RobinHood.exe
Windows Exe (x86-32)
Created at 2019-04-28T21:48:00
Monitored Processes
Behavior Information - Grouped by Category
Process #1: robinhood.exe
35058
0
| Information | Value |
|---|---|
| ID | #1 |
| File Name | c:\users\fd1hvy\desktop\robinhood.exe |
| Command Line | "C:\Users\FD1HVy\Desktop\RobinHood.exe" |
| Initial Working Directory | C:\Users\FD1HVy\Desktop\ |
| Monitor | Start Time: 00:00:25, Reason: Analysis Target |
| Unmonitor | End Time: 00:04:25, Reason: Terminated by Timeout |
| Monitor Duration | 00:04:00 |
OS Process Information
| Information | Value |
|---|---|
| PID | 0xdf8 |
| Parent PID | 0x860 (c:\windows\explorer.exe) |
| Bitness | 64-bit |
| Is Created or Modified Executable |
|
| Integrity Level | High (Elevated) |
| Username | NQDPDE\FD1HVy |
| Enabled Privileges | SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege |
| Thread IDs |
0x
DF0
0x
AF0
0x
DB0
0x
474
0x
D7C
0x
C58
0x
F70
|
Memory Dumps
| Name | Start VA | End VA | Dump Reason | PE Rebuilds | Bitness | Entry Points | AV | YARA | Actions |
|---|---|---|---|---|---|---|---|---|---|
| buffer | 0x7FF8B30BB000 | 0x7FF8B30BBFFF | First Execution | - | 64-bit | 0x7FF8B30BB000 |
|
|
|
| buffer | 0x7FF8B3182000 | 0x7FF8B3182FFF | First Execution | - | 64-bit | 0x7FF8B3182000 |
|
|
|
| system.drawing.ni.dll | 0x7FF90FF50000 | 0x7FF910188FFF | Content Changed | - | 64-bit | 0x7FF90FFBC080, 0x7FF90FFBB9D8 |
|
|
|
| system.drawing.ni.dll | 0x7FF90FF50000 | 0x7FF910188FFF | Content Changed | - | 64-bit | 0x7FF90FFBC080 |
|
|
|
| system.drawing.ni.dll | 0x7FF90FF50000 | 0x7FF910188FFF | Content Changed | - | 64-bit | 0x7FF90FFCE9E0, 0x7FF9100D6EA0 |
|
|
|
| system.drawing.ni.dll | 0x7FF90FF50000 | 0x7FF910188FFF | Content Changed | - | 64-bit | 0x7FF90FFDB000, 0x7FF91009ABF0 |
|
|
|
| system.drawing.ni.dll | 0x7FF90FF50000 | 0x7FF910188FFF | Content Changed | - | 64-bit | 0x7FF90FFC1BD8 |
|
|
|
| system.drawing.ni.dll | 0x7FF90FF50000 | 0x7FF910188FFF | Content Changed | - | 64-bit | 0x7FF90FFC1BD8 |
|
|
|
| system.drawing.ni.dll | 0x7FF90FF50000 | 0x7FF910188FFF | Content Changed | - | 64-bit | 0x7FF90FFC36F8 |
|
|
|
| system.drawing.ni.dll | 0x7FF90FF50000 | 0x7FF910188FFF | Content Changed | - | 64-bit | 0x7FF9100D2570, 0x7FF90FFC36F8 |
|
|
|
| system.drawing.ni.dll | 0x7FF90FF50000 | 0x7FF910188FFF | Content Changed | - | 64-bit | 0x7FF90FFDC0C0 |
|
|
|
| system.drawing.ni.dll | 0x7FF90FF50000 | 0x7FF910188FFF | Content Changed | - | 64-bit | 0x7FF90FFDABD0, 0x7FF90FFBC0B0, ... |
|
|
|
| system.drawing.ni.dll | 0x7FF90FF50000 | 0x7FF910188FFF | Content Changed | - | 64-bit | 0x7FF90FFBB6E8 |
|
|
|
| system.drawing.ni.dll | 0x7FF90FF50000 | 0x7FF910188FFF | Content Changed | - | 64-bit | 0x7FF90FFDEF20 |
|
|
|
| system.drawing.ni.dll | 0x7FF90FF50000 | 0x7FF910188FFF | Content Changed | - | 64-bit | 0x7FF90FFC3920 |
|
|
|
| system.drawing.ni.dll | 0x7FF90FF50000 | 0x7FF910188FFF | Content Changed | - | 64-bit | 0x7FF90FFDB3F0, 0x7FF9100C0AB0 |
|
|
|
| system.drawing.ni.dll | 0x7FF90FF50000 | 0x7FF910188FFF | Content Changed | - | 64-bit | 0x7FF90FFD37A0 |
|
|
|
| system.drawing.ni.dll | 0x7FF90FF50000 | 0x7FF910188FFF | Content Changed | - | 64-bit | 0x7FF9100AF600 |
|
|
|
| system.drawing.ni.dll | 0x7FF90FF50000 | 0x7FF910188FFF | Content Changed | - | 64-bit | 0x7FF90FFC1338 |
|
|
|
| system.drawing.ni.dll | 0x7FF90FF50000 | 0x7FF910188FFF | Content Changed | - | 64-bit | 0x7FF90FFCF0D0, 0x7FF9100C5760, ... |
|
|
|
| system.drawing.ni.dll | 0x7FF90FF50000 | 0x7FF910188FFF | Content Changed | - | 64-bit | 0x7FF90FFD4E10, 0x7FF9100C25A0, ... |
|
|
|
| system.drawing.ni.dll | 0x7FF90FF50000 | 0x7FF910188FFF | Content Changed | - | 64-bit | 0x7FF9100A3EC0, 0x7FF90FFE3AD0, ... |
|
|
|
| system.drawing.ni.dll | 0x7FF90FF50000 | 0x7FF910188FFF | Content Changed | - | 64-bit | 0x7FF9100D1E30 |
|
|
|
| system.drawing.ni.dll | 0x7FF90FF50000 | 0x7FF910188FFF | Content Changed | - | 64-bit | 0x7FF90FFC9D90 |
|
|
|
| system.drawing.ni.dll | 0x7FF90FF50000 | 0x7FF910188FFF | Content Changed | - | 64-bit | 0x7FF90FFE5540 |
|
|
|
| system.drawing.ni.dll | 0x7FF90FF50000 | 0x7FF910188FFF | Content Changed | - | 64-bit | 0x7FF90FFDF000 |
|
|
|
| buffer | 0x7FF8B318E000 | 0x7FF8B318EFFF | First Execution | - | 64-bit | 0x7FF8B318E000 |
|
|
|
| buffer | 0x7FF8B2FF4000 | 0x7FF8B2FF4FFF | First Execution | - | 64-bit | 0x7FF8B2FF4000 |
|
|
|
| buffer | 0x7FF8B318F000 | 0x7FF8B318FFFF | First Execution | - | 64-bit | 0x7FF8B318F040 |
|
|
|
| buffer | 0x7FF8B3190000 | 0x7FF8B3190FFF | First Execution | - | 64-bit | 0x7FF8B3190080 |
|
|
|
| system.core.ni.dll | 0x7FF90DF00000 | 0x7FF90E22FFFF | Content Changed | - | 64-bit | 0x7FF90DFB5278, 0x7FF90DFB52A0, ... |
|
|
|
| buffer | 0x7FF8B30BC000 | 0x7FF8B30BCFFF | First Execution | - | 64-bit | 0x7FF8B30BC020 |
|
|
|
| buffer | 0x7FF8B3144000 | 0x7FF8B3144FFF | First Execution | - | 64-bit | 0x7FF8B31441E0 |
|
|
|
| buffer | 0x7FF8B3191000 | 0x7FF8B3191FFF | First Execution | - | 64-bit | 0x7FF8B3191002 |
|
|
|
Dropped Files
| Filename | File Size | Hash Values | YARA Match | Actions |
|---|---|---|---|---|
| C:\Robinhood\encfiles.txt | 0.22 KB |
MD5:
f9ae5cc5517e9572ff05f3a41b9fb562
SHA1: 6a13836fad7e64f0049837efc2f42d09a2e6ad21 SHA256: b74ab867a84f2ab72fbebfcd7ddd5d565fa69996d88b0cb365fc0fe0e5f20502 SSDeep: 6:o0wRtn+HoTpb1n+vN2h1n+FBLanJAf1n+Zba+V0:o0wv+HoTp9+l23+jenJAJ+JVW |
|
|
| C:\588bce7c90097ed212\DHtmlHeader.html.robinhood | 15.75 KB |
MD5:
fcd0dedd4188b9fc17cc63eff4ae482b
SHA1: 12c551c2115f4616a0579abb31f2bcb40abef725 SHA256: 76043215d1b46cd5bb150ecb67b36756b5aeade71be4fb277bd8d13b9ae46de3 SSDeep: 384:BVfiWP+hyiE0px1vN7x9o9IDvzizXADScVoIv6G:DhGhyirZvv9oKDvuDVF05 |
|
|
| C:\588bce7c90097ed212\1029\LocalizedData.xml.robinhood | 79.08 KB |
MD5:
86f5b65b57eae8af54b2b5bf106bde39
SHA1: 11a9c7baa7036550b103a5021f5a6426c1387119 SHA256: 42f640f31945492294a0f01ceae01588c453e01636db3d5ccc1497ca37d02535 SSDeep: 1536:MMgq9b0xc6gQOoqDhzAg4Q1dE5xwnI+Lwf9qy8nOol8QTo025+f8GsZm1nD0NAfy:1/SCX/0g4QyOnI+Uf9n8O4p2tFwnDb0Z |
|
|
| C:\Robinhood\encfiles.txt | 1.36 KB |
MD5:
442323462e3fc9876d8ca5db76a4df0f
SHA1: 69e85cf487c8f031beb273653de14cd90e882d71 SHA256: 42060348063e287748545c77f09e4a1dfbaf87299972fc3476513502f86c3e6e SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnby:oJTm2eeb0Z1xape |
|
|
| C:\Robinhood\encfiles.txt | 2.62 KB |
MD5:
63b9328a2ce16fab3b0ae950e1f430bb
SHA1: 21eea365be4fa97d66ef55cff9105ffaf638d881 SHA256: 6b15681e73e8974546a7c4843b9e9572f9ca063af4c3bb0d91ed72ea3af9bb38 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQHf0r30By:oJTm2eeb0Z1xap5yB |
|
|
| C:\588bce7c90097ed212\Client\UiInfo.xml.robinhood | 38.14 KB |
MD5:
1e4a55277cd5b81e7be4533410d5ec2d
SHA1: 0c6a35338953854ab3ca8d4dbbe1a3a0429cc576 SHA256: 18f672df325a3c89e7ff6a710f319c58798d4527cd4e3caa56ece8d5ac88aece SSDeep: 768:G25xANsDvVj5TaRY21DxC/zTqftoIILBBWvZC/8IP:GRNsDVqY2Bc/fqftoIMByC/RP |
|
|
| C:\Boot\Fonts\malgun_boot.ttf.robinhood | 173.27 KB |
MD5:
ef2690ce55b4f1812e9753c27d5c9dd9
SHA1: cefb1306d5fa163cd80cf09cdd34ff25318093b7 SHA256: 1cadcacdfe3fa634ff1376922a80ed71230bdacd9aaf586f68e09ce841f6437b SSDeep: 3072:WwjlM02Munn+X3/tlTZGK4daI61+U9YK+gTMH+eAGa6z1QFx6rcSmwSfsd:Wyl89nn+V1ZGhaf+PKo+edaglrcjJ0d |
|
|
| C:\Robinhood\log.txt | 1.48 KB |
MD5:
0350c0a63965594d8e6e89e672efa3cd
SHA1: f23d43b222c5457dba4b9b21e058cfca167b09dc SHA256: 606e7772127e61b9ac0b89a4e26b16db93145d7a5c69ca3e423636b553a3b337 SSDeep: 24:mZCundJ35kpVSdJ3opVCdJ3UpVMEdJ32upVZdJ32apVcK7kHleK7Il+l7QlKXAlT:mZCud0XYOXImXM69X/VXcK7gUK7IwOl9 |
|
|
| C:\Logs\Microsoft-Windows-MUI%4Operational.evtx.robinhood | 68.02 KB |
MD5:
61d71f2b290f87ca03c357c08f284061
SHA1: 22e065dc7d525e78e64173f6585f3ee4e0cd20c3 SHA256: 3c094e15a70c28d24b7dea7be75ac78547c1a24e46d21c80e66731328a97938f SSDeep: 1536:G00xPbMNizVdUIRg9kF8uhd448ZrOS4FzFZ5qx5UJPH6dx:wFbiiAIK28uhdL8VR4FzFHqxu8 |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\jvm.hprof.txt.robinhood | 4.14 KB |
MD5:
853b6badc2e05716255c29a21d038876
SHA1: d7aa28f345dbdfbaf944f72ccc6afd9504adcc7e SHA256: 51921bf0268735c0aa8abc09dc68226f2419196b758bacc8133ca31c858a41db SSDeep: 96:TrndcCCbv5QKC/F5PdetiE24zr5SDuXy7PEr1PaQfJTFX:nndUbhDC/HleAyr5Suy8aQfTX |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_sv.properties.robinhood | 3.34 KB |
MD5:
ba6bf65ba624f503b72d42e8090071e8
SHA1: 8572328812b745d23d8f5ed8a03fa17efc769d70 SHA256: 65f45c1010111265acdaabe93828794f62b4b25fe697afca075f03b0c17dfa3b SSDeep: 48:xw/jkasiGpQfOjw81gWGf0A+YvI4tUq+y25+xB15CxCKkiodhDw5rO5JCAb5LWcX:ejkaepQif1g/vyq+yXP1MWij6FbkcGzS |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\ext\jaccess.jar.robinhood | 43.48 KB |
MD5:
78209aafd8eee268015b1c45122b1a45
SHA1: 2b702dd549deeedb7e47ef3b968cbc1dcaf48e95 SHA256: 9dc0af706ebb496c0ef6bfd23c203ede6bb01d040d223fae8c72c68db298249b SSDeep: 768:bS9re07m+h/1gJZs/l2gZj8OUS0jgOFbdgjyucDcTy52X3KRKK3WYV6/9L:bsr5m+11eWdBCOcFhgjyucwTy9R13WYI |
|
|
| C:\Robinhood\encfiles.txt | 11.70 KB |
MD5:
b2734dd34176d79494b49f78ddef7204
SHA1: c51de8733f43429fb7eac4cd8db41294de7938c8 SHA256: 7c79e6b6061798ae2276d6087d88af60eabc43e0dd7fb1bbf01f0c0b93dbfc11 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6Q:oJiaq6z/wueQ95v |
|
|
| C:\Robinhood\encfiles.txt | 11.98 KB |
MD5:
173c8a41da9f2a48b775c3585a5a6996
SHA1: 4a3f67a6c25d3ac36407a78e5af4abdf7b4aacc6 SHA256: 4bb95d0a9f48e50978fb0e8a7184be827c9e546f257cc9502e43066d9427fa8c SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6w:oJiaq6z/wueQ95P |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiItalic.ttf.robinhood | 73.38 KB |
MD5:
2e1f7ceaffa7e0cacdc8e777fc5d6042
SHA1: 244c45368bbee2879e98d5aea610bf573d035d8b SHA256: bd10b802f4b03a537b79b50fb4fb71849c44f09b5f24c0d25bf3a279386a0867 SSDeep: 1536:+4jTqbl1858cJTzLXNlLPD9aMnrL0GKuRL3a9DQFB+hALD210iR:RjKlsVzfb5aMnPZDRDzti10c |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\security\cacerts.robinhood | 112.23 KB |
MD5:
819ac679aaba1bf833e3f9211be5c300
SHA1: 54cfdf7e5cbe6e3e26f6f20e1af3339325290e22 SHA256: dada5be600f7cdf9099bbc5ec7dbbf39a5d50f8791df54edeccc24a00670ca46 SSDeep: 3072:XIXVS1554vTA0n2H2a2vVhHbzneWW2Nwaq:4Xsj4rAvKHbzeWW2Nhq |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.robinhood | 782.11 KB |
MD5:
c0d619ed2d2e0985cb4d772704e884fd
SHA1: 0501feef453e09f436f974454bf5538df2eafefd SHA256: fe918bada24885a27da51d81053fa0db51d85e8b0ce1bd30c75a3f6129dbe5b4 SSDeep: 24576:FLuHeF03HGLrh6xKaVk741TiAQ9rT3xWT8TeU:FLuHeFMk6x7+41TWVBWT8TeU |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.robinhood | 1.07 MB |
MD5:
57dc515f8afbe3ef4186eedd8221aa28
SHA1: 5612b65be2b13b5eb3dca5bcdb0e0f235a26a272 SHA256: 3b3145607d78b39a1930cb3ee3b58a58e12ac3869ec7102d4eabb7790ce30c02 SSDeep: 24576:wbUV5mQdupv3CmaX5W+oFEtNPJK1rlCxUGOd9IrBbv9teErW:YUDmQgpv3W5WLFOPU1rlCCGOgrBbv9t4 |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.robinhood | 14.58 KB |
MD5:
342959197d85d48ad109cbb1457fdd1c
SHA1: 44ac73b7e7a6a3b1c39a6ad3e2a3c76a8ef41af2 SHA256: 9958c855de2f9ec66ba69757d1fc5e464488c45cc658fad0a30504f62b64b9ae SSDeep: 384:kzvljfL75ReC3aRpfqdtRzWoyeV76zam9pPFtS1:kL75RepRst2G7/Ga |
|
|
| C:\bootmgr.robinhood | 385.97 KB |
MD5:
92ffcf3202b8a0212df6f13a9e9f7f18
SHA1: a1ff7a11b4783306b22c2a76a349f38679fa4bf7 SHA256: 7e1162dbaef59f6158ed37cb0fb1bf8cbd19d685ea1b638e45a910c29c4b69ac SSDeep: 6144:M5zFbSf2ibVjpFCkEtk6JffTRSf8/ZxOIoQiU34LkYtpyrA+WvCAd+XEiPY:M5JbMlpFCBk6JHTvsBUoLdt1CxUiPY |
|
|
| C:\BOOTNXT.robinhood | 0.02 KB |
MD5:
fc051bf1bc3fdc5ca40be3461285bca2
SHA1: 57dfe85c8f0ba899044db43c45f317c7805921a9 SHA256: 1c9816598da9d5fd432f6cc9acc41a4bbe02066a033818fcd83cf0458829a327 SSDeep: 3:hgB5ote/:2bote/ |
|
|
| C:\Robinhood\encfiles.txt | 0.01 KB |
MD5:
777b2999b8fbd77e79bf89ea9118d78b
SHA1: 0d026c1e09e6f712bfd62710ec099e45ac4e7243 SHA256: 028327222a078e76931ebc32249b834cc338dc78207db1a43c753336fc653248 SSDeep: 3:o0wm:o0wm |
|
|
| C:\BOOTSECT.BAK.robinhood | 8.02 KB |
MD5:
3f1cedb86529c96256d94ea52bfbdea8
SHA1: 462060c534e7cabb867557ffeedbfb4d4e951c22 SHA256: 927f498094f5e1e9863104679e04b7dd6cc66b8de777ec85919ba8db615b060b SSDeep: 192:n51Lr9cwj3/E6Gg6RxEM7wNEIiCApyyaj0ME7DFN:7Bcwj3JrGB7/HME7H |
|
|
| C:\Robinhood\log.txt | 0.07 KB |
MD5:
a89952520301e260cbbc4810aa000796
SHA1: 4399d48006dfb5ac37a3cc77c6ec97e11e152a60 SHA256: 83f2b752c0c62c7d874271dddb67971d593532112caaafcb0008f02c2f518623 SSDeep: 3:ux95NTkueGGeekAFiNTkubCAL3cvn:uxpzZG5FazDe |
|
|
| C:\Robinhood\log.txt | 0.20 KB |
MD5:
17553af9faafb91b5cc6c2b2978f001a
SHA1: ef4248f9afebcb9a20c4cdb98d3aabc73679d656 SHA256: 8d9086abb49e07526e5f10538bad0ab132b44f1d6fcd2f5c95ba542c8a761913 SSDeep: 6:uxpzZG5FazDuY2seIduGjjkseCiG5lqpV+RM0ov:mZCuDjdJjj5iTpV2ov |
|
|
| C:\Robinhood\log.txt | 0.32 KB |
MD5:
24223a5c05738541201be1a0572119b4
SHA1: 7e1cf49f5254159c3dd7e8d48a19ec3f996a54fe SHA256: 0b67b4b6721e9e39c2db923bf5c01851ebb3b8381a1a8b2755a62539ecb10143 SSDeep: 6:uxpzZG5FazDuY2seIduGjjkseCiG5lqpV+RM0omSYrrduGjjlEG5lqpV+RM0ov:mZCuDjdJjj5iTpV2oyrdJjjlETpV2ov |
|
|
| C:\Robinhood\log.txt | 0.44 KB |
MD5:
71d2795bcc3fa7c34872293c64299dce
SHA1: ea367bc2b77f15887d10b1ee800282a16668febe SHA256: a3a43c039b447f351f1277f26437056dc0bbdf3af441ab9321f210bf03baf427 SSDeep: 12:mZCuDjdJjj5iTpV2oyrdJjjlETpV2oadJjjyTpV2ov:mZCundJ35kpVSdJ3opVCdJ3UpVX |
|
|
| C:\$GetCurrent\Logs\downlevel_2017_09_07_02_02_39_766.log.robinhood | 41.69 KB |
MD5:
80c8830b2a62e0cc1b089ab25b74da60
SHA1: 81fce9ef16f36660defb42e22b9978db3f8463a7 SHA256: 2b069ffaa19987e392ff3ab0699ebfb0a21c69de5e4469ca5f7db8851622b1cc SSDeep: 768:5XUVPA4H+NhIN0+3Dc+msr9YYc66dZz1DcTX9Nu1LdA/us+knAPEov:5XWP3eNG0W4Yc66BEtNWB9R80Eov |
|
|
| C:\Robinhood\encfiles.txt | 0.07 KB |
MD5:
e3008c467fd084507ffa9d24d228b28a
SHA1: 7af5ca1b1325f2d4782a16a1dab2c1b26b981bb0 SHA256: ff666398b2cd1b449732f2cf54e8103b47dba1144bb3b30af383a194a6e84c31 SSDeep: 3:o0wRtnXXAl6Vi9Aa6c+WVYTpZy:o0wRtn+HoTpo |
|
|
| C:\$GetCurrent\Logs\oobe_2017_09_07_03_08_57_737.log.robinhood | 5.88 KB |
MD5:
1230cbad18bf80e785b25546b1dbfbdf
SHA1: e8ed6e6d9ac3d782847806eb98b850c92f490836 SHA256: 80d93f463e1f92cdbaf8ffc39422dd2a130952fbb4faee40f3b96104f6074b8d SSDeep: 96:pmLIHT1x6RegnlwA8BFwVCGH22p2ortBBV036gMbGwzBGBd7thm4Ag9IS4WE9gbB:ELC36smwY9H22U+V0vWGwzEhtA7dWE9S |
|
|
| C:\Robinhood\encfiles.txt | 0.12 KB |
MD5:
d2b3960a36ec1a36e3a547fcbdb0bd23
SHA1: 6fdabfd3a3cddd524fdf2cf0eb4a1878c7826164 SHA256: 7e19b06d364373cdc424468ee07af211acd9b4e84c0bd7ad811871f8a8a86c15 SSDeep: 3:o0wRtnXXAl6Vi9Aa6c+WVYTpZVftnXXAl6VTH/V6c+p36aIL+:o0wRtn+HoTpb1n+vN2+ |
|
|
| C:\$GetCurrent\Logs\PartnerSetupCompleteResult.log.robinhood | 0.05 KB |
MD5:
7e68ecff3253a98ab341df455738bda2
SHA1: ff5672f431090c0feee36c021ada07849729d997 SHA256: 2d8d7ca867114372667882910ebec1412c728a4581afd9c57c868037428fe20a SSDeep: 3:4fXL1OMot9SA/CKW:SRO5+KW |
|
|
| C:\Robinhood\encfiles.txt | 0.17 KB |
MD5:
6c63e15aa5b931f371c1417b5942e3a3
SHA1: a64d2a5118a9c88948025c7314e6dadb533814a7 SHA256: efd18e2bda4e88a5aee8ea903e4b90aac47017f81f87f4f3041b1086befebc74 SSDeep: 3:o0wRtnXXAl6Vi9Aa6c+WVYTpZVftnXXAl6VTH/V6c+p36aILhftnXXAl6VQBLaAm:o0wRtn+HoTpb1n+vN2h1n+FBLanJAM |
|
|
| C:\$GetCurrent\SafeOS\GetCurrentRollback.ini.robinhood | 0.16 KB |
MD5:
5697485a31d930a7e7bbf62d924b5932
SHA1: f7d9fe2f733eaf1eb6336759f3acc43d93132837 SHA256: 305287f39fcaf76424dc2ce1cbefdd122d0b0bcff7009c5781f4672c9258fcc0 SSDeep: 3:+rQOORkpaBkhwSLnCmfoYRW+1k/Z3/RoNReMzXXVK7a9:MbscLCo0+wJ/eNEyXFK7e |
|
|
| C:\Robinhood\encfiles.txt | 0.26 KB |
MD5:
adde9c2d8e5b22cf7b8518d4572f4705
SHA1: ccc76fbdb5267dd40f7b1e053db9599b00380734 SHA256: c4682d4b1008f29c2c5195b5de1aa8d57fcb2d48d5532b74bed0b4ee3c281824 SSDeep: 6:o0wRtn+HoTpb1n+vN2h1n+FBLanJAf1n+Zba+VrA1k2la0k:o0wv+HoTp9+l23+jenJAJ+JVga0k |
|
|
| C:\588bce7c90097ed212\DisplayIcon.ico.robinhood | 86.47 KB |
MD5:
2ec92ef6193f23bcd4f0b2b741cd90df
SHA1: 269c434d2bee69d52026d3953e2a56ab93725cd3 SHA256: 8ebcae9b46f9c498f0c953866fdebefdc32f3d873a872e3d9e9836695ecc1048 SSDeep: 1536:0+f4v5f42rf3zWY/+tIuMxmE9NMqqgO4amA63D4qBNP8yNmpTsqoLNf:3QBf7rf3zWYGCuJyNIX63EqBB88L1 |
|
|
| C:\Robinhood\encfiles.txt | 0.29 KB |
MD5:
68b38ece111580f18a27f878ec4ac8b5
SHA1: 2b0a7f8290dfb9f55a5ec6a8937e750b373a6e7e SHA256: 77cb098358ec73e95d2b204508c198a0ab3ec5b8482ab78482cc521479e0207e SSDeep: 6:o0wRtn+HoTpb1n+vN2h1n+FBLanJAf1n+Zba+VrA1k2la0HbA1k2l7EsdvD:o0wv+HoTp9+l23+jenJAJ+JVga0HyYKL |
|
|
| C:\588bce7c90097ed212\header.bmp.robinhood | 3.55 KB |
MD5:
5ee3de94705b18f114c8365c2483da18
SHA1: b2ad92ccee07a05dd71788d13c7c4ebb25ce11d1 SHA256: 746a8c3de353c26ee6ea1d9e8afa3a1be92b6331d8ff81561b8987915d365546 SSDeep: 96:OZrFsL+VT5iFKTaXMwy0y/4z3THcAMCRp9cpYid:4FsqiwGXM2lrTHjMCSd |
|
|
| C:\Robinhood\encfiles.txt | 0.33 KB |
MD5:
afef27b827cb9af8abee5eddbbbfb292
SHA1: 6a438c3869d9930e5cc7097aa66ff018117c8c0f SHA256: 4adab7a9e282a4ae8a864afe1ff3333c40d7b4e07c28b00eb47a83b2b766f58f SSDeep: 6:o0wRtn+HoTpb1n+vN2h1n+FBLanJAf1n+Zba+VrA1k2la0HbA1k2l7Esdv0bA1ku:o0wv+HoTp9+l23+jenJAJ+JVga0HyYKr |
|
|
| C:\588bce7c90097ed212\ParameterInfo.xml.robinhood | 265.67 KB |
MD5:
ffba28dd17a5d87b7dbabf1e2d175b5a
SHA1: 3138325005a36330c49acc333edd99ebcbdff853 SHA256: e2a2f7ec7d14f213872c15a714c4bebe21b6a22135fd4180fa947b7a009cbe0c SSDeep: 6144:apBEHOuKkAYgQWLz9FsfJ4KFK/VOa3qXgKakaOjKi5ZOc:KBgJAZH9FCJ4GuOa3qXgKaPOjXOc |
|
|
| C:\Robinhood\encfiles.txt | 0.37 KB |
MD5:
2f282d78e6d2f446c5a6ea8de89c970b
SHA1: 2264363ac825e4b065ff7e9a31d9f6e05b1a3318 SHA256: 73c242a88da9018f117f6edbd4bfe357f107546d6d89581ec73fedadb970c803 SSDeep: 6:o0wRtn+HoTpb1n+vN2h1n+FBLanJAf1n+Zba+VrA1k2la0HbA1k2l7Esdv0bA1ko:o0wv+HoTp9+l23+jenJAJ+JVga0HyYKr |
|
|
| C:\588bce7c90097ed212\SetupUi.xsd.robinhood | 29.42 KB |
MD5:
359a392eeee2fad9e22211d3ba622d30
SHA1: a662132c7188e0bf29a8d7da271b22ef3f71206a SHA256: 718e6915922dcac60b67784677285fae2c2542d12d7d4ed98c982963bc4c0ec4 SSDeep: 768:mWxO016hDFfQkkG+Y8efsm316GowN3giEZR8GmSa5XneDrcn:mkn6hR9SeDAGowNwiEZR8bNX2C |
|
|
| C:\Robinhood\encfiles.txt | 0.40 KB |
MD5:
e654463b05c22167d0042145a439161d
SHA1: cd5a8c30af3ff641a5b67ffe465143367e487c15 SHA256: 3b236ca88c144719345b143bac2114a2f12d324e1edc1c2ed3068c920d2e4ca3 SSDeep: 12:o0wv+HoTp9+l23+jenJAJ+JVga0HyYKv0yQOpu1qB:oJTm2eeOw0ZKMvC |
|
|
| C:\588bce7c90097ed212\SplashScreen.bmp.robinhood | 40.12 KB |
MD5:
023a9e34d9df1f63ed78b9a622c5674f
SHA1: 08fd2f4db24c56915238c5c144d58a0a04f98df9 SHA256: eac050851a5251908b588bc2308a68b1e165fd491e4cc0439d2cc5955de886f2 SSDeep: 768:1yujaMYGYGZsaXT4C9GV6BsLAHbUvBN1xowdzQcjsUPbOG81KzX4:1yulYGTXTRM6nAp9hzQcjsw8EI |
|
|
| C:\Robinhood\encfiles.txt | 0.44 KB |
MD5:
137ce5dd229c564e9b3cea83e902f241
SHA1: 06de265788f87aac0c710d9a2906c1f261920dfe SHA256: 03ccbd87cf5baedd0842d2a266d6dad34357756223f7af4b24101063cbd76ae5 SSDeep: 12:o0wv+HoTp9+l23+jenJAJ+JVga0HyYKv0yQOpu1qQ2pdn:oJTm2eeOw0ZKMv4n |
|
|
| C:\588bce7c90097ed212\Strings.xml.robinhood | 13.77 KB |
MD5:
f8260c1a68782c29c9ae6a48fdbc73d2
SHA1: 36d1c9905b1703e4a96217b774d17b9b1437b7bc SHA256: 881ccb31452b44819121ae1e557ff65ff8de37deebd38f40854fb97cd5028247 SSDeep: 192:gTkflvVvwj1h8DMupZ2jphMYJMvBrwth4C9y27oO8XWgDo71utsyGfy6Uiw:gwhGiDppZmpJMvB8jsHDgbjyLX |
|
|
| C:\Robinhood\encfiles.txt | 0.48 KB |
MD5:
75cd16e9cd8b32ce4c052f3aa801fa07
SHA1: 056c447a5be4ad5e518d6bbdece66a39701d3a25 SHA256: 0762a2686d399e38a45aec4bb92cdbbe8b0641b178d0f288762a35c5ff7dfdc1 SSDeep: 12:o0wv+HoTp9+l23+jenJAJ+JVga0HyYKv0yQOpu1qQ2pdoOpHs:oJTm2eeOw0ZKMv4o9 |
|
|
| C:\588bce7c90097ed212\UiInfo.xml.robinhood | 38.00 KB |
MD5:
87a9ac5dfd6903b06ecf6a5f8b5c9c47
SHA1: cfd34ceaee8192c302d667a263aaf45f8427eca6 SHA256: e4b811d1e291b1952941b7c6541f4da19497f7cd93b7d3e4ea0b0a16492db9e5 SSDeep: 768:a1obMVAY/1KAvBk2ua9B78n5DFZOY9kaM8hSR08:aLVA2h9ua/7855ZOCk+cR08 |
|
|
| C:\Robinhood\encfiles.txt | 0.51 KB |
MD5:
f5274906062c72e6343d4a696e62fd57
SHA1: fb0fbb1aa5798a285b8a7faa2195e11b3eeda5e7 SHA256: be923314466397ab834587d62eb882951a18cf060afcdb35745690f2b28d535c SSDeep: 12:o0wv+HoTp9+l23+jenJAJ+JVga0HyYKv0yQOpu1qQ2pdoOpHHqK0y:oJTm2eeOw0ZKMv4o00y |
|
|
| C:\588bce7c90097ed212\watermark.bmp.robinhood | 101.64 KB |
MD5:
e48cec06e6580507acc368d548f4c59c
SHA1: 05364644099dc5b85088eb816314d5b7472ad3bd SHA256: 238e7ca78b08d5272106f892a3f97203f246c21b55074860bf62fee30cc75283 SSDeep: 3072:QN+pfVXMC9Yrvnz5RhUNV+V7yswUGtj6LrFu:ZfVXbYrLa+gsLHLJu |
|
|
| C:\Robinhood\encfiles.txt | 0.54 KB |
MD5:
d86bb0b3ad37da3e2025e79935f724c7
SHA1: d372fc6885ccb56035d69e9df424eaa569f9f6c7 SHA256: b16ffd98d01861eb9fd344d0531bdadb2abb892362db0c7037b14442e48455c6 SSDeep: 12:o0wv+HoTp9+l23+jenJAJ+JVga0HyYKv0yQOpu1qQ2pdoOpHHqK01qi:oJTm2eeOw0ZKMv4o00x |
|
|
| C:\588bce7c90097ed212\1025\eula.rtf.robinhood | 7.39 KB |
MD5:
99801f1e9421c10783c196bec5e12f28
SHA1: fc697e3ebd3016d176b73a861814c14c924963e7 SHA256: 2fe343f3f254326706bec48ffb3ca1dc40b307097d56abfdce7e166436b42bd2 SSDeep: 192:0w5fYGJIa4HUo4cx8RniY1mecjaFKX/aJXSJw0t/WwJ2AsQmfQG:H5fYsB4HUoFSiY1meXFu+qwo/l0Amfr |
|
|
| C:\Robinhood\encfiles.txt | 0.58 KB |
MD5:
d6228d20e8a4bae4ced729a9c328292e
SHA1: 21c09375edb92882865e3290d4c727440f3bd172 SHA256: 63b71142158cf4a0a8d6398022ee51d636547dd5ff5045d2ea16b1e3bfa733b6 SSDeep: 12:o0wv+HoTp9+l23+jenJAJ+JVga0HyYKv0yQOpu1qQ2pdoOpHHqK01qlOpps1t:oJTm2eeOw0ZKMv4o00aLT |
|
|
| C:\588bce7c90097ed212\1025\LocalizedData.xml.robinhood | 72.48 KB |
MD5:
843b009e5a9c9eaca7df22015464b246
SHA1: 56dc791e8353a140bfc497e5e590e47dfbc843c0 SHA256: 59d8ae489c1bb02a10ab82ad268e86f07df9821400275ac8778538423b7ff6b4 SSDeep: 1536:MuajrvmbMQvEdI/77h2v1/eWI3TmCcWS7o3mkX51I7KRKwthkW7ypgW8i:yCYQM6/o8dmCio3m0IuRKwthIpqi |
|
|
| C:\Robinhood\encfiles.txt | 0.63 KB |
MD5:
57090307935579a328f5cff00449c7bd
SHA1: ad12171963103a82e12a433bec6669c5de7a3221 SHA256: 80f1dcd6d55a83de1d4a1e79f0760e196deaca65b4bbdd5d615a2e862537f652 SSDeep: 12:o0wv+HoTp9+l23+jenJAJ+JVga0HyYKv0yQOpu1qQ2pdoOpHHqK01qlOpps1fppr:oJTm2eeOw0ZKMv4o00aLloK |
|
|
| C:\Robinhood\encfiles.txt | 0.66 KB |
MD5:
5de10ba440396fbce54142e7b42d8e62
SHA1: bbaf625e17d8a60934c45743e35e86ccf881fa12 SHA256: b315b2a0e834c1cf0710b7f22e47b5df2007c202f8483fdab5003539b64ca695 SSDeep: 12:o0wv+HoTp9+l23+jenJAJ+JVga0HyYKv0yQOpu1qQ2pdoOpHHqK01qlOpps1fppN:oJTm2eeOw0ZKMv4o00aLlou |
|
|
| C:\Robinhood\encfiles.txt | 0.71 KB |
MD5:
7afd6e8b21e9e62746b0d4c4df3f2944
SHA1: 6e0c8bcfdbf8b9bf489858ebc894b922449bc9a9 SHA256: 96821516d14f843b01f5769d3c0f09e919c0d1a2294dc175f6f6cfdbc4ec9372 SSDeep: 12:o0wv+HoTp9+l23+jenJAJ+JVga0HyYKv0yQOpu1qQ2pdoOpHHqK01qlOpps1fpp6:oJTm2eeOw0ZKMv4o00aLloYi |
|
|
| C:\588bce7c90097ed212\1029\eula.rtf.robinhood | 3.64 KB |
MD5:
9c29402607f9ccf1dd9709ac561be52c
SHA1: c81fa01603897af407d3686a085aa8ab5dbae562 SHA256: 575507648f40b274941c5986de651314d9e301ba340ce3332c60f7eb62594183 SSDeep: 96:0+moX1mSFysHGIJb0RTQ4ghFGEimN+RFEUh2G:0FoXXFrfJ31N1sD |
|
|
| C:\Robinhood\encfiles.txt | 0.74 KB |
MD5:
74228056e67b3bd2cf2c2055adfe44fb
SHA1: b92da3ac5045cd53472e07ba3c97a8f48959aa6c SHA256: 77a54c2d73c62224d17e06f6a263013f9b35df371dabcb6832dcf591b9922c9a SSDeep: 12:o0wv+HoTp9+l23+jenJAJ+JVga0HyYKv0yQOpu1qQ2pdoOpHHqK01qlOpps1fppF:oJTm2eeOw0ZKMv4o00aLloYN |
|
|
| C:\Robinhood\encfiles.txt | 0.79 KB |
MD5:
ba864ef22345209c9a25f99652ce47c0
SHA1: 63cb0885903379df5035b91a6915eb89716c63c6 SHA256: 42a6f7b2f3c843a30e04154aba55b6401a370e1949a6a4c9f1f11a2bb948a3df SSDeep: 12:o0wv+HoTp9+l23+jenJAJ+JVga0HyYKv0yQOpu1qQ2pdoOpHHqK01qlOpps1fppb:oJTm2eeOw0ZKMv4o00aLloY/L |
|
|
| C:\588bce7c90097ed212\1030\eula.rtf.robinhood | 3.25 KB |
MD5:
4e8ebabad9f25f15eaa2a3d2e5dc670b
SHA1: 8983fb1937430a72c5869a90af373a6ed03e9d30 SHA256: 5685d2e295e73108fc90d8f5265453de1a0fb3ff41f3c510aa5f83d3e0e4f2f8 SSDeep: 96:h7ikG5oDKqPPP+/151xQCXjk2+u0IbYv50VK7z3Y5QbgKj:Qk6V6P2nTzj/ZVUP+QbDj |
|
|
| C:\Robinhood\encfiles.txt | 0.82 KB |
MD5:
380ebffd7cfec2303b7c1fc8a2075ce5
SHA1: 448e92de50971885f54b8417ee3063218a2a7854 SHA256: 129693318060ec7ea38bf3d45af461bea44e89274f9f9f9d74f7272f67517a80 SSDeep: 12:o0wv+HoTp9+l23+jenJAJ+JVga0HyYKv0yQOpu1qQ2pdoOpHHqK01qlOpps1fppQ:oJTm2eeOw0ZKMv4o00aLloY/A |
|
|
| C:\588bce7c90097ed212\1030\LocalizedData.xml.robinhood | 75.94 KB |
MD5:
64eadab616683af6833ca95f5f47c122
SHA1: 815c0a0e3eb96fbdb4a171935270f6d1927d17f2 SHA256: 39a4fe2a1d3ce8ea13e6d85947acfb704e7c6577dac857788926276c0fe02802 SSDeep: 1536:MGSgS2hrcD/sKjRTw0vWUMMLhQpGhlBedqLYI89Yh+xDgf5W8h:WiZI/sKjWTI+ohlBefzYh+xgfL |
|
|
| C:\Robinhood\encfiles.txt | 0.87 KB |
MD5:
781580aeb720f8039fd512b9f181f4a4
SHA1: 79a3672ffe4254ad9849836391a26162fe894d12 SHA256: 020569bb4bb96cb5ea9295bc7915a20ab19b7550ab6fea983ddd2880b19ae14a SSDeep: 12:o0wv+HoTp9+l23+jenJAJ+JVga0HyYKv0yQOpu1qQ2pdoOpHHqK01qlOpps1fpp8:oJTm2eeOw0ZKMv4o00aLloY/K1 |
|
|
| C:\588bce7c90097ed212\1031\eula.rtf.robinhood | 3.34 KB |
MD5:
79c13bd4d95829bd3adf662e53a95fac
SHA1: 8634fdd2e8eba02256573b092212f50127c70d6b SHA256: c62174d3ee3ec22a418bee5bd65469764308d15270c585c1cb4eaea5976afd18 SSDeep: 96:fftFTSXDC9+/ixGsfSrb5BnNBuTOF8nP27v+ak+Z42:fVJ2mfGsKH5LBiCSu31R |
|
|
| C:\Robinhood\encfiles.txt | 0.91 KB |
MD5:
79c7b2ff148c8d25aea3c58647bcc5b2
SHA1: 1a0cd7cc6ed41303dbeddec26ad3ae1090126ebf SHA256: ca5151b24e288a2ecd038a275626768d83ddf82c1cc96d97d1996c5bf7f6ef3d SSDeep: 12:o0wv+HoTp9+l23+jenJAJ+JVga0HyYKv0yQOpu1qQ2pdoOpHHqK01qlOpps1fppS:oJTm2eeOw0ZKMv4o00aLloY/K1 |
|
|
| C:\588bce7c90097ed212\1031\LocalizedData.xml.robinhood | 80.42 KB |
MD5:
398f580061f56899cd34fd1d2510db00
SHA1: 447d65a8ec4d87cb527d6b55665ee9c9937ac724 SHA256: 5f56846da8f407c2106c92e891b2f8d6eb3fec03637920266d9d30d0a8853e15 SSDeep: 1536:Mif2Pk22sXKrfxmUqsNVWw/r0UNlHdse49t61BR08tApqWQ0K8BX2EFqJLnPe:4PCs6NvNM1UqeQOBXtAkWBBX2EFkLnm |
|
|
| C:\Robinhood\encfiles.txt | 0.95 KB |
MD5:
aa2e6b555aab856ab428f1da487c4f0a
SHA1: f52e6271b087b6d5a73dc3f07eaa02c5f339362d SHA256: d65c8b04a82e307c825ad249c73862135cc7e62b43fcbcfa992b66af5865580b SSDeep: 12:o0wv+HoTp9+l23+jenJAJ+JVga0HyYKv0yQOpu1qQ2pdoOpHHqK01qlOpps1fppz:oJTm2eeOw0ZKMv4o00aLloY/KHs |
|
|
| C:\588bce7c90097ed212\1032\eula.rtf.robinhood | 8.67 KB |
MD5:
0ce4f122669091351d5617e73e468525
SHA1: 73439bad72dd3616289bcecaaa5258116f3eed69 SHA256: 2033dfa271b20baf10eb61b6d3cebb6aa11b27eb7eddfc53f5b3ec4e2bd6768b SSDeep: 192:qc79nnNIGoB3uKNIOJtMn9bI5dvTY9OrqaJlEyNskdMF:qcQ3pNIStM9ydUOrqacyNzMF |
|
|
| C:\Robinhood\encfiles.txt | 0.99 KB |
MD5:
7910dbf5232d47dbdb8f9f85a64b7207
SHA1: e142af4fdf555009b3bc7b31b5a4bff0f5d158bc SHA256: 89258fec3fdfcc09f908097801260e8d52817e20866ce8376c87a3d9896aaabd SSDeep: 12:o0wv+HoTp9+l23+jenJAJ+JVga0HyYKv0yQOpu1qQ2pdoOpHHqK01qlOpps1fppG:oJTm2eeOw0ZKMv4o00aLloY/KHI2 |
|
|
| C:\588bce7c90097ed212\1032\LocalizedData.xml.robinhood | 84.27 KB |
MD5:
fb86823445742a5395b5e4678f4ee856
SHA1: 235799a061b6948cab185389ee61dfd610216238 SHA256: f5e6209c0f4aee2200aa5c90c0818c8a51abdc831f5f6051501b852391a5bf01 SSDeep: 1536:MueDFlE2n/F2TiwZ0uWy+t0Qk/Gtyic6gQy4LP1dux04nnO6I9pxum8YPGE6JGg:4M2n/FAvWy+ZyGtymyEPvuiGOdnnGE6/ |
|
|
| C:\Robinhood\encfiles.txt | 1.03 KB |
MD5:
31c1487aad62a06193989be12a36e174
SHA1: 7c62d299d458fc5565e0f16937f7e0620f15ef55 SHA256: ddbf1f0057d95c5b40fb59470bcb1abfc1f2a3f4333e9bd56118099245b8f319 SSDeep: 12:o0wv+HoTp9+l23+jenJAJ+JVga0HyYKv0yQOpu1qQ2pdoOpHHqK01qlOpps1fpp0:oJTm2eeOw0ZKMv4o00aLloY/KHIAf |
|
|
| C:\588bce7c90097ed212\1033\eula.rtf.robinhood | 3.12 KB |
MD5:
6b44b5c842b087199d0a8bb4608b56fd
SHA1: b4bcac8bed359f5b18aed845ff35764aadbc602a SHA256: 10a977e4b04cc164e88e933e57950cb646b2b2d85389373521623a56237ad676 SSDeep: 96:rLMeM+tXeRnp9jr5dGB2xewTDXI+j0VnlTPnS:r4MXwp9f5d2WdDdovTPnS |
|
|
| C:\Robinhood\encfiles.txt | 1.07 KB |
MD5:
51edaef2b2140cdcec58f94695123db9
SHA1: f3b5d59cc51def77ce73955579f556c6aea0adcc SHA256: 051b94e039d2f0a51a1390e69e9a17a5895707fd175fc643373724f381aa3b91 SSDeep: 12:o0wv+HoTp9+l23+jenJAJ+JVga0HyYKv0yQOpu1qQ2pdoOpHHqK01qlOpps1fppc:oJTm2eeOw0ZKMv4o00aLloY/KHIAtT |
|
|
| C:\588bce7c90097ed212\1033\LocalizedData.xml.robinhood | 75.44 KB |
MD5:
6715b220f784045f8913fed294b287a8
SHA1: cd4aa4a0ae3d17b866791d842750bbcdf95ee6ac SHA256: 852b2a7c8f2c30d93aaa91db285ca0f2f78808c0fe3cfe3c7ab5b6a0077b68f1 SSDeep: 1536:MvnhezT4tjfK69A1VayBxbRs/pl1vaTcYurquHepgXwnqUDcGMjR/M6fdvVeEsr8:Mh0T4lfp9oVawFs/pfvaTnurV+pgFUAJ |
|
|
| C:\Robinhood\encfiles.txt | 1.11 KB |
MD5:
01ef80f811ea9cfc377f8068de37f7bb
SHA1: 7d1a7acbe190d11f89c6551a9ca1c7d7763f0298 SHA256: 2b4fd628c507667ed7373e134db594ccd0b48356d7b4aee89ecb25573932906d SSDeep: 12:o0wv+HoTp9+l23+jenJAJ+JVga0HyYKv0yQOpu1qQ2pdoOpHHqK01qlOpps1fppb:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDK |
|
|
| C:\588bce7c90097ed212\1035\eula.rtf.robinhood | 3.62 KB |
MD5:
7ee13ea3b725010316b41a632febd2ce
SHA1: 28f893f6177863b4c4ba57473f31558dd2ee565c SHA256: 65d8d02a21e861a875e4c451222badfb989d8b017c10ba274547fba55c12504e SSDeep: 96:ffchf3bFrfkhQjFvLhbitGuF0mS/dFJeSPP2KzdqqVoEQlf:fgjFrfkhOjBuF0mSFjZHdzdqqVoEGf |
|
|
| C:\Robinhood\encfiles.txt | 1.15 KB |
MD5:
b5aaf389d9c82c87a26243913fecb80c
SHA1: 087907717298cb578df04a38eb6f9909371ff7fa SHA256: 6e361a97fb11ac28d7e259a2f346fcd84456b1a2b125929127e191b07caa3d80 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDat:oJTm2eeb0Z1xat |
|
|
| C:\588bce7c90097ed212\1035\LocalizedData.xml.robinhood | 75.22 KB |
MD5:
b006fd3086703b3debe97da3c8528527
SHA1: 5d7a88c6f78edbeb9e2a5e73b68d2b1f0dd5e220 SHA256: 693283e177dd3d476fc50c8c34fba01697b253e5f80cab954d4f1291df173131 SSDeep: 1536:M11a/f2Wa0hp4CP0y1rljhgAOfJbLFLbkJamIGCTWEQZlPQQuZTfLB:yYTp4C71DgrbLdkJaBt1khgTF |
|
|
| C:\Robinhood\encfiles.txt | 1.19 KB |
MD5:
2b8a02a425956c3f0c3676a662c595c1
SHA1: d0a0ae09b8ce4ccf70b80a1d5099efc3f028ef92 SHA256: 4fd71e7098bd3bb250b029810a05f38cf40c28fea9e0723510b00c8094ab53bd SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDafI:oJTm2eeb0Z1xaw |
|
|
| C:\588bce7c90097ed212\1036\eula.rtf.robinhood | 3.45 KB |
MD5:
6f3d7fd0214a079ac83ef944190fbcfd
SHA1: 0665f107462d61d4dab5f473e3715f9b2c45f443 SHA256: a540712965193aad5360d1cc68d57765047877fa9c8da7aaf137fc53467e40a1 SSDeep: 96:haNvXNEqjsPrtplaCvdhU1U72lnHCAPM81c8xIr9yl:UNvd7sPZhQG2zPMl8xIrg |
|
|
| C:\Robinhood\encfiles.txt | 1.23 KB |
MD5:
73c78a0bd63f32c36d33901206ee6172
SHA1: 505b73db4b7237206caf47ede5cba4c3b22fa115 SHA256: 35a74e12fa38aa6775a0046bfd8757871ba5ba3541858d092c325a0dc837a758 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDafT:oJTm2eeb0Z1xaL |
|
|
| C:\588bce7c90097ed212\1036\LocalizedData.xml.robinhood | 81.03 KB |
MD5:
0910072dac22c5d8f973d8617150a4cd
SHA1: c33cf7528d61477bce96f210141c355b6330c0fd SHA256: 019f43b2ae126baf478b82cbe875994deaffa1b92328ccd16ef3585d780fda59 SSDeep: 1536:M1aaYkX6Ce43M4TOu05F7pJV5t7vcIG/dDs0gnjYPoi2S8eplH3yKdZMf:UaaVX3CWE7DbtjKlDsNSoi2S8eSKdI |
|
|
| C:\Robinhood\encfiles.txt | 1.27 KB |
MD5:
59d510ec03a46e8fa3b2d24f92acc5db
SHA1: 32b3e2a8fd536b54efe9aa27e6b7d89b14d11ebd SHA256: 2e678385338308dc8e7d7ebe286a55aea30ed4b489d27508f4441396e9080399 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnb:oJTm2eeb0Z1xapb |
|
|
| C:\588bce7c90097ed212\1037\eula.rtf.robinhood | 6.70 KB |
MD5:
58315e5ce4d7981e2a828c5274b5bde3
SHA1: 403d77936e1183ee75c181d6e3954b426c742c05 SHA256: 34c9b85a949347c658d86bce2f12aaac0ff4f69e7ca8652fd423f9d4a4ac1d8e SSDeep: 192:6YyNIXT/c2tMojIN6bCnAeIgebsV2dKNw:1yK/c1osRAqEsVg |
|
|
| C:\Robinhood\encfiles.txt | 1.31 KB |
MD5:
1078355be91f85dddda8670873b0f7bc
SHA1: 1b3c71601f8634c40d4cf60fd630483ee186cb31 SHA256: b0c7c9bbdfe7ac8ef82fb98bfcd0a922d53290a084b8ed97507f9a3233f47ed2 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnp:oJTm2eeb0Z1xapp |
|
|
| C:\588bce7c90097ed212\1037\LocalizedData.xml.robinhood | 70.39 KB |
MD5:
6ab76de54fc38b39e03fe43a86bcd300
SHA1: a06d5f095e87995daca06f0a341f7f10e257a070 SHA256: 07049424451b00b7c5946aa82833b4ade7fbe1aa9f61acfc4edfd79bf21e184f SSDeep: 1536:MkfXzZrsFrmDz9O+9K/4ZxF/o3p8T+TD24dLqASAopsLJZeqgK6mfmKBtM399Dkj:rfUrmnn44Zg324AASFSZl8muK4396j |
|
|
| C:\588bce7c90097ed212\1038\eula.rtf.robinhood | 4.16 KB |
MD5:
720945e6b6ad80ed0f180dbbc580e50b
SHA1: 2971e474a701c2ef67593d5b3ed646ced30dbd8c SHA256: a3ea9c33921a1a03d3c74df57f09d1679985630360f37927e8fdf5e150c27112 SSDeep: 96:OiISyUjUMOWd6jFW44Ck25ZOncv5qf0WDqPZuuy3hmV7:czUoDE6Av2e1t2P0uwG |
|
|
| C:\Robinhood\encfiles.txt | 1.39 KB |
MD5:
32a26937d3e4cbc31390284b43ec4c01
SHA1: 5ca4babe9eb663e9b4e913d888124c097fb7f85e SHA256: 4cd4574ad01aa63bf8a7155afc4864624367626489d26ef22ee8f9a5cd675e7b SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbr:oJTm2eeb0Z1xapP |
|
|
| C:\588bce7c90097ed212\1038\LocalizedData.xml.robinhood | 84.42 KB |
MD5:
c30010446e613fd7a6c2fe6ab6464277
SHA1: f97689631df08cd190c5b21efe2bd1cef6a406fe SHA256: 3ae79fc2ecd9921c6c3a2eb13b2246e91c909d52ad9e1c23d1e94de8c916e6cd SSDeep: 1536:MbcGU85JAyFOPFS6WSfnAOkk6w6ODGF094SQGG8jJ0BnCE3/R:acpE+X4ynnLd6d57GhGZ93/R |
|
|
| C:\Robinhood\encfiles.txt | 1.44 KB |
MD5:
7000e7b3bda8c490c7bcc89c96c3cb73
SHA1: 60bf5ec39fdb03fab4bac0b49322bc0332f67b6e SHA256: 6714dc643d346854a35a3dae8f7794e00d40349a07be12f8c1d5f421250289c9 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdd:oJTm2eeb0Z1xapL |
|
|
| C:\588bce7c90097ed212\1040\eula.rtf.robinhood | 3.56 KB |
MD5:
96a8b3b33e22bab9a1ca49589677b3dc
SHA1: abdb5b0848420d0bd2518b15d469792951c5de65 SHA256: 63cfd988b73982f37945589f6fe2a0f54c3353942c395e471049b7a55095198a SSDeep: 96:18DKue9fEFKv85TPM5yWUvRJ5BVr4e/t/:1PfEFKv85wGvRBX/l |
|
|
| C:\Robinhood\encfiles.txt | 1.47 KB |
MD5:
8017d076c3bf012468cfd7cbcf99b6c2
SHA1: d2dcd24dce205908928795cf6c004be5e3be927b SHA256: 579ebc8adb01638ccb5c968c61568bef8bb8edb5b1b2a726cdbc61b5a19744e1 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdl:oJTm2eeb0Z1xapL |
|
|
| C:\588bce7c90097ed212\1040\LocalizedData.xml.robinhood | 78.19 KB |
MD5:
a23fd80c4f4498d58ea9f7a130bf5fa9
SHA1: 061f1efd5a63775288b1df92811c1d1d604f8342 SHA256: 294565d133005cfc7c7315bf21f6e5d754f47899a64dc0fc11de6d0e63843751 SSDeep: 1536:MaC3/tajdCAULYF6nLZBKvp4BRJ9bBOGAyGJPK812XsduPOlT3uCGmNQ6NbSS:OPtahCAUMF6FBOp8ars6eQFFJGn6NbSS |
|
|
| C:\Robinhood\encfiles.txt | 1.52 KB |
MD5:
7218170b8a51d145fbc9aaff697a615b
SHA1: 78c8bc4f9d1adc318b25e7283d45c8978e269f2a SHA256: 8395128d14b8d5519f654b89c48991bab2879c7c6fb3e3f2dbd5a21682732ba1 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXE:oJTm2eeb0Z1xapi |
|
|
| C:\588bce7c90097ed212\1041\eula.rtf.robinhood | 9.89 KB |
MD5:
99a8721e30794e643a985c2cb86a4176
SHA1: 431645dff44667403c86a00862fe517447341f9f SHA256: 37d9ea4cdb539d84cda347868575d510b0598dc69e34ec9eab85ff887f4e26fa SSDeep: 192:4JgOJjccj21KNGyL4kX5l4wC/OpsObeipuwquEcGP2fkU91AuPD:4JJJjcKpX5l4eSfiJJaus6AS |
|
|
| C:\Robinhood\encfiles.txt | 1.55 KB |
MD5:
57d2362cafb4db01db96fe39777d8e94
SHA1: 5299c4c5aa577ef1e6d0359963f89fa2f90cf4e0 SHA256: 87b3a7e89cf84f7c0fa8d0afd5f433a3615db5b0f682a19a063fb161eac25dc2 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzt:oJTm2eeb0Z1xap5t |
|
|
| C:\588bce7c90097ed212\1041\LocalizedData.xml.robinhood | 66.64 KB |
MD5:
64f410de80da5bb93f5c0a4f0a1e7835
SHA1: 85ae5a945137a6c83b1fc0cd1e4d8d90f4cac4f1 SHA256: 9e764a41da4b782f0a1020d73b149d029b0e69ac303486fbcee6952707cd3bfe SSDeep: 1536:MT07Lq4jdTR0gI2ABbYQUgigAAcm34v4PMdAkxp1YSjYb0Pc:G07rjdTPAm9xrAcmovNjc6Ybn |
|
|
| C:\Robinhood\encfiles.txt | 1.60 KB |
MD5:
8a0428e54703ad3ce78f7acefcf9f3ec
SHA1: f0b1830d103da5cfe594d9e3a45c933b5a859b84 SHA256: 36107cc57b848629adcb8d2353c4f3f8d34bfe84686962777bb2fd09e74b2c86 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzft:oJTm2eeb0Z1xap5V |
|
|
| C:\588bce7c90097ed212\1042\eula.rtf.robinhood | 12.39 KB |
MD5:
079e4f1f281d7d9ec557ecb11ba248f2
SHA1: 024ef762cbb4b8246f85c8d22e58368bfaacd6e4 SHA256: 23ff5d3d39911dbeadb207a5904bc972589dc3fd7052851225e7de655bc73ff2 SSDeep: 384:hnLqFJzT0GKC5kIB0E+LPoALcGhCoKerf:hnuFJzbKlVE+EUFhCoK0 |
|
|
| C:\Robinhood\encfiles.txt | 1.63 KB |
MD5:
2291b53fb7473367e4c57905ee844ba0
SHA1: 5be7cb356e89b1bfff93b59643a1ee6e7e79b407 SHA256: 2771e19693654e4122dd7d1a56633f3726f22ffd1e6301f1f1b655a8e26ff77a SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzf3:oJTm2eeb0Z1xap5v |
|
|
| C:\588bce7c90097ed212\1042\LocalizedData.xml.robinhood | 63.72 KB |
MD5:
d90629f0d232e21d43771b67da680d58
SHA1: c335a5ae480966079c7e159b1d3354a967bfdfe4 SHA256: b68d7319daff26a472db3f8f2e78882ec74608d3c7a56bac3fb3c550163361aa SSDeep: 1536:MLcUnrrRvHdGDdN0EmIzPHw6CDHDPhomoJbSXgeD3m3ztlU8U:WcyDGDbzPHwX6FSQeLm3zty5 |
|
|
| C:\Robinhood\encfiles.txt | 1.68 KB |
MD5:
be08e99298d50994e96aa27a93972397
SHA1: 6ca073b1ff8623eff578f3308d8e0aa14f783c26 SHA256: 98d5eaa72b30843827906cf07370f728479e44412b81df93d822e2a290d60df7 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ4b:oJTm2eeb0Z1xap5yb |
|
|
| C:\588bce7c90097ed212\1043\eula.rtf.robinhood | 3.47 KB |
MD5:
3b83aa5f8fe8695c0f021ae95017a38d
SHA1: 6ac3aeba13f22021574181addfe60dc8bfeeb215 SHA256: 655b3b6b9f3c4ac8b56751750e6c1178fb7b23f7d3ea3b9fa6cc0054db42b9d8 SSDeep: 96:2DDxUTMWU02dEpPOsypvlHca4i0qpYbyUBa:2DuMWZ26P5ypN8G0qpYbE |
|
|
| C:\Robinhood\encfiles.txt | 1.72 KB |
MD5:
5e26fd9e114f192bffdcf40af9a7136b
SHA1: 9fde156bef275d7991b73eef8d3fabb326060f92 SHA256: dffba480deb1d0d12f37cb59b3665bd46a836d72084eefd6cb27b5e5af44c261 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ4S:oJTm2eeb0Z1xap5yS |
|
|
| C:\588bce7c90097ed212\1043\LocalizedData.xml.robinhood | 77.78 KB |
MD5:
83d93419907f1cf4339f5358519bb6f4
SHA1: c57a39a76a6a120e0df5bbf144082f9c494906b2 SHA256: 20d2429a89e124e1df5cfbb8da07cbaba07d19d264c3fff5961eb044063f3e2b SSDeep: 1536:MK+FXRb+74s2TkU4mqQaaTtvhxUTIKg2ciRkByIR9GOyOTWadTOvYk5vztWQ5YVw:M99sukU4RhaTTxUMKg2HkByoOOaYOvCi |
|
|
| C:\Robinhood\encfiles.txt | 1.76 KB |
MD5:
58f99c6022e8145db98f86c8a7b277b6
SHA1: 46dd8817fb0d54a9650fb4dbbdb732652b6705b2 SHA256: 65bfac00b9583fc397d0ff0bc672574294375967849f33482e138fb2fcb8162e SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ48X:oJTm2eeb0Z1xap5yU |
|
|
| C:\588bce7c90097ed212\1044\eula.rtf.robinhood | 2.98 KB |
MD5:
2ec37e43c105adb5de6b9315541be367
SHA1: 85d1cc8a3abdb20ecf90894314d1327211a4f259 SHA256: b43d92795fc5c2ab7030250224d1a8dc2249c84d6e893ccff82795a436b3480c SSDeep: 48:M1DjnJ8Do6YinQWsgmGOHJ56if+uCYhzIpmfwrlwG32c85tgFL4M+gMiVhh7DVSu:M1D9y9IGuJLf+uCYhPoxwGrFL4Z/m3VZ |
|
|
| C:\Robinhood\encfiles.txt | 1.80 KB |
MD5:
cb4fad79c96ad001b97c24f49970533b
SHA1: 7a56476b44e87d4a7048a4fdaf888b7594c838d6 SHA256: eee8a8c574394da320df07665d498fa4edc1d699efbd88134c4849c39766ca79 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ48L:oJTm2eeb0Z1xap5y2 |
|
|
| C:\588bce7c90097ed212\1044\LocalizedData.xml.robinhood | 77.45 KB |
MD5:
4c52d230f87e6c19a1de8a7964ca48f1
SHA1: e89079e77ce0de8016fd410fa5c02cae2b7b95c8 SHA256: 46773e63402c1a46620de4b6f8bbb99747f7b4753b9455a28c8a57cf9208d2a5 SSDeep: 1536:MTbHsO7H4lrb128ROAC01MS93yZzdhOlMwUXlqEbZT6z/xRjS3pIbNXD1NRm4J7S:ys8w5DOAai3yVsMhcEV6zpR0pmNBNR90 |
|
|
| C:\Robinhood\encfiles.txt | 1.84 KB |
MD5:
6472f038640f2622c712f3770cf2d299
SHA1: 080694659b72734bfc543873bad6e0c75b7e8e02 SHA256: a597bee07359a557c6b16c56c35906864cf8e7901e785085acbe5d4422a0c783 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489g:oJTm2eeb0Z1xap5yX |
|
|
| C:\588bce7c90097ed212\1045\eula.rtf.robinhood | 3.95 KB |
MD5:
603aa0f07b02af9c704cfa11ec21bbd5
SHA1: dc986e0448d3dc0776e42385d140c8e848b29aab SHA256: 2923787d44d166a92c865b8e2961f197b7676330fb9c711bd3f5dd91e0dc0468 SSDeep: 96:2DV/yG/Fn14NPI1+tqsGLUuK47NL+22U4sjTV9jrBjhNsQiXL1i80:2Db/Fnuw1+tqzbf7HAyDjrBjHaL1i80 |
|
|
| C:\Robinhood\encfiles.txt | 1.88 KB |
MD5:
648b9059a1a80b6ce3f17c20fb7806bf
SHA1: 2f40a1658cd21de27d27faebdc578c43ea35b6a2 SHA256: 6580bf4823fb08dde0c63e56b9ee0b62841aab823ac0ab8b29f1082db80dcd8c SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489h:oJTm2eeb0Z1xap5yE |
|
|
| C:\588bce7c90097ed212\1045\LocalizedData.xml.robinhood | 80.45 KB |
MD5:
0801effb9c615780c0af4da987ede245
SHA1: 3c5dc246c5f8fb42247a86db9ff15e66772dcc79 SHA256: dbe77340398fca4f58961b4d6ea6d8f06db477ba6c2bb8cc3bc0163af70175ae SSDeep: 1536:M4RRvJQl+X2WmPGvtfb7wepxJOt00ehQ8wzUvh1voyORNvbEU2K+s0:1RRvW4XVC4tjUeA4Q9zC1FsEh7 |
|
|
| C:\Robinhood\encfiles.txt | 1.92 KB |
MD5:
b16679e15ee5003b8927982c1fd6606f
SHA1: a38e495ba537fe9a53839c260a55e5a51c54402d SHA256: 3cbf894033d7ec03e1d59f841144b3ca6c80f2479274e14cf1aaa1f139706303 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tp:oJTm2eeb0Z1xap5yk |
|
|
| C:\588bce7c90097ed212\1046\eula.rtf.robinhood | 3.61 KB |
MD5:
d000f895886d0c8dc9e714a4dc698f84
SHA1: 6cd6c45bcec9a08b5ae9690d1e6601f305eb33e8 SHA256: 9eb9c1df63bec4d920ffdad955e6952036947695ca2fa816c02a2ca7f3a8fd19 SSDeep: 96:2DDxUNyv7jV671QqUEF2ybed67XoEPoh3QLZ:2DOyEeEzedoXoEPoh3U |
|
|
| C:\Robinhood\encfiles.txt | 1.96 KB |
MD5:
8c294a072ba136e17819b89a08bb783a
SHA1: 8dfc5944b4d343ec1e88cecf44b6496445c33b11 SHA256: fcaa398387072532ccfca65610b8698272deba1eb6e1cdaa227e4f651f4c6cb5 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489T/:oJTm2eeb0Z1xap5y4 |
|
|
| C:\588bce7c90097ed212\1046\LocalizedData.xml.robinhood | 78.86 KB |
MD5:
2cfab0d298d0221b11e184da44f056ee
SHA1: 6e1199653598a266d8720840cdd0b7d50a4d53ab SHA256: 94e4d59bbefd83d117c2d4952a71a76d563d07ed41344ca5667e6bb2a967f5bd SSDeep: 1536:M17DmvHKiwNoL4xLE0G6P+l/A7sRSRfaJ1vlyhgncYa+cyGH8MTu7VD7cg69:/vTwNoLME0G62K7r5stymncYa+cyST8y |
|
|
| C:\Robinhood\encfiles.txt | 2.00 KB |
MD5:
abe2076fe0d81352a6eef979135ba727
SHA1: 180b2962a55dd6912601c866965a7bf64111003e SHA256: 721a06d2e5836e1c658c50b9094840450ca402ac4e5347f8607fa56510f96475 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Txq:oJTm2eeb0Z1xap5yL |
|
|
| C:\588bce7c90097ed212\1049\eula.rtf.robinhood | 53.19 KB |
MD5:
f36988feb669f2fc4ee5dec66367f54e
SHA1: b49a5031314059146563d6496089ce27aa5769d4 SHA256: 491b009b38252ba542ba7b83588f5d650cb0cc33053b8037309c7cc7d6b9fb49 SSDeep: 1536:NeUHBK0RfNK2y8flguiD8XuGF91+TQe8xei:N1dtNtPlgJD+5DE8eE |
|
|
| C:\Robinhood\encfiles.txt | 2.04 KB |
MD5:
2efd9aba7d40752bed38b5f1eda49628
SHA1: 513214e43395cc462bbab3446536389a46a9852a SHA256: 7e20de076361082a4c00a96b2daf8ad2ec73021588345f35b4aaf48dbfa68e03 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0g:oJTm2eeb0Z1xap5yM |
|
|
| C:\588bce7c90097ed212\1049\LocalizedData.xml.robinhood | 79.58 KB |
MD5:
a6e3b72f9c8ee9096418643c2b1bf807
SHA1: 470b3b044462e0172edc37672bdc28ffa12c5b1c SHA256: 851dd0254af1e20ec05658930fb00723066cfd91d011a1ad1ccef12a3455a4a7 SSDeep: 1536:Ma00YNcwBAdyA4An16aN/PU+Kt9Rj7N67v6AvkrSwEd:I01uA5vn16aNXO9d7ICBZEd |
|
|
| C:\Robinhood\encfiles.txt | 2.08 KB |
MD5:
022ef77c3703b409b89397c3012d97db
SHA1: 4536dc320e93d72a7246e42b234e0caca2004198 SHA256: 684183983ea924f87209bf924b85bbb49c5f862e4376ce99c0a6f7cb6d27e435 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qF:oJTm2eeb0Z1xap5yA |
|
|
| C:\588bce7c90097ed212\1053\eula.rtf.robinhood | 3.78 KB |
MD5:
bfb69702704bb0f71525d2e743bf7df7
SHA1: 0452f2d81598b0628a832ac4f5da8a7f82850cb7 SHA256: c487afbeb9f36e0b9b499562269d04cd914459cefb4468c6c7d1fb969054668b SSDeep: 96:F1Kpd7XxOvlojCfwXPr49wCnQym6eTF/Uv++vmIIEYZj:F27X4vlf9q6eav++vmIIEYp |
|
|
| C:\Robinhood\encfiles.txt | 2.12 KB |
MD5:
2cbb9d38ed4b6ec8d4622683e82ad00e
SHA1: 15e072288662fd3156baed0b3cb264628e16bc27 SHA256: 2b0fe1a064c92d08fbc8161948e59170a83cd0cf9825c2a9ebcfcb0b37de5478 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qG2:oJTm2eeb0Z1xap5yy |
|
|
| C:\588bce7c90097ed212\1053\LocalizedData.xml.robinhood | 75.88 KB |
MD5:
d04a85e94c0fe775af01fb0316017d76
SHA1: 42899d8bf560f07e15300dcd05012cb5d98c828f SHA256: 300a771edc98d0e7f98af559ba97c95c8da5ae964cc9652bbd3b51faa6a09fb0 SSDeep: 1536:MRruwqbkVw2i/69FReRPIot17k71U/T1E5KNfu/EI306XwoOgn:qruQw2K6JyRttk1aNfusIk6go9n |
|
|
| C:\Robinhood\encfiles.txt | 2.17 KB |
MD5:
b9cb713ab124652168e71b32b7c8c4d5
SHA1: 6418aeb11ca663f1d522014aeaf1aee59a0b78df SHA256: 37a322f5cc7eaeedd4144f41e2b2a2330b75a12bfce317d849cadac16be977ed SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAU:oJTm2eeb0Z1xap5y3 |
|
|
| C:\588bce7c90097ed212\1055\eula.rtf.robinhood | 3.78 KB |
MD5:
4bddc530c66becb14daf02a367c382d0
SHA1: 4b3b7f89d2bdf4381b5b489aff9b86d4a7186089 SHA256: c46f57fa2188a33c76bc7a5406636f5a1333846ea8a1d1aeaa8575badac6279e SSDeep: 96:C4jR/4c14XPPRgd4d2eUPDwGUusEXm0mcpz:7/f1anRgdSyLPsWm0Rz |
|
|
| C:\Robinhood\encfiles.txt | 2.20 KB |
MD5:
c74b2577abfa74a6b1ef0d5c99778501
SHA1: 548027bd25ce4df8c04c28dc6c3d85607d5b6ad3 SHA256: e5705119c4d912ae66025342b538c52e5f554e1aa670325c3b8904585db5eb41 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAs:oJTm2eeb0Z1xap5y1 |
|
|
| C:\588bce7c90097ed212\1055\LocalizedData.xml.robinhood | 75.03 KB |
MD5:
2021900af9fdc9feb7aa14222a503a05
SHA1: 6a027c3dbf884b1bd916af355fdee702e434184f SHA256: ce8595e2b0c8cade3b3d8ee71bfef818956c3a7d9e98c37679adcb8b90d218f7 SSDeep: 1536:M63j4FLXnbAStVhLQF1R/CWa+7L1Anvvitxloh2qTcVa7IzccINQTfcmpE4:D30ZnbBVh4nCW9LmnHiZhqTcVACqN0 |
|
|
| C:\Robinhood\encfiles.txt | 2.25 KB |
MD5:
01ef36ad378baa1bea0728c9ba7caeae
SHA1: 6031b94cb17046046d9cf3e8a0bd43e91306b632 SHA256: 5dec23b0a340ff51974e62d4d8d9135d7647a71ed6e11b985ddb3907093efb25 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAW6:oJTm2eeb0Z1xap5ya |
|
|
| C:\588bce7c90097ed212\2052\eula.rtf.robinhood | 5.70 KB |
MD5:
12804a82b211e876a1a6c394f48bb66f
SHA1: 9c2626b436289d5ad2f793ce423c50dad6a27246 SHA256: 83829e07fbc280bf29b5fb043824d119fa93bd50e737b5fb43f9703e165b8d55 SSDeep: 96:FeBLEkoRYijy3SaoPsZ/aKftdnm/ZV1vXS6yV3DJKvhtCRM9raxCe5VMpoOM:F3kaCSapCQdnmhqJVsCRwACcVM8 |
|
|
| C:\Robinhood\encfiles.txt | 2.28 KB |
MD5:
c3dd317e2314d6dc09b73c61fdd5126b
SHA1: 9344e2449cd35bcbc2b0fd2a40a5937d35d9e81b SHA256: cbd06a99bce8e49e7193bc14fd231e11e2e9b3a36d6628745e7c25045875697b SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQ1:oJTm2eeb0Z1xap5yE |
|
|
| C:\588bce7c90097ed212\2052\LocalizedData.xml.robinhood | 59.27 KB |
MD5:
79ada3f2302f972f0186a8b0d4c416d3
SHA1: 720dc23243e76bc4c2a55cc4792911f7afcf61c6 SHA256: 53b796069e57d711c2d93401be33a183f1f90509cab38f0d1020aed3032c6e36 SSDeep: 1536:MbdT8JvX51v3pYhGdX8gOIZso1lu5AXV1ymcpPRlR9xkzoA:eTGfj3ihGdDOIZv1llymcp/Y |
|
|
| C:\Robinhood\encfiles.txt | 2.33 KB |
MD5:
19a5e8ee441b0db0b5ab27825acec08e
SHA1: 6fd866e11347c6d644036c254ccc40952ba8b42b SHA256: 0e133f9b3207fefaa91c5fcf71a0c190e2f8619dc515458619ebc33e49bc6280 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQHfM:oJTm2eeb0Z1xap5yN |
|
|
| C:\588bce7c90097ed212\2070\eula.rtf.robinhood | 3.92 KB |
MD5:
4aff4315a901a7d989dd1aff05d58510
SHA1: 416347ebc949df7fa819f420c3af687c773397d3 SHA256: 4e9ab8073a53f1f30e791ca7458d8e2dac91bcc55061edca726953a235408747 SSDeep: 96:3slpucHJdbXkD+HKKTI0mkBuOzoC+0NX5pSqmum12a3ev:qo4JRU6HZEwB0iNX5oqhmMaOv |
|
|
| C:\Robinhood\encfiles.txt | 2.36 KB |
MD5:
25659e1e7d864b0ea5630dc4cb67a042
SHA1: c8e0928c9f5af95cf6dbe322a58c1eda82301e70 SHA256: 5570512edbfb102263374c71bbb74812669a1a23c7d0f42f30e9e3af7d98a196 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQHfK:oJTm2eeb0Z1xap5yt |
|
|
| C:\588bce7c90097ed212\2070\LocalizedData.xml.robinhood | 78.38 KB |
MD5:
a4e161351c1b5c73c1e6b9d14dc34b45
SHA1: c6b11254be2e07c26ec2247d7628572c930ea3c6 SHA256: 6d2d043cce1518a294638673f87be30051631520927c6e60a3f9f63afc8b75b6 SSDeep: 1536:MwXb3AcpahuI2fA5YvffnRnExeoLuN75Fht0/+2OIPG/OalZyAwmUJY+qfn:lbQYaE5iSfPHb5t0IDOQZyA2Jqf |
|
|
| C:\Robinhood\encfiles.txt | 2.41 KB |
MD5:
ebf9e0e4b14825e5446e69f7b9809022
SHA1: 97ffd6ad67636b38673aadfbc688972bd5af23f9 SHA256: 883fef0858caad600137ebad3df48a50f66253e5bcd42f239ee48e822cbf8ce2 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQHf0c:oJTm2eeb0Z1xap5yk |
|
|
| C:\588bce7c90097ed212\1028\eula.rtf.robinhood | 6.17 KB |
MD5:
cd7bb6ee12ccf1ddf90a77d4c1d38183
SHA1: bac361a141d975cf1a954804ee6b5ab2cbd83aab SHA256: ba4bc492e842f184f9ed6f069a7530b2cfd784242168cb7b92b2ddcc9b3ed229 SSDeep: 96:qgVRv/FzSFu7yvSBRkwI/0WLrqv//rmhekFD0n8I09sd7uY2HDdwgCeqWA8g0:qKRnFM6FiM99x09sds2g4WA2 |
|
|
| C:\Robinhood\encfiles.txt | 2.45 KB |
MD5:
515b6615ea41aec0a1c75cbe5dc16ae5
SHA1: 1d24fc6303703f669b23319042c4e37cd92fb9ec SHA256: 04ff6f8208fd45d3b04e7189baf252a97e99ba53ce4011dc5a2c33c4cd3aa413 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQHf0Z:oJTm2eeb0Z1xap5yR |
|
|
| C:\588bce7c90097ed212\1028\LocalizedData.xml.robinhood | 59.41 KB |
MD5:
908d459a1b3472c838ac88c39fa2def5
SHA1: 083e02357a34b50f61906a5146665f0effc82d01 SHA256: b480b9ae088bdb33dce8d5bf6836c69b15fdf061c7f58d7487f7b82b0035ecae SSDeep: 1536:MRaSO2fBkwfTAEUNCVy3Vqb9/AN6FmmPiHOW5gm1U:0aSdA7PlsJ265aHOW5xU |
|
|
| C:\Robinhood\encfiles.txt | 2.49 KB |
MD5:
1d6d02581540d53851cf8f2c5d7bb80f
SHA1: 22323c51977a876ad73a2f99cf411403099f26f3 SHA256: 00083807f1e3ef304456e5b5972931761492883149f1d397c6a533e5f5f36857 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQHf0rJ:oJTm2eeb0Z1xap5yV |
|
|
| C:\588bce7c90097ed212\3082\eula.rtf.robinhood | 3.00 KB |
MD5:
7b20947dac8b7db6f886127e44b25f25
SHA1: 9812ef3d26664d3518f6cbbef421f9c91967560d SHA256: 7776ccb672d778efde4b27d02cfe7bc53e1a11185459013acd8dbda629a2d7b3 SSDeep: 48:hTlEEbU5QEXeW7ZkTlVBDCKmtcM8xlHh/DEIUCNxvtrfgi9UxfOm6zhULO5fq7Pc:hoQEOW7ZslVRCvcn/Hh/II7RUwUKq7Pc |
|
|
| C:\Robinhood\encfiles.txt | 2.53 KB |
MD5:
81c6a434fdb70bff774a05572ff9c3a7
SHA1: 65c678d4bac4c9a9e3457617cd956b40590b3869 SHA256: 88d92878409c0654e743ac994a2ea1c8ef734efbabf5f075034de1e00509f62b SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQHf0rF:oJTm2eeb0Z1xap5yZ |
|
|
| C:\588bce7c90097ed212\3082\LocalizedData.xml.robinhood | 78.12 KB |
MD5:
15e26a425a4a3b9f4989c3b269030b0c
SHA1: d6c45347f77b11b013f0077232b40af6d787cb90 SHA256: 0919161e131ac6ce844016b7655ed6b0227d7e2f91c5987d6ab4f78a14f641cb SSDeep: 1536:MtRZC8CpY+J+LCBqIVcAsFSn24d78fEIVElv6Uq51H1ylp:uZXyJ+LQqT8n2k8fA6Uq51HUlp |
|
|
| C:\Robinhood\encfiles.txt | 2.57 KB |
MD5:
c6966bcd2f4681f7600345d315f313de
SHA1: 14cf94e205813ec6460ab226642bac681999c95d SHA256: 3fbefae54fef7bb7ed875e027c3384a77e4931caa7f1987ba6cb835140e473c0 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQHf0r3o:oJTm2eeb0Z1xap5ys |
|
|
| C:\588bce7c90097ed212\Client\Parameterinfo.xml.robinhood | 197.08 KB |
MD5:
6ea0f491d09eefc49055351094f94f19
SHA1: 6e9c1e028be3e6fee012ec8bd365bd3fc28706ad SHA256: b6c6167181aca90ee7ea3029f582b01526894244d8af3f1fd2d524f5f19fcd57 SSDeep: 3072:8UwqE5PRBbR3zu5Wv49QNn4TUyooGYHg2zd/Ryh43tSc+stPHFg2hDUPRnHK:8r7BRvIWQJTU/oVHjzh8stPHW4UPpK |
|
|
| C:\Robinhood\encfiles.txt | 2.66 KB |
MD5:
e95997c3555c47a6a31e02c7db960b18
SHA1: c0ee4f6fd950aa65b3683b2d8763b6b8da4b676e SHA256: ab7f1fa6cda15fc17b431929220c0b031767ec77f2d78e31a16ddfcc8fd2643b SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQHf0r30BeT0y:oJTm2eeb0Z1xap5yF |
|
|
| C:\588bce7c90097ed212\Extended\Parameterinfo.xml.robinhood | 91.14 KB |
MD5:
916edc4b8cbf43042424d7b4cba40c46
SHA1: d5b37ecbcbc82dc9243025818fd0aa4c69ee1868 SHA256: 3d936762aac18328f5a211db792bba2b604b8a27a8f86b31543bbe64c4f88b48 SSDeep: 1536:xaWqGvn7ZH8Zy1pqHuca3A0VqCLMCkIJGw80OWHtFI4wzUw+wxr5vhRN:cgF1pkucaQOIClJGz0RI4Xwjxld |
|
|
| C:\Robinhood\encfiles.txt | 2.71 KB |
MD5:
dbf9f25f99aace65d628b95de4be2be9
SHA1: e8e845741a7103bf4537d47ed6d4b13c1a1ece62 SHA256: 1875a8d270e2725ffada569638ac89c8208bd68046c84f608587dfbede7cb304 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQHf0r30BeT0sy:oJTm2eeb0Z1xap5y2 |
|
|
| C:\588bce7c90097ed212\Extended\UiInfo.xml.robinhood | 38.14 KB |
MD5:
3b01871122e55187323ad26a2819775d
SHA1: c3e3096700416dfa66ad8274e0130563340720b6 SHA256: 4a2a35ecaeaf698f631c867b332ea48ee9988f7ee7ef6b5b66301f7ba2e5fac2 SSDeep: 768:KYUVd7pa89UJS+s2LczG15jDXBWRANdi5eGZvgwY6Uv94xfITE:KYUH7Tv2LczQxBo5eURTUV40E |
|
|
| C:\Robinhood\encfiles.txt | 2.75 KB |
MD5:
fa5fd23e348cbf20909c92e27d50ab37
SHA1: 12d55e0335e17f538c931ca5284b587f32f17c2a SHA256: 1657a554071f483e12424753fa9f01f3c701b04ca83b06b9d64e6ae58f5fb2b3 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQHf0r30BeT0sS:oJTm2eeb0Z1xap5y+ |
|
|
| C:\588bce7c90097ed212\Graphics\Print.ico.robinhood | 1.12 KB |
MD5:
1a3f1b2bc79eb0f7f7ba09dc2fd83028
SHA1: 54d3c45dcc23e1827c1cf1b528e9660bb43cc466 SHA256: c8142ee6d422f782deee7e58c5b347dfba6a3d1f30b0de5bc63d5cb582e15bd8 SSDeep: 24:9u4AmedvfasnLM0mRKfmtrIy8l/g/cWtKu2DSLAZkQrOb:9EO/gsrQ2cEJ2s4Sb |
|
|
| C:\Robinhood\encfiles.txt | 2.79 KB |
MD5:
bffbfdacdbad3230f3377de4d5f9f75a
SHA1: dfca5b8ff9fd56ca1aad8a54a72f96db3f7e74cb SHA256: b87577077a9575ae1d57b264501acb84f21e7c92ef48aaf9a7e543ceec0becbd SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQHf0r30BeT0st:oJTm2eeb0Z1xap5yx |
|
|
| C:\588bce7c90097ed212\Graphics\Rotate1.ico.robinhood | 0.88 KB |
MD5:
24ba0e047e8f27c6649cd59a883e4eae
SHA1: 5c806afd856a07a654728d54b355e548b77976c9 SHA256: f70a9379e78540c5e045074609d47ff87811ff0be15d8e43f8be41fcff380f1a SSDeep: 24:C3MZ7tva01EVFdz5mPPKLfSPxh8Z5PHN7a8umu+IbWl/qhO:Ci5vaYETuPPsSPb8XNOv+/q8 |
|
|
| C:\Robinhood\encfiles.txt | 2.83 KB |
MD5:
bcea3122e6f4329597e76676af1ab91b
SHA1: a1a11e53af84b9f5c6d7b7f5d9779bcb410605b3 SHA256: 214ad13e2724b8d0b8ec734ee144dd7df4f5ec32dc5c48807413604d67ef76c9 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQHf0r30BeT0sZ:oJTm2eeb0Z1xap5yl |
|
|
| C:\588bce7c90097ed212\Graphics\Rotate2.ico.robinhood | 0.88 KB |
MD5:
6bd81145d2afb0f790fbef1f3d6521a4
SHA1: af0291baa498c5881cb11454ba02b21c95bc7a70 SHA256: 96b2e5fd3af30d16af550316e004b664400207c503f92a08d5e8fff0d01691db SSDeep: 24:C3MZ7tv22Crd4nr5IRei/LbcMoJKSuq82WYrDSM4IgV:Ci5v22CEVQ7VoJKSNr36 |
|
|
| C:\Robinhood\encfiles.txt | 2.88 KB |
MD5:
081c26efcac9ff2e18437daf469e156b
SHA1: d290cabb57ab561ddefb7cb4b269eccfac7f4a4b SHA256: 1d0f48167a27294a11bad1ba9454b718a6fa96bdd16cd0c8b27984b49247994c SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQHf0r30BeT0se:oJTm2eeb0Z1xap5yy |
|
|
| C:\588bce7c90097ed212\Graphics\Rotate3.ico.robinhood | 0.88 KB |
MD5:
7317e036878677eda35dc259780b8e9f
SHA1: f58e1f066b1981e2892507fd48d901d2d996b53e SHA256: cad862aee8045cc4ab272da3660fd90e1f6aa4e01183f240c03c8492e5d63e14 SSDeep: 24:C3MZ7tvddq6CujInkyBcWLE3GMPHkgJDge9/ShvxOIR:Ci5vbfC+InkyBclGeEgJDgedShx |
|
|
| C:\Robinhood\encfiles.txt | 2.92 KB |
MD5:
7cbefe37341f2a78254a66e9fdf00e11
SHA1: 8c5b5fd30a9b3991adb6b9d6bd642c6f859d1567 SHA256: 62250a5be91a88558ad90bd015933d3c9f2c4472ce7b2f77a13e004891ddbc16 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQHf0r30BeT0so:oJTm2eeb0Z1xap5yWD |
|
|
| C:\588bce7c90097ed212\Graphics\Rotate4.ico.robinhood | 0.88 KB |
MD5:
23da54dcc20d9b7a8835367bb64d513c
SHA1: e9a32c9d24718619f77b654776630b3b8579d39d SHA256: d8dcdd8030c961b9a7c5aa9e59a853882678eb6b1afbc36ef42c4af347f88a40 SSDeep: 24:C3MZ7tvIYv/qGA6WO8n+zNCymQprvtx5P0ij:Ci5vbv3AY8n+BkQ5f5Xj |
|
|
| C:\Robinhood\encfiles.txt | 2.96 KB |
MD5:
7693a5cee190b67a00cb0caeea51fb7c
SHA1: 5ce6a3a7245ee1f0cbd594bffd9c4a0b077c452c SHA256: 218a7f53f014a5a9203127f3de3f9598e6c5a18459acb9868773cff4a8460715 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQHf0r30BeT0s9:oJTm2eeb0Z1xap5yW+ |
|
|
| C:\588bce7c90097ed212\Graphics\Rotate5.ico.robinhood | 0.88 KB |
MD5:
1e3f99a705d7aed0df142a7e9ec06f3d
SHA1: aaad3fe053a7f399bf068b147516dfe22ab2575e SHA256: 6f1ca05048ad2d2558c2fbb832af66b598f37948a6883190a82c94d7ce90e396 SSDeep: 24:C3MZ7tvpc/k2WKT68i10GZwu+YwL8E3Mm7UBn21aZ:Ci5v8hW86UxJ80Mm7on21+ |
|
|
| C:\Robinhood\encfiles.txt | 3.00 KB |
MD5:
afa16fae1d868aaa642323dc9216a46e
SHA1: 0024f995dde1ea598719c919ab4d529c7bf554a7 SHA256: fd69502415951dc91f2c2a6543247eb9b92ff1ffb350b55cd6904b9d92698017 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQHf0r30BeT0s1:oJTm2eeb0Z1xap5yWu |
|
|
| C:\588bce7c90097ed212\Graphics\Rotate6.ico.robinhood | 0.88 KB |
MD5:
a3b1f8eb31c1c51add00be8e784e6c3c
SHA1: 42cc4aafabae416926767f7dd2eeebf2406a8f01 SHA256: 03178841e32c2071efc6d6b405fd8e61bca8457856f92caf9729957e345a446f SSDeep: 24:C3MZ7tvXCNI/k08tD5e3fGPEGOHDr6Uo6:Ci5vXCi/kNeuiuUx |
|
|
| C:\Robinhood\encfiles.txt | 3.05 KB |
MD5:
bda289bbb16b3673579b5adcc36de4a4
SHA1: 26bf6b8a4f6bacf42247ffb1c071519497f6c269 SHA256: f0cdd1b5a165f5db16a307c172185617da997ba10abd8c927d5dc85aeb11a090 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQHf0r30BeT0s+:oJTm2eeb0Z1xap5yWt |
|
|
| C:\588bce7c90097ed212\Graphics\Rotate7.ico.robinhood | 0.88 KB |
MD5:
d1326c1a5c7b0bbbd06fd845b9be859d
SHA1: b3d17f45c535460c900279f9e7352f707ce98511 SHA256: 2bf1b8472c77508034a2510c8b688591cd920d8311aba45f8717c0c1fdfb306a SSDeep: 24:C3MZ7tvWNCAbWY4PzA1AS3iPyrymQUnxDrJIZc3ZAGs3:Ci5vZMWYhAPmFn5NiV |
|
|
| C:\Robinhood\encfiles.txt | 3.09 KB |
MD5:
7a74dd6f393bedb8e6a96b817d898f04
SHA1: c5a93479acd5abc61143cc53638e3da59fff5770 SHA256: 1c2dfdd7ea2a932b33e6d7fa30c19ce489e99fbfe156d2513a08c7ab4610c65a SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQHf0r30BeT0sE:oJTm2eeb0Z1xap5yWrj |
|
|
| C:\588bce7c90097ed212\Graphics\Rotate8.ico.robinhood | 0.88 KB |
MD5:
87ba5861eb155576ea253ad7c10e5fd4
SHA1: b0a1e96697c982e98e599b49d9edd964a6259459 SHA256: e4c44e609f801376c38a650cde6586d9bf6d016f14e2c1a5f2fec859907e93f9 SSDeep: 24:C3MZ7tvC9UlE9164LZ5QJZ4vv5fuovZOIu:Ci5vC99L5cG3duV |
|
|
| C:\Robinhood\encfiles.txt | 3.13 KB |
MD5:
76d30e2a250dcd93fd78142f374bd658
SHA1: eebddcb5b405ca939f9ce1cdb87f02746493c231 SHA256: 54bb9151a8e4b2a469662c3988a9eb7a8abd8ddbf87e2d311c2cf6a780cd8049 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQHf0r30BeT0st:oJTm2eeb0Z1xap5yWrfy |
|
|
| C:\588bce7c90097ed212\Graphics\Save.ico.robinhood | 1.12 KB |
MD5:
6053a532b0099eb7fc2c73ef6c11adc2
SHA1: 47f5b6de69956476dae5d585548bfeec6ee66e45 SHA256: 4c7510d1baf1c0ec20b5028cb371dafeb94c74dc4cfcc63dc3f44151e47ab7a0 SSDeep: 24:9u4AgaIAHWFxeIhH8TxCy1kjTUpKRLR8upgP6wxZNDeIvIRJEd:9DCwcTQjGKZRBCj5yPJG |
|
|
| C:\Robinhood\encfiles.txt | 3.17 KB |
MD5:
a936e3accc6831dd3b25f17d442e2ce2
SHA1: 7bd3508ab9348a2a40608819f3e115ca01ff9005 SHA256: 64353c2c56dfe4f2d467a477cd0ceead44ebc99316728cdf16ded169b8973da8 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQHf0r30BeT0sS:oJTm2eeb0Z1xap5yWrf3 |
|
|
| C:\588bce7c90097ed212\Graphics\Setup.ico.robinhood | 35.86 KB |
MD5:
de8fe6d61e6aafbd54127f23b81a719f
SHA1: f24311bd704e2de36026cc859b0580c0b0a54f51 SHA256: 764102c6d041ac5fb659683ac5d1bb3b36ea6196a0a3d71eb80847b50c66ab1b SSDeep: 768:qHZDXIUFTSubgQ5cuHc/4S7PUWcQPUAuTR95p6L8nS/PxYr7muXE8AIp:q5tFTLsQvS7HcQsAKR95m8uPuv7UPIp |
|
|
| C:\Robinhood\encfiles.txt | 3.21 KB |
MD5:
99c4e8cdb3563c24d12f5acdae060baf
SHA1: d7c208eb953b7a64f0676f907265d863790150dd SHA256: f535a5c3d5e6f7da6e9bb02cc010882d85a5398e0dc0c521861ca3052b89db60 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQHf0r30BeT0s3:oJTm2eeb0Z1xap5yWrfby |
|
|
| C:\588bce7c90097ed212\Graphics\stop.ico.robinhood | 9.91 KB |
MD5:
0bfb1480dc79d3188e77fa2c287e6d79
SHA1: e2cbd6b30da27dc97dea9d1936d4ee869b8a0f78 SHA256: d628ea8947747534f1b67323c884a791e2d37c0a1db4c798a4331dae2519ca3e SSDeep: 192:/UXKoKa7+aTxb7kcpK+mFnCK+6YIaTIYYpMwKsBzE2TyhJIP+6:cXKa+aTx0cpdmYJ6A0LaEXiJ0 |
|
|
| C:\Robinhood\encfiles.txt | 3.25 KB |
MD5:
ecbd240ffedb5dece5f440c10584e83d
SHA1: f8d3744adcb84d352eff89fd9bd6f5fff2d1c6e3 SHA256: a71dd1faabbcc9a22e28d2f7cd1524550cdec2f23f6125560ec423a602d7de44 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQHf0r30BeT0sz:oJTm2eeb0Z1xap5yWrfbI |
|
|
| C:\588bce7c90097ed212\Graphics\SysReqMet.ico.robinhood | 1.12 KB |
MD5:
149640baf90ac7f2a2fc0244c5612b88
SHA1: 14bec09829e6306851111ee1a48a99cf5afd9421 SHA256: 4b9c7af387655779723edef7bd4d3e596c8583dc75fc1b352bb80f32223f6d24 SSDeep: 24:9pM/IVDWr2QeysvfSrpCSbKz79mLAsa81V+RDWzVmsXcFJnGXkf/TSC:9par2AO3SgmRJ14JU8G0f/WC |
|
|
| C:\Robinhood\encfiles.txt | 3.30 KB |
MD5:
1ff8c09ea730c4851f16ba3f2ade687c
SHA1: 82fecc1773a9c3aece6681794c865863649113ae SHA256: 733d5662feff3a6f2b5c2a60bec477220054d2dc21b79999c81088c29d93c7b6 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQHf0r30BeT0sA:oJTm2eeb0Z1xap5yWrfbnD |
|
|
| C:\588bce7c90097ed212\Graphics\SysReqNotMet.ico.robinhood | 1.12 KB |
MD5:
b5251d87b4af0577680bcda5b5710f42
SHA1: cdc4911ff37b7a0b5c9da91368058f5326e03e09 SHA256: a6d8141d11a6f912e4ef3c304940899e9a48b55111a0762f8a4d83bb1d82aa47 SSDeep: 24:9cIrbqZh1DGEMJkL40H1RKCn5Mt0QiurLmCDhn:9l2P1DVNTno0ZuzDZ |
|
|
| C:\Robinhood\encfiles.txt | 3.35 KB |
MD5:
9c4d98bf9aeb59fc9df209375aff7b59
SHA1: e9eccb81357cd123aa688e8d8dbcbed075aa40de SHA256: 7edfbe4e7014f49285fbf70fb042afdafd3d6e9f5a0e1d0a7fe7220ba7e2adee SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQHf0r30BeT0sU:oJTm2eeb0Z1xap5yWrfbnZ |
|
|
| C:\588bce7c90097ed212\Graphics\warn.ico.robinhood | 9.91 KB |
MD5:
60f012f296f8ca0728e678c276be1f18
SHA1: 5c0d58e6ead5254f15d1790521b432002f3e32e7 SHA256: aced63a147f0b5e1bd267c385566c2478d51a87714fccb284eb8bd61f2010588 SSDeep: 192:Yl3TzMfYBKxsbKIlGJefuz8e5Rw4rP9w45RYk+FmnFiukrlZ9qpn:Yl3vmclGJB8e5vrP9wSRYpb9e |
|
|
| C:\Robinhood\encfiles.txt | 3.39 KB |
MD5:
a93cd8de0dc972c312b172d821d4ac22
SHA1: 988d3f0e091f48940641f1583c78736ef328d773 SHA256: 7de136dc44475ec6b1e12a0c0584089e9790f94177c2097e1e6768d763d2f1a5 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQHf0r30BeT0sq:oJTm2eeb0Z1xap5yWrfbnl |
|
|
| C:\Robinhood\log.txt | 0.56 KB |
MD5:
1e98b9a3e117a55935c8b7783c82763a
SHA1: e35e19f35cb929a8de205eef130f0fcd2e0eac17 SHA256: 4fdded5e6937b8ee2914bd334579e5845bb3f0367973a72ec8da56d473f06c94 SSDeep: 12:mZCuDjdJjj5iTpV2oyrdJjjlETpV2oadJjjyTpV2o0EdJjj2upV2ov:mZCundJ35kpVSdJ3opVCdJ3UpVMEdJ3n |
|
|
| C:\Robinhood\log.txt | 0.68 KB |
MD5:
2fb098cd43e0e52fc859b86ffb6b129f
SHA1: 0bbfe252a1a92bbc9c3c838c64bd9f5a2c18fba4 SHA256: 02951149891c0151dab7bb545f5c4f35891c4f72611baeaf28248dac65191b42 SSDeep: 12:mZCuDjdJjj5iTpV2oyrdJjjlETpV2oadJjjyTpV2o0EdJjj2upV2oUEdJjj2jOpR:mZCundJ35kpVSdJ3opVCdJ3UpVMEdJ3Z |
|
|
| C:\Boot\BOOTSTAT.DAT.robinhood | 64.02 KB |
MD5:
919af60a31e603e73309709732d6de8e
SHA1: 293091bfd3b49a125c17b9ce1c61cb6a967bfc17 SHA256: 305de5a019ccdb72ccb5dd6ffe3203def9b54f147707facb40efce4537869f6f SSDeep: 1536:9NTbwx5vb9uE4FVuRbSznlJzCK8SWu6+qJ/DEwrN84U:zT0x5BQruVSzlJeK8SWZr3rS4U |
|
|
| C:\Robinhood\encfiles.txt | 3.41 KB |
MD5:
7c82f7bfff62112b3dbc06162cf66cc5
SHA1: 74bc2f9dc1510ad3bcfcc1c76e9f4f816b1e54af SHA256: 37dede7f1845a3af2d31532355d5db965daa1133c10ae0b952776c453ab37a83 SSDeep: 24:oJTm2eeOw0ZKMv4o00aLloY/KHIAtlDaflnbdXzfJ489Tx0qGAWQHf0r30BeT0s7:oJTm2eeb0Z1xap5yWrfbn8 |
|
|
| C:\Boot\updaterevokesipolicy.p7b.robinhood | 4.56 KB |
MD5:
a1d4ea105c8d8233e690f49354813547
SHA1: d059c91fb78e4394e0378e228616fcf72c75f649 SHA256: d1cc15c347458e9b8e0bd56771d6e788b01f4c4aa2f46a79414956ada13bf266 SSDeep: 96:ac7JyrG5U+nAJZAbhxXab7BDyU2hluq2YSFoq/pd8e7geGNqtbXXRTk:aDEjAyC/BDYSYMoqjLgStbRTk |
|
|
| C:\Robinhood\log.txt | 0.79 KB |
MD5:
c986ef0a0b71f2bea2e30417e30d069c
SHA1: cd4eb515952353527e58d9a2c2f69f0386bc7210 SHA256: aa4fb62f494c9afc931a0c0f09011d7abeb866a3d12f615c2896507ec9eb5c5d SSDeep: 24:mZCundJ35kpVSdJ3opVCdJ3UpVMEdJ32upVZdJ32apVcK7kHleK7C:mZCud0XYOXImXM69X/VXcK7gUK7C |
|
|
| C:\Boot\Fonts\chs_boot.ttf.robinhood | 3.52 MB |
MD5:
d1a2518722cdeba8dc586e316ae092e8
SHA1: 0e20ca10bad80d48d450e7606ec770dc4dbf267f SHA256: 1210b1b6ca76e27a1a2c614b10c545f70204ff062822e4f5d73920254c580489 SSDeep: 98304:eCAh3W61zVZCc40Ardgv0FgVpqeTebXS/F6E:eJhG4zVgc40ArCYJaeTS/FZ |
|
|
| C:\Robinhood\log.txt | 0.88 KB |
MD5:
826205129b67c8b1f0f31c89d5a960fd
SHA1: f758183be311db519fc02f08a82c28e5b31499aa SHA256: 56b2eb43b8b029da1b00b51bd9d16a3ac468f31eed707c06c62bacc8f910429c SSDeep: 24:mZCundJ35kpVSdJ3opVCdJ3UpVMEdJ32upVZdJ32apVcK7kHleK7Il/:mZCud0XYOXImXM69X/VXcK7gUK7Ix |
|
|
| C:\Boot\Fonts\cht_boot.ttf.robinhood | 3.70 MB |
MD5:
65340c09ad9d64c001bf3f15404dc597
SHA1: 6b463e3130a2656e2e171fce3ccbcf5cde2ba9ba SHA256: c51e1fdab4e82df5a2a2ad6ee6f9a50fa9efc5381a6ea20aaa749623c7465a8c SSDeep: 98304:nb+QTZzeJcSE7+iiadZKRhpDH6Tr1XCQmsdpETAFS2:nbdTBycqizCRzDH6XRXETWr |
|
|
| C:\Robinhood\log.txt | 0.98 KB |
MD5:
dc771995094b3647154718fd67231074
SHA1: 308d95d60bc0d31891fe273a610078c55f99fe18 SHA256: 54d0ca03844f3d991348d3409f19247a438076e79e354954d3237119722e22f5 SSDeep: 24:mZCundJ35kpVSdJ3opVCdJ3UpVMEdJ32upVZdJ32apVcK7kHleK7Il+lC:mZCud0XYOXImXM69X/VXcK7gUK7Iwg |
|
|
| C:\Boot\Fonts\jpn_boot.ttf.robinhood | 1.89 MB |
MD5:
7aa0dbfb92f27497474f40701b531ef3
SHA1: e744c3b0763719716ff6c3046946c4087b9862d7 SHA256: 8f684b95d71f47bcd7e9c14ee696e282371bd5661b7dd935074c971dab7606ce SSDeep: 49152:V5sRPJMM9A/K5O2wsSuWEwL66Q1fy1/RGJz45A3V6:3sRPmM9YK5O2vdQ66Q1fy1ZG58Al6 |
|
|
| C:\Robinhood\log.txt | 1.08 KB |
MD5:
03b3de5a1b713b2d3881be134edb0575
SHA1: a3f118b9b38a3fcd7c3198d3bba1c7ba00328531 SHA256: 2bc83c22fa90c3ba56e7dd91b8b35f7eeaa57242c7f53f224d5a4ca7d33ed9a9 SSDeep: 24:mZCundJ35kpVSdJ3opVCdJ3UpVMEdJ32upVZdJ32apVcK7kHleK7Il+l7QlKS:mZCud0XYOXImXM69X/VXcK7gUK7IwON |
|
|
| C:\Boot\Fonts\kor_boot.ttf.robinhood | 2.26 MB |
MD5:
6cad24edc6d63632573bfdce4d1eeade
SHA1: 4d05e524b2294970d1d701efae5f53497edcc77b SHA256: 6929f3507f47d932ce1f3e6b3dc58d333518504e57cda0834e6382581f5001ab SSDeep: 49152:c5qgUgqlq7eMj6jk+PYXUVRAMH+MRWSEAC2Sv/+T9iRDWDTxBFJXBrq0Qm9:k0lQeMj6gaHVMMQSzRS+xiRCDTTFJXBR |
|
|
| C:\Robinhood\log.txt | 1.17 KB |
MD5:
8c1336249fb19d50e5db517256bf8309
SHA1: 28746c82a9b9c49e40204284f7d6ea8651c12aff SHA256: 10bada60dfe9b4f8de096edee546d08656ef2dd1d3191ae9ab5b9c494d95e548 SSDeep: 24:mZCundJ35kpVSdJ3opVCdJ3UpVMEdJ32upVZdJ32apVcK7kHleK7Il+l7QlKXAlr:mZCud0XYOXImXM69X/VXcK7gUK7IwOl5 |
|
|
| C:\Boot\Fonts\malgunn_boot.ttf.robinhood | 170.86 KB |
MD5:
02358a2733943fac7cbe1d9fdc850da6
SHA1: 0752f823ae6d79519b1202aaf0ea61a890ff6e13 SHA256: d461fe7aa40f7bdd14896ee45ea222898c3cb5e4f01670c5d4d2dda0cd0aa01e SSDeep: 3072:Doz1tdy9a35kw/CwKIp7J+FddZwwpaugItm960Ysnw57NE:UJtdE2OyOdv3ax96Qw57NE |
|
|
| C:\Robinhood\log.txt | 1.28 KB |
MD5:
42dbbad7321510dd104263112968139c
SHA1: 994583e6f4b13dbc4aaf0eb5d7d305943bc53ebc SHA256: 341895b36927c6939e17ae5193da17ca2891499178c97755459ec7a9b6e2b9b6 SSDeep: 24:mZCundJ35kpVSdJ3opVCdJ3UpVMEdJ32upVZdJ32apVcK7kHleK7Il+l7QlKXAlF:mZCud0XYOXImXM69X/VXcK7gUK7IwOl3 |
|
|
| C:\Robinhood\log.txt | 1.38 KB |
MD5:
e3daf157201be0b0b7ef9df6e81e295e
SHA1: 96027f3ee6de468a0e1433e25adc1ffbc6b87810 SHA256: c56ff64902002be5778226b09c6a1d21e246f4b394d4a27fa9e11c6de4a6cccf SSDeep: 24:mZCundJ35kpVSdJ3opVCdJ3UpVMEdJ32upVZdJ32apVcK7kHleK7Il+l7QlKXAlb:mZCud0XYOXImXM69X/VXcK7gUK7IwOlp |
|
|
| C:\Boot\Fonts\meiryon_boot.ttf.robinhood | 140.39 KB |
MD5:
d37d063a9d82121d4e259a2d5419d794
SHA1: 0a5c9983e22bfba6a95273adc502f40ac738fe15 SHA256: 5717e1a5b6640abf919031cfdf92d1003dcd1b0a45f32935f7d43241ccf10b8e SSDeep: 3072:D2eiG30IIP5HptqJRWMcdNGl+5Wg1TaYMDMEr:BTIBHptqv3cd4l+FxY |
|
|
| C:\Boot\Fonts\meiryo_boot.ttf.robinhood | 142.02 KB |
MD5:
6a86e55d764b090e72a2fd50e6cf7510
SHA1: 62247fd9cc8fcb2e960e0ee73cc8b471464bfb1d SHA256: 40240dfaac5734f1daa8ab1b70098cb958d9b5ae3c2e01f254af15a915e636d9 SSDeep: 3072:FxDx6jGs1xwDLdKgWTMbL/pMPlAKbY/LV:FxDktkDp5ADYx |
|
|
| C:\Robinhood\log.txt | 1.58 KB |
MD5:
420054a2157b09b67daacba7db4c45fb
SHA1: 997b5cc0dbcd27c435e9f5fd0a53a92a2b960535 SHA256: dcad87b9cdc3c4e73c118e27df5fdeec0ae4e218dc7835ae57de1ebe7559596a SSDeep: 48:mZCud0XYOXImXM69X/VXcK7gUK7IwOlXRq/C:mZCud0XYOXImXM69X/VXcKcUKcwOlXRF |
|
|
| C:\Boot\Fonts\msjhn_boot.ttf.robinhood | 158.53 KB |
MD5:
517b54b32df07e6d7a8865a8f71c569b
SHA1: cb8d5ed021a3e8d61fb5c046519d3cc5c8e6c56c SHA256: 9576f9f6341d2a6d2a41d8312bb28182186ba3fbf92710b49d034ba2cf387edb SSDeep: 3072:kJLDeGH6Og7pzUZb3JnOSohD90FdFCUa8boIeBW4gqYLB9zA1EH3TBEBLu:UgdzUZD1RK0FDc8boPRY19Zyg |
|
|
| C:\Robinhood\log.txt | 1.68 KB |
MD5:
fefca66021720ee967b1582040ad26e4
SHA1: 5b0d7f3e39a4fad154cfdad590566c347da1e055 SHA256: 5a87612c7e1947e2002086d717118df1811db730909908a80d170a50bdc583c3 SSDeep: 48:mZCud0XYOXImXM69X/VXcK7gUK7IwOlXRq/YZ:mZCud0XYOXImXM69X/VXcKcUKcwOlXRz |
|
|
| C:\Boot\Fonts\msjh_boot.ttf.robinhood | 160.50 KB |
MD5:
fce21036df101b61e95d66b8eff2da59
SHA1: eec01029e6ba0e30c5c30ebbf7726cd26aa3ab79 SHA256: 02142aa62bec5a617b86be452440a0193f5f312ddab72ef6992fc7eee3e03023 SSDeep: 3072:eJifYQsQRYzwooTeM+oa/g/Oo3dVcVaQYhfosqImpobAde6eff3lS:+G4q1oaG4/zdqVaQK8e6eVS |
|
|
| C:\Robinhood\log.txt | 1.78 KB |
MD5:
2535e6ca99800c6f620229d087fc8e9e
SHA1: 2dda4b61834f51ad1fd9e0c0efd66aab9dc07a09 SHA256: 51162dd1efd2ec54d64f62b9b5eac6bb3445d71afbe27251e3572a3e911382e5 SSDeep: 48:mZCud0XYOXImXM69X/VXcK7gUK7IwOlXRq/Y1l:mZCud0XYOXImXM69X/VXcKcUKcwOlXR1 |
|
|
| C:\Boot\Fonts\msyhn_boot.ttf.robinhood | 150.81 KB |
MD5:
7d42ddf7b06dd968217503b5e34a4caf
SHA1: b398f5b1e28c69482efc9cd123b4f85947da0e6d SHA256: 534d3725caa1c36b037077137cbfe6736638233a2001d112e97b88bbd0f3af0e SSDeep: 3072:VBcHkywDzDZ1gHpp/t/bjy6FFN8ZWQ9CDWGH9/Qt1vZW05y:Vy1wnKR9bjVF6JmWg9avZW0c |
|
|
| C:\Robinhood\log.txt | 1.88 KB |
MD5:
a3bc525035d2d4516e47a674ddc9764d
SHA1: d84b4124e0b58e90049b77e04009b50d10b8dc25 SHA256: 7d36ff0fa0e517b7db0d3878c76be54499e3239ea5c5ed7ef17c9547cfbec153 SSDeep: 48:mZCud0XYOXImXM69X/VXcK7gUK7IwOlXRq/Y1sE:mZCud0XYOXImXM69X/VXcKcUKcwOlXRp |
|
|
| C:\Boot\Fonts\msyh_boot.ttf.robinhood | 152.59 KB |
MD5:
4bfd53e272aa39ba1325202b640ef1e1
SHA1: da519e610c9d14e6cfb9909f7a7e10844741f3ba SHA256: aa0a886ba18cd6db972c60906e3d05cef8a03b6607c3684144b80b29ad3bc16a SSDeep: 3072:5oB8svxNKCLfZl9LQ3IUIT/T/7ALpLxm+8BoN6+JVt9nQyTLMnYvdoCOjhqZrxZ:2FvxX39LQ3IRcllmDGN6+pTLM8+jQZtZ |
|
|
| C:\Robinhood\log.txt | 1.98 KB |
MD5:
cc7a545929f7e705dbb0f6eb5bcc3a32
SHA1: 20871a5e7f8c12956bd17ddff947fc66b450d05d SHA256: 93c67f86c443880acf87e1ae46b06c509a9becb3bb445155f9eb7dc67303da32 SSDeep: 48:mZCud0XYOXImXM69X/VXcK7gUK7IwOlXRq/Y1sjO:mZCud0XYOXImXM69X/VXcKcUKcwOlXRb |
|
|
| C:\Boot\Fonts\segmono_boot.ttf.robinhood | 43.81 KB |
MD5:
a70415aa014bba29b68a03a5c9ee23c7
SHA1: 488480bc07db7b07daca69e39f15dde6a53a6610 SHA256: 2377b5880bc6e3a7b09215ec281cd10cf4cec6ac272e2f9a3d67d65b014b4fa4 SSDeep: 768:vyoVaLdIPGmSMTb2csKDtuhfISjIyQ/1GZ/gXrZOr08y8pUUsTOyFVPud3+5zD/O:aTpYGmSM/2jcuhfp0rG5s9OI5UgLVPVU |
|
|
| C:\Robinhood\log.txt | 2.08 KB |
MD5:
e8638c7f4bc978f893d950491c49a19a
SHA1: afb6f70b7e8516f07dd4b30020b120a851117a7b SHA256: 243cfaa2fac409d5b36d47f7f08b362a9a920985e7a9f339037c14aa41bf4df8 SSDeep: 48:mZCud0XYOXImXM69X/VXcK7gUK7IwOlXRq/Y1sjmf:mZCud0XYOXImXM69X/VXcKcUKcwOlXR1 |
|
|
| C:\Boot\Fonts\segoen_slboot.ttf.robinhood | 83.86 KB |
MD5:
7bf77b08ccabb288c9111631b40c4989
SHA1: 36aeace74070020caea9af14865ce05106be4562 SHA256: 9befdb39d1097aa4f99260e91ea1df9f88a0052a81b4972d5f77f7b5bee5758f SSDeep: 1536:M3YTTiLZNJOHMbZTpF71yiKUY/Is2ETtpXx9tdERib80EAAk33HgOpp5H0HX:oYyLZNJO+NF5yiKx/QS99jE0oPIHAgz6 |
|
|
| C:\Robinhood\log.txt | 2.19 KB |
MD5:
38a8ccb0fb96b3c0caa8c7c384cebad1
SHA1: 377b8bcaa5fc0a144c29fa801d879a7c3bbf77ef SHA256: 258e1190b501e3ab6d881300310f9a3131a558b1396522012f3c53e89396cb1b SSDeep: 48:mZCud0XYOXImXM69X/VXcK7gUK7IwOlXRq/Y1sjmZ7:mZCud0XYOXImXM69X/VXcKcUKcwOlXR3 |
|
|
| C:\Boot\Fonts\segoe_slboot.ttf.robinhood | 84.17 KB |
MD5:
548dda10f366d3402bba41e352520c78
SHA1: acc5a81fc8c6baf603194640843bf0bfa872013b SHA256: 90605bfdbcf13d6695465ead953f7072f4a69d7f6b845628f2806f3a18393a4f SSDeep: 1536:GwVN0iS0/fDIPRebdRJj+EZHiUwfgks4x+3z9YFfPrtezXKJroZ:GplU7IPRebdRR+E8fZfx0z9Ydjte+oZ |
|
|
| C:\Robinhood\log.txt | 2.29 KB |
MD5:
b5bf883ca9194ad462108dd1b472b01d
SHA1: 64bb6b8c706840783eb9f24e9e6f906f25cfd17e SHA256: 97bc340f0baaf9d0ae3e97b2ae0d7dbb86867006d9b1fc4c6c79e85c287366a4 SSDeep: 48:mZCud0XYOXImXM69X/VXcK7gUK7IwOlXRq/Y1sjmZLZ:mZCud0XYOXImXM69X/VXcKcUKcwOlXRZ |
|
|
| C:\Boot\Fonts\wgl4_boot.ttf.robinhood | 47.95 KB |
MD5:
4644530ffdc137b9335983704983ff28
SHA1: 22cfb35e1043527d5982a876349ef05c9222667a SHA256: 760c1d92d53f78ee83aea2665df7ced4d0d8ce53e56a2f4d3052c8ba1cb24aea SSDeep: 768:1hzCL9/EYdsPlpadFiPQOZdzM3jGRXZRARsOW4mQAL9oPJqK2sNmbprD:jwAkFiP3nzMy5z+sZ4gg4dsNmh |
|
|
| C:\Robinhood\log.txt | 2.39 KB |
MD5:
596c02596cf1548cbd6f027fb1dedbb4
SHA1: 2e1909b559a13f334f10475dc30750ce16363675 SHA256: cc4962fcfcf2163290c8dd4c8686197637c958730ece74764fff66be6f126e99 SSDeep: 48:mZCud0XYOXImXM69X/VXcK7gUK7IwOlXRq/Y1sjmZLVt:mZCud0XYOXImXM69X/VXcKcUKcwOlXRn |
|
|
| C:\Robinhood\log.txt | 2.47 KB |
MD5:
348776c6f9b8dc1794cbb9f6e705a9b7
SHA1: 926ad30fd4cf48f1d3a1909ec3f0c6996e2abf4d SHA256: 15cc38cb66f49a48a470e567b8e5f9f07c49ba3c71a87035a15b12d9118d0e77 SSDeep: 48:mZCud0XYOXImXM69X/VXcK7gUK7IwOlXRq/Y1sjmZLVoz:mZCud0XYOXImXM69X/VXcKcUKcwOlXRm |
|
|
| C:\Logs\Application.evtx.robinhood | 68.02 KB |
MD5:
4e52d33a7ebe7dcc37a25ca99e7b0252
SHA1: 5637627b799acc06106c51752d8eae1b1c880208 SHA256: 46b43b2f75cc378efc9da82c513af803dd5133ff708bde0f05ea1c74c36c8bc9 SSDeep: 1536:sTpvyQ32R+EQtPpjRat0qFSyXgq1J3gojV1K0BloPvzhTgns9D3XK:s5yW3f1pjy0qrXn3gkLK03o9gO36 |
|
|
| C:\Logs\Microsoft-Client-Licensing-Platform%4Admin.evtx.robinhood | 68.02 KB |
MD5:
8f29599ef90a7da0073074031104831a
SHA1: be39f5d5038a639ec1a372bcfe737dcd8f6e3c61 SHA256: 57b89639bf4e6d19766cda77903d6d1e5c6b543682a2303419a0f4a8c9e00ff0 SSDeep: 1536:HQsTosX3y8Hu0UhT1N2L63/WaKAyM46OVvbWzYCiImUnlD:HQ/G3hO02NiU7KAy+YXk |
|
|
| C:\Logs\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.robinhood | 1.00 MB |
MD5:
efe718a8ffa107d5ec906a845aad3f6a
SHA1: b3fae79df4fb7c0561e57d6220fd449d62e4238c SHA256: 056b90b5d90d058955026be5f63e4ced245b6257cec4af8c08e0be24932c376f SSDeep: 24576:xGM/G2ASSANn7nwKvIUkkahCwMwA5EodBscxJUNH:x5/eANTwKvBJALMwA5E+scHsH |
|
|
| C:\Logs\Microsoft-Windows-AppLocker%4MSI and Script.evtx.robinhood | 68.02 KB |
MD5:
9340868a425dd934349076fde5609141
SHA1: 0f7d0dcf30ff30b51be99265ea6dbc3614b59a3a SHA256: 3bc3a0ef6b66cd5e44d9b0e4b1279a64329e537868ee578dc715b46eab287b5d SSDeep: 1536:4BiVbU11BXykIqiuFeEnseoZUcaEWBSa2A/85fZIsaMpI8gwK:iAbS1YkDiZE5cKsa2A85fysaMpI89K |
|
|
| C:\Logs\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.robinhood | 68.02 KB |
MD5:
c85b9fc19d1fe6e914de776886508242
SHA1: 0cdd23a3aeb6b3561209d516d35e09a295e36e7e SHA256: 9cecf20f02776d6e6697dd39b325bffc57086239477d6dc6c2f7ad1498fa7b14 SSDeep: 1536:lLQYT4HETJ+LMZMdd3zwoyBvI7IIBmNhEUekdQP7XqEiR9JI:lLQVNvE67IIYNCOdQPZ |
|
|
| C:\Logs\Microsoft-Windows-AppReadiness%4Admin.evtx.robinhood | 68.02 KB |
MD5:
1fb3e412bcd32e01b786d7c41ffe1359
SHA1: a63b921942c21e87dfd634fe25d009de7b68c40f SHA256: 6b9c83fec9e39952b71a90cbdb495e6a75bd41afc7ea912dd7ddac2236524726 SSDeep: 1536:piQzcre8Bf647DonYgJjCUHhl9SIBzIcCK4N/KBFC9TBDs0ze:pim18V77E/2UBSIBzIcd4NAq9ba |
|
|
| C:\Logs\Microsoft-Windows-AppReadiness%4Operational.evtx.robinhood | 1.07 MB |
MD5:
d7cdeca5e24ef5c32ee3a4bb4c692316
SHA1: ecd7daa9479b23f869595a936674956fa4f211ab SHA256: 4b504a2ddc2b4a3f489ec03bc547f20e132dda1cc5226f34f4613d59c85d61ea SSDeep: 24576:9TgoDYn48mGM7JN4kztbbrtnlB/N57ZnEM+0q2t4ZhDQ:3e4bj7JNZ/Zl9ZnEMDq2Mq |
|
|
| C:\Logs\Microsoft-Windows-AppXDeployment%4Operational.evtx.robinhood | 68.02 KB |
MD5:
4a4fcb4bfb0458245c3e2526d0be4f0f
SHA1: 8bad9c4e8a964b57612b43c646fe2b4bd8f85623 SHA256: c8503a0a76e215e190d5d5309566c2d68fd630c611cd7bd9c630ee57dc048a43 SSDeep: 1536:4Bi+sfr6QjWhSQYbX+bG9yND/ZNpHHqyLev+7/m3TX:i3sD6Ly9yxZNpHHqWew/qz |
|
|
| C:\Logs\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.robinhood | 2.07 MB |
MD5:
1da4206f7dab1672cca73178a2862007
SHA1: 084036da851384a61989fd57c253fd4aac264a19 SHA256: a8c61247d3ae409b8558c47dc4728cab91940472b7d69975558925848111ae64 SSDeep: 49152:BTumglP60PrwPScmLFtrle4zdYxLT0fBBVbSXI5H2TDy8i44:QH+SDLb5e4zqH0pB5j+Dy8i44 |
|
|
| C:\Logs\Microsoft-Windows-AppxPackaging%4Operational.evtx.robinhood | 68.02 KB |
MD5:
8e7f651261337e64f85b36f10c2910d0
SHA1: 0394148b9ee559f986d5222f8e61a76f1bb515c3 SHA256: 4a6541a0fcf9e6d423ab3525d548a17cb7d4d7470ef2786f0411847dab1bf183 SSDeep: 1536:b6UZKLGBJtMxwm190jcwCWt8tf94Fm2SnWtMbAA3WWVOFzPvgOeN:buC+wr4I+gFm2SxpWWYFzHSN |
|
|
| C:\Logs\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.robinhood | 68.02 KB |
MD5:
3a3b97b741784a8184a5cef058958dd1
SHA1: a5c95702056ec0686c6f6bdc4bc62f26b6023030 SHA256: 6fde0375756e5a8e62ded0b577e59072963ed9f85118c8695c5471ad5c75e3f7 SSDeep: 1536:CLH8Rzl73AoMF4+A7iF5ZbefMTg3LWVNkiOgInbXXSORJ33RaBDxToW:dRl7i9e45ZbeUTg3CVNkTLSODcBDxTv |
|
|
| C:\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx.robinhood | 68.02 KB |
MD5:
1ed3447991485e08d2f383f413c4ec46
SHA1: 89a126898b40dcdfa0a130e094f6bb80de8eb837 SHA256: 817861b7a64dc89bc9580733f60e3cf3f2980b36cb575121a5e0491976120af6 SSDeep: 1536:4XVKs3BIjJnnc6ACw69zrQRPCLXG8xFJVbysTMkXiaWJsqcPXSAha:4r3BWFncXvWxxZnfvWcPC0a |
|
|
| C:\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx.robinhood | 68.02 KB |
MD5:
87fc01911b9a5e0775625dd1efbafa28
SHA1: 7f7d35cdc554e0be366f90da02d08586a7d179ed SHA256: fe2c90c43f27bb7dbf6cea2c60bdb2838977b3b389a5509bf22a85e91bd1c73c SSDeep: 1536:xkt1ZD2u76iii3DX4YAWhZBR4c72WqWTdupPSxDDYES:hizfAWzbaPSeES |
|
|
| C:\Logs\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.robinhood | 68.02 KB |
MD5:
252262528f96ef398b9ea6a2881dcd95
SHA1: 580321d0f11cdd5448d60e4f26a51e364642a26f SHA256: 5262c978d2593ccd94a27e43094b53953c89181845c984a4e43ee23b539187f9 SSDeep: 1536:4XVbkIxJ5CK9q7ExUt39rCX43kH6rvCNUb8JZ2p59H5V:4BkMU7QUvClOaNTWp59HP |
|
|
| C:\Logs\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.robinhood | 68.02 KB |
MD5:
e7652561a390da15a396720e205f1efc
SHA1: 41f8a815ad0f9e18e26b8201c8e80126923f523c SHA256: e90de6c17d664c2ad285a69ed6f00cb2d67fa8bded4a5380f707653d4dbee1e3 SSDeep: 1536:xUVuIc6d4b6HxY1thdM6kzOHsZJGAIXHUtcw9:xSDRd4bdthdM9WsnWkX |
|
|
| C:\Logs\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.robinhood | 1.00 MB |
MD5:
eab8252dc4654079679595ba27d83cd7
SHA1: ce0311f77040c1f2297017ae9b4964242b202fc3 SHA256: 9113e3ebe2ff6ff65d229e692efe565f26fbc0ef71c575bbea75d864485c89d4 SSDeep: 24576:2V5cxms3vnSV4DIt9KrYMF/cxaEXR34zfBLRQEFk9QvGC:2Vbs3vSWE0G4zfBdFk6vGC |
|
|
| C:\Logs\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.robinhood | 68.02 KB |
MD5:
b35bb91ead5a46477f754fd085cf6204
SHA1: fd45f5839921fca3985653247e0fe0842242616f SHA256: 60c88aa5a891cc17544a069d13250a83ba037617b92ebb70f9c3364cdc4790fc SSDeep: 1536:1+aJ4Ss4Eoo3Omki4ExohKChXImMWVReMY8R0RwGOb+itv0UF6:13uB4o30sohKCoWVR5Y8RWGv56 |
|
|
| C:\Logs\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.robinhood | 68.02 KB |
MD5:
325f17afb1669659355fa0ef586ccc89
SHA1: 785800ab136c04f5942be51e438f7f7308d31e11 SHA256: bc38b48fd862f3be6fe3a7e431623eea09fbeb55677ab358416508fdaaa95da8 SSDeep: 1536:vOj8laOWMe5RHOPAlFSrgXLG4XnciAMXDCDajfn1h:faYfyYUDJCDa7nL |
|
|
| C:\Logs\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.robinhood | 68.02 KB |
MD5:
a6ca486a5446d0b72c66a934fbe729cc
SHA1: db269b2e2c196ede7bc800dfeda8b3691525ba3d SHA256: eea8b516caca69719415076821779bcf19307ae2866a86f3346499ac396cd105 SSDeep: 1536:m5vTzo+94btnYYzSubyAuEPpzSIyKaDYoqpkIt5yB/U15HNY1Q7lZx2E4c/:MvTzAbRY6SubyFESLPYoqZt5yBMB+1Ql |
|
|
| C:\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.robinhood | 68.02 KB |
MD5:
b1faa672f2f49bfd80bdd68c4641d9ba
SHA1: 96e22b7c5ecf5ba21636582090ee45525cafc1f0 SHA256: 5fda76dd9aebcd4f310f655376c7d822662e26bebf0d8107a613fda68a277390 SSDeep: 1536:xkt1ZD2KRs5Gj6qmGiH6txIuU/cB0EvPUKemICo5xKdsCpGfIkAmQKf2Ls:1G3hiH6txHwc+uPTLIxxIGMm2I |
|
|
| C:\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx.robinhood | 68.02 KB |
MD5:
6eff2fb778cee704ee9375f5a3ef2f08
SHA1: 26bf95f079199ec3fbcb500d32d662431d759192 SHA256: a5a53aac87df50095a124b51b00028fded97a4bf5d0e1a79d03f6d6890101825 SSDeep: 1536:AxPeYuFTwdhcaD/njJtq8SPeYI6yc4TnRkTJbCoc6kj27H/7F/fm:A0YuFTwdOynjm8SWYCc4TeTJ+oNkC7fQ |
|
|
| C:\Logs\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.robinhood | 68.02 KB |
MD5:
b1d397b57ce97c63ba79ac6b62ab4380
SHA1: 05276fd24a883eec26fd4f3d1351ca9afea230ed SHA256: e043cb230060eddefab7c411737e17bf84745e52ea23ea81e1a311e532ceb9f2 SSDeep: 1536:CLH8RtJ6LS1cAN0efmvkBdC4UzArr52LTqtUExNFMQVN8MGk9OxXRnLToVVt:dou15FOvky4werELTaUExNFXVN8MHQxG |
|
|
| C:\Logs\Microsoft-Windows-International%4Operational.evtx.robinhood | 68.02 KB |
MD5:
857b3eeade7a840f897c08fe6345c7c6
SHA1: e349303fc6a021d85d45541698f43e58ca88281e SHA256: c94273c3231b2f8b1fe5eefa5f201d958f1c37e12a326f1790bb3130c8609a33 SSDeep: 1536:sCPgGLd5b2/RMwjkp9kiSnMTnDvOiCrPSD0Xn8Go8p3CtOsDR:nIKXb2/RJkXnLOPk0XnABJ |
|
|
| C:\Logs\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.robinhood | 68.02 KB |
MD5:
89cec96ad8084aa1793b3c4fea9ad205
SHA1: a523dd47c7066c13bd8210f0b064b894cfddbad3 SHA256: 430c8618a114fdc447dad66a29f4df4329c80f3fefd3b689db1cdeeec4dd9413 SSDeep: 1536:xkt1ZD2CcyKJgucgkpeEqQxbzY7CSTG8Y3fODqPSP0BS4P65:nTeu5+qQl1b8WKwC |
|
|
| C:\Logs\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.robinhood | 1.00 MB |
MD5:
b06375ab677098908322bda37b426dd6
SHA1: 4cd9c0ea567ecea4be9f663da71a021c5eb793e8 SHA256: 1ad924ae02ffd37d8dc37e95e626f0c14458fa2a96ffe5539b34eaa907ac193b SSDeep: 24576:kY0b+SBQIFJoA+9giVMqHkX9KJJNOseoe48w:kRbFB1JZiVnEX9ONOseK8w |
|
|
| C:\Logs\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.robinhood | 68.02 KB |
MD5:
ca67f8d455975565a8f090e3ccc4e7b0
SHA1: bd7b779d0ab4d7630a5c4dadccc3f549cf33c807 SHA256: 9a4f647760d649b2643887870b4af05b74513e91e6330c01667e49dc835cee02 SSDeep: 1536:xkt1ZD2JuWbcDeO+g9dINr/Ow/3wQ3V4osuCuEnvwDSMHIasWnpwTYcNI8y4/sAe:9HoDeOpc2woQ+uEnomMoaVOTNZjkAYl |
|
|
| C:\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.robinhood | 68.02 KB |
MD5:
69a47856084a8a37083d394e3fa016fa
SHA1: 16241da87cc5691d1c21b0de93e3e1375ee1b218 SHA256: 9dd5251322a55d40a6ee558714640cc490f58b2be1bcc0f8fd76e1ed0343eae1 SSDeep: 1536:CLH8RrJ4b9rldOR73zWfO1CgSvL7d/xJHXBYk0vgZ3X5r7:dX0ll23AfTv9/zHXBl0m/ |
|
|
| C:\Logs\Microsoft-Windows-Known Folders API Service.evtx.robinhood | 68.02 KB |
MD5:
95f28f91d5addf9edd0d189da7a49364
SHA1: 4f92bbab008fd23e577d0cf4ae4b2b2aa348a54e SHA256: e9db6f9fa07c5d169c89bd1e113b5eb750e450f6b3dbd4435dcc76147be822ce SSDeep: 1536:m5vTzo+9veoFMbHqHYopP3xNyjtqGzQPkbo7QnpoZGugD1LAsY:MvTzQbHAtpPIMGzQPkE7QnDug5Lg |
|
|
| C:\Logs\Microsoft-Windows-LiveId%4Operational.evtx.robinhood | 68.02 KB |
MD5:
f38051c7a16b1512a3143a9b8a38b836
SHA1: 45a5afcdd1343deb500d90d7bd74afb78dce9d6d SHA256: d9b3745ae1e1c8a748ef1b058fc3665532d4eb0f25020765ea5b0b6feb015b13 SSDeep: 1536:1ZM83dBhK1pOCBk2EWhq1P6K7j4FvkTPXwHYvY:1Z/cw6kOhq96RFvkTo4A |
|
|
| C:\Logs\Microsoft-Windows-Ntfs%4Operational.evtx.robinhood | 68.02 KB |
MD5:
dfa96e11f05cdad1c8c96370dde7ac87
SHA1: c4acfd98307364dac7b09a27b52423f9923d3e32 SHA256: 5e9a52cb8684acee15402b107fd6c485f3eba4efe1a3026ab9e5e29e94d8093a SSDeep: 1536:CLH8RvY2IW++JtM7wwEmCtC6PIXiCTUgfBJVdpeWDDP4POdcbY6qN:dO2djM7wwUvgSCYcpNQjklN |
|
|
| C:\Logs\Microsoft-Windows-Ntfs%4WHC.evtx.robinhood | 68.02 KB |
MD5:
02be3de66087529e34b46d8c5638e2dc
SHA1: 6c5a7938a481509fc12debbb8c1939a4d52aa7ef SHA256: 2a52639e9db839b65abb89848fe60236c1a6c8876de7196ee5334f467011997c SSDeep: 1536:CLH8RYjfdR4T1XZYKYGD/mgGPdvv+K4sknNCeCebTXgwVRqiDLX:dqpRU1XZKG+gGPdGPEeCe/XgU5X |
|
|
| C:\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx.robinhood | 68.02 KB |
MD5:
2616dbcce837cb05a1ed0f04771c5215
SHA1: b1bd7cc370bfcf5c398c7eea052ae0d564b4c545 SHA256: a87d3fb913fc86e5427c5b1cfd27ed741dec00d4d12a025ab9abb14336c6a7be SSDeep: 1536:CLH8RWbYSLiA6PpchpQJoYnmndfc2UYKegyzwmlI7yH4BT:de7h6PpYpxImdxUYKGmNBT |
|
|
| C:\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.robinhood | 68.02 KB |
MD5:
b0e5e764accc69729efb1ffa739ebc0d
SHA1: ca0e6f04cdd0ccd0881c26ec6905c52bad9639f9 SHA256: 723556898128a29c97085fbce185ea02391a6b9f577957987b4c7931c5779b9f SSDeep: 1536:4XVDoe3+SAmWX0b4fJ/JxyonXiUOihGEM1M6MtWIPzMnMPlaERg:4qLEbA/TyFUOe8M6MtWOMneg |
|
|
| C:\Logs\Microsoft-Windows-SettingSync%4Debug.evtx.robinhood | 1.00 MB |
MD5:
2fa1eb2c4fb69b0043dded415670eb4b
SHA1: bb3381224c42ef2f2f7770bfc4df1b03f503721f SHA256: de79e88693b6ea479deacaa7084384ab0b8a87d216829f977b0313f849d8b3ff SSDeep: 24576:Q0p7oVkmKNhsuHPQury+hvDwufeyz0PNM8H:h/mx4hvoyWiU |
|
|
| C:\Logs\Microsoft-Windows-Shell-Core%4Operational.evtx.robinhood | 68.02 KB |
MD5:
d120b0b1e62412d2fd1ec548643f9cb1
SHA1: deaf5cd08da68045aebbf851dd33397969d0da9b SHA256: 4b38f91200c7cbd8cf395b9a0bf4b99c27231de41a9d30138d4121bc5b0e04d9 SSDeep: 1536:Gx6I/RcTunglh+1Fu5TJtZELauZCGJUvGSjrHSW588v9M5w:U6llh+1Q9tZTgCGJMGSjryZw |
|
|
| C:\Logs\Microsoft-Windows-SmbClient%4Connectivity.evtx.robinhood | 68.02 KB |
MD5:
6291ba012ce283f7162270bf85059d9a
SHA1: 0ce31fed75091114089c3f5217bd3bfdfb14593c SHA256: cfd9904752de03fb36f2d6fe36304ebcb4ce07c4aef3e96542efa6dec2374948 SSDeep: 1536:4XVmJ9JfiKvunY4L8yvE4Xd0At7fm9tahGX:4gZfikcY4goX1tS9rX |
|
|
| C:\Logs\Microsoft-Windows-SMBServer%4Operational.evtx.robinhood | 68.02 KB |
MD5:
db3fd0cab81e2f5ec053d19bc201ecdb
SHA1: e93e5984ab978bfe6a26bb3aaa0525623e676c68 SHA256: 594eb73a8a0d23c7b554fa08ce2dd953b8c4ff7d8aa3e61a261d61db83301807 SSDeep: 1536:m5vTzo+9AQA/P97YDn2Sb17BIolEd1Bae90qmRK:MvTzMd7e2w17yoase90RK |
|
|
| C:\Logs\Microsoft-Windows-Store%4Operational.evtx.robinhood | 68.02 KB |
MD5:
5c0c6a1af120fc424b266c60e73659c3
SHA1: 8dfa7201e9e6f90738941df18fe162b13eb3e40a SHA256: 3522e81752d477c3e6e94b8ac95ec30d7af65c890a7cf5592400c72bab138f7c SSDeep: 1536:xkt1ZD2QQcmqEEWdo+CMJZaNsUJTEpogwI7ejJzK53enKdAgbkdIN:gEhXoJMDwI7ejJNiUE |
|
|
| C:\Logs\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.robinhood | 68.02 KB |
MD5:
94c07d1cac1e3c68894d1d12fb406605
SHA1: f2bfe609d73d3decfddec65428f1c73f9add5f63 SHA256: 2b0dff6014b9ea162605224d9de33a67b3b0a93d518f4285eabd01c586c646f1 SSDeep: 1536:xUVHgqQruNcsAgc30YKWVQE4YDg+yLOloImnxZpO6GyNMm2eYa4B/:xSHgqQrueXgc30PWVQEzDqL1VLAHy+mu |
|
|
| C:\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.robinhood | 68.02 KB |
MD5:
a9c5f6bdaebb3fb3db62b6612eaba99e
SHA1: 25c45507e700a136f1265830b5fe80a2a31c251a SHA256: 7d5d53e796f1c1d0da7880b805e051e69ad87f4c420a3c3c2afd2b5759e9b345 SSDeep: 1536:yTJeSzNUEcVg0tkWz+KQS6im5taScEn5HK69KHVj2RWceea:yTJewN9RwFQS6i7P+q6QHVjjRea |
|
|
| C:\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.robinhood | 68.02 KB |
MD5:
4bdce6c316c14081ea6ca331b2e072d8
SHA1: 5c9aaabe65f0799f795caf6cff15b62320039ff0 SHA256: 8a04c13b7915c78d87d7ec43c0ac87d670e6b16a42c0318435a2b086b4e623e4 SSDeep: 1536:wZkumnDTLdby+KkFAG/qVhsFXPHvHD0g+wxMK8IXp5Q:O6LdbLUCqVhsFXogJ+W55Q |
|
|
| C:\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.robinhood | 68.02 KB |
MD5:
e15a861405b7ba0df79ab13848115f88
SHA1: 4154c6b676f5487c18729ceb0d265802060c6a44 SHA256: 875478e2c257694ff9dcc1072bf2ec3aa4ee99bfb9ce0cf4875b63396b87ac88 SSDeep: 1536:4XVcdGQplWDqBfHJr7JWwEJrNTLAoJZjiSXc+OUG:4adGQnWDqBBJWL5NTfZhXc+OUG |
|
|
| C:\Logs\Microsoft-Windows-TWinUI%4Operational.evtx.robinhood | 68.02 KB |
MD5:
4373a159c31bcb640f2c6cb89d2a8bb6
SHA1: 7e69ce2b7b0e5122412c12d4a05da6a490675b46 SHA256: 27220fda436fdbe28f60101d9d4cbb440f3d37ae5a53f4b7616d40e36a039ece SSDeep: 1536:CLH8RfC6yP0WFiqb8Q1YV45C0dgNByN9wxfCIfjUBSQbooYT5d1l5i1:d+0WlNel/dCIYBZYTf5i1 |
|
|
| C:\Logs\Microsoft-Windows-User Profile Service%4Operational.evtx.robinhood | 68.02 KB |
MD5:
f40641a3a37e73edce587447ed097e8d
SHA1: 788fe595d31351a1bade9d66f4c6c469e887e0f7 SHA256: a7d24f30b5cece6828a49edcdca9cdcf758f757f019e97688a5e2b0ac097a669 SSDeep: 1536:1/JxNtZwFGLKj6ldM+EJ3toiRvFSQwToGLVR9IS0TeU46KYpwst8:JN4GLh7MJJCuSQgoGLLVhmA |
|
|
| C:\Logs\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.robinhood | 68.02 KB |
MD5:
a2e18ce137204c47ecf99ca0305a6abb
SHA1: ec015b904a0e8436c5f124febe242ecade569953 SHA256: a4ff7c333a47a6668d8a9d823909be997b6f072093dca510ef425c316398d115 SSDeep: 1536:CLH8RrZMKQ8W6yskeu/8RQ5zbxTRWL3f0G2ybaUNuzNJXrIWLCiHFF3GydJm:dK8WA1uOQ5xULP9aUNuzNJbIWWiHFa |
|
|
| C:\Logs\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.robinhood | 68.02 KB |
MD5:
2b1eaf75b0aaf3cfcdc291fdea75a59b
SHA1: 5b85fe13c6dcde166d1c8ee0bbd7bc02e8a2e10c SHA256: 181fcb61f7ccbd03034c9e30febd4bc1089e7ab921401d38240fa0e09d686d84 SSDeep: 1536:m5vTzo+9hdFbsHHfW6fY0KNVjDQ/Rrq3vQcrXRDqdVOG5hpcli4phbvxM6SDUpMG:MvTz1C5YnN9DQJ4X0xjwphbvzpMG |
|
|
| C:\Logs\Microsoft-Windows-Wcmsvc%4Operational.evtx.robinhood | 68.02 KB |
MD5:
1a6c57e36fb24b94590d2a0ee97e2d51
SHA1: f897480408c57b18bac0deb1b14bc6a1c61778d0 SHA256: 27e35527a2680c00ccf8e0d0d65f75340b3d47bcb60dcf49d21ce39ed47680fa SSDeep: 1536:bv/yNbLkQh6VHI/E8rxPZKA6mYj24b3ChMKQY+p9j5bZ5EG:byAVHI/JhZbtCbcMKo5bZ5EG |
|
|
| C:\Logs\Microsoft-Windows-Windows Defender%4Operational.evtx.robinhood | 68.02 KB |
MD5:
8af20cec97be4e4c27bdaf6651e1becb
SHA1: 7982df11b9eb0dda526db180b71f1e4ffb277db2 SHA256: 250b43949d80d9b6e1ea3526042ba505dc6ef03d9c36dbbc7981b2f83a495eb2 SSDeep: 1536:1SP0GlRRWBhL+sZlUMIwwDHQdKtBCBkTRNS0wwYjlpNGCF:KRWZQwktIBkTR+BNB |
|
|
| C:\Logs\Microsoft-Windows-Windows Defender%4WHC.evtx.robinhood | 68.02 KB |
MD5:
f9d455fc0efe3dbee10835d40fe5ce0f
SHA1: 06f3a35f886632615a8b6fe971cd365e5c119900 SHA256: 01e413837a6decc6532a067003c78d8e40b918306354bb20253c091cd2f0dc47 SSDeep: 1536:xUVifZiZdmWEv9MAAnJSH52KY5U1ViusG64BVRKTEk6bdpJ3iXyub:xSyIZQWEv9AJ6Y5U1PsGFBWTEk6bl2yo |
|
|
| C:\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.robinhood | 1.00 MB |
MD5:
76f736995ab41079b523d5991b76e12c
SHA1: 49ca752c78410fe05e629cfa9c2bb212729af9d5 SHA256: 31da0e3b1bcc13fbe4b62be54354168472ff05ba4c13c37fb91a076d5f19b8e4 SSDeep: 24576:TjgRSYwtVWzzn+umSap2GseDo/RpQhzI3PK5hVe+QKnis:Tj50zz+umlBLcjQhzHD |
|
|
| C:\Logs\Microsoft-Windows-WMI-Activity%4Operational.evtx.robinhood | 1.00 MB |
MD5:
f0348e8954ea6eec817d910136992a69
SHA1: f7ff0c8dac71509193dbecb8809b09609eaa89c9 SHA256: 2161e9f0e2a3cb083f745def3b3216a01bb371191b2ac6074694e7da010fced0 SSDeep: 24576:D+V0tPRd3SpxJQ4g7urAQreKYgMErnuS5CylKIEcrE4:U0tPRd3Spxhr+krng7crB |
|
|
| C:\Logs\Security.evtx.robinhood | 1.07 MB |
MD5:
b712c7d7802f3391ee388f86f76a7aab
SHA1: b554243e3feb47684e0ad5d4d631ab1dd47e192d SHA256: c68a9fa5bc3531e2986287407ac5f14f969f1fc3b745429a101d17b5129a4136 SSDeep: 24576:0Q/l/cJJ7mOTXQtOw2mOncrx5owD2ilcZ2LK9yalGgznt6+Th:0Q/l/apVQPx9rRD2SaFyVgxZTh |
|
|
| C:\Logs\Setup.evtx.robinhood | 68.02 KB |
MD5:
bd5da3ef75d446a05ce325ae59d97e1b
SHA1: 60947d94f633e08c177cd41dca9402b0a66665b2 SHA256: accd49b829750bec7510612d49b792f4fddfdc8aa0ca3be4a659c69e6d0759f5 SSDeep: 1536:m5vTzo+9RexLpktwRrxjdfjDChzaEVWDEtw7BBVE7i7XdNQVwo2:MvTzperHLxfjwrVWnVzOQX1o2 |
|
|
| C:\Logs\System.evtx.robinhood | 1.07 MB |
MD5:
7122ab269a54585c0acb8820d08a97b8
SHA1: 56b987a463176121bad539098fb1f4d0fc34a7b1 SHA256: e372d666db3403350614f1a272e05ed0001947c93205495abcdd44ecf8f338a7 SSDeep: 24576:pE65wf/1bJBxpYCnkYfC7GTLpUQygTjN/8SRup5BqnafIti:b+n17YCkYq7GvLygTlXafIti |
|
|
| C:\Logs\HardwareEvents.evtx.robinhood | 68.02 KB |
MD5:
35ee24ed033a94ac6161ad561d3c33b3
SHA1: 5161e0065545c5ba0958bf770cbb036be4c4f1d0 SHA256: 47bde7997cfeb37bbd0e5271c0c9982fe119023c5ad7f471246851a73750e99e SSDeep: 1536:yTJeSgc9G379pQ29X8/s4KCfTcT9UP7epGtSmVZ:yTJe9cWZr9M/hRae7epGtRZ |
|
|
| C:\Program Files\desktop.ini.robinhood | 0.17 KB |
MD5:
68b10feec77acb948d56258cdfa9d7e2
SHA1: d9cf4154259a34cdb1d85b4c1cb7049785ed0668 SHA256: 3f980ea9c02c451b641e8ae02bb62dd491b79997d74390a93745057408919534 SSDeep: 3:shyXrs3uv6net7ZKwUF51cH9jY25j4gXN/tDSdqx4FTXGrAsHolmhOd4B2QU:QyibeVKhS+25j4gdsdKIac0BOdEU |
|
|
| C:\Program Files\Common Files\Services\verisign.bmp.robinhood | 2.64 KB |
MD5:
fcc2c29572596bc16f6d2e993167bd8f
SHA1: 128a56cc3f6f5f043377495cd3ecd3437cbcd765 SHA256: efe06ceda5152574acaabdee0b05a8f0d1a37ee60469b6722da6d23009085232 SSDeep: 48:Ozxc2mf9/J6Q16ia+S2SfRLsWnCZ1AE9vwRT+SVRVKhuRbaOioTaCoteV2+fIK+E:+69W6SJw9Z1Aca6SV3ouRyIaC6GGE |
|
|
| C:\Program Files\Internet Explorer\images\bing.ico.robinhood | 5.31 KB |
MD5:
71d8eba9f3e2c329f0af26672c17e5aa
SHA1: 4fef4a9b1baed4e0c4741640f5acbebb4cf7661c SHA256: 25790e82d9f36a5d7aa51fa52a2825ddc61ec82d0e8dbde6461f92214b1d5b7a SSDeep: 96:BtNeuTyyRstJqKEu+YqItO4HquAYt4wD3yIbUzUCq+9aktjd1gWXEoXh7pINq:BxsqKj+Yt3AYeweIboUpG51dqWp5WI |
|
|
| C:\Program Files\Java\jre1.8.0_144\COPYRIGHT.robinhood | 3.17 KB |
MD5:
ffce71cc692df5b0a9975c182bfc3075
SHA1: 4f7c760643df0cea4849a1c2edb07247db523d38 SHA256: d9d1a58c633f6a460bad1a5f96b6ee76b86d9d67419bf4b585bfd68a56c04b74 SSDeep: 96:b5hyfzkwIyA7WjIWJOrB863ug8crGNuGZSV20:b5OzfIy0Lt8uug8crGUGZ420 |
|
|
| C:\Program Files\Java\jre1.8.0_144\LICENSE.robinhood | 0.05 KB |
MD5:
7f9af18a95a43ffd64451756bf1f9c3b
SHA1: a8fc9585296cfc3a8398449698aa555dd3a99956 SHA256: 5b491f2ced3edfb5c428b1cea943d65cdcbcd41a57c8ad04bd76f7c0ce12e76e SSDeep: 3:oHkKmdzv5Bcoe3ooz:oENxMW4 |
|
|
| C:\Program Files\Java\jre1.8.0_144\README.txt.robinhood | 0.05 KB |
MD5:
760d6d92616febe437dc1d0b05f6722d
SHA1: be567c5b3ac2497d6c1536fd6a5868cfc3c821b9 SHA256: d966f37b6a77d6addbceda3033c2a581752e6fe0fddf9be3d700602d4ce569f1 SSDeep: 3:oHkKmdzv5BcoeU9CqNXXn:oENxMO9/Hn |
|
|
| C:\Program Files\Java\jre1.8.0_144\release.robinhood | 0.53 KB |
MD5:
797e85f3e9b83d0442c411a49b663eb1
SHA1: 6f0bdd32459679cf33e37a55db9fd0684951e973 SHA256: 8ca93d5113a8b33dab7c5c9bae9d049c346eb4b631ffb77a05a9ff9ecb7e1834 SSDeep: 12:kjuFkmKoEE04n2GgK1ivy0D/AjspFuL39eMs91qCsKB:7DxaRPD/AhJeMs91oQ |
|
|
| C:\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME-JAVAFX.txt.robinhood | 62.44 KB |
MD5:
60d30399c22f8ac05098205337acb512
SHA1: 029620f4c32a79c30575474b4f4dd184d7fe86f4 SHA256: 5ab45d302469b2ed63fcbf455b6e76478f3b3c50b6f0d0804b45dcc2646c7149 SSDeep: 1536:euHRBzM/Kb+9ZTUngRMJc/IVJEvpptwfoHZ4m+dLZafpLAs3RdJ6P:eUBz+Ka9Zk6MJc/IVJEvrtwqsEx0Cl+ |
|
|
| C:\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME.txt.robinhood | 141.78 KB |
MD5:
b843d55d2196c83b040d353f67801c7f
SHA1: 67b10497d783ed5fdbff538cace8e91f284f408a SHA256: 79322794f4c9fbbe3db679fe5594579c99055e277e41033dbde75ea1e49e2a34 SSDeep: 3072:s6rDixermaBnhxpRdkQWcmmyqkV5TxWOuGmvRHn7cwwOEI8H8I9H:sODixelJ9Rp/chzuGmv1nNkr9H |
|
|
| C:\Program Files\Java\jre1.8.0_144\Welcome.html.robinhood | 0.94 KB |
MD5:
81ab5f76c32ee17e4e54f0c6916be33e
SHA1: d774efd03834018547487737b3bf350bba59a34e SHA256: 8abab44a00ac8401daf41f241324d9be8688ea8068bdbfc259afc9485667f637 SSDeep: 24:iiEZNxb0x7e9W5E/epOnAwU6diqZzxYXLlI/xnLOGGfOW:TEZLb0te9ose8AmdiMG0LpSOW |
|
|
| C:\Program Files\Java\jre1.8.0_144\bin\server\Xusage.txt.robinhood | 1.39 KB |
MD5:
60435201538a1b021722c8b6183d4ecc
SHA1: 0ab8d289b40b59888c68c8ee9bc67c77910c997a SHA256: 4dac87e833f75ab1c25a7004405add8624cb728f5e93308783d60baaa16aa117 SSDeep: 24:785IRAsxjrVUP8hBdEw2vmm/pqP3Scpji1svaXMkoIAIDL0/DMRcIOf+X4emeI:+IRAsVpUPEr0xqP9csDIXDYrp1+XT2 |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\accessibility.properties.robinhood | 0.16 KB |
MD5:
861df8d590f0e356f9406447a05a0504
SHA1: 6dbbf5635554590e121bd43bc01488c83cad98ad SHA256: 76f6926aa5116e7dbc40bc1ceef5ab1a198c1857654b70e96b6c2f9022d96d2d SSDeep: 3:f8pe1d1mIQp1e3L7+m5EQwkQU+gqTAJJWY7H50cZt2MHx3SqWUUEj:fKm4IQLUnZ5EQwZnvsnbnWMR3XWK |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\calendars.properties.robinhood | 1.36 KB |
MD5:
28df2cbec6493900a80008f92f3d487c
SHA1: 354c8fdbc1473f6b88e6e5cfe312968b8cf7e43b SHA256: 5adbd712207f1222fefa48c0b29f37200e4f50d9e21cc9cf54551d9ff9833f36 SSDeep: 24:MVLj2tOquKLhUyaMin6P3IgGTgDR4jFzms9AWZRpfdedeiIxFz:8Lj2QyLT3i6P3OEOjFKsbRpfdsIn |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\charsets.jar.robinhood | 2.90 MB |
MD5:
4e67df3282953b30ef7d4f6eacd57246
SHA1: 89409b5e82e42227733a811a166021c8116ee24e SHA256: e142b868aed2d0e0b9098562a91dc55227461302a044df57d37327ca22379d96 SSDeep: 49152:/SaK2JcKyo2Y8X8mBx6LKh/iPtg1EbNxFSsRlB6st4COrvujremz:6/2j+Y4846LMArROrvuXemz |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\classlist.robinhood | 82.39 KB |
MD5:
18fbb8b980eb1f92f500815b8107e54d
SHA1: 0c34ed04d737429b40854b49a9d27c84951cf3df SHA256: d37564edb07f5c2bd7c9f142fc47e4c061255dbba89a2f41f427dad58b70916f SSDeep: 1536:cL+DTkUnOYKBluLs8sHvh8uG+sd2bDCXvOQBhQX5xiSd3etKPapcwf:rY3BlO0vh8uG+sd2bDCXvDjQX5xXxetl |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\content-types.properties.robinhood | 5.42 KB |
MD5:
d96682caf92b9da2d390bc9e374ceda8
SHA1: 2898e44b92bbf44cd1dc9e2f29c12035da97f54e SHA256: c99b7205eb4b89ce8801339225962ef85ab0737d61dfe49b2fba664835fe66a5 SSDeep: 96:dqXNEVG5MZfV79WL4dZwryFKvYB6iuo4tlwqTv60yUi77g8YZSs0/1en15tS6wO:l4SvdZBFNuoElwa9Ji/g8dZYdHV |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\deploy.jar.robinhood | 4.81 MB |
MD5:
e596297205af9a00fe6f52bc7c030c08
SHA1: fb601c18f161359e27bc2ed418a3d16a1d29abca SHA256: 5610c134835e0700e2d39b5c63b2c76ed7935bea9d6eb14dd5bfe980a0ed571c SSDeep: 98304:wqWjt7rDGZJyNx581G9ZmFPay4EUIMiu08YMq6NWSj8k1le:VWjt72PyDeG9AEyhUI1N8NGsI |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\flavormap.properties.robinhood | 3.84 KB |
MD5:
495a7df5fc695773e38e0e6e165d40ad
SHA1: 07458f424419e934296cc004b7de2dfcd16009f1 SHA256: ab11a17016fad055c67c9c5e331687ca7048fe64d7583842d39cac4dad6452be SSDeep: 96:zM3fOqNV1IBu2tqAdOq/O1Xt9HBVJcQkLv:uDvIBSAdl2BRbcV7 |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\hijrah-config-umalqura.properties.robinhood | 13.64 KB |
MD5:
c562b54666dbd2bc431af5cf2a93d57b
SHA1: e7efca34fa66dd39055c39c04fe649fba854ae9d SHA256: 0f378f8fbfc6cb28f403b4e5748f4fce8ea3dc7f4d8aa53dcd000bc107b9a0c8 SSDeep: 192:zR/YbeCcRByplbSKI/YbgHb+u2vHUobl8IR4xrg5hT1AjXaWRtlUbOxl2W4/DKaX:ObetypYKI/b6lJl/aj18bE2WoiS |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\javafx.properties.robinhood | 0.06 KB |
MD5:
c4194999e98975c660295338d6655e34
SHA1: baa8f0e4b6949490128ef804dfb5af3d2f19d014 SHA256: 6337e1ed9a4a8f04b77039a7cd99e3aebb56c1e786270d688378c52427ae9aad SSDeep: 3:NlvB8fgAwHIbE38kB/ROJY0U1tbn:3vB8byIg38oMS0U1B |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\javaws.jar.robinhood | 922.05 KB |
MD5:
24744a30232f0f8450a644f135e86302
SHA1: 6f1201c99368bd3b17d347b3a510b629da7037b5 SHA256: bf71402b2d17a19e3941804f37f257ea466d61d7acd3cfe6b3b8a1089365e23e SSDeep: 24576:H5+1HVXHL3vIcl2tg7zPL8dlHfE8ykq+bV8CEcwjtBH:mMtyzAS0qMXw5BH |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\jce.jar.robinhood | 113.72 KB |
MD5:
0b313b34ca4ce42d7f14117242b3c959
SHA1: 6c017a27a5866349b8bb710f9b94c9eb45af3f64 SHA256: c30bdf61c6d7d6adb02f136e661837330949306f81ee628b8454270bc880e6b4 SSDeep: 3072:eN7rqbRx2nJSFplj3ocpVbk/ugPfdqOuz4nwaQIg9keMm8:0yn2oFjj3ocfb7gXdq/zjaQIA+ |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\jfr.jar.robinhood | 547.45 KB |
MD5:
757f189a0e35d19a34e67d76d9a240f4
SHA1: 95de4213be403e442e323ecb4ccf70e49ee373bb SHA256: bdcc848bb517af6f22babb9c386ed12641054f0e71a7c5dcd3e20beeecb9af7b SSDeep: 12288:v45j3o5MmilX+wbD3RI2j1pVZsaQlopxqaYJ1dZ2JuM3:vgk5MFOQ3RNFEaLzYdZ28M |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\jfxswt.jar.robinhood | 33.14 KB |
MD5:
ecaf1f734a00b5bb4bc865852ad47bc6
SHA1: 28f2c1c8bdd63acdc1184be7928fd7286fa915f4 SHA256: 39ec0a2e1b379210e9de28329bb4162fcae086180b0cb268c539199c4185a35d SSDeep: 768:/is0MEaT49w+hhjB88hhJgxsJEGetz65a6/9Eb/ohJqsEd9DM:/ntE649wmNB8YkUg6OQhUQ |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\jsse.jar.robinhood | 570.89 KB |
MD5:
2c7d98bed506eb9536ad7bf6c29406c4
SHA1: 2711b3c8f10aea06d6703b29b844e31f7a090a2d SHA256: f98aaedc0e866774a880c99fc50197fdafa8e26946c223d38ce224880ccacaf1 SSDeep: 12288:a96bA9c9KzBn5pO8SrlXBEUUfMpgWaVxp/XqeJF:a96bA9gIp3yrlNUW0Ce/ |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\logging.properties.robinhood | 2.41 KB |
MD5:
6d8ee19f73d2061ea1d79cde44074596
SHA1: c1eee5e8280fd89891e21976e8be2be842877519 SHA256: 6c3b29172947513009b2947af91826348967921a5f10f5ef48ebb06cbc5af7f7 SSDeep: 48:Dfv4VfZWszVp3nYKgCu0nLJtDWebxPM+66tIDPo1BlbPNZWyZRfMjDO:D6hWsz7IbCNtDWebxEX6SDUXL3/R0W |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\management-agent.jar.robinhood | 0.38 KB |
MD5:
dd86c94dda3950b1036bfc67ef807b27
SHA1: 04436ff3c50bbd7553ef761b911e3a9863b8758b SHA256: e8d7ecc5d97dd971d13f7fc6c7ddc0cd17cb56c20366b13b3a4c6ee7ad39c037 SSDeep: 6:6S+/PUotDQMjReYtmXs5L3qPGEyZy2HRVr98KDEOgXveK5UPDwuYoTSBif33uKhv:/2PU2ZRZ4XsVwGBHRcOj3LAoB3eKhv |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\meta-index.robinhood | 2.08 KB |
MD5:
0a09861f1c165e45ba198978bbde60cf
SHA1: 1154cbaff103ba016ce56c971a2bb02c006da8ec SHA256: 494d0d39a66bb9d9498bcb77176498b21107a3863737af132ef879f8f081ddfe SSDeep: 48:WesrR7D7qUXGXIIP47/S7o5NZIWsiQ8p3QRkSOy:yDWfX98IWswp3QRkSn |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\net.properties.robinhood | 4.38 KB |
MD5:
790062971f58291d266986279868de99
SHA1: e9e798e6fb551e953b95c63525ab755f96129325 SHA256: cf4ca07283ac2161ee54cab32d1c27064323f5f904ee8eb633cbf89feca19022 SSDeep: 96:cvc5gl7wDlkOnfVI0tBc4V2+k9Dr8Tfa2PdBcd:c0hXfVPV2+IDr87r4 |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\plugin.jar.robinhood | 1.83 MB |
MD5:
7bda20813a7bcce07d8392a0015e7036
SHA1: 99826a35de63537398bf5678e79b707dd9c806f7 SHA256: cad41b5de49df4712474871380b43cbccd14314e5f65d85d681a3753da87fd47 SSDeep: 49152:1uKTZWW7HBxQGqOcnYIX7bVuDpsmbOH6SR6d/JkrC9yAEkqlt:1uq7LNqBYIX7bPOOaSR6d/WOIAEff |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\psfontj2d.properties.robinhood | 10.16 KB |
MD5:
c5bbb1e560a7511eb4ea3a2053c1f73b
SHA1: 1aa0bfa5aaa779199340d6bb523aa489d1262e58 SHA256: e879a115380105d5d66e8c7ae1c6ecf66cd5a9c8b0eb81f37e4c8db9b36c341e SSDeep: 192:Er6SdtoqCkCkiICoA0SQKLsbbUXvhfCH/mdSjRfz3aQSDcgcrAl4odfFCclzP:EVdWUCkNCgvuvZe/mEJ7fSDmAKodflD |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\resources.jar.robinhood | 3.33 MB |
MD5:
645c69ea6eb183cd7b741aa297127544
SHA1: 40bd959909cb761ae8e4e9fe0df353772c39b077 SHA256: 4d7244fa5cdc57acbb5aa2f959a5424e6de7f5c3cdaf99e0355925aa1ddf0177 SSDeep: 98304:GpWCi/Ne6B83XBHFVrK8iSwzJTEXqQevdC5:BJlFWBkSgEXq1Q |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\rt.jar.robinhood | 52.03 MB |
MD5:
c11b6e748a0b16f60ae61a379dffe4b7
SHA1: 16d4bcba35a561e8fd0b361a206e5d0ddc0f64de SHA256: 4190feb4cbbd5ef832a9376476405d29ac4ad16f8b7a0b26d4cd1034166b381c SSDeep: 196608:bX2jlLDUxHDrY6gnzw3OH2/Um8QfeyISld8kkLe7JzQKX+2+c4RNE:ElLMHDM6U8OW/UIJ7JJTu2+8 |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\sound.properties.robinhood | 1.19 KB |
MD5:
72d12fd14a5d66a98221ecbfa89e0e61
SHA1: bb33f8cc5b691b9a109cf91d2649271bd9d782e3 SHA256: 540ab91293ed39a0780b6a1ec7c6f52d495f2e7bbf648a5b284f79c96459383c SSDeep: 24:9lH+rzDLk9v0NEtXZxu4JEsrjwtEcYbO064xmu5LvWnXd+n:Pef6v0NuXZlPX4Zsc4nLUXd+ |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\tzdb.dat.robinhood | 103.03 KB |
MD5:
7db49d217a0b7772df74e6f1cdae67d8
SHA1: 0528832dd5ba29f3ade45e727b90720d8ea026e6 SHA256: 0d6696de9ba709844e5c9490b05a6dc8bc3bf5d89c82f5ebd5a25ff8fad36459 SSDeep: 3072:d0OCMLshcpC8TJHc/k4tAUd4dD+uohD51hhKBjYldW:dDs6pVcs4tAUd4d6DuydW |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\tzmappings.robinhood | 8.22 KB |
MD5:
af1e5d960ad87deaecd75e4bc86b8347
SHA1: 483a1ecc6209fdf59ca992b614d7932e47e1a40a SHA256: d2ccf1a53cbaab40ba6d0282a762d83c10d9291fb865ef0350d53471508d673d SSDeep: 192:VD/PybOQo6KJjXx1xrc7uqEFcTMPwitoa7V5s6Tw8bVefwX:AZVKJBvvP3y8ofc |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\deploy\ffjcext.zip.robinhood | 13.83 KB |
MD5:
41901db9ea14ce43c3cc1cdcd89a1465
SHA1: d063bcd6c0ff4a60fa3274c94681fdb1b130c356 SHA256: fc08af76de7dd994458fa7c2cea197e371ea4adaf871ef77dcc3f6e0357dea32 SSDeep: 384:sxEvyfD6+92PIbX+HjVFJLyktjMqSbjoE:sxEvaD6+95uHxLLptjMqSbjB |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages.properties.robinhood | 2.80 KB |
MD5:
48be945f2369a949b7a498f82b209151
SHA1: 3cade149de5880f5a07cb7b34a7d08381a77a917 SHA256: c2ea1a76eec068735b19455e6d3cb65ff99f9ce51c008f3e39e0abffa67dc035 SSDeep: 48:xwgL6gW6NwasKRCjhzCxs/PbIRISqGgI9lo0x4jNrgirx+bqBp1yZrdfR:vL6r6N7RC9zCaIRRqVI9iCqBPwb |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_de.properties.robinhood | 3.23 KB |
MD5:
377a18c64532af13cad7c20960a52787
SHA1: 0273369e0f5c82258518ed047d6c18cf89f8ddea SHA256: 21de110df334d0cd79f7bfd83d80a9a23092034690b9325b4de3f2a29970256d SSDeep: 96:nJCJtmf0dmnMAQGpipbUEOZvApbS1PRZ7TS7fpcf:EJItxtip2ZvP167fpI |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_es.properties.robinhood | 3.53 KB |
MD5:
e473499e6a19e8f6879a46716c7725c4
SHA1: 8d8b84a27cc3fbc6336a085696b3cd60cd1eff31 SHA256: 2581b706b4e23831b331ba328fc700c8492a15e3cda298a02a819b0bcae2f63f SSDeep: 96:nJ1bRQOG8lqXceCBEmciXwRNEIzXp4ETV2j4HhNuB0jp7grTaDERpP:3bRQOTlqMmmmgWXp72MB8KjtgrTaIR1 |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_fr.properties.robinhood | 3.34 KB |
MD5:
141f86393312a3336bf6955f777c97aa
SHA1: 8fad29753f012fca067cedbd32ba6c51f8592b3c SHA256: 9338001b0b55ce27b81fa39f9fa156b72cdb662a06ce4ad526a54ad697219247 SSDeep: 96:/LfhfT/UmNrcYa5UZ7gWxxzCrkdxVKheCUBn:/LJfLNI0Z3FCoKh4n |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_it.properties.robinhood | 3.16 KB |
MD5:
8bca82a5ca913bc41a4f1506f004e6b5
SHA1: 117eac9bbc9b9241677851cf5b3d2a1fa6b118ce SHA256: e3c3fcc194e6c1a8142e22b21508165403d3bee58fc3ac28b3805169915542e9 SSDeep: 48:xwGIlTMDQCZtKhWl3UO4/rytJnwhxQZNw8gl63njIiC3NmF2b:3DQmtKhWl3UOerEJnjw8YkjIiI04b |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ja.properties.robinhood | 6.20 KB |
MD5:
74996054f258606a9fbecd361af4245c
SHA1: e9e9bb78fe96a215d54d8ceb48c2402b3a4d8c94 SHA256: 6a9527668de2e293b3034f1d0f4526ac826e97a406d43f684ce53be3c570aa75 SSDeep: 96:nJ9CvCzaxU5/Bm55Dl3A6Mu06hL20SpDDj8hEn0z/CyVJWiZFNsadty8yOo7oMpp:uvWUU+A6MJmSR10z/ZYQdFe |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ko.properties.robinhood | 5.59 KB |
MD5:
f7f3f605ff7677ae56f7726859010660
SHA1: 849f936eccddebe64cf6bf09520314a35f99fc0b SHA256: 0cd555d04189db4cb9e65ebac3d1238f7eac2afbfa6f277d221a6e7a4907d000 SSDeep: 96:iACczoDnYHfuDvVD5eKmiXbYhHwUs8oLZ9XF9sDBST+jhZKa8r+P+521Hu6kdmgv:FpzGsC7yoLZ9VODQ6jXZP+52N1khRHY4 |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_pt_BR.properties.robinhood | 3.22 KB |
MD5:
b0cfc3d15bf7373a79824de2be704392
SHA1: a47bb3e7fbeb34d04ed2ead0ee19b7068b24f477 SHA256: 47a0a5732ba6775370362ea6e0422a407cf16e3ddd642f7b10c0a95141b92dcf SSDeep: 96:imipYiao/rDOyx6Lpq9Sa9u1QwSUgTZrA:CfOyYLpqg1rAZ8 |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_CN.properties.robinhood | 3.98 KB |
MD5:
b1d57fc49e2f3b8901e26aa283e8ee74
SHA1: e731b614b867b7b189bcbf5055a48777ce080004 SHA256: 9ce4bbc1604bf0bcf4502229f71e9ed5522a14c71abab5267edc19aee60b2884 SSDeep: 96:nJFple3gmCLqy1El+CRKsRVK1xd2OHgG2jH03qk2bGI16:Erm2lLKsmToUf2jU3qzbGI16 |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_HK.properties.robinhood | 3.67 KB |
MD5:
61c1f0654f95af9272bc3955e39444e6
SHA1: 302b55501b4b36ff8f6ee8d4566f17595b02851f SHA256: 52f092a690ac78c1da332ee07cde06a630c48205094c9fc30bc56de3d0886580 SSDeep: 96:nJipfADvv+IoqsgLdZ2kYAZGnXNjFIkBHmXuq5Cx7Gd04D2jAei:M4+POdYRAZGn9pI0H6x2jAei |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash.gif.robinhood | 8.39 KB |
MD5:
41be9395bec6d06f8b9d0d9e3ca7ab5b
SHA1: 8826c256670827cce2163fb831129f946a218b98 SHA256: bfa2489bff766544102ba2c04018173ef23c0a8eda26e578f50c87360d34210a SSDeep: 192:TKJq0JehZM9hMQKeXXe4EyaIJE2bVlD28hhRq8OFweM9U+i7I8SMnq0zvhp6r6L:P0JwM9h0e+4ErIbj68hKrIxMqmp6E |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash@2x.gif.robinhood | 14.92 KB |
MD5:
a20d9cc68c86757c87c04de4aac23778
SHA1: 91ef2434b2e2550ea66a60360195ceef9e6a108c SHA256: daa092a456ef537011a83f1ec87c468dfa08c962aa40815c9dbf4cf14feb064c SSDeep: 384:WXrVFfbAQuwVYwSBp8qvw2Bqrc0KTOsDTahjTLOnU1ma2WHH4ZGzClI:cFfbAQJHSpwq2W3alTLScmaWlI |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11-lic.gif.robinhood | 7.62 KB |
MD5:
4d39b4e213cb75d403c628d84b59c88c
SHA1: 5004ec6e24bba897df6763339102584a1bf86549 SHA256: 9b2029219ec715695e23ed7db3d4fa71ffce8fb55aa0724eb0b87de862e39f35 SSDeep: 192:xAA8RxSrIZhnxYlZrolrE5nhV+7hQSsEj:xAfxSsjnxgXq/j |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11@2x-lic.gif.robinhood | 11.97 KB |
MD5:
3943a1b0fd0a47b1851273df39160fdc
SHA1: 8bbdac5b1073dad952edaad263cce9135ecb71be SHA256: 92a234c58f8e9a8895cf940a0e9c167803d7e67c6e00ebaacfd19685d347e08d SSDeep: 192:X662szYn2WzXC6spqmdiBSg3bYInpgT6vts77Fg/+k0rjZI7B1QhOhsNE0J0p1Y:q7sc2mC6GqtT/MH7FgaKDQhusCBe |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\ext\access-bridge-64.jar.robinhood | 183.62 KB |
MD5:
e7ecdfd6e5cd58e51c839c41565b9282
SHA1: e5bdccc38d5ede95aa8ffe03ca91373e594b388b SHA256: e842f4604ced3acc5345f5d54cadf8beb5db7ba7716639afef3d4ffda751040f SSDeep: 3072:IRMKjFIv9Rrhj5eHUcnyxL14A20Ex/I4r/3YZaAHbObs4O9nbAmE:IRM4IFR9oHHnUL14F0ExwR3Hbss55bi |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\ext\cldrdata.jar.robinhood | 3.68 MB |
MD5:
b2562e1532b64d5aaca3e06e52c07459
SHA1: 042abec18f88078689996c3516e74dd7837234cc SHA256: fe3bca16ee5283f8f164086522da1d5d611a0e3ea0ab0b37ab77a61a46247afe SSDeep: 98304:NB0a1i86eXCCXOoIJ9QmJZK89qrZMbrmh:NB0a1i11hnKprZMnq |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\ext\dnsns.jar.robinhood | 8.09 KB |
MD5:
b4d99cb419229044c3fdaf8c2fd806bd
SHA1: 28b12833b59e2256f1b48bd60d1812839f3a1b49 SHA256: a017805ce1fa360be39aa88ff4d32f82fbf5946ea91952bfe006d3d47408f2c8 SSDeep: 192:Flu86KmG0OhgFy3x4L5OvAa+HvljYBc8U7+6uwEgfk:D6KmGwM3x4L5OvAV5YBcb7+jz |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\ext\jfxrt.jar.robinhood | 17.40 MB |
MD5:
ea5215a95a2c12e5404962ecb3f23d7a
SHA1: b299c55f69be218be9accfce895577af25e1cfc2 SHA256: d5bbf7ebe9668548bae6d22b3754e44376353a6157a9bf56992d1320144c0ea0 SSDeep: 196608:lqPsIyXCiRN4453DjY2z8SPYfhH6RTXUrzvSzlA1geR+Gn3:lqtybZ3DXzFPw6RXUrzaBmhJ3 |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\ext\localedata.jar.robinhood | 2.10 MB |
MD5:
2c0572d173c38ec095cfd8d48c7da187
SHA1: a01cef0640ab4aadd5585d35f24d5ba8fd74871e SHA256: 4cfb9667e3588a2e50c97ceb93fb11a39011c0269ac2d4cb46d4c23dd0e8d120 SSDeep: 49152:ZaWbRx0ein3Eg5fvd3vyd5sHyZZkP8ZQVfg8GsppjQxxf:Z5NWeib/ybsSZZsCQVfdZpjQ5 |
|
|
| C:\Robinhood\encfiles.txt | 11.76 KB |
MD5:
bb5ef101b592adb1826e6e6165dee785
SHA1: d65343af793e44757469aee8ad70728e8659754e SHA256: 480cfff7c8c456c94255b7b2c4738b23462809c1d8d2c7763b0ed3a49da5c221 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6K:oJiaq6z/wueQ95v |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\ext\meta-index.robinhood | 1.44 KB |
MD5:
4533d17cc4626265fe2597bf899e5a2f
SHA1: a4a46863f92cfd419dfc6c31b858ae7a87ac0f76 SHA256: 8efdbf0449749f5bbbac8f2dc1d872b18eeed8e18ea3b8cb86f320b544330c4f SSDeep: 24:ayiOLXwdSPPT7fvRCoLzQcN2XDEFliifFCcVG86Pa8nmS/IAxqjpY76w:WehP77fvAoLsXD4i0T486PZxapY7f |
|
|
| C:\Robinhood\encfiles.txt | 11.81 KB |
MD5:
b43d5e7e59b5f0fba763edaf01070644
SHA1: a3adc57b7af7914523f3fca2d2b5fc09ce38ab96 SHA256: dbde18a3d2fdfcffa8b2baa851a92d5ddf7beabe8e12edbc6fa2928be66d82d4 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6r:oJiaq6z/wueQ95g |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\ext\nashorn.jar.robinhood | 1.93 MB |
MD5:
e2b8d5c7a3a4ff253a343d1d3726f4d7
SHA1: 9ccb37d018632fc3f5bda861a37e3a47d196a950 SHA256: 8a1c64e649f5461e924a55bf61d8e9a7a1e81b1d0693bad8a9eb01d512906b6e SSDeep: 49152:lj6w2vE8DC9Pv0g3sovd/czlKS+/xX+clGHLkcvSyG/chyaI:Ew0E8DIsOsAIlKdXPlGgqWsyaI |
|
|
| C:\Robinhood\encfiles.txt | 11.86 KB |
MD5:
12398e6378e3ef4416a9d765a3192c04
SHA1: ff8fe61336461c5627d2dc9bd2aecb28c290615b SHA256: 56251419ab7f7de5bd56031f55e6b020e522ce34114a3b3cd31a601f30343dc4 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6O:oJiaq6z/wueQ95h |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\ext\sunec.jar.robinhood | 41.20 KB |
MD5:
07a18d8247633fc4238a761c9e3b8d39
SHA1: 3d62f25128e8f288c99981434088518f9a059edd SHA256: fdeb3bca85785b4e160e791a6d2fe44af27c4c8dd745e801cbc3a3df161792f8 SSDeep: 768:edWIEp2Rv2Z7bKdG/qwN5slgjngFF3ZVXi7r4qduh7Zu0gWCN+ONdT1df2m/uYOa:ecIy2QZogjngf3Xy/duvu0gWG19t/u5a |
|
|
| C:\Robinhood\encfiles.txt | 11.92 KB |
MD5:
3d080b91061553b5c3e9081a72910b22
SHA1: cf66b1575325e4ca486541403d7e07242fc31889 SHA256: 81f6343f65c593e7babd76a6abb2493fa469b11269d8d9ca85d1eadbd6edbe75 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6I:oJiaq6z/wueQ953 |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\ext\sunjce_provider.jar.robinhood | 273.61 KB |
MD5:
1b7ccd6c5297782ba7c112bbd512aaf3
SHA1: b14d1a3766a2c15298a4faf6a315961085e32ae8 SHA256: 520f6144d6eadfa0c54999198997ccc146e7d449ab511ca5d16fc0438d2fe1c8 SSDeep: 6144:CoWlqrdfEYoGJCV1WHW5nnT3KZO1/Rb3PumuCILqxF:P781GORT3Kk1J/umuCI+xF |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\ext\sunmscapi.jar.robinhood | 31.94 KB |
MD5:
30cc818794e36028cfa9429a88688c95
SHA1: ca27ca2f94a43f3ac3505bb92678edd50a046c42 SHA256: 401f5beb4cea377e195afb18e81b2f0bc1fdd31e29b7e0a19262018fa7601656 SSDeep: 768:cew7S/w+GR2xlUpl3rHNwuQW0ymTTJrWf4drvJhswSNpGezqB:D//wYyAym1qAFvJhsw9kC |
|
|
| C:\Robinhood\encfiles.txt | 12.04 KB |
MD5:
13d79a7d134b75f99892af3090d6c835
SHA1: 1ee485c99f46be132275ced7b94bae736fe8468d SHA256: 871d9787d4796aa6266de82478d9ec184e0215ffbd4b7bd09ce69b51b7223ab3 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6f:oJiaq6z/wueQ958 |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\ext\sunpkcs11.jar.robinhood | 245.44 KB |
MD5:
d3fb9365e0960cfa209ed8b7fb5a1774
SHA1: 15d21a190546bce8cc2320b880b39d8ff90c2d6b SHA256: 7cb71a6055ff05864dacfe459d4028456ce2d7ec08a6e80a79a132b6c0e74197 SSDeep: 6144:RQxRAU6WIkq8zQEYPcAhloFHRIA9hB/lA0twhAqW2/5:R01xIkq8kfl6Kihg0twj5 |
|
|
| C:\Robinhood\encfiles.txt | 12.09 KB |
MD5:
435c9890cae44d854ed31d1212607285
SHA1: 25c90b8729dbfea433cc52681ab6a9232859a4d0 SHA256: 2fca043bcf83f522d71d842e29e3adadb5182e548cd3fa57089895fcce7ff21f SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6a:oJiaq6z/wueQ95F |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\ext\zipfs.jar.robinhood | 67.31 KB |
MD5:
eafdd6ece7c4cb4385d82d93220acfab
SHA1: 032ce14cbbf212bf2c34af19022d828fb4167391 SHA256: 97fa6aba017c2f5c702c83f719503010cd5dd7cd91aa55efdce9d28f68c54e7f SSDeep: 1536:NhvQQp1EUi7kjpAj1TI2hAMDKVfDh7rtokm74x/Yj/zRfqXpuZ1g2su5eGy/w:DdXZj+ZZtDKVfDhGN746j/zhF5VEw |
|
|
| C:\Robinhood\encfiles.txt | 12.15 KB |
MD5:
f61ceefb5307019e93262a5b1b08e85d
SHA1: b2c027552b594c352269b7aee663955fe19daa3b SHA256: 16f9b0b68f087bfd2614291cea8ac4862f455244b3a1ee877a2398675bfa1335 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6a:oJiaq6z/wueQ95x |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiBold.ttf.robinhood | 73.39 KB |
MD5:
154defd410f25cc43e05a38579ee9318
SHA1: 7066b7cff02f490a02a4ac2ebcf38c8a9a8de2d9 SHA256: 8d1821f84aae4611789c0edbaacb9d57929c94d1dda49494027b5184e7f54d07 SSDeep: 1536:6WJB+30WP0/ma2jzfibM80LiALF6vluRutvHWg+nVRjPA:60442jza2FAuRutOXVRjA |
|
|
| C:\Robinhood\encfiles.txt | 12.21 KB |
MD5:
baf470e3f9ee9c9688af67eece728362
SHA1: 36355c8a2f95faf1ad8a4e367922fd308f1228b4 SHA256: 182b614c00a1ed38e5b2da7c5929665a8a723fb9ec8e516e6d9c53c68e1d0615 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j60:oJiaq6z/wueQ95h |
|
|
| C:\Robinhood\encfiles.txt | 12.29 KB |
MD5:
e69034228a56de7970f999c1dd3df3bc
SHA1: 1eb031f695edb7307391dbc5491c177bb7f29d21 SHA256: 05cd1b2236d97a53e992c05f2040fd8198eef70beac0db1215cf11b37109497a SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6L:oJiaq6z/wueQ954 |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightItalic.ttf.robinhood | 78.97 KB |
MD5:
62dc34d36d1617e636f65c6f83b8e6fb
SHA1: 506ec8bd44563220814d0701395307ac05b9b0a7 SHA256: 3eeca2dc92d06be3eded961106c9c6dcdeb4d7ddb5f51003740fc53c908261ad SSDeep: 1536:BDjEmTrXiq48jS0UYkubmQ9go6iabOIqdcAXQ2SL1kjd54Z3IJfgKg:pfTrXiqTjlU5UmQKo6iSqaF20exsIfjg |
|
|
| C:\Robinhood\encfiles.txt | 12.35 KB |
MD5:
08c4113bb60cb79a01c89c1aa9e4657e
SHA1: b8308322fc50f6ed3d90d921ef7930c767d8d2df SHA256: ac5a508befffb1fb35d2849f4f7a6c65b76804f2976b3b6e91df79bdc9746e66 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6h:oJiaq6z/wueQ95k |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightRegular.ttf.robinhood | 336.83 KB |
MD5:
b35df00ce0f3d4a04c85bd839c1c0227
SHA1: 2c0c340019ffc8c98b4eb585e54f1972fbcf73f3 SHA256: a6ad1d4f8ea71ce48305406cfdbd200529ae515ab9ca98062a148ed2f6a67581 SSDeep: 6144:UaCCsxCn+tjDgh67/A7wnTz7IImXSG7iNL2baB/pyg+nYKFLFMVk8GFKP/7z71V4:FCLxXtjNv0n/6ibM8Z5FLp8Hzz7dPcd7 |
|
|
| C:\Robinhood\encfiles.txt | 12.42 KB |
MD5:
265825d60adb6413a80c1f6f62640ce8
SHA1: 4e19e19ff6c77a6bcd1351bbda773740c3c5dff5 SHA256: 97f10dbd564c61ccbb393ccdf4b99fae9a09357acd3db012fcf0fc24c08226a0 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j67:oJiaq6z/wueQ95+ |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansDemiBold.ttf.robinhood | 310.45 KB |
MD5:
2939acf833db68e854313f491f452771
SHA1: 05d0eb7c67bc26006db4f3f7f439b5e1de809d8f SHA256: d0bf4778b2e4d1ac489ea3d640818776fc29db113914560fd28a63555f2b21f6 SSDeep: 6144:UOMrH+OAU76pxrjYf1l8zrp3q6UJ2NJQzeCYSyQiP:UOMj+ZUG/jYf1l8dazEaQXQ0 |
|
|
| C:\Robinhood\encfiles.txt | 12.49 KB |
MD5:
357f60b0b3fe28c73789d0607237b0c3
SHA1: 770bd226cba2ae03109408249e7d5dc04c7d5658 SHA256: 33113076bafb7160a5d3a67318b684aa49c91399fdf5d23942efddf23d0771d5 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j62:oJiaq6z/wueQ9535 |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansRegular.ttf.robinhood | 681.88 KB |
MD5:
1f2f5f7640391a8fd959e873007e45ef
SHA1: fc9c1ef465f739e3a571804c7efdb5fb5ab20359 SHA256: 45323df5f8e8d9439040fe35884391a5cf01e89b5fd7f7bd9e0178c27432702e SSDeep: 12288:MFmO+wUFGF1PTgwcTuMXfV/tqGz+kW4IkEbsY59eUUommeO+o+NnsRuJaYfoX:HOHUFI1PTgwifVsGz+ZkEYY5AUUommee |
|
|
| C:\Robinhood\encfiles.txt | 12.56 KB |
MD5:
49fdedee71dea44bc996e3f03e5eedea
SHA1: 8790685ec769e7d97a055197bbcf9d0a0a9dec0b SHA256: f0741aff24a9ceb887b6b03d643439520f07a3418b2b4ded72ff2ad326220d2b SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6L:oJiaq6z/wueQ953+j |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterBold.ttf.robinhood | 228.59 KB |
MD5:
0f05fa4581bcc0d9656787a346339e7e
SHA1: d06e4c332edf2671c5555b31140d57adaaaed22b SHA256: d7f3cfa136ce6c543eb46d90dd9a8809287c5700aa13c2ac571a96e95a8fe5dd SSDeep: 6144:cTnhYzi/+7Eq7vs+HPxORwmzmudPUVnER+c6WiIx6ysMgMUgw37c:cnhYzi2vHPuDzmudKERV536bmUg4g |
|
|
| C:\Robinhood\encfiles.txt | 12.62 KB |
MD5:
a2086e31aef006f3c94b28c453fd99f4
SHA1: 504f1b199a8f470388b673dba988d7e055c24a12 SHA256: c929751ae3f75aa6e8f57e7b94ab468eb98f8e178c7ba304621376fc8794a94b SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6N:oJiaq6z/wueQ953+V |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterRegular.ttf.robinhood | 237.02 KB |
MD5:
d9ffc15afc9d594828ad871885db24df
SHA1: 00b5a914a9bd51cc2c95ab30756a5934b8713830 SHA256: 1f00072d97bcde934810b47509c8bcd043adceef74399ab65b691b30c5f3d1f3 SSDeep: 6144:oIvlCwINPtl6FXdxVys3sFmZfz+XFX2gDhL0ALDBlUjR0mz:VNCwINPtl6NdxV6FmZb+B2gDhjLAR0mz |
|
|
| C:\Robinhood\encfiles.txt | 12.70 KB |
MD5:
a682fc9a207f6be8579fae1aba155526
SHA1: 116929e69653fd0657c4f4856031fab315cafc19 SHA256: 7c695222919159d7fef514b524ee9bb8202896019fd345452889a64c32632fe1 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6s:oJiaq6z/wueQ953+k |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\cursors.properties.robinhood | 1.27 KB |
MD5:
00dda6fed752d1b0b42ac345eda89a2b
SHA1: 9542b63040481965cc72ab08f228afcd08b61938 SHA256: 9e5a6c88017ca3960a3b4c41ffd0e4b66eb81bb20038dc355471d014186f6d30 SSDeep: 24:UJGpQ4M0QggsrfpFkMN3pMLsTVYVOvDPzMzLkamAWn/vj6rpW:UJG24M0d9wMNeM3bQUnL/ws |
|
|
| C:\Robinhood\encfiles.txt | 12.77 KB |
MD5:
70f30645be920b7c63e5bc57a36f97f7
SHA1: ad55ddc7ddfc5200d93a7216a56c12ca27447965 SHA256: b74329a01eb98b62c288399dd8825021c7262d7f68d0a81996fcff13e717e2a8 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6z:oJiaq6z/wueQ953+n7 |
|
|
| C:\Robinhood\encfiles.txt | 12.84 KB |
MD5:
d923f0d0f4cf3c1cb455c978ce0a7acd
SHA1: 93f2028c7cbf187f9d69cd07020145ca7cd3a646 SHA256: b8601d3327cbc569d638492277e9359ba5deef1a13e3276f9ff1d8460d4b1e4e SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6H:oJiaq6z/wueQ953+nEM |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyDrop32x32.gif.robinhood | 0.17 KB |
MD5:
ab2d03547af6c9a352b726b7b4b30eb6
SHA1: fd1378d1302b0731f8951372ac8afc3c5dc6c206 SHA256: 1f9c2f6775079ff94dc8729a89f20e9613a3447997c2902132c6d7689cf77ed2 SSDeep: 3:8wvjBRRXxXdVvq3y+Qpogk3V8EwHSeT8R/FvpxayfUk8IHHgbzoIwh3Xn:hbBDXxXfvKCoT8Ew58HfayftHgbzoX3X |
|
|
| C:\Robinhood\encfiles.txt | 12.92 KB |
MD5:
c8401c578407e6c2472e0743ae7bb7f1
SHA1: 76b12d4e0f26b21d1fc17a8f235522bb846ff87d SHA256: cb92d5d967ebd3307dd638c307a76a81b40acec190ff7fb112ed470c599da803 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6+:oJiaq6z/wueQ953+nEfX |
|
|
| C:\Robinhood\encfiles.txt | 13.00 KB |
MD5:
4a696ad1e71073a0af023b54b5e57479
SHA1: c617d26d4db2623e7be7f23578692f8e1cdfa0c5 SHA256: 29255bdf9bff936713c3a8c3a54b6a23154d7c6406ef7c5209d26640108f0f5c SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6i:oJiaq6z/wueQ953+nEf4o |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkDrop32x32.gif.robinhood | 0.17 KB |
MD5:
5c63d82fa1be5683c50c9274a74aeb65
SHA1: 7bd7e2f294e279f92d072aab71e74c3d7d6d7c14 SHA256: 9ef0669aa9fcf96d9c99e4d446d3f08d924531140992c8663922fcc0ef80e4d8 SSDeep: 3:8wvjBRRXxXdObdcZam7eVeskAkP85L68igR049f8asm0nv3RTpwgKI3l3Zl:hbBDXxX+m78eskA3L68fR0Q8hZagT39P |
|
|
| C:\Robinhood\encfiles.txt | 13.07 KB |
MD5:
059e1208811cc180414a85d7818ac054
SHA1: e9afb024bd2a50f078e68a6c9a27582c1abf7ae6 SHA256: 877814f933dc79df3a214584a252c14ab4815afb1f912bd48db2552a8e0e3f92 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6k:oJiaq6z/wueQ953+nEf4De |
|
|
| C:\Robinhood\encfiles.txt | 13.15 KB |
MD5:
c9fb0aa777e7fa2059ab6aaafc28bce1
SHA1: 660ddb384c9886114615997271aeb05542356c4b SHA256: a0518de0b5ebeec99fbec874dcf6d16dd14c91b63299ae73322395e74bbae6d2 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6B:oJiaq6z/wueQ953+nEf4D5B |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveDrop32x32.gif.robinhood | 0.16 KB |
MD5:
9d0e6069331bb9a9a3ee7685775292dd
SHA1: 0c929c7b742b0b4c92bb34364808561fc460b75b SHA256: 45192bbefed0a66877e3004c6f9ee9598cb6a7c0802234e5f4b72adef7d8dbfb SSDeep: 3:8wvjBRRXxXddDjdwBJXhmRvrnIUysgAlbXdz3z/1Dqqu5YVyqQzRPZJGsLz:hbBDXxXjOtmRvrIUHFJNe1zJ9 |
|
|
| C:\Robinhood\encfiles.txt | 13.23 KB |
MD5:
2d2ce3ef92b5e783dd06d8eea0732dd1
SHA1: efbda50ce55c03b29e44afa50ec98a13f975a398 SHA256: 1c40b3039a343b8652b92b1181a4df8a1377fd4ced2fc1537fb1d479f61d6917 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6Y:oJiaq6z/wueQ953+nEf4D5CH |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\invalid32x32.gif.robinhood | 0.16 KB |
MD5:
62794832e54e0677df57f55a2ebb3fbc
SHA1: a6d16c0ce550408b81dae98e616a07b481218001 SHA256: f247ace8cb95aea7f0ce026e8ed60e5b0963af3d7525c94696e8b8aef6af402b SSDeep: 3:IQZJHq6FMpl4AZiTx37Pduw5QyX7We/Q0Heja8IeCSbXaRxP3F3YsCdABE4CVV:IQfF442iTx3LdWSKeQ0hfeCSgxPLCdn |
|
|
| C:\Robinhood\encfiles.txt | 13.31 KB |
MD5:
fb9d82be07026b729047f4f2d4e03970
SHA1: bd419a8c54ebef11ed64b75df5ff6fc6d3d4dc9d SHA256: 9265b652f23768492a8e3566a692d3b1bd7d7b0caa3ac2967bcfbddb95a65d57 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j68:oJiaq6z/wueQ953+nEf4D5CIY |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\management\management.properties.robinhood | 14.30 KB |
MD5:
58268ea364a5b847a51bce3dcfcdb7f6
SHA1: 2ec40056ce9999eead99c2d0624e7c3ca558948f SHA256: b35164de5ee627b2cba1f82b0bf4a0d9dd5fb26954b8f7959d76969d326fb4a5 SSDeep: 384:cSMb9ysdpLVwJZWPwTkto2QNurME1G8R39DCe3:BMFloYwAtPR7fR3dR |
|
|
| C:\Robinhood\encfiles.txt | 13.38 KB |
MD5:
2936cd6aead884148b865c4bb8e9c297
SHA1: d33bc244181737df6f9ed679b41c16c40cff37a5 SHA256: db505a52cfccc402352fa7b8fd29fc01774857580bcfcb0936509f5be6f4ee35 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6t:oJiaq6z/wueQ953+nEf4D5CIh |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\security\blacklist.robinhood | 3.97 KB |
MD5:
1ccf6cf77bf0f053d1efdc3b4ec34a87
SHA1: 095bff181ab83163c48ef487e6f3fff4e35d5ffd SHA256: 99054dd21931faea435c957437b971761cb23c3e665dfa3aa1beda7818cb7588 SSDeep: 96:cD98YV+rqSH3gQkJMjfr/Ipe6QykrMcfVYQ:cDeEWqowQTr/grklyQ |
|
|
| C:\Robinhood\encfiles.txt | 13.44 KB |
MD5:
f61f41115d8c185d4ba2942b702f00c4
SHA1: 3402d6afda64373ba3e850b90f171ddf51521952 SHA256: 3908510f3500446119d777f5e6fc5b33bd0533e1c668fa63915825aafd1466b7 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6S:oJiaq6z/wueQ953+nEf4D5CI2 |
|
|
| C:\Robinhood\encfiles.txt | 13.49 KB |
MD5:
feb420d26b95888cae5e7ecbe0d335c0
SHA1: 4cce78e0c36f85cedace2460cc1dc15608d9aae1 SHA256: 9ae4b2e0b01090661cdbb55187e2f4f884b3e5c7d8b746fe072927305537c591 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6T:oJiaq6z/wueQ953+nEf4D5CIv |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\security\local_policy.jar.robinhood | 3.45 KB |
MD5:
b1775a3080d4a53a725845c983779daa
SHA1: 7e91481a51b0117506492c2743ed5d7ff5fbb1ce SHA256: 2da30a03159f4fe516940caefd2c12ffc467fbc59dd641753b4d42eeb726624d SSDeep: 96:QYKqgUpsFxCVTdGOgs8RS4x2qoLzqbyTCmS2+D:P5Tp4YFdT8RSo2qoLmbyGmS2S |
|
|
| C:\Robinhood\encfiles.txt | 13.56 KB |
MD5:
f3000126d66730b72296554acf698668
SHA1: ce7b1050d9559627bcbc34c8a9c69755ee1f11ed SHA256: 1c4d98706c105e0be6c02b2ef467ba51249f1bad5784cb17b5a4abb51433b064 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6u:oJiaq6z/wueQ953+nEf4D5CIi |
|
|
| C:\Program Files\Java\jre1.8.0_144\lib\security\US_export_policy.jar.robinhood | 2.97 KB |
MD5:
0d1a735d0a03f96aec7e1c26d9f09f98
SHA1: 8df66a2be629eb3cbddad35219243b403601bb74 SHA256: 948fe9d2ce7bc8f54fcc73027cb5852955212c6fdd34aa2b68dee1213c2dc8bc SSDeep: 48:c8UntABVP6lY/Wb0G/jNgL/WNHZ/V4PWm9FIsIwqFu3FVL6TPOZ+2MLbTzSerd1e:c8UntAz6l8Wb0G/BgL/WhhV4lFibuVQm |
|
|
| C:\Robinhood\encfiles.txt | 13.63 KB |
MD5:
c1a3850c34a46e79b4846185d8e89bc8
SHA1: 7cf34e96bb9d613068d0e3564d557fda846c94a3 SHA256: c6159fb37e1cb0159104e4c231378e3e60c85487aa06d1c70066e06a91837467 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6r:oJiaq6z/wueQ953+nEf4D5CIH |
|
|
| C:\Program Files\Microsoft Office\AppXManifest.xml.robinhood | 5.67 MB |
MD5:
384bf9e703a77b7ef150ae66bd1489c3
SHA1: 2a665389c36aeb122072c189a3b868d22313d2a2 SHA256: c88809250278361ffa8d54fe82a6b756c43099f3e9dd9f3bdf6ca24473181bc5 SSDeep: 98304:oVhsnCzOiy01zsq+Xz5ORmZlkAvSGTEpQpUIpef9gjO5OXx/o:8qCz35uXzkilJv3oBIMiu |
|
|
| C:\Robinhood\encfiles.txt | 13.68 KB |
MD5:
e9c6578fbd556a5a71e306fb86222b51
SHA1: 6e97816736b58c4ecf1858676ad84a01b5334aa3 SHA256: 8cce71c06d4a3ecd30d33b20bee7c6eb6821c98d30bb005f435027058cd9020c SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6N:oJiaq6z/wueQ953+nEf4D5CIR |
|
|
| C:\Program Files\Microsoft Office\FileSystemMetadata.xml.robinhood | 0.28 KB |
MD5:
2d55ce61b2374202d831d2444de9eb12
SHA1: 11a306731e03cb82eaff12407460fe6525bde724 SHA256: cbc36f00c1b6d5a0c2ccc0d31aaa0a69470db6198a6a80f13b0b0d3abea9a1ed SSDeep: 6:35D0+W5CLMUdRPUKjWFi9uUpDIsG4KdrZK3Oj6FRZxDb2DkiAfS9Mf6d:ps8p7RjWS6svKdr0+IZYDc2zd |
|
|
| C:\Robinhood\encfiles.txt | 13.73 KB |
MD5:
acc0cd37d799f6eb6e7680532986b812
SHA1: 80d5bd70d5a63fdfcbb596f6489a6e5aefecaa0a SHA256: 182e4fcda67bf44fc054953dd4eab3e61a501a66ea14edc3a9b4d2999ae7a028 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6V:oJiaq6z/wueQ953+nEf4D5CIR |
|
|
| C:\Program Files\Microsoft Office\Office16\SLERROR.XML.robinhood | 35.50 KB |
MD5:
5ecfafc507c53b73ef0b0b02cc2911b8
SHA1: f0c23233ebf974fd43635c3b7a8a072bf9b879fa SHA256: 4f5c85fe963df5ddf859968b469f7b685e5c577484a78e30eb01ef0b019d216b SSDeep: 768:3nVu5blhik7maWYWVrHtO+HPRLmXvnTRvG+RztAK:3nVu5XikdWYNEPEXrRvLRSK |
|
|
| C:\Robinhood\encfiles.txt | 13.79 KB |
MD5:
e23b72b76bfbe057d0f808d9068a0492
SHA1: 2868267928d84237a691b2342871fda3a60a7fea SHA256: e21cede7f965f0d3e99a354b98fa4903a841b935a46d4face1b280dc56ecf38c SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6b:oJiaq6z/wueQ953+nEf4D5CIbr |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.robinhood | 378.28 KB |
MD5:
c424983c5dd4bdd6128ea54ae142404f
SHA1: 51dfa8d4c5a9d12771b6b3154870982848eb0fb2 SHA256: 7fddbc3791948e70bcc94b65106db81f92783f54f01e0d0bc18cbc10f5d0e1d1 SSDeep: 6144:8nzpdPJEmmgHfuyWQZcttezZqa9HPyN5ESq2UD+LrGhI7kdM:WJfuIqeQasNVc+lka |
|
|
| C:\Robinhood\encfiles.txt | 13.89 KB |
MD5:
c3b74e3db45f28cceecb28ece2b1fcf9
SHA1: f8d764203d307edf09b26ca05fbb560814cf1c56 SHA256: f0afcd3e63d9ed383632c63d3dbb4b496c125d363a6716e5e6f3001ffefcb2e3 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6h:oJiaq6z/wueQ953+nEf4D5CIbMu |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.robinhood | 1.50 KB |
MD5:
2963c44bb935cde3a49a800d96e1775b
SHA1: efcb63ea826fcf8b5d25382b3319a2040341fbb7 SHA256: d2407754212a4c1c22f60c48b0e9be6a5c69b73805cc61809173a5360c4214b1 SSDeep: 24:DUrO8HMkNz7H4IRFh6ojYxh259KgIn1Yx7ZgK3bAMyA8bzXTGOd7sElPKYzEIf9b:grOXkNzlSowhk9KgInmx7DbAMy/bvbsU |
|
|
| C:\Robinhood\encfiles.txt | 14.00 KB |
MD5:
821568b4c681d2958170e3e774a174e0
SHA1: 6487137c6477abd45f9f46917c40c9d930fa9a85 SHA256: 8691670696961eed935ab6a625aeeecb6bc9facf73399151bec71d9cb2f729e8 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6q:oJiaq6z/wueQ953+nEf4D5CIbMx/ |
|
|
| C:\Robinhood\encfiles.txt | 14.10 KB |
MD5:
060243201eed90399e8db465a59f4b42
SHA1: 37ce7ba1f62f4402023219edb187cb3b4990ed5c SHA256: de42bdcbd89416ffd75ef9ecce88de19be5ac3662ed3f1cf384c2bd286cb9a0d SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6F:oJiaq6z/wueQ953+nEf4D5CIbMxoT |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.robinhood | 1.23 KB |
MD5:
dd19d1b21ea12e538c11a4ba7edb5463
SHA1: 1adeec8e9d94edf9514a361a9c37a3d8ad347651 SHA256: 7afbbb2fdf6f7263f8dc9efcac193e6cd2166ea16f60a169b5ece07fb9892e88 SSDeep: 24:DUrO8HMkNz7H4IRFh6ojYxh2LyaLDIs3FkyINUBGO8kX/uTUF3ftiwZf2ZkId:grOXkNzlSowh2yaXv6AWkvlF3ftxZf2H |
|
|
| C:\Robinhood\encfiles.txt | 14.20 KB |
MD5:
d9882bbb29125010b178d0e26b56cb3f
SHA1: efbf832bd943c9fda9ce4beb46ffb6ce941d7f4e SHA256: 6e25e566b5774ee6e8db715bfa1ffb48d185b9547a15db404d7849c5a4a021c2 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6D:oJiaq6z/wueQ953+nEf4D5CIbMxoUa |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.robinhood | 484.89 KB |
MD5:
424e54e2cad212be74b41446122978d1
SHA1: 93cf7524924f78e0406f6e1bf583b72fbfa84554 SHA256: 6ec296082a07a05c67d81ee6949a9f20bfa1856295c83435d153a3386bae748d SSDeep: 12288:dKPg2fm6Izf+pioDkRGXXq5KxPp7bq8hHHB:ghm6tLWGXXNxP5bq8hHh |
|
|
| C:\Robinhood\encfiles.txt | 14.31 KB |
MD5:
b4fb660e9b8d24e3a63ceb1db7c46c42
SHA1: 9d72e69dd6a391a41a573801118e8e0b87c7d61c SHA256: 12d8ad616361af381dba6a9560ac9db1c0eef09b4a7da5146103a0b45643fbe6 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6u:oJiaq6z/wueQ953+nEf4D5CIbMxoU1Z |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.robinhood | 1.23 KB |
MD5:
b2c45557b79e41cfde335712f71b0a62
SHA1: 689a74e58d10afb147b0edd40325d74daaa6f94b SHA256: bb4870f727c8d75a5616a6c10bb911f2021b3dedb4fdd92aa61147e6a0695ebe SSDeep: 24:DUrO8HMkNz7H4IRFh6ojYxh21lJFIzpomCBz5nbnjvQ0Dfyg/uzkY8n4324wNIGt:grOXkNzlSowhEVIzqmGbnruwY8n4324M |
|
|
| C:\Robinhood\encfiles.txt | 14.41 KB |
MD5:
07e670a39b85c2b5d4b7a96a570f5d79
SHA1: 0e9daddc6415091c1be470c07dace6c82ad1807f SHA256: c3e47caa5c85caa092dbb00bf5b03a87292498bd74d172ba762127966506ce24 SSDeep: 96:oJixNxAyWrjoppDgjoOgTnj2TXkZ413D53FJF/MFmFtQNXK1jbH8HSYyl+XP2j6i:oJiaq6z/wueQ953+nEf4D5CIbMxoU1GQ |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.robinhood | 247.78 KB |
MD5:
4c3c875e6b9e3fe36d4cc4df0afefbf4
SHA1: ccb9bcf41a2133ddc38414426b13788f0a1e424f SHA256: ae43ca3ac7b79ef02b36517a03094b3f5e02ff0a28c6651152562a170066bd39 SSDeep: 6144:HbmztLqql8JQUAc7bz1+DFuMIP+pD7UF0G2sY06wxWc1pKrUY52qGs/bpjxO/K8H:HbmtRpc7bZ+DFuZPAUmG2sY0xWc1pKrE |
|
|
| C:\Robinhood\encfiles.txt | 14.51 KB |
MD5:
8de299d8abbd4333d0ef4663cd8031ca
SHA1: 07e6e47aa5f57cc141df4d7be5e13675d3cfe1d1 SHA256: 96c7c522e4d628c90bdcb6a45e9b9738cf97fa0271c1d5e0e56190ded73cd126 SSDeep: 192:oJiaq6z/wueQ953+nEf4D5CIbMxoU1Gna:oJiaq6zYuj95LxoU1Gna |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.robinhood | 1.23 KB |
MD5:
cd9d1408fa1b2ee3d088f45aef4e4cc5
SHA1: fe14ae9459e2721d3324f46f2b6da210a100d851 SHA256: 8ae109758c0e606f08d1fd1f89b5e959ee3ea45fceb3fe14672532eb7f7fafe9 SSDeep: 24:DUrO8HMkNz7H4IRFh6ojYxh2wPBdHNX6qtgFI50ZTBE2pnOqPTVoVk6pjDeFl:grOXkNzlSowhlPB1kBE25PTlqDeFl |
|
|
| C:\Robinhood\encfiles.txt | 14.62 KB |
MD5:
2e57b63b00d92b7a525f90783f388404
SHA1: fd27fe324dd6f94059fb649fe56e96ba92d92e67 SHA256: 0046def2ea3ee72a5239b90a92ced303140c9729dd5befa8b788a874bdc52e55 SSDeep: 192:oJiaq6z/wueQ953+nEf4D5CIbMxoU1Gn1T:oJiaq6zYuj95LxoU1Gn1T |
|
|
| C:\Robinhood\encfiles.txt | 14.72 KB |
MD5:
adb3358cd4e86a8794d02ce90328e8fa
SHA1: e677b7ddd0a71e3a5e803bffbf6e240a73155c5d SHA256: 7af724a7c295d8a966c19411829d2633055fbc586c49a4a04cf055810ae8bd2a SSDeep: 192:oJiaq6z/wueQ953+nEf4D5CIbMxoU1Gn1Ui:oJiaq6zYuj95LxoU1Gn1Ui |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.robinhood | 19.00 KB |
MD5:
1794e7725d0842b1af2ce5381d877a26
SHA1: 3a5b8ac2856a98fbf23767a77c31464e4625bcc8 SHA256: aaf481445e6a0ee04a531fc0486dfdb1d900972737df56cbe6f120b2c0743fb5 SSDeep: 384:Vd+S8PRj4S2WATf6wliJFiBObUjBFxDA5eLdN3Dg3GYGwHMIcxD:P+Sk+fxTZYB+BDJLv5xD |
|
|
| C:\Robinhood\encfiles.txt | 14.82 KB |
MD5:
b18d3bdc69d7d4e02f9b47ea2b3d99aa
SHA1: 1425291d7127b1ebafdc91eab0eeb6931e5bc7df SHA256: f26c7ecf9ef57cafe7f2e9303b8258f4270fd28d9742a5a6e052f741ac0ff401 SSDeep: 192:oJiaq6z/wueQ953+nEf4D5CIbMxoU1Gn1U9L:oJiaq6zYuj95LxoU1Gn1U9L |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.robinhood | 745.48 KB |
MD5:
c3eca5fd05b47593148666b42665a802
SHA1: d15a49a5758ef775f38ffd9d58f3e8e6049567bd SHA256: c9702459696c7a347e5dedb339da9ce7c8b2bb731eaceba0d2563b8cd5f614dc SSDeep: 12288:NBjpMDDpuMMPqZ2A+E2ZotELvkkZXrkxpIsEQ5gOex0BrZfM3:vpM3cxER8ZDsnbeCBrZU |
|
|
| C:\Robinhood\encfiles.txt | 14.93 KB |
MD5:
938ced03f16d9d922b5c245971389b6f
SHA1: 3dee347b795c34d3b63fffd619adfbf5c83bb603 SHA256: f7820694c95964f724e9bc3085662adcdd4821d9cfb7a9fdcc9429dafb989a5e SSDeep: 192:oJiaq6z/wueQ953+nEf4D5CIbMxoU1Gn1U9sH:oJiaq6zYuj95LxoU1Gn1U9sH |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.robinhood | 1.23 KB |
MD5:
d898da2ef31f160a912e005ac38d14f3
SHA1: b119a7313a6221d3b4678d706cd485e07b274ae1 SHA256: d934883bf970f65ef7cfab59bf8e8d835e373a30a103c07c33a8cf0b582552f4 SSDeep: 24:DUrO8HMkNz7H4IRFh6ojYxh2STU7/nxqT8BVX37ytBrX5KIETnyjdAn11byB8/os:grOXkNzlSowhtUcT8VXLy3BUn/8BUos |
|
|
| C:\Robinhood\encfiles.txt | 15.03 KB |
MD5:
c0e11f798d0782cd355c1843734d6f18
SHA1: f1cf36416355c56a14b7de2321011d90a53266da SHA256: 82d49dc554837c5048b1ae706abc9153600b6470627cfaacff4fc4feb2e24370 SSDeep: 192:oJiaq6z/wueQ953+nEf4D5CIbMxoU1Gn1U9sQG:oJiaq6zYuj95LxoU1Gn1U9sQG |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.robinhood | 1.23 KB |
MD5:
31fc1597417836881485403fac5458ff
SHA1: fa7e6ea78a303cf3e850f967e337ab8e1fc33684 SHA256: a07370e41b79fcf660953d1010c724e9f7344968c5b1b85f2779b922d9be0c76 SSDeep: 24:DUrO8HMkNz7H4IRFh6ojYxh2wVw8/c7ltXXZSMv2WIfpbqks:grOXkNzlSowh5w8/c7n5v2WCpNs |
|
|
| C:\Robinhood\encfiles.txt | 15.13 KB |
MD5:
ca29d806a48843c00e784a8c5c20d30a
SHA1: 77da3ce76b9eb52ac994488bcbf8c331123392cc SHA256: 3cc3d47bfb621bfb45d2f70e34b1510117bd9b57acbf5bd00318fc70169970d5 SSDeep: 192:oJiaq6z/wueQ953+nEf4D5CIbMxoU1Gn1U9sQJq:oJiaq6zYuj95LxoU1Gn1U9sQJq |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.robinhood | 2.11 KB |
MD5:
42d490321aaa973ab99519274d521ad0
SHA1: bd375b1ee02c47388e724166ae72c8008034af6c SHA256: 93b0c73a057ac470ccce912d0fa88b2509f8c529e1662ab92b0cd45b86146098 SSDeep: 48:grOXkNzlSowhErsa12EN3LU/bXh/hJI88j1Tw/jRi4vaIaYXi5K+j3:cO0NzldsxENY/xDA1TaaKXi5K+j |
|
|
| C:\Robinhood\encfiles.txt | 15.24 KB |
MD5:
52efc108ffe61dce4e88e17fa281d491
SHA1: 18b7bda230e139ed229bdb4d20d649dfe4c333b9 SHA256: af923f295b50a355900c55f480ec72f2a8e95911c20c3efdc83a39cf7c6ed255 SSDeep: 192:oJiaq6z/wueQ953+nEf4D5CIbMxoU1Gn1U9sQJFY:oJiaq6zYuj95LxoU1Gn1U9sQJFY |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.robinhood | 2.11 KB |
MD5:
c2aff352f4e0729e39c02c1f7807cb74
SHA1: 1d9fc6fdb62ae08febcc93e0368b5544b0f07703 SHA256: 0d145d7656331161acd8ec780d04c4537aea2b6ae0d9bac402744f44242352a8 SSDeep: 48:grOXkNzlSowhn/0zS95v32EIMItcIoGnTx8K+jVV6PkTnF/SdYx:cO0NzlC/79ZmEI4IoOT6KAV6wF4e |
|
|
| C:\Robinhood\encfiles.txt | 15.34 KB |
MD5:
f7ec90727e868a888d52626cd1f5c41d
SHA1: 3fa2cb82204029644bca19b5ecbd4ed20f0cf7d1 SHA256: b4bc970e7528a559f4b7fedaaea3fad9cfc36a7b3093edb4f960809bf6442d4b SSDeep: 192:oJiaq6z/wueQ953+nEf4D5CIbMxoU1Gn1U9sQJFvh:oJiaq6zYuj95LxoU1Gn1U9sQJFvh |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.robinhood | 210.83 KB |
MD5:
450e31b57f988f5d8f622b310fbdb131
SHA1: e1ffc829b1c87b4cafa276221ad50fd14a1754f8 SHA256: 904553c1b29d9fa0d7f987d6a69423a7a34f18fedaca27d99962ffa3ebaa23d0 SSDeep: 6144:VzzvOjx9ebBkw9MIFh5GTK7/2Mge+RFKb:pm9lq/GS/2E+Q |
|
|
| C:\Robinhood\encfiles.txt | 15.44 KB |
MD5:
c65b0b7991934233de56c1cb2b928ab2
SHA1: 3464a29c2bfacdb1a5ccce7d46d50c0dbccc9736 SHA256: fc4b730424d99da5ceef4c16177bfc5970a0fb1ab485463d51d56813c17ba975 SSDeep: 192:oJiaq6z/wueQ953+nEf4D5CIbMxoU1Gn1U9sQJFvuf:oJiaq6zYuj95LxoU1Gn1U9sQJFvuf |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.robinhood | 1.23 KB |
MD5:
ac09a7b0b07564af613b77d38e32778c
SHA1: c1a4bf05b07a7786576c7642e4d72311e0bbc149 SHA256: 75d7b38ef6d2a4416b820d3c5983824ddc1dd3041babac25899c579e3800dade SSDeep: 24:DUrO8HMkNz7H4IRFh6ojYxh2ZUwJb+O2Hb8bC+FITzjsXPpCZF+rntgJoO:grOXkNzlSowhwR8b82+2777qO |
|
|
| C:\Robinhood\encfiles.txt | 15.55 KB |
MD5:
1bdaa1492aba3dabb6a54b7dfc92dfc7
SHA1: c7f145f1cdec0856d0d7005a39996c1ed3b9eb2d SHA256: 0aae8c2718fdd71376691caaaa7cf454a92d36046c5b05163c7263b8147877d4 SSDeep: 192:oJiaq6z/wueQ953+nEf4D5CIbMxoU1Gn1U9sQJFvuIi:oJiaq6zYuj95LxoU1Gn1U9sQJFvuIi |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.robinhood | 1.23 KB |
MD5:
099c8b5bbdd3ad1ed657974e212d2135
SHA1: c68ac64667c8c02bf168b05bf13d75f9164067e4 SHA256: a1dc2e437449f23be87be3bada21c5ff7ea27630a39d873174d2027e0e488c10 SSDeep: 24:DUrO8HMkNz7H4IRFh6ojYxh2yqg8bCFHaO2G6etAlutN6XqyyFLx//RZ450zsY6H:grOXkNzlSowhkmSG6kAluOyZpc |
|
|
| C:\Robinhood\encfiles.txt | 15.65 KB |
MD5:
7e3f8a3c2f8d80a785f33ca1f2a925c6
SHA1: 96e143accdfb1250da8f977d691b95f60c805eba SHA256: 2f9a6bf5a8a70f856cf96176c578a2a96331a67f0173b1406ac4312586dabc64 SSDeep: 192:oJiaq6z/wueQ953+nEf4D5CIbMxoU1Gn1U9sQJFvuI9I:oJiaq6zYuj95LxoU1Gn1U9sQJFvuI9I |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.robinhood | 335.30 KB |
MD5:
d8cfcc9f874a76b09ed1b7a10e4e4616
SHA1: d26b83f1faceb56443a75516999659f9cd50607f SHA256: a5c12520f82e35c373b41df4ed33cbbf8ef72832cc91dde6bc0824f706cd97d5 SSDeep: 6144:h4L7bkIe7BFeoxyoff/w1uyGE4eKeZ+Wd30KrSt/ZCBv8Z33vuvoomWfhD4OF9K:4Ter9/M4ezZ+WRrmRhZ33YohsD4OC |
|
|
| C:\Robinhood\encfiles.txt | 15.75 KB |
MD5:
5278b122d6bd32914d0b05a913a4808b
SHA1: 47eac83b8f0335f2e4f236014c458619fec21cb0 SHA256: 080696d905c199359b3fa9413481d1eab81a09666bf0cb0c3e3ea7a43dea3d4e SSDeep: 192:oJiaq6z/wueQ953+nEf4D5CIbMxoU1Gn1U9sQJFvuI9fQ:oJiaq6zYuj95LxoU1Gn1U9sQJFvuI9fQ |
|
|
| C:\Robinhood\encfiles.txt | 15.86 KB |
MD5:
bdb09b87e3060937cca0fb0919dab18f
SHA1: 08eb83c0778646b996da0532ed025b369df4e56a SHA256: 44d26e2006e9e626690a39018229c94b654c6c8c4e81e309f28365d785ee105e SSDeep: 384:oJiaq6zYuj95LxoU1Gn1U9sQJFvuI9fnc:olq6zYu55LxoU1Gn1U9sQJFvuI9fnc |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.robinhood | 348.98 KB |
MD5:
ead14e502f5b73b338c40037a3cc3135
SHA1: 25905d12ea754d25c121d525d09631c93922f5af SHA256: f196c45c24f0c9c582adff076b2ca144833d3879e6ad7b13eb6af9d1193469a9 SSDeep: 6144:yavwXQIHv/RH5rteDko+HN0OQ30fhh4EmCnNI/A3ewuR32R6w3gUoAzK+kG:Vu7UD7+H6OQ30JWrCnNI/2ew7jgUNG6 |
|
|
| C:\Robinhood\encfiles.txt | 15.96 KB |
MD5:
5ccc29fdc1149b713ec9f7df7ba492c1
SHA1: 99c2b464f554c80f14afc0a2621705c6a9260a8a SHA256: e81b2c81d497f53038899ef493f73207ed312a8cad6496c886bc6242cfa23c12 SSDeep: 384:oJiaq6zYuj95LxoU1Gn1U9sQJFvuI9fnrJ:olq6zYu55LxoU1Gn1U9sQJFvuI9fnrJ |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.robinhood | 1.23 KB |
MD5:
dc4aebce54fc31996a41abac17fb7e67
SHA1: 87df3aa51db58f0d54336075db358c8b6b573142 SHA256: 5e34d0a396e47af64b1d8c694ce4106427bfafd0270ba57f8e7398a8efc5f131 SSDeep: 24:DUrO8HMkNz7H4IRFh6ojYxh2kk/roeGpUyuV+vNjbkUGdDZ1GJvBUAG2VYSGM:grOXkNzlSowh/k/2yV+lj1GeZHGYbGM |
|
|
| C:\Robinhood\encfiles.txt | 16.07 KB |
MD5:
ca376acb43724acf0759920d21d25196
SHA1: 9935dbbb1fbd6606b01d302ab93d1ff92433afb6 SHA256: 1cd70ef549a05a76f66aea8542e4595b2960a9c7217baf3f64b3252b6683ac79 SSDeep: 384:oJiaq6zYuj95LxoU1Gn1U9sQJFvuI9fnr2A:olq6zYu55LxoU1Gn1U9sQJFvuI9fnr2A |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.robinhood | 63.48 KB |
MD5:
b6ae42de3e7247f695d9d989b5117af0
SHA1: d11334dd9c0a9aa67f4f1211278983c8b641132d SHA256: a2af02f828bc920f48ac514b1570a02d0faadf48cef05037f9b08487f41c3b2c SSDeep: 1536:nlCEP30oBeUnRXD1nj2/6nyLK/vUNfsVTKYRa1iFyQFqdr:zP3045VyuUN+KdcoSSr |
|
|
| C:\Robinhood\encfiles.txt | 16.17 KB |
MD5:
c840b37a2b8a67d29878496431a8e2fa
SHA1: 76910e51e33cab1dbdf5b655a2682cf3929c2384 SHA256: e541b0b043c04c28ef8ba929f98e6a1a96a04f6ac9654d2059176f203b36ce68 SSDeep: 384:oJiaq6zYuj95LxoU1Gn1U9sQJFvuI9fnr2Xi:olq6zYu55LxoU1Gn1U9sQJFvuI9fnr2y |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.robinhood | 1.23 KB |
MD5:
150bf091e4abc631d9239f7dec359bd7
SHA1: 5eda0808514bdf31138c814261341e913a681702 SHA256: 879c90383d690454a6541b3a8617d61351b956ce67e99a50a46bdab68e2c8a28 SSDeep: 24:DUrO8HMkNz7H4IRFh6ojYxh2vM/jbk3iv+nv4OjVolAQ3SPOLVZ:grOXkNzlSowhl83h4+AAQaA/ |
|
|
| C:\Robinhood\encfiles.txt | 16.27 KB |
MD5:
40bd6af03a02cc70ea12e6bf9e52991d
SHA1: 3ac45061274cd842709ab1b05ac8f99bf2f0beb6 SHA256: 51935b630a58eff00566adab9adbc53a2febcec5c48d3e02b9539684b859adbc SSDeep: 384:oJiaq6zYuj95LxoU1Gn1U9sQJFvuI9fnr2X9L:olq6zYu55LxoU1Gn1U9sQJFvuI9fnr2p |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.robinhood | 1.23 KB |
MD5:
dc9e42560c6361ad15425c6a749eb365
SHA1: 9fde5560d8de2c7acd744c69c9f72fa47eae78bb SHA256: 576241192f5b2c25034e9d9cfd53a1ed14a9f98e548417b711c4d8705bcac222 SSDeep: 24:DUrO8HMkNz7H4IRFh6ojYxh2cJpVXVxqsGwfWbLOlsgd49pdEM3l+X:grOXkNzlSowhBJp9Vs8O2lsgCpkX |
|
|
| C:\Robinhood\encfiles.txt | 16.38 KB |
MD5:
08e27be3ef4f7af1f5f5660188a6b445
SHA1: 93afbc8127988e2160f4f93200d1dfcbc8623887 SHA256: b821d48c69c618565316ec1785967fc2c140496458b2fdcb495b9b38046f41e5 SSDeep: 384:oJiaq6zYuj95LxoU1Gn1U9sQJFvuI9fnr2X9sD:olq6zYu55LxoU1Gn1U9sQJFvuI9fnr2a |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.robinhood | 9.02 KB |
MD5:
26db35ec8da32ea5c1e539f075749965
SHA1: 1ac8df95075e108c2dd4db28fd669ba855fcf26f SHA256: 172bb47fed9e7321f1bae0bfe5eeef89a617327177580a18e7ad0c1ff089fd60 SSDeep: 192:cOKAsyQbAl0fsB6FKEz5IS3N01muA9IM457lL+XAfic7BK/XwhwU5K5iARF7:BTQcKf2XkOS3G1m4M4RV+Kic7BIXwB5q |
|
|
| C:\Robinhood\encfiles.txt | 16.48 KB |
MD5:
f37fc19514f070b723eaf434237ae0de
SHA1: f0ebab4df167c570e1ab2f72c8ead6d22b0a9380 SHA256: a0d0aa86d4b0ddc6c76f3053980b3bcb107cbc879282d983c6942bf07748d6a1 SSDeep: 384:oJiaq6zYuj95LxoU1Gn1U9sQJFvuI9fnr2X9sE1:olq6zYu55LxoU1Gn1U9sQJFvuI9fnr2X |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.robinhood | 1.23 KB |
MD5:
b8b5bfee9fee676478c4c26767d32697
SHA1: cc01ee0c066cbd5d2ab88c800c406c011380cd43 SHA256: e80132ce74a7036b03549493d0b2932521d95af4f2ecd5475c82fd1a43d6f783 SSDeep: 24:DUrO8HMkNz7H4IRFh6ojYxh2JNIiINwte4ywBHoQS0jZo5QNFDpy2HZ:grOXkNzlSowhWnte4y8HlG5QNNpX5 |
|
|
| C:\Robinhood\encfiles.txt | 16.58 KB |
MD5:
47fd82606f56f1a9fdffc45ac27a5405
SHA1: 19275215fe6960765d7978882c8ea9722afa4d06 SHA256: 180b81d5997b31eaf7f30396181e0105efbb699b394b3e457e5832f5a3504c7c SSDeep: 384:oJiaq6zYuj95LxoU1Gn1U9sQJFvuI9fnr2X9sE6k:olq6zYu55LxoU1Gn1U9sQJFvuI9fnr2X |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.robinhood | 390.17 KB |
MD5:
db55e0dd1846f61087012e8d7be15415
SHA1: 76f5f6d90b929dd7d202a3f5eb1ec8c5391b8c51 SHA256: 0a9f0dd4950ce8c4941def0d1f0a0b83105a76aff42f411030fb17477a5797bb SSDeep: 6144:qvkhjXQypszth25kaz7LOTer6xKzRx7nj201qXFwZbLTn3Ukj0vzQbXJB:q8tWTqz3Os6gRBX/v3Tm0bZB |
|
|
| C:\Robinhood\encfiles.txt | 16.69 KB |
MD5:
519acf225d6132e0611471d99c7bf31f
SHA1: deda3f317d27a8d5bd6fc8b6eb0868f8dc24a964 SHA256: 191ea4d42cdafdf295071c5081d1c214d840e8383507f4194c8afb293f548d42 SSDeep: 384:oJiaq6zYuj95LxoU1Gn1U9sQJFvuI9fnr2X9sE6zE:olq6zYu55LxoU1Gn1U9sQJFvuI9fnr2H |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.robinhood | 1.23 KB |
MD5:
797d2712141168f534f0f3a5e75d17de
SHA1: b0b8524d849d8a956e7249aed888e4ca3d3ca6d0 SHA256: 06260f190bcb00f09433c69a38fdbf35669a8853964d3fb784f1a2a46524fdc3 SSDeep: 24:DUrO8HMkNz7H4IRFh6ojYxh2z4RqQ0oH/f57AEw6fMh+y+r5frDYd0ccWw2LCK:grOXkNzlSowhTqr+f57ALTh+9VfrDq0g |
|
|
| C:\Robinhood\encfiles.txt | 16.79 KB |
MD5:
c92dd096f8050761603add88d05c7c73
SHA1: c434141355d2ed42d32a5c2034d6397de1848d2b SHA256: 46b66f8d1c4d3b264b79ce8ffd2070ebecfe5c712291aead44aad4587479be1f SSDeep: 384:oJiaq6zYuj95LxoU1Gn1U9sQJFvuI9fnr2X9sE6zT1:olq6zYu55LxoU1Gn1U9sQJFvuI9fnr2W |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.robinhood | 1.42 KB |
MD5:
bdf78acadca062cadfc483571bf20253
SHA1: 2b1b7c37fddf7c19e1837d4185c437d609a2c3d2 SHA256: d8bee3d04de09b861d485eed02db56e2377a57c175fa6e327dcdf0d4e6ca2967 SSDeep: 24:DUrO8HMkNz7H4IRFh6ojYxh2gMWPy9CEETjkrcrVfRGEawTDZz0fgVAVPFjvgyNf:grOXkNzlSowhMJ9vEXkcfvTDZDWY0RtV |
|
|
| C:\Robinhood\encfiles.txt | 16.89 KB |
MD5:
5eb945f2e1d37884c024af839247e2ea
SHA1: 0f4368f6e594194b516f6be3d1a232d1bde59a7e SHA256: 3fdf72553bc630818062291a9a870b8f8090e2efeb89de03fc4f37eac8f07b80 SSDeep: 384:oJiaq6zYuj95LxoU1Gn1U9sQJFvuI9fnr2X9sE6zT6O:olq6zYu55LxoU1Gn1U9sQJFvuI9fnr2Q |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.robinhood | 1.23 KB |
MD5:
63021ce45af90548f956e5c62ef8facb
SHA1: d7cf3b2b6d4d912349a5a0d3ef0cd9b04ea889f0 SHA256: dd299f296534bf31db5098d41eadc33478517ac6d198c22ff94a6857e9b2c394 SSDeep: 24:DUrO8HMkNz7H4IRFh6ojYxh2CbPrbrztjWtWPxuTJVdw6l2GH7UAzc:grOXkNzlSowhdrhqtu4JV9lvbU0c |
|
|
| C:\Robinhood\encfiles.txt | 17.00 KB |
MD5:
b84912bed55a1db65f786ed651066911
SHA1: 9411b1a5017ff9a60e45adae86df31b7d672c0fd SHA256: 2c215605ecfcf8a90db4a8ec511f2adddc1ad5411c21eef423d5f32c593fc028 SSDeep: 384:oJiaq6zYuj95LxoU1Gn1U9sQJFvuI9fnr2X9sE6zT6Rf:olq6zYu55LxoU1Gn1U9sQJFvuI9fnr2f |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.robinhood | 3.67 KB |
MD5:
cb533c0492e8700d9800c3dec252d3d1
SHA1: 08b261af3329ccb805813b628a675fdfcca60964 SHA256: a89308d34281158be98cd2a71599e14dc3d0449e970bee9b97a28b5ee1060dad SSDeep: 96:cO0NzlCkQdsbNygaaEF7GbaMp9PQ5W7vP/tsxwkP2FLJ:cOK/rxaaEobaI45WD1sikQLJ |
|
|
| C:\Robinhood\encfiles.txt | 17.10 KB |
MD5:
c7a5818b2c2056c247817b0fe21f6bd0
SHA1: 1affc9f6e3a84b4364447804f882ae732abd53ed SHA256: 4861c28bb9a9d738129a1be72dc0174c6522d7918600f2b3f6a68c8638d008f2 SSDeep: 384:oJiaq6zYuj95LxoU1Gn1U9sQJFvuI9fnr2X9sE6zT6RIz:olq6zYu55LxoU1Gn1U9sQJFvuI9fnr2k |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.robinhood | 1.23 KB |
MD5:
9158b23288fe1e4ff06c0f080fa4d4ff
SHA1: 203d5dd5962c27539a6ba08a42415dcc457dfbd9 SHA256: ca7c57219adbc50021bb7665525a8e2bb53ced0c7dd8c0ef4f8d93dfff2c31b9 SSDeep: 24:DUrO8HMkNz7H4IRFh6ojYxh2t5qR1k3sDFAZkKLXtieEUA09PLr:grOXkNzlSowhacUqKLkeEUAo |
|
|
| C:\Robinhood\encfiles.txt | 17.20 KB |
MD5:
d532ba0ea3abd229f8154b47abc8fe03
SHA1: c9ad7231ad98bfc9c24a179908be6d6999feb7b9 SHA256: 2c75dfc95c3b81cfb41033f8fd55ca08bcef7c98b81e3191bab157a1f840db75 SSDeep: 384:oJiaq6zYuj95LxoU1Gn1U9sQJFvuI9fnr2X9sE6zT6RI06:olq6zYu55LxoU1Gn1U9sQJFvuI9fnr2u |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.robinhood | 1.23 KB |
MD5:
aca45295a5165d123ab461229b241da9
SHA1: f856d7ab14b53153e6bee2bc3c8c21566963041c SHA256: 7a118e8f570444f6fba1ae61b4620b96a2ff15b818901f14e97484a955ab63e7 SSDeep: 24:DUrO8HMkNz7H4IRFh6ojYxh2RLtga2hd4swqlrSLUjI8aMZEbHVWe6RkjNM:grOXkNzlSowh0ya26qlrSWTTcHViSjm |
|
|
| C:\Robinhood\encfiles.txt | 17.31 KB |
MD5:
defdb39f685dd401c5b2b9cabeffec0a
SHA1: 05eaf0d3eba198b41092dec48313818fc298f4d6 SHA256: 5df5e5cafdbf66beba8f89c98dbbd45cb1dca727dd0509f67491abb3d195f12b SSDeep: 384:oJiaq6zYuj95LxoU1Gn1U9sQJFvuI9fnr2X9sE6zT6RI0VA:olq6zYu55LxoU1Gn1U9sQJFvuI9fnr2q |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.robinhood | 1.23 KB |
MD5:
df4b1f50ea4485db861ed3b5bdb903d9
SHA1: 85234d74ae050738d3acd4633c004cf6e3c3390c SHA256: 44865383baaf5ec71f1380c9f7e4de881075c148fb687241143c38a63c045eac SSDeep: 24:DUrO8HMkNz7H4IRFh6ojYxh2L25Qj7iz/DPpkBped99gbSpc51OKL01OT:grOXkNzlSowhAMQiDyad9KmpcOKL06 |
|
|
| C:\Robinhood\encfiles.txt | 17.41 KB |
MD5:
0aa8e7c170b80a5ec4f8e4ac0e14437a
SHA1: 421af678e2e10f35d9654c7b4012ce3edd2bf315 SHA256: 5669f9069274be7cd8d71cc1cc119e0130e95407187773da627b632bd383a0b6 SSDeep: 384:oJiaq6zYuj95LxoU1Gn1U9sQJFvuI9fnr2X9sE6zT6RI0VXe:olq6zYu55LxoU1Gn1U9sQJFvuI9fnr2I |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.robinhood | 515.59 KB |
MD5:
3cac92cf229c7125ca81bf1a66c81042
SHA1: 4de887f249fd1681f470692c2e6adac950d4a7a5 SHA256: ecfb928938096b4741caa87d90b461d7b61b7f6432ed1484d585f5e5410b23e3 SSDeep: 12288:weMonBLiVVR51olTZllcaz8JopJw5xKENsoFbB43t:RDn8XR5K8oW1soF4 |
|
|
| C:\Robinhood\encfiles.txt | 17.51 KB |
MD5:
4fa3a252781dded937031d231154c0c1
SHA1: d3527a4d0bd575030b116c670a6fc02c21931a4a SHA256: 57372c10bea9a2856d6219279d32546b23b951f3d7e7bdf2aff6e16c079cfb5c SSDeep: 384:oJiaq6zYuj95LxoU1Gn1U9sQJFvuI9fnr2X9sE6zT6RI0VXhS:olq6zYu55LxoU1Gn1U9sQJFvuI9fnr26 |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.robinhood | 1.23 KB |
MD5:
cce8a0ef1b9a58a1b85a2e547cef85a8
SHA1: 0fb31afe461c60f6b62bcbab9bb201c334590caf SHA256: 55cbb0c21b9f06272f4d3797f62ba9c398da8e8e76b9b889229b4e6bb71d0baa SSDeep: 24:DUrO8HMkNz7H4IRFh6ojYxh2/uK5KuxO6qicGTPpzVTwrWGq7CQPl16+l9:grOXkNzlSowhwuBifBtLGq+wBz |
|
|
| C:\Robinhood\encfiles.txt | 17.62 KB |
MD5:
6208b714f4fc0c8e336e0009c158dabf
SHA1: 9efd2d21238cbaa872944911a6c21ad2e79f63c1 SHA256: 1a57c8b9aede42b345eff47b58a8fbd19433ed62cffb5c2fda1b26729c4d0f69 SSDeep: 384:oJiaq6zYuj95LxoU1Gn1U9sQJFvuI9fnr2X9sE6zT6RI0VXht2:olq6zYu55LxoU1Gn1U9sQJFvuI9fnr20 |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.robinhood | 3.30 KB |
MD5:
a0e3c5965722e1dbdcba2feccbf2f299
SHA1: 2ec53172461d00557799e14c7c4c04caac9e3167 SHA256: aa7c82c6a57024994522c3e8e5d510a52b607289053f4468b5e7903be1800acf SSDeep: 96:cO0NzlH0WqIODPqbTJKBUfRoIX0nihYnGhFWwt:cOKR0W6LqbTPmIX0Rhwt |
|
|
| C:\Robinhood\encfiles.txt | 17.72 KB |
MD5:
f7f9134eef5cad1ba6ad3ab809159b14
SHA1: 8f8a58c00a1cfc57bad9a66627e2cc8c70b3a095 SHA256: 5d0b00bf40de0d9142603481e1fdd384ae60e19a145343400e91be539d98498d SSDeep: 384:oJiaq6zYuj95LxoU1Gn1U9sQJFvuI9fnr2X9sE6zT6RI0VXht5L:olq6zYu55LxoU1Gn1U9sQJFvuI9fnr2P |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.common.xml.robinhood | 2.07 MB |
MD5:
b0d201192fbfeef5e19971ee1f607810
SHA1: ea396d0ad180af640da4965b070b72998538b7e2 SHA256: 325e475ca39eb8fce7aee5fb854b125f66cba9245417660ef98706232fa16201 SSDeep: 49152:MQD4ka4299x1r+ATC4hcO301ptvMFlg0a4UkG:MQckK6ACUc/QFrbUkG |
|
|
| C:\Robinhood\encfiles.txt | 17.80 KB |
MD5:
814f9372474d0437e2fbc5842260e3e1
SHA1: d7da7772535254e70da954bea04142795707f0d7 SHA256: c22f3275201cfc1161a6943cea3ef15d14ccad63c0f5ba907fed6f914c2d58b2 SSDeep: 384:oJiaq6zYuj95LxoU1Gn1U9sQJFvuI9fnr2X9sE6zT6RI0VXht5sB:olq6zYu55LxoU1Gn1U9sQJFvuI9fnr2K |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AppXManifestLoc.en-us.xml.robinhood | 9.61 KB |
MD5:
9d78a1cc79a5303e7022180216cf8d24
SHA1: fa7f5f9d4591738b7ab3bfe2c98fcc938ba0e42b SHA256: a40b8e8870fbe9b4be0e8e516ac4139c3642f515f4d76e091e11ad96107c944f SSDeep: 192:VNwZH5VbptoSD2PFStX0yDvcHOXp2/tmq1iwxnjYgKp:VNwZp/D0cevjlmq13j+ |
|
|
| C:\Robinhood\encfiles.txt | 17.87 KB |
MD5:
cee76e424c6f380f7401c5ec08793c05
SHA1: c19e36615e923f4c2ee1c31e0be01e2883743b07 SHA256: cfd0687e745dee870e8ccc449924e59e3083cca86153f779fdb1113d6c9ded06 SSDeep: 384:oJiaq6zYuj95LxoU1Gn1U9sQJFvuI9fnr2X9sE6zT6RI0VXht5sOy:olq6zYu55LxoU1Gn1U9sQJFvuI9fnr24 |
|
|
| C:\Program Files\Microsoft Office\PackageManifests\AuthoredExtensions.xml.robinhood | 0.38 KB |
MD5:
97e6bd21afb8bc0d16479e9c56a4a5a7
SHA1: 64fdaa544200027e543057ad352e124b77589188 SHA256: e6559fdbd0d1f54ae7f046150b066d997f07ece7e4e2651269e7c6083cf4976b SSDeep: 6:mZ8f072nbc7h6xsPkFu8uh3vzAHcnaVfu/gdzkjMD5vbcIik7jpj1kXZXSeXUa5L:m262nbsXM4v/sHAa1uIKjMDNLikzkXZp |
|
|
| C:\Robinhood\encfiles.txt | 17.95 KB |
MD5:
0c86b7cd6b7560fd9cf652ff845b7d57
SHA1: ae0c4989d1f5734ff7b157ae52aa54d162d1f2df SHA256: 083db9f09c5be7d1981c5edfed2619f4d83aafa87e22acf8f8a2239ace6cfedb SSDeep: 384:oJiaq6zYuj95LxoU1Gn1U9sQJFvuI9fnr2X9sE6zT6RI0VXht5sON0:olq6zYu55LxoU1Gn1U9sQJFvuI9fnr2s |
|
|
| C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00004_.GIF.robinhood | 8.83 KB |
MD5:
bf3e6a180096525776e38dc359d5a667
SHA1: b855936a63188f85723c1dc52fc39ffaaa9e24ae SHA256: 6ad40f575e72fb984923e6839e35538942be86a6e7328c79755fb20d4a8272fc SSDeep: 192:Qd6SSEDQnZf45jDKONn2Modrxiz23AnrWd/uvu8cCv2xwwChTp/X:Qd60DgC/pNn2MMrsGOcCuAhTZ |
|
|
| C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00011_.GIF.robinhood | 7.06 KB |
MD5:
b246f4de019e1002d244446b0a5630c7
SHA1: 91330c903b10bd3aabc47420376e2bd6f2a8ed22 SHA256: ca0d024eb03fdb79b790906d7619377b92cbeb427c65f5720f003eda99a6fc42 SSDeep: 192:f49zHvYngSG1w987/oQONFkJLrP2hqBnvGR0MSB6cpn:AJPYngSG1w98CNFgPwqBn+iMSYcp |
|
|
| C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00021_.GIF.robinhood | 14.53 KB |
MD5:
54e484872c9fe4b9cac1f8652a0d0a00
SHA1: 8c02ebacb8176b403a72a9b08501995bafca6d17 SHA256: e84be242446a1cb06cfbd40ea8655d588a65dc42e30a9409fcfac4f8d7c991c1 SSDeep: 384:wW49nJ2HFOptYlEVtMBMS/3UENrpXEjc5y4yu+Sh:f4DsOptYlGtMaI3pNxEu+Sh |
|
|
| C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00037_.GIF.robinhood | 6.53 KB |
MD5:
9db721f5486c5c9cd138811c375efa33
SHA1: 9d6bbf624b6fbdf8cdb86ba3f4ee4ffcd7a60f0e SHA256: 412fbc0cb2119be28a7aeaaa687afd3712f73c604cb38af430dd02bfd55f08ba SSDeep: 192:QrMhDv2ft1ix4TTh7QGxRWvfwN/cQMJqj8th:JDkAxexkvYNnM3h |
|
|
| C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00038_.GIF.robinhood | 3.19 KB |
MD5:
bb61c5ab158c3865af51feb852dfcc77
SHA1: 8648daa331abbd5ed1ff8b108228e5934ea9dc87 SHA256: 8bdbbf2c664c0d942e7618fdc481b5afb24adb27bff49ebc0402be3a4cf02205 SSDeep: 96:OpOx1JZ8AnYO00E+pImudeWnpJkB6ldy80Vzm:OpU1JxYOZEgLLCeMlcy |
|
|
Host Behavior
File (6106)
| Operation | Filename | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Create | C:\Robinhood\encfiles.txt | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL |
|
1 | |
| Create | C:\Robinhood\log.txt | desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL |
|
1 | |
| Create | C:\Robinhood\log.txt | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, FILE_FLAG_SEQUENTIAL_SCAN, share_mode = FILE_SHARE_READ |
|
2 | |
| Create | C:\bootmgr | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\bootmgr.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\BOOTNXT | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\BOOTNXT.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Robinhood\encfiles.txt | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, FILE_FLAG_SEQUENTIAL_SCAN, share_mode = FILE_SHARE_READ |
|
187 | |
| Create | C:\BOOTSECT.BAK | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\BOOTSECT.BAK.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Robinhood\log.txt | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, FILE_FLAG_SEQUENTIAL_SCAN, share_mode = FILE_SHARE_READ |
|
25 | |
| Create | C:\hiberfil.sys | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\pagefile.sys | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\swapfile.sys | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\$GetCurrent\Logs\downlevel_2017_09_07_02_02_39_766.log | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\$GetCurrent\Logs\downlevel_2017_09_07_02_02_39_766.log.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\$GetCurrent\Logs\oobe_2017_09_07_03_08_57_737.log | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\$GetCurrent\Logs\oobe_2017_09_07_03_08_57_737.log.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\$GetCurrent\Logs\PartnerSetupCompleteResult.log | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\$GetCurrent\Logs\PartnerSetupCompleteResult.log.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\$GetCurrent\SafeOS\GetCurrentRollback.ini | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\$GetCurrent\SafeOS\GetCurrentRollback.ini.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\DHtmlHeader.html | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\DHtmlHeader.html.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\DisplayIcon.ico | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\DisplayIcon.ico.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\header.bmp | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\header.bmp.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\ParameterInfo.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\ParameterInfo.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\SetupUi.xsd | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\SetupUi.xsd.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\SplashScreen.bmp | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\SplashScreen.bmp.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Strings.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Strings.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\UiInfo.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\UiInfo.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\watermark.bmp | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\watermark.bmp.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1025\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1025\eula.rtf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1025\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1025\LocalizedData.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1028\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1028\eula.rtf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1028\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1028\LocalizedData.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1029\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1029\eula.rtf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1029\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1029\LocalizedData.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1030\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1030\eula.rtf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1030\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1030\LocalizedData.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1031\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1031\eula.rtf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1031\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1031\LocalizedData.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1032\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1032\eula.rtf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1032\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1032\LocalizedData.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1033\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1033\eula.rtf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1033\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1033\LocalizedData.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1035\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1035\eula.rtf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1035\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1035\LocalizedData.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1036\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1036\eula.rtf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1036\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1036\LocalizedData.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1037\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1037\eula.rtf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1037\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1037\LocalizedData.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1038\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1038\eula.rtf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1038\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1038\LocalizedData.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1040\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1040\eula.rtf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1040\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1040\LocalizedData.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1041\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1041\eula.rtf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1041\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1041\LocalizedData.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1042\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1042\eula.rtf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1042\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1042\LocalizedData.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1043\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1043\eula.rtf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1043\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1043\LocalizedData.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1044\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1044\eula.rtf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1044\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1044\LocalizedData.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1045\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1045\eula.rtf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1045\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1045\LocalizedData.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1046\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1046\eula.rtf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1046\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1046\LocalizedData.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1049\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1049\eula.rtf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1049\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1049\LocalizedData.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1053\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1053\eula.rtf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1053\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1053\LocalizedData.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1055\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1055\eula.rtf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1055\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\1055\LocalizedData.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\2052\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\2052\eula.rtf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\2052\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\2052\LocalizedData.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\2070\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\2070\eula.rtf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\2070\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\2070\LocalizedData.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\3076\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\3076\eula.rtf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\3076\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\3076\LocalizedData.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\3082\eula.rtf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\3082\eula.rtf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\3082\LocalizedData.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\3082\LocalizedData.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Client\Parameterinfo.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Client\Parameterinfo.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Client\UiInfo.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Client\UiInfo.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Extended\Parameterinfo.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Extended\Parameterinfo.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Extended\UiInfo.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Extended\UiInfo.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\Print.ico | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\Print.ico.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\Rotate1.ico | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\Rotate1.ico.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\Rotate2.ico | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\Rotate2.ico.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\Rotate3.ico | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\Rotate3.ico.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\Rotate4.ico | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\Rotate4.ico.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\Rotate5.ico | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\Rotate5.ico.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\Rotate6.ico | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\Rotate6.ico.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\Rotate7.ico | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\Rotate7.ico.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\Rotate8.ico | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\Rotate8.ico.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\Save.ico | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\Save.ico.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\Setup.ico | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\Setup.ico.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\stop.ico | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\stop.ico.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\SysReqMet.ico | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\SysReqMet.ico.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\SysReqNotMet.ico | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\SysReqNotMet.ico.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\warn.ico | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\588bce7c90097ed212\Graphics\warn.ico.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\BCD | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\BCD.LOG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\BOOTSTAT.DAT | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\BOOTSTAT.DAT.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\updaterevokesipolicy.p7b | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\updaterevokesipolicy.p7b.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\chs_boot.ttf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\chs_boot.ttf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\cht_boot.ttf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\cht_boot.ttf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\jpn_boot.ttf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\jpn_boot.ttf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\kor_boot.ttf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\kor_boot.ttf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\malgunn_boot.ttf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\malgunn_boot.ttf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\malgun_boot.ttf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\malgun_boot.ttf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\meiryon_boot.ttf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\meiryon_boot.ttf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\meiryo_boot.ttf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\meiryo_boot.ttf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\msjhn_boot.ttf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\msjhn_boot.ttf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\msjh_boot.ttf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\msjh_boot.ttf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\msyhn_boot.ttf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\msyhn_boot.ttf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\msyh_boot.ttf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\msyh_boot.ttf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\segmono_boot.ttf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\segmono_boot.ttf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\segoen_slboot.ttf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\segoen_slboot.ttf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\segoe_slboot.ttf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\segoe_slboot.ttf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\wgl4_boot.ttf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Boot\Fonts\wgl4_boot.ttf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Application.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Application.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\HardwareEvents.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\HardwareEvents.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Internet Explorer.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Internet Explorer.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Key Management Service.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Key Management Service.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Client-Licensing-Platform%4Admin.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Client-Licensing-Platform%4Admin.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-AppLocker%4EXE and DLL.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-AppLocker%4MSI and Script.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-AppLocker%4MSI and Script.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-AppModel-Runtime%4Admin.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-AppReadiness%4Admin.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-AppReadiness%4Admin.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-AppReadiness%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-AppReadiness%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-AppXDeployment%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-AppXDeployment%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-AppxPackaging%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-AppxPackaging%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-DeviceSetupManager%4Admin.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-DeviceSetupManager%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Dhcp-Client%4Admin.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Dhcp-Client%4Admin.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-HotspotAuth%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-HotspotAuth%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-International%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-International%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Kernel-Boot%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Kernel-Boot%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Kernel-PnP%4Configuration.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Kernel-WHEA%4Errors.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Known Folders API Service.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Known Folders API Service.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-LiveId%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-LiveId%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-MUI%4Admin.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-MUI%4Admin.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-MUI%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-MUI%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-NCSI%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-NCSI%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-NetworkProfile%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-NetworkProfile%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Ntfs%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Ntfs%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Ntfs%4WHC.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Ntfs%4WHC.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-SettingSync%4Debug.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-SettingSync%4Debug.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-SettingSync%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-SettingSync%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Shell-Core%4ActionCenter.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Shell-Core%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Shell-Core%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-SmbClient%4Connectivity.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-SmbClient%4Connectivity.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-SMBClient%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-SMBClient%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-SmbClient%4Security.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-SmbClient%4Security.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-SMBServer%4Audit.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-SMBServer%4Audit.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-SMBServer%4Connectivity.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-SMBServer%4Connectivity.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-SMBServer%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-SMBServer%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-SMBServer%4Security.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-SMBServer%4Security.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Store%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Store%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-TaskScheduler%4Maintenance.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-TWinUI%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-TWinUI%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-User Profile Service%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-User Profile Service%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-UserPnp%4ActionCenter.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-UserPnp%4ActionCenter.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-UserPnp%4DeviceInstall.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Wcmsvc%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Wcmsvc%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Windows Defender%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Windows Defender%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Windows Defender%4WHC.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Windows Defender%4WHC.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Winlogon%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-Winlogon%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-WMI-Activity%4Operational.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Microsoft-Windows-WMI-Activity%4Operational.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Security.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Security.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Setup.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Setup.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\System.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\System.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Windows PowerShell.evtx | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Logs\Windows PowerShell.evtx.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\desktop.ini | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\desktop.ini.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Common Files\Services\verisign.bmp | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Common Files\Services\verisign.bmp.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Internet Explorer\images\bing.ico | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Internet Explorer\images\bing.ico.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\COPYRIGHT | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\COPYRIGHT.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\LICENSE | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\LICENSE.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\README.txt | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\README.txt.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\release | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\release.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME-JAVAFX.txt | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME-JAVAFX.txt.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME.txt | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME.txt.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\Welcome.html | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\Welcome.html.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\bin\server\Xusage.txt | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\bin\server\Xusage.txt.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\accessibility.properties | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\accessibility.properties.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\calendars.properties | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\calendars.properties.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\charsets.jar | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\charsets.jar.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\classlist | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\classlist.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\content-types.properties | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\content-types.properties.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy.jar | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy.jar.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Robinhood\encfiles.txt | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, FILE_FLAG_SEQUENTIAL_SCAN, share_mode = FILE_SHARE_READ |
|
287 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\flavormap.properties | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\flavormap.properties.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\hijrah-config-umalqura.properties | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\hijrah-config-umalqura.properties.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\javafx.properties | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\javafx.properties.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\javaws.jar | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\javaws.jar.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\jce.jar | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\jce.jar.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\jfr.jar | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\jfr.jar.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\jfxswt.jar | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\jfxswt.jar.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\jsse.jar | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\jsse.jar.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\jvm.hprof.txt | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\jvm.hprof.txt.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\logging.properties | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\logging.properties.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\management-agent.jar | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\management-agent.jar.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\meta-index | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\meta-index.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\net.properties | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\net.properties.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\plugin.jar | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\plugin.jar.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\psfontj2d.properties | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\psfontj2d.properties.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\resources.jar | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\resources.jar.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\rt.jar | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\rt.jar.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\sound.properties | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\sound.properties.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\tzdb.dat | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\tzdb.dat.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\tzmappings | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\tzmappings.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\ffjcext.zip | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\ffjcext.zip.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages.properties | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages.properties.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_de.properties | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_de.properties.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_es.properties | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_es.properties.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_fr.properties | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_fr.properties.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_it.properties | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_it.properties.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ja.properties | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ja.properties.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ko.properties | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ko.properties.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_pt_BR.properties | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_pt_BR.properties.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_sv.properties | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_sv.properties.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_CN.properties | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_CN.properties.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_HK.properties | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_HK.properties.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_TW.properties | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_TW.properties.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash.gif | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash.gif.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash@2x.gif | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash@2x.gif.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11-lic.gif | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11-lic.gif.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11@2x-lic.gif | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11@2x-lic.gif.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\ext\access-bridge-64.jar | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\ext\access-bridge-64.jar.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\ext\cldrdata.jar | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\ext\cldrdata.jar.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\ext\dnsns.jar | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\ext\dnsns.jar.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\ext\jaccess.jar | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\ext\jaccess.jar.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\ext\jfxrt.jar | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\ext\jfxrt.jar.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\ext\localedata.jar | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\ext\localedata.jar.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\ext\meta-index | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\ext\meta-index.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\ext\nashorn.jar | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\ext\nashorn.jar.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\ext\sunec.jar | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\ext\sunec.jar.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\ext\sunjce_provider.jar | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\ext\sunjce_provider.jar.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\ext\sunmscapi.jar | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\ext\sunmscapi.jar.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\ext\sunpkcs11.jar | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\ext\sunpkcs11.jar.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\ext\zipfs.jar | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\ext\zipfs.jar.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiBold.ttf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiBold.ttf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiItalic.ttf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiItalic.ttf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightItalic.ttf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightItalic.ttf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightRegular.ttf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightRegular.ttf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansDemiBold.ttf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansDemiBold.ttf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansRegular.ttf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansRegular.ttf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterBold.ttf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterBold.ttf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterRegular.ttf | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterRegular.ttf.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\cursors.properties | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\cursors.properties.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\invalid32x32.gif | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\invalid32x32.gif.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyDrop32x32.gif | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyDrop32x32.gif.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyNoDrop32x32.gif | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyNoDrop32x32.gif.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkDrop32x32.gif | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkDrop32x32.gif.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkNoDrop32x32.gif | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkNoDrop32x32.gif.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveDrop32x32.gif | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveDrop32x32.gif.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveNoDrop32x32.gif | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveNoDrop32x32.gif.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\management\management.properties | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\management\management.properties.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\security\blacklist | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\security\blacklist.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\security\cacerts | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\security\cacerts.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\security\local_policy.jar | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\security\local_policy.jar.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\security\US_export_policy.jar | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Java\jre1.8.0_144\lib\security\US_export_policy.jar.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\AppXManifest.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\AppXManifest.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\FileSystemMetadata.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\FileSystemMetadata.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\Office16\SLERROR.XML | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\Office16\SLERROR.XML.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.common.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.common.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifestLoc.en-us.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AppXManifestLoc.en-us.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AuthoredExtensions.xml | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\PackageManifests\AuthoredExtensions.xml.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00004_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00004_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00011_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00011_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00021_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00021_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00037_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00037_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00038_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00038_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00040_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00040_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00052_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00052_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00057_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00057_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00090_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00090_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00092_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00092_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00103_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00103_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00120_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00120_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00126_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00126_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00129_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00129_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00130_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00130_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00135_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00135_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00139_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00139_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00142_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00142_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00154_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00154_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00157_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00157_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00158_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00158_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00160_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00160_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00161_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00161_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00163_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00163_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00164_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00164_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00165_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00165_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00167_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00167_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00169_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00169_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00170_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00170_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00171_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00171_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00172_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00172_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00174_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00174_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00175_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00175_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00176_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00176_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BABY_01.MID | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BABY_01.MID.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD10890_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD10890_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD10972_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD10972_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19563_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19563_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19582_.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19582_.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CARBN_01.MID | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CARBN_01.MID.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CMNTY_01.MID | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CMNTY_01.MID.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EAST_01.MID | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EAST_01.MID.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EXPLR_01.MID | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EXPLR_01.MID.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FALL_01.MID | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FALL_01.MID.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FINCL_01.MID | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FINCL_01.MID.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FINCL_02.MID | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FINCL_02.MID.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\GRDEN_01.MID | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\GRDEN_01.MID.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\GRID_01.MID | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\GRID_01.MID.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HTECH_01.MID | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HTECH_01.MID.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\INDST_01.MID | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\INDST_01.MID.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0075478.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0075478.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099145.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099145.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099147.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099147.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099148.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099148.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099150.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099150.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099152.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099152.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099154.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099154.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099155.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099155.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099156.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099156.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099157.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099157.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099160.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099160.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099161.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099161.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099162.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099162.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099165.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099165.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099166.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099166.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099167.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099167.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099168.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099168.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099185.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099185.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099186.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099186.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099187.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099187.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099188.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099188.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099189.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099189.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099190.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099190.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099191.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099191.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099192.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099192.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099193.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099193.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099194.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099194.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099195.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099195.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099196.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099196.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099197.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099197.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099198.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099198.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099199.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099199.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099200.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099200.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099201.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099201.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099202.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099202.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099203.GIF | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099203.GIF.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101856.BMP | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101856.BMP.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101857.BMP | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101857.BMP.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101858.BMP | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101858.BMP.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101859.BMP | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101859.BMP.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101860.BMP | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101860.BMP.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101861.BMP | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101861.BMP.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101862.BMP | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101862.BMP.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101863.BMP | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101863.BMP.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101864.BMP | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101864.BMP.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101865.BMP | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101865.BMP.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101866.BMP | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101866.BMP.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101867.BMP | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101867.BMP.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0144773.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0144773.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145168.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145168.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145212.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145212.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145272.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145272.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145361.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145361.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145373.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145373.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145669.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145669.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145707.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145707.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145810.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145810.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145879.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145879.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145895.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145895.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145904.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145904.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0146142.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0146142.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0148309.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0148309.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0148757.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0148757.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0148798.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0148798.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0149018.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0149018.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0149118.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0149118.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0164153.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0164153.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0174952.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0174952.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0175361.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0175361.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0175428.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0175428.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0177257.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0177257.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0177806.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0177806.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178348.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178348.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178459.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178459.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178460.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178460.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178523.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178523.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178632.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178632.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178639.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178639.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178932.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178932.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0179963.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0179963.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0182689.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0182689.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0202045.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0202045.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0216112.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0216112.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0216153.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0216153.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0227419.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0227419.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0227558.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0227558.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0287641.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0287641.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0287642.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0287642.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0287643.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0287643.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0287644.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0287644.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0287645.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0287645.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0289430.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0289430.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309480.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309480.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309567.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309567.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309585.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309585.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309598.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309598.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309664.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309664.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309705.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309705.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0313896.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0313896.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0313965.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0313965.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0313970.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0313970.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0313974.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0313974.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0314068.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0314068.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0315580.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0315580.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0315612.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0315612.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0321179.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0321179.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0337280.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0337280.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341328.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341328.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341344.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341344.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341439.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341439.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341447.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341447.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341448.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341448.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341455.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341455.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341475.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341475.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341499.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341499.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341534.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341534.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341551.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341551.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341554.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341554.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341557.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341557.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341559.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341559.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341561.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341561.JPG.robinhood | desired_access = GENERIC_WRITE, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Create | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341634.JPG | desired_access = GENERIC_READ, file_attributes = FILE_FLAG_OPEN_NO_RECALL, share_mode = FILE_SHARE_READ |
|
1 | |
| Write | C:\Program Files\desktop.ini.robinhood | size = 176 |
|
1 | |
| Write | C:\Program Files\Common Files\Services\verisign.bmp.robinhood | size = 2704 |
|
1 | |
| Write | C:\Program Files\Internet Explorer\images\bing.ico.robinhood | size = 5440 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\COPYRIGHT.robinhood | size = 3248 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\LICENSE.robinhood | size = 48 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\README.txt.robinhood | size = 48 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\release.robinhood | size = 544 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME-JAVAFX.txt.robinhood | size = 63936 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME.txt.robinhood | size = 145184 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\Welcome.html.robinhood | size = 960 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\bin\server\Xusage.txt.robinhood | size = 1424 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\accessibility.properties.robinhood | size = 160 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\calendars.properties.robinhood | size = 1392 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\charsets.jar.robinhood | size = 3036928 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\classlist.robinhood | size = 84368 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\content-types.properties.robinhood | size = 5552 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\deploy.jar.robinhood | size = 5040096 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\flavormap.properties.robinhood | size = 3936 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\hijrah-config-umalqura.properties.robinhood | size = 13968 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\javafx.properties.robinhood | size = 64 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\javaws.jar.robinhood | size = 944176 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\jce.jar.robinhood | size = 116448 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\jfr.jar.robinhood | size = 560592 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\jfxswt.jar.robinhood | size = 33936 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\jsse.jar.robinhood | size = 584592 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\jvm.hprof.txt.robinhood | size = 4240 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\logging.properties.robinhood | size = 2464 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\management-agent.jar.robinhood | size = 384 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\meta-index.robinhood | size = 2128 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\net.properties.robinhood | size = 4480 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\plugin.jar.robinhood | size = 1923216 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\psfontj2d.properties.robinhood | size = 10400 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\resources.jar.robinhood | size = 3492576 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\rt.jar.robinhood | size = 54560352 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\sound.properties.robinhood | size = 1216 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\tzdb.dat.robinhood | size = 105504 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\tzmappings.robinhood | size = 8416 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\deploy\ffjcext.zip.robinhood | size = 14160 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages.properties.robinhood | size = 2864 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_de.properties.robinhood | size = 3312 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_es.properties.robinhood | size = 3616 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_fr.properties.robinhood | size = 3424 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_it.properties.robinhood | size = 3232 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ja.properties.robinhood | size = 6352 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ko.properties.robinhood | size = 5728 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_pt_BR.properties.robinhood | size = 3296 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_sv.properties.robinhood | size = 3424 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_CN.properties.robinhood | size = 4080 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_HK.properties.robinhood | size = 3760 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_TW.properties.robinhood | size = 3760 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash.gif.robinhood | size = 8592 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash@2x.gif.robinhood | size = 15280 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11-lic.gif.robinhood | size = 7808 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11@2x-lic.gif.robinhood | size = 12256 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\ext\access-bridge-64.jar.robinhood | size = 188032 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\ext\cldrdata.jar.robinhood | size = 3860512 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\ext\dnsns.jar.robinhood | size = 8288 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\ext\jaccess.jar.robinhood | size = 44528 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\ext\jfxrt.jar.robinhood | size = 18246304 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\ext\localedata.jar.robinhood | size = 2204784 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\ext\meta-index.robinhood | size = 1472 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\ext\nashorn.jar.robinhood | size = 2022736 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\ext\sunec.jar.robinhood | size = 42192 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\ext\sunjce_provider.jar.robinhood | size = 280176 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\ext\sunmscapi.jar.robinhood | size = 32704 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\ext\sunpkcs11.jar.robinhood | size = 251328 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\ext\zipfs.jar.robinhood | size = 68928 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiBold.ttf.robinhood | size = 75152 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiItalic.ttf.robinhood | size = 75136 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightItalic.ttf.robinhood | size = 80864 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightRegular.ttf.robinhood | size = 344912 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansDemiBold.ttf.robinhood | size = 317904 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansRegular.ttf.robinhood | size = 698240 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterBold.ttf.robinhood | size = 234080 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterRegular.ttf.robinhood | size = 242704 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\cursors.properties.robinhood | size = 1296 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\invalid32x32.gif.robinhood | size = 160 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyDrop32x32.gif.robinhood | size = 176 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyNoDrop32x32.gif.robinhood | size = 160 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkDrop32x32.gif.robinhood | size = 176 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkNoDrop32x32.gif.robinhood | size = 160 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveDrop32x32.gif.robinhood | size = 160 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveNoDrop32x32.gif.robinhood | size = 160 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\management\management.properties.robinhood | size = 14640 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\security\blacklist.robinhood | size = 4064 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\security\cacerts.robinhood | size = 114928 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\security\local_policy.jar.robinhood | size = 3536 |
|
1 | |
| Write | C:\Program Files\Java\jre1.8.0_144\lib\security\US_export_policy.jar.robinhood | size = 3040 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\AppXManifest.xml.robinhood | size = 5944064 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\FileSystemMetadata.xml.robinhood | size = 288 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\Office16\SLERROR.XML.robinhood | size = 36352 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.robinhood | size = 387360 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.robinhood | size = 1536 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.robinhood | size = 800880 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.robinhood | size = 1264 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.robinhood | size = 496528 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.robinhood | size = 1264 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.robinhood | size = 253728 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.robinhood | size = 1264 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.robinhood | size = 1124944 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.robinhood | size = 19456 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.robinhood | size = 763376 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.robinhood | size = 1264 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.robinhood | size = 1264 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.robinhood | size = 2160 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.robinhood | size = 2160 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.robinhood | size = 215888 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.robinhood | size = 1264 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.robinhood | size = 1264 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.robinhood | size = 343344 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.robinhood | size = 14928 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.robinhood | size = 357360 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.robinhood | size = 1264 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.robinhood | size = 65008 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.robinhood | size = 1264 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.robinhood | size = 1264 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.robinhood | size = 9232 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.robinhood | size = 1264 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.robinhood | size = 399536 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.robinhood | size = 1264 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.robinhood | size = 1456 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.robinhood | size = 1264 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.robinhood | size = 3760 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.robinhood | size = 1264 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.robinhood | size = 1264 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.robinhood | size = 1264 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.robinhood | size = 527968 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.robinhood | size = 1264 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.robinhood | size = 3376 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.common.xml.robinhood | size = 2173056 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AppXManifestLoc.en-us.xml.robinhood | size = 9840 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\PackageManifests\AuthoredExtensions.xml.robinhood | size = 384 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00004_.GIF.robinhood | size = 9040 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00011_.GIF.robinhood | size = 7232 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00021_.GIF.robinhood | size = 14880 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00037_.GIF.robinhood | size = 6688 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00038_.GIF.robinhood | size = 3264 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00040_.GIF.robinhood | size = 8112 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00052_.GIF.robinhood | size = 7696 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00057_.GIF.robinhood | size = 11904 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00090_.GIF.robinhood | size = 528 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00092_.GIF.robinhood | size = 512 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00103_.GIF.robinhood | size = 12704 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00120_.GIF.robinhood | size = 3488 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00126_.GIF.robinhood | size = 3152 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00129_.GIF.robinhood | size = 12496 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00130_.GIF.robinhood | size = 5264 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00135_.GIF.robinhood | size = 2608 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00139_.GIF.robinhood | size = 10608 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00142_.GIF.robinhood | size = 15312 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00154_.GIF.robinhood | size = 5328 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00157_.GIF.robinhood | size = 4960 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00158_.GIF.robinhood | size = 5040 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00160_.GIF.robinhood | size = 1152 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00161_.GIF.robinhood | size = 7584 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00163_.GIF.robinhood | size = 6992 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00164_.GIF.robinhood | size = 13264 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00165_.GIF.robinhood | size = 8592 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00167_.GIF.robinhood | size = 4896 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00169_.GIF.robinhood | size = 5376 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00170_.GIF.robinhood | size = 9264 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00171_.GIF.robinhood | size = 5024 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00172_.GIF.robinhood | size = 4400 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00174_.GIF.robinhood | size = 3968 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00175_.GIF.robinhood | size = 3392 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\AG00176_.GIF.robinhood | size = 3136 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BABY_01.MID.robinhood | size = 7392 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD10890_.GIF.robinhood | size = 13520 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD10972_.GIF.robinhood | size = 20192 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19563_.GIF.robinhood | size = 20464 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\BD19582_.GIF.robinhood | size = 15744 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CARBN_01.MID.robinhood | size = 9328 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\CMNTY_01.MID.robinhood | size = 6976 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EAST_01.MID.robinhood | size = 6176 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\EXPLR_01.MID.robinhood | size = 10576 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FALL_01.MID.robinhood | size = 4848 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FINCL_01.MID.robinhood | size = 12992 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\FINCL_02.MID.robinhood | size = 9328 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\GRDEN_01.MID.robinhood | size = 7568 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\GRID_01.MID.robinhood | size = 6336 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\HTECH_01.MID.robinhood | size = 7184 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\INDST_01.MID.robinhood | size = 8576 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0075478.GIF.robinhood | size = 1232 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099145.JPG.robinhood | size = 24768 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099147.JPG.robinhood | size = 24384 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099148.JPG.robinhood | size = 18272 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099150.JPG.robinhood | size = 21920 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099152.JPG.robinhood | size = 11696 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099154.JPG.robinhood | size = 6944 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099155.JPG.robinhood | size = 8832 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099156.JPG.robinhood | size = 13968 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099157.JPG.robinhood | size = 9680 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099160.JPG.robinhood | size = 15152 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099161.JPG.robinhood | size = 7168 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099162.JPG.robinhood | size = 19664 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099165.JPG.robinhood | size = 50496 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099166.JPG.robinhood | size = 64768 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099167.JPG.robinhood | size = 43952 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099168.JPG.robinhood | size = 20192 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099185.JPG.robinhood | size = 3296 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099186.JPG.robinhood | size = 16752 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099187.JPG.robinhood | size = 24544 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099188.JPG.robinhood | size = 9088 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099189.JPG.robinhood | size = 8080 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099190.JPG.robinhood | size = 43904 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099191.JPG.robinhood | size = 62368 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099192.GIF.robinhood | size = 17968 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099193.GIF.robinhood | size = 35552 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099194.GIF.robinhood | size = 25280 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099195.GIF.robinhood | size = 19936 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099196.GIF.robinhood | size = 14352 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099197.GIF.robinhood | size = 10912 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099198.GIF.robinhood | size = 5264 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099199.GIF.robinhood | size = 33984 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099200.GIF.robinhood | size = 16544 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099201.GIF.robinhood | size = 51408 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099202.GIF.robinhood | size = 4976 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0099203.GIF.robinhood | size = 3920 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101856.BMP.robinhood | size = 78848 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101857.BMP.robinhood | size = 32192 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101858.BMP.robinhood | size = 32192 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101859.BMP.robinhood | size = 31984 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101860.BMP.robinhood | size = 32192 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101861.BMP.robinhood | size = 32192 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101862.BMP.robinhood | size = 32192 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101863.BMP.robinhood | size = 32192 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101864.BMP.robinhood | size = 31984 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101865.BMP.robinhood | size = 32192 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101866.BMP.robinhood | size = 32192 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0101867.BMP.robinhood | size = 32624 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0144773.JPG.robinhood | size = 40240 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145168.JPG.robinhood | size = 33664 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145212.JPG.robinhood | size = 61648 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145272.JPG.robinhood | size = 49248 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145361.JPG.robinhood | size = 21136 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145373.JPG.robinhood | size = 17872 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145669.JPG.robinhood | size = 31856 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145707.JPG.robinhood | size = 36832 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145810.JPG.robinhood | size = 36800 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145879.JPG.robinhood | size = 35424 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145895.JPG.robinhood | size = 33968 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0145904.JPG.robinhood | size = 39552 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0146142.JPG.robinhood | size = 46512 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0148309.JPG.robinhood | size = 43680 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0148757.JPG.robinhood | size = 67552 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0148798.JPG.robinhood | size = 38240 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0149018.JPG.robinhood | size = 27408 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0149118.JPG.robinhood | size = 64816 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0164153.JPG.robinhood | size = 46496 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0174952.JPG.robinhood | size = 24992 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0175361.JPG.robinhood | size = 46464 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0175428.JPG.robinhood | size = 14560 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0177257.JPG.robinhood | size = 45360 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0177806.JPG.robinhood | size = 55568 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178348.JPG.robinhood | size = 36992 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178459.JPG.robinhood | size = 29216 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178460.JPG.robinhood | size = 26544 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178523.JPG.robinhood | size = 24048 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178632.JPG.robinhood | size = 23344 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178639.JPG.robinhood | size = 32048 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0178932.JPG.robinhood | size = 35344 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0179963.JPG.robinhood | size = 32112 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0182689.JPG.robinhood | size = 16624 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0202045.JPG.robinhood | size = 42256 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0216112.JPG.robinhood | size = 42896 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0216153.JPG.robinhood | size = 21632 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0227419.JPG.robinhood | size = 35552 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0227558.JPG.robinhood | size = 58096 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0287641.JPG.robinhood | size = 35248 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0287642.JPG.robinhood | size = 17120 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0287643.JPG.robinhood | size = 16032 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0287644.JPG.robinhood | size = 17360 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0287645.JPG.robinhood | size = 36240 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0289430.JPG.robinhood | size = 11568 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309480.JPG.robinhood | size = 10704 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309567.JPG.robinhood | size = 21584 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309585.JPG.robinhood | size = 39568 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309598.JPG.robinhood | size = 33280 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309664.JPG.robinhood | size = 43712 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0309705.JPG.robinhood | size = 19168 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0313896.JPG.robinhood | size = 37152 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0313965.JPG.robinhood | size = 42848 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0313970.JPG.robinhood | size = 33200 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0313974.JPG.robinhood | size = 47584 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0314068.JPG.robinhood | size = 16640 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0315580.JPG.robinhood | size = 19216 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0315612.JPG.robinhood | size = 16960 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0321179.JPG.robinhood | size = 9440 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0337280.JPG.robinhood | size = 12912 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341328.JPG.robinhood | size = 10208 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341344.JPG.robinhood | size = 11488 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341439.JPG.robinhood | size = 19568 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341447.JPG.robinhood | size = 19168 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341448.JPG.robinhood | size = 21200 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341455.JPG.robinhood | size = 29792 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341475.JPG.robinhood | size = 43504 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341499.JPG.robinhood | size = 16112 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341534.JPG.robinhood | size = 8080 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341551.JPG.robinhood | size = 23136 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341554.JPG.robinhood | size = 28496 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341557.JPG.robinhood | size = 27312 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341559.JPG.robinhood | size = 26752 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341561.JPG.robinhood | size = 42144 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341634.JPG.robinhood | size = 7808 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341636.JPG.robinhood | size = 13856 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341645.JPG.robinhood | size = 8240 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341653.JPG.robinhood | size = 15872 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341654.JPG.robinhood | size = 15744 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341738.JPG.robinhood | size = 20176 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0341742.JPG.robinhood | size = 18880 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382836.JPG.robinhood | size = 68576 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382925.JPG.robinhood | size = 118368 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382926.JPG.robinhood | size = 91952 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382927.JPG.robinhood | size = 129136 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382930.JPG.robinhood | size = 112704 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382931.JPG.robinhood | size = 122704 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382938.JPG.robinhood | size = 99552 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382939.JPG.robinhood | size = 109488 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382942.JPG.robinhood | size = 91456 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382944.JPG.robinhood | size = 81440 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382947.JPG.robinhood | size = 86816 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382948.JPG.robinhood | size = 109888 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382950.JPG.robinhood | size = 96480 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382952.JPG.robinhood | size = 96080 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382954.JPG.robinhood | size = 88704 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382955.JPG.robinhood | size = 90096 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382957.JPG.robinhood | size = 109040 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382958.JPG.robinhood | size = 103408 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382959.JPG.robinhood | size = 85904 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382960.JPG.robinhood | size = 107520 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382961.JPG.robinhood | size = 101072 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382962.JPG.robinhood | size = 114432 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382963.JPG.robinhood | size = 97776 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382965.JPG.robinhood | size = 113424 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382966.JPG.robinhood | size = 100496 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382967.JPG.robinhood | size = 93456 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382968.JPG.robinhood | size = 112480 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382969.JPG.robinhood | size = 96160 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0382970.JPG.robinhood | size = 88992 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0384862.JPG.robinhood | size = 102640 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0384885.JPG.robinhood | size = 97152 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0384888.JPG.robinhood | size = 81984 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0384895.JPG.robinhood | size = 55552 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0384900.JPG.robinhood | size = 71568 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0386120.JPG.robinhood | size = 30848 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0386267.JPG.robinhood | size = 43296 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0386270.JPG.robinhood | size = 15184 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0386485.JPG.robinhood | size = 14704 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0386764.JPG.robinhood | size = 26944 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0387337.JPG.robinhood | size = 51984 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0387578.JPG.robinhood | size = 27888 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0387591.JPG.robinhood | size = 39120 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0387604.JPG.robinhood | size = 47552 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0387882.JPG.robinhood | size = 39152 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0387895.JPG.robinhood | size = 32256 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0390072.JPG.robinhood | size = 13600 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0400001.PNG.robinhood | size = 202896 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0400002.PNG.robinhood | size = 89424 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0400003.PNG.robinhood | size = 124992 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0400004.PNG.robinhood | size = 105056 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\J0400005.PNG.robinhood | size = 96080 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\JAVA_01.MID.robinhood | size = 9808 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\JNGLE_01.MID.robinhood | size = 5856 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\MUSIC_01.MID.robinhood | size = 6896 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\NBOOK_01.MID.robinhood | size = 5984 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\OCEAN_01.MID.robinhood | size = 5456 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\OUTDR_01.MID.robinhood | size = 6656 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PAPER_01.MID.robinhood | size = 6768 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_01.MID.robinhood | size = 6496 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_02.MID.robinhood | size = 5728 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_03.MID.robinhood | size = 8544 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_04.MID.robinhood | size = 6080 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_05.MID.robinhood | size = 6032 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_06.MID.robinhood | size = 7776 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_07.MID.robinhood | size = 6576 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_08.MID.robinhood | size = 7360 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_09.MID.robinhood | size = 6768 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PARNT_10.MID.robinhood | size = 5408 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH00601G.GIF.robinhood | size = 1584 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH00780U.BMP.robinhood | size = 34352 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01035U.BMP.robinhood | size = 32416 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01046J.JPG.robinhood | size = 135616 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01179J.JPG.robinhood | size = 41488 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01213K.JPG.robinhood | size = 6336 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01221K.JPG.robinhood | size = 7328 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01235U.BMP.robinhood | size = 32192 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01236U.BMP.robinhood | size = 31984 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01239K.JPG.robinhood | size = 6000 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01247U.BMP.robinhood | size = 31760 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01255G.GIF.robinhood | size = 7776 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01265U.BMP.robinhood | size = 31760 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01332U.BMP.robinhood | size = 32192 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01478U.BMP.robinhood | size = 31984 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01562U.BMP.robinhood | size = 32192 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01607U.BMP.robinhood | size = 31984 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH01931J.JPG.robinhood | size = 39616 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02028K.JPG.robinhood | size = 17696 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02039U.BMP.robinhood | size = 31984 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02040U.BMP.robinhood | size = 32192 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02053J.JPG.robinhood | size = 27392 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02058U.BMP.robinhood | size = 31984 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02062U.BMP.robinhood | size = 31984 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02069J.JPG.robinhood | size = 29344 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02071U.BMP.robinhood | size = 32192 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02074U.BMP.robinhood | size = 31984 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02208U.BMP.robinhood | size = 31984 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02223U.BMP.robinhood | size = 32192 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02291U.BMP.robinhood | size = 32192 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02398U.BMP.robinhood | size = 31984 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02412K.JPG.robinhood | size = 3552 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02417U.BMP.robinhood | size = 31984 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02466U.BMP.robinhood | size = 31760 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02470U.BMP.robinhood | size = 18688 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02503U.BMP.robinhood | size = 31984 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02567J.JPG.robinhood | size = 33952 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02736G.GIF.robinhood | size = 25504 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02736U.BMP.robinhood | size = 32416 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02738U.BMP.robinhood | size = 33056 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02740G.GIF.robinhood | size = 24368 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02740U.BMP.robinhood | size = 32624 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02742G.GIF.robinhood | size = 20656 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02742U.BMP.robinhood | size = 31984 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02743G.GIF.robinhood | size = 28048 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02746G.GIF.robinhood | size = 24192 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02746U.BMP.robinhood | size = 32144 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02748G.GIF.robinhood | size = 24736 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02748U.BMP.robinhood | size = 32416 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02749G.GIF.robinhood | size = 34720 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02749U.BMP.robinhood | size = 33056 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02750G.GIF.robinhood | size = 25808 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02750U.BMP.robinhood | size = 94032 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02752G.GIF.robinhood | size = 50064 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02752U.BMP.robinhood | size = 31760 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02753U.BMP.robinhood | size = 108224 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02754U.BMP.robinhood | size = 108512 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02755U.BMP.robinhood | size = 108512 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02756U.BMP.robinhood | size = 197648 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02757U.BMP.robinhood | size = 197648 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02758U.BMP.robinhood | size = 198656 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02759J.JPG.robinhood | size = 41184 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02810J.JPG.robinhood | size = 50656 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02829J.JPG.robinhood | size = 62528 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02845G.GIF.robinhood | size = 12544 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH02897J.JPG.robinhood | size = 15440 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH03011U.BMP.robinhood | size = 15488 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH03012U.BMP.robinhood | size = 4128 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH03014_.GIF.robinhood | size = 18912 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH03041I.JPG.robinhood | size = 30896 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH03143I.JPG.robinhood | size = 29792 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH03205I.JPG.robinhood | size = 41808 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH03224I.JPG.robinhood | size = 42064 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH03379I.JPG.robinhood | size = 11184 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH03380I.JPG.robinhood | size = 12832 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\PH03425I.JPG.robinhood | size = 48560 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\ROAD_01.MID.robinhood | size = 5984 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SAFRI_01.MID.robinhood | size = 10128 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SCHOL_02.MID.robinhood | size = 5072 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SHOW_01.MID.robinhood | size = 6400 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SPACE_01.MID.robinhood | size = 4224 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SPRNG_01.MID.robinhood | size = 6704 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SUMER_01.MID.robinhood | size = 14048 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\SWEST_01.MID.robinhood | size = 8512 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\URBAN_01.MID.robinhood | size = 13360 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\VCTRN_01.MID.robinhood | size = 4976 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01219_.GIF.robinhood | size = 752 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01237_.GIF.robinhood | size = 368 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01238_.GIF.robinhood | size = 368 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01239_.GIF.robinhood | size = 416 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01240_.GIF.robinhood | size = 336 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01241_.GIF.robinhood | size = 400 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01242_.GIF.robinhood | size = 352 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01243_.GIF.robinhood | size = 432 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01244_.GIF.robinhood | size = 480 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01245_.GIF.robinhood | size = 352 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01246_.GIF.robinhood | size = 464 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01253_.GIF.robinhood | size = 4096 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01268_.GIF.robinhood | size = 432 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01292_.GIF.robinhood | size = 608 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01293_.GIF.robinhood | size = 688 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01294_.GIF.robinhood | size = 688 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01295_.GIF.robinhood | size = 368 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01296_.GIF.robinhood | size = 496 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01297_.GIF.robinhood | size = 896 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01298_.GIF.robinhood | size = 704 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01299_.GIF.robinhood | size = 320 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01300_.GIF.robinhood | size = 608 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01301_.GIF.robinhood | size = 688 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01304G.GIF.robinhood | size = 8320 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01330_.GIF.robinhood | size = 384 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01734_.GIF.robinhood | size = 2208 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01740_.GIF.robinhood | size = 720 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01742_.GIF.robinhood | size = 608 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01743_.GIF.robinhood | size = 1248 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01744_.GIF.robinhood | size = 800 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01745_.GIF.robinhood | size = 1456 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01746_.GIF.robinhood | size = 752 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01747_.GIF.robinhood | size = 912 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01748_.GIF.robinhood | size = 736 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01749_.GIF.robinhood | size = 960 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01750_.GIF.robinhood | size = 1184 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01751_.GIF.robinhood | size = 960 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01770_.GIF.robinhood | size = 784 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01838_.GIF.robinhood | size = 3664 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01839_.GIF.robinhood | size = 1104 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01840_.GIF.robinhood | size = 1536 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01842_.GIF.robinhood | size = 1904 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB01843_.GIF.robinhood | size = 4832 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WB02229_.GIF.robinhood | size = 4144 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\PUB60COR\WNTER_01.MID.robinhood | size = 6928 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\J0143743.GIF.robinhood | size = 3968 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\J0143744.GIF.robinhood | size = 48 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\J0143745.GIF.robinhood | size = 736 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\J0143746.GIF.robinhood | size = 1440 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\J0143748.GIF.robinhood | size = 4576 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\J0143749.GIF.robinhood | size = 4912 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\J0143750.GIF.robinhood | size = 1088 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\J0143752.GIF.robinhood | size = 1056 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\J0143753.GIF.robinhood | size = 7040 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\J0143754.GIF.robinhood | size = 1712 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\J0143758.GIF.robinhood | size = 1696 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\WB00516L.GIF.robinhood | size = 4688 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\WB00531L.GIF.robinhood | size = 8224 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\WB00673L.GIF.robinhood | size = 8432 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\WB00703L.GIF.robinhood | size = 8240 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\WB00760L.GIF.robinhood | size = 8992 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\WB00780L.GIF.robinhood | size = 8080 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\WB01741L.GIF.robinhood | size = 3616 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\WB02039_.GIF.robinhood | size = 912 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\WB02055_.GIF.robinhood | size = 2448 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\WB02073_.GIF.robinhood | size = 896 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\WB02074_.GIF.robinhood | size = 1312 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\WB02077_.GIF.robinhood | size = 768 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\WB02082_.GIF.robinhood | size = 2464 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\WB02085_.GIF.robinhood | size = 2320 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\WB02097_.GIF.robinhood | size = 1424 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\WB02106_.GIF.robinhood | size = 5632 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\WB02116_.GIF.robinhood | size = 1008 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\WB02134_.GIF.robinhood | size = 2432 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\WB02187_.GIF.robinhood | size = 1408 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\WB02198_.GIF.robinhood | size = 19136 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\WB02201_.GIF.robinhood | size = 5728 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\WB02214_.GIF.robinhood | size = 4976 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\CLIPART\Publisher\Backgrounds\WB02218_.GIF.robinhood | size = 3024 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Aspect.xml.robinhood | size = 752 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Blue Green.xml.robinhood | size = 752 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Blue II.xml.robinhood | size = 752 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Blue Warm.xml.robinhood | size = 752 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Blue.xml.robinhood | size = 752 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Grayscale.xml.robinhood | size = 752 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Green Yellow.xml.robinhood | size = 752 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Green.xml.robinhood | size = 752 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Marquee.xml.robinhood | size = 736 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Median.xml.robinhood | size = 752 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Office 2007 - 2010.xml.robinhood | size = 752 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Orange Red.xml.robinhood | size = 752 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Orange.xml.robinhood | size = 736 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Paper.xml.robinhood | size = 752 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Red Orange.xml.robinhood | size = 752 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Red Violet.xml.robinhood | size = 752 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Red.xml.robinhood | size = 752 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Slipstream.xml.robinhood | size = 752 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Violet II.xml.robinhood | size = 752 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Violet.xml.robinhood | size = 752 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Yellow Orange.xml.robinhood | size = 752 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Yellow.xml.robinhood | size = 752 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Arial Black-Arial.xml.robinhood | size = 3536 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Arial-Times New Roman.xml.robinhood | size = 3568 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Arial.xml.robinhood | size = 3520 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Calibri Light-Constantia.xml.robinhood | size = 3584 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Calibri-Cambria.xml.robinhood | size = 3552 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Calibri.xml.robinhood | size = 3504 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Cambria.xml.robinhood | size = 3568 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Candara.xml.robinhood | size = 3536 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Century Gothic-Palatino Linotype.xml.robinhood | size = 3648 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Century Gothic.xml.robinhood | size = 3552 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Century Schoolbook.xml.robinhood | size = 3616 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Consolas-Verdana.xml.robinhood | size = 3552 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Constantia-Franklin Gothic Book.xml.robinhood | size = 3584 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Corbel.xml.robinhood | size = 3520 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Franklin Gothic.xml.robinhood | size = 3568 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Garamond-TrebuchetMs.xml.robinhood | size = 3552 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Garamond.xml.robinhood | size = 3520 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Georgia.xml.robinhood | size = 3536 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Gill Sans MT.xml.robinhood | size = 3760 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Office 2007 - 2010.xml.robinhood | size = 3648 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Times New Roman-Arial.xml.robinhood | size = 3568 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\TrebuchetMs.xml.robinhood | size = 3552 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Tw Cen MT-Rockwell.xml.robinhood | size = 3744 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Tw Cen MT.xml.robinhood | size = 3760 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Flattener\CommonSequencingProperties.xml.robinhood | size = 2832 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Flattener\Flattener.exe.config.robinhood | size = 192 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\fre\StartMenu_Win10.mp4.robinhood | size = 125184 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\fre\StartMenu_Win10_RTL.mp4.robinhood | size = 118304 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\fre\StartMenu_Win7.wmv.robinhood | size = 483344 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\fre\StartMenu_Win7_RTL.wmv.robinhood | size = 822048 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\fre\StartMenu_Win8.mp4.robinhood | size = 104304 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\fre\StartMenu_Win8_RTL.mp4.robinhood | size = 104976 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.Access.Access.x-none.msi.16.x-none.xml.robinhood | size = 37376 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.accessmui.msi.16.en-us.xml.robinhood | size = 59168 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.accessmuiset.msi.16.en-us.xml.robinhood | size = 2048 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml.robinhood | size = 16160 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.dcfmui.msi.16.en-us.xml.robinhood | size = 9824 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml.robinhood | size = 236960 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.excelmui.msi.16.en-us.xml.robinhood | size = 36736 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml.robinhood | size = 36752 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.groovemui.msi.16.en-us.xml.robinhood | size = 6160 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml.robinhood | size = 104352 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.lyncmui.msi.16.en-us.xml.robinhood | size = 23456 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.office32mui.msi.16.en-us.xml.robinhood | size = 27472 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.office32ww.msi.16.x-none.xml.robinhood | size = 324608 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.officemui.msi.16.en-us.xml.robinhood | size = 104576 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.officemuiset.msi.16.en-us.xml.robinhood | size = 2048 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml.robinhood | size = 97088 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.onenotemui.msi.16.en-us.xml.robinhood | size = 19024 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml.robinhood | size = 1536 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.osmmui.msi.16.en-us.xml.robinhood | size = 11056 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml.robinhood | size = 2320 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.osmuxmui.msi.16.en-us.xml.robinhood | size = 11152 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml.robinhood | size = 94624 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.outlookmui.msi.16.en-us.xml.robinhood | size = 96656 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml.robinhood | size = 720352 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml.robinhood | size = 103856 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.powerpointmui.msi.16.en-us.xml.robinhood | size = 26784 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.Project.Project.x-none.msi.16.x-none.xml.robinhood | size = 29776 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.projectmui.msi.16.en-us.xml.robinhood | size = 32928 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.Proof.Culture.msi.16.en-us.xml.robinhood | size = 25520 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.Proof.Culture.msi.16.es-es.xml.robinhood | size = 24560 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.Proof.Culture.msi.16.fr-fr.xml.robinhood | size = 24560 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.proofing.msi.16.en-us.xml.robinhood | size = 2048 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml.robinhood | size = 77392 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.publishermui.msi.16.en-us.xml.robinhood | size = 14144 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.shared.Office.x-none.msi.16.x-none.xml.robinhood | size = 731120 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml.robinhood | size = 174848 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.visiomui.msi.16.en-us.xml.robinhood | size = 986304 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.Word.Word.x-none.msi.16.x-none.xml.robinhood | size = 86896 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.wordmui.msi.16.en-us.xml.robinhood | size = 78080 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\loc\AppXManifestLoc.en-us.xml.robinhood | size = 9840 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\bdcmetadata.xsd.robinhood | size = 26304 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\bdcmetadataresource.xsd.robinhood | size = 13104 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\EXCEL.VisualElementsManifest.xml.robinhood | size = 352 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\FIRSTRUN.VisualElementsManifest.xml.robinhood | size = 352 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\GRAPH.ICO.robinhood | size = 768 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\GROOVE.VisualElementsManifest.xml.robinhood | size = 352 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\HeaderPatterns.xml.robinhood | size = 12080 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\lync.ico.robinhood | size = 165584 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\Lync2013_Third_Party_Notices.txt.robinhood | size = 8768 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\MANIFEST.XML.robinhood | size = 3216 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\Microsoft.Lync.Model.zip.robinhood | size = 86720 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\Microsoft.Lync.Utilities.Controls.zip.robinhood | size = 28800 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\Microsoft.Lync.Utilities.zip.robinhood | size = 70496 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\MSACCESS.VisualElementsManifest.xml.robinhood | size = 352 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\MSPUB.VisualElementsManifest.xml.robinhood | size = 352 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\muauth.cab.robinhood | size = 7712 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\MYSL.ICO.robinhood | size = 5440 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\Ocomprivate.zip.robinhood | size = 88416 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\ONENOTE.VisualElementsManifest.xml.robinhood | size = 352 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\OUTLFLTR.DAT.robinhood | size = 3670032 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.VisualElementsManifest.xml.robinhood | size = 352 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\POWERPNT.VisualElementsManifest.xml.robinhood | size = 352 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\REMINDER.WAV.robinhood | size = 108816 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\System.Windows.Controls.Theming.Toolkit.zip.robinhood | size = 11536 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\VISIO.VisualElementsManifest.xml.robinhood | size = 352 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\WINPROJ.VisualElementsManifest.xml.robinhood | size = 352 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\WINWORD.VisualElementsManifest.xml.robinhood | size = 352 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\CT_ROOTS.XML.robinhood | size = 6080 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\DBSAMPLE.MDB.robinhood | size = 507920 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\EXPTOOWS.XLA.robinhood | size = 106000 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\OCCMPVRD.XML.robinhood | size = 1136 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\OCMODVRD.XML.robinhood | size = 1072 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\officeinventoryagentfallback.xml.robinhood | size = 3392 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\officeinventoryagentlogon.xml.robinhood | size = 3328 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\OUTFORM.DAT.robinhood | size = 93712 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\OUTLPERF.H.robinhood | size = 560 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\OUTLPERF.INI.robinhood | size = 2704 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PREVIEWTEMPLATE.POTX.robinhood | size = 284448 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PREVIEWTEMPLATE2.POTX.robinhood | size = 298304 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PROTTPLN.DOC.robinhood | size = 19984 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PROTTPLN.PPT.robinhood | size = 12304 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PROTTPLN.XLS.robinhood | size = 8720 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PROTTPLV.DOC.robinhood | size = 19984 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PROTTPLV.PPT.robinhood | size = 12304 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PROTTPLV.XLS.robinhood | size = 8720 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PSRCHKEY.DAT.robinhood | size = 325504 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PSRCHLEX.DAT.robinhood | size = 2046336 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PSRCHLTS.DAT.robinhood | size = 52592 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PSRCHPHN.DAT.robinhood | size = 3360 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PSRCHSRN.DAT.robinhood | size = 10500688 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\TelemetryDashboard.xltx.robinhood | size = 49568 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\TelemetryLog.xltx.robinhood | size = 37936 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\WDCMPVRD.XML.robinhood | size = 1408 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\Bibliography\BIBFORM.XML.robinhood | size = 111312 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\DESKTOP.INI.robinhood | size = 80 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\FOLDER.ICO.robinhood | size = 4720 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBFTSCM\FONTSCHM.INI.robinhood | size = 3264 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PAPERS.INI.robinhood | size = 6192 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR10F.GIF.robinhood | size = 15296 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR11F.GIF.robinhood | size = 5168 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR12F.GIF.robinhood | size = 18144 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR13F.GIF.robinhood | size = 17168 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR14F.GIF.robinhood | size = 23744 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR15F.GIF.robinhood | size = 7360 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR16F.GIF.robinhood | size = 14752 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR17F.GIF.robinhood | size = 11200 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR18F.GIF.robinhood | size = 16896 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR19F.GIF.robinhood | size = 3152 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR1B.GIF.robinhood | size = 3488 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR1F.GIF.robinhood | size = 3952 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR20F.GIF.robinhood | size = 13328 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR21F.GIF.robinhood | size = 11648 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR22F.GIF.robinhood | size = 8160 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR23F.GIF.robinhood | size = 12608 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR24F.GIF.robinhood | size = 5808 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR25F.GIF.robinhood | size = 12688 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR26F.GIF.robinhood | size = 6544 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR27F.GIF.robinhood | size = 7392 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR28B.GIF.robinhood | size = 1680 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR28F.GIF.robinhood | size = 6032 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR29B.GIF.robinhood | size = 4544 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR29F.GIF.robinhood | size = 22976 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR2B.GIF.robinhood | size = 2976 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR2F.GIF.robinhood | size = 3968 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR30B.GIF.robinhood | size = 13104 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR30F.GIF.robinhood | size = 19424 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR31B.GIF.robinhood | size = 2112 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR31F.GIF.robinhood | size = 21216 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR32B.GIF.robinhood | size = 3920 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR32F.GIF.robinhood | size = 37136 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR33B.GIF.robinhood | size = 5696 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR33F.GIF.robinhood | size = 11552 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR34B.GIF.robinhood | size = 4480 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR34F.GIF.robinhood | size = 38368 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR35B.GIF.robinhood | size = 4592 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR35F.GIF.robinhood | size = 11200 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR36B.GIF.robinhood | size = 9200 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR36F.GIF.robinhood | size = 36832 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR37F.GIF.robinhood | size = 54448 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR38F.GIF.robinhood | size = 47136 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR39F.GIF.robinhood | size = 44912 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR3B.GIF.robinhood | size = 12000 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR3F.GIF.robinhood | size = 18000 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR40F.GIF.robinhood | size = 69408 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR41F.GIF.robinhood | size = 32096 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR42F.GIF.robinhood | size = 57216 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR43B.GIF.robinhood | size = 3376 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR43F.GIF.robinhood | size = 2656 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR44B.GIF.robinhood | size = 13840 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR44F.GIF.robinhood | size = 12336 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR45B.GIF.robinhood | size = 8224 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR45F.GIF.robinhood | size = 7920 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR46B.GIF.robinhood | size = 4944 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR46F.GIF.robinhood | size = 4992 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR47B.GIF.robinhood | size = 32992 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR47F.GIF.robinhood | size = 15088 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR48B.GIF.robinhood | size = 11104 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR48F.GIF.robinhood | size = 6032 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR49B.GIF.robinhood | size = 19056 |
|
1 | |
| Write | C:\Program Files\Microsoft Office\root\Office16\1033\PUBSPAPR\PDIR49F.GIF.robinhood | size = 12992 |
|
1 | |
| Delete | C:\588bce7c90097ed212\1045\eula.rtf | - |
|
1 | |
|
For performance reasons, the remaining 3604 entries are omitted.
The remaining entries can be found in glog.xml. |
|||||
Registry (3)
| Operation | Key | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Open Key | HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework | - |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework | value_name = DbgJITDebugLaunchSetting, type = REG_NONE |
|
1 | |
| Read Value | HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework | value_name = DbgManagedDebugger, type = REG_NONE |
|
1 |
Module (13)
| Operation | Module | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Get Handle | c:\windows\system32\user32.dll | base_address = 0x7ff931730000 |
|
1 | |
| Get Handle | c:\users\fd1hvy\desktop\robinhood.exe | base_address = 0xe80000 |
|
11 | |
| Get Address | c:\windows\system32\user32.dll | function = DefWindowProcW, address_out = 0x7ff931fe5090 |
|
1 |
User (1)
| Operation | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|
| Lookup Privilege | privilege = SeDebugPrivilege, luid = 20 |
|
1 |
Window (6)
| Operation | Window Name | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Create | - | class_name = WindowsForms10.Window.8.app.0.378734a, wndproc_parameter = 0 |
|
1 | |
| Create | .NET-BroadcastEventWindow.2.0.0.0.378734a.0 | class_name = .NET-BroadcastEventWindow.2.0.0.0.378734a.0, wndproc_parameter = 0 |
|
1 | |
| Create | Robinhood | class_name = WindowsForms10.Window.8.app.0.378734a, wndproc_parameter = 0 |
|
1 | |
| Create | şifreli dosyalar: | class_name = WindowsForms10.STATIC.app.0.378734a, wndproc_parameter = 0 |
|
1 | |
| Create | - | class_name = WindowsForms10.LISTBOX.app.0.378734a, wndproc_parameter = 0 |
|
1 | |
| Create | - | class_name = WindowsForms10.EDIT.app.0.378734a, wndproc_parameter = 0 |
|
1 |
Keyboard (1)
| Operation | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|
| Get Info | type = KB_LOCALE_ID, os_tid = 0, result_out = 67699721 |
|
1 |
System (4097)
| Operation | Additional Information | Success | Count | Logfile |
|---|---|---|---|---|
| Get window text | window_text = 19820816 |
|
2 | |
| Get window text | window_text = 19569504 |
|
1 | |
| Get window text | window_text = 19569968 |
|
1 | |
| Get window text | window_text = 19822096 |
|
1 | |
| Get window text | window_text = 19820976 |
|
1 | |
| Get Info | type = Operating System |
|
4 | |
| Get Info | type = System Directory, result_out = C:\WINDOWS\system32 |
|
4086 | |
| Get Info | type = SYSTEM_PROCESS_INFORMATION |
|
1 |
