Malware Analysis Report

2025-04-13 21:19

Sample ID 250325-p58tnawwe1
Target 533.7z
SHA256 3730e9cba4a93bc985ef7cd2368ccbf5eccd4724f514b38b20e320e5553dd08d
Tags
discovery upx 512478c08dada2af19e49808fbda5b0b makop chaos nefilim mimic blackmatter modiloader gandcrab lockbit defense_evasion persistence privilege_escalation ransomware dharma credential_access execution impact spyware stealer evasion
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral22

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral28

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral8

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral13

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral5

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral23

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral6

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral20

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral30

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral9

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral16

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral18

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral21

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral26

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral29

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral11

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral14

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral25

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral7

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral10

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral12

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral24

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral27

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral4

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral15

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral17

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral19

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

3730e9cba4a93bc985ef7cd2368ccbf5eccd4724f514b38b20e320e5553dd08d

Threat Level: Known bad

The file 533.7z was found to be: Known bad.

Malicious Activity Summary

discovery upx 512478c08dada2af19e49808fbda5b0b makop chaos nefilim mimic blackmatter modiloader gandcrab lockbit defense_evasion persistence privilege_escalation ransomware dharma credential_access execution impact spyware stealer evasion

Modiloader family

Gandcrab family

Chaos Ransomware

Dharma

Makop family

Dharma family

BlackMatter Ransomware

Nefilim ransomware executable

Rule to detect Lockbit 3.0 ransomware Windows payload

Nefilim family

Chaos family

Mimic family

Mimic

Detects Mimic ransomware

Blackmatter family

Chaos

ModiLoader Second Stage

Lockbit family

GandCrab payload

MAKOP ransomware payload

Renames multiple (283) files with added filename extension

Renames multiple (789) files with added filename extension

Renames multiple (148) files with added filename extension

Renames multiple (784) files with added filename extension

Renames multiple (136) files with added filename extension

Renames multiple (120) files with added filename extension

Renames multiple (314) files with added filename extension

Renames multiple (323) files with added filename extension

Deletes shadow copies

Modifies boot configuration data using bcdedit

Renames multiple (189) files with added filename extension

Renames multiple (145) files with added filename extension

Modifies Windows Firewall

Deletes backup catalog

Disables Task Manager via registry modification

Credentials from Password Stores: Windows Credential Manager

Drops startup file

Checks computer location settings

Loads dropped DLL

Executes dropped EXE

Reads user/profile data of web browsers

Enumerates connected drives

Looks up external IP address via web service

Drops desktop.ini file(s)

Adds Run key to start application

UPX packed file

Suspicious use of NtSetInformationThreadHideFromDebugger

Drops file in System32 directory

Sets desktop wallpaper using registry

Drops file in Windows directory

Drops file in Program Files directory

Enumerates physical storage devices

System Location Discovery: System Language Discovery

Browser Information Discovery

Program crash

Unsigned PE

Event Triggered Execution: Netsh Helper DLL

Modifies Internet Explorer settings

Uses Task Scheduler COM API

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Interacts with shadow copies

Suspicious use of AdjustPrivilegeToken

Runs net.exe

Suspicious behavior: AddClipboardFormatListener

Suspicious behavior: EnumeratesProcesses

Modifies Control Panel

Uses Volume Shadow Copy service COM API

Modifies registry class

Checks SCSI registry key(s)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2025-03-25 12:55

Signatures

Blackmatter family

blackmatter

Chaos Ransomware

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Chaos family

chaos

Detects Mimic ransomware

Description Indicator Process Target
N/A N/A N/A N/A

GandCrab payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Gandcrab family

gandcrab

Lockbit family

lockbit

MAKOP ransomware payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Makop family

makop

Mimic family

mimic

ModiLoader Second Stage

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Modiloader family

modiloader

Nefilim family

nefilim

Nefilim ransomware executable

Description Indicator Process Target
N/A N/A N/A N/A

Rule to detect Lockbit 3.0 ransomware Windows payload

Description Indicator Process Target
N/A N/A N/A N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Analysis: behavioral22

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:58

Platform

win7-20240903-en

Max time kernel

15s

Max time network

17s

Command Line

C:\Users\Admin\AppData\Local\Temp\4a2ad49c934f9ae6ca6b5d0c7cc34f5e12d349640012fa8cf8eb7e2d3acd6c9f.exe bcdedit /set shutdown /r /f /t 2

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\4a2ad49c934f9ae6ca6b5d0c7cc34f5e12d349640012fa8cf8eb7e2d3acd6c9f.exe

C:\Users\Admin\AppData\Local\Temp\4a2ad49c934f9ae6ca6b5d0c7cc34f5e12d349640012fa8cf8eb7e2d3acd6c9f.exe bcdedit /set shutdown /r /f /t 2

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 2328 -s 200

Network

N/A

Files

N/A

Analysis: behavioral28

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:56

Platform

win10v2004-20250314-en

Max time kernel

0s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

N/A

Files

N/A

Analysis: behavioral8

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:59

Platform

win10v2004-20250314-en

Max time kernel

110s

Max time network

109s

Command Line

C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe bcdedit /set shutdown /r /f /t 2

Signatures

Modifies Windows Firewall

defense_evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\netsh.exe N/A
N/A N/A C:\Windows\SysWOW64\netsh.exe N/A

Looks up external IP address via web service

Description Indicator Process Target
N/A api.my-ip.io N/A N/A
N/A api.my-ip.io N/A N/A

Event Triggered Execution: Netsh Helper DLL

persistence privilege_escalation
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A

Runs net.exe

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3556 wrote to memory of 1872 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3556 wrote to memory of 1872 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3556 wrote to memory of 1872 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 1872 wrote to memory of 4156 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 1872 wrote to memory of 4156 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 1872 wrote to memory of 4156 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 4156 wrote to memory of 8 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 4156 wrote to memory of 8 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 4156 wrote to memory of 8 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 3556 wrote to memory of 1460 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3556 wrote to memory of 1460 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3556 wrote to memory of 1460 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3556 wrote to memory of 2480 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3556 wrote to memory of 2480 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3556 wrote to memory of 2480 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3556 wrote to memory of 4372 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3556 wrote to memory of 4372 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3556 wrote to memory of 4372 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3556 wrote to memory of 208 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3556 wrote to memory of 208 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3556 wrote to memory of 208 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 208 wrote to memory of 3944 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 208 wrote to memory of 3944 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 208 wrote to memory of 3944 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 3944 wrote to memory of 4168 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 3944 wrote to memory of 4168 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 3944 wrote to memory of 4168 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 3556 wrote to memory of 3508 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3556 wrote to memory of 3508 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3556 wrote to memory of 3508 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3508 wrote to memory of 3872 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 3508 wrote to memory of 3872 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 3508 wrote to memory of 3872 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 3872 wrote to memory of 3440 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 3872 wrote to memory of 3440 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 3872 wrote to memory of 3440 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 3556 wrote to memory of 2608 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3556 wrote to memory of 2608 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3556 wrote to memory of 2608 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2608 wrote to memory of 3984 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 2608 wrote to memory of 3984 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 2608 wrote to memory of 3984 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 3984 wrote to memory of 2080 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 3984 wrote to memory of 2080 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 3984 wrote to memory of 2080 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 3556 wrote to memory of 2240 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3556 wrote to memory of 2240 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3556 wrote to memory of 2240 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2240 wrote to memory of 3704 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 2240 wrote to memory of 3704 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 2240 wrote to memory of 3704 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 3556 wrote to memory of 748 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3556 wrote to memory of 748 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3556 wrote to memory of 748 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 748 wrote to memory of 4476 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 748 wrote to memory of 4476 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 748 wrote to memory of 4476 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 3556 wrote to memory of 1404 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3556 wrote to memory of 1404 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3556 wrote to memory of 1404 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 1404 wrote to memory of 3928 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 1404 wrote to memory of 3928 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 1404 wrote to memory of 3928 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 3928 wrote to memory of 4952 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe

Processes

C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe

C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe bcdedit /set shutdown /r /f /t 2

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop MSDTC

C:\Windows\SysWOW64\net.exe

net stop MSDTC

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop MSDTC

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c bcdedit /set {default} bootstatuspolicy ignoreallfailures

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c bcdedit /set {default} recoveryenabled no

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c wbadmin delete catalog -quiet

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop SQLSERVERAGENT

C:\Windows\SysWOW64\net.exe

net stop SQLSERVERAGENT

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop SQLSERVERAGENT

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop MSSQLSERVER

C:\Windows\SysWOW64\net.exe

net stop MSSQLSERVER

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop MSSQLSERVER

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop vds

C:\Windows\SysWOW64\net.exe

net stop vds

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop vds

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c netsh advfirewall set currentprofile state off

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall set currentprofile state off

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c netsh firewall set opmode mode=disable

C:\Windows\SysWOW64\netsh.exe

netsh firewall set opmode mode=disable

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop SQLWriter

C:\Windows\SysWOW64\net.exe

net stop SQLWriter

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop SQLWriter

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop SQLBrowser

C:\Windows\SysWOW64\net.exe

net stop SQLBrowser

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop SQLBrowser

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop MSSQLSERVER

C:\Windows\SysWOW64\net.exe

net stop MSSQLSERVER

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop MSSQLSERVER

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop MSSQL$CONTOSO1

C:\Windows\SysWOW64\net.exe

net stop MSSQL$CONTOSO1

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop MSSQL$CONTOSO1

Network

Country Destination Domain Proto
US 8.8.8.8:53 g.bing.com udp
US 150.171.28.10:443 g.bing.com tcp
US 8.8.8.8:53 api.my-ip.io udp
DE 23.88.33.229:443 api.my-ip.io tcp
US 8.8.8.8:53 e5.o.lencr.org udp
GB 2.18.190.198:80 e5.o.lencr.org tcp

Files

C:\0154351536fc379faee1\2010_x64.log.html

MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

C:\3ac54ddf2ad44faa6035cf\2010_x86.log.html.(MJ-DK9360817254)([email protected]).zxc

MD5 1605535687a56d2b140248b895f53da9
SHA1 8809466a2a2cf7f7cc63f41a3186e769d14d17be
SHA256 50f1fc5afa9f6685ffc2d7b6b58067af06437287fa4935a817c16c040affa390
SHA512 5b4cf81957e00712adb9014aae06b1ba1a7fc0ffab3430a65bba97f239aa09c5287a14203966866fbf4b3340f730824e33eebbf7e7f733c9324c960a8174d667

C:\Program Files\ApproveSwitch.TTS.(MJ-DK9360817254)([email protected]).zxc

MD5 c4312b91e48e0eccd3fcdefad143ebb2
SHA1 dea0bec431be2ad42e3289b7effaec3f6ce016fb
SHA256 437c432e0e60dcca9a560105671695618322c20e571f49bb27f74d40363075c2
SHA512 84893b0535b800a4267a0ec86fc741d8dbf1693bd5206a9b650584b1fdbc29f81ffc65ce1acfb64564265f31eb149fb2c44d47c20c8314949d8e2f71322e3ed6

C:\Program Files\UnblockOpen.docx.(MJ-DK9360817254)([email protected]).zxc

MD5 c318d6f6a3e07a6143cf005183312f13
SHA1 5647e15139a27d74fbed1d595e62f7eef362a39e
SHA256 303d743bb86e46b3777489eb98091ad390792709f3abdb3d4aea5da0366d2fb3
SHA512 1c0a03ec548e45be03af521daea8660e6ca42fb1fdf474d418c04c3c1a80f9e82ec4467667e6cd7c231c70f958e42a945c6571675116f124ff4f83b26651c870

C:\Program Files\7-Zip\Lang\gl.txt.(MJ-DK9360817254)([email protected]).zxc

MD5 052d267f11a8aa61d6a23dcd5c13e2cf
SHA1 0e57001a62ba45899b31691056de141088ffafc1
SHA256 52574019e9af2f160f6ab8f2bb2d99b7ad588876c23ed290fc79d2bb6674c87d
SHA512 7add9f51b0d4ee35abee93d0048f522a03332d43468b478ef8e209a0054c6d821ca7fdec196d3fb867488e9cbb50fafcc528cfc5d68f2d155e6b52601ed20ca4

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.ComponentModel.TypeConverter.dll.(MJ-DK9360817254)([email protected]).zxc

MD5 ceb35664e005cf299c1e4cd745b0bb01
SHA1 cc6149cd47e9e36c8b578d2c8b01a75b40caee7d
SHA256 b3201906b007427d32c3ba91e5a9251bff84afdda0d86ce665a282095693ba0b
SHA512 52593d5eed13ff9d236c2e3f07988ae8c0a42d4ae5a2c501ba652453279090764fe5ece1e537e0afb2875e3da1c0ca30ebd41436d93ec352d0a256ca09f786b8

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Private.CoreLib.dll.(MJ-DK9360817254)([email protected]).zxc

MD5 7a7b6b76a0c20775a7c6b260e9002655
SHA1 8ae8227782984888f502d26e02c419ac95d24bff
SHA256 c003793d6862f7c033a5f84cbca0ea7bff88d728d0161c65888fe719ec1d845b
SHA512 907b1f7b2574486fa041ab07dff9b1d3eceae518017576291529f41557d2ec677966e61cc852b0f7161a2d38a4266156c95ba1eb05673bd046ecca9567e41a32

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\cs\PresentationFramework.resources.dll.(MJ-DK9360817254)([email protected]).zxc

MD5 46553f07a1ea12195baefe27365532b1
SHA1 0a770b4b193263abdb3d0ad4acc098c563a169e4
SHA256 deb4aa01997f568b207c5406531a1e46d6b0ba271f6cdc064807ff89847003c6
SHA512 e4775c774f5812e904a672b79b0e9a5c16ca7ca2b7a9156fdc3fdffdad1e57dfcc986435ea2c55b396466336104a30ec5ff07ebef87b43197188660a846988d6

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Linq.dll.(MJ-DK9360817254)([email protected]).zxc

MD5 174136752df9767026f344349e66ed46
SHA1 a9ef0c80d66cd7311dc9355233348cf00c9fabb0
SHA256 bb341b728d031e52ac89017029578be8b36dc9cdc1c8ab44abb37773ec139d24
SHA512 a6ab5d270427cb3887e2297425b0809a738dc452ec6bc9b0f6de413cf9956922ebe8ad3ad1c8d79a9958e01eebebd127536b66618b9c027df8165910ccf0446f

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Data.Common.dll.(MJ-DK9360817254)([email protected]).zxc

MD5 19befc1644a1bc80dcbd454b2b179628
SHA1 7eba4eb9470cfaa5f0221ad4abd0e4fcf513372e
SHA256 dd34865ad10ebcea7e33cb9d6fa6bd019fccf31f80e8d22deb90559494512335
SHA512 c6068fbf90da3ca9119f70bce33347706c012d7daec37f14c472589d26786c3c3eb238810dee2764b2e7b38443fec22ed854a1e7ae8d6530278281343d9dcb27

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Net.HttpListener.dll.(MJ-DK9360817254)([email protected]).zxc

MD5 b6fd0dca0ee4b5ae8c39e9b44e05f6f5
SHA1 6238a8678dfc680590da8ac1fad4bb0d6771cc79
SHA256 5b9ff0deb04921a35e38569d010a7f46cb7084f04bc017a7044e6931316fe494
SHA512 a7ca3857998dba3e0dab047f6099db5e461c5d83202979600e9c8c588595ea6cfe23b62873962d44285c256d4f58dbf7a349a9a1ed4e3058d11b2f060f789c43

C:\Program Files\Microsoft Office\root\Integration\Addons\OneDriveSetup.exe.(MJ-DK9360817254)([email protected]).zxc

MD5 e8bcc3fa3ee35e3e3ae0461f525f7c75
SHA1 cfbc16dd1d05ccc4a584330c2794ff898d559fd9
SHA256 5fd5f250d580758cf694b02ac46e8315b7774ad09f0fc40974ad858ec123c092
SHA512 16ada4d05ed47f2c328ca2298c9451e0d7f0d91c0ee9856b86b9b973be23e6c5fe93dd28339780c05081782d95a055adcfaa5854641ada5f0cd8e28955758070

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\pt-BR\System.Windows.Forms.resources.dll.(MJ-DK9360817254)([email protected]).zxc

MD5 e441897c8c7fb25398eaa1f37dd39b12
SHA1 c8a9e4cdfc8488326569bb154fa47a2c21338ee5
SHA256 ea1b5bf338a188e2f5abf106859f4bde395ac6acdb405201f58f8c83b675fb78
SHA512 6bb12a14e6a9d409c4f26880f9cd87c4ba97c44fcea9afee6865e939f3cafdc28a970a5854cbc6ac826f7e615834cc275be0319a6bd0dae0f6339d02d2c49297

C:\Program Files\Microsoft Office\root\Licenses16\pkeyconfig-office.xrm-ms.(MJ-DK9360817254)([email protected]).zxc

MD5 8c14c27f118aa417bc3a6f87c0d303e6
SHA1 b76104afc50d793381877e591112ea58b5df207a
SHA256 00eb407907935bd24d2673feabe6b121889fbed7279cacd8069e57a284062814
SHA512 87aec378f30e0132728441a99ce292aa49b129c16bfb67c318f1b9ae496e1e4e1ae22d876cdb87d5dc0a129cb8b73c7baeaa00ca8f3a91e63ed796f5459c324c

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Collections.dll.(MJ-DK9360817254)([email protected]).zxc

MD5 54ab8273f29e39e8e124a9e813698f4a
SHA1 cd5c02f11be5cdee68b3402ba9dbf12717e5b068
SHA256 8028e57423b5ba30c9d6af71ca4bbe2765cb276f4205c90a6ebb982733970629
SHA512 10a153c18f788de64db05592981b3dec5030d54a85bacc88ac09928149f06d5608a1d981c5d26db875fdaa43ba6d119d2476139104a6986acd3e241fe455e46b

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Linq.Queryable.dll.(MJ-DK9360817254)([email protected]).zxc

MD5 27b38649baf93a7216075407a0efa2f0
SHA1 4bb2931e53e1cdc762d7278949f0ad82a6e579cf
SHA256 e36a1d133d17f9065f9055f0e504b4ef4914ed8884032325cdd016753a5f18d3
SHA512 95a860d641b459d4632f8e866bafb612bb7043e8b283cb7230c999b3c7bd60d985b68f0f4da3d4122b31f738ab30af2ff4ea261bb3411a85b40ef507d78f9ba9

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Private.Uri.dll.(MJ-DK9360817254)([email protected]).zxc

MD5 eee38c71361b5f27808a113d1fe36178
SHA1 aeb6cfe2b57981c088d9c8af78b3b4a6448dde61
SHA256 ab3b2161960d02018565a852dda287cc7cfbefecadf0ded3c9ec73cdc4a122ca
SHA512 ed14429812b4bb716d5a73e2b336954f5d3579ceb76f600e632b31e84b3b8e0b75af9de7b2b8109c05fe01ef3a0e56157c53900f4dd66353de011510008d3fae

C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\OFFICE.DLL.(MJ-DK9360817254)([email protected]).zxc

MD5 2f95581e564224a30f9c93268d8874e8
SHA1 f9eb5b94744745b2a504152986b72d4baf6a7aec
SHA256 de3def96c55d3d3f704385e88985a9d445c9b9a06a91a55bfbb88680b675eb48
SHA512 48eb4f26caa9e3f0105c8deb76e9c23b68aa5864bb6d7bd5ccb535be7e70836d86d7d6a5463659e3bdb6d7af689864349a2147b44571f2bbb4b69c98a8491067

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ADALPREVIOUS.DLL.(MJ-DK9360817254)([email protected]).zxc

MD5 5782084b29fe77d2d545055743481d9d
SHA1 e74c816830122431dfe888f3d451713abf9850a1
SHA256 5c602ca699d5a86bfde297bcba0db6c50be373333ed121220a02edce350a8a14
SHA512 284174f664d4c3979756cf947a38c58fece746b531bd9820ec03934f4cadef2d19a78d01e4d72f4d4ed8ba3b79ae9ff2b330a365fd9be39392022eff20b0cbda

C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\accicons.exe.(MJ-DK9360817254)([email protected]).zxc

MD5 38001d3eebfc0573d9d0126847e268ab
SHA1 0d59e4c9edc85f77e75315534307763a68a9c1a5
SHA256 966d1659922ef8a5e702c2eb88fe28f9532c32b95e4cb2bb2c96a85f886b1648
SHA512 4c2efdcca167e52a9ada0ac4ce24055572fafceb60bbaa4a593027da914ff79e22ae4ce239ce2cee7cc6fc621be738cdf6ce4a81087003c73e58ad14ca2aa171

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\bb9a4039-5fee-44f8-a618-d20a135c468d\311ba9559af907e8_1.(MJ-DK9360817254)([email protected]).zxc

MD5 51191fda1094ed050e04030609a82d90
SHA1 bfe645a0bd4f14d905dc370de049b37a495fb959
SHA256 5a97fd75dde39b35f8e51990e260ab818c6d3b8f826fc162411e224e11d0cacf
SHA512 47e52db3a87d2f2be2ae3bb30363782c96493a721a980c06c187b0ed4a21412233d0571689aed8f62c8ad32f6fb840a317179f794f5cec866f76e81182c3a5ee

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\08be2d44d1063d56_0.(MJ-DK9360817254)([email protected]).zxc

MD5 8f532e29961b7efd94f330b72609c4c0
SHA1 769867491a2b581d304cc67d4cec7fc2bb01ea8e
SHA256 f80d1dbbc71823e0836c88a7ede1bb2a0e7deac8516befa9bd5240fc09c818c9
SHA512 cf59c28061dd633de07b39065c76a85edfd41c51c6ec3416e7c1e1549eac83704d58deebb15cb0eb20c3c82a4a4898d109edad24308e92ca9b99632798d993f3

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.IO.Packaging.dll.(MJ-DK9360817254)([email protected]).zxc

MD5 7d9c3995e82bbbb9b9da9761b9dc6571
SHA1 45b6a48cc15c0eaeea66e9e2a9223ad25951728a
SHA256 64f95459370d76f0c18e25a0ffd845a807811125d2dc00dd5b027be6ac0400c4
SHA512 6819c4b4b5585beb01137e41b8453246fd1b11b75256cfb50c4b84f3d218b1bb723763bc66aa4b78733e0b0fdf24eed21276cb6ea021b72f7520695b8d5813f5

C:\Users\Admin\Music\WriteResolve.lnk.(MJ-DK9360817254)([email protected]).zxc

MD5 06c4f8e0419017d0e38feda76fe4faf9
SHA1 51e6f9bf5b78cb1d8e18c1c97b857a9c2b69c75e
SHA256 e689c84e3e8c2350f11246cd8525e4858a36c4bc44be7135b44aef1dcfe65cd8
SHA512 b779d759b49db5ca0f121fefb71faac3ef116b5c58db9672cb5e5dbd02b4024fe53a8c278e5ea905646b09ed87b226c42ce0d0069eeb5aa4fe3fe3ff4d83e173

C:\Program Files\Microsoft Office\root\Office16\sdxbgt.dll.(MJ-DK9360817254)([email protected]).zxc

MD5 9e0cecf8b6184e8af043b6db3e96fdcd
SHA1 af043cda4bf9db82f5425dcddd1d8942a90038a3
SHA256 459973fdb7e69af064aa687917ea8e9aa76ce2ab28f6385d40f17aa1df795d43
SHA512 0c71c02130e6644a15afd5a8d638cb1bd964d5132d8bc6dc4115903b2d97c0a50ba79eddf28ed067e35d72d207fb5a0346188a90db943c7d6bd17129c8387028

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\TEXTCONV\MSCONV97.DLL.(MJ-DK9360817254)([email protected]).zxc

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Analysis: behavioral13

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:58

Platform

win10v2004-20250314-en

Max time kernel

105s

Max time network

112s

Command Line

C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe bcdedit /set shutdown /r /f /t 2

Signatures

BlackMatter Ransomware

ransomware blackmatter

Blackmatter family

blackmatter

Renames multiple (136) files with added filename extension

ransomware

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-3975168204-1612096350-4002976354-1000\Control Panel\Desktop\WallPaper = "C:\\ProgramData\\iArFt7fFC.bmp" C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3975168204-1612096350-4002976354-1000\Control Panel\Desktop\Wallpaper = "C:\\ProgramData\\iArFt7fFC.bmp" C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A

Modifies Control Panel

defense_evasion
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3975168204-1612096350-4002976354-1000\Control Panel\International C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3975168204-1612096350-4002976354-1000\Control Panel\Desktop C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3975168204-1612096350-4002976354-1000\Control Panel\Desktop\WallpaperStyle = "10" C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: 36 N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeImpersonatePrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: 33 N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeManageVolumePrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeRestorePrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\system32\vssvc.exe N/A

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe

C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe bcdedit /set shutdown /r /f /t 2

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

Network

Country Destination Domain Proto
US 8.8.8.8:53 paymenthacks.com udp
US 8.8.8.8:53 mojobiden.com udp
US 3.33.130.190:443 mojobiden.com tcp
US 8.8.8.8:53 g.bing.com udp
US 150.171.28.10:443 g.bing.com tcp
US 3.33.130.190:80 mojobiden.com tcp
US 3.33.130.190:443 mojobiden.com tcp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 c.pki.goog udp
GB 142.250.179.227:80 c.pki.goog tcp

Files

memory/3912-0-0x00000000007E0000-0x00000000007F7000-memory.dmp

memory/3912-1-0x0000000002530000-0x0000000002540000-memory.dmp

memory/3912-2-0x0000000002530000-0x0000000002540000-memory.dmp

C:\iArFt7fFC.README.txt

MD5 f66968c47a64569e2281f65a95991be0
SHA1 ef9e3e80bfbea4c3021b226cb8cd00687013b8a8
SHA256 4b950c763006e7c4569df8742855cec31bf82f835bd7e2bdcb5f128db34c82bf
SHA512 cb4ace1b3e891ab100b3950c6bc133b216e91c8978a3af1ffd75617b606bb7ceb0133f44d37a30a827655e5b84b016d736a732f5f37635bb727e1a5b722cad24

memory/3912-218-0x00000000007E0000-0x00000000007F7000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:58

Platform

win7-20240903-en

Max time kernel

119s

Max time network

16s

Command Line

C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe bcdedit /set shutdown /r /f /t 2

Signatures

Dharma

ransomware dharma

Dharma family

dharma

Deletes shadow copies

ransomware defense_evasion impact execution

Renames multiple (314) files with added filename extension

ransomware

Credentials from Password Stores: Windows Credential Manager

credential_access stealer

Drops startup file

Description Indicator Process Target
File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Reads user/profile data of web browsers

spyware stealer

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe = "C:\\Windows\\System32\\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe" C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\C:\Windows\System32\Info.hta = "mshta.exe \"C:\\Windows\\System32\\Info.hta\"" C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\C:\Users\Admin\AppData\Roaming\Info.hta = "mshta.exe \"C:\\Users\\Admin\\AppData\\Roaming\\Info.hta\"" C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Program Files\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Music\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Libraries\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Music\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Purble Place\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Favorites\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Pictures\Sample Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\DataServices\DESKTOP.INI C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Downloads\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Recorded TV\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\OIPA882W\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\TUVLNS83\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2DZXJZH2\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Libraries\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Favorites\Links\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Saved Games\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\F17E26FP\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8YJ7JBZ2\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M1ITRGY5\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Videos\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Documents\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Music\Sample Music\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Games\FreeCell\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Downloads\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Videos\Sample Videos\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification F:\$RECYCLE.BIN\S-1-5-21-2872745919-2748461613-2989606286-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Chess\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Solitaire\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Videos\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Mahjong\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\SendTo\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Favorites\Links for United States\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\$Recycle.Bin\S-1-5-21-2872745919-2748461613-2989606286-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Games\SpiderSolitaire\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Ringtones\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\History\History.IE5\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\System32\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Windows\System32\Info.hta C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-text_zh_CN.jar.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21314_.GIF C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImage.jpg C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00453_.WMF C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\Atlantic\Canary.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00157_.WMF C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\control\liboldrc_plugin.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\it-IT\css\RSSFeeds.css C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\CORPCHAR.TXT C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Lima C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\WZCNFLCT.CHM.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Windows Defender\de-DE\MpEvMsg.dll.mui C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15274_.GIF C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RMNSQUE\RMNSQUE.ELM.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART3.BDR C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_LOOP_BG.wmv C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\uninstall.log.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.RSA.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler.jar.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0299171.WMF.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME25.CSS.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\reveal_rest.png C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUEPRNT\BLUEPRNT.ELM.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\goopdateres_ta.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_Earthy.gif C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PULLQUOTEBB.POC.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\TOC98.POC C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\fr-FR\sbdrop.dll.mui C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\firefox.VisualElementsManifest.xml.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.net.nl_ja_4.4.0.v20140623020002.jar.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\REMOTE.CFG.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EXPEDITN\EXPEDITN.INF C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages_it.properties.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10253_.GIF.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\utilityfunctions.js C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORM.DLL.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL001.XML.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGPICCAP.DPV C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\JavaAccessBridge-64.dll.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\America\Asuncion.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\can03.ths.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\brt.fca C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\utilityfunctions.js.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\CAMERA.WAV.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\api-ms-win-core-file-l2-1-0.dll.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Verve.thmx C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0285750.WMF.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0315447.JPG C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectStatusIcons.jpg.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\WhiteboxMask.bmp.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Urumqi C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD01193_.WMF.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Solstice.xml.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-masterfs.jar.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_srt_plugin.dll.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Windows Defender\ja-JP\MpAsDesc.dll.mui C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files (x86)\Google\Update\1.3.36.151\goopdateres_bg.dll.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\bn.txt C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\7-Zip\Lang\it.txt.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\America\Argentina\Catamarca.id-8985B07A.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Interacts with shadow copies

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\system32\vssadmin.exe N/A
N/A N/A C:\Windows\system32\vssadmin.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\System32\mshta.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\System32\mshta.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeBackupPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\system32\vssvc.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2068 wrote to memory of 2552 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\system32\cmd.exe
PID 2068 wrote to memory of 2552 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\system32\cmd.exe
PID 2068 wrote to memory of 2552 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\system32\cmd.exe
PID 2068 wrote to memory of 2552 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\system32\cmd.exe
PID 2552 wrote to memory of 2860 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\mode.com
PID 2552 wrote to memory of 2860 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\mode.com
PID 2552 wrote to memory of 2860 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\mode.com
PID 2552 wrote to memory of 444 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 2552 wrote to memory of 444 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 2552 wrote to memory of 444 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 2068 wrote to memory of 3884 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\system32\cmd.exe
PID 2068 wrote to memory of 3884 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\system32\cmd.exe
PID 2068 wrote to memory of 3884 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\system32\cmd.exe
PID 2068 wrote to memory of 3884 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\system32\cmd.exe
PID 3884 wrote to memory of 3432 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\mode.com
PID 3884 wrote to memory of 3432 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\mode.com
PID 3884 wrote to memory of 3432 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\mode.com
PID 3884 wrote to memory of 208 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 3884 wrote to memory of 208 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 3884 wrote to memory of 208 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 2068 wrote to memory of 2808 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\System32\mshta.exe
PID 2068 wrote to memory of 2808 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\System32\mshta.exe
PID 2068 wrote to memory of 2808 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\System32\mshta.exe
PID 2068 wrote to memory of 2808 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\System32\mshta.exe
PID 2068 wrote to memory of 1764 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\System32\mshta.exe
PID 2068 wrote to memory of 1764 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\System32\mshta.exe
PID 2068 wrote to memory of 1764 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\System32\mshta.exe
PID 2068 wrote to memory of 1764 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\System32\mshta.exe

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe

C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe bcdedit /set shutdown /r /f /t 2

C:\Windows\system32\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\system32\mode.com

mode con cp select=1251

C:\Windows\system32\vssadmin.exe

vssadmin delete shadows /all /quiet

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\system32\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\system32\mode.com

mode con cp select=1251

C:\Windows\system32\vssadmin.exe

vssadmin delete shadows /all /quiet

C:\Windows\System32\mshta.exe

"C:\Windows\System32\mshta.exe" "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta"

C:\Windows\System32\mshta.exe

"C:\Windows\System32\mshta.exe" "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta"

Network

N/A

Files

C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\OWOW64WW.cab.id-8985B07A.[[email protected]].harma

MD5 90b0a7d9d5b7276ec320bec08609d2a3
SHA1 6fdfc71298b659f9bd46b620cba9ccb4d7b18b14
SHA256 8780b4b3279bcb46a8bcda1613be591487273c22389b9f100674c6854270d93e
SHA512 7b35533df265d87a91bbbff887c8dd7c8b1947573c28ebd205354bbcca661792d1753a31201ec90cc9ca062a8452c83590af8ea4c19b0273ad774f4b457eec50

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta

MD5 16d415d401c7388b22140890695c2bff
SHA1 8a5f4b9625e8fb7d80837fd0adb36059d8a6a1b9
SHA256 81b57f95919b43a74e0a73d621eba05e0976bc0be6b00ba3c1ebab9e69dc3b1f
SHA512 e4a8bccce9578a4ba358af59157d80ad8b89e998f9a7ba5f893656f3b550150f1e057d86b9313c5d187db70fb2c3aefc4fb0419ca28896bcebe1bbdf77679b2c

memory/1764-20357-0x000007FFFFF80000-0x000007FFFFF90000-memory.dmp

Analysis: behavioral5

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:58

Platform

win11-20250313-en

Max time kernel

120s

Max time network

104s

Command Line

C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe bcdedit /set shutdown /r /f /t 2

Signatures

Dharma

ransomware dharma

Dharma family

dharma

Deletes shadow copies

ransomware defense_evasion impact execution

Renames multiple (789) files with added filename extension

ransomware

Credentials from Password Stores: Windows Credential Manager

credential_access stealer

Drops startup file

Description Indicator Process Target
File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Reads user/profile data of web browsers

spyware stealer

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\C:\Users\Admin\AppData\Roaming\Info.hta = "mshta.exe \"C:\\Users\\Admin\\AppData\\Roaming\\Info.hta\"" C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe = "C:\\Windows\\System32\\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe" C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\C:\Windows\System32\Info.hta = "mshta.exe \"C:\\Windows\\System32\\Info.hta\"" C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Program Files (x86)\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Favorites\Links\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\OneDrive\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Videos\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Libraries\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Favorites\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Saved Games\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\AccountPictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Libraries\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Desktop\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Links\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Downloads\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn1\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Searches\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\$Recycle.Bin\S-1-5-21-976934595-4290022905-4081117292-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Application Shortcuts\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Music\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Pictures\Saved Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\History\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Documents\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Pictures\Camera Roll\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification F:\$RECYCLE.BIN\S-1-5-21-976934595-4290022905-4081117292-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group3\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\AccountPictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Music\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Videos\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Contacts\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Downloads\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Desktop\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\DESKTOP.INI C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\System32\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Windows\System32\Info.hta C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000018\cardview\lib\native-common\assets\[email protected].[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Threading.Thread.dll.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.Getstarted_10.2.41172.0_x64__8wekyb3d8bbwe\Assets\TipsAppList.targetsize-24_altform-lightunplated.png C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\cs\System.Windows.Input.Manipulations.resources.dll.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MSQRY32.EXE C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\EXPEDITN\THMBNAIL.PNG.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.ZuneMusic_10.21012.10511.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\contrast-white\StoreLogo.scale-125_contrast-white.png C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.Windows.Photos_21.21030.25003.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\PhotosMedTile.contrast-white_scale-100.png C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarAppList.scale-150.png C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Java\jdk-1.8\bin\api-ms-win-crt-multibyte-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000006\FA000000006 C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libavi_plugin.dll.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\delete.svg.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\pt-br\ui-strings.js.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Glow Edge.eftx C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\zh-cn\ui-strings.js.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\fr\UIAutomationTypes.resources.dll.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\LinkedInboxWideTile.scale-100.png C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\WebContent\node_modules\@fluentui\react\lib\Divider.js C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Trial2-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_10.2102.13.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\S-1-5-21-976934595-4290022905-4081117292-1000-MergedResources-0.pri C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\DataStreamerLibrary.dll.config C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Private.Uri.dll.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.scale-140.png.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.Windows.Photos_21.21030.25003.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\PhotosStoreLogo.contrast-black_scale-125.png C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\contrast-white\HxA-Generic-Light.scale-100.png C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OneNoteVL_MAK-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\vlc.exe C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\access\libvcd_plugin.dll.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\de\WindowsBase.resources.dll.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.ZuneMusic_10.21012.10511.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SmallLogo.scale-125.png C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\contrast-black\HxMailSmallTile.scale-125.png C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\sk-sk\ui-strings.js C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365EduCloudEDUR_Subscription-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusE5R_Subscription-ul-oob.xrm-ms.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\css\main.css.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.41182.0_x64__8wekyb3d8bbwe\Assets\SmallTile.scale-400.png C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_duplicate_18.svg.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\PROOF\MSWDS_ES.LEX.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\ACE.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Diagnostics.Tracing.dll.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ko\System.Windows.Forms.Design.resources.dll.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\tr\UIAutomationTypes.resources.dll.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\CANYON\CANYON.ELM.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.hi-in.dll.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Linq.Parallel.dll.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MEDIA\WIND.WAV.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\fr\UIAutomationProvider.resources.dll.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_2.2106.2807.0_x64__8wekyb3d8bbwe\Assets\Store\Square150x150Logo.scale-150.png C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\images\rhp_world_icon_hover_2x.png.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Century Gothic.xml.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MEDIA\VOLTAGE.WAV.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.6.3102.0_x64__8wekyb3d8bbwe\Win10\contrast-black\MicrosoftSolitaireAppList.targetsize-30_altform-unplated_contrast-black.png C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\HxMailAppList.targetsize-72_altform-lightunplated.png C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\WebContent\node_modules\@fluentui\react\lib-amd\components\GroupedList\GroupShowAll.js C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Java\jre-1.8\bin\management.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_20_666666_40x40.png.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\contrast-black\GenericMailBadge.scale-200.png C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\PresentationFramework.Royale.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\ur.pak.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\new_icons.png.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe.id-A6AF50CB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Interacts with shadow copies

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\system32\vssadmin.exe N/A
N/A N/A C:\Windows\system32\vssadmin.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeBackupPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\system32\vssvc.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2076 wrote to memory of 1808 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\system32\cmd.exe
PID 2076 wrote to memory of 1808 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\system32\cmd.exe
PID 1808 wrote to memory of 692 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\mode.com
PID 1808 wrote to memory of 692 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\mode.com
PID 1808 wrote to memory of 5088 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 1808 wrote to memory of 5088 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 2076 wrote to memory of 6888 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\system32\cmd.exe
PID 2076 wrote to memory of 6888 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\system32\cmd.exe
PID 6888 wrote to memory of 6592 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\mode.com
PID 6888 wrote to memory of 6592 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\mode.com
PID 6888 wrote to memory of 7916 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 6888 wrote to memory of 7916 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 2076 wrote to memory of 2436 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\System32\mshta.exe
PID 2076 wrote to memory of 2436 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\System32\mshta.exe
PID 2076 wrote to memory of 5796 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\System32\mshta.exe
PID 2076 wrote to memory of 5796 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\System32\mshta.exe

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe

C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe bcdedit /set shutdown /r /f /t 2

C:\Windows\system32\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\system32\mode.com

mode con cp select=1251

C:\Windows\system32\vssadmin.exe

vssadmin delete shadows /all /quiet

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\system32\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\system32\mode.com

mode con cp select=1251

C:\Windows\system32\vssadmin.exe

vssadmin delete shadows /all /quiet

C:\Windows\System32\mshta.exe

"C:\Windows\System32\mshta.exe" "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta"

C:\Windows\System32\mshta.exe

"C:\Windows\System32\mshta.exe" "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta"

Network

Files

C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvSubsystems32.dll.id-A6AF50CB.[[email protected]].harma

MD5 f376dc8492979392e8c19b38ff9ff195
SHA1 fe2b45d88a51871256c7b36e59c48be0d5b2eea1
SHA256 821e257f05ae449a4d38f37f5f45e944ac2aa8f39285d3de99bf332636f12c51
SHA512 2c78d845a5769516b380820ab47286f03bda835765eacd9749e76e49831ebf593a6796b5dbf188e5f839bcbd11babff319c4d2b3d51c45954ff961d754677aea

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta

MD5 e28160ca1c94ca007b680c0852091592
SHA1 8639cd64e1fdc3c90ce0104707ec3b06598e0f30
SHA256 2972646e3fd32b42438b8a042d9c7c3fc58502c8e8bf0ccecb88dddd2999199e
SHA512 792496c85ae625d83594e3b51d193760fb62c3a5d715ff3628eaa862c02a94de952fb6eb76152506680a7622f9fea798f8f5c678c17c3af9558f27d7df43ab5b

Analysis: behavioral23

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:58

Platform

win10v2004-20250314-en

Max time kernel

103s

Max time network

105s

Command Line

C:\Users\Admin\AppData\Local\Temp\4a2ad49c934f9ae6ca6b5d0c7cc34f5e12d349640012fa8cf8eb7e2d3acd6c9f.exe bcdedit /set shutdown /r /f /t 2

Signatures

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\4a2ad49c934f9ae6ca6b5d0c7cc34f5e12d349640012fa8cf8eb7e2d3acd6c9f.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\4a2ad49c934f9ae6ca6b5d0c7cc34f5e12d349640012fa8cf8eb7e2d3acd6c9f.exe

C:\Users\Admin\AppData\Local\Temp\4a2ad49c934f9ae6ca6b5d0c7cc34f5e12d349640012fa8cf8eb7e2d3acd6c9f.exe bcdedit /set shutdown /r /f /t 2

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2908 -ip 2908

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 2908 -s 524

Network

Country Destination Domain Proto
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 c.pki.goog udp
GB 142.250.179.227:80 c.pki.goog tcp

Files

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:58

Platform

win7-20241023-en

Max time kernel

120s

Max time network

119s

Command Line

C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe bcdedit /set shutdown /r /f /t 2

Signatures

Dharma

ransomware dharma

Dharma family

dharma

Deletes shadow copies

ransomware defense_evasion impact execution

Renames multiple (323) files with added filename extension

ransomware

Credentials from Password Stores: Windows Credential Manager

credential_access stealer

Drops startup file

Description Indicator Process Target
File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Reads user/profile data of web browsers

spyware stealer

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\C:\Windows\System32\Info.hta = "mshta.exe \"C:\\Windows\\System32\\Info.hta\"" C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\C:\Users\Admin\AppData\Roaming\Info.hta = "mshta.exe \"C:\\Users\\Admin\\AppData\\Roaming\\Info.hta\"" C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe = "C:\\Windows\\System32\\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe" C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Users\Public\Desktop\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Hearts\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Music\Sample Music\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Recorded TV\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Documents\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\$Recycle.Bin\S-1-5-21-1163522206-1469769407-485553996-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Contacts\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Games\FreeCell\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\SendTo\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Links\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Searches\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Pictures\Sample Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\DataServices\DESKTOP.INI C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification F:\$RECYCLE.BIN\S-1-5-21-1163522206-1469769407-485553996-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\SMFN3Z3Q\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\History\History.IE5\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Desktop\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\4FXYHFK9\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Favorites\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Downloads\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6SLTOM5C\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Documents\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IJMS2YBB\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3D87ST3G\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Favorites\Links\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Music\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Libraries\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Purble Place\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\JEDNWX6E\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Videos\Sample Videos\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Libraries\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Favorites\Links for United States\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Saved Games\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Ringtones\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Music\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Mahjong\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Recorded TV\Sample Media\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\R: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\S: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\V: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\J: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\K: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\P: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\B: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\G: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\I: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\M: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\N: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\O: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\T: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\E: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\L: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\U: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\W: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\X: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Z: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\A: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\H: C:\Windows\system32\msiexec.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\System32\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Windows\System32\Info.hta C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Windows Photo Viewer\PhotoAcq.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_hyperlink.gif C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libmad_plugin.dll.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_mixer\libinteger_mixer_plugin.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0195320.WMF.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\de-DE\cpu.html C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02054_.WMF.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_LOOP_BG.wmv C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\oc\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Windows Media Player\it-IT\wmpnssci.dll.mui C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\WPGIMP32.FLT C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BZCRD98.POC.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\wmprph.exe C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Barbados.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Resolute C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\crashreporter.exe C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\Shared16x16Images.jpg.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_underline.gif C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\SWBELL.NET.XML C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\1033\XLMACRO.CHM.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Windows Defender\en-US\MpEvMsg.dll.mui C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\buttonDown_On.png C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-first-quarter.png C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\Etc\GMT+1.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\es-ES\js\localizedStrings.js C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Biscay.css.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OMSMAIN.DLL.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlcecompact35.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_GreenTea.gif.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waxing-crescent.png C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0188669.WMF.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileHighMask.bmp.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\7-Zip\7zFM.exe C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Windows Media Player\es-ES\wmpnscfg.exe.mui C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages_ko.properties C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105336.WMF.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\mr\LC_MESSAGES\vlc.mo.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\MET C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-last-quarter.png C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libvobsub_plugin.dll.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\goopdateres_de.dll.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ONWordAddin.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\SOCIALPROVIDER.DLL.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Casual.gif.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Multiplayer\Backgammon\de-DE\bckgRes.dll.mui C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGAD.XML.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\WindowsAccessBridge-64.dll.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\es\System.Net.Resources.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.p2.ui.overridden_5.5.0.165303.jar.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.repository_2.3.0.v20131211-1531.jar.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.rcp_4.3.100.v20141007-2301.jar.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\LASER.WAV.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\fr-FR\clock.html C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101860.BMP.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\access\libsmb_plugin.dll.id-6B5962FB.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PARNT_06.MID C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\Installer\MSIC9DB.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\f76c4a6.mst C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\f76c4a6.mst C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIC4D5.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIC786.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIC7C6.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIC7D6.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIC7F7.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIC5A1.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIC5E0.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\f76c4a9.ipi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\ C:\Windows\system32\msiexec.exe N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\syswow64\MsiExec.exe N/A

Interacts with shadow copies

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\system32\vssadmin.exe N/A
N/A N/A C:\Windows\system32\vssadmin.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\System32\mshta.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\System32\mshta.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Windows\system32\msiexec.exe N/A
N/A N/A C:\Windows\system32\msiexec.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeBackupPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2312 wrote to memory of 920 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\system32\cmd.exe
PID 2312 wrote to memory of 920 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\system32\cmd.exe
PID 2312 wrote to memory of 920 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\system32\cmd.exe
PID 2312 wrote to memory of 920 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\system32\cmd.exe
PID 920 wrote to memory of 2828 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\mode.com
PID 920 wrote to memory of 2828 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\mode.com
PID 920 wrote to memory of 2828 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\mode.com
PID 920 wrote to memory of 2044 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 920 wrote to memory of 2044 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 920 wrote to memory of 2044 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 2312 wrote to memory of 3508 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\system32\cmd.exe
PID 2312 wrote to memory of 3508 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\system32\cmd.exe
PID 2312 wrote to memory of 3508 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\system32\cmd.exe
PID 2312 wrote to memory of 3508 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\system32\cmd.exe
PID 3508 wrote to memory of 1612 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\mode.com
PID 3508 wrote to memory of 1612 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\mode.com
PID 3508 wrote to memory of 1612 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\mode.com
PID 3624 wrote to memory of 2028 N/A C:\Windows\system32\msiexec.exe C:\Windows\syswow64\MsiExec.exe
PID 3624 wrote to memory of 2028 N/A C:\Windows\system32\msiexec.exe C:\Windows\syswow64\MsiExec.exe
PID 3624 wrote to memory of 2028 N/A C:\Windows\system32\msiexec.exe C:\Windows\syswow64\MsiExec.exe
PID 3624 wrote to memory of 2028 N/A C:\Windows\system32\msiexec.exe C:\Windows\syswow64\MsiExec.exe
PID 3624 wrote to memory of 2028 N/A C:\Windows\system32\msiexec.exe C:\Windows\syswow64\MsiExec.exe
PID 3624 wrote to memory of 2028 N/A C:\Windows\system32\msiexec.exe C:\Windows\syswow64\MsiExec.exe
PID 3624 wrote to memory of 2028 N/A C:\Windows\system32\msiexec.exe C:\Windows\syswow64\MsiExec.exe
PID 3508 wrote to memory of 2128 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 3508 wrote to memory of 2128 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 3508 wrote to memory of 2128 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 2312 wrote to memory of 3044 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\System32\mshta.exe
PID 2312 wrote to memory of 3044 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\System32\mshta.exe
PID 2312 wrote to memory of 3044 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\System32\mshta.exe
PID 2312 wrote to memory of 3044 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\System32\mshta.exe
PID 2312 wrote to memory of 540 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\System32\mshta.exe
PID 2312 wrote to memory of 540 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\System32\mshta.exe
PID 2312 wrote to memory of 540 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\System32\mshta.exe
PID 2312 wrote to memory of 540 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\System32\mshta.exe
PID 3624 wrote to memory of 2436 N/A C:\Windows\system32\msiexec.exe C:\Windows\system32\MsiExec.exe
PID 3624 wrote to memory of 2436 N/A C:\Windows\system32\msiexec.exe C:\Windows\system32\MsiExec.exe
PID 3624 wrote to memory of 2436 N/A C:\Windows\system32\msiexec.exe C:\Windows\system32\MsiExec.exe
PID 3624 wrote to memory of 2436 N/A C:\Windows\system32\msiexec.exe C:\Windows\system32\MsiExec.exe
PID 3624 wrote to memory of 2436 N/A C:\Windows\system32\msiexec.exe C:\Windows\system32\MsiExec.exe

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe

C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe bcdedit /set shutdown /r /f /t 2

C:\Windows\system32\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\system32\mode.com

mode con cp select=1251

C:\Windows\system32\vssadmin.exe

vssadmin delete shadows /all /quiet

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\system32\msiexec.exe

C:\Windows\system32\msiexec.exe /V

C:\Windows\system32\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\syswow64\MsiExec.exe

C:\Windows\syswow64\MsiExec.exe -Embedding D03CDBF3E118348E27ADA85F298905AB

C:\Windows\system32\mode.com

mode con cp select=1251

C:\Windows\system32\vssadmin.exe

vssadmin delete shadows /all /quiet

C:\Windows\System32\mshta.exe

"C:\Windows\System32\mshta.exe" "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta"

C:\Windows\System32\mshta.exe

"C:\Windows\System32\mshta.exe" "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta"

C:\Windows\system32\MsiExec.exe

C:\Windows\system32\MsiExec.exe -Embedding F8B21749C16A15CF54DD7DCE24471786

Network

N/A

Files

C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\osetup.dll.id-6B5962FB.[[email protected]].harma

MD5 8093ffb7ae20af6338ec4abc3abe2187
SHA1 059745f6e1e794bb35ffbcd9747a2f6cbf031e33
SHA256 6cea11a6a6bd5d2794203b44ec1ec458249e77dbc5d3ef44f0dd872c86a3df56
SHA512 b02ba473c06970dffe920599de7d4d2be3c794ea92ec4bde2456ebf5415c1014ce0fdcc0c7fcf6078cfb2d9498d3403208911bdb2b093671e0a4955424715b6a

C:\Windows\Installer\MSIC4D5.tmp

MD5 d1f5ce6b23351677e54a245f46a9f8d2
SHA1 0d5c6749401248284767f16df92b726e727718ca
SHA256 57cb8f01cf553c3886760180d1a74839f2f676640115504485aca9692f577acc
SHA512 960e90894e7bedcc89894e77e57e8ee0c99dd2c530d02665e8bbd3a1793eccc1e295c5923d1f37c757fa1158097fbaae70898c16052882d3d210c29ea801b3ba

\Windows\Installer\MSIC5A1.tmp

MD5 4a843a97ae51c310b573a02ffd2a0e8e
SHA1 063fa914ccb07249123c0d5f4595935487635b20
SHA256 727ecf287fb6f4953ee7748913dd559b4f8d3a022fa2ca55bc51cf5886c52086
SHA512 905c081552d95b523ecf1155b6c7e157652e5ff00cda30c1c21124d266eb7d305c3398d6832316f403dc45d1b639f1a5a67aea29922cd1a032f52e5247ec55d2

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta

MD5 8e92dcd6e86c05b8d13a17426172c103
SHA1 c6629aa3c4b084696841dfd01a87f2f5ef18a56b
SHA256 49a59047489cb2090a9594bc73f73ba4f6bb253fc5f28ecc84ee6cca10938545
SHA512 bd4e2a162a84224155e7aa644f8692f32889ebf52b2a1c5adfe4c0bb85883853ce399e4cd75fb59482202a568bb4af6b53924efbd6c10798188f1d8582486fa0

\Windows\Installer\MSIC786.tmp

MD5 85221b3bcba8dbe4b4a46581aa49f760
SHA1 746645c92594bfc739f77812d67cfd85f4b92474
SHA256 f6e34a4550e499346f5ab1d245508f16bf765ff24c4988984b89e049ca55737f
SHA512 060e35c4de14a03a2cda313f968e372291866cc4acd59977d7a48ac3745494abc54df83fff63cf30be4e10ff69a3b3c8b6c38f43ebd2a8d23d6c86fbee7ba87d

\Windows\Installer\MSIC7D6.tmp

MD5 33908aa43ac0aaabc06a58d51b1c2cca
SHA1 0a0d1ce3435abe2eed635481bac69e1999031291
SHA256 4447faacefaba8f040822101e2a4103031660de9139e70ecff9aa3a89455a783
SHA512 d5216a53df9cfbe1a78629c103286eb17042f639149c46b6a1cd76498531ae82afd265462fbe0ba9baaff275fc95c66504804f107c449f3fc5833b1ed9c3da46

\Windows\Installer\MSIC9DB.tmp

MD5 ff58cd07bf4913ef899efd2dfb112553
SHA1 f14c1681de808543071602f17a6299f8b4ba2ae8
SHA256 1afafe9157ff5670bbec8ce622f45d1ce51b3ee77b7348d3a237e232f06c5391
SHA512 23e27444b6cdc17fe56f3a80d6325c2be61ae84213bc7cdaad7bb96daa7e8d2d3defc1b96c3cee4a3f32dc464b0e05720bcf1c0e99626bf83de1b6d5aac000a3

memory/540-20351-0x000007FFFFF90000-0x000007FFFFFA0000-memory.dmp

Analysis: behavioral6

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:59

Platform

win10v2004-20250314-en

Max time kernel

118s

Max time network

121s

Command Line

C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe bcdedit /set shutdown /r /f /t 2

Signatures

Modifies Windows Firewall

defense_evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\netsh.exe N/A
N/A N/A C:\Windows\SysWOW64\netsh.exe N/A

Looks up external IP address via web service

Description Indicator Process Target
N/A api.my-ip.io N/A N/A
N/A api.my-ip.io N/A N/A

Event Triggered Execution: Netsh Helper DLL

persistence privilege_escalation
Description Indicator Process Target
Key queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A

Runs net.exe

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3948 wrote to memory of 1404 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3948 wrote to memory of 1404 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3948 wrote to memory of 1404 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 1404 wrote to memory of 2600 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 1404 wrote to memory of 2600 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 1404 wrote to memory of 2600 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 2600 wrote to memory of 4464 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2600 wrote to memory of 4464 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2600 wrote to memory of 4464 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 3948 wrote to memory of 3216 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3948 wrote to memory of 3216 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3948 wrote to memory of 3216 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3948 wrote to memory of 2696 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3948 wrote to memory of 2696 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3948 wrote to memory of 2696 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3948 wrote to memory of 1188 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3948 wrote to memory of 1188 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3948 wrote to memory of 1188 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3948 wrote to memory of 888 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3948 wrote to memory of 888 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3948 wrote to memory of 888 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 888 wrote to memory of 5728 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 888 wrote to memory of 5728 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 888 wrote to memory of 5728 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 5728 wrote to memory of 884 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 5728 wrote to memory of 884 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 5728 wrote to memory of 884 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 3948 wrote to memory of 3472 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3948 wrote to memory of 3472 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3948 wrote to memory of 3472 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3472 wrote to memory of 4500 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 3472 wrote to memory of 4500 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 3472 wrote to memory of 4500 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 4500 wrote to memory of 4560 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 4500 wrote to memory of 4560 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 4500 wrote to memory of 4560 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 3948 wrote to memory of 4588 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3948 wrote to memory of 4588 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3948 wrote to memory of 4588 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 4588 wrote to memory of 4880 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 4588 wrote to memory of 4880 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 4588 wrote to memory of 4880 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 4880 wrote to memory of 4892 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 4880 wrote to memory of 4892 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 4880 wrote to memory of 4892 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 3948 wrote to memory of 4888 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3948 wrote to memory of 4888 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3948 wrote to memory of 4888 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 4888 wrote to memory of 1276 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 4888 wrote to memory of 1276 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 4888 wrote to memory of 1276 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 3948 wrote to memory of 4768 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3948 wrote to memory of 4768 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3948 wrote to memory of 4768 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 4768 wrote to memory of 4804 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 4768 wrote to memory of 4804 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 4768 wrote to memory of 4804 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 3948 wrote to memory of 4128 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3948 wrote to memory of 4128 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3948 wrote to memory of 4128 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 4128 wrote to memory of 5948 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 4128 wrote to memory of 5948 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 4128 wrote to memory of 5948 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 5948 wrote to memory of 5688 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe

Processes

C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe

C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe bcdedit /set shutdown /r /f /t 2

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop MSDTC

C:\Windows\SysWOW64\net.exe

net stop MSDTC

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop MSDTC

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c bcdedit /set {default} bootstatuspolicy ignoreallfailures

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c bcdedit /set {default} recoveryenabled no

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c wbadmin delete catalog -quiet

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop SQLSERVERAGENT

C:\Windows\SysWOW64\net.exe

net stop SQLSERVERAGENT

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop SQLSERVERAGENT

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop MSSQLSERVER

C:\Windows\SysWOW64\net.exe

net stop MSSQLSERVER

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop MSSQLSERVER

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop vds

C:\Windows\SysWOW64\net.exe

net stop vds

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop vds

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c netsh advfirewall set currentprofile state off

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall set currentprofile state off

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c netsh firewall set opmode mode=disable

C:\Windows\SysWOW64\netsh.exe

netsh firewall set opmode mode=disable

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop SQLWriter

C:\Windows\SysWOW64\net.exe

net stop SQLWriter

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop SQLWriter

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop SQLBrowser

C:\Windows\SysWOW64\net.exe

net stop SQLBrowser

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop SQLBrowser

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop MSSQLSERVER

C:\Windows\SysWOW64\net.exe

net stop MSSQLSERVER

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop MSSQLSERVER

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop MSSQL$CONTOSO1

C:\Windows\SysWOW64\net.exe

net stop MSSQL$CONTOSO1

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop MSSQL$CONTOSO1

Network

Country Destination Domain Proto
US 8.8.8.8:53 api.my-ip.io udp
N/A 127.0.0.1:49865 tcp
N/A 127.0.0.1:49867 tcp
DE 23.88.33.229:443 api.my-ip.io tcp
US 8.8.8.8:53 e5.o.lencr.org udp
GB 2.18.190.206:80 e5.o.lencr.org tcp
US 8.8.8.8:53 c.pki.goog udp
GB 142.250.179.227:80 c.pki.goog tcp

Files

C:\ProgramData\RSAKEY.key

MD5 476fd74ed62e097e2dd803ac2bb2ec13
SHA1 4d4c003d59f703d7baa3cc497e5c3306ce928980
SHA256 ef884e704ae93dd2e76ea006eb593666afb1e0623b851dda3b876e3dc8f03140
SHA512 d142e95812f12f5760a5214e05b527213b1d0432297834b2cc43df4c52f4f18d3dd6f74435b872a8098ff9a872499a62d7bbfec510608784d53d4d5ad796006b

C:\$Recycle.Bin\S-1-5-21-814918696-1585701690-3140955116-1000\desktop.ini.(MJ-HU6315094287)([email protected]).zxc

MD5 196c1189263fc57c99815adf8035c243
SHA1 45e1a6b5d93b78001c3af5ed2fefa41ed297cfcc
SHA256 1141a11b1915b9144f49998fff8479156a56ff202867f272d29743ae65ec767b
SHA512 5f4e2f735da61910c3bc9e624534234dedb96bdc804936a6fc94108b5b56cc73e84c952878a4147cec7363a32761ff5e1247f97a9f682ae50768128431ff313b

C:\aff403968f1bfcc42131676322798b50\2010_x64.log.html.(MJ-HU6315094287)([email protected]).zxc

MD5 d42fdd96e3157587251343a397fe9e13
SHA1 d1668c6323ee7c7ef2626e3a6e9f468c9b7357c3
SHA256 d3e281f70496a6479b55633fb2b4b99bbc6f456314524ce2b63d3340cf1183f8
SHA512 cd31411c74b26a692c87ea5f045b8583a75612bcc69391e18e08547ca5c0d95cd88321945c9dcd34e6213dc4e291ae004869947b44a6d34b5712b5f954b9f28b

C:\Program Files\7-Zip\7zCon.sfx.(MJ-HU6315094287)([email protected]).zxc

MD5 e697c41de8a59ee13fd4681ff9709258
SHA1 a7493fe91171ce0a40e6917de748685cffca97c7
SHA256 646a7bd4daecceb8b1a83ae0afa09f0b5fb3c3ef7e6c6bf77f99587d037121ca
SHA512 c49e335c5480e4b6c6d8ff5382148097b823d929ee098c2d8f0891ee7184b6bd629d94766a8b9eaaba8b8a525a33ee2d8a49cfb90e6c8d9f42b956b47f837e8a

C:\f9532e701a889cdd91b8\2010_x86.log.html.(MJ-HU6315094287)([email protected]).zxc

MD5 44627b788b5762e79c6145669f5fa73b
SHA1 c3dadde8fc89e348c30481d81fc67d7df23eebf4
SHA256 f6a7a2f348f1d1aead16ebc6e4b4e439ba4d4e32fe05f9a4e970dd8aff5bd0e6
SHA512 6297784ee7fc55d835f4303f85145aab5bb6d503f209983f17d52c461ff224c56c6c2005c864c39622c3b9e55ced183ce83904ed1a9e7e111663f3a3250c9be6

C:\Program Files\Common Files\microsoft shared\ClickToRun\vccorlib140.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 040b4262a0a3947260e9b1ea386e6278
SHA1 dff9bc7bd82af58a4b83aeb7a722f67fff7f488c
SHA256 efb6056b92536bc72c15a5def91ea79cd177cb3349fcc13aabcc05995144233e
SHA512 38aeb543537f9237a88c7add6caaf6dd2b69f4e07e941e72e8ab2d94420447f51dd96ac50b377933c741e1d160f7e345beb6b9d99f02d271dc681e0fda75b707

C:\Program Files\RepairRegister.docx.(MJ-HU6315094287)([email protected]).zxc

MD5 7743fef21b32af989f469340f0628066
SHA1 3ad38561e470e6450ffca9347e5835a1f9a9a404
SHA256 38883b66992299ed8e98afee893af6f319b309a9ceeb8c0c9a74cc5ba8a52ad0
SHA512 30d148ae1901cce7fc38a026c496b443b9572ab79161aa2f19e8486c753774e894c4652d6bac37193da4dbd60197fc21d0ef451410d8b1cd6dca5c6fd0f4ea10

C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe.(MJ-HU6315094287)([email protected]).zxc

MD5 a78ab150c77405053350e8dbd9c3a122
SHA1 d2690785b9466a3f7c2f13dbc7b195e637a87162
SHA256 210aa1638f487ea22450c82eec0b73b4c5181fbfba4c17695bd33cf26d20a608
SHA512 4b53c323c1ca258a554d3a0f81aa5c88979d8a7ac8b507121e204c41775936e5ba9e86b0cc9039cf4e94309c1df58dba9a2ecf5c4bfd5234badddcee2ed9e7a5

C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVClientIsv.man.(MJ-HU6315094287)([email protected]).zxc

MD5 f1a0b1e69b61e57db4182a1e5c3de790
SHA1 95f2cd7883cf566905d255bada093818e7065ec0
SHA256 77bf3ee34865e72f5db05bb8cfe1affe00feeedee28a98f00413010738f418e8
SHA512 55966ffd2f257196d314a1e39a7c914ab68983f3a7c7522c06e311aa3017add7b637c70d8034a6443094ee6e71c1a6468970f743e709aa8bed797f25641c7aa1

C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe.(MJ-HU6315094287)([email protected]).zxc

MD5 b068dcf1fd121c032d6f9670ee8d33ec
SHA1 5ad0c2aad636c953d51045e881b671e28b1cdcf3
SHA256 28cd2dc3467b258bcdf7872619f8a690d0b2105e67b795e56a514f0a5835790e
SHA512 a9ee07eacaeed8c5fc81a8ed84830f7a056a3e1c01ae170e5087efb481f25a3d28176e072aef2a1c367be33fb1a7d9c91ff9df3320f4f90dd15a788339d43d1e

C:\Program Files\7-Zip\Lang\br.txt.(MJ-HU6315094287)([email protected]).zxc

MD5 f8f084d124194d441ee0e387168809ac
SHA1 70285f66384a0e27be979d18ba6efd7a4246dfe7
SHA256 661e8b90c45ed2646fd04030ea897f277e9bc3a258ac5789d0d7f6c735ee6f95
SHA512 76683a04c9d861812f7ce1fad56898304141002a9cedb6a9687584cf80b0f3cb39334def5deabb4c1374613fe34f3f1c75a17495a373a3c16615cddf16975066

C:\Program Files\7-Zip\Lang\bn.txt.(MJ-HU6315094287)([email protected]).zxc

MD5 47c35ed85427202016ba7bbe93bbad36
SHA1 aa12673abd6b8c75e22ed65e96187b999d1ed407
SHA256 856c3e5292e89c2388e9b3f0703357e70569b0114a0edb7237c92345338fe825
SHA512 9f67b7a73a74041d22e8f5e3e75bf94f3649574399ab926995a4106abe746f95984b5efbfd580c8cb6425530b5c8d4d5282e09e33a5366557c8979b119afd8fb

C:\Program Files\7-Zip\Lang\bg.txt.(MJ-HU6315094287)([email protected]).zxc

MD5 e61cc4b4d10df0b2d8fcfe9a9f4857ba
SHA1 eeca79731dbe478fa7099685de6e08f89f0d8f60
SHA256 95b801238929b9f4804ad0d6203bd6c6c847872a722c405a92e5ed607744ca82
SHA512 ab17121e05fb7a47a86b5a604767ea80b04d3939991617e4655b9f2001d5f37fc6d9200bf44857b4ed994654ca96897669a8716fba7441cff3f08c11ad3ace28

C:\Program Files\7-Zip\Lang\be.txt.(MJ-HU6315094287)([email protected]).zxc

MD5 3530669c4b3882a98e6842986e5c4fe0
SHA1 c0193850864b8d0273b77f9799e4e8427c329c55
SHA256 7fdce15e1de085cfdb3c263ce86a8b2cb002a223f56f7f7962a21516b371123a
SHA512 198d4d199f1781d64908a2585fb055b6977b18ab836bdb69999d3cc86d8bfa22ad694bb2727ff4641b57cf37650e3b685e68aa5b9b6459e68c9001bc2d8516d9

C:\Program Files\7-Zip\Lang\ba.txt.(MJ-HU6315094287)([email protected]).zxc

MD5 e8f47570c9047bedf08df1bb604b6973
SHA1 278297668b95e1d32cd326a661aa82250ebca2d3
SHA256 f62b20e17c454f8e43822941b07f51f30523c333fb9ab9bca61acc0b61cccf77
SHA512 e5e9a5538c62b42fa01cdffef9ecdfd3a9fe4085df9d39064e4cc62345a78302e55634874176de427a956be03aca60d9463aed27787b846857701b939cad502a

C:\Program Files\7-Zip\Lang\az.txt.(MJ-HU6315094287)([email protected]).zxc

MD5 dd7e40b42677d927fd882853233d6411
SHA1 ba371b94967939c1e22f6b9d25b5e954659bd355
SHA256 ba90991afaa7d33bd95cfc3a8e3a9c3cca8f0aac4b071fb50de37606c4f44fdf
SHA512 1414cf635e0582b0fdb39672ec5514b5a7b26a5f4b6482adc10c8dd1fc204fb37ac67f7651d6d368548cff867f7d09ecb42381bfd353f6af47c0ee9013d24421

C:\Program Files\7-Zip\Lang\ast.txt.(MJ-HU6315094287)([email protected]).zxc

MD5 8efdb5fe8dc9b8cdad76c97cd5bff9d1
SHA1 95de2af5bda5925551c785d43ce61d4c5848dc43
SHA256 ddabcd3e1ce7cff12c98a8da6c8c7a9e2904c3bfa6721c17be82ff2e4cb8bbfe
SHA512 516e604e5ad8e82de6231f428c9f705feec5a15809312fe4aab89c43df98298ed40b4cdcb3467483538ea96620f3e5d650c76b40cbd6f16fd81f08f4324bf2b9

F:\$RECYCLE.BIN\S-1-5-21-814918696-1585701690-3140955116-1000\desktop.ini.(MJ-HU6315094287)([email protected]).zxc

MD5 a86ea974407869df262ead9cb2ae58cf
SHA1 3a8a0b29fefac6ea62b8adc9befd746596916b08
SHA256 6eda1a1dc46593acd676f9b0d7c19270400cbacaf04e999c9df74d1e14f251c2
SHA512 c82bcc5d3ef1ddd0f2afa47845b82fc8117f91318f283e0e333cd9b6594450b72320b6a78591c0376a8ab3f38ea5e1e85313df032cf1f23f1f2c1a9a5d55eae5

C:\Program Files\7-Zip\7z.sfx.(MJ-HU6315094287)([email protected]).zxc

MD5 ebe72ebcffd853c9707d403433adf796
SHA1 61a2a07ac55b8922fa8d1f5ffa0215b23e7c964b
SHA256 b6e689a4b0bf39146aa10d918cfaf3991d438c0b16bed5ef222ebf3067201781
SHA512 283f9793aeaa027b3e5bf2853781d8533f23ec30d56932cf98dc399fd08cf9888eeb739e302b5739633018f1f2199e5515386fa6cf777f278ea374045aa4eb45

C:\Program Files\7-Zip\7z.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 57ad37cc6025b296cb04b42117fb7ff7
SHA1 cba91dd8e497509d6f6beae1a6fb001534048dbb
SHA256 293ecd584a3bd6d389349a5851bd36d8df6b966722eaf9c2e414775f4c581bf2
SHA512 598bb0170e24a1fb8d255bfe3b63a4e0bcf738dd04086c08f7d38bdc633eb5f0f183d110d7a338d9cafefcc960e953c89ff15eb5a5e2434f0895e677f455e598

C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOLoader.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 040f7484cb345820caf1083d915396d5
SHA1 41270a9bdd291bb3abb803e7a9bf73f21bf093f9
SHA256 e2f3eff38c911e2c6951b0dce60bcb116ab9dfa090d1221693d66f59747976a9
SHA512 da85e661c46229e132c45d04494f76fad4e76797fc32c23ada72d94343288d108ab848a0e05fac6c2e884c7d04b99870baee9d57c54031b52b634524b9b2b126

C:\Program Files\7-Zip\Lang\cy.txt.(MJ-HU6315094287)([email protected]).zxc

MD5 2e80206f481957aebcdcbde16b0d4dc4
SHA1 f5e48e7db41c03bc0d2647a94c8add53337ce002
SHA256 7ef487f46dc59776eb5ff0c6d28376c39d261814d0709afb13759a98cf74062d
SHA512 f7ef738d8af9241aec89086da7d0a279fc9b8a9fc347fad109b58798a84b60dc58681c3b9621c3036be022112dc82e7673085f6d75e7e2b5ac48bc4551275ae7

C:\Program Files\Common Files\microsoft shared\ClickToRun\SharedPerformance.man.(MJ-HU6315094287)([email protected]).zxc

MD5 19f9d3e6f34244e50035d7de93214d19
SHA1 ba66367ea8677fb4a694ca57249d0053ffff3eac
SHA256 7b82306a5b9ecdc52afd5156ed338481605635157a28b8aa73a9d63397db3f8a
SHA512 e08a32f848aee987e6ada565946ffaad9774bc91c53f62fbd4610fa6c1fe52c365828ededd5c51c81983ef103bc999515ad0cf0dbbe515b8310817de5523f488

C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pidgenx.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 5b72cabeea2ad68cd7cbeaf18c12c7b6
SHA1 720fb0a1c612e539a3bb4e8cbb13bbeeecc927d4
SHA256 bf655220889630155903399ffbebd43d40b2c6373d34efeebdef80c5efb99b4d
SHA512 d426ec8b7400fee9a0ef164cad4c564811d27669e8c723c42d36c7b695d927abcba1ae7ced6176b549eab9b326b3161c1ac8d38204c254ec13c8b4fe9a1df1ea

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Transactions.Local.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 c30b96537c6d9675976bdc0fdb82bae0
SHA1 30c1794c69ed747c493f8ab58903831ca881b424
SHA256 8e198e3d81923aa59f37ac168563296edb888829ae8657e5e71bcb3d60622e57
SHA512 739ac47d6027a333959319f6a7dca1f78e6b3bc08035df99b210bb4d9ade03afc0ed4c1c94563c0b05f4d434dd316326af88249fd49329ad3175e2e44abac8e6

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\clretwrc.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 b554b6421f6a744500f27cbc0387db7a
SHA1 46a5e14c0dc85d6e4b93690aede0ad5708e64e10
SHA256 4f380b9ed5c61abb83e82003f88543eedeea3305742634d33128e005d8ba3454
SHA512 b14f67cc0e1a13878744dfebc31a4fb508e7f7baf46ead81c4e3432d956d4de06e3159bc23d550f56fae5f6259f09307b16817604e22383e5f066281625c9240

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Net.WebSockets.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 a08dbea58abc3034b67d672bd0d9f2d4
SHA1 647f900f3ebc544fd0b491d71fb48001273711ed
SHA256 6276721644041c47dcdad8e8472e46c39a4111de7f0059582d75f8f2b8414f46
SHA512 50a8e6c28043ea9bdc7eb08b780ecd8a85f9f8ce831a807f1f27fcd3d49579e8936d220bb6a572f9460821e904a7cbb3db627e8947d2bb8f0d02488cfdb6d19a

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Collections.Immutable.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 0c4e71b8a14fdaf1505dd24055cd92fb
SHA1 d0cacacff8eb618eb71b90fd367d61964f3000a6
SHA256 4feb3896042d4ffa8b1a3ba70e0eef16800f29848220d6c310ba81527b720327
SHA512 11053df819247f0b3976dfb2599e9126a0f39a19324c47e9f15f6dc2f089fb060483169b9bc22a751f944e29b89ee149f16bab5b75f87a331bb00a3f8e68addf

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\msquic.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 f78fbd8f74d247801873cfe6df04793b
SHA1 1c15c6c22c46861cf233028d73b9cfa0ab2a58d8
SHA256 e8320afe613f46d93fa5bd9bbc6433e112a9d087541d4496cb2e13a61214c73f
SHA512 b7d315621f77217a3ba89bfc8e462d1901f16a22f6bdb3b535e4e058d2e3ec42a309ec0a4add518fbb0fce82973bbd5a74b34ff255856db827c6e1450faf994e

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\mscordbi.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 4233dbd2fdd8d96a0890ec3fc0b1ecbf
SHA1 d41552d3012594d5e5b2e3249bd1fcfa99aab88a
SHA256 830ea881ba7ded1fc2f1e53e4e8a53117ca8a631cf78a7f7bad3a3a23cf003b1
SHA512 83f08689efcf9ae13bc573e41a5cc91b0afcfbb1dff26e1a608a2c569364c375170546bb8133fc52b99ed74d5b062fb9e90610ea77be6b3fb16801c166b3298b

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\mscordaccore_amd64_amd64_7.0.1624.6629.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 19d0938c17346642d605236bc55b0290
SHA1 e6dfde1bf6bf18ddf30f25834de3d022ceb796ab
SHA256 45730893be85a22241ed1324d346f1e4dbddf1772ff299b7d15b42e79f8f31ba
SHA512 2b12376376816177a0883f382249b95324e0562c3c60261ea157d3ff1f4f935e1d56d4129396b3a87ca63c6841ff6d55f1b1d6b1c3aa77c30bc26db1db40f27e

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\mscordaccore.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 8395f4c8e593d7da9ef3baf3005c1a02
SHA1 05163d1489221c22d49a093748364624dabf9379
SHA256 14c0ae808f665977ba596cc3af6ce838438e26536c4d21aeaffa02e244d8bd4e
SHA512 8dca79838e7cb34ea676a3f729f65c27566057fc54b8a3706bf7ff05f17897b82c8e35335d4e8318daeac7c3a1265db76f91a48bbd633e5d08b97305acd4af87

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\Microsoft.VisualBasic.Core.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 7f7b7522da33a4246b5a5540a1ba120d
SHA1 08cd32bc32d4c2915c5b11b79fc8f36a3ed45a70
SHA256 30a720e382ef0efc9e945de83c9e1682485019e2cbc0309561559d5c5c8f2185
SHA512 479a135abebb1b20cf5324c820617bebb1b79417986153db10c70ab0fcff11251b6fdf7399380ce9952f3e3ca9d147f5aabcf205952e7349f1b9deaaed56c247

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\Microsoft.DiaSymReader.Native.amd64.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 1e196cb278493b2e93630f5b5f2f7f64
SHA1 bf1c8fe3d10416ed96a0175ebb25151acd6c4001
SHA256 26974b444d7ac71f6936b29cf058b5fe3232c09f8a8e1789d47575ac419a54b1
SHA512 d6a10bde87bde39d3ab2218cd88a5124ed380fa0d326bde94f7b9371114c2b6e45c67a37607bdf23ed22cffbb9626c6d6a4b049efc607d4843eec45baf51af4e

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\Microsoft.CSharp.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 c003e105990e574f87ea146afdd7cfea
SHA1 904601d850c310a34fb52137c7b7a141f55de518
SHA256 64f7a85ac4865eccfca94679f52198b71d3c4bcbaf50a8356e613956791af8b9
SHA512 4384b1fb4d5a8d6149723d74318ec276dcb27bd052e58a82133b3e80986cb6cd5254db5bbb1079cb2d1c7c86bc515dab963c808009cbce3e285b49b640c86bab

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\clrgc.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 3140b894fd474815d9e9537db789b86a
SHA1 c9a0dee386e2cb4a713dfd42a0782637426353d1
SHA256 9026a4b1f8dedfab410ffac460e44214213c04e113583b01d025284fc7b90e8d
SHA512 2fcc6b905a419f0875cb436048ba91fa9d0243172aa081d21224d41c65da772ea8d480ce1630fa7c4f7df44a7efc6306dd3520247b10fbed6f4993d081880c51

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Threading.Tasks.Dataflow.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 e1cbf34870ab7be7fad1eb5726f19750
SHA1 44bee78c1ca23dceab3548977cb1016e52bc3f37
SHA256 b050f0c40d39803aa9285c1d525b0296a2679f690fe6da47e77fa7e5d77ec2e1
SHA512 92931fdb9770445df85ef81d6c63184dd1f7e8286ec15e4b2a6eeb1ee909fdd104018aa6a63475b4d70831ae6df28210331e3fa423db86d62bed464374de9eea

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Text.Json.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 793607ae49b989567a40a7eef8810a7a
SHA1 23f356c2226fcf794e689ff17d41debda0da9bb6
SHA256 53944d521ef7d32952fe1123f98ab1a5bc0f849531e707a173afa1809594f856
SHA512 ec022fd772c1c00aa360758a414f80139689d33c6d40e11903fe6ec62b9535460e5c6aa9948994033056935c09bafa0c7b73764a97bcab29b5484b3b22036996

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Security.Cryptography.Csp.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 a276fe771aebb490e25fd146ac6b84b3
SHA1 a8e7e712981c434bf638137332bb2bfafd72732d
SHA256 58db20dcc6833c53bb73b12c461dead37d150f1737e15533e3f9605b5dc57cb5
SHA512 7535cb3f595675d92e6d9b26de291c1f0f0c6cc6b7a0359a19bd9414bcd7fd8e671f29d56a0b9398656c512ad265b57c925817469e219fe17cce24cd2a167385

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Net.Security.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 f6192f303367fa6a167c8059cc05b3d0
SHA1 b8f1b54de572e27f4b0016880bc00a5a21995797
SHA256 d7e0ce00342ae1044bbf32eaee54ec095806ea67345704d1d95faa5e9e191fed
SHA512 e223cebfe3ee6b23fcf80f8a50c6d1c819310f16b84730c7d9451e80f3d84721461c3978dfdbbe93edd3a3486bed5502abe3c5ede737fc3160c317caf0eac69f

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Net.HttpListener.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 1e0bd71f4ce41870764c53adcc1ac735
SHA1 b5dab0855fd37227a9b54a7ba21f02423b0d0962
SHA256 af671f4d9eb3a3f6990ff61a1451d476f75ddf044b4b83f3dd24209bc13f74c6
SHA512 5cbf9b7005862a2f84a0900facdfa7dad4d8beadbd84b7f13fa445cdae46c694ba934d40c642fa14b169d9b8b9741bce7f609cf3ade1e57302cc3502e87098a8

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Text.Encoding.CodePages.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 41e2c04abcc2db90cfeb543fa79671ff
SHA1 d0348cc11f98d79c93853746557b1e97d38fde46
SHA256 f5d4c483805e94453dc9c30a12801dc73057c7bac06b58d1c15b3a456e9660d8
SHA512 5080e8ecf97966e97c783c984b14d61c7f50e60d0c5622a6c38c590f6571809fab37443afbec5f3fc484fb9bb670990268d215933fec4f1378021cac6a9a4bc4

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Net.Security.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 3c1214c1d96707517ea99210ede6866f
SHA1 82663f2bb1949d0e4b8a7334c38aebad1f58f899
SHA256 915a144751b4fe217ca09e6dcf86d2a10666d1f56b4f69af6f6a8488a3752197
SHA512 bf707cda668c7bef4521c8b656eac2518bd964ef266c1e50f39838766fdcbf20b118d8e382f9221c9b160c32413100594c8935ea83b06d46c53f0a57901a9d66

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Net.Requests.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 0a33fcd1545d0a6819c885b86efe2d2a
SHA1 61bdf63a05dc0a93bb054d235c72440bd54c8429
SHA256 0760b352cd4890a5b282b8b8e13f51eb38dc06c110e616fd7b19f62fd520a8d0
SHA512 94f7b0d64db8b32ff7463ec8605e3b59560730a9cec92299164a9b45d8c17de7a7f00d1a3c83bddd562d577ecdf5a2173a0b2d76bd8c5d5695199aa504f90940

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Net.Mail.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 9da9fb6dded3542a58c051349b0fc6fc
SHA1 02a69a68ed88d5547294263ad51562d9f5809b12
SHA256 38571a74f87620a0a61eba1d80375dab3b4435d5f4128e6fd091e617791d9252
SHA512 8ada2a553eb7a84dca2b9030c9e5b24944d37e1f87f5f9e2a71868d4d46411fd3a0a47c18bfa80543a9e1a67fdf892623061b583870fb6ecf47004a117073f63

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Linq.Parallel.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 e6a8ea4a6a159ec9c19dcddaaccf9f17
SHA1 e06fde1271d50e120c2d7abcf0f4d59afc1f6c58
SHA256 d2925d5db9cdba3a17b34cfc79c526bc997b3895c781def96cc2f9d80d257b9a
SHA512 92a9d3a35ff128d7482fe779ffd0d17dd5e594264d4c5b4a4b8a2193c2db7002822bab69ee23a0b6dbd0631efdfee279cf707d80397db885411accb533399572

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.IO.Compression.Native.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 bb917c5ac7c020b28be6bed3738f0472
SHA1 73889bee63c547264a194f68f8656f3e930efc26
SHA256 acd6f3f29a645ac2b5afbc4d78a460d50beb7d6182b5e0f23c33f66007a655ed
SHA512 20fd9d67ccee6d786f80b37224b0cd9e500cca1d3bd6fc12bc65741176d443e5beeba120a12c655740e6912f734bb0baea81122448085ba2cee233125c141419

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Diagnostics.Process.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 98b61b45c55b81b51ac81fbaf7c8bbd7
SHA1 8a8886fcd2a4aba7e40285cfa33103f986939333
SHA256 53d0c82032c59433c9059becf03c6d774f365fba4845d6802a26a804be3b6059
SHA512 1904fd99c1bee3fa50395934ec2da6f6e882297d8936d44807226d80ea73a0c75df3e5f2f3518fd15ac3dd04f8b9d04cf391a2c382b2c55c62a5f152dcdc7e76

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Diagnostics.DiagnosticSource.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 cb504d2d380a73af284dca320f39c379
SHA1 1dd2072ccadef4024c1898d9e1999b0d01b33f4d
SHA256 9941e42bb284dbd42eca5e89307fccccb6cd390eb00184c994e7477b9a940c32
SHA512 b79fa81c1f0305fb706f94506ed87e38cb9af362a1bcc86d77f603a0b367bdbcb1345057e6decc36f32a5800ec1beef969aee0c7aa4cc8222c1d0162ff0259ec

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.ComponentModel.TypeConverter.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 eee74cade6262f7814e7f1cc9f81bc80
SHA1 f44c517a9463fd705b9f0ecdc2b30560c2c0b093
SHA256 da514c8363557d6db6c50f124323679c24de3c3ed655c729b95e46e2370bbe59
SHA512 70ec8189a819b4724bb3148e18427cf8fb74d43f60d299c4d9805f9ab548f4422171e9da3417510e04a8f619ad92d29232957801231ef08e15fb05c2a772da7c

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Private.Xml.Linq.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 0feed9ffc3352930209f672ec66c33a6
SHA1 82580396d9e93532e967c788e2908aba089bb12c
SHA256 ab5f2388f9cdc6fe184c50df421dd89940dbaadb8b90ede2a9064e6444df5f37
SHA512 cd6b2b8265f708536ced2b5970e55d3958257ddb14291cfac5fddbe44b4173d41eef9e2710ecbb6b54ce0a41de440e3404ad2693b337abdc1deb39628f58a71b

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Linq.Expressions.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 6674d23c62a4da565388210cdf95cb20
SHA1 0bbf33f08f239a4c14a6d201576f420cd56b2801
SHA256 5470f5c4c44bff0dd6e92f0a9dc98b961dc82550eaba36c9da4a4c713ae6dc8c
SHA512 c8df5935d113f0f3a56a53110b2a64fa2e620a260da8310dba9ef3b1cd33495c08cde588af436ec0c134ff590816520e018b160ae2e8bb5853afdcb13580d337

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\PresentationFramework.Luna.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 0be09eaac4d819566d4ad594d1b95dec
SHA1 172823bc16c046883fc71915efc3cbc8605d3f81
SHA256 23bb4161c5d8be3cb175abef47346c212ded62762d2c6fe12f8533fcac3496fe
SHA512 2ddd0da3c60137bfb6c9c8e7b7bf40d0d1696f56e4af1c8c1303307d8227758835ed34db02e72f6f845611ad3f008b8509c28efd88c274e5ca40749270201638

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\PresentationFramework.Classic.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 17b5b67bac0713488c449b67a0c3e7d8
SHA1 35be63469ccf6f06c9643396ea8012bc13d4dd4b
SHA256 e978fa8dec144a6421ba98ef9e7e610aa9891c0cc9387bd4118bc88427855483
SHA512 a7dd12a9cef689275ce9966de2c31763e0ac194e563f64ec51d6479b498e792a8971526e3202510e40eb162066349d295d58838f6983872a79da04a140e0cb51

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Security.Cryptography.Pkcs.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 85b6a18ce2ccc0bd44d136ff077c5e3d
SHA1 43aaaf09909b9957c14daa8aa202af5b6430b6b1
SHA256 a9c551fbc1ae8247fd8313122dd7773d2782e8be271c47741d6d7ee9f17e50bc
SHA512 cae281c2b24c7de704cf0abf166f8e85de6e0f59e2454f23e799d66f0f7afd3731e64153acf2303ddbcf53b441f0e1ce7f2d485b41f8aa7a03f456917969585b

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Installer\setup.exe.(MJ-HU6315094287)([email protected]).zxc

MD5 dcea1e5c61abcb59de59a4cbfca8bc7a
SHA1 2c5c2153041ac3d9891f9c501f694899cb37d60a
SHA256 321045fdb96b517f227bff14af24ec3546346137ec0f8716a99260338f88440c
SHA512 47f083fe3e74e711fad4ca2b9c1a6a3119df7a67d0a5eee4d94ca221c1548b7704fb78bd6b7682a5533d79cbc2041216a50169cf638cdde7f84eac1003c477d0

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Installer\chrmstp.exe.(MJ-HU6315094287)([email protected]).zxc

MD5 38053979b032fe141a3479ce1b536d38
SHA1 d9069671149ed019dcaad3edacefa4922e925ab5
SHA256 6e450b9cfe1f34a29ce48751fc81fac6e8b0683d89228d4d42c0a24c77f6e1d9
SHA512 5a8f61013c11fbf9c1508939028373f02f552f311c6c725aa7b4bfc3a8d600950110404542efd6a6ebf0293ba5ab936ee6367ac7fd2779e6780826de097a2403

C:\Program Files\Google\Chrome\Application\133.0.6943.60\vulkan-1.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 65f9a1094d02c8f5f9700e1b4141a6ad
SHA1 2232ad8929f7ee2f89452d9b58faee467b163bb2
SHA256 921c9fc4b73e24ed9ab45a8a1749156377506ccfcfd0e8f413df2cf20133af7b
SHA512 08d88515ef0f4406af5ed186dd68325305b7c58015637fe0b392d1008137401742e09399dacef653e0125a6612dd34f6cf20f08e8536d9b5c0bf71af8f24b58f

C:\Program Files\Google\Chrome\Application\133.0.6943.60\v8_context_snapshot.bin.(MJ-HU6315094287)([email protected]).zxc

MD5 550286b12c1f07bdcc0c9b940526eb2b
SHA1 cb1398ab03eca558c454ddf3dea3392bf0abfb5c
SHA256 ab18df463aad43bad2c95e09e08148e9cd79beac0cd2b922758c091d9337a434
SHA512 44753950567c39b51ea38160006f8387757cb84b982eac8cb66845d1685a09ebe90222e2206ccf8edecf7f3df0b6963ce2af44bab1294cbad666f3364423d994

C:\Program Files\Google\Chrome\Application\133.0.6943.60\libEGL.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 f92fd37eaa2c2175ccbab1a249d62c3a
SHA1 f372089b174469bd4852c602cfb554cc45baf000
SHA256 8d05054ac9b64245d51719b4e7d12ced6b3de40a08c2cd2304ff0b5de0ad1d4c
SHA512 a8dfdecfe415c582f022f560fc0379d522cda6b0a0b2d284243b833d3df4886fcefcff97fe2f0a671f41cf2ea5b09e1be7488e1ac08a7a14c0568b9ce780560d

C:\Program Files\Google\Chrome\Application\133.0.6943.60\vk_swiftshader.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 369035efa847b8464fa8887a1f1bb14d
SHA1 1eefe2d256be444121b2537f4571e0cf6df350c8
SHA256 c0a631ace957717b1580c797b220dc787f2fb53a55274c8f60265776bdd92411
SHA512 df53a334055fe5440054f9273361e667939ab216fa246bdcf74b37ce6f170969cf9d1f3586f93cfc8bfeb5d73eb78f283c64cba6049c19156b77867630efd626

C:\Program Files\Google\Chrome\Application\133.0.6943.60\resources.pak.(MJ-HU6315094287)([email protected]).zxc

MD5 d77e28f8191ce5b2b24d0d9691eff5b5
SHA1 8029bfce6a59c5f1f527ea7beff4a354372f3daa
SHA256 e798fae20054dd90c7a394d26b1d6ad2aab869127311a73f12537482eed83749
SHA512 380afe3877e89daecda9e50066d954aec6694ae142acecbb161838788155ccb86624141b54d752b22250653c1be0bbf2e8c5358eb9a5b41d8306e2248797b8ea

C:\Program Files\Google\Chrome\Application\133.0.6943.60\optimization_guide_internal.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 0c21d4fdfcffc734afda6f70eef1182b
SHA1 aeb721586ff062f60bf96e52486ca17af87eadfd
SHA256 163f96224f9aa0dfe2db615b31b4ef1d2eae4ad38cb6157e75efe49d24899adf
SHA512 3b0a3b0cfc35eef5314e60d9c2e3ec9af01291ff9cf3cce279a5dffa02d4935dbe3bbd91978a04c457113f700f874ff365afd9fd3554ce833ed852d1eff059db

C:\Program Files\Google\Chrome\Application\133.0.6943.60\libGLESv2.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 a2df1d4250d993f7a299fb7b2671fb65
SHA1 c73d4b4c3a7eb9bd92404380312f763acd25b85f
SHA256 4138c313f60a1764560f9572c42ba8f5eba69d6e051d1e663b9e4a1488644f2f
SHA512 81f25765e6499fc8d23526d927677eb51ee814d65ed832090551977de2cd3c3417e89b0187bd7d5835f3fe58623b05573fad7cb46533176a6a2e8109f909fd8e

C:\Program Files\Google\Chrome\Application\133.0.6943.60\icudtl.dat.(MJ-HU6315094287)([email protected]).zxc

MD5 82ed20a0d1351e3044834ae438833f3f
SHA1 3c45d23a0d36892aac396b7ee8e456f2b563e6d7
SHA256 3f19744a2376f87eadeb0e78860e58d90960bad652e6062fbda8905908788bcd
SHA512 a2552f3043d686f27832a7540bd9792fc7823129f11216390fe2f4bf769a26e14f939c9d8db51249b64be5faa8b6ed4b9221445f9bdbc856b505a8e37b59a2fe

C:\Program Files\Google\Chrome\Application\133.0.6943.60\dxcompiler.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 75bc30823198f5c9642755699aa9339b
SHA1 13931767ee6c60392fd58fba05a9da84b5727aed
SHA256 ff9cadd86c958383b08618a90f3fcb8d1d14ad2467653a917ed4bcc64320697d
SHA512 d64d9c685e6e408f746ef69ce2ab51238459bcae6ab3427b38f4613fb36e467fc24b6feb0a4578334012940a5df2ad996469e9ad1d85225f658f0e3dfb143e71

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\zh-Hant\PresentationFramework.resources.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 3a94fbb52653ac5f9b3ada94eb4a76ba
SHA1 3cd3a8830141fa68279e7df4cad4ed15419352ae
SHA256 e59ffa724f457c2f51ea2662b54c0b74b857ef82e3ac2e1851955415cbc2bcbc
SHA512 3b9bbbfe1ca8d8d22e9458a02baae3de0e4376fcc511c94f79c6749eb168d7b923c7a0cd7fb0ec4fadc302fe6378146487595b6969197710f246f8f165bc41d8

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\zh-Hans\PresentationFramework.resources.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 976a25e909e2223ffc9523abd2dafbdb
SHA1 9bd49409762b10c378e41e40373a547f1e5e992a
SHA256 347d7c494565561ad92e227c91b70978fa319b92372812bbf8ef71ba8b156d1a
SHA512 108051145478bcdb924dbf89cf9cf06cf91c466e3fe8b02f0025b3bc0a628e46c7a4c53ff4419b868d254c65c03ae6d6126aac2046779285f890ffb65e9cb0d0

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\tr\PresentationFramework.resources.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 10705eefb91a15db79b9c4047ac26510
SHA1 eb34071909e0453f318d9bbfab522154ea3da9fd
SHA256 76b8bab3b66e10c8e83b892ffaea92bcaf8497e7746a14f7f8e6ec9e17e7d4de
SHA512 b6b2b0dc69c722eac2ef3f429c69d48b6c3aac1870372b30758e355e8658e71727d846ac4ad9a7a4bc07313f1496d8397d1e6f764d969f8debeedeeaf1430df6

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ru\System.Windows.Forms.Design.resources.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 430a07532bdd8294d90926890d0bfd3e
SHA1 57d230070070cb2b136e052e78a4a056aca217d2
SHA256 67d3d7c83b68fb3ea28612f549c69eb33c8eee5dc337696907accf54a99a1f6e
SHA512 1ef1b9998afe2344d2c70e70c2bf7aefc8d6be95c8d99e12ab1384645d0690a32ccab5bfb88fec050f02a64957702919f913eedd78a48e5245e9952f0ea46505

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ja\System.Windows.Forms.Design.resources.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 c25e54fd59dcc18288250bcc146c99fa
SHA1 198f66c7243ed6fd77892f8d973d48fd0cc5687c
SHA256 2da094b6f890bc5772263b0350985c64e12db5de2c38b053e23eabedcd5e1f80
SHA512 5de70c8c9b6d19ccadc0a7c3cf08ded9edd22eb5c29bae25aaa156831223da8e42cdf95413f277aea64b6b568e3294d89ea0a33d1d6c1efe6189e7afd56a3420

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\es\System.Windows.Forms.resources.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 56206f11b176ea63e80f177600c6dbfe
SHA1 ade17c175fb1572e9743aee19221c1ac9f67f920
SHA256 120e6e2ee6e5f419e42ec7d945bc6844aa1d6f1ed05d420628cfcc8df46910da
SHA512 1188f1b9af817db5ed6003f97e80fc6528a7aef328bd6d8e6b36a96d03cd7f7ffff38bfa10549e72282116e05448a9d90ef20d877b0b8d3adf0ae9c92522c02c

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Security.Cryptography.Xml.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 361839c7020119a87ee5021ba8592e93
SHA1 9e94d7742a0fd2da7dbee5f8c91184f45fedbef3
SHA256 005814586e4d42c9ac3de8901a4034b2718f7d82977395a81b37b0913859d437
SHA512 62e5aec47ae073ebd17700020c839e04b2a699716fa867528794a5780ba744040ff3953db7c7e37c9f00c197d5043dcd751fe0adf3263363385533cbce1cf09d

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Drawing.Common.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 227b9a755c2690059229c439543882d3
SHA1 ffa4048c7d6b9d9dee882d4a4770bd57f303bb8e
SHA256 a7732bb9fc16a1430d9db69a6633cfd0dd50cd06b385d4d5a51f08bce30e786f
SHA512 a85547c32be21c70c393aaaa60cabfed7fb170635b48378a4a7d312a4b32b9d362f3066cb231e80f96f4b7a59a4741027c88706c28f500df30324f120fc6c852

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.DirectoryServices.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 58205e20b519452b6e70b86ee3a69e00
SHA1 dbf362ddcc17dba1ef4015b44180d759d6eb08a2
SHA256 faa0f651352c8b9d02426c5d7408f76fdd97d84c9fc4e7e62aeb893fbc7c3555
SHA512 64ed986d7d18d7f35341c4c692bea6752b29fd45f0e780717ee963ff1f2676033021594a8120d9597148508c3276b2bf4abc3f2ab084949be887ac8dd5800d4e

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Configuration.ConfigurationManager.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 e9ea24e3159a65987bcbce862cbad2af
SHA1 4288f42204cd2c448e93ced4a9a0ab19a4bcfcb0
SHA256 801fd63a8d17e361ed07c37e496cf9a398208d1db4e108d5206847cf845d8cea
SHA512 2b7fec52bb7dde4f24a42f26450adaf5e8c0fa3a1980ac2ef40eda3472c6e887c13d4064007a998f25db259653a0095de02268c642cb43d028ce6c07d9d88554

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.CodeDom.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 27b7e51debd6d5e793884aba83f2ee06
SHA1 d6524aaff54e8bef7e8223d42951b92646ca8917
SHA256 fe3645c7ff6b7ed4a3767f47fb3ddf2810565addd332e0d857b8b8e0c5d896b2
SHA512 64f34b64af2eb96843b6f5fe0525974bb524450b228d8509f76ce5759a19fdc9fc436b999759948b8c8f048f48d265f7e6f9327e5e3ec9bcb826405bc8712152

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ReachFramework.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 de2a7af1a58b25b8090585eedfae3be7
SHA1 c357ccbd12f606bcc9f67a55da2a30e38e2a42ea
SHA256 8c5f8057b2ba813ff8b943cc1f4b10ab05b39dc074811920925025953416051e
SHA512 b813aa0a192749caf3f123bb5b1de7017c87522296965ae00faaf821c3732a73e395b346652257a3de651f9558b185cc468703b7b33950aa6e5d52f648d1701d

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\PresentationUI.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 d974987542a750a192c4ed4102a8f967
SHA1 db88291c4f070a0664a46cd0132b7b71dca566c5
SHA256 b66eae43eb34cf2c05da6e0386666e94fb76f75345a29c5125c292f8dfec9baa
SHA512 f7b4ea1d034644c4cad9c1044ad33bd96b594c49fdefd24d71055b1a1b3957e33d91bd7584802030e99233d1548c68c08a54d1a4f1f685df1686ec3ade635dd5

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\PresentationNative_cor3.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 cfb5647374d664b583d1590e2e36cdb5
SHA1 a2d2f5430984778a8813248bdbc7faf1d4b689da
SHA256 b5a017dc6ed690249124aa797f13cb22f7af700a52fc203fe135fd119cdac513
SHA512 b9a407363453d7241761b5c61df12b2c9dcd2e5774399cf276d5221107ab5f14a648fe45e1e970f321cb575fef36f36253fcc3e0538759ad32a017cd0394dfad

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\DirectWriteForwarder.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 d90942da28a8f8d4e6bc73df71e34f8c
SHA1 b5df9d8e27c9dab9d8e82341cbbd3671d08b2ed6
SHA256 2c12ee94f3876e6c02b572a62999bdd6f9214cf105253e155a893541bf72a5b1
SHA512 0e2ec6221d3353b686458afa5b051852abc4e0b67c508609daa14312ab5b25f484109156d102e27c426dddfdca9ef7a87b76b0d949672a0815db22493676562a

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\wpfgfx_cor3.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 803253a47b374aa10293452ca251e69f
SHA1 780fb036570ae99c7d70d8c932b13ec2d8b29f8d
SHA256 2276ed9064190b3fa211ac2ca4cd5cb629e95b166533437a306abf9eeef188a6
SHA512 d56e08536663956b8ab14881d0d40e12ef3aa7a2946e43a1b0bf4ea5715a8fee738e5d217ed2c088a5f14782e808f5a6847ec0713337d8a8434826b0f6aa690f

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\bg.pak.(MJ-HU6315094287)([email protected]).zxc

MD5 932406ddffde083b033a5bf3d779128b
SHA1 74f8f66016188c9f7648cbf4c66984b6b9fe4030
SHA256 0a21f3b7e1fb32cf9e07e61f2712d8eea21041f3faa8c13787a07c8597a6e9c2
SHA512 add549330b02fb945f2a35ce3aacff4accc9216e5d9a24d0d428177388d770cc4e3cf010a531d2456f573abc93689fd0c1eddf9e65d5d3b5804888d51a4a6ff8

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\ar.pak.(MJ-HU6315094287)([email protected]).zxc

MD5 cbf5e5ac741bde0287df62fdf11a9740
SHA1 8c3a10a1123f0a5d6ce6373908509550e4304d6a
SHA256 fae973cf90dda7f1792eeb33dff2887992871b3184a266b6cf7eb832ee60a88f
SHA512 670c7f90d1e467e2b0f408ad0e9361884eafe163ec25e5742ac3ad063399d19f2733108b8be57be4a267eed629d33d36702d6c8f564d9cdea791750b66e0486d

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\am.pak.(MJ-HU6315094287)([email protected]).zxc

MD5 3f8480f5fb265646f71dbdde5998b62d
SHA1 2e4377fe3defdc5c0f3af637ec67176bfb8449f3
SHA256 2182e619502762a839c7de0e5779b6e5f4113aebdce21bf2fa5b033da0c11618
SHA512 2f913d1b8b3f210327d1f61b5e14f19102f78346c155d8efa427987d42ea9f4ffb54e4c98eb09b1c64eabcc775011893429bf2b43e123671a42fd9a5e1a2f3eb

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\WindowsBase.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 7f97c9551b131b19832d968a17d71b85
SHA1 c15ad6a8fce68ae33b0b5006b0e7530f03664309
SHA256 f1493497e41d327cbcb2564f0bf4c36eca91e43bb7450f4ecdc8ae8229ce3beb
SHA512 23f1692ecb72bf31b9ac46e116ba067f9d88702173e1868f0ac15d9187c89bce0b512be853a4b10fbe34470f1770d46d4696b6d0bdb89dce0bb460999c0298db

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Xaml.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 b0ee7e872ba77e179d3f126d649afc57
SHA1 941253d63bda271257a2d8403e20f6f801eff1d2
SHA256 14c9e74c4849592e2697770209f420b691779debc24ab864d58bde3ad464aab4
SHA512 44fa001eb7fad930d5acb435e4e3f7052f8f9b75487690189e615c35173ab579ec6d5f994ba0d07c17642187dd8e9e7c6da3f94e77036a4b28d926a7ca7f6a9f

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Windows.Forms.Primitives.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 d610faceb0894e936bdfdcc9ec5d1918
SHA1 5636f2619d2164ece3936233106162f3ddc4fb01
SHA256 bc83fc89e7c4f88cc9d3ff5e688f6f388e9dcc8894dd67734f453770ce97fba1
SHA512 e378bd2322a72525e575e475babf54464248f2bb681d498766ff446bc48f3977c5ed418c0e1424f87bea91d363fbe89a545007548e465ce20a30203a93a22242

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Windows.Controls.Ribbon.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 9d79b7f9984d3a3c7488da994b7c4050
SHA1 22b0714c651ba76da888e0cb766149f122b219b9
SHA256 d6b65f1b65bb96d3ba5ee0b90f7cf88b28ae6539ddf7efb98aca254186784bd7
SHA512 6520009241bd794fd3ea3a7d14cdb9dd8baf2638c3d4e30eb7e5110975bdb056481e46ab1abc157d902e198c0ec088cba9d9789aac75a9717a254845f9a56bbd

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\PenImc_cor3.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 6d7de0d7db5fb7fb2100ec7d5ee61853
SHA1 a0aaf1135c04351a4cf7eebaefc3b76f9af67f90
SHA256 32d1be52e4bb1a9667bc77e06dabec6592cbb394b9fff3cd7f7c6fbdd35cd118
SHA512 9915ab460261fdd764bee3ccc3a43fdd006bea2e4c1228d410b5ce64cd90eaa2c12c270d1f186538baa28ac190667d822751961e00ab85c267e9395ef50182d6

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ru\System.Windows.Forms.resources.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 cfac950357f1ef040699d27554e1d6b9
SHA1 6f7a360cc420790fcb2cdee3979550232829c93f
SHA256 a483c037d65533cff35618f81b57cd5461bf382ce5e523203cdff51d492b1324
SHA512 61d137b8991dbac403fc1accfb38a0ae1165f07a4c3729512a985a34340b2b7138c496450a9520bfef82d35a898d451a743768c34514120fb329650dd05812e2

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\PenImc_cor3.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 a24586580fddbd9672f0ae9a2a949698
SHA1 6368e41c4d778bfc975114bd5611c67a41e10b81
SHA256 176c6310830386b3fd53d838f594d939532d46c2f62d15e25b0e611fe9b086cc
SHA512 fd605c342aa3a5b89da262e820cc2d03b5deecb7f5fe8417e7e6bc57f000b367818bcab5922105684ab0c14eb9ca10e34d2a68a1550868ea4681e886cc2bc7ff

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ja\System.Windows.Forms.Design.resources.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 58d975fec2c61bb321696e8aa09b2596
SHA1 08159dee4ce4cf49fdf7031485784e7ae9da6ce3
SHA256 2b0ef21c5e07b1598ce4b25d61e0c23c78b6284152aab58db5d1808ada8bc885
SHA512 b8643551b2af46f6c1e067c2414f511b5c576016a26eba4b5cd8fbb84307d3902c34fe6a3b026805869ab01529dadfd94ec6bd6032e118d8663230cfef2076a7

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Diagnostics.EventLog.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 890ac435a0fe24626352a0b8194de17c
SHA1 98fc57a256dd46ba31bb948bccf8ae6819da4ae6
SHA256 ed27644fdff2f177167267062680478e51c0248c035bcc824018569c1faa35a2
SHA512 1f0f5a5b62fcd8a1ee6e15cdf410889e0424eb1f093d514a459c9f8beb50ddb4399c23287862374750898aad3d8ba2addea5fb6f41bddc3df9900b77356c93ea

C:\Program Files\Microsoft Office\root\Office16\mip_clienttelemetry.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 d62419301d90b5700ddb5353f9b1fba7
SHA1 4a5a0fb8ad5d4e11551032f8fa464fb7868d5518
SHA256 1a6acdda93fa0f5c23d8881dfeec38da0ce634ce539b05e0edbadc516a37db3a
SHA512 8f5ce4fea8998a06e126aede016d10c31cda0b7b0c74decfdd1b253969c141da40d8eff7738ce9e393bba8aea80170a8c6b61f7ddcbdfeaacf1d822c00eab926

C:\Program Files\Java\jre-1.8\bin\eula.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 e13fadee7c196c3ecdffe3a2d41c1ab6
SHA1 5f537492888cfe496e1cd5584f6c5d30d9cf9ebb
SHA256 d018dd75fcc98b4dca14354a1b3c54e3ba2f7980b54f94d8c3b1ec4b72bec24e
SHA512 71de1abb4dca3b0f26fc699e464ce20fe990617d13e433f487619e939135f30034303ccc52568d6242670270933774d8c042934920d05df4404203c45d714cf5

C:\Program Files\Microsoft Office\root\Office16\1033\WWINTL.DLL.(MJ-HU6315094287)([email protected]).zxc

MD5 e85c61ae39b4afbb9a7a93b536cbab34
SHA1 305d0d974318c320d6f5f22e0552d35af1745cd2
SHA256 90c3bc7667f199b4f1e84609b354b8a3c1117f65d4c8529548c9d0d9e914fcc4
SHA512 9e62c0a719284e3df820bb37412f6dcf4e16c1b9e87ba9df9702f788070627d966bf80a39f756b7590fd6c5f469417d83e1f907e774c4b4109b619ecb2170172

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\pl.pak.(MJ-HU6315094287)([email protected]).zxc

MD5 7d57bbd5b96ac2b890019fbe5fb8ddcf
SHA1 202ce03d7a16c132177414ec3dcde3b0b25becbf
SHA256 fca2a49c61b1dd8524268c2ae819a5912f7c4b0b0b29a0e0d12ad21e455a4f17
SHA512 b31f54afb484fedc3edc2d2070309ff321d0aa6c3b9ed91c4c10540a0b2cd6ff33d72a9b4ec9b2c60d58d175c15a0627958bdb3872ec587efec4370e09bbc46f

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\nl.pak.(MJ-HU6315094287)([email protected]).zxc

MD5 a448194aaaee40207d26b7817e016e9d
SHA1 05d21bdeac8060db3a8689370a33a2c5e42582e5
SHA256 7d23ff1fd7524c01922ce5cd7c4a5029537c28c3dc6aa43cca89bfda70b9f75e
SHA512 9faf8873f81402cbe015d1a14d12040b9f093e7042df64d95a3f977d4d2c3ed6c015c3f37b2869ea8d92a93cae1fc1d73ca504dbc67f7bca2ed3fc98bb610c9a

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\nb.pak.(MJ-HU6315094287)([email protected]).zxc

MD5 833f549226d7a6d4eb082ecc5b2891f6
SHA1 67f08fd7471bb771b322bc5a9f05a1499049fd3a
SHA256 1978018d3472c551c99d20d5db69eb09c071e97caa724382b237203dc0cd8403
SHA512 2eb2a50492c7c0e61468f56e40a8a861dcb6978f9a4073aa85822c64372b8da2cc6075ee803f6b05231fd1b3b69eb4dfac3d9ed66dfe823bae89768c771305ba

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\ms.pak.(MJ-HU6315094287)([email protected]).zxc

MD5 34f127d1a3a23f4fec38690337450cf0
SHA1 311b37f84ea7b23e56ae840787fb92c09dadf2f2
SHA256 db73fd2cedeabc8fa51d6f460b89c1b51af62d2b3edb9639d355cab84ea82daf
SHA512 277c5965162334633a824c2eed8a557a915a77928a63260feab48eeb450d6e4bc8841de99a3dfd070e25cb201307170228c5a69183c669121c7be097163d4597

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\ko.pak.(MJ-HU6315094287)([email protected]).zxc

MD5 4cd248d23c3266c9bd7ecbe857e256ab
SHA1 da4261cb1ac9dff57ccff4d1267fd60292b672ca
SHA256 5afba1d35498c9b11d36e513dcf8ee96a7315f12f517e8c154088c12b89d82e5
SHA512 b16a311fc4a98992721cf217b28bfe40c6ee276010287ffc8e528b79872ba35db6ae14bb41651939a2ec3f7f38f53c76340358e70106f4ff88d3476b32501b71

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\it.pak.(MJ-HU6315094287)([email protected]).zxc

MD5 a8248d6cd8e8264a45afe72c8490b951
SHA1 6f93508c1a4757cd917ef74e2159294fcd4cd5a2
SHA256 e1f2e48c376122cf86922f4e83e8254fa90428074e6169df52209e86ebbfc634
SHA512 8cfb9f681279aef59039482b49b82cc6e15a41e248c488746f1e65bd65ec71a37d8a1c92a14c1a442d02f168a467f9a2b05225671fc1d60896e66bbf89da6b83

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\id.pak.(MJ-HU6315094287)([email protected]).zxc

MD5 d1fd96c55f2e0dbf3a0bb5baad5894ff
SHA1 4210b91ff65af552c49fe67239ed72a16ddfeaad
SHA256 b9810d69122ccfb13c888abafc16baa2282d59a3597b7778947b1704ef1927f0
SHA512 4ed5bf50b08e658300734247a3b7b801d2ab619867041f610958bbdce4a681eb149d6c4183a02604169d57c0c2a30e4ca199651ffaa22f2fbdb55fa9eea1251b

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\hr.pak.(MJ-HU6315094287)([email protected]).zxc

MD5 32450f7ac43ec6765638c38ccda2bc0c
SHA1 c5b42cac565ee89d0796ae406dc76d7ab648d802
SHA256 eff0385896e852c2dc9df7773bf25621d20d1f6bd9f1e4b69ad64a914462c5c3
SHA512 1a9e2bbc4f142fd33c6161714146f5c2a41ea0648083917beb54600fa7a3072afb4ac5aa4664d0a98eee02a8960e078156c03790661204d2ecfc71ec8746418f

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\fr.pak.(MJ-HU6315094287)([email protected]).zxc

MD5 b08919ccff05a1e9c7e90aa08d7756e6
SHA1 e076bfe83e947275e2e589dd933778954238c8f4
SHA256 3f8e9325a0d26eb8ff2926f50cb09dc00750cb1b006f16bf4977da0e3800e156
SHA512 0a5d9d6ff45026b08b513df1f311060c40291107c5eac64d601495410c93caaf3793497b3e1e5aaf57b9273bb34e4397d569beee4dfaa2ff7cfb920ee22f0974

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\zh-Hant\System.Windows.Forms.resources.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 9e54b6e7f6ce00c3b80c5fe647d5033a
SHA1 70041d889fea460351887d3ac7733fbf2c8aac93
SHA256 bed0897398003ebd3d7f40f4cbc6228f7ac45be0bd2b8b933ef3699ca0d42880
SHA512 b9cb47daa69cdd226a8f2240119f9bc5425864c646ed61a68a333b1ae679815641f41973166503af3290409cd6e760d0d9fc8e3a991330ab23dfe81fb3b74fa5

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\zh-Hans\System.Windows.Forms.resources.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 007e7e2a8497fdd24ca9bffbbedc4fe0
SHA1 9bbff01b7a245e07f1aeb8521c7f79efd7f209a2
SHA256 bcaa439ff8686d2b9ffdbca29467be754e71864cfc6f9dc5d938f15b96caa8ce
SHA512 2aa51539f7b9efba1591c6bb9c2dd63dc85bdd97ffada6081934ab844d76fe79dcfa4ab59a526b08bd83db9c634785010ced1ef6139eb424662b1d1caabe1a7b

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\tr\System.Windows.Forms.resources.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 dbf48d0d8a5f8d46b34b12ff04533b57
SHA1 3b81fccc97b4f9647a6cdf749b501bf9d689a280
SHA256 f61de206572f671bc1183d25b1d853ff106444a89adbfc8fdf38ec05ed0dda3f
SHA512 d3605e36b15f77910926f335372a3e3c01415a4ad402a9535beaec8521ce122a7e3b7face110bb269bed75b8f51280e160992daa563496afe785dadc07bf0088

C:\Program Files\Microsoft Office\root\Office16\1033\PSRCHSRN.DAT.(MJ-HU6315094287)([email protected]).zxc

MD5 0794afb1c14036d4ca0f24faf32bcb95
SHA1 be8ac6814854884250f7c0caf5dca7c0394f346c
SHA256 01c7dedb5f3122e489e9afa20075e3c176e165bdc974d396cb1fac776a61969a
SHA512 283b1c00b83e144f65ef26e4826cde1073baa804a3ff6cf59c91bfb4e659f94a098a77498fb5643e67ed2f60d1433d613e735413ff55b0cb3a3ab1937e07b7a4

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pt-BR\System.Windows.Forms.resources.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 934f233ad37f8323ed601ae1582848e4
SHA1 be719481021d000a93f8691b6f85f48bd80c2780
SHA256 d135fc00de06babd937f0fdcf3492bf56a636743db5b0b66883ab9829a69a3c4
SHA512 8ed3cbe78504598fa47b4d6e967b14cdf3e114506e92d6d3e313e166086591024b3c7cf338e3751eb93422ecdcbedaef860f3dc4aaafc7a2d5324bad93f49b03

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pl\System.Windows.Forms.resources.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 3e2ed0ae431521669116940c12e99808
SHA1 f3c12065287b9ae651ece5af2b39f0bb35e5d12b
SHA256 2b51d398c986a76edd005da6afedfefeeb0dbc828152228c2ec743a2c574efa7
SHA512 3844c83d1b0dcd8137da488113eee5e524479f6e743775a6a91cb80836fdcc85e247e53cffb1e8075ffecd04759d3288e069edad279c2efbf8f601e046b78398

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ko\System.Windows.Forms.resources.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 a4d588f1a390bfe5ab5dbddbd99e4512
SHA1 112490cf0945954406b8d91d5be091a7fb22c70b
SHA256 13370f3c7c78e3646bc6e9b3f581f04aec08536b32fa5a24139da5b48aebe1d8
SHA512 8aecc62c2df6a94e9692294736f24c586e45256fa8f6c04f28eb7a91a10530d72cb38920520caad77666709b9fd0c53fe077e591161d91f0869cdb3d9824807a

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ja\System.Windows.Forms.resources.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 1840fec4ee6dc838896561d9015221c5
SHA1 f00fb171029048406c2b072d52bc1ecacac4f2d9
SHA256 edf855d1a14f225a93f99eb190ae797e7a9a39096e434fb3acd10019c8152740
SHA512 9e94ac91f79b0030f1ec5f6cc85988fa14f7b7c377858533218d94ac0648a792b73b31214a0fe37eba72bb0356d2a634e32a5a36c329c8f1506a4ade29192b17

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\it\System.Windows.Forms.resources.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 f4cd38521c7a9bdcf338cd262c09d3ef
SHA1 a611e298081d7c8e89604879d577a4dd4403c920
SHA256 73e49beae162896169b8ff24a364d2e0dcce9f4bf9544b77cd54b4a81b2b7f30
SHA512 22199c2ce1767748241449668a7586c477c010f4570a7ab758367a20a41655ae303ff23cb657fe31bca8fe98b72c0f15e037349595a86ca54be8771ae5308a33

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\fr\System.Windows.Forms.resources.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 8adf1e373adfc8f045cd4176ee474c4f
SHA1 2756cc0aa3dd0a7c85305a5cdab1cf9d1adcb69e
SHA256 6ea205b4c8bdced90ccf5ce7a695646adb313f4e4700020562948a14e78066ef
SHA512 79d5178ff7c0a1c5b2277d48038f59a357b10ace473f8bd10b4b43224a5ce304e2398666aad898819aef87c5bc72f7f6e6a0b37cbc336491cad6e1526a4b560a

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\es\System.Windows.Forms.resources.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 47597a7f1bcd205f1465498663e19898
SHA1 c1ebbe658380d69557d20aa8b5b1fef6496c2d98
SHA256 83ad44c0d44cea7b14b2242e0a86866838a4d707601c76ad03f8207c98df8a44
SHA512 d4bd6520237f8ed3aff974c812d42ce752aec3d70a7bc5649ce802af9df01b522dffd610c17a6562a4aa6924796d9dfa9a7b2d77f1483d0bfc65b7fa2821880c

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\de\System.Windows.Forms.resources.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 935efd42bd1a6483128e556672eb96d0
SHA1 7a41475f86343ec2bf9a2a5765032d6c72a3e6fb
SHA256 04105f8fd9db3a0909331d57777339bcbfc6f6e0fc59d706051c4e6df1c5fd17
SHA512 74b1842148922242a4ab7938356ea8134ad9695f7034e9636efd24a2a1f055dda9f2bf8087f4c056e3d429e9db17699719cdd9af549d0739f4fe2f6f96175b66

C:\Program Files\Java\jre-1.8\bin\ssv.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 d03320a9f229025c9052f04a3a058eb8
SHA1 45792c5abcefa2fb8258ecf79c8595a7a2377973
SHA256 a360d7235575f7f10f53ba4f9f6925f13da057b865c249b7158e33b8b90a782c
SHA512 461ec8d5a4571f83d991ccb6dc52c592889d51de297baa5c7a7b8b84163e1b550bb2d31cfe5150e9031ff8baca4e6ecf1dab782e36edfde4fbf5a729a45242b0

C:\Program Files\Microsoft Office\AppXManifest.xml.(MJ-HU6315094287)([email protected]).zxc

MD5 e291967639c78ea2a9bba5959fbf3cdb
SHA1 777baebeca5b2d04f7146ca6a70b4f5e7dcfcc54
SHA256 4a8b57bc845f82e15239e0f3fdb42ba0e83dfa895b7cecf5c0d5543a2f2de0d3
SHA512 eefe75c722e6d5fc5f4bf72f9fc191e73f3caa3d7e460003cbd07a162f27843ac635dfd359e091d571f21b1e237db1d077e2c193f1a7cd1042c58c1687f1f892

C:\Program Files\Microsoft Office\root\Office16\mscss7fr.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 c1b28ac937fd1a1870a705f2dc5cd845
SHA1 a623dcb7d50aea431b88c0d97fdc8ff0a89aaffa
SHA256 93afe54d363294e168cd57d12b0af2b57bd86d8f3b9d8d479ce8edc45c008854
SHA512 06ad574ca1a0f8e45bdde3303ac7aefa3d4b487e0417a53a51f201bce5fe68942868f83d3855a25258ab409cce5595090aea8d8b1ceadf4a59ef4ffcc25f3234

C:\Program Files\Microsoft Office\root\Office16\mscss7es.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 2ee0c47fb898fff1327eb64133e686a5
SHA1 ae3f49013eb1d2a7f326e269b1f5ced78ad8739f
SHA256 cf8cc90d07653d02514ad9cc80b13a438357cf8499bfe3f9b8ff18659d9a773f
SHA512 4125171b4a7be1f8fef0b1bedde3d4f03a1fe2d5d1bc5d23f0cb9e752a50f8070cff96727147bf1a4be6d1879ed82c0f2669587a77405d43c48511b2363eca39

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\MSYHBD.TTC.(MJ-HU6315094287)([email protected]).zxc

MD5 2e5da4d77aaeed90cf2f50093c610f25
SHA1 e98cd75d715fea0af704de198497706f6aa553bd
SHA256 885ffb11e23d847e83d601572046d2c538aafe6500824eabf9db8277de794201
SHA512 9abbf49cf8419781f198714bbfb24da33c45a84462c8706e20a0110abcd95baffc3a0cf831c8a2b93ada2ca7f53319c39ca8d64bb74b37a2d094673e2ebc8894

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ODATACPP.DLL.(MJ-HU6315094287)([email protected]).zxc

MD5 74b4bea2e9736acf7d5c08232b102bb5
SHA1 93950a48bbaee8259769eebd2a02a5d96f7def65
SHA256 66a9f5e8e011ff8f142667d7d5e22240b236b5fceb4de17446ee3ee13ead0b78
SHA512 4ef9cfe029479381f745cfebea508ec8520d38798ade83afb4f3b4a3d3a75a0542bdc7e69ae3ecc57dc9b8b000e769218aaf2b01ced70f53bf0f41cd2dfd0d71

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\xmsrv_xl.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 b62c55a8a1933d776724a320634179de
SHA1 8d75d32310b0a20f733c67306ad62e74647c86f0
SHA256 d8cd32f6e8ad2645f3bf1b623618af2cdc4c556c0bbaa9642a25e2666fde3cfc
SHA512 3963b1a79a5a1bbeffcbf6913fbbac019d0f5bf251da3a825ff818fa048f83b19d4237f410a0facfc401b7eaf12ba86fc57d8a343bd308be53d14ad9711c05f6

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.IO.Compression.Native.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 2af20c936ae7f3d575ad2f22a25445f8
SHA1 4b0f5232c9537d39e9bc5ca4204b1e5549cfe1dc
SHA256 7d1f7c6c66ed656f24db6cd57c6092d897c10ceee86accbd5fb8652486b2c484
SHA512 a86901252047ea623984f73b5d9c0a8d643f636457da68b01f44f1e828e32841123214fb9f4142de3826ae59645104ae94f67eada6682d77877d698b64e92136

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.IO.Compression.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 32f5db6a40bd4f7b466d7d320d4917a0
SHA1 a75145732650066aff617f0973a0ce31ca652add
SHA256 cd52bf15b210e846b76ddfcae1dd52bb68e5ad77fc4fc179ed1f33fed77c8da3
SHA512 05d3bf5c0e489910113f8a16349452a1d1a67b554a4a861d387e511a0117b36c0457a203f93ae0e68e0e0b8132ed5deeff42e80a2446d3d4178c12ddf4ed5628

C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE.(MJ-HU6315094287)([email protected]).zxc

MD5 e091c07d3accd1497cd212cd2c21e6e4
SHA1 a6d1aafd409cf12740313c1d7302a2e481a85b44
SHA256 162530763d1c70464c729d9b38d683ced78007a9c1655fa84ec7db561b348942
SHA512 4300aa2598b81ffa4adf516a23923d9efdc5f45912c49da3876daae4f162cee8892bbad782d4ceaf96f68a481fcf45b9c90ad3586b4d205dbe60341d6ef09f10

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\mfc140u.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 028909aa69e35a00d5b8a6ec8e1857ea
SHA1 4d2e227bcde1cff95d31e54f114fcd127e4b72e2
SHA256 818b1ba12908d0c2645f6f7ec0c4d110ec4eac0cf85eaacb45b6f4ceb22405b8
SHA512 a29c09752e9af381fe1089ed43732b9202b755c8de362ed59ce080cc928f21ab1f9c0bdaf5ca6d963cbfa661da6c6983175207238e655fed9533a20f0b407ff2

C:\Program Files\Microsoft Office\root\Office16\1033\XLSLICER.DLL.(MJ-HU6315094287)([email protected]).zxc

MD5 f8f743b34c6d72185bbbe9ebea8b7a8e
SHA1 3111770ca4fc4dd77647704025d9bb3c17890aa5
SHA256 faaf2c3ebf0414cb3b6c3fe1362ec175ade17db3e9b31f536086b0514e86e87e
SHA512 cdc3c2ad473d4d308b2a3b264443c6992e0fe789d376a355455a1c775982fbeb14f066917b2bb695cc24943880447f8fee31eaaa838881d621a1aa2715007518

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\Infragistics2.Win.UltraWinTree.v11.1.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 3e2b79726b551c061c3012bd9318a6af
SHA1 0e06edf2d2ffed901c3536f1508544d54a170d0a
SHA256 f2b02c9752cc0ff9793221967c4d39fd22c2e09e71aa1fe2c39f27addd146a2d
SHA512 af48d461e8793c1c7bfccdb71eb4c9ff11e0f2d6300950af021c469035fdd3494698415ed4af6886ad5688fa0bb5691ca7fc1bb535bc1c37b2e50e7649fabe26

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\Infragistics2.Win.Misc.v8.1.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 6f43c722298138af4ad4d6bcc7403703
SHA1 70161babef80f71d7216e656d3a61d7b8b396251
SHA256 4f16e940165ab16f187c3de5b37bfdaa4eb1c7cd52b2fd1d78a1642611bee2d4
SHA512 3d30bd6a6f6f80775bdb3d294ed15e3a20a015a482f5f80d43052ca064c869b04e19d50ec5c55ab9c5bce876aec69b598a173f08aa9de60f05de06601dd84fbc

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\URLREDIR.DLL.(MJ-HU6315094287)([email protected]).zxc

MD5 fa847cf253155f8c265aad4b1c64caa2
SHA1 ff889ddd1afe7ffe29bb2561e1511e661d1056f1
SHA256 8d2aba35c332a3acae58102264bb988032546d46eec41e730e9df81534227dc7
SHA512 6a798629c1ceb0c7589d6fe15deaa98a88461be5430042c895116c518a5078eeb38f76622e0e60833b61b27b4c34917b3c546362f25a9375d31618bad8f991b3

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\ucrtbase.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 95230dc77a552ea8adb7cb01d3d86f98
SHA1 74d35b7be5c3d915dd8fbb51844d7546bbdfb350
SHA256 d9159257eb5b67f42dffa67265f5f2101c65fc2291c57f4109973b187daa6a6f
SHA512 585381661792435b60f2532d3035861bfa8a5f485aa2d4bf5a4502048428167d06470ac746ae296e11c499a5e125d3286cf0a42ca30cc3c4e6f3d52d0128e5d0

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcr120.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 744b2b83f9a7b0af549fae9cfc6188b3
SHA1 c7f220838a21eb72a2d61fb0e728b6fbcb00d5d2
SHA256 bcd91c968f5125393f8d1a09b84606f2d155eae31e714788453b2bcd59ccc4f1
SHA512 661ffec20b7dde2a4ddfef401f5ad0d04097f1395dea01148b73d070d3a2a461ca41feb033cf2a5fa13e2e4c1e8b5c1a9aa61439821640cc6fbbd3c7c28c6e0a

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\Interceptor.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 d0885344c721a85f5368301e5c766d0f
SHA1 cb3b36a4ef3eec40ff84292581957a1136f3bd11
SHA256 a1dde0658b28f809808e92e30f837588ecba4d858b977e85c46ef92f8125147d
SHA512 6a30751b5efd9fcd83aa5501ff6bcb911c964cfef0e07ddcc2801d5e8205356d12b4d2410f48127f3b51138263704fc62fae1d8d0870bc6bab53344d5a74bc34

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Net.HttpListener.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 87fa701684bf58da7317313035479a0f
SHA1 d608db1ea4d0cceaff06ff950d580a83e4d07766
SHA256 bf48b66cd07ed270857d128cfdc5c4d27d11baf2a1ab6b512ff0bfe030fb4011
SHA512 e182cd9646f08f984e4241578e30b8028cc767d4cd395bb7b3c9a9093a4ba6b704e7099468737c366e295de9f6c441639bb09c8beb93696cad6daae499280e18

C:\Program Files\Microsoft Office\root\Office16\1033\XLINTL32.DLL.(MJ-HU6315094287)([email protected]).zxc

MD5 7197040fc6b3b83720a6affe9a0a0a3c
SHA1 6f8b0d014131385eb70dccaa239c940c277b7e7f
SHA256 c8e7ce7ad83432f1eb24a749f609d9b6d1663b018c9f2bf5de1cd1d32c1acf78
SHA512 103f0b3c6400f8b2051a3afdd3e4fbdfc999e766bdb1f0acc1491c2b9f3d7fcd767b0aa31403926bd9ebfa0367ea43d4025dbd676923d94e68291402b33afaff

C:\Program Files\Microsoft Office\root\Office16\SkypeSrv\SFBAPPSDK.DLL.(MJ-HU6315094287)([email protected]).zxc

MD5 75e8ddfe0224f3dfce936b66bbf6650a
SHA1 9aa3bda43d661748f932231dbaae62fff1b3299f
SHA256 2d7c8185f750cd3842548fb55a9fa8f9afe06d1b71085773e4101e387b0c3b62
SHA512 cdcf5580f6df5052630991269cb1e462d481442db45f99b440a63745026ab4728cb300e97aabab20004bbfc914798b45486f00961fc4dba56fbadaf0da98fd56

C:\Program Files\Microsoft Office\root\Office16\1033\PSRCHLEX.DAT.(MJ-HU6315094287)([email protected]).zxc

MD5 eab02337dad6409b60ba73b75ebec7ed
SHA1 574cf15d9eb38619c19ec3fc7a5e1a35f5e13773
SHA256 8f2ca7b86e6dcaa240d1c49558facd059e10bc37ea1f3081fea39874bb4052de
SHA512 35bc39599395604e5c7edc3badcef826b523705a8419e9a4b7ccbe5afd1b41bf7075bdfed4ec49b07c0635bfd7aeff2107148263c3d9dfeb2e29bc1f10e14fbf

C:\Program Files\Microsoft Office\root\Office16\1033\PPINTL.DLL.(MJ-HU6315094287)([email protected]).zxc

MD5 10a20e87c6fe5032fd4a4c96c91add43
SHA1 fc9c285e82f3883c99552b48bc3af46bffe30e65
SHA256 31978dd46b7ae80b65d60297a1afc02eacfc6ae4953d77b32dbcd7de3841629c
SHA512 d3f38c843173dbed128035e7c080fcfdc172366501436023341217dc23b9f19317656bde5e9bc5bc283688060b118e08d4d498dfab34544adb3e38c271e9cbf5

C:\Program Files\Microsoft Office\root\Office16\PROOF\msth8FR.LEX.(MJ-HU6315094287)([email protected]).zxc

MD5 4704af88bc7bcadf99ad4a44f8243925
SHA1 b0ac5ce059ccd69368e22dd2e58debd36640c32f
SHA256 370e5cc611d8be76062386ad87fe5e486e9cf2a39bc2011b06dc730f3d9cb908
SHA512 2938691d5822216a016b016929650c1eb56f147ffddcdc282a57c79e6113abd4fa3865148aa334533df566775423c8c7c22eda410f709b027ff93d15e597e8f0

C:\Program Files\Microsoft Office\root\Office16\PROOF\msspell7.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 0335244e7be17ad594cb549fde26926f
SHA1 fcbe9d9a9f3619a11f37e8dc8d1d119940056a71
SHA256 e19a7e562f7881aed5341d67265b17f469770fada96444c119b36601074ad2c8
SHA512 01035bf1b7eea3cee4820bce6c58caff4e502ff0fd548f5140e6bd24cc852ffd1ce167a239215d03fe30b808004cfa2b9d6e51221b5d026d033c7ed66c7492e6

C:\Program Files\Microsoft Office\root\Office16\PROOF\MSSP7FR.LEX.(MJ-HU6315094287)([email protected]).zxc

MD5 0897b61f34fe043fc7ca1a1f68972cca
SHA1 c79d78f0eacbf111e010e38746e6a47096516c37
SHA256 82eecca7457da2b454330a938c415a989f11841056c1f043ed53f82793fa8bb1
SHA512 1ce7479384848aa4114f46368b48bf7eb371afc61ef5a3d50b2d45f989b264243e7c38466e53305ec5e0abcd1289230d2f08aa5e7cb58014c43867b5031b4699

C:\Program Files\Microsoft Office\root\Office16\PROOF\MSGR8FR.LEX.(MJ-HU6315094287)([email protected]).zxc

MD5 270a1e5ff563239a5e9d7b7163873c41
SHA1 8078f6ab1d0ad3a0d261e2625a2978d99e63f2f8
SHA256 d47cc7cc34b80e23b6f480843755730b07caa87a007e130e3de3e16795c72fb2
SHA512 d753f6d0aee963bcab4e335e7b076c90ed570747c123e3376022ce2b849e9632e8ade6818774bcbc0a98e3b44507d417b5d2fcea0abad50583f87e410f7af739

C:\Program Files\Microsoft Office\root\Office16\PROOF\MSGR8ES.LEX.(MJ-HU6315094287)([email protected]).zxc

MD5 c7dcae7f232a0ab4bfc9a25a13ce1269
SHA1 bf20f152eac8f9f246df3b55af26e20610f25af7
SHA256 b3427a0d874d1f12f9287b462ece87c333152b879a24285fa5db504400e74deb
SHA512 619e707da119616afd02a74e2d0c3ccb5c74f06b0a6a074a8def007aac80c3ab69b0d603f3a979c5b0a3c6e2c126752421189d39638d52d76ac705bcfadd0128

C:\Program Files\Microsoft Office\root\Office16\PROOF\MSGR8EN.LEX.(MJ-HU6315094287)([email protected]).zxc

MD5 ffbf7b9d10f9a920511a01db961d266a
SHA1 80a24902bbd78011efbdc1d054d758bdf9b665f2
SHA256 25c0c65757930d63b06e03d35a99f7ef9727d217ebe942ae3f794e592e7d9fb8
SHA512 cc647018eedc9651ae060a6e22cb8aac1de13cd237d1f3327e0f234676bf30d65c222f6fff03cb065dd9eef1500cd72a6011b25f6ab9438124e6fb4125fa2f70

C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL110.XML.(MJ-HU6315094287)([email protected]).zxc

MD5 64f800d7532665c723a25388d4a63646
SHA1 6d88cab3eebd3e09c5c27a26c61d5dbbfff53781
SHA256 25b50d6cc9ec22fed2de2504373a7182821f8c3c44fdd37fe06d9a7ee74b1d66
SHA512 e32ec6446325c838bfe7377a340ae9c5638f79e15e1e0199fbfa2d3ad5c38b1983eb45a93b620729a781924240e1fabc0a2a773e62bc7d237ad36234f53bc08f

C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL086.XML.(MJ-HU6315094287)([email protected]).zxc

MD5 62244d7af73c0f7f795772353c1efdfe
SHA1 f9a4b38df710c875ca66b3e217f6a91669d89bba
SHA256 745e7b7ecc1dfc07ec90166ac9c677bf886a5528f1ecbd306f5ce15432a110ba
SHA512 449ff80de7d482e3761930cfe5c10279036b6fbd66f5f11af809328d5aa65512628647433f81e455c6b2468c01c5cfb1de09b80306f90cdaefc7873565851ada

C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL075.XML.(MJ-HU6315094287)([email protected]).zxc

MD5 a82b06ca89e375dc5df2efacbfcdd5a4
SHA1 831a026a3b8ef5f5233f30e641539f78f1e7edb7
SHA256 8808917b0aa244c409d9be5272caa89124cf893030b35aa5f1c31167664f5354
SHA512 6164c3c5db1da0109d40e0f061eea3d2fc718c2da606e41f24f2467b92ec6ec957862846768bc583dafb683a925ac68182d5293b3e15e8ffd285b0b4bca69db5

C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL012.XML.(MJ-HU6315094287)([email protected]).zxc

MD5 080f22a8d051e258313f80d854fc2902
SHA1 a135b69f8ed455c1c66c67856f841ce7111cc1e8
SHA256 416e3219d77188427b70830e227588179233c03261d5483c4d94993bf777f4e9
SHA512 486d28d27b64937020e6351d6c58e5ef6fd271c064e106446f6a0968a56f7b28503fee84a2277c17cc1abdab4a2b65a33de9d1b394d01c187f43a9dcc27e32f9

C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Riblet.eftx.(MJ-HU6315094287)([email protected]).zxc

MD5 c9be6c030342fcc63af4b247531f30d8
SHA1 0c0825378d76cc62786cc7c5d928af9559fd394b
SHA256 86de22a9576c39c4d4a24deb394802f795c8c9137bb4a3f808d5fb33aaba60be
SHA512 a9bd55c289f1e3a7ab235d01e958a3881fecc48d361375791855da8da437e031b64ff34b2cdda1c1368a3da1d8a5fbeb81fcbe2da74dbf78f8781fe8c3f4ef73

C:\Program Files\Microsoft Office\root\Client\AppVDllSurrogate64.exe.(MJ-HU6315094287)([email protected]).zxc

MD5 b8ad4c7f6056d6d7d79cbeb8bdd00a44
SHA1 6955d9399588d0652864010ff0834b528d9a3bf2
SHA256 4fe2e6df3727909b8d162117480caa1b61c8f07f1cc9a118ddd610241ab3f697
SHA512 6562223e7c8b0677ee4c54e92c65077d997df9dfb23c0d2d5c5ce67a8b3d95fc28d687de27174b1fe9e7e261e06366aa30ee2497344f71e467d22ea96e303cf5

C:\Program Files\Microsoft Office\Office16\OSPPREARM.EXE.(MJ-HU6315094287)([email protected]).zxc

MD5 64d4624bd7b4691ee281d3d4dd56ef84
SHA1 66e13853a9250409f6892fedcfa7f56ada6e0872
SHA256 1a9631f401b8bfd3fd0376f73f9e9999b00102404a3f4b9bfd80da2c0b06214a
SHA512 11ec2bcb798e9ccf9b071712ca412faef1a5903a4369e593ee72a20ccec9d47c6a80d973668b967fb5f7e9e8822e236ffcb3291d3de7e9f0d35168447b6cff16

C:\Program Files\Java\jre-1.8\lib\security\public_suffix_list.dat.(MJ-HU6315094287)([email protected]).zxc

MD5 65aed9cc765c39cf00d4f9ee43096769
SHA1 8d3031fbdae05d41a62ab3f3475722d21d9528fe
SHA256 43877429cc8b168945811524e85bce8a4870df21fea1bff394e485576865783b
SHA512 1e5166118d60fd425201453d75f3a7e03ec1b2192045eb796c73fd0179caae77af16764537464d63f155351a9599b4fdc4856fbac11925461397f14a492e6279

C:\Program Files\Java\jre-1.8\lib\fonts\LucidaTypewriterRegular.ttf.(MJ-HU6315094287)([email protected]).zxc

MD5 8c91094c491519c75bf30401a39a106b
SHA1 55caf77f6da098aa75f06fd519b7f7877fd0ab31
SHA256 3eebcb3995144a892167da4eb5dfd9040973a7c9b56c8fc3000d391368472a51
SHA512 822865e18542bcb19ecd8337ff47d9021c2ef730d413fb93e9d1a567f333563c81e7071dd421b3a1d6bf40ffbd8fdf301df89b8baa53cc0b9c4235928fb58e6a

C:\Program Files\Java\jre-1.8\lib\fonts\LucidaTypewriterBold.ttf.(MJ-HU6315094287)([email protected]).zxc

MD5 4c651b1233823ec3139f1f67cca5ac4c
SHA1 bcefed0f115342fc99f9cac501c6613ceace0722
SHA256 d32568c7cbbb341d7a824bae5a3d7d2da3ae0ba1d9b23bd2737b17296fc6fedc
SHA512 2ba7b3abf70ebc1fb0144aee020d196e54a8969c9603f447b88d9374091ee11074fbd1e5c439013be73f571982053d403bd429cb8c388e34da7642ff545ca367

C:\Program Files\Java\jre-1.8\lib\ext\sunpkcs11.jar.(MJ-HU6315094287)([email protected]).zxc

MD5 2facd4c4b93be071d3274809d40afc12
SHA1 84d011f4916474d65d1d91f0ce347cd173131ada
SHA256 8e2d9dc79aceb543f3f93fad2118c2ef0d2999e3f7f1189d87ccc54b2d30f5cd
SHA512 e9702358e54b71c12e6ae3c3da099401a459c862ae41de0eeeb1328a759bdfc5b9654a3d95e6c8604d34dd971ed1ffb23cb7f1a8d22a45962aafc718c92b20a9

C:\Program Files\Java\jre-1.8\lib\ext\sunjce_provider.jar.(MJ-HU6315094287)([email protected]).zxc

MD5 3c94ebf6883e0d8a39adb7c4df21124c
SHA1 5d7d924caff0dcbf106b639c721871b58ded537c
SHA256 e0afbccf0e1c6217e1bf2504ecb84818149ef2c0e0deefab14d766d33ab01085
SHA512 1dc6f3efd284fa9a7ac74099909ee832aec0f1282d865acad03d68b569341687ffb85110af759d96770b2216eba0ae2df8528a90f4dd9d366d320c07c7b7610f

C:\Program Files\Java\jre-1.8\lib\cmm\PYCC.pf.(MJ-HU6315094287)([email protected]).zxc

MD5 315e8721e4ace9f88e47695a3829b43b
SHA1 414274851cb083112891a131540d5df19c844ee1
SHA256 293dd88c53146eddaafcaef5b30cf282e196b468e6a8f309f56c4b1fd77282f3
SHA512 0ee87f1199b80cdca4d04035d0e51d7a23a495b5961e812a5884d2a4022e78a065fd77cf523a7de5ec828b8352c3c468429108da7e2672e2c652132a18a842cb

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\Csi.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 7e39d14e7a6a001852e7951473abc66e
SHA1 870d1c46de5ab53a1097b81b519358573977e18c
SHA256 8825f372f3272762625d70b11905b65cccc8b6022f7f36e5e2651ef2cd72924f
SHA512 ce96e3174395586bb26495289127ff60662bb0191c0ec9393903dab29f80e6c78492702dc635bedf0e47610a2b55600d0e0a625c4651e1f6ab452c3ad83ae4a8

C:\Program Files\Microsoft Office\root\Integration\C2RManifest.office32ww.msi.16.x-none.xml.(MJ-HU6315094287)([email protected]).zxc

MD5 3a5e147c504a0b83fac708ff986c4271
SHA1 72bc6ca4ead5267f506d5145f7443c5380d8d6c1
SHA256 6c524b4152c59c0d6f00f966b3ad88a3ef82918af8494ecfcb48b67600ddcfe3
SHA512 57a5c8a7ba78a52ed3b14a303b2bbd00b59cb7507e422b20ec89ab78f0c06f8f3ca3537c37c50c2b79c71c189b042bea0b9d7a50a8400946210db164b05622c9

C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL64.DllA\libssl-1_1-x64.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 959eeff5e5d737e1252a275538cd845d
SHA1 a90f842da3c6659796c3c19c340f390e06fd4534
SHA256 52dba2d1408b8bdd23cd45940956ff8c894c75659e433de9bc51513cb8734c9e
SHA512 4c0d1712fcd2cbbb5b05c5bd32fa9a0a59693c71a9670f57483c478c38a7827a1ab96b8c43a5fa7b9ee3c13c1d7b8d071b0171e93b6236eff32adfe67b9d3a71

C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\sfodbc_sb64.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 42e0e552c731eaf0e76e0937d45cc96c
SHA1 3f2883bd3e8f9ea3dcd2d8dee31942d6a0d5692f
SHA256 fbed2ca95aa1587512ff6d51a20d52e0aba5aa9fb4955b7326d7bca8180735fe
SHA512 8e33fc59212856086d49f3206d9006fca0af96cffa449fbe30461c2488603480ae873e7e33b395b3ed95a314557f8064a10302ef89532e3416a6867871e0ce66

C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\sbicudt58_64.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 1c6d224f5f56681bd07833c8e61f2306
SHA1 897be33bdd174ff08d98f74435c2d1c69fd95c6c
SHA256 df0e5fb1c772bcd2216448744c0be287c1b737fae6c56a1a8b02ff323ac18b94
SHA512 4a413575e172c3526eff71ee6e9eb226aca0414b974a9bb5224ff51741248c77016e14f0cff825d5522eb7d4a7429f84b5c5d74b0c92e26244ed884ad2520934

C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Redshift\lib\sbicudt53_64.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 91b816a00385b90a06b5610eea80aa59
SHA1 9e96eae33790d217db3b7f6f6d957807eea8ecf5
SHA256 ddb348041c3ccd61ac62aa0cad72ee208867a349bc7621488e5ed3542497eead
SHA512 b736bd77cff74ebb653b4e12b1dae8fd0800aaaea476536a39dd218ffdeba2117288002f03c338da678476fbb7fccd9319d6cf9904a9293425de68d21969147c

C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Redshift\lib\amazonredshiftodbc_sb64.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 d66898dee4fc8a741fb88ffc10a5eec1
SHA1 cee80073c1f08f2b9e3ad3b67d6329bc92ee1911
SHA256 78e88e0fef6a20e24073244c1b1e995ae13d906f712d9a49897593f9f2d64db2
SHA512 066911b1eb247c155c526898729d09b366b0ba4fe3e3d0a8bdefddd75cca91a53d0339e5ba63d607ea27d6310d1179b8a60fd775f889f61a775d02d09bb5473e

C:\Program Files\Microsoft Office\root\Office16\Library\SOLVER\SOLVER.XLAM.(MJ-HU6315094287)([email protected]).zxc

MD5 7408644a1933736021e2133417d80886
SHA1 65d4ea124a38b81b9f81e869d592fa060168da84
SHA256 ad03733332f80c8eec747a59190293b8069877e3c6e12d7117132c1ba5a73bcd
SHA512 d62da1b4d40f68576124f1c8ce017af4fd2fc84e5a581013af4643c2872628db11353b181cddd027418ddbdb8d3d98e465d0ad2c2ab8f5af0018541e6afcfae3

C:\Program Files\Microsoft Office\root\Office16\Library\Analysis\PROCDB.XLAM.(MJ-HU6315094287)([email protected]).zxc

MD5 85e7748b079cccd204da95a6eaa635b9
SHA1 ae362e9e46d3d03166437b03145858cec12ed09c
SHA256 38c6aefc03f9b14382ffddb17183b0fc2100df31a2fa9ff7616baa9a03ad8331
SHA512 0244fa1f592b2639ee0beae76d83073489043bd0218ac1d52b8af2acc27136739c139fae778036dc46f87638497655c55065766740e27687fa838ec9ea551ce6

C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Grunge Texture.eftx.(MJ-HU6315094287)([email protected]).zxc

MD5 7bbe3311bec91a26066f3e16fa3937ca
SHA1 27509f62027e58d42514b90995b82b6fb6d4f473
SHA256 b91c1538bae11d38afa9b0a4e25a9d43d444bfb797c7b0f675dd3c8261e19409
SHA512 7e14c89636e31b247b02401c7e673b9b6c5770e0cb02e1390cebcde5c3e16db0438d1bd0b22e45f78a9fc22a0b25a80d66152a87a528364985c94ba70c490453

C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Glossy.eftx.(MJ-HU6315094287)([email protected]).zxc

MD5 b1aec3aec6dd3a80ccdeeaeec58693a3
SHA1 36542cdb193f1bcf46d7228104934a04bcf82ade
SHA256 f28f718c4192efcccb1b577d640d9d38fe1dcf39958ca2de5b338e443a540831
SHA512 b857436207e102cdda3d297f73d3bd1be5c51548a200b2d03b3b7867416eb96f74e7a518bdc881ece3972fd2601eb5a3ac47a8fa659606a590528ec10071d855

C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Frosted Glass.eftx.(MJ-HU6315094287)([email protected]).zxc

MD5 7af10d22275e44a05ef124bdfc62024c
SHA1 1cc013b370c3f75e2bad8add633ead6f98a00bf1
SHA256 3966c70b294f0a233e6aa2e873dab1877a1855d398451660e5a5b0bb4ed17a41
SHA512 247a41889bb5d1005b0ff040f9f407c87932ebb7ba0ee790234d4a3c164c1d7533e7065b617c20bd8488634aca4d0f804c865f4452bc5ac3d7aafe0034b38a94

C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Extreme Shadow.eftx.(MJ-HU6315094287)([email protected]).zxc

MD5 9a0c1fb13adecb8718fba801b4defe49
SHA1 a622e41e0bb67a99c486be2fff4517f9282649bb
SHA256 e9846e01ee0017f0de10061828c142267fd6260b55538d6ccb601904bf832d9a
SHA512 fe47bfcb1b85cccab4a2bdcd50cef78202de358c15918c54d46f63beefbdce83175c2af22e6698091c21ea29555ff51a3bb7b90ebc32349973ceaa8ab640fc36

C:\Program Files\Microsoft Office\root\Document Themes 16\Office Theme.thmx.(MJ-HU6315094287)([email protected]).zxc

MD5 547411fd25fab5d787075cb9a39c80db
SHA1 1822ab96beb9b34f77086aeeb759de568731cab5
SHA256 6c5474b73d1df884440df8177fa432cbfa10576b01c8e5dcec79fbc5cdabc662
SHA512 fec253152e26c9b99984fa56951c9318b9814737baceedd723a808b188e0886d85c9188adce5f81e93d1120d140fb730ce9434387d2f4b9bb543893462242fd4

C:\Program Files\Microsoft Office\root\Client\AppVDllSurrogate32.exe.(MJ-HU6315094287)([email protected]).zxc

MD5 d2f18298402b64e3c9f79f144ccb296c
SHA1 3300c5c0311964861d8d9bf0f26fcc45bd1ff061
SHA256 7d99f7cac3f2c6bdd43d6497d058c70eaccc9c79283f322802b628a82045fffa
SHA512 64e00ac3c8971ed7487638111cce519aaa58ada20f5d94aefbcdf42352206728ba49dd3bbe419e76f7e8cf7eff792c49e8fc6e9490726be47a0a41a00eed0c68

C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.AnalysisServices.Layout.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 fb8c3c448c86632cc41da817681c0173
SHA1 60fd40e95ae23218485d7430a3dcb98a3a3b0d67
SHA256 e966327296a2b0154002774a4d1288c341d751db65877909653bdb0fea3464a0
SHA512 6beabcfe054a549cdf2ac03f369595cf9991658e4722b654e3e4df0a76d1056b85a60d9b4c581b91d95f4263ccb22fb8c4e761a6ae00f2521da86803dedbf854

C:\Program Files\Microsoft Office\Office16\OSPP.HTM.(MJ-HU6315094287)([email protected]).zxc

MD5 aec8aba02e7d11a8570c58b33dcc233d
SHA1 537cb723c812431acb9b360193491484edf4c331
SHA256 eeb8aaa037f70fe4f680afcca1a80222314714797a2c06b15b0ecb2a033f8ad5
SHA512 a7fd52998e2f33d97e06b84588876189e4002bf23cccf4e3763d0eab0e3e4f0eb3c8c46553a9ee6d15f3f477ac53e4758283796c3b0909b9ee6046365261ae03

C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.AnalysisServices.Excel.BackEnd.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 d11f2a03deda329e561e8e93db524eac
SHA1 dbf228b88cbb0cad36b66e572644b33203eca9f6
SHA256 bf55dc742d342f13249f2c56d322676801af42b6d8effdb9cdb160dd6d433774
SHA512 c98ac77916833bacb8187ae2e443089242f1d7ea824e45059ed1cd3e1a20536f09e54ee4c557a0c1d3fc329d4b5e59ddaee0542d7896295e76919bfdab316ce0

C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.AnalysisServices.Common.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 70fdecf3ca78466c939494a0238f07b3
SHA1 f4446727177752f26f103accfbcb2f75c70b1e9f
SHA256 c54903e52990213b6b7abb410b0a690183c586c4cca6ad10d31e64b248ab90ce
SHA512 3ef2fc1aa5f84cae362c2a12d005d8465466033dcb58af4e75643c27b0409379a9ae0ff8a0b2106c5112f2ea68998f02df3af0aab8c7d57240413d5bf3a7925f

C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.Reporting.AdHoc.Shell.Bootstrapper.xap.(MJ-HU6315094287)([email protected]).zxc

MD5 27717930538c00f64a8706ef5eab2ec3
SHA1 8a294f9d915a55ed8db2e0323522c51cb292151b
SHA256 72de7ac89839373e4adb35378b972e87e655955c06f29abafa840e0027f4a094
SHA512 97488913a1653b92d455af82ce1190fc867637d65464b962c16383c5b19d56a44997804931caeb8d9dcd42b19bc9119b8300d66a5fdacd70d2fd961f225e4520

C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.PowerBI.Diagnostics.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 efb1ffd71cc03d90ca3bc1c8d8114109
SHA1 bf8e4172a6109d70808c46450c17c1b2c9bc8348
SHA256 0f8b145aa48d51d627b96f6dfbcc8cdcad93aa56cae821bc83bb849cbdd4b7b4
SHA512 96ccca6a7cafc7bf2ee4b0eba8e1eebc298e0f26a840dd7aabf862d0e98772f3ab5ff878f7d1b40f75d559725ceee796aba05a00769397f67a22466a40cbe445

C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\VISUALIZATIONCONTROL.DLL.(MJ-HU6315094287)([email protected]).zxc

MD5 184091ad6a673f3b02ea9bcdfe763f19
SHA1 1cb830ab7d593577f1bfebc9aec1681ad0ce4a55
SHA256 7724b30e777ff73172a07f4cd58c9941dbc2f7f366f05dedd52ec3b834021d83
SHA512 1dcc465e30b4d5aeec6981abd0b5f9c58f7d86f6277d4250924cee6022f316c395ac5cd52f05e9362c47cc42e6535a0e590f155ffa3b9b3a9c266bd6ba357a97

C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\MICROSOFT.DATA.RECOMMENDATION.CLIENT.CORE.DLL.(MJ-HU6315094287)([email protected]).zxc

MD5 20f187be5f649b888f83f7ff52ba4486
SHA1 f745776bb5496a2bbc54b61e87fc5c823734dd33
SHA256 6b417ee216886bd3d20bd67723f981bd80ce0c3f48e16ad002a3d90ef2831a07
SHA512 963f71ac9011c73c18d8f1cd106b6256f2026158fd817e50352527a41170280f739a04f3f6f1ac74acd25d600fe2abd1776ce46b6c727ab08ec7f19ce398f7c5

C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\EXCELPLUGINDATAPROVIDER.DLL.(MJ-HU6315094287)([email protected]).zxc

MD5 1d226bb52efa2ea76f7c71af3eb15b6c
SHA1 1c99d4e69457d48f0086248812035028fcd1528e
SHA256 17d2d722f31c9e244fb6f6ea5df0b2f610f182f19e55950353ec16f976574007
SHA512 9e3125f70c22da7828304469d4edb9dcd956856adeb5ace835d5f310bc4eeffc4ecc2162c4276e70b2945af3c30111c336d1f40dbf3ab2c2da3b7868a6041338

C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\DATATRANSFORMERWRAPPER.DLL.(MJ-HU6315094287)([email protected]).zxc

MD5 dac84a03bb63dde98e24f42f46c6a80e
SHA1 07cf12dca1105eaa72fbd8a781fad8a7c9c5f849
SHA256 06ba962ce7c4f7b02a4d18a68c97b794ef62629cac65cae945b298e7544b0f33
SHA512 5f368e35f19049b32be2f5a1603e1636d6b083c13c028044320abf4070b72d9b9f9d7e7192aa184c6ac1b987c40b1f704b54f8658fbfc1933a68de6ae342bdb1

C:\Program Files\Microsoft Office\root\Office16\JitV.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 8468013e9f3008f4d8d6f1d8cb7e7787
SHA1 ece71429b233096a0e8bcabec077c4d7775e4e42
SHA256 8d25b02c3852ed010c637444f5e2d53d200474ed205043b9b96cf896f846c0e1
SHA512 7187595905a828c0c4ffc0d36e708d0152f669cb5e51851ba59c41673f3c862a145d66df3f3334656aa38e405e6b2387ba877215e053031e577279fe332ef81a

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Private.Uri.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 49d08842e7d2af4e50b48896364dcfe7
SHA1 09c9dce5788d76c91148389360be608a17003241
SHA256 27637314ed4e176c1bce7a7d5a9c8b8453429964de0b483cda5fd20ce09f33aa
SHA512 b1a95ea1feeeef76f905337b59c3602c6efc3c81ab6741c66b50bc3a98b328d1707f8593a7c9e7b2eabc7f931b9f2cd5d1f24bcb893234846699a621a8bed595

C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\PRIVATE_ODBC32.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 cfcf2f999400db6e05482a9fed755928
SHA1 7216e7315044a25e53b7ff895b7493d58dca029c
SHA256 b3d12452e23699e7ca3c32d0d2ed23ffc2cfafd81aee08496ba0089d95bd7cac
SHA512 248421c3e982ae4adfe1b55ac9740c24a05130e8116db0db97043fff814d9a20ea62c55b418cbe68b15455d82d322156e865afe20df8722eb4427ac9d9457360

C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.DataIntegration.FuzzyMatchingCommon.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 991a843c71f4ffb1ba219ea683d28f3d
SHA1 5ca149216f77fcd08cbb39c698161d2d626c6c64
SHA256 b2e2534662e94c08f93f41d4fc929aa72fdf00e8b9b7656988a0f4eb68f26ab1
SHA512 14b77146ead273aaf30078852ff40cce3f75fbacde6a24a38f483985ae99c46213810b8bce574da7236490747a02d17f8db647816b9d5b0aac57e3564795d5ee

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Collections.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 27f4bcb563bda1c8912c6b7250177d05
SHA1 e1d0cd65aa61cdb88b7ba493130b7db03fa7ecde
SHA256 8edd9fa1a67cfc0817b3a951fe0a549103930e258ac680538e80de4a7b7d7a0f
SHA512 a63bbb1a078594ab09b981e5a218b837471cdb28af85cd61dff423913bc9296755531d6ebb8474b4573801fc6f9d121d34cd8db3b984671d93b40cddc9540178

C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL048.XML.(MJ-HU6315094287)([email protected]).zxc

MD5 1bbedf318fe8cd93787e1dfd5c947be6
SHA1 e62d5fae3922d3e7472db8d23aecb7a3d207e808
SHA256 b951a153eeb8cfa3de6bd35893cc47bb38390b457a865d9f1ea9d059218f9a9d
SHA512 887c9a587dd1c1d114acaf9209ff996033a6f56e6698522eb187a6028e0318a03f5559711e645011403a94f11c1f17c1808fd1e691f949639ea2e244b24f3223

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\mfc140u.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 e510070e4c9f7afb20f756301cb417b8
SHA1 1b81b4ecd2a6d47f077424c65e875a812f675d78
SHA256 ce1d5ecbe3f54366931348b9cf68d9771c2b19b79c293936291d373b8c1e292a
SHA512 dbb60bb517f2ce1c54584a368ae1eb6d5b3e0f52d33b0d9f7a4eb0ab5ca3b634ed41b5eac3da2bfac63b73c6e3c0ffac65ff03114807cdbfd88676d5eea00e3e

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\xmsrv.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 977c477b280125a9f211cc78438c0d5c
SHA1 7fa69e59405c3aed4ef4307cf9b2a3d0fb897d25
SHA256 02e8fa59a95cfca69ff149db961c5b096ff3f5fbf4c35018034af05b94991e14
SHA512 1521643b735fb967e9ccbc531ee699d4427ce5c13c192f6ea43777e1be5a4de92ef12116859f241c9f38f35500a52ca464bf436613229c6b3a52d053f8cb0e21

C:\Program Files\Microsoft Office\root\Office16\1033\TellMeOneNote.nrr.(MJ-HU6315094287)([email protected]).zxc

MD5 7d1b4e2a8bf63a21fe3c97addcc9cc7c
SHA1 102f210cb5838a63e34cdc0ba038101fa97af607
SHA256 af543c37b49c334e0f6efbaae69173b722bcae88c42a4188b3085599310a65dd
SHA512 9688c7822d74af1b2a4404779028d88d96a9e9bc64a5c715a9f176343e9fb2f3fff99f217fe6c9bff2d4852aed05512d753e23191521b61084d58d9988b08e4f

C:\Program Files\Microsoft Office\root\Office16\1033\PREVIEWTEMPLATE2.POTX.(MJ-HU6315094287)([email protected]).zxc

MD5 ae7f6b5e06e04a1c6d35cfef79282ef5
SHA1 21eb78b07c324c596bd96ff350e0501ced0d566a
SHA256 07781182f7b8a4360c829ede77ca267847664d96e187e87ec45b582ecf2248ba
SHA512 7e685ec1b52e1a1b3d390e059ae75796dc203a72f527d03d3dc12665291abd6d0d88d9a1d122b173f4f1474d2b0db411dc0c0079cbaddc0eb3889591ae859d90

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\1033\GrooveIntlResource.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 447af125914f3740f480c69ea7c6fcf1
SHA1 b98f2dc4bbd69aae29f0d059a6af32d6205b6763
SHA256 c07169e53931f9f3602fddfca9e235ac26df404a449ba62b4c78dc9eeecbcaa6
SHA512 e4afe506651adda897f944bbdbff60e7bb3b9436ae372a079d1372777af290f4e54a62345540fb837cf3bb0ac7c520b3d2690bcedb88a297a079ca50fb3fbfc6

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\en\SpreadsheetIQ.ExcelAddin.Resources.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 4b6b200efd4dbe6efcdbd59950ac99dc
SHA1 c6abd3c9cdb9b6cb480b9a6aea25de5d07800b6b
SHA256 9acc6d2247e1c50e9749dca6aff47300cbfa7a7ff83046ce7f8fd77642382a10
SHA512 a684e44f52b8cc8b0e6f3eb5a7ed58a25ae1b7a08f8cddef1de5f44f15f09ad71ca7bd1dbd1b8636b9df8ed8431ef9db0ceb28fc6c58440946b7f0686168392e

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\SyncFusion.Grid.Grouping.Windows.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 3d7432f54c530615481f79d8a906203f
SHA1 27cb0d9c1e008a927169f75b9aaa816ee2545f8f
SHA256 00449678f6001313a3a1b819c5614537a1ca80448b6bbbf25dbbe9c2dc0b01b4
SHA512 b94b238a8fe3bd2f90e91d6f9473a40b0ae88d7e554bb4ea4e53ac7b77500bde24701365511448d52224c6306d063e3f81e18b670bca1e379ccdf4376f9b258f

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\Northwoods.Go.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 4069ec1ab8e3617854b5b895714edd1b
SHA1 9448c83c504babe051b2866d61925cf2766d41f5
SHA256 c6fc95ae70f328ae640899fec96a093628ce1ac04a4176ed39713cdaa71c87be
SHA512 5857ceeb5f14bb0d3857e3a7e9aeb537c3bcb12dff44d56892ce347c1cb02c547b58110f582cff4f914304f7c7415b5ba7db8ccfd2bbe8e518031daa5f5568fe

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\MSVCR110.DLL.(MJ-HU6315094287)([email protected]).zxc

MD5 2b56b7c4bb981401ff27b7a9e62cd3ed
SHA1 24afb12d118cce86929ac6610e93efbd08f98ef4
SHA256 f0aaa47fa95ae8758e5e698f395aaa96b859aef3dabdc960815f66a04ed7af0a
SHA512 edf3230f0b47343cbd350b5886ec21c45471bd8ae7c33b398c5a63d6470fd73f4811c5bdf6a0c45d4d63528bc494d5d950d50894ec04d9525adb2ca1a08e5df2

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\Infragistics2.Win.UltraWinTree.v8.1.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 c13632a55d0194108312665053dca259
SHA1 15a2de54556a080d07c3b5b78c23dbefe0d07c5c
SHA256 5908020f4cf553a3d83fc7840656715a26a8a3f7be4b6340b113b3500d1c4983
SHA512 72b13397dc41e3497cca7283eaaf08246b02e646b653cc5a1fbef464af0f6eb2498b1ed34d846f9d5c2ef5eea14a07f5f7342ea3a0736a507b88f3ba8d075d75

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\DocumentFormat.OpenXml.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 3562f10a0a417edfa82f18e650f65658
SHA1 bf48a74a8e5dfa008f867088a8c94074847cc422
SHA256 8ef7b3192302fa6d20df2ff162383fd05ad9b7d5abdc21299e5f69ef63b015ca
SHA512 fe3a45491a9339cbd4f978626c6e2d1ddaef2f9dca27637edc46c3601b884bf8ad4ca75394bbae1438bd3189c6c7d6cc35a17e539fa2b296c3c38e4537c4209a

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\VVIEWER.DLL.(MJ-HU6315094287)([email protected]).zxc

MD5 ddfe0c209919f10ffd901de0ee4d85b0
SHA1 1e9472bd1400edb871de188216a8492dd5a2edef
SHA256 0004d1a925b885d23074f57522483df229df215bf1f541151cca0b4ee12a4f4e
SHA512 006e790e46739287b5726d8ed4f2ccf3a8ac9d4e60615ad9060b8d8141e88d534dcb914923dc6c420d8e14b2ba132bf58e77ef618616fddbc66f30fbc01f02b3

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\VVIEWDWG.DLL.(MJ-HU6315094287)([email protected]).zxc

MD5 720768dc6eaefd404169e0eba4860cb5
SHA1 6e700375d1e8f4592e45fe7787c65436a30e595e
SHA256 bf5bb32eba3ae19ff995cf1980cf48546bb10401dd419f4d85fb527610b84941
SHA512 f89b0bc9d6d82c6d26fcd8096cd6daec01222294147ecfcce5167f68433bb05b6167cfeee8fe2056da2b556b06a43caa465f458ea2bce33dfd5752c37bded44a

C:\Program Files\Microsoft Office\root\Office16\PROOF\MSSP7ES.LEX.(MJ-HU6315094287)([email protected]).zxc

MD5 60903442b047fe461f170e7fa37d3539
SHA1 28a149015f3c9435ebc5b8f2d16669fc0f59bf4a
SHA256 8af31be365c5874fcd5796c22056b8ba7cd0f000427d6f13e35ad08c44cbeac4
SHA512 d45c4036ab9dfe3d3953e5f49d30e03310b80152b8bc074a0f95700c62e8f02c1620173de7192ce8e9126b1707ce4ff5295eb41360cec9658175b32e1580ca70

C:\Program Files\Microsoft Office\root\Office16\PROOF\MSSP7EN.LEX.(MJ-HU6315094287)([email protected]).zxc

MD5 a39f9cfa140bfb787d216e350cb13d9d
SHA1 80e3d50d6fd513541d6c3307cca2fba98eba3001
SHA256 749f92cd27a44c233aedc7e44ff232ab1da0a031c6cea0ee993695167f57f2b5
SHA512 6dbdd6520385aa42395d704df2659cf102bf653253d747fd1fd94e0acd6fd3408ba0b65e0ecc15dacc9736ae9ddb47c1577bc2782170b9bfec56fd37e41c96e0

C:\Program Files\Microsoft Office\root\Office16\PROOF\MSHY7FR.DLL.(MJ-HU6315094287)([email protected]).zxc

MD5 a31f2bc1af12d837ddcb31c31bc1c813
SHA1 d5f2108b135a822d5d01593e4523aa3f45a5a53b
SHA256 64513eba092ae0ba444eb7b979dccb2687908cf4778eeef3f953ca67b2e7c6f5
SHA512 3d8d27555be9039d32807bd7c5b6fb63f3af3fe6014696ffa76d54365ae4c030443b059519b55525912f06f45bcc594583e941f6e3dc0d67c64967c61aa599f9

C:\Program Files\Microsoft Office\root\Office16\PROOF\MSHY7ES.DLL.(MJ-HU6315094287)([email protected]).zxc

MD5 5b2f0a1fc49bd5d75caba9a2ccfbfc5a
SHA1 08257ca529ad084bd6164346fdd2506d953066bc
SHA256 ed7890c17429fa1a2b35db08d6bf596da86508c97005264ca34903ba6f215e4f
SHA512 5557d6c34ee83b506231c0368a7833875e780e4373e0488067539e9f651c00ba187422c19705fac32d5172ccc28e1a4557e6c66d9e906a10ff690b250e6cdb4d

C:\Program Files\Microsoft Office\root\Office16\PROOF\MSHY7EN.DLL.(MJ-HU6315094287)([email protected]).zxc

MD5 76141dcebbee9b42e04b1acae9484acc
SHA1 795f74172ecd05e40a0212100d67f7adbd29b4d1
SHA256 343dc9f911de4a881250ca563260c6df843e53fd9208319832eaeef6ad247d26
SHA512 db2deb0703dec0b283f5d29b8a00c6bf3c63eab7ef2df1915d058c7c64633d50acde47cb068024592730c6d29346dc12c8ffbdbdf61958f5cdcb0df6fa76faaf

C:\Program Files\Microsoft Office\root\Office16\PROOF\msgrammar8.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 770bee9e97535b14fd8adec0faf3a49d
SHA1 b8b4203fb6cf66c61e53d1607202659f11217663
SHA256 dd8b485961f80abee27cd2f0ab25f32a4f97a8b86c4103a87ade6549ac063169
SHA512 42211a907c9bf37db04d75aea00267e9de944f5adaabea32787f0520c5bcbbc02100f047b5edd6bd4ee2552cc644bb505269e87d8baa9d347f312de26d325898

C:\Program Files\Microsoft Office\root\Office16\Configuration\config.xml.(MJ-HU6315094287)([email protected]).zxc

MD5 b15640adbb3e643041f02d40934bba9c
SHA1 258a1482d28e0f9f18231377bf0094f69530bc9c
SHA256 1ffb408a03f47c484fab623ea6454e0c62792d93bbcf1c4c5203f5e8d8f9a5af
SHA512 446d945e538688a3933cbc2416e854ff04ab87c125073c9f144e54fbb82214ce06db6f75647150b66980504d2ff2e4b15e08347d0483e3355b498370d5c3a5ce

C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL010.XML.(MJ-HU6315094287)([email protected]).zxc

MD5 49f9b9d12cb9e0730a6010d7c98fa2ed
SHA1 f6d9b8f89e0288da7181e29e8416dc16438bc79b
SHA256 b0c648368dc3ebd6f7d745812ba04138a13f3a76af5d41cc9029e9fa8169530a
SHA512 a2894ac353b6ef85c3b37b1d6a403540a8bba8a29f3a2dc419770ecdb42404cbfd967570c514d7d748a539ce7f1c98383f9a7ce0181e05c2fbe3c201222b30b1

C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_rtp_plugin.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 fe490f43b59fe5d39ff74462342b31d8
SHA1 2c3f05bf240694eda0dead8d493e87bcc5d27559
SHA256 943cf53c29d877fe0e5df696fa007d63641ab689130621f3f4f9208ccfe05a3c
SHA512 f782e681ec7faf7e095a3785c4a4a9980c2af7cb17bae4a2ed2fd8ecf1c07f65defbf1a76ace799f1f8b41779c92b5e2a1f9bbed1a5fee784f7fde96ba6e62b2

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\TEXTCONV\MSCONV97.DLL.(MJ-HU6315094287)([email protected]).zxc

MD5 0f893c56eb7eca2d705d015199761d0b
SHA1 61650261d6ce89bf926647e29e109f8c0ba0dc19
SHA256 ca73b15698f9028c9705f65830d6a5e439786139e95127d696471acaf589c94b
SHA512 351d731edffb27cd326f9c1182be1df6d581ef2fbe5d61f5626bc3c4565569c4f4e8ad2eefa0378481650611c0ba4e31d3bde134fa02b1fa1e940b6560f86215

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\dbghelp.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 af13671c3eacac72cb4e78f14506d593
SHA1 1e0face639b51116be997e70ce5042108621c91a
SHA256 156e3870586f904a349c8b9f44694ac7d5a3829a54d64fd78391e8e95419d0ec
SHA512 ce7251a6e90c82a9c09b0e6623beea4d4eea444f6b4d7cf0fb65a6497e56773466cee5ffd4223a4c7c7c2d5cc74ed04da406c6e319be53e287500136f3a390e6

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msowerrelief.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 0e9e7e95fe1e3d76ecd3ae75a444640e
SHA1 5360c17fc7692c42f93e45c0f7f8b60405af3de6
SHA256 781e7630c4d591b9bf877e67cb2d6412e9269aaa6bf302c10fe0202c915dc462
SHA512 447ba0e63f3ddfa92772b0bb30b4d6f94262055a8802d8448676a00a266abbbac1978d4d9449bb224b6b26e7e292b5f2a3e5c236680e2b0b3397577c74264ab6

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\PROOF\MSLID.DLL.(MJ-HU6315094287)([email protected]).zxc

MD5 e87c8e5578e262c34bbd3fe35cce3f06
SHA1 d62266db28e76dcd1ba62ba343039ffcbd870068
SHA256 b135c63b7616b1a01636810beca91759ebaa6a56ad96ede67fc3c0c831311b36
SHA512 caba8ad2ccfba704efc2ee7332a3333cfd194b23eecc02afbdecff2cce931599333814788619edd1f78c29bbeb957fdcbe4e89643cd14c798ed685035b33d0ca

C:\Program Files\VideoLAN\VLC\locale\ml\LC_MESSAGES\vlc.mo.(MJ-HU6315094287)([email protected]).zxc

MD5 e5f7ca49a14a7d763d86d72c43f90c82
SHA1 70a735a8a424749c61e12f311dffb12ca150950d
SHA256 c5abf41bb0308b34f3c1b00e7e33976e532ce7e88bc86a398f737de0cef3d4c5
SHA512 b08d0442aa19974f241085d89f6bb287214051d037fd1f3a2a9341a8112463f20232b237a70def26dbfbe547a140deb890cfdbacec10eeac98e833d6f822d11b

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.IO.Compression.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 3ad2fd473114f7fb64e2410d3928dcbb
SHA1 881572f47d2b32e1e57b0708f3a039f033a4d4cc
SHA256 c34341f462e35cbe18fed922e230795ddfab22ae4b828ca0fe9bfc550e614fa3
SHA512 06eefce10b63be54226619d45e17f2b952af5ce7552f1ad03487e92a1e1621e7e339ec201ce8f0828f794d5c9880414a242a47061d25d21c48da5c6ff0cc45e6

C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_mp4_plugin.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 54675b263f62ba80689c4ac85b7c47db
SHA1 13e7a79a0f7943b329bf9510fceb7aad888ce0ba
SHA256 5b9a66dbaad7db49853a98b961104a54492d3105a99001ee9c78bd0c79ff76fe
SHA512 6cdac9d1c1aacc9ba4557c7e1ecfab4ff16115b79d20d0208c8e2ad6e2d803a6a1dd67ca525f65a76f667f2700dc782d57cd1069449c6a4f84ff4df35d051a25

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\editvideoimage.png.(MJ-HU6315094287)([email protected]).zxc

MD5 a374ef5e1dd7130fd9b21a2f3ac533d0
SHA1 e53610704c86d442551dc62d7157e435a56ea943
SHA256 d0220cd2901c6ffb3b7248bd53c50faf01f8e163cb642af62fc79aebc405e96e
SHA512 a931a87dc7c8b52703bbb7e14c07334b13ec94be7353e5f71899a688ebf84b440db7c008b3399e32aa3284990d3845629635841cbdaacd914eadcbf64e1c2635

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe.(MJ-HU6315094287)([email protected]).zxc

MD5 b20ddabc376c2777cf22728188b4bcb1
SHA1 6931d67ca1686883a4245b8c26b08747854c8802
SHA256 bca59580b1ecada74991655b1ea1d63cad49bd3a92f88b9f1e5e960e8bcc79e6
SHA512 b94db1488ac61e54cad5d88198a04af6fe5a761e9efab67b12340de53a9b7288f579e4185f96608913b085d53c2a4a69ec240c14660e187e23c990248477e91a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0o5pj305.default-release\startupCache\startupCache.8.little.(MJ-HU6315094287)([email protected]).zxc

MD5 c52dd00357ab3bc8a770d395acecba6d
SHA1 d49876a859079cdd643d514a30ba214df0dfc911
SHA256 761ffaa91b6eccd6bd62e3ecf44ba5bc689ce0ef0f488e22bf3e19cbd54a9fbb
SHA512 53d8d985eabe1bfc1bc957769a18b1e118bc269235d5477fc85782e7fda8f825e70203e30bd6405b3d2075b95a57ea7964aac2a09b168591b66ea04d5db8172a

C:\Users\Admin\Desktop\CompressClose.wma.(MJ-HU6315094287)([email protected]).zxc

MD5 81fe75c38c1c9972e95ce2816d9788c3
SHA1 3f6baac057fef2be9792503a2e3c67547833f1ad
SHA256 378b55d2c1570fe4bd0edce91c0bf52ed205104e8b0874f86bb4c76a5b64f5a3
SHA512 9502e48390864ef30026e103ee2a3d06329d8b9d5eb3faf5022a4050ac753853ba3152a30794ed52b5c5a0e41d75d8efb98e5f4db8acd1762f8fd985fe3709c2

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\de\PresentationFramework.resources.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 a486d0fef640b443515a70c68cf7bc28
SHA1 7472680373a21660d4b688b342e42b63185f70c6
SHA256 09477d0ec9ef5bcfd02ae9fb7d36c24e09416169cef46dfa0c3037f9ff0383c4
SHA512 00f5b6d40c82b79f041a4f8888cce5b328b8773e276d88939af9e83b52bc742a760a4e6276a0c36f9a201753fdd76f014133a760058235c988d1976736c062c0

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ru\PresentationFramework.resources.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 11a30b1f4ed9c60e32c6e681488576ef
SHA1 4dba130319d0222b08e22165098acc3ba61a523c
SHA256 37b481cb3801342782e7548cf6545db87fbe2205c03c7be2225ead01c6ac1f4b
SHA512 9142b2974d0e64fafb2e6583444cdfae71ce772faa224f97b3d4657e4701cdf2b46edd5d36dd0f27ec921d806437f138956f5422b2f5e4c0c550196b7c00c406

C:\Program Files\Java\jdk-1.8\jre\bin\plugin2\msvcp140.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 6a342125afad48528689485c1262533e
SHA1 2f38478b0473897b18de042a82acde242b660ee9
SHA256 5bea1d9d4a897d8da10ea212d0a76142b0891ef8e3ada27a73f2e8db10d3b597
SHA512 4465c4a574fe35ac4b6ab3d17b2f8f82f85be9e895c835a7a939a45c42b4f52dc7c9314a1099226340e1fc682e091648fe3a0699d7a68cbef37180f4c8db3c1c

C:\Program Files\Java\jre-1.8\lib\jfr.jar.(MJ-HU6315094287)([email protected]).zxc

MD5 03b4e4851807c7da87ceabb2ae2a7c17
SHA1 7d4f69a69b920b7995c4297c76f6a11a21da2448
SHA256 419f2a5c5ad8da2570197284cdb2fb5d022b70f6a3a49fa596afeec5296ed0e8
SHA512 86b78457c405dbdc3fb18032e6d1fa2166e4cfb94c7465a339e3185edd3fb8882876ba01fed851ed80fc0bd02b5ff085f29fe826c150519fc5424b517aa623e8

C:\Program Files\Microsoft Office\root\fre\StartMenu_Win7.wmv.(MJ-HU6315094287)([email protected]).zxc

MD5 50b9c9931f8dc815e456cd81d21ba29d
SHA1 11d1b0174359ab1cece301d2c9915bf21519c82b
SHA256 b0c65006754b2f204c8d1dcf6409d4288de0bfa9957514759f267f8f17941189
SHA512 e69869e129f1b54ed32a0808c43cd951ff1fa1ed4dfaf9fb03742ed61a234e0df9cdfdfa679ffda687a9e52d990b55adf8db5b766a7ce4c08f2b8aac2e902f1d

C:\Program Files\Microsoft Office\root\Client\AppVLP.exe.(MJ-HU6315094287)([email protected]).zxc

MD5 ed314f8e212203c09cc069f9d688b503
SHA1 4fa1a1ed508289e366d4d8fa47e490ed874ad931
SHA256 d8b0705b27541b4bb69bb10c41d15828b77cfb7c1472ba6464e0ebb750ba6234
SHA512 e9664b91634262fadddc3571413e44dc300f840d84d126d40392436a85a51772dabd7051bc1008b55c5ac3d8d51d468c626d4ae0aaeff41483f4b0961f9b6aac

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.(MJ-HU6315094287)([email protected]).zxc

MD5 38887aecdae08a3adb98d2fad5d0225b
SHA1 100203f5a4d67b2451a339d88371bf40926bd02e
SHA256 bf737e062a45525e42e273288b4f606a86c90e684ba474336429c45aeb12a775
SHA512 e94ac12d4d71959bfb214cec12e1d2174560c74fa9ef29fd8ec37bd76644f1caef3549882ff8e1f2a2e6a3d1e493afe334d1664529a8da709998134dfe457f14

C:\Program Files\Java\jre-1.8\bin\plugin2\msvcp140.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 669943536be99cf6b671f28cb4e09a55
SHA1 82aecdfe8bd1774cc0f9f9c417c7c92f4e5a184c
SHA256 cb6bebd8f0a6274da3b3898815737c74787fbec06b943dff990907f4436be7d2
SHA512 5a4705c47855f1c07e9935cffd0ada9b0769a51ccfd9da53c11ed2b5b39992c658058e889698191b138e3611ccbe80213e79f9a93a2c873b1aa1ae09e13907f0

C:\Program Files\Java\jre-1.8\bin\msvcp140.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 a03329cffa305284577915f56a05b4aa
SHA1 73d3f83e4fe007e7bd9d66718de494399cb8c710
SHA256 586673da67b5753a694a2de0bdf2256b9499eaf8ab4843ad97c64f3f74d11161
SHA512 ad4d6a4082a6d8dd108663a0a535329cfd76f8b70b974a637e4bf602556884be4e5861f007ffd1955ec529ca4f53c8460a9d909dffddc1a8c744f9cb08230d99

C:\Program Files\Java\jre-1.8\bin\javaws.exe.(MJ-HU6315094287)([email protected]).zxc

MD5 e5ba991c5f8780304573d37d6e5890cf
SHA1 b78f1b3984afb9baf3b3410768fa3bee7b275ce8
SHA256 ccde04729f3d88dd5103d4563f4e023316dd2fd94be395b311978465c22db211
SHA512 1a6665e67c5630b0afc6108267e49ceabaea129dc349134d6509cd742997d58691b9fbe6c42d1daa7983b9193400a7c5c7e93750a8c8a60d347e17e5f71b7b42

C:\Program Files\Java\jre-1.8\bin\deploy.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 5ce246a7978dc767cb021b645dbd1e1b
SHA1 d3666c8a337269a74eba54204666e5c10af22cb8
SHA256 e898e61ca463cbb44d742ac667c6b525f7f7065a713f5fbf8cb0d1ee1d462c58
SHA512 a98c6bc6b047f91d584cf139bf7975d46d25a93bc58dfe06957f03ee0077688c101b175bc6787841dbb0bd3ed5426d7f71d725d202721863fdb4c30f4d99461c

C:\Program Files\Java\jdk-1.8\jre\lib\jfr.jar.(MJ-HU6315094287)([email protected]).zxc

MD5 77c3d192eb9c98abaf1bbee65afa46e0
SHA1 80df9a2dcd370dacc293611f2d9bf3a101d54d76
SHA256 acccdff6cc4dad9bd09d93273fa4ad2797ca99780caa66a77ab49b652809b462
SHA512 b3172e26e6dfff17c6a12b5e56093205552f282f7736536b13e80debc552da4dfb231d8fa6d9328d69f4e71b74794c32d2632c1374fc34a027449b793bf5c3d9

C:\Program Files\Java\jdk-1.8\jre\bin\msvcp140.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 670fb382ba68511849b925e2c17b8622
SHA1 57c9e7580e4c7961eae0eaa96cf0560c44d36257
SHA256 e70f35367d955c78bd26d932109e4dec6ce5dccd188e0f65fa2239ee341befb3
SHA512 d8ed156d1e8586dae387747309efea43e5a032a90a3c5524bf5d004e3ff85e9b29a635635e443c7e843173941b509e8868372a657f419ecdbf758ea6b641b757

C:\Program Files\Microsoft Office\root\Office16\VPREVIEW.EXE.(MJ-HU6315094287)([email protected]).zxc

MD5 b66c719b11a7dd6b256c18d2d9b708d6
SHA1 06f59d411cd0cbdaa3d6c6f3adfd66c8f4e40a31
SHA256 6c44e387140f21449813c0f70b32e508a12fc3ec2384be97a4c2a9804b135b4c
SHA512 618aca122c915baead469c548fdf06700fb067f23af86b852771814ef94764ab6d757657d3cf8e0447e3e969cee5354e29137f1e19bde29a38268ceb6e6f6da9

C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\VISUALIZATIONCHART.DLL.(MJ-HU6315094287)([email protected]).zxc

MD5 700acb9f42de75963fc249d46e6d4054
SHA1 506518b42dea8dfa83f86faf395c91041aac9e8f
SHA256 24ccc25c411c8a5a80ec3581aef149a48b48d1e75e8ac3c102663c7aae6e16cf
SHA512 9b880c2b8eaff7a827fc4f5a7bef8345965e152ccc72a6f7f15f064e5374a794434fc43c6c68e4f173c85da541c13f662e8e2332ecb0511b19f86cecec7c08ea

C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\OFFICE.DLL.(MJ-HU6315094287)([email protected]).zxc

MD5 967b1ae9186469fec8ccbf7ff079f810
SHA1 8062f633a45fdb5b2669e67631a65542e097dbdc
SHA256 e96ed1926ff3c4dfa3d0c7aa559bbcd7079aca45397d4859f92281a7b593847e
SHA512 7a81fb3e5c6abcd84f98ccba7bc25286da2beafc6cb310d6f4c45cf5e5e0d29dc9deecdfc4d47710b362eb08090d104814001a946bbc5f11596b8e3b3c5fbbef

C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL065.XML.(MJ-HU6315094287)([email protected]).zxc

MD5 6911b08a4073ff66bb25dfd1fe069efd
SHA1 8fd50e8758b2e6925873f00f6e20bb91c624ebbf
SHA256 94c595f5a31b216d2fc4f6558fdc95e0b9ee833e6ea06c404f7c6e5d72d7f80b
SHA512 d996c3f7857d02e24ab9e7b26636e65640a8b5ddf4f3774935fc82f2625f8c85875cff4737817806fb6078aa795a258336467e9dce71457f62a55df82fd61721

C:\Program Files\Microsoft Office\root\Office16\PROOF\MSHY7EN.LEX.(MJ-HU6315094287)([email protected]).zxc

MD5 868ff704de055baac483cfc474779ed6
SHA1 bc4de516589057ff4ec8fe55137ad6cd106e0e03
SHA256 266ec942b9c44224ff4634814614566b7db3283e5dc27d3e3121f3bbdf8e20a2
SHA512 93f29b612257b426f29b8a7df320316083f16bc9255db5d63c00a449e4551c97fff18ee14124bd395d4dce503d006288163ad4ac1ee00a9fee971fd7e36d9db0

C:\Program Files\Microsoft Office\root\Office16\PROOF\msgr3jp.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 e3fc1b3180c2701bff623d26b6791e80
SHA1 cc5856278ea5b5123bd4882557eadd16bcfc1877
SHA256 24453ab2189ff3ee28f778e01c2e57a2848811733a80098df44f5004eabbdeda
SHA512 e380651c80471f4fddced69ecdf007e539c571044dd4645baad775184f3c8b14895a638721a06c8242b6962b7901638dcd7e2862e487dc015bd0ac31928ab1b2

C:\Program Files\Microsoft Office\root\Office16\PROOF\LTSHYPH_EN.LEX.(MJ-HU6315094287)([email protected]).zxc

MD5 2e1a0349be027fc897db096e0873bdd2
SHA1 c521d64bd0960a595f07ddec26d870186bc816f7
SHA256 207926820561c9377d1a55fdee7f17679210ef55549803cb6729a706ee70e34b
SHA512 17f7a1c8e73dbb621f037354f4c7a518d28b5de05e33ffdbdfbf2f4453c0249ac4d5c3858a7f74d111bff07b0df3bb3dfb802b05ad1608b6bf8ea56cca03f9f1

C:\Program Files\Microsoft Office\root\Templates\1033\ONENOTE\16\Stationery\PLANNERS.ONE.(MJ-HU6315094287)([email protected]).zxc

MD5 5947d0bd3859c29d2d17fe453f577be2
SHA1 38ad3de58a2815144c3ae4fbead597933d863f72
SHA256 6c59fa675b09d258a9fa54efdb5e94f5762f7c838b6af89a1422989c1ceef875
SHA512 1cba1179586c97e8c0e0fd5c83120b1884359704b210d81bb4721945e3e3d87eec4953ee66605ca321412ec98898c5ad7595f8ba3367fe743bbab868eede1e4a

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\EXP_PDF.DLL.(MJ-HU6315094287)([email protected]).zxc

MD5 9ff88e4280dce22fa8c1071a125acd30
SHA1 3f656a24e0d32790a61b7623c9049954a32ce360
SHA256 688c29186cbb88f84b777c87b79d2da0f20105d1b9287673f93a20000d6873c5
SHA512 5e197f00e6daa4cfbd48c66937a441c2957940853259bf2f7d86640ba4c23d909665a5f6a87df2576fd71a5bb63a202a62ce2c15beb7f80dc2dc8f82d0ee11c9

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\TEXTCONV\WPFT532.CNV.(MJ-HU6315094287)([email protected]).zxc

MD5 e988e4b6b5878e1d524d02a4bbbff816
SHA1 d6903777c17f59b54f49cf8e6dea17d8d49c7643
SHA256 7e3f26fc05bf26237b7b91903c814a77d71796d6065756ec061fe388a23242ea
SHA512 441df826484a98b66ea3b2575e9d15046a0552ecbe20c14a6a201b92e92b936cf3e9e0a5bc4f331c953de1c6b0e2c413a8267d5a4d5010b918c0220f31c5609e

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Source Engine\OSE.EXE.(MJ-HU6315094287)([email protected]).zxc

MD5 8ff8ce98ba8c0309234d1388eef747a9
SHA1 bd974387e19c717199be9e356d290bb2a3f77aaf
SHA256 9fba0b9605abfd33f07bc2f24963a637a042656ee4afdb866c77e0f879b52ebd
SHA512 b81f68afe5c684a47fe6af972f64a5fc29ae486ec5a43ea8e9420f206dc245ad2970b8487387f67e278a4b33ddcb2838225d33d7e56126c0c73bd7d340b2339d

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL.(MJ-HU6315094287)([email protected]).zxc

MD5 491f454d7a780ad00470b1eb896f59b0
SHA1 968bb395094faf3f9e73e18c2ddb20ce9b5209ce
SHA256 8b000608a34858273a59b77f572727f21635d980ff161259fa0c6a26f6224784
SHA512 a6d9fa0676034ba9a5f571ec1249b3a2882bdf01b4081f039c0cff3e3cbc0fc190c5a797c776610af4361bb11a033a4994a88c4fad7834cc5393f39d7b38d80d

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\msolui.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 d04216ddf2b7cf1bd0fa6923b0acb19e
SHA1 9c0e9b3e3e7c2318ff4db5745295018c553a94cf
SHA256 871922d9775f06753f48dc6d567ad3d73f5b4d57bb3444c48c03c1757c1c8fa3
SHA512 809310621eba7dcaa0fb39ad3e11785c4b4dc4f320059de51e451f176266cd8fc74dce296f73bfb38d4754dc10ba8fd20f53c582de7620f7780cca2ab2f7950b

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\System\ole db\xmlrw.dll.(MJ-HU6315094287)([email protected]).zxc

MD5 88cd5bde4aeb1b63a8579cffdf9df3e7
SHA1 ebcfbd5acea5117b6669aedb742df08c84ed2977
SHA256 144d12995eae37cf417aa5cddc3813af1b157c6e7b0eea03453de93ac0948334
SHA512 ede516f4ba1de57b8bd27795cd80e1476824c6d31f1a1e9089f2c9e483876f4dba2e5e0493ade499200960842be2e18cb1c3a612f88546f63d13a42da52d7537

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\filecompare.exe.(MJ-HU6315094287)([email protected]).zxc

MD5 768d619677d80fa475f3cc343cbc06e5
SHA1 bfc4a8f20033066b94ded259e9296cbe077cec9d
SHA256 fa4ee31fe7bb2d4c7e43c3bc44cda50231055e2c2cc8a77b4689491338eb9513
SHA512 e9879db8fa7d1cd2a94b216cfb6f4e476e752041314b4c29d0a53aa03be3e72551cc39f7cb1d9ce67b324b31fe3352aa0d29b50897d032c8316dcf3bb6f815bd

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\en\SpreadsheetCompare.HxS.(MJ-HU6315094287)([email protected]).zxc

MD5 e6d5c10bf790c802d71cce9d9292a904
SHA1 6206f4911d37a5c202f40e869729e1fb5340aa75
SHA256 37d5484c039f08e4f0a2bbe56c130b2ecfe962126cf418dbb09e9d489171f3d7
SHA512 958f5cb954a4df6fd464d4d91b62627c29570aa5c0d87a4ac095eb3dc94444e7b3c0124b60175de59b8ab5c35f1895483e97faba6c7abace5fe47161781fb454

C:\Program Files\Mozilla Firefox\maintenanceservice.exe.(MJ-HU6315094287)([email protected]).zxc

MD5 57d58d1e6150b9d9f2177b2eb1ec20b1
SHA1 11d8f41ccc0859531e74bd9f64d5b93065281ae5
SHA256 751382c1721cd3b8eda5c898012c7bb0afce6918f774aa7512efc365915ec2db
SHA512 9ab0ee23082d95169fc924d70450dde73f7d595e07d8b1c7f2918ba1a458a431d34447f5922fdf2958d4d2f5b31b45b46ab3ddef441397bfd660efdace800c6c

C:\Program Files\Mozilla Firefox\browser\features\[email protected].(MJ-HU6315094287)([email protected]).zxc

MD5 dc018c8d2b6491608d4c4f7dcbaedb9a
SHA1 ca32597c9911cab2fd0772e703e54f5618d8486f
SHA256 694b61cbf1301210aca4a229ba6942800beeccb49784d2c1ef0413d9b52ba291
SHA512 23841538e2ab507f204be026bc4a5389eda9dd442aad496da9bf6115cb780c9765b79abd85fdb48e99f2b239ece57dc693e29f243c26aa3960e32ced9a968075

C:\Program Files\VideoLAN\VLC\locale\cy\LC_MESSAGES\vlc.mo.(MJ-HU6315094287)([email protected]).zxc

MD5 78df3f1a91d98ed5fa6a354117b357e1
SHA1 0256ab2d7f97bbdc7a2280ad4def2e63557924bc
SHA256 52d85f1a1676087ee7b53f50de28d5d264f52136d2a615c1cd5b8e864c47dd32
SHA512 4fd04023a8642a445b517745599411d142d830f80bae7bd69d6cec4b16ecfd7c9866dcfc89c13a7298c17469656b7c8233acaf69ce67a01d3998fb92ac17b91d

Analysis: behavioral20

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:59

Platform

win11-20250313-en

Max time kernel

103s

Max time network

105s

Command Line

C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe bcdedit /set shutdown /r /f /t 2

Signatures

Chaos

ransomware chaos

Chaos Ransomware

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Chaos family

chaos

Deletes shadow copies

ransomware defense_evasion impact execution

Modifies boot configuration data using bcdedit

ransomware evasion
Description Indicator Process Target
N/A N/A C:\Windows\system32\bcdedit.exe N/A
N/A N/A C:\Windows\system32\bcdedit.exe N/A

Deletes backup catalog

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\system32\wbadmin.exe N/A

Disables Task Manager via registry modification

defense_evasion

Drops startup file

Description Indicator Process Target
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\لفك تشفير ملفات اضغط هنا C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Reads user/profile data of web browsers

spyware stealer

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-2081498128-3109241912-2948996266-1000\Software\Microsoft\Windows\CurrentVersion\Run\Microsoft Store = "C:\\Users\\Admin\\AppData\\Roaming\\windowsdefender.exe" C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Videos\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\$Recycle.Bin\S-1-5-21-2081498128-3109241912-2948996266-1000\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn1\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Music\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\History\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Desktop\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification F:\$RECYCLE.BIN\S-1-5-21-2081498128-3109241912-2948996266-1000\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Pictures\Camera Roll\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Libraries\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Favorites\Links\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessibility\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Downloads\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\AccountPictures\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Desktop\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Libraries\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\AccountPictures\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn2\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Saved Games\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\System Tools\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Application Shortcuts\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Pictures\Saved Pictures\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group3\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Searches\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Videos\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Documents\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Contacts\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Documents\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Pictures\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Downloads\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Music\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Links\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Favorites\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-2081498128-3109241912-2948996266-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\rfwpqsxt2.jpg" C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Enumerates physical storage devices

Checks SCSI registry key(s)

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName C:\Windows\System32\vds.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Windows\System32\vds.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\FriendlyName C:\Windows\System32\vds.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 C:\Windows\System32\vds.exe N/A

Interacts with shadow copies

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\system32\vssadmin.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-2081498128-3109241912-2948996266-1000_Classes\Local Settings C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2081498128-3109241912-2948996266-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A

Suspicious behavior: AddClipboardFormatListener

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 33 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 34 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 35 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 36 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 33 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 34 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 35 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 36 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\wbengine.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\wbengine.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\wbengine.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Windows\system32\OpenWith.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2656 wrote to memory of 3368 N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe C:\Users\Admin\AppData\Roaming\windowsdefender.exe
PID 2656 wrote to memory of 3368 N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe C:\Users\Admin\AppData\Roaming\windowsdefender.exe
PID 3368 wrote to memory of 3608 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 3368 wrote to memory of 3608 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 3608 wrote to memory of 4564 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 3608 wrote to memory of 4564 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 3608 wrote to memory of 2780 N/A C:\Windows\System32\cmd.exe C:\Windows\System32\Wbem\WMIC.exe
PID 3608 wrote to memory of 2780 N/A C:\Windows\System32\cmd.exe C:\Windows\System32\Wbem\WMIC.exe
PID 3368 wrote to memory of 812 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 3368 wrote to memory of 812 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 812 wrote to memory of 1848 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\bcdedit.exe
PID 812 wrote to memory of 1848 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\bcdedit.exe
PID 812 wrote to memory of 2004 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\bcdedit.exe
PID 812 wrote to memory of 2004 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\bcdedit.exe
PID 3368 wrote to memory of 2600 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 3368 wrote to memory of 2600 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 2600 wrote to memory of 4924 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\wbadmin.exe
PID 2600 wrote to memory of 4924 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\wbadmin.exe

Uses Task Scheduler COM API

persistence

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe

C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe bcdedit /set shutdown /r /f /t 2

C:\Users\Admin\AppData\Roaming\windowsdefender.exe

"C:\Users\Admin\AppData\Roaming\windowsdefender.exe"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C vssadmin delete shadows /all /quiet & wmic shadowcopy delete

C:\Windows\system32\vssadmin.exe

vssadmin delete shadows /all /quiet

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\System32\Wbem\WMIC.exe

wmic shadowcopy delete

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C bcdedit /set {default} bootstatuspolicy ignoreallfailures & bcdedit /set {default} recoveryenabled no

C:\Windows\system32\bcdedit.exe

bcdedit /set {default} bootstatuspolicy ignoreallfailures

C:\Windows\system32\bcdedit.exe

bcdedit /set {default} recoveryenabled no

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C wbadmin delete catalog -quiet

C:\Windows\system32\wbadmin.exe

wbadmin delete catalog -quiet

C:\Windows\system32\wbengine.exe

"C:\Windows\system32\wbengine.exe"

C:\Windows\System32\vdsldr.exe

C:\Windows\System32\vdsldr.exe -Embedding

C:\Windows\System32\vds.exe

C:\Windows\System32\vds.exe

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

Network

Files

memory/2656-0-0x00007FFE41013000-0x00007FFE41015000-memory.dmp

memory/2656-1-0x0000000000D90000-0x0000000000DA2000-memory.dmp

C:\Users\Admin\AppData\Roaming\windowsdefender.exe

MD5 7977bc8781a00875b4d465bc2a90d5d4
SHA1 9f4b2858edcff694fee76636bf8cf33a366fc237
SHA256 49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24
SHA512 245d65b9301b759097cded2a2f078e4e41c7b68e303a71fccd465a6fa230b48e13e571c4e57e03710934a5e6b9536ed634e0edc502ba35433b02147760e5f05b

memory/3368-14-0x00007FFE41010000-0x00007FFE41AD2000-memory.dmp

C:\Users\Admin\2012_x64_1_vcRuntimeAdditional_x64.log

MD5 d1457b72c3fb323a2671125aef3eab5d
SHA1 5bab61eb53176449e25c2c82f172b82cb13ffb9d
SHA256 8a8de823d5ed3e12746a62ef169bcf372be0ca44f0a1236abc35df05d96928e1
SHA512 ca63c07ad35d8c9fb0c92d6146759b122d4ec5d3f67ebe2f30ddb69f9e6c9fd3bf31a5e408b08f1d4d9cd68120cced9e57f010bef3cde97653fed5470da7d1a0

C:\Users\لفك تشفير ملفات اضغط هنا

MD5 3b8d73c95c31911b53b39895d1c2a588
SHA1 ca48d939e174ec33f27af1cb821517be10ac1b02
SHA256 4e258e6c04d087af311791d39279e6dc5656418e7dcdc08825a7356d0cfef5e8
SHA512 1ceadb0c5a49939346ebb782edb520c2e4d36c56be866495a51cedc1a02c216d9f005f430c4085855564331c715262c01a55296460f096f0927436595c879acb

memory/3368-61-0x00007FFE41010000-0x00007FFE41AD2000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe.log

MD5 4ae344179932dc8e2c6fe2079f9753ef
SHA1 60eacc624412b1f34809780769e3b212f138ea9c
SHA256 3063de3898a9b34e19f8cf0beeec2b8bd6bd05896b52abd73f4703d07b8a7cd4
SHA512 fadfe2b83f1af8fdc50430325f69d6172d2c1e889ca3800b3b83e5535d5970c32e9a176b48563275a0630d56c96d9f88df148fd6b2d281f0fc58129e5f4dba19

memory/3368-1204-0x00007FFE41010000-0x00007FFE41AD2000-memory.dmp

Analysis: behavioral30

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:59

Platform

win11-20250313-en

Max time kernel

102s

Max time network

105s

Command Line

C:\Users\Admin\AppData\Local\Temp\5199b64b50f678d75f85cb0c3ac97d7df67f23471815e21236b1a790d008fe3c.exe bcdedit /set shutdown /r /f /t 2

Signatures

N/A

Processes

C:\Users\Admin\AppData\Local\Temp\5199b64b50f678d75f85cb0c3ac97d7df67f23471815e21236b1a790d008fe3c.exe

C:\Users\Admin\AppData\Local\Temp\5199b64b50f678d75f85cb0c3ac97d7df67f23471815e21236b1a790d008fe3c.exe bcdedit /set shutdown /r /f /t 2

Network

Files

N/A

Analysis: behavioral3

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:59

Platform

win10v2004-20250314-en

Max time kernel

1s

Max time network

18s

Command Line

C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe bcdedit /set shutdown /r /f /t 2

Signatures

Dharma

ransomware dharma

Dharma family

dharma

Deletes shadow copies

ransomware defense_evasion impact execution

Drops startup file

Description Indicator Process Target
File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe = "C:\\Windows\\System32\\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe" C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\$Recycle.Bin\S-1-5-21-814918696-1585701690-3140955116-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification F:\$RECYCLE.BIN\S-1-5-21-814918696-1585701690-3140955116-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\System32\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\7-Zip\Lang\uz.txt C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-environment-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.he-il.dll.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.ja-jp.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\MSInfo\es-ES\msinfo32.exe.mui C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\et.txt.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\7-Zip\Lang\nl.txt.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVClient.man C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.de-de.dll.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\bg.txt.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ext.txt.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\7-Zip\Lang\kk.txt.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\7-Zip\Lang\tk.txt.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\DismountExport.xlt.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pkeyconfig-office.xrm-ms C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pkeyconfig-office.xrm-ms.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.vi-vn.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\7-Zip\Lang\hu.txt.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\7-Zip\descript.ion.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskmenu\oskmenubase.xml C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\Microsoft.WindowsDesktop.App.runtimeconfig.json C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\es-ES\ShapeCollector.exe.mui C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\da.txt.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ps.txt.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\CompressUndo.vsx C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.hu-hu.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\ClientEventLogMessages.man.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-environment-l1-1-0.dll.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\nb-NO\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ja.txt C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ne.txt.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.dll.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\co.txt.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-processthreads-l1-1-1.dll.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.tr-tr.dll.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\Microsoft.WindowsDesktop.App.runtimeconfig.json.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ClickToRun\concrt140.dll.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\he.txt.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\uz-cyrl.txt C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\7-Zip\7-zip.chm.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\oledbjvs.inc C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\SharedPerformance.man.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\VC\msdia90.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\zh-cn.txt.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVFileSystemMetadata.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\de-DE\tabskb.dll.mui C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\mshwgst.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\eo.txt C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-filesystem-l1-1-0.dll.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVClientIsv.man.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\es-ES\InputPersonalization.exe.mui C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\7-Zip\Lang\ba.txt.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\nb.txt C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\DisableDisconnect.mpg.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\da.txt C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\symbols\symbase.xml C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipsesp.xml C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.en-us.dll.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.th-th.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\7-Zip\Lang\th.txt.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RHeartbeatConfig.xml C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-math-l1-1-0.dll.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVClient.man.id-4A7B6ACA.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ja-JP\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Interacts with shadow copies

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\system32\vssadmin.exe N/A
N/A N/A C:\Windows\system32\vssadmin.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe

C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe bcdedit /set shutdown /r /f /t 2

C:\Windows\system32\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\system32\mode.com

mode con cp select=1251

C:\Windows\system32\vssadmin.exe

vssadmin delete shadows /all /quiet

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\system32\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\system32\mode.com

mode con cp select=1251

C:\Windows\system32\vssadmin.exe

vssadmin delete shadows /all /quiet

C:\Windows\System32\mshta.exe

"C:\Windows\System32\mshta.exe" "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta"

C:\Windows\System32\mshta.exe

"C:\Windows\System32\mshta.exe" "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta"

Network

Country Destination Domain Proto
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp

Files

C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvSubsystems32.dll.id-4A7B6ACA.[[email protected]].harma

MD5 554bf9f679c828845b7392f55e7bd636
SHA1 7632b8601be6e4531f5dc915514c3f178062b677
SHA256 4cf516e0e43500b89164ffb15ed94b98bfd82f18e49b7974d9f9f6db79d84565
SHA512 012b22d43c73bfb3d8f9666b1f4659e77be3f812a3613e7a00f6d85ad642d42dc476feda3685c6bd015351599de87942cee4396213286811576bc108852aecec

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta

MD5 c42a8d39adebdcf43e64398286861643
SHA1 1c8ae2d6f44b41f386e7b322ab9d5e505114844b
SHA256 3cba2bd860faacc12fe806d82f104e416c4522ac83854a98c2ba1ef2c3038843
SHA512 ae30accbe334ad1326d33c050fd6fe7c618ed15c387018828eabda2411637a869e4d7bf43ac18e64065788fc209a623a3eb05bab0988a5d650f9e9e0bae40d2b

Analysis: behavioral9

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:59

Platform

win10ltsc2021-20250314-en

Max time kernel

115s

Max time network

123s

Command Line

C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe bcdedit /set shutdown /r /f /t 2

Signatures

Modifies Windows Firewall

defense_evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\netsh.exe N/A
N/A N/A C:\Windows\SysWOW64\netsh.exe N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\$Recycle.Bin\S-1-5-21-780313508-644878201-565826771-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File created C:\$Recycle.Bin\S-1-5-21-780313508-644878201-565826771-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\desktop.ini C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File created C:\Program Files\desktop.ini C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A

Looks up external IP address via web service

Description Indicator Process Target
N/A api.my-ip.io N/A N/A
N/A api.my-ip.io N/A N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.hi-in.dll C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.pl-pl.dll C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\mraut.dll C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ast.txt.(MJ-ZK6471058239)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File created C:\Program Files\7-Zip\7-zip.chm.(MJ-ZK6471058239)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\et.txt C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\hwrdeusymnn.dat C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipschs.xml C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\es-ES\rtscom.dll.mui C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File created C:\Program Files\7-Zip\Lang\az.txt.(MJ-ZK6471058239)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ar.txt.(MJ-ZK6471058239)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\StepRestore.wmv C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\7-Zip\7zG.exe C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sw.txt C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ug.txt C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\zh-tw.txt C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\msvcr120.dll C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipstr.xml C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\id.txt C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVScripting.dll.(MJ-ZK6471058239)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipscht.xml C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\mip.exe C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\cs.txt C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\lv.txt C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File created C:\Program Files\7-Zip\History.txt.(MJ-ZK6471058239)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File created C:\Program Files\7-Zip\Lang\ar.txt.(MJ-ZK6471058239)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ThirdPartyNotices.ja-jp.txt C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ThirdPartyNotices.MSHWLatin.txt C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ar-SA\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\cy.txt C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ms.txt C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\si.txt C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.ja-jp.dll C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.ko-kr.dll C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipsrus.xml C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipssrl.xml C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\de-DE\InkObj.dll.mui C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\eu.txt C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\tt.txt C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\uz.txt C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.et-ee.dll C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\mshwjpnr.dll C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\InkObj.dll.mui C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\is.txt C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe.(MJ-ZK6471058239)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\an.txt.(MJ-ZK6471058239)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\SharedPerformance.man C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\Alphabet.xml C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\dicjp.dll C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\7-Zip\7-zip.dll.(MJ-ZK6471058239)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\mr.txt C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\va.txt C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-runtime-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.sk-sk.dll C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\ClientCapabilities.json C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipsdeu.xml C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\de-DE\TabTip.exe.mui C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\de-DE\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\tabskb.dll C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File created C:\Program Files\7-Zip\Lang\ast.txt.(MJ-ZK6471058239)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\StartStep.cab C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A

Event Triggered Execution: Netsh Helper DLL

persistence privilege_escalation
Description Indicator Process Target
Key queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A

Runs net.exe

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2892 wrote to memory of 472 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2892 wrote to memory of 472 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2892 wrote to memory of 472 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 472 wrote to memory of 4564 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 472 wrote to memory of 4564 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 472 wrote to memory of 4564 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 4564 wrote to memory of 4536 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 4564 wrote to memory of 4536 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 4564 wrote to memory of 4536 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2892 wrote to memory of 3808 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2892 wrote to memory of 3808 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2892 wrote to memory of 3808 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2892 wrote to memory of 1324 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2892 wrote to memory of 1324 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2892 wrote to memory of 1324 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2892 wrote to memory of 1568 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2892 wrote to memory of 1568 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2892 wrote to memory of 1568 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2892 wrote to memory of 5600 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2892 wrote to memory of 5600 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2892 wrote to memory of 5600 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 5600 wrote to memory of 3608 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 5600 wrote to memory of 3608 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 5600 wrote to memory of 3608 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 3608 wrote to memory of 4560 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 3608 wrote to memory of 4560 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 3608 wrote to memory of 4560 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2892 wrote to memory of 4780 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2892 wrote to memory of 4780 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2892 wrote to memory of 4780 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 4780 wrote to memory of 2432 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 4780 wrote to memory of 2432 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 4780 wrote to memory of 2432 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 2432 wrote to memory of 5000 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2432 wrote to memory of 5000 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2432 wrote to memory of 5000 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2892 wrote to memory of 3352 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2892 wrote to memory of 3352 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2892 wrote to memory of 3352 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3352 wrote to memory of 2664 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 3352 wrote to memory of 2664 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 3352 wrote to memory of 2664 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 2664 wrote to memory of 5252 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2664 wrote to memory of 5252 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2664 wrote to memory of 5252 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2892 wrote to memory of 5032 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2892 wrote to memory of 5032 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2892 wrote to memory of 5032 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 5032 wrote to memory of 996 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 5032 wrote to memory of 996 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 5032 wrote to memory of 996 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 2892 wrote to memory of 4816 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2892 wrote to memory of 4816 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2892 wrote to memory of 4816 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 4816 wrote to memory of 2420 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 4816 wrote to memory of 2420 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 4816 wrote to memory of 2420 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 2892 wrote to memory of 4936 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2892 wrote to memory of 4936 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2892 wrote to memory of 4936 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 4936 wrote to memory of 4792 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 4936 wrote to memory of 4792 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 4936 wrote to memory of 4792 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 4792 wrote to memory of 4744 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe

Processes

C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe

C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe bcdedit /set shutdown /r /f /t 2

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop MSDTC

C:\Windows\SysWOW64\net.exe

net stop MSDTC

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop MSDTC

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c bcdedit /set {default} bootstatuspolicy ignoreallfailures

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c bcdedit /set {default} recoveryenabled no

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c wbadmin delete catalog -quiet

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop SQLSERVERAGENT

C:\Windows\SysWOW64\net.exe

net stop SQLSERVERAGENT

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop SQLSERVERAGENT

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop MSSQLSERVER

C:\Windows\SysWOW64\net.exe

net stop MSSQLSERVER

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop MSSQLSERVER

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop vds

C:\Windows\SysWOW64\net.exe

net stop vds

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop vds

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c netsh advfirewall set currentprofile state off

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall set currentprofile state off

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c netsh firewall set opmode mode=disable

C:\Windows\SysWOW64\netsh.exe

netsh firewall set opmode mode=disable

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop SQLWriter

C:\Windows\SysWOW64\net.exe

net stop SQLWriter

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop SQLWriter

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop SQLBrowser

C:\Windows\SysWOW64\net.exe

net stop SQLBrowser

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop SQLBrowser

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop MSSQLSERVER

C:\Windows\SysWOW64\net.exe

net stop MSSQLSERVER

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop MSSQLSERVER

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop MSSQL$CONTOSO1

C:\Windows\SysWOW64\net.exe

net stop MSSQL$CONTOSO1

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop MSSQL$CONTOSO1

Network

Country Destination Domain Proto
N/A 127.0.0.1:49787 tcp
N/A 127.0.0.1:49789 tcp
US 8.8.8.8:53 api.my-ip.io udp
DE 23.88.33.229:443 api.my-ip.io tcp
US 8.8.8.8:53 e5.o.lencr.org udp
GB 2.18.190.198:80 e5.o.lencr.org tcp

Files

C:\ProgramData\RSAKEY.key

MD5 b5037ada7fceb042e4ef0d48c50fe90d
SHA1 235051aed0c060ce6a7e667f916a1cbf4a4b0173
SHA256 76a946f72ed77d6df5d9c57bdc48f8fd4d8eba82c2679e5ba7b4aa3a2d824d24
SHA512 379e5cd8f2930e30f8cd7f4559bbb7076512da52e1815ec1141f8726aca291b99d4d2803371ccd4d8f5a98cf705f569e1eaa1b4d323f894f1c439b9ab75c9e79

C:\$Recycle.Bin\S-1-5-21-780313508-644878201-565826771-1000\desktop.ini.(MJ-ZK6471058239)([email protected]).zxc

MD5 4e04e2affa2227a290ff1770a73ce45d
SHA1 c664d521a2df59c24f66fb07cf4b63f3f40ffa6d
SHA256 01dca786598cd8506aef4b122aa7fbfbaca4e3247c87015aa0b4506c406d1c03
SHA512 515cfed31be4227d0a3ebd8b6774245cae6e026f69c7d5ddccf176691f8a6bf971fff57368d3d51a1095b17c94f675ddb21866078635eaf53faba3295711df61

C:\a5f1eda8760fc790760b7e5a7f56\2010_x86.log.html.(MJ-ZK6471058239)([email protected]).zxc

MD5 75b6aecd15cb29135dbef1362fa8ce36
SHA1 f7d8b5dca9466de29dc542b83754e82836f1744d
SHA256 354afe86fee544526346548fc5e595c19a5ed0ac94d69acef39b4e3b9b449ea0
SHA512 ef96d71d74348c48b76934381ae310bc4c7fc9d77e2522477f78a314feab2a0c0a8aeded0c04062bdbec377dc50a2d6fd91b00948d601c09a0629edf0ed56fbb

C:\Program Files\desktop.ini.(MJ-ZK6471058239)([email protected]).zxc

MD5 d8035768029f16f19a135372fd4b71ef
SHA1 6df7d3bc8c45ab9173a3c11c7866af8dbab14f8d
SHA256 5750fd349afe08eed2f4742d41f63545971f7d51318a08337ce4095e9197a917
SHA512 e304213185f13a212d3f112e3ddf410bc16a2d6fcbd1ff486b4785e060c66f7993562238d1eeda2497c57869fa9ac0a8dc0e8264b132fd5b4ff7bb5ab05c0a33

C:\e3fdda64d5d3944e27f92d88\2010_x64.log.html.(MJ-ZK6471058239)([email protected]).zxc

MD5 955fa934ab7cb588fc961cc801d4ac5f
SHA1 5660eecc4276a28a4bd43b210b0807a388c45ca4
SHA256 bd6ec5fea31d35529afbf7d172ce2c8f9b041443e638fa0ccf9709c1b4952129
SHA512 29a19daae61710539baabe83e4146748c5557f6491e4886be5d455cf8ef75aaedc8af940919e01d82d62395cceaa0afc4df1831edff8ecdcee6e66b33a7857b4

C:\Program Files\7-Zip\7z.sfx.(MJ-ZK6471058239)([email protected]).zxc

MD5 2049b843cbe74cd3b87272b247e39b04
SHA1 91eda363c88194454b50b959f08f3280a5f1b3bd
SHA256 fb9b66ef5ec91ed0d38d00ba1f17feb47c5be910e9bf5248aff44e77a9811051
SHA512 d9ba38e1388560f1c0ffa5aec784442a05a01251967704c67db97122b9ece979f807f76dc5b4c745bd6ba0b480aec843af235bc9a7ba87933e4ff62b6fb904ab

C:\Program Files\7-Zip\Lang\ar.txt.(MJ-ZK6471058239)([email protected]).zxc

MD5 70d74b30a6b5327cea842fa40701cc39
SHA1 81bdfc73cf00c780fdf76a4648511fafaf19dfee
SHA256 845adbb810ad6bd97d7822570fa3469078899376291d583e5ba78d9b2a51f704
SHA512 83a5d6b804ae0be1fa1d9a96f7258b4db59e64db27fadf9eb3169f3fd94b0bdbdd5f35b894b46652146311e15e148461d5f5a7bc3167855ceaf165fd3bcb870b

C:\Program Files\Common Files\microsoft shared\VSTO\vstoee.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 a1a7add0840e2661deb78b7091689b6d
SHA1 96ae3eb2d85f0dda876cdd0dfc104a9aa73189e3
SHA256 57fcc7f6d16d90874cb8d975c7b26e078ac86359c353192fbc2cf95aea055ae4
SHA512 ffb4064909c5e4336e53a156142bdff932078d02035b64a4f76f1d233d960dfb6fcb07a52ab6593f2aa1de2d5d738cf64c2ede987e0ed169f19b6c3c2f421a93

F:\$RECYCLE.BIN\S-1-5-21-780313508-644878201-565826771-1000\desktop.ini.(MJ-ZK6471058239)([email protected]).zxc

MD5 5f24d3deeb568c76396c7ac461324246
SHA1 dba36408894264ba9aac6fb7217547edc79137e6
SHA256 95568fa80d55a7f885cf18a5c4c7dfbcb22b563da6c2b3943ce9c061def738eb
SHA512 59a2b69dc291072ecf850c0da4204fca497d40a437c06c733cafc0ab3b0edcdbf941c7880a7774315136d8c537a2d4fa70f7a843bcabb0bd812c00fb7e4850f5

C:\Program Files\Common Files\microsoft shared\ClickToRun\vccorlib140.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 531b855a6bd12b1bd5947fdb407f5a3c
SHA1 c7c92858c333aef855b78236396e8e01fe1f125f
SHA256 4a5a631306b6c4ce176738a2570090d2bd1a8d084121f5810267a8a697b98443
SHA512 6072f0428b5cb0cd57d9370506fabbe4a5fc72b5fb1aecc2e97c4e56b43287f339713a6d2e485df235213549f53d3dcdad314bae96332227753cdd164ed31873

C:\Program Files\dotnet\host\fxr\8.0.2\hostfxr.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 6102172fd3b267c20780570cc92ca917
SHA1 0d7fc1e8de736c7a948508189a7bcb42650defcc
SHA256 f18042d2086caa96585d6ddd0b370371df1d3683e4016575e7d5a8620c878aa2
SHA512 8ae2be3aa91f70ce6057768c79a859c180637ac0c82eb58f68c0aa41e3fbaafa8ab761946f135d6b9327f9acf200bc19bd7e7f2fffe356d73fe9302d807eab48

C:\Program Files\dotnet\host\fxr\7.0.16\hostfxr.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 e5673a6743c35723c5fd9f07519febad
SHA1 a86d7a922443d05c4b2bb84cc25ca329510a6742
SHA256 db60d9bc55a96627d98dfe582bf94405f6a303cc7d99d2dd895f4082ae83f8a3
SHA512 13c4b7d912e4659c4e430eec356691be01550b861dbe5dce6a17deeb8411a80d82973f68087c8fffee735305f11e356cb69bb81d5b361ab29a84ed60624b98ab

C:\Program Files\dotnet\host\fxr\6.0.27\hostfxr.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 fcc2893ce49c834685427012c7f04a5a
SHA1 abf9aa35504a365d46c1817bf060a923ae2446af
SHA256 8870a324ebf302b1255e41f6c3711cd216dd3657f329793e9e11f4397680ada0
SHA512 96901dcdaed3ee95d6e7353ab25dcd5216c6eb8499bf141fe49391e982352836dd183c1b39cb867c7620a67f6ed47939cee423555de28a45938168ded5e5fbab

C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOLoader.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 0f63d5b36b84983c66b946831131cca1
SHA1 8c47c0b33468c255cbda6db032540343dd14d1e5
SHA256 6be1a5babe200db31d439ab3e33b20e13a4087e8e3423fc6ab3f9d1fcbc6230d
SHA512 f8c684117f434ed05c017a35d116790e42097092befe271b42b4b4b8df0f17680c29196209f18718d977398472c3de32122d27bba6f5d86306653b8fa1b4d52b

C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 48f784a9db3964397c40ef689cc33fe7
SHA1 1312244095fcff9e4be7acca55086121236ea05c
SHA256 6e9cecb547f258757b7160c471268e02d5688aebfc9ef20535ca292e7ed4b189
SHA512 34a1de57b8b8c74d39cfe832891d74312a94af00039d2d15476ea4192d14c80ec93f80788ebaa0ddbb09caab88c99ad35ae8ac0eb9990de5b1e05a96ff990e48

C:\Program Files\Common Files\microsoft shared\ClickToRun\concrt140.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 9eaf3d932f57fbb708e5d7624dca711f
SHA1 1a6ed1ae7af9996945ed4d5faf8311af05227a4d
SHA256 c225194affa993057953f62c3d74efe3f08f4c4f1df5945b71e4dc00409974f2
SHA512 9839205600459cf3bcfa79f53a5cd75ace8b386de7cb085ce092b3b8f6c0468ed8899bd548672f0c0a36a8989dfbceb7b1b7dd4ac2ae2df7791d89cf2461fb67

C:\Program Files\Common Files\microsoft shared\VC\msdia90.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 2438abcd8e44f21467e476c63fe6dbeb
SHA1 9b884214a11e9d40f1bd2f704699b19e7c562be2
SHA256 86b322a664e978fd75e1a49b0c1ba9cd1814fc7663b2b1a698068c32336d8234
SHA512 3c4d1b1aa4b6057b3c75a9c8cb686b6397479eaea21daa18596780318791a903d8d0a4f1c69290897e1efa2517af884a9d5c335e8f36896b95326798c165d37c

C:\Program Files\Common Files\microsoft shared\VC\msdia100.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 793a44947c2c626edad5a7ae387bb312
SHA1 34d551d3169a3720d75705e3cbba0f97cd15cc2d
SHA256 9e08781b68d213460483e9256c6268d65e65078fe48df3195d1bb4d3ceeabfe6
SHA512 710dda7871f63ac1499c283c1e6779037e5b65e0393fce0cefc4028011e0db8394cc21a8ab9a8cc5d0f88d145244bef5e20cac717ed96441d713a3c01e14b213

C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE.(MJ-ZK6471058239)([email protected]).zxc

MD5 35459d6dedffb91927c269a3f320f17c
SHA1 e556544fc0d12894b5388ab6cf5ebad4657f29e5
SHA256 c3f1cbb483c24974731fa10b0094a3ccce2cceb0e4bf004dc75746a0b316960f
SHA512 ca49383a929baa48b50c9f90de4d1f470fbee0e622634ffba7d0e20e4e99bd348fdc63b67888bd66fb2cedcd950098a80a5f847f916093987187dfbd8a6f07a6

C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pkeyconfig-office.xrm-ms.(MJ-ZK6471058239)([email protected]).zxc

MD5 8b412ea5cbd8bc32963df0d5fbf0992b
SHA1 15f05f2359489427f16630d34b77b5e07baebd94
SHA256 bc4ac90dcb3105e2100a2acde2ddccc49f073607e8ccef17b4036e2ef21370a3
SHA512 3fc6e56b26a660010a855e7ecb8df5ce6abcb35dd2d0a4a8f48dca4bcfe0a0ebcb47d945fe0bf455f5a5fbb96c940a99cda336ce0f51cc766c37501e0e637e24

C:\Program Files\Common Files\microsoft shared\ClickToRun\ucrtbase.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 9a6b347e01b835ba0fcafffc6916cf3f
SHA1 dfceb35a9f8d4a93517d45e4fd661632b269c4e0
SHA256 caaa9b2254274e8e718aa207f0abb9b133bf0ca1a4eff968208381766a8607c9
SHA512 9ecb387bb3b0917e51d43f55b8e74ecdeac6059bbbf673e4f5362769e9174cc9edca28b6bec5d5497c75fd7b5e1c1bf1efbd2442fe5c4e225a39ed4df20df638

C:\Program Files\Common Files\microsoft shared\ClickToRun\SharedPerformance.man.(MJ-ZK6471058239)([email protected]).zxc

MD5 41076ded18c2f0b0cad0e4ec938d816c
SHA1 965eca5d69355b50b9b9e1ceaab0e129fc029c78
SHA256 37e46f94a218b04441f0869edaed6591bfb909289b0638885895904579fd75fb
SHA512 3e2bd04ca3b0fedd0bd9099be06826c5bde98eaede252cc5417ea76ae3aa254595ddba9d3a8774efde0b322c3f4339e60ae3436b78316579e30e3579e1c538ea

C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE.(MJ-ZK6471058239)([email protected]).zxc

MD5 204a62782fd4a588354993d6969723db
SHA1 0d41f716f80b17ae878f47933b43541c2082168b
SHA256 8e1e7586190fbc26f8e3e953b3c9bd79cbd716d50a96c6bfca29ea7049c9f7ea
SHA512 032c1edf3ee1f7e716d25d96508b17697e974e77c6dcca74dd2a8476a8bbbab77bd1dc5157a951c125a893d4fe7e3348bd63df93536a0bc717cd2724ad117287

C:\Program Files\7-Zip\Lang\es.txt.(MJ-ZK6471058239)([email protected]).zxc

MD5 5279c785123321b9211250b92708dd42
SHA1 66ca1223769a2cced4100f2e7e24f08db989eac9
SHA256 45985c109a52276378b97d32eed9482b1d42225642740158141c7f6ccae6c51a
SHA512 898e9db2fe85b31c0893df6debf97452cb4683d3f77506fa3947fc9fae7f1a21126d0f336188d66932306f9ef0f444104ff2b794c90b8fc69d63ebfd09a22eb2

C:\Program Files\7-Zip\Lang\eo.txt.(MJ-ZK6471058239)([email protected]).zxc

MD5 b10338f1c55b3bc5dc883ed6b80881fa
SHA1 5655d509962870652dbae04bad42be955dbc0363
SHA256 3ad8f8e81dbbb1dccf99595bb60aef5a289fa93a4e6a20e3191716c20671973a
SHA512 8371cbce68551235c09e83dd57add776d74640d32c03497bded0305be9050831595483d2295dc2f3de7b37d1329c394cc2828431c9a15eb05fd7bc3280a7525e

C:\Program Files\7-Zip\Lang\en.ttt.(MJ-ZK6471058239)([email protected]).zxc

MD5 745dc22cd6c3ff0c301ce5b61899dbbe
SHA1 8a2d530ac360b495dc0e19230bce962410caf8e5
SHA256 8e96c29300d5a7df73e5ac57a7dd8a4feea20d5e51c534a36eed5c6d353554ad
SHA512 2fb1713b0859bbe2fa956b85657d1cdb3b06b2e3dda766dac6e4afe021535d870827eb4d3f5985f17f6849e89abeafa69953ce3eaa7cdb8f8f6d666272569594

C:\Program Files\7-Zip\Lang\el.txt.(MJ-ZK6471058239)([email protected]).zxc

MD5 61a2b3a02a6c134b2c085425548fcde3
SHA1 0aea0b4aa9847d88478d3c255b74c0a0e862a37d
SHA256 fba2fb089b970315afe444a853645d81a1a746838f74d3d5ee786ad5389fdad8
SHA512 6bd2e5a353293333e058c434d751c5323ff0c953552bb294c5bca9cd8b4fd4f4b3ccc9949d8c0b7ade8dd5efe967717159b64c6ba0084c196b38b6d6004150bd

C:\Program Files\7-Zip\Lang\de.txt.(MJ-ZK6471058239)([email protected]).zxc

MD5 c35733d18905f619a99c1c6e2a3c2b61
SHA1 c36a3f6317882978c7530e3891b7876a5c7bb4d6
SHA256 a9b2f8ce8bf2fa26698be82e170095fa4c0556cbb11ac96d0e2b1566281a6c80
SHA512 d955e324e9aa9bbb1b3f46bf945ef7ce2d1087a96bbab3f1814eecde177c558d052331713d18a2939518c23d5bf6c0cc7df7c6c180c17f8e7595f090303fcb31

C:\Program Files\7-Zip\Lang\da.txt.(MJ-ZK6471058239)([email protected]).zxc

MD5 a457738681ebfff0d81ecebe7ddd5250
SHA1 2562e35822de035f44402669ce2ac5debb919aea
SHA256 8908ddc1d73233f64d2648324c2677b71914cd2b1bcda14fec91d4225024dcda
SHA512 41177fbbce993fab7c480f887734c257f758bd23fa909cbb6cafa371f4343bc0b813f21b988b0a80773b4f905e34af7642d4d002a0c84330331a0b2e387db6fc

C:\Program Files\7-Zip\Lang\cy.txt.(MJ-ZK6471058239)([email protected]).zxc

MD5 5de0a58a22a01fb7945fa2c53ce4e3d8
SHA1 d5d9dfd842e7a8bb40a0ca4ac915af063be62531
SHA256 352bd9546fc37b47ff6a81e6e8d267f9a67ecd019a7e7c8dbad632dadb8abb53
SHA512 c720e776b5feb8dfac1f792383ed5ca179fa72e45b61e45a06e5626032aba4073d2a08d63f04819b36772fe10d92b54d36d4762e905cbe98ce1794e1014913b1

C:\Program Files\7-Zip\Lang\cs.txt.(MJ-ZK6471058239)([email protected]).zxc

MD5 55bf63cdf8a3f1806ebb317531f15062
SHA1 26a392f0e5b05d337f96e35ae1ffd245649d4905
SHA256 03fd9ac93fd0a2dc47d49b29ea756d194929503017df57b101ff6084874f18fb
SHA512 c6bde6cb6331c01300ccb5624adb4509b26d28f52c9560712e48b48c09072633093059092b8c7f55b540d7167a949d20b83ec41ca24d86fa3c65d535e71e0b8a

C:\Program Files\7-Zip\Lang\co.txt.(MJ-ZK6471058239)([email protected]).zxc

MD5 845ba6016c5bb34f411adeaa215bfc88
SHA1 cf7ee1bc36d083bb82998cb9726676825753f04f
SHA256 7cc3424d4e16d8c7c8ffa70f66d307a6c751d04292868ea9c685669880e93a10
SHA512 2f288220d67ede5ad18767b08c18804c18ef618c50c90f5781242dc08fe4554e83ba6fb991b61f4a907c0699fa29b6b7b158ae6b1f8990c89e7c4f8ef2f1ed01

C:\Program Files\7-Zip\Lang\ca.txt.(MJ-ZK6471058239)([email protected]).zxc

MD5 688bb69531a1712360cc9f506edf512e
SHA1 0c84184b7f3fee937422c4bd11c56b654a4c4b56
SHA256 c107f565b9c0fba730f135dd7e1f8fd4da79e3467b8962fab1d15d03b663213c
SHA512 75749e1688c1c1f840af09a50e97f3e26d183bd80870c3c536bc284bb31f0e981948db8242beb244f8ce61d969a30bd206a8efdbe6170662c3a1674118989a15

C:\Program Files\7-Zip\Lang\br.txt.(MJ-ZK6471058239)([email protected]).zxc

MD5 9a8f6080b4b615edb46692e6debcfe45
SHA1 6c1a65b323e0d00eae402bda53bbeae3868031f2
SHA256 c28e2148ce0fec46515689634821369f4c30290dbd58c7fd5d387a781f12af4d
SHA512 b87dd83e433c60c13b68d544a7db46570e449c6f80213f603ab631fe8ce2f772c4e8eacc5eefeb24d140ddfd423f149f0efb13d26e9d3ee94f2a37762eb2d874

C:\Program Files\7-Zip\Lang\bn.txt.(MJ-ZK6471058239)([email protected]).zxc

MD5 bf5ce148c36c366dbf4d209475786eec
SHA1 9aeba166ff6328edde35f5b69c1f217f704aa205
SHA256 56a8447c1c0c766ae7d8b740cca3c95fd730fe150f17a9706c600870a5d25528
SHA512 7345c0c1ab8a6698ef8fd11776c8209d714a6b7950ac8500d5ce41a8e6e7b27ccbdf99d7e2b74b3140d0de950214a9286d4aa2da9d16ef42c42a64725fd1f170

C:\Program Files\7-Zip\Lang\bg.txt.(MJ-ZK6471058239)([email protected]).zxc

MD5 967e97640d349c67b0e253ba0c74861b
SHA1 b15bc32ae4afed8f3013542f62623c2dfb2cc127
SHA256 a63a9fc8cc96421dc500d54a0b9862f9bcc9038b500a63d427c922dd2bd15dfa
SHA512 8cc17c8a969b35a54a1009603b26d829da0a1b1e13d307716ddfd23fa4498114cd39e36fbabe47d7e31514a59d75a661021bab8373b854f0018a7d4a6774a9ea

C:\Program Files\7-Zip\7zG.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 5f2934710fdf3635f60af3c1d5281213
SHA1 4c2c79283c2daa4873ed64f2c2cf80071f5cc122
SHA256 2521523923a688bb5e5fd4e9059100db9e244b497c6d23f73ca14bc3ed139c3a
SHA512 72c7defbbefb207ae7c10049ad9b062c3e2a09f56d0bc8511833a46cf96978e7ec38bd1d90b8bb81bf58c2e0b2cfcb4e9390f8cb40517210014864413d161962

C:\Program Files\7-Zip\7zFM.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 19cf0a266e215e5302d542966437e6ca
SHA1 408ca037c2b572066b4059b0ba5bf3c159056e16
SHA256 4362a886ee9f4916c8851164a0aada2e4d4f01447a2ac007743bcd55990e2042
SHA512 12f5fba8e74211514ba029f24ba9731cb2af5b10b016ea98b36bce8f5abc56b0511280ef56c9291251bf5ad3622389f1273275a4446a4990748ee3f87c5e915d

C:\Program Files\WaitSubmit.mp3.(MJ-ZK6471058239)([email protected]).zxc

MD5 76cda711c267593a33526f2fc98ea61d
SHA1 84af323f1f94b6a5b4360e295ac0aac8070babb4
SHA256 3309c360f8e37c881631f4cdabd4157915c7b92cfa19ba93a08265ae1886a1cc
SHA512 9380dbe555802f557f827ce00b145d3dc7252eb0d7e053fd8eb665f8829bc06299a6bab71898e646c8f256e5edb721207f5c48469bdc2d5c8b1dc950734ed832

C:\Program Files\SyncSkip.cab

MD5 6dabf9987334cfaa4d41453a91abcd78
SHA1 3b276b76a92c37faa609f1b5a1ddb2c34fbc45dc
SHA256 669b2c58a7f1d6f2cb28d781e708068e4e2c182151cf94bfa037469096e7325b
SHA512 eebb0521c639193642a005241f64bf049b0448c892ddebd15182460fa1d2557982a76084e8b24a12587d4dbb500fea1990ee5b5d0e1311629a16a1f549d3f3f1

C:\Program Files\InitializeConnect.snd.(MJ-ZK6471058239)([email protected]).zxc

MD5 b1071387db4d481ac41d9e05c49d6206
SHA1 8a8cafd1906b0763da8b6ed825e2b9a5c244afb9
SHA256 65e233b22509d80fb3028b1fe89b75874a9434dee35f970e3af9abdbf72a8568
SHA512 da41bec42b9519d8813707bf8136ee063b2ad69a561f4ab3392879a8bd4409edb485688e8cff0c007e3f62fa421fdb971258e9450962958c43779362f52e2e02

C:\Program Files\ExitEnter.rmi.(MJ-ZK6471058239)([email protected]).zxc

MD5 fdebc91e262472dc03c8416cf66cd182
SHA1 36e81d26c26481a1cd760af8d0c9e042415495ce
SHA256 64350683f501802fe9a0c1e9f577527ebf4cee313e647b5ba8a9850f37bd2555
SHA512 9841fb884c8339b9e31d11472efd8d494e8d1b167dc9036ce6bd91e75f02a6e048069df6dbc8adb2df40e5bb44324d9e7360e33fc46a8e3f35bc6780fa9f74e0

C:\Program Files\7-Zip\Lang\be.txt.(MJ-ZK6471058239)([email protected]).zxc

MD5 7dbb705eb71aaf0d7b3da7e894ad0f4f
SHA1 2c92017516e4155d4e7884bdde5e5284231f4c0f
SHA256 6efb9f7f2a4bc91d3e8b5fe5a24a4d3bd4ec3a77ff4eca5df68238f06596ca1a
SHA512 008b122e86b529e40484382eb72724102579e8e3ad06f977b544ee7cc0f7c423eee6d457ff8bf06fea6593eee105084c1f2078d2a7061984e7b869915d8b2545

C:\Program Files\7-Zip\Lang\ba.txt.(MJ-ZK6471058239)([email protected]).zxc

MD5 ddee9913ee44b8fb4987abd520e7421e
SHA1 d7d4fdaccba743dcf4c9e951fd834ab8c4fdb9e5
SHA256 37d8c202cdeeda5b0ac648fbf468f8b1ce1b7cfaafddd3462f739fa426654a1f
SHA512 56f4eab476b8c9475f86f13f592884af6354bb037dae339f7ae4fc97ed7d8150f8013e3a2d0706001e8209619e8dd0b005a93753bdfed39d299b434180b44067

C:\Program Files\7-Zip\Lang\az.txt.(MJ-ZK6471058239)([email protected]).zxc

MD5 e9a0ddf563f69c43ee53df397bda29d9
SHA1 6565d291f3bd541f706d1650dfe978efeafb7d4f
SHA256 cee03f40ec2ffebb84939fade41b3d3589bf66f769ad4a28559274f16aa62207
SHA512 3e0aad2122e5842f2a4c3cc45acf02c5db025381c49ee14efd117349dfcb27fd65c18c8757c1968fa5f4b1894c6ec3d23cc74e79a537b1afb9179db371b06e62

C:\Program Files\7-Zip\Lang\ast.txt.(MJ-ZK6471058239)([email protected]).zxc

MD5 79eda02c4ec7e6674cfe62fa084839a9
SHA1 c0fec1c619b5d21399ffb34e24b4b72ada584412
SHA256 7d60c06bd49b4c8c7cdfb72a6db76862451d7c6187c80ad30dbe8608c2976704
SHA512 b174191ed6a79133212685405e3be9440a4763dbc33ce97c824b2cacd30bb09ae8f8228d953581d523e959cb70ad288a018107f98585c19e10ad0c73daecc8dc

C:\Program Files\7-Zip\7z.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 e3a3fe6820d5f08b3717da3908e0fe26
SHA1 61e9defd55424a64e10168a00f37376c6fa3e313
SHA256 0b5020731884dd1f34206ebbdf1e286feebd50d3998575995e6aa85c00f27672
SHA512 ec381147aca884169981c217e4a272bb81e5e91f49597f3dbc098d53b72ec0a4a146538e73bb741d1bdd218702d9dec5e616fc6553037a9ecb1f4e40188ab002

C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVScripting.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 33db6bd1e4ef639a139d1509365696ee
SHA1 d02359f48f204abc34701fc08a3dcdfcfd10ec49
SHA256 1379be9da86393f47000df1e2fecf305c2396cd7fe58d7241c9c6bf90ded8d02
SHA512 53455c6927ccac121a158618ba5b71a9a2d525b6bbc527c0548272df91d3b053661d7c93d45a8459f0f163baa6eb14c59261061965d6fe0887ef9c8f447846f0

C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 876ae84450ac039cb04aa44c8ca9a62b
SHA1 0a9f7bf34173661ddd3b0b64bc4c8a87ed07e07f
SHA256 2e75e7058623c63bf567539b362eea35a56836c1b9c514d62b4744ccecd7db14
SHA512 f07d468f496a2a2a209b6d308017e69cab94860912ca10792dd3b202df8d9b91c052256bcc602ce68dfdade0cae14a9d5a448cf9488b5fe2353a7a5aa98cc2ba

C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVClientIsv.man.(MJ-ZK6471058239)([email protected]).zxc

MD5 556ca347d88169e556df8502aa51c88b
SHA1 9d9addd912e998167fdc788b64b657982023ad45
SHA256 bca8c7713b9fd7706e434edc2577fe7a808f131af0d222784463506cccbb7460
SHA512 d862b593963086d6f9996b21bc72e5072187db7677dd92d9d787003455c34d4b0ff51c8f5e12eb9f6e5b29ee5abe3ab318ac4ae4bf7bfcc29e4e4a8938ecdc63

C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVClient.man.(MJ-ZK6471058239)([email protected]).zxc

MD5 2f5750b2b36e38b28516d6cf47bf10db
SHA1 cc0c05fdb6261f7f92648e97a2ba3257e954153f
SHA256 d6b0a9818e66e8b7f442c8ae3ab4fc34e59c706413938e597f49b141f8ba804e
SHA512 47e941af1fd6466cec3fb54703369ea1b4d54005cdecb40f9e67e245a4d25a2ad6ce3684d23839d71cbb9abbf4adaf297f085aeba68c8a11b835822a091811b1

C:\Program Files\7-Zip\Lang\an.txt.(MJ-ZK6471058239)([email protected]).zxc

MD5 b6fc569b4a1ff077814f7bd60ea57d63
SHA1 489c5d3303a916bb5dfd872679a1320ccc51a833
SHA256 b4f66d95bee3203d4d3fcaa132b6aebd9262f85cc7648c51fd9404ce1f8fb137
SHA512 8a2aeb157fe8110253424c50b2277230955b7df1b5a2bb604e12de76599507732fa59c386d385869b4e5328f3bb02c6e64d65617173451fbab40a739db60e9be

C:\Program Files\7-Zip\Lang\af.txt.(MJ-ZK6471058239)([email protected]).zxc

MD5 e1628c9b21ca5f2de717a2d7d16ffa11
SHA1 4fcf9b9ae75603623ac339c7a2196b1ca4e0664f
SHA256 bd07e14a275e7a92c2abef31720f10668115f3eecfbf75d771f5adbdb5dffc65
SHA512 64ff4cb5b82546dc8dc786d2ee4c2fd8465191a9e40e59cea701bfefc50841316b55207d709f85cb41437a0950cfcc04d0a9ff736afaa560a8f31da2440e6da0

C:\Program Files\7-Zip\Uninstall.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 1ac81ab307ebd18a0e8cd916bd28669f
SHA1 4775fdce293419547e6275d38ecf43d1c9f405f7
SHA256 5d7a6e08deb3aa40ba7d71846d91133f84d1872808e4cc35900d84bf131b4872
SHA512 ff72e70434e823668708891141ad5ad5b2521e61cfa04fec1f14fd31200ce56696fe27d3c08ed04ae5699a6687766758f030914e4e1212b12679c96fbc87e18b

C:\Program Files\7-Zip\readme.txt.(MJ-ZK6471058239)([email protected]).zxc

MD5 413aa2332a2d94b8fc5c1459e910e47c
SHA1 4e648fa977d4526b860d64f74e86557d4fa2bd7e
SHA256 ea92ae7ce6c972afb68c6f9bebae1e6042c56cddee20ca4647f024efe840ab56
SHA512 1e8d12c73e80e24ef64320983ae3c96572d0097a44c830fad2d428f198acc955b424322d3daa2f49e34a9b477839e2acd01edf22b85ae2179d1ccee3b368310f

C:\Program Files\7-Zip\License.txt.(MJ-ZK6471058239)([email protected]).zxc

MD5 1d1c2bd080b4fc5dcf984e0065842cdf
SHA1 3a65213b697ce62f83a04cae05631141007b3090
SHA256 35019d883177655b484f70409ede46907d7390f360274da713ba75a1851774f3
SHA512 e418561c1ac0d2f126e0482084004ca84753118a69baf39cc2189c1a041d5abd959808d2b27ccf9a89db6378b7a820f6f351df7d50d06778e99f25b29fda0c14

C:\Program Files\7-Zip\History.txt.(MJ-ZK6471058239)([email protected]).zxc

MD5 ad4bf7b6a0fcae5dd0debe01bd0a80d1
SHA1 b9470ed3e4bb9e89259a1e3b543f3dbb9fdec586
SHA256 2bd81e05b946408ff9087142bedefbe5e8e853d6391b99fdc15f9e663c7429a3
SHA512 2e56035b71711fba539293d7e574e897334e409d6c915703c53353832b44da32d5071fd62cd65200595d8a658408532edd9279c619531ca09184f812197fd496

C:\Program Files\7-Zip\descript.ion.(MJ-ZK6471058239)([email protected]).zxc

MD5 41dd27d2ed07c6a08ff4ca7891314055
SHA1 32aadc590d6a676e5cfbcabd83df59b37e6a166e
SHA256 58ec7dee7b9058e9b19ae66f2eeb3afd06fa83c01652780ae69903a89268a128
SHA512 712961c1daa8c105ef485b6187ee7e28552c85ece0b6c16f0ff0f78676daaa1988774fb19c517de38b74a6c7732b1c30151a31f02eb6ffa84bb437182dd5a5de

C:\Program Files\7-Zip\7-zip32.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 4d0fe8adf6a40476b8fdbbe0298aa289
SHA1 9cf4b9e44a06436d566057ce07e5c848529bc9d1
SHA256 ed3a8caa5cbc62e6448c2ca822abd3d2e8fc279465bb634418c821c45f031656
SHA512 f623b70a725860155512e3e7b757ff9b4a1c14ffca7c260ae183b65acc4f33c5f52ac571abfbe2d9cbb8a70e094cd7eb3bb74cdccdf0cb8f27e43e5d2173a38f

C:\Program Files\7-Zip\7-zip.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 ec56d290e6502285952072ee79b33b5d
SHA1 f659704f85168cb5420e35c8289b52b27962a8db
SHA256 f8a61a7b6f4d20f19df10887fa30b58784c779292bfb12ff96faec91efaf2b8a
SHA512 e0465aa56ad99384e6de4b0f03ddb363f44b2012345c948b1fcaf7eb36a4f50d3c88023bfcdffc822230ae2c45b45c05b0844d8ddee3cf2848ee7979b5053cb5

C:\Program Files\7-Zip\7-zip.chm.(MJ-ZK6471058239)([email protected]).zxc

MD5 8f312568a9a20b577485408a9afd1671
SHA1 81f0cbed6a383fc5385ee9189e58056f10ee8972
SHA256 17c7d18460b28e8dffb33879f793735392433be77ecd3f6ae774ad5bf085f4ff
SHA512 fb3394bfe55c8c35bd59704287ccee82a9113af4840c11a5e94240a97a9caa38a5ca646055b4a2a8ffd9e849e072fe80775f649bd4d4308ea32cda1d8918c2c0

C:\Program Files\SubmitExit.m3u.(MJ-ZK6471058239)([email protected]).zxc

MD5 b9cc596dcd5e2ab85307113bbba3847f
SHA1 369f99b13d6938a2a78517fb45c88878a32eaea7
SHA256 264712577a259f7ef73ac666cd0a6ffaa869eb2da3ca7ceeee42e483771fc0c3
SHA512 f9132d036bc2f414da7461ac0292563b93522820f50e86a53f5f41b0ccc28659516847800836ae1681596232cac87fbf71903b6758e87e95835432f3578a573d

C:\Program Files\7-Zip\7zCon.sfx.(MJ-ZK6471058239)([email protected]).zxc

MD5 02fc497de5ef612304845e3d76a9fe1a
SHA1 e9970b1b8011054f0e766fb342ebcd67663c9d9b
SHA256 e7be37e5c8f025c6b7fa8d3ef851db97825eeac6fb1cd1680ae617a3583e0000
SHA512 be14a2f68360c19013bd6b7200c28de8a0334260b522f7402a43501a3f73714ebbc9a0a421ff02526de7847eb99420dc39910b77b6bb5a27220d238e042463b3

C:\a5f1eda8760fc790760b7e5a7f56\2010_x86.log.html

MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\clretwrc.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 2ef962d69f90064da0067388f0324e27
SHA1 0996e705bed449c99defd76276ff918e1deec0d1
SHA256 f97efa40772f6ab8c8dfa9c7e655d27990ed5ab8083ada702a9911d9b91ef043
SHA512 f9d4fe7f80ec21fdfc04673901b4b1b42d940d8870f92fcd486494b0dfcb8b188ae4b0e5cecd236a7d4a1c537bea52de89b38082a497d8894131a6ae185d0f17

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Data.Common.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 9e12b3e2744f91cc64991c0c4d31da09
SHA1 ff6d112d070234742110772296fa8a4f32076d0f
SHA256 58323a1f25761955c03e7f7cde7f207585ff0f2fa849761a8cbd8299850de128
SHA512 ddd2e0907a390c77a59b7dfb10559acf8b4c77fb4e5903a3cb746b8c1c5044955ad92c7283f7d88c200fb75a0807aa5e94eeed69a5c568e61783fea68350cd1f

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Collections.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 3e40cd959aaf448066ddecd4f0d6b03d
SHA1 b20122b5304cb6bfc9f4d4c6119019953928a7bf
SHA256 8f96686d4b23e3bdf4b1f491df45355cfaed4e982090432bf9708506bbfcedcc
SHA512 3efecd47941b80fd10b1b68387b7bf320a2f2b77804cadbd23c14f38fc810a44f446cfa9a83ce2b7cf773e7723340f4ea6b1a31fe647bd4d6189aa2be755bcaa

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Diagnostics.Process.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 70dd13125001d5ec5d1008e084631c4d
SHA1 2fa6cc2da2db97f33af12bdbdcc4398c3d6c02b9
SHA256 e50592a24b3137ab9b5f991c0ee259bce3bca184f889248437f6b719954fa7b1
SHA512 6faed37c2cb13c2ddaf00345284089033520d5bc422d3a95865a8da97778a7b8b42753c7dee97d47811d715947ac2c4c09e83bd895fbdbbd7d4b37ad10db77fd

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\System.IO.Packaging.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 8bda82c404b74662d2d64677148ce180
SHA1 6e4de11cfe0cc42b2afe5af1f9bb786edeec3545
SHA256 42833f7f1a6a1558a200f77896898681a69e53edeac79c6b3142598c1243a03b
SHA512 162ad0870888bddfefde70bb68ad466d251a1ee3a151f744741c8a79b6efede17fc09fbde2275cb62da5039de45fc3170a09ac9bb471e4b56f1a7bb1b8ffc776

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\WindowsFormsIntegration.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 fbe3d3e787817588ec1eff1b530db537
SHA1 b8b09ce1fe15d4ec2fc2931f727bf462a57abb8e
SHA256 70af75229f718cc91f8a9d6b05f3ea02fa421b7fa0de687b5f7f01afcf62f5fd
SHA512 267747f030b6664c15758afa305791623ede1de177a169bd75df1367675d7abf27407e996e434444be3cdaa655dfe88d1e5ff19c4f89263e0553f5d4b93169e6

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\wpfgfx_cor3.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 5d17c60254919c7bd251a71077b53015
SHA1 74bd6eaa9b83de1875ef64c626d75e09abbb0d05
SHA256 9e15d0f55d4ee496b0dde7969e8279ca395c22a9df955bb978fd5b5d2cc2e797
SHA512 cc084a11368e12ce6a5f33eccf57fdf7e9b6c372739942b04b64f67b131d6dc2d5bcbcd3c95f9703a4c67ca7fb565b904924d3b7af77b2bbae1dca9bfe588cdb

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\UIAutomationClientSideProviders.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 e6d4649f8007b46ba6229230dde1c0d1
SHA1 331bee7773d839ef7e5bdb9280fe70180bc3a62b
SHA256 eb987f5eb6d2a28ebd0d8e650a00ba583437771a747b0d1a0fb125a3533f35bf
SHA512 d8fc9f509dcd34409c905ffe92ce590e4af707fe73e07d858b3cb9c68efe84a76773d0f94cba88f73165b8bb83a66c97c610a89107c3fb8573cae95ffb64a99f

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\zh-Hans\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 f7f082266017963fa59b83c869105009
SHA1 01bcb51e8d83d2f6cbfc6017fc4e33b6bc39538e
SHA256 a317e4231a20130bd97a11bf3e2a7b4cdb8e3f341e88466049a298c2d74419ef
SHA512 149bc1f4fa060a3e5c4c4df1fdeec0ab817785d7e58c6de081817b55923ec7f932a1bb39b3fa33a47ce9d16a30fbc866d9a19547cf7802ce695ca6a5fd61e5d5

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ja\System.Windows.Forms.Design.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 9697c7707caebeba75e683a0594711f9
SHA1 0c84d2d5ad0cd56315b017fa8a1ac47300e40200
SHA256 c02a93aa4fbab4b28e2653cefcae4e5944455b0db04a06c4ce3f107b43ba989c
SHA512 be78f829fcbc5b98f9486f69b0f3bd3858c490463f6ae85d6ed19fb4c401c05d9ba5c8358f436988d786a9ede3e44d8d253e316f675af8a19dc1a448838dbf5b

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\zh-Hant\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 9d996c48adc62c83fb296659ce8c2994
SHA1 edfaf1fd9ef41a7789d462a103caf9313058b952
SHA256 a461414dafe61c63592866606199e7c844a259853416f18f2daa271f9f204b70
SHA512 5036aefb52d56253df56a9f9ba7ca472275cc96ce3e138b22004f8b4e5c56691b6c50392e6f3efdb09e625d359842f546fd0eca664426d190922eed61ae3feb6

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\zh-Hans\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 ac4546cc9d3f03d1116223b7d99dfe40
SHA1 bcd305dc816c2d899fd837a47a13454a67b2868b
SHA256 c44735c1fb8f84ee3129ff02a182fad4bf03c87535f63e9f76d0d53aba4981f1
SHA512 d8a50f9b108dbd0f21c5c6214285159e90b0df375234b5eed7c568fc55d5bf30e772b6a02d5795868132c926727790fd28dffaaa28b8ea88deb445fb1a6fcc5f

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ru\System.Windows.Forms.Design.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 77964915297ce6fd8e009e08706121f0
SHA1 ca76ae14d73cf6d6188f7b4bd317dbf0efb31193
SHA256 fe855c441fff6e5ba51bc070a96477a093bb94e3dcafa04cc356b68c0e6ffe1b
SHA512 1746a5c1533f2a669f94fe0470a1fb28b3df75a25840cf8da9da1b432887c15cfede09911a595c5b4da0f9dccc14b037dfae6c5ea57a42cd05887a3ddf4e893a

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ko\System.Windows.Forms.Design.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 f8d7e57fea0713143cf9ec1fb95669f0
SHA1 b51cdd7086276a9ffe997574b19fec34846e43d3
SHA256 a9b2fcd1a4f052fdac59726693acb4365b31ac3fb69893a68caf1014396928eb
SHA512 566bddf9846acabeed664cd4dc629cc24c4acfe928b0d778d029e72dcaeb18ec05375f24c90be7dea6bb41b1dc043a9459421a0c30b5053485b70627f35c5b5f

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\it\System.Windows.Forms.Design.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 f6eebcce46106f96ec518fbff895c23f
SHA1 7d9d79876a7913c3a55bbd25b9ee4bb29302157b
SHA256 2d37cb5148edb71eaa73fad18c287ca8c669273c3e1fdc5f35ebab3d517adf70
SHA512 6b58715e50aaff82923f640320801b8cc8c22ede11fa78956050ee760a35ed30c06333b35bee65e918eabda50f94d0416c90eb7c49f35091b21036c204ee6a4d

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\el.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 584e518e5bb5b91794b4990d4e161dae
SHA1 0de69f1c6eda287bceb5afd8784b0935806098c6
SHA256 0ef4d12eaa711a5a72b4efe34974b9655d648ac2ed2546829192c110daab2073
SHA512 09c488aa08e68dc437af1e775dc4496f20d1bc2c9db1111a96bc0bcdff36f9a16be7b38ae867a4173123b1524ce2d171bf8a881ca3171cba1c17e4c22ca223c1

C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 c8d31dbb93dc1cf9dc04513dc59400e8
SHA1 0e45b36ecb2e9e28825fa7f3ef89814dba359605
SHA256 d55296f76524bca688d4b543da3705d0739ef2ad9b3345ae241fdd32e9b42332
SHA512 e5aee092b77f16bd65ae6fa5e51286fd98b7430a72dc97b3ffb555810266512706b0e71ae2644759f47a010493d200441fae9f08291bee8419ba8ee2f9613eb5

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\cs\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 a1b55c928ed4c86b36cb0eaf93995e12
SHA1 311ca03573103935325bec578362f709931b0125
SHA256 c44bddf1a0ea4656ef680d6dee26585c89697689aa4ee4b978327ff436991cb9
SHA512 7bcad4e162ba404fc9b47ed81669188360360602be50337d5c6e8c4d372e1f7060dc6eaaeac3158ed5dd3b034bbe686b39a06a15ad4f5b68098779e237a52835

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Security.Permissions.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 c38cfbc5cf214902972b55ec6b7c8590
SHA1 e49461e3a8e867acfcae4424c41c5ffb13006cc2
SHA256 827a3f189feda0230c4900dcfde84d1a1ce2d9f00bcb17b595559a0e248e954a
SHA512 ce05ef44a174c9833a72f0a6532fc3f29dcfaf5dac1c151a637f55ab6b2bfff7eac9c9e4333f4e04f8831d757ad1bf5878dec201dff803c575dd4817fd3ec75d

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Security.Cryptography.Pkcs.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 53701f608f2f14af28116af5de6db9f2
SHA1 a68095f7e7af8a52adba6b8fe4b1b840dc9329e9
SHA256 a32d13343afee9497fab4ec46a217d561e1ebedce006076930b66a407c2abaa1
SHA512 f826970d4e5bfd3f173ebb6d545c1f9ecdb0d43e5a78563d1a08d3e84c6f4b3d971230a67db10e3e9fd8ecbc43716a1ff842cb227b1d44a90a76c90db29e9085

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Drawing.Common.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 d3b418683dd0d98812dada4dda4170c4
SHA1 740fbcac9154b5af38047769391cb65b538e82e6
SHA256 ce9707a8899bcb8a53bda9bc64aef5fcc38806dcbbb4c3c52e86024beb66b63e
SHA512 63a043045b06e52c840179151339a63aa27c26c53a4f96be6b21267cf0a9ce32f9eafe68aad98c82c109256723b074868402327a54a134be1a0bb29509c4952a

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.DirectoryServices.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 e46030e6e7f107d90d458489298aa08d
SHA1 d25d686cc0d945ec390c0fab254280ae8467e3b7
SHA256 762cd0f7358f1c59dea99537022c3e0d134219ddd318d7d4fcae11f685ba9b39
SHA512 55321deddffc70e54a869632a57ba800f06ee0419220c9cd3797c64f1c2b38e8fe64b7614ef5c6ee8ce64daa8d2e4226f3911bd5dca3a0b41617cd280e5ea0eb

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Configuration.ConfigurationManager.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 d9e68e7b8a820419c305962b126e1ef5
SHA1 21a73e9108aa3cb721c20ce754dc6f2de1099118
SHA256 4e4d5dadb0a952967043ec8a7ab143a4fb115b14018a4d7a0a0afeebff88eb79
SHA512 7a1bec9fa650f24dbfe5a151c0118cb5450de9f411d0b1272961bd7b9baff28310b7a125a1780673ba8af3b060b831f82012a1a7e102301da7b68fd773b67b75

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ReachFramework.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 88aef721d63623a06af697a5bdff1002
SHA1 6ddd5250b509848bdcbcd634e3a6141adc3fcd65
SHA256 16f0298a03276f468c10939665b911de61f4776e31f4509ebd1c4b5a7359ba7a
SHA512 2945223c32d01e73c1829ce5cd955a90fe94392ad0684186ae04a30b45e12a9218f3c21642458b4a1d333d3c4db9298dd06ddc6015be6d877d616a9bc01ad78c

C:\Program Files\Java\jdk-1.8\jre\bin\fxplugins.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 1073690f744a36bddd785d8bb350cdd4
SHA1 d27d08ce8e5b2a632e29ef2a6cd099b70e5b5c5d
SHA256 32950685095aea9270ce8d854bb122967d8732d459259547c006e7aa90777140
SHA512 05e7f33ee70359f54c9d9044411d62c6dadf3ce567a394d04a3bcfb6f7627e9979c3cb03545fe5da82ff591829c2674798ac10d221fb024ad1da3ecb8d66af6a

C:\Program Files\Java\jdk-1.8\jre\bin\eula.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 6f0711e3821a2d8ab8d6095438362442
SHA1 1e0d8d5431e0ea663b3c4cd6b4f1e0ebae7afd80
SHA256 43c5e5b053ef7efbe24566495c06987d5e339311aa643c95ae729174a50b76d7
SHA512 00dfde25d26c1a4b9bc980feb40fd0af68ac06413a198f4576baa9e2a2cf9b6f186e130297a6bd46c4c7e758d9c2ef58910ce1a8a85000d088cf60de6a80ec29

C:\Program Files\Java\jdk-1.8\bin\javaw.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 bc0e62c193c7277c614a87fda46bade9
SHA1 3e4ca69e83c341a2df72cdc5090cf2a926ca7689
SHA256 0cbb78fdc119f8f39aeaa70435f4d355495a41b343b1fcca8e9f13e65201ede0
SHA512 85f89fed8059a0a798b3aa3df344565cb2406a5bab216a5f09ebbb275003d32bc6e3dfa99237581fd9df84695df896299bce8216da204920e736581f7a339e35

C:\Program Files\Java\jdk-1.8\jre\bin\dcpr.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 4424a260efa7a449f3cdd39ed4aaf380
SHA1 e819fdf3ec8d35f7a93df8e6e076a464c5e58833
SHA256 fefb0fe7d02b14f2dc81a3a3a1b555443466f33ca2a011a6c43b13db05c0d00b
SHA512 ecfad884402d21f802a186c1eae6e44118f56b29ec68c972f155ca40e23d3c96bcf0154f7711db619f57e490fe7d02c0aac910dc1e018df7246886eca7763151

C:\Program Files\Java\jdk-1.8\bin\javapackager.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 9ddfc778cd0070ec567b9b31cb512421
SHA1 36ad75b3226c83937085cfd3cc3cb0933ca0d1db
SHA256 13578f8fc7f17802f4819dbe462d3ea51475ab9cbf142dcd9a76913984552818
SHA512 d4904b5eace8ff4c4c4949d3988572af1bf5c66f86b43548c38a768137fe24476a1f727e380f50b402395e844e1786e4fa912f50d124c3de0e99f1641299e410

C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 2df95ee9b9920fd4f2a1c91c3c379a4d
SHA1 fbee74d7d83b12b74d95bcd556029c226ba0b07b
SHA256 7241c487912bfe609801b7bddbc18820c35fbdedcdf7c3e72f659164c36b9672
SHA512 700e7b41d4b69160cdfeeb9ce50f864c4b507478b4a6009ab1b5f29f3f6e4e7e5f8a9e110a54acaa44ea290c1e48b79a1f7ff48df9484b749017a410246c0746

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\bn.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 a0eca3de5316e6ca939a925613b2cc18
SHA1 9fffef453c79066b9218af365b96b0387490e984
SHA256 2d150e581fc3780b6b5653e7b8c5d4d27b1aeee5bb5379fd33b15c61280ac7e2
SHA512 e7e4d0dc1a283374476bc1977df0911df868908a79438095901b4cf8d5a2d3a8403cf505fcd5503a294b697f219decbf040ca34d5cc4e6a813ac3da7dfe00524

C:\Program Files\Google\Chrome\Application\133.0.6943.60\os_update_handler.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 192a1701ed0cf86819d55298290cd138
SHA1 1f0f161251a733e3f9f50639d22ffb026fe3a04f
SHA256 9827f8279358a46c84222e10c54902910dde8a1890baf49ac56d9e9ada6b33f3
SHA512 bdc00415917898d141a3bf00bb4746931d5035643499bb27e5b9c00fd766590125856e21755a4061fc4c2154cfed74626e501922aacdd83666ec3fd9ca39b213

C:\Program Files\Google\Chrome\Application\133.0.6943.60\notification_helper.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 1fb27bf4382487856e618740916d64c4
SHA1 01c9265efb2c7604b9f22cb19fce4966f0ca2c2d
SHA256 dd3c8de33d64e0ef230edcb393d02a90e20c54dfcb44b74f6b9be73a8c92d77f
SHA512 5eb613350f49993d51ff33706531493655027d25cfd51ae62eb19927d6091d59ef32d24e466f1d40ec9b94e5ce52947e927a8736c85c2f0feb20f55b446d914c

C:\Program Files\Google\Chrome\Application\133.0.6943.60\libEGL.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 917b48f2443b09577b94613cfd2d6e7d
SHA1 4d6baef25db97e6bb0817442817d584ebd4f83c8
SHA256 5fa58e22366253ce6cf8e51901c4c2cc1c34f1c7bb444e1138967d2199b933c4
SHA512 7fc16d6ab9eac91300e19e39a26571a1c75becdb25580bc66d7ed65727c151df862c131b5338ca24d0ee4f2c3429804b24bdda3e7a632e4528da47ace02934fa

C:\Program Files\Java\jdk-1.8\bin\java.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 a3fb3a24b0255044d3d0bf3eb1206d93
SHA1 640407722cf75c6b8bc0e3d6c4e4cc7912e4fa60
SHA256 f56d3e4f19bed4a51711581fbb9e95e2017ce7223f2d11263c8fb19379f072ff
SHA512 bda6a6756ffd150f8cfb2b91190b7fa66191c9b186dc9fd21ff28d31b27ffa5fc49c48f2e7ff621f52db60caf9956d5f747af63e9e213af4ab82ecff45e11959

C:\Program Files\Java\jdk-1.8\javafx-src.zip.(MJ-ZK6471058239)([email protected]).zxc

MD5 53db4397ae35bbafabf4c1014df0726c
SHA1 eefe2edb4a4c65a97f22e71c7b2fdd743eaca418
SHA256 ec2fc9c7a61d4bfa2fd64d928eeb1dc4034309e9cd7de996a5662da75d8ecab5
SHA512 0098e66870d4c8e62b13ff40348eb73b17c2c0dae5d97877ea339622bc2d8c141d56b15c34f5dbcffd75e91b8a19f2284855392e13ff8797834867a46c1bcedc

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\vi.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 6a223de9fc53624c41b5a215c1ac3291
SHA1 a4f41319d223946eaaae85c5b488641e512d2c99
SHA256 a9dca5d1e2e4a0f9615cba4c5b9cd3000356ad0c1fd2ac014ee3f36248503042
SHA512 42780f4bd4155db16af0bb3033324959b8da6ea5c8e5a96b117946e64a694a9006c81a6cfe24151b2ab54f1902c1643d1ceb116d81a5840cfeb1c9dd8d106919

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\ur.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 57e6802ff2fea6e6d744f229eaebd376
SHA1 757e68afb29e5286206920942c9ac3e2b9b1df05
SHA256 7c78c2646ed882dfe73fbde584d21cc51642a53b15351bf666498f450ae808a3
SHA512 251a2cf3db661ec78082d3c3c32f6f860ba2174da5ba05c8eab1399df8b09d2593af08c4c1bd7bfe8597cb3904b42cb1a056421546dcc7590cbcdc65881c06e3

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\uk.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 68f2f771e207b3b2e67ca4bd658810ff
SHA1 eb482eed5585febf6982376ec3b6095049a7cbd0
SHA256 be640e36d03126ba7abdfe55e8ef8c60bd0a6c193f63522a27b7bd64e8efd51a
SHA512 8494f3bbee88d179330c749485a73cacaeac5ecf9923a95b07bb01f88d49c278e156e7e0fd30f05caf989615aca9f27ec1cd90e8932e01e8a77bda7df213c02b

C:\Program Files\Google\Chrome\Application\133.0.6943.60\elevation_service.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 a7ce3d7ca1a833a6b60976ca4e435787
SHA1 c7fe6c295b4dd7147031ede61f4f5a2de7ddd362
SHA256 92c551142e68fac85b7138238e5fb010f35de9f980343b4c0863956d9e7d29e8
SHA512 902e004434851bbc047ec4c342054d2b812494ba6e07faabfbfa223e25059d317c8aaaf6cdb59df9d0df959e87a0830f74149ae879674b5f3701ccd7d3a0a05c

C:\Program Files\Google\Chrome\Application\133.0.6943.60\elevated_tracing_service.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 2dca4a134154cc5ca56f28ff1ebf70ce
SHA1 aa80a5af6a032b680881686b7a27eddf357cba8e
SHA256 d8569d2d620234d520e61c506185d7c0f99515285969d24370ab86c09951d481
SHA512 deeb5565b7e56ae7400a77b586605cdf070f0c31ec23285d7a585b4559d15e407e43552ba00c756d6119505a68257af73ee4d6266f69ca137cba8ba710e2b5d8

C:\Program Files\Google\Chrome\Application\133.0.6943.60\dxil.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 27acd0d6e90413815c1c6041b98abd3c
SHA1 04ef6af5e57563351146b0dc80940c6e16ac1189
SHA256 ac1fa92e7a7268d1f58619b1a23bd52b579fe6bbb6468898175eef79d36f227e
SHA512 7c4c7fbe1694b76631292f0afd8bc43243b15b6712efbec05229c3e0ab22aa4439aed73043368a366595dbdcb47e75598bb9eb6a585f1e1efd43613116e4d6d4

C:\Program Files\Google\Chrome\Application\133.0.6943.60\d3dcompiler_47.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 7beeb7a75ef0b51e919c7d01f7853d77
SHA1 9a12a28e90118acfb60cfc5b1bc8f6435c24d7c2
SHA256 5f6d890b2482f46fb2291870a9641b36830099a6f3c6c50b721e1a80de691916
SHA512 0fa325437f5ff67ef8dd10b384e7106f4d5c158ceda02f36c40828b8377cf1bedec24d48ab6fea0018b423ca7f6560f49322785c6eab2f5ad695b57df85a6fad

C:\Program Files\Google\Chrome\Application\133.0.6943.60\chrome_pwa_launcher.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 bfb560b91145a90bbfeea099663fc5d2
SHA1 3795a8df56fb97b6dc1d5e18049399d0be55783f
SHA256 9e3a04564c2d38f74f46fc3d071b29d351dc9c11921e3afcbf5295f754962ca7
SHA512 b03f965fd94b04899eef42b962668ae32d58806a2c606b02b85f721db0353b1c912ae05118e531b342da29514b7e72dc97052361aaa082e5b8d12c2fac334e33

C:\Program Files\Google\Chrome\Application\133.0.6943.60\chrome_elf.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 35ecf208683bc357eeefd1b54159a6a3
SHA1 647540cc81d5e31e0d6b1c2cea1a476adf21913a
SHA256 336b1c9ef19da8c83f07120e5e76bfc216099a2cf3ce65fb94960234c275a6c3
SHA512 47dbf3a0e37c5d4f1dc1b3ea91728ec192c56287fe8138ec7219ee0b914d8b11832400a635a0cfc108a2df71b92ce9f70c3fce5d4fc8703f928a6bd4b2375877

C:\Program Files\Google\Chrome\Application\133.0.6943.60\chrome_200_percent.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 924e0a0b3dde13a5e56bab0c58a14932
SHA1 a3bc7c8ce60b17547debaded3eb722c55ce46634
SHA256 a983661153406366dd423cefb192aea4f6ad733ed985c3d2d12d345ee38ca7b8
SHA512 a6351004807e598be92010f50bfb776e5de6f07a6e8bff1b3d8a40b0205f0f45c19d19e9ea5e3fb6fec536ab2b3f74221710ad4b2b30b25e7227e25ce655a2c2

C:\Program Files\Google\Chrome\Application\chrome_proxy.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 10917482855152cb9814c054e32397c8
SHA1 7bdfa1d9add57d584e531aa67bef15e1033edb57
SHA256 839baf50603f7869205180d34f962b2f3fb05dea7dab3bd4b004be1c9bd9941f
SHA512 7e513f12cd71ab217f0766b8cb8e8b1a18c3c94615c067092ef7e8a885e31dcbbc7cc92f71c95394cfdc46da8d1183fe52dce40a3257cfc763049bfba798cc7e

C:\Program Files\Google\Chrome\Application\chrome.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 27035fa31bb1e178b29a6a8d67759d0f
SHA1 35e739465a15aee119c10874f50638e421d3f6a7
SHA256 3f9af50cfc235ed9e2d026f7752a00a78013bb99ff0de069f4654da25fe6acd4
SHA512 a36f3b9ca830036b72f25647958154baa9a4fe14ea9664cfda18de8c6ad9891704cd3e481ef4e7a563880727403c71e7cccb1fe04a4b843a17d8531aedae6fe3

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\PenImc_cor3.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 d64aab12e51e0de72bd385e034655396
SHA1 8e9fe4485e5a19678ec9582ae0261ed553117d56
SHA256 758a92c754d59841f64a692caa72f70f2c2166a4466b879bcc10d23f5f2175fa
SHA512 40c4f4397ab45bddec1564b4b34b3a17ba4ae1222a7d99b53e083947797b71b5c1aaea4f3ab7910d9a0c3b540cb2dd9f17e107f13147b939876f46ca19675fc3

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\zh-Hant\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 93021c2004cbce96fa64ae41f7914415
SHA1 3aee37c87c7eabf4ba62ec2280e4ab3e5318198d
SHA256 591397d9614dfa07eef4c0f5c53c198e5c0e26b7dc56fc13af5d7e8578eb91a0
SHA512 dbeac3610e3950f9f3186956cb9045f591f2f20e12c55f9a2ee209237a3f86d6c98a2457acf2e52ddd5c2a99df8ad191335e630b5d1afab61a6aacce115e4bb9

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\tr\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 d170cdfdb62693173084523f0af5481f
SHA1 650a2cd3cb90cccf919c3bcb2858142206b11534
SHA256 2064f3a35779589167c79ec09a6538d03e14ec810aa1df5f71c085b58a8adbb1
SHA512 0378e64dfe1a1d36da2d66a8eedb63fadd5585329d7c223e3654485561ba572e4a2381b96e8826f5500d8cfbe16404800273448e4ae50f7e07eac6c66dc9cf55

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ru\System.Windows.Forms.Design.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 c74ba86cf9ab1cff892a1dcfd178aca8
SHA1 26809c1728fa2f36081303c1ad680e948d7ecf97
SHA256 eaceac6625177c08cfdad4965bddce71c3064d4e44f876a887055145fcc870a6
SHA512 31ed61dfffbdf583863b58005441726e77f56dfcae875099d0468dde802bc0ebc623161fd09ebf2c542da67961f29aa404c886265695efd53f7ffc30491d420a

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\tr\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 aab3b06986803ea8ab97e4bd87429402
SHA1 926f43d4447d1846dea979f84f316e09c0c12015
SHA256 9f0f5e67c641e44880a50ae5ee7a7a44aabcf8cbd0daec35154cac490672b233
SHA512 98714e95237f47275be858559fc3e16da594bfa7c0d3506051bbcba5a814db64add16569ecae6405ad86aed205882e618b4d886543d2a682d0cf54a2ad4dbe9e

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\sr.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 2743d98b7fb4556ee71c0179339924a9
SHA1 fe5cdea6b78e8d8c630661058a92df11c798bddc
SHA256 7357eceb60f74184277ee575a0e3f2f4c5937e74a3ffef5148bc5d9492b303eb
SHA512 e7a2aac7352702812a8c51b325a35413004b1ffcf7d6e89801374c6936f2ee0d3ac6b5315e21119e81721a279942aa977355c542586cad0a6f64a442b709e557

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\ru.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 3846551b32385624be080a9d780dd2bd
SHA1 4e13a7c3967bfb9b54d6d3aaad3a3fc56220ae47
SHA256 188423f57e068e1764bf8deb748419e074e2b2f3d7925c97facb3e3c3d851aec
SHA512 64fad0f3f58d28ddb713038c7477094022a10cd2b08e6781add2331422ef49e9f071f7433750b6df5b62bbe0d2754db3ea88b5ab82a841c35147031f5c01ac10

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ru\System.Windows.Forms.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 bc363f59dea4a244a22d9aa6deeef942
SHA1 de8bf3768af56973d28e0a5fd33221e1558a4b37
SHA256 9894acb6a842abb3cf46d8487f743d196217c919ca0893b76ee368a9149b745e
SHA512 8d1bbb421fac9eaef90cdc540ad9bb0720fb85e41ac8f88e6f63c881a7fd17356e7fa26bc2ce8bfa2a3d52125595d0526a5f7e5f4242c40152376ae1687d73a6

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Installer\setup.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 7ddece597c977c8e64b85ff96d17c0e7
SHA1 5d69adef46eb747aad5b6e7248d731714f7c1721
SHA256 503c625be68aa40837fa8b9376ed21a621e39f326fa61840acbdc6ec205a3cdb
SHA512 7d2b1b151b98b3e6288729284c920a2ac92b0cf450cf0dfa04792f8f72c89432740b32aa145c9ab9ed8cb026f7e82db7349cd0c323d01ac65b48d10889615161

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Installer\chrmstp.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 55324ae1e73fe461a2d15dd035149368
SHA1 068b3157fd942f33ea3b026fac9fa680525a28a1
SHA256 a2c70bf084e7be76c9ac0f9e262849cb60e14d15a75170921e30f522e63f74c6
SHA512 6c8e675b36e986752c3b87ef33aa7c60a3ec3b470cdb35f4d99c218abdb92af281b503c34106e1bc5c434e760722902169f0161a6185731eef24242d87b40db3

C:\Program Files\Google\Chrome\Application\133.0.6943.60\vk_swiftshader.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 3bca688e500223e163938abdc7d0f081
SHA1 6f497604f599309a08144112f79809a6a1efacd4
SHA256 6fc9c1e3984e491f9d8ab475d5e13fb7da4c669b7d66c2a885fec8434ecef4da
SHA512 a1f0e0d5c5d98d3ca01784fcab789734aaa12017e858c100f93c1e261220ebe3443e0ddcb87865c5506668861382412eb9e2de6fd44db60f57493adc9311fdde

C:\Program Files\Google\Chrome\Application\133.0.6943.60\v8_context_snapshot.bin.(MJ-ZK6471058239)([email protected]).zxc

MD5 435b3586e808a218390f1952256b9914
SHA1 7af6280243549f4798948d30788a49be506d5437
SHA256 280bc063ece6a001bff2f60fc7a77615def52beeeef937b976b670ddb69e642e
SHA512 b9f1f6027cc5f3a54d16dda6a26d65fe0e8a9e202afbc0cd5f5106c5356e5a7d4c5c031ac0e83f2a01c33045cfd57b2c57849fe30eec8d3a8589415646a8942a

C:\Program Files\Google\Chrome\Application\133.0.6943.60\resources.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 4de7a07ccaf3dde48906b05a1040ef40
SHA1 3437a474ba451e2f61db19d0ca99bb97b9068957
SHA256 e847a412fc2960501afdba2965e34b5b09b28371b461d09a9ed4fe3900bd8efe
SHA512 0316edd768b8539ae661648eb5a0f600e904518f583e14d90ba648662ebe201c4cafc1cd24727bb063f0b8b7b439869520afa402a99bd930bbfd50ab0116b807

C:\Program Files\Google\Chrome\Application\133.0.6943.60\optimization_guide_internal.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 04e857d888b77e1104081fe319ef7f09
SHA1 a021fb68765841ef95a56233c376c37e7e55f57d
SHA256 6bbf25e6079e1e979df4e22e161acf9d20c8446f241f067276f61e0a13c62d4f
SHA512 f42809d3988476ac796581e23dc1a45c44dacae24fff61688ac528ee97053f71bc5bc4a91c51c2f9b37a067740db6031585b576aa2f60fcdcb22184ccd4fac95

C:\Program Files\Google\Chrome\Application\133.0.6943.60\libGLESv2.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 e76c638f52f293a7f56741ed42ad5402
SHA1 e2430996f5a56c9cd57ce47e9b1fea007310ff52
SHA256 c71b178eb092f4a9bda5efa2aeb748de849d88ef65862ddde5f22214365b06a7
SHA512 1d84b8b26a4d4898d9462026b6de682c0f44e49bcb688ee04b0cc92b5060940feb066823b73fb9495e079c102f56684eb2f1d4e21dc7ecece6c6246ecce312a5

C:\Program Files\Google\Chrome\Application\133.0.6943.60\icudtl.dat.(MJ-ZK6471058239)([email protected]).zxc

MD5 4db54eabb34a4b3d724b21fd56f7d0e6
SHA1 45012b9cf51c519574d86e72ccbfad1bcf47e851
SHA256 febc98c4da8a072514095ffe2d0469295de1570fb49a91cba0442db1587e3cad
SHA512 662b431ce907ae8fbfce62bcf4593d5043e35b0d21887e59d4a0a038b1e5df3df83b09ee64605ab336b77de66a1eeb171d1792218b0da9a5952579eff0e69930

C:\Program Files\Google\Chrome\Application\133.0.6943.60\dxcompiler.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 0c66d4762536f65c933e3511caead7a8
SHA1 982d90b8f595b5f70912107743b5591a1b8a18b5
SHA256 2d1d18e5247101982e707b615e47c07466a5b3132cd3c7d1b73ec033f50d854c
SHA512 41517b5a6f5c8598f73a30dbb2bdd993acc83f7cc6cd863d38be706a31244d9b541d7711c6e188b0fcb115836969e952e534c32702a93d8235d9981340afe304

C:\Program Files\Google\Chrome\Application\133.0.6943.60\chrome_100_percent.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 2a6e7b5973380644b9d17ce9a538b17e
SHA1 755e75b239167aa92b088f3bac7354bac744e881
SHA256 d7633c4297f1911bb1ed61c20d7b2dc78838faa25e39a99a6d4b11faf8e7645f
SHA512 c6f194bc3017d365e9d01b3b7b19fe0941cf557574b77c7005a2b830fa64c497fba053437185a613754004be640b36856a3cc2a43c5df4330fca097b4ac6941e

C:\Program Files\Google\Chrome\Application\133.0.6943.60\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 c61a331a72425395a91c1f8183e3197a
SHA1 9d34d192679a0e537e10b800c9dfff939e11d27e
SHA256 a9b17def45f98b9772d7134e1bcf1241d16f07bc0b8710dd1fd5237461b91fa2
SHA512 8fef7d08f2a511fb859d2da6a405c16a50b860c02e93cb46e14a42eb40ec4bc4a5a425274a28bcaeb9061efd8c595d476ce1dfd61e0fd847b549be395face334

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\lv.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 1c6bf7abef49f8ade2b38f23b113465c
SHA1 5702c18fb1cfda330fdc8a4e54e20b94d38c8835
SHA256 706ad1231f548de2992a4bc3d3ae222ffaf33fd8f984cab0184fa1e93c379d69
SHA512 237980364f7f2359ab13621ecaa94cf68d7a96caa9196bdae4b449db9441172e86c27c167dd6a89fd4c48ff1db3257d3deffae6a62f14c3ee971c131ea7cac52

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\lt.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 544ac2bb9863bfc2a9cf157be53f3633
SHA1 35b780681a33285cafca86cb7bf91a677bd1a47d
SHA256 ec360a918ec8c8d1eed96228c9ee6c6430bd9ba345b479032c125dcda2abcaf8
SHA512 483e77739e59b848d015f34980258145103e1fb41ba146475c518a7add42729f71ad7ac67acebd8d0500756b1b26aad7e6da66262d124762eb03c0aa559e4c40

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\ja.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 b321728d7f473ae1c3d385427e7163d7
SHA1 06649c489bd217c0b3dedc6faa7153335b94b79b
SHA256 5d1596946e0c06082340be5053349e4d1985f17591e3008e82f23940177d86d4
SHA512 e56c322563310d0f24330f4cc75d80b760a07b20f85707c8d054692934d7d9801968b2893677093e87b07c8818556db11049c4f7ca72da5385827fb7a4b5ced5

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\he.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 940fb5779fd2bbb17bab466e4cbc8d53
SHA1 fea8dd142933975718466626d879d7aac21c499b
SHA256 61c7f77068a72e092a1fc8f389702a24c47aded84abe3d022544711721d601d0
SHA512 b29c40e0dbc96f90ec7b8e1222254c73ed5bcacedd70b4d51ba0ef71d4c938e4dbec907989bcd5de86dc1545220537b0223a20cad9dafd41de87e535dcf10382

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\fa.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 ac8176e0b2ebd9dd90ad3393cc161eb5
SHA1 f4dbccdaacd052a56f5d2834dcbcbf3f6e2ae5e3
SHA256 3c0d0ead7b87c0375630d6aa0bd7272e030a10c82b377d224e42dbbc7d7745bf
SHA512 29b539b59e79a81928e19ce5026b0ba39f145527316fae4c8c7094be11ab2a7f5851bb55b293f615df813e7689f08bdf55cb27f34a8d4135862825cedfc86cab

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\bg.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 856ade104af91a1387930760cf8bfc16
SHA1 57c6a5a67ae43d3dbeab6cb569d4d9f0e0f4fca8
SHA256 c23f83b06ac583e86771703091ff7f02ac195742cddb51aec252c7594eda0984
SHA512 2fe7e372d8701d5aebd483f4f2be1bcf25ccdb1cd9dca5e91fc936d160e4b6b3271722f31a7edca56e8fdde9924d177c59ef6c23621545ca75d683b58b503ed0

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\ar.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 683f6f8b7fb300227d5633c55247a116
SHA1 53a37280e2a961a674e9ee6a8437ca33252f2fa0
SHA256 41c1ffeb12beab46d44feef9590ad8f979f660f40e679d4afefe71a9ddf93e76
SHA512 f75637e96a43bfa1f0116ce6aaa236c6ac61e03bce874eb8239bb91fa08ab762812c1bfa129dffcd84337953c84bfef3f1805e4027cde705df892304708d9607

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\am.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 e555f18b1861a8b4449253a343bc6668
SHA1 817775c50dd04362d774875e0c64c693dbc4c119
SHA256 9463a70e6689079bad231c8e855edbc1c057b0552f60e1826d5fda88c2838454
SHA512 255deaf9c5d12f81a179b5c2a315e9feda84dddb7e4849948548c403d5e6efb5555db93057e0e60c7da0114523efe547956483003a61704eacb454f3e778f409

C:\Program Files\Google\Chrome\Application\133.0.6943.60\vulkan-1.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 d7028a49b5290ae4ac964d129183c731
SHA1 bfa94256658c2c049b023b1d9afca0431a8e0f65
SHA256 b9dd71d456b8f70b3f224c42bc8d01aa5b1c7e316f796cbe6681f7a5fdb57836
SHA512 d144c6ed03a612630f61ff5a12380bfce9132348c4b9ee96dd50880e54c32f78b05a0da9d4b3f9a1e39b48c4b4dbfca45cf3219bfd5b80edd12e2b56428e6814

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ru\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 614d7c6b24c992fb65f52b1d38680167
SHA1 16ec539c34f445587b2fcb82759ca5c95931bf02
SHA256 f440ad635bb706bc9b0562406be397ad09d28463ca15f92bdab0d62f09014c4b
SHA512 6edae4bde59469a302a58d9d3b9778766d2a66a0a972541012ffcda25f7cd721adb84ed7e7f79e491ecf90bf4cc98194352b8fa00aae390e3bef4dd4e6ae5e8b

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pt-BR\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 048cf2f174bee58337aa67f69897c7a9
SHA1 99055f6fd5a5d9a192a1b2d4c6cf4924a08e3e94
SHA256 1e39af79bbcfbbfc5b13ca68fbb54964516c8c9394c18098e9ff87973269bee9
SHA512 3ce981d257b1e78a12e30e24ef6edd9a94d6d17a671078609f032e2b2a1cc1fde86e3db1473ff9537b5c0b686d3ec1e1dbdb738ed5c3b092e52f724923fab411

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pl\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 1c4c8cf756e5030bbee0aea783834a48
SHA1 3505958cb2f8abc3558abaefc2615b8a90ca4723
SHA256 ced27ac0bfaf18d9da377cea90aebd7f66f5e20d0bff7d0110b48ab45328539f
SHA512 e985824dd331df401f47a80a6c87300ea8bb7f6a69a8d6b4ef5eff6efa26a5eaa36353a0d0363c70dcfce419080c6e63cda287b19b8cf44359fb17d59ce7bf84

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ko\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 647e7adda9ce67846393f597280996f6
SHA1 54881d04a94cb876a96cc68e2fc7a55524c47cb0
SHA256 60bb86d621dde2b9dc7d82da872d511c0142ebd90f74e8c4cb03bfb36d941506
SHA512 1fe4091afe6867fca4e219b1c6d1b2c57b4232380bf3fa11f0f134cc81b470830d6c7caca044d6173c58c288aacb295a1d485f33e8283935063f16aa5a580683

C:\Program Files\Common Files\microsoft shared\ClickToRun\C2R64.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 e22474da8da8c96c03cd3f4040c734d3
SHA1 2a1ec58dd9b9fdb4d1c380c6bcf6f5848994e074
SHA256 fb139e4717850e71a093619f5fe0f1805fc85e8b374bcb42af9d9a131df828b1
SHA512 e35ab3becc23e6c27092b184fabe830c4cd259a1e878c9b2fede7a2171ff3636fbda5df755e45f41976257a31d393cb078af890d650d4fefddedbb23884183ca

C:\Program Files\Common Files\microsoft shared\ClickToRun\C2R32.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 bc57c3e86b3e5ba9fe387770edd0dab1
SHA1 559820b2ef938883c99bb2b8cf46b4f4d634e0ce
SHA256 ec73f554eb4f538aa266e94250dbe2ebf6a463c905de8dc5c0f6fed7b4677080
SHA512 1db015e9d9f423bd42541da8b88796a4cfb0bca08fec40243215c9780c4f4c078f5d4c4d58ebc26139db49a37797e546f4325007f8248061d87bd1b61e65fe44

C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvSubsystems64.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 f467d5b9127cc2577c69b6e29c0c3566
SHA1 e822f4fbbd1335bf5540f9e20c6963fcbe6727b1
SHA256 75d983098800a7fa075af432fdb312662bcad38a534c03e8e596521d3cbfc38d
SHA512 88b6c595e53fd96b4612f2a1b98d35f46bd583abd2e7443b29afd30b9403e71f6b0c6a6981718f25cc90b374048caccd1d14912f0016679199bca5bb8932084b

C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvSubsystems32.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 b740b9cc188abca09285dfea0b2ce6d5
SHA1 160c5e096a2ffb7d4f2a84e9a33d586aa87da3f3
SHA256 026e1fab8fcfb23caff2b8b56b2b067dbaaa4552324551ceac107f08a0eedce5
SHA512 8276e3de1a4e7a4316f5469d89895ccf9033878bf554f30a5c07f844a110269e3245bbec1a123868a325c2f69b08d40b30c23847fd453c340db6842f6c7b153c

C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 ee1dd659d8722ab06b40766db1450bbe
SHA1 ca03059ed32cd8b3a8814dd3188fb3efd26d56f0
SHA256 0f9e4e35af13035f9efdef623f146efb78c642deb4bce7339b4e4bd2890df729
SHA512 93fe85feb04554079d0832fe8ef1ef924adececad2768c190de59d02a3f6ed48559dc44128c66f4d39734a12223036626848b8193e008d262195803c93b3aa24

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ja\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 9da11061a86b577d043754d0f215005f
SHA1 667d5b727987c50c88879f01903155238e80e986
SHA256 3ad31a93a9e7063746dd85d93a32814e218eaa52cabc886c129a3872122bf09c
SHA512 91b0982583353b62852b705ef4184428aa7e469fde23067a1e392cb1b6892563de2d1e0566534d6bd1516bd85d3c78387252254b4b0a25211793ec3872858d93

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\it\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 18dafac0d39efbafc426f5976dc9efc0
SHA1 cbd1f29a0db33bfbac47e05ae8e73a253756865e
SHA256 6f0620426fb30e6743218a41143e990f4f0650d7002fbb74ae1604cd983a219e
SHA512 06bb6df420822970c2276a4d47107254f9f09b4697f10e63b2e06f9f08d5634a810a7bae01143b51a8f1c49e1e5c06d831ec7861d07541e3a81289751363305f

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\fr\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 e00cf30a1b246d4d546b919486440ae8
SHA1 8728efcc2cc4ce502be99a615d0620f29417bcda
SHA256 8d767575e933797f1878744fa37b504495485203da441be4513a8762020625a6
SHA512 3215d3ecb09741a67b457771c2d40b131c8b6e4ec6560f2b740879c222eb5be8b2d6944c5f9b9f49d1b3ccd3e1c230a9c278fd9a5a79da23a94db6ca5c609b05

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\es\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 d95862e1fd88ed90dbde91e5c43f4336
SHA1 584a6d4d82710eee44f8c5f36e05c87bde82bd86
SHA256 49a54646118bd826f99aa8dd86d24148ab823035c2aae69a4a6725f1c8fabbae
SHA512 9dfe88ff427c9162db509fcc13ce747080a728db9a0e24aed13e40b59c9ea4453c3f87beca73285ef321d4bd015ddf9efdd42eced69e7a867b74fbd4bb951257

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\de\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 429ca592f2a0ad65e38546d8536305dd
SHA1 e256551d0d414f4dd4b8dfeb0ac0dd55f8f47ea1
SHA256 867fd2efed46401f39dbfb6de8c008477449568bca02bbdcbc970178b746d745
SHA512 dc583b97055d487ea62b09670cdb341143edb924d7cf84784b43c3fce9dcce55a0bdedb0708c12a5afd8b50aa785727df5b2d6e0a513c59b5294256b8dddd9c1

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\wpfgfx_cor3.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 e096344b5b5847933f7e13042b34f913
SHA1 a5cf11426144e562ef6711b748dbb5d266c8578d
SHA256 155bad605843de5b35213ee937d86ed369e3259ac0217f5dda637af5f2051590
SHA512 93ae51390b50b9f31d3e195216b52cd78d1229ac03a6a165c5503076f9c74060afa2231f3745ee3835fd6b84af799173777ca9e6b82c5bf2f7e3fdfb3c0d345c

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\WindowsFormsIntegration.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 026058e9b6534022baa332b5f2bf4e78
SHA1 745fdb1f116db736721236862b51c9a9e87ae540
SHA256 3c60f8887639033450a207a8d43d289770647de0a2d21a003d17ec7808d19062
SHA512 b868c07226d60285ec6e1d9b14dcd5d1556d66a712cde6873c9805334b43ff3630af364e2a2b46d9167278e9a2a3c147788992663b7aaf3f2c9bae4887fb8d7c

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\WindowsBase.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 4a4b8f24b368983f7780cd84b504aae8
SHA1 e63e3a3214843e5a7a66589cde8b3da77f1fd55e
SHA256 cb8ba9010a8369706662abff16b16263c044124ef81f48f430cd4527067bc6fe
SHA512 61479aa83e36ea21037202fc2cb0207eb76c5b2bd05075a3d6d1b91e365948b9221de6f2f72c76309a2674a76571ca15312b81889dbc67fa14f089799e38d597

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Xaml.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 7ae4a493871e8b725baf007ccc418452
SHA1 89ce30f668e117b3d698307411d79e5ad9ff3e58
SHA256 04b5ef12d4263758339c8e1a75756006aa231d62890bb837155aa206a40020f6
SHA512 10063d0d3a70ba9fd928badfdf3fcf6aaaaa8130e2b1fa9e8b9b66c39314e56543fd5a4174c5a3dde528ead8f103a00943cd3a3421fb13d048b53e914a47442f

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Windows.Forms.Primitives.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 aa5df93e806ebeaabe28628d602ecef4
SHA1 c762eefd46e6039a2cbf53ec1a2a1033774bcedf
SHA256 0504430cd7b2b0a4fa2e2553ec77017ce39b6ea47ad290d147be051f8716a1a1
SHA512 2f01b5ebe53750441a4b646dcd106ad78e0d068ff91e2983558bf41db538c3c268d5649233fd22cde694a6644bdc21cb024e3ed0037f9d4719fc6b4de5cd5224

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Windows.Controls.Ribbon.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 b2223afb4acf4196777ab48676af5985
SHA1 cf5e488e047b0fa7c2eee032be61c6cfe158d579
SHA256 8954492a89a1893093f2c797bc0593ee326e120b2061634ea6a72f7f3a1d545b
SHA512 002c24e3d279739a05634d85ff3d7681b979d0eb793b2e364b6dee72e69ae267d105c0625449009f86e3f14b5ed83a76a0592199ec5635d7c190ea0e052ef9a4

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Printing.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 5077441a0065256999d0918140e0d731
SHA1 7445cc6e6826a9d35bfd99f5050a3e9e36106f2c
SHA256 4cdc7a3673e970599fd44c5c3359af0b1d37a76afff366f6064a60f37a45df17
SHA512 c880411f802ee67c2b62cd4fbf1d7f3b801c83b80498ee510371702d44eb25af498caccbdef9620d921277569b3c4dcd8684bb0fe2fec215b05e93fa6c4abab5

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.IO.Packaging.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 60cd2cdffa0d9cbec584b80cf805965c
SHA1 cc00099e34c791da32d7cb9bff2088e44c3fabfb
SHA256 7b637b45fb47b4f108c96ebc0a10bbf2e5c2c72ac2955cfb460cd6cb4570f1cd
SHA512 bd3c6cd562243f010c9ae8b431d5992c69e7626da4072d6eb1f66c7e4de28dc67518145e28007ddace6e9b4e8e0c5554ddaf1f3351dd9a45b935ea4961f89023

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Diagnostics.PerformanceCounter.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 f6510616540dbcd5c378b3e167a180ba
SHA1 b9f4e080539a5a556e868223bd74fcd3b43f4f08
SHA256 564f9bb955deebbc9b3b5a88ef7e31fce39d355edaa5eab5ce4f68fe744f3ed2
SHA512 54f9bc7d7b4c80099617250b1a31696e349bd36ad1042976ef7909118f59f8366e71ecabd8da6998c6c904db0ceb965864c7365bed83acbb0fac15e51e4c14ba

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.CodeDom.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 fd7dd4f7e245f6cc3ef8827f484ba643
SHA1 4c32b6c76c8ed92392e8d2000357ef1edd005daa
SHA256 4f9f710764dc41d7f490b045609faf1830bc9e1c9101e0a213b9ebcef3ccfc19
SHA512 41a6d6cb6cfd714de597e8531cd7f8cef136f3bfcbb6970f56b21e182d0b7955c4e898ecb03f4cfc9d7398a39419e9dba2a8a596295803ced44d6e1b91fbfd9e

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\PresentationUI.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 c59227f0515e20e01cdcdafd9b23718d
SHA1 a193c6595e7ab6a3b5cc3d729e92b843090117e9
SHA256 f01f1066ff0a122fd33b2e0c2b5f2e597f22c7255063078e59858d2e37b1274a
SHA512 05230e5c64195107947b6077c49778b493b4b2dc9b419b402ca8bc1ae09c5d2d126e9e3e4e14409ece3b9b2a6fac96364d2f017a48247b3ccea5d73db1840afa

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\PresentationFramework.Classic.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 081fae70f4d90e34883522179f217d5f
SHA1 1ba30aa1b7cc4f6c87be7b0334ad20d80cb06a54
SHA256 fbfa592dc3475d5973b00d473d749a3f8a0b6adcd35e760b7cc7d404730d2e59
SHA512 9786ab9633e1d43aa9dd801bcb2d826630e553e8d0eb4942e96258a77a0f8f1c0f0d7771565c6f94161eb823ca5b43aceefc05c903c33748cfce03e71828121f

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\DirectWriteForwarder.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 fad0e6fbd70708974f61efca4768e60b
SHA1 b8cd1433668a21cf355ecab5f9df4df1d1cf8c99
SHA256 ad262a311c289c24f823ecd9c33af4a53e530518ab87ab74bdf8a78b500d8c31
SHA512 941a68388dc241dd4a97ef63bc5b20ddc501294964407a81611ebf2c6ad6b9b3129bbb88aeba6b63f617a3f636cce238aa13efa7d48c7c1790722452ca2bd55b

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ru\System.Windows.Forms.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 6240cdc1eed29c5beec8ae2fed30ef37
SHA1 f34e0619688ccbea73ab02c8337cc70818c849fb
SHA256 f230593218ed183e87428d8d907943232d25dd0c0f7348eac8df1e79cfd39fb6
SHA512 418bdc213ee42cc61217bfb79cf18b163ecb311796e4a89c9b3857330f7507e2141db5a74f9832efeea3e51db7d2849f38a27a68fc7b4904940c6aeeb4c55b62

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\wpfgfx_cor3.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 7bb885320b1e489e31f2607e5e6c74d0
SHA1 777019f100b4919f6e09f362853f1244eeb894a6
SHA256 266a1eab808a9a3da86513e2e0d76d96e378423f9796af4a5f10e845765d017b
SHA512 aa9aa199f02e53f7a32d470ba0b0cf390d693f2e1507f429bd5366a37ad2de123479c59b53df54198255448bd15d4144ec92bcb46cebc9c7866cdb4645faf0ed

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\WindowsBase.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 dae4ba901d6b4ffb25948e809efdc854
SHA1 286a878901ed81878f87f089d507352f207d867c
SHA256 0d899205e708055b488392c7040e394d3e91620ef205052a8a18a51e736bbb0a
SHA512 790d4a718dbf4de8f5cb4f00e15b429cdf0ccac292c3c0cc78804b9064c12f78c2d2f9aa8248ac7090588ef16de51fd0bfcac23a199f5f557f5c202ec78b9a57

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\UIAutomationClientSideProviders.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 28187f3bc88f09ddc854e5e85efad58e
SHA1 8bcbdbe3c6012a272f1d966a6100a3ca6f46b4e1
SHA256 dfc67d72f03078511faa8c19ecdddfbf6e55f726ec0d46fa9b019400ae1c6fbe
SHA512 7343c6e4f959e2c0bd7326e652a0036a0e3eab1a225d216373eb943b0960103341ff34b2657c2c99a31dc2b169546c0f362aa7f07f0ea8dc8a0eea88fb363c51

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\System.Xaml.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 8abbce4c8eb9d9f68ee052b3a2bf4316
SHA1 cfcc34503a7a4e2102ab5067b9d11a23f5b69039
SHA256 fe96d3ae9f614d161d14f9419cef063c288e462f6fc1192bf696292badd60813
SHA512 65c30f250be7e4624b80164693458a2aa4cdf3c4bd1f5b24f3457051746f51ddf878b4d54e90721739c097ece31dd98d42661329e7db5f5d67b958206ec65577

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\System.Windows.Forms.Primitives.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 e67c2f9efcfd735cc8a135c887b8a9c0
SHA1 eca61f0b1c1ff988fee7196ed2bf377ebf8820c7
SHA256 40fb6a520ebb89f3bc6aa40463c051372c60587901f335b30c24dc3f5b174be6
SHA512 3019364f0b2f97c113d949940eeb3ac278cfdd7df284c7e0ba14c08b9ddb45533aeaf45647139824908667262dccf15f0dccd5f33f9ca9c65eff5a2ef7185b4d

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\System.Windows.Controls.Ribbon.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 79597429dd583ddbac99d09030970847
SHA1 1aff40ff5c6f0c0ddf53225b058d965fcc63af0c
SHA256 a6997147dc39f376729c924286a43810ef5c7338a950f93296f1826e3e109e46
SHA512 e88f4d5953a798e5a4178320a56c3bf2615b967cb39da451f115f0f6e37c971f4111fb1fd7ba26f2e0e637777fe1623dc15215227b9ba7c3b57036ba8abe78d2

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\System.Security.Cryptography.Pkcs.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 70a329ea741ba61145d2d8cd9d84a771
SHA1 3dcf53b62d3a25def0b6b1b37423c374c6bfdc9e
SHA256 4395657e214585996445317ccd740c22690ac9e23700e31e989a4b58b80562d3
SHA512 7c3e499bc7c974fbb8477c5ea64d95e85e5fc203ea4e6c1117125c4cd20133d7aa1d0e6c921a7af82e6e9c59debe01e2732e51bd5e937642a1813c7568ca1161

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\System.Printing.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 ee82ac447e98aeca3002d725ec0c2976
SHA1 c2e2d65ad5cde159bdd7461b278519dbcdd0c0da
SHA256 ed63f75fc3f72b0d8191add3bf37f83fe228ad9e33e3e9034ee0f9afb3e5a4f0
SHA512 8b0c647002a19619701e6c1f2d8edad33fec355cb88f03869a92dca0957c1452ca1302ce244e5397a6504ccfaa0dba93ef2a25234fcfd92e5fc580e73022d901

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\System.Drawing.Common.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 fc0673bf295008a7eb7d265f93f0679f
SHA1 3489ad71680ce639d4eea7733b142bd35936bf9d
SHA256 4827b196821c32c5e02f37e2365c839d669ec2642ff7e461126aef8943d4b2f8
SHA512 b61c2c3d0a7b8a41f8819707b2d9eb88ce6f91e43b231ef33867100bc3d881d19910e9067ef60e245a87c71bc3a38e9287e637d1e63183ad2545e4344374e59a

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\System.DirectoryServices.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 01cad5a1e1698ad420f020464c88c7e6
SHA1 318bc31bf469bc9370f34ea1382d196fecf05fb0
SHA256 19fb5cd1718b33cd407b3677e21a096ee8f0f3c1677a21ea311c68d21d0effaa
SHA512 049fbcd244f037fb4f7188a8a0054177ac80c6d2b81bc2b17aa9a6332e50327a17ee6420da007e4451b65add68b18a12ed44353b7bf84a6a6e6b97f6ce71d588

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\System.Diagnostics.EventLog.Messages.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 e71c4e27b6329b9f35535c081bf9d27c
SHA1 c8a639c94af4d7f66c9b327c4d0c626459a79287
SHA256 200c7c9e393d66db17afabc050709d3caa01f2c613aa69f09ad79385840d7822
SHA512 0cb0179d699a67ada1f98c891ef4a23788c3836cf6f5da513f8284bf7a5657d305092612042f9277dd255aad0f4d992e0431d8fc94db138bc1196e83d2fd6b11

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\System.Configuration.ConfigurationManager.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 2323d8aa390fa7b7125733c4ffce1d5b
SHA1 6a9c6d96b0d6b3dd49a3cc2e0fd0ae16172bed8e
SHA256 34ce7668e2fe36b8061eaef9a2397989991bb35d671bff08ef9fcf1a590b7b89
SHA512 98b68ec88999ef59cfdb9f4367c7b1fffb90bc0c72a192fdb3581f2eb00efae73e73d88a164c9c4e264d72ab3c093baa0bbda176b34642e3b672106a73d1477f

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ReachFramework.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 5e8b7734a9bdb3daf934148f5e822346
SHA1 6fd7fe2780e22c1cc47c494b0adbff4b4211f4b6
SHA256 faa4dba7ae971444644c55d81f56bda7484923ffd74c91a99c0580a1595e4a17
SHA512 a18471d0d1dc1dbc9bafaf95e6d3729a0e7ab011fd8fcc2149c93cfa9327c9aac0ca1f5908589d96707be8c8dd9a5ec95601371213120ce9910d7bc78d6921cf

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\PresentationUI.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 91a8ab040c2fd994ca2887008e337ab6
SHA1 bf9c683d79fbd42da220d99a4027c14acec64425
SHA256 6b932b794f82a783908238527641d27fee0de9d6257634489d1864d16b82f288
SHA512 93dc76bfe5224d2012c4d30023717a95c70d6add113feacc2650610d8c4edd193bcf378b783dbea9e80183768693c2fdb33766d003ebb3ee325f59e219dc972f

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\PresentationFramework.Luna.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 98eeb3fb666e8bfaf804adf4f2ec8336
SHA1 508b93b8e12102eec916d04a6358cf85099e79c4
SHA256 c1b9ec78c51df2af1729af1d5b1fe1705a9e7c5db11be993f880c3cde8dc2445
SHA512 3061eafa3be901c83f78731b12bb7c214033d2626a40c74a004c2e05b6570db664a4b8ee002776079100970e3239491c807f03a3f2c22d5f9fcf5c5d21b560e9

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Security.Cryptography.Xml.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 3d25cc3c97c08dc29f645d1e4bce87c4
SHA1 41359edac25276291213cf1a5bf749b085366cd7
SHA256 7ac05b9e046c2f0586ba182c448454d55e1a02e3f7b6cc14d911a7f1223ef867
SHA512 6c9100ee36c71540c9f62fee0c27207efcf6fc79bb15f8a51b43f0503fc12a542fb51d66671be715b75bdbe2393c7f654fbcff52707a3479434d568a9e52292d

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\PresentationNative_cor3.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 edc20208754c07cfadf1eeb0aca274f3
SHA1 5cfc7bdc652cbd1766e5d706d27b66dd3281e50b
SHA256 14408ef20fdb2a9d70b56e43135f6adb3bff4fc64771446af02241c4cfa10966
SHA512 a919ee628587db8946e479d84bce78b3dcfc33d0f33fdc763bd7b24811013a7f9fde2292ff7e08d02ea6e48745ae78fe1b1392ea7ae75db5c81715a22e3171f4

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Diagnostics.EventLog.Messages.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 3a99c20e26ce3625835eaa4d35d30b14
SHA1 5b63b3e05b8397cba5b62e96e5dc2a2a58827ff0
SHA256 6327e09a27c800f4069abe5704c4e14952869ded77950aa838d9ee2d0dc825ab
SHA512 617c26f45f40786a42a6ce8d9882431659795056c2417e525baf40703bbd660f096779e9fe59e946c4d32a2fda25fc8a25bb4de70a66dcf4b00c9d354ac28dae

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Windows.Forms.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 0bd72161ce7c92b5318f424a092b07da
SHA1 5c4722e736b0807de5951b5584963804d30ac996
SHA256 8b72f12151bcb98afd36286c92295f4e6cb35fab2dee009cfc269104183936b6
SHA512 6815ce215cba0911a01e908da120004a980d5fd9e6ada2c19979771d5633fc792466ba50080fbd1ebf1979a038a4198d89be3dce525c164e306e6998a7869f5e

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Windows.Forms.Design.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 e4e179e345b6c305a3faffde6d30aa5a
SHA1 010d600dd5f86a9070e832f4e160472e7c33d4ca
SHA256 676febe4164675bbbec77646c5ab7b6c072129d9752ec26af5ef2ed7687a82c3
SHA512 f67c9fb986ef1bf562adf73712056a2d41e5810159704b5404dbffbd34233d78d9ea2776302d6c172c3a4f8533829364007563d7b4fe4919b93374286262c72b

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\PresentationFramework.Luna.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 bec0760887d044559ead4438d43fc2b5
SHA1 1e8d693b468bdac5bcc309a3fdbe5bca2c017b34
SHA256 e6d91656f4300c4e36d06586dc0f24f6d81a54322fe7d5c076d9f7609edf907f
SHA512 f5eadfa7bd78a39aaa1d3b3a06083d9267806c5d6243ce2cf814df2f4da1339b19a6fbc4d3b80ceb79f380d7491f2721518b9299b722ee77b8b9230021d5b295

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\PresentationFramework.AeroLite.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 44f4111c5ba4c6ac52b5fdd85ef8bc80
SHA1 942fe1d729f15caf7888a4db7efa6bc3026ef1e5
SHA256 5c4f5f5d51acb84bd86e71a4a9b1bf8f622ee847ddf76293b82548403ad45413
SHA512 86fd191b0283b51640e1126d4519c6dbd057422a0180d684d750215b46d161e66440c760007386b73d1c9de3059f8e4acad5bc33e0a78319fa113511a537005f

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\Microsoft.VisualBasic.Forms.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 59fd16074e0218515b55a20affedf730
SHA1 f7f72bd1b14672fb9924cfbfca93cf2093d14bd1
SHA256 4fa3c51af287e519a854a5b8f299965d9c297af4c338abf4af48d84806b1fd95
SHA512 5264893149fbd682337771f6070e0dcb84c9d52760c760b3608e6b4e9df34a4d9d741cf121b45eba59ccaa94ccf857e165c9d54eee8214144e94d00c5d48c150

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\D3DCompiler_47_cor3.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 6d87a12425d723cf2569ff8a6134bac4
SHA1 0445ab7e7aba2b991878ed0a45d12570a819bb40
SHA256 4afb831a69e695e76eb5f3d12204030a90d8bf1082507cb1d7fdda232c7ce245
SHA512 5c6ce97746b91c683c1a08fb2a9490b2a97fa36f459427ebd76c4657ef60072262d653feca77a1ffeaae3a059d88db8236cf18fd2e84ee1ec6d7369503326fe7

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ru\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 aef86e49fc4e4d9aad04913c0d0b5c0d
SHA1 ca25aad802ec66830427b2b196118ee731043204
SHA256 e9ec1a7a991532a954564217de2a7645ee9148f1547d086b60896f8d2db24058
SHA512 2c02c7af80fd0f8c044c1b42e63458f6b0a8c109cf5e4d8c3dab1548dd5cf65498d4dd34dee313ed152f6c8bf0cd034321cd85a67fd8c5d9a1f31ee4d2b7ce88

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\pt-BR\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 494f7e9f9d084f14840ea1859a53ddd0
SHA1 4c45416d6163ebb5b74b1ccc4365c52f4e3d7dc1
SHA256 57ca7632bac1c933f17356d8ad73b34ab5721a1ca3e5536bb9a7988363c56d18
SHA512 9f109c36b202f94a1b53d3519bb650458d868f191d60916c3c7f6ccb78f49829feeefa171a9f8be774c9c2ad0f14b0716208c8c8dc0650134683557ed283006b

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ko\System.Windows.Forms.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 98d202a18d9273463c59d7f57ae6d8a4
SHA1 374b5383702ff9cf8556a2384575ca44972b0c14
SHA256 c06baadc95ae5fdf1bbe8870480bc296c1a103019cf10a5a3ca68521c95519b6
SHA512 b466578dba0912bc6f5ec0d458d7ac5367a5101f1346a6127129052fed2d19ce803d37164c90fa9fdf39154030a1306e41c5043003b32ff9c35cce184d5a43a9

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ja\System.Windows.Forms.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 6f8b7c1d88df6c0ce9cc5ed061b553af
SHA1 2774ac7be58287336ee3fcae5cf3532defce5d0c
SHA256 cc95318f49f1f285886baac91a1b7bfc7aae1c2a1b90fcb5b146ff073315f674
SHA512 4539b4747cb4d79f98844f72d214191aa00d3efc724115b803d20c7ebc2e4671409c14456b14fe52d9b8fa4bdb04dee509da5cdf34d673093e1db9594fec77be

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\it\System.Windows.Forms.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 8f9aa7d3aa345206623ca536d8832686
SHA1 79933b28f0cc5c3523451e3744edc29dc3cce5e7
SHA256 90a2867c9f1e0e736fa754338f550edceb4cc2508a2508e73aee2ed72d50d252
SHA512 606d499df75198fe373ec572b41dd4412c8fe3fce85134384e61624be40908ba3e80f3c8f10d8b20095611a21187d829405cad236b391c43ed049bf3851eb5a4

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\fr\System.Windows.Forms.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 a0d5e3e6d774c4d91d8b25dc8ec96066
SHA1 3d6113284446481835dbe06477fb3b78c647d73a
SHA256 94c90a35733891a23f361e825fe9d5a1116a348aa6a16ad9c79ee6eecad513e5
SHA512 292d2bac61ea6560007f60ca9c8a9352cff283813c9be79ee59d6fb0da190646ab7b8109fb0e5ba683a65d749805f4bd7fbd614c8c9feacc8f918cbc40b91d7c

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\es\System.Windows.Forms.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 650ebf477c0488365e2be8cd832ce2f1
SHA1 ff91028dcf40c443e32c27999aebcf04896e5392
SHA256 277e3a534900006430efd4b5ed7eb9889783bf5f233b2a64638bdccf3e9164f3
SHA512 7a26114c9e49db770e9c5748d09ed10fae875d8d9282336bad00ee5db7575f9acf1e0579c9882690d146f830fcbaa65ffd621a7ac6aded70e813be744caecac1

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\de\System.Windows.Forms.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 8a3608eb90d37fadac7059f231078faf
SHA1 b9f3e45a6e0489a84913092fd3c7e5ea5ab1d584
SHA256 d7aeae6021ade67b9e29a31ce924defb47afa0a4829216f88819f715844f0de3
SHA512 8883665ab15747ab669f96845482f856573e6dd0fc87403ffe32c4d1b9765860eff6ddb7c69c17dae0468d12c1c3b227c9f7338064da4cd221037e839755d740

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\cs\System.Windows.Forms.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 8523a7690746c51aebb22e398cb218b2
SHA1 3c8647524e201c3bc4f97c7a6d2efb26ab8feb83
SHA256 824b701fde9e1b61af416e092dacb9dc563ae47d34f8ae83ce296755ead9c212
SHA512 224e72e3733e0ecf915a6e25e6fd66051bb0790dade9fb7c6e42a62a6352a071b112637a229ba8fc5bbf90bd072c7593210448068180bbb3ccbbd0042a10b8e2

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\UIAutomationTypes.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 53403b89509e05aab06f353d56deb296
SHA1 f3541a06b847c00823a9e83995c62b388fa10f50
SHA256 52b19bfbb198fa2354441245b1f85bbf240670f9e2a5ff66402dc41b085223e3
SHA512 8ea4700a1d58982b2f3d5a6406b8d8975b135545de140c796797b0595fb916b3db2eff419155317b1eaaef35b624492a9960ef05eedeee7e7e2166b6fa59d1b1

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\System.Diagnostics.PerformanceCounter.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 f3ce14e663158018ab7b50f5c4375034
SHA1 9ee0e08b665a446e798213185bc25197f675c504
SHA256 0a2aa5f277efca3d03c7541b4903d3babdb6d3d5d8ddd132a7349ffb54b123f9
SHA512 1503aed553473d1d572d4cb299791618e967322bfc2301775a20c8d838eaa44bbc0a0ce89779c89131e0acbfce11e26f7de614917432704e396f20379e874568

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\System.Diagnostics.EventLog.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 e71a22c28b38ac7a2f5646da5678d74f
SHA1 6f4084cff3f777c4517a07678c2fed02d03432a4
SHA256 97c98a73c5f998cf48f4ab70660fa70def123571ab5e2d1d808ecd9e902ad802
SHA512 687d6c98c7bee17d594ea5f62dabfa62445bbe82d1f918a37140198bca80f0f603c5767bf2655e693db330136b978df75bc531c65c172f1bfd61a70a6bfcd289

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\PresentationFramework.Royale.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 0f11f5bea6f431c7aa8453fe6e097667
SHA1 d13521ffbad7145b29e5eb0b5eeaf104bd20aea3
SHA256 66527f63ab1700404a8e36f7c05698f0a5b98a93c30a21da6158d9460ed89c4f
SHA512 e28fa262fb35c1c927b4867f90625adfeef68170ea2fd5fc4c3532025816caae1dd95836560b7467fea09a356290cf4a497b17c1a50a07ce98093f77a748b2ce

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\PenImc_cor3.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 81ff5662d89e89a32c53fa5b0e8b7c38
SHA1 56b06c0074797bee7dddbb280ccd8712cf7d3c4f
SHA256 5cea41ae88194f157869238051b225c1842b8b38917323d3ee1d73f662d5b5c8
SHA512 9dcd39144768b1243d315e57371f38b7e0bf2fcb207962dc1ebdb7fb2a08e5cc493333074e62c4ab1b561781a91c93edce35f720b18cfad0dd300db5ed13ff84

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\pl\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 8d8c2498201a61f533242c752500226a
SHA1 e510957fec8773465eea61be940f38d7eae65e85
SHA256 db89949a89bc0708e2339d4b976ae34fa7232c7451f96db28ac0b7c81ab4a677
SHA512 79f09955cc55d8f18d5e464cb74af68c0fc6a621da31139fe451d53845ae2648db66229b3ca8c49754d915c1a721fcbccdeda31d86b6440d8bc2f8459ac8ae1d

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ko\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 37667ff27fa18345e05f94ed1c65eeab
SHA1 db98263e273ec39fd13b0ef0107f32922e88d9af
SHA256 8d10ac786d16e91853c08b1ba4717f324b4d2476cbf58c5b62fec2cb8ba7b203
SHA512 a65fc08d834b15b78f2bebaf4601f8eeb95d14bbad423af7e8a53bbd43f28d308c334a8ea35ac65496d6db6ed95399f8d7f2b5f4edc6d80f50c648321a8cc146

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ja\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 34e5b745bb9921abae710e71b9fa2e99
SHA1 137c4e38f43b4f707dcb9f4ae00d36c9488f34f4
SHA256 8aeabec19a61f65600eebbd94047eff481bab00e9d964406c565aeeb44d1f779
SHA512 7f1dd3acf57d940d32c55c330d343da9638df7b066f963b108fd2060e1b4941813e5ec04c1bfca168b41bddca7e023e8a88237ca670d7a82ca63d5a2e3090ab4

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\it\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 54490cffc2e17784b8264d2f906a00ad
SHA1 657a1e7446d132db2bebe3835cacf652923fb721
SHA256 c6ffbe89eee3db658c853e1e45d8947ada9fbb6bedb16dbad62b36e289758885
SHA512 f68dfdd335605bc593a258995718316ea37b82d41a1ab1210aeb7e3ff65ab68f3c6bccf1a7560d09af1ce4f2cfc47ed31f2c60394d615a99e7215488843ff2d9

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\fr\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 c0ab0786828344bb22dd82794cccbba0
SHA1 01988cf96173a4e4c71a2b132d13fa7a3d78be08
SHA256 c77a0a5423fa35d3bba4c8ede7a2b401baac0c5b245bb109a4918a743e4a1289
SHA512 1eb12957fca5e965370f686d3f70a5c1aeca1a28dd9fd76aa8c793662986b7b7a0a842337e96b5a5fbcf6c4f2e51aa82d37fb5422fec169732b166a3e3295441

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\PresentationFramework.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 64ce4eb3315cb3b5afe257c27cc8a663
SHA1 57b680290344251784f99e622496e632531feb68
SHA256 b2965bad1f3e4efcd2d64f84d4ce9de1a766fd6d1029c46a5f00f10ff06f1c7d
SHA512 d9ba9912c01194e1ba1b5565b23a5052c28d8aeb1bef966eaeb32f90dcab5c29896bce1ffe2658645b2128c9527eaa97bdec27149ee0a438d61fb2858ee2b07b

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\PresentationCore.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 548111a16082e6a33664921361275b65
SHA1 3ac513a3ceebaae5d272ace4f40a7c6ef8bee0a2
SHA256 79b2278244e84141bae75d949cbfe3ee2442137a89dadaa730af4ca271dd55ed
SHA512 a506d6ab0d6685168d702255f02d25c40f91ea3f19ab2692c05fe91c7fbff354e74a5f628a100ffedfb521b6e8f620ff3392c9fd1599cd1c161dd703c798b8f2

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\es\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 50356ba95c7107b857db2a312193f73b
SHA1 dbb74215f2e2bae897a85e6a8e7b484d73f20dea
SHA256 19faba31194f9c931b1764789a9967c04e955b0629528cbbcbeb576f68f79f77
SHA512 dee6dca1aed422558b17c3f7bbeb9074bbb9ea8e92743c2cce132960b593b77731146ad9687bab41bf28db406e73c191aa7b36489e4c6145ed70429c71d1a050

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\de\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 85bbab9c81adc609744eb8131ad4d002
SHA1 c0e69aa49c4d252fe2115725a287d166e3ac61b6
SHA256 deab4141b76326273b26017e4f9ce49dadbf114a49f0c8acb86f16ddf4cfdb43
SHA512 a7eac5ecc8aa7a55ea670815176009aa97662df95a1f460a6fbfbcc5bc3cbf6a1a1c9e18cb8ac65328e3ae37f6296fc271fc6fd9389f7f5ffdc3510aaff696b8

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\WindowsFormsIntegration.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 25b557cb266eaf4052f59ad9dbf3a6d5
SHA1 e129933c84dcaa4f7abf09b9ec3505578ca9bce9
SHA256 10514652745ea716646da85828577925c4f2c2105ecaf8e8e4f844be0e35c1e1
SHA512 b1d0b1d7c6e223e955e1828015c5ff81325106da45f55e97f19d57564bb9aa88d1676f71c24426f820cba94f5532c71353f2deff87b19c892753c1eb731d1908

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\UIAutomationClient.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 69dfdb629337a09b9ab58e01bf805fd8
SHA1 20e3f2fb14aaa882787a9a018449aa2524a76c32
SHA256 e9cb029f15d606c3182e85b943ed2cc10d35f9c18a560e3b01f04f1c8570a6b8
SHA512 e7cc289b08344b75cf47bc99d93dcee287398040ad76db13f99ed4e36b9a5e5534f7981c459b378487f8b52c11a756c17c43cbfd75474430c3c02ddc24e739b1

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\System.Security.Cryptography.Xml.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 957a0888763020fa2e7b84a9e5c6d189
SHA1 f41b9d2d4e2127480063f5aab2f95e917233dec7
SHA256 4c62975a3f6f18f2b79b2f54d32a25ad501f39e0e971e14b8b1b969d73685a41
SHA512 8b964630bfd4281bb4bdc9c4f802e18857fb6a913fbc0e652af175444ec36f2571f7630e818d43c427afbf18929acf0ac73302207780a7ad57553dda0eeb5df5

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\PresentationNative_cor3.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 2b1ead65c69e71932ee96e26a504de9b
SHA1 01e4b0ea6fd5c92e2c491f486e0220882f623f97
SHA256 5782264abad7c52c5967ebc2b8a3f7590bcade5b8da7aa9659a98ea318f983bc
SHA512 eafee525ff43305f23e4562f7c42f3139e594cad95446a922c53ce6cce241d5e725d055d26453fe1c0bbe02870bf582034b3a2eb2b91c45b70c60ade0e800720

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\System.Windows.Forms.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 c9676e069f706a39385b758483998691
SHA1 daafdb33a0b6e3d1f59c23177b4a5b9955a49a78
SHA256 18ff6d0e5c03e876378cbf30f3da34959a67bd3e6e90fa7368e0f1bcc40cf294
SHA512 3bb70339917cd819250468b80ba8ce231a6274018cde7b9797fc130083afb8a29a17786f7dde0469454f6d6aa34aa85f4ea93f8d601bc5841369bac368b454bc

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\System.Windows.Forms.Design.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 e8fa149eb7e62b52483664ebf377dced
SHA1 8663c7e7dbe361f35e911a2d354dc69195692b85
SHA256 bf42a24bad52b4668257df3dc868ca7076352165a18b1d72a0e1442eec591053
SHA512 580800770e13e038dd2e191a1641c0613db8a01344e3722c41215e1df59c4c42df9cbb8d13d094c214a8a87bb393707525c12a3029e0808b58656b890e6d7201

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\System.IO.Packaging.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 bcdf3a08937a2978fb0877cce930318b
SHA1 e01da47aeff61487f73c23c287c1896255eb03e2
SHA256 dda6c1e9c555873c535e8e338e078ecc266ce27401e82a9c4d9ce3fe546ede36
SHA512 3317f2b06185787fef3a5090160e091876602acb0ad4dc44e57507dcbacb457c35682ed1306a7676b12af2b19480d3850c5869dd23a3b8a9c9feea2b81ea905c

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ru\System.Windows.Forms.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 eb0afa1b5ec2a51218422d91d19887df
SHA1 c61ebc1fa8ca9cccfa25436fd884caf8dec07bca
SHA256 c374ef8d66ece3c5d830ddba320734a2e9c52bafbb3e861114cdd3b934189349
SHA512 b366f548214248cfac3e409ba5c59b7d39b7528f0a1a7e9f0d864552f62fbb66443270ad631be7624cefef781ab595b3ba80ca3da556b252d61cc6b0d9020017

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\pl\System.Windows.Forms.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 f191b28bdc88b57b6197f71bf270e1c4
SHA1 35ca08e5b882b54454c7cb8b571a0e1cbc5b65f0
SHA256 6ad2bbfea554146914bc27ad7590fb4801fd6eb5846caa834fa4736a8f558b69
SHA512 0473c5695377f5a224d0b49322003367b9b9f0af635ecad6577ff7326db2caa909e9a46abc42fe012686fde248383d899fab4ffc3f750177d2e4c9974c857282

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\zh-Hant\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 f4ff4c55042ba10f91a5e09826a44b86
SHA1 8297b868bd02967e63cbf4688344ab71159b8a18
SHA256 569623bd990594096da0013b7ed3150c582abfd93bd9b666fe735f7284a0b77c
SHA512 5b614ef05371504a0996b6c9ea767d617e415a0caed350ce9c25ddd2fc2bcd697905b50c50aeb62aef0ffe17d807e51c3fb26f983ea32e5da6c2d1cd88208bc9

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\zh-Hans\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 aeffa7e7d289f61a416ea9a002984409
SHA1 edca5a297882e31d2a7ae58dc69d4a0fbf3e29f7
SHA256 1d4ebc9b18b85cd44e6ac4ea82d63ff9b4d2b302f658332b26ce7775d2eab081
SHA512 d9f74300ec5ba98d8cbcaf5af8c29b7e7912eda83c35f468845a6e88d00cb10945be8775fe517551b8297034e90003841cdad238e532bef6489d01b01c2ea595

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\tr\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 c6de3b85b996ce713fa0f34341175069
SHA1 9dba0ae5fe0173909f6b73f0aa651c77dcf9ce97
SHA256 f3ffc7e56dcf1d98a21c7f3e9181693ae5f4a6b5f3eda08cddc6533ff3ad858e
SHA512 d97385347ca55b2bdd7a54469ec3e01b4c112c9e4e507f6a583468cce3c8606006fe2b239c8aa49acec5b9e9788fb6cc749797f1c12266b781f751e0d18bc624

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ru\System.Windows.Forms.Design.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 a1a84e075bc293408026677eda1f6257
SHA1 a0a109a8595bc0b5972ae25711727103eaedeac5
SHA256 172345de0b65416c6e242d6562928a896677d780cf437cbfa8395709cc9dd21f
SHA512 95a9045564bd9ed2e47d0944c3b3a0a88e5a71038f24fd33aa4a328863efd1e312c6e2774566b721d3fa9aa6bc6a3a09f9747a47ab171eb09dfb32ca6c2bda82

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ko\System.Windows.Forms.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 a3a4e6b0a4f061499666523440f2177d
SHA1 baa46199876b7cdd9cb4da241e4890d373b34d79
SHA256 c4cfa0a4541875b221c303d7733ca28c486b96eaf5ceb2c0d6932320eaeede89
SHA512 1a6efb3628b372dc89adfc5e27a2d0032c1eab463c03f8ea2b96d0fe3c5ff90850445a612897a14e9c04c59edcef29fb611a1270a46d086a3ddfd883ab88ef7f

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ja\System.Windows.Forms.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 dca911f006df1aa4a6d88464e3de6b90
SHA1 2fa59a39a972fa06e4558c0e9c338a56dfad7567
SHA256 10eac507645abbd6290991c2fe0851ba9beb2f3fbecc1e4b15bbb5af685f4851
SHA512 5ae44e56bd055840fd7e9f00e6c606e503859dd49b2f6e5f349fcb16098ada0feac12a2de3a2c032366d0ad645384f27ff2569b657cf1b58c73113d1d15fffb8

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\it\System.Windows.Forms.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 157a4a4651e861300a2300927fd06e52
SHA1 378d0faa813670641f313de610840f71a07c3a05
SHA256 865fcfa6098a8ee2e544cd46481cc9c9f1506b259d6be84a5963cdfa3a5d20f3
SHA512 db9155951e1d0ebb04369f1f7c4fc890ec2ffb3bf67c6b0d43553d86e104224d2158530231a3e8343519237d23cfb2513151496a44d7d9b857bff426dc3be588

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\fr\System.Windows.Forms.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 c775ed76eaa4572dd840dd933a968e24
SHA1 4e8e7ce9de35d970b0286fa55e78e79b670c68f5
SHA256 8729f94e695e5cc7f11435c770082612964b424018053bb7895588fd89f36c26
SHA512 aedaa1ea762cb5efc726f5f00626f5886973414e414590e567b4b84a9872fd14d174cf31a98d8e0780250bf0da5f0dcbf9206bc3d4fbd406306a50bc9f649dd8

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\es\System.Windows.Forms.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 74e010237c4dd716ea214e009aaefea7
SHA1 d79e5bb77ef9ed8d5d22a27d6efdc61d1f436fbb
SHA256 0361b6d0de1453de634606f4061afcef2c4ea4350bfc6a0815f83f5b1ceaa354
SHA512 9a76d41173bdce41180b81d51c072e6e7addc1de44e25ffdb320ce7f651d2f47720028fa9bc15ec7c86b2ce83ae7e1b25c9448a8af2938ad5025ae3c6ecbe4a0

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\de\System.Windows.Forms.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 b5495afaba1d37521ce2501220067610
SHA1 f27bcc35aea95cd33bbdd039807a51e109b4a569
SHA256 f77bab7866b90021c52ff424f81c275035b6feecc9a769afea1ae57afa8cba4f
SHA512 fe8e2d7d3825212220cf0bd57eda468cc4095804840b9536071443208aa9c838bf2168126208d6df71d416b8d35b23db5f1178ed0a4cbcabe93b8604bd32dfdd

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\cs\System.Windows.Forms.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 fc79758c6d85d4303dcfb0b5a00f96ef
SHA1 0c01a0b6794cfae1abafcfa5b5f19125cb901c76
SHA256 cb09232b9af86feb72e8d69376d5c31e40f3c6131dd4cd166cc969ef14c0ea18
SHA512 5095de0cf708ef2527077f46fc472b1d1b733c35b2c6b211e10959bb7dae6f9adf567e22d82267acb79fcc6117269735ec275c8009f4b6274d9a8626f2692221

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\UIAutomationTypes.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 df264098bf8de73c920146a974e69d8c
SHA1 c729939e6c11cdacd0431fe96e5169bea84caced
SHA256 283805145e00fbcc70d88b331e52019f12e664bc1511e97c67998a660cfe0bd1
SHA512 1ac57f5374e4428cb7aa90c0385a5d98e0ec7efcc21a556ab7bdce4598d5bfc8fb6fa78ae1fd081917d8f5369f161f5dacb36c87e0225ff07a82fbb0604b7265

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\UIAutomationClient.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 c46e6a81c9f97445fc8ce739267ae17f
SHA1 4de78f7e5118c7cfeaac80ddde467c510280b6fe
SHA256 ae387b7790d5c6d42fc8f811af7573b545812b7328732d3e4677f4af19a80338
SHA512 77b86d0a9926149e482b4b238dee49137a3491b1e62728a45b36bc42c73a836f7f6ee1412c0ac3a7b75a99bc976e692cceb8cd23bc7eb6a3727c8971863ba3ac

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\D3DCompiler_47_cor3.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 65b926ecb4dcd8d6a22d4886118f9a14
SHA1 da27c228910513735b739fa9ce3558099da82e16
SHA256 48f42f1cbdf62cf1eee4c81c1609d460b8131d661964d8a3bfef031be1d18ce1
SHA512 c1e37459e7cf7206f67171aa979723c567cc9b72c5fe3a5cd2712e01872f0c92bd0649b7a99e933896f3d2205303a35961a09624aed399a41a62b16253ebe075

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\WindowsBase.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 dca3edc65168bfbdcd2bc5b6f80124e7
SHA1 cd73042573c27d91e507a1257dd3afcb89f9bd00
SHA256 672ba0bc77ef4eaf913852465d6558a93a5311ff0ec05502da443b7a1dd1f437
SHA512 91051e058da3f4b10c55f9a2e4204bb75c3189f1bcdef3ceaa4123b611ece780cc49cd4b2fe51610d73d78373251a76d9c79735f39b40403b8b32e06d99ec20e

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\System.Xaml.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 0a510097276d5492c1dc6f5ae4d245b8
SHA1 7d1e79172445ab1c8d4c9ddadc8fcc2674876d7d
SHA256 f73fc7824179f279520556ad2613eb712d99ceea94c368a46261bd527903aa20
SHA512 d9df7f151eb88f97cba8bfaa79b314c4d0e2667c79b4bb97a85c238ec3c84dc8420ff991aa17437efa1f65527c94ed4d62c17790207bafe59a6b37bd19444228

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\System.Windows.Controls.Ribbon.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 fce6845492a660e973f7434d3c66e235
SHA1 12575d3c8a90625214744a55f1fb31dd25f9193f
SHA256 15531487d5202a1c8630d693653f8ad30b81fb0892a3a8fea30232a9fe430a59
SHA512 ac46beec3f1bdd395f3dcaa29da368d81280c090009c9f1463a47b6dbde3996351dc97061d22f529df82e90a67d1a438f35bc3e7ff4250dbdb8e0d89f728744f

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\System.Security.Cryptography.Xml.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 03f8a000798b2f44cc376fce60f01c3a
SHA1 0a75bb3031afba49c87aee53d84bbca426ccc356
SHA256 ee68b89eb9dfb055ab89b37d96ec737d48ac08ecc3769f0cb7f089f1d97fc6f9
SHA512 b2048cafbdac2aa4dd432c88ebe74a41cac6973abebd1d21a50364c02941f16e01eb99c19c6bd702225f20f05ca408516ea11903d45d002f282be24f6985a5f2

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\System.Drawing.Common.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 dbcde04d003df9b871cd4af192306d81
SHA1 55be44c25e40d77b1b3c8ac692f6ebc1277b45c4
SHA256 5a6f44b9b0521a34ac48c431492eee2a6eb1c3fcb41cecf600890f4a60839788
SHA512 e1adcdc9825bc7d3e34972d49df4fadffb4415a725d0ca9cbcd9bf16d77f75663f7d4b9b5a0ee8ba4c62202e4c5d95a96701ce29257517248cba880e4ea697dd

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\System.DirectoryServices.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 3e0a58f5b2cd92b16696ae1282419f06
SHA1 a3308946ed2c842e24343e04a9b674da5ffa3802
SHA256 35ef04cb2e445c8907c536c89a7570609656fc3c3626261db15eff287d38410f
SHA512 7b1712283f17fafabeafd325482451418e5acc14ab0dc8d7a304a94c39cb7c63ed1d8eeae128c157812158065cfda80f345806d8ed25d46ff109a759d5c2954d

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\System.Diagnostics.EventLog.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 a2a2b84d3f4795ea17d93ac90196ad5c
SHA1 277c590588ecd52f086a21989e91986af71b595f
SHA256 6475886729626d0ee49fe471d3e67aab1599ef38f36e258f898e5a105df67de6
SHA512 6260e73a5a4177476ac64262cb5e6bbe2487f137a5200bf19591d6a0c5bfb7736dbdd26ff49beb2d6a17456bd0d7756e5ef0f4da682d0805b5daef9d0b1f50bf

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\System.Configuration.ConfigurationManager.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 40a78d0f319199d977bf1bce8e34cbf6
SHA1 3bcdd057118dc535773cf6604669791fd1f4c62c
SHA256 88ac53fe1c1851da9e1f86e5b6ab7deb6f5c23cebdd26377046d8c9826aeb7be
SHA512 bc03a67d41c45f652108986631e354f3b3ea2a839dd74f4d827da044d1e795819f03c2f66cd47656e18456a21de2581b659b5a75a2321ea0bd6094e55c8468d6

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ReachFramework.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 10073e8971f4f99f3411a9662b89ceda
SHA1 0c1daaa4f0ee3cf90cdf7dbefedfe38184d01c42
SHA256 ecda2ae14185df25c5234d1192c94f227b905ff5887c0cef67fa86fbaa28c54f
SHA512 8c470cc364410a2fb27016540771328b59934e1125f670925f5355921e328db8028c536ed9025fb48097e154837d213b6acd283e02e8de476e9edb20b06d46ab

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\PresentationUI.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 01ac537df70e8b6db97e076f1fd1a71c
SHA1 adeeadc4706795eefd0ad697181ab7cf4dc4065d
SHA256 b51d755a9229583c5f1c81bb7820ff41dc308ed65974152b372bbc31a2e2da77
SHA512 09c386320227a971d0af4f8b07dc4a77e895f6bf840d25cedac3a58422ef4479f8407a934b254523adcde0a3989ccf770cba5f4ce2316a0bcd7bd82afa97bf14

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\PresentationNative_cor3.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 0d94b0ce5796cb65578d853f239d1896
SHA1 18d7a07c07966e4e826da3f8bc65c68bdcc4b56e
SHA256 aae0ff51586a35ab38d7efe7e89587977bcbe7a0d56fae4e3a09c05758ef3070
SHA512 b351c7ba940cf18423206724d0a1248c816d0920d0c8d7e58cca22af0e88ce39e8a33062dab6a70096dfaeba5ccd8c612649437179de25e5d3a4af6590e731c9

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\PresentationFramework.Royale.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 811024c38f75f3c284bdfbbd4e51516a
SHA1 6759910bb3cda1bdc9d655b4ac9ecf03255637c4
SHA256 f2a9998e651b06ab9b40cdb0503f7dbe5de180ecb22b93d7e7d6c42c9f40e842
SHA512 df8404a373a551f1e3c3d8cb431163436cceb6923f49bd53da81fb13d971ab6016a29539eed0c0ce869e7ab1e9b900d9eb61fea805d1465bf0aa12ea3e846ef8

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\D3DCompiler_47_cor3.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 bc8a4059e5454dda18d0e0fa4fd8b394
SHA1 0635856e7f9f4503fa307cc7ce0a733a734817b8
SHA256 3ba9ae6cf9d3d3f87a1fc5b31790e5e6b6bd6e704117fa2be926a3e8cb308441
SHA512 e7506c93391bce2b400c7f6c4d23fbfd62de857284980ef8ad2f96503f537274e5ab55031c97042e5ec280f1597cf2611a23250a115bde60ac548f807ce9c5a8

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\PresentationFramework.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 2fe9d0f99ddcf2e31d692d27476f1764
SHA1 e413e2328a12b576ba16e2587337d79f23a622e5
SHA256 688f79a90575e756f340b8b8488cc4a167e4f9afbf3062bc03f39e74f57d4925
SHA512 8add7b80fadfcf9268ad2b554a9ff80b1f5e614b41eb22056b4dcb491a5d999e290ec36942c84aaa63293f1264ec3622b72e3a73bb8461abe091d8394d2fe46b

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\PresentationFramework.Classic.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 8863319cf615af301fc0d8293068d0f4
SHA1 ba6d8e085511735f768835af1adb6b319d3943df
SHA256 5b17d131cbf3f3f67daa5e3ab029703c26c75343021c95d2428ce6b3ab9215d1
SHA512 579cd270aff9f584ca750b43a1e1f3e4e0763d49c670e436d9589d462e0f1337dcf31f3c8be6aaa825eecd0fa59ab45111e7adb29a314ead9b4ca77f7978a655

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\PresentationFramework.AeroLite.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 1f6c37618eb65c677e12e7ccaae69e0e
SHA1 e320c6b9f1959f2d0d83895978b699b8ac9668d7
SHA256 cbd7fa6cf63392e10fdd0fcc4ac29296efe46f907b0c51fa2aac25ded29f248e
SHA512 ceaee45da8180f5a2bb4aa0f264fa546713fffd09c602a60cd664eece64eb3039d769bba70720b8fda5dda0479e4249c14afcde9fe0ab9b25ad829c9e4d8c700

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\PresentationCore.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 de28387e3eb58cdcdfb6d0b3c4324910
SHA1 6b27db25a9710b000878c25c9ea6bd8756451862
SHA256 d7154378ba9aeb854e913839c89364b55aea4f0ed311a7042541bccef455cca4
SHA512 cd350f7962c927cda75ba2977426f44dc3f9db6abad45a961efa511106b5461a648564b8eae9739b18a243869290725eaf5adc5d40f44e0cd2291fc0ee1b35cd

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\Microsoft.VisualBasic.Forms.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 00529cf2ff889c21c957099046cc90e6
SHA1 ffd79563c41179654925dedb7108d5d985adb171
SHA256 c7ad5f90636a55ce074ad3f8a84356b0a4c199cda0ea10e5fcd3ac0e04288a4d
SHA512 80591bd7686f8d27db68bc975fc2ef657dfa0bcce3b2e8aa6f283a387faae2e154c997a69b0a55381c97c0d3de2ad03a85d6a9219e8cdde035d757e9ad7e0851

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ru\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 b3711db062f746c166d62041108fca9d
SHA1 c5a71e519b64492e0c921c1810cf7cd4e8a60625
SHA256 79448eea8bc0dc012c730e32575bf2e395e2b7e4f8f7dca6a402377b6f402637
SHA512 3cfc9db7594386ff8dd9b62152129822641041c3d0da2dde9761105f34330a4fc2974d9d44c039154aa1dd5ec5130f648e2c4a98aab756f55142e94cfa986ab2

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\pt-BR\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 6778884a63bad71bea6cbd5ea8c5fb89
SHA1 3790a93d90570d7a75dfd879d1da37087ff5c9ad
SHA256 cfbdfddecddd26f29e954159d9e63a9004a4c6222d93bb71355e6fa92e0a66c7
SHA512 36fee47a1f15c1fab2982effee4c6c98af183d521c05063a4ad8799c26684174b4d4cd38ca452f3e9fe0ee348b14a0708bbb6a393b934fc667823b08548d1b7c

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\pl\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 9568e67f9f27cbe7e750d47874c575fd
SHA1 09f12b6071edcc339ea94f2ffa0dcc29b4cedbae
SHA256 fd8bb571b0648739aae6986227fa7a28ec0826738467b23b42b336a59829fb83
SHA512 36564582361be06b77a29add416fc8489b5926e4b9fc2cdd0ef612f0fc86b50280b61479f0f8370012fc82d9e4f74bb0b3a4a546596c556c7df42182af1ba969

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ko\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 29a7d89b9e5f538dea7fb38cbf1249df
SHA1 2a7582777579f8a63d473132f579c422dd2cd1e8
SHA256 d2152421a87a6c52f42b0889bfadc7e710862cd74cc68079e810cd5b219c942e
SHA512 a8f476f4ddc1f21d3543aba90bdc6680858e7ebbb5e07f1b6f2fc3fe445c79597b197203df11233436632edffb19fc46c05fe5702cadd0e2f7937291e0faf4c5

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ja\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 633af20af51d08a5165529b2bc009c94
SHA1 4d702d45a7f0a6e9f0159a60ccf2b6f9d45a7090
SHA256 ab3a9e23e48b7c8cc650c0f42eddde218469c1be60fc5abe998bbe8e6455d19d
SHA512 77394b3710f6fb7d6fd7244b55c8063c562e03b0cf45d6440c9c9da83857d1a781fd0be3e4b2d0cf71e9e4bf0913aaa4939691df77db6317f2fe9304ac72097e

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\it\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 33d0b00be31b04533a454f5dac12c2cd
SHA1 2de2dd8aa83f3e178919be3e52ce43874afe8667
SHA256 b0ee6e0591f327e850ada4e07485b10bb821eff4783de44a0a904e4d2f3d356a
SHA512 4c2bf3e7579a115e4f0f98524816b88935ac42b9d0c328110333b036fe467581ee9dab6a8ac74a9c1ec5160ac63ea3dfeb481912d9c617dcaedf8faa8fe33145

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Text.RegularExpressions.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 13b68611fe738de68f173115eee27f2b
SHA1 6783db8bc1cc512c243b7587721765c03313740d
SHA256 9d7e276d1d7d634b52767346aee20be0163f42ea73cef73a43f1470c7f667837
SHA512 19a8a17cd355e38239119f497e44540504044eca6abb7f336b10e9c1b758006eeb702da51a2342913f9b3fbbb8b007e1eedce9afe8fd5643ae525453199ec3be

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Runtime.Serialization.Formatters.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 c1c656d391495a286a3eee8c39957d71
SHA1 c40386baceb8f149bbfd6162a0a84b2818a6ad1b
SHA256 633cd49101ba71a4b196720f24c67123d40672797924d6fd7810aa836b84cdc5
SHA512 0516e8aa011933da1c1e71c63d9d6b6d4b6c4b4cd1f75e7aa38eb558693e0aa3cd68109c9dc68fc76967fc289a3c4b083a294de9406ac80798e04c754c8fc051

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Text.Json.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 e80dc0f09103d000199cbf04523a6c9f
SHA1 1e45111f953c2e38bfa0a73a7e1696aa94250ea6
SHA256 d537fd50014ab63d0fd17505ad1a8d8c3aec428ad127475fc0f882195bc559c1
SHA512 ec4f5437f9588ffc9d67c6ac8f72f9c89bdb4533bd5b89f3a989abbcc9277122ed42ec2d501de3706ab107159afb736cf4805d9a47c4b18b2d88601449cf1be6

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Security.Principal.Windows.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 1fd280befc071b84068afd1281719f7e
SHA1 7b02903f8d390a03747f7fbe7210ad331da064bb
SHA256 6a537d25adb8848d3335f019dcbdcf4367e7fb508ba709cc5d9ac9d1e6ea5753
SHA512 66d0ef7ff4ff3ea4a7edc49b16703cfc8c1f4c02304e2f371f0d3f54b4b6a851696940360820f44d142aea90f7fb5b3a2f9c15d26f1f750b8ef32f31c0729990

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Security.Cryptography.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 0ebce217bb0e7359eade79fe424ef361
SHA1 bf435c4a1f6bd06f6afaadbb95142a91b88d527a
SHA256 2e935c371c058e09101de0c1583c3e927fe0e922a06c9ce18d09e5f4c8bbb1e3
SHA512 bb213ef4750753dda3c1825337cdd2f3fabe1a51f3c9333b3b6c1a0b59680454e78957ca79ab59d98d09cf8cd9f0fe2d9675416a8f2a3c343ecb9fe90612ea25

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\cs\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 aaf95d3d9ab1b497138482f3eada1f8e
SHA1 89f8cca24089f064ce3fd5ba3b1aa7e0d801cda4
SHA256 ee64e49ed88dffd98b88e78c4e8e482a54cc1f459f45a077b9f73c5a3c77cf7a
SHA512 f8a0659818501c46f6d6b7be1d30c62363d15ab6764b858147e96f2716ae3e0fd496a4fa2e9fd8bd555e5df4e8f3ffb3d589ef78f8e6bce830fd59f51db0b482

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\fr\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 349800237cbdcb21108cd4c94182de95
SHA1 9905b2827fe590c7fe7e7352e78b1710c3ea94c7
SHA256 7bc73fa7cd1cbe3f5a8147139411bb59f117bac210130ba68772bf0559e39827
SHA512 d525ebcc04e9d92c05ae0181d5c2d9bd0b1988d46a9e1fa2a9fd8a98227350f5d2b1d04f3906bedd35484929fe3b3070872996ba8b2f23aa1c078a024a59df68

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\es\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 92a1a190cd0625f7b023564e1365f5eb
SHA1 d5efee2ba27d8852140a0702368a1281a735adb4
SHA256 71117f79b7de3d8807ab8d10d4c7563c733b59ff273ff2b8007ce8ccfb7cdc67
SHA512 da02356757b9a47a769161b099426cf5139a5532e3ca68949e68620ff74b2a31742b8877cc8390c9238184a88300f17e6e0fd4ecfa272871c762db24654ef184

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\de\PresentationFramework.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 457f9bf729ed28cb8a160de9269cda3f
SHA1 18736f8ad298ff9d3e0fd0e32625739ac4ac22e4
SHA256 e9a58736fe77ee4926235df0c15a30e16192b152f06076778b56b25d55c0b230
SHA512 71fdc2604e1f1bf965e0e6a7f697c84864f364ebabc9097f9612f6a0ae102c0eb8cf1393ff476b36a1b9728f7d8d87bc15654f9ade7e1232f24332f2d87aabd5

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\System.Windows.Forms.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 5b171f5c588e6a6ba66de2daf41a188e
SHA1 b1004dfa153d3e11649cc0b873908246656ec068
SHA256 aa27e65e509659f64dd32f50f13889c35989779bdf1885f142eb56ef4c5b15a3
SHA512 a0b4d9acbeda9596721a7295504f7dcb697bf75a61d28fbd10b92ea3c7ffaa2ed089b2e7b862e45a803600b6b4a2a6c900f4814b00af94926d2a9c8a7b0905ab

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\System.Windows.Forms.Design.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 4b15ac94238c6a377549915e179a43c5
SHA1 1519f9e47639cc7ede5117002e70cee46683203e
SHA256 ff74d31ccf5d34da2edffbfd3bc3e6cf0c44a5bd69ebdbef838e9ca52f935a5d
SHA512 a4cdb5f394d87c8147a7091e465a324677fc387e6ee1e699401b8fe3f6b62551b42f345a8a57a737f54b7f9787b3ac467d9268f41e61de2c4257f0ec321ed97c

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\System.Security.Permissions.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 bf8013c2986cb0be107e64075bf9d599
SHA1 0f5586e67a5bdbae0818863753fa6ca626bc9078
SHA256 b61c9f85eeaa53747924cf5206e2d136367740dee12de9f660a8cd2bedd849c8
SHA512 ebf51e312f074d8037b55eb45bf0e141f8392831b8941781e76caf2480a230d28b3d9b5bcc1c532b17792a3e866b1225e8b58f691f247170a73d42a8c38d6113

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\PenImc_cor3.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 11569e8488c6e1d22fb0a81dece59b1b
SHA1 d954b0854874bb500a57376e90f167cd613fe596
SHA256 44627806f81ef5a0791ef9c68226f438b704eb43ce43100b1c2906b60707413d
SHA512 d46167881d4093f1b43569a85dd0113d49e4e2e9f5e7d3e81ab51d39356e116ec27bcc0609eee4021f21c0f0d833529fdfc723ee3064ac6b3bef2e41d0837d63

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Net.Sockets.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 2d7133ec7911757b991582672afa2e43
SHA1 c722da3c4a6f3bf41b68ea961238307d781168b8
SHA256 4e426c132585c164aaaae96753c309823b790bba7a8ded2148fd217a943b5fb6
SHA512 5a788798ff76b86e922fb045eadcc68f5cac8a8107fb674aad3f7dd19f2743a701520b5ac6f1f41d818da309c7a9ff59e213c3f9401f27d3d64069bfb4e01a0c

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Net.HttpListener.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 0c9df120b8d9747896926d94704c45d3
SHA1 af4af4ec51e92059a75c9f053ef54bdb8a6ab2b1
SHA256 9dcc9b1eb72cd78cbab6454bdb95ec7d2028f97d3060b813ebbecf7b88c56451
SHA512 f2bc50968a6a2c4db2a310c30753b9315b916d868e7b6e8d7b66ff7342a40c80bf2dbdb06bfb4fbf04f18f9c1f0393d28f7825b01aaa3e4a1b7713523dbbc004

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Net.Http.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 0be5a5b107a36f1edf20db27a6400dce
SHA1 b5a3a949f5a2b49a541ece20a3aee2ba0dc14a96
SHA256 58b145a3c0944031c5d3e46f1200a27a7c543568898e99417a6da5eb1bace844
SHA512 c54b9e7f64e07d05aa7c09f0b7aa19463460c708cc7a5b50fa36aa76d7288024f184776b6a3a04cf8289346b60582bbac86f8dabdc3419e6afb811872b8e447e

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Linq.Expressions.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 28e9a03c7e61e57eb2464a0faf82994a
SHA1 20595158358d8f25acc6c9dcd8404cb548b8517e
SHA256 64ba5fffd93039a7d78d5f8a12f5077b3ecb48fe385fdc162c4bea7f27da1405
SHA512 76765542a988e4b2f1103ba65ed17461e50513abe5616ecf75da284ec38c885b2f2885b34d94027bb110afff837cb5be2785dc50dd3f3c69e3231480df53a9e1

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Linq.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 682719562038b5225362ecb720b8ca94
SHA1 d703bcaa5304ac8585b0370b534bd2881247ccb2
SHA256 30d2c0be564baa7f79038a7a9e331efad022dd89a1b0a7bedc7f48acb8fda2f9
SHA512 590c33e90024ed73e6f7531ce9e9a92640a0ee9fb013755293e99d101e5b1eb21cd949489a76163786ea3664254c1126e049e7b578e351a9616d1522e7fae10b

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Data.Common.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 f8d75a5d692d0952536fbf11dc4e560b
SHA1 ba4d2ac34c6b38dc7c0d9d5760ad94f29ebb86ca
SHA256 a744268de4a5945b9781dbaab32604e059e430db5a7a824e2b105d26698064a4
SHA512 b5b8d4ea3046cb496c56bc1f51d11d1300fb438f30f831035acd4e33a549c39d67a681a9a97c4eac531c92b302078a976a7ab735bc7369133160d091d929df01

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Runtime.Numerics.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 033df54a6c9760a414af09ac8f7eae8d
SHA1 a9a655e769411304cfdb0b06eafbcaa91d21bd45
SHA256 1a2edef2b1a9f3cf00cab3468749cfead7b4f1a0b6011da9c68d6a41d4caf445
SHA512 f8fbdf61b5ea2b8d00cfe221e028166ede8e327a95086b8695d46998d965b7e90a52f2044dee5cd1b8e3b5b233f3ca9decdc33219360c8a133596c215a379d76

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Private.Xml.Linq.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 557e784518f7daa9c4e40fd11565e0ad
SHA1 65ca18c62205affb2eef956aff41bc5672d05d87
SHA256 7a9e212cb09154112605c311b9ae2765d849255e9d4f003ba53f53dff0f2de45
SHA512 4d3b7e957257f5de9f73f923cf1c9a5982259f4aa5b63e45c9e8f56ca023ab74bc0667db01b38d72ba9b968ec31cf3c488c43b6a4f4fad4fab931e6f02aad272

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Net.WebClient.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 335a37e282d110fbf3398a3b43cac065
SHA1 c3c425f8626ef3ed862783ebffa4f6477132c5b1
SHA256 c6fb2e5091f34e5c862a7d06518bffed71f79802728882763d0a6a50707a9c2b
SHA512 f9f35a6f1ced6dce5085d7ddf6c579d03e66708efdabc6681b29dd7b7a8b9abed406889bb7444dbc3b76bc2231ef47b38255b1ac3ce42dbd5fdd4d23bb8c630b

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Net.Requests.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 0665bdf7130fa33dd3017549a351c806
SHA1 ab42b22a301873d57811a701596b7e4140224f4e
SHA256 5045cc0f87d98313b04a0c336b00c2f70720a4a49acbdd18c48fdd55a79bdda8
SHA512 1d07313dbfa771a70e7e1f14c67e0607bf3b45c2c67ace885e7ff63b7998185e5315718a86db7445df2f37564e6bbd8f9be829a96f202a56ee48f00900f86caa

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Net.NetworkInformation.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 dd391f322da7e454db755a328dfe9aa4
SHA1 e0b57dd13a28ff4afadbfafaab6f5f79c988e1e2
SHA256 bcfeefd2c4d7099e9b6c3d5354352d97a26555a81a114ecaf99938490f3d146f
SHA512 b83724af4e3c3933f6313ba6d58d85a8efdb118ad7c72597888ffc7b984b253ccb807f9ed3fbffbe524c6e619cd7513a1a7b0534292e92b7e226e27b7400e08b

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\System.Diagnostics.PerformanceCounter.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 646ea6fee0fb8a44536fb987b2d22573
SHA1 42212c5a772c3a371612c7d8d2164baa2b407756
SHA256 6f4f78f058566e29ad7a310fd9a3c60ce85d2fff81b1f3a56de3073534532a42
SHA512 7bfda24a10ab7d9f7e9a5942a82fe9504af16e9d4f17dc985b76fdb02d380928c621ef0d5a43686522c7934b8dfae70fd7caf4d24fcc578d92f46a624baf613e

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\PresentationFramework.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 400670b8af399636362cfe0432791acb
SHA1 126623f00008258e08befe6ce75e1c9c58a66b37
SHA256 a86b130d46ec4f50b6d89e82bebd1e859282a24385563af1d86d261d90f04210
SHA512 d9a407d715a4669a5c9d4758251f1ecee7cae7b77c5336eba92e95227d55fef5b0ee6122b1831cfb382d6ba229ae703102521bb72070f8722d6a4ef267fb71c9

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Reflection.Metadata.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 2dd06ab3621a9747552edd2a0585eda3
SHA1 ea010f24a49f08a7216226e64c3be800e939f7c0
SHA256 beba60a73cfa12ed7a3119c31953a823ae180e409f36101b149d9ba4f8efa533
SHA512 91b13a7a6738bf70971f1d0078c5eabc0d2902766614928fa9aa12ac91febd62238572edf338c0b911991cfccd9a94e3259a75988404e8a653316c027c4fb30a

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\PresentationFramework.Classic.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 318ef93275baa62c267f3ea885391198
SHA1 835da7bf3b893dfff5cd9cc44b7e1f24c0e2eef4
SHA256 d0ca1640f0e6aff2dfbca53a78345a213f65eb7b18a3dc46e40923669a09cb0f
SHA512 449aa2ade0940c52a00b1c0e1860a001103d7f5512b498d0b0d95bccbc7a421c1f6244146fb51cc34bef6c7b883257c02656bed336a0c550c973891c38872495

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\PresentationFramework.AeroLite.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 9f3dc291301452821699f2110f83cba5
SHA1 d696ddd541a74a48c892a807b21e7ac89f457e73
SHA256 e80c7ae4ec5bdfa780888d59c535b02d7e03e98f2b50cb1a67192bdb06d6ff1a
SHA512 a1cfd7372f8cb121c29d46f8e4774743896100399403d50dccd9559fd791aa6c8966179f4a247941d857db51df0475d3a07aedd835994bb9f43bc9b42c88c1eb

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\PresentationCore.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 e6fdc261d1e9a8a690e43cf1f00e45d4
SHA1 dc0e5c17022e42a899685aa8b1a2820f13840997
SHA256 2dfd9060bef9f27002ea78ecd25eba3876f64f8c43df9cb4e90c55146b5522c5
SHA512 2676d88f14ace1bb45f076500ef44e7d33fa344c67963b8d088974141c8599b0a0dafc05d5ab5eb188834ad16228496c078e6598e07cbb504886a4312ba8042f

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\Microsoft.VisualBasic.Forms.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 092f7d7a42213b8804049028a2affae9
SHA1 70636305dabde1c40ffa99b97f8dfea2f3b92418
SHA256 9ab7b97d1a58fd56e1b66a9a65b6982096a040f776998cb7b67275021347bff0
SHA512 bcaaa7b05fd821e5d5087b4a754eeed6981633699f007c1b819d496805364e60fa262f21090a5160cbfae0d8fb227cfddbbefcceff93e214d42dc58dfbdcb275

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Private.DataContractSerialization.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 49953481159ffdcc845bb128d667d35e
SHA1 56ca9740591c6bb766137f066815c8e98141de91
SHA256 3976a7d35598fbcc413747717bc233a40259fee22521883a8abb42bad2b1c7fe
SHA512 03086789e7c260cbff8d5a26431968c6965bc2408b043cbe5818fa39ffac616d66ba75d5e993d92a247cb1f53ea0df975cfc10700222cb548d010a73f050cec1

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Net.WebSockets.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 ee9b8831dbcc9b9992606a172567d396
SHA1 148b1a7c7d4dd2b45ce7ae4bde506abc8a693d42
SHA256 f8442581a0a82c5a32e6deaf1ecedbd950491e79e793055ea0fd8b4758223553
SHA512 43ade8c4caac6a1a302dbb6b958dfde34eab58090d0c66ebb72f52b845f4dc759cc5e5d6ba84ccdcdcd2907b414c45ac46ee98eee06ca875cc1ee4fdc14c5400

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Memory.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 0a73f289e88b2799ff0ba81cb4dd6d0e
SHA1 3293f90e402622fa536b040a60e5e9d4bd6a3385
SHA256 0f869fb6f2644f7493e58bd1a9a21d362bfc78aee48e5f073ea8dc9a8292089e
SHA512 75d02e9ecedeaf78d83744d541722c806663045dcc817d8c0abe93dab70f6f18a2dd71d8e4f09d0330ae9627fdb958cabb4297fd18e7a0e7cc3ef1b784c3784a

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\msquic.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 b38ef667d544b554455f91ad4614581c
SHA1 4b89e259c47111c0352d323c7338cf074c5a8439
SHA256 f5005dfae60e6cb25545b41ba5b858e47e105b63f4fc042ce9053adc0bb18211
SHA512 952b2202485299d7bb3363e1ff1e52cfae84ace7f20150d329c7e9bcfc882315ad7f975abb49cfef79bb72bc8444ac06297368816dee85a9f353f38edf59150a

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\hostpolicy.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 7e697aa4e43cb8d5725e52a5108762d1
SHA1 aaaad40213ddf718a9b88f0b53ed99bad399b27f
SHA256 000ae01991cdf69f42aadef738ba0536d9a4883a627490ba33a5afea94835635
SHA512 db3068ad1f159994abcd519ae5695afdf82f0ad0392d116bb9c400c63c7e981a4e5b24642602a928e162b4fb555956967394b6fb90eee68889d3dd9be4da8d11

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\clretwrc.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 8fed3389652e3cd4a914171fc8e38e1c
SHA1 e042723883898790205152a4e7f4abf1b878f4f6
SHA256 6533949bf4c0ddb0a450f4cece7391ac8e7b1644c851c8138fb71cd0db428f2d
SHA512 19e62c273ecf6c02de2b7ef1849fd735eb213ca9b1c62895e7510038fa42576bb31d9df0f0f2d387f1b97122520ac252d784a6cd85da1a278d99ada73dcdc4ea

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Security.AccessControl.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 fbfdb7a4aaedc86562c871a768e80a0b
SHA1 a23bc11c6cd7ec648961529ec38283d1994836c7
SHA256 1f03d17d91835f7c5310059f2a2d34ca82396019f1de66317460fb2c23187739
SHA512 4b127fd57eb580e86f1d6d65e42578f310058356c21797ca5790196d449a947d5cad0d45da858f2af823aed257bf64dbeb0cddb198fc6e23e3161883bc6c7509

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Private.Xml.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 b81f00af52d480a54943ca4780852de3
SHA1 571f39e88a1871cffa68ce4e952209416c0b2d4b
SHA256 5d65178b28bd7238744c517bfea76da1589249a507b7ec2ddde1bac4c8cb757d
SHA512 45fbcbd9d3d2c05d7040cd80b7691c53b057e314d100f79b7ccd0f8519c1e6c8d955948ff96b44ef59c01a633647a482711ab4aa32fd29b2f5d14151c678272b

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Private.Uri.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 c365c265bd0e971289de1fe19f975880
SHA1 6f7ed2c66481931977ae49f2da3acf42d9cc5786
SHA256 28fd5292efda857fa618162c72e40aeffa6256678a8d18b1b1af867833b790cf
SHA512 9ea892f7a8597f92087edac5e5059664d5d9a1cd11481fd3e3be750a022178dcd79cba37b6245440b588e917b0300b68d361a8b4afefd645fd9134796703540b

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Private.CoreLib.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 011256e5e5b185750bb56f007835fc2b
SHA1 ef7716076cf5c707d7b5b207abfa6a130cf1f175
SHA256 a83b11e1e019053afd4d0dc2b9ccb9c95ba08573c9ea7934b223a1b905735aae
SHA512 8401ee3a7bdf8736f0ad0ea66e6bad2662c293a30c96166535e890ff46a04775c760b7b9dce1ac02a6aa20146e8d718afd99a382000a1040d24395e31df795af

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Net.Mail.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 b363e65986d94e6da542951022fe21e5
SHA1 8d54f34f9f37d5f3e7835acbfa7cc5d94a0eeb15
SHA256 20185e0f19c23d14031dc145b9ef35b257e2d6525f2b31956e0149fbf29d4a69
SHA512 6d0da7722019d321d2884aaf8b4f0ee9292c36003716cba0d1f4a50510de9b6450e2a4cab7de979baab6eb7c78fd7a834f299a87bb418b4db269c5b3dd623afe

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Diagnostics.DiagnosticSource.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 3665cf22fb2354737e6d72bf265e5c10
SHA1 79a956f382b3b30caa5202bf8365fc5428820712
SHA256 ab6d31b6025fafcdb3ee7f8845711de7f3d2fc3eb5b9101d23d34338e0c3f684
SHA512 47f300f0eebf1f85973c00c19662d8923d0d31d126aec5967bb08942fb8cbb78b71cedd4b7d66e4eeb91cf74d32ea13fab2cc6a4c73e84e1ee86590af5382726

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Net.Quic.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 576aa24f76a8316400f4c265a2226ce9
SHA1 499c1b937e476b6978d8cf5acf9d0a18a8e9a229
SHA256 b42215259c355adf407108f5de46804084f8eb50f4af5c6fdd067282d002105c
SHA512 7f0ba912953e52d6240677215dc90da70c4c512aa9a893446c936fd58ecace3e1a784ee4d1838ed7f8b83ec13f876f6dd5cc6a2d9e09fee077e36b16504fe72a

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Net.Primitives.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 62d5cb05f62015aa5c207ee9661b5aac
SHA1 a2a39e6435ed98f04990a81b44851ee57037cd24
SHA256 83dff2d121958b3e05e321d4830b90682f23fde0b996837244346cf8748fff86
SHA512 5b16a69218765b42f7eca4d1d1e03cb93ae39c7fae4fe73c1db02b3f7b864c44d167d57575b0fea5a8cf2ae964d03603181e2378d12669abd0aac58da659ed15

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Linq.Queryable.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 b72fdf2748cb1e1384fa7429ea4042c5
SHA1 56f606a17ce0828900d6fbe43b90c7fe63c9b890
SHA256 4ff662769b2ffb0a319e08d089a19fecc4dd8e252caa0a8456d788414d1f81b3
SHA512 03d02e8b03d43edc0ccfe86cd4f4823bb8a5756211233796b3616ad0f806404e253a7fea6c97943f3dde9ad9aaf16643515952bcbf7807bafbf5a770439c1755

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.IO.Pipes.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 6058d6ab3bcdfac6a31b0b1576253c1a
SHA1 03683f03fe717a0497064c1e0f48ddb5883229c0
SHA256 c48afde7815f4357684012a390bcda360dd8c7a85da154218aedf998f44d9b6b
SHA512 92990982c91f4deed5ad8ece356e1355ba23799c8d7ded8ac41276483ac5562d8940e4a5bd50636e7d3e3144662fe263ea9ed99401a2adfb378415808178a078

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Console.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 cea33570d2a2d71820ddf00e26b24b72
SHA1 f87498b30a36442052ff50b411863fd4191b7cc4
SHA256 175b39e7a39c1ff3671881867cb1335485fadc34a220d776168c49912c37c091
SHA512 4ca9d3a339497d4febee9ff42563b591783f69bb2646d46995713c916ca10cf13b5ffe8f29e20a29ae1332fc4afdc2d6bc7efa25552e60e7c83c4a13b09cbfed

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.ComponentModel.Annotations.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 282520e88e31a60dd921de8e002a9a1d
SHA1 cbd5b94a12c2fc3823f5409f80cf2f4db2f55e25
SHA256 dc09c1458bec95d26f08eb79a9a7e628fd5449bdfb4eb922b8be51b22f8c0bdf
SHA512 80e387e7361da81254ace6e513fc92ddf5731d4cd2c710a3360dd0b42b15aa69ce8f85e315ee085b49e5ef0748b6cd411be50fc8b88d7749f75605c34845018a

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Transactions.Local.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 bd38d9e358d41057d2efa335ce934d2e
SHA1 95506599e7e2f34dbdaad8392fe3d19645b53f36
SHA256 5a10b9652395f52dbcf41cdfcebd6da315be1a4620a3d62cf44ebcdfb495dde4
SHA512 4b0ba21d4df20bf6bc5e937920cf7a01d47a5f4ca1d9f9cad5877b8abf2806bbb22e0753023e4cdb12485217f0f10bf8c3e2db5431ec217fb41b012df2ed1b78

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Threading.Tasks.Dataflow.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 daf2b9b63c6d9c5fd9c908a99c99c99c
SHA1 95fdb1a936127ed72399fe459069a5c8c72b0b3c
SHA256 edc40a5b57c7784c403a7215fe6b8db0b5b8fbe484fd279a6a38f773a3fe3cb5
SHA512 4c26006eb9a6bb48960ed6c7c4e2c2f56b6cd0802e23efa7f04a6f3e78288f828e5594d470926723d40aa288b1cb0a3f267911b7a5f31f1d7339017e2fd8c550

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.IO.Compression.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 f55211958b5caea96bcfe0c9715bf4cf
SHA1 bcc190fd0c40963f9d16e6b90b20793a2f91e2c8
SHA256 26e9b6afa18ab5b485c6e145db066b61411e049072f2bdfd44a397209820f132
SHA512 13f9d0807f1943695c4ad158a14c0041bb0faa2b16b9547511ffbe2585aa93a08e4ab8f729a4969953305a9421cee73814b8b85534fcaa3ad71c42e5eab8d365

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Formats.Tar.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 e874bf1369a95d2354683907873613d8
SHA1 7cbc293e8c6fcbf68ee3ea4e549ad8a9d05e175d
SHA256 a332989c1dfd2f588d6fc9a51bbb1ccf48182520747bc18c89829f75bfb000fb
SHA512 e7b7fe36d6f810e049bc47e90662a55b4e001633e349dff36b20141d39fd1aa7426da8655fa5d90e4ca58423d7b808d698d490b3a3f4673a06406401f1ea5123

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Formats.Asn1.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 065f3733c4c40d88dd60ba4b35292df0
SHA1 1683de33ca6a862666481ef16ec77eb4da3764bc
SHA256 0083b89277a46a58dafe8741346c2d83de6c8c2be2c27535c2bb5e7fc4483f89
SHA512 5adabc6d3d17df0d49657d960ab9ae7f206586c68335e744aafca62562fde79088ff3a08de7876d824f10df955ebcf260c6f1009cefd0781d5eefb1e3f927266

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Collections.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 97aab9a9437abf0ed4bca1809146d009
SHA1 579b13ae1aa0459f81f69756091130d329f2dd19
SHA256 853aef2f29e8c3dd02c40ced1ae5c9ee606861387b93337f387782c2817e1965
SHA512 e813bc9086d1c24f4073b4ba533658cf3f533cb5fa56f4093a3faa842efd4ff36ebd9ddf557cb201a67046065806f25a912c7702f06726493cfe9e487e5c92a1

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Collections.Concurrent.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 5c651063ba9d4a0e06ee9784c38825f7
SHA1 edf6bedc71ea996915871145aad063875f43d643
SHA256 4e73ef59f40fd79cdfb2dd295326bb92828691ca678c6f85e61a6434720ff599
SHA512 e8c3a18b22089fc95f3bbaa7fb35fbed6a99d5bcd906ab36c53fe5e3767aaa8d7a00494b5cb145cf4f5b46a3a91265dfaec96d967b570678cc703ab031e5d4ae

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\coreclr.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 d870f2929cfec1824b8f5a13da4d638d
SHA1 dbb03d20e9549c12d1286562301b66fea33b6ffa
SHA256 8093ac96e74d93422a95507881113a7bbbe5297a181ef4f06c320a205058be33
SHA512 1822ffd0265c9c3e95e0f27fb7290ecc8aedacc8f62eb0183413151ef3686e6fcb9d8a25f1b6485e6cc8dc552caad76e8daf8125bba028a82d3f667015cf069d

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Security.Principal.Windows.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 4141fe8faf866b02050797ae8187ca50
SHA1 d9d1f3e68828bb5fd0cf43533dd7acbf9f823d68
SHA256 1a98adb7dea0bff7fc22c53f604f31d5ca2754e66ea324c09c2a63006750132c
SHA512 d47d3291a6ea3ad881b06ac84a53032262b9545a49df253211feb03bd85ac16dad04c31526f203b98e0f63c2a51a8ce67c4183c9bc51e3d0424ed8e671578fc7

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Net.WebClient.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 56de58a1ed0278d9a2e1a869c23328ac
SHA1 59d5ab3ad8382359736deb32f11f438577e0734a
SHA256 50bc2af7642de9a5f8d91cc83f9e3e8487e32a473f096165eb90229cb6f3ab48
SHA512 633f0213df7c86da6a757ebb42aa3af11974dadd18f065c990189c873735bca8a54675cc0ee28e3d3ba70c6f03f7111e9eb62a70ed8c32ce2324a1638e555a25

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Net.WebSockets.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 ddfe8073018266d17425a0edc4455da9
SHA1 53f3a50e890e94a2053d153ac80ef5adfba9f55e
SHA256 f2cdf14e7e04d19e06ea9280747fc11157efa459a16e39a26b1451a7819f0853
SHA512 46fb75d3f65dfa9bcded0f8d89e24fb7d6cd4b5ea6f3ceb06d72deef6927ce7a287581882597311b859a9d92ef8c68abe750b64f2d525473574980aedeeafd3c

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Net.NetworkInformation.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 2bf09bf2767c1c1d9816b5b84a8d6d4c
SHA1 abc6bf253b9e91ee9f208e723fc994f5aaf561c0
SHA256 92c6936885ad08af2c1fb75179ca48a20c03e07e5294963a509a246196edaf67
SHA512 1b2ea0bf3a5b1272d03c0a3be0a861b74083d23ba37b64f4abfde618160d612b00d9aa7a662950096162c3761b0c6f1a711ec6c1ec32a28e307dd9e0b79cf795

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Security.AccessControl.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 b3d7746779f808e1141ca4abd12c598a
SHA1 196c43a817d297aebd5b31bc0a2520a8bfa1e925
SHA256 90181b0237075a4d0e2980eb32e76fe17edd89be57def50fe99011b48fe635ac
SHA512 34c898757aaad6ac53a47564cf7b161d1863cb419d71fb32a0eac93560c01d1705f0ec662d68c8d84bbf2157f274c2e7627792c84f21b414ff919c7ea165ea27

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Runtime.Serialization.Formatters.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 76d2c67c54cdcc707ec32633fbb17ae6
SHA1 a113441711369c0459c751b0172a2dcc30489566
SHA256 16c67008a86ff555b8985f21be19d9eceedc4ed9f0419161343ca8bfc4f28aeb
SHA512 ef8dfc73d81e623151522b3c6848afae55b2424503eb21a74d5844f4e6d9c1a8b6538943f03f8ea1ad53d3cf1f9228a66f3729bba0d81910b5ad87af982d8210

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Memory.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 9addb6cd29087cb016a47734715eefa4
SHA1 4944eca41cc011c08456722ec4cfed4dc111a7ab
SHA256 f4745506375ef6746309996a21ee9dcfa12b1c91c858fe9e4b3b5e8d77ef961d
SHA512 00ee4098ca666f682ec42c6a33dc397f59a522afa0d2e8dbfaf9e4c9bdd0536f8e0d016fc08c8043a80b6aab62c0d0393a285490cb226a3169b99c8634bfbdd9

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Linq.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 84bad851b19ddb1d33809552034eab0d
SHA1 a13ebfc87345690179e8cb884596032702a12572
SHA256 87c26a57ce06cb6e229ea300708d1b0f588143c38cf0ea4bdf59377a5eafb2b1
SHA512 0681dddb3c10cc4ad3e37657e6ebd0cc4525ff352872dc6371b9cdabdb4c8b974a70cd18ab8769b3d2e551fd980de9f178be26505c7c65c3e1c96d96b11348f8

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Private.Uri.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 f7c595a22f6b726b5a4381724418e4c7
SHA1 a0e6eae4b593f1a1c4992fed2fb4dc02866ba4a2
SHA256 f9f01ccff92f1d2e777496367584bd72dd8a5f789b0f861d03e45bd3710920f9
SHA512 db4dbbd62e4cb428c8debf58b93ef94b3d309f81427c90157ad05852f3f084a9d49b74f521757ce03e76bae0924a54e9236ed8f9b7d56e7c4c5a4b78da413b68

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.IO.Compression.Native.dll

MD5 2674a6fd9d11ccc643e2fc0c9c7b29a0
SHA1 14dddffb98e9a8a99408b073ab3ddf0c2be979c3
SHA256 df248dd4be11edfd5ff87377f983384a86bce63620f6d3a1d082761ca36b9ccf
SHA512 b804f0941df013546912a780c2d107bcef773f4d8d7903c65e7dddb0773124ef99ac8ec6b0cefa0ebe6e5c6b2645b1e2cbacf593ded0a1134e259d642bfede6e

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Net.Requests.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 3a126e486aa4a849aed8f3a45d281360
SHA1 522e804cd58d65c46198a1d50a869e247f731d87
SHA256 e0f254ec92cbe4daef90904dde460776b5f650657e0f5162ced5ac77035342b2
SHA512 2f67f722d48bfd159c351e14397176c347c6a92f0d7a2982c87a280347283089f43989c15c1ea6a66088d2cf7f043f17a59ed527fc92c99ac74dc0a47f016cbc

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Net.Quic.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 5a34aa2831e172824bf3e8146811a4cc
SHA1 a0ba2cdc50206691b7edb23013d5534cdd7940a0
SHA256 28dcebaaf0adb9eb85420ae9bef8d18eca16bc2b7051c6e980c9f2f89c414979
SHA512 0877a3d8aa2e6c8c54180f7ab2092af9e981a91f41716fabd06a41c6ac9842423dbe1d32a15d5a3f4db4507a97957a73a5e8241e5615ede12d2df10fd005fbec

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Net.Primitives.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 d3836ed54d58c99e00445d8f3255af80
SHA1 a7f38524d79773e6a0248f3091d4f12aa900f355
SHA256 5c6c4b44a31210a99fccb2e5ba16d59afc11ca7aa480c87af7c36ff7bb5bef7b
SHA512 263dc31b14b7d90257cf017b07078c7cd1c3de61b002844756c866a50f3168a853f9c52145f1be555b6152ace9ceb93ff1e4dbceea7e74592136510f5a19a2e2

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.ComponentModel.TypeConverter.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 e61c9926e44be8498faa1493ab9d7bda
SHA1 8c6bcdf3e4e959ff8c79c5eacfdb1ba177b87fdb
SHA256 3e37867723b63667b7b733c472962df2039339a300642b16803f0abc30e00dca
SHA512 e9cd93c821c149bc4e4187781153dd1955539710394cf6fccd46138b5e0aff1e87900ae725d2f433a4a38d6c15e2bfcba2793d1a14b5d0fc509500cb44f44925

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Collections.Immutable.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 a58f96df369374cd70ecd756afe9c749
SHA1 138a0b7cc79212ccab6ac81173262dc3a15db6ed
SHA256 aaf2ac5d9b6eb3b2b580ff7265a6b7b173c519ade50550b160a381eb63852ed5
SHA512 0c9c9852bf27a5f751539531e550c65237cc9c683f828933c1a4a83688cfca5566ea788574546d92950e107b8e8f04856dbb8247b62166562281615004b60440

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Linq.Queryable.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 cde9600aa717c66da462fb6bb0f3ad94
SHA1 d6e9dd3218c66a89cca11666c92989bdca4e47e1
SHA256 bbc7108f69ac827af64264c9b790711e58af3f7aa323f2ff8e2a32681f0be158
SHA512 12fac7c563a899b82fcabe6f4e79d5eed77560cc840aeb482169b20214006c79fed1da4edd8c2c3fb374dbe22d344ceb52d1665abdcd565c2b0dd33c9df0aed3

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.IO.Pipes.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 e5e490fe03189e7bce144432509016e2
SHA1 7f082f8e8e9f1d7531b107631ebc655825d5b417
SHA256 8bac943d5de3795def6a3b04b23a4f659024e15b864b5763f63c0d50b43d6fbe
SHA512 3c30e8871645865b23683e41b4b3d14141665f84a6091400881df2f5e722ec7a97089788e00ae7e4a59779ae74b4fc290735aa6997e0f68b89dc0f9b06fa3cfd

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Console.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 c16fc568ee0f1f3232552c76bf7ce672
SHA1 2e6fe471efc7a9e2f9d63152f06ad607b762b226
SHA256 2c1e66e45daa464f983aa2e795d8f51ac951119c3273d084b563a0aaf980a896
SHA512 ceeea27eef37c94a068509f85c4bc288f66f2afbd3648e614bfe058412e9d7e8cc6197ed0d77228dfda6b91037f899d3e2da09d2052da8519e9eaab81b269689

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.ComponentModel.Annotations.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 05002d805453b87d7fd3a269c763855d
SHA1 94267b8426a5fd3c862fafb94c468726e42482c7
SHA256 bdc48f11fd7205da23cabf02a7ca1d35d356fffb0c06246c5dfe99f8a0ccd37f
SHA512 59a04ab8a40533bb6f5c8d7284ebbcd7be7dcfd7907dc41f8f3cd4a27521e0cb18f83e7a7ea4f14f77f68832aed2b55ffbec50d41da9289b8f5a5d69c36f56e1

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Diagnostics.Process.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 2fcd2b4cc0f4262732d563ab3df8da10
SHA1 d590e7e172dc0dc62f2767052f293517943d4a81
SHA256 a0ef1c775a49e823ad63efbdad38be484b29c8a071537993ea98a0465af7ac7d
SHA512 a33752abbd36755f2988b5b55cb5dd84ec2a90384a80fdf1ebe5431507d1b139601dcb93d8caba5c1f0186423d9e2b8bdfdb9f9f559e882b017da4a12067931d

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Diagnostics.DiagnosticSource.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 89c302ab461eb0d542f2fc6d4fccfa79
SHA1 960e593fc10203aaa6c8f4807a7f7bdb49ec748c
SHA256 f2bdbe41502961c062ec630de8b673da90dd90676a426677517921da49cb5e58
SHA512 af400b6e493bd7c3e24ec5a09e39a74e473e7d6399b9a6b84d79dad821679f23cff44a856f15c08e96c363a52019b89fdcf826a63208b4b43fa12f9365a90324

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\ucrtbase.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 b91c385da466d1a70abe7d3316ca18cd
SHA1 ac283fb51d5b0dba49c27f739dc09a918ee30694
SHA256 041f3e113ce6a0b556561a13dddd69f2a16cf587b048ba384a34a87428763b03
SHA512 89adbd075fa13486662b19c394d5286f3400850e878972f2c546532e4f5dc92f23eb02a87291ef30ec58b4775efc2ee5353d41fedf6cff45868a616497e33b79

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\clrgc.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 4f4891b544129a6e2715d331e93e35be
SHA1 e27db4ce37240de971d546da0161961a4e58f85d
SHA256 5be66a003c7fa60b4fdaf61b9a0bca53957632729ca173a555f72099639e22bb
SHA512 322fdf128992c0cc8c324d0c6fde2807297b6872f334a03bad45fa362eae1eba81e13060106cc2bce134222b4e9a238e3c215f946a8b7444d853119d958e9798

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\hostpolicy.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 b5344a7e58f1c2d20555c104d7b5c4bb
SHA1 be7b9ab3007744bc7f4c5ba5f7ee6bf275aa6560
SHA256 952f7238f00f338cd2e582c4f8ed4652f5658e96c0eb8ccff70f584c49921875
SHA512 f0fc931af8cd025baac3544827ad1c6a7801a7a7225294a4b3a0a6afc6d321f6be8b3471647c95f0feab2d6d7627f532163f2154602ef2967db8a275525f7dc3

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\coreclr.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 442096e495b4bf3b8df70bb7dafaeba0
SHA1 04c112cb1bb3d887ceab316b4878b1d7309e21b0
SHA256 733d15303499ca0c73e1c0253b624d4885601c2e55fb0114c94225f16eecdd2a
SHA512 b544e74e24bcb6c8969a35850fbf6d01e872c447a98a34d7fb9b03a88ae22df416550df938f101ce56cb2b1ab595ed4fbe5fe555017be7a2ab9ff5091b12a87c

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\clretwrc.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 bbaced666c4d4f42b3c88d38fe104362
SHA1 81c235a6fce6283d37ef85a0b78131932f913e84
SHA256 4adeb1dba646e1653c50557ead83130e96b1489770f7b76274f35b695875bd2e
SHA512 becb57ff343ce9c6e90acfc6415d3a32bba575d0ddf34aa3e84400ea6c6d86255c1fefd729a42fb753c42de0e82810f960077342d3d517c319e3681ba2da9a5c

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Security.Cryptography.X509Certificates.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 b542c92262bbbd582139bcbd00a330b9
SHA1 7e9f8a1ec91d3f3e7bc6328aaac70d3a7abdd124
SHA256 542c8317365a085fcd1b9a9ff887e4c5382429a914240542383edc476916b89a
SHA512 2ee43b14868d2443cdf963ecbd6528e66ed5f248a108533f5875905df6390676d10e896c2022cc5bf81d3855382f34156f5e34d42401443431a42984db9fb55d

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Runtime.Numerics.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 c3b7349fe3f997278e49ee2e39092e45
SHA1 f1192c18b362bc2ee41bf03111976ab9aa05c081
SHA256 e6fdf709b44860ddf9bb470ce3953db792b33b7ce3b18b82e979736d14fc076a
SHA512 025b8f229b774802ea52be87430e1b59053edbd34fa3e4cffee746276b8e31290b1d76e4fb92aa92313f1f6dba1a20f0f1c3159fba9e721a8bc47ff7dd64fbfb

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Private.Xml.Linq.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 080a86c35b3add6223109dc2dcc1a43d
SHA1 30e7a030aeec3e7e9731d0a441c53c141f4b1350
SHA256 f12ff68aa56ce051b6c28fc498e52b088270c16f3eabe0a665a4e90045d8bca4
SHA512 0c17dabc227cfff7df11c9a1e18d5cc00fcdabfac03e9e0f5510e100f4a8eef67a08e165d02c94af6f868b052ef27807cb75c8f226140ee470c0942f4c13b132

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Private.Xml.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 518a1b4f4a4c7b06d50ce343d2052ffc
SHA1 1fea298b4c06357f97d6c2b8301742ce9368b9f8
SHA256 d4c0647e2a8c7a97a7cd916410cfb7e1bd6c809c4a6d1fe7786a301708404608
SHA512 b5cfde9943f74225a98240734405391d10a000a17e7d8bee7a15f2275222e09c4f140d9ce9732ef1caf4b02f070e7ee734fddc32f8a8f0aa1dc21e3640ee8ad4

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Private.CoreLib.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 18bd861453fa9821935589139678a3c0
SHA1 2139f1c2bf127c5a9f2e88bbdadf623e126a4028
SHA256 99a69d2d90d9775711ce249a7082a180eb4ce87207ce9f8e27d4fc90184af69b
SHA512 29fc2cf1cea21d92de4b84ccb923d97bec8484f52b90b53e9ad9f6482c7bc5fb949ca38e0f24bb96fbcbf7f4d597f1272247e591f5c2668e507df7000923fded

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Net.Mail.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 6c7e6a72fa8492cea4c789473c0147cc
SHA1 05bc52e4a609476cc89c06f3c5e501402d7d72a9
SHA256 5a5cd60c3a39af59ba751890e290b86ce648b472c2b71abcdda57adc516a3a17
SHA512 679f6702cbda9d10745910ce9ba63c5404bd928660901d90d6524ce03f93f34ac4662a78c69c0e771c12a0ace517a7878c3dfd9d70b80af2115fbe403182f27b

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.IO.Compression.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 37b81b036caea1cb0a34a47325d296bc
SHA1 83a5b9f12d653cf6468db2cca9a64ab8911bfb03
SHA256 6a0a76c143ba4937d718fe53b1d2f21b52a27f0d9596f4908f17fecd3ad4efc5
SHA512 a9f21637f32c42956232cf03256d303fe00764008b2a8b3b1b4b139c6029971c8e237a35fae5473089fe489f1a93d1dbda8b78a166dda376e67aabf2ea1c8d3b

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Formats.Tar.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 74476eb5fb1cbf3e57deaa7edf386bf7
SHA1 6441b03e047520fcaa9a4d02117a8689192eddfd
SHA256 2c20d2b275e13ee22d3e51437328132e4c799e22ae9fb0855bdd93b616094305
SHA512 36bbee7494ff518a41d95f87d9e6f2f4bfdb8ba35e0b68124b69ddbaf7ad5be17b2b9b50357479dd0c4ac25d4678ad619ce864de5b28b64266966e5f1019a1aa

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Formats.Asn1.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 24c5bdc390c563cc410a088ea97c6567
SHA1 3e84927b3dd26a326b6233c6e4b230a22da6be27
SHA256 0ec0de0023704658a39dc135da988d69731579861423c2bdd76d7b5687b4a467
SHA512 b0922b3d0730523dccb48383fc79f6cea874e5712cd5ea4317ef4df4733cdfab0d716bbefe6895bbc6de10d1ae2f808e5249ae5e99989199b12b9ee82ee9ac72

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Collections.Concurrent.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 1ab7366d0e3d944ad4e988492ea66d3c
SHA1 2233310155b1b5f2fcf8c5085f71a82418a05302
SHA256 e6536b86f209df1f635315162103ab5b938a8e0149ade4daf35d08b96c44dfad
SHA512 794c56a4c02e0ceabfd45e88bcedb0bd1e3aae662c825d410119401a23275ad72e4140ff8357d8b290e0f3dc911546c37201ed5f9a0de4f829b5c223fca97c99

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Security.Cryptography.Csp.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 ed0248ee38b29e2bb5724ccf56ad6291
SHA1 ae5bf6313d176cb62098afed7b413dcf792773f2
SHA256 0720365bdb777f91371f5fe0d45f69726ca05928db48bd07361d91d254c4b0a8
SHA512 2ad9f65b55da3435d07393e8be46829062bde4ad482792ae492a3e6f5e256ffac621813f007b7ceb8191606e53a0838c018d69ba27e9ee1e4524ddb24ca7b597

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Memory.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 a25468d06b882bfeca96c9d5a770ba9c
SHA1 222401a32011d9b89f4114bacec99be9d05e800a
SHA256 ed492c9097484dfe4f9eb59dc5d5f450e171ec21f5fcce4215be6050b9d511e6
SHA512 ec645bf3591e2decf2de91ce16963dac6aad0a672a12d5ba64bfb9243d414fd1b3c703507268e538fd6c53b8ed722e4407b4ac1a1f3058e976e6645e0b49f415

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Security.Cryptography.Cng.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 83a3939c48d4b9e8fb188ff3afc979b6
SHA1 a1e9e7518de584222cd36a14e090a16747db27e0
SHA256 546c929eaf74e58cb393589f1597a8835a7c455f910b2e1eea00c28ba923a2c9
SHA512 122b23bfa03972daa66ab1a4815522dd6de08eb9e962c5921adef466648756a2e243d24b7a32f3a9688ff5bbdc0a95b60bf90136fec6b51f255cd416c31b7546

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Security.AccessControl.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 6cd14a73a16919a0fea93557bbf9f0fa
SHA1 1dcb4c1fd2853ed5ca70dca2b115da9a07cc1076
SHA256 31e5cc067b4fd49950c91705e4ce233180fb1204785bbb6515b194a25bbb292b
SHA512 2acd5493b38086ca339b6a60107583a45f234b0104a812f4ca56ae09e4697591af34757de52d26f3207318eb7def1212c00d288a9d974c6b9107ed3024bf32f9

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Runtime.Serialization.Formatters.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 c681147e23d3ccf9784db815df6931fb
SHA1 46296260ca092f18f723999b7344c3385aa7ac07
SHA256 a798c68606e2910bc8b354548a9615eeae35a245de46bd13fced427b7d5297be
SHA512 708938a56425042a23373f6dd41773998ab7c7ede827508ac30446ff7c55e7bdc0c6ce6545208ed278687b1cc6db5ab6a02274e40aba1946f55f332c1240e73a

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Runtime.Numerics.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 7e1d05745fd58d9a791fd5a8e2390782
SHA1 01c85d470ce78a3d7de9184b2656527d0a6166a3
SHA256 877d31bda20ebdfb674d2a9a6c360ad1a2d610362cf822555bf22fcec1a1ca01
SHA512 9b61c36ae22f0b2324aa596b20ad6095357cba1aca31003f73aa33b5f0d766a28b49b27cc64c4533baef7641731ee4a51accacc49ac734065f4f8db0492a3100

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Private.CoreLib.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 8448cde50fb2ae94c1db037078f9a9c3
SHA1 aaa2534bdfd6b171ee03706bb8270034d1367b18
SHA256 207716506f75954e04adc67ed03409b59fbe0dbca089fb0a20bf69f32b0de650
SHA512 c587c668be5e6db9fa7c1bb391bdc621ed820b4feee64d8db3c0655a04c428530035594502b35f60a58622eac99cf87f749553f6d2bbffc02d634867569b6166

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Formats.Asn1.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 302a368bd5895cfad94097564ffc2cda
SHA1 a70a7fc15a4425952316e7af74fb6531286aec0b
SHA256 e5f4a4cd325d827b93382f4792b9715d018361a778db52ac8ee56b817ad04231
SHA512 4e96fce16e51b7db2950d9143cfb4d1015f05df440bc0be3de70d80eff8e1ce2afc9213cdbd1c1b9267618daa85ae51869f08b16a936462bb4fe76a9733b36d6

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Console.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 5cbcf18b9619388306a529c3dd765ff5
SHA1 d8c87968a3a22a27487f3fdbf4fa5c71eb052f2d
SHA256 f3ddeaf3ed267a9efa12a483a82eb0e75a206aa6e2abd8911029415a7276ea74
SHA512 a87fc80d53eb8008aaf82196b4d2fc11a91a5ccac85e6470ff624161fcf019525e8982d65d9bf8109218d01705e4ddeb87f882e38481c0864d2ff61d0d8e1acf

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Private.Xml.Linq.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 9670f60288828df796d2faae12df54e4
SHA1 0b9d6e4640ac86824712e6254c9590098888476d
SHA256 de885e4c87d09aafd1ad5fdffecb27be6a1cb63011ff1689ac6f0712506a2474
SHA512 4c3e2fe4c10e181b617b46e79470d2a8b0d88bdab827f27c6539b56012dfa68deeb1eb584faa6cce95905d5388b2650a6d92592cbf25e3371de892924644eab3

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Private.Xml.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 e067f6c0e7623e821250296325f1de28
SHA1 546d70cf441542f0af4c6db3787ae292dec9c0cf
SHA256 9d07c69917cc44c02bab0d040a637a3962ee39081c6b8f7d3036afa60e936f99
SHA512 0ace633922c94ef32941f2744bab4b3c7d69f67abf17a7a1b0e5e111230ffaa4ae6ae5fb902cf468c8ab5304648a6e3a40921c6ad881052bc99a3898e23787c1

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Net.WebSockets.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 f2e4c288ffbb6cde1d3c6813921ef366
SHA1 d0c7348eeb8e5706dc5799b9618ab15c63070516
SHA256 854cab768cce89d119b66e50141d54fffd10ba6f5a9118171b40d9e54beae82e
SHA512 05e9d257e1a4292e28b5e273bcd31887aac6a7d3709c9e008996dbf40fd75e741e8671cf3b31aff117288c41d66c9121964915d52ed510a132b03411525d2596

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Net.NetworkInformation.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 b1e2012aa89bf3cf93cdb3a9f57e1f84
SHA1 d193e7f01e5148f73b71c61242c45bbc7d7737ed
SHA256 777437da7efb1857909bd0776bf26306d72adecc0fafd706797d273683f45a43
SHA512 fca808e5a89ac22bc67632a6b5e4124288812f3e21ee4606a91e1268a59026327aa87e212de053a184c295f10dab1e4ea5249deff6b6502f9e802969acdf38a9

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Transactions.Local.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 6621e7f50b9e9467589b2b5eae3918d9
SHA1 be8bdacdbf40576f9229cfa369c3ebc9d99400b6
SHA256 4cc1d3469f9b55fe37c8f6c2f8f1f2a1bd039d2d4cae4bb7c689d2e2a1d7b72e
SHA512 cb2eb7942aa1b9422bd05d8c15f09a20baaf7bcc116b870a0f7f8e6c810ae77a0f2a7f8f2c159ebc0f54275fe34f05400b7a9c3072cc4806ee8000e1872209f3

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Net.WebClient.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 d509aff0e5c0d2ee9796a2a2a6fd6b53
SHA1 d83d704d275ed8fb4fb0a2b8a586230dae714bab
SHA256 35b44babda3e60ac9ef5374e802c8ba4b17307a272fb85a681c26192abc9b71d
SHA512 36f1b0d8284ffdcd8b4779e2897cb07475db4be3659f88241294117aa8ea40ddce02ed9f075843e59ab643240f37fababdac791ce0f2dc655b963c5b92e67a07

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Net.Requests.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 484fbef764de304e7ea2a34b21a07392
SHA1 b4324be85ae7ef0f9df7237b7c4e34df8fde5bc8
SHA256 f95bb9501954f62aac29a9939d8a5d439f54a437631e5da5f2a35e8519eba6b9
SHA512 cef8526a0224c7fb8059802035606e2b296bfcd010684f7a483d262a00b96a147843a0ed1360f06594efcbb6c108e9cbcd353587c1706021f11b7feededc05dc

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Private.Uri.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 c12cf31dd9ae772654aa75fdd6abf8c8
SHA1 3aa7a33b069367b6df48cdb764e58ada799cb5d9
SHA256 239a1fd26435de0f00168ee8d1fa6b827f66bfeec5173d50165848ae4d33437a
SHA512 50062e255e83d4e7c8adf4bfb04200cf89d55c0f26ce736e3fad5259dad88b73fbfe8de2d94d982e588f34ea66081f491976af5e1d56c787762d33b7132d5c69

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Diagnostics.DiagnosticSource.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 f91646fa245a6fa8acaad7d8a3244c9a
SHA1 e3adb818318446023fe0861d50e9830b603eb8a0
SHA256 ca9a05a17d34e92b55395ffa13858c060281e888dce1d835a31e50edda76888d
SHA512 211a4791b464b8316205c1dfd3943e24aeaedf04577b2e49fd321a731a129fc87096d83161acb66307901e47f945b75c1fff73d6f6613a159001a3e546a72cce

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Net.Sockets.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 21e93f328e2d81bd878dc3dcc6453892
SHA1 744a58e256b6b5b14cc1bda50bcc27d50a755742
SHA256 193ad613949292a367ee54a41ea6db305d729c032ad1bb88fedc495274524f42
SHA512 f39c71dcbcda474ff2a307f27ee274728297b1db13588c1033439758102a624a5642f21dfc6453feefc76ef935747a7098feb0f2183189a0216dec08078585f1

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Net.Quic.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 bcce82be168f3c243895a87f9ccee5ae
SHA1 7573d0729956a6bdce986a81a2d7bbd98a1eca03
SHA256 1344af7e5769c5d5c7e5dd22f078b5472980fa0bd4f11afac50147dd3fa8aaca
SHA512 cf8f7e95a0c0c63374f21db5fc8fc0b417c0bec0944bda886c9d4e9b12ce85dca5f1d06a6dcb1e4cea71caa2b73f97d6a7592d3bfbe555af29c58caeb5345ed8

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Net.Mail.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 3ee6837713e5a099cc0ca2137bbb0c3c
SHA1 ea606fc28e0f9a98e091bd5ff79655a3e3721b10
SHA256 3017679cab28ff44749cbf5ade258e696a5a250e4b5dc5ca38ef79cc7293d4e0
SHA512 c19472435b5c21ab0e6c700484f2960838207ce22bc069d22ad37562c8b78b2a67f349a181b0c6c73881be18aebf5103d3e2f03970ebf2e722e1bfcd3ca5c5a4

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Linq.Queryable.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 c97016efaedecbc10b7dd972b2b9fb56
SHA1 b44669af61e72caca3ae164a5907c9e5f19ebb0f
SHA256 00a647622776903a5e1091c2782c7b26f88f12d165009d6c0236aeabb569b98b
SHA512 f87f08703d9774e8d7c9dc1e7180bcab6f01a5d77443f0c77cec876f6e33c722c911297e2bea4208b74c8885d3ebe5778caf449c8f6c953bdcb87254b2fe5975

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.IO.Compression.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 fd2f68f05b3012dbe6d0fff60cdec863
SHA1 5c43b25d69f858ac8d28d5419d08e43ebd3be27b
SHA256 d2bd97162059dceec1f38ccfc709261ecab4a77f0b283103178ddfb1dbdea297
SHA512 21bd1876728212ac678245d5f5b227d055a4854b54dcc948e9be3414efb3fffbff070a1b2bd67fbd664e453f12b384215eed2fd0ea018a42a93ae6c2f93584eb

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Diagnostics.Process.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 1989b4ef949356bd2c2ddfec74163dc0
SHA1 9e31f79a73d4535c972de71d08e53eb35c5ee36a
SHA256 6546336de98d2050ae95304b52d935480cb262f127742b6d9ababca7b9e64ce9
SHA512 5160b54ad6bfa41cfd39862004c8e98b7dfe0b4bc9bc907298fd9826c67a37ef417b47cdafa0b238fe6b841b202f2e484c19f3145d17081e4f691fc2bf257858

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Collections.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 a219961570d398b13cc5e1cbdba67184
SHA1 e3b11ce60b99d818dec17b49d0051e545b7bf26f
SHA256 2f757020036a11e29e2959d843e478f518ab8056e331419f34548a11acefe389
SHA512 f518ca4df82570a6745337be1b213c3c6a23926705b8cbd39498c2662f612c5584639c484742c01cf073c5ef92d044236792c3b4485850485627b87aa19f1bdd

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Collections.Concurrent.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 62682bcb1a858efcf7807efcad0ae198
SHA1 d7ef8cf4693bb68932ea1ecfd6c0cb500fab6553
SHA256 8d707efd4cf4bb7f5826f0dee87509d234980237809b9367f36c2815d3808b48
SHA512 70fd632390f34f7cfab1fe2b2198da024bb8b052aae393726bcc133efa00c7798c2b9748e63b72054d32b70a6863c88fc569953f68beaf2a4bdc041da7641301

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\msquic.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 852a2e900fb0757ef17f6eb7a40c2ea0
SHA1 07326657fe7093140c03ed5094247fee67ab6fcf
SHA256 3d3e6c51114c791f4034d25d904080ac9ca34c374d0380b12a5fec7bce2d44a8
SHA512 4d0423fcddde7a42ab457eb89663354d701398a3d807f2c73886ef1b5b48a1b7fe7a111f6cdac56af910eaafbca20aa7eb23a77c851bad122120d8e2e0c606a6

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Net.Primitives.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 83194c266079478b72d56b501831bcb7
SHA1 161efc6860be4ac2405f9c9a368aa407669c0647
SHA256 0df05487054d280e525a59e99cb79c33e4ee20e1dd7aa15d25c65ad199619984
SHA512 0c9ef570efb4561bc1ced2ca15331942d023d18940f20fbb497bd9ab5ad73aab817baa04e808de27ed02abd429532cd53304f8913858d4e8ee8b30e80233aca4

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Linq.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 2e4363f47a5f0c829006df6cc1b7b743
SHA1 46b3200c407f6a1a18c84f684654416165dd3e2d
SHA256 508a850b73b5dac36b2bcdd22c5d1cfaaded346e70b35ebbdbb4737c8fa4cb2e
SHA512 530be630906120d2250436f450c2b6569d64d205867dfeb620a61b96f4d947b618796968b38222811c1c404c82a0caa4ece92fa485a8a89ee6c3c84c07756eee

C:\Program Files\Java\jdk-1.8\jre\bin\jpeg.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 4dd49d6b5a8f3c07177de6ff316d500c
SHA1 28d519642d358ed0ea69983ecb4d1b249ab403d7
SHA256 c7dd61d709b3ce1ab155cfd7446a311f16b707e30cff97d8e2356a612ed805d8
SHA512 bc119c865ca10653a94251c2892b9c816f595c2add62dcba7f14d17da91b4f57943bda59c5d057d1b7d00799e1b11706aae1e3eb3ed871ec08786c3309b7ac77

C:\Program Files\Java\jdk-1.8\jre\bin\mlib_image.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 366dfee77f04e15174cbc3f3ab5e9e8e
SHA1 5e6ce89ff05806bc522af3c0d0d147b8e2e5ffe3
SHA256 ff8972fe54807e5d5f3b93647c850e218e78526d7d4a9824209a3de61e5aaea9
SHA512 3e67a922ba9625bb97c0109879aaefac51f1375838326db53b52b9891382623f841547f50f4788ea85e1cdfb8456cb9e3675d5fd6f912947eb2708bc8def5011

C:\Program Files\Java\jdk-1.8\jre\lib\ext\access-bridge-64.jar.(MJ-ZK6471058239)([email protected]).zxc

MD5 8f0269cabb7133dff09c0458b6bf09e2
SHA1 eb45888135ac1b0c7a8c17d38bd01100ad83e6e8
SHA256 529a5e8d4cd191775177fe4ac134d47720a5b7220751f5b9a16dab78eafee4b0
SHA512 bef7f60d23eb7be0826e2c463bed0322df5e72ec517ae8159bd8ae9f5b0de0d983da9437456ecdc989073d08290cf0cf602bc6544c1f4b04ea480c6e5d140af1

C:\Program Files\Java\jdk-1.8\jre\lib\ext\nashorn.jar.(MJ-ZK6471058239)([email protected]).zxc

MD5 cc9ed25e47ca1da4f059d9cee0785e3b
SHA1 a6d12c74ff90dbb87ce588dc3d2049c43bbb93fe
SHA256 6a758fcce2edd18224b997cf22b11679f5dfca1b9f0d7063021c71d327ab826e
SHA512 9d802d4f030da6438fe5a2ef7cbc258ecdeff364d0f974054c7c3a753538b6b82f5cf1abc433109e2b845aef38e9b41358138653286718b63f96f013905eedf4

C:\Program Files\Java\jre-1.8\lib\cmm\PYCC.pf.(MJ-ZK6471058239)([email protected]).zxc

MD5 97b50e8c7cc3d175c4d3facfb8aa4135
SHA1 e20800e5993baae1c2398287137e5a1b9a075e7c
SHA256 d6f7ade27c7f909ae204ff4130e30c46a85d12d215c32aee43c51d3f664c7edc
SHA512 0d898795bd48e84da6d209de3b1f5c67c237a517b42d1254475cc028fab24d7902abaa5f6a0107dc015419a22f4e5ab383bf34b1e1d173c0109729b7f320a175

C:\Program Files\Microsoft Office\root\Integration\Addons\OneDriveSetup.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 53d294d6b47a74da7742869fc853978f
SHA1 2402be7f42392e3aa22f5d54a2e61d14459f4f42
SHA256 e1ff886178d6e1c56e3017630a7abd063c4f7f203fc62a3682de5f13a2183f29
SHA512 b3316b5fdadc9de6cd71f34f136aa33c49b3d3f01476dd29dc329ffa27d31c7c261f7932771dc66d09312ef3e44847c0737819588f4c8067515840870880b788

C:\Program Files\Microsoft Office\root\Licenses16\pkeyconfig-office.xrm-ms.(MJ-ZK6471058239)([email protected]).zxc

MD5 4750df393b23da4a169557da213fc60a
SHA1 2f10c0e49c2f5758df4208d99a30d69976cf1665
SHA256 e1ea89ef49ed97c2111a9374073621b4355287ff55bdbd960385e088b4c2e971
SHA512 925f16bccefd524588d4bbd6de7dfa9bb96aebb604049bf494427227c5bd1656782766475ac4d3e687187dd36b4623c1ca5e1b8b5e666cfce71562bc33cf84e6

C:\Program Files\Microsoft Office\root\Office16\OMICAUT.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 54c84cf47b0d3b558f444ee6f8962629
SHA1 f7fc8eab351b6b960f56932c3a7121e0e3ec3c61
SHA256 bd3b111986ec9418c5ebf6d0a2b2cc81e3d7acee60516deaa3b2a25ffb356718
SHA512 f6b0a8a748e022f9eb8259e6b326de09c35fe3d87ba3ba8c756c8e96c4ff876e2b56edf54a1d779e1500895a39f6724d2615382903eb20d36f14b845a5cd4f48

C:\Program Files\Microsoft Office\root\Office16\1033\PSRCHKEY.DAT.(MJ-ZK6471058239)([email protected]).zxc

MD5 016eb21e6c475fbc713a8cf8785410c4
SHA1 bffce0a600c47711f680b138ca114a32367301c5
SHA256 68f090ae8bf84c070df06468000cc6a12f7e93d61e8687fe12a0f481e4b01ccb
SHA512 f7a356037f92e6b1ada6687c25637aa5c45a2981b813137cae0fd6c0ac41ea03f3f5935a35b7dd4dcc552e84f0effcda1169df84a3a219ade0958fc8093e25d4

C:\Program Files\Microsoft Office\root\Office16\1033\TellMeOneNote.nrr.(MJ-ZK6471058239)([email protected]).zxc

MD5 9366c03e352daa0d8bdce90100414ea4
SHA1 94f92646a7f6f33e6a8f59e4c798dbca1dfe1cb4
SHA256 438bfeaec500ee951b0f0b319876e65119a3083593dbc9d15427ff8d12779f2a
SHA512 0371fc596ba2c534f3081af9742dc665808c13893f957248cd66e7edf49f6948864b3a14aa31e44193abb5101fa210884709622a187b6902698464926ed5802d

C:\Program Files\Microsoft Office\root\Office16\1033\STSLIST.CHM.(MJ-ZK6471058239)([email protected]).zxc

MD5 2cf7db6d9916ac61d05d3fb4921b4efb
SHA1 e4054627ccc57503bbfea8ecf7b8ea59ce864836
SHA256 8c049377cc7f225c7cc39dfe1d875cf74692d0c386091aaea1a6567ce84bd8d0
SHA512 a1fd17b0017dd1e7de462f29eca66d80c9e8851db13e060c6ef25679d2575037843694a683f0d3b09526f7ac9d0a65973286858c9466215e111724d08246fc2a

C:\Program Files\Microsoft Office\root\Office16\1033\PREVIEWTEMPLATE2.POTX.(MJ-ZK6471058239)([email protected]).zxc

MD5 4aaae2b9341ef63faac9c124c24edd91
SHA1 ed9fadc1a3d682105a26cd7fc1efc8c39b5c01fd
SHA256 5c75654a528fbf9c9b15d1e5995bf6f353aa9e2520cfa73856fc2b0156041746
SHA512 aa868b5297aa42fb42579eb38ee20997b868c64d00a54cf3d4455da90770330ba709e7fc37a19833c83a11eb5ae572368bf8efc33d4ae4e00ef6b14c225337f9

C:\Program Files\Microsoft Office\root\Office16\1033\PREVIEWTEMPLATE.POTX.(MJ-ZK6471058239)([email protected]).zxc

MD5 bdb7b930e4fff081a2347f26dd1142a4
SHA1 d539221a593e03eeb60a79464e7ccbdfb1dbae2f
SHA256 8dd12a037cf08c9d453faebd85be642d203c957d5b98a6c65bcdb58c563bf7a8
SHA512 51b452417308ff1ef7ca81160a6fda62304f60018c729d05f6fd999227c6b25e724c3df48283717709c70144d224d852a97830bd702958dfeeb4b614fa537059

C:\Program Files\Microsoft Office\root\Office16\1033\PowerPointNaiveBayesCommandRanker.txt.(MJ-ZK6471058239)([email protected]).zxc

MD5 98f1832e889794b524dd249584135ea3
SHA1 de4ddd23b5b0391a94f942d51dd998011d20cfe2
SHA256 42dd4586b91dadae5b8120fc9bf80061dcfee3003b466e38670bd9e0dd41d63d
SHA512 08bbed64a718cf222152197133a00eba22ceef3c83abe8b06abfb029b6af3e58da540f0a1202e4b836272a5324b88d9acc621dcc30454699fcbe7a8f48d93995

C:\Program Files\Microsoft Office\root\Office16\1033\ONINTL.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 98ea4af504c12c7f4bce36dd3419316d
SHA1 6764abbb8703e8df11775824ca6de5d8bd761000
SHA256 d549825189cd2f9b3434414a153db0c4c30b3927d8c6d2915a2eed76a684da6c
SHA512 990305bdfddebc8ae14828fd4929bc022bc5e6939dc215abba5b754f650e81b6d6836f44200d87b8e1f9d0d17e03948d7c73dccc59fc99fed26e5beff686e61b

C:\Program Files\Microsoft Office\root\Office16\1033\ONGuide.onepkg.(MJ-ZK6471058239)([email protected]).zxc

MD5 f33082cb650d496760029214534437be
SHA1 0faf36aae78e10058d7da2afb640bd2dfd7c469c
SHA256 d33ec68d6f401ad50c8aa2c2bd011060434d4a25d11650095d93fe90063005ed
SHA512 8dcf1503d9ea3db55843dd10d079e62712f6a9e9dc34f630d5ae7c918d625b50b12b69bf9d451bfd378b7e3810b19a5992b3382c88f9feedfdf4a93db9884186

C:\Program Files\Microsoft Office\root\Office16\1033\ONENOTE.HXS.(MJ-ZK6471058239)([email protected]).zxc

MD5 8482848f0ac36eef6d8523efa71cd1c8
SHA1 23bf0fd3c9357a5224cad47753a5016acf3d0c0c
SHA256 6bd813bad0396211bcb04024209eb8e231cd7c48d0ae26e7f44831f7542bd320
SHA512 a8283e0cb45d6f04713a78355ab513730ba3d7d4151c5012795aabfb8d2daa7abbe070a3208edcc4e146ac6cc23d28a1b9212df2ce28aca7293eb402293325c2

C:\Program Files\Microsoft Office\root\Office16\1033\offsym.ttf.(MJ-ZK6471058239)([email protected]).zxc

MD5 9c4b7747e6f48d369713d885b7b1fc5c
SHA1 8982449ea753b7ea989c3526f76e4918354c3e26
SHA256 4270a5317eec1102ea632b45ff1c78f7192743dbfeda6a2b6fc4dcde0f7aaa14
SHA512 d9f5f93c664f75d953936b8f9c360d4fa7bfe52c6e853e597373bcfbd348a8b73c2ff05a7fcf47fef8aeafbf5fc7e9d96b7ef1f8a4199c41eebcebd73485ec00

C:\Program Files\Microsoft Office\root\Office16\1033\GRAPH.HXS.(MJ-ZK6471058239)([email protected]).zxc

MD5 6287393e903518afbede5520960db866
SHA1 87def1fe8a8db12d8ab816133682bc7d7bcf515d
SHA256 9a871a7bb63dc647db1b0a2af586d4c362357e87d59b7aacbe68fc7682bd9d66
SHA512 b52a0cc08a64d9661f0d7d238980f2b197c27da7dc5f0e360aff6c8c333a6e1879b38dc67ee8a4242dc2bc6e127f5b01e9d375683e12b248546b8a5ba43a8f15

C:\Program Files\Microsoft Office\root\Office16\1033\ExcelNaiveBayesCommandRanker.txt.(MJ-ZK6471058239)([email protected]).zxc

MD5 a6866f2d1b733d9f0ec2a74fe8c77458
SHA1 e4c1903293dc8a4dd06a26a6e6a05476c113d3f6
SHA256 cc1419bf1f8263dc89e540dfd98ccdacfc62e87dd427e861eadb074e785c1e6a
SHA512 429b27f346a87b96ef9fff8460cbe4d97c79c8e3dc4f389175cea8812bef63c798367f56bed6681c47b638f3fa74d7e238d15dbe859171cc4dba32341a37d5e9

C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\TURABIAN.XSL.(MJ-ZK6471058239)([email protected]).zxc

MD5 4a8e20219d3ebac933efd704d8602de3
SHA1 816e8ec473aae0c00b0b85df29e10c64d98cf5cb
SHA256 da166c1b6da4d6ee3a234335160edf90bfbf344839d4d4093c507c4775e1b2ac
SHA512 f1da78b7b3378df486f2a1724a19e0c724f61421f4e949b0dd0aab0ec4a8b00e88e1b70674dd2b61b080a075de40fb5073d25a5848e57bf0c290b0b8d808a857

C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\tracedefinition130.xml.(MJ-ZK6471058239)([email protected]).zxc

MD5 34f0a648fb33bd0e39535cbf71b46b26
SHA1 695bb5d1d9159da799608d3b2441c8b79696b999
SHA256 1354161fb009b99d95ab9a145daf2e5ec85e1dd7f7308945b8e5f5ffc8bd89db
SHA512 b5a065c9d9880caa38a6b23ba2c38bc23bf56a6e894c21da186807a7598d0d7cb303ede30c7dc80a76309252b1527febaaeec04c26daac76cc6fd3124914b6d5

C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\PowerPivotExcelClientAddIn.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 f97372eff794c832835ba381f31434b5
SHA1 378e73079cc12233cc4fd477637a02e9346606ef
SHA256 1eb7fd4e17a00b467f65a96fa7a706c152e0c42c29b826f1c171d59b9e9f9e33
SHA512 85a501c8bfeffb4a352c9360fdb4bcd6369a0ad669096f045cd2cac330591713ab11db813698e7a5d572d82a309f9196a10eac9aba913e1ea01e65099ed65bfd

C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\APASixthEditionOfficeOnline.xsl.(MJ-ZK6471058239)([email protected]).zxc

MD5 6b7b7b9b1fb0a5efc8cea857e652d2de
SHA1 9a271479282a53f8db3c4d3ae3975e75b5f05c0a
SHA256 208c8ead7b66d61145e98cc1abf5e79399e018c4a0dad8d2ce0a0c56574e9242
SHA512 228889963bb54f6f4b252768dfff6d3e07784a6e1b29b221b787b36dd4946e0a1dc1d3027c7196e9c2fd53ae23bcad0b52032efd44d41fde7bbfe8349ab6b25f

C:\Program Files\Microsoft Office\root\Office16\WordInterProviderRanker.bin.(MJ-ZK6471058239)([email protected]).zxc

MD5 8957c087f7bde2bc454f36a239e693c8
SHA1 c4a034fc9097a9435557e65239afc1cc084a78cd
SHA256 d9420bc8a8bb278e94ad37f6bf43558c9899178bef0786f53e89eb9fbdd91dea
SHA512 ecf70e7fcc3d463a5b2a9d4979b963a35ac08b55fab4b2c7262385bfd56e01dc99d67e9d7bcdd6e780a91a7c8a72f707ed8c68014f6cee0e40022a992e885ecf

C:\Program Files\Microsoft Office\root\Office16\WebView2Loader.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 249122fbb85960864509fb81691907ca
SHA1 58535520343d5d5e7a20a00174e3a830426e71b3
SHA256 b38a4b4b036d6b36835c517dbf282b2d115a12d2f68c9f90b48b3e8f2298eeab
SHA512 b626f3c20af1ec80b18a7ba555a686f1cc819aef5413ed8fd23cda0806771d333989338c19c087cdf17e7f3a98b8652951e259fd07c52efb53fe6116c40f3418

C:\Program Files\Microsoft Office\root\Office16\VISSHE.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 14f535bfc796a960e11995a152719c52
SHA1 802eeee8f945ed45390a9eeb7d77bb0819143c86
SHA256 b984c08a7b4d4218f128667fcf575f6f4f9b5d8221b6c52200fe0078c802e71a
SHA512 2420b2a82c0d7a888f07b373813bf3b9553eb4fe2973583869fc44ca576dbe54533fe6394f5415078829ce9387c4a183823c1cde28d9e2fff6e1ca0e3ace6aac

C:\Program Files\Microsoft Office\root\Office16\VCCORLIB140_APP.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 a34ca54781b5e63a9b35aaf720ed6dfc
SHA1 b699ea2fb1cfd1c9f484433fc72b09f8b3bd6870
SHA256 50d2fc1d9f9a39c72a7cb9095dc3f42559da26a7db47192a9da4db258be7b821
SHA512 eee44e8b3190c7dbed62faf25b436a288c4c87897c6a4589c9021366b1b0890e949c348d5bdd3360565a0536b0287adec86c811ae640f6983dcd38af08520363

C:\Program Files\Microsoft Office\root\Office16\vccorlib140.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 4953331dc28c38ff3b095355ed7d91de
SHA1 40fbee9f1ca492c3c3e7d26c20ea52b216fffcee
SHA256 f7040832eba16c222b012ab117055a1beae575af242bbe6b52a526c5f58642b5
SHA512 266ff316da73c1bbc2036a7c6f44be9a75a84c100134cbf42e4fc0f193b1ca8b3466e2909478d8e4f70d2efe683eeb9de6ae7ea6436bfe5263c82543be4b044b

C:\Program Files\Microsoft Office\root\Office16\PPSLAX.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 396c4fd0781cfda857e8aab60af3794e
SHA1 de313ba4bf091ef0c671473f3400be4cc99fa159
SHA256 bdfe83e59d62e5ab811cf5ac0f9d7aeae68c5cdc2270d4db1f152e1d613ba966
SHA512 f19598d564f60b6ccd0c67458c39f7d2f34756a49c2d3c45ca1db3cb97f85bed89d84590951e02409649195ed887c3fa034bb5981f6d46dd2ee2a458d856b19e

C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.Reporting.Common.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 40350918cb53a71cfde37ee5a3f08fc2
SHA1 3278afe5270a619a80a34f6a9bd02409ff7125de
SHA256 81e091a4e2f83bfc99ba90cc06b116913f2f183fc294f1e3514860f5b7605bd9
SHA512 652cbc0ac0ccb9d83f60a3875d497002639c6054ac04bec2e86d4bbef7d3a0af5b8f59c64389efed6e5ffcd27a1ab66c0f97cc08d52931ba78f7ef6b153c2151

C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\VISUALIZATIONGRAPHICS.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 328064bb34d89250a6e9643e1345da7b
SHA1 d14c42e7e3046a1cf36a560cc2b3b3c28551aaec
SHA256 966a31d79a72034702cc95d7a809c9b4b81ebfedcf3d540130a4f39af91f021d
SHA512 4da9baf864a93cd5a81970b90a91d252aba33ae7a5edb58a9cd9d244568f42febcc0dfef19609a9c67f38e7a38df8f95c71cbd957bba858a0921445f4d443364

C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\System.Web.Mvc.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 dcf1fbb9f8b69b7ea87584dcc0963ad5
SHA1 5196adef2adb0ee9a4084843fd50d07f6968c6b7
SHA256 c2d02f24143d53c1e97752f471351248c3c4e9ee160372c00346a42d65648244
SHA512 63c81101dcf172f1533f7066b7a4ea722f25f1ebe170a3ec2699739d5c19c8a2ddab3c26a709b91afcf04fda3b0a4c16928cc182bcad829f3fded955aa0d8b48

C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\EXCELPLUGINCORE.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 970a876abc4986151c0f3b1b4dbf9041
SHA1 49640644385cce63a22bec618a73b4b8b20e4241
SHA256 1d8c195ceb650034c67564e6c53a8c52fa0f2377830f451ca96f28865f76d930
SHA512 8314b4cee074cee5b26de9dadee836712c17be955551a0012342326422f8cfe506052d7e1132adebcd813a112c2aff2a4eca93b82ebe1f255d9a9b7e5e8162d6

C:\Program Files\Microsoft Office\root\Office16\MSOSREC.EXE.(MJ-ZK6471058239)([email protected]).zxc

MD5 b2e0b937a37e4f767597e22e47de31a8
SHA1 9a02b9548c949cc9007542fb164e7f4ce766d5eb
SHA256 977ef1c8ef185f01bcff0a76cfb1c407deb699c8a39f81a7fcb5a746c6fa2888
SHA512 688a4842c6a6a8c67962c9b83331863e031e01fa26d834f03daf5960b45da85c1e1f73b6ce205694b3c4dc428e6088a284aed0e1999d8eda44d0650097f61070

C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 16d9cabe09ef1b5e3658c8f76a7f6895
SHA1 39933d651b2139e3410a3a9557e5fb68449649c1
SHA256 09bcaea03d6c5db7a3eeda7352eacf4135259d930adf94b6eb3b53b4dae474bf
SHA512 4d376ba0517a24b2c04236bf0dd0b00d98d3a6214b6dafa4b2b4afe50acf7bfd08eb4d107e496748edca9c6382c051ea3c76400e471d858a27012d3dc89a7769

C:\Program Files\Microsoft Office\root\Office16\msix.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 a988a73d8e2951ac7340ef638bac1a7e
SHA1 125db5f046e0444760756d478810b57391b2b0e4
SHA256 c4afc819edc8b76f5f88e86a1a44fd07ffc640e6c30f6abcc7d5ed47bd2ea7db
SHA512 4dda816c23c5d25888c606f7a0827eabe7213840f2e9e85a2e1b81674b4ccfdaccd3c70c5cfdd8b2ca450143f5ef7c2226fa4d66a662fc2c8167ed62ac598273

C:\Program Files\Microsoft Office\root\Office16\WordCombinedFloatieModel.bin.(MJ-ZK6471058239)([email protected]).zxc

MD5 4d6ca9532e4e8a4970972fa7616f0be0
SHA1 63446f891356931b82e037c034668120374414fa
SHA256 325e1f49672c7d3ac2c921f2611934c3800a7c5b43290844af4feed056cd48fd
SHA512 ee52a27b8b5ae86f537b6a5a8f41ced0fb550e476bacae8ece067b3bbaa0245412fe5c4d8990b158812e11a01c3bd60bad324cf66609feb4221f6355a626f162

C:\Program Files\Microsoft Office\root\Office16\Wordcnvr.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 41d48baa745e068919a99c17047a87f4
SHA1 b27703545c0fd4720d21d015b17f72ea700abd5d
SHA256 d1ea7226f607cadf8bf24f3efab8aa04100d7f81393589df89583524531a4154
SHA512 5baf790341bb4f4f23c275a3b612635ddcc50f167b2042fb323d2e59594d993f523e2388c6b15ffd515b1a88ab5d2e45f08f650284dd077f1aff172ca69824f7

C:\Program Files\Microsoft Office\root\Office16\URLREDIR.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 8fda6a30f457bcdf80dcdd0446cc97a3
SHA1 7622324b66d85e922f2879d102d69b89750cbfe1
SHA256 475f56d4e1022a070ef8467ff08e9211b6a45ef7a411df59e09e653b6ebc6665
SHA512 698764cdd1e197dc5294e255df9aefdebfd63ec242b5e0f8dba5249cd3402a7a21c69acbe9d87288f333b3df1c2d3bea9ae83eec4f49cf6051006a04d94c1cf1

C:\Program Files\Microsoft Office\root\Office16\upe.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 b7c36ead4c90b1cd38657d2de4dbb867
SHA1 deec5b3bef896fa71a52db32bbab14abdc38275f
SHA256 3d977b17ec52e2ab5b41b7d2bb270b5d0ec0aea6434c4a29dd8d25018a668a0b
SHA512 e86808e1d75dacf5c08f4cbd60a122d0eb8cf77d7d95a4ec6ea6ad2028b57d59ce4477b28ce362c53a514c6346b808bdee5940d0a3b1fc63dda6e8be8b3b36ae

C:\Program Files\Microsoft Office\root\Office16\UCRTBASE.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 2c0ff5a8d0bdfa83b9bdb26e33302251
SHA1 be25db2447c2ec24def689c39c0d5c1e606c700c
SHA256 f172180405193315cde1d16041a6f8328555e085b0c88c38282cd0cd054e43ac
SHA512 e2f2ede7fe709e0251de146118df718d98ca79d274412d33db83a5ea7d17f110ea7568a71c6952c4279b042ead7169e3c9f8f714fd1f5f9ebcd08aba32ce103b

C:\Program Files\Microsoft Office\root\Office16\Tec.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 0cf90631890fef6b035f74a7767f6e78
SHA1 f76b83d3052fda8f6402faec6dca502478b60004
SHA256 bf59561e2f152f0b0ca477b007eebf87e4f8bb7ddb025fa2585dabc4df9ebbfd
SHA512 f5b118f3b8e464753f3684a6d31753ded64dc447d3c02bf6a15adedc61f7c3090ef388f3de002e299b03ea2d5b0fdf8c3637b296f072234eeb87ac15e4a59194

C:\Program Files\Microsoft Office\root\Office16\SignalRClient.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 af567397f5d0e6682719fb21d76ea20b
SHA1 c1a96d743607bc9e939540173ee8c4b5e4dcf41b
SHA256 1082cf85bed77c243011833fb273fcb292eb241a2706905f2fcb410bc96197af
SHA512 d3b9ce4af444a74cfed0f6ed712e756a1ec9937fe752c0a96f19348b7aecd9fac635722e96a632f2b0fb26573399bb2430a613de4e4ef0dae421bf7e2b74fbaa

C:\Program Files\Microsoft Office\root\Office16\SAEXT.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 f96e0f2b3472da97e8d606c9ae73c982
SHA1 d372b9bc2a5364bcd5bd94983d2dd2d5e88ab894
SHA256 fc149b5f39f796222da0f7c4ddd490f08f5b953775b20a12cc25fcd0e546998b
SHA512 3822c8b3bbc66357dd69f0822d63ec8ba1e3543db2c40df07ef36ec2078fe7e61b7fdd6cc562b67dc42443638d6665c77818e0139d38578252c010bdb7a962f9

C:\Program Files\Microsoft Office\root\Office16\PowerPointInterProviderRanker.bin.(MJ-ZK6471058239)([email protected]).zxc

MD5 1502fdad3862990f597a9d9612dbb732
SHA1 ba585e9de470c69d3cd30d3bda528bdf868e8ee4
SHA256 471f46a18d54c8d4db6ba19fc583c9ec5ce5515267c400eb41c7b8020f4972ad
SHA512 2cb7a7bd1fb1c1400f7d9a886ca8bf5fbcbc40815ed440ccbb08a34ea355b1be70c442c361c5a38ae2c9f8c5509b3b168a68606aa7a36b9cce6613f53596f741

C:\Program Files\Microsoft Office\root\Office16\PowerPointCombinedFloatieModel.bin.(MJ-ZK6471058239)([email protected]).zxc

MD5 2c2b198c47a7f1bdc710479b9343d56d
SHA1 f9ddf30a355a863973d81caacffd5e11f1ccdd71
SHA256 695eda904156ca7ad2fad865ee91d6fa093f5caa24ffbfa76b6321f63d74a6a4
SHA512 eaa8625a88ef556289642d0e9978adbe7fd394298d6e6b30b32e338438105c5e1c10140446203ea8160c9ffd023796d1c2e1c28139ad7825afd092dad62bab4e

C:\Program Files\Microsoft Office\root\Office16\pkeyconfig-office.xrm-ms.(MJ-ZK6471058239)([email protected]).zxc

MD5 c42fa38da5e1e19f9fb567f1ec105b98
SHA1 917828ae391d4d2e0da970439be102466e79a470
SHA256 63836acb611a7e3cb965c37d5a2ce1b16a4110518c3061f2b639455227b5545d
SHA512 411dd53760a058588fdb4c6b6f4a04047ceb779635fb9222c23336db836b2f09d30ccc38009813514d208dc7778991bf6880d5503b2c03bff3fb0e2fc6a1fa89

C:\Program Files\Microsoft Office\root\Office16\PerfBoost.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 3d976933d0f487a4e53847e87da6456c
SHA1 7e44805d5992d226a3e46c6658a099bcf892b878
SHA256 638b7c21c3879335f06af3241f691c20e9c0c51fa3b8c1680e5d2e669c2731c6
SHA512 4422e0a76c9611e6d0061ef64cd972c8c68197b79bf11669263754d633eb27122bf74773923c8da1b2d0cf531fe8322c7a08de0c722966481f9fca549ea7fff3

C:\Program Files\Microsoft Office\root\Office16\OUTLFLTR.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 0db9425af9cc263d7ee9d5a22b1e4a00
SHA1 5a2153311a12641d4b5d6168f6526f44235b7569
SHA256 a588f0afe430301f8e30502557bb95db2c8620c55161c2aa3fbd203d71e97ca5
SHA512 ecf5f930ea9ea6e1643fbb0da83368de833c5077f1545ec92281fc812c160e3c0961a274c2da5600b198221b3d9da7fd4b3a67a87ca1a996381bcf73d365fe89

C:\Program Files\Microsoft Office\root\Office16\OSFUI.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 7e5c4c84b7fde0cc015bcd504ff84089
SHA1 2293c62831cf1944a89dd2f1d7e728819f1983a2
SHA256 3507663c8f6709da046713755a8db1a328f5a70514a7329071c621eb5f81f597
SHA512 c0ad3b53b2150340e4c097f8e5d7f14c8cfb5ff76c869b6e4a37c17ebad5da7dd338eb210a761ee6220f08df474d61b486b02ceb3b4263107ff33738590b61e9

C:\Program Files\Microsoft Office\root\Office16\OSFSHARED.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 7040b5f424483c93a20d15f2ff10ffcc
SHA1 b6beef96b9357abe1ae24699908114a3f88b83f7
SHA256 725015c5e2c3c93e356f942cd2f1d8607a8c8ee26de2860537f55cc64aaf1ab5
SHA512 a78b05a0b8ab2baa35cdbe6bf5a9c994dc112f471f047b9f9fce008b9452e1e04dda83b82522d186d30dac5bc3300ccfc2e05d295f61c576bba022fcc8566e37

C:\Program Files\Microsoft Office\root\Office16\ORGCHART.EXE.(MJ-ZK6471058239)([email protected]).zxc

MD5 289034e5062ad366b71a06a3cf06dd1e
SHA1 dddcf8e695beb97e2ae352d5d5072d539030bb25
SHA256 ef117eb4a9e30ab5204b2a737e5e0b164cffe524d8faecf40bba50ca436cb852
SHA512 e08c697db7950046af96e2a0d863fd9076c29514eaa4cc2e22405211ac82cc5662ff0fc990c81bc82411469fc9cace1cc3616fa5f3aed52403796b6284be5e62

C:\Program Files\Microsoft Office\root\Office16\ONPPTAddin.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 c4d167659a9f3f7d7933eb4667e00d05
SHA1 b1674825ce53ff8c400883645dd61fe528ff2f82
SHA256 6f1cc01047e581daed027172e52f814d10f035516152e03267feeec3da48178b
SHA512 25f9e5bfdf3ed7fcfafead010b8f3e2b91c52be2507ca754abc67f93244dc03913375c197b5ae9dd22db9140040fd976c450a75f467889987c7cc60e72af365f

C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE.(MJ-ZK6471058239)([email protected]).zxc

MD5 9442c9c4eb4adf4d303563fb28171473
SHA1 b82900b0f7b64082a12ff5d0431f91cd4ef937e1
SHA256 b8f9191d2f51fd7210365a48acf7fc079179a14fbc9acbc2ff49f80da836582c
SHA512 bf5f84c5b5ed48d059d5fd3354097a4d1ab093566a25c6f58bcd1884fc8608796c21714dae32253b92e9088c4c265f33c62949ba7811a983e49f8765290b81f8

C:\Program Files\Microsoft Office\root\Office16\ONBttnWD.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 74b71a4466c093c636413e31886df8bd
SHA1 a3934077955e4a1f7c7a7fdb222fd56fb2e21af9
SHA256 321eeaf5eb3d8e97261e05d7591d4839ab22d2bcee8bbca1008e0ecf82c8652b
SHA512 5222b392b2a3b9695b2417998e2b3d610e40a90494348acdc7b0a091c5442d9e16410154cc1c6de3a9110020fc3ca811d111b71c73394f62edd61ff67e7fd829

C:\Program Files\Microsoft Office\root\Office16\ONBttnPPT.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 483bb241e9c672bf5f41c121e0ccd5ea
SHA1 42950488a89a04e21fc44d9b37f61194572e101e
SHA256 a70f65bfb7e7f3a5f01fd050dc8c7f21ae09c9afde904bec8380109cf4d3079e
SHA512 ce7259fc636c43e2e1572a2d043bab230ed67666bcb486ec18273a9bcf6e431919f20faebe4ea731119b7a0cbf9fcf69817c523f00714b3e8b35e70f4bdb044a

C:\Program Files\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 bc5b4c380e231e27455950096ae511bb
SHA1 ff237e6d2748d173ca1094b8101e1206bd25a8a6
SHA256 751ff9b0cd8095cc68bd9e231e1c784c3c9b563740d0bce05826006911301046
SHA512 cc11e789e27f8bad822c265f7b0dc7368c24a12a739dabb5e917e30f0be3cfb83f2f0dc460a04341021c3540ed052ab4e0cd0b4db22965db2c1eeec38b77ba0b

C:\Program Files\Microsoft Office\root\Office16\OMRAUT.DLL

MD5 87cc949f8e93bf221ea75526a738f6e3
SHA1 151db4e8edb87e7286e6cddabc09dcd1685e8979
SHA256 50b3597a3ec56cf5480d758e6a77f3ccee3d4436909194d7077ae2032560f2ba
SHA512 bc999e37b28b6fc6647c2195fee46f9f95930902a8de7786e7f8db3aae915e17df8db6d3604c4cada6892da9e38e649a794f17bdff4878bc09f34c61870fd351

C:\Program Files\Microsoft Office\root\Office16\msproof7.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 6f898556b4ba563c62e1def3e92e7792
SHA1 4ffdce77fa105d5bfd3f78514a404486ecbbfb74
SHA256 5adc7eafec3b159a2314d14912e0c3fe9d674cbe642c63e1390ca586b427d194
SHA512 e5ad345aecb4a3359a4b8cc05b604bc2e6c7f70b2efab792b181e7b12091bc721c9a996a93924a745ac75fd44804609098d94a23a927c08122c4946bb012049a

C:\Program Files\Microsoft Office\root\Office16\MSPPT.OLB.(MJ-ZK6471058239)([email protected]).zxc

MD5 55a8e3f2a62f8a3f52a2f8a32f3a6d37
SHA1 7f87866c6d797df50bfb5603b111abc853e1f4fa
SHA256 a071107e60870a9bc64f7a2f6075773fd8e3c6ba6f5a9b251f09408d2bf457a2
SHA512 c609d43beb10ffe195b4eca3db7f7912c71e3d27630a2a569b371ece6eb40a19b4820ddbf84a2270909c51e2f3beda3edf43ea7fe84ef72a8f20849e04390a20

C:\Program Files\Microsoft Office\root\Office16\MSOCR.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 542c4c6e06e1ae1bf569c3a83e7b499a
SHA1 834f3c8f7f7ebd631943f8fd631361ff8248bb72
SHA256 2b244d49d535f43f2098bc0aae26f4fb2a7eb455919ad9c3298ccde7f21f20c6
SHA512 7a600c5023a4ca068e63a0105b5544c76b8776e5c97b852c1d359d1e252030955534eeadffb0d2417c02e6cf4bfd095aefbc244f0d2bb8cd944b2d8f2c1a9527

C:\Program Files\Microsoft Office\root\Office16\msoasb.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 d8fa14ded01e11fb868e804638a10222
SHA1 1483d6ef07f640f057199abca6b0e73a2f9d463b
SHA256 7a5563163225c7d0245a8ef5d750be19deab640030ac3ab9fe7ab9c9cea282af
SHA512 5663786066029bdbb6fcbd2e7c22688b38cbb778fa69116690a4b48fd2f82aae7af0ce81fc851f4cabd7c308ca41491ad082710eddc03f5a8edfe5f1f8ebffb6

C:\Program Files\Microsoft Office\root\Office16\MSOARIA.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 619e1121a704d6d3b64333e3ce93c385
SHA1 c098735eda3aa38d04710cd31dcd0cf04b1396a0
SHA256 bfdff0cb4673c320ab13cbca32b2f023a6e84d641a6b32b80644a5a92a716e4e
SHA512 1b75b32a570d721b934798a744ac546a4652fd89ed85cd1b3c105a31bd2b82559172d3577aee45fffce652da11767a3aad437e84f6a820525963546b6e200feb

C:\Program Files\Microsoft Office\root\Office16\msoadfsb.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 9191dba87c229971eb2e549d82b1c458
SHA1 57f5cf3bf3dc95c42979149d14c2296ba62d3f1f
SHA256 5813e34b74401e2370ba04843bded50f312113da42a31f6d5016db2cf34fb784
SHA512 75eddb4770754b742cf9db77eca202e47650e94d37b62c976a197f429a4c6201977fc44d406e360f9959b189b1eec1ad8ad28b210847943c30b422d0528cf788

C:\Program Files\Microsoft Office\root\Office16\MML2OMML.XSL.(MJ-ZK6471058239)([email protected]).zxc

MD5 382ee96e51fd4a31e1cc3dfd7d5b9c65
SHA1 dfa1c94c20d0e113f833fb84618e61033a1fefaa
SHA256 d1a08698f8bce575f9990ca09f0c81b02f9fa093d2dff00c62b9c2f207e4ae3c
SHA512 bad691a146127fd3ecf910fe0767677fd4c75177fda63daa1a57ad1ebf5b11190786b20efced4b1aa1ae0eb291f17c8a6e729c2eb0ce0fe628b273e968aed2b9

C:\Program Files\Microsoft Office\root\Office16\mip_upe_sdk.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 b864ea4c40266a8f52e392ca5dd5f2ac
SHA1 b7315ba22ba7b1fff6be9fa84b406e7fbe1977eb
SHA256 4de24136a5b9c35c4d86ebe7aafe2ebb3deb921072d385bc72db5bec185dc3a1
SHA512 b1299e4ddb0fffe911053b05b03e97690096c25435a85316e0961273ca4dc9732d1d66a02d7df49cd2a0d196956f71e40418e593c0f7ef77e50f187dde7f4eab

C:\Program Files\Microsoft Office\root\Office16\mip_telemetry.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 5a40ab0bd146e4e888e9bab52872778c
SHA1 004e93570c26998bc5cfa9c17715ba87caa85a74
SHA256 1f7521f45f4f2f8c150bf80c6654b0376f3f26004493c699f3372078d57a5873
SHA512 7f439506e9b4801e9be08766674a40ffd1cc0cacbd563d229f5317d801fdb4d3c0e51413d1e2a4af931fbec0fadda2c1fd14563d279699fce23d3389457650a6

C:\Program Files\Microsoft Office\root\Office16\mip_core.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 0a4309e3f47cf0678dee7384d0516ab0
SHA1 97ad518a399a505eb5238f38e255238e25d4933b
SHA256 6f5b017895cbd727e9e4ad2b1116d86556c023f1e57784d68e193c8917f02578
SHA512 62c51de1aba29f9d10ca30f7937bb6d2fc93ef7359f6444b2c2afaa5ed5599f7cae5b68254f2e32e8affeeaf9547b789141880a4ec6960aa9180274b702753d5

C:\Program Files\Microsoft Office\root\Office16\mip_clienttelemetry.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 e66eb19fb89f6dbbe9ea6f770709619b
SHA1 43d3265abcf9507d8d6ec3179a8a38f014245417
SHA256 3408ed6ba3d576c94cc443647248bd7314cba464639e793007dd831cccb2ee0e
SHA512 1cd95d82bb7e5547ac55d7f65a2f0b29bf5ed3a6e1ce718dbe2a74fc744e40ea9d7a0e8749baa0b98a555fec755a58afab32ce985f965a55928354732449816e

C:\Program Files\Microsoft Office\root\Office16\Microsoft.Office.PolicyTips.dll

MD5 46dc1698de849bcbd8004c5134a61481
SHA1 1a2b45a59bf3e0ab8066ab0a6bc75190a06ea69f
SHA256 e0c595f2541b6165fc8f92faf7b6788b723bacbd2b9fceef05d91edbd8cd2946
SHA512 151e30b358a99e6ac8fee05b1f4d0603d5c98a2b1a5fb951cc1f29746b8669ef207cb04d17f642e408d31a54cd3d574a7498106387f96ef62c59c0f0f7771807

C:\Program Files\Microsoft Office\root\Office16\mce.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 7f1ab72f1ad67c48bd23e2571db095c5
SHA1 198cdf6b039fd96eab118d9e0e33993f33c1b92d
SHA256 1fddbd1dd382cb05ba46b93a98a4293f60539e3a0ebb9ec2216074618a911433
SHA512 a7087a7c5c04fb2ed8082668dc5302954a5102ffdc6d283fcf6b95b7f409678d2dd5175521d5d522364d4a3ebfca4bb4611357b2c3f1a3d5c26ae90b8eae78ca

C:\Program Files\Microsoft Office\root\Office16\lpklegal.txt.(MJ-ZK6471058239)([email protected]).zxc

MD5 9ca30521e90dad16da8e09c4f7899ba5
SHA1 47b71ac443903ed3cab4948ddac964d5a397f0d9
SHA256 73207fd31447edd389135284f2af4a177330131ba338954ad93d5b992f0442dd
SHA512 b5aa7c03f9efee687980a8f31524114fec69482d147a3fee90747bc165de8fa51860ece32637a6b315cae74abfdda32d950454a32cf838c06c4f07fdf4f0d3f4

C:\Program Files\Microsoft Office\root\Office16\IVY.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 c75e956fa3496266b99857e34fd207ac
SHA1 ced6c2bc7bc98df7ec8a2b43ff7100e485fa0717
SHA256 80ad21963154047093a8b59c58743d9a0f6892c5fe948b7b7a20f30795287f6c
SHA512 8a961c787f609428dcf1d5bda7a1e245da886b9e95057021e6c1b5075af2df1a85fea4c157ed2c46d4059d9b63c28c3adb6d349a08dd6b302900d4cd8fa684c4

C:\Program Files\Microsoft Office\root\Office16\Interceptor.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 03636036a2a5592c8cbb49d5bcaeca93
SHA1 de9891f3e064e9602e561b831911c2c69326efc3
SHA256 9c4953ad9449161bfe62178da7f77af6d6e9d940b067016bf5628ee99a80a87d
SHA512 c8a562cb51991b4420690a365cfea953b573854e6db1e1639878a88fd9093245b043d2a3f7fc532e875799ff9a2ea41abdd8064484c125a479e7e3e05160b35c

C:\Program Files\Microsoft Office\root\Office16\GKWord.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 9be177a3b5e8db2cbda684c2fc052d52
SHA1 6e08ba39fef80856f14c91138f378031a968aedc
SHA256 023e9ebf23816ec36f9b7fc4b0d1dd29ac517ea799d25acb3ef4e4c38008541c
SHA512 02edaab68115042aa3d759029b0c2cfbe8a1865a20a456a61a90f5f6145ea678bdd2a5ce9680b6da622e09684550aff8b170bb7c8084c718b230e790387fe32b

C:\Program Files\Microsoft Office\root\Office16\FilterModule.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 23c136f2f817afd9c7aa8caa7f557fab
SHA1 703109c21097c11e4acfa45fe10c21e16ef3f963
SHA256 18e96de6b13534bdf4c016e07adeefe4dcb48e66e511415c3ececf49fc9058cf
SHA512 12ec007f53537fa82c0786e159c9ed1595c67e27f8f8ab1492c4ddc8d4d6d6f9270c73202768132724cef11e5fade1b453c25faad162bfb919e66617fd5cae20

C:\Program Files\Microsoft Office\root\Office16\DBGHELP.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 a35d4fb7d34836cc5cbd963e7ade802a
SHA1 7a19aaf93a7585abccdd48688bd7adc99cbc6006
SHA256 68649eb9eba55eb85a0c635a1f3c98279917c252457048a8a9dba2f26f42e4f6
SHA512 5ee6ee8b1f7a7e83e953698a32d0256786d6a470b091ceefbac6086a51596e0ef50a97430bd5d0aa64162178729f10182ce10be235459d1979b98791795ae5a4

C:\Program Files\Microsoft Office\root\Office16\DBGCORE.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 4ebbd1f3d0da65661107c445ccd0d9f8
SHA1 e1dc7839d7b4c9787e76046ac5f8c6a5ee2801d3
SHA256 8ad9a949884654fbc29d98efc2ee01b1faf8cc8a564400e3c782c071db0162db
SHA512 3552b204805ead4cfa8385ad38131cb20b948427e4b98c3592294fd69464cf6821da229671f3653a92064df868db80e9d484e0e2a36fb02d6e980a07819c8f57

C:\Program Files\Microsoft Office\root\Office16\cpprestsdk.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 c5ce3b928ce47e4bed4dde78dc16dece
SHA1 3309d0ef2505d522b76608d38f08f4cbdd40f4c1
SHA256 0f608047f4e646a938617c61ce37185adc58458127b9c3de0db119d2e01b1966
SHA512 1eb57e5816b98d8502cbe5d11344d2694f6f5d74d29b79cbaf1bac3fbaa32cf2a82ef3fa759898422fb00ab84ef7df194a724a39c13c551388a601171161453a

C:\Program Files\Microsoft Office\root\Office16\ONBttnOL.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 1901fdd6400e54fb51feff88a3aab9cb
SHA1 bfb26af6d352874b3b088945a968a78cc23d18b2
SHA256 c929172e2a60c32655767be34013652defe1cf7593b5e1ae5a0033b0acee2ecd
SHA512 3a4caac97e030a5e370b5183919ed8287279a91cb6af79825889f03d17c3a81359dff5b6664f242c4c262adb52ce40782532d6f3ab9757e977a8f353d73b04aa

C:\Program Files\Microsoft Office\root\Office16\AUDIOSEARCHSAPIFE.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 bdbc0dd191b42f35a70edc80e10c8604
SHA1 924f5eedadca7b0cc3dd21f5bcebe18882ef0ee3
SHA256 e2587f61c72c051d3f03d57297f0d233f2b05921f1a0082d4113caf4aaf218a0
SHA512 d90f8dfa361400ee510db9beb63782ca1005791d31b57c89e8481323dc0bbf1c8323c4149a23f02c9142353f7fb7b5337c6b2fa687068cb9fb533760d1392174

C:\Program Files\Microsoft Office\root\Office15\pidgenx.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 5a05a52ece7707d1e4475c9594ac8a96
SHA1 f1db34142d9aa1911a0a01c33a1b50887db852f7
SHA256 f5b116ee29e60a323ed9e1fd56dd2bfb36efb643308419e348492e1c313d4748
SHA512 918a232eb138e45f7bc2b02fd2b5e327e3373ed3dd3fc8c1adaa201268f08756c2145f3ec82f033f423702c8af0ef141ab8c9cafaeb90849f75a0120089bfc97

C:\Program Files\Java\jre-1.8\bin\awt.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 ef9d5b2300f6146813ea8871e554537d
SHA1 32cfa9e659829d2560f9e19cd757d16fb5110340
SHA256 e475f7c1d4bb4bceccd5b88ba362b4e016407eac48f2074a130dc235bfd5249d
SHA512 7cda6187d97687fde5b4fdb27ae52ba95bf29605b35c2ea7880022c650ac0decec96e698dc3a8f69781929fbb6acbc71066227679f44abc45ab19dc74fe02531

C:\Program Files\Java\jdk-1.8\lib\jconsole.jar.(MJ-ZK6471058239)([email protected]).zxc

MD5 91683a032240cee7d6cb5729cf585805
SHA1 cf0e7d48928691791a72eb9ebd8e69ba4f1dfccb
SHA256 e2f0e4584a487de806f0762b0769902665d92b1af480bbda3db495e3a48c2039
SHA512 48f5038140956307d62a1a757c8b2c72ecbc0eafc8820576d57003901f99721bc96e317a4daecb1f6ef61092ff3e7e45841f102250e51e341210cc92fe8714d3

C:\Program Files\Java\jdk-1.8\legal\javafx\webkit.md.(MJ-ZK6471058239)([email protected]).zxc

MD5 aeb4d714692ba92ec45a893d9ac6999c
SHA1 45f7ff72e079f633a2edd6722e27886a0b2a20a2
SHA256 42605e1af7ff7ab60383f3e903ab403c80a4582a5db9a1d6bca84bcd11eb272b
SHA512 1c2ebdd416cc25bff0a3ac7f368b34cd320854b7b17210d9b9000716d0dc9ff6061c2c15fe68be7e61958c840b38c4f3a23b48eefbef15222b5a38c1ff5e0f9a

C:\Program Files\Java\jdk-1.8\jre\lib\security\public_suffix_list.dat.(MJ-ZK6471058239)([email protected]).zxc

MD5 bf0463afbf8e2dd5c1da05a01da15c4e
SHA1 ce646d843e26efe6d526a2cd04a24103795f6f33
SHA256 fdcaa632799856ce6eff749b68542e6ef4ee3ba3ad618e33e0eb09a1da08e249
SHA512 704c5af3895ed8956a8784a1d5fb935aef161f0ead4910629ae548f620240d5111dbfdb3261bfc15486aefdc6f40a8b500c428c01d38150b061a953c3b9a8854

C:\Program Files\Java\jdk-1.8\jre\lib\fonts\LucidaTypewriterRegular.ttf.(MJ-ZK6471058239)([email protected]).zxc

MD5 ce08faac84b884f8454c2ecea2f6cb2f
SHA1 b6258186c3e41e697c76b9259400e6b678d3c980
SHA256 ba36a2d57002bfffa5025e87afd98ec63e23dfd69245f4d2310963b0f81dcf9e
SHA512 ad79819ae48a0c35871bcbb4927a8f0348a1693b01c3544e57d05bd66a4d85d43fe0d4bb570abdb51a7329aee10e4d2b53f6e1b569399f12ce377c369b58747f

C:\Program Files\Java\jdk-1.8\jre\lib\fonts\LucidaTypewriterBold.ttf.(MJ-ZK6471058239)([email protected]).zxc

MD5 0ac7838c9c963caa8d566b9e81aa5fd7
SHA1 c7fcf435b6255d7634e1131d25a06ac9bc3e0b18
SHA256 c34a6a66c949529a856b3e11d003c543004dbf74060627048cb9541f999e5853
SHA512 a11ceb8e5d46b9d6d94edfffe6067fbb720dbf7890bd4709d228068399b97be1dfba1aaaf331b0674c23b1e5c2be5aff4af8800fe4474ac94a401a0fd60ceb75

C:\Program Files\Java\jdk-1.8\jre\lib\ext\sunpkcs11.jar.(MJ-ZK6471058239)([email protected]).zxc

MD5 9011825a8444ecb69cae9dbadbc8b51b
SHA1 1aa86a6b04e39a6926d5b20a1bcd8f4663a1fb9c
SHA256 dc25f5a514c1a4fde6b9502d003f636e00f5a70526ac0e8e0088d62e6c519bb8
SHA512 584e59b0327d5723eb48e2b274a73c331c30013dc453bc7c9dd19d35e87ef6d2f16f410aba446642ec8752d10cdeb67cd7cf488895c9c21e3d9418840410b710

C:\Program Files\Java\jdk-1.8\jre\lib\ext\sunjce_provider.jar.(MJ-ZK6471058239)([email protected]).zxc

MD5 473f79bef08811def74659270c5b975a
SHA1 5fad567ecb3f96f1661f5e2d3286df3ce69d0624
SHA256 ff705fbe1c1daa66ec7f126b146b67397d1b80e18261ba7db8c7b03ed0c9fe93
SHA512 df5069901d218eaaa5f10e483a5af160dc50ceee4b956993aab6230eff7998497a2c9286bfd0a272c82cc6e1b7b83d61860b2bce249de66b3d9e9e6e91df7c8b

C:\Program Files\Java\jdk-1.8\jre\legal\javafx\webkit.md.(MJ-ZK6471058239)([email protected]).zxc

MD5 aec7c1e2177f7a6c12d31394d31e487b
SHA1 dfa75d4284908b535fd77b324b4060da63fdc413
SHA256 4d3aee0fa84ed216965f81531599fe597cc97a7dbfecd0aed5aedb9be757ab23
SHA512 9eaa90598210d268dd233c0bbf02a943e7d713fd302db730b739bdfe7e50dbd64e9dc14dd03153b16f42c5ca90422cf22ca72299b0389dc978a5fa73944a090b

C:\Program Files\Java\jdk-1.8\jre\bin\plugin2\npjp2.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 b18446d33b15dcd4cd93c0caa8b2b357
SHA1 5b0781f6207ab72f8e74e54f249ba9563cb699a7
SHA256 5c381a632a4780bbc066333024eea74dc52aa3137e21b0de84880ef5adf95b20
SHA512 7da0e89c006614336e85ea94b38d4bbe7e69aa4e23327f1f601e0e9c7f65761f9bd4e837b691ee8870b86de9b55ca2a9341d99ad868b174f6104b4d2711cf7e8

C:\Program Files\Java\jdk-1.8\jre\bin\ucrtbase.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 3500cc28061eea199bd9745bbf92b3ed
SHA1 a87b3e8e81af2a1421fa8025d7af3222c8e3b795
SHA256 13ac539f29ab720d17d9d7e4ff826521854b2e74c30e6870ef177ff16f1e6993
SHA512 a48192624fe37335335e358b6b712867d1782e794d49c2cb29b04247328893cf249290afe899ccf6ddb1c52608c492d7ad5d86d736516cbbfd84d9cca2f167a9

C:\Program Files\Java\jdk-1.8\jre\bin\jp2ssv.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 154fc6aa2a842972a0c45335b3e42429
SHA1 70b7d866dc9c51cd7ef5809952adde0500136025
SHA256 90b5b00476cd4c1ef271f760cfed1e7243d866f64e9e2d82d708a83ca19229d9
SHA512 724cc85410e4b02653295265c2f1b2651f3a70ed74b1bc0b3276c52faf6339b9b96c0f89670fcc79155d9ff4d39abdcfc204600d3e2ec96fcc00ccb2d380ee03

C:\Program Files\Java\jdk-1.8\jre\bin\jp2iexp.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 bbd5685f3accbe851981f129a5e5aef0
SHA1 5a8c24d76b4d65f3fc83e5ffd1d5b4395b70d021
SHA256 b3d3ef2941ee5163fd6f12fbd0761a584b93046e9e123e493b4a9cef1b92370a
SHA512 fa48ec9656f9186b0718077065165f6f2b1ffcd232f46fb76fadb0912f575bceea6c139c5a9cc4b5b6470252b2ccedac130f2af91455a8e4685601e24a121cc8

C:\Program Files\Microsoft Office\root\Office16\OFFSYMXL.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 d02eabbc28ef6c95f1ec723413cce02d
SHA1 7f4cb5eb0d9e6a5a3a8e037522eec68b3d2729a4
SHA256 c062294b50f2887c71c0de180f895b461923e63f61b72fa810419f84e7fb7357
SHA512 ae4e392824d15328d5c416292baf38906a38a7118f1488bb8007f2f9b461bf37d063f8741940a5344cc2ddda33aaa50e0a3578e251ff2b941c16c3607d2412c4

C:\Program Files\Microsoft Office\root\Office16\OFFSYM.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 6452b3e068cd8f9bacb9dc298b2936e3
SHA1 7fb94ccc27c87cc18f3549cc17ad3aa5d534be8d
SHA256 bf25580bf3c33c02634c13ec6588521017f688315446af3fd3d96d05c5210236
SHA512 8e4eb9c473c9a1d9cf13eced2cf3344ec8edfe4830317941cf2cd65ed639cd55380e941ceb4e28f212487d04a53d050de9eac58665f2a6926e05d62d72941832

C:\Program Files\Microsoft Office\root\Office16\ODBCTRAC.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 1321b06dd7397aaff53371781c14e28c
SHA1 0ad80c7d57b149c27b341282ad98ab0fd54cde3c
SHA256 15a2dcf3fe70e70e7fbfe5136090053d6290306c60bf5fae73c3f46ef673c260
SHA512 32e4ae3c58f344c31a6af71b9ba064b8ffcf54a407fd147566df7ab89f32d7890c542ee3dd66137b257dc7921561b59b543839b08db6c2f9e565dfd5be1e74c7

C:\Program Files\Microsoft Office\root\Office16\ODBC32.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 6b04e85a84ee061ff8e2ead6bf71cc9a
SHA1 f9a0a9cc7eb5c6bef653ee3f6551c4a8518f7ab7
SHA256 40c5274e3440694995798f1f1c9488d2f8143310d6b32349835ef3b244f87277
SHA512 9ecee36aef241dd629ab2fdd1a2dd354420f98e6ed72712c184f6ede41d6347ea3c6f5c82382e3527e06efad3dd1855c72afa76eef6b2de4a8af8c66e67741f7

C:\Program Files\Microsoft Office\root\Office16\OCSCLIENTWIN32.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 dd635ae5fb4c35599fd91d3298baf62c
SHA1 91a57a4b846d31157e86f40612dc86388c31c09b
SHA256 c875380925a86a87f7f861bc2750e50091889fc5e6098d65eba64c89a7a47909
SHA512 22aef5b1e053a676bb68f7f6b29e087e1955cfd928c7057dc8d7e7a274efcb145d17d22f32849a1695e2a58f843128d74b7d3551b0f9883db8b29118ed010afc

C:\Program Files\Microsoft Office\root\Office16\OARTODF.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 cffdfb48cb5248c2aba37d6422326861
SHA1 68bef12621b54eb8975117c4c36224b8db6913fb
SHA256 9e6bee84b3472f4cb2e1e27c5fc0a9c85c6f84e1b5600ec5a5d3066df9cb901d
SHA512 a0e762267cfa0131f7a1558c730caf553ab653b41e719815a06e5489aafb8f12e5683cfc7991cf5a27daecbe54059ad0e818c23696cbf7f0ae0ee62f9bf5ea2c

C:\Program Files\Microsoft Office\root\Office16\MSZIP.DIC.(MJ-ZK6471058239)([email protected]).zxc

MD5 231b8299fb86f40468e40d7c885d065e
SHA1 cb23fecbb1265e399b4e136328a9735cfcc6635a
SHA256 86dcfda8c75e156c99d2b820d8fd601b417968d3a253c60f8940e8af2bd638ca
SHA512 8bae06ace892c9ea3f99d71cf7f7d6c9a87d1ba176b0e70243ceb3ae676012348ba5d3cf1338b9d3dfa57ad549a6946fb1554c9bd98cafb1e5ddce06e1db8496

C:\Program Files\Microsoft Office\root\Office16\MSWORD.OLB.(MJ-ZK6471058239)([email protected]).zxc

MD5 5912ea34dfb32724553901330138c863
SHA1 9b9e411fa5f29d44a33ef1cd4c767b3b84300f63
SHA256 dfe00f7f1e62c775eb66d9c24bc44936ec100cdaa53995a098c62df65e40d963
SHA512 8b6681aa20a329a3ff5af66fec425c42e6f1229267631b568c27c59db91ac1a2858f5c4786a77bddc2dbb39a13cacca8b7224e44964b92978fef616dd99e0b3b

C:\Program Files\Microsoft Office\root\Office16\msvcr120.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 0075b541ab6cdff875d0162c69b8757e
SHA1 5e75c79312e0d6668f3182bbf1d3f9ce83bb5c4c
SHA256 bf169d3848f7a2b9918fc2da6b827935974f02cfb4856c0fb4a6df570157875a
SHA512 6448abd0f8ae9c18122cb3aa6bd44572a7eab2f40621bd47e4e691387b6a180ad8cea30936ba76dc17fb2f41c35d73f015bc56d40e8fa05afd1a76dc18552053

C:\Program Files\Microsoft Office\root\Office16\MSVCP140_APP.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 5118a4f40f6ad2c4cb00d9a18447d6be
SHA1 af14cecc2530cc69c78db2aa3400aa6b1d1ab956
SHA256 3f58e325f4d41b5de384ec54c50aa2f34fb69d7600450f02ecbcd1c83e56f9ea
SHA512 685e855788c7b40d9ddc6053af0a3f5a4b67ed6b07656d513ef0f1e79443588466b3c537d48da1c2ff4e24433806f3abafbc5766e8fdc38447587967e223e14b

C:\Program Files\Microsoft Office\root\Office16\msvcp140.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 ce074394aab15619b88b0f3f4f64875c
SHA1 9c4f154fb1319aa4c6a854f910a7986ef6ba755d
SHA256 6c0ac5b83228b32c4e810fd19c6afa4f3718488f3d60f0759856c36f64b1635f
SHA512 37aac467ecdc83456bd38fbc317243dfb779e294d28ead2dc7ec16c14e9ba5f3c08392f9e0cf8b69838ef94899241c76fafbcedb1fb64822de3c841579a77aaa

C:\Program Files\Microsoft Office\root\Office16\MSOSVG.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 f7c28ac08c0749cc327286809b33a433
SHA1 f5589d22792b420a58f1942527758672bf64034d
SHA256 f3850b5356d21a29d4dbf5b0b605e298576127075a1237536bce8d7bacacd0a8
SHA512 a764469eac3cd024425f8824180adc152fa22f51e36fb4abd15b9b99775e482068725ca17f5f0260e80e912964e0a52c8939f824cc15ca18e33179581d5942fd

C:\Program Files\Microsoft Office\root\Office16\OFFSYMSL.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 687b7219aa4999a289b3e4a51f094ad1
SHA1 f8af78ab3885ef7e9359f6a972d79fb07c4b28f0
SHA256 6876c6f7a1b799532de516b4aedd6b27004cd5a9628ea293fb97205c8045f6be
SHA512 3d789f04d8a3bbe98f944692b079d67c8d431a2149b4de6018e65a3927adcc7d688ee74c03954093c793a7bf578f8e0c942e6370fb0de1a9355f3cdb3f082006

C:\Program Files\Microsoft Office\root\Office16\OFFSYMSB.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 ab063e1467429ae45bdc1f415f5f588f
SHA1 57dba881f317332c16702487191be3268ee6b70b
SHA256 c721edb4bb65751afc16f0ef404662bf5f15d9230770dc20be5499f8bac07ca1
SHA512 de77dd4502387aa00262b209c108551d0e75b156730e43c97d575009786f088219559eab15b9d8f3c930872f3b80941c2a2e4e316631a0a719103b21ad303558

C:\Program Files\Microsoft Office\root\Office16\OFFSYMB.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 5342f0fe9216d0c201e24fb439d0f9cd
SHA1 4700d0b26f6dda750037a59120b0709eeaa015d5
SHA256 8f3c0b4e11144b1d1a5147728f33b22f2fc337b444fdb45f1f536e0d2db7ff58
SHA512 28c4b96c6acaa755d0f03a636e88674b9f2fececf8c46a86ae77bfebefd7a00501b11cb3691bbe6aa15bca3c54a26361ae2721925416c4560a63245467fe493e

C:\Program Files\Microsoft Office\root\Office16\msvcp120.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 e7942f199fd0ca84f14211528671ad9d
SHA1 43bd44336468f7adf24a411360a27c23e49533c9
SHA256 c1dc066d623cb399b36de873aa61df040d61a8e61852ef91b5f506580d5ef7e9
SHA512 c3637b6af3532009d9e251a4b06869926da18a1fa5f8db242e7f9d8a32cfa6ff6f1033bafa0e09f460eff4d377b8a30ab1c51399072fab49388f6a022156179f

C:\Program Files\Microsoft Office\root\Office16\MSQRY32.EXE.(MJ-ZK6471058239)([email protected]).zxc

MD5 abc83adb1aaa468318822a75be57580d
SHA1 4f8c990f9d87601f410e24e2f1b58d7491721424
SHA256 12731bb8a93cda07699a30b3ed98e51f552bc609573d1b12c4666096d0f3e73a
SHA512 21e362b16544000928fc99de3c41af287d801badcb23964e7fd31171438a643b7144b7342359e01d95ca096c30c08a008552d07ee29ca08af36e488da4aa430b

C:\Program Files\Microsoft Office\root\Office16\mscss7fr.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 ee1283a00f498bc9a7f44bff922017cd
SHA1 9569da3a58cd0a325405233c28bf98e55780eb51
SHA256 9eb13664c5754da36ca68ad09f5798fb2c9da7c6fe57b0a36b2743412f4f66c1
SHA512 0a54573e2eb7acca4092c5113339ed115c170696a2aee4fae47a1d328fbe84ee0d86afb702dc86b8d0abb65589fef12f3e069a99dc1bbf6f01412374547e556c

C:\Program Files\Microsoft Office\root\Office16\mscss7es.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 39db5e802fc0f48f6cb6040afc13e573
SHA1 6284da96732f1d63aac5f3ad58f1502c85f82043
SHA256 c60c3f1ca04f140f901132b537313cf71950e1b286f4d75e1692c54d96bbbfb3
SHA512 fe4b177bde773b828283e5f98459029cfe9eaa87e4ac2cc7416bb190e6736a12922d7193e91d8e7bf0516af00878085d513b735be3c7bb2ca229ff2b263c2436

C:\Program Files\Microsoft Office\root\Office16\misc.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 c0fcf9e839d31e2bda61c7e4e074b528
SHA1 14a3a06c9ca278e2a06a55c19fbfcc78182caa35
SHA256 09af41b5f8980f8a7875e520d41cb42b04a24625692bca2405113ea71d393576
SHA512 eb611ba61df1b057b22a9b9aae76f2a5f954b93a1eef5ae66ea03ec03dd7c707303810c640edd920a7356c527cbc2015cae28473eea1f27a41702cc32e6f417f

C:\Program Files\Microsoft Office\root\Office16\JitV.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 c29311c8df8b2696bcddbaf016a018b6
SHA1 d7cd0356c654aced107b908dc80fd57209357f80
SHA256 f1e4cc10dfd0212f351bd1ff1a7be2b4e65ab18e85110a0a07e0764b64d42e1c
SHA512 2d1ec18a7cd7bfcd6ef4ec0e3da13daf24173a98a9c6d4b8d83a48133d20848c6f183daa062a6b3aecedbb9a977dfe1f20169ba22c06c4992075650481811b3c

C:\Program Files\Microsoft Office\root\Office16\IEContentService.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 dc259e81865faa764c1a137d3606d559
SHA1 bcd77ae45ef77ad75cf86328a1f27ad95e3ef0b2
SHA256 3e5a0a25ac7a2c5858eadf9f8306ff5d6352cbdc948322a9780ad65dca434f0b
SHA512 cb68ae3da325352a4c29297d8c054fcd2a3fbe94920ded2681d87b2c04abab4d95cd0696714daf3c500e7c62f1bbfba2e8c1a05ab62fefd625be698712995bb2

C:\Program Files\Microsoft Office\root\Office16\IEAWSDC.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 440c15cc1ce1f389b5ec045872f106eb
SHA1 3ba6e6c5e39ee6e30a0db229bcc69fd2932331f6
SHA256 56165dbe27dd32535b088f5deded074155357a44f1daefab8a40504fd52aa58f
SHA512 38b7d0e1aff24a92d62b068c1c43a246a30435e0068c482f7ce7f6daf85be809c97697602f7f75a1d85ee3864c3ec99e11c3d808546ef6ee7054b4dfcbac4dfc

C:\Program Files\Microsoft Office\root\Office16\GKPowerPoint.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 911c6021aeaa56b2ec9ad4d43b8b6134
SHA1 541dee8449dbaba2882acf58db27a283870e1b02
SHA256 2f9315031a81b8ea280937264386e492b0c7d14d76dee3261ea52ae333a8ac18
SHA512 739a34d424dc238491748921e467899d9be3163b22c35007aa99b9d19d81866809084bff0bea95764af41fe1b9f3c132585627c0656a46a6ef332a19f22cbabe

C:\Program Files\Microsoft Office\root\Office16\ExcelTellMeOnnxModel.bin.(MJ-ZK6471058239)([email protected]).zxc

MD5 cc3bbad7a327dc14f1a2be21939e9409
SHA1 63240e05c967699d1ac5e160f54d8c55a6f39c1c
SHA256 b87bae6f50a109b851d8ec2b59e5cacbc888e7671a13d36b1a7853df2014ff9d
SHA512 4ec9af3f1d23c24f1f4b2e5f80e335a8520a5a0079c8503d6effb4a09fd1b64b7dacbd6dd9c49b4a47645077c65c822d077f33c09292adf8089c04b906a50c6a

C:\Program Files\Microsoft Office\root\Office16\ExcelInterProviderRanker.bin.(MJ-ZK6471058239)([email protected]).zxc

MD5 07e4aa0903b89554d09f2adf4fc55eed
SHA1 6075f4590ba346281cca113646b7a1dcb191ef8c
SHA256 1433e83f7caaddc0f673ba0da4b31df1b9347257809ffca3084e6b9f15a268d6
SHA512 0d2643674645ac8ca59c4ad4396a7570a50f78962aab3104851319ecfbf266f1610e1583c0a011fb910711bdf7bfe0f1f24b025c8fcaf140c4564ab5b2ab7749

C:\Program Files\Microsoft Office\root\Office16\ExcelFloatieXLEditTextModel.bin.(MJ-ZK6471058239)([email protected]).zxc

MD5 dce325bcbbc98ab45e164ee8998b4e67
SHA1 4b8790ece5c955b533ffbbe4015b069b265c2d50
SHA256 1a0d280fcc56157f9d4180d754a7cfb46f63c28713e29f1dddd48070dcc920cc
SHA512 9c62232fe5cb96f8da8b174ab69f0415f30b6f36528a51192dc443cda832b20a7177efcc14e21dedfacce886a2170dc16013447df432510061e8c383daca8523

C:\Program Files\Microsoft Office\root\Office16\ExcelCtxUICellModel.bin.(MJ-ZK6471058239)([email protected]).zxc

MD5 c4f8613b210c69889f027fc9ba21b194
SHA1 1b7817e8443252ed9a6cdf2b24b5dce38730e3df
SHA256 7d068dc6fd82b8248d8ce6ad2f43042fff6c421eca7a9dd15e49264bb509ced3
SHA512 598fda5e772c8b207d597de27c6b9c4ff42ee03768badfd91bcdce482e7db60059f1f1775e6a538de107374d867837592b2abe50bbe8631decb7caab9a5b903c

C:\Program Files\Microsoft Office\root\Office16\EntityPicker.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 0ff78c5c17f88778d96778a96024f8ef
SHA1 041657af634f3cdf1a9c0eaabe34b6d330ff7533
SHA256 840b93f623602fb59e1ae30817ca4b25afc2000be4a4d1229539f7c4e4d0cb4c
SHA512 14725edcfd962a5d9e58f41596355e8b9d415bc8b10bcaa0d035f0105e75b275712b1f3d780f36925a8b497f0ea1ae7c0ed061454a2a5f706e8d613aa6d3bcf7

C:\Program Files\Microsoft Office\root\Office16\concrt140.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 19a6efb72bae84c34003be31ce305e27
SHA1 4aecf35013f23000ce77775cd97eea2bdc5741c4
SHA256 e7fe2f27bcfa72b3b50892e3f324c2542afbd26748731d217f7b549698238244
SHA512 d78adc051b6ecec435231a6976b6cedbd3992af8238b1a8b2d318d6b59cab6e37281a2c71e4e86c34a965bfca3dbc523c56c276b7550ab53098ae8f2a47e81da

C:\Program Files\Microsoft Office\root\Office16\AUDIOSEARCHMAIN.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 3a1e78e673b6df2ed87adb9ca1f85f86
SHA1 448395b51b56535f029ee9027e433d1b485e9e36
SHA256 bf45ac1b7659c41e8e08df9fe151e652be088227cca11448b1427e2afaa82aa7
SHA512 bdf57e47bb2e2608e2bbac39e347ad549e4e58499d09e88a4e9ea8e7d87cffba4e69c0537579d1e8a457c89a272842c0f2db3254886793cdfcbf230b004e80a9

C:\Program Files\Microsoft Office\root\Office16\mscss7en.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 49e24864f27fc4346a5fd2a77c1b14c8
SHA1 51e69876cb249135e6bb8d616b00a403e2ce08dd
SHA256 ad3b653b5854bd660c9ec2924b3704ce1db8dd23c0f1ccce6c347658182b61c4
SHA512 68d318dd80c62d19c1f08c9e49b26c1dd37bdb6a97f8b614b4a174c7b0a1f70947b52e41d441a10fcb1bae4372c6ce066cc6bd1814bc133433ed04a97f6537c4

C:\Program Files\Microsoft Office\root\Office16\ExcelCtxUICellLayoutModel.bin.(MJ-ZK6471058239)([email protected]).zxc

MD5 069e28e9e87ebbaedcea1d34615ebe54
SHA1 c9742ab9fa6a35d1d768ec583a6349b3abf37a17
SHA256 70d94c66eed2603d3f3607054727dfb49260a18fbd4a428373351c65c90f1e45
SHA512 77ab9abedeeef36468a0c458bf16c826690c15c7132a58cb26c49517e6c5d079afff560d1c3012b72f07d08e3a99b5cbfe9b3a516787f2deefa6493adc2ba055

C:\Program Files\Microsoft Office\root\Office16\ExcelCombinedFloatieModel.bin.(MJ-ZK6471058239)([email protected]).zxc

MD5 bfb7506f4f8f5c3d9c827517397641af
SHA1 a64f0126178095bfbc8e45f0dc4b22de03fe97cd
SHA256 be9e14deb06e998709d0433a532f1cfa92d20bb2cd8e429da364948b28c25a48
SHA512 23fc63b20e89598184e83eba140cb33fa940b2578d7c2cdbd96f97ce57b458446bab6d8c0d5f714b52927e4e2cac8833668886842765f5b509cae4d9295038b9

C:\Program Files\Microsoft Office\root\Office16\CSS7DATA000C.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 388aef90240bcde24c4c4a75243e368d
SHA1 3e9be2a273c9ea7ee8f637d7b431a828167d6ec5
SHA256 4af5e8037cf793a5c521daf0ebd50bf548ae1702cd71873847dc27c41e1aa989
SHA512 09ce38548a7cd0249e82968b2ec09fae5829700f882795c48e259c2811250796a29e404b03adfc18d8e3b2f335a6ba23eeec5a525a449a2139bcd2a0ffe62121

C:\Program Files\Microsoft Office\root\Office16\CSS7DATA000A.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 52c48520857d889f9a6eb6ab895cc2e5
SHA1 134497e7091c2a1c78d748b5bfae39a4bfe41584
SHA256 2db6d0524a9207be20bd0409bf48311d2b6921cdcfa4fd32cb7e2afbd2feb86b
SHA512 15fd8e04d97cc2c89b4ea67dd69651711058aa4025735bf9f86a20e1982157aef8fa6e4c501a89076467141a29b30d5213b06e91129c2aa22efa537f2fd69847

C:\Program Files\Microsoft Office\root\Office16\CSS7DATA0009.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 5b9113c793c7a50cddb2ad713d24f479
SHA1 04c73bfc28da9f435f8d0fbcac507dd1ebc2aa90
SHA256 a1c7ea32bce8fde3e3d17cfde1789da225b5bbfde75c80e06468c354287dba88
SHA512 08e872f4abd39feee1b2b3452c3b87d6d98193a7cbb1fb0134259ef63bedd2c94dc9cba0f7ad041e15decdec31d565362012a1255a497ee77bea1b3ae725d14d

C:\Program Files\Microsoft Office\root\Office16\ChakraCore.Debugger.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 dc19e2d7582afce41d6c0f077b2a9495
SHA1 1fc9b36cd771f9268d0a88bf3529684c32360584
SHA256 1cb1ec60493b9a45d3ea68a423a8f84d4be25c402badc8a7e7e02728fc3edf78
SHA512 2dae41ed3df4a285852c571a08444826b222e996eeedb18ea59d745d02a8da8be01614c7545cce7dae05a8d5800d6b40cd26fe4e8e527834597718b56dcba845

C:\Program Files\Microsoft Office\root\Office15\pkeyconfig-office.xrm-ms.(MJ-ZK6471058239)([email protected]).zxc

MD5 2b3c9eeb690c96dcb6d387be59a5d7a9
SHA1 b7d65e46fdb7639ac6077db1becd7be19edee26f
SHA256 0b69550c9503667d78d59122d4af48588b57589525b94e234eadaa724a03571c
SHA512 4ce2541aecb198010f5fb8599f970a7dc37562b6e1299367d9be96d51709ad5f418cf5bc0d725c25927c41ee5945c090de11ec4aeff819e834cfe09e6f49b968

C:\Program Files\Java\jdk-1.8\jre\bin\gstreamer-lite.dll

MD5 c32634bea9cb640ddc9fbe016224fbaa
SHA1 787da06c31d9f52fa5498faed395b3893da163dd
SHA256 0cb3bee554cbf2e943a9b23823add052b3a05525f2b19a0cde5d9ceb15bbd3e9
SHA512 28883400b481713a9049e7fd9a4f45b40b4d2e60340c1319ba4643b0e23b337bf3fc741666a2c139b62d80cc143b4292b25580a8e1f262943187ea72af9b66cf

C:\Program Files\Java\jdk-1.8\jre\bin\fontmanager.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 09bb417ed4079ec83c34ab2855e146c9
SHA1 d15d68f989f80478a6251180969da483406a9d4f
SHA256 69ac241326fee21352a642a126ed4443e318ffd04b9b4c86af73b2e5151668a9
SHA512 06a87d3171a68e7e40555c6599d847c855315a0934fc0f68f0bbb84cb48239531e46e82a968a0dbf18622b2657586bc08c879c367d510b216bd1ec0b73e46b9c

C:\Program Files\Microsoft Office\root\Licenses16\pkeyconfig-office-client15.xrm-ms.(MJ-ZK6471058239)([email protected]).zxc

MD5 07d313c9768c327b6c929c90a765df7f
SHA1 42bf26c10317691572908310cfea296aea624b03
SHA256 73aec2b56b5754b45d66e2d9fd39bdc9497a11d8279691a01bc0ab93d9ae2084
SHA512 cac619d9c4f3035c42725b7bcc0f6290c3725b4e792bfdc409bf4d22836cb652986b560861a1e39f3853f0fb43e27c21ea75b4879fa1eed933012705f1fa9cc3

C:\Program Files\Microsoft Office\root\Integration\C2RManifest.shared.Office.x-none.msi.16.x-none.xml.(MJ-ZK6471058239)([email protected]).zxc

MD5 5c241af25df544acf958994e1a82223e
SHA1 06ac7c956cd3b05d1718ef05737b6891d96b811c
SHA256 e0d76da59703d3f4f8aa3041b4f5d36f6549085d7e9c1b419ed95f8f96227d40
SHA512 8a58141278b1b343719cfb7bd2ffcfb6d8c5cb7fdefb99f2105e23d9534f80eeaf76f8fa289400fd8d92af285b71248007b8986cd919ab7a990383920dcb8d65

C:\Program Files\Microsoft Office\root\Integration\C2RManifest.office32ww.msi.16.x-none.xml.(MJ-ZK6471058239)([email protected]).zxc

MD5 91f3c101fb43a83c3dc1e50e5ace30b1
SHA1 503059a2cc2d07f61e3deb4f77d31339639daef1
SHA256 8bc9930a72f679f6948f08c1ca0e39dfb2eaf2d7887d5a51eb6774bc7bc40ae4
SHA512 96043d6e7ce6ac6ffa63bd8bacb26b9131755c080151d5843cadd716f86c12d4a21b9c3e5fc6a1a27c6564b523959c7c10b46aa59fc57fd54434220ea4b1df6d

C:\Program Files\Microsoft Office\root\fre\StartMenu_Win7_RTL.wmv.(MJ-ZK6471058239)([email protected]).zxc

MD5 eb800bb73d3ce71dc3892d335eb31279
SHA1 a399091d7bb47e1774c60bfd1f7796a8b56c8cc3
SHA256 1eff32144067a52c4a61ee581c1aeb5ac193474b574fe8fd0873219c0e4594c1
SHA512 b70acf0ad76bb30879cf550fddb9dc77df6acd42d3b515f5496490684310fc50577b5deb1ab203b91a7ec9cd55e0582d9cac9ce424a5e9f692a08e538c8aab5a

C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Riblet.eftx.(MJ-ZK6471058239)([email protected]).zxc

MD5 59f6dfd13c2ff20298ea9a2bddaca3b2
SHA1 a97bbb873373477b4454be80f646ee9817d96ee9
SHA256 3c5b9412b57b5e58109e3c1a1587406f888472f5f7c755b79d86c5cbc2d1f5f6
SHA512 2228ce3932c41aae6c4473a47ef3d1ae0f38c5314adfd33d3f1e529cf12b8e43c98d0cd634d1004d82e9f3ecdcc67c01a87ab3c76028ec12c0584c7da1398444

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\th.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 945bb21b01935aadb23d419a5bbd9876
SHA1 f818adcea962e9b7086ba494121f3b0db0529a76
SHA256 7c629b17b30b13bcfaa3bf532bdf56f93ca52be5be39061646176d3a8976e5d4
SHA512 af02c3b32617359202484ba788919c60dc029dabfc9c5a3a71034b54a45af832d4b63eafa14eb5f9d5329e238275d2bf3fac46ba316a11455bf8370c0c4ddf29

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\te.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 c0685956dca98164a1710c9a71daa832
SHA1 f01c742d72884be90b0b0092a24b2e9e6be5ccf3
SHA256 a2b07544e4b1ef9d4a45600afa4828a69310f20312d322331c2c2bf661bc67b5
SHA512 074395eff78fcb97b292dc30bf3f624a44eac56e11f5bdbbc744b38f7a71c3a75ee7ddbc7d564795759a57692c2e4cf665ed0bc0127210a38202f1bf4f0b0fe8

C:\Program Files\Microsoft Office\root\Integration\SPPRedist.msi.(MJ-ZK6471058239)([email protected]).zxc

MD5 a5a7b75a52c29307fbf9cb30b5686824
SHA1 a41ab585dd5836e2eb0fd7032e2832c3d891bdb3
SHA256 e8e9d1c543fb8de945afd89ec76db3bafffd2567071a28b1b0d0de843cce5c99
SHA512 708a45e158b18db13c74c412d7c69a70f3e8917fb27c7eb8b36a7ed88cd22cd7d2d4e13a96ec54b843e969ecc8762e52f258c41f74913e55a526eb5ac50f4eff

C:\Program Files\Microsoft Office\root\Integration\Integrator.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 bd034dac377f7b4c200634f553a2a4fb
SHA1 59123aac5607db702e222886b961422d8b08b4fd
SHA256 5fc6f3772aaeb51e838188d2f1c09b984af779d6dd6d7ead66d3a5b65dcc5775
SHA512 8f23ea0bb915929c142593f1308df8525c686d9a765eee881aad8f39e4d27bd021edf6fe265a20ccc6a2bf85ecd4ba0adf585e5c65db117ac0592622c7da4e36

C:\Program Files\Microsoft Office\root\Integration\C2RInt.16.msi.(MJ-ZK6471058239)([email protected]).zxc

MD5 7745930b4e4872925a4e125b4d0d917f
SHA1 4045fa559e1c660dd896f0abee9556d062a51ace
SHA256 7cd71b8947992baf8031d81b627b06dcb7e89d8602cc699647ac7bc3799225d3
SHA512 72136a402de4a6f3ddc9f40a75b8ecd7bdba1f3a269b84b037041f1dcb962ac4706e286e81658d1b47a91f908ebd79e1a1502906a31c0f56abee9a13988e7c74

C:\Program Files\Microsoft Office\root\Document Themes 16\Facet.thmx.(MJ-ZK6471058239)([email protected]).zxc

MD5 884b3ed1ef563daf6be146e4dfdc7c9e
SHA1 a0b17a1607f5111a0b4d50eac895c38e7f21a38f
SHA256 591ac83023d714b29d5d7cb0a218e8edd935d31c3576044794ae3e4a12fe0d47
SHA512 f9c578b1d8fa51c002405837b37349fab68237e1a477bfd439a167e251b449b41d70a4ab6aafd5e51cdd365013b1b0ec55b3c3867855481a51ba9ae48a682763

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.(MJ-ZK6471058239)([email protected]).zxc

MD5 ca546ed3ba5ac44ca27191c2b2753e43
SHA1 9ca25d8b88f651242abb4a8f33ee79fc058fd879
SHA256 712685f3d3364f04176654714a47341f477b9781766c071501cb26d58efbcec3
SHA512 4a7ca5c4a34af50a9358c9f716689a0e02fac252ecab82c6e4f8f442bc88038db92ceafb658e1b9a0400c79b5d57f47a5f4a8358ae99805c2b79dd2a84a97154

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.(MJ-ZK6471058239)([email protected]).zxc

MD5 187a438e6ac57b367d036ebb2dfe004b
SHA1 85128dbb08b390dfea0e756e52e2f866735b9ec2
SHA256 f77fad80c9ebaf6869e640bde1caa19e74d4ed5f414408e4cd2011c3c8eeefa9
SHA512 214b3c0ab80cc15af76022f1a22ba51770dfeda9ed6d82883e4a97756de78a3c0f71eabd72270d8e951a3bc5e8e330a6b35d8faf11b755a9585d25bfd5aa70cc

C:\Program Files\Microsoft Office\AppXManifest.xml.(MJ-ZK6471058239)([email protected]).zxc

MD5 12d789adb1ad20b5b6b4411e043ba05f
SHA1 ac8738e494f56737b9eb2c835de4d2bf64522ca2
SHA256 88335c548b765c50d952e00ba2bf7a9b27e70af20dbb1117a412507944ffc5ab
SHA512 b2ae5254a9ddad41acbdc9d120ab528fa3122fe3074265ce46455a823e8d6c7845e5b62a5f9740d9b6fd66ff836e0417a62ad66c39fb49192963b75eeed6a883

C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Frosted Glass.eftx.(MJ-ZK6471058239)([email protected]).zxc

MD5 5cc6648bbc0fc1989b95c6799f1c0c2e
SHA1 ae6710193999d9ac213b27d8f3d3c24040cb0c25
SHA256 464254fef9411f8bdfac8871e9d319d5e6a8edc80306cf27bc6baeed36e909cc
SHA512 a05aa6949d62210bc00b66cd48a53133f4b68f1851c7b80bf2aee012c2ddf0422599908121a897413b8458290b3b546e3b294352b8b4a7e6c105fea26a3eeedc

C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Extreme Shadow.eftx.(MJ-ZK6471058239)([email protected]).zxc

MD5 a0f95753bb8cdb56145f2d4e3d1ccc2e
SHA1 798992ee03746803346b1d8c4eeaf9080548f67a
SHA256 28f6d1aab10a201c00d64c85963624bc3b59fd5417bf4a8bc5a4a53095371476
SHA512 1fb188e70b01d390e5d7f8b40d4bd4fb0962a16b0e10b74d2c162f5683ba2a4488077070170943a677e3436bf2e2fb8e694c9616a46e586dc6e9c1aceb5f901f

C:\Program Files\Microsoft Office\root\Document Themes 16\Organic.thmx.(MJ-ZK6471058239)([email protected]).zxc

MD5 553cac774ef63ab6bd7f4522dbf17173
SHA1 75a8ef880988e999510dbc29aae451a82c41a946
SHA256 c8189ee42f402db0c57f0b38d67de4e003c4233ebd5f17eec33272e645aae075
SHA512 47571d0278fe221c02f28285057031618c4021bc608dfe3ea1978d02dbac06763b5019f36e32fd115138464b66c3738f9dcc270d18e9a4db117216ff90346dd3

C:\Program Files\Microsoft Office\root\Document Themes 16\Office Theme.thmx.(MJ-ZK6471058239)([email protected]).zxc

MD5 d9e842fc8920b74aad29b17c4ef0ebec
SHA1 3a5581c82039d8d5a464981daff4b5d70c553935
SHA256 8b6d96145d4f956ec5c99a96c37347480af596aa026a882a4887457da99e426f
SHA512 e5fc22bce1981fb1457220c2c03ae8dee223303479d94c375cdeeb4cf0b1f9be6640e36dd7a8f00c6682922625cb88512270e5464b60f6486e052b79fe705813

C:\Program Files\Microsoft Office\root\Client\vccorlib140.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 e208b870eb4f623a05a8bce24e3471d7
SHA1 22c6b3f70ed78effde146885a343485bbce1ce07
SHA256 b9d283c52022e4ded05b05ee18403eca747c46ef571fa05932ba3efc322e8a57
SHA512 42dac5fa8cf09082febf6337635c3feb9fdbc8420e756be3e417c876c301bbc22899606b6fa371607599e2be1df3a81230c8af8a868bfdaa0e71bb79fc6886a6

C:\Program Files\Microsoft Office\root\Client\mfc140u.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 070bbcad651fa8a64fa751873d5451ed
SHA1 bb63d6e7d0db3de17fed379c5a4ea2b4bdfda86d
SHA256 0ae3491e7beee699fcdb54de5bb158740c650efe3e4d34e24045b870ca3ee937
SHA512 05b7355409234f073359647fc32f86f349df7a29a29aaea8195db3bb5f551c10d671231aff9e9329ae10f72c1dbf552b5704d6152aca6af1928dc8704ff30f3f

C:\Program Files\Microsoft Office\root\Client\concrt140.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 8a955b115e6729c4c4ea0080b0a38877
SHA1 7e8b0ff24c35c54d4a5e4849189adbaf8afc3ea1
SHA256 712d4a6526fc92d930ae7a407a3431a5ad4b61c1d383847e9f87bc327b127811
SHA512 1306b9569efa8cdf4b0d835acaa37135cb61ee2d47fd23dd995fc7c50ee264a6184ac5da88e45031ed9bb4b4f1ebe5302ca13271007dc7cf72d0dae19d138e2b

C:\Program Files\Microsoft Office\root\Client\ucrtbase.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 b16877b656f662e3091db921849cc199
SHA1 b013f8194831e07090947834881bf220fc4be660
SHA256 d06339f48497d611ccc1a9748784a96d48783caabfef3d1e7b469db251f7a2ea
SHA512 c3f470d13ba5e52ebca31b6606f357a7bca7554c08db8c34e419b232b838ee0517d315db2a952eece08b85336e958128f0ab0cd25a604fe8fa045633656793db

C:\Program Files\Microsoft Office\root\Client\msvcr120.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 a2d40074ba2a265177640588df56ea13
SHA1 2c4770a2f5dc0fa6901417b8c7a873e38773eabe
SHA256 a3fb2ee9ed9323750d514cdf734bdc937d832b86b6036fbbe6af8f7a22c925f2
SHA512 86c05db27d7443e504be930fd0038553826cd05806b60c0f18d644898a9a0b167b67c7b3da0d6a0da5b322cbc3d07456c826bedd4e2b03f4aff258750b055d28

C:\Program Files\Microsoft Office\root\Client\msvcp140.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 a33fbe5c01a4a23aa5dba1f1dfdbf979
SHA1 f013b76e5cb315f149b5d56e2f87133c95cba3fb
SHA256 79b7738c021fad772be399daaa054870ec328b49e15ff941cdb17390d54f846c
SHA512 df95594045ec37b52afa6b98230cca229fddd50d4353e7dc56440069bb5bef036253ab231f6c10bc05388673e82e5474234f83092676c749b53ebff09ebcbf34

C:\Program Files\Microsoft Office\root\Client\msvcp120.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 a81fd540eba5796be96b17aa9c32b807
SHA1 3dde1413e89fd7751b692b0d751f19d1358b7f3b
SHA256 9f1ad25b695210e84a912c176376116e37068d780e241177376031c2d2a416ab
SHA512 337963a9d137667a98fc196d252c13593a15b4715d0dc2f11de8f7b7e012d66c784afd0b7a0b89cbed7f0363dde1b6415d1f63046ff9d323d702c973ec8fa731

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.(MJ-ZK6471058239)([email protected]).zxc

MD5 15952e9521a2879d9e3770e23addd27b
SHA1 10fcdc536ed319731871eedcdec97108d8365cc5
SHA256 baca4b6f3c7c36d373e1c02d7989923dbf44160d726f15562f81f6d3b906e50d
SHA512 3c1b408db0e2633be596ade784d5037701fd21436a147e014a367c66e964724089b413d1a87f82a7d0ebc05159f2977ca9b0db69e089ec910f8f82294db160ff

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.(MJ-ZK6471058239)([email protected]).zxc

MD5 8a9111046ba95aaf566768dedebd0f36
SHA1 de1f1f871d6d5a48d89685963a838456e3af53e4
SHA256 1754cf82b3055949e8114d3c02b4f908a3ec9680965e647f2f715c4d3d5f64e9
SHA512 4caf3bbbc8eaa6e22f85ae50d51b2da8f61c1b45a7b8d6a58273a775081a56801be1a005eb6236cfb6ccdaec13e3383081dea319b2e5ae48538495c221450466

C:\Program Files\Microsoft Office\root\Integration\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml.(MJ-ZK6471058239)([email protected]).zxc

MD5 3c5a249db405c9145d8c9fe90240daf2
SHA1 d5bcc4e3fe4e51ffb51b9636ddb37ffb5b9513dc
SHA256 e379679353425bd046950657a8e43b7dd3fad49558a1a6e031f526008d9847ce
SHA512 0da27972911ed91026d11563cd7e4010adfd084dcf0bc3aa6ae64cf798484b244e9d93942baf874614717bb9ea5ff01be1a4d68206012ef0efabb5dfb0f4004f

C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Smokey Glass.eftx.(MJ-ZK6471058239)([email protected]).zxc

MD5 d6c930d379b5044da7ad6b8d4a8d541e
SHA1 5de64348c6179022f250c49ff9aa469d28acdf9a
SHA256 b15df73256df8d758b657a07acb3ade8013d50dc172e64c4d198646732752264
SHA512 a8e4130997bcd5ac1121a19f88d5eeaf1fc445ba1830e4b3390b477011d6a4d611ed1bfc5b80b93ea312b8970c230850da499bd63da0b1228fe32ce5249f2fc5

C:\Program Files\Java\jre-1.8\lib\fonts\LucidaSansRegular.ttf.(MJ-ZK6471058239)([email protected]).zxc

MD5 6b176ae476975bf165b43832570df3e0
SHA1 8a454c980f100134fb0c116a78c4c993077f11bb
SHA256 111422c6b06117a93d0c5bbe5daa9d1b8ef2c696399c0e3453a013058f1242a0
SHA512 a9a97c0a8350218f0ae9f7591c86a73c9e1b9ca7f0f13748650d8ba3de812156d8c9315dfa5f19adfce9b7433ab2dcdd26a8651dc2b6cc515efacf29d5679b41

C:\Program Files\Java\jre-1.8\lib\fonts\LucidaSansDemiBold.ttf.(MJ-ZK6471058239)([email protected]).zxc

MD5 4f00bdb72a04b11d416ccfb9a4f71501
SHA1 98ec57efe1860a4ac6cd8b24c1629c3fc7b80bf1
SHA256 16482178cd907828a8c55bc00fd00c84fc262db7a013e15ada7e8f8f8790bd3f
SHA512 094121378ffc1a8a7c95e0c4320d79b5a5e85edff1ed241ece9621cbfb206246ae4dc7e336e00d8a0c20ce21dc42823cb0d29d848c3e87d69f9c5d646d1c42a5

C:\Program Files\Java\jre-1.8\bin\wsdetect.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 5543e592ff1306c65548763f8db7ce6b
SHA1 b32aa27dbc3eb67158b219c1a8c53c6dc189de3b
SHA256 af6b23a9ef3c8d27b6ffd3bd48f2d2f40fb7885cc2c6c824d483b07f46790c4c
SHA512 7a3448bfcd17d9efb9c678e271c47d28962b369822b0a3f1a8733d95a73ec11a61e67e49a18b75e6ef5081ae2e83c122a544283a6cd37be637292a04b38a2d26

C:\Program Files\Java\jre-1.8\bin\jp2iexp.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 8e7b05501b091516bca3b1c62704acb7
SHA1 dbd3cdd2a7aa13c03a8be6c95f309d70e9e8d9ed
SHA256 3028e781ebdd7b6aa45d23c990de1e33ff41ebdbac8a1028e6d6b72ae0e102e8
SHA512 8826e60482a1f24b001f3a2e1707a708e152a7c8d46bec6ac66a271c7ff0bc4f06fccaf75ea3db3fca3523a9a3b37c406c5f78b277272daed4bf07b75a2948f8

C:\Program Files\Java\jre-1.8\bin\gstreamer-lite.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 4f27cf8bd180957128eeef495c9bb040
SHA1 efdabe0f15719bd57057855284ecc781b80e8e74
SHA256 9b57b1406fe40df6c47b70c3d0bf8fda856928c050ef0ccf33143acbb360d1e9
SHA512 aaa8a62dc21b84ae28510b802ed7d7e9c2c98651d5945d3d4737f52ed34d7996227e0ce6cf60722f0363d93138695359768deb56a25a705f55c04c827de956c3

C:\Program Files\Java\jre-1.8\bin\glib-lite.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 1c04fa288a8feb954073f5bf6fac8d68
SHA1 28f92b5d3aa6af3024c71bb4845ff579633a444a
SHA256 db6c339bc596244325ee0b1815cc6353b47a7d93268d512dc1a9de5edf6b517b
SHA512 b1ea253580051f275f6195b700fd2dcb82932e265dda86db6ffb9cfc0d886cde1eec4543ca32945f465c759aab98d997f3787605670e87bfb9f98f36e41f6ea2

C:\Program Files\Java\jre-1.8\bin\fontmanager.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 929d3757f43654ddcf46eb5969c521e0
SHA1 01afec7388f2696d71a0d2646da0f7b54323c46c
SHA256 fd107fcec7c12c54f65603a6312cab80b4828b7354d7561d422e5373a731dd35
SHA512 db374412ef79a71d22674d3729ffe9c242208727baad119ecec0e43a370d3385d524d345e38a85b045ae462b1d460af07f165f548a602ac19885624fdbc2a98f

C:\Program Files\Microsoft Office\root\Client\AppVDllSurrogate32.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 2a97438e51adb76aca660507dc54adb9
SHA1 e9e4b825edd16d7a0f27c5654cedf2a3ebf24ae5
SHA256 a28f27caaf6ff20972a231dfd8f8b5b70a634862f7691eff22a88ed5c61d245a
SHA512 d8d44042aa2764b61614af52046c7e009e520acf4515a87e84ac3cbf7ef2ebf2fa0213cc528d6c33c7317df8aae402334fd66e0f5f49a5c9638b429a26434b55

C:\Program Files\Java\jre-1.8\lib\javaws.jar.(MJ-ZK6471058239)([email protected]).zxc

MD5 a405ededf1c915c69f637644b29f706f
SHA1 0498591712e4e778c6d2a658b9736fc49dcd0ff6
SHA256 d6c7ebe423b2d29a7e6f289634454928b0336ce504c36818f84ff00525852588
SHA512 40d713d71252a522c8b13fe52322b05273ed50a10dc972184e0cccabbfb7c0ea81fd49b2e3310720ce221d082c8e7c6c76816e95585a9f59081c032280a72437

C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md.(MJ-ZK6471058239)([email protected]).zxc

MD5 cc6f6779296fdd239b0c473186c5155f
SHA1 21e76a0d6d28393df386b42df53bdf44f26e7bf0
SHA256 4aeff584d3c2f8f084f9994a98bdfb3debf7b571f7084cb95435915d38e52640
SHA512 2bfbca514a65397743e349e3037619ad64763ef7a2d175b051e31b18e52892f261039374a9a508c477b4ee67ea100684421a43c1171f19c94cc1682d5d623581

C:\Program Files\Java\jre-1.8\bin\plugin2\npjp2.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 1401e564481bb57f28485453c81e711e
SHA1 fa841b90d82ce5ecf87331b20a3a2110cab451d6
SHA256 dc653d1cdc28349f89b6b2aac96b4317365af80bf4c8fb4a67a79eb5bcb8214f
SHA512 0eb3c97b35b879a19fc48962d396dd425efc2ca078d2e462bb85e2ef18c4bc6354d0c51bb94a9a935a1a137b37bfe91a85be80098e0d309316d4e98a5ae89214

C:\Program Files\Java\jre-1.8\lib\ext\jfxrt.jar.(MJ-ZK6471058239)([email protected]).zxc

MD5 759f3d254e17b8aef6b2c1e945760fff
SHA1 7724007966001f76eef9436efe39d51c010bd276
SHA256 d5aa417af39efb7bf2a87f47b1ac262e0705bf7d29b2acfb77d7ca89f0ac8843
SHA512 3236e6fcb76e5cea7aadfcd6e37ecd5cd94b8d97793506643b5eb1dc877b8c50c36e059d03e0d39a10c85e8b1a88965de3f19d89041823671339efec0c1eeb2b

C:\Program Files\Java\jre-1.8\lib\deploy.jar.(MJ-ZK6471058239)([email protected]).zxc

MD5 2496fbe7a24f509a5bfe46cf1cf3ccb5
SHA1 a2174689b9118f6708a0d8a3ed99ce5a36fc5f15
SHA256 cd3684700bfe700a0ecde2e498dc29d264765687115ebc6f0e50af58fd62fd9e
SHA512 af58ac7b4d67c6f089e2860970aaffb1af124ffd9196fc6ab7fe2604e25af3ae31aa7f0742d77885d773941302b4ff1f02f03298d122a2130b41bc17e11e522f

C:\Program Files\Java\jre-1.8\bin\server\jvm.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 644e633cfdf990b2177da3105b3e7777
SHA1 bd262317760926fc386e3a1cc5561b7d47e3c15c
SHA256 3de88d94e4bef24816c586923bf630eae62517f5e25f1d5a48b406ec93f5c88b
SHA512 ee360b9ca83964c213a5ab0ae79b0a99d5e818334bffcded1dfab1f163603e89af078c9c7d916aecb6e91a299a1c0be023b435660ae01a84fbef301add3e9e91

C:\Program Files\Java\jre-1.8\bin\ssv.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 5fc03209d1a2c7cf693ec88c28182df4
SHA1 01e0a353362e99bde323c6399c0338e4fe931558
SHA256 ab4c0d4113dddf8c1ec667fcbd289e0ad16e9b28f0a4c39b6e65ffd3145d95ab
SHA512 7319ef03917bc7610fba4aec02b14dc8f86be1a01c431bb547d3fe2fd1a78e36d788650298dcceda54bb65e406221e4625aefe14699d833bd8abaea7a50e8c96

C:\Program Files\Java\jre-1.8\bin\splashscreen.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 cfb382dcf9254d30ec50cc79d19d2ccf
SHA1 090b376511918bcf674b9009694536072f5ea08f
SHA256 87f97bca960cd788c700152bdf2a24de4bf6dfeba19ffc53e9e20e3e16bc2466
SHA512 270f29fa21032b3364d7c8b82e563f917dbdc3d3bee8a278580d1e6f44315b642ad803407a442d23d531250511929c79a56f4711ce4818002364c746ae63dbf5

C:\Program Files\Java\jre-1.8\bin\mlib_image.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 531968f605a771c6679e3bfb47260131
SHA1 f74e6cc1a52ae85940d4e00b8e40cd0172de57e2
SHA256 909a4439f1d14c77770c8a77e27f54984f4fe500dcaf56f02b1647c929728066
SHA512 98485bc2a2fce01106ebdf1a2b3314d1ca14268ec35e6061e3c79711bf314f927ba5783293473214e6ea545aa703f05fcc5a37f76534541e4aba55ecbfaabff1

C:\Program Files\Java\jre-1.8\bin\lcms.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 70599777b96639748cc3786e7d278f42
SHA1 eec44c93e76b4c8f8186d332d62c9efe8b0ca364
SHA256 241ffa7cba026629b67eee63fefb05194aa3142412c34e3361a08a0d2dba174f
SHA512 f964059045e08eefb9fd9bf6502800a7d1fcfff330c659a97333164f0598349140dff06a4cc2784d9ee6f06722b4cdfd8ffaee16a9e94dd750015a76ffc6fdf2

C:\Program Files\Java\jre-1.8\bin\jpeg.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 f2deb3c271d9239283cb3f71365a93a1
SHA1 03aa19512558cf92d6011d542599b219e9a0f8f2
SHA256 9fad6c00013a37a133c8c8bb646ca88b219ec636e42ed3855ce24f6fb8683b18
SHA512 4d6bf557d3fa0cebec62494b93a89a0dcd2ff0064e1bc819f5eca0b319ccfdf4bd2b7fcec2f3e56828dcf5c9cf6db7bd4096abe14163dc440d0dede7f057e55b

C:\Program Files\Microsoft Office\Office16\OSPP.HTM.(MJ-ZK6471058239)([email protected]).zxc

MD5 30307f71bb39b7ddc9f17ee3c977417d
SHA1 7cf13921270ea224c989f04937f472cbd60956bf
SHA256 57caf0e16532fe8fd162d393a1e00d82c40069bcf24c4274afeaa1b45b35255a
SHA512 066f0a71f84c0b2d87e59c2bf701a25c606438f7dbf4557ebd9cb136236970496663fdd006d87a12a60dae8e063ab95a4387975b2729e6eb51cefeb9f51d0974

C:\Program Files\Java\jre-1.8\bin\jli.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 8d2754cab65326d0a6846d262a5fd3ce
SHA1 1702863026dff82b424e2637fabac0e5b36dc873
SHA256 d6e4f08b0b7aea09ca13fcacf0bb7def5e892763d7c669a41dab1a7c19ef303a
SHA512 d63e53eedb5d254b8cc30f0330306325e9ead1a0fa97bcf8ff88c8a76f2365d45068a6aa21b3ddf1ac8d604277abd2481ecb2e9fbf4a9b43a40fa18bbd2c73ae

C:\Program Files\Java\jre-1.8\bin\jdwp.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 fb45ae6be931b9e162a52fa324aac949
SHA1 ea1db44778fd4385206c57f46330b7b6605e2f5b
SHA256 13ac489a10282ac68a54bf8c2085d8ba0d2c1c01a90adcf9c231fc28ecd41207
SHA512 b67867207648277152ceeb102f0a19c0ca29fe49642b447142236d8166e074b032f7b99e2048a8ddc0a15a282ced08f99efbe786cc58a4ebc66ffcad82aaf621

C:\Program Files\Java\jre-1.8\bin\javaw.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 a04e76a97e79a5c3fda4ff57bb2795b4
SHA1 5a3de27ca20794020cbee7dc34e5367272844abe
SHA256 ac472e3ac22b4526899de14d8873e1cfbfc0582009925a18183952d5ca52e625
SHA512 1100e8e515ef19925d96d5dcaa86b7664b94af8556e1ad7eaf19a8793474961fdb8c056b478cb3361ea691a7d41ce63c0241d620bb4606e6737a95eeb9398ed5

C:\Program Files\Java\jre-1.8\bin\javacpl.cpl.(MJ-ZK6471058239)([email protected]).zxc

MD5 37a9cc99146e82f16a0920cf08308d43
SHA1 2855c1c89e878f47b9f28a19a8212c2e848c9995
SHA256 d0e3f80a5fffba9109fe1021775d66fabdbeb65b1b210dfd54aac521b516fcbe
SHA512 62254035a996b457b89df7d778496ba922ee33335f36e7bd8a9a3c7d799b313b9e1cdc7ad431606ffca8b50f19118d6ee40ae01e177c48c070ce66ecb91fcc34

C:\Program Files\Java\jre-1.8\lib\ext\access-bridge-64.jar.(MJ-ZK6471058239)([email protected]).zxc

MD5 454ca280042dbb44742e26c5cd0308bb
SHA1 7c612f5bfec133776d1a573a4b24d6f302f2c9f7
SHA256 0246c4f1e8dbe040ba86ac2b9c0d6024046d306ceda7ad626e83b2301f446811
SHA512 25bd62f8a2a646906909b7fd6f5ef59b9fc41336bd6c5693c7109cede85c2360d2aa9f20a778bce5c8e927b02b955e90768f9352f34439acfb0d018243a28bbd

C:\Program Files\Java\jdk-1.8\lib\sa-jdi.jar.(MJ-ZK6471058239)([email protected]).zxc

MD5 c3a6f1b7c1c9106176850877a4e73a4d
SHA1 708d494cd71b333a081b8d251cc8856cee5b6dfa
SHA256 bdd5e0a77a57c4d044fbc138bd5af37af6f296c0f8dae02914afe28fc0d38310
SHA512 7000fe91583aa74bed691153921f48fcb628eeb1eb5a92a7a5b5a3af3765633c5715b34a55161ceb6dbac94ceee04b832f011387da8f03d31249bc949d9ec0ae

C:\Program Files\Java\jdk-1.8\lib\ant-javafx.jar.(MJ-ZK6471058239)([email protected]).zxc

MD5 594eac36af9564bc8b42ab1a59eb33cb
SHA1 fc93064193bd5d0ad1a1cc77a9f139b3fc388c0c
SHA256 f04634c8831c31e3d328fed75a22285901f97e930fc9f31d2f8302444907ad56
SHA512 7968a42698896c0084110991b3df133bead8e393ada55c3850b718d969345af88dba9703139c71ff1f2a1d1bbe0e131069b8239a065145e24e851377a574c14c

C:\Program Files\Java\jre-1.8\bin\msvcp140_2.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 dc71d6a029b558ffbd75ddcaf1ac0a52
SHA1 1c90839306dd9a1eb8260f3f902d92091f7eb0ca
SHA256 3b3446272f0b021ce739a1257f4befc2d42780e0a984de688f62b0224f7499f1
SHA512 18bb5a71254a0e383aa17ff8619ad832e2ee99e46fcb2afb4062bfcf542b84d0b005b684181ae45826fa7b2e3bbcc28a8beeeaf21e51712ed84458a77cd67e15

C:\Program Files\Java\jre-1.8\bin\jp2launcher.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 e121c0484d53e3cd9ff762ba41a5446e
SHA1 63549ee345410bd4a74875081cf9a1910e5f4c43
SHA256 5bfabc3aea6ec0f06561e1e075d9be5060eba3aa2de20af9bc92ec5a0069e05d
SHA512 f3a57701ea2a50e63307301c20b5289dda2f336b9864265d0daa8750e95ecb35ef13c8b21a55a9859167ece150c3d971054b9f69f3b4184270fa021773c240fa

C:\Program Files\Java\jre-1.8\bin\java.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 a40d838f7ee22c9290aa2d4fba166bd6
SHA1 53984bd2f923a216f5377d767465d0195960efd8
SHA256 6096ed2234d53f7d2bbef7e0fc1ed889a4469ed3941967b4115998266700d9c5
SHA512 2a6005a4b20fe7571633c7bfcbb9ae3cb62afa78443c6d9df9fd53d23c7e163847f0ab2f21420c1d00cddd1999d78ba09e453af1e41db4e316524448ce2d994b

C:\Program Files\Java\jre-1.8\bin\javafx_iio.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 7e3c7bd3cd0b2cf6cdf634bd94160485
SHA1 fbea8d9a567eabdfb802f1120acc26e730f683f1
SHA256 677da7f67f341f3dd8468c420b5581330c20a3671447f92b6b8f7718fee1032f
SHA512 86a9df59a44e87e0aab79b5a5b293ace18ec4494c0d6326b7e2a5d2de6ecfcc228d3f72b1fb8a0040931b1a01d5d0f577cd4c37a23162f8c648e504282a752d9

C:\Program Files\Java\jre-1.8\bin\JavaAccessBridge-64.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 702a3cf77f591150480e54c707947a7c
SHA1 253e0c2af508d9189c7b3f63a43f117e02407026
SHA256 49180936edfdc0f8237f2ab5a28927cebe7421cf07d6ca8d738be01b718ea765
SHA512 59322ac3da6106ce200ea2e00a58d928dd2b09fc4db827cc69fd54db7203a977cdcb5cee51b3c15850b03c4eab1649079aedabbba2dfcb8eb17d56bbd532b639

C:\Program Files\Java\jre-1.8\bin\glass.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 dc68ae3f4318256d217dae2334d34cd9
SHA1 b608b3341129cc01a509365782fbec3032d83d2e
SHA256 6682b705b1497e26b9a9f5f8bf184a836df09734e0e7c347f5bfd475a91d1c35
SHA512 448cefc27ef60eb5b4eaef3adcf42ce2a71b1edd1790e565b783f0842a2715614bc4916747437e5e300c7cd02fb88c8df809e34f291fb56640ff04d7f3e05b31

C:\Program Files\Java\jre-1.8\bin\java.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 c4767448552ec20f66d0874f114a09c7
SHA1 5e943889288027100c18a0bd9a5cebcac8c97e6e
SHA256 0bcf98055e79d9d03aaa94fed8b535d189906621a1ec0abc84c97c6806ca1027
SHA512 c5e8fe3b245aeb319037239e6db5c39096d3b341c665fb6d189d42f2f4899a86a967a02c42d5d88e4c6384774a9c9a1d0cdec8fd8e5631dc5f4992b37504af5f

C:\Program Files\Java\jre-1.8\bin\instrument.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 acd3379f6038d66c032ad8edb14bd6af
SHA1 79f01b9cdee63e7b70874a0b4c9ac09f3bbc4cf3
SHA256 7dfaec4b1d082bbdf8764fa9244ae96f691229999e5d96c30fea102efc041794
SHA512 9d273d972de5e3180af566d15a38f857ec696770c5e75b50a0f3825f06925a068e1a6c16e5a8496ccadfae29106176f9ad1ef517fcbdf1c646b3f2331c7f1e57

C:\Program Files\Java\jre-1.8\bin\hprof.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 b11b7168ecfa369b2921c8856d0643b1
SHA1 a1a256d88e8b4ad1c642a8a0a83f1d33448f1042
SHA256 a84ffacbe5f1a313408b8d3a7a9b3b8f2f8ec9a9098f553b837151043be580e9
SHA512 8f4c96ad5c89d9598cb147536f91b7edc54e344191b5fe335b66bff95b670d053d469702c733ff49d06ab4906e6913981dac3e734312c6a7f46baeeae6264c6c

C:\Program Files\Java\jre-1.8\bin\fxplugins.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 0515c2298f1ad5eb865620ec08cccad8
SHA1 aa61dbde3104af2bf8fbc95da3b8b56733bdf346
SHA256 f1f67df8cfe52a7fb53c5429062a313b2dee8c62fc04cf4d6634bb7dbf4ee02d
SHA512 322072a876f2c4abf7bcc451492812d34323a06a5a31c66c1f6a388c10c34d6a21fc796f55eb019a4fe6c37c4b3556e12b4647ebec4071556913f90eb1937baf

C:\Program Files\Java\jre-1.8\bin\eula.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 9a2f59c745934faf70a25cefe91efe1d
SHA1 a94ec9fd563f1f678ab07bb68882208646234248
SHA256 42ebf2a3c3e089b3de401c65bfc4bc1dd36d25ccf9b65d7b1f17ec657e08b1cf
SHA512 c449bf98c07c0f8a9ff6492869b6cc5ea8b44f4552b9a6e3b9ddf9859119fe8c64bc05bc2ff2c73698c99373f144e3606c31c1a27055bf3e368aba4225c51708

C:\Program Files\Java\jre-1.8\bin\dcpr.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 7f50693246807c4ca6810ff232dee929
SHA1 4084d7cb8b6791c72db239b273813a3eabcb5160
SHA256 fb9828472cc821a1e49100bb07c8cc6880e10e03a08c649b17a52d7d1e9b3de7
SHA512 8bacc95300ddb3f85e1429608f69906b11d9c4ef4d91eac05b54311f8475cb18216d15d7730bc6d7be7a4ada473f286996ee150e25ea90439ac834c554faf881

C:\Program Files\Java\jdk-1.8\lib\tools.jar.(MJ-ZK6471058239)([email protected]).zxc

MD5 b0217037efe6c07c5346ada6b8eea588
SHA1 cdb613952048183e2117d8258a8de284cd8c938c
SHA256 7b64edb7fab32670467c5662a5275ab84144048c8166d0dafab056158af5d9dd
SHA512 be27f7a3fd1e1922376ccf101e9deb534e610147cc30c79202ac01d339483aa1f265f40c202b2081dbee34350355a0cdc72f03f2abe5f328cf53bed4dd396c37

C:\Program Files\Java\jdk-1.8\lib\ct.sym.(MJ-ZK6471058239)([email protected]).zxc

MD5 f23c3c51bf388f886f1d90e9aee6f718
SHA1 081631404e1adc41a1750a7c017bbd6d5efeb158
SHA256 32a7e36aeee374b36681fbc93d024b0d7719d4530669bc1eb16dca9bb6c77671
SHA512 8185ed42f0b2a2440d8f6a6a830626712082d47a2381037bb980eb4c70ceaa4b2f02a536bd82f58e1777ab3486e24e3c10269cc7a780dabfec175bbd7773e2f8

C:\Program Files\Java\jdk-1.8\jre\lib\fonts\LucidaSansDemiBold.ttf.(MJ-ZK6471058239)([email protected]).zxc

MD5 4cb963b5f598dc0a33cbce029bf71e89
SHA1 c49f99e24bf5a5ef5920eb4888c9019704f5aef6
SHA256 0694623fe350207bd91c613727a5b4dc1c7d2f03d90e00b8222c677b307dcd4d
SHA512 551a7413640c09b66b68dcf1a5f2ab4dc0985b153a8afa40f51098746964be70548009797e0556cb8859375ca50548e2034df79acd59f3fa2f5aab960c8c604d

C:\Program Files\Java\jdk-1.8\jre\lib\fonts\LucidaBrightRegular.ttf.(MJ-ZK6471058239)([email protected]).zxc

MD5 2e57110067e864144f68f7ba076864dc
SHA1 7508feac6d4d25f081e15bef1e28fef8a17215b5
SHA256 a0275d1c9e3ea497b17e377142aac98433ca2ff4027553c7042022b241e12474
SHA512 36684b98c2e64c559b915f91837fb9dd9c85249e1f94661e5d66879a5d0f39d1f4158342f2a15e433fdc2c2795740dd00cdefcf31e2a39b1dc0877b7943ee387

C:\Program Files\Java\jdk-1.8\jre\lib\ext\localedata.jar.(MJ-ZK6471058239)([email protected]).zxc

MD5 17cee412399a8d16a111043edf0b572d
SHA1 b2aa9ec34f126675b706583363150575d02c7d29
SHA256 fb9eddb066ccde1646f8b998e9a9435c787134656f5d942c4db3cfd50bc78a9d
SHA512 cb6d604545163234419c568fc090972ec23f91c617b8b38400c1860542a16b4590def035c9256f190d82d345d2c6b25f798b9ed76633fb64a0bd702fb85d0a1b

C:\Program Files\Java\jdk-1.8\jre\lib\ext\cldrdata.jar.(MJ-ZK6471058239)([email protected]).zxc

MD5 7666c1432796189391ec19ff2f93709c
SHA1 d0c8cfb33a7f034b7cc2fa6e982d445b9edc9dfc
SHA256 aa95473fcea6ff12931f38736fc78ea4ed1fc06f98a0ed3282c26187458ee02c
SHA512 87d3286231c914b19a05feb4a2de72d309fb8cde337fb0d4bb78fb9008a69b943370f2625c9b817f1656963b742442f036c8a8f5e40c319f17d0a1007ef0cd4e

C:\Program Files\Java\jdk-1.8\jre\lib\cmm\PYCC.pf.(MJ-ZK6471058239)([email protected]).zxc

MD5 e0db22662c6bf45dadae57c22fbffee7
SHA1 5955fd49b3d06dabc5d80f9e913ac9a4e5d8c4fd
SHA256 9f7db0f90c1ef8646de210cba6019f2296fcdfe860b9afee829d815d7b1d1cc4
SHA512 f04c63bf3b3177e5df0d6ac1d114948c763de5f70f4ae0d4f803a3edbc0dbf20aa6c63b1bae28bbbb6f273f6023fb93658048779b6f3effbdc52cc7b54365fc6

C:\Program Files\Java\jdk-1.8\jre\lib\ext\jfxrt.jar.(MJ-ZK6471058239)([email protected]).zxc

MD5 1fc6c733f5e28b9a8d96f21b64acce99
SHA1 2909fbf11d3467e1d449de092e3f10d6318fc84f
SHA256 b07ea0e55ca0084e9a2ef17e2b1f5ee7aee0f8bbcb060f487c0f4702e7054644
SHA512 56de7c1f466ee124c79d5e62fbd87108f6239729067d9fbf4ea2969f5dedf8680abd2f9a785b399d4cec52403dc823d1a8e087c011d2b89d1888d660ccf403b1

C:\Program Files\Java\jdk-1.8\jre\lib\resources.jar.(MJ-ZK6471058239)([email protected]).zxc

MD5 a79676ed3422b0dd88ccebb95a6c2c17
SHA1 4f4c1250a7fa624cbe69884eee216e1893d8ab69
SHA256 9afd03cbbe0835ce40f45330a2f906eb74190a4d4ff06dd001df790da46557e6
SHA512 728e468354eb0e2b0ca90f32f90f371df696e08067d6bb851de2ef06014a405b8f627fab2063a7cb6a6bd5e784d78d472a0e66ab789a6287277dfddf961065d3

C:\Program Files\Java\jdk-1.8\jre\lib\plugin.jar.(MJ-ZK6471058239)([email protected]).zxc

MD5 b6349e40f5213dd88eb95e4c41a5707e
SHA1 2921a0d075ee123608c54823e3c17b278e0e437e
SHA256 ed85de8ddf064c1faf4d5f7d1ab1277a01822730c71297418550da2a3fe072ba
SHA512 c21d5e81200f3ab9c56c84e99d015e8a0434151e9c6730411f7fe2d9618c64c4ff076b31008f6c96a6c7b20152bae3d423fbb1317778d5a3ec3574d0362fbd77

C:\Program Files\Java\jdk-1.8\jre\lib\jsse.jar.(MJ-ZK6471058239)([email protected]).zxc

MD5 1ef063b79b1537ea87db4110d61d5c17
SHA1 ecee2e94d1ad7d906bc2c95d774897aeff765789
SHA256 891a639a0f32230a609c98d733585aba213fd2d84bee1bb4d0ceed355acc4826
SHA512 ee2572361a3f7fd0353328d3f7d665c1628e8ae62b68aaa8edc7507a85e8dc7456f605411c5826812c5cf221b88af8666bcfe53ca2c0ae4e951b35c3c2c52739

C:\Program Files\Java\jdk-1.8\jre\lib\charsets.jar.(MJ-ZK6471058239)([email protected]).zxc

MD5 6db7f1303ce7a7042ee0c5d5596663a3
SHA1 06e4a37a70a2c9077ddac63059b1a01d0d679a18
SHA256 657a03b16345300bcdfba503ce1035ae3c3019660ec55c52851725d06d53de29
SHA512 b86261cb4f953da286f276f7eb8a659a48b0905909d36dc45f2e7d959a88685abf438f8fbb3ffa63f55bc5453e61e444d72b80175b666dd368da0a77a8843f9a

C:\Program Files\Java\jre-1.8\lib\fonts\LucidaBrightRegular.ttf.(MJ-ZK6471058239)([email protected]).zxc

MD5 b6016918aa595d1b4df90b78ad279503
SHA1 09be9f9599d3ecaf2c8a8f75e1f3f026fccf1c67
SHA256 6b266b3dfb4fb135eb515a55a98fb6f09bfec999873ffd1378cd1bbf01be8d0c
SHA512 928342c07228c89fbb6b885de1a93c4f2a207c7f83a92446293db3f370fa6238944a96b773906abc04a96af78e46d6357b2edd1554061c379b7e2bca43184477

C:\Program Files\Java\jdk-1.8\jre\bin\dtplugin\npdeployJava1.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 52de57713cf25ebef5eccccb99be569b
SHA1 b8ebbf98f6828680538ed1aa642c7e68c3696245
SHA256 dd35cee31a2aa7952060aa06c4bfdc16df6d82ca7fc66f15b22f541c60204b84
SHA512 b00014ef4f83a1930aefffe1ead636c700cbba953ba902fff841924de4ea7dfccab52ee57076d6d86c1422485217a06f69f03fa5842d6013b764e54e3439be75

C:\Program Files\Java\jdk-1.8\jre\bin\dtplugin\deployJava1.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 b587bf729fc0445eb46125eef47a3600
SHA1 c1237bf95b12580132e937de148255528048acc3
SHA256 98705cd52304eac19e27181edc007a8b9d47ce05fa18e134e0d1ba1b18fd3553
SHA512 66b2eed1d8fc9c18d90c77988bb86ab4378714ad5370a435a70a58a8254c358c53d2626104ca9ee331aca7f3a259282d9f8831b2a4c732ed4d5989ced38c9e45

C:\Program Files\Java\jdk-1.8\jre\bin\wsdetect.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 91e715890bb6e45e14f32a02abbc19ff
SHA1 903dbf44aa96f666539a3332d1cf23474ea86054
SHA256 373598f7e0255e3d912029de7f3edadcbb07d2e8d1c9824e0656b782bf711c30
SHA512 40228c8a6d9bce8f2a2dfd9fa2633562cbb0dbb4288cdce83418ea87a8930c15d7e3368b9e4ab2abeec069f0b83ebb5f8a4c8d8f65f00810e19dae9201fe652c

C:\Program Files\Java\jdk-1.8\jre\bin\jli.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 80f4c3ef4403e4d65fe065dd64c69193
SHA1 f4321d7d227e9009f837a4eeb5e8d1a14c5bece2
SHA256 99a5e00a86d614aa9f6bbefb24f1ac9862b6a16500e767e47b95dcb9245c1109
SHA512 2b453ec7c61b5d859f32bb70a0783fdc6a2aaa10c4f54588175db629798ec69d6ff2110e6442cf646da188248579dc46d093b23962864da99da3a55ec396c24a

C:\Program Files\Java\jdk-1.8\jre\bin\jdwp.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 9d2db41fd0cde48b9976ed44413c6e74
SHA1 e297aafc9d9dc6f0540d5869f6f65c590a4348fe
SHA256 81abaa9933af8d2695c0b9c816aec8ceea92638f959390470231a3e55afcd68d
SHA512 dbb514615c8e9048b043cd56542d2fcf51c4526d87b847e35e3d251cc9336d194130e460753c76986e0b2bfdc6ba6b8d37fddc07f9903505d2d8ad8ab720acf7

C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 693173e5fda737ea7c922c7dbf95baa0
SHA1 9e450aedb9f76a7ef04713e2d5c39ef1b114c35a
SHA256 b6f101249c413b56455d280b68b8ae504c848a075ae0d6318b65e71df11b4cb6
SHA512 ea8c2df0e206a3db8bdce77b2082fd701dc722717204bfb94ac64505b1f7e8a0cdc03a9d975ea708604675dd730caea2d2cb34179adfe225a2002703e0c63f64

C:\Program Files\Java\jdk-1.8\jre\bin\javafx_iio.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 5a977789c9b2a23f15edb4fa03c8acf3
SHA1 e04c65c177fa45614e585c89b8d3e08fb9eeb1a7
SHA256 120458fe2052d507b9e1f8afb9992dd625348efc88621dd815ec7c20284eb397
SHA512 37c95aa8599c6ec69e606c56630d3240b06a96342e74282460b6ceb301d1897c61dce66d9998746aba7b10c43fda5afe5bcb607b480601f69f80338f9da9345c

C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.cpl.(MJ-ZK6471058239)([email protected]).zxc

MD5 8d0a35129a4220a1a880ad0b8188dba2
SHA1 405e77b604377d82523ad47661ae2e1fdfab1b01
SHA256 7e0950a6a7c1c1ee9479a18787cf0b87740944c65b629b0422657f722d841306
SHA512 2ff64fd397cf08631d38bd41ea8cc13adcd3847abc055ae7978c47c4d801b9c3a0015298199fef4a05d710c69bac6fd497ac4a4ff0e31c93e448f4e5544e4132

C:\Program Files\Java\jdk-1.8\jre\bin\JavaAccessBridge-64.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 fd3694c0277b850ca27dbbf8317e127a
SHA1 62c20cf4dc80c6a754bc0d92acb243ae4a8f7390
SHA256 756ee2cbdcc4e475b8275b532fb3537d910939b844a188bb9502d316b1227d4f
SHA512 cd2d5945d729f646d201970da35ebbe8e4ebb5405050b277f63cb315caffc47287ec84d4a3802c2a17350363203c685e51b38fbc3e7b590c0597950b11c1f3c2

C:\Program Files\Java\jdk-1.8\jre\bin\java.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 62df7e910df74d78a417e29b22d62a28
SHA1 53b90ebad0a42437d5b61621934b306002d5a117
SHA256 ad3d24564d4b6f5d75ca4b619e17f335857d9a1ca8c0dde68d5bcae8902cd0e0
SHA512 59d0ddc456e0cfdc0ce2547c379f30f64b0ac9e5f559e8e02e050672056838583837489f20a28e0818c8562a9d6298d9b0ac8ddda803f2d5a97e87c52940d465

C:\Program Files\Java\jdk-1.8\jre\bin\java.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 9cd2db7ac6e33764718261415b4f3890
SHA1 6cd25153f133a8363a63b21aec23b04286e2d189
SHA256 9de16beafb36ecf676d09e57de41e1f9268234d3c45dd121b2ba00c333a7fd8f
SHA512 4d874ee1023f4d8cf6bfb84aea3e0d534510cae5610f575a3036393a41a28acd40a7615f76ef350be55696a0a370bfc66ad173d8f1a7ff304793711e0161d2f6

C:\Program Files\Java\jdk-1.8\jre\bin\instrument.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 826e79b98b53112a9cc59ff53c25e07a
SHA1 b7869496f116d34816bbf208356c43145960255e
SHA256 bab11ca1a7fa44b52b13020ea0a0379b9388bac723fde1e13ddf6288cc887885
SHA512 7551f66fd222ebcce04128e353d01a55e69521fbe4c3a084ba20495fc13b769196e81331ad0b3a5ed2e88c680df1237f6718e8ea84afc29b25927d467db730ed

C:\Program Files\Java\jdk-1.8\jre\bin\hprof.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 010f5326f1f54cf3778d3a1887b7eace
SHA1 8db4ea237ed9de36517fcb2f6148e88e7ced1b92
SHA256 99bfae40f28788124f4d5b86d6176daf81df96c7cd3c6ba8b50d21bb4e279be1
SHA512 3568b1efd623f65322f1d28c292987967c7924583bed72bf71d92d229cb54535195bc7cd85f5899ecf19fa8fdf49395498c37c5b2537b8b78bb6465632174480

C:\Program Files\Java\jdk-1.8\jre\bin\glib-lite.dll

MD5 9538b1f011614298c537142ac0a0991d
SHA1 324829ef82a6d54cc3af934e0358047d43f4ac6a
SHA256 93f57b599c3e9246469c1e0924de0fd21f566302608c68ee811dec7050359462
SHA512 ce4e3807786fe0ab9277d67970ef52d1816e906ffedbf5a46603c639ebf88fad244c5347cf7e239ba0f8a110a797db6a5ce62a02f7203255a219808b051de92f

C:\Program Files\Java\jdk-1.8\jre\bin\glass.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 5b8ebd1760832d92bbaf3836ad4acb69
SHA1 3eb1ce68a6d08a2363cfa54cfd05a2718ba53f0c
SHA256 fdf1bf86ce63ce22efadc45b82703f8251972326f4141cca6d9468428cd37600
SHA512 c7e08ccae3e60acec228ccd5b70e26bb6b883f2850a15c12d49530966bbe33063920232efc112d6c650572c505964e53b7c771d5f239974335534bcf1a82b330

C:\Program Files\Java\jdk-1.8\jre\lib\deploy.jar.(MJ-ZK6471058239)([email protected]).zxc

MD5 784eaa261cbac7728e66f052094c7052
SHA1 fadd625602324cfd168debe09947990ccdb7881e
SHA256 3e1198fe131f9550d9bfdc7374073327633e29db3fab56b900950b401fca74ca
SHA512 3bd49d269467b1c451322be706e3009155409b5ba60b4c5e77fd85803c5812d7734dcd98c6ea991f2a3bbc1a81e531b012a2efdf8696155a90416b979a32e17b

C:\Program Files\Java\jdk-1.8\lib\jvm.lib.(MJ-ZK6471058239)([email protected]).zxc

MD5 f4ee75a0231d2f06d6d249f6e85645e8
SHA1 b4440b10c45deff080ff854fcbe891800e0f6042
SHA256 7127f038f37876262beb5e1c172d2e43530b91f54049128285e6f734f9bbfde2
SHA512 07b730b1c3163d8daba849ec405d7175573b3db73fd4812e3fbaaf2ba41f23b328b31a66faf4b4e2ea9a74af2229463b0d68f4cfa719bf291f9835d82f9ae1d5

C:\Program Files\Java\jdk-1.8\jre\bin\server\jvm.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 706b025a76396d807f5e45f31f89dbf9
SHA1 1d974bcdffc7313e6d2078368fb9d0e56d10f210
SHA256 e1b509789991d43af6c834332c0797d80d7a464f328e5c20b711558eaad5f34b
SHA512 98d463f69078b4d9a2bcc8862d5674edd11208359ac951dc149227304fe899c4cf5b5db8dfa40f4eea1fdd99dbb552ded6f13db827f81f2d99a4fda690d403f5

C:\Program Files\Java\jre-1.8\bin\WindowsAccessBridge-64.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 922f40d6fa3be5ad18b509ad8c144dc3
SHA1 072bff539190cb06c378db6a83f49150051e58a8
SHA256 4b4116989ce2cfb0497a8882556faf73d6e92ca333546560c7b6384e68ecb8ce
SHA512 18a09e9187f0a502d5e7bfab6fe5b010fcc7d22724a76fb3ba95ce24054086972c7b57bfb25102c49f2da6f99d2446e6523fc58c696b3405ad5a6328b0fe075c

C:\Program Files\Java\jre-1.8\bin\unpack200.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 071d5ba16f595b923322d1ec6f4af667
SHA1 2e03053e53efd29470843d144aae18d02193e257
SHA256 460f0b1072bb53c079bd8f86e5e35f53d9ac71b176f480572d824e22da898c46
SHA512 5adabb107a5392f87ef586214255cca89d79c88b0451e884f047652fe8eb92c24e0d132b48add249be644a3bf928a92a18f292160a933699243321bdc6b059f3

C:\Program Files\Java\jre-1.8\bin\t2k.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 094af7f63f48d5e85897d3b4b307edad
SHA1 b4f8404957b7f0a7234d42eb7b5ebc64dd59d0c5
SHA256 be0bd3d0bd881c068ea3b226fc2b13a3f67c38448e069d0ef5eeb89a8e33b3c3
SHA512 df6099bd695b83b6b5c584c130daae7b8955c2c30ef707159556cc6db50a27182a743e522353f6b13aeda78b67006e08614d229690e52ce3e7a989c550109483

C:\Program Files\Java\jre-1.8\bin\jp2ssv.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 0a4d8a654fb57a6133aff8589cc31506
SHA1 0ba35e1dc5d7b18f2194e1c65b6375107805a279
SHA256 5a4cdb31285ea0c348118ec69cf3c14a79208b7d5b9f208bcc04dc1c57114c7b
SHA512 392661198e0a9307e8b33324d90bc7e0cee931c4f4111d13ec8ced0de7a5927c366accae5a0201d59d1fcd7a23bd6868dcd84587e0056ba4e50f8aabb824e6fc

C:\Program Files\Java\jdk-1.8\jre\lib\fonts\LucidaSansRegular.ttf.(MJ-ZK6471058239)([email protected]).zxc

MD5 1cf066cbb638ffc6b46941ba76f14960
SHA1 a7c5a272fad7ad2d223990322ce21247bfaa2ee9
SHA256 74988eb594fe05f489d2d9675bb8bf479be1024617ee7bb83e51210aa3c1fec9
SHA512 00be03759ff64bf43644e559a5f3e3efb44ef9f4657c13b250571b3be6fc5b4844254a7503c3e5d561d822e6e2ee5b1f10071c8ceb135f59b5e38d66d5e27add

C:\Program Files\Java\jdk-1.8\jre\lib\javaws.jar.(MJ-ZK6471058239)([email protected]).zxc

MD5 0993bc7fa7e1bc92ccb165957629db9f
SHA1 06d4edb172df83e8135e81d532b12d15bf3b06e8
SHA256 5862a90e241339cfc86f3a3e0591f25b689fac0ca78284c742f0927f2327b9dd
SHA512 d83d2021d117e22cbca96fb5b17ad4d35ef24b2091e9a26e4e7fcc59ae67fe3a9449e7660c036fec2ae99dc3a163e1289e064b8ecebdc3ffed35824567b72c2a

C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 08f39a18320ae16415b7685b0e708300
SHA1 09e30dcc1593972e50c30a092176fd5966047377
SHA256 127c953b33d8e49da496e82c3cfdb7def7bb55f0d5b07a12c80a5618ca1c8767
SHA512 9c56a91aeefbaadb7adca2e322d343cc0732b1ac7ace66f92c917fb54be13429938248484730d8218a8b7065414898e3d34f9561657a7adb17465137ac6120f2

C:\Program Files\Java\jdk-1.8\jre\bin\WindowsAccessBridge-64.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 d4d679d5b7b466e824282a1835951ee5
SHA1 1598876805c7cc6a89f79a15b1290bbd4e1861d0
SHA256 61ceb19ddf4783a9850a4df7347d6210989b88438a5f19e108385ec650471e6f
SHA512 4649f9d885f08f4f3518d25903e7fbf69cecf7f13721f9c0cf2db773580277480325889151c927fb2d9afa8634a6cce33838c2310e71c1d6d1b4706614d8afa9

C:\Program Files\Java\jdk-1.8\jre\bin\msvcp140_2.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 c0dcf17ef57b22521d6fdb7379c9e374
SHA1 eb5ec3e92a9a7348642768062c9f8fff4a6cbfcc
SHA256 2df1506120020ef1298526602fd5d9f5619322a0b181b5ae847da0deb0e9a847
SHA512 f3c58c363f9cdd7e35019f4c5eac11338c218c062b578bdda385668eb7bd6f012282a840aa37c968dd8544f9c977a43507983792829b154f741f99faf0fc5e56

C:\Program Files\Java\jdk-1.8\jre\bin\awt.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 b68cc252751a7258f9a9d47c40875419
SHA1 ce7de2414e46b48f1d550d8ac569b5b8abff1eac
SHA256 df1c9e53dce08d8cbe5f1eaea641c0d5d1d23fb5badfc2331c3c9715f48f4ab0
SHA512 d5180af995cbd55156a8b67068aab6fee2714f9636cc663b682cc1372414ad2ff033237f72970da5efcc0b83d47464592a388a157b1df8c62c2f8641dccd1e1d

C:\Program Files\Java\jdk-1.8\jre\bin\unpack200.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 74c1dfc37f4f695a470de74b2a4eb640
SHA1 f5e989ea016518cac653b0fb43530c4257040b39
SHA256 705b18a5b666988643283f0fd4e120faf2d4c733b48ff87a044a14764948fce4
SHA512 f89866e6063209490479f139992d5dbe96fa4056bbef66aa85c7904d4928f94555bcd172c2695cf2f680387ce1c16a2e05d308695c3cc3d997366a39dd9a1877

C:\Program Files\Java\jdk-1.8\jre\bin\splashscreen.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 78fd20762899b5cdd95200e8ff5758e6
SHA1 79243fc40f383b6e5e568c0b198b1351d5e60315
SHA256 a64f59a5cfecec41fbd8629cc0c5217d2f291a2d85113933287cf5ed5fb14307
SHA512 aa5245f9ff02fdcc629290d9aac97283a4cee9b6a5273580180792f70ae4a0712ca05117e96e92e6cc33b2c4cdd2670020e7415b09e23373bb1f7f8e9cf1805c

C:\Program Files\Java\jdk-1.8\jre\bin\lcms.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 9e4de6591d539c9ca4ea83f1bbe06fdc
SHA1 393731e2e48c204f70fffc03d60f65afc6d03522
SHA256 67e2dd0edca6bf94f6ca3257d5a81c9606101bac7a3b9a216188afbca26a75dd
SHA512 b315f601c7fcb0df853cba0ad8c8383b4cd5912137158415fbdcf7e118f57eee79c2ef6e994cd06adfe1bbde052d7a93dc1c78e6a0d27b083ab9b65fecbc41db

C:\Program Files\Java\jdk-1.8\bin\unpack200.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 c7b5755a9efda558921730ec5063088f
SHA1 1a019bc78d0d4c5117c1e94a24f1e4f3af5f7d4c
SHA256 d019d88c368e2abf9522e19aa79332204190397fcfac85ed65669b0d35500b38
SHA512 b0940687812ee95165ba79d816f13db7158bc9108e7bf801f2ffd62c94b667ce166fdcf4e4b293dc310ff0821747fe554dec101829abe41da5b73f0b0a319505

C:\Program Files\Java\jdk-1.8\bin\ucrtbase.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 041397a00d4e4b53133d25c27e1b9aec
SHA1 d6e95b208765089a499214f80306e4c07d517892
SHA256 d6c155109699cc1d86fd46b9a1b41b44470089887e970925415414401a5a8a2e
SHA512 b432e835a3f4e146a579ce24f6dafe828909010ef61a566c97e45cd7795816ab1df29ef28e8d0ab8215834c8716947aaa702ed613f6eefe47663e1e8e2b2f319

C:\Program Files\Java\jdk-1.8\bin\jli.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 4ff9c90a64ccfe04e6e5b622a3ea4308
SHA1 e2a56c218b184c333839532c8052665f9e291e2d
SHA256 4eafc416456604eeddeac9842a4fa78b94e0ee6639fa1900067fa6ed9b218bae
SHA512 a1a0ae7b0ab36254b1c759a3f845d4c7f1c9d34d1db5e396cd66686093fd4a841d0044bce9601b1bb477e82e2bf2fd92654bf47d61165ef5f8d17967bf146251

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\ta.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 3152a832392630be8606987dc5ea12b8
SHA1 943bd49027bdc1e85145dd53035937808514109c
SHA256 a2f8d5fd453baaf328ebc99692de8e64485a41a08edacfc9667a30420683bf82
SHA512 ee50264fee83f739918c7a05515b96462fde5dee957bdad881e94d91a8d4b1ca8d072d746f1255728151d509164aad385405e9405b9d9240a1c5917f1563ddfa

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\mr.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 5a9d526784e35a8b4a7d99a2ca892890
SHA1 36baa51f73a78e728be0af23ea899e88e72b61e0
SHA256 05843d8cd464c07208177929edf91ef96afec5170f0decc3ad6c9e64e3516461
SHA512 c7731323351cb0d1a944882c884f8717faca5adc16ad682c2846bee429b0afebed51e5a0b485afaa570a07005130456efd05014f4b23360624f3f696bb202e0d

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\ml.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 6e9f494f9e022bfb1f141207c21c1976
SHA1 67653ea9c096f97cc30905b7e30ace69a407f8a3
SHA256 ea129cc4789342c19c99f71238e53c7c79bdabd516c9706f404ce09fd81e5cb5
SHA512 efd2b2b7452405a24d8304a3a4aa56095e60ea1066fe2f9eec37468c9bf83cfffd3cadbb8603abcf5da76e08a610aced9a0c439df05f1b0c5d3903e3eeb6103c

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\kn.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 9c5357bffb75feeb9fc372ff6895bbd8
SHA1 9da9768c6df3fec00bb02cd32ee8b3a890aeee8c
SHA256 2f21ccca0e674a347d0b2cda86fb7708e130e953a52178ee3c711cadc3e7f2ff
SHA512 92016de4a71739d70b1072719ff2d2bf1854b7b4afc59916c8a4650c2225edb67a8dfd76f3be768a4176aa4abecdb1fbf14e5972104995a17fe0f12d8e4ecf9f

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\hi.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 f7a309bb638eb248304bdc54120e3893
SHA1 fa8b372952ef2e6ae434eff769fbf1698235ab3c
SHA256 a9a1c3f3fb9c0486f7553213cae9efaea5b3670f6fb861aa32cf10097affbc0a
SHA512 7c571451cb1f8f671d0105339e5586bf0572599b14a77dbe14055923f452ced0e29dc8e4f7280bae29fae4ff8cf02f6b212604df2ef439dda6d3c8875e462571

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\gu.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 7479b9600309ecf5cbd3da1cb669f7ec
SHA1 b798d589c6f2936c286894442c4512c7b561e53e
SHA256 1f39e6f56cefe111b96d209fe481fcd09d8417faa055f635416a63e1c5cfe5ee
SHA512 bf99937f6030527446cc8716afd1dd1aab09c1958127e128c6c650b8380a7a38bc94adf0d478a620de64219a550c448cdbf1359d1f6a48a956fbb57b9d6a9788

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\es-419.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 87e9b407db169fe5698394897d7345ac
SHA1 3d754517767fd92aac1990ed11768e3d04a11107
SHA256 41b7e5d4c2f2d03f733eb84f8c1238b54353a403ab7933d5a75caef13ab6741d
SHA512 b9766a3d8e463ac73768ea482c9ebdfe4cebe9751e9331083878ec1935e37fb9a063e44bbf60afe4c88effe55bd8bc0f5cfc1a964cf2d8552aa56344ceabc1cd

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\en-US.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 f4a9dd27d46694f572cdad4df5418555
SHA1 8edebc03af437887c044127d2e689bca2b6711ff
SHA256 17019c59ca63778b85a504d0cef1d387f640555eaec6d0ee8f3b1d081a5f57ec
SHA512 e63c1592b149e2701103fd578ef8590f5f964bf3c3f2a69626cf6423e075742ac21bb614c2c25539fe4dadb50b47d4aa0812650cd4ae68689d15d0551859ac23

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\en-GB.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 08157b37a88c119653212b7a3c41e102
SHA1 edbd013c26f580e2cba236683af18007c7302d0e
SHA256 5f4a2cd43b99a1b5ad763c04832681e90c53a7cbe7c950b83d1bc8bb7bbb9a45
SHA512 9c42431be4a8bb615966caa1204c0971a1832822a99f6e7c98d9ea54334b47494f7d2caae8b8c5296fc428e39d3e34523ea15f052fd6ce798621bc7839730929

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\de.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 25dc3f17de2ae8097cfc73607807ec6a
SHA1 4aa16482d02832884d0705522cb8393be07c3ca5
SHA256 e965aec66ee0ba77d65067e768c3731fd083d887030f98925f0469a08128c69c
SHA512 b3bcfe5320bc3fae757ceba7bf428052eff5219124fddc19f435f7b9fa91125c7c708f118abe4e15ace32142b79361f7ca87510b9709d40cc95ea24e531f94f2

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\da.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 f4e6670c60a8827a7e8291deee2dfff7
SHA1 62fef66f6e220252e0ce62a72d177e878220307c
SHA256 89b6a3e4e18a7363dada5ac40158701ab77e3f2b235e37d2c23c49657d6b2575
SHA512 761f98fac0be16b240b9f12e0dc0989db28923dd4a188d80cce7561a396f70e74c9f2155d811773fe17b9296f97de17bd34ea4f9de7ea3ad80be5faa11421a3e

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\cs.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 6007162f38f4c7b8fbc9e52145ff7776
SHA1 72b33daaf3686c8bc3a04233ef9da806f157cf32
SHA256 38fcd8adf38480e1d0d4316b6e8dd0f682bd6a8ace046b2dbd742aace87c21c3
SHA512 12017d50d244a7ae1b0fba50177cf6ca190775314dfc0a08e30e00f1d4d5ddcdc3818f0961a294075d52a37fd38c1dee802a54a39e548f1c475dfb8a94d7bdfd

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\ca.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 1795e465cd79457db9d16d90ae6101be
SHA1 4ae6a57839f6b77705f42527514d4cbb69ecdfd1
SHA256 ad320ae67f70b4645ef5422e3b329e414b10654af58655b7a8c697227ae53a6e
SHA512 ea496c914331d34cc6b0b0ad494df85277f782ac8ce6d8c2bfef76f3aead2ba49381d1d00ff3e89a9878dceeacd37557318840d6f6a793405106e394025e147d

C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\af.pak.(MJ-ZK6471058239)([email protected]).zxc

MD5 5bccc97f30499f87fea4753c2e341e79
SHA1 add10983f654229c55f352a7eff86fa137cff001
SHA256 92cf168e22aab9237e572181653966e799815685619216d009c7cea0555267b9
SHA512 adbd9f9ef3abce1e7fed9a8f8c7785423fd10c55f216eb0045ef2044e420744d1d733733c45934e155c1e9fff63ce945149f630f8242589b328f4ca864a5569a

C:\Program Files\Java\jdk-1.8\lib\dt.jar.(MJ-ZK6471058239)([email protected]).zxc

MD5 9909a89bfc971ea357c0aac31c7d85fc
SHA1 fd5cbeeca82f4117175e1af5070fcba8f7c5a919
SHA256 a0c1269a3512f13341f2e904e954e5167ab27b010601bfcdedf8d4daa3af628f
SHA512 b16b511f142458dbbc55e64c9c79f2fa7d698ea844618412f687cc64f54706c60fb119d59b17fd3cb6f4e6f906fe6c6be110fec1497323edc84a832986cd7d63

C:\Program Files\Java\jdk-1.8\jre\bin\ssv.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 2d38a839dab2c35f3ba0dc5b22fcab19
SHA1 c3f822a6785731dc61b1bb925f33d1fdd2539e39
SHA256 b48e9b43b2a760f3b3faa39f2450986734910d531474bcf64dcd986ec14a099c
SHA512 eb7f369aa48633c1b98594405a238488b2a62d09cca222d5a09451ffa5e921192032d291a1224bd863f40ad00cb3228425986db713a984f73411804c37e43d0d

C:\Program Files\Java\jdk-1.8\jre\bin\t2k.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 b5790d6081e52d6999149607e2390559
SHA1 969859b41d62ad1c32952bc00ae5a87b6242b2e4
SHA256 f0495ba6c944e5a7709309b774830fefb4256f3f59b4c2dc28d73455c27567d1
SHA512 6f644bfb1b259b44bc484c6127a10e1bdec581e539d46f13e3a0ba195489e4a39fb78fd75c712f0e8ccb0fe91215ce54c3152e70973265dada8cc48754f5d4ad

C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Redshift\lib\OpenSSL64.DllA\ssleay32.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 c703103adf1cac6ba549cb5dd6e10a9b
SHA1 4c62787f45fff2e534d7bf4c673ab3a34bb2ed3c
SHA256 5ab0a8fbd72a1daf601c00e5fd5452894343278893e32ff85f2866cec1f86618
SHA512 40ab4e20a9a94477edb39bfbaa0eb1bbe701674725fde8ad75bf6b2a517b695c003f42b338508e4455226489a8c63f8ec0581853e5b72941ea45e764ebbbe82e

C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.DocumentServices.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 ed86a54169005a095eaefbfc3a9b0d2c
SHA1 3d8de3dc0750e5e319173afb7273d6298efffd25
SHA256 6ef59a0e315ddf519e17be51e3cb8aaa6e609e0102f4abc72b3aed4ed49597c7
SHA512 3ddb9bc741a2f7a3ac9302d9edd6afac67b869d77c49dc2e393667b3b16405dc8de9059d03d821d5bec9698bc44fa38d47ed4379b8b223818be13a49aa7534f6

C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Office.Interop.Outlook.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 05c0a480332bc09216f8878bd5d5ba72
SHA1 a4329f1441aa2332337a3ec428a995ad8a09ae45
SHA256 7c13853566a0e427ce145f4ef5270f258fe57bb556fd688b1138ef6f11a4894e
SHA512 0cc822e4399a39938a6c458cf725acaa3c2be1e77dc167c50bca82f7f1295e450e09e4fb99ae74bea7f5a67f8b18c8754a903c5a8c9634c9c8d332a776a47ee6

C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\PRIVATE_ODBC32.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 b9121852aa26f472cf3b0261391b615f
SHA1 e72e0f6736b16690ccc3b534a7e0aec2b82c1c40
SHA256 0ccdae25e03a6d5b14b93acd3cc799e2801e174ffc9bb618fcadb110b092166b
SHA512 0a052f4d4b2481ac9b1b9406fbe86213772cb3cca2285772a78878c748d695a80f179a7846f054b895aff7a06e32620f6caee801ef0b367dab3e9c3c28759e27

C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\zlibwapi.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 5343cc372d57c0971eba56ea1816951f
SHA1 ff964c8d2d4983412b4c409e7d7dc076cfc9915a
SHA256 9eb833fc381cf2a9c316422fc5a8f5dd464e875d4fdb07925d255b441270beb4
SHA512 38bc4f604818bd9a6c54b61bf0058779165069555de282621f23fa637d442a9cdf97c2e1cb204e881e3bff71feee8f6568c544c1112edc0809787467a8ef18aa

C:\Program Files\Microsoft Office\root\Templates\1033\ONENOTE\16\Stationery\BLANK.ONE.(MJ-ZK6471058239)([email protected]).zxc

MD5 a7c19fa7e790231549369b31d443aadf
SHA1 9d9d9073eec0cd17273ea4430aef89d882ac2dae
SHA256 e53707f6efa367ae58a2fd05c8c655db47ae6f603b4220758b3e872117265668
SHA512 11fc04783117dca307e8deb4e76c35874363f195593778b0c28ad216c9adf899ebe09ca47bd658f9a0a07a4343fe3f0c46839a1467357332cdc1ccf42ee90ebd

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\vccorlib140.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 6daad9f50c339d7f6d26ab21a859fd91
SHA1 fb130b5b98fd3de88617f4ca1d16b30819db6312
SHA256 d2dad2b2f995dcfe3630c70ee3a4b681a82733b25abb02c303a315393ad266fa
SHA512 519a0f069dafffeb4d5042f947d3e251c727684d0d5939ed2db87f990e6d8be5c6a3814e9a6ca23282b9391b9edd91209dd5f3b8eb432dc9ed15ae2ad9034e5e

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\EQUATION\ucrtbase.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 51900262a50574bb42d0bee15f25cbdd
SHA1 8d5d6a7c1f18e3c11b18a8c07b02a0b95dbb2e1b
SHA256 ca4d4bd6344dfef4e5ff356496665f1c78ec47b00ba7fc70047a83e67e25f9d7
SHA512 0053f15f193a2585f019e98e67c0a59d4e7b5d5401591bba7fcf96bf8ccd4da61a0c519e074d9e7b880e3bcfb0233365011cbd7cef2c2aa1fce38a966718b983

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\EQUATION\msvcr120.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 a2dc3ebe645577af2b21e2f2058b1b0a
SHA1 69d7afe6b979bd014e334f051d63e621dbb79a30
SHA256 11c9e880cd4f220fb14e98b5e5dd77709ae5f8cbfa9a4b52ed6e884cc92b4b0d
SHA512 b14e3b80af1423195ead234cced2072a2436ddc00b0696f3f76fc09b7b27e02ac0be3128de5c6d4f0b2179d90e7a3d10612effe4eb8b91509a5f5fb27bd96f5c

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\EQUATION\mfc140u.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 872925083ee85339897cba0fcbcd49c4
SHA1 106f15be82b41daf829af558b3821fa1eed16c4e
SHA256 543b5cb9d220f6d5a07da8e3febcb1f1e48f16164d54c8df9e3f9e590a9ae9d4
SHA512 cdeb53fbd0a5cccb4a033c09e92c36bc2f441fc6a592b06db62425c3970b060e6b8ac37305fe28c6d6248df7202390b2ec028c9285adeeaa78f0140980cd415b

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\SEGOEUISL.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 530487820698b4ccf8fb6232864afe13
SHA1 f5a1a06fd1bd7febcdd355680b5abe29d6218c9e
SHA256 6c06ee9b231edaed12747b304ebcf9c32647fe695cb444e3c2d5c9a6fd6dfd5f
SHA512 25ecf3f1b2e67a3c1bfaeced6bef9a8fd84e18a20253411838ad8e3693554cf0e0b61262683ad5266a7f953963a15391bb6ef263c205311b6db467bc35c71ea1

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Reflection.Metadata.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 5679f7a19a8d87feae62e4c3a6b26ca7
SHA1 8a9798c7ec3bb5f934620544dd96ba4ff6907794
SHA256 b38c2cb2f6e8fe2b6199074d3a507263c6c9fe1aab811e4ef514beac3bc9a7f5
SHA512 571c45c6f533e7ac54ac3d795c67749655c35dc5ca8af14df245770eb584e59058ee67d6a3118585c302d8f54abb141f700b6b9d8fc714245b8d7cdd1851dfdf

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\CalibriLI.ttf.(MJ-ZK6471058239)([email protected]).zxc

MD5 73c5aeed7c1dd914adc8d0129a23a0b5
SHA1 3f653f4fb54825e0414e5e3956f49bee032deb05
SHA256 fdfc161b752d14e1cb5b2fb790c088efb66ac0002f13c746844ab77c22053556
SHA512 1c9cd3abc2c0fd29a88fb9709b8e159ae80e3ac8a53f46aab7f3d2cd41fb5452309a6e412ef5198804e8560c8d2648676fd5f2d1951c4b59df643fc4770f8a6b

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\CalibriL.ttf.(MJ-ZK6471058239)([email protected]).zxc

MD5 47321c924656b6de0fd7d0e8751b54e2
SHA1 a5786e41d1d794c0ada4a2b1466c875630e080f2
SHA256 824cf04ecd1548f70a1be5bf4164828d90a58dfeed5e0301715f073079fa5d12
SHA512 a10d5a237fa3f7cd38832c393df2430d9ca36fd0f3a23866e41007dbb30169dce0defe8694fd6688c6102f4e0279d9cf0c24207ca2b6aa42f49a6babd9466bda

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\xmsrv_xl.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 19b993e605363926a380cdfff27d7987
SHA1 f9b1a32553225c1b33568e825646e7e704d80c16
SHA256 38f3fcca10cd8dd25f4504c3ba14ab926555439d7a7e30b00fc3e4656747c7b7
SHA512 cd9e91153518ddad29d62bedcdef91e2dc6c0b616415b7dfcbf3da77cc4215d8f17898a1a05f8196b8c2fa30d7a8c519632e31776d907e415b6daedbf99a6dfa

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\msolap_xl.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 a8ea2ac357b7f961dcc4f51610547f51
SHA1 36d25407a92c7ad1a1a160e26c5766761774c28c
SHA256 10fd82ec9efb670f9485f0079cacdff77f4012f5c50319d1319f21c3c5754e4a
SHA512 4edec507b02f62f081d398bbfc374fed3a62352306d19946377acce089e38c313743c9d08666dbbd19cadd808c194de1174c519b9153841c7d8f938dd4cd7489

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\msmgdsrv_xl.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 56717f2b1cd523059d9358e5de44b8bd
SHA1 0fcb736952f4fbc6684abd97587e3543bc4dbb7b
SHA256 bdbdabbd158e325cc392972500022204c0121d97ed89b6ce29a7859a5c940b16
SHA512 103b2446b5a00b4b40f280a8bd32af02c1a08899404de8ffa88f415f5a64b36d0d6418c231778352213e1bcd960672a44ac785772d46531ffb785a6fce06ca36

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Microsoft.Office.Excel.DataModel.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 78279f89eb833f03953da6ae64120422
SHA1 49370bdd03fc5503efc7e17928d9d5d67beab01d
SHA256 0459e080efee10a354e0fba45b043a6874511945993d095cc56d726a9fe963db
SHA512 5221b9b12617017afb3d8b97f4d037c63c5ceb3bcc8a552ad629e74e6086eaadfcef5a1af3c79585c595089cabae67730861edc0ec6144b3b7cef605717100b0

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\Mso40UIwin32client.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 b88eedcee3b943972ae962103aa012b9
SHA1 4dfc3f8fb6abe58d6dfdd9468e1df1a6e3679f33
SHA256 72a2dc0c13fd1a0053cabbd718a2205c30d4408ed8e2e276647ebd3d6214b4f6
SHA512 93298714da41b72f88e24d31704faa08207a7a2f9b38823e86bfb80a37c02596007603b74e39a840363a24897d4b60616bb095254ee454033e6579688e9b4057

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\Mso30win32client.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 f726c2ae954a3168a220408c21f5b271
SHA1 8f8edf2c8ce894d425d7fd78dfca67b573a96cc5
SHA256 a77479af431b22c3440ebf8874fc9d46c34aa4fa0e592bc7ce1b3db3f5102667
SHA512 fae1dd8c6d4921b221b23cedf1d3acf675dded92a04faedfa32f017e8c318c2e34aee770c530ddca124269089ae4d14a78da05e8173f5e19472956aa72b206f2

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\Mso20win32client.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 f26979f898d9229f5022bc27388e90ac
SHA1 b33fb0856ddfea9476058dc00035f92f245ecfb2
SHA256 c6f1aba0a8f4e70f54b0fff04f8bbbff1fdbd5a32acae5a5f9e8acf4cf1f72e8
SHA512 35a62f469e99a800662b6e905d1fd491987f414b6a2797d4849c5f974ceb09eb4aa3b5ad7ba972c090547d629647b86aef5c654cda8c7dad204683e5b6f2d7e8

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSO.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 3a382d94aee2293070af3e3c63ed1a95
SHA1 b847961aca0389e40f7000570e8ca7f0bc860a31
SHA256 f71a126c83feee936a2cf1b9f752a7976fbce63db9c73e00f616f70d2dd26f5d
SHA512 b36739f446902a529e10d99bf38d1af8542647d81f9b6018319f08ea69de6bbc560e56ac595b8f23ff5cc83211a8ab70eb78bae0df7e9ddcaf1bd30e9fbf4740

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\mfc140u.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 3794a5a505de14b1dca2b1416acd92c8
SHA1 c9ef1995cc4a67266b4d1f27221074fa80dbc0e4
SHA256 9227140bc7e7abdc8974a5b0996a7dba20c43c02ab6af5b445e7dcabc82bd58b
SHA512 49ff27750bfae623978c61646436adc48df5a7f9c8aa70d8fe3c317ecfa78a134ffd21380bb7a172414ad01ae476490c0cf7bcf1d7350da3a22ee02225334489

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\Csi.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 b81aa75179ff1e1d70784295822d6f35
SHA1 1a166b010f4898ae3d2a0dee57588e9000525b34
SHA256 acede830a5ffe86429f3c1d0d9dc5de4e1472b7cb5824494c7575fcec983a8a9
SHA512 6e014310ed1657623b4ea85eb8d9de78f49efce126b39b36bb9e43b94f70e04a3e8b5e5f7774946c4f637de180f03160472cfe049400d09e82675af05a04700a

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\concrt140.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 2ec49266f6a5cd29e8d27632eec3009e
SHA1 577d724b5c5fb75511e1f67e7e2f333dc5c9ae62
SHA256 93b360d6d6e51308e3de1e89419ae83ef0d9f7b4b552269ae79bf7737de82efc
SHA512 961f2d98c50d58101bd7f4c92f161db340626c8cd039926623f4409fcc6b8cc7a2f37b66badb55cb37d8f0b6dba12e83d9422af448df0adc2ef3c31adb8617af

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\AirSpace.Etw.man.(MJ-ZK6471058239)([email protected]).zxc

MD5 7f6c2c50cc0ec5bb97a3b25648014fed
SHA1 a3d19e9a7c189b3cbb50197a87863d15f9db01ae
SHA256 e99e2523c825c2efac34e8b99acb948c4fb78c17a366eaeb3de6a3a361f37a71
SHA512 2d08b7c83d870fb2157442ec7273dfff17e42bef58118dbd3e974d5daa306408c754835ac7527853f65900756644c43d7b6305bf7719f2214c5811453ab60520

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\BOOKOS.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 fe4a9f9266a6bd49f39a728e30503705
SHA1 f2402674b7fd715edeaa0eb4521dd05f5cf16212
SHA256 d868d32045d615831deedfbee5adfe7eecc9ca4e6868870ac267630ac93b54fb
SHA512 c9b641e4e0fb88833355156c39aafec4e42a78ba4f54542c5aa0d597457e725ab7e19755516f2cfbc4c9e454fcbe50c51582fdff5b5a6204a1efa8c3ddfdfe71

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\MSYHBD.TTC.(MJ-ZK6471058239)([email protected]).zxc

MD5 86b0c22c5135d9326a29d6993573fc97
SHA1 9eb4cbe1b0e0b27963ff9a257d8c75fda8fe6991
SHA256 e7c8ad97a1397a932727d920b51c67a45679026b9bec04661ad71e297606a4c8
SHA512 4b21647b94290d94cae56e47ebd99ba1b568491b8a0835046cdf2cb94dd1a00f01758fe171323a7cb7555cd4581c61afed1f89b916a6c5c7d950b81519499743

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\MSYH.TTC.(MJ-ZK6471058239)([email protected]).zxc

MD5 7a1cd356de17de17c76891afa17fc540
SHA1 92e0e914e48dd5b9a32293061b2c3776919ede0d
SHA256 51b87e53048bf0c7970d120b036d4b387437cacadf2641cf053e24558ea9f17c
SHA512 7d911b5608a031b6aaecff48db5e0e5941667e5320396c18cc760c7108a3e31f718d30d80a6949a01eeb10689fc2428c19581806c1044a8e3646bea8ad5993ba

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\MSJHBD.TTC.(MJ-ZK6471058239)([email protected]).zxc

MD5 6308153e8f04279f5699f665ebc4cc06
SHA1 26df98e96f65657c3598ae37eff3dd39b9e84f07
SHA256 d566d28fcb5d482922ac358b935c5ae143a8ca6b455a87e8de9af5ef885e57ef
SHA512 efd0f8128344159d950218d103c8a0ffa56b7ff8fd1d03a9f17016831b7bf3fd121dbad1553f040e78f1b709255a376107264354de5440a13c189d670dfd12e4

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\MSJH.TTC.(MJ-ZK6471058239)([email protected]).zxc

MD5 04c2eaf39f0b084c77cbd9fe6040e2fc
SHA1 7cc1e72dcb8c530231396a13349fa2a01035da47
SHA256 4f80b1b8ab839a80754da372a49ca84a665538f8c7a5cfcdbc5e2b35b824873b
SHA512 296388fb3e19cd5a1965fb1bac4c893fe1c7521acee36746a8c324445379a1e76e5ce8cc2e9befc8dc6d49253a482701d26cfdc468cbcd7b4b230f29b998bbe6

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\BKANT.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 b590ce6487606d5ddc262cdf482d2bc9
SHA1 b8d762095cadbd19eaaa2bf93f50877a1c2f55dc
SHA256 fd13ac50153827a8abb7346ddf8c9517c3db86fc6b6a4b0551590cf59c9b66b2
SHA512 0c6d53fd1aec7db526f933d8636f498da48dab354efae8ae8095dc6550e90d79bcd9e8b5b96780102cf82c4e4664c69c8a83faf77d0737cd605ba23ae65201af

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\ARIALNI.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 8b58d603a16bb9537516441d03476d68
SHA1 1c957f1b614abad95a461d935f73b23807d2bf38
SHA256 8676dd94e7ae1aa6c94203c8d7e6dd71fcb4b2b7d09ab29816a48dfcf42d54cf
SHA512 23758cca3a14c93b1d5cc607b58b05dd5fe5f2bf72ee1cfc08c9a0311b57bfddcbe4d8a6b6a724b1a35c66fe310f32450167f6f484350c28d213eb582fb4355d

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\ARIALNBI.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 2aeae8a880a61dc275daeba5dd5db99a
SHA1 3b6291235b814b9d37adfdcc28b9eabed0b01bb8
SHA256 f00030130cdde92578e89557177989acefe33ab3203c39c3e4458ee4e1f03464
SHA512 e9951ce6f7eb66c565ffe9c9615b0f40cf05446abfe6d9fba4f8adfa0caad811f8377cd0282149dad17de59d99340c90df52ae344e219155d2cbf636e8315cdb

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\ARIALNB.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 b5605279c105d71bd57667c6d2b30907
SHA1 8f828cff7bcdefd105145ca4e22641e051f2bf17
SHA256 5caf55a93c6b9e0f7e779d953f2b32dd2e729752a8b8dfb0d90c716ac58edf91
SHA512 a6c09b457f839b750f6f2a14289595dae423caa414ffeca6000d568321a75fd0bce5a6119388d81d9b9bf7d98865be125999510fb87961ec0346143a00c621d4

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\ARIALN.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 a9fee254cf98dc1b26faa58ca5e1fa83
SHA1 95ac4c0a11b9d8483869cc1c7aa9dea0e738e1e3
SHA256 7ca83f7b3f7202e578523b9b10b39a04fedf71c1dda33fa95bae6c2e1a20ca69
SHA512 a5a0f4289b120ef37cbb6b5190acb47c9079ea6519d5554ca70b214753ff0f38bb2d6ac7dedb9aebd7712d9dabc5e8b17a062965434f3ef961b29479edb54781

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\ANTQUABI.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 12cacd6ab8b781a6030041f94c2f2d3f
SHA1 e541bf748e8956350597e216c3026edfa2baa75b
SHA256 7b5112b8b1b05c002411844118950006110731e13c2be77fb701322e0f0b6be5
SHA512 5001b1b8030addddb09b9565bbd16778de292823ec81ba576128f5ecbac44a96b771c7af731dbd7fa461d3fa9c952e27d302cf391aa19828c8e19a8620d3fba2

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\ANTQUAB.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 56ff9d9a4758734fb105108968b84f7e
SHA1 279eb4e4bfd2393db7f2eafe6f23a069f67a0e99
SHA256 f92a5f28fd3d0d77e9a164bb154fe1e135827931abe966077b8a72f9733dcc47
SHA512 32b2733a38b4463da52ec658963a321aecf0f91fab6dff1ddaf1f685ba74a04acdd0083690d7ba09b69b8c0e3c78934e3d6e080bdbbcfa965a1e40ba433f7830

C:\Program Files\Microsoft Office\root\Templates\1033\WidescreenPresentation.potx.(MJ-ZK6471058239)([email protected]).zxc

MD5 b8f496b5b7542cafcdfecc9cdce2ddaa
SHA1 4d6385f5dac3352db228a31a74a0ea09a6f85867
SHA256 e856ac598bedc41316287ad049e0f277da12c71430e7b98221fd55d526c03143
SHA512 21e4c56683e47b183d36c9d108549deb501916642f518575daff4dc3db687d9b8535d311e02a003b4ee3f9f6f60a0e6f83cb8a914ec70cff6430193439832121

C:\Program Files\Microsoft Office\root\Templates\1033\Pitchbook.potx.(MJ-ZK6471058239)([email protected]).zxc

MD5 f5ee148fc6b31556872609ff80166b80
SHA1 1e5e25ac5cbcf1230432b306bf4ad59f98cb05ed
SHA256 4ebaba762618c2054b58ebe4f5b924b0c0d00bb9cc91424810666d119201bc2a
SHA512 92ae437d05bff58af958107671de488b0fce6969b752c99f796f9fe5912607e7b12d0c428bacad3ccec95b273879c8d8305a4c69c203d5de6cf3d756cd5685e4

C:\Program Files\Microsoft Office\root\Templates\1033\ApothecaryLetter.dotx.(MJ-ZK6471058239)([email protected]).zxc

MD5 abc47c5c3c1571b770f9459a5c4c1f3b
SHA1 2ad0695cd71ad5ef04994230bed7e207af8850ef
SHA256 23c16a65cdeed3de1724e1944b24699c9b55d8dda85653a3a0f16e38800faa63
SHA512 4a3d4ef56d80b4d0ba0bad3dd3e283d88cf80bf89b12a25c01ae0438cd3ee06bfcb7cb267f79c2dcf101b0b34f5708fcbd7d9f84dbe206b1b31fed27081d916f

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Private.DataContractSerialization.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 4354b419d8bec4fbfa1626868f0ca0ed
SHA1 7efc0159f74db72156f0be43c2eedbbc0991abbc
SHA256 e362b27da21e13eeeeec362d3ac68663120ff44aabed12edaaf3309707914181
SHA512 2665c4e421954d284806d0c3b8a69fff0401a6527bb48a9cc4616a56e7672c00eae82bbf86603be2efd1db714bdf3bccc95ab371e6b57457467e18f66bef9b11

C:\Program Files\Microsoft Office\root\rsod\dcf.x-none.msi.16.x-none.tree.dat.(MJ-ZK6471058239)([email protected]).zxc

MD5 90a163e651bd04de48e267af84dc0dba
SHA1 04da960e73bf9d66c3f9a0b1327e2e64dafd6bcd
SHA256 f2aedcbcf1af2bdf616238f57dbab380bb165da55d8275bfa21a02deaadcc1b8
SHA512 5ac8f05896b10210fb65775966cabbb79ecfaba33ec8eed46e6e63c4ba945fe3a6ff205f45059d461c327133572449c5ccb4ff21bd9245270ecbeb4ef90e6b0e

C:\Program Files\Microsoft Office\root\Office16\SkypeSrv\SFBAPPSDK.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 06518349c3fbd573483f79abe67be5e8
SHA1 828705d1e2a2a82c1d59b2b15d613f1554362f60
SHA256 b0de6e1939e292561f5524d51297b37c7f8eea44b791b76c4b851ef85e902f37
SHA512 c3a4c9fd7a137c82ffdcec9e4e60b5ead527543b70c6e7e145367a1dced5a2b4443a3b2945258e7f84df6c54476b6ea06a59e1477eb9e5b2bb2dd7a465e559a9

C:\Program Files\Microsoft Office\root\Templates\1033\StudentReport.dotx.(MJ-ZK6471058239)([email protected]).zxc

MD5 80ecfcc4722dabc02be1bf544867bf65
SHA1 690d22c9cd8c0fcddd94a33a4010b981a32b6dd5
SHA256 3745b223675a146226e3c2a224f961d167fda54222429255d73cd79c41409808
SHA512 f51d9e207e392cf3382f3f2247748defa29198ac6c6553bf252ab2dfca1631ed3b3efa356e9e1986d69cccea27aa1038648bd892a14347161e049a538c3cd222

C:\Program Files\Microsoft Office\root\Templates\1033\EssentialReport.dotx.(MJ-ZK6471058239)([email protected]).zxc

MD5 abf423f49c12bbc1b8c0706599b21368
SHA1 8523350ef82e256d9bad4920badf0309a6a8e210
SHA256 eccac1f3cce1903ab09766ac3a842397428d65269469335386e9602c1610aa45
SHA512 d828fb5c8eeef6f19e845945601f823896cd922721385efc86db54dd3f15783536f7a45760386ccc5addf8c52190dba462e6e420eb0e15bcad1466060a807e9b

C:\Program Files\Microsoft Office\root\Templates\1033\ContemporaryPhotoAlbum.potx.(MJ-ZK6471058239)([email protected]).zxc

MD5 373227c9ec4e8f8de2ac68ce5cd62664
SHA1 8fdc2ad8a7bf34a39d79e77a791b14b776c608fc
SHA256 a5bb1e45c906a67a50e7ca3af05a2c559fa5ef07ee72132f026fd966116c1d02
SHA512 5960846d9dac441beffdb7b5fb1c9aceaadd428d5414b08928630a2189bbe75654f8d5f81e2b5e953868039dc8fedca63d325c3671c185fc381ac6ad1191b77f

C:\Program Files\Microsoft Office\root\rsod\office.x-none.msi.16.x-none.boot.tree.dat.(MJ-ZK6471058239)([email protected]).zxc

MD5 b097c340754d54d77baf9345b304a2d7
SHA1 dc3a3ffcf10915ea679673f6bb2d15a5d1ec78ff
SHA256 b23fac9b2324cb64f140b41aac1cf6c3e7db57aa914947f38fc545959d028f4d
SHA512 84c53c0baed37c53ec0ee58067082440a7a26becb993fa782789d5d7f8544fea78102311b1a077c454a60ec1e08fd721c06ae46407dfdd2bc20166d3fdacdffe

C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000049\index.win32.stats.json.(MJ-ZK6471058239)([email protected]).zxc

MD5 35529e28d706289254b9c89b901667a7
SHA1 93cda5601af6047680518018ba291e5c403d61e1
SHA256 21d9d9e136461f148da81f6035271939149f25c0222e07c5aa9372b392d50ef1
SHA512 375ee9b431aa2c07a44d5bb9944130c48ffdaf18caa8861a58b9febfbfd694982cb55434b6ec7c91c1481bdf842ff542dda88fa9ad5481e19f0b06d7a299268c

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Net.Http.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 7d30a9e8ad0819b35dcf31576da92fa9
SHA1 3ad00b691af57c8241f3dec8099cbe4b69c1b86e
SHA256 0169c10476ec30e9e3608c4bf91f0e2a235f0e4573e567b4b7ef90bc55bf0457
SHA512 e865287ad1e772559e26a06dfa77b5a63dd8dabb2881ef08210bce472d7b4f50e6ba7a594311469d6d476c5ae9a1db9f56da98b12d6f897a0231c5437c9291a2

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Linq.Expressions.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 137f6fdabc18b91275a55d342ae06ea6
SHA1 091e30ad1e0073e751bbce2765edc187bea46546
SHA256 94162bbaba7d1e6366c5b0016e106582ce80671cfc33f1f92d7dd3e8f4f45059
SHA512 14d7a9066c51c019d73fe80973cd43cbc37949a476aae9d5453af74a10435d02292850e944872700afc89dfc121854e43a68fc2e1115e9ab53c7382946a75835

C:\Program Files\Microsoft Office\root\Office16\PROOF\msth8FR.LEX.(MJ-ZK6471058239)([email protected]).zxc

MD5 77256d69a78bb42d1020505870854010
SHA1 37eff98f79b4f97308043d8bbfaa7b17b139d520
SHA256 8269d8d90257d5919b241917425c835ac85245e2ae3cad641a096b37c81bdcb4
SHA512 3d1cb99d59df3fdd613fc89910d0e7ea67590d78b9a8c590ac11c5b1c3d054b97ecd9812a8263e0eac080927787145b84f965caec8477edc9f4d8e260f3ffa86

C:\Program Files\Microsoft Office\root\Office16\PROOF\MSSP7FR.LEX.(MJ-ZK6471058239)([email protected]).zxc

MD5 0e29638b7919f4da976a2d7cab54755a
SHA1 3ad7e225f7334ec5d905f95e800c27fafaff1bf3
SHA256 907c2aebf65815c073230281a31a76913567ea7f36c1b20ae4a6612bcadefb87
SHA512 6e73758dc89ed31501e0ec2941ab675bb4201e22be189df509328bb034757bd780fd20d7207f1140ea5030a326965e8af9dace5c63545b25969e7cc32246487a

C:\Program Files\Microsoft Office\root\Office16\PROOF\MSHY7FR.LEX.(MJ-ZK6471058239)([email protected]).zxc

MD5 684c2d42f0400d0ef3625f734f521259
SHA1 cb35e852cc2339445c2d99a8bc168fbe01a55bac
SHA256 ae0401e653b2e3684c0ddacc7c4a27f0d2fddcc6a92951807ecc0ccfcbae120a
SHA512 50a69cde37fee6bee6ddc06cddb643789238f6bdd94506cab4aec1b6e0fc847b526e778c049f7f8d4f6afe26138e802a47da237e17189cb8683e65e78836801e

C:\Program Files\Microsoft Office\root\Office16\PROOF\MSHY7EN.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 2819240441701bfddc1ea774d3bcc8ab
SHA1 d9bc911aab5cc549582e07de14315f54bdfdedad
SHA256 50028d9fe0f69d2ecd57cc81c9c6f9f4f1a81e72ffa7a9358da14a35415ba0e7
SHA512 814f3124da3a7a6e03e5a420487458f877f58d9d04531a3ca35a057f0f6ec7971505249076a42019de7c37d7cc29efbfa63181e4a81a9639c4e0661c95316477

C:\Program Files\Microsoft Office\root\Office16\PROOF\LTSHYPH_FR.LEX.(MJ-ZK6471058239)([email protected]).zxc

MD5 a9d5bc35f3cc03209360cb82d6aae435
SHA1 b99c20eb8ea983b2c40645db25ae9548ab24c075
SHA256 a90ebbaf9792902d7e5bbd36c357d78427c6b7688c43d0e5d285b7fbf0f1bd25
SHA512 c64b2568dc623348b4534f02832e69ec89260c847056eb8b9b773523cf03b04d3105691347bc4134a142de234812c2507ff64f9acdb45ffe0b770baa8d79cf0a

C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGMN111.XML.(MJ-ZK6471058239)([email protected]).zxc

MD5 5c48050ed7d71391355291ba58a53a4c
SHA1 31e8f26c1b50331cc374198b898bc7a2bde2f994
SHA256 7d1813a2c66bed8c0d06523231695a46c95b2ad7f1fa52c96f9702d8a06543ab
SHA512 6d6d5950156497cb6e141878ad561f7b9a9b27008d813efd2a2cf87fdc7772250a0321fecae41c8a7bc8d67afeee18fbc6fef2c698e754fd0907a8a68ef7ea26

C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\comments.win32.bundle.(MJ-ZK6471058239)([email protected]).zxc

MD5 f2a156ae228a8cfcc44325264654c21d
SHA1 510def0c2250cf89dab76876fc9806eaf60bfd4a
SHA256 ea472c8d464c565ce5564b83c475114767047da90f700667b89434defa51f079
SHA512 0351f16b8542bb67d3069bfc91e3d2d4c826ace3039cf7870a8b2de53f6cec12c38eb89b11eee1a9b1e39f69756535c1c786e327d100ac8a3c51cd883d54f527

C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGMN082.XML.(MJ-ZK6471058239)([email protected]).zxc

MD5 8d1c7056e522e41e820a3168c35632e8
SHA1 8a29ddbca42c246b489838b04e2db38e39d08c20
SHA256 e73205d76770482c1e8ccf1385469e8e391b911f5db5b86b54d39bc7cb849be3
SHA512 7ffb45bde3c9a91c471890ad40fef1112ea7021a7adf24b41661ea27fa06aa858717430f24f7944531d5408bad6e6a434fcc165b5aa3999889791d85c7553656

C:\Program Files\Microsoft Office\root\Office16\PROOF\msspell7.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 89d53ba4e9411bbd53985da8c35af020
SHA1 9a5da15ba8732c454ca7fe4da10f3d343ad6e918
SHA256 4065db75043616f2c08e75313d8725e0e3516bdd96aaf5d04caedd6bab352d48
SHA512 f115b95d359b0967a42979f66bee37ff061779031ee5d2f9cace5a4d695bf7c27e069a86323d9dba893a6a6d1499b9cfd886bbb1e9942e8146773d0ebb2a5dde

C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL111.XML.(MJ-ZK6471058239)([email protected]).zxc

MD5 ca77e6af3f9ea3b8da78fa0e04d6be3b
SHA1 51e9c2c7e6c5ea8fa3482eced407c592565701c6
SHA256 be3e62fcb8626a0a6e11f249491c178dd49312ae84e50cf5072b3022c9f3cf5a
SHA512 efbf983e3830bccbd9879f4c45586acfb2a3c3660f60b71a240175a415036cb1e2734da6cfeb3a58f99ce63d3bb24bfa0cb476c40cef38ac56a617e23f7f1dfc

C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL095.XML.(MJ-ZK6471058239)([email protected]).zxc

MD5 072ca0a949b097b7c884b56a78efe5ff
SHA1 e8ca616d267080230df5566fa8f59a95716686bf
SHA256 998cfb3a1f65ac383b6f6f5ea6a2a48d6c6705a452ffe0a6cd2966fa265d54d7
SHA512 0608543e3c6035711ce3c69f931cfbe069215d05825d9aff77feca57c9de9566466a537ec1c46faa8f1af9005f99d12cde26ad481d1a69bd8f3b4c746a2c4a8f

C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL082.XML.(MJ-ZK6471058239)([email protected]).zxc

MD5 436bab63575a56b73b752eb3d15b6b2e
SHA1 b785fc55a0ebfc2b768cb02a64485a1492cbec59
SHA256 cec618c58f0f9fc7365fe2fe4363303bab13e76dc161c940ba46f87d412f8ff3
SHA512 a542eef285f4b6376f4d51918c9ae3c9f3e5ee01c8eaf40391d8bb6a9298877c85d56c726bcffb423811f8a3c59c4af59481b44cb4d5b0ff724c097ffcb9468d

C:\Program Files\Microsoft Office\root\Office16\PROOF\MSGR8FR.LEX.(MJ-ZK6471058239)([email protected]).zxc

MD5 508ea78cfe69fdf840e171ccd5e75aab
SHA1 7b71d015e5dbc485380e002fbed4930843b3ef53
SHA256 a92b87fff65c673741a2f2701f2b8de42cd7b97dbfe09af82748376b0b175b2b
SHA512 7af3e073b5c3261acede6e30570e44fb2025be35b29ec1b7f0dba08deee458dffc98668dc66a30ff6b73b43d07865af043821689e4b013e8946075637c16360c

C:\Program Files\Microsoft Office\root\Office16\PROOF\MSGR8ES.LEX.(MJ-ZK6471058239)([email protected]).zxc

MD5 45d9c02758cdae590da8298645c5cb14
SHA1 506b291a7b2e1b682d3baed2dfc31e6eda047964
SHA256 f641e9397aa021c24857cbe0b81f1a795f31699ce8f24a084f5c88ef058aa2d9
SHA512 4c3d33700399329c0197176d3fbfec9066116bc502b275a61001d5eb969f476197714abad997262b90d2deb547c89b1fd8fd5d8458d37c647b490935cd21e37c

C:\Program Files\Microsoft Office\root\Office16\PROOF\MSGR8EN.LEX.(MJ-ZK6471058239)([email protected]).zxc

MD5 eed764fc65a8122c63ec2684b7434199
SHA1 7255f38d0ba7dd03f1da13a5beeda1455613f98e
SHA256 d5892062386ea9a200c1ac46d648c278a16461df15bcd332d516696c869a2108
SHA512 8cf43cbb9c1c60dcfa040fb0172572dfa7a2f56d063b548e9d6bbd3f1d586ce4adffa17b7f80dd729f174e7fd7ef5ff3a8bfc3bd9eeb4b810c2f63f24313ed64

C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL010.XML.(MJ-ZK6471058239)([email protected]).zxc

MD5 f22fa0bb4d4eb9122a9b7a3360625e85
SHA1 2932a8ded811dcd239d3431c4193ada65f4fabd5
SHA256 b9eba299eb808bb0da3107cb1341dcee335495aaef198d78edf95a539278f8f6
SHA512 e96ff0b5bcf08ac7c6f696d3c720962c77897d48bafef6d8dd275ce3c6ef5dbba1bb2d3aed7629a1134756d25131be1ed05f75357a732e3cd75a47c3c92c7f56

C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL64.DllA\zlibwapi.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 88355df8aa89a080cd7fddd5a3900939
SHA1 132630615e3f00b7574dcb5a14af21b1c334f8d4
SHA256 3863372194da2ab3148fc88ecb08a4c9618daa4cbd190858a8e5d43c5c136361
SHA512 27ff6b68e51a94550ddc4a1ff364958aa1e3e02aad25d43242ec9876c6e4804bc58d42063e3500ea654b00866dd0d3390655233604b8ad10990c82d555cf8169

C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL118.XML.(MJ-ZK6471058239)([email protected]).zxc

MD5 82d4e948b6d8ac23e98cd1f593f2f3ee
SHA1 1893fc64d002b6be17d3b03e10ee5535b9b97623
SHA256 8cd66b5c289e70c41a477cc52162bf4446b4be435230bdba3adfb80ad0abe2e6
SHA512 ce755155ce0e643ffd3c552085c18b011d887317f2ff7df8ea5f5c8e03595d81b80225deba6f49ac890c54e625f88d74a347ae2e88cef4db19bfafb14465b3dc

C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL108.XML.(MJ-ZK6471058239)([email protected]).zxc

MD5 86a3add2c879962683f0b99ce314258c
SHA1 05d340b48b93b99173a50a5edb61482463f32569
SHA256 b8c235db720bb49c1f97c477691d1ff6df53039974adeca15a3930743f4b7fa7
SHA512 1f501f269a427790a625b5ef2ce1bb880ece81296302e8f97d33cec58a39d378f88dad4c2bd5cecf7d2b149b40095ad21a4835d2db8229e4431b99ed33591c77

C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL103.XML.(MJ-ZK6471058239)([email protected]).zxc

MD5 f05f3d6f9a860c3a3b29e010604c9957
SHA1 720035154536acf6c5646cc51ba937cf259c8824
SHA256 ed6ad3ffaac396dce373b6dac37a7e96572c42c587c32824c0098afcbc29a0db
SHA512 1342cd28b81e29b8b9cd82529728c61b95ca95d0f5dd4e81158f24cc31904e05c765cbacdb13048da606c5d4f2d2ac38f9bbe67b2f591db7e60e31373ef4cdd9

C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL058.XML.(MJ-ZK6471058239)([email protected]).zxc

MD5 f424b924895ce70f319ffbdb80e53fa3
SHA1 586ac3f1ec6670265bf446d8af9da78ad7edd17d
SHA256 5c9f53115eb484ac89a0641c6de1c10597ea71d7f5af4e8c0f1cfe4e757a8f1e
SHA512 990b264207614c7dda81c02ad075dc1a4c640afa5a25715bb78133226d0eb83c1788d18741b2dd6f765b83810e542ec161779813e7d0bcd7e248198c8cc726e0

C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL044.XML.(MJ-ZK6471058239)([email protected]).zxc

MD5 c82edf09afe63ff6d0a5352dfa9bffc4
SHA1 50b688f8a14f0dc70a71988ecfea61a6f61df8e5
SHA256 5c3f7b407b24772af903022fda7e1daa0c7056cf382c7a59d94bf3a8f6a4cbee
SHA512 5e7a291312d397cc1f8065ceff89c083bed5ae319fa287ad24680f35e4cfe86f58ddf536c4838bb5ecf5b0aae91bfcbf8baafcb17dc44d4f8d9568fe3a47da5d

C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL022.XML.(MJ-ZK6471058239)([email protected]).zxc

MD5 4cf258d4aab96ad17445374fb0f13041
SHA1 305e5936ec5fd92b26bf9e7c8aa9fbd3b4a5eddf
SHA256 63f8bca7dfdc03e007edcdf6c664abadd2c6fe2b5320797e24931714f573ab19
SHA512 10dfc86e01d3fc6aae09bc009695664b8938bd9a0aff40758ecfbcbcf3d24f20494e3d048e240a5cbdf5b2f79b3e39e9032224c0c84a403ebd9cabf7db069cfa

C:\Program Files\Microsoft Office\root\Office16\OneNote\SendToOneNoteFilter.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 bdb4ffb0108194fff944a14d4d1aaae6
SHA1 77579d019152a0719077add8fd5f90dbe8eef762
SHA256 f85d70c8ddbaf10c08ff4233c149f998d8dbe33d223b19c39a167b81f7bfcccb
SHA512 d4611de70bbc9ff85f8d93158d9efbfc3f3fcfeec4fae47680916bff1e56131ec51511a8346c7ebe2447a2ed9a97b159c68c6654c05b3b25d25b86befcda4213

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ACEXBE.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 133c9b63fba19a5f8f4e0979ce31fbbd
SHA1 86e2a92afce3b8f2b2f13a4e1bb495ceba27ff42
SHA256 626e0c0366751c3005e68e15721f27053f9db4463400c00236caa9c68b830cda
SHA512 0b8fa6356aa467c9b1e5aab36e43a52973350fde19b83a62dd066cd082c308d1b0fcc9652b56ee8f360560031919171bfdd9085f5ab4ba1ac38b81f9c9d3cf8b

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ACEODBC.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 4ecc257f731f0a2e8fc3b86d7f01ba90
SHA1 7e5fc433bc9cdba89eec1d6a45eaa48e27315363
SHA256 118775f105e67282b13a76238325ad6f4616a7dbb924813defa1485c52bfe17c
SHA512 cef57f157dfea2aa4fdf8bc899e19f8dd599769461ab924ca9714e3b992045cd3802326d88336c3117fef3fce2d3129e6bec9d8ddec2f40343d133a7b3825e72

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ACEODATASERVICE.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 529bf871d4a35b68057d82219bc3c5a4
SHA1 eec5cb3f415c1e929c758dbc2ae45f304b023160
SHA256 b422482f1553edd5f3d43e0d78231af532a3f0a29bed4f277d7941c99983eb99
SHA512 cc25ca9b9a8483441328cf939fb73c1f0538ac3a1c3042da282c0e1e50f61f8331c03b54ebe6fceb5683065d7e3b196c600efb4bab3041a60365e186e82532b5

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\EQUATION\msvcp140.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 36706b05f1698f63a789fc27cf3f8ae0
SHA1 3221521efd83a2906b6431aa47c21d40f1e393da
SHA256 23a7748f6932198e7b4019a44c0606cb860de1e318e686790b91840b474a2c9f
SHA512 78cbb4d7194745ebcf0b830268db026c467864fefdb7c73865cd9d6a4f6ace3f00f82213ccd876ecef4826b7a809fe31464e37d547f65e2d7cff9eddeda78440

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\DW\DWTRIG20.EXE.(MJ-ZK6471058239)([email protected]).zxc

MD5 f52957f143bda47e7e3d9660aa08d3ea
SHA1 a8f0de821e79885204d6c3e337e0a7db2d97afc3
SHA256 d58791894dd8e3b4c1e3c3340d058f6816574357bb0bf1bc19c4795b9dfe447a
SHA512 7bf58b86c83fe1b6dae82b5d28fee49a492d06b818e968de8b8da0cbbcd50e6b357f9f21953a60cd372be6ca98792c0f2d30cfac4a71a07a2078d9e62813558e

C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL110.XML.(MJ-ZK6471058239)([email protected]).zxc

MD5 dbbfaada82fae665b2d4171dba3f9d46
SHA1 71512566d898247af58cdcf2c5d3b03e17550115
SHA256 2f62b1790aafd984a2e525af3ed4b2d9f0431dea0249238fe682a6f427e05e42
SHA512 770cb0774819b15038d40d633e7f17c2e8d5427355958c7ff14d0d16528f6f78413457508e9a711eb274c7f9fbfcf428a57fb952b3079bc143c0bef01834ba80

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.ComponentModel.Annotations.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 feedf317cf4dc8a2643e24f2bd978c40
SHA1 1b718e57f0998531172d130e80b776e2866f2707
SHA256 4f8c29e711502af520a65c8eac8acd21e3cce281730aea3967ce86be3d161f94
SHA512 aa9325dd291fcd847408ccb363e7742a8a2a809d87d6609910b6b6770ffc18ae78b5a895128e3bebddc7bdae510758f480d24813efa032299523ac499323b31a

C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL086.XML.(MJ-ZK6471058239)([email protected]).zxc

MD5 44ea960d9f482ae0d23a8982ba6133f2
SHA1 110ddb49f6f409cce191f4102b08314f2e1f9745
SHA256 b39f09c9be416e6816d45a914ca32073e4677f70b7e9d112ca292c247a89e644
SHA512 3f7dad9df513d71f616f1b8414cce353a1620bccb142c063eb6251f38b87db9a33ee800779a694bfb148819aee7785b3fad612c8c91520259f0bfef8137aa777

C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL075.XML.(MJ-ZK6471058239)([email protected]).zxc

MD5 78600546b4ae9397567f185e798a8ff8
SHA1 84f559068e3ffa2884709fea05d4613e7aa5dc4f
SHA256 546d168896b16640994bdb5b0b3a960feabcb2476dee9daf863c685f75f1915b
SHA512 f1d2204ce05dba201cdff847a085c27f83888851b4c10a1bc3545965ec9e25103717dba25d4e349d1c4aae500f10009f95d6c73eccfa317b3be3b0de80b26733

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Collections.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 ff32ee583e68e87709e2171fba33f4e8
SHA1 bdbfe40d01ac01b0f44a12f4f20875bbdd985e6e
SHA256 09ba8a72aef604e22400bdf120a8520eb07d3c51aa87eca086afd755ee7860b0
SHA512 fad2fe6a2ff4dc7a07ee31e7348b17b7ea29ce655e0d5cd20696aeef3d90091693eacc7cca03626100b30f12c01343d16bcf88edb30996348424f7793dc62f3b

C:\Program Files\Microsoft Office\root\Templates\1033\ONENOTE\16\Stationery\BUSINESS.ONE.(MJ-ZK6471058239)([email protected]).zxc

MD5 2387d6e995368dfec89a34c4d71f1392
SHA1 2f38e5c07b46f954f31f50bf34e11e4becca19f9
SHA256 5408ee14cb13f889d4d956a652e14e44beb9a18ae20e5c38b308aac4be912188
SHA512 b5aace7edd5d0217abbec4a3f857d29fc9a82f15b7ccb9bcc732348bdcb31ea46922f05c6e9a062da580f5aff87546b658dbcd824f74a1744e38dc0daaeaa4b8

C:\Program Files\Microsoft Office\root\Templates\1033\OriginReport.Dotx.(MJ-ZK6471058239)([email protected]).zxc

MD5 70acedaa5bf7062ca7543614e10a8737
SHA1 a84732bced634b15873901cd4561d1e329750695
SHA256 6e1949fb1870223f4b09f53b51909a5edd52a37e1e5027c5f57715bd5e3c56e2
SHA512 248ee5d07a7c7dab8b34ea38a4b304278227d61c42da7b649818ec442b43bf97bb2d45738ed2cb5ee5821b6a918da38694d0b084864a185b6af5c4a1aca93d52

C:\Program Files\Microsoft Office\root\rsod\word.x-none.msi.16.x-none.tree.dat.(MJ-ZK6471058239)([email protected]).zxc

MD5 ca1a891486edfd6d4a9a70db7456ae2d
SHA1 895210cd4c4e56246f27ed54c078d302bde48160
SHA256 6d94643cd0d8a7680a784c777ecd5828445a3d395abe6510eb0155d13d4c3f96
SHA512 82be35711579a0c1da95d112039d5b053c187dc1164fb30fb2ffaeae3c75f07d4185c6ec7786a094a494c1b8c14181b681c7c77329ddce00a691f3db393a4128

C:\Program Files\Microsoft Office\root\rsod\powerpoint.x-none.msi.16.x-none.tree.dat.(MJ-ZK6471058239)([email protected]).zxc

MD5 8ea2968c2c6496995fa4dfffa17132c5
SHA1 6592225cfde309f36ec8a711661b8f7abfa39458
SHA256 f94a0cabf230985169fca894b2a5b6ba4e869c4a40c248a84e0a33e02c489248
SHA512 2550c106b42cd440b038febb4991a7f71cd153eac5d06f1fdb24787a36b14b7af7a8960b7d2c7caa1683b2f01ba3f9b65054fad2eac867945d71352092ac8402

C:\Program Files\Microsoft Office\root\rsod\office32ww.msi.16.x-none.boot.tree.dat.(MJ-ZK6471058239)([email protected]).zxc

MD5 222f8dbc5ed2b683747bdb7f82376557
SHA1 55098ec9ece43d7b442bd906fae4e0d19acb7fdf
SHA256 1ef4cf294a98b721ae5978f137111da1a9b5fc9344ab13e525eba348e841d0e4
SHA512 b9dcb8319d764248c50dd2dd6521644f5c8a24f829de9ca746c61e7bb0052e1594ab47eec13cced0dfb8cd7129efc6306bab84f0225dbbb4c42c5919bb88ad33

C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000049\index.win32.bundle.map.(MJ-ZK6471058239)([email protected]).zxc

MD5 fd72fe620c304adb7ef3a69109f3a5bf
SHA1 2aaea24ff08412dbc1d6399f64419c5086b6d269
SHA256 37020cdb4175e03044264125a2519a77468fc8a3bc51cee7fc2b4b0e564e1be3
SHA512 bb09aad0dd42a5b13cb9e9e19cbdd3320fa0f0d4b9b756d22af91f75c212af822d99df8db9d256905c2dfd0b2a065c9768d901043aae9776638323367e30088f

C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000042\index.win32.stats.json.(MJ-ZK6471058239)([email protected]).zxc

MD5 57c4a26da4db20402aa31d0749cd3feb
SHA1 15186eb328b6397bd4252ceb8dcfa0e7ec51d008
SHA256 ce9ff4f402a3d6f2a4b8873ca3b236a533a5a21fe278ee5c3300019cd689ef1c
SHA512 a2b0d72dba574fc448a3d087c8dddbcee058b19c34c190c9e273cf3ee19f42e1d26df06678e3c92072530a854e9610840ef6355641c0594c2eb49e5f86e11f8a

C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000018\index.win32.bundle.(MJ-ZK6471058239)([email protected]).zxc

MD5 f3a5399880f93a5a9a91f92e9c561ea2
SHA1 e219d1ecc3c1b55dd5b32b4fec38bd6902e06d14
SHA256 316dbfb74579c04a571a741726efd18a4c35292dc74c656dd62ac0f53c7cb32f
SHA512 ca85834cd8d6ebe6044c8f9b7be60e0fe62cdf690d8561cd7a822492a6f632b875a8719afa257e9fa049718bc8a9eeb3c72eeb0f159b661c49d230a466f1844e

C:\Program Files\Microsoft Office\root\Office16\PROOF\msth8FR.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 23bd4eb5c74c002d47ba5b961484420b
SHA1 38f50a1d1edaf75000db254ad55618120cca97b0
SHA256 d9c74640b438a8a8a3f403d8fe8422e432431cbbafa4e96a285635fb055a2585
SHA512 4e6adcb6d34c4aa7a7b2bdcdc0f0dc05e77f8bcd71f229792f5297f3fb9d566bf95e8f4399393ecfc9748cd041e98c65cbe983d1ae429cb750482fdf6cb120a9

C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL012.XML.(MJ-ZK6471058239)([email protected]).zxc

MD5 d20872ab4afb9ccde25654cf234a6f8f
SHA1 26273121e0c103a16f9c1acc25cdb941f3fe6c37
SHA256 7cc192375b889d0ffcb2491ac40fce6e7ec202fd8d266b3078066e2b77dc23a7
SHA512 3fc257b61431b725ead2441e3e4a0ab4dbf18b06742b964b1a1665ad42640771d31b44c64475e51218df7d4ed147219f071a1200a4690055aa5f7af1f97d8c7f

C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\cacerts.pem.(MJ-ZK6471058239)([email protected]).zxc

MD5 becfa9e5bdd407b0b18cfec964da6b61
SHA1 7f9f5c11dea25f4ed367e66b1fcc0abe39cc0020
SHA256 f4e2239b845f605d037ac79e97296699e9eae21adb86f1bfbe785fa5d13e95ae
SHA512 66565cb06563d09e817c0ff4f0d2017d32b1b5020d7b98a5d5e2ec3173d65e406f8c4fb3838b54392d817cdfc5e3c2d0b9d87d61fca8fe5d17c38135566e6ca3

C:\Program Files\Microsoft Office\root\Office16\Library\SOLVER\SOLVER32.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 dc165c986fd3cd9374642504c540b102
SHA1 937a9e828edbff6c53b1df238d0d2128f891a75a
SHA256 bc424635187e6908d7ba6c7db5befd4539f3e822fb2197303af0f9b8d2f7e28f
SHA512 13669d06eeea290ab603ae4ee03a02eac7a3de211e0a634cc7c6aace55d1999af74bf4214b8e8b5318029c981606cb17cee95b3d80411791bdc6cd55e9f98ffa

C:\Program Files\Microsoft Office\root\Office16\Library\Analysis\ANALYS32.XLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 fca60fbfa4b3b07613fdd59d79c8853a
SHA1 89003ff849c29d0e124cf61206a29d04c7281e24
SHA256 54bbf43b769209dfd73aaa7757bdbe29d91488bd18ec037546bc962649f83b58
SHA512 0799cea20a412ec54525376d0775153159c319c6f89416e82a87bf94426066d2b825dfba9deeb7f4879737c1b24c1e33a78e85285918ff0de8df35dd05a2c379

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ONNXRuntime-0.5.X.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 01fece8bd2537afe655e3bb7f3f7da8b
SHA1 7f284446f55cdc912c81709dea26f13473a2145b
SHA256 106799c1fd552dba040b6621bd84d4b86b875d9a7b7d1074aa61392ef36066bd
SHA512 86f4eafc89d85cca9404e2690bac382cad5d54b024f4119a5cff7aff39e2709006affe57ff232ed697260324cc71598fa97dc4785e83d9d265405e61177f61ba

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\MISTRAL.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 c765768fbc1554df74a9ed83ef6d3e87
SHA1 4aec6c17c283d90bfdf7d2227db275d646d4394c
SHA256 34181957e687279d7aceef193b69a9c6d190a498c70dab77b91efd866f74520a
SHA512 66a45f1e187c7cf978e14931cd992703c8ffe154a56ae99f974ac80a2ec1500a3bdffcc1c27cb37c9d7426dbba26e9b7f7eef32ab315eb1a6ee395fdd9c06960

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\TRANSLAT\FREN\WT61FR.LEX.(MJ-ZK6471058239)([email protected]).zxc

MD5 2d240ac88435d9cf02394a26aedfee2b
SHA1 5a64dbeded4097b1a7f87d1731e4c0bc9be7a6eb
SHA256 76ecf42441579e4859ac7bd34c127ae9db79397d16804b82ec9ebbafcfb5ac27
SHA512 65918483cdf848d006d8043e11283a8c683be105ef03276ec6a723d67d72f89d352e14d5f8fa0b1a9794e0c5b6d3bed0f9b3712266fb2b9590e1f1a3369f50f8

C:\Program Files\Microsoft Office\root\vfs\System\atl110.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 2a5478760542842eb4b4bfb2d20590ed
SHA1 5b4e435e2af1fcc58819cab7bbeb70c7324a56c9
SHA256 8978d354ebe0f7ec7f886683c8d68998f4733e3bf06e1b871da37e19ace4bd06
SHA512 06b041028d69b6f333afb00b028bea8d1d5143b2a88ae3b95a2c853cf1c01f3b0780cf507d1ff77b38420e9de9aab748cff621634f2c5155601344c32929bcd2

C:\Program Files\Microsoft Office\root\vfs\System\atl100.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 58bf8884a0a29fc8adfdcda126874b40
SHA1 a62f9d7914eba0df8778faf2d8685e2e177663b3
SHA256 0266f7b5448b87c218aad06b8501de7f47a5a10219d98180cec36001b370a178
SHA512 dad88833ef94d46d77d25f652c948b8881c10ce890ef525b0675c3403af79ce3a7f39b4b4a19e24a52f759d4b1f004c322b54b6a02e07b555b02989386803aa8

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\TRANSLAT\MSB1CORE.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 db2266cc44d709fbbf6485b3437ebe43
SHA1 b7a6c410cdba8ce7aa081f8bb27c7740a5324254
SHA256 4cf96bf05cae22e90089af572ef083b6c09d48ae190f0e1d016b8616872e424a
SHA512 64c19547b34716466e5c8a8f95251319538adabbbdfb887de374fccfe5787e18e3e0a08ba4bbefdb7221eb326a57531c1803febadd7620c709db118c2fb56051

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Filters\offfiltx.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 32fc20fbe1b07722cc70b6c7b2e5bb6b
SHA1 c813b3a42b15bdbb21e1e8627478983bce49e57d
SHA256 4cd61f18f2c0ea8988ce1ca9e4baac6fe38fd8760fd1a817b8d3d686cd74b79a
SHA512 ef841fa68f582bc733444171f57714977a7adbf43f7a175f30d0c0f3affadf807368f53f7397efd336b118e81d85ae96af6ab62cf157e494cd721dc0c0e89810

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Filters\odffilt.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 ade6b523b1bf0965170c031beca5a759
SHA1 774820ae6857e73ec2922fdcb7c522d8e8a7e8c2
SHA256 1d21a604101b41d1ad9f11587c34191d0ecb9a8c9e6325ba518718639a925a2b
SHA512 ca6119f41ab21bc8cee173faeebab7404eca80c9cfffc71934613f1ba0b67b796f88b3f682fab3ef061689533733c923606fa1cbe181562dc0c4c66a323b4786

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\DW\DBGCORE.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 c4de8af435e04de3d884133d8ee48ae0
SHA1 5e35371ea22b0bd8d91c2d7c161fea5bcd943844
SHA256 7aa07b52df1e04b51a8938554aa13692a697cbe3ebaef4662fb3ab8a9e32199b
SHA512 52b297c7f01302772f303b911904548d77f15d4543c2f4a9501cdb2b094dfbe4ec46bf939f3101394988a736df9bf807fc962b5550b1320b6318a16e8815fd25

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\PAPYRUS.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 d4557e81b9fa7f337de16056caac164b
SHA1 a2d3917b89d7b05c788dec26c371747d91a889e4
SHA256 fc6db0854c47060658251fad26cf741095b38c5f2556b998e92f4256c1f3c7b8
SHA512 a5836f6e68f90069222fd14e3e0326242cf7bd137c6d78cd89bc697ccfc6884be355ef72934d91b913d512ffb0522bd4f1b195971720e2dfe9819788ffe1e232

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\NIRMALA.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 ab82d8990df7df31f90f82600d7d120c
SHA1 75863eaa513608bae87b848eb0b6d6da8ee94adc
SHA256 58ce7557e53db6b9415a04fdee5b055f2c4f9c865e1651817c5d71ba0e26b354
SHA512 be7578d370ed4543652c280ee43c75eb3fdb66f3388313acf3ce4372f1335db59b38e3488bd1f92daa80b80a7822b4276f73f6413ca03ad59d8b7125184bda4f

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\MTCORSVA.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 4e2436218cbf4b14ccc4a9f26ac7c073
SHA1 bf4fc2964184500a913a9ef8d956e06a8164ed2e
SHA256 24708d091c888ac7da869ab4b73742ba86b84e0478bea1570cc44c3cf0850147
SHA512 f73e972c080a659e7643c958fb6a8081f07b1ce2a66cba4c0c2b301e20910bb08de3039de4d96e387a8d3bd64deacb6e82d3be3c7eb7091d1492d3c143f2b402

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\GARAIT.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 9ce45d7c75d4e560551c73952fde1bc5
SHA1 676fc5d705ba38517650e7ea88d7e28580b1aeb5
SHA256 1a1eac73f5f87939919f14728a3ed723a444006cae33ff7e5d7a463ecf294041
SHA512 73a21659f181e280933abf964ae48d61a6debb7368d479f4c876737fff63ef3bfe8ba2070dffe8670bf002aac3e55ff2e1e98ac178c792be6e7beaf9ff1ae613

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\GARABD.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 38b64b007483dfd8525b0919c41e4a1f
SHA1 651148d743cb638b7e18f8c21b17c43028c5f4f9
SHA256 8c8412fa9ea8d3f904b0dc4c3ee7ae4e65c7139908e29fb7cbac69e5908f2cc9
SHA512 3815f0b271c92ece6b3241db29a9d898553ce2dc8c653055549e32a6dac9dc790125a97326bb4f557c8dc528819131d650fa05fd3e9a2e1931ea37e0d6827c66

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\GARA.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 de69357ce8be2486fd3fe8a38d80c5be
SHA1 d234c8b5b6d3e992a05c4c4d2ffcf1341e6f86b5
SHA256 61f0cfd0f65ac77772e431ffbd85950257a13f83b1c48446eb4eda83c724b972
SHA512 5453a31c8991cba1c34945c3e2f37b93626ccbdb1eaa23f4e57960629e273b84eef31d4955f18ddbec9ebf617f85a80311531a4812535b6bf701165a7b537c76

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Text.RegularExpressions.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 14e5db9be0e65ffde0efbb9ebc5efe33
SHA1 c77d72986863db44d69902158484c85009f8a3bf
SHA256 07011e8373fab162f061b19d4ef0e973933dc88c2d8c49877d1abb5d0d158d68
SHA512 48f8ba0cbdd50ded71318bdec59d92e6e40eccbcbdf19589dc51155814c6ed6c83a805f88b9cd405140dcce835a654c1c19c60facae3c218e4b966cedf26b0ef

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Text.Encoding.CodePages.dll

MD5 4e04dc3e014bac8e93e8034804e2e844
SHA1 dd9ed8545cc1ec473f3452e847c2a370142b8c84
SHA256 811d5f2676da522334a3bd55ad0d7bc325cab30a056796eee42b8b5db7761525
SHA512 c1522a5c85290e74d2676223959af16cca5c67c30aac48e6bf42134ab41680eb17073a8fe4b587620fae238918998b3be059b568fe6876dd4e8d855891fb2d5c

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Security.Principal.Windows.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 9d47c31338c1685301f5452b190841c9
SHA1 148cc5cfb9487e5927c540522fdc21d9f9582699
SHA256 436f10cfc0dad8af0c539b86b0a46f6d6c9c6dc74dced8f18a91e09aa1781e33
SHA512 bfc90380abd8eec25f64edfef41189c1e2975a8c5300f7f41b2fd765daf4b85c9c87ce5c83a97d5b3f501aaf49bddd8c776dc33db2ad60694ab1fe57a03169db

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\MSVCR110.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 113ec033871abd2fcd3941842ec6ef0e
SHA1 cacf8aee4099b2f013494bb80da0b3f188c13b09
SHA256 1e3ce95c1f8cb92dd57d8a5f5707e804681b90ea80448f72b0ebbf869016fc97
SHA512 cc8146094effc5b272b1994d04ca4d8d54713b6a6847da6ea7e3998b9c5a2cc03a9194a4f683db529c3e4150bcee9456cbc8e9a99a7337f44f7301ba34ab52de

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\DUBAI-REGULAR.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 bbec8b156137d44eb6df8472c21c384f
SHA1 96e0e0cfd6dbe9821a901a2575aca74d3565608f
SHA256 a44c5dce88e6792d5601361301efb6fdb9dca97e431e421d82f06bb7bf957c4e
SHA512 261d5e521250290924b2cb2da6d105edf9284bfb4b221a9fd32a9b47d7d61c46b1121a7356b8f04cc9312340af6bbde9d71788595f0afc469fc3a4f562b36843

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\DUBAI-MEDIUM.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 2241ca09f6f451ea6407f6aa273f23e8
SHA1 b4dde83047205443ca81dc7e1e37241673a12973
SHA256 25cb23c903ad618f1c2ef15a74d471ae36615f677d92e9a45d92ae9170db6b18
SHA512 7b0b16186912a9ee703634933e0ef0b7eae6dff532bc128410a51de9dbb1e7257b53ef24d41e77a792d64a2dbac58303c4bdf6ecb3a5208ce5adbfd45ddd5d6a

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\DUBAI-LIGHT.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 3205fc56ad8a0d475bd9c0d7801a0024
SHA1 180738383e242a70349056a28bb19b29ae5f98b0
SHA256 24636d6babab52e7638fe35ba55b664c2e0d00799fdb669cefe1b94f7059479f
SHA512 635035be6bfad44a7c5dafb9d72875e796daecb343103503198da2f15e76f6b7caed0a0d91d47d1c640133f6fdea1a393e259cf74d8345cbacb9f6028a45fd56

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\DUBAI-BOLD.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 be618bd245e859d90e745c07e1866ddc
SHA1 8162973b3d3df0ddd217270d4686325ad8522256
SHA256 b4ecd49a0a1068fd55fa7b2488c6c28a4293eb449aeb33eb095f2574dc31f4a7
SHA512 e53bba5999355485383657006381abf08c8ebf008c5c25fa275eca9ed685a60a553a928b0a19da29dcfd2a856fcd713ff63c24da3248dd44029e0a99c5f555ae

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\CENTURY.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 62e60073e71327164400a10489b4d9fd
SHA1 861903a1ad22a922b699ddeaa9ab6f62fb13cd30
SHA256 f92796ff956ce0244493fc59248380ff927e4e0ff956e2a234577022e4eafdf4
SHA512 7f6ef26f6563ba5d3f428f5937578147b7ed576011bfe3d789701cc638a1f0b2101593a80ec7cbf5bb80d807eb0fb883a468e7a3c036d5a252c423dca1c79049

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\BOOKOSI.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 6a4b5b692fe92f7073c3acd5061e3509
SHA1 8159f12e1390b948c9895b1d0874aad412f9ea48
SHA256 040401bb2152394328aae25074dba1672df1746bb745264c1b14ef38f167aa12
SHA512 6a75c0bd5bb2085a21cc9995b426c366f3ba31db4abc0e93dc502518c611cdc8cde69a38adc9edca2dc4c5ca6b09eb47924684bba2f0720e530afaefe35867a7

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\BOOKOSBI.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 059ec9b19db7492f5c92656437615a10
SHA1 4d314dedb38dcd7225a3e54cf3f862695559eb6d
SHA256 fd1b87a8e8aaccf46357bfdf17fef5b3953a3fa0d5c48ed51535ee81771758f0
SHA512 9fa0bd1a000bcca1035f59a22596f7572ce26e39bac73ff61d8b2e0d9999f9f1c53398b9632c36b097f1f5b209e8c528a0c82ce3e6a31dc39586483f64a73c9a

C:\Program Files\Microsoft Office\root\vfs\Fonts\private\BOOKOSB.TTF.(MJ-ZK6471058239)([email protected]).zxc

MD5 07f187736da8ff36b2ae6b8c33d475d6
SHA1 f895da4f2a2bad8aa172df95640444f53f46edd4
SHA256 5dfba2155622964f2f31460fef8de820a752a187fd1d7cdc6380b25ab7452aca
SHA512 b49eaa6a402abbbd3cb5e2da6935aa7aa6520f3ae5babb42a7064b5d778b8677106bcf26081493346c9bb177cf55bff26d9e16ed74602115929e8c909a4d075e

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\DATABASECOMPARE.EXE.(MJ-ZK6471058239)([email protected]).zxc

MD5 1776c4507b24280c104bf7dd8d4527b6
SHA1 af93525a98f420a93a630a6f265ede56a2486f2c
SHA256 fe2a1e9b3dc2b1679a3f8875f01a362fcf54432491da68a9c43f82e78c8dbd3c
SHA512 0f8b69abcdeb4946e376ff2fc10ccd8877145b7c7f1ee2966a616e19219fe2d0052ba9fa2b132e6a1f0b342e551e4eed47efef20c421bb483dadc98069012bde

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\TEXTCONV\MSCONV97.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 ea0d5c932559c192cd082a934e574217
SHA1 0dab5f5261ea16c450524619ff4d79ca3be3e93e
SHA256 0554dc73999ad07a01f9115fbd8264f16da4d5a2889f7f201b4a1f219d78bd0e
SHA512 f7b780bd25f9d12caf9faf0bb8b27c0ae6ad125a8f9ee88c26f4a9ff2db1a499b5f8fe7c867ecfd95b01ca0ce8440755d907f8f9b72b108248a0f6814cd784a4

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\Infragistics2.Win.UltraWinTree.v8.1.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 2d5041239b6b3449de70807f3d5c7de6
SHA1 44e2e4d214143e7600c283e6fbc2fb3ddb3df914
SHA256 9165de3f2f5e9b9c6e6dab1f4625072588c2e9321b1267d8bb9b2191472f33bd
SHA512 2d217b2b31f3cff3873cc5eb91a554116b3c0e38d5c9fef059b0d863694501d27d8441f684370481052eb5c7f658719826f1ac9a1615c54b8c6e475ccebaf8ff

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\Infragistics2.Win.UltraWinTree.v11.1.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 51f5276c0fe65336da126f6aa39e5a0c
SHA1 e1644ec489ce14d7349ca4b61816e7ab597f1362
SHA256 3954a728dc33d4ab8330bbaafccacc00b6db88619b703639102324713386cb2e
SHA512 8096c042d0666c5bb30f69d729423c8ed1cb140ddf8a5c1a40a1954ad1d5464ede6e1b15e0ea25566304f79f34a4f497bc7ff0deea869b4cfa0ebea6dc362463

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\Infragistics2.Win.Misc.v8.1.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 c54f27fd002206d4b4633ad2646386a0
SHA1 6da5fa1bcc8e62f41330555652b07df07573af39
SHA256 cf4aa7bdafa197bb4835b4dde9b7ec69f2ca13a72eb8c5f8c2e754d33ef61b4d
SHA512 af752f285943fc6f82affb0dafebc33d0f78a6ef7a60f47b016a2906558032d06da919d9c213451a90211f0a03d0bffbc5e81c0228a08f242ff480f47ec56ad8

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Smart Tag\FSTOCK.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 fba902439d9e50f99035a801a8663510
SHA1 d09919158c5dfe9ba0d23a000d55fe819e994f86
SHA256 4ca87b85efdf08a0ec0e407dfb0228bec4ce802dbd68a25d78e6e4d8028f4ffe
SHA512 2fae64d6f89fa63ef40ea85d70669158c032900aa4db4b8629891fb06f587a6121a02f3b1b2de3e1be83ddbe927ac8e7b1ec8e8219d9c87c2fff73f0e590cc22

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Smart Tag\FPLACE.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 e85c996f9b8ccadfb9e482442d6303e4
SHA1 5c2ddb974edb48f8a92b23a9948229545dcd3c14
SHA256 72e197aa433e125e8f937c5222111e7fa0f7510ce02ddb4474d979676c2d4f11
SHA512 1dd54acea83612cfa81e1dfed70887183476199d8519d22a20ca1ba995f6d57f2c8e310d5948020581e12111c36efe7eb7a2bffcc4cc1e69ad594bc01a3456db

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\PPSLAX.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 c61cd3034304781d5a6bed414deb51a2
SHA1 60b775a0db29d1a664d6bcfaf2e0b9cf2877a192
SHA256 083ea0916c5735fb5c045b998130f973629c9a9ae5a4cb787998ed2eb61a981f
SHA512 b3a97475fddfe6a73d6a3f0ba820d1cfc0f3692553d67383e5fd45cda34151a192339173af4bf109a923156a195bfd7bd4711296468496bf72cc29e1e98a0d46

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcr120.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 a20af9e3b95410267f742983349ca513
SHA1 1207b1e4f226b969f9ede990eda43f2e0ad5fd9a
SHA256 8d6e32fff999d6bb4749ca6ce8743afe652512f9266b066a58e0870ea6949887
SHA512 cf6c9c4d3f3d8b256079566c6566e2b3802ada3c239a59f44a46e19f1b8c4318f3af0759ef7a40f45749de06b1505f8cdcec136d487c266b7f57bee25a135e5a

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\1033\MAPISHELLR.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 294649ee1aa5a1b09500913c2e15ac88
SHA1 2ef29ff626f657a510cde93eec2ac068d87c84f1
SHA256 427f562c88dcec9dc68ecbc0413664f554ab221e5e41b082217aecf015b821c3
SHA512 3155e56009a6f922cc78627e7260ae5b95c8ca948498627449806c65bbbd91d8bc570b42ab8d03fa3d0775fb3a862fc2500abd8e2c551fa5e595445510720a98

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\URLREDIR.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 90dc38399c7b8e35c04a2b9fca0660b1
SHA1 416d6561645c69159f3c2481d35c6558f850e1f3
SHA256 9cc772fb633ba37b66489e881d6aab8909341002aa20e5d2dd8baf7ab7ffb0c2
SHA512 9bac39846ffed7b544098046e0356dc36b988b310ab8d34c7a7f2ed8f8cb65dbd7d6a7b54e718043d8bc21505d1d0b74b1cc669d2d4847235135683df2355204

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\ucrtbase.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 4e9a10dada82ccbacd82536ed3cf3697
SHA1 c930f9a3cdc929181f2e3877785115d5e25d726e
SHA256 2d2eff8f65beb61f743b9ab85dce7b2f8743f3a5ca6147d7ec66588738ca6014
SHA512 d84728300fc40e193e18cb38bec7b1376a438aefa9f39be62fc820fa74f2370463c0dfd53154a41715e8374444308df2dd8f0691e7d9a6251829ac7dacb08394

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\OWSCLT.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 a3a502a3eda9bf413ff6ff70dd2e2af9
SHA1 9ea5e0d7563e9c133df0dde5ac1e55e5fad490bd
SHA256 b93971ce30f7cbe8dd9821d9d063a318dae078695f48a584318616993bf52ad3
SHA512 3862aa49ffdaf865a0b159f7adf6de8f45a2e616d970f5ca09488b15ada321d1313d48323203a2fbe1dc55895c884bfb8d85d6e66f69fc627ddfcbb5b6baab57

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 05c8be2524eb140a0dc66307f4cb3aa1
SHA1 b9ec614701ed0eb479fed6b0c494d50a03e28374
SHA256 e3c0bf8defc824c62b41f3b887828d4661ab036025d09b1c03aeaf1b76bee23b
SHA512 f3b833d067b81f9ad18283df02469b247f060305714efcbf0b5a52f400c691a654e15f2d3f74c5bb054e465ae83fbdd0129053a4b7df7095757ce00cf263e349

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 26d8c2240bbd3863b68b4b9fc60e4adc
SHA1 a9ba3c47c4add0ac4b750f9287225fe59e5b16c6
SHA256 64a9834756b38273ee264849b58a21db5f547de8fc3f1741251d4107e3fc3266
SHA512 aaf6eb4609ba06648551016e252f3c79876bd072b269cba036cffa058bb6b3216bdd44423fc8c5cafd1efddb0c8d7035c1a22afca9e93d9b928a3b381f308984

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\IEAWSDC.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 85aeb72594d1f99b9f40b3c58d233fe1
SHA1 41508b6072e107f462f48aa868afe45799307360
SHA256 66bfc0e9245dafbbda9f8fe8977832e9586c50ac608d767102ff2aedd0f6f505
SHA512 96b43783c0c63819789a665c8ad3057ccd53a0ffaa9d62e74240edf928036a80841b2446936387281170e558d86abb2a45d5e5d21d89f23ffb5fc3fa12dc5c0c

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\Interceptor.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 ef32fd01245f53a8ad9773ec1c94cfd3
SHA1 a119af15bf11d348de8c51d351840a93f858c2a7
SHA256 a94a6f15202f848b46d9249bfdc3c12af1a41b39def61c04fb580991e2a01f38
SHA512 275071b8f08ebdbe41e5ac6b5807482a631e8a0e504f0aee4dac7071f78da252741908f46ecc505644c2497b1de6017a044de5244fda772c166931f03f6ac874

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\msmdlocal.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 341828aa0909b75f15f9bdbe8d044b8c
SHA1 0498b996f9c8bd60f0c78b919f0979c778846b2b
SHA256 b0c7d43eeef2720cb7a65024b3d4cefe16c9599e4652d8f62b9aee923877c150
SHA512 6e54ac22688db16584eaeb68d51aae6eb806a50ac17abe2966f0655c0eb066a802b46c47aeee17ac0baf24ebb93c95175726fe4d299f1187bc3afb644dadccfc

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\1033\ALRTINTL.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 4bd21e49d7b6bd64d8e5cd90c140983e
SHA1 ae77388fc12911d7e414fbd7eabbf3b0d11f5ace
SHA256 cc007477ae987dab5a43a4cd54ad3e04c30e8d141b14510c505ff38326b6e6e1
SHA512 8a548c47ddd52e86b118a588139bab4b0a80a820a7c2d45eefca63913cbea6e4cf92b32a71b7d6e4329d7a76d894a6ea29016f3b2a1a9bc61db834d575bfbaa0

C:\Program Files\Microsoft Office\root\vfs\System\msvcp110.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 4a79dd398ce24cce6633d4383757309c
SHA1 8ca8de8d983fdc35c416bafe06b546980b64b3dc
SHA256 7399d1b0f8ef3e185856bfc394571388c2a15de834d53b4489f0df28e6173a7e
SHA512 4e4198d7c5d4e4fcf5854590f5a63cfbc423c73bdfb58691b18906a90d9d8dc2571728567dbfdc0edd507c7a92edac9caf457602444e6cf8e0c4c1f461476dc7

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Help\hxds.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 a2690bac9772a73b170f560ee1489686
SHA1 c11b34c91016e3615c2bb6f95624ca188f6953aa
SHA256 ff974185dac25c0c54301ce1fef67f47962b44190efdf0602f5a98ff02314369
SHA512 9d08275532f8703b758b14ac0378c0a251c744d5c1cbfc9904da6c7a302aacb5515e5d03d5df22284eb1c7525c998a369e54f28a71c34d470a0675b657903dab

C:\Program Files\Mozilla Firefox\browser\features\[email protected].(MJ-ZK6471058239)([email protected]).zxc

MD5 51eeee36f7572eea1d90f31df9e89a4c
SHA1 8d2f2b7457695d633a45f3d51c9506c70ebdc977
SHA256 66e9a9464efe414d32c79a0a4a0578ada5527ea760f9a234f2168d37d2edaf6b
SHA512 ce6f979a699b45540efde84966c8d8110df48b2de952ed4264ee7b3ee76c9a40412a25e80b8a2eeb3778803c0244553af2e742f18739bdebf767fc9ae351f876

C:\Program Files\VideoLAN\VLC\locale\gd\LC_MESSAGES\vlc.mo.(MJ-ZK6471058239)([email protected]).zxc

MD5 ee0b8bef620743c22a3d96117ca68e1a
SHA1 831e4b05b5d9ec425c106336f02c87c4c4effea4
SHA256 da52f95c5d3e49f15ea57900ce1dd4b77756b03e32cc495850b583c012071437
SHA512 b0afe283bbfbcc0a3507faa000e3e6632ed553b21d4bd41f8c84c466b4ede4cc20b11bf258fc083da70182fec9ff49e93b8c88428b27e2ac647266ac11d84f9e

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcp140.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 ad3bc276d3355ad658865a0fca9e3934
SHA1 b6cd8ef8b58452a0f512629036112c89aee637e7
SHA256 1c8c5ce7b74f05e9e6e9e1e68ab31d70aa671bf61c08d2e6f5955da52356ad9d
SHA512 506f57f1eee2be9271dc62cdb06391fd186cf496a0fc2b09ec4a9fe4f250da1609e21e15ad2b4209fc69c13aafeecb53bbe7a26361a2f705e09514f5db59c3f8

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\Infragistics2.Shared.v11.1.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 4678d27ce06ebe03a46eaa35bcd6d171
SHA1 9da72880ec9b6f2b046e59fa45e18563a51dbd69
SHA256 2d61eb202038a98f5fd5ac4a25dd0b7e001442a5723d690816ec5d3ac0d053a4
SHA512 f886cc2714fe6a605e39ecb814c0880b82f6f626cd3e3a41f982477583a94105f815ecb7dbc1196e0c81032356ef783b31e10edfb2f35ced628d0952cc99fdac

C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_livehttp_plugin.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 438219c1ab0c8cc96a75c2c064453970
SHA1 9a69f4a5c45df482d2d749a72fe9161be23411ca
SHA256 b2bbf52458b5f2ee309f049285baab318e7d6a62dc9d502e85fd7f5a152a9caf
SHA512 289112ff3d31279a2653cde81180b720e3f02b7d044ac11872cb33004d7eac70fe1aca2be018a4ff064926a602e2e7098f9c0b0dc80ff1491dd2e0fcd1fb39b1

C:\Program Files\VideoLAN\VLC\skins\default.vlt.(MJ-ZK6471058239)([email protected]).zxc

MD5 f05cc5c6ebd78fef1b7d54e1933cef87
SHA1 eb3b7e678bc2f676ecfcad7564103123e4648e82
SHA256 c439070f3c805c5d887f8d2e382dad7c07a4f3c2d3f3382355c90ea247ba0735
SHA512 e5a5e4fc909cb2ab3b4f9261e463ef44d6fc84415b7d54654f57708744f2601f1c0a966d35efabd3e291addd180d3f8c53648b37388bb229e368dee96036e743

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\PPKLite.api.(MJ-ZK6471058239)([email protected]).zxc

MD5 52c9d34d4a540377e9728a507aa3ce65
SHA1 68b333a3fbf066ba4d88fd057b07eb1790bf0939
SHA256 fcaf3b3faed5eea7bc6ca97da936c16c9f3313c845e78f6ab33cfc33c0077133
SHA512 19aae6e99935c7db9d69088e4bae0fbe5d80c8f623908642aa250c8368b1b4b554c7e71648e03fb21d2348a274a0fbfef63c0462d26d56e39d7c151073cd2462

C:\Program Files\Mozilla Firefox\mozglue.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 8bc89430cfd9a71fbdc20b5e1229b98c
SHA1 976d25fb999e238ecdcf9dc8ee7a4c26d056a028
SHA256 5134c656cc5ae71de2c18395c799c161737a8a4c0d0ce28a10c7993522113c74
SHA512 d78c46f866440d06ab8b3fc8a4249c8974ded13528a697a2e1b5be6fbc734dce43a13c6395dc3db5ed6ab6257334a6956d6faf06956c2a1db297a7c1161ebe43

C:\Program Files\VideoLAN\VLC\plugins\codec\libaribsub_plugin.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 db0ebef3652f2a291a25ce14c7a99046
SHA1 4fe785479cbb6b69c18b18796d21b7d76d806d76
SHA256 0bc9ffc1ae5f3d5e4741e617dc3a20f505a14e9d1c6bba7b379901eb8c13eb70
SHA512 f1b45c23177cb046090d8ba09f37127514ecd71ea28a2f6a1d0e1254415950aed48917bdc6c81ac7607868b712af7f33fabf34ce86950c5f106e6d08fe6b576b

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\WelcomeCardRdr-2x.png.(MJ-ZK6471058239)([email protected]).zxc

MD5 558ec256cc16efb3a6caec12c4ba8020
SHA1 1e56a8364753c80d50ed03a32866acd23c01c799
SHA256 033cb7a0b814fedfb226152430f263819f18eff1427f425b4b68097fb1d4fb62
SHA512 6df83a74830726158233b38f9974785afac8d3dc872ba636d7151879c2f8dae18f9874391e10d8e83b347f6f53f85737c6bdb05d06c6f22faeabcc7e3d620c3a

C:\Program Files\Microsoft Office\root\vfs\System\MSCOMCTL.OCX.(MJ-ZK6471058239)([email protected]).zxc

MD5 3d90c6f3c03683ab24027d2a09a61bf0
SHA1 b4f6a25e29f3fb0de364b83bccc640fe96d4f002
SHA256 b295c2ee8a54ae434467b95a44f30fb422e6b0724404d46d6b7f491b5254f6ee
SHA512 c2bb087a5dd399c5558a8f631ecd002546b0d806391d0c055c12b648a00dbb013a4b69efc2ddda463169f8fa750372d6315671d526fdd81be46fb8369234b94a

C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\notification_helper.exe

MD5 ae2add3df78ebb32aa4e568d1eba8416
SHA1 9254d2c75faa7db1b16b7b48297a4fd68d445131
SHA256 c90f41a8ff5d4a2201b1524f33d5a4b2ab4de99a82063ad0db2b07e7c47d8862
SHA512 a5f82ed220178783938aa89018eb09ac499b7a39d424080cf1aa25b5b1f115e38656a58ba968a90630ce7a37f2618ff828c5c0980cb8a9fa6270d0b89790c861

C:\Program Files\VideoLAN\VLC\plugins\access\libvnc_plugin.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 82874378d22fe1fcde335cfcb5ac5ee2
SHA1 45ee9a63850b0e4d7275f5c63058db46b5e4d0ed
SHA256 813678e77125b97abae0d970d717663752222581a21aea4bd2db291fee66713c
SHA512 97bb9b79412ef1e36d5d9373aa31620c8f0534602c1bd82349fcf66f49733fa5db53f9372436c97911a11228f0baa8c33cc8554b362bd3218219faefdf9360c5

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\rna-main.js.(MJ-ZK6471058239)([email protected]).zxc

MD5 76c8cc70c98e15a8d32cf4f966d7167c
SHA1 088ab1c8796d3cc2a72936181fbbadb0303bfa96
SHA256 1e2ac4a7a4dc469172ae13ffe6696fd9713538e765ada9acac2ba5cb0f3b2a6d
SHA512 d8b5ba4f546d76730b0efb9335d064e4c94228aed4c9930db821daa4a86bed5672024e9eee891b55d88828db20acf04eaba43281baab2b5574657c357efbc22f

C:\Users\Admin\AppData\Local\Temp\606b88fce1441e6d83e1fb2ba1b511e4a9e68f7fc01c55b7c53e08fd28f9a0c4.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 ceef2ef83e9ce72087bece872ae61a6e
SHA1 0271e4bd2f072548f95bdf6471373c08db5fd4c7
SHA256 ae893976678b5b6d93f6c31b51c8fa7943cabf55550a61cc5d5b3f5896d76e87
SHA512 50a831d2ff259ec507c344741a061f04b3495547d39358ada15b519e6811344547b405facf82c3efba2147dc672ba85dc7bf3c6469f93ee93aac1c242a50f4a4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\GPUCache\index.(MJ-ZK6471058239)([email protected]).zxc

MD5 71785da0cf3e449feb692e998deb5210
SHA1 20291b92bf77142f8d34e4b1e6b96ee7e8709f64
SHA256 d6443fd1cb7846437659eb3b967e235027ce66f6dd6a72061887de4083a48cb3
SHA512 928e83b9ec549886548030088f46ee2187c4af66bd1f109b93f57f5a45cade8ec611415cd68b672d284ca65a4e23fdf4e611f09fb035abf08cf9355737d1425d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.14\v1FieldTypes.json.(MJ-ZK6471058239)([email protected]).zxc

MD5 d963adcd8e1ff470cd6f21d4b98d5663
SHA1 c75707e5405be60fe0a11ce03637d0f6f6093437
SHA256 31e0de2bd0b6c16ddfcd7aec5bdd3e06f1348f0e5b6d2468c31a5807cba557cc
SHA512 4fcb7ef533ca8a8092bdf044aef3ac2a97710b93c68131f37afc16e8949e33c319fdaa78c5bb0afdead464143dc8054f3a294c9d8b6f2a8e96978c487e4b13e8

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\pt-BR\System.Windows.Forms.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 e2ce90478bf2422f1d59ffc4d4289344
SHA1 70a906d27dce4c8f6bee2786ae126ddd6d44f1bc
SHA256 0c40ae74c8b435277776d59f2a709ae1b083df214cbea660410d0834bf9c5857
SHA512 802e79cd3da02b11349997909a750a5ea71e12a0f65101d2f434d586932fbaa3525b7b4143d4c7b72e87b356d7767fb719cefb7d628d1f4fdd08ebe859485fd8

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pl\System.Windows.Forms.resources.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 4002d8e48d5bd6a6efb8241a0c2df263
SHA1 ec488442483130fcfd860db22d6c31597339002d
SHA256 4a58dd0054c1950971adc7856444ccce9383ada8b62dec2cf08b9d52bfaa9d5e
SHA512 3fa6615d16325f3ff2fbd354c9daafe9226fe78bb8566407b61ecef72891af9004300e321f478a812c603387c93b50749ece06290172027319d8c41a1d8bb1af

C:\Program Files\Java\jdk-1.8\bin\msvcp140.dll.(MJ-ZK6471058239)([email protected]).zxc

MD5 7d6dc39b96985a7d5969be0426cff1ef
SHA1 25dfc210c7b24d8fb7a8d2402e8a62ebdae4b948
SHA256 56d3ffac2d34a18c873558d9a6233809d47858b803f8671bfa529c59ad88c1bc
SHA512 4f505a1407ec88a03c12535f4714f245de8d478ea7279c7e9e0f93513fc15afca574c6fda7c4c020e73a8d94e3a5cfaff1527074faf35d6d662f1addede1aa7e

C:\Program Files\Java\jdk-1.8\jre\lib\jfr.jar.(MJ-ZK6471058239)([email protected]).zxc

MD5 ab8f6f4595bb3625cda5ef6e8a00994d
SHA1 5e68e0ea25bcdbed11635b1b53b1767f1d46dc97
SHA256 a12902f430c3d2ab9de5a4214b7f9a6e929ada386a2d00cb19b847e8d200522a
SHA512 76a9bb8d0507b1fb84910a67d3721caee362bff9f3f973c5dbb9f0134ccc0fb02ff6ff1f89a933b0b3e9db38ee20e6fbca8c47e8e201fd57e9d259eb75c61d60

C:\Program Files\Microsoft Office\root\fre\StartMenu_Win7.wmv.(MJ-ZK6471058239)([email protected]).zxc

MD5 773561e3c24a965a8475ff70c12f1fca
SHA1 0dd5fd007eb1555f639a16265c47348fa74b6c76
SHA256 050806cbc893ddb788d4134bfdb2c1681eb1ff55f5c2a488f02379c540ccede5
SHA512 41f01bd05a7afae55585e5190714abc9c7dbb6f20148cbbc676315c7cc737dde1ec2dad00552ea676174d47f416bdfde931b3b85cd901ce0d7707c4f9b57cc7b

C:\Program Files\Microsoft Office\root\Document Themes 16\Wisp.thmx.(MJ-ZK6471058239)([email protected]).zxc

MD5 0b2c2272439a815d3453729a6cc8c4a9
SHA1 0c5cf9532f741bbf29ae7707481d9cd3663004f9
SHA256 842f884885518215265fb8babdd88d7890441771d9d32ae25e467fc049e385cd
SHA512 17244e2800051e63ef84a8c45fbe08ae5847c80ba280dcf894fcaef47c08f60354c790ae6b7268fed666121c39f99a483b2b808fe6f4ac37f3cf9341881ceb0d

C:\Program Files\Microsoft Office\root\Document Themes 16\Slice.thmx.(MJ-ZK6471058239)([email protected]).zxc

MD5 92ae9e8950f5eec535401b8e0bfcf12b
SHA1 900d562807836a64038a1e5ece44c3683652da62
SHA256 39c9ad965cf234690f701129582cc01397f284cecbb224dfc8cdae7ca370b1e9
SHA512 73fd80b234f5178f29a98c9de5367fe1918912068a97259b5acd8d2658c6016282d858d42dbe67cf07fc2db9b9db6ed49e16d5501beba00ebb87c76ab00fa61e

C:\Program Files\Microsoft Office\root\Client\AppVLP.exe.(MJ-ZK6471058239)([email protected]).zxc

MD5 38f4b4fba2bd1f5d4ee8bac76e4c1405
SHA1 a9b3f2bc5837d15838d80cff8610ed0804604f1e
SHA256 cbb8987f26f0e9afec33a5812977fd575dc6366115fe8d2fbd906775433f56a4
SHA512 82c709b648363adeb6c5c8cbd4c17322a701637435f0beb2182167d465993fe93cd6535a4d638641364cf2649573176cb4a34cef03d54d340f0b3d3141bf934e

C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.(MJ-ZK6471058239)([email protected]).zxc

MD5 a2dd71e15b815e0ceb31eb337e8be023
SHA1 9e50b1e5e79a6d924372fbc98398962937cccf80
SHA256 700b4da8f3d8e43dcec591d482cdaa1f6b64906f75aaf0c2dc9c4b74a1c0697f
SHA512 16982fc9aa9abfed8c8da63e19693d717f5215d411b8495deb06a93923a4e1e5f0c5218259c1e630632a043e3261012b94fcbada23da841cfcd7e1e1de483c50

C:\Program Files\Microsoft Office\root\Office16\WWLIB.DLL.(MJ-ZK6471058239)([email protected]).zxc

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Analysis: behavioral16

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:58

Platform

win11-20250313-en

Max time kernel

90s

Max time network

94s

Command Line

C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe bcdedit /set shutdown /r /f /t 2

Signatures

Chaos

ransomware chaos

Chaos Ransomware

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Chaos family

chaos

Deletes shadow copies

ransomware defense_evasion impact execution

Modifies boot configuration data using bcdedit

ransomware evasion
Description Indicator Process Target
N/A N/A C:\Windows\system32\bcdedit.exe N/A
N/A N/A C:\Windows\system32\bcdedit.exe N/A

Deletes backup catalog

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\system32\wbadmin.exe N/A

Disables Task Manager via registry modification

defense_evasion

Drops startup file

Description Indicator Process Target
File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\لفك تشفير ملفات اضغط هنا C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Reads user/profile data of web browsers

spyware stealer

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-1216697136-3907990103-1733992739-1000\Software\Microsoft\Windows\CurrentVersion\Run\Microsoft Store = "C:\\Users\\Admin\\AppData\\Roaming\\windowsdefender.exe" C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Application Shortcuts\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\AccountPictures\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Contacts\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Searches\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessibility\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\AccountPictures\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\OneDrive\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Saved Games\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Downloads\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Downloads\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Documents\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn2\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Desktop\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Pictures\Camera Roll\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn1\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Documents\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Videos\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Desktop\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Pictures\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Pictures\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\System Tools\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Videos\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Favorites\Links\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Favorites\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group3\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Pictures\Saved Pictures\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Libraries\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\History\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Music\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Links\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\$Recycle.Bin\S-1-5-21-1216697136-3907990103-1733992739-1000\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Libraries\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Music\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-1216697136-3907990103-1733992739-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\65n9xp2mm.jpg" C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Enumerates physical storage devices

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 C:\Windows\System32\vds.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName C:\Windows\System32\vds.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Windows\System32\vds.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\FriendlyName C:\Windows\System32\vds.exe N/A

Interacts with shadow copies

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\system32\vssadmin.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-1216697136-3907990103-1733992739-1000_Classes\Local Settings C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1216697136-3907990103-1733992739-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A

Suspicious behavior: AddClipboardFormatListener

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 33 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 34 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 35 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 36 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 33 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 34 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 35 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 36 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\wbengine.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\wbengine.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\wbengine.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Windows\system32\OpenWith.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2064 wrote to memory of 5980 N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe C:\Users\Admin\AppData\Roaming\windowsdefender.exe
PID 2064 wrote to memory of 5980 N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe C:\Users\Admin\AppData\Roaming\windowsdefender.exe
PID 5980 wrote to memory of 5868 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 5980 wrote to memory of 5868 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 5868 wrote to memory of 232 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 5868 wrote to memory of 232 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 5868 wrote to memory of 3812 N/A C:\Windows\System32\cmd.exe C:\Windows\System32\Wbem\WMIC.exe
PID 5868 wrote to memory of 3812 N/A C:\Windows\System32\cmd.exe C:\Windows\System32\Wbem\WMIC.exe
PID 5980 wrote to memory of 4248 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 5980 wrote to memory of 4248 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 4248 wrote to memory of 4924 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\bcdedit.exe
PID 4248 wrote to memory of 4924 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\bcdedit.exe
PID 4248 wrote to memory of 5792 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\bcdedit.exe
PID 4248 wrote to memory of 5792 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\bcdedit.exe
PID 5980 wrote to memory of 4980 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 5980 wrote to memory of 4980 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 4980 wrote to memory of 3636 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\wbadmin.exe
PID 4980 wrote to memory of 3636 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\wbadmin.exe

Uses Task Scheduler COM API

persistence

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe

C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe bcdedit /set shutdown /r /f /t 2

C:\Users\Admin\AppData\Roaming\windowsdefender.exe

"C:\Users\Admin\AppData\Roaming\windowsdefender.exe"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C vssadmin delete shadows /all /quiet & wmic shadowcopy delete

C:\Windows\system32\vssadmin.exe

vssadmin delete shadows /all /quiet

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\System32\Wbem\WMIC.exe

wmic shadowcopy delete

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C bcdedit /set {default} bootstatuspolicy ignoreallfailures & bcdedit /set {default} recoveryenabled no

C:\Windows\system32\bcdedit.exe

bcdedit /set {default} bootstatuspolicy ignoreallfailures

C:\Windows\system32\bcdedit.exe

bcdedit /set {default} recoveryenabled no

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C wbadmin delete catalog -quiet

C:\Windows\system32\wbadmin.exe

wbadmin delete catalog -quiet

C:\Windows\system32\wbengine.exe

"C:\Windows\system32\wbengine.exe"

C:\Windows\System32\vdsldr.exe

C:\Windows\System32\vdsldr.exe -Embedding

C:\Windows\System32\vds.exe

C:\Windows\System32\vds.exe

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

Network

Files

memory/2064-0-0x00007FFF0C573000-0x00007FFF0C575000-memory.dmp

memory/2064-1-0x0000000000380000-0x0000000000392000-memory.dmp

C:\Users\Admin\AppData\Roaming\windowsdefender.exe

MD5 7977bc8781a00875b4d465bc2a90d5d4
SHA1 9f4b2858edcff694fee76636bf8cf33a366fc237
SHA256 49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24
SHA512 245d65b9301b759097cded2a2f078e4e41c7b68e303a71fccd465a6fa230b48e13e571c4e57e03710934a5e6b9536ed634e0edc502ba35433b02147760e5f05b

memory/5980-14-0x00007FFF0C570000-0x00007FFF0D032000-memory.dmp

C:\Users\لفك تشفير ملفات اضغط هنا

MD5 3b8d73c95c31911b53b39895d1c2a588
SHA1 ca48d939e174ec33f27af1cb821517be10ac1b02
SHA256 4e258e6c04d087af311791d39279e6dc5656418e7dcdc08825a7356d0cfef5e8
SHA512 1ceadb0c5a49939346ebb782edb520c2e4d36c56be866495a51cedc1a02c216d9f005f430c4085855564331c715262c01a55296460f096f0927436595c879acb

C:\Users\Admin\2012_x64_1_vcRuntimeAdditional_x64.log

MD5 d1457b72c3fb323a2671125aef3eab5d
SHA1 5bab61eb53176449e25c2c82f172b82cb13ffb9d
SHA256 8a8de823d5ed3e12746a62ef169bcf372be0ca44f0a1236abc35df05d96928e1
SHA512 ca63c07ad35d8c9fb0c92d6146759b122d4ec5d3f67ebe2f30ddb69f9e6c9fd3bf31a5e408b08f1d4d9cd68120cced9e57f010bef3cde97653fed5470da7d1a0

memory/5980-53-0x00007FFF0C570000-0x00007FFF0D032000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe.log

MD5 4ae344179932dc8e2c6fe2079f9753ef
SHA1 60eacc624412b1f34809780769e3b212f138ea9c
SHA256 3063de3898a9b34e19f8cf0beeec2b8bd6bd05896b52abd73f4703d07b8a7cd4
SHA512 fadfe2b83f1af8fdc50430325f69d6172d2c1e889ca3800b3b83e5535d5970c32e9a176b48563275a0630d56c96d9f88df148fd6b2d281f0fc58129e5f4dba19

memory/5980-1410-0x00007FFF0C570000-0x00007FFF0D032000-memory.dmp

Analysis: behavioral18

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:58

Platform

win10v2004-20250314-en

Max time kernel

93s

Max time network

95s

Command Line

C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe bcdedit /set shutdown /r /f /t 2

Signatures

Chaos

ransomware chaos

Chaos Ransomware

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Chaos family

chaos

Deletes shadow copies

ransomware defense_evasion impact execution

Modifies boot configuration data using bcdedit

ransomware evasion
Description Indicator Process Target
N/A N/A C:\Windows\system32\bcdedit.exe N/A
N/A N/A C:\Windows\system32\bcdedit.exe N/A

Deletes backup catalog

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\system32\wbadmin.exe N/A

Disables Task Manager via registry modification

defense_evasion

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-3218366390-1258052702-4267193707-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3218366390-1258052702-4267193707-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A

Drops startup file

Description Indicator Process Target
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\لفك تشفير ملفات اضغط هنا C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Reads user/profile data of web browsers

spyware stealer

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-3218366390-1258052702-4267193707-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Microsoft Store = "C:\\Users\\Admin\\AppData\\Roaming\\windowsdefender.exe" C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\$Recycle.Bin\S-1-5-21-3218366390-1258052702-4267193707-1000\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\StartUp\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\AccountPictures\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Favorites\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Favorites\Links\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Desktop\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\AccountPictures\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Downloads\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Music\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Documents\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Pictures\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group3\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\OneDrive\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Pictures\Camera Roll\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Music\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Videos\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Pictures\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Videos\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Desktop\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\3D Objects\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\History\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Libraries\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Downloads\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\System Tools\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Application Shortcuts\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn1\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Links\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Saved Games\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Libraries\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Pictures\Saved Pictures\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Searches\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification F:\$RECYCLE.BIN\S-1-5-21-3218366390-1258052702-4267193707-1000\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn2\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-3218366390-1258052702-4267193707-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\5acstj4f6.jpg" C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Enumerates physical storage devices

Checks SCSI registry key(s)

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\FriendlyName C:\Windows\System32\vds.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 C:\Windows\System32\vds.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName C:\Windows\System32\vds.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Windows\System32\vds.exe N/A

Interacts with shadow copies

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\system32\vssadmin.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3218366390-1258052702-4267193707-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3218366390-1258052702-4267193707-1000_Classes\Local Settings C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Suspicious behavior: AddClipboardFormatListener

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 33 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 34 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 35 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 36 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 33 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 34 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 35 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 36 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\wbengine.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\wbengine.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\wbengine.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Windows\system32\OpenWith.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3368 wrote to memory of 3148 N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe C:\Users\Admin\AppData\Roaming\windowsdefender.exe
PID 3368 wrote to memory of 3148 N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe C:\Users\Admin\AppData\Roaming\windowsdefender.exe
PID 3148 wrote to memory of 5012 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 3148 wrote to memory of 5012 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 5012 wrote to memory of 3928 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 5012 wrote to memory of 3928 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 5012 wrote to memory of 2264 N/A C:\Windows\System32\cmd.exe C:\Windows\System32\Wbem\WMIC.exe
PID 5012 wrote to memory of 2264 N/A C:\Windows\System32\cmd.exe C:\Windows\System32\Wbem\WMIC.exe
PID 3148 wrote to memory of 3444 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 3148 wrote to memory of 3444 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 3444 wrote to memory of 1688 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\bcdedit.exe
PID 3444 wrote to memory of 1688 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\bcdedit.exe
PID 3444 wrote to memory of 4396 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\bcdedit.exe
PID 3444 wrote to memory of 4396 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\bcdedit.exe
PID 3148 wrote to memory of 2000 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 3148 wrote to memory of 2000 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 2000 wrote to memory of 4308 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\wbadmin.exe
PID 2000 wrote to memory of 4308 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\wbadmin.exe

Uses Task Scheduler COM API

persistence

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe

C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe bcdedit /set shutdown /r /f /t 2

C:\Users\Admin\AppData\Roaming\windowsdefender.exe

"C:\Users\Admin\AppData\Roaming\windowsdefender.exe"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C vssadmin delete shadows /all /quiet & wmic shadowcopy delete

C:\Windows\system32\vssadmin.exe

vssadmin delete shadows /all /quiet

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\System32\Wbem\WMIC.exe

wmic shadowcopy delete

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C bcdedit /set {default} bootstatuspolicy ignoreallfailures & bcdedit /set {default} recoveryenabled no

C:\Windows\system32\bcdedit.exe

bcdedit /set {default} bootstatuspolicy ignoreallfailures

C:\Windows\system32\bcdedit.exe

bcdedit /set {default} recoveryenabled no

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C wbadmin delete catalog -quiet

C:\Windows\system32\wbadmin.exe

wbadmin delete catalog -quiet

C:\Windows\system32\wbengine.exe

"C:\Windows\system32\wbengine.exe"

C:\Windows\System32\vdsldr.exe

C:\Windows\System32\vdsldr.exe -Embedding

C:\Windows\System32\vds.exe

C:\Windows\System32\vds.exe

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

Network

Country Destination Domain Proto
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 udp
US 8.8.8.8:53 c.pki.goog udp
GB 142.250.179.227:80 c.pki.goog tcp

Files

memory/3368-0-0x00007FFC92213000-0x00007FFC92215000-memory.dmp

memory/3368-1-0x0000000000030000-0x0000000000042000-memory.dmp

C:\Users\Admin\AppData\Roaming\windowsdefender.exe

MD5 7977bc8781a00875b4d465bc2a90d5d4
SHA1 9f4b2858edcff694fee76636bf8cf33a366fc237
SHA256 49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24
SHA512 245d65b9301b759097cded2a2f078e4e41c7b68e303a71fccd465a6fa230b48e13e571c4e57e03710934a5e6b9536ed634e0edc502ba35433b02147760e5f05b

memory/3148-14-0x00007FFC92210000-0x00007FFC92CD1000-memory.dmp

C:\Users\لفك تشفير ملفات اضغط هنا

MD5 3b8d73c95c31911b53b39895d1c2a588
SHA1 ca48d939e174ec33f27af1cb821517be10ac1b02
SHA256 4e258e6c04d087af311791d39279e6dc5656418e7dcdc08825a7356d0cfef5e8
SHA512 1ceadb0c5a49939346ebb782edb520c2e4d36c56be866495a51cedc1a02c216d9f005f430c4085855564331c715262c01a55296460f096f0927436595c879acb

memory/3148-49-0x00007FFC92210000-0x00007FFC92CD1000-memory.dmp

C:\Users\Admin\2012_x64_1_vcRuntimeAdditional_x64.log

MD5 d1457b72c3fb323a2671125aef3eab5d
SHA1 5bab61eb53176449e25c2c82f172b82cb13ffb9d
SHA256 8a8de823d5ed3e12746a62ef169bcf372be0ca44f0a1236abc35df05d96928e1
SHA512 ca63c07ad35d8c9fb0c92d6146759b122d4ec5d3f67ebe2f30ddb69f9e6c9fd3bf31a5e408b08f1d4d9cd68120cced9e57f010bef3cde97653fed5470da7d1a0

C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe.log

MD5 28d7fcc2b910da5e67ebb99451a5f598
SHA1 a5bf77a53eda1208f4f37d09d82da0b9915a6747
SHA256 2391511d0a66ed9f84ae54254f51c09e43be01ad685db80da3201ec880abd49c
SHA512 2d8eb65cbf04ca506f4ef3b9ae13ccf05ebefab702269ba70ffd1ce9e6c615db0a3ee3ac0e81a06f546fc3250b7b76155dd51241c41b507a441b658c8e761df6

memory/3148-1380-0x00007FFC92210000-0x00007FFC92CD1000-memory.dmp

memory/3148-1381-0x00007FFC92210000-0x00007FFC92CD1000-memory.dmp

Analysis: behavioral21

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:58

Platform

win10v2004-20250314-en

Max time kernel

104s

Max time network

112s

Command Line

C:\Users\Admin\AppData\Local\Temp\4a2ad49c934f9ae6ca6b5d0c7cc34f5e12d349640012fa8cf8eb7e2d3acd6c9f.exe bcdedit /set shutdown /r /f /t 2

Signatures

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\4a2ad49c934f9ae6ca6b5d0c7cc34f5e12d349640012fa8cf8eb7e2d3acd6c9f.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\4a2ad49c934f9ae6ca6b5d0c7cc34f5e12d349640012fa8cf8eb7e2d3acd6c9f.exe

C:\Users\Admin\AppData\Local\Temp\4a2ad49c934f9ae6ca6b5d0c7cc34f5e12d349640012fa8cf8eb7e2d3acd6c9f.exe bcdedit /set shutdown /r /f /t 2

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1656 -ip 1656

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 1656 -s 524

Network

Country Destination Domain Proto
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 c.pki.goog udp
GB 142.250.179.227:80 c.pki.goog tcp

Files

N/A

Analysis: behavioral26

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:57

Platform

win7-20241010-en

Max time kernel

0s

Max time network

6s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

N/A

Files

N/A

Analysis: behavioral29

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:56

Platform

win10ltsc2021-20250314-en

Max time kernel

0s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

N/A

Files

N/A

Analysis: behavioral11

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:58

Platform

win11-20250313-en

Max time kernel

101s

Max time network

105s

Command Line

C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe bcdedit /set shutdown /r /f /t 2

Signatures

BlackMatter Ransomware

ransomware blackmatter

Blackmatter family

blackmatter

Renames multiple (120) files with added filename extension

ransomware

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-2081498128-3109241912-2948996266-1000\Control Panel\Desktop\WallPaper = "C:\\ProgramData\\gT7W1tbWP.bmp" C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2081498128-3109241912-2948996266-1000\Control Panel\Desktop\Wallpaper = "C:\\ProgramData\\gT7W1tbWP.bmp" C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A

Modifies Control Panel

defense_evasion
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-2081498128-3109241912-2948996266-1000\Control Panel\International C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2081498128-3109241912-2948996266-1000\Control Panel\Desktop C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2081498128-3109241912-2948996266-1000\Control Panel\Desktop\WallpaperStyle = "10" C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: 36 N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeImpersonatePrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: 33 N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeManageVolumePrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeRestorePrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\system32\vssvc.exe N/A

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe

C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe bcdedit /set shutdown /r /f /t 2

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

Network

Country Destination Domain Proto
US 8.8.8.8:53 paymenthacks.com udp
US 3.33.130.190:443 mojobiden.com tcp
US 3.33.130.190:80 mojobiden.com tcp
US 3.33.130.190:443 mojobiden.com tcp
GB 142.250.179.227:80 c.pki.goog tcp

Files

memory/4760-0-0x0000000000830000-0x0000000000847000-memory.dmp

memory/4760-2-0x0000000002F80000-0x0000000002F90000-memory.dmp

memory/4760-1-0x0000000002F80000-0x0000000002F90000-memory.dmp

C:\gT7W1tbWP.README.txt

MD5 f66968c47a64569e2281f65a95991be0
SHA1 ef9e3e80bfbea4c3021b226cb8cd00687013b8a8
SHA256 4b950c763006e7c4569df8742855cec31bf82f835bd7e2bdcb5f128db34c82bf
SHA512 cb4ace1b3e891ab100b3950c6bc133b216e91c8978a3af1ffd75617b606bb7ceb0133f44d37a30a827655e5b84b016d736a732f5f37635bb727e1a5b722cad24

memory/4760-200-0x0000000000830000-0x0000000000847000-memory.dmp

Analysis: behavioral14

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:59

Platform

win10ltsc2021-20250314-en

Max time kernel

104s

Max time network

107s

Command Line

C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe bcdedit /set shutdown /r /f /t 2

Signatures

BlackMatter Ransomware

ransomware blackmatter

Blackmatter family

blackmatter

Renames multiple (145) files with added filename extension

ransomware

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000\Control Panel\Desktop\WallPaper = "C:\\ProgramData\\QkiINTXIT.bmp" C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000\Control Panel\Desktop\Wallpaper = "C:\\ProgramData\\QkiINTXIT.bmp" C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A

Modifies Control Panel

defense_evasion
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000\Control Panel\Desktop C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000\Control Panel\Desktop\WallpaperStyle = "10" C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Key created \REGISTRY\USER\S-1-5-21-780313508-644878201-565826771-1000\Control Panel\International C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: 36 N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeImpersonatePrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: 33 N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeManageVolumePrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeRestorePrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\system32\vssvc.exe N/A

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe

C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe bcdedit /set shutdown /r /f /t 2

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

Network

Country Destination Domain Proto
US 8.8.8.8:53 paymenthacks.com udp
US 8.8.8.8:53 mojobiden.com udp
US 3.33.130.190:443 mojobiden.com tcp
US 3.33.130.190:80 mojobiden.com tcp
US 3.33.130.190:443 mojobiden.com tcp
US 8.8.8.8:53 c.pki.goog udp
GB 142.250.179.227:80 c.pki.goog tcp

Files

memory/3216-0-0x0000000000A50000-0x0000000000A67000-memory.dmp

memory/3216-2-0x0000000002C50000-0x0000000002C60000-memory.dmp

memory/3216-1-0x0000000002C50000-0x0000000002C60000-memory.dmp

C:\QkiINTXIT.README.txt

MD5 f66968c47a64569e2281f65a95991be0
SHA1 ef9e3e80bfbea4c3021b226cb8cd00687013b8a8
SHA256 4b950c763006e7c4569df8742855cec31bf82f835bd7e2bdcb5f128db34c82bf
SHA512 cb4ace1b3e891ab100b3950c6bc133b216e91c8978a3af1ffd75617b606bb7ceb0133f44d37a30a827655e5b84b016d736a732f5f37635bb727e1a5b722cad24

memory/3216-199-0x0000000000A50000-0x0000000000A67000-memory.dmp

Analysis: behavioral25

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:59

Platform

win11-20250313-en

Max time kernel

100s

Max time network

102s

Command Line

C:\Users\Admin\AppData\Local\Temp\4a2ad49c934f9ae6ca6b5d0c7cc34f5e12d349640012fa8cf8eb7e2d3acd6c9f.exe bcdedit /set shutdown /r /f /t 2

Signatures

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\4a2ad49c934f9ae6ca6b5d0c7cc34f5e12d349640012fa8cf8eb7e2d3acd6c9f.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\4a2ad49c934f9ae6ca6b5d0c7cc34f5e12d349640012fa8cf8eb7e2d3acd6c9f.exe

C:\Users\Admin\AppData\Local\Temp\4a2ad49c934f9ae6ca6b5d0c7cc34f5e12d349640012fa8cf8eb7e2d3acd6c9f.exe bcdedit /set shutdown /r /f /t 2

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4244 -ip 4244

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 4244 -s 556

Network

Files

N/A

Analysis: behavioral7

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:58

Platform

win7-20240729-en

Max time kernel

15s

Max time network

63s

Command Line

C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe bcdedit /set shutdown /r /f /t 2

Signatures

Detects Mimic ransomware

Description Indicator Process Target
N/A N/A N/A N/A

Mimic

ransomware mimic

Mimic family

mimic

Renames multiple (283) files with added filename extension

ransomware

Modifies Windows Firewall

defense_evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\netsh.exe N/A
N/A N/A C:\Windows\SysWOW64\netsh.exe N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Program Files\Microsoft Games\Hearts\desktop.ini C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Mahjong\desktop.ini C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Solitaire\desktop.ini C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification F:\$RECYCLE.BIN\S-1-5-21-2703099537-420551529-3771253338-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File created F:\$RECYCLE.BIN\S-1-5-21-2703099537-420551529-3771253338-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Purble Place\desktop.ini C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File created C:\$Recycle.Bin\S-1-5-21-2703099537-420551529-3771253338-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Microsoft Games\Chess\desktop.ini C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Microsoft Games\FreeCell\desktop.ini C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Microsoft Games\SpiderSolitaire\desktop.ini C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\$Recycle.Bin\S-1-5-21-2703099537-420551529-3771253338-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\desktop.ini C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File created C:\Program Files\desktop.ini C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A

Looks up external IP address via web service

Description Indicator Process Target
N/A api.my-ip.io N/A N/A
N/A api.my-ip.io N/A N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\ImportHide.m4v.(MJ-TJ9302618457)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2native.dll C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Windows Media Player\WMPDMCCore.dll C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\1423861261279.profile.gz C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-sampler.xml C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Noumea.(MJ-TJ9302618457)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\content-types.properties C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\GMT C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\license.html.(MJ-TJ9302618457)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Custom.propdesc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page_PAL.wmv C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File created C:\Program Files\Mozilla Firefox\nssckbi.dll.(MJ-TJ9302618457)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_output\libwingdi_plugin.dll C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Windows Journal\jnwdui.dll C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Atikokan.(MJ-TJ9302618457)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\bin\tnameserv.exe.(MJ-TJ9302618457)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_mmx_plugin.dll C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\video_output\libdirect3d11_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File created C:\Program Files\7-Zip\Lang\ps.txt.(MJ-TJ9302618457)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\vk_swiftshader_icd.json.(MJ-TJ9302618457)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Montreal.(MJ-TJ9302618457)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Kolkata.(MJ-TJ9302618457)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\api-ms-win-crt-runtime-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Metlakatla.(MJ-TJ9302618457)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\locale\com-sun-tools-visualvm-modules-startup_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\ONFILTER.DLL C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-queries.xml C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\launcher.exe.(MJ-TJ9302618457)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-8.(MJ-TJ9302618457)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_output\libdirect3d9_plugin.dll C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationRight_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\OFFICE14\msoshext.dll.(MJ-TJ9302618457)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.commands_5.5.0.165303.jar.(MJ-TJ9302618457)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref_PAL.wmv C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jstack.exe.(MJ-TJ9302618457)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_pt_BR.jar.(MJ-TJ9302618457)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ui_5.5.0.165303.jar.(MJ-TJ9302618457)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Yekaterinburg.(MJ-TJ9302618457)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\cmm\GRAY.pf C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\es\System.Data.Services.resources.dll C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Windows Media Player\es-ES\wmpnscfg.exe.mui C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\sound.properties.(MJ-TJ9302618457)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-sampler.jar C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\video_filter\libblend_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\next_down.png C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\RemoveExport.7z.(MJ-TJ9302618457)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\it-IT\msader15.dll.mui C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\eclipse.inf.(MJ-TJ9302618457)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\de-DE\Sidebar.exe.mui C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\TipTsf.dll.mui C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.services_1.1.0.v20140328-1925.jar C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Madeira.(MJ-TJ9302618457)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\fr-FR\gadget.xml C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\SelectRemove.odt C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Manaus C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Brussels.(MJ-TJ9302618457)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-autoupdate-services.xml C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\ja\System.Net.Resources.dll C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\203x8subpicture.png C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\javaws.exe.(MJ-TJ9302618457)([email protected]).zxc C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Indianapolis C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\zu\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A

Event Triggered Execution: Netsh Helper DLL

persistence privilege_escalation
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A

Runs net.exe

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2756 wrote to memory of 2916 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2756 wrote to memory of 2916 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2756 wrote to memory of 2916 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2756 wrote to memory of 2916 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2916 wrote to memory of 2648 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 2916 wrote to memory of 2648 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 2916 wrote to memory of 2648 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 2916 wrote to memory of 2648 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 2648 wrote to memory of 2192 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2648 wrote to memory of 2192 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2648 wrote to memory of 2192 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2648 wrote to memory of 2192 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2756 wrote to memory of 2724 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2756 wrote to memory of 2724 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2756 wrote to memory of 2724 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2756 wrote to memory of 2724 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2756 wrote to memory of 2220 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2756 wrote to memory of 2220 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2756 wrote to memory of 2220 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2756 wrote to memory of 2220 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2756 wrote to memory of 2684 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2756 wrote to memory of 2684 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2756 wrote to memory of 2684 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2756 wrote to memory of 2684 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2756 wrote to memory of 2168 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2756 wrote to memory of 2168 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2756 wrote to memory of 2168 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2756 wrote to memory of 2168 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2168 wrote to memory of 3020 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 2168 wrote to memory of 3020 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 2168 wrote to memory of 3020 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 2168 wrote to memory of 3020 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 3020 wrote to memory of 2696 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 3020 wrote to memory of 2696 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 3020 wrote to memory of 2696 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 3020 wrote to memory of 2696 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2756 wrote to memory of 2660 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2756 wrote to memory of 2660 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2756 wrote to memory of 2660 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2756 wrote to memory of 2660 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2660 wrote to memory of 2820 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 2660 wrote to memory of 2820 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 2660 wrote to memory of 2820 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 2660 wrote to memory of 2820 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 2820 wrote to memory of 2528 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2820 wrote to memory of 2528 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2820 wrote to memory of 2528 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2820 wrote to memory of 2528 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2756 wrote to memory of 2536 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2756 wrote to memory of 2536 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2756 wrote to memory of 2536 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2756 wrote to memory of 2536 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2536 wrote to memory of 2588 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 2536 wrote to memory of 2588 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 2536 wrote to memory of 2588 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 2536 wrote to memory of 2588 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 2588 wrote to memory of 2596 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2588 wrote to memory of 2596 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2588 wrote to memory of 2596 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2588 wrote to memory of 2596 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2756 wrote to memory of 2316 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2756 wrote to memory of 2316 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2756 wrote to memory of 2316 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2756 wrote to memory of 2316 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe

Processes

C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe

C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe bcdedit /set shutdown /r /f /t 2

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop MSDTC

C:\Windows\SysWOW64\net.exe

net stop MSDTC

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop MSDTC

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c bcdedit /set {default} bootstatuspolicy ignoreallfailures

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c bcdedit /set {default} recoveryenabled no

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c wbadmin delete catalog -quiet

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop SQLSERVERAGENT

C:\Windows\SysWOW64\net.exe

net stop SQLSERVERAGENT

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop SQLSERVERAGENT

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop MSSQLSERVER

C:\Windows\SysWOW64\net.exe

net stop MSSQLSERVER

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop MSSQLSERVER

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop vds

C:\Windows\SysWOW64\net.exe

net stop vds

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop vds

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c netsh advfirewall set currentprofile state off

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall set currentprofile state off

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c netsh firewall set opmode mode=disable

C:\Windows\SysWOW64\netsh.exe

netsh firewall set opmode mode=disable

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop SQLWriter

C:\Windows\SysWOW64\net.exe

net stop SQLWriter

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop SQLWriter

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop SQLBrowser

C:\Windows\SysWOW64\net.exe

net stop SQLBrowser

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop SQLBrowser

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop MSSQLSERVER

C:\Windows\SysWOW64\net.exe

net stop MSSQLSERVER

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop MSSQLSERVER

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop MSSQL$CONTOSO1

C:\Windows\SysWOW64\net.exe

net stop MSSQL$CONTOSO1

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop MSSQL$CONTOSO1

C:\Windows\system32\msiexec.exe

C:\Windows\system32\msiexec.exe /V

C:\Windows\syswow64\MsiExec.exe

C:\Windows\syswow64\MsiExec.exe -Embedding A5A481603CA434DC9585E13803B6A0A8

C:\Windows\system32\MsiExec.exe

C:\Windows\system32\MsiExec.exe -Embedding AD51C1B733B2C736BBE6DB40A149F58E

Network

Country Destination Domain Proto
US 8.8.8.8:53 api.my-ip.io udp
DE 23.88.33.229:443 api.my-ip.io tcp
US 8.8.8.8:53 e5.o.lencr.org udp
GB 2.18.190.206:80 e5.o.lencr.org tcp
N/A 127.0.0.1:49205 tcp
N/A 127.0.0.1:49207 tcp
US 8.8.8.8:53 www.microsoft.com udp
GB 23.192.18.101:80 www.microsoft.com tcp
US 8.8.8.8:53 crl.microsoft.com udp
GB 2.19.252.143:80 crl.microsoft.com tcp

Files

C:\ProgramData\RSAKEY.key

MD5 eaffc767879c15b2b2b18b305dcdf26a
SHA1 981f17babc7013a645dfa7cfe76804d0a0cdc7bc
SHA256 804e49b0ca1853268196406d7db9ebf3f277c30d549532f8c4b14e535517f813
SHA512 d5dbe78570072597f7093521fbedd951adc8ef7a34d3cce6fcb1e8b2dc18a25fa98009c9f5757794507db1c9cbf80376e24744f4e99a43acc9ce3d74bb9b8f12

C:\vcredist2010_x64.log.html.(MJ-TJ9302618457)([email protected]).zxc

MD5 d858f9b1e429c35e6ae179674cea4a66
SHA1 f849c53d0fb2da3639576c4b0af4ab1658f55dc7
SHA256 01b76b137a5c6facd4de815189f7d5e24af0ccc5cdd4f59779331cb7d66e73ec
SHA512 e303108c3f0dafa3b744cb84fc1156c3543b811aa4d86b4da0ae87de01ee128039900bc22c51963ae03d19c0c4da18bdd5cc7c0c0fa696c4f9c5e1d4167010d8

C:\vcredist2012_x64_0_vcRuntimeMinimum_x64.log

MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

C:\vcredist2012_x86_1_vcRuntimeAdditional_x86.log.(MJ-TJ9302618457)([email protected]).zxc

MD5 3d11bab12bc03eca06851df13b5989fa
SHA1 9e01b406f3d84101cfee5f2a867b732018207da8
SHA256 2c8a469c52c8ddcf5f4979794338b3759e8104e4520214b5169bffca9da81534
SHA512 f2efa7a715e14273f17f126535831ea8a5530b4cf948ef1cf95614e3a5e6605b0ae309702d8f110aca38e4b124a41913e1fc1cfd23b29413e4325dbfd03c2d7c

C:\vcredist2010_x86.log.html.(MJ-TJ9302618457)([email protected]).zxc

MD5 5e6836eb345cd93c27ad239035d2d5dc
SHA1 31d46a5d784092507d460bc8aec24ec4328a26e3
SHA256 d688adf222def38173343356ec4286530e58573fe805b42c2e4515831cceac61
SHA512 f95c5508818ff5802547e781facc8430fdd32c65971f56a925a6ac0153a3cc268dbb707955bd664b5174975de9554f61925f2728b5a6ac84c89323c63c2e9d47

C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\osetup.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 78b64d79c2da5178eb6b0b1c57488ceb
SHA1 8334d4f4f5ef15fdcfb46c422a008de0e9c72fe3
SHA256 49b379d2231519caedb18a118b78248a0bf593b80013f38d2c154ffebf60c29d
SHA512 e1a6286f1d1c6aeb64f7d3afdf6bb090b21a4d65c854147ec5ad49ccaf3f3e87c7dd968c5ca4630095b414cfa30045fb34d084b6724914dfca40bdeb3c278e94

C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\PidGenX.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 e2cd0302a96e269846a1eba9061477b3
SHA1 1d4179bad582475b1a4840839c4e100eb0b66964
SHA256 2ad4fbcc1db8efaaaf17586d4545b4743dace6dae4d238356f9966e8af6f3942
SHA512 0d4baeb9cabc8ae6935ea615d31a9227eaeff71c2891fec017766447448f472f74735509707b649dbb9786b7637c8de87931678837a1494369d708ab91bc72cc

C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\OWOW64WW.cab.(MJ-TJ9302618457)([email protected]).zxc

MD5 0c95ffbc11764aef088f45f9806b6a15
SHA1 538875115048256ce5d7266c31867a93930da5b9
SHA256 02a8d56e4bc63a1de59ce72b709bb95266bedcdb70598120461f3e9aac8dfbe7
SHA512 9a4b65dd53d47fcd3071e0f8a9665217fbaab9d7941d2e0b30c7f5007a9ed10fe69ed94549e6fd26d27e1e909f88f3f19c3fd84cf841a730edc381448d3fad17

F:\Decryption-Guide.txt

MD5 7a85810e38b7410d1ed5bddad794a3b0
SHA1 4e5c76472c53495ad0a357f62a08774f297d491d
SHA256 cd08e6a5e3ddebc1025b640c4008d69a55d10f6445e9eb3b773f04d799a5af05
SHA512 49f6a25c634aedd2cde9e197e3c309a821012460770d4f4c51fc81b9e0fd124ee1f3c8bf83298e05e5c5f1f32e5f4cdf5c3df7ef69b67751923fc506f720eac0

C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 dfe5edeaa208fe2ecbd29d6790357938
SHA1 c4a0f7b182116f0398f32d4af8611e0238974ca4
SHA256 2cb0e5d5caa82d6403baf7c37628e58e3cc5790b93a5a79b723b3c6b8c6e3215
SHA512 4a1cdc23edd5dd2adc64f3da773b7c62460ce7fbb7dda76043f51d1a0f9bde3285a677b15ee8a58d6cff283401b68274272d72e76034d6cd93aed8ce25498842

C:\$Recycle.Bin\S-1-5-21-2703099537-420551529-3771253338-1000\desktop.ini.(MJ-TJ9302618457)([email protected]).zxc

MD5 b46added252c10f344c9d04b8d6f3e70
SHA1 5739b735dc7525f1bfcd03aad47aa547a7bcadab
SHA256 2adced73b570372d00ed6e9f86d741075431644023cec8c2acbadd90c45060fb
SHA512 fde660ef7bc6bbbdd968cf3407062ba4d7c76e140c81e5f54edd088f5718cb3abbc4970cfe359c3cd18114f5a15760c4885d50148cc6b908e3d76bbfddfbc325

C:\vcredist2022_x86_002_vcRuntimeAdditional_x86.log.(MJ-TJ9302618457)([email protected]).zxc

MD5 b99d2276fac7a3dae15de154ef8993c4
SHA1 d1fb97fb69943dd25c9e6bb64e094038d0c16d92
SHA256 e15a80882545307ea05fdd3bfddb7b2edfbf5e937554e9f8e88d889bb566c598
SHA512 cabb1358bb06a428b153199b9b00f7d720fd53c1ede65d69a413ba34f414a61b2250c61ab0816ac8c03a1531ae23c6018783c0e501db2253c1c7718f0636cb12

C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.(MJ-TJ9302618457)([email protected]).zxc

MD5 1c727ef05d151ad503bb7cba412bb491
SHA1 97754162e688882a3bcc94c8e24685684894175b
SHA256 8c1c12dc25e268538a6c0e29a9ee6d18ea8b02f914eb39920894473f05b4a160
SHA512 acd9dbb4252df7643bc2539c239d585a3fea3f0c68543dc11c11c1455b5636e54ea05241594523ed140aecd9ffd3613e88beee3495d1b82af03ee9575c48113c

C:\vcredist2022_x64_001_vcRuntimeAdditional_x64.log.(MJ-TJ9302618457)([email protected]).zxc

MD5 ddf4cd709364cf931c09cd5057d11a6b
SHA1 4a541433bb4ae0630a4f609b1672e2ec75dfd725
SHA256 9204544e2df8a92ecb851e0e40445a41580f0d676cb7e5fe5b24015fa34363de
SHA512 ec7470226ede18773519c4b92c7ca32d9dbcaf48312d3ca3f4e6dd8d5534fa227299afa6498e0e7458c6c3c6f27873fc47537d04f9f07f4e441ec10f6bb5b775

C:\vcredist2022_x64_000_vcRuntimeMinimum_x64.log.(MJ-TJ9302618457)([email protected]).zxc

MD5 365688ae38f42b4468caed6131649dd3
SHA1 330e5622712e99a2fddd6b3f62d735b48f564977
SHA256 6c2c27bd533e22f09c3e8a4d77c7196b3723507a23976dbeefbaac0140a73e96
SHA512 4cb876d9c86484a065fdd44dbf9baea31a2fa68a7f54a0ebda433eb419d9bac291eb6024dcd22c6108eab049c25fa701171fad0802ac5612f22f356ab5e14da2

C:\vcredist2013_x86_001_vcRuntimeAdditional_x86.log.(MJ-TJ9302618457)([email protected]).zxc

MD5 0a0599f3d22ffd5ea0c983079f9595f8
SHA1 f7a690b133d1ba5b79119a9ad6812b48acf54db4
SHA256 083eaf97dc19e06a32eaf000e4157f920630b91aa740c10d68437aa8abc9a3aa
SHA512 16c19eecdd5910620936f8a216bb626be08d1a65174457aba3655948c65a3cd893d4bf8611633104bc415f745c5c5c7a96b497096865626e7e63831e8ec48916

C:\vcredist2012_x64_0_vcRuntimeMinimum_x64.log.(MJ-TJ9302618457)([email protected]).zxc

MD5 65e588dab58fedce0a1f4ebeb2ce7cd8
SHA1 7ef87b48a5f27a4bf4a28cd30f40103e3a845698
SHA256 634e5e4c0dc6ce9d185afc475a1912baff1234ef67f382351a7f93e72040ba17
SHA512 ebc1a4db1dd20b2cbde4802d828f36270fbf178d40e4224b72d5dc231fed052fd233614595e4310ef0d6139888dd900e5ec165bddf86836a7fd1a2fba2790a82

C:\vcredist2010_x64.log-MSI_vc_red.msi.txt.(MJ-TJ9302618457)([email protected]).zxc

MD5 1b8645c9e734f998bdd1ba12b87cc87d
SHA1 f1a501ab2deac6b9b1fdfe1fb16319af619dc70f
SHA256 1b77f4692a27063603c1e61bd1be755a8cf030bdb1d9e858c47852116525b121
SHA512 e5a109b4ac7d92548eadfe6f168e4c2adfd2045d0e2678d215a73a31e56b7d0c1747f7a463c0bf2c5ce48d7a45b25198281e48679dad16328b16f3b5fe0ab553

C:\MSOCache\All Users\{90140000-0115-0409-0000-0000000FF1CE}-C\branding.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 02e43f7dd4af41b6d440f35fbc7a20c2
SHA1 69e46dc6c4e2031c4acf81ed87a575fa10f58466
SHA256 2c457ea8fb22f459e4e077dc537928a8490094fb31dd16e43ec7ddcd5378f2c6
SHA512 34efb94052db4b5e321e3aac70fd71aed930fff11d9c0e4c7b3ad6d0a8be8825a7c813169de9eb0381afc0cd8d1119bd727fd9efd5c3f1d51da12fee57f9a68e

F:\$RECYCLE.BIN\S-1-5-21-2703099537-420551529-3771253338-1000\desktop.ini.(MJ-TJ9302618457)([email protected]).zxc

MD5 d7e6c603fcb14670ee45892d028e0bfd
SHA1 f0183ce066c0b78f898c77ca597bacadc55a8da7
SHA256 f96d32dfa4a29d5a46fe60cd233bb911c2e68d86015194384f06c8f4daaca73e
SHA512 50d706932bf05a9d8096737309d256469bf90d53bc55bb9055a53b47c23a7114623842e5731fb3b87b81c8c58643264045fce5f7ee4e7882e8029e4d3863cdc3

C:\Program Files\ClearDebug.dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 a239c59f0072fd94b342fd4ef31776a1
SHA1 8c60e6917ab0d325b52bb5b67aca7ce213014143
SHA256 2f56be8f94a30cd64158726a366083dc77d2622fac8e351958f616eaf811e446
SHA512 5d987224400d19bb2d5c9a97a9d5a7a39400cce129fe061cfb7afa343c134b130f838d28b90d36a987f1e3a9b661fbfed7a41806f5e0825f8c07d2eb0316c9a0

C:\MSOCache\All Users\{90140000-0016-0409-0000-0000000FF1CE}-C\ExcelMUI.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 8affee13cc84ad80242de24a64dd9011
SHA1 3b994633de42e5747392da8f9917bb540f2fab97
SHA256 9469bc9d3dcca90b6f021649d965086fd2f928c00a7192c9a11837602a49cddf
SHA512 a85a3ab23d49b3cc95afc6988aeb31b5ae32e090364fbddfcb6beb4f2d00393c7b8ad664921c3424d7d902c73d8010e6651bf0a9d9a310d2d4e3f012e4ecd52f

C:\MSOCache\All Users\{90140000-0019-0409-0000-0000000FF1CE}-C\PublisherMUI.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 6bd19bd7adc79a1b8f27fc52fd018768
SHA1 8ccb16e4850021cf2b9f646e0a55607567458aa8
SHA256 5a5e7a3d583167c2943559d35333214adfecf90db93cd08973908c06958bebc8
SHA512 bc9a737e644aa7b2c3ace92d6c97299071f8f6ed8ad57225a170009637ff995fc968aee3603d570d630979a9fbb13d9fd9c5aba064a974ab42a1168cdefe0221

C:\MSOCache\All Users\{90140000-001A-0409-0000-0000000FF1CE}-C\OutlookMUI.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 89bf762ed3cdaf3d1fc72711e9b96a6d
SHA1 0eb63a4cfa0e8c383ea6fdbb71397438b252e8f5
SHA256 820a4d5db428c19bf4181b511abdc77ef6facae6685e6ebbb4f240b2ec6b7bd2
SHA512 bef257a60cdb3d760de423051460d170d60059ad232eff608cbd6c85e6274b43d801d4644a363bac233811f8845c4e244e12dd6ebe2c86da984dde9dd6a2a4a5

C:\MSOCache\All Users\{90140000-001B-0409-0000-0000000FF1CE}-C\WordMUI.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 4b06fc3c6df5527c87572fd29b5c8240
SHA1 09d12094bdbcac2a62ad284c567af06291de134a
SHA256 3cdd2ac38b7917f3d0737c40c26d66e776f38a5391d9ba204367a534ff6330a3
SHA512 a8417eeea6a08ffaf6409a93282a236cfbdc8a57aa0e811df651927af78f60e33d8899d37e5fded93ebd1bee554a1ccd3195b6aa26aea8d3192a7633328388bb

C:\MSOCache\All Users\{90140000-002C-0409-0000-0000000FF1CE}-C\Proof.en\Proof.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 3699fe965f01835c36e934b632607330
SHA1 b4433d84ae15dc3454a8a78bd879f7829957527c
SHA256 4d464a84c4e84e7f94feb29a74d7815254545fc8616d37a2064332f75a7b8647
SHA512 92ff22e0bdd781f114c390b1729e52f35a96f5191202940513fd61c498983665049afe725adf5dbf2d4ae1688874e478f0d13e6f7025fd5a011ab2d9a204813d

C:\MSOCache\All Users\{90140000-002C-0409-0000-0000000FF1CE}-C\Proof.es\Proof.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 57dfcd630cba44bb1e3bb73e3b7f0aa5
SHA1 7514e645f21d16f48e8afd126ac6d04b508da6ea
SHA256 731bdf7c4e34f28953ae600bc897d313640ffac3562070a6ae1fd2977e3ae50d
SHA512 6302e67b3d4aca05c9c1fd927ab86e4105eb088aad685a54addbe15b32cedbc4c6f4f844ae0e8231b86e2945d832e7ca7183c49133fadc05056de99ffba29d18

C:\MSOCache\All Users\{90140000-002C-0409-0000-0000000FF1CE}-C\Proof.fr\Proof.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 d406d0419bcc07bcd37326ceb459d31a
SHA1 c0c2456a363d590db09ca1b9f4a1b7e692d5e7d4
SHA256 cd15353a1f1a721f76a4940a42066bf5ac77d30b5ff9a993be677d78bedb4fd7
SHA512 b4738da00152d4bce5ecbd4bb6a1d75b1708c7dac2df7ab469714765e953cfe2c95b9b71cfc5c161cb368a836a260025a87bf711ae7185021b8b29038116d8c0

C:\MSOCache\All Users\{90140000-0115-0409-0000-0000000FF1CE}-C\OfficeMUISet.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 2f659750e7fad6daf4e3ace440755d19
SHA1 7d2925e4fdd367ba05a218051ae2548dfbc5447f
SHA256 227da4d0d5e2877568001abc381935b417c4cc82e6b2e77d34278740e55d2f77
SHA512 64fdb2805b7773832f14793a8ac49319161505825eb27972a1db9cc700ca6fe83d035c4883387f2f4c5743e6e367fc9385a6ebdb7f548c2ae8d6d8e12d320a85

C:\MSOCache\All Users\{90140000-0117-0409-0000-0000000FF1CE}-C\Access.en-us\branding.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 377a290da18254b90ff2ff71bb429315
SHA1 c3ac833a076208a4bde6f71091eeb3774c1ebeb7
SHA256 635ba73942ec84ddc5073eb6071cf35ba335a2353ab9f25240636361d0f5cf27
SHA512 45d19725dd500221fe63ccca6885109866eed9a2ec1e7e318265b700fae39d0a5b82f21550a3d130c1b93616abe77270af6faa136368d180dba0c85427f36ad3

C:\MSOCache\All Users\{90140000-0117-0409-0000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 1d0a9df5348c49045ed66fb04b9ede3a
SHA1 38d15bf65025dbedf46ed83cc135838e8634c7c9
SHA256 4925d3e3f08ae18cdeacf83dd26f93b62946912fb94306e82b8fef0882afbd55
SHA512 86bb54baaef17550e06300fc5b522767c9f6ec5d596ef40ef15fc1632fd82b9e286d1a7ecbcf6b9d382e4badffc1b305f600e49d169628ac2fe0861836365fc7

C:\MSOCache\All Users\{90140000-0117-0409-0000-0000000FF1CE}-C\AccessMUISet.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 a02a2034e40c9fb7c2c4ca4473206261
SHA1 aea877555d26532a594b921abd51f631feb965d9
SHA256 98ae006ccd25d41b0db91089901b121aa430d1a7087833412656143ba5cd1569
SHA512 9e17abf4b48f3b408912c1b1a42dca44509a173fbe7559a3ca53d2a26d165d901fa009a8f32b758f2d10fb008e5fa91e78f389115b77d3993f9c25f9d8c13015

C:\Program Files\7-Zip\7zG.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 f4c132d1fb98a26e3cfbe39439fb0bb5
SHA1 73b15f2b96980809765568454571554e51c77161
SHA256 35fdd48d93b32a8e2388c6a14c215ef7dce3872a4f3191da49217bc0c8786c12
SHA512 21ac4ba48c8c69de1217d7fa55d2dd14aeac0e7bb464e621dffd1b60ee2f5e5ac5df0e5c656b1fce37ca2923399dd7187f8c836007f8c38f104dd826fa8fd975

C:\Program Files\7-Zip\7zFM.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 bd4aaea560bc027223be96aa0281bb1f
SHA1 defddcfbe8fef4b0f3af56f3623243e3656c269f
SHA256 9b7f59492b5b943c5e0120afdc2a9f9e9726a4357ec39f4d4969a6aa2c61828f
SHA512 e2c3ed158fd212f6bd25140eb27f551d8c9dcf72a5f73915c52a668c64228eb52f42c98a1bfc4209b511502d864fa1af24fd0754935040ba653cf67ce1417f8f

C:\Program Files\7-Zip\7-zip.chm.(MJ-TJ9302618457)([email protected]).zxc

MD5 dfc60c2a18013ad6483f77e290adf549
SHA1 ecc59e1a3373624a7a37647ee7997cb7c51dea7e
SHA256 2935be6ab99c8342e39b19470413458e60bc6eabbfa25980dccd1651815b3702
SHA512 d20db741e0065d96ab8b297f188c1ec099618956dcf9a4f7e4c248d0dd65c867bad0d8d97eb3982921f77645566f6c2f51436466c9b04ae760e8573bc40c3b48

C:\Program Files\UseInstall.avi.(MJ-TJ9302618457)([email protected]).zxc

MD5 5ce0b44f66d957c55444f5a8b6b1305d
SHA1 374637e1bf936770c539cac2271f5d152706d8db
SHA256 586b1c0188b17fa64b12d350b87e70f6600b87368e99c4d87063371c798e9c69
SHA512 debdafbcb05d546122fc35e346e0b3d8acd8a466a4a2fa712aebf44cf7578b5fd94f456fc9ea54b0ff9075872b64c19a7b7efbf34f4319d87e2d5a7983a6588c

C:\Program Files\TestUse.pub.(MJ-TJ9302618457)([email protected]).zxc

MD5 cb857a161fa3fcb5a3dc0221690b6bd1
SHA1 9960721e4865e98acaf245b86d221ba71b3891c8
SHA256 8e35f478820666faf145ea187efc648264ae5d6a0db6d31b59798a10678e2001
SHA512 772bca61ede933e33c292e4623460e8d57066b1dbb90932f0e73445b4e13070ffec961eedbf113f9c419dd309c6edd3841590e90db56d54fce46b204d62fe05c

C:\Program Files\UpdateAdd.vbe.(MJ-TJ9302618457)([email protected]).zxc

MD5 457d71bd42359a678dd81449760eeda9
SHA1 d48e9d841f52f24416fe187ed9242cca87d5e33e
SHA256 0af3c18ddcc02605590c8ad235c6f865468af224846885ef611c2aa8aee3eba0
SHA512 1e2d1fc87a69ed9a8cbbacdc352fdbd39ea3f49b4989ca9d90fdb318b65fe3f8b656f55ccbdf854d5c9ad3aa4bd848d4b4d0c44280955acb195f8e980d5f3b3b

C:\Program Files\UnregisterDisable.ttf.(MJ-TJ9302618457)([email protected]).zxc

MD5 0d6368ee0f99aca23c4725e1907bf412
SHA1 24dab68d87c96389610bdaa7f5bd2085f2d9ff8b
SHA256 3735b8be9aa47d7e417a9fcdf2bdc8b8696a27900669d0d0f62fec20dc481112
SHA512 22927add07667ad84aedba3094e2f7c8d673e6bdfee39c3c4d4669c1e43dae27bd703c4ef51a0f07c41d95b51c75e99cac34f19ecb916fe0983d7ff6daf8430d

C:\Program Files\StopGet.pptx.(MJ-TJ9302618457)([email protected]).zxc

MD5 0b47eb6b944d5a35219c08e5eb0f26c7
SHA1 5118f99b479fa8bb79ccbf274e3dc2eff5dfd5b4
SHA256 5a465e92adf3b6e132c7710060ff23dc008e6562c7d31412a573a40b4b980314
SHA512 bd2b1e874bfd053b7f2cb777d5b63e289d40e3f720d3a71d2ab284e77dc0b6d12b3c3d745580aa43afd26d31e19eab06dcb2d8f4b4745f20712035655c09212c

C:\Program Files\SetSync.zip.(MJ-TJ9302618457)([email protected]).zxc

MD5 007f2deddbc7f57f3926289bbbcb4299
SHA1 a8f66cf27a3c19d59315430c0f5ebb9b8335f383
SHA256 0ac2200c54b4d19cac3731c815464054a5d54feb0bfbcfd47152000b67618339
SHA512 b2cd5dcd08c45d9627b4a650b907f977e0db01816e6ce4dc2e36af54a7ed880f69b75128974b12c200c578418bf4c597617e2c595fccfeb1315f5bb064159745

C:\Program Files\SetCopy.M2T.(MJ-TJ9302618457)([email protected]).zxc

MD5 22049428ca4c92582e2df1dc2b1247c7
SHA1 b45670cd7a30511baeaca2a15fb0c1edb9680440
SHA256 1b31ede87e5401bd5ede1d2f9a7764084ae958cb90a49d62f817af74756ab480
SHA512 2df5e60f445efa6d00d60cda109828a64cb507854921ede651ca0da6949bac50a18d403cbb1c52f25d963f68857605ef3f59c6c89a243db13ac71ff959ab142c

C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 8683711961224c3ee6a4846102f605cf
SHA1 46e5773b376612140634e9051959f5a4d55221db
SHA256 399321e08629d7b6bc70d7c9d5ebd86f617117ceb19bbfc66dde314790f9382d
SHA512 c3ea3d2708b4ae832c9a75b8eb289b38c1fc6efde2846ac4b7b3cc774f26bb3e10a30a164f1665bd2926e238276b3ffdabf6f03f4935ab53e7b2fc3d5239dda4

C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOLoader.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 f3ad421b086afe7601b4252f776c678c
SHA1 70bf259abb1e2242bdfafb8ae84fbc67150fc165
SHA256 197c911d673ccf48bb1afe3450e986a14dd0f989bba0f9bc64b616bcd9631028
SHA512 ebf484a071244551658c0de2a52979c2efa1ecaf726af7875a16545cbddafc428c8c2e42157428fa0c2d3aa0819aa407ebd57f47616b0439b75fd5129a64c6d7

C:\Program Files\SendConvert.avi.(MJ-TJ9302618457)([email protected]).zxc

MD5 a42c71be1da4436b51c57cd52aa8a6ce
SHA1 54365d2cd522493cf94cf194e9b06aa39548e65e
SHA256 0b1fa7dc5e42546e709552e74f8657fa597fa90a3883d65d73054f6e4bb40629
SHA512 087067fc5d3ee57c5ca4669e7e63eece143fbaeacad5b6770d5d4c0b6f72b4fdff3652847c5022b07abb37b604850053c56eaa98e614cadba069da6e1c314867

C:\Program Files\OutLock.wma.(MJ-TJ9302618457)([email protected]).zxc

MD5 335469b7763dba1015d8b812b2fbf63b
SHA1 b9f7d38f78e1dc03766cbf8a61d82c1aebd11f2a
SHA256 5eaee4480e5e0306e43666bfb4d21fd8a92788c38767e16f86ca1398259d249c
SHA512 85ab4832f4282a4936dd2142ca04cb0d6d2f94193cb68ab5f8bc3a7f96d4e89fe04e7fd8e3e8e19be706746eb4ef1c10a09d558ca8d220c5f2114a827efefb3a

C:\Program Files\MergeSplit.rar.(MJ-TJ9302618457)([email protected]).zxc

MD5 8c2f0aebca9663413d863a481a4969da
SHA1 ebb38ce89ee8914446ace16ff3f11de94e9453e0
SHA256 4bb9bdb5a37ebf4d10d1b77189af1f906cad282a2f71017fd5bb9d27f970c858
SHA512 43aa3051d2c76ed646d2d142ab0e43b71d69062216391db22ea6b3ca5e3b2e5c1df33e9ef14eead814fc7f44699371c230efcfcdc29a281af1e1f8a440397741

C:\Program Files\LimitRegister.wm.(MJ-TJ9302618457)([email protected]).zxc

MD5 12b020dc224854aeb042bf87a7ad22fe
SHA1 179f4d3b1f89549dc88550b4a4c8f97c98c688cb
SHA256 a1fcb7599c260bf28c356b399c2623201623215a225fd84e208e8f0cd73088d9
SHA512 63ef27f276aaef300b3de6cd43b695627871f48cda313b259e7b6454bb6f03452645e5d92dad5ba674a444365027915e76582ea27970606bfddf02a3d9911ffb

C:\Program Files\JoinConnect.ttc.(MJ-TJ9302618457)([email protected]).zxc

MD5 c8fab4644ddf08840fcc3f9f9fbd0654
SHA1 de4a2a86fc5821d2ff5ffe537d128995c167bf22
SHA256 04bf1161150a37c164a28bc536ce14d4fc0001d087dd3f32f2fa10cf90b247d5
SHA512 67f98ce5ae63fa62b850145bc8ac7e60279c646b0ae249021b84a517daa858972b87a14c349c4ce2407a657b0f89e8eff01d2413d4e26fe1e0d2bff0ddd9bbae

C:\Program Files\FormatMeasure.potx.(MJ-TJ9302618457)([email protected]).zxc

MD5 58ae27c656c2ed2c406e67c548f63bed
SHA1 3abad70e7fd033cf44ba13707a936b4e5f1e37ba
SHA256 c4f03476edd3d7983934958067278f3db41862cbff4e18ba04574310fd14562f
SHA512 9b40fbe7527a11a56e8d93ef8253aadcc5f68ad79823ca3bb6b2c7b972a301f345e60649a24dda132ea28d791ac5a3de9efc0f6ea40ee70a9dfb8f76be7ae128

C:\Program Files\ConvertFromDismount.easmx.(MJ-TJ9302618457)([email protected]).zxc

MD5 19ceb8816a3020778cd6a350d07ffe78
SHA1 965a8d3edf0b11949a8609f2cd977331bfd12f38
SHA256 fd18400dc0897c2516c3bcefe2acc68c4dc0b70616e62eaa7fbd89034451faee
SHA512 5caf09f93f88bbe110133d429e6e79fffd6b12068b92f8b07568f2cbf700d09bfc2a826a3a21ff0735e3646b3ea28b26ead8c17877063fa67e4fb391c2713541

C:\Program Files\ImportHide.m4v.(MJ-TJ9302618457)([email protected]).zxc

MD5 c85b484712aacd673b189e54bfdb492d
SHA1 d2115bbc8250eecb1c8120a4bad21849b2c3e563
SHA256 b78dcbb6983861125cc0127d5e0d21687a0a0bc83c3e8131c5a6e77bfe93bf48
SHA512 5ebc5680d19b3a2e19f6ce7701145849fac530ba55d6d21e42428dc93e9ecd67d1ab9ebf8123106eed79ea93220db39a4a865fe60e58ccfe108de2241d1e1223

C:\Program Files\Google\Chrome\Application\chrome.VisualElementsManifest.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 545cd6d785c62b27a0decfc390875ac3
SHA1 6c9334ff7505688eae522d3ba378fb0863c5e969
SHA256 91b27acdb2799171e7a3043cfa52a45cf4e95c2152e267d1fe02d7b798557e5e
SHA512 cdba3db6c360dc8774ca0507b1619ffd11046442f76d51a96bf241879f01d319a324cd987199de7eb907866ad805dd79981541c923c9e7acabe0ca5216f8392a

C:\Program Files\Google\Chrome\Application\106.0.5249.119\v8_context_snapshot.bin

MD5 0b0669be5e94cf12121303891e142cd7
SHA1 668eb5559f67a2b063c1e2fb592cd7779b0126ba
SHA256 a9b3d582d85a2d565707c04126e70341f98cdd8350862125a16453ce5019f35c
SHA512 7cfead5922f3ca52d3e57ba12785d84bb2cfa2e7f49bcaa0f31a94f97b209633a46cc69be02988d1ff0421eba68fa34c001c1685a9d20d9ce29f1d85192d2605

C:\Program Files\Google\Chrome\Application\106.0.5249.119\Extensions\external_extensions.json.(MJ-TJ9302618457)([email protected]).zxc

MD5 9a32deabe3271975c84b32b24579799b
SHA1 6feab47ad41183a3864787ec7fd77bb45c454167
SHA256 0ea0791b11d096c81bf6a2fd9bbc12862e685082105b04beb60b1e9de119c8cb
SHA512 2461c76ed227f7677a548d2bbdf227a92caf54364ae4790ba6f971c3b9b714f7d4a304c4e11b200a43a5f88fdb256312d61c406f10cd4cb5cce41c65088b424d

C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\ru.pak.(MJ-TJ9302618457)([email protected]).zxc

MD5 5c44fb9fa3462992f7a9875e63b3a657
SHA1 87808d76249cb639aeb5e9815108167c0ebabf23
SHA256 bdada2cc416cef3871be62a89507d8ea0b7be70c79f635b9828fbd136e92159b
SHA512 5f39c0b888457c1908eaff9ed7e77235be2a0353c078b83f8dda8b2b5ddce38e52f744f0d6288f82f39bcc4360e401f3bf375e5c92d510d0c7b329edc2399d85

C:\Program Files\Java\jdk1.7.0_80\COPYRIGHT.(MJ-TJ9302618457)([email protected]).zxc

MD5 3d6bf0cd4b605d89fa0ba662390295c0
SHA1 08a6f93cce52e86bad6653993f1039415d52202c
SHA256 13240b1b56cef1566ec4eb7dd737c2ba7c87bdd26836e9135ac4dd65006addde
SHA512 ad2e91b0738f31dee4a38b382af62675349f554c3b6e82da27807b5ed73425042509b777b642045d3e7ec8722a9c86ef8256ec30c94c536dcbd3aef5681f3246

C:\Program Files\Internet Explorer\SIGNUP\install.ins.(MJ-TJ9302618457)([email protected]).zxc

MD5 264c58f1f96a5643025d55dec8ac2347
SHA1 3d62ecb3a13647fc35cf75f26b6e8a3d6f0fd39b
SHA256 1476d3a0db04cb357288ba7abcea06d22b4f179423a0951dff33e1e18a5a648c
SHA512 d815f8540f8ee9b1be2190817e5cbe26d16696dc137540d827abd5fef803d55849051a34fc222b8a5361a75a047f3b4567b51811dfae9b0dc95e9b030bcb03b3

C:\Program Files\Google\Chrome\Application\SetupMetrics\20240729180028.pma.(MJ-TJ9302618457)([email protected]).zxc

MD5 615fe987d24fbe37cdb2a97ba426fe36
SHA1 835b68358a676d38d5028066dc54819631d4afe0
SHA256 5fb01001b6717733c11f92487500b70d0ce29d6215b20dd60555f36194bdaa86
SHA512 438900cacf692255ed793c3c7bed67ff99675bda1e210bc2fbe6dbee5939f17c15b384992cd7003268ebcee084b041599e0c9722163767650e79e133121c8b45

C:\Program Files\Google\Chrome\Application\SetupMetrics\20240729175758.pma.(MJ-TJ9302618457)([email protected]).zxc

MD5 d8ec565f68b9e61a13de29a8597931a9
SHA1 ec844cb55753d6a13763c609965df0a3a98b0043
SHA256 d1dac9f36f5b9ed5aacf5196d38c3a44e2bf32cf20abc8719f0a236aa308f327
SHA512 5fab52f7980721dd77e44adda52f5ee51f45041c1c6a95e26ab2ea9a38efef8c8b1ad295fffdcc446f3fe6200505ca134e22792920c48cc96d9dc206c8ff62c4

C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\ta.pak.(MJ-TJ9302618457)([email protected]).zxc

MD5 8d1ea9e898b4a47d3984f46834bb7a60
SHA1 19df8440fc023f4e0f4060995e65b3ce4a87c7bc
SHA256 e3ffa86942ebc5da77cc03722720f00ae835b1c6f315f46389cf1b50cf48aadd
SHA512 a464ff65cdd31f834838dff548b1b52d6394b6abba590c3911f010948c5bf6b408b25231faded734ddf5ebb530e27bb16f136ec319a7d66b7e6752a976666dee

C:\Program Files\Google\Chrome\Application\106.0.5249.119\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig.(MJ-TJ9302618457)([email protected]).zxc

MD5 3f0b3e975025605341cd2bc8933dec84
SHA1 b40c25bcf1a887ad8c5d0ac1a63faa1889dd75a4
SHA256 fd257db8fb234b71dd2c02c77e68d8931cd5d2b3289b46400553f2cacafbd6da
SHA512 c44516b918824b3829ac5bd4ca31e7cc0a963269ef1f0c1e19204f417d27cd3e2540478689b507ec709f5881719c7f5ff83061f296ed06d5a90fd2ebdbe3a844

C:\Program Files\Google\Chrome\Application\106.0.5249.119\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 f06112fac99e4a79114d7d149e4b7319
SHA1 3d92515879a575daf19d9978ca9196a043f3cb75
SHA256 49d0ff6e67e56fe97c863f9579a552cd9319b42e16f4f57c702cab69b86a9203
SHA512 04283c177f5078144b32cd35a1defaf7a1609aa029f6af78d8eb2c4d3dc3806e019f616a34b35a5911062de63a58672fc2c5dabe23a9486de49145e079c8b8b8

C:\Program Files\Google\Chrome\Application\106.0.5249.119\WidevineCdm\manifest.json.(MJ-TJ9302618457)([email protected]).zxc

MD5 d4ab524bec1a310bc6569e3c9255113f
SHA1 3f30720bea8b1be9c651fbcae7bbd2e497660058
SHA256 75b7b915b01db7ee240ecd018d0ccac0ea469ecf37da2f3c0be03d569a4543d1
SHA512 0c26e6f75ec0865f7f6fdd4d13804f8addbbd6077d6459bbcb8f9ce51e52b22b1820b2ac1784403d059c9ad95c481a184110d87373054f40d023f68ead506669

C:\Program Files\Java\jdk1.7.0_80\bin\msvcr100.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 9404f7fddf58bdf87d515d860ee2c001
SHA1 f5e52e214fe2084fc35f64757e5e1d70eb348848
SHA256 54ac670bcea37b6d78347894af8ea7920ac16798f44a663d4d0e84765653324e
SHA512 18d12f550647eb31b4617230d49dbf1b7b24f24d0f1bbd5289975cfe5f07b623a7f106d85cf9ba765e994100cfa60a96b9dce8155f447edd3c6a39426b45de5a

C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2ssv.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 a68da144dbf588629ac0b75fc8aa52b2
SHA1 566615730f8b3ddf2b012ae8dee84085f1f5e81a
SHA256 9abc16cc5062db97575ec56efce4e79ac87d4c7feeadeebea738b611f7cd5971
SHA512 f874f51378306b26748212c22700b96aac131e3a59a3780967d9e0649365d996342fc5d6831035b869cbdfba40ef2c5ed31ab20a1266c08babccaad50c325b32

C:\Program Files\Java\jdk1.7.0_80\jre\bin\plugin2\npjp2.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 f946780114e04e3ac0798cac8481a844
SHA1 ff4f3c599041628e8f20d247b93b54e6f04d66ce
SHA256 c8c0cd045dadd0992c488b3424719446295232283da49e70cd5c6e2a7395505a
SHA512 e58116f285ec64887cca0f09a56465d3128ab842f8b9614d5bdcaf41054a9982ad3c4ca707702aa5371ac256750eece3d4e4c2f051354deb747610335bca6c7f

C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\sr.pak.(MJ-TJ9302618457)([email protected]).zxc

MD5 6ebffc6b6c6fb00f19dba7e780282094
SHA1 d18ca32724f73d68c8075d977064b928ebebe06d
SHA256 0f38dd6e84e22f74868708ceffaa65811b1950a24f3c22f54584eac5600637bb
SHA512 0039f34843efbd96f1c579b53cb3d06e7f32854adb80d2c2d611dcf601b17c9f08896aa1ba810ec35e3a03beb05338f8144048bbc2781174dde0a65897e3dab6

C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaSansRegular.ttf.(MJ-TJ9302618457)([email protected]).zxc

MD5 219425117dca48db9032b5d52391fc0b
SHA1 db90fd50fe3022a34c9f21917275946298ff9001
SHA256 16df83302995095766181ca991d725f0d5745f566b7a534dc1748f94e3ff14e1
SHA512 ab4abac60206a1de40f93f786c0bf70adf3ad0b8235a7e449b373ce9539808ac98c869bcad7aff81d04a1d2c70e4a9d5d1805b3038c86e1ab654d259bda32a16

C:\Program Files\Java\jdk1.7.0_80\bin\jmap.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 5f1e3ef94236e15bc0ab295846476e89
SHA1 ba7d502bc177b8989e0db8ef209482fb1c4594ee
SHA256 65a06f325f51312c80db2b3425e32cb7270e59f2ae4358ff8b852eba2e73a0bf
SHA512 6b3fa425804bcc6cd8745a1196c602ee9d6845e92711381b471e6b7a26d63e9f4fdbb1615234d0776d4939444579427f445d5c3be0fc63b709b607f7e42a36e9

C:\Program Files\Java\jdk1.7.0_80\jre\bin\javaw.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 4e0d56761ea28a3ee152f9f8220d8c22
SHA1 2e045408eef633a2af6d0fe86ad72f9ccfeb98d7
SHA256 86e5389db0075a09c2bca998900acb839686c1921d5a01b2be45d6aadc440e7e
SHA512 0ad577cbf09cb6ae69da54b91d96f7ddd96443ea5372bacceffa2b95a498716095a2cdc170f685f40e265433378bac0a3b9747e52a390f77ffdc71bb9db95dfd

C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaTypewriterRegular.ttf.(MJ-TJ9302618457)([email protected]).zxc

MD5 493d9b8021c02c321dc993e29372a79f
SHA1 dc8a34a5ea4b3154915d21d13d77c8e631439acf
SHA256 74bec2df9f566dbed81b93c93fe997d281985744b8867dcf8096160cb0bccaa1
SHA512 f170279f74ad9c7afb13a063fe171f701d1a7c915465c51687d6e9f85ad5a26d6e8037a843d2304e9f54cadab3728fabb74579a77d4e51f8d74d8d7536c404af

C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\sunjce_provider.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 e98f6138817eb74ed3076812caaaff9a
SHA1 9494b51c804439a06d8d8f74a7f05ec1963e83f2
SHA256 65734f5eddaccd0c0343b97c232cea20e999159ac8c0cb4fc6a6562e10fca6fe
SHA512 455a65d14aef0848070c5b2ea9e0ddce69d1551b13ec29ccce4e17dcb073759ce020c4225b5bbd128ba61c4eae830507538c69a9bf70bd516630bf9881cef2ff

C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\access-bridge-64.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 318056c4f89b7818ce613a749cd77e2a
SHA1 b945726baa8f23eb77938872b245624f7bd7e3a6
SHA256 38e9f832554f159823c5e2cba1fdfbc241c3684178918e9406a77219d7cc3304
SHA512 24285236063078412ec3b73cfd5db13c592ddddcb5c4a601dbdceedba3a7179b5108e2449126e4fc805f40a014973ed96ef1928a6f87863307ac89dec897839b

C:\Program Files\Java\jdk1.7.0_80\jre\bin\awt.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 ab7e18f66efd599b37ecdf1243a3001d
SHA1 1e0c801194da898769e57af68199d930df81bb11
SHA256 1b0dc61375184beba8b6b87e5e2560cd464af7948519640fc62e109bf318d164
SHA512 2b8456440c27ee4d1e2f5bc4195195fbacd8481dfc7fa0e93014e45d4353b45ccd030937a189be2256b943ef3b892983f937b439b30f230c43c48aaa22b6f244

C:\Program Files\Java\jdk1.7.0_80\jre\bin\javaws.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 34f7f048fa1ea8df60b31f03733e7bf0
SHA1 98d2727673ca3833ebcb8a125cf932bc53a9159c
SHA256 adb85dd81d1d4ae9d07c511494ea503749cadd1b0622824e7c22a3fb86dc3f1c
SHA512 949ba924cc2913180c96cdeff494f530bdb7eeaa19db9642c6b70c8633595bf346b58a4d29b3ec3374000dc2c49584ac026b7a4da627f49ce7ca4b66ace311a5

C:\Program Files\Java\jdk1.7.0_80\jre\bin\javafx-font.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 9e611ef8b464a9ff7cc4cc666436c9b8
SHA1 f022e3e485f7484ee90745a0363595f85a893866
SHA256 809575a7e487d6e707e4a1847971bc12873c23f0eae3cd372177745b42c91b02
SHA512 13e02c1767106767179ce4cf297fd36dceca1f2a4a7e8d9477c023a002f480d23d0c335ef1576e822b5826009bf12d73a3a7685a9d05fbacf1632ae2709828af

C:\Program Files\Java\jdk1.7.0_80\jre\bin\gstreamer-lite.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 c6ba9c03c035f67faf40e3b8647c630b
SHA1 829445dcebea3fb2299dc920097da81297fb16f3
SHA256 5c532a700be4484fbc0e67a3b00d33ad54b5cbe6b59b6de6cf55664ccaa7b954
SHA512 f7a422adc5f12bac1c4c4fb70d73f98004690df95215456d4d3766a8144f958bb577ae2e00b7ed76b804373b5efd6bf0c4224b5a06321d1a7beb987ddd910971

C:\Program Files\Java\jdk1.7.0_80\jre\lib\jfxrt.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 877c5e9191067ed82731ba8ccabec584
SHA1 20bcd4c75ba8b4b0ea9e296fc65620aed3be2604
SHA256 cd7ee0100616001162a2476f16bbf97204b41c4199197e0c70b98f53a9067091
SHA512 83aad2783b1ab6f3819947e9c76def4a431ccd0c908a9d8266356a50c78e4086d57e2266b70fef3d3d305dcb339423382e6b305123772e5805bebec926fc6987

C:\Program Files\Java\jdk1.7.0_80\jre\lib\resources.jar

MD5 fab5f6106f450953bac828016b918f41
SHA1 9fcb931a851024e4f5f63c2150457fdf12ccfc35
SHA256 eef769251c77f49b2b30bee3367b60ea6ca1731cf0ed6f7e9e7c69e8b8a05441
SHA512 cc95c18fb3a599f633276f3ede9b2dd6ac0ef7134746ecd35da3ba8d10cf60a4f2d5ecfc1f27987163be461a97406f0bab531a247ba27103fa58c8d4209b550e

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.ui_5.5.0.165303.jar

MD5 da8fe926d6a86b7bc23b7a9d0966bd90
SHA1 ecb9611e3a8bea1392dcf961b6ab508aa414a812
SHA256 40022f63861959c4eeb7adf11f3e861ed9dca1b99f4f2dcab4213fd04da1ef61
SHA512 5c01fec02520106532c6796c2358f444856b73bfbf973d57502cfe54a758ae26d950097565404e007732149cb6392cf01d629e907d06623e234aeb8764491461

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.property_1.4.200.v20140214-0004.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 80da69d1aafb1bdabe3e5e54045fa647
SHA1 40e4573625439ad981e02720dcb72788f2526791
SHA256 fa79e9cf7bcf97ecd9457170962df33f3724318efb9dfc3fe771fbbaf655f017
SHA512 d4b9b0d589c62856276943f04e9f826b04a2088fbced409476056db3c10e4af753b38bffbaf5178377137942f5213abfc814a2e47aae4bf9d900bdb2c44cc365

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt_0.11.101.v20140818-1343.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 31619842d461607afe903efc0cada096
SHA1 8fd30aa93df3dacdec4c49083824f710ebc302d2
SHA256 8a605288e8844f863de80f0bfd39fb8412e3f19ab2f903a1865c441a931915ac
SHA512 ff51de8ad70c10ff16a49e318aea110636297bcc707da4c50b4d930b548eab6d5bb1f94f4275ed0c570b54d6b425393bbbe6f583271770c882fd4198d8601871

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ui_5.5.0.165303.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 44bbb3347794cd1bb1ec30c93c6717f0
SHA1 1a4d6411010e18e431ee778545f23778690d6355
SHA256 5d7ac1926a20e1a53143f880d387caf4b3c341c39cfef8a2978e365656579231
SHA512 7f995d718ac6a6d1582e9d57d6c9486b745cc8b5dcace4a9e2510d58ef3cdbf5b70a4777d195498562df77573e28cbd309e48459767b02f3f1890b58de8ff284

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.ds_1.4.200.v20131126-2331.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 d54d4f2d160c1c03c9bc41900fc564fc
SHA1 30e211ac3d2c001dea3b2a6a3b65d6eee759fbab
SHA256 815cdd63e2327bab6e26036be2220becd5d58c789d2e66e81e8912ded35e39b5
SHA512 2623c15f428e76254e8aa75ba3346133aab0c215d660309be466a7f676304ce8a92b7d0641bf1e5d3364342a1f55eb25e8d06f57c96be19b4eb017189854db79

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface_3.10.1.v20140813-1009.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 cb1831b40b6fda6dad2dcc8d2c9926c8
SHA1 6d01cf85dec60d460f5ef5c8edcc5e7d077ccfa8
SHA256 6ebe2157a83e899dbbb6163dd503300960e63e84c99c7e9830a81bd3f3be336e
SHA512 7281773738ea0bd85a25a288529283ce0e25b78b2abd7796002111a554a5b8369764c55df5507ce83cd1e5b2927e1c9fe55019692ae382a4249cd1fcdfb8184e

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.emf.common_2.10.1.v20140901-1043.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 251fb6de4fd849962648bbcd0a8ea84a
SHA1 75bbdc12ae6faf815826a5030b964194c98f1426
SHA256 a274617c4b87b4c751f0e1b8d57af292ff6e93e94d7b9c0a5bfed3b65d9dc409
SHA512 f24fa57cd46bbc20e84bc2766eb51c31de77b6f32acab411b78f9a42e82e239c1fe9ac2c7220ed8399153d0df6efd60ade0aab7b740f07cffe4b0b2b1e6325a8

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt.win32.win32.x86_64_3.103.1.v20140903-1947.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 d35db693aa6a29f3ca13a29d5aaf388a
SHA1 ba84ca3d5c347b01543c724a686db88c0c75bddb
SHA256 0aefb1f998b0e929250aac2ebfc4d1d01aad3fe7053012705c5e8a06be177841
SHA512 97edbbd859dbbbb0fbe8857343accd71de7372c06d25c11c70b01cb9f416cbdee61e6b8d9f65cb37a47387097df21ad5dafc4289c612f19b05bcbaa292f30d05

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\imap.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 6942f104cc3b32231f7051d5b93467d7
SHA1 3447b27ecd7fcff8a99420ccc52b26a94f665f81
SHA256 a87b92190b57d7fcdf3a129ac7a7aa8c0b02adccc9d432657e93d49f7ab5491e
SHA512 97053a69ddb21628311ae81ceb0e7760e30c2ccc8ce66ced716e66d328b61d5705e5b7b54b56082371d75a5542597550b3968cab6032b3e2f9c23d3007dc2294

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\rjmx.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 22f7a75b338ac2f27b36d85e9db64dba
SHA1 331efdc7631b132ffd71be189c3dd67404331933
SHA256 d4a860e5670bdfb5bf83aa770aeb95101f9b8ff816f0702653f68a821328c98b
SHA512 e8c1a57c0b9162b05d2e3244306f927be5aa3eee70d43aeb49101936fb7fb3e1899d7f3bf90d166d98049f74cd6c0b47191406e12752c81244ce2b6df4b23985

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\nbexec.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 1ff7dcc4dd587144f99d188864be7512
SHA1 ad13bf1645fd3c39f0c3c97735ad7dfcbf8453b4
SHA256 63f9a2e5a89ee736a4a782a6b7acd2fe3e8675d289f61b96ec0f273c54e51219
SHA512 0d67473d6909a3833161cb0556cf392d15a1b30ed7afd9a5acafb1dd0934f22d7fc401dde57474b1fb51fd3a6738da204e4966841a414d6dba9aeac31e814f42

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\nbexec64.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 74856f7547204eb046d11a64b50aa22d
SHA1 1c4e335dba7aa1fccd2ef29b5c9ae320925a23ab
SHA256 1d2e22f9a8b560e31dec59081f2eea9c42de017c75cd6672a2789c8d2df3601e
SHA512 064e927fc87a3dce809ece02890bff33b404093ea5286a6beb7fc5c8a51eb82d1f32f3ece35cfedfdf9987b70a92e426a1834d8e3565359058d7fcb9d8fe80d5

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-javahelp.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 c48c43c39a7de64cd56f62ecda56bf95
SHA1 e36947c16231b949658eb63ec962bd154ba8fb1c
SHA256 716bceb638b2c36771d67e45f1851dd0453102932c84a1b67366f41a9d692fe0
SHA512 c76a68dea9028bcff9057f6d55abfd843203bf1208ed70dcbd38259dd08b4bb53c85b592f397330f7fbfdf8135e7916fac10f2996bb7e1c7950f7dadcda1e4a1

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-nodes.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 0fa3eb633852f592b8a6d947d92669b7
SHA1 426cba9642dbeb4973d6150ef46a89e9d91c2eb4
SHA256 fd720cc796e569af02ec3c642d0a2878b439c1f1ddbdf42ba1833f55fcd324a7
SHA512 2f27de86de3741f2df3dfd0c25078a6f374c2784e8ad1012cd5053e8227d4ddc62992d7a8b733264be974814993b065c10be7ed8884c29b8497b1a18f37a6308

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\updater.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 af53662fe4397320061f5e192d2f5349
SHA1 55a92ef791d8c776f9cab02da61135e5883a4033
SHA256 1dd9e3fa0b4f720ca8d8aac509f1db3b246e2b9c1bbe66fea1d985ad15541755
SHA512 dbf2074da5588b00c12d4d957b1f7341d7f79df92352d67dc578632eb4a0ae64bab47e3874cfa0aa32acbd8c5ae780702d914b1b48d36e3ea1989d9dcf507419

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\jhall-2.0_05.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 99f040511b06f60542fbfc9dfe7c3a31
SHA1 ec100dce6c4a72935d08ba4500e854b9354f2567
SHA256 3be997eb59ec12a24380fba5bff18fbe49358c91cfda1384e84a94a6534447dd
SHA512 73e3baaa41ba083956493a5a788e1a537391b5037e2a6867f8d6775650e69066568dfcf2dc2fd1273bc35b49be3f4d1670cafadf844b7a38a2006508c96899cc

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-lib-profiler.jar

MD5 d8aadcb0239b8c04788847d33d1cdd27
SHA1 3fa1efb8efd97c72dad5fcfd03d59f604adf48fb
SHA256 2c13d54a4845296fd3a81e986a734b96740512e6eb36fce08af4d91949d86296
SHA512 d38c3b6bf83f1dcf8dbeeb4786b2634608a9caaeb49b47f8b4efcdccdb6b8ddf96a80280aadc04a5e71095fc25ac7ab41cd3e2da35d91c5ef058c94a17a4033c

C:\Program Files\Java\jdk1.7.0_80\lib\dt.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 74269b2b92bf6ba72862c0818b4958ea
SHA1 ef8e24229b4d300dedac2f3f4f4d25c6cddf036f
SHA256 e867a7580be218ea4cd4265c5a116e3eb6fd8f7dad3d8d9ec4ce50adc458a477
SHA512 420083caba59e64e193d4f16ebfbb84d3a1c46e5d4bd3480d86bbd29d9bcf06cee2dcb0cf0c0dc42114c0110dec300091e35ad412af69f645d4da55581b1ed4b

C:\Program Files\Java\jdk1.7.0_80\lib\jconsole.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 ae37ab85a255c028d2916c98baaca9d5
SHA1 3e745901c6018498938d9405dfada213d483f26e
SHA256 f7fb598a905d7dc93f2be26c48374d83a62d823c9d4bc8d568d581ae824a53a3
SHA512 6bb7b2e4b1a8e35f0f6a534d933629139d5350efab15ff7761133ffc465fb898b16a8efd3011edd34b23761db3f12ecd62907879ebe2445dbe49dfd26054ed55

C:\Program Files\Java\jre7\bin\deploy.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 c6a990d3782c3f9ea6d1edcfaf129af1
SHA1 f6e15d760385a8a4d44902719f51b03f36e9420d
SHA256 4f3388a87efc1f404d2e5855d90d7a3316c7ee2d682a6d4beb73503e1990a0b3
SHA512 fd9e87087e8407f2c45a69a2795c8d855590ad41f011b54924a0dccc7a2fdc5e299ca430488f35eab65aa2d0787794f434e5633258d4f9d131b0d7575cd845b3

C:\Program Files\Java\jre7\bin\server\jvm.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 e4bb64df1b0b4b5c019aeb0b8e476f4d
SHA1 ad47e2b928d769cd9ee123b26614a5c334285fa7
SHA256 f8414421645f4399d1eb90c54e7c8961bb48d1cb75d30ae6aac690d91e1ddaf6
SHA512 57ff554f003051d4544a57322c41d2c699d196f8ea8a7f00c7256ac15231bac147744b0f012dd308be0707d789c8afbf423547e7cb68053da15947b7e2046415

C:\Program Files\Java\jre7\lib\fonts\LucidaBrightRegular.ttf.(MJ-TJ9302618457)([email protected]).zxc

MD5 8dcb51a49f86ea357a414afd3e3a5ae4
SHA1 06db3f132b067cff64a5f6e806e32568e9b605aa
SHA256 de6ba4f7ba5d2c855d3dc554894cf599c2ec5fac8f8ed8e6fba0d6cb93cfe782
SHA512 9809f722ba55efb988727fdb7a807aad69c4512a54c505f972aebb3abedb25a9cd3c82c6ecff7a300b3cb3f9fba27381e8916f75ae598ea332a06f6753b7ce20

C:\Program Files\Java\jre7\lib\ext\sunjce_provider.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 4392633db0e90b8390c0b2de6060264f
SHA1 d50ce37ef1546c8988e60cafa418495dd9d73270
SHA256 1bdd1c97173bad8d6dacf1d3e1cb8f146514fcef2b72f8a2ae43a21a7991787f
SHA512 d724f1f36a242086b0011da40ffc2b2b6563442b7d79096408bf38fe61bfe81b808206fed5f77e90a0f2bf0f5ca17456501cd2857d1094c799d91ecf4b0f1060

C:\Program Files\Java\jre7\lib\fonts\LucidaSansDemiBold.ttf.(MJ-TJ9302618457)([email protected]).zxc

MD5 c399687238e0511f979601d8c226c077
SHA1 fe34d780cbf4bc2162c0335d60d3d5f8b159dbbd
SHA256 39f3143a8fab4c19ab7dcd591c9eaaa8691f4d4cf658ef1d3429a246b8d1bb4e
SHA512 e0d143e08078d2a06304ff66c3f1a456df3d6b9e1a9c134705a49c168c3a5a27c6fce2630825aa1dfbbfcb468008fdf15aa61441d9aef3183dfa6b6ae2b55b31

C:\Program Files\Java\jre7\lib\fonts\LucidaSansRegular.ttf.(MJ-TJ9302618457)([email protected]).zxc

MD5 b4d148578affa8f4415c1f968af612b7
SHA1 8956fa9d9e39e6d44ce7ad2fdb0ccc5aed366222
SHA256 57657fe447d6624b3ec56c9b1b830176a5da5f95604e893dcb5a692064a1fe56
SHA512 3727a3d106f7a9e4dd6761ecd38f32d6c29ad20b409e2a02d5a6921287efe18b459a157191f28e3965c554c075451414d557d785ea24ab0c4899f765cfd734b7

C:\Program Files\Java\jre7\lib\plugin.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 53d68e0212a78303c4be66a477dab909
SHA1 520b22d62e8711a89d0cbf018956e6860fdf7235
SHA256 6ad6f76d20b06b2e34fde72c6fcc87c2174de2a11c249d3ac229228a0794b4ea
SHA512 b00eafd880c16a36b276bb704b91e121ada66495d188bd8f5a9bd2e67d20ed7a571791e7bbb4661cdaf2932dc480cf70a6601f8b76a5e980f685d19e26f3cbfa

C:\Program Files\Java\jre7\lib\jfxrt.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 618442132d162f523d836b9f4ba78892
SHA1 cd159acdc94faea446c9a8f330248564f1375c38
SHA256 c0a2c282ecf4384a3a2418ec773208f8bf071c1a183c5702c4f016488a46e7c9
SHA512 a8bd8db33f23480a72d52040a3094482fb9f9ad4fc4728e9e785d34ed6313b79474a754b51ab81ccf9180f5c97634eeebba630ff72428ffdbc06fb899b153586

C:\Program Files\Java\jre7\lib\javaws.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 c853ddc7d0d722bea086281b5d04a161
SHA1 523ab70f9282f88d992750f9341a9fe5b52e4864
SHA256 0e031da13b4115c498e99313c27a2c05a98be4f1934892917a5c6a7cabfcbf0f
SHA512 7d7d293930e5d6f3425e6908beb97db26df9bd8784ba9dd50a9dd739a3c449498067f029b45bd9b65e0bed04ef9f6cbb88a2e91a90ddc31195d464933cccc9c9

C:\Program Files\Java\jre7\lib\deploy.jar

MD5 4d3b98f1f04b38ee56c216786a17e93a
SHA1 26ada886bcf44d34813a6829c766916f93948a64
SHA256 552f6ac0fc711444609da87cf0a797e10a78049aff3dc37435b41860fa9dc335
SHA512 21520e5a279051dfa55c08127cd6581b7cfef14289aac28abb40a856731b89f8dd88462cc95b3461cbec61f51e234addb911aff072eb0e2cdb73f104cecb2bcb

C:\Program Files\Microsoft Games\More Games\MoreGames.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 c1b24140865920647c2174f220586441
SHA1 63206b0f3b8d052ac0c54941749936acbae1938a
SHA256 9217bcea07104b11cd0f0633be8798431c088015aac4c5803f3fee68461d0741
SHA512 de0fd5603c6a04a5f08e830d3de62e0e0ba8c93555d9556852f8a435464d18978fb19cc66c9e8e3758defbd3a56a411dce575f313fe609c44fe0bfbeba994863

C:\Program Files\Microsoft Games\Purble Place\de-DE\PurblePlace.exe.mui.(MJ-TJ9302618457)([email protected]).zxc

MD5 3f659fa65d726f3c6e56d9e81a7f20ad
SHA1 aa7b335021a056718be87d7f6e0e793601f913d3
SHA256 0e22588e3efa0b95e0b45c5ad5ea70db8d86966d7bda4e540ed7bb9ea15d5654
SHA512 fb930d8367418ed832257d5b5ab7962fd2c3108e19e06ef3f5dbfdf62f0ac1d440b33961b50d13f37f4cdbef6e0dd40d0a84e308e455e5e0b123a45de020a354

C:\Program Files\Mozilla Firefox\AccessibleHandler.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 17b704fbf7e0ac5a399420d77bf0aea3
SHA1 b912cf87ff1b7f791091a8d353b436cf53d44a08
SHA256 b2314339a43b25d92a8253266fdfa2439dfd45eaa345e654c04f8eacc872daff
SHA512 fe6d2a8d200d159aa0fb31314b297d8a976fe50ca1036d2970dfff3a3ae6150d3fe9d3a260cccf32750992de983d481088ef4c4e911a92ddd1dc655db9768a13

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.common_5.5.0.165303.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 fd19d5f34e0582a66799a98044ad2593
SHA1 490baa37d6abb02a6128ed1f39b53d59fb5cd3bd
SHA256 a12fd21b7deb76e05f5254772c807af32e7bcab3e58f7b70292ef8d5656aa2fb
SHA512 1dfa77492aacbf834fd00624687ed420059543ad1e9a8ce494c74394c58229d488a76b2a6914a17351b18fee54b3bb1d11c62e9b985e06917d30eb9ed92cc992

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui_5.5.0.165303.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 7afb2e75a9d1818d22aa6453d15fdb49
SHA1 b72e356cc3d4b523354b0e45b637c0247e9a2c8d
SHA256 25854c17fff7151eb393d7f4496fd2864b35132d3ebf8250b6765e11b378c220
SHA512 69cce5f755f00f3d6fcac65ba5b176ad59c372b1624e7ebd69e73464f2cb7a933acf2b4a2a59b5bdf74b0e4153cdd78728fc8ad098f7ba09429a63fe7bf01533

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.components.ui_5.5.0.165303.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 da22a2ca7a8c566dfcd35b81ccfff8bc
SHA1 5a84624e11da12fa416a6324bdb9650de7c6fae8
SHA256 75b714587bee9c83e298a3ab8b2e5a1aa1fd7729538768a2564a06624d2872fb
SHA512 775ee78e6460210b1e3bf10820855437428e2926d90287f22f3dd23bdd1a2684038c9e5915f1c39fe5d3709c9c26ab015b7fb55cd669b4d7e81c7b5fadef4bcf

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser_5.5.0.165303.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 599589e575c68e22404198bb5da5969a
SHA1 e64c355cb6e44413704142b65857385471ebea0d
SHA256 69823216d557ba1fbb9d59cb2e61b2bf5089527c9b14546831f6a517009a4f86
SHA512 cfc99075e833b303d771a95e01fb1f6ea98f602abdaa8555597f529b24ef9b67aecf0b7bfee40e7ec63599c9b973708a924eb8200603700511988301b0cd7132

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder_5.5.0.165303.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 46f0c27e50bee2be304e24ba2f3c790d
SHA1 bdd773bace35244f636caea65b79ff6115aa50dd
SHA256 7c6486d2d644c0b04b5c8d025332acb27e77468c4619908dfdc07b72eabccff9
SHA512 59a69c17b06f5c68df5d05f823c4e1988f67b018632c4326d6a9104e43b91cc20eea47ad5aa861cc1c8b5c6608c79c00db5ee83b41e7fb1ecc2af27da985c0dd

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.ui.zh_CN_5.5.0.165303.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 c41e9bb9877515a62f0b96a3cd4be455
SHA1 20cf28e0e7942b9040eb463bc30dddee91e7b01f
SHA256 125b03463b558ca3e27db5396027859c12e3c680a312d8021751b96adcf98c10
SHA512 6453703c8321c99a2301db3a39a7a8a99ba360ed38e95c0fbe49e7d35807e32495d56fbf0e5058af8ffc82bfc40699d48d066276f5a90b41575b53285fd15cad

C:\Program Files\VideoLAN\VLC\axvlc.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 d420b24405dc010631e0f1e116dc2a33
SHA1 eccea44c3bf192dbc805c218efe923e76d1c3b73
SHA256 d753afff8b33e12e36ad7f5ef4f2c198f3bdca8a75940e23911585ee2c154bdc
SHA512 df4fd5826a586cbf3b3586a273728bf7dcd9ae7a059aeee88c4be7e0dcac0a1c079736f467c71a94a592ead198c595ae1eca437ecfa27b617e760a6949524ae1

C:\Program Files\VideoLAN\VLC\locale\fa\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 1ca193308143ec08faec6290fb9d0d8a
SHA1 98be2eec53e13238fa045b8d00ec2b82c70b6f1e
SHA256 3ba39384255475fa05178b6b7f5484ac8421166e83053c7bb40e3335b1d4e3d7
SHA512 29ea2dbc29e09dbe8b42654839c18e7c47fb89cd1b0296e746a41067ce6953c4e52f7a2bcb80c1139ead14c8c5143028ed151e326132770754fcda62c793fcf6

C:\Program Files\VideoLAN\VLC\locale\fy\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 f1f25d43d2b2a0020a8ab1250c763fba
SHA1 c39cd22e7ea7bbfeb8c1dc39c35047424cda4c0e
SHA256 84ebd685cbbfa5c94c9b7ecc7463359ae9b15f3932a57fe34c31090cee940780
SHA512 dbfc680ebe2daf7a9e3f88cbe8bcf5cdf989b009e38e98f2a8eb153195326c9f585d2eca8e35fbae951742d8c5b79b591d87fe90f5b6cad21fb2025b7c76b504

C:\Program Files\VideoLAN\VLC\locale\nb\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 fe7fc7c471b9a00aac0b512fcde9f2cb
SHA1 2cc1ffba4b42088d3c9d3680c3a2e644c5271322
SHA256 1abba6c2ea949c141b798e2c35cecf9a36f757e3ce9b9f91150c7f2be04a0de0
SHA512 1c69ba6d7e81662f1fd21203d7e01814feb8265393da5dac6e7584715fe8e75a57c00e32265c28c2d3242f9adcf16ce764d9cf697eef12220976f593c874881c

C:\Program Files\VideoLAN\VLC\locale\vi\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 0a673f28a3f6cb18bf786738d97225a2
SHA1 71ae15157a88dfb4b1ba84d4c06d67f183c9233f
SHA256 ee12686689648cb3e1e41e9eaaa1d096bdb3f66d2dc3cac8aad635b95dbc337c
SHA512 a4b4628e523737407a5ffcf77889c410a990c421b86ddce6606d327dbc7011fc5bcdcbbf9c880c56f4a61e2729201bf3bb8025ff082a103920e2d74d39f25550

C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_srt_plugin.dll

MD5 f26f2ef4d6671c0ee09ca6fd57fcaf8d
SHA1 9870fc73820ada6771a9316a1ee5c7dcb20bee4f
SHA256 8b1b9405b1e64513720f430b1299555018e0cd67bf51bcd9ca203734d710bbcc
SHA512 28efbb37afd127f72c2cbdd1fffc6a911263678521f1c64ae178aa0524b59ca25568c51e7d7f8f02323fb7e15d2e74f7ed854b4fdc548454c4e79c66d25ddd27

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench_1.2.1.v20140901-1244.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 04903d2efce252271ab996b2b9565d91
SHA1 443d11afedee59dfd2e3d57ca854cb248faf9985
SHA256 00217b55caba5f68d1bea7ebb16a50c108612d9c692cb36c6591211b025d9e6e
SHA512 fef0d6b4b8ee65c14efdfe9edcf0837a3d460110c154c99a4a499ff04cfe2b2aa0e09ca11a23286800a225a08ef3cfa4dec8272d2238b91f58a3149dc24def22

C:\Program Files\VideoLAN\VLC\plugins\codec\libqsv_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 9de339041a310ce829c06a5d151cdce6
SHA1 b2150bcba80db915041680fc1447805475302679
SHA256 01198c47b537b1657cf68afb9d318d8de5afdfabe4e34c99e2e6e1303ba79b95
SHA512 ff3926a6950d809faac5efc42f325427fccb2cb097d6abb3dbe6fdfa83827e8bbf3500a314a0e241c712a8f0b25904a615a23c74c63041fdd467bca0b76eb00d

C:\Program Files\VideoLAN\VLC\plugins\d3d11\libdirect3d11_filters_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 8128b35d534b59d364b66e150ca4b8b0
SHA1 a8e24ba46bfaaa4185acd10dcaf28821a0cf6d32
SHA256 c1398aab83882bd58c1351a013893aad80571c00c37b8e7fb49972794fcd2eb7
SHA512 b672674b33f03841e9c2fe3c4c11f0c112f2c6f99e0b7dd2614d834476ec43fa79cb2564e81e01a1dd2b0f17fca97ea825ed127fde6e02396e670d080b0fbf19

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.engine_2.3.0.v20140506-1720.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 e4b5a3642a2c99555f34ac7211a3e38d
SHA1 e6bd075ded7bf2cfbeecc9e48c0c928c9bf7dabd
SHA256 63d2757a449e660937eb4b2c285944a88b26848ea06c14dd873ab6f7f74fa409
SHA512 db45cc00b7aa9f60df22ff276a7716c13ffc73993eac9ebbbc03b5ed15196608b398362507d7708c561fde760f6d1158f0984c5b01f3bae6d7a8eb170207fe9c

C:\Program Files\VideoLAN\VLC\skins\default.vlt.(MJ-TJ9302618457)([email protected]).zxc

MD5 60c13ee3662587cf4776f317d3a1a041
SHA1 d0a3b5aa47713dac99a614a98c260585dcfd8eb9
SHA256 fda359bf58a566b0c93ca2f47ae1edeb40cffaf010461f99d4da91e925a3fd25
SHA512 fe8a14d5e3edadb38ccea6868b891636029905dacae0c55b6c2c0dcccc4fe443a7f9e5fcbabcb22d079253a0d2197c6bdc7c9e103bd4d54e0ce69ff308a30170

C:\Program Files\VideoLAN\VLC\plugins\visualization\libprojectm_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 d312daa59ea2b5389d37fd85f701be51
SHA1 25f268b250caa41c4f4ef4f8c2f35e69db01893d
SHA256 ce3749dcd276f0653c9fc724229a6d7cde467009c3f62c0a04647e9921d296d2
SHA512 150867f1daa3d656c8d351e40d8bdb71746e12f969d6afa1bde06e27a97565d1b75db8279edf4c4f95d36dd1bb5d0d657f9708749744cba970562ce96228b843

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.eclipse_1.1.200.v20140414-0825.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 37900246fd16c8d0a2a7358182e815f4
SHA1 b6ab4f0619fe2691dbc1e5a454be397c7102ee44
SHA256 4f470af1558a3b4ef2d6f91c7e316f8eb34ea1bdb3fc858a41a540692a8e9c89
SHA512 568a5a33625ca9213171564288229d9c94ba427a54b5fd4f9a66d71adec73b25dfa04058991d53c7cdf19ef6533d8636267142f75d090012f918b0124db27171

C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libsap_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 53d30a342a02c178727ee72900df6a96
SHA1 8307d4b7bfadd33891cd4b27745b65d215e29432
SHA256 1113cd34d2e09e8329ac347f24056a1fe36b966d17121fbf465435bc3d9edd5e
SHA512 a8311ba61634cbd830fc41472def4e962f84e9e97be977c1f172196aa6796e0e49f25be31ef0e24b04262e88f5645237427ca3a9b2840592d98aa75d87e5c62c

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help_3.6.0.v20130326-1254.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 77b59ff89a945a71f25d7b4483ba8058
SHA1 e7317f6164a13a39ff8dc322aa62004a41b8c027
SHA256 37e63fd0f2b9d4051da7539d889c45236f21c78a8be31685550454fd49653d15
SHA512 ed451d1823aacfb32e0177c65a088e2471dcfe8a674b80934a4fcb38a764acd04765fe060e828481cce5ccfbf001829510a143b16d8ca9dc2fb6bae1d3200fa3

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.compatibility.state_1.0.1.v20140709-1414.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 ef9958b7e8c9f312c842e7176d7b68dd
SHA1 99e24f61dd9f51ab414f3afeedab4114b82021d9
SHA256 68919c4f5a82abe10eda581f8336d91ef6376be8db8a304ee85e45a233b10513
SHA512 79a101856e17a0c54c277251fed313f3b41058fe5ea103cda28bd4ac490bb16ea3e490ad67137b7a7e9697b2082d9adfb331ba837a4c2e43168cf84210a1b8ef

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.text_3.5.300.v20130515-1451.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 9b5e727e4c49436a54baeec41e0b42f9
SHA1 4b071c8542885aff64ba51c706c13bdef2ae435f
SHA256 bcabf55025836fff811d402ef7083481431ccc98ff8a0c1e2670bb2a748d1f45
SHA512 aea493ad9ebe4f34cfb464491be7f01956c78d58728c0843f503e364cd1c315614d9553276d4b3ed5b5b4dffc040f684fb90dfa106d94e5dce9e4f85350d9da8

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.sat4j.pb_2.3.5.v201404071733.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 44cc633f47adc8fb9d350153ebea0fa5
SHA1 e83926ec4264f2fa8a84d7dbf76299d20410698d
SHA256 4bebe5b98505ff19112e61b13b5ec1cf83c5e2903f243986f0d352f1590cd914
SHA512 75077bd979ff09643df669b7fd84e6a624fc501779c006e06a1b2180eafaf44db5b9485429b115b87d6dc5e572a294a5a5f80e078f26f23701f0fa920c2a2d89

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui_3.106.0.v20140812-1751.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 e0e2e349d623ce9ea0b13c51a05c9f8a
SHA1 4eff42540561a9d2f1c159d311523fd8b996d47a
SHA256 2201ef9c02e473b957cf5037360c7f95ab180595f7e66e9eb528ba16b89dc471
SHA512 2673890e35c770f4a84a717610dec785abc4f02d91468871a2cf6c2ae36052db91d17787373b79b8dba1cd0c34fad9ee50d17643ba31440665ec686cab7aea9a

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.databinding_1.6.200.v20140528-1422.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 29908bd757b709c1edbfd8e801c352a6
SHA1 7f413b1b2b970b97bb0f578fb2158891897d1334
SHA256 26dd439c81696c752692ac0e258350fde8a63ec3a09e6f80a756bb6d282588da
SHA512 d414371881edf963fd6d78589d9b76b26054262dc90c0e57ad0db539ad9d2dc2cc5470f097dcedd35be993dcc83b5192f1578a72f902d98101ce93d7d47c4bef

C:\Program Files\VideoLAN\VLC\plugins\spu\libremoteosd_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 43e9a4ad1516162179b057b225bf2f90
SHA1 89b07afbd23c0598bcd9570ad25f9ffe97ecd175
SHA256 61f9b5ade0adc91b19194049d222b290870e0bd5738d000edd7f93b60041bcda
SHA512 35ee4ede83206a1882a709a2b600a0d1b59a03a30e25468e47040b5a6e90490da4267642a845c04118049cb2a25e843ed5743ccb509ced05faa79cbcc448db68

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\mailapi.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 7d1c92ee464e184ef768465a3493014f
SHA1 1ccb054fc1f8de389c57442e83b3684b636f4e9d
SHA256 fb783f1c5ef5e168089c4037d802484f007f6097bb304670615f93e0002c7528
SHA512 193ccbb918b4931019e87fa45995dc8c19fbda8f39469004a46ca66d0e4150d3f7abe58ebf6376954aa709166bd9b84dbbceb66ebc0226c46c14e8b402a0a311

C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libupnp_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 a332b96cd781e00bd05b1dfe8f66fca2
SHA1 dfe57a29c8612f519e5410cb05e07faf17d5d242
SHA256 c18286c294d56f875e387124a59facea421c42488c02f8aecfa1b0a12fb472dd
SHA512 32e94d92bce2d308efb145e7054b4dc27c8081ed4430135e5924ce7c011415c6c964cfeca77f273ca5a404b994b24c6d4f21f285da6ecab45b1bb1992100383e

C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_hevc_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 9089404fb971221dc23a865bd221c6b5
SHA1 a1fa5b8c178ba8133462758a39f67826757db48b
SHA256 ad0e0165977f39e6aa0e8ed3dae6ed7bf0a47156b6b974c93e0a2d6388d9b878
SHA512 ac37988642178074ddbb6574ff7b8f8a4b36760bb4f733f15370616e22ffbb436309fff315f3ba4f1aab3554a46d40bbe71db966280d76252a596fdebdc3d3ac

C:\Program Files\VideoLAN\VLC\plugins\stream_extractor\libarchive_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 8559d71e99c9e59e1f54fffaa4b8e1a0
SHA1 ecb35d37b6fd02f994c84f552ace10acb14a9bc6
SHA256 1ba1ce911c86e042b7818e52bf719373fc8f9a593f1f79221a73c98fa839c760
SHA512 75c97c9c9148cce77e747e19e11f269eba6166621c077d3569f008292f28cf938324caa7de2a07952e11b19086890352b788f4c31689daafb756187044e21fdd

C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 0552f04e2964a744620851c0dec52334
SHA1 c2f393f250f55e7801d072e8c883eca03dc98e60
SHA256 ab15c12588e9ba70938674eba312d6b577f0d9b0e02e0e78d3fe9510e7d4db3d
SHA512 eaa0ece8072b4f489b12c03909e6c2378320427c75647fd94489d692417eb9738fc787520f1fb2d03eaefbcb1bc5445412193b1ba2e4a11fc199f28c63463e3b

C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_ts_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 3e4319ab446004b4228e3ac86d1a9595
SHA1 68411db9b7f7381cd522a4d6c565217baba4bc8a
SHA256 28d492f88ac9a16c80584de605b29d875d2e837d8c5799760aa6d8180b87d609
SHA512 7be4aa9f847fd64ad88d2330dde0ef96b25404d2f5f02d9401ed852e557f93bd6815a9e2b20adb015481286182961248a30c10d1fda51f306372993daaa307c6

C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_mp4_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 8709c6d5e495ea3b6e8a5b6e07e1ef8b
SHA1 73645fa8be2c15aae533b1a3a8f563f806eb3329
SHA256 8762023ae22d8dd47cbfa371178f7e9b3fbe74f3dae642c76992d0d9f9df818d
SHA512 0a4fc184960d6fef8518dfce7db700d113915cde309f3d0fef1ecc765a8a9f6660d03cf799e731d89b8c82f30f8f7627d303d00a1fe078bef3796082fee4feae

C:\Program Files\VideoLAN\VLC\plugins\lua\liblua_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 ceb340c608401e8829e7505ea05d5e5c
SHA1 01eac220fac99a285fce3e63db93e0ec4e600b92
SHA256 3d291d66027cfcc512a70f9d5bee1c702abc735d6f366fddf5cad60205445f71
SHA512 b832a9a81085336ef8e2ffe5788e5a19d0adf3be0d7dfe764bf4762a74823325d648c599817eb00804e4c9ab5f7eb7ff57a20486114c15a8c95ab53961db4ccf

C:\Program Files\VideoLAN\VLC\plugins\gui\libqt_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 fb9cb1f78abd4ddb49152ab4052beb85
SHA1 7cd840f05a434cad20c418ba9c634fc9a93dc6e4
SHA256 6a7ee0c8e811f87be5fe94fe16337786f119bf759acaa33630c43488d22953c9
SHA512 2fd50d0b9c36bd23a20f6021ea77820e99f3865f13ffcb2cff7341bf044b0882d82666642a38d6d579e6d1b55c230f461222b5f8bb0f1efd5e18e6a16f9a76fa

C:\Program Files\VideoLAN\VLC\plugins\demux\libts_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 e80cd4b70f0e78b72d2707114e1cd8fa
SHA1 19a79be23e07c3f82fecbe66567fcfd67b690b88
SHA256 6ef808932cb1433d2da56c53c3f7b81f0d43b11ee56260ed59392b0ac209b70f
SHA512 682f96fc3a69855d4eafa8695c9b0a36ca6a23df46c18ceff1fd63a85b51770ea8213133d00d51d4fed4f54d67923cdd17aee8dbfe58e70950ee4d0d286223a6

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\nbexec64.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 eda289769064352a594926cbc1a483c7
SHA1 8d8f2d15bf6c507c0065613a7ec7bb512a223849
SHA256 0e6b37c1ea8d9b39b616249c909def3a42170f08e875b43e3a601e7ee4ecfc48
SHA512 d3bf33717634c2f07beb37347944d3b269f7be98aaaeb296b00d64783117cc730639fef3a52db752b682abe5b38815d8fc9377470ea5f86766b2faf62d88ce30

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\org-openide-util-lookup.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 3b30324252f2573ef5a5456ee493e796
SHA1 557d80c38506191c3d56205ab9dcae905d1b5cb2
SHA256 2c8db751107e45f0a103b7b9e65e4b64f64054ebcb41935acb1a398b118de7df
SHA512 abd8082c9c275b2356f44398cdb7993ab882197d51bf3db683a743771c05f0e650e593bc8db9476e33a8cf526246f41856516075b3da1217d0ac811c8df07097

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 05a4fed03616a453a942d40017ff68cc
SHA1 9350ab6b7e1a6b7e74a06f63571c10b0a3fca60e
SHA256 165cad6afcec09616301ba679269503668abe92ab5979839eb450a09263b06ac
SHA512 0019582196836ac512f55088986b9f507be18954a6d75772d6fe0d8557314b126e47d4b18c8a35f1568cab20c7cb3b12779c7f89cb73579f7504f41283bb4871

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\sqlite.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 47c56eeea477ac755cda1cef81362c67
SHA1 2132bac713bbd439317a8d04e777b7f918d28519
SHA256 4a5b57d57f7c69b009ac1957a31006ba42180ec7490adbb6fe08d1b802d64ffc
SHA512 580b5a1aa3d43ced8d7b640fb102412ccd2069494234b478f787ce86d16757ffa18734fdcf1edbfa88de764245d1df73bf85642f2488cc0c755956d5a4f96218

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Checkers.api

MD5 5bcfced5c60c686616976c282be2c38d
SHA1 ed5987ed36f16873e4cf01d0a7ba81d12070bb0d
SHA256 93836b0a9a7b9d2dbabeef4ffe918ad1f06ca45530ef25cb0511f7fd88c0042f
SHA512 1cb2d37eb606216c0eeea351df505d6b7431867ea1f776d3c84e12a1e197bd5d5eb32d671262be59977568511c8a7917ab703ce0ba4a04787e0e8bd3099653fc

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\QuickTime.mpp.(MJ-TJ9302618457)([email protected]).zxc

MD5 225d2ed875740445350922d810937bb6
SHA1 8a57d39141e9efc6edc5ca44da70736a2e3f9dd8
SHA256 d5799b359167bce031e59064b25ab88c201be54c8884d1fda7cf4e935e7a53e1
SHA512 025e5cdcd1d0879461f9efcf8b314320b8e332409a4af1e8101fdf07388e15b21d64e8f15ba611306467c1a49c5af89c0cbdc8323b740ca24069454c31e43d98

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\2d.x3d.(MJ-TJ9302618457)([email protected]).zxc

MD5 da33bf77f5b0538c06657563e3e83d56
SHA1 394bcf330f745c3cf0dc267529b1aca8a9412e10
SHA256 ed3bd82d3a51ec7c08f57ac101b845038c6267315a33fba092122e14ceddf5b9
SHA512 cd558d2f49db03615dd5294e0aa4b1e5e8e7ac341736fd648c3096af702427bd212d61046a5eae1cfc4f5be965591d8a5eeb051305c0a167cb0d6f8527d0169c

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-text.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 8a840587636f2357030a610ea50bb6ec
SHA1 5b5b26a0e7fdfdd8cb0c2e3aa099851e0aa03888
SHA256 31734b82742f96b8b8a3e4cf890ebf0d076c5677c7a5e799b5e9fc47550a721b
SHA512 5fa54e65724aedcc8cc362fac3dbb59bab2d635dac481c0a4b02cf9ccef3f662c6b9bc8de2405f45957880b736c8ad34c5c30838d5d3435b7f048018fcda5288

C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1033-7B44-A90000000001}\AcroRead.msi

MD5 57da38a42ea2ff5aa1c24ce954a19a27
SHA1 53726f8542e5667b84e15ac1a0b27003eeb2ae89
SHA256 242e044d5c39c1b41923033788f51a4813572813ca6479fc9e8efcff79639095
SHA512 4a85fb5f6aaeef75cc5f3e1acaac4a45aab00a958bc406ad1d5b08aeb07ef0bd651b2828f1defbdfe20e704e3f61e76dbfbe5819753520a9de7e1dae5bedfb6a

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\SPPlugins\ADMPlugin.apl.(MJ-TJ9302618457)([email protected]).zxc

MD5 0cdc173e68e289f069703ea731d8dd5e
SHA1 0856bb708ae4894fda8a9649c1c782fff209e1e1
SHA256 d616e0871df6383450b4c165964ecc61cdc99b36d7183c6dc3f7ffccb32464d5
SHA512 30609544517d071a7d178c27b672da6aec81b7894b24a0d2fb851aa573e1d4b54e311c76a220f691a46bb64e61e0132a9453aa2102b8ee5d8a4fefe9c2fcdfc4

C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\PNG32.FLT.(MJ-TJ9302618457)([email protected]).zxc

MD5 8daef1082c3300285b042739d8305801
SHA1 37421d669dd05440134bf7078fed56808d98611e
SHA256 b5d9847967f3a6edd5598fcdaea53adb3cd935a4a24048d9b735daddfae987fc
SHA512 0f6a56ce24e6d7452c802db55ed0cf72b3dd5decfb34d8a4cc229f34fb0a48b1e1860e9fb0caed2948a089dae68385fad4fc632685a01fcb282ed6844e15652e

C:\Program Files (x86)\Common Files\microsoft shared\Help\ITIRCL55.DLL

MD5 4cffa13f86d9bfd31d0bf96c3ecf795f
SHA1 4dacf8a215aae1bd3b201134bee778a50554c29c
SHA256 10e3e486bb2e319f377f84de71486852ab2cd52994f867fc98eb91eab947d7d2
SHA512 bada45eed1425e8f38e141c049ef9837d9427b32e1fce6085865393c9b2827c6c701e3621ad32461de92691f4a3c5c2e61c960af0872cf49110b9ffc638c098b

C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\EPSIMP32.FLT.(MJ-TJ9302618457)([email protected]).zxc

MD5 d1c116d9e9945b6aaf6b1c069453c631
SHA1 f20f61b63a4ad7bed1df3eca40d578df789f185e
SHA256 c3bd3f15ed24d1be936603789dcf36f2ab85081ecaf973006e05105cbaa8a3bd
SHA512 f2d843cbca48b705ab6338ad5c7473aa7fd4bd4ea8d96b259de62c5f011aff7f0e2a1c4e277ff75c39a6013189f0363074745ade1f99b84d7442c69fb819a01e

C:\Program Files (x86)\Common Files\microsoft shared\Help\hxds.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 2e48b0b00764088efb2c18ce11ad5b13
SHA1 04968d653191d10f26657a80b0bd22e3a81337d4
SHA256 b76d2559ed20ccabe4af6ca09ca6af7db044302e276f5c75cf26285177e84eb9
SHA512 babea35a4cfb4ed4a1552c01bcd4a12f70d124ef8b13ac4988ea1cf2dd22682644e84c7b8af4f0d9d0161a697b6f3141a08b6f8c03d1ec182a1a703b94bb497c

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEEXCL.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 522b2617ba6b5e4cc67b5e884e849677
SHA1 4740c367bcb388025fc845867884ddf8e67090dc
SHA256 a29401b5fad3fd714731777e445658fa294dfeb4842b058236e655b4f4686337
SHA512 81884da9949a5e920ca9d6e131727bfe4a99922206488972898038b84755fc24a52f1e3a6d366b1bf5f53ae1768be9ae7bcea036e738a1c47eb81273d9d80a07

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\ACEINTL.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 998d38e66649e2e85e16406e4ed955ed
SHA1 d1f42afa43cf01f8cff83861479dee523024bd9c
SHA256 47cfb9a328498b9402e9069dca02825d78642ea1c7ca8e5d47465b07837935c7
SHA512 b35f8a08d3ceaaff4267a9ef2856df0a4d13eeb31f8bc8616f3d3abfb87c65b2af2463b57a465ff980d18a74ceeb41e1d5dd404f6ae5b08d570db8e203808f6f

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\OSETUPUI.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 059d590d6f72d13e22f3de03f7159685
SHA1 fd646169a473dda434271a0f12d9102999636e08
SHA256 dac0a7221a2b54e2ef54ecee3ecb792c06657266863b45bd6d68edea69793cb6
SHA512 8dba03890bb515604c3ac382118fd0ce9977d3a4b8a8db3617a80f5ba007da0f50bca5d2a394e988c09fb591564b3d7c4eb13f71b564d0c738fef82ce0a15130

C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\METCONV.TXT

MD5 9a5663f0ff6e0f38a9c8f3dca2a98837
SHA1 2812c3da2ef6a119477054291d964e283fe914da
SHA256 81c5620a910615ecfc6710f4339aaf39ccb5ed149f8b9e3df4ac70ebd8c6b9a5
SHA512 b00fa05177385f1bb9e71befc36ca31098c082d08cb69baee49ceac8318080732dbdd930a636ec13985791f931ce29680ae9e3911ab82f89154c514c4a706025

C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WksConv\Wkconv.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 c1b5824d2caca9312196e456a8218667
SHA1 0f45bc13b7e5b0982072aef7d6c6a1ab25110314
SHA256 0d14096c65118c0e1c46b9e0b31dfb437bbcb2ce8bf52cf3b64c2fc400c9e9cd
SHA512 11c9525a90371ea92365054f8288f3649565c2ead253f9b6c1fde7ffff1cbbacb51b1491cb2327f5aa56f41dd4a36c180034e092d4d33f77f8dfbdeb00426eb5

C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\BASMLA.XSL.(MJ-TJ9302618457)([email protected]).zxc

MD5 faa7a7aeb4ed1737e7d10929e5cad636
SHA1 1ed43e73bf871d6c6724b7b9aaf32325535f21a5
SHA256 4983364e2f9388a76e078221a52d22b5a866141d029932884018b40b5c387e8e
SHA512 fb91df3efc49e558560007f3607c8b3422257e6e222cead523e132519c783c969a0153a7f9ef9ab379dc20e0b739fc4c21ec5f865587c4cdea388cd4a7250fb8

C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WPFT532.CNV.(MJ-TJ9302618457)([email protected]).zxc

MD5 23848de38694c158db8f2dffd5b574c6
SHA1 e7bf67aeffeaf539a91fe2386bc7da31d55de38c
SHA256 c2f90c483e0f6e7485a830321af2ac3bb2b9dc02b3cd6f2916e53d503e29db96
SHA512 e6d9a2f75c9da6ab824a2bb8c3231f086ab763a82aa8a49cd3f1e5624493cd1afae04072829d8edc989308078bfc3106420685d2dabb5eee94b59f5b6a11c7c3

C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\1033\VBUI6.CHM.(MJ-TJ9302618457)([email protected]).zxc

MD5 b8306bee845e8af7cb22be74412ef0bd
SHA1 4e8e4092419fd3300ae5d5e6e92ac05887338558
SHA256 ca999e45703fe5c8423d75050fb868d24ee9adebeaabee74d1c8a4989733632f
SHA512 32637c758030594d1f6c9e5c10ddf4a2990b4005af8203bd2cf8431bdfffe7f0d728300fce7fb9decf0f53622da47b8ab534d19d9b83a7ddb7ac6ea99e842a71

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-sampler.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 6349cdea384ac6c99b01055deb22b8fe
SHA1 2e0ff8aae3ba01219fa5946434fb1cf21b165a24
SHA256 a986bbb3a4c1547bd3c9cf4e73550e47e665b34d84cab5090230862f70989c20
SHA512 1b1e64a4f4cb5bcd57da1c08dc6a54f6b4790edf688bf8ca41e95ee856eb34333306939d1b2ae86166e2d7b5e56b6cd082ae3ce328ce330ae47a86fc809a6f0d

C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG.(MJ-TJ9302618457)([email protected]).zxc

MD5 139ff0701076bf8b10ddc0df527d145e
SHA1 1fbeaaeb949f2ccbda237046dbc1ede2fb78a79e
SHA256 51b09e35bd1305da39a4d1fa23ae55051e4f5075c85099dabf929d29d1990547
SHA512 de937f22f6eb199569ae54ef344cfa57bc7364197e48003c35c00c9a72d14e7b6f7f86b3a9d9658a8e71772f7535b9aecc4ba73328b0dcbe4943b9519f410c27

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-profiling.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 e7877131bb7fb77c371a3d25743a9c99
SHA1 1c2d4a551a0f1a9252b59a9cc195f184b27f11a5
SHA256 d6e8742bb020906c4331f6471fa8b9a2999f5941a9f0e5fc18c4d4d3dae5c325
SHA512 5a79ea6c948fa15e794d339964f4203d8950c19f33cdf7ead6f7163b488e8166d59dad23fd37ca15a626a41cbaee00b49786958cfe18fd039d6802f3fd4389a8

C:\Program Files\Java\jre7\bin\installer.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 a996f3ae3aae64da699fe1d0bb20833c
SHA1 91b852937a62eb7f58a5c39b222d6ad6dab898f5
SHA256 83e0f38a770d119703beaae4193792732821ae66012957eaaf1956de3656d8cc
SHA512 1101f264c83cc0a7efdfcdb8d861c16f564f3ad8c0ec77f152010bb8c9967b64a456d86e9936fa505d8c1430a2ee7a35511d4f72f50c54e69a5582c1bd9020b1

C:\Program Files\Java\jre7\bin\javaws.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 c012d13b36c0e6d26aabe67148833551
SHA1 5dcbb36c745552215a8a0814740e8bbf52b97d57
SHA256 4bbde42d260878fdf5b96db72d48c952214798b312f2cbc974dce4326c9130c0
SHA512 51dbbf79fbce290fc0807d76d8251030f05ac02b71869b83111b8a2b50c9f228b5b34fb84dc2978901bf15649fc1b831a27ce5dbb440c179cc2ce47083384b25

C:\Program Files\Java\jre7\bin\jpeg.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 37a597d0339a1505f9567af9aa337e5e
SHA1 0eb97f3c0898e8c86ff1da6fa6215bdbb9c6bd94
SHA256 ce6af5167fb54c970a32b8ebd3bcc839131d24bdae2f0090e1a4afc7b8d27250
SHA512 b3003c512b224811fe72ba51bd181883884a54af259bda458dca81f7bc3d6a69bb455b87beb3e1c43a68efabc1e9ee04e67fd9a16137db5fa131d6ecc5eddef7

C:\Program Files\Java\jre7\bin\msvcr100.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 e5bdb761f86d2ecbabee04b24172b066
SHA1 3d9746439a4b5515a10902b3128b920e21ea3337
SHA256 bc995a0f5f9afc7837d9367ec974cdd095cbe0944968761e3a67152b26152f91
SHA512 5cf9ff37ade4c7ebad7bfe7cd6cebc7a26259457660f13b8caf8f393af6087cd2fbeacd0f94ef540d554c7b3d3ee795356866f433154d20d95d8583b15360a09

C:\Program Files\Java\jre7\bin\mlib_image.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 541f170d06e95d97515ead7a11e14e91
SHA1 841cfc45c04d0ee7cf8a773c97522e0b0dbf5637
SHA256 61fd797aca30bccce589b03af2acfa6f72139c2d24ee59c3a0670b2923e17fee
SHA512 7761d22c230158680089c64bfe35a64838718ef5d7f0eda2cbdd07eeda2e2175d2497102d59c64f9ca95de8ce92e5d1aa94a2bbad324308253748ef207a22a71

C:\Program Files\Java\jre7\bin\t2k.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 9d0a4c343a97392a1d31a55363dee044
SHA1 5a0f865f21c01423337c8fdf2f963f787ffab239
SHA256 0d3738c0d205eb9e35866f5feaf71224fc394f5eab46c0e7f9e58b227a79839e
SHA512 166559595bbabb4b78ce1719c5dfaddde90217bef50ca0142495f81009df7462dfc5adb933a0dc3439021645086be506ebef204d7ee6d550f325bb6b1dd301a1

C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 a7c14461b9716a6d1d73d6d96da5a087
SHA1 9ff0080fb1eae9c3e8cac9bc059a3a47cd16baaa
SHA256 cb66d6e24bf611691afcdc2f539653b8bcfbf3bb709f79a990f70abd9b215268
SHA512 ee8723cb8a807671d18ca06dbf4f6efd525e65935e317f821fd0755fa379e252107a1b0e4b1d75b1eb2cb7da361239888ea32534fb2305239173b3c0d31bc846

C:\Program Files\Java\jre7\bin\wsdetect.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 a805ad206e17dd373e59401da20094ed
SHA1 e886f9d3be7c9913db688bbe8dc50c2ffc596c5d
SHA256 fa1ed572d769a80a94cf4649ec825e4ab622e0b6ac12bf1f75e0a0035e7490aa
SHA512 c1b81bfba0ea33aebfb27b82510cefcb68a94facc35bf7a6b63afb4a2471c239fdbc5d4fec1c1fd46e71786122d67a9f24f4a875caf6f6484775863cd66c14c6

C:\Program Files\Java\jre7\lib\cmm\PYCC.pf.(MJ-TJ9302618457)([email protected]).zxc

MD5 01a96ab780ad2cc367c6621debaf3019
SHA1 0710dcfb6f6cebec0cf280b2298a28dbabf0c51b
SHA256 e91a08a89c0362c42b4f355ecb390cff0c86ecad0ff72a16b71208cc377d3e27
SHA512 b3012df68d857e4a104de62e9b1d3a4bbf4debfce3b38b70cd80f0544f1dcbb21789c8395f7625718ad57864bd29b6fb08cbecdcf24d3f64f662ff8a16355b95

C:\Program Files\Java\jre7\lib\ext\access-bridge-64.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 450b85d907391c3f36ae2d765e8f50e6
SHA1 885a38b8155dceb2c58e748986cdc3cf93323da4
SHA256 ebe02db754d20e9517289230506a6095f34f2cf5a16605e4eca3f6b44749dda9
SHA512 49165b1af4164164ba3bd2cd43e9c973ba7cf98001de38e0e74c7d75deef7b8048f11691a83976b5812275c2fff8da800d6515a24542689a4b4978b3ded68a30

C:\Program Files\Java\jre7\lib\ext\localedata.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 2ddd43f55c03e0ea41545baaf0698763
SHA1 c46d5ed4530a335c84e01430628c8fac53f89aa1
SHA256 9b703437507042b351745c375a8931fbc1492895a63d61028b260a4662b84170
SHA512 915f75b48899e208fe5893d9b0555a35faa3c307f175313985ba1efac7330623ffb581c44b1dff30d9fcbdbc161ff6df4e84816c45154559d06b9b6bc1f6c57a

C:\Program Files\Java\jre7\lib\fonts\LucidaTypewriterRegular.ttf.(MJ-TJ9302618457)([email protected]).zxc

MD5 aa88bdcb685400b04e23821d74bf348f
SHA1 ea69333c2abfb33cf04c228e658dc1cab8808010
SHA256 721526bd41fd32e03b2ecb4d814159bea65525b90fb18e1a5b1f072c08bb031f
SHA512 bd33d8ca1d63580760b12b2618b2e9a50c5db5f41d871533cd57911faa3531d131d49e2ada74d91b9b0ca4acb375ef9d677bf70eb7900453af81cffc5d97e4d5

C:\Program Files\Java\jre7\lib\fonts\LucidaTypewriterBold.ttf.(MJ-TJ9302618457)([email protected]).zxc

MD5 6dab50a43db82401eda1a5b2b1a8f869
SHA1 e585502cbe063f4251f4a02052d9d8999ff01b63
SHA256 c4bc09316f2497590102a4943c69cb6dd4ce1b7a6124908c0609843b423a1b3e
SHA512 6d4b270c67a4d99948f3c3faa7737262ec73d82320dda67e6ef3db8172fcfd6eb7a89adcedca4ca51088b4d1c322df6ad0bcfdf08d23dc225b3e95776829e1bc

C:\Program Files\Java\jre7\lib\resources.jar

MD5 10e8643c2e906bea4880f6204db107ca
SHA1 0bfb4565656ff1a91cec1a4256e442b21142d047
SHA256 e158bbc0e49a74caf893678bdc0d969a7d3e30ff216062a889aaf194f9946388
SHA512 eb6c0fd7fd77aa80b8dbaa2f79fa8ec26501de96fc7f76e5d8ac16dcab7514b66e18167778b3a6a04dda758c8bee9b7625d9ff4e545adb730a40e47fa1a29b63

C:\Program Files\Java\jre7\bin\splashscreen.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 9bd2e59f51a8fa9769c0c3907a27e50e
SHA1 98e1ca4bc4c15427ef4a5e25b96494759327992c
SHA256 b8dbf3449b04014dcfd8477584f78aca40c9bab9eedf767e933d4aa591ac4dcc
SHA512 38c67ea749d03cb7f47e111e3e29eea26f196abbcbbcfbb1c8630aadc1532285b1aac075549a17f3fbb873a5994a68de30b9430c56ceebac2d00f5bbd2fed91e

C:\Program Files\Java\jre7\bin\libxslt.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 95fa6141173d85c9df1444f9688bb84a
SHA1 8d74f104a7099d3facaddd77a80d35bc6705fa15
SHA256 027cc683e900da186ab12b7146bf5aab76267e3b7a950c3662b6fd9956d5c8c0
SHA512 bd3c5bcf6bc8863a09a7a816ac49a4357896c5b7ecce022762e597f1392985b2ecf0765383fa1dad43954f69cf0232c56c8571b81f02226d6389dd80dfeaba91

C:\Program Files\Java\jre7\bin\kcms.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 72f8dd19779f870c60623025f0441e64
SHA1 2ee8ab976f58623a90f268a5f57b6a3c9f444e87
SHA256 6adb07c291fa1c9512757f138b9e3e82dff1d40cb1f9e1ea557a9dadd61d889a
SHA512 10cbd132dfcb0d84cf85cd73ea4b5ff81be7bde43f1b7fd3af2f4fb54d0efe949b35e1e7b1fc651a5457ce4df3066a3b00cd7f0840f3a93bf6ad2270f2f9f027

C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01421_.WMF.(MJ-TJ9302618457)([email protected]).zxc

MD5 25c3431491e7449fe41f4e197582f59e
SHA1 fc989a7368634c3c90bafa7d0440f550dec61956
SHA256 2a257e3398c8f2aec65a5a9be5b2c61594468196069b83647d2e6f92676703e2
SHA512 20b7396157da6ae95d794f18adb885adf19e14698a870754c9aae29ce0ff66400385b0c51087d4cf7fc8450e18808fc1478c652ad1109b7486944ab143fa68c2

C:\Program Files\Java\jre7\bin\jli.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 3eee5aecd94e31e4c158a4da02af625a
SHA1 cf8b0a5d51c29fa1085b826d89568fcbd0dd8f3e
SHA256 b3d716d041d1ad18d7b3103c60342d3389a6ca05b9ca904d754ec64501ab8209
SHA512 f31d9b3ec86df2cbd91b35e0662df6ddab63572d2f1d1b8cb1dc998365da191a268e2cb4597c38d876777c71dd1e9b868f2670cc254d385265ab7097e4bb369d

C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msmdsrv.rll.(MJ-TJ9302618457)([email protected]).zxc

MD5 5ece1a5304277f99b481552739b120bf
SHA1 137c00063a651f5d0b961146f3f278ba2d80a298
SHA256 9111196c1b9d49effb8ff77983a4ecae901204d56a84a497e0ca1274fd1c253d
SHA512 769a7ba551b18067c000f486ac4874a1a11b7a6d22d88423e942a06a46e2e94634ac657ecce78adf74b7da88f526ae585a29a9ab06dd8d48f37e0cc96d0cccc5

C:\Program Files\Java\jre7\bin\javaw.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 365bc16ced975c3ede12008ca38f9ede
SHA1 2e19a9b7afa0cdfa4680c20cfa6605aca78795a4
SHA256 fc5ec63f16541634a8b5527693070938e5a70bd8135c99f797c4cdf4e61e4b03
SHA512 a032b8fb5e5fd4b4024daa330779cf3131740f19fddb79dd50a3b0be9fbb9be7ad9bc6a0bfe5e8e104e42a6ccf4e23deecae5185641f57956e89b9d8559ecebf

C:\Program Files\Java\jre7\bin\javafx-iio.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 53032f27b60aa57cdfdf5557871aca06
SHA1 6eca32695418ecb88935c7fdbd3b2b13521c184f
SHA256 24095008d8cb20264840f942d7c74797d585b123f6ac4589db16fc6913d39afb
SHA512 0ff5f722935f27271302b20a4cbeefad265f4f08b1ad920112f74b4f98674e9a9732fe6aef01ec557beadcddc18144daa20f090e1fb5f60ddf8c7b40272b1a67

C:\Program Files\Java\jre7\bin\javafx-font.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 ccf853be630942cd06388294b0fdaa54
SHA1 d166efb833d8db6325bb59912b9f20522f56e772
SHA256 04c63641f23995bce68547500c9f625f5cb881c5c7ecb9c9f56b2f7f376cf313
SHA512 f09c20f1dc7d00c85fb39653b2fc8629cdae85c6ae8369f0e129ce07010cba587726a62d0e221a76aa0b02701a0902e86d7ee0012ffc6933704a05b9c206c079

C:\Program Files\Java\jre7\bin\java.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 c3cc20d7f13f31e52300711cf492fab6
SHA1 2cf666adf2f8da30d1538d29828ce6a67013b951
SHA256 4f14a7710ec015122bd796e3f659fb390c1cfa73752cec84589d4992c85094b6
SHA512 cce2c5f979f0b2365e51cb1a2fa3f62bdfb2fa202adaa865e2cfbea2ab853f7d286266c2d4a99527c01f4e6b70234abc3ebabbba566eeec35cb224d1740191a3

C:\Program Files\Java\jre7\bin\java.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 344e23709bba4bba93f99e0515ffe7f7
SHA1 48425fdad9b3b028d85cb43eaa10224985fde801
SHA256 1c59a6d5b2e764c17152fea57c0dc882084dcdbacd8ca1d3333825fe462e59dd
SHA512 cb6a8574b55fa5cf96c2e4f348a78dcbf510b0b631a9e340138f49339eff288eac8832ab2a339dfb821cf854214730ead6441b283f313719643bf4206ced943b

C:\Program Files\Java\jre7\bin\hprof.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 5fe99985b47aa4f356eeaea8278988ab
SHA1 5674975082d0316cf76ed7bf410f6f4821418505
SHA256 74b41c2478a33991cbb41f860fd1f074eea53b033d320e304ed5f2020f0f3425
SHA512 47f9828d3ab00e66762ec4ea1e1f65f55f3c6cfc3a4c06d5fb8b16244aa93ac6c148878a970c627437f0d9453e8cf342f7672b5ce72991ae67bd96d079b34a56

C:\Program Files\Java\jre7\bin\glib-lite.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 0da69f1dfccf2e3bbf72d2d56cd32cab
SHA1 4d76356f8aec890c9292a74ec10f06d83c4c9069
SHA256 2d0698b7c1b31714f7912c74c5d4ba8306af91c385efac7b95b527839e55e544
SHA512 58dfca18dff6fbb7a2ed262b8c223afbc7d2cf732d60b22b089a7af1a66ffe892311b5b8d871233aa50c6911d38c259fa66ed4990374fe674e4070d9eb0cf659

C:\Program Files\Java\jre7\bin\glass.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 16a3c012f6b01aeeba8f22e1fbc72e21
SHA1 335598a38a7321ff1ad28d952ada798062cdbc6f
SHA256 b59fd87b8625900b5f98d8d501b85b86f084d5a537c088d7eca69a31b509ac95
SHA512 e09e4ed6f69ce3f768cb47f0e6252aac8935d198424a2da4cfdba0227069b65c8f582488de6321e7af67746aa342581e121d677a2fccc521e3bbd2c2068ee8b3

C:\Program Files\Java\jre7\bin\fxplugins.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 8eb639a803e7db3e1b1d14fae5680496
SHA1 33878a59055c50fc4ce50d288dccf2b7903a1928
SHA256 06d137612e37c39783506e468ca001a9db7a9605bb230eee6415c59a44fbf880
SHA512 20f2369ece38e2657b817e371d37e2e0f87cb4036da83c728630ef704a7f923539494b2a5bd2db53e62825623f204f0e2c350947906dcff42d976fce799be9b5

C:\Program Files\Java\jre7\bin\dcpr.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 8860ac535aed521bc3f75a1b08bfba15
SHA1 0626d0215652938d933f561b4c0cadfe65ca1f5f
SHA256 44757ca81ed9e9d978cd9286f25a35aedaa9e13687fa338b8b9a263a3e1f21c6
SHA512 e58c77b018dc9fb8246c3dcfe966b4531d235c7ccd629bdb2a51f5c16af864dfa29bcfb5ee229a68ea0c9e76c52b3a905992fb5b689bb97bc8e9c355ce353e42

C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME.txt.(MJ-TJ9302618457)([email protected]).zxc

MD5 836aa5f42d5c157cc633297d54d6c47d
SHA1 6ca4c29ede32df7057f895fa5ec0672c1d83fe57
SHA256 618956a1eb45dd8f80b2bc329b5a08fdc758c82a3cfb210e1a4b8ed829b65d61
SHA512 1173e72e9aa56326cb928408ed02cca4c1e3c757f4fc13294f3b4581536a5396ea839e5206d12717f94c78422741cd835bcf0e18fea16561e9afff9ce557e34e

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-profiler.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 382c531132c8e2692c2bfa1e757ee6e8
SHA1 48b7a7d6d2e1ba3137b95f15351b13cc4bc5b335
SHA256 9b8c1fb5f45c491be2305b134b35bd6d3b20143f3a610e1c453ab0524b765cbd
SHA512 65267a2b58e298c273b764964a64abafe3c0daee465288b3350772ae411368ee1c30e906a95a2e4bf64b582d0f7d403d5af7d6472e276699d22aaa85606a320d

C:\Program Files (x86)\Microsoft Office\Document Themes 14\Trek.thmx.(MJ-TJ9302618457)([email protected]).zxc

MD5 04ef0fe26b87119caa309f786bb8b78f
SHA1 46e0c8baf93c654640d6bc0e87b5344f27ee8cba
SHA256 54a18cc7153fd99c3f915aeb4cb1c67f69b54c743f9f301c2c52165207875d31
SHA512 eb61ebdfae00a3693d33b2c1bc10c962ddea028469349616d468ec633452acdff5fe7d3f29cc8b09b8977d0e6d23348a9ebfd5bec91eaa27ce2bc91b961871d3

C:\Program Files (x86)\Microsoft Office\Document Themes 14\Couture.thmx

MD5 cc362b889a47d8307ba176e8151aa40f
SHA1 70f8343e36c9b7c5f86aa7475093417abd15305a
SHA256 46f3676a84450c73357bc2bbdbf0e2dc3225b4772f7bcb56022bde41833fbff0
SHA512 3a6678fe8a84fddba9352050f34d4cb8811de977fc6f1154c1402a5bb4907ec85cc7d27fe9643b9a8c5f94d34005d7f6ccafe6de407b1f45e9b436b3ac6e5e39

C:\Program Files (x86)\Microsoft Office\Document Themes 14\Waveform.thmx.(MJ-TJ9302618457)([email protected]).zxc

MD5 b3c8828080220f1c8e7c9807c77f8a12
SHA1 ffb31ba3b307dcb5d2c2f870c3ec4d9ca85547e0
SHA256 3eae854601e965534fb2b377a208acd50b2d980aaa24674d13e2aa554cb46085
SHA512 095ecdae45b0d488b2528945a48f3e51f7bf2a4e89cffad5e5d8123fc21a05b788f946132b2767b5bd7587b2a58a5eff3baf5b37ce34806f40b0715d4b9b97be

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-modules-appui.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 ffda1d8aa1b3a0bc18e744e8dfc73066
SHA1 cb12951358d4392235bebb16212b2d8970466a77
SHA256 2399c5464c0b754dd5eccf17b405a95e567f539e98e3c22b65241742b068d824
SHA512 14d388b27e4791012abb49bf4b2f363a43237b2b3b836910b6928edd5a2f68fde75fb1ca63aa55835c47b59b5bf9e53b189b0eed1d737de12041f2988bf6eaf3

C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Composite.eftx.(MJ-TJ9302618457)([email protected]).zxc

MD5 3b5cb902eab2a46b28bf39fe06268a89
SHA1 3064e2a8165db8cf7b26f1d772557fb59503b5d5
SHA256 dc221f2e3265abc1637ec6fc92f3c6f0885d19e978a52fc9842fad33392d508c
SHA512 452376b97ec0b3d91ff2b5abd190017e37e4c73da6ee3709a7ec933c7463d2841ee57da56b57068a2bef4a63d8e68492d7e09bec3f13e2863cb51af1e72488c0

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-jvmstat.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 a582d86cf82a415e270241c22f15807f
SHA1 21d30f950c8ade66a5dc708028f96b292b133033
SHA256 2ac792400aed01ffa6b81055c6e4639366cefe1fe311e0b78e445fbe43655a3c
SHA512 62bbb97a68e4b672f2440d71ee62f2d1e1a312b2a7c220c9b4b19262573c1e9219a394a66921cfc82ddd2582cf026e7749162a0f95ada16108362ae7b3d8c74d

C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOLoader.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 940994ac3dbd0f2fa5327377da7da3b0
SHA1 798d9124e930e886c260a167ad9fb7c9e4bf4c77
SHA256 484c5930d97a53eed4c8d4cfd2f30666e26cee29a82169e6d5eef42fbbe77bc7
SHA512 8161bc8f3d74a29a0d2142fff289badff4b181201cbf892941c63b979f17bc327c028c634a1024db96792e2f7f0a258a306471638aa30d437675e8f57cb5b5a2

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-jmx.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 7bcc900f6d096047fea32fa1d55ab47a
SHA1 34a04bb193e4f20b474ac497b6015e81d6b0c71d
SHA256 66064d73d01fab44f4d9542cb196fd120daeb87204bf5f71c3dedd8112a46a63
SHA512 77e0828277e9ddaed54e59fd574a13aaabd9705907773cbcda6bb20a049e6a32e96a8cfa46228beddfd935ad01b8c9ba86a523c430b48c011fe42ba9d9120ef4

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-charts.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 8e754407d89205cd8a44d7d78712ffcf
SHA1 91cab478297ab9e6ad9922a65a31daddf53f0aa3
SHA256 b5e87badaaa496f34486165fd075d52d0667e7c99f735101eb7c88b140df15ae
SHA512 3089509011c2b4a3dbf1dd576328aa6bded2aabb9c0db77fdc6fb37d51b87db14f361ba557ea316589272f314142da3cc47b013627095d79c0742e9cb8de169b

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-application.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 f0f113c5f682eb3370d5a016b31ed82a
SHA1 f81f68728c37a2a5abbf2c72f8d4c418659b8c4e
SHA256 c6b361547e40e2a43e22c1edb545a8c475e89fdfe7c917d91635c741c87b6c09
SHA512 a8d1eb892cab414be203afe59c5235cb8e8972f4a77ef8fec34c0d4574f01e2cbb200e69e809eb74dd4c9fb4609c04c8e76e10485a4af3d27e3b074c22973ced

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-application-views.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 c32b557b5505f60cfb88887dfd0cb722
SHA1 7648ee7136b0e77e84be7c10dd9d39afa5fd5da0
SHA256 e37348836d9ce30623d362a9c88359ba0b6dbde4a52e0cc7f984ace514916e59
SHA512 b622be5094e04b5f10bedbc229d80a83ffd8ef505d2f8a6108a98d2ed368fca8deecb8a13e5eacb44b01ed031e2c62a424826892a8bb52641831d37bc84365d4

C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\1033\VBE7INTL.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 5c5fe7f25d6e9d2bf336843ba8e4d6d2
SHA1 fa49b3c9546698a80edeb04567fec33d53b5ceb1
SHA256 569f8b47686bc0f91a38fed85ed1c12b2b3aaacd38cb3eac572fe646934c0d69
SHA512 9dfedf7938c130b9fd26a6e973cda7ba50c16e1a0c0b4f0341368863062193fe4139a3ba88ee423b762a89fc2b18cd1841b69265f281c88d03d6ba863c8cbb76

C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\1033\FM20.CHM.(MJ-TJ9302618457)([email protected]).zxc

MD5 a3b90005b5ec884b215ac423e93c97f3
SHA1 d5efb96a6aec0f2f14faa65f2d6cefa4c928bb8f
SHA256 6bdd25da63f4cd0ed86663c1d41e0ba02c531d56f833cc9274094151d4ba9104
SHA512 31c6b0be09f8135eaec4bb143d735da3b5cfe7c5b69fc4bd8684a691119335d5a70532e2103fd6c0fab434b2df2c622ee281b2286e7742c990e6ae56524cbd6a

C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\OFFICE10.MMW.(MJ-TJ9302618457)([email protected]).zxc

MD5 0dc4861b32a38bac283e44e446a8a137
SHA1 15cad5f14931061a704dfa809df2a9d190433c3c
SHA256 a862006abe5271dba06afd6536c82bf84b727c886a153a2a2b2165e85c9b2cac
SHA512 e616c6fb8d27a8b0eafa06f28f41d1ea6677865f624670b0af855eeb709ad95fd8417b2037dae3cf78fc67a68d27f908514991b56925d4524538bb6d9585c856

C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML.(MJ-TJ9302618457)([email protected]).zxc

MD5 b40ad9727ad1322b43270d1332976b48
SHA1 db55cbbcd65ddb8758c5c48435d73415ff47a525
SHA256 e12718f645f5a8af1b0863370de23e3959927765a24112e6da7632ff9697b257
SHA512 5f0478942e37ab4df38e0d63b0079612866d4a7706c1df2caa2164f22996969361123e668d58b675f8b556eb44fdcb30174858386f20200699fd119634b490a0

C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ENES\MSB1ENES.ITS.(MJ-TJ9302618457)([email protected]).zxc

MD5 506f2700feb08e407902e506e500dbfb
SHA1 5cdd2b8f189269cc01f6c239873d7805d9746489
SHA256 8304a10c6f424d1948aec30184430f14c873e5b9ba093359ae6a72e5497e9264
SHA512 4168ef216b982ff6c99d85c7366c2566eff7c1a7c546f97fe34710e5be76d31388bebf180c37056005351ffde783b23b0033a5ef779b1ce3fe4123514134961e

C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\MOFL.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 ded43034766421c6356f29b750578510
SHA1 b31ffa9108422d6a17b6ca13f605d3cee041122b
SHA256 ac1013e3b8ae800e75884fe79ba62e8c11e6936c15f418b05c3bba8f2ce6cfa4
SHA512 8c59aef0562ad5659a72de6d93e8d578c9f240a6de0080dd019a93b0db8b9967fca3fead54701d9f41d043888eff1a7c5dd464860cb9f3a07279bf70ac6a6c1a

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-oql.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 453dbf63a1f706bc01f20747fc787078
SHA1 14f2b2d729e6eb15df6b4967443cb4be24232470
SHA256 00453afcce16f87b882b7a1b7cb72336c89d37007185b277b290379c07915e06
SHA512 3f829ccfb32fdf04f58f8adbcaba728b623781989bc691f36ca82b19274cbf1fe012291feeedbf3cb626cbe67fdc534df3f796d70c1bb8c68c16303be54256f3

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-heapwalker.jar

MD5 18105354fa4c2184f00e1d4ea959b4a8
SHA1 a5c0853d061f156fd5097647d7b74833f50089a8
SHA256 d15943bb446144b5a068f507fa6f24795626e85b00ee706f408641771c9ed1c3
SHA512 bb869b269e3b95fede673bee0bcca9ee101d207976b48f5f8b4a2307cababf13beb16e362dbe1516d6025ae379db3d2d56e324bf0950cd7f9861ab90874cc620

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-api.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 15eb17d6c02efd65fd222723dcb8cf3d
SHA1 8a58a498ebb3650dfbebc0db972c8743940d6f68
SHA256 d2f10107ac59ca4e0cfb4150dabeb424234449aadfa15881c0725ceaeaef23e4
SHA512 754b1d7f060c8338adc0ae16c4029305eef1ecfde7960d954c4076d09b999f04c3874bdb23296c9d315455e4606b32f3070ff554d74dcd8a7826196523203ba4

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-lib-profiler-charts.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 d2538251c0009c77758a9c07749aad3b
SHA1 b24a423a373009f3efbc6f702addf5abf84195e8
SHA256 7dfc2b484ff76b4a71ca0e183f80b1dc1d83c0bf1c296f7714ff79fd7aadab23
SHA512 b6a6c726db0ee1202f30c62e4355498c1cfb0f548578ec620531e89d88f2cfe6fc30ba87f5b79ac9cf15d951303daacb08e2957383f40d6c80eafa5f57e6adae

C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\IETAG.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 79a1638190a568a0bbb2b3c96d299a4b
SHA1 890d74073c711bbd4277446ba03f12e153dcfab2
SHA256 574e87e24eae6c8384ab1c0967778a68d8df722cec65890e491a73de38888940
SHA512 be697d020b01af5957d790ed7ba0eb6b2346e46c1626c70961ade87e3b7b136fe6b87a158f964bbfd734c04c99db26d5974598a58e6182035b8c07a2c6908f5a

C:\Program Files (x86)\Common Files\microsoft shared\PROOF\MSWDS_EN.LEX.(MJ-TJ9302618457)([email protected]).zxc

MD5 425e8aa1793e8d4300e39eaf7b47a0b6
SHA1 d29c61af10b067fccf7d6048585d9c8ffda6194e
SHA256 0f76ea5caa8c717d2b560cce3feb332bd02eeb14ed0aed7775dae2f5e44d9a17
SHA512 3f3489cb98cf7dcc35a83ccd7d4dd0f22beaa671a33004ff35a24aced0cb62d8111e0f92b0855039ab2cb2d3ffa16d418c2e70f9ee3853d9d877dbcbdd3b0382

C:\Program Files (x86)\Common Files\microsoft shared\PROOF\MSWDS_FR.LEX.(MJ-TJ9302618457)([email protected]).zxc

MD5 022ec86045a3dc380f86ed9423ed3171
SHA1 01682d62aadba53865d2ed8a59823f303b78b07e
SHA256 50d46d8e765438958d8e7cd13d760436610511c9037f3fabab9da665cefe3bf6
SHA512 fe5289662aaa773ba33565fd6517a5ae4e8738beccb0ae2b4129afb93ed938671ad13e7066ead4b8117852be0b88978a0b331453989c8a62e17435f642a1989c

C:\Program Files (x86)\Common Files\microsoft shared\Portal\PortalConnectCore.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 71f32b98acb8d3e2e0774ed42dd699c4
SHA1 8a1c3a5268b44f11e5f5373724e9e1ad1b65bbbb
SHA256 e9490de2b4498edd88fcc9ff7410ab244c2dd48b461f35ae8ec491e74b3cbbcc
SHA512 40290b3cfd22257d3ec44a53017ddfa0a9e3281986d11e87ee6aa304dbcf16b5770441d1a1323e2429048f80d8ecb299b0eafe8a434c87960e8cd14372ed7bac

C:\Program Files (x86)\Microsoft Office\Office14\CLVIEW.EXE.(MJ-TJ9302618457)([email protected]).zxc

MD5 3d5eeac41eb80ae9cc7c52a3b9135ebb
SHA1 072882327ca1d5f79fd6df05ae26e66d63fa367d
SHA256 cce17429d9917b9d1e782c7107184061ef04c36e13634bf9de829b11d12389f0
SHA512 5d0a86f17c34bcb6661215c1729b75999f392b2ecc9f5ec23e1a89e1498b4ff6b7b5684e4eb55eb2048e3d939c46784340c26c3ea0eea286309318161bb3369e

C:\Program Files (x86)\Microsoft Office\Office14\CSS7DATA000A.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 a743ec68f79e0e402ec1c6c87910c697
SHA1 1c7db6bc1785d5f0c4c4a8f3bd034077e15063f6
SHA256 498f0577cffc1b0050679803ed498810a778e8c692533ff3486ff49e61b24501
SHA512 c2e64587bbe4281f31480ef9d52f3914f95092dbc301b281c76447867ead97d74050533600b9384906170f1aee49b18de568e1ad7c73c71c4ee9ce06a83b0bd9

C:\Program Files (x86)\Microsoft Office\Office14\excelcnv.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 f4596e133c10c1eb5982605b7c315e0a
SHA1 56661ff966994f41b4da5df793d8ae6ab20b4daa
SHA256 56568caabf74c45316af223f711337eed99e9d0917571688c021b927a2428b31
SHA512 a35b4505adf8d0fd8e125296da7cc8020fa3e19829d32f6308adec6528f0c23a33cc6ab082a1155a2e8b323f86be2673b8eb33351a5d7d68ddacf27055486553

C:\Program Files (x86)\Microsoft Office\Office14\MEDCAT.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 f2a697ccfcd4329f692248428adbc83b
SHA1 667b8c2e70a34954ba7a6db7a9ebe0b2dfe7f716
SHA256 1a7da6c01af4a43e14a031b074e5930ee5cacb693f674f99bcd026efbf3f269e
SHA512 66c1d1efcd20f4cbb4901cd40a3c5d4808bb10c4a7e466f9393489d35dd3695370998ab0278d3f18e7f9f1b5d058965e08191998a636c810ba3b6bdc8e5b2bcc

C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.SharePoint.BusinessData.Administration.Client.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 2a7d677ef6e515c41e3a4759965058f9
SHA1 7dca16dcf8e98f1a8675e01fa35648dd63b85a0e
SHA256 b3414231c84c5cec81ae927113c48572adce4f01a69efd57dd28f4486b5c683e
SHA512 52003b0ddee089da67080ac6c1ac07eb5825a51043c4dd08ef00c0d711624f08d1456c9c89bcfdf9fe33273da3c9ad3cefde5d6c4174e6f2e656ab481cf5e767

C:\Program Files (x86)\Microsoft Office\Office14\MSPUB.EXE.(MJ-TJ9302618457)([email protected]).zxc

MD5 2a2a8b14f1afd0b1f739e37af02e21bf
SHA1 7cbe4e291fb7f3085c77a499ead89202711c9aa9
SHA256 632426f80d31ca73452ceb1400f1daac01a77a2cd926ec3764d3ee33ffdc2bf6
SHA512 7c8b11270d160b5bc7b2da07b3a4af0b8e1423fc30529491550bd1e79cfebf2ed88d2b76f9c33ccd4752e8ca13055b41c00de04e90e1ae34d0cc306dc7c3153a

C:\Program Files (x86)\Microsoft Office\Office14\NL7Data0011.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 2ea97aebef20fb8f1af2bce3665c6e18
SHA1 19cd1b5abd5f484885ff821d4b573666518b68dd
SHA256 3b1193dbf6f373c4690c0b036834d2eeb61a981c185ed15753956ba4edada8a7
SHA512 d74cca2b513489a79062696616fd56bcd351435c532a915c785ca42331b998f329355397b248c49dfac327e2d8b2b56b2509e3e17c0135d2afaaa82b85b7191f

C:\Program Files\Microsoft Games\Multiplayer\Backgammon\bckg.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 2cc33092ad1dee862a8bc4790369ec35
SHA1 251917f1057f75ec1b897978e73f48970a32bff6
SHA256 61b1c8d42eb7baf8d8b4820b18175b1c6a002cfda27438fdeb20cb9a1a00f1fc
SHA512 13789da948fc37df80cc5b2dc9ceda5e51c7a45e49704abc0708abcd492d562229e605884e87ce6fddd90fd16701aa1b47db23e2905a880e92002fc5e87aea58

C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE.(MJ-TJ9302618457)([email protected]).zxc

MD5 f6e16cc9b5b562a897da150041d76bfd
SHA1 86224127c2eaa3ebc5975b33c01b8d8e271ecef7
SHA256 9952df9f06d2d80cb19edff1121820ed2bb2ad90fa4d9671716c59c4b64ed5b5
SHA512 ca0b9d8c3322f5aa9d255ba19648a59d8d89779fa945f6b538bd9aeaa8e911276491f2cb6da97a50d39b1f5ec3c815a289085a4bfbc7619b56ed0238bebe7ca1

C:\Program Files (x86)\Microsoft Office\Office14\ONMAIN.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 ba440f0dad876d708e63a7fe60692239
SHA1 57920db4f6a96599c1a42440b5f5cf5529404790
SHA256 49999c645843bfd6de648f9d35f1ae411f464ac67049b21fa8cf56fdd2dc0404
SHA512 0d83b8dd28a54b7b09083e0b7f795237eba08a738fc1550f06e71f38383865699424fe6da407848851db7fdc976bc02a963124e0b47a0a1d96e6987ee1dda068

C:\Program Files (x86)\Microsoft Office\Office14\SHAREPOINTPROVIDER.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 af3eb3b3c9e47211337a4d272d897234
SHA1 13408c8bef97fcaea607848351f7f3b84d6c1adc
SHA256 93f106509e507024e48d823281ec88bea49b30d50b414878d8c8b8eda0838304
SHA512 8ca0837af0e34c8f5f7bb2144a80cede3837c971d83a47306eb029ede2de4c7920d86653f5bb1e4bae45a5360ede41058fddd9c053840e68aafa4518f581c60e

C:\Program Files (x86)\Microsoft Office\Office14\STSLIST.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 3670d567e5771c99aae07b3943c30e18
SHA1 e3728668aaf752c65d050b13e35e8be3c78a85b0
SHA256 331e49daca1abe1841063918ba872ce16a3aa92192cb8acdf5729c94800afce6
SHA512 d0439ac46c67c61f11c58b0220e0f21d1762c165e32d19b75318942f003a982ad29f478e65aeefbac1001547d1205a3b34ee195cd068cae53430a66b94840869

C:\Program Files\Microsoft Games\Purble Place\it-IT\PurblePlace.exe.mui.(MJ-TJ9302618457)([email protected]).zxc

MD5 af824042ca36b8ccb8957a7e1c0b1009
SHA1 fbeebd99ed61b08762207b2c6546a6f7d85b4a5f
SHA256 ca1211524ceff959eae9d1dc0e83d1e1d953b29bd2779287bf58ad7cfe71ed81
SHA512 31d1afb90c695b3452c3cb9533dfa05689f10c29b4f35aaffb9a9444b8eab4a912be2b1661b73705f03295aa7faee111855c8883b6e633c887877829162052e5

C:\Program Files (x86)\Microsoft Office\Office14\1033\MSQRY32.CHM.(MJ-TJ9302618457)([email protected]).zxc

MD5 a2f18a0f9de48d442c7df74ba5f0d576
SHA1 f9848afb1211b1efc1cc3752b4a957ababfcf07d
SHA256 858a484228621ceef7ae23d2d049d97b8d8f1c35637d93aaf0d4c5dfa6b82d3f
SHA512 38b8154dcf097fdf3b13aa2fc8225a04fc4f083abbcb0516f73afff2e24f903efe6ee3bc6f79dc028f26ec458774576f86dc55a287bb270c10e0db14fdd53bb6

C:\Program Files (x86)\Microsoft Office\Office14\1033\XLINTL32.DLL

MD5 326e92757cb89e7d089229b1efdb8573
SHA1 341211c34b8e9a5fc21e31f31bd8fc9d8ccb9340
SHA256 901670dbe2131f78f8bdac09e2ec1257be7a5b5ab684a191494336d2dd378a98
SHA512 e3dc0d79139434d690f1dd7ff96228f7ee9ef692259968b065a2191f67770c0a9cb99e880eef03a8d3a034252809048cb194511211a85491a4dbf36abfb9215e

C:\Program Files\Mozilla Firefox\updater.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 1bfd3c738190ae816a02ed61953683bb
SHA1 2e53e5bd0106c8ddb9b91c02d30908fb02ecb790
SHA256 53f4cca26ef2f89d61755bf577c8e8df5fff78e761a3a391dedad98b4fff8a0d
SHA512 00f6e39e9c72b88fff6d7da35293044f32985293262b783823022a122412f37242e4de7fbc58575cc308a3e3c9abb35ead593ab00c9d56c1348b8e4276ca31fb

C:\Program Files\VideoLAN\VLC\locale\ca\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 f5ae2d26ad1466b1563eba934c95c945
SHA1 0701ddc875cc346773a8cca5f87453c3d4e68afc
SHA256 7d8f6185e6dac1c031d6a5a8fc6f81dd319ff3d8f838b7659eedf9307247fabb
SHA512 43037d88ffcb7549ed4d7233db523c70fa5e85a83a6911618bd53da2133dafa4cb4c7055e5b8f637c83dcf6144159099a1ac20be401bad8dc1e8ead2da1a86fd

C:\Program Files\VideoLAN\VLC\locale\el\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 46eb83cc4fc4f4573ab2767c3f207597
SHA1 3aa5708adb3777cee6d87061914c2f3d73568566
SHA256 25b2c1b1f9c184f16e151b304a2f8b13472d6d0fbda290188c54aec87799e22a
SHA512 ca178fe2c0a54a5b6aa8407846f01f72b6319e647bcdf8874736b2a54a19942174346c59b448d728cfac85de88d9a2f35da040df13fbf05cab1eedcd8ed2743f

C:\Program Files\VideoLAN\VLC\locale\de\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 5ce2aeed0393e30f3bbafaa1e3ec60ab
SHA1 346e28a4c49a1e8fe9efef56fb4a0e649dd78051
SHA256 0c3acaa8727909bf727726bbf66dc7dd7b21ec98ca45a0a76ff5dacecdf1b685
SHA512 c6f56cdac66c62eb3834b7f86d501456ba06ee01e7efa31bf88e7b46b8c5a037381126d012190206d58cbf938863bd7e62ad79074f56495960e6945c8f37b7eb

C:\Program Files\VideoLAN\VLC\locale\brx\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 149c6105a933ca7627f43a0f0aeb89c0
SHA1 c57f3be9599e352a52d6ec44e732f679dfb5740b
SHA256 d131b2832d32a8f8afea489637b0e6d4fd1a42abac17e56ba284ea7402652cd0
SHA512 025d658dbb16f104d49c0713bd3fd7b64469eb685c94be1c8075ce096d8efcd6aab7e0d319ec5a468c552a91fbc882fd016fc9d52fce94fc1f498342c8c1c88d

C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSTH7ES.LEX.(MJ-TJ9302618457)([email protected]).zxc

MD5 8b5283be847c19f8099d87eb037dcf04
SHA1 77b21e427082b661a9866147234d50d1318385c3
SHA256 5ac8b4c1f8fb50facd9d5408fdd202b9c8a58bb2403d42ac17ee7bf1d01ef835
SHA512 faac1b3aae9d1e246f9b84dd8eea2b13d78e83f4ad2ae7bb20a85af65255f0334447de7b0da54a4f6fdd506a446dc147a6f600f7ab3ced281cd27239692fef88

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\NEWS.DPV.(MJ-TJ9302618457)([email protected]).zxc

MD5 e0b71a1ad29e78deb908bb1b11bcf1fe
SHA1 f23322088a24b717ddc58a7132a553616669a3cf
SHA256 6bdfac2ee6b5b4a804b5a635757fd5ced108a81c3182fb65a186c3289bffa074
SHA512 58c3b2313a5a7bc72b5db766471b971820e93720d7dff610bac05f97d8c69470ba16be072a31eeab8f568787be6d9a9b2ed44854ac0b3742a44558f61d0331ee

C:\Program Files (x86)\Microsoft Office\Templates\1033\OrielResume.Dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 06c0f507135aa96239380726688ecb33
SHA1 13bf19a3e43df2e2d0e1f1dba21353610d59905b
SHA256 36180458a4d90ae9b3def9d6756a5af95d0cbf21c74a96d6058407d95e4f6c63
SHA512 8deed6798d6da4052d1e80b35b59ddf0e650febafe072fb4f75dda446428a28857a04c87d58e26a973cf501fc9c225c2e6bd366028edac746d3ebfbd5baf7caa

C:\Program Files\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 6abaf440388fa7b192ee8e42487e6b09
SHA1 4177ebabfd984fdf322f00b6dc1bff6d4ff8e5ff
SHA256 425877f650a6a2dbed700661838214ff78a313060feb895b5b3df14825858f29
SHA512 f922a4ed8890a7603456b5654b4ee86c33fcdd4e8669a5ca06a655a17fa3499de2200def021a9259006ebef70362a2838e647fa18aaab34364dfc653a3840c59

C:\Program Files\VideoLAN\VLC\plugins\codec\libx264_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 c754841505a89d5f8ab61b9e2886d1b6
SHA1 488889b355cbb987752d9ad899efcc7d9b655e5a
SHA256 1c9402135fc63647f38db95a2a7a12cfe18d28014749b97fe8c0cd6ac461b4d7
SHA512 72a7ba1c3225c19e19fecc967958252211578ba718a7c4b48049268c7984d1fd702f485be7dc94bbf52cc1196d40f19357b1023da54b1e64b038d0d507141d19

C:\ProgramData\pkey.txt

MD5 caffc5dff57f774caf414707bbca4d1a
SHA1 bad1519ace2d1677b5ad6a3493f613d6f47baa16
SHA256 e571648a8b781458eae4cb114e4e57cb08a5f6c691598142f10075e065c545eb
SHA512 59eb02dc047b599949c2468994182284fe2d92dd8e6e3c190edf3e150b18ac5309b3200e6bbfc95a091c86909ec0e8b2f70ffd0c8bdf5bf38029de67af837b92

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSSres00001.jrs.(MJ-TJ9302618457)([email protected]).zxc

MD5 02d1497d873270101fedcce69d8a364d
SHA1 33ef8480583e4aa8623b9118f735ae742d3b2b67
SHA256 4046a583c39dfc6e272897600ccb94f7132456c9ae09080f02ad77d915349a82
SHA512 b8c143a67d5a2c7b2afaf8719fea6e3a38e044c4cd2f9a0c76bd7ba6c34084f530dbe54fba69741321977914766443b89367234da15e74c1d6be3cc003bbd112

C:\ProgramData\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 7ef501da80d304aa513cdfde06f5d701
SHA1 bf77d92deff714e6280ddcf7f685334f090d9e73
SHA256 407d5155a2536f35cbed9b17c1900baac9536b87cca83066e86701d344e07b00
SHA512 c77039dbc6c72cd87a2dfb25692d97231018593847c374eecf74b8ab2af82951cb431518cf747fb4316de4dbbcfed2153b31cd3878b1f8c060f203c1047aee6a

C:\Users\Admin\AppData\Local\Temp\8958d7b8c51215d6a27444b2760f1ce843a414d380052e6e71c2af6e9ab69ce2.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 0e5aa80c8695f43ef93fe8ba8c19f04d
SHA1 e3404d5cef45c09ffc41bbd91505f3037307c170
SHA256 7ad87408bded5216546fd7a8b93c04b7c180c992775873b1a0ed657bf5ac9422
SHA512 84d818c02a0a5dcd7b55de8270dc0a852adec39258f6a02032028d34edc9c1f5964cd14d74954611ad2ed19b6a793ca8510713265aea03ca734b0400d5f27447

C:\ProgramData\Package Cache\{61087a79-ac85-455c-934d-1fa22cc64f36}\vcredist_x86.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 bd85f71085b25fe4f82d3d91b425ad16
SHA1 d075bdec283c00f1402c96044e7cd178286e9a01
SHA256 90530e963304bd5bbecdc26a58db48a66a1e24fec9ccc4d652165b0a842abb0b
SHA512 8f62624f6435190d41b8ea2a89b6d941eecb12f436f369de41a7380480792b9c6c052b7825c1396eef50db0dada7a6a9b0472e36c7b79180a625b6d4f7424916

C:\Users\Admin\Downloads\LockResume.MTS.(MJ-TJ9302618457)([email protected]).zxc

MD5 3c8dce1ee99e3c8ddec297b45b784a2f
SHA1 260593675be345d8918345d4c4143241dfb92b51
SHA256 75b88934855fdba68cd381b4b4bd5dc0aaa101e499201d2b0522eb9b45aee441
SHA512 d33b9e23ac88069cbe218e91c4cf05eb58b84c2e929b27cf852c24b9688117b8ef7b25721381c1c3d560ba6144e9cd733125f8e2dcf4d54676737cca26c60dc0

C:\ProgramData\Package Cache\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}\vcredist_x64.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 26a87890cf435a2da17c2b209f96ecd6
SHA1 ec096f431d06cab5054214b8bc36fc71288293a1
SHA256 d5af9aa15e7550ff81596c0a13051442cea74e6c328c604cddf1ac74f3487b94
SHA512 178d0bf1b5fc68395d9b075ea6a1ef05c7ce32d69b5cbe4d9d5ed7fe457088221375f4d43ab4073fb3cd9c89e538e1bed4cf26ee437ec56a431ef1e4e1982b8d

C:\Users\Admin\Desktop\ClearGroup.search-ms.(MJ-TJ9302618457)([email protected]).zxc

MD5 38f6505a8a419acc5ca04566cd5a05b9
SHA1 f68102b318c3f5b73736f9b51d57d0538da8334f
SHA256 05d521d62e31f334a49721c873487a325adb39a6b47fab7e1a96f9cf329e9267
SHA512 4cdca47342f84df40c25b68406b22bf8999f793356e1ca85f7324d0d123c61fbedcfc3acf275d0a093b6ea746ef23769cb7cb41fba010c37893b06c756ba70c8

C:\Users\Default\NTUSER.DAT.LOG1.(MJ-TJ9302618457)([email protected]).zxc

MD5 6a7b48f43691e4a1aece82f14f74de00
SHA1 fbb1b2cabdf82d75154aaea8ea713dfed74db7e5
SHA256 f574bd4135d570fa1993d984db6c1c7676171aeb093d023ef36c2146725f72ee
SHA512 af329a8370f0cfa6aac95f1e18dfc86fc865a1817935aafa6ee4a3d6974131efc7ddeb7207d9b791c21f131ded494c77011a3d70c69631e0c9b1d3b0a20daa6f

\Windows\Installer\MSI7D3C.tmp

MD5 4a843a97ae51c310b573a02ffd2a0e8e
SHA1 063fa914ccb07249123c0d5f4595935487635b20
SHA256 727ecf287fb6f4953ee7748913dd559b4f8d3a022fa2ca55bc51cf5886c52086
SHA512 905c081552d95b523ecf1155b6c7e157652e5ff00cda30c1c21124d266eb7d305c3398d6832316f403dc45d1b639f1a5a67aea29922cd1a032f52e5247ec55d2

C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\setup.swf.(MJ-TJ9302618457)([email protected]).zxc

MD5 df8163ca4b01fa364050fe6172642790
SHA1 c2a93197556c8feeb0d545c01a6b8f8889562f30
SHA256 119493ed4bfbf35967525dec89f29eda59a2eb3d0ff460a200116542bb8e5828
SHA512 d11c156d65d521463d9b80e91deed1544c5dc99734ce7dea735752eaec577ec66e732f3e85fcc992d9568abadbb5b1bfe1bfe5b71cf1a32de8fc578d75477261

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOICONS.EXE.(MJ-TJ9302618457)([email protected]).zxc

MD5 e0a80f31fffb4b97f27e6f0474521fbc
SHA1 a76aba4ac5c8fe4e85f7de516a3542274864183c
SHA256 6a1128b1b8a0adfc582e3b4d7d55abb0c6cb2625752e24ae1e35d182a91ba92b
SHA512 cac6444df4224b778b1fc6d50f3289a435ea33132ecdbc9597d5389e1c3121f3a5f2d5428822ca24a26922322670bb387ade6932384037b15db768ad1d505b78

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSSOAP30.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 c2b14225f390ec50993ba8d2eeb60377
SHA1 98a4b77d0726ace9b0b1d289971e5127e47146c9
SHA256 afee87ab046a1904bfc4e1cb65dcfd477068f34ce6b99806593d147e2c453c42
SHA512 a706378265d31f1048c912fb648e01312c25ca52bd990017514e209101ccf3aeb193fa2957478b306ae7de991ed18a9f126bbab84aa9af6dd7b4f8bbe919ba9d

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\LICLUA.EXE.(MJ-TJ9302618457)([email protected]).zxc

MD5 c91ce0714b2db76e1f86425b04e21ff9
SHA1 9164303411bb7f6f4481eb038cdb248c765ad58e
SHA256 ab15282c3b9b7448a0fd00d580ad91b567866a8f9e5eb10413bf01f9e6c2d695
SHA512 9174f3af45230210b9d1512519261305d693648dddff3628e7abd2419cf6dcdc2d5b62596b26d5303e53e8830f34dad90ed0625b6fa61d0206c2e4ca0ccd0136

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\EXPSRV.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 5815c74fd6686ff2aca691ad01597272
SHA1 4ab5c7ac38653f533744ba44e0d6036d32998ee5
SHA256 2522fbed4aff7042cd24bcaf854e2b1aee8c18fcba6a5d7959d515197fa5c034
SHA512 201ddf4e958dd3050bbed7653bec5e48be7654b17928dfa4031bc2242e530fd82b45cfcac31cefa240df828a1a94cdd346522e319c9954cb7ee0ab7e665cdb0a

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEXBE.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 65d4bbeaa74a547c31eff3e8d1ef8f1a
SHA1 2b48a4ba77a551cfd423f51f08143a01a3a5f8d1
SHA256 ac87ab9938ac731c4c01104a6730c248252cc0d283e233f27386143b3858f671
SHA512 827b3b4b32ee4c54cdb4d4597350bc36ed43b3770ba3db475bfc6010880ac5007b88583d486a155eac5b6646816024e6e4bcf04398aa717d2cc7782817039555

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEWSS.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 cf1f6efa8751f8b1ccbb9467ac73676c
SHA1 3cc0ca981c56dc34e923fb7e677411e7d58dbe70
SHA256 9c73bf4ed0acc693ec9cb85e9faae332721fb449a5dc68463f1904c7fae79b0c
SHA512 163431789e542b901076a9c4dc5f570cc3951d9c613ee97e9650639165e06aacc10b762e0dbae26a3412dd4728c4c05fb7fac542e0da37374330463c0420ff17

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACETXT.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 73e515109e89261cbb6cece1734f9d94
SHA1 2be5ed3cec7292d3d9f3559e6c6e5518e843864d
SHA256 073efbb684e8ad0c0c0c458f44f07e509ed4c2f2adf43549fe25fc5e996969e0
SHA512 dfc925b5116a2767a6e324a03d5d302d55fe508e2d000df41fe49b3c736adfa65a0b574232ecf4aec0c97cebfff44350bff7b18a7ba006e9821578cbe694fa27

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\pidgenx.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 37e50532aa9393430efbfca81a8eba6f
SHA1 b522017477af295bd05002fe08101ab8df2039f8
SHA256 db71a4fd5434126a21e314cc597a8af228814d8f614aabc2df5bad562cd914e6
SHA512 ffa48a334441157792aaeb5cb9d860b6737b9791504a43fa4588a168508a8348ca9e52d0da2bcda8a820d2deb4492e252a28e2795a8f3644ee04f281e2839c6b

\Windows\Installer\MSIA210.tmp

MD5 ff58cd07bf4913ef899efd2dfb112553
SHA1 f14c1681de808543071602f17a6299f8b4ba2ae8
SHA256 1afafe9157ff5670bbec8ce622f45d1ce51b3ee77b7348d3a237e232f06c5391
SHA512 23e27444b6cdc17fe56f3a80d6325c2be61ae84213bc7cdaad7bb96daa7e8d2d3defc1b96c3cee4a3f32dc464b0e05720bcf1c0e99626bf83de1b6d5aac000a3

\Windows\Installer\MSI9C83.tmp

MD5 33908aa43ac0aaabc06a58d51b1c2cca
SHA1 0a0d1ce3435abe2eed635481bac69e1999031291
SHA256 4447faacefaba8f040822101e2a4103031660de9139e70ecff9aa3a89455a783
SHA512 d5216a53df9cfbe1a78629c103286eb17042f639149c46b6a1cd76498531ae82afd265462fbe0ba9baaff275fc95c66504804f107c449f3fc5833b1ed9c3da46

\Windows\Installer\MSI9BF4.tmp

MD5 85221b3bcba8dbe4b4a46581aa49f760
SHA1 746645c92594bfc739f77812d67cfd85f4b92474
SHA256 f6e34a4550e499346f5ab1d245508f16bf765ff24c4988984b89e049ca55737f
SHA512 060e35c4de14a03a2cda313f968e372291866cc4acd59977d7a48ac3745494abc54df83fff63cf30be4e10ff69a3b3c8b6c38f43ebd2a8d23d6c86fbee7ba87d

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML.(MJ-TJ9302618457)([email protected]).zxc

MD5 52a22b64e7b3c52142c44e6700962cc1
SHA1 4bc29603fadb3113035df4eb5158d3e2bd6fd9bb
SHA256 e1ae6c88f797311d37421cc5bdfc0b71103978247096b0e8a8d44c3d1ea14b18
SHA512 bc7a58775f1bd36a1d5570282ab9196dc5bba228123001d6e9225409df40424fe09717f797b8fb981f602ea9c729a12a0cd99c63ce82f1e06cb840462eb8b719

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\ODeploy.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 95b0e3a4356211017dd61b35579d92ff
SHA1 64aeca22a3b150f781ccb749f38c58447da33000
SHA256 4e1f4d7d0d12815fd7c2f2dafe9cfeb34744adc57621244ce1f0957f5d96d58f
SHA512 0631359877dad0c04ed2febd56830e65448e448dda9d1f924a319ddb8968b6d22278c1287e953ea94946d9a4248590314fd453da3c5047206811fdf3370d0b84

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF.(MJ-TJ9302618457)([email protected]).zxc

MD5 bbcc33055abbc58664904ec8ba9d3559
SHA1 4d5cb620c7ef9e67215b3304dceb00a0587aba94
SHA256 6337ec37054ba4c769d4692c3ac0057ee965ef0d0cc38dd7358e4f07b7558d98
SHA512 55c8287ac1c72b3d3c85d1a64809410ada02451a3cab6d72c271ffebde2b25d4902c171f91f3cdc2569d58c626a001b5164d8cd9af5cf50c1d0c34e0cb1392f5

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 113a4d142d694c7d9526992986f9ac97
SHA1 17e7a39ea0aca31232a9c3d1fee1c350f5a87014
SHA256 86a1650c71a0cd1a7356cf9fd95f8d3f31bb3201880e774bf80eb578f5f22b82
SHA512 6c9c770d878397f0f737f9f932a07abe39b548a99bae23b26e9cf7fafbbb66ae3629afc1fda9a2918eec371201ac68b09b90e9d1c7b8eaf11cec5e449d6e882b

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\MSOINTL.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 62c079e25578af99e78e343da733fc66
SHA1 5dae6e45c14c312c3048a441fceea4339c686cca
SHA256 2081c430c6a6608508ff4541c0b9313931c07da01890b9b67a1609f8c0258c32
SHA512 d28f33eceec56202ff1f550f1ff1986ca52d79b025fb476716627ebca9c53d085c8b6750d20ac79bac19f2458a2405f44b49f7a56f959859d94777908e3f5543

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\ACEWSTR.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 24e9cbbb851e7966b7ca7c60e9810d17
SHA1 d860685de3b843e650ba8cf32f907bcc8d554f7c
SHA256 80ced7b97be6c2e85eb3a2572a9811016d25f6bd195803b4c3a48f076c812d86
SHA512 d863cb9e906c89ab7aac13e277e7ea84c4244ffb3b6847b2cb401476ea0c30f46d88c258ae930c28389c06c07c95ef6ccb971267921cae75c5e7a1cbcbe88323

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEREP.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 966bfe7f7552182734d67c6da0efcafa
SHA1 595a21e4a74eaba1d228ad96a0f33e075c8ced13
SHA256 a8d41bb39fcfacc6b64cc10f7d45f0156e1d41d9b2159cf3cc446cf75efb871f
SHA512 312227699f95110e91833fbac556ae083cef020953780269c73f0ac9db4665fb1dbec1fa5f36bd516f330aa8bbb3bcd52677bc59b1f9e0e28365d4d44905b532

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACER3X.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 c44848b63773a55923e96578c32e7f04
SHA1 6e7607f8a0ddf8602bbfdc308c770c2e341c42a2
SHA256 881e690ee8b7138edea0a018b0f1efca85b6529c46ada7e609a8891da7c7d40c
SHA512 a40c925007c3ed94c8559e843795914a6e396b4bcedea3a56bf23865f1209994aceba85450eadd63d175234bc7a59c85670460caec3187331afa0e78d55ac141

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEOLEDB.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 f67644a3e187d25dfb6add1be3d2ddfb
SHA1 e124736a6d638d6012a3b28edacca17dcd571f69
SHA256 aafd28b074955a918067516e633577ecdbbb893af2573986148d5656919f3332
SHA512 80d76aaaa4c9fb7a1c28b3c55080e3a39454dddd33fca3107cd85eec89a4be4bc747e6a9f3c6a8acdd5a614fe87f03f781a1ca48abe0453a36af7be1274c1a5d

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEODBC.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 5abd07cf117ddb649e94212118867fe5
SHA1 363de2149af4fd4d11762de56ff069d53858d96f
SHA256 dee56ee4dd5047c55178dda12e95a6ade9ff5f46d6a0827f2bbf427fb430a20e
SHA512 b299ea99ad05e4582e137dd2ec40584b80fb0b75ddffe0ca23acb9dfb59895b222b681bbfd3381fccd80dfd46a81236c5165f4c2b92eb20de69a960a3f0aefd6

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEEXCH.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 fe3d1f92108dde90e6b7e995d01e971c
SHA1 97ba3e8c1b9a2f5f2efa50e4b34ece835fe2de84
SHA256 96b5dfab30efc6f2218480d579899f25bd0315f361236d43626fb51d527fd7e4
SHA512 e13bf67f64a57b17ec83591fde0dbb733c98539ad7f163df6a6a9b141f71563439725fa2246e664a7c80125ade971c8e4e93d9964da43a8aa92846fef04373c2

C:\Program Files (x86)\Common Files\microsoft shared\MSClientDataMgr\MSCDM.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 9d9d5609e56d970cb5f274053129e8ab
SHA1 03e6a00fc4f4206411e8efb73220a2d837786d32
SHA256 714f7e26d4e5d8f9690c386a2d54ab4e9cad9c549749a2da09692452b9d56c76
SHA512 ce1ac1ec2fe997bed51eecd4f2047050e8b55470433ecd7f600cbbffcfe61ffb81ac2a1b2273bbb6711b783224aeb018675a97b701a35d0adc70f2cc07ea4e40

C:\Program Files (x86)\Common Files\microsoft shared\Help\msitss55.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 ad073edf6d2174bd8d6fd1ef5acb190f
SHA1 eaa5c93b3a5b5b9f292197aedca83e6168f6798d
SHA256 1fc4263c61468ab9e7ec01bbed5bed1e4d0c1290cbddcb535de9f2f25f6518ea
SHA512 20442d850f0919f854056560e034e72f918a1754693a76837ccf0704772e91358d665aa6de4e878cc7b2e164a5af3f507ce74d8bd971e4c2595e1dd6c308589c

C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\WPGIMP32.FLT.(MJ-TJ9302618457)([email protected]).zxc

MD5 d5dbc8bc074725bd5a94e6200aa1e171
SHA1 46c5c6a981e0735fee988fc44a86ba1090ccd0b6
SHA256 7857b34a90dbe7d1ff5ecc5648849de4b2d03824677450fee4853928d8786aa7
SHA512 d4fa08ed93def509f8bb6590f18314078533ea78815c236f814d5f1923fe68442539664698f2f3583b357a4568378c55be7d025dcffa1131776422f9a30bfdc0

C:\Program Files (x86)\Common Files\microsoft shared\DW\DBGHELP.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 ad06d1cd05f95cf271c94c4e2394f9b3
SHA1 48a4f3a0dbc8e1a3826505866f3a4e909fe497b1
SHA256 523ffda207af6c6ca8d557eed8caf2a7c2d43d8b1c2111b18ec06cd06a8d8d84
SHA512 3b3677d2335be9d6460de8bc13d6ede68335929c7581f40330044a1fcb0a06766dba253137bcac3477fd2b34a229c2dbc9bed39e6b4740181a997de54ad6e79f

C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR Application Installer.swf.(MJ-TJ9302618457)([email protected]).zxc

MD5 134989ead5e4d37e44de3f64a55ada5f
SHA1 1e8847b6278a0d3e3a281c98ab5d3f7880446a9e
SHA256 dbd7eec84d9787ab81a5b6e5d8945d2cda69283804dd1fe82af222a6c97dcf9c
SHA512 85d8e57091dce8e9f765002e74ba7a6037f56556a46134a53af27c9e76312836bb05aed78425863011f7e44b5ce43cabf603a6b75ad01a0312fb0322e7d915b8

C:\Program Files (x86)\Common Files\Adobe\Updater6\Adobe_Updater.exe

MD5 ba588f931d114a4bd41142aa2fb6f843
SHA1 dea01031029c66eed9e54ef4cbcd3e09c7ec50fa
SHA256 8789fb5207ee9494c9d7b69977ec70aba50ad52f61e472620979361810a6ef66
SHA512 8121d5ba24bf2f58d3545ed62ad43f286e417fba699f7a286753baf4fbbffca8608202723f5a6c44dd9c9678d1488a1dbef7a17a3652b93a1836aefeae195e3a

C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1033-7B44-A90000000001}\Setup.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 2f7444c447c18709538bd040f4d26136
SHA1 a026619b69afc6645ee25e379c7bd9e2e2571d60
SHA256 5bffddfafd82146f97528b08aabf37ccf2d92f6a0caa54d90d1808a78a4acd52
SHA512 25bec960eab872fccebc82bdba8962357444978ade195d0668b0f0c559bd40c3f4478619ee163bbccb289850779165d5cba61608715f91643024b96fa40e2efa

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\prcr.x3d.(MJ-TJ9302618457)([email protected]).zxc

MD5 7f2ff9c9f4bc6a034339b32aa5d682f0
SHA1 4cff3ff072bd7b61d340cca5712ac258e1f3f738
SHA256 f4a37fd052844ff11473da50227b684032689f484de746dc7d16e5ce0da1b047
SHA512 e3d658fb897bfe14aa3dc49cd5ba3ed4460e412af940410e9756c821e76dea43fa704508085fe67cb2ff76eff0f877d0b608369d1775337837b1ed1b6c9a11a4

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\drvDX8.x3d.(MJ-TJ9302618457)([email protected]).zxc

MD5 0e9e26bde33ff343f3b2359966fedd94
SHA1 03d77f79a6d7d68b064c8771c3df5102d25a4a1d
SHA256 2a98c4dbbfecf18c31c65ce3807ad5ac741ef779679526f08ffb885f7a61271a
SHA512 06217e82a8ee9049f6093835c3f141a4a40bb54581ccb7dff99038c557aaf6713c0a855ee2b026d1f7a2886e769fa82b5d62a316eee3cf2acc8f006f84e8c516

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\weblink.api.(MJ-TJ9302618457)([email protected]).zxc

MD5 902c53174b8b91a124e8abcf195a1307
SHA1 9bb5abfc79e74c379f590aa56edb93e3e11a9e59
SHA256 3777ee328baa72168d12563073925401a10bd4219d6abc9d32436c30940b10e9
SHA512 2d4da46d3f12a2fabb8147000ed2654bac8552384271ca726132dc98b984644199af8436c5eb119750e90eb4e16531dc6eda8d6815eac354ca99da4568197861

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Updater.api.(MJ-TJ9302618457)([email protected]).zxc

MD5 25cd6c08d8cf598040f1e0902d156232
SHA1 05cb14220f8b3785f3e028de48aeadafed7eda4c
SHA256 f35b59512567cb1cfe2d9048f03e818d717c6b7a8c428e0e3c13622bfbfd1e4f
SHA512 58e1fed7431c990ec09f0e97e5c6de859c666a4280f5a47ee0d551591b1e6d271d705bcedf6ec115b40fac39b83cba5691cf5c3188ac524673e2bbb807077423

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Search.api.(MJ-TJ9302618457)([email protected]).zxc

MD5 4df752cb25a8580123c752da9f33504f
SHA1 6706f8524ea5307a3276ffaec2e5058e78c46535
SHA256 ae7f583ff90e0dfea1b856a19a3e53d69a2e372604a07130881aefdfd11fb950
SHA512 128ff5b7da4b8bfe169e7cf5b8e80a40983bacc2ba7ec04ee05aee7e464943b5cc1cc5603995682f6e2c0fee9118e0df641c57786cc3bab3b281b73d9aaa556b

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\SaveAsRTF.api.(MJ-TJ9302618457)([email protected]).zxc

MD5 178f28f35cbc03ef23e88ca1f15f5d89
SHA1 10ed2f90dec11d4648c6fd895e4765660433b58c
SHA256 5eb28074cb74a574bc68e331b3d62f84aef49d86c69b60220e91fc66dee421f3
SHA512 eda350cd0571ec74045d4f46a2a81765876f3894503190e4d85192b555af0e3395139e3e22ae4f04fa9135df06855e646759dc80b6aaddc2a0e7cadd6e4dee23

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\reflow.api.(MJ-TJ9302618457)([email protected]).zxc

MD5 90676c6d930c8984a005b8af3cb8de00
SHA1 7394f862a252364a94f068ac7dcd31fbb01c0632
SHA256 18be0a6a12bb207dd60c5dfce7654a14349d6456911c5312fc28c842447696f9
SHA512 bd7e03730bd3e55f6abf45c302ee5c90e7abe8cfe5a381424a6623f8da707ba3b6c0ad5f4692a4d307b4617a17da1fc3ca9d4cfdba81b253b90d1bfbba5e8947

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\PPKLite.api.(MJ-TJ9302618457)([email protected]).zxc

MD5 7b4e276615d8f066d9832ca3cfe8f433
SHA1 fe963c71eadaf94a30d6bf18170c9e3cb2c876b9
SHA256 352f84913db0341e0cb7829c835ca2b6e73a14fb580512adbcbb1b1ac4d3653d
SHA512 a155db4e3aa4cf4375bc2dae229ec58e8608ba171f5bef6c05382434c344de8b3968e73e9f71944c306a46ad0ffd99f0984e54c620f2c8462e30b7e727b56a1f

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\PDDom.api.(MJ-TJ9302618457)([email protected]).zxc

MD5 ff553dbf496b0ad2c565ffc4449a3c1f
SHA1 ce537fe93d3d963a6528a7a8cc3e48f5e8f30a0f
SHA256 1508364fec46d315038047d20d1833e0411545bb4f5441067fff726127615820
SHA512 88e6393f8000ed15023df8e5e4d0eb13b1500466eaa274ca179306c6f75731e34f13d1c79e052ba068c261445b89b1c108701805156b59178b579756f774c60b

\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL

MD5 81e7e920312d372cf57a817049ac7c76
SHA1 0a2e953f2d8ecdf984532f2d8e3c0264fc079498
SHA256 ff9a2e7fe46937b34f8e61f58df1f6108742cce58505f212e8666cb4ab7b74f9
SHA512 76530f002a84a791f1b440c1ab57138b8813dc395027e5c02002d67e9c7a72d6e448bbc2f844fd2cfb61259c37d916a6835035bdb442b45814c1d1aab4743a52

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Accessibility.api.(MJ-TJ9302618457)([email protected]).zxc

MD5 49c8af98674801fde214736d4201d567
SHA1 677786a798bc090c8c1409ea3816a7e58b3d3e0c
SHA256 f5a5c32aab7e5dbaecb176b2199eb9d1fcd418f0520362916b61f3be7c5ef715
SHA512 9e1691a011719b62d6a46346bf77ff0b5a1dc89d9579efeed328fe2ffe2852f8e5c265dc1b6f6da1d0f75d7e41a9df009e87e7928ba6fe6ea9394c3fa8d993bf

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Javascripts\JSByteCodeWin.bin.(MJ-TJ9302618457)([email protected]).zxc

MD5 9119ec519527ffd611dfc62b7bf1e24d
SHA1 6e586ef4e5d0da0da00668cf5009214db40c7135
SHA256 f509f5d1252f125c32c03d85e39d86e22b6758dd8b16ec5891ae1327289bcb0b
SHA512 df2eb5df4315784b151b070f4d1d843cb3945e6ff3f59a58c8d577e05930ba11a54a2448112d31058eff8d0aa2b217e76c17349ae4bae3b7051ad78d7dcab852

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AMT\AUMProduct.aup.(MJ-TJ9302618457)([email protected]).zxc

MD5 404043c64934e335c88806e7e31814d4
SHA1 8fe5f5a224389fb8da8aace4c593bd7c9bcc890a
SHA256 620f8a10d1ea3b2ff509b1cb18467cd436a6cc92e551fa6f1ec9b3c7e9d9c8f6
SHA512 5777760e998a6e4ae34c47ea3a4f409ecaef2874527d5c03f7a3b1f562e7095010e9c8403427272fef67ba0adc1d38b3d0217e3d6ed64a38cd49c9408f22a897

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\pe.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 df3aa92e281049ee822a7dbaa441f9d3
SHA1 5ddc199ae8258dea85a559a4e0c1eb866a8749fe
SHA256 76034575015350c1c7282d7a041dcdce37f845322bea1b76bcb8b756a549cce7
SHA512 4dc7697d9f8c2bd86c3e2a22b4343392785655c0fd80a67149c503a9d8266ae4f9a2eff83969ac1a3da1e808cc5590ed086850fc7e30a3ca1b78c0b97d480845

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\BIBUtils.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 17bda955c0c59a30aff895a1e91159d3
SHA1 a2d7fd78972e483361362180f3917ff14c265073
SHA256 51ab550defa2671b7e93f1cb4cc6dedb2591673888684a65623e7c3e1abccba6
SHA512 4a903d9e72dadc6127101f0d67401b0a10d14de53d2729827d4abd662d896044f7cb15f9102b872356d022fb860f1e25e880ad90ac56b3bd2a3011fe3e7bf3fb

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\authplay.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 2179dd402eabccf53ddf8a0b31ec6c5c
SHA1 52041791b820b5724b45e6242b68821ab77e752b
SHA256 95fcfcd06c363d340d1d6fb85b8741745f697734cefd8982de9d55d457aa287f
SHA512 b408f395bdc2ee08d9c68ca8738c8d703210521b7c5bafcf79a09559510311939abe8d05af8d937f0b265aa8571062aee8a89651b54c6a623b0a90d1f42c8e11

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AdobeXMP.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 cd1d17d77caa41ae2ec42874b0a920dd
SHA1 62fae8788831c6ccc4b3c5a8b856708b1ad8aa0c
SHA256 9f271115b8fde43b1f91cfcf813da409d30d575f5ba2c1a039a089038f17f5a5
SHA512 805d10ee70b9d3586ee5ad6d070d72e2c0961339c2420d9b3bfba1765af11398ce5fcafa394c9ad99310a76308c7d1c5e7b52856346625cc239f9475b039b316

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AdobeCollabSync.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 aeae3e248cddf0bd408a11ce2010b871
SHA1 db125354cb80d73df7030f0fbab2c47fd9dd8679
SHA256 cc32c2676aa590eb3db4bd9a8be7438cc34f10c6dc6e3f42f26762c63ab299c9
SHA512 5666cb2d5a025f920c9f0f75608d735d16e12d699d58a7bb35767c9653faf07a0b02b5f67057675a79231b216d25f3505bd8e75695dc5d6fb3038e75e362a437

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 f6f124a98ada9e299814ef5bee7ba4ec
SHA1 aadde6b734889ddf7bde7964fb10d25a5ab9b014
SHA256 e460078d99c3d3e45e0379879018bab37704c18bc09517e3ba442b9bdbafa256
SHA512 452bc850daf94c9ef131a7e90080c18c958b580cb75931ba193c8d9a3758d046b3569c93cc87a33e990cc5a273ac1213374a970e8bfcce7e8c6ebcc08845c0bb

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 9c85302999112bfacd73963b025423b4
SHA1 037bce9380a53fd383d4d9eaa734c118d76253a4
SHA256 251c46a208d7843a4f09c57b08099f1308a960c2f40e1f1b5894c4c054e28525
SHA512 bec82aa5555ca71653e8dae9583e0ecd70c5eb6a1564782d33f60f5931e7118eab1963a73b39d7807a32a4b5ea9e2452f039ad8a7a175285be4e74c3536cd110

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroBroker.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 54993bf7ed653275591e88b9f121cfe5
SHA1 589439c9e3b6c6a693b4c56dd7d3dd5e2d04b95f
SHA256 c39df0c5c89a7ccfcca702cac3386f473bbd3cef0d31f6719094393e73daddf3
SHA512 222f0ef1c2fb883fc01e66d1f2ae24c4e63e3ff46fc14a478b69f3a167b351ebfdd3d0fdfdee0898997f2674d6766727ac91d2ce262a59b9bf7de291e4ec4cec

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\ACE.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 3b168be5251be029d0160f5eadc9b07d
SHA1 0e62f6bd4e21adb0089432692089cdb80b263002
SHA256 690e6861f14b6d4f7b211bd85f07a1704f284df2404ec00bf090dfd2b3989292
SHA512 19866579294788632250a9b5dfb8fa168aaaaa4c29355abf03f27ef274eb901a5bfc112e41df9bfda8cc4d47c80e624a5f934977ff650c95d5d7d70e44eb4fa7

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\A3DUtility.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 4cefe311a27b02b991d88aff01251bdc
SHA1 3c2a9a21ad05f30ccba80d5e30d1bcc295c4fee4
SHA256 cebf2727a05880e984d2aa0f2dc368c2c4d81c097daf4a41eafeb4d9fa98c430
SHA512 1bdc4e02818bbb2fd7968c3cacbe85ec05efee327639602cd9e28fdf7aaf6acfc27a94bc30f10e420ec3dafafb5ad9926d42115a6a3aa86f3fa883913a16cace

C:\Program Files\VideoLAN\VLC\skins\fonts\FreeSans.ttf.(MJ-TJ9302618457)([email protected]).zxc

MD5 245ed9f781806e8c99010c9f86633d86
SHA1 4106082bdbcbf3663f0e4ec65c05fd017836320b
SHA256 664280f478c238fe0982f9aa0cb23df0faf6f03621f34c6e7c8c5dac2ea4c97b
SHA512 42098e7f20258e19a7a8766dcb46459c0e2fa32d24d2be70ca0048de6533479467b83cba5ef6ee2f88b5ec54d97e19b8b3bf6f2761235069aebb774f7c792b82

C:\Program Files\VideoLAN\VLC\plugins\visualization\libgoom_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 ce6b1fee365a092b5995bca7c50c1f97
SHA1 e845fe0380fd4cba9ca24c570c52e523c2487d97
SHA256 80e5d27732c14ada22a2dae46cc47b34a9d922ba415d5a52ab19d24e31346ce5
SHA512 a3c98d702493abca69b26cefad25d9941263fa91f7ba5e16ad6822178053f9baab6daa84d842e07d37ab30606e65c1970a71a92490e0e3ea92a7aa14ff56dd13

C:\Program Files\VideoLAN\VLC\plugins\video_output\libwingdi_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 5da9c4ee8731af7073bbdeac96c3a7eb
SHA1 eafc75c7352c48065d7055d6dcec67c5f82e6ae4
SHA256 dc8036e0f9bf9305e9ee1deda19d361e6b0aec5c8ed03c7ab08a98378e437f87
SHA512 221a3c260ca019634578e01a1019521978135fbeebfb361a0c2ac9889ca44fb97d43eb7cb8e90f75cd54811b5cee30032e6a5d80c69046f19d082a610bb1d72d

C:\Program Files\VideoLAN\VLC\plugins\video_output\libwgl_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 7a4d5f22b91bab49394e4e406f53a5a7
SHA1 dcf857f7b1fc7f04dd75fb968bf96537c2c223c9
SHA256 f19b9f985567478f6e343e8bf17d3c6349defa9a999b12edc9d4a0a90e7b11a6
SHA512 7791344766aac447aa8be765579bc472d19902cc5e95ad273ad96d3a3f3f832c0fc29f49edb9e997656a7a25e2dfc77095ec0c6e78e9ae258c3169fe96b6256e

\Windows\Installer\MSI79A3.tmp

MD5 d1f5ce6b23351677e54a245f46a9f8d2
SHA1 0d5c6749401248284767f16df92b726e727718ca
SHA256 57cb8f01cf553c3886760180d1a74839f2f676640115504485aca9692f577acc
SHA512 960e90894e7bedcc89894e77e57e8ee0c99dd2c530d02665e8bbd3a1793eccc1e295c5923d1f37c757fa1158097fbaae70898c16052882d3d210c29ea801b3ba

C:\Program Files\VideoLAN\VLC\plugins\video_output\libgl_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 6ee75c3bdef85c1c40a0793df7c67a89
SHA1 5873b3d259c0f9769dd870809c68a1b807b8449e
SHA256 8a796cbeb8c74cd482b9437f1817e81fc2fcef6e505c00466332af73b202cc88
SHA512 9c9f9b8aead65c187133b99871a650576cb9113966d73c209a8892ef55e3e997f5dc50816df7f94abf65512842f57b086cc4baba54e31e6ad89612373f709f87

C:\Program Files\VideoLAN\VLC\plugins\video_output\libglwin32_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 76bf91ffe20c4b36ee5fe5cf4f66e483
SHA1 fd2e70b31a1ab7eca2b51e5399dd928b959f28a9
SHA256 1c3ceb688ed797e624aa105869f2b78942ab85b3324d8aaa697797ab87e15fed
SHA512 7c752f4ba8b4d15918b61b2b1d20ae8754e29aeedf7f8706d7b45cc80e3810a364fcbde35fb5382752c21edea9e0740b787f98a9919016e8c1888b986f687c59

C:\Program Files\VideoLAN\VLC\plugins\video_output\libdirectdraw_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 ba543d752eb219901381b1c826571235
SHA1 77bdb15e25b240677e128e64d557eeb21469adeb
SHA256 c4fee236675ba8240ad5b9c9daccdb48ddbfdb1fbf00ee3fd33dae45ae67525b
SHA512 d0a0b412c21e4f52d6107894196c8da1dd98991e1ec7eb242f579b8a507928305416c045e856c1e0241790bbc56233893b9aacc4fb6a4ec5622101567c9ae295

C:\Program Files\VideoLAN\VLC\plugins\video_output\libdirect3d9_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 351de5be8ad3ca3d169a7c36730d0945
SHA1 ff1948e67a012b60cf9995d1c334d0422222b198
SHA256 816cae6630aa30c248e695d7aead9729c757acf81a8c1c7467f4bdf628bd6754
SHA512 00f3160f7a9b85dc1c8bc2bc0993c3063f227d26284390b6e7f3a81f11e55f42d439ef61b6fc6f0a709f532264d66942e2cd33b8a94e4b0ec3c4b0c2c05b9b55

C:\Program Files\VideoLAN\VLC\plugins\video_output\libdirect3d11_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 d944b2c155a55f97d113ce75de0e7875
SHA1 003c6257629a3a7780115606e128a562b39eaeb0
SHA256 8239cd22acf709a08a445bdbd0b49a0470446981e935a425a3bbb7edb35e243c
SHA512 0398c39525d0e345c41c7a746ede4114e19a1a4741a2741ee7060d39d8be6300f8e3c3be78f0f98a7787dbd0e17a401ec97c320e83288d68d73b097e0d000ac8

C:\Users\Admin\Pictures\ImportCompress.emz.(MJ-TJ9302618457)([email protected]).zxc

MD5 41502f29459bde174d13598200636014
SHA1 af468426eb9d0987a2fe9e149913883b385da13d
SHA256 c71c0e9403b9969a9bf3ae87f29af9ab0eb68e3846192d9e8c12654f67ddf91a
SHA512 ed4e517471ca47055d489e94dba5422d4649a3687fb62ef51f03d8e46d376e99dedffbe1751101c30e6409a5afc4fac0cb12b26a262c4b1a5e5cde7d8de74074

C:\Users\Admin\Music\WatchMount.rmi.(MJ-TJ9302618457)([email protected]).zxc

MD5 898c237d077a2c0072c3cea2a4238c56
SHA1 49ad15b793726272754ce09c5897dc171263db95
SHA256 1701788142c30bb822bde0eef88ab9c724e45296a31d56d377e3b1e7e4b072ac
SHA512 b10a93f31e2dd8cf316799f7cfc2b8a0110a8911bf335df66e05c2703ea6505a73d86edf4d4d71dd38f709e165346b6e4a09efde09a87febffe9a2ebadad7011

C:\Users\Admin\Music\UndoSet.ex_.(MJ-TJ9302618457)([email protected]).zxc

MD5 e9bb7ad9f361fc4cf67fd5edfaf12268
SHA1 e13bc47ff7dc9bfc09c9cecaa7aef76853727a13
SHA256 f3b45c2c4446801eb01300f7b575267b46e548c9df2be3ed90b1a54398b76ca6
SHA512 51278b1f8f44ff34c4ac83206ca131a6146d1d453ab011db5c6a0b52553ea8298c12de98f07767d389f91d0e735c1499602cac51651b6064efe3d94d73b5e235

C:\Users\Admin\Music\MeasureConvertTo.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 f1ce867d3927020337dda911669a33f4
SHA1 e59e9253634559488bdb3cddf44f571d1ee2717d
SHA256 ecf6ed7d0ad8675a1ea275e81ada3a5c70f8210d183cf796087115c2a9c8d381
SHA512 41c491fb53f600e39febeab6405842d29c60695f964b70004dc2fdf596fdee1b99241c810e7def59337940827d9b3ee652f6123c2710dcb0c261f7c9e466b105

C:\Users\Admin\Downloads\UnregisterWait.wax.(MJ-TJ9302618457)([email protected]).zxc

MD5 a992c02035c3aba2c76e82380167ae04
SHA1 a500dd46d0e01db5b2f7a810a7d0cd3afc66ee15
SHA256 ea918404562225967dd29cc3307da9879bf24db781f7502d0161f9dbbd0713e0
SHA512 2f979d7c44dec0ed2845097cd0b8550c674717bbc9ba8bfde0e7c0242b3eeab3007c05a8c19358f7e45b3a892e1edc92db9f622cc8e479681a6dab2279b5d72d

C:\Users\Admin\Downloads\SplitRemove.scf.(MJ-TJ9302618457)([email protected]).zxc

MD5 08e5f7df586e00a73b5a55cf1028257b
SHA1 1865c81385e09d346be9342135d0db11a8f2d1b3
SHA256 5f8d5c281a83c99abe280de3a3d0d92df186f28ba880a4da16273963c9ddb2e1
SHA512 49435069da4e36104c01dfba540d5774cbf4ac2dc7a81834e1c14d8dfea619fbdbd2c383889623b62c6c00e2a6dc8800c54f4e40da708652bff7fd2a647c606a

C:\Users\Admin\Downloads\MoveRead.mp2.(MJ-TJ9302618457)([email protected]).zxc

MD5 77a2d03c3bb1180a93dbe70a62cf96d7
SHA1 078f9eef139cb1d33b7c91cc3cde619635a4032a
SHA256 a8aae07dd13920cdd7e4d6867c8d4f9f8c93e1be6b2cccc5d7060049982be6d5
SHA512 c0e52317a97a37ca1e0993f97541fea71bfcb7096fe0acd129c2191eac3916f7b35d75080c8baf07c9dead38411ff149a0093a2a014722adf281a74cd2f9de12

C:\Users\Admin\Downloads\ExitSuspend.search-ms.(MJ-TJ9302618457)([email protected]).zxc

MD5 e2e34dbd05dd40eed547bc4311a215f6
SHA1 9c91f85dfe2d25b7c57880c70d97d461ba3711d6
SHA256 a91834a1828a18a80ff24c1bf756f2783d084e80825793b525d33d09dba99628
SHA512 583ee34e009977556706e04779bc5eef63c4f74e3c07c660761caebaae520ef8c34da1f9ff69bbd75434b4a5f87bdae644084fe467e764864872c0cf9ee56dd4

C:\ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db.(MJ-TJ9302618457)([email protected]).zxc

MD5 59c2c29bf1e8579ff28151666a1cfb6f
SHA1 ef022f7aa95eaed27bcd830f839f0a83133486ae
SHA256 2dcb1f2d2a637878e5100760e9173d1015058e5eb7cd0852628f0281270cb729
SHA512 39d5280b1ba551fca46cb6592e7b84700f8450387a2652fec286662a038e13c35940eefa498a6178ba341d13287f4c0819755d411161eacc893bb3f81287b8ab

C:\Program Files\VideoLAN\VLC\plugins\video_filter\libdeinterlace_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 53585bb37460ec1ebba7678226256b24
SHA1 0ae15a6dcbbc222bed21c5cfbf5310ab07066c77
SHA256 c6f6e50f58db3758f3bdd49237a8427c96d1d8500ed6d130eeec270c5c163c1d
SHA512 2972f84df333099b775335f0c55a6821cef7ff56f8419d24a129018a6ff24c102c74f3172c6a8b0aa4d5379ac0ca9612b333808db0d88d28738ad20f801f5a76

C:\Users\Admin\Desktop\UnprotectBackup.mpg.(MJ-TJ9302618457)([email protected]).zxc

MD5 29cb856da65236b82b6d263727e67870
SHA1 ccf6885f1530d2e8c07cb83a331f95a4cc9bc377
SHA256 6b2a46f54e4f2eb2065b24f8e433e8ba262ad6f0dc1aaffdc6618a6057563365
SHA512 a853fd6c4be84a3f6d411d2682d8d00f40f8c3e31df5d33cffcb4d3f7256cf27f826e0298d796928c6080caafb6c47bb8a1b921a2696c4c02b8808b7c4caf236

C:\Program Files\VideoLAN\VLC\plugins\video_filter\libblend_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 09a0c6f5d4528c23391e11508cec3d2b
SHA1 7f0312d5dc2c9e23abddb75ae0ef947efe7ceeec
SHA256 42b73f1d5767d2b25661f9daf4df50988f931ddf5c449a0cebe57f910a84d379
SHA512 316da34b61d128baa02032434efd835430b8d72ab871234616ad1a1a96955be6bb48323cae42f83da77e8869e350483ffd8a44b071bca87b8969b248d7e8cf38

C:\Users\Public\Pictures\Sample Pictures\Tulips.jpg.(MJ-TJ9302618457)([email protected]).zxc

MD5 1fe77e02e48eae1c277dfe4c7f4985f2
SHA1 22e5b25cb1282b81dc4e4010a893d5b627b89a8b
SHA256 08f698968786b11390713d246bf6cef0179b9048f57d40b08d92d020a1392f6b
SHA512 b9a25b934c3739c7a166140e1ba7317cfde1f05be2430fbc56e8cae24239554a26b954cc2a18eeee8cc08161d13757ed2bfddfa71dd2cf2981f2646a08b34da0

C:\Users\Public\Pictures\Sample Pictures\Penguins.jpg.(MJ-TJ9302618457)([email protected]).zxc

MD5 c4f521bfd9dbbde27bb6077c6c5d12ba
SHA1 657e588161965f62cc64a2dc3f09ececd39a6128
SHA256 11e79302cf11e6ee48a23b53755ad4e5b5b1ce86a41d3f17cd2431946c27251b
SHA512 01abb9a8a9e0ad21d2498a5d182bb4d87d5b70e0906924b0d7dbb20e3f91c9d937e28aca2dd707f94e75ca29553dcfaae65f1a658c02cdd9ea5e32491e2aad95

C:\Users\Public\Pictures\Sample Pictures\Koala.jpg.(MJ-TJ9302618457)([email protected]).zxc

MD5 e4e0195b1b79d22c755c4b6df58f554a
SHA1 289ebb545c99317d33b1120ff16629b21c4a7eb7
SHA256 c936a4e7301bb0f5dcca089f38cb5be4c9da7f93674d8e23916f6f0994b467c1
SHA512 21637f65183ceb71b30eddc55f95399ed6dcc3da19371af901e9cca388588aa54220f2e7a951805c6047c7a955dd10eedb996eb56c388729bce64d95aa0d18a0

C:\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg.(MJ-TJ9302618457)([email protected]).zxc

MD5 0b5e6d4d5f3da5082f0502ab17c02658
SHA1 0f25e913ff1a62f647a3031e130f2539f5cfe915
SHA256 8dd9f32516143cf2c848af38e11a284b3abaf953f02fd63ff65f0bf82b3b644d
SHA512 40ac24ab925907b7f2a6517d1b432e4c2885d00a02a9bb6331b05b5cc82827da42441052c8b71d48213c43f93292a8a6f3391e61f67eea9072ed90ad8aefd981

C:\Users\Public\Pictures\Sample Pictures\Desert.jpg.(MJ-TJ9302618457)([email protected]).zxc

MD5 da568d8284ccfd5deaf73f24e0610614
SHA1 67e5f367302c64cb3e0b6a33e8b3b26d6dd9a33c
SHA256 f4f78b9ca9b0f5811ac7d48e7fca3d73230fc549ab55ccdc9f5413c24d5f8c32
SHA512 4f24db0a75140260212701334926dc0808a9baa02677f9b84396bb77286e18a081887be282a6990e93629ae4482b02509342c01b7c1e16945aae876e601d6bab

C:\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg.(MJ-TJ9302618457)([email protected]).zxc

MD5 8563334ac0ec4a3378bd2e7676fc736f
SHA1 15e6fb46058f54d3bff65658a10c94c82c9430c6
SHA256 72c0b5b5446fc7010425cad4caa64ed951b2b1f401b9b28a9d92540f98b4654a
SHA512 6087af39611086c56d55c2ccc3ee4a61f6dbeb06c3c7d79daddd8a0e0a7994a5ebcaf167d1061ea7bc750fba43323ed2f36273606cf7f4e6921834b7a0c37e0b

C:\Users\Public\Videos\Sample Videos\Wildlife.wmv.(MJ-TJ9302618457)([email protected]).zxc

MD5 389cf522308cd8ddcddd682b98452390
SHA1 c1209d58c1b59ce7aa8ab65656d57566e825939f
SHA256 e947b9b3d8f91e3fa7948bcf6884524a82e54f60ac6ed7d26e8c2ac87858bc16
SHA512 55855c625adde5e0ac5985d401e762d9ba99fb551399134ae7c439e6ab91d078d94b6d78e2ec40ac4086584130fcec253be66fb45c67fc02ec6b529d7ceb6876

C:\Users\Public\Recorded TV\Sample Media\win7_scenic-demoshort_raw.wtv.(MJ-TJ9302618457)([email protected]).zxc

MD5 dfd166982e59bee39aa16d6cb549e98c
SHA1 2ca02b0b3fcc464e32bff42e522fe3c63bb09b5b
SHA256 c74f77fdb25f2575afd437d5448d6f8dd27072c5050a64bd0adb08f766d3d2e4
SHA512 14078d16580320f0e44623a12fe0f1a583ae092cfadf4b729f2a49a26077265bcf2d5647032a9e880d5bacd9018d1e20c05576567e95ec9dc73e3b98c4c7b323

C:\Users\Public\Music\Sample Music\Sleep Away.mp3.(MJ-TJ9302618457)([email protected]).zxc

MD5 a7537bde28c06ab6874c68e841ed82dc
SHA1 f51482dc9698195c3c82270f1a88b190e8c66627
SHA256 3af3efa572b7038159d7ede039910a7d3cf0602a96299c3d9c8510112aeb2f46
SHA512 280c27b0d9a1c9706d73217b0f0e89e51c37af0d6233eb4463b528a988654b802cbf6b8455926a3952b38b4146d2a5bcc7a45bad22666081a9ab57abb57446d5

C:\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3.(MJ-TJ9302618457)([email protected]).zxc

MD5 8d6222f6fa54275173883c0d002e3f6e
SHA1 490c77d652131b75cef7242046b8c48b60b08edc
SHA256 889fdab7f8ac07b0ab1cfe1ef9e7164a79a07127a2397fb3138449c287e05964
SHA512 01f06e663e0fb532c0ab38c703091ef0a3eac6da7702af10ed27a7f6a07cbaaffaebf763632682232876a55e2e01a8c26bcbf7ec1d9d95f7a65ef48c631ed071

C:\Users\Public\Music\Sample Music\Kalimba.mp3.(MJ-TJ9302618457)([email protected]).zxc

MD5 b15bb181e7349767522d02189cf5bd77
SHA1 aa937f9c650542d2dbc4b00e35e4e7a82e6cc817
SHA256 0bd09726893f2f1bb8e995a27dcb33478a6a80252a9ed8f952bcc40797f5a25f
SHA512 bb5faa81fd6fd0b1032a2987429866fd09408b1980bca6134e36967684ead2f341380d4e2673a6532419653c3eb08360944d76c2e2474280e40f9e90818239f2

C:\Users\Default\NTUSER.DAT.(MJ-TJ9302618457)([email protected]).zxc

MD5 dbafcda1d3c92a81dff23d3d7986cdd4
SHA1 839416b1bd25214bf2a6aac1be3564a0df1ca477
SHA256 e3440b170254f6d80d55e50307c3c67f4323ba926403a85214b1368722287c86
SHA512 1bf68b1ae616f8c0c4320cc9d626d78420832c9d85e39204b4a2e6ddf845f2eb86bbc48f67a5131ff70d345f3373c4037836b5b403699617a6fe29836b74db2a

C:\Users\Admin\Desktop\SkipResume.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 b0e7db17a0d8650ed9f2c215d3bef2e4
SHA1 1fe262f3428eec912b3fb0c63e2c26176d4ec1c6
SHA256 e0b468e1cae387ac2b2d5e6afddd818c262f9e323fac8be8acb5952ee18a3bb4
SHA512 00076110b4a7cbd6edf3a60256168d10ddb69c2ac4937f1cd7c60b9e5b0074412322c3a58e8ca02b7468c16ba8d0ca4e97c88a263616f7ec7aea3c2b5c530bc5

C:\ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000014.db.(MJ-TJ9302618457)([email protected]).zxc

MD5 bffb2e93c548a3adc203571922217294
SHA1 657d06cc7848c467a6a0acad9342e2a4eaac35db
SHA256 341f7e22eec906095839ff12ce8810cffb8edd5180cad26e9844997793401a9d
SHA512 d409d7c0414ad5ac7b06cb755216c818c278f8c6f569d1d4748b4b5d6accfe655eecb43ba7b524fac6444ef91879875c3dcc59cb4ef3e31bfd0e2c4b9773904c

C:\Users\Admin\Pictures\WriteExit.pcx.(MJ-TJ9302618457)([email protected]).zxc

MD5 d900cb5e4d2fa1673b3499a02a6a9691
SHA1 b954ddfd929e88f1a5cdae2ed81426d1c2aa943e
SHA256 f8ce484c07362af600225a79863ea752a35991be7296640f3a10e8e8ef6d297a
SHA512 ed72f897d41024e903c4dc5e5c1a3a39cba941d530db240994ebd1025a8c230818062fa4034d9dc2935701dee7a661f1e162e68ee972598a808f067e5e938ed4

C:\Users\Admin\Pictures\ResolveRevoke.crw.(MJ-TJ9302618457)([email protected]).zxc

MD5 68a5b3005c31685f6cc1ea53906589ad
SHA1 d29d6d6e1661c87581b4f18bc37af9ebf4c78c47
SHA256 5290de5c683563b3e00b81d90ee16f1b4e9f1e756c8f673073039409f627d42b
SHA512 471dc6f9d7cd2ec386484204317778575f4ede3c41d85b33f0c0713bb7e1609bc197823cf2ac57b00822a13577fd90eb1f94d0b13d6f7978b53189e940625efb

C:\Users\Admin\Pictures\RequestRedo.emz.(MJ-TJ9302618457)([email protected]).zxc

MD5 6d629e6dba0184caf56ea77e38293177
SHA1 113efbd8cc870b667cf3c49bb6e19813b91d2ae2
SHA256 275ed4d13cf9142a9f86f502acd49427a2522f7786acacb53fc54b3ed6beb192
SHA512 4f493824cab2a2b4bf0f3c544af2b5ed201dfd17fd371d2f3d9d069dbc88739ea80e1b6fde9d0837b061aa09bb5ae813cfa58738583f9bba1dd1af023efcf01a

C:\Users\Admin\Pictures\InstallPush.jpeg.(MJ-TJ9302618457)([email protected]).zxc

MD5 d8083923c36eb867b530a10d97e3fc08
SHA1 4406df6c1ade87c483b3a6a750e032239e3c2b3f
SHA256 54a1f3aa206e35f9376e9f191f4343c5c0ec8fbd7b4a47b15e657282b06e7384
SHA512 558425446156b762ba707dfadd2c1a7bffae68d5b79bcb8772ed3a66e7d17c7f3365bc0c6d79fba28336b623b0fcf34da1fcac42f7f7da97d71e7af6ff94c040

C:\Users\Admin\Pictures\DisconnectGroup.dxf.(MJ-TJ9302618457)([email protected]).zxc

MD5 c7f760d27bd22a34083b6dbd952e085c
SHA1 b2fd1b40fdc574660a9584e11a3970fa3966d517
SHA256 5dcbe184bd61ea50372b5b3ec13d128ee29839d18439faff0c8a26df1a26c49e
SHA512 3e6b2dae7f08b0ca8abc0b69cef87dd8c7b09eb81e22a381776228d44beede9d1bd71fdba0d92f5ba7dff216030adbd9a79b2246817cece5512f0d9fbd936085

C:\Users\Admin\Pictures\CloseExport.crw.(MJ-TJ9302618457)([email protected]).zxc

MD5 a543f0f6582c62f9b01f1b0123951a2c
SHA1 2ce9f337380f62ffa17e185af65180e78465dd2d
SHA256 68724c09d413078c03297b5c9867d4bc303480b78f4c93b8a2203f172fc2922d
SHA512 5f3a2619f4ebcef1bd7b5430cc180da3bdbba187a5efd24aad5f0aa3429bdedf4b60134b95ae8693e51b56d12e74b0086bf65a0357cc0771a8eac6dd283a9e6a

C:\Users\Admin\Pictures\BackupExpand.jpeg.(MJ-TJ9302618457)([email protected]).zxc

MD5 71fb1ce5ce3f41f02e785296d3fa7848
SHA1 3c436704b438052d0ffd979c265b43773e437081
SHA256 d15235ed04d00cc66d4af3cffa390ad085c52207f74a840b6ed44b5757c1bcb9
SHA512 88fd691b0d312c7596c6574664323735e43af1860fce5d9feffd001907228a9946de6c6015af68400e151225f38d96e622998c4294b21ef0b77261dc1ead8c5a

C:\Users\Admin\Music\UnregisterStart.rmi.(MJ-TJ9302618457)([email protected]).zxc

MD5 785d2525835b56b70f1d76971080beb9
SHA1 6b696b791858deeaf5850a3455f5527f97af9601
SHA256 22b9b9d42c2e44f6531f824290850562579a73e9ef420c9a5a8a15de5466ec31
SHA512 d01002a83e2735959aa431c1242c986765ee85c4e6e9845f0e725fd23c41a5475355a68f9b4efcbf7e831a2d702306d5b1ce21834d84b98ac131a55f03522c8d

C:\Users\Admin\Music\RemoveCompress.svg.(MJ-TJ9302618457)([email protected]).zxc

MD5 3dab9c64a946a54a8232de1a1f154516
SHA1 11e963a5f172073b9f82f2f1b05565b8d653bc98
SHA256 72a77b97978011a9398b29b0f6562403966d93261934cbfd10935f94ddc27610
SHA512 805a554aa5ef36d5fbe99e48e808c543a9f06791d85b391834723c43f49531d06921dd0d92d3c03ef4174fb4d5654713a9a98bc34004c99cce545b71d4a4d06c

C:\Users\Admin\Music\GrantUse.jpg.(MJ-TJ9302618457)([email protected]).zxc

MD5 bb0135bb0dbe62e98027c721a897ba3f
SHA1 7f7b3268f1b844e59c7cd3e005bcf2271d27836f
SHA256 4b47344a7593ef4e5ff4e95bbb9c410d032671e595af75ef5a14b4de94be2a9f
SHA512 187248129d6e10c89d358bc816e7c97108ebb84d94818e93b021722ad263bc92af00367e06846a723eb14601f52a5b10c4c0e766c12fd63428e2ffa7ec431fdf

C:\Users\Admin\Music\GetCheckpoint.pcx.(MJ-TJ9302618457)([email protected]).zxc

MD5 cb75a4b1645b8d0c0ce2507305352ad7
SHA1 79f4876990be0d9382ebf97da7a5df10f68774d5
SHA256 0fcadf74a412630f44a70e1695634e3fd2277479b53e59c8e5f40fa242205619
SHA512 4f546ca5e7a1510772a5be5536121fdf5072970742e905e8e67e156ab32e45ef455a07bfd2a550070a9f62d2db76eece2fab6dc000c7e7d0db564aa3840966d9

C:\Users\Admin\Downloads\UnlockEnable.jpg.(MJ-TJ9302618457)([email protected]).zxc

MD5 3b1cfdb768966bc7be0a6c5142dd60ae
SHA1 2644ea1a475a10c879e1c6dd077691d58fe50c92
SHA256 adf175cf0f0b4547bd41bdb9594267d4130a4ac8b542f0369a8204085d698731
SHA512 01f38f4ebce58ccf07f4cc9c31646ba6145ffe871d70e5b45e99434919ce8dd2ca743ec2bb3ac10e3c0c6931e13b4bedf43a8ecab3c6ce84e15a7b5fbda76478

C:\Users\Admin\Downloads\UninstallConvertFrom.au.(MJ-TJ9302618457)([email protected]).zxc

MD5 d0da3792666d57b19c5aa50648b559fd
SHA1 45d0dc9711373a0e2580210b13083839d472bfc3
SHA256 2aef86d4e02e098ca48ffadad5a6857f9db635b7655e51ddb67747284fe5bfc8
SHA512 94a52f2ee4d87c1f7451a4a9929cbd27ef853bd5093d8cc2cd4f96a76d34ee818706e89687a124bc7752f295c9c9449b739f5d4cfc0aa84a44bc2cc02882e4e1

C:\Users\Admin\Downloads\UnblockBlock.wmx.(MJ-TJ9302618457)([email protected]).zxc

MD5 3f6c7751e3a04ae3ae6fb74073970de8
SHA1 4a75406b491dadb95cfff9bc79984223b13bd17c
SHA256 9ada45338f837d5f83237d5a648b6eafa376b875936e9a55fc3d448bc34b59bb
SHA512 3cf58957a6e2270a764114cba28b4575b2894be77b39f83736de9d56bff553c828a83e9b61d27e9da24e1068ca6c5caf9d8ad5b54d097d8038013d26e4a3460b

C:\Users\Admin\Downloads\TraceUnprotect.i64.(MJ-TJ9302618457)([email protected]).zxc

MD5 1c3162fdcf97d67132e73ac26149436b
SHA1 9476dbea0b0ba9158c232e2c2a1134ec3e027942
SHA256 b7a1bb98189f6d5a5771ea6f32fc168a077e3b020bb4d653debf38830cda7634
SHA512 5e59519bc142c341955a3497e6c4a9442c750ca4fb08a37912b408b3f1cc2c36cad9d245f782022c6f82d5a5c4916a576a70d578eac4461c3946a2baa8a44e0f

C:\Users\Admin\Downloads\SyncRequest.pptx.(MJ-TJ9302618457)([email protected]).zxc

MD5 7f712f3cdd61bad84a2c50166eee8c10
SHA1 0143bcbb98570f33ca96fadaee47faa1fe2fe3e4
SHA256 056f3070ab03a755851fc73b41a4847c7e8ce05d347b314fcf9026df476f1b09
SHA512 d21d640165cb64caad1c3033a3187b50acd89c59562692503e71a2054fc71ed7069ffa94842eae8e46202f73e3cbf764767e79a3618e5f77b9d2a8f95e683033

C:\Users\Admin\Downloads\SearchHide.png.(MJ-TJ9302618457)([email protected]).zxc

MD5 a659f03feb5f77bb3cdcb61f63606635
SHA1 0e941b754d7dd1474db7ebef703417726d045887
SHA256 867967b29958cc6be49d8bbe6408e8dc4351e79231404c27c0ed4d8c229362d4
SHA512 2b2e5c24f3467f31998d3f445e70e4200391c84a93f0445bc1703c0b9461ef0931c575b9e167eedbf5ef073e0d944268e18389c3d147480108ac87b6b7a3bcb7

C:\Users\Admin\Downloads\ResetInstall.lock.(MJ-TJ9302618457)([email protected]).zxc

MD5 260c9303e3d0b54ba4904f1ac516bc6b
SHA1 4c05acf641e92b43dbd421b68afc3de165289050
SHA256 2a39f176b8dfa9c76067d21298387eb4c6761cd84dc20bad7ee586a31917ef02
SHA512 5da4b56869e89e1e2e82b8d78f2d1d3d6bc5194e3e686ff4cf05a008a726066bd929188ba38c798c8efeacb82c9a58d858bafb3023c1a0454778c1425f8165f1

C:\Users\Admin\Downloads\RedoLock.csv.(MJ-TJ9302618457)([email protected]).zxc

MD5 36a1d8043b491bc15d2831d6f4a12222
SHA1 2936f7ec1cde1497dacf8f99671a88eec85c229e
SHA256 32106ecaa46883074a62cb8597ffe639e790e6b72b3fa8181a00c5aa7e33051e
SHA512 19b85a42168ffd3f7eab80848013370f3e6023cbc5753386f61a0d6ab6251e39dea1479eba4f818d33a7afa1f24291137de7c301ae18fea67f54aa807bcca59d

C:\Users\Admin\Downloads\ReceiveInstall.ADT.(MJ-TJ9302618457)([email protected]).zxc

MD5 267d55d18fdd832890ad811bc73466d3
SHA1 b8873f9d836103dd2c118594f99fe81cd68f7b60
SHA256 acd09dbb8615fdd9428a71cf9ac28dc6b1490604df4799722554770312eaa11b
SHA512 38f7d93498fab297c2c69b4ed16cd47798898ef529fe03f84cee5894ca96c4f6c95d6bcf57bb3967fdae0fa4813a59eab7b4713f190fe69a2eaf8444d505525c

C:\Users\Admin\Downloads\PushStart.emz.(MJ-TJ9302618457)([email protected]).zxc

MD5 04740027661bd29511094ea45ca90987
SHA1 c4d51d2626cbecd658040c211777cb45647fb459
SHA256 546335602ab9ee54accfc2bc4c41b7e9472c04b9a6dabf70b0962e35be54b9b3
SHA512 fc00f7c785694a293c6cf2bbb4d67d85ec30fa17d974f693bdea21ae83cbb6181b27f16d692cfe74721ffe1ebc270874400a68f9e7efaef29c9b1a6ca9539ef6

C:\Users\Admin\Downloads\PublishSearch.au.(MJ-TJ9302618457)([email protected]).zxc

MD5 0c6b59cde221ddb66b72f51569e7676c
SHA1 760bdc6b56e57ef985b2a31b380bbe55ccfefd6e
SHA256 87520749c07b7033edaf38138246acfa4ce2b80d1ef25607eb94121249b4edb8
SHA512 81f47f6dd9999dcb5119c67c9b0e137c509a9fd923b1bb5c23993b3caf53a4227e92fc0da17909f0699a390bc79695c2b0397f9f5d27b6e346f28e2478b566fd

C:\Users\Admin\Downloads\PublishApprove.snd.(MJ-TJ9302618457)([email protected]).zxc

MD5 e1d2fc8b07e9e476a1184cecd7038e56
SHA1 ba80a491cc9811e97dceddc557500f1e1a683b81
SHA256 c88e90216e534e7bc3709807c7013bac1fda42dd4ef07c1268b9b9c363dd1bcb
SHA512 b3ccb896f49c3665b71d51d3407f3fe2fa00c057161c5cf7894bbc581d06e137c3782ab944accc6194d167e61d7820c13834e253920ef868c6d6e3c85178a0c5

C:\Users\Admin\Downloads\MergeRead.wmx.(MJ-TJ9302618457)([email protected]).zxc

MD5 2049700066200751af1efcf3703401aa
SHA1 a662e82f492a449949c1a91e1b3486f708f6191f
SHA256 bf5643a864a7f169e8384664add67ed6b702bc0f0ca9f46c874b7e9f70fca50a
SHA512 8da365c05834833a0f5eea5406ca5cec0c00dd71363a1fad6a6540bee0647c74b09ba5e79e19f27d6e348ad8d89d28fcbc16dcf9d68707527903cd7566399939

C:\Users\Admin\Downloads\LockUnpublish.rtf.(MJ-TJ9302618457)([email protected]).zxc

MD5 fea6bc2ea6928d7d6039c0cdd9477a25
SHA1 3cf600a836d8e526c5ebdc1a6e578a5167a5255c
SHA256 60d3f449e54013e1b17519b38dfdfda4a5cb15757506e76ff97ab1c15f6f22fe
SHA512 40887ea59781989bf5a96cf4744f44f22a8e1c2ae5f2b74262c00f8b2025960f94403f1b3f6656ed6b5f3180249f5e0ed587f2c6681298387fe38331be7472f4

C:\Users\Admin\Downloads\InitializeJoin.wmf.(MJ-TJ9302618457)([email protected]).zxc

MD5 765361baba1ec6d9781efe3d4cedb060
SHA1 dcf9296b5d0c2edc3d8a38a3a0c59d3f3facd54a
SHA256 96d63f2c664e4148ef41e20dc5785dc5104c886b5826abe8d60aa3ff1dd1c4a9
SHA512 47732823fc96194e49692ac44e86ed7357eb8d036f23834664f847ea9167e32f4bf9af7c71c6bd26f6fb98809fc54007e76ba1887f029f04ed2d2e77cfed2ef0

C:\Users\Admin\Downloads\ExitDismount.mid.(MJ-TJ9302618457)([email protected]).zxc

MD5 46395ffa7f6945effdd6411e8e942523
SHA1 04b5157cdae7e0cd399f8ede828464a843c2ece9
SHA256 eab3a7e46bec463dfb213d78adaa9d0fd1157537dc07bdb399d6d2a1ebbe18d6
SHA512 31007e9842bd65857f12eb94094dcef397da09778c025b5a0894b4830b5fdb467860b8d60d7a0b650b29e0c9ae631b4fb58ed8bfb396710931ff1a80fecb222e

C:\Users\Admin\Downloads\DisconnectSwitch.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 8ff8836925065dfb8c41619ea5d06782
SHA1 23cc8ea965c64e2c2906e85a2646a29df3f7a6fb
SHA256 f9c651d375561229dff5d1af7efc8ee7e87225c9c6107af66d10c1917647fe98
SHA512 d352d0e87d35b52d9dd73bad73b01f8c652acb7cd0380fe549721deb01e0f73628853a4af216b3d1352e262f356c6f5bab70b4b05e6b42cbac44b28b8b7e7697

C:\Users\Admin\Downloads\CheckpointSubmit.scf.(MJ-TJ9302618457)([email protected]).zxc

MD5 aaa41015e4d26c7f8702a95906562796
SHA1 35c87d8ea51c08d7b47cfc73cf3b1844130cb24a
SHA256 479a26af57aa01bc33a70d52d74a0710b43f5fdc3e97c2ea1392087204fcba91
SHA512 99df1b7f15c7976a3e5650ef94b99be7bb9f33937e0a544e44fa446fa1e27ecd495a7ca2822a2adfd43186100857f453f94e0bfb95466ae0198ec8711c650dac

C:\Users\Admin\Downloads\AssertMount.mp2v.(MJ-TJ9302618457)([email protected]).zxc

MD5 da0e9f66001ba5e2b09520246e42c9bf
SHA1 e69b0c64501268dccb84167be0eaa5fe33240d14
SHA256 75042065d6f58982b392f6fba0eea5807283989785ce37033e4a4d0591901ecb
SHA512 0e6cacbd34180cac17b87656c991186b622f489846d62c58505f42b81dd770f0421cdee8e0667b3ae69937c1952cfe83f0eac784ca2551bbfd7353e0f37f0743

C:\Users\Admin\Documents\WriteUnpublish.potm.(MJ-TJ9302618457)([email protected]).zxc

MD5 34371e68fa265f9f2144920db15d3efb
SHA1 773296b5e93646ef642715b12af7405b91d0f2de
SHA256 73bc60f1903654f3fe31e9088ee8ad06fd712cbbc8ec16d08240ed54b11b1557
SHA512 89c000df693a2168a5b3af594590fa3f03c1458ba163ecd9b39685f3497d1e1efef2e255dd00de0afd9d4378311dbce3cdfaa8ff48e3f09c6fe90195a6d2e14f

C:\Users\Admin\Documents\WatchSave.xltm.(MJ-TJ9302618457)([email protected]).zxc

MD5 af9f34e84f77c5b00ed4149e6f29e3b2
SHA1 31520dcb42c62a5ca3a4f50b28000671c095f129
SHA256 7d1adceff88ae401e8db110bf0acda153fc108a44775656aec4f29ff79c51626
SHA512 548f9c548464fbe7239b01c95e71406e7974ab75deed10e2bfdbca2cc5fdbd92e2c4b604d23183c4fbbcdd45ae0a2695fc1d0e408f61a33ea648bab46375b2b3

C:\Users\Admin\Documents\UnprotectSkip.csv.(MJ-TJ9302618457)([email protected]).zxc

MD5 0adae5e68058e783def70f94f5c23aaf
SHA1 5e58c659486c3d6be6ca0d82e3ae16bc43b1c007
SHA256 0a6712e09d828b4444e60c192d86e65484f12655ee1e92934f948b1bb8faa018
SHA512 3630d051f3ac4b2b29a2ea40be6231c3c1a56bf769027239530d9506c1eed20839af51aa5f5bcbc42c59458ed8949ed89949ef9954c831bf17078efb8b7c3062

C:\Users\Admin\Documents\SuspendInvoke.docm.(MJ-TJ9302618457)([email protected]).zxc

MD5 88fa449eaaac8d4cb79654e859adf6ff
SHA1 79702c6ecd7b465ef30b59714177aefe00d1392d
SHA256 b89a7df2f107a3e2639421ed80902706445eccde56e223adde27cf365371390c
SHA512 37ec8090e36921cf6de03494b3652634d74726e8b315b37795426db6a8096a53de8e474f540e0da5ee0d68c98368dc36423d2fe1351c3a128a78bb3dcea654f4

C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\MOFL.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 a48d480ffb0f703934e16099e8d4ce38
SHA1 83b03027e9213ccbc0d6df53e34ad0f14622aff9
SHA256 2d4f27af4ef6eba4bb05efa8fa07d398694acc57865c754d66287960e4a441ad
SHA512 1c8caa634e3fc8cce0041d58f6974f50675419c8cffa0f6a8164599ca5a8f1efcfdf3d1f268b6ba9583bbcc768d060607d0968a2dc6e15c1ee8466a5339d5e5e

C:\Program Files (x86)\Common Files\microsoft shared\PROOF\MSWDS_ES.LEX.(MJ-TJ9302618457)([email protected]).zxc

MD5 6b30895d0f5b879126187230dc514f86
SHA1 1d9205e654327a23a154a087f19112b880924c1c
SHA256 114d2b85eb64eaa6adf11dd2e5961c2411940e36dee00dc62a7167428505c651
SHA512 d6805bdb231f738a49ec647c05da93d0fbdc34991e51b3641af27ceab8245de7d0fc5e45c0483f81015f2fcdaa24c294ae83eb6b727ab55d912eef60996c0285

C:\Program Files (x86)\Common Files\microsoft shared\PROOF\MSLID.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 fdd9739f7eb2c6a5d4781ee26a34afc9
SHA1 bc00aa9ef424ed012e5db087aefd14ba80683d75
SHA256 c74feb1b9395b1ece1ca1c6ed0a8cb218a708d57f7941d81bcba442039697e44
SHA512 5bbde78f37c61a11c301b000497493ec8117e972ba17a8d69d51a78ebd651a76ce6cf562b296c21f0550c53bcc1ed0f29640d42cd077b5ca9360b79e64ea5814

C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WPFT632.CNV.(MJ-TJ9302618457)([email protected]).zxc

MD5 935e63a8992ddfd4e7b6c5c33ac128c5
SHA1 9d2c5a135b31a5c8ab3a933dd447c20432e57c07
SHA256 b3f1e2eebf308439a5072de37abef8137dc27a4b7a28c7f35f1cabcd2050e957
SHA512 2b002c872b2e531e2ac3fb23d3f5ed8385d4671414bb8c83bf6541246366cc619dadc730842bedbdba03335dd400c292fa7d397bafe7236209139355fd6734ee

C:\Users\Admin\Documents\ResolveConvertFrom.dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 e99f542d1fa14ee48fe77a4a04892354
SHA1 ec7981639c73e49903d93c38922193a3223a6ad5
SHA256 f366591020417e7375783f3e978e81c74c9ac300b7ccdbe8923900c41bd32696
SHA512 d02ba36dd3cec8de97a93dee88018c0bc40154ed704cf420d328c65ef4a0619f9edd82a0a2a3bd3ae13df1f3ab58c801823fed5193bc3578d07705a14dd7aa4d

C:\Users\Admin\Documents\RepairRestart.vsd.(MJ-TJ9302618457)([email protected]).zxc

MD5 e729d9aee833f0031b58426a8ad02d16
SHA1 f754faac5daf95d32561efab1a72972014a14aed
SHA256 e2220c719dc61baa37fa50ada7d3a91873100b857d9c5e9b4de1f573f47d3626
SHA512 aaa7621dfa8e39c11429c107d573586a6fb8cde38557e4d7669e2be31be83f64b099875c3b8943abe519cf5c4359e72cd3c4178cfb15c10fe3bf7cc91c702ca4

C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\FRAR\MSB1FRAR.ITS.(MJ-TJ9302618457)([email protected]).zxc

MD5 9ec93f611ca906f7fd7380c117f6e554
SHA1 ce3d9ae2c0ba6cdfa82503170f627090c9776a4b
SHA256 fd9720197d720041f9dd2d91e6744aa2065e4a2221a8392e774bab14dccea8b6
SHA512 59218d91ee797f43b73f65c9c8c898c8a9f6f7dc66a2db722c9a7f8e5c90f657fee022f85530db4e5bb8f1d1477334816432062a57845a46846f3c16ef78594d

C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\VBE7.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 a97b1ef8e613f8922fff9916a8779b77
SHA1 bf18d01157b58292521d74c819b0bb92178c0193
SHA256 c69ca1b702c370958254229d0a506fc94a8879604ca48d56617f4e9b5151c11f
SHA512 d823976f873fa4c92ef086606ace90412f9c2bfc3e4b00c8efd3b72a3a00f9b9672f454f8b24bf443245504f22e95be652cde59920c65bbdf2c8f9794b48f4ad

C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ESEN\MSB1ESEN.ITS.(MJ-TJ9302618457)([email protected]).zxc

MD5 b9b3a5151cd6f189cb7355dfa83c3314
SHA1 8ac9be16ac474282db2ec77d59d86e2be4f09aed
SHA256 4307f3130c345b976369716345af7a851d76be8862266e3c9bff59167b69f182
SHA512 e4701c77965ad4f9896546c161a3cf8775bdeffab60cf00f2174a0171f10dc4428c399ea26ec55afbb07729a64137e7831ffc096dbaefd37cddf2cee6f58fc66

C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ENFR\MSB1ENFR.ITS.(MJ-TJ9302618457)([email protected]).zxc

MD5 f4980aecb7e96624e8424677c5386338
SHA1 c8a194d7f0b1be8175b8aae06966e13b18ca39af
SHA256 3a7c1a17cbb8758454fcc641c7d69522a947b58c0709a29765cc835bd155cdd0
SHA512 ccb485a0875d1f2da1f074d35f4bb57bafa9bf14b8c5284beeee99b0feec3665123bd2961b1c9cccdd5be8d0dc33fdc70d7f2c072b4cbc62a0e96a3824e50daf

C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ARFR\MSB1ARFR.ITS.(MJ-TJ9302618457)([email protected]).zxc

MD5 2b29a9f563fab0435ad35d0f5c177810
SHA1 0ee33f6f091e8f0dc3eb6480e43759cc387fea9f
SHA256 3904583c65232fd846c998525ced21a21cc3e3bd8966b428c04c373d8b52f7a8
SHA512 7739f8721c01c6b4970732ab6c671503a7cdb3b600134885434df269ab0f69c181f07ec603ff5c0f0a149c0d0e5322dbe3d729cfe9c06092c62c1f9e4aded57d

C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\BIN\FPSRVUTL.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 8eb24cfd753306b2db2f22ca26e571ed
SHA1 0fbe97cb2d6108d87799a8fe5dcec12614c4c1d4
SHA256 e4ecb00ea0fb07abc8ee3ab0e25a5a708d9905f5b51991b083405c64609a621b
SHA512 6bbb5f3050fe07a20162bb7d7464b47a9ffe8bab27df102fa71bdb835b9cd1a03a7f3801daf4ec8fe1a5e390395b492854a12e269ab29c52e008b27fb0b70416

C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateCore.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 bd6c51e3b5802e40723b73c9a23bc127
SHA1 229ec1db6c48d5b4682549fcda472939cb342754
SHA256 1aa1cf51c61d90634e6049359e205fe13735a056d9fb5ab65ceb698e28468226
SHA512 1ce7b564ccd54673d25192335dfc4173ec8b138e4e2898d5947825fd0f8dde1e6e3cf29727b3d13bc350e1d4ba7c2bf649269e9abd868d046896ce56d5cfbf13

C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateComRegisterShell64.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 6406f55e35eca2ef36184100af98b3ad
SHA1 34281b27909d9a51c1d79db2cd99c94a630503bd
SHA256 33c94f590b2ed25b1c448634d5001b28d49b2b86b658394fe7c65e02a702c405
SHA512 fdee91347386a1a7fd8b0639f7a289e90e737cdb77add9d4e2e235191022d9bc65136969878336c0a3808df26ca3ce6dfbbc3b6963870a77e7d96ddb95447923

C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdate.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 32eaf11c8bd71dd017393e52e928e30d
SHA1 0d5be431c30f54ae9578e513306b325e68cc83c8
SHA256 5e066f0f1be2e4b120722f17324e6144e6fa6ff8877f6aefbe0788fec0f06969
SHA512 07e8450373f08d98088e61955694ffe34e81f42c9d82fd25693a6b6e77b8519d29bd2c17a43b09d6c8a45511fb5dac4423eefa6ea171331664aecead100e3eb6

C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleCrashHandler64.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 ab7deeca9b1d09c03fb747eb1a469a99
SHA1 b4c9b90d3645bd24c23d02fb7583eb0ee1923bf8
SHA256 f428806c0284d397b63c067b41e60588ab64603e57440be87a84160c53b978ff
SHA512 af324dc60c670526ca23b61ff247663dc0c41440056de2b2d000895755a16718459f6a4c7b71e4f85c9a2bb212e06e673221e05abd1af8df8a16d1576a11c656

C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleCrashHandler.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 343c0d275c5b96e2f00463ded7c35049
SHA1 c73456f793519afbd9087a0b2f17aff05f9d2623
SHA256 72e0008f5ad1a1c59b35f88afdb7dcf841ebeba441f5cd3f4b1659b04bff9ce4
SHA512 4ab6ad90332048682510fb49a0e36f0025b79e2a33c319b4738e6f535d61f400f8145acc9920d632d72809bbfeb1f43cf758224a91f2c437ea366ce9f857a6e8

C:\Program Files (x86)\Google\Update\DisabledGoogleUpdate.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 50e9a9c29de9437d381bad23f1e312a0
SHA1 61bf5c85ba814384f6ec89bef9703d1976c7b6be
SHA256 1a83b752d3145b07d17f284cec00bf4d79f6e2d3d1567a89517307bd788da4c1
SHA512 79e00581e077fd18dcac4bf8b8f653a2d09b2e3f6400ae72516af7ba5de3d9a1603e9a96c3a07d81991a057b1952fe8d47fc71fcef6874a1193d193f0aa1a503

C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\msolui100.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 5280ec9fd9abe0c9fba042afb077c2ab
SHA1 0c8a7fc93d1ae6e7538dc3e443db0f9b59c1b6b2
SHA256 f733b84fe03bc2b728874ffac4293004472895ab5d2ddd9c4e5474c4e58efea4
SHA512 51b74b71ab910ebfca949defdaf0069b26d248a1c833400d8c18ce35bc1c9f6e342bc7aa12be694b18c1c5f5cecbe871fb2fd63a167619e019f6b88001dfdb94

C:\Program Files (x86)\Google\Update\1.3.36.151\psuser_64.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 6cd7ad064be1e79b13a4dfbec5312c11
SHA1 af2d586d9988cff2b8ba8a72b173bcd19785f224
SHA256 da050220fafb86942c8747805b8d40d302cc7440563f9bdbe530556d5160e57f
SHA512 5c410a07fd15b753d69b89474850aa5b85c813cce1ed7e431a5efffca6730b8c55e41f850d444917e93da8e69e4f1695d68d32f02eb19a193586c41c8bb0900a

C:\Program Files (x86)\Google\Update\1.3.36.151\psuser.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 a4f4299860b3ce242cda85c0fe2000a8
SHA1 8069684b19b23a837d0b0a97b3c5c7a76dfc6f0c
SHA256 343ca4e4d126849488eab02e4ea364bd959369329faa887bd3292d8752466c8d
SHA512 b22a193301a89fe4f3bd7c94f44f7a70ea544fd56bc3a3d074636e87eea66d88d5d066517bcf37cef6efd0bcc3dd312465de278f049b1553a90844bbd30ba831

C:\Program Files (x86)\Google\Update\1.3.36.151\psmachine_64.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 cf161547a49d2346bc2300bcf4363881
SHA1 e725741039ef855732fb356037b5dbe07cd34cf6
SHA256 1b5ce2c0cf244e8597836f3bf8e5618ff4d5403033db5125627b09ef0c867e83
SHA512 2f45949a211e4416624ef302d0426572438aebca35b45c4d3ef51b9218f94b020a41930fa0603c7dbb1c1a44198572f7e855eae8855ebd96de3e96ee0d1bbed1

C:\Program Files (x86)\Google\Update\1.3.36.151\psmachine.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 6496b69a9017be809f87695d90e0ed98
SHA1 e6098f9af2f1311e9d39284ba1e987b2707f2eca
SHA256 d45b2374f2593e4fe24e8afa84014930d75652287f0b096518cf9e02b30d9d80
SHA512 45a819cad53f15edf7771e77008bd0e433b7653142bf45327feef2336c0c4b9227f3b0f2af6fd9c5d97562f4ecc6bf59b8dce308270d863298bfd316b6bccc55

C:\Program Files (x86)\Common Files\System\Ole DB\xmlrw.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 86480303ec3aa0c60c17bc0832fa82e4
SHA1 805f7e0052d2f8e0a78f7b3ca3477ce709b114b0
SHA256 98fd1c6390a16651cf152b18b26aafc02d72f768882b7ee0fb9a233fe40df46b
SHA512 4683ea1bee6ddf4ab2620f5ae644198a4ac18414205ef02ca156f6afb94acd7418ac0cde67e414873159e1cb3b46a787afe7dbf63d61ff71d9a9c4547c00e737

C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\WTSP61MS.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 311db0c5eb6b5b15c8699e784a0e43b1
SHA1 ae01e3da6fc8709585066ef15e1b5f153498777c
SHA256 8772cd995a3b51a9d5050a24c39f3b77126ecd28fba1b49189ef824ca989ab2d
SHA512 624311682e400945cf0aef4afa2734bbec159b867d7860be0241396d4d709d3ccccd5f4960d75bb23cbac84f52e02a5274043e0b5a4e17b84e151a268886a040

C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\MSB1STAR.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 53eed7082c62ec8dfca735e4c17beee9
SHA1 862b1d7142856650d6b51af2a01f7c7f23c9c4c0
SHA256 af48d0d9590053f4552b72668f38eca09a686ab63c76fc3c1bcdc92f8310136f
SHA512 d134a82e68ae6b47670f37d62ce106bd5ed3d271b45f08d5e3020486ff313d15881a9fa3f301ed3cb9ec5cd29b61c2260f3a6c1734819f6462916e0655c70af9

C:\Users\Admin\Documents\RemoveSet.dotm.(MJ-TJ9302618457)([email protected]).zxc

MD5 426052d8ed08ccf57b66a0862c3b20dc
SHA1 2735e90c4a91dcdd45bcc0a8f5cb7962165cc2e9
SHA256 e3d2ebfa3a0561974d3cecade7e8a931e089d0a9e7abcd737cdbd9cfb209c32a
SHA512 fb7b353c19dd6cd717b0f853ffcf60c88d80a2e2843dc9a61f90ed5725f9eccd2f5894e5069daa40ef9ba3a90c40a914ec9c8e5b8e146488d30fa691f581d75b

C:\Users\Admin\Documents\MountSync.odt.(MJ-TJ9302618457)([email protected]).zxc

MD5 514095cfaaf1ee36f7c6082172fcb3e0
SHA1 e62d92430219facc94d49e0b4847b35dd0b99e72
SHA256 68c9be647e39a260878cf6f018e632389eeef3b60edaf706fa3a3419f4ef1f76
SHA512 423b799fbc54440ec898dc7c57ccc072ecd789b12ec19ead6fb75971e704e0013ad90b49dd058ec8881cf2ea8d61de43e151d24471073e8bcc5b64a428d7e79a

C:\Users\Admin\Documents\MountDisconnect.vsd.(MJ-TJ9302618457)([email protected]).zxc

MD5 93c80d978fe3ea1167cb3816c6ca285b
SHA1 38a5365265dca53983caebcf685a0aba9130e946
SHA256 b8ad0a4c2ed435d7c657e228e764247a9d49228ae8c63dbf22c4c137cb11f16b
SHA512 90f3b0f087834b33197523b3268b6e77b93700038dae0c7062da3b69836a433933009f9f95b8139c1836f8c8c6b7d9568d14301762c15bd7b2f4aabd28e0bf42

C:\Users\Admin\Documents\ClearLimit.xla.(MJ-TJ9302618457)([email protected]).zxc

MD5 a02eecf3eef4cfd6abc5d9a554f89439
SHA1 945d84b4ab0734c2e242a9137e0b7e549bff2862
SHA256 b1f4c732db9188b982e98caa7a0cbea50163891985bc58308bdc7e611d1fcb30
SHA512 e712ef228fcbdeab42ae420b36b2fad784d70f5e02077c6a47cd0deec7534ab71899f6a36de2eba058b6848ee00192c2397c4d160337722443ef8b87f7f1ed22

C:\Users\Admin\Desktop\UnlockGet.dwfx

MD5 42b22cb12bf9df951b545c832a9d6c5e
SHA1 80ec750bd9559e0f33649c02dbd920974d8e64f2
SHA256 9fdebfa2755c92ac0338e1debcdb20a08b0b0ced1ad26f5fc2188a96a974e0e9
SHA512 dffd931c7d18f55040e7a3588f5b69d353ea8991f914debc9f1680e31696c2695ec43a4084e9740bd0eaf4fc814383137d91533530f5b8ce93e36b37d3274ebd

C:\Users\Admin\Desktop\TraceProtect.wmf.(MJ-TJ9302618457)([email protected]).zxc

MD5 c7200ed49d55c91499ced0b80f6b9ba3
SHA1 15105e02248cbd3a3ac9982a46c8e5e206854c06
SHA256 91a7120c2b103244144d7aa7dd9c429d7b0dcba2d24c1ddd7e63c54082af1bd2
SHA512 709f9a4bc5c82854919bc17bee9fe31763e9b80a924bb4c30618bd27bf3e7fa6fb56082bd5374941e791cf80a5f455cccf094e5048549621509c9d76e6eeeb3e

C:\Users\Admin\Desktop\SplitRead.mpp.(MJ-TJ9302618457)([email protected]).zxc

MD5 fb0bae0b4a8872ad2c4a79cbff5dc1e5
SHA1 7a8139aedab6d44cbc6b51319def7ad86e669cf7
SHA256 70006baeb80486d4df32e29e6f077426c7721f0a832240b0b26827f15f7a69c4
SHA512 6beb922e07a7dbe6321326c5a3ffe50eea2c4b35881ea61188cc72fb02b3af57f80938b53f95030944d79b2b6c656caec2b65a9c60e30760a1e509edd7b22424

C:\Users\Admin\Desktop\ShowDeny.xps.(MJ-TJ9302618457)([email protected]).zxc

MD5 5f3260df433f89443baff9c9aec8cc70
SHA1 8db4a3597ded2bdad600c0b383d4a94149bf4b4d
SHA256 f2f20b8b3cf8beb2c431744c2fece1b023b89c6295cd34a1319558359bd7419e
SHA512 f270e6b032bf67b201f9a49f696d819fdf67a796941209d6b069bb2f0742729cfaf13a80cd9ad3eb0b4db5d7ebe600f736f82dbb96753a1e6bf5b6f1ad970dae

C:\Users\Admin\Desktop\DismountOut.ADT.(MJ-TJ9302618457)([email protected]).zxc

MD5 40b266210f38244191473bb66eab3082
SHA1 a6de3a0ba74a2fabf4a5ea152e0271caec588787
SHA256 524fc19808ee579bb68d9977124a6b3791f07632b720e0e9288db9bffa8adb1d
SHA512 7fbf4b95e29f2c70eb7a03f83ddb4ea5b88b395497a33ff8335513598d62350d3cc2189adf88200d6de618b9da806eb9307e16883bb4d1e96503396c391411a1

C:\Users\Admin\Desktop\AddExpand.wax.(MJ-TJ9302618457)([email protected]).zxc

MD5 c49e4c3ff124ca63974e827e0f7eea40
SHA1 7d480b33a5efe70b4adffb72395c849ab205464d
SHA256 a2b79ef88e71040b96ad233fb1f4598e5008675545795b82055dacd1f2231e9b
SHA512 ebfc0c07eeb293338603de72c322690b99f60c3277bc6fd42371e0078f8e9f92eec8110cac74f8d1697d4f562b51e3ddb27981c24720e5dade866110f2c6feb8

C:\Users\Admin\Desktop\PushConvert.001.(MJ-TJ9302618457)([email protected]).zxc

MD5 a70834ad495664932da3d0b5c3fcc6bd
SHA1 6ecf740b75e1a11d3b9da54c1e9498aa1563dd0a
SHA256 06ec88f3a139df90e7b66352fea9daa71407317bbfe3a40a622b4521bfffffd8
SHA512 494495a23543a3f70fdfe98c2a798b33e376e3c01c609c11eee3c54d1a25b6fd2a852e82a6184781dec6cddd1dc6a05ea67c393ad77585d42cca5055165f11db

C:\Users\Admin\Desktop\LimitUnlock.jpeg.(MJ-TJ9302618457)([email protected]).zxc

MD5 6dbab3116d381afbc448d5dfdda72159
SHA1 1b4abbe9ff305c2821a087f3a9cdaeea0bb3816c
SHA256 8bb9faf9b82103d71a981e69d14d878f3f6df41eea04ef1718131e3a96231aae
SHA512 b1607d4e9e366892269bdf86fdb6a740e8e898ac1086247c3f985af95b2f8e795ec5c390171a3ba57989acc234a81db0e4c4f42b855d3c8c49529829feb7a73f

C:\Users\Admin\Desktop\LimitSuspend.ods.(MJ-TJ9302618457)([email protected]).zxc

MD5 d8f72c642a21e5abc3d4f8b8690585e4
SHA1 472f86c805d58f0cced8fec65291894572f683c5
SHA256 d564af5503aa4e16ffd5f699a95fb9130e5ac3b05a1748fed35c36c463d25f46
SHA512 03086f6068bb74f1ba05d09079531717d5369ab1f390000c69cbd34ab1eaeaf9276ed2f36f74ebe99acfc107bd13048d16fbb0006d49ecd39979eeb02685869a

C:\Users\Admin\Desktop\GrantRequest.odt.(MJ-TJ9302618457)([email protected]).zxc

MD5 bbd2a2f7ef581fd9c1f10886dc812163
SHA1 0d0ccb52db19b31cca18ca59f8a15572893aee03
SHA256 aa17c0587cbb38571f537c201ddb2d7a39f28a920bb39a056f2e39dc7bac7d2d
SHA512 7853a0e69c3fa0250ebd6b81ff83a958e283cdcec8977cd06e18019d034cdbe83d7c1168d3bb60042d56c15eb8ef879f70f793bd29b22fd6a584fa749860f8cc

C:\Users\Admin\Desktop\ExportAdd.vsx.(MJ-TJ9302618457)([email protected]).zxc

MD5 cec211205ad3f8cb76f8fb6e8f687f4f
SHA1 ddae162c61143efb3e04aba4fd8c99bd9c970d22
SHA256 37ecc4b345003a1b2d744f991a09195bbb1c158febf8ee7213a5e2d4472c03bf
SHA512 60d7d17406381703182f76d5e878dda238246e9fe1eba86b5f16789d7a9466f6ba8db14ed0a4ebac4718c73231799c40bd28f9dc5a614ba512512205bad4318f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\n3lsnn48.default-release\key4.db.(MJ-TJ9302618457)([email protected]).zxc

MD5 a8530f454be5acca77286e6166a34046
SHA1 544d5fde8a5f799ba4a7bfce3631626e8010d465
SHA256 f36d397ae040e94e9cc48324c62b83ee016fd57c2f1d7d8fb2f055c23c34f65d
SHA512 e0ac390eb8354b8a77a3d06490dcc434a6f94d029616e38e84ad1f3aa6412491586835255ad164ca10f4e30d7788dc246cb943a25343eb9407e2758b765ca50f

C:\Users\Admin\AppData\Roaming\UnblockUpdate.odt.(MJ-TJ9302618457)([email protected]).zxc

MD5 4fd807534156200a2e100ecae0876f33
SHA1 c1a19ada4523fa878fb81a305ce9daa297c4a9c4
SHA256 52108ea4eee23506e9575d27f6a4ce6c5105c7f83a77cd5bd8a6b0a8ef3ece68
SHA512 57b9b4d5f972e4cfe6685ea1ed9de381f29564ea58bb3dc18738b918a571ba046d8fe250d2636bd7e8701dee2a9f12ef7fba0a300da614bce4900fea642f7602

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\n3lsnn48.default-release\content-prefs.sqlite.(MJ-TJ9302618457)([email protected]).zxc

MD5 f48edff3bc0aac488b0d799ad755b9f3
SHA1 b6d8375d84875fcd0fd3ce969478a55cc567eae0
SHA256 b34547d803efadba80c49794a2c5dc1a88b33d70d2c3b05014e2c3e18a4492a2
SHA512 5cf1f4f529c74514993b9e1c667dbf99e98effc0af4e349333de2c16267606ce9832ff0e5a94ec1e0962e28dbd9f0b8f1cb6a7d1653dc597632680dd05869f48

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\n3lsnn48.default-release\places.sqlite.(MJ-TJ9302618457)([email protected]).zxc

MD5 7de700e379e93db79aefaaac0da348f5
SHA1 888bb8f2310c76a5d71131ee7daed5a5bb5484f8
SHA256 ead6c7c04590457187dc24b837282d7aa96ac0ab1f14c07a8f06b316b4cbd167
SHA512 549b53db03dcd0b6fad4eb89dd9bcadafa28c08981c23d22b54fcb02c3f4f3c39ae19e5e24d267c24aa505fa3d7eabf3c6f693b410e1f31750cc3f2e31324415

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\n3lsnn48.default-release\favicons.sqlite

MD5 de542eeb3c4bce21b53dc0bc067cc34e
SHA1 ae1f079ff42d81d180fba0e2a6733a93f20261fb
SHA256 b647ce71674d74a2f3518bab43a1a611dc010cd9442dfd8f7e242795dc07d711
SHA512 ea4c9122e74248e97ebf89ca5772c1b9d6316d7b16f110f295ee9a9f42ad0bd017e1d1dfbd1d26db81f8117b47248dbcf0cfed0275fd301f951f829b4af9122c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\n3lsnn48.default-release\cert9.db.(MJ-TJ9302618457)([email protected]).zxc

MD5 d32cb13e934c4046fb3d42ac4442935d
SHA1 1573498fcf6292d10215e7f71f9f1b5b2821aeeb
SHA256 7e42769376d96c926ba0efe7b2053a9d1849915e468bd4285c81a0a446b88646
SHA512 ad522c45ffea16029f68e96d7af91e1e28c04c69e94fb5f81be24f3a2ccc1903a0a7dde3484b3ab0944e1d899b13b48b743827ee74388c7f2134c3f008af4499

C:\Users\Admin\AppData\Roaming\UndoRead.dwfx.(MJ-TJ9302618457)([email protected]).zxc

MD5 74fafb05c489e965fa82fddfbe61096f
SHA1 fb84cf80176f4ce2b49903eff82bef3c9bb4221e
SHA256 8086786c4948483313ef15c53ba84886b6ebd01bcdcb7d867328b0da1f775200
SHA512 4f68e8d1e3352e26f5619a8f218df569506ac75d65019719b1ff06f0911071fa383d161e8177fee4e0076973e260cd7d767126c5a5db87458ea3d12a22674c01

C:\Users\Admin\Desktop\SaveCheckpoint.docm.(MJ-TJ9302618457)([email protected]).zxc

MD5 27c4974f5026080924e3fcd9fa4411bf
SHA1 e7dd2d51691f7822bc6a2abe99cd771d8b1fc3a3
SHA256 963e6ff8a0cf24c455d325a5343a1c06e19d01daf0f770355e8c51a542b8afa9
SHA512 3cd95238d7a77be7fb535a81169ad1de4c927306172518fd8b91e6cb8145d3212829daf19ca0c33303f9e5a2203af2c7a1f1e57d9c377787f0334536145e92af

C:\Users\Admin\Desktop\RevokePublish.ini.(MJ-TJ9302618457)([email protected]).zxc

MD5 9ad2f0e6fb671cccdbc4359516eb51b6
SHA1 afa8b077215d85d858de7308176bedfa30bdcc93
SHA256 e3712ddb042736c801aea1a067c044eca605f29cfd6e1d2711ce87d5f42dbae3
SHA512 c9c8e5edd3cd47ed1f3bfd6685877ec55133c42ee1b9575dc243cc49255c8b9087d907ddbde871390145b6ffdf6481413954b7ba1af1a3482a7ef17cc9e507ae

C:\Users\Admin\Desktop\ResetStep.easmx.(MJ-TJ9302618457)([email protected]).zxc

MD5 7eea2bd98db80e550cbfa7dfa7f0eb8b
SHA1 fd150d8532bc9b700337b2e18d83f3591e2b258e
SHA256 6f62c1edd3d7f20c1572b6db7826906737023dab4a8cf56e701e74d70f8a5213
SHA512 d18d1801555596ab030c159495e6c86b98f763a8e2de71723106b538205a1a979b5c42ca02fa7bbe4fc1d79d51a27286dfd14fb2e12a9dd3e696d307f5293566

C:\Users\Admin\Desktop\RequestPop.ps1xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 4b4c980c3fc8534f50f7b782f1dd382c
SHA1 c56ff17360e638e2036775d5604cf334eeb9dfd8
SHA256 8c273095bb80c11934daf73e0dddbe671743a6ba440ec85834225aa49a0973fc
SHA512 9c018292c5c5f6820624ed0842ca32f6544391b0c2f467db115dbfad6d2508064cf95d15533b48f03a528643e5f07b5a334f8b5b7b12d4bd67f40c20ca40c0f4

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg.(MJ-TJ9302618457)([email protected]).zxc

MD5 050c94f54da70691273cb7eac7c95b17
SHA1 0b867cbde4ac47a8a9d6c80f4e3aa50adb4cb304
SHA256 5c4f07b0a9ef191b0ca1b09be33a4052b85dbcf5274b79994163a4b7099e1a60
SHA512 653ae4dd2cd1ca5232d7a7c37cbeed896bed77ad17fe98d72c84a25b77bda9317375abaa7626095808631cd639476edb30c13c4c4bf0c0c512bf63170bacb62a

C:\Users\Admin\AppData\Roaming\ShowRemove.jfif.(MJ-TJ9302618457)([email protected]).zxc

MD5 d8836240cabaca8f7c9d8b20a5884085
SHA1 2e708ba60710a96ed4cdae59a938c44688425240
SHA256 ad8d17359fd56152b789e5d018e480e2acafcbfe659b5a656a9e4d2668ce356a
SHA512 9fd8b3db9f4cf2d3a4e8c422c0404fc742af059f4a002f843035edc42e22babf492182bf3f3c3882fc5e4b8e69dbb60e7832bd24d9aa515566a40a187bfbd66f

C:\Users\Admin\AppData\Roaming\RevokeStart.m3u.(MJ-TJ9302618457)([email protected]).zxc

MD5 d815347fb20e99a5236383607623b99b
SHA1 54fc402bcc9a9bd11a9219e325d7d530f71e5f14
SHA256 39a36a32ff3797d6ae8e04e961ac39afc68f4f8403afc15e0d9ec378a7f5a13f
SHA512 9704120fb5e4b2d74fa7bd1a5afc9585e79011905205545260f2555ae126e6e3be32a821bdeffff4995a8e9a6a340096c0e4998a957812398abccbc09e88de3e

C:\Users\Admin\AppData\Roaming\RevokeExit.ppsx.(MJ-TJ9302618457)([email protected]).zxc

MD5 d4d4bef00f4a7632487fbd2520104b2f
SHA1 2b8266e8756d80f649bc2a001edfce6654318d92
SHA256 822e47f4b1ddfa38cba4378875cf4dc6ee5e756bfe1f81b1d2f25ab23fe902ea
SHA512 7050af2de92c1e3d448b1967de7655fa85c5b3d4af40c8fe228bf058329331a5086daf84ca7e6243ab13830fcc36f77dbd20da108755c275e90dda4a7cb1cb78

C:\Users\Admin\AppData\Roaming\RepairRequest.cab.(MJ-TJ9302618457)([email protected]).zxc

MD5 665684887cb7bd1754af5e433438c139
SHA1 ae88befd43ef723e67b3e4268a46fc605e8f1fd3
SHA256 9c51e7c6bec9ed43e28a2eed2b450a1f5177be04492875082e7ff521a8b820bd
SHA512 f719c6fe68e155515c3f1fe6281fc7738cb14c85fe709c9edc5e685a1e8298adcdaa50f5221fc8b7023921b07791ba384a7d0ef1832d97c0cf72d549303ac32a

C:\Users\Admin\AppData\Roaming\RedoGet.dxf.(MJ-TJ9302618457)([email protected]).zxc

MD5 17bbccfcdc7e2a40af6373ede7c11121
SHA1 43b02354bb52883e9eb395adfc83e5a81c7f589f
SHA256 f0fec4d044b166bcff5399c3e91c3a495a7e3bb0a2a7c358b9997995aa1c36f7
SHA512 958fcabe36051e79a765397f2caa47952b1384947d99ece32f3d0c7d85d33054d97670f9a4a85b45f23f8771dd9305c5038922061baeb7a4ec5c8179716671f1

C:\Users\Admin\AppData\Roaming\PushDisconnect.mpg.(MJ-TJ9302618457)([email protected]).zxc

MD5 458d8f26a2da7b523eac15b45242d991
SHA1 7eda0a09c7cbe55b212db4eb059cf15fa83d4dab
SHA256 f6bc5e68c50f82ff13403c256febd972263f4e9548f4af6b3700972b6ba22501
SHA512 e29ded915901441a5c05a15364e624f32cddb44f5f538162bcd1d3994bf5c10aa8d9065666ab10cf33d58006d23288debcae58203eee29a90b113f822c8db967

C:\Users\Admin\AppData\Roaming\MountExport.raw.(MJ-TJ9302618457)([email protected]).zxc

MD5 3fdb1646b8e2d6ad4ffb98d1ac9b0cd0
SHA1 38f1996b8ea3885dd7a8143f86a2d129a6da9553
SHA256 6ccf963a9ac2410d1def372488fc1207cb023b65268a33973769335a9bb72513
SHA512 f082f2d1573385f218bc5a7e63c5221b19578de4a436d537e04eebb3ba6e261feaa0cc9444b92cb17607e43e18903b24b0a24a3924d058a50398fae3300db2af

C:\Users\Admin\AppData\Roaming\MeasureCopy.avi.(MJ-TJ9302618457)([email protected]).zxc

MD5 1b454bac8f5226085465d41257191ecb
SHA1 3ef9a155bc4aa2d759cfe1166e2f3099733ec3ec
SHA256 c8e11b5247a30474bcb5a9cd474b10a1fa13684502ce919e618752bf5a798332
SHA512 b1f433199bbc6a3ffd099aafa76b243df060eaab6146788e900ca7c112150ec7b22bc2f7c533fc57e90aef1d99a2836aecb6cd143f04c566b073957829c5d9f4

C:\Users\Admin\AppData\Roaming\FindRevoke.bat.(MJ-TJ9302618457)([email protected]).zxc

MD5 7f45546843457e09975dfac4a33082ba
SHA1 5f6964b9851c47da7bf62030d3776a5af97dad89
SHA256 477be24217ebdfc39c14d29f5032ab96f08ec5ee019915af42aebb982ff6bf9f
SHA512 5bc56d0cf010317e1a6cabd4c44b5dcc5578dcb1f75877610c0921c7350ec02e4bb51407426656aae1fe9ebe7dd16919db80019bafe9c3ed5404cd4e63a73237

C:\Users\Admin\AppData\Roaming\ExpandRequest.zip.(MJ-TJ9302618457)([email protected]).zxc

MD5 1fc568d0b1d0aba6bacf9ce91bd26bc5
SHA1 1adfb1bc549c2477e1f5fd87997db9618c99ea60
SHA256 59084de8a6e5b5a965979af392bf07adbc721709dc60ab42c03ded21560cb14f
SHA512 7ff615cb8d588d7e451b5ee29da8705ea2c31bfcba3cf455e3bd0daabc8625cc0364dbb639466e154d7e6cc80c1257db6c54dcc4b76ea072ecf2a15c010c41b1

C:\Users\Admin\AppData\Roaming\CompressReceive.temp.(MJ-TJ9302618457)([email protected]).zxc

MD5 da487aa0d160ef7726a3675c4953ce51
SHA1 03ce3ec10e8922fd6f2f177a0712aec6505bbaa2
SHA256 d98e06bebb2ad95dbeb79012851467bdd328f9ad5f057878afe3787680a0fad2
SHA512 c638638d8ecbf9f9df2f541955d6345f74bb3dc2837f1577ae811b71720231e286c895ae19b8d5a8976c5768ca90501288547a2380cbc4c293b1784279156109

C:\Users\Admin\Desktop\NewMove.dwg.(MJ-TJ9302618457)([email protected]).zxc

MD5 f1fb8311182ac0c362914b47748fe08e
SHA1 8028822b278b71304d599a5f5ad6fea89a9de881
SHA256 6b58ce212e0031816b5dac71a60eeb22afb38af4afdc46f249a0116e37573717
SHA512 2d3b52859cd6be89aa27804de34a0c192ab0f59270424b5693e65c68804a579ae5ebfdca56b8dd55dbf30d8bb8ad8f65523337edc15d1ecf510cf7b726dd2595

C:\Users\Admin\AppData\Local\Temp\java_install.log.(MJ-TJ9302618457)([email protected]).zxc

MD5 6a4717f31dcf6571dfde400741a1c03a
SHA1 c91dd901f2c4b71071d42c7795f57ee4e992ff8e
SHA256 5957759fd3da4892ad1f14b4ae1454a93c71c89638ff8ca8cb6a44046752d504
SHA512 88e76d7821839029ed53d786f0da0025775c29a9681f2c05aad4ba355a31d2f506301633a6cb5728d8e463a503be41717cc14627887dda3aa25136406df6eebd

C:\Users\Admin\AppData\Local\Temp\f7caf7d69cef15d5c3b9983513e4e40edc3a31c5ead4139bc41d1500442a966a.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 a84f407df4384f5f3b716ceebbfe2382
SHA1 fe17a635f793107eb75511968f996e6734e9438a
SHA256 c1959057ee5c5aef82c0bc5633f3625134faebfdfe773df3a1caaa00ff0d64b3
SHA512 fc3b1b9cd220d211889233be7b5aec7ea7a3bf807ff82bf29fbb53713b79fa383f9445b2fc8ad123baf74978df076165383eb6e1ca7f3d0a479780a81f75ecff

C:\Users\Admin\AppData\Local\Temp\e05323d9ca6df47d9add5b2f757ea2490ebd11dfe1b56b82a9e93ba9d814e162.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 690bfc66928e42d461860d7c246161c3
SHA1 8e94c479e28e1578fac1391b7046f72c56148a33
SHA256 c0ec7ebbf276e98bd001a8742bca49e62e3dc014235d1890747bf3cee86d60cc
SHA512 4a67a2b8b541cb7cf9e4a020371db6f74284b21ab3f9d7032309705cf4c3a2295716275ac72c85301b24d50eb784a5502a42db99a556597af38d724bec7d2e6d

C:\Users\Admin\AppData\Local\Temp\4a2ad49c934f9ae6ca6b5d0c7cc34f5e12d349640012fa8cf8eb7e2d3acd6c9f.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 266cf85badcac7c0df5a27e5c6fa0297
SHA1 bd08ac6f1f5ccb573b0205111359bfd92cba2015
SHA256 e632683368e6fa853b5aafa59173bf989423373510047196b22d485ff14a1997
SHA512 f8f67b90d4e55e1b8be61b48e446e468a762e458fca6835d523cb607c1e3d7618af15270008aa659ad06596c9a068cb4933f16d069d933edfe4a7bfd5065cee4

C:\Users\Admin\AppData\Local\Temp\2e96b55980a827011a7e0784ab95dcee53958a1bb19f5397080a434041bbeeea.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 2f3a06fd0ea4457f510bfbfbcf2a3791
SHA1 f596fe47a3f8c7823999c9564d4846c03ce1f638
SHA256 5a1e5dfd6a2b8c3c7bab61f6988e2fd02806e825ffee42fb172632741f485160
SHA512 fefa2628c0441a62ac0837b777271126a30a0a3f5b0446545634adc4ecc64e579e471acd353d2dea134657d7e932baafe65a1f02cf191b248213d72a108eb036

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\n3lsnn48.default-release\safebrowsing\google-trackwhite-digest256.vlpset.(MJ-TJ9302618457)([email protected]).zxc

MD5 0b376ccccfc5034e8e899f60e27b8477
SHA1 96f163e1a750aacbcbb2734642bdb97ead42b8d2
SHA256 121f3dc14bd2b31eccd85c9cb05c4380a0f285fc2cb84dbc1a2723dc00084381
SHA512 17e549e17539f6f878acc25914ef38f14ca9ca97167279c5f8b66fbbb44dc9b48b34e6cf140b45d113bec0033cc4fd379e4c97b5dcbefbfa66b74614bc46ec72

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Memo.emf.(MJ-TJ9302618457)([email protected]).zxc

MD5 e2fffbecbc09fee6c89d219e23fd324b
SHA1 fe2697fd6e8e92fccc92a733f6f4be29a9e9c9f5
SHA256 b33c5854d3a975ba03c93b6e91231f4c00e00eccc67d3ee29fb7d50c8749549e
SHA512 adc43984fc7c4278760e1198236bfc3dd375e1c022ef3e0a90d62f8bc9b50e0a6e98df61cc342374e36d0f1875c7d81b562ee8ce0e850525c66af56fc4e657f8

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Backup\new\WindowsMail.MSMessageStore.(MJ-TJ9302618457)([email protected]).zxc

MD5 9c70ba13c9d5f7a8734bc8bd2ed77937
SHA1 165fd770b8d1e5253f6396f804b119d1f7c8fa14
SHA256 bfa368c96f1bbf4d361f632d9985fd958e8784fa803aadf50b902df7dbbbe0bf
SHA512 bc25a04ef279b39f64c4fc5a0532b1e508cba861386bbe2c9aaa7db57e23bf26738341b59994d0f7cda84d83b547a63cb3ec886dc5cd601cb8d2eb7bbf433b33

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Backup\new\edb00001.log.(MJ-TJ9302618457)([email protected]).zxc

MD5 14ced6d4067532f0c8dce2dd63935ec6
SHA1 e633c0e17576ad363c80d7f3da8b5764fe9491d1
SHA256 a21b1b7e36eccb8d84180bd1164d1e2aed802677914a617abac1e27b405a0252
SHA512 0593b3fe527bc96d5c59f49d0ede0e705aee0257379c4d25693d47040b0c6241a3a736a7ce68d37057a153b3c63603b175c7c4ef3ce1d1c865aa5af1e89240eb

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\WindowsMail.MSMessageStore.(MJ-TJ9302618457)([email protected]).zxc

MD5 f6bd72f21291143333387df9887ff5dc
SHA1 434753a854807b5e1d225e2364c54b6e99d29dc3
SHA256 001a2621b55bccfb289966f438bd3322a1d93c8a2a966546af268038ec821fb3
SHA512 5d90acbe67f911405a6019ddd8d6bea120f1e49ee2b88ef4d705fd60fe43058424fa7c50df792b53f3db42783b2e3cb99525a3ab4704ce252119d1b66358cb95

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\edbres00002.jrs.(MJ-TJ9302618457)([email protected]).zxc

MD5 00c0b5ec2fffa486e3749b5b9a222a71
SHA1 4ca162b987e208ba6219ab10f797364b7224a0c6
SHA256 a07970a12eda78f0d78aea6f9c0e9a4463be9079239573197c8615efb37c0fb4
SHA512 83497208fc924dbc4e00ea4e4f30292d4acc79dfb91b928b8c5d0592ac2eec3836ad2e39d72e5fe339cbbb94365b439c049755e33f79a7f5ee4377fd87a533fb

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\edbres00001.jrs.(MJ-TJ9302618457)([email protected]).zxc

MD5 bba6f17ad3b6350eb43b3f4c4f6349c3
SHA1 172fc1ef0a2d0424a70e2e6db57585afbc99f24d
SHA256 3b67b21e7e9382e689a22238e6e11795cfa8d0771a93d46b3b4964fd272e2f16
SHA512 c1ddc5b228172ba6ef930707f920e23aa08a9ca023ffddb434794225bf07a2be8bb64b4009103d678290337bdee84a633cb89b343f6ba62327e3115f042de9d9

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\edb00001.log.(MJ-TJ9302618457)([email protected]).zxc

MD5 8a323f9cf5d006399cae6b74f8b42e47
SHA1 1db085b3468f64f5dd837cbab03ee82910e4c9fb
SHA256 75ca80a1a979d11f88345c39af11593c0390dfa1c4400916ec243bf74b6e8b2b
SHA512 d821b90a91503e22e740c6b1259be1905923561124bfe0deb039c75b952652924cc4b2586fff6c29ee7649d9a642ca26514e0207513f78baa9b58e6f7f11c1d7

C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\edb.log.(MJ-TJ9302618457)([email protected]).zxc

MD5 32917eafe04c9b1269b5ea6ea99697ea
SHA1 14287a23e571fef97d0d9132f34ea9f45976c55e
SHA256 1f12a567cd55a6ef3d7d7dc05107037271fa0961a1a4671a1d6348a26825d8d2
SHA512 0334beef95ba517ad04a767e0ae6ff6493886270727f99dd0ad094909a01174f39bde245ecaac9ef514dc350d6677797f9ae643102ff7ab35687efd23dfb86dc

C:\Users\Admin\AppData\Roaming\GroupUninstall.mpa.(MJ-TJ9302618457)([email protected]).zxc

MD5 cb0531cd6f8742f2cd1ccafb8561301b
SHA1 090b59eaaea836d84bfedb9e855291c5894c6573
SHA256 3b4d1b4968c7b104f014e686b673c72d8fe7941a913ae21c8f131dbe0cc00d0b
SHA512 a730fafaac40c4fc8bb3cca8e687a04b4a274c7a6d6ea04a8dbe7177a6d18d0d8f80efa0cbe3f2c685f6234b9cdeef22418a0249773bc5721c987489f12fe1a8

C:\Users\Admin\AppData\Roaming\ExpandBackup.svgz.(MJ-TJ9302618457)([email protected]).zxc

MD5 43b3b04f532b0b0d8bfd2152dd1ba3d8
SHA1 fbf80d6903baf0f662769768d6c03f3848ca03f8
SHA256 5a6a92300ab9e4d3738dc18c487a0cb7bbd4722bf74e592076e0864df83095f6
SHA512 226470f078907cc11e0a287a89364ed785b1cd3831ef0f305d50ae03f3eeff3d38bbaf02126a73a48db3445008c90eeb6e445c134cee8d6ee2bd5fe1cb8c5068

C:\Users\Admin\AppData\Roaming\ConvertUnprotect.zip.(MJ-TJ9302618457)([email protected]).zxc

MD5 1e0f13259841724f5fe927f0ca084c1f
SHA1 7031246f9dd7952ea2c9263380367c39a56c32b5
SHA256 7941d19ccb2f668b964a196b9dbb4db9a393f4caf2d94685628c0c9b7c3aa558
SHA512 29fc2fd74448579d773f113e193b42f6d7e25bd3bd23ab86519f8f12b0a65394069d04c6c9e955eadfb565f09bc310182bab5a8e0945b4f72f812c1c5a004e8d

C:\Users\Admin\AppData\Roaming\ConvertFromPing.DVR-MS.(MJ-TJ9302618457)([email protected]).zxc

MD5 2a836735545e8c68e11a08ec46827e36
SHA1 e70dac1e7f9f002a0f9fde01fd93bf6f8490b4b5
SHA256 164908fac384dc556557fb403fb208bd673ae4b0e74d193b56ef8d46ebf6e719
SHA512 94d86b78bb888b9e1b9cfbf7e02575e68c935f268d08387ccf90bc8f4629ee904c6e92e530cbbd2680f143c46f2fc037f5f9b2022c8bbac2e8f40ebbcf8c0562

C:\Users\Admin\Pictures\SubmitWatch.emz.(MJ-TJ9302618457)([email protected]).zxc

MD5 40689fec9d985b70e80a2e50d9fa0025
SHA1 cae78825ab2aa78865bc759d75a0fce5ffc4a15f
SHA256 6727bf8894c8035bd18b2bfc97a589246eb47ce9d87df85f0129b238014a0345
SHA512 8f7bf0667040ba17f91227fc9bc595ea5d22b9511e7ccf2f791d09eca5f4633f5012d82cd77a7f1c5c5e20f198427b9daa8387706b3b7af42d63618958f4b176

C:\Users\Admin\Pictures\RedoStart.emf.(MJ-TJ9302618457)([email protected]).zxc

MD5 2f405d7652c959d68e0f406e7a62ea01
SHA1 c31eccd2105094097ccf48a57743af2c63989104
SHA256 1faa31644b8302c59e64f703698ca7c06e54285a1a4f59f8625dee7598186c13
SHA512 cdb934c1e36575dd7a92839dc14becbbd2d2f75f03724e60e7c36e2e2aaa5481648511dc9c82977029225eff03918187f67a3befb906b6c2cd2d3c6072f30713

C:\Users\Admin\Pictures\OpenAdd.tiff.(MJ-TJ9302618457)([email protected]).zxc

MD5 65e22919fc8a1660df339df57fd546b1
SHA1 6f5d3b58b829d19ff74fc6bdb129b6639d119484
SHA256 6b20237bbe7835650e3c986f9e9f3467daf884e4f1c2716e0146f2019d68ad65
SHA512 31c7f62c7c7a30068557843591b809d14fa95d4b9fc7d79189d7b2e71861b8592b57052905cbf1bef6fb3ac67cbfce26b46b98059dfd68fe9166123bf5d1473f

C:\Users\Admin\Pictures\ExportSearch.emz.(MJ-TJ9302618457)([email protected]).zxc

MD5 88be7b920dc668b67bdd47311609e865
SHA1 727c92d2b8869cd4cc6165f38c35e8642e624365
SHA256 cb0b8c0fcf9ff553d0a8ec760e268d33ffd85c5970b2caf3966d1caf64bbfb74
SHA512 779399f27c2a214e30f950b2ac780117f9266f8f615c99cfdc5e6a20611c66459ac8a693d8bcf5219b5705089483628aa970ac8cd7f6334a72433156094b76fa

C:\Users\Admin\Pictures\CompressUnpublish.png.(MJ-TJ9302618457)([email protected]).zxc

MD5 230d866ed7b1e6f859b57183fc26b9de
SHA1 0b06a85c2be037f7eb8e7cefb10ec22d5687a7c0
SHA256 ea25bdd21e71e7d7ada833a795ae64065f92cf941f71cb37118e7ea3780bbd6b
SHA512 7eed3f66175c10e9afad363229a93b33d479b4cb742e52068115abf6e49bca1117827d93afadd55f388c2b7f2a1024fe3f6e4d578f6bd47802256921890eceb9

C:\Users\Admin\AppData\Local\Temp\fcb68445068ebf4cd526d316622f9aa3e8065f9a9f42e5330f66f5cb160be393.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 2e04f95d3074feac2bb2bcfbd6a05294
SHA1 2cc7681f5e3c5bead7ae28d20df4b79fd0890b81
SHA256 cf4f319375c80d360c2a3382de211a947ba9c691b60e5ac0556eddb0bca1af47
SHA512 f1f6cdee92e05b392e01ddc9413435f47dfcd38c6b65a3353c7541e2f8c453c285a141a1f434f5e247475639c5b701787583021aade3d89561c5065b741853ca

C:\Users\Admin\Desktop\ExpandTest.inf.(MJ-TJ9302618457)([email protected]).zxc

MD5 c90bc06c2759240edea555ddfd963ea8
SHA1 1233d5657ad6da516337301dca73c71a82c814b4
SHA256 324dafbf6ffb24b2345325559647e68cde79951e469f5c26fab414924d2d2071
SHA512 987809d9393a94def38100febc333094a2f7f5d2d847814ca2a19081ea084ab7d079632a45009cfc81fe88c0543d3a37a9c873bf86032883d444e7a16383e934

C:\Users\Admin\Desktop\DisableConvert.edrwx.(MJ-TJ9302618457)([email protected]).zxc

MD5 6149d97d51731b9d5a1186d5410c105d
SHA1 e83c0d14b18f010ff78be9767b4d803dd4ebe214
SHA256 b8632dfe9baca2e55ad0e1251ab2e8061caa422ab7e6ce54c7e484ab791e5a1d
SHA512 2fd4fc14b962a21641ae04162d9202bb09fc0c3270936af1e52b66c2d9500d8e0eb0b545582c63c868e3330645318acf60ca0ef23dd702c552b795a0a726818d

C:\Users\Admin\AppData\Local\Temp\dd_vcredistMSI6172.txt.(MJ-TJ9302618457)([email protected]).zxc

MD5 7c16227b7c40027d013a0d4bc610bdd7
SHA1 f22b723c2b8a33eab5a2b6782c7d31a28cf28c37
SHA256 98884ccc7753f5376d2c0ff789caffab325f02543aae3d91547fd03ccde6df21
SHA512 ce41c2486a4f9e51a3611bc4191d40a0b6ba1385b44cf8e5718915f2796ff2d3e65774e12baf9bc4916cfc5c303e3654794a996bbbdc94090b3ef36af58b462c

C:\Users\Admin\AppData\Local\Temp\606b88fce1441e6d83e1fb2ba1b511e4a9e68f7fc01c55b7c53e08fd28f9a0c4.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 b9bb30a8d26d857caf31c583d9d7e6e5
SHA1 5d3335815da292bb11d5f9821f69ce26d446c67f
SHA256 265c574836ab3c3023404358a80a722bc95adb3400d6237c7b7b06ef38f5417c
SHA512 7ce6e1dba52d883a4363e6d6a807f3e4e1a23c116c05abac099a5a87fa9c3d22b713c3f81cf54749bf58d64e09db6854c38b235490af0f87551e13a5679e1a45

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\n3lsnn48.default-release\startupCache\startupCache.8.little.(MJ-TJ9302618457)([email protected]).zxc

MD5 ab7b2c53264472d21f133170f6d904a2
SHA1 92396f0943b1184636daf0ae616b310eb04e6823
SHA256 aae5e0c974037bdf442252b433c5ea073e803f7d9de7b745d48ab724ef7dde0f
SHA512 7254abcb7fa5e176ebcc69a280e82b52bb741aa24883e4a0f5d052a9ea260050149897b4c5fa272337e384fbc1940d290482f474a61537c2d6b5325ff3b8ac95

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\n3lsnn48.default-release\safebrowsing\mozstd-trackwhite-digest256.vlpset.(MJ-TJ9302618457)([email protected]).zxc

MD5 fa2b48d3ca9bc5d19613fdb4a7ddadf6
SHA1 e0eb10017d52172b55ff56d65f7c09cb86940975
SHA256 32508e4a006124f2b96e0a7ecdd60c48ad8f172fb059dc8b9845d9428ebfd4c3
SHA512 3a064a58b7aac4675815769a004c71c949c787b008b9405c6e3eeb11ee9b4b04bf341b7d742fadd836bd7d6f26adfa28356b8f65c03ded19208e8192e787d5bb

C:\Users\Admin\Music\UnregisterAssert.cfg.(MJ-TJ9302618457)([email protected]).zxc

MD5 53e64bc9e98cf6cd07995cf11c67d0b9
SHA1 26d6a1b65122244f3838252a42160f4a2429dcd4
SHA256 329f82d690c09a989b39c45951586ed07fab0d11811c3b8872a37f27a9a87bdc
SHA512 4c95cdbe347e56bf160f26f7b3e91909f720f931f5e9dd69787dcff600144a1cd2d0759d53ae96358db0625721be391fcbc243bb97409506b313bbb9730f8753

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\IECompatData\iecompatdata.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 fa51d2e54d5110bf4be7c804fbb399a7
SHA1 aab2b6ef94fc05e51728e96405f65d485f22caca
SHA256 eab6e93d809c1ba69db0629d6cdb8ded5ea8a0a08043dcedb8ec991c2204558a
SHA512 6bcbddc85e9b4ba3d1c1b2000cf0c2a4d1f896b7338f6a0d4bc6077322395e37ffbb95a36b04f9af88f6bee1627fdeda85dd684b2c4a69292b9c7717ecbcf3e9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History.(MJ-TJ9302618457)([email protected]).zxc

MD5 e1ceb48f8af4f779e3bf92fa473c65cf
SHA1 0bb9138d79e9436ed0bf2ecd8746c4145488da18
SHA256 85bbaa3c31a46f7a48158b7d6606dd1a83e4e55e66cf29a1c63be539689ddd39
SHA512 6bf1ed6c3b7553e28761d104b08c48ae0f3afc8978b030c594325150183e88801ad06f9a74fb4b6409e08eba44508fada33c30585876befa34408e2fb4de9aa2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Google Profile.ico.(MJ-TJ9302618457)([email protected]).zxc

MD5 f13fa3450e24b8a23d6af7b287911a85
SHA1 8bd79e2567cd4f3d3f557722834c617a55f83dac
SHA256 7d53f20fb644bc8d6f3a073f4c4597c3bc666a9bc630dfd7b8eb35cf57d5fa87
SHA512 faa86a101096bbb54d5850b46b0a803f77736199a57f9afe0a98862b9def3a27c8ae14c6005a207735c43bff0d5f9cdb500a9148ea30655e61c7034df6f326fe

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State.(MJ-TJ9302618457)([email protected]).zxc

MD5 27f8eb2567065f3b3ccdb5f1bb307d58
SHA1 e6d96686bc0e069533b70f8ac63071b090566863
SHA256 1aad7ea28c7efc0d40c010b2219a07baedf65781686b91b88ed2291f18bbe0e6
SHA512 6ced785d63a00eaa6681b5d10c7e84267d8cae4686383d2bd72255763ef4154b0207618d4ab54f7f666f0c3ef7b7dc96516c73650ffbc1cdafe19f38893b9a58

C:\Users\Admin\AppData\Local\IconCache.db.(MJ-TJ9302618457)([email protected]).zxc

MD5 bb49b6c5df056e03f7ca81866381ce1f
SHA1 02d6621d5f9c809be3a38fd69f586c86927c6536
SHA256 18474ecf16e2d4d3826fd9d8b37178dd7e333ca854ccf1ff5d8c2473a4b4ebe2
SHA512 8a6c0a08eadc549887e2f9d43be59cf217db581f31ba5d5f99322e108ea3f69b35cb45a4befafe7a2d15916f034b53e2eb9dc9ecc6c4790a71015168865c911d

C:\ProgramData\Package Cache\{F6080405-9FA8-4CAA-9982-14E95D1A3DAC}v14.30.30704\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 69cf2314a3c727cfffb72aba86250b6f
SHA1 adf13f1f653e095e5c508c85b3a48699c305482b
SHA256 579bf8ee61e8606314f6664720d67c4be076f2aeb10ae699969eb64aac790cc1
SHA512 a6f98573c6fdfa86d993e6971a1310ae064b2d1f1eaf7f915f70af26a1ce5fb0c3b87011630c14ad6d2465694633defa73ef7cb0e09726164dd4e9a8331bab98

C:\Users\Admin\Downloads\StopUnprotect.wma.(MJ-TJ9302618457)([email protected]).zxc

MD5 4888d64a0195b4dd7e983de0c7180030
SHA1 e81c52ba5766242ce24dbe48ac157bf914ff79db
SHA256 8e73fbd28cb33c376e24c250503f53ea09e9359bab7fedca94541c0911fa2d4c
SHA512 a6cbc09099579394ee36c09e8b3b489f5d0724b3c4ae5ae1475352daffbaf331a2624e78d86d5c240f5a706735e6f7818cebdc4c7befde6b0d2b2c51282f1b0d

C:\Users\Admin\Downloads\StartExport.001.(MJ-TJ9302618457)([email protected]).zxc

MD5 255f503d04dac7eca56c73cede9c647d
SHA1 fb531e002309bb976a35daf6db7cf80d71df8438
SHA256 8c76dce125e12d49efdc06d784fda316fe4ff721280b8b6f50b7ca4a29bff9e8
SHA512 48eb58b3c64ee6844833918cae55a07528a3fad5b94e1e3153f17b06da63a662915988f1c00883f871a4e22614caffbd35ea7a69367a76131381db03b63b6bd5

C:\Users\Admin\Downloads\ResolveStart.raw.(MJ-TJ9302618457)([email protected]).zxc

MD5 f90110f70f1bc59cd0a596cf2168caed
SHA1 3af2f421628497cfdf4c8a9b5eb8d36a7dabfb29
SHA256 9d2b1271d5deeeee013064831a09750d098a6425e732e0c9559de3566b72945a
SHA512 11f6b5afabed82e8dab74e329020a9a01f62f9eb5fd70eb80aa5716e960821dc2e711bfb0ab9fa5a90747dcffca657b9009819e2394d3dfb57c44c08598cbd94

C:\Users\Admin\Downloads\AssertUnpublish.vbe.(MJ-TJ9302618457)([email protected]).zxc

MD5 b0ec3d8c8a569ac180f16fac4ca416cb
SHA1 9713d71833bbcdea029cf46ec41ae85d39822754
SHA256 24efb9a42df179b925e37fbabab95919ee72b5ec5904b4824272876893f97d81
SHA512 0ded72c3ee34ebf2948025fea4e1c99dcb8c162c9c0e865e2376c7f4e0856d5ca2a35e00bd843f773d22df680cb06692fee76a7d441317800f503329c6284b76

C:\Users\Admin\Downloads\ApproveConfirm.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 23671b6310b2914ff55d50728f32b7be
SHA1 ad44fc540f9dcc95d879424c0e8e9af3dc6508b9
SHA256 cde38a307222ca32183167458c73c921d436845ded2157106cde24dd0b7fc82c
SHA512 abcdd6954e17543dbe5f65eaf0be626b012ee3ea452acdc1eb182cf821ab3e7fb5d6dab5014fcb0a754d6f4445cf5244b08f0f3ab01979545af4ffd0b029ba86

C:\Users\Admin\Documents\UpdateAdd.vst.(MJ-TJ9302618457)([email protected]).zxc

MD5 59d3c49a5313892da149f556b24f5e41
SHA1 ed7341845d30a315e7313f598df3442e7da42f9d
SHA256 21eaf92248b50fdbbf7730221bfb756adb77426fb17ff21cea72e923aefb7deb
SHA512 14ba8b9c5367f12219e6acecd3b392b190e9d455f428c29d99f3e6b76780baeef8096d22c786292164a0a7c8007591f75dc68cde71d98ce0450450d55b045e61

C:\Users\Admin\AppData\LocalLow\Sun\Java\jdk1.7.0_80_x64\ss170800.cab.(MJ-TJ9302618457)([email protected]).zxc

MD5 5973c41cdb375f17f84afc6cfc6120ab
SHA1 21a366fa94a643a960fe9048cb6c18c275200ad2
SHA256 01eb334d0c736b9bfbfbc08a1ba70030b1dd6015f8e7286ebd517152b6831ff5
SHA512 6fc3b33373ebef939e728367b210b74415828a204eee9e1dd9f34bcc0d40bb2056af81bce901e6a96caed9a88224f6bd734b633eac71732130a19d1f63ffe3a3

C:\Users\Admin\AppData\LocalLow\Sun\Java\jdk1.7.0_80_x64\sj170800.cab.(MJ-TJ9302618457)([email protected]).zxc

MD5 8bb266f3b8474b8d7c619d054db1a6be
SHA1 a2444bc69462d36908b3d8b98df83ec71de34d5a
SHA256 5aaafc3f510bdf94f1025a72d4a02da2d0437ad98ef9633dc6f8ff5790099dc0
SHA512 35ee45892655436ed266e3dd0c816d140cb4d6fcc7eecb8e71e4d65d3ef1cb726b6969d96c91a04a37696cbf156a4421ccf510adf3eb82c01e6f62637abf8b2f

C:\Users\Admin\AppData\Local\Temp\scoped_dir1600_1959826633\1d100b87-8aaf-4ba4-bafc-8f3a75d7d1fb.tmp.(MJ-TJ9302618457)([email protected]).zxc

MD5 ab1b4c046666754f9ffff0ce10196f7f
SHA1 3e8ea6df1afca75516949cd6fea03277a2f6a0a5
SHA256 4406f5eec97e88f8040c2d9ff8b190469b3cbb6d03176dadf5666d18d666e73b
SHA512 b3823e89f84f84a0040642792df040aca98a5c296d10e829ac1761ac9a134cffcdb1bdfa3bfbbdeb8e4f288a004a959c24c6686245034c94033c7587c57e7ae4

C:\Users\Admin\AppData\Local\Temp\2029168519\payload.dat.(MJ-TJ9302618457)([email protected]).zxc

MD5 4677b648bda34ab1686bbae48a50a7ae
SHA1 f45857100e3e7072f4766fcafc3940d711b0b9e9
SHA256 c2d0226269496fec5133d683b13565c820e77956753b32657dd99b7b463a61a0
SHA512 2bdfdf0bcea1b5700c9e1942dc56bd9bf5cda9773d37ae188d7da6a63bdf833ad0e98a83fe180537a35c493f3bc860c919366e985c608960110b4342005ffd55

C:\Users\Admin\AppData\Local\Temp\SetupExe(2024072917532044C).log.(MJ-TJ9302618457)([email protected]).zxc

MD5 35b1a3a3ee6bb8fe22065116e7119308
SHA1 2777a7b7b2c86cee25637836d439c1d4037e87b7
SHA256 6e9e8abfdd809f0ce26985ca1d1a3bc35f26d62adef4a3bfdeb132038cf2622f
SHA512 6a66e909c300f9b9ea59f16f7723635e5faacb8af85b4de4ca152b910c76a6d86599641062cb92f4924796f265c4e48bccb6d9e9e78e71a1f25cc3ef9844d129

C:\Users\Admin\AppData\Local\Temp\Microsoft .NET Framework 4.7.2 Setup_20240729_174811932.html

MD5 22d495df7b507dc035b6bb5036a65db0
SHA1 bbb22ba267572106214a2e08e2f74e3385291c8e
SHA256 477881c4cc50ad67dfb5e0604f256ca46ee5390e3fdf3542ef0b53bd3bc76016
SHA512 0ebc093de3dfc3a9e00fa6eb331d19aed09554d23cd77958d6e546d307b4a5aafc74521b9aef0a5a8604688228a93563287b90c56ac86b534d42f0e6e5830f98

C:\Users\Admin\AppData\Local\Temp\Microsoft .NET Framework 4.7.2 Setup_20240729_174811932-MSI_netfx_Full_x64.msi.txt.(MJ-TJ9302618457)([email protected]).zxc

MD5 ac7eb6def7890912fa5103ac97732b93
SHA1 d6ade1a03cacb2880abbb259f9777fe85846ad34
SHA256 51cba8dc5b19ee11894f6c4d066d56eb4a9ee626a3478022aab04eaa90d626a5
SHA512 7139153c5694c5b655a5b8a751a7b3f8c04088231b8a96a0cb1834ecd5592563b624fc4a7ef0e6be5e9326fdd7d9ddde0d5e6988f5e6589439549cbb8f03b0bb

C:\Users\Admin\AppData\Local\Temp\f354148b5f0eab5af22e8152438468ae8976db84c65415d3f4a469b35e31710f.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 5ab2de184b84003a1d86af679145fa29
SHA1 2d81ad1329967306d57e1804f9f136dbf88c07fe
SHA256 bba71564af3c5a40d76582d852f37c3dd057bd1028b4557e2fb293a75a283456
SHA512 75178e3ff43639a4dab5b93088524bf449d68001388b70e4035219c8639b210ab5ac58237d8386b9f95e4643d492a32b2280ee04837274c6c375553e90b09ccf

C:\Users\Admin\Documents\TraceResolve.vsdx.(MJ-TJ9302618457)([email protected]).zxc

MD5 bfebfdc162dd71b16b6b1fc4e30a6cd1
SHA1 5055dd85e76ffd2a0dd65043e63ae17859bba97c
SHA256 0479e0bc7658e4ce2e6143a5bce30aa8c9effc432d7531193809c140683a25dc
SHA512 71d1b03d4c3afa090d77599bebfe34e2d8648e238a0e13a7f637c8bb538b03170616b3dea356882fa454132f0b73b9bb76fcd3d1b7a3ba59b853cb60aafbf219

C:\Users\Admin\AppData\Roaming\CompressPing.otf.(MJ-TJ9302618457)([email protected]).zxc

MD5 caecfc688c81eb57c151e39c1ff02a08
SHA1 de1773c69303c1195b2e2b5002025ed6e7709ad3
SHA256 9a8981243ebc134a1495b52969291a624bbf0ad1cc2e9f8210bdcf35a5ca3e90
SHA512 08634e162714238837dc1e5b6f8b3f2f2e9d65717e184bfb47f8427a0999b01f717d23b98afb92d172608d7d298c968ab83f4fb3e7c8ed3e869dbd5bc91d7fd1

C:\Users\Admin\Documents\ResetMeasure.pdf.(MJ-TJ9302618457)([email protected]).zxc

MD5 84fd17976f460ab8e29f4c65a3fc398e
SHA1 496d0cd26782e546948aebbc74c25e9822114920
SHA256 accc0aea38f628489e59baddc16bee2a061bab2bea10af22915b9a416bfdb071
SHA512 79d5a242d75ec4fc1fbca6df565c1051b31407bb9ae7ed654e0f2b1a3cd62adb60cbab8264df20cb8fe720f8b3b11c03c643daf43dc58a994adb2441ec086223

C:\Users\Admin\Documents\PublishClear.pps.(MJ-TJ9302618457)([email protected]).zxc

MD5 09878c728c26fd3dd006488ac1419910
SHA1 bd5d16503b797f2deaa21439596c4d722319783d
SHA256 d0a588eeb8b898d221ca07ad584e89048c1291d296590ca62fe81c698cfbf972
SHA512 4e2b0235257d2283f48548bcecd384875b8bf52563913f7b3b3bd91e7ddc9db53d7bf6a2514423f134939ce997d13efa5fdb3f823b71f9ea447b833ada51213b

C:\ProgramData\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\vcredist_x64.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 5f42b49ad865cd6fb6e0d89bac505bcc
SHA1 00c79b4012d694f75dd979ec66e24d349d0dd7e5
SHA256 10961b608b6394903d560a51e796e0b7dd5d28a9ec57c126e00663859c30ca2a
SHA512 a07df823f468b736b06cd691b9118db4c2a980ac341414526b234c4a6698e0123e29112e0c32f93099233a62e9d0dcfae4c374f67c15f61bfb62a837a7d0f6bb

C:\ProgramData\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 f9d5a43b701ab443c22e1e628705549e
SHA1 9390ace086fae1b2425ab5e39bf982893b7ee088
SHA256 50a59349ffc70e8a591e2f04b8e01205e75a7d99b674fa2b02492700f46fa9ed
SHA512 544860832885cf33cf1ab5c27386fe2d854e1f7d224cef781a146061afebe8971eda7224b9de3624afbb8d29f187f9c1be12e37e2b3a902868b4a73b5add0e99

C:\ProgramData\Package Cache\{F6080405-9FA8-4CAA-9982-14E95D1A3DAC}v14.30.30704\packages\vcRuntimeMinimum_x86\cab1.cab.(MJ-TJ9302618457)([email protected]).zxc

MD5 c57ae07f1567c0d5f3b894be1407fd66
SHA1 4326c59bdbc9fd314f2bc6531c3bec9e40400f13
SHA256 57a7631427bcd2fa6ceb095dc5948382e196eafd6f7035e3a4755ae75236f77c
SHA512 44eb227bd9127221610d4a08fa40f562ab84b471cfdeb6c75671d3679b311372ce63a1cc4b9c6f30d0de92be9771b9da494c85e2e525dae08496e0cef83ef0b3

C:\ProgramData\Package Cache\{E30D8B21-D82D-3211-82CC-0F0A5D1495E8}v12.0.40660\packages\vcRuntimeMinimum_x86\cab1.cab.(MJ-TJ9302618457)([email protected]).zxc

MD5 6c99f47494c1c94f7ca4c3dde7d4333a
SHA1 d77c7b13504adf891ed83394946ecfbdb0175657
SHA256 1670640ff78a3d98b7dbb0419e891670b1416f09cb1d33e96fec8fd431a90b9e
SHA512 d927d5f751058a81cf21160202e2221dac50765303bd107e2bf54bc73df80e48d8d9db0c96727f02d1aa66ab6e112a2d0cdd1799c6ea7b583856dcfdb189fdb2

C:\Users\Admin\Documents\HideUnprotect.vstx.(MJ-TJ9302618457)([email protected]).zxc

MD5 9fc86202300af50992d36ac32dcf6e07
SHA1 6a867a78f5f855dabe2503f20c98f7e483864624
SHA256 267ef00662dc959b70afb0cbf09e8c69fc07acf73cbe251cc8fd229aadf82400
SHA512 d7384d7ebd671100b389ef65721eb42e2b8b8f14ff24c615b21fd51b545528df76e6baa24deb6abddafc41cbee4c22dd2adba815dda5e3e9b5139c83d838dea7

C:\Users\Admin\Documents\EditUndo.doc.(MJ-TJ9302618457)([email protected]).zxc

MD5 8f276b78bf2f087b4427bb084f4602f4
SHA1 9221137b3aab68428c8b174f420aa049fde5c67a
SHA256 547e55b34ba969ce2ea1b64b824e38d8abb361b4ea0efeeea8267e015773c5c3
SHA512 09d325b0864ba4a8c9e2fd52d889fc532dbc863c5a89ed494ac8c1139f13efd3d8ee8fad9d87b2b49d496535a288946392419afbf05ce00660dd5c4f58aece8d

C:\Users\Admin\Documents\DisconnectShow.dot.(MJ-TJ9302618457)([email protected]).zxc

MD5 8fe75d48f7738d0d080b56d634e97f89
SHA1 71419c1c909e06efd41bd709393a21b3a1fb3166
SHA256 9a922e0cdd413f09b97699b8b7c22680c66bebdf36320f2f70df5e22987d690a
SHA512 5a74441ec0db2c019b8720b88ebb84f64c3f4aee9e4c00b7cb01d8c3b7916aff77c8330bd2a7d4b75200c0c3b80b288a144d01e0dddcfb1f7b04e07e9f3acfaa

C:\Users\Admin\Documents\DisconnectInvoke.txt.(MJ-TJ9302618457)([email protected]).zxc

MD5 7b3a714c4fc3dd1b90d6ecd84edb6557
SHA1 31da94c4d3c074bdd579337da08e936bb2d88b72
SHA256 94d863856f0e386733212a053cdba32d3b14d082d5bfaee9d36f5a67a91180b9
SHA512 60cc4eac7fab0ba9e93ac4775a61c09d4b59d590f70f7d7653a0e38f0085b3197a3efa8793ae8794d651923ccbede8d0cb654efe770f21a7eb1c498433ddc9b4

C:\ProgramData\Package Cache\{7DAD0258-515C-3DD4-8964-BD714199E0F7}v12.0.40660\packages\vcRuntimeAdditional_x86\cab1.cab.(MJ-TJ9302618457)([email protected]).zxc

MD5 5924f4cddaba0d4b2f1c60a33da89d0a
SHA1 276c3fc5a056d29e83e1fe8d3821509cdc9711f9
SHA256 6c52650275aac928c51e93901978eef6bf78e2571de2f42e29dd185dd3b419f1
SHA512 e219e10b21546320db3c43de5b2762167ca3dde6caee9d9357903493bce5bbf65c23679fda690c36508218ebc6eb024dec10d98b862a7811b9ad499bd6de9386

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSSres00002.jrs.(MJ-TJ9302618457)([email protected]).zxc

MD5 affb50534eb6433e85c0cab69245de06
SHA1 d3556b1a67de380d81b1765870fe3ad27f4de1fc
SHA256 6f787bdf095b26054e6a7fe871a798ec4435508cbf9a1c3aa633cb9bdcd4920e
SHA512 7ca3b80a3682fd9867496f73091084e474d24fa9d4d0906a31cb7e1ae1091596b045da8dd5975db47be0e1770d3b69c16b6e96830abe49ca565f1cca9d579e01

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\XLINTL32.REST.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 a0cce9c6ab4cfd318def528b286dd510
SHA1 ec985e385379f8812eb401e0873e02772011989b
SHA256 ba6edecd1d0548f0656af1921ff69ec19a46a1e0f045f502a8318fb35ae453a9
SHA512 584cc5d9328a1bb14b7b959a7054ace3b27b255f127865e7947e2cef65d5dd0cab3d927e159ab2eb81de51fd7f1f46f665ec291eb932fc9fa7d5c5a3f51d8858

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\MSOINTL.REST.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 b1d3d0c38bfa6b1c3b2aa51f6745b04d
SHA1 e977f4730429b9087b3de5c96c87c9cc189d25b9
SHA256 c76c68a69d4e2d23b11596e51aa20fb831eabf11005b05db2b7ff52b0ccfb635
SHA512 ef726506604630a16dcd3d701f341bb394b90e7c9b20fb27f4f899c3089172fdd8e4cb66d920efdc386a67ffed4afd084f3a07b2310790ae05f12382c05e1d42

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\XLINTL32.REST.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 0ba3d2e73d2557f8f5647d3fea03533b
SHA1 40bfcbd4825aa7fbca526b3bf5464aadc78623f0
SHA256 2b44b0e2d521caf5c09a64d905df2a9e2eedf385dbce5de830c37264eb3f35a3
SHA512 602742bad12c647e369ec25a395a9614f169b58689b13bcce0ac1ab035634c4b508bec4d86b1c27a7d0487bf3cda61594627c90ea9c391da90d44861a579b552

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\WWINTL.REST.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 43d1c874cc2a22147c41742e27964db9
SHA1 807ae804cf9bc8ab1627c42f12b25170e769d0d8
SHA256 e6803ed9020905998e7e3fe0b2bf7e9617bf080944e4421ee1ddb8827fb68985
SHA512 9bedc3818c01eadc7cfbb060a350e3f2da2374ea88dd3fe8d4929323bd37ad67ad1264f71595114bd3d59e6ec35f2206c7aaa3fbe02722d3037ec644aacf6ce9

C:\ProgramData\Package Cache\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\packages\Patch\x64\Windows6.1-KB2999226-x64.msu.(MJ-TJ9302618457)([email protected]).zxc

MD5 5fbdd81003935b8696b86730d2136740
SHA1 7f824b76e91971dc1bfda46a3cc3b84a726adca6
SHA256 30489b354448059cc31acc04862d1b0f2537fc85fc6131b163c0c5b0ac24dd2c
SHA512 d57a3e08eb12f79737142c5f183b149e2c741f503ab967ab86f3bd7ffcde8c867702c69c2f0284e4e580a88bbf4229907c3acc74c7f5566827a63de036e5c263

C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\mpengine.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 938b734cccbef651cc936bebbdb41943
SHA1 9e2a57c3fa35f86d07da5a243a60bd4f91458b22
SHA256 7b0212b54818298a500261fa1fb64c204f088637058485d947521aa2958229b6
SHA512 fd0dd3ae53e1e5e26b35d6daf7e67caee36bc7f2151b93a9d92eb46f708e3504a61e1c71cf525da254a21e0f17c7dd2c5c128d7d944580003376751a3c953a19

C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\mpasbase.vdm.(MJ-TJ9302618457)([email protected]).zxc

MD5 fbeb2c7209c42cc7e8f9587f0eb71691
SHA1 2e274ddd5b1765726c35feae6d2cf4cfe3ddb7ad
SHA256 63e7ae2022308276236379b6a8ac8c599d331fb8016e7bf4bfe6608e663b9067
SHA512 9c9a39933899c686750edb9b8228313d2061aee12e47ddb7c71d121aae13d84145262bbc24f1624d149036a18361436168f0afa608dfa581d8aa4c99fad91b1b

C:\ProgramData\Microsoft\Windows\Ringtones\Ringtone 04.wma.(MJ-TJ9302618457)([email protected]).zxc

MD5 aef2294f4bb51615e4e6552c94640357
SHA1 31c33d0cf38431242d75e0862425efa54a595a0c
SHA256 d62b1d28a491dcaf58458fbc80ab3aee0c26680971b953ed91729d0585ac91b9
SHA512 51effe5c00e84f4a5cce8acb67b44c1a8fb7c201138eef0471c98f950fe8f7c7c2fbb7fd1204d40b83a7e78f1dbdd7cbf25c6fd3ae74ed12caeb5f7d499e8f01

C:\ProgramData\Microsoft\Windows\Ringtones\Ringtone 01.wma.(MJ-TJ9302618457)([email protected]).zxc

MD5 bb7407ce7e7f7a80d8e3fa79e37aa1b8
SHA1 b7de8a8ab0821e6f34a06d54f9817c4a036b7fa7
SHA256 cf4ad9726d2eb2c3e76def0797f77cb95f8b21177c1b09c875e81e91b8053267
SHA512 b77be6c471a99d3d6f4e0efc33fba662bcb6456a10bebb060c9df34da106aa0c8355d4ab75876867fea115326145d3adefa10414eac25f68f7ca74b8e8ebcd73

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\WWINTL.REST.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 59b7d8bbd3f9ad5a9066da2a12160a42
SHA1 81fde81674079b1323496f3870ff75d31a7b260e
SHA256 f58430090c575bc003f6ae7d259f3801b52b2d2109a2a228dde85e68557a7e13
SHA512 ab2d2fb55991e9258cec02ce0776c9e83ab1c2c6297314750376e82548f6f7294f5d94aad2218a2843d32e9e30bcac706429e960226eb8c2859d901227685cae

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\VISINTL.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 c3a38b0a7bd329638185906655aa34bc
SHA1 ad2a0f6bb8a6d64c7f204bca7f51a30c3ac9bb08
SHA256 f6557c2eb5c5c3864bb39df38de732fd864e151510c6385a6f555b368f9623d7
SHA512 62c678e8bc3574b1e4d2021908a8209d051b9b0e60384dc92af9096187ecfc0061a8761e662c4e7bed83e37ac3400515867097b60877242061e53ba1b96c1c87

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\PUBWZINT.REST.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 c9703e972aab82488ffc821ffd1c2ed5
SHA1 326629d3b2871e7befd8129cf2d5e5c67c15427a
SHA256 dda7eef77103bb2247db86f79d93674bda33e0cfffd0e1fac819da6621495f95
SHA512 e1a52c9cb965741b306e84623281c87b72da05e4f689f51f9144e412bfdd149a774633ff589219c58dcaa188af307621ea336e0ffbdc83baea782c8553b05524

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\PPINTL.REST.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 d27d26b1b3faf0d02d4a4fce683fbdfc
SHA1 052281de8ae2b5bd05500871ee3f406c8990924d
SHA256 1280310b3b3540521e17a2ecc959177d71c262cb9826548e797edbd43f4de578
SHA512 16d0a39a6e9c50c0d067a5ab13cfc5a1d79401009554ec41bcfe85fcf55bdfe473ef5d15915f8175fa402efc67fc18f337fb8238fd002c286577cf02aa47ca0a

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\OUTLLIBR.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 fceb8f890712e28d463f62b0d02b1336
SHA1 29376df911446daff9f4919386b7c0e5f2a97a46
SHA256 fb5b4959aa15c9ff8558c53cfe7803dc7d3b7bc33e1299afb26e8356423fa522
SHA512 e27a03b41e7d422da340cf6c4dabd4684b833995f6cacf9b049da4c66dba2d89e4a7c95407673722e43cacdd0dcbe57844dd1bedef5a32fe4016bb98825f9b01

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\ONINTL.REST.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 81ef0a027d42238609fee484285c34b6
SHA1 7dfba0a46bf8b110328453474750cc7bf46370c8
SHA256 80482e243eeab0383ef71b434cfb4eb537afc04e9f9c32640c03b536c152ba7b
SHA512 6c9b303544fb09dc0a04cf4c748193c88ce97c0ec9bf2454bfb2079184882b7d4b62164766c9917e677d8ccfd3bd24ea8c771f6771d18ec17f123272e62922e1

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\MAPIR.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 99babd2ba6dcb9a57890ce97dc1c5f19
SHA1 28e6115e0836c7e1e10dc7dd5b430372a0409e1c
SHA256 8cb32555f3ebb5f37c5342ee6532025b31c0a9fefc9cc84acdfb23fc8a585866
SHA512 71b2c9bef6f20bcc06f12b36580c090caa8b6e960280021af68756f41a0fd15f40854451e5777c84d9c76f31a6b220a60abf02e4b855eb944330d5511f5f1d89

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\GRINTL32.REST.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 219fa97e7cfb00d62e032ad5e24e05a0
SHA1 d322796fb6e59b6ad73d376b7218afc2e67779ec
SHA256 2a6ce49bf606ab9ba6b26fb7b8ea20aa561e48dd3c52a6d5ef1e325e077b089e
SHA512 90a4203fcf09640d4e6fc4e05693853d3d8c14db8d81f2711b432e700c69ae9f115b9f8a3d99bc26a1d63a28ba553c1994950a757a608c4f55c97b1af5cfe551

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\XLINTL32.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 7eac956321a6bb1ef670b9c99e70440e
SHA1 4da97668e873f1efef3995d79b1cfc54638e9cc4
SHA256 b69e8c723a2f10f710877253474482d16616cafe94b7c0af27e0ca9d55e83dcf
SHA512 f03b0b3884477d6ebdf58dbe3ed9e1aca2e5d09347ca6e0c4ccb6a97cea8cc4ada9130a22de38cea0ba74b6f86683a896a0532d9b1de575137465483eb0ac29b

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\WWINTL.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 eee713a5d025be042b8e3af6cb77c108
SHA1 370169f7e4d0020b958c53b4570e146200431fe0
SHA256 613617d4a6c4768d4680df1011a0194b7833b9a39f42f58d617cc583c0c7542a
SHA512 80ac2f51e71f535ad8d98ac03c591098c968b5f6c729333a2e75670732679cf3aa97aabe3fcc5291df4ba00e8457e2fd81b18be444a407bb1e37bb4e6a0898e1

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\VISINTL.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 2e8d76bdd95e74a0dd1a93f9acf7660b
SHA1 ff9e6ef18e05cefdbc7bc1c9f4e3b1a39b1fe567
SHA256 a736d6330be78c98bbad7e6d82cf663149277622da2bc99d41c60372dcbf1799
SHA512 04d8c4cafe7090e5f15a916c827e9cdd1de0b3a3b6188a84efba7a9ba28a8dc9e4b312d9422068810339b7babb9626fc0025cc02520d734c72dfebd3009d2b3b

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\PUBWZINT.REST.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 7b9280c8b5988af6fcfd674b0e967297
SHA1 317550f895eb1080690d27a9b93a59d7ab733d3c
SHA256 f64cc486c074b43e113ea0dd3f963e82879c6ac5223a2208714671d1d2c8d99d
SHA512 0b28e9ca6b8029321d8d9da461ff0b06785445894569013201cc817772b30df249c59fa7766763ddc246bb3d927e3c101bf688700c2f1dd57ba9f1c6426689e8

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\PUB6INTL.REST.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 61fb48e3009dcc8048b695720aac3f67
SHA1 f3b48945618b2974aa32a4b17a07e92e64c710ba
SHA256 3e8151285b42aa8d698b0596f46c4bb6c01187c5b4a89ea8217d6bb745fe3294
SHA512 e91533eb27e305c5e4a57e8b5ea3189bc43d5c5f1413a20cdf6ad64c598dd70116477ee70a32109ee01582ae19c0d62a4e5a7e86731522cb080f13c0a530c930

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\PPINTL.REST.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 346c25f4e02bf5e5ebb7ca9824d2b742
SHA1 258e50288bb372cf0bfc132af86f734c4d0260c3
SHA256 057de2a35b04eb5e96b800801f8d96f99c042a674f8051dc55ac8b063eabcc3f
SHA512 fafc1ff5b34956b14b1a3587481b8f97a13cbbc0d3dc59364acf757cc35349440c50adcac0baf8646efc3176862294463a3af2f5d831bdc78c520c50f9edf12c

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\OUTLLIBR.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 06dc98f82c079643572348b821e185a7
SHA1 0b88fda24b155e6925d1e872af94f88cf2425278
SHA256 cd5610a85df9d57d6f3a6a05cd8e2399c741a1c65b71796ad80386e435a7c3c7
SHA512 1729487415e6dcd11e73dfe6ee0469f873a6621e6efc1777a42cf87ec2fcd9dfabfaa8ac24085d5f0ae1db8790f747874bf0900424167379f6037ee6b20b30ce

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\ONINTL.REST.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 b17ee2584fcb7e95a967fa5045994d23
SHA1 ccaa2ce739f81f7d4598cc704bc14dabb5e09a15
SHA256 665d427d9a797f570e7fca9214c0f02722fc2a7f612f91b8b578ce80652e334d
SHA512 f374b0cf199d8b680defe3b1e7f2d47f85aa150c9b2dd615f7b1f4ca9a25f888d2ce0e42598094b40594cb9cddb0c8a8b05795e3c62b3816861957975bd908e5

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\MSOINTL.REST.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 dfcd680ec3f3989bed0a209a8dc6cc4c
SHA1 1755c1884901bd977b26003c7de0e40101c2b4d8
SHA256 44b99412215833c91092032cbd36343bed18a183b263a80fbdb16252b3d580d6
SHA512 33295b3ddb8a130cec77a942e24a89783ed7dd3e769e51feeb77fb912f643a6de04a25379109ec509f2cc5742a9489d892c9aa6511a03adb493f5c18ba671e00

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\MAPIR.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 7630ea164aada704751f7e1628502ebe
SHA1 12cf889e4a5443f0ca6abad29fc954cc395cb416
SHA256 c4da3e801d6c8138155957ee78755339a6960f3eeda18e4716a201747aed2560
SHA512 e405ca593a26194de79baa8444527879ee371c2246bee9f0ad2320d91081f929a04c975a9c9c235fcfef2d23e52cf2de041264ef1340a931542c4fe9c9ac1525

C:\ProgramData\Microsoft\IdentityCRL\ppcrlui.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 7a4d9c2e11c3fd1a46d24276199af200
SHA1 9ee0d531aadb6ee3058dbd92d45b51bc8a0ddbc2
SHA256 ec583d2f8e4f7ed93430e71188145e6004a42ff9431cf4b4c74e169bbc0c0e03
SHA512 0750d74d742f63c4020fde38aba6aeb88226ac089c47f7f8f7124cdba22fab1ebf131f98710a196404c5546826641a740e3d22336fc84811507767f62dbfa317

C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_MTOC_help.H1H.(MJ-TJ9302618457)([email protected]).zxc

MD5 70b0c78915520daa3d015ef0a6719f2e
SHA1 ea460d53a1d0c08ae535ba4d5779c8ad1a8a56a8
SHA256 54ffe4e02e98fb2ba3ebba6313f81ab4b2b84f7e41854d296cb473a29dab112a
SHA512 ae23734cbc5cb44b2e7e6ceac2e5de09cb275dabb0fc9ee1952c57096fe5b7f773e625a2013b2176ca0006111cf8b0efd35d5241b0214d8565261d70b6a3476b

C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_MTOC_help.H1H.(MJ-TJ9302618457)([email protected]).zxc

MD5 b3574ce8f3b068e28e3faca0f863541b
SHA1 0fa5fbe4e8dcad21bb94adc706607b6d54133dc4
SHA256 3f49757c37259532eec8fde9e677519e60b4d5b653f10c6854a3e96288308a1a
SHA512 88600a15cebf3a46343ef3a86e1b00270afac03e73eb7b661a95d735422b8b623a8114acda1efdb1b0e7e36dba9f6c316cb6399c08da4d04f225369264edc61b

C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_MTOC_help.H1H.(MJ-TJ9302618457)([email protected]).zxc

MD5 79ab127998e66d83651518cd620d1b20
SHA1 2ecb37fcd81da69d7388a0519519cb01f8db1b7b
SHA256 356c3d8031e7d2246865c55ad439d250fae7fe8e336b8141fe80d41b6f49b0e1
SHA512 4cf39c9936781ead463bcd33a4848ab535f80c977e5b8eb45ff54701aed71e99eb98756ace4145d070d9befedbe23996ca8b8f42355679557bfd1f432de50de5

C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help{68DC71DC-2327-4040-8F03-50D6A9805049}.H1Q.(MJ-TJ9302618457)([email protected]).zxc

MD5 40ea6c9f9dc1d53582dfbb010ee53c38
SHA1 2e68dbb8706d54f09c82073ff28ca8b4b6c47e6d
SHA256 0237ee6202229c74b42b4c591c234767e4c6bcf213afb76e4ad3322cc84f5dd2
SHA512 6c5c4bb03c25418d62a5335e8ab116d5d59500925bb44f8cd302ccee093d91e43e53a8140902543e64c4f66cb4fa0c6d385d7e94557bfe78935aa2f16307a65b

C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_MTOC_help.H1H.(MJ-TJ9302618457)([email protected]).zxc

MD5 84c84a81e3d9db234c1844ce1e558e56
SHA1 797f688474fdf23e6a3e0ef1d9eeb770d8eda5a4
SHA256 eb9660d849411deda86fcaf4b709604a54b0187efd66b3084371523c9ccf5ee1
SHA512 827222b6d6e68392c9822d6f0d727b5a9dace73c06db62419245c201ebeed337fa38ee0b4cf8f72c9f7434786a4a4d428e100e3b551bdebb70a8f2d182b63f18

C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MTOC_help.H1H.(MJ-TJ9302618457)([email protected]).zxc

MD5 6cae7a509e6f4aa25ee5abe226f95946
SHA1 161cb5b31885eeedf87b9bede339312e024d5c7b
SHA256 093200ddce49db728e75a2cbb63f648a45e8a2a6a6eeb3cbbdcb63ea74eedcf5
SHA512 f06fdf1d87a84a49a1c9bb98ff21bb6394a2e2f771333155b729d9a5070075e41c78a56dbc18611e980bb90d0ec26a0c722dc8d5646ef82013078608a2a388ff

C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MKWD_BestBet.H1W.(MJ-TJ9302618457)([email protected]).zxc

MD5 08c6485b04c1ed7c871a434b07d532fe
SHA1 2b6c5b507a364602f30498c2ec1b5c7f65d7d48c
SHA256 ba44b04303ee744143d683a19ad788233a73dadab37c86b7c8f7c415cb51e057
SHA512 0f4772a5ece9e8a6d031aec4549b3a9de40f3f61fab2e9101f76cbdc5ce74b36e2544a6f6027b236923aa1b06550d1e8c6693a93749a277a61e76e60a9d559ca

C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help{45EACA36-DBE9-4E4A-A26D-5C201902346D}.H1Q.(MJ-TJ9302618457)([email protected]).zxc

MD5 452021aadc2181b48d12cf518c776413
SHA1 d1dec38366c83cdff52a079879bb16dc4ae86c67
SHA256 7a003f3ee6ae18d65e1a564fea58025a1726bbda774d168044bc327e2af70638
SHA512 8050dcb242a790a287f32118e025077a31be29fe1af92466591b38cfaf5050489487bf6f9a3dbc797eca599a5e1d93529029d77afd9476391d739143ac497955

C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_MTOC_help.H1H.(MJ-TJ9302618457)([email protected]).zxc

MD5 ac2030ea6d6aa8450f801b60024c0517
SHA1 91b39f3afa0d44add113d84b70dd468327382c3f
SHA256 3a145c93b51beef1443565ffbdb4480865aae0fb74aad141d764d62e166c24be
SHA512 b16e9e95e340000cddcec17b135b431200b7fa619314ea94ba798888d372cad5f5c57bce5f6ca792dfc64116c37bc1aabffd48388d4c8e735907ce55dea9f281

C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_MKWD_BestBet.H1W.(MJ-TJ9302618457)([email protected]).zxc

MD5 6dad1af4ff460de1d590b56e7aa9710a
SHA1 1ed34bd2189fc1f99b85d8c23d381bbcfff5afb5
SHA256 332e501475e4e695d2d12116b6843f1cec6b3022323591130be9229960a19372
SHA512 63c1aa408f9a690f136ddc6e5b543dd028337c32a118e00cc265ced5f033750312f01d555d72dcd7ffd62e49e9b5bcd63f8ac9ef6be9995d26772a7cced8b20c

C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_MKWD_AssetId.H1W.(MJ-TJ9302618457)([email protected]).zxc

MD5 092985632df39a05854b7b989ddb24d0
SHA1 094be2349a1fb9f086ccb47315581cf534cdf484
SHA256 2f768f3ed0b203dfa4c61e38eabbbba4d3fdea6dc3fb893b17ba9981a8bc3a31
SHA512 9e9e03b0f358180945c6cc1fcc7b0a9e73fa086135272a5da8212248bbb114fc5f5a45da98aac36f5f8c057a1d2719a7baa0eed3e166d718a8c4264ccd56c448

C:\Users\Admin\AppData\Local\Temp\dd_vcredistMSI6127.txt.(MJ-TJ9302618457)([email protected]).zxc

MD5 c93bd43071a042bfd6fa60fa1580a245
SHA1 91e90d396ab47b1db140e003e804a64a4d3a7c5d
SHA256 73cfe9d0f29f0d372820e257a580560cfc31c49c3a02c358a5b64f51004892fa
SHA512 3b935c9ae975a0164b6182c940419b1173b5ee23ccfa39537e03d9c4c43db8e869d9af6cdc02c51a050abd458626a1f211ee040a18231234a54c63052f7e14f8

C:\ProgramData\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\cab1.cab.(MJ-TJ9302618457)([email protected]).zxc

MD5 5f23fbc69c1f37a638ee86d0e1999860
SHA1 596f7052de02999dc77f428dc7481a26c43e4dfa
SHA256 138147e88ba39950d2dbe28585d5550b3be1e911d0e1c9a9a4af68f65143f4ed
SHA512 532178c43ba6a298c6cf5e194cc7b37ffa484a875986f7e0234e26a18ffaa683ea86e40c8439e70c0d30bda4c15f030950f0f320c9e3c227102a7389e8c266f0

C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0400001.PNG.(MJ-TJ9302618457)([email protected]).zxc

MD5 18a036c58e599e8d62468b8ba489e46d
SHA1 5aba421d36a19c05e8df361cf14d8613a4585b85
SHA256 9f48a1325f9405afa14d90309577085dee1eba490f8d09099bce4b6e904d54b7
SHA512 4b8e6534647629a7e83925cd518c8621d4662b2eba8f2437861a6dccaf71b86a9f8785c50ae4a01a3593c38621e0d206069450a77e93481cb1cfeae87def7b2b

C:\ProgramData\Package Cache\{BF08E976-B92E-4336-B56F-2171179476C4}v14.30.30704\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 9c48d47647c709f7e09492b22ebb38f7
SHA1 e270aa23088c4dfec1989bff9c46ec048b9cc757
SHA256 905a7430d699882e8b08246b07b4901d169040c31c10d607c55178414751aa95
SHA512 6f493ae882fdff644f0958f04be3a0bfa31a2dfa531ee6832f5d234714f8b7fd39b29f7c5c83a584ac7d2328da0b6b1d608769b27e543716c12d38dcb148eb81

C:\ProgramData\Package Cache\{BF08E976-B92E-4336-B56F-2171179476C4}v14.30.30704\packages\vcRuntimeAdditional_x86\cab1.cab.(MJ-TJ9302618457)([email protected]).zxc

MD5 5bdff0837ec76e9ea8ab1e761a3aef3c
SHA1 99741ec08592b684e6d30ea22c441191412424ce
SHA256 23209467d3d658903170c3cb1598331c39f81955049c51c3176d22dc637edc84
SHA512 df57a4af01c0c4328464f09acb8eac3875176123ec1db8db51fece8ddcda56981f230cade693851c5f45ba63ab9959c4e7d4f0264ba578ec82396a25aebff9f6

C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 68ffe7595f69e61948d9cd6c7db9cca6
SHA1 b72361b1d52c5ea12d395ffd8e39f4022255201f
SHA256 03490bbef7facdac425047c06edc8067e0e573388cba80e548f4b9011a76df06
SHA512 8a61f7270f8759b91ea90ba5b5919114c02341ecd2d2d2ad970c84dd4619cddab3849c9600479e5610c64e8d16cf8a117ff93103fcff3de7b36962cb82244409

C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 2e2114404ef269cfa619721a9f1283ee
SHA1 6ed83b7be9c98d91825de2afea3cf5f099cd8069
SHA256 0913f03fa57a3ff83b69230bea9f782eb88f662722efa98dabbf94577b58adf0
SHA512 63bac31bcfa54619a1b993289deb017bbd5dd8c771485d1867ba1d70a494540bbe728aa5cd7c8055a6e9bc91eeb1373d81929e74e7bb334ea4b2ff7de1ccf811

C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\cab1.cab.(MJ-TJ9302618457)([email protected]).zxc

MD5 40e0847b52e32f3407e2bcf849972ce3
SHA1 b3e4d01d176fad4703f451cf886d326854ad5b01
SHA256 fae83b5d60f5e6cb88007ada673a77d4081bad379481d7680f23dbe4e94d840a
SHA512 724e5b53e579be88590c07c795fdb58c30d0513faa9bdb25fd4bd78915c2f9ff236c0383a3d38ad5430b67508caadd5483c026f6aebb87435b5e6083425e2d5d

C:\ProgramData\Package Cache\{6DB765A8-05AF-49A1-A71D-6F645EE3CE41}v14.30.30704\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 3fb4715f6fcbf5a55d6684c7d6640c2c
SHA1 a68e8319f8af06b9bd191045c62c3205d51cdbb9
SHA256 0e1dcc35c82479335b16fd560687c16bfc61a0e6898edfe54ec8b86373aae30b
SHA512 b9a151bebb41acdbc8d119d38129afe192aae21634f2346cebf62829056fbe910e2cac8382340ba1ce7b182fc4b1cd4e4ab263f258ac51bad23ff5504401498d

C:\ProgramData\Package Cache\{662A0088-6FCD-45DD-9EA7-68674058AED5}v14.30.30704\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 fe2ba55d9042294df82515981f0a9c03
SHA1 b7cb00cb8daa9fc6e64835a279ddaba806e35b04
SHA256 cb9cc6f70fe75cf15bf57511b196ea9cb1fb66523dc42527a74c305d8c2ce544
SHA512 cbf374394a4aba156b4e31b02344941c130eb557491b912a00a8273c6ea66de975c631d8c16d79743a51daa62b3497a638a595b98e6c81227a5de67afcaf2b92

C:\ProgramData\Package Cache\{662A0088-6FCD-45DD-9EA7-68674058AED5}v14.30.30704\packages\vcRuntimeMinimum_amd64\cab1.cab.(MJ-TJ9302618457)([email protected]).zxc

MD5 07e0bb3de08327168b717bb04b0b5a14
SHA1 8006006bd3eebdec31bce4bc90c41fe188800197
SHA256 21eb8e09ecd14881b1854d4b37b56a1669ddcd3b6237a29b21c0defa746b2ece
SHA512 c3b53dfd1ea20751bce11b680f98ce925f10b9321923e3a73df5355ce597698d9159adf5a52069582685d936c85c7033447c615e83c345c88f9fd3a96cad778d

C:\Users\Admin\AppData\Local\Temp\1d100b87-8aaf-4ba4-bafc-8f3a75d7d1fb.tmp.(MJ-TJ9302618457)([email protected]).zxc

MD5 34fdeb4350a47be2a1af3bc59eddb6a4
SHA1 1472c88cf91d6b029824092bae03031cbbe14f61
SHA256 cdb73c11bc60fd540d2fddc43b58450dbb4dff48ac4523e328121939b2bfb1e8
SHA512 72e4309f19f8cda39914bfd722a3b5ac3fc98c7001f3a464430677060cab7096210d516c7b44808e4c8ccbaf69ef7f322dec0b24780ce48806174cfbee3c0c89

C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\cab1.cab.(MJ-TJ9302618457)([email protected]).zxc

MD5 0881427818fb7142f6d4c539184c5fd7
SHA1 02907eadd88d1ce0b67405e6034e0a7ed5f85579
SHA256 d36e341f232f24ac11b503fc18653fc0b520f9833aa61e13f567f923727bbacc
SHA512 32314fd0b43b3ec62e60c268a98d5666c8d7e7851240924a14f3f47b323710bd3346481b43485519601eda3a47ffb8e80e46f4b62a1555434d0a174f3b67b655

C:\Users\Admin\AppData\Local\Temp\7d98972d5c78e1d4969da76856d6818942b606c267efa67fd31d39ae77497e9c.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 ac978bcbf6ac4039643711feb685dc9f
SHA1 25b34a3494499e202c324ca828123b723e63ea17
SHA256 326ddd74a39f25c5df4cd9e30c804ef103c452df1ead5b94b5516f10d2c34c82
SHA512 e3d92f34cb6bcbd88d7414c70cfc15461c437d6272ca96251d718f7591129cf5ee435ea9cacdeec0eb8824da4f2bd03b2f4d173afe39d14f34815d1d70da99ba

C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01368_.WMF.(MJ-TJ9302618457)([email protected]).zxc

MD5 af44ba5d852203dfaec9382db152dfa3
SHA1 223542cf7ca4d188d663a0a2792571a08e95e6a9
SHA256 7ef579d2739bd39ab2f1b5e91fddbf869b59c13589ff22e9df640061b1deee03
SHA512 a69e32a96d1cdb39e2f5343daf8fcb08627c6fad890ebf0ad302e40667fabd5e0fb5554bbd07f054b540ff6fb29d95eab46d46ae942184540ab03853e531addd

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\n3lsnn48.default-release\startupCache\scriptCache.bin.(MJ-TJ9302618457)([email protected]).zxc

MD5 d7fa842d6c7a700fc7af188957b58b5d
SHA1 91ada02358cc067376c38c5cab5665d3d5cd0231
SHA256 018a62aa86b983ef93785db6e2e8dce1bf90adf5affb461dc9ee68c4e10cdd94
SHA512 86b217b4194ce31f364672f41bb9df5385b4a298d864cae092b9cdd71e759c83dfc72eb5abbe54fdd604fe96ddbb0feafcad0119dc38892e2ad13cad9d8d9656

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\n3lsnn48.default-release\startupCache\scriptCache-current.bin.(MJ-TJ9302618457)([email protected]).zxc

MD5 c3c1545b145633061a779eb08deaed8d
SHA1 6d1f3f7dd615f3edbde0acc3a65ddc6c5f9a3c9f
SHA256 6efbeddba4324bd9735c5298f5a04f323d0e3624b9592636238afb4e85f18d60
SHA512 e0da66165f1284b21e6e0bb9a161bee92c1cd586d58478da6749ffe8ec03efb7a1bb56bdfcc92b71df0bf11a91708a759e20ca1d4d7c579fa461d29589d9ff09

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\n3lsnn48.default-release\startupCache\scriptCache-child-current.bin.(MJ-TJ9302618457)([email protected]).zxc

MD5 f6cbd95e2e36687378c20db3c75b4149
SHA1 776d52a21be3a70fbbc42a67de6278c536b49bd4
SHA256 9762f5eb3f0737fc593c4961e68550e9e637e27ed4d362de2d52543a7f172d8a
SHA512 4dc9c0b9476ef528d9743b39ea46303334fe3262f58058ffe8272a615958c2cc5007742de11459ca7a835a66e509a923767c2226cfb18e326ceb87255b03f3cb

C:\ProgramData\Package Cache\{5740BD44-B58D-321A-AFC0-6D3D4556DD6C}v12.0.40660\packages\vcRuntimeAdditional_amd64\cab1.cab.(MJ-TJ9302618457)([email protected]).zxc

MD5 2ab16fe00c0636196cb4e6a854b3c104
SHA1 1d21bf398b3f0a882dd2e4cd8be641fbd227a73c
SHA256 be0620dc5a1e84ce10fbc236b001db968371298425f0dcf5df818eff82d926de
SHA512 2964a96a520b3d9d093f03806c096624c52671967aa51396dceac39afaf413fe3856e24f535340412071096af86e4b098a58482c6053ec2505b3b8b897aaaa0d

C:\ProgramData\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\cab1.cab.(MJ-TJ9302618457)([email protected]).zxc

MD5 0dc0b114277ec48e6a1f620eb0cd703d
SHA1 bd8739565f135596e976d524f9a810de0cd27890
SHA256 458c39cb7aaf14e617615ad308081f42ffb39b1d8589155000e4c93a73aec9d2
SHA512 967a61cf58a2982feb96819cf9cd920e0638b775e374e4f79c69cacbd5a94647fb08e886180a29b47c005acab34a3942df11109879ede41c53f8fa9d66347659

C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 f9c8eb9e4803ca0d7850d4915b5f2001
SHA1 7e98a878b63588693db1e3072f2badbdb9bdb157
SHA256 af5e8fd3d17425a2355327e5edbf4c44c6eccd3f82b8276b760a9d373ddbb9d0
SHA512 de795a9aab721ab9d6680a13d89311a264d02c04275f2ac25f063e3643a6c8f0b78d675c4d0195b246d097ae0e9fc54b9c9796669d5fcde8dea5af620db34c94

C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db

MD5 75d5a3b1bbcdfe73f942f656dab6fc93
SHA1 d2d6ef329846a526f410da0248a76cae500ebd58
SHA256 8bc7cddb78ef7a8307a2c2fe1eaa853fa3464c597553720e6a403018e61e3cdc
SHA512 69c83d9b7969f8242562cf6f62254e57dcfff973556ef8a380703559aa3b9658fed0313b9dfd591927135db0c779a5b9d9550be49cdb8c75a14f1eaff9e25097

C:\ProgramData\Package Cache\{6DB765A8-05AF-49A1-A71D-6F645EE3CE41}v14.30.30704\packages\vcRuntimeAdditional_amd64\cab1.cab.(MJ-TJ9302618457)([email protected]).zxc

MD5 a47e9c7aee444f8c1b9aa8dfcb3d1dcf
SHA1 e9e6216e9e2c8c4caa16ac65536a91e49521b807
SHA256 d854d26f3aa9e471e5e82af1b7fd457bef233a771b707f846f5c47b8cb1bced6
SHA512 cc005f88a7bfb1ed9884e8580db1b5030881388fb2cf628078e56bb92c4f36e0d180763fc9b0ae33aed00b25121bc7be7a20f865b499b728023f3057273af7ef

C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_372.wmdb

MD5 c7420fbb3969d089d2d5fa47c00ff12e
SHA1 901740b62812dd97219551611b1c15aecf16b8b8
SHA256 1aec6d84f8ad61273db4745597c53982d40d7e316c5b965384af92b2b1dce8df
SHA512 3c7cb517fe0913c060af87dde8293ff5e40f17cdee5cd0f5c2a7be4e10d292e1b2193d731722fe36ff5a73f63e644797ec5de26909ed405a4e4dd608d210199b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\index.(MJ-TJ9302618457)([email protected]).zxc

MD5 bfafc599983d00c87b1d5a43d81a6d04
SHA1 2a8d11d773a4414117e56f9b1f345466e83bbda6
SHA256 2797db7cec3d1fb8b559d9c99194924695fb2f371220bad63589ef53881db4c0
SHA512 d3c36485c64fd44c76ec3d70ce493238230ec5df445928ece29ba038b2936bfdb798afc273e47561d1ee70c30241f16777343d3100a31a02c9df12a4d4d3598b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1.(MJ-TJ9302618457)([email protected]).zxc

MD5 23d13ee4672469d2cd457141b1494c72
SHA1 e399befd39e924530c83daf72a3b9f4a73c2405a
SHA256 19d96bfc95c2e826761e5e7482d28b8599b0be760bcd203f2c4c8c9bd283c470
SHA512 4c7d01f6e70e22cdb63fe0f90559dbe2d1cb0d763da46c7ccce56a204b775a2e1557e0951c33bccd3a247edef49aae7b1a4f8ae3c732680f14ff8fd92acfa109

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GrShaderCache\index.(MJ-TJ9302618457)([email protected]).zxc

MD5 fe9009239422efc63155bd7af9d131cd
SHA1 5310c0376e85d6c9f25a2d27b13c9c8356779e3b
SHA256 97a847401d29df7a02eed1ff43156c4d2e170b4352bc98ce03fb4e733be79b17
SHA512 d502956443966b6a64a69eefac724c746379447aa05fff5cabab5e93d867ab56320d347f7bca0f97522960ec1b1aebcb6f707b61812a4461036686faa783d260

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_1.(MJ-TJ9302618457)([email protected]).zxc

MD5 c8efb9e3cad12adb151841a0ebf5981c
SHA1 5b876360f64b1a5d801ed08cfd750679117a2b24
SHA256 b6082b552dc8f599f03c045f7f1dae4fc74b7a20bb6e790c09b0753ecc44a48b
SHA512 da8cc3c399e66f8f02981df75f19830cbbf208d996d41e6c3cc8466e5e6956c37cd1c320aa5532ba6bfc46573f1cc189f6b92bf0b7768729bc168411a0c7fcb1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_3.(MJ-TJ9302618457)([email protected]).zxc

MD5 9d0c1a93fc92a058b4fc336505ab95a9
SHA1 c7d34a7789580fa563847fa204a0513468e2078e
SHA256 c02f0581ab772d56b9514dd9a757d9df5e18e786c0395a1aa7eba6c58212a0d5
SHA512 e156f26dbcf693c124b51831c8a518b5578d917b4c700bd5112d189c7e17d0a9c9693364fc4fa5fea2e2ac3daca4ec6ae6ba5b6b9f4bac9cf74437d622a2d030

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-66A7DBC2-108.pma.(MJ-TJ9302618457)([email protected]).zxc

MD5 8b202234d9692a1a0dca3609fdb89ece
SHA1 5e52131fbb922fefcf074e55c179418a699c43da
SHA256 b3bd66066a3983f0a95e1198234f12d3c060193d6b871b082892c9e5943ad001
SHA512 34509325ea8f3f449931439135e8e65c0b4c67607ef1b1383911268c7abb41d7e5d9ce8440991c8c6e5a04e91b96c41f0d8f6d1b2853da43b68e15467f1516ea

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\CrashpadMetrics-active.pma.(MJ-TJ9302618457)([email protected]).zxc

MD5 224a121e42fec5a01abafe43ab880c29
SHA1 5380ccb149279f55d7586c020bebbac4402bf925
SHA256 4a82cd6dd3d5a25a8eef32a0f6d44769a37d2e42b87720b86327f868e982fb7d
SHA512 592e56a753132a8c6c154bd8c1cb95d7b050affa1285658e073dad03b0fdc88ffe7b922f3b1a186c2b9d9dbe470ecc2e5e73f50d0aba491d4f0bff095ed52088

C:\Recovery\3a99bb82-4e15-11ef-8354-cae67966b5f6\boot.sdi.(MJ-TJ9302618457)([email protected]).zxc

MD5 9e0b52e4e67ca63df892e7e536627216
SHA1 8369da77475c177e011900b93162c585a1d5ff2f
SHA256 d81c36508b7450efc8a7a1efffed0e926cff3c3b26a2ad236292ed32b0016725
SHA512 be244319ad75efd2ee045256d8920bdf466d54b3b4e8eed475803a184b56dcc8e85202299a22b99f9b4d7a29dace02d629db90cdefaf0410d7a5a2fa8f4d6ee5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\index.(MJ-TJ9302618457)([email protected]).zxc

MD5 204ab7303a1b011bcd9377da06078da5
SHA1 f26fc7cdee8337a1256b93254970bc0c0fb6285f
SHA256 4c7fd2737f1857480105d921cd3f58f8d20171a8d5d8086c02e2622d4473a4ec
SHA512 9a2afd70e5694e0998c802f3443cc29b11880001bc97267e2f9e0bda0326f0a64e64bbbc2521dc3da9f0a2bfd4f73d08b210ceeae5c962aa2913d40bec471d2a

C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02758U.BMP.(MJ-TJ9302618457)([email protected]).zxc

MD5 ec1b22c983734a0c55e640320a8822fc
SHA1 b0f8b8a5a203187ad82e1b7c39b1cb7e026f2cf9
SHA256 2b92f0127362f736d1f58b66e5bba85bd337b046c90be06d3bbe435303b0337c
SHA512 43a31af6435129d3d8643c471465ba028a333f724e2ed9e15765fdfae5f99221c42a7b16438bae0b5f1a306680f1f355c6dad2abb7945609bf76ccad81998114

C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02756U.BMP.(MJ-TJ9302618457)([email protected]).zxc

MD5 63c414784e5b157f6a7c220e77c2cc56
SHA1 bfe9e42383bc055be4a762b266e10bd62585effe
SHA256 a2260384f1a2136b0f897eed1b2da98152bcf2491815937092c82c4daf607f74
SHA512 ce2c564e1f2d3ce0e6cec80ac197a53711ed78216f09a04d1cdeefda2d6be2591d0716bdc167a9314fc34a87e830ffc708b06ce1d2fee85fb868636d4102892b

C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02757U.BMP.(MJ-TJ9302618457)([email protected]).zxc

MD5 d6d03ce448c2903ab91e646f5de6ddf8
SHA1 39ec2ddc93e521d2d3fa667a0f271dea92f9ce79
SHA256 118fc3fc31ad09722ff7026bc532847935e06a88f853fe0bfb20e2dd8f753d1a
SHA512 13aeed81adfb2959a886e9563f3e63584ea85eaa2f79182c63215d49c3b268414c2ae6fdabdfd2102c6f886cdd578a4100e10faafe22366c65a34eaefd658997

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1.(MJ-TJ9302618457)([email protected]).zxc

MD5 2ababd8234c6fac880e214d22c1d3158
SHA1 e5054ea6ec43383c84c847cb191e5699e2bac294
SHA256 2dfb623a637f2f5eefeba092f11d6ce8de96e6808e9798ce47355f3dd6c403d9
SHA512 abf21c1dcb569fdc87dc1fceb2325ee8bae522a88efe9cec63d6a92a669d2204634a4779be3125f04c94a1dbbd775667ded675dcaa13fc066d70c93b61bef857

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnCache\index.(MJ-TJ9302618457)([email protected]).zxc

MD5 253831343f932e82249dd0b5d906cc89
SHA1 ef553c77ac83913a962d3f3d4366a5c9e7554ebc
SHA256 f1900c2e2d99ebde249d4d2de65220e88157b1f4a09c69ebd79a5c4d62c6a01d
SHA512 ed493a0bb34931ca11e481cc79e7d858421b4fd3da0736a68e660a602ba418cca23414bde2c331a5a6119d4a59e2867d7cfb9ba112c22594f6eefc944b668768

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_1.(MJ-TJ9302618457)([email protected]).zxc

MD5 41b9ca4377606e5fe17a6797653a3e9f
SHA1 818a22fa8aa80c18424ef5e71919a1f8c4763f45
SHA256 a7d535fdb3b610f6dc65c36fe8f31ecc55a7e36a9bac4367d7eb5bc487c25d9f
SHA512 451d062f15def456dda1a6feee522c214cb54b10c7c01974f7b4707126aba3bdfb94ef55ff39556a54254fe6f2c992f55b15ca0710039250bd16babcfb372ead

C:\ProgramData\Package Cache\{CB0836EC-B072-368D-82B2-D3470BF95707}v12.0.40660\packages\vcRuntimeMinimum_amd64\cab1.cab.(MJ-TJ9302618457)([email protected]).zxc

MD5 67c9ce83fe10618eef8bc0c61827de1a
SHA1 3779590a3eb97c0eb7db766e48ec36bbd6709527
SHA256 eaf8543b69bf78e459e1bd3c4568e504d94e5996519046ab028140b618d29023
SHA512 e8a96362f09ba3a954f6030c5a8aa3c7e65576d0ab81b75598c3fe248548ad06852960172e1f2c6e834390657a4eeb06311e96dac11106040be567673508f9aa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_1.(MJ-TJ9302618457)([email protected]).zxc

MD5 9b3ddb671b7afa1bcdcae08772d14d58
SHA1 bfa600bd2be1e97f7c9e30963ff230fd1fcd614f
SHA256 089fa16f6033a9a36db9dcf148815b9ca5f18c548b8007cceb86c5b0ce25ea16
SHA512 0019f4944e402f8fd55695d2b18fb23f63d497fcb87cb4606b3dd750036fcd1cbc98054f73193948c699d0037494570217ed92b119a1aa779fb71d8d7a60bda9

C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 a5dea98ab51d5f8bfb30badb91cf1242
SHA1 4e9823d2731f05c0c4525920c5b6a4485b004a12
SHA256 ccba150ef4153dd8a2b15cfbb4b76d4ff88f00f1e6884f464c8ba355cf6c80fd
SHA512 2401026328e9bcf9935524fa9d72e5fa961113f2a1d644d733bbaddc83ce3a351d270f557e03090de7419af46335267609b50d980fd89e523e5b1b2b9cd8e39a

C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 0d11265e67f37219f2039f75f4676f07
SHA1 2aa5689b346287a4c0fbf58bf16ee67336128faa
SHA256 e61e2a625b0d85015601a2a9408f4f872f49ddf5507041ca48f679be61c0b591
SHA512 5f61cb9d8ac2be91be5afca6ca0b74e2ec035b61b956a798f787e67f65d808d05b5f25ff685d4e8d97e2c4abf5bc4fdb653a169327d4026032c35cc57d22c88f

C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\mpasdlta.vdm.(MJ-TJ9302618457)([email protected]).zxc

MD5 b2ee4779ef3bf1561320227ed31b885c
SHA1 16d50481dc69ae3d61d74e692936758dc2770777
SHA256 0e35167e78667ce94be2283172eb0487c940b81991be848491aff2af790df454
SHA512 b3573d195604a483e6eee089305359d545d61e20f11aaf0cccd13029dd5c052ccbc64f4965c52b3b754aeba32b8394802eb074f457a030d35ba62ee70aa2b945

C:\ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db.(MJ-TJ9302618457)([email protected]).zxc

MD5 a501e8ee18f70ea7bee7c2958fddabf7
SHA1 5e26954abb5ef8804d36ff6108dbb9443fefa3e9
SHA256 ae9173ad3c40ce4fa9ac421f56a282c23f88baf446ac8ed3b0cf19c4b89fbd46
SHA512 09d929fcf2041de60c40e253b29911e17940143c998bdce3ef360b45aea5541fade1461931504cd10ec0bee53d67e3cbd4568ab821657da3e89b02e7b68cf369

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSSres00002.jrs

MD5 0e7cf0390ab91e3480ca45a54309586a
SHA1 614ed63a6b45c388c357882f5f7f376b37c57b3e
SHA256 ab7fa38b098e385c2dbaa6b56b4f4f7fad95021c67f1809120f557c7cf589ad9
SHA512 7c4655b5822ba857cd45dc4d59f903fff25937b410491dfe81a19529d019854f7cd016357a6c285b1e973e089f051bb4bf82a04131a6bdd9cc243d7c91d26033

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\PUB6INTL.REST.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 7912f6d28be51dfa61791740a5893f9d
SHA1 7aff1a357b9258b43524d46288fb652c45dd6328
SHA256 17ff51b28d3f955b130e90c30381b747818b3f6034ac01b8376c97025400afb4
SHA512 40d5807a9b3ce082f4eb8cb9672fb07898e0834472ea9f7ea0dd31991f713784782c214cce7ba879ba4bef90866d3f5ecbf8d7e24f3ef9f006688b5ad0d19d1c

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 f0dd6f3472385ebe3849dfe5e623fad1
SHA1 6f4b89bcde74f5cb50d253ba2191384584324ca5
SHA256 7688184d199813e176ac9b8793442bc0a9a4571efca345a45753bf04d25c8eab
SHA512 2f2a0ad66586029a265ac8de677a5cbf6dd166b21641017bf6427a770dcdd64288d318597a3593d8d99e5676479e3f122883d5c82e94f669bd33276c843dc6b4

C:\ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000014.db.(MJ-TJ9302618457)([email protected]).zxc

MD5 843d52ff8e7e6fedc52f1ee9de1879cd
SHA1 3cedb2868eaeae343ab13cb0da5f380eaf7c91ad
SHA256 eb5573bd29ed3067c75e944c51200b38ed74b2597b96f1b4a4b1dbe9447f4d4f
SHA512 967afb054441403fe08da679054979899f122d4b561d9a8fc6e5b6b2a00de337a4932eb63945321cd4d4d6bc826cd12f0117c1b7fc77f316b4d085582e0de26d

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log.(MJ-TJ9302618457)([email protected]).zxc

MD5 12a3d8929c5d24fb2c2301c9ca2c89e7
SHA1 d2ef402fd79cda1c34977c726e22ae28e5d7940d
SHA256 00d8753e0cb11e32cde5571e99cad19a5192213260c13afb5eb00957f1cc6fa0
SHA512 b73fa985f69b351bfa66a1d5afd0026a4b51c8b102c494e0261375e0ad77fcfdae722433a120f56d22e22248e203b2790c9596bf452ed8d880595eaddbbe7842

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\OUTLLIBR.REST.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 cd5ff4fdf0ff37b4b20b1c2e4ac7dc69
SHA1 47a3b4979cde1ff74dfac70b396e3181f7943e40
SHA256 c3614b9077a503a10a2c7ed6af25227d8bd1f624c58744323ab5c423b5c29afa
SHA512 c82decde6632e0c6a33e49385e5ce05ae17e1c48cbfd1e85757ef77dd39c60e7427c5c59bfcb8c9381b21a5994399b57b8627d0ec00aac346bbf2039e183a6b5

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\MSOINTL.REST.trx_dll

MD5 64c78af39bb00833b8cdca0d21758c42
SHA1 5a15e24dfc75e7861e44129872595ada69c6b07d
SHA256 d8b7f70a5397f36d6b54b57ade67495771b84026d358b0362af7b4177f992698
SHA512 fba16899e9fdd95bf7865a5aeafe19c08380157e086a02b87674fd081e4b45898d10e2912831b7c853e0cd29df19fc88b8544240eb9d288f72aa1f5b86b5f2d9

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\OUTLLIBR.REST.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 a3f75d24f8279f22105439fd766481ac
SHA1 169389cd9cfb8440794dee14a1d88a80f61fb3ea
SHA256 95ac7645e24f48420216270b425ba56b05d0efc4a7838d058315a9957f5c7610
SHA512 3c8305fdbb89ed068b809b9bf1e1faf3dadf66bc766a3383ab0d4209898f97861d3ef3ad6e4d34c51e69e1f7a7c64efaad9f0754aaf352bd03044bd7b0e9e38d

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\GRINTL32.REST.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 781409f0db28f8789f4de265d7a670dd
SHA1 24fc89d51a21af7a660bd360d6955f8550fdb321
SHA256 acb5f0fd5ef2afcac0bab528dbabc419dce393bce1ddb5cc4e3c504fbd9e51b7
SHA512 69df79793a7b44d14c68f2213c79c7190c5463bc6201fe30572e924be2af497cec16f97870d3ac1990670c930f06514039b72632f876d9dbfe759ee5a64e5bb4

C:\ProgramData\Microsoft\OFFICE\MySharePoints.ico.(MJ-TJ9302618457)([email protected]).zxc

MD5 0b3aad7ce6d729c46d7cbe1b13f6832c
SHA1 8069bc2d5a7d57fc4208998152b40bcbdcd7da43
SHA256 0e573904765509b03d23dfe900d70ea317ae284194c03088785075e3d7d7f170
SHA512 6b96f8152996f9f7451b438ab9f725083fcebc046941529d9dd5c40bfb9f6d8c30989101233ebe8c84f46f6d0091ccfa05f688f687d0b4544eda630d909af87d

C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help{E1E8F15E-8BEC-45DF-83BF-50FF84D0CAB5}.H1Q.(MJ-TJ9302618457)([email protected]).zxc

MD5 841344929714d04cf218d620b9e53b38
SHA1 39f6695faf23af04354f02f3a2221df5b11dd655
SHA256 f5ed496ac7af8774494a2cc0200f1623f5ce3a0bac300c0217bcce9c97459569
SHA512 fc73595fb584672296f2d2a76c0aa5c65b310620601540b61181648362e91b28afae7f1a00f8c09d80e8ae50ac5303a0c047991e495deaf09781641526d3b3c5

C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_MKWD_BestBet.H1W.(MJ-TJ9302618457)([email protected]).zxc

MD5 f3151c09314cca0776a4573efff88622
SHA1 051acff12e04a9abbf5933086b92e29b15a6f02b
SHA256 d494a4d494a3d3368c7453b2792ea9682ee3b2ee2952896581eaa4d4dccac4c4
SHA512 0ff3efd2a02fcbdf2ad3e3242b1fccdd30180c2a055be2e7fc9ed3e99df2c60c6669208d8933ff7cc553ef0b6686e991b60351f6864b16b8d1c826d548d69e45

C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_MKWD_AssetId.H1W.(MJ-TJ9302618457)([email protected]).zxc

MD5 0692b373d87608c6955d9c183f01cfc5
SHA1 a8a320fa7952b58a8787d5b92855fd2fd8bdd195
SHA256 2bf740532ba6d9238c0b4fc19a9d4c9a9f89872fa8ebd72ff90437787b613df6
SHA512 cc990d2f554f1987b4988af6b46e4dccd5d38edb61f3210494e817c009fab23944b7e6503888770c54611dc54a294d750674694d739c7d2c846a3ed2dc17ccd1

C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help{7E352021-69D6-4553-86AC-430B0D8FF913}.H1Q.(MJ-TJ9302618457)([email protected]).zxc

MD5 e6474d102e6ab6b60605764be6fa8b02
SHA1 7eb122144c67ce70e7f056648de95b99d2ee0414
SHA256 c9e0f9a0c968bb82c3437abc63df1cd5dba949da2c0677be8a880c227703d222
SHA512 46c5faf0acd05586f3c98a949441d5693c41a25887e925e7fad66d627710fd0f1ab8cd33b3b0c830db0f7b2d49862b57a31bba8b250d429e9cdcc5d489a33724

C:\Program Files (x86)\Microsoft Office\Document Themes 14\Apex.thmx.(MJ-TJ9302618457)([email protected]).zxc

MD5 b88a1879d836f3b9593ad62d434fa192
SHA1 cf114934bb04af299f8686c430b2cbb86f8b4f7d
SHA256 18987b9ed108b0b3a2b0638a0f21e3d598627b0ee3e8705e43084d7f02cd8c28
SHA512 b620c2f470f06f0db136800b9b1dea60acc4449ff555e03e25062198db60a7b294cff74610d6e727000d8bd35ba05ea58ac0505848cc79f40b6f182ef40a9187

C:\Program Files (x86)\Microsoft Office\Document Themes 14\Horizon.thmx.(MJ-TJ9302618457)([email protected]).zxc

MD5 46376aff366d109d235e30b6a7ab23d3
SHA1 f69332169a19dac151dc4c14d314a0c085acb46c
SHA256 a9243c9725b164ad21bfa9f4e5ccd9d2881726977318c66235e30520d9b4144d
SHA512 56a17f1ec1be33e734971b8b79e8d735a97b113df34f08dedf72fc5dd4d5e7bd2572203f9f790b2d4d909867ee720693c38f140c7d01e3b316deb8c5d9aed0b3

C:\Program Files (x86)\Microsoft Office\Document Themes 14\Hardcover.thmx.(MJ-TJ9302618457)([email protected]).zxc

MD5 b0c82ee37180002c7ca24bbc45b4e7e2
SHA1 9a2ca6654f1881f7130e734f01b55d9f6d9a9a2c
SHA256 424c49df0294d45f4ca3806544550f1130d5fd4e0ac5091d72f89dd90b6bf656
SHA512 c88c8f2977515a3e7c0c44b45824611f7e1585a87b82d3dac027926d4ddd77d46bfc10b3f03986dd721e744ff934d16ea66bf5e56d127b06f1da1e9a42383f60

C:\Program Files (x86)\Microsoft Office\Document Themes 14\Paper.thmx.(MJ-TJ9302618457)([email protected]).zxc

MD5 6a505cbfddab6ba6163ec3c00ec3101f
SHA1 29d2103f226c78f429ff083d1034faa883b83e34
SHA256 abea6eb8c1d4fedbc6c4f85fad001055c85a94db4944e92969062207eefcbad9
SHA512 499a4efc1564a4f0c8f0652dffd9b90958ded58693928667803b46d02794f0bc3ea273d12be7fa671b3f0b2aac43c0359c128019c69d4dedefc7201e1abc5d60

C:\Program Files (x86)\Microsoft Office\Document Themes 14\Elemental.thmx.(MJ-TJ9302618457)([email protected]).zxc

MD5 5e6157f9d68bf56c39c097676f9dde25
SHA1 4b3a7ae97602a5113c55724973ae3c7667602334
SHA256 6c36f38d57949b3b1c1c30ae83a7715aaefaf4c23e777e41ed1f81e2b4904eb8
SHA512 0256c7a50b661298147c364cfd6b2605f1188e87c98db1303e9a928c9b252941a68b1b551ca619f416de8e6a9b172559e5786eb87b1ac12be515f2f72bd74d0c

C:\Program Files (x86)\Microsoft Office\Document Themes 14\Composite.thmx.(MJ-TJ9302618457)([email protected]).zxc

MD5 fb0a0bc7cd9610f4896d754663326db9
SHA1 683ebc7e7c6a53189d92444fbc7adeb0c4f571c5
SHA256 0a610425f605ff5c61cd9b569c84d6df5de57fb90d821fa0c0e1b360144067f1
SHA512 b3034ec23dc5892fe026f636e5948df407d4097a4135a4f99b68ddacf780874c09376ea03ca916ae584c27ccfca9873177b4f4f9d9a9f57aa95c35dd4d1c7082

C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_MKWD_BestBet.H1W.(MJ-TJ9302618457)([email protected]).zxc

MD5 40e9b313a36f8d0557ae4219eea1795f
SHA1 6bc68fa5f112a1430c39b654c630762d3b73d51a
SHA256 81bea55f0248f85bbd5e1ff8eb400fb75c7a54e305a7fbd97f00e1dcf39c566b
SHA512 97d7845a686605dd64949aaf5f70e1400967b394a1ecca089973165051f602f8341968bf1cbe0f22fcd84c6f88d3914e9d7ba703ec719c1003136a02fb43c6e1

C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_MKWD_AssetId.H1W.(MJ-TJ9302618457)([email protected]).zxc

MD5 db55ce7fc4fb42cc10fe2145ae0c185f
SHA1 83884d884292fcf0c24053d6e15bc90856781e95
SHA256 1705a88012457461db506e368f98b0bad3b2dc58b761a86fdceed801dd30e751
SHA512 2a2d5ea0c5da99b3226205da2861d7ade2dec0cb81bfd845f762c5730adde20058235a19e6ae307a32c6af02afde8d8985799eb5c6f862413bcd0e4a7470d2ca

C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help{92F2118A-E813-4A4D-9DE2-F96A9DC02C53}.H1Q.(MJ-TJ9302618457)([email protected]).zxc

MD5 80c04bc6c8d191bba4fd19c9eb3f9431
SHA1 79d52c7d7c7186aaf215eb74674ff4da361af88d
SHA256 0d65f9388ab124b26704f0cdcb4a7e93a092d66087403e52e55c755a087baea3
SHA512 b991da7b5f1d90bafa2c60f88073ab2e24a28b282dd953933dcf65a158d26ed99f58760c662d4bde730ded3d002f8e46895a2416260c3a7a4cb5fba4fcb2a94b

C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Apex.eftx.(MJ-TJ9302618457)([email protected]).zxc

MD5 6745725e86ff65863ad553fa7bdb47c3
SHA1 411e7cc50a1904b514e7d4a3377075247330a80b
SHA256 9d0d4a0d196f0298c3ab1488ea0a55f788f61daa45d4c3b5ee6d40459a73738a
SHA512 1837acb435ef3e5f8ed0531a502c29fdb47525d7b81c6485a1e0b2b9e760fb4cfe4382494c9ad7612f0df69fbefdf686a5400060dc0b2c0aff18c5c25adc2eb9

C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_MKWD_BestBet.H1W.(MJ-TJ9302618457)([email protected]).zxc

MD5 eadd91411e75911c6b0e91dc3b20cbc4
SHA1 f38b9797299502dd1566b6422c89a5fc2e3f7e9a
SHA256 f631ffdb0c1093c073fc2d7bc2262034bb832e35cb61ae94d865ae81a12f1ec8
SHA512 8ed5dca1c9273309658c75d3a33b348decef3ecc07f28a035e3e6678b31e2b5fed985d543d7859e49365719f7ed26636ee2ee0ef44d8848ff68e8a910da3e11d

C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Newsprint.eftx.(MJ-TJ9302618457)([email protected]).zxc

MD5 211f45817c9be40ca736ad6df7542588
SHA1 c72d0705c537fdac1d72c26c091c74b26337141d
SHA256 548c71a57121fdc72311962767ac95ca052d32e4f166355833398e19081d6d33
SHA512 b7fb827184b51b2dc98e9722c3772a1c8dbe6ac510daab72830620a53dc92bdc55ce9acc83c2bfd25c513963d9f1fa96193a427b669c6fd1b02a2acb9ad62f60

C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Paper.eftx.(MJ-TJ9302618457)([email protected]).zxc

MD5 5abce0282bee0950db2aaf0b3247cd11
SHA1 86768f340587fa577e1bf4e13e780f6af987738c
SHA256 d543f4999333a243d9f1952ad0428da38217805222e50fbaf68630aeac5ab286
SHA512 4e6dd6d5e146c1a20911e4428e29f9f49e0c62a6a7a0b59bdc9460fefa93d38165f3d439e4df96ac5cc8284ced85077ee705a210e67e9e36936d21d3efd6ce6a

C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx.(MJ-TJ9302618457)([email protected]).zxc

MD5 abf3bc206ab9894b81f3412da0d3d87c
SHA1 66223fc883a8d37be4331f01cfdc5089a0e46c9c
SHA256 e4ffacda05ee20f2358eeacce83bb56651a0bdb68ed2936209b12978d79741a4
SHA512 2be8e513ac3a80da41a1ff529c145a7e9f29945ba3bc7d655087f2af7ec8224515ed9102e31fec3a71398391af3c2940c300a7ff30480eac1fa53c97a94923e8

C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Horizon.eftx.(MJ-TJ9302618457)([email protected]).zxc

MD5 78034fb68f2151f1cc40f8fe5a45f14b
SHA1 59e90c3d4fc575d6885900e93e670cc26e51afcd
SHA256 b9a3b67ef4336de88e614a80d89030739f340daf2f7370a35dc36d8e2f7180b5
SHA512 e608e27f2373b2d1aad7acf385353aabc5b84a14fd0a7431ea90a4cf0a9f65fe74a31c1691fc87117653b7429cf82c2f0c460dc44ea426d7945008af6d57dc49

C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Couture.eftx.(MJ-TJ9302618457)([email protected]).zxc

MD5 3168a9727683882d45edb3289806666d
SHA1 6e0a30099db0a5da2077478b99352898b632e39e
SHA256 b04a2246aedea85468977c0f392f09c782258c411617003fea0012afd4cf80e2
SHA512 6b98c0d3d04a3c420e4bd65f2060d46da47ea898d7084417e8a43b859d4fdefa3a329fc28d7305ad0e9da372f471f54a409b5bbf159264ff08088d323ca31cb7

C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx.(MJ-TJ9302618457)([email protected]).zxc

MD5 887cc6058a044dc5722e558ea8cb8d97
SHA1 992ca7f40375a5fc135ee1e1216d2f87c14bf569
SHA256 3d6535e129a030a44e8dfa4423d5ac419afd8af1583d6091f0e911382b30bee6
SHA512 e74966cb2a60eb8d15d10fa27ae5a3895b06b61a2eb2f947b582ba243d9450a928ad055106137d187799931ad88cc4c8d67b8a0848e9c2ab4adddbfd3c805a18

C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.MMW.(MJ-TJ9302618457)([email protected]).zxc

MD5 6e6ecc15e19595d2c433a6416ef6f7e6
SHA1 490a86d5650851c1329f461023a032af0e10a837
SHA256 966f5e53f34f889d3d2a2df96f835c01486208ef1bdb8f82922b1a8a619a1216
SHA512 ef0a681a973202a8588b3ae0f6d84ea71e5ce6f228e92375394f0bc8111d5622f248ec326db382f3753e4c75556b55453cf6217b6e975c3886d7d48700928e1e

C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_MKWD_AssetId.H1W.(MJ-TJ9302618457)([email protected]).zxc

MD5 2b6c79d043bc1e74e35e4112ee775471
SHA1 af0868ed214f8c8bf9552d0e24428b67392d010c
SHA256 f60c5c4dfe57fba686f8423f0f61fcbdbb2b27bbdcbc99d394ba0dde95fc83b4
SHA512 6be18a3505ebd8dba45eaa0fadb34a5da0cb6782468b58d9e10f8add0c1168bf0cf05b86200a20397282e7dbfbeabd19a6485c8fb2dec190245eab98133e287b

C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_MKWD_BestBet.H1W.(MJ-TJ9302618457)([email protected]).zxc

MD5 3f1407872f2387cdc2aaafcb510d3029
SHA1 29274d38d48de8ce23fee289a3806f03c03c3149
SHA256 3e91f0a109e50be499eab1bdb3c2d5530d710f043e09c467c60d870fbf5ede85
SHA512 e93e82c5884d1d1980212ed2c9586f8cd2598472d6cb10bbe068ee754064256cb92e3b540f43526e29bc4e5afc0c0c3f30f969d23e566a7ef01699216258eeff

C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_MKWD_AssetId.H1W.(MJ-TJ9302618457)([email protected]).zxc

MD5 25ce3dab0f8f0ad8d28db62f1aec00bc
SHA1 44c17cb0fee72039972d6a0005148d1bb927bab8
SHA256 8b71b2b09baf025f3569e3a2b95207547346e65dac4795fcedabf09fd6ad55b3
SHA512 8ba15ce1b50d71922e78b1f9ed2d979f9865cecce8a268aba91aad46fb8488825a575f4bd96dbed8449b794b9cfbfc95238ce45cc43efb554a4a14a1db711f76

C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q.(MJ-TJ9302618457)([email protected]).zxc

MD5 2ab997867eacb6e0427381312716d73c
SHA1 b20d161275d600ce9a1d48766fd8153ef23f6ea0
SHA256 6038ab651587b1704bf9bfc80cae5d238b687fa37c6be2068ae2ef6d83508024
SHA512 ceae0642f76932041a280a8a0eaf9c84b0b08cf5daa86426042bcaeb1814ccdb9d58138a4092d5156fefc713c5c95e43cc926d57773001033d381ea90cd9aed6

C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MKWD_AssetId.H1W.(MJ-TJ9302618457)([email protected]).zxc

MD5 ea930b450a2951c5f39dd98bfccbb7af
SHA1 1ff48b062ca98f7a0ba27a05200062cde8ff3859
SHA256 e658480682b7a1c46e82ddcf8fff6c57eb402ac25f8ab5881c0efdc4da85fb39
SHA512 32e60b8521c03bb90a1c434bcfde4d3762d851f6a09ef12117bf231cac48dad05405e261a1ac5d26c8ae0b8144ea057b46e5ea3b8a21fce8515ab281e4a95130

C:\ProgramData\IDk.txt

MD5 d4ce4b4ea6d189ca1dc27c5b74756b35
SHA1 00a6a74a6ecd058f8354751f4e17c267c579d83a
SHA256 e3ff36770b51e3c5733be9b22692dce707bb74cb7a51ee6f79861891329def7b
SHA512 f6fc1a2a5e10d33a0204b522cf8754f05f55c515d6741d143ee1bf03778209aa53d384e1c21add36d4c245ad0391207f6356a3c0daf73d01e7a1217d51b5bd7a

C:\Program Files\VideoLAN\VLC\plugins\demux\libogg_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 4ae234ebbf95490d8f755a1da32751b6
SHA1 073c1a144dd715d1c2d5f16ed38fc0c26e3e6866
SHA256 2bdf79c38fdb297c6622da8c4219078503505ed8927d8e03cb019787c09b6854
SHA512 5e7116c1ea00da0212ba60eb248b28923f00ee1f0cd40b54e88921967b404c1cc96e03b7c34a626fe8ff70ce62f588644bf901d50fdf656f3b86e5ad9c500c48

C:\Program Files\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 983eb3ebf778fe6eddf5cd3b526ac787
SHA1 29bcd947dfbdbc428aaf695f4b725367918b7bd5
SHA256 106efe217a4d5a1980f8cbe4605816534a192675fe34d7e4d55cf4682de6132c
SHA512 c32a22ab4c2f192751cec3b4e3cb725e54d05f166e5d10f74d6279a46339c07f1341cc78816cd03819ea8b198afd876d09c2f98abb953ee2f326e679b39945a9

C:\Program Files\VideoLAN\VLC\plugins\codec\libx26410b_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 3c1d2d3905d789dad1dbc23a9822d09b
SHA1 9f1364dc19985791c934c8283413005022bc826b
SHA256 98c3a40f1c515f4717560ab94310ac577ecd9df51956cfd67a7c2b47186b5dfe
SHA512 efe19f941607eecb60a98afeef37e2a7e38e4ac9136c001963da4c9a7116bca62356356ba04a9793b3488876653e461f3e0c1c6615495ae0e3759a48b73deffc

C:\Program Files\VideoLAN\VLC\plugins\codec\libvpx_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 5113aa8d266eafc3f4ff9e2ed42f2225
SHA1 85f73a0631a726a4af6dc97972e08418380bf787
SHA256 4d47e9cecfa34fb262e9f2a3b07e11d35455227766c6098bde39a8fab324e777
SHA512 03d1b0c1a05bafb061f6cc53af031e17ceac96070a69d336dc39a1077fb2e1df0cb2469ba92267c96c2a69016a88a0d6cfe9d4ce870ac46ae9ee898389446e2c

C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\1033\CAGCAT10.MML.(MJ-TJ9302618457)([email protected]).zxc

MD5 1d32bd12cafe3e44e8f7b1a7c4c139d1
SHA1 ba1c10c8f80f860aa7f00c924f4f8fe07f62016c
SHA256 1545c992e4d6ff6111c25c832723cecdb6f7f3add9f34aff2343b2cc75bfbecd
SHA512 19aad3979db8520c621be9b9217075374b42f61baeee1673de3f47206cd0cc11301e8a9651659763b869eb0c01d62957627dc17172865b33244ca19500308017

C:\Program Files\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 d9fcf888fa441c63408e82f791a31141
SHA1 3836432d56e2c82d1109a4dcb521da9eb1c3909e
SHA256 d182f1745767038965c9fd183da4a384a2466df898b034d470685c6212781585
SHA512 78b3f43d4b20b4f77678e8501616ea63976a260966579a65c3f1893c75d754c46c5a6adc3d5c5d4bf85c6e7983a4a200f9d4bd581517ded6a4c7baca28fae2ed

C:\Program Files\VideoLAN\VLC\plugins\codec\libpng_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 b9a43ed1b3e513121ae59ce15a1609ae
SHA1 30e60f21b523f70ef4646fe00a8467c14f33e231
SHA256 8cf64ab39c138edf4699092836f1ea9aceead029d079c534186ec1f9938a78a0
SHA512 9ba33eb384c6a9c642a66fda811d6d1047e2a379599f968d3973eb76064c9096d666091e8dbfd82103743f3f74e00473f2048fcee408f8d8ba7ddb52ec596dad

C:\Program Files\VideoLAN\VLC\plugins\codec\libopus_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 7a2bb9b199f022dbee61d43dceb6fc35
SHA1 b6719194eb042e5c726b3bb2072d28eea5a4247b
SHA256 5b99dbf353bcb98f9ae7cce00379eba13d9ea418139eb093b14090b721bde5cd
SHA512 93d0538726da898de789958e511a8ebeafd1cea89b192bc0b0c53e59b5ddcce9393be84b4641553a37cad17bac63b1f6edc113437ffe24f1d097394bdcc4346d

C:\Program Files\VideoLAN\VLC\plugins\codec\libmpg123_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 68069ef9fbc6f88e40d20880fd7de497
SHA1 ff6c18c5236beb8068d0b7ecb2019cbb3a08c200
SHA256 7d0ff7574de5292b310596be2abbb784c01d05188159e664083d3a7525582487
SHA512 4eba7481a27f933dd7a3f33a2a8a8d2048e370c8911da8ec58888942f7d378c55061de281aadc861ec8cea1e60843ccc52a0666e09eebbb3c0e57fad8e65083f

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.Tools.Applications.Project.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 c5eb50c54398e6b202501c1cfd0fed43
SHA1 353f75de199bde121cebe4d683edacf872fb48ea
SHA256 5e591921d3e8f0f0555eb07a4ed06afae9e33759f0db864fd74b3ff3a35c6ccd
SHA512 d250b1dcabe3c030eee0d5d5b2a895aeb95373664c558956168ce2380d140e920326cd545606e4403339d474273a81df3eb30eb333a052aed6601f44da36d475

C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 e4d63a0a956b0d08d48b382330a352d1
SHA1 a0299e12e126311747b1106b09a2f8952be6ac46
SHA256 12e2ad6942730e81c7ad0ae353f3c1e11634e8e1bbf4304cdaea5b3c55fbbe47
SHA512 a322268afce2bf91f3606685195587f3779f373fee86a2d71b0cdad6de34b39b53c3a390afe247a54c8127bc81fd5ae5800ca066271db88ae445129ddb9c872f

C:\Program Files (x86)\Microsoft.NET\Primary Interop Assemblies\Microsoft.mshtml.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 1930c0824f502d25b6782c44a0eed284
SHA1 3fb5cacda086878b0ce8e04b62c5d066f2491f40
SHA256 1cfbc9ce26becba52028969b687d4f9cd9a23993660713054ee5a7d36483440f
SHA512 3d5d5b3061b5fec153e27901abe7ae21a184651e2cc2f98e8a2f7c2ecc388cbc278cd59dc0b260990fc84e04f99ea7cae89672b1fdcda73c65173ac088ca1041

C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.Tools.Applications.Adapter.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 af0e79bc29fc3ffef01ef91dbeb4b7d2
SHA1 9583297e0ebe0324ff3465d28382f2a86aa415a7
SHA256 cc12a7a66f10880360f1425cec938ebe241d964aceb3119599ab634c4b6cfb8d
SHA512 730a15dd68176ec25e7fca1dd7c9cf65d1077a3fb2e39fe35158f7e667bac5cb65320c7e523cddbe25f7b36142fc29b31f209c6a2449ed39d373d9b5d916ac2b

C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Runtime\x86\FeedSync.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 940d9e89c933a94c86f87f103ef20f51
SHA1 983d3d378e40cff82e758bb08ecf1259c321c90e
SHA256 2996cf6ed229bcc73d54be5e45500718d0ba85f4e3d9965d44083ddcf1b859c5
SHA512 2a60e69d6250159a6412ecc3cf4021b1b004562729c36fd16531592b96b64a8d5ded2e187c52c11406142b0bfbe0b47522efdca880153cf86ed1fa58bb5dee76

C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Runtime\x86\Synchronization.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 9657a6dbe91dd83469e78c62463634ab
SHA1 ff1a6dffab2256490a3b859a03ad1da205a02f1d
SHA256 426987bcb5182a408d57bf9690aaa78b3c508bbe500123be698542245e3451ab
SHA512 9efc552b1fb0f8698b32bbc936f06627f76bbb0cbb123648a842ea11f834185611affb59c5a03398cf8e8a11b84a3bff274290f6144e951ac6fc54e76a62d972

C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Runtime\x86\Microsoft.Synchronization.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 15034599cb41dffb0d06e455ff1bdb11
SHA1 a094b8fd6d3cd63da5baa19d0084369357a8e873
SHA256 a218db2e5bbb21972531d8b133ca984a45eae1242db23e3103c1cce8aa58932d
SHA512 c0eb172ff508562b413bc6d660e1aac0e4b8b48052b27727ac7fdc190a816f57a66749958156caab85c3d3adb258c8a4bb25d26a5b2711f6831d8433e828582f

C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlceca35.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 9d4f3a92a4e559a837dfd88067d12c9b
SHA1 cc72550a0b2b097b138e51a5d1138e4c0488c221
SHA256 00d71fa10acdc38685d548dd3c95957e32301116f5c0e6108019abf4e86333b4
SHA512 7d1f1723b3fdbb7dd6c35d21378aa9f225748f4675a5541fd50a2ac9a5cbb2b3080c6c066d7314af90746e77e0a1f693a9cbad5ef8918baae386f121b81d731c

C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlceoledb35.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 eee85958ce4505f4d24ea56308ef3450
SHA1 95bc6f5afbae388253bb65be95df8afffcc9a9d2
SHA256 66a1c00da1fd5cde1b3a495e2407d54cc75cbbfd8e1e9f15645cd4de77c65a74
SHA512 9a20c41555e5eafd32e362d23dd757977583a292df10ab3dccdbf8b4aa7bff89ed0e49aa614c25a4b7b0a7cbcf6be402de4c92c48dc8fecbe1c903cc27752f44

C:\Program Files (x86)\Microsoft Office\Office14\ASCIIENG.LNG.(MJ-TJ9302618457)([email protected]).zxc

MD5 4ff93c7deeff3fbd3c4fb0107d4d9df5
SHA1 9aadf93ecd92f3c0d4bdf0a011fc506da00385ea
SHA256 b21156470e2554ff1eeb634ba4292e3c0f35165b3273e8774ad64d97f81b42c9
SHA512 d5edd5eece17e8ff5d68f4f71cdb765c5ca7a9ecb1c7971f0ba7f27cc78af84856de8af6df63965c65fce36ce37edafbad0d83387166e70019555e573d398bda

C:\Program Files (x86)\Microsoft Office\Office14\BCSRuntime.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 ee6bbcfd9a2511811d1169b23e0b2622
SHA1 0c3c0c3f2892b794b42861f6a7537f3b728d1de2
SHA256 18dc89f1974148283caa6e1b10ae5301f3e2f6850e04edbf84ff5f815aa60ba9
SHA512 01e7bcec92f2280dafe4345694d2f5b9d1c44a2971d6c8058c226775bb731f8b553d8829761b4850ab5518896138cac0ac659cc879cafb3c07db555dc903cbc3

C:\Program Files (x86)\Microsoft Office\Office14\CSS7DATA000C.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 eb267c43a03e54099d848c128684b597
SHA1 30f3693c493a5748eb678642a2f8fbd2af67d5ab
SHA256 80a4737c0e4d526b7080eff11862d640a8696eb9a8507e55868c21bcd31d57d1
SHA512 f2c694630e24ff189fc639ea4539138aa895544f8d8901d4471e37e46330c5661a30baa7d50aa849319bf6c059063fcd0685d98c4a58ea8ef7a982ddc661de36

C:\Program Files (x86)\Microsoft Office\Office14\ENGDIC.DAT.(MJ-TJ9302618457)([email protected]).zxc

MD5 bd984baacc9a77d0f6838238c0f38c66
SHA1 031f035b563cac4cdd7f865543a571331651c72b
SHA256 32c73cd05aa862f67930286b62ca24c0c5e1330cb07bdd031d4ad3874772f3d3
SHA512 4df10753a081e212e3fca1c9b8e126f8478610a51684754c601b4b26b480ecac2227ac169489b2096c0311960adb5d0cfbd9ffb3d1bf0a49b0c38b8cbf289f3f

C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.BusinessData.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 d5b30e4b237492679c2bb3fada43a350
SHA1 f5cb1749609744d6dfb867c60cc9ce67d6b25904
SHA256 cc1caa47f1aa956af3a1708eca8d64504480776c0d5e884c998d1fa87911d133
SHA512 9ffc0f29754285307a85c37791328475778b73a388bf9886270398506c3b3b1230c48330ed0eb44d245e109a23659a22e90ab5079338deeff3806c1757e1f700

C:\Program Files (x86)\Microsoft Office\Office14\MORPH9.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 ab66538f81e1a73b1bbcae295bf40449
SHA1 60707d110d9732e15676a7c15c71955bf042eb5f
SHA256 849e73811e962d09bffc7a81e5a751d7acc904e43323274b79264b5bee150324
SHA512 732db4258ba29775feb2297f8f6b38896a5b5c2485fec4a770b606a130ec38290ef3670d7f1bdb448fe427248e66ca3a622c46b650fd21e1ee879f4b3e7a12cc

C:\Program Files (x86)\Microsoft Office\Office14\mscss7fr.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 ea8db12349f4d7b970c841d08d042003
SHA1 253af99a796ce0d3221216df01935f29c697c825
SHA256 ce71d13d2689637a6995a74383e2ef9f49594661d94efd97a6905b902d411e42
SHA512 52f98058a00d11f684adf72440f3ecdef2380aaae1161b084db98659710535938c0c3568ced2eed78b28dc3fbe8a17cc3fad53006b1c95d7426ee699f55a63c5

C:\Program Files (x86)\Microsoft Office\Office14\MSODCW.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 8f68ca626e8a679aa66a2d5040ea0920
SHA1 10e65b93826c39bd07688606139f1843933fdfd0
SHA256 9e2138a1efcd2eb57db70f3f57f84aaa1a094a6618c07d15c4c6daebb865eb72
SHA512 80dd5920a76b31612b3055af99793fcdf27fc01a5267d39e5c231bfb65c5794e5cf65bae3ae3b1af32262c7c9a1f09adde807ecbf16a2db09f8dac662da4e542

C:\Program Files (x86)\Microsoft Office\Office14\MSTORES.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 f2ff40b293a034dc50ec7894b3848de9
SHA1 218f780fc4ec3831743ae3ddab3f777d7c9ca8df
SHA256 f241f28086ab23715f4cca126227cc12125982dbc2a95525f94dbc72d81d8e1d
SHA512 ba78dfc9618743d85ed0746016b53251e00b2b93c8d082fdcd77452f3e704d608ecd7ab9049e929234b4607b154e23e1a4059b312a9b7bd0c49159f3f2f044c1

C:\Program Files (x86)\Microsoft Office\Office14\MSPPT.OLB.(MJ-TJ9302618457)([email protected]).zxc

MD5 23ea2f8e9c5208397408adbd81a215b2
SHA1 c213be290b15114462eda1dc46568c2ae9d4f85c
SHA256 ffa5e017c7ca90f04f90548907178788bc9dd36b796669126a70b3ce7757f624
SHA512 dab7ccbf6aca6be03aabe71b995e14b71b3671556d9281a3939ef4248b45b3424032e321066cb88624c50c85ca262520cef834599261bcaf83741eaf10749e08

C:\Program Files (x86)\Microsoft Office\Office14\mset7tk.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 685c445264efaad8097ff6d2f2ce47c3
SHA1 eadbceea7ddf8b10eb5d4b2e2565c8ee8d445f98
SHA256 8b16f1e22828dfc4fe96f32131fa822deccf46ee304fc24575bc37d72d202d11
SHA512 b711015695edcfa95a1171239f6f86153b37756b98986b61ed281d84c71fd0342c44fd78a20f6d308644161f74bcd2a7cdc076a8da517bb723adcea953f9d260

C:\Program Files (x86)\Microsoft Office\Office14\OFFXML.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 ec608ce9f0f135849bd9d61ebcd5cd88
SHA1 0cade8dfc2c15183ed04ca9bebb0171cb73a754b
SHA256 c3087ca5b175bf147cf6945c7b4e48a88a7c5d77c2438e726bbb81e864ee2297
SHA512 bb9807fdf3d1c4e07cd27d4e0a34fd00afb7b197f5348affb4f89649e3bb2aa5d1cba4b359010fb1583828db83223070d62e70ddcb0e7360a77dc67c75e5a06a

C:\Program Files (x86)\Microsoft Office\Office14\ONWordAddin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 408bb009631cff3ab7cdc21ba6e3a001
SHA1 e9684ad369e41382636d5664b447251a2d1d576a
SHA256 546e383fac1492854f2e30f313aa049cbd635fa47c8b4a0878b8a8f255cbf85e
SHA512 a823c5c54b0706acff92a859d36807022239ab33ac46c8128556d212a4adeed9e811affabba15c2b15a4467e9439e4e90d2138aa82040cafdcc85a07f0c622bf

C:\Program Files (x86)\Microsoft Office\Office14\mset7es.kic.(MJ-TJ9302618457)([email protected]).zxc

MD5 e21ec55bd163fce3c303cbda98cf3706
SHA1 9a0baa5d806bf8b09abfeca7420071e30b819c56
SHA256 5f457412e81c151d1f8ce61dbd269098b06ca80368ef7f05cf584d92182cb193
SHA512 7d39469921672b2e48dafd93ddf47d056e8166232501b944423d0416bc47e90d889a9cadb6db80e9c0527e1eedb1cfd8ad2040976ca856cf2ed98943318cf3e7

C:\Program Files (x86)\Microsoft Office\Office14\mset7ge.kic.(MJ-TJ9302618457)([email protected]).zxc

MD5 8cac0b50800c2c1d493dc60c32763cf8
SHA1 e9cfc924f0e795b696710a20d2aad22266e475f1
SHA256 3ff2036b16c9028d274b5c8a43813b07f740856bb4b085a688c5e7c3df7e23c6
SHA512 b98e686170ae485e822d907441021e02fa2f4d249a11581c2345f338ea18120d02cf0230dcda7251f7fe52f2f237c15050ca44cb076983a5330f256a61ab6638

C:\Program Files (x86)\Microsoft Office\Office14\mset7fr.kic.(MJ-TJ9302618457)([email protected]).zxc

MD5 913a35a44f29be5649d27c719c879776
SHA1 ce7c7f479fd533cfd9865e7840758dcab4590546
SHA256 80d43981ecfa6035a9d78f8e595f2cb1f2d90a730f3e4f4b7e35136b43b706bc
SHA512 92016e1bfa28270093fa936bdf0230b9100a8fb9cd77d45ee6fc4b4f9b3ca5b46656188819f85687aaed981a3c56a6c62ede351c27d75d5b86690c8cb1333f49

C:\Program Files (x86)\Microsoft Office\Office14\mset7en.kic.(MJ-TJ9302618457)([email protected]).zxc

MD5 41811f1dcfac6e6d5183d52c08b8a0f8
SHA1 9ec7628df32f56d258c9e4cff3135304b0241d04
SHA256 992649f565e44cbacbeda050cee64ded5abda41554487878d95027b6b2958a49
SHA512 ba8d42d596fe1a4b00498c1fc012ec8eb91ef15c02e72b6d51a5aea6b6eb12baba3eb801db8611aadbc548498afa4d4eae2f13a14aa0d55a7b62dc658915960e

C:\Program Files (x86)\Microsoft Office\Office14\mset7.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 f8dff7838d5ae0501f5f91323a1500d7
SHA1 f5073f128350ccd1477b75336fdf0b5f3af988b9
SHA256 7507956c0e98c47849c0e255eb09f8bfbf93ee4bfda695fe98d6ce2ef6357708
SHA512 86f29a833e4f581f45c290bbb1b817e45aa73255e58c1dd247e991da5087cb1e6fb003244de4b1a3f245860d2ba9202bea7f8fe7aa05e7231e7a52bac82f0b21

C:\Program Files (x86)\Microsoft Office\Office14\MSACC.OLB.(MJ-TJ9302618457)([email protected]).zxc

MD5 382e8b957c2892bb7f67ed21365217f7
SHA1 4442eca7b5435b968c7ffa1dba96a376b67dc17d
SHA256 2f6508c4ed1f3ae80774f95c0566d57435c0416b50f9cc2406fef60bd4769d06
SHA512 7f7467f77a1ed709c240e821d38a650047bf2ca8401b0f1ec283718a675da0695c0315381115894e2ba8385c5ad36d8f0af5621bae4f4969e5a80a72525b1867

C:\Program Files (x86)\Microsoft Office\Office14\misc.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 81d1f5de25e3e0b71a43920d472526f0
SHA1 1b6621f3b1b79e7ba801c09b0d2be092de685a14
SHA256 0064014a6a3c72901303ac793b42691d5fb05260616a7cd2a0c2d46ce0b401d1
SHA512 28eb32c19f8c70b0c84696ad5bc951bacd7645fa39714437b3d431b2127f0b0e9c09708cf79dd0e1473915c5f814177d5144ff6d3c65c7087932670a094e74ee

C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.BusinessApplications.Runtime.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 86f4738cc5efa64388a654fd0911c5ba
SHA1 6e3f0ce1a7ce46c54803f9d4c87f8de47a88cca3
SHA256 d5088d9c006c5971acb2e2e27c9d3c746501e648953cfdb1eef56454461b1ee8
SHA512 00a1f63f930ca75e4f20a0f90ed83bf1c8244012685ed28b44f2017c049be4cca3d3894e2455d317794a6b9b8e51b1a70700398907f0e1935c2e53efd50cf9e2

C:\Program Files (x86)\Microsoft Office\Office14\PSTPRX32.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 a47eb81c020e2a7c1b102cacc3423021
SHA1 8d97ae45a4831efad0366c10b2fa546b3445d482
SHA256 e68ba425f028a9256294f881f3fdf1beb0316cc7e562da1ecddccc34fff516a9
SHA512 8c05445a1a33ed99c37d7fa7297b6d4885651c2b112da566ab5fd89f69a4068fb6f2ca76e138ca41d17db0e063c3df2ae3cecb6f0b670c692d4235215c4383e8

C:\Program Files (x86)\Microsoft Office\Office14\SPANISH.LNG.(MJ-TJ9302618457)([email protected]).zxc

MD5 a2faca90c948488893182c9b24b548fd
SHA1 bf886e1377d632a3044d7310a6ac478cd2e7098f
SHA256 3ce92cfc5867b2383bf5add275b8eb191aafc451b4c648ee01a41510e0cb5cfa
SHA512 423c6b4eddbae45bf8e83a3e1411c7ceb91f96d847226a7dfa1db2a535736ee9ee82b6c68826b2dc7328383daf6df4e9eaf4e487c5d2f4f4fbad9a3cf58377bd

C:\Program Files (x86)\Microsoft Office\Office14\Wordcnvr.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 3fe2f7ac7773bdab656b77f43b528b95
SHA1 13a3f10a6896b8339aa03696d3b1578790cd395a
SHA256 9e4664cafd1b7797b1e9d582ddf05cef837746e1af61cf761ac9c35b66cadc34
SHA512 b7e3e2e4d9c566e18343a447e2367d089a302cfece8cdb7d42f1af3b17155ae9f8786afca4a275101effa625a40d89757c796147bd07b66b069a0cb7d3903b2d

C:\Program Files (x86)\Microsoft Office\Office14\1033\ACTIP10.HLP.(MJ-TJ9302618457)([email protected]).zxc

MD5 8181c5e2b416bca0b4976210d8aa1d57
SHA1 fe98a9bb3c5c4254024985c1ec5e5e4b396c1525
SHA256 9eeb75f5adeedbd1d21d979390c32ccd5873a40b787a4c67b7da6615a950195c
SHA512 15767b586d277d926ec96b01a0dbf6db91c1bea079a93f23ae452bae57d535969134a566c954490402bdb43041ac6c37aed53e621726800d06c3c9e5a02cd866

C:\Program Files (x86)\Microsoft Office\Office14\1033\Discussion14.gta.(MJ-TJ9302618457)([email protected]).zxc

MD5 c1a944d866a611cfa6b8a3371a5fafc9
SHA1 e0df20ea43154ffe33758bd33d5d5f4a56e26fa2
SHA256 3dd9d3b42229305d2157cd21e7a8be9144517e1e80e01963e0725efe7d5436d6
SHA512 006310b2d3cbedf6c6df93dd5ebfc0dc945ff739b3a82379dee5d9d904486d10ee4b918695abbdbec0d314a38cc7b641a4b9fa27ff916557b920e6336f4a7557

C:\Program Files (x86)\Microsoft Office\Office14\SCNPST64.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 16a7b5492ff81f765a976a57079a213a
SHA1 877a9ba53efdd82b454249c57ba9d421d5978544
SHA256 9b10d562b7810d653c46de39a8d2782f178da7aed6b7ba5b5dbb54c1365f0c9e
SHA512 22bdf986025d0d817ce287313be3b165133bbc4e5c6a99d0b168d610f887be398705da97792586a9e0dc5960737348071d2ee2e2af14ad812215a3caca8d73dd

C:\Program Files (x86)\Microsoft Office\Office14\SCNPST32.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 95647975f2b70e9701731d50ce25eda3
SHA1 3738b0dbea5745f586b3045aedb3c4ea547dfd46
SHA256 6266b2a647218578ff0f9910e43a7c183d08af9c7ee63864d168d90f48e8276f
SHA512 5e4d637f84ff5daed58279d924162e3e7f6001f8780b24816d67e10b55977257806d9d08721eaa4d560d3a95f9be2564a36a85d2bdf826ac10cda2767a7bbfd6

C:\Program Files (x86)\Microsoft Office\Office14\1033\INFOPATHEDITOR.HXS.(MJ-TJ9302618457)([email protected]).zxc

MD5 325c85fe74d9cb894a000a46ecc01aa0
SHA1 c1aa213147ab93bd840fbe6253765bf08c9d4424
SHA256 edd8cab98f3162dbc6021ee4f9a77f876f7e634f0311a58f4a703b47ca513073
SHA512 78f6235b83d321ec2be6e055b506aff2d2b6026fa2d597a225e4e9216e15b43d11a2633a8890047e1213b5d8d56f907bc0311f7228f810ffe4f8c1c61eb87aea

C:\Program Files (x86)\Microsoft Office\Office14\1033\MOR6INT.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 9d5757661d2dc6a80c74c8675dd2f8a3
SHA1 340b4015a9db0a27a2b5561a9740d32ac8cf7493
SHA256 089c3aa8c4b0ee240a822f731f458db3f28700e77d14235b57fc311e6e89c0ba
SHA512 0d43838dc996935903539ce291d7d388d24987712b076844755b19939ce5ad7e08521aafe9c70abe04944f3ceeab86e9f1e9623e7d07aa5236c4a63761ffb8cc

C:\Program Files (x86)\Microsoft Office\Office14\1033\MSOUC.HXS.(MJ-TJ9302618457)([email protected]).zxc

MD5 72ec9dfc298d1781b2468e72b346fd50
SHA1 37d500d4b559a3b4afb7f0ee5481950609a08d21
SHA256 b7a6b6fb416b00b688f9245a341379ccc8b0b7c89b9d44df5c831c2e2d2d16ab
SHA512 6283dec74507a7fd06ab14040fe1cf680d07ffd598d2fd75fe7ec5242c4397ba300af5364a1fa64c856171489a441256add0e042d5b9ec5eb5a8014bf8051ae2

C:\Program Files (x86)\Microsoft Office\Office14\1033\MSTORE.HXS.(MJ-TJ9302618457)([email protected]).zxc

MD5 54167f360feeb03cc2394ed9114b5b7c
SHA1 982782b381a70db0995337f88daa497ca56baed1
SHA256 ef614da2789295df324fe1b70e242771e909a80ebf9a9d381c22b56707559fec
SHA512 1ebbf4a1bfa80e5ea21e9ecc835074650ecf150238afaa7235fd58aa4289aba96004839a29cda0d99401c072f87af300745bc1d7ba74ce32c4cb621568cdd4d9

C:\Program Files (x86)\Microsoft Office\Office14\1033\MAPISHELLR.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 5fef9147f6b9ce95a523bec5167b1fb5
SHA1 ae8cd36c1c3d8625644474f6a9b7031a2d1dc99c
SHA256 756103d1d70b4b42c49d8c62800bf6deb2d942ddf789221a5f326192809f165b
SHA512 1e0736f6ac63f4904bbbaff99636b884b5027b9e689d2017a4e37fff0cf2873738539e5d7e91c548b264f112c8b59d04ebd7e95a39ac9db84d81ce99df7288b4

C:\Program Files (x86)\Microsoft Office\Office14\RTFHTML.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 2f58390eeeee81388d6b21e650b476a0
SHA1 1b6b09f6913d16d43b560790dda1020ce1d8d65b
SHA256 9aa046ce0b28ee0d41e62c2765bf7b7df6678f9b3829411c243d63efff29535c
SHA512 b1598caf7904f340f5c1e80d47c9fcba9b978577c7f36089480cceeeec4a67acdf73fd04eea4a2c985f5ce8eb2421bfdc6ef6c44d94f5de745409862a26dba18

C:\Program Files (x86)\Microsoft Office\Office14\1033\STSLIST.CHM.(MJ-TJ9302618457)([email protected]).zxc

MD5 7b2fdd6397172e6cd2e2f261cd6e6c4f
SHA1 85eeb2a2c17a76d4039c631b1ce16400d8b22e9b
SHA256 aed97bcac9504ff7e0420ed5fb52dd3d079cac0c0d208a92f6463ce51f999328
SHA512 e8ef67ccf91a006b32e006f780e8fd576f62eda0b7baa2f133da08b05adf2f1ed5f1b0bdac35023418631cdb46c78597938d8342ad75a7a195e278d9063b194d

C:\Program Files (x86)\Microsoft Office\Office14\1033\SOCIALCONNECTORRES.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 e6ed16157694cc24b196814d8feaf35c
SHA1 9b19cecf5b01826e5053a17dd42d5039a6176dd4
SHA256 2036ba042d333a0fdbeb502c988a9fe318903bd8baeab4b54588c665bd4ddb11
SHA512 ca5ad088a6355a17dd54f0f5ba276a51e096240765419370f1a7a4d53df845beef07dd2d1b4643c75bc71f402a6ba84576b64d0ec00ec34b7fc61b51c6b4fab1

C:\Program Files (x86)\Microsoft Office\Office14\1033\XLINTL32.REST.IDX_DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 14ae6ca3f411580b72b2faba98bc4b47
SHA1 71196c867b8983592696ac9ceb18319a5d1947c8
SHA256 fb22a20ea7cd7cdf2638aba58db0f1a58ef27de13bead634770bebbad86ad352
SHA512 aaa7cb68f39bb874a2288f4315a0be845d13a95d7e58cd6799d377903ba3c632d428d9fa52c8e1f2784e7b6f0095afec12b3b62118715d3aa9459cddfb68c9ce

C:\Program Files (x86)\Microsoft Office\Office14\1033\SETLANG.HXS.(MJ-TJ9302618457)([email protected]).zxc

MD5 96be5b3276b607d74c8e980cc7e2cfa0
SHA1 ea03588201ded68492f4f563846505b723e471d9
SHA256 2ab9ce1584a85f11828078802a9083556033f2434386b6750bc4723330440115
SHA512 888bd90494d71c81633aabe3fcdd10082551c2c575911b2e67c1bc12b13a030a9ab0a5aee723c081011d4b0d408511a0d431bbd13029e68b20f63e5270f89de2

C:\Program Files (x86)\Microsoft Office\Office14\1033\PSRCHKEY.DAT.(MJ-TJ9302618457)([email protected]).zxc

MD5 a112f091ef364dca94aea76745e87562
SHA1 37b77fb47809fe024629ad64e4f92786f98f4054
SHA256 be8ab944fe34ae47570abc04000853fc7f085ea8637a3d5bda1fd924abf535a1
SHA512 e922c7a449a58a8eafbc9d009a94bd1627ad7483fbe48dc3fbc9db2d21b1c7fdfb99a8f1bbc9e6216f76f64816cae006202905d9214829a8a86dde91dde39bc4

C:\Program Files (x86)\Microsoft Office\Office14\OUTLFLTR.DAT.(MJ-TJ9302618457)([email protected]).zxc

MD5 64b0409171a668be64507a9aeb826e54
SHA1 c1ff9dfa83ff478c3e047fbbde9eb95762911d83
SHA256 6a35928cfb007facbe327f404264de444c2b88ac361f4e92c46fd6e00f058b38
SHA512 b65a8c9a78dd96f3a23458e2cc6b5d5db93d86cda4c492cdea1f52bf266b84968399c64433238907ca8b86986566ef460057b6d24b3cc6d777a1957c6ab7925d

C:\Program Files (x86)\Microsoft Office\Office14\PPSLAX.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 cdbb2fa99ddc7543fb39ba0234931f1f
SHA1 e5e30239c2b2724e98ede67d304b11db0f63fbc0
SHA256 aec6d9848dfa389f65fc6e39f917bf071f75e6370894ad6be4affb9df1e8c9a4
SHA512 129f42b2f33f7ef9d1754066082662ea7834678f83169bbf278e53bcf6f2bd0b7fe7eb9e05a3ccec3dc26dd42d065f1e3f7a4d4d09dc4e79d1e43e117e379e01

C:\Program Files (x86)\Microsoft Office\Office14\OWSCLT.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 158e24b4ef2e02c2cbe39bd3c6a45e4f
SHA1 31b34b047980059b25c094168718c43af83e620d
SHA256 378381975bc3ad362d4995fab72775ba0a29386c325829441208a1ad5bbb8c22
SHA512 a69191e97f10949bea7f44d81cf1355786e62475dfb9496dab0c55b02af78bd2452fa4e9850c053d27c9a37e7ef19f06881ca819e1c5270221a309a76ea3c4e5

C:\Program Files (x86)\Microsoft Office\Office14\OUTLFLTR.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 54a3138e4bcb42bd475b9b88daa07468
SHA1 52b10bc3d06fe8f204d9aa8e5346062c342b6089
SHA256 43caa0cab008a3b7bff08dc2bdb0046c2727e9760ad4d8bd0cea42f9663fd5f8
SHA512 91c3cba2dcd63f2a8d6699a6b0c3639b15116b9c53477b0e5286babde5650f56d85d025ac0c1289035c2c9ecd6c91bc9cc98dead08a9864e196a661e61e8a6af

C:\Program Files (x86)\Microsoft Office\Office14\OUTLMIME.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 d817366ebd5a337b48883d51a829222a
SHA1 ced5abb70a5c77aefe6d72bf4f84abcdd9986dac
SHA256 dedf636f263c889d11ff88cf535516dd2b9fa9370f710c914108a8d1a9694b17
SHA512 7bbd3f895c2b8e544fcec7d7dc433e78e7ec6c03abb02317ea1af6cdadd398df14f9ebd82b33eb4bca75f76b8b41ead0c3df31e7f326aa42bfbad1ab3e37699f

C:\Program Files (x86)\Microsoft Office\Office14\ACEDAO.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 8a7f11874df4afb11a914677180949c0
SHA1 502d82a999bc88faf41f18e32bb24478d6ac56ba
SHA256 888cdf1740bf07846e5aceacc2e68a2acff61038e6df28109ba70f0e47bb119a
SHA512 f0327f6be230feeafd401968b351d89e48103be15e841fa6a7a7ca373d1208b9c476d032252022f0d579959a38fb303bc76741b35416a044cebb47dc3bd091fc

C:\Program Files (x86)\Microsoft Office\Office14\ACCWIZ.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 4c296118bcf18aa68e9f3e6c04252913
SHA1 678d5bfbc7031f3733078377ad19ad96f1f77fc2
SHA256 61bed7257e253f86f6c0955c1e9f764628b31980bc425aeb77a6a855fd781003
SHA512 4e814cbf0a6336df296779ddfe9ff4d6802aa038e4b0ece9d76ada534dbc0b0869b5aef2a08626e73172e042e91d5e36f16082ac377cccc1e606d46879ff9bfc

C:\Program Files (x86)\Microsoft Office\Office14\ACCICONS.EXE.(MJ-TJ9302618457)([email protected]).zxc

MD5 f6c4d36beac8b8d2bbba77c98851c30a
SHA1 857e941a7e231f7a9e96fa55cbb59c23cad74d9b
SHA256 bac3cdf130c0e8aa5aeea01d54d900e70be4b1184c4ced7e76f619eb7d4365ab
SHA512 27a4cc190acb1293f49a66ef7dd08f2b100dd43e8c84099835b1f12c07dfd03c6c745253600e1e3d5c81a402f822508ecd58a48c1f4dc686cbd1af9d10714725

C:\Program Files (x86)\Microsoft Office\Office14\ACCDDSLM.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 4aca291525bc6e7c8c3d4fd43e9417dd
SHA1 a3299c2061636049f457425de5156b3217634d17
SHA256 6ef7c711c2349e6c4377c1d94bb6066b1989f3873e4442a8313eefb05b1df9c5
SHA512 ffef84b8b16c3f665040c7b46797abe6fcb2acd75337bb6886fd0f7c09abf952e20c884f89bfde62d0e041eae411916af27e26b0e34ce6bb87f7e502b57518ce

C:\Program Files (x86)\Microsoft Office\Office14\ACCDDSF.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 f83c9e2dbd4aa428e4898e131d0b91d5
SHA1 af1a99c31319bfe178ff1bc86d6c1572201e0d2e
SHA256 c5eb0e2b9cbbedb467949f514964c0f4e27fad39cfd9e21efc241be0df244c45
SHA512 331d5abad210c03062d480c8b1e4288ed3ac4684c0feae947bb2fe417331c69d01b11a9238bb71582e60561de06abad45268ccf01530847ab036a0ac9493f985

C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\BLANK.ONE.(MJ-TJ9302618457)([email protected]).zxc

MD5 89830e2fc9b976b987343cdaffdd746f
SHA1 b8ff987c2d4a979375b426e9e1f58da00621e740
SHA256 50e79891700013711b0ac15ba728ab6fae25393d665adb30551ffadd665fb945
SHA512 bcc3f3439b57d7caf85be0c2bfc016609ab56b1c3f4324f95398565d97b48062fafa67531cef5394a6551db855fc73297d2abdd255dc898e275e39a4679e7d67

C:\Program Files\VideoLAN\VLC\plugins\codec\libjpeg_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 01f7c48f02fd081af2af321e807ba3fd
SHA1 5b76f0c821f57c6c817ef9a42f83631af39e22e9
SHA256 816ed90fb48b9e1dc9db3c62d144136dbc7153a0fd71effa26a1e474cc13ff55
SHA512 ff60dfd0c997d412e0fc7eaa6c7d229a66c9f80cf70fc94d34dbe2ecf280b43ad99b1074e917e1cb8db3b7409182202f9d57d8bb4400b5d426c727b76d526b2b

C:\Program Files\VideoLAN\VLC\plugins\codec\libflac_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 74cbd7d3004e8d386d2b378704984b71
SHA1 36e4301ebd7c2ec6f27d8ca7e7fd2204f4a0b247
SHA256 34645128e9c8694ed7185e0ca1680901d01c378d5c4566948ce9cd78c0340b19
SHA512 83607afca4983fd71e94c79e04e0f23bac81b891991e7b108aa41e5c6e0b5620cd397c2177b7e4bab5bc68d109fa9a1e07df54d4781f8635fbcb4a7cfa4ba04a

C:\Program Files\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 acc94bdaca3d12ede986d77b0a06c188
SHA1 d4f4218cc2cf27afd4c87a527cd559486b5a6905
SHA256 a826a641ce0fce05794f200c63e6230f522dde787ba37f8b37ffc3aa4945a321
SHA512 39576ec14c78a904aa91dff51b6abd785b658584a73fada463aea7d20996d113edd4b06eaa855e92a799c5c1bfa0576dc80e508b951d2e7233ccd1cca92dea80

C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\BUSINESS.ONE.(MJ-TJ9302618457)([email protected]).zxc

MD5 892ab82368e69a649ecec8ccb3f6261c
SHA1 9b9ce37711a2ca8e4c0119a9c6cdba51b5c87322
SHA256 c4ae123e877cd73305eb3d0a94425694c28c6897ba609e6cad78ad467ccfd051
SHA512 498293218d26c179fdc6aa2c644efb18aeb94820f801187530a487ad37a8ca05527b799d102c2405cee41276a60d65063b03c44d5494095c7c411d19ada62f18

C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\PLANNERS.ONE.(MJ-TJ9302618457)([email protected]).zxc

MD5 f8baa0512b3d5d4d589ff36a745e1f3f
SHA1 45330f799bf53db464c4eebb0251f6cbbe255a66
SHA256 bb8b88b8176687d3b51dfcdb8e4c5b887cb1356da249dad94b24aa6dd58e6ef6
SHA512 4b8d7bb8f1fec5d9830149a51b42f84b9a4b5c3bcf7203a06d5cd56a7563e856f4c87db48727900c0b00bbd9641f4170836929d7edf8088510cd1be9445b6266

C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\DESIGNER.ONE.(MJ-TJ9302618457)([email protected]).zxc

MD5 0da9d683c0ccd42433564f23fe68e984
SHA1 c33cd38207b22888202caa3ccc33cb50b23ce687
SHA256 c3ab914c412fc8d2b69d36157e930900259340598fc4f52997303f980667ea87
SHA512 1ea2a2d3e6bfacad9366962a17d51790d6550f4197ff35bd3a89bc1bf75e6761bd389be81e318966a9eda44dd1d719438910f8642edc528fbe3b3f3ee8efc2a4

C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlceqp35.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 b92a342da3becd64b7a4ddcbfd77431c
SHA1 b3fc1a23c0e1bde7397e98bd97ffb228b041005e
SHA256 cbdc3122c883b39552dec4060640efc44bffc74b277a7a352098b30e8a9b4d42
SHA512 47458102a93321eb9ba568be648c872b48f840ba4a224211ebf0f3368da7cd3141c9c3c5bc4106c5d759205e4944b0a14dfb65b13cdb4c08aec6935e4583d16c

C:\Program Files\VideoLAN\VLC\plugins\codec\libdxva2_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 c4b9e2dc5e3b211a2f6dc58bf1359bb9
SHA1 229d9358d26a51bc2b3e6563395537f0301abcfa
SHA256 6fcafd5406cc881af58d278e4c071c02dcc82a8a81d8d9a22748bc44593e9541
SHA512 c0e0df96fa1cd6e30a1ae64b2386af988e16b982167a6b79b80f960787bb32f9f7f60965308212920deff9ed9c6f49c2cbe270737a7a8b178194bd1010ab4d68

C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\Contacts.accdt.(MJ-TJ9302618457)([email protected]).zxc

MD5 27352089c0a841c7d1a441a3111a5f88
SHA1 f114b61fba903787d4eb17be86e0578b924f2c4a
SHA256 cd6a233c3658147eb5d3ecbdcace9bba5438c97adb0a051ea874eb9d56f5e93d
SHA512 c2092b9d5d2b96c3836a5620a57ed56125a5ec21f0431114ad9b92a1cc26f2da7f693ab79983f5bdbade0be9adfb0fdfd2776032463633a479d1c44097297958

C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\ACADEMIC.ONE.(MJ-TJ9302618457)([email protected]).zxc

MD5 020e7e1b01a41ce403dfd53220056fe1
SHA1 f17b25eb9b12fa6048e40fe20b174a3cd2cf943f
SHA256 e25cda838c02503228b02f89127ee4a808e0bee2a563df7fc5613113352bf651
SHA512 b523a760f1c1a4fa732ee41b2d40806648911f330d94d3e23988943234d54dd0848cd9f280a5987de9907abe530fd491c1c98276593fd4c187f5e020bd5305d8

C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Notebook Templates\Notebook03.onepkg.(MJ-TJ9302618457)([email protected]).zxc

MD5 f8548c6de2007279a6a898a294fd8890
SHA1 4ea5d5578a39e0ee0f08897046523e07d799fa24
SHA256 49b6349119618cd174ed335f367adda175a8f8f21013fd62b195bcf48e842f94
SHA512 32baf89b581d4e57705f169643231f5cf85be603a12dcb8756bf8f703bcb52c41d4035a747f663b020164252d873e1670d30ba4cabe2b2ba628417f51f217c29

C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\WSS\1100.accdt.(MJ-TJ9302618457)([email protected]).zxc

MD5 c2e7e04b4db8b9871a86ad11d2b2c4ab
SHA1 270b0979dabc1ab912bb76e759417e665a2b4dc6
SHA256 f0114bf70c435ef5580d1c6a8787930a620bd2bd02dd96ecffc1ceea2a5c38e0
SHA512 f681a0c9186cf2eef4b370bb9ae21b35b4b9e3b3843c3b6b01cd806a2432fdf2599b3054c4e1067b998b185adbf91f879466c6a72ec4790d35f9a01471cab228

C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\WSS\107.accdt.(MJ-TJ9302618457)([email protected]).zxc

MD5 a0fc59fd8bd976212d0349bda1f0a76f
SHA1 4e0c2e2ac0524c2d85576830e4c6b80c08628e46
SHA256 141f0d0593a2332bbf28bcb6a7308b6d20772f6f4f03b6758f58ed29e806899f
SHA512 fddc2911b333ef8ddcfe7939225f8bae47fd216c87301b329e813375479479b1d1f3bc3ba70f3efe67a17ee4af0024f4a9c38623fc7ee3a0fbd1fcb1084761e0

C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Issues.accdt.(MJ-TJ9302618457)([email protected]).zxc

MD5 9cdcea4bbafd34814d8425a6aaffc5b9
SHA1 bf0037e5c4857ad02d78ab62d62e55100783bb15
SHA256 6fb89f01a51cfe7be95e38aeadd5ac0e9b8edea5cbe6343a15c3a21b647153fb
SHA512 bf1cca759c431df9524e308912e32ff2142a11bd4c3f39cc2df4d783aac10d4bd3c83e617b8eba915e5df665a4c1cc300855e1d1e16173e90f01595a0c1299bf

C:\Program Files\VideoLAN\VLC\plugins\codec\libdca_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 9ed2b7fa664c23db3ce262e6da75464e
SHA1 459edaed49e94817264a09ee112bd243db5dcd66
SHA256 1926c9243bf37e7a29e0b5fac66d35b93c361ce0ce00109c47aef3ed7cc85520
SHA512 7646d67d9ce859eac829cd0c893537a5521e930b0945bf9ad3a40ba34432651ce082504fe987469719c3ad31156369cfebfeb43a6de3f65cc4491ec53b39035a

C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Sales Pipeline.accdt.(MJ-TJ9302618457)([email protected]).zxc

MD5 5c49e12a2b99f9c6ce3e2b20dded4bbd
SHA1 6b1c70099925f1360df46bd94cd0920cfcb5a5aa
SHA256 f72ee657b33b25aee836450b0b5762154a780d48a38ee4fb6e02257aa8d95991
SHA512 0f53587419f67bebc6e605178bd315f552b43b730e7f58a9217aa6352568943a38c6e89808c50757bc9f98a9d1144ff2756952781126fd89564d934e2cebfc22

C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Projects.accdt.(MJ-TJ9302618457)([email protected]).zxc

MD5 360c657a2883f114b1e18e1e4cb5f03a
SHA1 96f14944676cfd386fcaaeefe179a08e086295db
SHA256 e9778ddcdcc0d218f95e484abd97de3767a33a3b942c145d5379d30db3fd3574
SHA512 59ee02890a1a9af39ac336fffe9c8594d265ab497ead19e3c6b2f1cf2f60a54e67b6431bb93cb077ad8be8f600f80edf86fa8320ff09b30d2206d0c5bb080ef6

C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Northwind.accdt.(MJ-TJ9302618457)([email protected]).zxc

MD5 bab79fca454b694ad77ebaaaa2dc88a0
SHA1 e9edcac87bd39f2005b7f2a7145dfa6db14bf3ac
SHA256 fc2ef598c28dff68c7ee2b584a6ffcab46abe22b5660ecdf41b1da60bcfb0255
SHA512 5a4b3b9aaec9064ec65eccf4f96c35f96f410cb836f66fef53bd3c21cddc9799eabfc9a5528438da197dbccac2002a01c48719ec06ab5e02fef78ba8490a042f

C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Marketing Projects.accdt.(MJ-TJ9302618457)([email protected]).zxc

MD5 07cf0101faffff95a94654609b35ee57
SHA1 7cd5f044e55a4b5a69cb972c3dac44c23f1e6390
SHA256 b5e2d3cc87c5af099840572ea45785a1e038732644a1e17a3ff4598c1d56ed92
SHA512 72292f09d5f9807ae5a9723ce19331d64a88d972c672b46f535302f3ff821dbdc7ea588a4ed439ac4418228558acb326d6accdc683c706b0c62061ce0fd3f549

C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\MLA.XSL.(MJ-TJ9302618457)([email protected]).zxc

MD5 6d7f9d8ee9b82a753cafb68afc5c5360
SHA1 5b2798a2ea05d29c7955b1a60f2b1738dd308406
SHA256 443d5ac273c107c1f056fa981a9a61b84ac4f80f61b4c87b135bcdaffc258509
SHA512 f9cb8ac6344cb9533097aa875b75b79207c09f52708350fb8b1c9faeed8016858d30be193ce582d5f5c0fffcbd2e826d9da148fb5de52bf11ed083ae3292c6c5

C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\GostName.XSL.(MJ-TJ9302618457)([email protected]).zxc

MD5 3d6e56edc19e3043cc753b1d3b9a702d
SHA1 417dfb2bc6e847919565122bbcd2d4f0a05233dd
SHA256 6e31ac5832b32077273553f055125569365bd49bec62b0c889b0d323343cc4b0
SHA512 18a553875ebbc1be91e2ebdd21f59632c97acf85a1b54173c31f935eae00f3446d2057d9b0fde9056ca7ea8a1421607ad6117e46895d3668a138127c740c2f5d

C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\TURABIAN.XSL.(MJ-TJ9302618457)([email protected]).zxc

MD5 9b477bb2643da3868e761506ccea42de
SHA1 65cde38b6944f9eb997ded5bc2d8539a44d6ec5d
SHA256 70c047662b3434ad3e9d4c18ff4ef3a21bf151e77f3ff0a3a9d5d4899aad35f2
SHA512 9c38bdf9a3a7beefb8db83ada29104a35c90ae21012190d06d6b76ddd471c680330844735f15a1cdf020ce5fbbc0303df100df7002d3eaa9e4f37dae54b6df03

C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\SIST02.XSL.(MJ-TJ9302618457)([email protected]).zxc

MD5 e6ba864a2818f586655c6e41e7a113d1
SHA1 1c8d94b3552369b79add262e58ea12d209f32237
SHA256 9e055fee9d5da9d5095b93fce43adb8718674f2d27765f9ea9035095cbe377fc
SHA512 f9ac7372a02986d0da5c53e07990a52eeba82d1a6d1650039b6db0e42fab3d7f38094fc3bbc97084c4b9f398d2f5a421eaf9acb77ec9108bcec09ee771069882

C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\ISO690Nmerical.XSL.(MJ-TJ9302618457)([email protected]).zxc

MD5 6ee20b1e34d4300aeed8d11806cf2f85
SHA1 1b7cb04837b4767c512a15a59fc5d64a4a27b696
SHA256 4054f31b9f7b321dfd10edc0ac0a51d140d42be51c76ddb31bbf681f30334aa1
SHA512 5cd60bb044302d76a3044530df91c4ed6023adbd4edf1b6f0c3e6fe2988c826db9aedca1cc5b1f8c44b887ed6eccbe4393594c2f7f4a00341612ab8e7947146e

C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\ISO690.XSL.(MJ-TJ9302618457)([email protected]).zxc

MD5 b5c4bd4b345670a8dd3328a98c634f81
SHA1 a70a14e2435b4315c79c0fda5ffae3b94464751d
SHA256 7eec9c05e23aacb4078d8ca64dbae97c056a195e0f414d0fb22f89e24beb4767
SHA512 2bf326dc543512c6a25e85e21716274e8ed6620b5533c4866827b0f3ca6c4cadb4c0b51adb0583910faeca719405f0539c89419e29159fa30685d5eb3e9f1373

C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\GostTitle.XSL.(MJ-TJ9302618457)([email protected]).zxc

MD5 3956fcdde095bd7ccd93fccf64d67629
SHA1 bd9fea7abb98e8bfa7ad35f0824b19fc2f480fc1
SHA256 4fdd47a9247994e2cbde0d31ef4c061d50c12997e119db4cffbabf2aa22f7183
SHA512 a6ca9fe591867c896829fd0ce5ce24220ef0a7d9b1c18b52d93ce3b618926b2099ae6568d5d5d462f2c6d6604d13573df42c643a7c5fcf14eb333c4ef7b5cb4d

C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\CHICAGO.XSL.(MJ-TJ9302618457)([email protected]).zxc

MD5 14a9e3a295c542b9a31e88aa014c038c
SHA1 ad4b5527ad95db1b2ed98d51eedbb8826eabcb10
SHA256 f25df1b52857b293a4644bb9724d4e8e46cfe0a9cb38b120f48c7c865c5f4359
SHA512 f74af2b5b85ddedb456a0109109785a77c5b91169367b46f8621e96b5f173e095557f72eaa9b84a35c336ab193c1ac3d42236284e58daf012124bc77f23aee1f

C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\APA.XSL.(MJ-TJ9302618457)([email protected]).zxc

MD5 fb8323f91b3a3cc2797f80ddb9b24f6f
SHA1 563d0687f297f5f496313754f6fac462e8b3a537
SHA256 aa993db5fe6bdc16703ba5f2642f3f01a5439fca5bf480708f80bb86a242b019
SHA512 15e46a6a73e59a1455ed0f2605a63c1a5a95fd481fd684f666906264fcad36b822d6996da08fe89a39c0dc5eb549cd9f0767e52f9c91e14b341679e2b71ecca9

C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Newsprint.dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 e77a9e8d9977450d455f47b1bcf0a5c8
SHA1 1310758110c4c317e9a6603ec67b0b299d6cdc21
SHA256 f66ed1503e015200138d6d63a21fab49ce13ede5fec9edcc3cc4dd734c01fe4b
SHA512 a3c861a35154bc59c2702241dfec081834c1ceade73bf938a37795ead9f26f3290dfa9b06cdf8b67e8e723cc8e6b7973d9ff23f8beb86ee06a71d38908c1dbd4

C:\Program Files (x86)\Microsoft Office\Templates\1033\WidescreenPresentation.potx.(MJ-TJ9302618457)([email protected]).zxc

MD5 d8af29a5198718644ee254b395ca3847
SHA1 fa4b218c752b1ab768e00a4cf88b7d7dfd618b77
SHA256 169397044fd4e8a7ebf85d064b3a221a6b7e203acad1f0340cfbb16bb71cbf72
SHA512 32498fee06ece7b3bbd139f248a794a73268018b3f592522080ced87df5d1eda02c779964ad1d60f9a7dbc5eb72fd8bf0e790d662934bcf3a43d92bf5f5fe57b

C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Faculty.accdt.(MJ-TJ9302618457)([email protected]).zxc

MD5 0ec9ad462aee4c8acea87b8910317d81
SHA1 6978d08f8c44e2fd68b57b2c98018d6116071248
SHA256 34d42d6320c098d5b249e20dc13bee96383763b11036062431d2e38b7a9c0031
SHA512 125d454908cccde1f993ffb9243c5a163fcf6d67576f01a3a12fdbf32c4237d15bfac76f9b84cbd3f0aa1114dff73bce6415a23e0138d43b940aee56c7554993

C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Contacts.accdt.(MJ-TJ9302618457)([email protected]).zxc

MD5 91820178a75de03d47174d8b0d346c29
SHA1 96309c7a3d01eb3f85fbd58aef5938e36d6394ec
SHA256 30bba6ec9552851a0d50fcb7f2ff97178afb9fda601c23e706f29cbc8ff7846d
SHA512 6a9f294d81dc8b14adfd9c95f9dc25f93a6d94b09ca5127b5293c23eff94b65dde7a80e7fadb0ab59e88c532a2baa6558730407c209f3fad23f6564ff0313e1e

C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Charitable Contributions.accdt.(MJ-TJ9302618457)([email protected]).zxc

MD5 190a148c5cceafa7784e99cc94cd5769
SHA1 ae5a00bd634bd84f6a9bc99ee0c7d1d7d4e6c96a
SHA256 7e850b999db61a4ded5be6dfc1e506910607d85539ab589d6eaa4de426880879
SHA512 b504b04645ae585e3751dd7346b5a9b8b7e4feed1d09982d33afda79b79db3e33853f6161deee43331b7c232d402beace9275c605c52aff9bf8722334e52e507

C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Assets.accdt.(MJ-TJ9302618457)([email protected]).zxc

MD5 60e63d77a194cd81ff2104f3542cb88a
SHA1 dfe393542f7fe09b02871bf2fa7e1e0ca6b2acbd
SHA256 770c20de8036a72935ebf4be97831a39794a1c7b3d095f3a837c6703e49c8330
SHA512 40437df4bdd5ed13b0c4b6f69cea792763328e45c809f5e4b02f5697d0ccfa3956058d00d2520f08c989d83255b122d7be0fdddca7a63c1b217a203597d307fb

C:\Program Files (x86)\Microsoft Office\Templates\1033\UrbanPhotoAlbum.potx

MD5 26693ef41c5a4dad8256dac70abe6082
SHA1 893e1159726c2827462d89c0b12364af0537bb65
SHA256 4b47439449b51acd8bf0f7237ed422c2a26e87a588a01493140745b28ce29a8a
SHA512 2d4041c7d93c313794d626db1ce131ddce6dbcaebf97c6e4c812579e74766d6f3a1b299f728433de17b245999fb88f38663a05596ff396bf3102dba2c2efdc6d

C:\Program Files (x86)\Microsoft Office\Templates\1033\ProjectStatusReport.potx.(MJ-TJ9302618457)([email protected]).zxc

MD5 73f467538c8d1074cb355a2af27d8e2b
SHA1 bf1338c4c855ff38275473f89bb0500dff547eba
SHA256 083d7942c4f346e4c7dda9fbda6e49947388593f553229f4f035a475e4e429fe
SHA512 faaa521fb1aff1d973ced0fb836a2eff56fb099375c8f47d6988759905da5bfe0806830aab71ba1e1cedd47dce88ff8fb0799a5082fccd26cabef681e62b3f0b

C:\Program Files (x86)\Microsoft Office\Templates\1033\OrielReport.Dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 32c44a105af1ec36e98045afcadc99ff
SHA1 bf149795753a4c23a5daa27533abc7e736a140e8
SHA256 739333c78fcdebaf0a5fbac8295b480617cf22f4c97cb109b6b5ef9a3d78e060
SHA512 7213fc0e223975f0f881bbfd082f58c4fea402f46cfc01580421648162467881a2839fcbcd43120d19eb738959766aea1dfc5b7be30050ac721d00c1c00db500

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\macroprogress.gif.(MJ-TJ9302618457)([email protected]).zxc

MD5 e920f1e321f878dc3e85530a85ac3b07
SHA1 ef2bb939608ee5016923b7d1e3848299c02922b3
SHA256 6f1151c149f47e58a0cfff2d2bbdd91275d3acd04f8116b7355d50c830a2f901
SHA512 60827ed44d0d735d48ca3a256ca277f0397e35d30fe56e0031b6bd966104267a2f3376ca281742af9e7fed1609fd3bbcee9fa149dfd9ca3dfe90e8105f2eda22

C:\Program Files (x86)\Microsoft Office\Templates\1033\UrbanReport.Dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 0130fdadae2e1c937d981f5a94bf9d1e
SHA1 71bdd5ead13d1371bfb1ec357cd23ba70a4af211
SHA256 35eb84c86f6ee6c3cb1906771152b147f2dcac01a5ee8bf89045954ab776154c
SHA512 ccf0491ccf513c14e80e329cbe39c00188c9990cdc2bae60f10cbe8eb262538762b7c5e156c9ed686b09a302b6e749b2bc16dc0c7a2405a3fb77b41ea67a4756

C:\Program Files (x86)\Microsoft Office\Templates\1033\OrielLetter.Dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 3b2abdc0fd34c2663754526d20899d19
SHA1 7226335ac861c6c9cdea1215fc59bc716a577714
SHA256 7615da2eff87990e84ab5fbb9f2248aa715ca97a592cb35579dd635f64f4315f
SHA512 3eeec51e3558426f4720a6bfc242ea5ac55d996ebbd029737dbfd3696db927b260643aec924287fffe64a009b70bc60022560389ebcddf3b02fa49622cc66b90

C:\Program Files (x86)\Microsoft Office\Templates\1033\MedianResume.Dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 c1d1b6f44469860da05b2c7ca7edad98
SHA1 81d568685311446dd262004df132371e083440a8
SHA256 37a589c65099e967b3a994e3328da81882a913309a0d7d33a1d43819b09fbc9a
SHA512 3085ca240c20e1351be873288f35a9aba0d680ec3412dfd8c68bf79238d4cfd4c7e7b8e1e297cd75c8f16bca6d6aefb76139750dd6f22ac9117a245e0a8e59cc

C:\Program Files (x86)\Microsoft Office\Templates\1033\ExecutiveNewsletter.dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 eafa17e55df7bd00977aec798ae62f34
SHA1 f99786bc9b0bfbccb1e67cd77a4799a35a8c3906
SHA256 b2c773a09245026e32715a4c09ea03ab8a6a821096a32df68d769dcac74046b8
SHA512 026bb1cfecfe7c9231e62256cca96e574629d1590a4e1982ad882139d98861afbfa1add0fff85db19aadcfa2d2b054b7205ced86a4a427248a254bd752dd4d3f

C:\Program Files (x86)\Microsoft Office\Templates\1033\IntroducingPowerPoint2010.potx.(MJ-TJ9302618457)([email protected]).zxc

MD5 9aea51e9afa15f71e3f07a291a342dd1
SHA1 dd9477f2fad94a4acbba7f06cf59ac087eae6c43
SHA256 b274429e1f1046f9bc65aa2edf4c633e1fef838f8118218f26a08d29a1499079
SHA512 d6d3d32138cf88ad693dd5e676d49a492a689f62b433fa951451d7acd15d03c585192f0e6a31ff9b54ca3a97a39c1e230b98b5948607967b31b7ed6c60de82c0

C:\Program Files (x86)\Microsoft Office\Templates\1033\FiveRules.potx.(MJ-TJ9302618457)([email protected]).zxc

MD5 3e5665fe768ffe5b03a6933d2076a1e2
SHA1 4f4c6fe8b3a2bcc7f406abb3528eb673a009d9d7
SHA256 aa10740f01574cc0af54e5b618f8d225f4a5fdbd1e3299df3a383a1c8f472d58
SHA512 2fd85073926bef961cab944150c7b168d3e071fc96d7c474d39e72c0998e90ea1c8ebc412d2c0200801b7b2c407d62c3249b703c41542f5fc7392e867fdaa02c

C:\Program Files (x86)\Microsoft Office\Templates\1033\EssentialResume.dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 dbf94e1fe53011419856e416cd51e47c
SHA1 5b1d95dd665559ca11054c738a678b17fde9297f
SHA256 ffd6aa3d8e43024a1b4dc7c92b65ec48bf2f629a4c7b6c01f79441e0f805e041
SHA512 8d9ff763cdc9b18920c7bf40e9c6d4b09f38e79025cec3f13b66d071fc583486c85b10d27d40a6850f0d74d90bfeea91365353d77d30d1749a646613b6bc996d

C:\Program Files (x86)\Microsoft Office\Templates\1033\EquityMergeLetter.Dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 e7b14ec13d94eca0e0c3e6670bca650f
SHA1 24721fd220f24d1751fe77f1b7f40a1a5dc23f4a
SHA256 cc55317ee6ce0afb5082dab1d874bbaf5e615f820bb2ecff0891480c88bbd089
SHA512 6e70884113d5da8b3d070233322ecabbb2d0cb768652260b088f58d3c934136bec0de660f8d0c1b360b764085e4a66c62c539d66f73bebc0cdf100bab9f4c5cf

C:\Program Files (x86)\Microsoft Office\Templates\1033\EquityLetter.Dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 e2d089411e0096ae34f2c9a8eae4d37d
SHA1 330933d949679a82c0215df88ac3d7cb68701095
SHA256 a4eee66b7808414810004f593875a9e45317b18aa9c6cd00d599ba3090610939
SHA512 1aa8fb75668639788a0ee503f07491f475575931172fe5ac7c5b23e0ca5b5727d3802bad072bb5aa577364b3e53e0dc37aa163b061a71d2031e11865a8784f47

C:\Program Files (x86)\Microsoft Office\Templates\1033\ApothecaryResume.dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 c1fac2f135540fa2dd3fca3fc4d187ef
SHA1 64ab9b22f8a52afabb1a140d079448cfa9450aaf
SHA256 41d37b3e356942f40781db7b67ce2a82acd87c94fb64abc9445bd40211c6d778
SHA512 ddf7635cbaaf28b03554718751f30bcc3758be8e1087b49c0945784b0a2c04b87fb6eccb3c8c666881f0e5d62cb8985ff6a5d29babbe528210e20f0a2e24bc3d

C:\Program Files (x86)\Microsoft Office\Templates\1033\ApothecaryMergeLetter.dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 9856912e946c80ab3a7fadb67795d465
SHA1 a2c40ca9d6b55f6f9665d248d7b88a403bff8d46
SHA256 045fd36220c80e5b3df7647cc6c45cf04c957da060d96d898fa2535c3a242c70
SHA512 8c41ab243a1b0a2c128d3fe9cb10f6fed20e048be87c8372b250dafea6de1776e509ab6d4d08a4dbab665240498e5ae5c66d4c122fcbf045b5312e66e477d870

C:\Program Files (x86)\Microsoft Office\Templates\1033\ApothecaryLetter.dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 4055a52ffedae4497aa994e71d94c05c
SHA1 0e152d84d0c17f0599e85dafd9ba36eda6d32cc1
SHA256 a0f3dbf2d1861b481c7704db99e55a2fa3948e0f214738a20582b0ccdb5dea05
SHA512 53b2d6f21a914260aae244ca83f542789831b50418283e24f57199dcda5cdafb5431be9db666302137266b1eba739f140c17f98cd11f68294d349892a10c4265

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WEBCALSO.POC.(MJ-TJ9302618457)([email protected]).zxc

MD5 409ceb92846791132817f2bf6b9a3d9d
SHA1 6804c3745027dfd96a1ca70448d373ca686a90a6
SHA256 d9cf951ba703e2ae383bc03762876a82f46ed82d0c721b74f70374b539115978
SHA512 fce6eefc9d36380ef03ac50ab1268bb42471876c62454fc2d86ebbce7427a364247c51587c2d83fb3270143457a6a7b289c4bf4c46c209db31785cccda82e9b3

C:\Program Files (x86)\Microsoft Office\Templates\1033\EssentialReport.dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 856391a3f7e46af7411505d168403a8d
SHA1 b190629dee922b065fa9d9973ddc1afb1699cec2
SHA256 f36d5315677be620fb6321ee65affcfc31eb74b1c7b3890aa69e7816cd5f52db
SHA512 045d0cf5d5a0f7d0d9535674cc58aa185b659e7f4be4c2f5dd6d3e51fd9d56cd69b9b44bf5554f2fd5a5ce9c4cd78c228cc118d3a3347601e86706bd7411ab99

C:\Program Files (x86)\Microsoft Office\Templates\1033\EquityResume.Dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 0497824b69792ffbd940f8f813b5924e
SHA1 4221530ea15eb68eb94915d8505e8e0658df6821
SHA256 e81c99868c47ff0d3b6b12d0fa8b060b511f7b271affc54c98d9e4f52613744c
SHA512 0a5ae2d2beb893aa1f564c9f43082aa5a89a063e56b3b3b5f55223d285bce4738aebe7f55ae77fd28055707b2af07efb58e2baddae96581a1502b318eb10a981

C:\Program Files (x86)\Microsoft Office\Templates\1033\EquityReport.Dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 27e33cbd49582d5fb76489dab8d77f34
SHA1 0c6382fad1e42165072932680d8dd88eef3e110b
SHA256 32e80d1867e341483ab0e77ad90c62b890e36c89bac27f343ef3a8ed9259052b
SHA512 8848c48cc016f62adde7cefe1c0b14544d76c94d1510858f71dae4dd917e954503c9c8beffcea5de29e37cc2d053d25b49740244be5a2c8b98dada669afcb00a

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\macroprogress.gif.(MJ-TJ9302618457)([email protected]).zxc

MD5 d9f6a787564a929b5542959de8622d77
SHA1 4f724fe96240ebf1b889dbfcb4562be6642ed1bc
SHA256 256fb5abf084ac3a09e55be4843aa6d8fdd7e7e8f5c6029180de9ecb22ebc689
SHA512 9cb37b03bda273cc389d0079e359410937081318cc72318f476cb148d66ff0d13056a204d6d6f0f12cdc68d8a52dd4899f508c837d52a56a2324818b0e4bb36b

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\SIDEBARVERTBB.DPV.(MJ-TJ9302618457)([email protected]).zxc

MD5 ea34440874972b43da09e33c0da24096
SHA1 d525fba2b8e01da7d0e366a6749c65ec02d04f78
SHA256 0e9119e846bb19a639533de6e64b3c8d730621aee1c3282d60d82ad6a37d4da0
SHA512 3aec17fbc89e1ae41185b8906d6936c6e064e79ecba3e928621627ef7bc191299207750547bf7afe7cd907dc3b8d4914110cdd60cad8042ef6103e0e5f4d6c95

C:\Program Files (x86)\Microsoft Office\Templates\1033\ContemporaryPhotoAlbum.potx.(MJ-TJ9302618457)([email protected]).zxc

MD5 cf72745d60f580bda90f4fa6f932fd5d
SHA1 e92005589875811245ca987538946e472ee7ac93
SHA256 a1969ecebc374e8bc156f39b34a6331146b53f07b18d8f667017c370ec94dbfd
SHA512 f52b081ff70d960322cfdf230982f465a5b204506179a5c1f6f542511b81468837f99a17857199b3e1553a494319cbbe27ac07eb57518daa3b0247d4a14c44b3

C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\GWE.ICO.(MJ-TJ9302618457)([email protected]).zxc

MD5 02b03fc4e623b9d9ea6109a774b50684
SHA1 2ca96380cade8362930af3956a766022b908b4eb
SHA256 88ef2861aca8e7562b5d1a4c1b1f52ca73a1917b5e6206e67564ee1a66670cdf
SHA512 a9709214aa57500b8590401578ae7d93e16c181b282042975ea63902c67d4079ea0eecd8bfbf35cb173652a9ff69ab354ec35816e52fc470ece990a160c57c85

C:\Program Files (x86)\Microsoft Office\Templates\1033\ClassicPhotoAlbum.potx.(MJ-TJ9302618457)([email protected]).zxc

MD5 5281c69fc19c95512ad9aef70bb9f5e9
SHA1 6499b42e6085c495aa254e365d7af1952a0a3c45
SHA256 5b91602dea3e1720a4cc71397381fefd50bf5fb1a64dcf462ad783c030361889
SHA512 1957a8bbe174a14ac1383517655be97e3074f61a1ae5b049e01c3cab1634698e0fd06e2678a6e6fcf499c6447b594c46868871c8e552fbdad49b1c1b9acfec59

C:\Program Files (x86)\Microsoft Office\Templates\1033\BlackTieResume.dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 a0f360efd366a3c8faa6662ad6eb10bd
SHA1 1bc8bca0961306e528b4fa16783d4ffcc022d221
SHA256 9cdbd3e9f1748f79d39797e35936a811e0d1007d5019ab8ddf8d3e95fffbb1de
SHA512 e4bf8246643f252952a09b91c4f0e52a46ef36397d9924feb9cf74172050ebc330cea13bcd9b386b9fb633832816f660cfbb0bb9831c4f8ee647fd40d2c62870

C:\Program Files (x86)\Microsoft Office\Templates\1033\BlackTieNewsletter.dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 51c2abd413024dea041289b859fa2fc7
SHA1 0a0a123c8e408d01a84cf82fafd1d45c239a73f0
SHA256 aeb036cba1de727485fb49e131bfc7e5e3106e2e02a1feaf132c2b711ee6b6b7
SHA512 7e3c132bfc94630f3d5bcd967ec3026260dd024d701341778050917787c79bf8237ebab6479edf932c43a76f1156eefaaa8fddd48194d0161e137dcc64e246a4

C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMV12\Microsoft.Office.InfoPath.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 0a4f899af951e861ba0be74aa0a950df
SHA1 2d21229a73a8231d66f324d3f984eccc0b244808
SHA256 f56c416394149161a6981fe54c8e00812a80956e24d271d792ce47efbe57dd08
SHA512 11f7e48ea1492ef9498803dd108ff2e1046edd0f923cc63d1a457931bd5c38493f4365e26a7795623131cfd603ab9c9259dc3b7d601e69dce9321ad8742d2cc6

C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\InfoPathOMFormServicesV12\Microsoft.Office.InfoPath.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 0926bbddde43fd8aaf19692699a6842c
SHA1 9d3c8eec4f3139b47ea7d9342184185cb175471a
SHA256 0ae43f6ed72064ba92f97bf40d6c09f8a6edeeacb76f7b2ba53244a8a0cfeb6b
SHA512 ca0bc7ad4c94bdf3cb3742260d8b092b307476a19ea5f41ff34ff6bed214d0fd073e7a005b2365457e815f1c14598fe4613643311ea559ea5391dfd594f7b880

C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\Microsoft.Office.InfoPath.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 1b436492d3e1a595c215bb2391ebe9e0
SHA1 37a098a05891a11804580426e81788036cb9a61b
SHA256 0845b72753c3e962d485bcfdd7df3e0c2ac8eb117c8b17a0fe78b6d213642054
SHA512 6173fe78678f6ce620ff6a75d1ea5352db506d63d8584efab7f442c0c4b3e7d62a097a635349cb950e1f7790401c32a1668d34b2bf4e88d05e3ee270b8dab42b

C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\Microsoft.Office.InfoPath.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 ea9470d5d89a02c09f37da17f0571f19
SHA1 a55bc2040e8fb1d913fa0ac3588f41f21d142469
SHA256 a4f577025ccb0ff2ec6da9f56d40e15d26376222464acc73e6d76ac0efc60cc0
SHA512 5e38df5dea8d8ad43b6627a239d3c32664e041d1db6a4610c036586d82182eea6792856e5361e7783b8c0dc68f03261faed18e065b52e15cbe7be095d1fa402a

C:\Program Files (x86)\Microsoft Office\Templates\1033\BlackTieLetter.dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 a5cab7797bc8ff49f8e37e22857f5396
SHA1 d68733694b3fb1458b8c36a99978b7c21a3c74f0
SHA256 95e72f6fc039efb099b0e8de1a37345501799bc7d50caedb09e22f536ace56c7
SHA512 7fb28058981ccccbf8d37ae39405d210d35ac286f140c8279c86e08956596eaeb7a74b1509a41660a342bcf8f3a6dd6046291dddcebc378d3a1137e8cea853d1

C:\Program Files (x86)\Microsoft Office\Templates\1033\BlackTieMergeLetter.dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 0fd8ef393326a32be8cbb1b917144147
SHA1 e5006f81abdd2a13308cc01bdfcb9053a1c7bbf8
SHA256 2dd9628c3f4dcaa3bb7a2f3f523ec2e79f6ecdb6eaa119311c6ddb695e485d9e
SHA512 a6ce9b0ae44656691d0670f77d5b7a348584c6d37b8697798cff67a8cff4f9ad9ffd377d54f6a2e1c9baa0cfeaf08e1e190c89d6823d6f5bcc3a208da9376b06

C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL010.XML.(MJ-TJ9302618457)([email protected]).zxc

MD5 87998cd87de8c7525a04c9b682343d45
SHA1 dd78713d630ba708f8d6961a8bac8d5205a560ee
SHA256 fb92341f8b377b0b7fd056e7cafeeccbeb7a476191e5a46ddc15e72787636a0f
SHA512 4986e7ebfb1f1e2e261f1f7d7de7eef3ed5f4f7c0df392f0674e1c8302a174acc6173135f2b8400c093c0a5684fbc158439296b0f0c34fb9eb1e20c95ab7c0e2

C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL082.XML.(MJ-TJ9302618457)([email protected]).zxc

MD5 a09ea87e2d029f7e6601f1e49e89fce7
SHA1 abdd03ec0fd77bc078e65379d44c3b474844f5e5
SHA256 e8ac2126aa8ea58df5d9541842954bb640b5c15207a80f7fb678d3e85fe0f7cf
SHA512 d757b558c8cf8efd13a6605d5f282e06602e097dbacb084f661565d5f42845cb6f84d60a6864da96589d2c0c823f212e51b099632e9df2e761f14d5719fd7298

C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL058.XML.(MJ-TJ9302618457)([email protected]).zxc

MD5 f62045d25c2cd7acd7188a4f1c141e09
SHA1 f861133a46fdebd1dba7c21f0e0b0b23fdaed3e8
SHA256 377c8fe8e8d21624e0d82d06a5d0830672ef8e31d5900a39b1e13f7638f51849
SHA512 322d7058c1206723d24b218ca97c38c8c342a15d2dbdf681c5d651cc01c8b35cc6213bf2e18e85ac10088cdac537098a5bca23ccf88067dae2a060df7f038784

C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL110.XML.(MJ-TJ9302618457)([email protected]).zxc

MD5 6eb23c78e76374cd1b9eccbbb9e34e60
SHA1 a048b4178e0f2eec963236391d141e005817417b
SHA256 a5451b9683c951c66b3be999f44bef60b9f7797bb68b5ecf7cdf80091c52b7ef
SHA512 776fbf82593e721d39dc2c33dc7fcd989960031f4bbfc002bcd52da9592393e9abbd743b1df84ca47cf82f6e83b54a5a752ba2bdaaa9245fdb45b55b2aa3f958

C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL108.XML.(MJ-TJ9302618457)([email protected]).zxc

MD5 3ab98d036c5eb52806896f3c8bea120b
SHA1 670682ce85d71786003794048002f0308cdacce1
SHA256 0659e677beee99cd698a8b6fdd2f37101aac1c7845092e38f67076b0666fb1ff
SHA512 ffd851e91d2a4dc44a056bb6dba873bdd8c124b52bd927f146ab7151ea6d832889bc9203767df6b9e30beee490165df7e8ebb31cde145f4ee5c962abb24d345f

C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN048.XML.(MJ-TJ9302618457)([email protected]).zxc

MD5 f8ff1adfe13ae13cc2c62aa6c4a87d14
SHA1 349af5ef2ef63a22711fab5a5d4e7fb38d1d6f4e
SHA256 4535a5e9cdf05fa937150ffb6adb2dd5e5bfd266ca9d02b96175c5d671f58143
SHA512 841ce9d610e0c75f740f92223b7cfcb92bb00450c81d126ddec347c48f1e01b56a99d1cf84ca20f98f1648a7718d98a7702b27b8413643e3097ec18764bf92bb

C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSHY7FR.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 dbd86bf447927c2df3d7f26a8da1709a
SHA1 d6433cf4557033032f6e59cee8978c1056ea7414
SHA256 c4b0fafffc5dca11b57dbc5a903d49cd410babbcd068e8dca8ba6a2c4a7ccc85
SHA512 75acfd68ab9d38d885de953e071bf510051b9f87058df2aef7e2de4171fc6dc7286339664dd1c13746e7dc84198e6e423e9eec275d003a0afd1a4ce9db8ae505

C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSSP7FR.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 ff5d35b1a8a52bba5eadd9869372dc4b
SHA1 8d57e1f48810c4904e366194dc6a07275d5c21b9
SHA256 b8420a2c768bb2ac1518758cd8f8199c6e0c9b0cd4e7d783efd14e6a4abf9894
SHA512 6d01dbc69323bcb990884b3fe976688d3a890b8be8ca892b9552e0e113f382d522f02a6b9ab7f6785490bd2e56aa841b7b227c09ad7c8ce709aaf1a88b8891ac

C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSSP7ES.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 f69f31176360f3c5d8889ee3f2828f0c
SHA1 84cc362dcac0a8b8372e4b240aa92158e7abdb49
SHA256 b5dfff977a5e1d718de8c2b919d2ed34a83e501f3c457ad14ae8989703056cc9
SHA512 e258fabf551d4e04be6f1991907d69259cff9ae7ffc96a9ce2a6f3eb3e87506ecaf6ea37f09e2900e317b308d63bbbcb4f3c7f76c6cdd56195d95a639e9404d4

C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSTH7FR.LEX.(MJ-TJ9302618457)([email protected]).zxc

MD5 951f750dca4a0a0582bcdb195d81947b
SHA1 6138aaf893389a09dcaf3b61f24b978c5fbda627
SHA256 68e9204eb784dc47b3163904a9e0e990d3b87de245e380e64fcc2c2291b32406
SHA512 f82d94fd9890870f5a947d26953fdde9d6fe55ae638848802e467d0fd95ffd1ac524e540ad9354ef4b44b3f44ee295fc40df1de89c7e95e831cd5441fda8cc9e

C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSHY7ES.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 414489b8a197659a527ad9576cc9d9fa
SHA1 4866413793f33957e3d34d5a28cbf1ac757644e7
SHA256 b762a3b584698d32bee328cbddf170c01565a4a7c683ae60418b462fb968d1d3
SHA512 c798f14b8b31b7bf0f88ae182a138c5b14341e982f6dc5d87912752463c8a25400feca80414a1b4c0d66a63005ae4f0ec524ed612762238ded4fbf1f48da027d

C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL103.XML.(MJ-TJ9302618457)([email protected]).zxc

MD5 264635b2aa931002e905f930865c0c7f
SHA1 c3886a4a027c5c2fea85eecc4b8c890fff6ef3ef
SHA256 b45c2f54d0882a4d73e16a307fb6e41044ccd6338d73a574b7d5de6046035810
SHA512 9aa056b7d993bf0fb53550204a19ff412a50fbcf9ede667ac684be20b67e5836b3d71dc2917d1b7ff68fead05ae555ea98434150167b4b6d6bc93f21b2cbf81a

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BRCH98SP.POC.(MJ-TJ9302618457)([email protected]).zxc

MD5 dfa7758228d060b910c6ebb32c835f8c
SHA1 2913315051171a0e8785dd495f84aaf473bc96f3
SHA256 dd85ba96e90cd23597e860ae27d7c99876f4fbc4cc7c4cdf996baeffb2dc9b3b
SHA512 a284b8c963a7dfef407622e4b367c88625d360dccc8141f27e20447d3fdbd99151cf362c2961b0730293dfdfc90f6f573d804d6c495d9a29f9f1f47758d2c43c

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CATWIZ.POC.(MJ-TJ9302618457)([email protected]).zxc

MD5 7317437efb95bfcee5da16d9f8f615b1
SHA1 1a993825060090ba2b3ad61f3fb78dffe4d6af26
SHA256 4b30ce4040c6e5789da7775bc0997dec66d415a595c949406b8969353c93d3e7
SHA512 072734c695784c0f11f95181ea41f6d5bcedf03a910a13cdeebfebe924eb132d21d1a0f17bd8f307260f76b98cd71aac985a334aaf6441653a8a78e91f3c81e8

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BZCRD98.POC.(MJ-TJ9302618457)([email protected]).zxc

MD5 1e44201a0fa948611910ade0c3555cd9
SHA1 c3580642221ecdfcc003ca29ca1ab6121c2d5961
SHA256 4a1dac9966518a2f6fed46147a38691c2ae41d8bde5837da867eec41d78ad9db
SHA512 f2bb7d84441d0d6bde4a9710476bd2ef600fd62fdf90b9dd1553af062275e8b06ff1717791b86415a6b101e4d7f553d71fe40b9be5239b79e5bcee23bc89dd06

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGMASTHD.DPV.(MJ-TJ9302618457)([email protected]).zxc

MD5 60b0b3c6aaf41125be8edad2cb3b1579
SHA1 fea0ebc4883e9a4747fc413f596f86467b5126e7
SHA256 de7246259fccea287d4ffb1644bfffeb9e53a8abbf7a790dc71706fa82878d4e
SHA512 df0f6617e8c0bfb88efa03126796d5515a6c0563ce4e7c53f04e1ad4c53091337dcd0d582b3d0f3dc3083abd16531ea1c22822cb607263e939c138648aba5511

C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL054.XML.(MJ-TJ9302618457)([email protected]).zxc

MD5 b3a51d9cace21c6442fc762b79cffcce
SHA1 dd6b7b0e31118d7e2ca2e81ae0f62ad978ebd23b
SHA256 556c6358770aa89f1c1b64b0ec1bab126d3655588fb53502f6a5405e87ed69d2
SHA512 93e7882402635cb8d0fd1ccd2b3249b4c44bb339b5cae74c5dba2bcb65f0c4ea88d66ecae62b43e67ae1aa2acca984a87d3b0502df6e32d8eb2676dc4f7c5d9f

C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL048.XML.(MJ-TJ9302618457)([email protected]).zxc

MD5 e1da57776f8b7fb833f7290bd10872f0
SHA1 b88d23bfe132af0a2bda94bf465dad94853d31d7
SHA256 362e8b9eb94167c20f715ef9a2af848770f20b77be2af05eb245f2bc824af947
SHA512 25a92ee2540699c8d8466d2da1493da8321a63d26e4aff4a72099461095bd38f1e7df0f7e2cd738d2b7b11139d1c3955eac9bd5490e2c6acd4835d391c62112c

C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL044.XML.(MJ-TJ9302618457)([email protected]).zxc

MD5 d90a2d7b96e6741afa34dee52399e386
SHA1 1c0ee88b21398dad11c100c51462cea7174b3a85
SHA256 aa1263824f84ed18c7ef90eba7c32df6687837c34d45a6734dea76989c04add5
SHA512 65b1dba1b9f78518be5c68da4cd62cbe2cb5cac3c2f279aeae80bae651f195c23ce799898a70f6ad361221abcd4934ad647633ba394f9f3240d8628e72e6d19a

C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL075.XML.(MJ-TJ9302618457)([email protected]).zxc

MD5 558ad1bcde361369a539c31838e8e115
SHA1 95ad3c619eb7b427bd0e03b22e8ff6fc25d4bd60
SHA256 efda182eee11392a71cf340e5c0a0aa58cf9d60d3818f5df7735e1dfa1a91070
SHA512 ded6c22d8577879612724550b2d8df363a784e375fd0adcdbc795a3e4337052fb162ca0f5a2906ecb61ba188d3b3c35e0cd7bbd849e4eb95e184988e986ad48b

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\ENVELOPE.DPV.(MJ-TJ9302618457)([email protected]).zxc

MD5 1ff7a45b3139f36f8c3ce75d9cb1b80c
SHA1 0c5aec01cafafd58b91d37f7f4ddc0ee10374556
SHA256 e4e3111b7d132fb8568fcc0aa9c390cbb3a22fe1dcc1f9a45ab9308fdf8eec13
SHA512 1740f07e81dd65cdb259b147964455a7f1be7159b4caf8e14d3ec4696bdaab52e70f5c875cd925fa02f226ab67141a63a0a0fbfb863b5bf07751f8bb1a6e4e73

C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL022.XML.(MJ-TJ9302618457)([email protected]).zxc

MD5 302dda1a4be45a1d41a981ca92ed5c25
SHA1 69ec0d60c1a74a13a271c72d703fc5a68d735b11
SHA256 80f5251ff548bb9ce18997374a233213e3de58f610edf69a9a9841fad1e83043
SHA512 dc936ca19b516439e7fb9d1f7e9b0760c35342c84f95f5d76c190f62728f3257c15b9de14b85baa6516ff2868c63296f19c44b9276fd72bf4f91cabc3864047a

C:\Program Files (x86)\Microsoft Office\Templates\1033\ApothecaryNewsletter.dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 793c1e074aadf4a98644985e52bdb635
SHA1 3c989e080d248910e17aab2642db5e382142f78d
SHA256 847199a7ba66d9ba422b56c384c82b3f366b53ab5afd31d4ab73c328cd1b656e
SHA512 40031650391d7e5dca86ce56cc7c222b2484aa50f6fa732c8f49611c7a8eaee84bbf865ef6d556a611054210f2d2e570fa0c3ce694c17d06c8277bc66e63164c

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\SIDEBARBB.DPV.(MJ-TJ9302618457)([email protected]).zxc

MD5 e1d72c268654fd9c2bfbab9ea3981694
SHA1 3a9b03b4abdc4a4bce7e71481b91ed6ed02b5baf
SHA256 3cfd4060e91b31a1ca1e9ffbe2bf3a098a7be90790adce0e4c00a14bd504d07a
SHA512 021b3e5ed048b36b3052e6e07382f49c77713e06019efe813c143c057a75aa87250c6a9de6af9d942e4d46eb076293ed4658669136cbe00c2339f70d49d2811d

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\LABEL98.POC.(MJ-TJ9302618457)([email protected]).zxc

MD5 eee7ae6ecfb7fea558ab457990c335d8
SHA1 01704d7268ddce85969089923509667e389aefbb
SHA256 c49cc5f9b4c4b330b608b8a571b655b038461fe97dd6f79e0fd9a52befcac497
SHA512 454e69526341f4b338493644ea2db1a41cc2c931ff20d13b2264b8d5c43e5304b76bb0028257745d5e44a7fef9a62833b5d97099ebdac4505f29c74064a43934

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\LABEL.DPV.(MJ-TJ9302618457)([email protected]).zxc

MD5 5210d91f51ea3b2dc022988600118acf
SHA1 acacb6591f80f8a4c18282626a24331e35f8aea0
SHA256 c5b245762c9d713845a20ac38275136dc356c31b6c8520d58d6b69cdcf946ec6
SHA512 ed9969a5a857cf6052fab5d32e15cc11e421c71265e2684642873f4552ba8da61486e16aa18105159c2c2faea470a0a9ddcf6286ccc15b2e33af1edc36103854

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\QUIKPUBS.POC.(MJ-TJ9302618457)([email protected]).zxc

MD5 d77899ad8defee1ffc79c04f715b42ea
SHA1 7b33d7ac64086c5e2a0ca8400045fca2eef0fd3d
SHA256 299a742be50066e2c052adbedbc64a735051d03405ea275770457c03f44d2869
SHA512 00f63e53b0dbe5d619239a215906c00bdc22589935bcc050c63d5aa372a099776d130058e18269bbd31c9c3b38d0ee519b37af420c91074b06da7589cca8c6c4

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\STORYVERTBB.DPV.(MJ-TJ9302618457)([email protected]).zxc

MD5 aaeb1123a0d716a41c7887faadb5dd92
SHA1 96cd52fe57bd64795b97ac79fcf48193550b3d65
SHA256 7453606f873b7597e4a858fecb37ec625886ac6949b749f8c84b3b7862d658f9
SHA512 b2b8b8c273d5f0c80a49804ab1d2d5c71eeae9312004aeda4738bd49a22f5622de8aeec621baf122f274090192e6819e8a093d1344d3cd12850e5287fcb2c962

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WORDREP.DPV.(MJ-TJ9302618457)([email protected]).zxc

MD5 396abb0388bb7fb9bccff201e524cff1
SHA1 eee247e093ba5d04e7b7a88c9dfaadb3bc7f269f
SHA256 99a83571c28ee43ac58e2f49da3c1c96d610bce86d85eafa8ecdaa610ba1f85e
SHA512 3a98d538483a3805f279158cf2ce4f60369f6fe13150c999cf1f6c6bd54a2a516a952a441b61f033353f3b68a2eb601efa182333bdc3fe02601e9b79b27ec044

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\STORYBB.DPV.(MJ-TJ9302618457)([email protected]).zxc

MD5 c17c277cf6c6bd0d721b269ec92fc992
SHA1 6474ac5dd8768db28ec2b169f35c624caf77bb77
SHA256 a9b7f1933b35dc510a31b37f6802af4b6839e14cbeeb9aa5379114a3d711b8bc
SHA512 5b76cbd45c77af0bcd4196d6ac652f746ada2d4f69d76a2792c0d288b4a5296acc42dab88cad178fd49047c5abcd35b05a550dac8cf81c791f7c138d3538decc

C:\Program Files (x86)\Microsoft Office\Templates\1033\Pitchbook.potx.(MJ-TJ9302618457)([email protected]).zxc

MD5 91024c2c53158db8ecece56398ce2c08
SHA1 4f44c8e8213a7975effd0f0496893b5f92bf3c16
SHA256 bbd086aa60aaa5b9c2b8c2475a5dc92bdde81cf328efa7b51cba5e3dd1bfd0f1
SHA512 81bdcbf3745578acf71f84119d929531fce12264ee396255258680b41e76b231f8f449004d747b18358b0cf907697365f9d5ccd4263cacc44c1de4815df1fc97

C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Tasks.accdt.(MJ-TJ9302618457)([email protected]).zxc

MD5 6fd0d0e034182a54a9ae68bff1050caf
SHA1 51fbd2e498525f752121d93344924e96a9ca9f34
SHA256 d858b7d1fd4f7e8f4f9c3cfb61e7a2780164cd6466f00649d56482b14e59ad58
SHA512 cdcd96abc5df8529e117eed4d071fa9e04abf4ffaebda8d8d00819e757dbf2189320954aa4e797babca7c3f910663cc1423de5de9d627239ceb876a630f9478b

C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlceca35.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 e68be03420ccca06df9b199179b3bffc
SHA1 fd92224fe3e93caeb0f9d1874ab45a100ac65dc9
SHA256 24598e27e4ed43c2751f35853db087ad9cb04b8f9f8efc055162b148559b1c0e
SHA512 1472d157089f3acfac734babd58bcb4cc34dea19979d1c5622b77d8ffa78462f660173e2f2b76226a0443ee00be3ebd3c909618f96f59e25e8193c5f2ea2323a

C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlcese35.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 4040e7e921db1127574a25744b80a465
SHA1 35136894d50b8af66ff1b55f20ba596d5e4dab80
SHA256 434cbf817abfc734b75c147040d76c3cbc63d8e57c0454158758d0c31df724c6
SHA512 bd141b9ca3b5d9d63593c10192dce1f902d4c36d65f10c2b358f465da5c6cffa49b4c6695bb50facbd7a5f88ec1703060d343e331c22488298adc259fb113550

C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Students.accdt.(MJ-TJ9302618457)([email protected]).zxc

MD5 d10bf680fd363745829dbed49419b1f4
SHA1 80d48c8db789a46427c45cdcf8493c8c6f20f475
SHA256 255d24a8c1d24821631b34bc9d2edf38ac7cde20af5b58bcdc8220499e95ac8d
SHA512 a94980234cd837772f9a2ee8da10b65ecf910e6e6ae759bcd213d2154e04a6d9dbd353542e452346d761081af20df74e900b7e3c19f780fa2230218e5fb91e42

C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Events.accdt.(MJ-TJ9302618457)([email protected]).zxc

MD5 e513fd3538157061dc8e460a71e78799
SHA1 717c90d30ef70ae3d343d9030c3b57325f19dd5f
SHA256 4ff9222b0023d4708c7210c18f793baa76fd79819dfe3c7ec641375b265d98c9
SHA512 04455666508a6d80582bd61e36b8189eecf14e9085a11fb050fbd8d3e6dc8f15a321ac2b2ecb13b7d519d9b2a642450001a199dfdc3867dbc126948499d565e3

C:\Program Files (x86)\Microsoft Office\Templates\1033\OriginReport.Dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 f9d73a96b140eb97fee6591f08545d53
SHA1 bebd656c33c3b6737a040489372ed579c139a08c
SHA256 ce0f0ddd8832d1eb276d8bc17115afa798d89b28b984c193824dc08623b45955
SHA512 f72e113fcd7121797579894d02b9e30288e15c5ae42174b2abe1864df14a76e93b5856c65d0c436f986b751bbd0ba968fccb1e7e33fef57b8ab22f983528ecc2

C:\Program Files (x86)\Microsoft Office\Templates\1033\OrielMergeLetter.Dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 fedbd57c2e7af2d7b49554cca778aa7c
SHA1 8aa3209dd09dfc068d10375f46b5f71d54158cc6
SHA256 78c097c10f6731ce90bc19427dbb7fc82e0228000d1a0ae236c77b5ae9c3e0a1
SHA512 74b7fefde13a298d71bf5ff5524b4d5e028c711d9756a62d35229935183de986fe6dba17def962cf5107ad3962a1949a9b63716f5ed5ade1bd2ecca2b638f630

C:\Program Files (x86)\Microsoft Office\Templates\1033\MedianReport.Dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 0a6bb165a3d6064462596827222fa0f3
SHA1 b04880af4df913764c50e82623a9e02474dfc39d
SHA256 cf294bacdbfe2f4de0c8cd79eef7441549fbc918df7048c1194adf8a37d504d1
SHA512 d37dfb69c19f05479143ace0d59d644b08554f48e1569d453351472026d2da97d2f548b78ca138f3c7ab8c680d17615b819f775e4eae42f6c574c9f57475fdb0

C:\Program Files (x86)\Microsoft Visual Studio 8\VSTA\Bin\VSTAProject.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 a54d06f7caa41fc5d3feaa976684e8ae
SHA1 382462a730d8155c1cdcd8d66e93591a0b57068b
SHA256 47da70c36746240746481e9d3291be9e3a6d243c8b1b2b582540a5ed55c2417d
SHA512 b8ce9b0609293137cf80eeeb7fbfb52e3a8acf0b6e6fb96a5b8d7d326be1def5a06f68052c8509cd5d3cfbddbc11d1017ba0fdd1ff4c2d983a06f9d247622e9b

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\QP.DPV.(MJ-TJ9302618457)([email protected]).zxc

MD5 a1c363397475d08f29a94e0cbef9d902
SHA1 c3b0b3104f1e098710de6bef93f8ae831bef77d7
SHA256 632c3e50495c7a34a83ae5fe6a0ec12e9318d4fb7239d03590c2694c0e3d8f97
SHA512 3d2be2936384882975d17b1fe507ac98673644bf3155df5d67510214986ca4a960c0ec0070e01aa5c9da3ae0a219087e30d01d3523a2ab9f17184a13c42d4ca8

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\NEWS11.POC.(MJ-TJ9302618457)([email protected]).zxc

MD5 7055a614c84fe2ccc505e657f0c24670
SHA1 fd3283ddee33766cdfc5099ebf83aa93f4205a16
SHA256 de7984a1e1aea5e6458c786c98ae4483051c32780dd37982d7bb0a387c6f4022
SHA512 cd1a480962b73447419bab29024c67a308cb44021c083e037ded964bd425ddfab4a2ff4bfc6794a1d7b5b1e43c18af645ae0b987ea06ad3af930850a05fb5067

C:\Program Files (x86)\Microsoft Office\Templates\1033\AdjacencyResume.dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 1d818d1f3d35a3f55260e3a1ef999cd9
SHA1 d0e9aad2b1bae9d970c9ddac4e6c190d078b8479
SHA256 0f10dd4a7651b875be391230b2082638734257cbc451214ed3ab0bdb33b5a068
SHA512 1783773acdb0fd5f86b736aa852f9df397153e88cadd80e02f8b5db7c54364f5216a087f7bd4bca6d94166823fd2a9b0b7654ee8bc01dfa09d41e3431d870e83

C:\Program Files (x86)\Microsoft Office\Templates\1033\AdjacencyReport.dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 92e0a3e50a38146635d5f6b1293c4823
SHA1 689a8ba04d106dfed530a779208fe8e4776ab960
SHA256 d4512e824a1a3c72dc697af30723b94767ea27078d61d225d50df4e832a1864f
SHA512 3aa10f22521de345434e7c6d8e3449982e2cea30554322d116cae4b0dc4818c469cf31f55f40dda90ade82a4dae60911d1d13145357ffb9fdee77cbc3989a8fc

C:\Program Files (x86)\Microsoft Office\Templates\1033\AdjacencyMergeLetter.dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 1f98b4938a7b46ecdfc7e25354d2a185
SHA1 95cc32bdbc7cb4fe541067f8d1f673a7fe6e6ce4
SHA256 3ac1c413e192a883b3cd7143f7d75b3df9e66ef871b431792c4ac2d0b7614de4
SHA512 c9d4e8e4a8f03ab2edad3993943c7b4e2a286491e9e38910810b415886a7f3113259b3d7bf1e4b1b010b51bc16e853049649151e17ead7cea3c141827d888ec1

C:\Program Files (x86)\Microsoft Office\Templates\1033\AdjacencyLetter.dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 47b6401fd561963a643aad0a55089c96
SHA1 a5822b26d760c23329f5284e1bf53f9dc9539bd4
SHA256 a8a953a4f76dbffb5f73b79de035edf5830a347d6e608d921b5cdd46e017638f
SHA512 efcbf96e18cae6729b0c6b0d2cb6c7cc4dcadfec06603d4007a0b118f5672a722c16a071f9b9d92841b005999e54ba6ae769bac3f85bed6182a43d2f45613a50

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WEBPAGE.DPV.(MJ-TJ9302618457)([email protected]).zxc

MD5 3d81e7f681521071670006effeef4186
SHA1 ed4cc72461fb8441260d6a472133d3a1f31b9c0c
SHA256 3e68c0d12c8b98072935a748f024cd7d31f119c65f88e98a3154e36dbbcc9f24
SHA512 8d6fbda1219398c6f43173529fe0ee6bda2ce8761fd5947c2b809c4cfb88490c34d66cefbb93aaace9931ffb2a365667af1c9c63826e232af2be4db750f1160f

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WEB11.POC.(MJ-TJ9302618457)([email protected]).zxc

MD5 f9aaa75ed50bd873c4ea3423eec83dfc
SHA1 ec6aa70316973d619b2082d3b2cb287dcf389a70
SHA256 31f6d66e5778a1edad67f25651eb1fee867ca4c8d757da215f1b7109d8b07230
SHA512 c1cdb6e3c0c56ae16b6bbc428d7d1e22852795403777bea182219c5493b3e0b5b0c86a4d25f812363fa25f0ab501fba0d4bf2ccef49d8a22c9577987240a8f38

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\TOC98.POC.(MJ-TJ9302618457)([email protected]).zxc

MD5 b7d78c1e499f85ed6106a4bb2d9c76a9
SHA1 f80311a53a24d720f2f978fd2c5ce2a2719d5686
SHA256 b52d9620b0a756bfaaa7962215c8a3cc41e694e8773b745b97f39cfab6497690
SHA512 a145ae53624a55fb911746cbed135e5affc935dfd9db71859d97aa47a4b7d8b2dfca3ab21b5e99eb7c95f1240fae396b5ac8f44b1e18a67cc28c6e6836e06154

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\REPTWIZ.POC.(MJ-TJ9302618457)([email protected]).zxc

MD5 ced56aa758ead8d07a751e07dff74b5c
SHA1 f2cfcf48c5ef24b9849507914c0f9bda8b64f002
SHA256 7c0122be6c0ca896d696a41dc5d32c46f1a4092046384c0b0c02e0286e8e203f
SHA512 aa83a78bc8eb0185094dfa63a482c388b137b3ce16583cb7d9f5755475d4851cea36798611dca22ddcdedf9c263f512fbf1278a37210e77e970664cf2e53bda9

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\NEWSHM.POC.(MJ-TJ9302618457)([email protected]).zxc

MD5 0613798eb6635cb99f687ac0721a4c89
SHA1 1765fd382c290b28de0f4c15dc9c6c8e4adfb0f9
SHA256 ffa59d426c8b24efa46e0f1d3079978e5ad24110c2278a4bc0158083a331a13b
SHA512 030771103b5f1b3f8e2c738edc1740d3425d149a3ea0a8ed8559b7c7c41b2198049bce6514111850ffd312551fe0318d60d5fc2bb3a9aba7865c7e840ba05d50

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\POSTCD98.POC.(MJ-TJ9302618457)([email protected]).zxc

MD5 815d5155e719fcab59bff44c509a681b
SHA1 8837a2634d89bf1d6876fe921376fbf862d5d64c
SHA256 b28a20df500e29f4a41da7e0b38980c3a05281861005482e24236d520533d5ed
SHA512 91b5c19520ead47876ab0eb86cf993ef53fad71d37fd9355f69280339582b525e9819e6af7f99e12ee6acdcc6e0923752e0f06a6b798ba6ad197faeac4029da3

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\POSTCARD.DPV.(MJ-TJ9302618457)([email protected]).zxc

MD5 1790633ad2bee2bb217cc508cfcbbdd7
SHA1 2675a3e68c92ab1fbf90b272e9a8103ee4735448
SHA256 8f5af8f3cdab538350f360d89873240be7ed4a000a7ef28423d57d901bade9ba
SHA512 b2fd3d6e8e4bb2efa468e10b2bddb657da7b9d70e2d84f297675ce02cf8c2de39ff41a48a865d7ae59b4ce5648d482b20b3915bf5582c7f3918b1e5a626c57a4

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FORM98.POC.(MJ-TJ9302618457)([email protected]).zxc

MD5 fa6756ba7aebf510d58f205e4fe3a187
SHA1 0aff4f16b1cf300195d65459112874ebe0d63267
SHA256 67ddf1bab3c98beda6b40c89fbd98d63233e013b28f6603d9030968063bc6fda
SHA512 0f3c2bca2ec5e44c340660676cecab6862b8bcbd381961e076d81fe9d00c3ac0c29752409b219fdec557c7b38f3ac8cb5255d1257d24cdcdc2fc335d7a1ff179

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\INVITE.DPV.(MJ-TJ9302618457)([email protected]).zxc

MD5 2ec8d60175acda33934f1fc760d2b908
SHA1 718993ab4f4c3f95a5ebbc8e2e89e9c174dac5ba
SHA256 32c82fc3644c4060ac8039d4c5ceb555a649e91a78a0af6138f5219d73f0e89e
SHA512 2565cb187c6100beda0239d77747b9eddbb673eaac138d2193ce993ce094335b7b7fcfc198b86aaf7532aa7f66cffc46e07d26585b70f87090ff92d9fa91e8a1

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\ENV98.POC.(MJ-TJ9302618457)([email protected]).zxc

MD5 e6e73ca906a03c89fd349f9bc2f5b92f
SHA1 d4b81b93553571e39ae72434e602a437fbf58bfe
SHA256 a796cdd65126b8657b45545540b54eb3355ed5d655b07d54866105075b458153
SHA512 e5a344fed02c7ff988d68aeeb2297e6c3336e54076ce6cecd2e24f515db386868193492c356c0ffb38fbc14e1cfcb0d3fd0df8dda1a6e4ca53207a39d98f70a4

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\NEWS98.POC.(MJ-TJ9302618457)([email protected]).zxc

MD5 b46200bf2e818b08b68315cd0c8d62d3
SHA1 dd35c8d63ca1c4e6efc35080d1ef7ec457475394
SHA256 2982512eb7ecee084d395646e9a89e55de8f3607e4c34a112e9030361ab382cf
SHA512 d471b8d30e517acd1f734fd547dc91e0bfac29efb8a711dcd97700e568d7805e6d9b3313d674d9487e6064db78c45e5b296b25b9fc7af10756fb52e030b50f4a

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\INVITE11.POC.(MJ-TJ9302618457)([email protected]).zxc

MD5 55af02959e308fe0a1b827a27a153170
SHA1 ffb94625cb541345c9bb0d97ea112c1ae6c999ef
SHA256 58b564de0c6c5e0fb718047179e9d286079f3d0d7b3a9b1ac9d933d1797030f2
SHA512 0b8f7d42241e88e7eaed5b225fb5f94d93423ec5007f739b5643dca632dea04a1788b619dcee8ad604f7421d809fc1448dc722390483b18490362a6c0b9aaf2c

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FLYER11.POC.(MJ-TJ9302618457)([email protected]).zxc

MD5 0a17ea17e26e94a69074f51c067d88dd
SHA1 eee13fe80cf61ce3fe0719c477009007f3a67ec8
SHA256 296d537e6c444b2fa4bd4fd95a416d5fe591cd1b10c67cd4095fe0a8eeab0666
SHA512 8ae1eb2e96f2b60a65179882e068d65eb255984cb0ebe6e74884ae98e6d468ac1b73fa4973a722ecadf277bd75cd54667045bab6fbd5cbea50fde9f2951bd625

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FLYER.DPV

MD5 0e94242f031eb8072bc454ae11ee6d55
SHA1 4fdb0a65399f8588fc9ddfef98b3b3ad4b03109b
SHA256 54d8e35482fe1884c41548bb56957600c53aae2ffdfb8d47fa0332503d09a7f9
SHA512 b4a3bf5ed304a2695bbf27cdcdcedcd8df0b95d53d9b9afa81bd94699116bfd6cc77c0665d2b39b1c9f3b6f25ff3bb66a966a34985e9c3f704a4c9a78035f195

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\GREETING.DPV.(MJ-TJ9302618457)([email protected]).zxc

MD5 ebcdd8bc7a8a749694633af12560d72a
SHA1 e7fb4967bfed1cab74b15ae40e3c49061c78f7e8
SHA256 f3e7222eaf8ed9616d068b5a35dce27f6fafa943dc7ce1f6c487813681d4ac57
SHA512 b01feb7d8add150468f33f137fb5d460bed754eb85cbeadac0fc8819a677e0296b301e81906f0be5e9e0c9fe6bb6c9de0295d97f5d2a58b2a133a1ce8a452083

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\GREET11.POC.(MJ-TJ9302618457)([email protected]).zxc

MD5 7c8a5d1adfb4ed23b1329980c1e7dd26
SHA1 0ae31b4faaf5e46d786d7a0571307012961360c1
SHA256 cc55fdc3c2fe3ea7e6190a81b3ac7f5bc236479b07c1484e69660fde6976b6c4
SHA512 819a7554d1c28a8a949d8430c6bd7f99d377b7c52ed0666ce04ea9cfaa379c9ed4fcd5cec5a27f08d70240424dfd5a7d1b1557db7483945c12c1e08a01adadf7

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FLYER98.POC.(MJ-TJ9302618457)([email protected]).zxc

MD5 bcad88f60f065bb8a21575ad409e738c
SHA1 8a4027590ada022006263b0d4ea08cf75e3db392
SHA256 e9dea7ab19792b9ac6c59ea7219db48396398682978313cdbd35552309ef18bc
SHA512 36f29567c29117d34ff6f41f433da4b4cda20ee77c1109bcc2dd646c07b97c35b852c8b3195fbb8cec61668ee1df8c7de29b1990e677851dff0dde3ddecfe368

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBHD.DPV.(MJ-TJ9302618457)([email protected]).zxc

MD5 80436afb7bba514bccda96cce5dc16f9
SHA1 b483e6d6dce33ce0e6a586cb6741b97859e87ecf
SHA256 c3885aba2c43b79d659c548cccf2eed7aff5bdcedf33844a5c66ac0cc21fe74a
SHA512 35dddc7fcb8c867136eacf17d22bae8f3567b45542838ec57d52d217cd1053f733a03c07b13055e1abd13172d11a78752e42c89f1b63386b9a378c3bde25ab39

C:\Program Files (x86)\Microsoft Office\Templates\1033\Training.potx.(MJ-TJ9302618457)([email protected]).zxc

MD5 68af21b836adad8179060a428c96644f
SHA1 7060e8503ef3e1b9cf723e05f12d580801eb694d
SHA256 e6ef110cc775216a2ab3ce1f14437f7a6315d4b0ead0eb6756370c4f11520904
SHA512 99e1c4851bd77d1625cb9632eb7388f5a0bdf39ae4b327aff659f14c28fcf9c6115c35c42a4ba8b9a2aee6a1bd52e97f8e65eebcd3ca0c00bd2a9274b1a707c3

C:\Program Files (x86)\Microsoft Office\Templates\1033\ExecutiveReport.dotx.(MJ-TJ9302618457)([email protected]).zxc

MD5 340fa3e176e9166e8cc37f22eb6ae245
SHA1 4e6dc3d8eee3ea31d61c563350a3a92007e87287
SHA256 f5a29fe8a2f766d837a94ff7b748c2f3fc2486d7e8850684e793be8a559f66a3
SHA512 a7916b0c3690812c1704d10aab59d63e30bdda5d060e7fcc6d2790f7d67c46783fc645f49301e3c0a6777817a63717581a2b6db03a3009d2cde249e67a76a950

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\EMAIL.DPV.(MJ-TJ9302618457)([email protected]).zxc

MD5 f73c93ac6102ccf7dd8a176f2f951b96
SHA1 a4be1330f0d0a29abed4961777b200252e513bc9
SHA256 20470efe659cf7d4a248e00fd82027621793c17540aee918e567b5704ff557a9
SHA512 6b5e1ff644576eb428296b1cf92a400dc332db485b0aeb62d309360e492817312d3e1cc29532d29076d928b9397184a5c58118a3ef48707c150b8ebabe075095

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\EMAIL11.POC.(MJ-TJ9302618457)([email protected]).zxc

MD5 f86f743e2c31aac08378bee5e1dd314e
SHA1 57381635404a8e80b765273d9d572b81f90e030a
SHA256 a536da08f41bff8bfac0e8edf93aac32781eeaeb556aecf25303dbdee5fd5491
SHA512 67c1fa68364fff9966af44716ff502a361b950995a8ffd676ad86ca1fec7e3445bdb416286536dfb3faa2f6c3ec8d54471e921c6eaf6502bdc2a743354fe47b7

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGCAL.DPV.(MJ-TJ9302618457)([email protected]).zxc

MD5 988a73b097f8b2f28edc741447432fe1
SHA1 f57abfc66991f0fcd39d39c2381c61b81ae14b2a
SHA256 16b17a441c8c1c14a7007f5ec0560bdee9175bbc87d554031ac7c4e02cf19381
SHA512 3d94393252ac40e3b052b86acd3f2b0b1d45bd4c2ac5e1d26f891ffe63815e7dadc3e2d3d56098bf0a8c12e0268391ed96537e5d9c42e70f754b81c5b31ec30f

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBCAL.DPV.(MJ-TJ9302618457)([email protected]).zxc

MD5 fe0e543c2c99951c6d393d5cb7c7f39e
SHA1 7b679cc950887a4b4b8d6ac413eb0723050c5895
SHA256 1a15da00cf1a1601baad7377ca716647da76ef680788032c7632579fa8ee5510
SHA512 7831b8e76b5b772c16fb464951e9fdf6716de21bd0f1c449677308aedb4f5004b917ff992137bc851ac4778e40de092181e30d9420a569a04e81183d1016f7f1

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CATALOG.DPV.(MJ-TJ9302618457)([email protected]).zxc

MD5 51735239a2bb603f310f902de529fd3c
SHA1 955547c1145453c586a643ac6d4ba4f4e7d5223e
SHA256 559b759bd8683bf9b794f0b27370826b3c5115b0b81978fb954a8fdf1d7823e7
SHA512 1df78ba42131bc47f2772f176ddf42b47d73e2c18a74d798efc2b67fca51bb48b14d40570e548e90d71b45356d3153c63c8258105ff7b0de438587af13fa6df0

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CERT.DPV.(MJ-TJ9302618457)([email protected]).zxc

MD5 db4e7d3812d0c717c129a189ce87a047
SHA1 9c47788fac01b3fc4ac88b20cf936dd975688309
SHA256 d5bf16856e5ae6e2502fd438c53f87d72a3bb574859a7f018b19f901cee1a9b9
SHA512 29c166694d8373b5f80dffbab419fdc7cc9a2f6ec839f06ca3b2e6c0717829067d046cf581854e28c4480ded1dba41e943824769f1ad7eb62c41ec7672fdd665

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CATWIZ11.POC.(MJ-TJ9302618457)([email protected]).zxc

MD5 11c8c3033f46ceeacf7a2ed7305cb4cc
SHA1 37ff9df9a523ed693a53771c6a33ee33379acdd9
SHA256 97647ad55b01e380dbebde252aa7c48860ce7d4ea97d5729194b889bd0fe6d41
SHA512 38f3c2d1c0089b08f1cfa256f168af511a21cde1a445e8d4b81b2743b49e9776822b0d8f1a82939e40bd6e38f9398a8c01b2da6a6d3696c84dff0b6b0dd809e2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Login Data.(MJ-TJ9302618457)([email protected]).zxc

MD5 2c239e9187279bab9a6224da4a051f05
SHA1 174d6ba4a9c1db0659e0505e2bf80cd891499ab6
SHA256 55d6738b42c955a07af8d61da5bf43b5db42fa4c58116e03f3a0b3f8f9a41abc
SHA512 aa7dbcc61bb1dbe469bed734c4d8b1639bbd7eb3d21dd12af22e3af0354dd732fc3d47cf716befa2ac7539245771e5839998497c2a765b62f465bfce5af3b501

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CALHM.POC.(MJ-TJ9302618457)([email protected]).zxc

MD5 82a0a557998fef09d967cdab5c250d09
SHA1 2b44dd933e4d6f9621e3a7367ce4d42b5a0674aa
SHA256 2a463cf93192a4c3a86696117c9350076d8764d4373ebd3299baee2dd8d4eb95
SHA512 bc1b601a31da4491aff3b8dffc1ebd9736180ce5fab710643866a409a9b39f69357b9cad112d11613cb9f5f4f60ac7f498578ce56fd3f58b216be982c32461c3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\index.(MJ-TJ9302618457)([email protected]).zxc

MD5 3f2ed94313d292861befefa7caf50558
SHA1 c17a5a6875b9104be4d8b9ccafd08e86ce399743
SHA256 5c79d1f2c7e1cb0e120825adcbaa2ca9ad61c0edd9399763d49926ba62891f29
SHA512 fdf3317fb86387137700f434e80048690cfa127418e2af6eefdafc75bb09e6c83bd8d580ff319225152add3a2de4e81400b91ed408fe3b2d5cf492f53dd35ec1

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CALSO98.POC.(MJ-TJ9302618457)([email protected]).zxc

MD5 9bd7f709d170a2a33819fca1d0324219
SHA1 ca317c03abf8732c628045e2a16bf6a6df6bf2d3
SHA256 94cd81432027c3790cac9e568bac2f571bd92691d32cd281b46c4a26b659daef
SHA512 b5ed3c74bdfb7e2bf92c7753b3a313610f32b0a655fd10a257a5033bf966328db0d059405df43963881d8061f9990f8eee91eb14681cc12b769d035a5fb05c78

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BIZFORM.DPV.(MJ-TJ9302618457)([email protected]).zxc

MD5 224db4b10bb0d7162400bd4a91d3479e
SHA1 e8049f49db432e6b54981b3ede68eb59eb4978a7
SHA256 6b43f4c993aa60db66d1735da3fecc2eb7e03e748b74951712ae810fb3e23937
SHA512 3138302dfcd4384179b952d3ca18ae8badfdc91ebb08a48048930f9aa621c67669e9e38e6f03630d6e7e524fbb86c0ea8d9302e0e4a5ee2a1a675313b7b61ffd

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BROCHURE.DPV.(MJ-TJ9302618457)([email protected]).zxc

MD5 368c46242a64c73b27a70dd1995c71a3
SHA1 c73143c0e5eeec55baa74e1adaacbedea6970ad2
SHA256 5d9dd53178fbb0148ad6413730deead157329c3aa1413e1d8fefcfa7fe14ed78
SHA512 2c73b06fa3550d77d16781e8864fb6e93e360516e744f5c5ac635f308cf0f7c850934b60ff40c7b3a8b39c8ca9327302ff43b48a0e23b05764130650b44b46c0

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BRCHUR11.POC

MD5 0c0de6f0743a71b0ca8760def43fa6fa
SHA1 07a3dbf85a86c4e48f61ea1692ec6810b7530ced
SHA256 f21af5fcc50df7d54679682a8fd51a8b77654bcaa887b6fe335cdac41a72a5ff
SHA512 e97d9efd45b2e50881f2fe9534e7dd2240a8cfa6d88b6c78a38954033502f008dfe764b31f8c2ce619ec00339a4e01cb9702085678bb73172800e36741a482ac

C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BIZCARD.DPV.(MJ-TJ9302618457)([email protected]).zxc

MD5 b1a8c4939093605aabe82e03e3abd9fb
SHA1 176acdcae4bfd49202366f57fc0a9bfc3f539004
SHA256 2458979a81a53cdd1afaf8661f2e2932f722a54e0a722c81b1d80a92956b9479
SHA512 47d9fbd14732de40f65a30a44b615fe62019ec2eb1c988447ae77ecbf2c51941e9717ddcd9793ac29cd9494106d23487e94d24a65c6a7b61c16bd64500edf4de

C:\Users\Admin\AppData\Local\Microsoft\Windows\WebCache\V01res00002.jrs.(MJ-TJ9302618457)([email protected]).zxc

MD5 fbd8f4dfd47c7c774dad60d14af34f95
SHA1 b965f52a5db5175328c8e5ceb6366717b0b56024
SHA256 eeddfb009b133ef3705fcd5b8fe0fe9678c0730f1472463802e6d93a37e97bb3
SHA512 917802d1aeccc900a38e7a09d00e9996fd5ae78a45d91c6739c30dbe34319358955ad06e52f90236f37597d70992fe25847c1ed40b55869844520b2c5515e3b6

C:\Users\Admin\AppData\Local\Microsoft\Windows\WebCache\V01res00001.jrs.(MJ-TJ9302618457)([email protected]).zxc

MD5 79a5eced54a1af2a9f5d936a0e5cbc8e
SHA1 8e88d7268aafbc0ef63177e050b0baf63218e0d1
SHA256 108f922bb0a2ffedb3365996cda700bbd77539e53344f20dd972800acd125d95
SHA512 360d32378bfa1dbd94bf6a9b32ea0f4527ac0f75a4ea0c3dd4f55004fcfdb0c18522ec92338036ca21db99baf8f16721ed014e8c988ccb465162368c79f4cadb

C:\Users\Admin\AppData\Local\Microsoft\Windows\WebCache\V0100003.log.(MJ-TJ9302618457)([email protected]).zxc

MD5 86ce0209a299c1b5d8940df8eb3abde5
SHA1 d9b0616c41de87d6735acb777d931ab90f695659
SHA256 daab67efe1980a9ebce0e699acdb956d1750a4040951b7867a56a567ad2ab477
SHA512 3df6d3fd1706b5f78d1d30a0a3446eac2936ef1458f2509d4db06ca2dfad0e1bc6addaa9d1b51cf44b06c9233cba876b75be1a6c4e0badf95a1c34cdab02a8b9

C:\Users\Admin\AppData\Local\Microsoft\Windows\WebCache\V0100002.log.(MJ-TJ9302618457)([email protected]).zxc

MD5 dec6b7a3357dda16f3a26ef96e32fe1d
SHA1 2fda1e26f5a27eb82bdfe9f8064e8e23b2056902
SHA256 4ef97e7f586ac0a4e4c803e11498a206d738d492fd6612867da6912f1386b5a8
SHA512 a456918a956be52cd33ab48ca2778f027ff8901838412adf0e51a6661a9b82eef29d5a9cfda79d0950f0dbafbabb6d21ec517e4e542db30b7179e82153da6d63

C:\Program Files (x86)\Microsoft Office\Office14\PROOF\3082\MSGR3ES.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 91cd9e9e63aedad5a436d48c7127b54e
SHA1 70a749d7bb25b17b2d4972033f5d85248ad9dd75
SHA256 c5a4e7a100087ad88d2c528487a0c40e4eac06bc29c6a5480d85f5eda12ba405
SHA512 0434dbea19aa0f7497970d603d59178d0e8940644fbc55e996e7538b6fc6953a1e627cca59e34dd3e34d2941769e2d11dcafe7b73b5c914e4c2c7ee766e6a0f5

C:\Program Files (x86)\Microsoft Office\Office14\PROOF\1033\MSGR3EN.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 ed5906d32de8d529bfb186b0a3a610fc
SHA1 4dcc5a22dc53deb254ab55fb3faf4f64f6acccb0
SHA256 affc7ff85f164ae229eb75de6c7b949770c177744cc5fae0a86b92592e028622
SHA512 d80b874dcbbbd8cecb24251221c274a547f906cd9bbc21528b5c4df50d5806e9d9f409f6c7fcf55a47250207a6b4d17be79995c3901fcfedfdfed5af0ad578af

C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSTH7EN.LEX

MD5 7f2214bdf988bea50741fb417153964c
SHA1 dc0340e63130e4d528f82dc140f47aa7323224ba
SHA256 22de6c0aedca61c935704fc87f4205a16de7f10ef18375c9489280ba93a07c41
SHA512 4c6c27c36604169aec1f03c5dca4601dade768d71448cd1afc6361172569f27fc9c99d6e235b68b5161719af6a29be636a1423784d298fd4fa3dcc0adfa89168

C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSSP7FR.LEX

MD5 0e57a91d6ef1aa8d41d7180b892ba28c
SHA1 f299d041218053bf0fedd717729f5045ea4703ec
SHA256 c0f9117059512ced863c4ca15f935ee8743bc5eb22315591e275a8e06c77f958
SHA512 8ba5ca8414dab8c190021a84ba0a3c6a328f363bacf49f37bf6de768584f2c9e7ba67933dd02083011afb8938d053c5db82b700923c078d8c443d479599401d3

C:\Program Files (x86)\Microsoft Office\Office14\PROOF\1036\MSGR3FR.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 1a567fdce004ae4f7646845681f54ace
SHA1 1df70abdca83839cfd292e231c072bbd21cdf70e
SHA256 eca345eba54a10f3e60f9af5c6abbe166c8109112610aba23853acec148700ea
SHA512 6ce95bef6df257093101bd682015bb903efd48e3e5ab725124a77db12d26ecd931a8c16b0b2805aa330e6a36056b58373248ba235fbb22f4cf5b18313e489443

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\n3lsnn48.default-release\startupCache\scriptCache-child.bin.(MJ-TJ9302618457)([email protected]).zxc

MD5 ea26218cdf255b8986556f897a9ce1db
SHA1 85a8104ce9779e7f990dc82b3bb2a47c8102144b
SHA256 b04f8141096968fc5e778e4c9fb0c941a9422358e817a1339ad738115572d7f1
SHA512 85c730d6f5341e9a179af3487cf27d7d51a81ec5782cd92ca57c963ffb0d672889c65700004e08e06809d4fc93a8ae6d54e53e85baeade4bcaba0387eda5ef5c

C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSSP7EN.LEX.(MJ-TJ9302618457)([email protected]).zxc

MD5 fa55140c17859c78b699e00d798ca2bb
SHA1 05a98e143930d89eb9e0227ffd71ba2fe45268bc
SHA256 7bc3abdf8f57d1c13eea4bd2cee2195c9acfb9bf6d1d50b7460cda5822d4cb50
SHA512 817183a8601a836c2cd0f10bb618124ae72a472627126c52753203f7bd1d919affbe1937eea8320b26bb6fe4f1e45642091ce7bc9d4ef01033033f8e65da80eb

C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSTH7FR.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 8df76e5543d1dd3b283b6c449c851151
SHA1 3cedc8fa95f66ac41abbda68e68a875d99c32693
SHA256 50f6698fe549e353cf24227cfc24ca54cca866db3d1ad6fd92fbd92a75575b3b
SHA512 c3ad73717a2d9d37765dcb36b4894139e7999471471a01c1231aa57026a6cec449009864973086a7bfe4c41f67476729f4369dc189f1eb3e8ffbfd1c994a0bf3

C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSTH7ES.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 4b1cc0b5f61d76dcc47addac3bd9ff36
SHA1 671b043c6ee5fdcf4aaa804772c7e160a559aa92
SHA256 7630a57884c7f476a75e2d72a06e02931f072cd6a0ce0f7c60a3f678d8e0e5dc
SHA512 ca30b8e38ef25d308e836cf169fb937a5c8ca2b835d402830b42663bc8c4ab1cf241739787b9cb7d5fcaf885a139f732a660c2249d3b31f1bd7b4d4123140a16

C:\Users\Admin\AppData\LocalLow\Sun\Java\jdk1.7.0_80_x64\jdk1.7.0_80.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 94782008724211e48f85bf02d8fefce0
SHA1 be710e4c69558aa21c68d17321628a89e0f57fe1
SHA256 d64fd0c70f37e6812dd96fd844e2bdbb21d2f5844540118a9bb6ea8282cf91d2
SHA512 a2ef107d9354723f09e54f85d2350c479423c1ea2f31a01323b199b23b41c8eaddbca424342f1c848f22fe4004536f0c9b03adcab71450b9c36741052a54c668

C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSTH7EN.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 b64f22e9f1689c3a53e49131a878d262
SHA1 2a1e3d6094e13614184181f52d075b41e49be1f1
SHA256 6ae712cb676fd0845a6d2893917b9d5e3bcfa9c7746c0190c6f63fffe93e0469
SHA512 98d1d6c7ef06957ad22e52e970f37f9c9dbc370de8025d309d1bcee4a1f3dcdee1d3b6f4d5b536a42e00a8ee39836b4b33092b47f49a2b23be3da2d636de5501

C:\Users\Admin\AppData\Roaming\UninstallClose.asp.(MJ-TJ9302618457)([email protected]).zxc

MD5 cf820812388d87c045622eaf827a3a9d
SHA1 0f7f4b65b23ad66a180cffc728ef3d236b22126f
SHA256 f504f635a850ace2bc88d8dde9219cef57f72dfba1027daf31ff7b5ac2073e11
SHA512 4989a81890ad5ae123e8c770750d75fd0e71b5d4e3301f55d21baf1adad9df4303a9a4ce7d90c3e737d6638a041e51ca906518bb2c7f77fa680998ebe1fa8d83

C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSHY7FR.LEX.(MJ-TJ9302618457)([email protected]).zxc

MD5 ef9b0f1e1dba739bd46ceba0b623e1e0
SHA1 1323fd2d367ac047b6b2c76e3ed14ffb4a4f7c56
SHA256 8a61588f66f8157aecdb1d3919fd68a886c685a5cf72bf1d3da452ce28ee5e40
SHA512 26481bb100d7b0dc75359101c4ec120a89c670aa3cf1384f376e69e3a0efe9b8fd3fd3c3621b978172b1db1a5ed6b9aa35fd965469b51fc16b91cacb0642013a

C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSHY7EN.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 bde22d46f4c9a18aa823463741a595fa
SHA1 88e896f4edb2631dcc608a76d199208745138e5e
SHA256 eee2f0fa87afe711b09eab4fc0e0fc5ac487b38c146a1cb364d21cad224d1344
SHA512 01ec2e8d12d4f9fa8420e833e655852cf3e6e33a52348f8f56253d69f304b2bc931c0061e7b697601c23f532b3a626bcdf790f541fe971ea56cd9733586f4052

C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSSP7EN.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 f7c342d21ade242eba299319002cbf4b
SHA1 183863938cee314f0c1511e7decb61435d1af315
SHA256 ce7315af34b90720190cc5bb98875c82af5428071609420ef929cff28db7f82d
SHA512 8014b6029cb5942f01ae9bc1c447710c88806db44608d75f0f93858f521663d49dc20c357144e6694c30ae9cd13a9275d00f1e96be36a4f829d264cf45b7b74f

C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSGR3ES.LEX.(MJ-TJ9302618457)([email protected]).zxc

MD5 0afdb1d39c3735f9c49a073d35b31c1e
SHA1 63c3532a06d89692d5a2d14916347d6d06b1cce2
SHA256 10dc10b25ebbaf0ff4ad9db0add7a40e2a4a3009d038802cc2b5bc252fcaa4c6
SHA512 a85331e1dde5aa8efa23f2cef72b597564013fcb235acd61905718aeb16520bf934274cb213045457f0babd1cdb9d0e1e540c76d2cc024579762303d7f489409

C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSGR3EN.LEX.(MJ-TJ9302618457)([email protected]).zxc

MD5 549fe1601ba5466ef58ccda2f9f00594
SHA1 e1f4f87f5c702ef12841d4ada38a13c5db81e0da
SHA256 bf26fa4b58031084bef5221e08347d91b4ed15edfa73cae6f12e82c968cb02e5
SHA512 015e4ec84a62631c889f018a576e950cafc7d62f356d832adf56233a31b24916e623b192b99f3403fb9fe534f1a7da5898db29034859bb95ae7bd3831221ee95

C:\Users\Admin\Downloads\DebugSearch.css.(MJ-TJ9302618457)([email protected]).zxc

MD5 acd703ad8db6576c41d98cd345939ca6
SHA1 5c0913af73010d0d95113b7d661b3334c1ea41ea
SHA256 022446b19e0029b775b223a93ee69a75b04dc761a40276981d02b4d5625e6ab5
SHA512 cb1c22b70ee2061f196b3c7f3e60b961b95ab90bcacbb304d17e8ac8cb86fb0d8b399f93900bfbd24a4144fabe140474b7348986353e71a3feaec9e9e2b4a5c1

C:\Users\Admin\Downloads\RedoClear.mid.(MJ-TJ9302618457)([email protected]).zxc

MD5 631499bfd1acab66c9cb03bcdab3c06e
SHA1 a40efb8dcabc1e5261b55530b882833bff36112a
SHA256 79d92baa1c5d756dc1e257d5a3f8d3a668c9ead93f4ef4909525cb8e29343423
SHA512 0325e033d16f3146f91fa22077f0cd0ce4ffe37c6ab06cae2644d459a176485b4d0af27e6f457e8aa1a82a3e4fbd5a53e6bceeeec2b12b9c3a98be69cf0abcf1

C:\ProgramData\Package Cache\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}\state.rsm.(MJ-TJ9302618457)([email protected]).zxc

MD5 eb62aa6a18723665be26d253a4b59e4a
SHA1 bb0cdaffe3ba25c07081f2b0be8528278951b622
SHA256 c66ccf69dfd0ff4fa2ce199be834beeb6b4b6a226f8e86acca3cb90ee61dbd26
SHA512 4abb921d7a0832d8cbeee7b6b3edc9ea5f9dac7b28a7da49c4fd88668b63bfd5f546beea0aea32fa87238dbff12e999481d8daaa1e245e31bc55cae099b506bd

C:\ProgramData\Package Cache\{E30D8B21-D82D-3211-82CC-0F0A5D1495E8}v12.0.40660\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 9e06e769781ef17096e5bdd126a862e9
SHA1 984428915e4223675aec05bcbab4405f22fb0b2d
SHA256 82c02f93cecc6c8559050693d5dc790f0341a1ee76fe5e2f48e67d90fa9a72df
SHA512 43e911d9c639e694c66c2cf49f6ba981a6940c4776ac9cc030c2473b7510dc6439ca5e67ba0d6d443185073f3b439e29377e47cb73416c87e8c011986b6bdf4c

C:\ProgramData\Package Cache\{CB0836EC-B072-368D-82B2-D3470BF95707}v12.0.40660\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 6dd3896c44dbbab9222c7ffa3f0d6fe6
SHA1 1a406eb2f602b0604f60d32344acb3bb39824bcd
SHA256 c36d426eba4f95ac6cc1da5a0ebcef3677bc817ed8b55e1d0f613b4fc3e98269
SHA512 3c6e066aa4166a579295914ce55d7ae368b8a5e6cfee9965a17af644cee2cd27bdfe1c8dfc124c75df27cad729ec622f4c73aa1b37d2371b1e48a77feb0527ef

C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms.(MJ-TJ9302618457)([email protected]).zxc

MD5 96131b8fa6e59e47127a22037c8d781e
SHA1 f7f874c9453a9b88168e7e381e10df7ae72ab6b9
SHA256 f8932a383d86c20790a9d74f94383a424aed485cdb7326adca1a6d228dd1636c
SHA512 db252438725ee540ef0685c8ef3000ea68d3dbc08352528e69ddd5e00e6679f1597719784dc0d7b70441bb332f855f4421b4139dd25f10d46f04df2a9207c104

C:\Users\Default\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms.(MJ-TJ9302618457)([email protected]).zxc

MD5 737e11ecbbeaa7b4d900764221a0ad6e
SHA1 df9f7a8f3b917e3f9804f1186bfc7abb625ae4a5
SHA256 ee8a7dd7714866a9144e056486f8c5e58893fe52344e9d079cc9714505e29179
SHA512 aa0a47ca244cd38f7384779a00e988bc5ad4a07b7ec56b083d2d21dbd4149ed7d45bd7ff78ca6cb6cacbbc185e9b87d027578a4c1a0043d3080b67781434f128

C:\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg.(MJ-TJ9302618457)([email protected]).zxc

MD5 b3616770b5ca844e882e89b676da9adb
SHA1 1606df3507a44d6324a976fac52e2941a3d9bdf7
SHA256 66beb4f79de10f36e45dd8bf297dc91735d7f1679e5b7935e3c37b88d38e2352
SHA512 fb7c479d92ebf0dbbb6a34940c8183f4dbc55d810ca8bc237168cf4b05d454f543bea0390fbecccae50e6b2d6d8a49ef11d9e136b4add6a57a2fbc042b58ed24

C:\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg.(MJ-TJ9302618457)([email protected]).zxc

MD5 de0a25097fc324a4250260ada3348ba2
SHA1 701dfb055e11524c30c8881d234de99fb57deafb
SHA256 e19eeec6c17e78c76710b59360fe0e37852d1ddfebc0405a6100676081c562be
SHA512 d1b69805148fab19334703573890d003a26d0517d90be5d7114bf4a7a2ff738f8dbb3c5b93f4877566324b5792ae930661757ec69e6c86857b813f7342c2c67f

C:\ProgramData\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\state.rsm.(MJ-TJ9302618457)([email protected]).zxc

MD5 b5737692ca709b4c26464b89e74ece51
SHA1 e1f190fedc8487abf6ace2f1b4b77297e68e4c8d
SHA256 4b686f89fbbe788b4e424b541e21c6d98578963b85041ea3a93674b6e2541f66
SHA512 d42e28a23c8381cdcb24bf1f85915eb726ee46741a28a610f3b9e130bb8d542fb05c85337942516c8410f7cb7bb14e84dccd4511fc76e99620425153c75ad88e

C:\ProgramData\Package Cache\{7DAD0258-515C-3DD4-8964-BD714199E0F7}v12.0.40660\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 52b4f45d12309333273dd8c9f43acdc9
SHA1 9bed1a870fa64e7c99e4e074c968c19fdafbd640
SHA256 5c29475b6daa92f3104cc170687dc93cfc360f8d41d4d481262e50d7b0a64978
SHA512 411c766e8b0b8c593e4853892a5ebdeb2169bfe46e7f68d5aac2560473d69bc8a8cd81d0d7c5c28bc25a5520109f549efc6ff63a99b13bc5e79caabdb09add30

C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\state.rsm.(MJ-TJ9302618457)([email protected]).zxc

MD5 b9f871b2bffa07f6b14ed133685b376d
SHA1 bde4933290dec5d0f2c76578716c1a3742fbd57a
SHA256 1e0beabaa96d25764176cd0b8dd3b1eb116f14c172168f84ded462d4c7959f6b
SHA512 ced77d6d34979d558e1af08fd5d858dffc4e76b768a2d8364c980dbac3c965b0cc1e53fc2b6e3a94f6ad919ada0cd72767d05f1b2476c78c99df163eec09ca81

C:\ProgramData\Package Cache\{5740BD44-B58D-321A-AFC0-6D3D4556DD6C}v12.0.40660\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 cb95578971a87d7b3d2423f3fa779950
SHA1 5a1b4d6c9c494f12a8f33329b9b661c0277a51fd
SHA256 26fe42a0c7bbd2edf1723a2b183959810889c77c1c150b635af7e3214c7e2b48
SHA512 94503f6c56e90ad2a940fd2e449d2952c178948c0a9c1c8882d47e6a15abd9c94a27051873c638749dcaa14814af59387f16d7bc6c298baa76f69d6a01039094

C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\state.rsm.(MJ-TJ9302618457)([email protected]).zxc

MD5 33e7581489f8af6916afddb5539912b1
SHA1 f37671f4114c0c328650dd3a219c0b827c726bce
SHA256 c735fd3a8ba353b623c101f197397b68317c610cee3a8c4fb040dc324a10b297
SHA512 d1319ebfd7aee50a2b6c9bcd2ae1177674f0640851c2ae4c69c6f78bc46e9a8c9f342e773d504efb7c90358e507c3b25409c7c60948b6f874de4cd12592f0847

C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\state.rsm.(MJ-TJ9302618457)([email protected]).zxc

MD5 7409eb8ee3755cfdc222e62af03299e4
SHA1 6f099afef5a694e1fd8f5dbc77052051d9c6003a
SHA256 7abf29151d8fa00ce53950d309183424c8fdde61bc3aa696e990841e1fdd73b8
SHA512 7a6bc5cfa3671c7988145b5bba344e08cfc53f897bb3762bea8fc58c22b7276262f8c8bdf29de461aa03a239210b6d0e2b337acfcaaf3f3f7466490a9fc32f59

C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\update-config.json.(MJ-TJ9302618457)([email protected]).zxc

MD5 67a5c00d8d083c2a16fead6596329c0c
SHA1 94bf66874c7c924e066e40e7c98100977b46fb61
SHA256 200c3ca1adf8fbfaf76286eb04c706690996be0fc3373e4efb84e276f44dc6c7
SHA512 085f4d4b12785dfb2c5f1c86b6e4af95a96359c33c3c87f85a1dfc791ad3014cba7fe82967f0cec9932acdbd9a069826058f503ffcc3efe4f4a4df7ce4b47b07

C:\ProgramData\Microsoft Help\nslist.hxl.(MJ-TJ9302618457)([email protected]).zxc

MD5 02498bf80d70159585e96b90d75ca01a
SHA1 1fac3050b49ae7dfd4e83f2d9303017a325b089e
SHA256 3c9bcc3457cf77b5286e8b8749d473732bed2fe1c529de50bb59c52b0837bfcb
SHA512 060a8d3d19cead300b803a53e28eb6a2d07fa3f929cb37b60aa564fab86503dce591c92192ce8e3b1e740c68305755891ea70c26412ae154a616b1b9593ecb4c

C:\ProgramData\Microsoft Help\MS.WINWORD.DEV.14.1033.hxn.(MJ-TJ9302618457)([email protected]).zxc

MD5 975593d356fe5c4da6554c0f907e24b5
SHA1 b1e63bd706f078aa38aed19b61eda12c2cb26cc0
SHA256 33e9029fd69c7d038528cd08d13c64fcf57c2feec190b8c0138649a22cec079e
SHA512 5419a62451fc7a8b41e53e0589066a2bc7246b034c5cd1d49b96e219321e21f621d8b9ef28f74a7fd7d7ff395286aee36c27b20a3f8e3324dea92361b2a4d95d

C:\ProgramData\Microsoft Help\MS.WINWORD.14.1033.hxn.(MJ-TJ9302618457)([email protected]).zxc

MD5 e9131d5d3df87bb22efede51af3809f4
SHA1 9637717d9b0e3a9d005ba1c93bf1c3757b10f4f4
SHA256 e3aaab64237d837b10c67f94b4a39b9d9a20dc005fdf8e04a53b349a8b065d2c
SHA512 18f03cdaf62586ad1a9255cca80961476a3d1012795587efaa2247de56cfd8bb2f75c33c7dcdab9ac207452b6a3eeefcc1d7b4a67188b364dd387731483ab7fa

C:\ProgramData\Microsoft Help\MS.SETLANG.14.1033.hxn.(MJ-TJ9302618457)([email protected]).zxc

MD5 e4f5edeb37d86af4a9879bdfd4d267c8
SHA1 48bcc5336eaf36ce960f1e584a31e8c5137d16ed
SHA256 b42db66435aedbb945c35281d1f88e8e6edf972a1632a532d613b2930e745d35
SHA512 da9fc49275e1d05f73560540f7468da0d851aa549f589614e268dba03d4768c4f59718262009b0e401b3813225837d259ba9addb1b108c9cd3f0a957d0573a1b

C:\ProgramData\Microsoft Help\MS.POWERPNT.DEV.14.1033.hxn.(MJ-TJ9302618457)([email protected]).zxc

MD5 64cc05b2eaa19db932b95b60dc709efc
SHA1 1b8788222e9875632f032cd82f8087be9e6d6a40
SHA256 9ab5a0fac1c9fd8cc296871bec3e438ac2f78b40a64a8add0e76b025c235fb46
SHA512 ab8ba07357dec5f6298b414e317aa77c392a2fc472e96614ceef91027af9c82bcd702f856d6fdfb0c18de3402f396de8cc6886a925672cce6f31807902040941

C:\ProgramData\Microsoft Help\MS.POWERPNT.14.1033.hxn.(MJ-TJ9302618457)([email protected]).zxc

MD5 d9c3e023b6168427a2b28355fd720ffb
SHA1 e0bac54dce6bb6a8c660406d2b85bce8e281a3a7
SHA256 909de087286b0ba672cc1ea79a0af3e88592d3ecd0a927415e10cad048019485
SHA512 f7205b2560cf39518c0ce7d57c353f0854de8953385e3c4920d42f5eb67bee87000c85e7e4add52957b2fd29b50a0909fbec23fbc82b13fe016f05b971fb3858

C:\ProgramData\Microsoft Help\MS.OUTLOOK.DEV.14.1033.hxn.(MJ-TJ9302618457)([email protected]).zxc

MD5 66f7c2639e67b7677f04232eb4a581a8
SHA1 2c467bda4fca2a42e4996feca81def78f36ed53d
SHA256 8a912bf0e104a46d8eaad8c0f97cf2cd280ccbaf5633a952efa0c65431535baf
SHA512 9722f7d3893852d9ab63317647cdbadbf9ec692af36cadba2b36b71fd2dfa63548de14ae334b8f50abd15f818d7843539064943dbf5ba9915818e0d74abdde7d

C:\ProgramData\Microsoft Help\MS.OUTLOOK.14.1033.hxn.(MJ-TJ9302618457)([email protected]).zxc

MD5 db45ae1c38585dde88f14c7f4d713b87
SHA1 216218a6eeea34e5c903f0b8420c5da002a7a702
SHA256 bbd3ef76f035cf306bef6344e327f994495f38e1db6f4f99e4c64627e076dda5
SHA512 cac8140f11decc7fa68a2e27fdd8e79c0cd4bf7a5f745535e4a3eeed793c391e1881f69ef1e40ee812caf33a4bc5c13bd632bcffda2759738c113178dcd1ff3e

C:\ProgramData\Microsoft Help\MS.ONENOTE.14.1033.hxn.(MJ-TJ9302618457)([email protected]).zxc

MD5 b6bd2b0e5fe9a903b29a130363c3f741
SHA1 27e566406a8bf64216b717870d474f0714ca1e44
SHA256 173c06d57a636a96a6f5e712ef4d35f8be957690cf544dc68a0d2c6155e08e96
SHA512 9cba262bcab8a9fb261454b2b078e55c863bba485dbc7613b5dfb0e43e19d0429a478b6744ae6fe37be907ed8e6f969c1bcf693217b432fde8b05087da59b637

C:\ProgramData\Microsoft Help\MS.OIS.14.1033.hxn.(MJ-TJ9302618457)([email protected]).zxc

MD5 0209c2a9ffdb97224729b8402cbb4078
SHA1 48063fc9d1573b236ee40ddaff635f2eea21f101
SHA256 e87a281fbc5c3f6bb3355ddd27fb2498327236150ef5d6ee43aa6f0a58140bf1
SHA512 b428cf91ba87617dfa6b4b40ee3e147fd55793d7b9f3f7cf71ad6efc101a971a3ee414296fe31d50f5629767c40afb40045fdc0fff4d7fe4afc3b1fe52440495

C:\ProgramData\Microsoft Help\MS.MSTORE.14.1033.hxn.(MJ-TJ9302618457)([email protected]).zxc

MD5 61c774f570eea9750304bfaf059788dc
SHA1 b18012777d96d1f805cd950a5f98ecc8e041bbf9
SHA256 355842047cea2201f01c48978f8e8b230eb3ec6fff8eae46c83e1c964473a2f1
SHA512 3c734cadf11477e4277c5e47fca4cebcc35d7a77a7b70edded7bec3a759d1863c262d155d05e6880c1537d3a34e63589a3e6cb1593b87beead92440e97173742

C:\ProgramData\Microsoft Help\MS.MSPUB.DEV.14.1033.hxn.(MJ-TJ9302618457)([email protected]).zxc

MD5 c4b5d2aea93642c09a3df5c08bf5d36b
SHA1 49d65bd04e81cdc4baafc575ba04b36b09b0fe84
SHA256 2e964983df72f19fb3900837d26b363ce9afb9a214c8083206c37cdec30d1bb4
SHA512 6464e4a3979dbb2b90dc48c9f9b4e1c1546a282d4a64f57722c117cdd79a58f8e97a7b3fb2154d3694f3bb347d1a713196b361d7e59f927400a0f2364e0c9165

C:\ProgramData\Microsoft Help\MS.MSPUB.14.1033.hxn.(MJ-TJ9302618457)([email protected]).zxc

MD5 bda91626913422c286f644436b2f347c
SHA1 1e73c5429935975983c8f9daaa949d9e3eaeb4dd
SHA256 672aed848f88e6b798511295ebb4a5c066df334e7cab812c6b1319e6e21f0079
SHA512 f1c6302e2b768fabc76db5f10d150bef0ed3c69179c88032c808b56d4afa2d8a38cbba31b4ef50edf4d70b45b97c32f1e89ab6654a2bcd8a94619e1a9b6d5e35

C:\ProgramData\Microsoft Help\MS.MSOUC.14.1033.hxn.(MJ-TJ9302618457)([email protected]).zxc

MD5 4e07608b5e497089ded4fdb6b3ebfbf7
SHA1 76c4cc0b5eaff2dcaddb65c87d61c96f095b0708
SHA256 f29700c39d671a62d49774a60835be554938fc833653ecbeb4376fa780c85612
SHA512 7d5659d96b79de6dccd7c6c6180de44d6ca68fcad9db7bea908c4207987cfa9ec0370aba9f2ddcaf0a011d325e8c2d52122b0625a22b46f20e2c2340d32a6fc3

C:\ProgramData\Microsoft Help\MS.MSACCESS.DEV.14.1033.hxn.(MJ-TJ9302618457)([email protected]).zxc

MD5 43f018de2c07580c6cd436b2bfd77d84
SHA1 22deccf04ba72543b52b28a1c593be60df8f66ef
SHA256 3cbe243f1f2a923000df6d3d74ac3895229e8e0a9082f223d4d9415b5bc67e4b
SHA512 e68fae04dc0c97c22be1fa46ba9105636710f0a3332791bf8acde3505134135d749f5b6e9e79f29819ae72acde052175e5fe4006ea0180ffacd9de9316aa7601

C:\ProgramData\Microsoft Help\MS.MSACCESS.14.1033.hxn.(MJ-TJ9302618457)([email protected]).zxc

MD5 cc08261deefc1cfc48c192f09444a7d0
SHA1 fb832e4b97f48469ebbb7a57d820397a5ff6abf1
SHA256 ab99ef82e5178bd23378f29061880adcb38498d804cb2dcfffc89cae05e4df4e
SHA512 60d2cb2c2e433894cba77bfea79ce68bf423c5251c77347f4f9bb16bb2a6fe3962681dbc2433f55eae281d5d21c59d9516f440b8fb34ed0a86b418e78812fd23

C:\ProgramData\Microsoft Help\MS.INFOPATHEDITOR.14.1033.hxn.(MJ-TJ9302618457)([email protected]).zxc

MD5 5314a71200bbe57c3b59d553089aff72
SHA1 e26f14a7402e9a56d66e84d9fdde022378bfa94d
SHA256 d0a28c577dcc443311359f3fc78d131d2fcc3be9ced3806059a45bc1ffa5fee8
SHA512 f4b87a948b02cda2b7da59e57fe06855cd050b38f1cd2ea911ce6e0e06652b3f9e5271436b97abc5e7b1dedc770cd0530f7478ac79860dc37957ac893eeab796

C:\ProgramData\Microsoft Help\MS.INFOPATH.14.1033.hxn.(MJ-TJ9302618457)([email protected]).zxc

MD5 316cd1b8221b467b830800eab413a4a1
SHA1 26f4e4c4d2330aa84efd9221b61d5eb1bb6461ac
SHA256 0fabc2a8b559cd0cb8b4b4dab8ffbf412e46a5d9b1a13178e850f3c3a83ca48b
SHA512 102e97d2641776e682051b2aa36d844969695cb3681f7534708c9ed236e925f9565aef826e66c16525c9e940ebf43b6e18665e9ca46f9d38b787f3580c35d42c

C:\ProgramData\Microsoft Help\MS.GROOVE.14.1033.hxn.(MJ-TJ9302618457)([email protected]).zxc

MD5 4cb94e81d5790a95eb0a3d8ca58798b2
SHA1 5a29bbc2e89a88c5e10228e99e70b958ba0041d9
SHA256 8e3c2ffcbb5ffb3223f972a8db555b53268684aef8ec98b589ab7308941a5a23
SHA512 ed732827592fd7a1a3a6ebf717366f0ea9e0e960408440b46115a3b886ad5f3638a9c2b2fda692ff70b94345c9c9a93d5f54f9a05917bffe0cb64a25536bf2cb

C:\ProgramData\Microsoft Help\MS.GRAPH.14.1033.hxn.(MJ-TJ9302618457)([email protected]).zxc

MD5 32730692ff997e316fecde12756154ba
SHA1 3050017d26aa051da4c9b2c0108ed3bbd8d85ebe
SHA256 483d1d1169e0b16ea19fed6425f9ba63264c24ef20c85410d2c00f4cc7b4cb8c
SHA512 7134602f9b65a0678bde08dfd4e3e8d4d333761e56bc98287e3a2d88a3421679d59203f2cc0fbef94ef3a7e5caeca358489906809b7dc9fed73746aae1f70eb2

C:\ProgramData\Microsoft Help\MS.EXCEL.DEV.14.1033.hxn.(MJ-TJ9302618457)([email protected]).zxc

MD5 981cfb34b091018b68a8aedfd543f212
SHA1 9a0f3654d863afb25927e8c87a65e15f318f2050
SHA256 2b22249f83da635af7c89d6d9075eba5e76b0e936448d612149ec332cb29f543
SHA512 d11aa99a14e86af08c14be908d1f22a844570eca8da313d452c1be1b87cc7fa8e19cb83e0873697367b9de3295f0a5578d2aaf78bdf869b23c554314d4b77af3

C:\ProgramData\Microsoft Help\MS.EXCEL.14.1033.hxn.(MJ-TJ9302618457)([email protected]).zxc

MD5 d23c7acd3e568ee32f92ac6b97011e15
SHA1 ba18b0454051bccd4dd073b4bdbfa410bfbbb6f1
SHA256 c30c19a761f0891392efbcb0c54499b58022aeade57321887dcd4eeef6551b77
SHA512 5df327d96eb5fec766e4944a8fa896385b256b0c3b71d5b89e615903a2981d350a2f8c8c099faf4d912e5d06ca0645aaaaef37aa35284f7593bc87a44ab687cd

C:\ProgramData\Microsoft Help\Hx_1033_MValidator.Lck.(MJ-TJ9302618457)([email protected]).zxc

MD5 8807d9bd3dd5a845229a73147e8c93e7
SHA1 627b8a625c410e43cf2f47ab8180675dd422c80e
SHA256 16bf0ec8142e9f5eb84ca2c5a2bf2943c6e17639234890484a0ec17fcb0119e3
SHA512 6379c009cb6e66c3269c494c8d27dfdb6f16108b111812af2855c5f9471dceb0bc06276890b48aa15b29167113b8419407d2a10a64d969f0d0666b86eec9d85f

C:\ProgramData\Microsoft Help\Hx_1033_MValidator.HxD.(MJ-TJ9302618457)([email protected]).zxc

MD5 08dfdb900a759d301652f1d2e16a2e27
SHA1 e88f10217bcd26215e8527700dfcfae549169eb0
SHA256 5ec3cc48ea88b523f19007d732cadcc5c310369c5f7f43f89c90eed3c7653ab3
SHA512 979e04e92682618d65d7b820991481c7059cdf05848d8b769b1a92625f69ba513a9a8eaa9adaf3f3dd9dd6b0e8295ab309c098f046affa80dfb2edd247738781

C:\ProgramData\Microsoft Help\Hx_1033_MTOC_Hx.HxH.(MJ-TJ9302618457)([email protected]).zxc

MD5 dc3e64840b1621c552eee17d8130ed6e
SHA1 37a24a99a2c029dbb0e8c2b48e3b89e3bebd06a4
SHA256 a68a886a5b11cdf03bbe74e4b5ab3f020cd71beec641180d1e91e5610f51b0ed
SHA512 c874dc214683f473e31599a2285ba1d5a35c00d490ccc6907df75f77bf56a089cd82abfdcc346a4f3960ab95674a78c54cabff32f2eebb68a5249f33d45ed87f

C:\ProgramData\Microsoft Help\Hx_1033_MKWD_NamedURL.HxW.(MJ-TJ9302618457)([email protected]).zxc

MD5 727720143ed5df381f6556035f230bc5
SHA1 e6b74ca0903dcade7e8b2a2375b18d4d4b51c75e
SHA256 3713c7ea22622dfe080e0892e036d3565efa91892f8a43356af4ce198e6d4e5a
SHA512 196215135c6428f1d578bc695aa9aa08e5fa1dd748aa080fc12ffb58b97a08f3e6d21a03296d5f551a9f18065fc8a60f9fdd40a7a403e14341873a1f5fe12e2a

C:\ProgramData\Microsoft Help\Hx_1033_MKWD_K.HxW.(MJ-TJ9302618457)([email protected]).zxc

MD5 3d83a5a85db96171d340060d27fae9e9
SHA1 678cc0e68fbd95ea3dcbf912f71ed1d8386108da
SHA256 58017f0f2abd4ecbb5fa5d24b105a8b1d813d7bce2604b689bb2ce1afa3ac4f3
SHA512 992557c3fc16dc415ad6ae3cf843919daa681d40d6fec31278702dcc70f02bd42907b215a5e094b1a8c548f6ed9ac1f3582a640ac7cd3623e0e6e9eedf3453c0

C:\ProgramData\Microsoft Help\Hx.hxn.(MJ-TJ9302618457)([email protected]).zxc

MD5 660623fa7822b6d25519064e2a331736
SHA1 c81e89496ea622eec7ebd0981cdfb5a0737db4b6
SHA256 10b3b909a4c04205fac1205a8841b80a534581bfb52976a00f5e2fce06be70f6
SHA512 28944f600aa331485a21846b4cbd9a258c39a6ee186b701e52badd58360d44add3a03117768d402aaf6110df607f2b1cdac0841d97fb0704db1e82d07d4d30bc

C:\ProgramData\Microsoft\Windows Defender\Support\MPLog-07132009-221054.log.(MJ-TJ9302618457)([email protected]).zxc

MD5 732842cc777c105188244fdc0b58fd25
SHA1 0504b27873745963803e3059b3e0e39daf00dc0d
SHA256 a86c5c6dd690a1e1eae1450e703d3427c0edeedd6658f03cf5f99d1f450bd0cd
SHA512 2997696460bd26fbee6749d5dbc064806793b94efadafb2171cbe1894534863ae15a01d6ec93a0c24b499c4a2f21399921eb43d447f807a19346db38677ffca5

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_x64_7e7688eac2ab845272f4daac96479e93e0f0a5_cab_07dc470d\Report.wer.(MJ-TJ9302618457)([email protected]).zxc

MD5 9608a11e74f8983ceeaca0ef3d6faa03
SHA1 e07404a863023ea228d4240f8d933939d906bb8d
SHA256 ae3936ef120c51f374824c28580918ba2b986809c0e17f9a6d67d3ba92db2461
SHA512 f945fed30e55d599d3ae2a038c8d1d79b15a64c36726cb94b391fb11ae6d0c8e83059009d1597469dc87c2bab4bf265268f3dde6402dc2072ac62fe33d0d56f8

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_x64_7e7688eac2ab845272f4daac96479e93e0f0a5_cab_07dc470d\DMI470D.tmp.log.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 8bbc6c17d80d8d90f4bfd6f8848eef6e
SHA1 eb5b81b633d8a67c565f5935c5140f27fb54d151
SHA256 814e8e1b9af24ee74f67bbfa3342767f2981a3a04462b99448a0df3fe9049424
SHA512 581d8d28e787f02c3cd1d517520337dc95c5c8286fe855d6b0e7f14b64829081133cdd2801caacef847210a819f5a5328ed1a1e4198c6cf00ec0a779f2590ae8

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_x64_3eb5ea8473594499407cacbd9887e2953d50fd80_cab_07ac729f\Report.wer.(MJ-TJ9302618457)([email protected]).zxc

MD5 08d32e42965dd760bf0f86dcc4b7d4ea
SHA1 eeed6a4f8333149077b115c4f39d644206189004
SHA256 e7141ab23ae6724f274029f2175d648b20c7480cd122bcce247cc1a978640ae8
SHA512 13808f232f97c4662af22df34210fb63104f9959d07030e5ba51096bd1c33f85b765bafa74a4770c0e01dab624fcc70542b20ffe354816228303a576ed37f106

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_x64_14581a24ae3cd03160d66be822236893de867_cab_05c82b05\Report.wer.(MJ-TJ9302618457)([email protected]).zxc

MD5 cc5f224b9a7cc95c9631df5d1a7121ec
SHA1 132aae6143ad66b30da197dce6ae010aa5c70a78
SHA256 5fc0982a2eadbbdb7955bc437ce434e8d7d14feb6cee18cb5a8105a7e6148bb4
SHA512 d4c3147b4e1cf6b29b5ea970d7b0f4caa520e88b4e4a27cd386c3618e6dd5a0b9280d70cddd5cedbc526f9984da4b56329a74d72c77d03d00015718d7920caf6

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 e0987778330f7251f000c7cd67d3e821
SHA1 9ef9f1a6f8ddbd506ab5353f1bc712e9c88bdd9f
SHA256 4bd7843c1a5fac240d5912d9c7e4b50723a7017d63170844436bbe146f33f1ea
SHA512 b9c61bcfed86384f18fea976c09826a05a022e0a6ba23a0d4a4e9ddc87f2ee42a7a959b53d68aa3ce8481a7ffad28701d30e8f1967c0bd0ca6ae83f2bb93c468

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player skinned.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 48d8151eb2ff7fc65c67d547a2664e72
SHA1 6a0692604e4a7331c3d8191dd38a2bed119f43bf
SHA256 b22c48e34a26a596e94482a339c7e5ef33dc12159ba686be3660b920e8a305c8
SHA512 90e282ed6694e07b78f826f7eb82350ae3ef939265737cbe7bf0b2d36b830d5fd3c8c670744dbbcdfdda7136194dd806f6c94c83b7228ad3ed0d4c5236c4a619

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player - reset preferences and cache files.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 a7255113f3f1c4565c831e185dcf45bb
SHA1 c451167f2ec09cc0cda3cacafd81b7de84aedba6
SHA256 df9c5ff028dca4bdbd43fd1cf20d78af603e7fc58785c61a35bce487a6f65ee4
SHA512 92f45bcda428b1789a6b3efab0e8de2fa696a14a07fdad50c70596b0c5b09bef0509c72e5d2b7d7d361aeb6951a93286fdd112ff75bb8430d7d185b1144829ae

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VideoLAN Website.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 ef4c34cecfd1e8a71fd5943cad51ed76
SHA1 eb2eddcea5df7fddbcfc1b4cc3152cf1eb11e59d
SHA256 473b587b1e12cda1ca535aad63bcb806f052240be56ded242d289b98a6123efa
SHA512 33497e2e1027e03013c27824ca2af487b0f2c585c9eca0da3c22b17b2f1515ad831bc9ed10c30a1ac1eba10ebfda4c9939de91ebc068066dacf0c7db4f83cfb7

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Release Notes.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 765e193a155242036331b6b398907ed3
SHA1 bb9c89fd8275921cdeb2a7a88b9ad35d71bfe514
SHA256 c8c209d1ba571b7ef53114f2474ec48543a03834f05b95fe087aa95acdb22e35
SHA512 5894f6c097c31cde563e5eec9a4c87b340f122a9ca040370ea55c1a8032e03f8cad216dc83f964ef74c939ab33901f36560b867a25172484e4ab740c39efaf62

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Documentation.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 45aec6c249a4537ae8c482acb563a28d
SHA1 f1a2018a036732113ddb31a3efbc608f40d47163
SHA256 ac27bf3ce331d6daa5e60aac12d9c9cc3dd80469fbd351f1fbef00d771c62f63
SHA512 3da332aadcabeab4043b6e169437fc0e90e6f1d465bd05d5a43b55cfb4e97a3ee9121665197a22e34d6ca11838459351302c82c2dc78b2a55265dc85ad6cb450

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini.(MJ-TJ9302618457)([email protected]).zxc

MD5 6773f21b18c9165826625d2d57aa4e4a
SHA1 12fee5d8a594fb1f90e6face77cad0fb7da470c6
SHA256 09e9120064d750dbe658b8d722598ad734ef659f3f551a3a7b4aadc234007ad8
SHA512 f9ad1ec90ca5ae2800b23664dfece6cb8b0fa45438a4ec6d6b00d61b4423f7714ff0200aef0df97848d153abf71bbe269549e95ee88bb127da6ad379e5713624

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint\Microsoft SharePoint Workspace 2010.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 fab5d9ebbf4357fc162c0c3a2aa5a1af
SHA1 31c4833ceaf5c7e13ca6d3c274a5796297557096
SHA256 e2216cf6c8fc351d66df9ae169b3379d7b7680ade3862ace39c0660425ec2b1a
SHA512 2bb539c20044d8af501a2205f0384fb1bf52d3bb5d51edb93972e50be8866f68849c162f40539189e5ebd730a9a130420da7300d1579e7796677c6574dc9a143

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office 2010 Tools\Microsoft Office Picture Manager.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 0d55d64fbcb3d1831ba4d17d8201e23d
SHA1 9488b56e0186d4f3e4b70da3878674086e9423bc
SHA256 32acc367f0faa9649568971a655b28e8e198c1e1513e821b4378ce78136431df
SHA512 98d860e68531ebe947a4928fc81bb67f48b5f8dcbd0c364383b0ac364bc8879ee9e75aba1e53ea824c0eeb082f06dbbfd9c3cfb25ff40b9b74d22ae7ff25d9a8

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office 2010 Tools\Microsoft Office 2010 Upload Center.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 acb48e834dbf3b4a2e1cb8c7041d34c1
SHA1 d1b1b96030c44fccefed6daf92f4b93f3c8a31a3
SHA256 dbb485c0f0c7a24b65f32e6b097c62b703db2206d3006a9b14e51981df452e59
SHA512 c32997adb6e445c043e1467e04c41293a9d71121a6fdb789164d60f87ef2f584f5e64a05b94447515e46d14e2c495642b72d029220deeb5eaa43ab1fbcc27997

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office 2010 Tools\Microsoft Office 2010 Language Preferences.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 cd4d9a581e29df45e26f5c3de4a80875
SHA1 8c2a2567123b993b1e5a82e2a56509164213e5f0
SHA256 0ec0c0a0540bf2745eca75f06d472be33b5b2a0e1bb726d88ce939fb74f9b697
SHA512 35ddd55f26500cfe8331bff42b81a00106eda3cfd5185e502f32bc2984e589fc28bdbed3f8c95bd89e25f533b3ce60093ef112f17c9f54a9783b5294a6b354b0

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office 2010 Tools\Microsoft Clip Organizer.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 cbb000bf9c34d2dc770be6672bfc9be7
SHA1 69e257c0c68f8d5b35204e20c36ff8700d4e4b43
SHA256 e9c20381a2d17a04041ddabcedc32a7467f2670fed7e701d1a71f003e0583ecf
SHA512 4e0cc9cd7c19548e984eb41cbf96d10f219aaf48d80cffdeaca935ca3398f239e3f6ac7c4edf42a3cf4f4adb3f7aceff7b51436d4a3c74b79d7b926e0bf27243

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office 2010 Tools\Digital Certificate for VBA Projects.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 a6751e692befc72a85ef7c913cfc2fa7
SHA1 fbec6a1db9f4c281c73cfa5ea8c7c10a17659ee1
SHA256 c310f03823601b620351067d2a55d169df520d67346df769560f68eed2046a93
SHA512 abce1e9c146b75e39e1bbcd7fe0fbb37ec7e9ca0b6184881ac20a11697bcf0791b349db782ab1b240404d8f54c2f50025606a7db3db36a6663c343a968896aed

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Word 2010.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 eeb9f9b1048a3bdeda4722f3ffea3ca0
SHA1 588a9f60db9f4f6b7bfdfda28a7718b5d72a9fb6
SHA256 829be51e89f7441167f3d777411b02c49a1516db1c3590c58059c5c38d429bb7
SHA512 3edd4c7ef04309aa1ab0720214bfd28725006cad5a4accd3d3659c61a56a887dd9fcc12c9fb9c5c657acc67929bb015e190702a189c30c37d70f77ff7495d72a

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 96d5a2e889894098e1586f92b4c4f79e
SHA1 06a8cfe2b54447b71ab56be2b86c33da095c1032
SHA256 a55c43478a1edaf5892f59bebb001afde6c722b60d0fe241b267f85288df36a9
SHA512 36d8dd445429f9eb881763664df39e244eac28b026c4cddc2e75f1aac497ade590c668de61a8f649bc849dc4936c372f1f7c8a4d3cec066db7ed1ffeffaf8a14

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Publisher 2010.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 8c4e7c6b017876f56a05282efcbeb693
SHA1 8c106d22bba53de47f64f14062e61fc55b1f90b9
SHA256 0b59425ea5b2f671ce28251dc34bd37ba3f7d41179b3b979d28073392232e5a7
SHA512 2b23a6c80f1a3b21c42c51b76dd44c820beebbb5ed129890b14eb2fe96ece8e3c713bfe12f59dc26df0a99afbfaacc157e903b668480008310330b1413cb09fa

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft PowerPoint 2010.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 e6ccc97c13209a00ebe7bbd49f866d22
SHA1 4a46c30c1c63e224acb0b0053d429d2c7259a6a2
SHA256 710bf1869f373258cbffd2589852480f02a10bd237fddca29d8a541d14d82e3a
SHA512 da4062377875dccf6a011a9482ec0416fbe55c5c6aac34eaae3231f538f216b8f2a277427c76238dbc0fa389ebf603d840ab2a26e6014439c6086d22be77f014

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Outlook 2010.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 69ea831bfc3d42594db12540fff36b70
SHA1 51832359ea24104968aa9b11a27f19551f20554f
SHA256 ec8e52e5b78ebfbae5039f86d28af9e527d9c01dee1b9d39ab9eb498d5845510
SHA512 f4c54949a805992d3baf5c11784fd11ac672c65c5606c3722deb46faa231bb0fcd85fc99f3ee82b8972db00202f3dc8d7b2cb426f348edb32de56f135c45a61d

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft OneNote 2010.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 6c45ec741ac92cfd3bc4b02a4b6e2d8e
SHA1 424b6e9caad26ee3f626b3a4089e3c7af7deac34
SHA256 6c916b1add8fd4de2267f2fc3337eb01852b18508198f847861037e11eef7bdf
SHA512 fa1626efa29d4e92a0841b0b9a0d570b0eb4668b475cbd7c7edc02e6adcae6a31f118ca3257d9df461b382fc874c985dad4f6ed62b99c1cb8896f54140af6fbe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft InfoPath Filler 2010.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 7892fe93caea67c333f9464b938b6053
SHA1 e669412bbb929529133f464f9858a95db86770d5
SHA256 c69091c6ff30c36698b9de7f462627df9757fd8f8ae3aa82a7ede033b184141a
SHA512 e0cd8a5234f6716d33cdd658e6d39deb6b1017729a6a6ba503b4bbf9cd508b70ceccc5c2c4d88cbf4ba8176b5f49be43d2f7573732db2cc23e88fa9976b29e40

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft InfoPath Designer 2010.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 d9a90316fc26820d38401ae8c89df5f1
SHA1 f6e4e273c39c371c30d8f81d842cc0ee8d5a842a
SHA256 8139323f5b372cb35f34c9502ddbaa69b84a4f75118574a2c49e966aa6cd0d18
SHA512 6b35fbe1191ed3578e9bfb8847e8645b005ac36f647d72bae51cdaf9d4b80e2d52baa9fcfc5f162cd5126f934b9068b8f8eccaf0c87a1c49010570dc3615880e

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Excel 2010.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 237eeb7de47e7094a1e553640336e28a
SHA1 9ffc575e800a3bf63120303829f35321e1d3c4f1
SHA256 9150ada1dbe9dd2e00182b171475b6b935d674ffc450066ba34ca80001cdd973
SHA512 012292a7b7d3db083f5c3710bf856e3583cba4775b3a4e55029e83fad84eb425e5ec18f53a0917128f0e69bc4f77c898e93935f791985675ef7200db16e3878f

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Access 2010.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 3d1f54be1110b6480df47c0eefa65e33
SHA1 575a154f822db3b1feddc373500992e538f78251
SHA256 2be9e52fddf31cd3c787c7d149e418e3d3fed612a6fa48371281beff08b6326f
SHA512 ab55d26111e78b44f143c51c1a7fdeedccb3068487e73bbf872af199c0b4003e832b4bd0217af1a0c684747e92117482d50bace0291fc41d238e7d0f656df05d

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Remote Assistance.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 1bd07cd6118df921edcccc95e9d17d95
SHA1 008c2e3a2731dab5306b4f1328fe1ff8ff4969cd
SHA256 aa24e5c9602823d5dac2c5e873895a688ddb230ca8b2f81e3f61b03e3382de1d
SHA512 ab98acaf84b0a7f4b5845d85dcafc0b44c57f5850045a8e275c034787fd72a5b4f44bd38dbd3af27fcb67e1885ed552c59fc05eeb981c73acffb516218a4a678

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini.(MJ-TJ9302618457)([email protected]).zxc

MD5 8bb3f4819dce82ec70fe6aaa466daabf
SHA1 8feed70da6a844de3be1499150790adaf294fc8c
SHA256 64f59f3f8aa056fd8e01eb1fdac7f801c2df033b8e33b42262d8400e3bfc578c
SHA512 b34821185929a0f85c07aa38e7318e38e53012bdff264c17e9e7bf8f716b5cd6afa157e52c4e001edbf98d0efac6c1f0303acac034064d8ee1a0f746af745c2d

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Create Recovery Disc.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 10a0d19ef1d6aebe0e98e06481089b6f
SHA1 c8cc6fdc0459e41c195042e05f6c63379d333133
SHA256 cf419f737437b96f6a799c3ac2c071c303069d063d5f1ca50554c6b022fdbc0b
SHA512 1fb43f563925f21682ed0fe76c66ed52c242d79b8f21bdfffc580dbbaa437dcc44ff53ede69bcbb3d783f50c17cc445fd27de2c1de87fc513da7b44f434f2da7

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Backup and Restore Center.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 d79fca4faf7dd7aefb6263c765b378ae
SHA1 73a425e7d13c96c6a149dc28f671a87348d205f7
SHA256 a63bfee6d7aed62692f485380ea5227fde9495a33efca8c0dcf6ce60d2032b26
SHA512 278e5e59406bdace6aa61a864ab47e66d4368a32671ec03bd55ca4402524a6e15e74eae5da9cac0b3c3cf3f026f6399c1204d52b0b61f43983dc0d864bf76f45

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit\Reference Documentation.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 69aad09dbf541444be16aeef5991b0a7
SHA1 60719e50c4f1bbb98404006d28df9475cab734f7
SHA256 723d0da05ede0090aa9fb534cac25fcd6f86c9540d851599e343d6d9087b11f9
SHA512 6ef8a1748a8133c1cc0d679d7c457e7702973b16e4b001df9acdf93a4a328236eae837232cc4cbf89cc1708b1a6da3a855f7f9ad1e3d17da1ebe1de8dfd35769

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit\Java Mission Control.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 cf5d0c5112d992a8bce2984d0b143f32
SHA1 61d07b01a51be1274209e161c980ac1df1cec57e
SHA256 f096b623270dfe2890bae794d8bb2fb840984d51424d8b778ccacd26a77b48a5
SHA512 d84656cd36e642300e3496c4a925f7b155d614ca8f5e2f2c4cf861dc583aafef9bb2764061c4f356ad83a6e89cfdabaf80498d332129d5e4cd1e60ed7b8b4fe9

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Visit Java.com.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 defafcdc741f36958fdbab159fba56f5
SHA1 343850e84805d8218972197259aba940d3746a43
SHA256 2c0c307cafb7f85b094a52bb3a87228945af31ec2b4c71574a25b2adc03984c3
SHA512 614575b096b441b996b94e30887805c397fe104e389fb04cf960896d9f0e0ce30fcb6e1739f28f09da4e8e246cdc1472cf60416554a9b75ffb41fee6371223e1

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Get Help.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 7e4c2babaea456b928d2da121ba0a519
SHA1 e94765af62d475a04675bd7dc39663ac59cd6e16
SHA256 37c286ee690e10b95e95a2683f4cabe6817a7fa9c340c9b98f3823403b375adc
SHA512 21c46ea74f6d3850a8bb92483a1a9c64ce1479a342dc844a8d9eef8bddae80a37931ea5fafa9908ce8fe89e89f262be28acd33bbffeb63c7c70e5920eb51184b

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Configure Java.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 5e046e3dcc9cdc359a52f33dc50fe36d
SHA1 cbc6632bb387a7731913e39ba9a14828ec5079b8
SHA256 37d5e90d8fe3bc1ed94a88731c1f4e404dac6bd20523c01979cee7df271d786e
SHA512 750cfefd2efea22b3114545d8b5ff5abf4b12b459ad40172c12a6dc1e5663b9a5260c64fce84184ecd6f3547d1d98171c85afc73974b32d400cabe95cd0fb31d

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Check For Updates.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 fabe05fddd97c38f68c59e13274ce9d0
SHA1 e2ddf7b184aaf729738f2132041f36d17f4c1161
SHA256 b23e0f4fcc48663157586907a6521c26f42d5c34597b2a1c5ee6dba33dd9f89d
SHA512 8bcaed50770c3e19fbf4ff53d0bcf893bbe7e6c9b0d6d4ddac32f701c594de7ff8ed5358bd683e5822b829066404d5eca35fbf47af114b579982c7b73ef3f6fd

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\About Java.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 d8fbbc60bbe1055323927d08fd16f82b
SHA1 545790ebbaa6e749e06dbe762596fd630f57784e
SHA256 6a95e0803a81902c2d29958dbe12700dd17a9d23f2ad4378648b8450b98f2977
SHA512 3d741f55dc5bdbf1ec825d51c09c35bd6043c7744cf4bc9b5043515327dd7c36a619fa9abd33dc8d547868a5de98c255d29ee9a2e0bf59b1368cf045610a3681

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Spider Solitaire.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 bd1109cabb5692a86268f1dc89ac0ce7
SHA1 9ba7dde16678e131a69bf7af79fa1e673dfe9d9a
SHA256 0d978a42858dfe729cafacfba23297e6c144855616e9c94b3f4135a94417d488
SHA512 b682c199c2e061297ee4ccb8c98aaf42b44bb67031f9ac0a6c01b74d9660c1fd00b92fb80f6defaae742a507ee748dafcd6e0be09f59160641bb782b766e0ef5

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Solitaire.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 dcbe27b3b369777abcf59510fffea9c7
SHA1 9d575fc7a031c805d63ca60e8330b05c6816be70
SHA256 f128f090bac23634d47148cc29c73de05b07162258c765d7249c7ac1598ec6ff
SHA512 a2c41ef305048ac64ab17b5f359a7a270e1714cd2e8d557571e86abb83864766ebf277fca9e1f078af53ecb05ce185abdc73de5183efc9dfa7a78ff3d4202183

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Purble Place.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 e6bcd70133ca8c149cb1e2d05dfa8570
SHA1 eddd4255774ffcef58d17496c2ea31139d68ab3c
SHA256 688b36376e88a42b94cf3f92997e22d8e105ed3151938f4df7fa25cb74483340
SHA512 618693694e04f378228a0b6238b04e71984483ff50854644391916fd9b048a393da38ac055e1230d8ea567a0a703628211c5e00201d34a915a4f075d8295699c

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\More Games from Microsoft.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 23ddb0f1c720e90602b509cbb069f6f3
SHA1 2aaaf43daeaeee5b28ca3c0e1e1fd2358ce87be1
SHA256 a3ece9600ddfabf6da9bf8a38b32556a8ca4c9ff26f2fb431c988edabeeda906
SHA512 d6b12de83c75d7ebb471d3e19e677cc41c83a06cb47c2eb74bd3c593c662aeeb9720112d47da120182f326a776978993eaa641f49dfa851f37165c3bb0f4d324

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Minesweeper.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 59a8bbe3741932984b18d6ce60336f0d
SHA1 3d84f705621efb901415b4d132cd6ee30003ff59
SHA256 ec84266f3735cfd3eafae5c40b8fe8325dd5f21cfcadde8ac9043d0ea0c5289a
SHA512 f1ea723c96c5ecc13fc73bec3a41c54be5b6bc406499376754bc16f69f231fd65ffaa7fb7fcc2ba9a562160cdb7f78ce31727e538552c00c18b376d6cd68e5ce

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Mahjong.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 388adaa5770a910300101eff54592705
SHA1 84ed9dac58b4a46cf2a6c4629776808bd0ac5958
SHA256 01a5c169479cf39b20c6581f860cb14d6129e4e6f51e1181a815708264c5d784
SHA512 b59ed3b66afc0484cb1aa07d04d61699f1b956608bebe199beb6c45aa1d4e0a17b51e6d396af47fb90eaabb50c56d1d981048a59144e31fc50488faf0a8384ed

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Internet Spades.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 5f7307621e9dc8a5f7ba8982d4fdf52b
SHA1 cc5f51e69c78e0637eab3dcf79eb47167fbce6a4
SHA256 cfcfcd5bf9186d32a9a7109c1ee0751ca2624777c3c5edd82da4fbe4fe16fd76
SHA512 1722a5214ae2b120944a9f30ead3869228a92b2c7b78f5ebdc1f51b14cafa063615eb97c54bb8666aea36a7851e02e62a1ec0370fb1ffe9609e3c76eddcc3c67

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Internet Checkers.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 4c7e4ec03db989e717af28e68b898735
SHA1 0e017ca18cad00c443322c2f44dcac7972317992
SHA256 f8b12afa1578f5d43e028461a43725c6c9644b1112b334ff5c265199c1da5c4b
SHA512 473bbc14df9b7c658169269ce7bc96791329ad3f31b4463cd0793ca5c5786df9078054dbcde6a1ef2d65134a4aad66e2d5b44dadcd24962b0ce883bb03a06aa6

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Internet Backgammon.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 34abbcea46cc19ea144f3d82a694b327
SHA1 be5e19084f5727e7e9d26b721276eaf6599e8170
SHA256 71c584f032e51b01ce239a01fd000fd3477410b905be11c1bec580ac7569fb89
SHA512 a6ae42c1c5096a5bdcd7e514ee797e5c6d879b504257c76fdc18d51302c66bb3375ab97dc66e4961e7c8d9b1552ffa6e02d3b84463c4ccd7ce5dd1278f6647f8

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Hearts.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 d386d85de4ba776d7c17dcd13b0ff8c1
SHA1 ba4989db47161db73689421589a0837ae065b391
SHA256 725638297d10f4017d68781e1b1dc98731c5341f0934a50c7c7123b2a9863757
SHA512 e1fa5509fa29bb1dc9cf98943704628610e2bf4a42c3d98e1fb08473c645608c46a43650292c64ddd5aef4472518012f5a7c28e2464bfcb7a96432f28f29a5b8

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\GameExplorer.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 4843bbf19c79d1e35ce94fb480a3d3e6
SHA1 18399499aa8f822f7e053f53f9dd6afee43cfbcd
SHA256 a0d8190019684528bbd823e53567168865e4b1d5c5ee5044db76abf534be3557
SHA512 a76fae11bf10e4f74b68db7b1a5f63cc54318eb9d4f05310c07fb08cb286c1665a759c87e99c6c420acd1c587b84297b1983f2cac57950a73d202991438a1b74

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\FreeCell.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 9988910174afddfcbd22daac0088123f
SHA1 eb82b01c3b28fb7be323830015a0f89a629aa2df
SHA256 8cb37499a1bb9d6d17d8e43ad899492a90e1d022c01b22ade18bfa351d7483e4
SHA512 cda335b39e217aab9bdb55a0233060fae150684e304d141761ed40705395de9f5b90f63fca85683ce189cef7b2e32d1477d2463f6f1fe2c119f4772eda3013c8

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Desktop.ini.(MJ-TJ9302618457)([email protected]).zxc

MD5 c82f619a1b5622eb48a547e2f9e4e695
SHA1 762f0f31284dc9b7dc6ec5c496e025b6a115d37a
SHA256 4c7d5fd952acb688e0bbdae8ebcb2ecd95018a23f551b510379eb6641ed8a290
SHA512 38625f1f259dd56c2de132756f2cbb6e8d2da318baa99d43a0d18f83b618f323cbebeceb87f2bc936bc8d717926d90fd7e4a7cb97b2b6ed03abc1946039e9bc8

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Chess.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 25673b2ba4cc9a95d17cd58e8f99b022
SHA1 87c8b55f411679b5d44416556f59daa4213a3aa9
SHA256 290d9c180726d7377d6875271156a1bc0523669678c5717141a1f04340f653f7
SHA512 66954b90f1c67509b1227ab3f38a08cb55521cbf060ad31d099eba15980bf5d2696447d4ed2d49c653c49a9e1e61e7c77ccf42718b0d5d070b560809e0ced7a6

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell Modules.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 70a0fc3a81280eb65de299778ba9c326
SHA1 84667275d1b5366462d03809cc5ed256784aad5e
SHA256 e16db998ae3d917fc54888409c1271e8c9b85b09c0e3fbfcb472ec1d049ac4e6
SHA512 7c68928aed08279b7219975350f432b0a89debcdafffba9f21a47497ab6d69f30c99d368af2e54e69e89b58880c93bb5caf8ea99469e24de63b0cd14397ff639

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 83a227c1aa225e5fb186e6c774e63ed4
SHA1 6a4de2de4ae10a7c0ecde0ba283781539b9152fa
SHA256 07de2a04df30efb9c82564feb65b3311f20663e96d0a8bc1731329646dddd424
SHA512 3f0276eba2e8b9d2a026728b8929b7bbcac446e5d08adece27fdbbea41f51536760d1ecf82d3367d9e5944c977424aa5366880c06b791adf1e02367f47dcae38

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 9f252e47726eea49c64802b4c413898b
SHA1 ac1687dbfb6919bd65b2116d95dbeb297624aa3d
SHA256 2dfa7e2b41125bf5c2aeaf9d18fe955030b26ff2fa2587c57bddd7d1aa838451
SHA512 b365b23d87082f314904768bf166c41cce9c219ffbcc39c721cc8edadeacce819f30b5ab0acc1066dd464b78f774c9a1f5ea8db9e21d91b32a37336837899c9a

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 d0072c3fda06dbc6722f51f06c3e0301
SHA1 2cfc2cfe00d184eded5bc099be36a7ab67ec4537
SHA256 e379be32a5099ef877d9ac483f8d8d607ea741338ecc63025c94e80e7cfdba0f
SHA512 37836caaf47414de209ac31977d35a64ed981c18214cfcb87fe643d48623c31cb0c0b222a340badb7aab8749075f8da749a63becacb8eb706d78d4fccbb00af1

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 8f32fbb5a2172b9d37c7f2bc698ebaaf
SHA1 e5f1645260d8fbbed5797fc28b302a541041c94d
SHA256 4e2c7c3886937732e3a621878b57d4ac522602db03b496ea94eca7600e8f80c0
SHA512 00c686b9824c39f08b8099a10219c236150e5c17a3e50570210fc1e1f47418d1c7d503f28aefba942010abb3e71580a556dd68530174949b61a8d46a977482fa

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Security Configuration Management.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 b931e338aa0803bbea61a371a1ed6fb9
SHA1 f227d480d9517dd4da0bd2d84cf9c228d0826ba2
SHA256 a2c1ecd80d538ddafef2ac52c3dfc6b563aa5948870a26cde479f56b1204b7c4
SHA512 1ce633e02ee1e88e96fb3c5b27c181c88e30c6c1a8a191890c5f8aab48af7f66ace8fc34c1a27c9c9a21c6392bc24ab179e1386755d3367ca064f60b31a1b77b

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Print Management.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 a17acbbf617fd026f47ab83605f41073
SHA1 bcd1c90fd5b3f806fdb4b972745c992eaa178a9a
SHA256 e1eb2c820cf8a181904160026ce02f876813dfba0a2cd252b10b7d2aa15590bf
SHA512 83054da394368099014d0fe503fc0b9b334b9b4e8cb71d86581e4ac912c158b16e0a73c176a59b5750e6e4cd280ce68174f8a494ce80b9a1d83bd682d68ba962

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 8130de7f8fc332261121d00018cc470e
SHA1 6182e087d1993439c1b547c0f5091612f891b187
SHA256 e06a73daf9528f0c0d9e7ac5681f8dd1b4d7077f90c53f61fb3cd154d27062d4
SHA512 2dad1f77139d15362ccca0b968d235c4f91ed3e98d880d93d549ca2523bf3447fda6e58725c3732300fa8bb678fe50a592a485e10814636caab777d7da828b5e

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 8f976a584c330ae6e4d495546ce4183b
SHA1 2fc7c58f2ae825088ee9ad4856a32962f9108d26
SHA256 dcd5acb656d302fb65de5ccbdbd4ff3cebfa07ff007a339c85fd9c2a5446f571
SHA512 593d01a0c4e2d6ea171ed2f3fd35f5f66b772e4d9edc193ca30f4c89f317dfa22001b6cf3a442893548db818dcbfb02849d281cf5a407a6fd26ec4b3fd3027d3

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 f5e0e0bab2a5636b4912d7bb0e37185e
SHA1 832c996a1474f3d4f977fe27b193767837b78c04
SHA256 83a095f262467e656b2e0d44b8358029517bcc801952715aeb31cba837b4b49b
SHA512 66a2681a579bf77f28d4cfa62c27e02c8d92d7de0ac3ac8d0540ca63a2bf6a09370c5cd795bbd1a0b9bca40b3a79207bac6d4491c6b79a35cc6e6b5ef799f19f

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 507e4f1d539a45073409ac9f2582d271
SHA1 a56e74d2cf5be77a4829ef0c2db301595020be17
SHA256 e8e85741b8467c6e8308fedc4f19c205889f484f88f05eae813d23f7871e52cf
SHA512 91b4770e3091423c4a4beb5d131564252421adc3fa96a191c5da9908502f8f65c9d26f98df6d26d73a4e31c9037242c71256402e9046b56300daede1a4d4a85c

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini.(MJ-TJ9302618457)([email protected]).zxc

MD5 2f72e05b1b8890d5625a1e1dfa6bd998
SHA1 e1d2146230177af6ff02addc6a258be89853b1c0
SHA256 1aa6d9fa07221990772c3e54bb7f494f5b24dc100bcd5c1f6eb639eb1b02ed42
SHA512 927fd9cb4c6829a03a7e084382c6ecb3427207b8d508764e60f53f8757cee0cd7c45b8a045f84f34434d05cd338ef5f8551f05ba7adf2a4c42444101dd3eee05

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Data Sources (ODBC).lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 8eaeecb2f700302973e65503dc7554f0
SHA1 1d71be8edeb8abef3f10b29b40e03c540b4ea3b1
SHA256 6b1d606a936720329e7fa32fd050841057274511d6a8dba02d7f393318f9e75c
SHA512 b9af1e65b7c7cdcde6196f446b46e649a93953bb687553de67193f1d4a6bfdad73dee5bbfe77046f6b2eaac75c1d97bf49e7cb880749f59882fba971de20de4b

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 b14ae73e866293b8956bb3058584fffd
SHA1 e149fb6b5d87dd4e244cae6b64d3ad47768ac389
SHA256 8149dc3fd8eb68bea7f390c0bcb1c9be7d099fc05b49604db005d4352d405732
SHA512 2a01a949508a17c8bfdf071ff5b6ff0c320ca3430ebfe8ecb5776992f3eb76dbbccc804bdf6212a5d92151cf6990fa26fb64e5776547f708c3ac67990d4941a7

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 1864ed82bd6789fb3556e595d6746325
SHA1 193d356ae09aa3f747fd4c991be771ba3563b226
SHA256 7a074c30d9bfcf4fb298b70448f0bac57f47c23c39b8493b9b7c7aad2782404c
SHA512 1e0bf74f9fd17a10ab0f09be77869ffb511fdd87da5f35232ad97a22490a69ea76f1909116c7c0f6cd4024007a59648d517a379e1bc0439f58dd46eea357fe2a

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 484e2063ae593c6980e270fec14c7d8e
SHA1 6a64ec42c2b0c68e1f44f060319e2d14b90d819e
SHA256 9a48db27448974a34061c9a08a074dde80263bc7321263809442514db35f5e30
SHA512 a3ee4ce1cc9ea80d3833a6a91105a9f0796e394f1a614c3c913ee105cae12db664f2c501e44f18eaa5b8c55798b825961591d7c37696061cd354fdd3b9af4a8b

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 410ebc82ae7dd56b436001af03b8f2b3
SHA1 55f7cbe86b1bb7e5532407760db4f0574324c09a
SHA256 fa2f31da057752dab1653c167dbc2bbbca21e545d8de3dba9c1e674bcfbc2ba4
SHA512 fd5b69ecc83eaa95d6509ec91315fb06b1c8f53adb912227e5ccd3c11e94c8119de9598e1a7854f8413455b9be3ec98f1d396787b53319405db887d86f7b4fb5

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE (x86).lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 bc5b15752c702767278cf740d0c38434
SHA1 1f0a03ba4328d3ce578046fad03702418e3b8b79
SHA256 963a3b0fb9f0c200f0aae2141cb120941cb044982a9c4b080fe7e3ffb3400c06
SHA512 99844321a92effb6d4cceec00c25d7cf46f571b2d47eb0f13ff8482a0ac68c216b1e39733308ab2f4f7ed33a5fc5a7e3100548c244ca043b608f7939f3a381ed

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell (x86).lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 d3f531aa43d6dced41966069a6f5e91a
SHA1 a3fc83716a2e88595cadde4c2f2a856c355cf529
SHA256 d1daad616688627ad556306e2f09749477b15903db47c133b0a71018acc53b8c
SHA512 1bb87dcec3bd591184d009d1ed36e820eb3dd13bb3f52240985284030b639ce31d015e4f4b5285fd9274ab2ca2dbd9642c13d32dc803349c7c2ae140f5a17e36

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\desktop.ini.(MJ-TJ9302618457)([email protected]).zxc

MD5 3cceae1e3d36307a1e3def96acf47195
SHA1 8aabdcec2a2239b5756088fa32a5f96aa241eaa8
SHA256 ba7b4b456e58a5ffe574ac3095c40b7a70bb5a76ed0373a932a78850ae8bc400
SHA512 7db8e1a7dd5fdd4457f1840c7aae43351381cb2c6126f5e4676e1e1ebb242d4cdefa57314c90a46c35aca55f49c430ba16d4a5ca62c927b505d15aaf8faa2057

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\Windows Journal.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 4716c201c862f490a28d472add24ed90
SHA1 cc4a8c3b59e7eb9f91aaa7b2b17f7944690fb7cd
SHA256 eb5174740587ebb289416011d796b9b05003b75292847e265ce619937e303ba2
SHA512 6481ea2934f64ccc4835e0bcbc0cd533f2d08ca00ff12bd75089cee6b225f1fc5be2a461b8c13a20d7c5876915818334a32159995cd75b288784a3968d44e103

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\TabTip.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 6abb486cf4d1ef90eab62ef9c2064dcf
SHA1 b2d3b89395682a09b77e701f4980d6cb623a2cad
SHA256 da2b6813c366079aac095bf8c98737cc3587cb34e368c74dcb77ef037362f528
SHA512 3589730077760e8e0199299ec0f50a39bf73b2e8b7be3d7e6c428127149c262f2e8be20ee984a6fdfe82e9360afff3262f1e0f48ac3ea847f1c830a37e51dce6

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\ShapeCollector.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 988dd7256eef7471ce29a839078da382
SHA1 6a6d86433d09b423d325c5994fb9be7590cd621b
SHA256 a7f83023ed433693f5046bc9f42de5391ec9df87281a344907c60e7e564c0501
SHA512 c1662e62661cdd72139d2496cd2a8ea60dbe5b388e6f71a199fbcca36a08ba2a7f5d9d7a74d48853f1f0ba3ffe3cd964ab015d7665880c1eb65b3b5f4c27b63f

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\Desktop.ini.(MJ-TJ9302618457)([email protected]).zxc

MD5 f497ad049f915e0bb39666520ce3e173
SHA1 6732d177d81a4731787b9fc4b49d3708c26e1e92
SHA256 86d46994fd3d7195c10639659a90775d27d7c28d3354db5c4343211606356b96
SHA512 6824e6668fbfa43aa0cb9df9b81710b20578f358ac0ab4d30d0fc9be424f272db1ceae1b4c8f4c1cb46d7011a326932834cb6fc8a238838d6e6d6593d364e862

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 62a9741a705c9c4662e69a240806a2e2
SHA1 98f68018774c51bf03a42cdcde5dc5d864f4bafa
SHA256 3c3bacfded45707c2fb6154327921245f9de0462d63b22ba5960bb9b4615a733
SHA512 7dab1f0c0731d7cf1e3f09611f7f8fea5b31dd84df22b3faa32b55b19588dc1281422590910fad6ab5f53ab62fb01918112fa0f305055cae777768744d3e6e2a

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer Reports.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 59ae276e54df901f186eb7ae1b1f5daa
SHA1 10d49c0392e12f9b53daad8b7a475f5c71481132
SHA256 87f750f0448a676692dddff8d4f1786ec2d48694c17405640dde7b27bb6fcc47
SHA512 795050723ec378d525db8a80c077b41a16f3407b56b582ec56545e61e9ef80b4211eb67a9fffb53b618eb61d9e2ff198912439d88cbb72c9607cbcea7de5233a

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Task Scheduler.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 f38e9400cec79d8be5005b9fab2713ec
SHA1 5c8fdf63d5f5331d74e1e1bc0230930f5d689471
SHA256 3111eefb6b34352b8684fa4efb04bf9c6e62b61ebddb2a2e94a6a9951980f024
SHA512 f707af773a65d4d431a5b0ad9196be8037ad184655ef50de567a3371aebb8ec0b36e67cdc831e5eb89c181ada73540477d15b0975237f8e1c14dc01072352298

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Restore.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 e5690e5c314d2d56557c92bc5d83e029
SHA1 f5b6d3d84e7fea2225c7f0cb0c9ab9baaef8812f
SHA256 cdb804bcda781df81faef413ebdc753ec0a71556ff556508e16e25265bd1ebdc
SHA512 8c703e96618082bbe9144e2a4444f744164545ea12e942a85ed4654c812f50bf18cf33b3e5ecb98db2ba1d73eaebb203c5dd6a1af2524a7abb8291f920d0dc9e

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Information.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 fd6b48f5d5e83b1a58bfd542dc1d295d
SHA1 be0fce7d71974866e26a133c0a019a36310d8f93
SHA256 503f46df2b7f8eb16ac75bad4e8cfa9c434046332cde808d4eea940ae66d73ab
SHA512 1a623fc39a24a172361afb3f571804fc340bb6cca876df63ab161af2581d05fad45eda23300129a0537a56aa120bdca722ad60c3da976a784ed5a7e65bdfeb07

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Resource Monitor.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 6665743d07b27615f1ca41e00256b35e
SHA1 928380d9a22c3ed54f337666fcdd2088fd8ccc4d
SHA256 81601466bbfd5ee2c56a917bc8165950c3895fb54754d9647fda1ab2913b5249
SHA512 1b8c2370fd1dacb501ef77d80c963829b1d68682834154146c0cf42416b65512ff83baa6bacfbf797d4e68c1638a205c6268cf482385b54b65f8e98d95a815fc

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 12682eedffb303bc5592002aaf8d4545
SHA1 6279d5e03782f3576a9037a3636c251323ff08cb
SHA256 99b75ea76f46296a317b62353369171b419c33d3a0505d3a365fc1ba352fdd84
SHA512 4d337c61c3368828ea805669adbe6166db983da27bd801d80a5a774120756fda872a241b5e25fb6db92dd1eeb14dc711de2733d5984e2f1d570cd12d2ba49f11

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\dfrgui.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 09d9f0795ea6159c400c992af24a3277
SHA1 f36122c56bf2dec5c35a53254018a098f8070473
SHA256 09f7ce35babb6718a1a58beb43e12ad5bfb71429aa4a177785bff4500ed969e3
SHA512 a450b9a5fcd3fa766a4bc43780ff0be8321c1c65067d0c69532656ed581dfc590030208fe34568158e98cd60b66394b2eee4a02faab65b7bfae322d8a409bc91

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini.(MJ-TJ9302618457)([email protected]).zxc

MD5 ab7df4a7b1e0e54f0c01e6b98e6ee1c1
SHA1 4794fb47c279bb5e00e7efd411547a05a1f86082
SHA256 741901fc3cdbf089f67e526fe7d38bb33a0e3c74cc6e178bb6e9ac20e882cfcd
SHA512 3fa1405c2a50c51d90c6c3e15a754c376862b644814e4c701dfcad267b5ac207c5267b9f2f60496db694d82080320ce9f1ac60d86ac487065bbda0d4186e8fdb

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 f61d3e25ace7a6847272d407ab98305a
SHA1 cb6843a109cb740dd90573ee4bc3c0db8dae8550
SHA256 0c84a731d773b054d33f555f786f207a88ca23db5bb47000275d547caddb261c
SHA512 180c582f713345d88f9049ea3e1415b1bb418ef0763e068fd8ed8972cf184b473897d57c59d64bbaca5e1065ba53eaa589b26f12c40399178b2493df1c1adee9

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Speech Recognition.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 37f0234d45fbfa89cbfd0eefd4cda0a3
SHA1 91aaf438c303ce336bbe14502adfad7cffe4c1d6
SHA256 08ae945cdccedb3f3c60a12f1e6cd1dd6195b7c113398d9d78e34ee791ce509b
SHA512 2eb31db8f26e2ff74513cd304c881b68ab41d5a003081f94d05da9d55fe1bfe6e2faf568f67d41fad175d7629ff2f23275bf635290c1633e732694bfd0cd0379

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini.(MJ-TJ9302618457)([email protected]).zxc

MD5 23d52149c6017d877191db238b556a07
SHA1 6a6638e0a8a4880860c7ba56fd14e09aeb40cba0
SHA256 c339bd221648ec1084b9feb5f34da1a22d7b6526c92c98b1662c01239d2ae5dd
SHA512 3adc7ac5345a170a5064298cee26a9d2baecaad4bc3f25281174939613f287384a1386a8ea0b6300e3d4f8f7172604fa97e32ca6f91c37f992f94faf55296fd6

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 9d042dd092bae29606c0137a00b3bcb6
SHA1 bd89032d81591cbc4f5f750e4276daaf3dda4f9b
SHA256 5ce779957a71b4aa499a04259e88e0380fc4222c6308241887aeef018669caf3
SHA512 fa03cea23ca9fb8df982b576255cd779cd84ba4b42051c385baa53dca2b34090133e18043413cb540952b5d605a8110bef86b734bc6bd123c9e69119ccf3de5c

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Welcome Center.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 e1cc7326cac3892afdc5c27f26de5eac
SHA1 f3de282a016dea5f83ef345e6e599658bb6c0a16
SHA256 e35c80809d07a52014cd0bd8b4464dc9b50495a823034463088be15d9f5904d4
SHA512 87a1a065eccd3cbf8a2ce88911329a1c1e5c683d5dacee21d0e8d01a8ec32ac2e765b30f51348b78a876ed7d9321a79923c1f4064d8ea5d84caab23cccff1351

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sync Center.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 79866d6516f4891a3302b8d9ee3758da
SHA1 c3a65356ac5ed15aa094d01e6e14163f039aee0c
SHA256 9e49edc568143cbc411a666368a8dcd8cb2dfe0f78cc8d8cab3a77203fbff264
SHA512 7b8287d0e6eeb0c2fb559127016f8b6a62b3842f78583692aeeb6bf9918652673c65b3c096c7b37eff7c1fbd522c53789eddc7917e1b99e015437e4cd2d83779

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sticky Notes.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 343697893a4de60971536c8a30cf9418
SHA1 0676bde0d3500e85f9673af61ecba553be970096
SHA256 95e080a491dfcaf66636987d37f010ebe5bdc3111ba4a3d4a798c080d4771300
SHA512 416b288e93b6f40c82fef00aa9b08526b5b5b156150d1c1d43f2005f24ab19c1a26c57707ac5477b61eb36bb0ede26384fb9cfe0e66c2e4f1b208195e8a33be6

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sound Recorder.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 01b4f7df17a6367d5c12e4c2e765c78b
SHA1 90b202d4c494f8df8c57b9816f7f22812d08223d
SHA256 1f87dce599edb95d983e3dafb4c96d185713bea6cffc90b0b500bd60ff2cce47
SHA512 8c5e3047fe3325e906e454774bcd0829732b15bffc9d615535d23bed5b585e4ef4f01f0358ec27737581c02bddee03b8500637a0dd6063d05f0d6ce0dff1e295

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 727f493c4635d977dd2941d503ef23a0
SHA1 ec56f01c6ac09814dde1ae320cad0ed240b77bbc
SHA256 096ca3dd522279fe9eecf4bdac7c12bce6cdd82d6e0a7c5ca6c06721baefcb72
SHA512 6e60c533ba241b4d16e1ab979422b42215bb6bf96816605b011872d3b1d540becc67669e0b52a5051d8b7ece7e8a2508a4d8ff3eeac274c27da9f5885548c7f5

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 fbfcd385a5cc001ed3f3bf311f346329
SHA1 c0dd24486ccd09f5f7dcae737a695ee601559b8e
SHA256 24d34fd1725686d18a89c32d44d89586bd15f6556e1b4b0c879b1ddcd182c6d3
SHA512 d2a13aed8f23f7e881010299fb0a9cc3ee9d2cc4d0dcacf6b95807d1a13d1872b64904fc2f14ca7a57169582d8b5f5200428f5d8c9bd12ce58df8d9f5583faaf

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 77abce6464449ba30307a636c39437b4
SHA1 511cdeb395e0e58a7f62590499488f08acaf674e
SHA256 c10cac4bfa49046713b4f6d689f7dbfff92c163d6f825156f27596b5ca40c87e
SHA512 0676418b1e4fd3b5313ab252d606158745ee57295bfec9091dc963b4298f8f2a4e89cd5318b7622a9baaaedeb715cf45cd260175fefca673bc58124ac8f2788d

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\NetworkProjection.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 7e571a9af460c15d6942ec059d7ce1b8
SHA1 09612442be8bedd2e81d403f5c52a96d997864af
SHA256 c6ba50e5bedbff709b5c969dced54338ab5bb8bc60a4c4f10456c74df9cf2306
SHA512 1a5d19173c96e155a6fba2fe28729ed0dbb21543d392ef8b5da45eed44659c8b2690187b101b8066e19fdbaddd26cbd9cc9bb8698470f77bf05ca47dc4882973

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Mobility Center.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 ab1007b6c151cc1c6e53e9188a70a55b
SHA1 a884d6f62655b1d3819ecb7735b37790496c9428
SHA256 7f17c46ec3ed7170e60004dca3c147af94c4f15337652d92ec38e82fef197760
SHA512 678c248068ad0f9f480c4ec77c121f19f70dc560ce974b0e1337c5d7ceaa108a0b6d73d2427fe49296319cc48c1a89dffded4b5ea97e14280ce1fef5a1531f5c

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Math Input Panel.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 3188c2c4bd884e74762920e48c6320e0
SHA1 a1ce8ddf2d50e1fde565f5a41f8cec983d23e4b0
SHA256 ecc3f18ae7a7f7cc0a388b14f2e8523dd268c2b29eb91a457dd9670049a10322
SHA512 3b315872254a3b534869af81005b500909a9111a0451fb29e52711b361f26c554c97b492df4c38de194101140fc05069b8bbdfaacc8c71e3eeae5376a549f5be

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\displayswitch.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 70487704fdecc3812eb274f9fe8dbdac
SHA1 cdc6f6019f44a32d68241129c7d7efaa2be43504
SHA256 07dcb5d758ae392e34b7bd96ea7a6520b29ba7d5f983e098f3b75bd350590c6c
SHA512 b87f3a4ab790a38d6cca79257322e2630eb652dcab53b1237cce51e3320ff633f958ad1e0c170e89d84903bbb030f8153c852a408baae8f9034c240d30146231

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini.(MJ-TJ9302618457)([email protected]).zxc

MD5 849a241983663d32363f4e9cce718540
SHA1 3556df8297e5147133e437d487872d5efe532b8a
SHA256 a314956f7de682e21379fb769a6c82b10883009d68cb6db178857ed6e815fa9b
SHA512 41d3c09352905410187e594e216f4888e0cbf48c254a2d6c19c7141762e283bd37beceb00997e72792225c785f220c581784ee2f050631649fb9c3d9b88ec4e1

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Calculator.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 686959c1ca65d4585fb641ccacf05e54
SHA1 dd9e6c8e3255f96219f848bb59829ffa7a3106f8
SHA256 6645b93a7ee2d4c6ed4a24d664f9a1fc2150b6305d4d3c65f7ad013d81c0de21
SHA512 0aad2f8b3117bf006cebaa18cdd975da5c72f2a9f212b6b46c7b0e1f85d4d3c00238e1c5ad6f655467b0579b14eb0218792fc8a560ce3b4b22430c1519e4c44d

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip Help.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 b1e2ca69baa54034318eb211e2e48110
SHA1 f6258acd401b17a8fd1398670fe1ee4a5e5640b6
SHA256 15594e79fefdeff70af1c39b384ca4f3ff345785302d40b2699a6b584420ac96
SHA512 159c6b68974f10806a64eec81306aeea517da3337b02ebef491603052815e3de7eecf042de010fb45a2f52c31731cfd5302be5cf0ecc2f78ecc626efbbc2145d

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip File Manager.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 9b8d4f2b7a821cebad8d301b869c770d
SHA1 c63354cc614b82e944ae6a79a8cd77111885f716
SHA256 9a6482c976137217bc8b41c4dff399f65f0baec627c33d93ef0f23d652ecd21e
SHA512 1bd456208874b0f5f066252466d0b8acc39dbab5556e536bb4eb1feeb0f8b4df7b2bd17cdb4ece80405d3de300b5cb61aadc9be41f987acf676ff16cfe9af445

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 1f096e7e36991abbdd3b6e2701f17a15
SHA1 c79b90a5c0d58446071931994150e4fddc71c71e
SHA256 5bf79df00f57e20d83732cccb34ad7858a3c85dcb951039c247f02c47e3c58ca
SHA512 a65e84d697d6f3cb7023f8a73c030c7fba02c7a590b12aefa5856109968ecffaa814a2ec091384fbf0814740cd8601480e3196e9716c88fe662d857ad9363c17

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 27c07e2c4b1be4d572eea9b7b809d319
SHA1 7745d440fdd8ede7c523309f5d621d429527fa3a
SHA256 6ddaa22ec3dba01ee5dfee932ea864ce97062006aec7ed2f0bde79fe22b73520
SHA512 5dc007d5a16edb8d8d0a5ca3d87126776ca476e500c69e6db238ceebbe0ec26e9426a7ad6ab164d88ad4863ab5826e027716e78271016b7453368263e9146f9a

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 70c6a10fec69a78312561911ff2500cf
SHA1 343e33f79bc618795a5b7fc16e42511131cf022d
SHA256 6b7c2cb98e5378568458b9265eb727eb4a8c259babf11ed6d9b0a19ac9afd47a
SHA512 374f6d0b7a1585bf0806778e4e2d0c697cd96de2e3d5314e927708f84c651ea4d74dec8e435b875c9c0054eea47f00d5fd8f5fe43806c246ccd8e1d4443cd01f

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 d4ba28d5b838dd4c9264512840eb254f
SHA1 3d16b6c25210bbcffe61a9c4cba17afba05fd4b5
SHA256 8c009041b97f1f73e32b682e0b8ff5de3a026ac6cfaf8a9802b9900a50647c27
SHA512 68eddb3640c6cf06bb424cc8bc22f9b8fbbbbcfec0369ec9da079ad67c09bd5a55d3c91479f7e089204de61e6f63be0f075870585e28a4d06daa054bd3faa851

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 8e44ba32c6f2f142de0ebcdf1488a21f
SHA1 07d95f84928d95af9afbf71269f4066ed4d68389
SHA256 45073a04a9b7c785ed1c71a7b19f97c155ba39ecdbf0f5ede8e6efe4e0497b8a
SHA512 010721d7fe5542abec0bbb4582327c9bf8fe967fc6f35763b7666f7a327f6e048705ac0bd2afe7f725fb7144d48d8e8e0997fdb752b845574306a8e7521f9243

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 a3292f57991888d1c79b56b973d41a22
SHA1 cc41482fa70a4dc27052d749e6ed52ba4869f8df
SHA256 547090665022f5320fffe3444adef3c0b7af2313fcf1203b292cf1885e1069ca
SHA512 aa8e3e2d28a111edbcc9e9eab0c9f0eacef6ba29ebcd1ea9b39a71f92314d9db233218b1fb07d1eff0dd2f8b693d8f2d4d8cd7de5b6258ddd6d8bc9ec1685c3e

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 ae0f682c5ea7ab6f1e2ed4788a3ebff6
SHA1 cf650908310b8ef8bb29ac2631aff1a75f338645
SHA256 c6135eff18504725e69a64d77fa26b8cda49b00dfddf95dba1c459a9f38f3c0c
SHA512 e717803b4b4e566a922d9b84fc50ca9e9b2632c514e3098a954723c42f42878480ae834a4e2587e201684442fc83dc14a751d86e9ad4f08f1dd14362634854d9

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 65566104c8a30152a90eec35e7f0514c
SHA1 7e6bff398c84c2b3c736ad637782cded7cab932e
SHA256 c679b9614e01578e1810f39a853caf4eb27f61174fc6853fb7a5a3152c1feca4
SHA512 93180158b7dae0771774866e0d245af54c64552a99221a89bbf4cca98db72c91bd840b6ccd2a4a668922558ce4432b68ef8443bddd1d0cf2e2b6b697f66e5eef

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini.(MJ-TJ9302618457)([email protected]).zxc

MD5 6282933f4f9154750338d2e4e2eb876d
SHA1 9d052e4beb7761b85efc5bc42f49f03711b855b3
SHA256 0f461216329da314571e98f91c7df393f0cbfd40ef29c9b0c3b84034c7e4937f
SHA512 e58fadc1e492aa8c12a5ec856e65d5d72de5b76e540570fef9649023be1105e83ca64ee463c6db62ca69ce7512141d209ac04466ec724c72812b662c846c50e0

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 163540dffdb7e02f1d46b1f7a9520c42
SHA1 db43e2fbe8ab35814ba19d0d072b8c1261c906ad
SHA256 a49783ff4b658048ffe03ab8fdf25e860dc3abee8a7672ccd9ba365dc6dd0ca3
SHA512 9b1f0963733f44c4b954a0db59ff4c15dc2d869d817b5ab756816007a122b601a73b71d6f5d5cd2aba851e516304fc39bba9675310f8b27a207fc9fe2665fe51

C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 1da83788156bc1eb90b22365369e4bb1
SHA1 3998a61d465123e92af49bceaea2563164ee1647
SHA256 373686b99b477340805826ee2dc561c0752bf611f9669a24f852bda122ffb1dc
SHA512 4b0704f9e9b6a093ee564758aeca2491e395b3392154a9591eb4637a33868ea25c910cedf931dd4d2dd910705661212ec77ce5960d040fa75f0e6ba7a1906cfa

C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini.(MJ-TJ9302618457)([email protected]).zxc

MD5 6290e0807e3818a569c76784666c8c51
SHA1 9eb91ad2dbbadd14594cf5dd978a088cc97e58e1
SHA256 184c2fed5b8263559cc46158e782333bc8f5294b491ed002575340fcbe73ba4a
SHA512 5e3005798b231e4fa1feec02d4e8fafd8e554ff4bf7c14a35a930551fb0b70612da1ba59daba6dd62877101079b37fa183369493fa8849bc77b0a08a3f566d72

C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk.(MJ-TJ9302618457)([email protected]).zxc

MD5 dee72490d2c2176decf74bf183c87c95
SHA1 b5dc5aa33f64df772ab1ccfafb7e03624c8a8ad7
SHA256 0d1fb6f6171090be82e8e78c6989eec94e6b74348b8aff12271aab4e1d19f6eb
SHA512 fe76f1fb0b59ad1318fa514c3ba364e346bb47fdfdf4b0b3be06051ca99fc1a7973be6bd31d47307badaf053bcbb8ef10be0b629aef75998b6e9b766ac813718

C:\ProgramData\Microsoft\Windows\Ringtones\Ringtone 10.wma.(MJ-TJ9302618457)([email protected]).zxc

MD5 5022348d51907e6db68c3676f81f8522
SHA1 3b3b79d0a9329410b9309552e50db08cc440af87
SHA256 75a63f3a59285ee4b7a3177b1c7dc11ed1ffdac5fde3d43e850b192c5599afc4
SHA512 854c2286e6e1ddc467ee55d7419022facfece7a16af6cbcc5c353f473eac684cb1e1ad0e05e1ce2428680943ed24dc7356bb22649b081f946727edf34a9ab506

C:\ProgramData\Microsoft\Windows\Ringtones\Ringtone 09.wma.(MJ-TJ9302618457)([email protected]).zxc

MD5 4e3568d4bcfaceec595609353bdf1342
SHA1 e9484ac2893c18b65468b8572ebad9d2f5c4706e
SHA256 5f7a7ffdc2bd831561242e0a69b4b006e4f501a33357962d7554a053aa4b5075
SHA512 6fd52bdecb4521957ec1b7d48f655e72b098982f91b86e54dba075bf2b3cb1289276c3093c5998b0646782eec270c30ccb1fdff1f0c176870bcba3a2048ab343

C:\ProgramData\Microsoft\Windows\Ringtones\Ringtone 08.wma.(MJ-TJ9302618457)([email protected]).zxc

MD5 53860aa757a74b3db72758bf5bc4d9aa
SHA1 b72063123b9bcae90955462fe9753eb54506e343
SHA256 4b31fc020407c3166265bb27ea89cb7e89e2fd648c2dc8f10111d47df1018a3c
SHA512 5fabde77982569f10cb6605bdac38aa973759288d20cd8161a991519c69364e8c0f5312b34b02feca7f7c4f52ded9e67fa75e086fe9025650475e2bd7844d49e

C:\ProgramData\Microsoft\Windows\Ringtones\Ringtone 07.wma.(MJ-TJ9302618457)([email protected]).zxc

MD5 08ffcb5e54a6cbc4939780fab674805c
SHA1 acb27b4cc863075fdf74a3552b96cd5084d1eb6b
SHA256 435b7c811470d0b0109408ac5712d451344b59c6beab085ae6d14f07d5ffe8c7
SHA512 0359fb9e5b96a3220f48eb61af6b21e05451e4ff2b90dc4d316e97622263dd89625fba19011d178c82851c34292ea8a3b50db2cd476da817295f587d8f063fe2

C:\ProgramData\Microsoft\Windows\Ringtones\Ringtone 06.wma.(MJ-TJ9302618457)([email protected]).zxc

MD5 cca6f4d59fab4ae0d0bb52d122ac2fc0
SHA1 17c4669536d78aae51cbe8e8c00ddf65955c0ec5
SHA256 501f38313d59e84bf9dbe4f8353275fb65ca465c09fc96d2695ce17d8e0c9c28
SHA512 7145ab7df3ae99fdfa306cc99ff61d53e17f9a44799fbcf727c6ed0ac27d292ea2a71eb603697b3c3b43a29cd6d163afdeb4ecb193237826f3d6b765e10eeedd

C:\ProgramData\Microsoft\Windows\Ringtones\Ringtone 05.wma.(MJ-TJ9302618457)([email protected]).zxc

MD5 20193e6ced67b3642bfd52335cf8af53
SHA1 99f8c3a5db40090ca0096960f77542e025bc8b30
SHA256 1312d5660c2fe572b41468bfedfdb26937db9a94b9dc2aa10efd5ece21edc421
SHA512 23c11fdd2e1ce69acf7b8fd52711629edb35821ab5f32fe54da95e7425d6f03c5d3621551a1b4f05d3882c377f0861bcf6a2fc5083b998ce7714afc1f6e02b8a

C:\ProgramData\Microsoft\Windows\Ringtones\Ringtone 03.wma.(MJ-TJ9302618457)([email protected]).zxc

MD5 d5f3f454281f333b17f1119e8f3ac5a7
SHA1 fa1accc1c86c48b45d6e62f3f863d204c6796323
SHA256 0dc3c50fc063051a50755d8affc79f4399f9454c3ea4b08b77e31e3f25720f41
SHA512 7343bd6b050be5ce464c3d566bc6f1752fa9cbfaf60a52279e6b21da960a4781e81ad6e3d3ae22c8dd93c04737fc031c158a7c2f36e29d5801e901073dcf6747

C:\ProgramData\Microsoft\Windows\Ringtones\Ringtone 02.wma.(MJ-TJ9302618457)([email protected]).zxc

MD5 84d01ed15c3c16aa16b7b8e086d5ad33
SHA1 89af46aebbcdf60e357586a837c33ecdb7573943
SHA256 128691b0ec94b90d10b9ae4235a52b88aeea9ef337d170cf9b7826274ce1c997
SHA512 d81da5e39df522c562e89e2b6c4436e916817ad7aecdf48da9947d03bfd5fcd355d6cc69b7a4c8726830aee901d7bc252231f3482dec26f7d4f785caa313a12d

C:\ProgramData\Microsoft\Windows\Ringtones\desktop.ini.(MJ-TJ9302618457)([email protected]).zxc

MD5 e37a7c88c42006cc81958f136b677ab8
SHA1 5813234118cbc29e538eeec2e3412158114c797d
SHA256 56c20911bd14e66bea339662d4a2c75fc4f9a9297c8f24b90c6f07184936fa11
SHA512 728f7db3766d7f2f083d997d7337b58763584e3957db03de0e87b878b9a67922176c703258e530324b0014f1d6f4b50a9616acb24ba3513c51ec099088653c29

C:\ProgramData\Microsoft\Windows\Caches\{4F4C131C-6C0A-436A-8F5C-C3EDC71ABD91}.2.ver0x0000000000000001.db.(MJ-TJ9302618457)([email protected]).zxc

MD5 0abdd140ebd2014e050fbc9b05538d82
SHA1 9ea60673d05bdf2ea18488ebb919aa09a7a9050f
SHA256 73cdde6d26584e92963ab14ee60f7759ea09dd7912afc94161093a1bad8faccd
SHA512 438e939f16f06d8ee00aaf0dcbece2da08ab45fc12333ea905523c84fade66466f06d2cd06939de3d57880313274d83169283807bffb08f3138e939683b2ad3e

C:\ProgramData\Microsoft\Windows\Caches\{4E4260A4-7E39-442E-BC22-7FF751D1C161}.2.ver0x0000000000000002.db.(MJ-TJ9302618457)([email protected]).zxc

MD5 2b49563c835198c51c7d48dcccc76834
SHA1 b3b42de5ebf6ad50e9fb656cfb483e4bc3f84dd4
SHA256 e89c29466308a5b93a46a903138e1a971246df30a3774ceb510e138062c79f3a
SHA512 ffba9fdfa131c5f5b698d5a317d6cb31b568b0f85cd765b8d3a7fda3a2f861e4b90268e895b9962b3286094e08034e674fe19864c235fee87ed0da90df179757

C:\ProgramData\Microsoft\Windows\Caches\{1E7B8698-A61D-4ED1-BACE-D8B41501B4DD}.2.ver0x0000000000000001.db.(MJ-TJ9302618457)([email protected]).zxc

MD5 1abe29f053a40aa8f66d54beeaaee2b7
SHA1 8f6d058e17d787d0fdd5eb8cb87352285afe498d
SHA256 f3dda751c98b10d2440a125eabb2e51494d7cd275adfc5b479ca57fcb7866f95
SHA512 3e8346ff85e4f63d73f1345e12928bbb65b7f5e4fbabb2dd0c71a25cc14bb2976568b44fbcd28b266572efcafce23343e198406d1ffb91cc9fe73f5fc2a4fd7d

C:\ProgramData\Microsoft\Windows\Caches\{12C30403-7161-46F9-ABED-1159FC4FF0D5}.2.ver0x0000000000000002.db.(MJ-TJ9302618457)([email protected]).zxc

MD5 1d64582607831131c0014db74889d38e
SHA1 71a874887f90f0c689b68944f1a10f225cd68cdc
SHA256 7d9f0ebac54094b27243cfce0f36f938bef1d28b8b8169175725810c7e1d4adb
SHA512 ea23138462e0d8cb1ddb752210adc945dd60e7951d78bf10f18d52e9af31d0c754cba74ac380d47ff2695b045824c341ba51b12d65099937484f264b6c96a8e9

C:\ProgramData\Microsoft\Windows\Caches\cversions.2.db.(MJ-TJ9302618457)([email protected]).zxc

MD5 040e0d9e097ab2953f75e014343f0b72
SHA1 d79007046642ce07314e50fe8bc9d0b7fc5c2b65
SHA256 17f29ba71060bb6fff2c1b79a159912de0700f0e8e8e25afbee906b8f46ac25e
SHA512 09e8c58fbc8cd7e6834cfc032ee0492896768378c65ee91d67b964d8f52d787c908d9ba36e5ea727e75d169435c80140a51d32751931bc30127e98785df8ab47

C:\ProgramData\Microsoft\User Account Pictures\user.bmp.(MJ-TJ9302618457)([email protected]).zxc

MD5 bde2603d91fa83fa4f88db09fcb44cae
SHA1 7317db56b710619e0dcdd7634a3e8ed7279a0a40
SHA256 f90abe930b1338f2a5c92cd73c6c2057d822107aed060238535c10afb9d22902
SHA512 18acafd71caeae7ee8f2a0bd65c514db6dd5378ab151c2b66966e4e37d11831ab91e798d796848161bf809cc3878405fb4a2e6457d08f926a747623c6b39c07c

C:\ProgramData\Microsoft\User Account Pictures\guest.bmp.(MJ-TJ9302618457)([email protected]).zxc

MD5 c0023e753ad63ac1dbb72b79c867130c
SHA1 3c5a46ec1bbaf32c8b803a3beeb00d2cbc97c40f
SHA256 0db749cd2abfd2759ed118b044c7adae8f6ec392034303c7ad3b1a3c240fd6aa
SHA512 b4ab0b4dc76493606550a7da4b2630e79e53ae4c5fd601dd610518e69985379be441e92e99806ea40850eb22d356c3339ef3c48b27f56205610524487fa9221c

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\CiST0000.000.(MJ-TJ9302618457)([email protected]).zxc

MD5 d1c27e47ed2fc5728a5f7e49f60f0579
SHA1 0f51e5e4640a1ff6e4d466cd658ea4449dc3c41f
SHA256 e47006dd1cccc11871e2b19646795d05b7443382f66e858504f03ce4f5d586af
SHA512 fa55a78e6a85273ecfbdcb1944097e181dc52891ab6de322b048716206427c817448c1f3ceabf6371d5561d80074d77a0c54230514a076b2ff324d0959570439

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\CiPT0000.002.(MJ-TJ9302618457)([email protected]).zxc

MD5 2d26e132c285bb6b283f72c901d00622
SHA1 697d1a1ca3b30d560ea9f5c54a20a854bbe30b6a
SHA256 854536c61949d24edbfb417a4ef586eced2fbb86552da4e2c212c71bd587ceb0
SHA512 28258fd7dbfac5aa8006bce6cd22447188229ba1d04071021ce20c430ef3120e267d903ce561cbe12cfdfb810c96f39b8809ac128f46bbc5f101bed9dc5d3c65

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\CiPT0000.001.(MJ-TJ9302618457)([email protected]).zxc

MD5 3231fc2c47ae6b415dc1a86d4e1bb3d2
SHA1 cb892a14add873138162cddadff7380ecac9f2df
SHA256 b80057e560fa541fea0dec5e7ff421000dbf5a860398d6277772cfc84e5b1504
SHA512 aaae71f0451e177a36e2c125335fc2b75c8a96e84ad4e964e719c861462302ff140fded50593b728bde8726ceaab2c09cbd3efad387cf15aa545c1f45c8eb466

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\CiPT0000.000.(MJ-TJ9302618457)([email protected]).zxc

MD5 e7d10b0913db337138c210546c4c7935
SHA1 93400895f75d3e79ffe398b4044b16fe4ccf165a
SHA256 74fd9e8d5ee9ba13f9606596f50a6ea6d9f11600ea75ed160a86cae36751e7ca
SHA512 0334dfb571fba3fa71c7ef3bb6dcd610b2e0f8724f28f0a968d6aa8f4c78e03f91dd531b3e4ed880319f16a709d0eb7d8e4dc586d8d2787572e56fe9c5e57d5e

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\SETTINGS.DIA.(MJ-TJ9302618457)([email protected]).zxc

MD5 3dc27d54c3e60bf2babbe6c117eb3284
SHA1 36427a43f5ea2501cfa2c5825e491faa5fa9ed33
SHA256 cf0ef984e57c2116c0335fd30ac434f0a06e8cfea6915501b1cf4ea60a056f56
SHA512 e35019c1a74e546d9ef4da4334bb03faeb7f4add5b66ec8e45504354a5ca3d8071368c88fe71072b699da5cbdf8e84bf389e364505519b9accaad38ccebfebfe

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\INDEX.002.(MJ-TJ9302618457)([email protected]).zxc

MD5 41888c026aca9c619c3db5bf55a9f399
SHA1 2af8d1b476d57c8c9bec545c2ff85080fdfa0d3d
SHA256 40743755a73dcf1dc0771ea864336800108304c6d731cda83405d847044efcde
SHA512 1bc944e58cfb05c1e3193927e1726617d9946da1dc8a6f69c1e3de519b7fbad0d83e2211c5f6dd200706127f617f3e5c61d38c4ad750ab82ccdefea28955652b

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\INDEX.001.(MJ-TJ9302618457)([email protected]).zxc

MD5 adfc10ebb0b9f7426045ebcb0151bd83
SHA1 6d7aa6e516d02f03ee5264e4b43955ae6b21b548
SHA256 726703f488c40bec26d09085c1d46a4565fb58fe650e7135838b188da4840265
SHA512 6b40c1fe81f7250c3d18997169ea11c60a80bbbb2843051b8ec734020e8ce8d67236dd9a7e6a2c921ee237ce6b91d0345b3326d551dac9311057bcd95c0dc316

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\INDEX.000.(MJ-TJ9302618457)([email protected]).zxc

MD5 f9777d66366fa6fab951edd5c2672cb6
SHA1 42e5b615d0a50fa526333776de640ef6e6c10089
SHA256 21329b3894d86682cfb162f0ed91197467f6fca869b55789b49560381a2e2109
SHA512 399c5aa9e88ec93ecbbc38fd70f42d2ff04a6e82fa0deb56f6411beeaae3a4a43e55e66541fa839fbde4cd2f1647b06623a38d686259302859f30a8d80125935

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\CiAD0001.000.(MJ-TJ9302618457)([email protected]).zxc

MD5 e25423faea6d03bb90c3dd39102cff6d
SHA1 2dc501b4ddb2ce8e5cf86f607f73390a1d100d7c
SHA256 7b1b870140c4b81c0f8749a1cf7e40aadcf167b4108bd2526152ee3daba06e54
SHA512 0690252f26e20e32fe077fffdd56a8873daead227ccaf3aafeb07bef942cc80a4b77c6879f6e82f7b0ac4df2c8936b2e9f7a0d205971946bfe4b357b69831b61

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\CiAB0002.000.(MJ-TJ9302618457)([email protected]).zxc

MD5 d7b9b2ad4892aca6f6f81850a9a6d63a
SHA1 1f967264b3c9d6dfa12e1c3e8fea2bf56e0bc313
SHA256 4779f506e9af959f4583215dc92716d659129af0033e79e9ca257ed361ae4fd5
SHA512 b25e9dbaeb4a613fb210103791eab7906d4b8fc698cb56e7614a6c57e7f34e7af6817bb50f0b86b78efaa9ad66264a3f8a0973b3e33893971679a6ff6662401d

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\CiAB0001.000.(MJ-TJ9302618457)([email protected]).zxc

MD5 7f57bf11ac81a4c20f2963c61f2e7ce6
SHA1 3e5933a017dba89f0a0d41e904c08e578f287491
SHA256 6a04c7335aa0fcbaf52fd78eb4087ae9174be1fde4137c49557cb4733bf21bca
SHA512 a12123cf3072807d3c7255039ee071cf48f680935aeeddf177b5f278a190f68cd7eb975739b4e3d47dccb15c6dc6024bdd3d9bacf56c1600ae5bdab36afa279a

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.1.gthr.(MJ-TJ9302618457)([email protected]).zxc

MD5 727e3404516e7e8a523ea2b12470bafb
SHA1 fc406854e25f3565f5dff3264be1342015b448e3
SHA256 30c0aa54d0dacb86f5048c5eeb1814dbd847be0f98f8d3f7aae9e26d7256090a
SHA512 e3bc5702571eace6fc3c6ea24c5f57b33ce885ab06f040115a1a207b904981ffe75ede8520a532d7f41c71960bf4be21c3255cb58a35fff267876a2fd159ed09

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.1.Crwl.(MJ-TJ9302618457)([email protected]).zxc

MD5 286c01fb6ba0023f80fb0503ef382123
SHA1 50ec3d9169e9ad5b4680792dba331955df0ceb01
SHA256 1525efbdafb547acea922028922e190492bff230f2e2ab439069b912f5818d51
SHA512 8c7fcc963ab83023f22eafb2d6f6c6ec7ebf60f339a79f56a7da8a6d6ba88e0bd54884677121f9906ace5762e8bb7a8e8082790ec1765c036e4cb6c21ead73e8

C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.chk.(MJ-TJ9302618457)([email protected]).zxc

MD5 91a350600b0136d8ac0a3a6a807310ab
SHA1 1b2747d72a90a4ad68099e0b1f7a8a9c5631f2ab
SHA256 14e2e2356f66f014c26c56bdad5e30bbea1a6d33e878568e1eb341e33e945472
SHA512 660e09e85ed17239b22009316952f9649635a15265be9cd860816b09b352c7dc9a6d4b21eabadb3de8393d565e740830b3d62eb1fba49cb155d39016d50d6fcc

C:\ProgramData\Microsoft\RAC\StateData\RacMetaData.dat.(MJ-TJ9302618457)([email protected]).zxc

MD5 28b20b9f2fa0eb3431a4ecfbf6cfa407
SHA1 1b1d9f33ebf238b4202ebbfb94e12f60af0b4e53
SHA256 14a0905b8b7342fa0463e110289ff5f72b1652f941439c59c76ef95e0f11e7b1
SHA512 59ac12bdd0b4fe123848ede6a0eb7d0d2a2a40a10007f6e07486c4d17a79282cc7fd46e5e7ac379e2d2176876f381f2f64f783ba2cdbe761c831dcc866b49fc0

C:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\Cache\cache.dat.(MJ-TJ9302618457)([email protected]).zxc

MD5 5647461527ae98c8d683fa841c3a2609
SHA1 284e1862573166b75a13747ea273d2ee63da7302
SHA256 147bf00f5a1516ae31f8605acc6e2f9d52a8837cdd2e22e3377442b201a2d618
SHA512 cd10ca83c769617980d1a915a1a8b7fb6719eed8d2329263edded1adfe50c4da655e7cb04edfebb009bb205be89e3da3bef0a8c53e557326771d68d6aa1fed00

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\XLSLICER.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 7f935cc2e6103f8736fc992353b4c570
SHA1 97c508b583db4c3cdb75ed18d427639731fda303
SHA256 8d1935789af8cf8d101104da2645c925b9353674a41d8af955608e83d1501530
SHA512 8d4b777203bd18b85ee817c085fd920e2e8b3fb94d0a8fd16d356e6de77ab2af5f2a6319191cd89785981454e1b90c1b82677f84b8ea918c4acc713571e9a188

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\XLINTL32.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 79bb010d2faedb3a2fc1e046a632dc8c
SHA1 5f73d547e01591d57302d4b1f57bc3fd3e0019f6
SHA256 a2b4ee7da7501c685b2eb7d74bfa22e48f820624fa9df664fb9bbff03a8e5f4b
SHA512 29e74de13c76c250462876312e29bcb7e4d947016ae8ae2244a0af9387b17f589afd89cc548f8ec5f3bd68fb511ea96b2a0d20fecad5f0105d92924ee4215467

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\WWINTL.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 87563d3cba44245081cbcbcc4c3cb4bd
SHA1 e584b4dbd5d4abe4ef50be52054dd20cd3a0f6fa
SHA256 0e1c0648f6645d183adb616f7b356fe7c8208b0427b36b42255d21c76947a8f9
SHA512 0562964b47da9ececd7d478b28d28794a1c4527ff58e0cf58370ffe4ace980120ba17af4360449ed7dd6e61d105565765461d70ad2968fa94d4ace4db5ca86b1

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\VISBRRES.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 3a9d01768cc5c26f747dbe4bfd823ca8
SHA1 4adac43b7d4e37c43f85500e503350dc7ea64e26
SHA256 a9b0d14551e92c6eab86c457311a07288f5b81636b61941c7ad461df5ea8c9a3
SHA512 8728c3583378bf7adc8bf813aa178f8c534b6614b716ce8a216ac0ae7c9bd9c5f55322c3944ee8bd89ac5865112fe6dd19ccd392b26f56fed03f8986e2e8f5af

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\STINTL.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 e8f029836b8a5f646810c75179ed25cb
SHA1 5f72ff1c71980db0a2349ff342d426abde3d1fec
SHA256 b283f95d7828026bdd98c71c9c48bd32376986729d2076e299f6ab2f16f2c182
SHA512 4ddb12c8a1501f6705c87e375acb6ff3749ce851fddbf23aa1e3a3bbff3733df6ee9bb0f9b20e5a23403490bd25b7c197e5d3cb51ec28817bfe1089c8f550050

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\SGRES.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 a2dcf1ed83393f8006d124288c825262
SHA1 0b1e2b9b7afd12dfbf2759ba892325881509f566
SHA256 d3a3e8c255de87bf4af8ab352ac802d93c57ba315f91a0dbcf8fe254041b5c73
SHA512 91c647b7ce848fdf83a6046543073beb895ba528b87c1371be1759b45f281804db9a3c46258b2c3cb8fd4867f87aa4747bf63a5acc286c6d15e1604cf47d9643

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\PUB6INTL.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 383bf208703dbf581885bdecee6333ce
SHA1 11d6f6c68e7ec730361d5f058b17bd8524c5cad2
SHA256 0df06a66c7b1791ee4c5dab8e16b73c2010f32ce5fd8dd78eca78c6ee79ebc61
SHA512 35a509fe3a9731e75b62f5752873f655fb5b9590d42809b12d81a432373eb23344442b0f588b209a5f48cd09e106963ae6b04058c1448fbd9130a1745d1be9c9

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\PPINTL.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 6b9c922fcb8e0ee76272feed39286989
SHA1 45a81f73aa167cf0930f3682391b805c6cea95bd
SHA256 f395ece47c41aa3a94b3c7a9decedea009d3192b4dffba2989affbccab3898fc
SHA512 c02b74e526783ba68a0f6f889bed11b75b6c6ff445cd0bd2631a369bcdcaf84feceabdc8962396370bfca3ae06343514a101bda16d589dbc2bffa170c689650d

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\OUTLWVW.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 ddc9ef31bb7df99f861e90423551e265
SHA1 e119c6791780a13de22b7fa40d5d30394ad93613
SHA256 ffb42605964706d1dabd8dcc813b0f6369ea321fb8d6bbfa647e7c5c3d289214
SHA512 5a504ef37bbb8cd2c4ac5617606ff32323b0f227b68c22dbf33eaf42963a829ceb10e5cf4edb6e22ac274096c1540c667885a7f08677eebf87c2bbcbc2ca2c83

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\ONINTL.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 48f1323ea467aad79e3c0b279217c3ab
SHA1 3d70242743355b11cf113fad0163f15a1a466904
SHA256 8ca113dc9a0c97f0b8ae37ecb97952d2979bd914ceefe53ce259b8d6d9d47e2f
SHA512 1392a4220edc316c7ca19dae988a93232b464176ace57203626c97ead9a43d0827d8254fd272104dbfc017c314c18bf806150dea03f065d0c5686741ed45430b

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\OMSINTL.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 c09f5b1654695fb16606a41f525f363b
SHA1 d6e06a211feccd358001e537a9d45c2c6ce51486
SHA256 110b8f35e4c0300b5231b30a3df2a61a8358de47d7a49316dcc010671596f582
SHA512 3b63e3022cd7a4f1b9f7dea62996b82eb826a9f3fab24a9331e724f7c61487601eb36fcce84b803b60f8bf6a21bd99140f4fae6bf8706cd01a078b8918e34cf5

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\MSOINTL.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 5af14ef659590891164ae11025d10faa
SHA1 a64db41c9a49e4484d477fe515ce1020d8451ac9
SHA256 9ed76d5265b0741649a691a0b6e639fd9a9ff10d865a7e5041495bb8ac9b5bc2
SHA512 0bb7be4edfc0f1542da796eeb931a13e5df9462113e76f79e48bf9e54f1ad9c540addd25f1da6391073a08ba836e863375c3520333dd768c4e98930950de19a2

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\MOR6INT.REST.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 b5607c74b8a4f9ca5ae802e2ec2aa5f8
SHA1 c1027c33b6c5a8bfa00bc799195abf41884810ff
SHA256 4681b99cabda1e46d2e96705a40612eb10b1f4f80676fe9a0a29806e9e2eee4d
SHA512 314db5be1f737243143eda848479895721144ee5413ee342f42e8efcdee2b689da1dd05b8cb6025988e11cf5646f70048c4db216f795731a7e6507246d858119

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\GRINTL32.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 886a95749deb6c1c79cf3e5d6e34bd25
SHA1 b2bf6db38007030feef7f4cd5c166e89bccf505b
SHA256 01041475dd20150807e6ac5df862a75c14c467825c2c9ac53790e220420c3bba
SHA512 0978bb6a71a4114003e1a039b25446e9ddf4b6fcf70c89520345907dd70b84c23b1a6d68ec63a3a41dcb88f610cd3bd966e6f62d4a50ee577b9ee9ef3af6a268

C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\ENVELOPR.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 278e01210b736f19e3df04c1d1a9def0
SHA1 c49dbab9ed6bd35c74adac24dca6eb22f63a317c
SHA256 8c0c1d481679521184793eaf302efdcc095edc870475cef5915a1d1346178793
SHA512 df4d586f0913bb539222246f1e3d45e408c1e9109261ba5d7c6eecce97e993bd23c5fb3ef11fe067fbf596d16960d3d834d256314a85cfff86dab3ec74b2c185

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\XLSLICER.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 c204749f9d4e73313ee84fcbd27d7a16
SHA1 ddd6aad4cf4e63129913730370eae82625a3ddb8
SHA256 6d67b5aa4c1ccc7ffa57e34d29004561d505d71233ed21407859b2965f0b0c68
SHA512 da745347eb157d12b008e026cde00524090465bde42ae097cd295b3e94141281a91af340d6216c57217f30eaa079570d8663f6c1c0be9aa180278fa5c0e19e7c

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\VISBRRES.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 e6da6b7769fd469d116d78947ccfd19d
SHA1 1775e8c34523780c9bf31dead0cda9239a4c2c39
SHA256 4a9bdbae3ccec09123ed2c3046a00bdec7f0ceda48cfa0c96b4d65fc828d1da0
SHA512 0a4c18792be965d966bc62d051811612aba8c26ea2cdbea25c488ef1e6cc3d9efa89531a4abb8ed9c30ce87e412ae1eb8ecfa6227f5895fffdfac9f581bfd4a3

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\STINTL.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 aea947c982641cf1be45c97fba7c2784
SHA1 42acc2dda87394aaa1f1777c781cc9238d32d8ea
SHA256 b093ede2f8a75450ae3773e165fc9b5de2cc247fca8fec21f90c98667e2200fb
SHA512 0f5b621bfb9674f062bc08737b4e666f8b49588298fcd079bae8e90449141a60eb8e91344ab1b091b40bd2964b68ef29be130e00dbca25ac6096c0c5e6a375dd

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\SGRES.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 a086ebc32d58b0046cc046bc45fffcfa
SHA1 3544876edbe2bf777f7918fd31a650d4ce6e66a8
SHA256 154b0bdac8eaebb2f34d8b4a2ed3d7e7fedcd1fcd34cea6f428569959dfa6ba5
SHA512 96273d1cf055ea7e15abc40a1cf44ec2415060d2886a63c3234d816e99c4150ff9405c1842ba5f4adad750ac98547177eeb48608dd4098f59f66cabf51fc9859

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\PUB6INTL.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 2d044344df95ac5e899af150b1af5c6e
SHA1 bd0195a965ab090251fc80d207a047fb2bb0d183
SHA256 cde326153c65bf51892c41c338fb37481c971afe4760ced4f655c8b59ed0c6b1
SHA512 148d433fe1a3b874fb8f04efbe701addf143382acc952ddae7f34edc99114f9a659e4f63cc928c6119d86f82f8ca29adc8c6521157b2feb8a964f73fc1c8d880

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\PPINTL.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 995b26a07305300db20f4a140d89e531
SHA1 739887a5484584ccd896777a8972e0c77e96810c
SHA256 535d4dbf4bbbe3b7c3c870b76c2cb7b62dc9e96f608744b2f8fb92ad1c5fe108
SHA512 ae271220652e05badf388ca3e87f8c5d9f6e5d14c4f1b9b2391f55d1b9ac2a9920cd2a76af83d468eba91582ae40e9033257b33732445722a86508751bb0074f

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\OUTLWVW.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 4983b2dd21bb74c71cccaf8bf21e20cf
SHA1 f7918e56f94da22b3055dca19e73a03cbae8e186
SHA256 a7de1d3ce1843bad52dc86b1c4734fb8190b506441e2d12a1eca2b70bf081c59
SHA512 bbfef4f846b7ee0acf056aed523127343e9ce670afef5f3487466f8f8a3079942288a27987f643030650f0a01813de18f84ac6eae7dc5f5071044b146b75e2a7

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\ONINTL.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 a0e4608f129a4f3b7d65b864d90c8c2e
SHA1 31589f88169b96bb88da2d75cb8743aeef3a76a0
SHA256 39099abf874f37d7c76e8a569cca2c4dd7ffcee9533974d79a3f9c1721072b95
SHA512 714a14d2311cea7bbb931d2ff722baf731ca92bb1b7ca2f1b2e231c59c29664190a5d0a447e9c0ba6ee7684500fc555753b0f37d8e4d5dd159fffdb826328f39

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\OMSINTL.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 3a6f66523f20ab244b7195195377dfb0
SHA1 01a63437b42a2a786b336f131abffddef4d7c656
SHA256 fc2a8e35c8abfc890488b2569bbba9fb65ec26144470fd1cee736bc7e9041474
SHA512 7a51917b4829b75fa70d836a6589cc541b793e4293510f4048ad5c6a3b2634448a1d2ec824131aa756f658768c64c7c6eb694ad810603afad49bb17bc3556600

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\MSOINTL.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 dad53691a0ed61986f9c63d27d68558d
SHA1 1aeec74130a36b56ca96f6f0045d469265f9d86a
SHA256 c0453a5905cb54fee39e7fe35a326200d532c3a60c669db3d474f201a2353318
SHA512 b9a5d2a7ec017d139fe98766e298865fd23dae2111e0d1f3ee14076a907d9920bc634c979d66ced796e9e438b3ecb37341a4c52bd06a2a9e87f6d43f391715f9

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\MOR6INT.REST.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 d352c782fd6504432f24e9a93966d61c
SHA1 c1e79571e230b94ce77e1d3002a79f1af319198d
SHA256 4e3dfc456e49ccce9eae66b23d4652fff8c5c5c1b81b060c8feae837ff4d9a4a
SHA512 ff2f4336be1e6ed88c357b619cb4491f28b9ffb53dafcee13a00c86afda502ac4a62ff1ff5b7049a3d23ab13445b80ecb40b8c0d860e0e6e59f6d11530ba6325

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\GRINTL32.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 2b194408113c1f8b30100c301e07a774
SHA1 cbc74fad3c4cf1200c67cb1e2a5247112cab3d9c
SHA256 045c9375680e63e92431df1e1ad9cfd2924c0b2407c93cc562552a3ad948e5c4
SHA512 c6273b32a1bf4167a9c58242c6a73184b060e80311d58c00d39c0f9a1b13b22358eba6c0e30850d61146c0f72e2366f22692a93f2006ebe9f7d5738db7a9269d

C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\ENVELOPR.DLL.trx_dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 b01959723bc39c16d34fe7275e1e10be
SHA1 7e94b9920523e02e24e565ab22faf637520ef9d7
SHA256 6e209edeb8fb29da2933d1f672d70d48e2ba6eb3dc218097012751856f035810
SHA512 06c8b564d3ac6d0f65b4ecdd178125fe05fea6bfa1247cc7a80d27e8f97d6efa6a43695ad34852b1471f455e4c3cda1cde8f1f2f19441ff8a315b5b1b3c2f117

C:\ProgramData\Microsoft\OFFICE\SharePointTeamSite.ico.(MJ-TJ9302618457)([email protected]).zxc

MD5 b53585e4fd9c7b68b7ab2c60a2d46f4d
SHA1 8086d69b1fb0d496a226d37aa31d76b12e6d548e
SHA256 594ff78c52d506f2f18b2592ab70950a5042417dea8ca4cca62ae99794b9a8f5
SHA512 21a5a34df32d6e77d360f4e8027241c125c608cfd7a2c62d479e4574dc946ecaca41508620aada872091d45fda31706cdc7c3143e867eaf61c85c6ee18a978b2

C:\ProgramData\Microsoft\OFFICE\SharePointPortalSite.ico.(MJ-TJ9302618457)([email protected]).zxc

MD5 ad6dd02dbc2e35097c80af3a1ff19c1d
SHA1 3779f52171d50954e546737da17721c9be1e610b
SHA256 9a0c3ef5814f477cf408fde402c7fba07858c6c1c18edbfa74cf405d8012bae2
SHA512 e04d8f957a94345c316a174155d3891acfb445d49b568aec140e14c9d50483f110433fb70a2ea5310b0b4864a918d24e560ef7ebde8d7187e5068cd8ba4433fa

C:\ProgramData\Microsoft\OFFICE\MySite.ico.(MJ-TJ9302618457)([email protected]).zxc

MD5 1f34c9d6e573a2eba26453ef9d8055b4
SHA1 db5d6c84cde91aa7e5440d35ef8b13fc8a0a4b0f
SHA256 2b85d46cdc195d96fa54f32e45eef40000a840fdbac63720e0b4c4a7ad6787a2
SHA512 22137d5269bf4d53005e95d80832ec7b39592d2b071a9344773cfc3b166c93273ddb48d2e58d17dcded21d4c9480bb6be779c6d7169796f1b36adff82d05c71e

C:\ProgramData\Microsoft\OFFICE\DocumentRepository.ico.(MJ-TJ9302618457)([email protected]).zxc

MD5 4153429e87d5b9a94c51cb9ddae62091
SHA1 44f893c83f1c9e84c989ed5d222b0616b4786902
SHA256 74be4898c840541fed0a79dbf3506ba21b185d043874afc7d46fcd72c956dfd7
SHA512 64d8f54a2d9627de4016300e42166626435e9db060669a01a6e9e89feebaf2b6cff17919987d346f507f8fd3d1c8c54c5bf25ea10679d812df852ae1ac1cfd2e

C:\ProgramData\Microsoft\OFFICE\AssetLibrary.ico.(MJ-TJ9302618457)([email protected]).zxc

MD5 0abc2540a66b1bbc8e64293d3aa9a170
SHA1 126ac46a1baf663564bfb005d3faecd14b2bfd7f
SHA256 154e5bcff668797f83aaef7ad7b704b87870f7382f5361203e4e94f0d63ce622
SHA512 c437d5ba69787839b75d9f78856778ce0b09195ea4da4c9ceae0f85efe665f5048b31d6049acfd280f8278a3e686ab6809ba2b7aacbffa622061b7da4c03b1aa

C:\ProgramData\Microsoft\MF\Pending.GRL.(MJ-TJ9302618457)([email protected]).zxc

MD5 ec63f78554e5c5e7c1930817c7f9485b
SHA1 b3bc885ca9ed30ec3cf7b7946025ac385fb1c2b6
SHA256 1ee8da016fbd0a940289aaecf6f75cefe5766d61ad4786d774f7630928a8ab46
SHA512 1d42dc4e83bd9fb6e6161bbfccfdde0188fb5b43e5dfde1811b7784962b0b213ac2359cf0a95d33d49642a3989233640afaf44546e707e0834b1dd07d3590924

C:\ProgramData\Microsoft\MF\Active.GRL.(MJ-TJ9302618457)([email protected]).zxc

MD5 abd5ad7ff5d7c637ece15e0e19a052ec
SHA1 52852d7b4af9286fd7b5eac5eb6a9007f014fda5
SHA256 d11e20edaf42fcfef922e298158aca7af4129f52c4b936dd1ebbee7af5172b54
SHA512 49b36b9b3ce5c5e1857bd1b7cc2eb7b042e4800f1e7c84dfde775a09a2ed3b3c89a40e6a70c686aad23cbebe3b43fdcfe6ab45d6b56df0c84df2e4b960316ef8

C:\ProgramData\Microsoft\IdentityCRL\ppcrlconfig.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 0bb44cf81a33dbd041d9be2ef5974c74
SHA1 64705db33e4c30db20160e7a9e02bf2cea0652a9
SHA256 8d919868715c50ff445ac407f3cdb1203d8b45d2e8250582308259531e202eea
SHA512 1f5be152540fe5d68d3e42bafe60f0787238432d5bb0cb351567ea32f254731a7730528669c88c546dfa5ceb2a6d4c045167e4848d2d426b04fc04028f2db9ab

C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18\6d14e4b1d8ca773bab785d1be032546e_4b15cc6c-8bd6-4727-90f6-cf303c4bde6d.(MJ-TJ9302618457)([email protected]).zxc

MD5 442c0a54a6fcaca88495ef007ae2a298
SHA1 7cd544b94b4e6a0efd58f80863db969877234da8
SHA256 149b560f638921aff58f2b193c7f31466a297f5816530ff3bc184be552b6196b
SHA512 f748d1ef63ba89cfe3f6e7f31abc2675810316fca973c1eb343de9f5af1c99e33c051e76defb4ba14e5ccf4d5e67242b7c98d0acf179671c728e847d4d60859b

C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_MValidator.Lck.(MJ-TJ9302618457)([email protected]).zxc

MD5 345c0dd7718a4bc75469bc913c5a8e60
SHA1 70c61b5de880a9391d6f1f9c3e0684bbb3d12fcd
SHA256 e8e93a129e97450dc048fd11d8f7b002a8aeb0f7303d28fc9bf4a93a0750060b
SHA512 7c8a7c10e7d1daca580be1de2af6a38f88a6cb7f90fdf5504456428924ea03868eeafed9c4d591080ddeebed821075fb484b6a0494045416fe500eae2f8fb4b8

C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_MValidator.H1D.(MJ-TJ9302618457)([email protected]).zxc

MD5 91b54f8b50cf36e9007ed0ea79b7d1e0
SHA1 95dc1da00c46fca010bcbc126e159268e6eb62e0
SHA256 a9fc95c18f325d14072f99f7c51308ac10bcffd30e7f81b05550ea2890ec7229
SHA512 2b620eb9bec7bda645293a2630546cd937775b81bc1d36c08c6f62a3251ae4333e4f772d3f8d6f571cc81c0aec5e80ccbebd48f78ef749086e70d5be71319a8b

C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_CValidator.H1D.(MJ-TJ9302618457)([email protected]).zxc

MD5 2c61a600ba405aaa15c315fa7cbbe8de
SHA1 fd555202a83f74bd81e723b24a88b744efd67cc4
SHA256 aad95fc259f0b12bd500766601be96b29a9000825f543bbaaa01e9b9c70c7bef
SHA512 0afc0e3e4e1db32789f6c8dfcd85807c0ff8ddfb9ee87f8e1536fc5eecb78f41e574285bce961ce55dc59493948dd94abd2b646193053a6c0e0f6dd76491bb1f

C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_MValidator.Lck.(MJ-TJ9302618457)([email protected]).zxc

MD5 807605cb26242a5020331f2c608f755d
SHA1 9b6739f1c35a9b8a7f9e38e5b1ff81de1f44963a
SHA256 ef1c4b229f16c52fed5fbd296a238f589acf17d64a7a42f0ca6dbdc722f843db
SHA512 2403c4ee2c95a883aea537cdc75ccfbbc6b675529fb31d4d337f3dfbe7101193234985c7bf918929b2e1219dc423f7d13cf5ed52018ffa7e0d9af3388f3e547a

C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_MValidator.H1D.(MJ-TJ9302618457)([email protected]).zxc

MD5 39ca7b21cd6cb1b8b4a2a70a22b47cdf
SHA1 f1c875cd12805b07bae07317895de5dab2a42b7a
SHA256 6ef31d10088f59dc064255cfd0aec929c6de3715dd04791aebd4eec2722486df
SHA512 ce82be588d04aa10f716997dcba3220170bee63b5bafe8ade8c8f2b135d62265b21733bf885cdfed45de9d1af0991fcb1f78bd4e2f06b24cb5a1a16dc3e35727

C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_CValidator.H1D.(MJ-TJ9302618457)([email protected]).zxc

MD5 1f9152d2828f03d119f412fc96a16e97
SHA1 be48612ca769fbe316f9841cf262209155874318
SHA256 a9d39b41e94ad3cb7c79b83b3dc165eb3bf1256cd98eef705079f1f46355fa16
SHA512 35c5c59626396f4c6ecb6dabd8f1c186943e3b26733bcbae2fc299fc57c0c86b149a1f7becbcd3a72927419e3fa2f9d9350792209e63e83fb634091b3eaf6612

C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_MValidator.Lck.(MJ-TJ9302618457)([email protected]).zxc

MD5 036b17197c91222445148d825a553283
SHA1 3d9a62a69dfd2d65aad88f332e099c2999e33f69
SHA256 da750a1bf076a75079c6594ea84522a65b61eea3b6cfd329d473d6e8ffb87538
SHA512 1441a6f013cd9ea9e447a4daa515f6b770dda4dae40c2bc8485013b9de71eb9e624b0775e58b31c808f336d25d1b048124d46d20eb429a58589d051ad7a16903

C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_MValidator.H1D.(MJ-TJ9302618457)([email protected]).zxc

MD5 097913ced23ba626f952881c737a7eb4
SHA1 8e73a850f7ded182a2d41cb2c3e4feedb7e427c8
SHA256 51e978a1110f58b7d731f4c186a3ca0e510a1ed1390342e44e3113586d19981b
SHA512 8404e1a31840d28ec5d4f8320700c7715273fff1cbd1f56fdb14a7c9eedaaa704f9ce84e451716a242098bf3b1befe7490b4a89f5d40d6a96e0712f72eaa8c09

C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_CValidator.H1D.(MJ-TJ9302618457)([email protected]).zxc

MD5 5d31f511de334a6e72a1d416493d5d4c
SHA1 34d34eae4f8ca5bd67934014c0d14c0316dedfcb
SHA256 351cf542fd45bbbd1c69955c98c218970ff06d9b2129688deb837b87e2dcb67f
SHA512 7a047918070cd47c30f2ff39b9a205e8f214a633316a052525c8f85fdb5ece6d7b51eb7629db27aba483dbaa93e0adbc48e5c4782402a36a20883470245e641b

C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_MValidator.Lck.(MJ-TJ9302618457)([email protected]).zxc

MD5 cdeb4133a66918f6e6e246f86b89bdfb
SHA1 1f38155793d795af33cbdee26d1b403e48d3272c
SHA256 15a4de1bf9b6e92093af9aa3ac72a18ca9a2ec8bd49a9fe8b1619a177f23b786
SHA512 f1e9b1fa990c4e344325f977ba835c7e6127d6e92c3e46f69edaf64abc930c73164891edef72f1ac722bbe00f13780eaa8e3df1bb2d8584faf1383a032a8e57a

C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_MValidator.H1D.(MJ-TJ9302618457)([email protected]).zxc

MD5 9bbecf8478e18315483e0396c5d30a63
SHA1 a7d6e1eafd6fba4d794c44958b11db23d1b1688e
SHA256 57238b978205d0d03f4e9281319f4bc1c2aec61309192bce60f747ecae4b0a53
SHA512 68da457bb61598277518b17b021df80874f23ef8ba2b636774204d14b28cdd8331a54e7333656a94f9badd1033e91a4f8b0173b3fa84ed466c1ea2476c4217ea

C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_CValidator.H1D.(MJ-TJ9302618457)([email protected]).zxc

MD5 a1b927594503591b9b5cbbb421b8cc78
SHA1 037c03b55ef20209e907dcb0ad1ddfeb53f6487a
SHA256 f7ec868446b5780eac4ff96b21938291e53df22bdb13ccc77e1a305dc65a3814
SHA512 022a842fa4c02e03e7ec57260a3e4deb34088c7e8995d555b84cb005fda92d19972ef42f89c48013aba6eeec8560357a30a16ffb5552e5ed16fccfce2603925e

C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MValidator.Lck.(MJ-TJ9302618457)([email protected]).zxc

MD5 8a09ea6abc442b71b0c192d99893afb9
SHA1 9e71a3d715197707f2237320d1eeeaeb7337ebc3
SHA256 b85d645379c9dcc1667d3bf0668fb0d5a22119cba2777d2374a01527bb302a49
SHA512 8f446738ae165d342cbb1554184bd97bbff32ff280dac8a8223832f7d6381287b7550477376884e886195634b90a8c2f795e98185b5822abee18467054e76172

C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MValidator.H1D.(MJ-TJ9302618457)([email protected]).zxc

MD5 f77a0f3979f04123d1acb4e898dbbf22
SHA1 4bde3ebcce0f2a6a5cb38501f9a2ad15964497f8
SHA256 d746f420907b7f868fedc5636467dc121e69cb41bf3827bd04eeea9222695a22
SHA512 0eb3586102a2f9acac82d78f99922bb45269084223fcee3b3002c38b42d6bf9f699446f34763e6f380cda0d50bac1d7a0bbd3fd1f90bc91fe4fa03fdc1b09c3c

C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_CValidator.H1D.(MJ-TJ9302618457)([email protected]).zxc

MD5 0ead926323aae9ba4c75e1117840dd0b
SHA1 c90a6712330f93cad5e079168c19d4a56c04e7a7
SHA256 e1c83bb7b6d00b1cf210813d902054fa7ec05ee858b9dedf2cfe9315cd8d5646
SHA512 c976ba344d85ec56e9b9b1dfbfc70bfed7afe08b5d1726447d105efc098dff000795a6172752d914534a8d1d61c19b5e5e354e61d601bfc7e5c89fc15881a4bc

C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_MValidator.Lck.(MJ-TJ9302618457)([email protected]).zxc

MD5 6554877e044b3222cffd1710bd13cbbc
SHA1 81ffbfdacec6e2e3e755ab53321527552707151e
SHA256 43096a1f3dce4f4b26d286d9b8769b8dfbc24877ca8c6a4febbbe6d326479d71
SHA512 cfb2025a97dedff8ed859644236e92a8e5a16ab2e9c31c163a980431b8c703e9715014a59aa7b0f483bad1eb022f97eac1a7711e480b234393b816aeffb27b97

C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_MValidator.H1D.(MJ-TJ9302618457)([email protected]).zxc

MD5 2c50bf3ed26f3bc56cd4591bcce9ddc7
SHA1 921c991ca2e21e1558efd772287c06d5fdf94f4e
SHA256 e0dd86c1735ec4db24d08e37c0ee2c4a0798ebae766f122671f11046f4b7fbb1
SHA512 3374d0fa6a4af124b5e4f118c1da3b72674ab289d85b90460628ef6682f1a48212ef7afec3681f65a66aadffdf3707117d893b3d2b0b713512ecd9ab1929a967

C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_CValidator.H1D.(MJ-TJ9302618457)([email protected]).zxc

MD5 1aa2bcd65435dbb20cb3a9a949bf9010
SHA1 f6b21329c1c68d8e3e836f36df0e4b587d15ab03
SHA256 a130a8c924c648a72dbdb57599fe2ce57f9732858a52c98f531c2d2a951c7ba0
SHA512 abc0d16a92688d6f1cd89632eddb0afafa458acde1439d1a88250ecaea10f599b2bd0994098f7b8cba4f2db15cc31de8b5b0744f8f691ceac10895715d0b966f

C:\ProgramData\Adobe\Updater6\AdobeESDGlobalApps.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 59c7fcddcfbcfa6c9723ab2d522b8a8e
SHA1 f96d3f92d2ab9b92e3cab572c96fa5a90f5c705a
SHA256 e8173469d0e5b8ba08a263302091b7be3d292d09857175772b38813e0c0b7124
SHA512 b3bfda0de6204279a9a8bd348181302ca0991be464ab980d286f3a60aea7062808b3b6fd1c3471a38ffe745b7260e29d5577dfc24946eac7bad02cbab8c67386

C:\Users\Admin\Pictures\SearchJoin.png.(MJ-TJ9302618457)([email protected]).zxc

MD5 d0362084807766ba9485c476dfe894b1
SHA1 77de68faa1321417a7767f4c87009481f198501f
SHA256 ec0461b4ead039f7250e1b956c18861900c3e0985cd555a1aa756cca5ecb8e93
SHA512 becc4d3e85a2d2d6dfcbce288100d672eac4bb51240205fe304ac9a37f2cf5229133093cd29d7a90a5ea2c2afd46cc7143495b5e0f52a3c1e3c042301b7df503

C:\Users\Admin\Pictures\RevokePing.wmf.(MJ-TJ9302618457)([email protected]).zxc

MD5 46d59320ece00da9a2bc40ac6480c4c9
SHA1 b9311f1d2dd01eea41d97e030c40499058b16827
SHA256 abcacc6fb46e4eca533301f92570b232b2e3d75e7dc8bd289a276d10d2b10c47
SHA512 61e6ee14be168103896398356d9fabbcee0dc51c1563a7db574eba7644ff0aee91300e254c342f14b7026118492624a37d2fa574f971f75c1bf7488c4c7e9b02

C:\Users\Admin\Pictures\ReadPop.dxf.(MJ-TJ9302618457)([email protected]).zxc

MD5 d748c768705dc7ddc54d727cf7e25828
SHA1 3c94f0e11b508e91c661e337c8be13334c69ac2e
SHA256 adc9a0c4bf7ddf5b7cbe830e7a327f5ead5a24967b090a7d2607f4bd3683a084
SHA512 e6ac9da6534924b25c3c9bce688d0e1978cfbf0049a40d41fd805693810b74f3706d87039f58ccaa03edfe45c25490e5d07e6a7cc273dc52fc0f2a6e5c22d4ce

C:\Users\Admin\Music\HideNew.reg.(MJ-TJ9302618457)([email protected]).zxc

MD5 119d79b26643fd7dea056c15fe4ba341
SHA1 8615d49a1a3093aba74b7170c62c0127fd9cb1b8
SHA256 8c4cd8560749c4a66213166405fdb6db79f01f56ef2e95ce2d831d01cca8a4d9
SHA512 8bb54f7ffe47f759b923e976a80aac7ac982a7e648b9cc879b0d730a19d02f90c00c8ae906a8f7f427f5b5d10481d6f4af37f8055a3702c58a82b70176b7e295

C:\Users\Admin\Music\CompressDismount.mpg.(MJ-TJ9302618457)([email protected]).zxc

MD5 77d6aac76f44bab8db9e233433211423
SHA1 6e47ac607117d27e45347d81fda513ea28179b42
SHA256 c7ba23886872f259d91a02aa58cf9581ecc9989aad97bff68feec9d63f53704e
SHA512 9a167f90191d6c98cc41a007a9cb5b79d322f3a24db401961ea48ad93bdc45e5f021bd8c0ef65d37b9abde39aff5d208e67ce2dd3da385bb4587b45f299032a4

C:\Users\Admin\Downloads\PushExpand.mht.(MJ-TJ9302618457)([email protected]).zxc

MD5 c0bb50d0dbe3d40c2ec2ca87aed2d5ed
SHA1 62d704433684960958ee26aec465daef4ba1f645
SHA256 bbf22ac0f9cf3c2c66acb2f1e070f4e0c4337736e48e8d893fb36c4e2cbe798a
SHA512 d3b98870aa2f6bfd47113620bcba4df547eff25e2ea596f7cbbd2db6f055d04ee9e7109f679edc1cdf89e68b200b071352a6d1e89cee61e2fe37dce23df06723

C:\Users\Admin\Downloads\GetResolve.pot.(MJ-TJ9302618457)([email protected]).zxc

MD5 fbaf739b853f3f37f0560601574f4119
SHA1 7e4c96e42b0622026021b84e7104f0da70c0f9c4
SHA256 6689e471a1484f0fa7113cebff643272b01b8fd132a2545ff4ca787acdd20a60
SHA512 adb1cdc0fb3d42a2299dc9e1b8b07974a289c82d0757367bd4e6e694dd928b461e2e5f463a5b3f843d70b37017743ec63d95879c47195f94f9e2a5d8be890998

C:\Users\Admin\Downloads\ClearReceive.rar.(MJ-TJ9302618457)([email protected]).zxc

MD5 9301e0eb091b597a1077dbef553e516a
SHA1 82113e47c14610903f80c2c6b3814a4cf263c02c
SHA256 33630008a86b3f31a63b76342414466505d06d7e1e626f323405b83eba029327
SHA512 e40c3cc2b5669d560d58f5bb309736f2135da89ea2f2fbc3d1326141592c04a7a9750d97b6d1e390a5b0fdb71549bf0949a4eded532b963fd9018d56a01d1f3c

C:\Users\Admin\Downloads\AssertInvoke.reg.(MJ-TJ9302618457)([email protected]).zxc

MD5 36efa797d6abeb56fff566206794ee8d
SHA1 010c81f743758b3e966883127165da689fff63c9
SHA256 db0be8c281f3c6ca0804394b1dcab6420f971797c7c3b9eae56ce04298f8e1ad
SHA512 650677876d88bc79c3712128d2411badf9c43a8a774b76260e3fad5fc81d0cc50a7c4744435a1c4b1d2465a0c82d29ddeb73b8e53532be5c98a9764ed48c1cb1

C:\Users\Admin\Downloads\ApproveExit.xhtml.(MJ-TJ9302618457)([email protected]).zxc

MD5 6cc7adbef90928ded58ac33575d79adb
SHA1 5bd4feeb0e0d3c3647928e6691aaeb21bfd5efe8
SHA256 9a56467c99030c63fedf27698e937be47c82e7df145ac3375efe31527ce00d73
SHA512 780e1058439001255f419da6539aee9aa407804ed35ee2692f8eb8b39e4af47a80fdf8b16097871478bdc416c5cd7b5db2bc32c8c97c8176cb948d216d6abc46

C:\Users\Admin\Documents\UseExport.vsx.(MJ-TJ9302618457)([email protected]).zxc

MD5 518ce849e6eadbbef836f7c68c35b423
SHA1 4a934a71636864cd01a568d9e6dce83376fea0e1
SHA256 f663bc45209be61de6e6f887e336fbe26e781a2329309190bc650a9263d447cb
SHA512 e72506648ad7de48441ca2e18c67cd948f55d3da31c2195b8d904ecf33432832ac10c3c745279ad733646f0028b200d40881de7d36adc992ea9074868b4d0201

C:\Users\Admin\Documents\SwitchSave.vsx.(MJ-TJ9302618457)([email protected]).zxc

MD5 f2faaf0e82dbcd7527754641f19eab88
SHA1 2110fc81c587680f2767be066e3839f3c5a636c3
SHA256 beda9f31b1a0b20d7d1e26be05120f2d5323643c990ff6d7e7c89781545f191f
SHA512 0c0215c69631aef067da7115528ac8c31254cc5b38b1ab75227e49e0629f33ab33ab9fab18b31603292594138dde3498e4eda2843c4dcc2ecd7cb504b2e98742

C:\Users\Admin\Documents\RedoStart.vsd.(MJ-TJ9302618457)([email protected]).zxc

MD5 ce7b632016729dc1d1244dc6df428453
SHA1 2af132622f2a33323842e7c721cbac85b1b500b2
SHA256 5da55609b07e89030ebb38d13273078cda830cbdff0139988020fafe96139119
SHA512 6d573a3ca09bc37dbc6427aa854598591fd73cbafbd2dc49ed787a83a45843ecceb26adf2c9ef00284a5ae58dda01d7220018d9ee62ac19199182064ea6a4a48

C:\Users\Admin\Documents\ImportLimit.csv.(MJ-TJ9302618457)([email protected]).zxc

MD5 40cc60335d5f7598ff443f05d1a6ba20
SHA1 e1773434b1f0382962bff6ac3d2f1ec1728dd90a
SHA256 757149d8c2d1b279e5a0c8d79aee1edf8e42670e1226806e0fadc7fd26e647de
SHA512 e0095a102893f5796d78a743f48b6dbeb6d0fa5c7a0f1cf873975cd955f66eb00afd3cd2b6badb88926f421f62c3454b84fc1cbe21e707c1d9c9a7ea759e5692

C:\Users\Admin\Desktop\TestConfirm.xlsx.(MJ-TJ9302618457)([email protected]).zxc

MD5 d7855284d889f0647c4de24ab454162a
SHA1 f4ccf68aa84c2bcddf65a5a899a9bde8eba1c451
SHA256 5924d36ba0a29aa29fb4ba72a741655b9d1436673aac8a685c23d28d7a99dff7
SHA512 680a3ef55b9edf0549f2439b2e8c31941b91e09855d840b86f7119f679aa1c735f8f06aae14fa04b37d04b6722421a73c54c9ee4183e4c70436d802f15d57f9b

C:\Users\Admin\Desktop\StepEnable.wma.(MJ-TJ9302618457)([email protected]).zxc

MD5 e27a28e72a0515972db6a031a1e34e0c
SHA1 c2787b575ce798940001d3b45bba76aec3b668cd
SHA256 b4a56231be6c587f8d0ac97603a590ddfe1f870bbff1123e1b8e5fdbb52ea433
SHA512 365f93045d9cb0301dd1ecdcceaf19e5e3a685937d5573ac0337ebab845c7b0a19cd5fb5a2f956c59e16893d5185774557f9eb7a4abc26f81329e71ecb3ab57a

C:\Users\Admin\Desktop\RedoRead.m4a.(MJ-TJ9302618457)([email protected]).zxc

MD5 853283471e55e5e25196202da70506b7
SHA1 e8ea4a21dea9a775a3343aba0cab1a8718f0830a
SHA256 9338cefe82951f6135d028d7e4fb44cb46646e410a923ed939223f36613636a7
SHA512 b6278e26a1c7fbea706480f91e6519232cbbe8d85dc6ca2edd569bebbd4fe92a5453f54ece826ee8cfce0e81f93b3efb75c3e9c5b92fa8f152522cac76b052ce

C:\Users\Admin\Desktop\PingSplit.vbs.(MJ-TJ9302618457)([email protected]).zxc

MD5 1230a8fba3ed04fa34ff61a46cb27865
SHA1 b86d50ac759f56fc9fd92d9b7e0e36725b7f46cf
SHA256 da61ea4f306a2e006430fa071a1890948cdab478803447085e7202407ec7c973
SHA512 8ed81cbd4abd0a4723861fb8a0794dc30068e3246408055866590b916a3bfa18e5980f52c39038dc4e1f5994e05f88d05411208bbf0479b837dace6b546565a9

C:\Users\Admin\Desktop\ConvertFromRename.ppsx.(MJ-TJ9302618457)([email protected]).zxc

MD5 253930cbbc75cb29b482fea5b21432b2
SHA1 ded57c65208a5403a7ff758c921867b978399724
SHA256 3bdeab3dc88c0dfd4a9b39f7eb21f346e55f8ca4f4eb4e4f418a5ac04b289ef0
SHA512 b4ec6f8b552120e506986d80a6cf535b005b143a7d5e088da96af6af9e8ed32326e68bea54b72aab6f80aae68f50d744161db0776813c6fa4e6608edc54eff81

C:\Users\Admin\Desktop\ConfirmInstall.raw.(MJ-TJ9302618457)([email protected]).zxc

MD5 8b5880771f8476dc855cbb14ea0c1342
SHA1 d4a663496da54ad92fff03b63437459c6dbf3d21
SHA256 8504e10030c5693809d718a6442415bab50a1125012c47d091acbe21ef76731e
SHA512 02699cabfe51f5527623df85fd25c7fe7174785621a85c519c0436452910140b3de877c51c810d92921ae77d0d7532cac13ae8e68b2f2b39fbc1977b70e407c7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\n3lsnn48.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite.(MJ-TJ9302618457)([email protected]).zxc

MD5 c7b12f4dba2173b4bcbfbd7ff81b58e2
SHA1 a97bd2515e59d8edc985e9b17ec01fdd68c12b17
SHA256 3e51f4630bd794b7facd57a1a1948afa78e1644ad9263ef99928374a8b1d0792
SHA512 832fcaeb6dec227edc978ff4b3adb54eda1e39e1cdd69113d078620f88bed3dea74c49a6d308aba5800b7fd3a9ee6a42b92eedde739eb8d28f0740d9e7ae8708

C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN111.XML.(MJ-TJ9302618457)([email protected]).zxc

MD5 657d5ffdeb4c6351bfd31a418b376760
SHA1 5e699c36521e69a9806537d78c2820632bd5823b
SHA256 d74c1125e6d42cb6f0f793b0472d1a9e79a064bdbe266e0a76719e387449b707
SHA512 1717c0a5e36b7452f329a59a2601ff179f5509b3b9226e7333c90f7aab3632f27237b47999424d172ae50a27c0cb7e8a9316afbc0fd73c804d8b374c50f76b39

C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN082.XML.(MJ-TJ9302618457)([email protected]).zxc

MD5 e305315b6404c0929a82c287a74d9ade
SHA1 0c704f2070e96de84f686720190c61f7f2cc5ce2
SHA256 fcd93a89e70e40b42cac39cb52dedbd622f82a5b4b124074d6b461c213d2db66
SHA512 512598354cafccf2a76db04d8568680d8bc0346d009cb7a4e70c89c1ac6cd1b0ba98714f5cc10c56b86b321e6a1ac7eab4011a66dafe6335fab34eba55285647

C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN081.XML

MD5 fc00a2cd1f29ab9de2fe0ae70807af11
SHA1 f5006bedb679138fc8bbe481733724efb4e9a332
SHA256 da9803d638d7277d1f2ed3a4762a2de44cd7ad614912a1181396397e9ef498e0
SHA512 7365b95bd6f923cabfe1fca85cf4d51a3074c90320a3d89402ccbeec4fddcbca2260928b156ae462b3e86f457e79c4bbd9f7c80fd15e3f9493e5b0499f726eee

C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSHY7EN.LEX.(MJ-TJ9302618457)([email protected]).zxc

MD5 0f6d671fbd964609ad4862d1b4bafe7d
SHA1 087fea1b934326cf1c0b6a0e411ba31663a7c4ac
SHA256 9bf136b48dd406ac501f9976c2f580cd6d75887f2c17b5de371faeefce2a0d16
SHA512 959dfde2084ccac65bc4636bbb0f553571fa01e54b45086999f458b66d4464b1041cb4e0d09c4ffa642892032e1e63559ab93fe9718daedd9f0a4eaeb9d3b14b

C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL111.XML.(MJ-TJ9302618457)([email protected]).zxc

MD5 b5ac5d242748f1d918797ebf947d056b
SHA1 d0fad8656b77c76ca7299a5bd1c38a3a66f68d88
SHA256 15e086449824dba9598f74e07538bfcb9e971561b60ff3a7f5e181a757e38b10
SHA512 2ced1ce2bbf163b76805f457f6876ce07e81a4bd1c49dd997335b1b149f1a05dea282795b530c6da40693b0d343383b4f1cf2af3c51d70dc3f56a98e1eaa3d91

C:\Program Files\VideoLAN\VLC\plugins\access\libnfs_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 cc98f0c6447e4d3fc4487a46479b6efc
SHA1 c5d022ba47ac24f9309dcf47eb03cd552a3e08f9
SHA256 04a4d3bff2f8aefe2d8fb0e2b63bf6dfc4389fe51992630267c0dbcc0299936b
SHA512 a94746dea95c94d37b5ddf50a4a39fdf746db5add6b7cc0ce62c597865c5c26fe2c203aea3873ff5b57562440f1d30df357f208172d13e2cad5211977a6bfccd

C:\Program Files\VideoLAN\VLC\plugins\access\liblive555_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 df71a7b98689070527e51e18d8678eb0
SHA1 08d8e408c4c7c44c534a11713209ab783ab706d3
SHA256 63d6fcedd8ea8bf6c89c6eed931d0609f3ee2391dad6ba4596be007a596d0ebe
SHA512 0f278e6c5cfe2ed11f8d9dfffc8bfce2a8b925ae6a4358ced13d1e6099ed051904a64134306337ebae452aefad597499bae9ac7737d43840b3fd28b343fc3d7a

C:\Program Files\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 ad62530fe82f369b476c80d60bd7bf82
SHA1 11ed428e89384e908578604c2e1a7e22fcdf25fc
SHA256 ebf7bb9aa7da767149b72d1fa062bb7be72fe38a165a2a8b46f969e9379ee31a
SHA512 9c71c5f46d8f98362f24969d7a2cb8ef594aecec93dc812927221116c23882ae2ce406e5eef7071f275f33ea12d2d4d745886976bd43853bceefd16e728dbb40

C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL012.XML

MD5 4d88a36ed0400566ff0c73782fd786a8
SHA1 71f8e9d013119ba6f358e3b619bc4c16c0b46945
SHA256 4c38800689b0bf40732444a681ab8e05162680a0b19480202ef1c5a694af3387
SHA512 dc128df19541a31d8c7a644277ab5ac6a33037888be58d94a637a774440ad443de9b1c0102a0b9029297c4cf7a71d526effcfb6e77f771cdce70c38354ddb612

C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL002.XML

MD5 10078b72790fc14c0ab4ae672f9af748
SHA1 c4c29564cfa15c928e595952e5fa92c03106c2c5
SHA256 3761e3ec5d169d0a51369cda27e0827cc66e2a8695d5461eda1557e21cd25e46
SHA512 b62056f9ba125a6c8671e2fda72e346a547288723a4d2f3214af456e163b102f5787134956de6d2afc6eb8bb218ececa2f9a2b2fe04540e934f8f16c75ef3fd9

C:\Program Files\VideoLAN\VLC\plugins\access\libhttps_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 b762b11b6a2883197641c4d5653289af
SHA1 d7c98fb4a6284f47c43d639ec042cb4cff1c1652
SHA256 575440f009d225d6a82cd209cbf9ebbe2b5ab11a8da590a6b16cce96c8b0b246
SHA512 d0e646af5dbe3488d44146147f898c578a28c60f65d23bb9719d8b7cc487f2c042646571437c86f8e8292a2d193f0751994487eb584b685c4e0688a9c48db475

C:\Program Files\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 dc0f1e0d1b389b7c51074df2e57a3609
SHA1 2afca1ff7f9950340a8bc3f38d441fd50c71cb91
SHA256 8ff48f1f61a09af3b3d35641e4dba8a3d20b142dca121e2f17fccb2bd4631e8e
SHA512 f042550fe5d3b1d90689d75e0645b3a472dbf177a0bc15d4d86ec5315dc9c34c35783b3e8403e79a1b8cb3a04e7f4c97eed205744ff903ea937c75ff9da93f1b

C:\Program Files\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 ebe7b5e6c1214d51552db5eb3d860bf0
SHA1 e694f1445517178c37654e6c95399e0969e26be0
SHA256 f95a9c42748b7376df7c78d7556d48f1fc25e744cab100cdc49cb8e4dcfae9e1
SHA512 3a15c6a5b9f130c420314dbec88418cd4dfa12d308768618f35976d3b2e634a16265fa39838f5d600a90745f9a1b3ec11eab4b878408b9e950ea9fee108c7e83

C:\Program Files (x86)\Microsoft Office\Office14\Library\SOLVER\SOLVER.XLAM.(MJ-TJ9302618457)([email protected]).zxc

MD5 bf2eee6fd71d278245986882ebe04d29
SHA1 67ce60bef79e51b113895cfbb9f41ed38d69eff5
SHA256 958681df4b7b179bcba7513a6564c4159247efb0609a6840143fd56063a5d948
SHA512 664fdd079549d4e0baaea2d53e33bad9d89243cd1ac08db08d6ce85976c872c4a5b6dc325f09abe4e5e8f987908fe6701125891dd320b30adafec26c5595fab7

C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\BOMB.WAV.(MJ-TJ9302618457)([email protected]).zxc

MD5 e9c2a6871eb3163865f36964b758ea37
SHA1 aec4e523c953e07a1ee25e472a8cd37217252659
SHA256 59a454fd41e24f2ea08cb7a16e874d8211fec0a16e7b167267b7d419c66250c2
SHA512 73c4c97aace23b65b4da059021a96e37dab7cce74b245a8faa235e62892f532ff13c9eeb2be4553a08f0df49ec4f6129e34cb4ec29010910750a1dbcd8a3748c

C:\Program Files (x86)\Microsoft Office\Office14\Library\SOLVER\SOLVER32.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 07a2a66f8a572edac02867dd9a3f2c79
SHA1 4680d7b5126bf5baf3618a8efbe2d730e7f7e18f
SHA256 a769ae96561c0f2b5da48266abb876087c3a0d2f36edcf882c9a5d5646722eb9
SHA512 909266633e1787bc1318035b70f730f27cdb250c5c0ff71acf7a5e7e45b5ead67f224d14716712493ee0db0daf926eb2452161d0333e967d912ad69b0cf61be6

C:\Program Files (x86)\Microsoft Office\Office14\Library\EUROTOOL.XLAM.(MJ-TJ9302618457)([email protected]).zxc

MD5 cd3fbed40af1043d44f152cd428a909e
SHA1 a5756d03616f0342d052a726523ac9afd302d8ab
SHA256 df9597da7697412cb782e524bbc27db378362fb1c1fdd461b09133b439cf1668
SHA512 c0606cf32abd26eef83b5784fb117a5aa2d18500ecda487b5948d408bafeee811b6fcd3940ec9cb24622f3b65b383e7f6b756c60c90387864232a0585f59e75f

C:\Program Files (x86)\Microsoft Office\Office14\Library\Analysis\ANALYS32.XLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 b8866afa9de6e9bb91b1f9b459ad189d
SHA1 d072bf6921808ee046008295d95697481032c1ea
SHA256 79bf5b978a572a74ee147fad03ef6f35a88fa1392421de5f42888f2a2e9ce69b
SHA512 81055f7863975f5e0870b3f47fceb9359ecbfb1ffabbd429f5384624f7fe173336cafbe6b37e42b56a710c52a8c4a5740e1021aff2cd439f530e375732e9637c

C:\Program Files\VideoLAN\VLC\locale\bn_IN\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 4885fce7c72264e56a5216fd504cad1e
SHA1 ca9203befd795a2a3316d8f1943138f791fcb02e
SHA256 4d8b08397cb0262d1042161066280aae88a7849790591c10f8ea7d0354e5a6c9
SHA512 a571bcd13b8ba3a5e112312ca90be6b4b10e2178e66b3c1e3cc2adf6fbcb29880b9b29d946ec7affc0eb07525fb0d676e13252ffc7e65b42cb5cec514b6916b3

C:\Program Files\VideoLAN\VLC\locale\bn\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 c251582f9048c3d6984e8db532062ae1
SHA1 6410693354adf758f724fa18806ae5d9255c6650
SHA256 ed829bcb7ab4e1e5ac9ae346fd12eb50e703b4d5531ec2b7b4897a6332fcdabe
SHA512 b368e71a260e8aaf38fa37854bbcf06042d1b3bd711f2263b50ee52c555ac4a8b344b840172a46fb3a47aea584243b04b60dca412312fde922494bbbfd5f0986

C:\Program Files\VideoLAN\VLC\locale\be\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 e2ac817b53056a6e5576a3c21358ef04
SHA1 8bc71768b56be3446dce28c1ab6909e289c9925f
SHA256 167bfbde8fcd10f99c1503ea59e0f7a8dd0bfb8ad851a42afde2cd8fb97a93dc
SHA512 97d3be4896e9d205795dc2199f8c7486ba9ba4e75133ebd866b370095d53f7418c065328e4eeb3b59c8554bbcaad26a609dbdffef373cb222f433c591de168c0

C:\Program Files\VideoLAN\VLC\locale\ast\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 f6917b0b8abaa80dcf3784f7c9ea6db3
SHA1 f89ca944ba50ea7c239a862cb233f15b69fe1890
SHA256 76a3810b379fcd182ef14ab61f8842f290b6c8214c7b05972e14f7796ef06297
SHA512 4b7b62f5f2e8a0643c45936fd554c48b4c3984fbb257dbb5430a2db31d554676d9899fe52d8e966ac695c4cad1df4a70924da9754214280bd81cb0366b04c014

C:\Program Files\VideoLAN\VLC\locale\ar\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 0f48388bb92f2aed30643f146e8a4e30
SHA1 5122e13e83bdcffcedcfe28a4251d28303f19d96
SHA256 cd2d29004cba835a2eafe867084fd9db559d6d96c657c12860c4013e2089bf14
SHA512 067c1c8032242b71bd75ae177317e31f98d9709cf6ae439b329c1e93ada4c8d5250f8e5eae551768bc054471f8799c212d828f3047c06edd127cd61b05923e35

C:\Program Files (x86)\Microsoft Office\Office14\Document Parts\1033\14\Built-In Building Blocks.dotx

MD5 4230b7ea3908b947baa204cff01ba150
SHA1 cbac55c77f58bd3464c3fb9c059af1f8a05be9ca
SHA256 38f3e0853d463b2f35db775d9af81608bc01f19fdbf505516636eafe44cdb019
SHA512 5f24c97b0c5cb2178f1046e455782fa6ed0f3fae48348ce9369e097dd7b150503ad333d240e0f5ec8e64985709be0523a1fe84684231bdb1a51099a074c5b62b

C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\GB.XSL.(MJ-TJ9302618457)([email protected]).zxc

MD5 9d1fd5c8048935cced4951f10a2a450c
SHA1 6f02c684f587f136951a1ec2729858686e5afab5
SHA256 352f74799e8d71375afbcecbe537dc49bf43893b14b4b3d2586b8754a26822b5
SHA512 6260d6d77eff3753cca364aa2bb74ce04150027e66d5ce0e51bb4bf77b4fa3d11de877ae0afca194d0cffc708faff03af438197bcceb39a4a8fb301746ffa3dd

C:\Program Files\VideoLAN\VLC\uninstall.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 82d6c25b03f702d363f39a92bd16f087
SHA1 6be72350799fd4927d66bb63e97737dc9107853d
SHA256 e84dfa27c45f53b19bd662fcf89fe13f90e2eb4e2af1810701c4a7cdee8c24a5
SHA512 c9c34bdee53c67b3b485e34ac3065f8f96d7f97765ba18af4813743471ecb0a4864db204dc9a09401e50e1a919d12f0b0c6c3e323f73bdd14772311fbd73c28e

C:\Program Files\VideoLAN\VLC\NEWS.txt.(MJ-TJ9302618457)([email protected]).zxc

MD5 5ffcd4ddcbd01c24e357208a8d97f61a
SHA1 9e2e4146da400f918ea9844fb9bbeb60c7271e81
SHA256 2db3e2fdbc853f83083027375ab28ce42914c92fbc131f377064a6f84fca7b65
SHA512 e0914c5f18b3878f313a78f750c32697bd7c060940c052bc8baffb371bf36f44aac84fa03ce1bf883b475f3be6559fad01cdf723c945df3c5a136dff3293f7e3

C:\Program Files\VideoLAN\VLC\libvlc.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 71db65da7a4cc4e39db5b4a4982b8cc3
SHA1 15076ab1904e0ab3154fe6581b2d052eb1475406
SHA256 8409520a7900bfd047f876957ab925f06e20f89bd9b673ebce80ea0a00076a5a
SHA512 6b6955808d5477d1751ed4f63f91a0a24bfd489f3e5cd9a599934ecef24fd3d383fb9fac8ded2221d95bcaa9c9e403b55835d03afadbf731f25a9b5565f28b89

C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\UmOutlookAddin.dll

MD5 ee318ee58b6c6568019b07424914770d
SHA1 5236fa27288d1fbb0416a986af16f1ef952ac113
SHA256 17fd005d894ce5421faa6dd61035de0559c803e4dac8c7cc707aed1bc229328b
SHA512 31edd29e03ccd14514d1da75b82368e087c5a3118cb5c6b8039d1df5f2af207a4239ee9ea0ed61ba18477d17231acf752d860d0cdea90200e9b3507451e7fc8e

C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\MSVCR71.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 a8ab4584ad4a1cff7aa7e813c2eed256
SHA1 7ae5be6618e9fc4bcafdb58a22d1aa4497ea098a
SHA256 6f50711109f336734721f213d39319d08222e96b211d8c42477184feceb89158
SHA512 d778318efb77e3d6bc2885cf0397661c3eac65027f81a4012b538cf36cc744af16dbaf6db2be0580446b23ebcf57be98c99c39de016086f949463107eac1a7d5

C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\BCSAddin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 312b01f30f0fb8b37f07056327ca35a5
SHA1 844839c701a90e5761646b574a0a0b9eb425511e
SHA256 3e479172efd278f5523c24cbc0b309f7f2ccd922237dbbb41b573a7e711c6ba9
SHA512 6678013efa1a942396f073e43d68c94d6e4ef6d95d39f5a09c0a9c54558a15c3d213952f6458d5a344399b24f7ab3b707c9e31d5b21b83cbda5ffafc65558537

C:\Program Files\Mozilla Firefox\uninstall\helper.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 e6b429d9d41cab70c165a3994fe6e787
SHA1 11c1fe32761cad6e6b8feca2a039ffae95457902
SHA256 0f049f439ea33d1c8ad698b9897acdacf907b22741152e3d97ab1d125009cfe2
SHA512 81a520e3af9d0f4ea863267602fb37f23b9ca577d8a65f9c8c54fee363fcb5df7979f0bdbb159d7abf673c008873798289404a3ef32b63dd6fd7daa899d333e9

C:\Program Files\Mozilla Firefox\fonts\TwemojiMozilla.ttf.(MJ-TJ9302618457)([email protected]).zxc

MD5 a6d97e901f2fb1003e7a7141b7916298
SHA1 9f97964b719ed194b859dfad925905861c8da0e2
SHA256 34bea47755828f3d9c9c7b444d39adb68577fc83417166ecb3f1f49e9e4ed77b
SHA512 4f4a96ed96f384813920bd769bcf7e67d2b97a5a79fd8f7c35c9dc8f78e5ffbff8fa6d8941ebd1ecebddd09453f0b903858c51f91f93a53fcfad50fee6d04a06

C:\Program Files\Mozilla Firefox\browser\features\[email protected].(MJ-TJ9302618457)([email protected]).zxc

MD5 ddf03f75b917fb380281de64fb6592b1
SHA1 bd753fd50d4cfb8c9ae54af2dc6f4478905f90f1
SHA256 0107081167cf303e13fd9c538dfe92bf19522a0211a3bdc760c5332fe2844f69
SHA512 652f7925dcf0a7647714956b96ba7f939b4322fb1fa02e074a555c290543862a2cd143f19a5070c390315e089c6d4b33388b40ef984db5059121469e6ca17400

C:\Program Files\Mozilla Firefox\softokn3.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 fd4552fa325b84d7cff4757190e2fb2e
SHA1 827b990f18fed6bb1deaafbc78002a0b3ef38fb0
SHA256 e9503544c86599c870090e11fe4cc0be86e244a2bff5faa9c4fb6b1639e5b8c5
SHA512 401c97c5eac06dee6c23dacd8a8df7f36a56842370ee4afbccfe2e96765fa67015de9440e0ef5fac638413350cc9788d957aa405730a627de6230fd8422f4f8a

C:\Program Files\Mozilla Firefox\plugin-container.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 571f5a854f3438dcc02e643be375a436
SHA1 089f18f5f05e8e82e1844cc0a431e4c8cd6613bc
SHA256 c8688705aff5f228cd3b2a8ee49efb4616c8fef994aa9fd177fe52efffff81f5
SHA512 555fbfc01227d4fdb13a55006f8b88fa9eeccd8ba44910cd71a6b498b1536d79bd847629075ca539e553e3702fc4fe5e334bfc8da7b331ce61eef1e2896da27c

C:\Program Files\Mozilla Firefox\mozglue.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 873f3ac537a20336b857100e39bb8c76
SHA1 1cdb3ad7b635e0d9a68a66bd4459761d1b5eef15
SHA256 5421ec7bf805473c28f30cb421e7dddca1d749a036a1aa2954e8b349040ca783
SHA512 3d5d0a67a059f9bdef53b02c450b92754c6cf9d6ff36973f3a778db38de80d303273dc999089fef61f027765f50027e5cd0ce4d4d1db2f62f4f088c8647b1a4e

C:\Program Files\Mozilla Firefox\maintenanceservice.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 b1823cf6b34f3cb4b899d2b92fe54f51
SHA1 3d2d30c654545c0b3adaae6a476f2d42cbea938c
SHA256 57a6ad53e3a121394310a563acb2dc1c7d8f4ef4594efda28f819453cdf3c4f8
SHA512 78c04f3ceeaf7c6fdc18f1429cf8f98984aef942de64dc79cd3b60c8b5a20df2d681a5b3556ea97e8fff73f145991e4214c516e24f3a0c377d112a607f9a4978

C:\Program Files\Mozilla Firefox\ipcclientcerts.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 3e2297f6d6313fdf3445d91f7edd8e58
SHA1 b446afc098a89a669033463172766263de43094f
SHA256 93df71ae78d16d9f2fed2d90ad46c709e2cf757a47bbf878ef19ed4995e24f59
SHA512 e78a7f5401318de25880a50c293d748534d2954802e6531f7f0df4731beaa4a3874dc17bb35920cfb019483d280c78c5c3ac974824c1e52fd370ff0117d0ecc6

C:\Program Files (x86)\Microsoft Office\Office14\1033\XMLSDK5.CHM.(MJ-TJ9302618457)([email protected]).zxc

MD5 caf16c5019b63d0824fd0a3215df2a1d
SHA1 4a350c47bf56a8cd468d9e31be05c0db277fc3b8
SHA256 86bd886f2a17773222ad52dbb46596dc1ceca54a504cbeb6cca46cac2d0d736f
SHA512 c4a6af973665640fb318a52a7a38e1f10e866d3dba7af9bfb2051cb5703dd897eb833b0531c1982efacd87df15d5c8f8163cc7fe1a4c7bbb250f76fea3ed39f6

C:\Program Files (x86)\Microsoft Office\Office14\1033\WINWORD.HXS.(MJ-TJ9302618457)([email protected]).zxc

MD5 0318818a9baab5b3caebf32eaf15c6fd
SHA1 4cbf6ef40c2838fe23af8120c5236ac917b3915c
SHA256 1a65db4b4360942bce0513f716aa1ca4c43b40fe9d386afe6b58700820d3b38f
SHA512 b2b9c41519488082e1ae83e09ae24930c13f4ef045ed82042a4225331dbb5845a676c7896b729eb031d6d2a87a2c96d46f16b88f6d864271f04717912a6bc968

C:\Program Files\Microsoft Office\Office14\1033\MAPISHELLR.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 5ce03f0b582fbe005ff5c4ea29592e46
SHA1 e2a46374d628f5f776c669b311488d3965834e89
SHA256 556fc1cf52e878b7590e0c1a51dac4c60bc24229dba6da56444026b30b5d80be
SHA512 697d40ee2f15dfc59514cef905770e74bf1ebd83b7aca99bba292719d4ee119b10bb1c19e645be5edda4635a976dc60f956a3654f3d276b3ba80a2b1b0796a5f

C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 88587483963872ce17af91a3635a923b
SHA1 ff395cd099e33e42aa7d4bf97b3a44a53ba8908f
SHA256 6573f185651b91b434774a4981a7ef378d2c5a182e9812d4cd6db7d3f4a1bc80
SHA512 f123286f7559ba7e4e7b1bd3183360c75aac8420c29d824fdc54b654d5d51436fa353df0496b0339f0fc005db5f2c4f52bfd17b2b46159cb2afcee6db65ec4a8

C:\Program Files\Microsoft Office\Office14\OLKFSTUB.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 92f9e3fbd4c2bd25278250d6bcd81df3
SHA1 43bd8510d82e814127f174159cdf30ddec60c109
SHA256 e69af03a06848514ab848ae3d7fda6c8b4b413dc040a5de25e3f8cca185ef6c0
SHA512 30e9bd0f3b001e0a718f3ad2d8a906cf1206c5fb31d3e57c261c617f10dbd6513d2d282c7747078eff84921d4e9b01c666b0e05a80764c5aab23d5bf1429c936

C:\Program Files\Microsoft Office\Office14\NAMEEXT.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 12cfa5634e4335796a99e5920f1a2c75
SHA1 8991f9857afe5ca51dae32990a6b2cfc41fae643
SHA256 a1d8f2f57b1e1112b41c8bc16ae58b61a028c4df4ba3a59bc2f03a7096eb3a90
SHA512 ae37687dcd8909a92bf91b4c238aba6d720e0f439710a9aeed62d38bd4eb15f63bf9f8846bb6531a0d22d7c13b6a8e94cb6dd2eb73d16fda636cb37181dc7d37

C:\Program Files (x86)\Microsoft Office\Office14\1033\PSRCHLEX.DAT.(MJ-TJ9302618457)([email protected]).zxc

MD5 679f050fb0142b71075ca77b8c65be13
SHA1 d22e4bf424c121fa7e946570132603ee44602859
SHA256 56c9f4e7e89b27f99874f885f96dc79ca3bcde13c052bc976e6baef344048ef2
SHA512 68dedb03ecdab22d97675dbaccea0df75c3d33a5d7d38427763dd2055987e860eb7e021d21ad7dd4372ba35d82d20b47d96e72017b5431c7fdafba6f16e6e060

C:\Program Files\Microsoft Office\Office14\MAPISHELL.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 027d2d5c3314ed23726d50640325a1bd
SHA1 c234cd0e3f351a78b065900634f335dda7cf5758
SHA256 b206ccce16daf512843aec4392bf98cef3a46744dd9af9d04bcc05e6ebb3682b
SHA512 3ac15e7fedb402df0c35db159c8673f43f21e723fe218a9da3b30a8b94ac9a2bddd955710493395fc5bcbc18c357157cbd41fa1fbdf3496e7300af3b462353b1

C:\Program Files\Microsoft Office\Office14\INLAUNCH.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 010d48d28c92fc9ccb5d75aaab7408cd
SHA1 1a1461578a091e9f5a093fefbe934d98ca71a05e
SHA256 2a7fb500a4abb0e00988b715f22f2199e76063414d538e14e0630adbbf31d88e
SHA512 0e594aaa73fe4ae578074f4fc0d603ba4c9fa2a724c7a38a9b276380271474caebcd3cf157b288dfa5f255753116e668982bf6435bfa2b00baea046ab11568bf

C:\Program Files\Microsoft Office\Office14\IEAWSDC.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 3372ff915227c9a70d0cb103b3c94628
SHA1 feccd6597e7197e72ca06cfd610a3e33bbd83960
SHA256 4bb0e4245b8d95e924f56c0969dbeb64346227aad2564c00805f4fd88bda8654
SHA512 978bb49378ab72e63297513a139a13ad0e85c2893588789f9b66718e15963ef07b1d5a91674cf1466b517798ffb0a82e38f30fd29779a4106630705a972f0190

C:\Program Files (x86)\Microsoft Office\Office14\1033\PPINTL.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 f3c041771a65ac6fd8424b46658d8c10
SHA1 44e8692f4f4bbdb53e5394e4c92e844010587d11
SHA256 446ec7fdaef1eebc7f409b30aa9daaccc0924a61bfc3bd656020a4ee9a02f013
SHA512 fd0a03d14986a388072edc725c4c1e8f8bb34b4d69016c77c6a3a9da7a52b45bc4c9f13a9b19a6a217303bef7735e12067d31a6068e88d2e1b2392fe63c8f847

C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLOOK.HOL.(MJ-TJ9302618457)([email protected]).zxc

MD5 d9568ef60c9f887c17602a371ad98e35
SHA1 f0b4f4085a802448e3330958ea07ef4d0adb2b47
SHA256 587894f30a2d65789d4e788e2a38b76671f18e775e94548e638f674f2f1ea8c0
SHA512 9df3f0dc23337b8700d10ff3cd4b7fcf9620edb585839fe5155ddd3c09cc454cfb5a2eacb13f3d29900333f1d5b02af0183404d0075900cebad208552c8a09ee

C:\Program Files (x86)\Microsoft Office\Office14\1033\ONINTL.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 ed012872fb327c04bf16207fca7ce48e
SHA1 c081b3e9ff174f3b967323dfd2f23bda95f84cb3
SHA256 0d98948d6a6ba8c6ebffb5bd236b940f39b841889da9daa20cb7cc7c90331b97
SHA512 cff6595419453d8ba08723fdad73c57875dc86977cf7524f88357c16dce6b3be999769d96b3db008d98aae14edcb2c6f8c0b7b35a0cfc6c574db4793dfacb3af

C:\Program Files (x86)\Microsoft Office\Office14\1033\ONGuide.onepkg.(MJ-TJ9302618457)([email protected]).zxc

MD5 6760a1bdb9c161fb37b13a4fed9ae0b6
SHA1 174a8c789e987ea0b80b0113277112ba74f5988f
SHA256 74fcd565b726d0ba75f2536696a362272c026d49f434790f4bd822121a0d1f80
SHA512 8eaf7af65143e2032e29d59ac9b1243876f3d311eb39a53c3c709f6511d9368a2af57f5f1a58144c60efd164c69d6843147c1e49549f527cc09f6873d15bbbe8

C:\Program Files (x86)\Microsoft Office\Office14\1033\ONENOTE.HXS.(MJ-TJ9302618457)([email protected]).zxc

MD5 e7e83d2224cb629ae3078393dce880ad
SHA1 964aa95bf2ab966dfc041676cdc4af8f10a22c62
SHA256 ea90f9c53c30dc3ca95f8d2fe3bbff502927b98773008c6931260a299b2454d8
SHA512 6b684d801a26996bfde311c647d2b6c4ea69cdeaa32ce24e38fff0ef693db8160a872287e176d3ed2c58381503bee7d68059e8d461c789a4b0338b088e7a18ff

C:\Program Files (x86)\Microsoft Office\Office14\1033\OMSINTL.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 c3a0bafe343aa0ce0d0cb20d8ba06551
SHA1 266e254fb616c66642e4d7751fa43ad91d37ef3e
SHA256 7eadb0a192554dfef1737287feb9a589f458a2f637808eda654ab4ddca478934
SHA512 8344c6021141250329d3c87da2eb75c4bf326840e0476a845efde257739faca791143b308591a5954e9680848338fe628877702e3f6d85677e89c327a8f2a0cb

C:\Program Files (x86)\Microsoft Office\Office14\1033\WINWORD.DEV.HXS.(MJ-TJ9302618457)([email protected]).zxc

MD5 0c01807015232b97cfc3fdc578be3f10
SHA1 e9c041516c3395757150b80614a275de603d3b44
SHA256 4211ee93876cec86796c02524539bc078dd7484f5b9eba5d8f325aa9a4ba2e74
SHA512 c89d2084c1695024828fc038fbe7bcebc004e0d26ce67c219539db3612a7ae97f4069de1eec2abbb16a88e2076433f0ee2b5782bfc5d01e8f178911760abe9d2

C:\Program Files (x86)\Microsoft Office\Office14\1033\PUB6INTL.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 5e7ea939c809271e62301ede490647ae
SHA1 6681494efccd1ecf4f028b232d793bdfe6d987dc
SHA256 f6ee83afda4542b089b01f8bca7be225a275fba0f88b6bc17fc9d0f129a0c2c7
SHA512 97480342d48f00fea23ead823518c44a2086d6fefee01508bb91145c561bb3fdf601c4ef11b6826b71988d20b19e7d376a31c9474490a198340a7623e9c02058

C:\Program Files (x86)\Microsoft Office\Office14\1033\PSRCHSRN.DAT.(MJ-TJ9302618457)([email protected]).zxc

MD5 c0e642d293949d31bd1683a9a3e3dd11
SHA1 edabcd40220fe959b5c9093b0a4950c8c51bf6fc
SHA256 e5da7be8548c0f1492e719d252c74455c80f90c9ed8cbcf69e8e656bdada1f8a
SHA512 4388e2a17aafb7a45799f87f4be71b7ee36603b4cdf7a996b02633e4c7474f01884ef596279724203935673e99961133274f3e59494a3f3d6cdb0fbb346b652a

C:\Program Files (x86)\Microsoft Office\Office14\1033\POWERPNT.HXS.(MJ-TJ9302618457)([email protected]).zxc

MD5 95d94091b0d2ef80442005eca99152ae
SHA1 001635acede90d42201f6d35ddde5ae3cf08f906
SHA256 498d6c6be075ba5642549ae47b526f438f507dfb69bb2c63141014e9f4ed4371
SHA512 8d544feea451fc0de1c06e303ea7e21cdac29303a37f6a262282e94a7785e829b9bfd4953a93ca13dd5ab9b0b5b5ec84f2b211a1ebbb727528af92441fcedb90

C:\Program Files (x86)\Microsoft Office\Office14\1033\POWERPNT.DEV.HXS.(MJ-TJ9302618457)([email protected]).zxc

MD5 11cfe6230a438535f9560b4c521503d4
SHA1 88d1af23c83f011b760c13df8a6e76b34fdcd04e
SHA256 324ee4672a2693124129e088c89089c4c66c30b375b81c2540c096b26416370a
SHA512 5d791fdf3ca432de71a8f5fd7f7d26916c1943c58cb9d0167d3ab0fb0d8b70eab565b3377683990b35e89e04de1212a03b2fe887be686aa6d87212cba0064173

C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLOOK.DEV.HXS.(MJ-TJ9302618457)([email protected]).zxc

MD5 f1baf1aeb362f8b0712968d3f6d6ee3a
SHA1 3c536eb7aa92c27c7ad3f333fa81fcfd056da2ba
SHA256 d4f74052a33680ccc6fde3af417b85d55aa5307c60bd3e8299c3db5651ad4bcc
SHA512 f23704e83070aa55dddffa8e9403b74b2abc18035d8a817bfb20ce612d9b7428de45c96671a8a351b319d134926c3a0b83151fcb96582e15987fad18fb3fac2b

C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLLIBR.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 551f7fe3c96cce679189b393536f80ad
SHA1 f876a74e2e58ff482597064ab0d1c348e2c5fbec
SHA256 fd25d3e5336163028b72ac1957dfe9c64cc83ec2a9c536c1aded5b3122250f3b
SHA512 a9d06e693a907fad0badceff1cf27680cf5951e3278bb3fdda5ecd287f17b9023ef9093582b4bce4010d90324e834a85391d8356cc57bc9d9eb7004160f5c10f

C:\Program Files (x86)\Microsoft Office\Office14\1033\OIS.HXS.(MJ-TJ9302618457)([email protected]).zxc

MD5 29228a0ba3fe93303069e7c7fca9f8e0
SHA1 a75bcfc858cbe4cc6030f77e41ae45906c338fe7
SHA256 6e1329377f42d506b9b00bb24be09b3825f7d7e150eeedb36f1236a2386125d3
SHA512 6cd750d27e9aea3d517d5c196ccb8d248ee4d4f028cdc8825defcbe5c1757ad4e37580dc0fa249ca91c78d7a9ee8f59e6efc09c3556df8c0eb9a01bbb2e028b8

C:\Program Files (x86)\Microsoft Office\Office14\1033\OFFOWCI.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 fb8dfb3daa9eec9d37857d085fcb9ca2
SHA1 4fb21180883bf320e7aebcf512228a87420f0768
SHA256 235fc52510fcf8bd748780845aed788b15b9b44a4d8a0067a5220371ffe3eef6
SHA512 8f592709128c57d379f374dd85ad274e700575efa84954c6dfb72c453f56ad952590bdce02c2c3e76385d36c83aa41319c256ba551cf96102a96d210e988c0f1

C:\Program Files (x86)\Microsoft Office\Office14\1033\MSPUB.HXS.(MJ-TJ9302618457)([email protected]).zxc

MD5 0cb70352bd5f2f0a8ad0bd589e23e175
SHA1 d8ceaf0bab364dacf95eefe132ace0ecba41ce29
SHA256 f321e544f95c13a93a1f94e6f22dfff65c6e52de43c1f9fa26a8d8d5b44951e8
SHA512 baf357aa4778eb9e96e3d7145668b2efe77c4aeb57ad63dc208c46bad902e1fc535d6ae5ebfa03baedba9b91e42e8222e5b56fc3f38a526409869fee080452a5

C:\Program Files (x86)\Microsoft Office\Office14\1033\MSPUB.DEV.HXS.(MJ-TJ9302618457)([email protected]).zxc

MD5 063b1d7768662082bb3f1dd06aa29131
SHA1 ab2b950b6ec13eb9e9a27474c0d1f81c630dc014
SHA256 cdc9842205d4d786dae48fad26aa0b4c1b233747658ea92cb403a6cccf985476
SHA512 b09ed7b61ec1e843e13a657dd6fd96deb13105cbb3aefae29a9ea87d9c90ececd07ed10a5fd91079b22550bb2ede7ba6d23afc00119e9e85a378da67e48477d5

C:\Program Files (x86)\Microsoft Office\Office14\1033\MSAIN.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 992a5d02496c6f7e6bfc5bd9b1ac5b52
SHA1 e1f314dab4540e30b83a7725189608785c243b77
SHA256 491215bad37ce6ddb8bdc10e2cd7efa283b3d330c9ed520572d575839fb826dc
SHA512 4fa26ccefe7ffc352b4901653632981632d21ad8a5c449163748189436fec6dc36d8cd650a3f5415be5c474e6081d66691f6ca6f30d11e71b86a5cad422a5a55

C:\Program Files (x86)\Microsoft Office\Office14\1033\MSACCESS.HXS

MD5 6ecb1b90ec73af1937ed39a2d6fe8e2f
SHA1 efc83074c1e10fde686d5bd73b785af86111efad
SHA256 cb727b7248e3888b48e4d2ecaf8063b69942c20c42a27ec73c5633ff17c1d226
SHA512 a46375d393073934bb7c279fa7b162788ad6daf250bd6b05df9f498821f7b4d92d6186b02f2b7929d9add5f52c894c503f9df8b2a6f143d89ba20a7a88597945

C:\Program Files (x86)\Microsoft Office\Office14\1033\MSACCESS.DEV.HXS.(MJ-TJ9302618457)([email protected]).zxc

MD5 93c32572b0cfdcc8feb0fcfcec55eaa6
SHA1 e0fe11e50c9cbba7c92774d8ad6f5df0ccac9086
SHA256 934611f4077bff66efdacafc60f7782e8df7075ef7b8f163a03b15ecfc067038
SHA512 7dd84a3b299a72c542b095c2e4e73dc78ac35a0a106ce30612053d5d78f820f51a9b908939014c3a4576b756318310d3cba36551f9ab6e4c376f9c11a5b3484f

C:\Program Files (x86)\Microsoft Office\Office14\1033\WWINTL.REST.IDX_DLL

MD5 7fdb50547f3780eb487a7efbe258dc76
SHA1 062b22daa81f899a820819246a78380635062ff0
SHA256 0bbbadf7424f2fa8ee83d182a56fe83572728a194d92d1d2b0047ad0561ef47b
SHA512 148a6849fb06c173bf606b39d2917b5d2d4640b82505608b3b6b4cd470d3c88dfc32c2ce4df0ccdf6004364ad5b2bcd9d61ed2f8cf04f3fdfe933ae7ee40b555

C:\Program Files (x86)\Microsoft Office\Office14\1033\WWINTL.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 14e15131c11c2af50cf9846b90792cb6
SHA1 9b0768a595d6d8103d421db8a585570c35fd3f77
SHA256 1e6f2cbc15524a4056b28b2e47417f936a52b368371809c2c90fa8134a3d5384
SHA512 2a2ea6c990b8935ef54a678dd5c6207df2d22326bc96ebb3998f5c6d299e11dee47baa417d3a1da2d4556e42471730ef70db64152bb86eb58e82332797e3b21e

C:\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaire.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 e81b1aeae27a8b85a83aa27cf653a6f2
SHA1 b9ae2dc410802c31f6cae6718605e317250cc567
SHA256 7ad098c29aa4c7cd832e2bb1921878d2abe0163454980b49255212763716f5d8
SHA512 85d9d1b2c17fb2779e54f9798c041d61fbcac30dfb36b54c989342f0f137aa255105680d185fb61ab7e3abaf982b0ea9c713d6296d9e332665d54f1e1877ec41

C:\Program Files (x86)\Microsoft Office\Office14\1033\VBAOWS10.CHM.(MJ-TJ9302618457)([email protected]).zxc

MD5 7be47d2d5299cd95eb2d9484c12153b2
SHA1 ae5f4e16adce10a60f6a2c62d6468f95346b3bf0
SHA256 1ae3a8bbafd1a171f157b4616de473801a7dd66119f773eae0b4f89118dfcf25
SHA512 8a0f85295d3d1ffc766db83aaf811f9da86e8a8523302cfeabab1e16c019328e52ab63c142c8862d783a95a1e2006764924a00a78d84624d14d962d3b889ea68

C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBWZINT.REST.IDX_DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 02b8cd1555bb8edcb7197652385bf205
SHA1 088b709621c5c2c4eab45d614af6b93ca25b6984
SHA256 8d01eade569829aa757ebf3ac4db271e9c7c56b36110f8835d20b8289b8748d5
SHA512 ec25241265235e9104285df497bdefec44f3e7b8106248f26ce9cd2492f079530d3da5240e6ee32696ebbfeb380f30ca42dcf58e2a68cee34ed26b3c909c1b22

C:\Program Files (x86)\Microsoft Office\Office14\1033\MAPIR.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 38b272f5f8f3879c7ff7d0278d670449
SHA1 c6b2e71cb3b838ec7759201f07db7dbeb07c293b
SHA256 21c13304c533a99e175f63000ee68361ff4d3853717a58100e2d04649e21774f
SHA512 dfe67a24f079917439d3c8882685be32929e944f8ca72bbb0cafbfd7e4e72df8e76bd15b36f4881981230f289215284df0a5722e45f0dbba1b6e056dd27e77ac

C:\Program Files (x86)\Microsoft Office\Office14\1033\IPEDINTL.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 3ec0ab3ea33a5d238dc713879acc9002
SHA1 f092335dc9c5c2416c569e9bfd90605abb0b63e5
SHA256 69abc954396b405f5f8475c6acc33d9bf4cbc583955002e3bb28bb1e229ada19
SHA512 6308a44458b5c20725d6b90efb54ad0d664a3e3fa7d8b0d3ac073ad2f5c91f82c7762019c121921e3ba00857a8fa8f631beff8ef166f99d4a1ace270de252b12

C:\Program Files (x86)\Microsoft Office\Office14\1033\IPDSINTL.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 b691545cf4692e73c217ee0db412a9f5
SHA1 c0b3369dc16d087bb2dd01d11ad7f6eb3c2d3825
SHA256 17106d3661f13ec080c9c077292377f0f3faceea49fa8f0d85579e1c20183de2
SHA512 315a1b64ac48bd52fd4ae9654af04d83c579a76b5ec2a9d8e7a77aa7230354049d3be8ffd84fc9eecd5c78c5759c7ef022754a0d5517cd7f9fb89a6aaa3d95d5

C:\Program Files (x86)\Microsoft Office\Office14\1033\STSUCRES.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 4adf98e1207ffdc9a10b44970fb42b26
SHA1 09a94b957ddf2356219a658f1db564d0c999fd29
SHA256 3971a93c38db90316f6ba23f59b57f6c43841667afae139dc34240fcff11e363
SHA512 e7192ab8e501037d554f3234f3cf468d2c008aa0e4ef107bf886e5cee5b28e562d1265d219ae9ac63f9989606b3547c1abb5b97a77de076bf7298ffa78640792

C:\Program Files (x86)\Microsoft Office\Office14\1033\VVIEWRES.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 7229a4ce497ece344e495a5d3818774c
SHA1 2b547cce3c08d76ea10537f3a40c84d65e93c8aa
SHA256 946da7ebc23cc6fc0b8892b63bf59e9bd80af4884e4049efc03e033933cd5052
SHA512 6881fa7f72645bbca7991187c725b78895dce656e2a1119eca6058efd1feb6399e353933670b407190e5d124ca7e14ec7ce9bea3e0eaeed53a26c4d9ab20be31

C:\Program Files (x86)\Microsoft Office\Office14\1033\Issue Tracking.gta.(MJ-TJ9302618457)([email protected]).zxc

MD5 fe742a2569cf805913fe9dfe50e131e6
SHA1 4c83a93ab42804f062cfa5f76b3d101cd305e394
SHA256 85497d2c649a7e270ba6141e76ba6b06ff1076157625c1998912390a7d00b31a
SHA512 783ecdb189ec4cc30cd160383e3ecf89cd4d7336279dd6dbaa69ca3c89f5470ec549bdc12b3defcd428c28567e96e26e0ee93cfdd2a3060109f62bef06882a24

C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBWZINT.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 5091e8362f407a3aef42136cb33e777b
SHA1 90d71fc3593b554cc1bfe86953c76fa70d544b46
SHA256 8996a6d1ea6c7b0d833f0dd00330ed8c160b721f02e148846189018de7349994
SHA512 08ab1d3cdb898f0d14d1e77afb9cda1ca1932d4a6339a12a552d5dc5df33ed9a14f1b7672d2431d1e5c11cb50a28ce81654ad9cf0520f552383c4c7b74f2d680

C:\Program Files (x86)\Microsoft Office\Office14\1033\PUB6INTL.REST.IDX_DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 02507b8a903392ad53f05a0dfc227114
SHA1 c06b2d0da5e8ce17602b50d2e02ac5586fd934e5
SHA256 c1c7869debbaa2957c49e53a5db1a2a8f1a15ec1b3f164cf1026e3da302bb0e6
SHA512 c038c7fcdf0a0173d128cf01ec7e8b80455ffe0f8c9bf65377961c020d9b264f95888224fcd4e797823ec6e47ad8edbe23a0f5ae00f6af0289b4663c02b9a07a

C:\Program Files (x86)\Microsoft Office\Office14\1033\INFOPATH.HXS.(MJ-TJ9302618457)([email protected]).zxc

MD5 780795bc7ff32c93cb6c33e3bade2eff
SHA1 c905998158b65c17513b0d356508d07e7560d6cd
SHA256 743636438ec3fac340bdf20e347a889cb512b126e774da9f78268ab593570ff3
SHA512 528ba6827617984edebc173d3f0f9fbc3bd1ce7d7954bb55c413d4c31e582a74520cdfe00664d7877ade6220342044a404c9e48c7631226d77fa612e0fff9530

C:\Program Files (x86)\Microsoft Office\Office14\1033\INFINTL.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 a461fd2f9017bf55ea9ff9e6fcf4d023
SHA1 ebb93e5c2c8d6e2543bd139749b935c5fe128853
SHA256 38791a8b87bec1600d51726bfbb43729c3b78b10ffe8ac01e5057b50e17d3d86
SHA512 2945566f60c9bd728fb061a93b74c9363aee676ff6362d2968dffc1038a9f04c66f94a84bc7811a188009d15487a794408004c7bb5b290c18afe43074f69807f

C:\Program Files (x86)\Microsoft Office\Office14\1033\GROOVE.HXS

MD5 fa0cac8d73e2cc6be5ae7640454c69e7
SHA1 600441737024d228ce57f5766db6a6228b42a04b
SHA256 6f55df620ecae508241fcebba61c5ea56b07f07d6bea4fc54f71a1a088f433b6
SHA512 adc3f25966293c9d2828c711a4a59f092d4a819868432679b113628b4ab90d23e317335777f1f761522c34313fedabbd5adb27e0f5380d2c3561d95c9d86cbbe

C:\Program Files (x86)\Microsoft Office\Office14\1033\GRAPH.HXS.(MJ-TJ9302618457)([email protected]).zxc

MD5 b513f90f67ed2b6e8fda15221eb89481
SHA1 ad2d0b3f28b1729e7b0ad51d1c5c1a923ca53f83
SHA256 34b77e09ac50b97e0a7901e5b30f04dca3a7850773d465c1947641fe90b66016
SHA512 7b0b2c8d7150be6dd548114259de6c8125bf46f0d71afa5173d339813c4606fb243569b84d664443927363309da3d8df0229b2e3cb805d5f3dee7fd111d4a710

C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLLIBR.REST.IDX_DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 ff06181e7dd6b048e1c5dea9f75466fc
SHA1 5991b43fd293c58b36e55be6306a6c5bd7188429
SHA256 ff087761cb8fdbcc8e19b24273abc635954662e3a020c4718b71cd38ae14d415
SHA512 f88c677524edbe9bd6c177a28ec8aa5300b30aeaa3907ffb723758df6e2dd0af7aa08c0f1c9ced3501ad77e6d9be60d22e93fa624b7b2aaad5be9551a55548e3

C:\Program Files\Microsoft Games\Solitaire\Solitaire.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 44e2e5f6a7d4b8c15ec09109d649cefb
SHA1 ed45fc8f99cf5874dfa4be7cf28bc5d4a199b85b
SHA256 c3e31581a68b70493d5917ba9125aea545848a27f5a5e3ad8fc55069a62bdda4
SHA512 d495e924a9d20d7be6ac0f7a05cf9358eb4a77d736a7cf88c6d93f9650c3b54e2d466268bdaa5e1f16aff734f50132a75aa4a3ced00a4d481df2d1d0a91008ce

C:\Program Files\Microsoft Games\Purble Place\fr-FR\PurblePlace.exe.mui.(MJ-TJ9302618457)([email protected]).zxc

MD5 9bc5e837ceb7cb32a898bdd95cdceb96
SHA1 94ec04e4dbc9acf94fdab06a26b42b8a9d9f67ad
SHA256 3c0ccf258cddc3d4c255ea6ab10dae0bbd9dbce0cbd108b0a09a4cee0bc27e97
SHA512 435ac534d09bcb4bb2c2fcdda4e36fdef34e7d886e5c07cc03d0ae8ce0f1c3531e4387b41a7b400463cd82bcba87e8a22b4a0dc47ad5c3fc8ee8ed9b6b5b4ef6

C:\Program Files\Microsoft Games\Purble Place\es-ES\PurblePlace.exe.mui.(MJ-TJ9302618457)([email protected]).zxc

MD5 370d6288d279230478acc50c10fc49f1
SHA1 a138e2111cfc4d473d04a76f99a43b848977e6c5
SHA256 49e53cd223d86504b66d04bf74730b022458fd8b98102ed2441ac342ac26c606
SHA512 6c46bf6aade14df26a0d4b640105e88c7fa81aa91a03136890f4023128a0d45c3aac70be886e2ccf9fd9bfb180d961e82dc7a68aae01002aa15b3e7ee528ec91

C:\Program Files\Microsoft Games\Purble Place\en-US\PurblePlace.exe.mui.(MJ-TJ9302618457)([email protected]).zxc

MD5 e0cbb8070aa9cac64853ca1b0710281a
SHA1 fa404c2eb88129e3696073a7a4d0b722fcedde01
SHA256 17b5f5bb1945393877bf9978034b48e98507289536ee1819073732bf041a8ff8
SHA512 b145997a7e30c840253745f7e88fddac913cdf4e3e01ef3d7d90435b43e3d74fd88d6aa297f269c50acf48cc99e4e4926b59357148b4d1108fae244d3dfbbfe9

C:\Program Files (x86)\Microsoft Office\Office14\1033\ACCESS12.ACC.(MJ-TJ9302618457)([email protected]).zxc

MD5 83d3d3b0c1869d5ee2c00e4ac9f10fc9
SHA1 f5046dec16a96f1f98b310b15a0765e96678bb3a
SHA256 40b9464c13da1ba4c82936b3291cc1eb586753fcd6df6382936a8d395e292fb8
SHA512 cbf12ec212f1641c320451355a768039fc289dee682ce1bc298dc14ed4d9f1fb1201bc67e239f8fc47f6a3fb42b759378fc0267ddebb05df7f59a59e25222b76

C:\Program Files (x86)\Microsoft Office\Office14\XOCR3.PSP.(MJ-TJ9302618457)([email protected]).zxc

MD5 0e83e154edd0c07e71dfb29d49d9f758
SHA1 05d3fe0e0d7145b382ea7becbd7c45e035adb6c4
SHA256 652ec0df8997fa2bb39362c344273864246d38ba22c15b97bc15060dfa2a3a1d
SHA512 f77dde4f840e017ecaae95acb3494770ab42d36f69697044afcd888a0a2dd786a02dde489c474bd842ae2fa4ad086f81676dda9316cc70451c58dc0983f84d40

C:\Program Files (x86)\Microsoft Office\Office14\XLICONS.EXE

MD5 c7779fa54092c032929de6d0fda64211
SHA1 12b316efdc7ea5736b3e998eaa78c125a446e207
SHA256 5641edd682be3986779cff241c66a5173450937f07582e5b8944bdee7425d6fe
SHA512 aa027c86f3567f7d935f0d6b395fc8ace49535e29db2d9910eab6430a087b4cc4441328dc8fb1ef85461b554dc5daf5da87c7b25e5318f6cc157fddf6037a796

C:\Program Files (x86)\Microsoft Office\Office14\XIMAGE3B.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 222527f389fff4e829be200969be9292
SHA1 e1f38f31e8e29f319001d20a4aba3d449eb80c84
SHA256 4f5d7aa259d984d577cf0b585cb9cccbd9da95c629285faf381f3716764e8a41
SHA512 4e4e10e26fd9998af0e14ff45def1d6808744b342e54a1a6e37238da4c6f0dd41522d029882acb5759b8ce7816de4382a11ab5b0a34cf3e5880e5b14ba8b3fe9

C:\Program Files (x86)\Microsoft Office\Office14\WORDICON.EXE.(MJ-TJ9302618457)([email protected]).zxc

MD5 996b95f4954bc4a7c5192e4e15be0146
SHA1 ab0182c5c72c7687a3893e4a2505427c830081fc
SHA256 e9d68d6efbb027cf928659b5d91297dc85965c429c6af5c39379240cec76875f
SHA512 27aa98b49769b82d4184fad8b34c7dcbe292ab8caee1f39a3a4ba7841a01311e77e4986d3b44945026f134c8c026793d3d6b7ddf0808e274a69d1ad01b958a68

C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE.(MJ-TJ9302618457)([email protected]).zxc

MD5 7904cd7bbf2c62188fe3faa1dbe124f9
SHA1 f0fa01a543722d3c3312913d87a1d30092981705
SHA256 e83b64f7cf8556bed5d40c2eb03135907eb0546b36fbb04fc6a4c68c284af48b
SHA512 55e4153ee68cbcf989b145a1fb52606e1f90227e9c3ab817a1e4ed2bc7cf6b29ba2a4fe76b70e12ada04e935ae87fba3d32ebb09c24ac86287cbcf3ba240ec7e

C:\Program Files (x86)\Microsoft Office\Office14\VVIEWER.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 8b6fa3aab40acb6a60490db5a4e6580e
SHA1 a67fae81d3adc13d1e952557d0c850d85191e5a6
SHA256 033b3034da4213af12927d4bed4c8e3028d6a73e834e1ffec7edbb7dd03d9cd0
SHA512 774d33466afb4bb1b0b3aeb8745304bff9c9059b6e64319a61a502cfc55b0992d9418bf412844246c75466ea47a965f82121794bf3a7473ee9e90179e932af7d

C:\Program Files (x86)\Microsoft Office\Office14\VPREVIEW.EXE.(MJ-TJ9302618457)([email protected]).zxc

MD5 b7116553cfb52e11b9cf47b04f9748cf
SHA1 f8887ce064e411c69866e3f12a20e687027e9c0f
SHA256 dea1a8f49bd8b79dc7b7ec1e48c9c8ec24bce3afa9f8a13a24c7bdead50c5227
SHA512 084472f0054d7aa3ef0ebe0b32765b5a5ff2956c63066727f8ae1b562facd31324c29c40a57b9cf5f6c1f0770fad1c462d672dc9c3c020890a27e960cf76841a

C:\Program Files (x86)\Microsoft Office\Office14\VISSHE.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 1c30883287e3c539c9144a6657b3cd79
SHA1 cb8e2968e299d6e51d78039610a9f76a73d17d5d
SHA256 dd5f336822a35a575127f18be72c94b818a32f6119ee70068081b908573105d5
SHA512 5608bce648d1b17d6eb79f5a8e6c8f694eea6813a44e406d30bf613947c4166c13adb2b523f968f07f493c84577ff465a74127042f0d887aea37d4b2dcd176b8

C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 4ea8ee2876d09223f78bd0cc17fc4c22
SHA1 1b6099f380d992a473bd4c780bb613d1a5f0cb61
SHA256 002b68c692d69fa15af84af3d4124dc969020cd57e458d57261de338ed1c1973
SHA512 8e5ba66b36a18b0fac02966636ec5663ccfd3200842b6d0742515433348fa00c5a4196bfe341be771ffa3dcca21dcbff4a601b1f24e22b14bbeb9891a1d05101

C:\Program Files (x86)\Microsoft Office\Office14\SOA.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 9a89f8831238f083ccb90aade95b75d2
SHA1 608e078e4b8faebf3029b2882d6e9840ef70cf5f
SHA256 ec99b1dadd1f937bb67bed78d7c729e822eb81b0063025336abfff90d83bf748
SHA512 cb47dab472fcbb8b3e359e52c18f2d9c158da02bab145e8aabe34ecf14804ab6bb80e1522302513a2c3c93d5bb38ad58d6f6bace9b6869bc68b37045bd172908

C:\Program Files (x86)\Microsoft Office\Office14\SELFCERT.EXE.(MJ-TJ9302618457)([email protected]).zxc

MD5 31f8197db189617ae8872cbeb7bc7dfd
SHA1 e42e2b6b221d9351438aa46c8993d4ae6d6abd83
SHA256 718b4aa3b126918d4eba7b45c64199f5c6306870e749f9e5b1e251e6fbf68e18
SHA512 b1d0fbcd41beb61e15fa54c77135c0bb98018fb3a3df6f63a04bc89d72ee0f7457deca3cdaa6decaa04be777a8eab44e7dd0ad898fd434ecf5e04144a8b24d70

C:\Program Files (x86)\Microsoft Office\Office14\1033\IPOLKINTL.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 b17ee2b72f97063ce9244aaeb5869863
SHA1 1ad57165214a249f4e83900e6844a50fde0e5d4e
SHA256 97005fe2a86b35ab7d14aa1a6752505c7031f678366675c206f6efde2eedf759
SHA512 456c08ef60047d9d1e7d94fc1bf0dd47ac1e13eabd10b011c8ce667f0c00eae8bb188b78777613072788d1f8b915ed073f8a451672735d89346056e2710f0a1b

C:\Program Files (x86)\Microsoft Office\Office14\SOCIALCONNECTOR.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 6748b4b4faf553e114c115a9e5d65c1b
SHA1 0195b385d1625c3496bc0f58f4fefec5fc0639ea
SHA256 e1bb3088306204fca68db108b092b9f9c46da866bf3ed02d06d3680da17349b1
SHA512 1369008a4bed85909cb7f24dd604f8d70cb148579c0f16d4ac6f507f30f582b0bc6b65fa3d5cf01b3f4f16f2a1b4bc66d357db0d0efea180eccccb30612a1054

C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 053d516639295b5eaf443301dc8146b8
SHA1 c0ffd6e66ff051934d99c6119503864dd4a16a13
SHA256 24a027fbe163cda754aceff773985e17728a07444e9bb0b2043982363cd17da0
SHA512 f40f78dec61718c522d8da12564e558d0f00e4688b18e814eb4de1c42116179d4bc9c9476765809d85cd07c8014a967a57b56d7abe787aa2d1ae818f37d84bf2

C:\Program Files (x86)\Microsoft Office\Office14\PUBCONV.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 f56ae57408f40e485b0637cf80dd6a72
SHA1 496ad7d1b544eba34c165f452adc499502b664ef
SHA256 a41fa5f8b092f6df7f5a2762cfe3ac55434a3eeb8a154ce1c955a6cfd9bc166f
SHA512 e2565fb8257821a4c343320faa79230a730df8914ce7b8060b30547ddb98d4f17d512f603b33bcdb56c21dcb102d7486386deeffce8ecd0d6a0d46a56d67a5b0

C:\Program Files (x86)\Microsoft Office\Office14\PTXT9.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 23f873d6537094f855a0edb1a8c1a706
SHA1 7bb1fe99e88ff1ef9718a3569c4ba5ef7724c21e
SHA256 1e2232b764cbd39bb7aeb382e963a1de91adf2be71220973435ac4bfb2a2f990
SHA512 0585b05a06fe78e25b53d1a924f68c333034a7281ecfdc65067e47ffd8d28dba62a3953a266936db0081814ee5acff2804b65238ee225c105b7da7150c452484

C:\Program Files (x86)\Microsoft Office\Office14\PPTICO.EXE.(MJ-TJ9302618457)([email protected]).zxc

MD5 a88c78f692a2fb6793c1a3b22fc88072
SHA1 3f721ef94bb8dbeaab3708bd4d51e237d2b042ff
SHA256 4ef9b62c3eb7efdfb8f3ccbfe2cb9f4e86dfab1b2498df1cbd9041611f491499
SHA512 33a26a67922c31b364e5ab192f98471e9b01c36e29700f8afc9c8d88e021a22eb35b8ccb472fd3ecc26a67ee2ed9dfe3ae14da740887718ad3e1a643be46a13b

C:\Program Files (x86)\Microsoft Office\Office14\1033\EXCEL.HXS.(MJ-TJ9302618457)([email protected]).zxc

MD5 4b0bf6b613bbf41f2d7dd6e987cfc037
SHA1 cc0d22a0939008211b2fad3ca5ee6853a81bd2b8
SHA256 236bf1ec26ed21b3bb3d8cc7978fa4a25887e2ab8bf319125d08bb75adf17911
SHA512 6c0024bde80319e41d95050095670f8542e05b0e61115b219ee445a82ea9fd960c9ffaa45f639f463be620a42ef090ddaa479ed6f01d549bad19989f83a5e1f0

C:\Program Files\Microsoft Games\Multiplayer\Spades\Shvl.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 2dd55ecf5d6eaf1fecf4d0b241f4b4e0
SHA1 a1d4dc755f0ba947ed8f9b986060d6a7b4b5120a
SHA256 98a2f4cab2edbf937aedffb3a1a931a5ca1677b2fef6fdf39cb48bc63f484706
SHA512 76e12f030aa7c7428b3e9ce5edc7ff5de2e51732e2802e29af524726bfb592e0b7def68a96b3a577ad1befc40616a19332c4ab70a180b19d24cbd8a7752ac407

C:\Program Files (x86)\Microsoft Office\Office14\1033\EXCEL.DEV.HXS.(MJ-TJ9302618457)([email protected]).zxc

MD5 c23834f4dd52cd39dfc6d0475e5a2de9
SHA1 5dd46047ed15b9c6d8df7caf7aeb651da30fe1df
SHA256 049bfc68d9134fe09d2f4c55d360156a309e0ce7b9462266bede1baf48076b3d
SHA512 3befe7e9a0d2479dc6a6f3fb8b75dee47a9c0492043e1b15becf60c69de4c8952c81d0838092685b16adaa12f7715d10d512b43454f6525b4a3e34b952b10556

C:\Program Files (x86)\Microsoft Office\Office14\1033\ACWIZRC.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 e247acd0dfdb4f3574e66c08df0ad0b4
SHA1 1eb7fc71635a9522ccba35efd6237b6fb3ba9fb5
SHA256 ebe0c526fbe9e17c937253a85718cf23692d0809e094e4113ad95ae0f077ab57
SHA512 487d5b51e9361654bc9085f4c2e9c0ae78d1eeb7c089697342279a895bb16c2ed91d96750df65b2fcc69dc5d02e3d4307fac7c68af97981d5122c8f3edd43e9b

C:\Program Files (x86)\Microsoft Office\Office14\XPAGE3C.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 47f653a9739ac3e4b2ee97741f989604
SHA1 2e54d942dcc032bd0be6776886a9105b2afedd7e
SHA256 fedd01bb64d4e35f457c0e068a80dbc6d8c6a2ba27c1f9ccc535bc66be381d46
SHA512 78aa3ac8290c8bd52833fea67d52eecb5747ff78be71107443b3e99d78e443d481eb12232a27f0022f1078f664d7a903eea00f8af2b7933c026724e166a82c9f

C:\Program Files (x86)\Microsoft Office\Office14\POWERPNT.EXE

MD5 5c2ce713be6b30c035d88060f1e274b2
SHA1 03122c8eeefabbf113feb1eedaa76dccb9513c1a
SHA256 a8bdbed0c593deb2e977d9ef8ff8c88a99b4767c5cfd5a066c8eb4f9b6cd172a
SHA512 755f0ac29e561ce42b7a5a4c3a65db5cdd77c3cdbf84c8142146fe42bb3aafcfa75c62fa03fcb6bfa22ae3e5134e433d11e5989ff33ae1aed1ca09ee900c4765

C:\Program Files (x86)\Microsoft Office\Office14\OUTLPH.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 00aa5567f03817196ef0238e83e8443a
SHA1 d6f38e40f1937c00ae8fb93ac186902f67a6563c
SHA256 19573c0bda079c21de590134f3346d914512972dfee567ae280cceb037eec7a8
SHA512 81259d6fc2bb4d2c761c4be27ee437a0966a2ece2c39f60cc87451bfab0d478701ff0e1693553e1fe0d18509e32ed434e8cc9648ebd0f7ca275061e8c9880962

C:\Program Files (x86)\Microsoft Office\Office14\1033\GRINTL32.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 49c82b16ec6d8740b1b66882840951d8
SHA1 a97e8148c224c0644f8aeec24842125101299fa5
SHA256 0e3af8f4833364de21fc182d8668c2fe639206e4ae970189267da97373813283
SHA512 aaabaabe7ed154dbea5f2a78e385a8784bbb77e4bbe60cfe23b08408a742382ebaedc4a8f3805cb53c7154a69cfe460ed92f107944258a218551d25aba63cc18

C:\Program Files (x86)\Microsoft Office\Office14\WWLIB.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 3a3d17db1491ed4ae36b0e086af87085
SHA1 e40e221899f5ea475dd40a2210b8335d84b317f3
SHA256 f48cde345ea3a15f3d7d0cc086890f2c653495ed6ccc74ec881bb4ad194b6512
SHA512 bfc8e1813e2419becd13ec566778cda45f8097728a5a2b41f06e264760446db1aeec23c12723c4b9793574306202ce4eb641a76289942202a6c15e9464006b5c

C:\Program Files (x86)\Microsoft Office\Office14\Wordcnv.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 3ce46a30039d3550db0ff022dc9b898b
SHA1 ae8a31194724dedceb91255b22825ba94fd22464
SHA256 5c01183cc4bcc125b2972c4cbff785b60f649559b5bc8f06ca27aefbfe37e3af
SHA512 3f7e61ebb2c651649260fa6ebd4e5a1c720d9075592825a372b9d1c16ce71b172a458f2107ba48acbc11a0ab827a31e6ef6e3eb5bd128e8b23b66e25047d6a64

C:\Program Files (x86)\Microsoft Office\Office14\ONPPTAddin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 4cb75fe86eb5539878d79a48a0885c8e
SHA1 4ecd94e531513fcfe315fea918b2334b8057bdf4
SHA256 5dd408d3dd0bcc7f7d7f16a05dc789d0c1539eca46c3bdc3900ebaa315c3eaf1
SHA512 8b9c2ffecd792e31d40166538f1447b3e863345257cd7a600b6229f332f3a98a5ab5f0a71328a6df93648b79f109d13e768335e51e0684dbf743cf02a0dc541c

C:\Program Files (x86)\Microsoft Office\Office14\ONFILTER.DLL

MD5 9cae922b3410960d65f2962b2f33db1e
SHA1 2ec90077c5f7a0cb2c46ac89b6875d00c4c8125c
SHA256 fc39bf2ecdd8355c5114ca7122f082893a2b71af1707887ab302160c2b291d6d
SHA512 4c5741032d0cc44ea4425ee8476a64069b121015d683069036ac05345cf8deedb40a25144395d51e5038570f39f1db8378ce1d7d7a3ca4440067cd86f5010b41

C:\Program Files (x86)\Microsoft Office\Office14\OneNoteSyncPC.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 38e6014a183dfd87194a97532601300f
SHA1 6d2b127ab815f853837e68f913548766dc4d5fc2
SHA256 01abdaddd652118c866a984cc4b0a1960a7adbebecc220cb6d8ff2183e1d4da2
SHA512 699035702e235ba4e6dd63181293522ca2cb622952c8ef3329d0b067599ea6d5a9de8fe2c3b735a7cde262c3d1c60559bc08106441e4a1aff723b6c1e7ad5943

C:\Program Files (x86)\Microsoft Office\Office14\ONENOTE.EXE.(MJ-TJ9302618457)([email protected]).zxc

MD5 32749243195c957131ec00e7764098f1
SHA1 8b543e477077c6d2503111d1551187e8d07058a2
SHA256 79cc9bdc45fd4efc379f44b75dd852f5fcaae19bdbf1012ff4da92dafa8cf77a
SHA512 b7ecda50e81f16479b5e89c91ebe318790333b2450b0e4107b69b76b33b0047f61b0177b01b410f1975e79765e6747662d95430bb57f0736668521e3077c9361

C:\Program Files (x86)\Microsoft Office\Office14\ONBttnWD.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 6a1ea4cabffeb3aab103146a3a45625b
SHA1 b493b4fa6a14097f4623507d3e98615df2298e75
SHA256 243a5fc6f0a825900f0d84e1b0d390a9805fb87e30d95785a7768b5654c7ccf5
SHA512 89939a2d82c272c163953fef74b1618e57657115b6e3c2fd78fc64ed77c1724d4e4bcaa43a7663d589c6ecd47e96ac441651f1c33f86f41c584b4953d33f98cb

C:\Program Files (x86)\Microsoft Office\Office14\ONBttnPPT.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 1b7ec2e1deb4e6373fd6c51657fe216c
SHA1 09ba17173fecf350a32051e40f60f910344d0a62
SHA256 9eb1a448217fb7b81bf9bf8d09df95b64cbc5d662cb4593955a8318bc077c5b4
SHA512 66b53ffba4f7a27e397cf52e98feb00d8217dbc342ecb59d55ba97cb6d84df777ccbfad561d84ef8924a27aa9f5641c5ea889f5e9ace0084854d821ff9bcbfb8

C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 c97f61e1cb2bc39480dc6296ecc59116
SHA1 dfd755e35988c614a4bfbc0e925b0b963e262d99
SHA256 f6014061fc36219d32255007c8414b118d08f85002a3a712e78804d6bc7c87a8
SHA512 afaf8ff09a1a473282b3d78b992f1bfd8fc6580d65ae1ef5517f9df93afb2d41f2d1a370e60b51ba6b19665e5ba5ca63661709073ec24191fef05ba5094ea1e4

C:\Program Files (x86)\Microsoft Office\Office14\OLMAPI32.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 5fad27f19426ea2961db158d0051879a
SHA1 6aee73eed157c5880ee4e60eff1e4b45816ec274
SHA256 82e40b4048e830f1af5dde9891f7bb8cec2802f1d4c06f8bd29e90c68dae7948
SHA512 4adce0dcd985231e00ae6006cb2c25c56c21f8733062ad0325dd01899fa8bba160138bcefb5ee632eb194fd296d8b482af8f62f6b015bc68efa130c323782df0

C:\Program Files (x86)\Microsoft Office\Office14\OIMG.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 ff73884eb4ebe70cc760214abce6b6e3
SHA1 df5bde63c7cd644622e95a182e88d691b55e16c3
SHA256 852f1cb1ebbab7078df883868ac27232914336ef75bba196f9365ad4b1a00d76
SHA512 40b6679877832223ae0deca81a17887a1e4778470f58a1643f7390087a855caf9a89a22e7e21e20e3f9be4d59e472a74336de512b49c390807505d8d476057ba

C:\Program Files (x86)\Microsoft Office\Office14\1033\GR8GALRY.GRA.(MJ-TJ9302618457)([email protected]).zxc

MD5 851107b60834c66c3723f5297c5805b0
SHA1 7cb00b9d6f1b64a935f9c64046f1c0381d071b4a
SHA256 9143056a9bbc6a49a888fe07382130390686bc9d65e8033324bbeca94bc5e9ea
SHA512 5d797334532e31e5d3c6fc187b8953161cf21636014af0c44ef0e2b9c871f91bd1ed9324bbd29e10398919bb2a17667dd3ca605a52fbf6ef58df1b164ff0631f

C:\Program Files (x86)\Microsoft Office\Office14\VVIEWDWG.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 4002930785803481b3345cb4f352200d
SHA1 1ecb2415280c9f381adb20629a584776e90243d3
SHA256 9e2569adfd6dfa8757ce4689d8051650e108ac1083dbf5c4a150748747dfab25
SHA512 8da25d44f3962ffe72b4f779122ceb4bc7a16203cd73cf8de5a4d817f74ec5ff1854468e6f3f72c2a308057466afd4bb1c81e8712a0e33c36fef9b2a164f6955

C:\Program Files (x86)\Microsoft Office\Office14\NL7Lexicons0011.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 4e2d9924447246c45cf2de47633828b8
SHA1 5dc6ddf9285e1b9a1b1fe967047981d745f5c1c3
SHA256 9bbdf887ec7e2103e161959ffff44d2f02e40b1bf32f83eafdb38b2b898ad401
SHA512 9b2cc7470b561d85a8634ffe884d96557535309e3e9b1ec43c164f96c862fb71ae0cff7a31a1abcb06b4ba8552edb39bda02e4563c061a28065ed7cf02efabce

C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE.(MJ-TJ9302618457)([email protected]).zxc

MD5 b079a631dc12346c8265ebb915e1823e
SHA1 ceae5de64da13b144d22befeb5ff14d9b81d3400
SHA256 2df724a8a5ea1539612d037834bea799b50fc371fc48be4132b1ee49bd964426
SHA512 fa27ea8449d9a749c2b487a44874b178b1ee62823b3002ea6114177e1eeef579286d981afe561731f7d7e280b0cd868a429c1287e50113e2ebf9038729f25a40

C:\Program Files (x86)\Microsoft Office\Office14\SAEXT.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 af73b1057f3e78f117015a426957305f
SHA1 6fd4b2e59faa19592ffcf76ebdf1ef5abe8337ae
SHA256 c4d8dbb93bdf95417832f6a8097a868bed920f788163c16c0418410e373546b3
SHA512 fb1ada328654b53590378aa8de4c3f256658bc0517679abc1a41f4411a4ae44dba0f855c5e909b0ac6be541001753291be1f0a48e0b95bdfd2607fa90544b3dc

C:\Program Files (x86)\Microsoft Office\Office14\RSWOP.ICM.(MJ-TJ9302618457)([email protected]).zxc

MD5 dd0c3fdc5827b404ef68346e4a8b025d
SHA1 bac190f1ddbdc3f896a64078e068e98f8f9aed8e
SHA256 fb47845f6af18851d6e2aef1c3181062fb9b47225ac6374707889c73b12fdb0f
SHA512 503a777f52f1a346398e2138d6b2b5f53b9bbb02efa54c72cb086d61973229a20792bd4791a1fc7b0af6c68e3ba54c79f5ed572df7849203f9bf0f4ad4bd84b6

C:\Program Files (x86)\Microsoft Office\Office14\PPCORE.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 4d7cd40878728618a28daec1a4f9c6b2
SHA1 732845255410a328e2af7b90e290d56624203ed3
SHA256 d5fc48acf8b25e31dd84f020f216c8747c409c3e5724e8f52629d7b40ffd3118
SHA512 94f26023849f47b7676af2274d19cc9e5717cd8ecd9c7bc32ef628347ff62e19d8f2fe0e8792f9c7feb4d5838cf7237a838b13e3bcc2854e4dbf13b414bbcaef

C:\Program Files\Microsoft Games\Multiplayer\Checkers\Chkr.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 63c1959c8de9ebe9443a83130a149703
SHA1 f74d7d72e24a48063545760a1a2c7b2ba7e780bb
SHA256 4b927fc382207436e57e646164aded91ba41560ebf4791971ffa2c6d1df08eda
SHA512 793dea3f1bdb6c07a645a16b868a8184e1455512ed55afbf6db80e753ba0c6368b8d8b5cfcdf9b279dc12f3eeb6292cfb6c8c7e53230427757a10db0f3c588c1

C:\Program Files (x86)\Microsoft Office\Office14\1033\ACCVDTUI.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 1a00c35d4ee66e87592c74c01fcae477
SHA1 fd795c837a7e02f8721dc435119fbcdbf9965b9e
SHA256 f34636b8303a899eb0bd8a85b305fdbd3f4af9b74560751174743c3c9758c307
SHA512 a5deb30a337a96e1a69dcd5776179a8d97d9fa74a595381064b94f670b219f946992b5925afd92cc29e753fa957ef3f5c3b8029fc403baadb57b0861de44fb3b

C:\Program Files (x86)\Microsoft Office\Office14\MSPST32.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 b4461eb7f8ebde58b4f1309df6cd381d
SHA1 25f039b1cc4ad987698f16028ef9407ad4f9eabd
SHA256 3ca049f1a2a1d11a46714af720d61d13b0ddb3ddfb0957370a11e12c5430241a
SHA512 d00a70c30d6807fd873f78e864340eefd4d4fd4f3e6d74dc82e42b9a9496962b291ddce959767947abf4b0eaca6b726b1d9639f7385607d587f871a05288cd0a

C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE.(MJ-TJ9302618457)([email protected]).zxc

MD5 c47167873a87df7c41252adc257f76e8
SHA1 d34105dd94c8894462cf7a4b7b63479158a2c51c
SHA256 4239e78a0e87ba7f1c40cd7f28eb02fed4eec3ba47b638246c89a2ca7c7dfa60
SHA512 b4e3f09f0d400d42c5b3990c7c0a06608c9e08ef6316b621af3e53fdc3f9712d62827cce0f115365e6d762c5055092a78573543d5963f2d833454fafe462f01c

C:\Program Files (x86)\Microsoft Office\Office14\ONBttnOL.dll

MD5 944f01c32818e474f29e10e084897e9f
SHA1 aaf873619376017af8bc458b25efd8260cc741c5
SHA256 02b04bd17453e53393c583e6c5d94339d929eb42dc188649a4bc75152453e312
SHA512 35e6c85acf01099a60aa887e366f93ec25bb569186917069a5f4b432195471d52f885a6b200d1ca1510f528bd156c71b175316f179e6b2d01951f4f76b50d703

C:\Program Files (x86)\Microsoft Office\Office14\MSOUTL.OLB.(MJ-TJ9302618457)([email protected]).zxc

MD5 2af4ce4699196a26229ad03d1295d5ee
SHA1 99fb9adf0e49d93e03104d8c48ba1e24e736ba21
SHA256 04f644c9eb45adc98108b38373b62aad800ad9c75768350b10f87dad51a47152
SHA512 645bd2eaed629360545ec4dff8d2da357ec0f7174e1cd5b1e2f3c42d3521d3b569bee2c4128c4b5468beff7446e6a1027344a5bc60dbb2dfaa8581120e859cae

C:\Program Files (x86)\Microsoft Office\Office14\THOCR.PSP.(MJ-TJ9302618457)([email protected]).zxc

MD5 b7ad7afca5f2667ad946e499c40f69b1
SHA1 704e5e2b0fe76ffd2ecdfe87322bb7e95b3cfad6
SHA256 c71a20fc2676b286efff4fd54e6acfb1bcdae19fe1094542f3af59a465dd6826
SHA512 bdc33d97d3e1e25a1b7dc6b62fae67fa25c8c121ef626f529a5092e7338990d7e38390af66aeb2ec46ae0fc948ec213d1a9c1e988139f45d745aac640c476dc4

C:\Program Files (x86)\Microsoft Office\Office14\SSGEN.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 00523c5c806628285741dbe8cac43552
SHA1 642b31a01ab6e427f001ad308968d55247315241
SHA256 1914316387a7d7da09ae5d3240110edfc2ed44fb2e7766e3ce4ecc2e359afdad
SHA512 fe6c48c50823429b9bf01c27ebbc02bf8d512a5eb212977342624efa7274510284a961752a38d4483c819ad1d218d4fd477c8d1589a71dce7f847a8cf5de8b26

C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 66e06cd9fbdeda0e35ebbe370fe4cda7
SHA1 8c8e4a2f4afb27ceac4f86059783e843e742a0c0
SHA256 721556d4c77520e75dd758d824e9d338da6c547954eb985781ea82fcd344a418
SHA512 40d73dad8b89c28c467461720dbc1d184100071f279b60cb1c33c451e4d1aac2ffa738624e255a336d40240fc945a197850152ab5badc70dec5a9b64868f7c44

C:\Program Files (x86)\Microsoft Office\Office14\OMSMAIN.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 57d250391ee93c997b04917a279256c1
SHA1 e2ccc33715a12ad1fa5544e8d17314e84a40cca2
SHA256 fbce13ec18cb93b81c95f29994320dc5d276a115cb9e46d37ba406ca4a7cc2eb
SHA512 741446c7b97da62a186b96c1cf24747ff86372398962f341846668cef34bdcdbe848d4b7be1e76ef7ec7ce5bd3ec7166ca564577077dc9fe43508f504a4fe813

C:\Program Files (x86)\Microsoft Office\Office14\OISAPP.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 705d8386560457e02f36402660c88c5d
SHA1 d2ed312a077a57a7b4d3caf4e9cc7690ea44213e
SHA256 a267dc6e347b2819dbcd0431dda07d298e07e038bc7eb53388eac326f44d3e2b
SHA512 d1db1a78553bc41b0f08159d1cf430cb95e385e142d87d3f8a8c7cd276fe9d34a1621009f8159eeb32aedef04f9375aa277c3f9a150deffd244d1b71aaca0371

C:\Program Files (x86)\Microsoft Office\Office14\OFFOWC.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 00696d6249d2d4a2866316e1a0a1639b
SHA1 006836e5d1e808119abc15c65831e17ff42904d3
SHA256 68daa594f20478103a9fdf02b194aee95b08fed31431549f03bc2fcc343acbae
SHA512 03a8c670f0f13ce193dffbabb25da7fe108db6ef89e952d8d419305ef7139cd82a27941792537b92a3675a0b0dc429130e14fae21245ffc8f0d5134eac5b8b52

C:\Program Files (x86)\Microsoft Office\Office14\OARTCONV.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 8a4373c40605ea4a82ae491233d3d23c
SHA1 8e2bb0a1ad05a182a26f17bc56257b96e4448e49
SHA256 e6836e169b79ff1ae0edd056b1e3c07b1fc1bc46f01a88c72b9c00335f409b2f
SHA512 ab1793edeac9d73f5c70fb12c39cebaeef602a4216e9442b83fd58c0ba3330f3a97681146ae59b61a2d9b22b29e535d58fa4aca20d9bce690f0c8c2c6db6b662

C:\Program Files (x86)\Microsoft Office\Office14\OART.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 cc8938ed7878516fba633cf22959e16e
SHA1 a0693f04041e516360e7557d35983744d25cbb7d
SHA256 0c05a400fe7341849d928ba2e6b80e0386988e4c9fb90ae3ad79c1d6b42dbd91
SHA512 7282423b4e3fd377ac3e418b1d4b5b52a6cf7b45fb1d89920914812bd485563b53bbaef17f4a3c3883b0a8d65cb82830476864d2740d993d41fb77cffa271b53

C:\Program Files (x86)\Microsoft Office\Office14\NL7Models0011.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 24fe79a8db72ed9e8bef41f1b85a8feb
SHA1 af778af9299722f92f08372850251d7d3dc9dff2
SHA256 2d43b27d670e5db519e526307f3899116fd1500a5392441267db5227f56ce727
SHA512 6ee6e293712d2ab6e61d0965cb19e470ad2b71ad78dc47ee2d50f9e9e1462ea8bd3c6bb78b8ec22081a62b273e07e6954661978f8dbf687a61961130d9cf8d5e

C:\Program Files (x86)\Microsoft Office\Office14\MSWORD.OLB.(MJ-TJ9302618457)([email protected]).zxc

MD5 97472cdb489f43d1dd99bb04af767cde
SHA1 28ba458659b6cd7791a769c77ef80f30049cd490
SHA256 8d492b2fcb005617ee2e5e14e67747f5cd8ce8e4289724c0c2922efeb3d96b45
SHA512 34dc7565eae69fdd7147360fb0fec5c3705ef01725754746cd429c38ed7b2a997fc4d86e3c6fd02bb144ed8123e3fe6545afa1ed832acbc86a185033733aa380

C:\Program Files (x86)\Microsoft Office\Office14\MSTORDB.EXE.(MJ-TJ9302618457)([email protected]).zxc

MD5 19b5d0ed2917b3601c8baf58a0e8f71a
SHA1 1e2f894317140af39b07288b069ec60d3172ace4
SHA256 00cd596bc73f9d13a6b0860aad685a886ca5dd0b52568cb6b4730a5e6e72ba12
SHA512 09a548ca6b89f8f5ee4f3a6e991250797262f671f92ba73041386b54d4ad54e387b5033adfd843608afaff48ce82f2615a16c95de9fcb3a2c58b2d63bdc719ba

C:\Program Files (x86)\Microsoft Office\Office14\MSQRY32.EXE

MD5 cbda531d2c47b29b9ff808f0f058b098
SHA1 a1f822f12f82113cfaf6f77a89d218ad69d1cf8a
SHA256 89fd1739e829a68385fceb402af0ea9f559557dcc5688ba2db13094b8f87d178
SHA512 103756554a708d992dd7acf609af64cf4fadfceff2271cc1e03def905bf88778f46e1343f8a298428dfcd1fb1562d02b00865ab86410e54b16c58a57da9c9fbb

C:\Program Files (x86)\Microsoft Office\Office14\MSOUC.EXE.(MJ-TJ9302618457)([email protected]).zxc

MD5 568b618e48ada6de2bc1099c1b878bc2
SHA1 fca73d692a9846adc26851bc94dec0633b9f9af7
SHA256 9bfddd821dc09fbc4657d589d5078d269fb37b8089714d27cfa876599fc4fe9c
SHA512 c33ed18d10265b0b8946c9f5a2ce3f8a51dbd48cf0ede982a43168585754cf0f8ab4e76a5b2751fcff4f0f6784916c6748b73163cb40a9723cdfa17cd50b105f

C:\Program Files (x86)\Microsoft Office\Office14\OMSXP32.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 a8301722f6cfa5c04b7bcc430da157f7
SHA1 fd69ed1df77ea0d9949c8ae82f880fa7a68c8b6e
SHA256 f6a24aa931dd0c4a56dddab7f259bffd8a8e962df1546d1ecbcc1169f6d91eb2
SHA512 dffebbd45facc0efd418fadeeeca3bdf1a53cdcd0c0515a29980f9a64de9267195022070c2d016b676f7236734164f41bbe00d03ff019ebcda401eadaf490855

C:\Program Files (x86)\Microsoft Office\Office14\OLKFSTUB.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 430c89f17b7e9533f4fbda52681c6103
SHA1 4480a3cbfdb40a0c438eac0a3fadc6ee57a2bd50
SHA256 f2df19b128f294ac42b8f519060e37fa6ae75d8190ec847a125904382bec6ab7
SHA512 ffebb2bcbacfffc71ebba76c34c52a52795dac737f2519ef9690a7fb2c0a417ce901b61136530756a6c5702abf283f4679de9c12319eba8fdddc7ddfaeda60c0

C:\Program Files (x86)\Microsoft Office\Office14\mset7db.kic.(MJ-TJ9302618457)([email protected]).zxc

MD5 6a45293e748aea2c4e2031f07cd3b9b2
SHA1 c5ac45900fc7c45f61f81808881d988d57066b3f
SHA256 84f38c926f41910610a0b00c9daffb0287f583c9fe4a54fbb2d4543925fb87b0
SHA512 9e13635b393a414b3e191ed3c38fefbc4a5a26a195d322f4b207885b1eea5f581827f40f1f796d3d32fcb8afc6bf2b53b2ca57f9b0af2020d24ddaabaa58b3ad

C:\Program Files (x86)\Microsoft Office\Office14\ogalegit.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 193390653a4887eabf0e39c41ac05659
SHA1 32eb48eb64a1dc0a56f06607e50f98fc851a098f
SHA256 ba8ca5c656d22989169414f87730320985c3bde32166467b82bd799052f743a8
SHA512 d59e4c12ba8165edc806a8a5127e79365783bbdd0d78e5dcaa09e90ca2df4afde682b518c8d193c5ae0368c79904a940405404544b8e340a5d897f7202cd89d5

C:\Program Files (x86)\Microsoft Office\Office14\NL7MODELS000C.dll

MD5 2f5d26bd3b5e0f7afd0126a1fc9595b2
SHA1 ee5f46e89f109164060ce6925be35304cb94cf1a
SHA256 e4061a66e7d7b6d73971d5d1c2a1aa57f1d2be1a10001a612fc1c4f58c0cec8b
SHA512 67b25862020d0544ccd578ccbbf3aa00d22a64e2c5af934c2bb22f8fe812e643ccf82f995df381a42ce260b09417d603a18b4a5c47d947e8d23681b6778b7998

C:\Program Files (x86)\Microsoft Office\Office14\NL7MODELS000A.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 b44b8ad7c13ca4124b56747a4a2585c1
SHA1 9ef0bc4afe0fccb4eafe915f949f2f9564189df4
SHA256 9f458a3eab2ab1c17136e779c156246bbc6787f0f3065b841e259a207dbc50dc
SHA512 ce1fb49358fe3862a6e9185ca31e2508852d955e3b3590e40752fb92a6bda2cfd5873338ba00144c6415a5eef6af049bca9a16eb8911b672e8b5ce793bfe6ad4

C:\Program Files (x86)\Microsoft Office\Office14\NL7MODELS0009.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 33e3aea3f2024535603137513c3eb558
SHA1 5340919db0c2f233eaf655ba78180f64139eb69d
SHA256 ea6c2274d2adb5a92498e99576bbcda64951a41f40795968acd6308feb0b7db6
SHA512 257c73579ddaccda3c4d2842511e7fefda49e4963cdf0568515fef0b797c17758917e61a04c528bc87824e37ce721313fd87f3f21d46db4b467fa1ced46f5084

C:\Program Files (x86)\Microsoft Office\Office14\mset7tkjp.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 e91e899b8422b05cb0060b44473f74fc
SHA1 409013cd382b021721b9054838e2f5c2f387f6e3
SHA256 4dda0577f441cb913eb1e08cb20d7ab23166c84eed9e506bd8cbc487ac0502ce
SHA512 424eec5bb8473f57f0d4b1c222636ac5d0833315e26cbd8b34e783bca9e7980596dc6c5ab720f12820128d4804cf9a083504f4d54162b9f8b6e8ca05d1795fb5

C:\Program Files (x86)\Microsoft Office\Office14\MSYUBIN7.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 b55b85ecede1a7c658096a33b091e3ff
SHA1 5b2058082c8ddfd6a163cf2585e30b36c7b0a764
SHA256 b433ec186f1f50b53eaedc2b084b504171674f804664ec30d83b0d85957da406
SHA512 34a5d2e6e2e0370ba86ae5799b141a120b8eb166524bd094b9e3a006aa8e48f818db49a74dfef1e6a776cbaf0511538c6acea3299e6c22dd14b3042d10c6a8bf

C:\Program Files (x86)\Microsoft Office\Office14\MSPUB.TLB.(MJ-TJ9302618457)([email protected]).zxc

MD5 e01dfd1a56b292f665f68d6775675a7f
SHA1 923c3a9898ca74f4c9d6c494ad4a94183bde90ce
SHA256 6e653f068e5b3979c146dd9405d860bd7a75d889d6ffffa92833463be5312602
SHA512 0e886b40a1589e0a16a1d0e629e14a3019ae1941d118183b728f3e0905347aab7c57f8222f1b2cf311681bb9fada7e7a1e3c01366a7d2e53c04232d1a105e079

C:\Program Files (x86)\Microsoft Office\Office14\OISGRAPH.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 63cdc8a339898e803fa4173baee484e1
SHA1 8512e34be60193cee0db66d3f8b8c8924a3a07be
SHA256 0320581ec24ae3667faf0e68991d356653e760502117ea3882fe9e54e37a511e
SHA512 23de77eb464c1feae568abea73d48ec2ab7417637a336dd68e959e688ade84d38af06b04dac4a901aac6ab17f45dc9179fca533751a24d90fcb0b1e2717a414c

C:\Program Files (x86)\Microsoft Office\Office14\OIS.EXE.(MJ-TJ9302618457)([email protected]).zxc

MD5 630c8374498d86e60de4c7983c9654b2
SHA1 ff28b56cedcd5c0c8f4b0bba9ebd588519b139ef
SHA256 e88d1d5263adb63e904cec09c0c798eb4c6f510b4c9de02c0a7750fd04802945
SHA512 3e946699fc8456d6366af579e71cd9df20b472caeb9cfefd2504129a70fec8ef37c01de73926388e45ad121dfbcf953266192f0b038ac090ad54022463a9ffc1

C:\Program Files (x86)\Microsoft Office\Office14\mscss7es.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 89d8daf9cbd3a0a9b63e139717cc6116
SHA1 7caaa6bcb5a32eecaa3e4a9e13ab7a44323ecf44
SHA256 eb2cf23e4e3f20ac12a081ee3deaf2a96f4c1faa61f63ea7329492ac4f036c17
SHA512 4ba047139b5b5a0349409ba05fca0379c9c18683ae67854bb514a63d35043d2eeda71607e35c36e36e8adae8825bdfb6a27940a4c0c15cb5c5954185fe6cf45b

C:\Program Files (x86)\Microsoft Office\Office14\mscss7en.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 76312e42ddfb53a843e7257ee56d74fd
SHA1 c6f7d34d83242c6b194dd76a15c09b2bc71bfe55
SHA256 ba35e928a1d7e8985fc9abf465d37347ae6abc584f676799741ac637ab62a73a
SHA512 20fae83d41443920238e2b9b53917b5239bcaf271b83b549cd60f74fdcaf0f46272400a45834c6aa4bc314492f28bb9aae5a4004553c4592cda099b2a79e0084

C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.SharePoint.BusinessData.Administration.Client.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 c971002689abfefac7f9caf0ff04f021
SHA1 04e1b645c957b6bae45e568867721323332bb459
SHA256 e789c2841433bcc2cdd179b8938836161b10dc7de787ba544a9708ef79689068
SHA512 757cceeca89249468425230ba0d66eab0973f242300b6d6863bb06118c9468a883eea7454933bc0d2efdab211e705b2414615d2b9536864a9dad984333397681

C:\Program Files (x86)\Microsoft Office\Office14\MIMEDIR.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 bb06287804cf76e7fd82dc7cfb550fdb
SHA1 da742f6877bfb69b5f272aa78500d253ae401d85
SHA256 46202ab247ba3d57f832578db698e9c2b00fad8b03e8b5d1970b5b3f7705b104
SHA512 0bcf8fa40683f6f3f4faf20f73f0b325d9bf27fd6f6092aade89b20a487cacb32d9bb630763a1a24f949b479dc15e537e37a171afd28fc49dce337fd6c6f7a63

C:\Program Files\Microsoft Games\Minesweeper\it-IT\Minesweeper.exe.mui.(MJ-TJ9302618457)([email protected]).zxc

MD5 b5126869674982850c314250b766fa6f
SHA1 87ff4d20aed61f67920abee38de2b50a159bac58
SHA256 9bb09e8946851f4b3100663bec487c399dd4224b563301003a04bde0102600e4
SHA512 2815fe4739f2a8afb878e1628c81a535d6995716f237ec041d41283d702daa38635d29aca395e95c38ca5772253f263070d3d24e3d8613d1cbba6bc09eb50579

C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.Interop.InfoPath.Xml.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 24e0d6ab1179690862468373968d0d82
SHA1 e64f647e5fee2e1ffc73b0405cd8ec924f6db2bf
SHA256 80018415ff9f5ef1700c8b96f227a6e0fd7f391d3cd8fbd4e2c0e909dc6bf2c3
SHA512 8383e15fd785ed2356c4e477f05597cd652ba85f51a25030c279464d9205ecf9cdd4012831016ae494fbedaa5dc4369c90e7787a6e3f155b632ec4d0327f51c9

C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.Interop.InfoPath.SemiTrust.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 d856a5d014391d3f19ca0051fb2f5c1e
SHA1 bbfacb81ed0d2b53a865a771bb53f8e12cba6800
SHA256 4fb5ec505e33b91a034bb0fed7d0d5a8da8f2e68d5cc1e33b526767eb44df70b
SHA512 1e1fe08fab2ea1e5018019271868c13bd184cfc28b29f18658654ef20cfff1de7addc7d4058d61a5f56109ce1378e42af6d32535327878dd3c89c4cbf97f5493

C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.BusinessApplications.Runtime.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 7758d769e823e72d2fb8f992cc4baf38
SHA1 47607a22b9620924cf31e752ffa9b353493e01f7
SHA256 e9da82a39713422316a661421c1c8bc37a886634145dcd600114311f806aa0de
SHA512 3c76bfc725fec7edfec36f718fb2d6c9602717222e3f75af87e4bfa7cff0db90ede624667dff54a1568b1549ebd3cec0a4d5c235f3773272f47ecf676b327278

C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.BusinessData.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 59c653603532faaf24013f97bfe9f372
SHA1 90de1dc024ebcbda9c8b782ecd789f9d3891c11e
SHA256 3c587cadde9fb9074ee176f554608d8835e0cd02d62ef21cb9d7af582edf5a52
SHA512 87211006208a014105d723e593a4b35e5df032f35cde1644c1126d4f10b7ecf9ff45b41035f4358452df42a241dbfd46ad5f3a6b8b4c23e3432dea6b6976efe8

C:\Program Files (x86)\Microsoft Office\Office14\INLAUNCH.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 786a87859976da97a0f49e6e8bdc3e43
SHA1 17b0991839c110c0c16ea6003767a92b04f2e106
SHA256 c78e28203f355b7d594b724d6ec74398e2b3a7d285e392bc8772d66dbc6f369b
SHA512 7281ee41f495a09daa3efb4658ef3ce4b1e8d31a983914232cd14be6793caeca53d0011d6e6eb8bff5e351f0a07546871635cf9b8983521de1ba7a8d4d94ba62

C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.Interop.InfoPath.SemiTrust.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 aeb08a13c79c7f81133ddc118343d3ad
SHA1 10589308d5faf2e79438dc6852290a071859fa60
SHA256 156b61fae7778ba5a7a83d3f31e131608d3d6dfba8519d83cb275918dd909c91
SHA512 9800bb69337d163bd7bc8c18a62cc6e71ee14a31b7d03c18aabdcbab103171cf72537fd1969ec1a02e8e9e916dfb215906476c0d9527dbdb72f933767675258d

C:\Program Files (x86)\Microsoft Office\Office14\msproof7.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 a8d667bcd8947919b32912a8acc39eb5
SHA1 5261459674b6452960be70c7af5ce728b54d2343
SHA256 531b48fdb042ede54851c5a53503ed9a31e4b072f385bb48c3a6968077a16e01
SHA512 d65b380197ddbef0eca14adae1976e5a49d28263fced7d79ab73d00d55fba5dd44cfac99334eb1e3b42576b7c89cefb15af398e1eb8e6970cb167246f3a9b435

C:\Program Files\Microsoft Games\Minesweeper\MineSweeper.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 43f57dfc340f60506c27b33072ed23bb
SHA1 419a4ad1b4d0102c0a6064eaf0fdd7dfa25c5755
SHA256 5b90fe7205c0676249080aadd5c6105bb1cbc9edff9b88cbe1ecbcb847d1c3e2
SHA512 5c9e322c4ac21d7ba7008eea317545e1ec11ccb751db67e778a09c4abfd6f64412a8530d1c85982250f4f15330de552581fcf4cbf851317b9f04c02dcd001860

C:\Program Files (x86)\Microsoft Office\Office14\MSACCESS.EXE.(MJ-TJ9302618457)([email protected]).zxc

MD5 1508a10095bfa5724254a96a3dc1803d
SHA1 09c23c7f8be923c5b130944da29e1c24542434da
SHA256 d0d81583f3e92a0bc383d1a85964f8820c7d7b4ea3b2d017f511e0f4a583f1ea
SHA512 e1dec8af58d50734ea69db1e4a4fb39c95d73258566c2f29403804b24bd6789b40f7b2f1caf4cf0bb10b1c286b1daa91e1e4d758f96cace9047d901e4f7cd939

C:\Program Files (x86)\Microsoft Office\Office14\MSOCF.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 cc75e8c46e14d41b4be3497e9c11741d
SHA1 478977e45201c23ab76f5ae6aa718eeb649ef040
SHA256 19048add847105e3c6966bfee3c146aa1977b47a38f8fcd159e8578d185a1d04
SHA512 8d3dde44c282ab4c77f3197f55fdc16a19068c1e7eff83611ecacddbbdb886898a3225f4ce6c57871b4dda879ceb69e03073f7c0004cfb8c5b8dc5a2272cf5e7

C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.BusinessData.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 c7f31811a81b7ba76f7732da404d03b8
SHA1 3a9f9325046849afce49afe0fcc25731b5893f76
SHA256 f0b2fb05e6bb63e4c87822ebaab77b3ebfad9b87cbbac581f48daaab7a51f0c0
SHA512 aef7335f5358c1c60a86197862ff7d6971a7242ee8b5525edb42aefe2c288c2cefd6a4385e18c6af07878cf31d83dd48a1b72b997a005f6550f919bcd9157d23

C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.BusinessApplications.RuntimeUi.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 b973d961f2dbb2986c01765b6f349fab
SHA1 7a0108600755cc2ab3e6ac785cfcd1a10de7456b
SHA256 c4d8a1c1d585c5517e8a19b65a01bf7798a3a3562dfbe92984549311b81685fa
SHA512 45ddcd3d0a48e02ef003bb63d512e26a718cb19dd5de8e077fe17135372847b4403c88ac5289697ff9becfd76dfa9531f2d418c391bf968ee7cde3c127ab617e

C:\Program Files (x86)\Microsoft Office\Office14\MML2OMML.XSL.(MJ-TJ9302618457)([email protected]).zxc

MD5 b077deb88b8c19983d30aa27529e04b9
SHA1 77fae97c129be568d8c74382986a349bdfd1cfc0
SHA256 e26931644dc087d445e77d90bbabe173409780aa057bb38a958edc2a92c62af3
SHA512 87f3da5616fce2f46a04a1394c840f6f24b81d17e33b90b1c9a9d0669e454b98d1b1bc30a12b4248a5ce0af6dbfbcd79899a201360ae35ea78c2d0803b88c893

C:\Program Files (x86)\Microsoft Office\Office14\MAPISHELL.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 eb422abb5239e247f3338f92271a8629
SHA1 bdde9d4688b986e006ef6ad09902e8a087c21bc3
SHA256 a1434953b9a1214b3f2a0913279bffa1370d97006f99caecbee21c81a59744a1
SHA512 8a2c8fefe79fe47b9a778a228d041e369ee5493345b15d8c3b2384c57207caf600125f8d1ac58241ea2fe8af74375bd6308191cd0e7c9ba14941e91456a67c49

C:\Program Files (x86)\Microsoft Office\Office14\LATIN1.SHP.(MJ-TJ9302618457)([email protected]).zxc

MD5 a3d134c877e1f4ce9bbcca575c25ba09
SHA1 67cd7202ca822fd5890555b2e0918602c45d33b5
SHA256 507c0c3cf54d14c1a19cd32d2b6d05c203b7a1b84761ef61cc751075322ad267
SHA512 67ac0fe5c6c8476baeb951151cfed7984b2c8ef1f67d45c6c67e50ccbb4cc08afe327d6632c5ef765df43cb585a2d0c2d87b50f63c95fef882f899032eb7d287

C:\Program Files (x86)\Microsoft Office\Office14\IPOLK.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 0a39c41e0a9d4819193f2ebe5fa674c2
SHA1 e092a5991044c9795b1cbc0568ae1ed80aa3523e
SHA256 8bef6908edf6d0eae86e372cc2dfc58ed1acf23f1668cb5cd456212c1291b75c
SHA512 6f86101d2179abb9703bf6dae44ccb59e828494f33925d3d0da8db3106a1a14ac90e97cc6f431e3a04efde8889038e2db12029e25fb7ae51209195f0a93bd483

C:\Program Files (x86)\Microsoft Office\Office14\IPEDITOR.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 33adbc4edd15fd938520a0d1fc6b14d6
SHA1 21ffb7e69a9cc253e129731ce42beab5836e20e5
SHA256 6e8362e64cf40e0af8dbae49f50fff79618b759be27f840b33be50e36bb9d2e1
SHA512 ff241655f2a654ccc6ee15ee2e9e767e563e894c0e768519f6cc61427ca89d7d1cb3bfe89dc23288e3a534ff172bd6eb68ca7c2c1808de9921278d16e01e8fa7

C:\Program Files (x86)\Microsoft Office\Office14\IPDESIGN.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 e21689f756a784a346503a1b1f87147d
SHA1 f73c620ccde82dd9d068f8201a3d6f93e8efe31d
SHA256 e5fd06f661efd961734734a8b1bc5053fd17086d51889bddff9d52794e2f0998
SHA512 ae6f1e25da0c87c01e726ff7b4a8ca7bbe79c25e3772df431c43dbfb92a3fe31bcf20d248d5d7c8cc4a9979a1c986978315020bf46f7475a5b830e8527bf0dce

C:\Program Files (x86)\Microsoft Office\Office14\Installed_schemas14.xss.(MJ-TJ9302618457)([email protected]).zxc

MD5 20ada202e11223ea1f33e087de4ccf99
SHA1 027962a1a248095f7afcb20b3134796002e1c34a
SHA256 4592fed1d5f97ee0c9a893f1fd8e04f88e26af130f08873828061244ea91b200
SHA512 637f72d48190c6dfcc641dbae2a8f95468c5bfe4de7ff3b6b69a3259438dba11470226f5883f8a8fab46784852e8278212775fc167435d845a6d85ec8d4a5494

C:\Program Files (x86)\Microsoft Office\Office14\Installed_resources14.xss.(MJ-TJ9302618457)([email protected]).zxc

MD5 1e4433ce48ef41fd1d076cdb93242fd3
SHA1 75f236747d5b0a090cc7b1300622fe9baeb30422
SHA256 e225c9d2fdfd53e0c921b2ee68b6360d460f864c5e25ddad1d3dd09fa9b8e302
SHA512 f51714da2ead0e542f356bda1c7efc103870e12b1422b965445c442a0642a7430d2c6a2e33f5127dc5fcc0db45a1d05ae80d2d83755f835dca7f58dc32ca9241

C:\Program Files (x86)\Microsoft Office\Office14\IEAWSDC.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 51b484d7b28d727805aa500cf4e394ef
SHA1 55e0926d1addd141e335573aa73ced9167cadf14
SHA256 2bdb325e4488af00691e0d58a504aa54997e7b501ea86c16eb538c83cafddd11
SHA512 db8f300aa7003f078931cde2dbf4ca27425e57a605fcad573a74b785a252e1c7c105ee20d86d67aada2cf31ceacb1f3bab2f657696f42975d6fac34d306ea3fd

C:\Program Files (x86)\Microsoft Office\Office14\GROOVEMN.EXE.(MJ-TJ9302618457)([email protected]).zxc

MD5 c8b07ddd32e140c2e5fe6f9d8eaf7b38
SHA1 264ca21adb9a0a6daf413a8ba09b725d1c3f79aa
SHA256 704c0fca96baa07a9cefec95f4ae45553c3f0808d7650379ff1317c11ae2c277
SHA512 1c31a343ba9e3982ef1f02a6e3a40d7e77a91fe88fb6d8cbf2ca56179feaa1a65f3c6a1b8861e1580b827fbfa8120303bf71f8cf0e39b1158ab18850f31d3af8

C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE.(MJ-TJ9302618457)([email protected]).zxc

MD5 df333ed7a88ff1c3df8aef54c6f684c4
SHA1 921a76d79aea187ffce957efec890ee700b38b7a
SHA256 c461febacd930608562b55d846d5d029745207d4de791f6007870571e7cf58b2
SHA512 9097e33a7970935faa6de5404c172809591dac73f5842cc8f44374ff64a77e08d497d04bb68d06d6a068ad642fbc2a16f0121908e7d15eedca171af00a3935a8

C:\Program Files (x86)\Microsoft Office\Office14\EXSEC32.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 0268a2cc26324f8e270c096241e32be7
SHA1 ebd83ebbf623900e619437e947ccaa0b7adfc24c
SHA256 d4e145ab5f66ea824582e74e218e1a62731db705cbf4316b8fd2ac6f94d7fa0d
SHA512 03fc075dfc2f964da6cbec5fd36bc1560fadfb13d810cf4fab718dcfd93b0ebbef0c03e677c8c6abc30336e36c04daccafe7cdf7a01c599ff31a10e54c34e214

C:\Program Files (x86)\Microsoft Office\Office14\MAPIPH.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 12bf5082ee925e74ef00b4a894bf8d95
SHA1 750850391e4db23b3d7dd022fcdbf9339011fb50
SHA256 f2c0ca5e5de48a21be62adff379fca7aa64a0a72139b32be8103ed9ed01c0d4f
SHA512 332ae85c02a1a1a85495bd3f3b80bf0eaeaefccb6f654463d0c7e96804c58e1ee41f33329d6f8512bffaa774ec323d54d14d5cd91ed9a8bdbc6e12d3f3347a0b

C:\Program Files (x86)\Microsoft Office\Office14\ENVELOPE.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 8441a76a030c2bf2f53b66336cf474d6
SHA1 ab6fbdbf98b5b3b1d22dff5d047554dfe6611aa1
SHA256 936c36bfa2fc4ae069c2c97985a3d15db920c6ff53c719fae539e4b603d1a903
SHA512 7ad5859096a0a4e4451e506811fc1cbc9ebf93de916523559cf44945d25172766e1e574723915e3957b968114e458603f901152f89a32a4ad9e131448b5dc4f9

C:\Program Files (x86)\Microsoft Office\Office14\EntityPicker.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 8b8ff0411c4940f719b2260ff879bd9a
SHA1 8b2ad880a36c2b3d64002a932e3abacb3ee5e273
SHA256 b0ff524cf5e78867b4293973950af9841386e4b024573fc39a28fe81badc7255
SHA512 20e166bf4a05d72ea1aca8af56ee4ffab1d835f336fa99d5c9cbffdfd16cd6f8e6b120eab79e37367e5435ea3ace885f1aa427c8fc339d1d988af9651d4b1510

C:\Program Files (x86)\Microsoft Office\Office14\ENGLISH.LNG.(MJ-TJ9302618457)([email protected]).zxc

MD5 1ba818937a7a31c5750f07e202091e90
SHA1 372e5df125e72b5c8c38e80433b67363b9b8195f
SHA256 19abbf68c7b26ae61a221bfdcd9612e07259738b44db769f6a2e83e9a2397596
SHA512 d6d7d52f07030d92e37955c58cfce3971f42472d08ec48c0905ad7e3cb7d99444d82af74883ac3e2406c3de1568f3117c62ae57c551e5551b328a4a0891f6f9c

C:\Program Files (x86)\Microsoft Office\Office14\IEContentService.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 536a76db587ea64f4aa7db5083734b66
SHA1 11469bae49d90951c7d5e600702ab78f8cf0311a
SHA256 b0b34c0e252280a9718b1deb5836b5eb8abef5719ff42e4f980ab0d171e6db6a
SHA512 6b7ea4b04d5ff2f321ed53630d3915992ab9a9ac41ca70fd32c24433424b31b6f4713492104630f699255781da6f26a25d99b62dc0cacfd4ed187856b0233e43

C:\Program Files (x86)\Microsoft Office\Office14\FORM.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 a4e1589ad34f9ad02dba4973dcc99c50
SHA1 d178b100714212144a142a4724b2ff030077a5ff
SHA256 166849beec931efe2dce441796d9932cd1769d7ba40a192bae1ea20bb3ba11f5
SHA512 02075bb7177662752df21965608d63902ca7026e6b2230106dbcd5c8b8ea35e51719624114c7155741e130ec6da1a4255bb387c6b81df4558e77e12bcc667887

C:\Program Files (x86)\Microsoft Office\Office14\CDLMSO.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 3672dfa5af7a5b16e58f263f286f75ac
SHA1 3a971d122e241a6caace6746adf4f03461f5647b
SHA256 e67ac2f0e446f21b33b3cbf9ceddee2dd83f5b7419955f17407b69d16347b199
SHA512 057e36526aa63bbc049e9d7919cf4616c8cbd1255e50395896c9bcc72107bf8f3cdc7f54b93705dc5a7ea28e7501fd7e2807bb4a0231fff18bafd2ecf477c4d9

C:\Program Files (x86)\Microsoft Office\Office14\ENGDIC.DAT.(MJ-TJ9302618457)([email protected]).zxc

MD5 fe683390f74afd217ca3010b84205917
SHA1 d8f18b80e95525acd3f2a8745df248dfa20f96fd
SHA256 b161a1d32d35df312a5e971d23c15303a3e962d7a307f109f430794b30ece223
SHA512 ca84dd177d9690b0efe75f227c56574302104a6a5578dcf70a82f6e83ce832802918f5c188f24281e0dd9a62e397d08180595c495af61b008bf1541b36017536

C:\Program Files (x86)\Microsoft Office\Office14\ContactPicker.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 c43810a2a806dc87b24dbead4cd5910f
SHA1 e3f1d27f86290bf80b1ec8d4581eb73ab23a15a6
SHA256 a9c07343138ee33b960a767ad32ec72e01eb64e6acad5817bb30996339912350
SHA512 b86598ab335479fbe07884f50669b2a287b8697ae0d7b3ed463b5e583c43e85aa9f13f07f82ee1d668e152929a40860795a56dccac6536eaa4253f1558794b45

C:\Program Files (x86)\Microsoft Office\Office14\CNFNOT32.EXE.(MJ-TJ9302618457)([email protected]).zxc

MD5 b5fea388981392ba91715f4ae2a23692
SHA1 fb57fda86ed5f70ebcb810764f2901a3c155c927
SHA256 89d7e508b35d94df6517235b386e58360bd2342504d52882bbff24adc4b7e476
SHA512 f6d46a1cf87b085968bada4527a348a126b8ac98247e636bd1140c13a449a53d4bf1070000c00e7c6bb7da1e1b038eb820eee7339f5f882d8f340e3546fc4915

C:\Program Files (x86)\Microsoft Office\Office14\FRENCH.LNG.(MJ-TJ9302618457)([email protected]).zxc

MD5 67f17d392b4f41a6de1b3d2a63ba5589
SHA1 44162ca420174a1943ce7990303319e88ca1dfe4
SHA256 285f98cb6298d8267fdd68bd32846811114a9792c8b6d9d62ce89742b285b365
SHA512 082ba6d6a548163d4e1d0e2f790029909def942e29cd637f06fc6c6792db9526df5bcf0d29e3497c8ba82c2157f6e12c2c6c17846e2bdedd4146ae9b88d0e30b

C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE

MD5 5ff0fb3ec8ae77304d7035aa4d7aa4d8
SHA1 e980986ec8b664415974a64ddab2f5d9b34a792a
SHA256 8ccbc3ccd08754f5fb5b0e2f6471d8104035394ac15223904bb42ff1c5e7fc40
SHA512 09fb0d8add01d95e72c7d2ff5a2f4edfe9684401be9dc094ee2cbb41a1f3eda5d86574070ab9bba5e10601f92e8c70cae75265202c4f089771dbfd1737fbb017

C:\Program Files (x86)\Microsoft Office\Office14\CSS7DATA0009.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 6aadbe022356e78c5bd4c40ba70de0cd
SHA1 b33b330ee99fc88b7d8f1838eb815010e28caf0b
SHA256 36909e804c7a9ce908edcc4032cb49c598215e9d8e10cb0e470ae2c49848bd1c
SHA512 e243382294f233695e522178829248703d5bdde49b43dbb7887ddbde74841b8e61066cd32c7a5348cfd8d22c6aebf1cd10ec7b103b30c8462fd6c9db47888283

C:\Program Files (x86)\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPCEXT.DLL

MD5 dda5120e741552b2b9e9cfcde18142c5
SHA1 17b1fca5cb0fd3cc49054829ab1fd2e9457e70ec
SHA256 ed7ba636a919393d38de240898a894807e71b09f7346721a2986720b814652ff
SHA512 f1a134ca73e7f1001b7d5df3afa7bf8768719324b176b003f4d539ca96f9c5acdac8917418ac0d6245909a9f343d86bb32936621b149060137ad0c1fd17145e4

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\jfluid-server.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 5a9146cad867296895d6fe1528c40d37
SHA1 e958114934b8d6755ec45de811274103e40d1f63
SHA256 d80559ac4a3c4fdc3276ace828cdc0c1f4e7c7612c82af714149baf6e02ca1bb
SHA512 30a99852d9e2e6ce33d61843de5d6c03edabed7cfbd09b55e81fe906bb78ad1136ee30dbbc4b0eb10e8e33dc1c5cd6d7ff02b91911f823197c312faee6bd507b

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\pkeyconfig-office.xrm-ms

MD5 7bd82e062861aee7799337b1e33b1a04
SHA1 3c1df6f1d525dd9422eb21095ee6688040a245b9
SHA256 3369df0f14e18d68e8361eebcc49dd43995b1ee0601a92dae5ce6038795f170d
SHA512 923aaa33e8fb293cd4ab84288fbc73d90c733cb156c24c3bdbd044532a9ca676f11c07dc5b9dd1b45d6a7a7d9377f3092336ebdebddb6e07a41739fdb156cbda

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\ALRTINTL.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 d54a901a8d889547eaf604064c938695
SHA1 06006e038d5ea419e8397e976454e7ed294aa04f
SHA256 c1019e6f6780f100236f8da0ce5a1d7777ea4c99105965cdac9156904e3b01aa
SHA512 5aa34cb612573aa1d18876224b4a6d52ad34802c960be4ad65939cb2bed21f628c738165ee16612d36d850ef1411a13d1362c27058853fa4e22848f46c3ea7c7

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\ADO210.CHM.(MJ-TJ9302618457)([email protected]).zxc

MD5 39630d3786da833dd6d1848390001ac4
SHA1 4e5ee38794774c7d03393ad254e5fa901e73bf3f
SHA256 b3fd74ce131c068e37eb7373c386d1fb8ebbc2ddd0dc4a54e234f912fb6ea86d
SHA512 596c9eb75f1b69b00979968bdffcb51dc230dd9c8519b6b65d6cf2e90ef4b79eafc92da4a15daacbd4fe067370fe32a8aaa853b5875cd3cd5069b1d1d9ca24dd

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\OSETUP.DLL

MD5 023ed6a2472c8ba177b19930e59dea5d
SHA1 71db41f080ceaab6b0385c163b6ebca771a8179a
SHA256 4254f6a74cce67f7fc93fdef81d6d0ec5470dedf06a8321311c4afb181c8f490
SHA512 07c653eca534a76025172e6b29b8f2ca288364a19e2f9f2ef6cbe4111e084fc06aa0e5c71296c28ad9964bd82d7c1d8d76e9c5b038b8152e989432e40bcdd3dc

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\RICHED20.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 2453a482896fe2fbed756a6dc0693906
SHA1 097048823bbc4662fe292722fa128288caa16fab
SHA256 9132fdbcfd548c557f202eda6626005f3dbb52970e33b352d47841602e63161e
SHA512 008262376f910595b0eec4fe258e6264ee7d6758e337da64e8afeba2bb0e4daeccb8f94c791054ffc02246300afcbb5af309ef739eff464ad5672f0527cdaaa2

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\USP10.DLL

MD5 3be119ae528eb2262c51a1fb0ba8f14b
SHA1 1b3097187e105dd4fa7bde6d484c7d5020971237
SHA256 d7118010a5f524eb5d93938e6ff7eaa57a8986183beac50723ee8756c355ab59
SHA512 d42b44e63deeb30db4a52a215bc2087fa3ff461a6347ad434d2d31a2546fd7ffb26a26c7d749a2f4d1e2d5996ca5cf779d838c09417e183177552fc969eb9672

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSPTLS.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 6ef3c82df95c8ff0544aa455c38fa4a2
SHA1 29660f495d058231318a63d463731c481359c4cf
SHA256 d74bddf8a783677fc550c393e7d702ba66626f1346f666c6a3a492cdd334503c
SHA512 9d5cd5066ffc8dad55adb9d6a9a99f381bb0f19911117258eee55ac563c14ce5ed5de8a3bd55bede75a311622fe0ec1b561e90901f07ef5d1a07f0dd19820165

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Oarpmany.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 f7e8e5f7b76b181e7989c12b40d2ca69
SHA1 6e7ade0b7181940d8ecbe4a2b10f035a0b54e2ff
SHA256 f0837d08c854c16d6d4e811485cb5ff29e8086c9cc493e4132ccb6928c8fb0bc
SHA512 047b41a8c2bae611fae9eae63fb17a8eb0fb3d5ec048e06a5a8c0fd3cd69e545fb9fb9864be2467a1cd0b9729facffb7030a98dd86c435140677f076119f73d4

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEDAO.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 5aa9c645e423e3d17fab3137ee999027
SHA1 6803040a36fb2b36ace3bae9dfa06e5aa514f2ee
SHA256 c8aa2e312c30529d7abed8129ea56b27fbf650876c400edc82ecbf4083c28d3f
SHA512 e93551808f7127d0d5f1d5458ac93302178361cdc9fc36a8b0f84ebba5a0a23b32d00e0fb50b8c2f1128309ab420e1a74d952c985f20cbb58516e0e4f3a034b0

C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACECORE.DLL

MD5 55c504271bb28b0f53e25ade1bb63dbc
SHA1 f81965ad20cba35ba074a49d40822e00ddb079c0
SHA256 27582dcaeca3c9b4374d8a697aa0717fe995040c3f4860ca4291ff83fba292a5
SHA512 e1a753d1a341df6bee22cd56f6ccf4d70954e40014340e882800c495a23d45ec7fb1f46c842f8670a33479506beba137fe125ba28090d6cec9071fd79f0deffa

C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\JPEGIM32.FLT.(MJ-TJ9302618457)([email protected]).zxc

MD5 6991178f4aec5eb6482a819345b5fc43
SHA1 a706be317a154e6a5781e49de66f070f9a4d4e59
SHA256 93c99fbc4819c52b73190ab390e1dbd7f8bb1a1f98d494f13b32d2d19e1c3aab
SHA512 45662a98f2ac0b2be0786f7c11b57ff19995c6d68d0fbfbd8f71d1493fe98fbbcf2a7e83ed6f144d56bb4c7df3040f3f95231e9bc3c817126a5a08893ee0072b

C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\CGMIMP32.FNT.(MJ-TJ9302618457)([email protected]).zxc

MD5 5e3ae0edd6483d88fd1c5d3723dd4081
SHA1 6b5826e3daf83ce4d26023fa3f7840ab1a575f14
SHA256 3920b03492bb37b16c40d140aa0cc406a7fb5021e35d05c9ad0559423a33b157
SHA512 458cbd103cdc323891b3b57438a0214b8c5c244845ad53e2e49a61967f060aa89a3e509d4ca889f5099c193fd5bb3bef3364b409dd2523cfba9930935d115e21

C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\EQNEDT32.EXE.(MJ-TJ9302618457)([email protected]).zxc

MD5 cceb3b2108371ecafe9761090ae9ee44
SHA1 18419b4fdb191180411c8f598ce89e3e32d44b59
SHA256 cb97da63753ebf2b34ee15d169755932073c6a593fc9b356e52b9bef9e0c62d6
SHA512 cf923463a56b82d18162a68d7933fc5933a99a149caf9b1d7ee9d50e73d63fd242fc6a7a4bfceeeacc87c9677c7f2d5b2c98afc90e8eead9011aa1a599a1ba11

C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\GIFIMP32.FLT.(MJ-TJ9302618457)([email protected]).zxc

MD5 cdf6f42e25cbe0ce7ee834401f86c3c5
SHA1 ac55fc016caf7b1105b5be754252f89067a3d9ad
SHA256 bf5d0c0291ff049d73b67e90758799cf48309165df315b7e0b0cbf4abdbf59ae
SHA512 834378a622a27b5a7b3dec5a764f50751e8e9279c66a8dc2f868b99d1bd54437efbdf8bccff079a2830b79bec69280af7f68172a904ed044a4b17078116998a4

C:\Program Files (x86)\Common Files\microsoft shared\Filters\odffilt.dll

MD5 da972a16ccb0b5f14ae70e455de73788
SHA1 d8b0e2c6687104b5edaa6d9d34a5227d60855494
SHA256 f6564e0d03371faae09c8c4326d445e9d820b7098fa06f40bc6d5b3854900442
SHA512 4499bafc74c3fe5132c17b2b973ca5bbc74c2c41b9dac89e2ae5fb1bc4cb89f7a99817155dfc98439718bbeea2de281baac8423cdf947be5ce34744047f87e44

C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\CGMIMP32.FLT.(MJ-TJ9302618457)([email protected]).zxc

MD5 19bcd54be77369be63d4279e7143460e
SHA1 10070446a3853870f631e3efc46436d6cbc9a9f5
SHA256 a60804cc89bf88cdc9acec5fa292f7e7b8b48ccbd4e194f3e6857fd1663ad767
SHA512 efc36dd5446e782dc470a9a97eee4fa0ea81803644047ba9bf49ce6e69f743053a6f2ee180e55f60910a5bb7b936d8a1f441b059cdb636cb51a60ea44f25026f

C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\EQNEDT32.HLP.(MJ-TJ9302618457)([email protected]).zxc

MD5 c59417848d1d53b902fd41c648c39b24
SHA1 63c20306e9044bf6b7dce2c56ffac23855964060
SHA256 c039d62253e106aab7450dcb4ff52cdb34a170c61f66f2f9add0a36b22d60c95
SHA512 013f520c9c308b6aa64c2835e4087685f44adf440ee3a1fa978a39f0abbc02afe2a72651dd9fc8f16523b8bd960d4cd9e52f0c2fe8723b5de04256105a3e339d

C:\Program Files (x86)\Common Files\microsoft shared\DW\DW20.EXE.(MJ-TJ9302618457)([email protected]).zxc

MD5 b65e58034be6b9aa9e411609938f0c84
SHA1 f7ada178f0a9b154dea04169bc90d0fe9223b09f
SHA256 525598182dff251c7c08f5a9fb7cb15456cc136870294c6a209b08ca4953ee85
SHA512 c25428b4efe5b7f434acc0efb74358dfbc3ec8bd64e9459af453c56c6cb2a71c0cca844bc6063ab4789b741057304fafefe5a9d8c954020e8684daaa870c5b4b

C:\Program Files (x86)\Common Files\microsoft shared\DW\DWTRIG20.EXE.(MJ-TJ9302618457)([email protected]).zxc

MD5 d1a0d003ec5f36b527e9dba3e46c517b
SHA1 0fb1da3ad81856f50a28a023bce608a2034135a7
SHA256 85972db267bf3f0ddef2e863e438e53b93ac94674e84769a3fc0b1aabbd61099
SHA512 ca29dcacd143600bb0a1fb67a190d61ff428c4b486b35247397abaad608a8fbfa22181def156d0ec696f8e9d7c9439ccd8e8ece22ee57a91dcb81416462c38d4

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\3difr.x3d.(MJ-TJ9302618457)([email protected]).zxc

MD5 c0966134081a8665ee6fe21b6725cd80
SHA1 d631d7c6a847ba4d825ea3a1a2243db06b09a1d5
SHA256 92a1ff83b500436f4b0285e1730eade149e6b359554923447758a28d7db20763
SHA512 0655cacd79d32a2be5c30e779c0d2aea1211d6c46670bedb44fbfa01faa7b30c590be6cf908c61b9f90eb655fcc0b5d889215aa5cfd364bd4ab57c46a7976b2f

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\drvDX9.x3d.(MJ-TJ9302618457)([email protected]).zxc

MD5 1d56f909a7627777de4a30eb37e81ca3
SHA1 d8524e2ab00fc46285c6eabb7392613f379c62cc
SHA256 4378ba93286dc278dd8320e3ed86d3e4368ca25d86e9b2df0462cf05de784e86
SHA512 cfa632a432e8e0111604e4d68378c73b9d3363b1078e8a0f23c64e5a4bb2daf4d94aa7179e8a345d23d66600c29a34fb114f6ad91ff192cff070f64123dc8a5c

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\drvSOFT.x3d.(MJ-TJ9302618457)([email protected]).zxc

MD5 caa838d6f9ad39dd60b8b43afcea57af
SHA1 24f2a5e2dfb589a2c8cfa4fdde5e0f5ebcdc735f
SHA256 0dc1620f14790f9c65aecf55af15ec90754b85c5847929278d300b5b421809ad
SHA512 5eb34697f8917ba764750b975d1c9163b5224c28b8f453f298c15949e1a605c4c2bab1496d4eda109fcc266c92987df530a06d742e00f450ff7bc8dfeab1a220

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\WindowsMedia.mpp.(MJ-TJ9302618457)([email protected]).zxc

MD5 26947150a7a4c0af3148701a6417e37d
SHA1 aa5ada6445792d6c70db63ef34c05881f35d82b9
SHA256 e755c4fbbd672c9cc8f0106f61fcdb362a92145491288be63267aae726c0926c
SHA512 940fa0c48c8cf71a7250b0c1bc7bc9b19f4c1f04f389cc29b1e06a1a2db2cecd0f31b148688c786ec37ddf9695085d635a4f5ff0b0896f7752d97b3e8af06c76

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-swing-tabcontrol.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 a5bab5fc4eac3bed6983e52a05677874
SHA1 e653b5c93fa471c6c7f176c6834c59bffe9dc12e
SHA256 5e41981c8fa7f4602d5ec9c77a2c067feb3c41692ab2af4490cfd68fc8242d67
SHA512 dc6e39f53c6c891b54792baa6bf645fdee45a99a0d0bbf8183547905f763f51177b55a0ce0a7db4bf7c144ac62e0dfc7b6ca15402c29c1a412805fa5b2cec59d

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-uihandler.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 7579199a3c33e098039aa83d50d91c76
SHA1 db9a44803a107eafc3744e892fe4b423b963f469
SHA256 5aae0ecdd1b3942d54f68834ae8bb41ef2d81a4f5e6d0281935bd605f940983b
SHA512 6a81b44c6d85d0f28f352585e52648cccb835a9ba13cb97d319096ff1df541574164c62fd878a7ac829072547e46d6aeabe7729cb409852ad01c330d1fa68e21

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\VDK10.SYD.(MJ-TJ9302618457)([email protected]).zxc

MD5 14993c5e0d1497f600764f95bd57b237
SHA1 ef09129edf2267f126fbd91fe7548ac881f40e07
SHA256 ae980b70a69aa5ecff71bbc5346b0e87cb65a003a5f34e0f4228a5633071888f
SHA512 a7b7ca2f23419da7139077c707509b3a423f9477aaca5f9f96912d9e08e4ec74762aa1b98cb74721b93eb47e1feed65e641ef36d33c8c3ebfa885eec9815f35a

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\PMP\DataMatrix.pmp.(MJ-TJ9302618457)([email protected]).zxc

MD5 3cd1b223f4e2718c49b86bf6a67669f0
SHA1 f5a4eb8a5c56d9242b3a2db8b4e70a447d86b104
SHA256 4ac1a8fd00101a5801bc6fe36b35efdbd0a670574de9c0ff3c767cc8c162c4ca
SHA512 508033b45cd3b3a4464e9fbeb3c84a1a4eb8206fd49bd78725c2a601aa1906b747da1bb3ad742058f92d2e9b63ce8c34eaa881f694b73a6283c99c51c4bc7c19

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Spelling.api.(MJ-TJ9302618457)([email protected]).zxc

MD5 71624d9f05eea11b6ce107c83adef3e5
SHA1 517e0dfac41b6898e8c8d463688490ad9c77323f
SHA256 33c25accaf54d5b8c8ee28afabf02ca0f8c8a60e02518c34e30bad62f3109e83
SHA512 c6a95d1d11f44d1581a0b5bbc4578a17b6dd7883bcd55d6164585cb42127a2e71c87b7d88be7489fa6e823db15815cb0b1e3eed732adc3163a4a9594072ae6ee

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm.api.(MJ-TJ9302618457)([email protected]).zxc

MD5 097e0fed6ba69d30418cabb244fe3c83
SHA1 018b3256c41ceef9e98256426411ed4ecd73c42e
SHA256 91afe30bc9e24b767d9e0fa633861733408963131db00522109b4a522d412de4
SHA512 719470129343fb03951b57c0f0f907ada4447f1383bf6d5899d15b6ceed46ba6af8bb41caa098f7318ca61cd873faf3afa996e379974a6843c329b52f7e8d2cb

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-options-keymap.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 b35b7ae9c16d2ee886717e89fb3f2129
SHA1 843c1eae5184938e9352c5b37a515ee1cfdaf071
SHA256 55de0bc9887025383ea0f361a349bdb51ee5e202dcc10a7e5b82e5e881d59f4f
SHA512 a219365c4a714e8e5809e7396b0876864d1eb2dd8790b29cf1b2bf6bc120d9114cfc63b11480ff45cdb90519e733fba51656241eb891f825bbf6c4347667ab7a

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-options-api.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 3a94e7a5ad06340339f9200e9ac49f1b
SHA1 839f6a896c8034a85d21ee18fee6af4240410e55
SHA256 f48ab7c490a7038a3b6f8d23a8badcc7ad0dcef8d521b196ade61134faafecba
SHA512 aeda364a46ae431c57d59f160c0f7b6b1a528a190f9b638442b71550efe997e84e769d51bbee7f07780d737fcb41980d3050e707c72a6b132b4d5d0466073b3d

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-masterfs.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 e984d0fdd7a6131afe4f314257a13d01
SHA1 a4e3159df7b2333f2a69f744cceab5e1ffe00c27
SHA256 7054742b71babf35d16ef0c4d2bc2a8407525e5632ffe758d7e92887164f506d
SHA512 40bd9c88c0912c414a45942788b4c25eb988824031000c3696867b67386b8e199ff423530e4492f8c059fce88eb138e79955bc22cd74f99ade088777ee1c6ae9

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-ui.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 0b28d04570c8e3f89dfaaf0c9c60721b
SHA1 09dc3b15811bb6826f2d180ed5ddae5e29b74167
SHA256 fb8abe5111cfc448f55f8557a90d15b2197339d178244fbc42b18874d8c3751b
SHA512 4373f01ba0bf1d8c76f6eedb2f008661029dd3dcd9b5ec3d766664623235d4fd79fc0e9819fab6b938002d1bc6570de02d90b4e46bbb50079b542e0f250ef694

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-api-search.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 b7c1dd568380b2d85bd4d30f74a4f22d
SHA1 59b4257dff1cf1104848027dea72c249e1c1b836
SHA256 4a997b4e81188ac47eca001705c2a4aeec93817966a348c179f7b14194a877ff
SHA512 a01b6c026b4b775d8dde5cac537b66ed999fd398d2559ab379d8d4934a608114aca85497e3b996010dd248adf212e9773efd5197f6c2c0bd6bf8843e0d5a4488

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\nbexec.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 e75c6cb7ea0c53d513d42f2dffde2e34
SHA1 054078c0a79f4f55de61f8f690a5eb507b4dc985
SHA256 524d30bfd8333e6bd568a45a673b317e41ddb0694a03be4f4f68db85bb16d0ba
SHA512 a6b0dd3f605401c4e0042a4dc919acd0cc319a38b43dfc9710b5d76380c72376e25685da8f4af825ad3179615328144794335dfe1af25259b5a291731fd6e7e8

C:\Program Files\VideoLAN\VLC\plugins\demux\libmod_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 6de231e36ae3c7fd68bcfbb6640e84eb
SHA1 eb582002232e71ec283613204237174d6c60c07f
SHA256 c18f4c0e1c3ce1007fd3726f6d6b9fe4323dcf4c7bf6a5dc01acf78ccfe0e6cc
SHA512 fa281293e97c78a25df8c71583420f44dff63569b71a5f6d01615493a8ff40a047c4794b66f45e14a27795d536d23b0b9167a34027f3c055eeec90946e6786dd

C:\Program Files\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 50ab39d2b048cfd504608c0d7f1badf6
SHA1 d52a15c5e5bc9c256eba3b712881ca142e34a689
SHA256 df21a5e638d066de3ae6b0614987c06e899132d47d99c4b6a7f8aa13de704cc9
SHA512 0f8281fb43108430ee930e6a7f14076bb121deae55ec69a92dd9f4a9557f77627ca320ba1e424c62cf8ca60f9aa3046ad3b1ad2aa2702f235bdcbc685ac1b2fa

C:\Program Files\VideoLAN\VLC\plugins\d3d9\libdirect3d9_filters_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 aec895d6e6e9f6a2ad2e021086f08016
SHA1 70893026d8fffedbae1cf7469f9aa8adacf5e951
SHA256 86fe6c30874b187698eaf64cd4d550b9f3773cb7bcff4f1ab18c9ee9eb2752b2
SHA512 a19bd3239b79386629ab96fb5e894769d507d2f4b1260e3abec250cd32bd6a743045e615213e09da009d7f06ee35e7ad9a6ac3b749170960ee55d4caee72cca7

C:\Program Files\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 10b5f1b1ec24913dbdcda6b6022cbfa8
SHA1 33e5c6ae74c7615e32c1edc4edf44ab6b5c82ce1
SHA256 d199075c36b1cd21e512cfd5937ff833bc37c334704927d6732d28699b56f5f5
SHA512 27caed1c665f7ace008d38cc13c29f0c3e7456ca7df0b9a973170a3f1e65e26482db48c7ba13f67594c7a496a65f821b7645dff990f33ae814ae4959cd4f348e

C:\Program Files\VideoLAN\VLC\plugins\codec\libsdl_image_plugin.dll

MD5 39c439dc228030998986e3dbffdd4ca2
SHA1 3655ad73d00fc7705b867ea1eb2383a890bab6cd
SHA256 5fb8790879217783430872b34cd20b6698562b6535ada8f083340b6629aee00f
SHA512 7f3b913f94cb0311902bf197f3b2b03b4ae30717af0805aa112e0f4651604c0e2d2d458b624947017a4ae0a32976ad9d703549869e32591d9fc4eacb3f9e3748

C:\Program Files\VideoLAN\VLC\plugins\codec\libwebvtt_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 80af96a1bd75e35f3833a1590d627988
SHA1 2ca344b9ac9073fc9c195839a911f2e4b4941abb
SHA256 b3b22ee094f4f86336f77ded6c52b6f7e0413df09cc0048ef3b8d2f3af5fbc3f
SHA512 44c0c1c7442c494123300da27b7ec123db9ccd5b9c32ece959b378c4ef3c12fbd120d48b20ba4451d5b6b9b29d3da42bb4a9f01fc304ae52856574b66fafe49c

C:\Program Files\VideoLAN\VLC\plugins\codec\libtwolame_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 0ed05dcb10a76fdbb0c2754059588f43
SHA1 529da8a4d9beb5a2292b363cc97798a676b1bd46
SHA256 13bffd9f6c1be4f5b608f1b896173581b59ef1bb5d833d43ffef167b87146e5f
SHA512 e5ce45616e7b4b6993d2c5382f4266b4e384942106464947340ddc6206eb67cc681f58d275f0f5b8ed44911dca40b3a823445514d79aca8c775c4be9104b8385

C:\Program Files\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 d87520b50f7470213b937621f423c702
SHA1 1792484727e3de43062bb13ae1a73dcc2e41fa0e
SHA256 835ccf1dca0c25333b1b741edc9069c843ce003bd4a2089efb52bb4340c412cf
SHA512 02c16655570425f5003ff3dcdc33d1fb517dd45ac30ef936257de22c08a275a7170d7f47219cbf6d10160a91cca28c2c693be506e51e1cb05076d9c509a2ac34

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.emf.ecore.xmi_2.10.1.v20140901-1043.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 584a391c2c6bfe0921b99fc31e74aba6
SHA1 df1a2a195d3e2245018ec351fd0a27d11efe21eb
SHA256 eabb1565e2ab5b02e7ae953905b272e0af7594bda3ca661a14d2e006e662adce
SHA512 2e3d2e6b737bab6c27586bcf1e3d1b021885215ec17b37b4dff262ac6ce8b62b34b69673caff420e3fa0f1fcfd5620aa28492b58429aafcf5139df0891d535e2

C:\Program Files\VideoLAN\VLC\plugins\codec\libd3d11va_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 c7a646ac4f7e946bb9fcb67e36ecb379
SHA1 bf625afdfe3a3f93de26c625e0ab2f5ecc716957
SHA256 44ca8b0817ed620eeee3b7235da6379896f53af3e6067de3c3a5317aa2a49b7a
SHA512 3408daf7646913783537ad4b36b403c47b020051c6abdeb43385b920b55aaa52ef70bfbf2c256726e4bd3ef284fe3ad938129472c973bf0622addb198841a0e8

C:\Program Files\VideoLAN\VLC\plugins\codec\libaribsub_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 881a897e7e840e16e00dd3d9ecb36504
SHA1 3998b6a732d8ac32d098287260cae84e5027a04d
SHA256 4858831d91f7e5e5abbf4a44efb657585193d5ec8e9b6aa53aff332e577d6d6c
SHA512 e2c5b9179603955207eec5685609e3898e776d6d79d7fd44d957c1f1ca69e72d2c9bdbf46a0899fa26ee01a5304343a3ba1d9ddb9e656e235bd56efdb5c99dc6

C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libmad_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 fbd07ff2f1921136c0bb07b83fd3d866
SHA1 e87447814abeab47b33f509764d47607614027f2
SHA256 9edffa07eefbb1000f4a881c25e2cffa0054bec5f56d8884832eafa49be54a6f
SHA512 2429823cf0e6fd8d557435660dc5daf54928619ffe8b4bc783c86aae9f3fdc73f78ef36d468d51bd7df9ba4fe1125439c55f5a86db170e913bb128d4a4b211e7

C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_shout_plugin.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 b7c37cfe632bf9c5251fbf32e243b184
SHA1 0e0993909ff886df9f50ce0ff20a00506cc13503
SHA256 86de33ec4525d3a5a9787c44bde110ac3c397feba78cda0bdf837daade0a8686
SHA512 729ec369cf7df84fd7ba4d79b3eea41a94f860bbf1b68410aa13a9ddb8d1670fae28f6aa7aea70532e9f64649dc8351f4ad5526e284421888b446bcd29898444

C:\Program Files\VideoLAN\VLC\plugins\plugins.dat.(MJ-TJ9302618457)([email protected]).zxc

MD5 ab1537591190f2ad0691a387bfa82dc3
SHA1 aafb5d5dee8f8b39da088ba56552a31ce7662d05
SHA256 c3596cb7e26491799e7c8a7721295543b1362ed2354cd70326d7dcf5383c9676
SHA512 6886c0a2201ae98fd981fbf0b6509203490fa37c0312b515fd8ad8793d6b82d65e901e4ead514c68a10751170a60fcd44d210068067ddfd3a7149f125bc90f8f

C:\Program Files\VideoLAN\VLC\locale\zh_CN\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 c95e1afe65204513328e71447e849eb9
SHA1 750a5559b51bac86585e69b92433fb7e47c17582
SHA256 b6af2fe31656ebab962f12591098b31b4d28e8fd3975ba4539da9a397c0cf9d2
SHA512 2e4f3b04289d73169c906eef4009761dff98b9b43f3b45a897a7b26f914a316518f33b719b793d5ce38e73e6a4615faa9cc94accedb05cb54b7c43641ddf5adb

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.core_0.10.100.v20140424-2042.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 b6895c47e97a45103a4be6c934bf6d23
SHA1 ca5b0cc9949a7dc9486ec45f882d978f7f288548
SHA256 581442b0409e231f3bfc47fe01e5a1881e690d6c9170acf637c4cf8650b587f3
SHA512 8f01507e9c59a4e99111640d917da2097195dedd1f1f21bb532fdc72070beb3859ebb5bf0ff380600210ef8fe5ea4c918ee751566a8f49f92bbd030b324effc0

C:\Program Files\VideoLAN\VLC\lua\http\js\jquery.jstree.js.(MJ-TJ9302618457)([email protected]).zxc

MD5 8c4d155f7e9d3c5d444765992fd77d55
SHA1 7d8b20b204f51b3da13216fa8ecabb66bff01ee6
SHA256 ca0d07aff419eae9ad5f76fffab4d2841c7ba7a3dd1ba69022c17ae13a79cb06
SHA512 abab60c0a15e674a91d81abd3029cc2995910391e510335bc87b8230d27727c96f4fdbbf1073bccead3ed8f444647f8043eaf0505833b0708da17d96c11a063a

C:\Program Files\VideoLAN\VLC\locale\zh_TW\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 3454adc8c9f0d704da490103fd9f5f52
SHA1 6e887458e001510c010f3ac331d90848167dcc2d
SHA256 7e974914c5b3b302bc538402fbd39b94cfd0856b01f3ac0a043b66f375ae6296
SHA512 2c983e51eeb8baaaedabd259e889fe551bd31507990e1d6f3ad0de5c9050767b0ccaa4a61868d05b1a1785ea7f6bf1b6c405bf0d8a7c7b0933639d8a838c6186

C:\Program Files\VideoLAN\VLC\locale\th\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 1f1cfd544527c5b279ed658914bea4b0
SHA1 dd9623ab375a4aa32284f4aaca4d09b08f52bf54
SHA256 2b8dc07b755da49810f576e87626dfe1612144b9ebfbacb1222c9a94c3e55ac0
SHA512 521339226efc52bcc0a7e9fe70fbea28cabc9d86c4beca66abead321e2c06ec6e5776503301e58ef69b8fdef8c938946bb0d00877d76e24c85ed70cd5ef36ca9

C:\Program Files\VideoLAN\VLC\locale\sv\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 5aa2209d02b44d1af77e6ab17b35a571
SHA1 63d6bb7e92fba7021e7e6fca977f2cae1ae7a6e2
SHA256 c65747ad20b1585bec7ccf5b247e6d0d608efd46badf627a5b37d7584402f28d
SHA512 90ef455ae8fb68d135c6be8279158d641aad4836eea7b4216e5193bd6cb183b96be605037ffc4e52891fa6293de1c33d9c67730ae35b12b900fe45de46c4038e

C:\Program Files\VideoLAN\VLC\locale\sr\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 b7aaf981a54a84b35c83d3b257e06f80
SHA1 d06c55b1e3a7a48e2e7fe27130ce71ce34faa4ae
SHA256 642f6a84911adf5d4feaa9669cb28b5c3c85407e45460be81a60c16647dde527
SHA512 c376a29963ac8963842dbdfda672c325b76c7ead42dbfb06f50c2a4ad6161db34b0b5fcedaf186fead7857244e40155ab9a1ab20dc8858247ee5c5c24cfb830d

C:\Program Files\VideoLAN\VLC\locale\lt\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 c1aaf51777e48d264af61ca6e030ea12
SHA1 d9785e388f7c084e63106711d3533ca97c422bc7
SHA256 e42a1d7164e049334a73d085eac7cde6b3ce4b1539c8e898361e6e9a8e818a65
SHA512 02848c0e420145ba95539cff0227fa0b880546f063eee78d8c31a7e6fdd5311d21c302e0f78119e7379996f1918f9668b71f9f88d1b69fe1500d591ff7e1fec2

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding_1.4.2.v20140729-1044.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 e55622597ea4d10e1d8e89abc9bc0f08
SHA1 61960e608e70da26ce8297c2fe0f7d116b29239d
SHA256 dec5f1fbd076160c5e63590eed98d483d28e058457df66858603958a62006806
SHA512 b825b1d3510461d0c9baee8337611ff0c1a7656becbc6ad2933eed9767cbc1398463cdaddbcfa0deab0cfeb9b50b6b570817ad19276e45cc042d922c4ea53275

C:\Program Files\VideoLAN\VLC\locale\oc\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 f768fda07edb87644543ddd9b9e7babd
SHA1 f97beb5bce297f97ec93f19b0122e8aff91e37d6
SHA256 fd900cc66367864d94c5613a8eb7f0adbbbae30bb94a8b357bfc945dfd343d12
SHA512 f8d2ca657abd41ffe4309380415daa25d0c0a1c2df3e18778f05268513b9e1ba2e00c34001934ea70806a914ded1912654228ca37fceef4f08e463e7d07aeced

C:\Program Files\VideoLAN\VLC\locale\si\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 0fc41bc656ec4d5f05d6d785e0e63dea
SHA1 a2408c771e369207ee9d0b573fdc5e5a464021ee
SHA256 09a397823b492db92f52cd0c22cac7db16b27810ff7b10e053d2bc312943270f
SHA512 6b79f8bae042bc5df5081767d9852cb26d74c390be55c0a1d502e70ad0b6f72a1b85374192991718a1c97a161b42a8f34da8b79f42cb1154cbfb03ef9de4b6b6

C:\Program Files\VideoLAN\VLC\locale\pa\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 04af6721557088d4cc928b8d1d17e827
SHA1 3c8ec393143c1cd31a82687eac5ab9832e4cd132
SHA256 e0e34b5e4ace696a5814a7be55ca241403fcd5bf863d5cce14a97fed63414af7
SHA512 04ae24564467cc3ad612df71339c9fc98b3155eb55f33ee226e47d8b2b93136b344c6477189c6a94d529ac78018e733e1ff0e2c95a835c087e4f770880993a46

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.observable_1.4.1.v20140210-1835.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 4244ffa7fd62e0cf4810bcc7db90c379
SHA1 d677ece301d445e47a0a3f84e5cffdd20a057e5e
SHA256 cc5025972a5a3c497a2ecdcafb194f2741b136387ea070e1114c1af064a5816c
SHA512 c1ce4d14dbde2f76e3e10e46528ffe2cc4858d5f19eadd50a0d244d5caa2b7a144af3900537bd8bc975965e9973323488a5deb4b683a7416395098b1405fb96e

C:\Program Files\VideoLAN\VLC\locale\wa\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 59579d96e07fc7a691025f799b065016
SHA1 a605a499c03734e3bda4f8dbb41f548859231c92
SHA256 6d97be539a671563613f5e5453085bd0671d16a965ce35686a044a777e202a34
SHA512 5c5bb70c9fd1ff4a2252a192753feff426ac0caed67c39bdd0de000b25a2f010037f1df5190783e0cff96da0cbfb415d1ad4c0b22cb1aa88837ec74c2dbe176d

C:\Program Files\VideoLAN\VLC\locale\ne\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 3b412982fb9bd6a770751763a4629ff4
SHA1 7317dcbec6d985ac0e3572be28e63057d97e0daf
SHA256 c926f0b9c7ea518c4a23a44a427aa4af61933891ed87df304384d9cad7e3def0
SHA512 b74de050363a424b151f0a88e121342957cd4d77f45c6cd2211d2f4ea8a49a39191de6ab506bdcb93fdcc3db4de4130660ba38ed14cf68398acd445a22e654e3

C:\Program Files\VideoLAN\VLC\locale\ms\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 3cd4e0a545a5a4a7902ca83ce334bdd2
SHA1 3c753518dcd8bdd71e835a244232fc71b2ab30d3
SHA256 ea847a9af7ff2e97146ff8ffe2a802f3cc39c7fa2ec5bb251cdd05572da2d537
SHA512 efec7cd3336a5ec11d0bf52bc4b4428d6cd01f781414e33de77927419418b17561575ee4de3f860397011d280bfd833b84b18d150266eb88fb26476e81dfcc6e

C:\Program Files\VideoLAN\VLC\locale\nn\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 1219d02e9837cf2f6915ba865faee0c8
SHA1 3cf3a596eab74f8dc9d306dbc7383ac084f7ca5f
SHA256 6f86dd08a199a1978f31ab91f0baf43667b418d57a00e4145fc819912e1ad2f5
SHA512 7ebf1cdb32d8248cc013d6535960494ee43266276a7a381060eef6f70f0ffa21db250917ae5ba6ce624d7346d1a69d3627e82a1d9535c27a54776ae0d5daa763

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.httpcomponents.httpcore_4.2.5.v201311072007.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 cb65ce85416413e3265562436ec87503
SHA1 b5713eaf3c37e6be28afd2ae1b42dd1d0d3a1f83
SHA256 6467eb527ab1e9166d1a46d7b878d2eaae5c61f7e073e33c774606f66e6d7ea7
SHA512 4448a024b8c998e88df17eeb0975e29cd5c97d30e7c43263c04862763e1c23cf53f165af71c62a0ee01ce4b1c8301cddcc08febdb105e499cca326237284af80

C:\Program Files\VideoLAN\VLC\locale\ka\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 bf3bf1f5762377e5a41303cc516e2499
SHA1 a7ea86cafef10530dc605c4c7649ced057293a8d
SHA256 f1f13b327089a396af7e1d614dc941622296e1f582ff1cb2c414c222eb446c10
SHA512 8c2aa2f763fd1dfa0d552a60065075e784eb0ae74aeeafc7c495a956001a127356210691f0201d0da995d598dbd3aec5bbc2e3abb2720deaa416c4605b4d83f3

C:\Program Files\VideoLAN\VLC\locale\hr\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 c7eee2d0dabdda645a76e0d742fefdb3
SHA1 8308650ccbf23a7eee55b473ead5b9777673362b
SHA256 4a83980d2c2e05d28f1ad34e9c1bb45d5e8ad4ae67f2ee23de6586130a0e320e
SHA512 7c3d2fce007cf4858a7f81ba41cf56e71539fe84c8ade743a8c7b9911404470ca5084ff990c07c5fbe1362caff6f3fa67ac4880971a8097413f0e026def28f95

C:\Program Files\VideoLAN\VLC\locale\he\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 bf79939e2c5b44bfcbc8f8ef8f588201
SHA1 b2b1c7393201358b085e6596b1268d6294890603
SHA256 ad4f98d6082cd8f6f50bcabccb1d100a1a2188bbe80765558115ce8d626aef37
SHA512 a24d837f795c312a9d5e78b3dbec2c70deb38b55bf8a79893c84c674c8594ce08f5a66ce5a78ea53848b2208eb68364478990d70ffde8d60af580dfa39d14b0d

C:\Program Files\VideoLAN\VLC\locale\ml\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 a63eadf0379a9639b601c9dea8e4c263
SHA1 75d2dca259b1895ce07cd740358baa1d378230ad
SHA256 8328e5db8bf54aabdf528feb362d05e456d00e6dbc7ed8e1a1ad2231aea515d0
SHA512 4698fb9389db83f35cdf3e7f0406cce5576cf2c9356f11bdfcd04f1a06e0565d6ce1d69c7c80c545bec6cfeb4dee14eee1670ad89f46f7016a3242e498019301

C:\Program Files\VideoLAN\VLC\locale\is\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 6ab321e46fb0b668029453965cb4b2f2
SHA1 0fe0fe656cb13fd0ad5a71c7838dc6ac60a9b409
SHA256 3587ed20390c6d2122ed8dbd93fd2831f751adbd6bdcdb4bb3e64dd9275c5280
SHA512 14b22c93c7b2aefaee5c2dc9ef25b05617de257b52246ffff4a045906f5f25283b0145b18ccf38b2477ea24800b9bf3a740666872827c2d44fff9ca1a8f12ef8

C:\Program Files\VideoLAN\VLC\locale\id\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 8961709fe27358a548f454b2848b455c
SHA1 97e1c2464889d8631c4bcfa4b7eb3ba2e9756afb
SHA256 af51e67f71a15f4cb4aa4d449130fbd302f7df3bf2c392cf052c5dbba391ddb0
SHA512 af3f3427023732e63f585c5ff10033e4108b669e785fe0b1c48838dd71e38554f1d0f4eba9fe45b5cdd21dbbe79323cd4567f4cab5b2417a7955d63def11464b

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.commons.codec_1.6.0.v201305230611.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 abcf101cbad73ddc23e212b0fff2381d
SHA1 73471df62563fd1aa927e1e93fca92e665f2aeca
SHA256 f88c8e054a278a97f8faf373c77fc5e02dae77ae2e77b32c168f72a97917b662
SHA512 d78a6688a91f10562b57092b33b38961a51de0b764fbe970bd3e8a94cd5657abc781f1ee41db509be784502cd089146c797c1e245ea316bd6be024b3f5e5bdf0

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.batik.util.gui_1.7.0.v200903091627.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 9965192759dfca207f0322b438ce5eae
SHA1 bd8958d8cfd4afdf75595cebc9345548fd317873
SHA256 c8f1750e590d2e05570f668413c3a3b3b37c1c7cf59b9e5a097c79f55cfb3e6e
SHA512 3e842b8d6fa1ffb7b431c9f7ffb07cd593f9605bc7ebeb9bbcd8897952f11fd84d9135128b56be799008801387854b683c3d2adcad6ac66c8c40a5263bf57655

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.xml_1.3.4.v201005080400.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 2da1f3d7c524cc346599544044168da2
SHA1 7b765525c1def4e3f52d222ca45870fd96f40ad7
SHA256 d91c0a4e3bcdea26d85f3c13294aabda659ccfac34bf608e5ab428e04fb9c5c6
SHA512 b811f17fbca1bfbf422d4e1aacb687c56569dde020365f79044fc51e4b4fe7cace9f6fef484bceab702ae03b252051020136d0236ff1a4bb0cbbd7152cde091f

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.servlet_3.0.0.v201112011016.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 02adee1dfebe22bf22cf7fc76b54d12a
SHA1 748fa69de1febdf1b74ab4067a48fd786467dfed
SHA256 921a07c2fe6db25da0656bbc0f8a8b610917dfa138a00cea6c8de911c2f02bf2
SHA512 e5e164f09b11ab19c0aca38efe4e9b2543818c6f9cc17ec1224e4cc39944aaa335adbe628ad57b018c0dd8c0a18c6eab9828821feb1e0780de05a91d4f9b7679

C:\Program Files\VideoLAN\VLC\locale\gd\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 8b9bf26157d6eaadea3eef514e5bc76d
SHA1 02703ef02d9a229b8edc40375cde46c747cdb1b6
SHA256 184d129e556eb55fbd9db3280a89c7659b1542b7eb596c22939bbef0b76d7a94
SHA512 57ad73aefa7eb6449033e90571a1785bd4ee1e1cb590cc3fb83b56e4311d9221be47608750f39abcea314393fb5bb7b019e31f9b78d35974278d5fb1394fb53d

C:\Program Files\VideoLAN\VLC\locale\ga\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 d54a7930998fe0139cf14f384b1ef7b6
SHA1 ee0fb424e383123768580dcf09c34915aaca3ce0
SHA256 e857af6b090f782e530992afa0163ec7ceef6bf2cdf178935c3e939e4c7bc39b
SHA512 5ec524bbdc379c1baddff35a88e6c91ab73833bb956d9672267f833cd84982bd85cff638a77a81009e479e1c2cb24a31462ca230392aeab5a79f868fb7eed84e

C:\Program Files\VideoLAN\VLC\locale\kk\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 20f8aefc4915111ac7b52068a2616288
SHA1 7a960fef8a3ca1c2e1e02491ce066f023fdf30f4
SHA256 1b26ac1f28cc565301ca5e813af2476d82de977d4064c8ba42872ea492ca7ca6
SHA512 3d75a01d3a2fea3baefbe4c7817c15846c90ce2052626af694281a136b3b6c993ac0931b1ec83cf1ddc76b03df70bd2ebdd7a592a74d0ed76c12a04caa1d8c0f

C:\Program Files\VideoLAN\VLC\locale\fur\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 dfc25eefba562e6ca7d45134b8f77279
SHA1 b90b9121c37df3ca70c225f9376f2124c7242af1
SHA256 ded72139b13a6fa076aecb7b8567ec2f60070f7398b183305542c6d5c8cb5335
SHA512 44c37dc386f1451fc06a223412017cb14b9b3c527abf0e31d6577c3e055fdfa05820cccfd7c49412703dedc09977409571b28272dab4b83d45fd474710f896a6

C:\Program Files\VideoLAN\VLC\locale\hi\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 5ac36aaf5c304214d12c92d1a47a0fdf
SHA1 72b1cf5d472cf5ad1ea32d779c3d0100dd97bfc4
SHA256 551723edec106f18ff55ba9ac4cb39dd7fcb15e58f92e41f132fbf1c571ffe74
SHA512 2448fb167c4e841da49b7304b1b75784ed550ddf1cbeaa78364bda708420246311da3ffb7cc7f120dabee08053e1e95d7129717f31e8d7704554af15b490f893

C:\Program Files\VideoLAN\VLC\locale\et\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 9f25ba69a27b062df7b6bb11a73553bd
SHA1 4b8b9062dfcd117e394f9c682a95e92688689c15
SHA256 e03d28262060c6f89ba57c407ccec50df419948a8dbad694bcccaf36786b1964
SHA512 a5ad1062752637040912b8543041c68871574cc5c79f4b1ce1264c2856832bda5eb8a1c488374e1f43d3e2ce668b3e6d323a1a7f15a55b4df25797f6c3ca6d89

C:\Program Files\VideoLAN\VLC\locale\da\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 a1abe74a87b00647021ee746d868636b
SHA1 a8909541cfffb41b1a1243baeddabfd5b4454117
SHA256 b95eb04bfcc07801d82cd9602f7bd7cca1b59fa43e4964011ba22f3c14be59df
SHA512 1774efe3a100474116a78d468fd7f5c01c597e5f3a47b2e72cad03560ab9bb8d6bc257d20db4447619ebd8897b1c0ea5c3c48c91648b2dced7a6e7ca73ef9d62

C:\Program Files\VideoLAN\VLC\locale\ca@valencia\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 301c4f88b32f1804c40d77eb1d9c3ee9
SHA1 2f35390d7a5ab62679d355fca29cad2b05880421
SHA256 fcf16292ec36a583f194047319207ad69e29bba1ea13d499f521c8680c808594
SHA512 1c7d45240f75691461cceb3349ac94696452a256307d4eece96bbe18610066f19420fcd40030899e819b6beb9993b831014b1c78d5b0b5629e161ff30dca978d

C:\Program Files\VideoLAN\VLC\locale\cy\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 89c5f7ca4540f7cf19a28bf47a22a1a8
SHA1 b97ea916ef7b8195d4be315846215b3a78663260
SHA256 55596c6eac0730c4f61ae9fd0bac878c4a958cddc1411c90b39a63d17357f04f
SHA512 f855bfa3340d616029f13f0b6b1d2828a9c68538ea1e6d02e7175a1fc1b42919a9cb28b96102c4018bd6890c929d741f5f7861d50091fb0cbe186fe1205c39e5

C:\Program Files\VideoLAN\VLC\locale\as_IN\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 754e7ce9951f8066e076d01380bd902f
SHA1 69f114d6896eb2572a016583fd9c4f67c47a67a8
SHA256 2f89bfe11921be4c2cfc0b98d8ff0c5af61348acfd3e848b58c42430750dc58b
SHA512 fea531e978683d9c47f4713894db1946e0b9c12e192645b678f5a1b3eda42f960e308fa1a1f492704d23fe8e4bdcaab9fc829689acc0801d1a21ca2eff64102d

C:\Program Files\VideoLAN\VLC\locale\co\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 a4949ff3cf59398dfeb8241ba37720a1
SHA1 f7e2eb1b799eae237c32a4c27c0c22b44771fce4
SHA256 c31263638048fd3292c63535cc4b1dbe797f3f34cc6b716e1e1cac08fd68c0e2
SHA512 0711d5671687c24300a0654c7ee89607558d8d70f53706757d1067b06d03dbfe7bcf3dcc47a21cc853bdabffdc715576dfc21da9f8ae7c8519f3535faef9766c

C:\Program Files\VideoLAN\VLC\locale\bg\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 b8d466bd655c0be673b0961c1235cdf6
SHA1 fe6b8abfc15189d83e17b1a4ac6709513b2b9818
SHA256 fba97966bfa634f2e89a28d9227d8af0ca38f735f14978674df2a4821fba43a1
SHA512 07c9f31524b983b8c8db4d056aeb5bcae4880c7b42f8a2e6274a4e54c7e535f485bc7b7d5da30022407f972d6913a72ab554afafa2e386d31e87ef4c805199b7

C:\Program Files\VideoLAN\VLC\locale\bs\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 80efcb5dd400f9fc4255685209cd6120
SHA1 a05df05c915a9df75eea67cce1a751fdc9536868
SHA256 0bb0fdc290e82ab5b0fd50d180c92ccc2267061b29d66931e0ab06f2c9dc7853
SHA512 3d793f0166ab3b7aa149398151b46821a15dc3c228cc25661003a80a2d1d97797c71a88f6ad2e32068eee2f61c7e608db2cb2f38448a45ba949bae3d96cf1081

C:\Program Files\VideoLAN\VLC\locale\an\LC_MESSAGES\vlc.mo.(MJ-TJ9302618457)([email protected]).zxc

MD5 8bb730e3c4e6384a17521d3aa71a1554
SHA1 0c7d1d86d63b9b053c79a4e2b728a70c54f73a63
SHA256 d2028b1e09e652b727d0504d78100f02e269655bbfb5f1411cd0602e151d4b89
SHA512 62de83b46e0e5da309d85f73f1d5d69b231bd4d3f04a89092c59e9c233d68a9986cd791c34cd9a8587f66ab0a5c2ab321b2875437233ab5471f91603b696985e

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.ui.ja_5.5.0.165303.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 cb89c054c76ebc69d4a14194da77e0b5
SHA1 c7932b52cd8260f3662ca953e11beb6efba8a4c2
SHA256 6cce04031caa9f5e155498520051ca32ffc52ce30b43faf7726cab683486a5be
SHA512 1edb9462a6a8116803f58f2bc622c5593019092d5df1520b352e8ce4848d82b9f731163cccf1a5fdc9aa255ac2a149ec19f30eb1d00426e70aa9986d621285b0

C:\Program Files\Mozilla Firefox\osclientcerts.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 dcfb12264864dac2d03254e2729f17a7
SHA1 f8913281eb9c212efd179dd2c629d34ea6d58b85
SHA256 b30cd0d436a2ea5788d42babe49087e235b0ec775f21c446f1942604347bf034
SHA512 1cd8b69bf9a708cb88ef04ad387b20adcbbc13788043c22e54d7fa9ddfd5d320f04c2668c75469dab47a8aa6661d43388212f68ad2fbd227997c7e4bae0e1d23

C:\Program Files\Mozilla Firefox\msvcp140.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 3f4d2c71e5de267b3e174e657b79825d
SHA1 ff535e3d3ed38965e264ff1c04e04dc27b5ded07
SHA256 2bdbb086d1750fd1c745d69b059154bcc875940df61d7a3ca5017bb09f36d538
SHA512 5cb6b7b4f5c4515e1f1bac230b0a6279f01825d81d66b5d7a71339ae7cd6bda6b08393235e9a861c5cd038b5f9f9ea870329b4290f3e9988515abd54251d6626

C:\Program Files\Mozilla Firefox\browser\features\[email protected].(MJ-TJ9302618457)([email protected]).zxc

MD5 6bb0dc67582ff5ebab8f2b547fca2b3b
SHA1 3823117c11a4c84df2dc9bb579fd69d12f26dc27
SHA256 104dfdd7fe48dad8c1fc72c5095cf80bd51a78861f0c9f07e6e8f38f9f61a199
SHA512 fd8508a170c063f9d8d18488f20f308ad07ab46de12b0547797da4d8ac07992770ead7ee8695182ce008c8cc0e13b04981c86c7f74cc4f5787da027d246e8fab

C:\Program Files\Mozilla Firefox\nssckbi.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 7580b2948c177abeb5c5bfe6a63bd6e9
SHA1 b1f22fa3f5e3061f7b6189f9e32b774b47e8f739
SHA256 f71c38873d8c206d8da322622eb00b0c3637cc75058e18bd580d2df3465117c1
SHA512 edd3d5ba9cd4e6863b56b8bbae3ad7ae406ba67adf67803777bbccaa3d80ea5246717515ef43790cb1607f95777385f3d78dbde7a27e802dd200b0961a1a9610

C:\Program Files\Mozilla Firefox\browser\omni.ja.(MJ-TJ9302618457)([email protected]).zxc

MD5 b32a6f63c1033d1fb71a9653efabd06d
SHA1 820ac717deac0fa4b7b2503be13b5f08f070375c
SHA256 75a2c9a5094c0b8252f0cc5607dd46c317c34b67f2e6ec4edae21eae02b09cc4
SHA512 c6ae17626a961f11e20648d22d609fb423c9883cce1f56736649dba00ff8fef815990ac9d351f8c0e6885565e586b15d1d79676328b12fa9b911f499c21fdf68

C:\Program Files\Mozilla Firefox\omni.ja.(MJ-TJ9302618457)([email protected]).zxc

MD5 910f5eb41d6ff069fe5c7edd3330e509
SHA1 5ea4fc773ab45cd1a1335b1d6fa93415d80f5bdb
SHA256 15edaaef766e6f4ffbba019c63a19652df6b1658f8724a8fc6e2fd835af2e2de
SHA512 63c14250f9f7ef478de2a4c4abd91407f2772f8d909e363aca0a41444f79d3129718fad188d67418c4cf1fc4544dbb45fd8f6e20d51cdb8a3a3574cb716c8fa1

C:\Program Files\Mozilla Firefox\mozavutil.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 1683cd7c471612f4df47f2db3102d2ae
SHA1 88da8ba8e6fec22bdb7123f412321749dc156383
SHA256 ca67c8623fbba2f8cb9c5506c21b4e5f45533b228bef5c3b947f2be0fcf34df3
SHA512 bf1169d83c93bda58992ed7fcc4bed467a9c17b65cb211f59508bb58527a030bb308855e68c8776dd88e09cdf3d57c00cb90610bde8269916ba54d42e0e45434

C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 8221660d985ecba6acba95d50960c9ef
SHA1 263a5cab9c05ac6a4b7f5e58b370d3b47c8f63a5
SHA256 5c2e2c219c1eccbe56d1ad509b22a043a3d41dd4a920b7e5aba2fdc74f28d773
SHA512 8d4b44004e2ce17d8b49ec1850741e4d7019a2b0717ff4a3005f6d587de10711cb810b261147f7fbd8099c2285bcd671a3e82e693e4a4f0094c5c5d596848c58

C:\Program Files\Mozilla Firefox\mozwer.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 a48f6d2a881212aad9aadb1dc60fc365
SHA1 2cc27b0c91d7a46f80bf9a5d57e91b2c72163d32
SHA256 f57d6a1d29f0b2eb9ecd634c858134a3d99d7afdd9d2af555607e16c3b922a84
SHA512 6951d964d871bb9f44108419168756c6267802b7da4ff31d5f7cf2b10a6737248b28521e45b1fb98c3381611b07e02863ba8f960f5d41ebd7ed6e30f59dcd131

C:\Program Files\Mozilla Firefox\crashreporter.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 3ccac840f2c5a673ae915a20504bf9a4
SHA1 9c3380b6c3a6529ad387a39dc3e98d59fcfe5709
SHA256 e66c3812364e03cfb446da4873a55c86172d7332e5b6b5a0d30546c601ccc9d9
SHA512 d84450beb0cc5aa2a88c329f8c9539a1b9ae427438f5ce8f80eb12fd0fd1a36a5eea4d8c5ac0f3d348e28134dd612007fcf40dbc3c947414b1153841ea75996c

C:\Program Files\Microsoft Office\Office14\ONFILTER.DLL.(MJ-TJ9302618457)([email protected]).zxc

MD5 f30522ec3346eb0d574f8ffc4db9273f
SHA1 06c7e4dd624d933799d6f4f0f194f141f2ecc663
SHA256 02399e2f1083c2fe028fce8b6a61c038c4b26d4ef7e71e48d5e93556861ee2d7
SHA512 48c16750a2d4ca50e9d5f7dd7e05a287e46e2dbb1f82c6ad54718c232e43454de26be466e22f20fda15928267e244e4dc3ef9ef25c64a219ead4ff0ed471016a

C:\Program Files\Microsoft Games\Mahjong\Mahjong.exe

MD5 944c52df888d8e3e815b3da7a7ba694b
SHA1 231a1dec83f5c9f6468701507fa9d59b56124d29
SHA256 c09f7593119e62693c5dd0863f8cf649770c2f335bfc9ac8f32c0a77355672e6
SHA512 2d3fa8dcd85709d0b2e968f7d782b5084970b56ddc611ab843ad804ade4d344195b1f57a5e544b387a71073c6f31670f5c87b1371a4f5814ea193ac51c48ff6f

C:\Program Files\Java\jre7\lib\alt-rt.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 bbb7c32b24f5519d35d0bf5a3f254701
SHA1 77f21e78254bff22d966766aa412813c7d9042f0
SHA256 d25666b5431a780d5073cebd9cd91b4fe413d949794cc8f70bd86277a4edb2dd
SHA512 d33bfc5e1a3b8972f8996bf45e85eebaf26da4a27876e2c60283c1e3b5823f757c3f91a4d714739678ae3da04bf06eb8e76d51f1dde0c7add2ea399912e0e94c

C:\Program Files\Java\jre7\lib\rt.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 3c1cdae5973b89f7937f84e802094d9e
SHA1 f8c13d72cdcce5cc1bfb00953d5b722a9c2900f5
SHA256 caa212ca135e1f3c4c16015ab8c63c0e0603350eff3c26522f6418cc785aacdb
SHA512 ef7070dae86c3bdc77258d59ff6966b3c74f9f90ab6b76de3b2582cf5a5e54777d5468de6b8891f6082c2390c74ab257be298035961a80915ce662a5f1270dda

C:\Program Files\Java\jre7\lib\jsse.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 c680d22773c8c8bf932e9a970b007078
SHA1 35d9b1df5da896e22b399966b55c11af62121d66
SHA256 9c69380312613be22e48d6edc6d9aa511d3d67ed48090114b10a0184f932652d
SHA512 9c0d67abe5248a73614386b1b29a53680c90fec0ace67f560c76e8ec16d9863ab925d9ed5e42a81f90fbf359fa3bee3816d8dffae33a00ef04b29d16cfb9afbf

C:\Program Files\Java\jre7\lib\jfr.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 f47400b987ca10bd24d0832594514b6d
SHA1 25c0c576ae5176b45a71462fe9e618b8c9eef037
SHA256 66c3b4137ce92ebd3a8fc2628018982149b6d0ca0897c022cf076acc149586fe
SHA512 10f3a0901634695922342457d69925b805788a4220695e77b4a41fec591a843db7635352a58b31b8d249f4ccd07ddfaad9f29bbbbca3038f1f8c1e28ff72e56b

C:\Program Files\Java\jre7\lib\charsets.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 5b88cb475bb3d594214670831840f572
SHA1 a9a564600eb6b131ac5d32bf5b31a17445d82e58
SHA256 8be5cda03ddb0dd0444bc9f540229b76c54e71779793deed7cb01aec975af3fd
SHA512 96fc0182fa1e900303b8952e0bfa9c0962980eb9f3a1a1374ae2232bb54305cad5031c216e7f401f7ad70c9665d172e001d141f947fbe9f96606e9462d9bb2c6

C:\Program Files\Java\jre7\bin\plugin2\msvcr100.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 3ca2d61ec3ca5cd8ce153faa1486b1df
SHA1 7700f4ec63db986b0520579b705948b3e7ede2f4
SHA256 d8dd4d96c60b7fb7ccefe2c2096971f14349430572fc6a093222fe13a486a56c
SHA512 ef64db31db04beb9ed81621a8d79beadace193db0ec3b47c7271084704aac0ba22e8b19442b9890617e0153c42d767d222a579f151a9e53dff805936d8fb5ed9

C:\Program Files\Java\jre7\bin\dtplugin\deployJava1.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 a53a4bd938da48409caac96fa3799bfe
SHA1 6e83522e81886186c3898206c449910e767453ca
SHA256 ac5e025d1c8241d8b8d29e76c0e6d2784f2f678c0f77efdd95323ee2cb6a2d28
SHA512 b47e86592825e8ddb6017a698177dbc3fea052431e35544f68492a6142c944b65141fa3aae3a1046e161784e2e96f9537a021b39213ad36ff07c1946d5fb4ba0

C:\Program Files\Java\jre7\bin\unpack200.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 d212f4bab264e51c0f6595053a4b3df2
SHA1 98e9c9b2ca326556f37a27e98f4ca52fc1722258
SHA256 cda257e8cc2204d81a4b61918862e091c51a1f2b4be630ecb4e969c9fae21993
SHA512 43fb4a8fbb3758bbfaeede3b225e0ca0c6cc805296b389df075cc3d256405c234e5d95ed1f1dac7f74f9ba7b17d1f63f81a6b91b1be3ca2edc6e6cc165f1a899

C:\Program Files\Java\jre7\bin\dtplugin\npdeployJava1.dll

MD5 9a359c1f87857a88a5b3dde2994b664f
SHA1 7eda65e3b516a50928bc4187e096f25a12bbbcfb
SHA256 76dd9d24fab35e95c81969329f7403eada6bea25e8c33a9048fed53faaaeb8b3
SHA512 5b2a0089accb620f01af417e127a93d3be9a495f0143f5b0a7063e73a0bc0a8e3e976cdb3e58693f1d978bcc9a0ce258f72a302052c72ed8f53ec979f7430e15

C:\Program Files\Java\jre7\bin\libxml2.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 82f3da97a53bdb277ee8eab02bc96510
SHA1 5a49739ec5d9bdeec9bedfac4859149b39fda2b5
SHA256 498aa5b70a159257a370f93ce118fc5e418c577059ddd6204b1dc1239d73e4ac
SHA512 4c8445f978bf50d5be7fe9bab64ed6c30b321d67433692e36f281f83cd10552fe719ef75e169f1daad1bc25916b3bc96feb9b0fce8ff2b48f348aa2ac884d088

C:\Program Files\Java\jre7\bin\jp2ssv.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 0c2077935ac44848182f6d7b0399cf8a
SHA1 2f87f7a8eda8f180d5e9e8ba43d1e1d5fe1f0173
SHA256 d30750f95981414d79e8dbf8d18b6ef408a8222dea26bcce9db8163d259773b5
SHA512 f468430c2ed17f377e6dccc89e3ec287898f8c9b4c73a9d21789587b87fb458d0a55d1cd3092bdc09a549b62056053a5dae0c4176f400948b75641a1bc50c256

C:\Program Files\Java\jre7\bin\jp2iexp.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 fa559d1b81b7226f2fc09cc09f484725
SHA1 ddf7e0549f19d8f6b5de5fc1aea03cd0f2523472
SHA256 5a3b0e92eb164a8fcb43d9e75a3986d03b7091cf0adcf7423cfb0f52496daa43
SHA512 ab150a71934803199d44d23d7517791337e06ef507630ca8bbda591afa7816713b39791934c12a96d119e94f15ad401e704d93fdebb75174b5d9596d191e2596

C:\Program Files\Java\jre7\bin\jdwp.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 d4d6d47eb03718fc82c331078ac9fa92
SHA1 9116e2c7581beeae96da3b97b60869f0d85be7e7
SHA256 0c13d05e475078211f71f682d5f767ebb09c21d6b1b88a6b947063c965d7cdc6
SHA512 4c1868659df2ed0ab572730d7df54234765f35f6ad552fa8113c5a1a2896a79cd36620c804d60436f06cf1a3265285e0500de31f437646ad8dd7b13409696c27

C:\Program Files\Java\jre7\bin\ssv.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 60ddc253d191ed4a79e0683dc88b7591
SHA1 216aa7a8e8fb190dea018f1c07a0949da00d93ac
SHA256 b766daab1b2fdbb8842232438592b3f0c713bc83bcc65ca87d093b8809072688
SHA512 e6e0df269efb951ade294ac4d71082700d0f1370a74446570a8d8a97e31575ddda2b7bc9905855b14e14e829f293d8e61d54418786dbd6ec3ee153c793b7e8a9

C:\Program Files\Java\jre7\bin\jfxwebkit.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 71325a0c8eae8676717830034c4b1ead
SHA1 8ee8762b59ddf3d2b19a0ac1849e80a36b695815
SHA256 e7425d3984736526eb2043687fc0f914fb8dfc7f31fdde5c189ca5ee7d206d68
SHA512 00882afba8a0eda645a246977aef1d53246171d63561f7277c34d87370733d52ad90fa926747ac17c5d097b60ba4649407c0440c1f3a76ee097beeb03c3a2dda

C:\Program Files\Java\jre7\bin\gstreamer-lite.dll

MD5 e48142f6809e6ceaa92d182702919eb1
SHA1 253a0c76815a52eda485e342398808819e44532c
SHA256 2b08b2f30fe1ea96a61f7c3b4c6883373856b5ed389c688edbd5c52acd5397eb
SHA512 7964e2f239718ebaac1526c21384c17e5fbb46ad0daba6e7a023ac736ba662c0c30ce2c318ed7e4e9f151daa206fdff2745a0579735a7a944e614b9d8801cc6c

C:\Program Files\Java\jre7\bin\fontmanager.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 4d309451045e19c348bb5986ebe607d0
SHA1 73870fad1b8f82b7008c9e487803f8d0c48b038b
SHA256 8cd574af4100ff673d55b18357d219440f0e72546d96175954b7d1a595381566
SHA512 b7e527d01b94c45a5f1d1eba2b1d92fc70769237306a2d9509903feb77b0e95d84cbe60c892ed98f73cfbd65c1dcba58645b6ccb587b7fc728be7456b167d9d7

C:\Program Files\Java\jre7\bin\awt.dll

MD5 55df8dabbd438a46cde009fa19e27603
SHA1 bc2b2f251eaa7618cea2e508e0fe339fa928dae2
SHA256 e3cbb7b16f341fa9bd959cf802d5c91fff70267a628bb770c1999290191356ea
SHA512 ddee9ca861146555aea92865ea8f33f674b1124a5593876a967f9f1546c18651025a7ede70203b358250096f9cbe3e414df8ba9f7c4227baaa6f6b4d262771e1

C:\Program Files\Java\jdk1.7.0_80\lib\ct.sym.(MJ-TJ9302618457)([email protected]).zxc

MD5 665eedca47e4be27c8ad20aa6e0b4683
SHA1 05cb4c3183905bb05a30a6597dbb4db237a4bdae
SHA256 48054bb3b337e0ca28c5b00bbac845ee0609e700fdc84384c3246bcdbac509e1
SHA512 3e2ae64e94af841bf3b55b10a099b6fb6703c2c4a856bf82ff1999b6df0f11c158627184df1092e4d1bfed4fb44c20ebb219544ae3291c35cc2d00cf95683c4b

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-lib-profiler-ui.jar

MD5 350639f7515b2248520307463765555f
SHA1 4e2def2248e3ee5881194f487315f164c4670d66
SHA256 74123770e7642b7a5e233f263588626379362af7f580f604f123d1b6fb46efbe
SHA512 f567017cfabc21dad50b2b9f499f62728529457d145034ea44086bcd86dc38aecba0a440962f1128ff0f81798ce06ba824d93b33a4c391bdd650e75c41678a9f

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-loaders.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 c5424efd33cb157e76ef0a893e8d08d5
SHA1 9ed5d312340a9aeb10135a0ee26c5bafac560a85
SHA256 96d14aca28c078ad5bfb0f3cb05e146c266ad8f35407838f3f191f9dc646285d
SHA512 0308672d0a332974e07ec3e8f04507459e2510cfc516831508e332c8b8203eed65ca7aa12eb48c0ae530240ae9c41db2e669132780bf0283f30d6f7b58c9c121

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-explorer.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 7fbeb86440cd6e708463d874239098b1
SHA1 c1ff57d7f07794e05ea639965eecb2de293baa86
SHA256 3ccde60c77ff10bfacd64b747fe98aba365dd835a1d8166c2add48d7d5ae1edc
SHA512 db8f061288e9fb014d995e9830dab669d8d5772a958253ad6c771ca341818ccc25861089c4bd2461523d597ee4410acdf371987f3d4644bba4d097de4c9acc13

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-dialogs.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 559fcd486624e9763b003bc23509b064
SHA1 4843232033558df338085b577f6c70d9eb1a889d
SHA256 efb56fe397d9f6394591499bfc824e8e4176b5af7f622af42c5418916c9fd55f
SHA512 164f026b17dacd3d0086ff886e2ad16a5e8586ad64a35ee0771cfd859667b929e29827ad0dc6c8abaefe95ebdcb37d2b49277665b343e5abe9fcb02dec7dbb30

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-awt.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 9c091229d63de187a17ee3b4fb3f3a86
SHA1 bfc435a28b4f336edbc336db7b390101786a43b6
SHA256 f70e134b39986a2724e4c2945bebd864c11d39b52ad71483bd57ede19b4a554a
SHA512 a26cd46bce38f8acf69f4a20aa91f5f2f43d97b2f2132e7e0dde00b6ab82ecc8fa465bee89bed6253c6ce18a58fa6d49f2a6a9c46178a07e4412956bbb17a1cf

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-actions.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 3122b389da0dd91e35397f18e4bfa95d
SHA1 a357142b7cfd0c6fe87080fb6bbe63a292222900
SHA256 ce38d437a4869c16fba0a33e4ad7df97fd01a20d3e5581e0788745d6c0e466af
SHA512 208e7047e1b801081cdb0455ff9b476389d2c2cda07c66984021b00843b963156ca221466e85de8d693545d05b6a3f7efcc607fc61b2df44444fa8317b6451a2

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-swing-plaf.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 f72a18687a349b0f8d0501cf339e3c43
SHA1 6caeed320b7241dfde2f0804c7125e01174cacce
SHA256 455873a65d4c20f00543170527467efcfd87c277ae8efc07ca9fc4ce2545ec06
SHA512 92f89838cc24d31789760b0262082c9682682d5ffab2fbe6f2b1149b9ce254e34e96b17e82e696a4c06ac737f477aa5aa10f1755214241bb9f3440e238912de1

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-swing-outline.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 3324a8f251863f6187b3abdc7082ff8f
SHA1 a53af80bb0e17a16ad9e9e46bb3c31196cf684f1
SHA256 138e70ecd32939e5cf054d720f97621e10ba8022521d0a810bb6a31b642961b6
SHA512 2d18c959dffa4a9e42bf440cb3cd064260d7464a912c6a8ba73579862836014a07947527c0648a2de498f6ace228d27c8d1164aebab4d3957bc485937b759835

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-windows.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 2aecbd0f241517e9c57d17e8c20bb64e
SHA1 1cd56a074491a343f1059ed78dc06fcefbdf01a6
SHA256 2f730ef0320e8a9e06882d20dc72c393a7eb8391fd38f3f27e6c019374f9474d
SHA512 57a0af571858d94620693cfb9d3d4d25244bebfa28fa9fafe846845688b37c6cb28dcf2a003d79fa55e2103667042cec7673f7074007916228346ad38d12538d

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-settings.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 0ba3cbc34cb8a50aec965b66d9ae1bd8
SHA1 705ad8dc90da1588dc306df45e6019f88a70ee14
SHA256 16ef98fa95f8a0aa7face311e6f998487f9b102c71e75c8436fb264760f6c3fc
SHA512 cfeb86d859f1d48d91fcd98f4298b32f5d2c194009df22af54b3fb6933bb9787dd2fd6dd0895d3009858d97bdfc30b4fcab203bc5a729da6566f972892e0d851

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-spi-quicksearch.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 a0d2cb078333648af992ff987e503b5c
SHA1 d783240181b7464b76eb29e58ac784dcb56c37ee
SHA256 456fda20866cf11e25f053c42c90736f32bbb7ce390182dab34770c89db197b8
SHA512 916ee20aacc8fdb8109fb21cb13ec0da24c14a2662310bd9acda600cebe9f19ac08ad1c97e52ab136151a193fd696f1434b5f2c54d955fa4f7a5c16a705c5d3d

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-print.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 52bc7706f3437f305338aee445064a11
SHA1 965920dbf8137ae4d991947315aa0765a05f702f
SHA256 5e7110c0a1be30659a9fa8876e0458cb5c52648374a64d93f4fd9d957c55ff30
SHA512 db66a9dbd2e8e529adb10fecc197c31bdd1086541b5e5db4956481cbc2ec8447d3534c778586c9f7090eaa680a142f13e43fc45a1f1de77c168aedead6e0b001

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-autoupdate-ui.jar

MD5 0f154263b339b1c45b8343f468830b07
SHA1 bec6cedbf635bbd8355c4e4220b105e8ff55b82d
SHA256 520ea43c62a3a9325183d82d34b41937f5523cfce66310f5893abe3caecf8fe1
SHA512 cacb5066951063c2813b57a2636192d2070ad9efe5b4b5e27866bc2033425888f5aa0bc89e3b66c9d2adfdff7d7a44ac6f4303e520c4d9ab16edd14b8425f3af

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-output2.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 e19342d5ca042138af4911eb43e62d87
SHA1 66911da949734c44ebd6bc3d05834ce237d8f447
SHA256 0cb8ca470bd81bc377f28df4521267396318cac40f5891c2a1ced6c3f3b46345
SHA512 714a2947187ef49ea879252640e1880f4d7dd2a39334bc9523d72d32e262c39622bbb0ec198a39631fe7558a2b09a02b31618fb744e397c0e929b288dd091a03

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-multiview.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 ec3c222d701498d3d0541237dc45d259
SHA1 0d99d97cbf684a2ccdfb8947410eb12b822d3daf
SHA256 b40a183376bf15909bf83c1e1606967538c75b3d94fcb7f070d2d22911461737
SHA512 f8a47af7367a8614223f51239ae70ecde92fa766fcea627d1ec02c71e4ed2afea9466418b9d5ef68da9f4a0c243f19a57e617cf00838004dacd856ffca006a19

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-multitabs.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 156c6c9c7245844d03a5a504324b1417
SHA1 25d39d59790375a2cb910cb85bb7cd1e9d6a0da5
SHA256 1980d2c1b6d85e20e9ffe7ab54a6524b1f1e050ad69308972cdd24b785772cc8
SHA512 fb85285f6f6fb410247a6c76d3fcce42ddee795d610d30835f20666ba7fbf089b3f1457ae8898635d32ae5846b4bf8d8e796bf2f0c1d6adfad66f80f5142de38

C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\boot.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 fa15725bba634218faeedd5c3a91d2b4
SHA1 ff80844d18ff79ffeb0c3e620e7d6aa2216698f7
SHA256 92351cf24b32186aecf195323747fad2b5e400b7e13f3f13f738ab7676aec9e9
SHA512 cbdc0398244b26031c725126410d523777a60e5a5d9f03613bb6f00ede49cff07af444194f9557be156efebb9db5f4df41d31c05d3562f64f216aa299451b229

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.sat4j.core_2.3.5.v201308161310.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 77b68306c08c62b887757cfba2ab52eb
SHA1 487bbfcb9bec785eafd6d061f7a60ed178baac98
SHA256 5a9d8c40d948635a2ba46c45a9a50b8842398259a6c8caba48c921abf5c53b5c
SHA512 8e03ad06996806f6b6656863943068cc73789dec13a77bd83284adc371ec1bac9f36c6d254757091b8128ad4a3089101066625f933fa67c503af063b144f087a

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.workbench_3.106.1.v20140827-1737.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 b4df73b748c2b92f6a70cf21bf815d69
SHA1 aeb0a26993c722f25b2f7d9a54ce7f19f01fb8b8
SHA256 e10fbec66a89de7e727078457e27f27f4510d1cbced86a1ff95861247fed6cb9
SHA512 693991d397a2c14d6ffd4c873619749039776a9a35d9e6c920fde8bc3ce4439f9d40db9a2dc13afdf5091d7c51f0aeac2a992b3f5987a17b13932379f5a1bf7d

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.intro_3.4.200.v20130326-1254.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 1c86f7983e3506b4042fa25cb8b53c21
SHA1 2ff75b1a345da10bb310d7a792cb6eb7bd1af22a
SHA256 2409b5034cc06700eced808f7b327d75111daf45d4eb4ae6ad2e57dd9232bfa2
SHA512 23b9dacd7c98f19e1ac0492c2dbb744ff251393f8f5d7d6ac8f9dd1c9fcf7fc54cb43cd72540045edb74993d19b0cf56c49dab0cd38491dd46089b9e2a235bab

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.forms_3.6.100.v20140422-1825.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 71c8ce57f23a670b91c596b98b7d6356
SHA1 225cc2bd70bf2850762bb9ccf6eb55df2a7d29de
SHA256 a3575343d33bc2929dc6f17a0d834ce211d3fc65ea75f3f625331466b3196c9e
SHA512 d3e8ebd513613c4e71cdc4e1d8caf5955f4070e1c3f82ce3f49b1fd8ca40789f5ed4a6cad1cdbf99b2c4d1bcb83f0027778e0ee006dd1c70f69359a3fe8f53f0

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi_3.10.1.v20140909-1633.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 e86517b96c27b0d481e81c5f77fd2f06
SHA1 f3d4a7c348eab3578a64504359a871a2f917fd05
SHA256 e36daa16516bd38e28b5f06df177f17bc2e2bc557db3019a3fa4b5793bebdec6
SHA512 a56f1c8cf1b0c57f8c286a0a3c993f8b36f5071e5eddc0b6769e91f84893317080f2198b7eb50bc1b98d5aa071559e5e212c49a730863bc28ae5065ee46a1d73

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.text_3.9.1.v20140827-1810.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 4e54d16bc7565ee9745fb93af1c2468a
SHA1 ff3594d3d1a7b45568e9039d2d830b24e9a357ce
SHA256 0cebcb71490d0921db73361a8c73f0e45011e2e2cec81bee7e1a19cd20ab9919
SHA512 4b87432eccf7f8af10b5f7152b45ab9db4ec8b442939279516ae66fb67720f7ad29be5a069765c401b6b053ac26316c6d8b4f55863af9c30e09bb7180c2c4ce5

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.util_8.1.14.v20131031.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 1f25005e4ee25edb08f26d6b663704cd
SHA1 d169dfa4818a33009cdab8c5eacf8c03c55a5a00
SHA256 6a325677183652d23e74505c6f5cf8c7e650fcb754b16b90ae8e53aeffbd284a
SHA512 4420619ae2368caa07d67a092932b126e6a70529bf877a65b83d14605aab9aedf3b40072fc6f2833c1f2aa95a084ebfa1fdcaaedcdd48d85fdb2239e512ec549

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.server_8.1.14.v20131031.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 a160e5b4a113b8d4e0d02b70f6370f0c
SHA1 57c550258adb5d2a08e6068dafbce5090ccdc50c
SHA256 2c3ae7c2a6db1915ec299d205fb7d57ec6e808090e6c472e3a3c1c3e381923d4
SHA512 f48e7424dd0be17fcc9781a62420a202bae501552e24163dd0636cd8e94cd35a12de6bf14e3513c22416fc6025a3fc870152dda9d91a6b8110a778ec1f9bbdbf

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.webapp_3.6.300.v20140407-1855.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 2746ab084c1f0dea9ae7e3922446e06e
SHA1 152b07c5a182007f3102ab70d690669abe94b6be
SHA256 f2eb4cbf380f1a47e309f8d11bf550e94c57e713ff0c5096e27d98a0951d49d8
SHA512 e986d59641caf5bb7ddef64a97136e76f9e812e30d3ccbebc2fd969dd5539f861b8edd890c3a8ee37a1bb9942ccc4948485511db6975bcf8e61827e5586b41f8

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.base_4.0.200.v20141007-2301.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 48aeebf3f83ec3eb4463495342f50209
SHA1 8af5814324c8b1a3f49671b32c7ae02a452650be
SHA256 f24031f0e215014c49fac171a117c6c2b3da9a1b7436ba8e961b4ea8555a1e38
SHA512 7a5bd6c0420f1105723603369a69ed94c9da9a25fbc75d50df341827f1d3a3ac01fd177d3debae50399ad62a61b7f62d74729b1035f6c2eee32781ab12db94ad

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata_2.2.0.v20131211-1531.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 4b3c376c20721e320f41fc77d0f85e32
SHA1 28f3ce0b77863e46811201f7ee9114803452152f
SHA256 eaaae42e7a5b6e4d1992b936176f9ded821201c2d0f16ed4275cff0ead7abd8f
SHA512 89313d90e08cb2b4e47e8407f97df8abe9e1b18957ccdef46efab38df205b496231e573b28e7be1e8fafb3dd136db71917ccb2f75e6ccfdc2d7fab202a0a8837

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.renderers.swt_0.12.1.v20140903-1023.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 898efa8a7eb364b6b60dcf52e78e6f0e
SHA1 0a817b136ae7484fa3801bff412465072ca5fa3b
SHA256 5efa4ed963a21a3fbfe27944b5d1375fbdc2ae0aa46a516c60703e98e9485da5
SHA512 5de5ef149752c5bab8281f240b3853545de7dff46ff962ce9acdbc6e4d7e90153cd76fa93862f56c7df4ed4c4fb77d625966471a9c8f0dd928d7b179d3ca0eca

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.model.workbench_1.1.0.v20140512-1820.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 e3f5e1fa87c8cf2d67cc77c0701b4f12
SHA1 00eb2fdfa93551f2986512332a3ca8d9bc038f32
SHA256 4090b7562765c4a14ef0989586fe8d4e7d6ac6e3afbe6430bd2f3e0f5a61edb5
SHA512 9ca4312c599a9e5b52da9da82fa62d0a3387c2c11b0ac33acb7bdb4c67dbe12e7909bffe564cbe8668cf19c49b068e2af118266b5919e6911c67ea8ceb19430e

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.resources_3.9.1.v20140825-1431.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 86cc5f6915564d1fce0a60da79f46b76
SHA1 86a9f50ea5fc73c1294b0061ca941592df26934a
SHA256 24d6f1eb8a6fbf18b8f530d8acce1bcb2f4d496e3fb5a5ea223342f3fe482077
SHA512 455800bf67a12d20f12a5c811783e0ec5c1ea518f83e2b4daaf50a0061c516a772d3ed5862fe4a1e0d976d1e1bf9ebc75d591f5f2b3ef079ab2f349211f03fa2

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\notification_plugin.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 b4383f4901055b54eead146a90544b27
SHA1 5661b5baf04a00f52f44647825a0b861cc28bd1b
SHA256 53b808700cedff44f88ee51d7eda42f6b16543803241b1e59476f02f04f381b6
SHA512 df4f25cf539aec5480291d0bbba2d12f4466684faa042f5706be9fff460f1668f95adedabb895f7a7adda1a4c90a7bc7ceb06d9aaefb3ba43ba859ae7d9f726e

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.lucene.core_3.5.0.v20120725-1805.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 5600bf2533ea29d1d327dad30ba93758
SHA1 a25424a0b6fd18af11f551f8455fe32d9656f23f
SHA256 3b5e76fcd3acd86805c2318e057da4bee145e84e1c53e438d41cb540884b1b40
SHA512 22c54d4a3b94f8946f1407f23f963ec463201705e6e6d7f1bc440b8c2ca2d3fc1fe1bb2f9ba375d62bf0c3cb40b67154da496b1cdcb89e3f3cc90dbe9daceca1

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.lucene.analysis_3.5.0.v20120725-1805.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 4e35d0754ead6d74a43e8435ff2fdc7c
SHA1 08086be73b33abbf68ac36a1cc91da635a039ba5
SHA256 d1f2004fbdc2f449e183128942050ad1706fbc7690a43c52f4dd6f3f6d5aa370
SHA512 6c1235fee5e60c4989ea9c5b967581bf2a02dfd3861fb83ee1fddf7c332c019a8a5f221775f2ec8fe7f549777f8556ee158229960267546e1d8068ee60cd2156

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.security.ui_1.1.200.v20130626-2037.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 3e2976c171ef05442e47c83720471aa0
SHA1 fe955b405fbb9da331cbf8004b5d573466ba46db
SHA256 60a860adaf9c87e70de73b525f74e661581b111ad5bab2aa2efb6e55f7853112
SHA512 1f244bbbcc8a54e6be65b5107c5a41fe19608023f187b89ff8a3bd871e490eeae6f4b3dbfc3cb262ef8d3d57d38fe368625bcb45f7867830cddd9e89fe0d2e20

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.registry_3.5.400.v20140428-1507.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 0383cbe8d509bc78cfeeab718fae9bbe
SHA1 b3e43cbf0b296c3364a54416863a8f1e2f81c908
SHA256 9421280d12124ac99c1b1cfdbb694a515453986a12f40ab9ddc6ceb3600812c6
SHA512 fecee652b6ab7dc1a699e2cec0200bb6b115d71590c3603df43ad0d5b7e11dc9138c871c437c57258d37249f2f20963c7a315d45256148fd0219f0b1033dc4a2

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui_2.3.0.v20140404-1657.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 8748fb68dc66899dc2953726af8f61fb
SHA1 42d7728553b34e34216b508635d0f85e228cc82e
SHA256 596b4c1d72d873e638b83e1098bf4849c1f6dbce58238141789f23b281c39b44
SHA512 9d238074972fd00371a21d20f3786a09ead2d22cdd62c5a822b665c8b5df3d06a535abbd691c76b046a92abbfdd7647827c6ce3ac442bd04e6318342db40dd5a

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.ui_4.0.100.v20140401-0608.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 0ad4fc1c6b8e8f5b13ccf31d0814bbd0
SHA1 8b9b8fdfb1c4cdb1a58a78f57d7473d31e769d01
SHA256 4a758254e287f497a99464ebd7d32269876aa8c6c12477f10b05ddf5a6f2e58e
SHA512 4877fbfac28d8361bf784b5be7b0fc813f23125598fa89f3838ce9148ee7f0f6e6e756a2b6cdd2972104ab8e3f3738008d581929a8f172369375440688eaed97

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.emf.ecore_2.10.1.v20140901-1043.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 c3db7e045515735ab1ac0aa1a43ad221
SHA1 e3b91aa7ab529fc6bb9e1f4e57be3e41ff02f2f4
SHA256 ae565b9ca76800eef3b0e46023a517c0b067d5abc84af52d66235b82e5c523e3
SHA512 19d6c67f0eaee6d3e512dedaf80d3a19819056699a371f8bd2ae2737f180626656268e40c7d4e8bf3d11e36ab05324cf9de7be0954027ec73c433cf46fe12003

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.batik.css_1.7.0.v201011041433.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 0dfad74d72112fc8a027f8ded1f999c3
SHA1 4a4cc8898e02db44d7fd2a53c7d2f2b725de498c
SHA256 3a8e04b241ab93f9e8d05171289768bb3ae4a2007aa3a76be24ba29945b2c3d4
SHA512 b83b98421d458ee4453c636e4d521612f5204b2c6ce6228a9475a73160a9da0e4d31ce5605d665d3b8a587b5a1420062b266a4702ff299cc06d448cd043552b2

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.swt_0.12.100.v20140530-1436.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 2b50fee8201fed00b24217da9efbd7dc
SHA1 ea237ebc966a36e26e24778d63ba75709f013337
SHA256 6d0b5a12d3ec41dc4944ced04c9dd787681eb78855cbe4f70415ecbaf8cf8cc0
SHA512 f73eab725b8937474003fb6bdd01184896b88dcab9c9ed5953186b95cfd8bf69e342dc58d1e4a01b5bcb2390ac1973658361e1ee816dd41aaefdedb90fe2ffa4

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.application_5.5.0.165303.jar

MD5 15a53145e9224863a49cadae75835098
SHA1 1994de91c983dc4166cce1f41e0ddbed5c232f60
SHA256 b9f2d46b522d63511549587fcdcdcf6870dd6f99c5891e574e98d81d5b256625
SHA512 c5d9af552b51070502d9bc189336086a31994355f45f05d2899d5a8443dc243841da4a374794a6105dce04a4dad3d5cb7f0879de75aa1bd6d75b38c106bbf1f1

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.jasper.glassfish_2.2.2.v201205150955.jar

MD5 226879a809aa56f393b0582d91c1e6b2
SHA1 63b64cfea245fffec3f3390855b99e51ff7ca7dc
SHA256 8fec2c624f82641148c2fdc043e1c47b0a0e4cdf4c422832e306242e73dac86f
SHA512 734c1ac9def749c4b836d74a90247521d0295fcb333f1208030d7384725f92d1428fef1d32848fc093d90a482253716e474fc3da83d664710c080b33f14b49de

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.httpcomponents.httpclient_4.2.6.v201311072007.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 6cacab589e5dd077af69646f5184ef8e
SHA1 01dc2d032a0bb39cd03ad04c20eddafdbc52d07f
SHA256 622e06d5fe445c9a9f3a58d8c9fb6fc1791379a0c058b904015dfb5f452936d6
SHA512 c67c9c785843fc8f08383eda9eb084412920b405975907e5958122c134f638d2418691e9bb8455a5ee699b78e9271ae41bddf196312b425d7b975882584ce4d0

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.batik.util_1.7.0.v201011041433.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 d52b5adff66b000755cbdbafdfec9ad6
SHA1 ed8cfda050e83847b59355d69173e8b8c18e9729
SHA256 c0f9aee852f94da92fec9ff73a241edece63360fbc0c9aace891d50b7439564b
SHA512 93ecc3c7f223045e87e4049185cf978e8f65dfabb756688990e39cb6a8c7206e5ba5b89f8ff1b38313e0c18f40f193c1a3d46c7340fc2e1d92a11ed1208c4757

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.ui_5.5.0.165303.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 148f7c58efd5988765492ff9298a62a6
SHA1 11fe7765833db455e686adf956d5dcd645fe6925
SHA256 f96cefbf9b8b1e70f4fbd3e2c53281aa1a26f70a88b86582ae32819f3276e834
SHA512 713940ae2e45a86b172c999e0cd44a10d568ee9d18a3c3f613c1fe7d576d8da80396cb20eb9a35552971845af1aaa7c7aeaaed5c5800355dd4691a684cc70c51

C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaSansDemiBold.ttf.(MJ-TJ9302618457)([email protected]).zxc

MD5 cf7ebe51260c6e043b77004545df6548
SHA1 2cc0169f1449ab9985420205daf0163f57712875
SHA256 20e2fbdd2a901f182ddaa1b8a597faae6d0f18d2cb3611ed371a23784871365d
SHA512 7e61dcf5db0371a7096f61d614396a0e2595167346e7d90508b7c59ef1bf592593a1576ce7df08064e3088de796a5cb8efc431434bed8372f0e0280371477fd5

C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaBrightRegular.ttf.(MJ-TJ9302618457)([email protected]).zxc

MD5 0de772a57df3ab15af0ad396c5c97d36
SHA1 b902bdb58ec5f7921cdada32de8738b9cd3f0a13
SHA256 90b4e9824b23179a67fe4c705f6d3fef234fb6d499e2ea660c8ac31eb0f85976
SHA512 bb79e39a2c78f2d90e951e7f750b30095b00eb18120bfe663991a5bd289504d3d4d2cb0772e49b46cd5a185a6d06412b7d0b6cc359f69bfafc319b4d8938ee46

C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.controlpanel.ui_5.5.0.165303.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 dd4bb5d60c86e79ddf326827029322b7
SHA1 783b0d4b1c7947754a2458a7273d33d7cace672a
SHA256 f8ca5f9124ff63d1c8409a7354140e979763765d41219de163fc51e7940c79ed
SHA512 6317dbc027c4f4084067c4b109c21e812c1cdfaf7fc4376a244758a138a7b1dbdbcd73fce1ce7c8c6ca51aea59d82ec343460d2559b781ee80e87e9db165a389

C:\Program Files\Java\jdk1.7.0_80\jre\lib\plugin.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 ca9d1a19a8002ea5e7226c6784625d05
SHA1 7ad1644e066029ecabb18fd41ec278128aa2ef37
SHA256 ec48460015733b23c8e0ee270992ed4c4eda99b58124b263b173f92e3f5a0999
SHA512 3fdc9c5a801b153955051eea9c357deac5a3b3c9463b6bba8b0df6953aab5e2f8affb20086edfdfc2cb6d2daa3ff7aff88d61d1afbbc85475ccb7621617cd7e1

C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\PYCC.pf.(MJ-TJ9302618457)([email protected]).zxc

MD5 61bbacbb0a80d632a95a2f90515a696f
SHA1 c61e5fe6f9930f84fb0cb395747b696514c951ce
SHA256 8605a3333005e7a0d96451c0a6252b60a1e667ed1c5f28900ea33331fa3ee315
SHA512 a6c107027180fd391c7a5a4a2a11110ef871407daa967560720f1f905a9a884568f7e0a43c7d94b1ed6a8ef15ed46a96607c3278e3a7bd69c6a0a774a1524061

C:\Program Files\Java\jdk1.7.0_80\jre\lib\jsse.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 6c8cbfef4e523c7fdcfad22aa6984d33
SHA1 7f915aa10d852e16e748334fd8bfe1fbba3ae052
SHA256 4bd2b4571d3915e664b0fd75d585e8c1874ee2d6e9010c24a08a62fdf7c67e54
SHA512 cb1ac8852925d2bddd7569cef28181f196264323b9db880b93ec9c570a1f546d9e0a3fea072ffaf06b0639a0e90ec5581e1a545e0e044b63653d24ca7b1c910c

C:\Program Files\Java\jdk1.7.0_80\jre\lib\alt-rt.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 ae3b70401ba78f977337acb3fbec4a6c
SHA1 f50bf64da7ad94177f27728149234f53fd644fb3
SHA256 c4eba73ec1f562a2533a6bb5bb4df69834b23387a7ba4ffa6837d4f48c07f7e8
SHA512 e76a1a70a7a5d4e938a91c68601cdd00f7574d8180dc040d88e1e17fb35517835cac5592ab7e482b6fc48dcc18226611435028f2ed70c584a595b70749593d69

C:\Program Files\Java\jdk1.7.0_80\jre\bin\wsdetect.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 fc91edc219dd829163eeaac3838b96dd
SHA1 23bbcba5495b417709c6301dd0f0551c00e6e8de
SHA256 462b84c00add2e905bdd4688877463e719b31de85b9f7b5a4af3fa25edd93479
SHA512 64a6d4b1715e8c1c9437c717e58219aa9cfb5bcc58c5b88e19d94180fc9bd81e3e9d7f1e6aa570854851e28a68245e32ed1dd28659e5e640e6725430ecba2e14

C:\Program Files\Java\jdk1.7.0_80\jre\bin\unpack200.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 3298aa094d2040a3055104106a981f95
SHA1 ee89b75bfe5aebe7c0795ab1f0b1989b0fa851f8
SHA256 c2141cbe063a5b7c022ec385e0d9255f82f63ccf9ac537e30acc73babe163871
SHA512 969356218ed08e790843794f37e1e825715b530791980274997c7bdecaa9b0cb620bb311ef068871753981e372e548420f32eac1d64ed41b6a690f4fc425c547

C:\Program Files\Java\jdk1.7.0_80\jre\bin\msvcr100.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 4babdbda62299c11001b2366ce7686b9
SHA1 a0f2a975f51f8159fd952f5d183959d33c73e198
SHA256 e9c677b27ef2b9242d94bf45a60b4597722725d4c7ecfd3ac1c04254eca97d9f
SHA512 584a058b3ba8d3982798b0b78c175f7050219c562d79f5569d59be6a0ed6c51b1a16d7888a44f19427d98272213af56dc3819dfdf51efe32678c2cfb2bc010c5

C:\Program Files\Java\jdk1.7.0_80\jre\bin\mlib_image.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 0b8e09951ba8fa67665d5702a5c1c5a8
SHA1 997fa2c2a3e9a8ceab050e6df3af2c9425de21b1
SHA256 1b5bf51dd74d1f4030572102267c9c0dcc7cb917ebd251a1b1cb6ddbb2e99f79
SHA512 b6d353a724c1cdbe0e2050a67a9b6927d0e1ff48e692914dc51637712f88b55552127aeb769f8fbf3827b727f5c3ed33f2fee52191cb329780f6493b6f90eab6

C:\Program Files\Java\jdk1.7.0_80\jre\bin\libxml2.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 5f1d7fc6f1b05287be1f56290f139f81
SHA1 15101db45a7228aee79ffe9363f8e8cdc13beeeb
SHA256 797723282fa22f7016dd3896003b48bcddf819eabd3b6c500ae72bb8aa2cbc89
SHA512 36488a8c283c8a37f74d5b333f0814727fd106fb9436d863f81efb85593f3d565484ce8961122ee4f3741ec32afb09a77dc9b1d04fdf64c32ee90766ef7305cc

C:\Program Files\Java\jdk1.7.0_80\jre\bin\jpeg.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 b239aca13a3a0e2100ea6aa74e87caef
SHA1 a0bcada7bc3b65957958bf9d10b54abab2813e52
SHA256 8e3f86aab337c760a96b6da1d0d55327b2ded614a688f374ac2735787c9f306f
SHA512 9e83d2db89420ceefc524ab263fb31ae8b1c04e50c698b8c07256ac07ca96b34dbae1e2563cdc4cb7744c64f7c898ff112fa098d2fa8679fb384b9811402347f

C:\Program Files\Java\jdk1.7.0_80\jre\bin\jli.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 3406a817568bc757f4ede3d85cbf0637
SHA1 cdb192c7bf35925d248f5e212d339ed721689aa6
SHA256 048277b55ba1591991843c1bad9da7fe9f4cdb148d686eca1980f53e9fd2e70b
SHA512 5258233408232543ee899e052545de281fea69fc0bee7bdd6197febe63bbad081828c29a7cbab786ad3d30c497de1781f552256b4bdffa2ce59f93562c6a478a

C:\Program Files\Java\jdk1.7.0_80\jre\bin\javafx-iio.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 8350878e2459d0edf7e75ac68d24ac11
SHA1 dd0d9557e90795d05f20679d016cf5679b351399
SHA256 1182b3608f1483ab14b1b6ddce4b4fab14527ff52222e3848aec5875164664c7
SHA512 5577a108ae9cc43a0a5e250fb9180e39bdbd92aaa2c4880f329c16960c5b5bb73b5a98f96a64f2cd81035eacc07b680d84e8ef89082f47448e550b5463105d40

C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_cs.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 438a21fb05ae4011437904a760129dbf
SHA1 408cf31df9c3431a9abe00f14d9117150f105ff5
SHA256 76436f260bf87468c0d918566fbff77fd31a529259da33755ea5b2c246439dc1
SHA512 4cb8e264e63e81ed086fb7f3f16aa0bbff376d7ed418e297cd22b1873721893d9ad4a97e96d182f9460a2d6c669bbd9d5aa543fecae852be296b4203b8155653

C:\Program Files\Java\jdk1.7.0_80\jre\bin\javacpl.cpl.(MJ-TJ9302618457)([email protected]).zxc

MD5 5e56d19e40d607ffe321d6ea8042a776
SHA1 b08fa1ce4542551c740a855f4c6726a8a6731a71
SHA256 8f4c86d44872d184c9d04b720a5ff1326cef751f99ec08f0894c2bf41b3d1c26
SHA512 ea1b54e64408ca4e4bed55a96121dcb4f306c210fc642cf66ad439c8b4565d402d72936c292ab5f4bfc7ab1561809c34c137b5af9f896f28796acf1f634c7d12

C:\Program Files\Java\jdk1.7.0_80\jre\bin\java.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 6882ee80af3931ddeb5e70399ba94f8c
SHA1 434f77f660a73a79059c7261d8cc9dca12be2879
SHA256 b6ae52c5994975b08d54bd2c3b5920d6192118b68bdd40916c9fe555499a8b4f
SHA512 ed0f81580baa58a638ff824163e335bacce86188c3ac57ec639de3790ee23118e1c934d49d71026e40169eca61c4133c4b7aee07a151ecba872c10ce74088f28

C:\Program Files\Java\jdk1.7.0_80\jre\bin\java.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 39e7422b5036d3d0c622edf451d5740e
SHA1 77a42a24eab6f96aebbb0b6808a98d61280dcc27
SHA256 ea4ce40b1362ac7c34fb29baf3d60ff6ffa78c7af417805735a90956c1dc412d
SHA512 3f62c414ffe149df01fdbc83b353c5d9da49e2725f3ff1f301670d1a9ad8fba7c7cd66e96c8e65b2f759988060becd251a8708d1990a73fc07e8d0c9930e94a4

C:\Program Files\Java\jdk1.7.0_80\jre\bin\hprof.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 5593e7dcc12735feb670cb58d014d0aa
SHA1 9448e40050422aefa3e7a24fb271366288af6c4b
SHA256 bc9751e4339c42b70df401fd19526015b539125070d7fc8ce714017072a0cdd5
SHA512 954e0b920faf49646a20a60f2b0c8c6081304cd91a9b1dbcf235a9720d265f930dde4400de5897856686093b2193d16a3a7e628b436215befb64511253a9889a

C:\Program Files\Java\jdk1.7.0_80\jre\bin\glib-lite.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 dffdd2eaf4ae6d4d099e9b2a3ce71b61
SHA1 bca16cea7fdb0810eda36a6b3dbdbdf1fbeeecfc
SHA256 a8406848ce1033aac9ce2e4a3c3b29a4ce104ddd05cae5ecf649a6be2af0eb72
SHA512 2d775133172d880ccc5b2742737471b0300dc2e1e62775bf0c359872bb3c9009a5aab5942e92859917426ec7e682f071a45c1fa59fc2b1d2fed317e29e08cff8

C:\Program Files\Java\jdk1.7.0_80\jre\bin\glass.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 b4ff2160f96d9851286e7cf50477f6f6
SHA1 4bbff39f89158de72c9ad07a050ac2c9bc0ca280
SHA256 f2ff2310992cb1d97cd2f1bab3b2b117998ca0da39104e02ec075e93350a82d6
SHA512 d1606f8095a28da9097a4674e09b46bf185c0e65cd42e81ef04c3c1f1040a55639153a32255db78438874bdcede1483931216822460b0f8c5b5e2c2d58d44c59

C:\Program Files\Java\jdk1.7.0_80\jre\bin\fxplugins.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 6b1e9b8f61851d5e581c8a1f6399047d
SHA1 fac21b275bdb5d2fea06af9ad2fc62710a905022
SHA256 04ea529575c805da3a23d29cfbfcb1f86ba0174fbbe478b13e35dd093e3056c2
SHA512 d3e556d827e3ca656cd0ecc805397dd1314c773ecbd05e59ffa76fa95b6d3e0aad5bdcebec71658ea835592bc3e24524caa84319da12fe2502c18300ae12a30f

C:\Program Files\Java\jdk1.7.0_80\jre\bin\fontmanager.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 77385418875dbc82f8553595f477fc60
SHA1 f7b332d3f8d8268dfeb31dca455709e9fd82c7b9
SHA256 0e6276d6e35ae4543fc4da325289d395b1f6bba9b3747720e2bc8cc57a09a9b5
SHA512 59cfc995a1445d941b214b1346fe62a0633fa9404bc0a69cb056ab6a60be9a847405f805643481803c8624128b5ab4761b59c6268209b28ebc5a0fa7958ffaa9

C:\Program Files\Java\jdk1.7.0_80\jre\bin\deploy.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 0016d473e9a66b330b64442b70dacee4
SHA1 865800212bb5030eba8bbdd750d0889e3efaafd3
SHA256 bf456d1189efd7eec872eb52b82c145a895b5c87adacc7df0bfe77fd0f6d55ef
SHA512 0e8ae89c7f75b45441811087390d8f74515180ac3c70eec6e3a195e2e77eddc292ba6fa60112745d58c19d1e1bd0b68a56781fe78714bbad3a8eba7e171ad142

C:\Program Files\Java\jdk1.7.0_80\jre\bin\dcpr.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 202cd9ee11ccb43f0fe05c016221c9b6
SHA1 ae24b3233f6209201ae2ea5a69b7d14050b52e60
SHA256 dcc640ef8cdba26e2cc2edc98986d8acc179037b3b668e4366df71b66cd8fc7a
SHA512 51318668d623ecd172570156081524ea0ede2c8c4cae4d53fe9a67c62055d11135a09b8602b426f2b3a0c031d34a5dc1618e74562a523d0268312b5e647386f1

C:\Program Files\Java\jdk1.7.0_80\jre\THIRDPARTYLICENSEREADME.txt.(MJ-TJ9302618457)([email protected]).zxc

MD5 02dd9ddd4c4274dab7782f269f08ee41
SHA1 35abbeeaaa36a07238236a651a0772de11204a2a
SHA256 34711898d0492f9cb68ab117666d44654629fc2cbd1805ac712526fe4d91b2fe
SHA512 b647c0a5cf03e62b2750eb33084685d5397db16d635bf9796c55e1638e0b0d1309b35dc26223fed7bc507b36b2b4627325f5464dda19595876f7e01160db9d11

C:\Program Files\Java\jdk1.7.0_80\db\lib\derbytools.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 9bc054cbad64efde8601917523e17b11
SHA1 6cda2f314c76c93c86fda4ebd40a5fb3ca0ccfee
SHA256 3b08bcbde9d21fd44c0a1001fff2d446227267c2212eedf610adacbb6153e402
SHA512 2b97607562590123f6032a627ecead44d97dad5dc49ff9227eac392c7f21ff07291995601ad4984bd2d7ed539e859b50fd23c92e7f261dc5d17b16d4abfd0642

C:\Program Files\Java\jdk1.7.0_80\db\lib\derbynet.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 b96598080a54484ed999e86493c129ba
SHA1 c9fad5f21777299d33218c41d721f663b6e613dd
SHA256 124d071b3c8bbd05d6abeb090c362f4afac9f2261b42f67bd5e0d233cc1947e7
SHA512 595926d6f75d66f67fca4671ccaad050954096860087a3704e2181ae9da6602db8c2cd9445f9810b7f1427e00eff1d19c8de984bd9679a130a21f4bb08f44fad

C:\Program Files\Java\jdk1.7.0_80\db\lib\derby.war.(MJ-TJ9302618457)([email protected]).zxc

MD5 2aa68d4643ef5e32f20e8d1ea445520c
SHA1 b3e5849f7c4d3aca64a4133203f0957a0ceb2c87
SHA256 99c68e6a6934b00c7413618cf3c005b8ad2d09ea4487a46e6cda73ca3b0907ad
SHA512 f6b507cdc3143e1b8e0a3e15a32d759a731cdeb176b2d4fc8d865bdd4321bab093ea7c2b0876836e9ddafd442476b825a225d63288feda98f99152b4a8864792

C:\Program Files\Java\jdk1.7.0_80\db\bin\sysinfo.bat.(MJ-TJ9302618457)([email protected]).zxc

MD5 1d35337d60ce309d51f432688fa0e25f
SHA1 76728a678022a69f6e9fb52a0ffdf2bd1dc260f1
SHA256 a6bfafc95f6ada349c4716891af4c6f275cf9462e52938b9467f0a0d54c06333
SHA512 c19b1ecf1ae29d37eec3c7fc6d15531872401ef1a669cb598c4ae4e09263e5143ad7819ca58c637e96a2d996c478e8e969b0f1f69e6f8d2313c44a5a2f2c7764

C:\Program Files\Java\jdk1.7.0_80\db\bin\sysinfo.(MJ-TJ9302618457)([email protected]).zxc

MD5 9bc45635a8710849c5092def11086dac
SHA1 a86783ef1d96443a5c9db8fa8aa209c2e1819568
SHA256 4f9746ad2304a319891f191f39bdb0beeedcc2e0b8478c89c79492aea6e2f2f6
SHA512 868340277590b62ce9e9f7acf15cec0c1ae2131478d80f222d5290627bad66a0968847602a05335ec694abdfb81800c3f58a77ad8c201d52c529c37485707c7b

C:\Program Files\Java\jdk1.7.0_80\db\bin\stopNetworkServer.bat.(MJ-TJ9302618457)([email protected]).zxc

MD5 6014fe97f0b71b9139d1497f59aabbbc
SHA1 eac862751da38a83dedf52218678c14fdc7fa2db
SHA256 103ab6d2000370472b5da20e429b031f71cba47f6dc925c60babd38168e051b6
SHA512 838fd454e3fd533b51bfda724dcad900c3dccc177f04b14060454240e1110bad2fbe7b8b4fdbbdf9b2d6bc299d9f226972cc0ea8943ce0ece0af7eb71e4e5d0b

C:\Program Files\Java\jdk1.7.0_80\db\bin\stopNetworkServer.(MJ-TJ9302618457)([email protected]).zxc

MD5 cd0d3fc7907cd23432f036f5ccf7bdb6
SHA1 eae4d88d67a5ea1f68b14812e00796740f3d6259
SHA256 e457ef02d51b464877d799c5a802c0380551c7e19df0de43f68e19fbefa98e09
SHA512 b77718443a8fa0dff4de1c456225e8334394f9e1bef3def730ef1f0d30784ede002137068d6d18c58d4d60f98e0d5407e4b3960ed6bb32708ffc0c6b9f23ff89

C:\Program Files\Java\jdk1.7.0_80\db\bin\startNetworkServer.bat.(MJ-TJ9302618457)([email protected]).zxc

MD5 2cff20b6509bceadca27d5ea9269c14b
SHA1 5459a412fa849cc8fc85e3f89d9bbdd0ec3560a2
SHA256 1360f4cb21f7022ed191d6ad72c32b5921839ab08c8fb9f68cbfa627428cee92
SHA512 e4981eaa23ef2ac77821026476569117bcf91238a551f882c7375c5cc8b9b824c6849f996f232ceeba502c32d0745cbd64bca63ee12d311440952d2643842249

C:\Program Files\Java\jdk1.7.0_80\db\bin\startNetworkServer.(MJ-TJ9302618457)([email protected]).zxc

MD5 57ce08e9d59814eb60739dc676eab90e
SHA1 d335fdd442cddeba2172dd76a6b4f9647ff4ff0f
SHA256 0057a25505cf261adf518396b44d50bbf5611ea1e2cd7984261f29949e3e9459
SHA512 b06469024f0800380e7eb77095a617a0e61d5d565dfd22194b944d7e675c07cfd6cacbb76a0cee573b5a49191738b288949c3bb1d04002dbe8d4f22d7bbe4b19

C:\Program Files\Java\jdk1.7.0_80\db\bin\setNetworkServerCP.bat.(MJ-TJ9302618457)([email protected]).zxc

MD5 dd11189a39b6e0756a1e36ba6d8ad6f4
SHA1 bfb4cad085f603a103e659b5a28661de5a8f543d
SHA256 653efda18847fbd130a88975301bd4967d30cd762333ba876800cd5c39af7eaa
SHA512 abacaa6e52d151e4debe8c1d6a2caa9339577b85db6ec12d01d6efda847c94cf2cca701a91e25da236800b2081f7bfd200042b2d3e1b7dacf9b61bf0b7ba7ffe

C:\Program Files\Java\jdk1.7.0_80\db\bin\setNetworkServerCP.(MJ-TJ9302618457)([email protected]).zxc

MD5 7cd42574f19a89e47b4fef34bc1bd0f9
SHA1 74e94d96e16dc1df475f89d7721f3b49d7ad86f8
SHA256 343af99b6d430d79fc74c36d6a6447f55e75b6adbcd74e4c02ba7f175da92463
SHA512 2642d8e10aec19af4c63b753ddc6f68fd398f9c0c46e4bdaed59b0fa0856f6bb9ef460b6e67f7225ca4adf674f1d18824742bac36c8c441da26ad9477941888e

C:\Program Files\Java\jdk1.7.0_80\db\bin\setNetworkClientCP.bat.(MJ-TJ9302618457)([email protected]).zxc

MD5 3f378107ef1727de9cf59f6a4ab649bc
SHA1 2d1292b6bef11d60846f0e68774a15f4658e1875
SHA256 180da8843e30e5ccac18a88f765e6c44d887fc8b7e91ce5ab22f175c08584a41
SHA512 f0b6dda414874f18f0e0195a322f6a2dd20be9d18f39a7e41b57774770fc93351961d52ee353a99af64da64fefae46d9e2285a91fbd859760bfdb63542b87988

C:\Program Files\Java\jdk1.7.0_80\db\bin\setNetworkClientCP.(MJ-TJ9302618457)([email protected]).zxc

MD5 a57fbd6fc106d80cf97f718e019e16c5
SHA1 d798bf4b561ee2c8d91cf2d67236f44c27bd5314
SHA256 033e9aa8fea70e0ea815d93b043279c894fac7af5c9f2b98c3593525bba0bb83
SHA512 4f3b87e0ebaf668a7cce1810d28ad0e1a9d4414f3ee8e0be6e469b1bdf5bc06e79d856b3f57caaf19d80ebab6fdeab4ebdb0af84e329fec05132edddd45a0b8b

C:\Program Files\Java\jdk1.7.0_80\db\bin\setEmbeddedCP.bat.(MJ-TJ9302618457)([email protected]).zxc

MD5 d0a2ef46745f8810a0ade52355ec61f5
SHA1 ada57c298697a4d154ff5d1ec8f19652466e098c
SHA256 ccc9917af6a16dd8f68a8c8c81610a98ac19a3cca95654c7689ad5e68298708d
SHA512 65911267d75868bc35c49adf7c5467f89f856e11104d43e33f6500325aaf02147329f4006d69bdfffcafb9bdd57c2db80305af9d5e1078decbe9c20b04a4f793

C:\Program Files\Java\jdk1.7.0_80\db\bin\setEmbeddedCP.(MJ-TJ9302618457)([email protected]).zxc

MD5 ac35f842478f46182a3ad36c34ca2097
SHA1 61b7a9f8c7e8e0ab7ceca8d04cdeaeb2bb89f58c
SHA256 f4306f38c0963d1087653206b789bbd45ecf173b37fd323942c9df6c6939ac39
SHA512 7c0cf200750ba09c169b7e3ecdf2144f5f0d15516f3317e47f75d86e00926cfe6cc5a7759898ca7282299b0595d4449e4b62edc8b2d4287117058397837c199e

C:\Program Files\Java\jdk1.7.0_80\db\bin\NetworkServerControl.bat.(MJ-TJ9302618457)([email protected]).zxc

MD5 d40fac0b44da2b1a41c2d61c8ab1a893
SHA1 e4019f586a902ea555fa557456d542627a24e37a
SHA256 a4d272beeb51025cb8edb40e0d23b91bb3bb1e360e8990fba6c7453b5d6e68c4
SHA512 ee026ed4263465091cc91783aa4567a9b97e4d0f132658c8af75212b81d427402ffb9d5b27ab79c44f7be41232199b689cc0c1c7a22cf9ef6613a83587c3996c

C:\Program Files\Java\jdk1.7.0_80\db\bin\NetworkServerControl.(MJ-TJ9302618457)([email protected]).zxc

MD5 c8fd228f918c58df6a34fac210e19105
SHA1 0c949cf4de20018cdc8429931b954f277b195b5c
SHA256 2c25bac6c76579723eca93db0aeb2e66467a54953ad277efa52b933c766fd404
SHA512 c880ba26a8f0225046897f8c82d76f5be705ebf2bd139eab0af9caa06a7c6daa96edd7c88c80c5cb4faa3a22d04067bfcdc90cca612729e8faa54d6182358aee

C:\Program Files\Java\jdk1.7.0_80\db\bin\ij.bat.(MJ-TJ9302618457)([email protected]).zxc

MD5 a0cdf47e640c180011f45c0375068a35
SHA1 2e838e749d3b261728cc9038a8067acda6e416ca
SHA256 5812cd27fa071c56479f737cac9b37a4701aaa3b87ca9be7684266df333742c8
SHA512 4185ad0d7d77ce4783dea9b56e9e153a906faaa5ffc15401ec0f98b982c4d59b4659b2eb585d86ccf631f40e34167533e7e77bf88770e492eb99eeda4671de16

C:\Program Files\Java\jdk1.7.0_80\db\bin\ij.(MJ-TJ9302618457)([email protected]).zxc

MD5 eacc109f1a19de271774a9c895d040d7
SHA1 380e56c6b0a1a906335094e1a2d4a44fcb9bf204
SHA256 addaea86f8f42763b1915eb095d8c0343858217f1e7b5703746a8cebcc4ac213
SHA512 26fae948b8e75448e601c463a14ab48a8bd0b4e02634e96953f9d14cf93e6cb92be973198913f144ac6bd50c69227c7c7783532b8d5ff205cd1b53813e8bcd9b

C:\Program Files\Java\jdk1.7.0_80\db\bin\derby_common.bat.(MJ-TJ9302618457)([email protected]).zxc

MD5 479e35ebddcf63da3c4f351044ff517a
SHA1 6055d6caf4b24ce3004a25425d3904e3a8aeac90
SHA256 64f5d2cd9e0f3edb53664fbd61da3628a61f4b2655ef14a205923943c1c1ff33
SHA512 33a289a721985b6ad6ea02f4e62b95676175bc099eecb6b695796f17369481558d362dcbc6559bed2180df64121803e8c638e604d15ee797b2498a740ae320a2

C:\Program Files\Java\jdk1.7.0_80\db\bin\dblook.bat.(MJ-TJ9302618457)([email protected]).zxc

MD5 e2955b7c983a60fdc3cd65559776ee9d
SHA1 b469b8e75523da4c112f3963c8abc31b781eab2e
SHA256 20ea17f8ee79302e37463e1849ffaf89bdbd71d5ca77e80fc8c9cdeeb21ea272
SHA512 08bd091a097173d81ab82392ca9c568f86e62d1b1d1ce1b80fcf2a98c68598e10b544f23691025cd5fe4204ebf5ee2706e916301472a71ae14ed825e57fa65b9

C:\Program Files\Java\jdk1.7.0_80\db\bin\dblook.(MJ-TJ9302618457)([email protected]).zxc

MD5 64efd9b349aa864f0e7b40aac44a103c
SHA1 b42dbfd5adb3759e6a38979dbd8b0e942b47ba2e
SHA256 b667e31ceb5f4646dc0021b6518c19c4fae8eee90955ef9575c4c230d9e341ac
SHA512 b93f614f0b13d1196e9809a263eca56caf492368e36a6f5d7a193f61ce5b3dca4e360fbec5a2465de1ceece3343e438810d4edfd275c21443b2d7dff46f3736b

C:\Program Files\Java\jdk1.7.0_80\db\RELEASE-NOTES.html.(MJ-TJ9302618457)([email protected]).zxc

MD5 d0b2fee6432c194527217d05317ba266
SHA1 9cacee461c91daa407902210d59763234af70398
SHA256 794620b3ec861d1b7857273f68e89d38b1f3781b485f4083afc31f4d9826b9e8
SHA512 c09e908082e9641c3d75c6495a65aa1b57ccafe72cba668420a3c76d9ef1801aab224a5a565f0f2bf6401f35920a3bf1425c45a17af8c5c362ee622161a66058

C:\Program Files\Java\jdk1.7.0_80\db\README-JDK.html.(MJ-TJ9302618457)([email protected]).zxc

MD5 f5d89511b0465bcefc62af82ee758ba6
SHA1 6e307f3ce59096439fc27f588d4de92ef03215ca
SHA256 a56949f75b87265b0ca91311b7c2708f553774ecf9976efc605c57bf7099e05b
SHA512 003f03d5656eb08e93c476003324376fd722a7afa7ff81174b0d89d1f67b012d8117e094be3f40e21a83aa2f35a81ce3c7fba0e2c3b040bdc4c0a3d29e2d8ba6

C:\Program Files\Java\jdk1.7.0_80\db\NOTICE.(MJ-TJ9302618457)([email protected]).zxc

MD5 5dcfd97a8757a5709da5583bf90fdb81
SHA1 43a6ff32bfb5375f8f234f80a4f50c4ad5b5bddf
SHA256 b3fe08acf3a2328e9eca0c1078cf73f409ebad9e110daa2fcc42faef526d54b2
SHA512 fc49e31b8edb504d3f8d4cb06f5708d73746e936c03c97e5c3685d043d73e7eb6f9d4d6ff6cadc3b469895202155f007ba392e9a33ff2bee3115c87ab2d0a764

C:\Program Files\Java\jdk1.7.0_80\db\LICENSE.(MJ-TJ9302618457)([email protected]).zxc

MD5 414ab5344ee32de7d0dc6114ce07d964
SHA1 f3a3e844a2ab9c6b9fd985fde1dfcda90305bd34
SHA256 6cdf9ea3f52abf22df891ee82bc8dd3c999f6b6349e4e1141008f663e6dd2b4f
SHA512 dcfa12e60f4e48d8a79c482dac9c2ad7411fd405e23698f02e24d3218842af0b1c7f09606e8475b4c6596f8179d066ad017f7417e5133642080f39d37cc311a8

C:\Program Files\Java\jdk1.7.0_80\db\3RDPARTY.(MJ-TJ9302618457)([email protected]).zxc

MD5 88868d649ccfb0ce40c21a3d1e5dd1ef
SHA1 3f33f05e30df1ff1f36018b5c9fc5b99d3a47705
SHA256 3d638b13712ce862211ddc6cc7ec77504f67962f01c9906c441c92cdf6a9cf4c
SHA512 cde662147f04de146cbc4027ceea92bb632e8c8e4985f99d323c8224660f6d1749d07c3075c8ebc9f0325209bb1bf2a0b60b30579f452b273f77cc26f4b94454

C:\Program Files\Java\jdk1.7.0_80\bin\xjc.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 7d6d8ee0a194f326e8f801efaf784e5b
SHA1 8f51c5cfb452938bc1e74e5b7a69672ede58e32e
SHA256 10164475f1d16b6313129fef561fd2c46a16bc04a232fd6368b4510d0f5a526a
SHA512 7c8165a6499b0d0c873c4ee2d34dc1ce54e8fe37725193d6b8d28fa6dbc8bba0000259f656ef3b9300259ef5c9c8671a23dfdf129245b8e9851823b0dc88d617

C:\Program Files\Java\jdk1.7.0_80\bin\wsimport.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 f2e976b84972fef3ed38401b6b0442d8
SHA1 0019071f5971c78eb0af8fd05c261ceba43d3455
SHA256 1c9893ce374a1f2b6510966376f178e8c0012e486cb1f33faf6baf1ad75fd4a9
SHA512 a9638fb5bfafc5e344b9b17f1a9bf4b79d48bad8064d029484124ed899f3a06d2d1d8a6448e0139c2a4faf43b1ca931b3b13bc62e0d3001596ccf4a4e3155148

C:\Program Files\Java\jdk1.7.0_80\bin\wsgen.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 4b1ad31e65cf3c4864f8c69d41758ed0
SHA1 4f279d6b4af08693974cf3a21d8631e2d715137f
SHA256 c413fdfcccca29d23010159cbe06a9e30c8e43630cd14502fd04d68f965e5a31
SHA512 5408a1699c2bff91b6759cd7bdff106d2580015b6248316e026c07b20af572f4f98c1a1c539a3a09ee8873a603cca8795cbb508b2bce3f95823650e6a749da2a

C:\Program Files\Java\jdk1.7.0_80\bin\tnameserv.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 bead68254349cb808fee6ff9375fc309
SHA1 9da91fd937c29de9f451e0916b5b1cddafe5234e
SHA256 e777126b004a881f393a12575469bb496b9701841ff6a529d7c9f742c84277de
SHA512 1fa5d5a615958f5ba474d92e50258d85fdae59e8d22ff4f90c020fa5b00083ab20334bffdff685a75d8fd1f825927c950c7f6733a1c3098b717cbbab1f56ce3c

C:\Program Files\Java\jdk1.7.0_80\bin\servertool.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 0366b894e023c9be5b08f247efb085d7
SHA1 504dd091d42e8a36f52a48877ecd1e8a1a2c577b
SHA256 a055bf0b63cc0193f354585cb6989189b0a95c1eff5f03c49429d423056e8cd8
SHA512 db68fe81550e4fdc2b30ffb67adc1296be1e8a6ad861ca9224d7019f31eeb52bdec11b43a77bdae6dfbd88919c831eb4435f905763da52b2ae47f2b2f99ebf84

C:\Program Files\Java\jdk1.7.0_80\bin\serialver.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 4f866d8cc996c2146d41b98e0321a51f
SHA1 f216f56c3b67549b2d1536b9bef0851a7c555163
SHA256 077ef932de3a41d024f9f53e1a6cfd585ff66c8fd1fee8fd33aa99a8f726dde8
SHA512 d19f6136531e29ebdd8b5f751a246c8d0ad9f0c8a06e97a1c89da81194665bcd27b81be081c378fde2b689fe48ceff1f52100dc3bbd7ac05d61092eaa43733f8

C:\Program Files\Java\jdk1.7.0_80\bin\schemagen.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 a6dc92e2fceb0d2b22040d0c59e2eaae
SHA1 69e538045b54446fa131e6ae22d28eea22bd3ef2
SHA256 d2f71af97fd29c2707329111ddd872e8f4802e01b6b4a50aa3ad21221859155d
SHA512 1caad0229a4be7900b07ec930bddbc4e2ef44491c129c96ba8bfc096cbdba048c4d6951d55ca10402618dc4c2281097cfd11d635e64465eac9a48f978ee521b4

C:\Program Files\Java\jdk1.7.0_80\bin\rmiregistry.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 c18f2d025676e99916a1daea159d20b3
SHA1 22866c5fc7dce449b4ac81fc65728cc620ac0063
SHA256 e4b17fdb703203a7ae2a503d08e7f14ff74a3577721954d516e05dbd0336ed9a
SHA512 30af08c4831ada78966a2e042f00bb8a7e55e9d21d06312fec0f1bc9f263a6da783cd03e3984166797b4c25b79210ff8a0bda5f1b77d812610f217c26a01a6b2

C:\Program Files\Java\jdk1.7.0_80\bin\rmid.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 2ed7565b7653504f1c936ff245725bf5
SHA1 e09f25751c34781c13de35a352bee321aad6c4ff
SHA256 cafd944eaa63bb58e79a799f7d8659e3cab5bbae75a14fbb624546490a5bd3cc
SHA512 710ab0a9f1e22bbbb5e2aa09f5a7ae6a3618cf6dc46fbbacf9a95eca0508d418c07f043f2c330a8c883950b31adc7decccd8ace55479c395ab4382970739758e

C:\Program Files\Java\jdk1.7.0_80\bin\rmic.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 cdf0d3dbb7d2086e7e5bd1a708eab7a1
SHA1 8f4a3c360a2d7632180fb47697192a71cf409926
SHA256 ffba8c717bd8e41ebd8f93f98e3b0a0364bdf283f9c4114617197f041b14d988
SHA512 b84f46fe8b84eb2d30b55412638bd44c99b2b49ec3cebc3c778d13297039a71d543061a71de4d6fa0594a707aa0e2ba6466956ea8f64655d02daf736f12d8cea

C:\Program Files\Java\jdk1.7.0_80\bin\policytool.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 8a9c5efc249ebdbd04d9530187790801
SHA1 48741bfde865906b2ad453457c098aeabb9eca9d
SHA256 aa05eef5018577b456842ddea2389aecd5829c27c5722d407ecce63f75b2116a
SHA512 e142cceb7ef119afb687969af940da528fce2709855db3eb71b135d9c760cfe2eb53a86ce62f64877bdaf118f35a7ed728d5565d29ca8ce526fb5de9fde17a91

C:\Program Files\Java\jdk1.7.0_80\bin\pack200.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 358480f852de2992059800893ecc1b45
SHA1 da6efc5bd937d43ec2837e85eed727d4f40ce55d
SHA256 fae97cc7e14142f28656dedbb3b50f8c975065efc2672697901594c138f247ff
SHA512 4942ea0d54c197a10341022ab96c2534cca37ee1c3dd63450c7aa0d37211fcaa57ce5a10ec42060de2ee8eb31c080289020538dbecc2fcf2d9be9b26d0a899b6

C:\Program Files\Java\jdk1.7.0_80\bin\orbd.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 47a3da870a8bdcd1b5048613e232034e
SHA1 7cd8c351c3c516996b66b2cded4efae85324c868
SHA256 9a7fad96a685b2d52b072fa264eca10333aec184968e73d06f82eb46a09b8054
SHA512 edecf0cd7dbe33e90ae5e6c2ea1d3c745e97d48549d0b7f0f448a4c7bb5674f9b609b4b420ee1f67c3f4f3d8ee9be32e2615a760ddd625424fd9e8ec88d34342

C:\Program Files\Java\jdk1.7.0_80\bin\native2ascii.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 d4205d5dfb7f5e28a75459cf5785fdc0
SHA1 3e448fe641978772b720560713c1314ac36fdf65
SHA256 da606dee426b43ec64ba124c5b4ec260d42e23fe1c8df812b734e29504e60a6c
SHA512 a9d733d804c856aed1d0714409b0eb53a6ccb0774686abb3c6975f4851a2e20acfa82f77e2c79b3dacb27bd20a49a70af783227bdb3ebf7a526483d4fc65d06a

C:\Program Files\Java\jdk1.7.0_80\bin\ktab.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 d4731d4837268f0ea49865037fbc4518
SHA1 f2a6b67ce87078019a7929ac43c619c196dcd780
SHA256 ea7457ed74561fdb26ffc29a1f77e020aa37018b5ae131580837ad6c092252f6
SHA512 bda6e05889f2d9bf9979cb3725b0f6aac44978ff6fd026563b8513b24ee2e7ad214353e4d78f8323e64fa8a34a1edfdd1f76337afeffaa0822f09d065cca39c7

C:\Program Files\Java\jdk1.7.0_80\bin\klist.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 416ddb1e0e10faa84fcbcd415610cc7e
SHA1 2e0247f21cc021da7325cd5d989c63c0ea8b6c4b
SHA256 dbdee5be3f4e150de436a513ea06ee6ca9c0922ac95ae666ec852c02f27b3296
SHA512 20e63ac9e6ce9ad1da70d82df8522fa4a56480a46c3293e1b1d47a0bbf981e019ad4d6cc75534c843fe2d900b922aba06d78d6db8bd47040aed66372a7080fe8

C:\Program Files\Java\jdk1.7.0_80\bin\kinit.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 1596e759186d59f8ae07a4c8f2aebf26
SHA1 d5ae0bd1cb31908decdb725b7bf5681e2e885ab6
SHA256 0957422d31cf526cfb50ca49b2e0d0976bcb9aaf2c59e5a334fdaa9c8cc48584
SHA512 2fc4238cb04ae16d03c1de9b135804e61585f4888af79995e99926457ac51779e34e2afb29207db8b2c99cc501defbd0081672dfc6cc9cf0168a0c374cc8d483

C:\Program Files\Java\jdk1.7.0_80\bin\keytool.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 95ed644253fef7f5f80902537b86c36a
SHA1 4479c0dac15d5f4ad06506c06061e16b1c15141b
SHA256 eb7b632094012805a14a0648bd35771c654a64196d906286e0cf447bad97aa2d
SHA512 c1df69398074a945fee13b295eb0285580db8cb967b09de9904687d290408910590db6fe927b94a55f6f541a53372976565e5742164f71ea88c4e2a3af878eb6

C:\Program Files\Java\jdk1.7.0_80\bin\jvisualvm.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 19a0c114d7417c2c49dc7fe0bf75dcb7
SHA1 d2548443e269d661fa705159c1cdb1dad787c0bb
SHA256 adce511741dd5bda98b0ebc7fea14aeae1239ec1e343b66370d89938da9176c1
SHA512 e4beed758188a7311f12eb3bc1cc87aa91bcf03094643cf9f216bf812762f3c7379b260038b552a828f947fccc92ee7914c1caecde7b458b29768fb6a541405f

C:\Program Files\Java\jdk1.7.0_80\bin\jstatd.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 18077bb57fd9807a43a4b1ab2bd194fa
SHA1 014cab49515c8cc0dc75dfa0503f28bd28b83ae2
SHA256 484d0b2e305805d718991868a0a25dd33c8f11bbe11d8d64be98688757ad89fb
SHA512 953a0a334da6d367a7cb470cea58ba377f5d0973fc6f8f243d8951d4711455debccca4f27a2f368c1f0f01404345f099577a0f126c7af4e0d3b01d578ef9d555

C:\Program Files\Java\jdk1.7.0_80\bin\jstat.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 45e65c0ecc0278fe2d26ee8cdc1f7678
SHA1 8a43aa6adaaf3f9ccd42536c827184dfd882b4d6
SHA256 21691de9580fcd9f23f93bf4507f623041a42c21e0420bab1c0ce122a11db589
SHA512 871291add305b8dc517d2c32d2ea7015f409f0dba25c5ecdf26522d069c328154c1bda8faf95c1119f52a60113561246e2c9fe033c0efbc3f415a06d344e2c75

C:\Program Files\Java\jdk1.7.0_80\bin\jstack.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 2cc2e7c68a81dd7cd36cf00780a649ad
SHA1 06f7a7836ba8727a06037669486e19dc0d3ffc92
SHA256 5a311d12cd8c7f5fd5928cc7be7adce955a3baf8a49b91fffa1c0f619bf94cd8
SHA512 792c45520ffda54d04263564ae61a597f4096309b60a0be9865eca12affe54e624b8b175b5a2a30e60406a7c57b200bb9b1e28e9da14bc12e434078e3f7d6de0

C:\Program Files\Java\jdk1.7.0_80\bin\jsadebugd.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 dd23dd42394faccbb2912aae83fbe2e9
SHA1 5cf1557f9c53d43b2a487475ff519ba1b1fad3dd
SHA256 3a34732791340fcfdee9b1f238516a9083d2676e48b54b8791561919f8352455
SHA512 f889a4d0e09b89466e1e296e2bc3066a8a95651da7b5f541516bdcaef1b2e2746bae7cdcd58d4a1cfbfeff46dc3a7e3f3b042b9254e0ecdc89bf4fd032117162

C:\Program Files\Java\jdk1.7.0_80\bin\jrunscript.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 292ff84895442f21931dabd8ddd7678f
SHA1 92f1ab4d801be8f1d9ed1172e44d4b20b918c37b
SHA256 9e6020465ef88ae7abe9592b61788db8e8d0884edf6fdb03e880afca7d414a12
SHA512 5112960b775c6eac2a47147a2659c5df4726899903cb0e4fc26876927586b315ac89a3091805f2a5d3a690cb52914a33e7df3f0bc83912a80741b4b80228e544

C:\Program Files\Java\jdk1.7.0_80\bin\jps.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 057c3d30686846b807a1adb0ab9f1a78
SHA1 6dad577abeabd3f865815d1952d2f9fd8dbb7a9b
SHA256 5720005531048625c4850d1bdb1676ba356c1f67a4ef8397d38c654ada9db5a2
SHA512 eb4696d93a3da0f7bad114be7685f45cf96113aeaaf7f48d132943049f025dac99d59bccc6ce59becd904b54e1debaa140f37e17d58a92d8957be8144b168311

C:\Program Files\Java\jdk1.7.0_80\bin\jmc.ini.(MJ-TJ9302618457)([email protected]).zxc

MD5 6c68ca0ce15f3eebb540a7c27551cb51
SHA1 c194a09e9962c61d6176e2f50d4292cd07c6c2ff
SHA256 91d08635732d4f8bd7e7d17ed362461cb7f311a46cf5945a874bda2e3e92cf81
SHA512 74f3020dcdae8103f139906aa9f42c8569920318859c66a3f66f494c16ed075562b45e468e8ff5fe1c93fe337279844cafe6414c648c9b5136fb2200b6cbece8

C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyclient.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 906c335c82a27da9769a624f4a65f318
SHA1 a44ce6d4f8972a2eb438de595a5352a77ca8b9ed
SHA256 30a69ccf0de665bdc9a4553ecb53aed86b5b250b7ee8dc9633108e6a2c8c3cb1
SHA512 ba1d1ff945d3b7027d58e644a06d520c0dc0ef33353d91de9c283b8241e0d7ad9612fb2fd2e16378d2be598eb8715b90ecd787119a3060329aaad686902a5ddb

C:\Program Files\Java\jdk1.7.0_80\db\lib\derby.jar

MD5 2e8f913fac4ca62848bc17d1587e4be4
SHA1 b6fd620217e12f13e0b80e0ebf79cf95bdb8094e
SHA256 d4b934ca3d54a50f1ee8a8a413721b955cce767f1d12a26783bc78a2764d0e8b
SHA512 0b781d53691123c1b10caa61c332f5fd6697e6f81ae121d5837ae27e878e48c7970cb7db2755dfe774f04f6db275b46a84bfa422808115401e5566ec812bf363

C:\Program Files\Java\jdk1.7.0_80\bin\jli.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 886ec6274b99e0e65476fdaf38209eb6
SHA1 d1d9135075258e4b386f29c5779ada3e83773ee5
SHA256 2c5e7e045426d253a51ab0a66d2e3b68e98047785fc4946bea0f81360d81ad68
SHA512 86449c353abf5edf0e49c4550e2e7238802d38c4713e72a89d0b8390250949dfb07051e0ca50f7a569fda49dd1f4958f8d1b06981a12b25d975174cb36b8191e

C:\Program Files\Java\jdk1.7.0_80\bin\jinfo.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 49e4750a05d07e6c2a0a07e7ee6b0254
SHA1 d39a986d5e0b17b1e39a3009b32a90014c3beb66
SHA256 592231b81e7e0bfea2ce8d91e4f96beda8da588b79beee435e35b186e48d7fdb
SHA512 c1222e06e33cb8f2baeb3886f9ff61adee7c5514e1c302d686c59ad107075500d73c92159916288e7f767e752ccea2245e32079c3bc06fbda1d32784fa37767e

C:\Program Files\Java\jdk1.7.0_80\bin\jhat.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 dac4309868dd7b14c4931341dc71cfe1
SHA1 d6210301b9abd0596e161a9a80d40cf91d5c6c87
SHA256 5511de5632abb999fb2f721203af850ffea85557fbd602163678e54016a18218
SHA512 73b367a72294347d11d0cee4db1de6b94376f142f2a6ddec33cbc9e4c2ca8276fe8d8349fa6d18b65035de519c01b8341dfbed0b9036221ef989a4e667e40221

C:\Program Files\Java\jdk1.7.0_80\bin\jdb.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 ae7ecce251290f9b4bbb9e7c599fe29b
SHA1 0a6b3d5bc21d064c5b01aca9b6307127329b3865
SHA256 5c2143a926e65a8055d1710d03f67f472743f13c3e29364edc7389f2894cc796
SHA512 4b8a1307755a0074cfffc3265f49f74b2b3f3c3ee6908c7111306b60c4d287d262136386be335d93e6141b61f47f65598934be7ebc6668292742210387fcd518

C:\Program Files\Java\jdk1.7.0_80\bin\jconsole.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 f145edb5ffb3d557a4e92d95feff751a
SHA1 3570ba42ae23b6269351a2de8eb3089e2dd6bd90
SHA256 d6d54cd02c1e4bac3d20ffebf77dc8d71b59fc2c647fb7abfb5f8a0320705246
SHA512 bcef2b737137f5e3db1af1b1b847f67bdb64453022d758a7e69e3f05be04aca257e2c1a796d2892edd67602c8d81ceab7e6aff1ca5251febb06035855bd31497

C:\Program Files\Java\jdk1.7.0_80\bin\jcmd.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 c34f1223598625b693aa0ea381cc443d
SHA1 5ac368605bd494b3bab097887c8a7406b65ffe69
SHA256 8966ba7febd2e06c8ecde80e2cbeed9f46ee6f84133b528ef9db76b73e9ab62f
SHA512 6b24b79b545f55046b85e7d2fb9e9873f1f5ef3c80048c083f944326b8936e550d2b6763b8a7ceab5021d5da6c5f820553c2fcabcb5b54f96209adefc96ce702

C:\Program Files\Java\jdk1.7.0_80\bin\javaw.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 10cce816b26288ff86e68677959bd817
SHA1 95df5963ccbfb4af03e2e90d8d3ae92f55e1aeca
SHA256 68478675f6f9dc569d1aed959b834416a8498664ac8afb654444792b767862c3
SHA512 5af286983a031c6f58ef6d83d5e2ca9832f2bc6b0824ccbed0a564f68e1e22060560026fba31250c273b12d94926413aadeead4bb67b6b19d1a086d5bcd4a446

C:\Program Files\Java\jdk1.7.0_80\bin\javap.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 f3dde4bfac1ae6006ba7e8a68258fb43
SHA1 0780490799cf62de8138ba9d370c5e294d977e4f
SHA256 c8dd98552c4bebe00a8c193f9565827db54729fa239e00f1df9be3ab51aecfa1
SHA512 e662dc52c0e688b371ec6765bf104b9527306495285be6df572d5c5e52c219a9d74e0bb336ece51c31e010b4c1570df4e0c4fe1ea7522f01b5dfc79ef6ea3aa5

C:\Program Files\Java\jdk1.7.0_80\bin\javah.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 13ec92d7103ed175563a8fd77f331ff5
SHA1 a04527d63bc35323984e41abf0ec1386e23a43d0
SHA256 c95e8388a8543136b6400612422bb3bd4f78ca1cb1c610bec75d09615aa40e98
SHA512 134aa1e4ac604361764ec40ba8fcbfde2fc1314790db007df69fb048fa2350914caf4a909e46e8e6c8280a0e573c81e0a0ba3ca2b321b49f9b04e8f8e900b5b2

C:\Program Files\Java\jdk1.7.0_80\bin\javafxpackager.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 013addc96e8ce914ae39749f8159900b
SHA1 38e46966d68a046d84e042b66191141d415dde3e
SHA256 69d83bbb23ea63c8dbe59f9bbd563ecac6ac861d0e25a91ca3095be8e6edd55b
SHA512 411bb5cd48c4c70191dd3ec32a9f9f06b20c90149126da97f0ac5bc485775a6c1c9f56dbf79131fe7e322683628c063f54d52039caae04d9233b2e6b058a08b8

C:\Program Files\Java\jdk1.7.0_80\bin\javadoc.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 f96dac7c27d8f1414475797c8dfc5597
SHA1 8fd39409ed2383a0d2d4096e799c561fcdc865dc
SHA256 0d4dc19a452bf0e99dac002f007502ea2c6da843e63a361436db3b24f70c78b8
SHA512 2660315654ec6bbd1d303d192db97cd8fad252624a169f679b2f8bcbff27ef48da9f5478eaf75a285b905dc348d0688e9dca392bd16505b3c45f2926dd61c246

C:\Program Files\Java\jdk1.7.0_80\bin\javac.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 911d8dc72968d269cf802848d43a5946
SHA1 98c1fdd25a41e770fc2dd8af30a0c6445aa87bf9
SHA256 9d5e8d5a5722aefa23e316e5778a489485afe9a9df3ed89a07352b5921205600
SHA512 d3857ba3f8ccf8512f430a2844039f7259f00272b59c882f17b506ec25870b4a744f361fb2bd336f6efcdc010a913b392188132bff50799f621f650b140244cf

C:\Program Files\Java\jdk1.7.0_80\bin\java.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 3614200bf820453b7b78323111462788
SHA1 22e745653c851d965b464aa55fe171bece1c1958
SHA256 4ddde8ca910638fa68a9d38f5c574bac1bf20550301f9c1752f4afb1eec952d0
SHA512 2382231742612b5a9f0becf0d4466f31676b173a0ece7366d2c3f490a8727c969f53540d8705b550fa4b3b8d0326c753d22551e801ba2daf02a6be3698c34192

C:\Program Files\Java\jdk1.7.0_80\bin\java-rmi.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 c4e143cda6dc7126e3bcbed3bf3a0c35
SHA1 b17c47af56da57d47996278b973a814f14877a32
SHA256 2143dac764c41f4a8ee1ccc9fc7cd76e7ce21f466b5152657c4b8aa06e7e53c6
SHA512 7bcf1e27937501715309a1b05deb026c311aa833e905d5a29820c12fcdb41774ef29edaea61ebf3f4b6bc7618041d79db0b87c10b082783115c8233ae48c57cd

C:\Program Files\Java\jdk1.7.0_80\bin\jarsigner.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 2b443956c88993e67fd238d3a5d37e2f
SHA1 015a62ee87c3be65dbbd5f7188790897fc306825
SHA256 a0422019c16cd59513a4a9be1ec27c2d67f84bfaae795e75727d81e760468858
SHA512 20f5339b4070065808916d16e8cc55acc78f0d79d239d145bada62577735cdbcbae32179c00226f888771af197a50a37681e0706cdb331ff3ece6dd43ce2c94f

C:\Program Files\Java\jdk1.7.0_80\bin\jar.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 3569a62d8e91849eedf77b086f7aab65
SHA1 bc1d3f10e2639b4cf803330c8c948efb84a58518
SHA256 1478444683152e0c4cb6cf08bb162f54100ccdf3fca5a13748fbdc9c7590d68b
SHA512 8f8cec7bd7e898c90586297e71d38156444689d68f46553b5422ddf1d252bb264bd2250ccff59920eecf960f026ffeedbeb855f3a8c575e808a4af53b773f3e1

C:\Program Files\Java\jdk1.7.0_80\bin\jabswitch.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 b30fcb4db2effe4f8514d5acce2f0de7
SHA1 6b4d6c3ca729ee4f1da2704a24dd053f0b684575
SHA256 2f69af8e89b0664d1e7c924faf64d87f1508dee8a9268cbb08d0617e2289ae66
SHA512 805c3b7ea498bc58982770ad25ad7da6ff22b12e32a1de4d3fd009be7ed9ac65fc614629de6902f5e811e3832e0cf814d9aef7e71d42996b33cb6aa25ef99739

C:\Program Files\Java\jdk1.7.0_80\bin\idlj.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 218773c0bb17f317f3b0a9f11ce70035
SHA1 b3b46740388b6da36cfb8addc208ed171d6dc2e2
SHA256 6d8fcb6f1c20c40b35ee753a4be3729c7195087cca7c36dc0714f63cb0713116
SHA512 b7aed7909f65ad306edc545bfb81268bf2c54bb6e5502692bcf0ebc685e6765545832879aaa67199ff053188a762605380e3eee86c435f48e2a23214ac35675d

C:\Program Files\Java\jdk1.7.0_80\bin\extcheck.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 bbc39b5b87eccd98d1142a5f5e191ae5
SHA1 987deea8d9366e43e0dfd97327f4075b8f99a4cc
SHA256 b12aa24cb328ae81c00ffc2f33bedf8e98082c66cbbcb63dab94209799a6c5c5
SHA512 8eacf3c6d7cf934fc3fe01bbec2abe56ecf9363cff15b32aa6df9412a3961e52980d9a002918b4dfe7025f0a296d88481f3a60f0d4d47b2d208cab0675639920

C:\Program Files\Java\jdk1.7.0_80\bin\apt.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 e09e1d0481897cc86c5dc6813f9e5dd9
SHA1 7964a05695221065911c6b2ead9ac5e8bc34dd87
SHA256 6c20926b83e05fbfc549ddea625531221d09b70aac5755216708d42a740c5e7a
SHA512 576b7d8a6a8288cda503b99f0cf72afdc4849549f3b64b6036534842e247da89f170ba39406634bb466a5dab13ace144b7b6a761c9f8bde3edeedc0814b33abc

C:\Program Files\Java\jdk1.7.0_80\bin\appletviewer.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 b4f18d6aa85bdadfedb4c9c4dd51da54
SHA1 3cd4bcb1dc62585fb4fd01357fa4cafdc80701a2
SHA256 2ffcbeb0f8c9096b56c4e77536ab79bd1ec31269bb1914d3df60e4a753413a17
SHA512 d2dedb23afb107559e144f685dd6fdc2b2fe21034dcde20f73ff714fbed637bb9c75b5aa7909394d2193c4f2c949142bb577d97e20e2a9d91c360c80d8982b8e

C:\Program Files\Java\jdk1.7.0_80\THIRDPARTYLICENSEREADME.txt.(MJ-TJ9302618457)([email protected]).zxc

MD5 84f6c355ee2475fc1eb8770894bafafe
SHA1 79e081ff929fc6379c4fb23d9be2101a632740b5
SHA256 b8882e39dfe3f0338a233d7181387dc43ffd526c51a7341626da1aaeb7345d8f
SHA512 85dc0cac610f953609987ee4aee894b35dab93906138e4df6e05cbb717b9577e027272d3437c839ac68c459bdd33f56878ec19341537faf6f5b05b61b53dc196

C:\Program Files\Java\jdk1.7.0_80\THIRDPARTYLICENSEREADME-JAVAFX.txt.(MJ-TJ9302618457)([email protected]).zxc

MD5 681b6b43ef8d6f371b5486e3dbf60ecc
SHA1 6eeacd438438ad1be406917782d648d20c525fb3
SHA256 c410bc320b1daa54f061152806eeb032df394c0476abeaa0b5406ba3600c33eb
SHA512 b881c36b9a052dbcccb3fbbe187a4f1ab0308f3f513750de20d231c45f9aeee44376b860bd9cc9acd85c8fc997dd8d6e0ccd3d65edc61433dc4a6240c2c81f5f

C:\Program Files\Java\jdk1.7.0_80\release.(MJ-TJ9302618457)([email protected]).zxc

MD5 b7daaa5b2ad2406333e701cb5d43c769
SHA1 f8056c1c4a117af035b1f04f70db0aa282d0d8a0
SHA256 e5edf5beb050bb727dd9a265d2e5a80f235a6778b1246c16b0a682dccc3c7583
SHA512 0006384e2435767baece15407726bd97b28b4fb68e7ad84790377ee367f325006a4cc57d293f424506cdf43b19bd308edaae7fe81e098d5aaab9d4c442eccffc

C:\Program Files\Java\jdk1.7.0_80\README.html.(MJ-TJ9302618457)([email protected]).zxc

MD5 a0d75f8b5eace56ccfea685780ba904e
SHA1 7d3e2f43436d56baae37a670462bc8d21df911a9
SHA256 e4dc9c1adb743e6d5c1400e08fcfee6325548341dfe78fe4e475b625f6a20678
SHA512 65e39b9abbd16f165ea7eeba55bc132cdb5ec177e755b0b611c64cb43391bc6cb09cd8764ae644895d449f2ebf53210be1edbc9222657497b41f2130ad456586

C:\Program Files\Java\jdk1.7.0_80\LICENSE.(MJ-TJ9302618457)([email protected]).zxc

MD5 e7f021248b7ee2500de6f58dba538088
SHA1 c130a78c22ea24320cf47616fe653b0dad4e595e
SHA256 83123b883cc3f87723be91db01ba8eda43f5d62f823ec8e2a278c8330eb4c9dd
SHA512 b4d7b9dd1894eb674adec441c661b1856cd798b0e1fde076b0a3134d0ed724efbf4e5a369cb773016f20f7ada3256836b272175ce441f3ede175ef2b052f3ed4

C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaTypewriterBold.ttf.(MJ-TJ9302618457)([email protected]).zxc

MD5 c1f197fea731dc1b72eeb375c33dc0d9
SHA1 366bab2c0aa8f0263dac42d140eff34ce1ad1264
SHA256 1e236b715f7e2f969f8e5390a909856599faadc47f678541ea6b62075262dd99
SHA512 cb88190f66a154c083853c48692db6dca26e570275f0c6b6119b4b23dcd82c739cc5e8a77708fc9060778877c4a872c8d64e19ab3a79f78bb2658b30bd687fed

C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\ur.pak.(MJ-TJ9302618457)([email protected]).zxc

MD5 ed787b85daef587fc1bde23942876826
SHA1 621e1aaf36a39b8d7b9135dd69daa4e698aaebaf
SHA256 619ddb1619f3837a31e49eceeefc6f7cd1fa9d7322b5df5e9fc82595876a9e87
SHA512 7333f791e3d6ebd2cb559d2e25ddacdb3010e115233d7522906757ffe110201950efff8be7051b94a565269e993e69264c1e65bc8161d31a68b186dcb92ca621

C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\localedata.jar

MD5 4e08cc1d44cff2fa42a1a17f0528e175
SHA1 579bb32bc04881ce5a307be8d5fbc88854c21f83
SHA256 2417dacb24a260d4dc2282c529ad61160fe5f870ce107da97ec9f34cb8bad5c8
SHA512 23551da4975204005b80274ab8c8a3e97ac5ccca925863d1dcd4ff645ef67018dcc33662a5d2beda15f683bdd6d7f5a3781b3b793ffc67b1d50139bc731b63be

C:\Program Files\Java\jdk1.7.0_80\jre\lib\jfr.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 3a1686328b72bb84899cfd67cff21919
SHA1 0f96b81d35bf73714a538a9350383e76341c970e
SHA256 44509f9eabce980dbb70a1f4f99d4cadd11b4298e3438bd28a5ce340f5d1685c
SHA512 c695b8f5cf2a2c4850c4fe2a95f2d2e20d5da99ab794079a06a23fb14e2f134c7e09c56f671e604074066808718ff7667688be8c50792f9cfc3762d2b3195846

C:\Program Files\Java\jdk1.7.0_80\jre\lib\javaws.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 3b9e5270b88162dbe87db2c44f4877de
SHA1 38cacc8a050a936be9ad27e1a2873c1ae4a309f0
SHA256 245603b66a3e149eedae9a24a265d620b97acc58944090774d576f42fab473e1
SHA512 416267b9f71705589eb6bc81f32923e16a98fbeb2484ca2b8be318a187b09fc6773b16f044684c262227d3b0cebdd0d56c2dd6c453575b05cfbc0f7ec3618ca0

C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 2e0f67fcc6f7790301dd2fec53573676
SHA1 e7da49b3952e29a042ca5e1df0b8bf119d0f4531
SHA256 f95cc306db554aefca5780abafd368fd1aa9bf23e29bdaa55db6ec15abdd1b16
SHA512 8d69599323ec6b3397fe053a0139b0d65924be5e5883530a0119e2dfe38e993dabf275d6fd01269fde338ce5dd636147ef028c5c69107cd9a2e6f9ac6b0fb5e2

C:\Program Files\Java\jdk1.7.0_80\bin\unpack200.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 bd549dd88a0160d57b8c304aca35fc6a
SHA1 1de9ad88c9480caee1d7993efc90b002ed16c693
SHA256 2c3db6674acdfd2f0e31b92ff750d801a31c455d3090737f08ba1f22fe5fab9a
SHA512 21cd3e35d8d3d1a6bafbd9df642377a17a1a88d909ba490ca2343b4540d471dc5b57cc3d9b4f5c50e9e14560134f745eee09241bbf1df0c54015374354d053c9

C:\Program Files\Java\jdk1.7.0_80\jre\bin\plugin2\msvcr100.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 8ff3aa1d9889ca42555d0ca8678bc02f
SHA1 b7119656355be029b6299906dfafe0e0b31988c9
SHA256 a721237b55995e72114634a37e2b80d0acb8dd5777304993a60cd559182003bf
SHA512 1d485f3312845e31ea21096463d5332d572b91997a60178a490c00a8002ff3d2c6136b58281565943f14da5b1b89d3bfc50619b7f0353f8381ead1862c6aa630

C:\Program Files\Java\jdk1.7.0_80\jre\bin\dtplugin\deployJava1.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 06397c922ea2ab8be11adcc491e3a6f9
SHA1 46f29853b6028ef78a0979f6527100fd58195236
SHA256 d912733575e5817d9aeea90bea1e7d63c0e3390b79094b69584b37a3f601c619
SHA512 6477f5b5331a731f596bd1f0913e3a0ee7d2e9f024f7665fd27ff973efbf8433451ac44d3be8f1907d4a4b1948bd1dc206e3ca235527e521e7bc5403d8f76590

C:\Program Files\Java\jdk1.7.0_80\jre\lib\charsets.jar.(MJ-TJ9302618457)([email protected]).zxc

MD5 bbb30c70673262218c626151d7dcd14f
SHA1 cfb12d86f14422a73b60e75e84013236868705fc
SHA256 5cd6701448f10e2ebde783bfadf851df94f2dfbdae071dec00df5e1c26e976db
SHA512 d5f5ae1bb0a679f439db858279571db356bff4774614d7f67d766cec0bc5f41f26669bf24fd700bf6ef9b7be90e163c5b20f428924390fc93809d97432413ea0

C:\Program Files\Java\jdk1.7.0_80\jre\bin\t2k.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 b9ab108e07439c723e25aebbe912cb6b
SHA1 2803c6b7d9c9232daa74dfd0d3f6209bbdd7f18e
SHA256 a964ec8df0a92d80fa0e43e23c1ee25598ebf8aa93cc95bcf23e4dc6fb9e1a70
SHA512 80ba4e0534d2ed8a8637122de245101cdde520d97a87e1ff50008677d815d0a665a1f62c675231fe20cf306de7fe8f0753d630d58ca474ab96a14a0cae2675c8

C:\Program Files\Java\jdk1.7.0_80\jre\bin\splashscreen.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 e9b3aec30c315e07a8803aac6d103744
SHA1 26680dcf537b6e2111f9377a4fc237f674c17c07
SHA256 60bfaf96978a68e660e42abee2f67d47555c6cbd1890d3b6286ce43143cd7eb8
SHA512 ea2043e77f414905acda51e76b02f1d3c6688231dbbe5e855bcdd4e8fcd8c12148b7196825d9f081cb70de7ef8a4c1f558485ef0aa79626ad4846ae06a5fd05b

C:\Program Files\Java\jdk1.7.0_80\jre\bin\libxslt.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 fbdbc349509b9e9745a153433effa684
SHA1 143ef3f8f4e86070809677c67bb5472509ee102b
SHA256 d6289756f95904e5c9bfa5b7f5cafc20f42f403451c666dbe6d0223141af4958
SHA512 5c802c9640cd7dfb97aa23ccd241b6ec9fbe8596517bab403cd8ef3a3bcd732c7ddd523efa7b8ec98a8c662db5473a9f6cc02de0d6362b63f89441c84f1b2e05

C:\Program Files\Java\jdk1.7.0_80\jre\bin\kcms.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 913de408d3b0488097c6b0c2ed19f7e2
SHA1 505d53e7e0eaa236a4bae5c09c48952b949b41fc
SHA256 78fd549c8a520d8aecb40e89cd14fe4ddb60bf06b58b39dd939bbc2566af6e0a
SHA512 2feadeed48d565b8ebbb5f924c40db19d00412974b37a23c4294d55ec397d68036c22c90ab0a72128061f5c8e50fa809ac5e57fccbf8dbaf67023006a205c42f

C:\Program Files\Java\jdk1.7.0_80\jre\bin\dtplugin\npdeployJava1.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 42c817868ceef0ea62c697e7249e274a
SHA1 a1b1e9c8f5a3861b4d8acec1270ef1d3f3123555
SHA256 c4836ce68394c923afc034ffb1f2975b898e421bfad46db8d30389f67d74a911
SHA512 a903e798a5f99924f4cd65101e16f314e98fbbfb0494986229b543d08a4d72d364db5af446b2551ed1a3e4849de0f2de7a5b35ab3f6512e424f54fb649c1d4a4

C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2iexp.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 6bac07e8a3de53485e976d32b57abd25
SHA1 cddc17055d95c4ba1f0696539ce5750642c62e56
SHA256 c6fd9833a3d37330db1019574e1238a89ed320661ad3a48b4bc3ccc1374d98bb
SHA512 c55dc4084570403727c37f7b69b007c28429e5e8272db0c1ac3477c09809b31a19f64b5c6ea82099893d43a3f4924be0e31632a0ce8fd188f8c06f81915bb7e9

C:\Program Files\Java\jdk1.7.0_80\jre\bin\server\jvm.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 9a1efe4b96d0c3959062ffb7553c52a7
SHA1 95fa62aa873048cec1f8e0f0e1093eb14ffdc207
SHA256 d2416607037e3c4b46617667c7eafe4b9d78333c52feadfbb05873d5b55ea2b3
SHA512 56bcb3f8c69314061f616de8794d2e30a4f1f9b8454efcb08d91025df144cd2ec7dcbd7ef83501b95fc2ac8610eb0a7473221feea4da6b0b8d9cb53f7f9a089a

C:\Program Files\Java\jdk1.7.0_80\jre\bin\jfxwebkit.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 7efeee2345820ab03fd22f02febfc344
SHA1 9abb80ab20a749569d5060346ca50aae7061d9bf
SHA256 5b6d351b039e75904f6eec1596a0ba03c21aceddf3a28c221106ada7e8cf6182
SHA512 a22822f8e73fd9d41e9229ca05e6e26169a381d953f8a141e6c3c4711ee2e4b1a1c486c43a0b96a6a30b4fd39a7b7c36056b5cb4890e923f812450ec69d88505

C:\Program Files\Java\jdk1.7.0_80\jre\bin\jdwp.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 116550d67fb61ef8266448c5b34daaba
SHA1 7cdbccd9f75b78fe4d7ede0643736769567a18fa
SHA256 b10b8a6d0d9ecff3ba5ae2fa80bb68c2a09d8220f45262535c5f4e19ef412008
SHA512 f99a804dcf5df5298f21bda8881c86b70a0805ba1557477e039efe9384b1db22671bde6f48b6c25038e94e467eeb4e97fdadc1558438fb0f250fa925928efa58

C:\Program Files\Java\jdk1.7.0_80\jre\bin\ssv.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 19aff85ff24880661958888827c9b134
SHA1 94ed14223ad7251472116433e7fd256510b01b08
SHA256 5feeddfd59166f8ebf68a241677349ea0a85a968ba682e9d10b83e4d956aa9cc
SHA512 9fad4e12a5ba2c36c14eeb1fe1896d8e8742a9076debec2f2cb9d4497df4ac5eb9484ccdb3b1b70c3b1e669f917d0c14912651bc88478b62d520fe11cfbc282a

C:\Program Files\Google\Chrome\Application\106.0.5249.119\WidevineCdm\LICENSE.(MJ-TJ9302618457)([email protected]).zxc

MD5 1b142ca753ff5573366480d78d509867
SHA1 8b757dab64c5814a5dad46e1c1ffcd6edd09c5ca
SHA256 500eae48b64da82139429dfa15f1988dbf93b72c92bd828415bf1b6572627ee8
SHA512 6e69cd64913eb9408f101a2beed71e554838a51be89e8f3ff277089d4f692670ccb31b609c1f517d924dec4e0d2fd845e2a919cc435283cb492d12c1e2ad89b1

C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\SmallLogoDev.png.(MJ-TJ9302618457)([email protected]).zxc

MD5 5dc38379af67506d49c5c8ffabdfc97b
SHA1 79fb9c9efa25fcd5c3da9ff16cbcda8daa809748
SHA256 0b26c7cdec4df68fd16480ab642891304194c408346bb9fc6e87c050bcdbf68a
SHA512 673d139e28e2f28ef32ed17ac630ea0da428415ff4956fa71607fe131e4a794f4f22814aa6224d13f4b6db6e8461f34f27593a3f6b253bf5c9373da0b50debda

C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\SmallLogoCanary.png.(MJ-TJ9302618457)([email protected]).zxc

MD5 a5246289cfe941a3a6da11eee2a538a3
SHA1 84e05e1df9e847b6dad4ed2ddc66c8f976b78f81
SHA256 b716f600c02bf287f23570584bf049ad60a2a74a807f05f9bb9cdf40103c9bbe
SHA512 33df1a6f9a0cc87822e8e7019f057521f04237e06c34ee9f1d54ecb88a42059f1bb9a177195e63fe936c6aad3aed3804b2e33dde0d0a7ca114ff07f0a0e06947

C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\SmallLogoBeta.png.(MJ-TJ9302618457)([email protected]).zxc

MD5 611f987aa61f62dfde9c6cb792b67239
SHA1 af4280f527062d29046fca309d1bab9e0d25e6a9
SHA256 b1c4d3501b3995331e2e14473525efcbe189147e65b94c1789eb549998eb23c9
SHA512 c998b592d2bfc019e550d8093e3e4f296655f52b7543076c72022b589c714f8f9039da0472868797d2a49b8f1fb9fe980c311ccc649a5fe374e02fa20c9ffe65

C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\SmallLogo.png.(MJ-TJ9302618457)([email protected]).zxc

MD5 5e91c40ff56f9f20f8736489c0f086cd
SHA1 ce38cb48f741757ab70eca795fc5b550a605de08
SHA256 db626e9bf828a37c7f8ad61cb47503f6f25265d155cfed034264537ced8e6bd8
SHA512 57c15da234d13a4ae4d4240eb4eaebf5689b0f4ebeed5fcb98558e869d253c232e4b955e2f68cf3d40a870b6a842069826d2109c775071e29c6724fd1862b12c

C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\LogoDev.png.(MJ-TJ9302618457)([email protected]).zxc

MD5 eecb7bf26d5bc0bbadd119451fc5e0e5
SHA1 34f0e0ce4f891a25137eeca49f9ec307324cea00
SHA256 8ade2fef43fb52bb698e0c87b1fb6088050edbf26d2d8d08eb9ae85c1940bef1
SHA512 265a81b1cdd0a483a2e3303ed5fc7a08fa7a3f2b2334f365973dfdae34f17d1a1bf1de67d8212329610562ee389bb8ff5dd78f3a449e1456faaac1bab34dad04

C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\LogoCanary.png.(MJ-TJ9302618457)([email protected]).zxc

MD5 c8278addc68ceb7d205ce03caa762e35
SHA1 541a5a688d4212ac6cca5e8c935a2a49a50ed7e2
SHA256 618df8e301c59293893504654021f828a51d557bbdc1ec71d3d289225ae258f3
SHA512 a3e8835ff927e7024fea6e14c9a929c1d6c26addf85584268ddc7a5f8d6a51db5543d8c5b29de4253c225a9c8264e56dd047294ab4788bc65a2cbb8a7e7b2954

C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\LogoBeta.png.(MJ-TJ9302618457)([email protected]).zxc

MD5 1f3c6a5dfbd9c044bb879684fdf89d66
SHA1 c7acc23d3e011e7dbac3b00661bdb4b188e4cc0d
SHA256 c034e2643ca28ca57b6b4d3251f094a7b98c1d96b04d2e219314e1d70cb100d0
SHA512 614a9603f660a2d9771b07207dc0e543a57809d6a394548e67f6c81d44c4bb7d9c38926fb248c8ed3201cf73c0359d4970bcaa1289f844c140ea59d01bef6fda

C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\Logo.png.(MJ-TJ9302618457)([email protected]).zxc

MD5 b56bd4e2b3a6e8c1d37d453d63e89ca2
SHA1 3b5f3faa96bed1a5616ffde7cca59e2dc4362fe6
SHA256 503d673ca8da4fec96cf3071d88aca04ee50bbf46e03d921fcfcd3d52f80e188
SHA512 b0f2dc628565b7d65e790e7bf476407d50af55a0e3154562bf8d493e440e2967763e8c3c12ad5436f7842f951d469fd6462054078d41b827698f6da6d6aa43c6

C:\Program Files\Google\Chrome\Application\106.0.5249.119\MEIPreload\preloaded_data.pb.(MJ-TJ9302618457)([email protected]).zxc

MD5 e2fbfd551add5a6613a9facc92944e39
SHA1 3e5b2c0980a59ec0bde7e4a6b9b49c037f164704
SHA256 8a7ea7c92a46874b3b1d50ec5675cfd1d7c3dd4c084939830d7de579f55879c9
SHA512 b52229819abe5d2c972b04db27faeee54a624379fbf2a4f81aa1754ec144b680edd284e71347c749f19d1a190cf196acdd731e2ca13b4340d3810ee6f9ac8692

C:\Program Files\Google\Chrome\Application\106.0.5249.119\MEIPreload\manifest.json.(MJ-TJ9302618457)([email protected]).zxc

MD5 2de862ebfb1da1a911428532ea31083f
SHA1 66873754dad5e8ec7efa276c3a5689efc5ac4e10
SHA256 a5b986c87858b9610e977537924f9e381bf04086cf5b7e2ad24b68fb62adf4e5
SHA512 a69525d0ce70c918517e6a3e792cf8b6ee0955b60e1952ff44975f9f24d0b706641265e4d0900df7fc5ab3aab7885e49e9b396884b81d81c4576b9034afba704

C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\da.pak.(MJ-TJ9302618457)([email protected]).zxc

MD5 99ffd9df5008e01a993c2b7721efc47f
SHA1 f841e731c2ff185b834e96135b4d7ef13609d57e
SHA256 13775b1bd2d3410b0fd40cc66f0a018a51369b3e51a0305108a71596272af021
SHA512 06548f77e11114fa2f42f8ecba50b02fcc8c881430038abcbe0de1be9b0f52dd7faaafda2d118794f123f09815020bf85853f99fa5bca8b69b2412a88ca20609

C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\fa.pak.(MJ-TJ9302618457)([email protected]).zxc

MD5 675caeb2f147cf69ac9eeb8307eb5d4a
SHA1 fe44d3459aaa28711ef5962fab3e563593990e9e
SHA256 59576bf908afcde7b0eb39e4fd64ff99ece403757c736d1c0909f66d7ab046f7
SHA512 793e85f3c081a262913b8f2de7ee4ac0dcaba7647421561323f75159276904cc7f60cfc9016aa80c8fcdd0bbf574c45c21ad015ae762deddfa13feac12fedf7c

C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\cs.pak.(MJ-TJ9302618457)([email protected]).zxc

MD5 9ac853b5e3682cc839dfc03b05fc6676
SHA1 d402fe625223a660c74f23ed55569c6225fda610
SHA256 140bca65e9bd434edc6b4e7df17ef74ee3c53bc1c73e4442dde7bb67792c31ac
SHA512 b2a0e79de22dfb226873ebffd4b9801447ed0af5e7cad1cbb9755ef30861303845b32fedf9b146f3526be77ca770fa78c434552ed96c82f2fd290130b96eaa33

C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\ca.pak.(MJ-TJ9302618457)([email protected]).zxc

MD5 d38a3dbf5c7339f418668ca39b8cf7f3
SHA1 0134fb6af8794584963b82c321e4c4465824f277
SHA256 4931f4491378f1d3246842fc7a3915ee24f36fec2fcd087943c1090e4377918c
SHA512 f053f32b2c332b479a931c18e95b3ecbc63a7d514ee5bd26b1e4e6acaaf6c095f44e6e6b92d73e5d8b030268663849cebdbd3219a21cc8177e7144ffaac8dab4

C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\ar.pak.(MJ-TJ9302618457)([email protected]).zxc

MD5 5813bff3a2b62fe2b96a6d85896ae7dd
SHA1 eb1ce66e282520db1047b2611ed0d25c490c6bea
SHA256 20a864d45ffeb330525ee4007753466bb51f3b8b74e0dfd00280f6d6cfddb749
SHA512 b5bdc564798f44b3b54deb946b1e99397b6fc2cf9dc00431dbdfcc7030a0a683a441eaf2eb95131933bed4cc5cc39f8f5ea1ecc43f1317d9df8d08319640419c

C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\am.pak.(MJ-TJ9302618457)([email protected]).zxc

MD5 59d1d06d967691d8c89cf7757c9f8920
SHA1 53bb383522f04beb2c24f76ef0f0dad46d13ea82
SHA256 cf145952dc7b13652da92042d2b4e7464265905c086d75a4d0390927ef7bf50e
SHA512 68d493051aa4744c81540d510abcebdcfd01df0dfcfd0cbb24840f025e76ff6546205c5b26f4b075dc841373d2d6cf3f044e0bd798f908c82bb50730ed59be91

C:\Program Files\Google\Chrome\Application\106.0.5249.119\default_apps\external_extensions.json.(MJ-TJ9302618457)([email protected]).zxc

MD5 f8c895b8798919266faf76c4f9cc96b1
SHA1 324efd1fd538c7d45d7ee879b50c110bcd80f328
SHA256 4eb5b85da6d9e9835cf8cbe46fae5b6ca1d4ad11584da580a75fc5ad7447d914
SHA512 aa5af97c2fad41042f059736f408b914cbba53325b4c763891e849ce5c2b7fcdda357aa410e5046288a25476d5a3fb03ce3e83a2ba7da8ee866a346f210b6199

C:\Program Files\Google\Chrome\Application\106.0.5249.119\vulkan-1.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 0a2d0aac26b2ffe3856f4bb5231bf065
SHA1 10466010f93c8e1da8b6cc4be311e132d83de4a3
SHA256 f0dbb0c057430129517d751d60d1ef5922901902ad454b1070e5d8b82bcbcb43
SHA512 1cc6f5ec2e81a628aed875405011abd0a1067f92c2b1e58806a210693df439ee075386b8e974a8d40b712632f43d843f7f7a5e0f4c31ae2a6ac87cdfd9777c93

C:\Program Files\Google\Chrome\Application\106.0.5249.119\vk_swiftshader_icd.json.(MJ-TJ9302618457)([email protected]).zxc

MD5 7dd866412b058101e16f60acb4e2b74a
SHA1 35952b2b1c4707b0d53accc3ae326a21354603ff
SHA256 ad105ffd27e2b7885d4f5b9c48379a8f2c3c3fab6bd68e093313062903fd2508
SHA512 9cd5c83b0d0206cf01ad311e414e48115396670dbfde023a673f8307a4601e55e790df3792b5b9a08e1289fb7faa47a3bde054b5ad2c66f858fecd3393f809c2

C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\af.pak.(MJ-TJ9302618457)([email protected]).zxc

MD5 fab854c10488da7f2fa8ec9f36590397
SHA1 32d6c190aaded73233f7d8e5cfcd58958de1bc48
SHA256 4e29b459706d4eae51fa734e8939973969a2b4e24199c8b9f8cd5ea9f72a222f
SHA512 0dfcccb51737c14f54a9a29a554a3118a24ad9ad9a15ed31d1c3fdb6ff90a736de95e5755824f4a4e25efe713410864b4b0a6337798d8c019566a003ce960d82

C:\Program Files\Google\Chrome\Application\106.0.5249.119\libEGL.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 bc00681fbe1da700eb2fb30bf6943831
SHA1 416317daea0863b04478727d86569760cafa94a9
SHA256 4bd9b7ee4b47e122f000c07ee381c3d66d81d3566bed48f74d8c752a7157f3f0
SHA512 e9d8c56c73a18a568b35de2c3fe65b70083e52c8eea3b3039869fade72a265a0b7e3cd586e745b50c4ab86bdcc130e7270ba6233514d4cbd0f68aabc7014d04d

C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome_100_percent.pak.(MJ-TJ9302618457)([email protected]).zxc

MD5 f5ba130f03548023a7776454eaf38ec9
SHA1 92b84065fe443f370b3b295b38a0ac52223b2e23
SHA256 62e984bc381f3c75552bb936c39fcb038123582234db22622dc1d64b17d94b8d
SHA512 abc6f9df673350dbe0db2d6fcf0afc8e61d2c3a2800743e7d070ba0dace3609c219d36dc35662a870cf4ae6bf58e701b7dd4c69cf2c577ee28db8e6434509f4e

C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome.dll.sig.(MJ-TJ9302618457)([email protected]).zxc

MD5 e90bae9baf4976a80b2597b2d452e97b
SHA1 5f3af227fdf295cee97d115b1cf48a03b12c35a6
SHA256 6080c44e1d9774281393e4978ea6f8680c6e121a5a89bf71f04bed6074e03933
SHA512 4daff509e3e1e2c713e4e1c879332b53af5bc5da1bfb81badfeeb7506ffb53ce83c8ed38aa610588e85af4926fac3896511a7146042b7927b864fca50f8b664a

C:\Program Files\Google\Chrome\Application\106.0.5249.119\106.0.5249.119.manifest.(MJ-TJ9302618457)([email protected]).zxc

MD5 2a54875768157cd22c2d05c0f98f92cd
SHA1 b554db766924e546a4c58862589316c97e0598ab
SHA256 204a54b766a55a92a40ee696d025705028011e0b35fe6d3d52a144d2ddad3e1f
SHA512 3b8b17222fd8cd28cdacd37da30ad2aac0050067b5c98ecc412c73c929119aceec53d22b61fe80f2e4551b27ed31a73695ca62d87d953048265ab4b361b51aaf

C:\Program Files\Google\Chrome\Application\chrome.exe

MD5 f5c3c8a92228a98ef5610657a0889e97
SHA1 d534e67735a6178c18e2ed13cc326a5e747a2145
SHA256 ff64ae732f6e0c84b867bb5fc26d0d4778e17e13810750609760d96fe747aaea
SHA512 544c1957ef08b73a4686a2b055ab420a8e5fe7e31f94cdb74207c801b50adb3b6902675fd2bd722dbaa1e644f3ce85f9bd97c745e274a98a1c11956123da587c

C:\Program Files\BackupAssert.mov.(MJ-TJ9302618457)([email protected]).zxc

MD5 1060a801e1a68d870184bccdf45dbffe
SHA1 bce589bc9212e06b336820c7437fd992cd19f308
SHA256 696da1d3b432d853c5daf0934e415a22a76a4106a889655a47905d90335762fe
SHA512 102f2e8417f75e4b81fc6fd150f2b7e2a562b1b16e7f051a5902bb1ce11418fb816addf687b687ba35d82751328dc553118323178435236da9256f73e8890215

C:\MSOCache\All Users\{90140000-0116-0409-1000-0000000FF1CE}-C\OWOW64LR.cab.(MJ-TJ9302618457)([email protected]).zxc

MD5 5846ae2889857d8fa52ff157a914540f
SHA1 b24ac92fb5247c0afad28fefae63df63241758b2
SHA256 356f9c64cd2573b1e3d13644a6105f2836767524c6532b1c1391d193f4750706
SHA512 ccd7b711a898fa7ccc39c6768a620c5135a9412c6ac055e36dfa82d4b43a3c5a5fcb5bce1fecece7b90fa6ac334d5b3d8a4fad1ced78fad0ff35b7db9c1666b4

C:\MSOCache\All Users\{90140000-0116-0409-1000-0000000FF1CE}-C\Office64MUISet.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 baf1cd744acaaf0e26b32e97a59cb925
SHA1 05e937f48a3b9b4686aad4f43630d751923c3b60
SHA256 72c04a496d8d825c763ebd395c66f2a2106856ec5aec59c127ae694ca0d85984
SHA512 c95d762701e9f39901046469a071ffc629d2772f812d295669c92b971a5eea826a39a9f0e260c6956921356f96b57d66c8adc522785ed9eac31cb5df6216f639

C:\MSOCache\All Users\{90140000-0115-0409-0000-0000000FF1CE}-C\OfficeMUI.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 3f6cdb0aecfff52038293e74f09c3a76
SHA1 26c0d2c6a15ee259669bb0b1fc6297ed8ea73df5
SHA256 231989c38a8eac21b55d1b9c4eef45325b22755d13e53fd05d5d02c6a10f31bc
SHA512 b3e39687a59eb8d8648d98ac1da4c1100674a64e8e8674df1c8f14adcd371c34e35e15e417f6f98ed959ede0726540a4ee82d6cc0f1b8db4cc0548a91a0de78d

C:\MSOCache\All Users\{90140000-0115-0409-0000-0000000FF1CE}-C\OfficeMUI.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 097a86bc54cd0dc9ed9c7f3ba24f15a8
SHA1 58da41a1a77c97052edc1b77cb8bb0e15c3dc21f
SHA256 19a99532428d053ae4922dc8845e85127ec195c3e9d3feaa9e359d59a0953a6e
SHA512 d4060c84ccaa54a97362e73c108330de01660a84275b5cb1b66f7618d6482ad90952e604416a6a9e948577177c70566fd0be8ccce3909de740ab3631c030de5e

C:\MSOCache\All Users\{90140000-0115-0409-0000-0000000FF1CE}-C\osetupui.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 9394690c1b96cac3f406a0ced4bab1a1
SHA1 56d880d04480ef84d1ca866707c23175c3de1735
SHA256 94244b625da5687490b083b49dbe2627ed7af4b7072bfa29dbe8093fde47bcd5
SHA512 baf2b9dc852506285a321a2c1aad8ac605cb9067197b700b7c6aa717c46bc0b1a4d60a26dbde9ed6d406949aefd9f76f2f0f8d4948cba3d8a37523b81844f15e

C:\MSOCache\All Users\{90140000-0115-0409-0000-0000000FF1CE}-C\msvcr90.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 d5f6b425cd4e4a207542138a0495885a
SHA1 b513aee179824dccd74467255ddd2bdb167ed31e
SHA256 0cd7796dd50bc7a09d0daa0e5322c80bdf29ad11cee25ad4285db7b672fab790
SHA512 63080e09da03dfce664573f229fc66f3f1f88b012fdbbcca88230a4bfd1a89a33aac2eb26f3d73c3c2cc0cc066d1a6870608d97061d88e43fb08fed6dc99a6ca

C:\MSOCache\All Users\{90140000-0115-0409-0000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest.(MJ-TJ9302618457)([email protected]).zxc

MD5 177fa003b42b4246bb365043bcca9d7c
SHA1 40d9dd1d5d648a972d4461b7034f7ecbfc671fba
SHA256 62a3491eeff9775258829aa4f387f60919fa59ac62cdadc9cd4260c5deb52fce
SHA512 596a62b83b4278e60b337a409ad6926ca61756788c47314e6b5cdf870986eabc7cb2646239a8c6434d26abd49eb3716ad135cb9a15f5c744ffb4b142a132f1e1

C:\MSOCache\All Users\{90140000-0115-0409-0000-0000000FF1CE}-C\DW20.EXE.(MJ-TJ9302618457)([email protected]).zxc

MD5 602c1a1a8753891480e869f5e7968c4d
SHA1 918d3a08025cb91f71824c9fe5e0c392af678c01
SHA256 9770a2e32a4149d464305462af8e581544ddeab04e3b178dfb67fdf0699039c2
SHA512 0303c42678e0cdfe43564003f79d74a601fd51618c29047e5aeda67a44bbd8927697e341c8f053f60a0da47e65dc25bb8a32d026afae15ed33f091802a4a9525

C:\MSOCache\All Users\{90140000-00BA-0409-0000-0000000FF1CE}-C\Setup.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 537d299fc63094ac603bcb06bfe9e9e3
SHA1 f8a9e9f0fcf9ed5638c831820a09965a3717759f
SHA256 d685512d23754eb8cf4cac906bad8881dcacbb290335a3bbdbc90f86d8687b90
SHA512 700afe133be2ba2ddbef37e25208a8ead117c3182f39ff56b23e132f00a570b029d1a06bb57ee3c78251e033daafbb87f5ab2f93590a4f5e12e96dc87428f696

C:\MSOCache\All Users\{90140000-00BA-0409-0000-0000000FF1CE}-C\GrooveMUI.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 e7d7567c18a69bedb1d6cd0e8544bf1e
SHA1 0edbb214c34cee17a85de2ed6428f867962d8230
SHA256 c7c03b63b90008c3a57875cedb228d580394398693ab6e0df0b87faa87be09fd
SHA512 fa0b635b5d949f6b140e5f823b9d932a5ea95e60f517a804d436277b80a47ae3f501bb4fec3d97d7a1e4e6448b0f30396cc2bfe5fe5ac4b93c09d2cfb36a154e

C:\MSOCache\All Users\{90140000-00BA-0409-0000-0000000FF1CE}-C\GrooveMUI.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 5111ffa43f8abc633d816e6778603dad
SHA1 8956c975e179249292ffb09417b76dc4a5bfaa55
SHA256 fb0e15562de04e2e212b5532f960d048aff913a23b9aebda4f3ed3412cd81948
SHA512 3b33a95409f2306231a5e2dbbb395b7935288d21396b23a68105532b0c89607983c6344eea5cd8a80c3e55fe3a1fc22c2d9ef9a0239987139c1ace75c5e013e2

C:\MSOCache\All Users\{90140000-00BA-0409-0000-0000000FF1CE}-C\GrooveLR.cab.(MJ-TJ9302618457)([email protected]).zxc

MD5 74d9d337f15f51d2e737268c3513e7d3
SHA1 75fcd5449e3de7fa7779c4f08432bf3cad4b6f27
SHA256 445cb72f2f093ee053bf9a3dcc1b929effa85d33f39c5fb772810e87eb1c1543
SHA512 b14f2073b7966fd33b1562713bd8669a18aa2af77fcfb29ba44b846f9ce757040db405e1a79df161cca150317d70f43ee7c9edaef0fcfefc64272e78d4cdee99

C:\MSOCache\All Users\{90140000-00A1-0409-0000-0000000FF1CE}-C\Setup.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 fc80b7bc87e19e40c44538e10cdc0c6d
SHA1 09022bfd490da15f0eda84dd3ba8da7c47ddd287
SHA256 5dbffe165467e3dad5cecb826ee3be93d148775b0e28d31cd3e4b6a6ef0bbe0f
SHA512 d38f733d7c0679e850d1514eb2352b186f111fa2d9eda827364559916e62792df5a2bc25fa36f851e57669a3fca86da54b7554b65365b2cd4d2be0487fa6638b

C:\MSOCache\All Users\{90140000-00A1-0409-0000-0000000FF1CE}-C\OneNoteMUI.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 cbadbbac219f8c19e4c59281f678dd46
SHA1 c326c7f7caf1b70ae35f9aee70d5bc6722d80c26
SHA256 5c5ec3e6509d6fd3da041220b6ddff3dac2b928974927969b7292f22155e0574
SHA512 cadc0341ac3855b2306f9d90a4448db8bee30265eefa5aef00a82709e8a558214b2d98c133ea27441f2e169d98c1ede0b1aa44f1b7beacc63f800e05505f2771

C:\MSOCache\All Users\{90140000-00A1-0409-0000-0000000FF1CE}-C\OneNoteMUI.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 929850e472b0b6e546d7f5f3b91b388a
SHA1 75ce224214df569e82286c8567155e58424811c9
SHA256 6e44c8bdbca539c063ba92f8d0d19cadc42b8f338d82e6b0a357008fc29181b4
SHA512 84d8688dc8f10e2fe22a1faf7f6fb5edf8789649dbbfc7ef1ba57e593b89ecbe4da73fd01e68096cf591743e137bc21d156e5c43b1044fa1f0fc589cb2433077

C:\MSOCache\All Users\{90140000-0044-0409-0000-0000000FF1CE}-C\Setup.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 b76027e9998ee561182c60ef28e6e41a
SHA1 795ffa66552872cbbf3b54d811611f2e3575bfd9
SHA256 a5a7be9fe415bbbfe6c647642de256ec185a54afad87561f2d2aa1d8a00f8ba4
SHA512 251f56978b8f41233744e573fefc451e241017895c2dbb2e7a4a8a04b5f0f2c98e9a73fbc22a42efcd6e6ff9ec5e76a51ce6649e77ee5821900980564a26149b

C:\MSOCache\All Users\{90140000-0044-0409-0000-0000000FF1CE}-C\InfoPathMUI.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 395de418f37f118a709eb46f21d26716
SHA1 d6d30065f38f4e44a52f6cf3b4eecc048382c94f
SHA256 e92a92573240ea37f299712ce7040c4814920c359715a799d60b23806961ceb7
SHA512 a3387dcc598b49d654130d773cc54ee855809a246230ef23bf13fe58bae8ca86af6eed4b48caada2b429d39264cf85280694efe7e44c1497ea8ec3decad8115e

C:\MSOCache\All Users\{90140000-0044-0409-0000-0000000FF1CE}-C\InfoPathMUI.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 3748808c8613e3873f9f2489d389f525
SHA1 5ae8014555505a573502e745c35fd2ad0e58ea7d
SHA256 b9a38b4f87f4f3f96bdc3ca39d9f217189aaa9dd21e1cf2747a86dc5a96848a5
SHA512 7cd5cc2e261c902156c29c12dc15f7fedaf0e2d30febd30698b41f69bdba92fb700629c204e524725e3a63c50079bc619ac16cc858881e62a475171cf1aa0bf2

C:\MSOCache\All Users\{90140000-0115-0409-0000-0000000FF1CE}-C\dwtrig20.exe.(MJ-TJ9302618457)([email protected]).zxc

MD5 67d4e46fafa25a9c43efede71b6f4220
SHA1 42eb74c82d029400e413d5945e9b979ab7fa8722
SHA256 fd310a0f2a0e317724fa1c13d064a38cf08abe253b9d9eeb882ae7988e59083b
SHA512 998b90f6879c89053dcb6c2a918352a2cf4c71c2f19863fb9fbbb049c049f481be4ac74fbfdfe09e452ad718f4befa07b38f793e31b6b092ae7efa93ebc94fe1

C:\MSOCache\All Users\{90140000-0115-0409-0000-0000000FF1CE}-C\dwdcw20.dll.(MJ-TJ9302618457)([email protected]).zxc

MD5 bac1572813855afa8560387cd512f79f
SHA1 19750cfb030cdf1f47adcd1dda97508e8220223c
SHA256 8cb0cc17ae9a9a066f1f436f69a07707263d29850f131d6731eb01e444b85cd4
SHA512 0777f571a7f7781f05e5084f3a66bb91156ae72b8f9557aaa467a941e0da1e4f3419b96a03df1aa3297ccef66f9005323025defb816804bcc01e0ef4e6f2af1f

C:\MSOCache\All Users\{90140000-002C-0409-0000-0000000FF1CE}-C\Proof.fr\Proof.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 1f80c2e1840281e15b36b6eb5a7bdebd
SHA1 7cf3a8a6ba5b5385a5c0deeb7a4033d11fe8ea3f
SHA256 998d1c8b9aa0707106090933fea7975cf9893845f5b17677f2885ca8ab7d34f4
SHA512 bf1299f26a1344b713cb757235579510d03e307c26b064f4daacc6e27bdf4a88b69a71fac258249fb01a9e1ead5bee33927c1abbbbde01cedb0246c6e0fad871

C:\MSOCache\All Users\{90140000-002C-0409-0000-0000000FF1CE}-C\Proof.es\Proof.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 fd97ad49ae744e3cd79c2ce045907983
SHA1 972a2a4d49331c9679b7bbabcd93ca402dc6355c
SHA256 2e0837e32d92a2a17ef2ada1360cff01feda599749a0f87202f01b2e7c757b88
SHA512 14a5e349dfcd75d44b0cc1273e734d05891ab163a983883a8a08d111df6842c4ecaa90b4ed8fdbad3d909ad2ae367613259a067e1410b0f74b6ed56112339ac0

C:\MSOCache\All Users\{90140000-002C-0409-0000-0000000FF1CE}-C\Proofing.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 c88225b0d3f2e0955c722ac5e4d3b47b
SHA1 912b7bd7c94b2183c087c28b3de21cbfb1583947
SHA256 a748f9a059b53eeb29bd4558589558854c2a68959fdfd330c8c31a251108b4b5
SHA512 3419d602ce90a6462f34551764f971b2e5890bdbeaa25ae16edd6c8ccb0842f8d046c62da690f20506786287efb75e049722b34474de69ef697c24abf17ce146

C:\MSOCache\All Users\{90140000-002C-0409-0000-0000000FF1CE}-C\Proofing.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 c323f86af38b8f3aa368542a6e8ec026
SHA1 779b236c21166cf2fa0a1ce134b174cd0d43a8e4
SHA256 80acb5ba638e3038f8b7c2451a86fa9fcd84620669c639392d5f3ef8c897bf5f
SHA512 a4a59c53c9215abfcd2f1b74c78da96e34574e32de142fb88d6aaa3cacd013eaf1fcf6573ccb7a7bd62a8ce8e7109e832e6b03f08c25584bc50fdbc3de849c3f

C:\MSOCache\All Users\{90140000-001B-0409-0000-0000000FF1CE}-C\Setup.xml.(MJ-TJ9302618457)([email protected]).zxc

MD5 aa6997af58bcbef959bdc01305d674fd
SHA1 f7a405e0cf01fe612a54caa72723d7e2612e3165
SHA256 4745d5e1f012734918ead0eb9a6fd46b32efe317633e6797ef7ec1772853b545
SHA512 8dc5d6287ef22a6a095761e47070a5e014e33f2bb73528cf2a741c0b27b88a9129da56ebec9a1de7a4efee63df61ea62d1d5c5bc05ca5b37e5151ad8d4b8a907

C:\MSOCache\All Users\{90140000-001A-0409-0000-0000000FF1CE}-C\OutlookMUI.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 cefa2c65df295910dedb71768dd322e6
SHA1 24653ef09e6b06b0e751916c3f5ec2df14b30bd6
SHA256 d3f43ef8abe86b53c6d4b8d4cc3dcfc1a2e750b54feb77b43ece80e4bfe4a842
SHA512 162df6338e0222fdeb10830f0a9af2d8a630aad52fe9525aefdaecd7924699c4875430382d2d7564a26278f0e3532aa57c1f73cf5cf6ae1f7f3f366c61c4bee5

C:\MSOCache\All Users\{90140000-0019-0409-0000-0000000FF1CE}-C\PublisherMUI.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 9ca458d9baaeabb3607944ad4bd2fc50
SHA1 fff21be5557394c46ed9e55767b11858145c1322
SHA256 42655fedb18c1a8d53d3a5471a0497810ebe97123fb26f931bf99b941559242a
SHA512 3e9f16ee5323a2fea4e5faeea3dd4acaeebe169d0f428dd90319d214e08fddca6f7faf4d7912a9eb770e468c93989a1786fb4104a9c116b5b1c5adf898d18404

C:\MSOCache\All Users\{90140000-0018-0409-0000-0000000FF1CE}-C\PowerPointMUI.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 25f63ef82905e5699b1ebd1ba5c520c1
SHA1 d54d92ccb11c39ff595596f77d831b51b23b91d3
SHA256 e9013c63c2306cb27a971040a5d9942e914bc1cf4349faab90268628628d5130
SHA512 a30e68b8249f7802a03ff6bf6314bcc419e4098ed7acbf874835871a17e5e357e3826141437b85eca4de0d60c0bc2d687d52ce9368206fa63499a568bbc46490

C:\MSOCache\All Users\{90140000-0116-0409-1000-0000000FF1CE}-C\Office64MUI.msi.(MJ-TJ9302618457)([email protected]).zxc

MD5 0e855921de98f28d19d4958b4054ee01
SHA1 53657e8cdba2b026190e064eb66e655ea4209100
SHA256 5150817aeb9e0f7b02cf54f2441a45f8f4a1e8318725d3abe9fc2a694407e420
SHA512 0a667f103996f048bfd1586d481c8859f24a218230c8893e874a7c40ad1a7d3e21115e1a8d5ad4ed090c120ee3cd420495dcd7d47f889dc6f58a8a6e20a001ab

C:\Program Files\7-Zip\7z.sfx.(MJ-TJ9302618457)([email protected]).zxc

MD5 02c0f1f0b41c222593be8c92bdafa241
SHA1 21cd77dbd1bfbde8128ca75838d1899622a27e46
SHA256 34b14fe896c4609fe3ddee15a72c3d1af2598324c4db126dcb0becd067bb3a88
SHA512 190a25a465a1fcb99e5604266ff9d3298d3a16ed1bac3177545c36334dcf485ec42454cf23b7f7c477617217c1af12d5241cf271b352afb637400481bddf40ae

C:\Program Files\7-Zip\7zCon.sfx.(MJ-TJ9302618457)([email protected]).zxc

MD5 87249c03b12af6c1f42dbe639d519be5
SHA1 9c857b60af1203e65b3ad075dd9fe09607a57c7e
SHA256 a2236de146fc34b3a3a504a65a2ae68a7bfe319a66e055c1065e819473cd46cf
SHA512 5820558270045d6bd79bd208281edadd4c0c454e8454474046a45678359c6badc7b4c24d8be74095b83def40f1530bfe4f58b754717d4a870ac8cc16bdf61ada

C:\Windows\winsxs\amd64_microsoft-windows-s..boxgames-backgammon_31bf3856ad364e35_6.1.7600.16385_none_668d031845881638\bckgRes.dll

MD5 675933374cf4f2801fca41dbe2e5a7b4
SHA1 ed9d889752c8864efbd20966ef7e033c4d783091
SHA256 a5a5f38a72f73ede348384eda95d7106f3a070a16d4de1e25507a539bf16ed80
SHA512 c72b92ffb18d34eb0115b8e5ec7e8dab8f1bccddd85ce0bacbe830fe3d6a547c17c8b70047899eed9447ae48d4924e56fbf2b265bdbb19e7d4e519754b6c9444

C:\Windows\winsxs\amd64_microsoft-windows-s..erinboxgames-spades_31bf3856ad364e35_6.1.7600.16385_none_6fa6d7361acba514\ShvlRes.dll

MD5 ac4fcc791cc44478bfd402582b964b4f
SHA1 2849f7bec8104c124b86d435f6a462bb0a9928ee
SHA256 e474d6ca46d9cd07f5760742ba59f9648f7dbba5bf2074598cf2df28f74e672e
SHA512 ff3f840b511cfcfd694527685b877b8aee10d49779294751e8d83951c742dd5b66aa8e2d6492fffb161bcc66892470fa915f194746c7e0726b2b8814eb876a11

C:\Windows\winsxs\amd64_microsoft-windows-s..inboxgames-checkers_31bf3856ad364e35_6.1.7601.17514_none_d467c138cbce0b24\ChkrRes.dll

MD5 8e76bdadcaa96bf51875bd948076d4a9
SHA1 19901b28da153f0ac60068997e609bd97226062c
SHA256 fa3cf486ac7330207247ca9a94e5a093fc2703afb0910410fcdd3206b3e71d2c
SHA512 6bebedf84416c1973fea3562f718560ddd5b3ab9f6940c5ec99e28363d6b6ae68486a0909cef36c2493246d6820ee0273bdfe05f143d251b013a19b585d70761

C:\Windows\winsxs\amd64_microsoft-windows-s..inboxgames-freecell_31bf3856ad364e35_6.1.7600.16385_none_b466b741b68bd29a\FreeCell.exe

MD5 4409613fde833967848cd2ad30599909
SHA1 095cf52c5b6f3098988a88b5f5929c91bcb0a80f
SHA256 5d5282d64949fa03599079612b4431f6a96f1473570a5223e90df2ce357db159
SHA512 096a911c68faabb3c64204d25ee77cbceb98bd0dc79175b59d69ceee1179e2203ed03f32172c5b40e7172e830fc0274e6196f8c8dda7041bb23f6503953281a2

C:\Windows\winsxs\amd64_microsoft-windows-s..inboxgames-shanghai_31bf3856ad364e35_6.1.7600.16385_none_1c98ed5d08db04ce\Mahjong.dll

MD5 8f08a345d73ac89aa09a4f8f59f9f824
SHA1 ac357e57695bca7ba0f3a052ba1178adb1c3582c
SHA256 3dddbbda4242f93e5c4e61de0f23686361dc3ea1bf2adb25f28e47c4a70770d3
SHA512 22af9f7423c7e44097c80690512a59e35fc3b47077716d4d0faf25bd18032b4c3ec0b37cb8f8ac1727b739cad9b222fbf8c8acc56d074f0d29421b79b25e238f

C:\Windows\winsxs\amd64_microsoft-windows-s..l-inboxgames-hearts_31bf3856ad364e35_6.1.7600.16385_none_4ffeefd67d89d45b\Hearts.exe

MD5 f191c7511f68a64aae4f667e3685b298
SHA1 e14c1956a30dda1b4161ec631b0791dbbe3994ff
SHA256 b68d0a8b12087ee468f05936501df544c7433dad3aa5b30318727f8fd82b61ec
SHA512 6682df5640d62601ad9b3088d40d553a246757d6e190f7e985597898192e5bbd682ff44b0ac76327e6fdc69b662b11d9631020bb21bdca7f1041d712f16e6c27

C:\Windows\winsxs\amd64_microsoft-windows-s..iuminboxgames-chess_31bf3856ad364e35_6.1.7600.16385_none_d0c99374981840d5\Chess.exe

MD5 1a8ee4f9c29c7aa3118ab32a0b3512a1
SHA1 b958095515dcdec5e1bb77d0f88f9e7af5fb88ec
SHA256 dcdd04b4cd804430c06ad331034dcc44851a399940418254a9e57ffda09f017c
SHA512 953f562a7e045fab171e610a709b9ce9eb5e685d3f3a3a4bb95add932c2ee922dbda1e86f86efa85a5226fcd0deea5929a839e760b5e020a36ff88950db1a53a

C:\Windows\winsxs\amd64_microsoft-windows-s..iuminboxgames-chess_31bf3856ad364e35_6.1.7600.16385_none_d0c99374981840d5\Chess.dll

MD5 160962edd0a311c0137ea06dcd8166ea
SHA1 88b4560b1835182c1873ea7c2a45db205badb634
SHA256 badbdc5c20a0d89571d84fd087ffb54f0560d7a1efe384145c50122f238a05ef
SHA512 41da0a2f6c9fd9df9e6a922cd1cd970fb32cd6851ea0dbe74c345ce737967e7397f27cbb2937efbe5e17c32acff7a33daa7ecfa8a76e9e469cd6ce46c1c947e7

C:\Windows\winsxs\amd64_microsoft-windows-s..oxgames-purbleplace_31bf3856ad364e35_6.1.7600.16385_none_622070221822eb39\PurblePlace2.dll

MD5 48137fb204009ea5e8feca4d385c8a94
SHA1 f82507b9de088960bd3f3e7d6e6d86ab1ebbfd19
SHA256 51854761b97966f7fc3e70ab4f3fa339e3e0dfa8fe18e1a1e28769a833cbdfd1
SHA512 f62b8c2fd5d34dd4a2d1a444876829bb34fe6df06a5cdb5dcea37b83264d374df9ab87675b7062e554882d2c10d8c807cd906af87a470c6888b06178d200419d

C:\Windows\winsxs\amd64_microsoft-windows-s..oxgames-purbleplace_31bf3856ad364e35_6.1.7600.16385_none_622070221822eb39\PurblePlace.exe

MD5 55905ffa88a4f849d65aa3c901fbe055
SHA1 1089fa5187558c4d5db9004a5d63f9e02916de74
SHA256 35b131aef793ab062229b5705ad06396f7f93088473fd44b3c3095393f15698f
SHA512 81718b4538c32e7a94ce484abd6ced1253c7c413ad6fc81ea4868289d069955b121784d5bc8d90418bfd33b299418b28137e98ed5f14511e5f6aaadc9308ac97

C:\Windows\winsxs\amd64_microsoft-windows-s..oxgames-purbleplace_31bf3856ad364e35_6.1.7600.16385_none_622070221822eb39\PurblePlace.dll

MD5 730aac64f647ae3072c3aec72c732491
SHA1 34e4dfe579f8919bd6ee7d71cb654f73328eeef4
SHA256 e928ed8189616889622034de29778d3fe7703bce455f5d02e1600b69abb5f727
SHA512 25c283ec5585a12eb1e1f8dc4a28e05ff94b3218fc63a73a3bbe85f9fbd2171a30b6e4fa7d5f424fee2a8c34379a5f38fe0afff2fd758f21dd7d754a79b0bdc6

C:\Windows\winsxs\amd64_microsoft-windows-s..oxgames-minesweeper_31bf3856ad364e35_6.1.7600.16385_none_fe560f0352e04f48\MineSweeper.dll

MD5 d5d6d442b8fa324c65fe39ae3f181366
SHA1 dcb4847b3deea5f0f8c342419c62a4e83bbd9a89
SHA256 c9540b3a5437e476bf844104398f2fc6eda4d8ee4b78aa53ad1d38decd2afe66
SHA512 c6a2d4c1fe4066e0121934ad4a6f64bb9122d58becdd21cd8d186d2b051262ed93d6a3ded0110726388beb3327cb022ad1bd181771ca35cc468ec7cb66c37cfc

F:\$RECYCLE.BIN\S-1-5-21-2703099537-420551529-3771253338-1000\Decryption-Guide.HTA

MD5 6f97bf747f894b8dc3cbfe3d55fd8f26
SHA1 67a90152456e9639eb311c09f5b8fafbfff71459
SHA256 6a7a8c748cfcffb28e0e3601e08fadcb316c58e2120beffc41d721d967933e18
SHA512 4bcf955f98d753742621b6c95822af47124e9e06ef577bc6d2766cbab48fd67b278f090c2eca62218e6c681697151df93634259588480c1b89be469b8742455c

Analysis: behavioral10

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:58

Platform

win11-20250314-en

Max time kernel

46s

Max time network

6s

Command Line

C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe bcdedit /set shutdown /r /f /t 2

Signatures

Modifies Windows Firewall

defense_evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\netsh.exe N/A
N/A N/A C:\Windows\SysWOW64\netsh.exe N/A

Looks up external IP address via web service

Description Indicator Process Target
N/A api.my-ip.io N/A N/A
N/A api.my-ip.io N/A N/A

Event Triggered Execution: Netsh Helper DLL

persistence privilege_escalation
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A

Runs net.exe

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2072 wrote to memory of 5760 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2072 wrote to memory of 5760 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2072 wrote to memory of 5760 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 5760 wrote to memory of 4248 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 5760 wrote to memory of 4248 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 5760 wrote to memory of 4248 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 4248 wrote to memory of 6024 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 4248 wrote to memory of 6024 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 4248 wrote to memory of 6024 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2072 wrote to memory of 3080 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2072 wrote to memory of 3080 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2072 wrote to memory of 3080 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2072 wrote to memory of 4120 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2072 wrote to memory of 4120 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2072 wrote to memory of 4120 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2072 wrote to memory of 2256 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2072 wrote to memory of 2256 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2072 wrote to memory of 2256 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2072 wrote to memory of 2912 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2072 wrote to memory of 2912 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2072 wrote to memory of 2912 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2912 wrote to memory of 5072 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 2912 wrote to memory of 5072 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 2912 wrote to memory of 5072 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 5072 wrote to memory of 4848 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 5072 wrote to memory of 4848 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 5072 wrote to memory of 4848 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2072 wrote to memory of 5108 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2072 wrote to memory of 5108 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2072 wrote to memory of 5108 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 5108 wrote to memory of 4880 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 5108 wrote to memory of 4880 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 5108 wrote to memory of 4880 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 4880 wrote to memory of 5020 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 4880 wrote to memory of 5020 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 4880 wrote to memory of 5020 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2072 wrote to memory of 5040 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2072 wrote to memory of 5040 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2072 wrote to memory of 5040 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 5040 wrote to memory of 3344 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 5040 wrote to memory of 3344 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 5040 wrote to memory of 3344 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 3344 wrote to memory of 2160 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 3344 wrote to memory of 2160 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 3344 wrote to memory of 2160 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe
PID 2072 wrote to memory of 5088 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2072 wrote to memory of 5088 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2072 wrote to memory of 5088 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 5088 wrote to memory of 5100 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 5088 wrote to memory of 5100 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 5088 wrote to memory of 5100 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 2072 wrote to memory of 3516 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2072 wrote to memory of 3516 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2072 wrote to memory of 3516 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 3516 wrote to memory of 3984 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 3516 wrote to memory of 3984 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 3516 wrote to memory of 3984 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\netsh.exe
PID 2072 wrote to memory of 4752 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2072 wrote to memory of 4752 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 2072 wrote to memory of 4752 N/A C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe C:\Windows\SysWOW64\cmd.exe
PID 4752 wrote to memory of 1044 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 4752 wrote to memory of 1044 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 4752 wrote to memory of 1044 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\net.exe
PID 1044 wrote to memory of 2444 N/A C:\Windows\SysWOW64\net.exe C:\Windows\SysWOW64\net1.exe

Processes

C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe

C:\Users\Admin\AppData\Local\Temp\37d8add251cb4179224ebbc0e28f8d9e26b5e64bbaec37f26a996bf51556f04c.exe bcdedit /set shutdown /r /f /t 2

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop MSDTC

C:\Windows\SysWOW64\net.exe

net stop MSDTC

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop MSDTC

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c bcdedit /set {default} bootstatuspolicy ignoreallfailures

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c bcdedit /set {default} recoveryenabled no

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c wbadmin delete catalog -quiet

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop SQLSERVERAGENT

C:\Windows\SysWOW64\net.exe

net stop SQLSERVERAGENT

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop SQLSERVERAGENT

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop MSSQLSERVER

C:\Windows\SysWOW64\net.exe

net stop MSSQLSERVER

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop MSSQLSERVER

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop vds

C:\Windows\SysWOW64\net.exe

net stop vds

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop vds

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c netsh advfirewall set currentprofile state off

C:\Windows\SysWOW64\netsh.exe

netsh advfirewall set currentprofile state off

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c netsh firewall set opmode mode=disable

C:\Windows\SysWOW64\netsh.exe

netsh firewall set opmode mode=disable

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop SQLWriter

C:\Windows\SysWOW64\net.exe

net stop SQLWriter

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop SQLWriter

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop SQLBrowser

C:\Windows\SysWOW64\net.exe

net stop SQLBrowser

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop SQLBrowser

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop MSSQLSERVER

C:\Windows\SysWOW64\net.exe

net stop MSSQLSERVER

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop MSSQLSERVER

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c net stop MSSQL$CONTOSO1

C:\Windows\SysWOW64\net.exe

net stop MSSQL$CONTOSO1

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 stop MSSQL$CONTOSO1

C:\Windows\explorer.exe

explorer.exe

Network

Country Destination Domain Proto
N/A 127.0.0.1:53204 tcp
N/A 127.0.0.1:53206 tcp
US 8.8.8.8:53 api.my-ip.io udp
DE 23.88.33.229:443 api.my-ip.io tcp
GB 2.18.190.198:80 e5.o.lencr.org tcp

Files

C:\ProgramData\RSAKEY.key

MD5 b64e7a0daa4f9d06f863c6478dd6d455
SHA1 60f179cd22063622e3bef7f05c388237b2d42d8c
SHA256 f61bba541278332559f5d408b044bf0114ce80dce2250dc90aa28045425fc774
SHA512 1a323635c1dbe815061987701fc9e740b6524708195977f25347a4778ca8e227cd217ceb1fbfe55f003754caa3473529bcb1bdeae9a16be80bc8aafdda2ffe87

C:\Program Files\7-Zip\7zCon.sfx.(MJ-CZ6957480132)([email protected]).zxc

MD5 3c9958fb404a0331314182f1d00fedaf
SHA1 164de9e5b8baefff750709b1883ef49f1b4e80e3
SHA256 0418d4458222b992d941174bdc925e79d2b91c3457fc32572c39188c4e3ff201
SHA512 ce3f7c119f2016e64c3ee5b376169ad6fbfdb688dc413f775dba48ee12fb7f964bb31325a33e139d5eb92bf5ea8251b3d990b5bdf38f4bc7503142dc7b8cc1b2

C:\Program Files\Common Files\microsoft shared\ClickToRun\SharedPerformance.man.(MJ-CZ6957480132)([email protected]).zxc

MD5 de338075798b97643c6f14d475e3a8e3
SHA1 876403bc9325cddccbb4e2ae7ec868caf64ff590
SHA256 581a2494e9c42a9f9cc83b969f2e6f3367d5a3a18f44a5efda0de898d9eba7fd
SHA512 647127b7188e116bff3a03e492825f9153f49c4066209db4d3a1f007ea869ebd10ece6e34239ee05730d26764336d5c3c6c1a74c4bada65dd34970ead951d233

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Net.Primitives.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 c6bfaee7ce60ed6bee864370ce4da53d
SHA1 a858dfec60095ae55cd5cb8aeebf77044def2e99
SHA256 ac1d3c7fe5636d1bbd74b143678710b42e5d64eb7b923ffd799e53284eeb5679
SHA512 3dd30a04c56bd032a9dcdad1955b5ea48eaea80c452f6ac9e9c7c8317ccc6e2b2138adb96c00d105ab6489d31f7d6df249cd9209348606de51275e9df00b3c0f

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Linq.Parallel.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 a2a78a79f15eeaa683cad5af35fdf8e4
SHA1 917b1ccbc24006643a31078379eabe79894d8e62
SHA256 2719ecb56d246708cf70e93b19566322b26392b8fb86ba7ee87442c0a7551466
SHA512 c0605c91609f3beb3ef07f0ea3cedfd5ed60a3bb3768483a816e62a1d9be5e1bd9d1632b7ec77c45ae435f4e3b469974a035c63da4ad31727734a1e812acfe44

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Text.RegularExpressions.dll

MD5 2981e9ef91d2d4288c80a10dff064e5d
SHA1 3640312a736e4df8b0ca560e8745887f8c5c1b7d
SHA256 9f3ab2ff132eb8caf68c29912a53d503d5e0518d1210750db6303b0c0b09fc79
SHA512 bbf7297662b557230bd2040d0701fbb4fcb7461b881ee55be37c0901054d02cbd5259881eb2bfd30b02c9191a4fb3fafd82cff9d35283b14e60344e59e4b68bf

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Net.Sockets.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 3ec4163b1508af0c16ffe9f4a0e1191f
SHA1 103527cda1a1a6b7e2958430475628d2680e4670
SHA256 a5f50df3d5989630fe81c21d0331d0ec9b86a703b9149c0ab7f1532d93dbb91a
SHA512 e3ffaeb0edcb55793107fea9aa896d4d330f1f3a9cd316f0a1d9c08daa8c9f9617a4a441b7b46af93aa8cf898d3764677cf636e0ae0443d59a97b49744090380

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.IO.Compression.Native.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 6ad89d8b18b1f74ae4a08ebec64dc2bb
SHA1 a6c8db5566dee8e2726c1b6e99946dde1b50033f
SHA256 24311b9ce0335edcb0db0efeccdca5255abe71e694f2cb60eee76e776b9b295f
SHA512 81fbbfe7666c364deadf7596733f32567edadb1ca384988313f5d25a41b4d174d317491f7784119511af94919b47e1ab6e7e27d008effc1896a35d5448e970b8

C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Linq.Expressions.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 06c7af9c00b4f5aa0a8fa2da8f45eaf2
SHA1 71bc55f2377b604be27c2ec76c71b8f95a01275f
SHA256 4d9f7198dd442633037c3e0e3fb927f714d301714a21f7d33167ee8bc9a7fcbf
SHA512 208dd24cfcd3da0dbd265fe4ea980fe5b1a3872c0144fb3dfc8e51ae1a56d4d6d3f792c2e6cddbb465edb1039a5a106bcf224aadf1a283c2f567e1171bf4c1d3

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ja\PresentationFramework.resources.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 c1b173b579ab51436acd7cc9294944be
SHA1 fecba48e0b5af9c0266b96ed4307ec9657a834e6
SHA256 9e453e20b6a7649c42f2b5dafee043318959a99159402049d32640fd0e475900
SHA512 d37ef667b4bf015063cf9c49fa2c91c7c851e1403a24e7e44f95a56e81c16109ca6feb3f51b3c05b7e77bbd8dcc48da396b615c793536e555692256d5f90f3da

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\D3DCompiler_47_cor3.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 82d24a07782b2cff5b5a71aa1dde9b16
SHA1 1dcdc480f38643e8703d07f40ba9c7bc49cd9d22
SHA256 26370f3e134d598a584011ac9231a7f4f48517f1fa413ccb8f6bf276ca0bc03d
SHA512 6e7e7066711927b5274bb0d5e0267c0d61777fbfea68d2656e5d01ce6c48a8e743ac51e84349678176eb4cc8dab787c1cc1f410f0f6f65bca7133ebcce73c371

C:\Program Files\Java\jdk-1.8\bin\javapackager.exe.(MJ-CZ6957480132)([email protected]).zxc

MD5 9dd626b984f07da83427b655f43d9b64
SHA1 2a7ebf4068a389fa403f57ea8bbf7745cc0c7766
SHA256 667cdfb828c8df6427cc5f622c97a47d0c8c9b7184f118ee277e6f5e3c0a7912
SHA512 eb719988a5803d072ada8b695a928564036a409f37fb7d1a330f79e958c52a562684a8c7bddf523ed4ef6aa3033b2caf52d969835b938c6229fd8674f6ad197a

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ja\System.Windows.Forms.resources.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 205c6c7c3de4cbd4188301aa8589a96c
SHA1 c4eeb3924568d1a3fac599d8e8891fc986fc8568
SHA256 944289de3f49e07f28e52f8931604bb2645274fdb999cd1f1c77f9475cde0e0d
SHA512 324f47040b430bb88e79a8f53558b9fdfcbd50e0daecfb864d506fc99f1c566ae8252a22dcee2d8e22d8b6df7f1c4350c05609c811647b529795052cf2342ea3

C:\Program Files\Microsoft Office\root\Licenses16\pkeyconfig-office.xrm-ms.(MJ-CZ6957480132)([email protected]).zxc

MD5 ceaf5dd52c30b52e11b074730d9dacdb
SHA1 cb69cccb99ed6c6c245992cd21310afe12ddddd2
SHA256 c4ee88d0b735df39e9cef1a3acc9ff3cc8d285ade5a566a263831c53df38a4ed
SHA512 ba486cf6386d9c7957c1b3cfa86547e20c0e0507933f93885400d491b8bedb97eff995c6b3de6087705f1e5a78aa7cfab19c6a679faf6420bc9476556012b433

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\it\System.Windows.Forms.Design.resources.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 143c9e37fef462a1e9cb660236aa79cf
SHA1 168b939886dea15aaa7f5e5e589ef85b10609615
SHA256 9b398d34e003920509449a2267d7963a5ece88a62c22510600cd283551f50a38
SHA512 ebbb7e69422f18b6f3cc1f0ea23707a8c46a96446ee8b66505380c0ae9f5dce98c929280042d8bd61b1549d20f33f4659f12ab16df707eb43db58993a2ee9414

C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL012.XML.(MJ-CZ6957480132)([email protected]).zxc

MD5 2003cee4af99c89f8b3976917cc15802
SHA1 e44194806e8a6b404e53b6d739367ce44e52b5d1
SHA256 7b13acd1f7243604cb580b4c4d1b9c0bf2d81e16ab2632b86eb3540a0855a23d
SHA512 13cf866e0f36c4f73d6ea1171265c75de9b00644ce6aeb8185ec2950dd92b59a0b100ad8162e75ecba2ec882d81ab473930c7c8b75e664358090300d153773b7

C:\Program Files\Microsoft Office\root\Office16\AUDIOSEARCHSAPIFE.DLL.(MJ-CZ6957480132)([email protected]).zxc

MD5 1b3fd22e5ae983ec756267706c4459ab
SHA1 98ca23caff2694c885b89f0a638c92faea91ab60
SHA256 52ea0b4483148c905cf76ce995e5ed865e3bb5f9e27a7f75a251d9c19e1ddfd6
SHA512 92bb72cbf49c77d29563e167985f1aa39e7eb1d47fc90fa7767808f1794e44d4a3b5c5dadeff7899acd2e2512c84de55813e8be135ab59461e186da0829daaf3

C:\Program Files\Microsoft Office\root\Office16\excelcnv.exe.(MJ-CZ6957480132)([email protected]).zxc

MD5 76674bde19245608dfa53fb1d80d76bb
SHA1 07a7318452fcd9ab7cc34002ec725f463617dc4b
SHA256 b540e8a0fd4aa41f020db059ff7ca770093b9e0076cd1f138b288a4980eff9b0
SHA512 d6c081cb671eb1b0ea3a72389a85e1eb9dae4e7165e3aad63543cef772408bdd5829b6349109ce168d9ed6103a14cb98857cd41e1624cf6883cad5265ddc7663

C:\Program Files\Microsoft Office\root\Office16\STSLIST.DLL.(MJ-CZ6957480132)([email protected]).zxc

MD5 079dd374344759e8416ec9f610ce16f2
SHA1 95e1ac3aab7291c51de9e0f1d45803eca054ccf7
SHA256 3bb08a6517427fb14d4339faec84d457b46b8918590ab0a46c423bba03c185ff
SHA512 142c2cc6ad5ebd6f198a8553e7975c648d88f6512b0d951e560ecfe857a0ed78ad4665fb19aac991a3aee1a3da7a58a7e324f425fde1d999b11bd378fdfbf262

C:\Program Files\Microsoft Office\root\Office16\1033\PowerPointNaiveBayesCommandRanker.txt.(MJ-CZ6957480132)([email protected]).zxc

MD5 d7b71ab63677b6c9989ad78549befd04
SHA1 2308aed27bd853ffaa7ca9f29240e456cb413ba0
SHA256 a2ea401e18067f73e8de4e50220cc90c36b66c29240b59bbcf41a98e23dcd817
SHA512 af847cb00b1400b25f38cdbcfe2ab87531e3ab29de8eb025dc51be44f2e1b9cb621d1c22fe7410a52592d1fb94b5177572ad8e3909a0368ca8ccdb7516efa561

C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL054.XML.(MJ-CZ6957480132)([email protected]).zxc

MD5 a1e21ab31ab2c85fee6f4cf127a07f58
SHA1 670dcb8db4576764e3ef0419dc70e23739af7a1d
SHA256 ce3c5ca5159c39aa6d66e2defe678708234eca90298890ab8c00455ebdb7610b
SHA512 b0525be27dc551efd5b5eab0af12b6653ce796d9b0aae69515e3aa41f4eb02790833153f12422feffb41e0395f9f60b78b026b527e81efe5f079e0652c7fa18c

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\concrt140.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 d36c34a120a928d636472dde28117da9
SHA1 07d761cfe649c2e584abbf0a0cbf65f92663e4b0
SHA256 548f6ebd3c9dc8484c24e1de3f4ed11388af8bb2a6e1c9855c11559d977ee0fd
SHA512 637a0d22c0c559cb4cc70c74669cd9f5df19b66aab3559005d72e10581b1ec1fbfb7cf5b4e0cb09191d287e0e7de06762ee9d2792fa09f4a11f0c9404daf7f6e

C:\Program Files\VideoLAN\VLC\plugins\spu\libremoteosd_plugin.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 dc1f102d56fd8737e62723ad9e724643
SHA1 56486f76567181cb17d7f3110233d1bf8bc4906f
SHA256 31184d81e06eb73e7044e5826a47409d3b3a5e8d32d107650ce4ed1c6856d042
SHA512 5beba7d079b45481b8b9f3ce63fe76891ab2c82b942369d7fd9bcabc27c9eaaedef5c00bae05b35329f7454f0467c92b0b468eee24a8b740502359dea0f91cee

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\resources.pak.DATA

MD5 f5651e6dbad2fe013f1fe909650b74a4
SHA1 438e6a60be0586447aabbd2f85f655d4d9ef7181
SHA256 0877f4ca250b43d04e5e0d2c938da57f8fbb440014a11b982c0619646c79d203
SHA512 09b2cb3d221c8cf10ac8223a439cf395ab3c4252e04108b46a0c4e2a1c001e24726df8a4f2cb0a00cbca520445f4bf07e56fb6905a63fb808c3930fa9b3a87c5

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\sqlite.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 6f6ce7b9a0712b7a83e3a396929d8daf
SHA1 8520c2e13372d99e0091f3b4d88f598b2723147c
SHA256 b8c48917f08a7cb5e6a467332300ce236700afeaa3e9e2125921c9705881edbe
SHA512 0293d29fb9b85ec47fd5dd034580e438d8dd8dd782dabf6cca569e27a32330fabfba4c4223bfb4076af235514b1fe7e3ca6ae0abe5f75ab5552712832f35dadf

C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\msvcp140.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 65235e8e7e1d83f46bb8bcc10d06ac99
SHA1 1b7c5f4b2ba49e854b46d0f65ae9beb7831a1c55
SHA256 c6f8ce0c8b82fd4800f4165c314701e3b0b016e57698d913c281ba192fb8ab98
SHA512 74cd3bb42e473091e21e50ecaa68c4f6a80cd9bf7995f849ac0c98a76aad3fd4b0cc307400ae4f76818796351df754cd9100d69cdc44c10890f365610004d7bd

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pm60e3dc.default-release\places.sqlite.(MJ-CZ6957480132)([email protected]).zxc

MD5 d7c0d4fbb007106d62cba0f50a8750fe
SHA1 edab506bffd32340f70792ad84041aca60e0003f
SHA256 c4e9b5a34238181d78d296eb3c0b10ff9a12542617cbda7418c33a5155cfadd0
SHA512 65940c8a766135ddc964c98bc55d8ba17aa51b7ddb6d9d5fefb0b0adcd1f223084c37fb580661366b5e12b57e9c222a9f1c1c733dc3e46587f5811f599a52213

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\fr\System.Windows.Forms.resources.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 96b72de1ef1222050c4cae1071e8863a
SHA1 abb6347839e566ace50581dd9baf3ff01c0cda03
SHA256 01ba0bdcf9f7bdecceae143c7b79c0025b88f3c3e49f5b112e7da609956e81e0
SHA512 b206b2e33a94e0410458b1ab1c1c463d774adf7fc2bd1076db2bc1bec036581f432cb64d238875dcb4861b005f0950fc512397ce06ec6fee724f6e7e1fc660de

C:\Program Files\Java\jre-1.8\bin\jdwp.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 e174d7f84b9a3ab343e785b416f4fbbc
SHA1 0a56f355c90f34106edba1529abbc6516c6bb48b
SHA256 70ee9d3a0f476213ba8ff7e890700dbf609a1fcba880c8a8f3918803b07438d0
SHA512 a1670d61460390e412ce787b17c2155b4b69e8392d8a9af8d5f103c0a2c6dcdf50f612e72e46ab6160996808184cc5bbf620f6a93d48afe061e49f72a3c4c9cc

C:\Program Files\Microsoft Office\Office16\OSPPREARM.EXE.(MJ-CZ6957480132)([email protected]).zxc

MD5 b147c72cde143414ea45cc108acf2e15
SHA1 26cc241c053b0b45892a5c5ef9fb5f63aa7645e9
SHA256 052d529cc699d8c4c51f2ffff4ad8c0ad12d62f9bdfee479be870eac04e90f50
SHA512 161b91dee15b2b58bef6daaf9465c1d8106808a57107f24eecd3a434a28f0392ab41c03b2c5810565150f9ee047958c501a7d1d2b90fb8c9c685c51aad3900a3

C:\Program Files\Java\jre-1.8\lib\fonts\LucidaTypewriterRegular.ttf.(MJ-CZ6957480132)([email protected]).zxc

MD5 aa35a8018fe639f410a70d58794f0861
SHA1 136c47802006b4e5f2a0bb4c0cbc3d99af230550
SHA256 9e108d9b9da36c05ae1bbff25863fc0a592ff46ab1fd0d087f2a8a16b7d66eb9
SHA512 b9bc8452a1106fff4f348a99a1175b702cea2fc9fe70d0d727c593f76b99adf3885ddfe4225a4baa505ac890526383e1c30c175b2c14c3c57d456e1be1c4f36e

C:\Program Files\Java\jre-1.8\lib\fonts\LucidaTypewriterBold.ttf.(MJ-CZ6957480132)([email protected]).zxc

MD5 68a390353c6d83b3a25e3b6a334b16d4
SHA1 671d038e730041d62cc5a5d944339c541b64331f
SHA256 4fe108db09a7c65d80ea371fad8925df804c5aabf677155ea4a0396a8b89a22b
SHA512 26d46ef79f8db2644a462149ab1d212aa73a3be241dd55ec635807e8d42d6e02b4136cbf0e67d3bca75ff28c10ac12ab180932af3ac438770305b82d83059562

C:\Program Files\Java\jre-1.8\lib\ext\sunpkcs11.jar.(MJ-CZ6957480132)([email protected]).zxc

MD5 2485901768aaec630e0c998309530eff
SHA1 a677f3e07408eb760893ce92cdbb500d3fd2a6cd
SHA256 6fbb60a11b637cb077c929ca26c60683a7429ff627165b94325e12ebaa52dd6b
SHA512 42f7b97e7711e13a6ce43206e7a73b7984643ad148af59194a1e70176d1905310251ad087fd327299fa29413736241e1661cdea3f2374a8bba832d96d92df0dd

C:\Program Files\Java\jre-1.8\lib\ext\sunjce_provider.jar.(MJ-CZ6957480132)([email protected]).zxc

MD5 835d744595fa707d413949a8d64548c4
SHA1 a0a367856ca1af0f7289f009be869095d1ad36d8
SHA256 988a6a1e9b228f9d13620bca4cf59e2f7928b5b06d67725dbcfa9d687fab8249
SHA512 80f75ff74d925201933ff1db53f29d9b26140bd1e189b09718fcc26c5d734a05396d31fca572e175f9023176be1e4230626f5b6fb3df48f4dc130dd40b1f0027

C:\Program Files\Java\jre-1.8\lib\cmm\PYCC.pf.(MJ-CZ6957480132)([email protected]).zxc

MD5 57b99c0180939d409cbbf7c97df49602
SHA1 b739a44aa9c4b4ee198a05c993e0fb5fec66dab4
SHA256 15d9074a7c4dcd390199e555b98f4ae8807ea1e3313a9f3be5c4b6cddb59c14f
SHA512 21613faeff6692831514b65734b0000889a5061853f761a506d1f333aa6bd93766c6539255c7c555d97d7a120c3373ac2703bbde77258e8c86cd76a7a7df173a

C:\Program Files\Java\jre-1.8\bin\wsdetect.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 b814875b358bcc53c842950e924a583c
SHA1 f3e4d1b50cb4707697eb6b68ad3077b7e4050287
SHA256 c81fb031f63f7f42e63ee3491f12f775e1d1ab7156f2f9ed21b564a4310d1b23
SHA512 79bd4409f1d991b88f08a50d3d1b5d25659a490e93be0244ee4f3104119ea06a512608c55f9ee8e7be7fbbf4fdc8531a5ac9f4e3afefd078441e8ba9545e4d4a

C:\Program Files\Java\jre-1.8\bin\WindowsAccessBridge-64.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 1440c70be00acd706920d978e5b03637
SHA1 f9bacc485a4ea8c4791b5b28545b8944b20d20a0
SHA256 3e5f9170090328541dc73200b8456353573519a916285fa3acd12eeb56a7f299
SHA512 beaf6ad8d6072a14b42a4a5893104026091414a1ffd66f19852a17480bb7e1731fd24a41c2013a918264c33c67c6c5cd9c8536e23ffb12181f9e58276191b86e

C:\Program Files\Java\jre-1.8\bin\unpack200.exe.(MJ-CZ6957480132)([email protected]).zxc

MD5 21e48e889bda5dace726830cc106d82e
SHA1 3709e37d34f6ffd2c9f0cb731c2788adced259ce
SHA256 6d2f9ee097c51adfd54de622ca10d2849b1e4f5d5cd09261e396b7035604b8ee
SHA512 f2641fc16a4429443bc252e4b5ef383ecb56c17ca1be6b1624e68260e85f35dfc68c72f7e5e3e897b714707a7c24ca81fa9b6f2e36bc074ee332545b5a548cc0

C:\Program Files\Java\jre-1.8\bin\t2k.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 769cd1c95844c87a477557f452a6fa25
SHA1 0ea2e134f992c0f9eacc278cfff4fde4e39ffdb4
SHA256 6e5d2c07acb6b28c1cfcfcd4ae4b39d92938f9f7be0793263d746266c3a75ef0
SHA512 30f044a57c92d3d3158b5f85c9fe3e5dc8e46a46b19271776fef782c0ee972990ca32a5b6319057ea5e7315a4781de1998b113393acdd2a06130fa8b90c60a6e

C:\Program Files\Java\jre-1.8\bin\splashscreen.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 86ea24d6a267ece341b4bfd81214bc50
SHA1 7a7fee8a4372253bd7f14d44f7b370d69d00a0f1
SHA256 d99ecb657a2ba831e0acbdaec6bc07cf4733d3aa4167875e5867c4fee154656f
SHA512 7a196544a1c4bd7a623ad891fd8b803a0b8065adbac11e30d9dae435d68fba2144c6b085ba14e4c72eb28d1b21e9678eea0def74226c596c4c61661a36f10886

C:\Program Files\Java\jre-1.8\bin\lcms.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 95b5251572dc99eab48929d696d469fe
SHA1 b3cf9ebdcc82309aca079f72511d78196f4b197b
SHA256 c3f2377e7c3b277aac8a974bb2171f4b4409f5242efe50aea58efb7809155b56
SHA512 dc504ffecaaaf3aa94283a5b5eda1c8ea3058c897ea387d1d8cf0a50dd0d0d808a421df651a416464e3aefed74aada3236826c492622926f01ba21c230f7f9f2

C:\Program Files\Java\jre-1.8\bin\jpeg.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 4e4631f6ed08e6d46446addd0adbd9ca
SHA1 1a805290b7942fb28c3e8cee9616ab613e44991a
SHA256 da2cf13abb2e2ccdca45301ad1d0e1cbfcd8d507da7e7b62b0288881214af3ab
SHA512 0df69a96e4422808e67718951475fb36bbb2eb817e6c924b4c7d571caa235fe7fa46defd21b45ab41d1493519711847b9e7fd5840c1974c4a7c65803735bfc54

C:\Program Files\Java\jre-1.8\bin\jli.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 45b11218ddd93c9d1ebe67ed23fcda43
SHA1 9d484475a85a3323b400154bc791a6372c2ac1cc
SHA256 d0be0a1064c5081397ffdde20017c543a7c6d434e3fae4b4aa13902c289e506c
SHA512 63a6a2484ea9c35157eaf1ba8386812505bd7369cbdf0b41f5d67075b3bd294f44488bd92b52c9a60cd9964da734c9c629a2966332e13b48b4950d7967f9cbd9

C:\Program Files\Java\jre-1.8\bin\javaw.exe.(MJ-CZ6957480132)([email protected]).zxc

MD5 a3bbb2d3a8e8f7970f3931462a6f64a3
SHA1 589eef8f7bb230d877c2ea309b3cd8e865f4e8ac
SHA256 08731a95246b28747dcd895f6bfcbfa0185f85304fd1a0fd790a331956eeb34d
SHA512 98ef62f535673645d791174cc7fad719abbe9c8d919984b7f62d33869d2be7a24e29e84e050d4da4b52c0f4dc773acac9cdd235c082320355bdc099ac0e99d3b

C:\Program Files\Java\jre-1.8\bin\javacpl.cpl.(MJ-CZ6957480132)([email protected]).zxc

MD5 c99786413a5cab1a5e3a574b6d0c7483
SHA1 1de526cddbd0a87d9b4e0bdc60461f17b177e9fc
SHA256 349da10bfc7a376d1370660af64c7048680ecf964d8d2fbb901948a6f831b847
SHA512 6e912f726faf99c16eb698034474ff7ccf803fb7fa63b059b9a2dc356b1428832bdaf863441567dc9a7065b9aa128f9cd6da9cc12ee06042a631326191d325d8

C:\Program Files\Java\jre-1.8\bin\java.exe.(MJ-CZ6957480132)([email protected]).zxc

MD5 795af5ca5d7eceaf9e3075088db20d0c
SHA1 2c6e1d33c872ea894849f09cb0534979581342af
SHA256 681d6fe6ab9f190130a4ddd9e4dc59a38d474335800e22df98c74f35edb735ff
SHA512 571a1121f4d8c43c7cbf8479d0c5fe47428d1b24371d0d9240af619cafea6ee84a77a924a15b54fbe13c17e9d1a7083424f50f5b799405e6a55fe8153c6a96d0

C:\Program Files\Java\jre-1.8\bin\glass.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 d29d1349c17ebc236e326a929603839f
SHA1 a65c0219ffd02ad9121f71a6e5895f9e61e44966
SHA256 1df3570f9b8402f0d9280aded762f2072245e629dee17e9180862921cf9378e8
SHA512 14920ed7e81f53d6c19d431cb5696f2e79bbdebfe35d822ef3057a5087d24aa704b8e96012780caaa90529b7209d728a7669655f3d89d4dd912897c1bd8ff3ea

C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_16.db

MD5 9b1fca987d0c3a3e44e7e1003d71af32
SHA1 bb8930cbd140852d5379af47184827b047372ce7
SHA256 9a18ebe04d78ad3c02c738eacc9064317e5b058e52adccad7e04a512339ca2b9
SHA512 be0f576a8f66604462e74f35404ef7c8832d67cf5e6e97a09bed25b7027588409404251518099444b1f94a96d59f94f571b8e5c88bc83621190f991a5f5a7788

C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db

MD5 a3b63395676daa724e9e14e484afe340
SHA1 56f19c502745e18de962f183ef6c910de5460dc5
SHA256 a622836cb816057997f82991fce2cd5613ee8702c1ca2c7444afcb4642dc59d1
SHA512 82e74b9ae0ab41e109a482cce4e2bde7e0b6239e37d07715b74902d4949c37cce8a694e99ca7c90afb16b4072ad714319e3d28e57fa44ce56195a6d11d8f189c

C:\ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db.(MJ-CZ6957480132)([email protected]).zxc

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.(MJ-CZ6957480132)([email protected]).zxc

MD5 1fc023a3f5168ba940f7146dffe2bf18
SHA1 ce8d1ec73ad14bc07b9b7a9a39f3a78c252874df
SHA256 9a64d87169b947f35e63cd99cda58fac95fd9c05c7faa9119f77a089193037cd
SHA512 775d283c40860c82a5339494944c13669804982c97415c7b7918585a1a7fefdb6d3097dbc04943d7715f98e7a9770cb37a98340808f982191c29d45107b7f5c4

C:\Program Files\Java\jdk-1.8\jre\lib\security\public_suffix_list.dat.(MJ-CZ6957480132)([email protected]).zxc

MD5 b7e1b37b5a925231519f3f6ff7a67d2d
SHA1 4a7425c31d73d3f04848c33f04d95d9c9fc3b356
SHA256 7fc2407d0c3f442d2c86014e50e1ac3bceb675b7f5a8d8c9c2489bef90103152
SHA512 09228c49d2fb566790917d0457e8addcdeaf7b020f5227af03c7028a4fdcdd07b78f8471b7e87709bbf6bdcbf9a8841244adf7c9aadafb8ae8cecaf83e791fa5

C:\Program Files\Java\jdk-1.8\jre\lib\fonts\LucidaTypewriterRegular.ttf.(MJ-CZ6957480132)([email protected]).zxc

MD5 6971bce5d7b548c628386db2078fc6f3
SHA1 6b39320784909bb19e3c514f75ea692506d73e99
SHA256 ca1904f04b7d861fe7ea5884e791880c080f44ba8e2c5c60979ff0d8b2e24755
SHA512 5f8d5e30e65f51fd1c3caf7d9249a1e798eaf5fa651adb01d4d446f2dc4b4fbf3aea48eafcd352e9f9feed1a1de172907a02d206b96607c04485e75f03e6c799

C:\Program Files\Java\jdk-1.8\jre\lib\fonts\LucidaTypewriterBold.ttf.(MJ-CZ6957480132)([email protected]).zxc

MD5 4353c5538add093bda19e3c640881bb0
SHA1 29aa076be43887062b72d95df8769a9c6d7c6490
SHA256 4e44960416fb770d23c9c54aa016a77ea25948bb19c1c125a192083fe38be34c
SHA512 429f48a476d60de5ba8fc5b2cdc7b60579531ef19838a319e81015555efc491d57cdd1c514e50f56b979d73c92bc178fb6866ade1338502d0034fc073ccee62f

C:\Program Files\Java\jdk-1.8\jre\lib\ext\sunpkcs11.jar.(MJ-CZ6957480132)([email protected]).zxc

MD5 bec70a2be43e47fac5d83f7ed0e66684
SHA1 5a17b048a0c8b26181a866bbc67dfaa6d78e243d
SHA256 edf6bfe0ad7d1809aff8b3c198fe29eefbc9620c3b65ea8cb129c3ca281c994e
SHA512 2576720c754d1a29118e0e3d9a263dd87ef00bf4ba29919b34de165ad2757d3e6605e676f6c1c8e714c488cd21405fbb75e0e4a5184665e59addbcbb0ded520e

C:\Program Files\Java\jdk-1.8\jre\lib\ext\sunjce_provider.jar.(MJ-CZ6957480132)([email protected]).zxc

MD5 b0fd4d533f181d31792c58566e2bd013
SHA1 a2dfe5faa061e6d115671f82227087fff21750ab
SHA256 095753eb178417b28fdb98b1bf6ea8e90cd49c079a9f91451a93bc883e7ab3bd
SHA512 1b45109fd592607eeda3f0f4897acb5578ee8db6c87d1372fdc2fe04229dea396c9ea5031608b73caf0b1980f4975bfc809450b6273b5a7813fc5208da66d7fd

C:\Program Files\Java\jdk-1.8\jre\lib\cmm\PYCC.pf.(MJ-CZ6957480132)([email protected]).zxc

MD5 873e6f5292fe2005421b5f904c110f15
SHA1 1a5a44d10d106a05eee19a018341833f10c516ef
SHA256 91c3ee66ba3b237892d089b9ea13138ce63a7c8628653f2831d34a9a6c34fc78
SHA512 1faa037617898bdcc81f9eb65a7b0f82e98747249419b4e85f33fb3169cb9c14451561cfc68ce6ae06e5aabe1a90bfbd663311bf41bff094c5fc3c5fe33c14df

C:\Program Files\Java\jdk-1.8\jre\bin\wsdetect.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 3717df598cfb5854771e5dabaa8f7664
SHA1 4f9c86e84ea5f5add9e3d8e2f319cd6ced1a272e
SHA256 f0f61becbc18eda34988594154e1c50a68debca47ef0fa73459710a0bac9411b
SHA512 41bba3a0a1f316fa47ceb49d5ea1f7946fe93a707b23788709b3024571f2f12ce6231bd8eca151f2cd50c0b72018536e24f194faea7fa4781f5ee14493d78400

C:\Program Files\Java\jdk-1.8\jre\bin\unpack200.exe.(MJ-CZ6957480132)([email protected]).zxc

MD5 b677d66d06d59df1e4be52a6d968db8e
SHA1 7d53de24c0316bf7bb3c29ec3fc16e989ef41ec6
SHA256 e57ab540c4b97b38017272cc734eca58a0115ea0708507077fb9070d8944ee78
SHA512 b4a58c3fa87937242637c05a28e888874443bbb2ba1fa1d524922488e28bcea31aac4691d533ae5dc8d12cb8b18ec39a646c54068c216bdd49aebf39ab7bf169

C:\Program Files\Java\jdk-1.8\jre\bin\t2k.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 6096ab55d43ddaad907cc449a0f05d95
SHA1 bf08ff4efe4dda39d48367e6532d1931f64cd901
SHA256 5a3dbe4c020456d4e1e55aeb359df77e9855ced44fca02ff5e95f4a7a55ce777
SHA512 0c217432a54efa27da9cdbcb18cdc32cf434c93e347e7e5445227bc093a21c6ce44890e397ab54c5ade6d90b69c3d50b25a864686db7f065ac2f75803aa04601

C:\Program Files\Java\jdk-1.8\jre\bin\splashscreen.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 575d534ac7a4bf51e9bd62499b53b9f7
SHA1 6610b67b7ab2cc34274efdf243179cab90b6123d
SHA256 a39eeed276073710892d8d699c6dd480c6ee98fd378619ae6947037c7c58094f
SHA512 bf887a7ed8bf43992c6d718473e0fb89d09af30fbf9d145b082720123e4e9ef8160f40ef5f69ea67706c5aab9da38090e65f13c18171a2d1ebfc05893b215d05

C:\Program Files\Java\jdk-1.8\jre\bin\jpeg.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 0efa4701b6b8cda28d5a4ed883d402f9
SHA1 0adcfdcbf4f20d71aa51f98f8c9fa9822cd6c7f0
SHA256 8c137a4300b32a128e81d2294aac9b9a3f856693b11321cdac842bebcbdc29ee
SHA512 9421fba39aba7fb26bf958a5edbb7d48ca74244a5853de363847ed062ca661d88f7d4e22d7a98b9596600f8a7bc9d2c2a9c1900433a13937754382e215255dcb

C:\Program Files\Java\jdk-1.8\jre\bin\jli.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 12a37a886ee7b853c06bac1e1cce6a24
SHA1 4e15cca4638f9cd5c69a0cfa9ca2606229282010
SHA256 1b563484dafc1e71f21ec2b9389b81defb91458be3727427c03d321ee02a256b
SHA512 2a6ea87c4d5e34290fbca29df66ef78982c001323b8a09b1875e4e73dcc4817ee695e4cf7fb1b61e7eea70ca6ff7b4ced5cd372abc61f399b4ecec70b0c30314

C:\Program Files\Java\jdk-1.8\jre\bin\jdwp.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 5e784f52feb8f37a25c7b69eae750305
SHA1 f40d82806b1d197490481ddd9c34f161ec920955
SHA256 c9191f7816ec8915384646eb96cfcb74a162e354907c5deb42ef213d19e86897
SHA512 557f2bb313073c3b14baebc7613bfde4000a38fdc381c7e817b863dfa903f45938e46be6709ba9712a8316b976b3435bf4e21b51bfa9dd389f9c0a2bcb063201

C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe.(MJ-CZ6957480132)([email protected]).zxc

MD5 f5bc6c86d1de19e41b7ed4e1518d774e
SHA1 944ff9460e149177314621ff11592f1a6513c71d
SHA256 98bb5b9b05aa20ca1fe6a6d2a1634caccb10ddec16e08e1d971a8571b931c794
SHA512 1990f6cbed45f8fb6dcde693feee6c5d164de75d0de59ff172f0bb16c91dcb961ef3e86f65ceb480551e7f6a55edd81e9e914c99399e4735778f83b8f8b87085

C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.cpl.(MJ-CZ6957480132)([email protected]).zxc

MD5 577d5d938c64e6c5d7e19fede7e4bc19
SHA1 1d83ce0b7b3fdeae86ee90b0f10629590b2b5a25
SHA256 b01659b0e41a2360eca419721d888cfd593f7b6757845f04a7f3ff710b98aab0
SHA512 1128581851b4edb74166dd353d65aed15018a5aba830a6b5e7829124636a3c79f39d5f765347c5d1c3c2a69201d7eab52a086dbe564692443cb385b6ffdda802

C:\Program Files\Java\jdk-1.8\jre\bin\java.exe.(MJ-CZ6957480132)([email protected]).zxc

MD5 78c59d58bb2a3c23de95786c648af70b
SHA1 82e72f79f29285976d2ff37434ca220f757956af
SHA256 cb8cd4b39508fff749faff38d8d4383134c491da54744a4509898f71486c7a2c
SHA512 c72476bcadadcc37c25832833c0207381f7ed99ea97f07fc708bfcdf403b61a384414bb61f85b047925253c66117679b62a96e4689544e10a662e9a381305893

C:\Program Files\Java\jdk-1.8\jre\bin\glass.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 c5960566a52fc110a68fc7f5262ebf1b
SHA1 36db871003d699a3a9e2cc15cbf8d77f59c7dddd
SHA256 4873335f39dadbcb54fb5c18dda8873bece9ab3fb1d2b32cceaae77c6385c934
SHA512 09e4a832ba4b3c57f5f7f4c65c96e6c1fb15de59e48da635cc4da6c9f478107901188f83daaac289fe5555cb93c8f440e09755a0d79295a63595bebea0487a77

C:\Program Files\Java\jdk-1.8\bin\unpack200.exe.(MJ-CZ6957480132)([email protected]).zxc

MD5 10cbf9a6ca2f57a80439755dea5b765d
SHA1 613bb85526df1e5216d34829a4c0ec69c747c3eb
SHA256 d16bf193ca779046e5ec25f25c30c854841d16a6e295bad5174740176adf1cf1
SHA512 552ca4745aaed10d4aa5b87b15d62ad0431563da15e576f620089cd51362608fa30f2bfa5db8ef8ce3635e987103192b0db24b40ad1da8266950822d03ccc2cd

C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\zh-Hant\System.Windows.Forms.resources.dll.(MJ-CZ6957480132)([email protected]).zxc

MD5 3ee8cb2a99ce706446aa102c2b1021a0
SHA1 74348e9768901f7c5f50b823f62d99af21055e16
SHA256 150a3f70a9eea9609e45305f17cb974d33c73bdb0ec70a1c56e00c3cc01ede89
SHA512 ee016e61ffdebef6f7ff9010f507a96b649ca19af6af1c451d587a3fe4b993044bc0b86080ee763af49dbc5cba259ec3440a5266aa837a6a981be92414c066d2

Analysis: behavioral12

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:58

Platform

win7-20250207-en

Max time kernel

16s

Max time network

17s

Command Line

C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe bcdedit /set shutdown /r /f /t 2

Signatures

BlackMatter Ransomware

ransomware blackmatter

Blackmatter family

blackmatter

Renames multiple (189) files with added filename extension

ransomware

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-677481364-2238709445-1347953534-1000\Control Panel\Desktop\WallPaper = "C:\\ProgramData\\7xTwFxfw5.bmp" C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-677481364-2238709445-1347953534-1000\Control Panel\Desktop\Wallpaper = "C:\\ProgramData\\7xTwFxfw5.bmp" C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A

Modifies Control Panel

defense_evasion
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-677481364-2238709445-1347953534-1000\Control Panel\Desktop C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-677481364-2238709445-1347953534-1000\Control Panel\Desktop\WallpaperStyle = "10" C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Key created \REGISTRY\USER\S-1-5-21-677481364-2238709445-1347953534-1000\Control Panel\International C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: 36 N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeImpersonatePrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: 33 N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeManageVolumePrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeRestorePrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\system32\vssvc.exe N/A

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe

C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe bcdedit /set shutdown /r /f /t 2

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

Network

Country Destination Domain Proto
US 8.8.8.8:53 paymenthacks.com udp
US 8.8.8.8:53 mojobiden.com udp
US 15.197.148.33:443 mojobiden.com tcp
US 15.197.148.33:80 mojobiden.com tcp
US 15.197.148.33:443 mojobiden.com tcp

Files

memory/1388-0-0x0000000000C70000-0x0000000000C87000-memory.dmp

memory/1388-1-0x00000000001D0000-0x0000000000210000-memory.dmp

C:\Users\Admin\7xTwFxfw5.README.txt

MD5 f66968c47a64569e2281f65a95991be0
SHA1 ef9e3e80bfbea4c3021b226cb8cd00687013b8a8
SHA256 4b950c763006e7c4569df8742855cec31bf82f835bd7e2bdcb5f128db34c82bf
SHA512 cb4ace1b3e891ab100b3950c6bc133b216e91c8978a3af1ffd75617b606bb7ceb0133f44d37a30a827655e5b84b016d736a732f5f37635bb727e1a5b722cad24

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

MD5 83142242e97b8953c386f988aa694e4a
SHA1 833ed12fc15b356136dcdd27c61a50f59c5c7d50
SHA256 d72761e1a334a754ce8250e3af7ea4bf25301040929fd88cf9e50b4a9197d755
SHA512 bb6da177bd16d163f377d9b4c63f6d535804137887684c113cc2f643ceab4f34338c06b5a29213c23d375e95d22ef417eac928822dfb3688ce9e2de9d5242d10

C:\Users\Admin\AppData\Local\Temp\TarD8D9.tmp

MD5 109cab5505f5e065b63d01361467a83b
SHA1 4ed78955b9272a9ed689b51bf2bf4a86a25e53fc
SHA256 ea6b7f51e85835c09259d9475a7d246c3e764ad67c449673f9dc97172c351673
SHA512 753a6da5d6889dd52f40208e37f2b8c185805ef81148682b269fff5aa84a46d710fe0ebfe05bce625da2e801e1c26745998a41266fa36bf47bc088a224d730cc

memory/1388-310-0x0000000000C70000-0x0000000000C87000-memory.dmp

Analysis: behavioral24

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:59

Platform

win10ltsc2021-20250314-en

Max time kernel

104s

Max time network

107s

Command Line

C:\Users\Admin\AppData\Local\Temp\4a2ad49c934f9ae6ca6b5d0c7cc34f5e12d349640012fa8cf8eb7e2d3acd6c9f.exe bcdedit /set shutdown /r /f /t 2

Signatures

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\4a2ad49c934f9ae6ca6b5d0c7cc34f5e12d349640012fa8cf8eb7e2d3acd6c9f.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\4a2ad49c934f9ae6ca6b5d0c7cc34f5e12d349640012fa8cf8eb7e2d3acd6c9f.exe

C:\Users\Admin\AppData\Local\Temp\4a2ad49c934f9ae6ca6b5d0c7cc34f5e12d349640012fa8cf8eb7e2d3acd6c9f.exe bcdedit /set shutdown /r /f /t 2

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 1408 -ip 1408

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 1408 -s 560

Network

Country Destination Domain Proto
US 8.8.8.8:53 c.pki.goog udp
GB 142.250.179.227:80 c.pki.goog tcp

Files

N/A

Analysis: behavioral27

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:56

Platform

win7-20241023-en

Max time kernel

0s

Max time network

1s

Command Line

N/A

Signatures

N/A

Processes

N/A

Network

N/A

Files

N/A

Analysis: behavioral4

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:59

Platform

win10ltsc2021-20250314-en

Max time kernel

120s

Max time network

112s

Command Line

C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe bcdedit /set shutdown /r /f /t 2

Signatures

Dharma

ransomware dharma

Dharma family

dharma

Deletes shadow copies

ransomware defense_evasion impact execution

Renames multiple (784) files with added filename extension

ransomware

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-2123103809-19148277-2527443841-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Credentials from Password Stores: Windows Credential Manager

credential_access stealer

Drops startup file

Description Indicator Process Target
File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Reads user/profile data of web browsers

spyware stealer

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe = "C:\\Windows\\System32\\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe" C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\C:\Windows\System32\Info.hta = "mshta.exe \"C:\\Windows\\System32\\Info.hta\"" C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\C:\Users\Admin\AppData\Roaming\Info.hta = "mshta.exe \"C:\\Users\\Admin\\AppData\\Roaming\\Info.hta\"" C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification F:\$RECYCLE.BIN\S-1-5-21-2123103809-19148277-2527443841-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\AccountPictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Desktop\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\OneDrive\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Music\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Documents\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\DESKTOP.INI C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Music\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Downloads\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn1\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Downloads\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Favorites\Links\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\History\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Favorites\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Links\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Saved Games\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\3D Objects\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Videos\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Libraries\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\$Recycle.Bin\S-1-5-21-2123103809-19148277-2527443841-1000\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Contacts\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Libraries\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn2\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Desktop\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\AccountPictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Videos\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group3\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\Searches\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Application Shortcuts\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Users\Public\Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\desktop.ini C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\System32\Info.hta C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Windows\System32\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\Microsoft.NETCore.App.deps.json.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Microsoft Office\root\rsod\proof.en-us.msi.16.en-us.boot.tree.dat.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\it\System.Windows.Forms.Primitives.resources.dll.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\es-es\ui-strings.js C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\AFTRNOON\AFTRNOON.ELM.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\it\Microsoft.Build.Engine.resources.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.147.37\msedgeupdateres_nn.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusEDUR_SubTrial-pl.xrm-ms.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\zh-Hant\System.Windows.Forms.resources.dll.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\pl-pl\ui-strings.js.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Java\jdk-1.8\bin\api-ms-win-core-profile-l1-1-0.dll.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProXC2RVL_MAKC2R-ppd.xrm-ms.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\misc\altDekstopCopyPasteHelper.js.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\example_icons2x.png C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\is\LC_MESSAGES\vlc.mo.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_av1_plugin.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\10.0\VSTOLoader.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\find-text-2x.png C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019VL_MAK_AE-ul-oob.xrm-ms.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\powerpnt.exe.manifest.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\keystore\libfile_keystore_plugin.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\nls\de-de\ui-strings.js.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Java\jdk-1.8\bin\api-ms-win-core-console-l1-1-0.dll.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Java\jdk-1.8\bin\api-ms-win-crt-time-l1-1-0.dll.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\msasxpress.dll.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.pl-pl.dll.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\HomeBanner-3x.png.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Data.Edm.NetFX35.dll.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\excelcnv.exe.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\PdfPreview\PdfPreviewHandler.dll.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\line_2x.png.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\glib-lite.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\hr-hr\ui-strings.js.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-profile-l1-1-0.dll.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libpuzzle_plugin.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInSideAdapters\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\bg.txt.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\sqmapi.dll.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AXSLE.dll.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\1033\ADO210.CHM.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\index.html C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files-select\css\main.css.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Internet Explorer\it-IT\iexplore.exe.mui C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\GKPowerPoint.dll.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.id-id.dll.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\hr-hr\ui-strings.js.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription4-ul-oob.xrm-ms.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.OData.Core.NetFX35.dll.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Functions\Assertions\ContainExactly.ps1 C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pt-BR\UIAutomationClient.resources.dll.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Windows Media Player\WMPNSSUI.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\it\PresentationUI.resources.dll.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Download_on_the_App_Store_Badge_de_135x40.svg.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\nb-no\ui-strings.js.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_Retail-pl.xrm-ms.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Java\jdk-1.8\jre\legal\jdk\icu.md.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\images\buttons.png C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\js\plugins\rhp\generic-rhp-app-tool-view.js.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_Retail-ppd.xrm-ms.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\mip_clienttelemetry.dll.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\mip_protection_sdk.dll.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\1033\PGOMESSAGES.XML.id-34246335.[[email protected]].harma C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Data.DataSetExtensions.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\de\ReachFramework.resources.dll C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Interacts with shadow copies

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\system32\vssadmin.exe N/A
N/A N/A C:\Windows\system32\vssadmin.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeBackupPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\system32\vssvc.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2740 wrote to memory of 2340 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\system32\cmd.exe
PID 2740 wrote to memory of 2340 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\system32\cmd.exe
PID 2340 wrote to memory of 4848 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\mode.com
PID 2340 wrote to memory of 4848 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\mode.com
PID 2340 wrote to memory of 4620 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 2340 wrote to memory of 4620 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 2740 wrote to memory of 6300 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\system32\cmd.exe
PID 2740 wrote to memory of 6300 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\system32\cmd.exe
PID 6300 wrote to memory of 5828 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\mode.com
PID 6300 wrote to memory of 5828 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\mode.com
PID 6300 wrote to memory of 6260 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 6300 wrote to memory of 6260 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 2740 wrote to memory of 9648 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\System32\mshta.exe
PID 2740 wrote to memory of 9648 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\System32\mshta.exe
PID 2740 wrote to memory of 6912 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\System32\mshta.exe
PID 2740 wrote to memory of 6912 N/A C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe C:\Windows\System32\mshta.exe

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe

C:\Users\Admin\AppData\Local\Temp\34c392448fc0818278cd19bb0841adf573e967be8a0f73bb42bb367a5835b6ea.exe bcdedit /set shutdown /r /f /t 2

C:\Windows\system32\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\system32\mode.com

mode con cp select=1251

C:\Windows\system32\vssadmin.exe

vssadmin delete shadows /all /quiet

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\system32\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\system32\mode.com

mode con cp select=1251

C:\Windows\system32\vssadmin.exe

vssadmin delete shadows /all /quiet

C:\Windows\System32\mshta.exe

"C:\Windows\System32\mshta.exe" "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta"

C:\Windows\System32\mshta.exe

"C:\Windows\System32\mshta.exe" "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta"

Network

Country Destination Domain Proto
US 8.8.8.8:53 fd.api.iris.microsoft.com udp
NL 20.31.169.57:443 fd.api.iris.microsoft.com tcp

Files

C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvSubsystems32.dll.id-34246335.[[email protected]].harma

MD5 ef43b2cd5586408ac65348c96e364d05
SHA1 7204b73b86b858800e161a58bd1f7f9edb436dba
SHA256 316614826aefe43209d97581359d1be87a6c8454d7c0f20b1bdbb6de6d0ca592
SHA512 06c234fcd8afc4e42669f5a8467200043e9bac883fe5eac1e16f87026f402a8545719cbac0290bbb946e64dff1e0ec7fee824a310680b9a440204bfb5dbe82c9

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta

MD5 e74af9b5ef4fb2d59919f458e0082dbb
SHA1 d8571a8e8bbe841fc7f6f78c28f1bd4b6d4dd745
SHA256 82634e6a14798db4ca0f77a1cb21b41abe49e6c2504ecac5ee90ea5d9d74d7be
SHA512 9c2cbb9ca484a82e93b2cfd92678d434e9dc1b90282f09c0e9f69236bd4649549f77db581a5ccae90f5d6a7086cb9ca0bad3c19e2c943da8e94a074de1c3c4dd

Analysis: behavioral15

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:58

Platform

win11-20250313-en

Max time kernel

101s

Max time network

103s

Command Line

C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe bcdedit /set shutdown /r /f /t 2

Signatures

BlackMatter Ransomware

ransomware blackmatter

Blackmatter family

blackmatter

Renames multiple (148) files with added filename extension

ransomware

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-167299615-4170584903-1843289874-1000\Control Panel\Desktop\WallPaper = "C:\\ProgramData\\iOIKw8MK4.bmp" C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-167299615-4170584903-1843289874-1000\Control Panel\Desktop\Wallpaper = "C:\\ProgramData\\iOIKw8MK4.bmp" C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A

Modifies Control Panel

defense_evasion
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-167299615-4170584903-1843289874-1000\Control Panel\Desktop C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-167299615-4170584903-1843289874-1000\Control Panel\Desktop\WallpaperStyle = "10" C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Key created \REGISTRY\USER\S-1-5-21-167299615-4170584903-1843289874-1000\Control Panel\International C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: 36 N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeImpersonatePrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: 33 N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeManageVolumePrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeRestorePrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\system32\vssvc.exe N/A

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe

C:\Users\Admin\AppData\Local\Temp\3a7265305386f955adbeb6bd7c711f03395963ac36be82e5bb6b1d7b2034c859.exe bcdedit /set shutdown /r /f /t 2

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

Network

Country Destination Domain Proto
US 8.8.8.8:53 paymenthacks.com udp
US 3.33.130.190:443 mojobiden.com tcp
US 3.33.130.190:80 mojobiden.com tcp
US 3.33.130.190:443 mojobiden.com tcp
GB 142.250.179.227:80 c.pki.goog tcp

Files

memory/6048-0-0x00000000007C0000-0x00000000007D7000-memory.dmp

memory/6048-2-0x0000000002CC0000-0x0000000002CD0000-memory.dmp

memory/6048-1-0x0000000002CC0000-0x0000000002CD0000-memory.dmp

C:\iOIKw8MK4.README.txt

MD5 f66968c47a64569e2281f65a95991be0
SHA1 ef9e3e80bfbea4c3021b226cb8cd00687013b8a8
SHA256 4b950c763006e7c4569df8742855cec31bf82f835bd7e2bdcb5f128db34c82bf
SHA512 cb4ace1b3e891ab100b3950c6bc133b216e91c8978a3af1ffd75617b606bb7ceb0133f44d37a30a827655e5b84b016d736a732f5f37635bb727e1a5b722cad24

memory/6048-229-0x00000000007C0000-0x00000000007D7000-memory.dmp

Analysis: behavioral17

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:59

Platform

win7-20241010-en

Max time kernel

72s

Max time network

53s

Command Line

C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe bcdedit /set shutdown /r /f /t 2

Signatures

Chaos

ransomware chaos

Chaos Ransomware

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Chaos family

chaos

Deletes shadow copies

ransomware defense_evasion impact execution

Modifies boot configuration data using bcdedit

ransomware evasion
Description Indicator Process Target
N/A N/A C:\Windows\system32\bcdedit.exe N/A
N/A N/A C:\Windows\system32\bcdedit.exe N/A

Deletes backup catalog

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\system32\wbadmin.exe N/A

Disables Task Manager via registry modification

defense_evasion

Drops startup file

Description Indicator Process Target
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\لفك تشفير ملفات اضغط هنا C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Reads user/profile data of web browsers

spyware stealer

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Windows\CurrentVersion\Run\Microsoft Store = "C:\\Users\\Admin\\AppData\\Roaming\\windowsdefender.exe" C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Users\Admin\Saved Games\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Favorites\Links\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Pictures\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\SendTo\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\$Recycle.Bin\S-1-5-21-3692679935-4019334568-335155002-1000\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Videos\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Links\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Desktop\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Videos\Sample Videos\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\History\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Music\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Music\Sample Music\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SEGJVAZC\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Searches\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Pictures\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Pictures\Sample Pictures\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G0UQMQ1C\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Desktop\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Documents\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Favorites\Links for United States\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Downloads\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Videos\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BBWU148F\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Documents\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\1U7Y9BT8\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\4KNYJNXZ\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\ADWO43R6\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Libraries\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification F:\$RECYCLE.BIN\S-1-5-21-3692679935-4019334568-335155002-1000\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Contacts\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Favorites\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Music\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4TDQSVWU\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Recorded TV\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Recorded TV\Sample Media\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Downloads\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\keh0wcj7e.jpg" C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe N/A

Interacts with shadow copies

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\system32\vssadmin.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000_CLASSES\_auto_file\shell\Read\command\ = "\"C:\\Program Files (x86)\\Adobe\\Reader 9.0\\Reader\\AcroRd32.exe\" \"%1\"" C:\Windows\system32\rundll32.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000_Classes\Local Settings C:\Windows\system32\rundll32.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000_CLASSES\_auto_file C:\Windows\system32\rundll32.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000_CLASSES\_auto_file\ C:\Windows\system32\rundll32.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000_CLASSES\_auto_file\shell\Read C:\Windows\system32\rundll32.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000_CLASSES\_auto_file\shell C:\Windows\system32\rundll32.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000_CLASSES\_auto_file\shell\Read\command C:\Windows\system32\rundll32.exe N/A

Suspicious behavior: AddClipboardFormatListener

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 33 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 34 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 35 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 33 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 34 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 35 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\wbengine.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\wbengine.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\wbengine.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe N/A
N/A N/A C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2736 wrote to memory of 2472 N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe C:\Users\Admin\AppData\Roaming\windowsdefender.exe
PID 2736 wrote to memory of 2472 N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe C:\Users\Admin\AppData\Roaming\windowsdefender.exe
PID 2736 wrote to memory of 2472 N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe C:\Users\Admin\AppData\Roaming\windowsdefender.exe
PID 2472 wrote to memory of 2148 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 2472 wrote to memory of 2148 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 2472 wrote to memory of 2148 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 2148 wrote to memory of 3000 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 2148 wrote to memory of 3000 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 2148 wrote to memory of 3000 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 2148 wrote to memory of 2288 N/A C:\Windows\System32\cmd.exe C:\Windows\System32\Wbem\WMIC.exe
PID 2148 wrote to memory of 2288 N/A C:\Windows\System32\cmd.exe C:\Windows\System32\Wbem\WMIC.exe
PID 2148 wrote to memory of 2288 N/A C:\Windows\System32\cmd.exe C:\Windows\System32\Wbem\WMIC.exe
PID 2472 wrote to memory of 2304 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 2472 wrote to memory of 2304 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 2472 wrote to memory of 2304 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 2304 wrote to memory of 1572 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\bcdedit.exe
PID 2304 wrote to memory of 1572 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\bcdedit.exe
PID 2304 wrote to memory of 1572 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\bcdedit.exe
PID 2304 wrote to memory of 2608 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\bcdedit.exe
PID 2304 wrote to memory of 2608 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\bcdedit.exe
PID 2304 wrote to memory of 2608 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\bcdedit.exe
PID 2472 wrote to memory of 1988 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 2472 wrote to memory of 1988 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 2472 wrote to memory of 1988 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 1988 wrote to memory of 1576 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\wbadmin.exe
PID 1988 wrote to memory of 1576 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\wbadmin.exe
PID 1988 wrote to memory of 1576 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\wbadmin.exe
PID 2472 wrote to memory of 2304 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\system32\rundll32.exe
PID 2472 wrote to memory of 2304 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\system32\rundll32.exe
PID 2472 wrote to memory of 2304 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\system32\rundll32.exe
PID 2304 wrote to memory of 2176 N/A C:\Windows\system32\rundll32.exe C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
PID 2304 wrote to memory of 2176 N/A C:\Windows\system32\rundll32.exe C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
PID 2304 wrote to memory of 2176 N/A C:\Windows\system32\rundll32.exe C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
PID 2304 wrote to memory of 2176 N/A C:\Windows\system32\rundll32.exe C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe

Uses Task Scheduler COM API

persistence

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe

C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe bcdedit /set shutdown /r /f /t 2

C:\Users\Admin\AppData\Roaming\windowsdefender.exe

"C:\Users\Admin\AppData\Roaming\windowsdefender.exe"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C vssadmin delete shadows /all /quiet & wmic shadowcopy delete

C:\Windows\system32\vssadmin.exe

vssadmin delete shadows /all /quiet

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\System32\Wbem\WMIC.exe

wmic shadowcopy delete

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C bcdedit /set {default} bootstatuspolicy ignoreallfailures & bcdedit /set {default} recoveryenabled no

C:\Windows\system32\bcdedit.exe

bcdedit /set {default} bootstatuspolicy ignoreallfailures

C:\Windows\system32\bcdedit.exe

bcdedit /set {default} recoveryenabled no

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C wbadmin delete catalog -quiet

C:\Windows\system32\wbadmin.exe

wbadmin delete catalog -quiet

C:\Windows\system32\wbengine.exe

"C:\Windows\system32\wbengine.exe"

C:\Windows\System32\vdsldr.exe

C:\Windows\System32\vdsldr.exe -Embedding

C:\Windows\System32\vds.exe

C:\Windows\System32\vds.exe

C:\Windows\system32\rundll32.exe

"C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\Admin\AppData\Roaming\لفك تشفير ملفات اضغط هنا

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Roaming\لفك تشفير ملفات اضغط هنا"

Network

N/A

Files

memory/2736-0-0x000007FEF5163000-0x000007FEF5164000-memory.dmp

memory/2736-1-0x0000000000C50000-0x0000000000C62000-memory.dmp

C:\Users\Admin\AppData\Roaming\windowsdefender.exe

MD5 7977bc8781a00875b4d465bc2a90d5d4
SHA1 9f4b2858edcff694fee76636bf8cf33a366fc237
SHA256 49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24
SHA512 245d65b9301b759097cded2a2f078e4e41c7b68e303a71fccd465a6fa230b48e13e571c4e57e03710934a5e6b9536ed634e0edc502ba35433b02147760e5f05b

memory/2472-7-0x0000000001380000-0x0000000001392000-memory.dmp

memory/2472-18-0x000007FEF4770000-0x000007FEF515C000-memory.dmp

memory/2472-19-0x000007FEF4773000-0x000007FEF4774000-memory.dmp

C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\ProPsWW.cab

MD5 d1457b72c3fb323a2671125aef3eab5d
SHA1 5bab61eb53176449e25c2c82f172b82cb13ffb9d
SHA256 8a8de823d5ed3e12746a62ef169bcf372be0ca44f0a1236abc35df05d96928e1
SHA512 ca63c07ad35d8c9fb0c92d6146759b122d4ec5d3f67ebe2f30ddb69f9e6c9fd3bf31a5e408b08f1d4d9cd68120cced9e57f010bef3cde97653fed5470da7d1a0

memory/2472-32-0x000007FEF4770000-0x000007FEF515C000-memory.dmp

C:\MSOCache\All Users\{90140000-0019-0409-0000-0000000FF1CE}-C\لفك تشفير ملفات اضغط هنا

MD5 3b8d73c95c31911b53b39895d1c2a588
SHA1 ca48d939e174ec33f27af1cb821517be10ac1b02
SHA256 4e258e6c04d087af311791d39279e6dc5656418e7dcdc08825a7356d0cfef5e8
SHA512 1ceadb0c5a49939346ebb782edb520c2e4d36c56be866495a51cedc1a02c216d9f005f430c4085855564331c715262c01a55296460f096f0927436595c879acb

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

MD5 100883efdd404243737bf1f66326fd3d
SHA1 3e6fbf2430be7a8b8e47d98d382b172775b05846
SHA256 f7f74e7bb3644ec46f19b45ebbebc1b4cdce3cc30f5a8729ca3dd2434530674c
SHA512 75dc7ae3d91a962c8fb484517d237f902a396c8b4ffc3261be8c1115e85a312c5d9e96be9847a02e4335de0206e4ab9dec1288ead644b75b62ad5b7447e74251

Analysis: behavioral19

Detonation Overview

Submitted

2025-03-25 12:55

Reported

2025-03-25 12:58

Platform

win10ltsc2021-20250314-en

Max time kernel

104s

Max time network

106s

Command Line

C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe bcdedit /set shutdown /r /f /t 2

Signatures

Chaos

ransomware chaos

Chaos Ransomware

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Chaos family

chaos

Deletes shadow copies

ransomware defense_evasion impact execution

Modifies boot configuration data using bcdedit

ransomware evasion
Description Indicator Process Target
N/A N/A C:\Windows\system32\bcdedit.exe N/A
N/A N/A C:\Windows\system32\bcdedit.exe N/A

Deletes backup catalog

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\system32\wbadmin.exe N/A

Disables Task Manager via registry modification

defense_evasion

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-2123103809-19148277-2527443841-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-2123103809-19148277-2527443841-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Drops startup file

Description Indicator Process Target
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\لفك تشفير ملفات اضغط هنا C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Reads user/profile data of web browsers

spyware stealer

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-2123103809-19148277-2527443841-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Microsoft Store = "C:\\Users\\Admin\\AppData\\Roaming\\windowsdefender.exe" C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Users\Admin\Contacts\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Documents\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification F:\$RECYCLE.BIN\S-1-5-21-2123103809-19148277-2527443841-1000\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn1\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Libraries\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Pictures\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Saved Games\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\History\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Downloads\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\3D Objects\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Searches\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Videos\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\AccountPictures\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Favorites\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\$Recycle.Bin\S-1-5-21-2123103809-19148277-2527443841-1000\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\AccountPictures\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Pictures\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Favorites\Links\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\OneDrive\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Links\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Desktop\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Videos\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Desktop\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group3\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\System Tools\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Documents\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Downloads\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Libraries\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Public\Music\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn2\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\StartUp\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Application Shortcuts\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\Music\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\desktop.ini C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-2123103809-19148277-2527443841-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\emukw0ti3.jpg" C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Enumerates physical storage devices

Checks SCSI registry key(s)

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\FriendlyName C:\Windows\System32\vds.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 C:\Windows\System32\vds.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName C:\Windows\System32\vds.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Windows\System32\vds.exe N/A

Interacts with shadow copies

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\system32\vssadmin.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-2123103809-19148277-2527443841-1000_Classes\Local Settings C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2123103809-19148277-2527443841-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A

Suspicious behavior: AddClipboardFormatListener

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
N/A N/A C:\Windows\System32\Wbem\WMIC.exe N/A
N/A N/A C:\Windows\System32\Wbem\WMIC.exe N/A
N/A N/A C:\Windows\System32\Wbem\WMIC.exe N/A
N/A N/A C:\Windows\System32\Wbem\WMIC.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 33 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 34 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 35 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 36 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 33 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 34 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 35 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: 36 N/A C:\Windows\System32\Wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\wbengine.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\wbengine.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\wbengine.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Windows\system32\OpenWith.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3304 wrote to memory of 1280 N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe C:\Users\Admin\AppData\Roaming\windowsdefender.exe
PID 3304 wrote to memory of 1280 N/A C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe C:\Users\Admin\AppData\Roaming\windowsdefender.exe
PID 1280 wrote to memory of 4872 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 1280 wrote to memory of 4872 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 4872 wrote to memory of 4960 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 4872 wrote to memory of 4960 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\vssadmin.exe
PID 4872 wrote to memory of 1056 N/A C:\Windows\System32\cmd.exe C:\Windows\System32\Wbem\WMIC.exe
PID 4872 wrote to memory of 1056 N/A C:\Windows\System32\cmd.exe C:\Windows\System32\Wbem\WMIC.exe
PID 1280 wrote to memory of 1028 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 1280 wrote to memory of 1028 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 1028 wrote to memory of 5604 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\bcdedit.exe
PID 1028 wrote to memory of 5604 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\bcdedit.exe
PID 1028 wrote to memory of 476 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\bcdedit.exe
PID 1028 wrote to memory of 476 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\bcdedit.exe
PID 1280 wrote to memory of 3844 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 1280 wrote to memory of 3844 N/A C:\Users\Admin\AppData\Roaming\windowsdefender.exe C:\Windows\System32\cmd.exe
PID 3844 wrote to memory of 5064 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\wbadmin.exe
PID 3844 wrote to memory of 5064 N/A C:\Windows\System32\cmd.exe C:\Windows\system32\wbadmin.exe

Uses Task Scheduler COM API

persistence

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe

C:\Users\Admin\AppData\Local\Temp\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe bcdedit /set shutdown /r /f /t 2

C:\Users\Admin\AppData\Roaming\windowsdefender.exe

"C:\Users\Admin\AppData\Roaming\windowsdefender.exe"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C vssadmin delete shadows /all /quiet & wmic shadowcopy delete

C:\Windows\system32\vssadmin.exe

vssadmin delete shadows /all /quiet

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\System32\Wbem\WMIC.exe

wmic shadowcopy delete

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C bcdedit /set {default} bootstatuspolicy ignoreallfailures & bcdedit /set {default} recoveryenabled no

C:\Windows\system32\bcdedit.exe

bcdedit /set {default} bootstatuspolicy ignoreallfailures

C:\Windows\system32\bcdedit.exe

bcdedit /set {default} recoveryenabled no

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C wbadmin delete catalog -quiet

C:\Windows\system32\wbadmin.exe

wbadmin delete catalog -quiet

C:\Windows\system32\wbengine.exe

"C:\Windows\system32\wbengine.exe"

C:\Windows\System32\vdsldr.exe

C:\Windows\System32\vdsldr.exe -Embedding

C:\Windows\System32\vds.exe

C:\Windows\System32\vds.exe

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

Network

Country Destination Domain Proto
US 8.8.8.8:53 c.pki.goog udp
GB 142.250.179.227:80 c.pki.goog tcp

Files

memory/3304-0-0x00007FFE1D923000-0x00007FFE1D925000-memory.dmp

memory/3304-1-0x0000000000500000-0x0000000000512000-memory.dmp

C:\Users\Admin\AppData\Roaming\windowsdefender.exe

MD5 7977bc8781a00875b4d465bc2a90d5d4
SHA1 9f4b2858edcff694fee76636bf8cf33a366fc237
SHA256 49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24
SHA512 245d65b9301b759097cded2a2f078e4e41c7b68e303a71fccd465a6fa230b48e13e571c4e57e03710934a5e6b9536ed634e0edc502ba35433b02147760e5f05b

memory/1280-4-0x00007FFE1D920000-0x00007FFE1E3E2000-memory.dmp

C:\Users\Admin\2012_x64_1_vcRuntimeAdditional_x64.log

MD5 d1457b72c3fb323a2671125aef3eab5d
SHA1 5bab61eb53176449e25c2c82f172b82cb13ffb9d
SHA256 8a8de823d5ed3e12746a62ef169bcf372be0ca44f0a1236abc35df05d96928e1
SHA512 ca63c07ad35d8c9fb0c92d6146759b122d4ec5d3f67ebe2f30ddb69f9e6c9fd3bf31a5e408b08f1d4d9cd68120cced9e57f010bef3cde97653fed5470da7d1a0

C:\Users\لفك تشفير ملفات اضغط هنا

MD5 3b8d73c95c31911b53b39895d1c2a588
SHA1 ca48d939e174ec33f27af1cb821517be10ac1b02
SHA256 4e258e6c04d087af311791d39279e6dc5656418e7dcdc08825a7356d0cfef5e8
SHA512 1ceadb0c5a49939346ebb782edb520c2e4d36c56be866495a51cedc1a02c216d9f005f430c4085855564331c715262c01a55296460f096f0927436595c879acb

memory/1280-43-0x00007FFE1D920000-0x00007FFE1E3E2000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\49aca08f5b259860364fc224601a944aa17161bb1da688e24621038457472d24.exe.log

MD5 b92bd19c1a9416298a873dfa43b439b7
SHA1 7b96a8874aff3a502363f4168332613ebc53d64e
SHA256 1ac8854abd01c202cf82e4ccdf80bf50319c59bc7a02dce2b19cecfedf7dd4ba
SHA512 5910691ebdd78a2740117b14f146629874682d196f518f479b8bcb754ed2501a009fc465cb9e3685f7aed8ced7b435690de2b8b8439117abb5f61dc4996387a6

memory/1280-1388-0x00007FFE1D920000-0x00007FFE1E3E2000-memory.dmp

memory/1280-1389-0x00007FFE1D920000-0x00007FFE1E3E2000-memory.dmp