fantom | f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b

Analysis

max time kernel
507s
max time network
498s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20251017-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20251017-enlocale:en-usos:windows10-ltsc_2021-x64system
submitted
04/11/2025, 02:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Fantom.exe
Size 261KB
Sample251104-c25llsat9c
SHA256 f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b
MD5 7d80230df68ccba871815d68f016c282
SHA1 e10874c6108a26ceedfc84f50881824462b5b6b6
SHA512 64d02b3e7ed82a64aaac1f74c34d6b6e6feaac665ca9c08911b93eddcec66595687024ec576e74ea09a1193ace3923969c75de8733859835fef45335cf265540
SSDEEP 3072:vDKW1LgppLRHMY0TBfJvjcTp5XxG8pt+oSOpE22obq+NYgvPuCEbMBWJxLRiUgV:vDKW1Lgbdl0TBBvjc/M8n35nYgvKjdzi
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

adware defense_evasion discovery fantom persistence privilege_escalation ransomware spyware stealer

Malware Config

Extracted

Path

C:\Program Files\7-Zip\DECRYPT_YOUR_FILES.HTML

Ransom Note

<html> <head> <style> body{ background-color: #3366CC; } h1 { background-color: RGB(249, 201, 16); } p { background-color: maroon; color: white; } </style> </head> <body> <center> <h1><b> Attention ! All your files </b> have been encrypted. </h1></br> <p> Due encrypting was used algoritm RSA-4096 and AES-256, used for protection military secrets.</br> That means > RESTORE YOU DATA POSIBLE ONLY BUYING decryption passwords from us.</br> Getting a decryption of your files is - SIMPLY task.</br></br> That all what you need:</br> 1. Sent Your ID_KEY on mailbox [email protected] or [email protected] </br> 2. For test, decrypt 2 small files, to be sure that we can decrypt you files.</br> 3. Pay our services. </br> 4. GET software with passwords for decrypt you files.</br> 5. Make measures to prevent this type situations again.</br></br> IMPORTANT(1)</br> Do not try restore files without our help, this is useless, and can destroy you data permanetly.</br></br> IMPORTANT(2) </br> We Cant hold you decryption passwords forever. </br>ALL DECRYPTION PASSWORDS, for what wasn`t we receive reward, will destroy after week of moment of encryption. </p> <p> Your ID_KEY: <br> </p> <table width="1024" border="0"> <tbody> <tr> <td><p>LEO595g488cksUnLbPEAIbqJLhs42Bcyya95D0+cGLDGUfSpMNVZ+bwDgROxHdpUtrSNx0H2YN8qGtttuzACjzUUwvfl83BKsaDGJqKF6gmBMiN92AUai+TsZ6wnpsaOIjuiQwZiLp7ngnTo4+5gBSxZ+wJRkATV45mLE/zKQnbpfgcDalawTTSafAbV6L7jp5VWOBLCrKRp4fopfFAROJrdG5k7lM0RJBCEJpWplc5OxvD4iwBufSohJPB/1sEJHa83eR+WwOemU+RTmzdCKP1s5wRy/BaDGRnuwJGjm4o84QdXN4JMMwYjMBO0rLrB367uF8KeFNp5e92d9cYQZw==ZW4tVVM=</p></td> </tr> </tbody> </table> </center></html></body>

Emails

Signatures

Fantom
Ransomware which hides encryption process behind fake Windows Update screen.
ransomware fantom
Fantom family
fantom
Renames multiple (5149) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware
Disables Task Manager via registry modification
defense_evasion

Drops file in Drivers directory 21 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\drivers\ja-JP\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\UMDF\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\en-US\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\ja-JP\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\uk-UA\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\es-ES\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\gmreadme.txt	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\es-ES\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\fr-FR\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\it-IT\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\de-DE\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\en-US\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\de-DE\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\fr-FR\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\UMDF\en-US\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\uk-UA\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\drivers\UMDF\en-US\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\drivers\it-IT\DECRYPT_YOUR_FILES.HTML	Fantom.exe

Event Triggered Execution: Image File Execution Options Injection 1 TTPs 16 IoCs

persistence

Image File Execution Options Injection

T1546.012

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AcroRd32Info.exe	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RdrCEF.exe	MsiExec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RdrCEF.exe\MitigationOptions = "256"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AcroRd32Info.exe	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AcroRd32.exe\DisableExceptionChainValidation = "0"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AcroRd32.exe\MitigationOptions = "256"	MsiExec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RdrServicesUpdater.exe\MitigationOptions = "256"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AcroRd32.exe	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RdrServicesUpdater.exe	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RdrCEF.exe	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RdrServicesUpdater.exe	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AcroRd32Info.exe\MitigationOptions = "256"	MsiExec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AcroRd32Info.exe\DisableExceptionChainValidation = "0"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RdrCEF.exe\DisableExceptionChainValidation = "0"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AcroRd32.exe	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RdrServicesUpdater.exe\DisableExceptionChainValidation = "0"	msiexec.exe

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-1659235647-4126961737-859461056-1000\Control Panel\International\Geo\Nation	Fantom.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1659235647-4126961737-859461056-1000\Control Panel\International\Geo\Nation	RdrCEF.exe

Drops startup file 2 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\DECRYPT_YOUR_FILES.HTML	Fantom.exe

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Executes dropped EXE 6 IoCs

pid	Process
3416	WindowsUpdate.exe
1688	RdrServicesUpdater.exe
1088	AcroRd32.exe
4688	RdrCEF.exe
416	RdrCEF.exe
2880	RdrCEF.exe

Loads dropped DLL 60 IoCs

pid	Process
660	MsiExec.exe
660	MsiExec.exe
660	MsiExec.exe
660	MsiExec.exe
660	MsiExec.exe
660	MsiExec.exe
660	MsiExec.exe
660	MsiExec.exe
660	MsiExec.exe
660	MsiExec.exe
660	MsiExec.exe
660	MsiExec.exe
660	MsiExec.exe
660	MsiExec.exe
660	MsiExec.exe
1740	MsiExec.exe
1740	MsiExec.exe
1740	MsiExec.exe
1740	MsiExec.exe
1740	MsiExec.exe
1740	MsiExec.exe
1740	MsiExec.exe
1740	MsiExec.exe
1740	MsiExec.exe
1740	MsiExec.exe
1740	MsiExec.exe
1740	MsiExec.exe
1740	MsiExec.exe
1740	MsiExec.exe
1740	MsiExec.exe
1740	MsiExec.exe
1740	MsiExec.exe
1740	MsiExec.exe
1740	MsiExec.exe
1740	MsiExec.exe
1740	MsiExec.exe
1740	MsiExec.exe
1740	MsiExec.exe
660	MsiExec.exe
660	MsiExec.exe
660	MsiExec.exe
660	MsiExec.exe
1088	AcroRd32.exe
1088	AcroRd32.exe
1088	AcroRd32.exe
1088	AcroRd32.exe
1088	AcroRd32.exe
1088	AcroRd32.exe
1088	AcroRd32.exe
4688	RdrCEF.exe
4688	RdrCEF.exe
4688	RdrCEF.exe
4688	RdrCEF.exe
2880	RdrCEF.exe
2880	RdrCEF.exe
2880	RdrCEF.exe
416	RdrCEF.exe
416	RdrCEF.exe
416	RdrCEF.exe
416	RdrCEF.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Enumerates connected drives 3 TTPs 23 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\D:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe

Drops file in System32 directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\setup\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_receiptprinter.inf_amd64_7952e4baaee88d58\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\microsoft_bluetooth_hfp_hf.inf_amd64_0c00f8f3a465c9a4\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\InstallShield\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\ja-JP\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCClassResources\WindowsPackageCab\it-IT\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_fsundelete.inf_amd64_741f159cc6ce7814\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\wvmbushid.inf_amd64_fd2fe159a9daf508\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\ialpss2i_gpio2_bxt_p.inf_amd64_8be317e01b44bf5a\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmoptn.inf_amd64_583bd0f3892e01df\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netrtl64.inf_amd64_8e9c2368fe308df2\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\ConfigCI\de-DE\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\NetSecurity\it\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_PackageResource\en-US\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\WindowsErrorReporting\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\Com\en-US\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_multifunction.inf_amd64_8bf0fd2423b20b97\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\fr-CA\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\Speech_OneCore\Common\fr-FR\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\Tasks\Microsoft\Windows\SyncCenter\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\it-IT\Licenses\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\Tasks\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\zh-CN\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmosi.inf_amd64_fce30a36dbc4596c\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\Speech\Engines\SR\en-US\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\IME\SHARED\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\InstallShield\setupdir\0012\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\uk-UA\Licenses\Volume\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\fr-FR\default.help.txt	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\MsDtc\en\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\Configuration\Registration\MSFT_FileDirectoryConfiguration\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\bcmdhd64.inf_amd64_e0bae6831f60ea5f\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netwns64.inf_amd64_162bb49f925c6463\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\sysprep\en-US\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\cpu.inf_amd64_98fb1176d8c6037b\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netl1e64.inf_amd64_8d5ca5ab1472fc44\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\InstallShield\setupdir\000b\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\it-IT\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmtdkj6.inf_amd64_5a503c811e650e70\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\NetQos\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\DriverStore\FileRepository\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\uk-UA\Licenses\Volume\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\@AppHelpToast.png	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\el-GR\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmhaeu.inf_amd64_e0c209c891e162a4\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmhandy.inf_amd64_d2feb24c2d3b69d4\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\msgpiowin32.inf_amd64_46634fa071d1db0d\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDiagnostics\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\buttonconverter.inf_amd64_73b807c3bed63b18\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_amd64_f618268e6b943f2d\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_fsquotamgmt.inf_amd64_5f092e2a496f61af\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\tsgenericusbdriver.inf_amd64_e2a5bd66234c49e2\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\es\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\Licenses\neutral\Volume\EnterpriseS\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\uk-UA\Licenses\OEM\EnterpriseS\license.rtf	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\Configuration\Registration\MSFT_FileDirectoryConfiguration\uk-UA\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SysWOW64\AdvancedInstallers\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\c_smartcardreader.inf_amd64_33a0db63c0afb351\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmagm64.inf_amd64_7f60bc7ff484a292\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmaiwa5.inf_amd64_8416dd97e1ecb6dc\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mdmzyp.inf_amd64_19eb30e94285f2a6\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\Recovery\ReAgent.xml	Fantom.exe
File created	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\NetNat\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\SysWOW64\oobe\de-DE\DECRYPT_YOUR_FILES.HTML	Fantom.exe

Sets desktop wallpaper using registry 2 TTPs 1 IoCs

ransomware

Defacement

T1491

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1659235647-4126961737-859461056-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\2d5s8g4ed.jpg"	Fantom.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Windows Photo Viewer\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\it-it\ui-strings.js	Fantom.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\tr-tr\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\fi-fi\ui-strings.js	Fantom.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\Locales\sk.pak	Fantom.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Annotations\Stamps\ENU\StandardBusiness.pdf	msiexec.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\walk-through\js\nls\ui-strings.js	RdrServicesUpdater.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\hi_contrast\core_icons_highcontrast_retina.png	Fantom.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\uk-ua\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\sl-sl\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\cs-cz\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Program Files\7-Zip\Lang\tr.txt	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\it-it\ui-strings.js	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\sl-si\ui-strings.js	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\selector.js	Fantom.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\hu-hu\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\zh-cn\ui-strings.js	Fantom.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\digsig\js\nls\hr-hr\ui-strings.js	RdrServicesUpdater.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Integration\C2RManifest.Proof.Culture.msi.16.en-us.xml	Fantom.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\legal\jdk\libpng.md	Fantom.exe
File created	C:\Program Files\Microsoft Office\root\Office16\MSIPC\sr-Cyrl-BA\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files-select\js\plugin.js	Fantom.exe
File created	C:\Program Files\Common Files\System\Ole DB\it-IT\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected]	Fantom.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\js\nls\fi-fi\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\themes\dark\new_icons_retina.png	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\s_checkbox_unselected_18.svg	Fantom.exe
File created	C:\Program Files (x86)\Common Files\Microsoft Shared\ink\it-IT\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x86\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\images\s_sendforsignature_18.svg	RdrServicesUpdater.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ff\LC_MESSAGES\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons_retina_thumb.png	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\illustrations_retina.png	Fantom.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\images\s_download_pdf_18.svg	RdrServicesUpdater.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\scan-files\images\themeless\Playstore\zh-cn_get.svg	RdrServicesUpdater.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\sample-files\js\nls\ko-kr\ui-strings.js	RdrServicesUpdater.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\signatures\images\themes\dark\dd_arrow_small.png	RdrServicesUpdater.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\version.js	RdrServicesUpdater.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\README.html	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_anonymoususer_18.svg	Fantom.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\tr-tr\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\iw_get.svg	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\nb-no\ui-strings.js	Fantom.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\Locales\pt-BR.pak	Fantom.exe
File created	C:\Program Files\VideoLAN\VLC\locale\nb\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\sv-se\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ru-ru\ui-strings.js	Fantom.exe
File created	C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\it\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\tracked-send\js\plugins\tracked-send\js\home-view\selector.js	RdrServicesUpdater.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\my-files\js\nls\pl-pl\ui-strings.js	RdrServicesUpdater.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\VBA\VBA7.1\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\images\themes\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\de-de\ui-strings.js	Fantom.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\ta.pak	Fantom.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.scale-140.png	Fantom.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\tr-tr\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\ko-kr\ui-strings.js	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\uk-ua\ui-strings.js	Fantom.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\signatures\js\nls\it-it\ui-strings.js	RdrServicesUpdater.exe
File created	C:\Program Files\VideoLAN\VLC\locale\uz\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected]	Fantom.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Locale\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\da-dk\ui-strings.js	Fantom.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\eu-es\DECRYPT_YOUR_FILES.HTML	Fantom.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemResources\Windows.SystemToast.Calling\Images\DropAccept.scale-100.png	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_11.0.19041.3636_none_5015f9c6606d1e86\f\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_netbvbda.inf.resources_31bf3856ad364e35_10.0.19041.1_de-de_fb50c46dfc929ce7\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-pshed.resources_31bf3856ad364e35_10.0.19041.1_es-es_53a559564d099aac\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Diagnostics.TraceSource\v4.0_4.0.0.0__b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SystemApps\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe\23\VisualProfiler\images\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-coreos-16bit_31bf3856ad364e35_10.0.19041.1_none_76debc9c86c26bf9\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-d..rds-winrt.resources_31bf3856ad364e35_10.0.19041.1_en-us_4a178bf45474111d\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-m..wnlevelmanifests-ds_31bf3856ad364e35_10.0.19041.3636_none_0f5041ed1c02dd3b\WebEnroll-DL.man	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-xwizards_31bf3856ad364e35_10.0.19041.3636_none_ecbfa0f3f42c3c8c\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data.resources\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Net.Requests\v4.0_4.0.0.0__b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\PLA\Rules\es-ES\Rules.System.Finale.xml	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-browsersettingsync_31bf3856ad364e35_10.0.19041.746_none_0edb2895e7aac812\r\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-i..er-engine.resources_31bf3856ad364e35_10.0.19041.3636_nb-no_76862cf29bf0cf64\f\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-msmq-queuemanager-core_31bf3856ad364e35_10.0.19041.1_none_35a8f127fef72ba6\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\x86_netfx-installutil_exe_config_rtm_31bf3856ad364e35_10.0.19041.1_none_1eb075c59dfe2ac9\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-dataexchangehost_31bf3856ad364e35_10.0.19041.746_none_c77d8290c75caeee\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-ie-feedsbs.resources_31bf3856ad364e35_11.0.19041.1_uk-ua_5c65a60f1088ef69\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\x86_microsoft-windows-n..5linqcomp.resources_31bf3856ad364e35_10.0.19041.1_de-de_69175ae68d63e057\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Threading.Thread\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-defrag-core.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_cc90afe3d062b1e4\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-msvp9dec_31bf3856ad364e35_10.0.19041.3636_none_c56721c49e9a0b6d\r\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-l..r-library.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_a1028e78d2f0bcde\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-n..ofile-cim.resources_31bf3856ad364e35_10.0.19041.3636_en-us_73c8215ed72773f6\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\wow64_microsoft-onecore-t..ngservice.resources_31bf3856ad364e35_10.0.19041.1_de-de_f576f345cb6aeb03\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-mediaplayer-wmpdxm_31bf3856ad364e35_10.0.19041.1266_none_2352a132115da13b\r\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\assembly\GAC_MSIL\Microsoft.Transactions.Bridge.Resources\3.0.0.0_ja_b03f5f7f11d50a3a\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_Code\PasswordValueTextBox.cs	Fantom.exe
File created	C:\Windows\WinSxS\amd64_dual_mdmsuprv.inf_31bf3856ad364e35_10.0.19041.1_none_5cfb9be479f7d7e7\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-x..ectdialog.appxsetup_31bf3856ad364e35_10.0.19041.1023_none_fe2a3fc32038c1d1\r\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_windows-secwfpdriver_31bf3856ad364e35_10.0.19041.4355_none_7e309c51ea591908\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-directui.resources_31bf3856ad364e35_10.0.19041.1023_it-it_7a0398b99992ef50\r\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\x86_netfx4-cfx_core_sql_files_b03f5f7f11d50a3a_4.0.15805.0_none_817de63f27571bfb\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-profsvcext_31bf3856ad364e35_10.0.19041.4355_none_98e3d90829359c4f\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-shell-acccursors_31bf3856ad364e35_10.0.19041.1_none_9a6291031bb04388\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-storagemanagementwmi_31bf3856ad364e35_10.0.19041.4355_none_c5a6237affcbc276\f\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-s..ync-azure.resources_31bf3856ad364e35_10.0.19041.1_en-us_08fa09357767b0ee\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-setupapi_31bf3856ad364e35_10.0.19041.4355_none_b40423ccafd8d2e7\f\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_memory.inf.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_0d357dd96231b6fe\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-deltapackageexpander_31bf3856ad364e35_10.0.19041.4355_none_de98b5f8ea4211e2\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-f..uetype-malgungothic_31bf3856ad364e35_10.0.19041.1_none_bb40ebfb65874170\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-o..ctionflow.appxsetup_31bf3856ad364e35_10.0.19041.4239_none_4d26b3c7a984b775\f\AppxManifest.xml	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-securitycenter-broker_31bf3856ad364e35_10.0.19041.746_none_39390c1a5c4f13e2\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-sens-service.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_6db5c466b45bc552\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\WsatConfig\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-fileexplorer.appxmain_31bf3856ad364e35_10.0.19041.546_none_476476bb5c3a0bbc\SquareTile71x71.scale-200.png	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-qos-adm.resources_31bf3856ad364e35_10.0.19041.1_it-it_9d98397be5b65499\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\msil_microsoft.virtualiz..nt.common.resources_31bf3856ad364e35_10.0.19041.1_it-it_cef144df7f75ece2\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-ucrt_31bf3856ad364e35_10.0.19041.3636_none_2aad765d03351fb9\r\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\wow64_microsoft.packagema..t.archiverproviders_31bf3856ad364e35_10.0.19041.1_none_8a2b76cb0ccd4232\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl.resources\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\SystemApps\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe\23\dom\images\AddNewRuleIcon.png	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-b..nager-efi.resources_31bf3856ad364e35_10.0.19041.4522_ru-ru_3c9acffcef3ebfa7\f\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-m..owershell.resources_31bf3856ad364e35_10.0.19041.1_de-de_cd7903cbcd7d8cfb\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-s..ast-white.searchapp_31bf3856ad364e35_10.0.19041.3996_none_eda0904112bd0a9e\WeatherBadgeLogo.scale-100_contrast-white.png	Fantom.exe
File created	C:\Windows\WinSxS\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_10.0.19041.3636_uk-ua_a54bee22c0f53665\r\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-biometrics-adm_31bf3856ad364e35_10.0.19041.1_none_678e0d253e0377a3\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-m..oolsclient.appxmain_31bf3856ad364e35_10.0.19041.423_none_9de80b9d881a1ebd\console.html	Fantom.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-iis-adsicompatibility_31bf3856ad364e35_10.0.19041.3693_none_668db833cb0aff17\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_10.0.19041.1202_none_20ddd445a787b81f\f\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-windows-t..eprovider.resources_31bf3856ad364e35_10.0.19041.1_es-es_e488719c2d2f7026\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\wow64_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_10.0.19041.3636_none_8b117a1ddbfeee03\f\DECRYPT_YOUR_FILES.HTML	Fantom.exe
File created	C:\Windows\WinSxS\amd64_microsoft-onecore-l..languageoverlayutil_31bf3856ad364e35_10.0.19041.4355_none_3d08c135f18211e8\f\DECRYPT_YOUR_FILES.HTML	Fantom.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 12 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RdrServicesUpdater.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AcroRd32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RdrCEF.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RdrCEF.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RdrCEF.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	FileCoAuth.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Fantom.exe

Checks processor information in registry 2 TTPs 5 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	AcroRd32.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	AcroRd32.exe

Enumerates system info in registry 2 TTPs 2 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	msedge.exe

Modifies Internet Explorer settings 1 TTPs 27 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C6A861C-B233-4994-AFB1-C158EE4FC578}\AppName = "AcroRd32.exe"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B7278BD0-7970-47D6-8954-99B2343EED88}	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B7278BD0-7970-47D6-8954-99B2343EED88}\AppPath = "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B7278BD0-7970-47D6-8954-99B2343EED88}\Policy = "3"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy	MsiExec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B723F941-52A2-4392-B500-60F3889659B4}\Policy = "3"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B723F941-52A2-4392-B500-60F3889659B4}\AppPath = "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader"	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B723F941-52A2-4392-B500-60F3889659B4}\AppName = "AcroRd32.exe"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8E1F80F4-953F-41E7-8460-E64AE5BE4ED3}	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C6A861C-B233-4994-AFB1-C158EE4FC578}\AppPath = "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C6A861C-B233-4994-AFB1-C158EE4FC578}\Policy = "3"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{BD57A9B2-4E7D-4892-9107-9F4106472DA4}	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-21-1659235647-4126961737-859461056-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION	AcroRd32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{15B3FB63-66F4-4EFC-B717-BB283B85E79B}\AppName = "AcroBroker.exe"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{15B3FB63-66F4-4EFC-B717-BB283B85E79B}\AppPath = "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8E1F80F4-953F-41E7-8460-E64AE5BE4ED3}\Policy = "3"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8E1F80F4-953F-41E7-8460-E64AE5BE4ED3}\AppName = "AdobeCollabSync.exe"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B7278BD0-7970-47D6-8954-99B2343EED88}\AppName = "RdrCEF.exe"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{BD57A9B2-4E7D-4892-9107-9F4106472DA4}\Compatibility Flags = "1024"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8E1F80F4-953F-41E7-8460-E64AE5BE4ED3}\AppPath = "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{15B3FB63-66F4-4EFC-B717-BB283B85E79B}	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{15B3FB63-66F4-4EFC-B717-BB283B85E79B}\Policy = "3"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C6A861C-B233-4994-AFB1-C158EE4FC578}	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Low Rights	MsiExec.exe
Key created	\REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B723F941-52A2-4392-B500-60F3889659B4}	MsiExec.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27\52C64B7E	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27	msiexec.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AcroExch.acrobatsecuritysettings\BrowseInPlace = "1"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{7CD069A0-50AA-11D1-B8F0-00A0C9259304}\TypeLib	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F1E6C7A4-6B15-4C06-B1EF-88A4F2A886CB}\NumMethods\ = "4"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\TypeLib\{7CD06992-50AA-11D1-B8F0-00A0C9259304}\1.0\HELPDIR	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AcroExch.XFDFDoc\shell\Read\ = "Open with Adobe Acrobat Reader DC"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\WOW6432Node\CLSID\{B801CA65-A1FC-11D0-85AD-444553540000}\Printable	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{9B4CD3EA-4981-101B-9CA8-9240CE2738AE}\ProxyStubClsid32	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{9B4CD3EA-4981-101B-9CA8-9240CE2738AE}\TypeLib\Version = "1.1"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{9B4CD3EB-4981-101B-9CA8-9240CE2738AE}\TypeLib\Version = "1.1"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{41C5FFFE-36DD-415D-9ED0-2976A342A1C8}\1.0\ = "PDFShellServer 1.0 Type Library"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\TypeLib\{41738EEA-442F-477F-92CF-2889BD6CD7E7}\1.0	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{7CD069A0-50AA-11D1-B8F0-00A0C9259304}\ProxyStubClsid	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{9B4CD3EF-4981-101B-9CA8-9240CE2738AE}\ProxyStubClsid	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{12BA069D-0FC6-4577-97C6-5DF634CE6E84}\NumMethods	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Adobe.Reader.HTMLPreview.1\CurVer	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.pdfxml\Content Type = "application/vnd.adobe.pdfxml"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\WOW6432Node\CLSID\{DC6EFB56-9CFA-464D-8880-44885D7DC193}\InprocServer32	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\AFormAut.App.1\CLSID	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{0F6D3808-7974-4B1A-94C2-3200767EACE8}\1.0\0\win32\ = "\"C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroBroker.exe\""	MsiExec.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Applications\AcroRD32.exe	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/vnd.adobe.xfdf\Extension = ".xfdf"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{17F2E344-8227-4AA7-A25A-E89424566BBA}\ = "PSFactoryBuffer"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{9B4CD3EC-4981-101B-9CA8-9240CE2738AE}	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2DEA7885-1846-411F-A41E-017A8FD778FF}\ProxyStubClsid\ = "{00020424-0000-0000-C000-000000000046}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\acrobat\ = "URL:Acrobat Protocol"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{BDE0D630-7801-47cd-984E-1F0AFBC5ACBF}\DLLSurrogate	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\AcroExch.pdfxml\CLSID	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.xdp	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\AcroExch.Document.DC\shell	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B801CA65-A1FC-11D0-85AD-444553540000}\DataFormats\GetSet\7\ = "2, 1, 16, 1"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{17F2E344-8227-4AA7-A25A-E89424566BBA}\NumMethods\ = "3"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.acrobatsecuritysettings\OpenWithProgids	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\EnableFullPage	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\VersionIndependentProgID	MsiExec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\AcroExch.Document.DC\shell\Print\command	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\WOW6432Node\CLSID\{5AAABB05-F91B-4bce-AB18-D8319DEDABA8}\ProgID	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AcroExch.acrobatsecuritysettings.1\CLSID\ = "{B801CA65-A1FC-11D0-85AD-444553540000}"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\EnableFullPage\.pdf	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\PDXFileType\shell\Read	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BD57A9B2-4E7D-4892-9107-9F4106472DA4}\AppID = "{F2383816-917A-46CC-AD2A-5013BED3800F}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7CD069A0-50AA-11D1-B8F0-00A0C9259304}\ = "IAFormApp"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{8D46C1B6-BBAB-450D-A61F-4DDC898B21D4}\TypeLib\Version = "1.0"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\AcroExch.Document.DC\shell\Read	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AcroExch.Document.7\shell\ = "Read"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\.xdp\OpenWithProgids	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\PDFPrevHndlr.PDFPreviewHandler\CLSID	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\PDFPrevHndlr.PDFPreviewHandler	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{673E8452-7646-11D1-B90B-00A0C9259304}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AcroBroker.Broker\CurVer\ = "AcroBroker.Broker.1"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\acrobat\shell\open\command\ = "\"C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe\" / u \"%1\""	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\EnableFullPage\.xdp\	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\Implemented Categories\{59FB2056-D625-48D0-A944-1A85B5AB2640}\	MsiExec.exe
Key created	\REGISTRY\USER\S-1-5-21-1659235647-4126961737-859461056-1000_Classes\Local Settings	Fantom.exe
Key created	\REGISTRY\MACHINE\Software\Classes\AcroExch.Document.DC	msiexec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\AcroExch.acrobatsecuritysettings\EditFlags = 00000100	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{9B4CD3EA-4981-101B-9CA8-9240CE2738AE}\ProxyStubClsid\ = "{00020424-0000-0000-C000-000000000046}"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\TypeLib\{41738EEA-442F-477F-92CF-2889BD6CD7E7}\1.0\FLAGS	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\.pdfxml	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{673E8452-7646-11D1-B90B-00A0C9259304}\TypeLib\ = "{7CD06992-50AA-11D1-B8F0-00A0C9259304}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BD57A9B2-4E7D-4892-9107-9F4106472DA4}\VersionIndependentProgID\ = "AcroBroker.Broker"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.xdp\AcroExch.XDPDoc\ShellNew	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\WOW6432Node\CLSID\{DC6EFB56-9CFA-464D-8880-44885D7DC193}	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\AcroExch.pdfxml	msiexec.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
4688	vlc.exe

Suspicious behavior: EnumeratesProcesses 18 IoCs

pid	Process
4416	Fantom.exe
4416	Fantom.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
1740	MsiExec.exe
1740	MsiExec.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
1740	MsiExec.exe
1740	MsiExec.exe
1740	MsiExec.exe
1740	MsiExec.exe
1740	MsiExec.exe
1740	MsiExec.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4688	vlc.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	4416	Fantom.exe
Token: SeSecurityPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeDebugPrivilege	660	MsiExec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe
Token: SeTakeOwnershipPrivilege	592	msiexec.exe
Token: SeRestorePrivilege	592	msiexec.exe

Suspicious use of FindShellTrayWindow 4 IoCs

pid	Process
4688	vlc.exe
4688	vlc.exe
4688	vlc.exe
4688	vlc.exe

Suspicious use of SendNotifyMessage 3 IoCs

pid	Process
4688	vlc.exe
4688	vlc.exe
4688	vlc.exe

Suspicious use of SetWindowsHookEx 5 IoCs

pid	Process
4688	vlc.exe
1088	AcroRd32.exe
1088	AcroRd32.exe
1088	AcroRd32.exe
1088	AcroRd32.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4416 wrote to memory of 3416	4416	Fantom.exe	88
PID 4416 wrote to memory of 3416	4416	Fantom.exe	88
PID 4416 wrote to memory of 5596	4416	Fantom.exe	91
PID 4416 wrote to memory of 5596	4416	Fantom.exe	91
PID 4416 wrote to memory of 5596	4416	Fantom.exe	91
PID 4416 wrote to memory of 3520	4416	Fantom.exe	93
PID 4416 wrote to memory of 3520	4416	Fantom.exe	93
PID 4416 wrote to memory of 3520	4416	Fantom.exe	93
PID 4416 wrote to memory of 1948	4416	Fantom.exe	94
PID 4416 wrote to memory of 1948	4416	Fantom.exe	94
PID 4416 wrote to memory of 1948	4416	Fantom.exe	94
PID 5444 wrote to memory of 4036	5444	msedge.exe	106
PID 5444 wrote to memory of 4036	5444	msedge.exe	106
PID 4036 wrote to memory of 2492	4036	msedge.exe	107
PID 4036 wrote to memory of 2492	4036	msedge.exe	107
PID 592 wrote to memory of 660	592	msiexec.exe	112
PID 592 wrote to memory of 660	592	msiexec.exe	112
PID 592 wrote to memory of 660	592	msiexec.exe	112
PID 592 wrote to memory of 1740	592	msiexec.exe	113
PID 592 wrote to memory of 1740	592	msiexec.exe	113
PID 592 wrote to memory of 1740	592	msiexec.exe	113
PID 592 wrote to memory of 1688	592	msiexec.exe	114
PID 592 wrote to memory of 1688	592	msiexec.exe	114
PID 592 wrote to memory of 1688	592	msiexec.exe	114
PID 1088 wrote to memory of 4688	1088	AcroRd32.exe	117
PID 1088 wrote to memory of 4688	1088	AcroRd32.exe	117
PID 1088 wrote to memory of 4688	1088	AcroRd32.exe	117
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118
PID 4688 wrote to memory of 416	4688	RdrCEF.exe	118

C:\Users\Admin\AppData\Local\Temp\Fantom.exe
"C:\Users\Admin\AppData\Local\Temp\Fantom.exe"
1⤵
- Drops file in Drivers directory
- Checks computer location settings
- Drops startup file
- Drops file in System32 directory
- Sets desktop wallpaper using registry
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4416
- C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe
  "C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe"
  2⤵
  - Executes dropped EXE
  PID:3416
- C:\Windows\SysWOW64\cmd.exe
  "C:\Windows\System32\cmd.exe" /C "C:\Users\Admin\AppData\Roaming\delback.bat"
  2⤵
  - System Location Discovery: System Language Discovery
  PID:5596
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\Temp\update0.bat" "
  2⤵
  - System Location Discovery: System Language Discovery
  PID:3520
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\Temp\update.bat" "
  2⤵
  - System Location Discovery: System Language Discovery
  PID:1948

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /0
1⤵
PID:5304

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4036
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=133.0.6943.99 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=133.0.3065.69 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ffc9bbcf208,0x7ffc9bbcf214,0x7ffc9bbcf220
    3⤵
    - Checks processor information in registry
    - Enumerates system info in registry
    - Suspicious behavior: EnumeratesProcesses
    PID:2492

C:\Program Files\VideoLAN\VLC\vlc.exe
"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\TestOut.mpeg2"
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4688

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Event Triggered Execution: Image File Execution Options Injection
- Enumerates connected drives
- Drops file in Program Files directory
- Modifies Internet Explorer settings
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:592
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding FA9407D74CC9BC2351A071559600EF06
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious use of AdjustPrivilegeToken
  PID:660
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 6F566B33D4DC29049C01A40BA467FA63 E Global\MSI0000
  2⤵
  - Event Triggered Execution: Image File Execution Options Injection
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Modifies Internet Explorer settings
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  PID:1740
- C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrServicesUpdater.exe
  "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrServicesUpdater.exe" 19.010.20069 19.010.20069.0
  2⤵
  - Executes dropped EXE
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  PID:1688

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1088
- C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
  "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:4688
- - C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=5B5B45DA73CBC0FCE9C44D8B84FBA937 --mojo-platform-channel-handle=1748 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    PID:416
- - C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=7E7B0EE81A8961FB5F84DB6A051926A9 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=7E7B0EE81A8961FB5F84DB6A051926A9 --renderer-client-id=2 --mojo-platform-channel-handle=1756 --allow-no-sandbox-job /prefetch:1
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    PID:2880

C:\Windows\System32\oobe\UserOOBEBroker.exe
C:\Windows\System32\oobe\UserOOBEBroker.exe -Embedding
1⤵
PID:3404

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe
C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe -Embedding
1⤵
- System Location Discovery: System Language Discovery
PID:4140

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Defacement

T1491

Replay Monitor

Loading Replay Monitor...

Downloads

e5e269b.rbs

Path C:\Config.Msi\e5e269b.rbs
Size 690KB
SHA256 d0da26f92f3a9408b47f321d07df1a5d353859a196b96f8ccfd569365fa68575
MD5 7a59bb6b1d28e149988b5360a0104526
SHA1 deb276a910155aea9f0cb424ef1d42fe832ec298
SHA512 c6dbde8790d84d3ab3039d56d5e3ec05abedde2d8286db97524bc271170fa40f64c62012f6c10a5bb10f7ce03456aa9b36759706111c85917654b08c975b68cd
SSDEEP 6144:cP8N0LW3qa54J725UZnEuru4dtN5dHak+KNlA0ZBoWENFw2IzuJAgXrCUlZy1O9F:M8mLPa5S72qVRLHak58py0Y7G
MD5 SHA1 SHA512 SSDEEP

Submit Download

cef_200_percent.pak

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\cef_200_percent.pak
Size 16B
SHA256 319e82bce68a4fb9bb99cafd12c32b02585dc4b9f80b5d2d18f9a3491f1dd913
MD5 7e2e9430c011a075e92b544c648ead4e
SHA1 fca1bee3051015c6809191e8dfda030a74e742d5
SHA512 6ac726ebbb95bd9443e4a0b860030ca9661784bd480b44d944e7cf0d57a7cb1b9927b57c8ea0a96ba4d77824104c49f5dc0b91b3c3c7ec81f66c21321f439a75
MD5 SHA1 SHA512

Submit Download

aic_file_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png
Size 50KB
SHA256 a6cd1272bde9180248edee79abff42c048f6be3a8e35e66defe2b7ba46cc1f99
MD5 9550e8e13c185e964a9cf3e614b4857b
SHA1 38a69272b8b0f6bdfe660360b9f20e0a3dc09a7e
SHA512 c596bb30f9a00fd2430b6cde19de424aa482001fb48e508fce93cd8c22da5641ad82c48acadffa622824a89d9bb023b7afacf57de15f1b088fc4d9db7569d037
SSDEEP 768:fdSs80DzNU5guJrA2tecSJWt6MWxvtKXhvTkijPJyy3xu7ASnLLK8u14tSXaODT/:MY0Zhtec9tOUVTRJyy3s7nnRFSHDuB52
MD5 SHA1 SHA512 SSDEEP

Submit Download

selection-actions.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions.png
Size 1KB
SHA256 b0a7980433537561183815eb808ac7e8a857bdd5b940011491f5ac9193482e12
MD5 fea1f4dea6fd7ecf9baadc62eeee5e1f
SHA1 2f32794054cac19f0d2dcb5f4930a566602f6eed
SHA512 cca54ad98f7c09341693109337868e25320305b9a256ca22e934f61831269a1580acbe8524f29c9990abbfd114e9ad80a34a55424ef3e71020c2ef6a741db0cb
MD5 SHA1 SHA512

Submit Download

selection-actions2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions2x.png
Size 3KB
SHA256 f122e33e9b01b9781ba59ca7e8d01c5bc7e63f7e41e4d5a9817497d363ed428f
MD5 c2f89ae6147cb77c2dfc1a5806b9f054
SHA1 1dc24513d89b1fa7c16169d94b70edd9c392d09e
SHA512 1130caf317a4162b4043a6d31aeb2ec7e7a0a4563bf3c06191078f1ddffba29925ad1c21883f7244158e64b4e3cc7056595dcc45785abb72f6fa7449121298a3
MD5 SHA1 SHA512

Submit Download

s_remove_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_remove_18.svg
Size 720B
SHA256 45b9164ce619388b89e2c13d7db79cbddbcde764ab1fca12b7c32604a2f65813
MD5 2d2e9dafc4d72bc5183cff8fbf7b5c7c
SHA1 19f64e2362313bb4ad940ee2e4d51c523d6e2023
SHA512 f851b3473b77bdfab114d2598902cc67ff6e8cdde5936591aa70359240ccae85d125101a5eab49635f3ba0aa587f3f30cda2cbe5be4625aa0fbc6d351e2f88c2
MD5 SHA1 SHA512

Submit Download

duplicate.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\duplicate.svg
Size 1KB
SHA256 fd7c6fe5f7157ef171b914b52dc64e731937d417ccb16be41ea0026017a89e88
MD5 38822a2cc8d2c5f427dfaa74e89ff318
SHA1 15a8b4db51056e048f10a6d63ba09d721bad38e8
SHA512 8fa8bf51ddfccb0db58ca6ae12a2463a9751e3d319ea0e04ca33bc676ecf236ad9fa55524f1cd27f5cd250042a229fae0b28f3c5c3b00c4cde2769ae585de599
MD5 SHA1 SHA512

Submit Download

remove.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\remove.svg
Size 1KB
SHA256 186efaa31ef89553246974c61713bcd05334600fd237321d385510cb66ca0662
MD5 5e8e5d499d5d71ff1ea0049a67ab477e
SHA1 4be1673b62858219a676824a07f25b8938d26be9
SHA512 7378136dfef52bd2f184a9772a8937c63530dd5a27f7a130277b54c3fd82690c23f036682b2a7a2c8d30010f083f302d6d5716724c5178ba98db11227ce9c130
MD5 SHA1 SHA512

Submit Download

s_backarrow_default.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_backarrow_default.svg
Size 896B
SHA256 9b721f3e1929dcb6daa5ef6f22a07f9e65851dc11435253060b05b65a1e7e53c
MD5 94dc90b2e56486cbf7791682915dd447
SHA1 4d229659c064496f6cf5a934f19d09b94f2d1377
SHA512 db522b31642962e4622131dbaee1fc32637b5657e26d0094f2705be49b9dd4becc5d8b16b0ab160a82dddb0325926be4a0abdb85a5daccafa5397fffc444e8c0
MD5 SHA1 SHA512

Submit Download

s_comment_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_comment_18.svg
Size 1KB
SHA256 0311036c608c54164d5f20c28fd1379a78c64d631e696d2ca7b26c37231725f5
MD5 e064483430f5d5ef319293ccc8c4d70b
SHA1 4c678c2bbe3e2c72d0ce9362570ee92fd187c7dd
SHA512 9e3fdc81279d07029f804182d6b120b5cbe8cbd4924a4d7cefb26abcaf0a4199adbb6cac0585b4064aaf58335d616615f32430a89eb99da7971792acef8503f6
MD5 SHA1 SHA512

Submit Download

s_editpdf_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_editpdf_18.svg
Size 1KB
SHA256 a8747b0cd89b55e543193778a7c7c6800e2354c9599e102240d2eec021bf31cb
MD5 981f4b24fc49e5f410510b97ae55b612
SHA1 0fda8c570c9a446653eb6d2802ca77b75193fd8a
SHA512 d2ffdcfa0cf41ed6c405ce75d3298a82197ddb79147a0d86c278f21b129fd04ffe914d204d421f18a34916cd7e049b3604726f232ee48137f4e9a8f060bf6900
MD5 SHA1 SHA512

Submit Download

s_export_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_export_18.svg
Size 7KB
SHA256 c35ed50e693997f22c54c1aec8b30747c72187edd7dbc2b864fa79c21ddcaaa1
MD5 24e3b404213a9cc9272c2c68e01a0655
SHA1 4575f386719006a90f3c13379c88ca70f7377166
SHA512 0d5d8638ad943a2249aca04af079a183e282ebdc3c7ba091e8509245a2270a1490a6086465570b171d5c02a2424b233fbdc6d88cb024f25f79d230d2702713f8
SSDEEP 192:umFdFpTPyQTiP3EOZM/Q1IZ6t7PjU9eOomhmtOtsJunDK:f1P3OPqQ1+oDjPOomZsonDK
MD5 SHA1 SHA512 SSDEEP

Submit Download

s_fillandsign_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_fillandsign_18.svg
Size 2KB
SHA256 c3023e454ce7bf50aec32ec1fbbeeda07c9a4e345b43ca28a01f1ec777b8d8df
MD5 d6ef3b7f5aca88455c350d05daea985c
SHA1 6190d695d2ad7b27fee5682e73e7e5379518cd7d
SHA512 0b40c5979504b4c4556df7913ce298827fe165702cdd9207a0094bb48465e6f5454dee444c3e5404f74118f5f1bd528ef7543acf2e0af586a218f558f75fcc40
MD5 SHA1 SHA512

Submit Download

s_folder-default_32.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_folder-default_32.svg
Size 560B
SHA256 9eb70d5b0b513bad63d624f95f26e82a285bd27c27d7039cfd028e573c27fef9
MD5 e1e28a89bdad44dd3cbd005ef487d88e
SHA1 5b5a34f810432950179556409b043c18f1f10a31
SHA512 11c2d95280f909150ab430d43d54320859bcdf8c8bc286c7297ec274ba4e42c1c3066e1b7999d1874b464562279c91ae5d474bbdc49071a2e628f76b8a066899
MD5 SHA1 SHA512

Submit Download

s_move_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_move_18.svg
Size 1KB
SHA256 3e371cf85db2a47e895c36977d89c27d76619810598306727f3497c736965d66
MD5 06bda7ecd6f8a098bc20e84b5f67cfca
SHA1 593c4f65e9170f03301df50da76b56658ea32eee
SHA512 45b5b785476e2bf34ba60ff6f7172107166617d397ef10029a7e0abff614a1749627ad69631ca96667142c9bdc8a1e58f834ea41b536d0ec8431eb9303c97028
MD5 SHA1 SHA512

Submit Download

s_nextarrow_default.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_nextarrow_default.svg
Size 880B
SHA256 57badd5e90b0e7ec3f911ea84434ce16f650a28c1516b7a51a5c01caeb746810
MD5 5e962770fb45f1d3aa39be784f873df1
SHA1 12f0956867e551d173edcfc9fcc98cb29682bb84
SHA512 23ddbd3501d8d8a973ef67e83c6ac37452afc543ddb4916c70b86dd7bb676446d1438c767db6424cdefafd2aa6a5543a3b4b278c9248e1626ee0f413869719d4
MD5 SHA1 SHA512

Submit Download

s_organize_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_organize_18.svg
Size 1KB
SHA256 c6f856b0280a9418a3d7330cbc30014969b9f95f954f89e8eab80b5e82f90660
MD5 97fb2859cdf2f10959a768cdd030364a
SHA1 a084899236f149607a693d4d300de25b90876ee6
SHA512 40501d29cc2684178ec7a7fba178e2d84ac7d8ec0727baf9fdd2e9131bad44bb246cc79aff99c8159668f227514b5915e47520210ae0e4f3491c9814f388ef5a
MD5 SHA1 SHA512

Submit Download

s_rename_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_rename_18.svg
Size 1KB
SHA256 642d4334289bc6f292d0c7bc0ac8ec07436f9f73ce81b40ce7063a8fd077ee61
MD5 62c53b9dbe58d4ea9355e00d1d1471a2
SHA1 c413850f7a45d75dbba7851bc3ff792491e6b86c
SHA512 75e1ea284b4d306d965ee7a7f5e7a7834eca0b5613eaf8af3602bb8d09181172ba0d8a64557bb7843fecad476210d7b318d9764ac44b113d0068b3667ff5b339
MD5 SHA1 SHA512

Submit Download

s_sendforsignature_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_sendforsignature_18.svg
Size 2KB
SHA256 9b5361b9010bd4fb981f8177f3922f1f3898aa3551a353c261fdc3bb603faace
MD5 f219fedeb5e482f9d86c918411d25d4d
SHA1 f1b2796e2c573a4984075742f1ca212774083989
SHA512 77777275e4f2c8cb407d0d5e003bdaa0aaf90e627f0630812064ea38e4b55ce21a41749d156958f67ba46f0b82228e5a49632082480d6e691598cc87bf2f2793
MD5 SHA1 SHA512

Submit Download

s_share_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_share_18.svg
Size 1KB
SHA256 29f84653d706321cf2d71a77635b4fe68f422592479ef2fdf6c0351fe8673f88
MD5 4a0a29756cb61d9c3a062d9df24e26e7
SHA1 66ec4c1c25c4bf5fc6cbb1fa1c90682a839355eb
SHA512 5660b7a571dba0f7cb0028a6d96a003141bad6566b0a5e4aec53f81504ca8ce8f8ef5129fa8cfa17ffe208bf79b6541414655d089bf24b55ea5b5181125b4bea
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\root\ui-strings.js
Size 3KB
SHA256 f6f52bf31f6c0100dd3a4224e376208a745d369f438f321be31e57beaec0e98c
MD5 b26b01818aef5ba90885be6665f27fc4
SHA1 e52bb83f00e5b88299e9e4e0334c95bb1bad6d09
SHA512 8b882818c6e9cfd104ee36eddbc3328573a45a2a84ba195420aa1a31f35d848a3eaf71832366a45bb9fd10ba633e6a8099f5c17f638a077a405410477d9d4d96
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\root\ui-strings.js
Size 28KB
SHA256 152d5c4f98ead0f952eb37a3dbbf0cfaf6d6f1af98bf0b33147a009efe1fc686
MD5 5dcfd87d6484af30abcf990f535eca00
SHA1 723fa003b408fd4ec3c434ab07b56b8bdd503b24
SHA512 99c181940026e8dd79b0fa48c6d259149421b3635d04c4eb955981eb13f05a303e7a3e59d103aeef03c037d15b82e07a71dc5a4a8e07dbe8dfed7599947394c5
SSDEEP 768:KNz7s9w+HhNMMSvf+kTOVgO7UHlogK0Kk:0z+w+vMMSPOV77uK0Kk
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\root\ui-strings.js
Size 7KB
SHA256 45a7a7ad1a2575ab7070b7b711a1af7780955f23e959e7b3b697cc2e9e0ef8fa
MD5 b0796180c520d392c603004e5e207e9a
SHA1 ee8e3bb424bcf5e37b8b15d78a20be38b2729a0b
SHA512 1dd385d2c13721bce780e46239c7b57a0db142a64cae3d8e809f8541b964da3a81878e5d8a7ba21f9f0332f3e42d94b35a6894cbdd81bbcd33f27030bf143974
SSDEEP 192:N4Ia2CNu6HIAj6g/2fGmR5STxbCa7dQV8RVYbVlQrv:qIMHtJmR5eCy+8RVYbVGv
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\he-il\ui-strings.js
Size 896B
SHA256 7be3f860e3a534705017c77ac291e27a2d1648f80cdeac6582751e01cd41db15
MD5 640d88f6d9c4812fc040dfc5a26e3fbf
SHA1 c89a575a364ec611ba70cd54c0c0b62e4d1687cc
SHA512 02091a4dc876e8c5737e3b5c1b85c9b2c65d7b399a8469fc2a43b7f4633bba68746da5e79d034878ff3a6f8180e18ab0866a8070c631011db85dfff31a647c2d
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\root\ui-strings.js
Size 4KB
SHA256 69bbcecf89a92b931e28c237cd4aaa07d8b55fbb11b70fa90575b29f4eec3d0f
MD5 8a0f151fb9c7922f99f95fea54d4de30
SHA1 bdbce55560b70f0e00abd229e125a16783a5bde0
SHA512 bf8ff9ebc41d6ce5c233870e11142dfafc1bd0b9fac7f05545001b578896e72525e6feffbf2b5353396bc54a48694849eba689c1992e14d7ec1f4fb25dda09a0
SSDEEP 96:Nmo1LGUy2Ra4/5oLkOuiFySn5NuHFmbp+/l0CkjRMdhvck0:NmcLGUyGa4GLVqobAOjRMLi
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\root\ui-strings.js
Size 1KB
SHA256 56551bdd12595216f008a25a6fde5e35db7b1444ed3a4a375e8bd44cadbf237d
MD5 e7e9b7dea673358ba6555f435ac3616a
SHA1 75261c02571ffb0c6504435758c69bc69e7d8b45
SHA512 785cab2197fd6d67516247cbfd4416d6e9a5debba4ec2998fe8bbcfeffbd791d6591add24664ba721a8219f220e7a2132a94a549db93bef0e0b975e1e9291e16
MD5 SHA1 SHA512

Submit Download

convertpdf-rna-selector.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\rhp\convertpdf-rna-selector.js
Size 175KB
SHA256 1e4b7c7135b833829d7132b2817a9724a29fb8071155283253924efc2df3c9ff
MD5 024d7e598aaef488a7189d47cc62bd6a
SHA1 684e22d3e257ba48f50919d771fbc1425c8db1bf
SHA512 b729e19d88689a24902ffbf9a82fdc21ac45bb8aceadea358befb307ee9da1a9936689b42c111d86a643c839dc2391bed47d34b63acb5eb3b87d209870a95427
SSDEEP 3072:WgiuWVHtC1ytTtByQhLkCT5OoZ4wtNerfh7AkfXP/AmhGCLvGg:WgcuALcckE0oHtyh7ASf/fvN
MD5 SHA1 SHA512 SSDEEP

Submit Download

convertpdf-rna-tool-view.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\rhp\convertpdf-rna-tool-view.js
Size 376KB
SHA256 9fcf686bdbd3cf70cdcaa017f03d7c0e3cb1cf467945c4edcc100c7b9aebe117
MD5 e9c682d041b3c4f7f5f11aba4f2d9e31
SHA1 9e46e385eee9648a05f61b5abbfd3f9a367e66d8
SHA512 bdf25412f9fa174786a8573ef887c57fe54a30124dcbc8753b020f86393b8e589e6e2b89c485224e3ad4f94e7876458bdf7c3f815683d3cee83b1dd0207472cd
SSDEEP 6144:HVbh+RSjz2xDJN5uQSaPaYFARdrxVFU91bjXCQTmTtv27o+02PHC3Upm4rrswow:1MUzcv5uQpwdr7FOVDCW6N+5HC3AmOIA
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\root\ui-strings.js
Size 2KB
SHA256 a6d515a670c85ac8f5203e532b0dedb5bfacd44a8423aa246cd15d5c8f88fefd
MD5 efe2681cca824266ece37c96940d3534
SHA1 bdda96d2dc75e8c869e7edef18d2d3307649032f
SHA512 0bfcbd7bcee8d7c92ff9a4692b558656d4a284853b16e861119314fefb545ce1beea5fbf42895dd20f50df7af762d76167fd067aaa91cf92fc265c6e0293dfe8
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\root\ui-strings.js
Size 1KB
SHA256 00ddcdf848bfdc5b9840ab51e862ce18cc7f7bb0f4446056ebbddeb1075badd4
MD5 271e711bf78e06bdaf4b7d3e424abacb
SHA1 8797d69b7535ab1ecd34fd8842039898a2ef1312
SHA512 77edd5043b166c09c5828162ff2e6503e0e3fc1865922abcd334f6deeb491342fc12118294350ed839d54a9dfffb7e04636f86ca4682cc52b9ec9944c62296ba
MD5 SHA1 SHA512

Submit Download

example_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png
Size 688B
SHA256 ed8a0267482d01931bc2e2c77891afea539d804e5554ba1a1739f675d7d1080d
MD5 0b545bd0ac23d41981e81b9d2f303987
SHA1 dd0917777c0d0cafc15348c8950a5af6baacea71
SHA512 4bdd84c37dfe1ed9e715019955915190c2e3104866c6ea1b57e609c8c607cf74fb417e7b779c768298e5d6b96feaa32056d50eb8a039510307fda8e5068636ad
MD5 SHA1 SHA512

Submit Download

example_icons2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png
Size 1KB
SHA256 41fb2f421d899bebf426189bff324805afc28080f3658eeedfd145b96cc57d11
MD5 c13f53399a5ce55fdb16369ef4ab636e
SHA1 c0f24d1d79db64eb516cd53d799370958cdc150c
SHA512 0cccf1b2c6b16da4e8564033029ea7c4908af10d0c84e853b5e1787cbe7146195c17b26a10c95d06f4375669d58972ca528d476a768f3b92f3a704b6e5b0a882
MD5 SHA1 SHA512

Submit Download

rhp_world_icon.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png
Size 448B
SHA256 1368300cac4283ae1a40ea8282c0439c924d98d323381dddc02025b68d5a6a99
MD5 31876f8727315b63d9fa8d2f60d9456c
SHA1 3a4c2c408b4735db7bfbd9a52e807d4a938d01ff
SHA512 40b7e5309c41c06f6acd38b2028d93524860daf385d305163e47ea0d8ec608bd8d45f66508d75f6ce5b628cb0bf91c0cfeef08673f1cb66a0e7f74356c7e7c00
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png
Size 624B
SHA256 1580b9108104907e7a58ffa17ca12e0b7ae8b72805f5ba25a7a75efa482907e1
MD5 daa723d6564ff7b70ac4286c9f76b221
SHA1 ffedc6be54b6c193da39cfe18b4c60375e2d2903
SHA512 7bc19f1d103e07b674e69fbded0ca2576c78c401a3c46bd9d2842764edcec3e77c0ad47067e48d8aa6b4a76647acf0d0a87a524554c8f43f194730ca345ca26d
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_hover.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png
Size 400B
SHA256 a4013ed083657f108a324be6b53f40ca7cbfe5a5ec0d1cf7b7c6b4c7219d0751
MD5 fd9d8c4974aaa60b104a7b2be4fb8a50
SHA1 5484ace6b7e1781f2a913ebd437d52eb4d28a6a5
SHA512 fb515ab0254b08081fcc54f509015085e5ebcda3cb9076922ca863c47ca2648905ed6a5d555885aa626e44f99810e8f9c28ae051708a139010a57afc4497d2e6
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_hover_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png
Size 560B
SHA256 4d55def27638c43d8a610ed4312f0d19714487bc41236b88629c6f64a8d09879
MD5 520fe405abee982808eebf7f282b1b06
SHA1 06d526839b3c127e39106bd7e59ce6ab5e0eeb89
SHA512 37fb582b4c137f2a75b0da951ff6106ec394f02c21ee107510a1ba6d42bbeca811a4bbab46288c1049ae63e4ab6b5bfc210e153712e2f306535825df625321c9
MD5 SHA1 SHA512

Submit Download

rhp_world_icon.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png
Size 400B
SHA256 d827ea3a76f3353bed4939e809dc73c3a9df44a6389584cc1934e2883c46b382
MD5 4b0e2031dcae73f19c9fbec97549edf5
SHA1 ef62d3f3ef7e59fa1f051700f3493af222f55f87
SHA512 1f1e287ec2e0eb81492f17126d123013e763593e465f19c235a04ecb57dd2a038f7c6b01fab80c42a71e33408658c759d9870e598a5e46223d9bb91e60f62f12
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png
Size 560B
SHA256 6a4eda0961b6ff2a32dee3c25911ff199a490d94602b4f4eb115b250c1c64574
MD5 f3a96a129c075706511d9ab360be930a
SHA1 0ddc7b12fbc50b570fbffdc1974ed806c16f2084
SHA512 10456fb1ca7fe6ae2d9eb7e9c474a5b313833f76f260404986177db75fb4927b8e0894717fcc862d15ed30f15fe2ee0a33a72f146c3da8a17e1e0fb81f6a1d05
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_hover.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png
Size 400B
SHA256 495c900e8b28d3eb6d130a490dc0f4556d3e052387d5fde65ebb906596f6fd66
MD5 498d85be30baa30792661a8e4579762b
SHA1 471e6208c896dda2f1824ca21f5470a771863761
SHA512 14a6d1988617f4cb9f5133a882ca24d080d6753c0618a70086447e0d0a901810694a775dca75b0b5fc487e734272afbc1480f56ff04b6ba77f1f17a52f3f2cb7
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_hover_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png
Size 560B
SHA256 9eccafdcd0d4cb17f04bd09354700b09fa0dd2599b6ac13019510c8eef2159b3
MD5 553e5ae52b6e01425845e8845dafb924
SHA1 e6e97a06a673ebd25836c1158e9281f54634b33d
SHA512 bfde17ce1e852e09fabc1f58b6f9246427e8578f45520662bc2eb73f72b78c08696d9f28539afaeda28bae4f2cb56026a10af0224e28c35818029e99c6e91ab1
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\fr-ma\ui-strings.js
Size 1KB
SHA256 eb2a7395600c6b26705f7a73f825111f31ae8283608425a57d05ed0925c1feb4
MD5 72c3e62f968560b15aba8189620bd613
SHA1 8d98e95d974c808f1f93792a63d8f0a9ba3effa9
SHA512 62a83af00a6a30be1b05e615c0f5434042091f3a8a351a1e723a4bef5a48177565e63505006f102e3e881b09ebb0ca3eed0467f39b91b5e55a8bfa7ffb1b5c4b
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\root\ui-strings.js
Size 1KB
SHA256 13aa07bf853b820376acaeea68cf93a1f6efedf195c049d380e68f432842fa3f
MD5 e11504b4c640670066d16064f1397cd8
SHA1 505f2c8653e442ab8e452eb5b23a912e878e6c1a
SHA512 e2b4efcdc3c77347e2ddd2a7786e8b331bd991112d287cbd6e8aa54cd6981346e657c2cb01c955a899ae0fa17c6d8a37ec49448ff3549ee27dcceb9101298f97
MD5 SHA1 SHA512

Submit Download

s_checkbox_unselected_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\s_checkbox_unselected_18.svg
Size 912B
SHA256 bed820db5c214df4362aaca788bd9169ef5d5d36484c1e8f41371261c8fd750d
MD5 add0d7e4686efc0b38aac249aaea9e3b
SHA1 66701f8516ad091ed400418c142638940d325db4
SHA512 2236544670bd2dc92b7fe0a4f1257e097a5904469b18f17082c6c69ade33961845dbf8d3be758c0ca1a8ccc8fde8d55d3fe958b5d19fd1315a719681aad179de
MD5 SHA1 SHA512

Submit Download

s_checkbox_selected_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\themes\dark\s_checkbox_selected_18.svg
Size 1KB
SHA256 5d4d75ba701edfa30ee3477cd2c87697c2262524914653759759fcb3c3a19f29
MD5 17aca3a5c2a5f2f16653048555b713f0
SHA1 8f14079d623e8ae68b80560e94b66bc730b6dd2f
SHA512 200d3d016f597b4aad1392f0e8da8f9192f446b29fdef0bbafb146a1eb064fa53cd6d2b0f571497777056a12131f356cce399c55a05c74c602d1735abefdf6f0
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\root\ui-strings.js
Size 8KB
SHA256 99bd4f0ddd44fe8262cef659ef4d4198723e9a7926001f8c669ae24140b5c778
MD5 8629e5ed73a636b31abc12280b9dbe38
SHA1 63c79282fdec8a0f0bf7e16a737cf097c4251bd8
SHA512 402c7ce0072154457711f5daba03ca78cb9fb42b51e5fea927d658461d6bed6fd74b8c7d393c3dd60ede82edaa22c466e7201759914cddb8f34db6bb215faa7f
SSDEEP 192:NmG+JM2oNoKDcA26dFz0G/YJ6GX2nr8qEoWkPAFgYmM9UVftVG2:cG+Ot7wJ6dH/YJdEELk9PMG
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\fr-ma\ui-strings.js
Size 1KB
SHA256 ca38d4f85df877ffa226456b000d1c3d0f506bdefef3fd00204a1fc5254ce9d3
MD5 31a764b99ff9a268afb65f70aec0cd0c
SHA1 2fd7cc92523d67cb7254267b9dd1024640ee219b
SHA512 d6bf166c75d588d416b2e9a2a81e11f2135ffde3d28f1da6b00a2b1ae588b3dc9d326470161b9a795f76e4723c299ddf83267401921372a1214c04e27c1e47b5
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\fr-ma\ui-strings.js
Size 1KB
SHA256 53b1a78f03212cb0db2e135a108dfb8a5a393de2f8c4ad170659209b41e22c18
MD5 896563d253414c26c814dfc17acfd44c
SHA1 dc66d4b968d0131fd64d8dd93fc84b5f962c2faf
SHA512 18787faac811f9b42d3eea4feb94f56c82e4eebd053021a103ea72a5afca5533e022e45aa46a16c8802cd1b942e0f8ca117dda8ae07e5510a260ec37b5bbc496
MD5 SHA1 SHA512

Submit Download

icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png
Size 7KB
SHA256 c8a875942d52d607de7b84f5619d9093dd5b72288b6ee443f81aa4c8799230bc
MD5 349eb08d15dfec9bcfa0a59c0f71df11
SHA1 5f89dc62c8a5ac54abfe7f2790ac996ba899ad14
SHA512 b20c517ce734809433deb10684854731b8e03db936910d7e8a1e6d6d64c6931eba0b0cae9f133cb154753f2ce64ac719fc490d6c0987ce651ba798020ab0e85e
SSDEEP 192:Yvau4Qb9eUDVg0cH+nX93EdmbeL93z68/lA95lo9Gg:CaS9DBceX938I0I8/lA1Pg
MD5 SHA1 SHA512 SSDEEP

Submit Download

icons_ie8.gif

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif
Size 7KB
SHA256 5bded18247fa26078fc72fe1febfe64070da35797efb8a184789ab32d6e5a518
MD5 c7647244c5b0f9388197e33cb32992c8
SHA1 54cda0ffbc9d3626a3bcc82aa6056487f4626671
SHA512 4af434d75dafa4dfb6a2302e77cc59bb3b9bb5b41272739df068a653b1a7322f3ad18d0c267b40257d103d2f9409476b9011d2518708221d01f91e184627069e
SSDEEP 192:lyNVZjfHFDKfSkA+u7Y490tgwJynNOZ8YvEUD+M6JO4W/tEip:lmVZjfHFu3uh9kyNI8Y6M6JCCip
MD5 SHA1 SHA512 SSDEEP

Submit Download

icons_retina.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png
Size 15KB
SHA256 239f6b8b0805159467fd572d73d9a395e1e56cd9be9db2e6027162bc2421a948
MD5 bef9c165cfbac3d83f874e2348dbbffe
SHA1 ea0e33103d1c49eb83bc3f835392e51d1c0d6c24
SHA512 4fcab928c8111e47e73106a89460e9b43a7f280d594114827412240805ef5e28a0b4b35a3cd10238509f8b5961eb2505d1cda5d5cc85b3eb4963d1ddd54b3c87
SSDEEP 384:T2aItmJco2+OVij83xDFsE7fYliySNO4bUvjfQZAT0:pJAVij83lj7fY9Qbmj4+0
MD5 SHA1 SHA512 SSDEEP

Submit Download

new_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png
Size 8KB
SHA256 af6452256040059d3bb90f96ded70e1c74da621edd87978794be61e430874103
MD5 25e068cff527ac419736e4a5576bc98c
SHA1 c28391d667fac750a44369c2294b1fbcc810d0d9
SHA512 75a85d68f73dd1cb78865c36918284253ce9f825fb60c055b6e23190d83b0618d066ae7383a2212d396e75aacb105a9c9898e568aaaedb28453b1b52b284fe5c
SSDEEP 192:q+47vyBwHHfb2RZS8R3SWIkxHj6Huq9+eel2NKReqvb5IX:qX2BwH/63SgMAuHyeeMNKRRc
MD5 SHA1 SHA512 SSDEEP

Submit Download

new_icons_retina.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png
Size 17KB
SHA256 de8ea7af1e5d949be97a096fa0f74035c3cff397ffbd3235778b806f04579c60
MD5 604401236890542aff238c6796442a10
SHA1 ddb85b8057133e78e8f321877bbd699e0b01564f
SHA512 55cd0162e11dd3725205f20c8458d37387d7e7903bcb1c97af08841d0a924062562935c59bf6ef12dc35083687e0cce8d735b1a6287eecb6a1b1b47b087fc2d0
SSDEEP 384:vvoQYyf7OF30xBdA78XHTsMLbn7ugsdCd65Ymlepgu/bOgwAA5HsRfZTC:noQYyCledA439/sdCdNml5uIv5oC
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\en-gb\ui-strings.js
Size 832B
SHA256 bc384771f381704725c138987b6ae8cd1f6bee712e7ddd19f9efcc23078a6498
MD5 850dc831e132a00ae4bbe7329541421f
SHA1 73c45bfeae792d9451a79d92898118552c25e104
SHA512 b636603bb931fdbf58641becc8f8c60aaa66ec875938a877db86e583b543d0b72ff9c661590d9ec524fad66331abeb43a66ea345b7ae271ee51ac84d88eb538a
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\root\ui-strings.js
Size 864B
SHA256 5874a3583dd367add0a502f3ac50a669cd0585c1295f1192c3bc7987141217b1
MD5 6812e9a588bef92abef5b733cb1e1831
SHA1 e1323d08d8b56e2d9231be5e75b75d6d9def6b4c
SHA512 5f3d4a8391099aef9b000c9af1fc20fbbb9edaeba6ab585cc7152973fca1acbe10d2c05f46f3e662713d9d6770510956ba9bfd619a105921f79409ffac1b38bc
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\ui-strings.js
Size 1KB
SHA256 1b75fd4b9d0b93cd6b7821c983875aa08a3daae929642ec002a998f259490b30
MD5 e3637d89285504d480d39d5b143d3d7e
SHA1 4926a116a53610cd314441d3b2197d685428560e
SHA512 673997bcb7e3a64c0de3b7096dd23b21598d4f551fed8d2062dd9b8142948ac72d29eef4715a6a2381d6c3439eca38dc8f825b98b2e1f05d2f4738ae1ed78ea2
MD5 SHA1 SHA512

Submit Download

bg_pattern_RHP.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png
Size 192B
SHA256 34df0857f80e8bcdb29b2cdeb1db65a4fb4ea8c437b93d6518e336380ca008cf
MD5 56333bdbcff50849daf1b230815bfd32
SHA1 6c1bf2f92c696fdf7223f6d9c4c5dcef41abafd1
SHA512 bd4c9fc621ddd440641effdafb50c353369a38a5ff151557185c6804a15a29d375c5f27a7ad5400b5cbfcfa1901dd3c0175f7e56f9e8585482f354f9adacb3ff
MD5 SHA1 SHA512

Submit Download

bg_patterns_header.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png
Size 704B
SHA256 cf8c373d44580e1bd0d4dc9d1b098528f465e15a101dae4309217501f40ef61d
MD5 7c54215a8f25ae7007e98767b4dea4f3
SHA1 275ff9dd0293fcddc038c682ef3fc47b3a058e2d
SHA512 0853442d9d276db36c7b63ae201c675cf169f0db6cc52611b33279770d7a8382e2eb338348c42047d2c961fd1dad6a6934e35f0d7d21d4e8746cbc099f97ff77
MD5 SHA1 SHA512

Submit Download

illustrations.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png
Size 8KB
SHA256 029e0c3579da1bf1bce1549b6acfbce7e0f6ba2bbb635eb548a846920bc31bc6
MD5 ee4f695ea9fcaa7316967c1b3f702b09
SHA1 fbaf03a5c99b2220f9b9e2e96328bb44806eccb5
SHA512 a221b3f0d1e497a4d065dc0b6f88cee7d844bf1a683b227051476589e1fc8fa574a7bb13d55f7a6b9e0b3f77c4698de7d230ecd77e7adf04c5e4d516a8d26563
SSDEEP 192:ed1RTl95dHw0C/G3kQkpLRCMFKpKmeeG/EFjKV7c8oGTzoAkxLgnUCbm:81RTfHbvDiFCMFKp6kjZ1mkVxWbm
MD5 SHA1 SHA512 SSDEEP

Submit Download

illustrations_retina.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png
Size 19KB
SHA256 d74d0f5d808540a96d88641944f16addc786e83abb491409b3fca3a265cf2d7c
MD5 0499c9bfb7207ee9fe0a8c95441e210b
SHA1 c78620b03ce3b6d222291b81605bf007ab30e5a7
SHA512 2a13f8807bf04d48a85dc8797425f4134bec460a521f88e5a1ded3761243eaa8997e8cc905557d732d3e390463bb9253acf3bd738b7c87bf48026991b53a836b
SSDEEP 384:LoJ7ymvIwYwrHKh35HOPr2QV5qABrqdI7Yd/zA3dynNSb+aihS:kJumvIwYwkuDx5qA9q24rA34ioS
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\root\ui-strings.js
Size 1KB
SHA256 dc25d48dc7dea4065e70bf6ee7f60c0cd5c0eefc4f73731b15f4080c8fe0caed
MD5 8ee3fbb057097bcbd9f16d4e11e645db
SHA1 36db45a52edcf2e48ddcbf26d294a4e2b9df3350
SHA512 3219a89ffc7498463fa773a3b099c0c95e7458d2dc875d9dd441d8fc3730052c0c96431bf01417e2770519920a55c46c2e93e7f6443362f638769eebedefc36c
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\sl-sl\ui-strings.js
Size 1KB
SHA256 73dba51529633d467276e00b28a6e02fc008f3da96f58dfa7c4fe5e4440e84be
MD5 be29033937336be4c22a4587c0c2d99a
SHA1 da8a610557774840bca42a43aba307514c35828d
SHA512 797ffb2f708ddafb08771fd8f06b2929839eea0159f12b77b8f73e43f320224eb0be637a6647b815efbf06918285e74952e14b1bc533375478fb77d7eaeeeee7
MD5 SHA1 SHA512

Submit Download

main-selector.css

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\css\main-selector.css
Size 816B
SHA256 e5186251b61416c9feaf8acda25989a28cb99f7e06b68376c32955d79292ce89
MD5 23b9eb061ee6e5d83f76c7ce87153286
SHA1 84832cc87faf04dbfe400a2132069e2360a062d2
SHA512 a76634ae606b61ff2cd8c958b7cd7e8536584694f6769cd66dea9013193404e537566a0704881835f1c057a75375b8e4b7afd7e1b472a6e0c5a1cca45933b700
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\root\ui-strings.js
Size 1KB
SHA256 3258e2e7cd85f54e484b2ede89f49e0587f2035b63c5e2b87606c2b96e680e28
MD5 8125c9d4eefd09a94c5192a32129b389
SHA1 09e127c2d2339badc5075a8d5586eabfbf1cd567
SHA512 b8b4b5cd4ab1c7d1f92d26e6e6efbec44a385bd1aaad9baeddcd9935b1602c7d0cefb589258aecdb3a6c38b8cb10a584ac487a549a8dc5352936dcbe2d76a482
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\ui-strings.js
Size 1KB
SHA256 26308c634e31e38d3e67acc71827a8864487716039af9b07efb9d5a1b9164e0d
MD5 0fa8c92257b28e2e9adeee4f56e88734
SHA1 cb4d34c72809b50e814fba32465ee8a776560cc4
SHA512 bcb931c2790e5364306f38a8bcbd814237953395633018181679c898fb5165373c30eb0bd42773dadff5ffbb5ee53d40ffa5b24eeecc7a14a54f5a27bb1ec376
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\root\ui-strings.js
Size 1008B
SHA256 8fcfabb07305fa9da15c3702a108a6f337842a9c1e2c726b8270c758c1c45a80
MD5 fcbc2f7aca82d81cdfd2af0fdbcc0869
SHA1 1b6f68bf0993e63022e5a5db9ae5ca7081716953
SHA512 827fdcd48dfb5afb8bf060bb7f0c7be3ae1549471b785ab8ac93baf1f01a0c3f40c76ec86e9ccbb5a98f15ceee8fe52e427a1ba2d08aec0299394fea2fa74b1f
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\root\ui-strings.js
Size 4KB
SHA256 b901ec41fba6abb08b27d9a4d1c0a02cb17d5f9e75c36514bd0642c048e352f6
MD5 8466b4352b7421a2beb7b2a0ec24ee71
SHA1 8efb96a9be383d6fd97c861168e1463999bb2633
SHA512 ec3a20d3e10736843b4a4d8bdc142a4cf5a9d15ca477e1b497f26cc4f4781bfd1bb33df39e25ce92804792aa11b3407f0d72e5efa72c104f0b2d9234b47a2ec8
SSDEEP 96:NmzTOdt8IrkPM0b5IQKCgosMCg5MF5yDkgEMjzq69SHr7fVpRb8oUi0dP7SwwJt9:NmzTOIM0dKCvVM3yDkgp6f/RYoUpdGwS
MD5 SHA1 SHA512 SSDEEP

Submit Download

PlayStore_icon.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\en-us\PlayStore_icon.svg
Size 5KB
SHA256 dc72998834ebbc70395261c35cd6ad5b36ed8483703b08baa3d4abe470e15a5b
MD5 936860a13ab27566bff7b1fd8639d2d8
SHA1 4889e9b6209c7672d6afcffc80ad746a9ec86e41
SHA512 90c0edc463726d2614e39a1930e1b1bccadd6e14c175ab1f5344b39183aa9b6210a4f032c1e047d6fa60faa46768f3e17102ed4df7c73e1cf13f5a4ef5cf6d54
SSDEEP 96:olLmRvX42xIqyMWf17RQNBVYZJIlMuOAVA3bJkUKAyEDEsnQF8xUdMX:o2vnIBJtyjVYrAVKNdKAy+EsnQFmH
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\root\ui-strings.js
Size 12KB
SHA256 da604c9127cfb44c351c6f841a2d9000faa3beaa4212f0d83121dfbf32c8e660
MD5 cb62cebcf45c9aeb036618b84168c063
SHA1 be787347c018c3a59cc83136b107a8aa9def15c3
SHA512 9c431c0f486cf20f0571b91dfdb325b6c5c874e7f5dfba1f14f1864b29544ab7cb49e59b99bb507283b14fda382daf90ef085dd4d76285aca63a661400a32592
SSDEEP 384:yJLvDZyF3pH6TLHEPJLz9HkEZcSvE0TawkLr5:mI3gLHExHk50Gbn5
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\root\ui-strings.js
Size 14KB
SHA256 78640de9bde9f9b49b66d80b37d01bccccf06091499a13532e7151f8c3b18973
MD5 02c66994d97bf425a7db7541deb6de73
SHA1 51ba72563b6d66b1cf20663efb3d80026c47ecff
SHA512 74c5aeaabcb27a4b9c9438cd7749401e33b2bf592184f31568eb03c5a2b9ca1c539c00a487bc02c48b59c7e8e0e3396cfc537aabeb0c90e4a6ba82110d0dc25e
SSDEEP 384:cGvP24sfCZ8jRVUzSmcEAbvwSz5EfretqsjYbq:h2dfCZ8jRVQSmFibOT+bUe
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\root\ui-strings.js
Size 928B
SHA256 bef3a8ce3ad6d2f2f9ea1574e84fe996a9334aeb1122a9da7387c483fa80a512
MD5 02088746043970f344277c08b301d8fa
SHA1 a73d9323dd32f02494154efdcba46d48c1281f65
SHA512 2f9317c06d267a3319655dc45eee83ee744218db0e4f9934d4d60c4d2d53dca1ab0b779960e9839cebaf86640756cc8f00bbedde376af5e0b8d8c495552c4438
MD5 SHA1 SHA512

Submit Download

main-selector.css

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\css\main-selector.css
Size 816B
SHA256 33a3c7a81711c69c8de5010f1cfb48bb005bb6a45f3aeded61b3a893eee44519
MD5 fde031b7fab044c5064f190d52048afc
SHA1 802a5f0be82a2489ef4ccf49c47f711a55ff8fd8
SHA512 f0b142fde1b3dbda5a1587a85f428c89bdb4e5a79f716e11b4b52b064f8eac7f6f6a292954ecbac4be51b95d2b7d7e547cd760730f34b9472120a7f2a1d95312
MD5 SHA1 SHA512

Submit Download

Download_on_the_App_Store_Badge_cs_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_cs_135x40.svg
Size 18KB
SHA256 59b56bf39fd36c80c1a7af2df3044637b9b11f9bdc376d94de4e7d3b1fd1de73
MD5 a1e215a33f9fa1c349555c500be83faa
SHA1 ed94b5a4e27e890627e0e16cda6cf405d21a0403
SHA512 c7083a4a6699adf9aaac5d8f60be80ffe13a27f168b61f7ef9833ee66891261b3303e7de9c81c432da9ca83006eea4acfec013924f0f5511bcd5681a468ffbc5
SSDEEP 384:X2rV3pdcvv6j4k4nAX4QYPK90C3b3BkDAyePRZ/XY7MLFlAZD/hkx6VeoMwvJFB8:mRAHE45ng4QT90C3b7Zwoxl+/WUepwve
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_da_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_da_135x40.svg
Size 14KB
SHA256 29d722cde3b545ca5887384a70b8168ae51b3c0301fa668e4a6bef6dc33dd59b
MD5 7e9cef99ea2882d366a237463d20897a
SHA1 7ca756d0ae77f44e16ede63115e5071385d07058
SHA512 df2eb2a77edc0b8a20f32c07bd922cc4e975936a00d0e9da1e77b47c6a5ef87641007feab197106eb99acbc1ff96be80f3e4ea7881dbb63ea0918dbeb52fbc03
SSDEEP 192:m8DI2V38703q6NPHvLag/Tx8bXC2xO84PXEO7Zs9j17Y0uqEc3xCb1cn5wY6yPvB:3IFQ39PPLWSp84/EOad1YKEcss55vWI
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_de_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_de_135x40.svg
Size 17KB
SHA256 9b086b5ea01cfba0bf75077f8fa7903a8dae29c6287eb97c37ed6ec5845fc8bf
MD5 77af05c84ab58644a29f001061cd13d8
SHA1 68c243db9c1f6ade4be60fc082a8b9744373982e
SHA512 38aebb6ee6007d62947cbe319f0e17469820b73ee63814bf873156ffd251b4ed0b9c70d2eb24f3cc6f9c94e868dc5faa6d6ceaa50a402e42fe31e198ec5530b7
SSDEEP 384:Iv1kbdVbgEb9Jp1p/IADT5mm5pCRuFQ15S6C79md9q3hsM:0GbdVbf3p/IAncmip747Qq32M
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_es_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_es_135x40.svg
Size 23KB
SHA256 90ebfc2966f93355d37f6a3bd451659219c1febee6cf0304ef50eb3a63cece23
MD5 482706faa613d031f58ca09eae7d10d7
SHA1 e0feb9f69889c5e0cc1cecf9013f9243209a562d
SHA512 1f6e832981c4be2d1f1341f00de045e9ee432c27ae7430a7d2a1b92837222888834814eb19aec5d454a41474097b77c7b9b5a86bdd58f8004da7106f7ea138d7
SSDEEP 384:MjwbGk4Lf1wlpNXKq0g0r2Cy2rkqSAJdAGvjgSL5Nuw7gftzpk2rhE2Cs:RFQN2aq0T2OYAiSlNR01zfrBCs
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_fi_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_fi_135x40.svg
Size 18KB
SHA256 10b1355aa0c41cfbe1c3e0a2a0aff932ad989939b285052def5bf75ec5c30bf8
MD5 818e155a0019a66785cb83ab7f04fb01
SHA1 b04ac247f3204f2b630ea5cff8a8ab3dcba078b5
SHA512 b0c3763364cdb002d670cfadb0c4594cf06c3f1fe7688bc55e61441c72e387d7b6af987c9fc0e9256324a35f9d8830a4080552789ff8959b7bfbcac3d7b4fb44
SSDEEP 384:ULX+/KEj3R8xs9OkFEO/6igiLA81bFBarCZKdFqyeXkX+/XT/WTYL+7AX17D8+uf:Z1hKO/YiLA81bDKdwyeXS+PTuY67AFHy
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_fr_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_fr_135x40.svg
Size 26KB
SHA256 49372eb127d29ceccb999d3a03e9997a323ad799410656f7f89f9fdf12b628e6
MD5 2af0675844c5b85f9082d7fd95dec8b0
SHA1 5540f3045f592955b683cc5c8bde321edf6ac75e
SHA512 f8cc1b90c2499b044d82969716d77a0b9e11baf90ef497cc017edf233fcb0f51f2951e5707824fba99782b3c606792a9d2a56dd34b25ce22c9a4a5f2a91c095c
SSDEEP 768:kGC4xY3pg1wk/n7RBPeHZxcaklGQppIRSTUKdVq:Bnxmk/n1BKXcn/Z/q
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_it_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_it_135x40.svg
Size 19KB
SHA256 fe8f2a4e6b992f5a5aa18acf16e8642b52d2d0ff4115e854fb837602446402a1
MD5 2f1c8514e1bb29beed9541953fd09c9f
SHA1 b6df1778afec9fed1e7b83851a1db329f12511a4
SHA512 8b9e85ba3fba7c001d5d6f2bd9edcfcafc42ce067a8d08fe4738c3ae3b07d39382346364c72c1e81b0eab42aa50f13067350a0ecb54bd484340cd09f8c2b69b5
SSDEEP 384:iZRewFREr1UC9nut5sAmJb6f8PXm0lYFbD05HcoYpYhsYAW:ibe8W1UCAzTEblwH0Nu4
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_ja_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_ja_135x40.svg
Size 17KB
SHA256 d5a41ee4550e9e18896829f50e28d93a24fb81425a63575cc44895b2bd0059f4
MD5 dd2e9a96cab0800820900b7a8e3ad19f
SHA1 291583f7f1ee39b4efef57bf3da5276e5ea925b0
SHA512 a1896c6c371526720be3debd09e4829d0587e86ae427252c523058921de8e70a021b7d5e9899c0c0a215239737b1897fb6970529477f2b8b5cb3e64772b2a608
SSDEEP 384:8y3iQG/O0g9D0J1uxQmeC/Lg8HTTRSRjJipjyZKlC:8CdVX3xpLjgOTTRSzlolC
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_ko_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_ko_135x40.svg
Size 17KB
SHA256 8610f342cc6a9a8197760d79854e8114d4e9ec8f2fad274f79a36998d9817f16
MD5 24b11c78b2b38130ec74657dc2053361
SHA1 47fe448ac511560b37c1a05a1b960525155a4906
SHA512 91b27a14e9df5b69e2314a4e6aff7ac0507ad88a66594efb72d2b25394379c5b94db63b9ee68e3b59e2b0c6e3ee25c7bee48af53e806750e7bf02a2a4faba532
SSDEEP 384:nWXad638Pc8vG3YQX04zhQCLYdsaidPtZKm0KUZCy2XLewC/Y4d:Iad08Pc8e3HX04lAdsautZKmmCy2XLe1
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_nb_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_nb_135x40.svg
Size 20KB
SHA256 dee5f9067d470c3ce2d849414f4ee3ee71abaf216b28786b6050b4592f487e14
MD5 f46ffbeeed63a2858f15019ece32e3fc
SHA1 493e1ed7fbc95420e9579035c215e7dbfcc735e6
SHA512 25e4cb3e95c51fffc493c8c3b3fb8cdd6d41ca0403a5c909df6a91f20f0a1b13f98fe66f77d1c91d060765b72f280fa5fc18a11ac01ded87de6af314fded239c
SSDEEP 384:gqyHB9n4wqSOXRn+rjePv0wK/lBJxL4J2ER2ZwVsjm4+4XuPL9AA:gqgn4wTOBajkvRK9BLE0ER2bXXuDj
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_pl_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_pl_135x40.svg
Size 18KB
SHA256 db1cba792170d33f56a9340b25b06491ef75666ad37823fb84e9a1db3a92b2d7
MD5 6eb29cc1c20d23c4509971796c61b75c
SHA1 aefe66efadcdfb0e3e943836835ca76256094de7
SHA512 576163a3e2dd63fac4551fce0f09ed064cd549f0db8cd89bcd7dc8e0d7c48564f6cd3541794ef83184528759d8cd484a7a39ced642cfadbf85c7cdcb396bad00
SSDEEP 384:csthQmx033d7S+29FqFZGX+SEa/VWCLT5czVuv5hqaxUPZ:cuHx033I+2KFYX+SkCLF4uv50aA
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_pt_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_pt_135x40.svg
Size 18KB
SHA256 9dc3a16803bb052727e749b666f43d2dcf02c5b769ec8505db82e2f650653b11
MD5 11bb3df4afff5fc9fa782ed50256b444
SHA1 90d70149816e6efc74ea8fb4292d2a783699f697
SHA512 7f21db56bf4635f8b235c899b204a306ca157a21a98871a4a4da29a446a27664412927d73b43149c572dccc7240b046a39dea5026247ca7054198a6509ec435b
SSDEEP 384:QDFbCGcnlRcd8ffgcMLGTcd4hDAyI9JZf1TYJV4BAieZ5LikL2tA5YT:UbXUcdBcMLGFDk9zf188feZ5VL2tAu
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_ru_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_ru_135x40.svg
Size 23KB
SHA256 6e20f700838d34229945596e3833cf1169844d7f398a28ef9c853bd5437dc9dd
MD5 f2b5e42926fd45edaccfd3be0a187052
SHA1 77f4d96a3236a288837096d6e2b77b49b41e262b
SHA512 e6473c6de62b2e59906aec322680acb52e6ab4dc5ba8e705c0fa924e2d10b1c00a6ac36143df7639cc06dfbf0149ded39f71d4370dbb7968a6e62b17aa44b885
SSDEEP 384:O7RE0+3RZJp3Qc0BGHjt3uuKflBfovGldtGwP5uCikIwNshFCFczpUaa4wpnexB:WEzHQHcDtwDfEqrDPfhIwMdDxB
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_sv_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_sv_135x40.svg
Size 17KB
SHA256 36de94618fd5ec94d3b0b443597d253e7c117872bf404a96391b336926ef76ad
MD5 b9c482898c4093970f8788970a728174
SHA1 26fa98c83e640c0166815f32861cfcc2e197647d
SHA512 ae5470c7993f65564a9eb952cd233bc7330ddb0e5faffbf35812863501e5fa5ac79d4792ec1f10df263d87703c77655d189e6ed7c1a93813071dcaf607d73f79
SSDEEP 384:2FwG/VOKdmta8q9XUliU4IaN/Yx5a1rMbkj2W6UI3eA/2G:Uw2VOe/t9XOVTpQ5yeG
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_tr_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_tr_135x40.svg
Size 20KB
SHA256 d0606c3d9f24c659292406f7467e3499d6aca67094347dc1f52ee7189d71438f
MD5 1dfac561a63189a2c1b327ead4c89943
SHA1 86a08fb523ec50d20dec319b71a9c0f48d24e878
SHA512 fcba16a070ddd2651d7882a8d0bb5139c89b73f3dc67b64c1efd0fcde3e9ba0471dd4be39351e91740aff8c00a22f23108954b01ea10b0f1b142935ba9b46b29
SSDEEP 384:gYbEewUEnkdmbd//CT/NthlcBdL2Anuk6dOPJoJOXpmvmgWQv0AZrfUUjOgdD:gYbEaEkI9CDrhlcLLzukKSiJO58zWqNN
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_zh_cn_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_zh_cn_135x40.svg
Size 13KB
SHA256 f023841c910e3d1d0a1b6173f49f6eba44d5a486722a0f4d9aea1bb80b67fb12
MD5 ef56fd01392131ef7a7ccdc57dafb181
SHA1 117a85bdc48451ec268deaa13bf9a1178a81a420
SHA512 a72b48d54de30e00fdfbe551ee1f4d7ef411ee11919c5b0aed41c88fdd5d765cad055b7fc5b77239d80199d541f2bea21a0d19c9315c100ddf9e37ee8e7131d4
SSDEEP 384:fn8FH4duvWOzuezHCJqSpNDGWG9q01TgbRjTEmQ2c5YY:f8FYdw5TCJfzGbalTQ2QYY
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_zh_tw_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_zh_tw_135x40.svg
Size 15KB
SHA256 3c767669ef0993dbd81d2cf56ffb9a2f8f0ca7a8ad1c69e02268b061d2879d9d
MD5 84d3468682f89539fb7caaa00eefb035
SHA1 c67fafc9bb4be600b4df18784d57260a64b6be81
SHA512 b163cd739c3a31193011ab854f44ace3b0597d4c411d71be98acf89c8a7fefd5379c24c30cffd0698a84c000ba2ab4a65c6cc11bb26307ddaa1080eed15c3c3f
SSDEEP 384:KCvd1YODAyb8/R1wOJJplfoPOc6prpijaOazcYpOiQ/2Db:hvdSHyg/R1lJvgmckixVYpLHb
MD5 SHA1 SHA512 SSDEEP

Submit Download

cs_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\cs_get.svg
Size 5KB
SHA256 d15420d24bfd7f2a6e2f3a5cdf10ba92d23988e25a104dca0383c3074f5dbab9
MD5 e3131f2192ee59773d02b4256e934594
SHA1 68da39f5fa7d9d2b22c4a2d91ffb8d1673d5022e
SHA512 145f4c824e7b1cabb4c2b766f6ddb807e48f039f71a9bb9ba2522c84ee55e751b35e0a6474ec8e055d7c9b7894c0a66f7028ed6aa9194b4f94b834d0a23140b0
SSDEEP 96:A8Ry2HHEQYr1h+BV6y07yj+elPXAAmg8igfVEugAPrT52oIiPUIZgQC+HMG:A8RvnvYxu6y02CelvAAODfVKA/5DPLLZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

da_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\da_get.svg
Size 5KB
SHA256 25dab2c7cdf538e4c92a42affc50b680e6969a8dacf352e1c7c8a2237632f7b8
MD5 f90c59a11b04a853b823c19e094cd6fb
SHA1 f4c5961b1ba6f8189d57d976f8d7942359e09f77
SHA512 5fba06954ecfb03ec2b3e32fb3591e2962e28db6fa96c5a4610dbc05aee9a1a00d39cbc70aa88dde7a97e140f6cc5738232fa15634519865194ed64a255c2885
SSDEEP 96:A8Ry2HHEQYr1h+BV6jnh3B7t+y/gOK/2EQUZsHSbTelTcnk8cqW:A8RvnvYxu6j9B7t+p/2E/ZiselTck8cR
MD5 SHA1 SHA512 SSDEEP

Submit Download

de_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\de_get.svg
Size 5KB
SHA256 89d78d0e544e8be7b631da4f80829e7e54da80899614a0f21dadae9c1225bded
MD5 15a9333af0b1116cc6582bf15e0046a8
SHA1 0ac6053577b740f2d3105c60b92cc1b799ccc7b7
SHA512 8664d30d25113ce90a45f79fe730cffee4b211859ebf355351fda3f80b82b328bc7c9561f759ea0f0603b46503d914b3be18ded3ab5cac1d4ff99d1cddcd6204
SSDEEP 96:A8Ry2HHEQYr1h+BV6aSnO8O2f05QRmn5X5yUVkokv1YruNg3Dqq:A8RvnvYxu6aOvc6wn5pyUKFYr8g3DN
MD5 SHA1 SHA512 SSDEEP

Submit Download

es-419_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\es-419_get.svg
Size 6KB
SHA256 23294ef8a23040d7b16947e43cf8745496ab4ac4dae823038abb947bdca1ce93
MD5 96936d8391c79dd3675639e30ec4464e
SHA1 38426c3f00ab8c05705b1b44ea7ebebd70bef28e
SHA512 476f25f2489b64dcb66e8af6f547307aeac4be903a236834f1d5a55b24d3a446196643efd91ea95dc9398e61cbbbe5c3972ad94ef1ebf4fa49ccc33f644b93ee
SSDEEP 192:A8RvnvYxu6iydyOWGKFbwATrc9lhVZLyrecKc2mkODaea:RRXcyORUbwO4fZLJc2m5aea
MD5 SHA1 SHA512 SSDEEP

Submit Download

fi_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\fi_get.svg
Size 5KB
SHA256 13fa5c4a71b91deb5dddbf55e57efff1789a6fab2ddae325b08fa34b80a662f8
MD5 f69b1bfcdf1e7411e5a40205837f848e
SHA1 5c018628de41ff91f40057b52dbe5fcd40d1e053
SHA512 d09146a08e56461b0d3fa3d9078b85e9fefe86ad31e6722e1de769f657f5ee676516b0f174cd910ac1de79aae0d34f98547106b59fdd9a4bb2086c89623fac73
SSDEEP 96:olLmRvX42xIqyqXvbi6XKA3u476+EzlI9lgJtQUn9+JUhgj0NzlnOcUQYC/Edi+9:o2vnIBoW4Rh76+EzuiQUn9EUhgANznU1
MD5 SHA1 SHA512 SSDEEP

Submit Download

fr_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\fr_get.svg
Size 7KB
SHA256 fbaf3bb0dd4d6e8c1f2e60b0149629b5f66855715c6eb034990c3fd8cff38654
MD5 883f1b55757aa60e010a45661ecaa6b5
SHA1 466b8931b0500d7ae01b096ffb12a43c91fe1f75
SHA512 6c777eef000dc2c2d05e5d3153ac83979802b6679035867aa2b996d8edf31d9c8f53bdac682bdfc8d0d2aad202c72a3d4975a744d24a10fa86fc7ee127e5aecd
SSDEEP 192:A8RvnvYxu6xALeEDnqUDsnMPMh2wl1DcQIeMSiB8:RRXnTTq0vwlgSr
MD5 SHA1 SHA512 SSDEEP

Submit Download

it_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\it_get.svg
Size 7KB
SHA256 9402b389881c9c43abecd9df122672bcd6aaad039bc2a2b494d6673145571040
MD5 70e62aa36f44b406f99aee26c9a5d8d9
SHA1 2ccb90f2ba0028954ced9b24f25abd19a84e5af5
SHA512 95af40a1926eb7c500129041b54bf708b682f7f57c8924ba5de096a42d3aff82998cf0e3e1396e96174068599f6a3236211ce876b6a55e572b1b0f153dfe6680
SSDEEP 192:A8RvnvYxu6Lji0MJ0sVWwWwAaUbVYVBIhPlg:RRXn9J0sAcUp7Dg
MD5 SHA1 SHA512 SSDEEP

Submit Download

ko_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\ko_get.svg
Size 5KB
SHA256 166c93a9ee718c65869d5d743465ce6c3a6233cf38825719bd914a8598bc27b6
MD5 3bb403a47642402488da959f1fce6807
SHA1 d90991b5cdf5797821093d5970194e1fe77a1dba
SHA512 4f993152487b964d2b0944438b5536573a8acc70a0c25cce539a2dbaccc8c2b710d8dd37c3fac059ffd19fc306113d97a89f70ab8de007f0466021ee0335e929
SSDEEP 96:A8Ry2HHEQYr1h+BV6/M9fD9MxpH4E+vEx7HWNywk7LcTkjDkL81evwPA5AkV:A8RvnvYxu6UF9Mvn+MT6QLQk3kmA5AU
MD5 SHA1 SHA512 SSDEEP

Submit Download

no_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\no_get.svg
Size 6KB
SHA256 5a45e4547074a98554c3c51c9621337cfd4d7d104e64e5f605ed2ddd88d44836
MD5 9a47ed6cdefa06e43dcb6c7cdf6caf91
SHA1 2e5a9b9634660b3d2f895526d2584e5a914f9d0c
SHA512 6e2282078b76f813565ac3aa14af116983cd198333694327852845aea036b6f40c77d75fd64acff6b1b51fd12b22fe5241fa3cac1d3290d647c03352f063a1ca
SSDEEP 192:A8RvnvYxu6B5XFU4Ed3hJmq+aVMoDmbLd:RRXydFMxhJm/shqbJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

pl_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\pl_get.svg
Size 5KB
SHA256 fee993a4468949a91c1a8524698066109d42975d603d116eec6df37b413e616a
MD5 a87437006fff9af460110f6d7f6b6c13
SHA1 83e45451ac1b8e4767ad7ca1d5d01a2165892d7c
SHA512 fce018e0f59339893f972ef804db03c630385e85de87d83ad97712ae927a386152695a7f56f93e200265c6b7dcde3b4e0e13bb424d055b75e4303c313c328d4e
SSDEEP 96:A8Ry2HHEQYr1h+BV6mxZOru3C9GQ3hRWb7Wy0DCaVduM2uo5cd2S8:A8RvnvYxu6mGy3C3hk7WtVdB2FcX8
MD5 SHA1 SHA512 SSDEEP

Submit Download

pt-br_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\pt-br_get.svg
Size 6KB
SHA256 66dbf6706e70a8316eae141db3c69a439ab4c23a75d68cc9e0de7c4d32a946ca
MD5 d7906b758773c676a3c138ae1fd4d6e0
SHA1 43ac20cbd0190551eca32bbde1da1434f2c3cd1e
SHA512 78905b216f148a3c00eb19a986f7a55bfd6df5049138cb8e87fa1f5cac6d948605980b667a0c45cd24fc71aead6f44dae122f6222e054cf742f13d7a91abe6f7
SSDEEP 192:A8RvnvYxu6N/QaaEFRJErUUXoJFk8/UtICsBrReWlfLsk:RRX8IhEqrUUXTB4rlLH
MD5 SHA1 SHA512 SSDEEP

Submit Download

ru_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\ru_get.svg
Size 6KB
SHA256 1809c7f8fc763d4df212615fdb2e4248fa36380f23e73f76a5459c7274be723e
MD5 799717d38bef9f79897dd4e942662838
SHA1 1566d84435edc75bbeb681b009271539828426c6
SHA512 9cbfbc8089a8a22563f1ef2dbd4d6289577e9cac47a2facfd4dcc93191d371e942dc4de7284c0f448ea09d8386695d0f5d8bacf4fde5a54640ca2902daf26f04
SSDEEP 192:A8RvnvYxu6ia98d2jBHYOMjcivHAacd1MkGs9dWvj:RRXA9/RYOJivHwd1Evj
MD5 SHA1 SHA512 SSDEEP

Submit Download

sv_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\sv_get.svg
Size 6KB
SHA256 3aa767351456b9c9714deac74556655f5391284674a87a375fc77eef4a6b62fc
MD5 ec9fcad0fb698850a1c8a3968ee1d777
SHA1 272572ef2d8ee8a6300d8708cb2318b30ecf1992
SHA512 2ebf65a6bc51f0f67ab8061c1b8fca37a3437f9c973d57b2e7ca484c568b8a7f67695a296e8a2b315d7876acd72b2ea1532dd5989c8dae6932ae866d3daf8727
SSDEEP 192:A8RvnvYxu6qY/ps1LJQkc/EqOFotnbHFqy41:RRXPMLEQtbHF6
MD5 SHA1 SHA512 SSDEEP

Submit Download

tr_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\tr_get.svg
Size 5KB
SHA256 68986a162a85da80aca6b9490e39306a559384dd9e00c580a3507499e12c506e
MD5 bff9dd8ce7ef29bd37cd9ed832011e21
SHA1 c74f48169e6ffd6b6e2dcc37ca551a7408cdc74b
SHA512 03860a1c1ebf19fcf92a39b0cb99a057cd6ad77f800c0cda93fc28be2f50cb11462eb580dbd92514c9bb930bdddd5242250df84238358f708fca9863e0664a2e
SSDEEP 96:A8Ry2ViZ+P0bvKhiuWlcXf556hy3Z0lqvvjqV+j+pODXL0DtHPp4:A8RvVuwoKUuWlcX6MKlqXjqV+YODXL6I
MD5 SHA1 SHA512 SSDEEP

Submit Download

zh-cn_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\zh-cn_get.svg
Size 7KB
SHA256 cf006fa05c0df22e20d3393e41128fc88e6ed0861afbfbfa39bc7567fbe9fa14
MD5 9c4b15233251087b6dd9d2d9f33d9ba3
SHA1 0cc839386aad4dab3132af9991b74cb18ebb682a
SHA512 63292f3124523ce3d8a5932388ff713405f246c3f6555c2a3163ce45032173c33a451a730d114d1c852c4a34de5d66a5e2d23d4f215338b94ea0fdc46488f330
SSDEEP 192:A8RvnvYxu6qKEmwlaXevAR1a6bA8YCUIMs69VHk:RRXiEfIOvg0hCI6
MD5 SHA1 SHA512 SSDEEP

Submit Download

zh-tw_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\zh-tw_get.svg
Size 6KB
SHA256 86504273446d4c0442f46b0e975a86c0582192b0d967877aad557ccfd35781ce
MD5 202a64e2cf876b4242ed4fa6386489f3
SHA1 a97e281646e0637c510fe0120eb3fc48c0db0563
SHA512 88a233023d1e1afac8820411c4913313b0ef7a0fbab45f8675f6686c62c67b9e7af70efc60d4383f45c783c1e2eabfb247cc24c8a4628c3dc147bb1668664271
SSDEEP 192:A8RvVuwoKUuWlc22rs5TfWjPtuqHr4dJQT:RR91WcGT+jzLcKT
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\root\ui-strings.js
Size 1KB
SHA256 0f482bad78cc5258bcb3843b088d4f814867ca0c420de57e3c3a779248d77824
MD5 1afbbd1f52ebe5442ec1e84449a7fc30
SHA1 436a21772118d37a635d1e214cc8871a0fc8907c
SHA512 d2b955afe6ae692dcce8a143dd564a9cdbc0b04463f34ed95d2973e541e45224d04a6bf1ca6be0d60f50ad676b951122bf948bbd7132ad45e19d7c85ba242397
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\ui-strings.js
Size 1KB
SHA256 ae5ca23efc45bc3bfa2bd0cff13c3b3c6e23f78fb976fcfb353097dd520303a5
MD5 d21280f47b75ef836272afa83dba6fae
SHA1 25bb5b52da3666ac4bbedc21a21acaf275da095a
SHA512 ee44d2d03951c4198fbc70b13c314363d4c6c9dc13eb0a828d7bb1f78c3b70fa6f82f3ed6bbbb0a3055ccaaf21a11d507824dfc045856a8087bec5fa6aaa4067
MD5 SHA1 SHA512

Submit Download

main.css

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\css\main.css
Size 816B
SHA256 e936e94705f096c818c77f4d6e0f445844454561d8bbc68957abc36f8f88aa52
MD5 9e96e1084b17d2153b17feff3f88273d
SHA1 531b57f0a2b90641ed0773741323ef348552b884
SHA512 370d091a4f06db87bd1984fe5b01479a716784cfcfad2d592c9a6e8ea5ef7bdef1f323ebbef23c112b351a14ea2fbf951e96b5c3da0e7e05ee3d1a03da6d4511
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\he-il\ui-strings.js
Size 864B
SHA256 8a1204f96ae2a7ab1f315d7e3abfdfe23b8371491abc59d8735118cc91d89d58
MD5 3cf0fec538c45aaf961cc930fad06b1e
SHA1 c4774ec5bab24bbe63a4075d60979796a1d34bd7
SHA512 96e8a8e6938ec4f7cd1affe319b0274c78e1ce2d7f164f309ace9f4788e2f09f2f5f5bdb7271646f2f8fffcc9fda9bea947fd05aa6d8821651126c751a9a4b2d
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\nb-no\ui-strings.js
Size 864B
SHA256 9c83be328a141623ba1e3f91255f6559e7da4f9d7a3e067d1788d9238540e614
MD5 0af258a3c0f39167773d4c8473ec9c50
SHA1 ae7327219a81cac86cc73b1b76d1fd54ab27e54c
SHA512 75e2d5812e430d68044e934ed627b3c19aef6472ae94321a1a618bb4a2621557bfb7962e86a7adfdc06d5ace3bd6a7235f62cb9bb7a7d73b9fc1799803148519
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\root\ui-strings.js
Size 864B
SHA256 0b7acaa050ddf99bc42cc7bf7436ad118ce4de22210cbfdc07e4b462fa020e5d
MD5 181fbd0f2464305c64425731ee29d2f5
SHA1 03cffaef5ef7adaec1770b156e0e360bbc4dbe4a
SHA512 451a1b28b48eb4d56bcb3993de68c1b7ea3cd66b9e64097f5a8271281d693768b0c0c614648bb733e503af2c73db9d15e6b1226e63b79f2d4dd30f05317915b4
MD5 SHA1 SHA512

Submit Download

main-selector.css

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\css\main-selector.css
Size 816B
SHA256 36a34cb2183696fbe4eee16ee9583d628eafd4766f6cc061f219ee43379e0cc1
MD5 f6dce4a743122e08ed779cb876e8fe5e
SHA1 ea80f2688fb271adcd7ed5fdaa6c51c9769844aa
SHA512 aa3b6ae29dfd7438f162020d1cd308716dd135b7ce073a1694cee3e484f2e4a0c83c2bb3d9043eb4425f395a4c2a00b02a24139422b44ada90c5bd335fbec952
MD5 SHA1 SHA512

Submit Download

progress.gif

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\progress.gif
Size 19KB
SHA256 901d74a3fc712fdfd2996d75f77fe5e4ffb7074765f8d8ec79510dd629721ea6
MD5 90297a486e4c8f3fab16dd5ea70d5e16
SHA1 811156a2b8b6c842e7e74c69a210ed1459f00099
SHA512 f144e4a1804fe596f43f797b81795597a15a9b6d182172b03e6f29214da0bc578fc0173148c38196a85c6df9724139b41d8be6234982861e0872ec009e409fac
SSDEEP 384:kNrlhq9cb/v3KZFfbnwsWiRQQdPHk2yRKI2A3q0LuM0+d/F2FskNl18qfw2DUHx0:kNrlhtb//KXIiRQefTyRB3qNMXklxw7q
MD5 SHA1 SHA512 SSDEEP

Submit Download

faf_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png
Size 6KB
SHA256 387b48e8174cbe385abbe028585d00ff226513653d2f7ff2c5117fd5f087f729
MD5 14177d2810351ffea13f01d34b2905b4
SHA1 27cbaf16d5ae19411611dfb65eec948b8d3b6d93
SHA512 b4a94c601261f6a638a6a25103495dc6dd6332da3b84f63b37a1fce5772664170979a4109c17f6365cd4b8227ba687b9063f32257d25e597dd90060648d700c0
SSDEEP 96:Yn+6/yblrAGNlTststy8pTaVBiYio3dDehrk8nkx5Ex/qC1IyoqMq22eH+tP0wO:A6hAwl2styST7F3hwYk7K/6yozvvHO6
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\root\ui-strings.js
Size 7KB
SHA256 d400432dd81f88d76f58bad25610d4b235bddbf66a44f27b7eaebdd488dfd538
MD5 5b58367238fa854607c0da5f3ff7c387
SHA1 24c52c58fb8920bddcff10c9b159deafe4f1db82
SHA512 95c44baaadfa0d8b1a62d3fdf3cbe5fa2551b0888da7dbf4340aec8d31740986f7309e081258dfd22bd49e573b0064571a0c89781bc7fd05404018e87db2d822
SSDEEP 192:NmBPSnGihFFdj4O9J8aNgC6wfPv8egA97jJnmIsYTJjKn:cB6nhF1X7Ng2fcFA97jXVjKn
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\sl-sl\ui-strings.js
Size 3KB
SHA256 c45572217b1ed6cfb1a37786087e79e31dcc6ebad7734a24c101e01e6910bd52
MD5 1c443136348db6fd86bda688c8b53d55
SHA1 71b28bcf9516529f9b05bf5bdf26b9eab3971cf3
SHA512 a31770bb87e6d5d73999b468b1eee5c9d26f991476a594725c44d443aab6515aa84cc0b8ee9c839176a8d76bb956d81e4ad20d29d41b55a6dcdc6b662ebe85af
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\root\ui-strings.js
Size 1KB
SHA256 f5a98cb66ad60ce10fc103e5aae4c8abc0fabbfa919757ccbedd9ad61e85f0df
MD5 640fd9b83cc1cdc2603d863c4c73f87e
SHA1 3369e9ac2aba11ae26631b6edbae1a1fac56255f
SHA512 b35532ab9369b315a7561be0bad00b28ffb1a9a970bbbb3cc41d22c7d244e8a91c48a99a70f72a92cf80d71ce1ffaf7b95318bf69a7d2e2dcd73a05a9ebaf751
MD5 SHA1 SHA512

Submit Download

bun.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png
Size 2KB
SHA256 eef8204e85458ae63cd764d518316ecf752f21ebf87344b5470a3a7a91b8e68f
MD5 82da34d6e06a8d1fba8926b01dd53e19
SHA1 63e1d14703ea6b4928658300b76fff4b2ab476d7
SHA512 5da58f5d4db7fb20179853146b6877308818625cbf0cc611a189a3f6fdd718d58f08e54d76cddfcfb39180435201b327005e88180d82d8c344cf1e524e4c9f69
MD5 SHA1 SHA512

Submit Download

cstm_brand_preview.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png
Size 2KB
SHA256 91f0b588c37220ce7a717fc72da3433426b2c0a0fc9da1468542cb1c78ae48bd
MD5 fc326882302e82d2d9d4c6f8d2def719
SHA1 6e9cd038bbdf3d1cd326a8582abc7fd368073b8d
SHA512 b982ec59dcbecac050e5552e59b1212aed13300ea7e8741ede0f3e0f5339b43b035d44827e281296484277e551db152dec8f1e2a1f98cc1eee07bc9411af8ae2
MD5 SHA1 SHA512

Submit Download

cstm_brand_preview2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png
Size 4KB
SHA256 7bd1572a0f6ae4d6f4189c04d3fd40d00efb9d9730f081f159ee10cbed228b01
MD5 cf78058444f792c6b1d29048cbc810af
SHA1 5a9aaeaf4506c173ff1f7af623fecb76b9a9af2b
SHA512 29ffc57833d2b230df0b160e9f6408ee1468b939cc43c9fde7a0517f479c8d08c4ccc40fe91b345013d2e94f65f4e41b9b06b6e7a0785a370ff7a3c9f1b3e786
SSDEEP 96:TnLYdFR1H8Fhro9YUVwSQrYr/29zcIKaaPHZthJh0:/YzcF5o9YewSQr+/UcIEfZ7Jh0
MD5 SHA1 SHA512 SSDEEP

Submit Download

dd_arrow_small.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png
Size 304B
SHA256 894320ea4cf359678e7e2e685757692fa71763758dbbf6ff25070e0530266e9a
MD5 2605d7cb0bf60407d57ec7d18c7250db
SHA1 a4076b81e7f455da6cfe547948cbca2c14d13796
SHA512 144edd1c258c6203f3c3dc31f0c80833afa96052de6f439bddc43025b3f4180e73e494791e73af589d5654ee33a5154bc374d3863c1faa5361207240449c7712
MD5 SHA1 SHA512

Submit Download

dd_arrow_small2x.png.fantom

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png.fantom
Size 400B
SHA256 32f10b9b801444e4c2f8c0e73c35c200391f8f9c3b48a9cc2489ce1a61e0afbe
MD5 6dbc2caeed0dfaad7e3ede88086429a0
SHA1 24b8624dc5217dcbbd2a6a826ccc03ec24fc0f4e
SHA512 cf0c311da6410914f59bd50476ee64e0c205853bc180e4a18288f81a3f5a138287f44619afc7615bd1fa5b9a22a8aefb26875effb104f79bd53a623424912271
MD5 SHA1 SHA512

Submit Download

illustrations.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png
Size 4KB
SHA256 41448719c74b28407a12c6e3a535111c3eab12cf0feae188b033ee40db15d7ec
MD5 e1a41cdb4a93cc755595007b1b13fafa
SHA1 f4ddec0f31f77fc18c0182357d2641094bdb8394
SHA512 08fdbe9dd18e58a1ba182f109d8f757b403b7511a9450f1d774a9db8c446f638f8dab84d011b9accbbf3b5ec75a0eeb2cf46f6fe54896a6dbd17d38bb9338ba8
SSDEEP 96:RX96nb9pwqIMucsA6FRtcESA2qm21649BeUCZ1HNGWInte9USlP8KE:19UxpwqGFRtcESxDP/WX
MD5 SHA1 SHA512 SSDEEP

Submit Download

nub.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png
Size 1008B
SHA256 12159fcd654f75077ac569ae7b54bc05a3db0382fc8392a272a7009f5a588a75
MD5 30aa80184865872d27fd73a17ba81beb
SHA1 79f011d71097bdcead43b3854b5773df185df358
SHA512 5195382cd85458ed63b674746e8e5506756e2339c7dc4fe3eef86e171321a30ee1ff97ce84623a1ff77624d0041f1d011f788c5df0f48a3994e1aa41374db909
MD5 SHA1 SHA512

Submit Download

s_filter_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_filter_18.svg
Size 816B
SHA256 257a4c496064d2abf0e199055ab207d1c10840bd4403ed9ca986bd55883a3200
MD5 23223f547fe6c689e16a5bd2ef3b5e36
SHA1 24abce3f18d0a17c20d1b325ac2966059b0a8649
SHA512 497cb6ce20705d92623f8465c1be6f20ded4c783a9ef5892260a15833042b1c4f8cd860785fabaeb4b3674e1de427f93b7374a1ef6f14f0ff1254fc7c735caab
MD5 SHA1 SHA512

Submit Download

s_listview_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_listview_18.svg
Size 1KB
SHA256 248c3c69c2d63a689ce039462d61711a8400c17369d7d407a39c96536f409dc5
MD5 5c924a910495ff0e7ec98abd51c98c52
SHA1 54a8d8d1f0f76410ceb2ae30290c61199e9dd751
SHA512 b4f50c7bfd8ece42f6c05e29573dc01e46c6744ef771fa4cbe2d661a5553019d5341ace95cdb622a2c0fe50e842191d3a3776779ad532722eb33c2a1a4c73eb5
MD5 SHA1 SHA512

Submit Download

s_opencarat_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_opencarat_18.svg
Size 864B
SHA256 f4f4a92c53654973db600bbec7d45037af1ebe2b12a297793760f7146389acae
MD5 c5fd927666fef41d7dbab2b3d8238b3f
SHA1 bcacbe3c705bbfe89aad0240e89574e9f783a3f0
SHA512 cc0d1495c38613f86cfb3f4bcea166427de5fa63b5dddbd449e74543091e4722e6b7b8cf4226965e77a5d7fd4a423b876a247636c96fa39b28877aaad350d3cf
MD5 SHA1 SHA512

Submit Download

s_thumbnailview_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_thumbnailview_18.svg
Size 1KB
SHA256 bb818df9339ebfdcd1ed083ab1fbe47f8d6ce24e733bc312c5d2cd7f78e4cee5
MD5 e59d40464e41040baac9e39ce2904ed8
SHA1 de048943362eaeb6bb5e4685253e40013a65e2ef
SHA512 6192b4ef79adac236ca4ba0f3e9c7356154fb9ede4b5ca1cbd828db9481e673f82ce87b15806f4cf0f7e7f757aacbce9cecce2efe9a46a2816b3d0b2cadbea27
MD5 SHA1 SHA512

Submit Download

share_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png
Size 1KB
SHA256 b14324b06273f0880c3dd84963d43a60f649daf3750740c062ebd0f87b773230
MD5 ac439b9bc3d4bec68cc084c79ad48762
SHA1 87a91e8d6d8a3890aa84845e9194fe3b6fa15b49
SHA512 d734c4b44afcfc806507c6425d9b52f8a7a0e5db259bd6238d086382a5d12c1fb5e5fad372f2022abf39f7a15ce5695cb00f7f167c11c2e9f4c6d29b584449b1
MD5 SHA1 SHA512

Submit Download

share_icons2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png
Size 2KB
SHA256 b89581db68a6709347d92b35f04d52119094a9209a32c1e6bb7a40b15e9f6e49
MD5 f4f19712b09511cf575283f8a7f5eca3
SHA1 9e45dbce9d4038cf19935a7e5dbba84b599a5578
SHA512 26cdb0d9ab6c1fb86489b855a6824185c490dcb38bc199e975c4a14c3f1eb69d9873586141a5c0d22b95476e7f588263f85d57c14c2101a5b671c72249622caa
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\root\ui-strings.js
Size 13KB
SHA256 ea4e7c869e821bfaa1766caa3ce88ea88185c05bf3110332f6971e8b7909116a
MD5 339641a374b9c91fc480e18ce7a598f6
SHA1 e3c2392def05c476325bf79cebff09ec58a13de8
SHA512 6e826cd33c41cdeda12dd31a362d342c3bf6becb5134376dd81a6780cf2c962592199b93e6025b688b5332768df77eb668a12605e7394e44a4045e6fff6d79cd
SSDEEP 384:cGvgP5WguGFpfuq81Ccb0wOtr9XWr/VILDpSeWj3Qf:yPoh6215bnOB9mr/VIfUeWj3U
MD5 SHA1 SHA512 SSDEEP

Submit Download

adc_logo.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png
Size 3KB
SHA256 1875d8f89287df99f78ec536bbc66fe5960b822760c642caf20782963eeb9490
MD5 2a6bfbb6daae74712a6f55ed5236b100
SHA1 a61259570cad5020e1bbc8a95e0ce617ab83a113
SHA512 305e316d66dfe25b49345a9d6cfa3edefbbb8056138073c7b6a53d16b0382551e1f8b48a1946567c78dd2dcfab5c2fa9cd681a24921aa1ff8a7f0927a508d082
MD5 SHA1 SHA512

Submit Download

adobe_spinner.gif

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif
Size 560B
SHA256 45220e01e0d18e62dbfb309d59772d49cba96e9a6e995c4897723eda0092085b
MD5 45f031485c0bc7e81bda9582c5a0c301
SHA1 1c35335f0c09727b813d76034f94025395febfd7
SHA512 dc30d9d88bc4ee25e67fb973a3ce83950ab84b73438f496c54cbbac6596a547bbb655c28a71e77b13bfa582c5867c376c0c1aac8994c0deae94c0fabc14c15ce
MD5 SHA1 SHA512

Submit Download

logo_retina.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png
Size 6KB
SHA256 77dc95a3b342cb4c38e1313dc3fe539187aec8e34e9dc0f1eea0d6ee048bdfa3
MD5 cb84b851383ccaa6c246120228ba6f14
SHA1 3ff5da64b9c54587965b05729973fb773e7be6ca
SHA512 d2380f61ffcc7546a082123f118ba8b4e87abd94be1599dc0d4cba15a7527e8a77157c4cacab97d70fbd5bbc10904e91de48a5d60f0b5608891f39e424ff2c8c
SSDEEP 192:UIy+ApK5ZsRgFNsg5n0ME7yBwucmCVv9xOAO/OT:DDPsg5ZAyM7YV/k
MD5 SHA1 SHA512 SSDEEP

Submit Download

sat_logo.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png
Size 832B
SHA256 83ae2994634dbd9fabb47c92cf39447c6c79923a5c6d838dc7a339904a86d6ca
MD5 7a3cf64af3d56f556d08803b60d1d875
SHA1 08f84b35b94ff3f5695eb3f9628a8ee143d4cbeb
SHA512 4385d675fe72fc725d6e094d592e737dc7e430941165a7c887fde28568c9b1e8eae2b281f541466de1fdb9e1d0b9966609790bef76b50df3cd9aa35dcd372554
MD5 SHA1 SHA512

Submit Download

sat_logo_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png
Size 1KB
SHA256 87d3f764c610e8af3e689df98c05552b0c5184ee35d78945c9d56b78a0247064
MD5 22a4deff97fb7731ec69506208b5074e
SHA1 d81cc5443d0c1010e70b3a520f0bb2fba6722cf1
SHA512 faa62e3cabf5eac35f3bbfa727595871407dcacf65e86d3e6d2abf6966521c672c9b7965495dca98577a10f44baa75de49f73eb607265cc6b4144ce5e15e06fe
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-gb\ui-strings.js
Size 10KB
SHA256 686be916befee56d16345411804d9e36b184fbf46327ac70f798b3936a442e5d
MD5 0b6cffb9c0a552525a299d11e36570d3
SHA1 0ace96b5a2a48a83e9ba79431142498650d83f47
SHA512 a1200d340a4c8bee8811076756b330c23d8acd62707f67e41aae724234ccdb186af7f7efefaa3c7e0d8a2292fb04a0f50877b5f29dd9aa22bdece44c11885c4f
SSDEEP 192:NmGOMmpp2HQeZhCjw6LBiIV+LYn8bXTA4BGOgDE37sA3dJNcUT10/odrvfndmdyo:cGOMmmVZhYhm0oB+EoA3t7GgdLfdmdzz
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\root\ui-strings.js
Size 13KB
SHA256 8145a6b68b8c3c211a4fbe6ccf239736c8a7f46c58591a32cbdd00ee1e1f2fa5
MD5 05eeb382bea461e956dd86ed4cf26b57
SHA1 6b4dd259a28185e49f6b9a92bec40018d0d911a0
SHA512 3cc4ef38d091b959f505437d9ae5228c259797eb204ef062eb234efdaca8a4f8cdaf090b058bc33a0081a4a03227002ad257c0281fd3c81efb15fcebd00e2d1e
SSDEEP 192:NmGWnOiR3nZXl5qdXS1E/JqysPSbse5d+94pOodOoDFg9eVfZxycMqtuw8xZEAzF:cGWVrYXS1oJzslMdhEcdg2fiYAwIEahT
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\es-es\ui-strings.js
Size 848B
SHA256 b0e392fda549700842e887fb5fbd94fe977d3cb2c4ce4e40a9fada8296dae261
MD5 9e0f6b2adeed7e4f1b49ceb051543703
SHA1 e164a40c3be1ac79c60c8016f0daeee47da5ebfc
SHA512 1ee4448a2a02589de06fb2893f328d1e937f9e6cb4d1f24d90f6b89456dff196ec07ad97cc618970eddd88018ae797aa3e767fa879d2a7eb2c7482c47fa9d6cf
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\root\ui-strings.js
Size 17KB
SHA256 6865afaa2c322ef5fa2692154cadbbcc9cbd8fceb0abd9000871f546579e5b47
MD5 28d9b2d62df16f72e66234cb85d1c034
SHA1 34dcdad8c3acb69e9438a8956b263a9b65811e2a
SHA512 0dc2053aef6faa9588f770612724093f757eaec9dda7982aad636ec1b6a7a1f84086139121c1757177930dca00e62cbf22ee29361b679954c3272807a3ec4d8c
SSDEEP 384:cMjDs6l0SctjjvkBKdL0I32Og4ICAMPB9Yeki6TwMXibDJ2ohksPpSt0:3Ds6l0SS3cUL0KQdw9Yeki6kMXi3J2LM
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\ui-strings.js
Size 1KB
SHA256 d82aeec818fed39332b7ef5112c7abeaff5f84afb5f5dc299bdccbda6233dc74
MD5 f77b9998725a92cf51c44e9db5692fe7
SHA1 f0504f4b4d8571a1b4d228012ee362326c10a90d
SHA512 b5c6fef20c1aafefa71e54611414e47e3ad36046588361ea545bddf9e0558a674939e322ab43c8141af9b227c310a76dba3d12d2d861910295d38653b722b6b2
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\he-il\ui-strings.js
Size 1KB
SHA256 2c8c733d3ccec7a421e45341e54cdce2715bdfd7ca7d92498581f2d52b06e98f
MD5 da362965728acf5cbaa75a6f2805f5f4
SHA1 e17f1e7b0c60e939443cd5162b9cc79f68c49274
SHA512 373b752277926259593427d830ee18cc3248cfcab49251446e2d70ad49deb1dcb47518835dcf8bca9d077f70dddf29ca45aa2df6ae5bb73e08576a35b13a30c2
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\root\ui-strings.js
Size 2KB
SHA256 fde1b3cfff06250ab26dc519f1ab289372830a46c83592c27add8007ff232c6b
MD5 c16e256eac2795e1bad634b6151e342b
SHA1 133266ce7c6e8894d8a136a8fd9dd547204d3822
SHA512 b07f86c37209658bc9c40f9a212b46519d2e9e8d4a14c0cf2023ddff58e90cb1d99b5d6f1e7f0c88ad385720b20916fea3e722d7b3d0e8ec311ee0ea495d1da2
MD5 SHA1 SHA512

Submit Download

s_remove_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\images\s_remove_18.svg
Size 711B
SHA256 94f76b160568e3705f1e0d2d6ff3ee6927bd812032498d373bbcc516af2864f7
MD5 8bb62cfad37334a15129a0da2091d472
SHA1 a9f223eb2bd355c8cbf7d17db501db834f39cb6c
SHA512 da08c15accffeca9c1ec985899ebf234aa881546dfb80862c72bfe206dfbf92772582ff87c0636ca0a4cdeeb03635de7a24aecacba86e22683a1d689724d6dab
MD5 SHA1 SHA512

Submit Download

rhp_world_icon.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\aicuc\images\rhp_world_icon.png
Size 445B
SHA256 42c312aa2a038ca54e9a6fe4bad8c9c044c35b4c5f421496f289c00c957d7591
MD5 ed537606a39879a091a8c085cf95ff38
SHA1 86c73d85094efbfdcd80abf119f03b64a71cbd0f
SHA512 fc331c2e1ec84a6a83b51f365484033b3069d73c5987094cf526c45a92c3297df22fe2a35ec20382ed4d563ee604ecbdbdf17fb735f7e0118ab444b4d5db8e9d
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\aicuc\images\rhp_world_icon_2x.png
Size 611B
SHA256 71039e6370f68913e67cb8451d3127c22d3e1045ca644e4dc9821e9f6f6899aa
MD5 37d179c947c13f64b7b6356f57441032
SHA1 9d1c1bd0c370336c229baeb2cd7f80d7b3cf4d0a
SHA512 3034a8b9694bbde20be0f7fa2596fbca8fd3f1e45810b15a5cb1a2bc6f4ef852afc36639a56f82a4e582d74684724d5c4ee43cbf5e33c94c6cf00b3c059757bf
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_hover.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\aicuc\images\rhp_world_icon_hover.png
Size 388B
SHA256 8bcf53efcb1b630087d4cfcedf5e48a7abaa9c71dd13745eedfd2c7cfa6827f5
MD5 6d8f7e9751f955452a9ceeb815456035
SHA1 e6903b2ec0f2c5632d4288f88d993d4a41f04527
SHA512 c869a94a224bce8ed553f5a86ffdea6d8a279e06a1c060b311cc52e4538b89e07fc0a4a76f85a28e2f62e8629a7c67101e990cc12bef2d0e2d6d7d3c1d4d7d90
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_hover_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\aicuc\images\rhp_world_icon_hover_2x.png
Size 552B
SHA256 87da831caa04bd303918a32265830ff97648dc8adc18881ba14d1cc1d28cde85
MD5 f364ee8508831e375004ac82b924efd5
SHA1 b04bc510ef53760bdd22ce0dd9d2e2f248c16df7
SHA512 399b2da615c0373214e3cf421f502fd0de02bdb9473da644e9f23df9ea7fc792da7d36bde61a456c2451276f74877232c8bedbe55e57098c1ffd13719206bac3
MD5 SHA1 SHA512

Submit Download

rhp_world_icon.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\aicuc\images\themes\dark\rhp_world_icon.png
Size 388B
SHA256 854a09f1f875a3a2e6566c593af465c9c8a3aa9b9112eb755bb09cee76224a63
MD5 39be6b8bd8dce3ff5a1c20ac41ba993f
SHA1 a49d8a0c769601bf922c8aa1673bfd3a92d67855
SHA512 9fd5d4f02aa9d24ce9591ac0542d0abadf2b26208c3043220d2a0f036298199131ad804f9be20c6cc67f39e2921eebec65efb3a1e435ee7318fd8591fcc2fa2a
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\aicuc\images\themes\dark\rhp_world_icon_2x.png
Size 552B
SHA256 bfef65c62bfc309f698e8e0b999edfc06ad272b87d805f183551c43f08d704a9
MD5 b34c8c3b8117b038839beefa0df5a7ce
SHA1 c8d1e8eb4c71d5aa02e36fe3b7365374a9e4e32b
SHA512 89fa9f31f62c6e119e6280dbc475c35dd7bb37c27457732a0b1cb04809a35fec44a12ccb6a3a626586d596a0636d754a9ff79ecd9ed739c5c6edea50738a60d7
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_hover.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\aicuc\images\themes\dark\rhp_world_icon_hover.png
Size 388B
SHA256 a584379ebf9aa0d3c0239edb7e1f114f01a9865f01c68494d5f28d410ba8d873
MD5 2ca9f57d61ed45337ec4e6565480367f
SHA1 fa06ed14d72ad8ced6ad98a4e223bc80cccc5e75
SHA512 83a172f2f304b2f634c313e248b62c11b7798f416872929ef233134bfc4ad8f44b1b4dfa123e8378a233417e1298a73088258f5671ace96ff677d1f26447de87
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_hover_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\aicuc\images\themes\dark\rhp_world_icon_hover_2x.png
Size 552B
SHA256 0e0084df79ab98e5df48ed1e01987f7ac3fcf4a038dd5453708d868f73a073a8
MD5 74af10749d7f19d15c8dca65a7453415
SHA1 dc96d9dbffe472600548dc64c724055e62620d8d
SHA512 83d190bf6f9cb77894e7aaf84029c40a2a0335e43d08062ca2275a2cb7a784a29b3b7b8be820c7dfb2f1458ab0528fcdfe45f05491be673b30495e1ed916999e
MD5 SHA1 SHA512

Submit Download

icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\my-computer\images\icons.png
Size 7KB
SHA256 a870c4e9ff6c433b5583a8f09fcdfbe712241c7e7d64cd59a10c2ad592f64fe5
MD5 d3963e6fe853dbd9d22f794d5ece4c48
SHA1 db35a3e565d0b6dca7ad243443a5560a1247eb33
SHA512 fe60a1b2a20d3c11152df2d6fbee05c3d6b80c89486d258dd6d318c3f89deef3e91a116c502c117d79a5020489e394194310f5c7a7ea3d4b7d284ca5a3e43ca7
SSDEEP 192:ElLtuF9LXI/1SEyrQk2nAZho0MFL7eSAJ0bOk:ElBuFFi0QklZpa7vAJ0bH
MD5 SHA1 SHA512 SSDEEP

Submit Download

icons_ie8.gif

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\my-computer\images\themes\dark\icons_ie8.gif
Size 7KB
SHA256 d6707a7a393687bccd92de05cecbd746be791f3a670cb4fc106252f49d2a0a2a
MD5 d4585d0ccf35ae69b1246339cfb46b90
SHA1 1fffc3492684a5db89e949d2d8b612eabb38994b
SHA512 a85560cabd3ce3dd21177948884a921385c0325b431dd281edda61d3585a69ceef28cb339c5a88d167597451ce22d54828b03d69823b5737bf3e253bd9bda9f6
SSDEEP 192:PhbJmPneo05p5xzt6/nuca8AQBE33rA8oIeUJjLd0VZyWtCmy:aPeoYhtynucBAnJPC3ty
MD5 SHA1 SHA512 SSDEEP

Submit Download

icons_retina.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\my-computer\images\themes\dark\icons_retina.png
Size 15KB
SHA256 8c659d0904687a97d9c6b649e4b74e99b286265e92252908824efcd07f956b66
MD5 7045217d47de04c1d72eea7413b780c4
SHA1 04c73e38fa17d35a1f684577cc79d77615c09e02
SHA512 abe433cb154598ad2c0de6070d6e75bb70274a58ce92007ce200201f788553517bb579b0df5cbde3b4f2bebdca1243f0e54836d125d72ea206b3ccba1d15a385
SSDEEP 384:DTPDm+LFPXcyFstgrNz9xhWeZ9I3D73sY8mgivkTTAi:dNsrgNz9LWUC3sYJg/T0i
MD5 SHA1 SHA512 SSDEEP

Submit Download

new_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\my-computer\images\themes\dark\new_icons.png
Size 8KB
SHA256 a311b5a78e1b856505337b90e53edb4ba380160234e1b4e8801c231ba8d590a5
MD5 0e366a48bdf6a3b140508e56eed0bf0f
SHA1 bcd76a4a537fc00d8c468b9496d3d5b5dd6a2a7e
SHA512 1830e3e260a50f79553673bec5775c0ba623284d233c25a2da016f273e67e218f5d2f49bed5f9e68842c7dc14b852e979fbfc7ed336f9a34dafd04a48742f827
SSDEEP 192:1fiztrHb667LkI4YQsZt+MtRwQO2VHjGK84JwWvD:1fi5rHbTnZ4ct+M7Vw4LvD
MD5 SHA1 SHA512 SSDEEP

Submit Download

new_icons_retina.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\my-computer\images\themes\dark\new_icons_retina.png
Size 17KB
SHA256 f84c7c93947e86e2a499117d4c55910de9fbaefb6d703a8d0f90f4867c69c182
MD5 28a435033f504be69def6f9d52efd2b8
SHA1 6f50318e05b79851a445f98d4b3ae3d65feb22ad
SHA512 a2b410bb6bb328eb1e3af794259bacce7918f44698c8145fa530af9be6bfc22a064c1f0ee5d7ce289f4a60a50fce9b56a720793d19ec477340b1d7ef158df6b0
SSDEEP 384:ritTudjWCCmQw5bOualkmv6K4F7m2hDNWzpiyc7Z2dLva1:K2armQw5KlkZK4F7m2h0zbA2dLi1
MD5 SHA1 SHA512 SSDEEP

Submit Download

bg_pattern_RHP.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\my-files\images\bg_pattern_RHP.png
Size 179B
SHA256 041917c06c638a1b1accaf0d2f0b2a6dd335dea629de602e104553024d822ea4
MD5 117ec36a5cc6d82e63e8b3beae4a3099
SHA1 4c692192be53827f8ec8015ceb129f6e0f89e923
SHA512 abb02a02a9161ece12464020676e880f1eed96b43a9dfd4f7ca06dc203fe633b0a712da5f151d36a5644d65aad7b2880c135df0bc42d7c1e61b44006807a8c9d
MD5 SHA1 SHA512

Submit Download

illustrations_retina.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\my-files\images\illustrations_retina.png
Size 19KB
SHA256 8b32854c17056ea617a680cd26ea91015e77d68260f656758984583eb6895a87
MD5 ff84cb8f89545b86e32abd27a9694e1e
SHA1 3cde537531f8689772bc9eb39a12c687da5d5225
SHA512 2690d712ba02fbaa769689d0eae380d0988721c6fcb710e04e1e2aba56496cb58f5d4168fe75540139afce179b1250c2ceb11fc4c3d589a3615ad20dccacc8f1
SSDEEP 384:VQZMuIQKqkiGyYMZigO5RNclX0Gnw9Napau2JjhlBT2i4upBDWudqWh:VmdkiLeNcxy94ghjhlByiZv5dF
MD5 SHA1 SHA512 SSDEEP

Submit Download

bg_patterns_header.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\my-files\images\themes\dark\bg_patterns_header.png
Size 703B
SHA256 a7cdf870b0b1b8459e94ed25a29daa87f5e9050294bf6cdff3bc72f93b928f94
MD5 ccc8d470e94b3441e41521572ba86ccd
SHA1 d294d7e78b596fefcc8084fab7917c54d3043e27
SHA512 f3b2ca4d3160a089f6959b7c8e3e6c213c0facb2733f7948a7222196d3bd8c7350015602569df2cdc7408e38b0ff6700306d7e3439f0892b4d13d9f2d5329e42
MD5 SHA1 SHA512

Submit Download

illustrations.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\my-files\images\themes\dark\illustrations.png
Size 8KB
SHA256 19f68990146444907956056019aaee514c522c3c00ae00604da44a1bec2f8f51
MD5 f6e318123e7ad5933a49669eb035c737
SHA1 ed8938fa3c13af75978bbd0bcdd3e8bd40a02004
SHA512 b2506a283dbdcf40ba0cac63b4fd0249463218cc9511ce52cae5ab8c36706090fc1f1942f1082204dcdad5d80e7b655d9e12326c820ac21f64a508999e130743
SSDEEP 192:MXIq4QWGpHcwscvAphGaB13wn49aolkLN5FJGBtxf7qTF/jt:M14spHcy+rg11alfO/Z
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\my-files\js\nls\ui-strings.js
Size 1KB
SHA256 d74c0782682efde01c1c30e46814256f7d16d7df00a7167d90f2bd55ebaab626
MD5 d59d8ff7aaa17ee875adbe48b7a77e78
SHA1 7405acc07f6137b7fd9575f99a2b4354135956ef
SHA512 63fc8bef9e8ef833e45d99f954a9eb99d6bbcae39b2eca8a7000ac11b976cdd0ce0581e5e5e6b2f1bb2bdc911e31690e503dad945f0a3ea702dfe404896eded8
MD5 SHA1 SHA512

Submit Download

example_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\pages-app\images\example_icons.png
Size 683B
SHA256 57804748e775c08ae188b4d860f31e4482ab99b44ed1d8489780daa6756fb11c
MD5 a0522ef468697e74b90c444ceb4aa17a
SHA1 31fa5bb9b4ada150c9001b6e9f3213644117187f
SHA512 bbb91f8b3c204c4c04da2ad635eb18e9f224f73395dac509c438c0a645316162b6ff78e03e7af76d5da2d9e84cd0c4b5e9db1d4dc08bc3f524bcc55c1f4dbbd3
MD5 SHA1 SHA512

Submit Download

example_icons2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\pages-app\images\example_icons2x.png
Size 1KB
SHA256 7a610114be56ff131462bc67f9a23bcd4fde4fdd0158691448ab9e4a3eb2ca3b
MD5 99a1fefa123aa745b30727cc5ad50126
SHA1 c48f74cee78f8ed8463634d80c4112f3e12bd566
SHA512 504800f03a4aa57c1cfa15b28542382728b5f3dd85309fe12ebfd711980d78d15d8241d5f54956ee41da2cd65203b7764ab7b15119457b74ebc07fcf8e55a742
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\search-summary\js\nls\ui-strings.js
Size 1KB
SHA256 196c132938d324c62184ddc85bdb1cd642af830712e0fbf0fb3230978316d510
MD5 3dde11f8594519f004ded2687db9b90e
SHA1 fcf1854df851616a25d7cf1439a9120b16902420
SHA512 adc2cb3a37dbf5fe2ae79f5752c0d38d2427a95e333e848ffa113046f630eaa967b3cb29c049dcdd9b921d57e23392562d779c24207f770aba6e92392064f17b
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\task-handler\js\nls\fi-fi\ui-strings.js
Size 823B
SHA256 b333de3a4a7be7749b82302085ed26ad868f0f8eccd09d2a8bb8840414e624d6
MD5 5e884e2f05ac036b7a6cded3efc2ea2d
SHA1 807c1cf1bf0943404601b6241bf4bcf9fcc29c9e
SHA512 6665aa6fa35e05d01a4a2312a93faf52d6b39409bfaa861c187b0cc2fc51e74aa253ebf56061872d548cb6d3d7bbf1f7c2568de81e5287e0a1d6591c1e780f15
MD5 SHA1 SHA512

Submit Download

home-selector.css

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\tracked-send\js\plugins\tracked-send\css\home-selector.css
Size 802B
SHA256 af439ebb0d55750003f7dbec517e7b0b26a6a0506b21e3b74d800cd1c7faa004
MD5 bfeb063e064c71e44ce75898e79c61bc
SHA1 c4dcb4b6814cbee53b415a2a5df02fa500510ef3
SHA512 0835ebe63867fba6d69a25c83dca767ffd9c57907ba76d9c71012be18510e2145a358d37c1cf4e4ad35d1cdd4f67ffd5928e70e18a376db607d8482356f12219
MD5 SHA1 SHA512

Submit Download

bun.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\tracked-send\js\plugins\tracked-send\images\bun.png
Size 2KB
SHA256 e34bcd5b8436d3bc45f98dd913d41f185c6b06326b66937d6e0d5c6434b16fe7
MD5 4c27ad089d04cfefd979d56f2a67b172
SHA1 63289f9198ee4553759b07de7a4229ad370fa976
SHA512 23f9283f769fd310dcac26cac00d2eb033763d73bd45b0d148ea1ec3a3c75b073572c9fa9234699372a7e1caad7fcde7629d004815536df1d39d291f2d2d96a9
MD5 SHA1 SHA512

Submit Download

cstm_brand_preview.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview.png
Size 2KB
SHA256 237a70fe0388ce6884f5424692c460625691ef7acb0bf80403ec6b25f348b94a
MD5 61bd39ed095fa82ffd334fbd7982616c
SHA1 51af9c2cd42743c5cf81200e0fba3cfaff801885
SHA512 54dd8e1a5c19a9d51892a12e9501b7f6f69e09e0c446ec36f7ddfd9ad0d9cef52604ab2f8071c71ce63989510a703f1cfd5492e1ac20c8b37258ba21f8952400
MD5 SHA1 SHA512

Submit Download

cstm_brand_preview2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview2x.png
Size 4KB
SHA256 03bcfd7fcbd98e48b1954f912ecd66ce0bd5c181da0c2408beed01486ed23804
MD5 543415ad8ba14db1b75a93a551a4abfc
SHA1 3d4737451e899240fe19daa07f3c58ce9a623631
SHA512 7c4bd1cf6fc8d7aeedb1c666ca45c95615927fe76cad3d3c4f4dafc987f4ac04f527ecaebb3103f593eb080302e768fcd77739ce8344ff2e7ec10efdd1113cd0
SSDEEP 96:PLzHZxtvMK4G74Hym5L0kM8360mEPrXFeQ1lPdZFEZG:PLzHZ/MK4GUHyaPVpFZCZG
MD5 SHA1 SHA512 SSDEEP

Submit Download

dd_arrow_small2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small2x.png
Size 385B
SHA256 223f32512aec50c1c00fafc476d8e4ce61e79aa748c67b72fe55514882a31a5a
MD5 c789d387908d7b7f21c6474a86e84019
SHA1 1c36fc6954178c43d9249a5ff3c7246057c6aead
SHA512 1cab85dff119b591046049b69b6208283ca5e009d95129bb407df2768c82da30fd2af8debf6f1bbd91f37518538f3ba6bcda32b63d1d278b56fdd1f5f93439ca
MD5 SHA1 SHA512

Submit Download

nub.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\tracked-send\js\plugins\tracked-send\images\nub.png
Size 1003B
SHA256 2e187b74e926afe70eafe0648c7125817e99f5586eee3e2e05446e360d4cc1bd
MD5 c5aab3d175e0a3753ed2c3bbd7b929c1
SHA1 3ebee0101ad62449a67f506df9c8e7dacc39f877
SHA512 e967020462477c3e9465e3383c544cf468dd89f4da084193634f5bcdc001b90f5bad3f4f6dda9e95ebe068108986daf41504e02331f4922ea25e7ffee1f27040
MD5 SHA1 SHA512

Submit Download

share_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons.png
Size 1KB
SHA256 c25d9409ddf9645c2731ec785cacbb7568005bfc78fe0aec7df3ae3c4d30e333
MD5 808971f45b803583d9d1f812803d81b7
SHA1 0f6aaecba7c976ed8c2f53782b3d3148f41b2905
SHA512 121e6b01125f9e9d4894f7d498bb4d39ce676ce51e29cbcd148e0c1feed46fbc58267cea7d5f66654be831dc479e4643be8b28b005467309b7df5cc7fbcd0dbe
MD5 SHA1 SHA512

Submit Download

share_icons2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons2x.png
Size 2KB
SHA256 537ac64cd204d7ef82cfe41c932deb9cb1ae738b2156eff4dbf73208384c0a13
MD5 ad68c0b141ea1dbfcadb540c1817289f
SHA1 548a46167f7f5193c5a1335753bc208bf92aa504
SHA512 269ae39458a9f30351166f304825b777f3ff143b7914b98e83e01600fa04c7790e6e813466c2a1c5396ce13cd2199792905cf0baba1cd28a420440efce0843e8
MD5 SHA1 SHA512

Submit Download

dd_arrow_small.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\tracked-send\js\plugins\tracked-send\images\themes\dark\dd_arrow_small.png
Size 289B
SHA256 d188ab283c552eee50677129f3b0ffd8d97828c4e7007bea258174c9a2200e87
MD5 36503740756a442b7be294947462be83
SHA1 a1203ae869deb46f59a3273f6d130e7457bf5321
SHA512 6ff98b15c7d757dd351bf50a1c4ac759a73fdafe03d5fad506478550987d0ec016ba9e617c099e6bf7b0263846eddc4eb32cb70fb1fbbc1189791defe556967a
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource1\static\js\plugins\tracked-send\js\viewer\nls\nl-nl\ui-strings.js
Size 840B
SHA256 434731fdc6d2f5115c5f7786ac989fedef7d0f60cd2ad4385cc98f6d2160566c
MD5 32147da1c647161e45a1004eb1b16349
SHA1 a953c222cce91729ebab36bddd43bd5a795a69cc
SHA512 8c825f8d38519cdac2a49e4ee8a9564ae72839199562ce9acfe72b4fbb94f8946775054782cf26a9566eaf8cf944a26e42b7b372c4e7349b33a8e17dcd13df94
MD5 SHA1 SHA512

Submit Download

DisplayLanguageNames.en_GB_EURO.txt

Path C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt
Size 32KB
SHA256 aaee2adb1d1e0a37e24a266e9ca14bf42254a510349b956bbe30bd2cbd37da04
MD5 f67965384b82ba488cff6522e886d6a5
SHA1 e1551825c62c1685befcc4499c97ea61c077f608
SHA512 32878f893b54a9a28c2c9c4e3f8533478333bd53900961245ab75b66a56f78359e30ce4e24a64707a30206cfdbf4421490033c0dc5767bb3b57b1f13e1d1584a
SSDEEP 768:cbqgAsjMIzQKJdsKTAptC3Ir58BjLPkvDtnz93+h:cbqSjMkRfsKTApY3Ie5+RzxW
MD5 SHA1 SHA512 SSDEEP

Submit Download

external_extensions.json

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Extensions\external_extensions.json
Size 112B
SHA256 b4047452b9f7cd5910d9353b69647db7c6a7e380a26e24b3ae24fe94dddd4c27
MD5 31775a4140790d7985a8b0f96b7a06b4
SHA1 635dffd40597c7d213d2f3cab7012247983405ab
SHA512 c2beb08ff5836e323c302f5efcd2d852b1b69402648193119dae3ed4020b596933cf213be77317e8288d7dd3458c7e016e14397583478b9154ff534f88095753
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\MEIPreload\manifest.json
Size 240B
SHA256 00f419ddb7cf8dd57a76d7ef40b5976e1e75c2bce30024f6bb30647a7284ecd1
MD5 6eb50462fafe2bbb6eef090fbb78435c
SHA1 7ad5cccfc13b14365ae16f690bd6b259e22ef6b3
SHA512 504ba260ea460b6c699fd39549bc0e6f33a70d7388f478104e55d7935dbb04b1d73f90819b52cb7607695498b52bdc590562dda23e18bdee6d695a01a8c072d4
MD5 SHA1 SHA512

Submit Download

vk_swiftshader_icd.json

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\vk_swiftshader_icd.json
Size 112B
SHA256 d0bc71d8c33a6e8090c3ee9843b104c00cfd63d286c25a32b92b06a09a67dc55
MD5 dfe25e3665d81ad6b3d15b3a1a8658fb
SHA1 0650959f29d18d73224f65203718cd838e63cb42
SHA512 116e5e83d410aa72cf881caaee996d14001880211e31fb9ccd3915021dbde5a811c0a70bc3802a9a95744ce13ca193d9c223447747e3a6f8592e87dcdfd3c40e
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\AdSelectionAttestationsPreloaded\manifest.json
Size 144B
SHA256 29605fc8aa9d2a342ad12654c3d846e002976151e209abd47e2e2f15fac5ccd8
MD5 d26b9630fcfb0e3325f2db716d469c6d
SHA1 9921dfbcc1db215fbd260606d60fe01bc7f33ed8
SHA512 079c3b0edfc04f77bb15264470d0aef4628ce96ae7d38dad0b1ddff45c3a13942c3b1f4a963d2fab209b4394cb5a5d6db3421a23cda659aa83d951b26edefb05
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Trust Protection Lists\manifest.json
Size 144B
SHA256 93f534515f31361ca170da2b4a61f4fe6397d10aee4031556dd7448295e10ed5
MD5 811f69599d9aa6b856e4b61c50030c2f
SHA1 95167be1ea7ecf6616663990510187e1103a81a7
SHA512 60d05c4f89363f172d7f73f9fbabf8033f8549198eb73d1dedc644305b6922d50892979c4f68b7b409b0c8eada1303fa394d41aea0c72847acd586068f76f8b2
MD5 SHA1 SHA512

Submit Download

Logo.png

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\VisualElements\Logo.png
Size 31KB
SHA256 7cc8fd14eafe8900713f0a29d9f0b55d99dbab22f26cebbae4edcd59af5afbeb
MD5 28881971a85f48d97e69aa15053d6bfe
SHA1 bc24e20149c856f3c30e835ff89fe80db20c5f8b
SHA512 b0308adfd552ea0225c22f5ddae8129d016dfc4aa46ca1f8bb1816f29bbbf33b355e280d57fefa25ec4b50e50da520b5d8a32b75b27ad1f24add1c981a6f1176
SSDEEP 768:GSccBLO7WMtf6DiTRQw5eCPkiydR4aXWHh4beLIEDY8t:G/cs6Mtf0uTNydP0h4bepDYW
MD5 SHA1 SHA512 SSDEEP

Submit Download

LogoBeta.png

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\VisualElements\LogoBeta.png
Size 29KB
SHA256 72d597394a2dde80c18e1d1a92930d272029c6f03d8ef88702e3276a0aaccdd2
MD5 d6047bddb8200e472ef1f5c11c6fc16b
SHA1 8b906b4603d18ae1c414c37183019b8226eae90a
SHA512 dcf95cb65083ab1e19725b1de1876e019cf544c835af6ea6b31d2ae162e1a1fd7ff6446a615c630e37c6c1baf552b02700ad83301bfe46d470043a6cb759ab68
SSDEEP 768:JUq162sg5S2FUIYvVKXPyfBysfiUkJfcp:JUq/z5YvVKKfYs6nSp
MD5 SHA1 SHA512 SSDEEP

Submit Download

LogoCanary.png

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\VisualElements\LogoCanary.png
Size 29KB
SHA256 a13f5c1706280645c03a18574a963b1656aa3376712b78d04fbd285863814957
MD5 4109c6555e6eb1698af3921921641175
SHA1 4fa3bb9d2dc002480ab7f105085d0346c837087b
SHA512 98e960349f88564caf5e41bf4dacf61d319816a85a3bd9d42e10d2ae4cde58d5edca62c322177a4fbc7f35a1edce5fc0e15a83e329633a6afd4452cf8a08c59b
SSDEEP 768:vkTJ+V8x3rSGXPd2fHEzpSzKx1adN0yKMAxur:vwT/Y81Sz2sN03dur
MD5 SHA1 SHA512 SSDEEP

Submit Download

LogoDev.png

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\VisualElements\LogoDev.png
Size 29KB
SHA256 60242e74767d724d601ef91c4c57c88be6c0aacbfa665c3e23b685f60bc2de1e
MD5 113db144a1c70af2eebddb167e0dcb46
SHA1 b45174540014e7684f67744007b3ccf87dd43e45
SHA512 11716940fab31453a94809be66906e7239d7e445090b62ca2ce7b324a89c1f909f301e715af161cf7d5917cce722074cf17ab09fd5b8b08de03f5f4b1aed2889
SSDEEP 768:4lwKdopj5Qqmb55GG5YgO/SZHstqYD+CPYXvrorB05kQ/c16+9HTNDq1m5:vZj5QLl5GG2j6ZUpAXvrorO5kQ/c1dz7
MD5 SHA1 SHA512 SSDEEP

Submit Download

SmallLogo.png

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\VisualElements\SmallLogo.png
Size 15KB
SHA256 b168798db77f391d74eadcf05fb65ea62ebc56dc1837ca1cbb4f285b81b075f6
MD5 f129d8fc87eab6757d647c98dd639742
SHA1 7c7f153abd04a7f4a78d93d2ac94eef021c01c6b
SHA512 5a67bb1d8b7ec3302c1ca67bbda5cd43c8b7734b5c952cf59c59d9dd6f8725d7b19dc32981ec0f6a1e5c58c29e2668315699ce02c45c45c5d60eb2c2eeb8021a
SSDEEP 384:tl05IoEMiB4iNKQPnFNZ1KZzeIJWA0hsH7:toEMi6iNKQPnFNCZxJHl
MD5 SHA1 SHA512 SSDEEP

Submit Download

SmallLogoBeta.png

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\VisualElements\SmallLogoBeta.png
Size 14KB
SHA256 aa4212931210cd500cec07084eb3a5f562344e161fcf68bf66dfdad18dc7d2a7
MD5 ef0db0479d9a3a2bceefddcbec1f0c52
SHA1 395770a6e0a272c03fd137fe5407642c98dc3fe7
SHA512 5a3225a13d3d006a894230ad8b4fb5fee833c2bea205b6a4e3e4b28f6dcc83691263c615a49de37c97efc51806e64112e52bbefa34bf468da3b7556d0817649a
SSDEEP 192:zqdy8d3koO21QqqujWhKxB9hzt4I+Z+5fzLGWswYD9FOYbPUEXIYrph/kR6Nj+A8:2E81ZOMqIB9icJlswW9FO83S0z3YKcRh
MD5 SHA1 SHA512 SSDEEP

Submit Download

SmallLogoCanary.png

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\VisualElements\SmallLogoCanary.png
Size 14KB
SHA256 7640150bf9d4c7d5746f59e7e1a089f78edaefbbf194dae22a762ff7777b281f
MD5 303d5d174ee8e01bd8d6c6e4005ee8fa
SHA1 60ba6cfb0232a7bd9cfbb17e3b057e24d5200609
SHA512 0579eaa0f1779b585276a28ff8b78e76ab036ba395e453fd7991603e38238aa5564f9a16188d0445d3bfc004ba65743b29be7fae84b3c31f9732eb038b97fe25
SSDEEP 384:LMZzVu2UciS+AuULkkC6kdUIpNGIk4bvCj:LWxiJAuNkC6khpN0xj
MD5 SHA1 SHA512 SSDEEP

Submit Download

SmallLogoDev.png

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\VisualElements\SmallLogoDev.png
Size 14KB
SHA256 001c5f435a0f4a1d1644dccf234afc0297afa4dfec23f1a59daf74db0786aacf
MD5 c50ddf3a993667b019cbdb61229bcc73
SHA1 72e15cba82bf0913ef0f47a13961a51b8ff20d68
SHA512 8395ba19c0fc48b0af4d519f995bfc5abc2c5c36a1ea98d750c4537a54b8ae9b5a873cbe89b25970254a4820a12cb7d51896526e17c7e52e593e3c994fa44778
SSDEEP 384:wsOkMwZhZX23wVDKz4v4NsEvpLw2wNaPGL:dHrmgVDA4AN4v1
MD5 SHA1 SHA512 SSDEEP

Submit Download

manifest.json

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\WidevineCdm\manifest.json
Size 1008B
SHA256 cf4e01e5d7c3de2be27ffe8b0782dd1c3790b7e6a6f8f27b6be73077f641b401
MD5 1baa3efdb5640624b60702dd25f353fc
SHA1 78c6f6bca9ca38083f08999f1e246cdbd62fb25b
SHA512 acc8de5c1abee387b51216c86ccc22f14943cd3b5cd4c084f702559846b72d32b88803b68e450b12b72f8c9ee12a1240134c0911d4910536192e4b804f8a18c2
MD5 SHA1 SHA512

Submit Download

DECRYPT_YOUR_FILES.HTML

Path C:\Program Files\7-Zip\DECRYPT_YOUR_FILES.HTML
Size 1KB
SHA256 70a8ea5f77a2c4a335e0e2095e4aa10ad0dd13c6a0dd3ebd9ec4817377d72d63
MD5 88c18613c78ad4af0f83b58f2b48743b
SHA1 c15cdbcb51a67ce539680d9ae03a71be6403b5aa
SHA512 3388144975650e8d2e83e08c4f72b5da21ddea7559489f07aec241c3fc5920dfe5c6bd9c8583e901ee263922d2cec4f9b9c43df3f7dee413bd4092157da66f6f
MD5 SHA1 SHA512

Submit Download

win32_LinkNoDrop32x32.gif

Path C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif
Size 160B
SHA256 1e8ebbee67ff4964a6a1bcf859aa83754e82f4d6f6e231d128b1d9643ae003fd
MD5 6278edf7e2a8d92028c77e8257ec4c7d
SHA1 129518b47ab9ed31c95f015aee4d25d68f4b889e
SHA512 fa8a3e9275b5d358ef70cafa95540b8e145c3d6a8056e7458cc9b26c1a0a7c44f7a0d68a10d2dea75d240bdde5fd286206fe552d28da66ae27d3328631e632eb
MD5 SHA1 SHA512

Submit Download

THIRDPARTYLICENSEREADME-JAVAFX.txt

Path C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt
Size 192B
SHA256 cc1973573e295c22b440bd17bd7f9b785174cd78e63e3d1fa2d9490f0b43501f
MD5 ae24f4a48739a0c6da962ea6de8c09d9
SHA1 07ed8bdcac43b326690bece8a3ba3398b5e4c497
SHA512 fd007fb9b64551f49501a57f22291984f31a2e13f5f0789f7884b19d26e02a2babbd877aa462c4618d95f539a65675740b53ff4ea5435e7ee2a0deb021a2359c
MD5 SHA1 SHA512

Submit Download

THIRDPARTYLICENSEREADME.txt

Path C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt
Size 192B
SHA256 fd2dd28931722f49d5319c71c6510eed048a71d74c3d2e05e67f515aa1f22af7
MD5 0cdc8133e5eb2eb1414627c5c64992a3
SHA1 9503e1ef0893e0ce0949f0d1ccc506dbc7bb853a
SHA512 a9cac5c21c7ae167c1f353e8be964fff166e6f66df17ba9e741b72b6a9650ee3633b23f9c73003624e2764820adcaac046595e781f42b53db2b31d10a085df69
MD5 SHA1 SHA512

Submit Download

directshow.md

Path C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md
Size 1KB
SHA256 b135d99ec35883b87bf6b6de46460e5efe188587cff25affd90fa85d16588ecb
MD5 ff61bdccae3e0437b233cf196731ee0b
SHA1 e06a5c65ba4581c39eb106b3ef006369d8c6b2da
SHA512 2c43e695b6c11320510c47d5f1e6fb9ffee16db4ebe59fd6a1b986289d0dfa181ef2f37a6bff8b1f2b18ae88ddef9e63de4ce214040e13d16ff8dff1980844e5
MD5 SHA1 SHA512

Submit Download

glib.md

Path C:\Program Files\Java\jre-1.8\legal\javafx\glib.md
Size 31KB
SHA256 04a3a7d0dc4e46600bcbb88ae8ab3ddf51080b43f296f06c141185d82090faee
MD5 75a7235f8ce3c3328f58bf606aa8ef5a
SHA1 05b1672f8d2f02205fab8016373a68408c62dac2
SHA512 dee7bc94153630e6eb55b6de6affbe8f312880443b0b3be21b4058d9f7a2bd1d77215a3e7bfc26be0b61d6275540c79af7cf7ad763dc2a22ee228cbc47a78397
SSDEEP 768:wUBHHuz7SrDL0+B935sSLpr0gETdZcm3KKgTtahRP6:wgui4kl5PZEYqjRP6
MD5 SHA1 SHA512 SSDEEP

Submit Download

gstreamer.md

Path C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md
Size 34KB
SHA256 a3468eb54a72f4ed0799c8dc26587c7e857ffc49c43e5aa5e3f4c2a6569c23df
MD5 d4e6dcf7e5e1e55127de7d1433c00ba0
SHA1 84248cc37823b2a4b85dc93e32c49eb62b398d10
SHA512 06ef1593a3c0c56354d6d81ab5245a2eff4c53a3b55faf89fac5f855145dedc0bd21758e0c7de5d4ab41d5c935aa5e03127b41ecab82c96edcf2b6e26fe51171
SSDEEP 768:iANVA7QJgJ0oP47e3r4uBA6q1wDrdztriIP8WwnFJizLZHv0zSYcwRp4:YQNof3ElhCoIP8WaLQLZ8Gtkq
MD5 SHA1 SHA512 SSDEEP

Submit Download

icu_web.md

Path C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md
Size 23KB
SHA256 ad33ef5589893284521c9cb14826638d1d517ca0612217dfaab63d6cce5b5e56
MD5 c343f4b6fbb083142c27f74bd2c44c6a
SHA1 df4bdb7ccbc9e09a096bea20c4928200e3e87c2e
SHA512 08a4e655eae391bea7ad7e0a03eabc257bbb4d115a4754cfbc64dbed64517674141b2505117861fed1dfd562021b8de630c84eb4293852fdbc4245cfbc8d019e
SSDEEP 384:QHXZuySv+MzLEmrn1dumdnxLkzz4MTSHP9f6hbv9LW1zJ9a2Uu6mPm0fecjE:QJxSqy1dugxLkgXHP+vNGK2UtmPRfecY
MD5 SHA1 SHA512 SSDEEP

Submit Download

jpeg_fx.md

Path C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md
Size 2KB
SHA256 9fb6c009bda1fbec657a5556cbfcf5f8bef415e230050354d537b73639c60805
MD5 acece989670249ad5d72dbf736bc23e9
SHA1 72928ac083284dba07f28e14e2684a31d9640972
SHA512 da715a2f63e20100e15680b951ecd879ff90a4d7426fccd58346e63faf69563f09fe7f43373af67fb1a53aabdd21e2d784534b5cefe392fa0a3cbe85656c784f
MD5 SHA1 SHA512

Submit Download

libffi.md

Path C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md
Size 1KB
SHA256 2050aeb62e5be5289c911b05f0d72f310bfb4b547326492a41c8bf3369ea3d33
MD5 759550f70db364107b6abc23d1619ab2
SHA1 e8b2eb85bfdded1828518c75117f6e156fe49650
SHA512 71cbc90fb5a7a42352e6aa7934aa5b503e57f3a8dcd061357e498c8cca4923c5dbd6608fdf860f460c3599c6ac7d24118e9a9f5b22df6894ec40f9b2003d6990
MD5 SHA1 SHA512

Submit Download

libxml2.md

Path C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md
Size 3KB
SHA256 419d7cb598bf189790e20eb0cbaa8e6ef73e4a93c46be01f03c46d020b679854
MD5 737f3e14377628368146bc5820bb9e41
SHA1 b1329539b969e168c94064c5911044f1e2eb3b75
SHA512 bf522a7653510f51355c52d70db3f173b3885513c8378f0e36ca143fec1cbbc6c5bdd557799d7c79b33e571a18a04ecb9facbc99e63039b41d1c5a71fa36e132
MD5 SHA1 SHA512

Submit Download

libxslt.md

Path C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md
Size 2KB
SHA256 17a459e8f9781a159204fd140d1c38df4b834269cc7e6711bc6cadc606a47fb8
MD5 8c709898cf2079991a77224b7b406a87
SHA1 d6ba05628ec8b5ad325987c9babc778f3c4f97b0
SHA512 78a437f03aea227baac5654379bc99ff6eae3c3c6cdb9c6fd7515aafc8c31191256ffcbfa2aa12edaec556cab0106ffe532261d7c61cb20e629b557333976052
MD5 SHA1 SHA512

Submit Download

mesa3d.md

Path C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md
Size 5KB
SHA256 6935694085ec2228e7d3c2ffdf32a390b84d54f1c01b14080d1e416fa887f76d
MD5 6bd454499b121e69fd32ffc7a4c506e9
SHA1 04c0456f82224218fd5fa2be2632e9f70b455d9c
SHA512 b44dd6f5b89b1448a5d58378896806b336aeb019db19f8d4696122a9e38bfe8bb0058f920212f5a06f4983331b4e19a830ed1e08b3d541e3f1f4ba5aa72d6dcc
SSDEEP 96:uCvjR2tdqoL++WxA3SjLqSime1Xwnfg2PBmGkzkBZEQqQKRzws:Not0A++WxA3SjGSimmwnZmJYEJRzws
MD5 SHA1 SHA512 SSDEEP

Submit Download

public_suffix.md

Path C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md
Size 17KB
SHA256 4efd74b8ff452b8bbda7b0d64b2a8498f2dbf6b15caeb2189c58fd620f5cddd0
MD5 b71e8c04ce142ff8a8c1ef60528f7094
SHA1 6e80abc280ed9bd9c6b02171ed348bf092709ebf
SHA512 ae6f9319b2ec68b070f9dffe69f95c99e62e3afa47d9d06e627811397cfc7b65166f135ff17e089dc33753d1ea32fd8f0b08432c906c6e1363266b739b3887cc
SSDEEP 384:nGYjOks3pBSPSOmCMoQBVh8GEpXZ5+ED03029yv/Wv0H/6HXTRD5zish:ha3cRmCtLZpXZ5+EDQ08dECHjRksh
MD5 SHA1 SHA512 SSDEEP

Submit Download

webkit.md

Path C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md
Size 320KB
SHA256 55ad4826abbc53334944b650d43cf0afe583807c432aa929dc90a0f94414e80a
MD5 b4e67a255f10cbccb79adb9a49725749
SHA1 ff055a249eceac91f096281b7252fcb290696b2b
SHA512 939b59e40fb5568aa8d06b04727aef25649de883b4e8e401279fcfb32fa3fc0b70a4cf5356f8d502d0808ad3a4cc083d9b4060990187a2eaaad4f6eb1aad5553
SSDEEP 6144:Nor3C1rhDjJckIfE8l8NICSDtiRTU/NlFpkT8taZVjKpdr+I5i2OA0wU/wRxC:aryLDNczfEw8iCSDIuK8kfy1+I5iuWY+
MD5 SHA1 SHA512 SSDEEP

Submit Download

asm.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\asm.md
Size 1KB
SHA256 2f99b0b0f0c1de67efff1d1b3f9dff3287b067fb0a06444f28e6fcff7e32cc59
MD5 9ac1899a7f5bc6d8178686eec5514f72
SHA1 a16315ce2d7c2bdc64ac37ac3e69cf592a5f5640
SHA512 44a2b85448272b716910f662759a49a250a994ae9b5f20b512f29897aea8a32da23286d844afd32fbbfe29c3d1b228ccd5bf41ee6baf427c7965fd65fee0ea39
MD5 SHA1 SHA512

Submit Download

bcel.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md
Size 10KB
SHA256 2db845e4046da958ce5f8a0fa2fb067f8c3de038b4cbb75de02afc0a370a0f9d
MD5 f792d2d49185225c6dc26142c5b07d08
SHA1 9dca6197df53f1872bb22189e3c507f52c589d41
SHA512 0cd8023744a89df193d447ca8f684584dcf4c87b821eedb20ec99d494845c0238f6d02dc538c82d9daeafd1cc5e152345eea655631364810a5026084b61bb22e
SSDEEP 192:itNG5NYpsXVXWixHjxJRB6VfsNu50/r5Z8u1S4Lb++P3jZXm:eBsXlWi9tJDMfsNPr5Z8uxb+4k
MD5 SHA1 SHA512 SSDEEP

Submit Download

cldr.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md
Size 3KB
SHA256 9f01c36b18b8778b8a8019951e45bf566ee1961e9cb6d03ba9e97f051d3c6902
MD5 0f400c6f59b4f2f6ab0236e97d0a410b
SHA1 41c978041a03b2037ec07426be07cfca66de56c5
SHA512 e52c5fcda18ba2fb17182b4571577a613428cc02eab415b8fce0301cb3860f20a4086df5a5448b7e6c08d7ddcd4587312c5db4de7311036cb9f446d75724eb92
MD5 SHA1 SHA512

Submit Download

colorimaging.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md
Size 176B
SHA256 8f641e52da5d5a07d0376b3c627be4b4dd897a74db22027616c2fb9b788a31dd
MD5 2865883a1e4fcb2432b2988ca55c0040
SHA1 fd15db9d2a886594c9d044a5405dd4f9cbd73228
SHA512 6956c7cb9b63c836feec08b98c4d950d164d7e2dea30cea18e63aff0415bd4f3ee9474fd4d23737fd480e123719c741f8ecf56a221d4e224d8ba3b31a2683ac2
MD5 SHA1 SHA512

Submit Download

cryptix.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md
Size 1KB
SHA256 a3eccd367c2c52c09d1f51e486b92c0193502380e81052b3537ab9e9508322ef
MD5 8a845b9240585ad38399fcdff3a7500c
SHA1 a487786b5fb5361b4b35fe1a5e25e216602fa3c0
SHA512 31e73d2c5e0aabc6f245e5df84a6805c61e08d69976784b874889836595da5d85fb80a1ad31e262b0413c02f99d40206b0329fcf4d3d363dcfa42b45e1f5bfe1
MD5 SHA1 SHA512

Submit Download

dom.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\dom.md
Size 3KB
SHA256 2db405ee1de9bedb56cddfa6a2c9142d9435f58713952f7f6dc1e2a0a3936ff6
MD5 72d30afcf8e018dfad83a8115be4915e
SHA1 12e3a9c446c9f9e6b6a7f32922b820d4e1f362f2
SHA512 35e44404f9bf1e89148c16adfa88beae5cdefe0950b0bc9975b032bc355215db787e3df9d6c724222c7a7c84c4abdb7a39bd174464dea9add2637a407c71608c
MD5 SHA1 SHA512

Submit Download

dynalink.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md
Size 1KB
SHA256 5e7baf1768879f07022a793f78c5b9bfc5a5fd25cc76fc0be0a8eb3e39f6738d
MD5 1ef101079166aac92ec771e296a2db7d
SHA1 cc63d6db2b28ee7ba3329978b9e64757fbfd3fa9
SHA512 bd2e85efae3d55a683e5096b60b502698944b1ba3324717b2eb735732298f11288b840d5b958387cf08c3b17ec5432e8da2df43173d5772f026db08c1d3e7c4d
MD5 SHA1 SHA512

Submit Download

ecc.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md
Size 28KB
SHA256 30da043e879a6fb03f6e52f796d952d55439bd4eadda5e274ebc72f57b90a165
MD5 b56a2a45813d223e4ebebf90bc1405bc
SHA1 8819537c7c9695a7c19c7ff8f5b98e6decfab904
SHA512 0df35e8de8e2fbbd52f6390f3142c1ed78ea69eec4fc03ef7531efbd1ac5b5d0f2b75d4123e287fa2c8628e55e638016d25d1a9025711bbbac9e0c6321f50fb7
SSDEEP 768:S1rSvypDzuP3xgyErx7RGeTKrewD4J4AoPU:S1rzzu/CyEN4eGrpa47U
MD5 SHA1 SHA512 SSDEEP

Submit Download

freebxml.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md
Size 2KB
SHA256 729421f94691cad336787126c83c928119926d78aff7549feec44c2db4ab6642
MD5 ff0ce6ff04cf2b0ced2e6f3ba3d80706
SHA1 b07cea9a4491ce399c4fd5830067dbf5024fea90
SHA512 25ff4becbd865b146b0599f928b7faa6b90ec4e25ca32036a2ab01eb87a922d8cb7ff196849627d12604d7dd6cdd314a0fab01ec2943be3508e7cd2bfab4052a
MD5 SHA1 SHA512

Submit Download

giflib.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md
Size 1KB
SHA256 8c040c46fa60ef2f853c9564b7d41747c6611dd9e89189c0b3d0d4992e80f3f9
MD5 ec85953d2e3466279db444bfad54a7b0
SHA1 c6673c27542bc0a809582fc2de51647989091189
SHA512 b3247b8545cd4ea6974d16d1b0d2026d31f80c2419a61263a6947c2e9f3fa2711971df340bb7d07f558492e52e0ed992084f90c6377d1f9b7df2f0456284b299
MD5 SHA1 SHA512

Submit Download

icu.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\icu.md
Size 2KB
SHA256 820cfaadce388ecd4404b8c190859a72990872669c8cc380903f537ec7fe683e
MD5 23cef04e44e87e815aaacf54d90ed768
SHA1 7a8dcfabe27af38e4bb9565d38a1ddfc35afdd19
SHA512 b68543310117db08a5914c74546b7558ceec0fa2e23c8ae33a57f6d9c084d35f4bb07d28c724a47c066a24a4fff1454015f5c02aa766b35b6ba2820c015133eb
MD5 SHA1 SHA512

Submit Download

jcup.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md
Size 1KB
SHA256 31dd1234ab4b17b95195b3d4aeba3c9b62feddb6ed0fba214c380aca7d325d9f
MD5 8498a30090f022f9b9e92bb766e5438a
SHA1 eeb1909481ea1281cc5e5161ae08deae61f46bcc
SHA512 0faf1c712c780ea8d3cee38938aed26d2721be833b57c66632b535fde86619fa798cb30a05cadfb6d3e88a18524cf487059947b4c430048df15936c647216c83
MD5 SHA1 SHA512

Submit Download

joni.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\joni.md
Size 1KB
SHA256 b0a8d03f6236bb3f73eea322304714b03fd3365824c28de294c8cad8ac7aca04
MD5 85334954512711886334d61a46c9abb6
SHA1 f059c1f800b28441111253dd83f63cfebef85f43
SHA512 bd76c1aa2cfe6cc9455f3b98bce18aaa1df3555dba0e798314530cdbb0bf362c89d8bfbf5d06fa2626622d8e8755a4e1060839cf66d4577880881fc28767e651
MD5 SHA1 SHA512

Submit Download

jopt-simple.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md
Size 1KB
SHA256 c9f6ce7c3c532a218f9645a7f84d1b4dbd6ca3375363de8f899fbe1c0946e4df
MD5 6c281b2c3ae6770add5bfe5b6a41c733
SHA1 3d9087f00376778e532aeee94d792e7863647478
SHA512 6095ab254dae6b5392f8dce0463588074eea14a98c9a299f4f8da45ac7edc68033f0714c6e7fe31e952d032d4fa0e65e650b666f1d79af79acbd134f896e1c2b
MD5 SHA1 SHA512

Submit Download

jpeg.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md
Size 3KB
SHA256 9355d39279d826b871d676cd5e5960ea45c8e8c724ed795dc70c7cbf876a542a
MD5 c53198ec61a8538f784f8b6ed9c63a7e
SHA1 00a2e75f618a2e78c9a2667121ac7a106fccbca3
SHA512 7deb4ec3f4c32620fb03cdbf7c81453aaa2da8b5ce82b8d57d9ec46cbd29190e30cc187caed349d733e6f6453befbd3d3683d15415fb0fb79a8233dc3496f36f
MD5 SHA1 SHA512

Submit Download

lcms.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md
Size 2KB
SHA256 f6e277b9b26623494cc4b69f61d647c78bc091da168f3e356295066efe039bb0
MD5 4572641a8482e6f87ea5961e71968e2c
SHA1 677429f8ae09fc39cadd231097f92603998913fa
SHA512 a8e1fdc3af1fe008384da4d8189163818d53dedf12b5c1605a3db34ee7c6318f5eeb8d618ea86e8f0d74e22e65b446a7d0f5648277fd1f3aa6a98805348b3556
MD5 SHA1 SHA512

Submit Download

libpng.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md
Size 6KB
SHA256 28bfed3bbc15ecc0329420cdc7303a4fe42c9ac6c43fc5bc6bcf3f981c605943
MD5 873166e6691d9f9b5821304be2b456f3
SHA1 e1753d2f673b8e2417b12ef9c4ae80eb16dcb613
SHA512 c08e548b78abec456d574502136f9f1e9edd3faef991e8ed7b90ae0abfc77526ebec65af050c04f701332be95b76cf3d31f06a0219e8dcd538b2de1e2a69698d
SSDEEP 96:9aAelfqHmhYBHt1I+bFMoMiZX7ijeeDFoPtrkyqgav+Qe1kMPhlL1S2N+90g:90fqHY2Z29DOPtrlfJQejZlRVkp
MD5 SHA1 SHA512 SSDEEP

Submit Download

mesa3d.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md
Size 5KB
SHA256 8a9e09e2ab65d8110691def7724b8c7d0e5c96d5f84ed17fb1217721e2aedc4b
MD5 df75a732bc73bba58d002cf2025f538c
SHA1 ea70f120789f87be41ce16fc55e928e456f8323d
SHA512 09facc229fca0ee3effd052c10cf041b189bd6b5589d41e5a483bf4da4c361693ae2ee25e771f5db39920330ba1a5d7f86eb7b813b119408f7aa7ea2674da0aa
SSDEEP 96:utH9u503stzgX1Dmt/H9vRjlWcts4ddNFOj4Pi7VRE7uUEcs74ijzLYZ+FHtzDam:zosJ01DmdvRD9dde4Pi7VY2VXjz2+FN5
MD5 SHA1 SHA512 SSDEEP

Submit Download

pkcs11cryptotoken.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md
Size 3KB
SHA256 e46cb5f25ba838b93805daf336204b1adfb333ee4f87d290bdaf1a75b7ee7371
MD5 844b5cdc8cdf0dd9d2dfe97ee1a6ca4d
SHA1 34f6e1381aa679887cce2b397f90ab0c69fd68c9
SHA512 8936399f62eb0bade42f9b6ed3cfc1622e59f4286880410f0fca418d5f6aaba6714299e81b151bb7d67d129b5fb16cd04bf9900775e2086c6407d7b813c1952b
MD5 SHA1 SHA512

Submit Download

pkcs11wrapper.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md
Size 2KB
SHA256 3582a0300f90b87cc25768e4b0367b001a588a7e125505890b00626c638dafbc
MD5 2ef4647b6b8397658178ee5f143b2d32
SHA1 3be584159c0a9c0230b35c888d40e7a6d92837d5
SHA512 e7ef137c67f24534269f18f289253b6ef4542fa32f4f3fa9e98e6303b4409062e8f1ed53607c59359d4a31883cc9679e82857b362db5eb2cdfdeaa9462a410e6
MD5 SHA1 SHA512

Submit Download

relaxngcc.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md
Size 2KB
SHA256 5e6e2fb4967d5a22a8e636a27fd3f985fc02833e6761c6ca296e08b87c859526
MD5 52a2ee5a9cabc7f1480607dc9404f0a6
SHA1 eec836ffb3b7c06200019799643e7b41913e697d
SHA512 412581eb98527db9034dc992922610bf8c3bb3bde1875f629b72a5bf565fe857f460eeca046d8daa77a3a8dea02b64cd56a8bdf596845d8a16ef97c98b0261e4
MD5 SHA1 SHA512

Submit Download

relaxngdatatype.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md
Size 1KB
SHA256 2d9fe904135b1d8343e56308b9a675775acba0e457fa64738480aa6249ccc5e8
MD5 8f6d9d77d204e28711ccff3a43ad6674
SHA1 fb7f4e4a87b55feddb6cca3e21606de61ea596a3
SHA512 d01eb835703ee70bb67936f00fd000e377126ccbe7698bb15fb267a84b4d2ca8b7995199d58904e10fe42e3751395f08844566aaf44ad66eba0eabde4a49297d
MD5 SHA1 SHA512

Submit Download

relaxngom.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md
Size 1KB
SHA256 7bc00d21dea94949aadfa6f98914923b64dab09c68ef63506a2f87ebaedddecf
MD5 e7d7edee3685fe902ac4068f1006f100
SHA1 5b6f58351f2f0a7fb6c42c5fe8d0d2f6a7045900
SHA512 519e83a40b0fff9c45df117b868d9224ebe86608f3a536fed876f2dc1e875ceeeebbf4b88fcde7cc78892279a158c2edd6e8292380b549740314ebbb7ce30e75
MD5 SHA1 SHA512

Submit Download

santuario.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md
Size 11KB
SHA256 1758ad3b417628897fe0fde4f4a4cfd9b2542d515e78a36c614aeaeea6cff07a
MD5 9a1c5273ffa23a79bf14ae3e3e081d46
SHA1 99f8a5c6179e7f594e2ad4af81560c9f51d856de
SHA512 bf0eeff84d7470df517b73509ab0609569c418c73e462a75fa32aaf68a3060d9ba46bb8491653ce1de58e93349dd633322cea9635611a3eb628d9b78c7307698
SSDEEP 192:TvVetq7w0HxT7Em2omxQUpnmULdc5vjt/veRz0hZmJt7Ls783Tp/mbOx5xA0abwr:TvEjAE3TNnmUm5bt/Qz09783+I5S0p/D
MD5 SHA1 SHA512 SSDEEP

Submit Download

thaidict.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md
Size 1KB
SHA256 21a0effa04aa6a6fa1ef60726277d199c507e0db07db930241bce0d7ce6321e7
MD5 61b7e9ab6b35d1865eb9f32fc25467e9
SHA1 343e28b9af875b46b07373511e37fabee79b1506
SHA512 a33636402cce89b955fbb225188253eaf789b2562026b0a79f9f1a4204dcff76f7f6db39b497d69e096860c8ab0441af282d7db72366d81c349a6594fee859e5
MD5 SHA1 SHA512

Submit Download

unicode.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md
Size 2KB
SHA256 a83196f5f6af19da01fcefce58bad6de99498ae5d805604ce9ae6df53edcfd18
MD5 3a2f21275faa406e59b123a8804734ec
SHA1 e4ee525e7fda0169e04706c6f84578367380b7b5
SHA512 194f44194dfe0286fb02281d15bf840026ee79f7c4557492220a39377e19cf222190649c2aad87bd1d88e999de35aab09f05b28e67cbe4b5ac530690c44e854d
MD5 SHA1 SHA512

Submit Download

xalan.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md
Size 11KB
SHA256 ef8469f6236907631576773e971d448f15b3dbd61af88ee9a8af42863d5d363b
MD5 aa6a88881ec676fb8159e085623e1cfb
SHA1 2ec475ec047cfacc68aefc83067b86a9f4a5ed18
SHA512 c1c26ee4f0b9260d778dc1a138ec144ab52d59bb8c940fd6edc929772b3a5fd5a8c047f37775faaafcef9489b01e4b7495a66c24450f761e7c0e2475a8f2533a
SSDEEP 192:BI5TG4u3n/2Y0+HhQU5MbUiw2Yjh+tBCHeJB8kZCwRsMaBr9q0ZHtrpahcgycObY:eTyv2YfHhQU5MIiwDUB/BDZCF/ftq7yI
MD5 SHA1 SHA512 SSDEEP

Submit Download

xerces.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md
Size 11KB
SHA256 bb8d061b4ebb5531a28ec475d772b29720e0a6db28975d2df69eabe655c86c23
MD5 66fc3e30e6034486f372200c8992350f
SHA1 64cd177e102b305053a1343c194a11c58da8aa72
SHA512 4a2273483e0b3a0b80a2eeb708d5694803d03cece1902c0565db2d22a1d8a536e60a8a2244ddd619604dc93ea5cbacd565fc74193c4389ce2b60e9bd4fe3d1c8
SSDEEP 192:JXrLvMubTd4nw+p3WuGPJi4bTSbwC8yWWVTqt3S2d8u9xN5kD0oDoJ9dIj:NrTMuVwWPP9TSz8vWct3Sexfoh0NM
MD5 SHA1 SHA512 SSDEEP

Submit Download

xmlresolver.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md
Size 11KB
SHA256 2c555da7ee8abf2bf3ea0eb60ec17d82b36caf658af16f9b4fb53f4412ceffdf
MD5 e66ef8809ec7b1db71059c92fd6a8b50
SHA1 f9c5987b6cd9edf8fc5475870ad2da1f7d16e111
SHA512 27f5e00624ca9fe4dcd0f297c9fb9375d6299dad741e64103fd84f2ad53b34113a00f83f03906142c90f099f7ec990b9ac7bab847f3b380e82f3b99f1595affd
SSDEEP 192:tbZuF2SZn32hlj6iJUAnH/mw1YBAxA8AKB8brvvB9qUuYg/xDTVeCeys7Y:LS2YGbj6iJDn8uSXB9qUf6hTVkd7Y
MD5 SHA1 SHA512 SSDEEP

Submit Download

zlib.md

Path C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md
Size 1024B
SHA256 7bb05a14f699583a5ecbfecece1ea3942acdd371fda609534f09bef6fe73aaf6
MD5 83999142512fef09a334f01d5a3ca607
SHA1 61b676b69294199346b4f9111a437444817e6269
SHA512 a8d38d50f8dd55b6988ea1688cc896e99c5da69b90a2377e6248ea5061fd5fa6b00849c093db4c82bfda608da8b02a9a25d0ce292b9428955649f7a4083790f0
MD5 SHA1 SHA512

Submit Download

ClientSub2019_eula.txt

Path C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub2019_eula.txt
Size 48B
SHA256 bd4ea9d982ed8e0fefc2eb01398025d06ff8fdcc259e52707336b6c4d562bc8c
MD5 b41b162ea5808d027c8e663e60a03cc2
SHA1 ccbe4f7d26ae8413de12ab17fd2d389797dc6e67
SHA512 f03c6b447ef1a079575119a2d94e611aecd15b6e6525beea7a70172fe2b7c49af945dc13105f492db894d65894914ab1c74645fa45404625d9c0cc5cf632bb1a
MD5 SHA1 SHA512

Submit Download

3d3bfb38-1483-4a63-9f31-f1e8fcb133d9.dmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\3d3bfb38-1483-4a63-9f31-f1e8fcb133d9.dmp
Size 4.3MB
SHA256 463bb6f550f9c5e1fd5d16715b0fb25f32c2d8a7d639c99de1f448e1948f73a5
MD5 8e7d71471cd332ef901eb6d754905fcd
SHA1 41aa0b622c06cb6b485b7ff8cd1cd0b8126c4bfc
SHA512 f0775e13b9de3d98c5af3be43512a2816d0b7ce6a2ea23357a911563711e4c27dc4527f4ab49c410245a5c3f5a8c96d5ccc1be7ec2f37192f6bc10ebfba5fbb9
SSDEEP 12288:6hPTs46uswXQm5XdhUG0PlM/EXEBQlbk19RrH76Im4u8C1jJodhqsJe1IuPoo5YE:Efni80e9Rb7Tm4u8Cnz/oxB+L
MD5 SHA1 SHA512 SSDEEP

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\000003.log
Size 128B
SHA256 b369aabd1729dcdd24b1ef93a72e9d858486a293d60dcc6f00e0065625c285ac
MD5 d5465995756c90bc645de83aa01ef200
SHA1 858d0709fe0d6f9dbd2111910bb43f89d735dfc9
SHA512 7653ae9a5796a7935ce1a4df9c1309470c33843c3a1874a3da32854a56829a9413e39ee58c8faaa1d4944dacbfe730632c4f707b4e213e07400f6bc7b0b7091a
MD5 SHA1 SHA512

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.96.1_0\_locales\en\messages.json
Size 864B
SHA256 9d3084efbbbc0fee10f238d1e167bc954df3496b04e316e92944e916008d5a61
MD5 c208d818428a4673538e2d55ee15c2e6
SHA1 d78dd0ca6fe63d771355500fc4995280bb3c45b9
SHA512 e1d50d739dce3040e143f4aad6ebea4eabd1af171f73eb5e09473b57ef408f87ff90fa1aba07a1326aed7de189f36ec525006c313bf199b92932cff7961c26d7
MD5 SHA1 SHA512

Submit Download

winword.exe_Rules.xml

Path C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\winword.exe_Rules.xml
Size 332KB
SHA256 1fae89b31b760968a953cc1a1bd8898c7021d029e212ed453257d089aa2ba117
MD5 4c2409664a88d7a0e16403b1785c8afc
SHA1 2c9bdb82d2a83eef26a7a23f91be5bfa32f694fd
SHA512 451296e6c3dd7691ee82bfa13e83609fae6bd734a36bb76def68dc7e44784df3b0fef988592dae97dfb064e259bbe59e9e42f487d62edb0ce72d986649e62db5
SSDEEP 6144:l+wSNH3c1Y1SNAijbP9P32t5m3MPMwZUSmg9qnoBlIBy8xz++OFkGNDHsIJ:tSNOAivP53+WGMwUOqjlkauMIJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

0.1.filtertrie.intermediate.txt

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{9767b7a2-ef40-4688-a1a9-640d97d6c159}\0.1.filtertrie.intermediate.txt
Size 16B
SHA256 8dc6dbf09b717ac4263c72e7492d4d29ada76cf496a40704a0a8c569fc28daa4
MD5 465641070ff954f98942d21033f3657c
SHA1 97f8bd93f5387a7182161e51bee6ee71d62972d2
SHA512 d54bb8e815a8df2290bc2604da83a4a845c09da269316235b0e9cc333bd6cd90b0b8a58ef6b4e17dc5be1d7728ee5d14b412f0b0348bf31f5f65d0820cd59984
MD5 SHA1 SHA512

Submit Download

0.2.filtertrie.intermediate.txt

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{9767b7a2-ef40-4688-a1a9-640d97d6c159}\0.2.filtertrie.intermediate.txt
Size 16B
SHA256 0e546daecfee4322ccb6ee82ca96d479581fd469f0081b744773d28a8eb48847
MD5 089170a71326733c4827fa372adca113
SHA1 150c581fbf1ca4176527ccefd1ecf4df154371c8
SHA512 227666304e5dfa9a3d2dfc1176c06d7641399149d4aca8391b784073020079af2152199c63e784b0f88d3348f9288c788b5e66ed9e144a084c9a1281fc0e602b
MD5 SHA1 SHA512

Submit Download

AppCache134051850948084969.txt

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134051850948084969.txt
Size 53KB
SHA256 8af73a8171c260cc9f25133e6fe59b9577d18f44d1b08e42fa636b1b5072d8f8
MD5 afc41fe29e68d1c6e0d650f262de040e
SHA1 4534c2c8fcc23a418d2dea1a865514555864fe30
SHA512 2ddbc2e4c8bacafe9ff64c9035d3736aed6a4ed34d9b6650cb05414404bf95fdc0b6033cb9f1cc25a1407615b167501b3d4e667ef3f68bc69b7eef5c286cb549
SSDEEP 1536:SSWVU0L5L8ZfzxXAHZDjLyvxw1Unfm3vrho:SnVPL5QZfe9LEeK
MD5 SHA1 SHA512 SSDEEP

Submit Download

AppCache134051858158322114.txt

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134051858158322114.txt
Size 70KB
SHA256 51b43f4fae51446ac2429eee45b316a89173cabd9a5a9bf12200769eb11f565f
MD5 7da72de55eb0fb007360de32f142aa93
SHA1 33407599e7b6c233344645e0353bf771f50a4604
SHA512 2849a3e79aa6857647cd61bc401a1e4f6060142b85cfbdbfeab9cdfc0eaea4791203e47947957c0ca16f5e31e32b0deb6a6235f55be4d637080986f88facf4ae
SSDEEP 1536:JZirdl2hUahSyeEgnbNs0AAg3K1NmIGxZ88q63myvQpmNbe:CrdkSXE8N9PNm5ZmT4i
MD5 SHA1 SHA512 SSDEEP

Submit Download

AppCache134051884762552118.txt

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134051884762552118.txt
Size 83KB
SHA256 3d10d321427934c77d03560d966948386676f2e1bbc0057903cdb54a149e242b
MD5 6f11d4f33fbb618138c31853f4d4a495
SHA1 47fd6cad37d86aa315586ffcb3e9f7632baec6ed
SHA512 b4108ec3b7004c5c2e045b5eb39d51cc234e78e7ed9315cee90220affab0141f7564de20b73c79bddf5840e09a2d0884ee5bb8597439255a14c21f05fd7c0673
SSDEEP 1536:Zntcmwlc5R9P0OWsUi8WcuU7pdED6zMWkvq7O9zGVeOIwEI7dz:ZiDWMQ0ukpdEeM9F9ROXz
MD5 SHA1 SHA512 SSDEEP

Submit Download

WindowsUpdate.exe

Path C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe
Size 21KB
SHA256 489f2546a4ad1e0e0147d1ca2fd8801785689f67fb850171ccbaa6306a152065
MD5 fec89e9d2784b4c015fed6f5ae558e08
SHA1 581fd9fb59bd42fbe7bd065cf0e6ff6d4d0daba2
SHA512 e3bbf89cc0a955a2819455137e540952c55f417732a596ef314a46d5312b3bed644ac7595f75d3639ebc30e85f0f210dba0ef5b013d1b83bafd2c17a9d685a24
SSDEEP 384:F9+aLp4ojrenkfVyL9NulYyAwX0uokwqwA8Xb6Pk5tOIdZy+kA4nk5tOIdZy+kLQ:qmp5tQClYyAwwePk5t50nk5t5bl31
MD5 SHA1 SHA512 SSDEEP

Submit Download

update.bat

Path C:\Users\Admin\AppData\Local\Temp\update.bat
Size 71B
SHA256 75ffe7befe62da3753a0c83c65e269ad159a6083ae893acf2651557f9f1a3c2c
MD5 b132f4472ca04d3aa18bb37aaa230630
SHA1 fe549c6c96c7d9341fd13e12fc24d3551b0c1f67
SHA512 c11ea34e3c696dffd66acf2353cbe12796fef417bccacdeaede500a3222fac4b8efc18747d8c726212623cf8cf99046527978686ebd329e40592837688f54605
MD5 SHA1 SHA512

Submit Download

update0.bat

Path C:\Users\Admin\AppData\Local\Temp\update0.bat
Size 78B
SHA256 3ffedf213b18d61561cdbdf3de6946284c7b0541a69a89ebda74add1aff7fd5a
MD5 397dc7373e23f1980ecf849a29708041
SHA1 6c91608ebe57a3d9375f646ff287e46a9f18c861
SHA512 9c8cf8355cde0402b71fb4e713d14ed12a1031c3120b4a1af6e10ce02dd5828b8d27345ef28f40c34da329e47b36f4f0da74c7cd4cf3d3964d004a16e72096fb
MD5 SHA1 SHA512

Submit Download

delback.bat

Path C:\Users\Admin\AppData\Roaming\delback.bat
Size 35B
SHA256 325de85e48afabcc0d53d5f6d9371314d0ed6e46d91c271abceccca58cbbd238
MD5 d41ac96c53b4fe0dfbe1b080649141c1
SHA1 b4d75213c61646b5bd48eadf723542fa9aef8b00
SHA512 a65c10d4face73078643ebc99c022a19a5944cef222c27739bc94456bd7601b5f118d4f2738fbc8374b8ad86c927fa0dcca7177fc936409f3000b7b58a6c1563
MD5 SHA1 SHA512

Submit Download

MSI249D.tmp

Path C:\Windows\Installer\MSI249D.tmp
Size 57KB
SHA256 6d149866246e79919bde5a0b45569ea41327c32ee250f37ad8216275a641bb27
MD5 c23d4d5a87e08f8a822ad5a8dbd69592
SHA1 317df555bc309dace46ae5c5589bec53ea8f137e
SHA512 fa584655ae241004af44774a1f43508e53e95028ce96b39f8b5c62742f38acdf2b1df8871b468ac70c6043ca0e7ae8241bad2db6bc4f700d78471f12bb809e6b
SSDEEP 768:A0J8+QCTqaHxKkUmrVSarTJym3OZESrccFK+iLwK8Ec:GCTq2ttpDJT+lcMiYT
MD5 SHA1 SHA512 SSDEEP

Submit Download

MSI2569.tmp

Path C:\Windows\Installer\MSI2569.tmp
Size 418KB
SHA256 f3c935cac911d9024c7797e8ffe4cce7d28154b236ad3e182f9efb85cd5a0a40
MD5 67f23a38c85856e8a20e815c548cd424
SHA1 16e8959c52f983e83f688f4cce3487364b1ffd10
SHA512 41fc1b4e2f47d5705861ee726c8d5d7b42191e7d586b370981da268414f207f6dea00a59dc53012cf6510c44651fec4a3a33bf69e501d85fd2efd66517e4169d
SSDEEP 6144:7P8N0LW3qa54J725UZnEuru4dtN5dHak+KNlA0ZBoWENFw2IzuJAgXrCUlZy1O9a:78mLPa5S72qVRLHak58py0s
MD5 SHA1 SHA512 SSDEEP

Submit Download

MSI2607.tmp

Path C:\Windows\Installer\MSI2607.tmp
Size 148KB
SHA256 6bac226fb3b530c6d4b409dd1858e0b53735abb5344779b6dfe8859658b2e164
MD5 be0b6bea2e4e12bf5d966c6f74fa79b5
SHA1 8468ec23f0a30065eee6913bf8eba62dd79651ec
SHA512 dddb9689ad4910cc6c40f5f343bd661bae23b986156f2a56ab32832ddb727af5c767c9f21f94eec3986023bae9a4f10f8d24a9af44fa6e8e7e8610d7b686867b
SSDEEP 3072:oitbxNeB4Ms+eGDIEZvtFg1Ass+wrQiVntHY:vTKME3eWhY
MD5 SHA1 SHA512 SSDEEP

Submit Download

MSI2667.tmp

Path C:\Windows\Installer\MSI2667.tmp
Size 209KB
SHA256 5472237b0947d129ab6ad89b71d8e007fd5c4624e97af28cd342919ba0d5f87b
MD5 0e91605ee2395145d077adb643609085
SHA1 303263aa6889013ce889bd4ea0324acdf35f29f2
SHA512 3712c3645be47db804f08ef0f44465d0545cd0d435b4e6310c39966ccb85a801645adb98781b548472b2dfd532dd79520bf3ff98042a5457349f2380b52b45be
SSDEEP 3072:nAhQzCk1xLP3JBy9H00pSx71cIUrdfcr1DZJq8aK:AhQzCkXLP5o/Sks9LaK
MD5 SHA1 SHA512 SSDEEP

Submit Download

MSI31BB.tmp

Path C:\Windows\Installer\MSI31BB.tmp
Size 271KB
SHA256 5ded99991217600ebd0b48f21c4cd946f3c7858f07d712fcfb93f743faa635ed
MD5 f88c6a79abbb5680ae8628fbc7a6915c
SHA1 6e1eb7906cdae149c6472f394fa8fe8dc274a556
SHA512 33e150822331356e1cdcbff824b897ca5bf2bed0345d2fa39cf9b1f36a77201167819761b1cc3b6cb02a87625e0b6b85a8505281ccc575ca6b73af68e1e90361
SSDEEP 6144:enPBENm2eK7mnoUSgpAY8ODcDcm7cIslDR+rHu7aySGx4qAOn0y9:ePZR+rCnx4qz9
MD5 SHA1 SHA512 SSDEEP

Submit Download

PDXFile_8.ico

Path C:\Windows\Installer\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\PDXFile_8.ico
Size 340KB
SHA256 c5ba5c23decaa64a9176f20f8b18a8c89b42ed54f55f3285bd400fd74051e37e
MD5 d07cea5fbf17f2ffa4fdcb38e395dbaf
SHA1 c0218a4f53428d71f19f1121b8532b3fe0d178b9
SHA512 98ad990280e9db23ee91e23ee5d0ebc8e289eed7923cd07bb31b845af28ebe0a09bc49f9de2c7e81a49a041d9f87f089a4a67402e1182c41e0d41a3e47264d4f
SSDEEP 768:JMAyYdTmPJbgqcnDcS5SpHhD99URJ7o+m:J1U81cJpr+m
MD5 SHA1 SHA512 SSDEEP

Submit Download

CreateAppSetting.aspx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\CreateAppSetting.aspx
Size 3KB
SHA256 ab3f63461cae86bce9d1d6481edc769c598baab4cee5c1fa72f00470b1bf0206
MD5 266528fc4cb3879495df013299569a0f
SHA1 3961efb46d821594199aa882a0236624c12b5f80
SHA512 a866106caa9cf7c6c79eb1ff852a4bed52c7e13fb4f7ffb40d18ad2a064332dec35650a8252cc8df1482e2331e8c043c7369f6ff60f798fee07e67e763acc3c1
MD5 SHA1 SHA512

Submit Download

EditAppSetting.aspx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\EditAppSetting.aspx
Size 2KB
SHA256 273bf379560e29929991b61d6d4c3f8877d9f641311b4057809aa8c496f3c969
MD5 28e4a04ef9c4840becb72333da6fb078
SHA1 af644eafc2571cb48a89b7351c7f9b2e94277452
SHA512 d15780f3c222b0f834d949156575f10905526958a220408c529df6b49d99a92758d46e6b9b851fa68eee815ac234869fc591041ba03a335c52d4173a71e87ed1
MD5 SHA1 SHA512

Submit Download

ManageAppSettings.aspx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\ManageAppSettings.aspx
Size 14KB
SHA256 f7e7914f2fa70b9dc6566e3e927e9484a06da1d8148f2db9c26fd302d6272790
MD5 a040b9b0c5273eaa31ef1dd29aac3858
SHA1 6ef8befff730138802903995b956050ea1d698bd
SHA512 6db53801b889935c647c8a188a9ee05e7753c73d3bd2e5839dd6238a9f50eec13a6004e122b959da186a616fdff4fa3ea3fab78ec49ca760d454e9e4bff19fa3
SSDEEP 384:A16ZYR69X7aLBjr5pN6O9BWH6OlqKeB8n+aoDJ:A16beLBjrTN6OeH6OlqK3nNUJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

GroupedProviders.xml

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_Data\GroupedProviders.xml
Size 320B
SHA256 7cb0f77c3d7b7ba828b20ef3c510ad6f5791c6a5412660e47312a8ce8a3ea0fc
MD5 7c4a60e47b275eac1544295b1aaab442
SHA1 77e031878491a53cfa7aebf1eb90e59cb5f183ef
SHA512 40bf4310c3a988b6e85e8af6c61b79d425846a2c7ab3f91304f4a2b90de89e4a54ad36dfb81ae1dee88a220acf71d04bfd295df793c4f9537b24af900576f9e8
MD5 SHA1 SHA512

Submit Download

ASPdotNET_logo.jpg

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg
Size 21KB
SHA256 5a83eb21385a04e3a919079dae0b3ea2ff67b9ada659bdb2e6856a2f3c65bc38
MD5 4c0baef72a7ef72bcee859fd2ca79334
SHA1 fb769eef725cadedbc2223b35204fd670ea9e4d4
SHA512 547f046a78dd2da84a543de3f5a3d8ac74dbc553fbfa3e31a97781f4909e2f483ac44b4b391cbe47421099b4dde6b68e53f7dbf4abe284fd9cd8d9efe7bd7b06
SSDEEP 384:+mWLHcAn+O1rEwDRJzIlg1repxk2fgXkzzKJ7/vYwsou/0h/zL/aqbC27iltu1jW:hMBn+qjFJpopG06Jiou8h/tbGlGU
MD5 SHA1 SHA512 SSDEEP

Submit Download

HelpIcon_solid.gif

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif
Size 1KB
SHA256 43f2b98dfef4ecc3e810dc3916bebd25a5925185cfc10206da118c04b987701a
MD5 98075cafb80b8c0c0d2af5b1a90658e4
SHA1 6a1708111269793e15df0c39b76e92c828cc2f3f
SHA512 4c136ac97dd5626dd44511795f55fdb97d5d524d1681ea3a24fb5649284e804d62b736341c633752635331dc61d004052ec1c06fb76df5dea21dcc7cec003f1e
MD5 SHA1 SHA512

Submit Download

alert_lrg.gif

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_lrg.gif
Size 960B
SHA256 d0167a71bb1c2004b831364aaa7f16f3d8a684e7a36f8abfdfff10a74eab1351
MD5 0a87b53a136c0174271acb8f37d0f212
SHA1 007385eea42fe880e0f2033cc9cfdd32826168ec
SHA512 56b09bb4277a315f1fd7ec88aa5b8d5ecc36481849fa38face7ce1c9b357a15816bf5aebf8965acb0470bd026e3f959f5a22941eee5e872768fbfc2794c1f0ec
MD5 SHA1 SHA512

Submit Download

aspx_file.gif

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\aspx_file.gif
Size 128B
SHA256 aafd4e33a7537eee8b57e047aeb36433a731530ef46b613e5247b56ce5088ffc
MD5 d38dd9ce3b9327f70bb9cb301afd8b79
SHA1 1e41e4008aabc39ad68f02f7e37b3c49f83c2fa6
SHA512 749e6f951ad44ee56d93990fb596924f5f09a4f879b874a2fd97e0bb819ec7d884ed0fcde8ab04fef24c6d9c3cd90380ea147e69b48aa5e3852b548378849dd3
MD5 SHA1 SHA512

Submit Download

branding_Full2.gif

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\branding_Full2.gif
Size 1KB
SHA256 d7cc562b7638618cb34943b6fc0870acc79903f56e452dfb20df5577dd26010a
MD5 9180b9df4a6f3f75ca89fe655f579003
SHA1 4ad8c2652edebebadd23da8afc85911197250df7
SHA512 216adc1fb603cd4f9113993c09ebc144d21c25a1cf4df980b5524c850363a7e1912e7cdbcb0093be84fe183a26e6c012a6984d1ad49e3f22232c4adad6092c54
MD5 SHA1 SHA512

Submit Download

darkBlue_GRAD.jpg

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg
Size 8KB
SHA256 4b682b94d141fe98c6217d62bd2dc1d8faf1a578a36ade93aa33d5cdf9eaae95
MD5 63a3ede051a15f69b98ba5ea09f50bb7
SHA1 bddb68948fa154de14122150dfb7fe8e7321df3a
SHA512 c8d8c189afce508abbe4b93dafcae5330f02f3261859f593880edd19b1fadc3e46a4770dab4acb84ca8e9c509c247cf2146b12fa8795e6ac66434c0cce54e02a
SSDEEP 192:2o4o4zK2e3NC8je+tdK50FtK8/Wl0BtdaLuw:l4e/w+HK5G/W6nd9w
MD5 SHA1 SHA512 SSDEEP

Submit Download

deselectedTab_1x1.gif

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\deselectedTab_1x1.gif
Size 64B
SHA256 957f8047a27fbae2fc5c9617d8b949bdc8ceb697994c648e9472a3772dded847
MD5 6e84fe159eebbf03e6a5ea54f3fedc62
SHA1 8f3a40c765988e45e13593f40433f1fe58b77b01
SHA512 a85197ceeaea002f20b6cc2b192a1d07b46f004a7dac21fbaf9dd4c5bc48412929b30bfc1accde2dbf2d1a7b5a3ec3d9167fa367415e92bec848a850f9ccdb7b
MD5 SHA1 SHA512

Submit Download

folder.gif

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\folder.gif
Size 928B
SHA256 93a70f03d51f068be6f727d61c1211ed777c7f4689afe71912ab49f684a39dc5
MD5 a5431acbae7421eeb2157c7a1132c2a9
SHA1 2ec25cc27f343677a78b2f5efb4503589a6d2b33
SHA512 ff6c8e637ff703764f8ad1606b6cda9655671b949d4483a837819b8e6b5de8be065d0fd1e0876e64e64e745d141b96378efe070950d18188d80bab92e4134e8c
MD5 SHA1 SHA512

Submit Download

gradient_onBlue.gif

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif
Size 96B
SHA256 3386a88767abe2e1f565a93aebcc29e77d979dc5231ac5224327669566a17a6e
MD5 08b4c7bf528ccd2fecbc33e3b939730d
SHA1 8111861011e869318cb1a888541f382212cfdd5a
SHA512 3e1542d689586cd73a550056b7803745cf7467e76fbbe2d3aefa7d355d826961b7019b203bfbfcc360a001c7b50132f67e2b3da7b357284aaf8e31cd439ec9de
MD5 SHA1 SHA512

Submit Download

gradient_onWhite.gif

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif
Size 96B
SHA256 909b2d805f1ed01bf8ab7f30d442022a2bbb0e7f1bd6d018a44abef87b14a5d1
MD5 0033737a79601bff832abbfce2d36ed9
SHA1 49553b322d6d13a7482e0869e9851e59f2f9c97f
SHA512 26af073a25c5f1c0f068f328008a0817f7f18b74470c65b5416010d62a7c9421d6da3a32b1ea48aa2b37a0fd40d4e599a414e40ee22c34fab56fb212dcfa3489
MD5 SHA1 SHA512

Submit Download

headerGRADIENT_Tall.gif

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif
Size 336B
SHA256 c2ce140b209c46bf24bde93a5b7e60359db6bcce35a43087afc7133afbcfab4e
MD5 12f66b6768cc95aa2c7866d7144c35f7
SHA1 6d5892b64be96f53c3bcff9bb41f3a72d072b32e
SHA512 2878ef9f1359b5b773016b9d85e893c92219d4c3fce34aacd60459b1c96d344a512d1129ffacaa388138a81b5aaf8b31d9fb1c8834e4f0d14feef49d9f47f515
MD5 SHA1 SHA512

Submit Download

help.jpg

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\help.jpg
Size 1KB
SHA256 b93e48d963f3ff9d9a5f43bfb8ccc9f49eec43b20a16e2343111db6e4ab6bb27
MD5 80f733efb048a8dbf460c43f35133981
SHA1 f55d552d0b5352c3369a5aede68be8f346e41c90
SHA512 c96232982c550adddeddef5d0dd1daf425ec0586f418eaf0fb83038a262ca31dfd5d8f7fbc4c1f60c0f5480e1076ee422a780963820befb55896d9c6aedb6b0c
MD5 SHA1 SHA512

Submit Download

image1.gif

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image1.gif
Size 176B
SHA256 59de76357a69f6f2d8a5b950f77698d6d8069367b817fdce8d94d930b157636f
MD5 aa6da3da484c4386beb82503ad7cdf95
SHA1 e2484902e276abe0f3779719d8ad548031e39c23
SHA512 e776bb43a5d41be81bd1661836869958d7f2260cef89c7b398281e8af3196c7490d85752984e0d7897383d334f66d48cbab66083547c75e58a4cbb8a76e0dec8
MD5 SHA1 SHA512

Submit Download

image2.gif

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\image2.gif
Size 592B
SHA256 60a6269a72b561615a0cce342f6851197da9602dbbdaa5ee9495da13bdc0acd0
MD5 663d1cc032dacaf88a9e62b8c7ca1472
SHA1 5d15d36d58a726b0c8a88c41465274db4237cdcc
SHA512 0ea0d88b01089ae31a99bd4fc462f6afb6c37b0f4b7a1b60fe81968e34b6fbdbf90a67329c0fea5d99075b6493de887533e3eebca63faf5c11a60bfb843fb12e
MD5 SHA1 SHA512

Submit Download

requiredBang.gif

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\requiredBang.gif
Size 128B
SHA256 1b392edcd8d044d622b137d1d4226cb532ea073a4d76baf844633e88b8fd4202
MD5 9daad5b6b9721df7077f96e2b863f217
SHA1 e794092f3c1bb73a1baa479e6c69c3951b1d878c
SHA512 3379408978c788a6c74bee1d58932645c2bfa51ee72c3b09f800581d3ce73d74ce173f44d61b736c61edd471760132feff4338ddb952f59f0c277ebf023b0eae
MD5 SHA1 SHA512

Submit Download

topGradRepeat.jpg

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg
Size 8KB
SHA256 9cdc5d9339f988774535406ca64f05d5a9cf8fccf923ba61428d9578cd6d4a02
MD5 caf0e979c396acbcd145bb59a78e5444
SHA1 e263af18efeafd1d4b630165f9806173487bcb12
SHA512 a198ffa83dde5441fa115c90150ab1ca2fd86e25152aa89bd510f802360c036728d12c5ae488071f4173f6eacbe7fa9e4c81edaffb834769774cf32cca213861
SSDEEP 192:jeTTO/NNdDn8r1UIBgtcjfLTUSuDM7Jx37vNIeW:cO/NNG1JgtcjODMj7va9
MD5 SHA1 SHA512 SSDEEP

Submit Download

yellowCORNER.gif

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\yellowCORNER.gif
Size 896B
SHA256 b9eddd918625211e7b98265c7ed06cd951741e7d6ded1b76765fc78ef164867e
MD5 75394f21666ad8183554eb67f9d212f2
SHA1 f0511a234ed73f430094e4b7215ee7bbc3e6d932
SHA512 3aa55ec98af638ead6657b57193e11395a7c6ecbd50ef2d10dd9b42714f97add43f373d1343934face2e0cec2d8d88759a095af97ab82345c590c8da537c6e30
MD5 SHA1 SHA512

Submit Download

ManageConsolidatedProviders.aspx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\ManageConsolidatedProviders.aspx
Size 12KB
SHA256 ccdd2412b4eb7b3ecc91ba4527bf2950c133fbcadc2ab6221740db8effca6e5c
MD5 7491f4766135d6032c5d2b586e05d4c3
SHA1 c333c634027c096b6a37ac6434d7db3fbce7edd8
SHA512 053f40cc0c7b3bc22f14e49bb68efb3dff8269fe4f29e6c3f6ea4bce9ef5da3847a26bfa663e73d8eeb848e8b099de8b0f1113a2f1a981b22852ee5ec9e7e785
SSDEEP 384:uAS71KApCC9Pmi+ibrzAV5pSZlZohfZL3kmyASy:0xKAphrbAV58ZohfpIA7
MD5 SHA1 SHA512 SSDEEP

Submit Download

ManageProviders.aspx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\ManageProviders.aspx
Size 9KB
SHA256 b23b5cddcf7c11163cb69d8440f4a36135756488c6c8560f1f1eedba8b325104
MD5 4e257e52742ae95f2ebcdc578448ad8e
SHA1 f9ff6ce2f1d07f65015b8298f97e41698ee157f2
SHA512 f17f3eb366a466ffc9a4a78d1336d71577c97beac91bf2d5d039487821d33c00cc561aff9364e028482b7fb63d552f205c3bc3cb7b764131c0cd4b5e97d855fb
SSDEEP 192:BJScbII1figpkJUtFS6z8Cra6vtyXoX0Y9wTx29FyFGOdJ/:KcbI8iSkJUtFS6Dhv0oX0lN2JOdJ/
MD5 SHA1 SHA512 SSDEEP

Submit Download

ProviderList.ascx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\ProviderList.ascx
Size 8KB
SHA256 b0e55f265334f65daea214ff18fcc9eab1fbb345d203260fe01db0d4bdd8b7d2
MD5 e44af79c1782ba0f634396e7fe71f6fa
SHA1 2cf0c5cd1b680dc88ac7b31962a801b9ba47dbc9
SHA512 be90a1cd8901da874e8df949f7d5d8088b399e3740102257adb660ef18c0749fde7ca8002592f363e4521c025999d749eb0c91b3f42069315cb1c2752cf6206e
SSDEEP 192:3hJI3cdTz4hty9achV8Mol5swj101UKug1pEp0TV9eWUViHRx7zOa1ToXo3:3c3cOIVNol1+uap3jeWUYHRx7zOa16o3
MD5 SHA1 SHA512 SSDEEP

Submit Download

chooseProviderManagement.aspx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\chooseProviderManagement.aspx
Size 2KB
SHA256 c8d2051974e83c9124d1c9ff47ddbc644746fc5cc6838f9ef68bc2f8c2cf238e
MD5 ce3866a9555b3f5eb4fea115282922c4
SHA1 5f135aac5d1c3e81315b5780953292fcbe5afbfe
SHA512 4f79449433903b9b98b5d3f1c806a90b489a36343267a78b66876faf2b474498ca82ca2bfe73b7f7bbd59ab91ce21b78d197f94cc9112dac0be0c217de55a878
MD5 SHA1 SHA512

Submit Download

createPermission.aspx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions\createPermission.aspx
Size 10KB
SHA256 0d195d3edacda760d12fd0763cbc15fc956a1ffeb197afe2bdc180bbb5c9272d
MD5 49d984a526e487f90976e726d84f672f
SHA1 4ef184fa593681a5bee944932c6a296f266b3ae0
SHA512 10254b03f087d3b2ce5e2e4b7dcff106739d937b78579c2cc71f020b67150f1aa6900c512186de9ccac9df151f221620495c1b5b6b3d61c3cd991a4dc4cc2b3a
SSDEEP 192:AGPZnGA4X+CzBBUtEcG9FUujXiYwgNczpwHGesAj1A5WBRDnnbK07Gzpk1HDOU:AGPpud2qc6FtYpgGekWXW07Gq5DOU
MD5 SHA1 SHA512 SSDEEP

Submit Download

managePermissions.aspx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions\managePermissions.aspx
Size 21KB
SHA256 3da2c7984db7b5c94701f0640ffae05538908b7557a33dc7569c49cd7c5db8f3
MD5 c88c96cf2ba37fd3b23fad22d543c3dd
SHA1 32424198407e05e2def958dd9492603c1e53c681
SHA512 f4a4b5d9d67bfe9d6276e674ab1ec2c20700c7fc9d8eed67edbc1a58cd63037ca9bb2979f25cf29f9e3616960bf94441576d165381ba6c1d4077cc52d1addb87
SSDEEP 384:RS/SmD65oMRQC1jNplX/Jh9nJo+lyNWU/b8eSe:YtD6RQC1PVJh0TLoeN
MD5 SHA1 SHA512 SSDEEP

Submit Download

editUser.aspx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\editUser.aspx
Size 11KB
SHA256 d43e5f5e7f78cc2645ec7c4f21c8788ec90deadb82db41030c342e0ee2727b20
MD5 eeaca785520818c0c151f3b81c307e36
SHA1 0a002fac25010dd95eb6d495b6c2ad7ee19845bc
SHA512 d8e6d8cb6634e3269dfb944819700173d585dcfc77ae7d7dbef660bce3c78108ac0804eeebe8ae2d5e3def5a00d790e5079b5173cdb1d3828dd749631808c00b
SSDEEP 192:XlzEliO2eEFjHfsfcVfCIPXPpohUp33G4Vc8r1/74zheum0v:SlhvctKhUg4aQhkzheTi
MD5 SHA1 SHA512 SSDEEP

Submit Download

wizard.aspx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizard.aspx
Size 10KB
SHA256 fd2cb3a63cd8cc6d4cc50e5ac0373ff78e19ea3196343cf91d1f3830497d3361
MD5 ab650239eb8a8c47e12cf78708b4c6f6
SHA1 6a98bb53dc104be383991a9f6e44d6686622caa9
SHA512 01734d830aebf2419075ae265e2267024ed7e0c3676f334ca9903e0df16416d5e1662b8753417a0f5714db7f084987c99ab66a9f7ae5b8a3ed5a90323bfd489f
SSDEEP 192:y/PZeN8y/+Vd0aoNLGa/L1cvoWVFYSwb7hHc4TVWg5UHyyQJf2BL+jkpb:0ZeN8yWn0KAL1cvTFYSwb7hHc4RWXHFV
MD5 SHA1 SHA512 SSDEEP

Submit Download

wizardAuthentication.ascx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardAuthentication.ascx
Size 2KB
SHA256 ef61cb884e873ef91f18c5cbbf44baaab9ffc97a59ab6cd81c0d3a4277df953d
MD5 31dd22b231e76055463395a3c3bd22d3
SHA1 093ca2a7dd3f11bc18c7f159711ea341765750c8
SHA512 0ccb9af767645e76661ab54f3eea080018afdcdad563892ac417fedfdca1ee281224238b6d3668388a88878b6ada4f213f94b0874b2eeb0f30a8cee6b05d970c
MD5 SHA1 SHA512

Submit Download

wizardCreateRoles.ascx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardCreateRoles.ascx
Size 7KB
SHA256 99b586a3470e26938c23ca6d14d3f16810bbfa1ed7ad55acde6a1dc2d60b5861
MD5 2e18798d356436c847cad61181b53342
SHA1 3b49ca338e26d3bdb1a9698a4bdfcc03ed925768
SHA512 6af503cae48281fcfae7f7dd1387f0584338dcce1711373fa83fc626ef7823d1aa559ca6bd18fc544c9995baabab6ee5630a69e5225129dafe033073afb32640
SSDEEP 192:v4fl6/I3Nx0SfuIcREJHiJV5ulLF1IPCHabh1d7x/bFp:vsaiiexZCVFPC6bpx/bFp
MD5 SHA1 SHA512 SSDEEP

Submit Download

wizardFinish.ascx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardFinish.ascx
Size 272B
SHA256 ae053369899f9a9040cd01524317f7960e9247c575aa8a16cfdbbd49b7f4cb72
MD5 150a5168391f7630b7a37f1886b218b1
SHA1 a0202c74b6ed194017cd1c81c4a6ac308db69d2e
SHA512 c942e875b9524e29bde6b65dd524844245e784564a2ee5b1d533091f345adb481276f0e94161dbaae0f3e4e20e503907d6f84f805cd23f362f115a251f91040a
MD5 SHA1 SHA512

Submit Download

wizardInit.ascx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardInit.ascx
Size 496B
SHA256 6a43365477277c0879dd75bfee9cf03bf2f6a9aa86e83ee1af123aae6de5cb8e
MD5 6a9a22a4fe9774f83f935faeaa37319f
SHA1 0b57f53306579ada0436deb7af1f81085e7497e3
SHA512 d3043caa3540da126fbbfec273539f811676da654e91fd13d5f457be279e2a08850e336ae47b361377cde6e76cff4492c55134111af5ef068f3da7f916ce6320
MD5 SHA1 SHA512

Submit Download

wizardPermission.ascx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardPermission.ascx
Size 24KB
SHA256 f4bd8c5e8fd76f5ed4d040f6dc01017b83d8c5517da6c35efab1f376866eec1e
MD5 bd578e2d7f3997edde4b8e69f28bab78
SHA1 ec437e2b465a12cfccf000874637f1f506428362
SHA512 a07c1f103d5e147a508ec462bd636688590c5b2bc76de174823318daf86739f1176b77a059feedb5749603b0909a4a242fb103a092cc316f45fef8b4c6d223c7
SSDEEP 768:vuNmYUmDuSVJ/f72zbinye3935rrW61l5u8MZbbVja:vu3UmPPb8HUfmY5pMZbbVja
MD5 SHA1 SHA512 SSDEEP

Submit Download

wizardProviderInfo.ascx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\wizardProviderInfo.ascx
Size 1KB
SHA256 ce5673911d6f95a3388bb5b63929c49b59f401555d448258cc34738b2b1a2408
MD5 9f10ce46674a4a1a2f68cb7af50cd96e
SHA1 be5b8eb70442cc06f601a169204c9fb1a63a7bb3
SHA512 46462de5537cd8839f91a0ec2e5465de906024cf70292a70729d0e4311c205e74c4da9337ef8d6f62da4efd2119422eb49c7f638270ad7d4984a723d3f67990e
MD5 SHA1 SHA512

Submit Download

security.aspx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\security.aspx
Size 9KB
SHA256 cb4c01f0ed36d6b662ad492975f6a8297dfc5a0a7875c5794e09b951c334ac61
MD5 237d9f4696145223bb3bba7950deceb0
SHA1 cc939b25a700bf88415c471497be6948180a09f4
SHA512 ddf1ff20bb30e4d802f950083fa4f0c8a5efed07541830e66ff267150f35c239baca737d85b99f7ef5012ef9c1a5d6aa3885f6a21ae839a251680ddf6a955413
SSDEEP 192:3fsRrPRdCU5q+LpfUWFDHe2qMMbDMmiQJu4n4XdWPcyoeol6VyGN38+Z5:30RFcU39BFDHe23CQmiegdjWol6VjNXn
MD5 SHA1 SHA512 SSDEEP

Submit Download

security0.aspx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\security0.aspx
Size 1KB
SHA256 2d28236ed07f65485ee444a3aafd78ff5a382aad80c87a45ed52bd839105d4f6
MD5 74b9601a00fd9d3026d8d229d543ecf3
SHA1 7054699a3f009d05f91ccda3affeff86eb05d010
SHA512 5852473f198c00ce9285eaa54e3d9196450697ee585994b21f2e273f4646bb6bba5e0882d4bec45640dab14d458100a79f387f7da56cea987c04951605121468
MD5 SHA1 SHA512

Submit Download

setUpAuthentication.aspx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\setUpAuthentication.aspx
Size 2KB
SHA256 714c0f6134bd6d45626c4ca68ffef579de0b801b7ddd20f11eb36d9431d8cfe8
MD5 a1191ff629b07847c7dfceadc126ce88
SHA1 476fb407520930ab0c03e2aa639cda1e39b7a1e5
SHA512 7049d19995c022d4876d7811dd64e19b9c4fc4e03d048b56a32e06691a86ba571031f750b941811a0e2549ff777e187b1656f0d1f37fa910a6d2935acdfc8b93
MD5 SHA1 SHA512

Submit Download

WebAdminHelp.aspx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp.aspx
Size 6KB
SHA256 081f18ebfcacdbada44a22740a37be8087d44ae48a58b7d02d6a8c591e83a0c7
MD5 69930df29f068038dcac60e841141636
SHA1 2a265834cd666861632e9baa1568dc3e593c98bd
SHA512 0282e5e8348d8eb9667a2e8c79c0962545bf477f9f2a1b3e62bd6a090c3e0a55ad281f66078a7c7096a43428ec1fb4e2c8d22c0b6db222705c3ceb3761ea3da7
SSDEEP 192:3Bm8IvCZZbceCACWYpHKPHNlIyaTuRs8l0pRNIai7q8M:3MzmChdIHNOtA0pUlvM
MD5 SHA1 SHA512 SSDEEP

Submit Download

WebAdminHelp_Application.aspx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Application.aspx
Size 13KB
SHA256 016e7b38b47cbb428d918733891eb8cf90ad53ca9537ddfa84aa5d2fc8bab1cc
MD5 e9d266e3fee0379747f18fe9d975ec14
SHA1 e0abb99fac61eaed5a7cc72e35650b6f4e5fed2a
SHA512 620067f4a93ee41521ca214d6367ae383af6a90278bd280e4c5ee95d82f8bb5b49b354045984d8edb122eb4a5a28333665173f66999817254698b569b3a670ae
SSDEEP 192:3Bm8IvCZZbVHmZ3nqdV2J+kJ9FEeOUsTZbH+lRiaNw/YTy0MkUjXmK2jfjRjziUh:3Mzgw1+kCeOD2uhkUjefJi+hjBj
MD5 SHA1 SHA512 SSDEEP

Submit Download

WebAdminHelp_Internals.aspx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Internals.aspx
Size 3KB
SHA256 a615803d2d2ccf6db5c2e167ce719a3f265fe59bbcddc0a0dd82ede9dfd22c44
MD5 b84381867d2d7ced3170be368acdc01d
SHA1 7356e3aa812ca3a6e92b0768fd12dcea27fa8484
SHA512 1cadc6e0dfdc913c62058f2abe2e1ec28e94046a8a3394514dc0b3b9bca89135198a545a6f24a76d408e91de7be4a8023b3a02dfc6222d3c68156c4ed8da1ecb
MD5 SHA1 SHA512

Submit Download

WebAdminHelp_Provider.aspx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Provider.aspx
Size 6KB
SHA256 f7b2fa9018497658d47eb4ebb1e23fd5a2bb3d7426d7f4ea450c244e3d3c9023
MD5 39076bce89bfe33a6bcf49ea6406ec42
SHA1 10dbe74063692466d9e29feff9e07a314326d679
SHA512 c9772bd99d84d2d3cc8f175c21b2e2f1c131a777617d761951a1d628603a3f274a60d047e4743c967e6f365e4d2a00152d9d40fd11546ea32badac196280294b
SSDEEP 192:3Bm8IvCZZbteUC4QjIjWCRtOJTRl7P2/SyYUUpiofl4o:3Mz2S0bITRl7P2/3ja5
MD5 SHA1 SHA512 SSDEEP

Submit Download

WebAdminHelp_Security.aspx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\WebAdminHelp_Security.aspx
Size 10KB
SHA256 48ed9c7118844d4f77a2627441b5797161fb1a32d86d32065d5be830bd74c082
MD5 37b3a35c01a21c6c04b19be235403557
SHA1 319a00a6e4685e632ca13032f587f5d49d9353d5
SHA512 d9dac27a33c928cdce930d7cb8c8308011652de28bf0024481612dbdd6f9f62b060dc42b30dd589dfee3b59ed699999c0f94f4d9103ddf17d7282e1758fb247a
SSDEEP 192:3Bm8IvCZZb2OkUaOXuJDzurrOqDAGtjemgbAXAjRYhDVUxStp7o1oZQh:3Mz68hOBAFmgsyY9OihY
MD5 SHA1 SHA512 SSDEEP

Submit Download

default.aspx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\default.aspx
Size 4KB
SHA256 9e9db2ac8385cff9d5b08ecad1c21e878c5813eaa30a58ffdf6673f102487ebf
MD5 d78095fcb783b673efc8a34024c30386
SHA1 15c64b07798536ec90000331043a4caf3ddaeba8
SHA512 cc876b1841848bcc0e6a39b6aa4a4df0ff4377b261a1c8e966808d40fcc032fbc18a871cdfcc5fe153623753dba9e16446e3f936ab5c34e8f24c3a662c40ddf1
SSDEEP 96:da5KylPcKbHxZjFFgUpb5bZkh1wF0hrcrzuK8tbXDTHyuY6QcDFzHW:MlzFFHpb5AyFdzGpYnGzW
MD5 SHA1 SHA512 SSDEEP

Submit Download

error.aspx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\error.aspx
Size 6KB
SHA256 6783f62f4fb92e027cb77f7ee7e234a4b127ed9a0d9ec7c89423af517692b37c
MD5 cda5f460520424a6fc4e2e198add5cc1
SHA1 de0507304e00d0a5e7663653c48c0ac54cf152a3
SHA512 276b54b6855a5af630f07291e433d180e6e842ca14bd93789a15b5c4d75ede22f8e56b2d667e253a9ca6d3bc7a12a2ac42fe8565b5c56219b588a053a7e8ffef
SSDEEP 96:eGx2BICZ1wOOm0lRFfxxn1i/ERdSpANCTUgetwrp+RU15ntk/1CfHj1z6OWYCcwG:d+3wScM/hAqSwl8z9Yj9/hChgEBY
MD5 SHA1 SHA512 SSDEEP

Submit Download

home0.aspx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\home0.aspx
Size 1KB
SHA256 48ee115c853dcd58ad8f4917d688596450318d3cace16aca1fa3fa855d934dc3
MD5 d798f82fc5110fc937ffd6ae4a68fac8
SHA1 a623f9f0c29011c240d8d0ee642f81fd597eeb7b
SHA512 bfd71400fe658b0001b18a418727fed6ec6eb06473099f9c21e27bc1cfc91b0a4fdda194baecd22643264f3c3c9622fa83500a1ec4152d14dd2c64d6b2e50e9d
MD5 SHA1 SHA512

Submit Download

home1.aspx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\home1.aspx
Size 752B
SHA256 f9d73a0646c0aed2213ae8e631c83e10ca5fcc75bd7e85d3cbfae8b401776711
MD5 dc21eb03d2d7e13ffd4691f6a9a5f247
SHA1 38f761050d8440fab06990e9441783f180939b36
SHA512 a446ddd3c62829519f7731102545b304519a54763b4afdff862989ba41588c03b880e5c3cba5cc97e7938a703545df654f665be906b69eb96d4d5e3249f20d37
MD5 SHA1 SHA512

Submit Download

home2.aspx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\home2.aspx
Size 1KB
SHA256 af008f5833d1a0d3c2a22afa338814004ce56e1c5ab4f421e2a5eb93cf25fef3
MD5 2c68c987e5542e94076e0391f9a447c6
SHA1 7825f2ac0f4f87ed325f1538cb3c7af9c30f586b
SHA512 18bd3fb046e609f432443347b9b5224d343c83b27c66bf556e73dede2f2886995b6803da68459750bcd2d926bf04583f5eff244f3499f1c6385a327c5c78e16a
MD5 SHA1 SHA512

Submit Download

navigationBar.ascx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\navigationBar.ascx
Size 8KB
SHA256 a30ab51950d18a666bea413a716fe76258095ae19e5cc8d953a47f39504be667
MD5 0105548dec3a14b677151f230b1535e6
SHA1 32a8bf3502e64d04df1bd4b2dc3b47aa4b506160
SHA512 db1de4539decca6a3c0bca2238c28a67b3c6422e178d9dc52906761130c0a5a01f7a29ce263515b37ef834f69894c56bf08f18270faf5a84ec1a38587d61b776
SSDEEP 192:vLTgUPN22OVcDWbJYUtbAIjaIe+xqxDp3knVdR+4:vHjnWciSIuIpQp0nVdY4
MD5 SHA1 SHA512 SSDEEP

Submit Download

DefaultWsdlHelpGenerator.aspx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\DefaultWsdlHelpGenerator.aspx
Size 68KB
SHA256 e3c7af5bfb31b652ed0022fd745e60c17163b10618f704b2bad7c4b22d51408d
MD5 382f6711b9329fe571d64194f532580f
SHA1 3f40f0060cfe0ad3a3d9b10071207c7a5cd08f6e
SHA512 baed487b625628640f7ba5c0c4e6a9adc158696322e9ad29d7ebd8a72fd6d0711b6ec2a17124c19002f761c213eade240a2ff66224e3a288681fec6e4c6ec137
SSDEEP 1536:btGmOmbxOFHXAPlbSont14ePfLXeEROcgb3j433MTB198GYq:Z34FHwooQeDdcDbjK3Fhq
MD5 SHA1 SHA512 SSDEEP

Submit Download

InstallCommon.sql

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallCommon.sql
Size 24KB
SHA256 cb3e8ba14dee4dc251a30d28fe64e737a78fac5591ee854278ad46e5729566e0
MD5 dd889ab46cd7a15bd9a1526680c70514
SHA1 707cdbb3f314d8c5a08688ff1e2038ac2e68c544
SHA512 0cc8ba0e1263dd8aca1eba7386075088d62958406cac15b01839f01703317afe046415506e8d3ca94890c389d308604adcb680a019c99d9ab89350ea7fc94852
SSDEEP 384:G1Yt4/IjZfrdwX/Yd7uucoXLH0uQX5Un1G8AFep3pOQum+j2jZ6Dkngy2Z:M/IjRr2PYJBnbyFep3ItjjoJ2Z
MD5 SHA1 SHA512 SSDEEP

Submit Download

InstallMembership.sql

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallMembership.sql
Size 54KB
SHA256 52f2f41a60f8019decec0d979f0399e465568ee075701239e3046d378ef83bbb
MD5 513959b205a3704908c86d496c4230cd
SHA1 0f8b23fc90bb32b2c679af71e87c52022cff4d6b
SHA512 7cc13a2472763c93814ec82a3938287bc9027245dbf61ab70e57367b06ca582f3dcf0c8f78fd4b5f9f1fc6f4b788b0fdb151ae2a6713c0c9a772a91a5d4fd957
SSDEEP 1536:ypFB/rdhe5YTXpD09OFVrfu29MaiiW3bWkP3N:i/rdheKTBZ3u29QiPkV
MD5 SHA1 SHA512 SSDEEP

Submit Download

InstallPersistSqlState.sql

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallPersistSqlState.sql
Size 51KB
SHA256 df597d4e94129bc1f4ec64098f1a7c358c1a1403fe21a868ce6ac04bb6dba941
MD5 eca51852310f36979ea213e8f5f396a6
SHA1 7a2dadf85a26835ad4dd316d69e2d6f9a2626cb3
SHA512 d86d268ddbc81544055ff5d4402fa0f67b886ddddc6d69305ab8ca4585bd661f0e1237ec36a2c46eb3b941517042c665427d910d8a6e22e27fcfa9903e4a0412
SSDEEP 768:CkTm9buFHeLlVCCJK8NfRvproLFNHQ2vwT2OXlWqFrMjqNnd/1jUijO:0PKMZproLF5TYuEY0TO
MD5 SHA1 SHA512 SSDEEP

Submit Download

InstallPersonalization.sql

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallPersonalization.sql
Size 34KB
SHA256 aff5814f02a09f70a3ccfc5ed851945579bb53072058699db879dea470231eb0
MD5 92a2f84790005ec33837174c79c20113
SHA1 0a8166aea1ddf25448bb6d7f5f511d35ae82493e
SHA512 cda0883b3834d8c06659045008a4481b999d0956ebaf45d7a1b3ce10232eecc72ec3cc16f84516c1f47b87f5081ca9bcfa4b545688b0fc2a943ac81510303f46
SSDEEP 768:UoFbC8c/0h83VCSPTNAhYp8H4tCDHmPALaJ3eKgBktSiWI37zPJQJ5:rFRc/0GCOTwYpo4tCDHmVJOKjQI37dQ/
MD5 SHA1 SHA512 SSDEEP

Submit Download

InstallRoles.sql

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallRoles.sql
Size 33KB
SHA256 3ed5429bc0122677129f9d911995386c339923b6deb22042ebf3f46f94ce95a2
MD5 79d32f72bcdfd16ce7ebf8ba69747326
SHA1 08f38021ee6f070e772e3ed08a5b0d5ece072545
SHA512 fcc90142d02f4db9125a4e56322b58c86388c894eb20cf500f6ec21c52bba2c4953813a15943e7fd26a08a900ee610c11e8389b49e91eb3b7ec4e892c188f2e7
SSDEEP 768:R1qD7qBEQow+3S+KUBp2F9FtBbGuwdsTeH/M0UfE0aVTIQ3AV:RAI2BKEeFXCuwNAzaBDQV
MD5 SHA1 SHA512 SSDEEP

Submit Download

InstallSqlState.sql

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallSqlState.sql
Size 50KB
SHA256 fda721544162357f020a42837c7293438174ed6d6593a3060b3cff2ec85079bd
MD5 91e92f921fb9a7a19a08cebbf0c671cf
SHA1 d3a019cb447dff330b5f83c291174abdaef72d4d
SHA512 b4bdc39e1063391307024caf1b3520df0e2b93c542c27533d5d84aaa8e486dd131038f13d09faa23f57879b013b17a5e1256be623e6fdbd558a55c838f2e3ad5
SSDEEP 1536:ew22WkbpJH+CYKfmf4wZD8jsyU4MBpBtKfd5:ew22vp4CI78QX4MBpBQfd5
MD5 SHA1 SHA512 SSDEEP

Submit Download

InstallSqlStateTemplate.sql

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallSqlStateTemplate.sql
Size 52KB
SHA256 5d40d479c36a01293d37d00b9f8e3834ef1c17ca1006e968f73ac484a62aa977
MD5 181360a83d51d2babc45bbbcc599b75d
SHA1 cba460acbf7e0b16a2cd7cad5ab2e874d9fc6c69
SHA512 74d28245b7696dbf4f90307b06b2317bcf35a6e7babd3dac8ebdc92e5730cb60b00ecdaddcf918f01796f29f3a87bf73844b3ae1747ead2bfbbacf66cd690661
SSDEEP 1536:5zsn9EVCTTrZsWNIsZym6PV26MGIH8TRddwH:5WTT+6PZ96PV26M5R
MD5 SHA1 SHA512 SSDEEP

Submit Download

InstallWebEventSqlProvider.sql

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallWebEventSqlProvider.sql
Size 6KB
SHA256 c5931458c28595c21f84b653c630f4391738c6c81ff4cb94f0b8e11bd370297d
MD5 1ece7d657577d878993820a29401e8c6
SHA1 d9711d4488979666044e5ecf1056a6c1e0bbc89e
SHA512 cbf2c5054edae2e1de0d509e83681051fe4721a054d1352c42881766548ad9a45b9e54cd33f5ca7c880099fc97a6198d98ccf1505366290652261eaabae30199
SSDEEP 192:Nq4Q5yJFDLlhbwnJNGS7jA/WEMO7qsUmaPrJw:Q46yJJLnmIWHYUBD+
MD5 SHA1 SHA512 SSDEEP

Submit Download

UninstallCommon.sql

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallCommon.sql
Size 3KB
SHA256 e80077ccca19aaddd5f215b32548f0fa7289f85535765ed32f608859cbe261fd
MD5 ca6b262e9a20cfb1a911887b37623cfb
SHA1 cc9dbd44aa0935593eea272375a2c13ece26b97b
SHA512 b6d4f1a150378eac56f12dbeb20493a87225e779d12f2ed1131046f5796a3e730fa8becc3bd38dbee98d4efac56dbc379d97397a58e1e8e8e884769c1770d8e5
MD5 SHA1 SHA512

Submit Download

UninstallMembership.sql

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallMembership.sql
Size 6KB
SHA256 19cd396295fee3e5bb3d52ff65709dc33a2a04deca32158ef31c71747ded4352
MD5 bc88ff54b31f16fe03f4c4874f5e91f6
SHA1 7bdba7f8fd4bc522a49221fb7796a056c3ac1028
SHA512 98a2e44ee45237093e02faf5354e9fdc3d5283456a5802883def339103ecba7b9c3e875efe4fb6473a2b7dcaa12c035cc71fc386f092f3e418548f82690453ef
SSDEEP 192:NUA/kIj9qBDjWs7UiDbt7RbLKrGniigBtaJ+Gcnb0zk:+A/9kB3n7NpVLuGniXUdcnb0Y
MD5 SHA1 SHA512 SSDEEP

Submit Download

UninstallPersistSqlState.sql

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallPersistSqlState.sql
Size 9KB
SHA256 a01344c5fd27918809f3d8812df658bd6b819261c443f607bbeac5e132cc95ca
MD5 cae2502795832e0a7f6bc2ec21213ca3
SHA1 8df0f85aee1dea3a51ac8836a47c9218e85222aa
SHA512 53ce83ac95ab67f16dff4951ac1f60a0ff87a1a67cc3f208643113c8366e7c70df896433248f66582cdde73f6b3321666fa8ef1af820ec460f1e211eca3a2e86
SSDEEP 192:NNDqcgCp7sYLM8CjAIVqMvzsckmXSdkZed1X68IP6:nDqcg67sYLqjAIAMvAAi2Zed1XN
MD5 SHA1 SHA512 SSDEEP

Submit Download

UninstallPersonalization.sql

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallPersonalization.sql
Size 7KB
SHA256 153473fea3e37fa2d90e272f6891075b896dc38676068e67b3728c3af7084abc
MD5 ffc17cb6b80790fa156fca337ec3a706
SHA1 c797a4eb04a17fe2d307a5c0414ec9946baf0344
SHA512 638cf35b521d0829ae74c8fa5dd851c2140db7bae958815080504385224f2911f7af57b85e2ce874609b58473a5e471ac54df4ed6c18640b5b3d75d69ada38e3
SSDEEP 192:NgSxXnNPosYJiRJ3/ENw9YYMz6csv2hySPkUBV+:6SFnGseiHPi4YYS6zyyekuV+
MD5 SHA1 SHA512 SSDEEP

Submit Download

UninstallRoles.sql

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallRoles.sql
Size 5KB
SHA256 0c2a29a78029cc28f404edea0fcade2de10d86a88fb291e2ccbeeadc78db6182
MD5 4cf479314404d8a0c0b45ee5d0bbfca9
SHA1 db826820d59cd2ba893162442c47cefb181ac752
SHA512 5fa6475bb58976e15f84007325b2b2b35b8d3c8dd0650cf0969c187c887f0f23b75b50d268c2a75f03295ee8b6259160eb643723a52c18a6fa744adec7ffe95c
SSDEEP 96:NOGQBPRwT2LwMWTUA+BgpUOmuVkLkl7zk4eUXoK6CvR4fyklco5++gcEQ85zXb1N:NOGYRQ2L4B8MmxYl7xOK6Rfyq5++KQ81
MD5 SHA1 SHA512 SSDEEP

Submit Download

UninstallSqlState.sql

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallSqlState.sql
Size 9KB
SHA256 0543955667f5cc9a4878452222f35721ead49f03b651b42d45c8d59e5f9db626
MD5 1ad8b409c4e8fdda673314f4e1bd1236
SHA1 fe96a00b7c84119abc0d7db329e30bb59adab2db
SHA512 96d88bcbec262b383c43fa10621ee5178b02fde2287802f7e02ffbe8f863d5211a1a3c0f940f1a8b6b4890933da6e25f902a9dfc5c6cad9f1a0f12d6d6af7731
SSDEEP 192:Njd+W1JsmDWxE3d4vEFTuPb2BPukFIroZrqNkVKJ6VRv7N2F6:Zd+WpDAHYTQbauqIWWK1l7gF6
MD5 SHA1 SHA512 SSDEEP

Submit Download

UninstallSqlStateTemplate.sql

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallSqlStateTemplate.sql
Size 11KB
SHA256 32d3fe0cd70372182b74b5b68fa26e682fb9b852b3c56b409eae88021d8fe002
MD5 69d433e039e8af80478f1eaac89812dd
SHA1 132e80550bbb662741f71c4155d1ae417b77ec95
SHA512 30bafc7152dcd236c4bd726f245f3dc9d2a20e21abbcfdc548c864cffad81ff5eae55f1b6b2766432b965b51ed5924d1e6d3f83abeb579c9d1ab46ce8208b193
SSDEEP 192:NBRst+9spJQyDjoNJcqK3KhdtRq5iKvxBSYCyY1SuR8qY6lOGSxT0LnF3wF:Xutwy36nK3KG5iKv6iY1FRpzWAVy
MD5 SHA1 SHA512 SSDEEP

Submit Download

UninstallWebEventSqlProvider.sql

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\UninstallWebEventSqlProvider.sql
Size 2KB
SHA256 d846b05fe93b8fabecfc47cfde03b595213077e880ca063dba5ff6082d2cf0fb
MD5 75d12eb8cd1b9f2351a2045dab40bff5
SHA1 7163f0c4e0fb61a491f9653266f6d73ba4f12109
SHA512 b5b1d1dcef95879d7fb492b76e759f69449cbf303fd831975ef25644b41bd27e9223568e9264da458d4f4f1cc6d8df1b8e0a1c7b8ddc9685f06871e6d03fbe78
MD5 SHA1 SHA512

Submit Download

SqlPersistenceService_Logic.sql

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\SqlPersistenceService_Logic.sql
Size 23KB
SHA256 4e3bef9f090fe5e27fe27dbeeb738034effde57a9b55b5a32a4a3a4d598f49b7
MD5 9e1d8a8535ad65f7b79c1120add8d002
SHA1 e2f15b96d1c9350835bfee9c5727231e567f116a
SHA512 94e759e642291b0bcdca4f5c2b5bbac8934c218a8511a3d382d2a66b035bfa3d28dfed63a3c68918607beb09edc0a17415360837fc58561a0f529c6032148a19
SSDEEP 384:bGAVyv0hEw3BOVMDpAhKvc0WZ4IKnEXO0+Fc91JUmEgjcrwuWU/eBvFtTbiH:bL0M/ROipAh8KZdXO7FE12PB//evFtTW
MD5 SHA1 SHA512 SSDEEP

Submit Download

SqlPersistenceService_Schema.sql

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\SqlPersistenceService_Schema.sql
Size 4KB
SHA256 93bfbb7ed04372bf5c2ae030eec6e1bd326d734f5e2facbd7d4b9d71489a6a49
MD5 612796cd3172b54ea7d9f11777f1117b
SHA1 3f3374ba2f67868964bb561a8bdbb01c715dee71
SHA512 3a6cd8469e1982759c9270a3042979a859cd3a7d87b79a5645740e91c330388c7d61e749daf9b2933c341e3225aaaa82742abb9c7757a8cf4ada537da5824a85
SSDEEP 96:DHgZfGJbUx9l/0FDfRZXCqIzQkUgQVdiAjVSqQxMqr4HEWw8:AGW9l0Fj7S/EkiVdLxSrr4HE58
MD5 SHA1 SHA512 SSDEEP

Submit Download

Tracking_Logic.sql

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\Tracking_Logic.sql
Size 372KB
SHA256 657b5d4eb4553095b05d91c0d5c694c9b53b552fec4b4b2005754b9e30f75308
MD5 d8f854c932f16b5add1857bfcfb06bdb
SHA1 e844bc6f6e914806fb9c9b8cd53e039e0a4799f8
SHA512 3a39b9ed55cd3ce06e3fac0a8277c441f2ce1d46ff79962402583885dab0a65b346dddfd917974c6d360e8bbffe02128ec5ec17f963d5122e831699fff08efd2
SSDEEP 6144:WB2gAzt2DGp1aQYb3nTXkF3i0nhZ4AI4q84OjAAns/pwS5g1EF42rYd4FjWn4:WB27k3QYbD43iDAI4qAs/pwb32mn4
MD5 SHA1 SHA512 SSDEEP

Submit Download

Tracking_Schema.sql

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\Tracking_Schema.sql
Size 49KB
SHA256 4df00dddf12dc8c6eccdcca1f7a71f9e2c9e1a816633cb35041867801c21f249
MD5 eb0a458e8c77e05534a199b153a0e59b
SHA1 49127e2ea5c589196bed8d444c769899602c27e8
SHA512 b1acc62950c73e2a9520b9e0b23506941b28605dd5f50ee9cc471c8ea97480d665cbd66fac12b5481d50093c22347324eba8cc82b429d6be933d34300af0e957
SSDEEP 1536:4PGLDK6BiGVC8mc0qlskNd1GC0QkuotVjlO8x0mO:vLDK6BioC1c0uskNV035SJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

DropSqlPersistenceProviderLogic.sql

Path C:\Windows\Microsoft.NET\Framework\v3.5\SQL\fr\DropSqlPersistenceProviderLogic.sql
Size 2KB
SHA256 488e9b6269ab306f77c303b12f67db20d186b883b233ec983275985466ce9bd5
MD5 88ac8ca60bc7bbbe255ccac2dc2d6ec1
SHA1 5316f96b5d9d178b9c641f84a19a4fa73fe98b9c
SHA512 cc4022b0aed90b39fd4861234f364826a63906fbc55034878304e75ab714c3340e620312650031c3eff52588b154512a2bdc35a59dda76d9559be13c000fad94
MD5 SHA1 SHA512

Submit Download

SqlPersistenceProviderLogic.sql

Path C:\Windows\Microsoft.NET\Framework\v3.5\SQL\fr\SqlPersistenceProviderLogic.sql
Size 13KB
SHA256 87db80318442345dd8b48eeed30f5fba670aa7b10bcdf778d1824549c3c033a5
MD5 c69cdba93b63d3c7ea28c03b6cbd064d
SHA1 e32683b34b4f09ef55e792acd6c828f3818b5e3b
SHA512 e5dcc651c5db3a256d38051b79bebb2f306a1e59b525ee5cac8c4de9f37b74fd59735cfd69c3f03688089ead5a48aa3361088b0ca8eaf2494baed7ba220f8138
SSDEEP 384:5bAs3NMEKYTjOxosXI1CAoUGhCM8XVeykaO:Gs3NMEKYxsXI1CPUgSvkl
MD5 SHA1 SHA512 SSDEEP

Submit Download

security_watermark.jpg

Path C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\security_watermark.jpg
Size 64B
SHA256 381949eabe2cc3cbaadb87691da1c92db522e04f855ef071c877848bbe5f3118
MD5 47130d4fcb8af7c8c9a1ecfde30900e6
SHA1 71450135edb1d9ad44b0c58753fc5990afff813f
SHA512 28318d882fad35b5fcfc9880076d1eaedd8bbb37e9a6512d60637642470ccea2d8c7a8ef364f79500bb24d9e4c5e7d90f5aee0f4c495bce20ef6cadc5c0b81fb
MD5 SHA1 SHA512

Submit Download

selectedTab_leftCorner.gif

Path C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\selectedTab_leftCorner.gif
Size 80B
SHA256 877648aadaabdb735c314636be27800fe344e5d52381bc5924892548446cc513
MD5 ecf03077a62c4adc375bb740de4653e6
SHA1 8d7c8936e5d8afb58f15971c9f8b000a6707366e
SHA512 54ab57687f9e23505e3e0c3d420bbf0c0c4f2c8f608a448dc431d422d0f5f36e4f9a9baef31f848d51fd6ca419c14d29741dd35b1852e9e6d54ce9aed4e3145c
MD5 SHA1 SHA512

Submit Download

selectedTab_rightCorner.gif

Path C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\selectedTab_rightCorner.gif
Size 80B
SHA256 9ac154a81670d2a7b3c21c3b0975de87f6172952b144f4e76b5ce69b1a4e5caa
MD5 0d0981312d02f872fbb5168ce33f92bf
SHA1 be77b62ade0578d80125f2c04b69333f52c148cc
SHA512 a66c675b7a3da7e1ef4408eedc181a1e1eee4fbb8a58a9a08e0fbfaff1558be0f8aaed2c961d348f7d46a6e295d189e5d8045cfb7a5357df48b6be81b66041b3
MD5 SHA1 SHA512

Submit Download

diagwrn.xml

Path C:\Windows\Panther\UnattendGC\diagwrn.xml
Size 10KB
SHA256 7d525da20259fbe113a2b1bb31e3fdf824bf83ef9f6b4ffebd1473ccca3fa1a9
MD5 749286598154406807fe8a8bf084fce4
SHA1 67ab0dee4a865eb02466b5baecbb64ab9c5b71b1
SHA512 2eeb8e1bdddd8320234647f7cfc6c9ce0aa3145fbe0ae34287006631c00080b469253cab26cbf36a5b949d1340fe8f567e7549853d65fddbdd87347b18a03955
SSDEEP 192:kZTwS3dwwBYjUSsjm61j6bKH04tPebwfr3lJFtDNa8PqDJLgrr6Orv:2TNdwwBgYi+HpVZlrxNaxubv
MD5 SHA1 SHA512 SSDEEP

Submit Download

DefaultLayouts.xml

Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Shell\DefaultLayouts.xml
Size 62KB
SHA256 96554488231d1c2665fa0b5c6b8a029e80e425ee5f1b7f13ec7ac36146ae8147
MD5 d7238efcd877dbbcdcbfb6d467484855
SHA1 b68feebe077ef83343122da55c301112808b89bd
SHA512 b6c86fb952bd8984583c72d5ed75033c6456c4cfa475eb50bfd07515937c8e02ca8cd8154c643d25975c194777f6901a8dd09432e75ab315fe11d90c610415cc
SSDEEP 1536:ehHQUVlE2n4iQmx2Y5f0QR4gfK0R5MkKQth:eeUVKK35f084WKoMXE
MD5 SHA1 SHA512 SSDEEP

Submit Download

edbtmp.log

Path C:\Windows\security\database\edbtmp.log
Size 1.0MB
SHA256 1b6bba9f4ccc9d47d3044be59a5f013dc432f439f960990ba545c6b678a62359
MD5 7f1798b66e609ba95ff8607e3577988d
SHA1 c2286f5b68b08036e609fcbecffd2382a0e02293
SHA512 4e41af62b790097fa27617936c5913a116e5dda42b6243effd2302d74fe4a3df378f324a2a5befe5bd9de3d4715de1d277581316c35f52109719e0cb5002405a
SSDEEP 24576:Si9mSS2O7eeQcjR8+C4Ae4YPRDbuGKffekVh:B9mSvehlAeRPRu/ffeEh
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/3416-635-0x0000000002EA0000-0x0000000002EB0000-memory.dmp

Download

memory/3416-151-0x0000000002EA0000-0x0000000002EB0000-memory.dmp

Download

memory/3416-150-0x0000000000D50000-0x0000000000D5C000-memory.dmp

Download

memory/4416-5-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-135-0x0000000005E70000-0x0000000005E7E000-memory.dmp

Download

memory/4416-59-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-57-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-55-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-53-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-51-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-49-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-48-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-46-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-43-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-41-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-39-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-37-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-35-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-34-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-31-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-29-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-27-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-25-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-23-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-21-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-19-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-17-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-15-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-13-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-9-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-63-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-65-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-67-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-119-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-99-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-69-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-4-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-1-0x0000000002500000-0x0000000002532000-memory.dmp

Download

memory/4416-133-0x0000000004CA0000-0x0000000004CB0000-memory.dmp

Download

memory/4416-134-0x0000000004CA0000-0x0000000004CB0000-memory.dmp

Download

memory/4416-61-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-72-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-73-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-75-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-0-0x0000000004CA0000-0x0000000004CB0000-memory.dmp

Download

memory/4416-78-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-79-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-81-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-83-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-85-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-87-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-89-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-91-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-93-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-95-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-97-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-101-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-103-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-105-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-107-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-109-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-111-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-113-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-115-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-117-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-121-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-123-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-125-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-128-0x0000000004CA0000-0x0000000004CB0000-memory.dmp

Download

memory/4416-132-0x0000000005270000-0x000000000527A000-memory.dmp

Download

memory/4416-131-0x0000000004B60000-0x0000000004BF2000-memory.dmp

Download

memory/4416-130-0x0000000004CB0000-0x0000000005256000-memory.dmp

Download

memory/4416-129-0x0000000002580000-0x0000000002581000-memory.dmp

Download

memory/4416-127-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-11-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-7-0x0000000002530000-0x000000000255B000-memory.dmp

Download

memory/4416-3-0x0000000002530000-0x0000000002562000-memory.dmp

Download

memory/4416-2-0x0000000004CA0000-0x0000000004CB0000-memory.dmp

Download

memory/4688-22286-0x00007FFCACBD0000-0x00007FFCACC04000-memory.dmp

Download