Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    11-12-2024 11:54

General

  • Target

    e158c8d6310112291938e5c2c181e241_JaffaCakes118.exe

  • Size

    150KB

  • MD5

    e158c8d6310112291938e5c2c181e241

  • SHA1

    01c66023ab6aec3cda5143642f3a15077238a8fb

  • SHA256

    13c5256b9b7aa3205d3fe9d20ddf964e1a6fcb4d563b0ed1e106be9ce9d8e3dd

  • SHA512

    2a0dc4b42368561a407f6a15b892551a68aff77197541e3fcec4ff5d4ffd4a8ff1744326dd6f0f5af2765d44bca581c3632406bed0e076e80108c7b413499d18

  • SSDEEP

    1536:AOhiU4NNHgjrqnNqAPRfWmLgpMk9/hOam:R6kjen5JffgpMkx

Malware Config

Signatures

  • Renames multiple (2198) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Drivers directory 8 IoCs
  • Drops startup file 1 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Drops file in System32 directory 64 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies registry class 10 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e158c8d6310112291938e5c2c181e241_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\e158c8d6310112291938e5c2c181e241_JaffaCakes118.exe"
    1⤵
    • Drops file in Drivers directory
    • Drops startup file
    • Adds Run key to start application
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • System Location Discovery: System Language Discovery
    • Modifies registry class
    PID:2128

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt

    Filesize

    877B

    MD5

    0c613e5f0ec9297c30b52ba47e404037

    SHA1

    0e8c8eb51ccadaeb22a2f0293ce7ecc4cfc7944e

    SHA256

    238b7b0da737ce27bb29b33a6e2d36cdabc2fc9530164ceba5c05a5c5bbccadd

    SHA512

    b2f159ac2dea16b81dde540442f454f053c13b6a02640f780008616806cdb71732fc9fef333d9bc4643ef43334ab8469da576fb78fb18ba18f87e6dfccb7aac8

  • C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\TAB_OFF.GIF

    Filesize

    341B

    MD5

    833d50a642354ac547d3b56efc95e890

    SHA1

    96ebd8161a241ad1219135b695eb08d67e9bd0e1

    SHA256

    faa98b1c116683b5846a55086c94627c9661dfe7f0eb8264da99edfe64806f75

    SHA512

    765eb12e21340108500aca98e07cbf07aa0df6033fad2eb74b7776a83e85e9e671b7ab6a2f57d9e15d3ae3de97d7a0c019fcd5234b916ab376613e8a3eeb7193

  • C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\TAB_ON.GIF

    Filesize

    222B

    MD5

    440ee1f42172f3d1a6e453739ee9bf74

    SHA1

    38e423eb05e129a179640727a93adbc9d0beccae

    SHA256

    697817452feabd1ae8f2ab1614ddb95815df9f559f9e3ac21c6e3c18d7718794

    SHA512

    208ece4fb7582ec10b7d4c8ab4d3763b2017300d69eee4d13a46ab0a8c945b0256c1e30d8f95e7c0434890430cc88c668556115267bd350b491500d1580b5b18

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\BG_ADOBE.GIF

    Filesize

    24KB

    MD5

    68b73dafafa2c37502058d58e74f20ba

    SHA1

    7a2dc9aad138980575418a060cc993988d549249

    SHA256

    ff8efc96fd40a1a105ad6d25b8b6c2a8ff9b8afbb8bfd7693e78ea668bc872cf

    SHA512

    a59931f83f8dcf5cb53489b6b603ade1da64a8c1af53c2c704f0553862231f494d035cf14ad0bf8e6f6436b1cf97b7bd2b3172d323bf4bce7ca77881fee10e18

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue\BUTTON.GIF

    Filesize

    185B

    MD5

    7b774f8d73660a9d3296cbfaf3182da0

    SHA1

    0f663b62c4bcc420726d373c6750cd9b0ead2c18

    SHA256

    1f0c3eca13556d3bc7c258458e3e2c6f61ec4de4517189ba4a88994b4c08debb

    SHA512

    f142c0c560b90e5dca82f2a874627f1bf55ea97887dfa2cf998e3c354701a86701750b14ff28fd23459d96b113bd9352276ebeb52e34a803c60351210728341e

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\TAB_OFF.GIF

    Filesize

    496B

    MD5

    83303eede475c2fe9c01f56efa608e1c

    SHA1

    0393faf246f1507114934679441122f3536aa95c

    SHA256

    e8ec8e390bf89ed930d23d33c0b634b16408806f90a9b45b22cc9abe6946f792

    SHA512

    71f973b655145b248ec6b001c1cd0b6d71590bf5a0bc2f67575e1c02a79088a226fe978fd4f8a6f19a038b25e9ac26edcba32fd32764473cd5adcbb82c97d8a4

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\TAB_ON.GIF

    Filesize

    1KB

    MD5

    adbfea2e1e25c10a96b87fcf8fd4a605

    SHA1

    439b5e97bc061c26af7e7166c58cc05820e19054

    SHA256

    ae00a7ecf95b25bb3397520b8c0acdba000261225fa340bee194ac39028abb0c

    SHA512

    b74b96a8dfc759475475c12447c3697268a77a1c9cedf8ff0c963eefcc77b5ba33bfb1a02b082c21d2543d85933f19e55b13381c72a05cf69ce208a308aa65ae

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_off.gif

    Filesize

    341B

    MD5

    9bac9fc8119ba3e72b2e2fd5600f6ccc

    SHA1

    518658565601233a984d97c202c2748e0842c0c9

    SHA256

    acc2fc74108d01110353c7e884bf5635b0e22c47d51b36ff2ec040fad58d7a20

    SHA512

    987482e17e391e49305effdb8a169ccfc1a48ad4f74f743ec90e0a557d93ac32cdb3392d2c6a52489cbd1b7662ec95333b6234bebb59bf1ff9c8dff2961620a4

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_on.gif

    Filesize

    222B

    MD5

    f08751d240fc12fd66093bb3f2d6221b

    SHA1

    a1b1157e7db18baa12313c25c3e6d7159d632e6d

    SHA256

    d702bfcc0b717c672c16612436ea21d62370a995030eaa0a59787937da0d889a

    SHA512

    c93c8f40edba5e6a94e514641a0315daeda7deb3acb3fdca48a455a6a78308d03fd57a9e7c12891bc70a09dfbc7ab58081fa5042b8a88d0f91a8bd508dae5434

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Casual.gif

    Filesize

    5KB

    MD5

    b6308f4efed52b669922d48cb2d69e45

    SHA1

    c328bf4d5c63c3f5d2df227c8c8c3175c7fbb0a8

    SHA256

    834246a50e4061f335c8acd2a32dee0267649f6200826c2fd8f8e89ceeb236d0

    SHA512

    48715a3c52e12a7558f95dca79ce80733f6fd0761353e124ae73652594f1d2a4d45a8391ef7b4e09408c3a3dd12a9a0efee86b8efbce19eee8557eca838c02b5

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Country.gif

    Filesize

    31KB

    MD5

    63ac7dcab032e4a3a9891601b9ab6445

    SHA1

    f42e3e7b9378696de57d87d68c184c84551c855a

    SHA256

    b9741faebca2cfa0b5d63823d15e624698a34cb98689bd4ec4fb279402529ae1

    SHA512

    76d47b49c2663a6cb16033d1dd9c7a4d3bbfa017df9b4dba1c1d0f2f2a802bc01cc3091c71bbb8cde9e6aec81a22c3e0ec9fd95a99ff70aab2aa78f23bd4df87

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Earthy.gif

    Filesize

    4KB

    MD5

    b68500db9ea87b7b4e77a6a1d239c124

    SHA1

    9ed71d83b957847da2cec8716759cf273f4c05f7

    SHA256

    f6f32b8588ef3e19090c57e837a667c091c18400197c3c229d4973ccd61e4942

    SHA512

    8f758274cfeee17ee20c602d59b0aca99d1f549a036389662cf186012ee18e0424d6b025a96177d44100c8f070031bfda7c1558e6d5aed92e9c7c17b3e69fe7e

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_GreenTea.gif

    Filesize

    21KB

    MD5

    34785aa13044d31e3d24f27f7502571f

    SHA1

    e81b5a9dd0a828844d1fcadd94e7d18811498e21

    SHA256

    24089b946e7a9d2ee3e7b9cc4a526e317b8429fba9a3b57da77d3adaf0875c0a

    SHA512

    f496f12b1a400797491a810938fc4a87c9db9ce8ef0029a9db903f010f88f4269217940a52fda28ce1c784642da634a755371a6deb70104cfdce4f1c4165e6a1

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Groove.gif

    Filesize

    106B

    MD5

    5a006edfe068f8de2525e9143827f4c4

    SHA1

    c975e4769b2170c2e970f3cc72eb9fe281d72c24

    SHA256

    4e160baf1a3c114fad3f713a2ffabb566ecf6ab70dd4a320e95b4a1b715cd6f6

    SHA512

    4c93cd6293e56b670b9ccde58e13055fbc9887dbffc3e67fe5c510cb556f2e277f1c75d2151ce4ff2aed78c6a20378825ba73e1c6a5ac6d86fd34dcc34960549

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_LightSpirit.gif

    Filesize

    8KB

    MD5

    165d3d9390a1b77321e3065b926c193c

    SHA1

    428763560708e5c025d9c8fccdab8a1d9ff11e21

    SHA256

    9f488cf72678c5740d5948317cde82c417c6b10a2cfc560a4cc7371349391913

    SHA512

    9314636beb0be2c35a4b1ffcbf35bdc7c1bf84c73f3e02d9f8187d982d3756281e96a002829f39ae3e522542e317ec487d4baa952c68f91464c71d850baa0ca7

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_OliveGreen.gif

    Filesize

    15KB

    MD5

    71491c1f0e3e895172bfaa5bf4003ebf

    SHA1

    360401d80d0cecc08ac3df29d6ef80bff91dd45e

    SHA256

    33368741f4f60aa4c44c718ef74726f2c328daf1b3abd0845016cc284e964b2d

    SHA512

    7841f4bbb641d5b73a0944317a02dba5c876702ee927479877b775e2f0e9470a0114eb22017328a077c4ecb440d7b2d2fec301cf258b978947176dd9fb7474b8

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Premium.gif

    Filesize

    6KB

    MD5

    2abdcc494bdc90885f80d910261c8d30

    SHA1

    3ae543045cbef97ade57e433784f7d8520d45cfe

    SHA256

    0c7a824255fb44376dcda2f73df57f36c4d632ba7cb5038d35085e32360cc931

    SHA512

    cebe65fdd4530070455181bc7956b1e85e51f06e69619ae2ba282a5533d4bf69fa1cb2d77e506b9e5314591e42a36424dcb19a56d64a69841556f3ad5c8b6612

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_SlateBlue.gif

    Filesize

    20KB

    MD5

    43c06d2637312c4f6a402f142f006cec

    SHA1

    618085150b872106ad51a12a026258c08e180538

    SHA256

    b062075e116a1cdabbf0115f03cabf28912dd2f67cb2732e854ffc2281fa1851

    SHA512

    d9656f23e20166edd9edbee5a442006348982ee6d1f0fb608ab9d0a33e504fbbdfddd2069c2143c0ae6b188fecc3215d521fab9f4829567d6ce2fd0443eb5f39

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_TexturedBlue.gif

    Filesize

    6KB

    MD5

    198dc941e083751b0248e39a310c7159

    SHA1

    bb76ae37a5781f40a9932e88119ad16ad44d4337

    SHA256

    3854639b0434ced5245b15ee8e082ef442ea8cce61c7cd9ac34affbc241f0215

    SHA512

    5233325d9467eb782db0c54a94162d107c77c384172a39847ac092e0c875bd81745985c03bdd4e369abb0a7b2436d6b58aa68d3fba7a4459b5ed52a6d486d596

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_VelvetRose.gif

    Filesize

    15KB

    MD5

    8245b5fd52f404e671b8d0171ff24236

    SHA1

    d243817e20a1ab273861e03c73dc1a4bca1a0e95

    SHA256

    c98224a53114c87483052b6b03e4090094730285e4d391dc8cc551f24b57e887

    SHA512

    2e27c42fb532f6be53d23d51949249b2f0eff23f732f515fc905e424e6746ef3a15e106b355b92f34d6c4d4424a8c9d2898a22402055e44b98764cf74bac06d3

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrow.jpg

    Filesize

    2KB

    MD5

    7ee6c72ea72d2dc06063becc3c3f55b6

    SHA1

    539e534c48c8359784288d5bebbce429fe8810f5

    SHA256

    033ae8abd22403031eff1a138aa2db28f2db81f42685dd790439b1828ffe9613

    SHA512

    b7f522f3a03da988bd657cd74abe1c5d0d2c6935d52e401c439cbce395b2c36c78288abd91a1d45570341f02eeccbdf4815cd3bfda623a185221917cd5f75b36

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrowMask.bmp

    Filesize

    2KB

    MD5

    ef8643a4e69fd00c1e20c9a9d40c4518

    SHA1

    c2f57079b02ae8d82a51ce3b4000443b5b3b4bf1

    SHA256

    d0acf62f68aa69d473476a564bdcedcd74a9c9d0313f2ee86bea60be5e99ff3f

    SHA512

    d39ea024c374395e0b3b8df70da089803c69ecf375fb8bd7365711523dc7c1c4958cdce2ebee736a9e7d05171d00c2d7a00db29ea877204c2ae559b7d767e979

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormToolImages.jpg

    Filesize

    6KB

    MD5

    4e4430bc303e86be5e5fa6a4754cd57a

    SHA1

    fab084df6a93d9de5bc195cae1a675f43c87aaf0

    SHA256

    3cbf8dded2c4f4592a6273ee061811bf56a6490d285fa9282a62fceeb5670e03

    SHA512

    112322280c24878b979bf13fd0dabffe4713c9225810e4d73bd92a1585775c310849946fa1243883ad3dbc0ba3b203e4c2045028a64d0b6cee72fc20b19c6b8f

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue\HEADER.GIF

    Filesize

    255B

    MD5

    30a549859e342a710fa9f3acbd9589cb

    SHA1

    66f2abfc805fe1235b575b5142e8fc9d39f558b0

    SHA256

    a387d8240a0d7529582c35b38103baa02a948dba3cbbbf466f3d8316ef1eea48

    SHA512

    1ff795f8bb8db2911b5f410827ae6d18156ddf02ac9bcef9671eb733bb7873dd9ad943e0e0edcce7546e34d98bacc835ba925061216c302c1786ea06af992982

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\background.gif

    Filesize

    323B

    MD5

    98404dedb48e1df95fe7213e60a25f7d

    SHA1

    15d4b3a83fb551130534abf9b5437d2c116b5f9b

    SHA256

    182a492c5d9f00639da3115f4d6b39bdd3869f374985f15e5084d9471c34f5cf

    SHA512

    6e9df2b526e3a87602dfba1786bdf8d2793cb515dab46cc05c5f0cda202f1dd0d40d7f471a7344ec636f628417bb9e528f5517470432cdd97c20e6016a77e604

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow\HEADER.GIF

    Filesize

    367B

    MD5

    0e8a5409246d40268d19d296d3403477

    SHA1

    8cc3b4ac3a63bfcea1e7530a42af9610a0523606

    SHA256

    413a5e54771dbbf6e2d0b0facc64ae9839d2101e2e82e722459af9537993c2fc

    SHA512

    1c67f3f7d5fd89d3d8bd441834e70dcc4543e863c68677b0c87180b01c00288784ba43280ef54efc3ed04bebc232c7495422e3a0ca345b836c53b3493cfa2ea2

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\HEADER.GIF

    Filesize

    148B

    MD5

    0c8ca40ffa487a3c1a6d21f44c7e0bd5

    SHA1

    30bd8a1fbf5364f37abb72fa3f2176b6f6258605

    SHA256

    d1fa9bbd0c928ae35b0aed10c79c5d832c151ddaa2c2719a6a80d54f0d1993e4

    SHA512

    9c1e7e41063be5a74b6c8c7258a3171149684309cd8d40f4cabc23621ceb1f9cff977b7349eed81e1c590af594795b064b6a3b422111e50a9fd82288596ce537

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck\HEADER.GIF

    Filesize

    440B

    MD5

    5b50b2834fca30b30ab11cf56e282eea

    SHA1

    d4241e77e009f60642e7aa9a9f9c1e1f7b649e7e

    SHA256

    64ac16817672c966fbe66f42986d80a56fa7961c85e7f24a50e853d82ce528b0

    SHA512

    51028a6ca3e11f65baeb60112dbc0e67af4a764c485b7ca5564506391decdea3b75cd26288b8ddf7c57518f8cf8f9287d209da592fbe9a93bcb1d695fa5361ba

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\TAB_OFF.GIF

    Filesize

    462B

    MD5

    3d37413601d4eb027991a8f14bb34a56

    SHA1

    8262867f08640e26cb2399eeed7ce42faeef97dd

    SHA256

    67b1ea259d5f7e0fd02904ebeb1928ce4c30de03b7e1d2f1f5a5074270befdfb

    SHA512

    b0e937a4ceca5c88555a1ff969dfe58cd8694d6eaea7e339ba2997f003919515253c7912c7844dbb5a7a39a408fd5b7176d1513336324a14399c2be4bcecf9c8

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\TAB_ON.GIF

    Filesize

    267B

    MD5

    63570cf06e2a967bdca4ab8a9f8d3ef1

    SHA1

    06bcc5c57723536c2a1c6c5e48cbd05e27e4c535

    SHA256

    1a0ff6b5db27614896c9b3d6329334e6f6e7e71937da1a23c8cb49b24a0182d0

    SHA512

    c7e2f9fea2a8975e3f9151c5800d842aa747f961ae2ab69e910a6cae4a97f61bba2047532a8ae3df1b54a541c352bd3177d6b149bdfca68e15d3746aae969d30

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis\HEADER.GIF

    Filesize

    2KB

    MD5

    fbe831ff9574121456885b334d93ab4d

    SHA1

    7eaab371264e81953d7bcd5d2a1617dfe23794da

    SHA256

    6f97aa168afbe750893655d80b161c39e01d548e34cd74cb8606a0de41274f18

    SHA512

    bc0c71d79ad94cf4cd58a2c7fc94dcf377d99d50e6ea242992ab3952a4345ca5ffba7f6b6ea2c1a65b6954573ea06ea0e56882c0f52b581842757bbf638cbf2e

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\background.gif

    Filesize

    233B

    MD5

    0827a9667f4182657d0ca5f00dd1972f

    SHA1

    b8109860286cadd6dc8b6a2aec1a1067a26192d1

    SHA256

    bb0f324f87800395f0e437b9e85ef8862d7d5ad480914f1228804ebba7bb3712

    SHA512

    06060d7c04f58532d14c7eb45d133f1ccc2c64619868fc6e753b53f34ed3ec0fc0f0e48e4837a89c2939fce903e61f331dfa7f1a8b395e23dad3428f4971845a

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\TAB_OFF.GIF

    Filesize

    364B

    MD5

    24c6eb0b80679580fa6ff59bb2b25f9a

    SHA1

    d19c2d6d7951774f6f758de0a770b9a995f8c084

    SHA256

    edb9f46c7866be3b5113289389d25536de4c5bed4bf159aec4706656fc22fb05

    SHA512

    b83a54a4f25430e99d0bce12dd553534f364663caec72fc34d62fce40fcfa0f35e3224cbbfc4ce51b45ef33ca29692f7daea3fd837f033698b2dbd79cd44017a

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\TAB_ON.GIF

    Filesize

    364B

    MD5

    cac922511666504762f1313d92c298f5

    SHA1

    9bcfc5ea8adf091b0dfd96306528fad75e67ae07

    SHA256

    9babe6820d105e22cca4addc9d6488743e4ecf3d580052b3c52045b4c70a4620

    SHA512

    5e1df760d2d9bff0dc06ea0c35ec79d3a82ded246a42384e47756fb1788bb4381347196b962dfa9d25f1cd77d959b67f8401edd8e8aaa836ca8d5123cc45634f

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\background.gif

    Filesize

    6KB

    MD5

    7f27da30d9d8c4eaaa6d756c1c6b08a6

    SHA1

    414270d8b80c77f22adbb66e63b7131375add621

    SHA256

    b61079c8ac73dcbd97a9b61f85bf74b531502a3f514aa44d848dfe6a532e3d2a

    SHA512

    441de0e8962626dbdf14f37aec7296253132823d7f7c465d2a13d5d37cb30d33547b3af125d6970d78477c48a5b149728e4c894995a90a26bdb4de8a797cb52b

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen\BUTTON.GIF

    Filesize

    428B

    MD5

    d6612864fe973a4c6c35446e2205c685

    SHA1

    293d6b6e2fc8ba0f05cfef1042be7cde92d30dca

    SHA256

    d4c02dfb61f2aadf30c5f59d341ab874ba4a24d53a19b4fe3dc138181427d2a8

    SHA512

    fb774462b97031db6d4a16488c25925bcd56c147abc4e0bcb84f0818bee9f83444702c09f7c0343604764918e57dd3272e3849f9945bf0b381a3f74324542603

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\background.gif

    Filesize

    815B

    MD5

    014000de6564570110781f5472aa61dc

    SHA1

    14c5db2b3a0a5697f53ca0b3fa591e4e21ff04d3

    SHA256

    0a1fa0cf98193ce126645400f5be6f508ae664e5ba85d33b7642fe01f6a11636

    SHA512

    2dd6db4a9a841f25506c81437e21e463244c5bad56982d62f35ef50f8875b6da3d509adee024f5514ece5fd60c21718595f14ad33ad6f886760b1a9179cce503

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\RTF_BOLD.GIF

    Filesize

    870B

    MD5

    42c619dbfaf7a841daa153d54c15328a

    SHA1

    94510778092a380467b0958d7412e67c7305bb21

    SHA256

    4a1c4390f15b2f67c5f84b3b30afb17a800ac1666c83f9ba18e34f7878654a8d

    SHA512

    d37da277fdc9821d930145b87e72af3f55326ccad963a663135bd51055200039dab4b74153b75328e7f5c9eaded1a6a37286e79bc579a539b740748a0e60a69f

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ViewHeaderPreview.jpg

    Filesize

    3KB

    MD5

    03e8d345cbbe4be0a3200bdcc9d789f2

    SHA1

    15b66f21a1474162c52961b56afa53e9b40f0ede

    SHA256

    54edb0b1104e2f74243b7982eca0167f28475e95db4525f1ed40af239d2c933a

    SHA512

    5e7fa22ae8f7d2ca5cd989d6a73d5b6ba6a4408cdefa81ff97d887c968b614dd430098f5ff75b4d9b172d798bbdc5c654b770b17598abbd865def12549421677

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\attention.gif

    Filesize

    2KB

    MD5

    86c1e40d38050c80d6f51da583d5de08

    SHA1

    0a60c9ebd8f550202b2273183ed29d211bd6599e

    SHA256

    061189a7569843d2668f12021292f567b69c453a1e07dfbb54ec6b8831ed3e89

    SHA512

    2ee092311a0461edfa749ad229134fd267b768fdc4210d8c051f79161e544566b423106cf4a142da953672968909ed37699535333e1257ae0d17b1b0c89583e8

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePageBlank.gif

    Filesize

    19KB

    MD5

    53a8ec7c718c4e0031c86b2ca41ad990

    SHA1

    4617877323a0001ca7eed81a561412b0cb632b6f

    SHA256

    422671f15b3d4e6e22d6722f6d86aca1dabe66bc77954f53dbc70c8388f491c4

    SHA512

    a318917d84d419539f01c41d8834fb0d848589fac9e724e118f41c83db5829e3646359206485d6270af8d501c62434ae9706616bce0ee41a62613a2812c26334

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_choosefont.gif

    Filesize

    890B

    MD5

    829d71a4f3fac0e35e13542557b1c0e9

    SHA1

    ec2e4527edb6c25c141f82890484cbba11c8b61a

    SHA256

    b043bee1925982ff4eeb2786c04f9d2bd997066609e163072b19becc0ba431b8

    SHA512

    17570b994bd7fe9934c73dfc3b9957ea81acb110ff88ffed46fd23f9bcfd099f12f5ff6bd6deec50676fe54c14438ce6465afb9496fd2c436ed6f1fb06e7cc54

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_italic.gif

    Filesize

    852B

    MD5

    dc317073c50772bcbde9e57335181e6f

    SHA1

    eb7c79df8f6e211b7d971e9a88a858591d03feb9

    SHA256

    6fee17d8a76011a3723724df2d3f4651d87a3cb98da6515f03dc337d36561caf

    SHA512

    4958d8f5073f3d4b12f7d7a06e471da676849887b4d0877fd2fc0efc8f55f175f3295475d998a7d26e2395070fb400972eccf0c3d66aba374da4c4858d922c5d

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_underline.gif

    Filesize

    860B

    MD5

    e8c3e07b4739fddc30aceb87d52f1dca

    SHA1

    1af1ea7e0d4e0f65fd47a7a3a9b83283aaff4eea

    SHA256

    43a2b6cf36a44196a27620f1750c263959bf64b183f4bc720b28f937ec342a1e

    SHA512

    c0486c45333021bce8a2939b005dff7796f48791ad477b089982c0be3dfd8bbe3798efa504618d1da522adedb649ac504fc376ba3f69d42c52df8bf30a30d68c

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\ADD.GIF

    Filesize

    580B

    MD5

    4ae6d37e8a773c0cf1c4df9d054a3faa

    SHA1

    83562216868321eb7a6d0b6bac6905f0b364da76

    SHA256

    b638e9ec6e65a09c687c631a39227c3e853cfed86be02ae8e64396f8df22ed59

    SHA512

    a3d2eeec4f37e334cbcfbcd71bc6c5c6c6eff2d16d97816f325c152e67a2fb1e86b66a16b9962bd1f3b4b47b67b37d25584ed2c9f42143e7271350e62c82cf2f

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\CALENDAR.GIF

    Filesize

    899B

    MD5

    2ebcd3cede725d451d5bb32ea94426b0

    SHA1

    d014fbc534537d33c6f15ea7041338eb9d30779d

    SHA256

    7dbe8cdd5a6743762828ce9a6d2ea8c8bd04ce96f27a69b469a313d306e9eabc

    SHA512

    4727a048d288fb4bc80f567dc48c7da109ab2baa058da1614ef968d9141ea82bd605cf795d3c2a0141ebee957bf44008700425377ee59bac52e8d8ffc24a915e

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\DELETE.GIF

    Filesize

    625B

    MD5

    ab59f3113146bbd6f6c6a024ceec96a3

    SHA1

    74a891513222bae339a32f98a58c869257b316d1

    SHA256

    39c683a05a23825bd5054e1c852733cfe727737c1f1bcab120b80183f0caf5f6

    SHA512

    683d635227faaa4947be6c065f8f37b61f0a8013ae4ec479fae228f5bce580654e83ab96bba066cd8be7f09bab87d4089498b3e2c97aafe27aad454731f17dfb

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\ERROR.GIF

    Filesize

    873B

    MD5

    a062c3fbf5eb2f116db3419a62d1523d

    SHA1

    82c95341d11765cff3e26a506c3eb1be60832051

    SHA256

    2ad908461345675a4837011b252cab612a98d8e49575ccd3bb431e7f4100a78c

    SHA512

    d72b29bb21c5c6b7b63bebed1f5269a736985adf4a74feac7c5418c8c01242d19099bcc67f4d94b981424ae1667f1dd0674dbb2ccbe4504c16313371085d0437

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIcons.jpg

    Filesize

    5KB

    MD5

    9fab3a003e68341b4996d029d7ce2476

    SHA1

    9fe636a62cb941321d68ba87af772e6273e74195

    SHA256

    3c4cff14ac4cfc6d98f3a6161d8fc6b45273152096f5b37ef1dba58cec3b8395

    SHA512

    51abeaf221d8630932d3585fe7290eab6413b5a3e2efcdfd85d6967ebc5a9ad2559fa3b74e71078ede33a38e69468b15f737777835ae6d4052c83b04affa5204

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIconsMask.bmp

    Filesize

    1KB

    MD5

    ec02cbfa2f08b458daccc27bcd26168d

    SHA1

    da23c0b6df66e82c5a1af95121f2d9662c3d8233

    SHA256

    bf3bc794ab7c65a75103d1c818105a97bc8d50ddb99ce41c42fc8867d3d8589d

    SHA512

    54663129f84fddf636948b41e8798d9ec90865141fd629f8bf2edea630728912bda0a298e838925e4e7734347d44a2d5be135f63e7957bf849374f4331ff65d9

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\LAUNCH.GIF

    Filesize

    615B

    MD5

    9d4ed35f4b59e00ba1f37fa140c5a0e7

    SHA1

    39b1722aa7c60e4fb7aa2778262db6db21073bd8

    SHA256

    46eed78cf0a2d38267a1e49864ce30fb47937eec766b94bff1513e66a33ea5e1

    SHA512

    7b73d2dc88a28cab9b091183658b5be4a6d8170031c85af74759233a5111057674feb43f7de1e50e5473b759b890bdffa5223357064659253f111db50a654ed0

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignleft.gif

    Filesize

    848B

    MD5

    441eaa991d439bc47feabfa15cd37d3e

    SHA1

    195ab911c9d2c003e89263a87c486d257bf5b7e1

    SHA256

    1649555773324fafe502b44e37e21e3b4fded2aba35372d7fbf71f006b108bef

    SHA512

    5f30697f8fa57c2f6dc730e191d1fa13bfee867ad09ee5fdb982ffcfc9ea215c055c3e129de5d07c1a29dfa27ddf2294e595c76ed51fc19868f89b366eb3734a

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignright.gif

    Filesize

    847B

    MD5

    97b92d6f3bda9d7fb192761f0414f775

    SHA1

    f6b315c6715a2edff49adb3ecd3d1574373867da

    SHA256

    afa34fab7fa836770ab2ea235de3b3a23a50a97fcec700637809be736666c3da

    SHA512

    c453ca045c6008b6cc6d9adcff43bbe3297c238bc9d940d866e99eae16ecfd73caa67c0ea4d2aa0c9cf5e0c49f366841fce4c961cb2abce56c4cec34ad406598

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_bullets.gif

    Filesize

    869B

    MD5

    e7c23bb115e8a7d6380b366fa3ed481b

    SHA1

    2de85b26cb0063bd1ca5f8b71933c33f3351b445

    SHA256

    13a62769c2866b46876118f44da834cedb70aadb67cb961118a9aac899d12652

    SHA512

    60df6fe939ad50ec4163f1dba0f14aa98dd0edd90e264e548ae957b0816b8d79b43ee82033df6456c0038424741c84f45b70e8b171413cb1d88cc05a09dd6b32

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_center.gif

    Filesize

    847B

    MD5

    494a7c246a85dbe56d5b09a7634c6dfb

    SHA1

    9f8836fce3344fbc85417f4f6042b390eaedb100

    SHA256

    eb4cada7e35d6b430c9767572c6335031fee35f9e9baaa9b8d72bc7178ec230d

    SHA512

    d65d05a5bdf3a31985249275772464bf99754b02efa4f904a74781e3f39864bf74d9d9ab7a5d45fe2ced57d6d9dd223bd8c7762954102905a1e99c1da30ea21e

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_decreaseindent.gif

    Filesize

    863B

    MD5

    6bfcd258f2567474d02f3af24f313fd1

    SHA1

    a1ea2ee1271fb36610010cfc1f5cefe8dd7a4066

    SHA256

    eef5ad424548ea7cc981685201d7b2f96912ea0c749909e4db80f323a42b602e

    SHA512

    228b61e9c9594455191859c001b07219a857755788cff5289dd5a9424df1cd32774d070ad7652a89570083ae73d2a615b5e20688713384772c061101546aa920

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_increaseindent.gif

    Filesize

    861B

    MD5

    77e6742de20f6eb8e073452046757686

    SHA1

    9efc39dacd518fddb90eca593bde4038fd981a3c

    SHA256

    7163882e29d81113940db340d0b5b227ed1e759ace08c514d7ff3aabb56c668b

    SHA512

    820a9e2b185b27e20b56d7527334e59af64d802665bd405dc7acef623b77cef3176bd4181131355043a1c429dcbf659301960fcb3d4944c6812e44c1cadafaf8

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_justify.gif

    Filesize

    850B

    MD5

    f5aa66163ce95a11ed13dde3d11ad9ab

    SHA1

    a3d0fb7fb1a6074880070263774483fed837acc4

    SHA256

    57ea588eefd7de6931703a4d4f8f443f6c273ace3901430daafa443152ef387d

    SHA512

    dd1ee0400ce257113bb36d5f3b62bc67d211f86aa1e0acdacf625053db9b8161c4bb3f9627c291121067a0c431b8385c9d30264c278001df689cfcae5625d09f

  • C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_pressed.gif

    Filesize

    883B

    MD5

    bbb753d9704ef5768e4d474706f7e4e2

    SHA1

    0b9a24afb7d97e45389ef0b5c01b3ffb8d18597f

    SHA256

    31fc63482ed97f738905c0d7db30f1fe7fb2986d85d8ca157ecc50b63baaec34

    SHA512

    f32d7053540cdcb8db2d63bde025650833113982b88575936573320dc8728d594ed9a2a05be67bea425671f7b77b4fc4d6076c8c98c77520ab2f1de7ac5fb51e

  • C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif

    Filesize

    153B

    MD5

    d1adc0613648be971e9e3de20bc6ae31

    SHA1

    2e85f8642a49f43f47b529a802c254bfcf6d9c65

    SHA256

    3253cb5ffe2446c028a71adbc9ef727ed0637ce4406c1f4b79cd9b6944f4ad05

    SHA512

    49c71f05c24353fef1093f1005cd4dfc3a930ab0f6f983f43c5d46f7b6ce1e27dc4bbcbaec80ec00e25d059a2a5d4ecaa773e3b46cfdfc593ca69aafed5026f3

  • C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\epl-v10.html

    Filesize

    12KB

    MD5

    6e3a947fcb397d71d2b7c1f62e1b0606

    SHA1

    b86b5f63f6e981594db51204d1ed66c6054a1899

    SHA256

    4f16c3fecc0bd58621ca160b7d9714ae1cd0e13f7fe23b831f2cbc55c2f63693

    SHA512

    0d89b64ddb9ebe10afec97b28feb08cda25c12a5e559e9a417ae0398311aa16e445e620f30b519f386d113131c0784af383c173ddf7a7e8589a2b28d344aa02c

  • C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\license.html

    Filesize

    8KB

    MD5

    0ffe785ef47219ea488acc96cf0a01f4

    SHA1

    36ede14254a0f1670de82d1dbf74f1e574b774eb

    SHA256

    2a9405747de02799bc028fca1f1fbb932cda09b69bc47dda2332f35f0dc0e3a6

    SHA512

    4a2bcca06e18cc770ad3609413c3c8bc3a1e238728576012903ae842c567d77dabe713592f7d4b232b7057942469385e1ab361cf024616ffa659ab79da2e2942

  • C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\asl-v20.txt

    Filesize

    11KB

    MD5

    6d60ada1ad14784ce054370e948f3c21

    SHA1

    41c2fd90344705192f0d8b333e1c42627c7c68d2

    SHA256

    84c049bd6bcb4b21fb7ca10a6b916dc842d8d29d3fe0315938e56878acec8cc5

    SHA512

    3bd8f8525e0f9ac0be1086b46a7f812c4f7f341111928dbc803e0aefede31bb1d8d8759a66a8a601cf3dc80ba86451604a025806481c54f8da57b1d4451bf3f0

  • C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME-JAVAFX.txt

    Filesize

    109KB

    MD5

    af60687e91c37e978b42031d354350ca

    SHA1

    8daa118081d1c01af1c0f2a23058336466098768

    SHA256

    6a42976df568ccedd9f75808f610aa2eda00f87785374ff9062477e3dcf56818

    SHA512

    3869a2835954a046cba8f0a67c3dba9a3ae08f95467e0b3fa04084e36e3b4e39025c82e4432b58abaee2dc4b183eac9e45807b39293e9890707f7a7445832075

  • C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME.txt

    Filesize

    172KB

    MD5

    d7d6f1bad6d8f6a60e2cdb90c745b81f

    SHA1

    d8ed20bb7e8577922b92e86d909cd2354c2cd1db

    SHA256

    325d974b07a4b947589247bc01f3702b199f410b9f5da4158b96718e547e09cf

    SHA512

    8d63337ff4319f61847b6607e64312c0ef0d34ca35f55db81a4ffcf7d8773722d9d30dc67c815c966ad5a8a3691489e5d6f8a4612e683e056741068a8ed52075

  • C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk

    Filesize

    1KB

    MD5

    7569d657196c4e1e871ca6f8886b5698

    SHA1

    8df1799c42c632393c269e57bd697d55c08f1168

    SHA256

    f01a930ef29a9b0f72baa3a6080881d5b54c84c5585b1dc18af106c0aedf2488

    SHA512

    fbc688fc3c9e415bccf4ea57a754da843a6d93635eebffcb3b243a67e5d5b7478294970f06fe15ca4a04088fd1b99811d848ac45a22148f2ef11cad7816bc2b0

  • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg

    Filesize

    21KB

    MD5

    52e9192fcdbb10961cc22368bba35ddf

    SHA1

    3fd4d69fb32ebf2aab0491a264fb0e89eec89717

    SHA256

    c5de11cf382ba7c51b54bd201e682ff81027bf84ae7548eba1d0abf8778d011b

    SHA512

    ef43b100b24177f4e2f5b3a672facf213f12c3adfbf16a2cafb6a86608a93b95bc16f62ef4f02a99be6fb7a92562d5a93f7cac0ae916bf1afdad4ebd2ed8e124

  • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif

    Filesize

    1KB

    MD5

    01a1add815fe1e3233113f24318e1069

    SHA1

    ed91c515a8475ceb2d94200ef788d1f54fb29268

    SHA256

    53125ef2c632cf117ee6cc516bd54ffbbcea4d7c494da80383df54288ba778f9

    SHA512

    4133182897bf360b56e4c32dc3449d8071b0c04711a7bc317188db3cda6682b9ddf887a0a309344cae1eb8195dd271b0d54727a098c24316f06654e3104b28c3

  • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\alert_lrg.gif

    Filesize

    952B

    MD5

    3e65da9dd7740527ee1980380703871d

    SHA1

    0c5bd06f4a410b216a99e1c44aeb61434df50d6a

    SHA256

    23ed93d8284a5e765d8c0ba73a790b6a8c68eae2231e2accc74c87cf765e60c5

    SHA512

    9f6259e44f20bc8d66a3e250c5dce2526cf3d6918a359984e5a36f09f87d5f9eac9d59c5420095706dde2ce60ecf530f8d4967feb5ae140b2bc3300dd988e1c6

  • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\aspx_file.gif

    Filesize

    121B

    MD5

    aaca4be2440d248bff88c1dee8212e4e

    SHA1

    9f883333923252364f5bb1286ce8602f33b95807

    SHA256

    478fd058fd96a2bd44c68e73a5b697e854396c766ab5ba556112d9cc73d0134c

    SHA512

    1055237c2206ab9efb910d10d6e5f2c2f5aeb8079268d0d0687173de63c3320ab6390e681b39228ac6a9fa225686c411bf5fe641042b589a196f650077915d03

  • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\branding_Full2.gif

    Filesize

    1KB

    MD5

    77e33ada8c7a76f0c627e1d4cd2e1340

    SHA1

    fe5d9a428630ce93f95e36658d0df00724046f23

    SHA256

    c8d41d188080f3e6299f5329a2b9ec2befd1e9c796deb7dad1cadb189d284c1f

    SHA512

    7d7b2a1007ad9ad2b627f0fbbfe70c879b164ab765118532857cebf30c42a89f48175feba5d1b5c2ef9d04c622aa94c2496d7916c569b3d577d336bbc1e2f54a

  • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg

    Filesize

    8KB

    MD5

    c3666442dcd9435b85c55bbee424e685

    SHA1

    b5d6460a6b8f5ee62467b7da38a702ec64a49ed9

    SHA256

    957619ce72832b45bba7fd7f9d7801099b61494c9760c7dd1bfc6c3c06c40cef

    SHA512

    9a01f534ed4616045f6acd5f1746dc2f0d9bd2204a0a94f969948c1b5029d962b660244e641ea0d0aa3d11f1a1d387e285ba4c7d1520ccce0c5759df1654a2c4

  • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\folder.gif

    Filesize

    914B

    MD5

    9ad2610cbcda12f8a4be899c460bd480

    SHA1

    765713e032c809b771264fe0fc69d2dce312ece0

    SHA256

    f1e7f18cabd118e86c91e1602f0ed9e44bd7aa79895b201b861c189d9ee8de22

    SHA512

    28b5bf10215f9785012f44a27b6967594598bd0b339aff6e7b77c045de8929147318fb020cba70a424195736dca0f3dfaef23db7b2dc337e03ab18616772d6e9

  • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif

    Filesize

    90B

    MD5

    bd5479ca56236816abae5b2f2103fd69

    SHA1

    ab2b0cdb45068d48aea9cb825a10e27f2b52f236

    SHA256

    f6d97cbbde510c9ced3857a7e5758d047f537caab8fb87223f3d4ae15aafec14

    SHA512

    08a4ebfd4c7e0ff27798379683542bf7a478d004beda2038f6eda8f508dd025d92d27e7507e803ad5f4ac3844516c1e027870423afea239d5b657656fcaafcbe

  • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif

    Filesize

    90B

    MD5

    2b471350e0c8e1ebca3919fd8709de76

    SHA1

    686bab43bbc770b7b5c672e24f145f4840a71800

    SHA256

    fe625d5a377774ec508d73f922baa170b790d896967e22571fc71a499f0f1f93

    SHA512

    995ea712840f970461adb86667abe0eec2d41c0fb5a8e4940d9e1acf5d34c79ba43785574fd4de6e97611828fd22d8819e0a787cffcd8524bb8ba096b06464b7

  • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif

    Filesize

    328B

    MD5

    67f21661f3c003c8042030a5796c6a72

    SHA1

    3ca1d9d2932b5bff0141b392f40916a84e9af5fe

    SHA256

    d814c407ff5eabe3e86f5114c15f33af792f3a7d02efc1b0d98ff5371428f2b6

    SHA512

    0d6f3d920ae8850fe0b35f143223ef015384662b3b02fdf1776d4034877c7b022d18fd787df8bc41dff81e74a6c1018bf46373db7419302ca546f0e997dd0764

  • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\help.jpg

    Filesize

    1KB

    MD5

    f28044342d2a7a7e7b2ce0d268d3c1c4

    SHA1

    87c2cb681fe78b499921a4f8125785d2b74160e3

    SHA256

    37d36034b7de5ad69fe4f138ebfbe6a6ae7fb0c88c1d5a5e080e3a9516f79933

    SHA512

    9278ace4e727270d32d733346f5f8ad6559ac15bcce4aca5133de79707ba4c597c7f9b0be0b586afa2361933fdff2410f9350c8e9be1b62d5045c31d0f0107b7

  • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\image1.gif

    Filesize

    162B

    MD5

    ca8c3905ce4da7acb7d29ae7ce299203

    SHA1

    1acc896d80af853f05d90df651df2bd0c02b324e

    SHA256

    27654fe8cdc9e99af8b9d7e5d596edb00f94d3c03175616a71dad9fc1d5228a7

    SHA512

    653c5317030eb4ea603c87ac316d87f4aa351f86ad63bb976277a1b13aafd9ccc05b98869132f7a82442475f09443b9c2204bbb0c219e1cee18a9cbbddab97dc

  • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\image2.gif

    Filesize

    586B

    MD5

    d506ed924369b1e94a9338e1691d7fbb

    SHA1

    a9b31479d9af13ff541dea951c7e5095e9cf6446

    SHA256

    c9e0899ed67cfa3aee05a5b6b4a9e14ad7b250236a67bbd32a5d416c15107401

    SHA512

    1f3e664b77d11a2002283b6768c448afcb4fc4fd090e3c1460a9dda95ce774e02d8cff20584bdcd7b72985f772b9f40b8a8b995ef170c512dbaf810620693847

  • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\requiredBang.gif

    Filesize

    124B

    MD5

    e0f81d9d68bc91ef9e53eb5286ee8d9f

    SHA1

    d528335b19d51a63e841055f1bf07aa837b5f4ae

    SHA256

    a90660c54cdd2b61863d07cc9889e53715e5da9550b5792d34fb85b7828d4831

    SHA512

    a6c0dd6241ba122074821b51444cacc902ed13d86d4060424783ef74da187a7807bdb8d22ceab02ef29768b38b83b0fdd2b8a7009ff6c6b08d6d13b2390566c2

  • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg

    Filesize

    8KB

    MD5

    5c304ab65f76b26a2047acd1fb66ad3f

    SHA1

    a211c1c759304a0245f3b428131d2c8689f5eb13

    SHA256

    3f83ed8f94f4953e22eca8314e8c14870b051d14b049ee67206c91e707d31f25

    SHA512

    347fec9b30d43d3e27dd2d5dbf2ae84f601b9cf00bec6c7f8e9cf9019d5712a2c1b5dd6daca6903f045720e3b0b4b856c4d0a3d51a665980d3bd686f5b0fd644

  • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\yellowCORNER.gif

    Filesize

    880B

    MD5

    e680e4d57e8da900a75b726bfef0accf

    SHA1

    9a4322d171c8b5d28b7c09aadc82b1449b20ea83

    SHA256

    99e84d16c1cd3592903531d5fd6a9b4827b104b616b7230c98868b1ea500b691

    SHA512

    f808746b33bfbab57231ca1c8ff28b63e67267d3a365c9f9f4b6fd91c96bc6be2e14d815ca1610ab05b00e9a3be5983b7ec4a09ff876d72adbf0d17b2045dd37