3b0a71ace290b700b9c77b6df1cbb8ac8ec0d2445bbc6bf2680bd4a578277c9b

Analysis

max time kernel
93s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
08-12-2024 16:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
Size

12KB
MD5

d80afaaeb842ded0c6fa15143d909ccd
SHA1

592d790d0dc21a4f1148147dbae160a253607acb
SHA256

3b0a71ace290b700b9c77b6df1cbb8ac8ec0d2445bbc6bf2680bd4a578277c9b
SHA512

24cb2953c96a0aba9291e5cec18a9d6fecae79e2b161b9b6812862bd0a7b7d728a7a530910dc35c0296b18a676bee46bc3b670f98bac7cef1fb24cb354433d60
SSDEEP

192:G/TrG62a6B10k3g4fXk1iTV3HGc7EkpAqEjvu2q9C/YpXnAITZfPtRMtvM:GebFNw4Pk1itKkpAjjI2Ypdmtv

Score

9^/10

discovery persistence ransomware spyware stealer

Malware Config

Signatures

Renames multiple (2180) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Drivers directory 9 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\drivers\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\drivers\gmreadme.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\drivers\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe

Drops startup file 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Alcmeter = "C:\\Users\\Admin\\AppData\\Local\\Temp\\8k93yDRf12N2G9W.exe"	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe

Drops file in System32 directory 64 IoCs

description	ioc	Process
File created	C:\Windows\System32\DriverStore\FileRepository\c_image.inf_amd64_31731e48047fa274\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_legacydriver.inf_amd64_c07aa9c633b5271e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmgl005.inf_amd64_d9886a7bbe9e55ca\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmvv.inf_amd64_26dc960cc4c84207\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\wbem\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_UserResource\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_dot4.inf_amd64_55905bb33692cd84\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_pcmcia.inf_amd64_92be188847324ddb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_EnvironmentResource\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\PerceptionSimulation\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\DnsClient\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Com\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Dism\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\itsas35i.inf_amd64_4f5850c71046b0cb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmpp.inf_amd64_e196624c9ed43e83\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\urssynopsys.inf_amd64_057fa37902020500\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wsynth3dvsc.inf_amd64_1a08a3b6cd493e1f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_1394.inf_amd64_cac08af12caec647\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\tsusbhubfilter.inf_amd64_283a44fe508f0682\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\ws3cap.inf_amd64_6cf8ea2249844b50\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wvmic.inf_amd64_ae02676ac3e3c474\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmnis5t.inf_amd64_c6e181de81a59b54\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\multiprt.inf_amd64_a9b96d6c7813082a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_EnvironmentResource\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmgen.inf_amd64_977aa23dfab87f15\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\unknown.inf_amd64_b8b0fe7bbc76405b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\whvcrash.inf_amd64_1173082afb4becfd\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\en\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Schemas\PSMaml\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Configuration\Registration\MSFT_FileDirectoryConfiguration\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\bcmwdidhdpcie.inf_amd64_977dcc915465b0e9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\prnms002.inf_amd64_2176cc45624119a9\Amd64\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\usbvideo.inf_amd64_b401376fd0a39c95\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\oobe\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCClassResources\WindowsPackageCab\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmrock4.inf_amd64_bc507add47f436ae\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\volume.inf_amd64_bfabc750039f8ac1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WaitForSome\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmlasno.inf_amd64_61370f3a47f08ebd\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AssignedAccess\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_scmvolume.inf_amd64_de693592afe8a496\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmcodex.inf_amd64_f5594a2af66d11ab\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmsonyu.inf_amd64_0e77868deff0b0cd\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\EventTracingManagement\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\MsDtc\de\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ProcessResource\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\MUI\040C\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_wpd.inf_amd64_0245a364d71cf6b5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\hpsamd.inf_amd64_0784fd3ef0d7ec93\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmgsm.inf_amd64_d7b1959484ec8228\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\microsoft_bluetooth_hfp_ag.inf_amd64_d2736f1d9bc815e1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\migration\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\F12\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\de\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\ehstorpwddrv.inf_amd64_220e4fad6c84d016\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCClassResources\WindowsPackageCab\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_GroupResource\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmtdkj4.inf_amd64_3bc71c4327f9f94e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\Printing_Admin_Scripts\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarWideTile.scale-150.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Car\LTR\contrast-black\WideTile.scale-200.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files\WindowsApps\Microsoft.UI.Xaml.2.0_2.1810.18004.0_x64__8wekyb3d8bbwe\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_x64__8wekyb3d8bbwe\Assets\contrast-white\PeopleAppList.targetsize-32.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\contrast-black\LargeTile.scale-125_contrast-black.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.1903.1152.0_x64__8wekyb3d8bbwe\images\illustration-UploadToOD.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_x64__8wekyb3d8bbwe\Win10\SplashScreen.scale-100.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\AppTiles\contrast-black\MapsLargeTile.scale-100.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\cloud_icon.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\multi-tab-file-view.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\nb-no\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected]	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\cstm_brand_preview.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\themes\dark\dd_arrow_small2x.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_x64__8wekyb3d8bbwe\Assets\contrast-black\PeopleAppList.targetsize-40_altform-unplated.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\contrast-black\SplashScreen.scale-125_contrast-black.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\MapsAppList.targetsize-20_altform-unplated.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Car\RTL\contrast-white\MedTile.scale-200.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins3d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\HomeBanner-4x.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\167.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-96.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-36_altform-unplated_contrast-white.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\GooglePromoTile.scale-200.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-96_altform-unplated_contrast-black_devicefamily-colorfulunplated.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\pt-br\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppPackageAppList.targetsize-80_contrast-black.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\GetStartedMedTile.scale-200_contrast-white.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\BadgeLogo.scale-150.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-white\PeopleAppStoreLogo.scale-100.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1906.2182.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\AlarmsSmallTile.contrast-black_scale-100.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\close_x.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\assets\Sample Files\Complex Machine.pdf	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\sk-sk\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files\Microsoft Office\root\Office16\1033\Bibliography\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxMailWideTile.scale-150.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagementSource\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\ro-ro\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_x64__8wekyb3d8bbwe\Win10\MicrosoftSolitaireAppList.targetsize-48_altform-lightunplated_devicefamily-colorfulunplated.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.1907.2471.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\ScreenSketchSquare44x44Logo.scale-100_contrast-black.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\WideTile.scale-125.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxCalendarSplashLogo.scale-300.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\Doughboy.scale-300.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1906.1972.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderAppList.contrast-black_targetsize-36_altform-unplated.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\contrast-white\SplashScreen.scale-150_contrast-white.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\204.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\MicrosoftAccount.scale-180.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\AppCS\Assets\ImportFromDevice.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\EmptyCalendarSearch.scale-125.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\SwipeTeachingCalloutArchiveImage.layoutdir-LTR.gif	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Home\LTR\contrast-white\WideTile.scale-100.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-256_altform-unplated_contrast-white_devicefamily-colorfulunplated.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\cs-CZ\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\pt-br\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-white\SplashScreen.scale-100_contrast-white.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\AppPackageAppList.targetsize-24.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\Assets\Images\SkypeAppList.targetsize-32_altform-unplated.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Collections\contrast-white\LargeTile.scale-100_contrast-white.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\hu-hu\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\zh-tw\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-040C-1000-0000000FF1CE}\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Program Files\VideoLAN\VLC\locale\nn\LC_MESSAGES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Logos\Square44x44\PaintAppList.targetsize-24_altform-unplated.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\share_icons2x.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-i..sbinaries.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_414a0942eadc3634\403-8.htm	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-tapiservice.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_66d01a31af21461e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-u..trolpoint.resources_31bf3856ad364e35_10.0.19041.1_it-it_9afdb9a332b0dd95\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_netfx-system_tlb_b03f5f7f11d50a3a_10.0.19041.1_none_4bc8451512180143\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_system.transactions.resources_b77a5c561934e089_10.0.19041.1_de-de_ce6129959ad0f8da\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-s..extension.resources_31bf3856ad364e35_10.0.19041.1_es-es_a0931ab5939b74bc\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_system.runtime.remoting.resources_b77a5c561934e089_10.0.19041.1_de-de_0ab77cfbefa728e4\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-i..l-keyboard-00000470_31bf3856ad364e35_10.0.19041.1_none_a715b57b383fb0e0\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-o..ectionflow.appxmain_31bf3856ad364e35_10.0.19041.1_none_e2e6c013142b9760\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_10.0.19041.746_none_57db037f5373cd32\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\enterpriseNgcEnrollment\views\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_mgtdyn.inf.resources_31bf3856ad364e35_10.0.19041.1_en-us_4209bd95c85da765\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-devicequeryprovider_31bf3856ad364e35_10.0.19041.746_none_b4f3e8d89fa3d1e8\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_uiautomationprovider.resources_31bf3856ad364e35_4.0.15805.0_fr-fr_c67deac0d060f11b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-a..lprovider.resources_31bf3856ad364e35_10.0.19041.1_it-it_27bf1c0f118d59f9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-d..extension.resources_31bf3856ad364e35_10.0.19041.1_en-us_951e12109694b735\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_10.0.19041.1_sl-si_60a279d553aa108e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_10.0.19041.1_es-es_a0b298a30f7260fc\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-s..ouppolicy.resources_31bf3856ad364e35_10.0.19041.1_de-de_3000b71d1ad4ed13\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_mdmhayes.inf.resources_31bf3856ad364e35_10.0.19041.1_es-es_5c93b5e4d0c40889\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-t..honyinteractiveuser_31bf3856ad364e35_10.0.19041.264_none_a61d15efb6291d40\YourPhoneCallingToast.scale-100_contrast-white.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_system.componentmod..notations.resources_31bf3856ad364e35_10.0.19041.1_it-it_a6b9ede0f2cd3e88\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.WindowsRuntime.UI.Xaml\v4.0_4.0.0.0__b77a5c561934e089\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-t..rk-ctfmon.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_eeed758fc87b0a5e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_usbport.inf.resources_31bf3856ad364e35_10.0.19041.1_de-de_fb0cfb34575678f4\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_microsoft.virtualiz..vmbrowser.resources_31bf3856ad364e35_10.0.19041.1_es-es_1288a7adb07378d6\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-healthcenter.resources_31bf3856ad364e35_10.0.19041.1_en-us_af63b27bca98ff02\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-m..ace-remoting-xactps_31bf3856ad364e35_10.0.19041.1_none_37026defadb21494\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-security-ngc-ctnrsvc_31bf3856ad364e35_10.0.19041.153_none_2029fbd0ded1b5c2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-w32time-adm.resources_31bf3856ad364e35_10.0.19041.1_es-es_639616264c8291ef\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-charmap.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_4a077f22be84abea\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\diagnostics\system\WindowsMediaPlayerPlayDVD\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-c..tem-tracedatahelper_31bf3856ad364e35_10.0.19041.117_none_d325f5576a28a4dd\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_10.0.19041.1_hu-hu_e70650bcd576c69a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_system.web.services.resources_b03f5f7f11d50a3a_4.0.15805.0_es-es_610c0a14ae86170e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_microsoft-windows-t..cognition.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_668183daca7f0f3a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-d..cking-adm.resources_31bf3856ad364e35_10.0.19041.1_en-us_db78f0b735ef61c9\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-i..d-japanese_nec98-nt_31bf3856ad364e35_10.0.19041.1_none_f4128cf9684c5e2a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-p..rgrouping.resources_31bf3856ad364e35_10.0.19041.1_en-us_448c87ad5e6c3306\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-remoteassistance-diag_31bf3856ad364e35_10.0.19041.1110_none_284d3aaa9271783b\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_security-octagon-agent_31bf3856ad364e35_10.0.19041.1_none_b579cbde83e97bee\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-c..complus-eventsystem_31bf3856ad364e35_10.0.19041.1_none_cd3356f3257be89f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\Microsoft.NET\Framework\v3.5\MOF\es\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-c..ent-indexing-common_31bf3856ad364e35_10.0.19041.1_none_bca51b4e766dd871\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-i..l-keyboard-0001042b_31bf3856ad364e35_10.0.19041.1_none_560c2815e82e6e57\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-n..ion_service_runtime_31bf3856ad364e35_10.0.19041.1_none_b946927a16448b8e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_netfx4-aspnet_webadmin_wizard_res_b03f5f7f11d50a3a_4.0.15805.0_none_22b85720c37c52fb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File opened for modification	C:\Windows\SystemApps\microsoft.windows.narratorquickstart_8wekyb3d8bbwe\assets\NarratorUWPSquare44x44Logo.targetsize-96_altform-unplated_contrast-black.png	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-fdeploy-adm.resources_31bf3856ad364e35_10.0.19041.1_en-us_e7b674bdf46cd41a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-s..ktopini-accessories_31bf3856ad364e35_10.0.19041.1_none_a208296858c76413\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-usermodepowerservice_31bf3856ad364e35_10.0.19041.207_none_3c300852ab214f81\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_microsoft-windows-ie-controls.resources_31bf3856ad364e35_11.0.19041.1_es-es_3b7861a209e4186d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\assembly\GAC_MSIL\System.Data.Resources\2.0.0.0_fr_b77a5c561934e089\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\msil_miguicontrols_31bf3856ad364e35_10.0.19041.488_none_2ffa4308e32b9199\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_netfx4-ngentask_exe_b03f5f7f11d50a3a_4.0.15805.0_none_1bb0d4ac7da3bfe1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.ManagementConsole.Resources\3.0.0.0_es_31bf3856ad364e35\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-d..mnotificationbroker_31bf3856ad364e35_10.0.19041.1_none_7da5a59f860f2406\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\x86_netfx4-globalmonospacecf_b03f5f7f11d50a3a_4.0.15805.110_none_0022a926983d7d38\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-authext.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_8ab66cddc6b2724b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-g..cy-script.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_19c60a32558ae412\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-tcpip-driver.resources_31bf3856ad364e35_10.0.19041.1_en-us_3ef517d861ab8bfd\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-u..oryclient.resources_31bf3856ad364e35_10.0.19041.1_it-it_043a7b7c32b0445e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.19041.1_hr-hr_b4205a674b468594\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-directcomposition_31bf3856ad364e35_10.0.19041.1266_none_1c8f1f932b553c89\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe

Modifies registry class 10 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\ICJIUERSVAVCLJG\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\8k93yDRf12N2G9W.exe,0"	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ICJIUERSVAVCLJG\shell\open\command	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ICJIUERSVAVCLJG\shell	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.Ejei\ = "ICJIUERSVAVCLJG"	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\ICJIUERSVAVCLJG\ = "CRYPTED!"	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ICJIUERSVAVCLJG\DefaultIcon	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ICJIUERSVAVCLJG\shell\open	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\ICJIUERSVAVCLJG\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\8k93yDRf12N2G9W.exe"	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.Ejei	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ICJIUERSVAVCLJG	d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\d80afaaeb842ded0c6fa15143d909ccd_JaffaCakes118.exe"
1⤵
- Drops file in Drivers directory
- Drops startup file
- Adds Run key to start application
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:2716

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png

Filesize
50KB

MD5
4071637d767934428991f4bc65a1181b

SHA1
50075e362bce449affb885f486513ad8f72d7273

SHA256
bbb38b2c3019a0427ea4e04e99fa8312916dbe3e63e7828f776c8aafb11fd27d

SHA512
779f9721d09b5e5ee7f31c6b13b70bbc519bf240b735467fc7bfc0e2f205a469d080b8eb30a4d6ef2cb9e0a1f6d9265503917964eb20ba9983e509c85d9a8dc7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png

Filesize
1KB

MD5
2daee851f07796e6d1168fc80fba942c

SHA1
2dfbe66cfc6e22a931695a811f2ccb26da0b425c

SHA256
07cb852c6d58245522f8a112fee46b6fef9adbd12e7f25fd2471252ea3460778

SHA512
10ad63630be792215522876f14b982dcda23b4de9409e676b9597c7dd2abb419856954b721dda0dc55d767123825da1d52a84db5c0f498675ed513fe0ccdf4a3

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png

Filesize
3KB

MD5
59bfe1956b23de0acb97ace0b247016e

SHA1
94392ef930549c3b9138522a4a1056b9338ab92f

SHA256
5ea89b7cb148fbd44210cc9b1caa92c166815689b09a3036f873accf9df4cf17

SHA512
b72f7e9fad67a4c70df0e626b44a0be652f53bf73a7da76f6edf6ae7a78037d24730abb204571c31dda86059cd40c4b8c9fd6350dd4880bf5ce1a612a9647bd3

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png

Filesize
683B

MD5
49e4f1e8696024dbfd1093dc18b14541

SHA1
78c12e3101eb5e63e90c585077476ae93471d81d

SHA256
b9eb64287c7c0fa68ef6159c3a63eb7d647fa14d9c4de2e0c37ee116792e6237

SHA512
2de1a33782d8198c4fb36ef394a3cf9c1c4562af9431a07e579f9fab8a1a1367dc686239901adfc1dfce6d2299a6ce28c43b67c03cdc6fd5d647978f7b020ea6

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png

Filesize
1KB

MD5
9a58887c556dd09bde774a9a45baa568

SHA1
1e0c9adfe9cebf98120bbec1b8a456a08a66fbd1

SHA256
56d09e509db0befe388cb99a139627cac6a16acb69f982a2945abcf33d8ff164

SHA512
55cb04baa9b061b681c19d23c41ad36441a999565b0cea4bac3fedae8cf543efca6c95fbb2059a4c3ef745b599b4bdab39ee7350485ce271b72e5834958d17d2

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png

Filesize
445B

MD5
be591e098ac14998f29f38f92b458269

SHA1
48f7de5da2858f10db52dd06c44b1f49871ded3a

SHA256
2abb48ebb3c1da62576b056b8cb2a8d154aa44782689dc1b2277431d7a0bbdf1

SHA512
613e795b2f0606acec9d1d397c705b8007927d031d86b9b877516bf6437b424955ef7c2bcff46e6362ff7a6d44232d71295bfd7261ef2fdef5b5398bd347588f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png

Filesize
611B

MD5
0998aaf21f804e5be3ca89aae25cbd40

SHA1
ca11cf31ee8f03eebfdfc246f3db231c17116cd4

SHA256
56f949a0716c326282239bc8c1476ed54ae49418763158bd4538e7e8bcb737c4

SHA512
dd33663366a9abfca82f9032965a3c7a074c243bbe67fe5740b5e6e681a5629106e3073b1d589b5771983079db1a5ede7059cf880c99f87d794dd0e6d7d84a0b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png

Filesize
388B

MD5
1c3549bdb960b2f798d664dbb8079a15

SHA1
8041aeb83c0fd4ebbdc78a663a5d209b2f0f1447

SHA256
ff0293ce21b5cb107ac79a0bfda9b2b184ada33844f9aa4a59ca0215d40e3558

SHA512
ba19bd7b499629fb31ff257f769ac46b312a3733f4c4518e9c2b4430d381ea0159e423000f73c1d16b1b0294dcc01a5fb39477a35f2fc7b0ab904a6b3e2edf67

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
13767a8cc17ac10c9e9730fd67d6858f

SHA1
ca613ba0bbe09fcc4644ec8bdcbfa97ae734bc88

SHA256
a4f44c5dd872c747822b7fe98d4fb8f3880218d86cbafb0e8541d70b3d5b01ff

SHA512
9bcf2b35cce6f43cc58a27226eeb99dae10af8a82168ced82897ace7ee8beb277f2e01cc4396bb9c77eade91b341f34e2391faa1ab6a31e670c647314d2dd7f9

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png

Filesize
388B

MD5
70815cfe64f88e4ee19ed7ac20d891d7

SHA1
20339a4f0cdcbd5712373fca3a91fa9a75c3a72f

SHA256
524f780b60ef0dc0d2b0d73d172aaade80f07577156af7a1f18167d30d051e16

SHA512
ef92e6e59fcc64da218f0cc4973e3124bbdc8b7d01636f4653de432adbe1a2f29c0442ff695409a4c3da68d31b9e0cc2dbc6122aeffbcb264ab0d2b9655ba2e4

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png

Filesize
552B

MD5
286e8a6705967870eba6d9f32bb9b869

SHA1
ee949fe5e7737022bdc1330fdb1e875084d73ec2

SHA256
cf80c9a20bf53cc1742052f6948d68a7247ec708d14005ca051873fb5498fe58

SHA512
e14c820e7ae5b40f171ef0f19355ff2f41ef2b7259c15ff640f1671c154c635fd2f6b09000c04e964aebe512b462d4de8aaee31a85e4fb3964786cceaf36b0c6

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png

Filesize
388B

MD5
77a43af960560de5200b920f4eb2e5b7

SHA1
a987ff36c6ab9301a281ec4474a9d7cff4feec8b

SHA256
9b9f312016c2aa1e43fe3a96d5a465e91d36b2949d70c319195e181992bee1a4

SHA512
639918afe47655493bc8f73ce97eb8bc492964c0a0b402e71c66836299919cea095e2c6312f4be950eea83a3ad892a34b79bc0e2be193dcf34afc9c4319cc305

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png

Filesize
552B

MD5
e83d217e94edad50eb071deb0ad9e983

SHA1
9b37ab2268a0735c7e38a40b2b75b1fd5ddd9c31

SHA256
28f02f49ad1bb97c113a61825378e82fda15de4a23b63a0b27374a9d40952778

SHA512
bcac03e0976ad6f12965b2279c072c263d17978c704b98269c3831b5abb02f9a032cd0a0a41a35270ad80610a55f024f28703df5478f3d12c28cb17d4eca8a70

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png

Filesize
7KB

MD5
83c9d738a80f3dbe0e053ae425af561c

SHA1
169cf5bbb40331f3aba51c1a9f96905af183db33

SHA256
d19fc628b0a27be4edeae04e7e3461fa9d242a8103510b81627b701bc68b643e

SHA512
67f66ae0eed3a8ba120620d5647ce83eb8fcf6b68678934dd061e2fd82452bbaf30003130b6dcb3b7f82bef8f2eaae5256ad58a2c6ade94ccc15b4c0c86bb0df

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif

Filesize
7KB

MD5
d7c996b1e4b90032cec6af3ebde95ce2

SHA1
0efe5ea05652e0abb62bbf6077c947ea3823cd2a

SHA256
bc81357737db3ba3a7dffae1df6639b8027ec07ce706d8cf9b93aae1936a040a

SHA512
e09782a71b4a4df23d0159d0a0b34d9c3fb1f3be33df1d07b92af27365ac8abf9dd3a375420d64ebeac375d123423c2863dbcaea06d18f0113960af9bfffaeed

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png

Filesize
15KB

MD5
70828a485255274ffcd6a0720c26e158

SHA1
44dda65bb227b459bfdb3e7b63ccacebed48dea8

SHA256
90010618b5b1496cb86a741c46bb9a89bf1b233d389e9809091fc789fd3b5be9

SHA512
76a1deb2f1bf340ebc50e08f7c07e8540608b8f5e2b050ece990862797990c68831cf707848dff2bf3d83080bcb214805b75d66669e7b46af4487489b1111378

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png

Filesize
8KB

MD5
7d9a4494496d1dc93a2a088e2eef22e5

SHA1
95e77bf054c5af4e39729c5ea899762d34d605d6

SHA256
ddf901fb3f0b85affc4f2d3a54ae7d3655913190f1ce125bed9645f9914288e5

SHA512
82e494dff563571f0c383a34010054c3b99ffd97924d2c21a84c2518fd2f449b8d63b5cc49fe027890db32143eeccb1d9aca8c5cf8247444c1c89183ed59b8a4

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png

Filesize
17KB

MD5
3ca53ecde15d3ce53e158cca2db85976

SHA1
59cad511c95c3352cc408d14b5680109ab3656a8

SHA256
e8531791191e88bae17db56a283ebb1e16e2ed450366c0cfdfe594902ce3e74c

SHA512
744424d1b33159aa6fa020811b174e00926e54f40be449e2c529ed1a8490203c91b57725f467c01d0e1528cb89a2c5bb0f334ff7d43850b468c1f026b4a856c2

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png

Filesize
179B

MD5
9ecaf521c292a37b2dd16f467a391f9a

SHA1
ec162a1d57931df58cd79c62467665b91bad8e22

SHA256
5b3a12febb637cce355875bff20ee1325cb33eb0227a098bf15d95a4d6bf90a4

SHA512
318474fb7389c1744dce79d12437addd2374af62b5f5d500363a9b811f1b5d18b715cf9d8c94cbbb372a1cedb636147544248909d85b497fd4fa74015551b1c7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png

Filesize
703B

MD5
c925c48e181124f12808e227c12c020c

SHA1
db6762a453b22fece378745158501fba64bb3cb9

SHA256
841ec805766517a0df361e12c968db73e0d96e3ea0f776eb6f8e4eb50b697c31

SHA512
44917c4699100b301c7c65457d0547e5e2631842fc14982f406f82cfd496493c17ff3815e3b4b8009f53de1ca2add61590a886c92104c06f63eef422db06b0b8

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png

Filesize
8KB

MD5
527d731b06bc9fdbe0aa0afdb6fa3023

SHA1
4c5053f744bae1023767f92ee2b3d8de93c6f72e

SHA256
cfe44640af848b196d834391b050369858960d9bdd7ef08f215aa5565a240ab0

SHA512
ab8b343fa9915293eb19dd620c49011a162006b2b1445bad391f0bb0d09c40b1674a7c62082d14822aca632f2ceb5178a6233fe50e648c80cd319a06700a3c92

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png

Filesize
19KB

MD5
1e20159951e6a696ae2a9fea3d25364e

SHA1
32ff1f57a69686553f7fd348c094c368c633b986

SHA256
4feeaa0626e5e507c804a3818ab22c4b351d0eff2105ae8a01851868e44904c7

SHA512
ecd22b94327fa84a699092be179dc1ebaa205d90d9ec72a607d36b53676634ab93b6c3dc1a9170ed97369a57fcf660ec4f5e1044de882d6e1474336893353beb

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png

Filesize
6KB

MD5
4af54ee59e23695126549e3b75ca5e66

SHA1
f3ea7c92fb236eca190575807f45003049051357

SHA256
d233ef904b497f8024bfd5a24ecda1ded2333d36463881e67a2f585400049ea6

SHA512
12432fa3023e34eee13a2689c43879caf41b667332f4a73a74a7a9278b64156af03d96af6510be094568d8fec3ed5e996c8e3b0d134f471e792f5f7c39c242a1

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png

Filesize
2KB

MD5
54c2b541a91bff00eb6b92aeb39b22bf

SHA1
94a14c3918d45898740c261123be48b40bf4739c

SHA256
a77ec8444a8bef94b02b9a6dd6ae3bcb6213e726bbf051b0ec0a3302be115b15

SHA512
ff7eb356037edf907a378855896f4d46454e04f0ecbafd2c67d83a8f33cadd955007b714beabd4220c0063854881740b1c747bb87e3f9ef9448f6d544110faf1

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png

Filesize
2KB

MD5
d1ef63cd4bf0ff9ea94259d18d1303a2

SHA1
895152a4d385ecadec524366ad946fafd44cfd43

SHA256
a47e1375782e39ec165cdaae76dd4d51613c1070147eaa883718d2ec87561d08

SHA512
5c048e389e87d8e76991535fe6606478812095501b2c9131af3f581a93803f0caa0d71dadf691786fc98da7db5a9eb16602272aa07d03fc8eb682662094bda5c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png

Filesize
4KB

MD5
b7c5656d7b10e62e8d5439fcefb0f7ad

SHA1
fc36305f906533d605ebbdfbafb25bfc0fc5f015

SHA256
1ee80decbd4b5a6ca9ddeee49903c241ce82fc1a1616a37e36ebf2182d418e9e

SHA512
c8adffdec1306552b44178da741700552434e620bf83a7bfbd1f3fdcd85b55db4fc7a2674ed3284b8dfece4072bb3f540078c19b21311f7596e50911fe2d4d35

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png

Filesize
289B

MD5
09142eced7c2fd3558c920850c1d2ced

SHA1
54c251b956dc2f46ba3c45fc1e7a71ab7452b391

SHA256
798b01de11e46fdce172715829621fcccc258cecaf1d2da91bbbfb6e2f8d1f23

SHA512
46ac7b3f57017428b2a7b3ddb8cd7cc8166a82800f27f1a0ecd70f82cbf52907435410907a6941c89f696970e30812dea51d87c8614dbcd380aa2696ed02a028

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png

Filesize
385B

MD5
ba305f78c7216aa062e18c39b66cde1a

SHA1
a75321cece724b1d0fd13227e9fd4d2290df4ad0

SHA256
71d37e01787189dc4ba8fcee699ba1203242900f2ce9acd3cb6c3cd7d53bbe80

SHA512
778868aa2e16559a098f4726b55f60d5b6019990d6c9cb997caa1bccd0d54472555195fa53f70e775099756669387d55de01e3fd33bffe234531729d12fa3d86

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png

Filesize
4KB

MD5
2f235db759085976ae3046286b35c0d6

SHA1
40f6ad9880b8df80a124fcfc9784bac2ced604d7

SHA256
5c416255a76ea55f45691116b76d62c54da8d07cdf54bd1caa6dd2fd5f2ea9ee

SHA512
9755e9dd4996cec66e53c2d9278ce763cef5108c60e983596313c8283c7e83023bbe3ac9d68b06c01944052100d84c2c14c91db7f9e4c151dba0d6e2add9573b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png

Filesize
1003B

MD5
390982fe92459a1349526ee1479527ff

SHA1
cbe86620671303acd8c9581bc661a14f9e5fa196

SHA256
7767d73c5105a8ca6225442083e21c3a89d41ad33609f962eafc50db82f1cd64

SHA512
0739d56b470daff674b0522590e432736c9c4052242358a76de11930a03fc5f4f79974182e3182005d4129fc1be8f9725785edba79d489dbc2bf70be78228357

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png

Filesize
1KB

MD5
290ad11f292ae7ca0b2231451727bff1

SHA1
7787e23b1ab4699a9f32bb2d85a50ea935c2dfba

SHA256
985f50094a000fd073daae6edb6b4b56206d2ca3644dca89e9ec7ee367ef935d

SHA512
3002ab1059421d8253ec3f5a4dc8fc6abcf4d24fefeb9a14bb5bb5c39b7118c45b00e806cb610bab3f863ba46e3978b67a8a0ea5dbfa5e9eff622849e36c2fc6

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png

Filesize
2KB

MD5
80182bd19deb7b17430b6f3ad2ea5ee7

SHA1
0f73a6faaf2cb8e5c8a53fa7a2931844ad5cbc1c

SHA256
1a55ff20d99170ea656303ffcca91018f940fc6a82b9a6e138d8eb1ab7562038

SHA512
da26f51b8a4f4373feb0a9d91700f6fa1e23d7ec77b27e7eec704b287c78b35a2442a96b5db88f913dfdc995607246b5a603bec73c956071f36d54c5f2665294

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png

Filesize
3KB

MD5
56f65066f70a3b929b0a4e2a45caa47a

SHA1
37672d33cf0d7419f47d2c769c5b06244245e0fb

SHA256
84127b704e758d6d58df54c3d6cf93156704bec3f29b9858b2bcf1bb4036e8e2

SHA512
4267ce9dd9fb64b28e48fecd81299c75345cacf6456b354fe3176b83eadf2ca23c18819356af63a5355528a5517e707765ff253cf5898bc17b05e26e7ae825e4

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif

Filesize
556B

MD5
e73d58214c57de744f79133dde45e22c

SHA1
e16f7e118f357fd91ff66edb55cf6f2b89976faa

SHA256
972e3a27f572c99760b7456eee79d239cdfa5bc69017eae87c4d793bdec378f6

SHA512
08e506421808395e433f51618cdaa56ea56b5f5582e2028e4f877b08ce9799a2f8a7ed0013b373e72e8ba1952367d141f05d2d18ce233508a3267739c0f6d33c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png

Filesize
6KB

MD5
72b89139b47256d1669f19836e5417e5

SHA1
199f0c1b663d0b105b1af1569f9f53246fd38811

SHA256
d6455e3cc98b6341fd9b17e18a75f1cb606a1321004e37e1006d85762d95e24d

SHA512
9540109fdf13a5c5c25f1408d2f451b7c505c0c08c9f8920a49298cc9d38d715061ddb69b5e663a448d5095cc5b7b711b70a0ee999a163a90aa98cb40e67c8f1

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png

Filesize
826B

MD5
06ddd321a2505e3350805843bb465c65

SHA1
5272428147ddd003702a1bf1c858f3a0f5c5724f

SHA256
ac424c98eb118e979999a065240ff3b756307083096d9ed360209317d87cd06d

SHA512
da7fedd82fa260de6ce137ac16636294f4debfcd046ce426604a55378af6c697d67c93593e60fa123ef5f6b91b30bc6b3f6585cae0ec06e193ec57460f91a9f2

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png

Filesize
1KB

MD5
422f9326452ccef56f834afbc0886eff

SHA1
ba915434315ec3706cc6d489ae133813fbd91a9e

SHA256
fde32a6867cc490a2f956c00d91f94a6d7ff07a2a4ce4210c79cbe100864392e

SHA512
87f90dacea9256a4f6fe64ad5242015d5dce3fdf6d7f8c60b939c1bcd10cc1561cfe265cc347de0e4032a0c26c98e8111dfd01152ec2bb8c7e2bd20036cda073

Download Submit
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt

Filesize
32KB

MD5
88d8970400ed69a7c7a247b7f1a20644

SHA1
5c525f4d023b98442e6742be48f1419474b72d7b

SHA256
32b53177f11e7fca4b7cc2feb6730bb6cb739a741a5f38d9a3cb6def59fac739

SHA512
3d177553468d2a878a4e347f651283505e71e464589e1aa8f5bcbfdb545ffb3cc4fe9cc749fcbcbf01e8a2648e1d71cec28f53f2545b4c39025dfb7651cf6496

Download Submit
C:\Program Files\7-Zip\Lang\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt

Filesize
332B

MD5
7da46930a9ba3433e4d933160f7e9720

SHA1
339817403e05c061ff9213c13c6d673f443210f7

SHA256
b0708ad36fc59038bcf50179f0d2c19b4838b1fd6e9bd80a21ad0e1ed8723eb8

SHA512
cad4231f925fe41d34d4bac345ec810e180f872401ee3b8b9fdf3ae8d8fdcaa22f8b1208e9380ef4e0b87e133f4c5a5a8278b5f4de7466d681a84007f5bba63e

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif

Filesize
153B

MD5
6263dd008991523f6215a6e40cf251dd

SHA1
306606a91fae6ddb1fb964a72527fe219c3642e3

SHA256
4d59e03e036ee975df920334c0c9b3950e14c36244bc10d35a06c9931146bf6a

SHA512
3fc507f5148b9b5084e5917d755308459ce47283a487ee674e1c3d16f9a38eade7adbb2ae8055fd3ce230ee72c8db3acd749ebf40bc00dd2bcc9790849e6eace

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
190B

MD5
6601882887d1710b5a11b693e4ca375b

SHA1
19ec6d14f3a6bdf5164949dbc579222c4813551e

SHA256
9ddd63fc003ca7708803b009926a05b66f949db921e24dbf6c62e932588cebd7

SHA512
b94210227ee537422eacd60faf6c0a1c4b955f08ee970a689364350d65455240fd6ae1503dde617ae97e9cfde095e4e8db83f2c82c0930c4925134e764965e2e

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt

Filesize
190B

MD5
80bc3c46eff5bcc9287a3416aee3c53c

SHA1
1246bcadebc151e07bb6945b05018184b383f66b

SHA256
7d0b2bf2f9cdc02204f1c0582cdc3a78b5772b8687881b699b32b0f57086b973

SHA512
a76d1a63314bf4a08f69fd525f3a3ca156d0f79ea4f19736105a679965c760b286083ca24ec4bfa102274f51e68ec44f8c7631bd90fd482957ba1c3d2aac2702

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md

Filesize
1KB

MD5
dc9e3bba39d490e88c2ac61f5587193e

SHA1
037cdcdb6a8889799b5efb0c85db5eefc8b08b5d

SHA256
0c5b00d1c2df14588c330de00fea73c25c5f143390ae4026f8eabc695a055cd0

SHA512
c01bb65b14d3a7680d9c6bd330a82cdc8eb78e32c32212853d206c6e4bb8a4227de81fa7246d4ae73baf69c37302e4c0639879834c206515f1d215b9bc40de58

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\glib.md

Filesize
31KB

MD5
a86ba3c7ad6765395b44f4f0d0811d47

SHA1
fd3af475f64ee23ebb6548b5fa3d33d0ed219d93

SHA256
1435c7466643e8ca4727db4b1f1ffdc9782de2853f38bb2ae2197d558ae9b0fc

SHA512
77e5edc667176184b8f3168625274bee61bf189bb2176282e82d25edec94417c108c3c69cbe1d6381e964b367f1d59655f5e58e9d62b4a92f1a4a195e20490d1

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md

Filesize
34KB

MD5
1d56cf62c05436bc5f70eb99916c63df

SHA1
b0da2f28da7ee78e8e5f30eb41d3a00d61a5ed02

SHA256
951ebab9876fa37a392b9b5fc09eabd4620c3f1b5cb517dab72e9a0fe730d6d7

SHA512
ec7c4cb1e44dd52b38e7a2e6bd50333c0cb963dcc73157f0156c3f6d75394961f02e313cdcbc20ab53dab8e66ea8450a830711ef578254d5991c394e685cb8d8

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md

Filesize
23KB

MD5
43a1ddf97fe0479dd90dfddcdd15f83c

SHA1
f16892e504ef451b76de5e0b0cdbf8406c10a8be

SHA256
dc9c40eb0ab98134e3b702a0fb18b76cc9aa74f8c746fd4260954bba5bd9c02e

SHA512
e62513c2997a5c8f4beef85488ca67b4dcb83e257f269a1cae3e4adc95280f5347c0d087472096b927341fd1a96f7bdd571f32c612ffa35b7f862807e7f19c62

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md

Filesize
2KB

MD5
04b7259d6f18b42670f11f88bf5ebcbf

SHA1
95341d5ccf5f690b85c7017f65d378380d721bcf

SHA256
6d733bf2da716745eb2fd084b63abf403a152ae935b27f2e49fb9c31c5e53d06

SHA512
a710999383346048a06dfe1a4d9f5e254cfb0db11382bc0b82353d373997bf60cf98b7cc998d25ae489655ed051e1ed2fa53cb1a22deb1dc09364a2f76bb8599

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md

Filesize
1KB

MD5
c94d76c3f1d06df6e6df828978651a79

SHA1
7536c9d1b5e8a0b4f35210807d56312cb2d3faa4

SHA256
0ac9b16f0301ea8b2f0eb8e489f628e56fe3380fa81d51906aa2a0e1c956c72f

SHA512
6503cc73254e648d9edd5733cc7243ac9f66c9f939687559d73b52331566bff6a62ba1b9c2eee1aeadd86c895e9e473b872f8697c3f551272847f11e82570bf7

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md

Filesize
3KB

MD5
652d6b707d3cb2f8459738578f9ba5d7

SHA1
8156ff12e47375d876f2ce6df9edf12ee3021f65

SHA256
4f2eb0ca10b6406a47ecfb8c9c6c5817fd1c1ed42d128060cceef9719a93de5f

SHA512
84cf90749c3e4e75159d2efa81462013dfb40f8a04aca6671962511a06e475a3281f87f30938725cf08332ab09e2d0fac907b295e93bda75e1d4380c8324c5fc

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md

Filesize
2KB

MD5
0c031cc8d4defc1d7b82485de2364558

SHA1
58b4bc5862b70d959d3b3a90151360158ef1d952

SHA256
9b62c7a3139ddf717da95c3405b26d94649ef79589d3ee150338c5e4df61d0d4

SHA512
02814114792b55c070ba8947a4ab62127de5aa9f6f09a72ed4cf7caa180cb80deb771927f046e1bde2267cd25d47bc27d729f096c41b943d1247be3b3b63b3b4

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md

Filesize
5KB

MD5
92416f3b3013d96ffb7172fdc87f48d5

SHA1
aece75cf96ee43defef35e75bfdd30ca74902228

SHA256
fa4323f7e1d2456db09d8dc05005610faa85989053545e9e7ec3b53ceac2acc9

SHA512
4555690d800c373123469f3b9c0daa162aabd1a212f64fad6d95c4d2e520a6701716d27124d6fe9e55cd988c5b82a61ee04e9f944bc735ac974536b4a1c61142

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md.Ejei

Filesize
17KB

MD5
4278e02155f886928d54e087b2f6dd5e

SHA1
71adf51f53a691bf03ff4b3fb2cd2d4a25539810

SHA256
0282b21742e3344902baf7c5065569311d043051300584d81178de9767773b32

SHA512
54540fa2728eefa83699c7cc498355fb47a8bcd24b6e2a3566da681a922e3bf7f51cc8022efa5bc8b020e105438b625f39e749e8b15d451551f4b229adacb1f6

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md

Filesize
320KB

MD5
73370c0a2a40815447436686bacb65da

SHA1
a23e290ee3d273f7b9e01af09501f85e38ab9836

SHA256
6147d84a0395f711aa286bd4b9e68d66bb6bc965ee1bd12240d0a9112bb723c1

SHA512
3bd08790c2481dc3900da0b46d4f31c451eedd9d9f4d9e956b4de49e7b4113f1af79e6a1f8dba786273bff6f63c74549168335651b32d5448164c655671dcaef

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\asm.md

Filesize
1KB

MD5
6c96e493d8b27b3ed7217aabb1c5653f

SHA1
7b5a2dfd0d2fcdf4b591c81fe41ffee024cf681f

SHA256
c7c3175360a554ab77201f14378ee5cafdb6ee14d5eca29e3ba829891491dde0

SHA512
a49d45673817abb9f09ef1dd10e11bb318062df01daba7a86c63331d56ec2112801c9c0ae93a552df9937eff74e671c164af2b5140e7536f9b4b3021a1ae0a06

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md

Filesize
10KB

MD5
5858fdea6b3c08b5e14c3ea45599528a

SHA1
1dce9a3677321c378f30cabf1b61b3c2cf6ce383

SHA256
bd219111777dc83ad16d5a00b4e7904d1e33737daaccb3e3cccbb4b5b143d167

SHA512
cea836b54cb2a17c546c515823a997c3bf0b10e15faf2d6d895091a63d2b7d09d88f069c8caa04771e28391d85a265b0d7b72e5f7b2ed4aa3b5f198b58171980

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md

Filesize
3KB

MD5
230c938784fcd405cb59a11b077cb426

SHA1
8a6f40a2b3ca00b713b07da478a4d7103335000c

SHA256
288d7ef8151ca14350787d6ccd28f6c0a0572272dcd80008e279a3f57a168b71

SHA512
3805882b420bdae4ef456fa64980b5449af86951fc588749a8fa85d6d829da000657574d76781779ad1ee19839c961c2388725db8e1a52831af77084262b3d33

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md

Filesize
162B

MD5
c86f8c1d8c7a60cfe33cf4514109c617

SHA1
1ef6086a7b86d2565b94293e79a7363e77467e59

SHA256
a0d263d87e70056b2fa1b20449c27e7de498cd0417ffcb716bb4deb7136ebd67

SHA512
19dda4e856cf31d0d5cc84a2d732fd669427015a85beb6efb38d04605b66b849ec72c175e0ba290fe010e3432c1ac3dfb298dc5a2d194995509c0761ede27d3e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md

Filesize
1KB

MD5
09d8e249f48e4aba12cdceab3667b007

SHA1
dbef70a06efc17a1c0330f8f5e97636dec645ab6

SHA256
2f34e94de87a94b3c9c345d55440e5ffc5f8d799d2db1d779bea76d54c6c2b03

SHA512
226e6e168ec28f8cfbcf86a8a859d988b5161b88f5bf0f2f7edb27f7fd6d58e8c2808835490cdd43d01ab5f622e6e97a1020cf15d54b7d74c3c7d29b82881d9e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dom.md

Filesize
3KB

MD5
39b46052585e37f75c63c13eb4f36210

SHA1
4c45e84959c7fe726d62ad5a7eae4a8d2d7be948

SHA256
8d2eb9dc8a250f9b46daea6633d1dd851b9586009f4495bea52f758848d21195

SHA512
c482bdb96c1ef33d93e1d7f0f11fa4e51621db9c41a7de44269da4fbac2115a06c6d9e3827178f7fdf801bc7095a12ef09b46fb0a0825da604c7f862950570a6

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md

Filesize
1KB

MD5
6e0a3a3b57850ad18fd5dddf6a94830e

SHA1
651c55943404b9878eeebcf5db2b4536ccfbdc08

SHA256
523e48256fbbc677e0cfd45de73be8468582bfdb061d27180fb18adc0bd747f6

SHA512
e0e0995cb48fb28a0d7ceb6df93415d49cb60796891e2341d0b53bdb5ab1b7b38d61ae30f4b0c979b567a424130f4dce48dd170109955d6d809573a4f5533395

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md

Filesize
28KB

MD5
00ddd37d7d3bc2cfbba165750c3474c6

SHA1
ba777b0791bce0599a9731507140274fb9741c37

SHA256
e303b5bcfe562c1b607e7342a5b8f7264bec32cf21d2fa098eb0f0612bb1624e

SHA512
c6815b0ee6ca50873f6a9f5ea819cde8f1c7946731c3fbae57d2a546666b0801c42b884da3a08582bac6543f12d92ef13018c7277c65e4f4d0e687b10c1cbffa

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md

Filesize
2KB

MD5
56c6b4fd3799a2c99fbd93dc849c4cdc

SHA1
083230f0248b27dfc5003d8f83f8acbd71a2585b

SHA256
464ed54d174fd087e09bcc5c9ee5c162da2bd37e8158e6f4a6fb0dee6f09c853

SHA512
cca5d7aad16373f0d395c7e63cbeb1f388fe2b7584148e33fc90d55354e46c4d6dae6c14df690dd87114ec4db1b27849d39567be691a1ed6140311be1605bd76

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md

Filesize
1KB

MD5
90b031d8f75548361d72fd8cfa23ec27

SHA1
5a1269273865dc96cb81908830da176d096d5637

SHA256
fbafa397837fa50b98984178506ee78ec9d894077ef4d12c0662e59c65b6776c

SHA512
2f7294a977a0778ab8ae32353c807ef2024353889ccfa631ce0ab15777c474de4bbf8816d26594b97a7fc6310048afec716d5a113cf7cff0260947a931b00f2f

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\icu.md

Filesize
2KB

MD5
3a648ee8b5192557c8f214da8366eadc

SHA1
fb8cc9e5585e61a1d07d889842d4bf5b9e77f324

SHA256
00c14b23f13b576e2938ee7c1021f3107d0faac915cfe33dab6659a1e377416f

SHA512
c0194bd5ed8a90a850f00bdf5bd798362df873ad42d64ba3e403c13aac380e30a7afcb7420bf24b5c86eca6df02461a47068825d5578495772561fdf8bdb8a10

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md

Filesize
1KB

MD5
18609d6773ba5a2ac6c7cff7e3958d3d

SHA1
9f1115e3ed7162eae4015b278f0830b929ac69be

SHA256
01db337ecc5c6199217680a39195cc9d84109138c3b4fcdf17b6f8d597d0c470

SHA512
c155864dd1da88ebaf6679ba156f1a6181c6f83e777aeefcb17ad49e182ac11b209d15dd9963bde0d1ae8152411075c761becab9bf79ba1db991514bfdb03579

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\joni.md

Filesize
1KB

MD5
be77ee87d4cedcef1e0b40780957fae1

SHA1
86acef263c667b54bdab5881b63c7d33af65e0e5

SHA256
ae61fe6abfdcdf0ee3725e661809b5ed744df5344b0376e7513c0bf47a772b06

SHA512
35bcd802f3ebe2d3c77007196b9cd51ad1a08bcb4de4084dd01af521040d238e72d66e9b970f1518977f24a35501b66984a4be4eaf923d0959c763e45eff4b68

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md

Filesize
1KB

MD5
8f5a0435471f6998ce821b68b10eefff

SHA1
0559cadd6be17c072770f9909f82bfb6cc2fc3bd

SHA256
f23d570fad9b978deb1d684ec2470a5195368f0bbd885bc0b8dcd8e8643efb07

SHA512
71a2f09ce03dc1b7d1176e98f790972d2a96d5cb36d1134d350c88f9907df8e2dd9959c41c1562e138d0305f815c8432d85f3581a854e79029abf10102a10ea2

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md

Filesize
3KB

MD5
5f0722d8adf108ff7fcee0348e2d1303

SHA1
e1c70234878968f7a3164f0ef60bba4f3da8832c

SHA256
1582f29c02631df4b80e734c114c7f91cf41b2835c7f60cb692c96171338f53a

SHA512
664bef6e4442e1bc98e99e740d4e94a98e1c42b543327202fb1f5d403517ba5f5b0ab942021f7ee7051c4ab306265d5966731de6afb1e989c491d149549ace68

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md

Filesize
2KB

MD5
e185ef485d8864881f5ff853f31a3610

SHA1
5c5f4a14fe1648070773140ea9a7d35299dd5d70

SHA256
8351cfcaa6aa62152314909e4b5da6daf73b2bf0b21f4073c6f017c9c6883a4d

SHA512
be56863901d1c8e1db566b15c2ef716f9cd0ccea18a92804040cc3e0a3bb986ed5d7ae92cba83882d92798a07aaa518590a8241a0e1a29374833f6eef1cda144

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md

Filesize
6KB

MD5
cb332c373fbb25efdafc000afd59eaa3

SHA1
fe8f3655516f00f2d2e2062f730c758484fa057d

SHA256
ba5a1b3bb5dbdfb00e7f42c40aecfb50dddc32f954dccfc63956586423fda73d

SHA512
13a0ae5bb4406072a287e6195af571ff8e3f494f279b0704adaa987911fe382fe9586269eb924edcc2ead0c57b003ab777a98c75afe4662c35ea676308dff10d

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md

Filesize
5KB

MD5
f729628c06a488d329000b0a150cade0

SHA1
41f9dd5266cf0c3214e0adccb33aac2856ebcb06

SHA256
69f18daf39e41e9de7f309d3d58e390808428b705bc3d9aee67ae3837a387714

SHA512
2fc2b8301f77a9efe8203fabd96f7b46b02ef830e7811ce26cc44ef0857da91ae8e12e09fd2b5609a723c300fbd17e6a5f1517be0bfbabb64cbc5d80c2771397

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md

Filesize
3KB

MD5
f5c2ae1c635fbb7b25767b78d131bba9

SHA1
e74ab24167fa5a5ad81d921c0f4434782d36b90d

SHA256
4207956677e22cf08d2cb48c02d33af49ad0d390958765f78927b7d474a109c2

SHA512
ea456e63552f62bac31d2cc19ee0626fbc29da8fdfdf0360235db7c61150b73a176f205f0841c1d21daa13d3913e1140a30f1abd1543278c9d3227a7d2aae148

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md

Filesize
2KB

MD5
b663de8f5791874053ba8af659f83676

SHA1
64cdf610694139ab4e24e9301fc1eb1e643a846a

SHA256
90ebb35b5dca48421286a5619bd33bf8330ce0f3a0af5fd05a146b6413960a45

SHA512
5cf2080c7dd84ec5f9b35ed2278bc03efe226e8019607dac64e257c8395f70279c29b177ca28f30ae9ec79bf1e939d8197908d8942ea5e222c30d3197fa54225

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md

Filesize
2KB

MD5
7e024162a41b8001b284ff3d8f0cc91e

SHA1
ddfdbb8f674a40298a0f6ead0f0ce191de642242

SHA256
c596ba2ac54e2eaf5c185de1609ff3617bcd7b8daa5378407d7b3401bb90706a

SHA512
0572fc1642063d1dc7e74c66ff6db90be17773def596d472b77bc35190219b4ec577a90335488b19a9d930ca49febb142249459f35bdf5d7a65cddabd51897de

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md

Filesize
1KB

MD5
f26681fc6b418d6587f0543afe569842

SHA1
f4473c53ea0e53abd13a7e7b8c48d67ea0a0b135

SHA256
a016e094a7cfb1aca1ff8355ac9976c6e9b74f3d106948591449fde688d0fa74

SHA512
3fd2cd0457da9313637a36c93c428b5264705a8d6a1267fe7cf4a2d82d3ab6cda9e4cd442be4dbd92f60e242c7aff15547fb4aee550a5937931101611db17197

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md

Filesize
1KB

MD5
f2db9a0e53c7eb245339f4cb54de1490

SHA1
03ff54fc8640d74cfd6ebeee1976ed7be59a153a

SHA256
46d802b3e0097b609976df7488dfe8f9ff5055c31a56fe4d2e6c2ec873f56753

SHA512
8774fe89e315d7686f763cb4ce3f52b59843cc77fa440846ef6087d2b48229d638aa693125aafe0a877228aa47b56974060cf548d7ddfd1e321ee0ed8b46754d

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md

Filesize
11KB

MD5
8b3ae3519170781392148a9418f8f508

SHA1
2b1086d4a2486346230fe7e8918188db0b3f8444

SHA256
96bb1bd6f43c8917f51703a8b431e34f7c008e9910936adae12dce03392629a4

SHA512
faabcd7b72bb33a623a065df6b4c13482d484a9f6cce6c25d4e772d92f55ea08d3b0df2a0becb2fa29cd2e607c20337fb26ae9b0945b8f510c347968545e4c0b

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md

Filesize
1KB

MD5
729695393e87fba2fc7f8fc8a088bf64

SHA1
164391320c336774ccc7e57683f0e5dda72c5093

SHA256
5df1d583c2209e4643626d5a4593882033d688896f11e69a4ca942ef7e4fc1fa

SHA512
515541379384300cfa9a3cdf6729ac81234644973c3493ab0becf9a353b72108a320f070f14048ca5620f3f8b02e81b03bb47a7df8c0eb82c015e3d6f4cf29ff

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md

Filesize
2KB

MD5
a27bd9ffca3d7cdd39334031c9bc7945

SHA1
7d25ef4436de1f6ca07c2be188a53edf5145ee2b

SHA256
8b2de5fef4e9616044d5255b242870d5d0afe25326756e2ee4920e51b42f3c5f

SHA512
d096cc569b814b110278794eb9eba467065f619d21603cf77fdc2f8cd4fde1e3d1573cacf8e2a0c2016f0db44c0ea81471cd309e1b5ecce07dfd05e1e0e4db49

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md

Filesize
11KB

MD5
8fe267ca879102d7bbacc6858bb86704

SHA1
453a28529fb979c3c8b0ec469778b8d386119e15

SHA256
7f1f880ead920f16300630bae0693da89dbbd14e14aec6af62aa56870fe35aa6

SHA512
2d4b4b37cfd26ff57377327d9e0f871fe8acfbbeaaefbfc3a5815be55ec615e06573a649772127b7b32a5fd71c313f3e77a512c4ed6e55df1719656824f42862

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md

Filesize
11KB

MD5
ea416b8c08e9e122bcdfbcba0100508f

SHA1
e9144730fd0f86f84d6b6bc3a164d0963b14508b

SHA256
181fde9a76eb84596196bca387a34db097a0e7a31372c3d5c06a070f697c80f1

SHA512
682e07ff8cdcaedfdd6a585a4fd4b393e60ed240a50351c8033e3d5fd800efe4689bea48665a47e2f8b4e33953c550f443cb2e60e9c02504f137addc1f97601f

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md

Filesize
11KB

MD5
144072322ade80296d05ad833f06f922

SHA1
d24d5b8056f505e455baa4e64b9dc93be7b08bc6

SHA256
07752135e672091916634655d9f691c0544e28aa71fbb3237395ff09445b06a3

SHA512
74a41b8d065e6e5942036ef7cb630d96fc2c7008192ab5be6fbb1e000a81932e4a8df905efccb4b37ca85e2af2b7f6fde86c7c52d63cb539898a3d01c684a3de

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md

Filesize
1011B

MD5
3d024259a607e4ccf06d0f1264a5211f

SHA1
6897bc7689cbfd6ba258257eb2df8446b4c3a12b

SHA256
471112db61e0c5b94333b1562a2234119082a0c65b1ba8c89810677724aefd7c

SHA512
9145db11cd133bb3851e66e549a3fcabb4409caafc89a5d5278d97a88578695d9485a5c2d61b9108e3b9a3b150099254da775d20cdfdb6572fe450c0860a53de

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727656226049089.txt

Filesize
77KB

MD5
96a3b1bb2a5234063960fefd814f553f

SHA1
60c564068c10a81272d74fbacaf7028b7a0d4292

SHA256
c92c9714bf52503f1fe5809b00bc5871f2aceb056c3ef971c506cd330193571b

SHA512
651a925bdbeecec52f531399ceed5c4be122e03057ab5bf9e2515167636f542149824c2edcd02f9310c01cda4a300e5cb343cb606213e8e65c32a7e9c3892e9e

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727656623420834.txt

Filesize
47KB

MD5
9ae3e0544cb970b91e1f5ae71950921c

SHA1
971b1f852b4cf5b86ea575a8d7c5f74ded462601

SHA256
6d6807b25918190dad22f7f8c1714460fbd20e706cec551b54c5af855696639d

SHA512
71f8916507788b546244d6d078a1f84ec61e3bda2efa0c39b7417ca3fde7e6a208835f733d17dc7cb01c553f7543766b83b818f2d41f9e3374bd411fcc879d58

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727663536793873.txt

Filesize
63KB

MD5
b11984c6350e44fa426a330ca99f2da6

SHA1
595c1f07d3706c49c4b1f69f6dcf74b49b1fbdd8

SHA256
fa0ebe167500c873ed9263eb65aae2dde8bb8a1b7d2252801c317436b56114ca

SHA512
f9e181ae3a44d9e9e89224a9cbc5de3fdd53e4d7ae27239012fb0b25e6edad517c8edc7377a9266c7c81280a8b6074de7f8b29a67c21b4d23bf13790a4f2c112

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727666235612999.txt

Filesize
74KB

MD5
ac4fcffc66f7cc84e08d07858c1b82b3

SHA1
4cc02e5f3f3722dad903c4892156429f5d9f99d0

SHA256
16363fe6538bfdab2e96d24c78921c1ea9aee95b6e40c1bcbe27e81676cebaf4

SHA512
9ad9ca33acd20764ce6a6d3b5ddb365dc903e35d9b60fdd5c65c7fbe308d1af5ef077fb0bf7ceef3060ba01f6a73cb6160f89f18b47fe12576686200ec1e9fa7

Download Submit
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk

Filesize
407B

MD5
ad763adc0de237de2bd9ea6f44d5b4bf

SHA1
d3ed4fc75479b62c78c2ed0080c2953aa000124b

SHA256
06c922e2c2d5581105bc5695f84c427d5733703041254c932a79424ed1f72ba7

SHA512
4b1037d3ce40de148fdcceb75e80b91aa394d410e081f689eea3f0af36ce10f1cc1e1364d55cb87bbb8a85108a87c39dab9b75ab52a8dce8bc98ab35c48476e0

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

Filesize
21KB

MD5
67de34cef79080b4d3b2448525298f7d

SHA1
2a10171c653bccb7e8ec90d1d55665043be5df36

SHA256
b5ae494ce41bcd57bd81269370fe986f3deeb419e854fa92f42befca3718caaf

SHA512
caca3897a37c57c2440bfa37dbd1659dbcee08d27438525463df5baa6eb54f3e496bbece8ac3b0ba266168d72b15afc25f308a265f5a4d6d013dd7da8d140f52

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

Filesize
1KB

MD5
19fbbb9855d3e772ba0ddaa2b120224d

SHA1
b8e282743ccc4e2e2b5ac4875b0dcf0ef697b3aa

SHA256
8bf7f9edb0f5940c6ed4bef94f1853f15f7e4baa8b36bfaaec57d3ac8c3356cb

SHA512
c5431a65b4784552ea559d06595c6a29cea5841a0784f07a838a26ebee149c190fff767314f054edfb87105a423d20b7bc6e6e6d279b497039f3bfd86bf0b351

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_lrg.gif

Filesize
952B

MD5
69a4768c45749c29cba9e6671eeb3f5d

SHA1
71943fd5f7515455e61884b5c80f73921281b395

SHA256
9eef911bd061d8fa9ceceebee2e50c7ed4e4cc180bddd26603234dcc6b6156e4

SHA512
d21fb95007cb452cff3b6ff3580b37f75dbe55b353943658ff025803ffd249d606f118fb1444a0d0687d1c047aab4a2806b14c53919caa3b24e652082e20c884

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\aspx_file.gif

Filesize
121B

MD5
b88f055631baaf98f9f0338236112ee9

SHA1
2fe0baa6a572f9073fa5ebc210e6b5387bdf88c4

SHA256
9f8f0f9804a8e48c7199785e83c8f96450fbc252c18d06e8bd1b5c44001ea51a

SHA512
14e9e3e3f15c1c8de9ab7f1ea505c1c00a06b1e12f36637ba5468e6b2ee3a0c24ce46b11e39f7bee3e933d3d48f61620941f88de5a19ec643575d78899e7ce2d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\branding_Full2.gif

Filesize
1KB

MD5
5d80667ffdaa5143f22a5f28754efa03

SHA1
5f2177600b8c273c72a38a394eca2e09941d18e9

SHA256
c16e8d9131db7ea3e1d222b4d58a02050d2e8712a78d0ec015e5bf3e16cb746d

SHA512
cc76a54d258d2473674f052c7413cc4aba575546b75b9d83585d349848fb6e30bec1e9a592b48fec0dc6650bb2bc4c33115652bb84a338bef543bd653b7ba99d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

Filesize
8KB

MD5
daffe9fb7d8e9beebc9318218c20f152

SHA1
95b05c3153d4c53936f9c9bca9f843ef9ef5c8cb

SHA256
768d05c108294f6675ed9019abe2d5e9f371765827aaa5e28bd829c57ad6b616

SHA512
3fa173e491472971dd89432ee00751fbacaef8bd153dfcbaca4040cbca300cd5d5e42c495cb7e014ccf7bc43245b24ef19e1242bd9870ecdd3a89d624737551a

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\folder.gif

Filesize
914B

MD5
c005ae380989b3fd60d65228e2206f46

SHA1
5da73697cf62283f6b24e7e9b0c2e1dfa7d49d6f

SHA256
7aad57fbdc7f8b25cb8a9416aaa2b935b7cc98ffcd779f14b7ac4c8214ba1b98

SHA512
f542ce6581c7c2c8886480142542cb469e7c420011ef94bd7d1150ba7a52a8bafe158d130a0814abace04a18a9a6d3a52bf03842f31c5ddbddf037b4a94f9e99

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif

Filesize
328B

MD5
4c5b4dd033f171b7e9006831b85c49ad

SHA1
3c0777ac62878fdc76456a5668b130fb2cb81d3d

SHA256
8a00dd0ec28a8605e5fcfb6643dce64ed71bd3b54d22c0c8ed80db92fe0a7d4f

SHA512
a6b6e389b4198dfe6a66b0d41ae62e27be65c305029f480363167ca44dff02ad08bd552c369394eef92332b1610b6bd293c747778db9ad4d9bfb8da5979bfa42

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\help.jpg

Filesize
1KB

MD5
5e29432f58dc21fd4fd0ac46ac779544

SHA1
ac8b1828d1c1b02c5f7502dddba0c5911d5126e3

SHA256
89a8c942f3a9a2082c25738b3e7e853ed59e1493025d5b7889fa3623e1fbfa2a

SHA512
a65d5ac5231d075068a310fef96c94182c40f55ff14407700defd9a4da88aac562a69bbe731f2042aacd57cd26bc817411b0a47a43410eecbd60eff345ec3c6d

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image1.gif

Filesize
162B

MD5
fb76f6fd721ff94ee6f9ef86a7ed4664

SHA1
0bfc56bb8f7780b7645c65d417bcb7be9843b6c9

SHA256
0690daeeaa5601d829fd8828e1c21a2482d580b071a6211f099bcd62d98a4ee2

SHA512
aff93372875e366872c765ac57063725b6bdb1b8ce775fc376faf96243943796ce98a116a97ce2f3bb6e5a0e2ed0fa11f6cc905fe03c0eec5ef98c86fdea2408

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image2.gif

Filesize
586B

MD5
16e0c2499230da69eae2800cc6c1903d

SHA1
69993b3fa4cbfe0130a1f542ac1e68bdcf94511f

SHA256
b565573363144da63d82dcbc434a1756642d7ab452931ef4072930678ca73da7

SHA512
368731733660c4fe413a114e39c9c6a700aa6c12ebc83498b603447e6b037348ed4f0b74d2c0ea41a30c8b41431643f9dce9256853899f26a4af9debeee10fae

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\requiredBang.gif

Filesize
124B

MD5
4f62202b51d77afe278e6319b853ea8c

SHA1
96257190cb674038d28f4ae04e9c9f1ff07c8a33

SHA256
cbcd2f2c2f455f8a79810c92d49273b76ed5c2110964d5b15ff6c336264631c0

SHA512
d4e61ab58e010fa3108bdda5c06e238ef79b9c33a824a82b1d84bfac6ffa7d43813b9868bc7aced6f5bacfdede68977a494eb043bca0190a9f12dbfe025dc494

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

Filesize
8KB

MD5
9f6b5189c9ecf7fb88be605f2273a830

SHA1
2272ec8f8e02ccf38eafb029b821f4c31f2bc8ee

SHA256
091deb94f9f913ecee9e1c0372e2ef4339f7f54e82fcc49a71b688c58ee9e2e8

SHA512
e4ec7ae8e34b7b2893221c3d6f7ff976b9b03ce55c129557c4e8daaf873e58d1ec61ab70327953ede992983507e5e99a5127284d25e58220c43c45abf2865b6f

Download Submit
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

Filesize
880B

MD5
25a309a1d6b4d1c470e3d29cece47be0

SHA1
c833d7616cebd4632787ce0d429c2fa5b4f95488

SHA256
0ed7c58902368cb678ac383266f5d006f93ef0d119e27521e5d7eec1a862d3b6

SHA512
6c0ff60342adb2bdb9491df1c6a888f9f19673c7a26e9e888e8ffd96317f989f34996d5bc43a1f12618f9fce76ba77486619148fbec5a3edab9d559e1c1238a4

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk

Filesize
1KB

MD5
7e3b9a7e5d1be2d3dff73f9023fa2494

SHA1
783ccd30bfdaf1fa66fe0ba6f55ac5fe3008c145

SHA256
d3b715b3ee3da73b84ea93198082de34264e4b6e1a6c135cdc1e8cf4e0f2c001

SHA512
b65e95dd1c842e7e2d57f280b61599f3eb50d0f60b1b0561f34204ba6c9945f8858e0a41eda131610cdd390b9830c502b81737719f3d9147a0a5ec234f1e7423

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk

Filesize
1KB

MD5
2439af6f556b1df778939ba269bb000e

SHA1
3c0b1f941ed149c462102b98bda75745b1982986

SHA256
3468a629b91cde7113a6507e2a113c77bd331c6e647d1b5734eb196816a23a39

SHA512
2c7320df22fba35dcc1e3c3efd5e1988cf3c112d08057c30dd3fd9e579acb9fa1d4031dd0e93b35a6d13c2ba79bbbcf39ebd1a675d4105aaa65556bed3af49e8

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk

Filesize
1KB

MD5
6f89010beab3ca53d8145c882faf81c4

SHA1
3c7741e0fd3413e14ab14476ca4bda2b34dc8619

SHA256
dea1cb2f722c9a62854539c326923fa1de4e1615db44b544bec02d62b36cdbc5

SHA512
5c8e7953b518a34dae75f8caa6fc9b9bd88ba0d17f7a37ed713baae0d07558e3413e8ece8ae33d434b079a2c1747462198ba7e054595b099d69cede403151dbc

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk

Filesize
1KB

MD5
e7edc9452ca9efb5ff4eafcf17a1ac69

SHA1
c18dbd712bed46814a9ce62f935ef48362db558d

SHA256
88e37b7294360cedb37adba12f4e41bf506bea985fe9029dc1e1ee2485f9b3e2

SHA512
406954d4c0b18b65a614dc3295dee82df5f5eb8490df5074802bb2fdca70427ae1ba27390c6060ec4f38127904794a84d28df1942e391e5bc3c49f0b55388046

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk

Filesize
1KB

MD5
340dda8d7f948d8ecfc4f38993e4e2f7

SHA1
2c653fba041e23b65146cd977d72520f585dc75e

SHA256
fbd7f33b590296f9942301e89fb27fbcd54f23c11100c70eb621170663116c5d

SHA512
868ab1c0c95072eaef17e9e1871069d6809768e0c3d70968c3f4e3214e7667b4bd3d3eaafa6c1f1483154a6e1006d71d313209dab1fbf7d3fc32e3c8e99e0721

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk

Filesize
1021B

MD5
3d4ccd1eb9dd9e40ca82c42d1e02bd5d

SHA1
3df87acdea07662ba8f089009c253525cf3ce795

SHA256
df60f320ccde6f6d696e0afbc4e8fa67ae3c64d0514ca4fc7bfee06b6d6ec968

SHA512
cf7e975d5fd79c7d16642270724e6a2c3f6925129e1c1fc96d6b49ca77ab61431e754263e3f1f74c7274eff19f8e4794c59ed358f619286a0a6d9c2c7852605a

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk

Filesize
1015B

MD5
0ecbba47b759f336a45269b7528a4f6f

SHA1
4b961c687c49bd7fb8f682a6b8ab93834b678e0e

SHA256
03a20dc340ec10dc79b88cd90a2f9bf40003e7cf8dee191b88431ad85a6b7fdb

SHA512
2e8479938efe6334b9d3b726adda9ec51dc0622b1763056d5cd472288745a1a712517c4b5372b538f09326c246151913ed09c0375b55a83afe0d0abc42b8d9e1

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk

Filesize
1KB

MD5
1a07f79072f91fd13f40549c7785b3db

SHA1
0a1dc2cf44af0615de722de84299350c49ce2f45

SHA256
d7765adb533148de1af677775ea17f7257db03f016d5eee3e43e5ad21bb185c9

SHA512
d86590f3d65e987dc722f8d36dfda41abeebff8b016d5ceab8ca060948fe643fed573f5acdc93c5e3b947c15a9c34c84ed2a1b17bd7466428ee29f9cb7c7e80a

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk

Filesize
1KB

MD5
5b271d1e001ae62524cc62e9668cef4a

SHA1
6dd435ab798f7304abd1904009bb4ba9488bbe17

SHA256
446c26f23d0972bd16b364863385da1c2987d9f960605ebb94fc65c74ebc4fc9

SHA512
de2519ccb5a83584aa2cc7e738d39987d11b4151e44ca3989b02dbee793974f24bcb08d168e261066dad55576ed9ef1f4d0d9cd60154fb1db364ef848417d054

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk

Filesize
1KB

MD5
aa4a36f4dd30dc6f1d366d5ca60a1bb6

SHA1
74b2f02cbd992d801ef129c31eabb8adc210e5e0

SHA256
2a8f957811acbbd8b99f7cadb01425ff3e3676d677cd83abe678ba41c609fbab

SHA512
7ef929f09643cae069c3519d52c233aea7f73ac776dac893a8f89334efec9ee0b0fe29aad88d70188b1255dcfe6cabe0c9310f906a68b5560728ef085d86da2c

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk

Filesize
1015B

MD5
406b089e3b255f3fe4c14980f70f9b61

SHA1
498732abe929d8bc836e46ef8a730a9f43537eb0

SHA256
8d8dfb27dec40752ec49d82132b287656eacedb3989efc0c2a660581c8f15773

SHA512
90009793273f6acb4f32dcd6ebf20020ec277367663fab76e62da5847b08c55b6fee3a1356193ab9e52e258d4b3059b42f0ba91ed1ad85e39d385fa3f69386b7

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk

Filesize
1015B

MD5
6c47b451dd449f4f08b7feba9cd23c09

SHA1
58b35bac63a5c009a5f41fe300159f233fb66d82

SHA256
59e025cafabeaaf9bb5103882f2f615f1a89de03b05f46d55248d34fb60f63a6

SHA512
b6beff4f34f0a235037e83436d38ef9c1f52ed9c29e7a795ea85993ae9a1571ce18f929b4aa32fb4728cdfc2fd5cd5b3a1d9065218d7af08782c857b98b3ab22

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk

Filesize
1KB

MD5
767603e074b684c7b96ea7052c3450ff

SHA1
4240970ff4db342abfe60b151691ce003a0119c5

SHA256
d7cd9e2690486dc3b76363391db7c9c59cebfbc531bf2846932dd4a4d3573569

SHA512
08cb243dc691a91322b7228665a338d9ce8b8597732d3485647a2007f348a321d4eef00d06cddb4f6715ad4f73b53c45c569a70aa62150fe65d23622ba9e6656

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk

Filesize
1KB

MD5
0f6d4de2f247faa25a2e718a98e12b8b

SHA1
bc6cb1254f068c1aac74c1fe1d0cb7f2a13621fb

SHA256
afef134a75c9aa8578a78ba66336fc75db4c1cd6770453ad3263fa41c0ab7868

SHA512
c005c0b1db6bf3eed2661b1ca407cb6035690444493942bf1328f83e97a87726668b1012f61ee87b18eb9c5b4c90e8ae7dc95b461a562a75df8003af2867bd5d

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk

Filesize
1KB

MD5
0b62484275a9823c2d4a7bcfe04a3954

SHA1
1755ae1bb16bc45df54f486f2844da93530fe454

SHA256
596983c46a83f56b9c2d823fa2982d400c270e1016331142dab1d77266631c8d

SHA512
3c65fd5ce5659643dd3c3504b5bef6eedb8f2c4824bed000738bb7fa9d64fae20076283d68b1f15678c4a3c497dd0879cb903da5b3364822e09535dc8749d817

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk

Filesize
1015B

MD5
0477baf1221a1d30ca65eac1fdee1796

SHA1
8358a448c8150d48237e7dfe11eda8504b4871c5

SHA256
1d5d86c58137b8e87fc968f897e6220ee6f773e11f86523cfb27bb1fbfeeffa3

SHA512
76ab5e9a70c04feaed661d9f111fe4a779935caeb542237d5472149d13ebe54c531fe046dd3a41e83f65f5f32191afc1cab34a7d6330dc0f396715627fdd3f0a

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk

Filesize
1KB

MD5
def96ff5f2a1e4d935504dbb636cf806

SHA1
8723a053f2ad2becaff6841ff03dd9f6a3452a7c

SHA256
5ced3ec3398c018b622778065b0f5379e212ad5b646f004819f06cf09cd213a6

SHA512
5dce0a7eb129b56de2952400a26bff61402f8ac3456a92062b1e6bec19779b54332a7c4279ad612ecb83d3fdcb8468cabbf4990715ecde097c134a09c592b7fa

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk

Filesize
1015B

MD5
9f7055c82c48105afe4c074db5c2498d

SHA1
1e770a79afd54cd1d0f901632845dd1b81948472

SHA256
01cb2c51318421fd3dd4531fad4ef994dc3c6a94fb273a53d7043d52bcb2bb1f

SHA512
0861a983eeaca229aab68a0486090e1db0dcaea5d9fa0160040257bd4d5f38f0bf3f08ce7153e9438f34520b881f3c4a53e844ad79054e4d2bb6a995f460637f

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk

Filesize
1KB

MD5
3597831998567e62c506e3999e6aea8b

SHA1
e8d466301ca10e8f83aabcffac4d9e991f807cf2

SHA256
f4c065a940ab041443528e011d63a72630e4cda39cee652888b0a51d0594ffbd

SHA512
291a0ba164613709ba493f861d5f43c0fa7772e1d06cee739e440ca5270df17d9e233b94212de0a17e181604c4e609842342ede8e31f5864a25397f9629ceb19

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk

Filesize
352B

MD5
d888bd3b411d67e7b4d4da1160bea1d6

SHA1
0c923d64c37d04f3728db366e0f18965ec7d0afe

SHA256
3aaf481429b95b83b67f71bf6f75be6caf42c3e49cd94e69775c9eda837698a8

SHA512
36f437666352705862ac17d43441f24cf2a515f5ea8070ce396fd2dd8d90a227000f7b7e89d7768fed3f09c5fd0d163d4edb42a681f3a1f4ca34082767071734

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk

Filesize
334B

MD5
2d2c99cf69fb89598462729c3f4104ab

SHA1
0e2587c73077f48188d8a8bc0af87ed98c002901

SHA256
fe34061d335c4698f0ad7b6bf8511ae28fe83427c7f459c5c697d82cdabc3262

SHA512
8c46c826ce078ca5160234b48c888d4ec01e697370c5d37d33bc15628637e17919d9164d27eb47c1d8a0340164666a2120e7871a038eabce521962fd09c8fe34

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk

Filesize
1KB

MD5
5e76d128b97d17397f53ecdf7280f5b4

SHA1
95a724f29d4cba2032d5826d7f2e1abe3ce57604

SHA256
7502d9a5f2c06920d8399e5e771f1650ee09059dc9364104afbb6c26c5f897aa

SHA512
fc254dc9d64d64215ca3ab4d502737210be8fa9240c52f6722ce358b7958db2e5bc4c73422a93b9f859a3f714c1f02ef9c3302f2515e1040321062e72ed1c0c2

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk

Filesize
1KB

MD5
491aa2453fc9e8e7ccc0fdea27ffcb5d

SHA1
9539e47bce271ee3be2a837546559de9ad47e718

SHA256
a9abf6950e36768ceb0e010f89d22cdec9d46de266c40e85b111fd61e6b23f81

SHA512
f566bcd52db71302bc6f780d2dce15a93c33430e65af23ef6127310390597b525f2334235b346c8bbcc6c39036676dc05d97db0ba3192ea0acaf0470768967a7

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk

Filesize
1KB

MD5
824b33ff1125ec518333aff4c8773d31

SHA1
1b660413e47e073baef92c82ce45e2788a9c96e8

SHA256
026b27fe40388c42ad5f459ac0bf28d02dea0460468bec541e3f1e60db13ac9c

SHA512
fc6ac57658c5c41a422892c4204c6cae4eeec8db0460b53a1fc64cc84a9df29f4eca1ce16aeb40418c7121a0d59e6a2b5f1f9576060c2a6ad30561d9ef77954f

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk

Filesize
1KB

MD5
015f364288938affb979c476399adaca

SHA1
023bcd81972d0b34455f6d5a189ddb053f7371af

SHA256
242955ab885582f526e387af59c6a09387875e4970e55d69dafb79f7998f539a

SHA512
bc92201fc145570553aed763fe79c352ac105aa966dad1b04eab821e90f2b85586bf27f21e8a07d1129d9200c48b3b9effd0b90eee4025ae54b24ce21112c713

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk

Filesize
1KB

MD5
0c82ba8fe0d7eeddbeb361a385e2dc00

SHA1
51314fec496e7d8a3f05f1db31e0f0b761c3a003

SHA256
eb462b7e6941cfa86795ffa80e9d5e9023ac24c03dafd406a104c21600110947

SHA512
15ca863e50ed9359d796af174725ae680047594adb91b37b863b111cb2cc2cf289b37ad9e09ac0b013a04e65d8d3da4b90dad11e10e869b4c07bcbf0d6df78cc

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk

Filesize
405B

MD5
66323863b5e1ed0bb45236d034b46524

SHA1
e18d74f9bf93544af8858ccd30015a3a42b11cf6

SHA256
b0ffa22008f9be879a27d3d53e75c1f665a0f46e2f414adb27e9ef6b1cfc814a

SHA512
d09df32c50fb7c448c1fe675c853f2cf1880c40676ebfa7a0344ef0fd6d58402d0dd7ba31a89305484ac1a334ceedeed4cc396b3226ef68e40e92d077b78ee56

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk

Filesize
409B

MD5
3631b31ef61be8982ee9eb5d961856e2

SHA1
58c2781bcc63be1f976d8b0f3ae65988cd42ede3

SHA256
cdf237ca97644fca278a192fa631c1840aefcf6647a4202151be10701371aa8c

SHA512
ee6573a9d882a0bf8c2b3292bbb93e83d48ab1531296d9efd374221105820d12d67e6cdeeb449e8ae83124b352c23d5fb5cf8f3a4b03ce1dcc469dba8b5c5b3b

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk

Filesize
335B

MD5
9701817505d28278f7cfbdb74dacc28c

SHA1
49871e9d99344f2c1c04b8471828e7df2d5969c3

SHA256
68b1b20193a86e303d8416207056eaeb72e7fa81874ffa67f3abf93949d574fa

SHA512
11ba7df920d1c3e3156d7004704ef608a4683596b7a76de25880d8c2310ad1db07a8008436e08828cdb33f093ed666def4aa086716c177575e321880abac57fd

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk

Filesize
2KB

MD5
5ca7459b71c09836df7efa87d0371881

SHA1
01de84b9c1617509bb63b9b662ead002db3303a1

SHA256
ce95c3172c7d9f4afe348e0e906a6cf1ec56ed5c4b20621a677e75984c866c94

SHA512
3400f0ebd46d59486ffa7c5502d2483b21b140b0b29529d678d8e8c0696b7e22fdbf69273660c2bf340509ac0ebad8c1aa8e5eb1012ee21298b43ff22c5b2c7e

Download Submit
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk

Filesize
2KB

MD5
03005d3c7e95e3b6da33d0294159ef4e

SHA1
1010e3f4732d3423aa798f5a357907d75dfa8fa4

SHA256
670f3c8333ad824b0c79364c319b9e8ad9082559c0effdc6b4284c056a9567dc

SHA512
65b39557a2bf88e682e3973e3f5e7f769b0bb842fc52b495db5b29775bf2fe8d33d18f3818c2644947ad200aa8e64b3ffdd49aabc5e01209930a84b5294a2917

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Filesize
296B

MD5
8f009f0509b90c94c90a6d69696db159

SHA1
4f824ad9b38ed195b7c7dec608cd392b9e91853f

SHA256
4960098e8dfcf5cb47baaac002f29500b4ecb760d4a4b5b5669f1069bd8a8e7e

SHA512
0e787db29fefe12c966fb4b236798e338a82cd5bb27aff3468d62a01413dcd28d556e3630cdecbf3cd5c65ccbfe94cfa2cd7970016caedcb786795dfd059940b

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_contrast-white.png

Filesize
276B

MD5
9b703600a09ed0acca9010d246e09433

SHA1
02d1d7e17a857e7598cdabd748bf56b661e41b9d

SHA256
2135151f073e4ef571062d76f5e7b543a628fd3fec9f4baa4365705cc1c5c746

SHA512
6c3bd46226d4b31a033412d791ce503ccb570d35c075e61b353e390cc073ae10c3535a17bdd6ddf6d877cb2244fd692e1240f84e5c4399587df33cb8823f81d0

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png

Filesize
296B

MD5
1ea2b709321fff50d2eeeb05b6055e28

SHA1
005f4cc5a241329d903c17d6df1a855984d9c235

SHA256
01d957f841679ce7f22664a3a059c61ec87fba084f67a9f44300cf631f3cee3f

SHA512
2576b038067f4c1f801922357dc5874339f8f106e5be2a5f94e76766fa0aa0ceca5002f119602d5310d9762c99c0a5f0e5735b1b39ff09c831fcbdf3be9bd099

Download Submit
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_contrast-white.png

Filesize
276B

MD5
d47e4eea6700bdbdfcb03b6f674d294a

SHA1
1cf870dee69e1eba51b4f0b8ae3bf0c2e060b94f

SHA256
3984f1bfd80ce518e2aa1322124cdb9bb371cc6467f65bfd56e97fc5d9221ae3

SHA512
7bf0c05f4e347f47bb9da0f7599fbe6c0f77d22dec4cd7065b6eea57e339519b79758e3f3ec2798a4119efa6efae0bda46af6b02350bffe9fb1b1a0d7e5cd661

Download Submit
C:\Windows\WinSxS\wow64_microsoft-windows-onedrive-setup_31bf3856ad364e35_10.0.19041.1_none_e585f901f9ce93e6\OneDrive.lnk

Filesize
1KB

MD5
5ee6b3866309fa4e6a3bc1f821ba9690

SHA1
e6845f8539649d34d9ecfc5c3e6b57def00cc4f1

SHA256
8a296216dae0c585706fa6101bce0cb32d5941f50f91e160b7106cc3510f727c

SHA512
a31e18d41d6f38b9f2e40f7f273372b269d2d674d72ca3ab75feb1ee37e588e9bb9f3f25db05a9794af8e04e0ff9cf6d4f120c86563a46b08868192c475a8ddf

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads