Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
300s -
max time network
210s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241211-en -
resource tags
arch:x64arch:x86image:win10ltsc2021-20241211-enlocale:en-usos:windows10-ltsc 2021-x64system -
submitted
17/12/2024, 22:47
Behavioral task
behavioral1
Sample
f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe
Resource
win10ltsc2021-20241211-en
General
-
Target
f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe
-
Size
12KB
-
MD5
f9154b290dc8fbf1bc82065d656b6590
-
SHA1
cca6c6b00d6072f08aad735cb559839f333fcb9a
-
SHA256
7bb40acf3aadb46d5d7f7de1d2e8e81739aeb26c7bbe7c4248fa074e3d6f456a
-
SHA512
62dbfb6cb8025fe80c47fc076964cd33592f7a1bed2094554522d46b1a7b04b03056343be59c0180543b0097735564e35fa306c0ef025f0d7434bda44a80e623
-
SSDEEP
192:5/TrG62a6B10k3g4fXk1iTV3HGc7EkpAqEjaGpsHcxUw4h+lfPtRMUsRgHMMC:5ebFNw4Pk1itKkpAjjJs6B40WUsRdP
Malware Config
Signatures
-
Detected Xorist Ransomware 1 IoCs
resource yara_rule behavioral1/files/0x00060000000454f2-32576.dat family_xorist -
Xorist Ransomware
Xorist is a ransomware first seen in 2020.
-
Xorist family
-
Renames multiple (4576) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops file in Drivers directory 9 IoCs
description ioc Process File created C:\Windows\SysWOW64\drivers\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\drivers\gmreadme.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\drivers\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe -
Drops startup file 2 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification \??\c:\users\admin\appdata\roaming\microsoft\windows\start menu\programs\startup\êàê ðàñøèôðîâàòü ôàéëû.txt taskmgr.exe -
Executes dropped EXE 1 IoCs
pid Process 3256 ZFe6iILss4arp10.exe -
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Alcmeter = "C:\\Users\\Admin\\AppData\\Local\\Temp\\ZFe6iILss4arp10.exe" f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe -
Drops file in System32 directory 64 IoCs
description ioc Process File created C:\Windows\System32\DriverStore\FileRepository\mdmcdp.inf_amd64_919b7beec2c70482\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\wvpci.inf_amd64_e68d32e25309e80f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\c_sbp2.inf_amd64_db7034ac4806cf05\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\e2xw10x64.inf_amd64_04c2ae40613a06ff\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\oposdrv.inf_amd64_9090a824ce0d0e68\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\LogFiles\WMI\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_PackageResource\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WindowsOptionalFeature\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\c_fsvirtualization.inf_amd64_078671a0cdfe2870\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\wvmgid.inf_amd64_3a0240393de08f95\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ServiceResource\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WaitForAny\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\cht4vx64.inf_amd64_b03448ba0b72ec47\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\netvg63a.inf_amd64_9f5493180b1252cf\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\netwbw02.inf_amd64_1c4077fa004e73b4\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\urschipidea.inf_amd64_78ad1c14e33df968\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AssignedAccess\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\displayoverride.inf_amd64_c7a5777273c98ebf\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\netvwififlt.inf_amd64_c5e19aab2305f37f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\mdmke.inf_amd64_b83f029888180def\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\mdmgl005.inf_amd64_d9886a7bbe9e55ca\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\IME\IMEKR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AppLocker\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\Configuration\Schema\MSFT_FileDirectoryConfiguration\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WaitForSome\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\usbser.inf_amd64_b872e297eb3a1c97\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\netelx.inf_amd64_7812e4e45c4a5eb1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\prnms003.inf_amd64_56e3bb563920555c\Amd64\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\sbp2.inf_amd64_76e1b89751cd652f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AppvClient\fr\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\EventTracingManagement\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.ODataUtils\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_EnvironmentResource\uk-UA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\mdmrock4.inf_amd64_bc507add47f436ae\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_LogResource\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\mdmgl010.inf_amd64_b4f4b670a266fda5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\uicciso.inf_amd64_32023cb966fd5c8c\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WaitForSome\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\Configuration\Schema\MSFT_FileDirectoryConfiguration\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\wbem\es\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\NetSecurity\it\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WindowsOptionalFeature\de-DE\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\prnms004.inf_amd64_c28ee88ec1bd4178\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\mtconfig.inf_amd64_fe91941ed205cd9b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\wstorvsc.inf_amd64_2777a5f918cb041e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\setup\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\c_smartcard.inf_amd64_bf5afc5892966e30\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\mdmelsa.inf_amd64_f187fca538857daa\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\NetSecurity\ja\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_RoleResource\en-US\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\c_multiportserial.inf_amd64_e92b6921fca885d5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\ialpss2i_gpio2_bxt_p.inf_amd64_8be317e01b44bf5a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_EnvironmentResource\it-IT\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\Configuration\Schema\MSFT_FileDirectoryConfiguration\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\microsoft_bluetooth_avrcptransport.inf_amd64_cb28664036c7c4c2\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\SysWOW64\XPSViewer\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\mdmpace.inf_amd64_5e0fbd01da4f7c7b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\c_unknown.inf_amd64_9f92c189b415c003\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\fusionv2.inf_amd64_a47d9636ce0d7dab\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\mdmlasno.inf_amd64_61370f3a47f08ebd\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\netmyk64.inf_amd64_1f949c30555f4111\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\prnms006.inf_amd64_c3bdcb6fc975b614\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\wdmaudio.inf_amd64_d2772df433988671\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\System32\DriverStore\FileRepository\c_biometric.inf_amd64_edc558d403ab30c1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000018\cardview\lib\native-common\assets\[email protected] f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\EQUATION\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Resources\1033\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Browser\WCChromeExtn\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\eu-es\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\eu-es\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Windows NT\TableTextService\TableTextServiceTigrinya.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files\Microsoft Office\root\Office16\MEDIA\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\zh-cn\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\ja-jp\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files (x86)\Microsoft\Edge\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\nl-nl\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\ja-jp\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files\VideoLAN\VLC\locale\kn\LC_MESSAGES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\root\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\appstore.png f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\nl-nl\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\it-it\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\icons_retina.png f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files\Windows Defender Advanced Threat Protection\es-ES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\inline-error-2x.png f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.scale-80.png f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.contrast-black_scale-140.png f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files\Microsoft Office\root\Templates\1033\GettingStarted16\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files\Common Files\microsoft shared\ink\zh-TW\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\close.png f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\WelcomeCardRdr-2x.png f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files (x86)\Common Files\Oracle\Java\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files (x86)\Common Files\System\fr-FR\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app-api\dev\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\ja-JP\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files\VideoLAN\VLC\plugins\keystore\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\ro-ro\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\NewComment.png f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files\Common Files\microsoft shared\ink\fi-FI\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Program Files\Java\jre-1.8\lib\deploy\splash_11-lic.gif f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.scale-140.png f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.contrast-black_scale-140.png f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files\VideoLAN\VLC\locale\am\LC_MESSAGES\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\uk-ua\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\js\nls\root\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Program Files\7-Zip\Lang\fr.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\pl\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000018\cardview\lib\native-common\assets\[email protected] f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ja-jp\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\images\warning.png f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\sv-se\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Program Files\7-Zip\Lang\fa.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\it-it\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\da-dk\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\ECHO\THMBNAIL.PNG f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\default\linkedin_logo_large.png f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Program Files\Windows Defender Advanced Threat Protection\Classification\Dprt\ThirdPartyNotice.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Common Files\Microsoft Shared\ink\ThirdPartyNotices.MSHWLatin.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Program Files\7-Zip\Lang\tr.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\example_icons.png f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\sv-se\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.contrast-white_scale-100.png f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\bg_pattern_RHP.png f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\da-dk\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_hidspi_km.inf.resources_31bf3856ad364e35_10.0.19041.3636_hu-hu_701d19cdb1376e16\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-p..owershell.resources_31bf3856ad364e35_10.0.19041.3636_en-us_5fc8dbe76b9da44c\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_product-onecore__mi..-workstationservice_31bf3856ad364e35_10.0.19041.3636_none_654b61dd5c29f9ad\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-dhcpcmonitor.resources_31bf3856ad364e35_10.0.19041.1_it-it_e0a7e65b35fc13cf\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-i..ntrolpanel.appxmain_31bf3856ad364e35_10.0.19041.4474_none_8f6f71a24c482e0d\logo.contrast-white_scale-200.png f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_10.0.19041.546_none_964c9e068c1b0905\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-m..ntmanifests-termsrv_31bf3856ad364e35_10.0.19041.3636_none_99bab27526e20687\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-s..ast-black.searchapp_31bf3856ad364e35_10.0.19041.3996_none_a305e04adec9c4fe\f\applisticon.targetsize-256_altform-unplated.png f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\x86_microsoft-windows-l..-oem-core.resources_31bf3856ad364e35_10.0.19041.4529_fi-fi_ada6c3745746986b\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_10.0.19041.906_en-gb_1dbdc338c2468486\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_windows-senseclient-service.resources_31bf3856ad364e35_10.0.19041.1_de-de_c203d677cc1c0e73\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-data-pdf_31bf3856ad364e35_10.0.19041.4355_none_75638d037d49dc9b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_environmentsapp.appxmain.resources_31bf3856ad364e35_10.0.19041.3636_es-mx_d68cc650f07ede11\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-d..iew-internal-broker_31bf3856ad364e35_10.0.19041.4355_none_c75ca5e99538bf94\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-i..nese-core-essential_31bf3856ad364e35_10.0.19041.4355_none_1e814eaf7fc175bb\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-mdm-adm.resources_31bf3856ad364e35_10.0.19041.3636_el-gr_83a3f075598885d7\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-security-identitystore_31bf3856ad364e35_10.0.19041.746_none_1fbd618700a52b5f\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-w..mcore-dll.resources_31bf3856ad364e35_10.0.19041.1_de-de_e4c0159ada5b88ea\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-msmpeg2vdec_31bf3856ad364e35_10.0.19041.4355_none_10060ee1a19d0057\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-m..ice-winrt.resources_31bf3856ad364e35_10.0.19041.3636_en-us_86547f460683fcf5\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-f..-settings.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_d513ab8cd9cb25b7\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_c2wtsres_31bf3856ad364e35_10.0.19041.1_none_19a7057aabc28ea7\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_c_fscopyprotection.inf.resources_31bf3856ad364e35_10.0.19041.1_it-it_1fd9b248848dfeee\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\n\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-bootmenuux_31bf3856ad364e35_10.0.19041.4355_none_699bb471ca981bd3\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-c..riencehost.appxmain_31bf3856ad364e35_10.0.19041.4474_none_7769e00c02e06184\oobeerror-main.html f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_11.0.19041.746_none_b977adcf09e7ef15\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nwifi.resources_31bf3856ad364e35_10.0.19041.3636_fr-fr_29306057ab15868f\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-s..sktop.appxmain.root_31bf3856ad364e35_10.0.19041.1266_none_3e00d223332897b8\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-mediaplayer-vis_31bf3856ad364e35_10.0.19041.3636_none_efd659a8acbb2119\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-lxss-wsl.resources_31bf3856ad364e35_10.0.19041.3636_en-us_c07ba2ac04a0e7e0\n\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_windows-senseclient-service.resources_31bf3856ad364e35_10.0.19041.4355_et-ee_2348e72ad5039888\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_dual_modemcsa.inf_31bf3856ad364e35_10.0.19041.746_none_f5c4e80c13c3a2a2\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-printing-fdprint_31bf3856ad364e35_10.0.19041.4355_none_ccea30813a7d083c\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-qedit_31bf3856ad364e35_10.0.19041.746_none_38952779a6369c8c\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_netefe3e.inf.resources_31bf3856ad364e35_10.0.19041.1_en-us_0362be1e4b97d43b\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_windows-id-connecte..r-wlidres.resources_31bf3856ad364e35_10.0.19041.1_es-es_d94a575184a7a9d6\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\wow64_microsoft-windows-t..-coreinkrecognition_31bf3856ad364e35_10.0.19041.746_none_d5e636c38e22b9d4\ThirdPartyNotices.MSHWLatin.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-n..quickstart.appxmain_31bf3856ad364e35_10.0.19041.4474_none_08f8dfcf0c193741\f\narratoruwpsquare44x44logo.targetsize-64_altform-unplated.png f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-directwrite.resources_31bf3856ad364e35_10.0.19041.1_it-it_d41e1e5237c53907\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..trolpanel.resources_31bf3856ad364e35_11.0.19041.1_fr-fr_aef00096e55c8f67\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-n..e_iassvcs.resources_31bf3856ad364e35_10.0.19041.3636_de-de_bc70c36e59010d7e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-u..-core-tsp.resources_31bf3856ad364e35_10.0.19041.1_es-es_241c4d92a97109f1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\x86_microsoft-windows-w..omponents.resources_31bf3856ad364e35_10.0.19041.1_it-it_3b81c814fb670787\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-s..ast-white.searchapp_31bf3856ad364e35_10.0.19041.3996_none_eda0904112bd0a9e\f\widetile.scale-125.png f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..ertypages.resources_31bf3856ad364e35_10.0.19041.1_en-us_86819c89c08296d5\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-crypt32-dll_31bf3856ad364e35_10.0.19041.1202_none_d02feec5930a1e75\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-shenzhouttsvoicecommon_31bf3856ad364e35_10.0.19041.3636_none_f0bf2cbafd54ba44\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-directui.resources_31bf3856ad364e35_10.0.19041.3636_it-it_79c378ef99c2f77e\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-r..ardwareid.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_f6d889d36b3a15de\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_10.0.19041.1_de-de_b46452568a7278fc\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\x86_netfx35linq-system.web.routing_31bf3856ad364e35_10.0.19041.1_none_54e733b2810f8a2d\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security.resources\v4.0_4.0.0.0_ja_b03f5f7f11d50a3a\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-n...appxmain.resources_31bf3856ad364e35_10.0.19041.4474_ko-kr_b800e2f6b45827ac\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-s..e.desktop.searchapp_31bf3856ad364e35_10.0.19041.3758_none_029c2ba64c8b77bb\f\27.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-s..gement-ui.resources_31bf3856ad364e35_10.0.19041.3636_tr-tr_27e5d776ad4fb02a\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-u..onwakesettingflyout_31bf3856ad364e35_10.0.19041.4355_none_21076a1196be34d1\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-wifidisplay_31bf3856ad364e35_10.0.19041.4355_none_66957c84963ee094\f\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_ppi-ppiskype-c-a_31bf3856ad364e35_10.0.19041.3636_none_e69f3bd188919f86\f\lync_dtmf6.wav f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-n..quickstart.appxmain_31bf3856ad364e35_10.0.19041.423_none_72535ca9b59a9515\NarratorUWPSquare150x150Logo.scale-150_contrast-black.png f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\wow64_microsoft-windows-quickassist.resources_31bf3856ad364e35_10.0.19041.3758_ko-kr_536ae50562e240c1\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.DSC.CoreConfProviders.Resources\v4.0_3.0.0.0_de_31bf3856ad364e35\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-aarsvc_31bf3856ad364e35_10.0.19041.4355_none_d7a9ce535a9256c9\r\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mup.resources_31bf3856ad364e35_10.0.19041.1_en-us_964559f67670676e\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe -
System Location Discovery: System Language Discovery 1 TTPs 4 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ZFe6iILss4arp10.exe -
Checks SCSI registry key(s) 3 TTPs 3 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000 taskmgr.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A taskmgr.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName taskmgr.exe -
Modifies registry class 11 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.EnCiPhErEd f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\YPZEZHCHKRGLOLF\shell\open f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe Key created \REGISTRY\USER\S-1-5-21-114766061-2901990051-2372745435-1000_Classes\Local Settings taskmgr.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\YPZEZHCHKRGLOLF\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\ZFe6iILss4arp10.exe,0" f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\YPZEZHCHKRGLOLF\shell\open\command f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\YPZEZHCHKRGLOLF\shell f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\YPZEZHCHKRGLOLF\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\ZFe6iILss4arp10.exe" f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.EnCiPhErEd\ = "YPZEZHCHKRGLOLF" f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\YPZEZHCHKRGLOLF f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\YPZEZHCHKRGLOLF\ = "CRYPTED!" f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\YPZEZHCHKRGLOLF\DefaultIcon f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4828 taskmgr.exe -
Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeDebugPrivilege 4828 taskmgr.exe Token: SeSystemProfilePrivilege 4828 taskmgr.exe Token: SeCreateGlobalPrivilege 4828 taskmgr.exe -
Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe -
Suspicious use of SendNotifyMessage 64 IoCs
pid Process 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe 4828 taskmgr.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe"1⤵
- Drops file in Drivers directory
- Drops startup file
- Adds Run key to start application
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:2224
-
C:\Windows\system32\NOTEPAD.EXE"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\ÊÀÊ ÐÀÑØÈÔÐÎÂÀÒÜ ÔÀÉËÛ.txt1⤵PID:4180
-
C:\Windows\system32\taskmgr.exe"C:\Windows\system32\taskmgr.exe" /41⤵
- Drops startup file
- Checks SCSI registry key(s)
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4828
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4528
-
C:\Users\Admin\AppData\Local\Temp\f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3540
-
C:\Users\Admin\AppData\Local\Temp\f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f9154b290dc8fbf1bc82065d656b6590_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
PID:5040
-
C:\Users\Admin\AppData\Local\Temp\ZFe6iILss4arp10.exe"C:\Users\Admin\AppData\Local\Temp\ZFe6iILss4arp10.exe"1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:3256
Network
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png
Filesize50KB
MD536b90fd670a37268dd56791e46d38346
SHA178608d8a4cb9322dcee61cf9d07e912b73f6bd72
SHA2562d9ef8909cbc47277d2384604e8e181c3e4a5acfd84490a82e7518748a2b0122
SHA5120ca84169cfe3794946d7b7a819d97355ef4effb554e8ec3432065006a71d09c71bcda6e1eaf94a600e9b6303ca49de5c8b8caf2b993f64a0731b6cc082893fb9
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png
Filesize1KB
MD5332b4e6099697e0f15d4fbf1ee1765a6
SHA1e791e4e30492b9adc4fbc3591e6e163277140a68
SHA25607d27ad6478a4135decdc48ce2796c2b5f85e00a26ea608d42144717682946fe
SHA51201c59ae2a383b1b0dc1de65b45802b473615b448fcbd7029c9a3df98aa7d240f6e0d04cf33893080b30efdfbf956bc59bdc3364ac9afe6fe198e16b3748379c2
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png
Filesize3KB
MD57cc335b575c185c1a874466f1b030629
SHA1b72a90dc0f65cfc461c941986e16a8db3c17f971
SHA256345e95b71e1b89c3a9324296163b261458bbe16ceab058898a179bc875691532
SHA51223a749420f88f75514142587685a7949f6ea1db17caa31e9740e4a7a48b6ce4d0212c686bf7d2a149cf43efab0b485a7c2751afcba426128102ec561c3f31770
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png
Filesize683B
MD534573194df0c2532a99c26463c8ee4dd
SHA1e033634b30db1290062897345efd7c9a0092d82b
SHA256beb3c9aa47956ce1fd3c315dd2109b3f7b3c909241ed426b7d6259511004c819
SHA512afbc78f4de8ece0fe3503bff140fffcb8c09359fa5917047c382166adb6df1ad866cad8651afcf62e422e64aab4d363de2b27453cc1d803873a968a6cca4a0ed
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png
Filesize1KB
MD5c55ef7a9d35100f1ff5ca55ad1b9e44a
SHA102427288437be6d76fc0ce19030cdfb41874894c
SHA256361c6bb42ee1e6264fa47f6db67dcd56d7596b4f1d2f721ecb4a244a0380c95f
SHA5128ce88be676c0bd852a19b29cc2a5f30989946ff244fb85ec8e79bcffd6022ccf0fcfc83ca9eca73644ac73852b8a1e266f5047836db895ca69ce97de67e8fce4
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png
Filesize445B
MD5602de6346f89367dd95acd8bafa240ef
SHA12472f50448356ada10e7408da252b33b15188bb4
SHA25682db2a496640b3961daa955cb9d29f354f9d7479b820face41a0de24200137dc
SHA512013114fefc2098ae14c8518065419cd556b4b301026b54b6369776f3bc969fdefb9340948454b2b80d419bb5b0f21c7e675910f4d241cd059c446eae76e4567d
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png
Filesize611B
MD53f47b99304b95baf195192645c5a9a5e
SHA1d0ab1141bfdf1a59be884eae695b5b28897ffeb5
SHA256c9364788b07a202989a95a424d846b2fc3ba35eb2bab9ee57b22cb641d1aaf33
SHA512a3428bf7efebfb17f035d2018b5a84f859bea3a01b3c6589f29c2a6a723fa395efcce4e5eb81cb29bf6e7920dce9a67f7dbd19023f429024167212c18a654e93
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png
Filesize388B
MD57ab37bd18f371341d33d6a92c9ceb584
SHA10d495a82d23726df3bd1901956200b36c50a4cef
SHA256ce7e97f6aa1c44fbd5704d1fde5b91a0e1c73f2ec3caeff35c2c017700b22f8b
SHA5126aac27113cda490576cd54f05176925bea0d3d8b044e87637bb2fd4ad11ce817ffe400848d9a78d4eddcafd8e6ba833239ba7b0773760c803eb5d2bb53335b9d
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png
Filesize552B
MD536a7043844ba97c5ee3b813b7d13f059
SHA1b7cc7e61ef3c96c0b3ff6615ff4b9d03a4bc694b
SHA2561adbc005b22aca8d0c07e4c0d5c48372d3bedf06ad05e6b8884d5348e75b4216
SHA5122ca1c226458a2b1dbba9f4a25c87ace402b928ad65a249f0bcb5e7b59a3fed8bcc3beff45c2ed72b6174d975429dc9ef7fb8f8211e3ef2d9ec09794d41c7b253
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png
Filesize388B
MD55fad40193ed62e2c3bbeab2f293bd44a
SHA1af206aad24a9d8a236abce3952cf4b40d23845e0
SHA2568fccd28360a23602454feac90f27c8d40f33324877bd634561808de3c889f1ec
SHA512b338bba9a73851bb7fc07936382b34ff66e0ebc196df760277697fa8db0c861a9aed0a1649ef88276b8909700ddb75e37ed84726b9aa1f109ea613bf7f4634a5
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png
Filesize552B
MD5c7024bfc7752a9be648daa23b6999369
SHA1166e3ad53ca140b0cc99f7e9305eb48279529fe5
SHA256c638960c0d269d6d6b5f96e68b62748e101810d3d488286535a4952ff12cb957
SHA5126d807f61372c76a0775e2d259c1c3fc6c7ac49b1e55a418883529cbe0523827c91395f0055ed2bf984e2a6fc9edbb14b6f0832f3dfbea93bdb1b5a3f869a1ba4
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png
Filesize388B
MD541953f06642a46be4eff89af6d7709c1
SHA1414a11c181c4e8dcafd87055e6b5094effaaa97a
SHA2564faf34e3e9c37892e30ab3566660c871e629d02fb6d19a6168463e239d6f7c5c
SHA512d22c936db890053274ccf145bf51836fb443a51cff7b0fa491c8f1a8f9e0a675a5f45610f2bc00455e0976ce95791682bddceea9a5e4d10c64553aa5fdedf06f
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png
Filesize552B
MD5094fa1453fcccf3f82db59f41ad270e9
SHA1767aed2ce1ac8a09a0b66ea7b8f8b961ace2e225
SHA256aac834bc04c098e5a3c90b5774907428ba79b8d53070425fef0003b4ae8ba6e1
SHA51213bd487e1df59a050304e632970839d1c1b751c9f99035118e3c36d236836173adb7400a72ad733499477f884b324c2107e5636270b5b804af38f7540fd63d3f
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png
Filesize7KB
MD59e6a75ceb25e769241dca25c1aafec06
SHA1993f1bfae2012af178661f06042d552fcb108292
SHA2566bb050daa1e280ba5379c38c0a469e81234446fb6e8f9ba4138652a73c1b19ac
SHA512f50457425e93a27aa8f784af9fc6be458d245a09743ced5133a063b28f2c3966cd4e70dccb7379a6482442878f55514f6dba8d74ea7899d2a0f4b01ff2df85cf
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif
Filesize7KB
MD51eb40ee15857031893332bde5b321ca1
SHA128f9de1f121640eebd91c4c85247845892396134
SHA256497a4dc4fd6e521a8acb06281fa6d12ad3289370fb8b9734ba859ec2be2c5a20
SHA512d049f6a257678b0a8981d50b32ea14e3e36e6b910936100a2a733817e9926c2c91c853937ca3fad647726d9e93fd312ac175ffb45b74d54780169ae78308bf4a
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png
Filesize15KB
MD55fbe3682479c61a68432aced4c19473b
SHA1e915d98fe6519e42714535cfc74f79e640fb509e
SHA2565a2d205f9fe6090c0b61d4f43dadca98253862c12d677283e910cdafd334743f
SHA512c6b012543f2456ac5b4ce02fc7aa842b3feeb77b7e61b709fee918aa28c975afe9cb5f4a96d9d877ea72df13a53a552ffc30584397faf97ccbc7ad6f10b1d499
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png
Filesize8KB
MD5940570f444a7f3bfbc0dd3b0cd599178
SHA18d759bf2610f4d0235a7fff607a2ce0e7b7d2d2a
SHA2562b67231c0b66d3dc927adda6a3c140d2c4915385a9685a2dc3f50fd6d7af3400
SHA512e0ff2665135eebfc5f67ee41b71024e54c817e507ec6d6d16926a2fcf380f5aa36c3fb20c7c83d947d0764f4f9159aba25074ede7a6cc205b53d4badc1be14e1
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png
Filesize17KB
MD54b7fd0053c3c1a5f1c70d3e84a2c8b71
SHA1bfa9dad0cacdd792b441b59d7689cd44f36e953f
SHA256d1b2e64252ecdcadbe496ecb5033221760a5e1733da87eb39ff6f02ca322c92d
SHA512dbaf766764b6eba59797b7277facb367cba593164f213d7ea8eca14d24f8e34c782277dba90b9e2735e3262037b44bc62bd075a11e5b1eac2785c716ef0f2736
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png
Filesize179B
MD511c93755a282e0b4970a57f274038070
SHA1fb2a0eb7c973771bf54e82f6bc1e54c59e5ef532
SHA2569e9c08ddf0b80a686948210a898d09c697a32c8cb49b78ee7eb10a230e212a88
SHA512ee79cbc93dbd19ea4aacb4add45b2b0685a3c7f84c5b6e7956e6424b572d6e154681ac86644836e66d9f8b15c65f407912bf41349200c5340ff4c15906922ef2
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png
Filesize703B
MD5c2f38e3c9632d6d8c00688ac6594ffde
SHA16237bcc17b2f44727ae662eba5adc981caefdbf3
SHA25688cd909d5f4f6ec249318a8adf7f27dcb590ecd109b1a6aa76291140569fad77
SHA512bbc7644278f3539ff65ad2aeec7a22083ab0f4f96f302835f21ed41131f6c22d3371228de2eb2096e438ab10641709595a7760c714ea88ffeb9ad859ecae18ed
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png
Filesize8KB
MD5b29f2127db70d8a0e358f5b3eee13775
SHA15f5b8c98ca347e0a740aa564bdad051c373376a5
SHA256beaeb14e5335a534dbef9b5cdeba7bd74936e3823aa95b6a822c9a1ebf194ba4
SHA5124970e798d7f2df97a4100742c9cbc1d4e4ff3ce6c8d9501bb33af3a417351566d6ac0ec46efba25883ee9cea3073a1b500152e3dc2005c5d7b51b57ffbe01dc4
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png
Filesize19KB
MD575382d48a1db3aff4539e81c447d7ece
SHA11c26178099ad1ebded6f0488433c0f6cf95d857c
SHA25636e18bce5d77838d0479fba1479a1545c98bc442d6daa7d20b2d26a64005e55d
SHA512a21bd5ccb499b8bd1744c8237d4927d4af0c5dd3aa10b1c66692b1578f47839f27b546974e0c8cf0190eda320c6e0a445879382cc23d53e2ebc60ebb298c6ef1
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png
Filesize6KB
MD582ae16f886d7ee6ff5584f49f060e99b
SHA147e5efa64b8ce7903cad2ba0933a194b142537cb
SHA256fbe3a73b5d8c4a485eaf1358256f7c13f564e880859164437e451344573a6731
SHA5126464d9efbbe8fcd67726713048a3f00710e9b14c62e2481e933169eb99e711340b0c4f88260ecc2d17fbef3625fcc1d715b1c52ea94a4a49aac1bf35e2f21689
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png
Filesize2KB
MD5d54b09c7676f5414697950e07c314d5b
SHA11133283baa9dd7e8b1d124bc4f00572e5f914e70
SHA2560a8b2769a44947be0b745f592d2234ce0d0e19f0ca94503540eb9d15c011419f
SHA512b6c92f2036cfda3a2b56f49dc52de778ef45ec634fcbd57b647c7ef3808d2323e2df706504b21927a8c0d56fad0caf4c4d9a04c9acfa310280be82118966da0c
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png
Filesize2KB
MD5dcdb7105f587fc2052f3c61f75e1e036
SHA109dda7e7303a96877ba6c85cbe0445c37476c8f9
SHA25600c83f6abd8d19c03c7cc25490ad69118d492fd6a3f42eeb3ff0fe3621e4e026
SHA5127d146644ada3fc2ae044512c17585884054fb4bd5ca351d8c2cebf6e0793f439e35dfc9ce89b7153f199a1600e7ce259563bf893f2eff972e309ebd4333ec50b
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png
Filesize4KB
MD5eb105a0d83e3acd385d2adc87dbabddf
SHA18a7a3f6e3fb53d8c51928e40714b084ace96d342
SHA256aab6870c238d07a45028060f10d46ff983d17f515712f7377ee131d92e4f1e8a
SHA512adf51d657c01b6089532412f6c600020978c59c5aa25de9b1b62b162548f57455bdc3f278b45024060be6994bb43fcd4eb6a62e1cba11b9cfe58e2c5daa9e0cf
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png
Filesize289B
MD5da01fa8f16c10e3899b2d7186cf4beea
SHA10e57afc04fe710dba97d1ff8275192a6a18fc63f
SHA256b54ebc801ed0f98875e18cef6023ddd04aacd076f6bd960b2566c05c4e03fce6
SHA512190820a7b0bf3f92892b3f141dcacb0cb775338f74c0611468a726060b784a5c46c1c25ad389c79af4448a0d09391faa5fb94ba8933878b3b6a9efb4968e64f0
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png
Filesize385B
MD5b82654978c5bf37a35a5e5670239862b
SHA19d7e16083990e0f0bb6a63ca1d3dee011cdb079f
SHA256d82fc58f2fa7101c1f399a5639c9cf68a22761692bbfae3c2eb5f63c252f9ae0
SHA512b13b432c0ce99cdc6a1caa6f70fceca42e8f2dd39f68e88f34f4657e9b4fc14f3a11c6c1a0344a389819cea7397981c7653a258ff5d8b9bccd5eed81d15a8dd5
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png
Filesize4KB
MD520198f5b357a343e803dd260c7dba12e
SHA180c1eb81b254cdbba554a3b7d4aa65cbee8ed641
SHA256d729160342de8127cc00966b73545f8534ff5a2c7d51c723222e342196828173
SHA51273937d400d74592b1593c78f20504a417fb9134838733a79e086262cac7c5824a745ef254390af94b0e9182277eb172c7454e656e663e1951f8955c6176c3613
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png
Filesize1003B
MD562b6a146d9b7bf4095c735c785157f05
SHA17ddd10e655a4c45db5044fa51dc112829a16c436
SHA256777bad6fb5ddd584c936c5971df15c10d7389ac9807662472f57b5688853fcf3
SHA51275ae16d0d24f339f982b339f8a77b95208cc5cbcd48a85cbb8a6ef1ce20f6a350cebf7665a870f8e3e86d28bbc1696a9ef7eacf7096097f932f2155698ffba48
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png
Filesize1KB
MD557dd9d7d1d3028bb933f633371564808
SHA1a62ded08af19658bd174d91401d2fd1acd98b210
SHA2565b87e4d57630234aa0d5bfad9d598ed5af143099e06b38859ce73810cbd5974f
SHA512ac6150e4bfc37616b2b99e52b991b461f61f7de355b361cfc68082960d20f2bc27153e2fabf18c3d6a84622f992129fb8df9d15ec899d2683129596748d57e13
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png
Filesize2KB
MD5064e2b3a84a343339633dd4b52b75a96
SHA1beb48b558ad26d8dab8553446a9f2ea86e2c1d30
SHA256fa7bdcacb9008b04a75a2bcc2f33133eddb42d117496fa50920f3c8d274ae887
SHA512aeb88d9e4f7ca7af5a795e7cf67ad49f22fdbf78290a68ed0365e5acad269f6af00a3dbf2476d27823e2fb66745abb0d988d170566e1ddd1edd2e530592150b5
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png
Filesize3KB
MD5c75267e7398642f856adc09abd6f217a
SHA1e8f23061db84cd1293c0b5d982e8bccf7aa09bf7
SHA256900efaa690c63abef3b4208e5a28abaeb693579c6fc7ef92e6bca1abd091c0b6
SHA512de4cb9e3df8206dafba126b0db6778e388ac89c1f78f0d573cf1642862c9d820aa038c2b17fd3e5a2da62201bf32f6ae28c29e91a248f8648e9aac6f90024bfd
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif
Filesize556B
MD5494c87253ba70e2c0404b4aae45bc1c4
SHA1b715023eddfe69ec246a9e59f413d66ea44fbef2
SHA25608146e5067bc3b27871fbd9be456cd25559f2d24909d13f478ffcb56e5908a40
SHA51281d875cfe28b9dc310c933935c4606267d5e4872e1b2da69f9a34782e9662475c336f69ed8feca2a8a0df9b459bc848f6c13a8ab7bfda84c39c273eced523b24
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png
Filesize6KB
MD58b506db85f57b3c80cb61ea24ca7359e
SHA15ba1e4c608a33776cb3134193cba0e40e1428f51
SHA256f18e5d31b9f1d482624a99dcfc059773472be7f538452ffeadc80ea1e4963e8d
SHA512830a3aab0c0b51bc2fe62dbbc84d743ee871f990e408237123b5122f689f553e5f560e56bdeeea05afee1c19f869ea0fd68b9d932a893e57573007580ac0495b
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png
Filesize826B
MD569d718171a7ed18c322b1f216b9519b4
SHA1fa11b564e2f019e79a83dc34a0b5a47d515186e7
SHA256441e24de0e9a1d2f9a218dabc5148ca8877b2fe1de5798a6befa2b6a15bd0f23
SHA512be23705e873acacd360d21ec19701a25b6256046cfe4a199bc56f3283e3b9724f19677207f2dc95d12bb0480c2ebb044b303cf079354d71f6c928998c4ba6e40
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png
Filesize1KB
MD554c54292e3675e69991ef84b8406e83e
SHA14456ae8230eef9feabd400eb1a76768920f34035
SHA256fc0589f66ae95d0b3c813527fc59dda5b0e556007ee088a4f903cf22270a0912
SHA512587d2dc82d7af40d839769943af51b530e4ef047701398e23b785ab83b469427bacf6e99ac7c2195bbf837a6ca6512ec2c62fce43592382c677f6e04fff104fd
-
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt
Filesize32KB
MD5ebd1c196536bfe3887b557555a010f62
SHA113e8d9d3220d4ed11c440e4f51ed087116ce5d2b
SHA256fb6b648998d3480f4aeb824eafd1567b19c3e371178e3a0be598162f24a02400
SHA512d6f5944d825792cbf59571f18580e558dd4a9b80437d5061d00cba2a74d6c6982ce9e3978a18a71f60b3e4a036f0b7d2f890d1b2c6bd67576b31df155e1342c2
-
Filesize
282B
MD569a98ef655778f1cb3764a923acbae80
SHA122683321e95c9a631039d15fc49ac5d3e639ac54
SHA2562ff127d5bc4c7333c8f522aa4b456684eca97c06d452bf7d00b6a99b49b11b0e
SHA512610fc09f40124e1a74ff303ddd95ad5809679be9e0c381e5d367ecf8e1e137c3da188142de7a2c5fe2b1225e12482245f2b5c417d43d73618108bfb1c32a5ed2
-
Filesize
153B
MD52d0553cc205a3841d14e2c7efb3aaa3e
SHA13d98712d43a0e2aa9f02f6e5ec7850811fa34f20
SHA256b333f3e18552ab51d04b51c76d3bca70e67628be2225aa60bb72d90d4e417f9e
SHA5124c8447ace4b8a5c1cea65d57341b299e096861ccc58041659c936a6c3e855198c9211e6f5b223bbecde48726317bbd4c43e0042be5669f288c9117263e4f94f5
-
Filesize
190B
MD53d905302ea67d022b5764b8d75f230fd
SHA18f3afea0105e00548ca6b9231e80810c4836ec26
SHA2567f6bddd2725492ffe92377874e4b46a4dae0a4d0ef4af1c079186f0a93104865
SHA5128ca5624d212dcafa41152b1d9dc2ee3786e9c6715329a5a5fea50604d3180ffdd31f2955d317dd9827285a5e9aa6ef8f8210fc248ac04b3beb059124a8a57cfb
-
Filesize
190B
MD50ecefbcc34cd8f1b0505aceb597075d6
SHA1dff5549c90cfbae7f326cd1edfe98b4fec0b0f09
SHA2568dd8f178fec70847b4d54a18709293d85d7b35d24f250a91a4bb3e9ebf6fa4a7
SHA5120d5af9db30f799033c72e73a3e61a44278d3fb4df00840354786ef3de3ceb9d462a11590131fd435aa4f091046c1042206494aa76838dc4584e86d7eb9b08c24
-
Filesize
1KB
MD519db38b108dccbb6d9d510c7d29c8a8a
SHA1e9987ca5ef36de9aac7bd58e59db4b57a2b6bf2f
SHA256b433e3610dcd692354453c05a28791df5c7884ce3372b64c2dd530cfa2627c4f
SHA5120deb2710e09d88108f3551ffe16efe259c4674b232b1c9bae8dbc788a0d10226a112d279d052286dda15ef83aec622e5c3a4e2f976da4b495742d05c44940f7c
-
Filesize
31KB
MD580db70c2780e57be05cd1695a888f118
SHA153276e6cdbc6c3d099b355a6eb94b173ea90e2ad
SHA2565dbfd887288023047d3b1178254f4b79594ddef895d2c02cabd9db7a6a01132c
SHA51239e95a499073c8478bd4da89f50efa503993f58853b4d1ef2ce292cacf0fa471e90a363ee3e4e4512f7e277a3386531cfbccc7c4185c6703ac3acb2f77273734
-
Filesize
34KB
MD5c874e92e488e899796846649a23475ee
SHA1e317dedf93d30a598a53b8e4a70692ad7b864483
SHA256c8ba848757e692345f8494787b7031c97cbfed6fe6306d9d5edad166888d16d5
SHA512f95f9e3b892301c8355dad6c13235bc19d7c37c020005a91aec35de6be89d4fa212d799d86ba0896b080b4a8b48536f41df25cf64b4423317d3e55bdb39e2318
-
Filesize
23KB
MD588da11b7568f072800ac8dcd9accd251
SHA1fe1f1fd183fd0b0fddc25b831bb7d23ae3331bf0
SHA2566b2bb35ff6dd6c80ebf2bf84d62180f5bf113778eaa72bc5ee9d3f4817d0071d
SHA512253412746282953d2735f5924a9a988ee7d6c815557d5cafe47f022253fa4f9bf6e17a972f1c35bdb52862fa010c67e316fbf4d45212f7ae498819b2acff8a3c
-
Filesize
2KB
MD5baa89f44d4257fd74fe7019544c3e52c
SHA1dcf8234435257dd407ec124f96a7c25ad1c097a9
SHA2568cc23704e40c80f3b0a66f24e27d77250d5c289c988277446e8aa1ec4545e0e0
SHA512f634ae23e4812f2b6531189045c5de3904ab87939fc100181bd2507fd4fde9120e47902b702ff7780319c51ead7335b2347dab6194b4dc5d8a33115b4c173394
-
Filesize
1KB
MD59eca3c9f4ccc936184d0f5a2939106ff
SHA18fa8504d6c3437fb6acb4f2031a59efbb33e737d
SHA2566ff9e6fdac978ad4359f1ffc6aad194098e5f63d51338c62ca24590ccb4c30d1
SHA5122932909503eb29bfbaeeecedbf3f338588005416c62603e44c9e7dbaef981efcdb3608fea06e019548008169ca777912711f67b4ab14bf503ff0eba68843356e
-
Filesize
3KB
MD58121220eae9e227baf1e6a8e85c35930
SHA11a3eeb9c3863d904958dae0656109618fce7c33c
SHA256e6b8b2dfffe1fd10e6587c565711c9857a7071abd659d4db16df534462ee888a
SHA5129fceb06121fe0a628b183087d44bfe7575e28c6683a5ba153cf1562f3676f493ce1899e730f1fbfc49e9bdc507a2f18b985514a99a6da96b47ab7641d9762bbe
-
Filesize
2KB
MD59d9475bdf1af288fd139ce28b108c87a
SHA1c86192f8663738f8aeb94138393a5d2a207dabc7
SHA2568bcce0799ee8269f83538c8eb53c37c8b469603fca640248a4304d5758fe160f
SHA512e8fd75c810994b6536d68cc3bc2407d74cee693dc6ade8cd0ce4e8ecbea74dc84f67c4e67f469622ceb6a7cc118f1b13b30986d0370ee0dc2fd4801fe9b93dc3
-
Filesize
5KB
MD553168f2d8d7855ee3eb535fd4c833c74
SHA15cca8df1813600d4cdac5ac9c4b742504c2df096
SHA2564b4feb08b1dd183ebea84250b4910712827d5eece431eddd39566aac40d4517e
SHA512e494c51f60cdfc3b373866f25db045b5bf54cc463a8b9d0becda7bf3a54db628323817bdbeb3c9ca1d8e6ebb9ccf4537d60a90b4c222ab878c98f8feb444201b
-
Filesize
17KB
MD5c969d16e913ae2017ea8c65844ad2e13
SHA1c83db12f8441cd72a67a63ac88fe51a350aa43b1
SHA2563cdb8c1c4cdb7978710eff7cde5b36baad9f5415c228a3827a22ac881bc4eba0
SHA512dd830b330e766e530bf1916bf4b9142f53c2196d6f33608004d7c0b8dbd4b28e242a91be4be558694df29b4eedc853703df661bd4c541e2861363874caccbaeb
-
Filesize
320KB
MD5004de628e9c2caddc9f1a43fd1c28640
SHA18fe9f17dc73be10ad5e4c9661e0f0577afb05162
SHA256a1b475df46c25bd9dd82de1573ea26ba8b623652c5175254ffc0564e445aefe8
SHA512199ea79a69e5d5d19d3a280d5319df11084e288ab571fc6feae40ad5019d120c8490173e68678e6fba6fe67778b8ccc2c51949512c3d7b9f626f83dece8a1145
-
Filesize
1KB
MD5740f75e77c55f17845b7a008f78c9b75
SHA1734003f6b1e1493eebd4f7552c96e4b01017e1bd
SHA2569b737aa7599c14f1ff663515e9e527b1f37203e3a43d1817c5f88fa102e62067
SHA512d771b0d7fda3fcef1a2e94ce5089bb2148ef7bfb6c70a3b7b30ccb19211f805eb076813a5db2abca1af865a85d8a1abde052ec16997dc67a063f6dd1a4ec84aa
-
Filesize
10KB
MD583178561e229867f51ae8aeb03bdd6fd
SHA1393127651e7395e5c15ca33ee1defe6c2c6870d5
SHA256da9a10331da54ec3a2dc4655ea97ec0e580a58a591fce2903fd2714ef8447831
SHA512f1a1c69d572194af68f1b6ede047dc3275eaaa4b48a36c43dae3a65e1d248f2bc9dca09a69aff219219a24666470d843331e26bdd7e82d92246838b5fcf9a462
-
Filesize
3KB
MD55f88c2d0d5ff4389bf21fe3994969447
SHA19c31623168b84a373d946e4e7b56a8dbf3bfd653
SHA25688950ce17423b3d72d4fa4d0a158f7f9e08fe1b31c25a9eaec6739ca9f600aa5
SHA51208f5f90aba807b13c76b3befb49d0e9036814fe1054f56acfbeea226592452796c7e100956258210457bd31250fc6c69796e56616dabdc9c5b0d011d9ff3d1d5
-
Filesize
162B
MD5ae5f3981f3fca920e5ea8adb51017d18
SHA148a517f127ab1009bcf0385487470ddf847e17a5
SHA2568f55c8c83434d987f83326122954736c6fae360cc2fe8a36af0ca893ca3f680c
SHA51286861692d48116bf3aabb49bff1789f7365d17e8d8d4321d0b8a2e5bee3bf313e267c43a85d35aba97f32839e66c50ae7ea22c47b2d3764abacf67ad3deb5ba2
-
Filesize
1KB
MD5116bb1949a88e5242c36189bba423a35
SHA13a39cb5fbaba6172bcdbf0e02cdc0f9caf248424
SHA25620a59266b2bc4d1ac637371e1bfbb4ff3997be5aab6f1b64a65ecf32215f8523
SHA51259310e14db503c398925aaa27a7f4dfc6eb61c0d042d15f29f1556165dc4f48c5bf33e2e11ffd0ab101d80376db5afd0792417ff717a9c659b3acf3fca5a5224
-
Filesize
3KB
MD52008793f99a02841b98d88cb7c60f1ca
SHA12b2e5193e8356d7748d9ba32803f58b2ed75e711
SHA256cffa6e42c3b099551bd0fe76832ad5aae8e3f277a091ed89a319a93839eb393b
SHA512ac0af0e827582e3b250b47f5f2d5f4461358d488261f4ec414f422836e98c5aad79826716c74fa2c1f499f61aa5ff3acaab08b630c2082cc9584545b8a1ad08d
-
Filesize
1KB
MD5862a9c85a5013d38836cd621a03396fd
SHA11195cff3b1b134508b8b4328a7d780d6246ecd21
SHA2569d7816a4bb37abfd387b58368b98385420669f7951ad6724d4d25d433437e05f
SHA5123b28c1dc8ec4c360306d70e57d7c57a3d0b29b274b07ee58a4da30ca740e7c226a9b5dc411812da9742b69336d36ea25ed9d66dd8b09638064ca82bbe97d47a4
-
Filesize
28KB
MD5738319f31238fd8b43772e5b27539c15
SHA13b842136db0cfa34aaf5006074df4b655844fc85
SHA256d647c1a4d9582efd81d08607802a3591b077e51160cd1b9ffd51e10b442023e9
SHA512c2d527aac22285756830d1580406c38b9c0ccbdb6bb7b5281040aeb0c2bde6ebe910e6cef41c8f2a8c97c2c124246fb47f1357aac9f22bef31f2c6b8391165b9
-
Filesize
2KB
MD54e22b7dda036ce0d93540fb6a239f2f5
SHA199391f59bd03786fbc52776f6eb5d2248289d12f
SHA256d71e8685f83477aab5d7a15cd77e8c86012256099c7a2ca79069d246fbcfca71
SHA51211ac5cee8c6408c6d04bfd5d825376f4b0bb9ea560346c99fbb9fe85993cb6eebfc4aa7b3001dffd3fa78bbdbcd2f8667ca199932e0055d13094f62a7134b8de
-
Filesize
1KB
MD523c3feb32ca009c0b7cea4de35fe5656
SHA1ced16a4e1c925aabb4b6e3e80ba8e72cd12ddfc8
SHA2569176cd592320a88755111fa21d75d40847be530518271d693eb52ce2dfc2b726
SHA512933e8eab12ad6b12c7e3fa81c07e0b7aea5df3bd9cc3205f64dcf6b344c4af0e2039cbc83be2a7f631277ae700de56938a357fba3b707d2519f06c25ec9f8384
-
Filesize
2KB
MD5ad7f67cb947fbf68116c94c292878e72
SHA15a444b23e9906092b99455a53a4680a0ec50dd30
SHA256c55de34d46050bd1804c16ca627ecb4743d41fe0e0cc1152caaf91e3f0748319
SHA512940553d9d958e4607eaa6e2b4b2b78a5f121fd0d9c9bd917c237fa1efd8052d8bdda746442d8f6b7109cac5328a0cf6b41f2797c26cd2a099773029cce6816c9
-
Filesize
1KB
MD5b7e7fc17c8fffc366d531b50e2d03b73
SHA17b084336be4c505d3b70da3848272eef87d7e674
SHA2563f5bebfbed797f19921f7f3774238b93fc49e8ea1de7e6382a724460332907b9
SHA51283ead4c0c3fb891f58133597fb5b27375bbad110bcce69f2f5b5d877f92ba41f8c87740464ec3b8197fd3ec4b5333c7dc57267755abca374d38fd2be1ac8bb3d
-
Filesize
1KB
MD5998a7e183a5b2107c5d59646d1f19556
SHA1929ea35ebdf1b9ba89eebb78d934753ca8a42d19
SHA2567f57cc1e067014e42ae410825ba5463bb205ae6cecf1c57baa6c78c28ca304f6
SHA5128a3e65658248e420b39388de70a06d8983cecec97bcbaab1217d9f084dbd792d6cf9ff5c1b8b39f587d8589c16eccde38a357b63aa2495bd642e61129536a866
-
Filesize
1KB
MD54451b19cf27ca6ceeeda239975d27781
SHA134d5f32e731a12b9a923c6d9790bea2672bf4edb
SHA256a3e37f1c28e7c5addac255fa37234e9fb35415143349a2119235c158907b81f3
SHA512c184fee350f1fb55eac4df9685b2a7e0175f53b5009edafb850779720f29e26a125e638788960f8dd49551e5c61dbd456bd390f5a9f8f993445ef4c0089aa2a0
-
Filesize
3KB
MD5d21ab98b81f3286ad3f2c85a75eedd10
SHA1f0e390f96f211ff09d2d638b8ef038427ff0baf2
SHA2565913e20c4b368c4b44443e2d4399617645fe5bd94415556d70bd09e1ffe319f7
SHA512b375161c589aef45f4eed31d7a28417c170588d0482293fdb8ca91e7df2614fecc55bd0665f00d07a39d6f28eadf504e29feeda833c054770a04e2faa4b9252e
-
Filesize
2KB
MD5b97aeff37b24c699c7ef04c48a414f0e
SHA113267a4d067f628b11c4360e9fbd304fb614568e
SHA256f3c385b315f0c9ff3f6ccfd3a85085090a8b2f950b41c77f3915ba1295ae5b43
SHA51289a6be9949d2f8bd523d89c330d317f5f5a253c3c507e9d3130fdb3c5be7e5663dc4065fc6224489a0a48d3e872d83f50c26a539d5988cfa2a6893a4e5f7b041
-
Filesize
6KB
MD5eaee6b0d5a5444f571a24a10e0bc7b2f
SHA115db680587d198c14085d7f5d2fc6ab3bc841127
SHA25639a401c25f012d2f05253abd2848e60f9cd5a77c55dee9d879ba38d6bf71028e
SHA51232685077f199f9da0bddb79cdc4fbf94b94827512caeed22c57fab089d2760554b63a10706de2005452342dd82ad1e5ff4e6792325f35b0ec7ec8bcc7b5b4a17
-
Filesize
5KB
MD52ffa128964303b907af1e4803c3f68bb
SHA12a470ff7078c8172a1ecbe0758ac18eee6cd5577
SHA2560fa0080281baaa6d65eae9e11d202cd92477346cf96f5d107564825dcaf626dd
SHA512b67c0a15bbde5b057486a05d4b952fa274e6dc93d655f96e3585b8e8c9ad8e7f2874d067767dab8580196a6a458adc11005ca508708044d6b059a3502b7ed14d
-
Filesize
3KB
MD598a9636d73bad86f440627b65d82ac37
SHA1f4db10cc39e1a6e34c45156b5d9a3bce25b01efa
SHA256eedff1d71a1724530852c7b4d5d7f8b057ca221e9bb741666f7839af7b30b672
SHA512442273ae5bda3294d31ffcbd55e1026f9dbcf5cbe83c2637469d3041af5916af510384ca32fe9f15c35730c06fe11b482806a12f1b6974211c4a2bcca8640bc7
-
Filesize
2KB
MD55268cc7065dc02553c708bfb9d2b550a
SHA13190c882aba7a45f3af2fc5dfa7fafbec2739025
SHA256f6b5313a7c6e6129680d8f5e9ac38d714c73d546fcd47708ab75e81a47ac3d33
SHA512443d244535bce02a69f3e70e40e572bf8413c154907bf83e2cf18ba9f9146a5248036d58c6aa03198ede98d5f5e1168b648ab57e4cc63fd6a6605789245fda3a
-
Filesize
2KB
MD59e3b8114b1b6a336dd6e1dbf12aab554
SHA18e24292e1ccc6ffdab7283bfaa327a09f1797d84
SHA25658c9df169baaf746d0c22ae7b7e7ecdc15139bab12bca02b49e9281820e41b85
SHA5123391cfe2ea972dc7e4a545ae3605f0a2f67e40520f5abb04a902f73ca93e8884192afac0074030bbcb35deca669d51577d4e4a7f23b81882297a7445342a2d7d
-
Filesize
1KB
MD5c46ffefdbc445428ae49ba2553e6ecd4
SHA13f8a01e58f29c3b28840d97fb1a43a1403979a21
SHA256c77f9a333d5c26f803e879734ae38802362393b1c3a861b2097e7316e85f92f6
SHA5127c6d9f39913ce3408419576657cfb96605de79920c1004b91cf385c5eec6ca21e93df38018793a418088dae2a82d86df135ac9efe77eceb26bc9be05c3563be3
-
Filesize
1KB
MD52867b46785d263d4f75042be7c3b8751
SHA17dd6f47a62d06f3a84a01a1f5e28c2669877595c
SHA25631394dd84c0305e293ba0efcf777299cda6b66cf297061e92992a6c09689b739
SHA5121f17f054eb8700e7e400b11d199800d5c308dc6473b5600635493ecd803bd7fc6e4131a6a4c8b3f23e564d9a2289d6dbcc44e89a9fa6f759df5c7456512e5b6c
-
Filesize
11KB
MD5ca0f61644678dec4003881eca3f88b63
SHA174841cbf0e2458c115f4d9a84dbbf67acf4edfe9
SHA25610ecf0a0a6e8989730bcb023985c17010c43480897d5a721e745113344c16385
SHA5122af0b04ae505f26bed10e8ff9fcd853f69247944ac943516f0d752c7bebd8a656bcd302a3de4976dbbc2f0c3a048cec6ee360985c3331a1b355c666dc5ca2d8c
-
Filesize
1KB
MD58fd08e65c65be873c00c1dbb0b59ad19
SHA1f024b38fea87d944a10973dd2a6d5e9d03624746
SHA2565bcede5831cd21cdb46f0f15ce3d644aa8bebcd10973c78617ea8748a6f7cc33
SHA512625102c9d14fa40a3addb0b78f0bcd9da1e3a034a6bf73c92c81e50ff0ea7c2288e275a83a263fc945b2ba46597b83c5eb57f8e3c3ebcf267728ea980e7f7c45
-
Filesize
2KB
MD529ed73e2a4bd9e90aef272f8b38dae9f
SHA1bcc04db6d1dfbd6a331698ffef17a01d14bec99b
SHA256ad09500ac8350b404e28732e98960489c273c677f4287703c6caaba4098082c7
SHA512c4cc7f55b3236ce8e844b33f2094881374558a36cb31a5bffd74492c9cf20a33c97df1d8e0db1b5fc1a06ab86122343cfc5685b40b1a5652e515323763545beb
-
Filesize
11KB
MD5808e90c2f51e64d5cf271aeea6899172
SHA1511b4e8b742c5af9396308c932136c294aa6baf5
SHA256790b494d2bd4e9349b6fff263dfbc228efe587d7bc57555edecc002b966db31b
SHA5124e6f6095a4ec1697e3e7751ec3fdbb867746f0b2610f7a3a49f071182c1a24cc1b1ce788c243c9e5c8440e12842286610b172857331663175d445465fbd9a4bf
-
Filesize
11KB
MD5db2e84cc8ac08fe262079638f5be92d2
SHA1ae1ef601e2fcc1740384ca447a7500edbe6f6b8e
SHA25661f87d07f21bccba29e5dc725b3a7541092d56cf69c2c1b1b400cc76940423b5
SHA51257d1d86709b974ad810d9e46ea8805388ef59070da899a3b190eda9ab64e196ad4ec72223d12d1b9d7f71b5d11aac5381fe7acc7c8d4c2ab5b4313107bf496ca
-
Filesize
11KB
MD5df4fd1a1dd684ffaf3ae5600035ac83a
SHA1305390faba9fc653b7e6a942297e0394d8294bd8
SHA256f9b663b9ae878ffdd9189bef0e90c37f161057aa823270c1bfe60e82e67ebf72
SHA512dcfd3e588ba567ee26ce1c2e5293961975b1cb3896b238b462e5d5d758b5741dd9bdb9a9b6ab7cb660683b83fc44346b9baa4cad49bba3b0583fa3fd8819653b
-
Filesize
1011B
MD5e373fb7a0c345b8a5637638fce1e8f27
SHA196e86bc6f27c4530a2f1b2f2740b298778359d67
SHA2560a3ba06f05513ef9297d94e0a13702c0b84c2b9735903d2bccf6607e68b02949
SHA512fc7b83f2a2fd3d45a7c447a6f93ef2353800c52ef3673cc07bbd505646a21139c23da535638280fbf0342495cddef2dc0bcb5a6d0e1bf3232ae89219160faf89
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133784029150071237.txt
Filesize53KB
MD5a6978334bfd11c7b0da534cc9116b48e
SHA1861b2986f621c81054eea69c963edb001a415dc4
SHA25631d280451bc74dd4f76e9583e54bfce23c8d1f848d133c84bcd6f33dff5bc208
SHA512a14744889a0fd1899cc4045e751c5f089bf48084bce6518783805dea7bf5d79b869f0520412cfd66694b7947a628fe0cadcaacf0c47556ccc3e761df9d281df4
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133784036053515562.txt
Filesize70KB
MD54f00ee7bf1db704a6ae507e1a05220a9
SHA1650c27b58aa8e327e826b7175ddbaca0848c8a78
SHA2565d3eb7cb74228269fdb110bd99604e50411e34e904e555a80265147b822d73fe
SHA5120455f559d64cd7260a01b07de9bf5210ddd31631c08edf0f281f7a05b6e1831c931c8da392bc6e478cbcf8087748db7f1750426a82ff8ce8d277b9a931a56884
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133784095666026201.txt
Filesize82KB
MD5f0828034ffd5d51066a6fd59e65428dc
SHA1db777663c9c082830ac24d3fa87550918f10969e
SHA25629b5557dd8b721bdbdc0e228c77e8403fdad54e25b26afe4330b1d15ac92b88b
SHA512dfe4430e8c80a5c376322c1f941a5ea5367cd5920173d7fb68f5ccc977e80f6b97d480dbe0fa11703f230268f9461a1fe59669da149e34570eb14793c6866bac
-
Filesize
12KB
MD5f9154b290dc8fbf1bc82065d656b6590
SHA1cca6c6b00d6072f08aad735cb559839f333fcb9a
SHA2567bb40acf3aadb46d5d7f7de1d2e8e81739aeb26c7bbe7c4248fa074e3d6f456a
SHA51262dbfb6cb8025fe80c47fc076964cd33592f7a1bed2094554522d46b1a7b04b03056343be59c0180543b0097735564e35fa306c0ef025f0d7434bda44a80e623
-
Filesize
21KB
MD5a85df0e4b9ab852dd8f188f37855015c
SHA1b5a19c5a83e95df865cabc781077fde569d9adc4
SHA256b672a7f39a2ace9c7d75508030eeed7baaa153ed2d472dd8189e88e6f11bc277
SHA512122d0c73abf014919acb5b9005b43f25d1df66835022b0c322abf5600bece7f76b9564f418b379130f59c9776e6257238e0911f1f2b3214bd79f98c7d4955c70
-
Filesize
1KB
MD53fe7e7080a0376e6837ca7aed886cb58
SHA1c8f0bb58f25a2a9b6d3ede835b46b553cd293371
SHA2565b951b7fd62f1168c1158a166f29616fee8038c49e3d0f55c1542ff118c1a245
SHA512414bc5542c86c1e8061ad8a00c895fb9fd32fa3246f6affe653c55445214cfbae30f1f54a35bda86d8bc846e7f458a19b4421d1fc151c7a89c1fb3ccf48ec4ea
-
Filesize
952B
MD5ec30102a0fd6d076373b38f149a0167a
SHA1554efa00939e1c247aaed9ad938aa0382ac8fb72
SHA25637bc25513c64745d36b7191fd2a6df3fab814406f0745597fa619363b0d965e7
SHA51296e6059cb05f33192cb7a462418482efff8ce08fd8089a2a7af1b183beeb1ecf70ab745bbc25fa2c7614d5036635e1124a7f980424df84c0d43a2b6e2dbbb7d2
-
Filesize
121B
MD5d8a69df7d67ca613881b2e35e7c6f7f4
SHA1b93f49083e65d5bf1ee0998b344fc97d21bcbfc4
SHA256ea9ed7881a3a521fe7e4269160206cf33e233b04505cb0b2fb03e30b6c4e7c69
SHA51250935176980a930ae8381b00e906084d87620db698aa53586e6e88c0a10123abf6431c67a02d3fb423ef59f5309c2b8897e1616201637bce96b48bf614604a91
-
Filesize
1KB
MD564944c2625fe9dfa4b718a3893470a60
SHA1fcedfc9327e10525c33187f4a1e93d155b1a5a65
SHA256b20fb5250e2d77467afac6ac336e4d4cd3d79a3739df06a9d702a25dd18b75be
SHA51237a9c8ccbd0ae55a305fbc85e38e5f5398f3996fc951cebc6ffa48a3fd01037e7cb3eb60a10f798b113e6c70dfd4e86f3f95c41c495922610751fbe0aa8c69ad
-
Filesize
8KB
MD5fdad09ee7e8afa89f3724f9dd568f572
SHA147e5167c4cc1a2e70a6bf8981e86d701e184c73f
SHA256ed0b07167a916e674e3050de518488de8a341f8e9aeb6eebdf7e0bc4bbeece0b
SHA5121ee08143735b098c49d9a388c6acdf04370b98e29bcc240f63b4121dc7714220b3fa4f28b402b701ca300297cbf6f4580701a7510129de53d3d1b44adef687a4
-
Filesize
61B
MD58917a4f0a9569288b79cbb6de9841284
SHA113662515502db57f02e5d25f56ccbfa1c66f8f0f
SHA256e72e1dd82c5a7de127d2fd82ee8b91a97086bd8c9749feab976f784b98059851
SHA5121fa5ce6068fd34e41dda560fe83e6df2897990527704dc93838ef9d5720aca942644ceb4dea29d9e4f2acd94ec138b359d3ed6169f2f9eb10ba8e7866df8086b
-
Filesize
914B
MD535e9128d06ea8a57bfcdcc2ae4b8565c
SHA196e9a5628e67869f79109e52a8f57df76e96f443
SHA25649ebc466bc8680fec5fe2ef28e4cf72e989547c616ec0b3c614526c877ca8f22
SHA512c83305a8d3a7c0db3ce08184bbd0a6c80cdbf964c3ea2c59f53d03f5fe16c9cf3c0787ecbed4ee467d641968ff730a18125a2af4e81e092b8f3cbdff03626f26
-
Filesize
90B
MD522f08cd0e5008a7a82f1dcc1ff01cc6d
SHA1ce8070e90f65037e6b40fbf0f89491590507db15
SHA25672c4aa30ce8abf0808b391aea9b253b9a1fb4417b14ddf83db5ee2bf21828178
SHA5129ac15fa0361f040649e79b774a00e410baf32af1d493e2a11f426e89086e199076f5bf46591bee49dd04e2e7f2e9ef0cdd8402f8998b64927c7eb248cbbadef1
-
Filesize
90B
MD5cd1c39cd44504bb8498f508272d82966
SHA167365e3a95eb0a0b3c465c5473518c7dd3dce328
SHA25649dcf3a3dc4beae083a51eb160ccaeef27a9b3f76839f1c82d5f72568c1d3569
SHA512b31625c825cd56f144a4ec8f483ef07bc0337ee9b44d3002c63f9808d7e777ad38a9b2c18c7a3d1187944944d6e435aea80c13e48b3427631d83c2b587de8f4b
-
Filesize
328B
MD5c5a135130450a5e1306d7fb7d8fc5eee
SHA191e96e62e281503c94226f2c9912bdb9700c0f6e
SHA2560dffe540ff86b0cafc1041e64be9f647e99565bca1dee9b97ab6ebe96e4cc3b1
SHA512881240815890a1e4e150b8de6718e8433396b856415f328b3b665964dd89370c5c18b52dd4229e9ad719494c433e8dc2aeb0b521f7969f53e636a6a90d94cb5e
-
Filesize
1KB
MD55842f15d93dbb2c2363af434d399c9e7
SHA157c9b22a23508799bd6a5651639544cc318911dd
SHA25647168925d21909073ce8bcce27d03bd65a800b0ab201776e57adcc232b9b3a9e
SHA512c6ace1609f5999c1ce8ed5d72db734f4d45c2b31541830b847a66875ce22767f4d8e4eb3aee81ebb43869b622d522ee8c3d201e890f0bc4b63ac8c58b10f32f3
-
Filesize
162B
MD5d00ff2a55b13927a050196b634ce28c0
SHA1ccd30b19ae7399e4fb4774b5a19afdae30629a1b
SHA256f629d5291b004ebb863dd2e3e859e47ea3bb73426b6794ad43d6fcf929e99c11
SHA5129b160b77c197a2d7bf48800b7e6a050add2801cd721439b12ebd2a4b4ce79556fb2912b6b5c59ebf1f559d790a9ea53539e287e5c6a2dd102126c636bc2d0f07
-
Filesize
586B
MD5e3de6fdda983fa80ee1a5d9f9a9cee17
SHA1ac59f9983cb92c3d9167b6c40949603b1e4a6782
SHA25690470e60cf050eca1a2116fa8ba0fe341ee914eec5ca7052e67e2a84af3d7ed4
SHA512809a1ba8c086c5092ffff7a31147369fe1feafa2b99c687fa428cc2066986ddf80fb5655148f56f909a99fde7d2875953a3a51fafa7f68c7a1f81030205a04bd
-
Filesize
124B
MD509d5f8f26a0294cbf4aaa5c29ff35d52
SHA1dc008919c825a57e8162022cff3ed5f4fd462746
SHA25644b14bc153bbf622d79a735238e5869fd461751facc5987d66601300491b637b
SHA512f25cd8fb71bb3e9e083a9496953127c793fe2ed08b67301f7a1b85df800509e2044950d866fab7d833648f4dce27967f321dcfa52a463b2763ee5fce9ce5da48
-
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_leftCorner.gif
Filesize65B
MD5948228282eb5c491b7f6a972d48cb6eb
SHA122762f58e2c0456f8f8c9c3e83155407edd192ce
SHA256b7b1970628a6fd80d602a9771228762239c7d91cfd0d4b95b0ac0fff92219dd8
SHA512b7e0130dcb2d103883d4b1288d82d5413e4769f65380a41f7f4035708873e6ab9b802c69975fc2351ddc074f7a8648f58f95ceeaad7eeee5a97f84aaa1ab91a7
-
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_rightCorner.gif
Filesize65B
MD5545ae7e0323f9ca8caf0d14c85fd985b
SHA141296bd50cd9aa9d91cbf9cc147c358395ae3682
SHA2560c0e49db37c480bdeeeae2fb2724d456f4211275a67f36dd89c2f8754adaf4f9
SHA512625c9ad077e0a7dea12955d533cc2c31afcba637d7602f3cec4987ff94c925b2d272e02467f7f4172c39aba3ca6491c8448e00619ce7f7adbc5ca37b6c7c1a1c
-
Filesize
8KB
MD599096398e2598a36478b95087cc557cb
SHA1c8c365b705ef26eb22386fd7451b0ac2ae26537b
SHA256a5d07da2d0a152f27eb5bcc27ca3a8ff5b3431faf0b93a011dd6e6e311ee5fd3
SHA51261921098edab154b7fac4fe56dec75123a7abd8e003d8326b1240c9aad574db3cb403cdfc94e4bbb7f384b92d876e077d191fd4fadc61f9ad628e428f283c7f7
-
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\unSelectedTab_leftCorner.gif
Filesize65B
MD5a389f2a76aba1d17ce144f2021c0a790
SHA1d25209d1ce4cd89d6de860e5d885b949f88c763a
SHA256272c48dc58612b22ae3464004de8b4293a62d8f3c55a93f718c158bbfd4bb231
SHA5123d551d49134bd21fc92247ed3376002c953d638f6db4ea10815b1008b1d1ac362f7b6b4e465503260c84d2ed49cbe296c1dedfb0bf44a247204481ab06fc0e27
-
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\unSelectedTab_rightCorner.gif
Filesize65B
MD5b693124a044473c227ffa0d4974a88e1
SHA18002f88bbeb435a637a63a06b6961a752422d019
SHA256a3290c6d805329a2a9a750743bdf8391e170b28a1d0a4afbb9e26afde103d673
SHA512b82410e248406989b45261d1c49dd1a314c1d62fc485a479388a61aadf3d24ce82d91d5102b08e508453e40cae1d5f6aa3d35dc34737d58dcaba0a4e529e957c
-
Filesize
880B
MD59507723eca58ad43ad4898cbf53226d9
SHA193fb54ac26cbca2609bf90c5976ce9dd7aa70740
SHA2562429679ee1657932f856554aa7b4e0125010860660f033234c1b82e790a71aba
SHA512ff643bad0d2dcf7208a69a5590d5878cea96202364a1144cccf6d254f6ef8be8c1142d82721058fafaf88446d35585cb4654c4122f47da5d9b4e50ae7c289d55
-
Filesize
49B
MD52fb408fa4e066829075e6dfb2619464f
SHA170c0f86d13275c907454c37bac1299f3034d7bd0
SHA25618d2e0ca13e6b8d7ba690d203b3cd2fce231301b59388de6da59cf697c331450
SHA512e95a3ba73a2a432e51364dd4dbac30f568ce8b39022c120012ae7fefb94e0a922a39897c8b7861b8cd5ebcb5274ddfaeb1d18ad9c67b7eed8721b28417388a04
-
Filesize
1KB
MD5ad20a15a4d7e119823301ac00efa1ea5
SHA163c3f9897fdfec72fa0fd329bd2e16f9e8966bf4
SHA25651cf0eea052674d2c9a9eb86d35093c0d0cc472f748afabdb3a27637c31c1a56
SHA5124ff417582fb3ec1e2935c8c2ca8c1e10ec21950d978e7512c5a5a285b386d3bd63fc8ed17e272ea51282ca5f6a7e5c58c2e5fd3c231ed40dca93bd0952ca7883
-
Filesize
1KB
MD5b0c57a81d69a478f3ad8b3ee7a3da361
SHA1039614fe7372abd38f8ec6ae5aa1600645352458
SHA2563e74abc99a699768b484d72e5913f2833e452949c31ab91b44051adc007947b0
SHA512e83350fe5f13796942434911564cc8d29a8ad5533e603dce19054ea773a63312d7f774c09962db90afbd14d9febf54488a34a6a643b8119cc3849f19ab29ff18
-
Filesize
1KB
MD56bfbc43338ba4d8dc1b9d42b0a412efa
SHA1abeb1e3c748d62c300d179e2c3a39ab33aac3ae4
SHA256da176bd29b413d32008c504eee7f2f54032a61a1abb529ce7385249d593aade6
SHA512e562889f6f321a94d4ce0a8c7266f0b1e58efc985f6b77314359020658d4c58b71a46a41228a2dcc29018ed855061b4f21eebf83e95190aeb060088691a88125
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk
Filesize1KB
MD5a54e63199d163ebc2c651ac7375ca5c2
SHA1f3032ba76821929f147e0b49811500be364131a3
SHA256cd982d253cba603111d0b19440187e3099c5c4abe2b4c7dad3bd2f30ade418d4
SHA512c9a2576db999af2aa6209bc3aa3573e6e4931de78a7dfa89c737b41ef2805ee8c87337bd1c34c410416be4a38e8e0f776ce2710441065789b5b5cb22447c7008
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk
Filesize1KB
MD5809e79337bc448b0841051577828541c
SHA1031dbafe9bbf5a1b3c4397b336c889bb1d63eeb9
SHA2562d9bf32cb93fb1251c5832bc3ab3f56f08f7777f4759df17bcfec1485cfbeba5
SHA512872e3174a51a7ef140bd087cdc0c603567d535b143f112c837c7a1faa57fa3b088cc6a1c1f9d5b351a9990cfd5b7c5ea575734267ca0fd4b51cd850e9e6b17af
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk
Filesize1021B
MD5e11ef35b23e27674520d7143975c188f
SHA16f8fa8b536795bcc12e48e489983da2e8d5f573a
SHA2560d89b2cddf28dca29e791568573774774318af0a3ba48e53f0d18dbdca48532d
SHA512aa5843dfaf4add9773c52d4bbcd12ef9e38201bee1d606ffe649a24c9d36214c521dc7be3f3ba062ee1ffac6ea46cbe293992d4bd15af84e6f2a65292995b4d1
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk
Filesize1015B
MD50c14369079c75310e2a5385aff015aeb
SHA1861abc50c0e238b0e77542eee6eb2f113273cebd
SHA256d1f5b690823648d5779bb506bef4fbff00d23ac25559ea881ad12d9137b9d8d9
SHA5125c486c3671f4abccbb01541175f9b43e1aef9ff1e3cb90c009eb08e182c204a72fa37d5f0dab8d634c1189557855b169c0128222572a76109d93f1e008284595
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk
Filesize1KB
MD5474f4203b654666ff66abdda9aaec58b
SHA1f2185b4ed3f5e7ed88116704ff3ea676939336fa
SHA2561747c1d9e56dd3e56a193d15fc321a255e350bf8034c48465214fe9a9de01d63
SHA512fecfbf53b0591d377ee57dbbca89eca235032be256975013bb39df2c7faf4497833dd7751084299323000ef97317d6256b730bc62bf2d07df2e8718bd575ba8a
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk
Filesize1KB
MD5b977b1953e3c83edb7c2094aa4ceb53f
SHA108a1ac5da1b519c23c9d6c135e064c731ca7bdae
SHA256464437d2149b8eb5939930cd8648b74523ba9e1a9b71423d55c7dcfc764d3776
SHA51281b2ef372dfc0129b20e47fd51d6093e320c15c6522877b17bbefe6461b9b976a1ca5c0fc99f8a0610b08d1b2a700181cdcb9254e19e5479f781dcbf969b7ce5
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk
Filesize1KB
MD597a59450e555bd5c6bd375ca02b53ef0
SHA1f5ed391565061c0be3209f7ad55598dd3344d337
SHA2565aa58825e66b55fc7332293102f56a56c5e4025128e41f10f298a8da3c590468
SHA5123ba50bf46428f47522a5ce90abb7616c307513cc1c5ac8978add57e2d7b3af3d44d1f150cc439fc60daf682ee949ea71826f14e76e768ded14aac95c762a042e
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk
Filesize1015B
MD53ec73df115c30813e388676d83dbae6d
SHA12235de7c5945d0e068e9cd1ac342c272c5fb0de6
SHA25689c864b49f2281114c3ba3ffd6718546bf413d2058c7101214a2248e18b41edf
SHA5129bfd81c305fae35fecc739118134e241246f78c1d0ea96ccf01373ca482900bd9b1e22350777119e37c6cd303a8782307996a00109ca63ed2e88ef6a60820cb9
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk
Filesize1015B
MD5713ee556fcc9c31fa006498da725858b
SHA1ab66fef933f567325ad0c986a177772aa02c49c7
SHA256f454747f97419fa637c828096a06b7ce214e8580b23d87e1447d1d48dbfa2753
SHA5129b9d5565c143aaf7b5f72aa419b7284ed39b5c56822fa631dd8a6e1d0fc08d7f142411bc5407aec7c1d636f61bac0f6f29ea90459097c1d9b20718d5876ed2e0
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk
Filesize1KB
MD5d4183f45d8713125a69accb93be46267
SHA15c5be000a37324aea154031b45ae4410484851d2
SHA256caeed8e5d559c4f980c58b9778c944034195e3eaf2c0b75d0534f12283edf957
SHA512655b731d978f1cf927300fbfeca3199c01175b7353a75c0d443f97b4005b9ebc7aabe8c64392b2ea87bdec8a1a6b877fd008eb730211711520b66c776e187cca
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk
Filesize1KB
MD5938b6fbec5d1c0e96d054f95103b02b8
SHA16ae397d0a35ee55d2af46f2fe305aef6e0c542f7
SHA256c982ba4e113165856e2980ac8d8d581716ff664b88c32d4f68f13278ab802322
SHA5127144422cef19a989bc575cf88ca9fe426855620dffcf7543d21b3ab52e8380caf1b939d0cd65b5907c23fdade3e81e01b7256cac6b2ee34b95258826cb37946e
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk
Filesize1KB
MD592900f0c462a4ee95855ea9de6fbdf62
SHA1341abc3bb444cf4860f8084519f403756e5aa449
SHA2562a0f46bb75a8d759d2d9dd3f58ca9add17b3776772f68c9387628301a5120bc3
SHA51209d653e4babb4a6c828c53f11de09eca871115b369dfb223820c69611fc770687a3add518dcebdf3db5ef61c8fe2f313357242fac6f5ffcc9ea29a0533fcfc84
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk
Filesize1015B
MD54b1e905373437d6fd6581c24e446138b
SHA18e473d4536d87f4e091a2e915d6eb9a841facb94
SHA256918fb2634a45caf9eeb7530288e985a5ec9499bc819ff9857cb019826a31772c
SHA51278e5a8f331649ed76cf5713b021af90d84d014e1f35a789fbdb21a2572c494c1d1ca0ef004843a5b1561fa116c8a34e734a5eafe49990056ca677c2de511dce2
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk
Filesize1KB
MD564d287b2ddd7f231f7f174db7c42678b
SHA1f3d6cf874629d2837b678cbcd590a149d12f060a
SHA25602c782505889c7864a6ff963b92a129b55f011e1fe80e68a8ec02340fbf70886
SHA512c01720b54037f7110a28a914da19a39bcbb72e428afc163127bd0a64fb64951edbf0a8423e38d6cce36c413592422865ebbff6422a20bdb50a23e04c71b28ece
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk
Filesize1015B
MD548aa26e762764144c6d86f0678ea9716
SHA17a25957221bf61e468985c522cf67fd65d78140a
SHA25662f06fa63df8fd64ed28bd26540c0989bf40b708e88d413869afeaa2a5e1cf2a
SHA51244cf35a70310e5003366ecb02e5e723b5ab5d90c6f2c4675b0c5e367401d125541933f24463b2861e47ed0bbbf36025dc30a73b42adff6f794d5b57fea7d9dcc
-
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk
Filesize1KB
MD5bf26eef2cb3e93011bff845bc144a3ef
SHA1dd9bf5685ec80e9498a40a8b3f25f19daa8cba70
SHA256f36ed9e144f837f46cc93b421ef9d618436c46ddc29b4951d8e8b82e91d59b34
SHA5125e8c09811b4ee9a4b3e20cd713df20245bfa5668a9dacb29d9e86fd615f277d6f1af206256ee1c717d1d640d54a888d25fdc539abb218109da925a718acd1e29
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
Filesize352B
MD5c9d4ae38d2c85b43af603044fd0d7fa7
SHA150d6cf3e95cb6b939494d96cc6783bbd3fdb9c69
SHA2568aacc7503457f126b43e158d1e1ea183103b5e4e7f4e333b6906c71415a5ad4a
SHA512d702042f7acc840286ea72692708646f2c7b17f2e52909948e03e9aeb09a220bbb1700a78e7c9a434009eebc4f856e6518adfd72d7357b83a952cb0fef27e431
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
Filesize334B
MD5cb3569fb372815bc055c8c32a228bd0b
SHA10bebb984dc36303a354c8dc5380f5292f53cfb49
SHA25643725c755c880e1d0bbcb5470e45ce75e3a6e48a34fd51466e85b0d3ecc27cfb
SHA512bb424a3238aeea5cbea67444f79c1f72417255fe24df074a29767ef4b43493145acb0bf45367316d08e1a8d8f990f29567b10bf285581e4530b5a503d0f5529a
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk
Filesize1KB
MD5b1ee89c506a9506cfd1dca0ad2fa6c73
SHA155ac1c7a99b15a512842e829019a2d776acd0663
SHA2561c3bdc078607196d5a3d630b4c022fc5e1b8f8d07f7af9e031dcd4e8eef092cf
SHA512d1e8d1a7dc952b6eeda94da4e4f28b0f68ac35eeccae1574916224a4d2b34a3684f6450b852eafc43a1cfb429d6121e329e36a9931a0012ef53a68a0bd3a0bd0
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk
Filesize1KB
MD509691def8585b5b70f71496f5d5c450a
SHA1222b723fea7a532355cbbc9923bd15d98783ed02
SHA2569f72cff86803b5868705d552ddd0d601360da95f5d78119e1abdd429aae16fe1
SHA512dd476f120c572fc44209f5d9cc9a4f0b586044bd57cad70cf3ea41bb71e13418079ce6a0749005efd841035623c46037032315d8f4bc5fb346698698ca359e7a
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk
Filesize1KB
MD544f2fb16026188a727f50e9ad6bde1ce
SHA1eb6bbeca8bf5af5db6e7e65acff535ee5bce9098
SHA256e95020ac89c8a7699eac4c8c9264099cc1302b65204ec56f54dc852a644b88e3
SHA512024e63ab7cb34f2e5e003e85bf966761333a69a2b0537a9f8b7b91eb339908c61826178808fbf8c3cc2ed08bb05537dcce91dfb471dca5215df2117c1c56cf8e
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk
Filesize1KB
MD5c961d2815dcd0c8a79ba03b4f6d84e60
SHA132ccc02f65755bcbe7dd2acd9d35541ca6804fbd
SHA2563d268d5f23ecf0272603d9dea26c79626897d947a20a5b882ab17fb495697a70
SHA5125c7515c8bdf73dad40993db3f0798582443b738b20315e451f87ae13ec4bbffbdbd5edaf6f6efac03cbe41a83e95475a3dda36377fccbf374197d150db8a665e
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk
Filesize1KB
MD51f5264cb62307fda02323161f4fcdb14
SHA1fa70bef1cd5634623841ad115456c76fa67709d9
SHA256cd6530a9147083b5ccad6b7bef18d586d3be48f97534a158464ec55f1a38a9c9
SHA5123b8b5f94d8a0fa97ddfaa254c3d40286d680233de28f763b6d9973ad182f66154e05b5165bced728b119be03eea1520b1ea893697c3eb51dfb2f42baacbf2ef6
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk
Filesize405B
MD5863c4e23673dbdab903a6cef052a3ac5
SHA1e42068a2eba6d79d7c86580952cf811316ecb8a8
SHA25693a945e078aeec83e2ac11dd175b3228509b453c7cccc775fc7b23cd6be56672
SHA512eca64462e1cc984152de37769d17025b2fd1b2c61203d44ef311f4a2b8c74b89acbe1dc80e783339b369bba085ca281f74e02eea04c7a86eb214826fd259e17a
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk
Filesize407B
MD533d5fd2a37e5699c0f471af90b32da82
SHA1ee69019c68b3214e3060dcaca5196618b489707a
SHA256f7723b75e04f044fede187870b15a93cec01722e37846903eb3652ba51462958
SHA512403c93ed0df46878cfa8037f4b9665fc754fd661f43800a885133926974d276aea8068b1ed8ff3d217441a8fab645faf9b82bf0158c2c710652ff3c12cc243fd
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk
Filesize409B
MD5e114ede99d25efca443565391b85cb47
SHA1951f93aeedadb218dedf116f57c577b2e78932b1
SHA256929e092ceb9268754b5c2471fbe213078446ce48117c20211eff0490f9368ced
SHA51261eb8f1b94900505bc8cf56bc9ef16be67e9bab4d5fdb5edae18762bb3832ca8247b8ac9a0f96ac2203909d227c976f2a107fdedcd759465d9daf92cc1ed7c0b
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk
Filesize335B
MD5c42abfefbd7c23d2a80b8281bec1969b
SHA10672ad7e276b461e242f2de79b766c1648eb79b2
SHA2562b77fcad9682b0046afa5722ed3dc90f4dcd292c13c0aa58da76d03a3343f882
SHA5121dfb004f091838f6e6879e5164f687fccd451b121c409408ed2d7104c3dd6db7f12085ea7394daded49888ef1db8806baad2652e6cb8b8c24c8cd93390e2f955
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk
Filesize2KB
MD5103dd3476a2d2951730201d65c8b7303
SHA122cb4e05f400fd917963785926fd105d7de163d1
SHA256592799e65e8a8ea7c330b735fdac546de41458331b149f614b03b5e15628860a
SHA51285873c29ffecfa45dc7e7fccb6a187c3d871a87b559fc5d8b929764d24d82eae65dbd0f97ba5b49db54a75b5df5ca120f48de06dee3a3e09086371254f1c744f
-
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk
Filesize2KB
MD5e532677d6a8b1ab82227092b9c440cd7
SHA18dbdd2474f3dfbda76a520f2009eb4c41319a236
SHA256385ab54ee5ff75f900b2d5941dfb35d445d6f1fb0859d0a4b94c9ecdd43833ed
SHA512b7d39be71d3cf6bc0506c62e47a46da98b477a18717df614e495924ac386fe59f73cfaf704118d350fa997a95ac35c69be1de348f2de7c99680fdd91870557f7
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\new360videossquare44x44logo.targetsize-16_contrast-black.png
Filesize48B
MD55f04c5cfe80c728d4a290ca6fb019042
SHA1dc6b74de89f8f3e57287092f6638b1883363e73f
SHA25625463ca5fb4e463d908822f7ea80e81c7ac5339abec45cd2803e1adad0a00048
SHA512c92add2cb9ee3fedbc6bc742beb35a9b32c788d77e613aab192ea2568b9ed6fdcc678a6c0b30134ef73ca8e90e87e1b6f27dcbfab0a5c765232e6666813e4da3
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\new360videossquare44x44logo.targetsize-20_contrast-black.png
Filesize49B
MD5072662904ff7efb7d720100589c1dc40
SHA185b866e0b965faea375da44355b1bc0773688d1e
SHA256d29a3d8efdaa32d77139f043364ef261eb18c64a6d199f461d3ef944a613dad3
SHA512c4aae2412c23cda17cebf72c225d813e9e603ca60c5287347723921735320fc4ed11da78d9dd049ff1497be7f12bfec4169e07a3bdce67026d5a3941fedfe3a1
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\new360videossquare44x44logo.targetsize-24_contrast-black.png
Filesize49B
MD5147482373c29af580fd86607d5c31bc0
SHA196a06c88aa3b56a821ae652ced737603ed0ef4c5
SHA256ee8b2101e3db37b11e6e84c7c9942cd980af0291b33159f397306588be019a5f
SHA5121b80486a482d6200e6c59a8734b402679127e80945506701a99966f674b002119c3b97807345708bc5193a4702615115f155eafc752c54fe4f27aa275ae4b7ac
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\new360videossquare44x44logo.targetsize-256_contrast-black.png
Filesize50B
MD5eb19dba7d328fe53f74104dfc4decec1
SHA10064ea1aed98257a63ce9fd8bc6e4c604d0289c5
SHA25644dc8c279580dbbb4d55d3bf57f5666d40ae631eefad5197ce0c789776f57b5d
SHA512ab9ffc5fb06d33635ae3b06d05f578530973f1fa3da8acd39cb2dd82f2a78c2e3f78b207f8f36f605c34628123d0b2c006a8fb4f48b0ce3204a49795c1c4e0cf
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\new360videossquare44x44logo.targetsize-30_contrast-black.png
Filesize49B
MD5bcbe531cfebb4f024eeee41a9e3343b1
SHA1b16d60dd7a18c2cc6cfd242caed0d07d651dadac
SHA2567a74f9af28e29f414722ee9bea3277b179a74ea85b7fb1c9a8a8abfce39ce185
SHA512b5bbb2b80b2f1b49bc6d7f743effc2b3e22632eed1440c66d87748554db78984d258be370a571e8113de079df950b1c66112d03be52cfd8918b0a1035679635d
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\new360videossquare44x44logo.targetsize-32_contrast-black.png
Filesize49B
MD5fce12791d5a00cf66c09390743c92c53
SHA119ae682fec25b4b0a0a603029cce9b3168202246
SHA2560a8cd6edaa3e85a91ff7e6d0fcda5fb521230018929e54409de0675b3078cb51
SHA512744f20d5a4ed6bf69b6b32aeeeffef340050c53f61baa1316a3e122f6642f170d8c2ccadca6ea8b68fb060c2c8071108f18d241dac6f267181212ec30b3b482e
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\new360videossquare44x44logo.targetsize-36_contrast-black.png
Filesize49B
MD5f9590089e60abb1eabc844ee5e3e9a8e
SHA1f6a471b2197ed5aa31f37d8e58ddb3aced1cb509
SHA256c3781a8fd5dda5160c7dab27832ddfec47c8fd8e7ded25ad7877a114f8967d71
SHA51267f1de4694e914e825728f904e696564ebe58781c48b3d8ea61768dc93ab0e8be5616956e3b1bcc2cb4935475a2c7ae3e98f03e346777193be87bb1e6e1185f5
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\new360videossquare44x44logo.targetsize-40_contrast-black.png
Filesize49B
MD5639b90b1599b34deff7a7bd6e7c48790
SHA1cf42ad2895193ef398e1f4790aadffd0da11acc7
SHA25658c3fff3a61e0c4b1bed5368f158451616dc63244cfcb120bf01a865c50bfbf8
SHA512b5b066b114acc5dcf20c6c98bb659dee360e833fc7afc402ccd809d7ba86828fa0b0f71404142a80a3163872f4d47f33bf5ddcfd5d05ff8d5b7b94419b96b1ad
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\new360videossquare44x44logo.targetsize-48_contrast-black.png
Filesize50B
MD5f7d4b9cab3bb4a06d0b2c3ce62fb503a
SHA10cc25acdff53d07005e10f2f64849724c08f4ebc
SHA2565cb4ac36877d43ba39a876a5c0a55db7ddf5a92befa1e5276a74494d59b3b0db
SHA512140bfa5361561c9daeb0215f6edf9f89af53a59348094ed402d398300030c0cdbb5656850ef20467979e601000c0fbe7cfd03e67ff1073f51c5ca8107ff41f3d
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\new360videossquare44x44logo.targetsize-60_contrast-black.png
Filesize50B
MD5e8b150e3a546a9fdf4ae6f6cfe46ee15
SHA1ff2f35db01e999374da825a1a6bb05eeb33a7bd8
SHA256114c03564e2b5aeefd3f75bb01a2679d4c938ab43490962b4fb4586a776b8a5e
SHA51216f995cad3c636e79deed0c3becdd6f8af1e8be336ddab15c24ef4e8f1e4fe9c2dda01f7f0a64f61a92589950331a26265e539290b38ce1b6e36c7c1a0d8bf33
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\new360videossquare44x44logo.targetsize-64_contrast-black.png
Filesize50B
MD5b308d52a36a7b26ffe3e00d55d2dbc62
SHA11a9433b335cfc105a746d6eb490e886ba1ab3272
SHA2568aa05d03241e2328b3fcc44562bbb57269d84724413b9da77763a9fc054819b4
SHA51260ce99063507d840444f34701251eafd5bbfa848a292328377c432a788d22950072dbf9efc87404869f68307cc2412192d38d7e8a5b46b6de3d17fcb7ce1c5dd
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\new360videossquare44x44logo.targetsize-72_contrast-black.png
Filesize50B
MD533694b71d2060e58af1676849f4218c3
SHA16a715a514faebf26850cd8e73710fe3b4bf3b5f3
SHA2562b8c1f05ca809f918bbc80742bc2191282ea4abfe2b316c33ac92c904e2323ce
SHA5126a80221c3ebf6ee58b2dbdedf09d422f616d60a52e761bd935b67353de5a1dc634dd4bbbb103ce62026c03a83171ec9aff169581f1fea98028a5ee0c620dc5db
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\new360videossquare44x44logo.targetsize-80_contrast-black.png
Filesize50B
MD5c657944a8302d1b7ab57485fd7436d69
SHA19c3608230467a4bfe3ee5a34bc4a47e79900ab40
SHA256ebd57c74740dca74a010ee01c95f3ff7628e8221e0f9fe16146103176c932e80
SHA5120bf5c6bef0b3afcd98d197f4c7aac83e8d7e97233cfee8ca3e09c8ec6d1fff99e217529399d9732a9c54a813dc6b906b3438c99a4317ffd554445de036c58b82
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\new360videossquare44x44logo.targetsize-96_contrast-black.png
Filesize50B
MD577a6e380e8a0c91e7a18c9d5a292d0b4
SHA1811dda5c247eb88d11a86d43085df97f92474519
SHA2564fa11472a8f2dc3feb771440b6275be0bae63f51ae2da9ae6f115cc520a503e4
SHA512411db33787be16af077e8de862b96a675709249f6388f8235e7c668f49d6a92c375522221f4ab66033f35f84f81a1e2679496bcbcaafb7a05c1e9c985ae78852
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newforyouapplist.targetsize-16_altform-unplated_contrast-black.png
Filesize48B
MD52b28708350ee730876d3ba521d56313e
SHA15b14aaab71fc8ecb3f84342b8d8d36406b3540db
SHA256b9af6f449c69a7b266a109b7f9eeea3bd929f057f125d454fd2c4b45abc917ae
SHA5129886b64c54449c7748c482dbf516c0fe9f5fc0e6a4683fed95436db53bc1e236abc07aa37736017d9c5745582d2ca68f731fbf870c36b5cdea67ac4c8a1342f8
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newforyouapplist.targetsize-20_altform-unplated_contrast-black.png
Filesize48B
MD5cb2b6a02be60708f3d2515d5ff5628a1
SHA172355a09a9cc9cfa7c92a3043c6244993b0cff67
SHA256cfd311e425cef6c2a5217f9d75812a0fa30d32d4a045c308f5618abd0a9426c3
SHA512866051cccab9310a2cf1c0663cb6cd4180fdfe421eacadd3cceb4e1b7c6d11465235c45fd80dc41f2a3210955f8d6ee9acf5b3e6df26b5859a73cf6d84958fb8
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newforyouapplist.targetsize-24_altform-unplated_contrast-black.png
Filesize48B
MD51ce83e55b2a77c93afcc25371b550267
SHA1d7da4a0db29adb9b5f2d5182e8bb600d1a99ddfa
SHA2564b7571ab84599cb3fe88e6ffbef24ff2d786fd15a253a305d2c6328e016b4044
SHA51254e0455bd3a6767332aa4d7f958ec0be874b8194477c5a7e63da42b8aab801161b1551710b923ed40828b00a2b5d59b50037f94b922648afd72c95ceb82fb6a6
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newforyouapplist.targetsize-256_altform-unplated_contrast-black.png
Filesize50B
MD55550f08c5d1ca3b382cb747551053158
SHA169bc60c598b294c30b50f68444f43e5dac70b244
SHA25685c28f28694b0ecc04c3979f8dded020b69034204311e498cb42f40402cda225
SHA512ee7ca97b6e015dd06a3daa1d475c1f00c92098b9704a3fa10f4d806337eeb710ad1fb785bd2e4d7371865a84d3c397ec8a3fcdcb56eb147802164b7d9ff75ca8
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newforyouapplist.targetsize-30_altform-unplated_contrast-black.png
Filesize49B
MD5d1f1d04b78bba1485b1db599842480b4
SHA15519cccce982d83474d5b558bb40f104678d3f45
SHA256cfc1137bb6450de8ad7c6738d582f7452dd2a3ad7c01fea20afd2fba2ac384e3
SHA5126141dc023f334432d1d9d838fe0aab403c149b27fe6805d3ac5747ad3eab5da7fecb7d95fb2761717fe9ef685ad02fc74d0d9d8f1c40691b80bc42d060afde40
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newforyouapplist.targetsize-32_altform-unplated_contrast-black.png
Filesize49B
MD53c1b9d2a7e79d6f3445d3e2e17e31ee8
SHA1eefb254dec0e4b42d7c00cd7eb76df28b43fd423
SHA256f129549200f76ba3b31254e90486d66d82af8620b0061effc333dbe51b51c8cc
SHA512ab742bbf13cf8865392da189f0819d705fb0968bfa2bee30a92c83c077710519cfecad961136816e9a046078dd381c09d6075cb2440894d8a7bd3a159876e34f
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newforyouapplist.targetsize-36_contrast-black.png
Filesize49B
MD5e3772a22fb9ba8d87c0e5b7e70c330fd
SHA1f85481f7e39d09e026325d5f7851fdbfe628be19
SHA256b684710f6caed0fbb6a8d4de667eb7f55c0cc931b12f55ff318860b40940d805
SHA5129ca8a63837137974ad9caa1d7a034454eea58764c96ce42cb8b84ad2b8690d4ed5e762db326b7d121632d59efb9512562126efece6d2052152b4ff6724102cac
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newforyouapplist.targetsize-40_altform-unplated_contrast-black.png
Filesize49B
MD552822d58b667604d4e937049985d2c5d
SHA16f7486466c92d4a6543239d8087f9c6ff5d35cfa
SHA256b2b0a246dd107d3838d763f590c309e2a8d6d756295b8215218fc2e8482cf57a
SHA512dcb214fa5a3c5bc3e5400036c3d04c276e7ca06de1a9160561b143830d849de025197e1e1a0519cd829f847cd65be67c2fa4f7330cda4b0db77dc29af2a9a47c
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newforyouapplist.targetsize-48_altform-unplated_contrast-black.png
Filesize49B
MD5b6af397892011138441b7bbe17f6cef6
SHA12b1fa9071f08831b4e1402da9b190529b991bc3f
SHA256eebc86ba1caec1eca71367c28fb4a259cc2112866fff2b2d0a9cc5a00c611d5c
SHA5122ff6fe046d5ad7af8d1025922dbe6f71e130afa79e2e68b9447d79d2e87615a37c45637932f56790cf2f8d091a4426701216c2d1de70e5866d42fc518168f9c0
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newforyouapplist.targetsize-60_altform-unplated_contrast-black.png
Filesize49B
MD5ed0154b9f5be62363300478be6b81436
SHA1379e4bce0fcd4c4d2791a4bd7ba0aa4af37d3711
SHA2563e97ee5d6a9701a8829dc1452a555a3a1dc07dd2db9310e285bf688e8eb31b9d
SHA512da988378d871830cb114b6804280942588371f4523a4737a208fa777c651a4b6b4175396d794f227c7bd57565387ed68f0012c8f79e2789c85c3a1ee2f171ccf
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newforyouapplist.targetsize-64_altform-unplated_contrast-black.png
Filesize49B
MD555a4070867b5a8b639608823ecc567c5
SHA1e5f1092c2db8cd571bc9219d38aead4278b6b368
SHA256fb6038cf89d9b5099aaa3e44257cdab4526732ae31e116887382cd0b08c8cc9f
SHA5123bb2d5c895efd6bd94c47288eb8c07d61dadf16fbe2c539e850e5c941f817e45a8ea624be460f3555716148059d78dd93ae0dc46ee0344bb75295ca44a4b4c9d
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newforyouapplist.targetsize-72_altform-unplated_contrast-black.png
Filesize50B
MD5708e74e2641d0defd1c0580f552cb0d3
SHA1ea7075ae8352e03b8f226b59611d756cb4cd03c7
SHA25626897294c6a5bd552221c0e7353689b2c3ec48d082264042238a0cb5261bc88a
SHA512da08d87af954bb877bfdda4028dbffe2bd2b1f2abafc14619f931028a8cada834a75e9e997db7c8c7b3f1c2ab61add8bdd7de6474add534607b68dd85715b367
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newforyouapplist.targetsize-80_altform-unplated_contrast-black.png
Filesize50B
MD57ad8eb1eb6450b56499039de2108e666
SHA16b60403a9a22208c6baebd99e1020d0f41907d03
SHA256f8b8c5eaead6b7bde00d070fd8e105f28c5a571c9b2cc7a70e9d354d8616048a
SHA512914c1c00f562c8fcb2c24dc08ffe1329a486d435ffe0eb4cee4c93b0dde8a5af9e38e9a35301b0cd148cb139fd30ac491d83f875fdf8538616f1c151293b7dc1
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newforyouapplist.targetsize-96_altform-unplated_contrast-black.png
Filesize50B
MD567525dad16b2b32b51bce2c3a784d7fa
SHA16b44f53d57ac9f62079fa0cfdf2cfeb50772c5e9
SHA25637b7003860af3ac285ab73d79b3ec1e76ed6a936bd58298bbd181bc179fa3b80
SHA512a86b54b1ec37c3dedcea5e0f833a0b8f511d3ea2966bff5ee382eaf14b64deeabe8cfb489c3c7bf175f7f92634913c37e77738f53fdee74b357f588b2dafa626
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newforyouwidetile.scale-200.png
Filesize50B
MD5e001be261606794ae61078f2659cddc1
SHA1f05a7183a1891247278131a43323071ae0abf48b
SHA2568e0911a613af15d7e7b134485a7e679c7d3cf39c8e77e0ca72aff3dd7a182144
SHA5123d7bd876874ddd5c61a86170db14afe6ee8de65449b6e6e5b13d29e3337be2613532644c0ae6b25cec5794d2e1d42a8c7c3975d66d75c91fe48bd15bcd7f0a50
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newwebvrsquare44x44logo.targetsize-16_contrast-black.png
Filesize48B
MD50c371e16490d0188a832954f0789e759
SHA1af73fd5d58caa7aadad504067f317378b16900f3
SHA2568c2b4b972c86d2a6169d95407fb69acca536015ab4bfaccf3c80e3a8696121e4
SHA51235bae082d30c68735cafc56f3616d56e379ebaa9b2a1cdf7840acab39eb5389c01429f7a3ee76b26680b6cd4b1598ff691d6a3f0bd7e0986e48f40ac77553b8a
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newwebvrsquare44x44logo.targetsize-20_contrast-black.png.EnCiPhErEd
Filesize49B
MD53175d868e464d48d34855e0d02c0e4bb
SHA1bae3491e4a164aaae11bff1f2f989236ed97942d
SHA2567f5ab2b436493466413ae3b114d13d8456281f254fe81c41393e8a3c8ee5ce46
SHA512cf7becec65cdae268f5fd8e76ae2b826d0e1b6765bb7ea091f344837454c88755e5f6c1cfc09b59bc01b37f0a92a675090d9a03844d90603ca9dfe8d985662c3
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newwebvrsquare44x44logo.targetsize-24_altform-unplated.png.EnCiPhErEd
Filesize49B
MD5885392bf87268326a188bc22a1760786
SHA179e05173b167406e0f1fb8c7b4d7723edb09d257
SHA256055ad35b74bc7905a0812ca6978e7b42c9426227a57c2bb67814a1be904a0880
SHA512924b6b8c5bfa91f1d8d2ef2e846e208d77c7548d6a239bf4e67a322234a12bb1a481cf55acf65311968b6a82b2bf7f7d1409e125209abb4e1b5421011f9b94ae
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newwebvrsquare44x44logo.targetsize-256_contrast-black.png
Filesize50B
MD559b0e35d20eae89df1ef8242130ba03d
SHA156afdff746b128106e644eecd0bb111caf8d3630
SHA2568dbab49e81613dc13d948b4a5b59cdfe07267a3a972c8e6c47a620476a495f16
SHA5125ba87401db781c638b7cdebbff1e14241f4184479dd66b3891c18ed48ff98f684c2fea004b9ee6e57e167cf116116470329a7b074161097d9cb27929c5e0d575
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newwebvrsquare44x44logo.targetsize-30_contrast-black.png
Filesize49B
MD59cb87cad2a29115e4e764efd13691ec4
SHA15e3550b119bc7e8236581471bdccfe9f95bc8f58
SHA256c5dd024f27b0efd9b0be0f2f25c922c115a12383ccdddc38131ed3fae8f95f29
SHA5125b55405ea61f58f59033f512e983e2c8f3be31f7c1f8c812989b3f6d57c57eb840c4bbc459847b200c4206e22f087ee739d0577cb35bf3a0f58507a5749bc6bb
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newwebvrsquare44x44logo.targetsize-32_contrast-black.png
Filesize49B
MD5c317d98755bb6700838b8d2253bd0956
SHA16175de2d7f5fc00869592fd0c35c0445b7157efb
SHA256e7f150bb4275deb53d9ef8cecb5e5ad0883a44f5af788925e4963f656a595542
SHA5129036e141d852f38c60847009cd083616538d19de470526f1247f1754f6a4b11c29d6aa3df6146d98970fe143b67ec0cd33ce185defa256569c432a4c229ac807
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newwebvrsquare44x44logo.targetsize-36_contrast-black.png
Filesize49B
MD5a4987c61a8d1b31ca26806ef03eb0aec
SHA1badc675442100cfc210909c8e5432de85dcd2616
SHA256d7e146b3460984f3eb3a16aaaa07bccbb359a273e07c734d7880174ef1206db9
SHA512ac5de94b34cb37a1fe026b9995b1faeeaed9aaa2f1f4696e7c21de6ff2453df948b95c3667c75ec92f75e2b00d1e4c7c38191846cd4e1754e3244b1448b55bc6
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newwebvrsquare44x44logo.targetsize-40_contrast-black.png
Filesize49B
MD5655bb305c61b572f622b23229136c00e
SHA191f6894dd4edc8eec58f9708044ef4d6a75c5d3b
SHA256fb936ba0397d577c7b893709bb5c7bb447ebb8d534a46a95a9c2450431e72923
SHA512073864c7ed45447514cc0666b71b1e69cb11f2596bb5a44fe87f4b58916e5722c82c06d4753c4681e4911b29c19e8f3ada1dc7fcc97e0c5df23624dc0e217f94
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newwebvrsquare44x44logo.targetsize-48_contrast-black.png
Filesize50B
MD5582bcd8d210bc4638c09b099055e0062
SHA1cc41f3c6262ab255c1971a9f3cd9e7b2ec5ab4ef
SHA256e8ceaf7160d36cd6d2b9b7db07568cb0883d805e031e99472ea2421efc3e3966
SHA5128bb3c3ffe62cfdc13579a45b9f0b1fa68183338d80f5d9a2695c75e551ac00726e5d391136fda3db74c925dac8ea52e189967937526a94050f60a00e0179c74b
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newwebvrsquare44x44logo.targetsize-60_contrast-black.png
Filesize50B
MD52ebc7c32fd004c3ae202c2b84fec50c1
SHA1a9d56114fd063a25ddf7a3e6b3a64c1dd17561af
SHA2568e8d8193297c9fc843830cbeda47d57c89b7422f21eff0f16ff5ce17349012aa
SHA512e330563069923ce013052a3e59df1a7b29a64ef86e66f2de811e30b1fe2af37c90e1932a6952f6da1fb466808d821cdc5de32f3a503675e122c55df3aff31e2a
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newwebvrsquare44x44logo.targetsize-64_contrast-black.png
Filesize50B
MD52b9579dd94712a45b18673a1fe340d2a
SHA1b47b36e9aea9d3e2091afb70537d62c20ab3cff0
SHA2565eaa4310eee7e1a1fbd94fec4d7aa802b77331c80a099affb52b21b55e7a46e9
SHA5121027d0fe19af97a28c71dc6157ca00421051e38a4d2250b7f8011872caa394262a70c6610d2de23851ae84cf79dcccf0a6c3475870f4b3932f5d08e4d42669ea
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newwebvrsquare44x44logo.targetsize-72_contrast-black.png
Filesize50B
MD58c4e41de659e182c753d006f7fec3a1c
SHA1b92fe2e02b55d420c51c7bdcc797a9019fc58896
SHA256b37c1701565492308869784fd8e73ba24f40887352645f176e8bf2761b0401ac
SHA512e4f2ce3288da76b99d12c82c8ad9e64134e82a5a6307ead8131673047f0b511930a03e2083780a77050b1718f49419d19f6a1258ffc12d6cf7187044ccaf4e28
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newwebvrsquare44x44logo.targetsize-80_contrast-black.png.EnCiPhErEd
Filesize50B
MD512ff7055f7cfd72444f1ffc6d788e26a
SHA1e2093c15df0908670a2569e8d484299c9ace3eb0
SHA25617c557eda110ee5b4ad9eb1058a85cd620b07be8654329642d438998bc11d2f9
SHA51286acd968ec9e12932d59085ce2f9824d9f9da66c55d112a110842c6f2699603eb5ca110ed4ddb9c66c254ae17659ea0ff66131ce582129903b8470e27232686a
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-a..g-whatsnew.appxmain_31bf3856ad364e35_10.0.19041.4355_none_ee89351905ec7ddf\f\newwebvrsquare44x44logo.targetsize-96_contrast-black.png
Filesize50B
MD507f5945b7dba00f0b79c94b9fb159ed9
SHA1f0f07a00882da42439f86149e8e72c6114bf56f8
SHA25698247c9d7344f84370bb7becc781b3326bb7008a70109b9cdf3d408971b6bad2
SHA512d8310f6751e508fc5365a70875a65561bad0421cee8f1e70736d5bfb145d59d71c603719203665bc9f9042835e9979f78a80735f4fd2195f03b8e74847f78843
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-c..ngshellapp.appxmain_31bf3856ad364e35_10.0.19041.4355_none_a20fad8f3407bd9a\f\wide310x150logo.scale-400.png
Filesize50B
MD545dc279855f2062fd825b75e3fe98293
SHA1cf3be9261365dd493fde38bd19f672f5ce572299
SHA256e2fbae441ccea8f85a40f00757c8bf88f5aadade7b0f10c4e22c5834756040a7
SHA5121ebb6b7454e991306d4d3d2dfa1ec8cf7957c8a5e616da81332dd3b389bd289186c79947a290c09cdb153f9d9e5f5c72dd356eac0d1b21110f3efd7e40e7743c
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-d..esflowhost.appxmain_31bf3856ad364e35_10.0.19041.3636_none_780d9cb7af26a8a1\f\splashscreen.scale-125.png
Filesize50B
MD502930b95933b6edcf9c2182c1e3e8ece
SHA177fd5243ec7f2af194faf9b2c65ca6cd567d8117
SHA2561d61975e3d421fa9d46f225bce9769925e45f12463ce1108598eea5f45829b6a
SHA512b80ad1dd6d57dd3b57fd6cf85f0b5b8c1ffd69dc10a95a7c73ee8a3dac8103168f1a78fc31089b57eeea11bc115adae132a849d51727d3f89864fccb9688edd0
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-ecapp.appxmain_31bf3856ad364e35_10.0.19041.4474_none_71c1b099416624ca\f\storelogo.png
Filesize49B
MD5b960f4f107bb4e710f9f1473a4aea524
SHA1ecefcaeea43c0a9d07a46a4fce9bd21c0483692d
SHA256340295af4b9ac6239e1a46f9c459247ec2d9039d9a5e2c746d3083da89bf1196
SHA512c0642f4dc73d89f8f9cd22b2fdc44fda4f255d3126cec174b792250895db093566b1b9459d0cf6d22954de6ab26e1a73e9bd7ba484e51b0c928bd7282f0f221e
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-i..ntrolpanel.appxmain_31bf3856ad364e35_10.0.19041.4474_none_8f6f71a24c482e0d\f\logo.contrast-black_scale-100.png
Filesize49B
MD5cd8c5d536abbcea5661b777762dead74
SHA1ef0b5a53a6c6435620c8de2d846370f40e31bf68
SHA25609fe20a7e9b09768c2ae2c3f46d5a2852680df818a6bfdc2ad27a84828f8d636
SHA512df60b6453f1aeb9acc5c678901e0291cfe92f9f1c93c99b25c3ce8a190e1bfb1a9dee4cf851e0f9d1af8e69955138e49e5da470ab658fe47c86b9e1ca483fb4a
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-i..ntrolpanel.appxmain_31bf3856ad364e35_10.0.19041.4474_none_8f6f71a24c482e0d\f\logo.scale-125_altform-unplated.png
Filesize50B
MD5436d209fe5dfc559d735e21c7338b37b
SHA1ff1496f044ebca5b3dfa6dfdda126a95661f631f
SHA2567a8c6067762130b3c2378539e657584046272f8dae8cbe9b23ec902a8b2cfcb7
SHA512186accb2ad23c752fc01b5f8620d317ca325128b34e6da2bfc3081d4176e322de75fb79f33670e933dc18c5aa16410adb433c250dae4db81cc175b3fad16e4b7
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-i..ntrolpanel.appxmain_31bf3856ad364e35_10.0.19041.4474_none_8f6f71a24c482e0d\f\logo.scale-150_altform-unplated.png
Filesize50B
MD5faeeefdc96c8f2735fae75d0bf5567ac
SHA17c239d197d00e491f8b58c94e8039f10ef39309a
SHA2569bc4f8cd995f2bc73a74e4a76a2e5e438a62cddf273cc73f79b8ec6651dbee87
SHA5122f36222c32462e74753d24c301aaa3394fbec9c43d33b03a892cf0a05d1a5d44318dfa5ed867ebcea53eefe9a8fdb1836c275fa537e8558b5c82e03f10ac685f
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-i..ntrolpanel.appxmain_31bf3856ad364e35_10.0.19041.4474_none_8f6f71a24c482e0d\f\logo.scale-200_altform-unplated.png
Filesize50B
MD5d7df30d52090658b26e2d0a645690b54
SHA1af0431dc5e8294a18188560212f53b5a8ef74723
SHA25698e766d607d4f944c4052d31b66c2679f65980e3ad43dd8b41cd5b8a9574f5ee
SHA512869f382c58a988f9f7eeaa37924d9c43840bfb2ef2bbbcc6c375989b55e4167e67c835085e0a1fb88db5a0aa92e76e74e4eb87a8d65a5997272037e0bc780cb2
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-i..ntrolpanel.appxmain_31bf3856ad364e35_10.0.19041.4474_none_8f6f71a24c482e0d\f\logo.scale-400_altform-unplated.png
Filesize50B
MD58f3d50ac780d889e58a3a84d9bd3ba0a
SHA1a53fd8f25658a28505eb109c772b26345a67f43a
SHA256194f35f9eb072226a6bc13301dd7190146e80371f2347e18d93cb031a385bfe9
SHA512021e298070d58e9903692c365781e47209e4bb29e984f47bb36dadf8b4f8e397f90ed4abd4e8f8e4ee275e783d02b6a1692d3c68d15d8126cc6ad8bf263b7c02
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-i..ntrolpanel.appxmain_31bf3856ad364e35_10.0.19041.4474_none_8f6f71a24c482e0d\f\splashscreen.png.EnCiPhErEd
Filesize50B
MD59462f05e9a5ce032ae61957c38f44718
SHA141f42d9e1b0429ec349df33bd5daef68525573fb
SHA2568e8d2ed772ff8bb5f887ceb12cb6ef1aad04824e94fca4bd75c3659007bf3f08
SHA512ba793af3ed55ec14ff2a9fdf91830d5a600546036597f6ebd038a997fe1810fe46379b9eb8421e76123a413b5b7049a9e930d0c24ede8ea3ee5b0e36d953666b
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-i..ntrolpanel.appxmain_31bf3856ad364e35_10.0.19041.4474_none_8f6f71a24c482e0d\f\tilesmall.contrast-black_scale-100.png
Filesize50B
MD5ca4617cdb11a143cea57ae22c96c9d32
SHA171a27f04ee922e3e1cc54cad5522f8787891edf4
SHA256980ae6b16e4a33cc0950eebcb2dcf5344815476070ba761ba65dc32434efc20b
SHA51268881baad76870970c47dd277ec7d1953575b3290e6476acaa842a4965bc6563d07dcce30bb410c3efebabac2b40a6f4a2b88e7f4ec84ec3cadd04b59c95aac9
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-i..ntrolpanel.appxmain_31bf3856ad364e35_10.0.19041.4474_none_8f6f71a24c482e0d\f\tinytile.contrast-black_scale-100.png
Filesize50B
MD5e16180c97e1b038936e37f28c832ebb2
SHA11f7f538fd1685ca4da8bc63f940cce71646e47b2
SHA25656adcbc1e78e02e702380d8d63b720f88c531546c2f0aa10c2a08aad91f56091
SHA5128c03d842e6da18d03f9876dd670e5f8dd0b7a988679534f9e72309a2aff2f652bf43833d25c3bf6bdeaa47504a56f451487330c19a652aa631f3e54948cf312d
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-m..nt-browser.appxmain_31bf3856ad364e35_10.0.19041.4355_none_70ae1507b206e5a7\f\square44x44logo.targetsize-24_altform-unplated.png
Filesize49B
MD5fd0dab291d8f5d09d9b4955a3d943f6b
SHA1b74dd04cc77a52cc12e6f16f49e3523bc94d0160
SHA2563208086f21af218cfb74d723cc78ba7ef2552d041082b68619d6f7efcca7cef1
SHA5127be0d306958f876b0ec5ab8e4092884b3a4b4663b8f976bc7fd20cc24580bf944aabf726b1dd68454b3b3a0f8371d002c532b9fb3f4e70dce01fc9995d2b98ed
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-m..nt-browser.appxmain_31bf3856ad364e35_10.0.19041.4355_none_70ae1507b206e5a7\f\wide310x150logo.contrast-black_scale-200.png
Filesize50B
MD5e8db78000e98220b31700053a26042c4
SHA1e6c5fda29b02dd4fd76bb24cc3728dbda81e8b6b
SHA256368c75fb94a7ad519ab0ad30e6b545258ba7f78cbae2ee70599be61f5b27c4c7
SHA512087629b2bea916633056b888a4dc4a254697ba7e8a3fa5c84c13b98ab95f4e4b461ad5ae71c0f016447002a9ce33f0e2d3b50a9e1e4b6d036b9387fee397450d
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-m..nt-browser.appxmain_31bf3856ad364e35_10.0.19041.4355_none_70ae1507b206e5a7\f\wide310x150logo.contrast-black_scale-400.png
Filesize51B
MD5e55fe8199d401c30e614ecca6568ca37
SHA1feb9b576014feed6aee18e38dd0db6186968c90b
SHA256c72f2b98c04d26d55e9a3084d0fb4a2fac4c9835916cd7b0b7384ca498a9233e
SHA5123c20cbd194e61b7999d74e80548504c12ef0c5bfed3ce5c66f3497815a2a2ea08320c2b9591e1fe328ac660472a5362ef6fd90333bd06ee534c1c236563c61db
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-n..quickstart.appxmain_31bf3856ad364e35_10.0.19041.4474_none_08f8dfcf0c193741\f\narratoruwpsquare44x44logo.targetsize-16_contrast-black.png
Filesize48B
MD51c8e1682fd651ca080511088c43c5be4
SHA17a9bbf213bdcd73abae4f8933978ef12c1212c6c
SHA256deecb0d012614262cac4c5ae696ab5ac268df8fbc265039282b39f0dade4fd7a
SHA51274c92de8e796694c59e5fd91e34911826095ff911f5fe88a1f6a2f68e54fad59b310537c995c3ceb226c71380df65971d254713c892570d39c45987dcdac9a45
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-n..quickstart.appxmain_31bf3856ad364e35_10.0.19041.4474_none_08f8dfcf0c193741\f\narratoruwpsquare44x44logo.targetsize-20_contrast-black.png
Filesize48B
MD5b8a4a695303f91cce5f0bdb4bdf66a41
SHA1e49ee66ac7f111d70577954c9aef52bcd970d505
SHA25648a93efc62b343e1cc788740b03a03dce9b782e0960da880958c2a18fdd1d81c
SHA512f3f594ec6d4399486557a1f502b0e95bb13b0879949f83daaf99ae02241748d5ecee1157cdb4673f66085620f20b245f94f3b0bf50cc7f077b170a4a4e6aed20
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-n..quickstart.appxmain_31bf3856ad364e35_10.0.19041.4474_none_08f8dfcf0c193741\f\narratoruwpsquare44x44logo.targetsize-24_contrast-black.png
Filesize48B
MD525c660cb3ce516af73999ae25fa56483
SHA1ea6c670a69e9a258bd27a0321dcd12ebc91a1194
SHA25614ac5ca9a5171598e4dce8783b1609c63aea08592537747d496771cc3afac0d2
SHA51231aafd1dda8f744c0a33e1735b4ce51da612954a7b0b19b2ca3f394e0f8023670c432780540e2771fa750e8a458f7bb0c23a5bec6558e39acdf656eb715bfd7f
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-n..quickstart.appxmain_31bf3856ad364e35_10.0.19041.4474_none_08f8dfcf0c193741\f\narratoruwpsquare44x44logo.targetsize-256_contrast-black.png
Filesize50B
MD52dd87272d5efb20ece22826f22179eac
SHA117d962b395614185444b11a0e4913aee9dfcca15
SHA256188f13fa6c68fe26232a41534f02fe8399e56b8ae5bfa45d7191dadd7cfa44c0
SHA512d023a6b9d81f8d33af5181c2733b3820f5c888a6593a037776581d04019ab51893023c236432b2afa9e8c4f7695895fd46288b3fc36b64d8b71eeaea3576695a
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-n..quickstart.appxmain_31bf3856ad364e35_10.0.19041.4474_none_08f8dfcf0c193741\f\narratoruwpsquare44x44logo.targetsize-30_contrast-black.png
Filesize48B
MD593e21ecbad5aeb39d5fd1f7e69e047fa
SHA14cf7be153be0fb9f01a71c491bd4eb022f92b2a0
SHA256f0e6f418cab63120bcf6d077829a754279ffe504e63559e36927cf6f62c14d94
SHA5122d5463e76d6cc0a057ccd834bc9f458831dd2478ff7e6d7067ef49c3c76c075936b31b692ff398a3e943bacc569f51e583469f90208233cb1c9ff4b5a4a9395c
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-n..quickstart.appxmain_31bf3856ad364e35_10.0.19041.4474_none_08f8dfcf0c193741\f\narratoruwpsquare44x44logo.targetsize-32_contrast-black.png
Filesize49B
MD50d2e679624fc0e1adba1ef93a9ad1db4
SHA118b65ecce1e5f3aaaf6eb355b3c4363489fb7ac4
SHA256e6fed08d0c88e9771ecebda330f4a3721ae4246282427b3d4f924e20da90d8cf
SHA512fba7d94a178897089c65108dc8da83037c008cf4abdfbb7e2621245a3dbb7defdfc4fc4db616e836653fa71f403cd9e85427468aec986c1242da411bc398200e
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-n..quickstart.appxmain_31bf3856ad364e35_10.0.19041.4474_none_08f8dfcf0c193741\f\narratoruwpsquare44x44logo.targetsize-36_contrast-black.png
Filesize49B
MD5cf884c383be3d363cc2e5ccf17f0a722
SHA1a6de29fc673640c3f0a4866370d9e0e8b9d931e3
SHA256240c468b67b55c2c2d9166bbbcaa12d5f61fe17a4b04b90f556cbea19e2e5a06
SHA512965305b94c5b5c8224cb75ef8132df9e46b13dc74e16bc8c7694d371135d49a24017a25135f5772ee551847239cc5e927a93c35af29b4313f812391d70671da8
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-n..quickstart.appxmain_31bf3856ad364e35_10.0.19041.4474_none_08f8dfcf0c193741\f\narratoruwpsquare44x44logo.targetsize-40_contrast-black.png
Filesize49B
MD5029a7edfbf76b9fff3cdc70c30e13f41
SHA1bd82ee58223bbaca7a5890eb288b23584ed247e8
SHA2565bf45f271f8e5ce158b5c98a406caeb4626239f5b353383bd5308b3e1ada237c
SHA512c38a137490360abf0bcdb4ac887e0d32b9ea9ac94bd5012792d44fb233dc17bed1dc5f930aa4a1ce9d33f890537be74b3c5cd1356129a39f183dc3f88787929b
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-n..quickstart.appxmain_31bf3856ad364e35_10.0.19041.4474_none_08f8dfcf0c193741\f\narratoruwpsquare44x44logo.targetsize-48_contrast-black.png
Filesize49B
MD532b7486d636ad0c05d056db22450f909
SHA1710002d6f73b32650f55cbc7abba7540203c853a
SHA2565a02cb4110502c81fdeb7f318fcec98b61c3c605f62d9954f8041eabf2fc64dd
SHA512713e17f9aa514949ed8321ea32efdd238c8d8c59cb6ce080bc5ef94f126580e49335db0b2c98c82ffdc24bf8da91b839a96b43334499d2d14d5075791e1d8a26
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-n..quickstart.appxmain_31bf3856ad364e35_10.0.19041.4474_none_08f8dfcf0c193741\f\narratoruwpsquare44x44logo.targetsize-60_contrast-black.png
Filesize49B
MD55309418bc1523beb6577383f06923647
SHA1bf038e5c54fdd815cc2e2e472a484d135de1cd52
SHA2562bb241f74bebc36baad0203c03b7739f93ffa8e448009fdf97a4ac4cb807350a
SHA512b9cc0b844a8d6f33e1aa9e7a1526d401ecbae9311722adc90c7579e7db174119307cd7f95854249310e6be536d95e15c2e43b3212d78e3407f486e6a73033e46
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-n..quickstart.appxmain_31bf3856ad364e35_10.0.19041.4474_none_08f8dfcf0c193741\f\narratoruwpsquare44x44logo.targetsize-64_contrast-black.png
Filesize49B
MD5ea85395f55a973e4f559982e6a3fddb0
SHA12cd25543e2c3fd326457c35ba02d2115d11e03bf
SHA256d625d38034914e353204ce377960e966204f9da071cbc0edfd5965ce80f82e19
SHA512aa18c3f2cd9d401c8b330dc61cac5f5a908ce1c4fbe86a29d615761050937e06a0bd0a2e201c192548c6a36cb27b01f3241971887586cbeecee641b34c9fb1e0
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-n..quickstart.appxmain_31bf3856ad364e35_10.0.19041.4474_none_08f8dfcf0c193741\f\narratoruwpsquare44x44logo.targetsize-72_contrast-black.png
Filesize49B
MD5c3e089cc7b2f8ad87df0f2bde5440092
SHA17fed9a376726e7520688f6346ab1d3a020c26684
SHA256c98e031ab2be8df115096326dc1a47a9bd5d86cd6d40cfa76f63348d30f71f3a
SHA512b518c91030f45221a944d014dc7f0b714b3d5178f79351af700dd3f956b654cdd68b798ccace0e6ec1dce0a1809091efe82e10599f6434c7dec44b49b55a0497
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-n..quickstart.appxmain_31bf3856ad364e35_10.0.19041.4474_none_08f8dfcf0c193741\f\narratoruwpsquare44x44logo.targetsize-80_contrast-black.png
Filesize50B
MD558602bf5de60cdf2eb3a981931d526cb
SHA1d0ed22ec3b73efa27a7603ea8579598040158cff
SHA25655ccf61419d326d5119d5a32d0158242b763e6ac1d6784183d894fba1923fa34
SHA5124444c51457ead65fa12aec7a9de2a5d87b2e0f88b51801ed515758f8ecdb71fac46db657558f19cf9175e0b247268d3a776b8178a7a5337bd941fb1dbd9db2f5
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-n..quickstart.appxmain_31bf3856ad364e35_10.0.19041.4474_none_08f8dfcf0c193741\f\narratoruwpsquare44x44logo.targetsize-96_contrast-black.png
Filesize50B
MD5cab7eaad31fd901e83fcf85f837aecc7
SHA12c5453f96828522fbf8384e049ccb5c2b38644b4
SHA2562554044187fda828ab358a5aa762dcfdd25abbacb8f3021d4ef388fe07693b66
SHA512225a2af44ccdfdabd70ed8a4ddd873d38860366ae247c5ff830ca0cadc3586d62527d4769d4ce453e7f0f2a34fc8a7b32b8f79bcf5397c68192ccafa87999ec7
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-o..tranetsso-appx-core_31bf3856ad364e35_10.0.19041.4355_none_2bd5a76141458582\f\logo.scale-100.png
Filesize50B
MD59724fb7bc0acd7f2b5f696fb5b9d2ed9
SHA18b5d87cd4376d4ab2ec18a00715cd42d9edd2a88
SHA256079a8d8792128e0597f2382d9fb14b08250e81692752a6c1efbee3c3bc26271d
SHA512e6dc6f844de5ec2a3f515d3518194c5e4ade7262e201aa8fc924549162a7ac955532e4b3964f284710902aee9f341cea6abb306947b829cf4ee7ab1efc263164
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-o..tranetsso-appx-core_31bf3856ad364e35_10.0.19041.4355_none_2bd5a76141458582\f\smalllogo.scale-100.png
Filesize49B
MD541e9285f0ff30c38200254257081da67
SHA1c6793e87b1b1953704a2a82214b7c3fe5fd71781
SHA25603e79fe7525eb2e3fb92e66a11958f738bfef4abdff20a272333d84e729b3962
SHA5122dd8527fa3a53531e937b4840675dc4d44c6638ded18438fd61e6bc07fdc61d8c6b5e6221d2d9582ff0d85d109f60cd0e16851dd7d0a022dc8869572d5bb0bb6
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-o..tranetsso-appx-core_31bf3856ad364e35_10.0.19041.4355_none_2bd5a76141458582\f\splashscreen.scale-100.png
Filesize50B
MD566fc070d671cc708826c98d7082195bc
SHA16fe94d70df2312afa8a2433e144cbe2d113faa75
SHA2561c32d4567e3b8cc720d427ea0b4622483a649fc4652b32d8724f143fe386d484
SHA512ec3c5273a3e6d2970e32825c0762881c84c17c484c8813680671f1af094854ffe7650f55b34afd89bac2faa365da32c5056e4883f9d89b30c468c58e3908b594
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-o..tranetsso-appx-core_31bf3856ad364e35_10.0.19041.4355_none_2bd5a76141458582\f\storelogo.scale-100.png
Filesize50B
MD5ad7a724f82868de93c8d1a58e085f202
SHA1fc9d14331985b347384d41a161f91d06905bd5f4
SHA25666c595bfcf3c9d2f1199adf0e2afdcf98edb9281013a2cb62120270f7ff37d3f
SHA51289d51dad529833dd0c7db48929bd048251ef6105cb142f59c31cb8640e983664fae6d964545acb307d7aa4918a3932c85d411df7136540950d579534b51e0f86
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-o..tranetsso-appx-core_31bf3856ad364e35_10.0.19041.4355_none_2bd5a76141458582\f\widelogo.scale-100.png
Filesize50B
MD51b61898100511afe5a345431d49835b0
SHA103c247f78e751ef1e62e50b2677aa6d6548e8066
SHA256d633b74447294c2fc92e7260c37e1a56513736a528fefbdfd58d305f1ea4f89f
SHA51263b0e0470a928e8dfac723ba46ee936dd0e5f6fda30b55f46394200fee2e79751bfd23f5ca98484b21c69afb86ae6e44df0a9d6eca93e75c87b39649811698be
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-p..alcontrols.appxmain_31bf3856ad364e35_10.0.19041.4412_none_1819b004e0dd5588\f\logo.scale-100.png
Filesize51B
MD5996543bf4e7428d1def83ed36a63923c
SHA18b1fa6545791cb0cfbac2e9e0071de88d5bc77f2
SHA2566e29ad6db38ac818a68320233e0e65b627f8e2547a584928c9b2d374bd9bb042
SHA51210be188936deab1d43d6b5255defd525eafcf4c3e3f43ff3e5d8e0ee7bad7ae833657d20b58c1305409ab18eb6a9da4d758359eea2ab348d10d0b1a680f9568c
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-printdialog.appxmain_31bf3856ad364e35_10.0.19041.3636_none_f9aa3bcc8e7d4381\f\splashscreen.png
Filesize50B
MD57aee366d4333e22f3a29d4dce53df696
SHA1f9d44bc5f73d55a9b61df2ae526630acc65695cf
SHA256d3de2d6f30b2fc8fb14b9a671cb7a60fd09a7a6ca2301943b7529c0eadd471da
SHA5128d413ef763a7f511e3e1e31ff4ac7b24e8023f4867febb6188c6c5331f36697e147cd170035e7d1aede27345d745503b97f2ed6bcbe6a225c0aa9e60f1ad148f
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-s..ets.icons.searchapp_31bf3856ad364e35_10.0.19041.3996_none_8d465235315175e4\f\applisticon.targetsize-16.png
Filesize48B
MD5cecc67d7efb4cbac3dcb56a88ed818b8
SHA155ab8091d2a565d9fadf05e721bcadf16324b6bc
SHA2563305a49709b82ad4a4736c4056054e32dd9a424a68131120c6573337c4c4fb32
SHA5121a887a0dc34fb7168c97d358bc9cf6798f4ed93d507e2e312d6bdbb7e9b954fb475848159961f49e9b59da84051ebb768792488b2fab64167b55e177e9fd4252
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-s..ets.icons.searchapp_31bf3856ad364e35_10.0.19041.3996_none_8d465235315175e4\f\applisticon.targetsize-20.png
Filesize48B
MD5c0a5eb2ea63dc17c31c06a879457b95d
SHA10bcc39d496c4951e46aa48f88aa2f5fd267aeef8
SHA256d2e899586c24c85bd5d51f2c4e087f4baa167d8b6c03bf94fd08d219f8ae58be
SHA51210a48d505b9ce38c3fafaebaf0bdcd57ebecfbba47a3ba184c7ac32d31f5bf70187eb34f6f870fdc6a58cc9abc30477aa292f2bc6fb977e5aa7a5e86a8c550ff
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-s..ets.icons.searchapp_31bf3856ad364e35_10.0.19041.3996_none_8d465235315175e4\f\applisticon.targetsize-24.png
Filesize49B
MD5eda344eedf72cb3b5d587d9ba8eb8fec
SHA1cb1de73d1b1b47584c708ffb1925592801251922
SHA256d27ac7b5ae5d17daf9755da453d50de2ee293dcfa03bee7f840842c72697c6ea
SHA512b64d7792db9bfe5b7a8814580ab78e8c2654d6c3652aca4ad8fb3a58fed333ba844a0b2fbab10a4e210bf8f1196b3d6860da9c124fae63b607d41ab51ede9372
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-s..ets.icons.searchapp_31bf3856ad364e35_10.0.19041.3996_none_8d465235315175e4\f\applisticon.targetsize-256.png
Filesize51B
MD5b1651ea5601b2e61d89a3ae168baa38d
SHA14926602e4a55edab48b780dd3ee3deba61a9dc4f
SHA256736799e2fba913d5598dc216d02ff60e0dc473852a96c808e7d02c2e751e2839
SHA51293cf5f6d5ed2a55994860b8381468a790331af12d006c00fcc95af876f52ad6d4aa2343030955db66693f4dea45b88c0e7b595f12ac4222cdee1d2ef42467f36
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-s..ets.icons.searchapp_31bf3856ad364e35_10.0.19041.3996_none_8d465235315175e4\f\applisticon.targetsize-32.png
Filesize49B
MD5bcd827c961af118f4ed95645a454c5b0
SHA160c19267078ab2fe0dd01b6777cb9be5133d1388
SHA2568da1527eb9bed8a104bd2c176f505a52918a60b02ae2d85e7cc2b7e16b776111
SHA5127926956725cb591a48868de9143933965d0ac06c65c33edf503aac409ae47ee2348eeead1ab88b9c5586ce19f7dc46c01e9a5a6d66be6bdd4c5ecc1bf19ca087
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-s..ets.icons.searchapp_31bf3856ad364e35_10.0.19041.3996_none_8d465235315175e4\f\applisticon.targetsize-40.png
Filesize49B
MD5edb345d9d30eb53c28e73101e47260e2
SHA1e069b87c0db5d23fc004b46b90073f81292c896c
SHA256df8b9afc515355d94196bf1b0d4c560eb5e21a66ad13f7b4290bbaa900607b64
SHA512794cc86f99627713fcf280c15d7915a751fe21d2f9ff10f11b2938795a123442ea3b638e91c8c776861a404b6704efd45df0aaada842cfab1a2c1fd903bbdab5
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-s..ets.icons.searchapp_31bf3856ad364e35_10.0.19041.3996_none_8d465235315175e4\f\applisticon.targetsize-48.png
Filesize50B
MD5b8915e06999272c7bb5067fcb34bf9a9
SHA127f09b1630eed9ece6042a26c6434ef6eca480aa
SHA2560a8a2c8a91272c50ebd0977d0f5b802ef8cd403067e7628b4f2d5e236cdd1bf6
SHA512e69a1b435b3dcd7cba52ed363c0d70be28d916ef3442d0effb9bbe5dc13d89bd0628ce76fa0e05005a80fdeee3b46c29b402eff64a8f068cafed8c789372702c
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-s..ets.icons.searchapp_31bf3856ad364e35_10.0.19041.3996_none_8d465235315175e4\f\applisticon.targetsize-64.png
Filesize50B
MD54061a5f01f61764c3406cca8d2071ee1
SHA1c075d734541fb4d583f2e20aab447b52e22fbb9a
SHA256236f9f7009a540324a5d5b81a80e72f2b0f373b3464b154b0d8987a354329658
SHA5126eaea516aa3c29e81ee1243d9704fac3eaa50dcfd20a80926ef362baa2701c8b79141d88e5520e5ce33d39ce7be04f2e8572c2144c040c21b8ec137526b271dc
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-s..ets.icons.searchapp_31bf3856ad364e35_10.0.19041.3996_none_8d465235315175e4\f\applisticon.targetsize-80.png
Filesize50B
MD53cbc44f42dee6065104be288c7110bfd
SHA1e7f976100c09ce2d152abd48542188124bce36f4
SHA2564d62245d40415f7f8fe76a13d7f30aee769a23fd047292d44cdf17fbe671206d
SHA5123b0fd2dc7f15b945023c1d354e69eb9b9b5abcff9e750f22365c3de4851d8e1d96a41b3cf7d4dc0728088129ab1d9377f5eb36d4c601424ba5f970e39536409e
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-s..ets.icons.searchapp_31bf3856ad364e35_10.0.19041.3996_none_8d465235315175e4\f\applisticon.targetsize-96.png
Filesize50B
MD5098fa14e977f06aeb20344eecc578ca5
SHA12c2ae46baf33894c9adef770f46f96ac621d596b
SHA2562beb3e7461732568588092e2555da40b81f5afeb667896ab27836169215c590b
SHA5124b8f98752f81430c077009f0ed34d575137af169de252bd49daa95fc9a56936bd2800a19814c4d3ac04d92007024358e3410c1e49da1760b43df799f9954f001
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-s..in.assets.searchapp_31bf3856ad364e35_10.0.19041.3636_none_0ec6635ad8612aaf\f\splashscreen.png
Filesize50B
MD533e577307e498ec65a6fd3fe2c0f0b6d
SHA1d2181d0740bc5fad3fcac9007cb92b12988697db
SHA256def0bc39711240dc9687f22b1cee94b0753fb4148835cb004285a3ef5b881f53
SHA51286858261aa5fe556874b08339dec1a46beed83020c8b7589f502892c970e9753ab573868fd2f3c3fae6e02279a65cd7859474f0902a818ea334ef01fcbfa0931
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.4355_none_27aabcbd933840e6\f\square44x44logo.targetsize-44_altform-unplated_contrast-black.png
Filesize49B
MD51be4a6d822becbadd7f58edd5825b86f
SHA12c6405152708672d0ed2d1eddcb95ff92d6f2fcd
SHA2561de58241e65b643ade82dad9818a0b75d393cf580db5de03442b743c71211a4d
SHA51263b964ba85d80ecb71c30b0b3f09fdc505e32dfcb29a58c86f88a2ce5a534e03aae24452f729842a86376e4312ce25bf595b1050658cb6112e7297442ef9ed59
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.4355_none_27aabcbd933840e6\f\square44x44logo.targetsize-44_contrast-white.png
Filesize49B
MD59046d97bc237091b570b24ae0c9937c2
SHA1b47d9c9d4fb7eed13be1fc6cf68b8281898991d5
SHA2561ae66b3c88f3291ab7641785cb325bb244780891c3d52be0ef3b37b932b9f5c2
SHA5126578c932407fca9de1a22b2c61445375b098a0bda5d3a2fc529986b5e0e1d5b52e50810e60fa78938058dfeee01c366f9670401d7569242f55ff6514ad4dc642
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-sechealthui.appxmain_31bf3856ad364e35_10.0.19041.4355_none_27aabcbd933840e6\f\squaretile-sdk.png
Filesize49B
MD59cabc77d46a3ba89a00736e1abd7c4e0
SHA1acc46c91b47ae7e86f52893757b13de170efb737
SHA256f1870b02e2d26b51138aadad407fc96f04ca179e7a89f9ee524a19ddab7d1774
SHA512b544c69f17a993359f7ff944faab18a88646a8a1feba166934bfaae369b71565c07b663d02328b7e53252619c7f814b724c836205c529475482c1ddfe6290477
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-shell32_31bf3856ad364e35_10.0.19041.4529_none_e0ca4ed1c74976b7\n\desktopspotlighttoasticon.scale-100_theme-light.png
Filesize852B
MD5d003d7078aa715d87920bd6289180e23
SHA1a0ddddbab089f8dfeadae7fa385bdfa75f9c7132
SHA256e9b4883b865cc8761cdbcd2b843e34264bc7f9febd1e570fdc8dea831254f446
SHA512301426268d6383405c2e0e2430d4c4b73b601739fd612bb344623f8b0cbaa78208eb980f3c97e6c45444da283969a8df75ad1adfbeaa7a65f3afc652b51fba49
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-shell32_31bf3856ad364e35_10.0.19041.4529_none_e0ca4ed1c74976b7\n\desktopspotlighttoasticon.scale-125_theme-light.png
Filesize1KB
MD5564eecc25b829cbfe2b02095ab2dd761
SHA182c574d333ba9d9f21f84089c98389f8ab28464d
SHA256cb99c79113b68fb8e1463d0e381cbc0b3710504b1ffdacddbd123fa61c722583
SHA512201ec908cf2cfda2038faa6cbd06ed7aaa912d71a66eb233256d6c92509107803409fdf03d73faea65d8194d999adf2a0a778ea5863f23fd06446b11ef7b0128
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-shell32_31bf3856ad364e35_10.0.19041.4529_none_e0ca4ed1c74976b7\n\desktopspotlighttoasticon.scale-150_theme-light.png
Filesize1KB
MD50ccca29fe5baf2fc3492f6c3ea0791dd
SHA174ed1d6c8228e9c8a694a53c9dfcf57754e10aa6
SHA2560d0365bf64e807f1af6372bede5134db76d2da903adf0937bed24414f6b62b03
SHA512c0cc9969837b4f11dd2fa02d5d67743863450c71fc778dbd86036d8b5bb5a0bdba5d04f1b651bf072f1254b15f68fbd8e1d01f06bfe8995a55a703eafcdc3b33
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-shell32_31bf3856ad364e35_10.0.19041.4529_none_e0ca4ed1c74976b7\n\desktopspotlighttoasticon.scale-200_theme-light.png
Filesize1KB
MD583e8c0dec5ad8c2d800ab4f5f8d47f9b
SHA14dc0df52dc86c29fb63a1109b9e64da663a8e107
SHA2560b9f33fab5dd88506ddf30718ebe81b6073261dddb4924309f67db20ea746446
SHA512af241272662c3c2b799d224563b25970150820249b365f384aabcb2ad38978ac3b538691dd50c6ca2810418b89e7876ba61aba284e70c69a6dbc3418ff3f84b4
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-shell32_31bf3856ad364e35_10.0.19041.4529_none_e0ca4ed1c74976b7\n\desktopspotlighttoasticon.scale-400_theme-light.png
Filesize3KB
MD5d2d4bddda9a34a6b272e505157fc4a4c
SHA1d8194b77f40814b30c4b55e3e0b2bae811b71798
SHA256885fe9022d77daa332c19ab7f10c505128443d918cbfe5237f1dd40368063319
SHA51237e69780a847c313d8d75b85035d9ef95ffbc90ec9aa01c326b477d9c5169876c67de7170a1cd61fe314f1d500a8a350986b276a3a38bd749c4516a66d8a03cc
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-ui-search_31bf3856ad364e35_10.0.19041.4355_none_69cb58fcd83c2d78\f\logo.png
Filesize49B
MD58dac166815a39f2c7c2651cee9daddc1
SHA1640c127bafd66d56e46b382485f370d15977b379
SHA256d2f144cdf272277b7651e031ab2c15af7478c1d9840dc2c63b973e6df561515b
SHA512c1e114283c9d097528bca8c28a3ad496bd874f7f88cdf790b72d88f025ed4537650cdd051b4c3e59f190f6c758f33b9280a9df41c5d21fdaece8683ced038716
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-ui-shell-component_31bf3856ad364e35_10.0.19041.4355_none_c25ba12abfc23968\f\passwordexpiry.contrast-black_scale-100.png
Filesize49B
MD529371f9f16e8e559250a6d856a03c834
SHA1fb2d8dc51542019d8c51c8b35353725d096faa9e
SHA256d87b1715a53848f2707a887fd8d10ce25cd614e561d17018d99f74368c85b398
SHA51278573101f00e3669f03f04d0b87de024b8fd1981aec3d70e505dd85664c1851625917244b8be427e4219d5ccc96e4c30ea150c574d0a3ad08733dd2b435709df
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-ui-shell-component_31bf3856ad364e35_10.0.19041.4355_none_c25ba12abfc23968\f\passwordexpiry.contrast-black_scale-125.png
Filesize49B
MD54b5e92cba149d281fc4e5e4606e3bd55
SHA1aba19e12f6b32e6a520a4deef58e0585b4759deb
SHA256bbf2638e0e55e5a56bd141e071498ec66358946bb3727f82febf0d3233f40a26
SHA512d7a59eef32d5f918b8f40a4c32b7140185f70e387fea07c8c65198d80ada23160a664442e537aea4f9fc704160c9b0fb43bf060978d7b0514c91656887413ec7
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-ui-shell-component_31bf3856ad364e35_10.0.19041.4355_none_c25ba12abfc23968\f\passwordexpiry.contrast-black_scale-150.png
Filesize49B
MD5f778cf785cff8e28b2ffd2b33b602d46
SHA1df958fd05ad31c756e12ad4cef79144d75aa9948
SHA256baee323faad78b8d6102cdfacb31f3c1fecd328c713eac96bffd21d24032a896
SHA512454ec4180112e9a44f96a1899b3486d6e654c82bbb726af83ca424fa39e5d601f2068dffc605b1889cc95a6d4f35dfb3d63b4161c940833892cf395f68cc3dd9
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-ui-shell-component_31bf3856ad364e35_10.0.19041.4355_none_c25ba12abfc23968\f\passwordexpiry.contrast-black_scale-200.png
Filesize50B
MD50283e4f2e28b6d435bb77ff5023d2b45
SHA140b017892ca2754a6c654e4a88d2664f6166b854
SHA256d32d0eb23f3424235178f882161fa3638bdb559266aa878a4a32ab0d4b29e6cb
SHA51200d09617d38df8837a86459601e32d4b68d8d3f693123a85451f56a8288db313c4b674e83b467c82ed4695a5ee6c081160f4f0505a0c607af3585a3e9d415731
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoft-windows-ui-shell-component_31bf3856ad364e35_10.0.19041.4355_none_c25ba12abfc23968\f\passwordexpiry.contrast-black_scale-400.png
Filesize50B
MD5461e0c1e6308d342defdb637a0f6f87e
SHA1832af2153329db200bf4ee93e3a8fa5a8949b233
SHA2569f5d94b58bb9a69faee8a87a27f504799f1d3cf2b120d50186a597dd6b64fbf3
SHA51247aac312f83b4a80840b236905db012aad45c12f077766c1d9d898c0cc888db16c66e21756833ae396044aa35d4a051262cd004f436314364a3ebf516dae707e
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_microsoftwindows-undockeddevkit.appxmain_31bf3856ad364e35_10.0.19041.4355_none_08ebfba7ea995e3a\f\storelogo.scale-100.png
Filesize49B
MD54fd3d2477f4ffbc998a4c7485d94c165
SHA1bb18520cb4a64f6cb4f4eaf4ac2a40e7c00a4856
SHA25657139138bed9d7c93493101c618b1f6860f8cbdf75dd8907f99f4e2beff73bd2
SHA512fedf656ecad4dbbece686a31e3cde8207cef99ed79a00b4336a598b7b08fcabb7b624fdd9621adb356909961d7486bbd4c85a071ec7dab92046ae92c504ad600
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\amd64_ppi-ppiskype-c-a_31bf3856ad364e35_10.0.19041.3636_none_e69f3bd188919f86\f\lync_ringing.wav
Filesize54B
MD5cf965749f7a2bd96bb6b27318dd2b368
SHA1f4290e1b0b0ba4ede595b49a1ce70f1da65046ac
SHA256b3fe640ba0e1da12b0d34a2c4c1cf469daffe4002a6dd3ca45a7f299f7affaaf
SHA5123ebc1c322d7023e25737b22f968391841b043fb064a6a3fc7263019d48929b1fa1dfd7b3a0a7d43cdf9f85df0160834d900480ea4a82ffb22a0ccbb8b0915871
-
C:\Windows\servicing\LCU\Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.4529.1.9\wow64_microsoft-windows-i..lineid-wamextension_31bf3856ad364e35_10.0.19041.4355_none_7f1a7e5ce8e3ce1d\f\defaultaccounttile.png
Filesize52B
MD5cd4bbea6b8023a0024e0af52fa711fd2
SHA13beeb778a9d049a5914322c8b6833a9a6124bfe1
SHA2562ed165d4c567b3273567b0d13d9d927fd5c6fcee0f052a978e53f1e6494273d0
SHA512b97758c6fbc3ea5ddf08d66a9b6af0c60ca3448a4f7373506a5a4507678e10378172e2ac1562f84f23dc8bdd58b32d5a79006d1c9add54fe8f913d208639a472