7
SHA256 a5cca83036034967a55c0e57d1a2d29ea7dd45e34310ced7bd1fecdb012651ed
SHA512 ba491a57e433244c2f00581790a89d1cae29945547aac4c99874b9f04eea73bbf96a78fc0469d5833777b54097ddf23f9446a524df1dcfbe2d40067e62044d9e

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Linq.Expressions.dll

MD5 859701be02ccfbe8fce6273721c5f984
SHA1 92840048a58a002e189c44c78cb09939b76423f0
SHA256 cd34bc0aff747f6cea2038e27e238c76a06f0dfb5e2750ea007386302f2ff5c8
SHA512 e2bbddcdda16e805a7235c9dd4993b60efaa40ff87cbacd5b66f98c5a1c9bf8ba56a23b6b1ee0690f5a042900bc75cfe7bdca2d415d22b4d667edbc26a192749

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Linq.Parallel.dll

MD5 2af2a0cc3f46ef3a9d536cb7dcbca7e4
SHA1 00f2a5fed138f15ecd989523412a3fe05ece3ce2
SHA256 f97b2a07f27e14670cdc899b5140c79f78ce8958b26cb4fe33772cdc9f90e3c5
SHA512 3fe4aaeb97c1918dfb365b1a063a4e3ae9d432694081179026194ef8062cbce92b3fdda9fe0ff1cc272699da5e9f6f130ca3b575b2154bb90b61942df601fde0

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Linq.Queryable.dll

MD5 ce8d86787ba0c30b80269a301ea56c57
SHA1 88b9ff9c96ce85dd5e1eea9c9c06cfdf70e30b87
SHA256 db26e6a88b8f3120c1ff7fce49bc8c17ee3095a77e1bd7b532ba7500c0a28fcc
SHA512 47778a478013afd5bd26887affa4efc11521b57bd88b32412e023d2cd9f2faa343a028bdc79b1ff8a3babbba10416336964baf0a77c22c02eae48e511e030325

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Management.dll

MD5 45c7999569e89a4f959b9b8aaed69e2a
SHA1 d3dd226d2546dc996c53bb3d4c3da5707d291d27
SHA256 b5f09b5cc14de5b46c63c12b342799b4870720e3ac6dcf9ced0bdd6dede35b1e
SHA512 a183f1f233d98c71af76cb5b83949a572243fec480e757e8b08931d815dcd17615f27f118b88b3eca8e26997ce90d8b32bb12f84f90f106d151ddaf188eb672e

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Management.Instrumentation.dll

MD5 664f2fe392d81b7b13a8c5659c29b6a8
SHA1 e08e9202c73fe6f7d50d9ce7cb18eec309e1f53c
SHA256 d3dbdc50b5bddd5725bfd5de8e0e8ae43b4aa4e248156d5cb810257b4903cc63
SHA512 aafd4a21982e1afa66e34800cc56786bdd08d61eb7a915d934c992f43a5887a82cb87fde47dcd0035d4ea5ea73aa1004dae9d14b0ed0c9fd70fe6b2f65bbf9f8

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Messaging.dll

MD5 de4a8e93757fe51059f44f9595c4a425
SHA1 b58f1f06ef2627415fbc9efe51cc013de652f613
SHA256 031a19cad10efa59b1555c14afc6f151f7d1327fdedd51f7adf494ce52ea6d7d
SHA512 0fb24e0fc058dd6824eb2c2d22379dafef7e745c16b7faa4bf2e6037e536c28d597c4f2ebab7e3ac5d5162944891e5dcfc232b752fca55b50376d80daea362bd

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.dll

MD5 557de0c2724633ddc10e4c847012b7ad
SHA1 0b86694ea3de57eb8107cff507d69e6fd8308dd8
SHA256 1c88c9acc443f7b859387e6654a2ac1d1f2a3eabf3936200fbb73ab06f1d4c34
SHA512 6cfe6d2096f0d5996afb70f136f1c25a208910e500bce91cba2c4d1e6ed66222d27aeb552fea9519aa95d732f3f41bbe8d63f65339abe4b1885f06636951d719

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Http.dll

MD5 7a772443ca19c25b37d49d365403624c
SHA1 08b1bb073a2a2631429c4810a143542d84a6cfc9
SHA256 c6f769520a5696750dae11dce7ee739f0c471acade200f0b2f401e7edf4101e9
SHA512 f35a928f8ba190447196b35848452206e8fa60698bf490d599e0ae997283b5df86ee3d4fb77373167dd6058ec6ebabcf780762a69e778ce323246c47e21aaa29

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Http.Rtc.dll

MD5 abf64bdcc0612eaec6fd20c6abec6ca3
SHA1 03172fc0b518e06c81900ccaed51aead26cbaed5
SHA256 56edbe5b585449cd4ff7a8872ec4ca05bbe48e99a9e5bd4e8fb85d032ac06276
SHA512 d6451bd3e4df9ae40151b6290ca26327f7b0b3669ef3c4e92178cb70904107eb53c975593f458a0d750631e897ce48e324c3d17402829eaefdc099f8f882434f

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Http.WebRequest.dll

MD5 5bb56a13dc06ed6002e7cc093fcd9e79
SHA1 be74d9b4d1678d81ec8ad0e817f329b2d0df8ea0
SHA256 b5320939d10e8ee885814f7d7ab5d988ed0e08396529ddd544575012f342c581
SHA512 e9b22f2aedb91bc0815fd861adf62934eb001929a5304ff33b877cabdd199dee94ba291e78a0ba7b05f030982b722948254ec3db2eae13ebf9d4df0ac1108653

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.NetworkInformation.dll

MD5 6711bb72d60d469a402570d0e7a8f7bc
SHA1 875b17bf20ebcefba76fc03c071f5b69d9d2670a
SHA256 e520965bcb24b09acece680e458ee1be94e6ade45250206abec07009a41381d8
SHA512 ee4ec1724da311d6583dfc8fe70ff097adc02024cd66a51f9248973683dca2b3731c4a689c4e74b6fa87a1834e0f56c5dac2c511b3312ec2fc3cda42b135da14

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.NameResolution.dll

MD5 3a5508d94326fa7b34d597a9000f408a
SHA1 d6d1f0e24c043aeefceeeb8de02f621a698601ab
SHA256 b9533b8c58007d3a4f39589490196d61794c8450dd371f4ce8b012cf6cf815ce
SHA512 78dc37d2f29ebb5ad3a2ea79e8e04df32fd3597e85b14aa18af0e9b6ebf574cbaffdad2ec7c133c785111f6276a9aedb8d930cbfd7de7b906e0d652c64235115

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Primitives.dll

MD5 36ef13c8e413d1005fbf2e4ffb6ef446
SHA1 28c42346dec796911059d209ccaee93bdb91070d
SHA256 2117dc89fdae3ed406335f06a4efd2165b14f0f10c02c8461b87c7fd859d06b1
SHA512 0c3d9a8a37c15912d8d1a76447c3c2bad49b21b63905326c7abbd5172603254745f0acfe6d982e888963a952f27ab20bd27acf91950e7b4c65f1893e26c5052f

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Ping.dll

MD5 384722f7ce7949b143c78594df422ba1
SHA1 05c330159c9ec15b053ad58c655bcc3a0b226044
SHA256 dd70429fc9a108e79522c0732c70595ec985f164a0b1590302c4745336e58d06
SHA512 20930daa8cb977b71b71eac61c5b5a8516a570f3e0146ccdb8da7082bb0d50bedf5b05ed12c2d565163b9f6ab599aacda60d8cf7eac6ce5ca39b359234e29728

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Requests.dll

MD5 6202413ca3433c1da00363d57313a923
SHA1 86b8680862ede588f4762daebcda0a22aef64a03
SHA256 adbcdecf00e93f8a23d0362c12e214b0173e0c8b2038b25c49aa7872abb66119
SHA512 870e05fb5db79980ed7945722e898de42965f8b9a04beba752e02447afceb6652437be6e296566e76c4be936d60d79f6e738544eefa7c849f06743dc31db8985

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Sockets.dll

MD5 74cd55e0a2e8240f1e6b5353aeedd69e
SHA1 6638be1529ae1b8a671188b3c24aef9734ff72ea
SHA256 44993868e4d7f8bafa954e411afa8e31bd10daeacbd818d0bae39061d11462e8
SHA512 9b704a2abda58dd300aceeb645aa4889ffc1e990bf2dbcccc40c3907a0b49f612d7797b73e676bdfdd546bb5528aba947df0207cd94bbc0b7ccce9c86639275a

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.Security.dll

MD5 b1517bba6cfdc1cfb8bb758b07a92011
SHA1 a951fca7e723daf55463056c67ee7dbcd28ac409
SHA256 b87864b8846ca246850823b4cda3dab5333ddbd08ca82bae16a92ba79b04257b
SHA512 d57df474dfeac9821702776eed2431378647cdafdd462f88eef03d796d27c6e69acac145e15e99db90eca56619ca2faea6913423fa3144a06559d039dd402177

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.WebSockets.Client.dll

MD5 91e5ebb1c477aea945242400132e9337
SHA1 3322964670b9705b5e3ce1897737df9c5ff94608
SHA256 1e780a45a64ea08f5b8a0fbe3c8da955faa2d1744bfe1b5d4e2830ba0fbeda91
SHA512 124dca1b53fd0790f820658942e3927602ad220c3c006814d302bb4090b3ff1c23ff40fef0dbcdb6ce2687bc232934da2c7271a71f5b5be00c98349f8ffbde5c

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.WebSockets.dll

MD5 e74aee14a1c28b42468385880942be9b
SHA1 6be6e601ff5149f5417b1ce3518f40be27454a11
SHA256 47dbb9f05dbb856e8a6897f819a84af4510e11a5bf708a1bf7d3281536b01fd8
SHA512 13cbc180e6d2596dd0510f81b33a20c39f0b2a717d3c10e3491a61787b89e8a4d98a57334f306b0c528ec622a673d417b42d7188f50b8ae6a8e041ac926d3938

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.WebHeaderCollection.dll

MD5 302d0099cbda8f103fdccc53ec5f6155
SHA1 e68c8be955a9e3b89d4aeb46c7a5cda31c512c5b
SHA256 e2eb0f0f9fa12aefd439036a942d58ddd14100b5f85ba961f279502cdc64166b
SHA512 fc8e0bb59dc505ba4ef7c7d2504819e8b63dcc5e0254ad19f2d182b218509f91ea52cf776fe6d5d86fe957306f38abbdbfbe0e5f7d513ea12237bc2e997e123b

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Numerics.dll

MD5 10708e7d7c475b481cd88b170b9ad9f9
SHA1 ae07c548fd2844426f43252706cedc38878f8679
SHA256 c25ac44183daa6a3896e676d104b7167a3a9d033d3786b9097e668b6b7add9e4
SHA512 459ff04aa79929fec1ed63200f3d2eef4551658f7d344d493b002a093e1e9f822d51e18b12c996d459864709fa368701a493b17e30df79966ca6f87c7c7f702e

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Numerics.Vectors.dll

MD5 8a09e27aa6290e30448050b178128a3c
SHA1 a1d5397eb275738dcdcc8d15492b2dd6c7a74ffe
SHA256 542007cb4ea0b776a6dc7eb50cb1d5ad16617851ca32a05afc9d5c56639a2808
SHA512 906ba5bf048d1613d0f7f6b68f7daca97d3f611a7b2d4bdcc85eaa3caa0e2a823965479b21f2bdad19804bdaccd4451f379d3b4ad56f2455719c6fb40a1fb1c2

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ObjectModel.dll

MD5 b0846fdb7f9d134449a34f70117e16f3
SHA1 d37688598adc07a0e2056b851b833b72ec05c686
SHA256 7ad8be1a59611a2121d5c5ebdb28eca69df4d02225f99eba239fbbb7c897b7bc
SHA512 09148b8c8aa3cf29e25e84f705d2f67c41fea74e7a79801f3ed9f540ba9f408527844346eb3ed9975e7ed229134495ca0ef8f43e79fe5305f7048806f3bb2eaa

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.context.dll

MD5 d21877e57e0579bf42fb3616fcfbb666
SHA1 d355de3e69eaf90d78f8a9fbd01384fe54febdf3
SHA256 5eb60c999e43abe782aeac9aa6906763d3a6d49e1d4eebc769483297e7edf9fa
SHA512 bbd670b3d8dd56126c4ef86880d61e200a8afefc8d65670cc6e45aa775269abcde5c5695d39bd534744840c4c8427bbf254dc2df077a891edeb98ab47450008b

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.dll

MD5 2e21567323e9e32114368bbcf9ed6f06
SHA1 c584f81d9e476e3bdf4d47cb5c963a9d0187935c
SHA256 04e2bde694a82d512657948b1afe658fb566921e7caf76c634ec7fddc21f69e7
SHA512 5affb23f2be673850210c8847077f00d810a23a9618011518007d93e0f2474259e6d454c4e51b851b97d9fa56e02a0c1c8dbadad0d11aabfd1f2b2ddbd78a54c

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.Emit.dll

MD5 4ef4a4590cc19fa53a338109f6749bc6
SHA1 00ef43bd63962a87b0530d0e0482576ee221f374
SHA256 f001dd4a7a5a75c90dfcb5472b3317dc7672fd6871312fbf01def44bd980e87f
SHA512 9c7183f1b2a50447357518c22bcb5bb13d17138663f507ddc2b27afcf88c32a1d635a14c2d99b7ef57feefd9232f7a9a45bdd0f784c3d0de08fe9ba2f0ef565c

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.Emit.ILGeneration.dll

MD5 aa544271f4e05f7eb94ca10b33af316f
SHA1 02dc7d044036f4363d8850eddbb51f138b9ae33f
SHA256 a14b36062aba328d96bf3586f27275c27f8c1738d1332c482ee44e3b46eba8f0
SHA512 40e62159bf253db5877a0eedb041f9d9cd79cbb2eede91d332721559920887593c802fd382416d37335a2baf82bf4ebd15677ec1a60af8fb6cc4f071c73b80ef

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.Emit.Lightweight.dll

MD5 613693d9df50349262f63f33ecbd9f6a
SHA1 c4031282edd7840c8e5e5448b619d3a2f4e8aa4f
SHA256 e9060387a0950bf4691de365417abade69c0f7c1752a2b61f62bdee8a93d02e0
SHA512 af6d0cb86b7e9c691a9aeee620b86e61d71d1e2d64a97e26ef9c482605034f4953a389a24c4429fb867069bb0cf7ea326164cfaf2ad050cd0952a82623e95a87

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.Extensions.dll

MD5 ada1fe8d83d107110703be630c50316d
SHA1 91516b886bcc0cebf1f4c324fac9a3beeb0b4102
SHA256 07de9c96850723ff7fcef57b874a594509c872dec8d27a3d2a5e6afd39f6eb06
SHA512 beac18c3a641666b7e4e6cc43bdb36bba863f62c1303b9a11bb0ba81208673124cd50d71d3c4259bb7c131123195fec44c02eea604c235e49fd1573b803aea52

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Reflection.Primitives.dll

MD5 e921acc652a9cd6be833bee2c4f9084d
SHA1 0e956577cc2698ad5c28a7ce89859946e39a9b7e
SHA256 1ae55c959161e251f294f921a421408c36bf9b624097031fffac79325941d4ba
SHA512 f201801cff74a2aa119b15c22c0f1d92fc8a6663feaab9ddbfaac7c154633f0e59760573a30070bb135c45c44ab0c15f55d0cd7b2c8714752463fb2459ac1844

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Resources.Reader.dll

MD5 457af4182ab3abbeb3eb287c2abf339e
SHA1 316e9ce80ea381ab528f84c1240625da5c0e414b
SHA256 95ef43434fe9c7311021fb195c25cc3edcc024b4450c4711306a90840ab45aa4
SHA512 acfab529be97612bd4f17933089923b1333c63002d1d2391ae373293824a1557b8a6ab12a9995ea164c9c1c214218114cb01b8e06673d04cef9bd9560e9cede3

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Resources.ResourceManager.dll

MD5 031b74297027ca0ca40806fc59040e5f
SHA1 d7eafd3c07607625e5ff5f1f93a2502bbcd4d529
SHA256 b8f559ddf860cdd7ddc9639cf4ecbe1afc720061bc48bb60f3ad4998e7de9976
SHA512 94c85812b96845cbcd3ae668605d91cf616eed5d46d766fee11586af9e971e3c32689ef2beb8bcf17dd680ff26506bef379b777091614eded4aa473747ba39c2

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Caching.dll

MD5 f35261fca4774314a3b1f49e66512480
SHA1 6de696203fc732f2a39334a59f997a9265d7a57a
SHA256 f6bae6f1db89c2fe4c96fd600aa235db3b8c5132d3d21787893bbc238b477fee
SHA512 711b352a3e0586e72276abdc0cbb26dc089fa2f01497afa3b4b908f3202c41c1833fbceb8bafb4f6dd7e34e5a6b7cd8356e41c366de0e9a3da3b78c6d8aa7d58

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Resources.Writer.dll

MD5 4a16383cb23542639a7e3db72aeda412
SHA1 b95bb3b3d162de4be3d99330b5c00da54ab26a17
SHA256 97198c45da25ffa6cb1776042041cfb6bf5f3d64f8bae53b2115f19a34458b4f
SHA512 689546b5522f90aecaf50d6ca233052f0108bbfa2f4d963cc2053408c287e7d920809a4f5cccecbb0d9bcb824fefaf32fa71baa47d780d2d6b566b58c485ea65

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.CompilerServices.VisualC.dll

MD5 a75f472dec8c8312b0567ac8947d2548
SHA1 72a84559dbe205d6c5b87ce3d4aad6e19f33854f
SHA256 937718b484544f74982a7584a5183ca92c7f809316b84f1c418482a95abb3332
SHA512 2e06f3d3ff21909fcf082b6a35c3ff712e843943baddb4aaa8204dd904371c8845d80572df90c5fa5eeb2f730724cad6886b2d599bb7976e288cf9f31637adc0

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.dll

MD5 93c4e7fdabf14bbb910eb4e0a5559299
SHA1 5b3736ebf537ae1028129b67c5d5f94856254a75
SHA256 997846427992c60aa430ba8ce1fa48f769896f72330a380fb639119bfb1013f8
SHA512 2152713935deb3679041b6423794467ab26ee5108f6a4d6ebd63130b68460c259de001efafc5f620f8348eb9ab71161eefac67ad65b74dd81305c14715e819ba

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.DurableInstancing.dll

MD5 51ba5b7f05f6682699932b616bb87bec
SHA1 b64bdb45ed31b25246e2a6c2be77429ddeae7cc8
SHA256 88bac308c290065553123e828aa6c8618b1914a2d978308e6d5255e6f77472a7
SHA512 ee67f411cee736801621bc50ced1561615ef5798f68a5af4df88d06a08a7a8cf993dcbb2ab2ed30f98866a6331dc130b9d84f2b745970f78477bf03f10017964

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Extensions.dll.EnCiPhErEd

MD5 c8454889670d3b106553f8ebe29b6ea1
SHA1 216053064cdc5ac5c177c8e65479f4bffc6b9d01
SHA256 cc4f66857175750417f50c4643a2758ad7c2b674d7dec77c1a1b5b37d2b9c466
SHA512 fad798f9d651b80d8d156811d108ae1ded06f84ec4cbf7b8610868b3e82532bf3e1eeca0b395d63372f8f6a3d1bde01bd75f5a78782619829a40103aa2a0c6dc

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Handles.dll

MD5 4986fcaa8658be2071a8464c5c258ed6
SHA1 37360453b1d567842abfcfca8b9ac5503b833488
SHA256 44ab21444705def5fc408c5f9bdbfea9818939440312d03598e9f379122e27fe
SHA512 0f7451c2680bd72772f8cec8454ed285bb2e7f7868a0cf612ef83e41fe759df908c97f5b742ae0102654e6a5fbf60342bc47b2e3bcdf3bf7f57274c129b531ce

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.InteropServices.dll

MD5 05219a7b5416a0e4a49607d8da3512e8
SHA1 1a21802fe4f0155d6917a6cc1a5b57e5a47b8dbf
SHA256 39fc5b410b1a98af996856009c66bea977d7ea928e8dcd8f7c63ad2ba61e78bd
SHA512 861a4d083f0c9dea37b55d48803c82f0699a42cdcb176f6184d97bd911946e284dec9d1631c14f15522924871e7f8520aed85d1bcc0801374f539f008c66b204

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.InteropServices.RuntimeInformation.dll

MD5 6755ccd3bfda4e31765ae957631c45ee
SHA1 603781fb9835f4a4ff62cb11497028ee750826c6
SHA256 ae76a4594f33b3d1eb0c85f852e312c205186afba12ae93abd1037be3cb96fdb
SHA512 4c508541da9d18e11637304a3cf62fcec24788e6dc13cea5bf5c5f4e2ec263439c4f04767454feb593c2f72b189f22fab0387e21ae8adbf5b60d53ce4e5b2e40

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.InteropServices.WindowsRuntime.dll

MD5 40a87fb98ab556c2df86c995569f40ae
SHA1 dc2f98a64b8980065603745eee17234d1c38b51e
SHA256 e2b8bfcdf00854f65cdec09cdca1e4bdbe89b7f4282c53aa8e61a16b3499731e
SHA512 878a422e7b06923641f67f26475b73e09a5150c3896cf591b626a6b3e26c4bc5d63a9fc4331556a45090275a855871f0c0aad9ecdc785ee698b1bf2b310901e1

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Numerics.dll

MD5 40ee494a4a56ccf749c0abf82e9a5e82
SHA1 f2014e2d6243cedb38ca857103727db4d6868b9d
SHA256 30532dd3db39c069bcc4049cf5ca638e843b14c48395e59d8cde95f88e8185e1
SHA512 3643863368e012b8f8d5c7fd8ffc06e997c95fd109ad879afb2b8a83b309d48f998567f95737127a82078f646d0512981a9fa538849e7cdbc0ea3ee68b1bebbc

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Remoting.dll

MD5 1566fb272f123d21547f602ec8e7c265
SHA1 5bdde5cc53227ec039dfd1b8b124e96e4f2a511b
SHA256 652d3af628a0b88671238d4a59338e1aaf5939eface2622e84cae15b9884e464
SHA512 9818520cecfd9e4677119fb2640112063fa385876dd8d0bc4b881a2fd30f68630f9c21f09ba7feedfbc440ce91570ec589b447e8a2ce93bf1cf5c91a26fc4084

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.dll

MD5 4a5388c398588d33360c11f439710aff
SHA1 b3c2df0bae86ee3c75be6f654ae839dc1b557367
SHA256 fcb8e0ceffcd7aa78252cbd0cb0185aa50f9e1ed3d3b5af576e808b633f2358b
SHA512 7dbf7201a3f1538073d74c643c4d82a68753b858421bf274fd4825705be3c2afbd87dd83828b42994e1307f5b9a0af6f48c34417a0eaf2e33f9fbae3fabb6131

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Formatters.dll

MD5 d1634d76ded01911931edfdd9b6a8f1b
SHA1 ca426495199ca307b8c7b81d09c8b71a577315dd
SHA256 dd951c63a8ae3102cd393a2f3cf9df32697dbbc3a37102c310e163af91588f39
SHA512 eafae8b1aeaec5f5067a3916d00295ceb336a54a3f249c55fe5e706af87d92109ba7b7f7a6a24f8a79939e07b0e9f5f96c743372dbb31dd5215a13f1ce41be40

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll

MD5 b9c5e0ad89e4145fab71e06fbca72c7c
SHA1 02558d83bb4595664aaed318a1c9b0888caadbf9
SHA256 5497799a1e110e7e397ca9391f43f71af5f9824eeeca8fc28c09eb33e4585446
SHA512 0b27514182101928ae03375fb56c27ebab7a3de12877e882001dc68ae3c024052683d0afb8f17e05304659a7903c89a4a6db3c48920156fce319e38bb1ffd652

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Json.dll

MD5 4e32da7a2092ede2cfba5afb2fd92c2b
SHA1 a6ab60dbc63ca1c4cb02dbacbfe29941ddd563de
SHA256 c878a6e32acbcaa8de53791434492ee500253902cc6e3692037d46b3450e55fc
SHA512 b2837cf16eef9aa87cd7584e6c0a569046f10fe49351341821711c993efb69a23ed3b600bb609f802ad980f542d191bfe5dbc0ca02acdf484cdb462c80eb44cb

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Primitives.dll

MD5 14f18c14a5fbc517283d0e6dbce525dc
SHA1 08cbcba3e6d22a755983e0441e95fb3c09535e86
SHA256 9244f8fc541a20d1d16136da9270e01d281a45959d2fd4f203b6fa91a9d662f2
SHA512 ef6e4bc66971a0b27296b7304c9feb9e0b02acaeebcae0c0cf7f0254aa27f93708fd0a9ebde5d003dc09a88cf7e6c1447caafc30a6d7654ec8dd51f97d301501

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Xml.dll

MD5 738a54104c2809eabd441c336b055036
SHA1 5d9a1e1ed63407c94466920e562b85a27346001a
SHA256 a581856aff79eb8b676aae80e3c75021f3c3419b96cd23b56ee972a0dfe4c816
SHA512 b0be7e7ea219e5986bc902464da75b23669f61876c54e6f0ccbb77836b437ddea9b9c3f17e8e649ced4c79c154fb1801a9f5f08d650c0ad068eb26870c48e37a

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Claims.dll

MD5 6e5f7962e3cf7a5f969a97cec344173f
SHA1 50ecd9e658a29217ab9602ee09b1d4fea0f806ac
SHA256 c069978de86695dbe9713bd55b4cd68eeeefab55788b0947239b9b03b2f8be8c
SHA512 dd762659b08c5c38b7a923798933a24018ee1c1ea8d05b322f5fe18bd5691dfcf10c54e4a5fb4c255594283575792d8fe50346ad5fe3aa3228a58e0856ad11bd

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Cryptography.Algorithms.dll

MD5 63feac873ad3568d834828fd268499e8
SHA1 d41864607479438624469cd8f543dedbb324b110
SHA256 4ca01baafa42ed7fa34d24a644a624c8c8fee835cf5d61c46fc6f6b7543fe95d
SHA512 53756da7d0855396aa9af14f7ff386173b8d62a0cf49cbdee8107b598f357df5d107c880e314a17fe44199684ec5e69fe5015399aff5e7c2bb5ad053d4b72439

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Cryptography.Csp.dll

MD5 b77b168ef762f3e57af6b1c2521b17b0
SHA1 a2721f3a972b8faea24b33d2900189dfd5caf45e
SHA256 b06c3e1ff41335ccfde114b7c3e91da2fae0ab9be6f893940727b91d4bbed0f9
SHA512 d7cc0b3118b47fb451129c622b84f4a42e27bc510145c6a00c9ed5b85558417dd0bb01dcd820e4efcfc34f0c599cf803f4ea922be3e70ce66b7d4bc60703e23d

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Cryptography.Encoding.dll

MD5 13034a6da228deae85a3f8a63e1dda2f
SHA1 d2817f64f773c987c5a4600eb497c9382a16146e
SHA256 be66f106055e53088758eeebd8ea83fe660f34a0192c92a139c2fff4a06b6c3b
SHA512 5e79af69fa39edadacde8fa6c841f588ee4c34123dbe41c9e19e814e50763057a81b457d0186b70f0ec9c8c33a68fa28d74af14f97fdafe80a40cd87fbb0b86c

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Cryptography.Primitives.dll

MD5 80b2717bc2ba5cf6291fc15a0e0336cb
SHA1 64ce69b34ff006187bf7fbea334716a7c62d9d94
SHA256 2db3571b99fa5acbf5bffeae0b94b4d45d0db7f220c74ddbe751e391a763473e
SHA512 936020b2232f8ea84560963a8def59eef03da8dea047b32eadc20488df63256a0516f3a7a4002d7efdf462da6892643e877b3b52c98209f1d8445c4a4c3862b3

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Cryptography.X509Certificates.dll

MD5 0fd3551d38b386032c71f1c38a40ea73
SHA1 e0fe071afe5f08b1a84fb072fd15c065daaabcdb
SHA256 4d650bb7f27875c37c62c0b3a652ca2524a6e4d912deba4b0a6e205d2e4bd869
SHA512 8f16eebf4f2c4cfe12cc6332a47e8a0e92f46f965f8a7631f2580f5b6749cfe243af0c90668b6791301f57dee01115445aabf6ee499946952745dffbd7d9e30e

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.dll

MD5 5d228be5d1051cf44e4b0c192be8dc18
SHA1 0e9634e616ae462d79b332a7dae77e488ec99eb9
SHA256 6d290e67e338c7e70a115ab2b91335c65080cda19ebd56cba6acd3e98783d467
SHA512 b7ff2f716430f2a9c822d8586a23a771517f498a777791ac21f20072aa4e9305690cd0230e580b433c1dd7374d38bdc58bc3ca2726d050c320b7812faec238d7

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.Principal.dll

MD5 b543daed9dae8bbefb750e01ba905352
SHA1 8dc11bce564683e2b855ded99a903641985e193e
SHA256 2893f3d0fd91c70ae0acfa9cd24378022acb09e92de43d3fe3cc080fbb78dfa5
SHA512 d453855f555b3f999f65444e602484b110e95fb2ea2f1f818b9221c8a7f6f663e0036785032aa318b4d059623bfc21f6a7a789e0fb9618bebf254cf722df1f80

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Security.SecureString.dll

MD5 812e3eed84f9cfd4f8eacbf62f1d1227
SHA1 89e70c13e2ac799aca7178267362b5c3e22eb432
SHA256 0b24a4abbe64bb6191bf7fae9528bc0b14cec882608ce0cc7665237a358d7e99
SHA512 fdd00e9fda853716e87e1254ea5c4c56c5e060ed6974e91d53d182857a505624c81230a417a18ba0eb9cd0f1a9d7e78d5e1ccdd7b1fc56fab755b53951b35057

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Activation.dll

MD5 4462162f2e013f088cdde0d1c3dde9a5
SHA1 c4c25a48b0805be0a23cb220497bd012d7974b13
SHA256 ef56e1ce56437f6fe541d58fd6d99b21fe90a9b6aa9da10f178bc2813514a89d
SHA512 8c8133dc83044818d1fea112e1451f796c950e9a718dcb77a8eeadae5fbe8f856e53131bd803266f7de664d4256b3539d5a7307ddbbfe4a83a4559ed7be94d76

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Activities.dll

MD5 8e4a4f12290abe777f11b6bf4a54df78
SHA1 325853bd10726d6f7f5b7947e5a306e381779fcf
SHA256 0cacf1b6343fe22ea8da8eafbf74e171a9a9f47facb119e9be31eccc9f7d9cb2
SHA512 c59791b2c051eaedd9195edc37954c34f17746563eb625ea78bdef63c7b5951d5c2bdc1e4104871f5c2b3b2690ec7cdd40f3c1e324f99c5186125b910423cc13

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Channels.dll

MD5 3c0a662e671e4ea84de016077bdf03d3
SHA1 3b0cec17d6d0ff3843cf1f8c38ef15a44fca1dfa
SHA256 272359ffa3208f0ce012ffbcb12ce83372de095e73e66836ad02ab411759d899
SHA512 e316773bf7ccc90b9a9927e1fc99c5edfb5f911dbe81ea95066c2b11edb8f24bce6d8b42cce2c21bccb9e2e2ba4f34111ecd332fa1451ddc542239b882f2b106

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Discovery.dll

MD5 d05e05f0661c486423cd79f9a0a38f5d
SHA1 36287129528e55ec04e7380c78228cbf20861fea
SHA256 b63c205df8fb7b091755583e4846bb4974ebc2c938bfa62b86362ab6c2942833
SHA512 0ed4f311a65785d48701b4d91050049b7ba6a1c19e3cf95f7f47dc5fbbd9a6d696128c96aca132f2de3495b9fa9b9956ff61b7f27d96dcdc624d8afff088cd35

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.dll

MD5 b8d30f29a575b8778df1ffd1db4e55aa
SHA1 f830138c92d2253cf8874e021ef94ca699452c65
SHA256 08f7e7dd6d12e37ae45a6fa4e7b81f8fde218cda3d4a2c2b7d1a11ef1346b7c6
SHA512 0e43d3a5403af077e7b9cec2f9d62cdf009efa7f8182215e6550e4974904f0d051ff68981a1742e0082f7dd53fcf30eb0949315dfb09c817af6d966a08ac7686

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Duplex.dll

MD5 6a6b4f43d1d8c779b6529f143fb0e5ba
SHA1 5e9b01fc9cd4e242c55707b8b9fbb5c7198070fa
SHA256 d4c826281137e336e627ba21dd641976443a70db4df0255057428626d8776ca4
SHA512 9533cb2af18571db5664527b724e15f965e1afd7d00e27cf9a61175514107e859cc13bfcac47b96cfce18ced9d0fa37990d49d57201f79f9f8c2ddc95776d5d5

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Http.dll

MD5 c04e6531354af7ee84248f7556efb070
SHA1 46e97dc97881e561cb0e028284e13290269b911f
SHA256 3f748792f5461775022ededce801a1da2d73a0a0341da27acb19a0b21640d7b4
SHA512 11fe42a37bd0e3cdef6201e27835607b8dc377b25dbd7fcd199d9adbe390ae3a73736f72c2daebd17d8dcd58cfd745f6f0c662e21162216dd198057f44b67644

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Internals.dll

MD5 4fcdc96a995aa224dd60fb86743ec6ac
SHA1 955b955a7ad3dce282dbf6e75a482069e5714002
SHA256 c5bb3a80ffc2a444d29d8698fdaaef05820d1ce03b3fabb6b3996b11ef31e375
SHA512 070ed29f18f3dea2ad3a64f315489c99347a697df8482dd3396dd75f105849c93c4f2f32f74044adadb16eaf7da9051e5e0a0e17eff34d9b70d7a37e2bb3286b

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.NetTcp.dll

MD5 276aea10563204662c8ac483b6a627da
SHA1 90744318eade5d11ce9a14fe8674cfdb5200c9c1
SHA256 37d350c1aba4721abdb616515fec152c379e0ef1f5a9c3b4d166f3e1a93d86f8
SHA512 0f0dc3ecd4c1cb2bb02d2d180935967c17b57973c79093a95a4979271c553edc07c9a18299179191aade6fa9e0fbe79a6d238cedae56041b1407e65914800cac

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Primitives.dll

MD5 6572cb2a39c5079cf49d44410983e7de
SHA1 30cb2cd6acd419530de5194cf2c89a5e5f2d3397
SHA256 5a6644166ae9ea7d1502251d4697e4293d8bbbf2b6d68468cc13a71c65b48454
SHA512 5a60eeff93000898efd28c2e21636b6b24b60c086593454982f9bfd22df8bc7de7bc08ec7f322ccd5761d00e2e27c73044bda6048ba6873ce348ddea1d1226a2

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Routing.dll

MD5 ab587ba73790bcdcf488677e34029001
SHA1 e07d54db335ded4a52b2d1ace9c6cb83cd56846b
SHA256 65a96ee5670911df5512cbf39d14d50fea88bd67575d657accc77fae84a83de2
SHA512 02a9cd98178cd0992b27f7eb02f3ae302ce18c47801f717bb314c1939253a1b4020cb61fe1c31514af588f852b4c8e259ee59b98d56f1870cb7200f6931cc0af

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Security.dll

MD5 20131dbde315f74554fd81182964f21d
SHA1 5596e7794e07442b655394e166313c7a26df6687
SHA256 db95c82e38019c0dd4789c358fee516bd3c618b910dad46c2e2ee53fde34ef6f
SHA512 88af4ff339354d851dc1999319ba25d00ae5b3337f694f58b62a8435ac19c8f71ae819b2e8943d89d31dc11aeb9b1079b666d64093b6e24d34b3942ac37b728a

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.ServiceMoniker40.dll

MD5 dd9d2ff5d26bb9ebfe996f13f53a56ac
SHA1 8a2e91218c93d0aac1a789406a9597dc2c2fbda8
SHA256 a1520513a6f9ec1bece151e69ad29ccc21ecc18c7355a686da6fb04a66d3c1d6
SHA512 74d690a95398c7cb25c9bda903bf21fe6b08ed0f006b40148bc37a905deefc72285f7eb8922479d06fcf845bbf02edce916fdd8af25a264c486f5692d7240859

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.WasHosting.dll

MD5 1fefc968ed46f679ad0c7bc5c8a4a726
SHA1 f622b778cd709f2c1c2c92829c027a041b0b6378
SHA256 19db7df90812d45ffa4979bb7d1204bc85d2a368af3f0f4ea32cf54ef2741312
SHA512 0981119db74efcaa34f7be43049f16f3b08c6128d5dd4460875aa92cf821c798473af8ce26d7ac7bae43bcd2b110be523202691a1821567253b51d538883eb7a

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceModel.Web.dll

MD5 0913a8382d3d889a9079c23bf79567e3
SHA1 f9da84cdb24e4bde3a2030eac4a5270da2ff27a6
SHA256 a22b5b374ce4c0fe2ca96bc2ffd3b378be145dcd416bd2cd6126b404f2efc562
SHA512 b47c7c2b72e469e207916334f00fdb48f830bbfbcb6dc1235c4eb01283ffba163fc75cdb8b445a3022bc5c92684e518ec14085e9b87e7a86d7bf66200747f89a

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ServiceProcess.dll

MD5 373ff94a1d6c0967f1f27a24042f5a63
SHA1 b92d9f9269a602eb8e788067a54a0e42501914ed
SHA256 ada80d793299fb1a12f3d5a836ea44bf97b366e11e961a5ef5ee2b2a2aa34afb
SHA512 be4926f3b90b30b7a827f1ac9cbd99a5a8eec91e13498f311e45f56b6d147d7b099d7649a3b78de2bf109bfd73e102d5094573d352d99df4bf7c2e4529bc467c

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Text.Encoding.dll

MD5 e6c2a788ad1433a7f34d27b261c6d78b
SHA1 45d30c458f2dbffc16eda5a8945932a736a8e3ad
SHA256 2590b34839c240b0128bace658381b4bcc658b55d01580fcd72ed32a6d3a451d
SHA512 34e4025c0a1b8fcdd4f36dacb0db11fef9e0f158b4c115f808c63fa33f2c156a457c85741070a26e0ceee2b4c33de21b2fa890497c948bafd70cc27aae5ceb2e

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Text.Encoding.Extensions.dll

MD5 11580bddef87bf66ec974dcf6fd5cd9b
SHA1 19688ed507e0899e530c06cddf880d5d86c6f339
SHA256 7ccc67ab42219b8e0b3ba28be9954a1626232efc428e9c8f0bd1e349d5737b42
SHA512 644b150e7c0adb77e34639f0fd8a0bcb3e6da9df513215db5bf68b3d10f83e5ee571f1021294ed5e4b32f379cae39a184e8cf2fb844af4bdd44c32e837f1a457

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Text.RegularExpressions.dll

MD5 e5b1236a4e345cff749e4697b2dbcf46
SHA1 5645a0620238327b5a34205e62752da07e9f60de
SHA256 5254c348b8518001b1e63b86b36071b10cbfb768eced2d7e0b253fce04d1277b
SHA512 96882255339bdb3be4639cfeee9c05215f7184fa80fbf4759b2816eb20d2434f71f92e64c9e5022eac904235c740304ca67b911bafbf12d43fe4b8bc716bd285

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.dll

MD5 58a61edcb001e6a2086893c1ca8b3b9c
SHA1 17bd841c6ecd2da87dd2593955715cb488aebdab
SHA256 e4a9ac701cb51b9ff53b7eef70cdfed2aac267b9be9f0ccc469e19cc6f2be660
SHA512 f459be68b2062880ce0d56ac943f4da73f54e107871ba4581fde638da0b05cdd45cdd540d09a2ac2b4b3191e8afa364e6daf23c7d5ec7257430a38d433515d16

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.Overlapped.dll

MD5 11adcb2e94cdfe861cd22d3c9da34eea
SHA1 7fb646e9ab4e40e369d82667d812f09ccffb23f7
SHA256 c12c44f5d8eb728b63ef43578b86535374e8b414a20b69e68b03c2b1b191015a
SHA512 200699b9e8d4486035bb75d7cadfeef3e18861b3280c471a78c92085e09048d998cd30864aef59df0b19834ae1307988cdb6180d25c83baace5aff06f66b4955

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.Tasks.dll

MD5 830f7e09200915a7dd12a91f79d68586
SHA1 cd28beff7f9a452562b57d880f1266806e3bb466
SHA256 9a797fb1013f7401c8a0c53d3e9b6175105360f112c6846a2020bfaa39946b3b
SHA512 cd54fea5ceccfae108ee8fcf170c27ba3e7b174011f868b1ce88939b450b889ca883fec8a304b338f58811df5916611ce2df152169cd6281aa20130601181f58

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.Tasks.Parallel.dll

MD5 40986b9014a18378ce73ee3b63462cf9
SHA1 ff4ba959437f72010dda43e5f8fab0883f0256b8
SHA256 48d78a447f16400957f5602479d18aa2aaa746a53e1bb9e88b03c5b04b4d38b6
SHA512 289867d8a0182ddd3eaa0fcd5b4da59f0f64e34a576bd63dfe7acdc0c9402b5610243bfb22ac82cf294746af8320c2a62d03786a0f9e30d6147be58fe7deaed1

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.Thread.dll

MD5 cc78f15c1da329f6a3fd7664c536efa9
SHA1 f9e64d36767bc3bef541f3765635cf1b23d36cc8
SHA256 47b3b6955e4ba38c2e331933bf86bdfab199d65723d28afa04777e6fe8a1bb0a
SHA512 fff913f94398e902e911077da5db60eef79560ef37f93f7a3a5bc1b5a61621f276b80d9de9afcebe619401a96cb41df1e5b75c4a90957a039dcd22f915fd07d1

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.ThreadPool.dll

MD5 5fe2ceceba58f000c2c9fb67b192bbf9
SHA1 e8b88fe316ffceeb336c2656d8c57f97ddcd19ad
SHA256 39a53fb9b2b1530f177c71215ef2448c91b6e68b48239d93135a26cf71ef9a42
SHA512 ee3f5a3dd7eab8e48c7ed0db356af6645acc7f571591acca311db5fe533b1f72152fa71aed6105a93fa59b3ed878a8354dc8607c7dd9d3371e5509b35144fec4

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Threading.Timer.dll

MD5 3c889cd3a0a1ef378a73b8d79fa12801
SHA1 06a3730309f6ca6f190d4a36e759a3e6b94d51fd
SHA256 cd435da039f90986b28730f740e3adae197fa1af976d37b737529386047c6a63
SHA512 1e01e8684bee7a0059a38b036f7f22678c0c4694c410e3ee67e3a777c30e7162aef4f496955129a51dc4133132fec0e84d78b930eb35bf4f2cf7820f7877765b

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.ValueTuple.dll

MD5 d90c466af291432bf330a795a368820d
SHA1 9a9df9720c59e604fbd0f1a55f985892352290c1
SHA256 1377073daadac46d6d6323e1d7640429d7277654511cdde5da983da21b9a44d9
SHA512 51b03f5060d7df5b91e8764ebeb8c4e0631b08572a46b0373868c1a49bba1f60cf1a888460254f8212039563e019f6ed8005ab40064cb286d5730a84e198f00b

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Abstractions.dll

MD5 8a1a413e68f38b5ac1b7e1b0065ccb85
SHA1 19cbe3b459db89ff8396d87044f2c708fc9ff5c2
SHA256 b0831248379f79a225c2da16eb2886c3f35369756a8d0c4e91485c6d874b125c
SHA512 f7df1fb9ee64c7d194ade5150c2a87c4a3e34514129014c9a4d5262da5b7ea4e43e16ca5db8146959b3090fd01b8642a4486cfb77c321040fdb3802e16fec439

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.ApplicationServices.dll

MD5 d1ab0519fa00106bdb273f5d797e8ed4
SHA1 2b6f2401c381b88e9eee52fd7ef1cd35e5c9305d
SHA256 be027300318b006136fb14b0d64368e303e35b9b70d37e21f067ffda786e8795
SHA512 0cb81b092ef18b2741eeaf40e7fb93fe54f499c6ae2d43996be71a8061558e12cf34db6331ad4db32f381d208bf8d0c215facc7753b9da6165ef2b0c879fc536

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.DataVisualization.Design.dll

MD5 a45cefe4b1d9a89f326f84b4fe76ea1f
SHA1 9b33b4c96041b6144e766814c9b08a5d6abe08b2
SHA256 504e8c4dbe080d9c46289c631d75eeb3f428ccf26f8c75ef8b286697106b91b8
SHA512 3665a3dd0a58df6395ee89880d6a67060b2b0fafb4a78777f80ef077418bd457cc185860f1c8fdc408fcb2105fe5a4ef646513670d069569bcb478fb3f8ad588

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.DataVisualization.dll

MD5 b002c5bd48d94540783f8544be3a13d5
SHA1 e76f38c5fa530295836a1f119ed88e9de5a22591
SHA256 d4d59950619d1a2b2c27631805df844c93a5747ee1bad6d5a4cc0d2a80c6f967
SHA512 63ba9b123c2038e5a1783e2ff98de36f4e66fa5a0d289f702ad95580eae2014cd5d0c548096b71ce56ec4b40a1dd3fd16cf4a37b882085a0f056eebebbe400cf

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.DynamicData.Design.dll

MD5 5e94944664f4aaea3230ca6950f4aa6b
SHA1 a2071a9109ea1c5642edfdb65f48ee4356400222
SHA256 90c4cf4ea1d6d105bc17e24b1d0d0fd2c389604871101e1b7fac0c79fe75db62
SHA512 11ffdeb0e7fca204e87094324eb9ad6653f0f152315adc33d0cac2e14fba1c6d84d0d27494543152311649f867c8724ba108a97a4db31729433b49df47e4051e

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.DynamicData.dll

MD5 75733016f7f6cd62120e8374028a9a7c
SHA1 d8d2db5dee9cbea82a37c74a2c2effc34065d1e0
SHA256 daf979db7f2f6b2f2bb8f76361455fa7211ac1f4fe3d3ac81691806e61d1603f
SHA512 545d41329c60de5a9ac76df6beddf5f7a0c32bb3a2c6b8050f8559bb033aeeca2e0b84f1efc3cd460c6dc495637a4792adf8d07f67b9bc88355020202756d636

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Entity.Design.dll

MD5 07718ee7fca71292fe653f505c908f0a
SHA1 b409eaf1430d68fcd3395750c81136cf3f088b1b
SHA256 477b0077d868675773ac8dc096c55f8707628492d9a3bd3014b0b340d930c576
SHA512 6ccf94fff611b3ca1e43f0ffec108d7464204de7209fedc6488a9748aaaa7a41ca052eced43f11cda1cc59e7876c7a043e151c4515fc79ebfca29ee81ec2d38b

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Entity.dll

MD5 ad0db3a8ea5400466111ac192d3a2bdd
SHA1 fff2a9d738ad2f68228b5a770f6beed27dde10ea
SHA256 695f482bc568ceba106f45008bd0e440b427ab49ea81e8c49cbbbfef9a0be3cb
SHA512 f0a92ec0ed90d5723d959b85e48a681ed76258cb3f82dddcb8a2fc0a5e3986843b97fe4486e60b57a89aa7848ffbfbc85a9dc29b966c6bd03475e294afe716d5

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Extensions.Design.dll

MD5 683fdbab34b7cef404ce4b06caf21e77
SHA1 ac446ec69001b00fb50a7c32613a70461395c257
SHA256 72c7f3a36cd1f516a020f4c183553f8ff54b010e2d8789a758809076008a31bb
SHA512 0850a8e7c42f8488aa5e8182f317f3980a216932222a4a5a6693dbf56670138f47a7031f1493f84e0ad7aedcd10e897a213d59bcce748c3c6a9273b582624193

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Extensions.dll

MD5 43d321571983c74cab06586b94e6942f
SHA1 2c9bd534fefb7508a9bffcb9bc3f3b6d2d5b7efb
SHA256 b914a5be369dd35533ce79e9243bc125efffed87e4d57bf519e93efd16a2b5c3
SHA512 b592fc312dabfa0862d3c7d66ed77867e7a72f215b46b5ca660740d27efeab1cc6e9e8b85198756cab79d4f99ddb171b5b25104734b4f95553bc4a6fcc077d4b

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Mobile.dll

MD5 24608a3e71f6711de1b866f6c40f7d39
SHA1 b11bf73f9b604eb4d578a8199ee89a42f5a26e04
SHA256 fd2ab88e2280475cde8326bccee62c11d90012dbc2c307e40662ac746b478f74
SHA512 cbd97010bf835b4e38f233e7db4e851246d4015041dae4bbf2f36c7d5586bef11d3f82f759e9b911b56d4cb4015d062fef08005e4780260a6734d647d8f43cf9

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.RegularExpressions.dll

MD5 c62cc0635da7354402e912fe05f77fce
SHA1 9dd39513e8dbb46dd910749b651d5862342e342c
SHA256 4ff0b435a3d7d9f8dc228b6c9ea0a331e3d9315b27e9a16de9408782fd30d274
SHA512 7b4e3f29769d11fe2deaa0197e4d384d5d23fb0c468f924b3cb93ec6a9ceacb67c2e504b58182f3eefb7e8f7ea3bbf73d3ff36bbc853ff74bca1974570411552

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Routing.dll

MD5 78aa0b0325e9ef684cc9c96f3a75f3e5
SHA1 0fc2628889da40d341fc5fb3948b3b130da13c5b
SHA256 7b7291bfe7ea0408c708c8050a99ef241733bcd61fb1791f35a000ddc4cf955d
SHA512 4868f5991f985d682bc806ad36b945a9cc70e6057e45a04bf17f8013165c08f4bf101e8429d9aaac10cb31fbd9ca4d5737857d41e066ccc4d809f8dd39fe45bc

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Services.dll

MD5 2aeb8236a44280d41bea3ff9a79cbeb6
SHA1 1f8581d712a79379e1035934fadffd905fca324d
SHA256 846dcd02ab6e8f4a953fd9f0cbf5d244519dbb26b36fa5f65afcef2975b2ebd7
SHA512 7d054fb39cc4e9566e8580530c033d3bfd1b46e96e5b5a67b88cb74d07cf5928bfc162bec081345f024b6d02c67bbcca2acf2a012bb1be58b6120107a8138e54

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.dll

MD5 f151ab2679f70328b128be929c5c36f8
SHA1 0f455716e8b5c2566925e9a12bb9cec7cdde58ef
SHA256 230c5b96b748f7a98093c9e96e01ea6d4f5886adc7e4d109d094f7235771e37f
SHA512 369294932daa5897dacab8b32561e6d66501b3e38feb359e6bee7dd970a8a7d6a6552fa511dbdee7e5a24767842ce52a65967e7c5dfdea75f8a1af35a2546c2e

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.Forms.DataVisualization.Design.dll

MD5 e87dff2f03e4c3c4f5f6af61bd3e6a65
SHA1 2261ee175e3ccb42b34e2a4cb1479b58c3b6c998
SHA256 8253f51594cb67670b59eb0a7fcb1e71b9ab4314ebe95a067dd7ff4c7079fcca
SHA512 cf1fe9035c8383d8b4826f20f51d63f5caa1660989bee6b031464d122fd492a312a4fe4fe37c7cc68a309d5e178f88c6252c917d56115638191a88d21f5dacf8

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.Forms.DataVisualization.dll

MD5 4bafb27a513f84273489044dde01155b
SHA1 18af9e128cc21ef498fd0e67a65485f30911514c
SHA256 603ff6a6a6428dc5a63a4ba3abc32c331d7f6eac81c9aff11fd46169fb6bb84f
SHA512 f71ac9b985077f4de3e49c1242d331c664a5c1ddb75219500fae2bce69a1d21386da792a10ebf684c2d82d749e517e10a272d15eef21a690d576e04921af2896

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.Forms.dll

MD5 f8d930d630bc70269f1a3f82a930170e
SHA1 b6064641b2325ee927077db66b620ffdf4e54928
SHA256 befb884920c6aae4c1cb43e0f2b8d37c4c4a7e7f51dc11dc2a13328fcd620180
SHA512 9930a490ab2b3a6657749c60b24e20fafc0b1aa490fc59b69c9725ca4b22cfb8090f1fe9f304362194709785ec8d59d127bd80afb5e5eb940f6c7b7beb799292

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Workflow.Activities.dll

MD5 939b5c010c6fb3e073ba8182dd5ce8ab
SHA1 1b9af97fc17c1f09535ae54bd4e23d4720b66159
SHA256 78a99439d42d915aa61b409c59db18260f353241ac90fbf90a0fabd477cf8492
SHA512 75316ab09f893724b9861fc574d74283f329ddb74e0a97dc479352331e36e1e1718f4719988d813a50f54fced34d812383a98a371b98179f22ca47c11dbc88cf

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Workflow.ComponentModel.dll

MD5 1ee08277b406e025d0a9a9386504908f
SHA1 20d97bc336efea383b9587ed3a1343ee033c56ee
SHA256 038c118e94d684e7e68547bfcd4bac46c8f5e5368d15ffe0626f72d32f320ba6
SHA512 1fc745ff0cb4201c801cf818419be1a24721d2921683952dc1f38b846d9bc80fb0db6aeb0dd2e6f95b4c8d2764231c2ff5777cd505cd77e9641c5802afb995ae

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Workflow.Runtime.dll

MD5 135f5bdd736cb3ad80a4d74fb8ba4f18
SHA1 2f458aae75bf64c865cd0c12d33a15f819386f97
SHA256 86aa8043e291a6363ea6278489b20ddf475fed88f41a5dca2e543795b4bafd7a
SHA512 40d1be161b6d79c18b7bfb2a3d5b26d3d4f143010ec4c4067de3b9c089b4ebe134c2d2b6db5d11923be683aee6324add87b062c22370f889a71cb902050e85a8

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.WorkflowServices.dll

MD5 5679c317316f45f64da9b0edeaea1596
SHA1 8f816a6322f01970289b714e4811d856b9207c05
SHA256 f35b752e11d4354f1ccf7993d33b83af596052abc6fdf02b371cbdf8e677694a
SHA512 027092343b9be7f52375a8444f7b2d936f669322c13cae2cad65c0023ec318af6d32d5935858c501ccee22bc024b0169f3fd2c3f875111b79a77c0d1c9418a7c

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xaml.Hosting.dll

MD5 70133b16c78d7f697b576cbf30064206
SHA1 30b16a9323f1d7a773ae0653f164455f57872405
SHA256 eac1f7efabdb397909dbb163e0036433ab54c363bde3d42b3af3bb6ce0d2e91e
SHA512 8808e689b82133b473727fbf611c56658cd8ab8f96c2b6189183cfd6bff4ac65080c46b92c381936e5355e337110a7a63522aa0c81b3740876aaa88535f2fd32

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xaml.dll

MD5 9ac8ecbb83dcaf21057c18047849b431
SHA1 c3c3475a1aa3d4e7f7e7716adb19210f62fc1580
SHA256 37df693a724b4b637e29191fcb26aaba63796592d324848fceecbedcbd4c712a
SHA512 5a69ff643211d8775c2a1c378f4ba095272d7a7fc7ba5b8f2849b19f8d1782a801f20c215f14569c4291b9e81bb1649663497be7113450f424d74879b47174f0

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.XML.dll

MD5 ce8a23c88c6e75ae68804e604213f2a7
SHA1 9e8dcb835aaaf7dc3baa73eb6ef4d950b645034f
SHA256 e759cb2097e5445db831095f96fd4f14badeed69f6abd421f74402c1379cd5d2
SHA512 085bdc66103fd02af479b1222647fc143e95493d6ff232b3d05e8b7702d7687ee41bf3fca0d5c3fe8f0808f8aa84ed21228921031cc84d4d7d7fb1edba58557f

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.Linq.dll

MD5 4527f5aa0933102f36f2aa60a75b5e58
SHA1 64e8aee3a0ec59518ee1fac4691974be936ae93c
SHA256 3b15b950c733fcad176da632f003d7f4f93dc25c11f08a33ce7bdd44dd623635
SHA512 55e5200aa9ed2ca6932fc2faf9cb91b06020b0e5c514a70864473fb8b71ac3efdf500c67dba9d8d94673833f6625690c46713993f87d32abe2787d59d32cf6ad

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.Serialization.dll

MD5 77b3875ee64e19874beeeb80cc36c16e
SHA1 dd5779567d08b817501df55c3ea2ebc97f6ced56
SHA256 9820c627f2dcda4e7e8e62d25bf1dcf55af87f1f0a73dc1ca2a485615c67f6d0
SHA512 f54ba177859023ba70a4ef4fa5d771da0fe6264c8e1ae480423a7f1c9c11178fc6643ebd6644c57a07176293b8f7fbd9bac2945201b3bbe769f0cffaa969efcd

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XmlDocument.dll

MD5 d6bc7282f5ad82f0cbbd7fa08f2d281d
SHA1 0bc6171a71010794d158f0fe57422506f980fb30
SHA256 f45f745e631bd5eab248c5dbd2f803f633e10953b9a30ca3f2d72b79dc0cff26
SHA512 3eb851d2dee6bf3d9b9ce16c2890ac6c74fe7733ed32f51661a8964ef2cc9e2c4d79ed54eeeae868e088b86506e639146f29ac5e56098aa43fa7c6440c3462ac

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XPath.dll

MD5 57c59a20f1e1d00c1da1fc5ae1e6c67f
SHA1 0b62f9069360405182855ac37e148713deac5b95
SHA256 42a4e83f19451833ada205d346890d9cfcc3cc0f45c963511edc7fd94c1260d3
SHA512 7ceb83e0609a60257706c11ec65c175003aefeca0ff4764861762a795bdcb2dc07cf9c530b09d4416fe6b8b20694d63f87678fe6096838dfd5cad50c313ac97a

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XmlSerializer.dll

MD5 92ecc5964f7281cbc36558b91855a739
SHA1 6dc0bba9c995cbf2ee9c6377ee752d1111b9ee9e
SHA256 fcedc3a59edcf35fc4ec10af8f34abfda0565ee1fa1929f7dd3d2fe4019e9a81
SHA512 54f7ffbc9cb9f196814bd0e30fab177bb71154748d022df037c1623f6ad5e77ac959258e16b8503e8211118a48575aae5c859c293f6e3ff18870951bf3180817

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XDocument.dll

MD5 fb548b9da56c879d23673dca47ba00fa
SHA1 e95c561d27b8b4ed56580597900a91af3d1bd0ee
SHA256 0492f2e073f4dd91dba3e80c482a8d4fb6ad80f1caf78e8f08471f0f10d1c916
SHA512 3ee87f1e3a644ff26f57f8354062476fc5473063cdaa261f29dfc1962c782a7f76e6853d6f09306a14a67b695d3f9e1ef80648bb932b6ea2f1b87e01f9e60c1d

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.ReaderWriter.dll

MD5 611a2e7ddf55dac8d932ee266518af1d
SHA1 fcb5c464a17609aee4e19efa2fcf3c83ee470cd0
SHA256 fb2d2105b6cebfc79044c4cc003382bca354ae3d2ff84e4b42dff05e1fd058a7
SHA512 88de3baa95efa5c297acaeb3cb6e03f6cca6bb9bd9ea0a8cd205cfd9cd1535ba49657d66805861f3a753a9aabda88180285ede5391bce7ad0847451a1617e443

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.XPath.XDocument.dll

MD5 35e847d7ecb949a2a947944cd907423a
SHA1 f95d16a0fdaa49f629aae30c5087f483fed511f1
SHA256 5d5e97600f6d114e9b2585aa63061b04609dd52186cd0b5688fa81e4c915c8f6
SHA512 b7a06fbd08904ccd0db4ea2905f833c3e03643ae8639169b60195b109a70a35c66b5066ea74278864fee0393108bd3f3aee2e9456bec18242a7bf7dc48a6197a

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\Fonts\GlobalMonospace.CompositeFont

MD5 4f52a99471d1114aa9617566b0e31bee
SHA1 42961a5ea42b70343081f7ad56502ee56b0b7e05
SHA256 b8aa6a57571fc6582be6b5cad1bcae117077b8eef84ae6b1c2dce7989317dfc4
SHA512 0bc791c4828147edafa6f18aa145512c83c540a38e3f8339ab0372fd4f458fa51b751e309bfe07f66a5978ce8c2159b625b7db30c5a9650888ac4f15e62f20a0

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\Fonts\GlobalSansSerif.CompositeFont

MD5 0a073cb94a2fe8b1950138fc8583bafd
SHA1 f5f68dca50a9b250bd9af1c0bcfda9aafc0ccded
SHA256 c3446f743388f0f3ae58bce0700dc537eb849d68c6afb7350d851555b07e01b9
SHA512 bb4a48f937297d37fa9beb3c5f32a6477d7f377e28de1d1ebdc74c8eeedc7ee28fd149eb05fcad2dfd31718b9f2f128e406680d76e71e29fd97d8372ff8a3df3

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\Fonts\GlobalSerif.CompositeFont

MD5 49677a2cc2e384788657c95eb53b87b1
SHA1 d441d39251940c8b93090a583af53116996ff1d1
SHA256 74c20d6f5ef414a87367d1feca10713ee1deecd7649380714a8d047573f31e59
SHA512 f8b039c78d89b0537c0491ac6ffa1dcfbfdfd96f175d5095896f283b18f33030c7b27abc5b53467e5e0e0fcb8999e9cdbc1eeafeef2d9f42ee5be71d9fd2a291

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\NlsLexicons0009.dll

MD5 27708361db6dc54be32f85f363cf7d80
SHA1 801d4116467c24596e13c512c3fdb83d629d9a21
SHA256 c3c2caee332fc952b50548619e7156384cbca1e3b11db05ddae483eac39e6e61
SHA512 48a6bb280a55f3814ed813bc7859f1918e49def22204ba4ba0f6f743ecf7dc73b6b63002a633a635c98d14565bf2b04b87a41d1d15b234e7d49195fd1d495563

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationBuildTasks.dll

MD5 acd84f3aaafe5c6e63464541906e54e1
SHA1 59415d48c6fe663989cd169645c7c79b27ab4b63
SHA256 20727d6bb8da9b2f41015422a8535a34e8dd8edaf9095cd5fa36b11db92265b7
SHA512 106664775d781885d9d62861bc712d8eca77473db3a8f7c0ab19704379b1001a4a4b01ee0a788ed6afe31b7a003b62ca0734723b7e25df8d77a6f1b9eec28bbc

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework-SystemCore.dll

MD5 126090ef667513938f4d2f250454bbab
SHA1 64a79bab78596f22e4a8915e19b490e3430c0985
SHA256 a0dfb5754573cdbfc0d1819eaeeae4d8c5fff5e4803f0b98a9c2a66ba0b210e7
SHA512 61b9079343dfb532fafb499febc73dc5793b3c2ca231af707b241b4febb7b7064e2de64d7a2cad18e84ab2a0d19db5b55b66b37cfda7620c4f7bc41e1f6c0939

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework-SystemData.dll

MD5 e789118ec4dec8b1368bb34a19aa704f
SHA1 1d686ec16bd07bc8eb0ee06f51c064a3db58065d
SHA256 816932bc570e4f45e2de55f51285f9969358c1c79c36e2f0d10786974b0920a6
SHA512 5f253aef446c05393f567b59857248591d8a7f8984738f22b88208a803711e2a4e152324f791341361d0ea0c74237f8dae57f5e7271c74250f5f83aa19bcf556

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework-SystemDrawing.dll

MD5 59d030217428febddbc8596171c53ef6
SHA1 217af4dee77c1b9390c6762f9f2391019c2d15e9
SHA256 8fb257a1a686d7c958d33575610075543fe178689d3a37183d69a30f3635d311
SHA512 46947854adf1f5f4cf811ed41441914d340e829c16f46ebf838626ee1a273cbaf29ad6b775f2ff8e9b40a0e2ad67bd63272e3c8ec38b6f09a57c3d95eb1ae0b7

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework-SystemXml.dll

MD5 7f9043cebb8850c08c4f32993f66f747
SHA1 88556e927f8ca25d480ec6768503f5641de406a5
SHA256 8d29610fd2498815c583966aef39a6512d22ae07abf1963471cc8d172f586cd1
SHA512 9e3107129aa27f14424f439d9e589f959a1c6ee77292a4e5a29935b5b1b768f1659d07f13892fea1aa1ef072588f259704fea5d764dbbaf7b4757496508b6431

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework-SystemXmlLinq.dll

MD5 6f74596fae13004d1a8731517df959ba
SHA1 bff2021be3d6c2bb7197f6aff655277349b5cf61
SHA256 2450b0700f4b9b1b2701630cc3113ff574714eaafc8214727ca0ecf568b66101
SHA512 8132b837f0aa65d61b8c424745ba585db49edd1c3d6f1ca09255e523ddfa9ba0fbfbe871a3c87cb6cc4582a0daccfb813b36321a829ad920070091a4cab84cb6

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.Aero.dll

MD5 b4bf5c3d82573ac32c3d1693d4d5d2d0
SHA1 7b494e37646ce6a0569d2e68d9109cdbf0848ec7
SHA256 2e75d3f94cf1d4d2f878a61b61205ce1f8fdcc767613fc68f92e8f8f8b007009
SHA512 133331ca7935809312d360330f7376c0df3f69a05c3c66394e93c0e344f8206a67a15f4794f27f0198039c8dac248396a748a1da97cb5e40f6ee1ecc986b9dce

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.AeroLite.dll

MD5 23772184add607d0d8fbae7f3c0750db
SHA1 f4254e5efe0fd0512cbb3a718c3b95cbb9490946
SHA256 c376fc17b9051759f7409e75467b9ca25d14da13094303aa17f9310a7282d7c1
SHA512 b428542dbcde87e025b9227376c39754589fb5fdaa5b203f522479258ffcf76999e454a9a767f0431c808ca96b0346dcb94fa3169fa4b11e24237581311de4ca

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.Classic.dll

MD5 38325e66508130d40d8d7ed9bbb90737
SHA1 38f8904609bcc2e966bcd301feaa41f3841c8c45
SHA256 22e1b161e716a54027d2a8a3e28c2ddb8dfc418d7b89a7e4329a1d6136b11cf3
SHA512 30e41c08b0adfd5322a707e97d2f5482d92cd84a5820ccdaf0ff7194b1cab28e16468274f8490fa97080d79fea33d1fc1a793c278eecf0efa4ec9f1cfffbf40f

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.dll

MD5 4aecbcbdde861f40dcda77c3dc81d6f6
SHA1 cc4bdec32907d44c69ba6c529ad30ad2b062e46f
SHA256 c25902179c53c5c2631cedd93f01ec902c222a1498915eb5604d1ad91c1ab7dc
SHA512 2963718c63d7fec15b820012e984de452fdb2794b7a15f68f4e884dd74fb56d465a321206278047902d12154e7a8c9905ed4f5f617b71ebe4d51b17d74c248c3

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.Luna.dll

MD5 f9cf575bef4751986baecffb51fc99db
SHA1 6033f93816bc660f2ddd62da7ac3c388f0720a33
SHA256 d8a9cd7ae96c36f3485d7ea3b7aa5512713a3693f2642352edc769836a0e86b8
SHA512 f5108336cb6cfd2274d41ee6c4f9270b8dc5392910b8b1a501368ed6dc7614d39b6df26119dc517b41556b473dd415d0672f8374e3bce9bca08d8e663b719b17

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.Royale.dll

MD5 3db6b4d66c5fb8f8f69cf49885b03034
SHA1 e48c7d4174631a2855cacd180f5a97e8fc3342ae
SHA256 f01139ac84e75b00946881140a44a138614317e839098912a5b00b7fba770e0c
SHA512 a43cc7ae7b32f084c3377e6a1208268d18e11eb11358b97442a0bb0efcd180dfb66f32ba65a842d8da5a86af94aec4c2dad5d25a90eabb9f1edb9c7f6851f501

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationUI.dll

MD5 3c55f0ed94bad8f58beac3d9f9ba5b0d
SHA1 023947882482fae6e42eda8014558e9505fdd012
SHA256 cdae6ca18067b24cc7e910e9274e7c7b613939560e5169cb65cdb85a238150d8
SHA512 03b261a41d31cd3c3d5cd55881434ff1a510079b185572ac1a85a6931d95a282ffcb27cbb0aba0756726741586f4340dfcdf8a38aa1ddc18012d8cbe28914e17

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\ReachFramework.dll

MD5 1a1e72779bf8309ece1fabd70077ba7d
SHA1 9fb0f4ccf0dc0a66522eef3bcb876ca4e5a6b023
SHA256 95d5192a7eec533865519982060402567c0dfc6d47b37e75869bd731c0c01f2c
SHA512 f0251cf159619d855320962cb896bb80ac819858b59d47f7d3720b53ae20ad44fd681b7fd8c32a155cf965601848e625819dc4767d957102d2f75538d9737987

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\System.Speech.dll

MD5 8ecde7f52b4cef292d23bf5e6532f13f
SHA1 2b4f96747e8d23fcbfb0c3b2dc21c5875f253653
SHA256 27f149831efd1d65d8d9b9f2bf24b316d336918c0794198576b817ba7822e073
SHA512 253459cd90a06af951904d8ae1a3601d096144a3e17431f5195d01f2d80e11d48a2ff11cbe1c7c00452d514f8013a25d30ffb235fe07a97abd4f08189a58c5a8

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\System.Windows.Controls.Ribbon.dll

MD5 c8d06f682411dec918bf1d0d36ad00d2
SHA1 f2da2307bc1ce89e368dc57bd70ca56b2bbf0d22
SHA256 0fb62a9ca0854c1fc11d5d85f79f7768fdbf79f9e9168e06290e67aca1231e44
SHA512 0ca847018f5e7ae50b22d9cc6d33d467e6469e38a14a4a6c5566f39991220eeb835b36f5bccd6717d21e165ae5ecaa31f69857777757f1b9ba700e4729271d16

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\System.Windows.Input.Manipulations.dll

MD5 74c7643629a3fd8f63ff53cff68e8de1
SHA1 813421c6783953dc3157af66d9c687007128f27b
SHA256 8abf7e79521fcbcfdf046c6388f44f8c543196e9431a84eee22bcea874ec36fc
SHA512 00bbe1a9181e0f33be006e89df38d546e2e41881e1aa2e621b6d7b1d19a26c6d4a7471d9c1312a055afb5d9f6616059a9a392f07263d6f52f971316a3e2614cd

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\System.Windows.Presentation.dll

MD5 da5a63a830881130f3dc1c810b776642
SHA1 17343b07706ae03cb90dc0ce407783c55e236502
SHA256 eeff5f04038c71a54eb54754f273939d646780425c647f7be947856bdf57d184
SHA512 9854e25733ded7f340da29720e0c3f5e664b04fd39a604245b3c1c155b685f90c839c6b8c6ba0a151a5059804042036b100e52520d314437731bc4ae4a3fb273

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\UIAutomationClient.dll

MD5 ab8a65bdea461419a27ee3cb28900bbf
SHA1 709f39ebcee62d38025810ed5e2584be18c29451
SHA256 7005a282f68087ff17f5d3de328a6e903dbf85b678e4e1bfc783c8c4e5ef0421
SHA512 e63945423b3c779a04a94496cd524eaaddfc85cc03bd9611d3160ddb6d7a63dfc42eaf9d9ec12cbecf9fdc06b54cdad85449bfec9871eefb4c3b28cfe609b068

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\UIAutomationClientsideProviders.dll

MD5 87774cd09cab8bc2206788e69904f271
SHA1 de664a4a420a254a1bd1e17b0833e68c70181af9
SHA256 c4fc8a1dd27a067a70df6bc700358d66ceaf2fa2b77fe3018362e468e1d780be
SHA512 eafaf44dc5fb4cf1b32a8ab7f75e7597f37eeeccee4ebe1acbb3e11c3bd1fe1e25b1a23af66fbfb878b48c4415e8c2d9691ec061f9caf73d9858a10b86b2d706

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\UIAutomationProvider.dll

MD5 3fa0b36adf254f4ee4794365835235fb
SHA1 b825a502a41de6bccb63fde2648470638695db15
SHA256 236753606ceaeea7971835782b99b81786787f081e9772b89d4345d0b8f70c8b
SHA512 3481cf559c0f3c56976f854f6da6181326c7150065c4a1a750a5164d6a0cd6dd786adbd50e8fb200d9bf2db7bec2c0d6a50c4b21f8467f5c50e4fc5abcc77c93

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\UIAutomationTypes.dll

MD5 3405bbdfb4e8ff20c61001d005340219
SHA1 a894c2e05a0851ce417343e0604e4e3e65794c89
SHA256 5b39f6ebd2794a5aedc515eb0c1ee883c02fa2f38aa464ddb276e6ba76d55b76
SHA512 9bb861d7b837796d004773a4ac06fdf7e9e2bd2347bb301fd47d2afb1c2beb7eb623bfa7673e8ba9bfa757ada74402ced09e3df1c9ee2073b151fdd850fdd0c1

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WindowsBase.dll

MD5 9f0797e35cde526032634e11aede3230
SHA1 02c080f73c8ae1e27d095b2eba2f990539b3c16f
SHA256 733095a15d3132e0bae2d4eea1e4457e18c33969c9f181b2e20f1762b1cac7c0
SHA512 6e851923c4ba94041c4ae3518d9e61d702521a1c7b235b9b3c5369d75c734169579502c1e6bcc15b8766e8e64934286261ac1b1c46f64ae12533e7f702bc5a76

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WindowsFormsIntegration.dll

MD5 3e5140435b420ec8132efeb708ca1bec
SHA1 b3bf3cded4c98a448ab70ce75ce2bbe833464479
SHA256 785f82e20e0e5df328ac0eaa072757815e078f8af838938cb822523ba56b731b
SHA512 8d192d3382a53a9672c7acb512c61e0262a3e2124e9b5a345691797b45874b315d5db8363175225bff9d8d2e7f248cd48567be59eff2a8c717dc95fc1faaec39

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\XamlBuildTask.dll

MD5 521034c05c7ee94680f477273c97b5a6
SHA1 4c6348d3fa94916bef011eb11bc595aa89b2848f
SHA256 f92c86f6fcb25e32a451bc90a831f750a5ea88345704088bb004dabb5490232e
SHA512 d527c3095097010d1b6daed1cc7fdca8c6da215d0a1d800f9a98a1881a1a1fe4e16427687d93829f451b5d06c32db7953e83c7370295fc7f82bb92059e48236c

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\XsdBuildTask.dll

MD5 03489cb24e6498e83ebd69861e2d56cc
SHA1 213204516ed29d7329f268f4abe467e1dcd08c9a
SHA256 0498b48e70a626b580af283609b3e209c1e0ae409742f2feac0facdb0502359a
SHA512 706caa3cc38b0e80e5efa095d50b34203666de8d94923eb101dc0b1d151010811df69385cbe40e06829ddf384b8c424d6910182485c57ce5164bd454ace89d0d

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\_DataOracleClientPerfCounters_shared12_neutral.h

MD5 5d34e064dd3b3278859d1ad7b56e9ad0
SHA1 87b7ea4848bfcb4b03232622f6dcfd86277b0318
SHA256 3ae69411a3a8612588131031297d90ad11b9e5b9c7405ceffcc64b09fa7179a5
SHA512 a9a13b218ef351ab913be48755b00ded613da96f3ed564f17dd40d6f909d64afa2213b23c1a8228af8fa743ef6fcc70f107822e3437a1593af899d7270816203

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\_NetworkingPerfCounters.h

MD5 d3dbff6fbe7b136956e832eda1c96557
SHA1 6caa13ba71098cc3c91dd0a44bb7810419e20fb2
SHA256 73606e9e347e346cc11bf64620e0b12a36ebcd062efd5ecbe1829d3c8a1e20be
SHA512 8acc4b36ca9ab0835b45c44dab6ef8575d95185571bee5ad431227a4d98513a2d7362ab16c38840fa3c1d69653ea31ac938c6e0a24e0c8a23cb9858f70f738b5

C:\Windows\SoftwareDistribution\DataStore\Logs\edbres00001.jrs

MD5 3ec87300d952157f9588854e03d545d6
SHA1 208ae38ebc320ccede5a21932322d3dd87894741
SHA256 a62602b276279d3c668f5ed1e94f35b9672870e15dff473de3b2a517de36459a
SHA512 e0aa5146367da8da03346e206769c286a3333bfd09294e7ffe2ace07862cbcd8cb1ae02c3f5df3a823d0fb7572c09126734b7348a0ffbff37c2491a2c9c103a6

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\desktop.ini

MD5 f880adb2e43069db925e9b2a85ef9a04
SHA1 f6788e577e31a213b9ed086bf80e02ed4df86dab
SHA256 674e45a3182cee185bc70a5d3b802078ff41c32e71e983515694fc704b3cb7e6
SHA512 2e9af5ac16913db8f66d56e42d5b12f9c347a9d08b4236b2f271df3261cef41f1ef827e5f62e44a2231bf3c08d25fdaea31c57c1b2bf13625febbd75b9dea91b

memory/2364-39250-0x0000000000400000-0x000000000040C000-memory.dmp

C:\Windows\SysWOW64\msvcr110_clr0400.dll

MD5 4550ea9239af1ea8f90b3a19bfa4491b
SHA1 eaad9bfe43d9e4526b475905a79a567c17243b79
SHA256 8b50f9ab509316c3b25132f9adbf6cc3282d7367217dada7fa2ffb785758f114
SHA512 1a7a6ae3d4273506d8e9168f129a4910ab5f5c18bf9426b01624682a12a624c6ffdaf106b92d25fd22a0f718c416ded5ba101f91c6b533566c89781920c227b4

C:\Windows\SysWOW64\wbem\ServiceModel.mof.uninstall

MD5 c2e35f5a1921083541f24ca4cdbbba88
SHA1 a1cadd6d75a35972a05aaac234926f7993c0c7e5
SHA256 415b55e4145d96096896d11b4336dc3c80825766de010f89f8c2beff4e891ccb
SHA512 8a280511449c37c28cbbbe2d377bd23916c3f52de1bcb47dfe473551e4bd8926b31f262f959a2c87af6c6feee0e37a4f1402891ec9a9c01e8861907a65f2ca07

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini.EnCiPhErEd

MD5 cf39e56274ece34ea7e3a227bc4252c2
SHA1 04671e647139264382d2708c05b854f26f922b21
SHA256 5151c6df04fd20d50d544d95fe4e34a3d53b046890d704fcddef289d7c555671
SHA512 0d4de6cfe032dfdffcf736bd0e4e509d48741c7796f8a1b6ecb62e11475244ca1f16d8bf6ed26f371079b72d61004fb188240a0948f222845502e4cf11b2af81

C:\Windows\SysWOW64\msvcr110_clr0400.dll.EnCiPhErEd

MD5 870fb57add08ecf90fdfc41550c1bb13
SHA1 92f57246323d1cc435d325db5e24128eb5b71527
SHA256 eca933ec457efba02a3a4985f945106b2536c9e4f44f0cdb58de7f6f55807f76
SHA512 fe107ed1cac13ac157528c8317154f24e22653b1e72cf85c4213cee34cb4388cf49fbaca90223e9943b7eaafbcef3e77db891edeb964d8b31d2c0f399c848a03

memory/2364-40002-0x0000000000400000-0x000000000040C000-memory.dmp

memory/2364-40229-0x0000000000400000-0x000000000040C000-memory.dmp

memory/2364-40230-0x0000000000400000-0x000000000040C000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2024-12-02 00:45

Reported

2024-12-02 00:47

Platform

win10v2004-20241007-en

Max time kernel

140s

Max time network

136s

Command Line

"C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe"

Signatures

Detected Xorist Ransomware

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Xorist Ransomware

ransomware xorist

Xorist family

xorist

Renames multiple (21577) files with added filename extension

ransomware

Boot or Logon Autostart Execution: Active Setup

persistence
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Software\Microsoft\Active Setup\Installed Components C:\Windows\explorer.exe N/A

Drops file in Drivers directory

Description Indicator Process Target
File opened for modification C:\Windows\SysWOW64\drivers\fr-FR\ndiscap.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\it-IT\NdisImPlatform.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\de-DE\NdisImPlatform.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\es-ES\NdisImPlatform.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\fr-FR\NdisImPlatform.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\it-IT\ndiscap.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\SysWOW64\drivers\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\ja-JP\ndiscap.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\uk-UA\NdisImPlatform.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\SysWOW64\drivers\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\de-DE\wfplwfs.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\SysWOW64\drivers\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\en-US\ndiscap.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\SysWOW64\drivers\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\de-DE\ndiscap.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\SysWOW64\drivers\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\en-US\wfplwfs.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\en-US\NdisImPlatform.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\es-ES\wfplwfs.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\gm.dls C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\gmreadme.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\SysWOW64\drivers\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\ja-JP\NdisImPlatform.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\afunix.sys C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\es-ES\ndiscap.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\fr-FR\wfplwfs.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\it-IT\wfplwfs.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\drivers\ja-JP\wfplwfs.sys.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\SysWOW64\drivers\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\SysWOW64\drivers\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A

Manipulates Digital Signatures

Description Indicator Process Target
File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\pwrshsip.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\wintrust.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A

Credentials from Password Stores: Windows Credential Manager

credential_access stealer

Drops startup file

Description Indicator Process Target
File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A

Reads user/profile data of web browsers

spyware stealer

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Alcmeter = "C:\\Users\\Admin\\AppData\\Local\\Temp\\uL2M9MClrHDfQNW.exe" C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Users\Public\Music\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..opini-accessibility_31bf3856ad364e35_10.0.19041.1_none_905c6a851ca62951\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\DESKTOP.INI C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Libraries\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\Pictures\Saved Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..ktopini-maintenance_31bf3856ad364e35_10.0.19041.1_none_148b41803c849a3c\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\Desktop\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\Downloaded Program Files\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-ie-offlinefavorites_31bf3856ad364e35_11.0.19041.1_none_4b0e6b545bf0f4e7\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..l32-kf-commonvideos_31bf3856ad364e35_10.0.19041.1_none_923716ddadd939c8\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..-kf-commondocuments_31bf3856ad364e35_10.0.19041.1_none_04c252e5678f305a\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\Saved Games\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\Web\Wallpaper\Theme1\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-fontext_31bf3856ad364e35_10.0.19041.423_none_7c917c97525f1487\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..-kf-commonstartmenu_31bf3856ad364e35_10.0.19041.1_none_f6eee8789c1c6fdd\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn1\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\Offline Web Pages\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Public\Libraries\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\Web\Wallpaper\Theme2\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-fontext_31bf3856ad364e35_10.0.19041.1_none_5476a60692fad199\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\Favorites\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..-kf-publiclibraries_31bf3856ad364e35_10.0.19041.1_none_cbd9ad4986c925d5\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..ini-maintenanceuser_31bf3856ad364e35_10.0.19041.1_none_bbf8ad8ff53c9b5b\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..kf-commonadmintools_31bf3856ad364e35_10.0.19041.1_none_0b090bb5ae01dd1a\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..i-accessibilityuser_31bf3856ad364e35_10.0.19041.1_none_19358785a81a86d6\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Public\Videos\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..sktopini-sendtouser_31bf3856ad364e35_10.0.19041.1_none_be359f0533764571\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Public\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\Media\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..32-kf-commonstartup_31bf3856ad364e35_10.0.19041.1_none_b2014b56ea660ec9\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\History\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\Documents\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..ini-systemtoolsuser_31bf3856ad364e35_10.0.19041.1_none_d69cbb4282e4fe2c\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-s..ktopini-systemtools_31bf3856ad364e35_10.0.19041.1_none_345e4e1d2701732b\Desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A

Drops autorun.inf file

Description Indicator Process Target
File opened for modification C:\Windows\BitLockerDiscoveryVolumeContents\autorun.inf C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\x86_microsoft-windows-s..ccessagent-binaries_31bf3856ad364e35_10.0.19041.1_none_3802d0d85b60df4c\autorun.inf C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\WindowsOptionalFeatureSet\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Embedded-UnifiedWriteFilter-Package~31bf3856ad364e35~amd64~en-US~10.0.19041.1.cat C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Multimedia-MF-Package~31bf3856ad364e35~amd64~it-IT~10.0.19041.1.cat C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\Speech_OneCore\Common\en-US\tokens_TTS_en-US_david.xml C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Multimedia-CastingCommon-Package~31bf3856ad364e35~amd64~de-DE~10.0.19041.1.cat C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printing-InternetPrinting-Client-Opt-Package~31bf3856ad364e35~amd64~de-DE~10.0.19041.1.cat C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\verifiergui.exe C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\Keywords\{A5A7C794-3D59-41DF-915F-19ACDA526FC9}2058.bin C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\en-US\termmou.inf_loc C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\en-US\wnetvsc.inf_loc C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\mausbhost.inf_amd64_34c86c15777c913b\mausbhost.inf C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\en-US\c_media.inf_loc C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\msdv.inf_amd64_5c153f7ff7d0d00a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\en-US\taskschd.msc C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\fr-FR\netdiagfx.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\HyperV-Compute-Host-VirtualMachines-merged-Package~31bf3856ad364e35~amd64~es-ES~10.0.19041.1.cat C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\HyperV-Host-Compute-Interop-Package~31bf3856ad364e35~amd64~~10.0.19041.488.cat C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-HyperV-OptionalFeature-HypervisorPlatform-Disabled-Package~31bf3856ad364e35~amd64~~10.0.19041.1288.cat C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_RegistryResource\fr-FR\MSFT_RegistryResource.strings.psd1 C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OneCore-Containers-Opt-Package~31bf3856ad364e35~amd64~de-DE~10.0.19041.1.cat C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\SysWOW64\F12\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\FontGlyphAnimator.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\c_fsphysicalquotamgmt.inf_amd64_796516c18b264f1e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\it-IT\regedit.exe.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ProcessResource\MSFT_ProcessResource.psm1 C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\KBDINTAM.DLL C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\DnsClient\PS_DnsClientNrptPolicy_v1.0.0.cdxml C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Portable-Devices-Package~31bf3856ad364e35~amd64~uk-UA~10.0.19041.1.cat C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-WebcamExperience-Package~31bf3856ad364e35~amd64~it-IT~10.0.19041.1.cat C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\es-ES\c_fscontinuousbackup.inf_loc C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-EditionPack-Professional-Package~31bf3856ad364e35~amd64~uk-UA~10.0.19041.1.cat C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Package~31bf3856ad364e35~amd64~fr-FR~10.0.19041.1.cat C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\it-IT\lsi_sas2i.inf_loc C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\Keywords\ti_dnn_pt-BR.table C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\Dism\fr-FR\OSProvider.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\de-DE\usbstor.inf_loc C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\en-US\cht4sx64.inf_loc C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\ja-JP\iaLPSS2i_GPIO2_GLK.inf_loc C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\getmac.exe C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\Keywords\ti_dnn_it-IT.table C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\Windows.Media.Ocr.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MSMQ-Driver-Package~31bf3856ad364e35~amd64~de-DE~10.0.19041.1.cat C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\compobj.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\prnms001.inf_amd64_8bc1bda6cf47380c\prnms001.PNF C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\es-ES\explorer.exe.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\InstallShield\setupdir\0416\_setup.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\wbem\es-ES\nlmcim.mfl C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\provmigrate.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\SortWindows62.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Schemas\PSMaml\developerStructure.xsd C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\LicenseManagerApi.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\cacls.exe C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OneDrive-Setup-Package~31bf3856ad364e35~amd64~uk-UA~10.0.19041.1.cat C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\mdmfj2.inf_amd64_167948d0c94abc27\mdmfj2.inf C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\mbtr8897w81x64.inf_amd64_0d8225e7d2696ece\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\netrasa.inf_amd64_1bdf7a435cb3580d\netrasa.inf C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\sdbus.inf_amd64_55c0c78952233d0c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\NetAdapter\MSFT_NetAdapterVmqQueue.Format.ps1xml C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\VpnClient\PS_VpnConnectionTrigger_v1.0.cdxml C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\HyperV-Networking-merged-Package~31bf3856ad364e35~amd64~de-DE~10.0.19041.1.cat C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~de-DE~10.0.19041.1.cat C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NetFx-Shared-Package~31bf3856ad364e35~amd64~es-ES~10.0.19041.1.cat C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\es-ES\Windows.ApplicationModel.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\rundll32.exe C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\en-il\ui-strings.js C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Blue Warm.xml C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.1907.2471.0_x64__8wekyb3d8bbwe\Assets\ScreenSketchWide310x150Logo.scale-200_contrast-black.png C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_neutral_~_kzf8qxf38zg5c\AppxMetadata\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Home\RTL\contrast-black\WideTile.scale-100.png C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\pt_get.svg C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.XboxApp_48.49.31001.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\GamesXboxHubAppList.scale-125_contrast-white.png C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\SmallTile.scale-200_contrast-white.png C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-white\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\zh-tw\ui-strings.js C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\FPA_w1\WA104381125 C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\ARCTIC\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2018.826.98.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraAppList.targetsize-256_altform-unplated.png C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\fi-fi\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\mn.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\trdtv2r41.xsl C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxA-Outlook.scale-100.png C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipsptg.xml C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Net.Requests.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\contrast-black\WideTile.scale-150_contrast-black.png C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\LinkedInboxBadge.scale-200.png C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_x64__8wekyb3d8bbwe\Assets\AppTiles\LargeTile.scale-200.png C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\S_IlluError_136x136.svg C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.uk-ua.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\it\PresentationBuildTasks.resources.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Windows Media Player\de-DE\wmpnssui.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.XboxGamingOverlay_2.34.28001.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.winmd C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\fr-fr\ui-strings.js C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Locales\cs.pak.DATA C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxA-Outlook.scale-100.png C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubMedTile.scale-200.png C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ja-jp\ui-strings.js C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\c2rpridslicensefiles_auto.xml C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsAlarms_10.1906.2182.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\TimerSmallTile.contrast-white_scale-125.png C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-36_altform-unplated_contrast-black.png C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\Assets\PhotosAppList.targetsize-40_altform-unplated.png C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Program Files (x86)\Internet Explorer\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\Microsoft.DiaSymReader.Native.amd64.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\nss3.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Windows Photo Viewer\en-US\ImagingDevices.exe.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.XboxApp_48.49.31001.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\GamesXboxHubMedTile.scale-125_contrast-white.png C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\it-IT\WMPMediaSharing.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\WindowsPowerShell\Modules\Pester\3.4.0\Functions\Assertions\MatchExactly.ps1 C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppPackageAppList.targetsize-40_contrast-white.png C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_3.6.73.0_x64__8wekyb3d8bbwe\Microsoft.Applications.Telemetry.Windows.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\Assets\PhotosAppList.targetsize-96_altform-unplated.png C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\de-de\ui-strings.js C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\dd_arrow_small.png C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-36_altform-unplated.png C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubStoreLogo.scale-200_contrast-white.png C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsStore_11910.1002.513.0_neutral_~_8wekyb3d8bbwe\AppxBlockMap.xml C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\AppxManifest.xml C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\RunningLate.scale-80.png C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Home\RTL\contrast-white\SmallTile.scale-100.png C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\uz-cyrl.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019VL_MAK_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\LyncBasic_Eula.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\es\System.Windows.Presentation.resources.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-c..plus-runtime-txflog_31bf3856ad364e35_10.0.19041.1_none_95075634a2d10570.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-d..ellman_software_csp_31bf3856ad364e35_10.0.19041.1052_none_b0d389b73a064bc2\dssenh.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\WinSxS\amd64_microsoft-windows-s..oning-wmi.resources_31bf3856ad364e35_10.0.19041.1_en-us_bb9ea2ce6322db8f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-b..nager-efi.resources_31bf3856ad364e35_10.0.19041.1_pt-br_366538e4f4fe7289\bootmgfw.efi.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-i..ation-net.resources_31bf3856ad364e35_10.0.19041.1_de-de_a02bd7dd366ec157\netttcim_uninstall.mfl C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-o...appxmain.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_62bde4342a4c7869\resources.ja-JP.pri C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-retaildemo-retailinfo_31bf3856ad364e35_10.0.19041.264_none_c0a6e35b15bb449a\Windows.System.Profile.RetailInfo.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_tpmvsc.inf.resources_31bf3856ad364e35_10.0.19041.1_es-es_11cf4c1679e04b2a\tpmvsc.inf_loc C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-shell32-license_31bf3856ad364e35_10.0.19041.1_none_26f8dcb734e99eb8.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\Microsoft.NET\Framework64\v3.5\1033\cscompui.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\PLA\Rules\Rules.System.Configuration.xml C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\WinSxS\wow64_microsoft-windows-t..cesframework-msctfp_31bf3856ad364e35_10.0.19041.546_none_b32b50bf82215109\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-wirelesslanhelperclass_31bf3856ad364e35_10.0.19041.1_none_50a1d6064f37932c.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\msil_microsoft.wsman.management_31bf3856ad364e35_1.0.0.0_none_3eb01b8d02613ef5\Microsoft.WSMan.Management.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft.powershel..resources.resources_31bf3856ad364e35_10.0.19041.1_de-de_8ecbf4db5ea63fd0\MSFT_ServiceResource.strings.psd1 C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft.powershell.pester_31bf3856ad364e35_10.0.19041.1_none_8a237828132e61da\Exist.ps1 C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_system.web.mobile.resources_b03f5f7f11d50a3a_4.0.15805.0_it-it_d132d4fd18be5840\System.Web.Mobile.resources.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\WinSxS\wow64_microsoft-windows-d..oryservices-ntdsapi_31bf3856ad364e35_10.0.19041.1_none_8f22fe3bc4f4994d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\servicing\Packages\Microsoft-Windows-msmq-adintegration-Opt-Package~31bf3856ad364e35~amd64~~10.0.19041.1.cat C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\WinSxS\amd64_microsoft-windows-rastls.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_07ae4246bad0cde4\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-m..cementmanifests-net_31bf3856ad364e35_10.0.19041.1_none_6d60b01ac2c12eee\TCPIP-Replacement.man C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-msidntld.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_c65d4150f9bb4b2a\msidntld.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\WinSxS\amd64_microsoft-windows-wldp.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_84624175a706ddfe\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_caf06ad63d669d96.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-d..edentialsdelegation_31bf3856ad364e35_10.0.19041.1_none_d45ceb8e23d73285.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\msil_system.web.extensions.design.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_2aee2db048323697\System.Web.Extensions.Design.Resources.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\servicing\Packages\Microsoft-Windows-DirectoryServices-ADAM-Client-Admin-Package~31bf3856ad364e35~amd64~it-IT~10.0.19041.1.mum C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-ie-pdm-configuration_31bf3856ad364e35_11.0.19041.1_none_3a3176fb20a387fb\pdmproxy100.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-dedup-common.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_7b8cfce2cb076cfd\ddputils.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\WinSxS\amd64_microsoft-windows-s..ity-vault.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_4b03ab3d9c9c1330\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft.build.conversion.v4.0_b03f5f7f11d50a3a_4.0.15805.0_none_51ecc75487cd7873\Microsoft.Build.Conversion.v4.0.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\Manifests\msil_system.componentmod..notations.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_bc91f79a1b9b590a.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_10.0.19041.1_none_e9b79397c28488a5\pcaevts.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-d..rectinput.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_9205c38f0cd4f0ef\dinput.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\wow64_microsoft-windows-e..d-keyboardfilterwmi_31bf3856ad364e35_10.0.19041.844_none_44b58b160c46a44c\keyboardfilterwmi_Uninstall.mof C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\assembly\GAC_MSIL\System.DirectoryServices.Resources\2.0.0.0_it_b03f5f7f11d50a3a\System.DirectoryServices.Resources.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\Catalogs\f5574d059c00b9b02aabf54bbd2682e6a29e48be29d74acf1e0f04ce11fcc504.cat C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\Manifests\wow64_microsoft-windows-d..eashared-imepadhelp_31bf3856ad364e35_10.0.19041.1_none_36516248960d27a9.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\servicing\Packages\Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.264.cat C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\WinSxS\amd64_microsoft-windows-r..rascustom.resources_31bf3856ad364e35_10.0.19041.1_en-us_bd7ca36cca4f76e5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-wow64-windows_31bf3856ad364e35_10.0.19041.844_none_d5dd434ee5820f87\wow64win.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\Catalogs\862ce6b051c1cd00e3699b8af5b1d6c093252e5ac06465d063bd779ce9bd7cdb.cat C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\wow64_microsoft-windows-devices-lowlevel-winrt_31bf3856ad364e35_10.0.19041.746_none_12bf0a27d0e73927\r\Windows.Devices.LowLevel.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\assembly\GAC_MSIL\System.Transactions.Resources\2.0.0.0_fr_b77a5c561934e089\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions.Design.resources\v4.0_4.0.0.0_de_31bf3856ad364e35\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\WinSxS\amd64_netfx4-applaunch_exe_b03f5f7f11d50a3a_4.0.15805.0_none_a89f46f8bfac0a1e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_ffd7fb326c498cc8\manageSingleRole.aspx.fr.resx C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_10.0.19041.1_it-it_e9fff179437b7246\ShFusRes.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq.resources\v4.0_4.0.0.0_ja_b77a5c561934e089\System.Xml.Linq.resources.dll C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-c..erymanager.appxmain_31bf3856ad364e35_10.0.19041.1266_none_20804a45b5801645\resources.pri C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\Manifests\wow64_microsoft-windows-m..ds-ce-rll.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_fd2ee633b26058b5.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\WinSxS\wow64_microsoft-windows-edp-wpbcreds-library_31bf3856ad364e35_10.0.19041.1_none_a2972ebcc437b038\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\wow64_microsoft-windows-i..vercommon.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_c23f5de4852db5d2\iisres.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-devinst-adm.resources_31bf3856ad364e35_10.0.19041.1_it-it_93535dd3888bb303\DeviceInstallation.adml C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\Manifests\amd64_microsoft-composabl..ropcommon-component_31bf3856ad364e35_10.0.19041.1_none_d784a93572db5474.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ing-management-core_31bf3856ad364e35_10.0.19041.746_none_092d70d1898e5ff9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-w..ellcommon.resources_31bf3856ad364e35_10.0.19041.1_it-it_9ccc5a4f70949154.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\Manifests\wow64_microsoft-windows-i..l-keyboard-00040408_31bf3856ad364e35_10.0.19041.1_none_371b9e87003b9695.manifest C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\WinSxS\wow64_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_10.0.19041.1266_none_8b40b729dbdae94d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\WinSxS\x86_microsoft-windows-m..terface-remoting-ps_31bf3856ad364e35_10.0.19041.1_none_46486cffaae49e4c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\servicing\Packages\HyperV-KernelInt-VirtualDevice-merged-Package~31bf3856ad364e35~amd64~~10.0.19041.1.cat C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-a..gram-data.resources_31bf3856ad364e35_10.0.19041.1_en-us_6342c6b1222b8631\aeinv.mfl C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-duser.resources_31bf3856ad364e35_10.0.19041.1_en-us_2b218626c22d85cd\duser.dll.mui C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
File created C:\Windows\WinSxS\amd64_microsoft-windows-t..languages.resources_31bf3856ad364e35_10.0.19041.1_pt-pt_6b4c1e72043e86d1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A

Browser Information Discovery

discovery

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.EnCiPhErEd C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.EnCiPhErEd\ = "TFNEWKTXNVVHHGM" C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TFNEWKTXNVVHHGM\ = "CRYPTED!" C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TFNEWKTXNVVHHGM\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\uL2M9MClrHDfQNW.exe,0" C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TFNEWKTXNVVHHGM\shell\open\command C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TFNEWKTXNVVHHGM\shell C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TFNEWKTXNVVHHGM\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\uL2M9MClrHDfQNW.exe" C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TFNEWKTXNVVHHGM C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TFNEWKTXNVVHHGM\DefaultIcon C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TFNEWKTXNVVHHGM\shell\open C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3350944739-639801879-157714471-1000\{15F306DA-CF54-4639-B513-FFE8EFED2D49} C:\Windows\explorer.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\explorer.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe

"C:\Users\Admin\AppData\Local\Temp\b5f6194854416152e53a361df49f56d8_JaffaCakes118.exe"

C:\Windows\explorer.exe

explorer.exe

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 97.17.167.52.in-addr.arpa udp
US 8.8.8.8:53 83.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 74.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 56.163.245.4.in-addr.arpa udp
US 8.8.8.8:53 18.31.95.13.in-addr.arpa udp
US 8.8.8.8:53 107.12.20.2.in-addr.arpa udp
US 8.8.8.8:53 43.229.111.52.in-addr.arpa udp

Files

memory/3372-0-0x0000000000400000-0x000000000040C000-memory.dmp

C:\$Recycle.Bin\S-1-5-21-3350944739-639801879-157714471-1000\desktop.ini

MD5 9d97d56f58af7dca2def8d4373e9da34
SHA1 7364b16cf9beb49efd73f8e3f58484606b40efff
SHA256 e74273c045a3fa5ef2121cb9c40dafbb447be09e47dc6bb81fe2379c3f3f06be
SHA512 e9a76d3298aae71a3e4ba48a489cb0ab8207b278f90cac1896c13f4ec540a8153d13375bcee54b29ed180c293aa5005bff8e63908bcffc8c1d10c6167c9070b5

C:\Program Files\7-Zip\Lang\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt

MD5 a3ec34211b3dfbbf151f3b72e326bc5f
SHA1 2e2e479be798861cea2e5377b53046442c70c20f
SHA256 8cc0c2e1bb7851ddcda243e1a5c2263f9372d5cadb640c519d79264b88091cc6
SHA512 996fe5179e4022c58dd13137b9feb39c886c2e7338112090cb9b8a0c6fba12245d2065481eb2f05be1fe301f8f2deb3c283cd474bf5e33d0e16f50b517220a8f

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\Microsoft.DiaSymReader.Native.amd64.dll

MD5 204bbd1b1fd1f22e948071f14c5d0e9f
SHA1 7fe1199d60651ee2618dca2cb6ce48ff85b8a2ef
SHA256 97754b1c2931cef2e25405b8e7bc5fc47d7fe82a724bb358d85c0fea8302e095
SHA512 93d032add094db3583a4c12616d076115a5a3feba2567c05f66b502a1d58b6dd38d6681b554bdb479bd61f8521de233a8841a76ba03b447555fe8cbe033a957e

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\D3DCompiler_47_cor3.dll

MD5 a1ce002e6d1ec51bacfdcf4e151017b3
SHA1 3a7fa9a435731b5612a7808016f03832ea901f89
SHA256 fe84056c9959c40ac50710c670783e939863c92b74ddc152d132046bbf6dedea
SHA512 c397d0f324388d27ef3d6c70b2bf74ad1c4453b4aa33a48422c265a562529e30fe7df29eb93edcd8d2ee5b0f3a1df61a7e3213cd3e00d97cf97e1bf837611b05

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\vcruntime140_cor3.dll

MD5 6899d6ff37fc30c010040c086e9fb430
SHA1 74880db2b832c3a920dd1281274a5b2f866b3051
SHA256 7f1e484c022bb8529550e32d9d90e2fd3c9e5c752f12c25fc1ac0208a9dd623b
SHA512 5060eca19ddeb4467f40ecf1fbfd93c8ccc81f7efb7ccbb10fc6ded7c6cc0a2a01c4f7e7b670248a5629f52694a58ccebb60c50fef6de13c7c93ce2c4259e695

C:\Program Files\Java\jdk-1.8\jre\bin\plugin2\msvcp140.dll

MD5 adc8e953e5c5ffcaaea13aaab15095ec
SHA1 eb2c57a2afb9236013bddfcff7b439bace783b9b
SHA256 888ea1087d03bc54a22198eb5d63d38a0aba6d80c52837dbf565a53359537f46
SHA512 1d07acc5be7a4fae46a4d371a1acc35a1bc7cd6130d07ad27bd53bb2a133a7121bfc7a73d57c2ec4f157e9d3da3834c4aa178dfabff9f84848666d1722404311

C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140.dll

MD5 9787170ed9cac15a9338872eba98d922
SHA1 ba6184c90129d4d84f17a20a72f2a81abd2b61e6
SHA256 71da9b47f4ec1764714539359e1c5ad746a818f700c5f3b7c5c4ce4d8127ae71
SHA512 35650ccc44e6d888e969e604cd30c5545c5ed12338183d8727d4badcbf37076b0ab718652aa918d1544436b8b282df6fa9635fd62e185ca61ff6646ffa82a2f4

C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140_1.dll

MD5 7b45e65d654c2afe58385a67ee3e04ce
SHA1 27ccef3a6df423a0088fd8464592e3ca98703272
SHA256 c963e3caf7fbee7a526879546f6eaa3806d64eec1b5c0a2f876251c3d8f9c22f
SHA512 2660e076fd1b725b37c628cd02ecccd1e9b43ed3ccfd9f33dc01afc2115a3b761a91550e1686453acb62cd738040cb4bde7f5635807497da322f2425921f85e6

C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif

MD5 1f2a1874a537edd7265f476fe6d8fed3
SHA1 d6578ae80edb391e327d07182336c824b758ff97
SHA256 6a2876266142ab94286d74af48027bd43cb6c284fcba6d518c460cd1d55649d9
SHA512 ae521e4a665cf059da993c23623d6ccb340e16bc9eafe0ba0e185208b711de5a911fe8436fed4e39f3d291767f60f1100f6f6f084454f7efe69ffeb305b918f9

memory/3372-4566-0x0000000000400000-0x000000000040C000-memory.dmp

memory/3372-4569-0x0000000000400000-0x000000000040C000-memory.dmp

C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-handle-l1-1-0.dll

MD5 d3b1d01d5bcb985449977bd34872cb70
SHA1 095b5ad550535d13cd6ce14c4fa94dfa8e33a2e5
SHA256 b1d2911897af10674e5175c1b9938108824fa1a1c8952121738c4a1065218c7e
SHA512 5a6f87173b46da37eb42dbecaf3bcb15cb3dfde6a83d6739c430097404368d56bcb41c38a103d578d95d376c04028fb23ce5b04d546fafdbcea22bc87efb7287

C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-file-l2-1-0.dll

MD5 8ad097df371eb7cbfdbf5c8da7f11aaa
SHA1 dda90765412cfce884e0d6529bdf350e532a51ce
SHA256 271f989a47738a6dc2fa54da67d371005be86975a30c2f95c21ffc04671ff06b
SHA512 6b5d305cc6cb0239e65f992d753c608e9efcff50a1cb44e9e9a7869fe73f641cfc272cdecbb479c60411910957cc4243ec7f6db66f4cc276916acae1200e32ac

C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-file-l1-2-0.dll

MD5 532554a60b411aee49f2f383557abc59
SHA1 52b09198cca7f543609807a4ced3a82ed8b70f84
SHA256 0793441e5527f6737ac7c84f4bf9cba69dbc3f2010e8726ceafa9ae8053073c5
SHA512 e3cd634ee76b552c4181985fa8cfbfd9e5d313a7de140c732c48d21321316dc7d4b2b2eb760147725c92e9a164d03096cb6847fa17350f1eed5fca436770e824

C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-file-l1-1-0.dll

MD5 a8104c824177376f7c40149f36deae89
SHA1 431ff844748f2155e6100d8956555c852552c512
SHA256 3403d9e50f85ab366a69b3ece031786dc637b5f2efc39d9bdf7e035123302770
SHA512 e2e740fd9621b9846e035e18df59f775cdfaf6b9552da0715443f6b477990a191c28c2fa919ccf278573efd4f6d4bfdea71b5911a925871749b027ab2b0fcf02

C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-errorhandling-l1-1-0.dll

MD5 ab6d96ba6e62838130bbfe21dad1a023
SHA1 6261fd98fd7ce646678febbe12e8fd71426d29bc
SHA256 079002bd24bea5293944ddb7846c18782aebcec0642b3337e9ff9db472b0b880
SHA512 a608374b5bc089de767ffc00b08c674a334236a2793d1c997a5e172742bcf8fa10026b1dfaa07642c130bd3e6d4dd0abb9d7866a0206443ccc88707886cda995

C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-debug-l1-1-0.dll

MD5 b0ce04f46ff19752c547c2673936ce60
SHA1 24807476dbef176699fdab68493cf0d2833342f2
SHA256 2d891b9aa9deb243391e9440d0c0b3414873f9261677145e62e81d3bb176eda4
SHA512 8ffabafec489a165480ca3eb5eaa86de4c1e7a615d5135990fcb596b54899b4d8543a41d55a8e288e42ca9495f77ba67f39fb5024902da5a10d479e7fabd81f9

C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-datetime-l1-1-0.dll

MD5 06f6e2daab5318e8bc63c6af5856476e
SHA1 de86b6c4359b08644dec2b5bdcb1e52fc9aeb746
SHA256 2a84037f806c000dfcb790687e605c84a5d82609b50735004b69b2ec79315577
SHA512 91bf5b9bddcdaeac3ef3b10a07845494cad55b37f958ef07c2a114a0ee3e1473b74101c74b69cc5a47c1c46aa64bd5e84a102baca9e688eee38811b7f5142124

C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-console-l1-2-0.dll

MD5 2231a6f5fa118c4af2c90a31805e8d19
SHA1 0245d749b79f4aa83ed42fb69b2bccde037851ed
SHA256 8a8d75fc53315e8ef78c38bf48d1227c92471acc8d3ec369d8c1797b5044b8cb
SHA512 4c7012ecb4a818cd1a7a311bc4587305853c368544ed0c40b8359ba7aa25cd2c2308e7c3fca08d35cf2f8459d71903c2edd7505125324b480d9b0b18be437256

C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-console-l1-1-0.dll

MD5 c2834187fd34a13955738f0322817e2a
SHA1 f9e8023db9aa3674862bce32d6a6b3593ab7ea6e
SHA256 26ae33e5bf01431f5fb1d3e8f59184a59d05430e3f4840c98d5b67732c7fad72
SHA512 7c4246ba56793d7f54b5443b6789982aa9200754b17a9ac4a7da2db2e3fe8b3d6f7166ec830abc29fa484818fc1a1781ed93dfd58a8736d3d4e0701d4d0fcc24

C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-heap-l1-1-0.dll

MD5 2dbdafeceabe842a1bf9755f98914242
SHA1 9c3791cca91a24a155ca0f1378a54d0f9ee5b203
SHA256 c5c154e7a307499dec3d4f754186bff08083754b9f03e51993232286a7938530
SHA512 4888fd739a3a4da4eceeef7c6acbcc5b663463c384aa98ce200e9077912d019f647ec00df6aaf68052187d221cf5b8501fecf62fe6b25fd173aa7025af5a6bab

C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-interlocked-l1-1-0.dll

MD5 12312079f93b20a96819ea6f5d36c606
SHA1 eddd7542858324d9799978c3dda444594dc74863
SHA256 946f9b00f5b90eab49c697bb627f3c72e08bbf09ec8c114564a3943ce5ca5e9d
SHA512 1e480f0d688203c98676868c0278e7162c859ac0c9f5cb8e6449faf3c56bd85d381141d6e72dec8b05d94349afeaf0b38e83979cf61eabdea63db202f54aa517

C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-libraryloader-l1-1-0.dll

MD5 6b123e6b96b483cd703586df88dbe010
SHA1 a34173455aa87c3a76089f0cc7b1617497bdff39
SHA256 34bb0c9e1baba11e165b3a139505a4e52a5e33880411a6eab62bf9c40fc7295f
SHA512 a0ffaaa9af11fdc1c931eef086b50b064228ebd369ebb1e98023e75ed7f7c6c6b368873869d5e536eff0b221ab6284c43548c5d51c2bd704b8f5b27a6f33c862

C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-localization-l1-2-0.dll

MD5 7f275db93c14fced14d5372d274e4a1b
SHA1 86d5548ae2c57c16e95310142f34626d7aab7032
SHA256 0f709fcea02257b90616d7c95cf108549fa93ac073eddfb0d3f042da7187b089
SHA512 d79e40538ca75c51b0800ec7f422ce15d26a1c0f08af6108cf4e5673a7f132b6ca76f537a8f764e4d219afc0b541e0188681cc5a07eb6ee0238a8b67ac3d9462

C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-memory-l1-1-0.dll

MD5 8cd73a746c789780ef7d8f8647e427e1
SHA1 095efca593aa7e0139259ba6507850940ba3976c
SHA256 ca719ab49a5fc62deab1c41dafe0d5d66f5ad91ddf1202b9da4c254156d35e09
SHA512 87ea9a5233e5e41cfc8746377ad1e78df5e71179e43ff02cd98caa94a392743df955812334e9bee5e344b640d9ff81156592a2e05852316204b1bd2969203225

C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-namedpipe-l1-1-0.dll

MD5 2563c071f884dc00dcc15d5b6531ff9f
SHA1 533cc6738df72febf30c0e00b5109ff64328ec1b
SHA256 8419cab5140dd0a91c88c092e3e25170bde8752ba2a720aad831556fe216c141
SHA512 e678ce788148e2c364736c3da66b2d879c8b755aaaa72217051167310752872bd97cccc432925e0be745ede813bf796cea01c398e9a498cac8930311c1158a2f

C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processenvironment-l1-1-0.dll

MD5 16932579622c07bd0369d41293119786
SHA1 89f0f18b7312a43d09858381067e4890713598ea
SHA256 de578b93e409033e1712ebae13e948547cb505964bc7befcee01a2b66313b4cf
SHA512 fc2a87b896c5e75b792a9a60956678f3b6b98c0c3ae137a75e047a4c0b6be885dec5e7f03158a88a70b9a7282349bdc5498af34867bca83397e62b37fb9c7b34

C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processthreads-l1-1-0.dll

MD5 5862f84c16b7fc7e3fd595d9382d36ce
SHA1 c44f2397272e6470d0ff28f0d728f4359dac6d08
SHA256 57e1bba03f0d8ed307db4440807f7d816828d97258e6259d32e99cfdb2ea37d6
SHA512 ec6214c78aa299048c0136cbf53bf94252cc0453526b848df208d4d11cb0c72b9b2d17a2e3ac4b9bdd033bb2107e8997d93d41b81ee35fbcd2349a8da1d739cf

C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processthreads-l1-1-1.dll

MD5 57b1ba65265b73333b0bc03ef733bc54
SHA1 315699545a1795e2babbab70788020f3773987eb
SHA256 c2d42e2d419e66569f9b142052e5ab6d28719b26c94789fe6b5355daf7c0ba84
SHA512 9f55a25d3c2398618433f57d03fb904bbcdbb99ccf99dbf4116bcf74babf95f621b66121dd9563c7d0a33acab0bbe239506e750eec58f0f19fb814d9d3f10348

C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-profile-l1-1-0.dll

MD5 cf405c36eacbf883ca9ff6d5264a9725
SHA1 c1977ee34c1c80b63b0af51c5ffb8f8b9ed0c273
SHA256 8c93872579602befae3d7904c46914f5959a87415f413404d48dd5044f3cfc18
SHA512 1e2219b711ff0af82e4265c80ddfd77bc992ad576b1a9a0bcb7f220111e22b7a19373a8131d210570e8dc97bd0b2d9cd3b6a8fcd38c2e4ba09d75a13ed2fc12e

C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-rtlsupport-l1-1-0.dll

MD5 c7f7d601a25de900f5765378180b6147
SHA1 7acfdf2c0914a50595747885ab0e02e4952ea4e6
SHA256 59fbe45467bfd753934303e680dd65cca3c3aee32a5c2bd9483e94d604a98470
SHA512 9a96a9cbdd5c0868e6f2cc351bcd323ab6ccd1b1ec9ee2819001b6c58d4151b7e2021ec8860ceba17be8203e94d1882cbbbdd0401543b4d71f47111419be1e2b

C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-string-l1-1-0.dll

MD5 4e23413ab10a40e831a3d50d71231cce
SHA1 8e211e99e75659778bc15483cc69b652598150f7
SHA256 d08abf1aa67bf2865f49885e96fbcac3509f5eaad1b9f5ea22bce66ebbeaff30
SHA512 a509222d93973496d5d2fd5fdecd49a01b20b44073f41f165b0271990e2a34b864a51dbe4bce2dd4477b060541351c558268d4be219a995b02bf64c0f8f239a4

C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-synch-l1-1-0.dll

MD5 2836eb57a55572506aef5c8bf0a2547c
SHA1 cfebebd2a75ef83e9ab37724106ccdc68dabc4d3
SHA256 26315d8c7f1cabad4906c9cbd45e0df271daddff99f6fbec5b213b2bcbfcca92
SHA512 8eb60bf11c1778bb8ebacfd88afafa1e902fd97cbece296bd2cf7ad214dc4b6b7a014993bc160ea5887865f8a02d60da2e04ae167df6e1e37cc0e991c680334b

C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-synch-l1-2-0.dll

MD5 8211789073dd6deb64963bef0a6933e2
SHA1 ddb0f5267f629ca2bb6053e1059bb720a7a9a48b
SHA256 96a93bf02c294f3721e33585e88f5e7c646d6c27d326c8e029ba67fb877531a0
SHA512 161c29bad5a0c144af9ac11ad874f9c530fa0f1fc515ed79721956012958c53db30ec0bfcfa1806dd46d22ffc60d427a070b98b1f2bd26b1f7a1cd9737d50d1b

C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-sysinfo-l1-1-0.dll

MD5 ba86b1a890947c7e5cd463894cb35344
SHA1 5e3f738b6a5358dc04fb6677fd8303830a6b2f9b
SHA256 2789efdaab007ad1f40274f36f7f67bbe438effdeafe38a368af3d0e1170b434
SHA512 3ba488c1598ba87a3e0d5c91149a8a60a9b202aa8c842e0bf6b416a6db8420a03c1e413bf9f08e2e3b58399a62bbefcfbb940fa136dc7b617191bc4cb6d4fb88

C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-timezone-l1-1-0.dll

MD5 4223fb575133ac9c68cf71ed5a113180
SHA1 cfbad8e05e84bb35e39d4865ae02b234170bcaa4
SHA256 ac7e9b911f37e16fdb2d4f686cd5ee1b785902add7a15e5d87b2c3eccfdd889a
SHA512 c931af1efdb1b1ac3e120433a7d1ffeb120195085790e97a52c2fda0c54055552a203b2d47836344cc207cf54d7368e06d596c800ac05b40cfafe5792f8a2288

C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-util-l1-1-0.dll

MD5 77c76c24bfc2c7760f3d32720bb7fd81
SHA1 9859f50b7bcaa9307221a7b75457412aea1906d5
SHA256 720e3ca92fad20712f53cba52d01f9b7ed478cf5ab1c6b6c7e3495701f478ff0
SHA512 3972dfea8c9dccd4b6c849414b2dcb37c9d4e44b7d0d2f24be57b5bbb7fe4c14d525234b5b2a297b44f31f26a46c525f5098d63c4ae1977952f88e910bc09a21

C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-conio-l1-1-0.dll

MD5 41a5d2e28c3b11a6d5574b68c227a06e
SHA1 b3d8d25372fb68b28607a4d4d8826e3a7c89efe8
SHA256 d46091ea9afeaa40d17c6786f9915858104a38ea2d7cadd3fa7ae524fa6c8c32
SHA512 9a8243148f537a353a679fca14e7153ecee72022828c041915b4503ef81637c8e149b34a183730908b780a257ee5d471a6b6fbd9d84db262e4a4332fdc2b33a6

C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-convert-l1-1-0.dll

MD5 d0342fd5f9d6d35798f332b9fc80d91b
SHA1 0a0242ae75c60f1cdba8a912497face89e64ccb1
SHA256 7ce7a71f1a47df57019d8d24bfb6435bf67acf0344a15e1685f20821027cbd87
SHA512 df20143e2bad4421974c61a3096716928611df729dda2d99e8bd41e325646d63f4d5700684c5855c6c0a37008b0b5a5224463afbecb62d8a4c9446dc47bda3cd

C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-environment-l1-1-0.dll

MD5 5af6c0c5b4ae0610b141f6e53d477da1
SHA1 b09cdd3fefde66bafa6d8df38222c3c7c86991aa
SHA256 189e5670f1fc3f438e2cd9b4418835b6193b84849f22955e8cbcc919da032711
SHA512 1a8c5e6edda5469776340e1bcdb3eea52087195a70f9c4330bb068cec9ab894513eb59704382d513516f3039865e268d405a56279d4122866cdf065156b8d0cc

C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-filesystem-l1-1-0.dll

MD5 2ad4ab66b0f7c6272129cdc4ce3b7bb2
SHA1 880d87da49826c6702994e196f1d37ec1e2c94f2
SHA256 42966daa5d0edd96f1542759edd2b20559ff33ae54dc2d3e0188b72f96cf0bd6
SHA512 c280d507a0e50af207b81639d1177927616d8e3fc95e70071090a9be1dd5e029daa0bfc32f162f9c133ae724b62887f31a2517d5e0b57bd8d695e61cedb906d2

C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-heap-l1-1-0.dll

MD5 05731ecb96397bf1b6818ac050e8b6f5
SHA1 79cc00fe24163c268f31d7e5c1ba41b10b5fde73
SHA256 e524b8f9615bd51f40bd6097995f85a0797c775095f03ee1ffd12202dc659590
SHA512 a39aff9b6bcdc18bf47af11a140c0bd8a2b052884f2cc4ef99a04e52a47968c3f0a03630e05be86596f6e4bca9e2c88b3060947d08f7e095f5f1df202cdb664c

C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-locale-l1-1-0.dll

MD5 08fe4c2ebd34b84aa8b4af4abadf7928
SHA1 9b3facc589973848c761410b778d48d975091db9
SHA256 71995421e16909bdc0c7550786f4019a1b22ef4faf48678475c6dfd14d7145fd
SHA512 c72bdd5fe5f651397dc6e6bbe98ebd23680ea0d0ffdca5b1c16eb4446a15205933056719e82c0b1837f7b5a0a26fc316e1eaeae3d68291ea5e5b7921b558ae4f

C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-math-l1-1-0.dll

MD5 88c5251a3d1593508ec9b3d5645a45f1
SHA1 8f7a72cf847cab94de16ce49484a7e0e4dd13ad4
SHA256 87f6be3d3c51e5925f0355516f1f72099346720dded230a17fd4aad8eff5935b
SHA512 e1ef8d60a0a63d5a31cd9a7f14db79172f39652a20ebab932f6307530b8751aafef2027ec2791c1ba6154bb42800136f76981bf8c59cca5fd0bb09d2e673ffd9

C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-multibyte-l1-1-0.dll

MD5 877b1ad9a8f86cf449e01bdbfa3f0306
SHA1 c1521d96b96e7405e88f96b9fcd8e7d5459f0474
SHA256 e066b84bd093f515087de56ab6c56c252540415d0d10f49257e2e70a21bb141d
SHA512 69f5414ab35b06feba2e1f193e68436f3c26a469f8f57df8eb0829959338a6898a1633540137bfaf37e99868f85b7c274ccacdda1dcfde3d69559b6cdb6e25a7

C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-private-l1-1-0.dll

MD5 15b24d131eab6305997e3b5596c9ad54
SHA1 7ced4fef4a434e6c751ca519088d772626991b34
SHA256 0eecac8fc1d640035b7eefd69f7fbb4e9453b9107437cf4e3d0550bef95d8a3a
SHA512 e996424cd471d8b43817217acb72a9468e0c7bb414877bcd5c2e1186e4891cd47be647c69736c2a090482bb9e8834f16799a97ad5df5aec24b309c97dd57e8e8

C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-process-l1-1-0.dll

MD5 78740704349e68fb9bf16318b284e177
SHA1 148d36d0bfc93f0728de4dd4ba90a628439fded3
SHA256 4e8b53e13896de91d7613fcd4e3e215b6a9b17915086140d34cb0b84d8350a6c
SHA512 2cef4b27c25931ff87c25d5c6ed2242fe8b119b399f278178c2ff98b586bb5209cda8b3ddbd837332394151e46e7ea62b3e9ec8ae8dd96c2d2631990c8084cd4

C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-runtime-l1-1-0.dll

MD5 f8db173f76a1ce6b8b2773ee4f338b6d
SHA1 37ba7a478c349b9e4c6aef2a4af6a992fae40322
SHA256 a658a2d233daea5c5594606ea4a48c0bf66f7db7c215ab5246196bc74c78bc04
SHA512 a704d638328d62b352ebfe9825095c1ff144a07d4dbf8da06d54c8ee71dbb97741a06d221ff2aad7a5ce54e79050f45c6a937d0bc5717d7d365bc439169ed9ef

C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-stdio-l1-1-0.dll

MD5 b8ff83c0e585a7d983082c28b76b52df
SHA1 459834a6d20efebb06231dd27d282d11518f8900
SHA256 69efc5304de159c5a34f09dfa7489835a9fb4420177bc79c3dcbf0dcace9c3f6
SHA512 c18ffbe995a27e43e1241b9243fbca9d238077d47e06ebf3394a6c42b7c1517cce2db9fd684117f3d651f9da597663165321a860af83be6c6f5140607407bc87

C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-string-l1-1-0.dll

MD5 bcb33bbe87bc14966cbd041cf1d813c8
SHA1 d63bfa129bbb0cc316b801af13d6d6390f670d34
SHA256 83391ad7127853ca87665da7c7f8c91d31736a7b6e699a26a546f67bb8a3c170
SHA512 edabca3afd61f18739afa475e37b50f98902f9cdb40051a26ca81bfbc21c02ce71d36ab5deb687d97fbb768803ba2c659f71db78f817adf37becc9fcd7d65d61

C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-time-l1-1-0.dll

MD5 f2461e5b8ae69de3666fa15c3f87b738
SHA1 8165d8e5de528ebe3726bcfec223acf0f63c9067
SHA256 cab61c9671a8d8ed1e54799477c4013cdbd4f9f18513ea38884b4e3b5c319d27
SHA512 516f3935bfe6ff6e9b077dfa232f29b1c038ba1d0acc0f8a6ab24ec6a2af7c15dd485994c28c5216c48df001cabf2cc1389b85b76e0ad95ff96c580543a54c8a

C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-utility-l1-1-0.dll

MD5 2cd59820d38756376559720a784a08d8
SHA1 6c9fd8b578eb7db7f00c19386b50e97927773047
SHA256 21ec9cb50a0d3409369f8c1ef84da119bc504b82437793199cc6b534589f94ee
SHA512 a246635b42ec687b14a057b45d1a565b6215a9e469daa787dee48a240c63dda7a8f8c6d1b9ab293b27631b8c433cf28e47e5e155065e35502e12cf571336fb29

C:\Program Files\Java\jre-1.8\bin\ucrtbase.dll

MD5 a9c437ad128a7b32bb488cf80d3b5456
SHA1 4ab9a45411553ea14042402e078200dd78c5c83f
SHA256 43465f5a73a0efbfddc99c589ab1c649d00c13cacd9a1062e8e0d53bb49ca3ef
SHA512 7a99e47bff4385fa5a2b15b36b5bde875def6ebfc472092c3cab3afdb547c47aa8e4b3175ccde243dc501ebc031c34e304de1d03123eeb1d0da8b1eb0c28424a

C:\Program Files\Java\jre-1.8\COPYRIGHT

MD5 b050978a4892a373078183c9357a738b
SHA1 9bf51951872d9911b7b6b89a8ff815fcf092cdca
SHA256 bc3d1b59ac9cfeb8c129e7493a3e84e9a4e75e46ef7a4ccaccd07cf08a10256b
SHA512 c7f5121b6005a5eee43ced0830f3c6c83e27b8c2ade459d44a35d06ead4be5e4b2ba34b479cc5e164ebfdd4046abe67774e0dc27d954ef363a4d8fd3f5c33af3

C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md

MD5 d87445a21c0f5163f89a95fa6c3b87c3
SHA1 d81e7b0c784912ca1217f0887d719cb516592379
SHA256 a3522134011142b2535ccac84fad5507ff43a66af7478fec52426b9077643c35
SHA512 831f4ffe94eebfcf245a29df5bf5dffe360dc345a088bc8f74ca6b842484195d63c3d755fe1c5344bd1d2dd67d2ecec88453e3dd5fc8f88285e8ae9a9f5af6b2

C:\Program Files\Java\jre-1.8\legal\javafx\glib.md

MD5 b4da2d389755d1cdc52943f41abdd43d
SHA1 433e9e65cf359195b1bb7b785439a3efc4b3b8dd
SHA256 d10570f740fc0e8d2775acb36edd5b03fb778b5c5287a66f6a34f78a6fe1e76e
SHA512 516bed08e78626bd181a3da47cb3249274264bc0f5df2b12081c4ac2d8758159df18231e82002c5725550cb2bd9e0b1f06ba2aad3f9e9af9d9bfd52f88aa3e60

C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md

MD5 56a4eb9aae5d2ff68a21571cfa3372e2
SHA1 186489c57a3a3759d3c1cad3a045646d9acbeda8
SHA256 613d0ec8e67a42ffe547c770ddb824f1e15adfa39aba1fcc3a273b3f8062de2e
SHA512 b06a3594c999d502b4a406438bde86bbfdef71291af33094d09a00be0736593ababaf9d612c20fcd0726d8d13512f3604661f72ef0b001d7c81759a822e17b73

C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md

MD5 0e9fd61360fade226394f247f2a8911c
SHA1 03fcece61696f87d33cd90ff86b1fd8add580888
SHA256 a1b9a77ff02939dd9527ac1e811113f88f593afd41b575a2be5a717397548ad5
SHA512 b937428cca2b99058d69d2baf6869bb9983c418d8451a9ce71082c1c5b20c51901d209a11424e54735143000ec4c0541d8725913f7fbf00c1dc73be53b1628ce

C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md

MD5 be7add61b2593078fc86da0689a31f3f
SHA1 0f5ac8207b0e1f29b0f3fd029421dad78aa0d9ad
SHA256 49cd896b0ef71b8175cf278b6ec68b4093eccef11b0b34d1e688803582ba2b16
SHA512 dc6d2534612c4da92b6dc8f309e40ed0630f7ffb58ac68b334dfe54b85df1bee4c8f7cc2b84e75a5356ddab9425abacf519d3467f89079fcb579b61cebf1f6cf

C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md

MD5 125e675cc564a78786f039343f97f805
SHA1 96f00cf33e15c57eb60117589a2ce9bb738e352a
SHA256 40cb210ccfcc09203cca80f6890372ecc0eb39b7bc3e78a28410ac61e09299a4
SHA512 75aea36f4fb0419dc46cc8390944f97e0a6706f347aebb55cb1981ea3c096c53c592002684f636db777e54721389e23b3dd56ef670d35114e7ac0d4bd497d8df

C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md

MD5 e80ad81b0699db3b09f2393deffeb8a2
SHA1 3ba80f11d393c88ef8d644798915073d749201f3
SHA256 267e7fbb604c4ee3b9df38c6d8bb6060d99dd5e4a841235ccb948a6fa2d419c4
SHA512 34f9fb3f5a9163b6df32deadc9702077a806dd7f3fde4c05481c385ed9d932f7165481425835022ba48a8ad7ddaa8731218efdfdbe45a724c95f8944b76560b3

C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md

MD5 08b794a3aba6cef95f77ad0c8b4cddf2
SHA1 3cd24b22a6b16589f6372ab404f6e955b3c7dad9
SHA256 5c8b9c843bd54b7eb193f9f193478eee6c1130a011b93b667eac0931a74ad4ea
SHA512 1e3f2d44f10172b22317f4aebed11d57818c757a855fe7e6a734b9b0971f3ddd1f47ef5148d245afac8d824f7cd73534e336b68afd11381e017514bb8c4f4fe2

C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md

MD5 bd152fb7dca6c04bad6e6a11d3770214
SHA1 7e6b2d640461c04d7708bf903e6f039cc3eefacb
SHA256 609ef626511bc115b9d6c7604e04a5633a4e776f9415282803d36d83d90165fa
SHA512 ac383ecc63cfe3a7b9fd0bb7e131481aac468b9d38c86a8e3a3928c82d8903d23765c4da6b9d3a3ed0f1532dd4a7f84f07ba1417a8a5620d0fdad28e6ebc8c8c

C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md.EnCiPhErEd

MD5 6edfcf41c0c48c821650c6a9583798b1
SHA1 7f0ceb2729741ce8d0545950e3a0843bcf63f838
SHA256 da270fef4313c2bcff86954a75aa93125604582c03beb5b582f06b1e45fd4a53
SHA512 d315a897d350f1f334c83b9c2408a3694be69f76d20b63198b553029ced811aebd24202cf064361e47ce5eba95e9252a20af6afe8fc220f73da903cbbf9e669b

C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md

MD5 7e705948d40da0aae297ffb035da7152
SHA1 04c2538635d315b9367ea78f610d280fb891f79b
SHA256 c468143d21e01a301855002d52200ddd90a743a7f9d5e6a8ca803068b45e2429
SHA512 57dc8c98f47bc23f8d0e2e44d1f1ababf9c03027575cdcb128144483ce1dfd19a95f332c17d8fd24e3a31c0cc671c6cf237594a3acf36d76922908aaa80ccc66

C:\Program Files\Java\jre-1.8\legal\jdk\asm.md

MD5 007aa73036fa5dd90db4dc1754d581f9
SHA1 934fcdec92b5eb2f2b3151063e5b6274caeec200
SHA256 cd4714cb5bf3ff06e39315e74c5f49111621f210527296359aab1367c1c27bf9
SHA512 ca6252e610f7c438d65c2d812b8ff12120cff9a1d4cab0b3a12a2072f5b7b0b34a131a619d324698531585c084c9922a03de502f42af4897ae003586be13252b

C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md

MD5 6685f2d019f8d881f082526035940875
SHA1 0aeaa82255bde987aeec7a062fd1de5e21894a0a
SHA256 78d43638a859e5dbc67b8054d40dd8706534f8fde9a2dbf7467882ef100d6baf
SHA512 0d357a3770c65219707d8ec2fe36de8e4ab159db7a0786db7b4b95292fe1648f18e5764c71080537c3db9055210cd65135ceed061059cad54eb7e8be69880e61

C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md.EnCiPhErEd

MD5 bf5c5912028c46407ed997db15198b81
SHA1 1cb830d15714b28ab66fc8749818472a6a062ed4
SHA256 371781cf46667bfc65d18ca3e3ba7d8eab82bbb66b1b593051f3f8e889700255
SHA512 40164437999b70936366a267ec615c688969c759ace681756ea2e13fa21d6ebb0353ae42807828439bda7536e0c04915b6b55742e64d4bccfc85f126831ec053

C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md

MD5 e8652a540130d058879a00ae7e4f1c4e
SHA1 1a14fad3d8032453cd79eeb072fcc46a6fff4f3a
SHA256 9358e83c3e29effef6afa3fd87b9f38bb839f679faad2586c95ea6f41f3371db
SHA512 f133c1ebf79a5a1299df17c059fe87c2478bf671a5d992fb6b0df409dafb4fa5b9ed3a4ce3940b9eaaeb0afafee0c86e262fb12baff6950639b9c6047e7cf3af

C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md

MD5 85ecd9fcbe7a548cf422e091897b1d34
SHA1 7d482169e875c8cdcc5b46a819763fdd08836beb
SHA256 5a8d33dbde1fb1d7c411643396849eb7806ea0b975a1ff5fb84c70b3d3b71a3e
SHA512 bea6aee4f9aed5adb652cf75430acf53ebfbbf2adf39ac02787f4a3693641352fc401591b1515394b1a8c6e8353027788833f4629e6aafa4918795b0160941b8

C:\Program Files\Java\jre-1.8\legal\jdk\dom.md

MD5 40503e3db7084fe23f0ef0153948c003
SHA1 fdecab76210eaaaaa6226e6531108af6791e160c
SHA256 e277666891d000103e1ac3b5b7e93dec0f9bf214ace8cd004ab932fc5eba305f
SHA512 314719bcec55ce06fbd27ec553df8a7c9c1ef1af978e997a21473a273beff810ac184513bf137f01b7d6016104a535406526fbadc34f92f7794ca47a6f532058

C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md

MD5 6ae5ba8c0c0af7ace9a067361e31664f
SHA1 dbcab679110028112379c30ad500699766dd7b3a
SHA256 eac8d7ae149268ff8e8240d8630ae0cec086cd058c9131a3486621cf06a02dc2
SHA512 4834d7187daba6f7ca2028b5990d6325dfbb58bb86a396a766aac816b94d0d6250132feac911afa00e58e12d4681af257af1c4d59840272cc527bd00a2c54796

C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md

MD5 39933724d17c59a7aaddbf6a3153252c
SHA1 357f13175682a1474517f513ff8b5790d09b61ba
SHA256 8a4bb5aac53f41ecd506001d8c17bfb2b5055c5828df8ff4aecbae3586446943
SHA512 a7a8073dfd705b0a80e69b26063a42d1406740b6658b59cf00c065041ce21cd577e0e54c2aa07323514aab524fdd7eafd5daeaefb2945ee2c69bdbae7c0b3438

C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md

MD5 4220d1990228c95ec2f34f42abc5fe18
SHA1 dcd1277b604c2d062971a029881ad40a21f13de4
SHA256 4b76d618970777851add559d9903ff39d4417dd11c34d81c9aa77ef68de57228
SHA512 481170dec4a575d68143d3507fba5cd174404cdb5e314899fa18ac648030e3b8172b24f60b8d9e7d1a1de4cd118e7edd5f6ed944123d2a4b07d42c9a78a7d349

C:\Program Files\Java\jre-1.8\legal\jdk\joni.md

MD5 1fa05889b30e3341cef9e54c7addd896
SHA1 de85284d716f1069c76e874915b94bfabae1e342
SHA256 1ec975feb4e48ecb6e18d6280f49aeb9f083fc71996668b73f9ec8371ff1d219
SHA512 5f0f489065a715c861e390f78efc5226b8e2345fcad1af751a8b93f67835d179c86965b5d923da89114f7f97e7a1531cbcb5a2fdc08a7be1e884edfabcf08af1

C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md

MD5 00174c8ada1620cf1258b475400040ea
SHA1 c3eedb6ebadce28c0d836ca1af836cf2540c2492
SHA256 515c8d184750787f1c077ec8be40d773f6ddc63f28f11231667f254049437537
SHA512 c505a0c8637b3124a56bd75128441bb41e71ae079dd29ef690a54c891a72817f0ed61759fae15c04adc5f40bb0ff35a8d955c60b48ac2e0d024bfbbc1924ec33

C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md

MD5 0a0d5b75e962fd5360dc2df28fe1edde
SHA1 640eca0a74ad187820f3387d169c659e9b50268c
SHA256 6ad9771c48f7b562103b71eb569420fba416badae0790918de0705fb9d9176c3
SHA512 2e4d0bb0a766cdf6b0ab4d47d2b107107c8d8d112d341a836a88173b03a68c5b59b4555a23b64b42a40fa71773c55eb689761188f9e387ef2f6fd81c97651b75

C:\Program Files\Java\jre-1.8\legal\jdk\icu.md

MD5 fca7458cc98d4a8de7d89ea769b6dbb8
SHA1 1afb3fd844405669f3bb513e685bafd460a5669c
SHA256 63e8ddd1dcc5750eb513ee747351c35d01b9632b49f84a6d757682791758ec59
SHA512 3f0b5c47b3b1da956fbd6a82a27fb9ba916d13d4701b7ab2ac94165d555a2ea5d0923cb3c4a7e89d6a674e77def3d9ce61fa1b72f6a8a0ecee1d233982968a5a

C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md

MD5 abed22724c65c9bbbf55526c8b533f34
SHA1 23814b79f88483cf81f96ccad2409892065f7c7e
SHA256 9b1b09b8c44af29ecc4edc7065a4898c16c6b204603f6009dbe79f4ef1a7f110
SHA512 69b1691286f35155bcbd79c004b28206b5c75c92186574e16fc7d08dd5fa19b9347d4452092a5397fc982372a2c2f3b2fc86fc04f79c0f6bdef701fc29c34548

C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md

MD5 0493d2e0167ebf678ade1977417d4a5c
SHA1 5fafc2271f19667ea05c93a7e4a11d6a269508ea
SHA256 e21ef2af1d3e9e64ba873def049b67f1f4c345e87d07e5b8259c34a1ba442823
SHA512 ec65a0853e3f448cdfdbd14f96917ade0a13fbf0aec899bc647fcfc3f03598e32acd1c33a54b80e88c5e08c6466106c9c4a9fc48f8522fd9f36ab2d46461661a

C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md

MD5 d56981f8ce118a62f1a762c969650907
SHA1 166758b8325be1b1d95e228db31367ef7e87e367
SHA256 ea220d64c166a2aa877c84ffe282df2623f587ceb0472bac4b1c5af50e6587f4
SHA512 fe9bc8d14a4929e2e712c1b8672134351080a2058b928cb30a9507b231fc382eaf0cd3852fe71491bd7f05cb578e7f007a5e9e28819f251b23486676da76decb

C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md

MD5 edac1191a906c31cdeefbfba7f74b18b
SHA1 04ad3820e7efed86c593179d16902cf569dae1f3
SHA256 3e2d2f48f08e3d9b7280a114034d121644ddb0749d6cbc58e9d59a7bc1941602
SHA512 9a39a8a948fcb9f43a084446d48bbdf1b8358361212ec661a6fcf9bd7702ec87363e722c0ef8621590d2c4ba47643f2abff810f49205521b93269682958009e2

C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md

MD5 de1234c7e2be156aed87c0b12321f83a
SHA1 09d9abc514839f78b24493db265e92334f56f595
SHA256 cac458a00caf8d79f43cfe060a79979e453125a461727c9f57b3e5d9a3d44ec7
SHA512 e65cd8c62a35b34102c0a018ff031cee92b1291079fa5408c90472760e30722c476295e2db214958172463b8c41f7a128a310e31ebda084af88daecc7288e213

C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md

MD5 03f002231d877c9e03f2461ba4928ecf
SHA1 8ef9ab4ef1113466fd52548190cf542726360d91
SHA256 93a1944ffd4b40d380ac6cdaa9012ac5f36b3cb501fe26e522323e4efb2029a7
SHA512 614be318106995e11b4b2c37f5afd1d000a02c40ef7aa9f0af0c60bf7072940333d1393b4e1c7b28c70f0230d7bd9ec9a531fd7f9d873330cb9af51f15f1a40e

C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md

MD5 37e475e67e5b1fefdbedd49c78ac9d25
SHA1 4f2db780eb9f596d1e6caf325cf780ae60b31cf1
SHA256 454a2bda0d8f492cacaea369ec64f02611220c8a8943921d65a54b5bfb1c0ed3
SHA512 0f42b41a75b1ce0172706d898bf5bf473e0f9df3bc2c2c0b641e4e0a96da3ae275e1b9a39e00303541c1acdf11ac124e130d9592082ffa04ad5374c3cf872527

C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md

MD5 04050a05a2027239ac85e13806a9d79b
SHA1 e3f4b629be5cdc5aa633dbb02702443e49d17081
SHA256 cead05cbf0f40b13805baf69697ffe78a656b6b80132fb2519897089060698b9
SHA512 babff526d16d9110ade8bc6ad0e376ec56788066bf9d4bb5be788ea194e1454252204b599a46b72a0ba4de47287265703aa9539c04bf73497bffab06930e1a73

C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md

MD5 fabb1275052738c69d645e5e68cf050e
SHA1 cd97985e4e2499bf853787261992911891102b38
SHA256 c17580c0dbcb2e7fb5f8753dae9a6ed8c7fa5358fa8ae6c9d40bcd540b2af3aa
SHA512 546ee6482b513115078942e1a738d5e58076a148f8463e13022709884cb6f9d4f4fdc1211d5469308403cc5aae5905aeac7a15dcdfba6e1e24ccae819c1d3dd3

C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md

MD5 81b3dea31c81a849b9302f01697fe13b
SHA1 8f22544e548a96a5712545aeeffc60a0126f6813
SHA256 657cf5dd2609c3930b35ae31c89268bc45859f96eccde7f0cc5090dd6eeba3d4
SHA512 68e54d5a4c03ba5ac54ecd252c35ce60a0093b3f496cc56e4a171ea474384d48e2fb3866512e16eae9d45b8ab68f22580f62fd19adc076e9c625bb2fd1f2e075

C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md

MD5 9e317977f9aa651ddc20b370ab36b1b5
SHA1 b79392385e6703d7008d220ccea6dc6ab4dcdece
SHA256 5c640fea8f00ecada18716de0bdd67e5a1092396b2ec35e9e720ef2c61d090fd
SHA512 0b7ece08ec1475f6eb492b7ac605ed8d595158349e28d0ccd0166778bb7a407c34743546a50ecfbcbc33d09209cf62a4132d6b17767a107a4db23797b7bd510b

C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md

MD5 3567ee9a93c2727ca4c3b79f10d0da5b
SHA1 3620aa720452faae4d364bb8d0c78180e39d9d0d
SHA256 649cc850f2cfa81df85c4f0e153965700961e02f1a6137198fdce008ae14b109
SHA512 f499b18a135912047abfd612e96fd69edb0ebd47f352fea3ed906b8c2b4a7dfe13e7cefc65b5fbcc02613a3ce762dea5badb2c15276324f07a3c428b7a03792c

C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md

MD5 2c86c1be5ef1812ce92e8ab1f3edbdd2
SHA1 a6b38a2632baada36dd28f0248ca607a2e22c8f6
SHA256 21caf3c41ec59ef27298fb8061a420fa00d4d90f386943a4ca41ce415158b2aa
SHA512 2078abb79078c5bc5fa72495ec5b32e1b9dc52b253ccf2ff6e55985cce8ea2a7665f3bb7b85a44e204467fdc0b521235e460d683af3ffc13c7593619c649003c

C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md

MD5 bcca37036d65e70eb949719aae8c0a45
SHA1 0be942e35daa6b00b1e00dbcc438c12b0a33df19
SHA256 e46c5d6444d33c74c44dd6d5fda6dfb57b0815cb43841fb4bbc098ae043ca6f2
SHA512 2bd99c7ff8098d926a8506e15611ff7384d380a02414f0fb346d2e2001e03b51116b0fb601b78eb6c6d508cfaf6ee58bbf19825985bcb644973223fd32e15a2b

C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md

MD5 e5aa8d2d3086536697738823331710a9
SHA1 f0f7ad16fafd2ddec881447274598078024a43db
SHA256 013a32270ff8c2d2fbf15f24b1f62a02c82d810a2268ea4e609f76d936eae5af
SHA512 e822659554adaa1d0bd06fb33cce11464ff367878cbd7a80e5c6a0c0b1695302fc710f644c9356a2a6ac1c9d3c0600b7fa7f985ccdf6b2d2689d41e1d827b6c1

C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md

MD5 a8acae6285baec43fe61a86dac8c7f09
SHA1 56c09b5441af73b8b349d9f10ee6bab759cdc8bf
SHA256 c4369d2155f286809489edddfe9ac16caeb6d142ddd1b97b49975ba3824ef3e4
SHA512 0c96e623e1c4269faefc27312135c44c64e76b7ce3d0634f94155646022a5fccca21ca36c7729d6fca420967791db46f67a643a0267cbc24af92a6deb0878dd0

C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md

MD5 71216d1826d305be0285b0ea653cbe41
SHA1 13300cf99f9b0c2c4a2ee407ce3dd27a8a665295
SHA256 1e3436ca9ab7cadba30dd24f9185a556b83a91e1fcabd9a272692853fb027db2
SHA512 9e271b10e43f450026694ad7f13aa0733d2edfa9aa42c8cece3e7a6c214ab58fbac875924da0d1a5e93e7ff4f51d2749d2da1ef39b208e6429961316274924ed

C:\Program Files\Java\jre-1.8\lib\deploy\messages_zh_HK.properties

MD5 cf8002ff7c44572afed51809695ef168
SHA1 bd223f1a999b1b937a09a9dc9b8abda48eb1ce24
SHA256 476b475b8a34f5556edf10654b67b3f7fd15621b39133b416174beecbf16871f
SHA512 68c5b024141355ac4b0f7e36101be5c950b626d2e4040bec7a0a949f4434afa878c85801e5bb8ff57e11c55a46192a4f6d6dafc1e657536f247bcf4599560006

C:\Program Files\Java\jre-1.8\LICENSE

MD5 d588790df650a3891f8848fa41542981
SHA1 e8fe2fb1e03eae89e3472858bbb0ad2b0c26407c
SHA256 1ce40bcb615cf3b5b029b4f9c6e98dc864b22175340722945caa0cea6bf6ffc1
SHA512 162616a3a8bb0d9e4b754be8759d80197887f13671eb2f28500e6262390607270f0215ea288b2d772db14efd1ac91fb5626d3ac41865c3e1d0583f645b1a2881

C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt

MD5 3b9e4308aa1c5bc79302c6f5085dfc8a
SHA1 a1c413b540d8464bf19cc70cecf29b6670b26143
SHA256 3bd8cbf0dee0e196dba64b2c4e5c1ca74062dcab48775727160c47654db2e7c9
SHA512 66a3619c68a3d575e9fc2e2b236b4906108c814c9516232b36e6837755d408c8adf325bdcc126a33f7f8fed59ed3f4587b83e2b37f910eca06c2300fd6982407

C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt

MD5 d07d8749a07a6e0fbeca9928c5809d05
SHA1 3aae4d6df6ff2c5fa05c23cc3b50e0e7f0ea16ae
SHA256 96b9d710076c0495ef63f4a76c6fdd220b1a6d566c4a97320f144295c8398175
SHA512 4ed3b48acd79fe019223d174cfe12663657895bb1e0b23a07d1149c8915a361f8baf30b992d9472fc0a053449d22e08e71f49dbdc7a894052307dbf963c6b04d

C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub2019_eula.txt

MD5 a88818dbdce3d32b6fe88a8150764140
SHA1 dd31aa2f5a35b100e4dc039f838f3f1d89101b9d
SHA256 7c4c4ec0823d878fa20f6b8ffa68f8399d8be1910d493fa05d18db651500d783
SHA512 2e8e13f06679bb87ecb13f1a898602b2aef7c147ab8eee555c5bb6521cd811bebee5e692ce726d0a93594987f3ca131d9326e889adb12be71d11b7c03750b347

C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-file-l1-2-0.dll

MD5 33a16db03d2b9eccb85cfbb76feec6f0
SHA1 c5d0142e2680809267525603ba9b79959a2de6b9
SHA256 11edffc778348a472b463dc6e1ae3f50bc4bf516198bbdc49cb1cd05aa95f364
SHA512 e937114672403988479775b74eb74902abfff215596d75a02738a651d65537eb19c3652ad2e017b4edcfe6dce3e5f0ff2207c91eddb9851f61918002dd67eba6

C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-localization-l1-2-0.dll

MD5 d875ae6cb6fa95add3186cf9c1d9be40
SHA1 7b5208318637aef7a3afab3aabb15fdd1500ddc7
SHA256 0ea1cbd8d015e9e3ebbac39d5a791eb096b1997a459eb40653b6b23bee5afde0
SHA512 38c23bf36d3b2296df0b0fe775883466e883bf7e6d35597a164698ee7665e9585e501b33e9fa85dc7ab893953af1c25cc358d8aaa2f100bf9a108c175e284f1a

C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-file-l2-1-0.dll

MD5 949068e564061f40af8c2972bc45d45d
SHA1 b1952622d12a40467a3da01ccacdda3a6eba220d
SHA256 246350726c4688b838b0d01ffc50b07a7e322679673fa74d3a09e6d89b50685d
SHA512 24664a98db88c4d8150259e5279cae5b3f9b12894ae7411bc6f05aba71beb352eb56807922d8727781126b8350399ed4e669d664919bfcf7bdea0999aede1963

C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-utility-l1-1-0.dll

MD5 7d68bc9b912956b31b180e4c18822ea4
SHA1 ba831b128ff3e264483657f2b4b7ef36fc163f1f
SHA256 54c5bbe24ae50b949e69f67ae7eee8a1d4711cfa6c75f719650f8d173606667e
SHA512 0a09c9a2275a7ccfcdf6731f589d46423d7ff50ba513949c54509b678c54f2f39548c5e85ca7e42d13eb44c877ce67353cdec22736c77750ab4ede06962c9f15

C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-time-l1-1-0.dll

MD5 1944cc3e62c6b725e0b1e0496367d6f6
SHA1 67d91183cf813635ed89f74eb8254c749a4bc893
SHA256 72a74827837ad3d6520e9d3ce8585a0175b9bed8b97cabc481a6d4c6a41f0f1b
SHA512 fb43522a62930ec96e291158b563f43e77af48a7905468955acd3c2205e27cb8f13fc72202fe9856b3af4670663421cb13a15fc3cbd4224f6d79ff23f52e3a1b

C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-string-l1-1-0.dll

MD5 9c78e134e631192cbe152a09577e58ac
SHA1 88a37fc9cb417a8833a5947ee60cbf247db8ca03
SHA256 4712dbb28daaf51d5b02e1dcc1bf5d4d3e0beaeca241b017c3db3c6a44fe6656
SHA512 bae1593ff3ef2bfbbceeda6a29be2242b992b8c84e716d16db0af1eb6b26f810108ee9ccfdad3f8761d46304db0cecaa828e50654b491bb144c143f31f10cc91

C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-stdio-l1-1-0.dll

MD5 666fddbd76c1898a4195c4ca8d976f85
SHA1 bfaed1043f31b39d18a97d056bec28bfd047c65e
SHA256 dd3f4a8da0733c840948730b42a01eccfe6e42c0d9cd7af222a222b530a3d3ce
SHA512 553e5dc160c887bfa52805262359abe52715ccccaad2c0d11357f508339203194602e2b8e9efce3671d28a26d733d2cd2839d4ee4e98b8af78d3065d2caa94c4

C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-runtime-l1-1-0.dll

MD5 69ace9c65f2a7552363abbe24eeefd77
SHA1 6aa2242c360b22ded0e080688e84d9578a648047
SHA256 56178150837668cc307696077a96ec3dc0521b99f694f8a4d794efcf6a4edace
SHA512 2d431bdea3bed9fc332300b098e8c8e26406e804bf2e31127350db73d84b0a91ffe9db37efc1f0528b2e7eb4948bbb3e4c35a0559f3656b56821f572bdf3fc4f

C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-process-l1-1-0.dll

MD5 72f6bc9f23820a05d99481b68a69d8b2
SHA1 6d398e9236f09495bedff45f0524ac9def20e85b
SHA256 6782e84a4dbc337e746bb29eb0925f2cf4050729c099f810b4aef924563478c1
SHA512 774fe1c0bb9f6ba7b87f6b808fac42fd390447007cec466917f532d7175efb8ec09edb88e347254655d87b11f323dbb4c9839e8af6bf50ab7d2d5a2fbf35f090

C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-private-l1-1-0.dll

MD5 e61d32dcdc14a6b3837f3dd7d66625a7
SHA1 77f877fbf7b3847947ee5ea89fcdf3fe4214ec44
SHA256 1bbd49f4eba2ecd9a1e5cbbfc2893348a11ef6d8fefde5b8292095b5567c7359
SHA512 2cbcf420a25c643379fc55631944d36ec8c5450e2327b3153438c4dc1b1d4bee15d211cac58d76e8f4ba6abae4c29e234c02cb8569b2c95014f67338be458754

C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-multibyte-l1-1-0.dll

MD5 4d484c05ddddd7fcf803829f5406a6c4
SHA1 713738d8a5b76c2e954efb03fcaf6401e8224969
SHA256 79faade7d6a1e196aa925899f32c43b0b0c6b29fa0d92f6592841e92736785d7
SHA512 da3243a8d8ec8063fe99aeab257984107ef3e205574089ee57d9d7d9752e3b35c97d2859b060adbb464236bb97b2dcb11c67b161307fac34409afeca144b607b

C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-math-l1-1-0.dll

MD5 ff50a2feaf70785440b9b20cc9f6c1c1
SHA1 e48537a7de9163d8594df0fc635d6b3ba405616c
SHA256 7e0496318b2cb7594f882db0472c2bd3343896b128ac91afeb2966e5604080f2
SHA512 c3414a4e56e269f3d8c20c39da32ad9b05cd07041475fdf8f683d53e0db06513d9da4077abd9ec1df98f91aaca3e187f3d98383bd5c42697c11acbeb918a0490

C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-locale-l1-1-0.dll

MD5 ab0f74050fa71bf438ac9c2af5134ae1
SHA1 2fb952069351ec642b276c9f2494ce8ca6e3ad72
SHA256 410b3556015862adc3fbbfde2a3ea4a515a0c0775d90aa7e39beffb164337cb5
SHA512 eba57463ebe05f735d737cf15b15e701957fdb58f0d17fcfc8d6209530a6cf74154139e463f56a3abe4fdd75b7bc218e080c17688e6721b6673332747a5787d8

C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-heap-l1-1-0.dll

MD5 04e40c5bf266e6d3ee847db55ceedb4e
SHA1 306e60cab41d449980459d83efdaa668edc7ce0e
SHA256 c51455bd9d9bd5e223c81086f570f93592665cf3437f1b9d304b9e4df3a161d4
SHA512 c44f012abcb7cbc535c5a1a56d851ad4043d463f6f7c915daf4c65512df3ed1fc4eedf0da1f3cf894fe6c11c4a49cf1ec1a4208927539950a0ea9a3b1ae78d8e

C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-filesystem-l1-1-0.dll

MD5 392c52f6628886274bcb629d089dc475
SHA1 03021fc9f7493f46a6ac3fbf199f6bdafd03719d
SHA256 b11430317d9cd718b9c0c1aeb6f5efc5a5cb05e3651131da1ec6c6aafed42c15
SHA512 334be8b2d70cfd9e2ace205c61721d72edf820d28a282bdaa6d0bff3d56ba3029f566c14d8758bdaa7cf88424a72c9b9c3ff9c638e8cc6270e56bf7ae672c1f2

C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-environment-l1-1-0.dll

MD5 6dfed668369bf32f2bddd4fe96564500
SHA1 258ef1d8ca0334080416754e6642434ca83eb7a1
SHA256 d8c9dda7c36786f0124ba5262da30b041f2bdd4c9b9a3978a590cd4737761dd3
SHA512 4f87cc42982ef5c7eeb74ae3577dc107e284b23fe1574a6b7a437474afa433d674119c75c19e6f4ff21c4fc29c821d30fcaa3e88305d81e60be56d7071b1c590

C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-convert-l1-1-0.dll

MD5 d0525ad5b5146ee79e18e7d8447f7112
SHA1 33dabfa702a336450b760d2a305240f82c6030b0
SHA256 004846b96c9c64f5ce8e3e08f22bb08bd7c2a1f8d38edfe8ee86b948d835a14a
SHA512 ff13a59eaeaf2726ace25573a8fa1d6a8b02e0c27a29b36659eb0929e3bb94d6c8ad06a9dae1ce367f72b860c12d3593e80226b2a032dcd879befa315a385b54

C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-conio-l1-1-0.dll

MD5 05d9c4d1382d02b780ca3f27d244c480
SHA1 3ce650322c480676929cee26d375b4ae4dc72edb
SHA256 e61c41be937787d8dda05a9c3db40fedc1fdffebaad666cc5ff638d06d7c374d
SHA512 2d1c382b22b1b09f8049a1ba114a00990940810292ed4f7aee5e36fb2e8708e2ef147f3b63580386a3fdf5f9ce791afc1f08d428ce3eace08b9d6378d1a9fbf5

C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-xstate-l2-1-0.dll

MD5 8f406068c175f6f6bca32c97233a2de0
SHA1 b04c7c5c550f30fcf8caa9ba262690a5f6c4d2eb
SHA256 ecd3100821de22856f41290fc09c75110dfe725352e5d41f46fdf2184bcc0cc0
SHA512 f919d344dddd39d3f2d64caf9ad9eb861f1ee229f8a295a573c679788b9d2f7dced28ef0c9becf14e5a964214b3bc21c593ea094201671801decb59d8f3951d7

C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-timezone-l1-1-0.dll

MD5 4fa9f8a5a6de7a4d53fd440d8d0688a9
SHA1 ca787e8e7d5b7bbc2462c0fddbd6ca9cd41fba35
SHA256 b0f33fec2cda45af008869e8f3a1f1859b8d92880513872c5c60b8ca34a3da27
SHA512 a966cd2b8c8e44adcc37628aafc01d8895f468b7812fd02dcd18fba08d1d78eb489d921e4387d78414c7bdc1ecfd96d1a9406844fe7d0dac2dc1743b10f4a0ee

C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-synch-l1-2-0.dll

MD5 414bb479ae7a70a690fb2fc72ea5f0d8
SHA1 7cbfd05962617a5fd8b180ea5eaf06c30905002a
SHA256 78fdf04ef3215437f7171e31d0d8faa170b884f8dd56c3795a98295982a14f8d
SHA512 7e9c994340cee4ebc39fa28a2cbf21ba8e6ba7a3b6a27292f99b4ad89b44c6ad54e9d4569acf2052fa3585185bea67fcce2eaa5809f7d25a6caaf2ca72487d83

C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-processthreads-l1-1-1.dll

MD5 ff94c3f77fd057c4fffe6e398929bfc2
SHA1 d722b4411d770ca04c6f0cab36a648a67db65bd7
SHA256 b5f55cc9420f7c30f836716060f21dd73da89a52246b3d34cfa0e013fc3b8da3
SHA512 620c7b478dd64a35ee036dd3ff7b294990108dcc5e7114746d7df391c2aeb901e9ff7fe7a0c3c9b80ff8faa13be4739538739a0842dffabd89a9b67179a0f40f

C:\Program Files\Microsoft Office\root\Office16\concrt140.dll

MD5 3b576230a80ea35b76117dd9c5c4a2ab
SHA1 551f772ba64947d1a66e00b54af98a44adaea496
SHA256 549de77a4b4e603f109be64cdaf88ee1811591db550f219846322f5244e27132
SHA512 263117d41f378b20622ee7be81c2d1441d5cd5ebc84e523a78640ebd614cdb6ef2b5981969971dd390422ad61a62c88d7bf494f71edef554ffc5a3cf54639fe4

C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\zlibwapi.dll

MD5 d973b5497214ac6bc2cbdf3c436faef6
SHA1 a38da575668033918cc9f1d4239112c2be6d29e3
SHA256 64691bf6121d7c78e69821bfb24e61203ec6e70e4c1728f5af9852737af92ce0
SHA512 90bfbff03b6147dd189400f1d2afe0eff810241063b787b2cb2bfda28ffb622908bd732ed938692ad3ff325927ac30851c537dc6003bf2ca9471182c03f3956e

C:\Program Files\Microsoft Office\root\Office16\pkeyconfig-office.xrm-ms

MD5 6d9b6aa74e21da31315bba3ae286975d
SHA1 d905122ae140fdc61673deaba9b41ec97c2a1826
SHA256 73edd87664d5fece2a286949f80903d050c8a33364982965fb3f380b5df4cd99
SHA512 bf280808e36ae541b70615ef6df4bd894f8b3274b54fe3a8cc2ebdaeaab2aa7388763209e4c18c7cc9c38fdb8c4eb8690a712370d10a6935320f10b5c4b4ecc3

C:\Program Files\Microsoft Office\root\Office16\vccorlib140.dll

MD5 c4e2a9e426dc31fcdb343a30fa7b48f1
SHA1 b3c4c591c50a4857d721c21d3c8cb015fcba9df7
SHA256 221325d628e7671d7341714e33cdb6319c99deaf3f39b03162675e940dd197cc
SHA512 bd4cb81fde83a4b5c8ac97708c8e904c85d07985bbdac12fde45b1e1b3edf3a9d7d0b953fa58fbd87d6b11f869130c5fe5cbf140fd9aa53c275419ed97b2f9e9

memory/3372-10235-0x0000000000400000-0x000000000040C000-memory.dmp

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\1033\osmia32.msi

MD5 555acaa59764f6b51f592e101c391497
SHA1 6a000a0de81f09e047c0451edd35fa78a20df984
SHA256 41e559e3b8b1a2ecd85ab34c5a6ff0794503a14aabe9d726d7c198c277b2444c
SHA512 bb4c13ee6f925d59f2fe5c2c03866c896cd2937ca7684fa16712ce2482d2990f0eb36165191bf4453090461547492ed0d196d32e9891886f999b36b058af6048

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\mfc140u.dll

MD5 c9dbb0dfc8f4c5826295cf3acf3f648d
SHA1 a381b9e9d5f2f9ac1d7a6a35e8650f1340f44def
SHA256 84d50048ebbd07c55ecec06d47f7448e2e845f6f64c62192a0b274278abcb027
SHA512 79e880a5277636b830e545d8b716e9d8503eb1758da9dd03473a16eecfc96a6abc4043723a6c5f873bccb8bb8546bdac0634a82541ff12fca45850853b4ced4e

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcp120.dll

MD5 863280a1d6a0a5b3d9ffb977e0b9a8ad
SHA1 85ec10c086bbb18d431215b2bb4ad2e612953506
SHA256 46e8b7fc7a9386de46bb55423f6d77b1cfa56dee0ff43689880691d5d7bdcf60
SHA512 1bc953cc4cf31bcc7ccf687d90fff1e6df58922a3d4ecdb794d8321476ecbb84016c9b3b5dbd603528129f8693c8ffa04ff9359b514dda760dbfee6984ed3909

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcp140.dll

MD5 1e9822b1308147cfa17d4008b801ce75
SHA1 ede6c79a8e581ac4b963b020598906fa4bfac257
SHA256 836c81180cfbc35e1bd0e40aa7683eaed72c33e7494b69ffba1b4553764854dc
SHA512 07dcc4ba91959bad72c6600c7814866e987133eda0136c8b5eacc4951cf45d5bc9b0897b853d3e1e1b771e6d6b979fea0395ee0d85992061b99edddabd5ecc60

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcr120.dll

MD5 b5e003edcce0b96f3365b239b8d5f099
SHA1 d73d3861831ceeb52772b262b500e9090714c47e
SHA256 facd19aa62241b5393b4473f197fd316aa2d635d42230a67670539ce227f9de4
SHA512 e776be658d3730908d86682bb6f8aae6b57e2173f92cd046da7ec6221c1c015a609647465ef909f1383eeda10b6216342f7816c430ca70e49fb5ad702fcda5f7

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\msjet.xsl

MD5 3b6959b53a29d186c0d3d3bfa87b1ed1
SHA1 267e487215160f230937518f905aea0ba7f0905f
SHA256 76e6a0f89225cdcb98e8fc1c7113588d6c0614447c4b8f96a626f7533a774223
SHA512 85f5a0ca7060ae364e553595315e21a47d4bfd1d2508b613934c059224eac5b48cbe21fe3373e9bbab89bf80c1210abd3398348f19b61fc0c03993467ee43b58

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sql2000.xsl

MD5 ed82c1f548973b74a256f7cee496720c
SHA1 20b30378cf2f23f40c8f1d9bfaf43c4bf7185ada
SHA256 f204836488bef0c171e792be457368418785f42ba7268f68f349146db960f54b
SHA512 9bef2ab6b3fd954ad2a98a55d45d18c1806787466ada67e1d34aa9fac511e3324b5be53efbfcb622968da46e9cfa5b05af9688f00ab5426d4a533f4a4b40769a

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sql70.xsl

MD5 6ab078293ba0b1e764c41441d970e238
SHA1 360d390aae41f4282d479d2227506633fb6e7b15
SHA256 91cd8140738181343718cf06d9795e0a6d8b55497046754f5da9238018129f9e
SHA512 428c2bc109b143c008e17a886d40f0fd28570c3e674ecf0aebfa45551db1fe10774110edbc19689654f81bd1751c386ff59a47b06d5bef69de3a5020ac20137d

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\hive.xsl

MD5 ea9b89a9f94c8cdb3bc8919530a8a94c
SHA1 274f9a43d9d0b6897b7a4c25fa54ef0583544bda
SHA256 f5010eb86a0a793abaf16c65d1a58b9874f299dc690033a1342eb6fae333b06c
SHA512 dbeed6c4f0744ab528dfb7738490b309dcfdcf53483a0084e85ba8ad2bd83d52c6fcfc07e336566eca6d56b03ee033f8cf2b3280d67063b9913ad649e7bd00f3

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\Informix.xsl

MD5 d4a6b2fccc413288cfdce68944797d6d
SHA1 32af0a0a8a5d0dcb9735bad80ffe40272185ab28
SHA256 6259bf6a3b39192fc35ac90086cef06aa50c40b385127205c603061efbe025a2
SHA512 e1f8167d0e854caf683a54f2aa793dfcf3690cdd1cb848332f5b825e96693eafd563b3732b5ed1a74bd175c62019ae2836202746a13e888eb6350c0db730ba8d

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\Sybase.xsl

MD5 a091d844361facae19ce4ee66900f73e
SHA1 35aca86639fd25fd1be6bb09cc5e64170fa8f2f1
SHA256 f658357b5888e56661621bd9a1f9da22fee24e3821f4125b68eab37a58c6b503
SHA512 4afcccf8231cd19fb3d0496773e9a6fe3bc54c4ef840a1cdb657c23ae102aaae8e8a8e573c1ed680ea8a84a1ccfd1d9153f8b7c489a9f683907456083024cad8

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-file-l1-2-0.dll

MD5 48b3d555ce1e15d02339206925b18403
SHA1 0e7cdbd97056ad6f3f40521309e84e947ed72671
SHA256 b6aa8686d66c3fd881cc64dc2fb7475d055e4cbe2e31656f93a86bee4ee6ce8d
SHA512 7be294b7d0d05f0ae5cba0b07aec6f5ba731d3c90388c30c462d27c9eb3de5b54ade08254e921bb4385f5b9f7c41a7a09548ee3130fd044f7becbfb420d8d911

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-file-l2-1-0.dll

MD5 6c5abaccae9286a51432c734b87e8ca3
SHA1 cb3628d5523149112102f2aaa6e9dee98119a430
SHA256 21dbc7bdcbb83ebac4c947d00c1c4863ea89131b1cce72d47e6814138f16163f
SHA512 937ae10c0572d93d41f32f0b44726b8681a25e22932ddb4e164a18e0ba9600f6ebcdd97086d8f56d12456450e0cf6c1f39b7b5f02deb795ec224f92c7201bd44

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-localization-l1-2-0.dll

MD5 bdfc05c9064dbc7afc38ca2650494f24
SHA1 2d2aa48d888f6213356f0f93b5c21666f19c4532
SHA256 b052b937aee5bd74cbf53c99bd0c24f21481e6c0a497ffb32a3df4bea70f54ed
SHA512 267f42170e9361c901406720ee9a625007d8a116c0cc8e2774d7a81b54822f5c77e0b3f40882ae9fa3b92ef62a4456f351474ac78c3d30205cbf7a72787d1162

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-processthreads-l1-1-1.dll

MD5 92f43134c45c4af858b0aa036386a41a
SHA1 edfcfa000f1076ffe8e1cc2bcfcb96a14e1fbf5b
SHA256 e48f1d5c8efc89de131eb5a83c16e324b062d2d6fe1fffe7315171dd2c8e0f8b
SHA512 6870bae07a96d444193269e9c29965d08e7c1ea9503b430c2ea7220cd312b92023bc08a11533493f2e094dd000fd0814db35e9fc825ea6feb3fb08dd5c68288f

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-synch-l1-2-0.dll

MD5 dafc0269c7c199a37e04111607b13499
SHA1 430a02a0b82c09f95148ebb5c432fbaf30de10a2
SHA256 faa95a957fd34b22e5c23ae42f72ac0fe49a01a30cafb6fdbe9fae734866934c
SHA512 ebae6de88536f96156bd2910868e72be273582dcd542484fa0ba21e90d1e0d684b1c3d2c12e08c5217ec9b5216585baa1a68335f1bcf24db020152b6d93635a4

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-timezone-l1-1-0.dll

MD5 2126f3ad234e690ae5e5a5c81153f97a
SHA1 eecde0b07473ce30525c5eb88000743b496cf15e
SHA256 2c88f0dfa5c5df432603d60f37d619d55166797ed4784e3bd0c180e591efde9f
SHA512 6acc9625b288ad7f1af469d09376a6c0b4043908729328386eb7f3a6d12520839220df520751d56abb9dce6e5af18301bb2db4ba87ed0d733b8de2dc6a25e5fc

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-xstate-l2-1-0.dll

MD5 ca82a5adb40d9bffc0a7cdd523e2d416
SHA1 e0e505c66d45b029317dd219ed769f9222da86ae
SHA256 c01e3184aefb897f2391a2358e719384fa5c245c19889a4ca6a2af3cc86a064b
SHA512 c4e2d8ba9678a44e8466a5b08d7bdc566162749e5e50eefb4effc5c4a952df158299cc494ddd86ab3dc5b0db7b7f03228c187ca0de33ef1afed7e63dd8013bf0

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-conio-l1-1-0.dll

MD5 33fd16be5d80d7201aeeafef7717205b
SHA1 546d25670243306228c99e81421a7502300aa172
SHA256 494cd13225af379343be8de3da600f04384142164d03a62278de60514402f80a
SHA512 a1f70245ef97d1ed84064e64eec9f5b188637324c037915d4ab656f62cff50004ba9676e06e13bc9df0664332acdcd9fdcdc6c798ba6e15c7dce13f9afaad1ee

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-convert-l1-1-0.dll

MD5 6038d5812b9dcefeadd601195a8e6d65
SHA1 b3d0a5e2c8e01c07bf694abee0f3084873c270c4
SHA256 01f6455d666ab24e039724b8703a2f350a1968aae665099f781dc1775e6e2e85
SHA512 b49c9cdc2f011e2798457c612651b1b48ab020c527f1daa05579d014b5cb72526622f05662c1c311b16c69886e87c85b2da07d63093bf950fcd25e5af979254a

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-environment-l1-1-0.dll

MD5 f8458b4c6ee311c1dc6fb9251939f775
SHA1 7c347b6733e9d59dc4c4d8fc4580e0cf073cdbaa
SHA256 363c14dfe76b3549c9d51f369488b8dfe8022eb10ebe59b60e3456871f305c7e
SHA512 591fce26b859ace55569aadf9a2029dc9bf1f01ea682906c70d7b9bb6fd8dde07a0f8f35aaa95681d20592ac3c2c3da0a85a16aa3591826aea0244b1f0786e46

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-filesystem-l1-1-0.dll

MD5 53a82cf4e2c3456e8828bd4399571a0c
SHA1 121ddca2db8b7c6fb87c780c7a7d7240db1ee713
SHA256 4827765af27c37ce6e0cb425bc27655479a9ea1444b3442b858aaea776fbc4c0
SHA512 c7848662a5853fce6801430c53bcf475f97816ac7c8bc9c5cd17f1068389748372f83ab051c86f79f571422ad39b3c1d3f4298e274e5272272ccefa33d74fa94

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-heap-l1-1-0.dll

MD5 f629b86367624bd84b183d8fac5628fd
SHA1 9145ed2889a4bab835dabf14c2eb12284f6c39ec
SHA256 c8ccb6f551b56f186be48dd15367d606dbc32689db7a978f3df947220fffaa4a
SHA512 8e63a2d4c88256185a2ce1ad3c1410860ca2496a9f660813808296bd2c1476bcb405f3284eacb76bbc2a3d82d1cf41099b0dd87318ebe7c53085c5e31fa6e970

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-locale-l1-1-0.dll

MD5 d5bd64a42b2d24aabd918986c9f3a177
SHA1 90939d0a9be4dac66fe455d007a61953fb96ef5e
SHA256 52d19b514e5e62dc60b4f56b08f105b3e5e9ac21404eede6c47131db25fae11e
SHA512 f79d9b97931c4976ddf27562941c489419aa85212596eed4cce7bb676b169e8a1e2e95f4487b68bb81d3864318910c7b752e9058a9e811a7f992269e35865ed7

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-math-l1-1-0.dll

MD5 a72f3302546105817d1c271090fda24d
SHA1 31d8e3591edfaba5be87f43d3dd81e337512060c
SHA256 f0faaad57734f24d368d18968ad739323ae899bbfdf18541269428ffb1c1d662
SHA512 e901c27d46153fa2434e167e787b702d1c71f56bcb340e845a9f60ec87a28e7a28c0269821fbeda081bdf2aad238096970fbe54d7d1d592dc8989a4e30b7b170

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-multibyte-l1-1-0.dll

MD5 633d90c307baea4d9b820d400e5a02b0
SHA1 84aa370dbcc333be853b540493f1fda657f6a59c
SHA256 8b1b479083c4e145d5fce0638b1985c22e488b9a1a7eb0dd2a5bbc411663c0a2
SHA512 6f96859642e3d9018f9919802d09f5378d111a3dfb8ab8aae8c369ade82c4e11976d522c858b95e51988c0fe669658736df748fbf20e451fcfd682d6461d0bc0

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-private-l1-1-0.dll

MD5 420e210595f35982ae59697b03271b83
SHA1 9d41307442e42c6b29db9273fd216e9dd6883480
SHA256 35062b7e7e493dfea8fa25653a4d61dab030ebaab45760625b00fce58989eaf3
SHA512 69e5c66f89482e5acb4d4b321f6bf580dcbc7a42d4677702c46a2bacfea77995e0971349ed9d80b482197b0e70b6624f8d908abf0e0e29cb04f13fc891ef18b6

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-process-l1-1-0.dll

MD5 6e3c0579ca0c3c7329c1cc5fc298b347
SHA1 6dca5c5f593708d3990e82b018c5a638910925ca
SHA256 761e6034715e041ad707c3207d4d0f0584d4c44dd11b366e86dc01bb720c8bd8
SHA512 be1c2010605520835ee1f3607e787812d3686988279d8a511a565e01a63f1890a9019d27198640b303a9827ba2a7de553f360ef22ed2c7a97d41cc2cbaca935d

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-runtime-l1-1-0.dll

MD5 0dc06b68350cc47e0abd05f7e70fbc4c
SHA1 dd255bfd8ecb513ce641016342342f5018e0e621
SHA256 7e85a1a84f5406d633beb4b8db58cb4b13622a2b341ca11a78186b413d37efb1
SHA512 3dcdd195475de23f083a37be99613efe8f784be4e2c98f42f4547b3b3da3ce272f56e363dfde170e5a96314a31cf2bf9ffd5f941a58e6dbed1e5ddeab34f6595

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-stdio-l1-1-0.dll

MD5 3c37a36277cd8d2444bcc7e67d69fb2e
SHA1 fd05827eff4be0d4aaf3c0a9f4c368d327fdb3b0
SHA256 708db99334ae287f31e8486fa2be76ad73eb8457888bc70175aca5dc627490d3
SHA512 61b8b1cd5282b00ceb518e192e55312750514bc3206c47eea7985fe321e7e701ad5b5c1505cd18567e7397978f57b6bea6f1d762032410ebe62b0400043827ee

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-string-l1-1-0.dll

MD5 5bb4dd84afb1a091479f23c5de570546
SHA1 f53087136fe08cf77c5fa0f84dad73edc04376fa
SHA256 92746c98be68acbd02d11800f327f2d80971038d2e4a04294296eba0e6d246a1
SHA512 1bd1d27ce26a293ea5e35c25edf1c6441300e653f0ceeac6a1f58e4e8632b3e20e8ef250d1550ea0c645a170747bde25ffbbebd8de43ad14e5b781990c889ed3

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-time-l1-1-0.dll

MD5 15ee2b36c9a22fb28c34e3ae6d62722b
SHA1 3e42993dae4aa4b17c93e9f75f76bb3f93a2f06c
SHA256 afb3acda9a55f398981e2cbad69143697d0a7798fe3fe23a446e4344a681a3bb
SHA512 3bf24ec346d6b88c37f424ed9318d4ae863815af0e2d1f939d320be79c119c6f08abada0b287d1c7f4a220667d271f9dac3578dd68d5955eb2c721a872f2f184

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-utility-l1-1-0.dll

MD5 4ba40e328ba2c8a173a9d36c563db5ce
SHA1 e7d5917a9be6c1342140d2d0cbe2ff156f5d0ff8
SHA256 9de7cdbe4ae10ebd3e2b58048307ccdfadd0b19785e9ebffab1d924352ccab0c
SHA512 46f585743479b4bd72fc5f0445ea39f60ac4f72a8278dfa729d56909aac1c4e1d8f40c1f54844baaeac0c6021c904c5dbd99d1fc3b5a9d99b231f9bfe5c21260

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\concrt140.dll

MD5 a1b3ab354f08e812e4b166869a29f441
SHA1 34111ad7b1ab451a536b527722bfc2718551d916
SHA256 3bf87fb20158b0166a768501127d57d849a1cd4fab86cf4744f521c3d08d987f
SHA512 b672cc301004c06ac37d34ce9b673bc4735612abce305e956cb529abf6383d5eeefdba3b0c331a0ff475299d5b1fb5ac7ad8aab314ecbcdcd97e5d8be562bfc4

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\mfc140u.dll

MD5 7ddd768d820fd89010a0f28db40002ee
SHA1 ac0ecededd9fa4f838b044b94557f629985a848e
SHA256 f3801b12f039799f9e8e1eb147e32a351b975f9732ee5923124f0c6241b05cc0
SHA512 908bbf218c390730f88c501a2b24d4b6c03f86827a95e24ad0d97efe1cbf47b3b36328c2274cb189f29e490934ed2afaf0299c7390cdb1b8390d385a76ec35b6

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcp120.dll

MD5 1f094617e20a6bde5882f3df7ee136df
SHA1 74c73b826c40d46bab74ac2bc6eda10bd10fec67
SHA256 6e3075927c9e958a69c6309a2e2487cf7cba04695ef9230c8ebf519c73288b3a
SHA512 d28d3bfe730aec9309cda6886f7fec12ee841c1bb325632fc7e5f79dda55d94546b44758de93ca840e7cd289265f30f0f3e845a42ef2fe8d8a99324b3b108ae7

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcp140.dll

MD5 546dd0cedad0e7746527afffd9ceb335
SHA1 9029242f0792177cc6c573789fe05994ecc1786f
SHA256 befdcd453575d1939a5e4990d2f6604f1220a4f53cc854c2ae50ea153b546e2a
SHA512 3178a78ca2900fbc1bf33885c0a434147b4b97c6c8384a1ede7978ce8fde01b66456e138d0574f1344e6a4c1472cad4efa28b7d1efdd81ac31635330590f3ec9

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcr120.dll

MD5 270c22ee928f9f16f1872aa127da9798
SHA1 ce7fdbaef7ae5367ddcf89ce0699f7f18a99f816
SHA256 3c3a2d42d09b4dd836b9c3e4e34ed486cb9c6139adc87404aaccb28e846e1ff2
SHA512 4b5f5133591d21dd91be35f20ff0ebf2d81500cfc9749a2ae2961f35cc870dc9b9e23acc0c6a49fd585213c96c98742ad764269ce339bfa44e3371985f9bfbc8

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\ucrtbase.dll

MD5 8d7c2b591d31a01f1dd299e6f453a9bd
SHA1 aa3a91bd6bf50ce24063edec1c17d68f08eb769e
SHA256 8b9738366ce2ece4fc3fc91e8c68ce046a098898dcd9959484c05666fbc791c9
SHA512 aad2f04afe8f319059abd650f44799059bd2361affad161d3d5712e8bf68ce30a2a01cba4649068c91544c8a6804615c5a72b95821745f3ec29c776231dd381d

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\vccorlib140.dll

MD5 cf640152d560eaad888c58215b1270d0
SHA1 00c768fecb25cfaa056eeb366c96bea30612ebc6
SHA256 2db1e97c7d590f1390c400e2a4b08610574a45fc89eb22fd85108e2808b5fbe5
SHA512 1f6c9db78835e9b2d4968312b768b7059dab79ef212063b61bbc11c30961c516f7ba3147ff72251809c55c807a2794eb43ece13c5c73e2a3ac571b4895bfceab

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\vcruntime140.dll

MD5 5bbccdf9001db1128c7eab729ffa7053
SHA1 1104a84098a86e556fd05b6388ea4e7aec8696a5
SHA256 6204730fa08aa346af181f2df270eb974738ebeafe2edc27fb7d8e9108903121
SHA512 053043821edcbbcb93a0b3e13f3da47ed3e3b7f474aa06ff63ff0deabc7baeb22218187af95c8a94b69f3f0cca02173dafa4a512131262a61c9cb512745b768c

C:\Program Files\Microsoft Office\root\vfs\System\vcruntime140.dll

MD5 1210cfb50449b88c7e72503770f21acb
SHA1 9d816e085d13d67635afbb5957d172bbfa30c8ec
SHA256 39d14a9d52b382bec5cfd53009bcf596dcff38cb753678778ba0c5eba350156d
SHA512 61d52a11ee57fa3dec98f7c8fb9d57826af18bff8d630f4b79c31f22c82deee674dc183b4a639924b33f96c42df34210a2c25a0b6e5572220a03d161559130f3

C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-040C-1000-0000000FF1CE}\misc.exe

MD5 d8d6de9c96e1b29ff858f9fb9f53ff13
SHA1 d73f5b18a1db5034261550e928bfedb03ae9d65a
SHA256 0576b1782e2990564722280f7bf16e640addd0a19a4b3820182f7f17c841aecd
SHA512 0b42c43baca1980c0ed4f22665431ce2bc1dea22b4fad8f71cfc3cbd7747a413d4b791889772a27042fdaa3e75aaede61941f87015ff1085054c9274ab26f6ad

C:\Program Files\VideoLAN\VLC\locale\da\LC_MESSAGES\vlc.mo

MD5 91e969a0f2126416a08496a2db82ab09
SHA1 a81c070019edd8c7433c4dd3ad3fe5beeabcb402
SHA256 c3463b6dadc6e0285aeba0dbe52357e3bd5962ccc13f94621c336055fb3899e1
SHA512 2f58e901a113b3515601c7ca637ac5d724873224e14c21fc94a5e6cbdda9abffc10f55784edb747ff013c02f5dbaf1f478f1229b468e8a735e0d5000a46b73a3

memory/3372-13628-0x0000000000400000-0x000000000040C000-memory.dmp

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png

MD5 d49597e772deca6e8ec8dbabddb9e7d5
SHA1 78708608e041d1745a571df0a818cfa408e2f401
SHA256 f3916339f9107604e97ba99deaf6d59110ea313ce170ef431c8f37651bad6757
SHA512 2821659216cc21a4625436eb10581938dff16b44a7914c3fb656f8bb06c0e84dc5a02df8a8a59c5421231df8ade2e11a91a60a14c6d9184c892f12608945a474

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png

MD5 537afc0d7f96c45bcfcdc4365cf41600
SHA1 a2873a8a1d3493e643f70d88e0eda7e147a57230
SHA256 455198ea28dcd775182ebcd1db44ee482654c57d2c0b78502f7f14e34ecc4478
SHA512 95a9f917eeed172cee597252de1bb41a580308b34f766e674d115377a3e7c48ca10341c7e10f9cb68dbee4887556d1fda14725ab7d97cef04df3071e0f3f581d

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png

MD5 b508c2f8ba2dd9e41819b558a0bad642
SHA1 0fbc6b325b56df268d8750ccc8896eb35338c003
SHA256 fb9c370b60e4378ad2d5cb9f3c4ec78e9d73d2ecad5ce7fdad263514b590de5c
SHA512 6258613c28330d8628307521665cd0401ff5803727423003b77b73e36cecc46e3a001531ac666cc917454231b06125c3b3b7edb4e2ff15615fc25de47439541b

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_remove_18.svg

MD5 55eb654e323a8e05f124ae19cad5d964
SHA1 330ae7c4f334883c937f122e9b19667247071fcb
SHA256 d46bca4ec99ca0085e3e43d9b32937df09edc82e1822bae02ac22ab15d33ce9e
SHA512 947df8b05b23c7bcd08cfd51a66ea0fcd32d13ec30ee820f82f46499a1562cc1dc18ae8dc1b4210678884ad50e890d42719de27e6430286f54e7c3960f268593

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\duplicate.svg

MD5 c3641460bd52add9346fb3bb87f0f629
SHA1 3924b7381340663c0cbc330e6986e5f56f5ec432
SHA256 21dc38fb9898507682da5d63c3da8ff399c9e9551e5f16bccee85bac5680d293
SHA512 7b505d7aa370f67ec3bd4c766df16d33fe1f6819675263a93e9aa5eb6abe9eecd28b11bc46f1870a1c535938d7641366699fec9c3894fdbd4fbccd9749a574ba

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\remove.svg

MD5 b59b777aeb48bd79b7685cdc908d9168
SHA1 e785c578d3e31a5597ccd11bd4ec8da4028bcfb5
SHA256 05f99ae357542bdef05a64a5407ede5bb836e9fdd0e4ffe0405db7cfe34e428e
SHA512 707d5e9358a5cb0da4ca087784cfca143abddabdbea5937adaee6b4b5a2006c665cee118dcf678fbc13717b39cb2df29aa1e51bc5ce9bc93afa7d44d49aec4d1

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_folder-default_32.svg

MD5 2a1a422373f738ac65fed3f4b5e5994c
SHA1 0d16e9dfacc11efd73c2e16a44e15f6c54d7ac0b
SHA256 109c2b75afb904257a2b9028b999fe2f2fbe21de96641943424927b59c71c1ad
SHA512 2aeacda2bfc8c8c876ef465aaea7a010124307ac2d3d2f69d7d617d975865dd1f7ac314fc248f8b8dbf85baa0ebc2a1946e4f330080c39fb836ce259ad227dcf

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_sendforsignature_18.svg

MD5 821845dd38fee7109d20f73ca6cd828e
SHA1 48f6c4107c9b4faa14d6a5185664ccb352840059
SHA256 f353cc17e500f281c3bbbfaaa8c8b0c26aa73043f8da4c93853b9fdccc38f019
SHA512 0454daea76bcdc66c87cb2b483152bae20fa70257474350692fb72c59a31360cfd7b5765e78665eddf634c48f2307de6d828ee4d82cf2fb9003191ddf5776714

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_share_18.svg

MD5 d77329fdeb1808d2a4cadaa90a3f2b12
SHA1 e46efcc94b1b4c7807c15c9d19e8de587ffca2a6
SHA256 bb1bac937debfa80f5f1ddd67a4dc8938a61be441f53219798cc1bf38d7b1155
SHA512 2c2de2a90a1589c7233bd0d54c76c56b975ece54f70987897f3d3f9787bd0e6f020e71b258c6c1778da411892bdf09c573610d2059b47603ea4be89d5bf490eb

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\root\ui-strings.js

MD5 acf259fe800f978563ef5482a1a3a426
SHA1 b67c27b71475bc6f59a3e8948c294bb397fdc354
SHA256 e9ae95653529cf4711453e9f0b060a6794d7dfb8d1425864516d87a5ae1503f3
SHA512 6760bbdcf3974cb3832153ecf83172d959fc906b965d01856db7912081c70cdb3b9511b2965b2e7cde6c7b245f3485ff8d889020c0673f5f8bf1bb5958fda2b3

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\root\ui-strings.js

MD5 9e8d07f67416b1d3b4bc8192f723a684
SHA1 01f56a335d09b18f247dda4b0d7511a5e618ae26
SHA256 25b216f9d420f5cdd04f3de488e1538daee031f6c18aa023b322ba62290f61de
SHA512 d8155819eec3105f42cc64833be6126ffc9370a624b83935e77bb562d84022f76ef9f887e990c1b734c04b361e49857a098af492454c1fe2107415dc60e0ed2b

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\root\ui-strings.js

MD5 3192a5ef92e8ccfc720ec9a3843a27ba
SHA1 0a2a3af5f7b6e71f0b76db78a020a75dcd1b319c
SHA256 37788c75427160503de210b01d49777228adfbf94737c0bbce0d31b4d01ad0a4
SHA512 4c0ebbb2907c84257ff42bcdbd1e2b3e2cf4d3efa1ca4be8379e70224e7a87385ca3659e207d34a0cc5d7b5d5017ae85ff7b1276aa670459ffe7e34d4b81fbec

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\he-il\ui-strings.js

MD5 35d5ccbc9cb2b1f42a43f06c1b1005b5
SHA1 5183f84be2a047a6d47313a87cb3e73420c626d1
SHA256 f3dfa81951af7923d356219796b1411fb3dc9d6edc63ff68832083373e3e3005
SHA512 40d29e4ab6651d0d4cb2792f1bfef9bb27d2a7b8ada7ba4ed6e7836f27e975b5faee4e854856aa6278a958a23830a5e8b332cfc0741e666faea84c649d59b69d

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\root\ui-strings.js

MD5 608617584f3fba15476996eb6eb1092f
SHA1 5f43300d8c13802e3ea9e2dd331d624074092a60
SHA256 950a1121fd29b757a3b040984133e54c55ca8a21c4f3b530c9ab3b160a6fb268
SHA512 94272ae6311281b0a5fcf41c696859e293e4d5e11073e94095fd6e6811ab141928f9a77ece61f22662797dff9353215af9954e0a2f47b9d8fa765a0d46f3abe5

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\root\ui-strings.js

MD5 60d96af78c53e1f247ad4b2c164cab45
SHA1 c63b12720e7176a3e103839e1e5e47bb799e2f4a
SHA256 ac57a7e05fa836b367684002c01a0d76280d8d37e7b5245e5614bc30b5a71a9b
SHA512 c6149106f067bdb6cd2bf1a2be2d17c7f7c7da837c4c4e572261d9c3a6212ac8e476bb38ae5440229663c174ec564c2527a74867b59012143bd55f05db77a678

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\root\ui-strings.js

MD5 6c01a26ac86bb762463afeddc01c3445
SHA1 0d728c9264266f9bd149855c8725df59be05c453
SHA256 f1615afeccd0309b6100e2d5ab4788330c056c0d72d97d14383f28be6f1ea714
SHA512 ec6e8c66ebed620f33ef44fe127330df0d01a2c27f84d6d05f2e9ff7c9082c66d0f84f71249672d25905f397a7c3e50f9218e0c5d46a4d00c4f21349db7b224c

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\root\ui-strings.js

MD5 f7846166d6f699dbcc729455260ddb0d
SHA1 94d6042db3190676a5eee573c08743c5cbe31451
SHA256 44e656b34b7786fb2da97dd07681f6c299a55d803b43d45a13198423dd97fb9d
SHA512 62369c7232d58841cec9e3080ff6c45797de8872d2c4baa3db1fb279cf7defaa5f29972e4f81a0d2527e72d1b81577da634f4cc451a10f3367db877d9f572586

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png

MD5 f93cfef196a1f100737e8fa277100433
SHA1 1b3f1ea653ec9c011b6f7ddc3850b22a7c66fc60
SHA256 5d68cd4b605f2dc1c894f882d01607c2e8f37172c9132ba3a8c6c23bc6bc0167
SHA512 d4540a17714c012239a6ac3c604c3add846d046b66e4d31a0a1ac1366ce71d1b6792a1654fb260b56c3017f0b45d251b7e8d015eb60d37c5999de2f1f682f590

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png

MD5 9cd23c26c4fa587229b179b4e189d050
SHA1 d3a80da0070e366fc94b268edd47fbcc6dc2c824
SHA256 0126d690820fe92da82b88e678d9741d03ee5e74175a1c8652bf7ccf95ad4a23
SHA512 6dad642c904452b9e7d360d36644673e7c00c8d6944e237813b8047adb177ed1f947969f0cc965ce0b8f1dd032f92dca442834f46dc12871a9b72d6ca63889c8

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png

MD5 127fa52613b4af8237aa838ac45b8e9c
SHA1 9fbc1206ababb936cc12539d694c27a36f401a83
SHA256 601b1040d45210e93223ecd31b625adf628822828b86fe56887c481d1ca33853
SHA512 852be0c4dc7d6d5889732b2476ee29045141ae081e0722554a6254f93951322ec0bb0fa18f9a9105f68e60ed1d3aa0c569b402d6fc659c652143062a44a57b06

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png

MD5 5e16fa0d1dab5084a1e1d465d47ee8e4
SHA1 b3020b55c11d1ad4b0dfa615686109296ada1638
SHA256 1d1a4b95bf527b5944d6932dd8a88a849a32f957f3a7d013c1899a0d8212f772
SHA512 ffac7e7dfcb6b02508b90b858737015d6227949d2761a7ddf5941fd41dc683c7724526d34cb26ce10642206f7b01845b026ae687143d306514924bf0947bc69a

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png

MD5 f4a1265d57d85a12015d842888c50aac
SHA1 70033b22ce99862ac52f251119ec30247920a06e
SHA256 348abb78ed0e28e35e197566385ae97abe29aed56816404d1db30f03f9285c55
SHA512 d9085f2684e72066b9591cd97e928b1d725b4d9bb502ee8566b136dfb1a9749912cf0ad3b0410f1316bbbd4f5d179bd20898723bb7b06bbb9d624b8cdbea662b

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png

MD5 f21e4a75690cf9e55b4cfd709f213b0f
SHA1 d78da24413ef54686ff45f9d2621b8ef4d9a0907
SHA256 7128d766dbb76721aaf94e9a24e7622b674e12c9e13a0b40422b5d733336cc1b
SHA512 ad44e711b1afe483383b5f8586c8abf9db91ba81c365fd230bedb7bdb1a0f4057a905afa2c7b2cfe0da5d78473e03397836048f889426f7c923190c9b002d4bb

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png

MD5 59cc06a6f2a62209eab01b1820713f7c
SHA1 d14eeb12c44fafee3796ec0c62f6c49a49341bd5
SHA256 62b6e70bd04b43ef8907628d17d14553adc14d0ff286fca19f2a70d98d1766b5
SHA512 12710805b332dd738e065c95c2c3d7b332e2345c219ee677244944046d0f4d0eb67ddff0b84dec6f94117ae382b9f8329f96a0d8bfcf5bbc762decb1366a2d48

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png

MD5 d910e19c3d6d1e19526359eb5d9571d8
SHA1 6a05cd47018b9d23d5a96779713eb076b662c10c
SHA256 81b748fc355651c599cf7c1bd59101d5b15c99e64e1eee2f9d856757634c1070
SHA512 4dd6157138bc8dd925ab971e6108c21c9655c94ce88ac626c89022c6b1325339b644e27ce0b6364f6db70b541c370ac7984adaef1133a57ab707a991a076255a

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png

MD5 44120327d1d583b3078b88850dd3403a
SHA1 fffb60a9b6d80183b089f7a0dac18da809733bcf
SHA256 29e64db8387c10bfeee0a9c20005b2870417eea1ae2a1d09f0b36810152f01c6
SHA512 70c31e4034970e54513e9e06acdc383b6bef95c2c13d108f12ef58c7c4bed24abb31e7b431317c894fb3b3fc2bdbdac47760429bfbd46f369e60f70287ec364e

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png

MD5 b447abff4e320a677bca620f3aad1bae
SHA1 b413d2fe95873e47509df3851357929305c22c9b
SHA256 2340f42b60a1b9ef401237655214435b15084da8927ded26fcc57b79343778ff
SHA512 a38ea7172f8d837592246be1d5d8f410517eec0713cefa9f6664453c9a3d96b1208fe4475de214cda0b0b639929ea1d9ee4dfcbe8de1056f1f2b2ad400398b3d

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\fr-ma\ui-strings.js

MD5 3e6d1be2a5a5c98f0de121037b7698fb
SHA1 dda84f9526fb0de6e405561d3d71c54fee6bdb07
SHA256 a8e1ace0f9dc9e0c2c881053f3986c7cebf461fd9d1f501418ae0a1d48a9b193
SHA512 d4c519cc344108c68bf979bbddf1d26f8d0b790cdb4b07e81ca98f8478ade87d730e9a0be82361ccdf6365f6371bc0f1bb43e1a3f3f29aff21ddba41213264c4

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\root\ui-strings.js

MD5 53f2abac7b98a47b70f01e023353eec6
SHA1 3544970d47051751df38919f4ca55c6e7eef224a
SHA256 cff24a5364a6572db12154804a0cf8682d8c52ce0b5dd10a0e0e2c738603b605
SHA512 60b3c4ce08887917f8150c5a71ecd22b2100198766243ef5a0cb7491835edb7becd0e7e597b5f2471c801402c07c618ef63de264712031d3237d8a31ac4fbd72

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\s_checkbox_unselected_18.svg

MD5 83d8bdea5bc0b59cac920daa32d2d02f
SHA1 717203e5ca4faa0ea8ca63ccd26fc18af288ba80
SHA256 64ca41903c890821c7c65c2d06305d20ff4f8cd21e1ee26dd70c28a45869df7c
SHA512 37837545bfa91a8e4777d08fb379d6868742d6342d04e5ec1caa376d2a66da363230bed182510ffd667d04c0bab6e0fc43f2833d277a520bb336c550534256c5

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\themes\dark\s_checkbox_selected_18.svg

MD5 29c90c427ce6d38aed0f9465e34d2edc
SHA1 912306395b98b1234bfc8b79774155ea1fdc29d3
SHA256 76cc65cf1da7b3e2019d03891fe4d5570c3168e79cb1dfac1f98888a5640d1ff
SHA512 aa4cdef32e595fe055911944aa6817d6dfa2342e3bb5b2e820028b06e98dc5d332fb618c7590af83117360d43cdb0b73c4d9822bb76190fc33e556153fa6392d

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\root\ui-strings.js

MD5 3c5489a7fd8822613cb8e0b66ba7af24
SHA1 8d73ce0e06b0675b835266240f3b370ea5ac133c
SHA256 1ca424ade309b66997ef77bd81d69cea2a3972e9a298c08352eb558668d30629
SHA512 5babe360e79a3cfaccabb4e34dea110a420d912b3a454b1457fbd8f51b3cbe527c4565347ccc0feb1b0a4c9742cea985ad96f00c1791c88e10dbe794bf9cf45c

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\fr-ma\ui-strings.js

MD5 e3be721977817bbc7cbabac83010c9f7
SHA1 18c78113b8a678764df1d1d9c1e24f8e624e11c6
SHA256 08a2f2fadd2a1f514c1695a75b926f0d0df38c6d604605c6d396b70c43417d35
SHA512 09618a1ce0a615260fd242639fe7f4a9f854c70acb2faeffe81bf7baa4d27906017f776748b506a9f6514f96ca8ccf3019e404ec7adcfa4477efb121a760d96f

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\fr-ma\ui-strings.js

MD5 76370a0e19a6a36926a4228582390e78
SHA1 3114f63b65a6d58034bb70608911a773bbe07cef
SHA256 5cc568e839e3a0e4c738f0141ca4be9fa4da0138cdb107392ab1264502f41201
SHA512 33d4daec10492df730fcbe686fef8b90cca68319a54b5743c557d8299853d27137b506ed684bca617b99971b839c9b457c996f8674c1e1cf4ccdb7912521daf7

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png

MD5 cc55830abff79382097f2bc2d92d63a6
SHA1 b4a53ba0b0cf1413882f25afcc61cab8aff927c4
SHA256 8052562016a872ee7c77da4a70ae7cdf507708dd30ef1c9cc20b3a3ecb7856f1
SHA512 dddbcb7b330ada6de33b16e2143c0d30f11db66f45ca368c727a58345a1f6bdb6af4a9685336e6a4f331fce91c132dbee323cba756fe5c79a96bc31b31ddf750

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif

MD5 883f3ea0452108bbc788278654eb1573
SHA1 f6534cecb859b6d12d7c432194e25c08a38fcc00
SHA256 c224035ee3e7b1f06f58d9ddc9131ce5863d549018f3e3bcedc946759bd49797
SHA512 cc517b6469eab8a6fadd556deba10251cc78333bc64ac4de93c5a4c30c594526aa52dab993d535c41015220fd5d016cc58bdada446c06eb9951ac3b8f0ca9307

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png

MD5 864c25bbfb55ea1c02c67c4416122e60
SHA1 77dd03eb8d98ca854d85f684fe057e7a8ab0e90c
SHA256 3268b16e3186d4101e9d9c87975e013c51bbdc2139c03d7011cceb8c2f825dfb
SHA512 5ce2d7a607decdf75c57c9c2e8599850a522150b3a0aa326d26f5de0a11b8170e5e23760336fd4339218706c809df41ee6fa268e5af661d1d500a079c3d95286

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png

MD5 67a0bca9b3ca8ccebc05bc74f14e86bc
SHA1 6e66f453a50b69263bec671b132ccb91643d6106
SHA256 3322e751cbbaed8df6bea76357e2657cf378297b67777352342a54d2d531fe7e
SHA512 21a53246583b8ca81080285e81e99c38929123777030b6272302eb5a9a2ebe190ce2363f39281173a7a42bfbd83d315702ed506f246c56d482a0edc85830cc52

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png

MD5 673abd8fa718b27175633964a32f3b93
SHA1 e45688c581d5fed2102d441b9afe9a9ca04c4cec
SHA256 e77e3ce51e253417bd5fb3f87d658839d5b21398199c9fee74b6cc6a4f8de561
SHA512 111bf25829054ec9ffdf0471394802a5d1eba5e91a4ac4a705f1ecbb0452970c58364ee4442ca3c4d37e4e52e09cac4b4b04ad0b60eaac4ba6138b266aa600f1

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png

MD5 7494e7985ae581a0fe9c4c89314486d2
SHA1 f9c3a69c0eb139765a47c2c1e5099c6384d1c483
SHA256 4068b884ff9a8f886054f5cfcaeb5555c4984314b7cde129c2b21d7a3ba614da
SHA512 141dc10502145459411601a51866551da011428f9b24eb32d959d10f6cf7a1a026d080b8435119d1ddcfd3b425b4667f1f79b8d541723c3485941b514ae5aa1c

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png

MD5 feec85ffb6e9dc6729aaaacb6ba1fdcb
SHA1 16aa640b46585c1331c716381bb49fc0be2ab322
SHA256 6bd2628cf63b1daf35c83dfd94b28a1d9a1642bdc0f6191cd50005914f1430c6
SHA512 afbd2d7e96c8925f6bb6cbb6c20ef85b2377df4f2567fa9b129f9a3c8080016cedfea815bd8eb977672a03b76ae303b9d432eb1354f8b2cb150380aebe71189d

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png

MD5 92087ada150b35e988da44b6ab42af37
SHA1 9138dec92b6ab66436a10eb179132fb42e2e69f8
SHA256 e19522be15a11b6baf16468c593a41c613242631022a381e1dd10cf1b53a57dd
SHA512 91a30d171d001e93f0e66b811272df5f156a249ce6624d0b9cb714a6c19c34b6ce0e6721a49b8971b9be0a5810cd4e05e4f170368ab634225f2629ccdd714528

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png

MD5 4618f4f121fd47d5e4c5797b155584ef
SHA1 a204fff71a9021076f44f340c32898753e8f8b69
SHA256 638710c20330a4c667caf8255a74f6c6db6cc1757aec68477c9621ab0e5cd827
SHA512 5e42635fb521aa6d7bb3d45d8fd60c7d0b281ef6e612feecec04b79dde51d4b43b1f15c9539f7c36607ecfcab25978de4426ca6c6b79625d0c2f57aa4a6fe5d0

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\root\ui-strings.js

MD5 87b317cd9443fff1569205dc736ccc55
SHA1 5d1d7ee59b20c53386c0e87d36f3c64b51ea9a23
SHA256 251998d23fa25e808996681b0c166916189f1ae6b5bb04736f62c2dfdb209a85
SHA512 b4b806143ce01239698b8be595e24b1db8e47ea3062336aef4eed5c3d3c8c7789b62580d76958ad3450ca32f3cc762bb4543f5f5a7def6b4081697ac4c70f832

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\sl-sl\ui-strings.js

MD5 45d026d2727cb4697e27820dc0aa64a2
SHA1 364787983a85208df6b42812754202a4aaa1a054
SHA256 6945590216719b53b947c9db533150aab58f94604f4eb1cee608b922d0651cdb
SHA512 264b73b1855ab663526c3639ffce5904140baf062a25e6f5946379424f9280dd83c0bd654f4fc4a0942fb607c5708c6e1057b39376df440c0a35b41f2863ca51

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\en-gb\ui-strings.js

MD5 b3de3754b1114d95d12663fccdcee880
SHA1 f1a2e7bb40640212d25827aa7356b3557f964061
SHA256 dc44b46963ba78ced36eb94d1f0dad3d47c8e4bc9d82c650c7871743a1e281b4
SHA512 acdc728c851c7fb50762b2ef95e2a516ddedaf5b67d52fd83a6f8f7967f81b2a7d20a2691b1416f3d7c5b503da427b6987635cdfcfb695e701c7708765311e72

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\root\ui-strings.js

MD5 6999bb480950c9c8d30cf3b420466787
SHA1 8cee9bb2d6528d72fc73ca25561eee93bbf9ea2d
SHA256 76dd79d98f1935d3c466aca6a4e7e6d6c4cadf7d52cf73c876e96af955b45318
SHA512 0a6074eb67186e92fa6db8fb0cc515f514b1ba4c55e9eea14f874578d0af8286ed0b47e604dbc5708cb2967009b2f299a1b11c42e8c977ed30f5208d520348b2

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\ui-strings.js

MD5 74644422e7f331d16ab8c247287b450f
SHA1 369cbb1ba4a780c11ce3852e0ff719de2479a088
SHA256 e7a03aab77c896cdee599fbe8dd56ff29d66728138102cbe7a3ff73b443da6c0
SHA512 966ef2db54e9a4bb9a1d36ff3a31abfb752e1a3c6768d0104261c5acea185aae9e7065ec48226bee5a8e23c6ddc438335142e3e5b6bd48d1452d43fc28d3cbf5

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\css\main-selector.css

MD5 f6e35f1c137c541f71640f1861613cc0
SHA1 655cd60276c21fdc45ba11eaec6fe9ac5c6da68a
SHA256 6440ce9219b46773ce0d36b6822a4b98d668cbaf762bea0441895dd66b994a12
SHA512 b8633976feb0bdc5bac56fd94531742c85a5e22171f06e13b3cfc762639f316bbf17775b56445c4e776c252996db3170b33e4ea76e3c0f136bd46d2a37e9bb1c

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\root\ui-strings.js

MD5 a2145d4ead028f17c07c333529a4cda0
SHA1 ad6ea6b66fb464842b438c1c171d0d45816715fd
SHA256 a1afc40e9adea0975e3078c289a7f8491daf3891107de4bea935bbb6d7bb0380
SHA512 0cf54c6d8893971edf783cddc3ea20fab196bf84ed81944c7751964d6efe0b4945a74af08846b034a2b8cc638ae4588b2712474fd7d6b9b96da18523a25437e7

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\ui-strings.js

MD5 266b838412d8a3b468982a20b5ec89e0
SHA1 f2e13a6c3d0780926c0b091d68ba5096ad514d15
SHA256 0a3f9bbb9848b9d975e8bcb283b97793ecfb6a4c2fe982b2b22b6b5a066e9155
SHA512 0cac71e8641d70bdf567d18248d96bb3eedec3abe9d32a0d1a706f32b09623cea1b3ccb25912adcdd295d1482477115a9e32514d9acbda42fa69581a0d28b6b9

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\root\ui-strings.js

MD5 bf6a74f4981b9b3f672efe51fe07cf77
SHA1 dec3bce736457a52c74490532abc5d1273703c78
SHA256 4d55e9b590ac6be0fff37f98b7634393202da716b487c480f2191a66cc71f1cc
SHA512 c536c76f3099e0e490122ca06429733ce51034443aeaa50e3c7b4902f285e8c10c87cd15e5ef14aa4f0632c76729cd982a0367f77fdc7e419bdb1361b0db0a81

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\root\ui-strings.js

MD5 58b227f7e567d36d911ffe147dafe0c2
SHA1 0e8c48d928aca41420e7de49969daa26538fc356
SHA256 202f700b34a2a57c959c7072f50625c9069ff95b8305d3d1780d1fe00f6ff2bb
SHA512 50aa470bf5ebc7f4b4ab92716677279eaa382cf5e8526915dee2152f4cd5209bac54121160f2fd5a36e47a29d54d753b6c34927db01002ae3ca10587e83cfce5

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\root\ui-strings.js

MD5 6395e0529fb33748acecde564a2dd961
SHA1 fa20b96b8b4bb784733434dea582ce2b7c8f3622
SHA256 99ce0ed0a66bb45996c336ad8630054c213132447c34017d83c3ff64f9d09667
SHA512 9c89e6a9507b91deedbf181ed5665b9446805147d223dcbbe4a323204ffa9b6179b9843b7a45ca75d79403f0899b19ea69d9b5dbe31eaa6b11ee0718cea95dfa

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\root\ui-strings.js

MD5 7ec0f552a92682c1a97fb81e77fd2602
SHA1 91220806c9322e9719c0501f6f3bda1a63288ba6
SHA256 d46ae3816f96eed2f8bfe77da79329eddf80fd351495d485db2ac183e54d1baa
SHA512 7e2466c15fa0cbbc3bfed3e77b8f3bbd6d0bea394b2d51ee36ce956f7e6eab58e78f33044d0b44861976de52a9cd0325f148a0c563b018dc2530eb373c2d3ab0

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\root\ui-strings.js

MD5 c7407d797f1aff2d07527510d29ee6bc
SHA1 4e3485e31d6806a46b05a68d7f51ccc7a0244ff8
SHA256 a56ebec5392058aaf5d924fe2e73c76d732b9998bff0b4c6bc739c7d625beba1
SHA512 30e35cba727e6944ac6c80c8f83c81fd9d7ff722d4db753bc35bd4bd127dc1d560aefc568428f2bbe732ebe22c7c47a8e20fb657ec6bbc533a570570b8f6da65

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\css\main-selector.css

MD5 4fbf7626baec8d4c93cb312b109add09
SHA1 4148cf2e71c3bed05a1aed27a32ff0fd45a02518
SHA256 327564941df2d4e53a6f94db09d20a3af9b819de6ba75374bc7a79ac7709c546
SHA512 358a82bb2fd1db7246992a1767e78db7987cc73bfb04b8c222b00cc06943e4d07108019a8e7ebf54489bc18386bdcbbb4f25e6f4e7e8df00dc79fa256f04587c

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\root\ui-strings.js

MD5 40eef25d9c850078cb000deeb4d902c2
SHA1 1900c275ee4c0de526469704ac7ec2f001df4577
SHA256 6c6b37dc21956042fafad021e8e48fb92c1d76943854b4a6f4ea0d629b7f23c5
SHA512 57e820bd94fe8fd14f40031ee3cf98e9c7dc318e9f90c431c111acb075ccf710a077c6890ff88831b03c24a7be85726d764849d7fdd717d997e6bbf90cd52a22

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\ui-strings.js

MD5 427a73645823d42623d3235ad740d188
SHA1 809e4983ba6cc05f04b208b357fdf8736a522942
SHA256 6f38645ef831f7bf1134049c9e7f66d361abe69f9b87cb683b06fc9e2313e80b
SHA512 e07b8b5cd15c61c85c5dfe0337182480f556badb07be223dbccc48881e0921e9917f96115e7e58c20418a53bac3a9d033d5134de89b4dd3946d9e88606a62ac3

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\css\main.css

MD5 8e97ef2f49ca9f3a9236f883a0131a9e
SHA1 2d9b2209731fa3e08b04512bfff02453ad6737cd
SHA256 5c05a21b533fb0c1a5da9837454ba3c81ef6de983a65b822246dab65f130523d
SHA512 e3cb9cdc2994ab125c592a5ea0475ce1b31805c0504c5e906fe4cfa28bae18392550f55ceb7964ca981662302e79ac22564484450b1f9df1e18e5cf5fedc24dd

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\he-il\ui-strings.js

MD5 f1a52ca1c537d7e8e5d33e9f3fb3c473
SHA1 fa6a2e943c32a0e2ae857bea25c11bafe954b91d
SHA256 099fff897ef8f0773d3be0fd86ffe54dff52ea0633b259ddc596827919736d26
SHA512 5905e77e433189987523176610cd392c8a1da6d032c37c190849df77011c2d4dc651082d86daa963642d330cc25dba21c36bce4a2bbf5a875e07fc2df8c7acde

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\nb-no\ui-strings.js

MD5 5313c0731ffb11b27144896edd8a9447
SHA1 f71bc6a9849329bfb68c1393a6ae6469b51a048b
SHA256 9f02bb725cb94d0e98c8cdb2305a02d3bde575c49f91149198089ae0653aa570
SHA512 32f646eeb082b241e6769de63393193cb8de848bc73190b2a39b6a2bf857c356a678ff94c1451d9db7a336e08dfd0ce8c1487acae54422802266a58e3b3bae1f

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\root\ui-strings.js

MD5 b2067bbdbb37436fb88920457f0049ec
SHA1 76a91148b12a18dd0b8974dce691d5e1f0f7ec3e
SHA256 74c66203bbcb30df2d32b28fffecfb32c497112d9f0c7d7590071f2714cfa652
SHA512 96e2377a99b8b6af7517bc89b8514ea467bca11ef81a65f1a27843919cdd787bc3c727944301ffad93a9dee177180e0ea147ef14253e591c2ad5c92fe04ec5b4

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\css\main-selector.css

MD5 84f29dbe306f9698938282158f9c7465
SHA1 c2a760b713c561658ddd0934bbb9cd057ec3c1ed
SHA256 0a64e904817d34cea79a6d7a66c7111573221d9cf2079364bd201ced7f4741ae
SHA512 4a8feb28da2194eb2f0f3c914036f71f0c373134bfffe5e6e82d3edbd741fc7563117432abb333d322ace8a5058d91419b82f5608ae88ba71387c2a1634bad5f

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png

MD5 3252e77d0a39db993cde07693aa12c91
SHA1 aa015df31b3da7b9a4a9b323fca3e71925a04d35
SHA256 b9f8b04c560633b1401c978c39cb22ec9e388a7df6af6ed1a6ed0789f007036b
SHA512 2536431b7a1fb490ccdaf43a022842367eb55eb0fea40ea66a821e3aeb1ef661767f97ea3637bc0a3e3df81f92ef36f3c96f19d7d0e93689a730fa7eb57debd1

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\root\ui-strings.js

MD5 8f9810248b8a0e55f3857db1a3f606bd
SHA1 a98f5e98ea4b652762422f980af2c512995ece5f
SHA256 d67de27c2d66d6683fa8eb6e844dc76b19c7c4d2cd47b3a2f3a43288ac7abf79
SHA512 447604e64e5afc7a0629522d24d0b19d91e247cd961a1108f4c24207e66b8f01f4851662c60b4f6a84b5e17badf864aedad8299acdb9d58071c3e3e9552c39e0

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\sl-sl\ui-strings.js

MD5 306d4b4fee1d3fead1d8da250599ee19
SHA1 fd407441a5dce12f475d60d571550325a0e7ee70
SHA256 ead55672e69f9aeaed3a99facb28613b572199dc1eb8894e310c8c9c275aba8b
SHA512 2cc73b4d474f42b158c2dd419880cc633d6c96bd3eb2abd1ef83a48bb4fe22cd62fb122ef960a59284fbbf179ded9e4e234df0c9dffeffb2b03ef0c05fdac424

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\root\ui-strings.js

MD5 730d48326aafe69503de2ef249163527
SHA1 5efe976279fb7dee182e729f7f342e43fec41787
SHA256 c461193c581bea0bddaa9be844a0c4afb5df7ebc0917ba75ecc0c99034f2d86a
SHA512 6ac7b3a4d0a170adb486f2f7bd0b06557b083dea6374186f49519359c9c07942c1d31c30dee3ed1d71baaca766af7ffc7dbbed0eb3d7a36a2bce22961bf313d4

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png

MD5 208cbf838ffb0f35e6a49e5c4392a9a4
SHA1 a29f9042ed0bb39eba0b60c7560a95bd2cf9c040
SHA256 431d660e9330b4c4715bf8dff90869c7fd1bbf492ef7cf74e73f2b738d7c2812
SHA512 035a059c1ec1401a41ec15e7fef8c451646b66b1739d95f2ff4d513086eee74039144613ec41950ffbff1b732d549b303377a3b9800402f43bb1bf6524757a08

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png

MD5 229bbb6f147bec78d3747ba710b9d05d
SHA1 0d4ea8e8a756c9657ae0068106b95e12e1b36916
SHA256 7f45efe10f86d9ef920b2de6b79c5d3cd523280e7f7f983f8d8d2b1ae1195675
SHA512 1268083be70c4119530ed7bfadf16004e18ea2a8b5cdddb75298410443c1437db089be2b69bc9a6a2e67dd4c2c8ea0a57676a3d6424c483f041e5b3db00879e6

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png

MD5 b13312ad1711caa5a005b04023e82ad1
SHA1 454e148ac07a83e53c50e66ecefd391442619a5d
SHA256 c7001ee0930df74a6fa2218d9ee6064a235a86c1e8524ee510e871060d5c5193
SHA512 57ed8c2ddd55b37d29479ffcac9e0eae996d6c8a43453cd95c0ba60888bfe8e604e3adcf59416e090a12c41ac8fc97f881bf55aff7988d34aa30dc9ae185deb4

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png

MD5 434145ecdd1732417d230cd4704923c3
SHA1 fbc9f90fb87cab8120c9c2361c8ee0e468e5a9d0
SHA256 7f800c0f3baee173b4962a8ca53bcbca190e0d7baa282faad181a7227588dbfe
SHA512 c0b9afe13c4dd28f7f02c1e9a4b99da28dd82a91ac324c424e9faffd91db904a806f330eadc4c089f608fb712ec2bf28b871b29252d3284fdd6f90bbb949e3c9

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png

MD5 885c8fd96d54bc93a0ac2f8b9b420167
SHA1 7e973323d567c879b9f6270345f219eea32f74ce
SHA256 d28a75ed1c9d22b13eaad4d4e88862cadfdab48ed0c5f922acf7a3a07dc26790
SHA512 bf59d127c4c561f4c6e2b7fe9fbb2c626657827b44d5ce9df53fd6196ae1e6261cb7a840e7d25d48c4964df83954f1bd26a65b57768ba7dc98c3386ec6990707

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png

MD5 fd32cfcdab6199bd08b087d223a04e59
SHA1 267e4d6b78ae1c42006f6fb945b67b1683bec9e2
SHA256 4603e019ae61888c4d0666c592649a368fbcc7737ee36d70ac8e6e716af82766
SHA512 41864a108f3f7659a8d4955e8599ec6a66470a796b901bf6dd346cdfd208239e15596019a051e87d2c6d96dc1b98121b042f0a573187744ed312210b65ea824d

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png

MD5 87b084a020f91332d5fd5e4e26482ea8
SHA1 be34a0e3363040e38ab5cb6babec8d045de8fd24
SHA256 f34f109dc480404c1e75e0dd49577202206e07e61ea83d56208d1a5f0cfd7ec1
SHA512 21e35405ce75eb08f16586cfaa61c3358af6535390091dc306ae377aec9e60ba8d5ee01152797b74b42872f56c61f0a2ef34b7f50f0ef5667537168e92d77cc1

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png

MD5 8e5379c69c2266493213c7156cf71570
SHA1 b91c93bc9877c211b819b83451d05f16dcc410f4
SHA256 65d19dd733fd750ee28dda6b52bae4228e07240968b0b24334cd5d7e2cae0ddb
SHA512 4c563801eaf6e32fcab990f2493e8e6416282b0e52006a9b8f9fd0d3414c31439ecec7b0f52bdd3290cf02fe9017dd4530bb9024a3b957e49e3f3793ea8194bb

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png

MD5 e607612f7187bb3192e7e77d51da655b
SHA1 6c73233e7465fdb69aacb6f9a0ed41e9d21e8189
SHA256 ca96ae7faa64c777f807fb9e26dec36725d0ce730a6c81c01a9a12520b3c8385
SHA512 7a3c512dfb47f4746d6a2c9e88cf071ad89de71bb344cb778f57616a2667808e9f4007ff864441854c87cd716b9cfcffb07507836cd9dee5bd6ad4aff089ddbe

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_listview_18.svg

MD5 1fbbac946b8f5e2ee45974bea80aae28
SHA1 75c8834e584201acdaa234f500afe328312ab309
SHA256 8cf970527fcdc2a04f58af8da5386d97a9d1277f1911a7f6f9381261e0e8b6d6
SHA512 ed78913dbe1fd488047d018454d2f03039f51f11353cdb23a08ed1fd0bc30b61f492b7ccfb837947c4f406457803215eee765b532ccaf121a209799e44ddeaef

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_filter_18.svg

MD5 fb2912f420b9e5f0d8501aeef9ed905a
SHA1 73e0f0c8f412f474c0849aa60749dc6c8bfa4e40
SHA256 918c7e15eaa1aa0eaf9e7fc4c3376d0d9577aceceaaa86bf8adc6ec48b002f51
SHA512 0eb18b2af107b88726d41cf54b6ccb0fcfba3e8c094b6b24d5f307dd23f6e86d82201d09e7fe122f5cd426b97404d2b80b22dd04da461f551d0e9bfa54afefee

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_opencarat_18.svg

MD5 8c0286c9a85c78e54706983d9fa171e2
SHA1 933aef0a2bc73cda8c916cce4162f5d607e27de7
SHA256 2ffee7aa6500a0135a62804aaebba42406970e1709289621793377e609ee423b
SHA512 26d3befa0204b878a0e0186543f91b3b38130d30789b6c618c68d81907d7718f081b9abe732b8421d15dc2586e09ad7a3fa0db13957ff1bdb3f43380b83b2d99

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_thumbnailview_18.svg

MD5 a0a082f9e69214eabbfcc380cbe1933d
SHA1 aae13cb3627522eaeb3b6cd4c378146e77215e7d
SHA256 a505bb021bcb0af5bc803444549e3aa0b409daf60759ba508571b47c26c4e203
SHA512 8a9b7667962bc193174421334d3082d93b5cbb728d24fcc41b95886b362a96fd339bb91b57fa5ca7c85ed01e7110941e05dacb70ef2f961a57be1e984c3501b5

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\root\ui-strings.js

MD5 f61911570db102489cb734144fdcb070
SHA1 826060d6915ca7b7be14c3d8a32894f9c68ee22b
SHA256 b60dcb74887a4059c3d757d70d57783e40d10102c12ecbebef924966901948e6
SHA512 6ec31b1fb85481db813267ba6f0f5fbdc54092f1d27c128c8548263be43671e79868af877f1fc8708a5d856f0e3cd33bc0eb71d4d2e59a447315e18215e3c861

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png

MD5 d80777c529e614c03a4385b707b1877e
SHA1 07affb0792377ca44c7c2f46af9139b054dc6187
SHA256 31951c57e5fe03faccc1e5663f0e3bc75b4cb27916d402b1a9138425bc6f8954
SHA512 ac169811a767c522c7e194563b1b299e06802162ed1f0ba07d056da63a9df6cbfeb112b04ead60c625c6efbe07ed887f196573f59d3e16597251e10cf9c92f9b

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif

MD5 8506825f72233c93da32fcb2fcc20c32
SHA1 588b5544927527b74c1474c4edb6f8f88fc7553e
SHA256 38a1559f93301623f61a671cff2777ddf0100118546bc86d765d688cfb54fe24
SHA512 481da3b2dcfb711d67dccaa3784cb00b5e417ad073557506decd8cd670a6973e73c2db10f938c1ef308a9a0b61ff8f18a7ea25c2925f10631df1c037ba64d4ee

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png

MD5 ba7c3be98220aff560e50ffb0b783571
SHA1 29149cf6ade4c53f80268e218abb9b08a6d87b1c
SHA256 2dc43082f1bc8e628c91af964ac25b851f0f2a2d29fa7565796f7e380406b3a8
SHA512 b203ad1124d25e64262d74b5cf844e9e0d967a53cb34d05af6b2d3581c41a338468584aa6406c18947f345e51b3b0eba2c1244e9a5209ba3ef0f99c2510462c7

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png

MD5 e7dedff5b783029b8c50199a8f0ca6a8
SHA1 51d9849fee9d61139999c36c6a016668cc50877c
SHA256 2fd8d9a5d1dd997e7b3817d752add941e8489823a81b54fe3a458b931089761f
SHA512 30d12ceb7dfbd8ad337810e0c912bc4cea83ef6c0bc8e1c84501d91a91eb7a08f80915cbc5ac30cc786ba2562f9d466589fd127e88ca362b319f911ac4a7c892

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png

MD5 25af4d691b1bf03d4c5858166e5b7f7a
SHA1 77d6ad750dfaa4530a0ff9b9065152472d2c7529
SHA256 5251f983506764a3fcd64417439c64539258c9099a589c2cb9e542a5d4237ef2
SHA512 34a29db4956a25e28412b0709bc357ec20ebaba41b74e743af00e6dd9e305331d71b8d216a078e19df34b5758c8767be178ab00f004313498ff4c9b9eb8e0105

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-gb\ui-strings.js

MD5 b26c5e2f337574b3c62c74c9fea97f6d
SHA1 52f8aebd99c970c96ab2e52b1188291c6e35d9e2
SHA256 e1ae0539f6986c6945cd0e43a335cc38f98c05691862ec02bf1611993e8d5914
SHA512 42d0b7a9d3a066f2181cfd5e27efa077af1e4ba5abe145d255d2fc4ae689a1ab04bf4ec0280093959a8c7cc914207b2b2f418a2b26ab1babe5feb078c8437e77

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\root\ui-strings.js

MD5 ef8fc56839ef089e1ef454213f747fc9
SHA1 f72cc7dfc726d4e6568757bb107183a955131b22
SHA256 491566666ff54a12982f5ab409d350a6968152a09e9cac6a1ece0b11c788fbc3
SHA512 12906ae0ccdb120113b08540f44c71aeaaf818a0e459ef23eaffcf0a919fa9dbdedaf05cdc617760973f62a36c8956e77c2db32b57139364a8c0add14c814d8d

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\es-es\ui-strings.js

MD5 1b80f0afecba570515721714168d08f8
SHA1 87a9804c991a3252c3890cf12f568441ef183424
SHA256 41dd849042b2f3fda77618488457c83e2f72b29858d3f87f7870eabf0ccceeb5
SHA512 37f848242561a3bf1319dedc04496c58d552b23aa7ce6214123571fc202794aff2e8a906a6a4af23c328b0db72164cb9b37a7fbfd3bc26ef566e27d5b9c74a58

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\root\ui-strings.js

MD5 acda0c9f43ec939e4188c6c9869879f7
SHA1 8c654d235cc39629d8539b83127403b1108f85ec
SHA256 7d47fa8db135558fe0e7fa847cc6f950d80a3fe93f053f2d1091eed831247abf
SHA512 5c7b5c685a45eb1be22b97bd3ed032e9b9f54a81a8756210f3e4280c45d3da2727ba6633b7e3bffed54ca9c1667b583602eaff5c61218a708d225c26319841b2

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\ui-strings.js

MD5 4395e6fa51a2565a280a95ecd8b6cc10
SHA1 833b30abbcde7d05ce1c5f36f83d508463378d1e
SHA256 8503cf2f2c54398e586f7183939711e110f3705513ae272a8fd06c97f9609418
SHA512 d6d5c8fd80a5204b3c926b0fe758f6cb74729bd10b0a457e156cc349b8ca8cfcf6b903de6c5a9f34499256b0bed7f34c7561a5d9b1aea0a042a7e959c86a4ec5

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\he-il\ui-strings.js

MD5 83d20c987ba75ef58aa5cf9858b678dd
SHA1 356f49188ec3780250604f06c529f0bfd84eb1bd
SHA256 74f10df1b0b6bf323f5b1a2371a58cbe224adeb5f8055ae42e4c62108c874f49
SHA512 d9669f0f898f8c9054c66dbfb97ae3839a60ace5cc5a61166fec1bbf12f61bf405f6dacbd08bfdff4c254c61369362c5222def7e70dc6b9c533a22244b4d0d21

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\root\ui-strings.js

MD5 aa8a1eaca727abe00b363d87a7643123
SHA1 a23b153deec1975abdbe3f226bb25cd0ca15550a
SHA256 7e0974d7c0db463bc598270ef9d96d0bd4d611c17d1b3a6af9964de4de34edeb
SHA512 5561be31d7f81fa69ab4f199b731515b5761004446bbc03c152e842e8ff51e8a93d6d131061f8b7c3600675b0a84bbe07b56cfdb4a82caf0c6780c42fe545d30

C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt

MD5 1d0851490fd4acc90f691f1a91886b9d
SHA1 d7190c647baf7435daf997c08bed5d7bc5ed11e2
SHA256 e80da7c9dfb6b9729a9a915cb709562a36c48bb92853def5e3abd79c22c87dbc
SHA512 ba8e2866186547350e467534a2833a8dc0e778b828d107d972001b4d70512ddee4fee463cbd6178ea4672fec74ac88569c216608d940130f05e78ece229e0415

memory/3372-20901-0x0000000000400000-0x000000000040C000-memory.dmp

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Extensions\external_extensions.json.DATA

MD5 ce0b84c0cde45faabf424d934028b800
SHA1 5d5de5417d932c08f5217ff4c492c5c218cd9840
SHA256 0f8ea6601f03b5b027b0a2e172c6c57f45c2ec470471bc13ed2592f048cb31e6
SHA512 e6b3a9a67567de7942c96bac6dccc4831e39c3350f44303fcb04451d8104cc27e9cef45e4968c132746d45f3ce40529ca0574019b53df93ad7759d9e6a539ed4

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\identity_proxy\identity_helper.Sparse.Internal.msix.DATA

MD5 8b12e82ff59200ab35b3984298830916
SHA1 99621a543f07021047687f8e3c57129820eaa47f
SHA256 b2495e84661aa9e23fdb9b4e607b79f5b8c50f7b125dc9008aca598ed8aed752
SHA512 4eead44f6af6aaa54adb336f080054d0552e82c68201e73ba6ce6657e7e3c1fe690722bac96526aa1a364a210ada040e8f85c598cc19843b58aa7a18028bd6cc

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\vk_swiftshader_icd.json

MD5 b5f48267290355201d0578ab4bbe404e
SHA1 81ea047ab3e6044dbe76ccd64dfc7bdfbe0eb35a
SHA256 03de1220bf75250469cb98f5ef4f844b3f335db8e91b782052c7c7e6fcb5cf2d
SHA512 93a27ef9103b19259178a91510be3a0371326b0ae121ca6c485747f1588720c0734f0be48ad82a85090b700a264b29291b15ce4c8a2b74c1df5453008578c775

C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\de-DE\MSFT_PackageManagement.schema.mfl

MD5 14c38a0b63bb6757fc4acbaa8cd67998
SHA1 90ff10757448427d892f2a19d3ba71b00184c11b
SHA256 d827a75b6732f185487f663cef83ce137bd6e388744f18161fdc45561aa82f08
SHA512 c5cbc133a15c12c16ada83887d8a7ec8d5dcba413a76bdee67c7333b6c18580e4cf3e3899d68626cfb53d98f3d6fdfc571e518fddc4643aa8f336ef3296ee5ec

C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\en-US\MSFT_PackageManagement.schema.mfl

MD5 afcb45c4904981f1291af60b9c14ec31
SHA1 22f98d3088a51378b69b23a30e0272aed3326764
SHA256 3ff983432d53a202f76866e03b20e9da5e22bb5dab2ce6a2d857a2611ddb4b3f
SHA512 b7528bf16bbdfd0837fb01cb504df8ad340a15a5aee1cd96cee50815168d61e84f86da00057a290d66e7378a7e5f8df7f11e125044fd836a8329c0b37a065523

C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\es-ES\MSFT_PackageManagement.schema.mfl

MD5 53a649ac54bd2ed53d9c8ae1dfda1308
SHA1 b557f88c983d20718ec16c2c0a7d6f51f52080dd
SHA256 db004c6f933b10c4c67912defcc04b0ea4fc4d2a23efdb16f3fe225dbee0c510
SHA512 39f93abb1c49d1fcb95aa794bc10937540f70303a85c85addeb05c5caa0d38aae77ff9799bf34e929ab22551e463ac6476d0eb884125ceb7633cb9fb46e90041

C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\fr-FR\MSFT_PackageManagement.schema.mfl

MD5 75ca04945ed1b6f2f823cb52033a1763
SHA1 b6f38f5e7c7f7aa32c68cd2c833da37def7e2886
SHA256 ff3e361b532679f464c3b6dea364390cd981a415ef83659fdb31077c3cde7450
SHA512 c71ad22a8594d83f83466dfe1e7e2d1734493a7c17cbef9a1de876627beeb5a6385ba992cf0011c3a6b1d12b00fa853987fd3362de54df12f8afd761854588c2

C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\it-IT\MSFT_PackageManagement.schema.mfl

MD5 5342a9b593400f938e90ea7ba4a316b2
SHA1 db5ad79bd7e301c9aadfaf644c328456d8cf1992
SHA256 d925050ac71ccb283cc9e86466b59b94c8d225a05b4feec6a41bf0aba3f85b87
SHA512 ff9072ecfd22155eb6c065ad241169fd58bbbbabf8861a05b4c2fa2e2114df95240ce8b60f155c8663a4bf5adae6483f4435af926a797b5393c5ef59b0382faa

C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\ja-JP\MSFT_PackageManagement.schema.mfl

MD5 8000dc51942752063e5d59a16ad5b753
SHA1 039ca8c8f2c30b6303a17852c7235355703c7348
SHA256 8449b690047958568ec9e2dd74e83dc111ae3e3fd4e8639ee6397b3505c681e6
SHA512 7cbe9e4ac504674c3ff7c140e752625ee0cb29b83d979047523de52a6bfe5f56356155619c94cecc0d021eb0a38091fb3d3d882832b3677ffaf2985b8585216c

C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\uk-UA\MSFT_PackageManagement.schema.mfl

MD5 0329d55ad9e3b50cf790bdba4eac9bab
SHA1 a301b79eb91a76e2b5d2ed62425f6fd85495ffa9
SHA256 ec1539e954e9bd76115a719a8dea05c82d99653b05220a3e86039c3e86582cc0
SHA512 2112cf79be60aac4f198c212cc8e0f40bc98bf03ad69da8ef10152899abef6b72b114873f6c7181aaf98a632a92d2450fe4d7401b7c5aadeda8b8d2d11d8f689

C:\ProgramData\Microsoft\Network\Downloader\edbtmp.log

MD5 ca6d6b00de35235794d02296af676d07
SHA1 2c7e6f6ef81da7f8c1819b1a56d52e54a95c936b
SHA256 3548f5c3e0046cd8a14f9d23541be5e57644d3543502775c47027bc9398c7509
SHA512 88547ed8b68523d138f070ad0415952d4822c643e0bed5bd662b22d68201f8226a8ca5bde65436831c6e3e3a61f76e803aeb58c2a6254489a3736fc5fc87de05

C:\ProgramData\Package Cache\{3A96B93E-763F-41E7-85C7-1F3CCC37EF27}v48.108.8828\dotnet-host-6.0.27-win-x64.msi

MD5 f8e6259d7ddad67c59dfebc063f3e758
SHA1 c86a8d5b8f0bd4d878af7bb43e83fd22e075b0c8
SHA256 71a1d0446a18bcd8cdd5fda0dd4d52a7ad76f3d71ca148edf5885fd8ea7a5083
SHA512 870941fd3c7f6d9268b75e307cfb3c36bcd2f46853248e9ae5008a5f7844c624fd593100c01b8e8230e4cf60ac1dbecd97ad4db1f23fb8dfdad9ef1cbfc5f108

C:\ProgramData\Package Cache\{662A0088-6FCD-45DD-9EA7-68674058AED5}v14.30.30704\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi

MD5 825183f1bec137cf6a91767185a06898
SHA1 c9612f7784b9697eb6c800acf4a962713979e6ff
SHA256 4437629f130e1af951ade93bd1bcf77d8f44a24fd7d5731d681e4d82d1982c9f
SHA512 56090f86f157b8daa6c09b24bb83c0dbf7f796ed8fe120fba22d3251442a717796f96ec06c91f282fc064af339e419d7f79f95866141b533bb1c6d4b630d396e

C:\ProgramData\Package Cache\{CE4D7AE0-FCBA-486F-A58F-DBA3626FBE4B}v56.64.8781\dotnet-runtime-7.0.16-win-x64.msi

MD5 214b1f9c74633edff92ff8a5a0b62059
SHA1 243e83dc76fb34075e99984ae879ae9b2e898f2c
SHA256 f080be6d8005cce63e7f07373bd54413438a77ae1c88109b2326fd4efdf7071a
SHA512 5f2b8473318c1a5144733b057c52a9dd1eedc37c52843e0c204d1d9e8907c591cedadbb7909f3162994b1cc769f61921ab60af96067b89dea8f05bff7104367f

C:\ProgramData\Package Cache\{E634F316-BEB6-4FB3-A612-F7102F576165}v48.108.8836\windowsdesktop-runtime-6.0.27-win-x64.msi

MD5 6af07b137d724b45840de5ed0e54c0e8
SHA1 5567737522d11937cd8146053c8d1ec09a861765
SHA256 c1d81e101e5bcce98d1365e524058d628070941a54bacc6de5ac63fe3449afea
SHA512 1dd6521d0e0420acc7a7ab0bd70096eed2aecbcefab236a928da89f2cc1f155cf005fad4c6e344e0b51fe66e7ea252d4d3b9986e5d44eb6463795ac0aadf04d1

C:\Users\Admin\AppData\Local\Comms\UnistoreDB\USStmp.jtx

MD5 9ffa504ccc467cbdbbf7825aaf5e8b96
SHA1 5d8c8fcdf2f98b8b59bb5729fb4239a10df626c2
SHA256 93835fa991416d8a6b1bd52eae470b1cc7eb70f0578d10910a8e119bee5ed07a
SHA512 318d5fc6d4eae4e262e8b06a41cf275d72e2d85fed36ae7a8b4f57606a6e059aed21924decdade4d48047c114f71a4ea65ef6072cec1a9501db7687668b9d5a0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\MANIFEST-000001

MD5 6ef7cbba5392988d1035d8447e959b22
SHA1 5851575e562852eaed50e7973f6513f3f2b764d0
SHA256 515dcb7d9026bcb5d4b746791470dd9afa392bde8cc9aa254c75e422465ea134
SHA512 aea45ea6d4e0a9e1f5fd4bf5f68efb5f283860133d87a2f50ac27bc4400ff0db5702bdbf75b12e7d368d8a27baf18ae3e47e545147c00256d4676cde79dd8a00

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnCache\data_0

MD5 3c8c9742924b237c7009c7c7785dd4df
SHA1 e9cbd5e7e8061e64ec8e25d501d0cd8f8ade57ad
SHA256 3955cf3ff88ab3ffcca3b6fd61cc1b2329e7c2d6141773cccc39a40982949cfd
SHA512 72c35d5a5fe212e6733b70c9d074143786abbbf517d75f02b483b1db4932a43d227bd5874139a8162f8d1bf2177d0a6bc3bc5714782e30212316e5b5268c9659

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnCache\data_1

MD5 d8fc04649ade52ba4ca3a3e5e91444a9
SHA1 0d633e6f5594c2b477f3c86928c58cc6c7195592
SHA256 e07afe5b75e32bba7690ad6c26e851a2ff44d3f1b88c582878bf5e0f36239ff4
SHA512 ba9c29434df2aa4fa997a4eba61e1ddf2f24afde17286cbe418cbbfc60d00310e9ebb5466343c5997fe1e14eac90f8fd0f452271bfb1cc0cdd402cd8661b45c6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnCache\data_2

MD5 0f3c5a465ec1445fdad26fda216ec372
SHA1 3a3c6edc0363660e21d380fead022b8950f8c4a1
SHA256 f528b4cac82c1305173d476fbadc1414545ec6ff72a8a028ea516baa911e9175
SHA512 e642826b78185595b916a0a47a1008d2cfacd20c21c2b23f88b47352089c599b369e2126dacf2623378fa8292b799ecf42b434e794eb4db64334f5a2813195f9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnCache\data_3

MD5 aa1878e05cf53fddb8708df0d24b673b
SHA1 487047bd606654764fbfb8b6ab4697c414708c15
SHA256 a98eff907c8dfda644a12ab6ad40fd025d94dbe053ddd5d1bb0e65a44698d92b
SHA512 699c9349de1963a0319009a3e12bbc357e9907cdeb178832799366b3ff674f85bef21c50c7d772935e123809366ce4bda3b0425b26127d15d931276f0795b8c8

C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn2\desktop.ini

MD5 b795a1ec30726b387baa2040c7c253ed
SHA1 6b3e125768a6852565935c73770489a891e38f30
SHA256 9651155bd981789b1446df61fe16db38070f866da1cf6efde0a64c393e109d4f
SHA512 7339b81286ace90a8cf366ee190b27a874beca0f5f5c87dfcd66c2a9d251a7e09528a881f91272a07245f813bb8823ba0e01ad02f565332ef38fb0e4e0f22fb2

C:\Users\Admin\AppData\Local\Packages\E2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy\Settings\settings.dat

MD5 e2a611fc302a75f4f8a1725aa8af5f18
SHA1 7fd61c99286876495cf7040d00398f34d892ea43
SHA256 4e5d14a826935c379c0b279a1bf5921227b88080ef158162aef4b80dac789c56
SHA512 7c17af20119a1803ee7838d2577c877ab0f74f2e421c1b2e209bc067d4885b7f0de7636311212c536e917d8afc5cfe7c1cfd3fe9fe22de9013d8a4df7280b09a

memory/3372-25817-0x0000000000400000-0x000000000040C000-memory.dmp

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\https___java_com_help

MD5 2715f1014e81dad61ba67fa15dfe0d7c
SHA1 9e9cb4a3a3d56b8da91967f81843a2349b9492d0
SHA256 2faa86cdfba40c40b42343ee525a193bcf9a0e76d58e5a10c71e81de41804d87
SHA512 c61dafb8173691795caa0c8fbaefa330d535acb742805f4ddfcc00142ef1b206ac6bb30acfcbf0989fd8deaa17ff18f9447fdc2f56f658be5cddff860970f85b

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_DATABASECOMPARE_EXE_15

MD5 61e68db4cf71d3c22ab31cbde8482d3a
SHA1 297c3692d878bfc8676960f7152e0d9eda1587e0
SHA256 08da03bae766c6e92c530b08150058a4dc3c7080fc82ffbd76c303deb3a81bf7
SHA512 bad5bdf61c8945751a0f63dd27928d2086856a762b55db3d19b57e2d7d4ef22065f6acd444d55ce678b197904596b6fa7ff6737a12878b05c506e1d083eb2a08

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_comexp_msc

MD5 3efff823b975a7f9484ac28ed8e8be94
SHA1 b4d602acc4d1adffa70ee186f161826db0602e45
SHA256 1026a153f3525a8558dc5f1955b020a5f9e495c42472dd64d1f2c7218b0e4623
SHA512 3619098224748cb998aaadc9a1eefd2ad1b8731b157bea6c8d1f758676dfa390c3c9e7155c9629fc64bb64d71779a45118d1e5ca2b4c58f02a7132070ed40527

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{6D809377-6AF0-444B-8957-A3773F02200E}_VideoLAN_VLC_VideoLAN Website_url

MD5 7a915ebcf1df4c3bb38051e6b4ed1f0c
SHA1 eae53ff47da7315eb7af781aad1c7e9cb4102e64
SHA256 22c0e17e070639758646c2cf23ea102795d988ea592ddd956aafa8bb1cb522d2
SHA512 fc57c2b86eca292affcb980ffdbf65b0a6d74285732dfba16625679dec1ae6940534cab264fbb571295a55e3bb9007f6f79751693858b5f92937c1a2a004d39c

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{6D809377-6AF0-444B-8957-A3773F02200E}_Java_jre-1_8_bin_javacpl_exe

MD5 c944ca43abbe4e48ec6e7f330d3da61c
SHA1 1063ed72f4b11024fe05e41bfff830994fbe18f8
SHA256 29a73033e0f7766fa005c585c3cd0eb0693edf0f0f0a5ff048a43370a466b936
SHA512 0b40611ca8a735be54c19bbe75a3a8f48695c3c46a13bb1e2e22b82e98622201952a4c42fea770032a3fa2a3f23b82937da11ee06d82fff0f7084ad92ca2387d

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{f2260aa6-4327-43ba-ac0e-06fdb67e93a7}\Apps.index

MD5 ad47f0af8e59d9b20c6a3233ab2729f8
SHA1 b4bcb4e1dcc2ec65c1704e0b6522c85f12fb57d8
SHA256 5bb2854a9e104987a4cc95600fd50de2a1957ccc212373fd776e89c1d3b0968f
SHA512 29a5a8d56c8018dfaf0b2ff778543de7b26b9957999f14b0386fa7b4cc3393f8f4c065c9fd3ee816e938246554295c424f87d41ea1724d272db7e7a998bb1c8a

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727656120098725.txt

MD5 8bd7c5df286f9f126607e995c725c1cf
SHA1 7076afb025ed0099ddece8f704999f760f54808e
SHA256 c05ededcc7e5e163f6e21a68494d567235320ba022f247ce70a8ede97e726610
SHA512 eff211e162bbbdb4719b49def318bbcb84791c3edacf489b0157e3726ec0646e88a936800a21a4f8aa3f1b6682cab393c80724c3595192899c32fe15bc1bb88d

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727656590293648.txt

MD5 7b78af47d0d75958482cebfaddc0878f
SHA1 0e6cad1553182faa7fc075baa5f8f9ef262a4292
SHA256 f8f96666ef151ca81abf117850933d697ea9f99f272b6577955f1b5a176f987f
SHA512 be3935ace6351ece01202b79c62d16039359bedbd64e468e3c38e767f94f723acc4f09a8dccfba86c32701151d0dbb5293223e2093a7181a79d46c1f86711f59

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727663328721506.txt

MD5 abd0633c3c00fdff1cede4f43783de6c
SHA1 0e7cf5ea4af58a6c425f791b28d259bd91699b23
SHA256 be12d8234890a6af8e5d03b6416b7fefa7a5243e66f2f7622f85872fd6784c64
SHA512 745593b7d5c18fc6cf2ad5b7227b9781fcaf48d5ab3252a38f55c091a74457d982fc3ee9990cc7c7a91706e18b4703cbeb0f588817e3e91dcbea158ae00f8dc8

C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727666039184869.txt

MD5 83519bbf8f24bb354284c82d07997ca0
SHA1 3d363b01825f046db4f7a58dfd0a8bad7661118a
SHA256 e748af8a5589f17b53728f881fedce06ca348f0f87db338f4d7ed8d23cee45c7
SHA512 e9502a7cca9386530bce7adfecaa24bb4d341649ade26d2ab7cc8e2596ef6cb6f9ec8b0d0c0d79ae60db79397e30232a6791c8153123d1e4324016036e7cf37c

C:\Users\Admin\AppData\Local\Temp\wct5658.tmp

MD5 b5e2f6b17b866ca85fb10473ef281a38
SHA1 8979bb4b384ab2ce8bcda22c3444bb85798e2985
SHA256 5f94149de2753328dc029d9a3b95f6129c3c7ca514005c00e240e75460839626
SHA512 9e464c08f343f89ea3e1e81819018b709ee2c180bcfe276999d1b743e4716d095826240c3657c95627a5e82079e8b263ad51cc8b9c25ad51cc8b532411a04c45

C:\ProgramData\Microsoft\Network\Downloader\edbtmp.log.EnCiPhErEd

MD5 697b49cb7672d45a86ef3cbd3b909196
SHA1 b93ed460b8953ced873651971cf036978062ec04
SHA256 7c5cc6eb0c7072e5f52a766caea92f5f42a273ddd8d030ed6e036adccb225fd1
SHA512 6da58e403ea411f4a1a0fb599b893017eff9f6b16bf13ca87e51d756f23d3c1e9f084f1669e8dc79ec27280f50c7b7b402a65bc3e68642502afd50be0f5aff8b

C:\ProgramData\Package Cache\{3A96B93E-763F-41E7-85C7-1F3CCC37EF27}v48.108.8828\dotnet-host-6.0.27-win-x64.msi.EnCiPhErEd

MD5 26d7641f8e76733e149b7d76d1fdc5d3
SHA1 a1b1d50baeb1ad973bfdaccb1b6766e292adc7f7
SHA256 d1c8369e69cbddaa44cd356fbd2e14ff7bf9b0b21aba2c3bc193d1dc18cb37e7
SHA512 2e642527024b31a15c1003898f31ab641cb100473b93dc915f29f414b3a3070aadfe5129a9535012b4c7166140255690081a374f2bf3d3c439c03147cf1f2305

C:\ProgramData\Package Cache\{662A0088-6FCD-45DD-9EA7-68674058AED5}v14.30.30704\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi.EnCiPhErEd

MD5 7a0bcda8c8900ec5c50780067f33cf19
SHA1 e4e0d2c4f435a5e83c3d5f1aeefeb72c69534c9e
SHA256 1af3a54ed00902160f389869ba7eac8c228cde0d94d31752e25958d15d8055c2
SHA512 59a1db3319647d72eb0a65539b9ab6be4394eba01c91a80ef9f8f18f5f51dda8e88e16eda2f235e9c51ab294064b90be09d5c13a89b10f81051dfbd57d882a52

C:\ProgramData\Package Cache\{CE4D7AE0-FCBA-486F-A58F-DBA3626FBE4B}v56.64.8781\dotnet-runtime-7.0.16-win-x64.msi.EnCiPhErEd

MD5 66a6324a3af3e16cc151f85ad2bc1be0
SHA1 d46740cb5f9465753be4f4316a6fbe69337fca2e
SHA256 e1ead55140d8f347e97ffb28a28179e3b2df6c47ffc7bf7095d4f55eed8e7d3e
SHA512 528538721775ca2e86e4e26e23b1df634ac356f5e52b11bfa2c7dca4503ea07d122510d3bcd0cb8ae031f1628d6f72a0e34d4e93b4f03ac7648a310939b6488b

C:\ProgramData\Package Cache\{E634F316-BEB6-4FB3-A612-F7102F576165}v48.108.8836\windowsdesktop-runtime-6.0.27-win-x64.msi.EnCiPhErEd

MD5 d90462d0f29dd9613bf19980d141a598
SHA1 8c17e2143b967c84f936956ce8073b635d1390a1
SHA256 55ab9b2fb76f6dbaa3ea534cc621fd2d764bf1548121d92420e27409434316ba
SHA512 bcfc572b43f79f31da84bc35a8c3eacfe08aacfb856156541641dc90f5097591ad93cbc4dfcc0fce3a6e4f0377a4de7405fd84aac131d8473d5894745ca5fd7a

C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini

MD5 8ce0ea1b7f2c7b7ed5c477c4e5b5c656
SHA1 bc48d4426f7a1fdb07c906ac34492460d8073129
SHA256 66ae476840108a9f68d77ab9f84e88b34c37ead956faa4cb408d620a51a4f18a
SHA512 315ec7da46c185d204b62e02588f0a33a60600c87df4dea742616f34b22aa8f7890ce050c9668a07dccc811ced23aedf4768cad75aec3c79be8c13cd59ece0db

C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk

MD5 6ca8d8d1e17538089bfcc87d2c095b88
SHA1 4937b67d32c79011ab21aaa82ea7b356b22d956d
SHA256 9e81cc1ac53f7463984ad0c4a30f01d889db6d0b77072537c12d0880915e5ec2
SHA512 72c1eed71b7d7d60e4d7b177f1bc7a06c39d863f28968c48cff98a42bf4d675fa049b43a6975952a7958d1deb459186bbc4b3a7efc96fbe6d2ae8b059d5ee077

memory/3372-30017-0x0000000000400000-0x000000000040C000-memory.dmp

C:\Windows\INF\PERFLIB\0409\perfc.dat

MD5 41e1d6b26d2deae2af3da8f871102762
SHA1 d17916b3207913b464eb3c850d14121417237944
SHA256 789eba254967ea4a7e61f2327f642855ea5711cb14f7accb9ec9a989f1f669a1
SHA512 3a629299d64e5e609b9c6c7440a7333b704a6d9b266e46f928b96b3e4de0c8374074c61013a56624007872c8609c53eb6ddd7fbba5a7bd79064a979b900f09cc

C:\Windows\INF\PERFLIB\0409\perfh.dat

MD5 bf3ae881473d6a88604eed694077d183
SHA1 c690ec6071ccc1ac5b6c4d403cc847a506d92b65
SHA256 3973ffa69585979c1fd3344203de8b94d378e5a9491d74b80cbfa38ecdac5be8
SHA512 50bdebc06dde8bbacbf940732a29c7a3291113df95a14a61818446de165d213ea4feb1d9de3d2c2c9808d431995e7fee6db915f122d21b91f9867914087a3b7c

C:\Windows\Installer\63b6.msi

MD5 213e9d51977a010c849cef509e3a3d5e
SHA1 4869136816c9d490790c118195a76509b4eb6363
SHA256 e2273179ce0592add12fb3b847b9eb847cea8cb578bae3ded89b7eb9cd2f6a28
SHA512 6887edb0ff508d5cd682b98da3f8cbe3b67123c977a7ed29a91cee5e705347d8799e1dbb9e5649f4477d6abebd3a89d4dc27af9078bdbb93419607d991f1d609

C:\Windows\Installer\7f78.msi

MD5 c22f8085d90550b2d3b16ed6ea9935b5
SHA1 0e4d7dba4ce7ceca90161a4c6629c6f69e18a5af
SHA256 184601f2fdf365a57dc82cb9adbfe0a699a3b3460999571fad500c2df0bbcbc2
SHA512 d6eeb010ddc27f90ef1e339a7e5ba1ce486c40b55dabea91d2815233e41ec0d48dca77c5e92bee35caa9a08fbc72c0378bf8108a0d4a386f3e00d6995978554e

C:\Windows\Installer\9f62.msi

MD5 6dadd09395627a9f7ede71fc2e789e93
SHA1 1d41ad03debe0490e06cc0a41de74f8da3c7b3f7
SHA256 211bc25596196e6589176c555d1f3fbcfd9c77ecaeffe42d0ca0c3efdb6f59f9
SHA512 5f8316ed256bbc5c89856718354ccf41ca91fd9cbdfa2ef4c313f49892814ce1341ac41879afe53c69ef810ab6d77a3c9092a0219d0c5a296ea9b743c741e907

C:\Windows\Installer\SourceHash{1D8E6291-B0D5-35EC-8441-6616F567A0F7}

MD5 2e329ad91d6a5a049db7444279fb10da
SHA1 c0c4ca55cd2e1224ebaa0b39bd0f2e11b15e4ebf
SHA256 7c0547ddc7ff8adc21734716e64de633e1ded3bd4fd720bf186d205f5f054375
SHA512 e7c1d0b495b5666f86e515ccab614e8109f3d8b2163ab452399c192261faba455c6a8ce9857feae9b8798e8d960d23d3dfefa2c640dfb7ad763c6b3830317569

C:\Windows\Microsoft.NET\Framework\1040\admin.chm

MD5 8c5227b92afd9453dad5124047bc5a81
SHA1 2d433d558c2546cd25b0187922ef8db012ea3b77
SHA256 333d5015db5ab8c0ba9a2fb4a57245083b49b0aa0c3a3e59460ec0d4c1ab3806
SHA512 45fb2a82b42ba2c8fa53d05064fd823909aea7d87f261845b6f909672e70fd0a9da8956fe1bb80d5b6b83a930dc00f5d10c6d96589c98d2f839b5ac9ee04c31d

C:\Windows\Microsoft.NET\Framework\v3.5\MOF\fr\ServiceModel35.mfl.uninstall

MD5 30b4a9ec76aadf49b5cf51b48c07ba55
SHA1 2990e3f55d7305a1570cd85473cec60f647cfb29
SHA256 bea4622debda4f4ba2bdbb53a81c3bd1489870aa6a696c9b7b4536055bfe17ce
SHA512 f58650c903aef7af8577854376f559f95301c9c5a853efeb376b8177541e7b3ee5f4843e7296e38f3bca368fbdda445b38ae607d33edab3b0cbe240cbf66aeb4

C:\Windows\Microsoft.NET\Framework\v3.5\SQL\fr\DropSqlPersistenceProviderLogic.sql

MD5 66e8526682ab816e8b857614a4e0f615
SHA1 a8b96ded4baeee67a4c08fc61b9c0601eaba5346
SHA256 3a7594a74bdf96ba130e7a5817af03696f12c6907fde608937061f1e8c6f2494
SHA512 ad64e7e6913772787f7cee632f01f74b6bf82dfebe12ba23b6e89b146b2b0dbb7f268b17767b2657549166ba8c82a6e8f5623418bc2878b502df08bce63aec0c

C:\Windows\Microsoft.NET\Framework\v3.5\SQL\fr\SqlPersistenceProviderLogic.sql

MD5 592fc4cc6b28c5a4ceb22dbb77ac0e48
SHA1 f56c82e61a827e2abc5d2d05666882ecbdf4e930
SHA256 0e16da6fdf16c5e2c1361145df7dfcd5c40154e27d0d69d606815fd31a8771e5
SHA512 e804eaf6d85df861d0bf905210863feec5c7c3cbddae6537e4348b15ba1aba0a687e25ea3deb8c26b5396eb37aedb983ca1b452dbf06a19355877a8757f4617e

C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\security_watermark.jpg

MD5 ea06c4fe8fcf872f02db7d7ba6ddcfcb
SHA1 c50f75e98eb4676614b437ed964640352369b6a4
SHA256 b376f7214414cc7a55951948ef8080eef4f1e3ba0fc345ff764d7073619747d9
SHA512 29421fb63f39895185136497a0eaf0a3caed86419a6b1f815ef8bbde173bf06ccebe34e0720748e35fa4235e23af6e1ef78632f669675671205c6da04237a51b

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\AppConfigHome.aspx.resx

MD5 5fd27befee81595664b0ceac7939b8fb
SHA1 e864aa514979a010045cd3612e4ee47f48bfccea
SHA256 384e5139ab3711d678d8a205c247a93028a3d8d6d6fdc250c739eba297435ad5
SHA512 7aa79b3bd1669a4ef6053b137db93c9639df22c32270644910080748115712c546475458411284b8a5cfa248e119e70c77c71d37b6f784f151f8e96a008ba463

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\AppSetting.ascx.resx

MD5 6f8bb235a6791e1d03855c710ffeddc6
SHA1 2415b7ca288d0ab0f35335566dc29ef4269cf9f6
SHA256 9374dd9e202f6d2d3b376f1d8833d7bf6a3933897144879d3e2de8d7d68b8929
SHA512 4c21b8bf479c062abc7fad67f92dbb9056f88de82b676b7cf0d68a56ad3322912a776a51b36eb9abf80adf0768d181dc9752593c4274852200dd54724b704e50

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\CreateAppSetting.aspx.resx

MD5 984c97c9b59c791203d66cba1b88660c
SHA1 a3f9ca2df9c159759855ed6c00db91851cc6a8f4
SHA256 a7c966cf02423b198c6b922c001851282bc4aed271c53fda103576a9bdfe6b8a
SHA512 e55dede38cf20f021cd91a60e3c008095363ce60e3495c667b637558018753b8ddafcbcb8b271b95a7a44e7793ac5073d54789fcac0c782282892c0365726695

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\DebugAndTrace.aspx.resx

MD5 93924541be5442201c3b9c564b54039a
SHA1 19e71f53bb97da6e24c321bde8ec6cb1cb73a5e3
SHA256 717cf6e05d7d0549a24f49a679d72ed446e568a8223ff9b14b343c2d3efb70df
SHA512 bfc7b2d162069b0255e30cba75b0924600046f0051979525329b6222053e13a66006fe2a4b08d33faeb4a8983f24177e434ef94b8fffb41d3af1292f88d1e9f8

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\DefineErrorPage.aspx.resx

MD5 0d843636d694a18b9789ed028b7e3a42
SHA1 104c9f50dbb2ef6fb983999571b6011e4d8044e5
SHA256 4f62444f53bafff29aeffc98771311cc9678e8a4fdf702b0f1060cc64cc5c0bd
SHA512 68cf3fc452b489a03bf7f5a871234995acc91f13257802b48b6740a8d5d9e28767d4a13c428c83ba994b9b70caceffd2ba6f0d7c517d01b916a640a957c19520

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\EditAppSetting.aspx.resx

MD5 003a41169f06c2ab6942867b2f4752bf
SHA1 4cdbf8658f133729d61265161d2d012c64587ff6
SHA256 97619063786f696a0766d90a605e1b2df61eb902d6e4c0ba34189ed24643ed6c
SHA512 cc3dc544f2f0a349aa09414ce5524a5574ec6fd996517cf02083e299763a97579289af4d5a4c9ebfacdf46fd8646fcdb8e6f1e218a4c5d224b2d045e0b8499b7

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\ManageAppSettings.aspx.resx

MD5 dcd31c6f9cf8d5a50f43efad50c0de94
SHA1 46ca1acf66700403efc9afbe021e2054e0fa804c
SHA256 a25171483a473c6ae3f16718ec1070f3aa3366065d2951c8a5aedf1f52394d93
SHA512 47ca3478f770b3c33434beb0c4ddace3dbaa539819de82671442c03b0bd0eb6c9e951b6ffb9ac206b07807194a2d58ab770798eda4d3ce8f632e71fb43295629

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\SmtpSettings.aspx.resx

MD5 f74f79ff672178e3ea7fc9d4bc1f98df
SHA1 08d28c2545b7926f8c2722ad19c5dc3a682f5b2c
SHA256 d3116a725965958b00c90362a7e1011133ce992232cc06001d964fe7221a764d
SHA512 e079dcb3f5632301c364b0104b7c308e495597a6d176e7537d4ead618987e12dded2c4ae9ba6356f71dbb3bb0f19524c1e1dba7f9830446f6d58a408dfb2d693

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\CreateAppSetting.aspx

MD5 5a3bd908f064ea807a4e7fdaa6bf9718
SHA1 e802356a542767b4dd8393b53ea4893cf0a22967
SHA256 a9fbbb5de12679797570abd962b4ca88f6a3a500d6989e02e2e0614c120371b8
SHA512 755810b1ab2e48b0b316c9be15b92302938d4e431eb1ad10cdea1f3ec40b0e734b89a08c3c7bf12207db3d69d8cd6d611729e5a8bc5f3b9b1bb1c77108a58a04

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\EditAppSetting.aspx

MD5 c8abb6b17b25d93d58a6423dbb6a1d23
SHA1 a0f3bb6fa12bc2e21347fa64d8ac0f02a4bc7804
SHA256 43fae9ee5745e7c731cfe60752c4aacfe1b92d8a2f7294a565c81f4828c3ff60
SHA512 6a5658ddbb949d6c38142dd396a514b6a12c20e1c0af0ee85def7b2f871ee87276aee2aace53e5471265832298394a146f59afd4fdab396263adb3fc473b4449

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\ManageAppSettings.aspx

MD5 15c63734589000e2b92b076471dac7ef
SHA1 7217e539774d5c1950b4143bbcb5df25c94355d1
SHA256 760b4177a7c8874bfdf20edaf7f740059fd0c36f7357dc011b0994556a67527f
SHA512 769cc37791b48741fcd73d4cf4466e792c8b3040ae1d74388c900266a96ec729a347b4c068f437eeefe82c8ff4b5dcf8cb6890b1a149456e9d46bca1346eee67

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_Data\GroupedProviders.xml

MD5 168217748da9b0572dd9376825d9930b
SHA1 a83d9502dd84e59e7dbe3f6a1734563e593c345f
SHA256 3a7c4dd5d79d7a2f8496930d1aaec61c8f9c29d7878c42605a4680d5fe5d743c
SHA512 c3ae2bc2ae08881cda5376fcf3cbd284198aef4463e02cedc0b7fd568630cb5afa144c17ac0764ae1b6384b9bdec473e219e20ee49f75845ee141083479fb785

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_GlobalResources\AppConfigCommon.resx

MD5 6d9edf64ed2ed0893005451c22ad5a31
SHA1 c4272cfd08fc2eee81e0cdfe6e854501b7096635
SHA256 20cef277633fdd5bf08d636ebb7fedf988ba154eeeeab4fbc01270fb380583d2
SHA512 005b2d60016ebf64bba9959a166e46858234646caff27e43a240a6c7d53ce44bbaae460675f210e97f69fe4fb3cc4303fe01f937434b50828458bb6383acc340

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\default.aspx.resx

MD5 235d85f4a0faa9799274ce954ed09212
SHA1 6d9e6947e615c88f9da6dabbde25b15485b23e78
SHA256 c84afaeaf674804f7a6aee3b03f290735996f02b103c7a904accdd8edb16aafa
SHA512 4b60206219d98b49f610c0b1d2f7b7883302fe1264e0e92a01c6e7c9b72fadeb49349139f67684a27cd43e07e007cfa51ad4a86325acdc212ca2a8edbf30030d

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\error.aspx.resx

MD5 5369a962399809904135b26374c56646
SHA1 c1922092f1c97034804c2a7aa039506b8dc8d201
SHA256 bb1304fc1ee9fbbe255bbb1d2ca52f441e5e35023c2adacfdd5afb7f4f62c8d4
SHA512 e4ac110079d21e0254435d6b3d8a5d2cbe14102c8095aa113c95eabf856321ea6f6f192db9aa13e5b1393bbec5495c00761294ca3e1611b4cce206a593a8b175

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\home0.aspx.resx

MD5 5d593b4042a18a9a50bceb9ad4681f12
SHA1 cd495a22600bea8df249e00aa5931d1090dbf4b2
SHA256 840985e34c7f6b1aec5477cfba0c6d019e297b8a8065465f812abc9673508784
SHA512 83c3a88a171f4e3e3fea9624947534f096a9281da81d8db1f8d9375c6e42c6ec09fd55743ae9635fa8f8e4df6f0c78d02b82dfe8bb20ca3470a110da842c1181

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\home1.aspx.resx

MD5 c8ffb1b3b0adf0912fba11a02566be0e
SHA1 ac89601e1715960350c303c08b2fcb8958b76d9b
SHA256 410c383c0c60e791ec0bfddaf100232b6d327c8601b036171f61f4cfea33d190
SHA512 e649adecce8fcd7711c667e413697966d8b0f11451242e540f92ed0ccb4f62095c98d344daf3fd5ae106f5ed56885106b2df6214254e66848c1cfff9cd444e56

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\home2.aspx.resx

MD5 5bfa015bf0b35b5b0944eba3bea49378
SHA1 f44a591f08c028d3cf72f710c7355fbcbc3a5c3e
SHA256 f3880456eaeb490e14e3ef824d95bc0845350d7081af54b677f373d0ecfb862e
SHA512 d173904c8be8ba8bc5361376d3e595257a8c493545032e1fce37d36f65427696961723951b4532a9a40ab24f3a3f8f0545778ced47a24c81a72d7c316572d7cd

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\navigationBar.ascx.resx

MD5 cd9a901d124b61d2b521334fc65c2461
SHA1 54fae4fcf7c6479d6ef43ba9a6c0161e64a175f3
SHA256 0a62bd74522e2899b2e555ff8af31f2d159c0a9d1e9fbb075e459b138ecbf541
SHA512 8da215d57c3e2d3c90ac3ca09b46e25bdb9abc6fdb6e01c18aee93f2fa323e76fe361305b1bd6df1d7624600d215963be758d4fd4593aa8eb32d3c0f168159b1

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\WebAdminHelp.aspx.resx

MD5 7be9c958c5a871ae4bdffd741a6dfced
SHA1 ba707627a9a84314abfab87d76d761c868d0ab0b
SHA256 10cf85fc34f106635d505064ddc606c5a613006f03d6f1c676e0ef3ba445607e
SHA512 a1d7ee3bbc21fe92364287b7ecc3d66f6f367ebe0559caee5bc180e5a594ca0c460a74008ff49185d8146bcc936a7090d5904f54c0bce7da802116e61873eac5

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\WebAdminHelp_Provider.aspx.resx

MD5 c1f761e8cbe301575460b7af91f230a4
SHA1 668e0c9ea83edebcaeb525cb5cb617247b4ebf3c
SHA256 28c3da2e820a8688cfbcddc90364bd2a343fc60499705800056180a7abfb6d5b
SHA512 82542372d9f8543364ed4270f5253c6f7e2da672b609140cd56ce96e70301b5ce0618108e2bdcc51162e5090dceb9214024204272121c3b716e104e4021dfbb0

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\WebAdminHelp_Internals.aspx.resx

MD5 cad975ee576dcc1c6540e9fb2909bb34
SHA1 3628dc7209598846224d1f5abe01b0cc4485aca8
SHA256 f044b868dec40536ecf2acb7dd1ae8e9ed9e054e3bea5cdcd1a9b79630d28a61
SHA512 c8efedcf7ad5e7927a63086c0bc07e74ef432c93194948d8245dddb4a75802ca16aed6381d457de78b000ab38ee57cf899f2f4ad3a27ad953aadbedff495c244

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\WebAdminHelp_Application.aspx.resx

MD5 479b930e73531d8fb19fa39ae5161cdc
SHA1 f05766495b33085dbc89f3cb7a807049cc451f42
SHA256 84a3a5078c15f1df1da8305719c2b2357aff496c8f3509e6c96a95bae27d0f80
SHA512 5243b2fd799b990e55f187d1af77f7ac8e2bba19471c66b68add35307f477a443e2204465c221cb3e26f379148fe86f91670696983662f20bcb5b02e607e5107

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\WebAdminHelp_Security.aspx.resx

MD5 55e3f2b49f1b9019702194db79222186
SHA1 3ae21589af5f8f365dca55239bd52fe6eb31b4e6
SHA256 474be842bab15ad5259e84d8d8a0e0f8662d468621c385d5923f38f9d3ce4502
SHA512 3bf1af250c4cf400a420b175827835f6129f49faf261b954b9fd2d69c6c1b101c0f712c71fb413d8cbcd270e3b8f6dfbe2e69555234b5b9db37913545af7137f

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\default.aspx

MD5 59531ae3c0b4c36a6d512cba81b0233d
SHA1 0dd86e6926fe89bb7b435b05f42c13cc24c42843
SHA256 00cc3beed27b1885ca53a7bdf4d66fc226bf977267d10033a75df198c1136469
SHA512 741fe9c6e5b9961e33bffb2172d5f2c42112dde2be982e4f6dafb1aa4e72a4b572a818be22307ea377259724b2d79079b2c6acfea1bb21879d97810f47701a44

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\error.aspx

MD5 08c47302dc762ff6bde6492a120a8bfb
SHA1 611ab209f91301de4725be6057fb73d5241b866c
SHA256 70edb1a8ec1dcfe004dae06b25c3bdade50119971c949e7928fd45a14fc60301
SHA512 cb61ede8940fa1e8929ea05497238d6c2c1b17a9bc7673a082e46194048e87bac8a54411495f7050504b629bb616901b4fd29ac9890ed625e9f6bb8749f3b4ae

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\home0.aspx

MD5 bba8a20893e9610b13bd9dfe280191df
SHA1 90f2987b4ad88507aa08358e3e3cb82fc7ed0016
SHA256 c46dcec7c6b618fc95ce8a3341cd307fa103cc46cf1a0d3bef7fa5181b277cd8
SHA512 68a6de63dd8af4390ad97678cc9ef8d3ab9a31dfbd0882ec6c6fafb86fc97f4a660587015b69de45e0fe2e258d578162b85fb2586e0371b14cd1761f931b14fc

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\home1.aspx

MD5 30a7945a6e4bce18593876d8d36dc9bd
SHA1 4590e792e8874e70351624d526ff65a163bdeec3
SHA256 3e449c7cff85ea092d5c30c4063b34f8545ff531108363569b2e1d5b79455008
SHA512 7c2aebbc870821272443580e89581179acb8e41126a0e61f7e0c38a71964ec465075e4f1ee118b79c34cc91ca3fff529e2685b92f9f7aa4fc44712f43c569a41

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\home2.aspx

MD5 3ae13f663639415c9f4e4b08f197af45
SHA1 c48ea2b334c1a783788dd6f339236895308067a5
SHA256 29fbe1e946e9802f1747c9a4b788ba0064c29ff758b0e06b1cb54e6a4f20ab2c
SHA512 2e2c7f36cccf032ce32085888c7468635c29be1165fa24b6d7ffa25cc12631281707bd93529e5ad6cb8bce9aa90b96740718c69336172f86b58433d5f4765614

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_lrg.gif

MD5 573c0ee706f590b8894c1baced6d24d5
SHA1 e017d8df6eab104a4663dd6cb270b9af3785c820
SHA256 b998d67c5af2ff41b51bc2a4d61c301868cc35dd1e56cd01e05adaf0f9751288
SHA512 fb0a5e1f63e9f814e2b3a2c5e6e23e89d5f8faa35bc44f82f550514a8ca2351539532b36668fa5ddb61235ce9988fc9ee390604f93c571c080fecbce5b1ba42d

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

MD5 2967c028384642e6cc0c23f01e89f1e7
SHA1 c6fba53e15762b98ee178691a130f47366783172
SHA256 d737785d2ff7244e06487a0ffc62ba5892125044f164bae4fb704e01d408774a
SHA512 8d22d5c58eecd8a30d38fc61da6b3e7e156f0ba39df8d946a276d832259e48e18cda7facf7d4ab276d157ce0b821ebb56c7a7d38b16716f20ac5595c62556315

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\aspx_file.gif

MD5 ec88464421b154416d22b52c19ed3ef0
SHA1 60e22d49a9c3985a7d4ce05a2971db6872c31a32
SHA256 86686a7d176eebd89e9eb75eed4c448148690f14847081ee60901f73d3b86564
SHA512 ef297b5f2d189fb9e11838559197941514706966fb297caabc50b7aea9102aef07d5d006900fcc1c1845d4c0c205bf5c122ecaddf78e8cb2093a0e4297d3ce89

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\branding_Full2.gif

MD5 07776d4c4c0d859a8908c9330e9612bb
SHA1 60af7878a255749922a197a31f14b00ecc694fe7
SHA256 f4bef23007404fd8096d636caf8cc211a2d2274ed14706bb8ce2bbab1fb1b6ae
SHA512 1bed116b54eff8236b9ffdbf94a1e397b8db53fc46a00543914460daf15403e12a14adceeef4c1c56837853bc28d142b990e11a14b8959767c9c455e287e9900

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

MD5 305105cdb2fd3bb4af94eb966a838d61
SHA1 27f142ae83e30122cd14679607d181b76eb36dcb
SHA256 1b2fb221a77ce276ae7c1cc67b68ecd87872f34dc7fb0a31b9331c7faeedf466
SHA512 7261dff92fe81a262b4a9ca3417c261fe12e850a30e3bcf892b9fda805439d10e83912a828596ed892321367ea97d5b07d7898e9f6a849fc93e4d2602589ef31

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\deselectedTab_1x1.gif

MD5 7c2b9e420e27f2c18933e7460109d2a7
SHA1 a75862dac6701c40cfecb15b5672c8b98f935bfa
SHA256 14960bbb8e2def6e7b4a7a9210cbae4718fa6904be937a8b2dcaf5f21eaa30c3
SHA512 efaf444af937e421e56f8f5dd017f67cc0c361dcf81a04e716da40bd5414cd09477a13cb1ad2ac1284f1ab235f484304d99df73549dcd3ec38ff0e6ba102b460

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\folder.gif

MD5 a354b4dcaa6a50b983fbb198d23b2b21
SHA1 7e544ef88913f091f1ba723f30da94b99572f6e9
SHA256 b4899846efe770bdecd1974fe7224528b5754d66b94c27f3b4dbb71899105ab8
SHA512 e59bea03a52d3dc865d96261fa93ae9e0e669f3c1906e7f901fd708d279482d78207fce1e8dc3113219b56c87b3fbe836673ef7c0440738f6d77b82441f2cf77

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif

MD5 3c44d7699158eb5d492d72d7599dab1a
SHA1 89b55b7eb0e0001f3edc429ffb464ae402f3f108
SHA256 5c5e41d8eac07d35da86748d9c39b2d061d3743bf0989c361e85a7968d0508b6
SHA512 4ce6639b0fce90f12419efe2eea876713efd7d2d727bea3030cb19bc52827a31f3b1a782bfa19eff525f088502cba4ae7bf5df76689100448702d373e88f6503

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif

MD5 234ec5ec7b2fa07096c9ba370330d055
SHA1 0235ec7cf3d27ea23521c6c085ab651331ab240d
SHA256 51db4a465c5baa1e4fc470366bce4f88d3cb79461116a2bd59e594c35cb01409
SHA512 29aef924c713ff13cf4cfcbc417742f25457da3a9949cccab376efc19499a566af1cee1d13fb54a9bd9c04134e98ebb6ff50d265e6bac78b00d0c3d7dd6dbbbe

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif

MD5 ccbf93a2e224729dee7bd62ba2fa7442
SHA1 18f929077340d5cf6e0386e1b61fe63e25cf5fa1
SHA256 ded932655d2464c9b15dda1271a4c55c927f2b7bbf0c12025271cfd12617c5d4
SHA512 7d99879e32c9b41aa60fa68058c5e00e15aa872bb32f65c0c59742f2a881ea128120db24bb42b2790b0bdf3db07005a2a01e61dbe442669bfccf03391ec2cc86

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\help.jpg

MD5 e4b8e8bbffdd16ac168d474c70c0749d
SHA1 fecd55a9da4044c81c829e4c298fea1c81d73987
SHA256 0cf443ab53f205c513e3a7fdde83113495a524c26fbde825e60b170438496658
SHA512 10f871157254a4cd64c598d9e6c7c735f9a22cfd2bcb1e0f346fea4ae644d5f4ee03dba4e4a0a2a1714dcaf72a753f2a195fc65ebee2a7e875e25e5000603223

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

MD5 a96f1aafae53af56fbdbe5748a385eab
SHA1 d0ea7148b839c22297043c39a8c65a9186b49697
SHA256 6731c3dedc523d9127db4ba801f20334dc3e9c24b3430e9927576568b56814bd
SHA512 d4a180300342092394c9d5ee57c7e5e01c5a24f5a60d23a2ae1c022ffc8d4a8f56be7b5178fd4d3e03ddb6ac8211d70bc4805b6338a7c7412841bd3148c24a6f

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image1.gif

MD5 d900a0f612137543530d2da6daa50f7d
SHA1 83974b94bcdb3a68e464a256861c4eed64734ae9
SHA256 0c333736c1316caad7db4ed545e5035d285bb4460908dfe67b9a72fcd07916b0
SHA512 6bf4773c0b93c8695805807fe50edb11ab22342187b87853ec7743e8aeefe3fa25d276b79616b28a7d4bce0502634652ec5ea130c968c9cefaac40fec6a2c4ec

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image2.gif

MD5 71985a294b8eb3d0eaebcb487e3406c1
SHA1 b46f6ac7bd3b068afb6e0eeb52fd65b1e96fb3b3
SHA256 81994ec40934edd15e8befe490a5c6ea10f31ce5ffb64f287cf6594401ecbc7c
SHA512 edc213fbb326fa9ce2b86590d3280525f79a339ac30a1b0156f00a7ef26c6d8f5d397913abbb788c45afcb0ec0b919378a8e68c241c0c0edd143ce28036ea94a

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\requiredBang.gif

MD5 02acdd140a79ff0184a1bc48c5069e9d
SHA1 21073f8a18ba6eef82b04242431ff83c7581f9c9
SHA256 e035320b72bda39d89b7068e85d4fd58645235771b854e426974e3d06e76da79
SHA512 8f5564c22daca8f5432189bb49aba1be7169465b347131e1010637c287b47534af58cb183cc4edb862eaf977a4d134d3bb22e55f9921336388ca83f2cb1b24b3

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_leftCorner.gif

MD5 f500797e67b42feceb1cbc3ce7cd9f60
SHA1 33a8cd44da0e2ff42ffa8c7386d3af89361739a9
SHA256 2c16305a8ba4ef0029f47bf1a3f1cc4cd357095b92b1dd813669f138eca3a24e
SHA512 843f6b1907640b189ad64218e235c2c1966fcf49d405d63c5d203a3feed2ab772e78f9077190d6f878db9a9f77562e93f933eda90d65b40260bc5c09f2bbca67

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

MD5 9bafcad83589b37dac57f63ebe0d8765
SHA1 efb073731f8bffc5b58e90ab7963c249cae3db4a
SHA256 9d130403a572860596b2850b22b134456d936b695998b2dc700438437cdedec7
SHA512 7cba4298892492a2dd549717c85a5749f06d2eb46ea34161e6a520c3ad61252d11337759dcaa465f0d8b7459a3c852953e0aa4fbb65d7a8d2e08a5ce4b5fcda3

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_rightCorner.gif

MD5 c00e2ec4d6df5c9172a81284d41c658a
SHA1 6455855cf0a42f1730273571d4a99b2a3873bc5a
SHA256 f223f5c4fb3e90417ead90809b290f124c73835e642eac157c710e72e57ba025
SHA512 d5c614c805095e21d5ae58fba5b4bd983737b99e362f041b3e90076a5ec03a4f5636d81a6fed0e84aefc62e2e2b85acbed25d71395b879c6210005851d6f5988

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\unSelectedTab_leftCorner.gif

MD5 f2392b06e3437749cc8f97a2bd6030ac
SHA1 53c94c41c8f82312cc0fbc1ff7adf21c7e06bc72
SHA256 0c58267b2e7ce1bb685f4fa0f56e9a4199455aad9724d0dd36df9feb6ba3d241
SHA512 3642f1ef497d4a76507eacf1ef96fd5ee14985a138a568dd11087c46fb828a43d7b7aa2662f025b2df2069008f02a2691f9483cb97ca063bf933c2f5a6582d8d

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\unSelectedTab_rightCorner.gif

MD5 05c8834c07a3725687fd04ba62d65af4
SHA1 bfc2a3d6c8d3030694dcba97b1a139078c09dd94
SHA256 af80a796df13aa477e643ec00f0b8fac85cc35980b329ae3ad3ae87cbaacdabe
SHA512 30ddf975196746d576edfabf10ff2a40ceec2291f0d266af795f05a0399a8b534047e209319ceab46f29f0a7d2c3d4dc449830ef34b41ed139dfb71c3607f4c1

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

MD5 08675e367b9b7f194f0d02362c180d7a
SHA1 4e384a9dde4e0e4233b1bdfe55feef614b59cd4b
SHA256 3985da08d7a86eab692271b14bd20c121dd73c2fc64f9e1becaeea120c79f052
SHA512 7e537ebc5678f75d8e71ec13991359ac97f22af33a87cc09b3961cb13ea36443b34d8fb0ad8ea6337d25b83cf42dca1df58c242cf2ff464cfd91bf2750ab0461

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\navigationBar.ascx

MD5 41d7e989320958e4d334df0ff8036176
SHA1 fcc00fb50da9583a2b89d0cae6a9bbb043d7ae6f
SHA256 3d6b83ca249bb5ae8b44c6ebd58a500f388006fae5dad363fc25fc00a20b3a81
SHA512 5902e915827fcf8217f3192e3cb415ff56b5eab105e5dbba681201e5d072e84591d360d236e1438fd53dccb92520ace3179b97b8f432e7dd0c7bef691fabf806

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\App_LocalResources\chooseProviderManagement.aspx.resx

MD5 fc842071660d0856d0e23a121e09133d
SHA1 36b7c0d8e619217da0cd884dc7e604233af8d29c
SHA256 6e021fd755f71fbfca645503b2942a32efd63dfc901b293d78746c26a1978140
SHA512 0377d0f1f3e58d2834f495d07c228b7e7c5a720c89463570b06b507b26be9c337172b881df708bd8bc71b3e222a03b30d403fcdc8fc7372946aa084b022ca69c

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\App_LocalResources\manageconsolidatedProviders.aspx.resx

MD5 162240ed7ec0b19316302ae8a96a0ca0
SHA1 b7de34a1a73f5eb7d8df86eef35862cc90179798
SHA256 ccd3e2478538711293f6437dae6aa7257b4458ea40cd0c5aa4fab6b44f1ad3c3
SHA512 2aadb5eb8090d1afb42b86e5d6b0e0b73f9ea573c94e2ce703a0b920d41f9697376f8d3676d498ca5849ecbf78843941915cdaeb2406884fc309b2ec48d69169

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\App_LocalResources\manageProviders.aspx.resx

MD5 835e8f66c2f77f009f4cff664fb47bfe
SHA1 1f234d771995d44f40c1b1609170cec5a29c49cb
SHA256 79afcd03111db67895223fa45e58cbeee84c6a3999434535313f9b4ef73c8666
SHA512 27ebdc2fd81aed474f737194f419ff75cfdeb2aebfc52eaf937ba46cd4066a96aac25c0874cdd9a0e740cf59115e79f711f0f2e51091ecb0bddbf7ddff2037aa

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\App_LocalResources\providerList.ascx.resx

MD5 acdbffd970831acaf52c8e4ca711068a
SHA1 b94cf92c87fa84f83b72baf619afd75ebede053a
SHA256 4a088238bc94cfa5a6e485e044d0a666786644c8d2e0148dc8e564d579c58389
SHA512 26bee1c611cc8d48101edadcf8bb70370e5ae2c6e29faed577c73ca1a5409cd7ea42fb857468d7dbfb5c35b24e0f535622a7a61c7a3ec9056c11a2fbcf986866

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\chooseProviderManagement.aspx

MD5 e4fd004f8d7a119b6931eaf09d66938b
SHA1 f693706c4160c30be7f6534eb53b76388db70815
SHA256 a28e99a595eca96541f6681f841ebbbc62e536fd0e8f1814a546f5cd8e1f0819
SHA512 a3cd8da970b364bfd4fb0334545b29074af2c52379da1da7028689ab9a8362301d81c2b59e3fe435885b55696f7afb5926dfc946f7ccdc75cdbefbacd4cb8921

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\ManageConsolidatedProviders.aspx

MD5 8ed475a39624a86c7596f27e9d818a57
SHA1 7a7c32e982676b28fa9871f2c8d30ef89276f20a
SHA256 455fe723b8f994a0a384ecd434535424505517634c7151e0bc67e241effa4eef
SHA512 68af3d4615005d6d8bab281f3b42b0bcdbd408ac5a01f10bff79b46018be9b055b7fbb98be125b85a8cb190cd0b337afa2b3229dda23dd62e2e17b18538409e7

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\ManageProviders.aspx

MD5 db61e57e1a93ec3ead9a5a8ce9c43392
SHA1 4245b3407ac179b003a2d3b32e8639552de5d7e2
SHA256 7b7eb31e05fd26e8fe83166c0284d313a27225102d8dbfd44fe766da36cc7915
SHA512 80cb7b9a53434b87ac8995d8aed5c95d5990d0e2e8b1f3bde7dfae4fac750ff3314111245e666587b1c2d0d93cde1976c5005e24e6df83ac3a4169bad629e6f9

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\ProviderList.ascx

MD5 67ab6c3a460cd13a5731cafdff6c0d44
SHA1 2325b863f49a84c4be0a48dd54efbd3296707b4d
SHA256 6106bf46a1821b15306353fdcad595f5c813c2233b1ed1b764191933c1b1c45f
SHA512 96ad4e97bda3338711e753102c430053a89dea7ed713b78da1b9f8c46e55275457dd69cfa2f94a6fdb8de26c7d23076ac303b02c0ab9df7c0f977cfd273620e2

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\App_LocalResources\security.aspx.resx

MD5 cd2db7e34425926b18b07a61f7b91a66
SHA1 98d11b326e855968db911772769ab8200e586380
SHA256 11da691df5e22780a301f8574311b7ca7375406e27c261b7162e83a85d178f07
SHA512 14a08db9fa1331b9d57c927f0b4b02930f437a46c5c3b9abfdb69549f876c81f24a5cdf9e1d144bba5e2f79076ff93f01c97f42c6b4022dd35e2d31370c5608e

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\App_LocalResources\security0.aspx.resx

MD5 9978b7072d4899415f0dc4d138cc80d0
SHA1 8f9e70d3a438325e3322212ae8678a5e80e60ba9
SHA256 42eca24f798cc47d7e5323ad743732dd6ebc31804cf5332334afe6e0d205f6f4
SHA512 4f3b7657e08f2b817239775e87b73f7bf16ecb1476c5262043ac9767008e134f6ea50eb7023d80b8baf39c80e3e0e1dfbaf6db1d67e08606a063aa33880c20d4

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\App_LocalResources\setUpAuthentication.aspx.resx

MD5 019a3d5f525c8694ef26dc5152103399
SHA1 d650825b11f8db966fd88432cd1b1fd22618acf5
SHA256 96a10f995e295ce0bab86f8c010ab2c7fd3f3236c542d54a12f8cde415c4581c
SHA512 ebb902a4d922ac54fe70ed688296e7ae57ed2c3a3c2d0098b0711877ee6089a14306048abddf92cd66cb26d4647b5f0cdbd8dae072076b88095489286e3d298c

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions\App_LocalResources\createPermission.aspx.resx

MD5 65fd5439746c6e94db7e74fdd48711ea
SHA1 6794deb73ca28f6f0be6eff640598a682cd8c78d
SHA256 5815188e453ec7054bf0f431de0ed8de3669f2572bca701610a9d5e3fab0d1ef
SHA512 50425b2e2ef6fa54f63151f0668a32cfc3b478e33f1c08a3f1f7e13227ea4d1f2835775cdf2f90d7f8b284b60e4746fb39865ba0a8865e605f7fbbe75bd2d38a

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions\App_LocalResources\managePermissions.aspx.resx

MD5 ff6d7768988bf41908c3627522ace378
SHA1 261e3548230bde5ca3395493f2fe908e3dea5d35
SHA256 cf5bcb0413f9db2e82bb0f137e0336c3dbd8996792916e077a0ac37232be560f
SHA512 7abe8cba8c43ee1c1c7a9a37f537f926bca2618c74a3e79f883b45456fa1ed66d55398b3064ee058cdb0c6d2bcfc2aaed96d8185472263bb020bfecf1a205f1f

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions\createPermission.aspx

MD5 e3086246ca8252949dd46bc9124a11d0
SHA1 9592e2458c8941f423485b5c9529c3b369d7b028
SHA256 70f37cb0f5449a0d93039fcc7ee055477d7fa8d2188966d3df0de4083e979d8a
SHA512 3f1628808f67c6f8dc4e2ac210ba4e36003a39a44e9a21cf072042dd5b6f6dc7475d5af420e242206bdb2d222f2f82a6cdda3319a3a910e6896d6a7e8f05fbd3

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions\managePermissions.aspx

MD5 9ea5a2a5d721e2f29ff17e31cff22045
SHA1 c55b61d10f5702827f686f75c52493d96c7f53ea
SHA256 098807ffdd49d23270a67744e08c34346c89d3253f432c785e307d8814aeb915
SHA512 6ac3486d7305d096a7aaa36a2f3c0bc749f08dedde88223a0675b68eac6fbe409c3388c5567f61f4d172b3a357984f6e8e154d56f8f4188a51f0b8d2009a3ecd

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Roles\App_LocalResources\manageAllRoles.aspx.resx

MD5 ca32aba00352b2d31e6a62f6a50b590d
SHA1 e8d27510c2fd8f8267f87c76777273b7c8d771e7
SHA256 bd612e9d90556514d7a94dfdbf0370203246f0cad496f5afde3a81b2ee44802b
SHA512 0784a8cc057c00060d1ed1c5e7e9b3a631677e387ca02614d08d365c2679668cbe344df0885a5a2df65c0144be635478d440473c90898334efec4dccc6efe806

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Roles\App_LocalResources\manageSingleRole.aspx.resx

MD5 c47d18de57a8d3310ed35f676c4fcec5
SHA1 bd5b3134ec89ec6a04509b0b07bab365916849fe
SHA256 4a4c5a2f4f2c66ce60c5cd4ea05df2cd7e03047c560ce2c1445fd5273cefe792
SHA512 1a9bfdac5a6e04fd9ff44523ed7d155df12dd2249320ee07245e046135cb23c183b250849fc11d119cc40a0b1679abb7527153ef291a77af0cc1a55208eaad6d

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\security.aspx

MD5 d941c2a3bebbfd086b9e2130c2bbe92f
SHA1 5266fd70215db75bf2ff8e6bfef4e2a4ff2ee831
SHA256 95f9cf78680e28f009b4b5d8e44ee7279c1d211caf54de5cdd4305285eb17f78
SHA512 7b832d9ae05e69ac199ad196a3c7429a8463ea8efc5d550c0899104ead6274e45bacebce2cc46682f8292517711cd447dae4242a431d65c5f991cab847f3809d

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\security0.aspx

MD5 e7fc367b7c96f85c6250aa8a510442cf
SHA1 d443dea5572b8188da05be84398847fbf5579a81
SHA256 42918ff4d31995d50c0125cbbfc9387ec47f341086cd471c5b086ff713fa443f
SHA512 58456ea83c67ce73cd3d1f2aa27cafe430de9a77c531009c1055feab72553147d1923af6304448d27a000500ce0cde2f8dc57441b16d1cfd6d4dbeaf7f64a67b

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\setUpAuthentication.aspx

MD5 deb2bfe8e5899b088d8beec19b538008
SHA1 df2959126be4ea3aaac062da1568e0bfa31f95fd
SHA256 cf1bab42f68a54c0032c8d91f5f59525bd5b78744de608005e1f86aed8fa0c4c
SHA512 149ad0847f58af8db162eb20890e8afeb76435175929e065a3929fe56e5431233eec9999e3c84401aa2738ba916d37ecad3a67bde44d08f73b5bb2a5dafe042c

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\addUser.aspx.resx

MD5 af5bb5a2896686ef16636b4db378c009
SHA1 1ce04203b530ff3ef7f5b943ae5c195b457f1b86
SHA256 e627de6fc6f2f6851b2ee9eee118bae6036bf6bb3b65a255c65d720abe66602c
SHA512 0b5348710dec8b43730fc0a058244785a3b0c97e7cffdfeb96b51d59064358e8a2be5a2603bc80884ff3d1e9de94e8a7a9685fdf5e2ba4da938d170538479afd

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\editUser.aspx.resx

MD5 88bd6b27bddb189cb5047a5a26c24da0
SHA1 76ff6dbe69f8fa8bf56e8dec46ceef18cb7470ff
SHA256 c2e0b84f02530ac336187cea109996654f306bc3ebdc08088d2022cc675f174f
SHA512 e0eb71726041b255ceef1e72841ab0589a6f2c5cb3e27b832b02e169483a04b09516a48b2510ba03e54ad0f0d3bf2d52da0da9140e6583fc78d1d2ad5b3defba

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\findUsers.aspx.resx

MD5 6deb97e2a64e30caacf24dadfa029b93
SHA1 62a42324b875a03bbfda2dd95b13213d948f09c0
SHA256 b3bb948ca951f68bf30e35e6dfc8c00fb3184950e31a32608f31406f9f1dc238
SHA512 3202d8ae74d714aea7e2c79a961e8df79172cecbf8cb3b6409702688e46dcf953529e53da551e02368dcf7c1bcc0c4ceb6dbc7d02b46c3322d552125fc9cf4b9

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\manageUsers.aspx.resx

MD5 73cd209197539d567bb841489e8e6a6c
SHA1 292618f51683f901bdfdf2356ee7b7ef177e54bf
SHA256 3662e0478e98825543c74ac1e7bc6def3cdc619a2a1d07fd5b2e19829ccf91ff
SHA512 a454dfe184a6b3e2ca14003cd82cfdd20b5df0ee2e44c63599a7dc4d807756dbcfda46dd12853321ae0dde52f9e39d61cefe2394245e397e2a2b87bb9db0919c

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\editUser.aspx

MD5 32fff9b28dcdb86cd9bb4c6798eb6268
SHA1 8cdd76017f26ca27ae6230af6c7ee337ca309e6b
SHA256 d3835ee97010cf15c2b4187a0ed5a22719a591d8da9887084076bc8d67f2c813
SHA512 e7c50d3ccb639450328711b5089298555204df38ec6e62e08ea59d996144e94fcfecf701c0e47c682f4653f7241ab07f6cd917d5d05a255ac3d53b629b652260

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\confirmation.ascx.resx

MD5 c0e43ec93a182584f8a2a2c4a8bf3204
SHA1 b5833178d655352b6839307df9ae2f7ef18aa6ab
SHA256 e689a7312a354b529b67671c10ad2897d07902319b78175eda33bdbab892d920
SHA512 797d0d56346655b707914d55d5422ebc7b61f72b2d0be4c421431a2950b72c79f9b9445d9a02ea15835e1a3354d536b261f818ae63acc902287c71d1a659ed41

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardAuthentication.ascx.resx

MD5 211c2765a167fb86a04ee1b2ff1c5dc8
SHA1 dae3b9ff8e6c7f399e499ab23caf695d1b8290e9
SHA256 a33a4fe06ef100adc14ea3c5ab29574c140525be09959e3fd9c00f5a02598def
SHA512 6457ccb5643e65e2ccd584aa221bded7ca8d0d9e94eebea93ed1c1475d5ecf7c40d0c89aaacc0df292330c0721a70a3743d420e8d136baa52e61a5240e0adbce

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardAddUser.ascx.resx

MD5 cbc80487ae24d3939cfba665ea40fb7c
SHA1 ddc3143421b9a68714661bb21a50bf8566f7b10e
SHA256 959c78f7c59ab3bedd37f611f6e1c596e9c86dfdc115866b84019e7fd9f669b8
SHA512 dfa3f9491e96ffa7645c96f7dd63f71cd9af0975b8d4ff6705459b966b2ea4b8193dafc01ed926e4d15baea9dbfae71dc01227671a3fceb07b75f14d34d6e7fd

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizard.aspx.resx

MD5 16d61e2bb2f34c46f020abfab263570d
SHA1 3678117b2dd617d5ea43be3493984fb2a9fcd568
SHA256 dd8009cc7d64029cd838d50ad8a0a902b085967072af7e094c410f1504e08081
SHA512 19d83b16dbfc9fc755fa01a76c33dfa57856688478e1d146faadf6ac504751a7bb2e69c139e9bf6224056da0c489d85bcf1b22927b7a576450983dbef8da0ab7

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardCreateRoles.ascx.resx

MD5 f1ef6e7f84d9841f3471d6326a2181c4
SHA1 ce65de8a2112d8be83f4b820186de2ce57066575
SHA256 6212fbdbf8454fa474d4010ae094429ce7f43e4c91826aa5ee2e7e70ca706011
SHA512 8d2a76aecc7f25a312ca9963641b54e4a43f83c5b365d9a8bdc9f62e47266db35f75127407419453dbadae0b10b6fad56c1cee35882ca5d7261080319e29f6d5

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardFinish.ascx.resx

MD5 6772f4c7153058161201fbfd4e3cd06f
SHA1 e847e424998b9dc2ccaa0d3ddec327cf3e2864f2
SHA256 8ba20df192e365bb3d8f128c758e1534d60e5fe3ec60648987b197fcae8e3602
SHA512 9a58f1ec6fc62203b42231eb8bb9f2a22461eeda60c1e9814e97e896907783b22479963a6645d2cec372f87ad2b85f860b4041d8b5050bae0080ab8382a72fab

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardInit.ascx.resx

MD5 cc0f768b313e57336c10db2821ca70c2
SHA1 779181ee30ca6d8111f070a72297428223d77f1b
SHA256 fdf3b8f95f9489bb2b202b8014f4964b745e4e9a6178b1006c929c65d3ad49c6
SHA512 ad6a957a88ff42ec40fcbe30eb461355303e75c610811bbcdc3bbc34a8b6b75c0a178b757d40aad1a0463c213845f238f883f49e902dd2fe699e488a7df388d8

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardPermission.ascx.resx

MD5 44111d540a615c3b06ed82aa9dcf22bd
SHA1 7316e3638f3ede02da26ee9b8f030b11879968f5
SHA256 717574b30aa3c4bdf65bf8d988ab8b165c363b0f2acf8c14a89608228462c692
SHA512 596b2eb388cee55eb91ec29081c9e2be91d3f362d67e085982db8fe07bcc8e4306f83e5ac1490758d8e3beebdb569fc1bf7e0dc1a4c490b64a015935fd309675

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardProviderInfo.ascx.resx

MD5 9169d56e74957f62e550f8ec03863058
SHA1 2e8a3d7cb8ba1541abb16fc83ab47623e85b0fd9
SHA256 731bc33a56ec487a4935f62c726ff0de7c11ec9fb5358b5571acd64dedd4e0d6
SHA512 cb6c4beebf2cce5a754f52b92c8ee1c386e8f63907817ffbe3aeeabf9f1e310f209148ed5e837ca70abd3402d0ceb112214542f104291f8be2c2bb5d4e6286f9

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizard.aspx

MD5 9f73687bfb2a52a8ea0f303703b70ea7
SHA1 ebf0367789fc1699124b28cdf10b1552eb1b5fb7
SHA256 1afe8a656844577665f1390263373faa42bef61be6585aab1e7e1b6e93a7659b
SHA512 91f687c83ecbcb3075f9951618474160a68ff89a8d8a7cb1a3b452ac58ef6afc5cfe7f2b35448df11dddb4c02429061038cd201361ceb402844512d140044d4c

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardAuthentication.ascx

MD5 7d99c29ec5c16229286df7ffbf7c60cb
SHA1 eeb1dda795695e8814e7864fb77c5e45b411430c
SHA256 ac515c96151df0909467f02425b5992af435b8fe8c429c2eb12bbf3e55ee4a28
SHA512 48cb669e9142076d6703ae4fb34c35659363d61920f046731b54e2daf7b64d0c05ec48494ab06f342d98ae5f7c47096e2222fb9d8406a4b27f619cf1e0347ac7

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardCreateRoles.ascx

MD5 2aaf314c6b968b803ef68b013bbecf27
SHA1 88037e516c1b7789e54aeed73ed65e64adf9f481
SHA256 363ff8a6884edf2002d42862ddf5070317acf42cd502649a7f237d56b67f9b37
SHA512 36e2cfd7af9616f9f68c99acc34edc1eff9e82e76b43cf63149a444782c85c6ab4cdb25de77116891e7ae941ea000a4058c976b2a680a6a670aeaef5a8ed81f2

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardFinish.ascx

MD5 cc406afbdcc918fe69a0d710cdb91af5
SHA1 984460808ffee41b36d9076febaa0b6ebed4fbf7
SHA256 851c8f128d20141bbeb5c715eb1ae81fdf299328e092dc12d296c1297b6acdcd
SHA512 2592cdaa372f3b042766ab04de7923519f93efcab936c115a84197ca74caf3ca61e17c64775871055e90be19c7a2864a5662e6cae776081dea946c5260a6fa1a

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardInit.ascx

MD5 2303c957312cd1794b94c7accc1ff7ff
SHA1 60cfc43c72e12103d1b081c1db095902b8be5d57
SHA256 7e3bc7633f6c8d752eab30803f1ff39d0709b19f732b6b05e50aa6299198b7e7
SHA512 6379b92ed0a858ab277b51a0f15ce16b63bfc380b416173c143164e005beba7886a4bed1937016f56008d7b23ebc5808ee3c84f01d30a5b82e89dcc140d0fcbc

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardPermission.ascx

MD5 19c450ef10ac9965f92f63aa2024ef55
SHA1 2e8c4cdfa0b77d5b7ef16fdd6df9bd9a6c9fc0bc
SHA256 95949231d8d8c3c984b1b32c8daac2a8e20bc48859273067ef283688cd538352
SHA512 82e9191e20843ef877ea0f5a079ec56c1e7acad96f3445961ddf5117411d7e3147f00432a67d73eb4a51a5600d28446367b938223a6800e775ab587e766ba40c

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardProviderInfo.ascx

MD5 7d9793ccbfb9dc3a0b075b8c5bc7e421
SHA1 8ae1f4672669258a7c680adebc3c2192e43f7c00
SHA256 e945769541df3dda4f86edb46217a969c54aeb4e0852909f3e93564ee3180476
SHA512 bee1f899ac15f7726eae542f047ebda283f3a69106e16e9de1358cf6230ab6006e638bb90b6bbce6504512e56732be91017a5789af35036fcda6060fad9bdb42

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\webAdminButtonRow.master

MD5 fba51c5009b447b9497044dd30eee644
SHA1 1e59d32949f133128717817cb2d025201f6338b5
SHA256 abd4cdafa55d3579557767eb968028a2f48502d71aa35be238fdb8ebd7e37ad9
SHA512 4f6756a2faf57dd17afe6c6da9c0e4d57286ad270d280d84e89ad02ac570871b135e2bd029616d33644c7aa79142f34ef694855446e1ba629eddfe7da7590b50

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp.aspx

MD5 8c412c2d2003680e8094ce0abb1335e3
SHA1 e86047dbf5ba9f1b723504810cb79b36c600fc8c
SHA256 f65892d8818f3b54fc56be892de259104febd404451d7dd54f5564ec20ec838f
SHA512 8764db932f0c84c860c4cb5172e816c41992a6f1159b9d85c77afd31ea8f2bab9f36dc3d2f1c3be798e6f8dc90df170dba72d2d87f79b5f3a3425019f3fc05e5

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Application.aspx

MD5 506d5f25fff403e67c27f29ec32a3cef
SHA1 e7a2640c45bdf36a0448f2f755074d47dbd5e859
SHA256 c8c37eb3c36f5399fd6e3e9ad9e306c153200403770cff49ef208f8f779c46f4
SHA512 ef021daf08049bd37089b98924bf103219d170d8c814e2618bd92971e9075cc91ce579bbf74ba30c2815efb22869566b63a4e9f0bc4764f126485306e9bca74f

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Internals.aspx

MD5 6fbda9edd82d2922589953aec084bdd2
SHA1 19d318a6bccb31e11d62fc82e861843074457949
SHA256 3099a9d02766510507b5701634bbd73ac6c9e7b56f5a9235d39fd3f7f0eb217e
SHA512 c3876109765e8715ba76d811de5ab93e670e21d600d6ce209539abc789ceb3f74fa1cca8b6c7c768e5d18272204a4a22e6995612fb63d07b5fa4b16439a734b1

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Provider.aspx

MD5 98c29e5447e7b09e9681d1e1685fb144
SHA1 a222c452c71368ebe20fe9a1445bc5602cdb882e
SHA256 97a421f889b63566c3e23bab71d40c3305c3fd94bf84f9554ae82a447a441fba
SHA512 73fb2b8a74bb617c4c79ae12e899e6f5139ceec4ba371dc966386cd14762c70258b34f14230242f3b5e51c505d9d4360280453aa3a5561fe0c7474590a13b877

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Security.aspx

MD5 c91d9de91bd207413fd140631d898f29
SHA1 3ff0c64e3e9e9afe9858638d164e94d93adf434f
SHA256 555878dd94ca7c0f750c0f19eeff4a87aec06b86be3fdcefc9a54add85e01bbf
SHA512 8716e67251e787f5d60482553e4aba6e2083b22730eda475ffdf5a595d53453efd88f87aa52beea0df11223554c24d19d917ffa7f43f3283a3ca73f0105c2da9

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\webAdminNoButtonRow.master

MD5 b6471801d6702bd49a723f7a914db9d4
SHA1 48e86c1bdfde0b2e7d73119f834c8452525195d7
SHA256 625b455d7458ec2fbbd50daa1954c937cab2cff220f804f0193c716fd2d1a7f6
SHA512 8c4f33ec5855441ed6a4e75cdafd2d056d7ef41a9401d963b2c0c171961547f3bcc3c59fd73f97236fd59fa30b2d86aa6b978c6b1f395b546b40ba8a5f1dcbd0

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\DefaultWsdlHelpGenerator.aspx

MD5 72b403cd7e01a4aa88965618e89cdb3a
SHA1 8aab04bcc912a2a17f0d7b6d6505dfaf59f9d2e0
SHA256 675c93ba430dc3fb0c33f057a02b80d2b6603bceb7c739601b400e8ae31b2ba7
SHA512 14763361ad81588745ab1f846cc9d17af2447c22577c4a80bec3502870b0ff7fba2d03cc8ae35d23737dfc25d8baffbe5fa0928bd677808a187a7032b59d0019

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ieexec.exe.config

MD5 978a1b170e96ecce7a846b72d03efc45
SHA1 79422833049957a220d4c250e4d9c92d6293e813
SHA256 41e8ea3848f589c5dcd0365f7317b672c967f575247286ca15378085e25f0d29
SHA512 dfe86af7d12e3f18dab7c58cd01b96b2f71067ab779728f9cc6d3ace1e44f139b476919a140d0bf22c27675b1e4d95164cf081bd030600ad1d32666391608178

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallCommon.sql

MD5 e046096dbe12713d6c73ac7da7f88a08
SHA1 2da0267e3992120bb4622db8cf2956649fbdb50c
SHA256 585653b6f2ec0808657cdd3110644deb8c7137fc2922fbf4e6ea61b9997dfbca
SHA512 143d19d30e00cbe8aece6406d9eaeffef9bfc08e787871ccf88afc42dd6e49fd05ebac941ccf04d9bf6b8ea3cd5e8acd8b93e72bb9d84f7f507f9f01ab4db8cf

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallMembership.sql

MD5 7d38d0a2e4e3e11e16b4acb26da18d4d
SHA1 8c0d81441df4b7b0998cf483b10227c6ef72a7f5
SHA256 d99ca8c0b0ca88209368c4ac4198615583a3c5c3b1e214cdbaf66f1ec5ead033
SHA512 99348f64d9df8f495a924255960d74a05f16ab3af10fa10c356e66ebac506ca0a341b03535c93f7d36b986baee8025398fe5cac29931faa84ca3febe3016c783

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallPersistSqlState.sql

MD5 0dfe70a2a8d1bcd045ac7ddf4b3acfd8
SHA1 e083757b28a84fafc708b2fdc3c7e77700cb01c9
SHA256 2120604c6947ac18a5e8ee0c46b916e81892eaec503e48fe0909de8315737239
SHA512 5121cc008975b5fdd41db380daf953c6ad1b4c567e5b74536c4e3fb66dc74fb3e91a1a4f44321e1d4f6d50eaf07ed789a3cbab6c9282dd7a167b48b66b5b76b6

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallPersonalization.sql

MD5 6b04aa7561032ef315fd9810061160c5
SHA1 b52c97ad660ac39417dd3d336d107c306c8d4f19
SHA256 a8118236517b9ed0694ccc4fe5833eee8750f6aaca9a1517f677727c95396590
SHA512 c58dbcb0d3d053eb858600b704d57fe863e10904f659874eecc512e13b0a96e8a9734c4460dd2c9a5fb6d1f1792ab36dcb91ff719b6e50fb34ba7840e5fa2c7b

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallProfile.SQL

MD5 b5d75cadb29d7a2cc1d23afa49f6f424
SHA1 5ab09c94a1750d77b022deb32e270f62009c49c9
SHA256 646d7821082508530e456a20ab57109d107cd5afcadaea950e68cfaae3420269
SHA512 2a97a3b93ac55b3c5bc8bbd91fb573064a6a2bf7c6e24b7e1274c0ede7823b05ea33f8ea89916713f9ca39f0db3d504bd490c6c3c29afab517a9b1971f75a14e

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallRoles.sql

MD5 e802b73914fffb62b49bbbbc86d8ed2b
SHA1 413a71aa10f0d5a2f49794c7e3a19cb4ac851bd7
SHA256 921c76cc127d66f1d62724bd13c7961b08bf89d1712f7708ecc420c301294aa8
SHA512 d1cade60ce3e9f8aec326c5547c883d88dc11879723a7bb075806c513c450a5019a90910e89a0fb186af1831a8608a2336d690025bec38ffb12ef8e9051d3ddc

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallSqlState.sql

MD5 f58c7a3bf2154025edce6621db6e4189
SHA1 5daaa4a0f0f90fcd1e1bd518514bf14555cfbd76
SHA256 a8a4413e39ea40aa86c5b11afd6da97eee2c792f3d51115bc557a6c6e4fd7efb
SHA512 e85811773d4048f41c552bdd26dd64220702da12f393c86f0b378f01029f33a0d3037f4bdbcf63fbd781c1f52198e7e3dfbdcfa46b1ab88754acc9e2793604db

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallSqlStateTemplate.sql

MD5 3659b789d2098a466668b5332f75f1f8
SHA1 0c3b782c6967a6bd62cde2db6ad6227b2ddb63fc
SHA256 a8faec45a30c263b2e946a829ec05e23db60e5ef88e12ab8ea0e0557fbbbb437
SHA512 af2939a3ed92f162a1daa74d50e92c3b4900a7346177974388524a97144036cfec00e582c7bd59e499974d9df2863e9af019c808629bf767d3efcd94377274bb

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallWebEventSqlProvider.sql

MD5 3dc53c0cdf23185c6782c8f33fa23356
SHA1 dde8af6d2b463bf64bbab345dd5ac7807b6da8e0
SHA256 e074a633fde6e717a4aeeb5ec616ca48a126d7f2bd45c1ae65d7318e8d77cdbb
SHA512 93953dab006c043f1837b0876029a564cf2104fcf0439f0cc5768c0651db80817caf2e6ef29ac44ef0b2a5ddcb5358b809d1d9caac8d6acbe4e998d0e0f80303

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\regasm.exe.config

MD5 80bcaf4f7af4a061cc88809328c535ae
SHA1 0245df2f5a5df95dc5c791d6194f4becfc7aa53b
SHA256 c511ca05e6ba41d2a19b7e3a5ee61c100f963c480386725f4add3ed63a0a5555
SHA512 e025194a59e3033a54acbcf55a27c4cee1b1b3f6ab73924ac6d48d5cd2004798262477902986c578ebe245d716164a52c85042930e520a627ac67d55a3513abf

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallMembership.sql

MD5 c91089b9816f3b0b3903dce9401c1cc0
SHA1 99b18b74ff496b58b1968806f3b59f69574e83f1
SHA256 afcfd066f3cd8dc5098e7c86fce013e966a3086c1bb966624298088789780721
SHA512 5138bbfeaeec5fc5d8782aedfc221348feab844c5523f3931125c873085be50d698e8d17122bdcf3b945452bbd7bd5a06a302267407512184959efd9f9ec9604

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallPersistSqlState.sql

MD5 e6d0aec82bbc13d3e02050a02adb11b1
SHA1 3f88434ff0808e9ad2e4f6bb78bb1def082790c0
SHA256 57db1ebf38ff5cc43ac7abf931a7e7777c24afa30d17cbce7022b552b5998a16
SHA512 63487160e8ad10e871f68af571e1ba8a6729886537fd6bf3afab21ee3404003530def470792503f7bdeb0397f64033f6f0b1ac0bd3eab17a405e9fe78732174d

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallWebEventSqlProvider.sql

MD5 fd1f3aa99e075898374ccc30a6980da9
SHA1 1cc820639036adc3bf202e8b19964951b0204042
SHA256 d7502bfdfa5501770bee3f95f6a8349e18eaaf52d3af4510daf77caf24e37812
SHA512 3f8540cc77692fd8c272d319d12be1feb2d689280f0361049d18c6848b77338ecd88754d2c349c8d48b54680df0ff288757ee215b2c0fa90b210d18c40323d0a

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallSqlStateTemplate.sql

MD5 329bda20577cc03964b3c777ccab97bf
SHA1 ffb65f3546a360d520d3294bc237d911f1218070
SHA256 dc26f9ccf253dd41a82b68432036168ae091fc228bb0500102e37708d8f688b4
SHA512 48da23d687eff93e0fbcf2ad7f95f12f08031be8fc3b06143486c96d0a635ecef9bf716a4ccac89a16b98ef5989aa70ccafbd834cc40ef6f83da002d75afcc3c

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallSqlState.sql

MD5 9bcd636ff139e213038c18b165b5d628
SHA1 53cf7b9a038c2231c0ea99fa7e1d28caa1958f63
SHA256 d02f4e651e780c859cac311c70d7d8b467ede1ca36792fe626a9d51188aceede
SHA512 da99fc7524ef570a15000b4f02e9d1c34e4f72c0056a7d03ed7ab8e77f58668974cdf4607f6cd1e234bac8a67c503b6c20214b93da1fec2567795ae70b1b43b5

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallRoles.sql

MD5 f2c021860c4cd47ffa203e2a8b170f2b
SHA1 a505b706cb0cc3247b3867a86ead8680aa8d0caf
SHA256 ab1d0faf6dde9bf3c0b7c9a1e4b8a636bcf6bb4cb469b7231ca4d7f8a83ca906
SHA512 c4a497ed5fb75fbabdde322b81f9b655090290c4f920d3a3ff8c9cc348396c7382ce667f1cd08209f2644a157e7b5e9b011f1e71506c16eb37ae9c8f68a70cc6

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UnInstallProfile.SQL

MD5 34bf7809a0a8590f8decfd1316949554
SHA1 564942c8b01271ee6fca6a541f64f2cc3f38f37e
SHA256 028b4d8b094b735d74536a3e276fff5f9456be77d1ad164a6a1092534a41ec8b
SHA512 4c7e3e44c89abcd53155bddcc053cae562b3a50c7cc222baff48466805991dde53e51f1824c3efa7e8da6b769da5838a09aa3b87cb5e30cd7b34952380d0ef14

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallPersonalization.sql

MD5 103d0801280b1b77743a7716fda09767
SHA1 8de8793242d91bfa36867c130c076f41d0f70e2a
SHA256 78744a467468c56002ada99766a8609c0213c803b53426862b212579d615c061
SHA512 bf11f091dec34a7f8e2bfc4980b70beab865717aaa57cfc052492d4fe2f3da8a0b9864594b71aafaf7f181b00863f39edccc25ad15d8b5664f9f698aa2eb2d68

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallCommon.sql

MD5 22fd95051fc1c7695b9162d9feea7ccb
SHA1 b454324a0b55bb732ca8e8e181b6d07638a1f79f
SHA256 db81123be9ac2f47592c48ca538702a30250860437b79c2b4d6a320b41549c25
SHA512 5dfe3797222fb15295279e69e8592e009f8e7e1faf15986dd6c172516a014f4f9f96f0e4c68bb68861b4325be4a88e80c9d9736b879e1485d52c65eb50d35e6a

C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\it\ServiceModel.mfl.uninstall

MD5 0e6454ee5f4645369301cd73a5fd9a24
SHA1 877b41f028382bfc842131acb1914853d2f05e99
SHA256 386a81bed8de4e30ec1cc6737005d47e5d76d2398fddc517e9ca514149ae15b6
SHA512 4461d8127e106a8f598547d6ef73f60ff20fe73ead5ebbc289cdc4187502d11399ac11d9f42cdecda919955fa0f87720f9f4951227d1bd8fa41f2adb36d8a3f7

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\machine.config

MD5 dedbabec6b8dd35d9dceb85702e6e807
SHA1 ad1121468166b39a3edd92fd8c3f515bcb4f1078
SHA256 15b4d417e86399e2ecfdd6d73c38714255b96abde02ae4e58a4f7110d37a7a38
SHA512 99a43ee5980a3473c798521eceab4bff90aba765dcdfe9012096d1aa871c1e60ab4c78134c6ad0480952679a4aed7638812810221ccc0da0acaf4ffce2537bbc

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\dfsvc.exe.config

MD5 50bef368128822cedfd31fc951555a4e
SHA1 6a346db72184ce5c3f70c23066607e30b0d3945b
SHA256 c6da7ab72297a4efe8bcbfb184d9ff71c6c850bf57bc58e9fa61d9538e40535b
SHA512 ee1c65173ec381edf345a142ea1bae3146547b02fce716bbe6787a9dd9bdaa37b5c8b9d154e3dd888b47db7f9c8fb837e3f582773bae62e3fb64ec5c79ff23ad

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\SqlPersistenceService_Logic.sql

MD5 0225393fa76ee15a7dedbef1636851b8
SHA1 c5d5911ace75559dfcc34f385d207d6c915c00ba
SHA256 e4dc1d903e2f2e8ef6e198bd7dd4f360b958ec1003a75ddb184c3902c545d2f8
SHA512 acdc5499876e1d21b87e7ca3d0d2619173a2c900f8b1a9df690d1e42fc0951e15c3a0b36e3a322edb22a5af8cf1aadd0443b690a145d7fb65126eeb76f0913fd

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\SqlPersistenceService_Schema.sql

MD5 0b6dab34f1d32e54d130a6c0c2e3433f
SHA1 d523f80a96227dd6e23f5fb0dbb934b5f9f10373
SHA256 10d38b7459b746bfee3ead7e025f4873c6cd5d09cde085d10067df6e2e7e3bef
SHA512 acaae9f7cd38f5376bb881b6db91f5aded7fd356f4d4b1d6537b2707714d5048bde8c3fefd399b3a3a2224c684a4e2beb99f10f20e06ef6c7fd51693cfe76fd9

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\Tracking_Logic.sql

MD5 97d1a8032555a4c18eb6be88cae8fd2e
SHA1 977ee8211d724228e910b4fd885046189fe66b03
SHA256 8e23fcb9e7a3e2d1e602417ac836dbc64bf308fcdb06cff4e792a438b76eeb1d
SHA512 5a71ff5264793995b06810ed50e7cb3f325ca5fc98049c4fa422aa787fc4b18cbf6ec052a0d98cc426d00827d73ca4e40a1b77e8296ad3fde643708b8cea3bbf

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\Tracking_Schema.sql

MD5 a94b8f17ef847f50c02fe9ce01faff77
SHA1 3313e4f3a6de7082c8744652f57b377deea2b79f
SHA256 cfc1a32f3a7f2b08f47a949a03f13c9f3524e2f0b02576f17743cda52df73a0a
SHA512 e477df9f6e56948fbffcaf2bd788594f984ea59610a9ac408d912ac898607ebcac59860c08c5fae2de40b6394416bcea854bf32a8e9db7937b553c311500448a

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Shell\DefaultLayouts.xml

MD5 702dc7b51f29b6f628bb893bd7bf9c08
SHA1 d865b66f1760911a00b9f12ff5cb724c5da8e167
SHA256 d39f746c7c8f8767e97356d235d20d7d5628cf1f4fa5a05e9277bb2d9d76906d
SHA512 9ee5e9646acbdd04d518022db17c205633fb2a0c0a861e64977bcc3592107d5e3de569813ebb9ca4b8fe1ca21e03dd9394fabdbc9a1232e5fe6989bc4a11370b

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk

MD5 6aecffaa172a4601fdacbc18b497a14b
SHA1 cd181f789eceb06883f54cdb5c3bd0af51fe2aa3
SHA256 37144b37ca2f5cbecb49e46ec7b42743a125288d4cbfeaf29fb4a150ced6bd73
SHA512 68bdf01120b1d89c4215d961aa3458efe7e2cdc7f7a1f22c3092ccffd8e0a4b708b015c92d34ab34c8178149ae305ae744177404819fd1e41b5648b72ee9d994

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini

MD5 fbe4ddcb4e0e007b0bc8ce76d1efa469
SHA1 2d26e6fe13001b766c7380961ca40644cd783b8b
SHA256 b8da8909cfc29cd8168c544d6dadd6674aca58fd99aeb72603f4d70a5b564e4a
SHA512 fa2d48dd837f7466dfb54728f6ff49fb2845b780cf97413b0a140e3ade9e8626d659424537a9591b4325d6cd445dba4f1295b72d29ea3ad8a1e7c07dcd04347d

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows Sidebar\settings.ini

MD5 3a72f46cc35d0370052db4d476d35d22
SHA1 88b15e9e0fffb133218447bca4a8678f183a63d1
SHA256 746f5deaf2738c1de481042960de0a7cab2f334487898edf564a33efe746e60a
SHA512 83c0b15ca71c91320c264dc83fce8115c5b3146690c3a3a86c822a05c7669ff308f89c2380d261c9fe83863f3db0a1e329089608c1770cefd4b217b675ced81b

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\desktop.ini

MD5 9a605cd82cd6db4fca515bcdbd8df5fc
SHA1 35140591ce9e245643fe26dbebfc95c51ce5b41c
SHA256 3b63e06b7b2ff3ac1dd68eba4ff0f17771cf442585a601236095db5a247c5eda
SHA512 7ee6fa3ee725a59a23f4129b5422ceab0497375e93786ff7552936b5efea8574b310e9a0a879ea096709f0801420043f3b231c646703432706884a8751fcff66

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk

MD5 ce95252797b52c526914db11af5499a5
SHA1 1d35530e87a65eed3f85175c95712909436d0f5e
SHA256 b21b16d0de25127515ebd8cdcf9335fed6e67b097c4589eebf90f5a95983f660
SHA512 5100c869c8ed0640127e8647769e96ea18def18bd77a8ef096c346d52fddb39c3a242c4716161f7b3aea20dd75f28ddf05c03740e598ff8091f6013a35406235

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk

MD5 a21ad72a10a94ae5c873baf77ee126e8
SHA1 26e5c40133cb2a3f8973915fa1fb89c6a3fe3eab
SHA256 05862624e3badd2dc0b5a2e7206683cffdea06c2c91c3761d296b806243cf8b3
SHA512 6f7a750d2ed481a411c5ca4156fa6edaaacd77902313a21bbc949ba570e97838f680ca368b0b1e910a7d5a5e2a3abb3899763f337462cddf06ee5745b96ddc9d

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk

MD5 0d0173425735ece7ca9e14beb4ae66b0
SHA1 e95b55aa3d26be688bdda932ba4488bbca629ec5
SHA256 95ce0a13624f62808282c2f5b53e9a4c7c459d6d18c3143e6490c50956b2a0f3
SHA512 2b4b7144894083ad9eb328f1c5cd9a66c976a9272981373b4fcb51b0ab9aa65dcf0550974e08917ba8dd377e1687e6478b7382071388c9244973168cfa15c844

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk

MD5 3b1d342e8e9e52d25e1463957ff63cd7
SHA1 d8b26ac746043c71db6d35846435604382b7b1a8
SHA256 487bb29f49b189bb50c5b53182d9d8db17eacfdd3c0e5107435eb93865aee794
SHA512 babbe86347482b9601c90ed010fc4e43f394b35b252edafcc5629cf2568e708954fe2f5854964ead7372b1f3405538dec4db1221904e1cf9e5ff3bfac1f78a73

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk

MD5 eab3ef6a0c747e9c14a2b917b56e143e
SHA1 c5c4074c7bd2f2536f71579de9f14c3ce99810c5
SHA256 d0d526b208b1dcf71d2c46ebe229fa743b197d3831d3ec576f61d11e1bdeca1b
SHA512 66fbc173fda2274f01ca366ac5fe13f4e0b7eb966ca8c0924bf42a5716523a3675b467405a5f265c751b5464b91c49578bb3309b6ce871e1dfa16fb229154b57

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk

MD5 3e76e2103949a7218681156b0dea7926
SHA1 cb70c2e7b4be66e522318fa3cdb6fd3e51953687
SHA256 c8ae19984ca8a6715df04bd7291d4006337980c6d24b40347f4483a2f666c70d
SHA512 1ad01749a4f51525fee433507954b711231047b47902303ae20f0e0c7c2d6d4dac215a2a78c36ef851fc1e91d210bfe673232c27b282fb091c4a2588d8fae648

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk

MD5 b0f7f8a08062fcf9bb267907208e6e50
SHA1 f9a36657e1d2fa9154cb63ec66c7ed75f36b79d0
SHA256 425659f1bd51cd89ccfd9574f9df966edcc8ee8df7797694f1749c48e7adbc0f
SHA512 1bd2da3c701f0218615bc7958594df2b2c0ec2b9b5067c89b92801cac94d9fad9c903a2c80b83c80710f3cef54a50f52765b8f674d1a099282c51f7286290f79

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk

MD5 5333f63d1a169c310198b29644cab741
SHA1 133cf784ba6f3eb3e521fbfa9cd86a1f9cf1c2ee
SHA256 988f2e528aeeba23e8c42d8e71cea9d9f918951825d4b7f46ab08fb383338b88
SHA512 1829b8d9ebbc6122cc8703398eabfbd1346f60d739871d1aa6a9d5e2c649b56f7c70bb42350f60fd6c94bfdb6267bb0d0f3fdc8967b2a37876d7ff3689c61457

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk

MD5 744b285bb66fa3a993b903e3e0e8d6d6
SHA1 c93570c17b9aedd4af4e27a6a27fd9e0dc21cd65
SHA256 ee396998226d1ba74e4455d1901feedc9fc9e7f0b85974ebc336f0bcb569b804
SHA512 ec28f386f5bb635f21bf873cf74c7c5f629b163fd57bc3ee23de52fb567a6a32df359e6de8fad9c764c6ea32d57a3dc8a0f95dd502aef99d02f829ae25f500b1

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk

MD5 de14da5ea3ec23444ac3f0e0f0c53930
SHA1 e913790d40c412b969a2ffeb5f88b5cbc3ce1eeb
SHA256 a6b1a3010d2905928ea6f2039feb7a104db6845170d8a82dd3fe46cea302ebf1
SHA512 0b3c019bf2bfd521a30608cd414e27e4aece0d45e2dccdaa9ebef5d4894e4d227800a2d3491c00670343c1559f3db8430c0eecb2c800b043150156661ddfff9a

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk

MD5 a963be4bca3a40ceda322f83b0e166f7
SHA1 03b04645c2e2e692301bd80f2c65ba36e5e858fc
SHA256 a8fa0cf4e99ce1223116758780be7e8f58a59f68a695763b47af4894701452eb
SHA512 f5edabd75423c975511ed9d50fbdac5b9b4388be57697da84208c1d8fdbbc07a77257557f507f64d17ffda73eea3c8e23e158a146f930252b36555da5e6593d7

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk

MD5 56ba7edc0cff742ae99c77c137cb0349
SHA1 0fa9fa7ed2d412be81665ba5e395a9df00f9b05d
SHA256 9f0b7e49983c70f8f575cb74a529656fd6e048790297364629b5f56f9b1088d7
SHA512 b3add58e7be9f7786ab3b6e7c90ecc46b3617197c3c1887b77acf0fc4cfbfb43196c7a90a330fb46a95cc88a64c7f2765efed5d268fe8832795a0849d6f11fc7

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk

MD5 a819979f12a7aae8fa6dac01fc7ecef6
SHA1 ef36f7d3c532b31fc4f72e05c9425ad6377b6b7d
SHA256 6cbf14954fc56b1eaaa807356d95d611bc3e26a45916ceb64d1fb3371014999b
SHA512 391cda8c6cd6dc86bd489b88498de15da888ef7e4a6249ad3db67369d2a815fc0123ae53d62d18b677c045feaf6c9b10a58a321d5dd38779ca4a92830e6049ea

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini

MD5 8fdb8e072d47835f5ebda14e638a0c0f
SHA1 7e424cf45e503b7c9f1c11a8c2076d7bf46c5068
SHA256 8c059b05bb797a704974e9ea7b3376ed74b4528daf2ef63bbc7af7819ea96b17
SHA512 c884eb707989a31aba8bcb686a3343a3f49ba6f7088834bb9139575443d439a849f0f62d7aef05e88ffe06a98ead98fdcbd9946d80edffb17eff2a90d4c77741

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk

MD5 ef3e852c9d1353333d02af2b6902b40b
SHA1 cb8fc1408c730e005a7578f2499c5dea01bb9ec2
SHA256 0fbbae57197a109f33ac2151dbd8b89894c64823ff83258f1c7dca7062f0f001
SHA512 e571a60e66178db485237ec60d4a2f476dc68618fde11e501758866b5424e76b89b2b0028c7fcc39cd9bba0eb023fef862d392c99cf877587064acc37028a017

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk

MD5 6d8130f56b76c38a79886a534ffbb605
SHA1 bc9dfcaac26408991ace2385897f3ef67bb602b9
SHA256 f4068f60bcfba24b3cd0cb5d9944debd8a4e813eb4b183bc75b9a6188f371d5e
SHA512 834b04e7addf918764e7b44b6cb03ad9a2a63a6849c227fd88189b976ed12aee5b12209831a3452264df16863b5f8dfa799a6d6340290db16d1355ce650387b8

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk

MD5 640a3e7d52be5238689deea1adc8a68c
SHA1 d075177019dfe3327d3c4c1746b97081dc3196df
SHA256 cd43d945c7b0b999e843ec773217a20644d2e3200d65240a1233cd03fbdb2ee9
SHA512 49396f3e1143019822cd37ec6898e0aef86dd309def3129bee538d71b54d487b968d84376f8cd68f696faffc62c3f07413dae7fe02385c75efe2de58ff9660c8

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk

MD5 748987135cc5200095b41e8547b10e45
SHA1 08e739bff94b785acd3d1bccbe716e827c2b7c46
SHA256 1a7248f1b912e51ba0370b2121913ff36c9b1844da7e00b456e774271ac17b47
SHA512 74594951c0a1a731a1b358eda31c361d09331f6f717a26704ca5b082c0023117a3b58cca454d4c632c275f52af6a42c5404a1c1565f516529ff32ceb367f5649

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk

MD5 266248a219e87fb8463f66e7a3afc1bd
SHA1 1a7cbdcb741e2f5ae97044c4f88bf74d2cbc4b0a
SHA256 4006fc84861433e74b96fa02d875457159b6616b7a638f0c3ad6592ce4bc98d1
SHA512 4409a114855289846554af273c484719de503eb96df00d1de45e3e30312b16249eb0cac3768cebd2f3e3c3fe3e827fa18dde7d44ae2b0e46dfd19ba29ba6b9f9

C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

MD5 a4e0ddacc97b9b39abd60257afbc17e7
SHA1 04eec006216d7a38b5d498e3f8fb3094283ab5bc
SHA256 cb2efc894e17026203154f0daea7524530a3a329607f6ea8642902758c5c483f
SHA512 110e6a284966b2e36e4b4d199e8b74ea7ac672600965b963efb60f92b79b48a96c46fa29a1d965de7283ea0772bbbbafbb9d8c66e3d576892a020493f8f658c1

C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk

MD5 71aaafb8b6590c4c195376c21dc033af
SHA1 8860b2e3145129098bd7ad0b3eb2d625619198eb
SHA256 9ae823c610ec0ffd0809e83a2f5439871982739979539de24b180bb497c903c8
SHA512 dd4daa6a861f0681a827e88e9b1349920115bc61608ef19dd97204b3adb6c1f82961bc8ad27b4009c939869eafca9eb9272aefcba367e802da29b82b60240ada

C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk

MD5 f61018562da5df6e428eeda34b721d26
SHA1 d3a104636215dc9c649484f9234dfe3917d6aa6d
SHA256 0da9685699881cefcb663f7270d748c4aa5bd66bf444946d3a53bdcc72d15596
SHA512 be6694a0db1555f38fe74397112d1cd0f830a96affdd941a594bfeac61a71e219b708a75d7170eeaef230027c9b5b58a743b7d58642d5c8bca7904f0f395ab3f

C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini

MD5 38fad89f236429b4b4485c59864c57e6
SHA1 2a60586e4c85089061b6bf2cdd4214de7eed126f
SHA256 bacf24a887ea13ebec8d15b568d01824b9bfb88534beccf734ce3a3950bbb5aa
SHA512 7bce764aef7642765ff4ce28fe24bd98cf2f9caf2ede3e90a4e665478161c2d1742a9ae74b40a1fa38084ac34c775b7ccbe52a5baab5328bdbe035b2fa3cdbec

C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk

MD5 a52f082b822ef5fc0be6b753ba9070ba
SHA1 67156c03892c0e61a454e2f09018dabcca4226a9
SHA256 0ba48a6a3a046db951e59cc62c4aa4e8b0c72573ee39f60ce66526c3879b81b1
SHA512 fd03f6998a2e09dee406d42f5cc4a8e747b34ac0e40838cf22bb0a8f110fcf4847bb1eca18efbf223c9227393ce4e466bc068957f5b306df70330536e1749ce6

C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk

MD5 150cb82e2725169d525060e4dc31a3dc
SHA1 bdf40cc5e14f8569cde16a64423d539d35e18aea
SHA256 0cb060ca27ef09628c5fa2099331882359db954b474d958c9ec31d071b553027
SHA512 9f0f8a6297f79414ccc67b7cd52ca28fd1ecf2d4872678dae55b260064ea39f27cb0b7904d2621d1c8bfdb3eb01eefefbba3633c3f6c45acec512791103ae190

C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk

MD5 c4dd837bb3570aa5844d17720314da3c
SHA1 d462cf9a9a95f9e1c785291e8ba132ece93b0904
SHA256 595187f61419a5f3369480f0c9bf85a8befcbd94cde4b4ea27a51419aff0cb9e
SHA512 694ea3c81ee1995c211ac96f4f860ff242433eb08562f2f4670def7ee2bb2ab7831c7873fd7e059b6c8fde1d5a975e2cdeb2acfa81e5e4d3195df8fde04415bd

C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk

MD5 134dd14a240588d4fddab684041539eb
SHA1 16238636aac1a60bb827b34621d1de4bcd61d1f2
SHA256 3cee7bbc5972a6b4797aa890f13cfdb28dd04fd16f0523b55fbf6244ed106c8f
SHA512 c2df506173873ff10051c4a622c93d387ebf5bc9b6ce3d8f401741a457d2652ed2e36ba927ed61e769e31cf5ad1ab228a88447044ada3bd92cb2d29e01d21194

C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk

MD5 db4fb50e125cd012d44df1555ae59859
SHA1 d008fc312d602656c93043bbae9c8f0abda7be77
SHA256 962c84640d6b994cb96bae4514cb71eef5774689606f5c11af706c280c8cd3a3
SHA512 fd21acdf5f6698c89df03eb2bfd9f2ab713137233c8720980741913bb7d493bca01ff62d868ab198b0cd3f2ba31893c55bb822e7dd665ac1c9224e0a8dfc7c37

C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk

MD5 4a8b27847888d7710e090b477ebaf056
SHA1 33df37643c64df8e094aa41ebf0f5bfe754a308b
SHA256 9ba3c2d2d2dec24d53d1501373d6ebe02ffd122f2e24cf065790705bd9c8d91e
SHA512 118e2e4cf78fa6688b21faf86033438553e58a5ee0e2dd03a62bb08c47e2d369d1ae7218ed90972c225489212bf16b1cca56e9bd5dce5ff6175e04171f358647

C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk

MD5 46038bb77947f74b23ab4448961a070d
SHA1 4fbd904548d37195d32129d8e0f89dcba566ef53
SHA256 baab44f45515159be8e38752d8a80aa458a32ba8b423f10d29e1ace329ed3d69
SHA512 d24df91ae51e304f573335d4aaa7e8b6f8719189cb1bfc91a33db9f955c93d388528a84ff4e788e79e4ace02ba31821871d3b04cd961e4c0a408b6305a03fa21

C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Desktop.ini

MD5 9703a0051d214a220d4de0b39f1074d1
SHA1 53e51df100f06accffc54ad79cbaa5a98c09492c
SHA256 5d39cf65dde6e8867a1a06220dbde79faba9ee74389840d06a8cf851a8917e1e
SHA512 8b4ee13748c66e83a213e1c357d8998b33f1f0d6f79c848c8dbebf19a26e74f6e6479807e1b4b54b904ca510c0fab5e8e4569c338a209c6624e5c1102aa56c2d

C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk

MD5 a3ffbe4cc4e4b7adab58e0f34a6e4084
SHA1 cc3188dd97496850d71baa90de240c51b06fc645
SHA256 df5179522dbd08edf9b9779d00f336df693858de64ed8c45ee626861a537d7bc
SHA512 33c7893660c196b0a38ce4d68a8d9c643dc23fb47d3485b18a3112ffbc1330eb59389acd77146241ce1677e70a30cc66a670a0ff69ea9272ec61163d69efceac

C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk

MD5 49712afe1b2531f7489756f53ebfd4d4
SHA1 2695e0c83dfa0e52a87f0475986362d8f2537dbd
SHA256 c95b0a21e0a1fc86a7dd1a4876da5b3b601b40fff3e09506c8cc4006068461ad
SHA512 8d18fe6f027669105a7c79cc765419e7e6bf2e3c776c3176e9ea5db91c15705a264b019bdca9d132d36f4b2106101467fd993876bdc9df84ba2617126e287194

C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk

MD5 3f16b545a0b0a698719a6a6eafe21f53
SHA1 fac33d2975a0c467eac0a1b38501fa53ffd9a5ce
SHA256 506bbb2ffb329ddbe6d82fd524153836f3cad9c176a92bfb5a5608d45c1703a8
SHA512 c45e22923470f98a06b793d59d583e4d2081332ebae41143c95cb84289b4aa0856f24c77f9f99e1686944f35551b990e022e00fd173d5fd005777b5b889d2c99

C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini

MD5 211d09790ece94c8e490d4781780d3de
SHA1 1374d3dab0213640a8e817525220c20f36367fd4
SHA256 1e065a91710a732b5d93ae053e1e60e553b406999278ccf118616fd6890ca176
SHA512 ec7e2a298226ef6ab7ecbdd6e14a63ca30b6c0d6f748571593754a8b03f70b37f81ea14e5a962d91ea9a1e55d73f60cc3c79a0ea3275e7c95c6319de38188e57

C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini

MD5 c7d9c12ef126dcf5454ece8caf9f9e3e
SHA1 98b4d33df0f8449320a5eb444e1aeb080af330ca
SHA256 146cc77be4e852a5df3c8c3f0fadb591c14742518bf65880233b33fb567c2b1d
SHA512 3214166023314e8162936d7e4acbed945f342f552caf440c4cfab1c2881209b9e7ecc0890c9fc1b08e2240a4b34dcc7c2456c47bb987075657c100e6656e3455

C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini

MD5 72396fc42dec3e8edbae6d03ee5c43dd
SHA1 2ac839903c3f0da11c956b8789b72ca79be26d43
SHA256 ea08066df6bb7f9667dc099f708972bee9c06809d2fd4f8cb6d20f068c58fb04
SHA512 34d1ab78997f3de74f9fa4a9eae43dbb980d1f97bc1086a6a414cde4dd180278a9dbff067e5bcbb8f87bd0648076d0d0b9b70dd34f8ed222e39ba64b7c1ea7e0

memory/3372-38615-0x0000000000400000-0x000000000040C000-memory.dmp

memory/3372-49017-0x0000000000400000-0x000000000040C000-memory.dmp

memory/3372-52861-0x0000000000400000-0x000000000040C000-memory.dmp

memory/3372-52988-0x0000000000400000-0x000000000040C000-memory.dmp

C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_altform-unplated_theme-dark.png

MD5 8a393bce0f438178d203cccbf3d7aac6
SHA1 991d8420b5bf5d37c813ddc1f6a1d21db563ae92
SHA256 3a6dc836506bf68422e5f90997223583408234fcf6289e6dcc1d812c201ab53f
SHA512 83264694deee456579db59313c1c6ed3dfe96c178128adefc3dfeae85cdba6b69e55d409d6062665a7ff72361382a7312237d5499221420be96837bcec0ecf82

C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_theme-light.png

MD5 0e4227d119c300332bc0cf75dcea095d
SHA1 4a1d405c30b86e91dee6f8b5d4693d6427e2062b
SHA256 26679f25b397e2fd7099c21206c22596a5653a9bfd5d080c0914de3e6fb43dd7
SHA512 7f0d8bb2a1fa2e78e5669132deb99c04cf6ade101ab3838638bc81ceade01bf285801b2a2a925db976dd0bf7e6d569ae89a07b53fe3725acac4da1a7d0cb4583

C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_contrast-white.png

MD5 f9e5fc1d77e84c8eac3b7b32ece4c0ae
SHA1 ca8258cffea71db100218d8207c0ef6567042ee1
SHA256 8f666187265a30877d02ddfa8821e64e104b30ffdfd7fc9dd34a98ff39538032
SHA512 97c8733afcb79803f0d559bfbae8680c258798687c18df097c7058695f4c7617357aab4eb46967d68d1b36d64764b54dc0669de30bf87724cb59638bda2fd3d3

C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

MD5 d60795dc78b2423dd552f55115aef0aa
SHA1 55836be3f225fbd5f1c1a16619bb8e5fa5947c16
SHA256 820719e2c90689072fc4c30662aa7a7f0cd1e26eb76c224583b867fc88339193
SHA512 df145b397a136ffe80b571357492889d190113bbb6f988f1ce543cb1c91b1943495bf217abec7ead1ed84d5993a5453f3990724344f32e6ec76687027da70dff

memory/3372-53455-0x0000000000400000-0x000000000040C000-memory.dmp

memory/3372-53732-0x0000000000400000-0x000000000040C000-memory.dmp

C:\ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.EnCiPhErEd.EnCiPhErEd

MD5 d05854f2133152ad1edbead33b89a590
SHA1 c4fa70dddfd2d805e6c4fd99217a2ad47698e275
SHA256 d71b41383da049654ee45e5938d70d8207f8b58d08af935947f22e2b91d332c2
SHA512 7ffaaf542784755015dcbe1ab86f31363347324956779eca3f356b4a4b7aab7a89e0dbb1607f4670a14073964cc5854dc58123ad7bc3c09fc9e0c56d9a9d761f

memory/3372-53740-0x0000000000400000-0x000000000040C000-memory.dmp

C:\Windows\WinSxS\wow64_microsoft-windows-onedrive-setup_31bf3856ad364e35_10.0.19041.1_none_e585f901f9ce93e6\OneDrive.lnk

MD5 095b64fa72ddd40771c42878efd068bb
SHA1 71620f396b370630eba57d76f4ea05ffe383ae12
SHA256 d28bb532db35d1577fb6361a936c7b465b32b8fc7cd392d9e838f5dbc1b8972b
SHA512 2f01acf00d402018c377ba108717e1b452ddecc7b8c34446f627e493fd593f27caf24feb085c92288dfe7cf343a9881bfd6920cc06b3430b64d74d22a0256151

memory/3372-53767-0x0000000000400000-0x000000000040C000-memory.dmp