Analysis
-
max time kernel
93s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
17-12-2024 22:09
Behavioral task
behavioral1
Sample
f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe
-
Size
12KB
-
MD5
f90a0aae265f74ea42677b6185b255a6
-
SHA1
bbc8f6c1ae9e582f4cc1468098a2310e3081d8a1
-
SHA256
383a88780f156eb415ff62d4a3358ccb03a7176749a4322cfbd08efa6aa01d1e
-
SHA512
2d6eb959bc124a007b84c3ee3d817cfe69b1519b198c016a7fc619451130de7213502492938448b1556371de0478bd4efec070703d4d6ad462e9beb91171f481
-
SSDEEP
192:e/TrG62a6B10k3g4fXk1iTV3HGc7EkpAqEjvu2q9C/YpXnAITZfPtRMrF/9:eebFNw4Pk1itKkpAjjI2YpdmrD
Malware Config
Signatures
-
Renames multiple (6312) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops file in Drivers directory 9 IoCs
description ioc Process File created C:\Windows\SysWOW64\drivers\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\drivers\gmreadme.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe -
Manipulates Digital Signatures 2 IoCs
Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.
description ioc Process File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\pwrshsip.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\wintrust.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe -
Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe -
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Alcmeter = "C:\\Users\\Admin\\AppData\\Local\\Temp\\q7YTNmTmY37Q8Dx.exe" f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe -
Drops file in System32 directory 64 IoCs
description ioc Process File opened for modification C:\Windows\SysWOW64\opencl.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\SpatializerApo.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\keyiso.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\loghours.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\propsys.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.ClientProgrammability.Eventing.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\winrs.exe f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\multiprt.inf_amd64_a9b96d6c7813082a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\System32\DriverStore\FileRepository\uicciso.inf_amd64_32023cb966fd5c8c\uicciso.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\kbdgeome.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\Windows.Internal.Graphics.Display.DisplayColorManagement.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\SysWOW64\Configuration\BaseRegistration\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\downlevel\api-ms-win-crt-runtime-l1-1-0.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\KBDBULG.DLL f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\PhoneutilRes.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\twext.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\Dism\es\Microsoft.Dism.Powershell.Resources.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\aspnet_counters.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\clb.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\downlevel\api-ms-win-crt-filesystem-l1-1-0.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\c_61883.inf_amd64_2c1769df23d261a5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\dsprop.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\GdiPlus.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\KBDMLT47.DLL f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\resmon.exe f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\SysWOW64\Com\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\downlevel\api-ms-win-core-libraryloader-l1-1-1.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\upnpcont.exe f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\Windows.Networking.HostName.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\kbdnecnt.DLL f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\mbussdapi.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\mfcm110u.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\msrepl40.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\rasgcw.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\SysWOW64\Speech\Common\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\cscobj.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\dplayx.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\uxtheme.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\Windows.Devices.AllJoyn.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\shpafact.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\Windows.System.SystemManagement.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_GroupResource\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\net7400-x64-n650.inf_amd64_557ce3b37c3e0e3b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\duser.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\SysWOW64\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\MicrosoftAccountTokenProvider.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\KBDLAO.DLL f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\KBDLV1.DLL f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\wbem\en\Microsoft.AppV.AppVClientWmi.resources.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WaitForAny\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\ufxchipidea.inf_amd64_1c78775fffab6a0a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\InstallShield\setupdir\0008\_setup.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\wsynth3dvsc.inf_amd64_1a08a3b6cd493e1f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\MSAMRNBEncoder.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\SysWOW64\MUI\040C\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\oledlg.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\UserDataLanguageUtil.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\dmscript.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\ts_generic.inf_amd64_b6cb67052996a0bf\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\MsDtc\fr\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\pwrshsip.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\ChatApis.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\psr.exe f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\fdBth.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\contrast-white\SplashScreen.scale-200_contrast-white.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxMailAppList.targetsize-64.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.WorkflowServices.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.1903.1152.0_x64__8wekyb3d8bbwe\System.ServiceModel.Duplex.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.People_10.1902.633.0_neutral_split.scale-125_8wekyb3d8bbwe\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\sl-si\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2018.826.98.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraAppList.contrast-black_targetsize-96.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Place\LTR\contrast-white\WideTile.scale-100.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Program Files\VideoLAN\VLC\lua\http\requests\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\Spacer\8px.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.20875.0_x64__8wekyb3d8bbwe\Assets\contrast-white\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Resources.Reader.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\stdole.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\hprof.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Program Files\VideoLAN\VLC\locale\be\LC_MESSAGES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteNotebookSmallTile.scale-100.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\8041_32x32x32.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Threading.Channels.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.1903.1152.0_x64__8wekyb3d8bbwe\System.Runtime.InteropServices.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\LinkedInboxBadge.scale-150.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small2x.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\api-ms-win-core-processthreads-l1-1-0.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\ReactAssets\assets\RNApp\app\uwp\images\import_google_contacts\googleProfileAvatars.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Assets\SplashScreen.scale-125.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\OutlookMailLargeTile.scale-200.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\libsmartscreen.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Program Files\Common Files\microsoft shared\ink\ru-RU\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\WATERMAR\PREVIEW.GIF f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Assets\Square44x44Logo.targetsize-40.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.contrast-white_targetsize-20.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\EmptyView-Dark.scale-125.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_1.1911.21713.0_x64__8wekyb3d8bbwe\clrcompression.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_neutral_split.scale-200_8wekyb3d8bbwe\Win10\MicrosoftSolitaireSmallTile.scale-200.jpg f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\plugin2\msvcp140.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_x64__8wekyb3d8bbwe\clrcompression.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.1903.1152.0_x64__8wekyb3d8bbwe\System.Reflection.TypeExtensions.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Logos\FileAssociation\FileAssociation.targetsize-24.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\MapsAppList.targetsize-48.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsStore_11910.1002.513.0_neutral_~_8wekyb3d8bbwe\AppxMetadata\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\de\UIAutomationProvider.resources.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\SLATE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogoSmall.contrast-black_scale-100.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\de-de\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsSoundRecorder_10.1906.1972.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\VoiceRecorderLargeTile.contrast-white_scale-200.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\View3D.ResourceResolver.exe f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNoteAppList.targetsize-16.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteSmallTile.scale-400.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxCalendarSplashLogo.scale-400.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxApp_48.49.31001.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubAppList.targetsize-36_contrast-high.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\de\System.Xaml.resources.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\NewComment.White.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\contrast-white\StoreLogo.scale-400_contrast-white.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MUOPTIN.DLL f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\LinkedInboxBadge.scale-100.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\check_2x.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\images\rhp_world_icon.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\plugin2\msvcp140.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Logos\SplashScreen\PaintSplashScreen.scale-125.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Program Files\VideoLAN\VLC\locale\ps\LC_MESSAGES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SmallTile.scale-125_contrast-black.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win8-scrollbar\themes\dark\arrow-down.gif f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.IO.FileSystem.AccessControl.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File opened for modification C:\Windows\WinSxS\wow64_microsoft-windows-i..l-keyboard-00060408_31bf3856ad364e35_10.0.19041.1_none_7d582698e55dd107\KBDHEPT.DLL f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-network-qos-pacer_31bf3856ad364e35_10.0.19041.546_none_d55698a60aca383c\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-b..onment-core-tcbboot_31bf3856ad364e35_10.0.19041.264_none_de5e254ba7caf399\tcblaunch.exe f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_netfx-fusion_dll_b03f5f7f11d50a3a_10.0.19041.1_none_7c0cca85871e285c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_networking-mpssvc-svc_31bf3856ad364e35_10.0.19041.1288_none_0edbe2027d0c79b2\wfapigp.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\wow64_microsoft-windows-edition-transmogrifier_31bf3856ad364e35_10.0.19041.1_none_d5d68ad50eecacb7\TransmogProvider.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\wow64_microsoft-windows-n.._service_runtimeapi_31bf3856ad364e35_10.0.19041.1_none_4bdab7153499f84c\iashlpr.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\wow64_microsoft-windows-s..ty-cng-keyisolation_31bf3856ad364e35_10.0.19041.388_none_ac614ad689688c59\f\keyiso.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\x86_microsoft-windows-d..ment-core.resources_31bf3856ad364e35_10.0.19041.1_es-es_6b8f824ea862ec0f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-directx-warp10_31bf3856ad364e35_10.0.19041.546_none_c85ceae4b57ba8f8\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-s..tryspecific-license_31bf3856ad364e35_10.0.19041.1266_none_caff3ce2871d8077\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-settingsync-onedrive_31bf3856ad364e35_10.0.19041.1202_none_440d633ef683c8bb\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-t..tivexcore.resources_31bf3856ad364e35_10.0.19041.1_de-de_8b1692ee6b5e9037\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\x86_microsoft-windows-ie-imagesupport_31bf3856ad364e35_11.0.19041.746_none_03878c0fc2f4e725\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-e..mmandline.resources_31bf3856ad364e35_10.0.19041.1_it-it_7735202760c7024b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-i..ntrolpanel.appxmain_31bf3856ad364e35_10.0.19041.1_none_d0af17ec366548f3\logo.scale-400_altform-unplated.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\msil_aspnet_compiler.resources_b03f5f7f11d50a3a_10.0.19041.1_es-es_04c8a15d4da2e0c5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-windowscodec_31bf3856ad364e35_10.0.19041.1151_none_15a676dc8aa880b2\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Assets\Logo.scale-100.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-c..tem-tracedatahelper_31bf3856ad364e35_10.0.19041.1151_none_69db5af0c09c2a3a\tdh.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-p..riencehost.appxmain_31bf3856ad364e35_10.0.19041.423_none_bfcb7b02f95b1e52\PeopleLogo.targetsize-16_altform-unplated_contrast-black.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-refs.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_0b42ed22ae518b2b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-shmig.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_6ef28275988589bb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-lxss-wslconfig_31bf3856ad364e35_10.0.19041.1151_none_15ecde7059d11b7f\r\wslconfig.exe f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mmc-adm_31bf3856ad364e35_10.0.19041.1_none_83672e31a304544f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-ie-f12app_31bf3856ad364e35_11.0.19041.746_none_9058677ca855be17\F12App.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-n..quickstart.appxmain_31bf3856ad364e35_10.0.19041.1_none_4a388618f6365227\NarratorUWPSquare150x150Logo.scale-200_contrast-black.png f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\msil_microsoft.powershell.consolehost_31bf3856ad364e35_10.0.19041.1_none_918b5ffbb80d5549\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.Design.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\fr-FR\assets\ErrorPages\proxyerror.htm f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_e8440c09eef3f557\Microsoft.Build.Engine.resources.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_rdpbus.inf.resources_31bf3856ad364e35_10.0.19041.1_de-de_42db941674d1cf7f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\Microsoft.NET\Framework64\v3.5\fr\DataSvcUtil.resources.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-c..riencehost.appxmain_31bf3856ad364e35_10.0.19041.117_none_e0d32848ac56114e\oobeFooterHost.html f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-unp_31bf3856ad364e35_10.0.19041.1266_none_21c0be7c0dad3632\f\UpdateNotificationHelpers.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\msil_microsoft.jscript.resources_b03f5f7f11d50a3a_10.0.19041.1_ja-jp_e0cd30b56cf39778\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-d..iders-ibs.resources_31bf3856ad364e35_10.0.19041.1_en-us_c76a98258e1e35af\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-icm-dccw.resources_31bf3856ad364e35_10.0.19041.1_de-de_d1e1553ecc6e465c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-store-install-service_31bf3856ad364e35_10.0.19041.264_none_bbf6778fd839dded\r\InstallServiceTasks.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-security-lsatrustlet_31bf3856ad364e35_10.0.19041.1288_none_5961108733e967c9\f\iumcrypt.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-u..erservice.resources_31bf3856ad364e35_10.0.19041.1_es-es_a683e1193158f571\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_netrtwlanu.inf.resources_31bf3856ad364e35_10.0.19041.1_es-es_1c293bbaaa74edeb\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-directwrite-fontcache_31bf3856ad364e35_10.0.19041.1288_none_7971b4d5c67ef135\f\FntCache.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-provisioning-core_31bf3856ad364e35_10.0.19041.153_none_95ba73d08e5f739c\r\ProvPluginEng.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_megasr.inf.resources_31bf3856ad364e35_10.0.19041.1_it-it_51461b092b41ee84\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_hyperv-vpci-rootporterr_31bf3856ad364e35_10.0.19041.1_none_1bb8e159224f066a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..in.deploy.resources_31bf3856ad364e35_10.0.19041.1_es-es_5832288660a738a2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..xperience.resources_31bf3856ad364e35_10.0.19041.1_it-it_ad29843c44640420\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-m..namespace-downlevel_31bf3856ad364e35_10.0.19041.1_none_7d55e8342077d456\api-ms-win-core-io-l1-1-1.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-pnpibs_31bf3856ad364e35_10.0.19041.1_none_f7eb89e70b4eadb3\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.ScheduledJob\v4.0_3.0.0.0__31bf3856ad364e35\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..mentation.resources_31bf3856ad364e35_11.0.19041.1_it-it_8eddfc8b2e0b842c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-shell32_31bf3856ad364e35_10.0.19041.1266_none_e0eefe63c72d43e8\r\shell32.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-t..es-licensing-srvlic_31bf3856ad364e35_10.0.19041.153_none_1eca1cc1925dc676\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-e..orage-adm.resources_31bf3856ad364e35_10.0.19041.1_en-us_f2ac8e6fa2e6513a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-heatcore_31bf3856ad364e35_10.0.19041.746_none_c56105f0f16631ba\r\HeatCore.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-w..mcore-dll.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_3a8868c8f0935eb1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File created C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\msil_system.web.resources_b03f5f7f11d50a3a_10.0.19041.1_ja-jp_2391b300c01469c6\System.Web.Resources.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\wow64_windowssearchengine_31bf3856ad364e35_7.0.19041.264_none_9627a04e40f9f001\f\tquery.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-onecore-cdp-winrt_31bf3856ad364e35_10.0.19041.1081_none_d88ab1b1a8b1b0d6\r\cdprt.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_wpf-uiautomationtypes_31bf3856ad364e35_10.0.19041.1_none_13032ef13a4e12ec\UIAutomationTypes.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-dfsui_31bf3856ad364e35_10.0.19041.1_none_0fb1102a9c606306\DfsShlEx.dll f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe -
Modifies registry class 10 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\ERZEPWUZDMPECCB\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\q7YTNmTmY37Q8Dx.exe,0" f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\ERZEPWUZDMPECCB\shell\open\command f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\ERZEPWUZDMPECCB\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\q7YTNmTmY37Q8Dx.exe" f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\ERZEPWUZDMPECCB\ = "CRYPTED!" f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.vzlom\ = "ERZEPWUZDMPECCB" f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\ERZEPWUZDMPECCB f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\ERZEPWUZDMPECCB\DefaultIcon f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\ERZEPWUZDMPECCB\shell f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\ERZEPWUZDMPECCB\shell\open f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.vzlom f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f90a0aae265f74ea42677b6185b255a6_JaffaCakes118.exe"1⤵
- Drops file in Drivers directory
- Manipulates Digital Signatures
- Drops startup file
- Adds Run key to start application
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:4316
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png
Filesize50KB
MD52a5aea1a9a7b6f94d9d7c42c03215cf4
SHA18561571930164b5b772202f0b9c7d9c4ad5842e2
SHA2569698cab8e849d7388aad5fa623518c3a94acf44cfb218d2af84fcf8c0ceca811
SHA5129ab83addba0b8b27a0873984217f2868ea30885cd3d48b488b3a08b4442d53e9fd7dd2c221886fe2140d953369eaab1893bcafd52b7038e14342ebb9bae8ab53
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png
Filesize1KB
MD51d36837ae395780351e16a215e08cce4
SHA12a0cb3c7b27f8a31dff0ef92322763e3767ba07d
SHA256c9d05bd09c541d714a6aaabd6fe193fcebcdc644ef9ed375ede7d7ac14eac197
SHA51204c22fcd6ed9994c96ced489b65a8c87df58bd2ab65b86264ff495b74ace64d9a1e653c47e459dbb60ed89f3a1e9ef6882c5bb0130cef8f80ff5bab60dfef901
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png
Filesize3KB
MD5e7383c6febedfe5976fad696c4acb604
SHA17694d910b733e245a3b30847331939df2ace2c2e
SHA25664494d7d9227d6c2a9e7c6495b4cb3fc965bba007565a8b016d12ef1dad7419e
SHA512131bf9a0ce1c875889b34df226ed950698dfd0147ef2cb2b6c3b13b9e4a5799e82102ef492876b23e0708c8f46ba7f3e668b084129475f41d3619f62d598897d
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png
Filesize683B
MD52da6001b809264a986fa13344fe3237f
SHA1832d5b5e7d2f57f67f2bab52085901c1770ece81
SHA256ada4ea13a1cb60db65432391d7f4509eb7921340ed29554738a60fffd69d7a1e
SHA512ebf6e68c0ac7aacd93ebce354cff252bdbc4b2b64e6e1279f99abb9e1d8918bd24f14de3f30b8651fe4e1ad4f7144ca58f609ff852c0dc760732a2c81c2459e0
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png
Filesize1KB
MD5ed8dec8e4074bc283911b6b335e72b9e
SHA1c15899ee9e1783d0fb251b52958a3a0744c779da
SHA2569b6be84cf27296751a258154095c2b2a7cf2736d174786887a4c47acbfa63db9
SHA51277f289fd37eba4957598831ec68778c5d67a220b511ec104907ce5601a72397339ec0fae8a44abe3009a97d20e66008d2173c140aea3332a004a4626972bf8f9
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png
Filesize445B
MD55c2f56f614f0f8a6977d9e4dc528b413
SHA129b5f904a021c287ba040a6405c25a4cec6ab86a
SHA2560228090eb95ddc06e6a06fb23e5dcd378d3adb7716d6969b765245a3977a6fe4
SHA512f5068d371bedf40df4fd50f572c415684b03276750cf097d137a7f8f0df2e39e13d77e8d015279048b72c1b093a82c8cfa3a630e9771cf26d5743e673ce5c442
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png
Filesize611B
MD51006a78708d5f2b848b7dc467f3618fa
SHA1651b0aeb13d9b4e1431e72f98008d24cda142ae0
SHA25631e3ae74224b47709d82dcaf3e40e66dd34f2b1581800aa449b8929833194361
SHA512414e64be83e229f15c8335e8e40e31a4f0e048eec317f570f3c9aaf8dc06123682b7417a7c77b120ffc4f0296018cf361e288e60fbd0788d3be4a9a6aceeaadf
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png
Filesize388B
MD5246386300a18fc1f5e2cd57f78d6cbc9
SHA1916d5c2938bf934f3cfb9bf01c1970731ba5ffdc
SHA25662e3645cca6c6eefa7da07aa2dd270f24ce0a4fcd5a6adf67f4e98c58a4248f4
SHA512702e53b7885c87c60117b9a0ca17aa34dfa6832d4fe73e0f7bb4f7c98695389945ae492ced03069ecdc68db752369aa19d41f8dba224903edb258278eaefd3f5
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png
Filesize552B
MD5e261d3c5f66e61d49fea621a46b87dd9
SHA1f2de68443221b6840d1a1955fbc8fa9943662229
SHA256c7243aa7803cedc72402eb991cd54d97d08fd4a80494ae22aae9b987a76c0893
SHA512321ddb5b850b038f97fb44fef1c44fa967f240e7337aa03bc163d2e980d1948290eaf831d2dce7e3a0c937f24b2aee77f765804abdb0960608aa314a6f870836
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png
Filesize388B
MD510237d9d5729fb91b855e4ff10c781bf
SHA14f79f553787bb532c68fb6d98b6fedcec6f2df66
SHA256e2da90f7fdc326f9f4093517368d30c07b55bb71edf6ed7cc355a8cd62132f89
SHA512d6acde838107d58b2f6930c578683b672e2439e1682c55332ee398d34b0380367abd492b7231ebcf938772a04a6aa3a53d9269c242baa60158bd92a9d3d01c46
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png
Filesize552B
MD588475e3d411859e2ac7b46b869471e7f
SHA15e844d526b0fee96d250967a8781844d16c38e71
SHA256cf5d8758b898f16d71657b006328097807a6d5818e0d786d9ce3055c662a96f9
SHA512dd73367808a8c41d0fcdf86096e9a0d89983408f28d6b6d406de210abd9ea54f0435b16bfe639ff8662b013317154c257ead5ae585613b42f70d7ffb8e85f318
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png
Filesize388B
MD591e7045bb5b57b3272ef70b84b530cf2
SHA1501597beb5fcb79b65306d51969bb73e39c755b0
SHA256627c6de0abb1ace0d08eb7083a21bf98f92c48f46c35a141dca02ba6c82b4352
SHA5124ec7b1d5d71987f3896f6285106bd4bca590428c910d9846ee815d8e13ace9eeeddd0fdfe943eb2a6d60990dd4b44863e45d108dc2ca258e1fc3f35f6a1689a1
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png
Filesize552B
MD53c69ced26283b6bd8828c96393d0eb6d
SHA10157fbdc72daf3689acbb32a0abb593c52fdf3ef
SHA2566c81898e03bad8e6c6d8215588e875bdfcdb24af48f2ddf8221d04401eb15116
SHA512c254dd7158aee931031fcc53aacd2d3c2ddaa35986decfebfb20bca4310d1471228ed5271362c7cafdaafc6bf29ced79789afd3618802f1ab98d28b237cfb767
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png
Filesize7KB
MD5e9fca5e1c453a444f8f2a664e438eabf
SHA16d47a62f043078309514b18e4da0f774c7fa3295
SHA256c6f0b99b9ee12f51003f9e05915ebb86e7b050b7a846f1c4bc8cf973203647de
SHA51211e2e6354e47aa07fcf0f7c60437cad74a7f3a9835c5643a056741cc0f79db972925e7e5c5902da220c482b9f47e7757265dfbd440c811ef6849a11b21fa1e8b
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif
Filesize7KB
MD5963ba62f0c4dc8adf95dde18e6ec1a42
SHA180174ae2542f1c53e39f9043293d2c14ce87baef
SHA256d166bef4c8409638288aa6f7a9c3d724d7c57f1922f36d9a77963185a878fed4
SHA51245af904b2a5ed3617f86911cca2d2358382a9279571189ca64f9499f0da536f4348ec6a65c8466e3f704f3f2acf98837c6750b6f371a89cb4fcd7b008a6cbd79
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png
Filesize15KB
MD58d946bb5db6ab74c9bda9a541ea3d261
SHA10d302d8f8a1236da74ae850c3d4df52f395158ac
SHA25603b35fc6b4b6557872c873def94c23a8fd2e7241f2cc36caa52a1a1fb77907e6
SHA5124b1271755bf8e768e08b137380ff1623f482b86d4ef352ffac689e73310f900d52f392071c90b174fd6cf3aaebf2f23542fbf7631b019b8f9a85c574a1814550
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png
Filesize8KB
MD5c7c096fbeaa25fbccd5f421d7add2d4a
SHA1c2872f078f72a8bddf0ba59ac55fce91e51318ec
SHA2569c0be9276ef2c5e93d21b975ff1af28db32183bf82edd3dcc43b6ea9c57a51b3
SHA512a9ace77cd3cc252eb66c8a2e777555ee0dad9bebf9f9681d962bba668090d3daf9d0873502c03e9dcedff4ce0a253ff35aa8a22dd6207602ec6059272bd3cb84
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png
Filesize17KB
MD59591b2b3f483fff6cb0c307e2108d6a9
SHA1647042dd395d644b8097468dde2e336353242267
SHA2566e9ab14c38cc4504f6185f0e4d87512346e54a698135d70ed3977ed9442b996a
SHA51229e6b26566a765c71483e03bb06c165f4c730755ed42e2f9315fb8eac2667357d96c85d02c9880b6eb045d87ac5742cab929efc34c45672a4e418c40f5f68e10
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png
Filesize179B
MD5319ebd3b15fdb8711c4170994279b11e
SHA190b097a1490a74bd2189cfd1f6ebf7793402969a
SHA2569519d72cbef63084eaca8ad2349a86b41232853c7626c94a1438798a8cdda36a
SHA512eae3681fe93bb1304d8480f62b238d5cfbc1d89d30e1bd29e989ec38283947b7fd057ef186d1f5374bdac8ef83f5343e13af204d516d777516741a5da9a38559
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png
Filesize703B
MD5285d664d53d5668e042d58a0a70fb32f
SHA197ded61db8c1120874c4c8f2fdc175f5051ec77f
SHA256c150588f76769b05f507c355ec420d5bd3c9af9d072eafee309486450428fb17
SHA512d49250bd28557e839e73e3e79e00bbebf7f2f34ef91adc9f40f7eee4d5b57db679918be11a9a7adf3279d16266ce01293e9ad24b1d851b6388dac590f0241e52
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png
Filesize8KB
MD5def0baf5b5017c308cc9e6c3b52d10bb
SHA113e2c2c7c8853f02413af463a5d9c01af4cb1ba3
SHA2562d3b680af30a640bea356cf54f48ca4d3617a83290b6d99649df6e787afa203d
SHA512e182ff828588a06070fef1cfbe583763db64824ec1b0684640d1a95d0dd4f0a68d19549fee026850b319b929e148a70b3b565b501a6f9c967b72113dd969d2ec
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png
Filesize19KB
MD534f9afae3aec813a795b4d6bbb4386c6
SHA175a1947ddd8676759555ad3494cec8802c6838c6
SHA256547cc2329f4a9c5991beb5bf1c0e6aed70e00fde4a6507511771f36e64bb4ac4
SHA5125a66fd5a9b9a9d67273d03a1e6a563cd1a2b5876f296ed3e89e160f2db3f6aae7ed25bc2cded39c8a16ea284b79cce5712e4ec71996e36c930259549805adf3a
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png
Filesize6KB
MD52721bd7a51a90355feb75f6cbedaf81f
SHA11af2ca1bbf17041486d856613dc9e0a6f96d0f66
SHA256759bd49822571eab8a76a795502a9ff17e9bfb7d446fb8236562aa2a5735879f
SHA51238969c5e4b694954a7c936b344ba3ae75b00273bc0db42daa8dc83c1a4f1d6fd4587550db03bdb937ee753e8eccb0fcc183431b46f9f66cb8242ea62c1ce7d9f
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png
Filesize2KB
MD540ddf41fd292282429539aaaeda6a3dc
SHA108d981db6ccfa62a558abd1eed44162111a83d7d
SHA2568b1f431964cc1749415e0ab939afde90b29ba9981a1aa9e2e708b1d1e45039ce
SHA5124743679a7eaa07843159f1eb39e8491c11c49754ceab2f3f894252f4fa82ca17ae1d157a6c350f0736570a4023e765741a709806d5562d602f812237f99c37db
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png
Filesize2KB
MD54dde9062af71f4c54e6c253d294c081e
SHA1e9d121f644e149b7094eaf02fe9a855a2afd3541
SHA256e81ee9a45eaec7ecf8b7e7fb6718791d29503cb50fbbc12105c63fa9fe63d593
SHA51233c98774db6c114f7f7f13a75be380ff2d92b87649f586a7b74e5df076d488eca602b61326251fb5ff20b1679bc3682506e9de819d823d2f2240c9b7c36cce0d
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png
Filesize4KB
MD5f23b0fddc15f5f94b3457a3e40c0c625
SHA1d837558bf4c954c4747cef076930b36071734bdd
SHA256db58feb646fbbb3f310ffef07f93e1a520eec8d1687e17ed5c4a44dbd230eb77
SHA512f00da4dc4bb7950fa5b8e616389c350ba88d022f4888554c80e51fd7014e96ae97ae4c809e80cac49a8ac9bf77aa656f5e1dad765a4132034deb6eff0c6a0fa0
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png
Filesize289B
MD54bfb9fbd0c533ae6d5e625bcae9ae7ca
SHA11f1107cd30423efbb05e3ada0fd7e75ab14e3369
SHA2568fb411c63473b48dd9dcc564fcd6d9ea213fb43da38cffb0e748e7749d758e09
SHA51249a3a283727a2c94b48033c19e848b2a984834d30f2a3eeb7fe4677e8f19ac9829b23ebca80b9226017c4142816840876987c4feb54077d2d4d5611c31493b4a
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png
Filesize385B
MD585df0fa2439f411b3e1fc2a66b102d01
SHA179510f80a3a175052c8cdfb1be467a01e338195f
SHA256e2e5ba3777b4cd5b1420f148268cab76e3d8a0a3c826758793011dae7b79101c
SHA512baf343da12855ba2a1ac627ae73f0937558d0cd59c31781467101fdbabec7e7308a36401baf67207c2027856c6733ba41c1f4926509d8bd7ea43ce82fcbcc054
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png
Filesize4KB
MD5b1b33f2554fd11090fe6b40d5ec967a1
SHA19e26ea03440a6bedee2da7feaab897c9892cfc59
SHA256589ba4be4c9a5e32e430bb8296ea64d9ea501f6ae366aedbea6d8b3149ff322f
SHA512aa46d7ba18606afa6f6fd95a3b409b32274eccc91630df927b52d3df4b7b33e1781348c3ba579000f3bbbca0e38fd5761a7352f7c12ea551b7d70ebda8c5b9cb
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png
Filesize1003B
MD5893025a69cc6016f8e80e73ae4bc451b
SHA18b46ef5be00ba3eebf6f31f84f70ce96b9bf4a1c
SHA256b252c9b91de6a30ae023ae027ed41283f989649ed3cbb12415cb13f70fae2361
SHA512ed62499334adf0e5805b3b966795b005770b94d5fe7917ec824d01ab94cdae400d2175846771403993d863411842d8ab4e271297232f2560210c48d57f93af35
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png
Filesize1KB
MD5bed80a1e1bb47b38ab95be415b1e45a0
SHA12ab84588a9e35ee94fd3d1fa05a9d8f46dba2ab1
SHA256aade2a7f36b7c7d45dbb2e82b3448a74722c15b903da2cd651452eb1e11fa9c6
SHA5128de8c8a12edb8e39b2d04ebd13b40e957a5428037cc3792f974158d990795bdc28517c618f902748710c312c899d0e00cbece7d4d3d0583e8090ee3db2e2918a
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png
Filesize2KB
MD568b187500a2a087121cab7962bec048b
SHA1164d5a962356bb252d8d1f8625acf6d6499eebfc
SHA2563100b63de865edb413ed7ae5accf9adb222642068e2a6a1ff9b7573f1bfc35e4
SHA5122d23893acb1e1b14144cff76a017b5e0597139ea06c5452a468a9c61d0cb775bfe8a467d6f6142b06fbc9838d52d62732c641eed395008846d2b78663013620f
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png
Filesize3KB
MD5e5d8d7e207142b0075e7a13ba4677398
SHA188c68df936e52c746a632bb17eca1794045bd3d3
SHA256c39292709ffd26f511d1a5de1cd874ef3a14d37413d3e55784e147824fedad04
SHA51282d7c5999f1bab2f691053d00acffec159e0c6749616ad58fe25254c4066cd56b0cda4b052df8a18635cb4e215a1c8a3bd5d31d48477795239511c2c08297686
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif
Filesize556B
MD55d9760126dd8dab0f042eba818396c25
SHA1380c2b5ab02b3ee2e60e3da217cafdee6fe5db01
SHA256f188a30d9d3e141561edc50b323e54321f41fc686779b390095b2a0d7bba4358
SHA5126c222e72720edf684558562bb5f50a5bf37e9cd251c1b13d631628a39bf8df9861d227e026d274631a9b88c03f4b3b213c16af8b555480d438876f6a2a4be34e
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png
Filesize6KB
MD5d2fb8cb1ca94b0ccf8b7a980cccbe000
SHA1601cefaf5da8c29f395a40e8d6320f56fcb1a354
SHA25683de779f092a902e483ec26d7aefd7d9e41310f7b7e727836525bf55aa60c223
SHA512738a470207327c86f5d86b832e2d7d47364f6daa2410d20508af21c428d1b8f1a498d9794164c33c47899ab11fa13216f566f5792acb999d4afabfd8848b2f7b
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png
Filesize826B
MD56779e910b3850ac3867a84db312f9bc1
SHA1342c6586ae5a9d5018dd3849a090ae0e04a78cd6
SHA25649c082745cbf95916e54f8ddb7f82eafa7d84715f41bd34aa96e11aa9e7300f7
SHA51245177a9d413553898f4a3e67102fc0604083764cfaa3a9ebe48a2c8a3b7c38a1fd57763a4b120ffd9b0985dc88bda36f8db39d8aa4274fceabf64633382e3c15
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png
Filesize1KB
MD51345c3334c2fc68ab239117ac0746837
SHA10ccf9b5512aeb58d65ce4c52cd01875bca450161
SHA256a4139bf972188593460c2e34aa5d6c7c0b35741ddeb243d3fc0c878e6b7360a9
SHA5126b2f752aca31261ffe64b1a50c4812dbf3f718a610e095b631f7a45deb87acaab4025663fbf8d7cf2254fde7e26e39d5e15345ae2f2799ebe6d31f159da544cc
-
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt
Filesize32KB
MD57cfa85a7d3857b5f7fc56db83731b341
SHA11eb7de9ac008cb3f57b61cea8bb2e071bc42c59d
SHA2563d7a8beac018d849d0db0a9183aa147351c3479ab2a0146c28e7fd8064d23ae4
SHA5126bc139d5253c65d0e712db82707d45892b12c073f2a72d95639a3ff6c6a442ddd9bc0ed290710741cc816a52825417897506a1763d74a4faa0078b18894666f1
-
Filesize
270B
MD50cd041f14b14f9e61c211e3cd124cf58
SHA1dd30ac530b7e998a562acf27b8278822ea6579ef
SHA25669c9ab35204defd8ecb90bb9280d3ae4df7565e89539e5c7bd2364cbf8880f11
SHA512687aa7f3e6036fc5bc2973698eb7a840fc6d58e6c5b87a733b9c26bb78061344ae74a89832bd39d58dca7f8eb1892c7bc7fe94320a70cb723fba52b273dbe8cf
-
Filesize
558KB
MD5166af2150a3e9a0e387aa3763e73ed9c
SHA1ffdeb377107d6ef0acdfd5c6192f0cd7c255411c
SHA2567f9e075fa50b824db9a22f560394d9e8d7fb888ae94ddebac9618ec601d9f8fe
SHA51285bb2b65a61a4c3a0160349bc4127ae25a9d7b2c53918095ce4fab9392710b62ccf43c77bc4dda5a6704f76e29873d4f5389a4b81a3056477889771a5cf7000f
-
Filesize
95KB
MD510fa11a56f406465536a4e089ec1c8b4
SHA126b6a3c8039f307c62a3bdf73fdf695d54a703a0
SHA256f4c77a43365c716c55890797c54cdc77cddbaa2c5bae2cc1c131aad4c564ba57
SHA51229bad0182687d4abd97d2c6fb36cce87f49f7a5dfa8f44e115525d9739576b53992d2af45d97e84467629bcf66b4b095dadb6d9b0dc1e9a5d2e973b48b74b9d2
-
Filesize
36KB
MD567ae49ca9f32a70050b6cd0993ddd82b
SHA126f419c27750a40f29195684e0db6d85c6e2fa94
SHA256ebbc7894772725ba476e5b02563cb32990a6364cd3d5d7c139a99383300efd61
SHA5125f0e1c59020e21fd4381d8857a8fe21682088bd523442477d120bcfd0a56f2667f162e04b6be3a983997ee2ac416e7d8c928703440e2c8ad50841ab99d520692
-
Filesize
153B
MD5d9a31439da128966aa82ea0607539ec3
SHA19efd7e4b84c05c44515b8d8fcb193f799354a87c
SHA256e5595fae5426376a88c97250fd0792a8ed5c96c0678579b2a008c4984a3512ba
SHA512b01d513ea5af119b809da4670da608e41ce130c7b7f3b06b59bcd7602e7cddae181def75beb133bb0aac4df93863aac29d0444fdc23836caaf2a1b04b66c6ecb
-
Filesize
190B
MD5c24eaef3fceaca88c448f5e2d87e4b1d
SHA160df7f060233e7c01eaaef02cdb98675bc6ac900
SHA2561ae46164c83b3d1a4074f727915fe7ab6f2cfcc79539f195bd6276506201d558
SHA5120cbb03ea5f646184bc1a02d08f2125624c9eee1b7e4189bf5efba1ed320eb6f59457f67fd2dd19a1bbe60ec29cbfc84cc81f43f01c1c4cc7f7bdf9a76282cfdf
-
Filesize
190B
MD57ed5df28a2eb26187e4392e45e803261
SHA112a084ada0dde2b3b8f3046500cea5f8dbe7ede6
SHA25631d19e3ccd6c114c8960a0e4ca6145e4ecf6406651b9e1993320c267503a438d
SHA5123593cca5105ccda3fd62f2ee654dd1774bd4c8ab7195cc7dc6530b16cfbb3a696b8f6ebd30d5ea35e890b51331a3d6e9d7912862903763b45cd51080022af53e
-
Filesize
11KB
MD56f2e399c6a6ea54200ed4e629b4ecdcd
SHA18c5efe33a8238717fb6526ef0bdc71c191645ad9
SHA256f91880f3de9915184de9a6f01051c5d1a5e460454ff264f60d8f087bcbf4dd9f
SHA512474667de625d182249209bb27abc17d768fbf887da2bfae43b1a9f98fc87506d961739533d7b7fccd822badc2b1344197e1f02c2aaa16bc676cd380c0a9cf5b9
-
Filesize
11KB
MD5fdaa58a6adcf7c75107a2a88fbf0a62a
SHA188efd169ab084041d0c9cd8b38569519d01279c4
SHA25617802012f161314438774043e7d1a75f1b3833c12f2837f1f75d49b0667d427b
SHA5125e56ed0bd532cd5ff7559e7c214213917ed8f78de016c8efe2e85b9dd839357bcf2f32332d3b28800bd175ae271e59dac6a092d9ce0ec8527d47b6deff128b6a
-
Filesize
11KB
MD516614e2142fc120dd228863899022991
SHA13aff834abf4484b326bdeb63830964783d68fe38
SHA25658e2ebed9c3bbf1c2c9b448612ecdfe7cf98e13ea7b756d41f36ea3ab6939491
SHA512c448aac67ac7a3d73d76dd9361db7ea1d094ca4f5e9aebcea563618bd03fcd4df164a049b4b2c3d58ee9f5c363f15622d7166dbd9884bd4bdcf915a4e12a63a9
-
Filesize
11KB
MD50401ce2fbc08d104b87dc758c30f23b5
SHA11a4fc4f50091840375fdf9e96637c9b7fa45286e
SHA256fb2393894af321f9f62d769685d082626ef742093e462c46bba3713debcde29f
SHA5125abc397699200f5d59963b0561fc107b1fa6258b26e69ecd22486a21fcfe92cc7c26d83f5fc3ccee8bd149861848ebcee3528f5965f95a7611c916bd2642e15c
-
Filesize
11KB
MD51f565239d7aadd93952560d504f35a5d
SHA1c8b2706f186d8faeaae7ab9b2de97f740947715d
SHA256cb361b9440def21a112089d4e4370a1bf18b2c9cd5a5c4486c326d81a500f6b0
SHA5123e48a56072830478ee62ca9fb003a1ec36c379f91449de08e4a204270aaf3385411eac56031c2a2f8d07881552c143458e25ddc088fcd1c8c41b2e571114abbc
-
Filesize
14KB
MD5f4699373fdd7d04616837d99d9bd1b86
SHA11c7274d935d9c4e3b85715ca05cd869ee3058e1a
SHA256fcd90c2020bdcf61903dccabd68403c1db4851049276e005302ac64ec0259d5a
SHA5125baaf30faca09f480fc602b7f9600398c7a87136ce8df0b3c8a0498e3131da58d11cd3d33e8f37d2e1227a16fdc8f186ec6a9e5591d4c173bd04c4b9238b70c6
-
Filesize
11KB
MD52ec5e6d61dd8f12ed66da1c4618708f7
SHA15451a351ced4e000175ef1c6629feb46d79eb543
SHA256c4118550eb0c71ac119642e86518d3b756e70794f807a47ea4d81225c0bd322e
SHA5125482e3f745ceac3d32be05fc53bb69344ca53eea07b0732c922884911a77fe302826e58d02694197b786062c146ff43a2fef5a339192e3a6a51ca3d892287f06
-
Filesize
11KB
MD568a9d860939a41b01354e12cb48d679f
SHA1e059669b3227b391b7afb69eb2b32831619f42c9
SHA25682b6374c7d365ab5a0d871b5a5095ac040bfb9e86006621961678d19c110e943
SHA51258f59a362237fed48a9071605471783c9b9da4dce22e8d786ec7b2990db1f66d740e034f593b384cdfb93eb29cfad6f76f260599a91c12927417d673c23a3aec
-
Filesize
11KB
MD50882ed2f80571f0e90241ad931e85e67
SHA19baf27a0d7c8dc6be22c34fcda1c1835f5df726d
SHA256a0a95889c5138be96ae6c0f09760c76c8291c3961fdb64d5070ec26cfdb514c0
SHA512c18073bf6ba0191935980f82603eb233d77ee5fea897457f1a6d7fa6c89095d53db384e80c059218a19d2f56c2a0f8ff4747076766fb885438ff168eaa6be520
-
Filesize
11KB
MD5fb1c1a6bd8a8e189e2630c0342ce550f
SHA13e22b4f1a8d25b8510cfd58a24b8b888bfa8f3ec
SHA25667b5ea537e44b3de84563cc21383007c07b3a2c2b47d71e2908f773a25ef1a07
SHA512744d678a0568741dd891f6579dfe3a9df3821695ed59ecf4f0ab360def94475371da3d138d2d1ef458ab4e14319e480062fa88ccb2cda34a4e72483ede097cd5
-
Filesize
11KB
MD5a370ca9584bae5805db8019748c0decd
SHA1fbb02706dad8e2fc8760ee9027fe8dc68cfe031a
SHA25632b7e77308f10d848072af08c7b38e3c0c626679ac9f3e4d63a1721c2b88457b
SHA51201096eab88dcbfb6142be1d2886258da17e3c2f71feb3d65b00943d3f5e0057825b489a53579b9025397805f9c5305f7e2dd3439f1daf7c893346aea029f3102
-
Filesize
12KB
MD5322623b634095f9b5d27ea47f895e6fe
SHA1f184042a7ed34e02489d36a21172e1db16f6615d
SHA256f3dace2caa16a9e8b93261727a03cab66dabd9757cbdb407b130dfb8e7139c51
SHA51244c942fa1085f6418889e87018a825e75a593e4a195592595aff6faa26dd689a0e1376ec232aa45391efb246a8dd272a6f854940f4146e7af410d74d997d3199
-
Filesize
14KB
MD529ca400c9997c7046e837196f9950db8
SHA13680de542c07878c6fe753f04b96ffdc3b503df6
SHA2567d484259c2016dcc1382a0be1fc2c614367fd52a029c24fad12751a3547a62b3
SHA5127a00f50791022d4471be6413296f288e68f9d6f327fdde64e91d16bfc418d4e0dec7b6c5d88816597ef7947b1e9b72dbba9539bef82edb434adc20999a2dba65
-
Filesize
11KB
MD5310c7c77d08f513906eb6edf0ffc7cb2
SHA11c2ab2463d933b4224128683be131f2cc599b905
SHA256a185f469e8472be5b015b38607bcd447687ed162c691341c3c2d79dd9dda4201
SHA51243ee3b97069156986019149f48b35c510a51ea04c102c4b9e1641a64ca8f2978643b9853b78e8521bc65467c1453b7084fd02c0bbd32e3273aae576039e6b117
-
Filesize
11KB
MD59bf4180d694e2a4c3884adf2b849bc22
SHA107f57a3366ee0913b941556fdedbe2fbe3afc959
SHA256413345351bf3cc2b0332d54a9cd7a5f75fb5d7327289d72532c221b1354635da
SHA512d32059cae7c3d1acb5d2bb1807be6f28ed288aee3de9d0852d09cb95f128fa8113758a584aee85a22903ccf0d2d6f31fd9326dff6ff1e2a22e2c2c61980020f7
-
Filesize
12KB
MD5b5d77bff3acf530a7bfb1f547b0bb53c
SHA1c18be7072b217063b4ce3a78f7ac055fb7f2131c
SHA256086e7876116c28f82881345411100346b52ba3a4a6536d8beee7bfcfa1dfebde
SHA5124d3b2070848bcbd418c6787f56b1bdee6800759aa24a9239e66ab73e562c76ce429925a94c42a3ac5c4fdb9bae3cafb2ac67f255ed9a0e269cd66db46491af6e
-
Filesize
13KB
MD50c540211aa264eb6466627659c2d54d3
SHA1b6dcb031de40793b5dcf01e466648df0dfc6c2c7
SHA2562fefea4d135f901fad8ed6bc12cf011aca7fb165097c89f1506cd76434a8eef3
SHA5121b9fb3a773aa373c3b71e12fba122abacee13060681556705d133195b2b56371597d344cdfd202e27285a1f82a882090ebe76af96f965800dfb571f96648c8ed
-
Filesize
11KB
MD59abde560d1dea7a5d36b07f1e0b09602
SHA1e7ad12c92ddfd28b581975362d260d8544caf9eb
SHA256032b82a2ce476d649650596e1b80ee7a9709c16eedcdf1c4a44aa81cf387aab8
SHA512f0c19f4795d8dcfc4e98d58fc79830862b22a3f64294e0ce0fd2bef81cc83877692b3ad6cc7df02842adc67d67ca3c6e40c49199fc8986b4dcee866ec9880fc8
-
Filesize
11KB
MD54252f38ac4c4d3d4893782898d58dd09
SHA15fd2ba694aa848cb6d915e86bd5d2d79f20a38f3
SHA25692ca022a80bd4f4ba40348a5f047753572cf315b71be936b73619b4902048874
SHA512007824417401276f2a23b9af632d625c1daad7021eb4a93b11708bef318e937839d0af0a97fc2f95718be73ad3313e5fb0faae5fefa7e683f5734a858b20b52f
-
Filesize
11KB
MD503933fc5f39eb10cc78fcd85ebf8cc55
SHA1e96b7e6ce75cca4e225319cfe00ee9e5dabc5bbf
SHA256a5eafa456367dc4d29b3818a0d93b82c5f64809960e2c5dcb5415c26f6d29faf
SHA51207f02881d0f5a89c1cb7b7afe60d8ced841c8b1e096f4d0dfed9f27818d540aaed9dc1ff5a2aa6ecccd505d0eafa49438dc9ed1f1d157e4964f4c808da063571
-
Filesize
11KB
MD56fea9684a6f14b438184b657a5d5f13e
SHA179c67e06e1e11c8ef61d676c0e36c0961bb2b52f
SHA256bcd1444d1677ba0456f809f61f4a25c7e62c031c50c56d742f5556dce4781490
SHA5120c7d806fd386b748d1f6d38842c87bda882485c79c09c85d86a4be078cbf27fe2d558e2cd5fa9606aca567e82f0089dee2e649d981f3b36e2eaf2b90b6c21cf2
-
Filesize
13KB
MD54078fc7f889086f3f71a36e61307bda3
SHA123495861e0f434b9347086300a7062da887d3c20
SHA2566a2a559ef99571fa901c06e57325edd2e3e824a60efa12c9f946a1da7ab7bbe8
SHA5123ce10e8811f7f2b5251a03c6d83fe662e8cd65d264735f19769fdefa36a31d00bc87837b4ea9b641a88464402c1cf069302636937f30d69a03079f762e7ce405
-
Filesize
11KB
MD5e98ed47f59819dea068797c500c4887b
SHA17f208ce3fe94416b21e7e5dfbc63c6f2ac5dfabd
SHA2560d5a1c6d159581acac77890c0b21ad944262d7d52ef5156a2c8c11c799774d34
SHA512a92468ca434bf5034de578ee48ef7b915fee1203546f9eb20b977dd970946fa8f0c297ed1454776772b51d164c80d78860321e6683bc591172f557d118cb1dea
-
Filesize
12KB
MD52c43f2eb23b4676f354fc96679cfe5ac
SHA1eeb635200656b600a675e716af07e9a095a5647b
SHA2564f57a4bf35951abf84296e23be2d72d592e29a2f2d7b9629a16a69ac105fc31d
SHA5122aeb915aadc5a3131b3852488e5d90c4fe4d75728278849553150579e5bb3df6307969bfff7dfa836887a3bff4f87856d375e19aa445993da40c212882f2b0ac
-
Filesize
11KB
MD5df9f7263b46bd010f0c306b9965d4207
SHA1b51e81476a452d566a2878dd6c137a4e4f467a5f
SHA2563d33322cef86b639809ba55a779293eb841a11e2dba6bf2a99bd229ee5c7416a
SHA5121b24f117c56252938d0bda1e8f29c404ebb35b535c09d7468dec3cb639edc05fca88c7ac358ba56fc45f95001c1cfa2cb1e2536dd577131992fac85ac87da5e7
-
Filesize
11KB
MD526563132c6e722c15e1085cd3f51160a
SHA1cb5820330f1ff95c3231e3c3569980128ba31eb0
SHA25659471dcc23050e2b5078ef4895f04cae2b1fe172bd60bb164846a65dd5ff4686
SHA5125729b0404e0583c09d68cae0f5c93ddb9f3a27dcc262e390ccd24bdceaf96c8e7c6d52ed0dd3985e03b49c6f11e2ad917c0ddd210041ea375624d28208799e46
-
Filesize
12KB
MD599f80c6c5916948e8f48b48bd77cd6b0
SHA182175c59bd1856627469ab898207dcae6920d455
SHA25686cef55c7107a209927f86b251e637cb3378a0c400b01a2e8e4edb3bb01b8eb6
SHA5122f1aa13d6364f81797f41317b449a2eadcd8806b5e58973b407e4340c0d9ee1024b3b980c8f7224ac80b8b7dbf53506baa41b37e6a2dfd506a2005b02524224f
-
Filesize
15KB
MD5bd9fb4eb287cb3b32e493eb6eeedec9f
SHA1e6c5a539570b4375f7a78ce0f3b45fd9e12489cb
SHA256dddd0b7b745d684820ae9df2460995cae8cff79dfdd049e652c0c4deb3cf376b
SHA5127c1e3489e6ee15eb499e1925a991e4ee3620ec77d24bc8129f8ae83e2eb318e547fbf84d984a982e8cde8dc6ff07e764d77942aba1e02bbd06c95509bcf9b4ed
-
Filesize
11KB
MD5793ca4624afdb7172db83c8923dbbb20
SHA1a3294a9d907e7ebbb8969a76b2fd9a0c1ebdcc0e
SHA2569600add46fea508220d3d2c3230fab044d46524af5e708d615fa19be07283972
SHA5123e0c404ff5cd4ad422c78890fc4179bf30b49cb4566b452538e537967b730dd2dacbd91e8f16b41e60f26e4fa73ea554d03064cca7b86f47c49e88475a384ea9
-
Filesize
13KB
MD534728c0d6f7c30f970faddef74a8c230
SHA15641a8a0f835a8b5cbef0c5dd63a5465915f4629
SHA2569c4632c4889a4e4070906c629b43eb92f4f70a1f19d38505e4d6a8cf1d47202f
SHA5125639c8ac766ea8b6cda5af87c41158f1ad9d643a9922b9d3db34a2a1778da7296e3856eaaf0e55e657f06763b207e1be521f66a944391ad5a7975a02b75e4585
-
Filesize
12KB
MD5319d52e281b852ab89ff788222f9d493
SHA1be53625ace7028d71337d509f74fefc50af3b4f8
SHA2561607ba44f7b0440cb5b332b484cfaa00cea67e8d3e9510299e4efb3e4f3addc3
SHA51232dcedc4bdc76474834ca789035fdb678f2cdc01276fb0b04efd30e3dd82e4d59510ad55fc065d64b965e79c5055c678112d060fe425186efd44ee5e426d6de0
-
Filesize
11KB
MD559523e9859b485e3d08094aea3cd1650
SHA19194c570c2fa8180fb04decdc4962af4f724ecf5
SHA256ec17050c14c3f26bd4aa7b3658a9ff8e409817497f2a83a2039c35d722f14863
SHA512f56d144d89dc86939c153a47fa840b857f2fb650ce7672f5457c5e1b22adc239b1e7295d19b6164b87f9ac113b0166729750de6b2260bd66b9e8b60e45f6b81c
-
Filesize
20KB
MD5d0ff0fcd6f1e953784470bc0aeb55f41
SHA14727a2eed2890033d1012d81fdbae60e9bc26202
SHA2562e042dc9b176f66ab9ed762276be6835aa4b0a59b912c492821c12bc4f10367f
SHA5123c6a15e329f2a9a025db2fe7ea29841821750b9fb4d5796df6463dd15e6caae9d4ad48ec7b59e3e5163133101b6ef67fde8256e90e1f2ed0c026c5dc88a427f2
-
Filesize
19KB
MD5a79c9e4ed6f733d104c5fdfdc645fbd8
SHA1f4394c3f9fece965371fa252111fc6be8b056de1
SHA256c679753174707eede342bca00f2293d6060995acfd4ef8b86516ba18eaaa57da
SHA512622403ed453e35f4480aa3adbb9a18ac7639e6497848f296d9177b4a99fa2c4ed8443a355f93a2b576ce9d18bcec4d90589739870ef698cf44f9785cd40827c2
-
Filesize
62KB
MD5664ff5f114744963ad94377342da50fa
SHA181110b7840389229d3297fa7c7f193726f193c48
SHA2560e80e3da124070f47b286c76e70d8240d72be7a274d521e19c49b8d3cc40ad85
SHA51206e7c44df369f99279443af934f6d8b9d6c3998bfd87f72c38b1aca1ff4875e2824d035cb271dae3ef2cda76419989f5115a5427cc405b6c4d227dd08e539201
-
Filesize
12KB
MD524b0aa5e6014f53ddf394fa28ee0434a
SHA1ce8178a7daa6244728a3c3bd1525939b5516c156
SHA2562be74079ba9cb118ca587b118f897c28c68489832c0503d619d8946c0f3469c8
SHA51293c95f4949e860939f1dce7c8ebb23cb0131505616aad222c8f3d1adbe54de58c40810f0785f9dc517624a24d2bcdb070039059e77cdf597e6084a2042c839f6
-
Filesize
15KB
MD58cea3496743120c52d67ff3a52443e4b
SHA14ab3ea1a3e78bd787e60e2303801e2be05abb0dc
SHA256f8be853ae8d39a6d174cb341754b914687fb6e015cc8d9e41f233c976ddff932
SHA5128e999f6c1f9d5696f0aba17d8f28444a3f3433db55ed222e9f194268cfa9c6026d7f0f5d054548c60771f64f26a19b424dda5f8867b918b979d36a09ab3f3854
-
Filesize
17KB
MD5bf281ea2eaa410d2af6b37b6f2512f56
SHA118296379363d7918cb58cc6380f2dcf8334c880c
SHA256f1af0c78792e30e347e681168398d790782ea9d90032144855ad536aef2b2821
SHA5125ec070a22b02e4fb46eb98dfaa9bb7d41c93107c1feaa221a47dcd560c65480880a9c674beb4e1ae74af859193a786853e43441a8f460dd25ca167a546b975e9
-
Filesize
17KB
MD599c74a78aaa887f6788e1f45226f7ac1
SHA13161ced42ff22d9d0039cbea5ecd632b09037e30
SHA256f77c7c409bb672e5a6f3d472396149adf556e4ee236bafdaf2a1ad561da1385e
SHA512af3bb0cd69d6684265081300545f21d4bf74f4a653794b9ad0fc641405a935f27c677fb837fb61b9b07c9f73cd46f6596d29fc607a3d3317d9367b4c9adb05bb
-
Filesize
13KB
MD5c0cc568245d61225a5d9cbf7c3673299
SHA14b69848ae77b31847ecad50870878d71d4e0778e
SHA256c3c0ff93636a940714b9643528c1ee768ffba31d53bac187fe9e29f90e9b5c45
SHA5127bf00c152985b396d6f950fe9c77715df285d3840677dc949b1e4e3a42fc21fe0dcfe1b4716f3ece27ce6121367d0d1c5b5ecc7469e822e1f24e4f46948259bb
-
Filesize
11KB
MD5a65771d596e2831f28fa6cba9e0bd460
SHA1afe417a7584d86a4d01cb84e22d990fd4a9f7f9c
SHA256c45ab0acbf0cbb03aeb19c91d505b3cd40bd955b1fa35bd7128f81ee8a65c91b
SHA512a8c0f3249868e94f84f2bfe5a5307f16dcc5bde122b4afb691ab92bc46952d803abf8dba7228a6c5435bf7e61fcd4897f42afd7cc904f8ea277c01cc41353116
-
Filesize
1011KB
MD5f4b289a980664b628d7e5b65402f5f12
SHA157e46a01c2732663b1e9de5529a1713d0de45479
SHA2564760e5fa7c96a947ded30357429852543ca8766b751374183e8ba1fa18a96cde
SHA51266e9fedfa6a660a75d3a908d4f4fb60c3c740d3c74aa9c2ef073cd405c910bd823ab7065e7b6eae29ccfc87b3920e7487fe699175a5135685173d68a8940ab7f
-
Filesize
1KB
MD5c8e1fd940ba43c0f10c0dec7230e9a31
SHA135438459b8fe8a78e657235daf850c67736f18c5
SHA256ce2a9832d6658aac9e2dd8c56395f02e376cf23edd0c4d3090e4c78bfe6ba11c
SHA51234be7dd7bb2c462473cb2154e23a32c954a4a934c8cb09dc2587e63f49e7dabd8fa66129eef80961119568570a7fa1657192cdb1a53a084f37f7693b948c7a0b
-
Filesize
31KB
MD5d2d6df8a5388468f0fcebe4b301607fc
SHA139a33d071a31f3bf335190d3894bb52a98c9f23b
SHA2566338f342ae72adef1a1c372f579e828597913fc6602248fe8148cec1d3253664
SHA5124d084d56a4dcad734cd12c795c19e860db790b8ad7898945d9f08fd2b9cdd34deb9cc1764eb54290aefbcfcc6d6e703d96fbad5639eeece349d79464e74db4e7
-
Filesize
34KB
MD58be95b22717f120b16098d4f013b5ba7
SHA1302573cf372eafa4a6847520d9e4d108f3346796
SHA2566d2ae2f8f869507ddf1b1c90c7d36c89e5ff161d2ce11902a12d3ed88f99d92b
SHA512b06e7a44cc7831673f74edffce986201047db0283a5909c572c155edf95326ca9e4410b6e811a5dfd1d9a4e2320bb38eb3c8b630f1a1ae220cff0e54988a3cb3
-
Filesize
23KB
MD5b1cc3cf4207691826994e07f7b41e1f5
SHA101783e99744974333449a7fb157e2061cf75400f
SHA2563664a58af8df277d7c4b88a3a5b4a53b56143273ad8839f3fe44effe412ebabd
SHA512e602219dc0f8260528f931cd77f958c4bf33258592b84858433e4f489200fc7e560f902b6972e44c825c750e429e3ee376443881271b0dea18ac99c9a4428191
-
Filesize
2KB
MD58ac5bf27b9ef767203dc98967d72d9b6
SHA13e10b11d1b69ad4d1c823e154e14d52218eee421
SHA256e0da03ff2a0ae5c930c854154659b1dcc2a18ad07fc56addfab2fe84d91c594f
SHA512964a3f96155cd03edeff5049900e2825a59ea16bb8ad2e7b770cc67e50e249e09aaa2c9c73cd873e7d657ed3da5d9bca254341abb62e85f6ca7f37c15d187bef
-
Filesize
1KB
MD5fd3f363046b07fb2b2980f7534d66403
SHA1b3cf1e538af720a8637d95117d851198f76648f8
SHA2564fd6c3ab78a8cc11da8ed10b902115d1fd145434fc3764d1b18e4f413970f2ac
SHA5128fd1da6882fefafd93401d5ce040af5d627fc99f53c715285b7f8d2a00352efa3681498ba95b894dfa4125cb7d92aad6b72b749499fa5006a1a591646fb78dff
-
Filesize
3KB
MD521588ae28643cb3b706f986b56f5f9b2
SHA1bc1b3ca4739353248f61099b93e6eb2b6d10374f
SHA2568d17695d060289be9e66d3087459fe2e9c5d77bc021c46cc8e6fbf09837b4827
SHA51250a384ca25d72384ddc814241f46e91d46c0a9d2f9c9995a396583ae3173afdcd2463360de265cb74302a2577a2d3ebc7384f336c0829a2496db9d3db771ac7e
-
Filesize
2KB
MD5785b8724de8b9a6df783dcf9b6260903
SHA19c09f4ad8a92752383965ff06a6f173d6efcf798
SHA2567543b46c5744cde51233b79e710da24ea0a9b9324286b572db4d4db21d748394
SHA512c8d38c6ce36af71ab887f14e960cbcabc332d3a6994144f693efa03305f2cd824165cc1abdc73798cdb648d7176efdbcf45344adcbecd1627350d9a7e3e096fa
-
Filesize
5KB
MD5bdcf429561543d3606b7cedbc8e94d48
SHA1baba93f2f06b3a506ba75e63201f25242341f4c1
SHA2568a545b8c95f593d9434bf516f954046d7daed52c001bb96511189c3b3fd78c35
SHA512b1075e4855e8d1293035ed4a655af263bbb475e59a09050af96cb1edc5644ff9f0b099c441e1382ccb4627f049ec936ffbbcd9c4b91b53bcce2fbe04baa5337e
-
Filesize
17KB
MD542293ba0b59f94b4aa1421e2a9b18ed1
SHA18542a1e60002a5032c65c44050097fffd0412a08
SHA2566cca25b4738e2da832309b3433f4d4e120d1733065e3cdac1f90a81aeb45ddec
SHA512d5b7420a9d7b4feff4daaddf3f4d48dea2b2d9e86dc7048d928236df42238b9b70572edc6820666af137acb0da77e1482345ea194efc27779a40bfe754d71fbe
-
Filesize
320KB
MD5cd6aeda5606048fa2cfba0590deec389
SHA14250378888f0c061fee210aa701c845b3857b140
SHA25634d1d88dddc1cc26dc123cb3576ba10ff29c24f936a774169c37a331a991dce7
SHA512999111e82fb731c711a3e683bd2f9da0dbc2fbee9bbce51856942e5447928a49aea20fc0634ff237f8c9c3508c4ff2aa6d39cb3bfbe79580e4f823a45fe44c36
-
Filesize
1KB
MD5758bcae33bcead52ede2c84a536fda6f
SHA1328efeb91242855781a10545f3729b5e58975a7c
SHA2563124ff21054416d2b93ab7638532b4b0800239ffd331a7ff762c1ed6cc0eb3c6
SHA512b62fa8767ce66bcce10b3a472c5003ea2cf67e0d0c876abd09b6ab209ea2eb560d630964d63ab5f2a359206eb3cc0cf7ecd19512a07828dc15e57a1233e159b6
-
Filesize
10KB
MD58e53d72ff81a44d897af40938c77d623
SHA15bb8430219c097d8d124e7691ed1e7e9abed9da5
SHA256b3b8d02ea674d0f51a9f119a3d26ab078536549cc5fea3c3c0148991e4c1df99
SHA51256ecd73dedfbd843f6cebf6470ec4b5fa623706fcfbefc982b0afe2ec01479289eb966d3b4b079b73b7bf48a39b57a05749b1899db71df4aba640ecbc62ef948
-
Filesize
3KB
MD54bfbab54cbb420c48a905c8ec91e5e12
SHA110ffbd83e6623774e09e853929d86c6089cb7251
SHA256f119920bae2c076a761c93f546c16d180dbd6ef269531e8658f31dc7657814c3
SHA5122caed39bf6f2f327a0a0e0f3f444d85912a6baa72172979801f7f64266786b2269573c49f07712e900f50fc04c6213c2c0c13d53fcd6a52776b643477dbc4656
-
Filesize
162B
MD550b800f0476fb16aafab1d6d62b07b1f
SHA19054573b83849c62c62194c0a337b2de3a8be7c0
SHA25608c14a47df40d01ec9191353e992e80908ae2be3b9767010f304e9feb4a5bd2f
SHA512011023ecf0419abef8bce647c236f3b34f1d3447bb57ff54b7617860cbd13ad9dd25011458a300a1c160ff5276a30d38a1df5d7a61f23af3561165fd680cb468
-
Filesize
1KB
MD5b07d679ca162fa2d7b49c50f4cc23991
SHA1b0e16614e9b219bc879ea9e31cc32dbb9f95de37
SHA2564535e91d8dfaa8d1f61582fa493d3579750e68df734e1743899763d6c13564fd
SHA512d7aea76261bd14475101a6ca88e1ef670bba9023d1413d751e7efc25df2f3cc38cdc3c73d89fe1d7f096e9e8f0a31221c7a87dcd85c12da7fc51bb14115a9be8
-
Filesize
3KB
MD5b168c7d93185860394d09a4888cc4a8d
SHA18ee33666d85512b9b1e0501822ac90b1fe21df8e
SHA2565efa0a5afb4cd374b94c549aa232cbd40fff8df56853b29ac5fbfafb30bfe657
SHA512690a49baa89e34d40ffd4923ea8a1e899c732cff827da4ea1923ae4e1a4fbfadd15d4bdf3b5cd20b4e169bc70b07cfe593257ac4a3a7827f32538e786ec8ccb6
-
Filesize
1KB
MD551cc4b808327328abce45e780e7290b8
SHA153ded2e6273efa57d2d8a97d2df809e34b8b98bc
SHA2565f72a109d09f7f63ad4e159a87736b8bc68360ba35e2962ed15af030e5d82960
SHA512a0c839d1a7cb04bdb5e2e0fdef232a108b132d1dc20e858dff8875d7e4b0aa57a68618a81cd15228dbbef3aee6911ae9f0548ba26b6b3aaef5f6495e70af7a2c
-
Filesize
28KB
MD500c779be2ba55d9f0390a62da89ef0a5
SHA1fdabb0715ed79603aeef19133b64bad6daae9b4f
SHA256fb3e60bd660012604d429933972764e49b259f5f1526aee794373daa3f3d9cda
SHA5127c5ee69f8eaad74473a3ea265886f6c05f38130cef20992e0884dc8b2e91b9d17d19050b4896a2ecbac1516da652629dab9e736fe7141fd505cd16629360b019
-
Filesize
2KB
MD5d91dde9814460de2e4e679378e1f4a8a
SHA1a962592f2181adfb39337ae493e56def669161bd
SHA2565f068fdad4a54d24b18e40b4f5b675957ca425afb2cdf5ee7d94200f08aa3e6c
SHA512eb190519e52ff721d3debec7bab25cf497b039b7a46289bb57543df00d1c244b7dc4f24b40b4ab4a7941f20121b8eaba68d3cb669e5bd07d65b095c0ff1d5007
-
Filesize
1KB
MD53ff66a31f57064bbd2534fb4fe4a4f76
SHA1bbc40738b7d2e92afdd1edab09ebba47c07baecc
SHA2569832d9f0d0f2e8ac5a72f664f0ce5b9b5735b360c594fd64e54284ba8616bee8
SHA5120b0d61c96496153a14313c9729f427f8f23c56a7819a2ec12e4355d5fdcbc5c5de9442886fa47bc7a61306d603128b91a0c6f00ab61d46ebe0ed6e852bea48fa
-
Filesize
2KB
MD5d5297c72289499a52926d7d90b050b93
SHA172f2cbeb4957b93308945153be1d6f0d292deecb
SHA2562e2691c17211351b77160aa5176a10c6d0aa08283843559321b6bd95d642ab77
SHA5122addc1f8071e3faa2f8f147842fb869bba76df67b8b7a43314ee4d41a677974b2f96aff3827c1f7458c938dbe458e78b8d278cb1e84bf47801e48cb203b7b58d
-
Filesize
1KB
MD523dc986b064d0aee839964f1133fd838
SHA14cb4feb30d295f5b8c687fd8305970d8d1dd523a
SHA256845ac776a28a2a1779cacaecac74ffecb10602f96e7a8d78e800777af666c98f
SHA5126bdadbd7fc66bfeab27f680d20e41e8f436f500bdb228875aa3d14bb435732f3e91dbda814e5ae7d5c8182a41682beadc07eb26d18fa3de271e01fdd28fd4f4b
-
Filesize
1KB
MD513cd168c4c901713f891ca288ce907cc
SHA16ef4711ab4db15ea659941225bf5350f139d9d81
SHA256e8a1a4f8183ed5c4f7f8f7719f8cfbc360c8e434a45141df87d7c0567d441244
SHA5128bfd61803eafc84fca1a642407820d53dc18958d35ecd60599b859b17f31de35d03782ac115763f6bb69e0e1794ff1dd3618741de931b1a4a459992db44ea569
-
Filesize
1KB
MD5873a09fe9253cc6e234876de97f4381d
SHA183f2c43eda7618e066c36ec37a5b2fac249da5f5
SHA256f48020480b81e5f3327b84f3f0c5eac830831b496fa0eef1b12c929f02a2eddf
SHA512eaa6b93aa8c4786fddf03659b7aa4a8dc503dd9e48659704699f07f6979564e56807b135522f8c2678bfcb09024183c6b900c6d4db2aa3d770a23af3a356651b
-
Filesize
3KB
MD57dd8789a3573d1412963b2ac3d2a2a08
SHA1ddb32563b401105ad3fbcefe692d89b64d38d361
SHA256db00db46d6316840061a80547ff41ea2d37248fddc55c23c50a69f22d7df8b92
SHA512e41b851644411e6434d030ade208b159b25fa94cc1ecc30f328a9f39ef4ec3cb9f5739575cf25f838fa6cd7c861ba7f1ff429d576f191bb9e94ae4c11c6f4e0e
-
Filesize
2KB
MD5d946d23b52b2d92ea8d6e981e7a84b58
SHA16a097febd1efb3d3be7ea27aa75708bc729722a7
SHA256f473f4d92dd60353f518310c9b56c7123a31800921864a06c26bfc6fcff844b0
SHA512ed11d7b3d567cbeacdb7de60617103c403d896a6b774970183bb3e67eb4a1a90171f7daa66a3b23f9b6167dca4e7ee5befec48c3c03478eaab7bc1001cb69551
-
Filesize
6KB
MD5378d0d5e19a5b0cba24835bd1b21e5ad
SHA180e41195213e83651b9d5bf96edb5a27afb0c7ce
SHA2566a70acaf24a357ddddb53094e1fae453969e9735bfb2134cd14b396d4e23628a
SHA512b24268985f3435b2eaa44eacb7a914722fc37914ee54c2c3d2cb72f63f43123020787f7518cc46d16ec234e2b5cfe5665ac008a3ff297b310e0299fdc2db1add
-
Filesize
5KB
MD533c0a7effe554561709ca1355b8ae3d9
SHA1f00a9c4bf04032106baa68d56db4d10ccedcc7f7
SHA256bc778ac6fcaa56a7c3936732747a3a88c59ef942e73590436e5e0cf39a404955
SHA5125d5e662f798f29f24b2db0764bc8220609e9fe5d7e1fd9e08c3eed946cd2e053a1a53a63f7ec9f275c62e1475ca4c294d422d8719dc2769f00474f05c4195495
-
Filesize
3KB
MD5e9634ea309329aa3d1555b0fc248cb1b
SHA1bbb4b19b8987a9c3232290385c0b62f4f304b864
SHA2568ac61a0d96368f934fa1dc3d8f3dd5f5485933c422f8f4ba8850d6f74ac0df36
SHA512f486963f3fff004d50c7761ba296bdcbaeae51be7c4e12316066c0a70dfa801a96bbc9a368bd8666c911f0f77962ac678926324b9f31cf77e1bf340eb4032690
-
Filesize
2KB
MD524f874c2a3df31c27f3fe673d59098cc
SHA167a1a2d0ae122832eccfd5c413605f138a5d59fd
SHA256f3eb7946fadb2fa93f7664af7986ca07e1747a8406dc1e923597c8d877fe587b
SHA512377aaae30ed4147a716d52013400138f992db6ab32a31dcc7e93d4424594364116f8005d7a0d4b69b4db732e37b671c8b1dd20a6c9a1c9328363889a2a0600ef
-
Filesize
2KB
MD59c2b7cb353d46aa07d4919f97294bf92
SHA15a3eb61e5e20b51dea9d6fabdd68d1bbdd7fc510
SHA256f1ae499e2e5157dae652b3dadbbd3dfc58fe88988506a706fe6bc46df2203129
SHA5122b524250251dc84a5e1cb6a2d626ee2360fdf4c8f83510033b02c3d65f93ac4cef9cb0c7318d31aa2c03280b07dcb14fe75513d2161261ed52cbea7c04f9b038
-
Filesize
1KB
MD54a1e5b5d246f7e5d6f2e0f248f1216ec
SHA191d938840f676f30eea990ccf2bf88d28d25bccc
SHA256c81036993c294a9fd355bb2756ff2c2c2ae030d10e07ed3c0ef516df2608ccfc
SHA5122159e5305570716928dbe8ed10b3360e7a75c6d2ccd5422278b6e4cb2a4e56ec80f190fef3109b2a4f4d9612082931cf130649d490960460f43ac24df1846e7c
-
Filesize
1KB
MD533de0f99e3b4ba84d3455e6d9b7ecb1e
SHA1bde6ec9d4872c22b61d3981189a1aa9758bbc5c4
SHA256b138e57dcf40305a136ec166691ecc4b35fa5d50e01a290cb5200fd6e17d8079
SHA51297b6711c1373ccee1b3416f7dea911d11cda8bed16d369dc19bec6df35272899a5bb79dfa30f84273372a3af1f6d5bd66040565f0e5b8876379eee8d8051f71b
-
Filesize
11KB
MD55d88a62716a91c6dfda1fe6b244056eb
SHA1e04c26d0dc365467986c391f8532f101392d907a
SHA2561d0170adceb697f2d30e3f9cbf7eaed31a5f1a8f9f8e7b71ad577d180c6ebb57
SHA512d1c5a83983edb372dc58a5409e2e88b8cbd4049e17f20f402adaf80ab2a7a396d01b13104da2464a314d386f10ab9c952f5ba8f8c8f5526905cbeca962850b1a
-
Filesize
1KB
MD5d5b02e62c0784d832f0c8ee5a064d482
SHA1bf8baac23895e89b7b93c508d4d72d188de87caa
SHA256f2112ba18b606480089f8b93be10b17d3b895bb3100bbffbf3bf552e28cd2adc
SHA512b63acac021ee2b827adfb946fe3e267ae26dbe5102b825fe65ea10fcfc664f2400e116d80c84d6e9ab140244b3df800c73adfda07975d6e7e17d8d554408347a
-
Filesize
2KB
MD53560a1e4b2b3690b3c8cc52b6669b29e
SHA17bcb825d278df430d3991a143f873a7bfd826935
SHA25665c4a0281300d40ce83ad69e27bca5255b63529924b19da140c87b3165eb7032
SHA512384d536982529c7b73151e80103f091562627a50da5c942b8c9a127d8b0b29552e18f8b60684861d617a2d9eff7633102e4c2f028e4f30a81b02841cd3aa87e9
-
Filesize
11KB
MD5844f4e21a7faeb2c79075a1a84d225a9
SHA1a9828273212f083fc60b85d2bbdbdbfb8d94e5fb
SHA256ee3de6ebfee1ced733ae777a6a0ecfca5e18b6f009329cb879e57563e073ce7a
SHA512943f90bf60958a3f61e0cab6ef7bf9a5917c33fa19db4d24232b7b995616b0a49562c8d03b3e4261aec28e1597056994af8174ee41d342ee702d611042ca41a8
-
Filesize
11KB
MD504472c07d18ea42dda2cf1ccd486392d
SHA12ec93d1a69c8741132527a7a13993055b25ef041
SHA256383a865ed9dc54244124e5a72c9f80f86da6bb33b981793ed6c03eefdb1ae65d
SHA5121a1efddb63dc1d7794e0a7db2f2fa3ca04a3311e4565b467acf9d93d8b831517aaa02d607034d6aa9210aea584508ed90de9da3916cc040fd835b1cd9cfc1bbf
-
Filesize
11KB
MD5907173eccf30211cf408973b72df16ba
SHA169197b1bee3406ffbdde9e87ce713b0baa88b929
SHA2567d76b6135b1ce404c65fd01060ca1e804a8bdeb0d228aef7ef8151ccc36ee522
SHA512759983e9e79641ee97d36e03bae88ba6abf1537e2dd9661bb2eaeb04a0db29295f5f8ea024b14ec33a4a8c40a2ab4231153f4633935c7b89621eab585b548d71
-
Filesize
1011B
MD5875c4b73fa5e288f497755b56d8f10cf
SHA1f991d578c96e3f9e8cfbd97fc940063efa75a3c9
SHA25619a6c1f9abb0a9d27e91f2bf5fb23851fb8a35c604f68678156a1c9d34bc0b5e
SHA512fb6a0e59c746ae5c106d4236a6efd363b62c3d099a9bdda854ab41cc80ca3f540c2470a1be011c3c6891e30d18b15dc17508e68917a6daf84f3b7edad8edf138
-
Filesize
274KB
MD547b950df4a99d9b0cd3799c4f92f92c9
SHA16624860d8dd98d7fcec005336edf37024a80609c
SHA256aed27f4bcac7205d12238a1752758864f639adcdc61a8c18626ceffc5cbea7f3
SHA51265b2a162ffbb803e5ab733e4e08cc320eabe45f33643b843ff6b539ae698fd6ac3236230db1244ad49fed15a1508188e80bb85cd70ff6dcefa58d8924dbf1eba
-
Filesize
18KB
MD5f86585fc83938e7857a780a96a22198d
SHA1cfe1a576f5186c19361cb9a766c8d5e4f0a05502
SHA25628a5711bb6de281d128534e9b4862d2bdd5a6b2baa3d24f2b79b8d0924f3bee2
SHA5124db844ab6279246fcb060adf333ecc7d9f8be656db054bc7110fd728862c3fc7ccc8ede235c06d6a7fc02cc66b0c9b2a33ac53992af844730bdd757b7e4b62e4
-
Filesize
18KB
MD52a490e0e37ad7454138b9f7691d6c17c
SHA1e1937dfdaf32639b5308785abbdc343adb3193ba
SHA256663f1a4681551a51cbb698f286cbe317b285f67b5a51e9bccfa1cfd92ca62add
SHA51226d6a21efe466ba28a41b4b5c51ed25bbb8f06e1938e5f254ba51e3794b575b769226853dc2eee8ad2787b10017582e9e67a6a4f297b607a6699fef5503a5533
-
Filesize
20KB
MD5dcf69f8150196d5eea4d75976b12fa27
SHA109104c3d109ed3aac551b10fa0ee4dd722cbe7d8
SHA256f18982a34953a6c492186abacfbd2d636d4c979030966833d51cda8d3cb1fdd9
SHA512ac55ae9638cdef47dea236cd13ece4fa78d0c6e8b195e58f6f955ad37ebed0fcf84d65a24e4191eb1479d7e95f68e01335d596bf80c366aaa6955d1ed2e1bdd2
-
Filesize
18KB
MD51a05e72fea9ab28273b7c1afb119bbe1
SHA1bd35007bdafe06e0ee1fc47365afac757222347d
SHA2561be70272f51751172c02edd39c8a1cac6375639ab495caf6278e78b4ba8217f5
SHA51266a22355211f79b1061ff843eacad3892c7bd07ce58456f508d3958b6fab917ba2ec4740d24af62373376de70fe093768cd3c8063acbc34fe5e4aabeb10b1455
-
Filesize
18KB
MD5385b4cc6bb860132c84d449c9aa725fb
SHA1168ad4b205ba87e7fd8dd42077cfcd32a65a513b
SHA2566eb5cc3ed79844afaaca4f602078fdcfa57062e1ac6c2704d938476159182fbc
SHA51237270fc5d4ca2495bf673544cae2171c0d1242c4d9944a082ab52efcdafd8407e3af2942bba5a95c634467cfc026404bee9666598eab5a7bb2a0f2f908ded562
-
Filesize
18KB
MD502f40652fa7d4b1c0cff322099e9c8b4
SHA1bca990c9303a2a9686fffda92bbc4f7c1d8860fd
SHA25658572413a1e7791a8c32081fe85f199a512767258c2f5fc7600974e5e23e2e93
SHA5129af6100ba9ab84c711a3e0d1521091f00cb42a3ede5773a640977bb585af65ad232eada4cb9c47fe888dd195300fcaaf4f4bf659d6c659ba08274cc27c7623f1
-
Filesize
11KB
MD58ad8553d0e50b051d7c281433f7a1fbd
SHA1082f0d2ef2a126a3abfa3e3d40b875c98decdd96
SHA256c9b6fc8e423cacc0e8c83a823c33d609e5f04052285a7f3567760d80c299ad84
SHA5129e079f8ff28f8636ed1857a4fa1d78726df998d759781fd94d2a23aecd93bc6b149440aca72047fda2413d536c7175b8bfdb5f73465a176e4937dc39b7c7ac98
-
Filesize
19KB
MD5ea40ffcdb05770b64fcecd387f463036
SHA118c190dc2e05a24a5d87c86324ca2ef6ac21a096
SHA2565e5fb89a8e900d5de9644da4f0ce1a49a2215c6ce23ca58263a906046f015b22
SHA5128bc6ba92a6b777ee432baad65a00d59b0729c8a891364455d22e0baac225a98402858d758118c26470ffb918fb736d8227417a600e8a284abda0fec14c034764
-
Filesize
22KB
MD5be907adb5369b7016d0bdf8e5759de9c
SHA1b82600223f671d0295b051ebdb2f8a01e1ea02a6
SHA256e0ab4c58c25b687813b8b80fa52767b99ef411553046490c8d1e4007992c5b8b
SHA512726704ccaa8c1129a1c86a5f8098cfc30d96b6ad60ebf477f110df37be887a7afe6f364d6ec2188b1a432ccfea0fe69fb367465da5e6fbd8108eb3442012390e
-
Filesize
18KB
MD5448fec3705ac5824622785b60731a104
SHA1bf7dac1e73ab305b76a418da699c2bef1c133991
SHA2561f8be9319e79121167baaf66879cf74ca56b040f47b9f64c0746fd81e4c8cd32
SHA512bf70a1b50f1ab873802b57a12f0421493f41195d2bc2dca8e764f2440f3a8eb1434736af56df93d257da5af25bc35f441944cb314bb4b5528b5ea152097b880b
-
Filesize
20KB
MD5a22e4e903837cf62db0e211ff030a0c6
SHA1af600298cb4107934aedf76fd19c56d22cd12d69
SHA2565b097deac030a25613a3753997b55dba35e86f29284abc2674eb366b53a9313f
SHA512e9002b4c3365e4f013752f6b47ac0fd4f660c9e13798b0786ee5f72b76f71bd72627ef24af7da50514e7295a78bc481ce94f006b812b210d99cd0aec5e70afa1
-
Filesize
19KB
MD5bc26cb833ba8db8f5745b37c81b3a4c4
SHA1105c899440a09a087a41ed94e6273dee8bd409e3
SHA2568c7231d300bb1fb4e40f46b9a4eb895d90e3668b61d319a57bae237cf29c6d52
SHA512d740456f70182fc95167863e8be569470ff40f8d230093cc731aad6cf6c468269689177ed59c5fec8c926ed070a1badf584c56a454125943d64be40d137f3e30
-
Filesize
18KB
MD5b00e6747ea7fdc141637549b0fcee682
SHA16ec0a30bdd9eeb003683974ef07f440f3272a735
SHA256d01f069e2b03be602cf9925decda62a76745777ea550efa24947c100e5a8965a
SHA5126f08afccbb04048f9b57eaa95ca66da09a44b2c59ab7726533f8acf6640428c3465a4d072bad9eacb8473ddc72b53b2e7337978502c3552e4dcbcdc766edba38
-
Filesize
27KB
MD5be9142097279230a106c19ec9e9f0955
SHA1cd8d5c9fe2d202f3bc37814c3c4458fc1da5f285
SHA256176eb95105f6919fcccd5d440fb081bdcd47e1eb90184a12939d64dc40d0b10e
SHA512670e0edfa2ecac6c2b49dc3deca89b6c52586ce426443510c6f3f2230ceb327ecb78ea567ad00a43460364a4a5087149975607d7579757b20c4288c83b8a527d
-
Filesize
26KB
MD5a29c6a94d00f439808e3cdc07e8b7cdd
SHA10fc6fe1494e6992d918fa6e193800bbe71a54ace
SHA25690d5334d0e5066d33a1579d4a459ee84987bfca79da8bae6d164a3d3c2639eb9
SHA51221b353467ea246628cae849eef5a96b2b5c6785283c9b41c15f860bedfa1558fd3c124288d24a4894cd788f4cbc93014661dcbac81eab9a288d4bb9010a44ec0
-
Filesize
69KB
MD5371d6c8d0b8f2b3409baa97a6e7b8edc
SHA19aa2d36e6d5e7e212dda729d8794bf532cde74f3
SHA256140331a28b35aa3da27025e0e02405d99124f04cfbaa6fa11ed53bacf7668f51
SHA5123d7c8e08296eeb6c825cc8bc25da9ac9f39a24d6e349145634e0430ea1b93c6754e1340a70253d89a89f644282c8e4aa6a8a33f4d433afb48e16fa9d591025b5
-
Filesize
19KB
MD52a42dee56b541ef02ca6ff9df652812c
SHA159532e58c734b03e1d58b9c3b325166d43f38002
SHA256b95e55fd9cb0cf1cdb945d8e6e466d4e456ec36f61fcdf95f91605cace55fb45
SHA5127b6e693be5d8aebdd67eda358fdc20421dfab095eba4160358357b113240bbc496cb63cd825fb84fccac26722bab0d35111140339ab4babf497798afe141321f
-
Filesize
22KB
MD57f894e9559efa6e1e7de2620eaaa8822
SHA1344fa3f40c76be18450a29820830fc1c0efe254e
SHA256ff0aa8ccb7a5fc48b84dadf748ac08459d1c8d6ee0d66f7ba344742b17ae99f7
SHA5127cb08deb61ff30b49655b239a7d013664f844762570a24d32e467f2a2bf6a46dd4eec994681cf0cd207d404d002516caf8d548e590ac5c8e62379422c9a386b2
-
Filesize
24KB
MD532009914cc1100f2b2fc733d3204c818
SHA170abfc57cfb0c6bf5b19a8bab491a5de2ac8155b
SHA2562f3ebc9c6ab31e3d30d52081dc9dc7e06437b55cd066c7869e8140a3ee04b0d9
SHA5121e7e7acbe489481bd88ba14ac1c9a7aff0fc6622039a3a9c0b3909bbb65f54bee40ef8d1ae4052eab827fae3719c4b2221a1cbadf924823f233fc0e10c9c5b10
-
Filesize
24KB
MD5f3fb83f7ada9a6ae392e95aeeb2982dc
SHA1e308f400b66086e3ae88505888c74ae4b2294fe7
SHA256ef33f40782dae81e943f598a3516d0bc755ca01fe33f859650d93cc97cc21e3a
SHA512399ac8caf37ffaad988603addac4d0c476b7cb5f6828386409bd73ca3497d0fb5fc171ab76aff40ead5fca336ebf38c635dac7ef3910be6ecc853554a4f69c12
-
Filesize
20KB
MD5ffe828b86dafb72c87daacd701f5315e
SHA16e7dd7d37c9881aa626f8edc721e82aab4206e66
SHA256bf3d0e8d488586a607793eacd8f3239643a96ff4061dc3b2844d7e71822cbe62
SHA512ec104fd8539293576e444ac26cb0a54038745822fd29c7b7b83d58e9dd7027d4724a98dbcf4d307cb34b20eba711b2eed161f72512998c1031490ccca70f13ed
-
Filesize
18KB
MD53f2dd3b342218a86e8ed7f12e4fed923
SHA1acc90e05a74b84a5fb1731cfab668f756a2ed591
SHA256706e57ce385f2fc62d5d4dea9a77770ac95d94259c39195c2fae6eb6ee458785
SHA5123fea469759a30cb8c97526e9455f0998790a92232df7143b06a7e34788ea144e2e262feaa731066902041dddb6f79c1857da03e3fea12345af54bbccc1027917
-
Filesize
324KB
MD54ef5430ebb937efa952b48b8193da9e0
SHA1ed0f88827b74920e3b7aded046eceedb4f4ae75f
SHA25649572103f6949d2d106214500b22d199f5eaf21476f8bd09d29ebe21ba7fa9dd
SHA5123afbc1966cd435085defcbcaff229cd4b13c474d5e114921db716517799de50be2142166f200345555cb509614549ddc18d58b94621460d412c1d8358d73c71e
-
Filesize
358KB
MD59ccecd0045d1f40f4fa7fec3ea5b09f7
SHA17aff947e86f7f9dba2f429be780e22f613abc502
SHA256c905bd68500f53af2236759dfa46fce7496f392fc6413008e76a0e5ae9b9e5ea
SHA512d0737f7e51bc77a18b9da3cf347f0c72eeadeff393c3c67c62a56082a9006cf71cce475e4d382fefc60235659f01409820919f286804a0fbe834255b858eab19
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\mfc140u.dll
Filesize5.6MB
MD52062619ad66bc77cb50835e0c4758e28
SHA1261ffac5cfda51ba2b3cb4128cf9502ba00292ff
SHA2561e993ab3be444334aac03463310fbdde8c7faabde31178fb4f4d965da9574cd7
SHA512d080b971cde7b035c17d2684db44293d88bce291cf059afa6364ceb7011af3c22c3bcaf7cad15b10d0c0fbb332f3caafa33dee4c9a71aa4505558a5a7ad392e4
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcp120.dll
Filesize644KB
MD51d64fff0c60b18aabbe212ccdc82be16
SHA16138aaf43db697409b6545cc829e1310f7e09be6
SHA2562b1e2b607320be2327c4c4792cb34e4391a218ab7828619894afeed3291ed3c2
SHA5123eac98aff06aa325c54cddf8ab91215e182d790392abe826727b7ac4505e804068ce4fa01b65ce3fc1f6922079f9e1f7c7693944c42e677c7b6421eeec7c96e4
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcp140.dll
Filesize613KB
MD58dc165b0e874c842473e92b4f94d5feb
SHA1c028a6f3fd4c2810f5c8350067679bb3aa329937
SHA2567727c308137fb78b6f7c7b8505665650dbfa4b22ece4d28cf8c63723307da994
SHA5129a6acee3e73ca035465ac43cf5b28e08eacbd336e8bd4e84d2817569a368501ddb937e1171862d056eb510f4124b1281a49f534ac8ce2f914e8b6dc5e8dcee26
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcr120.dll
Filesize940KB
MD562f48b2331f314b66f205271b5720c01
SHA1b89e369930308dd054f6e55820accbf21953e88f
SHA25643ef2aba27246414b359419e5302e830edac54c43226276f902116676ce4b117
SHA5125559ab2516116f540a46402928745d671e809080fd7aef15bb55004813018d81e70b8b4b970886933b23e405e5017150ba955fbe0dda0b3138ff51931832c7f0
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\vcruntime140.dll
Filesize83KB
MD53d78fd376c96412a5829e3f677bdb4d6
SHA144b63cf03088bc4de9825ef7e1d97109a4dcf37b
SHA256e76eb4529faffeb595672ebe388b035eda864438af8fada820c8f415595681a2
SHA512577dcf95b49bbfab91567be41530e15cf973b26ab99dd8aff7eb41bd8fd455284b50018cfca89482d97588d7a9bb35661a186efdcc3e1ad9ad1f3451352bf082
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-file-l1-2-0.dll
Filesize18KB
MD5124e2839e35600c2e7b9ebc2fefdc03a
SHA1acb50504d12c71c379e80a8cd23e4cb16a3f55c8
SHA256cd237f02b47d04e9553602e998ccbd66abb7cca508dc05ab4e7439973b7a9b0d
SHA5129dfde086cc992f6ec20a0c1fa69d12497bf2baa60f84dc2c2582a60e983d94fb6017d0dc381c5301e70b4017bb5c230b9e1b691631ffbe6b235488505db3a67b
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-file-l2-1-0.dll
Filesize18KB
MD5a615e9d0b9f1c77f1c713a9d25980559
SHA141a96db3d51019892217ac694b3d3f3665ea642b
SHA256009aaa1f322fb10a8800c9dc10151041f9a69923b63a45c6d1fc9e105647e533
SHA512797a406f9d626e7945ed8abcc1f7936cd2fca066d60099da82dfddfbd0d781e6e81ee707b7e816fc31d5164fd8f87db347ed3a4171aa1976b16ddf726e036911
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-localization-l1-2-0.dll
Filesize20KB
MD512cea62b9181b1869891ecb699586019
SHA1dc8fa9998fe9bba65744a40c24ed2f62b9dba9a5
SHA256b0bcca8c29661bfa3d92e32f35cd865d2a70366ff342e81d380f9d8fdaf48b97
SHA512d8d9e689a742bd344798d67612f4d366de60eac73597a92508e272374d96e637189e5b733a28dc4e5595719333d739df0a2d2355550910f1d033340387eed631
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-processthreads-l1-1-1.dll
Filesize18KB
MD57b77551a24cef4ed9ce0ffa68da2a9fc
SHA1c495b46263182cc70d668d98773dcb202019d387
SHA256a458684dc4e0f417d7ba24456a3d68e04e4402cc84c6a812dc4457135f16e44a
SHA51266042273dbac51f5953be9b2f07b78ed7eb145e016304f0c3e85dbe19a5b6ba63e3be06d40deb42097ac1a375e293b062cff410acc7a0f07fe595224a41838c4
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-synch-l1-2-0.dll
Filesize18KB
MD538aa020bc758a4b136332818f5092030
SHA1b578b9efcafffeb2a32eb24ebb4ecf8ebfa41689
SHA256eb5061d46a7e48834abc452e354a4e38b3893642bf6b7ca306d0c6a07fa5d67d
SHA5120c2bcccefa7d3e52f02b210b910131ba05ab299b169188467f89665a63cea0856cd623fe97c5ad059a987feaac0c0650d08587b1b13132a1c8f8e4c455ec054f
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-timezone-l1-1-0.dll
Filesize18KB
MD52efffaa4e042c8456fb96d7fb6dffeba
SHA1a4cfaaa26deedb4ae47a55f4061e8c64117323b1
SHA2562eb1dc3f5fe5fba71b606a8b4ee8fcd96c2b74bcd62f6ec0a5860a1535f1cdf7
SHA512c7c0ec2402c462cfc26fd6e181779ed0a7fac4be1706dc88d00e935ca298ca9eab184f572be114d6274bd92e892b4a1803839919784bd50e3dfb042a480d240a
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-xstate-l2-1-0.dll
Filesize11KB
MD51a1c76f983184046ab006f36b9fd11c7
SHA1830e510e104ecdec381bdfc3d3aa49fc85f976dd
SHA256566bddc1b1b7443f06e2161676bb58fc1fbc2f98f92517ba787d20ff418d83ab
SHA512f4a7904570ed717fcb2f755229377504d5816bfb42f145ebec328fe15b68544365ebcc1d3b41262d55230f50ed7fdbc80b21eb470dae0a1d4f3234528af58be5
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-conio-l1-1-0.dll
Filesize19KB
MD5dc5c8049a344bb3b53b2580b4a6a219b
SHA1c7aa48449e37f21d51a4dd460995ab531fb57773
SHA25651c0ea5053997999185a5903ed5d88e36c64a11cd02e22bf4a6664b2e322976f
SHA512da710889e9203197da67fadcea3c0faa01b0973dab97a1e13302081e510397cdd52f932b3fb3e4b428515ca07d61ee1f01b6f52c3ae5c6b7ccf77771154175dc
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-convert-l1-1-0.dll
Filesize22KB
MD5e7faa489a18e1d1e34e8428ca30b1b16
SHA12baedea727eda7ea021c879f06668db0194c5243
SHA256b91a949f5057085207aac94159aa82b2efed74a84c4a22bbfef0206182e269d6
SHA512b6c1f973e7a632988d4a401fe5ad9d4498af1717ffce05b206684e6daac90717dc0b9eff19f73f50cb03dbc7f47b3f0e84fd5fbe38aff8c15f4e42f6d9f45bc0
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-environment-l1-1-0.dll
Filesize18KB
MD5b7d468b26b59f2eec88c4c8d26e6c330
SHA1aa0351b206c2d98b59f49f24b85160d7a3f0e3dd
SHA256c0584cc2f63aa6666018e3a5bb1cc65e2e997a2cb65953aad4fdeed1a9eed55b
SHA51259f58a6e4d7cb01d2902590f14aec378503e46fadda2cb5c19bdc6fa118070cc431037dca05c16efe9cbbb2646a91f07a00122b67ec30fb5ca60250cca37f59f
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-filesystem-l1-1-0.dll
Filesize20KB
MD58ab6a110f6d157420e588aa8cf092bb1
SHA141fac326c262d9ff4a8b69d121b908db7bb844ad
SHA2560d9692b5fe44b8d90cdd3c30ff82a308a2dc22b91620ee4eab5f1aad9efc4f73
SHA512bca55389031b256f5d961625fd1db9e6d115c0722b194f9d18b23cc1e4a2c069e3dbd5b8d8fadccfe73f39612aa518415127da058af3ec5ef1017d23a4c40231
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-heap-l1-1-0.dll
Filesize19KB
MD5f25fade057e8e2716424e8137b73f613
SHA1e800a9327491a6d87b34d11b9861089d356143fc
SHA25643e9ed575571f91f5c0d340b8037984e73bef63712472d18e4461f88629caec1
SHA5120efcf2d18576fc94dca65a504ce57dac7bcf72697090c779f30c8ec8ed7404242ba862311601f96b866d5c3491b533cff8fc1d4b40c8e34d67e0e26ebebf1d85
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-locale-l1-1-0.dll
Filesize18KB
MD54ca0ebc455a1d63e4b8271fae7e1c05c
SHA18b3ec46fb5052b22d2137d2c4a9c80f17feca090
SHA256308309e73bd57b369c7ec2237571780685e5a6d724f3e01673deb71cc356fccb
SHA512f524e417d0a341b3fb7b7876a0b2b331533199f04fe0ca74ad238f43d388cb795c1126ce60e246740e13f35741bcfba520f7deee6a0adab472700118739532be
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-math-l1-1-0.dll
Filesize28KB
MD5bfc5bbf69edce02fe806622e84d495e7
SHA11bba32d883f1da70f887e4d25bbee267eac97fb5
SHA256b0dea98882eb86a71812d0130aa93346519cbe0a59ee6633a774eb16f9c4a686
SHA5123a7731c4bcbcf2e818b6df508fdf34eda98bb380362d33e923585ea215ee36afbd28861c0d2899097c655995096a1745b97668313efa0a24cd57974d910c6024
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-multibyte-l1-1-0.dll
Filesize26KB
MD52b0da35d8dbb746daf36062140f6bfb4
SHA1951778c8ad26cb9c908e83c5eb7d4fe8a53e7ec3
SHA256596857ac50919b7b71590681bd5b26e9270a947a00523a069fd164347684ecd5
SHA5128a701d85a07b08f3c7d6d9507092ff4a40c029f599924b728d39b1c34948382ada5388a8739603c2971e67ad3a57373a58d034448a9e2b8f9a853494fc6bd321
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-private-l1-1-0.dll
Filesize71KB
MD574da2f1636e79ebbe2276c09936727af
SHA1c7984910049b95332bb2d543be9fc198cf068ed4
SHA256942937d3a7b9c07788c93ff1c5f2e3dce60531bcf619ceded6fc7be015f7a1ea
SHA5127e8025301a641d20d196d96722d8bd90d11fb7e722e394461543de52daa262b0d1d6daaf68ca67c1e1c3a8ac06966e202bd1fe9c4dc09e4d72009b2e39bd19af
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-process-l1-1-0.dll
Filesize19KB
MD589798e7a3a8fd9a7fca5761ef046a071
SHA1d5ae79041e3cd0002ef9237da08adab0ba0b221d
SHA256a9a77c93cdb80e98baec38940dc5efbbc1dca98238a1e04d18b124c0bcfc577a
SHA51277ca5d80f8447522f3141a1156ab298076391d7595bacf1fb2e19aee811b40b9aa66d92564c74518c49404669ef2766d4baa74ebd514ca04e50a4fb00c4023d7
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-runtime-l1-1-0.dll
Filesize22KB
MD57705eabf382b46da1590e68d68d5d779
SHA1fd62c8c7ebbf205d0df56247d5589dae5236e13f
SHA256754e3a7fc028b84f60a4a95d73df98cce6618b0c2d1f5d3d817849333563469e
SHA5127e824b886326dd936018add57299db0c24a02f7c597a3650470fc3c5b2e1274fdf35d71ea4c92393cfa57b0dda697d56e95389be0e7e55582acf77b955df5699
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-stdio-l1-1-0.dll
Filesize24KB
MD546226ac626dc36229c737bc31475f046
SHA1345e5949d0d8dad37b1d55e282e32b1f5ffcb272
SHA256025d788c496ea34ff2b7f7d19d9e96fd7b2ce5d40cae6465b58bf730e2859a3a
SHA512b5e30bd2829fbc90e05038f4a21a0baa137eae8aa190a5f624517d16b495ddfd0353603d2088d7a17d4531bc2e87b9a6c868145c06c7b0bd3657d2b63b57e701
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-string-l1-1-0.dll
Filesize24KB
MD52b7a4c2ff0516603c2f0452438ef57a0
SHA19a7376c653080bf4ec82273fb318dbefb30b0824
SHA256c576e5731c89ad27fe71d5a5944b3e8acefc297425eadf1504b063b64e90e43b
SHA51282714afe1ccba510eef6b759ab81b3138d4c34d5e949a2fdfef0940f4595a22704ce84d4b04183c6b24bd3065145cfade4b48dd25fb8612fd8e310005b2562a7
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-time-l1-1-0.dll
Filesize20KB
MD5755db01d0b1f0d70625615ea7fb6c57e
SHA1c3dd97c9045013223426a6c704ebe9d3c7714e22
SHA256be4cd96c82918ed51bcdf5048a5f873d5d059e82e2bcd98022120cf1887c13f3
SHA512f5abb05e9f3e818471a276f2288049d7287568386baa56ae5d88a91c7d096afff6d4b2272c4ddcccf230d7712055dec48fd8f38af6a6f53d967887fab501a9de
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-utility-l1-1-0.dll
Filesize18KB
MD592f92a6a30f0ba7962ebce2ac70ae899
SHA128091a218a61026690d6b709a728a23afe7b63b3
SHA256181944f5bb8f95e5ada3c2f13a328a27e9b014d6ec464286703df5087ceff8d8
SHA512b498f1d3c91dc721872b5d1b6075ce91b5da2be4ce909d103fed1eba165d9320f1b4424c3dfb15aa010330e4c4c6ae10ff388dc04d9310d07ec1b5742c8f73f6
-
Filesize
244KB
MD54e28d014430e11ce764ba69acd3c4e53
SHA196c1fe4eea1bd7cba56d89a81f98a1dcfd9d5490
SHA2564d687606fef2d2a621c14543520a0c687caf790bf49c307e16cad68958189911
SHA512f151defe4224d6ecdf11ed61114c0d9a0b94fee0a80fde3c20ae3b468eaf1d9ad94d346c694dcdf024224cb29bd9a65a7dadf88f34b272bb0fd4d3300b7889b5
-
Filesize
4.8MB
MD54f2bc71c13eca72bd143433e24051871
SHA1942adb7cdedac28c55a40779847ae5e817785646
SHA256b83703ea058eb10909ee79fda06577c6ee90f9a6b29eba06f28e648e24851528
SHA51295e950a7277255a1c0407d4c1ba41407fb84cb67ab794d6719e20c244ccb9247cacdec235f827cb3b897b584d765eb90e7c290aa658bcebba0cffc8357117526
-
Filesize
444KB
MD53b3557d07d806a18ef89271d632c5dbe
SHA18abe8f21bc82012a84e32f035333e2a90fa5f412
SHA2563c475a18f861b60a0ee602c05c0846cd95012b9f543bb49d2ad8ea0c2a038a37
SHA512569153e39f70c32032d90d0953ed6457bd82a200e005f280eab3bf04dafe2fda11227c2fca3cc7ab6933177c58192e766e6da70193139aa3ce125ede527cff03
-
Filesize
439KB
MD5f20adfd3a3b80edbbd25ccd107dba62d
SHA1a36bbae198649fcac2d36dc4f3c38e864d4ff379
SHA256318fa9eeedd1002852e3bb4ec2fe371152d8faca8bfedb9e1f5b11c924ccae65
SHA512669225051ce67e01ef082529f8682d765cb278a417bbc5abad2181891293783f6369de6bae6a741de2ff234f421b975a3b55e652821c424adc4170e55b08f3b0
-
Filesize
946KB
MD561eb39414b2e5343ace71dbc70ed7b92
SHA1d9526b8ff5618f14e1aceead0d9601486cd67906
SHA2567be6ffc6556d19db997fd7aa9a8acc33dd82e3575bb82912e73b079ee7c9109b
SHA51233ecfa883dbd0213d98d6bf77db9551c31d81c3d785c9dbe137d1f5c3722c4a70bee08e0770cd4b3d28fc9970bda5ad39bce85d2c77ad4e9aa50eff153b60097
-
Filesize
879KB
MD57ad9c800e9405d07e791d5a4361906a1
SHA118e827a6d4e38961afa7cde514519fddbdca4431
SHA256ed230d645a57e74736896ac42819ba7eae9872bdee45518928eb628b8d29171b
SHA5127363484a8a35d73ee2311785ba4df79b09693e0f2776dd591d9baf99bc7ca952507f49d661f84d0d5dadf99edaf105743237042cb9d8bdf94b8039070ece56c2
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\vccorlib140.dll
Filesize263KB
MD5e0b6cfb6193d3e1039bae1ab7efd1dd2
SHA1a31869d47b0b5af39d3399a420a34bf2d4cf32a6
SHA256afb726a6e749a79dfbc64791add0abd3b11b94a988683a14300e396025ad7f7b
SHA5125529eae7fb055d48cd388366f32564c33b5f7191aec12bea547ef3ea0902072e3480f539fa67bb9b375614e11076fe901aa6fed0929edef60468203ac1a056ff
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\vcruntime140.dll
Filesize78KB
MD5ccc94197977eac0445aebc5b103ffa9b
SHA12a61da58b468bc52d3126c10f0888cb473493426
SHA256c6497275f4111af6ec496fb9fb0b91963d268758769ea6bb9f5747e14e40be04
SHA5121fded2f57d59625974496201f51c81c06ccb82674bb90fff1e74e1ce2572cdf7f061dad1b123269711d71562f3a6e30c522da3440f1db1876a7f52ce3c671ba9
-
C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-040C-1000-0000000FF1CE}\misc.exe
Filesize1014KB
MD51ba1ddde839c64204680d03d468ba77f
SHA160fe2e08285a336f9fe40ba611985601a881a86c
SHA256d3f9f10cfe668b57a725b57282d9c8198c444ab64e5eb333e16376b24ed8467c
SHA512b43bc925b4843eb120ae66d5125406b9f1a23f8402168445dfc972ce86a3a5deeb5eb0e8e5b76864cb0dabf9cdb15bec864639714b5d73fddaf2668cd2ae6510
-
Filesize
1.8MB
MD5bdd0627554b6263c84cb9297b185a8f6
SHA13ac19fd209a5e0ba979e5a46198208c6b16743d9
SHA2564c34afee7b1f75e5b4d73d71d04e54fba0931dfddf8a17c6c3e4f99726aa53be
SHA512c13838c33aabe3404e8c3d9bebb1ce27dcc2dd04262395bc1e6f8d4dd42f9dca91c5fc9aca35649bb8852989c0c8e3e698f190618b09f22efd6d5159eaaf477a
-
Filesize
4.7MB
MD5c91d4b49a540e2484f0cb633e1d19685
SHA1f21d5fe3d5ebfdede28000bb038d58487bf33f83
SHA256e67a5c0ebbad6dc7bf24d971625c4b3763805cffbf0af65ca2c61197ce0d6b8f
SHA51217ea5959b997e36ca05d62a0d1842cdfcd64b21a0d19f905fd55bfa943b76ed88c7431b7e18495f51a8d4c1cafa128eb24ef71a54db4fd38a63d1b121f8eaa25
-
Filesize
116KB
MD52dcdc9f21f8b04dd61cff1c07fd11676
SHA1d3ea958c6da38c05b51f2ef691ea8026415af4b0
SHA25607e2e3045612017676629231046d29e74ee96d9a4a27bde7c3df1adb0d1d1d41
SHA512184ad0a337b7d1574b748172dfde27927b296f6e8fcc53f058228c342cb91c0bef02b4b0554c165cd43c076c06109cc958e4505eab549a17a9ae300c9f86b116
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727656060295712.txt
Filesize77KB
MD52d1434096d8e273567b9dafec10fd5bc
SHA11cf4d3a3e7c7d775c91e47147845fc0874bcce22
SHA256b0fa2f0de9864b62278bba5e015647e2d65c5d10721747571e6042057fac4329
SHA5120b82c714e3d72ffe7e89e2f37d91f54ee0ec6e5d27303588befb7ad980dbe8adee4b8f3da650e8fbb594f63bd534b155f78aaca375297ef405ae8f6c85dfe204
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727656525478361.txt
Filesize47KB
MD586c66b152faa706f41cff09610c31b61
SHA1f6c0f6dad84ff54f727733f82d0d3aa99c9e8c44
SHA2561a25127def71254dab745c1336bf152ec3090189ea36d70b99da381420fb3bf5
SHA51274ff97923b530153bc381808cc4ba363af9fc1aedd031f6e57618a05ccca239516234b0ac55da4669a058976f011ac6a6baf6eee8b56f9b47f39e416fc36af1c
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727663169040966.txt
Filesize63KB
MD5f3482b29bcb0e27f7b7f68b95c31f2fd
SHA18b3a8b69814a73836ce911269798928b0c6a5e09
SHA256d8454c702d10f57c24875279f678e0d6e3e1b77aee978ca61260a4981bad5851
SHA512ecf61aac72e2b5db3fc4845737e70959f0fcb40bcc5b843d19b54eac865ca96059eda120d30cb9bdb23a32bd01047efc398f086374a972749dfa450fe9caf695
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133727665885684530.txt
Filesize74KB
MD5ec8ff725d95ef04460ffed54ffa1cfa0
SHA1d151648384d84237542583b6b1c20a06f5b06a23
SHA2562d51e826f89f6e66a6dc2a1eec4637b81e92e8420bda0cea830705ba89f0fcae
SHA5121e8cf7269af648e8e549e76113a42d9862a1ddd6c5f726b39eb344439e7e5fb5b043f5968e645d0b1079ec806d9d89b16307c24d1384a8667e01e9f929f8c58a
-
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk
Filesize407B
MD51a1ed623fdfb339bea591a60962848f9
SHA1b230a6f4ccb456970bac258426911cee4bd17edd
SHA2569bd13ceb5b361761f7c56126321855dbc9339599588d6404f895e23695f28d20
SHA512bb1fa1b5ac6f407c2d6551b07a3edc137b602ad9c51bd8d1220b339bfa5fb68770ad1378e28d4a4337a0d93a15ad3a9eae16de3770154622f1a947fde2732f5d
-
Filesize
21KB
MD5199af51d820d5296b1fd2659318615e2
SHA19c412c1ff2fd88b26496438f284a820130b5affb
SHA2560c57060c398e38f009b4d5b3ac7217b97159f68773d6609bb35eb121a98f302c
SHA51254210c09d02dcbed4531f679e1b8d5434a726f0f971ce69d7d503b8522ef27b5648b75f47a4c09d3d62e419156f3513c3199ad9b562c179346873c95a26f65cf
-
Filesize
1KB
MD568e0d1d6d9415b47a56c5c3a6d4073ad
SHA1c0b72182f24755f15bdec56f807cef6af8c95089
SHA2561c5d866c2331d056e7a07469e17a9f9d797682081c2a6dbc049344081e2d2403
SHA5124aa51d0c0e3057e0d69d76b2164d8cdff07961b0e1740d74ec291bf65d4b0473a201505494c531241fae1fe45e9de7f54da033702a522ae4c14879e9aecda088
-
Filesize
952B
MD551202394ec04e2141c7cb699fa24efeb
SHA1ad8191d25a9bd89e6ea060ec99a4660ac0091479
SHA2569b2e36a23743afc0a85113daa5df2894c2a0b06cbad634877b47ac44dbdd153a
SHA512ca72f86a8de472f170144a5d52e55d43137f32e347a943df2446d20e73ac0ab7e0d753d9a498f0ff9168609c214e0ee66b0e5bccecd6bc694a40b608f9815161
-
Filesize
121B
MD520c8e48a9252b20dabbaae6f3f7fe964
SHA1a6581121fa114ef0588c355a52c5067cb74a3716
SHA2566186f7dfef7ee48fe0301ce0353fee05ceed7b850cc3f94126a98e69935c5ade
SHA5125520ffdc12a8031a2dc36de1c51fa379e725ed67067d219e762da17fd85ea99cde9d37bd783b6772556717cce905191931eae49cfb68bcee0161be6ca9a51c5b
-
Filesize
1KB
MD5935296bb2785ec1ef58a3c11cddefbc0
SHA1ff27dbeb966e13a71a2b095e721c06820ec801ac
SHA256d12c4d1da11c67b07e710dfc55464c1f1124885658024b96595f944ff195744a
SHA512796158e180a11d458522400a9b458e6362b6d80a15279e3aa35c4e0075fc227b099ed6d2e0acbd43fcb12324f056ba978a0391358000537bbd313d65a213dea7
-
Filesize
8KB
MD54fd6c33bf786e90af8c39a41c2ead050
SHA145e3a496075b02c44cc98c01f8fc16cd57bf1078
SHA2565f3caf10556e0104353cce87d87ed05d196347da98e719b066b91dc1f8f3a61d
SHA512d833a0fe72da0134c1b539ab43010578ef7539f9347f369dc600ded04a7bec9bd19d0f668c5490ad0f21e5e819a0d7a338b3ad2cf37b413505a6a075a83fd2d6
-
Filesize
914B
MD53bb3e74879efe4d9708bf46c94edfd35
SHA1d4c4993b64951e43312d4cdac4c5c312a0fa186e
SHA2561c259f56059d7fb9a3925a9614c9fd571ce1cf547373c21ea46bd18a53a268dd
SHA512738a4fdd901e8277fdadce85f02f2a68d3ab097a90a461be25e8cfaeb3123a5c9a4fb5b1951e7d5d0a2bda9472f97a29c40baf878ad3b75cc6b0835e7383058c
-
Filesize
90B
MD5435a7d0a8ffb995138b68ae1b83b0103
SHA16d58d94d2588688f35c0eb74c4f5ba7efc50c091
SHA256eb363739f1a3552750c219cce7c3412ab5f437ae1ed6cac3b53adf5b0620a232
SHA5121921f0b80bbcc5019cfc4993072bc7878d9399e84cb20614f807e18f45221c7d44d21fdbee1e30df8cceb0d0f68f0091e49bf1865eebb575ed757d820326757d
-
Filesize
90B
MD5a4858bdfc6a8c2f77c7666b9cba76f0c
SHA13d6bc50e18d155c41261435546c028e9bfac5d9d
SHA256524d28a45b8635deaef0e96cbeb656e30e3c2a3089519d3c0b87ebfe1960c4de
SHA51292d56756f47453801b0645769a4590fcf2e03847f054f65d875c2c6e891c34b7b379719e8096a804a41bb5e9697fa19dd7e2af79ec1430430db5ae9214140b66
-
Filesize
328B
MD5bc7c7e53bfae48a660394298cc875a8e
SHA11f4dd4df23bab796701da467b366e7c808a34334
SHA2560fa258fa026e8be8f4dcebc8f22157127ccf698a6b2d955aa93d987b057b7b77
SHA5121e86dbb9b03ea9db0af476b9032d17facd369f557d578e7f2dbf11e00cd3e6b4af670945adaa72f6e65e2eaac1030b403dda998ffbc3a69eb3ca04e2072b9421
-
Filesize
1KB
MD57436d3608e39cd3d28b067f46b859c6e
SHA14214e7a2a7e3199d119099fb4a2840d7c134824e
SHA2566693b0d6b5831ece3825fdc82e7cfea45cab038db6a974e7ed76a3460a2ef8d9
SHA512469c32d9bbaff66e88a816fd4b9539ac5fb171e4907d77d24047de002b44b71de2cb367bf2566778964c8acc3f399e617b8cdfb2eb7a4bc37962736d4d58dc99
-
Filesize
162B
MD5bc5cf9c43378099d0f044a70c42a69ed
SHA18aaafa38af5605ad728a19fb1107026677b5abc0
SHA256d4ea95d73287487a3a125e242f78dff93c1bab95f7f7a4f89db921a76a5eac10
SHA512b334bcd7e5e3c4f334fd48a2f968b4da0724c0d0037075c940dc4ef4db1bd58ec58b3b0cf0c2010038dbe9f00d66c266ed8c7bd355f63d694aeca0405f169086
-
Filesize
586B
MD5b0405c101292987cab93a79d356e9095
SHA199fb0ca1f5692aaf770a00f4ad8614edf4831441
SHA256a6cc92603530da40b321c5e6d9f0f339a699c19d550d0775ac8a56d7b1ccc0fd
SHA512f0f642888d908bb40a199b2f5e0b8104a9d54aecca95502644174b91725cb8f32b81ac937ba776ec91132f0fef6af2bd0e05fd9b7b7dbab43bbaf65d4808e52d
-
Filesize
124B
MD55a6f634741f69a91b244338cc36ee6c8
SHA13516da99e88c6d9985a2a7f1d32a8676e7c866c6
SHA256605a53c709d4bc4e011481492da730b378536f59e73c00d39be7676f51bf24a3
SHA512eb52796009b796fa2bdb9b42eca81a806a7bf4f19699e343340bd1002fc850ddad989854b7d5fd38280c7f7182f3855b5df0475903de835b3a4f1b605b42375e
-
Filesize
8KB
MD50a8316794d05ffd1947b5bfd953663e3
SHA1320e9f674d3578204d73dbf1f4a065d6a560f28e
SHA256f01afb5b0de2001b8569f01c0da71ac16fc6d364fa3daeca28ab481a1784403c
SHA5127ca62b4b725f8c0e0c319f20f5e64c25413c1bb136a815a04568def2d90452fa7e7736e32e44db2d0469ffb32e61ee838f5b5cf5303e6641dda2ff336d12652d
-
Filesize
880B
MD599038dbbfd53ddd09788e38bbdb5ccc1
SHA1683d98242860ede5b798fe26ce3b65b31a2ed2d3
SHA256a8c0b16698365a9a7583d222cb8e1f850d89ea8155340375e464b656f3c20cf6
SHA5125146fed94d560b8a901953b2ba345f017d81c4a5d165574884714adc63e18147fe390e4084bebe774308bd316ff7f27b68c6fce767b0fe1242f54f6a4f2912d6
-
Filesize
1KB
MD564bc8f5495d9047f88c2d4f57418e46c
SHA18f288bb546025e7624f02069d632d22621d81039
SHA2564ac93b7ce442dde2dbb8b59364132c0262e9c0610ce292af83ab1a8fa05a2a95
SHA5121687dcc5a9ed0a34efae786a0f69198bc3b464452d16eb3411471939c698642f7e0f021fb73313fb6b2bc663a93a2214a91657048d4dc80e8a38c0e5c66b1feb
-
Filesize
1KB
MD5fae409d85db3db4ca51a9e1eec8063e2
SHA19309d962582594893d12f069273fc924d2aa54e6
SHA2564762ea5fdf367f9a37a70b4feab69586931794ebfc53a56459c187478cf800a6
SHA512c8a2a6fec0df9f731733afdc14a5de7ba356f0406ea6846aaea8afc5efc117db7bb76411834ea68a3aa5328ad10ed3c6d2bfe74074e592afc8313708201f854f
-
Filesize
1KB
MD5e0d5fe2c946a4d372c3b4565903d8f0a
SHA1ff8f26f7949c62f4569784bd6c55392b2f0d6d0c
SHA256761774ad4e0c50ea6669b32e1433843143da5ffb365c274fbdd12e45280bd35c
SHA5120d74e9f5a978312a34a15e181e41643f37efed515aa961a94785a6953067ebbeebb48ebad36fbfbd03ad0aeeb7b67101b1a8bb2a6694f8768c66ec1592f79b2f
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk
Filesize1KB
MD5c297db0fd2f7d5579715c065079c392b
SHA182b07e01d28644e5cf2b4910e26c48320e7372a7
SHA256ff6c647029ab6c2304e28d47866bb29f353bb14fd26cf783582bebf47037ceb5
SHA512751be5758ea4c3c39b4b5b5b513732bb662caa41ba1e77d2ca645e3182b9f1596083e533c0172ef38c824b5357d6fc6606bd611b505d327aa68b3b30c9ef9b3b
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk
Filesize1KB
MD5ed21760e7f7c87608c87de88ccdcb3ef
SHA1e184c8d96e1ba040f850961939ca5cf7df11ec92
SHA256193939a8035df26a0ef13ea1e829d7121db376698149e80348b8dc8477c1d698
SHA512490d6b5f7abb88548da073c93aa206228c8e518bb4d120cac7f0c52c38b48343c9de5b33e97bb4c9f092df84b2ffa09c36eba64bfdd76328c5703cbe5d021a9f
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk
Filesize1021B
MD5d60f3902a952691c8c3b9897ca357235
SHA1b98943ef7c640261d25f7e86cff6d0d64debf780
SHA25628ca80ee9ac171527803df539a1d37ae198be4d9373f48b38e5fe8f4071a5ba4
SHA51265f293abbe1e1e9630b32673cb0010748187a5071497b4648fd0c447ea20c132b63a8e6196614d2a4c8d3889a31fb2a0dbadf0d33a7131d4e795cc39fc1a1720
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk
Filesize1015B
MD5b085504b84ae8869afa9228e80f67861
SHA111ac4686669958b683d441c779f8688761a78372
SHA25660b1bf9fcdf56161c5765ab1cef7f406986fd9078c777461d66455c06452e954
SHA5121a45aea759ce0a24b53093801368fc3a786a555c1256b63a7aafa14a8d9b1790e19155c0b4335956800dcabc4e2ff7a1b3017c8946be5cdff7c9cac1b3fad293
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk
Filesize1KB
MD5672450d20c6a5de3c8730fe4c2d8a134
SHA1414a64bc2e349dd06090b65ea58140d4ce537953
SHA256aea9a014f0acf7a332a47fe790ff2365422fe5810fb6829d1e4b3b084338a361
SHA5122c07e2bdd93603d385e9691ee6295da0d89823f0c44f573d409c7b344acef70cdd2f6b89beb169e36153737d825267737b4842889686bb7e8afd86fa40453915
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk
Filesize1KB
MD52aa98ea4e5a88f091e5bc7557af884f6
SHA12f4c537642131639fe9551cdfe5bf08e3674a495
SHA256aa9ff9fb8087b79f249930be3148c567a774c13682bc3215a903e916ac5cdfa8
SHA512b3ded779479adf63ddfed7448726bcfbd8aded0db7d875319a2f39851027a43f0aad8631e8901c8d398c64165c343f1250503286d3cd99ee6fe2ce77f28f5d49
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk
Filesize1KB
MD5486e1cdbeff5450a9b4ee0b094a0054e
SHA1a2f8edf2283cec465046738a8ce50eb816116859
SHA256e0068c5d51679f56a0b07c6245430b85d2afb3c79d7f39633c15f665737074a1
SHA5128363b03de5ccaa9f22f56cb737a1e2a611ae5b2cf8182918deaf3f7889a8a0a6164dd74391048e9a0ced660696eeb00ef48587257e98b4342d81c208f3d80dbe
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk
Filesize1015B
MD573e6d7868cfea931255419e7918ac1d6
SHA17e49ca25bbae0d37febded02f14f1fcab54cd223
SHA256bad57a9bf544be773800a2bc7f112961279bc08830a146c17038715ea0831bbc
SHA5126b82adea78eb0f8ef129b5c6748d1489638398761fadeed673d4e60e94ee32071dcb4e1dd0b7d4f229fd7b7b2bcbb616d59a7332772404025cc0615c98193fa0
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk
Filesize1015B
MD5970926c139cf1e2e9112ef776fbd9d4b
SHA1cd95d3ce0894c2190c97b2c02694b41c246fc190
SHA256bc831fd4c962158e2d89d6a4e5e57d864798baafc779fa7e3c0686719b2d686f
SHA5121751c16d20e23f5ca43b38f76b171e92142ef0148f7e920e3dd5cb5740cb78d6be1ef4093b2c8e9f93d621a7980f5c1afa152a17b9960381ea7781bdc5873554
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk
Filesize1KB
MD55dbc50e57fdc39bbf0ea3f2de4f0abfc
SHA10dee3b48ecd5cc25882e7994e541fc80ee864f5d
SHA25669498c5d13cffce64c4c14d2b8dd80e66ba63b36764e1a9f752e73d10554e85c
SHA51253bffd5506af2d3dd23e7ecbc1ad513acb12786e6c1501a4cadb097141c9359effdae82e74ead45a615d5ce620d211084a91071fc981379d40778723e005b873
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk
Filesize1KB
MD5ff9b0f7a53aaca32b00d5674e06ef6c3
SHA103cdef10944c4da502e89ecffcaa0557f7239d2e
SHA256f4211f30290335f8ce22adfecd66e12c58c59c2cb224ed544fb807a01a97499c
SHA512fab4ba01c9613f62a1ccbaed13ab80fc0cabbd9c353e8718a274531ee895ad6993e0034898108ec9973b994b65b32c7828ec46bf395f7b46ff8b0ef43b09d7c1
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk
Filesize1KB
MD544b2552f493fd508a079dc6f867d5446
SHA1075d4fb558884a99268ca010efbde19d551217aa
SHA256aa1f5d5937216661c5f1673e46d63dffb141ae86f8d68d4e60ace5a548f6cf0d
SHA512f31ff3d18d8e1f197d55b846becde4aa2dc75b6869acd0dc7f5cac6ba2796e20d8d48f9ff7f9d713edcbc3d8c0aadcf2921a40c9ff44244d09991c8cacff96a4
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk
Filesize1015B
MD5d07b9f15b5cab96ffe4582d5a6faabc6
SHA12f392e0f04772a65173d17b2bb8f15ad91ac0d45
SHA2568b05a2ba8788f34dd33010fa63b1fb16bdd7f001dc6eea4f7435643b1397114b
SHA51261faaddab3c8d4c14238bd5b0d0f873b237ea2e5d6a94337b98a9c9f4c1cd6929c980efe16a61f544b5b798ec87240cff5633ad2fb352fb9f64deaa44705ba45
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk
Filesize1KB
MD5f73a8a77569adb0308a71e0e1d7776c7
SHA1b762cd6be6e3ab24b3e0ea7a957b785494fb0c4a
SHA256198457c1e7f0b2da06bf92d5e31a7aa9f85675c32bcc1fc9673aaae91e94d235
SHA512bf47f6e447d099481b7b78097e63ba135892eba56fa27ed85dc6b3a371f99f3ee31e31f4add9fefe9c6eb9d039d65e7d75e3d285422ecf80ec3a67456d7fc494
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk
Filesize1015B
MD5c1ffaade78bcc0137be8ca8d8adc7e8c
SHA12467be8d43f2c3d5b3048db2cc8027e98bbcb290
SHA25623be71e0404352b982089b5e2345c88a070f107c2645370b3ddf578ba0b66640
SHA5127690043e9ed3a6b9e2f6b5095f0f7a24f6c830b5b50c0c7f0476eeff11841a474b7148371b9f9ffea79d146845d213a7044722186915d34582dc5d021287cf40
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk
Filesize1KB
MD52f5ab940858b7de448d3199ab408acc8
SHA1f9670ef09eca07de6761cb2a40c79548f7bbc7b8
SHA256c15fad0e1dfd7a40a4a60bf5fe53e8a86967570c9a5f31475e3e70459a75c548
SHA512b1eb529701bf214a9102f90e6e119fdbead3f253ea010d11646318368f2b61ad6c61e277d32cd22a7a1aaf2576283252ae2dd957f9efa9a7a299ad66091192f9
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
Filesize352B
MD5b2fcca1246e757bc0c7dea0441afc0ee
SHA14b47919fa445130c8693d1d2161b1239ea1f0851
SHA256e34343b0a135d7b90c93dd39da717593cc6d10271911beb12de6e90b36b1e181
SHA5121cb8758349c40e2bf86e791eb713d7fdafea7ac9cd515737330511d68a20591dec25692b776196691961c5f7a1c61eb524ee96763a0ea0a72d297878dd35bff3
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
Filesize334B
MD5728a6ce60830cc0983a6e4c18f8db23b
SHA16b4acceaa6ae21965514174a360ab83e5f0d197d
SHA256c593ef0c5e622397b756760cc66616d9ad3592c75831e838d3af5f627c4c909f
SHA5128c96d446c4d950ed612925a5e10c9910e72f85ec8caf224a059e2e3207042c083a19b0eb8527de50f3107933f57ee5bc22f45c2b04753eaa022f926669b0725f
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk
Filesize1KB
MD5b6282f7ea0b4fe23a83f67590c77c385
SHA1d898a8669b09512846b98cb3a14247a3911bec12
SHA256d01b94f26a0b5c539369dbedb253b9ca9b7c138510f3e8f82c1aa687c3c6e3c1
SHA512abcc6a1a2f86a45da06838cd9f08fe31a532c6d594b4cee326287f7be95b164cbdc0557386018043732e5d86634ddfa73663e85ffed4e13d04614f6e2bf19e78
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk
Filesize1KB
MD50b98c3e6a1dc318bf14e99a9e19c690d
SHA18a4efe33dfd073bf31fa94e8ada66477db2434fa
SHA2568620faed710f3e043919749013b1c7fbf6869249c8842d4437dad9ceb31df7ed
SHA512d7cca93d67dcf8215ddc879c3165eab0ccc4cb8506b27349090eba0960229f75b8f9676054e2476535bc83f4203c161acba7f2c5d12ffc61589388ed1a6ecd31
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk
Filesize1KB
MD5a6d441bb439045128d7e7909873e6dd1
SHA1e2b70d0e6dc42811aa53af4b00897c8710b0e4a3
SHA2565787ff3fc06c14c38cdf08572bc04f0029e739d2b5dc5b39da9f3485bb833513
SHA512e4617d2df980700b7e8a7b3b362c78df38a244bbf6585808b19acae1c28982e4802254fed037de7d508eae40c4b846286df6607fe4f8fb1f444c6f1d24a8da28
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk
Filesize1KB
MD57ea85c548cb43125c7062f461b3467e9
SHA125264f62a1d1c39c87166e869be2338add3b74ea
SHA25610b83f2b4c2c2b65bc1282c298f1eafe1f048bc87a878366974efa9c6d080b29
SHA512cdf4cdb2434164bb0bc91c1af0fbdd0c677775f6b48df899cc3f80a4501e07c669d098c7664e173ba75aeea75e3684d421d001d2ae22475f1a09b3348efe6997
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk
Filesize1KB
MD5bb1ce59b9f13eccc9de220d9be34885e
SHA1c143e825cab490d8cccefc0ffc5d65c0bcf4d0a4
SHA256f0e5944f1e0f384493b3d38d52fd4d8fa2ce864db0d40fdb13804d226a7adeb4
SHA5123126df610705e0329e6ac4fad0cfdbf388ef541140d0c3220133423d24058df48f34033eb4f4a6d026f9bb3bb85d1ec890a54f2860ddbbdbf3bea9355b3d7166
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk
Filesize405B
MD51b9dc2976795a94451f47cfe07c8ce0c
SHA1f338ef95199de9a036843a6f870edbf6a59ee9ab
SHA2568047d2e75d88f93a48e73ba05f5653a44ee063558bf56042274a8509bf60e4fc
SHA512b2d4e825e400599e1bdbc1085c41890c30186178dd077300bbb4db9224cd4f4640aa04a8b201d0965327d7d27a60036148db57b0c29e69b2b569dde6b51fd585
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk
Filesize409B
MD592f29b4d39d0d7db62ca533c09fd34a3
SHA148e6d7d6ba0ac344ee2c99cda933b52b82e745e1
SHA256a30e47bc6e1c7fecc98366c953bec1b71753e27f72523bf31c35ad2b43475e65
SHA51200ccef4e288878f103857ef26aeaa08009e14d8279ad665ecf3bd1eba1e3bc7e3a8f540c148583811edb671d5effbd7176cba75e46f1b1a7b6efeac021c69b52
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk
Filesize335B
MD52505d0a1b58a61562b03a6693bc11770
SHA18ab8528be89fac3b00f1eba1650cee7306a97090
SHA256a030b80cb1081ff15c5a5be362df03ba97fb319f106aa00fbdda59299227356e
SHA512ec6513c23e8b243b272ebea9b5ec6258752f3f79b9ed51ef983b15b2d98156482ce66262f236fa39498b7cc58ad4378664976697b0759e0e89f5299c6ab036c8
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk
Filesize2KB
MD5b69a035414808fe0b5e77c4d403238e5
SHA1645140f8a3bb2e0094c2a27dbe0c3f1ce348c0b5
SHA256f18bb8c0eb0f1c322e5aaabb098e327bffe4b96cce78cb4c532a841a8737fbca
SHA512e5d0da1e75bd41f7461e21e9dd428e8b220b71d890f4d7b192f63a9ef8623067b131bdfd814a77005c5353f39af591271167ab61eedc16959d0fee994aee69cd
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk
Filesize2KB
MD5f55f9e37043fe85cb571466e19cf0951
SHA191d6f272959fccd2eeaaa9b82f9276c9c63a5c67
SHA25635b0639c00b9a9f2eca9946028973e943e435a97548e943c705bcf4e057c7176
SHA5124b14d6b55944a07510e79cbe241b279c0a166c590001e278d587a5a5626e7191f5be1cff91961f21e0f7edd390517d7ce6b1c603a2963dd1adc692943ad9bd4f
-
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png
Filesize296B
MD536ab32937d3adb6865605c933e0b1d73
SHA1ad42bda4c6b3beca59d9d4c8c3dc48f80eef344b
SHA25625a7cbafd736d2df1712840e4c682e52e2d7075cb41435b88d060154e12da125
SHA512e2d57f1842e20388663ad5a820256d3af2c8beea4e9ef5d99c3e4b4b07d062839878021be8dbcf7f195abb14d6be112a0678948010691ecf9b53d19b4c48f107
-
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.153_none_90dc0b923cd83016\Square44x44Logo.targetsize-44_contrast-white.png
Filesize276B
MD55dd9348157395f55d37c40ea9790dc29
SHA1c6ce637ca56aea0e6f94a6c4927f0c721821d03b
SHA256f39652fdd49290747f4e81a72ced9ecfa0ee3e1233f7e2829b5fa8efcfc3fbcc
SHA512cb94216822a1997d721ca621d955fc4a99ebd4dac8ac700242706a4b37bc6a58606880bac1f93f79bb2547b1bcbb596d2824a2a039129783245b1ec24f926c33
-
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_altform-unplated_contrast-black.png
Filesize296B
MD542db235d51aea953dfbdafebf43bc85d
SHA145809c1996cef276ed11e646f75fea776a5e6774
SHA2562abee00c728e66fe0229a0710753bad0da7e2e188c361f9caf99cb59dbb4aa27
SHA512eebe985e9ea42af34cf8c73e58a6ecc1fb8b26ab243adda3d8669b6823b0834f1232b2598f729ec74812b5fd1a47304011c226d51218376337828738c732c9a8
-
C:\Windows\WinSxS\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.964_none_90d24b203cdf4e96\Square44x44Logo.targetsize-44_contrast-white.png
Filesize276B
MD5419742bf52398914859a205b7791ad8a
SHA1bea81ecf59b9a7b9fa3449e43d2b5524792d58f3
SHA2562b0d34e74111d02ccec7bac8e49e9203f2d2bf39f8c23b0cd7aa9c61e517fae7
SHA5122470d04b8ed7881f26f883113069df344c5cea5313a32582aea3a334d0c47eb83840ebf6d40fdd9b27472e878bcb4be21d0a02c6bb607205df6c7368d0ac3eaf
-
C:\Windows\WinSxS\wow64_microsoft-windows-onedrive-setup_31bf3856ad364e35_10.0.19041.1_none_e585f901f9ce93e6\OneDrive.lnk
Filesize1KB
MD5138514efee3d5d8dd3b15993b6c7b13c
SHA1f678798c4cccd943b3b0926d19a9de04cab25c65
SHA25697b4d4887fbb63b75860f28772222df941800f3fb12779139c67165c0bc3b308
SHA51229c549e3933488cc20504552274f2aa814de4e91f1748c676716db37c643573b51e4792e46a0d779b67eee2ce592135cfcb962788338a65d9d9f2e8ffcdfbc7a