3b0a71ace290b700b9c77b6df1cbb8ac8ec0d2445bbc6bf2680bd4a578277c9b

Analysis

max time kernel
93s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
08/12/2024, 16:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
Size 12KB
Sample241208-vaycbstqem
SHA256 3b0a71ace290b700b9c77b6df1cbb8ac8ec0d2445bbc6bf2680bd4a578277c9b
MD5 d80afaaeb842ded0c6fa15143d909ccd
SHA1 592d790d0dc21a4f1148147dbae160a253607acb
SHA512 24cb2953c96a0aba9291e5cec18a9d6fecae79e2b161b9b6812862bd0a7b7d728a7a530910dc35c0296b18a676bee46bc3b670f98bac7cef1fb24cb354433d60
SSDEEP 192:G/TrG62a6B10k3g4fXk1iTV3HGc7EkpAqEjvu2q9C/YpXnAITZfPtRMtvM:GebFNw4Pk1itKkpAjjI2Ypdmtv
MD5 SHA1 SHA512 SSDEEP

Score

9^/10

discovery persistence ransomware spyware stealer

Malware Config

Signatures

Renames multiple (2180) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Drivers directory 9 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\drivers\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\drivers\gmreadme.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe

Drops startup file 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Alcmeter = "C:\\Users\\Admin\\AppData\\Local\\Temp\\8k93yDRf12N2G9W.exe"	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe

Drops file in System32 directory 64 IoCs

description	ioc	Process
File created	C:\Windows\System32\DriverStore\FileRepository\c_image.inf_amd64_31731e48047fa274\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_legacydriver.inf_amd64_c07aa9c633b5271e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmgl005.inf_amd64_d9886a7bbe9e55ca\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmvv.inf_amd64_26dc960cc4c84207\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\wbem\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_UserResource\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_dot4.inf_amd64_55905bb33692cd84\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_pcmcia.inf_amd64_92be188847324ddb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_EnvironmentResource\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\PerceptionSimulation\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\DnsClient\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Com\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Dism\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\itsas35i.inf_amd64_4f5850c71046b0cb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmpp.inf_amd64_e196624c9ed43e83\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\urssynopsys.inf_amd64_057fa37902020500\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wsynth3dvsc.inf_amd64_1a08a3b6cd493e1f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_1394.inf_amd64_cac08af12caec647\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\tsusbhubfilter.inf_amd64_283a44fe508f0682\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\ws3cap.inf_amd64_6cf8ea2249844b50\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wvmic.inf_amd64_ae02676ac3e3c474\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmnis5t.inf_amd64_c6e181de81a59b54\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\multiprt.inf_amd64_a9b96d6c7813082a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_EnvironmentResource\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmgen.inf_amd64_977aa23dfab87f15\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\unknown.inf_amd64_b8b0fe7bbc76405b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\whvcrash.inf_amd64_1173082afb4becfd\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\en\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Schemas\PSMaml\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Configuration\Registration\MSFT_FileDirectoryConfiguration\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\bcmwdidhdpcie.inf_amd64_977dcc915465b0e9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnms002.inf_amd64_2176cc45624119a9\Amd64\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\usbvideo.inf_amd64_b401376fd0a39c95\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\oobe\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCClassResources\WindowsPackageCab\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmrock4.inf_amd64_bc507add47f436ae\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\volume.inf_amd64_bfabc750039f8ac1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WaitForSome\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmlasno.inf_amd64_61370f3a47f08ebd\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AssignedAccess\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_scmvolume.inf_amd64_de693592afe8a496\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmcodex.inf_amd64_f5594a2af66d11ab\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmsonyu.inf_amd64_0e77868deff0b0cd\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\EventTracingManagement\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\MsDtc\de\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ProcessResource\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\MUI\040C\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_wpd.inf_amd64_0245a364d71cf6b5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\hpsamd.inf_amd64_0784fd3ef0d7ec93\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmgsm.inf_amd64_d7b1959484ec8228\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\microsoft_bluetooth_hfp_ag.inf_amd64_d2736f1d9bc815e1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\migration\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\F12\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\de\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\ehstorpwddrv.inf_amd64_220e4fad6c84d016\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCClassResources\WindowsPackageCab\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_GroupResource\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmtdkj4.inf_amd64_3bc71c4327f9f94e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Printing_Admin_Scripts\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarWideTile.scale-150.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Car\LTR\contrast-black\WideTile.scale-200.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.UI.Xaml.2.0_2.1810.18004.0_x64__8wekyb3d8bbwe\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_x64__8wekyb3d8bbwe\Assets\contrast-white\PeopleAppList.targetsize-32.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\contrast-black\LargeTile.scale-125_contrast-black.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.1903.1152.0_x64__8wekyb3d8bbwe\images\illustration-UploadToOD.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_x64__8wekyb3d8bbwe\Win10\SplashScreen.scale-100.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\AppTiles\contrast-black\MapsLargeTile.scale-100.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\cloud_icon.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\multi-tab-file-view.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\nb-no\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected]	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\cstm_brand_preview.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\themes\dark\dd_arrow_small2x.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_x64__8wekyb3d8bbwe\Assets\contrast-black\PeopleAppList.targetsize-40_altform-unplated.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\contrast-black\SplashScreen.scale-125_contrast-black.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\MapsAppList.targetsize-20_altform-unplated.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Car\RTL\contrast-white\MedTile.scale-200.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins3d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\HomeBanner-4x.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\167.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-96.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-36_altform-unplated_contrast-white.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\GooglePromoTile.scale-200.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-96_altform-unplated_contrast-black_devicefamily-colorfulunplated.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\pt-br\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppPackageAppList.targetsize-80_contrast-black.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\GetStartedMedTile.scale-200_contrast-white.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\BadgeLogo.scale-150.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-white\PeopleAppStoreLogo.scale-100.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1906.2182.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\AlarmsSmallTile.contrast-black_scale-100.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\close_x.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\assets\Sample Files\Complex Machine.pdf	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\sk-sk\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files\Microsoft Office\root\Office16\1033\Bibliography\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxMailWideTile.scale-150.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagementSource\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\ro-ro\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_x64__8wekyb3d8bbwe\Win10\MicrosoftSolitaireAppList.targetsize-48_altform-lightunplated_devicefamily-colorfulunplated.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.1907.2471.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\ScreenSketchSquare44x44Logo.scale-100_contrast-black.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\WideTile.scale-125.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxCalendarSplashLogo.scale-300.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\Doughboy.scale-300.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1906.1972.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderAppList.contrast-black_targetsize-36_altform-unplated.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\contrast-white\SplashScreen.scale-150_contrast-white.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\204.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\MicrosoftAccount.scale-180.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\AppCS\Assets\ImportFromDevice.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\EmptyCalendarSearch.scale-125.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\SwipeTeachingCalloutArchiveImage.layoutdir-LTR.gif	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Home\LTR\contrast-white\WideTile.scale-100.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-256_altform-unplated_contrast-white_devicefamily-colorfulunplated.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\cs-CZ\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\pt-br\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-white\SplashScreen.scale-100_contrast-white.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\AppPackageAppList.targetsize-24.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\Assets\Images\SkypeAppList.targetsize-32_altform-unplated.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Collections\contrast-white\LargeTile.scale-100_contrast-white.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\hu-hu\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\zh-tw\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-040C-1000-0000000FF1CE}\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files\VideoLAN\VLC\locale\nn\LC_MESSAGES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Logos\Square44x44\PaintAppList.targetsize-24_altform-unplated.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\share_icons2x.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-i..sbinaries.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_414a0942eadc3634\403-8.htm	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-tapiservice.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_66d01a31af21461e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-u..trolpoint.resources_31bf3856ad364e35_10.0.19041.1_it-it_9afdb9a332b0dd95\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_netfx-system_tlb_b03f5f7f11d50a3a_10.0.19041.1_none_4bc8451512180143\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_system.transactions.resources_b77a5c561934e089_10.0.19041.1_de-de_ce6129959ad0f8da\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-s..extension.resources_31bf3856ad364e35_10.0.19041.1_es-es_a0931ab5939b74bc\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_system.runtime.remoting.resources_b77a5c561934e089_10.0.19041.1_de-de_0ab77cfbefa728e4\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-i..l-keyboard-00000470_31bf3856ad364e35_10.0.19041.1_none_a715b57b383fb0e0\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-o..ectionflow.appxmain_31bf3856ad364e35_10.0.19041.1_none_e2e6c013142b9760\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_10.0.19041.746_none_57db037f5373cd32\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\enterpriseNgcEnrollment\views\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_mgtdyn.inf.resources_31bf3856ad364e35_10.0.19041.1_en-us_4209bd95c85da765\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-devicequeryprovider_31bf3856ad364e35_10.0.19041.746_none_b4f3e8d89fa3d1e8\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_uiautomationprovider.resources_31bf3856ad364e35_4.0.15805.0_fr-fr_c67deac0d060f11b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-a..lprovider.resources_31bf3856ad364e35_10.0.19041.1_it-it_27bf1c0f118d59f9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-d..extension.resources_31bf3856ad364e35_10.0.19041.1_en-us_951e12109694b735\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_10.0.19041.1_sl-si_60a279d553aa108e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_10.0.19041.1_es-es_a0b298a30f7260fc\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-s..ouppolicy.resources_31bf3856ad364e35_10.0.19041.1_de-de_3000b71d1ad4ed13\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_mdmhayes.inf.resources_31bf3856ad364e35_10.0.19041.1_es-es_5c93b5e4d0c40889\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-t..honyinteractiveuser_31bf3856ad364e35_10.0.19041.264_none_a61d15efb6291d40\YourPhoneCallingToast.scale-100_contrast-white.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_system.componentmod..notations.resources_31bf3856ad364e35_10.0.19041.1_it-it_a6b9ede0f2cd3e88\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.WindowsRuntime.UI.Xaml\v4.0_4.0.0.0__b77a5c561934e089\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-t..rk-ctfmon.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_eeed758fc87b0a5e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_usbport.inf.resources_31bf3856ad364e35_10.0.19041.1_de-de_fb0cfb34575678f4\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_microsoft.virtualiz..vmbrowser.resources_31bf3856ad364e35_10.0.19041.1_es-es_1288a7adb07378d6\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-healthcenter.resources_31bf3856ad364e35_10.0.19041.1_en-us_af63b27bca98ff02\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-m..ace-remoting-xactps_31bf3856ad364e35_10.0.19041.1_none_37026defadb21494\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-security-ngc-ctnrsvc_31bf3856ad364e35_10.0.19041.153_none_2029fbd0ded1b5c2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-w32time-adm.resources_31bf3856ad364e35_10.0.19041.1_es-es_639616264c8291ef\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-charmap.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_4a077f22be84abea\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\diagnostics\system\WindowsMediaPlayerPlayDVD\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-c..tem-tracedatahelper_31bf3856ad364e35_10.0.19041.117_none_d325f5576a28a4dd\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_10.0.19041.1_hu-hu_e70650bcd576c69a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_system.web.services.resources_b03f5f7f11d50a3a_4.0.15805.0_es-es_610c0a14ae86170e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_microsoft-windows-t..cognition.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_668183daca7f0f3a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-d..cking-adm.resources_31bf3856ad364e35_10.0.19041.1_en-us_db78f0b735ef61c9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-i..d-japanese_nec98-nt_31bf3856ad364e35_10.0.19041.1_none_f4128cf9684c5e2a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-p..rgrouping.resources_31bf3856ad364e35_10.0.19041.1_en-us_448c87ad5e6c3306\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-remoteassistance-diag_31bf3856ad364e35_10.0.19041.1110_none_284d3aaa9271783b\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_security-octagon-agent_31bf3856ad364e35_10.0.19041.1_none_b579cbde83e97bee\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-c..complus-eventsystem_31bf3856ad364e35_10.0.19041.1_none_cd3356f3257be89f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\Microsoft.NET\Framework\v3.5\MOF\es\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-c..ent-indexing-common_31bf3856ad364e35_10.0.19041.1_none_bca51b4e766dd871\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-i..l-keyboard-0001042b_31bf3856ad364e35_10.0.19041.1_none_560c2815e82e6e57\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-n..ion_service_runtime_31bf3856ad364e35_10.0.19041.1_none_b946927a16448b8e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_netfx4-aspnet_webadmin_wizard_res_b03f5f7f11d50a3a_4.0.15805.0_none_22b85720c37c52fb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\microsoft.windows.narratorquickstart_8wekyb3d8bbwe\assets\NarratorUWPSquare44x44Logo.targetsize-96_altform-unplated_contrast-black.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-fdeploy-adm.resources_31bf3856ad364e35_10.0.19041.1_en-us_e7b674bdf46cd41a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-s..ktopini-accessories_31bf3856ad364e35_10.0.19041.1_none_a208296858c76413\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-usermodepowerservice_31bf3856ad364e35_10.0.19041.207_none_3c300852ab214f81\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_microsoft-windows-ie-controls.resources_31bf3856ad364e35_11.0.19041.1_es-es_3b7861a209e4186d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\assembly\GAC_MSIL\System.Data.Resources\2.0.0.0_fr_b77a5c561934e089\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_miguicontrols_31bf3856ad364e35_10.0.19041.488_none_2ffa4308e32b9199\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_netfx4-ngentask_exe_b03f5f7f11d50a3a_4.0.15805.0_none_1bb0d4ac7da3bfe1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.ManagementConsole.Resources\3.0.0.0_es_31bf3856ad364e35\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-d..mnotificationbroker_31bf3856ad364e35_10.0.19041.1_none_7da5a59f860f2406\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_netfx4-globalmonospacecf_b03f5f7f11d50a3a_4.0.15805.110_none_0022a926983d7d38\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-authext.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_8ab66cddc6b2724b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-g..cy-script.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_19c60a32558ae412\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-tcpip-driver.resources_31bf3856ad364e35_10.0.19041.1_en-us_3ef517d861ab8bfd\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-u..oryclient.resources_31bf3856ad364e35_10.0.19041.1_it-it_043a7b7c32b0445e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.19041.1_hr-hr_b4205a674b468594\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-directcomposition_31bf3856ad364e35_10.0.19041.1266_none_1c8f1f932b553c89\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe

Modifies registry class 10 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\ICJIUERSVAVCLJG\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\8k93yDRf12N2G9W.exe,0"	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ICJIUERSVAVCLJG\shell\open\command	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ICJIUERSVAVCLJG\shell	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.Ejei\ = "ICJIUERSVAVCLJG"	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\ICJIUERSVAVCLJG\ = "CRYPTED!"	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ICJIUERSVAVCLJG\DefaultIcon	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ICJIUERSVAVCLJG\shell\open	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\ICJIUERSVAVCLJG\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\8k93yDRf12N2G9W.exe"	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.Ejei	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ICJIUERSVAVCLJG	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe"
1⤵
- Drops file in Drivers directory
- Drops startup file
- Adds Run key to start application
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:2716

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

aic_file_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png
Size 50KB
SHA256 bbb38b2c3019a0427ea4e04e99fa8312916dbe3e63e7828f776c8aafb11fd27d
MD5 4071637d767934428991f4bc65a1181b
SHA1 50075e362bce449affb885f486513ad8f72d7273
SHA512 779f9721d09b5e5ee7f31c6b13b70bbc519bf240b735467fc7bfc0e2f205a469d080b8eb30a4d6ef2cb9e0a1f6d9265503917964eb20ba9983e509c85d9a8dc7
SSDEEP 1536:OnwHwuUa+fSjOYtBqft5LqHCS7bz1c5gi+P:OtuVMPMpOxc
MD5 SHA1 SHA512 SSDEEP

Submit Download

selection-actions.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png
Size 1KB
SHA256 07cb852c6d58245522f8a112fee46b6fef9adbd12e7f25fd2471252ea3460778
MD5 2daee851f07796e6d1168fc80fba942c
SHA1 2dfbe66cfc6e22a931695a811f2ccb26da0b425c
SHA512 10ad63630be792215522876f14b982dcda23b4de9409e676b9597c7dd2abb419856954b721dda0dc55d767123825da1d52a84db5c0f498675ed513fe0ccdf4a3
MD5 SHA1 SHA512

Submit Download

selection-actions2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png
Size 3KB
SHA256 5ea89b7cb148fbd44210cc9b1caa92c166815689b09a3036f873accf9df4cf17
MD5 59bfe1956b23de0acb97ace0b247016e
SHA1 94392ef930549c3b9138522a4a1056b9338ab92f
SHA512 b72f7e9fad67a4c70df0e626b44a0be652f53bf73a7da76f6edf6ae7a78037d24730abb204571c31dda86059cd40c4b8c9fd6350dd4880bf5ce1a612a9647bd3
MD5 SHA1 SHA512

Submit Download

example_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png
Size 683B
SHA256 b9eb64287c7c0fa68ef6159c3a63eb7d647fa14d9c4de2e0c37ee116792e6237
MD5 49e4f1e8696024dbfd1093dc18b14541
SHA1 78c12e3101eb5e63e90c585077476ae93471d81d
SHA512 2de1a33782d8198c4fb36ef394a3cf9c1c4562af9431a07e579f9fab8a1a1367dc686239901adfc1dfce6d2299a6ce28c43b67c03cdc6fd5d647978f7b020ea6
MD5 SHA1 SHA512

Submit Download

example_icons2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png
Size 1KB
SHA256 56d09e509db0befe388cb99a139627cac6a16acb69f982a2945abcf33d8ff164
MD5 9a58887c556dd09bde774a9a45baa568
SHA1 1e0c9adfe9cebf98120bbec1b8a456a08a66fbd1
SHA512 55cb04baa9b061b681c19d23c41ad36441a999565b0cea4bac3fedae8cf543efca6c95fbb2059a4c3ef745b599b4bdab39ee7350485ce271b72e5834958d17d2
MD5 SHA1 SHA512

Submit Download

rhp_world_icon.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png
Size 445B
SHA256 2abb48ebb3c1da62576b056b8cb2a8d154aa44782689dc1b2277431d7a0bbdf1
MD5 be591e098ac14998f29f38f92b458269
SHA1 48f7de5da2858f10db52dd06c44b1f49871ded3a
SHA512 613e795b2f0606acec9d1d397c705b8007927d031d86b9b877516bf6437b424955ef7c2bcff46e6362ff7a6d44232d71295bfd7261ef2fdef5b5398bd347588f
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png
Size 611B
SHA256 56f949a0716c326282239bc8c1476ed54ae49418763158bd4538e7e8bcb737c4
MD5 0998aaf21f804e5be3ca89aae25cbd40
SHA1 ca11cf31ee8f03eebfdfc246f3db231c17116cd4
SHA512 dd33663366a9abfca82f9032965a3c7a074c243bbe67fe5740b5e6e681a5629106e3073b1d589b5771983079db1a5ede7059cf880c99f87d794dd0e6d7d84a0b
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_hover.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png
Size 388B
SHA256 ff0293ce21b5cb107ac79a0bfda9b2b184ada33844f9aa4a59ca0215d40e3558
MD5 1c3549bdb960b2f798d664dbb8079a15
SHA1 8041aeb83c0fd4ebbdc78a663a5d209b2f0f1447
SHA512 ba19bd7b499629fb31ff257f769ac46b312a3733f4c4518e9c2b4430d381ea0159e423000f73c1d16b1b0294dcc01a5fb39477a35f2fc7b0ab904a6b3e2edf67
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_hover_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png
Size 552B
SHA256 a4f44c5dd872c747822b7fe98d4fb8f3880218d86cbafb0e8541d70b3d5b01ff
MD5 13767a8cc17ac10c9e9730fd67d6858f
SHA1 ca613ba0bbe09fcc4644ec8bdcbfa97ae734bc88
SHA512 9bcf2b35cce6f43cc58a27226eeb99dae10af8a82168ced82897ace7ee8beb277f2e01cc4396bb9c77eade91b341f34e2391faa1ab6a31e670c647314d2dd7f9
MD5 SHA1 SHA512

Submit Download

rhp_world_icon.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png
Size 388B
SHA256 524f780b60ef0dc0d2b0d73d172aaade80f07577156af7a1f18167d30d051e16
MD5 70815cfe64f88e4ee19ed7ac20d891d7
SHA1 20339a4f0cdcbd5712373fca3a91fa9a75c3a72f
SHA512 ef92e6e59fcc64da218f0cc4973e3124bbdc8b7d01636f4653de432adbe1a2f29c0442ff695409a4c3da68d31b9e0cc2dbc6122aeffbcb264ab0d2b9655ba2e4
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png
Size 552B
SHA256 cf80c9a20bf53cc1742052f6948d68a7247ec708d14005ca051873fb5498fe58
MD5 286e8a6705967870eba6d9f32bb9b869
SHA1 ee949fe5e7737022bdc1330fdb1e875084d73ec2
SHA512 e14c820e7ae5b40f171ef0f19355ff2f41ef2b7259c15ff640f1671c154c635fd2f6b09000c04e964aebe512b462d4de8aaee31a85e4fb3964786cceaf36b0c6
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_hover.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png
Size 388B
SHA256 9b9f312016c2aa1e43fe3a96d5a465e91d36b2949d70c319195e181992bee1a4
MD5 77a43af960560de5200b920f4eb2e5b7
SHA1 a987ff36c6ab9301a281ec4474a9d7cff4feec8b
SHA512 639918afe47655493bc8f73ce97eb8bc492964c0a0b402e71c66836299919cea095e2c6312f4be950eea83a3ad892a34b79bc0e2be193dcf34afc9c4319cc305
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_hover_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png
Size 552B
SHA256 28f02f49ad1bb97c113a61825378e82fda15de4a23b63a0b27374a9d40952778
MD5 e83d217e94edad50eb071deb0ad9e983
SHA1 9b37ab2268a0735c7e38a40b2b75b1fd5ddd9c31
SHA512 bcac03e0976ad6f12965b2279c072c263d17978c704b98269c3831b5abb02f9a032cd0a0a41a35270ad80610a55f024f28703df5478f3d12c28cb17d4eca8a70
MD5 SHA1 SHA512

Submit Download

icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png
Size 7KB
SHA256 d19fc628b0a27be4edeae04e7e3461fa9d242a8103510b81627b701bc68b643e
MD5 83c9d738a80f3dbe0e053ae425af561c
SHA1 169cf5bbb40331f3aba51c1a9f96905af183db33
SHA512 67f66ae0eed3a8ba120620d5647ce83eb8fcf6b68678934dd061e2fd82452bbaf30003130b6dcb3b7f82bef8f2eaae5256ad58a2c6ade94ccc15b4c0c86bb0df
SSDEEP 192:yn2hh2T6N38Prk2M/FD15szffgtjUL5UN:y2hITw3OADjQItg5UN
MD5 SHA1 SHA512 SSDEEP

Submit Download

icons_ie8.gif

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif
Size 7KB
SHA256 bc81357737db3ba3a7dffae1df6639b8027ec07ce706d8cf9b93aae1936a040a
MD5 d7c996b1e4b90032cec6af3ebde95ce2
SHA1 0efe5ea05652e0abb62bbf6077c947ea3823cd2a
SHA512 e09782a71b4a4df23d0159d0a0b34d9c3fb1f3be33df1d07b92af27365ac8abf9dd3a375420d64ebeac375d123423c2863dbcaea06d18f0113960af9bfffaeed
SSDEEP 192:PhtXb/PctrO8JdUVCOzeYlVz5rxlhHt/HLic29T7XuGXVtGXwTVDXLva:Pzuq0Qe6VrxjHtPLE9TzlVtwSVDXLva
MD5 SHA1 SHA512 SSDEEP

Submit Download

icons_retina.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png
Size 15KB
SHA256 90010618b5b1496cb86a741c46bb9a89bf1b233d389e9809091fc789fd3b5be9
MD5 70828a485255274ffcd6a0720c26e158
SHA1 44dda65bb227b459bfdb3e7b63ccacebed48dea8
SHA512 76a1deb2f1bf340ebc50e08f7c07e8540608b8f5e2b050ece990862797990c68831cf707848dff2bf3d83080bcb214805b75d66669e7b46af4487489b1111378
SSDEEP 384:uE2U1cOF0Uc9EqzQiCvPDHS2KvGqq+BI0zHJGYGK:UgcY+CtKfCi
MD5 SHA1 SHA512 SSDEEP

Submit Download

new_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png
Size 8KB
SHA256 ddf901fb3f0b85affc4f2d3a54ae7d3655913190f1ce125bed9645f9914288e5
MD5 7d9a4494496d1dc93a2a088e2eef22e5
SHA1 95e77bf054c5af4e39729c5ea899762d34d605d6
SHA512 82e494dff563571f0c383a34010054c3b99ffd97924d2c21a84c2518fd2f449b8d63b5cc49fe027890db32143eeccb1d9aca8c5cf8247444c1c89183ed59b8a4
SSDEEP 192:tTMMhktXshC17C7BkBuiWIFVyUcrjQqsEz2q+5PuJvoA:tMykt8E14kFBThXqsQ2NuJp
MD5 SHA1 SHA512 SSDEEP

Submit Download

new_icons_retina.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png
Size 17KB
SHA256 e8531791191e88bae17db56a283ebb1e16e2ed450366c0cfdfe594902ce3e74c
MD5 3ca53ecde15d3ce53e158cca2db85976
SHA1 59cad511c95c3352cc408d14b5680109ab3656a8
SHA512 744424d1b33159aa6fa020811b174e00926e54f40be449e2c529ed1a8490203c91b57725f467c01d0e1528cb89a2c5bb0f334ff7d43850b468c1f026b4a856c2
SSDEEP 384:E3MX+7b3tRbjDx704CEFwT0xgobPABSXNB2XE+DYvtDS95smh6qO:st70XiOQ4YX/2UBlDSH8
MD5 SHA1 SHA512 SSDEEP

Submit Download

bg_pattern_RHP.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png
Size 179B
SHA256 5b3a12febb637cce355875bff20ee1325cb33eb0227a098bf15d95a4d6bf90a4
MD5 9ecaf521c292a37b2dd16f467a391f9a
SHA1 ec162a1d57931df58cd79c62467665b91bad8e22
SHA512 318474fb7389c1744dce79d12437addd2374af62b5f5d500363a9b811f1b5d18b715cf9d8c94cbbb372a1cedb636147544248909d85b497fd4fa74015551b1c7
MD5 SHA1 SHA512

Submit Download

bg_patterns_header.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png
Size 703B
SHA256 841ec805766517a0df361e12c968db73e0d96e3ea0f776eb6f8e4eb50b697c31
MD5 c925c48e181124f12808e227c12c020c
SHA1 db6762a453b22fece378745158501fba64bb3cb9
SHA512 44917c4699100b301c7c65457d0547e5e2631842fc14982f406f82cfd496493c17ff3815e3b4b8009f53de1ca2add61590a886c92104c06f63eef422db06b0b8
MD5 SHA1 SHA512

Submit Download

illustrations.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png
Size 8KB
SHA256 cfe44640af848b196d834391b050369858960d9bdd7ef08f215aa5565a240ab0
MD5 527d731b06bc9fdbe0aa0afdb6fa3023
SHA1 4c5053f744bae1023767f92ee2b3d8de93c6f72e
SHA512 ab8b343fa9915293eb19dd620c49011a162006b2b1445bad391f0bb0d09c40b1674a7c62082d14822aca632f2ceb5178a6233fe50e648c80cd319a06700a3c92
SSDEEP 192:oZmMG5CoCqMblrOr7wexKQagm/LBbhwmVQHEJ/tD:jMGceCriwjQagkLB1hVQ0FD
MD5 SHA1 SHA512 SSDEEP

Submit Download

illustrations_retina.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png
Size 19KB
SHA256 4feeaa0626e5e507c804a3818ab22c4b351d0eff2105ae8a01851868e44904c7
MD5 1e20159951e6a696ae2a9fea3d25364e
SHA1 32ff1f57a69686553f7fd348c094c368c633b986
SHA512 ecd22b94327fa84a699092be179dc1ebaa205d90d9ec72a607d36b53676634ab93b6c3dc1a9170ed97369a57fcf660ec4f5e1044de882d6e1474336893353beb
SSDEEP 384:QxsdM4dz/IbdQmMWkmpFVS6T0TagCzllgyhwCzMQjjaO:Qqz+QORNATagC7gyhwQOO
MD5 SHA1 SHA512 SSDEEP

Submit Download

faf_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png
Size 6KB
SHA256 d233ef904b497f8024bfd5a24ecda1ded2333d36463881e67a2f585400049ea6
MD5 4af54ee59e23695126549e3b75ca5e66
SHA1 f3ea7c92fb236eca190575807f45003049051357
SHA512 12432fa3023e34eee13a2689c43879caf41b667332f4a73a74a7a9278b64156af03d96af6510be094568d8fec3ed5e996c8e3b0d134f471e792f5f7c39c242a1
SSDEEP 192:iZVoOf8gmuHxW5/ZhE9CXS8bgVe6DAXEKR:4VJ8UUTEMXS8bCAXH
MD5 SHA1 SHA512 SSDEEP

Submit Download

bun.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png
Size 2KB
SHA256 a77ec8444a8bef94b02b9a6dd6ae3bcb6213e726bbf051b0ec0a3302be115b15
MD5 54c2b541a91bff00eb6b92aeb39b22bf
SHA1 94a14c3918d45898740c261123be48b40bf4739c
SHA512 ff7eb356037edf907a378855896f4d46454e04f0ecbafd2c67d83a8f33cadd955007b714beabd4220c0063854881740b1c747bb87e3f9ef9448f6d544110faf1
MD5 SHA1 SHA512

Submit Download

cstm_brand_preview.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png
Size 2KB
SHA256 a47e1375782e39ec165cdaae76dd4d51613c1070147eaa883718d2ec87561d08
MD5 d1ef63cd4bf0ff9ea94259d18d1303a2
SHA1 895152a4d385ecadec524366ad946fafd44cfd43
SHA512 5c048e389e87d8e76991535fe6606478812095501b2c9131af3f581a93803f0caa0d71dadf691786fc98da7db5a9eb16602272aa07d03fc8eb682662094bda5c
MD5 SHA1 SHA512

Submit Download

cstm_brand_preview2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png
Size 4KB
SHA256 1ee80decbd4b5a6ca9ddeee49903c241ce82fc1a1616a37e36ebf2182d418e9e
MD5 b7c5656d7b10e62e8d5439fcefb0f7ad
SHA1 fc36305f906533d605ebbdfbafb25bfc0fc5f015
SHA512 c8adffdec1306552b44178da741700552434e620bf83a7bfbd1f3fdcd85b55db4fc7a2674ed3284b8dfece4072bb3f540078c19b21311f7596e50911fe2d4d35
SSDEEP 96:OyxKqRthTBfG5H1Z0KW/Oh5FrvAGwmJ/OkeMXvknGFPMP:/A8trfuP0KJdvAG/ZeMXv+cPq
MD5 SHA1 SHA512 SSDEEP

Submit Download

dd_arrow_small.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png
Size 289B
SHA256 798b01de11e46fdce172715829621fcccc258cecaf1d2da91bbbfb6e2f8d1f23
MD5 09142eced7c2fd3558c920850c1d2ced
SHA1 54c251b956dc2f46ba3c45fc1e7a71ab7452b391
SHA512 46ac7b3f57017428b2a7b3ddb8cd7cc8166a82800f27f1a0ecd70f82cbf52907435410907a6941c89f696970e30812dea51d87c8614dbcd380aa2696ed02a028
MD5 SHA1 SHA512

Submit Download

dd_arrow_small2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png
Size 385B
SHA256 71d37e01787189dc4ba8fcee699ba1203242900f2ce9acd3cb6c3cd7d53bbe80
MD5 ba305f78c7216aa062e18c39b66cde1a
SHA1 a75321cece724b1d0fd13227e9fd4d2290df4ad0
SHA512 778868aa2e16559a098f4726b55f60d5b6019990d6c9cb997caa1bccd0d54472555195fa53f70e775099756669387d55de01e3fd33bffe234531729d12fa3d86
MD5 SHA1 SHA512

Submit Download

illustrations.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png
Size 4KB
SHA256 5c416255a76ea55f45691116b76d62c54da8d07cdf54bd1caa6dd2fd5f2ea9ee
MD5 2f235db759085976ae3046286b35c0d6
SHA1 40f6ad9880b8df80a124fcfc9784bac2ced604d7
SHA512 9755e9dd4996cec66e53c2d9278ce763cef5108c60e983596313c8283c7e83023bbe3ac9d68b06c01944052100d84c2c14c91db7f9e4c151dba0d6e2add9573b
SSDEEP 96:f6f75CTZF2Rk0jKW0FFIfufoR21kKcBAdjgogdt+Dk5PnSgZU+vweH:yfUZFkjduIVR21kNBEgPJBH
MD5 SHA1 SHA512 SSDEEP

Submit Download

nub.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png
Size 1003B
SHA256 7767d73c5105a8ca6225442083e21c3a89d41ad33609f962eafc50db82f1cd64
MD5 390982fe92459a1349526ee1479527ff
SHA1 cbe86620671303acd8c9581bc661a14f9e5fa196
SHA512 0739d56b470daff674b0522590e432736c9c4052242358a76de11930a03fc5f4f79974182e3182005d4129fc1be8f9725785edba79d489dbc2bf70be78228357
MD5 SHA1 SHA512

Submit Download

share_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png
Size 1KB
SHA256 985f50094a000fd073daae6edb6b4b56206d2ca3644dca89e9ec7ee367ef935d
MD5 290ad11f292ae7ca0b2231451727bff1
SHA1 7787e23b1ab4699a9f32bb2d85a50ea935c2dfba
SHA512 3002ab1059421d8253ec3f5a4dc8fc6abcf4d24fefeb9a14bb5bb5c39b7118c45b00e806cb610bab3f863ba46e3978b67a8a0ea5dbfa5e9eff622849e36c2fc6
MD5 SHA1 SHA512

Submit Download

share_icons2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png
Size 2KB
SHA256 1a55ff20d99170ea656303ffcca91018f940fc6a82b9a6e138d8eb1ab7562038
MD5 80182bd19deb7b17430b6f3ad2ea5ee7
SHA1 0f73a6faaf2cb8e5c8a53fa7a2931844ad5cbc1c
SHA512 da26f51b8a4f4373feb0a9d91700f6fa1e23d7ec77b27e7eec704b287c78b35a2442a96b5db88f913dfdc995607246b5a603bec73c956071f36d54c5f2665294
MD5 SHA1 SHA512

Submit Download

adc_logo.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png
Size 3KB
SHA256 84127b704e758d6d58df54c3d6cf93156704bec3f29b9858b2bcf1bb4036e8e2
MD5 56f65066f70a3b929b0a4e2a45caa47a
SHA1 37672d33cf0d7419f47d2c769c5b06244245e0fb
SHA512 4267ce9dd9fb64b28e48fecd81299c75345cacf6456b354fe3176b83eadf2ca23c18819356af63a5355528a5517e707765ff253cf5898bc17b05e26e7ae825e4
MD5 SHA1 SHA512

Submit Download

adobe_spinner.gif

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif
Size 556B
SHA256 972e3a27f572c99760b7456eee79d239cdfa5bc69017eae87c4d793bdec378f6
MD5 e73d58214c57de744f79133dde45e22c
SHA1 e16f7e118f357fd91ff66edb55cf6f2b89976faa
SHA512 08e506421808395e433f51618cdaa56ea56b5f5582e2028e4f877b08ce9799a2f8a7ed0013b373e72e8ba1952367d141f05d2d18ce233508a3267739c0f6d33c
MD5 SHA1 SHA512

Submit Download

logo_retina.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png
Size 6KB
SHA256 d6455e3cc98b6341fd9b17e18a75f1cb606a1321004e37e1006d85762d95e24d
MD5 72b89139b47256d1669f19836e5417e5
SHA1 199f0c1b663d0b105b1af1569f9f53246fd38811
SHA512 9540109fdf13a5c5c25f1408d2f451b7c505c0c08c9f8920a49298cc9d38d715061ddb69b5e663a448d5095cc5b7b711b70a0ee999a163a90aa98cb40e67c8f1
SSDEEP 96:Xzm+6utCwlKv6K4ulcqCm+WAIjJxY7n/Lswc6bq1qHORJzB/AGwCcLDLMcrEVzkz:XzJvtCwQiKMm+vomIJQ+qHAF0LMIE5kz
MD5 SHA1 SHA512 SSDEEP

Submit Download

sat_logo.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png
Size 826B
SHA256 ac424c98eb118e979999a065240ff3b756307083096d9ed360209317d87cd06d
MD5 06ddd321a2505e3350805843bb465c65
SHA1 5272428147ddd003702a1bf1c858f3a0f5c5724f
SHA512 da7fedd82fa260de6ce137ac16636294f4debfcd046ce426604a55378af6c697d67c93593e60fa123ef5f6b91b30bc6b3f6585cae0ec06e193ec57460f91a9f2
MD5 SHA1 SHA512

Submit Download

sat_logo_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png
Size 1KB
SHA256 fde32a6867cc490a2f956c00d91f94a6d7ff07a2a4ce4210c79cbe100864392e
MD5 422f9326452ccef56f834afbc0886eff
SHA1 ba915434315ec3706cc6d489ae133813fbd91a9e
SHA512 87f90dacea9256a4f6fe64ad5242015d5dce3fdf6d7f8c60b939c1bcd10cc1561cfe265cc347de0e4032a0c26c98e8111dfd01152ec2bb8c7e2bd20036cda073
MD5 SHA1 SHA512

Submit Download

DisplayLanguageNames.en_GB_EURO.txt

Path C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt
Size 32KB
SHA256 32b53177f11e7fca4b7cc2feb6730bb6cb739a741a5f38d9a3cb6def59fac739
MD5 88d8970400ed69a7c7a247b7f1a20644
SHA1 5c525f4d023b98442e6742be48f1419474b72d7b
SHA512 3d177553468d2a878a4e347f651283505e71e464589e1aa8f5bcbfdb545ffb3cc4fe9cc749fcbcbf01e8a2648e1d71cec28f53f2545b4c39025dfb7651cf6496
SSDEEP 384:/piDL6fV7X75WFCnmiQ0+zQsutMPnsrd/Zvj:/0if55WGU5Utf/9j
MD5 SHA1 SHA512 SSDEEP

Submit Download

ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt

Path C:\Program Files\7-Zip\Lang\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt
Size 332B
SHA256 b0708ad36fc59038bcf50179f0d2c19b4838b1fd6e9bd80a21ad0e1ed8723eb8
MD5 7da46930a9ba3433e4d933160f7e9720
SHA1 339817403e05c061ff9213c13c6d673f443210f7
SHA512 cad4231f925fe41d34d4bac345ec810e180f872401ee3b8b9fdf3ae8d8fdcaa22f8b1208e9380ef4e0b87e133f4c5a5a8278b5f4de7466d681a84007f5bba63e
MD5 SHA1 SHA512

Submit Download

win32_MoveNoDrop32x32.gif

Path C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif
Size 153B
SHA256 4d59e03e036ee975df920334c0c9b3950e14c36244bc10d35a06c9931146bf6a
MD5 6263dd008991523f6215a6e40cf251dd
SHA1 306606a91fae6ddb1fb964a72527fe219c3642e3
SHA512 3fc507f5148b9b5084e5917d755308459ce47283a487ee674e1c3d16f9a38eade7adbb2ae8055fd3ce230ee72c8db3acd749ebf40bc00dd2bcc9790849e6eace
MD5 SHA1 SHA512

Submit Download

THIRDPARTYLICENSEREADME-JAVAFX.txt

Path C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt
Size 190B
SHA256 9ddd63fc003ca7708803b009926a05b66f949db921e24dbf6c62e932588cebd7
MD5 6601882887d1710b5a11b693e4ca375b
SHA1 19ec6d14f3a6bdf5164949dbc579222c4813551e
SHA512 b94210227ee537422eacd60faf6c0a1c4b955f08ee970a689364350d65455240fd6ae1503dde617ae97e9cfde095e4e8db83f2c82c0930c4925134e764965e2e
MD5 SHA1 SHA512

Submit Download

THIRDPARTYLICENSEREADME.txt

Path C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt
Size 190B
SHA256 7d0b2bf2f9cdc02204f1c0582cdc3a78b5772b8687881b699b32b0f57086b973
MD5 80bc3c46eff5bcc9287a3416aee3c53c
SHA1 1246bcadebc151e07bb6945b05018184b383f66b
SHA512 a76d1a63314bf4a08f69fd525f3a3ca156d0f79ea4f19736105a679965c760b286083ca24ec4bfa102274f51e68ec44f8c7631bd90fd482957ba1c3d2aac2702
MD5 SHA1 SHA512

Submit Download

directshow.md

Path C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md
Size 1KB
SHA256 0c5b00d1c2df14588c330de00fea73c25c5f143390ae4026f8eabc695a055cd0
MD5 dc9e3bba39d490e88c2ac61f5587193e
SHA1 037cdcdb6a8889799b5efb0c85db5eefc8b08b5d
SHA512 c01bb65b14d3a7680d9c6bd330a82cdc8eb78e32c32212853d206c6e4bb8a4227de81fa7246d4ae73baf69c37302e4c0639879834c206515f1d215b9bc40de58
MD5 SHA1 SHA512

Submit Download

glib.md

Path C:\Program Files\Java\jre-1.8\legal\javafx\glib.md
Size 31KB
SHA256 1435c7466643e8ca4727db4b1f1ffdc9782de2853f38bb2ae2197d558ae9b0fc
MD5 a86ba3c7ad6765395b44f4f0d0811d47
SHA1 fd3af475f64ee23ebb6548b5fa3d33d0ed219d93
SHA512 77e5edc667176184b8f3168625274bee61bf189bb2176282e82d25edec94417c108c3c69cbe1d6381e964b367f1d59655f5e58e9d62b4a92f1a4a195e20490d1
SSDEEP 768:LhkCqphHmJRUaMZpsMH9DpSxsWkMaMqftlaz:Lh8hHmJC+MX2kMaMMaz
MD5 SHA1 SHA512 SSDEEP

Submit Download

gstreamer.md

Path C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md
Size 34KB
SHA256 951ebab9876fa37a392b9b5fc09eabd4620c3f1b5cb517dab72e9a0fe730d6d7
MD5 1d56cf62c05436bc5f70eb99916c63df
SHA1 b0da2f28da7ee78e8e5f30eb41d3a00d61a5ed02
SHA512 ec7c4cb1e44dd52b38e7a2e6bd50333c0cb963dcc73157f0156c3f6d75394961f02e313cdcbc20ab53dab8e66ea8450a830711ef578254d5991c394e685cb8d8
SSDEEP 768:KNoWCqphHmJRUaMZpsMH9DpSxsWkMaMqf6rvtjK:KThHmJC+MX2kMaM7z9K
MD5 SHA1 SHA512 SSDEEP

Submit Download

icu_web.md

Path C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md
Size 23KB
SHA256 dc9c40eb0ab98134e3b702a0fb18b76cc9aa74f8c746fd4260954bba5bd9c02e
MD5 43a1ddf97fe0479dd90dfddcdd15f83c
SHA1 f16892e504ef451b76de5e0b0cdbf8406c10a8be
SHA512 e62513c2997a5c8f4beef85488ca67b4dcb83e257f269a1cae3e4adc95280f5347c0d087472096b927341fd1a96f7bdd571f32c612ffa35b7f862807e7f19c62
SSDEEP 384:IQVi4Kh1C6u4G8AbB7VNI1AW+beQineFl1UGJApnh2YpukoCwd3p8OmTtrIJyawl:vVzso65GbrIFUeLeFl1UGJAphfpkRp8V
MD5 SHA1 SHA512 SSDEEP

Submit Download

jpeg_fx.md

Path C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md
Size 2KB
SHA256 6d733bf2da716745eb2fd084b63abf403a152ae935b27f2e49fb9c31c5e53d06
MD5 04b7259d6f18b42670f11f88bf5ebcbf
SHA1 95341d5ccf5f690b85c7017f65d378380d721bcf
SHA512 a710999383346048a06dfe1a4d9f5e254cfb0db11382bc0b82353d373997bf60cf98b7cc998d25ae489655ed051e1ed2fa53cb1a22deb1dc09364a2f76bb8599
MD5 SHA1 SHA512

Submit Download

libffi.md

Path C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md
Size 1KB
SHA256 0ac9b16f0301ea8b2f0eb8e489f628e56fe3380fa81d51906aa2a0e1c956c72f
MD5 c94d76c3f1d06df6e6df828978651a79
SHA1 7536c9d1b5e8a0b4f35210807d56312cb2d3faa4
SHA512 6503cc73254e648d9edd5733cc7243ac9f66c9f939687559d73b52331566bff6a62ba1b9c2eee1aeadd86c895e9e473b872f8697c3f551272847f11e82570bf7
MD5 SHA1 SHA512

Submit Download

libxml2.md

Path C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md
Size 3KB
SHA256 4f2eb0ca10b6406a47ecfb8c9c6c5817fd1c1ed42d128060cceef9719a93de5f
MD5 652d6b707d3cb2f8459738578f9ba5d7
SHA1 8156ff12e47375d876f2ce6df9edf12ee3021f65
SHA512 84cf90749c3e4e75159d2efa81462013dfb40f8a04aca6671962511a06e475a3281f87f30938725cf08332ab09e2d0fac907b295e93bda75e1d4380c8324c5fc
MD5 SHA1 SHA512

Submit Download

libxslt.md

Path C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md
Size 2KB
SHA256 9b62c7a3139ddf717da95c3405b26d94649ef79589d3ee150338c5e4df61d0d4
MD5 0c031cc8d4defc1d7b82485de2364558
SHA1 58b4bc5862b70d959d3b3a90151360158ef1d952
SHA512 02814114792b55c070ba8947a4ab62127de5aa9f6f09a72ed4cf7caa180cb80deb771927f046e1bde2267cd25d47bc27d729f096c41b943d1247be3b3b63b3b4
MD5 SHA1 SHA512

Submit Download

mesa3d.md

Path C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md
Size 5KB
SHA256 fa4323f7e1d2456db09d8dc05005610faa85989053545e9e7ec3b53ceac2acc9
MD5 92416f3b3013d96ffb7172fdc87f48d5
SHA1 aece75cf96ee43defef35e75bfdd30ca74902228
SHA512 4555690d800c373123469f3b9c0daa162aabd1a212f64fad6d95c4d2e520a6701716d27124d6fe9e55cd988c5b82a61ee04e9f944bc735ac974536b4a1c61142
SSDEEP 96:dibBButlBF66/gazKG+6oO/zupCSIiOKXeOcq8U3xaBBPG4y3C:yqlBF1rza5cCp1InKeOcqB3UPy3C
MD5 SHA1 SHA512 SSDEEP

Submit Download

public_suffix.md.Ejei

Path C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md.Ejei
Size 17KB
SHA256 0282b21742e3344902baf7c5065569311d043051300584d81178de9767773b32
MD5 4278e02155f886928d54e087b2f6dd5e
SHA1 71adf51f53a691bf03ff4b3fb2cd2d4a25539810
SHA512 54540fa2728eefa83699c7cc498355fb47a8bcd24b6e2a3566da681a922e3bf7f51cc8022efa5bc8b020e105438b625f39e749e8b15d451551f4b229adacb1f6
SSDEEP 384:gw4IgDM4TyAFMIXwlI2wVeN7+IecBvrj8ewTaHsoTehg4TdzC7:gwVdETAwAB+SRK2Te27
MD5 SHA1 SHA512 SSDEEP

Submit Download

webkit.md

Path C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md
Size 320KB
SHA256 6147d84a0395f711aa286bd4b9e68d66bb6bc965ee1bd12240d0a9112bb723c1
MD5 73370c0a2a40815447436686bacb65da
SHA1 a23e290ee3d273f7b9e01af09501f85e38ab9836
SHA512 3bd08790c2481dc3900da0b46d4f31c451eedd9d9f4d9e956b4de49e7b4113f1af79e6a1f8dba786273bff6f63c74549168335651b32d5448164c655671dcaef
SSDEEP 6144:Qs7+BvS9uI5WObeR52cOF/8ewhLNzzaj3RMpmt8DPye+Rc+CrjW/1Ocv6hkN1cyH:/rkI5neR5Mw7eKA8etCm/tWg2ylDVwut
MD5 SHA1 SHA512 SSDEEP

Submit Download

asm.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\asm.md
Size 1KB
SHA256 c7c3175360a554ab77201f14378ee5cafdb6ee14d5eca29e3ba829891491dde0
MD5 6c96e493d8b27b3ed7217aabb1c5653f
SHA1 7b5a2dfd0d2fcdf4b591c81fe41ffee024cf681f
SHA512 a49d45673817abb9f09ef1dd10e11bb318062df01daba7a86c63331d56ec2112801c9c0ae93a552df9937eff74e671c164af2b5140e7536f9b4b3021a1ae0a06
MD5 SHA1 SHA512

Submit Download

bcel.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md
Size 10KB
SHA256 bd219111777dc83ad16d5a00b4e7904d1e33737daaccb3e3cccbb4b5b143d167
MD5 5858fdea6b3c08b5e14c3ea45599528a
SHA1 1dce9a3677321c378f30cabf1b61b3c2cf6ce383
SHA512 cea836b54cb2a17c546c515823a997c3bf0b10e15faf2d6d895091a63d2b7d09d88f069c8caa04771e28391d85a265b0d7b72e5f7b2ed4aa3b5f198b58171980
SSDEEP 192:RfBSux3Q+oxszzESckCkdivYBIrO5VIoASr5aIVIOk9ZFlkSOi1m1d4E8BERX9:Rf423ro+fESvhBqO5VNrfVIO+3C1aXmt
MD5 SHA1 SHA512 SSDEEP

Submit Download

cldr.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md
Size 3KB
SHA256 288d7ef8151ca14350787d6ccd28f6c0a0572272dcd80008e279a3f57a168b71
MD5 230c938784fcd405cb59a11b077cb426
SHA1 8a6f40a2b3ca00b713b07da478a4d7103335000c
SHA512 3805882b420bdae4ef456fa64980b5449af86951fc588749a8fa85d6d829da000657574d76781779ad1ee19839c961c2388725db8e1a52831af77084262b3d33
MD5 SHA1 SHA512

Submit Download

colorimaging.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md
Size 162B
SHA256 a0d263d87e70056b2fa1b20449c27e7de498cd0417ffcb716bb4deb7136ebd67
MD5 c86f8c1d8c7a60cfe33cf4514109c617
SHA1 1ef6086a7b86d2565b94293e79a7363e77467e59
SHA512 19dda4e856cf31d0d5cc84a2d732fd669427015a85beb6efb38d04605b66b849ec72c175e0ba290fe010e3432c1ac3dfb298dc5a2d194995509c0761ede27d3e
MD5 SHA1 SHA512

Submit Download

cryptix.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md
Size 1KB
SHA256 2f34e94de87a94b3c9c345d55440e5ffc5f8d799d2db1d779bea76d54c6c2b03
MD5 09d8e249f48e4aba12cdceab3667b007
SHA1 dbef70a06efc17a1c0330f8f5e97636dec645ab6
SHA512 226e6e168ec28f8cfbcf86a8a859d988b5161b88f5bf0f2f7edb27f7fd6d58e8c2808835490cdd43d01ab5f622e6e97a1020cf15d54b7d74c3c7d29b82881d9e
MD5 SHA1 SHA512

Submit Download

dom.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\dom.md
Size 3KB
SHA256 8d2eb9dc8a250f9b46daea6633d1dd851b9586009f4495bea52f758848d21195
MD5 39b46052585e37f75c63c13eb4f36210
SHA1 4c45e84959c7fe726d62ad5a7eae4a8d2d7be948
SHA512 c482bdb96c1ef33d93e1d7f0f11fa4e51621db9c41a7de44269da4fbac2115a06c6d9e3827178f7fdf801bc7095a12ef09b46fb0a0825da604c7f862950570a6
MD5 SHA1 SHA512

Submit Download

dynalink.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md
Size 1KB
SHA256 523e48256fbbc677e0cfd45de73be8468582bfdb061d27180fb18adc0bd747f6
MD5 6e0a3a3b57850ad18fd5dddf6a94830e
SHA1 651c55943404b9878eeebcf5db2b4536ccfbdc08
SHA512 e0e0995cb48fb28a0d7ceb6df93415d49cb60796891e2341d0b53bdb5ab1b7b38d61ae30f4b0c979b567a424130f4dce48dd170109955d6d809573a4f5533395
MD5 SHA1 SHA512

Submit Download

ecc.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md
Size 28KB
SHA256 e303b5bcfe562c1b607e7342a5b8f7264bec32cf21d2fa098eb0f0612bb1624e
MD5 00ddd37d7d3bc2cfbba165750c3474c6
SHA1 ba777b0791bce0599a9731507140274fb9741c37
SHA512 c6815b0ee6ca50873f6a9f5ea819cde8f1c7946731c3fbae57d2a546666b0801c42b884da3a08582bac6543f12d92ef13018c7277c65e4f4d0e687b10c1cbffa
SSDEEP 768:bTMiNPfh5rZFpgJivEHeu+R2hoXLPI/ASTWd+ytAQ8q:kiNPJlXpgctjSo0/ASER
MD5 SHA1 SHA512 SSDEEP

Submit Download

freebxml.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md
Size 2KB
SHA256 464ed54d174fd087e09bcc5c9ee5c162da2bd37e8158e6f4a6fb0dee6f09c853
MD5 56c6b4fd3799a2c99fbd93dc849c4cdc
SHA1 083230f0248b27dfc5003d8f83f8acbd71a2585b
SHA512 cca5d7aad16373f0d395c7e63cbeb1f388fe2b7584148e33fc90d55354e46c4d6dae6c14df690dd87114ec4db1b27849d39567be691a1ed6140311be1605bd76
MD5 SHA1 SHA512

Submit Download

giflib.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md
Size 1KB
SHA256 fbafa397837fa50b98984178506ee78ec9d894077ef4d12c0662e59c65b6776c
MD5 90b031d8f75548361d72fd8cfa23ec27
SHA1 5a1269273865dc96cb81908830da176d096d5637
SHA512 2f7294a977a0778ab8ae32353c807ef2024353889ccfa631ce0ab15777c474de4bbf8816d26594b97a7fc6310048afec716d5a113cf7cff0260947a931b00f2f
MD5 SHA1 SHA512

Submit Download

icu.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\icu.md
Size 2KB
SHA256 00c14b23f13b576e2938ee7c1021f3107d0faac915cfe33dab6659a1e377416f
MD5 3a648ee8b5192557c8f214da8366eadc
SHA1 fb8cc9e5585e61a1d07d889842d4bf5b9e77f324
SHA512 c0194bd5ed8a90a850f00bdf5bd798362df873ad42d64ba3e403c13aac380e30a7afcb7420bf24b5c86eca6df02461a47068825d5578495772561fdf8bdb8a10
MD5 SHA1 SHA512

Submit Download

jcup.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md
Size 1KB
SHA256 01db337ecc5c6199217680a39195cc9d84109138c3b4fcdf17b6f8d597d0c470
MD5 18609d6773ba5a2ac6c7cff7e3958d3d
SHA1 9f1115e3ed7162eae4015b278f0830b929ac69be
SHA512 c155864dd1da88ebaf6679ba156f1a6181c6f83e777aeefcb17ad49e182ac11b209d15dd9963bde0d1ae8152411075c761becab9bf79ba1db991514bfdb03579
MD5 SHA1 SHA512

Submit Download

joni.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\joni.md
Size 1KB
SHA256 ae61fe6abfdcdf0ee3725e661809b5ed744df5344b0376e7513c0bf47a772b06
MD5 be77ee87d4cedcef1e0b40780957fae1
SHA1 86acef263c667b54bdab5881b63c7d33af65e0e5
SHA512 35bcd802f3ebe2d3c77007196b9cd51ad1a08bcb4de4084dd01af521040d238e72d66e9b970f1518977f24a35501b66984a4be4eaf923d0959c763e45eff4b68
MD5 SHA1 SHA512

Submit Download

jopt-simple.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md
Size 1KB
SHA256 f23d570fad9b978deb1d684ec2470a5195368f0bbd885bc0b8dcd8e8643efb07
MD5 8f5a0435471f6998ce821b68b10eefff
SHA1 0559cadd6be17c072770f9909f82bfb6cc2fc3bd
SHA512 71a2f09ce03dc1b7d1176e98f790972d2a96d5cb36d1134d350c88f9907df8e2dd9959c41c1562e138d0305f815c8432d85f3581a854e79029abf10102a10ea2
MD5 SHA1 SHA512

Submit Download

jpeg.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md
Size 3KB
SHA256 1582f29c02631df4b80e734c114c7f91cf41b2835c7f60cb692c96171338f53a
MD5 5f0722d8adf108ff7fcee0348e2d1303
SHA1 e1c70234878968f7a3164f0ef60bba4f3da8832c
SHA512 664bef6e4442e1bc98e99e740d4e94a98e1c42b543327202fb1f5d403517ba5f5b0ab942021f7ee7051c4ab306265d5966731de6afb1e989c491d149549ace68
MD5 SHA1 SHA512

Submit Download

lcms.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md
Size 2KB
SHA256 8351cfcaa6aa62152314909e4b5da6daf73b2bf0b21f4073c6f017c9c6883a4d
MD5 e185ef485d8864881f5ff853f31a3610
SHA1 5c5f4a14fe1648070773140ea9a7d35299dd5d70
SHA512 be56863901d1c8e1db566b15c2ef716f9cd0ccea18a92804040cc3e0a3bb986ed5d7ae92cba83882d92798a07aaa518590a8241a0e1a29374833f6eef1cda144
MD5 SHA1 SHA512

Submit Download

libpng.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md
Size 6KB
SHA256 ba5a1b3bb5dbdfb00e7f42c40aecfb50dddc32f954dccfc63956586423fda73d
MD5 cb332c373fbb25efdafc000afd59eaa3
SHA1 fe8f3655516f00f2d2e2062f730c758484fa057d
SHA512 13a0ae5bb4406072a287e6195af571ff8e3f494f279b0704adaa987911fe382fe9586269eb924edcc2ead0c57b003ab777a98c75afe4662c35ea676308dff10d
SSDEEP 96:A0zGrMckaMLbZy8dY/OpW+zoRxQ2V+oXrYmL6cRiA5ZYNF3rK7EQpATTO5LPw:qwhy8IOJURx9P17eruEQpA3eL4
MD5 SHA1 SHA512 SSDEEP

Submit Download

mesa3d.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md
Size 5KB
SHA256 69f18daf39e41e9de7f309d3d58e390808428b705bc3d9aee67ae3837a387714
MD5 f729628c06a488d329000b0a150cade0
SHA1 41f9dd5266cf0c3214e0adccb33aac2856ebcb06
SHA512 2fc2b8301f77a9efe8203fabd96f7b46b02ef830e7811ce26cc44ef0857da91ae8e12e09fd2b5609a723c300fbd17e6a5f1517be0bfbabb64cbc5d80c2771397
SSDEEP 96:libBButlBF66/gazKG+6oO/zupCSIiOKXeOcq8U3xaBBPG4y3C:qqlBF1rza5cCp1InKeOcqB3UPy3C
MD5 SHA1 SHA512 SSDEEP

Submit Download

pkcs11cryptotoken.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md
Size 3KB
SHA256 4207956677e22cf08d2cb48c02d33af49ad0d390958765f78927b7d474a109c2
MD5 f5c2ae1c635fbb7b25767b78d131bba9
SHA1 e74ab24167fa5a5ad81d921c0f4434782d36b90d
SHA512 ea456e63552f62bac31d2cc19ee0626fbc29da8fdfdf0360235db7c61150b73a176f205f0841c1d21daa13d3913e1140a30f1abd1543278c9d3227a7d2aae148
MD5 SHA1 SHA512

Submit Download

pkcs11wrapper.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md
Size 2KB
SHA256 90ebb35b5dca48421286a5619bd33bf8330ce0f3a0af5fd05a146b6413960a45
MD5 b663de8f5791874053ba8af659f83676
SHA1 64cdf610694139ab4e24e9301fc1eb1e643a846a
SHA512 5cf2080c7dd84ec5f9b35ed2278bc03efe226e8019607dac64e257c8395f70279c29b177ca28f30ae9ec79bf1e939d8197908d8942ea5e222c30d3197fa54225
MD5 SHA1 SHA512

Submit Download

relaxngcc.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md
Size 2KB
SHA256 c596ba2ac54e2eaf5c185de1609ff3617bcd7b8daa5378407d7b3401bb90706a
MD5 7e024162a41b8001b284ff3d8f0cc91e
SHA1 ddfdbb8f674a40298a0f6ead0f0ce191de642242
SHA512 0572fc1642063d1dc7e74c66ff6db90be17773def596d472b77bc35190219b4ec577a90335488b19a9d930ca49febb142249459f35bdf5d7a65cddabd51897de
MD5 SHA1 SHA512

Submit Download

relaxngdatatype.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md
Size 1KB
SHA256 a016e094a7cfb1aca1ff8355ac9976c6e9b74f3d106948591449fde688d0fa74
MD5 f26681fc6b418d6587f0543afe569842
SHA1 f4473c53ea0e53abd13a7e7b8c48d67ea0a0b135
SHA512 3fd2cd0457da9313637a36c93c428b5264705a8d6a1267fe7cf4a2d82d3ab6cda9e4cd442be4dbd92f60e242c7aff15547fb4aee550a5937931101611db17197
MD5 SHA1 SHA512

Submit Download

relaxngom.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md
Size 1KB
SHA256 46d802b3e0097b609976df7488dfe8f9ff5055c31a56fe4d2e6c2ec873f56753
MD5 f2db9a0e53c7eb245339f4cb54de1490
SHA1 03ff54fc8640d74cfd6ebeee1976ed7be59a153a
SHA512 8774fe89e315d7686f763cb4ce3f52b59843cc77fa440846ef6087d2b48229d638aa693125aafe0a877228aa47b56974060cf548d7ddfd1e321ee0ed8b46754d
MD5 SHA1 SHA512

Submit Download

santuario.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md
Size 11KB
SHA256 96bb1bd6f43c8917f51703a8b431e34f7c008e9910936adae12dce03392629a4
MD5 8b3ae3519170781392148a9418f8f508
SHA1 2b1086d4a2486346230fe7e8918188db0b3f8444
SHA512 faabcd7b72bb33a623a065df6b4c13482d484a9f6cce6c25d4e772d92f55ea08d3b0df2a0becb2fa29cd2e607c20337fb26ae9b0945b8f510c347968545e4c0b
SSDEEP 192:1Z+TOvTmjJKeK3ana0x0DU26Q8707Qb2CWW1/IXvsLhoXQ0cVPUTTCqECm7guYuq:CoT0eaB2Q2Dt7o5Esayc2Cm7gu7LDbQ1
MD5 SHA1 SHA512 SSDEEP

Submit Download

thaidict.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md
Size 1KB
SHA256 5df1d583c2209e4643626d5a4593882033d688896f11e69a4ca942ef7e4fc1fa
MD5 729695393e87fba2fc7f8fc8a088bf64
SHA1 164391320c336774ccc7e57683f0e5dda72c5093
SHA512 515541379384300cfa9a3cdf6729ac81234644973c3493ab0becf9a353b72108a320f070f14048ca5620f3f8b02e81b03bb47a7df8c0eb82c015e3d6f4cf29ff
MD5 SHA1 SHA512

Submit Download

unicode.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md
Size 2KB
SHA256 8b2de5fef4e9616044d5255b242870d5d0afe25326756e2ee4920e51b42f3c5f
MD5 a27bd9ffca3d7cdd39334031c9bc7945
SHA1 7d25ef4436de1f6ca07c2be188a53edf5145ee2b
SHA512 d096cc569b814b110278794eb9eba467065f619d21603cf77fdc2f8cd4fde1e3d1573cacf8e2a0c2016f0db44c0ea81471cd309e1b5ecce07dfd05e1e0e4db49
MD5 SHA1 SHA512

Submit Download

xalan.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md
Size 11KB
SHA256 7f1f880ead920f16300630bae0693da89dbbd14e14aec6af62aa56870fe35aa6
MD5 8fe267ca879102d7bbacc6858bb86704
SHA1 453a28529fb979c3c8b0ec469778b8d386119e15
SHA512 2d4b4b37cfd26ff57377327d9e0f871fe8acfbbeaaefbfc3a5815be55ec615e06573a649772127b7b32a5fd71c313f3e77a512c4ed6e55df1719656824f42862
SSDEEP 192:eR0ZmCIH223rq0RnPyVDFb8O7b4iZ/GPPiR9Mc697Vk5Y53BVgbZ:p23rD486z/kMca5Y53sbZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

xerces.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md
Size 11KB
SHA256 181fde9a76eb84596196bca387a34db097a0e7a31372c3d5c06a070f697c80f1
MD5 ea416b8c08e9e122bcdfbcba0100508f
SHA1 e9144730fd0f86f84d6b6bc3a164d0963b14508b
SHA512 682e07ff8cdcaedfdd6a585a4fd4b393e60ed240a50351c8033e3d5fd800efe4689bea48665a47e2f8b4e33953c550f443cb2e60e9c02504f137addc1f97601f
SSDEEP 192:ezgAPME+qm9KBFNVmqfJGcG9XULdub8BXsH4sAr9RKMDm6ia6cdztm7xJn8mpr/:ezgLqm9KfNUqfFGlUpubZ4s0tji6dZmH
MD5 SHA1 SHA512 SSDEEP

Submit Download

xmlresolver.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md
Size 11KB
SHA256 07752135e672091916634655d9f691c0544e28aa71fbb3237395ff09445b06a3
MD5 144072322ade80296d05ad833f06f922
SHA1 d24d5b8056f505e455baa4e64b9dc93be7b08bc6
SHA512 74a41b8d065e6e5942036ef7cb630d96fc2c7008192ab5be6fbb1e000a81932e4a8df905efccb4b37ca85e2af2b7f6fde86c7c52d63cb539898a3d01c684a3de
SSDEEP 192:qx/CIH223rq0RnPyVDFb8O7b4iZ/GPPiR9Mc697Vk5Y53BVgbR:yq23rD486z/kMca5Y53sbR
MD5 SHA1 SHA512 SSDEEP

Submit Download

zlib.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md
Size 1011B
SHA256 471112db61e0c5b94333b1562a2234119082a0c65b1ba8c89810677724aefd7c
MD5 3d024259a607e4ccf06d0f1264a5211f
SHA1 6897bc7689cbfd6ba258257eb2df8446b4c3a12b
SHA512 9145db11cd133bb3851e66e549a3fcabb4409caafc89a5d5278d97a88578695d9485a5c2d61b9108e3b9a3b150099254da775d20cdfdb6572fe450c0860a53de
MD5 SHA1 SHA512

Submit Download

AppCache133727656226049089.txt

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727656226049089.txt
Size 77KB
SHA256 c92c9714bf52503f1fe5809b00bc5871f2aceb056c3ef971c506cd330193571b
MD5 96a3b1bb2a5234063960fefd814f553f
SHA1 60c564068c10a81272d74fbacaf7028b7a0d4292
SHA512 651a925bdbeecec52f531399ceed5c4be122e03057ab5bf9e2515167636f542149824c2edcd02f9310c01cda4a300e5cb343cb606213e8e65c32a7e9c3892e9e
SSDEEP 1536:76HkFPoaPTCz2JA5tRM8Xi9nDYO4lXTqNj+klfFixtPmlYaslQFiP5xf/ETW5QTd:gi67ModgZKsYUkO8E
MD5 SHA1 SHA512 SSDEEP

Submit Download

AppCache133727656623420834.txt

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727656623420834.txt
Size 47KB
SHA256 6d6807b25918190dad22f7f8c1714460fbd20e706cec551b54c5af855696639d
MD5 9ae3e0544cb970b91e1f5ae71950921c
SHA1 971b1f852b4cf5b86ea575a8d7c5f74ded462601
SHA512 71f8916507788b546244d6d078a1f84ec61e3bda2efa0c39b7417ca3fde7e6a208835f733d17dc7cb01c553f7543766b83b818f2d41f9e3374bd411fcc879d58
SSDEEP 768:Dyy8hA5/SOXPd+9F3x+m78p26VYUQ3v2+035GrxUqtkOSNzaZ35DORPHPOQ6urP0:Dyy8K5/SOXPd+9F3x+m78p26VYUQ3O9o
MD5 SHA1 SHA512 SSDEEP

Submit Download

AppCache133727663536793873.txt

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727663536793873.txt
Size 63KB
SHA256 fa0ebe167500c873ed9263eb65aae2dde8bb8a1b7d2252801c317436b56114ca
MD5 b11984c6350e44fa426a330ca99f2da6
SHA1 595c1f07d3706c49c4b1f69f6dcf74b49b1fbdd8
SHA512 f9e181ae3a44d9e9e89224a9cbc5de3fdd53e4d7ae27239012fb0b25e6edad517c8edc7377a9266c7c81280a8b6074de7f8b29a67c21b4d23bf13790a4f2c112
SSDEEP 1536:lPAs05kR96oxO3POXNe3VrsAeFAASmtSO9234vOFP4EOcgNKODkNyhM5LSEPNQQW:2TOwFt5mMognOhskH5eqV
MD5 SHA1 SHA512 SSDEEP

Submit Download

AppCache133727666235612999.txt

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727666235612999.txt
Size 74KB
SHA256 16363fe6538bfdab2e96d24c78921c1ea9aee95b6e40c1bcbe27e81676cebaf4
MD5 ac4fcffc66f7cc84e08d07858c1b82b3
SHA1 4cc02e5f3f3722dad903c4892156429f5d9f99d0
SHA512 9ad9ca33acd20764ce6a6d3b5ddb365dc903e35d9b60fdd5c65c7fbe308d1af5ef077fb0bf7ceef3060ba01f6a73cb6160f89f18b47fe12576686200ec1e9fa7
SSDEEP 1536:wcC3UgOb8aUzxiPcF3W+Ht65Xc5HPgKqvZ3c+kOY5SDOlh9iv37JcY+5EPr5d531:O+o7YEa7a0xCyP
MD5 SHA1 SHA512 SSDEEP

Submit Download

File Explorer.lnk

Path C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk
Size 407B
SHA256 06c922e2c2d5581105bc5695f84c427d5733703041254c932a79424ed1f72ba7
MD5 ad763adc0de237de2bd9ea6f44d5b4bf
SHA1 d3ed4fc75479b62c78c2ed0080c2953aa000124b
SHA512 4b1037d3ce40de148fdcceb75e80b91aa394d410e081f689eea3f0af36ce10f1cc1e1364d55cb87bbb8a85108a87c39dab9b75ab52a8dce8bc98ab35c48476e0
MD5 SHA1 SHA512

Submit Download

ASPdotNET_logo.jpg

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg
Size 21KB
SHA256 b5ae494ce41bcd57bd81269370fe986f3deeb419e854fa92f42befca3718caaf
MD5 67de34cef79080b4d3b2448525298f7d
SHA1 2a10171c653bccb7e8ec90d1d55665043be5df36
SHA512 caca3897a37c57c2440bfa37dbd1659dbcee08d27438525463df5baa6eb54f3e496bbece8ac3b0ba266168d72b15afc25f308a265f5a4d6d013dd7da8d140f52
SSDEEP 384:ilo9kebIwO/4tBLZLqTBCCDJCaXXz/WJHPYTg+0KgVA8VHQzOi1:ilkbTOwraXJLXXGPYguwAWHQzN
MD5 SHA1 SHA512 SSDEEP

Submit Download

HelpIcon_solid.gif

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif
Size 1KB
SHA256 8bf7f9edb0f5940c6ed4bef94f1853f15f7e4baa8b36bfaaec57d3ac8c3356cb
MD5 19fbbb9855d3e772ba0ddaa2b120224d
SHA1 b8e282743ccc4e2e2b5ac4875b0dcf0ef697b3aa
SHA512 c5431a65b4784552ea559d06595c6a29cea5841a0784f07a838a26ebee149c190fff767314f054edfb87105a423d20b7bc6e6e6d279b497039f3bfd86bf0b351
MD5 SHA1 SHA512

Submit Download

alert_lrg.gif

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_lrg.gif
Size 952B
SHA256 9eef911bd061d8fa9ceceebee2e50c7ed4e4cc180bddd26603234dcc6b6156e4
MD5 69a4768c45749c29cba9e6671eeb3f5d
SHA1 71943fd5f7515455e61884b5c80f73921281b395
SHA512 d21fb95007cb452cff3b6ff3580b37f75dbe55b353943658ff025803ffd249d606f118fb1444a0d0687d1c047aab4a2806b14c53919caa3b24e652082e20c884
MD5 SHA1 SHA512

Submit Download

aspx_file.gif

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\aspx_file.gif
Size 121B
SHA256 9f8f0f9804a8e48c7199785e83c8f96450fbc252c18d06e8bd1b5c44001ea51a
MD5 b88f055631baaf98f9f0338236112ee9
SHA1 2fe0baa6a572f9073fa5ebc210e6b5387bdf88c4
SHA512 14e9e3e3f15c1c8de9ab7f1ea505c1c00a06b1e12f36637ba5468e6b2ee3a0c24ce46b11e39f7bee3e933d3d48f61620941f88de5a19ec643575d78899e7ce2d
MD5 SHA1 SHA512

Submit Download

branding_Full2.gif

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\branding_Full2.gif
Size 1KB
SHA256 c16e8d9131db7ea3e1d222b4d58a02050d2e8712a78d0ec015e5bf3e16cb746d
MD5 5d80667ffdaa5143f22a5f28754efa03
SHA1 5f2177600b8c273c72a38a394eca2e09941d18e9
SHA512 cc76a54d258d2473674f052c7413cc4aba575546b75b9d83585d349848fb6e30bec1e9a592b48fec0dc6650bb2bc4c33115652bb84a338bef543bd653b7ba99d
MD5 SHA1 SHA512

Submit Download

darkBlue_GRAD.jpg

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg
Size 8KB
SHA256 768d05c108294f6675ed9019abe2d5e9f371765827aaa5e28bd829c57ad6b616
MD5 daffe9fb7d8e9beebc9318218c20f152
SHA1 95b05c3153d4c53936f9c9bca9f843ef9ef5c8cb
SHA512 3fa173e491472971dd89432ee00751fbacaef8bd153dfcbaca4040cbca300cd5d5e42c495cb7e014ccf7bc43245b24ef19e1242bd9870ecdd3a89d624737551a
SSDEEP 96:zlizKOegDlouwtaApuqtI6U1NlnFoIgggggggggZggggggggggIgggggggggtggi:KdDl5wMApuqtI6U1NlCSck
MD5 SHA1 SHA512 SSDEEP

Submit Download

folder.gif

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\folder.gif
Size 914B
SHA256 7aad57fbdc7f8b25cb8a9416aaa2b935b7cc98ffcd779f14b7ac4c8214ba1b98
MD5 c005ae380989b3fd60d65228e2206f46
SHA1 5da73697cf62283f6b24e7e9b0c2e1dfa7d49d6f
SHA512 f542ce6581c7c2c8886480142542cb469e7c420011ef94bd7d1150ba7a52a8bafe158d130a0814abace04a18a9a6d3a52bf03842f31c5ddbddf037b4a94f9e99
MD5 SHA1 SHA512

Submit Download

headerGRADIENT_Tall.gif

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif
Size 328B
SHA256 8a00dd0ec28a8605e5fcfb6643dce64ed71bd3b54d22c0c8ed80db92fe0a7d4f
MD5 4c5b4dd033f171b7e9006831b85c49ad
SHA1 3c0777ac62878fdc76456a5668b130fb2cb81d3d
SHA512 a6b6e389b4198dfe6a66b0d41ae62e27be65c305029f480363167ca44dff02ad08bd552c369394eef92332b1610b6bd293c747778db9ad4d9bfb8da5979bfa42
MD5 SHA1 SHA512

Submit Download

help.jpg

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\help.jpg
Size 1KB
SHA256 89a8c942f3a9a2082c25738b3e7e853ed59e1493025d5b7889fa3623e1fbfa2a
MD5 5e29432f58dc21fd4fd0ac46ac779544
SHA1 ac8b1828d1c1b02c5f7502dddba0c5911d5126e3
SHA512 a65d5ac5231d075068a310fef96c94182c40f55ff14407700defd9a4da88aac562a69bbe731f2042aacd57cd26bc817411b0a47a43410eecbd60eff345ec3c6d
MD5 SHA1 SHA512

Submit Download

image1.gif

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image1.gif
Size 162B
SHA256 0690daeeaa5601d829fd8828e1c21a2482d580b071a6211f099bcd62d98a4ee2
MD5 fb76f6fd721ff94ee6f9ef86a7ed4664
SHA1 0bfc56bb8f7780b7645c65d417bcb7be9843b6c9
SHA512 aff93372875e366872c765ac57063725b6bdb1b8ce775fc376faf96243943796ce98a116a97ce2f3bb6e5a0e2ed0fa11f6cc905fe03c0eec5ef98c86fdea2408
MD5 SHA1 SHA512

Submit Download

image2.gif

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image2.gif
Size 586B
SHA256 b565573363144da63d82dcbc434a1756642d7ab452931ef4072930678ca73da7
MD5 16e0c2499230da69eae2800cc6c1903d
SHA1 69993b3fa4cbfe0130a1f542ac1e68bdcf94511f
SHA512 368731733660c4fe413a114e39c9c6a700aa6c12ebc83498b603447e6b037348ed4f0b74d2c0ea41a30c8b41431643f9dce9256853899f26a4af9debeee10fae
MD5 SHA1 SHA512

Submit Download

requiredBang.gif

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\requiredBang.gif
Size 124B
SHA256 cbcd2f2c2f455f8a79810c92d49273b76ed5c2110964d5b15ff6c336264631c0
MD5 4f62202b51d77afe278e6319b853ea8c
SHA1 96257190cb674038d28f4ae04e9c9f1ff07c8a33
SHA512 d4e61ab58e010fa3108bdda5c06e238ef79b9c33a824a82b1d84bfac6ffa7d43813b9868bc7aced6f5bacfdede68977a494eb043bca0190a9f12dbfe025dc494
MD5 SHA1 SHA512

Submit Download

topGradRepeat.jpg

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg
Size 8KB
SHA256 091deb94f9f913ecee9e1c0372e2ef4339f7f54e82fcc49a71b688c58ee9e2e8
MD5 9f6b5189c9ecf7fb88be605f2273a830
SHA1 2272ec8f8e02ccf38eafb029b821f4c31f2bc8ee
SHA512 e4ec7ae8e34b7b2893221c3d6f7ff976b9b03ce55c129557c4e8daaf873e58d1ec61ab70327953ede992983507e5e99a5127284d25e58220c43c45abf2865b6f
SSDEEP 192:lTvIJJJJd8/5AImlo/////4SARt3Dbl47:JE35HSARVDbl47
MD5 SHA1 SHA512 SSDEEP

Submit Download

yellowCORNER.gif

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\yellowCORNER.gif
Size 880B
SHA256 0ed7c58902368cb678ac383266f5d006f93ef0d119e27521e5d7eec1a862d3b6
MD5 25a309a1d6b4d1c470e3d29cece47be0
SHA1 c833d7616cebd4632787ce0d429c2fa5b4f95488
SHA512 6c0ff60342adb2bdb9491df1c6a888f9f19673c7a26e9e888e8ffd96317f989f34996d5bc43a1f12618f9fce76ba77486619148fbec5a3edab9d559e1c1238a4
MD5 SHA1 SHA512

Submit Download

1 - Desktop.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk
Size 1KB
SHA256 d3b715b3ee3da73b84ea93198082de34264e4b6e1a6c135cdc1e8cf4e0f2c001
MD5 7e3b9a7e5d1be2d3dff73f9023fa2494
SHA1 783ccd30bfdaf1fa66fe0ba6f55ac5fe3008c145
SHA512 b65e95dd1c842e7e2d57f280b61599f3eb50d0f60b1b0561f34204ba6c9945f8858e0a41eda131610cdd390b9830c502b81737719f3d9147a0a5ec234f1e7423
MD5 SHA1 SHA512

Submit Download

1 - Run.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk
Size 1KB
SHA256 3468a629b91cde7113a6507e2a113c77bd331c6e647d1b5734eb196816a23a39
MD5 2439af6f556b1df778939ba269bb000e
SHA1 3c0b1f941ed149c462102b98bda75745b1982986
SHA512 2c7320df22fba35dcc1e3c3efd5e1988cf3c112d08057c30dd3fd9e579acb9fa1d4031dd0e93b35a6d13c2ba79bbbcf39ebd1a675d4105aaa65556bed3af49e8
MD5 SHA1 SHA512

Submit Download

2 - Search.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk
Size 1KB
SHA256 dea1cb2f722c9a62854539c326923fa1de4e1615db44b544bec02d62b36cdbc5
MD5 6f89010beab3ca53d8145c882faf81c4
SHA1 3c7741e0fd3413e14ab14476ca4bda2b34dc8619
SHA512 5c8e7953b518a34dae75f8caa6fc9b9bd88ba0d17f7a37ed713baae0d07558e3413e8ece8ae33d434b079a2c1747462198ba7e054595b099d69cede403151dbc
MD5 SHA1 SHA512

Submit Download

3 - Windows Explorer.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk
Size 1KB
SHA256 88e37b7294360cedb37adba12f4e41bf506bea985fe9029dc1e1ee2485f9b3e2
MD5 e7edc9452ca9efb5ff4eafcf17a1ac69
SHA1 c18dbd712bed46814a9ce62f935ef48362db558d
SHA512 406954d4c0b18b65a614dc3295dee82df5f5eb8490df5074802bb2fdca70427ae1ba27390c6060ec4f38127904794a84d28df1942e391e5bc3c49f0b55388046
MD5 SHA1 SHA512

Submit Download

4 - Control Panel.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk
Size 1KB
SHA256 fbd7f33b590296f9942301e89fb27fbcd54f23c11100c70eb621170663116c5d
MD5 340dda8d7f948d8ecfc4f38993e4e2f7
SHA1 2c653fba041e23b65146cd977d72520f585dc75e
SHA512 868ab1c0c95072eaef17e9e1871069d6809768e0c3d70968c3f4e3214e7667b4bd3d3eaafa6c1f1483154a6e1006d71d313209dab1fbf7d3fc32e3c8e99e0721
MD5 SHA1 SHA512

Submit Download

5 - Task Manager.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk
Size 1021B
SHA256 df60f320ccde6f6d696e0afbc4e8fa67ae3c64d0514ca4fc7bfee06b6d6ec968
MD5 3d4ccd1eb9dd9e40ca82c42d1e02bd5d
SHA1 3df87acdea07662ba8f089009c253525cf3ce795
SHA512 cf7e975d5fd79c7d16642270724e6a2c3f6925129e1c1fc96d6b49ca77ab61431e754263e3f1f74c7274eff19f8e4794c59ed358f619286a0a6d9c2c7852605a
MD5 SHA1 SHA512

Submit Download

01 - Command Prompt.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk
Size 1015B
SHA256 03a20dc340ec10dc79b88cd90a2f9bf40003e7cf8dee191b88431ad85a6b7fdb
MD5 0ecbba47b759f336a45269b7528a4f6f
SHA1 4b961c687c49bd7fb8f682a6b8ab93834b678e0e
SHA512 2e8479938efe6334b9d3b726adda9ec51dc0622b1763056d5cd472288745a1a712517c4b5372b538f09326c246151913ed09c0375b55a83afe0d0abc42b8d9e1
MD5 SHA1 SHA512

Submit Download

01a - Windows PowerShell.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk
Size 1KB
SHA256 d7765adb533148de1af677775ea17f7257db03f016d5eee3e43e5ad21bb185c9
MD5 1a07f79072f91fd13f40549c7785b3db
SHA1 0a1dc2cf44af0615de722de84299350c49ce2f45
SHA512 d86590f3d65e987dc722f8d36dfda41abeebff8b016d5ceab8ca060948fe643fed573f5acdc93c5e3b947c15a9c34c84ed2a1b17bd7466428ee29f9cb7c7e80a
MD5 SHA1 SHA512

Submit Download

02 - Command Prompt.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk
Size 1KB
SHA256 446c26f23d0972bd16b364863385da1c2987d9f960605ebb94fc65c74ebc4fc9
MD5 5b271d1e001ae62524cc62e9668cef4a
SHA1 6dd435ab798f7304abd1904009bb4ba9488bbe17
SHA512 de2519ccb5a83584aa2cc7e738d39987d11b4151e44ca3989b02dbee793974f24bcb08d168e261066dad55576ed9ef1f4d0d9cd60154fb1db364ef848417d054
MD5 SHA1 SHA512

Submit Download

02a - Windows PowerShell.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk
Size 1KB
SHA256 2a8f957811acbbd8b99f7cadb01425ff3e3676d677cd83abe678ba41c609fbab
MD5 aa4a36f4dd30dc6f1d366d5ca60a1bb6
SHA1 74b2f02cbd992d801ef129c31eabb8adc210e5e0
SHA512 7ef929f09643cae069c3519d52c233aea7f73ac776dac893a8f89334efec9ee0b0fe29aad88d70188b1255dcfe6cabe0c9310f906a68b5560728ef085d86da2c
MD5 SHA1 SHA512

Submit Download

03 - Computer Management.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk
Size 1015B
SHA256 8d8dfb27dec40752ec49d82132b287656eacedb3989efc0c2a660581c8f15773
MD5 406b089e3b255f3fe4c14980f70f9b61
SHA1 498732abe929d8bc836e46ef8a730a9f43537eb0
SHA512 90009793273f6acb4f32dcd6ebf20020ec277367663fab76e62da5847b08c55b6fee3a1356193ab9e52e258d4b3059b42f0ba91ed1ad85e39d385fa3f69386b7
MD5 SHA1 SHA512

Submit Download

04 - Disk Management.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk
Size 1015B
SHA256 59e025cafabeaaf9bb5103882f2f615f1a89de03b05f46d55248d34fb60f63a6
MD5 6c47b451dd449f4f08b7feba9cd23c09
SHA1 58b35bac63a5c009a5f41fe300159f233fb66d82
SHA512 b6beff4f34f0a235037e83436d38ef9c1f52ed9c29e7a795ea85993ae9a1571ce18f929b4aa32fb4728cdfc2fd5cd5b3a1d9065218d7af08782c857b98b3ab22
MD5 SHA1 SHA512

Submit Download

04-1 - NetworkStatus.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk
Size 1KB
SHA256 d7cd9e2690486dc3b76363391db7c9c59cebfbc531bf2846932dd4a4d3573569
MD5 767603e074b684c7b96ea7052c3450ff
SHA1 4240970ff4db342abfe60b151691ce003a0119c5
SHA512 08cb243dc691a91322b7228665a338d9ce8b8597732d3485647a2007f348a321d4eef00d06cddb4f6715ad4f73b53c45c569a70aa62150fe65d23622ba9e6656
MD5 SHA1 SHA512

Submit Download

05 - Device Manager.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk
Size 1KB
SHA256 afef134a75c9aa8578a78ba66336fc75db4c1cd6770453ad3263fa41c0ab7868
MD5 0f6d4de2f247faa25a2e718a98e12b8b
SHA1 bc6cb1254f068c1aac74c1fe1d0cb7f2a13621fb
SHA512 c005c0b1db6bf3eed2661b1ca407cb6035690444493942bf1328f83e97a87726668b1012f61ee87b18eb9c5b4c90e8ae7dc95b461a562a75df8003af2867bd5d
MD5 SHA1 SHA512

Submit Download

06 - SystemAbout.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk
Size 1KB
SHA256 596983c46a83f56b9c2d823fa2982d400c270e1016331142dab1d77266631c8d
MD5 0b62484275a9823c2d4a7bcfe04a3954
SHA1 1755ae1bb16bc45df54f486f2844da93530fe454
SHA512 3c65fd5ce5659643dd3c3504b5bef6eedb8f2c4824bed000738bb7fa9d64fae20076283d68b1f15678c4a3c497dd0879cb903da5b3364822e09535dc8749d817
MD5 SHA1 SHA512

Submit Download

07 - Event Viewer.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk
Size 1015B
SHA256 1d5d86c58137b8e87fc968f897e6220ee6f773e11f86523cfb27bb1fbfeeffa3
MD5 0477baf1221a1d30ca65eac1fdee1796
SHA1 8358a448c8150d48237e7dfe11eda8504b4871c5
SHA512 76ab5e9a70c04feaed661d9f111fe4a779935caeb542237d5472149d13ebe54c531fe046dd3a41e83f65f5f32191afc1cab34a7d6330dc0f396715627fdd3f0a
MD5 SHA1 SHA512

Submit Download

08 - PowerAndSleep.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk
Size 1KB
SHA256 5ced3ec3398c018b622778065b0f5379e212ad5b646f004819f06cf09cd213a6
MD5 def96ff5f2a1e4d935504dbb636cf806
SHA1 8723a053f2ad2becaff6841ff03dd9f6a3452a7c
SHA512 5dce0a7eb129b56de2952400a26bff61402f8ac3456a92062b1e6bec19779b54332a7c4279ad612ecb83d3fdcb8468cabbf4990715ecde097c134a09c592b7fa
MD5 SHA1 SHA512

Submit Download

09 - Mobility Center.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk
Size 1015B
SHA256 01cb2c51318421fd3dd4531fad4ef994dc3c6a94fb273a53d7043d52bcb2bb1f
MD5 9f7055c82c48105afe4c074db5c2498d
SHA1 1e770a79afd54cd1d0f901632845dd1b81948472
SHA512 0861a983eeaca229aab68a0486090e1db0dcaea5d9fa0160040257bd4d5f38f0bf3f08ce7153e9438f34520b881f3c4a53e844ad79054e4d2bb6a995f460637f
MD5 SHA1 SHA512

Submit Download

10 - AppsAndFeatures.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk
Size 1KB
SHA256 f4c065a940ab041443528e011d63a72630e4cda39cee652888b0a51d0594ffbd
MD5 3597831998567e62c506e3999e6aea8b
SHA1 e8d466301ca10e8f83aabcffac4d9e991f807cf2
SHA512 291a0ba164613709ba493f861d5f43c0fa7772e1d06cee739e440ca5270df17d9e233b94212de0a17e181604c4e609842342ede8e31f5864a25397f9629ceb19
MD5 SHA1 SHA512

Submit Download

Shows Desktop.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
Size 352B
SHA256 3aaf481429b95b83b67f71bf6f75be6caf42c3e49cd94e69775c9eda837698a8
MD5 d888bd3b411d67e7b4d4da1160bea1d6
SHA1 0c923d64c37d04f3728db366e0f18965ec7d0afe
SHA512 36f437666352705862ac17d43441f24cf2a515f5ea8070ce396fd2dd8d90a227000f7b7e89d7768fed3f09c5fd0d163d4edb42a681f3a1f4ca34082767071734
MD5 SHA1 SHA512

Submit Download

Window Switcher.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
Size 334B
SHA256 fe34061d335c4698f0ad7b6bf8511ae28fe83427c7f459c5c697d82cdabc3262
MD5 2d2c99cf69fb89598462729c3f4104ab
SHA1 0e2587c73077f48188d8a8bc0af87ed98c002901
SHA512 8c46c826ce078ca5160234b48c888d4ec01e697370c5d37d33bc15628637e17919d9164d27eb47c1d8a0340164666a2120e7871a038eabce521962fd09c8fe34
MD5 SHA1 SHA512

Submit Download

Magnify.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk
Size 1KB
SHA256 7502d9a5f2c06920d8399e5e771f1650ee09059dc9364104afbb6c26c5f897aa
MD5 5e76d128b97d17397f53ecdf7280f5b4
SHA1 95a724f29d4cba2032d5826d7f2e1abe3ce57604
SHA512 fc254dc9d64d64215ca3ab4d502737210be8fa9240c52f6722ce358b7958db2e5bc4c73422a93b9f859a3f714c1f02ef9c3302f2515e1040321062e72ed1c0c2
MD5 SHA1 SHA512

Submit Download

Narrator.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk
Size 1KB
SHA256 a9abf6950e36768ceb0e010f89d22cdec9d46de266c40e85b111fd61e6b23f81
MD5 491aa2453fc9e8e7ccc0fdea27ffcb5d
SHA1 9539e47bce271ee3be2a837546559de9ad47e718
SHA512 f566bcd52db71302bc6f780d2dce15a93c33430e65af23ef6127310390597b525f2334235b346c8bbcc6c39036676dc05d97db0ba3192ea0acaf0470768967a7
MD5 SHA1 SHA512

Submit Download

On-Screen Keyboard.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk
Size 1KB
SHA256 026b27fe40388c42ad5f459ac0bf28d02dea0460468bec541e3f1e60db13ac9c
MD5 824b33ff1125ec518333aff4c8773d31
SHA1 1b660413e47e073baef92c82ce45e2788a9c96e8
SHA512 fc6ac57658c5c41a422892c4204c6cae4eeec8db0460b53a1fc64cc84a9df29f4eca1ce16aeb40418c7121a0d59e6a2b5f1f9576060c2a6ad30561d9ef77954f
MD5 SHA1 SHA512

Submit Download

Administrative Tools.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk
Size 1KB
SHA256 242955ab885582f526e387af59c6a09387875e4970e55d69dafb79f7998f539a
MD5 015f364288938affb979c476399adaca
SHA1 023bcd81972d0b34455f6d5a189ddb053f7371af
SHA512 bc92201fc145570553aed763fe79c352ac105aa966dad1b04eab821e90f2b85586bf27f21e8a07d1129d9200c48b3b9effd0b90eee4025ae54b24ce21112c713
MD5 SHA1 SHA512

Submit Download

Command Prompt.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk
Size 1KB
SHA256 eb462b7e6941cfa86795ffa80e9d5e9023ac24c03dafd406a104c21600110947
MD5 0c82ba8fe0d7eeddbeb361a385e2dc00
SHA1 51314fec496e7d8a3f05f1db31e0f0b761c3a003
SHA512 15ca863e50ed9359d796af174725ae680047594adb91b37b863b111cb2cc2cf289b37ad9e09ac0b013a04e65d8d3da4b90dad11e10e869b4c07bcbf0d6df78cc
MD5 SHA1 SHA512

Submit Download

Control Panel.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk
Size 405B
SHA256 b0ffa22008f9be879a27d3d53e75c1f665a0f46e2f414adb27e9ef6b1cfc814a
MD5 66323863b5e1ed0bb45236d034b46524
SHA1 e18d74f9bf93544af8858ccd30015a3a42b11cf6
SHA512 d09df32c50fb7c448c1fe675c853f2cf1880c40676ebfa7a0344ef0fd6d58402d0dd7ba31a89305484ac1a334ceedeed4cc396b3226ef68e40e92d077b78ee56
MD5 SHA1 SHA512

Submit Download

Run.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk
Size 409B
SHA256 cdf237ca97644fca278a192fa631c1840aefcf6647a4202151be10701371aa8c
MD5 3631b31ef61be8982ee9eb5d961856e2
SHA1 58c2781bcc63be1f976d8b0f3ae65988cd42ede3
SHA512 ee6573a9d882a0bf8c2b3292bbb93e83d48ab1531296d9efd374221105820d12d67e6cdeeb449e8ae83124b352c23d5fb5cf8f3a4b03ce1dcc469dba8b5c5b3b
MD5 SHA1 SHA512

Submit Download

computer.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk
Size 335B
SHA256 68b1b20193a86e303d8416207056eaeb72e7fa81874ffa67f3abf93949d574fa
MD5 9701817505d28278f7cfbdb74dacc28c
SHA1 49871e9d99344f2c1c04b8471828e7df2d5969c3
SHA512 11ba7df920d1c3e3156d7004704ef608a4683596b7a76de25880d8c2310ad1db07a8008436e08828cdb33f093ed666def4aa086716c177575e321880abac57fd
MD5 SHA1 SHA512

Submit Download

Windows PowerShell (x86).lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk
Size 2KB
SHA256 ce95c3172c7d9f4afe348e0e906a6cf1ec56ed5c4b20621a677e75984c866c94
MD5 5ca7459b71c09836df7efa87d0371881
SHA1 01de84b9c1617509bb63b9b662ead002db3303a1
SHA512 3400f0ebd46d59486ffa7c5502d2483b21b140b0b29529d678d8e8c0696b7e22fdbf69273660c2bf340509ac0ebad8c1aa8e5eb1012ee21298b43ff22c5b2c7e
MD5 SHA1 SHA512

Submit Download

Windows PowerShell.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk
Size 2KB
SHA256 670f3c8333ad824b0c79364c319b9e8ad9082559c0effdc6b4284c056a9567dc
MD5 03005d3c7e95e3b6da33d0294159ef4e
SHA1 1010e3f4732d3423aa798f5a357907d75dfa8fa4
SHA512 65b39557a2bf88e682e3973e3f5e7f769b0bb842fc52b495db5b29775bf2fe8d33d18f3818c2644947ad200aa8e64b3ffdd49aabc5e01209930a84b5294a2917
MD5 SHA1 SHA512

Submit Download

Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Path C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png
Size 296B
SHA256 4960098e8dfcf5cb47baaac002f29500b4ecb760d4a4b5b5669f1069bd8a8e7e
MD5 8f009f0509b90c94c90a6d69696db159
SHA1 4f824ad9b38ed195b7c7dec608cd392b9e91853f
SHA512 0e787db29fefe12c966fb4b236798e338a82cd5bb27aff3468d62a01413dcd28d556e3630cdecbf3cd5c65ccbfe94cfa2cd7970016caedcb786795dfd059940b
MD5 SHA1 SHA512

Submit Download

Square44x44Logo.targetsize-44_contrast-white.png

Path C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_contrast-white.png
Size 276B
SHA256 2135151f073e4ef571062d76f5e7b543a628fd3fec9f4baa4365705cc1c5c746
MD5 9b703600a09ed0acca9010d246e09433
SHA1 02d1d7e17a857e7598cdabd748bf56b661e41b9d
SHA512 6c3bd46226d4b31a033412d791ce503ccb570d35c075e61b353e390cc073ae10c3535a17bdd6ddf6d877cb2244fd692e1240f84e5c4399587df33cb8823f81d0
MD5 SHA1 SHA512

Submit Download

Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Path C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png
Size 296B
SHA256 01d957f841679ce7f22664a3a059c61ec87fba084f67a9f44300cf631f3cee3f
MD5 1ea2b709321fff50d2eeeb05b6055e28
SHA1 005f4cc5a241329d903c17d6df1a855984d9c235
SHA512 2576b038067f4c1f801922357dc5874339f8f106e5be2a5f94e76766fa0aa0ceca5002f119602d5310d9762c99c0a5f0e5735b1b39ff09c831fcbdf3be9bd099
MD5 SHA1 SHA512

Submit Download

Square44x44Logo.targetsize-44_contrast-white.png

Path C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_contrast-white.png
Size 276B
SHA256 3984f1bfd80ce518e2aa1322124cdb9bb371cc6467f65bfd56e97fc5d9221ae3
MD5 d47e4eea6700bdbdfcb03b6f674d294a
SHA1 1cf870dee69e1eba51b4f0b8ae3bf0c2e060b94f
SHA512 7bf0c05f4e347f47bb9da0f7599fbe6c0f77d22dec4cd7065b6eea57e339519b79758e3f3ec2798a4119efa6efae0bda46af6b02350bffe9fb1b1a0d7e5cd661
MD5 SHA1 SHA512

Submit Download

OneDrive.lnk

Path C:\Windows\WinSxS\wow64_microsoft-windows-onedrive-setup_31bf3856ad364e35_10.0.19041.1_none_e585f901f9ce93e6\OneDrive.lnk
Size 1KB
SHA256 8a296216dae0c585706fa6101bce0cb32d5941f50f91e160b7106cc3510f727c
MD5 5ee6b3866309fa4e6a3bc1f821ba9690
SHA1 e6845f8539649d34d9ecfc5c3e6b57def00cc4f1
SHA512 a31e18d41d6f38b9f2e40f7f273372b269d2d674d72ca3ab75feb1ee37e588e9bb9f3f25db05a9794af8e04e0ff9cf6d4f120c86563a46b08868192c475a8ddf
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads