xorist | 7238a977cd928a62fb7979092573daf2f0ae471d58dad1706e684a7612a8e4e6

Analysis

max time kernel
93s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
08-12-2024 09:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
Size

7KB
MD5

d64442e8a7be93d9483ed74af2e9550f
SHA1

5a5961f9a16626698d7d02638b6b3eb1794b96a0
SHA256

7238a977cd928a62fb7979092573daf2f0ae471d58dad1706e684a7612a8e4e6
SHA512

d800407caa400ca1dd875e77d286d76c4663041618cfafde8f4c9f7ab46aa0473aa1158aa5cb6d3aeb11eeda89eedcecc03ea872b9cb93f16b77c99bca062622
SSDEEP

96:lLZhl8wdS+r3yOYW189fTwUVF0CWHyjk8P1LOmjXfihEx7+HpFXWLThxfeGMUA:pzdrr1FG1WDCgmjPZ7+HpFXCxmGMUA

Score

10^/10

xorist discovery ransomware spyware stealer upx

Malware Config

Signatures

Detected Xorist Ransomware 7 IoCs

resource	yara_rule
behavioral2/memory/3320-3588-0x0000000000400000-0x000000000040C000-memory.dmp	family_xorist
behavioral2/memory/3320-3587-0x0000000000400000-0x000000000040C000-memory.dmp	family_xorist
behavioral2/memory/3320-3923-0x0000000000400000-0x000000000040C000-memory.dmp	family_xorist
behavioral2/memory/3320-4298-0x0000000000400000-0x000000000040C000-memory.dmp	family_xorist
behavioral2/memory/3320-4321-0x0000000000400000-0x000000000040C000-memory.dmp	family_xorist
behavioral2/memory/3320-4327-0x0000000000400000-0x000000000040C000-memory.dmp	family_xorist
behavioral2/memory/3320-4328-0x0000000000400000-0x000000000040C000-memory.dmp	family_xorist

Xorist Ransomware
Xorist is a ransomware first seen in 2020.
ransomware xorist
Xorist family
xorist
Renames multiple (2177) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Drivers directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\drivers\gmreadme.txt	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Drops file in System32 directory 21 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\SecurityAndMaintenance_Alert.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\es-ES\default.help.txt	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\@AudioToastIcon.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\@VpnToastIcon.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\Bthprops\@BthpropsNotificationLogo.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\DefaultAccountTile.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\MSDRM\MsoIrmProtector.ppt	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\SecurityAndMaintenance_Error.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\en-US\default.help.txt	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\fr-FR\default.help.txt	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\it-IT\default.help.txt	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\ja-JP\default.help.txt	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\@AppHelpToast.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\@EnrollmentToastIcon.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\@WirelessDisplayToast.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\MailContactsCalendarSync\LiveDomainList.txt	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\MSDRM\MsoIrmProtector.doc	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\MSDRM\MsoIrmProtector.xls	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\SecurityAndMaintenance.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsCodecsRaw.txt	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\de-DE\default.help.txt	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe

UPX packed file 8 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/3320-0-0x0000000000400000-0x000000000040C000-memory.dmp	upx
behavioral2/memory/3320-3588-0x0000000000400000-0x000000000040C000-memory.dmp	upx
behavioral2/memory/3320-3587-0x0000000000400000-0x000000000040C000-memory.dmp	upx
behavioral2/memory/3320-3923-0x0000000000400000-0x000000000040C000-memory.dmp	upx
behavioral2/memory/3320-4298-0x0000000000400000-0x000000000040C000-memory.dmp	upx
behavioral2/memory/3320-4321-0x0000000000400000-0x000000000040C000-memory.dmp	upx
behavioral2/memory/3320-4327-0x0000000000400000-0x000000000040C000-memory.dmp	upx
behavioral2/memory/3320-4328-0x0000000000400000-0x000000000040C000-memory.dmp	upx

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-32_altform-unplated.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Images\Stickers\Thumbnails\Sticker_Icon_MouseEar.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.XboxApp_48.49.31001.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\GamesXboxHubAppList.scale-125_contrast-high.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.scale-100_contrast-black.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\[email protected]	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteSplashLogo.scale-400.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\GenericMailWideTile.scale-400.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-96_contrast-white.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\bg_pattern_RHP.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\core_icons.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherImages\423x173\3.jpg	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Dial\RotateVertically.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\profilePic.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\contrast-black\SplashScreen.scale-125_contrast-black.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\contrast-black\StoreLogo.scale-400_contrast-black.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2018.826.98.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraAppList.contrast-black_targetsize-30.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxMailAppList.targetsize-96_altform-unplated.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\OutlookMailMediumTile.scale-200.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\Weather_LogoSmall.targetsize-256.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-32_altform-unplated_contrast-black.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\ReactAssets\assets\RNApp\app\uwp\images\onboarding\landing_page_start_a_coversation_v2.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\EmptyView-Dark.scale-100.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-96_contrast-black.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.1907.2471.0_x64__8wekyb3d8bbwe\Assets\ScreenSketchSquare44x44Logo.targetsize-16_contrast-black.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarSmallTile.scale-400.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1906.2182.0_x64__8wekyb3d8bbwe\Assets\AlarmsAppList.targetsize-48.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-black\OrientationControlInnerCircleHover.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsAlarms_10.1906.2182.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\StopwatchMedTile.contrast-black_scale-125.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\LiveTile\7px.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1906.2182.0_x64__8wekyb3d8bbwe\Assets\AlarmsAppList.contrast-black_targetsize-32_altform-unplated.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteNotebookSmallTile.scale-200.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_x64__8wekyb3d8bbwe\Assets\contrast-black\PeopleAppList.targetsize-32_altform-unplated.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\1949_32x32x32.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.DesktopAppInstaller_1.0.30251.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-black\AppPackageAppList.scale-100_contrast-black.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\EmptyCalendarSearch-Dark.scale-125.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\OutlookAccount.scale-100.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.XboxApp_48.49.31001.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\GamesXboxHubAppList.scale-200.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteSectionGroupMedTile.scale-125.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\LinkedInboxBadge.scale-125.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-40.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\Images\Ratings\Yelp2.scale-100.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\Doughboy.scale-125.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\EmptyCalendarSearch.scale-200.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Xbox.TCUI_1.23.28002.0_x64__8wekyb3d8bbwe\Assets\PackageLogo.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.scale-200_contrast-white.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\assets\Sample Files\Adobe Sign White Paper.pdf	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\Common Files\Services\verisign.bmp	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.scale-80.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\dialogs\offset_window.html	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNotePageLargeTile.scale-200.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-30_altform-unplated_contrast-black.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\themes\dark\nub.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\50.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-black\WideLogo.scale-100_contrast-black.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\en-US\about_Mocking.help.txt	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-48_altform-unplated_contrast-white.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteWideTile.scale-100.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2018.826.98.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraAppList.targetsize-40_altform-unplated.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.20875.0_x64__8wekyb3d8bbwe\Assets\contrast-white\SplashScreen.scale-200_contrast-white.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\Assets\PhotosAppList.targetsize-80_altform-unplated_contrast-white.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\PROTTPLV.PPT	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\5.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\SmallTile.scale-100.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Web\4K\Wallpaper\Windows\img0_1024x768.jpg	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-i..sbinaries.resources_31bf3856ad364e35_10.0.19041.1_de-de_6988eb133eb82b0f\404-8.htm	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\ImmersiveControlPanel\images\logo.scale-125.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.19041.264_none_ef195f564f00d259\MicrosoftEdgeSquare44x44.targetsize-32_contrast-white.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..oolsclient.appxmain_31bf3856ad364e35_10.0.19041.423_none_9de80b9d881a1ebd\columnmove.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-performancetoolsgui_31bf3856ad364e35_10.0.19041.1_none_51facbaf4051768b\Performance Monitor.lnk	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-shell-sounds_31bf3856ad364e35_10.0.19041.1_none_cd0389b654e71da2\recycle.wav	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-shell-sounds_31bf3856ad364e35_10.0.19041.1_none_cd0389b654e71da2\Windows Hardware Fail.wav	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\wow64_microsoft-windows-r..t-office-protectors_31bf3856ad364e35_10.0.19041.1_none_ce10e80fc93afe5c\MsoIrmProtector.ppt	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\microsoft.windows.narratorquickstart_8wekyb3d8bbwe\assets\NarratorUWPSquare44x44Logo.targetsize-40_contrast-white.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-ui-shellcommon-core_31bf3856ad364e35_10.0.19041.1_none_91b1f58702057373\DefaultSystemNotification.scale-125.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..osoftedge.resources_31bf3856ad364e35_10.0.19041.1_en-us_a323edc73bd86475\http_410.htm	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..osoftedge.resources_31bf3856ad364e35_10.0.19041.1_it-it_2fceb6f1060351fa\pdferrormfnotfound.html	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.19041.264_none_ef195f564f00d259\MicrosoftEdgeSquare44x44.targetsize-30_contrast-white.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..ast-black.searchapp_31bf3856ad364e35_10.0.19041.1_none_e479c512c8bfeb66\AppListIcon.targetsize-24.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..okerplugin.appxmain_31bf3856ad364e35_10.0.19041.1202_none_d081f9868ac0a804\Error.htm	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-i..sbinaries.resources_31bf3856ad364e35_10.0.19041.1_it-it_9f248a35f7c12459\405.htm	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-c..riencehost.appxmain_31bf3856ad364e35_10.0.19041.117_none_e0d32848ac56114e\common-header-template.html	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..oolsclient.appxmain_31bf3856ad364e35_10.0.19041.1_none_75cd350cc8b5dbcf\alphaColorBar.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..oolsclient.appxmain_31bf3856ad364e35_10.0.19041.1_none_75cd350cc8b5dbcf\deleteAll.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-n..quickstart.appxmain_31bf3856ad364e35_10.0.19041.1_none_4a388618f6365227\NarratorUWPSquare44x44Logo.targetsize-72_contrast-black.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..ast-white.searchapp_31bf3856ad364e35_10.0.19041.1_none_2f147508fcb33106\AppListIcon.targetsize-96_altform-unplated.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\Assets\StoreLogo.scale-100.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-p..talcontrolssettings_31bf3856ad364e35_10.0.19041.964_none_d1ce1ea46e50a943\MicrosoftFamily.scale-400_contrast-black.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..osoftedge.resources_31bf3856ad364e35_10.0.19041.1_it-it_2fceb6f1060351fa\http_501.htm	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-onecoreua..uetooth-userservice_31bf3856ad364e35_10.0.19041.153_none_e669b22d011fc6b2\ComputerToastIcon.contrast-white.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-healthcenter_31bf3856ad364e35_10.0.19041.1_none_614e2fb703320228\SecurityAndMaintenance_Error.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..nt-browser.appxmain_31bf3856ad364e35_10.0.19041.1_none_b1e502c19c2a358b\Wide310x150Logo.contrast-white_scale-125.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemResources\Windows.UI.ShellCommon\Images\WiFiNetworkManagerWarningToast.scale-200_contrast-white.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-c..ngshellapp.appxmain_31bf3856ad364e35_10.0.19041.84_none_24f8aafdaceaf0b5\square150x150logo.scale-200_contrast-black.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.19041.264_none_ef195f564f00d259\cursor_default.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\x86_netfx4-aspnet_webadmin_images_b03f5f7f11d50a3a_4.0.15805.0_none_7ab11546ceb3decd\unSelectedTab_leftCorner.gif	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\Media\Windows Exclamation.wav	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-t..honyinteractiveuser_31bf3856ad364e35_10.0.19041.264_none_a61d15efb6291d40\TextReply.scale-200.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-c..riencehost.appxmain_31bf3856ad364e35_10.0.19041.1266_none_777e4c5802d14c18\oobelocalngc-main.html	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-d..scannerpreview-host_31bf3856ad364e35_10.0.19041.1_none_484e61e96e69ac70\Square44x44Logo.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square71x71Logo.contrast-white_scale-100.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-a..ntscontrol.appxmain_31bf3856ad364e35_10.0.19041.423_none_6c3451a09cba3850\SplashScreen.Theme-Dark_Scale-140.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-a..rarydialog.appxmain_31bf3856ad364e35_10.0.19041.1_none_83b794e5516730a0\Square150x150Logo.scale-200.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..tmenuexperiencehost_31bf3856ad364e35_10.0.19041.423_none_62aeb4079e61ade0\n\officehub71x71.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\uk-UA\assets\ErrorPages\servbusy.htm	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_netfx-aspnet_webadmin_images_b03f5f7f11d50a3a_10.0.19041.1_none_27faaee495997877\help.jpg	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\core\view\sspr-frame-template.html	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-ui-shellcommon-core_31bf3856ad364e35_10.0.19041.1_none_91b1f58702057373\SIMLockToast.scale-200_contrast-white.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\selectedTab_1x1.gif	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-i..ntrolpanel.appxmain_31bf3856ad364e35_10.0.19041.1202_none_8f7e37524c3e1a13\RestrictBackgroundData.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-c..ngshellapp.appxmain_31bf3856ad364e35_10.0.19041.84_none_24f8aafdaceaf0b5\Square44x44Logo.targetsize-96_altform-unplated.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..nt-browser.appxmain_31bf3856ad364e35_10.0.19041.844_none_d9eb415c5b9dbe4e\Square44x44Logo.contrast-white_scale-400.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.AsyncTextService_8wekyb3d8bbwe\Assets\Square150x150Logo.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-onecoreua..uetooth-userservice_31bf3856ad364e35_10.0.19041.746_none_e6778e5b0114e5b0\KeyboardSystemToastIcon.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-ui-shell-component_31bf3856ad364e35_10.0.19041.746_none_2b9acc2d69574796\RequestedDownloadsCloudIcon.contrast-black_scale-150.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\fr-FR\assets\ErrorPages\http_400.htm	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-i..ntrolpanel.appxmain_31bf3856ad364e35_10.0.19041.1202_none_8f7e37524c3e1a13\logo.scale-150_altform-unplated.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-i..sbinaries.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_b4fc93ef208f3edb\500-13.htm	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..oolsclient.appxmain_31bf3856ad364e35_10.0.19041.1_none_75cd350cc8b5dbcf\htmlfileicon.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-m..osoftedge.resources_31bf3856ad364e35_10.0.19041.1_it-it_2fceb6f1060351fa\needhvsi.html	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.AccountsControl_cw5n1h2txyewy\Assets\SplashScreen.Theme-Light_Scale-100.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-p..riencehost.appxmain_31bf3856ad364e35_10.0.19041.1_none_97b0a47239f6db64\PeopleLogo.scale-150_contrast-black.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-u..usnotificationuxexe_31bf3856ad364e35_10.0.19041.153_none_51feabe070ab84f6\Snooze_80.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-a..ntscontrol.appxmain_31bf3856ad364e35_10.0.19041.1_none_44197b0fdd55f562\SmallLogo.Theme-Light_Scale-100.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-ui-shell-component_31bf3856ad364e35_10.0.19041.1_none_03928ee4a9e5894c\PasswordExpiry.scale-100.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-apprep-chxapp.appxmain_31bf3856ad364e35_10.0.19041.1_none_edda8130b19d4286\Splashscreen.scale-100.png	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\SRTUIYIUMUTPWSH\shell\open\command	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\SRTUIYIUMUTPWSH\shell	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\SRTUIYIUMUTPWSH\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\qeKCtQOxWv9095H.exe"	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.EnCiPhErEd\ = "SRTUIYIUMUTPWSH"	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\SRTUIYIUMUTPWSH\ = "CRYPTED!"	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\SRTUIYIUMUTPWSH\DefaultIcon	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\SRTUIYIUMUTPWSH\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\qeKCtQOxWv9095H.exe,0"	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.EnCiPhErEd	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\SRTUIYIUMUTPWSH	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\SRTUIYIUMUTPWSH\shell\open	d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\d64442e8a7be93d9483ed74af2e9550f_JaffaCakes118.exe"
1⤵
- Drops file in Drivers directory
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:3320

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png

Filesize
50KB

MD5
afa5c7ea2e61542ff40e9c0d9afa0c83

SHA1
e0e87a9749f2bda23a890ebb04b4eb2793412a49

SHA256
48633378fb5b1767b2a062e60d4db9cc124c19093b029e1fd80042b2a20368e2

SHA512
d4ed2502a91e37712b71909024b7075a0450ec347afbf1254bfba0207c2c70f1da3670d0bdff69f17f9924419f7e7579268622fdbc3dd4614fa2d4c4babc3fc1

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png

Filesize
1KB

MD5
f93cc69d0bb64f419ee2b4e1c3e13830

SHA1
2ff58996458ba44d0ad90642bd63f80d6541753a

SHA256
cc2564250f7b8c5cc85cd56d434ff2776c458ce76bf87adb445223a5e5e7748b

SHA512
c7a15fe0ef46430d50f798a8e856c213b719814a32a182a168716d61bc3157915be662209a1bc65261a4824e145c492f7552680596563edaf66ac99fd6194902

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png

Filesize
3KB

MD5
7845bbe10bafed756b05c4d575062d4a

SHA1
7e308e77d7c6078315aae06204abde23c81d464c

SHA256
7835ed666bb440a6da29e10a7c44b384028dc26ddbd6818f2fe9028f375d1376

SHA512
87c842faa2ced124c6928dfff815acdfb07fc1fa2a8939dffaad43bc39cf6deafe04be3d0a8dee9d02162a82476935500a1e8b298bf703e01cf7525493712a0e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png

Filesize
683B

MD5
3a84e6814ce8b6b24e270a3bfcb2228e

SHA1
95d7657cb35104de84187f53b4f05f7c831e5f35

SHA256
bbcf3382cd78335b3023bef26252bde42c2f19d673db28e55e26ab998f232452

SHA512
b84adaabdc62dddfc5fd9213c19499e33ff11aefb36774fdbe0fbb3486681185f35b0d223311b921febf458763a0ce0121dbba7adbd1a7d0d85b9f0033de32e5

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png

Filesize
1KB

MD5
e9da8076d2a0738ab528ea7363e3d9ea

SHA1
69be9fae1f73770f80e1b440ddb4aac11017fd81

SHA256
039ac4d8c4462c2cf2424b261602c1540f647c290c49e402c4429b064d503296

SHA512
b570726a8d85c6eac05bf2ab72be838551a104dec2db5b477ffd539f6d8ba010f6546b53948ad41dd9573927c6e7c7c14d97fc080e6264370265bceed267055d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png

Filesize
445B

MD5
58e4e37349d40e699ca9ab3eb4d75209

SHA1
47a18e174212b56da103b84d475e0df854a35d03

SHA256
ba8a184067bf9c33fb996873ea4ea882c4ce603a34aaa364187a62660bff5425

SHA512
5d7f9ac7f8f51e1d1b675060a7f48a1088c80a43bfed0d0ff6da5ae55ca9abc193bfbb7b649881e991cfd4d979278e2f49276118249148ccff41ad78cc11cc31

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png

Filesize
611B

MD5
8087fa48f627cde21b514d3cfbdb4cba

SHA1
d33197ad846c8c397066145a2581389a206afe0d

SHA256
371bda661a211a01272a9a4c2487cf8e35b1741001d9f1b5556cdea5a352c691

SHA512
310669e60035f189d560d6a0db592fdc8fa8ecdfc183b1b25daaeba2277827e1dcad577ac04875fc9ca7355574d628dd2b2a527c7164017fd564b8775801ba2a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png

Filesize
388B

MD5
7d5f04e183a9645fa330b5bcaf8abaff

SHA1
d355c6a1a41826e426619d3a697414018cdfd5a2

SHA256
ead16ffdbceb3e38ba23b346bdd145591a3322212070916ed8eb086ef7503b83

SHA512
cbbcc7c0073f61f6dcaa6e226f4035de07e2a3e839a1bce0f38c59e6b1ebfbc568d4b432153c3c294447268bb665efa32a19e5300d92d4ce2896cab5fcd85ea7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
9391d7348f6f69e7aca096df92719fe0

SHA1
8fcf7e325937d2715bf7a097509fb2c565feb95c

SHA256
3b7e479f47995cb96abd8154fca1b61967b59ee190a19a4aa7b234ea8ebcc5a7

SHA512
5026714c0e8d0d7d8cc314c89d339d82e12cabc2cd420c842c9926fe1630215e5bb4c485b4e9a954807a64bc373ec2894a7532b6af832abc1acb616448270ca9

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png

Filesize
388B

MD5
5dac213d93419776774e05caf7ecdafa

SHA1
db0047e2e4509dd076d1a240aff27941ac0ac295

SHA256
31b5592304474dad6314e8bb5e1e05da99d840062d2d5d57a4fb29d1f04235a8

SHA512
084527bf4249249db9a71a595b6a58781c78382afb5f23a56863ce52e6629e2c9c78abc15e1dd0d1ad0c43807a9bd34c718794be52711ad625c66f470dda94e9

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png

Filesize
552B

MD5
0eab0e1866c81fb2a1056866e67c0e4f

SHA1
aee3a04e8e6b6dfa5fb46f92c82a51dd6552b186

SHA256
bace40d47e16b7ac4574bc66c4d635275b73b2a9315e686f112d4fa5dd0989ac

SHA512
76255c1573d3a707979c47d71db742347513824621335dad5303a2ac5789314f17ec5494dc46683efaa605f722bf9ba49cd1366a3b2262e1436b6bdb8ee3a487

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png

Filesize
388B

MD5
260730c379a2e2fc1ee9da9fa9004d7b

SHA1
1b35660f20fffdfbc1fc277ddcc7c3e3a546841d

SHA256
fbca12bfb5f15c0220c3a4e3b6e1ec071a3233eeb3318f2d9d9d522c282d297e

SHA512
c0f35509001ab777ca0e51ae923935012fe1dd732071f9957444abe574620bad16eff2f0348634cc977e8ba9fa9df40357b41f9adf6695c499681ae1a4cf051e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
fd560d2efb97027145c2cb4dcff590aa

SHA1
3e9ecfa80d0f320bb8cdd9e2264abaf41922a5d1

SHA256
2185c98859f3c746cae1125375b376c947bd9b4a3c33e9a689301d5de9b141a0

SHA512
180f456cb7ad7cdc543120828a6532ba96c95334f1873ebe0b3abd52dad10c27db6e1f05ed7340f5c81a06ee9e2c1b4774e07a37f595313a6a691e4c198efc67

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png

Filesize
7KB

MD5
981f48726bf9a3e6129a4e96dd345f61

SHA1
8ea01f7ab46f9b754a23b72a5e0769af1ac05a7f

SHA256
7fe514ab5b4b9c105636c25df0c3ffc61f155e994b984d9ed896185187c80d29

SHA512
db5c28a46f892f8c65bbbd335196cb9ebfbcb093d3a7ed879005c505ca4609a75d03efc34431cc04bddc61c80da7dbe101b6cdaa6ae702aadc9223467ee8ddde

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif

Filesize
7KB

MD5
86a7a289710129352924b8d9bc9bf72c

SHA1
6f38bba6502c1e11cd482a793c880bcb025d8bad

SHA256
29465420f576892f913ee1d8e1013a95a1e934e41fe46295e609b24cdbb81aa1

SHA512
38689853c52fcf22e91fe8f1ddb0afec413cad397f1deb844ce0519bb9d647e27d4cad66af316611d6e6019666305f7fc3ba879c0f6cba99e00f2ae8aa04be98

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png

Filesize
15KB

MD5
647fcf982ca77be86160396000b20eba

SHA1
a72391765b09e984a952926bf4c2524f641147ab

SHA256
4f410d0dfe74a0cecec09be60262175e1f2bb6c1ee46fc4fa85ec9c83fd3554f

SHA512
632ac0fcd90faec14b431896584a4aecdc452dcf92ad719a046ac9d36a099345dbbcd48b452e748362c76657a50bf43a150d52bf472498e040ff1fe4b0bbf395

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png

Filesize
8KB

MD5
2fdec2dd13dc0d34e9b2fdb7fa68362d

SHA1
5de0f23744a71d47eec80a10572dfcfd9a349f15

SHA256
af2ca1bf16a9435393c6e10b277ddd61925bf9ad653372b0827ed81136a00db3

SHA512
b7581759ab103c24251e6acbfafd2bd1187ef1b59351e84663f250468fec753502c30d5bad38ba81802e848850fca5fbc0f1e12d7ee1d58191d68085144ea8cc

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png

Filesize
17KB

MD5
1bea61dfa7ddf826a388d399dd562fef

SHA1
80d99376cdd822788d513f6d32b8313589513921

SHA256
028d2a3e3afba8c04bf3b9fadb1111b511cafcea8dd10abc22ac94d728c868ae

SHA512
7b517bc6ecb95e6e9a2ba834629f722b43392228eed0abffd175c9e45d2d01792184720333d1adc90df1b64c8580d927515da993a4259cf8b1f7654e324636bf

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png

Filesize
179B

MD5
11943da84cc8f5da963094e6b7681b01

SHA1
4d0a875aa1bad0b5053e91a95ff561e381b52284

SHA256
85e5eb093c4e9959a7c795747c556c2a0986bdef860778c160103c81bebf36bc

SHA512
7373b2d68852ef450e04ff542d8f109cdc1eaf5ad36d04345460f031a3cb292369fee0e4fc77d19393088a7d10c6d65102668a1778e388b992ed8feb62890bbc

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png

Filesize
703B

MD5
da24975427461a508435c53b51a28ca2

SHA1
354b1e79a9a78bc5ffc02c5777151d0fe58f4466

SHA256
68013abc2610472938f393b3177c172ea07d6c87018f472a834ca206cb2d67b5

SHA512
36fbbbfa2c190e26fcbe88dfdd98bc46765b41cd78f725edc6c888228465df682f12f74cedaf6d2378973837dfbc97bfa4ab1cdad2f0e40d9ea718375056ca54

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png

Filesize
8KB

MD5
88208234a48257adcaefed8ef090157b

SHA1
de713a2d538de37c79672d04a1b4cbd8a7b0aec0

SHA256
8d672a41b41a35a16b553904f62428eb422bac94615c86dbdc5485bd67ebf954

SHA512
97f6990ad8284cd251f77c32b4787135477902af71ebf7dea64a9b35db8a527b0be250a4f64f81e05e7f0f4c6297a17524d11e21b0555143488bdd159abf3044

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png

Filesize
19KB

MD5
a9ffc5003c7e2e838c781d3c1c506ca6

SHA1
f7258e1c1a4e9a5e6a51b450dd7f0867b29959ec

SHA256
7d911a1b7b42ebc730a941e74fbb5338ed813b560743a588ef34228b65cd50aa

SHA512
7083bc8fd7a9542ecb75242924a6a79a1a28e0c6a069dfa8132584f951f8461d70f2ada2691ebf49e72b1f410c44b5cfe3aa9885f75292663c93e19532723b74

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png

Filesize
6KB

MD5
bcc988c6ca106396220984d27f6903f2

SHA1
a86ecd80c6c6db2c093a6a17998014f010c3a48e

SHA256
9863a939aa48aa7ba08a2c9d53c619cbe6304723986d31529197fd4a0fd66827

SHA512
030df92d1e37858e42d6f7f0dc7dfd8b9ea6001092cff639f8c30519f5ab99f56aae9647fefdd792c112c4076da7dde5c27dc38883adc3cedc81a4e5256bafb5

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png

Filesize
2KB

MD5
03977076e7d094cf3fff71f614f9a21c

SHA1
e8277799c86c93f3ef4cd09e6c09b93c1f438d38

SHA256
786a924339813135846d149e6f98195a2c601b8a8fdc7b918712046cb0b41037

SHA512
71f16975e9c53e7aec86b7737edb9673f10a0868305b69120a8cb51819290ab0fb41bc1dc5cd6a2cfad9c33e67dac2d077b3039a502ddded3dd1099f95d1f72b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png

Filesize
2KB

MD5
cf18f22a728af3cc5a00a01022075a1a

SHA1
c2b1d47053c6cb56cf9b20a1a66856f7ffd309eb

SHA256
68a2a38005ca0a68795d68e5b378972f6439ef8cca57f39723dfd10016e0c58a

SHA512
60a246d29a0692b62206d077d39eda7369e5bc1c018b9c1cca88e178080aa8413ed59b389ccea5c709f6e1ddc89f343ef8b50fd1f7b5a07ffacb93eba0ad1666

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png

Filesize
4KB

MD5
710e40de6fe7d6ad0d8dc746718bb943

SHA1
8b0ce8bfed15567bd52a691a07233163c5fb4a6d

SHA256
8e447d96713d21a5527664a992ac43e1a551ea4ad5c8648b29d840e5cb12c9b1

SHA512
6b3dd6098fde4abb4d2bdf9326b919d933deb82cb3b614e39618e2bea72756a26d867291b92b17258a0c468af8b83bb4cb10cc7de482a884f21a286c2a042d0e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png

Filesize
289B

MD5
6ecb2b5300051ae21f498d214aefcd4a

SHA1
71d9c2d39d5f493339b9e0228be551db6c4a97d5

SHA256
1ab023ed03b5b2ca3626d537386901bde0ec5f8756814250ef2aa74d9781fed6

SHA512
12d91810fc9414deedc9bf1c4fe89156887f9d283a776ab7ee5d3f0c8f92d6c4cdd490477545356ec90d24ac403cb5c5004b3e68042200159ab6e814ff697b5c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png

Filesize
385B

MD5
90a1cffa9e9c7ace18c76d5290768f1b

SHA1
d0b213e2a5c08a55d768d4807f929fec646d6d48

SHA256
797ca7907602ad64379d392f4bbc9d4184c865ef1ad6ffe30ae06251f5765a60

SHA512
0970d2353abc881960872809fb0a2307a97813824df555aaaad24535fc75c225bdcbd3f8757a30fd14d094089a50c39fda3a50f924ff3bedaf4eb64396bc4a82

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png

Filesize
4KB

MD5
898b13ceb4b781f3eb1ffeacb10bc4a9

SHA1
7ff2abdd48c6ee81c1e5eb6a2c55ca0bfac91281

SHA256
9c4367592b9b8f4527476285dcd90e110743a219fbea49e4845fc45bc5f72a76

SHA512
c4c0b42d0b7edd6caac25a248823d88a1c2ee5449886653d3e4f1beb1522226925f5bc4ea24e9a62de535c184a6989022c73a9b1ab1e23ff3afca22ac7eb5df7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png

Filesize
1003B

MD5
95a1d9a8894bc04f8d19c815e7afd597

SHA1
9eba465d17f45fb07f40e36f20809fef288d2467

SHA256
66a98fb1cfcad1e7a4801c63ff3caeb502715525487588fed88ea67bac8f61d3

SHA512
1ad24a7472a759a7d2dcec8e8cc790b8391265a0c021a427807edc688bb6ac24e2b5aa48484379fdfdd4fdf5e72c02f11c5ffafc8f902f69959788412b73819c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png

Filesize
1KB

MD5
7ed2cd226b79dfff744d3aaa44d9e860

SHA1
2491532734058de0768cfaeefe6636380e4e3442

SHA256
58ac229167931daabb3fa80fd8ef763896d00f7a34260f368a97c8e9dc47d960

SHA512
f9b2f746f8553330fe7f6c92bbb2d3d4938aba9bb48436075dfbb49d548c78ccf4a3f6e9cf37a1730e14d9ec527766ae9898040d473164731dbbebbb6c00b4f4

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png

Filesize
2KB

MD5
435e84f57ef65fcbb55cba78d3b00769

SHA1
b40d91cb1fba20586c05ffc36f3b1689d1efcff2

SHA256
da78296f7cd2f1ab1f752fa7b5ef43061ecad6e5d4d2e6fa78d108d2eaf79d0f

SHA512
a9a9cbf14715feee1859da2b446ebc0d62c959faa9a275d94a583ae085c5b1d8cd055172900cb770a5d37fc72e431ff9bc1b8b4677efafa46d075b0f99ee8a9d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png

Filesize
3KB

MD5
232cca6e47c4e94725a19a8566632720

SHA1
c86c38ac0f7a85fd383d3dabd31596479a0ca9eb

SHA256
943a91090812edd92d8f1193524b87395568d54234d787ca290074e5f0ed3231

SHA512
712c9db0e9b21dc1a8201184c527f8aacddb7d68a48c4b53476202d8fe7880a9d66845f4038779e2e2ca0238139ba3e3c5a0013c873006d21439875ebe2a5002

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif

Filesize
556B

MD5
abdf9243026516eff51618a00bb8b57d

SHA1
7d8e99db676e0214b8c8f5ad0fdc31c0018d8ddb

SHA256
4621ca50f2024897cae3396814b8b419368bdc38243dd63569b66b807ece76e9

SHA512
888881bd83b81faf605065d3b89c4cbaf579a2ca17fb594a976b8c144a9b5645965b92c4c23c8ef3b06a7dadb6acaa859869e6f0cd98afe778bf46857314a991

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png

Filesize
6KB

MD5
74d4d8b0fcf2c5e4e5467601160b61f2

SHA1
6f9b71eaad12305ff49f81d4406ba9c5e2058ad9

SHA256
a28ecf3227a7ca75dd7f47665f8aa9d5f173909162374957efc56b0a8d394cc2

SHA512
8bd3fa433545a75ad0df1860d149d5169933ccc55b6836068f49036fe839133e1bd7bba93cd8516b294c7b7030237698b999dc0e3a70226b2795e2f7e78ab730

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png

Filesize
826B

MD5
15b225ee8b89f36baa558c3141bdaed4

SHA1
e3ed9198e49e08a8a791794be691375e2c0c6393

SHA256
9b3d97dedb7c5a9fbd3dd171832c279f12f57834bc6b9cca8f7c38248ecd5231

SHA512
a3c50662d265d7d37a7a4cc0033ffcb070834f7a28bceea591367b85f008591843930b875dbbd353ce755700e071334cbb89121cabd781b9d59e53d5b7070803

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png

Filesize
1KB

MD5
81cb4b40e54a75d0b2b616421a694cd3

SHA1
0af95341c459cd154c4c2d65d99189dd01a85d9e

SHA256
f6940e58124af062941254fe20c6e4078a2033cefdd980a292ab3946f06ba619

SHA512
55550280a8dd8bb583974badbe047bddccbc180d98110a48f40e151678c64fe03ef347cb91f6942fad90c43a433f8bd911113c474cde271d800566efe73e39b8

Download Submit
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt

Filesize
32KB

MD5
8a44dee37662169a1c9c8c1406b1c051

SHA1
adc641d0bf49f27b0ef2b46af70b067b0d63c16f

SHA256
fc4e002cff53e4acdca95f16e9fed4eb5492b6caa15884d45cc538895863738b

SHA512
1053993488d80ef1fb0b2f18d2fbe861b858a384fa8f4566b9d9148e30fae4003161bbb0c168d39a18d3f65ace7560671cc87aca68c4448feb4279429258500c

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif

Filesize
153B

MD5
aac6dc631b94e509ad1265e0e218aef2

SHA1
38f7f71d5aa0ba644d33ceafc2b26db63f2515cd

SHA256
bb10d003200f2dde6ae1cf915362f0696a3606c5c4f2d075de1ca06f97a916c9

SHA512
b6e6ad88ffbf70f0042e00ba034cdd3793e90cddd2ce4347fdd67eba0e5d978fda06398483927ebb8219b9ebabb2c7fd97f6f05c217f31a6cfa497ba2df3a6dd

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
190B

MD5
be9986bc694228f1174151cf36b58485

SHA1
54bbe0680605285ba98189243ebdb956d9be586e

SHA256
6172810945610cc382fce7c9b035f7cb9844c69ed4886c0fcd7886ab95d20ea6

SHA512
5dafa696d29dcdce5cad58db4c6aef81f8a9fac3cbe13d3c0b68ba3eaa3b3765a5b5e11105ae51cd9cf9836838d1f9ad1d8583d95b7b62109b122c545487f6ab

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt

Filesize
190B

MD5
74a54fce1080b93f959daff8fc436304

SHA1
4295e2b6b5851df2d278f941344e01d1cfca494c

SHA256
c03fe4a7284271a6d791a56498b038c034a59e715d5f4c845b6c55c99887e464

SHA512
40f0db75e7e9930ff76af0f793903b0e5453a90ca0cc84017fd253c313b6f0e3c84186e6405a9fac110a6e3e13c68a077ac6bcc3be7d01bc68810c6f8800df0f

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md

Filesize
1KB

MD5
1cb5fc74141b5e7e382cd64c0ba05675

SHA1
e456e9f2bf02d877e418d3d81e7e9775719929bc

SHA256
b013b4b7b4c5c9fdda293f4b3d67517c7fc87e765a8a3664b19823e72fc4ffdb

SHA512
8cc31d461a6c745735321a68663b21cf75f7b9fae164393e0bc102bfa68367622b7e0b1860548f4748f331f7a710b6d1acbb3109c0c204cb1b0dc989dfe9f1e8

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\glib.md

Filesize
31KB

MD5
a774048b08c45bc1a9c78506db63fdc6

SHA1
92c88d197a05d73bd857f375f6483231f35c91e1

SHA256
bedc9a91c189fd9d5cff25b16a6666c5cfc0056791f826cec22534b912d1a67a

SHA512
eb19588fed056767049e13232119c1b7ff6d17e3d4e1797f2c9ed5058197ad59bba1f93e8969ec973cb75b12ad58842ff71b5130597c614fad9119d1b1c16e33

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md

Filesize
34KB

MD5
7fc57945abc3f52eb219f83e3ffbac8f

SHA1
cd5ef408431d8fac0ca584e7aef392fff060b556

SHA256
da5fd1d68de1e9f10d5a0b3d0fe349cebfa3ca9e2748048d90ba74a3504d0a21

SHA512
c3718c4625a795de863fa33c99a5d7be4a3f26e9d46d91de1576094dc23fc791d846ca9aef5d99de1711e3e01b230e2df320186098fd6f1704b3ea3819fe7eaa

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md

Filesize
23KB

MD5
37204cfecac071540a2672d33bc4901f

SHA1
3932f7a51715b276a624a9ce47afa873c0ee29a6

SHA256
2c13e0a3574eafb37afd51bbb49025f540192a4f1807c2487d06c63339ebe1c7

SHA512
b70f7300737df1d4e2493bd8f5c30e85bf9f616a92eaa65d28bc83baf15a76ee8ca9947cda016f99209a9958cdb440448e2dad3fd4e9eab353f652087c6c2346

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md

Filesize
2KB

MD5
5f608d0fc447891c67331ea22d34b210

SHA1
3ba67bd79c155f90c17a6539050281a79270face

SHA256
6287964ffadc072ca6a6081ce167e2e73d8cb1182f81f80cf907eb022ceb5d6b

SHA512
a0d8ae55e4c635c923a631db09cbff75dfdecfaad2ce891c7ab66ece73c69f8e6fe9e3152d9eb29ad3662afb74cbe22a87cb96fa2200e1e96b5098bce02ca700

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md

Filesize
1KB

MD5
13d6748e8c7a907c16c01ec13d2550e1

SHA1
497405acd555e9bde04fcc94909ef03e0aae37b6

SHA256
788d59bea4a00178f33a80359240af24b91a1cb5c9f215f1324e2034afa8ab11

SHA512
6ee248ca17eb3f9f4cebb38929058957cffb3d80e30a79b5a5ae6c2503845b63953e7cbaf7cb1e087db2bcddaff7956befb969a330543f09be8e34798977fe3f

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md

Filesize
3KB

MD5
ff384ec0a4f02ab8eb042fb0610db2c2

SHA1
139579ed2978f7bc3b14b1872cbca186382881fe

SHA256
616b6bd43dff8150e6409d8d8127cea75c5b9edf267c520b84b6a42cf46fefc8

SHA512
9ac31d6e499277cfc190de82c4a95df2d91510b1d897e6e47ba4051d97baffeb973a1cafe2590b2d9fca821f69d0645a92aa46937b1e8dc22348f2fa3ec0d108

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md

Filesize
2KB

MD5
06c774b01dc7b534286cfa90a922094c

SHA1
b0e1183815ec1360f7387bec4abc0b4b204a107a

SHA256
6d809898c383b9c95188f40f7fe982b33f909b5cd2adf231179d864baf36bfb5

SHA512
75eebee91beb8ff9bb3f01f5d41bc3e995e19219c66fd2c039e0ff59b0e23306a9dc8ed35c6dce958d3bc951bc544cb01cc15441c894dbe19ce3f323230a81c5

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md

Filesize
5KB

MD5
864d73dd8c1c73fb562e76340c335a06

SHA1
62c4da55e88c88ae9e40653e3f92dbc871f501d6

SHA256
45036b84a191a4ef509ae18afba365ef34fd4c0e612efdff4ad5628ba3f60b97

SHA512
2f1826ebdb58ccf8feb3eafceca004a976a8813bccdaf1061963b0a2182b23d1757c53cde43b64c211c1c588a051e85fc2b47141d1de3696798bf2bcd92e1efc

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md

Filesize
17KB

MD5
55bd47942013f4ccc62b31fa5fbebafd

SHA1
ddc621bc39d3889bec0e93322a1fc6f1f273fce5

SHA256
63f7ec13447ec8ae0d020acdf8ea486ada388d30d65d6ac28d3909ed77cec392

SHA512
9702eca5a19da508e85fcb5ea571250e4deae2cf133f22250614eed79dbecb8e37c50d53b8e923a43f228d22f80c26c30e43aa8bb93035b1afc0c3cd3cdce9df

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md

Filesize
320KB

MD5
daf92a1ce14881ab7d38fb31fc0bab4e

SHA1
a0ea9c51bfdd8fc499976f774060eae675c205aa

SHA256
1549260c2958a862aac0998a0767e241fa30402fc6f139f178245fcf8b4a6208

SHA512
33d4915998259f03c21de77e2952d5649b05e71f7417599fffc48efd76d68493fcf8f9c2f6ba9c2a9c80c81e5e7115370ec02a8290ebff2ba0b325a30e2c7688

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\asm.md

Filesize
1KB

MD5
b41d9d7d77751f48507b24651ebfeac6

SHA1
351ae36bfdbae2ac83f8edbd21fda8dc7baf0063

SHA256
d208d79572a5aa0d4a1653bbcb03f24764518c2470d7ea8291e38651470f8978

SHA512
d56c0a2c1fe863b34f6c1547fee14f9c63e370946db897e07a0ec9cfb9c1124b4ff026a41adf7965f4dc0a0b4358b249c86832d132cbe604ad22e349a6dbff2a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md

Filesize
10KB

MD5
8fc361269fb93fa04772e6686c63a596

SHA1
90310126ec93c854adf1d9950b87333bb893bb36

SHA256
befdcaae594482b5085ec0add7f56c778e8f7bb984882af5f0b82b9fe4c9fd0f

SHA512
3290551903461b61c0bb159e087995e47426f67b6b00f96d530088dc60cad35903a54847ef080ce921702bd1bf226f6d7b316fc6195fa4e7f5cab7ea156723c1

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md

Filesize
3KB

MD5
811b82cc65f9612a08e777be5e75330d

SHA1
6e137e579d14892d8848165d43eaea493b2b1b62

SHA256
d33cecda974dcb7a72de0d51fe0da103960877aeae4007bd9be27761cf9ee075

SHA512
8fbe84e0bfb609b96d800f66ca7a9023ff7ca7f2d04bf98340ef70f6df4d0a6f99d46114d11b6005e92654957b755ecea194c490d6d2ddae666b89c75ad7fbc4

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md

Filesize
162B

MD5
486c5aa57e1e23285229d07ec48891e2

SHA1
cd991ba934bf747b2c3750da44c4af8da6d74cdd

SHA256
16fd79bfd9ce7797c1af683469992bedb4a9eaaf9f40e4769bf9d1ccd8850870

SHA512
c2f6d097fa2037aff0a64bd7e3272fcb21f4ef7fcbdf1754c7811a9bbe85f4a5ad35a343e5c4a791fb943a6d9a49b5ffc92c15b0d83006bd535558a20ad140d8

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md

Filesize
1KB

MD5
9de94a19b611833cce93aa28ae6c0312

SHA1
abc16993e02c8a85032ad915bf93d764972c5930

SHA256
6cfe940bf42ceb95d49439e227eb0841f8c79f11a6f2f9019e51e62fd813a801

SHA512
b9ae0f566419408c9449a98b75dbaf68bf51688adc10858afe97f23b98acb146347e96a0174c338bd85b8bee4d03d98071cc47248336d03b4f3b0fb831693695

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dom.md

Filesize
3KB

MD5
95daa205b909042302a84d82f969f448

SHA1
c51d66936a90567832b6488dd6f22306d0c79289

SHA256
cfbbe35a71b5e909aa450b528f6043f72e330cdeb8012acba2718681faea5305

SHA512
4782cf1984836081fded31ac8fc2e03b28ab4a9e21f7af409a46952cf6f2d11e757ec05c9eea3ef8bb9225bb84f79f29432f3ff71ad769c2c5daa85a2963ec4a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md

Filesize
1KB

MD5
5c28e6e903c28a27ea2f79b4f8ec5c42

SHA1
e2a1e6cf57b9c9982f596e98aedf99124ab85147

SHA256
0764fb7efad9e73857938bcebaae5c768d1f98d682eab647f36fa69bbb473fe8

SHA512
64451833b9136ad934f98404d05022f4b19b16474edb540ada432aec71f30fcfe15f9e9595e63aa0c58f2286974bb35de0f14fa7f4a32864134852f5b9f11e83

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md

Filesize
28KB

MD5
1eb63e3494255e185be0fea57c9bb32c

SHA1
516fac537793ab452821e3d9e73aad3e033f45f5

SHA256
63beb712be5e5dae34bcea373dc3b88637f0c9d98956dfa19e662dbd8985d733

SHA512
ee842b088057c5afe54f42535c2bd79ba0d68f214beafce4f5b912b4b31f04e9aab31ec591be24e45f786d84500cbd0a4b15e4aaf6b9938f1e84afe3f5132d0f

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md

Filesize
2KB

MD5
bcedcadf7a3de0e690b4fea4d7941529

SHA1
1991ca5cde367c4f9f50fdeb67d2724395b00aed

SHA256
894a4758f2e17b238374484fb8080922cfea3ed42287819f2b7771023955137d

SHA512
020af8cdce7df3bf9e2485c0b8f21154ac17653d1ba94cb319eb125a8b5f6664dea20fdf614b0db3a6f50639b850586bdc8369d9a1bd274e6efa65fcb9e4e04c

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md

Filesize
1KB

MD5
c74e70b9aa0ccd4ecb1c42ee64849c88

SHA1
0a0fb60f9534865ab797509be9c19fedc09be252

SHA256
de8bf60f3b5604e35359ed677ace2255e8682eb1a2942ef72e8b6debd1a65005

SHA512
f69f337414a7ca1243ab4a6651494aae6c52fb2423eec43e290ab4abe8db7719faa3695b37e394130b1f07ddf50fbe43d72020854aa1c1411e65750b31d4a8b8

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\icu.md

Filesize
2KB

MD5
905263ede143a7439dcad47d30e4862f

SHA1
2f538af6d3c7981c1c90d836646abae9c631d8c5

SHA256
a6501229083be492a7e5a8d92e6b4cc5b667fe19e9351a8e20fdd4ce433b272a

SHA512
306160be64a8166d311f423d2a5f24e8aaf1f16394bd39a2807aba3174fc56cae40f83e0fdc12d47b3fe15fac6f88f57a7a2d6116fb1616c59c92de3607b9167

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md

Filesize
1KB

MD5
d96352c65adbfbbe598bf54fb143e708

SHA1
b621904f7abca5f23f123d4e1801371a9a4b3502

SHA256
0df234759f7c51bd091354b0abdb7d4f7c748695cc7e7c4407b10a717a5e93e9

SHA512
919dfb730e6a782c942627e4ffc41f952cf1a259e02985a4786a33f8110611651a4c70ce973cb15c2b1effc99f07bad8eb82039d47840a0bc39eee6727aad651

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\joni.md

Filesize
1KB

MD5
4e6d76242fddc73d3d4da91aabcc7bc0

SHA1
b46740af2531fe081629483f8467d00153135ffb

SHA256
0188e68ecf33286898d7dea071ce322abde8578d0c6ac2d5137155d9fd82adce

SHA512
75581f9995e9bce6835bf0856ba77a11f443e6907ad011d44265f3c79711e6784bcd3fee91fef2843bdf6c2d1f8111dbbaa34f81bf589fc3b6606d353f2df90d

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md

Filesize
1KB

MD5
58c7f148aa3eb9c23e53060ecf64d755

SHA1
e07db72fb58dabee01eef95d32487c88fd018e03

SHA256
b3b414b54dbec282be2ac8e68fd3806fce35bdf62f681093609d3feedf5dd47e

SHA512
2957b00a722b156517486e2879cfc2b67b0f869b2d9bd6550780de2801f6900474d51bf5f37b368cfe42727fda6bc002f500e61595aef3295a2794be43b4d162

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md

Filesize
3KB

MD5
b35157fdab9638edd66533818eb4546f

SHA1
df33fae4304d2c60f3d0e6e4f561f94069bd3436

SHA256
1a3a40095f403bce8b0fa33b638f00f47ee387cdbfe8917613f3eef7d8470f50

SHA512
910ef564267e7fe23109d132f7b7cd4970edf02e28a378e3deef3bbabd6b3e5337a76bee587d3c7d0ad171db78a6d725462645acd67fc5817c6cffbf1c526e72

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md

Filesize
2KB

MD5
e361786b5d16f49965627d2af70828c2

SHA1
b45dcd71afa7aaf657384688eb9cf566fea2c30b

SHA256
a9687490a80882da01eab4a6e7223a9d5edd2d1a2ff4c1adfb3abbd7ce8cfd7b

SHA512
f88a3a7d1364e1bff9caf925bed7ad199eabf58cc66c4e9606056877f18cd9a3744549b030be5278e88aa9c3ff2a78dbe73f1a2898e4c1272ab68d8e662b3caf

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md

Filesize
6KB

MD5
e86aef0c5a9ac414343162f334fffffb

SHA1
7734de5c5504ff6dec649113e7f5a36519f62b73

SHA256
2176556ac0a31622b413a9bb98e5219eea427dacbb0ae109b7b2aee883d9c55d

SHA512
775bf557511868c83acd731f3544c59b7bf94dca4629bf458b644209d19390d2c71a90000f68249fa04c3ccd391e43fce75b93efa10378eff31813f1f478e706

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md

Filesize
5KB

MD5
06951848c918d18094bab40f670ad882

SHA1
29a2a94765996c342c3c8a28b7d45bf1336be488

SHA256
3447b7932f1906778f85691be5f0226de3cf0067e15a898e2932c9e72e0d67a9

SHA512
4fb75af9b38c2c4f911a4d64343a7007b8c7637afb24a66a37c29a764fe9de10e97c8685d6509e4494adfad7fb08c7974b45ba4aa3787035d4e431845cef06f4

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md

Filesize
3KB

MD5
5eef9ad46ec6af73c80ba15184db1ed4

SHA1
495a1b798b03a7574f5d5d37a6c64d7ed8e11cd2

SHA256
0ae4831887352d1ee65f057ee242b1e335d17b707c24fc88ce489207f8bd7ed2

SHA512
3120ccf5d084084d72ba4b90d048a1b29a9f2f9af1e9c1cb9c2911dbda4cd0535727e2345bdc52d4f03cd195ecf685bbb576195d510286e7bd0a461cd640b329

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md

Filesize
2KB

MD5
2155bd6183662a8acf1265a2744db432

SHA1
f221392842d90ac57483ff9548b783ce409161f0

SHA256
c188fa0d56a5379608bf49bc5c194a32dc1e66e16d507009be3336b62745cf98

SHA512
73499850fbaebff79dba437650fdeb9d7a2211bd344b5b8541c529e1fb8448a2b95528aac5e4ae1f02805091d7c1901e011bf1532f29a0bd533ccb05a3a17ed8

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md

Filesize
2KB

MD5
b13bf30adeb105c5306e277685191a3b

SHA1
cb76714ad62c2294eef1fd8d0a03ad58af27090e

SHA256
c7f7d700a67429569cf011ecd50a388d5519449110fcad7936bccb29ff396202

SHA512
f647c063676453eff204b915d8db410e9558038b6a7280fa93fde0b8ef9d71adce41b20b6f85f28504ef84acb9effd7141d9bc2c8134c97f8573c4c00a1a731e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md

Filesize
1KB

MD5
17a1607d3f90d94dc3345ca3a3e685bd

SHA1
a73ffac3bede74b9fe848b98ad29bd5cdd04a50e

SHA256
96d7d97dc2b840a5335c55484522597377f48b1d4150ab3274fa10e68c85538e

SHA512
b76afa7fa329b5c8a81f6dd7715c762477f5427638458a9ffe1a9b55ec22264d586adad567b80b023f090acd63934f39d5780004684a691859e4d700eccd791b

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md

Filesize
1KB

MD5
49ad25cbbbba3247f06a14bc5bb5fdc1

SHA1
40c2211751099584f1030cd02768edf51ce09d38

SHA256
b0f8325875f09e2479e4b3fbe4410f6edf29fecbb11a7c71a90f1aaddc56114a

SHA512
b8dba963ae91115a4b11959a05c2a79a96dba9600fcb78a31f7a8ad370f5cafd8a87c3b90cf5d6afab8ef74fd2801a63833899b8d3392cbdccc5568cbb7a3bba

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md

Filesize
11KB

MD5
e7b5e197492e106c1f593b1d24aeb0f5

SHA1
f397f07c91040549528c8f4b6408e16607aff1a5

SHA256
688d2d0c3da2525f6ceec6ec3940012ff8c85631138045c3ca82ff83ededa7d9

SHA512
9ba5916f95db4c0809c46dc7ee2c7420c531c61caf93c06b1631de42ee4c1f4d426f1acc3b91b8d487b0e7de327e6c196c332a494b05114f5301803b38eabc53

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md

Filesize
1KB

MD5
9509353f0b24e6a16109e6c9def47528

SHA1
88e49af0b85e540a38346d936a52ba728039f3a6

SHA256
a883de92b5b9479c98517b1ef8bce97fcbe16e76c50e3521e5c51e114b20247e

SHA512
2cab80684072cdf9ba410daf16bd276012de78cd5a94e49347ca225107186130e2de0910e7362305949d17582015a4630ff09d57addd4f3ea1c0e96c836c49f9

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md

Filesize
2KB

MD5
0cd38829797f9a6f6ad2ebe8769e3c7e

SHA1
f20c5bb66a39a23366c45348638ac92a9d39b523

SHA256
92ca0004fab7eec237a6adbf868a323a491e7cee9971a11780b114a57f0345c1

SHA512
e8079f5d09fdfb2850d2b0dcfb6c000069e01c50b52b8bc880bd55ad335504f178e902f3f01bb4cd4f31e052c6e153780b38214582ba7775ad78a7ecdd6dd3f9

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md

Filesize
11KB

MD5
301f6cbefed2fc3e40f29fbc348f222a

SHA1
27c93d863dac845b3828a9ec66d5fd48573f57a3

SHA256
ce4f5ab69b91986003ace554e061a64d74e9ec3883225182f366752bd4a91a62

SHA512
419f71abfb127290f54d57767754c398ef8ee68f9d0a2e15a0f773c0452253da8ed05ebf22bfaf4d9ece2da5e38af29232248f74a8cd4a48b933ba7d9fdb9ee5

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md

Filesize
11KB

MD5
f559796b2cfd9f045d851c26eb80003d

SHA1
9e4ca8db012732f2920f6db09d4b6b27d17b8e76

SHA256
21b845c4b87225d8d296a6934562a1ffc41152895042b9f6e0376039e3aaecbe

SHA512
23128205b67c72603596bb33b02c47b962198d1985a6fe61ab1e3a03b01d75dae460a4a352b9f981b74b8dac5f453a562f30359d7e0d1605bc9531216d035c41

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md

Filesize
11KB

MD5
69b7418adad00da4ef2d1381432dfbfe

SHA1
3128e6550b82b0510e11806f0a6d706b66ca7a44

SHA256
10d8d591255e7e0866590c84ca164af59794806972c5599b62a6b5c795a82d95

SHA512
380afbc155489a49b7b82f501a6b37b5d26356348283bdfad51a9d8b9d93f3c827512cb10f804ab1ae52b8e7d48f1551c19b739941795497236c2705314f431c

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md

Filesize
1011B

MD5
446d2d8e941c674a2afb0b31acedcf77

SHA1
71ef97e8a6f03cdc545ae9f885f1c767c3087715

SHA256
845db4bdb7cf9f1878b9b34eb826d4fa5d655ef22e1ae43daf190085cbaa0d70

SHA512
5e72418c9d65da193dbf6140d731974e5e88407569afb4db4fb134f721513df861bb5f1cf9197fc885b8faa0355e25ecbb10aea9b4ead8e38ef99f32ef1e5065

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727658720680492.txt

Filesize
77KB

MD5
f9f6f82ef106a672dec48817fcb2a28f

SHA1
082ebc9d8f74f10b657cf404730c3456702fde21

SHA256
e63c1f172d2ae87dc648d0296b58a950edc91d3c1d0907569801ed4cb4bdd687

SHA512
567546e6b7274f5862b7454cbd0546d7fb7ab6e93d87f70715ec36d01cac3af0c1cd6e1c944f62254732f3e1247ec1cf48e66bbee0afb562afabe330b549c633

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727659161166784.txt

Filesize
47KB

MD5
fec56e829d907bd7054f1564fad294ce

SHA1
85ebb634384223351fe4b689cb5e993b427bdd4b

SHA256
db41751528eb9db2349895f31ff620523f2b6ae7a45752b05d993ad89d789053

SHA512
2e28f9467dd2aec4b2dcbeab32074027cbef48d30e6b5822226533d4f51c7e8dbd13588695cd86229b6e592902dd88880568bc4afdc22cbb8c31dd96d79b7279

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727665191668352.txt

Filesize
63KB

MD5
2b209d3900ac777aab8f27a2021e5bb5

SHA1
e26f8d8e449b99cc07a7e9d30ab97bbcfe8bd2d7

SHA256
abb7c370b3ed9beec3adb8fc1a66d392d94349cae25cf2d4e039277389aef1b1

SHA512
709e91ba0b49e88083bb419ebecdbb7e7ec4890c00fa550fd2963ce10a769d7bd26aca498a3779a77f4fed736e41abb6e8098d2d10ce409ba4bd41d2392c5c71

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727667861810871.txt

Filesize
74KB

MD5
26078a4264442aa8d6c5cfaaa79642f3

SHA1
7837fd8eb1f3644cb463af5a3572eb473b5ebf4a

SHA256
5c665616583a3a3e941f105aad7e8122e2b63576061ac0a494c8d2d42a620452

SHA512
93556851ee01656fa34f0bf3a29b17c154b58e9e0270a014b129515483456cebd5404e5aa93b2c5cfd027d9cfee328ebf19d069d68cfafe01179df5991e380ce

Download Submit
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk

Filesize
407B

MD5
cc34a4d0808a83a401ccf31135c72f3e

SHA1
a312ce35aafc566d2b561e2e3de8b9dd5c6eea86

SHA256
2c0c088a0e4249ad4e11336b415e11a8e503092a25a811ee118b24799cc5c17d

SHA512
3e609d6d38d0787bd1b4da307c68a728256a7182f49dbefd170fc76400a6f40adebe5c0255dd7d8df02a3e42e46773d0f8bf74183f4090cbd4fe929817040a33

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

Filesize
21KB

MD5
ef47d9a8f92d3fc6d42b022cb11ff63c

SHA1
4d2ee6271a1f564becc3b50861192b9bc2d710a0

SHA256
57dea52e26cedcd53763497201d385ebdb9eba88d36cd54270e878141a79570a

SHA512
6305f37501d1f5748a17f29ab2953ed3e2cb2c4aface362f787f02ed67eaaa62a710ff71506b926e611574c998c446a665cccc833f53208fce896fadb19b221c

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

Filesize
1KB

MD5
68db958b9a2ba1528f02f1b92af973a2

SHA1
f718b45b45a8b0bcc5f0a053721522a74443c3e2

SHA256
027533ef3663fc5f6c247a04fc98d1df7d8f0bdca1972c1967c9897028bb57d6

SHA512
f66dda6d5af085311152847434da98f5c213425dbb12aae4bce68bff0662a285d4909ab0b13f9fe0ffc05b6bbd86d86af8f862456d6c72487177df57eda9727b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_lrg.gif

Filesize
952B

MD5
db03cb7a2f3679e11c9915c1f28b60d3

SHA1
ca11a5eb8bb4fc8062c2237ccf4214759aea587e

SHA256
b52f0d09c6ee08c6f77940fc7c49a5bad551039e8f03858a0021da098a104bc6

SHA512
cef5db909162fdc99bd3ccec498ce54f4769d61c648fdcb6fd44c3f46761549e1588eaa4973f830aae5060dee914687d77515249ad2512babdf9fef58d6e2180

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\aspx_file.gif

Filesize
121B

MD5
efff91ca01701e4f25cbfeb1a2667cee

SHA1
7a9caa9334c9ce080a784ca15c74cbcb6fe2d2f2

SHA256
e0bbe01dfdec5809492b1f43a085667f8a71c8ed55af1077f01cd520ec7da227

SHA512
a121bc55fd6de21c40e4138787967d26eb120c075c536be924e57dbacbbc2d719fb1ac51cf9a7052d748262aa31d1a9194368988d772599c547768f0cdad1514

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\branding_Full2.gif

Filesize
1KB

MD5
ab40dcab51b2955480c2359277733de6

SHA1
6d137c44f1ca24eef07196241a56571a3441d229

SHA256
51d045b6706f69945b66690986a745ff8eafe824911a4fdaa7e2f0e177cdc279

SHA512
804cc62a3cc0c3291087f1a4f8394ae1ba2c5e83d25dcc81f0200328cf203a89fc38f36b4df02b0c1909b4e3aa13643ec0d63703365aa0770e343ba9471764ef

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

Filesize
8KB

MD5
fec828a807f4564f143ff76ff9fd8483

SHA1
7a8bc21c407556215d7a1615f22b1d361b98bd49

SHA256
de680d50f0a29a5541273cc9f333dddf59bc62370443ce89b0ead394f606dad3

SHA512
247260c1db8ffacd02472c2b92c198bea141899aae5b7484f1a376e9f8f20a49ff049564ac1bd89b6c94935a7f18f0ffc65d67e872d27e311ccbdb336a46c7f0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\deselectedTab_1x1.gif

Filesize
61B

MD5
5758f30cdf8028468ad333b219c01191

SHA1
53b0adaa8ee98d84e17384fc4796b785d4d030a7

SHA256
c777af9291e223b55cc91c8ceeb296765ecaff33d5b7b82933bc272b71bb851f

SHA512
72382b80ef56524cdfa0c4185f453aafc496480f399cf7eecf9b51444225486dee076ed03b9757834485e5ca3cb2ed29ffacf3a435e68b8d5391d73b69bb17ce

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\folder.gif

Filesize
914B

MD5
8157f7a7e6171f19f751fffedf37293d

SHA1
3c86dfa7a8b8e4eb90942aa193d94d59df299879

SHA256
d220e46cc014861720bd786c1a120988a79aaee83eb619deefc0b9296333f8d1

SHA512
c9d06fbe004c712a28a97402265df6d90ef1cbcd5d7e3f44be4aa15932382ec57ed733d1ccde4bfdcba7e345b2a2eff9c47fd9b8c2fa23221a528653ee5b5f0f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif

Filesize
90B

MD5
b93933a186bace5a563ab13f28eed71e

SHA1
fd357936ddf71fa05689b51680130e8822b5491d

SHA256
7787f759658a421945059c389b32e8413927221d6355aad04d9c4e6ea76383e4

SHA512
2d48bf6d622201fad0cd3800cde08ce9a85ba1321b458493e64205eb2fd8de3051a415f0615e40081219e2ccb9c8572e79a87b27c4964d9300b41640c822a4e2

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif

Filesize
90B

MD5
ac3758b250653dbae200614dcc20054e

SHA1
423fbc008577bcc944451a828fbc188eabac7b48

SHA256
1e386fff514d86a42de994f5ce0cef721f2957b90ce6ea90501f6db62804c794

SHA512
e546a28af7417363fe426470dbd1078671d39b75379619a3ad0b0bf849aab37c797d95fcbfc815d22f487f904cd708712c11c78a3616f00265f89be02152104f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif

Filesize
328B

MD5
54af78b9059c9f28072e97e18fd1bed2

SHA1
4cec7767b7c64bf093fb171d84cfeb4c9288d6f1

SHA256
f8a8cee58f82b06132c5fe3d2f3f0be9281d164698f466520d70b3dbc44137fd

SHA512
d8354446f3310613c3dee955858c482e648bb76222211d1f46a01067bedfa3fcf14db2e43d3b46e614030eeaf782ee6a8f9a5825abb0f008439ef1592b78f880

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\help.jpg

Filesize
1KB

MD5
48f1d6594216b62f99b03a5fae9040db

SHA1
5f45581aa01919b55028ab19e82476b15fa66dc0

SHA256
41ad552daa57f9ad077442ed67d9b4e2a1d8bb43f62d1e079bbdf390ab348caf

SHA512
9a417e030378b1df0db2a1b02c52d0b12a5167ddcf959e437fb09dddc70a0dadb20ee18cc5905cddbd188da5e2ec8b60693f8ce7f6bca0057327dec6a915c9cf

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image1.gif

Filesize
162B

MD5
8116826c10a0723e5234a660b33dccd3

SHA1
defd21efc7b0ec9f5ff635a03a3bace1e5729277

SHA256
d8b286b3ee984a9d8e55f8501e4d0a72d7ed8bbff6bf93dcc197a971d6106eee

SHA512
9c9b15ef51004bab9d86d467a9b49bb8147c54de559af11d409fec9d42f78be2456dbe8312ac5057868609a5faed13eef5efab3b6c02dfa2fe874f346485adb0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image2.gif

Filesize
586B

MD5
05c3b5222a31ca7823298c839c176497

SHA1
107aaee28137f4b5933bed34c41b80d7f14d8d99

SHA256
8d68c1a562b375fe773889d534adce635f45c0d323b8833e9c6a132ef0ad54a5

SHA512
ac852c390d226a849fdf0e90c038188c4798198edb8c0515a2bb37eb3e91563541a0e75e062300509a849eb4cccb804230880a1b26a9fc99131c1a836af7d374

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\requiredBang.gif

Filesize
124B

MD5
e788c6a63e1234886f973a984c345ee0

SHA1
ab96c1c8e80b63b58d2f253452dd5eb3df9a05dd

SHA256
c23017feda98bb6393bed24cbad02ce61b7f4b2ac4326d348090cdae6c990e5b

SHA512
9e8c1b03193892149e08ce07f935e673f12514961bf298e0fdc3133ac3323ba6f6b6075c028199c25418aaf2f3fbe18c7edee9fc4069aaf9e53dcb2cb29c715b

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_leftCorner.gif

Filesize
65B

MD5
6b5dab2eaf8c484de58283691f665b77

SHA1
971c9a8140c2c14ec436d84c5cffeccc79314a46

SHA256
8866463fffe6d23f3e2dd9998949b26b90a38f04a13cf8d551daf6c8579079d5

SHA512
aa54cd40db1834c70d0b41ff6f7a9730540447d4bb6aece7db94cf9f9e3e9d3201de80cdf63ac68bcd538cc792ee6f35e5c7791050e594f43ba424eb7d26f96a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_rightCorner.gif

Filesize
65B

MD5
a6459da35efe3a6d45898e8c205ab015

SHA1
3cf9b43b412a75202ed827351e2151ce972d5abd

SHA256
2a8e8a056a9d7d42b19ef25e0a7ea173c9b43b0ae446fb92e61350f1afe1fe8d

SHA512
25e269286b0f32e376bec2468252e3dec85c1bc33099919165bdf1b5fa25dd9e9a6c0c23a562f8f6c5c1adf44ee663db33690c38023b4ff8fc96f7691b041fa1

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

Filesize
8KB

MD5
8fc4b733b6f15dda24336d67ac01665c

SHA1
7c845edd1a454f7300684711918f519f8d6d54a8

SHA256
5c92bf70c385ce5269137ec3005d4621813f5ee7d8e2f1234612227831167001

SHA512
f1acd926645df51a19bc68c8722972a011783702191bd19bf0e1b9f9b8c503bbe08d513c09d2877e2aea9454cd69d8ef858aaba753079a5c894974130208a2df

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\unSelectedTab_leftCorner.gif

Filesize
65B

MD5
4adfcd10a54f66b99e0be581cb6e7ee0

SHA1
20b5e3b445920d113c722e0b1abe22a9ebd349d2

SHA256
8e2508dbaae5044e7a309c3005962158b59533b26892f1338e0c5fdeb09cee16

SHA512
0fcbfd5444ef47e3b68584a2da83d87faddea0ab0c976786f32c84f940f6b412c4fdb91ea1909edfeca7bf4a078c0a40e5c7d325a775e05fea9ba260e271716d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\unSelectedTab_rightCorner.gif

Filesize
65B

MD5
e0f5968bb5921d0b18a146f8da5e6cbd

SHA1
1ad771c6f801e8f094659c3485f21a1f41286641

SHA256
19f61530cc1ad1104001c85a8c28c79d04c9c98efbba8eaa92a3508a4150b134

SHA512
274a76945f1be8a342fb2c9088e29fdbc7371d958ded4dece79a66eb6d6a649bd369714c4b2ae05928e35684502f829b28470491bf6ba1fe8a4a5d8d93ecbe74

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

Filesize
880B

MD5
0e5b3695062aedb22410a37517b5d320

SHA1
74db0ce159b35a3e43cc422488eb1ea7a663f19b

SHA256
37dd44d673663ad74c5ee96e4aae7bcae6233ea02369c49a6a767680b8724fd4

SHA512
e7824ceb03883f198a1fb24a2712eb904629d8961b7bc52897f62241f7e7fb868c81aaee0ca84fafc9442eafcc964745f7691e81c079969e9a8b9cfb64159afc

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk

Filesize
1KB

MD5
9aebe9911697aeb84e31146417e6dc9c

SHA1
99b35bd77a3a25cf8b0ee3d27a007d4116549cc8

SHA256
f2dae57a56cdc823750c567417f3582580a135082219e20faf198cd117ab7d43

SHA512
d5ce610ac8226b313e448a109baeaf9cc3e6d529b40929fb62771033db913abfe7773d36b2abd8bd55edf0c1b058d40d319a33356ca0f0394b149fdf320b2552

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk

Filesize
1KB

MD5
a3be1dc3f78ffa071bb78711091e649a

SHA1
65ccbbf3d4e95e4d47bd8629899f510d6f772b16

SHA256
5251f997cecf727241a11774ce259ce5fbd93da9803d94a94f60ad14d353dd7f

SHA512
b353325e5bf9a79b4aa7afd22527eab9f9121db81439ff2e63bb206571a967d3b170b0ff331aab4b6644592da3421144072255d131a305d3ef3a35af62f53fd8

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk

Filesize
1KB

MD5
f18e05bf49b6df8150c9da1a9ee2724c

SHA1
579450dab3c3ee57e7fc73047e4733fbe4c2554f

SHA256
f7eca95cec09741ef8062bd234150f511630219475a1cfca391ce2fa363dc4f3

SHA512
a3abc4e8f0dd21aaf536bb119c50f9c5baf6d2c9ec3e472ca07ccffd2f1e49e8ba91a202d3503bcebbc6a664191cf7365c360dbf632acb0f4405bbcf2fb88700

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk

Filesize
1KB

MD5
b96a9b5ee99816601efb81f766f7b404

SHA1
8ceafea2532a95ee112708516b25b922e841d79f

SHA256
4f4a3bfdb8458f83ea2e60c2179406d3cc68a8d27d15ae18ecbea1c2a558430f

SHA512
d3189088f37ca8fe3866d6c0e4403577c59f8fd41338193256bfae4247617fac77446df1aba345effddbffcb3041dbfa398e5727895f45485ea81f78508f4e83

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk

Filesize
1KB

MD5
356752e4d34e8aeb46ac7be104af2861

SHA1
27d39d5c48ac934d8ebe722a06a95bf1b315ad23

SHA256
dd581c40220f95b8d6c2ffbbe24fa7165110a9cf621d69c6a45dec363b3f7f96

SHA512
31c4a74b974ab749dc0c866bcc1c170a3b0c240d93093445c7bac476e715509fa667ef2c5665d86e800b74dcd30e4816a21d09f149705640735a8bca378bcc9e

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk

Filesize
1021B

MD5
f281b9a19ea1e25b1727da09d658ea79

SHA1
536c052a6403ff846c57ef7d51afb66ee7c518b0

SHA256
7b1039d2dcf08e4ebd6f72dc44e752d05213f67a93e492951df512acbf1c6281

SHA512
4e9960d00da380505e6a82335644e68310e5c62561a9a2707d94f60f38e5b7ed8123c2daacd1a5310666b4108480483393320a3af485fcb3db33344f3cb78f1d

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk

Filesize
1015B

MD5
f86bf1b8afe2ca6d0f5974fb07b09f2f

SHA1
2703def8e2524b4fbd244f63ff39bf90f8e1d30c

SHA256
55b2a403c0b2dbe1c0b19c0684afb31d8130aeb74a66799f9f55aeb3cff8b6f5

SHA512
ac424435527a0e2025f15dab0e992884a2ca6ef019e7847082f67bfd2074374dc1a1a581f445e4ac86bb707c0f5755dfc83c45f0f076523b6e4c0599511b768f

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk

Filesize
1KB

MD5
f360c007f4aecfab8cb3a44568ee1fe5

SHA1
f6ca42b1fef797deb43fd0b5da319b46fb2e9021

SHA256
4fc70ade59e09fb19e6f28e4a97a8feffa598fa38762fe8e4929f5024cd381a3

SHA512
2b77fbc06fa9f37e7c3d12fe909fd20512d67fe586c4401e7f4fd52b29904424ab58762432dc40927deb23920f944261a49e39dfaa732c20dc4f3016aa198322

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk

Filesize
1KB

MD5
86e09b199b7ded86dc9bfd09b1a2fc47

SHA1
978f2d1624cfadad1e6e37a5377ceb1fdd8d761f

SHA256
2b9aa6ee9a066a22b54e36c69782dd4c081ef15e2a37397d754e1e7f7c5bd74a

SHA512
1f160c55472c404246aec3dbf9d3ddabc80019dc38ff94d8bd315b7f625119efade331de16018e659d4ed59a65e2c32c7a8f810d35eea3f1a855b458c9876311

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk

Filesize
1KB

MD5
184c6574e1beaafa7aacb6a6ba4a9b6e

SHA1
23c1168b8e8662c54204567fd7c8065c800c66c1

SHA256
11e489485c8c7bd3f50d07d8852ed2a7fcf0ad1150038a55ee9178372cb48334

SHA512
5f69acdf95ace2b19b687489f22a0a92b2e92ac94833fe68d19e5333471ab2eaad8a92a08072439938438322f5cc2735bebcdb990f781eeb4d838b5abd2415f2

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk

Filesize
1015B

MD5
6c40c9ff405cb97084022df4e4a5e56a

SHA1
9d98da6bc698a332affec9854a2a451c3f29363e

SHA256
8334c52c5998a12fba5e8eb75de4ed163679a2883900fb01ef6ecc5128cf983d

SHA512
794610619667f4aaf9597dd8785d18ce5c3b737bb8ed16ce08da666a00eddbf08ffd156f374953aec2e92dfc135f3b985b3be8681924450bed61502cc47bb393

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk

Filesize
1015B

MD5
75550d13772c1478e6859439d0f5205a

SHA1
2f9b025f9c621141c9554029819d2b7d1a77835d

SHA256
d0baf08793a0910e6df0996dc293f3102ce54eb4d7b4808bf03fd2cac81bef1a

SHA512
f9aef1c2ff788bf89a8ba9f7905b3900ef93ad2c59d73bb0dcffa0d63d4f6befc30a9d4452dc476c5c2f0891f0dae7bcadb1cbe37f65a5af3cca6a39d785fd64

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk

Filesize
1KB

MD5
1a6041793a06ecca0dbcb41d388c568d

SHA1
944909c6323edf40dec8e3c24d2a2518c239fc02

SHA256
70a4f84aa87bee0f41898446cdc88c9834ae1ab384304a5dde225e521c538a72

SHA512
99e5d51f674f37733ca4abd26cafbcdce69f41f551cb9025836a5f75736c1622be2d2e546cd246bcdcbcecbcf085f1b3fbedda8f06d0aeecd07626ab4e965d77

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk

Filesize
1KB

MD5
0a42447b4351e814cf1fe860853fdb4f

SHA1
bf744fefeeab9ab4118e474c9c7f85a3ca4b00cd

SHA256
7c051f845cab68ed98e9599c4bbf33d88cdb13cec42c697b6e26fbf0dc3089d9

SHA512
2c821688b6467f88af6ced043a31c3218bd5621b57bd744617cf2f74e831ad61b9e96a232b09fd87b8de72420a4e109a6e4af9089ccdd0cbfecc306b48b02b5a

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk

Filesize
1KB

MD5
6f19825cd68b67f9a73ebdbac1ebee5b

SHA1
5956926cf6fcac437591659cdd065e20ec9df06f

SHA256
d72185ad18d40f4fe95b97b3f773e5c22bd5b1ff99abca70b39a77dac0095666

SHA512
399be5a020ee21f480933a9c7dd6b00d163855adf745da7b85d97fb54e87718710f7c3dd09d7683ede5b5b6685731e3afe69bcb2222274b073c57e04198707c1

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk

Filesize
1015B

MD5
60a3c8614f35ca54059921b2c9340696

SHA1
c0aeaf9a2a3987f82bb973383b05199af3f6a98d

SHA256
e5e61391a4c4b5f67cd29b625eba6200ee99880809ace12830ce175bad599b51

SHA512
cf12b7bb03a9f92c0cd8c9eb42f513cecfa9a1b45169fba083a12b58a4e58d048b0583f2768c5519b98aebb5e9c1282038035b64a06bdb827f22c8732b1f4e7f

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk

Filesize
1KB

MD5
f21a738e003b83c34204000bde030e43

SHA1
fcfe38cb85abcbecb69880ee0f47ab2bb55d6654

SHA256
8294feb67a9ea2dccceb6f19a1a6f22d2e427e6ee38b3a459d2981f1f1d53ab9

SHA512
8d4b78e31d11cdc5324cd571e6451aa8fabb57ee08800e220cfbf31496c4e5e86009bcf63d0fffacf3c1f5b357624f666babf5086e687ef46605d38fc53349f5

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk.EnCiPhErEd

Filesize
1015B

MD5
910bf9444e1723c5286246ad842714f4

SHA1
dbfbf50b319e469c0c2c9982fd25ac411dc60582

SHA256
44020aaae0aa70269e4650360585b3af7a72f17aca7445ba1434b24897ac6c97

SHA512
9b272415847bde5709d97726bab56e10e1eac3fd61d2fa0b1fbbd33fcaf25a1ad967ee347c7f01bc5ce612d11a90e7f73299d16436b499f58ecb06409de1373e

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk

Filesize
1KB

MD5
5b66546b7a9e79f39840c04aa8e6356d

SHA1
830fe3a0d018dd480e1a8986ba2ca0f263632067

SHA256
cfc7323f86e45b81c652156e8b694bb4c7fadfd57f1e574a1eb7891dcc6d0c75

SHA512
2144af28d301d9668feec4374d908898929915c20ad376c26af3256cb32788210fe188d29865b22f0beedffdf1db04b9b2bc79d7ee7894ac210a4da1c6ad6c25

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk

Filesize
352B

MD5
24f15cb00903caca810657a07d1c4c39

SHA1
9bc926e70834022176ff3616c881059705ec1079

SHA256
34c19bf7e86c4ab116a661720861c3e6722ef2584689d63b4ef52d8bf59c493c

SHA512
245e8370cc69a44210b4f0df22de8cf700b4b8eb8bf7a8bb3a77d3a7033864d674438ca23a68d7d976072538b86a06b76c6bbb63afee031eb53b9f0e8c31d34a

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk

Filesize
334B

MD5
db81667cc59e169a3aeb971b85e8ff0d

SHA1
91467653f49c0dea926b925a03794bbe7e9c21d5

SHA256
d824204574dd98cea2bfe275da852395a06b6bf02a749b14a92e9936c5d3cd22

SHA512
47a6b7cf1b01337d886ab66f5ecd334eafc43feed5afb6d57a43215e7298cd848d158866e0e7fc264f3c90cc54e0e7f1bfd1a19ac7fe4115c47ace3587ed12e4

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk

Filesize
1KB

MD5
50d4238a9ce30101bb2fe9037f10b458

SHA1
a88fb33b3c951af236a74f26ed5852c9e4e391c7

SHA256
0866528136d1825012094111e045982902e3fdcb9014bdc4deb7d851f395b5c5

SHA512
522ed86b73b1cc08bd4288b4fed651a238b7d0dc854cc8916bbb41cc848e5079eb4b3d4c38109ad0c2bb495b18813773d2f1b0c7e6371043ecd3462b9f723588

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk

Filesize
1KB

MD5
69f68356a132a80fcfc0405c89b48074

SHA1
bc17a0fa45e026ca06f5c507779a53e421532215

SHA256
1395e98b01d967cab19548c412f87eea366f75594ee08b5f891e5c2d8703034a

SHA512
1e21514b08ced5b4b59a73430231b2f7fd4d933249699a070ab50349135cc7e7dcf493665b3e5c3273e7730849ac953194b507f960a6d73e7f3241d725556ba5

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk

Filesize
1KB

MD5
3e43b8bca79d8500a612afd5421c56e7

SHA1
baf51270a7b08d4bbb3d747c206e635f711376ae

SHA256
fd73a6f0799e2ad68f0d14435024a4d8c9f5bfc200a0d2e62db4cdb0a548a0cb

SHA512
7a934107e2bf9f2949adceb4c4049ecf8b2732bca59d59afabd801413e288cf150b524d0ad711619cfce352e6b9393843c234e3a797126ec89b30484562a9382

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk

Filesize
1KB

MD5
73ed55b0d19c54b58bbe8e310ad2c7fb

SHA1
65a4e9231b4ca83476e4c5fb0c9ef5ffec51085e

SHA256
87384e4d425d9561e3fb5374abf166e845d056d86600cc4fb523e312dfcdb9cf

SHA512
8e518295f3a849b93a151d888b5c94f690729a6a7d8608f52d5e4e77a472a20187138e87ef60b271df47c9e638bd2b60e011d6748421971b508f26461a5cb403

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk

Filesize
1KB

MD5
1b48e216bd07a4fcf24acb1bfb2b2057

SHA1
f8641334a544e7b06991a9b367bef14603151b60

SHA256
082c2e4b5454cf756730feba52395e56bb2d6564c24c566bd6d26aa31a191b37

SHA512
09e541cf9d4fe68a53fc5b441cd9cca021c33a9b83a272edf4c2c5ab5567b18ceb4510046025fe0ab931d054ac5cf8e22c799a67f8a9786c45dff935393fa513

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk

Filesize
405B

MD5
7f8fb5941c52ab9747e411713a8c1698

SHA1
3f4845a175514b2d40755bb584d6086f5028c6ab

SHA256
f590d604e5d59f2972f19a7bd54222a9399fa3228070303593b0e7895d382c1e

SHA512
a388464b96d75859105681b4cfdc6977d725342e1a881cbb0a0c14683c252ae6aee8ed03b3a9b5f45f2b6ebe01a5b841a782ea7ad17fc30c31e22cd9114fad2e

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk

Filesize
409B

MD5
dd6c038d362cafc541344a42887b7ea3

SHA1
5fdfe6e2d899d4de17d27691df0b9a4685bebfc0

SHA256
c3b681408b112741c6643c417e6467dc04b0bdb0951d9cb64357af6af2712b61

SHA512
6a3d58b140f9424f9cdbd7bf441a8cac6a86d1c48c1f477e66537e4c278feff31ff8de13c6df393ac83a819f3bf62e035a7432e4cc8daa7ae950ebdfb5fbfdf6

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk

Filesize
335B

MD5
9370353dada470f7fa6f36e9725ee572

SHA1
8ee04b4b55a7c378b6b7299890aed3ad5d5fa920

SHA256
33b0840839146283865c27388e974272c14283bf9c71931a7dd62279ba31152d

SHA512
6735f6fc2f7443ab3525434d47bf2a6999cf5d42ec5831f2371940f7890b3a1f12b2e9f1337b4afc38299f24e7c7f6b2026811656c7be0fa686fa6e1fc19b7c6

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk

Filesize
2KB

MD5
99d5b10ead67b8676aeb18d04b83b7b3

SHA1
1369d12aca4b5930808ca44cfa9de15064b37a28

SHA256
9a40097edcde0d5437bd71be52c29e9ba5b15ef98ba0b71e50d67e90ebe422da

SHA512
ddaaff20158eb36f35e93c2d619aac0eaaba821a1e0743809952270fa9737713fb6608c4a93291293a552e5cfc73ea1dae08bacfc0c1bb98430a6ef58dff77c5

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk

Filesize
2KB

MD5
2c96705493cdcc09352475afb27d694d

SHA1
d3068203b7f0f2c8d73c6ecd49d80e81adb46807

SHA256
b3e59fdcf0bc70de7a8ede680548a573a46aa6cbdc501abd02ddf78ae079743f

SHA512
59a46e667fbc4f31a55e6e9732bd67961d62eec85e481696b006145644c6eff7a039e0591ba035e6e922db3aceb26e6ee1a094f43d7a13c3621bf09dd9c8063a

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Filesize
296B

MD5
dda3a55fd3f10e52d6a4a9ce48cba603

SHA1
5a5052f78e88251ff989c79605bc95dc145a536e

SHA256
668533aeeb6b76e94b1250b2327c8df82d2129c01237b5ae091cd6025a3a9044

SHA512
ab6acee80b4623d1da9a8406a21ecc308e276558bd7623514f840e57c808504a07622d80c1c79d0dc859c28ba89eed731c909f60943dbbd02abb060c73be4d6e

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_contrast-white.png

Filesize
276B

MD5
9ffd079789ac1dae84477fda19555528

SHA1
471fb87ea3374a3c31cfd247d0ed8f833062e0df

SHA256
3d4c8dcc4330ffa2ae210bf8070b6ffb16dae652c132444b4b203533afabc807

SHA512
26fb5ee7be4e7a6bb5794f19326c453c01f4febb302eb223f8df058e6d7e764295e4e19ceb136224e1dcd19da00cd0e0fc939f4fcd5090a9fe5de3ef9ffe7947

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Filesize
296B

MD5
2cc16175c8c8484784875d5cdf0f7750

SHA1
bda4017363a1df585fc0a7e8e3b6fb566ff2ed9d

SHA256
e888215f887f6487fc6903cf86fdf4b9b7389143be1d7a7e457b4e31ecb0ad86

SHA512
31d4883234c2b47e3f748c0f0f1f0575b45ff9cca41f0a2821cbd8b2f5e105b085c05eb855a038f7309069a7bfb82a532a2a2ea81f6960f9747b5587af3bd820

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_contrast-white.png

Filesize
276B

MD5
a658a5339bb9c60f63ffdd1c12464b16

SHA1
84ec9e28e9e9dc40a9371d46bc7049e36fecd1d6

SHA256
6cfbd6ec3ad8f07d74b2c8f240f35e58b07a78ed8cdbb367920a2e7210177c01

SHA512
e6f14d4c1ca18ba289352b7c64179b409974fc7573a96ddc2000c7905ebc3fe4adadb1140576656e6a332d0ffe0f8623e68da157764bf334966a5631bcc1cfa7

Download Submit
C:\Windows\WinSxS\wow64_microsoft-windows-onedrive-setup_31bf3856ad364e35_10.0.19041.1_none_e585f901f9ce93e6\OneDrive.lnk

Filesize
1KB

MD5
a4dcb8e305d0306712ff142aa8acf70e

SHA1
18db5bd8cd20ddf3730798b92421a20ec6193f02

SHA256
a076bd7ee66391a189dcce488e9cea5820f576fdc9a14ddf7261c9767333f0b3

SHA512
a043ad866979a5b0d24908970cc01879ec953e6b44b382803eeea9fbf57b4e040ea90ede3da31ef21dbbf3f4b49e875b271a1c088ec7aadfa640d5f097395505

Download Submit
memory/3320-3923-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download
memory/3320-3588-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download
memory/3320-0-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download
memory/3320-4298-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download
memory/3320-4321-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download
memory/3320-3587-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download
memory/3320-4327-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download
memory/3320-4328-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download