e32023308bc8c1b303d77b678540cbf6c1e8c382186da4d61fd7d6baba22be6c

Analysis

max time kernel
148s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/10/2026, 22:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_Trojan.Win32.Copuper.exe
Size 32KB
Sample261018-2hadsswtev
SHA256 e32023308bc8c1b303d77b678540cbf6c1e8c382186da4d61fd7d6baba22be6c
MD5 e8bba39cdad052317f615c3791354be1
SHA1 9b781b457809ac636de16ea653fd805b47aabff0
SHA512 054b6e4e37e579fdeb927795d1f87d5c4e6c89d44a8589713452105b0536561409a529eb1facfe379be83ce22495d3a182c82ec60856f3ae2fb163bb6c740a1d
SSDEEP 768:Zp0RBS1qNRwBIrUixjrGDwDGG+NiXFgKa51:ZpiS1lBIrUi1rLD/6jL
TLSH
T1B1E2D402A316916AF96789F77E7E0B79D22E78B10B4420C7E7C85D1E8974ED17A3210F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Drops file in Drivers directory 22 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\Drivers\es-ES\NdisImPlatform.sys.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\Drivers\es-ES\wfplwfs.sys.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\Drivers\fr-FR\NdisImPlatform.sys.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\Drivers\it-IT\wfplwfs.sys.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\Drivers\afunix.sys	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\Drivers\de-DE\NdisImPlatform.sys.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\Drivers\de-DE\wfplwfs.sys.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\Drivers\en-US\NdisImPlatform.sys.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\Drivers\en-US\ndiscap.sys.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\Drivers\fr-FR\wfplwfs.sys.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\Drivers\ja-JP\NdisImPlatform.sys.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\Drivers\gm.dls	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\Drivers\gmreadme.txt	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\Drivers\fr-FR\ndiscap.sys.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\Drivers\it-IT\NdisImPlatform.sys.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\Drivers\uk-UA\NdisImPlatform.sys.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\Drivers\de-DE\ndiscap.sys.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\Drivers\es-ES\ndiscap.sys.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\Drivers\it-IT\ndiscap.sys.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\Drivers\ja-JP\ndiscap.sys.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\Drivers\ja-JP\wfplwfs.sys.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\Drivers\en-US\wfplwfs.sys.mui	jaffacakes118_Trojan.Win32.Copuper.exe

Manipulates Digital Signatures 1 IoCs

Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\wintrust.dll	jaffacakes118_Trojan.Win32.Copuper.exe

Drops desktop.ini file(s) 62 IoCs

description	ioc	Process
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..ktopini-accessories_31bf3856ad364e35_10.0.26100.1_none_e90ac44521f6781d\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-shell32-kf-public_31bf3856ad364e35_10.0.26100.1_none_53f4413b5b0ec6c8\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\Web\Wallpaper\ThemeD\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..-kf-programfilesx86_31bf3856ad364e35_10.0.26100.1_none_7f736e321868c082\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..l32-kf-commonvideos_31bf3856ad364e35_10.0.26100.1_none_d939b1ba77084dd2\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-shell32-kf-commonmusic_31bf3856ad364e35_10.0.26100.1_none_760a3fa79d0dd71f\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..ktopini-systemtools_31bf3856ad364e35_10.0.26100.1_none_7b60e8f9f0308735\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..32-kf-commondesktop_31bf3856ad364e35_10.0.26100.1_none_ef1cce0418e0ca2e\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..i-accessibilityuser_31bf3856ad364e35_10.0.26100.1_none_6038226271499ae0\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..ini-systemtoolsuser_31bf3856ad364e35_10.0.26100.1_none_1d9f561f4c141236\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_11.0.26100.1150_none_16c5cc95ed81961d\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..er-content-extended_31bf3856ad364e35_10.0.26100.1_none_e78a517c04a5f782\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..ini-maintenanceuser_31bf3856ad364e35_10.0.26100.1_none_02fb486cbe6baf65\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..ktopini-maintenance_31bf3856ad364e35_10.0.26100.1_none_5b8ddc5d05b3ae46\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\Media\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..opini-accessibility_31bf3856ad364e35_10.0.26100.1_none_d75f0561e5d53d5b\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-shell-wallpaper-themeb_31bf3856ad364e35_10.0.26100.1_none_d3c94f250d7f74ae\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\Web\Wallpaper\ThemeC\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..-kf-publiclibraries_31bf3856ad364e35_10.0.26100.1_none_12dc48264ff839df\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..l32-kf-userprofiles_31bf3856ad364e35_10.0.26100.1_none_80d96be390261ff6\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\WinX\Group3\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-fontext_31bf3856ad364e35_10.0.26100.1591_none_3a4593a9a3a42262\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\Web\Wallpaper\Extended\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..l32-kf-programfiles_31bf3856ad364e35_10.0.26100.1_none_128f27879ad1c14e\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-shell-wallpaper-themea_31bf3856ad364e35_10.0.26100.1_none_d3c965ed0d7f5b0d\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..-kf-commondownloads_31bf3856ad364e35_10.0.26100.1_none_f0177ec0bacc01ab\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-shell-wallpaper-themec_31bf3856ad364e35_10.0.26100.1_none_d3c9385d0d7f8e4f\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-shell-wallpaper-themed_31bf3856ad364e35_10.0.26100.1_none_d3c921950d7fa7f0\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-shell-sounds_31bf3856ad364e35_10.0.26100.1_none_140624931e1631ac\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..-kf-commonstartmenu_31bf3856ad364e35_10.0.26100.1_none_3df18355654b83e7\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..sktopini-sendtouser_31bf3856ad364e35_10.0.26100.1_none_053839e1fca5597b\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\Web\Wallpaper\ThemeB\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..2-kf-commonpictures_31bf3856ad364e35_10.0.26100.1_none_7d46065ee5cd8613\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..ini-accessoriesuser_31bf3856ad364e35_10.0.26100.1_none_20f7d6167cb25b4e\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\Fonts\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\SendTo\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..-kf-commondocuments_31bf3856ad364e35_10.0.26100.1_none_4bc4edc230be4464\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\Downloaded Program Files\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\Offline Web Pages\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\SendTo\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-ie-offlinefavorites_31bf3856ad364e35_11.0.26100.1150_none_40cb47622b181101\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..2-kf-commonprograms_31bf3856ad364e35_10.0.26100.1_none_4b82445892b64521\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..32-kf-commonstartup_31bf3856ad364e35_10.0.26100.1_none_f903e633b39522d3\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..kf-commonadmintools_31bf3856ad364e35_10.0.26100.1_none_520ba6927730f124\desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\Web\Wallpaper\ThemeA\Desktop.ini	jaffacakes118_Trojan.Win32.Copuper.exe

Drops file in System32 directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\system32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Containers-Guest-Gated-Package~31bf3856ad364e35~amd64~de-DE~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DirectoryServices-ADAM-Tools-Opt-WOW64-Package~31bf3856ad364e35~wow64~fr-FR~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OfflineFiles-UI-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-EditionPack-Professional-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\dot3ui.dll	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\kbdarmph.dll	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\DriverStore\FileRepository\mdmatm2k.inf_amd64_84b3aaac73750c81\mdmatm2k.inf	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\HyperV-Guest-KernelInt-Package~31bf3856ad364e35~amd64~ja-JP~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\HyperV-VMMS-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\HyperV-Vpci-VSP-merged-Package~31bf3856ad364e35~amd64~uk-UA~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\it-IT\wldap32.dll.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\DriverStore\FileRepository\mchgr.inf_amd64_d324fd60dcc3fe67\adicvls.sys	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\DriverStore\it-IT\WceISVista.inf_loc	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Management-SecureAssessment-Package~31bf3856ad364e35~amd64~ja-JP~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Containers-Client-Guest-Package~31bf3856ad364e35~amd64~it-IT~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\ja-JP\Windows.System.Profile.HardwareId.dll.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\pt-BR\SyncRes.dll.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\uk-UA\urlmon.dll.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\wbem\uk-UA\csv.xsl	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\System32\DriverStore\en-US\bcmfn2.INF_loc	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\System32\DriverStore\it-IT\mausbhost.inf_loc	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\verifier.dll	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MSMQ-MMC-OptGroup-Package~31bf3856ad364e35~amd64~es-ES~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnms012.inf_amd64_17bb82cc430e1f2e\MSIPP-manifest.ini	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\HyperV-UX-UI-Client-merged-Package~31bf3856ad364e35~amd64~de-DE~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\Windows.Graphics.Printing.Workflow.dll	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-ETW-Rundown-Package~31bf3856ad364e35~amd64~~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Helium-Package~31bf3856ad364e35~amd64~uk-UA~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Streaming-merged-Package~31bf3856ad364e35~amd64~de-DE~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Runlevel-Win4-WOW64-merged-Package~31bf3856ad364e35~amd64~es-ES~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\System32\DriverStore\ja-JP\rt640x64.inf_loc	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Win1-WOW64-merged-Package~31bf3856ad364e35~amd64~de-DE~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\sdbinst.exe	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Basic-Http-Minio-Package~31bf3856ad364e35~amd64~it-IT~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\prnms014.inf_amd64_b02bbec129278b6e\MSMPS.xml	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\System32\DriverStore\de-DE\prm.inf_loc	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Connectivity-Bluetooth-WOW64-Package~31bf3856ad364e35~amd64~ja-JP~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\en-US\pspluginwkr.dll.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\HyperV-Worker-Package~31bf3856ad364e35~amd64~fr-FR~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-Console-Driver-Boot-Package~31bf3856ad364e35~amd64~~10.0.26100.1150.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\it-IT\PhotoScreensaver.scr.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CoreSystem-BootEnv-merged-Package~31bf3856ad364e35~amd64~de-DE~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\DriverStore\es-ES\e2xw10x64.inf_loc	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\ja-JP\apphelp.dll.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\System32\DriverStore\en-US\usbstor.inf_loc	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MSMQ-MMC-OptGroup-Package~31bf3856ad364e35~amd64~~10.0.26100.1742.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\DriverStore\FileRepository\urschipidea.inf_amd64_37fb14618bce547b\urschipidea.sys	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\IME\SHARED\IMEPADSM.DLL	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-SecureStartup-Foundation-Package~31bf3856ad364e35~amd64~uk-UA~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Media-Streaming-WOW64-Package~31bf3856ad364e35~amd64~it-IT~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-FirmwareUpdate-StorFwUpdate-Package~31bf3856ad364e35~amd64~ja-JP~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Kernel-Package-BootEnvironment-Strings-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-TFTP-Client-FOD-Package~31bf3856ad364e35~amd64~uk-UA~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\bthprops.cpl	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\HyperV-Storage-VirtualDevice-SMB-Package~31bf3856ad364e35~amd64~~10.0.26100.1591.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CoreSystem-RemoteFS-WOW64-Package~31bf3856ad364e35~amd64~uk-UA~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\fr-FR\CloudNotifications.exe.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SysWOW64\fr-FR\DeviceSetupStatusProvider.dll.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\mdmdcm5.inf_amd64_ca7bcc60b39fb4a6\mdmdcm5.inf	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DirectoryServices-ADAM-Client-OptGroup-WOW64-Package~31bf3856ad364e35~wow64~es-ES~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\DriverStore\es-ES\mvumis.inf_loc	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\DriverStore\ja-JP\microsoft_bluetooth_hfp_ag.inf_loc	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\system32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PhotoBasic-merged-Package~31bf3856ad364e35~amd64~ja-JP~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PhotoBasic-Feature-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\assembly\GAC_MSIL\Microsoft.Transactions.Bridge.Resources\3.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Resources.dll	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744CAF070E41400\15.7.20033\eBook.api	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.ECApp_8wekyb3d8bbwe\resources.pri	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-p..m-library.resources_31bf3856ad364e35_10.0.26100.1_es-es_efd8729112825ebd\wpncore.dll.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-w..mof-admin.resources_31bf3856ad364e35_10.0.26100.1_ja-jp_4f0b7ef4a3fb9fb0\ScrCons.mfl	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-wsp-spaces.resources_31bf3856ad364e35_10.0.26100.1_uk-ua_c1c9cef4b405141b\mispace.dll.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-apprep-chxapp.appxmain_31bf3856ad364e35_10.0.26100.1150_none_d3d0c423c229a48e\Logo.scale-100.png	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\wow64_microsoft.powershel..resources.resources_31bf3856ad364e35_10.0.26100.1_ja-jp_b7e4583a085a20fa\MSFT_PackageResource.schema.mfl	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\servicing\Packages\Windows-ClientCore-Win32Bridge-Package~31bf3856ad364e35~amd64~de-DE~10.0.26100.1.mum	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_10.0.26100.1_it-it_8d2127d9c507f786\System.Configuration.Install.resources.dll	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_msmouse.inf.resources_31bf3856ad364e35_10.0.26100.1_ja-jp_fd33a57abbea504d\sermouse.sys.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework\v4.0.30319\de\System.DirectoryServices.AccountManagement.resources.dll	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\findUsers.aspx.ja.resx	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\XamlViewer\XamlViewer_v0300.exe.manifest	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_netfx4-mscorsecr_dll_b03f5f7f11d50a3a_4.0.15912.0_none_ed7481f0ef395eea\mscorsecr.dll	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\servicing\Packages\Microsoft-Windows-Embedded-KeyboardFilter-Core-Package~31bf3856ad364e35~amd64~fr-FR~10.0.26100.1.mum	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\manageUsers.aspx.ja.resx	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SystemApps\MicrosoftWindows.UndockedDevKit_cw5n1h2txyewy\resources.pri	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-r..rtmanager.resources_31bf3856ad364e35_10.0.26100.1_fr-fr_cbb83c713409a73d\RestartManager.mfl	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-s..rvice-wmi.resources_31bf3856ad364e35_10.0.26100.1_en-us_60ddd21d876a3aaa\mspsservice_uninstall.mfl	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\servicing\Packages\Microsoft-UtilityVM-Containers-Setup-Shared-Package~31bf3856ad364e35~amd64~fr-FR~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\servicing\Packages\Microsoft-Windows-SearchEngine-Client-Package-shell-Package~31bf3856ad364e35~amd64~it-IT~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\FileMaps\$$_system32_configuration_schema_msft_filedirectoryconfiguration_fr-fr_648627933ceae65e.cdf-ms	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-wlan-adm.resources_31bf3856ad364e35_10.0.26100.1_ja-jp_5da10368e119a8fd\wlansvc.adml	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\x86_netfx4-aspnet_webadmin_wizard_res_b03f5f7f11d50a3a_4.0.15912.0_none_249bcdb8c0a553e0\confirmation.ascx.resx	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\INF\netmscli.inf	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\Catalogs\668d67b9f26deba28de948f1ec2156e07f93bdd4e3d0682c065cb4d48c8e71bc.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.CapturePicker_cw5n1h2txyewy\pris\resources.it-IT.pri	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SystemApps\ParentalControls_cw5n1h2txyewy\Assets\FamilySafetyAppList.targetsize-96_altform-unplated.png	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\msil_microsoft.jscript_b03f5f7f11d50a3a_10.0.26100.1_none_766ca70d36982759\Microsoft.JScript.dll	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-u..fiedstore.resources_31bf3856ad364e35_10.0.26100.1_ja-jp_a11fd23b74169bd3\Unistore.dll.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\wow64_microsoft-windows-sharedaccess_31bf3856ad364e35_10.0.26100.1_none_0c15b158e639a4e7\potscfg.xml	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\Manifests\wow64_microsoft-windows-storprop_31bf3856ad364e35_10.0.26100.1_none_2d9b0729cdd711dd.manifest	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_dual_wvmbusvideo.inf_31bf3856ad364e35_10.0.26100.1150_none_c42fc8774b76da18\wvmbusvideo.inf	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\Manifests\wow64_microsoft-windows-i..ptracing-deployment_31bf3856ad364e35_10.0.26100.1742_none_293840e9b4f8bc8d.manifest	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\wow64_microsoft.powershell.pester_31bf3856ad364e35_10.0.26100.1150_none_7a6e656d581b85dd\nunit_schema_2.5.xsd	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.Resources\2.0.0.0_it_b77a5c561934e089\System.Runtime.Remoting.Resources.dll	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\servicing\Packages\Microsoft-OneCore-TraceDataHelper-Package~31bf3856ad364e35~amd64~ja-JP~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\Backup\amd64_microsoft-windows-watchdog_31bf3856ad364e35_10.0.26100.1150_none_fc5038b35965fa34.manifest	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\Manifests\wow64_microsoft-windows-directcomposition_31bf3856ad364e35_10.0.26100.1591_none_43894734262abda4.manifest	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-host-network-service_31bf3856ad364e35_10.0.26100.1742_none_9689b881104562e7\HostNetworkingService.psm1	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_5.82.26100.1591_he-il_849df6cd803a008c\comctl32.dll.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\wow64_microsoft-windows-d..ers-image.resources_31bf3856ad364e35_10.0.26100.1_it-it_67c2494fa99f54bb\SmiProvider.dll.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\SystemApps\Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy\Assets\SplashScreen.contrast-white_scale-100.png	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\wow64_microsoft-windows-d..ment-core.resources_31bf3856ad364e35_10.0.26100.1_uk-ua_434335348c446fe4\FolderProvider.dll.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\servicing\Packages\Microsoft-Windows-WinOcr-Package~31bf3856ad364e35~amd64~en-US~10.0.26100.1.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\FileMaps\$$_systemapps_microsoft.windows.oobenetworkconnectionflow_cw5n1h2txyewy_speech_0416_22164891daca000f.cdf-ms	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\Manifests\wow64_microsoft-windows-security-spp.resources_31bf3856ad364e35_10.0.26100.1301_en-us_42e939c91b3a189d.manifest	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\servicing\FodMetadata\metadata\DesktopTargetCompDB_Conditions.xml.cab	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\FileMaps\$$_microsoft.net_framework_v4.0.30319_it-it_633336795693c6d4.cdf-ms	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-mmsys.resources_31bf3856ad364e35_10.0.26100.1_fr-fr_a5b5bfcc7dd3d9da\mmsys.cpl.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-security-ngc-recovery_31bf3856ad364e35_10.0.26100.1150_none_2f8e41793c67ca50\ngcrecovery.dll	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_netfx4clientcorecomp.resources_31bf3856ad364e35_10.0.15912.0_it-it_05144f61191893ae\clretwrc.dll	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\FileMaps\$$_microsoft.net_assembly_gac_msil_aspnet_regbrowsers.resources_v4.0_4.0.0.0_ja_b03f5f7f11d50a3a_7c5991bf9d0bf5cb.cdf-ms	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_system.transactions.resources_b77a5c561934e089_4.0.15912.0_fr-fr_c4b7af8a2e6074c0\System.Transactions.resources.dll	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_userexperience-photon_31bf3856ad364e35_10.0.26100.1591_none_faf85d9f2170dfcf\Photon\Public\wsxpacks\StartMenu\assets\strings\pa-IN.json	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\servicing\Packages\Microsoft-Windows-Multimedia-RestrictedCodecs-merged-Package~31bf3856ad364e35~amd64~ja-JP~10.0.26100.1.mum	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\FileMaps\$$_microsoft.net_assembly_gac_msil_system.web.entity.design.resources_v4.0_4.0.0.0_it_b77a5c561934e0_a5907fd0baab345e.cdf-ms	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\Manifests\msil_multipoint-wms.dashboard.forms.resources_31bf3856ad364e35_10.0.26100.1_es-es_8624bf38c4f8f1c1.manifest	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-wimgapi_31bf3856ad364e35_10.0.26100.1150_none_24e2f2e0c4c87239\r\wimmount.sys	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\Catalogs\94bf58dfcce733073259cdff5e4daf5ae369c65d5b133c5756b83a865b3a4ec5.cat	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_dual_netrtwlane_13.inf_31bf3856ad364e35_10.0.26100.1_none_9abacbd082ca994a\netrtwlane_13.inf	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft-windows-p..gssystems.resources_31bf3856ad364e35_10.0.26100.1_de-de_b0045e2852a93957\fpb.rs.mui	jaffacakes118_Trojan.Win32.Copuper.exe
File opened for modification	C:\Windows\WinSxS\wow64_netfx4clientcorecomp.resources_31bf3856ad364e35_10.0.15912.0_es-es_82898d6d837559c9\CvtResUI.dll	jaffacakes118_Trojan.Win32.Copuper.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_Trojan.Win32.Copuper.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4952	jaffacakes118_Trojan.Win32.Copuper.exe
4952	jaffacakes118_Trojan.Win32.Copuper.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Copuper.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Copuper.exe"
1⤵
- Drops file in Drivers directory
- Manipulates Digital Signatures
- Drops desktop.ini file(s)
- Drops file in System32 directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4952

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

EditAppSetting.aspx.de.resx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\EditAppSetting.aspx.de.resx
Size 1KB
SHA256 bf5b99d9a5d9be7d03720c1a0bdc89cc7780489b2cf662f01e3311dfef4a2b0a
MD5 e6c8a2db2300cc804662e2773e1d9e43
SHA1 1925b0a1b4d209551772fa862035bc92e75bf432
SHA512 e3c255d37b973064d57345c7e3ac187e0c8199b4bce3cc225eac272a0e47ba739eb83ae27598f0869958622a08afa4f2a4b830da6b198fb8cce2ee7913d65865
MD5 SHA1 SHA512

Submit Download

home1.aspx.resx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\home1.aspx.resx
Size 859B
SHA256 9cb38be196886b52d5ac0d9fdc0c11a111cf2eae853ab509064d9b10a4c88d86
MD5 98bbc43168e01b27573c64fb9cfc0627
SHA1 e44d656ee8dc267329acce2e7159c249befd676d
SHA512 aeb30b49415123de7f06973fe0be6b466ddd41a4bfc1c8a723c7fe6c51de61acecb3402cf2b20d3d38905dad82511f304107b00d816ff2711a0d2d44b4760d46
MD5 SHA1 SHA512

Submit Download

headerGRADIENT_Tall.gif

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif
Size 328B
SHA256 7b4499c3cc6e82a9da3100028f52af7f8c1e9ee60e33010a108e401989782962
MD5 c95483c701c7fc677e89f2c44f98a30b
SHA1 3376d9102f4057b30088ce2fb6c975f8387e82a1
SHA512 9584920b1a1abfc6d2eb10d04a5b2e25e2b1edbb47f1adcf5b378ccb3b3e32ad8c480b436d254af44806be2e71408983932426bf0b749d56e98d122827fa9afc
MD5 SHA1 SHA512

Submit Download

providerList.ascx.es.resx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Providers\App_LocalResources\providerList.ascx.es.resx
Size 1022B
SHA256 8a6b0c063afb20e1b1581be78eb31de5073e09307f643fbd2c39b810e0b8e70c
MD5 698b6fbd9681822c8ca9c2bbac98d1f8
SHA1 9da6a98b30cc48b67f44336b338f80db104a03a9
SHA512 838ae0f23dc4a326d80e3382ba2dcabc3c55db082b4ffbbac72fb1e95c925f0a51ebd090935af8e88776cce7be8adb2cbbf176380aa5df7514a0099767843f94
MD5 SHA1 SHA512

Submit Download

security0.aspx.de.resx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\App_LocalResources\security0.aspx.de.resx
Size 1KB
SHA256 fcf1221c37df7ae9d6dbf59fdf1a680f01f033f73612b2badcf71a22dfaf2026
MD5 0675849b6f08ad701a59dc35f8faab8b
SHA1 09deeec01a8e278aebb52d0dd9b894805788b586
SHA512 e46b45c05ddb2fe4d737777ffc7239f722f75b9f09b3db6ae0ce9dce51b8e3c83daa7b9c6b1e247e39ea4a5904622fb5a7991ead88d0f0bb22e629fbe6f76399
MD5 SHA1 SHA512

Submit Download

manageUsers.aspx.it.resx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\manageUsers.aspx.it.resx
Size 3KB
SHA256 1dcefa4507078f5f3d726238ee2d68c62dd17ec5206bd5adbc7476e876635ac5
MD5 82e6dc4fe649d3c8695ad5876467061d
SHA1 3602433e09e07bb9b881fb9a6d2f67551f98d4c3
SHA512 b93b36b7001d5b1c8027a4d2489d5b1962a18302424232a6387e1eab19b5f52d27392c888467d145bd9db3edfe2014cb582d6679e431067a803405a523bbed4a
MD5 SHA1 SHA512

Submit Download

confirmation.ascx.it.resx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\confirmation.ascx.it.resx
Size 778B
SHA256 7f3d733e784fe23abea1c8b722775abb8bab2f7f3b72e5e80f6de1e3fd997a63
MD5 b8f9731d34c384285638adb599028f86
SHA1 a6b5fab1afd2206bd331b72e19e6d76ad55f3c73
SHA512 3383787f7a6a02dcdb24b09330ce66d219d19f4d05b34f64760c79df67230d11c89e668e911af6790e829e1a51b31548ca206c0ebed00c2a8041c1ca55483a3e
MD5 SHA1 SHA512

Submit Download

wizard.aspx.de.resx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizard.aspx.de.resx
Size 2KB
SHA256 351999fe13e66958445607e7bbb33b7e03b4f456738c04ff5b31052a4696310a
MD5 3eded0c397050abbc76131b739ce1962
SHA1 4f47190ea2ee52736a39eea25fcd7d65388d307f
SHA512 de5bcdb24a4e69d1a4154f26848a3c993b05fc93b2480eae4a4d98b1a8519c3266f9f2118767a97543b1ef1565019702112554d6ff5f83ed06033ecbfb0baecc
MD5 SHA1 SHA512

Submit Download

wizard.aspx.fr.resx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizard.aspx.fr.resx
Size 2KB
SHA256 b108fc34a634e41c145d132689da4a125f6932e03ce259c1a2f3a46b1f439248
MD5 ccf012b51df40d56aa63017bffeb2eb5
SHA1 0ddaca489a2427cd588b18597c9debef9817ba8d
SHA512 29619bc8a2241f605159b530017a970964ac59b3076183aca3c9dbb83f4b7edc4f23e8da28af617384be4caf6acada31aaf7fa3a905f16b406bc3b7d4aa8bdd4
MD5 SHA1 SHA512

Submit Download

wizard.aspx.it.resx

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizard.aspx.it.resx
Size 2KB
SHA256 2f47ffe37c6dff1cd59018ac373cd6fbbe1673d68d76b23ce19011f8cae470f5
MD5 0f4e578c873e719c7117e9926d4575bc
SHA1 f5c2e45513fa3657160ff38111a745f76cf679e1
SHA512 01c7d68bb8a0efc419b3ba486ba9a906bb97e84828b2fa2df93cf6d52b22a2b5cbecfccbc3a28e9818d4d9ea8a20b10da5138e5bb507c8326a278084c0fed1ce
MD5 SHA1 SHA512

Submit Download

csc.exe.config

Path C:\Windows\Microsoft.NET\Framework64\v2.0.50727\csc.exe.config
Size 221B
SHA256 2bc4c1df7642be2fac3014a5f74ff7a2acf5bcb9908ece2d35d7ee460ddfe505
MD5 583f1e6ae6139d843c311b2915ad55cd
SHA1 79c445ff4af8852db6e6cec717be674c9d8e7ce7
SHA512 34c2e4016d4a1ed3bb3d92331b24d8df1775ac76b787311a811a946126d2ed8ed505a9a98813a49d1fd9ed57795572b78911d1e7e43f53162b93d88064a708c5
MD5 SHA1 SHA512

Submit Download

ServiceModel.mfl.uninstall

Path C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\ja\ServiceModel.mfl.uninstall
Size 146B
SHA256 56002d2b987d93ad5b10207328ab93ee1544d3799b054dc385cc950c57802d8d
MD5 a658f5a9cb2c6a606d30c3dd909edd60
SHA1 348859ad0edff84f691c7d2c70e93e3820b9216c
SHA512 86ec01eb5b90eb1ccb0989cf436e5c12a752a2e91e5d8f80b4e21c6c6a2663bcce14627aa9817f4010097c779f8e80c73fe0b6966d6132082ebbb4e3a273aaf8
MD5 SHA1 SHA512

Submit Download

EdmGen.exe.config

Path C:\Windows\Microsoft.NET\Framework64\v3.5\EdmGen.exe.config
Size 156B
SHA256 59bf9091f4cbbd2a8796bfe086a501c57226c42739dcf8ad323e7493ad51e38f
MD5 d71669de10ad49507e3593f5c6f6f8e4
SHA1 7686dac4e3d704c9cb83a73c261f94882bca141e
SHA512 a6e35db8915ad4ff09370628b944c5bde47fd5f6f59e17b296e1160a106c18c87a0c426aff354666649a80c69dae840c65d90fb6f115096e120b0e808949e616
MD5 SHA1 SHA512

Submit Download

DropSqlPersistenceProviderSchema.sql

Path C:\Windows\Microsoft.NET\Framework64\v3.5\SQL\es\DropSqlPersistenceProviderSchema.sql
Size 1KB
SHA256 e6c5b2ff5b38460f60b8a4a405dfe736eaf4a028d468623ce4e9ca004a5c5f11
MD5 e84b6514587afef698cc350ae0585d14
SHA1 d358479b94180f7c170365c3fca37cae4939967b
SHA512 642c110ea554a80949737884fdafc29a56cbc04dfce9be6dccc0f373d7fe8ad9cf69e3ebc843295a11a3f43045676be1bf05665ea060145f87912e20cf476ab0
MD5 SHA1 SHA512

Submit Download

SqlPersistenceProviderSchema.sql

Path C:\Windows\Microsoft.NET\Framework64\v3.5\SQL\es\SqlPersistenceProviderSchema.sql
Size 2KB
SHA256 f858197c7bfd8f35a3e941b32374bf71186634823eb0c70726b5a4ea27cf3dbc
MD5 fb7503cfbec765efaf59c21f81cf8e6f
SHA1 4795ee1e20b9b59d177eb69d0417548190f06762
SHA512 1d5d4c634ebf565afcbb35f59e74d2b43d33f5c6b3babdf5333bea6dcbb101f23a43edeb3a479d37c119fc6f2ca34a064335ada74394ab6e7ac62d80636f51ac
MD5 SHA1 SHA512

Submit Download

AppConfigHome.aspx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\AppConfigHome.aspx.resx
Size 3KB
SHA256 7ee7404839d9a626e26007bf63b6e33bf79337ac110aee166a3ba74558452f46
MD5 6839fb63bbd7b6c98adf5a752d07737e
SHA1 ec1583699b76a22962a0b24551412d621436b84d
SHA512 c2cd5af6382d983049df4e4e65f171518c7a532b17f5fa3593e485921b38f6a55c993f9d8fb58d508fdfa8d259153ac1a1243537961e4523d87336c506cd9a80
MD5 SHA1 SHA512

Submit Download

AppSetting.ascx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\AppSetting.ascx.resx
Size 1KB
SHA256 09c8e48d26919a43272e686b65b19671f7f7b6afb10598e470abf3491a1f6340
MD5 5eebad216203bcaa71c41a80b30f25b9
SHA1 ca9be318feedcfc8f7dec75adb7322a3cfe73e0f
SHA512 b5788abd941a4b3eeaa35afea83496cafe98aa59e98379eb431277ffa49af677bea6d82cd8cd1088368a4e67069d59c64a4b76ffd63b88494a8f2a568301bb2d
MD5 SHA1 SHA512

Submit Download

DebugAndTrace.aspx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\DebugAndTrace.aspx.resx
Size 2KB
SHA256 c6dd2fc5c04b6b54e76193f5adb1dc38ce78520c16906bfe3e0c272c8440f91a
MD5 5f89b574b1bf122f06375e27dbc734f5
SHA1 9836a1fdb6bd9d55b3f4a69014724992827719f2
SHA512 fcf39de5cf87b29dabe049490c2f9c380028eec83c712fdb4a7c5afb333fa7c3730ad8d63d326fdfd1644a0683f9feb049db20b599da3a01635785cec1a2c54e
MD5 SHA1 SHA512

Submit Download

DefineErrorPage.aspx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\DefineErrorPage.aspx.resx
Size 2KB
SHA256 6eb259172088339897dec645ad1479ef648908afa656ccf2dec5ae09ced8f375
MD5 a4a34ec578705d5d865c2fc7f2eabb27
SHA1 7860394e9ff87b6cf4698e1c407cf7cf2e12953a
SHA512 5938e76ace8b1913d719eb2cb87a935ad18e65b40ed31836f277907225a27c90f0795bda1863a63d421b93e269b9f556a6f61e57123c2232d919991ad6fa8556
MD5 SHA1 SHA512

Submit Download

EditAppSetting.aspx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\EditAppSetting.aspx.resx
Size 1KB
SHA256 5dd4207b65a770f9bb3a22599143525057f59a7f0c61a5be8a213d9b44e2e8e1
MD5 83d94abf8ef1816c5e65c62301de441f
SHA1 367652f32cf8d9808b0de297fa20bc40f5834988
SHA512 f4cadda39139ee61eff6a0142fbf6194a9e1d4adf03f46268ec4081cbcd60a3bc49ec46408c87024f2bc67b64a23b37701b5a2371566f77b643d81b9c82850f4
MD5 SHA1 SHA512

Submit Download

ManageAppSettings.aspx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\ManageAppSettings.aspx.resx
Size 3KB
SHA256 afd3fa2130d9187cece4dc732ad7d32dd57da21f50cb9798235e1a0611a2517c
MD5 7361ffb23f05e51c1c53319c1e4051e9
SHA1 5ecd7d6e4bb71c022c7ebe8cbcc406ffcb0865d9
SHA512 d9fbed93523ccade28495c40ea96e74a80d9fc9cd848471e6e59492bbe06af61476bb1c249bb26d8368935824b6040b7189cd664d4133b17c12e29205f54f6eb
MD5 SHA1 SHA512

Submit Download

SmtpSettings.aspx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\SmtpSettings.aspx.resx
Size 3KB
SHA256 cb9518f4588e2962772016fd8abcd2652392c8ff1cdc28eeb3a8cd5bbe854a26
MD5 e3c24ef03e9bf9edc81a177ab25e64de
SHA1 3078dcad29f4a9743dfe4946e216de855f7f4e35
SHA512 d598bda3ad497228cae77729038f26e1c3b17c05b15bf5a6cea7bf691dea73bc6007fcae28f897b1abc334e7dd0eeb45546b971d341fca3991f9d62792ce1f48
MD5 SHA1 SHA512

Submit Download

CreateAppSetting.aspx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\CreateAppSetting.aspx
Size 3KB
SHA256 be061d7baecb041bda4ae1960ae86e7dae7f3ecb830bd80f3763dd5ab9be6b91
MD5 b471f0eaf18bc7fa0c671b74726e9133
SHA1 73bf13ce268ae7d47d08df8ced50b17b82019e7c
SHA512 6606c23ef7fe8f9ecad13ed1faee81e8956659ed8c855bf5c6c6737984c23033ffaef2b71167125734f8a860ba3a6396cc523b499394fe3f6b5fb0330c08cb9d
MD5 SHA1 SHA512

Submit Download

EditAppSetting.aspx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\EditAppSetting.aspx
Size 2KB
SHA256 cfc335996cfae29fdf14fd2db7ea853366d350a5d387aa3c322616e81dacd56b
MD5 45c340aea92f4e27f8826fe51bc9f654
SHA1 5a21b9c1bbe546da39986d2314aca97f14250155
SHA512 bf7ce68aa12fd06b2fe294ce5e130032d86ef3cc4daf09422aae0d62f21c181e39e004631199d562aa0f16e0f6c7363bec95bdf8f90994b28db4008f83f78bd0
MD5 SHA1 SHA512

Submit Download

GroupedProviders.xml

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\App_Data\GroupedProviders.xml
Size 317B
SHA256 bb7907518ae9e1f695e7188b7b22ae2535497428c8fc7ef112adea04514db95b
MD5 443e36e2a145d6a6dfa8fb6f120f0e1b
SHA1 6620de659b70f25890a99ab129753b1f052805a8
SHA512 785b5fd21cc10c738952ef708dadaad16880b782885c16027b404f91f1b582522193544ce6fe6497eae4b457768e8ce6ec814d693c7cfe1ee9daf0f03b7cef47
MD5 SHA1 SHA512

Submit Download

AppConfigCommon.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\App_GlobalResources\AppConfigCommon.resx
Size 777B
SHA256 f6719f561c200be79ce40dad7ca94eb8a4a44c949348a823c54ed3095e02fbe2
MD5 83ac9b2246002e5bdb24b7d05a436007
SHA1 49e61712b93d5263cfe5faedb1007909e2fd8a8b
SHA512 720d29249cb0abfe603d7dc3f38a068ab29b6483065a8ce99697ecc5ae7d69d90ab83fb695a04f460375232a2f66bd9ccaa710aebbb45a918b46ed1f3ac88a27
MD5 SHA1 SHA512

Submit Download

default.aspx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\App_LocalResources\default.aspx.resx
Size 2KB
SHA256 aef3fd1ebe212d2362a46c0eb782b2011f04873abb5e1efe73de04707a7b4b51
MD5 e8fda0b6dfb75e200345775d78858fda
SHA1 31bfaf18d98a676faf9f4e133e98d82500dc693f
SHA512 e752697328a494e11c8a7d15ef2975269ec7ec66506b72a15a08b0e5dd57b93f6d781d72a95228d1f9c589f9f50776d7a04b7970fd12278b0dec0beccee88c38
MD5 SHA1 SHA512

Submit Download

error.aspx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\App_LocalResources\error.aspx.resx
Size 1KB
SHA256 61ce5d237141e355d969f6158296ac6ad38e933521c3db039338feadcf217337
MD5 1e0edd50013bc785e4f3c251f563d466
SHA1 73b26f434aaa9203d2d691ffe348f9ec6322ef93
SHA512 0d243e8e292268f8f7d221aa56005f560f1c5e22e3a80d375c0ad48dab494d5e25bf77036882f570b5c55e9fd4d66b25f16505f1d84fa46652d188e67dd7ef92
MD5 SHA1 SHA512

Submit Download

home0.aspx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\App_LocalResources\home0.aspx.resx
Size 1KB
SHA256 3b17f8b83bec3e72acd0d014f58e7de206106a7644bf3293f93c7456ced47419
MD5 72542b122d453927f3d6c59552165606
SHA1 6e2b7f049b60f10edcdec06f357114448c0896f8
SHA512 25eade5c88cc35325978ba2e103050608fed4330a1677280eb2e0445946a3367d26796ca1233aa6d7ec4c87f04faf7706d82c72b3f3485d80c18e088813f7a1f
MD5 SHA1 SHA512

Submit Download

navigationBar.ascx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\App_LocalResources\navigationBar.ascx.resx
Size 827B
SHA256 2c7a2cc69b6956abafd94377e8df4393aeeecc57b5093af67ad0f65705124890
MD5 83a9475b33cad765c41dd3deb5be2254
SHA1 57000314d786c690b6affe01bfd4c3e50d124b62
SHA512 2b21d5e408af6772fb77a68d618887a50208539f376a4750c8a90ac42e8c334ab8c98ab1e30860ed475e83623f2f7a07929a038a9c0f31567d53d9c03d449fa9
MD5 SHA1 SHA512

Submit Download

HelpIcon_solid.gif

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif
Size 1KB
SHA256 9f0380200fef214623d19cbc73a44bb1e57a1d0c1451135c5c0124bd20544d1e
MD5 cfd320725b9a8f21f8dab9c124d2c6c1
SHA1 daafc7565202f72182d86d601d21c3fba79da32a
SHA512 da22c64ecb7286d30d941dbd9daa00b9adc08859069ec9b2b9551745869658d38d334ce413ef732c27b1940ad04ac4356bf70b0b54ba843fee0c1d5390cec52f
MD5 SHA1 SHA512

Submit Download

alert_lrg.gif

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\alert_lrg.gif
Size 952B
SHA256 f438a4e713df6a982afbe2eec993cd582edc37a876fee88e1ddabb478f2b5ee0
MD5 8c8fd1cfdc60f513bf20132a1d5aeea2
SHA1 40167e542ddfd848fd138e2914dbb7f116a8f99f
SHA512 e5a985404619bebfb615d4b5378942b56089b40170e4072c61eb9ddf722639941e820f039437b59cd3859944b3e06ed72ee49e879522e81fd9d49b56c8e40d35
MD5 SHA1 SHA512

Submit Download

aspx_file.gif

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\aspx_file.gif
Size 121B
SHA256 d8129de4286dc4fd245c7776b51d76aaa727956e8fc88ff928eb69ff7fc17e0b
MD5 709c6a80af0276b170c521117ede47c6
SHA1 8e6d9001ca20e76482e1ab88d54d47c65c8c7836
SHA512 bef13fa741340cb7c1174406f76f9c65445c76ec091e47daa8537b5f769ad2231347c61144ce8f6e4cb16fd5cd27bb169930c3f8c3b5b9e24e6609491fbbd4e3
MD5 SHA1 SHA512

Submit Download

branding_Full2.gif

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\branding_Full2.gif
Size 1KB
SHA256 115409738630cfcc57434ae9c88551fa7db1e70ec2b77761829f3d4823e0361d
MD5 7f2bbed4bcc56b80d0d9cf16370167bc
SHA1 b93887a58c7a5cb24ace4557a764aa2e2958c2fe
SHA512 19e4b359eb5ed89a36cf2b31e35f3ff7eb711a87b1758c22c1114e4cfef0de18995cf66e9e16ed3aa83f4304cdff789870c448f066a964d69316c37d9effb907
MD5 SHA1 SHA512

Submit Download

deselectedTab_1x1.gif

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\deselectedTab_1x1.gif
Size 61B
SHA256 c6e26c3e31bac75ea556356cbbd12190e29f277ea5f9010f8f88d5ab3363a2cf
MD5 e2a482a3896964675811dba0bfde2f0b
SHA1 b32c03194e03c658007c5b6bdedced39ddefc291
SHA512 1d9bea9a2a4c0c566c91d855cbb389c78aec76105f79537a8cc9c7a8ac88a673757ea9f46370ca607235873eb2f43ef1c7578e9501f9908f5537055f2ce06528
MD5 SHA1 SHA512

Submit Download

folder.gif

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\folder.gif
Size 914B
SHA256 42345ab2147d5dd09780b2e286347110011a769f122210e7b9e9c2249036f15f
MD5 2b0e63420f5cae3932461d8c74a9e788
SHA1 d19b5095d30f9f01f09864c26386dc5b911ecd55
SHA512 11a25eb4cba596d1b203bb88e2b69231c8f8ee59786ea335a66ca77dcfbc36ebb8a9b4e957b992c3ed38f58d1ef8c7c606d8a16dc84f8220cf517999b4f7577a
MD5 SHA1 SHA512

Submit Download

help.jpg

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\help.jpg
Size 1KB
SHA256 a1dd83cfb03869f4278645e85f576425f80da343aa83e33b143657b7abbeefa5
MD5 c167e543e0220415aeba0270e2df6497
SHA1 027133634d0d6a806a8cb34c4f3d4875562cd1a3
SHA512 e176750698ae4cc2fa03f513c63935a339b6d9d211686f18191e197e78b01cd16d231924503d33bc2a90b927e0ddbeaf09651210f2f30330ab4d515bc64ff70f
MD5 SHA1 SHA512

Submit Download

image1.gif

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\image1.gif
Size 162B
SHA256 7b3bae54e7a2931a1957c1ca23189cdf913f567e92af15089f033b99e33351f1
MD5 6cbbe3240a203b0ff387d9bbdadd49ef
SHA1 2c65f6ea9acd8d164ece87edf2f142942d8cdb42
SHA512 cdd8e32fdf610a0c00f7e8093c98d421f6c60bb75be67fe0a22ca1b5144351526a2b56ffd955f350039e4dca823e45a3f1f4595c3f9f209b3de28cab972cd140
MD5 SHA1 SHA512

Submit Download

image2.gif

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\image2.gif
Size 586B
SHA256 fcfe9ae45cd7a2562a82135eec5742b6025b7017f29f2566cfa106d6b687032e
MD5 6995ecc80f661f51b5f3a40dca5df020
SHA1 6c6c9cdd8541e316705b32b1f0862255f195e04c
SHA512 f83590aadde87ed582fb3811cc2b928566de3fa71b2d9bd7a1bd2af2b28ed8d7372da0726d714399599ef7226e4024a85fe0fe21bf88736a7e3f92465507dc09
MD5 SHA1 SHA512

Submit Download

requiredBang.gif

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\requiredBang.gif
Size 124B
SHA256 7b8ec8dd836b564f0c85ad088fc744de820345204e154bc1503e04e9d6fdd9f1
MD5 3aaceebd65f0b79f9ae1718d3241bf37
SHA1 2ccf78e3b22f294c2b9d2af73d2fede8af96d6a8
SHA512 bb78c9783303a24dbe8e5fcb112d9a4872d8521f30662770c6a4182cc6fd78ba865c467a5ae3d4d6348a5011aeb6df95b46b6c99cf2bced2beefeaba04ee458c
MD5 SHA1 SHA512

Submit Download

yellowCORNER.gif

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Images\yellowCORNER.gif
Size 880B
SHA256 c23a5cc2d7277749c47ddcad301aa92fcbbaeab54e552813333c1306c5cf2425
MD5 e2bdd4d017ce36dec632e386e894a4e5
SHA1 973c9f51425416d311a4fb1b502de562b57f152b
SHA512 85878f146a7bbcbea9b35cb48c79bfafa27d7872c4c312e824944d9bc70f1548624a2f58839958c8033981b6aeb01b65ab2f454a75963f91c282871d9df90075
MD5 SHA1 SHA512

Submit Download

chooseProviderManagement.aspx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\App_LocalResources\chooseProviderManagement.aspx.resx
Size 1KB
SHA256 94c86318b38a78df6555ef86733d8d63feceb37d27c7f37dbc9ac59cc6bb880a
MD5 596de347ef64fb1d75b576f3e6f2e5cd
SHA1 dfdedf4e214e88c3a435ceb0af3b3e17f2f4dcc1
SHA512 b01554ae762a62199730fa1ea9cd7af464317406e548fa52e2692081b4186cef4a01adac5cdc5a2fd4a0bd3b2e1cc0b252016cbfe5175eddcc3dd5b48b0c47ab
MD5 SHA1 SHA512

Submit Download

manageProviders.aspx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\App_LocalResources\manageProviders.aspx.resx
Size 2KB
SHA256 270d7c32555268f578b5c79e665937b2bbe3eee44f88a39c5961c9ce3982a1eb
MD5 5205d4a99355e1be42478f84552e0d99
SHA1 4c2602072c29d42c2b68e54e2c75fb1f87ec47b5
SHA512 aee58ce3f06440db36c35a125f671d6d7751cd0c337ab94c965c841a0f273cb294dda81531a12ead284baaf39f97651459cc3870e97134175a2383f82f309b02
MD5 SHA1 SHA512

Submit Download

manageconsolidatedProviders.aspx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\App_LocalResources\manageconsolidatedProviders.aspx.resx
Size 1KB
SHA256 fc40bb066c1ae7ca901791f6e212338b1181cdf31bafc64da18ca55785642f67
MD5 06523c489b034243730d518424385099
SHA1 002e7fcfe8245621aca827a929b6649d6193009d
SHA512 157d6ef920567d622b9f3c1157274dd322bd636fde27702e75fc5466e25ac69bb5162d573753246dca0674d88c7ba74ade3f59a8d97e6b7df737a0a35b218474
MD5 SHA1 SHA512

Submit Download

providerList.ascx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\App_LocalResources\providerList.ascx.resx
Size 1011B
SHA256 2a73189db8e07d0d8f8c0049a71cbaea44a7644ebfc2d26d2987346bbf427d06
MD5 e1fa73b4446e72cbce4c86c6b84f758c
SHA1 8a4515dfc0a4f32b819a9ebfb8298fb9d3ecb5f9
SHA512 0a465b249a04da6e4a1a7cf8548838baac5ac91a55b4b8b6552597ed464c886df1f3d124ab50ce1613773b0159e4f502a1bd70b7ffa224a196d77d85911870ab
MD5 SHA1 SHA512

Submit Download

chooseProviderManagement.aspx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Providers\chooseProviderManagement.aspx
Size 2KB
SHA256 e29030da487e78c04d3731ec1f48e392bf6267e4a1e2a3eff9374fe7edfa9623
MD5 bf0a50af3f2901321fa495bf453c28ae
SHA1 f2320be43c1deddba5960089608ba284cd019d20
SHA512 9666c2fcdeae3686600adc9676145248cb402e6032f95fd2ea177d7fb5f718a33207284f3fa837a441a5112a83b6f9e5aa307575a611a51d6c7b725c24e0d3fb
MD5 SHA1 SHA512

Submit Download

security.aspx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\App_LocalResources\security.aspx.resx
Size 3KB
SHA256 16790b7dfcf32410dfab85a0353c4607afca32769e82787865e90bab467e3b93
MD5 2b8a3576143ecec252a6c6324f649871
SHA1 e48036a6f434df97591cf62548a43087a2fbbffe
SHA512 6309f9ca6a5918a64e7dcb4fd44b1d31c3cb50a8c9cae16e1b06cecf3ef4c7170ad5fa65cbad9db0daeea7a10d8a3e4d8a41db5e1de074e909ca09f12be8160f
MD5 SHA1 SHA512

Submit Download

security0.aspx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\App_LocalResources\security0.aspx.resx
Size 1KB
SHA256 e51dcde6c2572a0149349daf359ed7983aac6b86b20f977ac9f41ed2d59385e2
MD5 7272d316dabe9545128c4e890f25397a
SHA1 a7c123cdecabe5b1b4969843bea3527dfd8e315e
SHA512 8717f702462f89e2bb3ecc3c2f47b1e4566e4f92e1c0f9abc177cd8b054bd15b83f5da6801c398ed400fa03c4f2e1befd900b5a6d476026a3f2510d94b12097d
MD5 SHA1 SHA512

Submit Download

setUpAuthentication.aspx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\App_LocalResources\setUpAuthentication.aspx.resx
Size 1KB
SHA256 bf75520ae2a2df40c3d8b29b71564bac7a99659315d2e1c83b750c96807a078d
MD5 ce445509b3dfc1da623ed12188f511c9
SHA1 815f84579d871ce95e9cafcdf861744bc83c4ec0
SHA512 0f80521350891a80f3f20e26504c79a6a5a57120d7633c5f6c78ec82ecc7bd3e22bfec4bd1208b6f1aa93d08630057312a9fb4756818b919bbeb3f60c224422d
MD5 SHA1 SHA512

Submit Download

createPermission.aspx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\App_LocalResources\createPermission.aspx.resx
Size 2KB
SHA256 b18477003eb18f8cfd699969308843893e60630da43ebc9a974e7a1cd8b4a095
MD5 9c3695781cef2de90a3b6842efabf0c3
SHA1 201f24eed43ea64df9d9839ceb272d7f4129b75f
SHA512 679b0a1d4cb82ef82b58aaffaeca63988c9a3ffbaaf3f98116b3fc98e9ccc46a4069bab299073a0a75fd3ac41f69582ff1e062ad3a45be228a7f84dde14d3572
MD5 SHA1 SHA512

Submit Download

managePermissions.aspx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\App_LocalResources\managePermissions.aspx.resx
Size 2KB
SHA256 49a6636a0685776bdb6d7ee5b99fc0ea770fc3780e656fa9ba5e26fa8de22b1f
MD5 9eebade1cbd362a2110e857fa78eac96
SHA1 ad8a73c04e5e9e5f5d6b77b332788ef1e8553c2f
SHA512 4df48f39de0520c8fa9e1ea79233138bf6ba518943eecf555798a685f96b739bbeba979f3709fafeae6d4116a427fdf351d7442751717aedee5c8760c88af832
MD5 SHA1 SHA512

Submit Download

manageAllRoles.aspx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Roles\App_LocalResources\manageAllRoles.aspx.resx
Size 2KB
SHA256 85a96a80013e9f6ce80a64c402cd612e3d4802ef4abf37489cf8138d02e7b359
MD5 57e4984d7b5426543d7dd31f0a8253b6
SHA1 02344793408e28fb7b2da662870d6d75cc06277d
SHA512 62633b3899ec8c99400ec466379aef9b8e7507f437e1460999decdb283d14640d01ecc89453f18b8d0c969495f517df659d8531dcb4f5b26749d398b8e740cf3
MD5 SHA1 SHA512

Submit Download

manageSingleRole.aspx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Roles\App_LocalResources\manageSingleRole.aspx.resx
Size 1KB
SHA256 8cc7b0030218fa19a5d84611d8fcbd60bc3b4366629412af326d6bb467f97013
MD5 87ba306359726e62b3655c2b46140d13
SHA1 6ed926ac6a30a651c7606ba10408da7c091598f7
SHA512 eef2d4f0c64bea14bb8c8f7f19ea188b764f6b5a139e0a09d3ad3554e4aa60dec39fe1d1ef955447c1640fdc894b9c565de8e565b390aacc92650fbd849755f2
MD5 SHA1 SHA512

Submit Download

editUser.aspx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\editUser.aspx.resx
Size 3KB
SHA256 2800e236158e52067481144f50de2731ac0ef377f5da900642738c6c26c01c59
MD5 e4b25e7db334638200d0bd52b17526f3
SHA1 70c91807c5d2fd74f597a2d8620d18ebce2330c6
SHA512 27e71dacc89a56281fbda032e3b4506b9f07bbf65e0d32628eafacf33f846ad688ad64a8a5f10f621453cb82073fb87de077d9804a1c037f8032b67406efc154
MD5 SHA1 SHA512

Submit Download

findUsers.aspx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\findUsers.aspx.resx
Size 1KB
SHA256 54b2e92487aea032bc94956e0a5e866669f1ac2812283bb8aea96262cf0609ce
MD5 36996a9cc446ce110f5a87375c0a96a6
SHA1 c33e461831204e9cb77c49e49a6269659706bbd3
SHA512 4cef39493192f359114bf55c80afcab281e457d80c013ce8585c8f2e11471f004de9d770de93e48fb8ab3ee91e46e9421fda521a2f7bdbbcd8abb87e4a47c479
MD5 SHA1 SHA512

Submit Download

manageUsers.aspx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\manageUsers.aspx.resx
Size 3KB
SHA256 f72dd751a43f7481803af0a4f1a9b063946eb96d929fe34b471dfc48e33253d6
MD5 6e192b21772c3b02ba9816ff2222d8f3
SHA1 c47221bb1c23405a5b238a9714751fc2d7b3c551
SHA512 72d31233a6382b7ff6ecc4d20eeafbb9715f09502fb998216017b772c36dae13f21ab36211181d6039821287f37ea5bfa788ab3da0a3a907272e9783257c44f0
MD5 SHA1 SHA512

Submit Download

confirmation.ascx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\confirmation.ascx.resx
Size 775B
SHA256 4edc87e7222a030f6ae35e29c824fc70a949ab487ee75b33a06ac526f1499df3
MD5 f66fc0bca6c6c54502dd321de6d3df89
SHA1 ca25edd00a6905ec5273bde618cf9c3e5b1e8341
SHA512 1cec0ee7de1153dac5bb02197b60f5c4c183c42f3f344634c09b05d932a284369d5a23904241a1da6fba7f678b21edad27b2af7bf885aab68bd007a66ab6e2fa
MD5 SHA1 SHA512

Submit Download

wizard.aspx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizard.aspx.resx
Size 2KB
SHA256 b182e5cdbc0904fe8662d3d8bf9f3efe017c56bc8f0ca32f73f483b48c3994d4
MD5 56d871f141dd81bcd664e78ee14847b5
SHA1 3996b995ded3e6c7266ec7533d375a4dd70ec80f
SHA512 272943be0dd924ee4f132741ac455a5fc86d3703e43b0420c2aad9713aed4d282dbd701d030901829f5a60a972cef06a3a89fbc19ee087365b22ab983908b101
MD5 SHA1 SHA512

Submit Download

wizardAddUser.ascx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardAddUser.ascx.resx
Size 1KB
SHA256 2f3c26d26f29c0b8522f02a44b69db26d242f5949ebbf40d772cb3acb7088136
MD5 47d59b56f1d33942b75f16f52f2f2440
SHA1 0dc312855478c256f5240946bcda2cf912e461b8
SHA512 945a5ba8e5a5a71aa236f1bc0bde3654e5e58af10f9a11b1e6e080737f673ff8182f19a77ebe884bea3e58a52c2c746e585d767ece65623afc2bdfe70639529b
MD5 SHA1 SHA512

Submit Download

wizardAuthentication.ascx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardAuthentication.ascx.resx
Size 1KB
SHA256 ea7262544f5844b20bb32ddc80c5769b87dcafb023289d50ed016cb442472598
MD5 f1d4e6e3411138a26feac73bfd5d6a8b
SHA1 076674594fff7cf89d7488d0d6f2e58fa679befd
SHA512 1ea5450efa514b4b1fd3f764fd36295ac130ef56c03a0cb468ca155f01d19b68d197192dd8d37325a05f1acb0bc94d171c0a975e2b0238a5db9154858c24657d
MD5 SHA1 SHA512

Submit Download

wizardCreateRoles.ascx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardCreateRoles.ascx.resx
Size 2KB
SHA256 ccca9d6aa81b0fbdae9360e34559e91d180b32546d1f0557409f536ff1ecd855
MD5 d44e2fa94034be02356cacb31ef803d9
SHA1 c91557b09576d514662fcd93de0d1b43809d2f92
SHA512 d3aa5a5ddd0a6a353784cbdaf4ca160e00d42da003ae852e84e13e4443c35171ee08531d7d6706385d634b7d1bfb946a50b1031b3e47efcca978a20b79211059
MD5 SHA1 SHA512

Submit Download

wizardFinish.ascx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardFinish.ascx.resx
Size 917B
SHA256 75b9334bd7d133a743647274da04d139df5c0e314fb20c91a5c45cc3704e5076
MD5 c5a8fa007135596d5e1b0181c33eddc4
SHA1 109289d41da776624c93ac7b4e0dd3a6ee27c7df
SHA512 e4f3411e7a10d27d700b273d0c088b41c0a48b08b0e502db22ada6981d5a4b4403c5d6df47c1dfc3bf01c116f43fc02dc62ede471169a30cf87bec22d41a6b44
MD5 SHA1 SHA512

Submit Download

wizardInit.ascx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardInit.ascx.resx
Size 1KB
SHA256 b1d9f1d8fd77eabdd2b71f50ef1b5b1bb8e776d84ee386773377735013b0d669
MD5 6426f6d4eddd64977b04825aea164b90
SHA1 a6dc769337c23cf3fd461fee9860ae43b51dc33b
SHA512 03614f709e682769eab05cd5d485c2e129b8147e852343700f59f9ba88e91669b04cb22e48936cf0adce8be30dc72c68de8787238d9a6d77424607e95707e4ea
MD5 SHA1 SHA512

Submit Download

wizardPermission.ascx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardPermission.ascx.resx
Size 3KB
SHA256 bd1d5c82e58b7b777c173368e586419d25e2c01ec058b95d4bdd197ebc0c4235
MD5 bb5b06fa73e4cbd0a60b45b485c7a250
SHA1 0a5645bdde45cfea2b8d2e21c16a6bc7cfc363ed
SHA512 fb2e6de824958dee22a43fbe214b20899ba44cc370a46f6361a867e87f4af352e69cbc0eb8abe32684aa39bf56462f6eee652095b7d2b7c90eb8533bd45f2cfe
MD5 SHA1 SHA512

Submit Download

wizardProviderInfo.ascx.resx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\wizardProviderInfo.ascx.resx
Size 1KB
SHA256 b196a95b1384fe236549d89742fab3b859ee7bc2fc9660cffb2a1707cb500bde
MD5 40d993d5fa61c8fe9021ac0468d3b9a9
SHA1 53d950f8b4d8c978a6b20418f486ed3c1b50a52e
SHA512 ac8201ae470950c76688ca81d440a36e328bf30840e170873574765c5a4be24e0dc0d0391e7e3e91ad52a8d7fb778787b344b9d23819ec7681fc2f24e2d9c314
MD5 SHA1 SHA512

Submit Download

wizardAuthentication.ascx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardAuthentication.ascx
Size 2KB
SHA256 5ebd94628f435a5b22a2f15fe897d4f33f8954b701f1f0faff83a21db7deaffa
MD5 1ab45e82dbc93f84308d3cd27871ee59
SHA1 eba36260a72d453920bae8b12f32e6baf2a6671a
SHA512 9e2f3c14ef2cb5ecea628a5e606aeee7ee52c37f4c1fb2e524df0a7579d953a67580d331a14775d4895db86b3b13d8a218e35f473d4b81f0904fa43c9872d8cc
MD5 SHA1 SHA512

Submit Download

wizardFinish.ascx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardFinish.ascx
Size 271B
SHA256 fb5a84b8d151d7705990e0b26b0a2f326c587126f56a9b33068a534836bdd682
MD5 f006e7d4dccfb3da2975fa59fc8f8079
SHA1 be32b0764c841c09e3d4931476dde18cf9776b52
SHA512 c38584c2ee3c0c7fbf1fa177e86751f8240f6295a7f211e890361991b2c485f293c3a736981effc824643bbca802ae1f0caf45adb3bb5a9b2321d433fb08bfd2
MD5 SHA1 SHA512

Submit Download

wizardInit.ascx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardInit.ascx
Size 491B
SHA256 49a84feb40a7d5293a863a788939cc8c70058052f48721b3799d3070e41833d8
MD5 f7458cbaa064f1b2ece4f685559cafac
SHA1 ccbdbe2321665dd94acfa1e799703b978e73deff
SHA512 29fb06604ac1f95dc019e1d946d8d57dcda6ec71beade16ad8e581e042b9092d2a73482ca0d9dad97cd4e739136fab01008d8b83b775966f14186eaf5923264c
MD5 SHA1 SHA512

Submit Download

wizardProviderInfo.ascx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\wizardProviderInfo.ascx
Size 1KB
SHA256 c203fe07c44b797c9075687aaf60b4f4ff616e938e70f23ff3842e916353211c
MD5 b8ec357f31fd65e9977dc8655f007716
SHA1 72027c677ba188c8e4ef5d4ab2a5474b9ea69ae5
SHA512 7c3997ed7badf44f23cb2c141f11dbc385096bcc65514af9ae5d39771b124ebfac6114726a12ff59dfdf1b9f497d048b5977a16eb732c870a4c00e8ab308e426
MD5 SHA1 SHA512

Submit Download

security0.aspx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\security0.aspx
Size 1KB
SHA256 ee2c0671bfe6befd9a3575be6511608057b044a870a40244feb39b121db5818a
MD5 97ece9455ee886dcad0b5ba56b1d8e8f
SHA1 0917cf1ecab906ffe543cd38f958a728b82d64f6
SHA512 a8780fa48c3e6f44ae5fa77dd418ab0571ccda0a1b8191c58357103ca4993a57c877bcad0884d16bdccaa1196a511f440df16063affb9a89dd4476deb55b27f4
MD5 SHA1 SHA512

Submit Download

setUpAuthentication.aspx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\Security\setUpAuthentication.aspx
Size 2KB
SHA256 a3cab394e53f55926b1548e6614bc98ea877ba045e4269a5766e29920715b584
MD5 b1fb4e5bac43bc661e9f391883cacd0a
SHA1 7078012606c8829082cae2f75afffa408a92887d
SHA512 f83ea4061e0c23e8d04f4b8eb46bbe84a2af6c1529bb1155dba70109064937c0f658c38502cf197c3f11d34e28f0edbc058ad83e5dba0109ffb233ee53c238be
MD5 SHA1 SHA512

Submit Download

WebAdminHelp_Internals.aspx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\WebAdminHelp_Internals.aspx
Size 3KB
SHA256 b762b320390801d37359754a92377107c269305b5f796f3b482651e058c02bb0
MD5 7563b57e5abcdcce2bc05ca4db72ec61
SHA1 3089389eea04159dd0f3622e3d1b1991128741e4
SHA512 2444308c01917130eccc60e9e34373b1d7853fdbcfacf2745aec8fde31dff28f2a6eb450df8965b7a02e09b3e1ba0f96a6f440a6b05b2affd0c84052fda12825
MD5 SHA1 SHA512

Submit Download

WebAdminWithConfirmationNoButtonRow.master

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\WebAdminWithConfirmationNoButtonRow.master
Size 3KB
SHA256 d2916f38a576ed3ea36289d13722c837a9e183a94ba83c70fce6605a0b5fd149
MD5 82aea1f6e0fa5812f5f86c5ed03bfc22
SHA1 59027acf4830a7fbca1a5d6b344b7ffe62a11a8a
SHA512 b42f96d7a1c052855347f249edfb20f62ee1a0b623e866c11cf3560f51ae6570612a882ef3ce33f71d2f695ee6760dd50d02a180c9b8c090d6d637ce98d01178
MD5 SHA1 SHA512

Submit Download

home0.aspx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\home0.aspx
Size 1KB
SHA256 e06872ca64d89406dfa31b4275fe0fa2a5c17bc247c666da663c80337f51fec6
MD5 ec1bd618adde2524087eda8a450254ed
SHA1 2d572f1ee55a6c1c408217fc7b27296b2b10fe74
SHA512 203afceab84ed33f49289ff9f82eaa11d9b119da2b4992dd2c038af42ace23584d52c61f6da4d14ce1866f392aa090835e5f9de274d68bc0d5df2053b435c16e
MD5 SHA1 SHA512

Submit Download

home1.aspx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\home1.aspx
Size 740B
SHA256 ad9484f24235fdac13bba66e24d5ecc16b72c6de9bd27a3922f60833fe07679d
MD5 8a6c6015821a7b3e6cea958b2a6c18fb
SHA1 0b5c28d4c54d84b26e8c55d9d8d5597f75b04568
SHA512 f776f99b5d0e1c89e3f21aadd4a95c1d1f69396aaea98439261c313cce1eed81205046e6b628910aeabc8964194e3b19767cb368692bae6579790ec91141c109
MD5 SHA1 SHA512

Submit Download

home2.aspx

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\home2.aspx
Size 1KB
SHA256 623e46437dc5689e20792c64a5baa674f3133f59667070a5caa1aa22d990a655
MD5 75b114a502ff6309f2893ea93e8b56f2
SHA1 9e2a624befef0e648252ba1dc0701ecec34d7171
SHA512 ab0bf09e8eb4b364d5a231dd12a2c94f45f508192af0b41080670d8327f016b5aae8d71571cf7bc770b87d608ab7a87cbefaeb1363b3601b6de2e2191254a237
MD5 SHA1 SHA512

Submit Download

webAdminButtonRow.master

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\webAdminButtonRow.master
Size 2KB
SHA256 4dd8872c67bad9b823ff0cf1d05cf5c878e38df687c818a952a70c734a988d77
MD5 be12eb44262017fc1b01bf4263fd5900
SHA1 8b4b90b23e2673aa4c46c76778f9709a20af53c9
SHA512 8e88640e631e112f57062474ccf53ae247a686ca0a4d1e60354c74eb0d1b18e8252c00ee939541b4d37b201f9c5963b9bc69d30d18c3bf6f4e134030c410d750
MD5 SHA1 SHA512

Submit Download

webAdminNoButtonRow.master

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\webAdminNoButtonRow.master
Size 761B
SHA256 a84253ed57724eb24d03c265dc7d71aadfa7921494d8195d75d026078f75f2a7
MD5 23a27438396adfac89584ea7f650856b
SHA1 6c5ab364a7698becf19db7f6ea5c974ed3b2f208
SHA512 8f36892c83a4f1777547a4963bc6cdf5ec663160a7c6946a08a7d0747e30a7d21ce49e507a740bd425a3833348e5e822b9116dedb6d3de342a8e44ef25c9dd45
MD5 SHA1 SHA512

Submit Download

webAdminNoNavBar.master

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ASP.NETWebAdminFiles\webAdminNoNavBar.master
Size 19B
SHA256 d6fd62f5ce537d90ea3ea45841b17f34d727bcbc4128748cba14fb87c0ffd9d1
MD5 0e6bce6899fae841f79024afbdf7db1d
SHA1 61a27566df0bd1c1db790bb1108f7cb3b4b7213d
SHA512 2d6f4bce07d729e2385a3b7f3643c4ee8eaa7ab88aec3486f0da1d49325047b143867043e2506c1531c96286528ba646eb081bb54c0e3db403ca82c85340f1b3
MD5 SHA1 SHA512

Submit Download

blackberry.browser

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\Browsers\blackberry.browser
Size 2KB
SHA256 9c2ad4b70c9a03ba3b14b654eab824a39f8f8ae6bdcb2b55d35115f92cd83c1e
MD5 26bf10ce4c8d29ef4f090b54017e2915
SHA1 82b662ed6b74087df82b5db69c73f2b80e89758b
SHA512 aa124cb3419954d3aaad0157e115ee312dbbdd44cfced202902d2ac182106a6d6540e4931cf72682cafda3d68ce31c2dbe299a3b852b16579ca7d9f3d104bb5f
MD5 SHA1 SHA512

Submit Download

firefox.browser

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\Browsers\firefox.browser
Size 2KB
SHA256 dfdcfdee55a3cdda6130654405dbe7d42e20bd8263f5ed0b78e92b110d7ad0dd
MD5 8dc770d8c9908cc2cc5923a292854d9d
SHA1 5e0a42d45f086585de09938d9581466a656e0a51
SHA512 d7f2f95c9f0b21f41538630810e74bb9ea3fb1dce6f629cd88ce780bc717c8dbb4dfe7846529d0dc7fd4d6e9e8c96f15a96f96587028116b0843c38951cb224b
MD5 SHA1 SHA512

Submit Download

DropSqlPersistenceProviderLogic.sql

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SQL\en\DropSqlPersistenceProviderLogic.sql
Size 1KB
SHA256 7b77d326449a95532031dd957615f6bf29d6afe9ea34dc1d0f4793f665b2b467
MD5 bdebb4ad466f327a4a4bfd02c631edf7
SHA1 8be4d7b959605c59ba5893d1d002b9856365fd6b
SHA512 9818f503170c41e133d26fc8d10d1525aa451dc1e56088582d5fd1c57c61beb3531d0fba38a208f3b6c350021d31cdd2cb38a11267c0ac521b693c5ffc557c23
MD5 SHA1 SHA512

Submit Download

UninstallCommon.sql

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\UninstallCommon.sql
Size 3KB
SHA256 8cf8d28acb7b46043b4f112c8ad829384cdb61763420692d48c6bed7408b7f84
MD5 8711ebbbf8328b455541eb7378b2d936
SHA1 cfbe057049750f2868579c6f8d97cc6d07987508
SHA512 31b9650f9c12f8d4eb6ddd8eaa6afecf71b5751224a2f66b477f02afec2300f1a2a9d0ac02815ed71f72b9e9e7f8aaf95c553f8770ece927db690f2f890355b9
MD5 SHA1 SHA512

Submit Download

UninstallWebEventSqlProvider.sql

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\UninstallWebEventSqlProvider.sql
Size 2KB
SHA256 9cc92fc15da3446da5f90d3abd38f7f4f2558078050bd9951ee1a95afab0ca49
MD5 bf9d384e0f3f9ebd91dd5ca1b6319d47
SHA1 8622c8827f7288540c71afd5b84486fc4b127ef4
SHA512 85b347621dc44316004953733b193aaa9cdcad08d131125f20aaf28e4c10b242e943a525052c485571f9fb82c19f32284210886ef746f782dcd5acdb483144db
MD5 SHA1 SHA512

Submit Download

applaunch.exe.config

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\applaunch.exe.config
Size 281B
SHA256 e00f7afdb63013b706018c55b783bffedd850f191f9a3184e9b896b498077e76
MD5 f00346db02cfcc5b1f056a794009ffeb
SHA1 2c92a7ff0452ac3f4cc6748d34369a99f8e7e0d5
SHA512 fd9e503c4d165c402077dbbc3cba76554fa0c02534fe68634d22c10e885aa2cf0b59e96beb6bc615953f70dce2921821b881b6540679297bfc1dd0e9364844bd
MD5 SHA1 SHA512

Submit Download

regsvcs.exe.config

Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\regsvcs.exe.config
Size 223B
SHA256 9b0966fae6a6ad5cc3a0112c5ae1f9b1879c9ba5f87951002c330ffffaf24a6c
MD5 c1911a5f5c24988cb2146fc11156c58d
SHA1 509d7156a87cf0a92bed636573627c96fef851f5
SHA512 ee2182466ffad0087ded11c5d2032812f33f17f3a7cedb90fcfb9ce636f8f5a7dc055dae21c88b24ab514320d0f982a56c123995d284aef6226bf843fda15fcd
MD5 SHA1 SHA512

Submit Download

selectedTab_rightCorner.gif

Path C:\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_rightCorner.gif
Size 65B
SHA256 98ce42deef51d40269d542f5314bef2c7468d401ad5d85168bfab4c0108f75f7
MD5 1ef5e829303a139ce967440e0cdca10c
SHA1 f0fa45906bd0f4c3668fcd0d8f68d4b298b30e5b
SHA512 19dc6ae12de08b21b36c1ec7f353ce9e7cef73fa4d1354c436234167f0847bc9e2b85e2f36208f773ef324e2d79e6af1beca4470e44b8672b47d077efe33a1f8
MD5 SHA1 SHA512

Submit Download

regasm.exe.config

Path C:\Windows\Microsoft.NET\Framework\v2.0.50727\regasm.exe.config
Size 181B
SHA256 db2454a220bd92f1943524b1328e5c677de11ad0145605d87120368d4b93dddb
MD5 d0439fd37b50bf9818f12d47dc2dea78
SHA1 4d634c7d083557e72213c4bd55cc4e7365ccf66f
SHA512 5470db68a720bcc202a5c0abb0d8507bd214b3a128324d77be800abce526fd0362eda81776b7f91164e0458db162067ead29faaccf839e3b7feb8af60ca5af40
MD5 SHA1 SHA512

Submit Download

ServiceModel35.mfl.uninstall

Path C:\Windows\Microsoft.NET\Framework\v3.5\MOF\it\ServiceModel35.mfl.uninstall
Size 690B
SHA256 a7353125e0ac7337b89cb4f8262996fcd954398805f81572b7856bbc2f9c998d
MD5 ed926b069c86b5ad2c1f2f9e6d799fde
SHA1 24a1e183c29ce2f70c585291381415620660d2c6
SHA512 250ab838d3a0ee4253c94fa297ff67491349490a860c966e6ab9ce41316450a5dd3c212c3e5683967969bfa6aeb34c3b8ec2e041ec85e7d89c58e5a9d8aa4031
MD5 SHA1 SHA512

Submit Download

DropSqlPersistenceProviderLogic.sql

Path C:\Windows\Microsoft.NET\Framework\v3.5\SQL\it\DropSqlPersistenceProviderLogic.sql
Size 2KB
SHA256 a0ee989ed2a0a2e3626520afa4032e06144865c8c8f6357293c9f4cd2069eaf2
MD5 5be28002868969cd4512b0e91a389a52
SHA1 97d55e5d20616ca66546f99076239acc7412ab30
SHA512 d7d7a8fed0823facb87a39757378a67caac70b0a49b023aaf89440e55f69b679d4d69df2dcba8621dffc852aa2dc3909266e2b8b84970e49ef7baedf36865fe9
MD5 SHA1 SHA512

Submit Download

CreateAppSetting.aspx.resx

Path C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\CreateAppSetting.aspx.resx
Size 1KB
SHA256 2aa1a58c9fa967a64bcad418c6ac82c4b8757d147e30d6cf43779288395b45f7
MD5 2210141fb041de046904cdf9c6ec2c76
SHA1 8deaf2f341d75694684dfd041a7cf24914f1ab05
SHA512 20f76b9de1010ac27dd0194d76558a44a50d4200776ed3141623329bdd97a240664f3b90db9dc0d3e10fb093a917ec6c773b58eb48efeea821c7207d5dac2e24
MD5 SHA1 SHA512

Submit Download

gradient_onWhite.gif

Path C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif
Size 90B
SHA256 988a09c9a6ee66322f9f274fe0ede1186eaf12b1c9fdd5f62152f998223521db
MD5 3277ca99dfe4a704df82c63ac9e876fd
SHA1 bc243136d6d9e400e493af133fed7a0c3004874c
SHA512 6a7c465bc9531b9e1d75df0e167cfa848d98ec994c43d68e651e6d782fc2c81dec703033a44c267822bcb6a1ef31a1364ab57d29b99d1a3a3ca9e5e8d0cdfe5f
MD5 SHA1 SHA512

Submit Download

selectedTab_1x1.gif

Path C:\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\selectedTab_1x1.gif
Size 49B
SHA256 78877fa898f0b4c45c9c33ae941e40617ad7c8657a307db62bc5691f92f4f60e
MD5 884bb48a55da67b4812805cb8905277d
SHA1 6b3d33e00f5b9deae2826f80644cb4f6e78b7401
SHA512 989a38778fc961eb2c79e70621eabfb4b22d6537f08a71359b27af495646e304ee252a523769f66b75bc2faf546acb22a71b358b51221174ac0d964da7a62821
MD5 SHA1 SHA512

Submit Download

3 - Windows Explorer.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk
Size 1KB
SHA256 462fa5c6568794276673c9159500918afddf8f170e580fd1f3d483c48934b050
MD5 7a4228aa2003a72a296e741bfa8246f7
SHA1 e94ca8cb43d671cdc3ed759980bfbaf73cf4c6f8
SHA512 ed66dc35762f661f760eaf0feb82e22c823f11e552c9f938748a8b158ecf0828f40d48afc4d5cc07122f41a13e7b322950b9f156808b125bc7a1ae19e066d304
MD5 SHA1 SHA512

Submit Download

09 - Mobility Center.lnk

Path C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk
Size 1015B
SHA256 1f9ec15f6ff239e14a3a243a98f19ae7db16d425a63b2da0908cc0ffcb1258e7
MD5 61d2c715839bcfa06ce4d23dd84e7457
SHA1 cdb61e6100ac4882ba4863875f63e38b8b804ddc
SHA512 cb6577068e0b746a0ff0148238fd5be9e02e4ff6218fc21d78194a06ebd3f54aa12a1a9b80a4cc9a9f66f72f49eb875eb367b344f674807af11373770f75d952
MD5 SHA1 SHA512

Submit Download

10 - AppsAndFeatures.lnk

Path C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk
Size 1KB
SHA256 71f45b82ab0759863b0e3b056613d8ff2bf9fced2fb7a27d6fbc89992eaa48ef
MD5 3c1454ffe83137ef53e5c0164f020cbf
SHA1 f8ce4927ba8f0e4d33ba4db2545ae29eeb5d609d
SHA512 271775b0b238ee1530757a9a235c6fb87026545a0c25e0f078291bd2529d9971f2151d65dd945bc03668fd258ca2583259a8220ad3eedc94f3769997e81236a3
MD5 SHA1 SHA512

Submit Download

desktop.ini

Path C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\WinX\Group3\desktop.ini
Size 807B
SHA256 cadbea407cb411d2ed1c47c77536b622eb7d53d4fd3ee3b9897d554298683fe3
MD5 b024a04198ed894b334178e411856122
SHA1 ca7552399eca0ceec6a3dbf393396fade2f5f550
SHA512 466ef38a6bd49fc816e208b408e5bcc7d366dc7eb9072600ab21510b6e1417894bffeee5ec96f5a0a535d8e541fd505ae3450f2233e5a128bb073394c530e879
MD5 SHA1 SHA512

Submit Download

On-Screen Keyboard.lnk

Path C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk
Size 1KB
SHA256 d0e438519a8e2075e13430b66debeb7204e5e8ab41fb24eaab20db0bdb66d835
MD5 35705a33e80294bdc078f5582784f4fa
SHA1 3b8d2bc3650098d604e3363fdc41e9bfc2f4609e
SHA512 e560c350940f15a8d5c5187ed833190cdef9e4862e8f06dde9b0204ad1a0decb9adaadd27c4b7015ea5e7fabe7d7a63538ba72def9997e56300cc8ddc4249061
MD5 SHA1 SHA512

Submit Download

Desktop.ini

Path C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini
Size 170B
SHA256 d07bdfd8af965e4283a5f77274fc59bee1379af9f221358b81099df31f696345
MD5 7ba69f4ec41007c035beb73aa29d6b32
SHA1 de53c85a814d9addb1160cea893c73cf98c4dccf
SHA512 2e209dba34b3daa898c15f5ce479e40a71424e9e52c5b818badb04630206fb73aacb96910484b3369a11030bf0286e018ef9f59f32cff27ac0525573fd7619c8
MD5 SHA1 SHA512

Submit Download

Windows PowerShell.lnk

Path C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk
Size 2KB
SHA256 e1c9061d99c39c1bae2be28c5fda496a3f33f0a818a10245645e696a4fccd371
MD5 82865274df05c748098aad4142541997
SHA1 1de78ce29b08e90cba5a14112459801fc97fbec3
SHA512 fe32114e9ed9fc3b4a2e92c7b6e52f61771c3092f883056f23e9148217f768c39837743beb051ea0e94b7ce2557c35a946b9e9dc91667112ad70d65f18b5f13f
MD5 SHA1 SHA512

Submit Download

concrt140.dll

Path C:\Windows\SysWOW64\concrt140.dll
Size 242KB
SHA256 8ab7f856a74f1c7de52267b161266c6e57b8d0a4830ea1babed2ca290eb08f23
MD5 4c346289900b967bee7b24c8cf01333d
SHA1 9da3b6c2ab21a8da1aa48725a0333377a636a8ab
SHA512 a6ad30f56d61112b622c08b83cfff0b5aa2c799f5a66888a07c4b55fa636a59fb7833a6b1abba6f3d2a832a453cb97ded71307ca4f1cc617b65607ca09adc9e1
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

Desktop.ini

Path C:\Windows\Web\Wallpaper\ThemeC\Desktop.ini
Size 81B
SHA256 6778c7c7b6b6c1c273e668169a7652a681da86ad62d03f7c5aa120405069feb2
MD5 9546c10433c45bfb9947449dd8d304de
SHA1 f8ebbbe3ad6a8cfd13607fd3a7fad7a3a7a50158
SHA512 90c6dda39740f839fb470f838c35d5f264a0a8664c57cbc66c431082710ee633ca4672b3b64902e7bbb7a61e9b9f4eea251a7d8b6d5126de6d73d3480fdede5d
MD5 SHA1 SHA512

Submit Download

Disk Cleanup.lnk

Path C:\Windows\WinSxS\amd64_microsoft-windows-cleanmgr_31bf3856ad364e35_10.0.26100.1150_none_092b86d80d75b9b6\Disk Cleanup.lnk
Size 1KB
SHA256 f5ea79165516de2e7e1efb53d016983f5d18c3184413f044a4002f4b751c918b
MD5 8b550761ab80413c9c09f7fb472dbfaf
SHA1 67122822562203c17dd3f762194e470f90ddfa97
SHA512 9546013cf4d45a2c4c609524b7ed4adecc7dc2fecded7c3b7085415a1bcd1c25db5d88bb591ac05fa5a6313763a8e8d5d8fc6ee6610b454cf7696b647e7781fe
MD5 SHA1 SHA512

Submit Download

System Information.lnk

Path C:\Windows\WinSxS\amd64_microsoft-windows-msinfo32-exe_31bf3856ad364e35_10.0.26100.1591_none_479c61fda9b5207c\System Information.lnk
Size 1KB
SHA256 b908af45846d55c8e3ae4483ce41d571c1c1fe538a7b16ea45a4b1e6a85b1483
MD5 f20832006ca53c689de48ead26b7b804
SHA1 ddbb4d95a159968b9dca10ce21f3e35f93c7129f
SHA512 90925a97f6954027a76f9d6a12baeb16ec82caf763996442ad0f545b09ed5d8e5745778b6c3c23ba1c52a807cedea2b948700342cae0ef0cad0bd08c8769d13b
MD5 SHA1 SHA512

Submit Download

Resource Monitor.lnk

Path C:\Windows\WinSxS\amd64_microsoft-windows-performancetoolsgui_31bf3856ad364e35_10.0.26100.1591_none_37c9b95250fac754\Resource Monitor.lnk
Size 1KB
SHA256 b61465acf0031e6a4cc34a66d568bd1735668abf591a6badb1f5f5bc20bf9919
MD5 1036f4aae37bd39b2ecc451c487e33c1
SHA1 8d60a72a4873cf55fa7bac47dff692303d17d157
SHA512 3ac2c8d3259ecbc41b186c2861ea6be3e6f9cc6b673a2ef610d42c91b359f31e941aa7de1d6ae801191870acdd6590ec788839cf9c069a7fc658d84582103a62
MD5 SHA1 SHA512

Submit Download

Policy.12.0.Microsoft.Office.Interop.Graph.config

Path C:\Windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Office.Interop.Graph\15.0.0.0__71e9bce111e9429c\Policy.12.0.Microsoft.Office.Interop.Graph.config
Size 898B
SHA256 94d87f016ccdae3bdcd0dff13fa0c7c7c78985e8bec88e669a736c71ba4086ba
MD5 9c3dc681624d88934dc48b2dab72545b
SHA1 c7c970baf814e993dad9951496f79b258a4eb260
SHA512 7077a26d166576dc2363bcb2df5409a206d6bb69364ef73d842e40ec6b2914991e15ae8c743e3ac2c21988f584ff39e8221f1055cd75c237bc12e7bb7ecea849
MD5 SHA1 SHA512

Submit Download

Policy.12.0.office.config

Path C:\Windows\assembly\GAC_MSIL\Policy.12.0.office\15.0.0.0__71e9bce111e9429c\Policy.12.0.office.config
Size 850B
SHA256 e9288289beec2fe3b6ac24c1311451c8d079786a09515b95cbf2eda7f87f0b22
MD5 d3e4c2fefeea6e6c467df305f7a8f3af
SHA1 a4468bf4d5abcb4d720b0fefb396dce5864e4717
SHA512 b81a9d38a4a6cd54c2081289192ce7aee3e34d71f834c9b94eac8cd79a5cb90a0dbd3ee0da89be68e4fb69a82903c658addc272a9d70d8f8f8f8cff5c2c18f10
MD5 SHA1 SHA512

Submit Download

Policy.14.0.Microsoft.Office.Interop.Access.Dao.config

Path C:\Windows\assembly\GAC_MSIL\Policy.14.0.Microsoft.Office.Interop.Access.Dao\15.0.0.0__71e9bce111e9429c\Policy.14.0.Microsoft.Office.Interop.Access.Dao.config
Size 908B
SHA256 41ced6daa116dc5db0ce8745f6380ddaffc5d997e9fc7f5604ec0031961c832c
MD5 df096d542fa7fe37032f5d4828155ebc
SHA1 72575e9e926199c3ffcc3c382830a6e30e2e8f56
SHA512 0506015904e714a7d8ddcbd940c029f0b1466398da6e327a4cbfdb2bb5c8e584d3238dee9036180ba523ec23c89d75318b2682fea1c8c4d01da91351d2f9088e
MD5 SHA1 SHA512

Submit Download

Policy.14.0.Microsoft.Office.Interop.Outlook.config

Path C:\Windows\assembly\GAC_MSIL\Policy.14.0.Microsoft.Office.Interop.Outlook\15.0.0.0__71e9bce111e9429c\Policy.14.0.Microsoft.Office.Interop.Outlook.config
Size 902B
SHA256 8e1b2f3c38d9583ec30e0f44459700b5d81f4b6a2b2eefe88198c9230ec408ec
MD5 afffb14251fdb8bbe7d064f77e3d60c8
SHA1 3c0975c4c816c8a556ccd5d01a3b675b25bfa0f6
SHA512 18ede0f0164d1e1f20a795a77114cd912839dfb758e259e803d029e3022908f1bd3f6f3f3289aca6ea4ca71466b4e6508a83f72fb85e2f393a82eec616c98e52
MD5 SHA1 SHA512

Submit Download

MMCEx.ni.dll.aux

Path C:\Windows\assembly\NativeImages_v4.0.30319_64\MMCEx\41bfa53ded357dc81c7b9d27f4567bfd\MMCEx.ni.dll.aux
Size 1KB
SHA256 c8d3d03b39a0415c1e1bb968a39b364d2c9dd3026d44b44158312b6292abdfbd
MD5 3375b2ebd3f8de5153b2da463e03cf79
SHA1 9d8b4f2e6ec668b4af0ad4d760ce1b5fcb89417b
SHA512 ae1be0cd12c47f05d9a4cac62158f9b8fb9ce195a5fbac5f811ae4fc4fd155432d25de23822f61b0ab9478f2284c75f1d7b5b6e2c31033e0291623df0d359a0f
MD5 SHA1 SHA512

Submit Download

Microsoft.GroupPolicy.AdmTmplEditor.ni.dll.aux

Path C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Ga41585c2#\c0f5747aa5164ddb0daa264803b4017a\Microsoft.GroupPolicy.AdmTmplEditor.ni.dll.aux
Size 768B
SHA256 ef115a0e0c15cdc41958ca46b5b14b456115f4baec5e3ca68599d2a8f435e3b8
MD5 33c250bf306b7cbbd3dd71b6029b8784
SHA1 025a14a110e180aa74754a185dd7a06e11d380d5
SHA512 9864f9c78b388243d22ba4c24c17a5b0c663b82c5ae9c46608b633436fcbd305e09107310a7958ee8092434020b51f57335861e8eb52b932094ffc0d45d32563
MD5 SHA1 SHA512

Submit Download

Microsoft.Security.ApplicationId.PolicyManagement.XmlHelper.ni.dll.aux

Path C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Sb6a1f1bc#\5d3a34ec66cc6852838699c35f6c0535\Microsoft.Security.ApplicationId.PolicyManagement.XmlHelper.ni.dll.aux
Size 504B
SHA256 696bda342649ec9268da57b6a279df6f24b0e857d5e6d0605fd25af95adc3cee
MD5 5d2a33958ebe530732fd9c258850c5aa
SHA1 8a1d854c73b0a9adb04dc4db317a0b9dd1708b76
SHA512 561c0480b0cc5f75acd24f9ea36f4e6ddee35261a0fd75ec2c495e940b6e7d41fa024110b58aa9bc2f6c69736cceb6cfbbb6198d9c50ad8965d6d30067bb52eb
MD5 SHA1 SHA512

Submit Download

Microsoft.Windows.Diagnosis.Commands.WriteDiagTelemetry.ni.dll.aux

Path C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.W79a81d80#\cb855471226699ba5b16b92e2d28d979\Microsoft.Windows.Diagnosis.Commands.WriteDiagTelemetry.ni.dll.aux
Size 996B
SHA256 af5c8e37a1057d8d987b76264bef95af5e2f768d68f0298a18ce4ebec33b7344
MD5 420d8ce955a48dbad2fcb7acbdee3d06
SHA1 68ca536e133bf5eea0bf6f01555073850010524b
SHA512 9a3d8f49705b65915f2cf1892dfafd64689dcaa74ce34c1f7fa3569122dfe88189d9010ca5ec64d1bd14d0f32bd3faa42fa75f7b8188114fd47de2aaa6207e7e
MD5 SHA1 SHA512

Submit Download

Microsoft.Windows.Diagnosis.SDHost.ni.dll.aux

Path C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Wad78daf4#\8d02aa0c42e3932ec820e4fb79e3e914\Microsoft.Windows.Diagnosis.SDHost.ni.dll.aux
Size 2KB
SHA256 62eca7eff9635f01ceba247c228f079b79f9bdfc0895c7e8bffc07b98f0232a4
MD5 d31175df3a8c9ddb384d046db170be05
SHA1 d1318c3ec1dcef6d4ae24f513a0aa77a897884e6
SHA512 5e693b27c390e55fc6eb03c0decac4b2b70d7780c91df5dfd8d967e017c1aee70c1cdcd7576e75dc0e6dfa07c5fb600b7424242c7c9a1359831c80eec1e38340
MD5 SHA1 SHA512

Submit Download

System.Xaml.ni.dll.aux

Path C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xaml\4d7872be7539f81ba4daf253dd26b9cd\System.Xaml.ni.dll.aux
Size 572B
SHA256 0fcf40c74177936605ea861fa5eac3ab108c9ecaa13c579cf3f6846389b113a1
MD5 668fabd7829e5b8c5a58853bea0dbe1e
SHA1 2073cc03638358b6eaf18ac60a8e9aea11de4901
SHA512 dfc81eb860033634f28fa55402a65a486b9c14762f78f57f1423ffb10228b994d69e54d131ba94f79cc57376a663799716aea7bc97915f79cba92299d6e430bc
MD5 SHA1 SHA512

Submit Download

System.Xml.ni.dll.aux

Path C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xml\9f5174b58465a67acb58ccaa54a46f15\System.Xml.ni.dll.aux
Size 748B
SHA256 13a74e7dc8897b6489f66b39e0e4505a4e46a943f3635b5b0c68bbe571b682cf
MD5 9adddd55865dc2c75e2e191c84de5979
SHA1 7fb656d7b9232cf85eb19832b233a572ff94dbb1
SHA512 34ceb50c1e184f26f738426e7a126e6c4cf574e6d2349e4c02ca966a4971a27c710aaf4483b5af090303daf00d56aa5aee0a80cab7fb61c4090775e5e0bfe783
MD5 SHA1 SHA512

Submit Download

AppLearning.meta

Path C:\Windows\security\EDP\Logs\AppLearning.meta
Size 4B
SHA256 df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119
MD5 f1d3ff8443297732862df21dc4e57262
SHA1 9069ca78e7450a285173431b3e52c5c25299e473
SHA512 ec2d57691d9b2d40182ac565032054b7d784ba96b18bcb5be0bb4e70e3fb041eff582c8af66ee50256539f2181d7f9e53627c0189da7e75a4d5ef10ea93b20b3
MD5 SHA1 SHA512

Submit Download

HyperV-Compute-System-AzureVirtualMachine-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum

Path C:\Windows\servicing\Packages\HyperV-Compute-System-AzureVirtualMachine-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum
Size 896B
SHA256 d54f02b97ed5bc2a642756268b41d4b8f7a077e73224e1580d22436834a14db5
MD5 782d7b5488175ae07bbe22b43f937d87
SHA1 104c94c0f423dd5f9e852e50eb7d1ca68c06c787
SHA512 57ba0341bf40547e6d8648d05adef75d85034d993243bae9950f725b740aefbc25050f9717cf48f1e7e60449b9c57d237fc2c4a04182a018a1bc481cdaecdf98
MD5 SHA1 SHA512

Submit Download

Microsoft-OneCore-PerformanceCounters-V2-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum

Path C:\Windows\servicing\Packages\Microsoft-OneCore-PerformanceCounters-V2-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum
Size 893B
SHA256 19682db649b35a82d1a849d59786fc3dd8fce44185b17520b70b822614baa47a
MD5 1c920801aa88d000ce966facc8ba734a
SHA1 bc2ed7cce05d7915940dda95129d05bd465f3fe4
SHA512 c101ae906c5a1d9d8850a4e54fed782659857c41192f0ee512f0a29c63ccb69b1f2443016719cf29311836e4270f36cdb3697f781ae01ec56b0c55e10f67251f
MD5 SHA1 SHA512

Submit Download

Microsoft-Windows-ApiSetSchemaExtension-HyperV-ComputeStorage-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum

Path C:\Windows\servicing\Packages\Microsoft-Windows-ApiSetSchemaExtension-HyperV-ComputeStorage-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum
Size 954B
SHA256 972961ec51cd362cbfce8693342c2d260192bae9856cc2889b3bafda5e64aada
MD5 a9235453f1fb672db828a673ed597d2e
SHA1 15da399d883d6faed83393be1eba078e3417bffd
SHA512 6b2e958382d2fa2c2b86f3a645d3a1933a0eef9e08bbaea4987ab0d83f57fde5d6bfa7084048c24dfce89fa8598a32c4a18f8be7a0e437a21c5bd3e02bb75ade
MD5 SHA1 SHA512

Submit Download

Microsoft-Windows-BootEnvironment-Core-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum

Path C:\Windows\servicing\Packages\Microsoft-Windows-BootEnvironment-Core-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum
Size 884B
SHA256 6ca83adefc47fc9ab71637c150b95b33083e61e507dff2ee5f2692aa27e1453e
MD5 b3e237ea950d826694ad999c36a99120
SHA1 4adbfff2a038496b0e9d161ae1704a9395039e3d
SHA512 5bbbf2449eaf40a963d11699ff93a18d191e05382d33ffb04758e3cb418a6b3c0ab319c21d52497c4d48100775075c8b5a85e0c8b9da6631f1041e9fb3ecb3a2
MD5 SHA1 SHA512

Submit Download

Microsoft-Windows-ConfigCI-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum

Path C:\Windows\servicing\Packages\Microsoft-Windows-ConfigCI-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum
Size 830B
SHA256 80e0f31f19a8ed96f01f9fc611a72829badeeee21b6876019e24c22e68b207ba
MD5 be2429905922fc27578f75842b95af6f
SHA1 3708c129db618beb6c7cfb233795c9a0359dfd0d
SHA512 db626dd46ec707e543ffbd57385977722dfb401c47d52accd06dbcde787351cbccb3d6b87057d7e8d9c77134d66877f837d795e6b22ab4f36d2c11f23fd9e8f4
MD5 SHA1 SHA512

Submit Download

Microsoft-Windows-FCI-Client-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum

Path C:\Windows\servicing\Packages\Microsoft-Windows-FCI-Client-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum
Size 854B
SHA256 445c811c35e2fbd4aa59389ec805492c7b2db50d65f5d161417ce8302b103fbe
MD5 310614b10980392ebdb5a5a8b90b527c
SHA1 8c8fb36e7c2a1574cde7fdea30e8e5f14fad7691
SHA512 416650adf9a61cbbb6eff7af635264e5bdde903477465cce05b63773927b8afb35e75fb68497882bce7778f524b9c7f3f2befcfe3840e99bff90ccd305bac66e
MD5 SHA1 SHA512

Submit Download

Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum

Path C:\Windows\servicing\Packages\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum
Size 916B
SHA256 fcefeed6eb97cee99cf0781cb3882d0cf2c2d1d82da1e7d0ea686ad2a28d6d7c
MD5 b1a232021c419a0243f14b3163dd4487
SHA1 0f2ab03cebfd4aa73c69fa2ab255023a15f82073
SHA512 a94e90573a9352a968ac68babe67cbb0b34352786481327ff06a33efb4aaf5f1ca6f626a12650b0496be9b210b127650b1ee3a35e491d22dded0abd4fc42f401
MD5 SHA1 SHA512

Submit Download

Microsoft-Windows-Help-ClientUA-Client-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum

Path C:\Windows\servicing\Packages\Microsoft-Windows-Help-ClientUA-Client-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum
Size 887B
SHA256 e36f87d54a5b5c1260f0bf6ce05879ec238e2b98d616d3aae1d8db31e5bb3a7f
MD5 714648d2aa2d73c96e0bf598fe1947a3
SHA1 5c04bed96fbf866a680093fcf9233435a2c720fc
SHA512 2ccbacea6f87882788385958e1c2f9a97fe214b9b21f7579dca933c5d27c3eadc5b954449d02c105a3f3842eef7127682e57e2230e475a6219fb639cf65bfa86
MD5 SHA1 SHA512

Submit Download

Microsoft-Windows-Identity-Foundation-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum

Path C:\Windows\servicing\Packages\Microsoft-Windows-Identity-Foundation-Opt-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum
Size 875B
SHA256 d34069ded70618905191f4d4152a182ba4036cf8ba9eb4a5a0da285109172fa5
MD5 d0404602e320cbabbcece5a375823b8f
SHA1 0b41d3b325ee8264eea114afba3b15e822234a1d
SHA512 83ea6f446ee8f4438409711501ccc0db2b61563b1d22c8e91b6655ccc130101a1f16e0ff5abf931339d46292c85ce6fd755ab140cd4119dd6ff1cf532aef038a
MD5 SHA1 SHA512

Submit Download

Microsoft-Windows-Kernel-Package-BootRes-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum

Path C:\Windows\servicing\Packages\Microsoft-Windows-Kernel-Package-BootRes-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum
Size 872B
SHA256 232885aa9953d5c0890072e5589e9265c9a06f8354cb7403cde80d604c526f09
MD5 0a1d79402574d8958b3bf6006ffeb52e
SHA1 2defaacc736372211d032a3559a2eaa0e251c06c
SHA512 0f65da488af21c88a87aebf1c47e2920700a7a5b49dbb60caa87dde51bde87b3a9a312fab2fe992607848f83a35c4a811a0103094724c1922122437a87fb8fa8
MD5 SHA1 SHA512

Submit Download

Microsoft-Windows-Lxss-Optional-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum

Path C:\Windows\servicing\Packages\Microsoft-Windows-Lxss-Optional-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum
Size 1KB
SHA256 3d4dfe50ba664e0844c0d5e60cdc801ccef6ed580725188cee9a38d927e878f5
MD5 376bfda9c387b2ebee862fae6c1e09d7
SHA1 2e98bb51da5aa1da89066f4c16106c889dbc6e8f
SHA512 51171bcab1311906f26b8e034f405d975a5a7f23e0906ec7a9bd4c9f2c12d0e48a6eb924e133846ca3592d8625354f4231e3f2f0d9d05c42560e30817dd3c0ac
MD5 SHA1 SHA512

Submit Download

Microsoft-Windows-Lxss-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum

Path C:\Windows\servicing\Packages\Microsoft-Windows-Lxss-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum
Size 836B
SHA256 875fd088c3e4fc6a48ec6d7f9b897956a5ab6a83b9710de550857731c1311fef
MD5 b9f4a26fe6ff491d6b6f51544f2fe131
SHA1 d8068a23640141ace625c3ea71178fd7ca4d61e1
SHA512 20e41655ea2aef1c71c559fb0d8808c90106626ca6f2195e8e7920ac552234952ad94a11b4e30254a55176a77b8c0ee4deed21ae65be5f3589adda7c6596d67f
MD5 SHA1 SHA512

Submit Download

Microsoft-Windows-Media-Streaming-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum

Path C:\Windows\servicing\Packages\Microsoft-Windows-Media-Streaming-WOW64-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum
Size 890B
SHA256 d1db33e3ae5c6779e11ecc0ddf3962bf0559582980b5e5a92fd5caf91cb1bff2
MD5 251a7e1401487e69a415fde9d5128b27
SHA1 9bb2d9b5d93e8f9dfe5337014008bce57b3cdb18
SHA512 b572720338c60d4c27870e563145269d62470bd32cfb6ba4dbecc881632273189946d813fb6c6f4ea0539f9f0a6975c89b1bcf7fe7c297a005a4b15d8a4eccd2
MD5 SHA1 SHA512

Submit Download

Microsoft-Windows-OfflineFiles-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum

Path C:\Windows\servicing\Packages\Microsoft-Windows-OfflineFiles-WOW64-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum
Size 860B
SHA256 be0b1f2bcf1812a1b42727bb64413764b2b9e904fcbc64ce0d4b8dc49719ff04
MD5 01734878c05d2dded8c726a622fdba9e
SHA1 8b009274302f5d61f895a3c0f8f76adf0414fc88
SHA512 cc592a17f82d0a547bc7e0bbdaee4b000ecca62f5261a403811dc0a6c86b294439d1c6d2f1fd98e2f5142248a196809a4372cc84ac0651f81685e2eeb0259c20
MD5 SHA1 SHA512

Submit Download

Microsoft-Windows-PhotoBasic-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum

Path C:\Windows\servicing\Packages\Microsoft-Windows-PhotoBasic-merged-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum
Size 857B
SHA256 088d391d696ec15140e7b4dbe6fe17e95296af9d09c7eeff17a0a9c241925b89
MD5 a3f07671642038caece41ff2a52d8673
SHA1 53442624b01b79a3729a23d4f12efc8dae4b1002
SHA512 5d1ab4b072eec924d13d760da6aa958cc81fa58cfec3de8ff239d131d37b31cdd547eac0fa5ab34c060f0f28a2295e071a1a9573815541c5b92cf0c63f11bdb7
MD5 SHA1 SHA512

Submit Download

Microsoft-Windows-SMB1Deprecation-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum

Path C:\Windows\servicing\Packages\Microsoft-Windows-SMB1Deprecation-Group-Package~31bf3856ad364e35~amd64~~10.0.26100.1.mum
Size 869B
SHA256 8fc454ee38e9b6e4dd8d24a792d802e39b938d3c165f197ea3f5f847cd635a52
MD5 d7a651527e52d575474b1f923d60d904
SHA1 f4679ca555d653bee0e45919c4cf2641a2b7ed45
SHA512 e3c8d6e63da5c6459b71a43b2946b3e0204a7c3d8bbee67cd36c2d9a1700a4cbd9f1badb4208f47a37abe43c4f9d370c22749e56a0176a97196b6afb5a2282f6
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads