fantom | fbf29397db0cbf1a181da1a8784e87fef0c93414ee618faafd9aa5d30ba98f3c

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
24/07/2024, 17:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
Size

261KB
MD5

7d80230df68ccba871815d68f016c282
SHA1

e10874c6108a26ceedfc84f50881824462b5b6b6
SHA256

f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b
SHA512

64d02b3e7ed82a64aaac1f74c34d6b6e6feaac665ca9c08911b93eddcec66595687024ec576e74ea09a1193ace3923969c75de8733859835fef45335cf265540
SSDEEP

3072:vDKW1LgppLRHMY0TBfJvjcTp5XxG8pt+oSOpE22obq+NYgvPuCEbMBWJxLRiUgV:vDKW1Lgbdl0TBBvjc/M8n35nYgvKjdzi

Score

10^/10

fantom discovery evasion ransomware

Malware Config

Extracted

Path

C:\Program Files\7-Zip\DECRYPT_YOUR_FILES.HTML

Ransom Note

<html> <head> <style> body{ background-color: #3366CC; } h1 { background-color: RGB(249, 201, 16); } p { background-color: maroon; color: white; } </style> </head> <body> <center> <h1><b> Attention ! All your files </b> have been encrypted. </h1></br> <p> Due encrypting was used algoritm RSA-4096 and AES-256, used for protection military secrets.</br> That means > RESTORE YOU DATA POSIBLE ONLY BUYING decryption passwords from us.</br> Getting a decryption of your files is - SIMPLY task.</br></br> That all what you need:</br> 1. Sent Your ID_KEY on mailbox [email protected] or [email protected] </br> 2. For test, decrypt 2 small files, to be sure that we can decrypt you files.</br> 3. Pay our services. </br> 4. GET software with passwords for decrypt you files.</br> 5. Make measures to prevent this type situations again.</br></br> IMPORTANT(1)</br> Do not try restore files without our help, this is useless, and can destroy you data permanetly.</br></br> IMPORTANT(2) </br> We Cant hold you decryption passwords forever. </br>ALL DECRYPTION PASSWORDS, for what wasn`t we receive reward, will destroy after week of moment of encryption. </p> <p> Your ID_KEY: <br> </p> <table width="1024" border="0"> <tbody> <tr> <td><p>VpXJCDYNI+sWIMkbyW8Lc+F17sBgW0StdAFaEWcJlbcINNeA19RocSSa3R6WFbtP6TraxYSoL6zaW0qg9X+DsiMVuEa2YIG+mCjR9viOk27KPsM6QiJ7N3gPQVz+wqXZUi9c7sPjd27cpxd2PHCAEn8hA/Zns5yLHbrIeqO/NbpNsvEY7G78+LiEu5ZeL4sSNCS97Iplek4r3iIYRyRnEl+zMdog2As7X30e1CYrmIrZNjVtyUWeBLFcTiSiep3LHH3htcRC+G0XiAxI+UnatV+yeEu/YMGKcSkCtV7l7ahiK79IesiCIW0O26nSClP27/uyOEw8KQLLLSsij7+XwA==ZW4tVVM=</p></td> </tr> </tbody> </table> </center></html></body>

Emails

[email protected]

Signatures

Fantom
Ransomware which hides encryption process behind fake Windows Update screen.
ransomware fantom
Renames multiple (1878) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware
Disables Task Manager via registry modification
evasion

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-3419463127-3903270268-2580331543-1000\Control Panel\International\Geo\Nation	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe

Executes dropped EXE 1 IoCs

pid	Process
4532	WindowsUpdate.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.scale-100.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Common.View.UWP\Strings\pt-BR\View3d\DECRYPT_YOUR_FILES.HTML	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\Assets\Audio\Skype_Dtmf_pound_Loud.m4a	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1906.1972.0_x64__8wekyb3d8bbwe\AppxBlockMap.xml	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.Xbox.TCUI_1.23.28002.0_x64__8wekyb3d8bbwe\TCUI-Toolkit\DECRYPT_YOUR_FILES.HTML	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\uk-ua\ui-strings.js	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\images\warning.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\23.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\AppPackageAppList.targetsize-72_altform-unplated.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteSectionMedTile.scale-125.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\s_filetype_xd.svg	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File opened for modification	C:\Program Files\UnprotectConnect.asp	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\pt-PT\DECRYPT_YOUR_FILES.HTML	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\contrast-black\MedTile.scale-400_contrast-black.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.XboxSpeechToTextOverlay_1.17.29001.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\DECRYPT_YOUR_FILES.HTML	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_empty_state.svg	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\nls\it-it\ui-strings.js	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\zh-tw\DECRYPT_YOUR_FILES.HTML	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-16_altform-lightunplated.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Assets\GetStartedLargeTile.scale-100_contrast-white.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_x64__8wekyb3d8bbwe\Assets\Json\Person-AdaptiveCard.json	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.XboxApp_48.49.31001.0_x64__8wekyb3d8bbwe\XboxApp.UI\Resources\Images\Home-Placeholder.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\FileExtension.targetsize-24.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\ru-ru\ui-strings.js	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.DesktopAppInstaller_1.0.30251.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\contrast-white\AppPackageLargeTile.scale-125_contrast-white.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-60_altform-unplated.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\8041_40x40x32.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.scale-100.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2018.826.98.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraAppList.contrast-black_targetsize-72.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\LinkedInboxLargeTile.scale-100.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Car\RTL\contrast-black\SmallTile.scale-200.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\AppIcon.targetsize-30_altform-unplated_contrast-white.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_neutral_split.scale-100_8wekyb3d8bbwe\AppxBlockMap.xml	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_checkbox_selected_18.svg	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\Windows NT\DECRYPT_YOUR_FILES.HTML	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteAppList.scale-400.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\contrast-white\PeopleMedTile.scale-125.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\AppTiles\contrast-white\Weather_TileLargeSquare.scale-100.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\DECRYPT_YOUR_FILES.HTML	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-white\MixedRealityPortalSplashScreen.scale-100_contrast-white.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.1907.2471.0_x64__8wekyb3d8bbwe\Assets\Timer3Sec.targetsize-20.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_neutral_split.scale-100_kzf8qxf38zg5c\Assets\Images\DECRYPT_YOUR_FILES.HTML	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\DECRYPT_YOUR_FILES.HTML	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.DesktopAppInstaller_1.0.30251.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\contrast-white\AppPackageBadgeLogo.scale-125_contrast-white.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_neutral_split.scale-100_8wekyb3d8bbwe\AppxBlockMap.xml	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\plugins\rhp\combinepdf-selector.js	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Home\RTL\contrast-black\MedTile.scale-125.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_neutral_split.scale-125_8wekyb3d8bbwe\AppxManifest.xml	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteSectionGroupWideTile.scale-400.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsStore_11910.1002.5.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\StoreLargeTile.scale-200.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.XboxGameOverlay_1.46.11001.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubLargeTile.scale-200.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\Common Files\microsoft shared\MSInfo\ja-JP\DECRYPT_YOUR_FILES.HTML	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\cs\DECRYPT_YOUR_FILES.HTML	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\legal\jdk\xerces.md	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\tr-tr\ui-strings.js	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\convertpdf-tool-view.js	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxMailAppList.targetsize-32_altform-unplated.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Car\RTL\contrast-white\DECRYPT_YOUR_FILES.HTML	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.contrast-black_scale-140.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ms\DECRYPT_YOUR_FILES.HTML	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\VideoLAN\VLC\locale\th\DECRYPT_YOUR_FILES.HTML	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Assets\Square71x71Logo.scale-150.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteSectionGroupLargeTile.scale-150.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
File created	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-48_contrast-black.png	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
696	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	696	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 696 wrote to memory of 4532	696	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe	97
PID 696 wrote to memory of 4532	696	f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe	97

C:\Users\Admin\AppData\Local\Temp\f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe
"C:\Users\Admin\AppData\Local\Temp\f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b.exe"
1⤵
- Checks computer location settings
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:696
- C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe
  "C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe"
  2⤵
  - Executes dropped EXE
  PID:4532

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\cef_200_percent.pak

Filesize
16B

MD5
6baffb6aa4174f534b4aa51368c948ca

SHA1
f904d7315f9e038a334aaf351d12da40efc70526

SHA256
61e8a00c251280654f139a61f1d70b8e20bd51f151fec6f1f4d8658f785f8536

SHA512
db99d6e0c0001ea8809c65494c64be28591df6869c35ee04414f9df081f472fb6b8404e84d23eac8f701daf7683641da2648569ae77a05a1cd6cf1803f07dfa9

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png

Filesize
50KB

MD5
7179a6ad37cef8cc8294a9e523797e64

SHA1
2ec1a9674a736898e9fa1c2461985a703abd5cc7

SHA256
76d0e562849af6a9dd1cf4fe0f59a01ee9a13d99c876d4bd384afc05e9458587

SHA512
165c6c3c691bccd73e6d19857b91037884932e979e2c54b72b01bf06c984a3fc2e47ac4a6066d968fdfbd8a30eb3a79116370eead51c5d1365e0e1c074075a89

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions.png

Filesize
1KB

MD5
fac4ecc4c4206b6663fd6502abb168e1

SHA1
079acdd68640bc876ce82c0536cd6a45e9f2465b

SHA256
9adbe4dda39bac1bd220f9bf36cd96907f1ad5a8a5133051909a25c47b2960c5

SHA512
99ead89e90a67652cb91146dce33a568ecdb72f11f6ad05ab82a36cb4ada37aa3cc38bcfd3f313b0c1b6ebc28f091a1c7ba18ed7bb28c0f3c0d47f4b9f7751c0

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions2x.png

Filesize
3KB

MD5
4bc7d2c15c8a3258160f67ea40975435

SHA1
0fda70eab835ff49565b2f7fec3aa32e54b071d5

SHA256
f3c013480eab5a5fe336d69b05a96d252cfad9730b3439c4c3b0120ec0b1f710

SHA512
2ad315104fe12558447d272273ddea64cc6a33e8b9be1f6bc69faac3d444c75dfc6be4c6d9fb02fe0e3bef28f65391fd6484790e058fa9da9c3567e28235c00d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_remove_18.svg

Filesize
720B

MD5
9cb5d7745f2d2a2a46c6e2fb637eeeb9

SHA1
0747a244a0c60bc44c56e51e29557d67b8e2d673

SHA256
5c4bb46de236e93286f3c35127f4f3923ec07e1bf031795525297c5b8322021a

SHA512
42fe7a8ed03629e30a2684cd49d17369624bafdb8bd1db15430611c6ffc4bd431e349ef02f9867459bc89e91b058e80ca18a961813af150a7e48bc839bb10db3

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\duplicate.svg

Filesize
1KB

MD5
3da255c92fb77994af525232a8309276

SHA1
b62fd84effb4119c999f10b538d25e92615e499a

SHA256
1395dbea0f07edde08665070f5e951edf1ca4768a3e8d7a65fc8e73de721f65b

SHA512
73dd7292b40b082d679d36c1bd9a2e3d7373c2d117b2cb4071dd2f51d78cf9126226d9a9afebf21a15502daa2cd9eaebbdfe54f409c278e62cf81bfc593f737a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\remove.svg

Filesize
1KB

MD5
cb64721416dd3b9ef6123619ab5ed2b3

SHA1
6741dd055c0a4aa66c1af71851202f4c431d6fe6

SHA256
6fd99c67baa8efc72af61cfc1ad55eae1444a9ff6716efb36219b6ce43297b6e

SHA512
42fc2adf86622e23fbfa421a32aa5645d5d6c825c5dca0b1fe821bf87e4468e4e1231c187597f7a5de8f2611bbae3661cc0e8d41fabe2bb5a4528ad8a351401b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_backarrow_default.svg

Filesize
896B

MD5
fb1692d7de0bf3bc1dfd649f6591fe51

SHA1
9b882cbe336958c735f349de4a5a88c628845537

SHA256
7808762d5f7da5e799c4fa2d492c061ddfbdaf9bc85b8db034a81be4a2f63b58

SHA512
1461533a811052b4cd71251fc1b29497477199c824ba65cec06108bbcd7068b13f8e2c057af893da6e719f866cbcd63637173b9adb8aed1580334337e0c95621

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_comment_18.svg

Filesize
1KB

MD5
5f6f6099805941dfcb888de212477eb7

SHA1
7ccea215e0afd85ad4a14aedea1111cfa5af0cab

SHA256
55841edb8d798ebf9b56761cdac4623c37c498d758dc00285c5133c8be5ff7bf

SHA512
cebdeb8fc785a5fa6dbe834c2e7d7f9568d581c0e5b25bcc27ca8ffdae090a9980a15082abe8b298c9d75d7cbdfa4fc0914b450592d6b765e1d8797562a7e7dc

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_editpdf_18.svg

Filesize
1KB

MD5
7d15d00e623edb1d5eac66587aa4d4d3

SHA1
6f440ec33f26c25fc6689c4d92ad8075778f8cc7

SHA256
f852749454aeabad67d94e6e417fca8fc2934982d39f0751fde1b7c1a88e4931

SHA512
80d138479dbe66885a6041559eab240e55d6cf9f8883cc9a8ef01e72bf649356b49b8fa9a1420cabac195b168c23b872c32cc3a5d11a799aa5ff32741b92dd17

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_export_18.svg

Filesize
7KB

MD5
5624801f7c0540f3a6178ac874011195

SHA1
63c7b081ae6d447d45090fd4b0c5ff4fd4e696ee

SHA256
0fb6e9a9275136fd259f9bfcc862d5cf618be74dc5c0217770e0b9f507a33851

SHA512
ac811393c47e0d57c37b1566856c4e7175c450b1f248c13417e4a263c0357caf799597d53a633d10fcb57322c4991fd4add6fe1bfdb61f8bfccb434a28e4d64d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_fillandsign_18.svg

Filesize
2KB

MD5
da8930ff427aae23b7f38c6c7a0e4678

SHA1
ecdb5c05567767638371aa6a9e26e37e9d56e03a

SHA256
f910c8e14db2be34573d37102508c8295ea717545b7322e6a7a62b2f0a233705

SHA512
3d797119da849d243197888d2a74b20e3dea5c2b2c304292fdd61e585962555509ffed284d0d993efbb4cafa834a90a0edf311aa4de86688a3859a545c3cf60c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_folder-default_32.svg

Filesize
560B

MD5
94653921d374099fd0dce9e83524125b

SHA1
130b59d80cd0cbd299c01aaa8b28397a8e595d97

SHA256
bbe2fe9cc3e58a4d0aa85d0b7f15274bbd19623ab0f7ed1aac38ee2e6e194821

SHA512
3e4cda7fe9121169fa7c46f39483489737d8d6284a48648a51d4385eebfbaaf71ac487b2f84e972ccdbcfbeb2800bf6f01d0d9b91f15601d136955d355aa068e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_move_18.svg

Filesize
1KB

MD5
9d3cec65ef3a7be0da882c4d7b30a14b

SHA1
7c68b839a62465d61877264a142a956394f0deac

SHA256
76d6cf24fb10b22d4e969f4aa057b403f3cb61d1151de183bd8839d581d94f93

SHA512
9d6a6e05f0456eb17ba90986458c984ace618e311497650669f1d3142e0bcdcc4868dd70248f3b191b978e4e44d59e04d37b9c19e2dc6c300f8297b902164b22

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_nextarrow_default.svg

Filesize
880B

MD5
0edeaa47a15512f018cc0cee818e89bd

SHA1
b56878d9a88a4c97aa20f28835a75cca585a2317

SHA256
63eb868783c5d66c34d001d2168de4463bdd25bbf134e8123d978c095be8267f

SHA512
c76cc8a30a8d001919fc53425a355ad6433eb2180f558da0537b5af926ce0583d0a80b8f757b0e03256162d6bd57138298e2486cac6095ad6c8f4fbd6c2f6215

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_organize_18.svg

Filesize
1KB

MD5
73093fe2c10c8e427d2bf6bc5800335b

SHA1
a7949fe7a906129641744eceece8a0d945c2f243

SHA256
9ee9987f595d75fb02a60601d3e5344a2d3e4d531c933f3fc42b38cec1d63b35

SHA512
040c8b10eb0c0b499b624f59f29ba3a8e7d5edd5b20885761ee341973787c9a476a8f9b2c8683f79c07e3472a027757c0d083dc230c92faed843e012baae97af

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_rename_18.svg

Filesize
1KB

MD5
b9e10669f82bab6b1631e2d5cddba23c

SHA1
7d8b867f2c2b6f441f8d6e33b4f0ff6a42cd8c8f

SHA256
c6e70f80053d6d8198283482d7a55d6f74f2e8fa99bc0f4e7a63ee06e324a5a4

SHA512
8c47ec6d0a4675eec3fd5010a146824c22ce4c9d05877532a39577b5536b29a47fa0d1a87e7f0b9876b63a097f483a62e77a30858efd97d39f7141d721d7e945

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_sendforsignature_18.svg

Filesize
2KB

MD5
4ab8643b5662400d7421600d397055ec

SHA1
57a35454da43b7790a4e032e9c808e7ef383fa03

SHA256
7a7d3efd644789184724cef57b0f8d27f6642d67076094e02cf98ae1520cc30c

SHA512
d6b8f1cc83ab89170024b2fbf25235309d9981c8ea9b66d1b404116766e78be88d7b5ae5c3d94648ea32fc8e47779967e2f3f594d7365a447a57e034af477545

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_share_18.svg

Filesize
1KB

MD5
1406cc93420f3cf155a80240f14c4660

SHA1
f8d1f090a25e5615901c6919d60ede471d121128

SHA256
ada4d4a9ab83a7a6ed5602b8658358b02eab2c3300a00c94412a62aeb67471ab

SHA512
a58178db29642284bfa1566eefcedb29d11cce3fac192f642fb7f7af41dcec6223df4597c9f2590ebec4a09677d06ac023f0e130507776a4445df6c8a43acaea

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\root\ui-strings.js

Filesize
3KB

MD5
7f4e3054cd2d3d580cfc6e8d790ab0a6

SHA1
79539f5ebad37d335e379e7a4014d6fe4ca55f99

SHA256
95b174e921f94c03ec7fabdb368b1dbbeb4cd5c9b04e2d6c7a84e749e8cf660b

SHA512
d4b22b935dec7f9c4f0f44cedcc3cb8f83c61730f8b2d56f4df5056a7dc8d5158be314b1d39c44b622b56ce9f2f4fbc0110d0fede12d64936050fb4e9b854cc3

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\root\ui-strings.js

Filesize
28KB

MD5
70e920751b0697c250f4f846a314e14c

SHA1
81638d9d326dfe902da63588555d0eba34bf0a07

SHA256
235d20dbe01a3c7078b6c7551e4df661c9b3c28c0afd21d18e84daff99499646

SHA512
aec5392bd80ac7a673eab7a5d8a1607a6f941f62550fb821e06e2e7c924b471c2b8da4ea780aeec89723956e3049cf002a37a79745d55862503a6ffba96cd2bf

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\root\ui-strings.js

Filesize
7KB

MD5
97c28b3f8ae13d8b2732f396b68d71b7

SHA1
6d5e93d95c07bcb121634046d1e3162c074f4d4a

SHA256
6e287fec933985b9c3f447995d24b5cf6c7bdb5d957c767514952179b17a7102

SHA512
802fd358ca60c395b13484c4744c5cfd3c14b5783b525f4f9a237cfcb9b93523685a8b9b9dde7e7178f2909ccc20ee76c5cf1ef5d9351b57ce9b2714a19520cb

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\he-il\ui-strings.js

Filesize
896B

MD5
eafe4377e2f86a7b257245079c3a3d71

SHA1
2bb0ae7fba6f0829df8e7c6196daf0154e221aab

SHA256
23a4332ff9b2158ef13afe91fba3eb9134342c7ef93848fa818f380e65b65b6a

SHA512
7fe82e59a5a1ba79c4f63d3152e1d51fe68f07b581458f32dd20fee447bf1ea192456dd2348bde080e9ec40ebeedca1f263c85be0ddfe7cbf4ffb4a8ec0fcc26

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\root\ui-strings.js

Filesize
4KB

MD5
252ae24709ea476bf808b8b73b35ff07

SHA1
72505fdb449c1750604be629509db2f44cc33cec

SHA256
f5800f85fcf734d7027647115822841a406ebdce932fb3719ac173dfe42f9c29

SHA512
c9ce5cd6c472b47ef02c35ecf4d841c86a2797b844b037e16590079e6b8aa053d6cf1a91ff4b8e8b98bf52d772bec88bb9a8380970af69ecdcc48c66ad876a93

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\root\ui-strings.js

Filesize
1KB

MD5
1a7f7c6bf7fdef3a332770dc5cdc7d34

SHA1
0ca343e263e74e4ca1dd3d69202aca471f84f5fd

SHA256
4d08049bbe417c3b0b2dca0389d6278b292ea36ff02b147f26214b82d003bd3e

SHA512
c02292e2d7c75670998299099ee82f2758f4fcc562945fde1baf016dfee68ca6ddb6f1027dffea63c30a26f6877ce7227807cb411f626f15bc62c7a2227568f7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\rhp\convertpdf-rna-selector.js

Filesize
175KB

MD5
bbfe3ac5b371ae4addc3da84f1736122

SHA1
04a478efb8e3bafd671848d890fa73d3992effdf

SHA256
529090162ff3fa5af58cbc7da373dd01b08164d99d960c2ba9a75611c5bb2a90

SHA512
7e34bfa18152de36f64053ccfb9d47a1225658fe91c2602aa381fc400de32fca0f7e807000df33d3f29a31a6eda385f2942cff6dc0c8b60e76cf8772bbfd5c3f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\rhp\convertpdf-rna-tool-view.js

Filesize
376KB

MD5
540b64967aa257c6787e1ab12d8edc18

SHA1
ede89c4d6f75f054cea24d00d208069593b29bde

SHA256
1db93e4bad5ad67f93b5610c42960e1b04fe7dcd56ad99306d6b9a51a46f131b

SHA512
53982ac3c181625e21528574dca70c70dbd2bd4ef508167c163b1f7a50f73c10fd25371fdc138a5a0e55fe0f1b24aa0ee4c5001db0d1ea5a2f78c5e267325175

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\root\ui-strings.js

Filesize
2KB

MD5
b2b4c3a073c92aeeb34d83f832efe585

SHA1
021dc1450edce3f94f8c36faec9362a26a08ff14

SHA256
f9518729d6d6cf71a69f411e89aefdc81edac28d2f2b7006b4a9a5808ba845d0

SHA512
c480e617dfd0ab1dbd7f33e6af38c045be8c2281fc0e1c701b6eb7fc8d543b296d3dde28b6f3f8ccec79bf1348db55e07d4c9460aadb4ce925e551946559628b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\root\ui-strings.js

Filesize
1KB

MD5
016b496cdbe979b369cdd94460a05fee

SHA1
bfd9a14f68685140374ec73eb2807baaf86c7a5a

SHA256
738a706152d2edab525cae9683dbe49ddcefaa01256d24f2c4d3683b8e4341d5

SHA512
0c127f7716fd3b94ed7a48f21cfc958d0454aae0d9d9bd606710e9074a06ad4fdc67a5afb217dec48980b7690e8c3b6ba923dde89958bce30701850c13996247

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png

Filesize
688B

MD5
6a3394d1375530186ba6171894a0132d

SHA1
ab6a11daf5447ce61a64ee416a7045bdc82b2634

SHA256
882cb12f777cf6ffff036f27cec28a44ff34148f76dee19df87376af09d14b6a

SHA512
f3eb4f66124cbf3e1625471492b1593975f1ab0dbda508caff1476e489275b16ef0b0a332acd598d38ea7ee4c2321eb82cba4e896734111e203451e9b699d788

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png

Filesize
1KB

MD5
976da57329bbdd8aac1cd1eddfbbf5af

SHA1
102d4bd32e99c66e510e3e4b569e3783541c08ab

SHA256
d8fa5cba0ec032a62e597ce814f068f15a185bb96562e27f7ccf462c07f40914

SHA512
f98146dcda17068892334febe2974bc0200a78340649faaf7a373f1f4f270f0a1038c9f606be78092bd52684620a9d3416396bcfbeb0a2aba7bd7e781ef8e6d3

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png

Filesize
448B

MD5
801893894d9dcc72281966948d380fdd

SHA1
c0702d6f476c648ca7f69c9b5f75836508085def

SHA256
d0f759857256fcf259821c40401501e9ea1713d7d482da7e593f133025e2f088

SHA512
7e720d3599f938df526e9ce85eb8d950e2560535a49a2a7ea06ebd799649eb6a3c51a23c7e5525c7efafe8c465a76edfabc68a949a6db342dba9a58532ac05c9

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png

Filesize
624B

MD5
7ede70d4ccab20e22c96ab7a6122d35d

SHA1
074969e4e21bed3585f6d712adc1d1c900f08e16

SHA256
71691acfc79bd8e928f0f3da54e5570c85c0eb81c64a3bed65fe3d9b276a5831

SHA512
26de60331e7d85e10c7abe3a72dfec5a975ea573e1071f05f80e1bf6bc292955f06979cf8787cc23d26418fdd15adc304935958e5ff10bc786800b304b61912f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png

Filesize
400B

MD5
a218724a92a15900688172457845aab3

SHA1
f4a2a44c44397ffcdcf9bf8a5c69672281c5050b

SHA256
630e569e6e7717b6801bb4ae122b5960a662636e9ef8b98f6d5164a949532359

SHA512
9d4df8bb0e70c6d1c6673479245bdccc67c4dde9ee10bcf4d3ce816930fce043fb26d6d086c5834c02f17b0bc49ed7a76e0f48324a7212c538fa6b96dd55d768

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png

Filesize
560B

MD5
7bdee5bdfac990b5265ece6ad60337d9

SHA1
d2a38ca995b0dde7ee96d659c2926585a9f166d5

SHA256
adc058ab5e2bd7502b5a822273f7ad57c27a0561dc212253760697435ff9dcff

SHA512
442be3210d7293cca28b5dcd7858078e1f4d867167fc918fd9a80ab560551bd36bf85e057fe7db509d97b376cd259a1aa9a72790b48084693f42034d7b5e0c56

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png

Filesize
400B

MD5
a16a2ab65cdd13142ecc40e2d4711397

SHA1
465665a38ec85158d830cb0bda0a2ca57fbfcfa2

SHA256
b4d174d996da6e2f218a30bd82d33e81eff0e9244aa25c8c1801db26bec1c31c

SHA512
ecbf3328a5c029ca0dd4b94610a0aa2529b0fb3d5b01c5f8e4587dd04400ce828b6846d5c2a49fd142c72150220f3b7b9a1a3a312835e8b421839aebc5592ef4

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png

Filesize
560B

MD5
a0b95dd886f15290db1b8160445b87d3

SHA1
c0ad22340d1cbdd06c45a3f22d511c6a5ba740f6

SHA256
e51621687ac1e1a3f91f7f5304bc386d07e70c8fc93d2d88540442f569f9fa3a

SHA512
6a13c93cf767373a6035472da7de19f89a335ca097243f805fab7706018a5db399c7e88ed4c349f333148a3bb17b62289add61a9cc43d61b4b9673f368e48430

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png

Filesize
400B

MD5
9bc6acaee60fc8d80103f159c6325db7

SHA1
91348ba4ddb9601036527db183919ccba602239d

SHA256
7f9e2aa3803872eb7cfb323c68731181a85ef89700d734b236e0476b0f3cda25

SHA512
43140e3ffee26ff59f22dd79b70aeef3d1ac20d865c333e52831fe9bb1a560db637dffbbfe92de93607e0b814b27753fdbe2dd81d8c793737b91aa0165cd8b07

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png

Filesize
560B

MD5
dac6bf74f068cb9661f1d6c42553059a

SHA1
d5abfccc1099a834bbcaea07251c033458f69bd8

SHA256
f40b9473e7d27bfd86986ff71a5f5575ca899081c8325ca37a79d221d764e4bd

SHA512
aae364511046cc7cfa271bc8ee96f88c252bcb40b5ca15366dbf6a18f3ae2461029e418a3521f7f04c4a623598569b59c7df656fd61d771d016313926eed20ad

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\fr-ma\ui-strings.js

Filesize
1KB

MD5
ef470bf42622f6e9f14f1adbc7747143

SHA1
53b4f6e78c66cc8fd11224fdbd912d091e22d27e

SHA256
967e3b46b71f2628b9d673808d7b1837d5c68f5b4375e35902c126b829404ad7

SHA512
3d7956b474c807070bee6aa297acfb923d92bd5350a4f0b79a59c297393316e8979806a9247c99cf23b53fb1772fcdac5ba2a817024d0dc81c95919f7d0169a1

Download Submit
C:\Program Files\7-Zip\DECRYPT_YOUR_FILES.HTML

Filesize
1KB

MD5
dc2d7a41ea669e76a3a3095aac560a35

SHA1
3d5ca87209dddb74689239b267f940bbc3244c14

SHA256
ec3a9aaa0a2b9ce9ab72d64fa69f0944c2ccf596ace7e0d31aea91c5d9bf82c5

SHA512
17747879e3a7fc0f014ea62ba2001658e35b302d5339f326cedc8840d3fcaaf6baab1aa822d05c013a23043ec7a2d5de045256a4ef977cfa843d07fbefd43b8e

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif

Filesize
160B

MD5
44b9f390699f65507988bf8cc29d9b84

SHA1
af1b92c4fad913933e2a589d78bbb19ef6c17c2c

SHA256
cef76e6589dff05c881299bfd6289c6ed6f01438d90dd0567b992bbe46af8e5b

SHA512
2d4841745b4654ea995f14596c1f6bab23d412e47fd64e6cb89b0dcb0213bd4772c534273f8346fa0f12b978c89a445f4c854631afea25896a7760275b069565

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
192B

MD5
42b79a8ecaa0e76708b9ba8351acd0e3

SHA1
a22c07e1e65db2d40b9bb02735926b49f2396ee6

SHA256
c7ce161295a9dd069a5c404ac5b0f2e7f89a0f442476a4032c5240223e557727

SHA512
bbbbe96769a8b6fc0c45f0db8955ca28a68ae6fdad23b3343f6e4c65b902eebd527e79cc88e350be53502f88299ff924ab941e9de33dd0010d63c12425fcbd2c

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt

Filesize
192B

MD5
0c1c8834686239f337d8eca303ea1cbe

SHA1
19cf845dbe679cfcb0291c17e89beac2a1309269

SHA256
2b397231e9047107b54434913641cbb8e49136b7f8b806e70bab41d83e95b861

SHA512
5c05bf893094013251820f410f5f855f510a38b3f8b05a2156e14d184ddb78609063a0e4475386311049b1ecdbd31ea3d528548c3130345cdb8ec626c5a2504a

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md

Filesize
1KB

MD5
0f882a0ca9ea057432daa11897b8c087

SHA1
918037e5881be284d15d594b16efa8b6ff5f1ec0

SHA256
34b568b5700456b1d197e171d768dbbee45863c399e3be0c4a83e1b233c800fa

SHA512
b0d3659933918050be5fb6f9278b484adecf550bcd495f20224c90ec1f341020b62f14a8a8aa16ea42cc74fae93dffa8e8db5f356a3dfa26e21d25756224ffe4

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\glib.md

Filesize
31KB

MD5
a8c1872fd0aceaffd4e7156caf6183c9

SHA1
e3b3101a211a68ffb67b97009c6cafdf0a408c45

SHA256
ce88aba8678bb5b714721108c1a9a44bf23da350a38e21af77274bebae0376d6

SHA512
a9692fcbc49f97b419b5e2ce73a58b4a341c4e422829dde9d2601a8303e4251534077808a0860e4201931cdb49a0785a6af41cb9088d4f9b6f6e1b5d6fe34a38

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md

Filesize
34KB

MD5
44f47ba412e3d33ceaa446d474f5c63f

SHA1
e467170994e052870e219f3d2ba7563a893ca975

SHA256
49e1c5528eb952f07636f9805015318a98297f6f612db3be540536d47513e18b

SHA512
60bfc26c5076138014de0e97b2c8f39cd58265d9ac8535068c05869d7360dfbbcdbf41196607267fead110b7a46fb5f7311d319abcb591eeab310112a2d47398

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md

Filesize
23KB

MD5
83185338cd0177d9d2e7cfb032b0c3f7

SHA1
861367ea76032b523bc9c55eceab4b84769157f7

SHA256
b21172e7cbd67c3d56f20fad08015bf145b65af353949d1de97ab5d34c11390b

SHA512
b2077a22292d7c5a796db98a3951e09a81e8b73deb1ceaf818ceeab552c6231d924e9d6351221215d73220709278e23f22be5993b4a573f419711e30d62f4e6a

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md

Filesize
2KB

MD5
0ff94620eca2032b4f11fd4e80e32fbf

SHA1
bbfdf14f8dd55b447995f7c662ecec164dc23727

SHA256
31bce835c37812a10c32563b5695349295d5a7b2ba2270cf3d0f7fa1d912b984

SHA512
9c377432c4bed5b04186314da85e6451b86479344eb510cb2ddc690e4080b74d4c9dc25d30a094cd241caca439ae3ac376826e5be35f5b1a7f60984655a6755f

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md

Filesize
1KB

MD5
aee4cd41d0583cb7c3de7c4e10f7c9b4

SHA1
781b39bf3784c804de7635b7502a2ca888b5a50b

SHA256
c4eff432a73c6f4558e0671deebdbbf3047911c6103abbcf0d5322f17492d393

SHA512
b11841fd26f98966f71706aadc4fbc588b503dd73a5ad8e37e081de78cf26e807a11987e46397fa6615a3ed512d450f2701643752e381b15ecc070a5f78f0095

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md

Filesize
3KB

MD5
c15abcfcf5965487aaad80b1e8a84570

SHA1
988c9dc1a56717e26271dc96a153433dc5cba117

SHA256
c5972dd30c22a8fde61d17d4fbb9b8fa0735571dc37bfa69e8227402e5c6d12e

SHA512
5fbaec3bb83559210ca3fa392b4c5b1f30f2cf04e85940cbf112d24d9785080a182325e4ef2915205c1210693aa446c3070e818815ad2edb4a518c0c8af8f38e

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md

Filesize
2KB

MD5
cc671f943a8e520b1ccf44ade9e44207

SHA1
6462a6d3a94328929b79af23bd22d98aeabb1eb7

SHA256
7017a83f448abf5621f7b7c6a4698af9c9e65fd4372b04b4e63b8095757921e8

SHA512
dcb6cf59b9c866cd4553753a700b470c895b9f6fe29f77d78e23da8c80b332331a210e671c454b49c5f20fc937c59b17551ac80a0f62d7d59a47a1eb5d19d4c3

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md

Filesize
5KB

MD5
8e05c4bb2b263e77305a897a873c7198

SHA1
83f22cb25446320a408b66f979337033ae38df7f

SHA256
2a4a6e8343f1295cdcaf585f4dccdd119fca148a595ca2341d1ec19504db2288

SHA512
e5056a1cc9dd82bcb6c831ed4016d034d85916a798c79bf35431bce38863d7dd5104290b1990f7d0adde533ebed8b0d0808e9b9b7f3f549a327893736d4c3c03

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md

Filesize
17KB

MD5
8c4ff81dc3814308fa43102db82dc62a

SHA1
3d10533cc57eb4dcfa2a3ab2409e49dfd6192829

SHA256
0da857cc66c5a8c2747a7916db3cc93fee9a3e25188771aef4f9a9d7fc5d29ae

SHA512
4b2d47d0363eb6b5e95e59f39aa5ab9af8dce5f41ced5b661f64af5d2ac09cea0aa7ac49de576f1872082652c6a61869b729b6efe699d43688f6e7d41f2ca379

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md

Filesize
320KB

MD5
af0d7d0bbf7bd96c65e88bf293f97768

SHA1
ae55d68385525f4375b09ec77c196f44212a61cf

SHA256
e47adf81487a65f71bdbc323f94eb0c429e358d08afed31fde3ce663ef273cec

SHA512
50f01d3b7c6b2b17fab790959b4ca6c0bf43a3681ba1cc2261c7d01e56a62813334781fabe08de7693ad0acdd4e034fcdc4e404db7b5e00e9b04b5c0c4582204

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\asm.md

Filesize
1KB

MD5
13b2e4ecec511b0b319528930a65fbfa

SHA1
d57ab5c1b799aadecc87b7032b7e16ead441d6f5

SHA256
8c946f9591c47809045c2329f11a15794ec57fe91034a985dd4b461954b536f9

SHA512
8db36cb5722900982a4179f4c1ce8d576445e6ec192308b341bc9ea8ed3aa00915b7bea59dc0dea9cbfb286a403ec72b9f8d5336e4402b4bbbc1e8bbba06091a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md

Filesize
10KB

MD5
84c6ace087ebf751b3fd9a7684f101e6

SHA1
037fa612956a87e571970c3074159784ce615edc

SHA256
7de0792d4943d0fe850eac2c2eb704878c31e27cf04cc34171569b951e99ca81

SHA512
12e8ec85c3c5df84fcd3206e90455a077d7c4e93cf7ee43ed2a885a83aef9b821b7342ba623e206b07dab8765452185fc9de8eb98a92007f079b6592c26f9660

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md

Filesize
3KB

MD5
7304ec908338399de41ef80c45b7689d

SHA1
1617fb84036bbdca362d2a1a86c7873566ea8874

SHA256
9801a9e62e4d065b572090705bb29cf2397e4c792dea6786099b7a994fa92ee1

SHA512
f6866996cd02e0fbc3d2c4c9735d497dab10206434478a10ecbe85fe2d7c885e79d93c8c9559f1db5f9e2e44cbf800316064c816bc861cd59eecce8a30053369

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md

Filesize
176B

MD5
5b5a31187e7553b3af79188a4cab0417

SHA1
01e4c2190525800bfb58134b0e3e95709694b5dc

SHA256
59656c7626c4c1e039252362e75e34d7c541ba569a731636760bdebc375ccb90

SHA512
dc938861a16d132e0cc4cf8edfd35312413a1ce3970308eaf81b2648ce48aed1e3afdd05a9f339a3d04c0d98f00ad7e27aea3590478028c24c439bd847a2daa6

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md

Filesize
1KB

MD5
d58e0dd26af9b3727280f49d8e74d14d

SHA1
295ce161bf2487b3e20c8ebc2605c789c2986553

SHA256
d3683fbda1bef8268850b3aab7991dbfac5639b2672b274b20e4f6adb1907ade

SHA512
7d476e297f15cd3b64fadf6033ab1fa9a1fabf9a04612889195a554a783312f733235ffee01a063681032cf3b05e24b0b93d5dc49a223170dacf2561e9a9deb8

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dom.md

Filesize
3KB

MD5
17596d7019b6c34451bbb16c1bc8232e

SHA1
15e7bf9cde7e00302ff1b3b55e1fe67c25b59cc2

SHA256
b5b8d4815f834e70d7806bc14911ff2e1c0f9f05de034bc07c20090613b69493

SHA512
fdd84b4ec3e4bc39273fb5625cb8e760737f2ea8f81b3c952a6c6d680c3aee85fba0fe3e2d5d7b04f9c4233a5bf04164cac2257a83655785fa51b86be80ee608

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md

Filesize
1KB

MD5
010c6204a1d263e0bbd42179ff193c52

SHA1
ce366e604b53e64d3674ba389e8daf049e9b47a2

SHA256
c34f7dbcc0c325800ad98baf747d6c73ee480d664bffbe57f55295cba9407a44

SHA512
3fa1a9a9f091937529a20508bbd19f35c03215b9cec47a65798e47819debb2043947b6a39c602490c9e32aac04f8358138665a191746ac3e5d59b1f814139edd

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md

Filesize
28KB

MD5
ae395a56832269f3be18a30835eacb7e

SHA1
84c5512bff79ff15115db365727255f06fad259c

SHA256
8807f79d74c5e8aa9d704a241c4d31579ee468a1be5438111cec694f9c564de7

SHA512
32eaf64f7717c302d11ad3667d7ca28638e4e77ec04a7766b61b459b941b1d4b8e4cc2b25dc79d6a1a39d9d0ef0d588c6ba5a256b800f34e2b7c9a8a1c5b782a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md

Filesize
2KB

MD5
b42d420b999ea79ae30c87b82b2255e4

SHA1
f9756c9d6793d6e564db5138d81539d00819e9b9

SHA256
6bbd0b13971000aa7926a3a25f16325cd942b04f3d62c32c233bbd3c1f4f841e

SHA512
3e7815512067cd39c36a468b3f8a58862cc8c1bc67490038d20bfcf1e2e8e6e7f6a81f9088f01a7ab063ea0b433d00314187805fce6b06a6242de62d4d2b9abb

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md

Filesize
1KB

MD5
651f5b1aabec2175254e017f4f1afa73

SHA1
2cb2d871363efe34757ed395b3621ab5a13acb1f

SHA256
aab026c5fb03e54a0edc6e7e6e3233dd4255989f161732170ac3801f58727168

SHA512
7b39b48cb0d89797e224a1915978375fbc3844932ecb55d5fc7c9392cf6ff432330afa983377a61dfa849696d44ee8077067d7ff66ee5a0341f17ac63ed33f5c

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\icu.md

Filesize
2KB

MD5
4e88b787fb35683ab30964e5be8890bd

SHA1
bfa3913467e7d26b2d86a9d0d22949d1e9d3bc8b

SHA256
22fb670f8164023ff5d80e689b9a3457736c54e715707eea6968f02a66aa48da

SHA512
2c28bc9d4ae50b273b93ee2a6be53509fa99cba63a3724ba108195d3242de5b5a7b3826c6abccb6f91b9e605f3b1078ef269cb8ab42aafb4e48864e9f804b435

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md

Filesize
1KB

MD5
e82d1b8a634ecb86e356b7955890d9fa

SHA1
dbfd56460d0ed7e98bb67c15b48f873f0a987d15

SHA256
635fed2dd57b13173afc5e51dae8c81752b4fa6417a2566f97ea5277bdf6dbb6

SHA512
95083972263ed21fac33929dada04749c3492057a518a9ee987c52047bfb4440dcbc600b643e3dd777674486138d18154a601b03ec2785226fc441b6555ab217

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\joni.md

Filesize
1KB

MD5
c568c305ff6dbe50ae0eafd03baf873b

SHA1
851d53ed7a73bc6e930889d6a2fc034e8c515896

SHA256
7f4e7ef58bf2c5d86900790a27d4eac2024ad932ffc1541a05506f4cbbb3a255

SHA512
6f3725c081f6776b2f77bae4251115cd70957f83d0cb85cad8c1eea31f3b69fc41e30432db805b799a70cfcadb1e5b914461752c52a04030c54b6678745012f7

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md

Filesize
1KB

MD5
2bf308911eb6b2fc480876165fc97495

SHA1
c278b458ff60e640f45bc8ce9099447b9d3e59f5

SHA256
9e34b3961802c66fa791c5fe880bd410132c1cdc034dc5cbe86b62c0e6c80010

SHA512
c36698c0ede1b05f68ea38c3fb5d009f96f58d7a23f10bfc4b0bc92a61eb52ce430fe2a81a07f08c8decedb8b8a8de020a6a818ea19f7c4e1a9f877382964a14

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md

Filesize
3KB

MD5
dec8884fc3726c0a6bc2147ba47776f2

SHA1
b7b8dc1cd1b7db6add7b253a7a74b759eee44060

SHA256
1f6700ef8edb523f1ca547bcbe134da9232fdfebeeafe1d1371319d423e73f17

SHA512
71a9dc9c04623c0e40b1354a889b4d10f654ca4ab451f08bcad6816fd1c97e62cb97a26aae6c650e6435dff5794664e94cfa97afb150f978e70bf0549e1d56ce

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md

Filesize
2KB

MD5
2721f8661a0f71537593dedd0f64ee91

SHA1
fbc39f9298972112731833d38bbf1704e0c8d294

SHA256
d904ca43ccbb434529913a5f88d86c8a33955fda5dd554578905ceef2a662e57

SHA512
33113c5bfdfc902aff56fe86b07d1ac8e653eb3cd8c4f4fd1bb67ead4d1ae1556545258f493ac4e206896c68ca15950d06b6eac2e0a2153ce5709c4a6c2d1f12

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md

Filesize
6KB

MD5
fa909a84ec9073d17e69b310755939bd

SHA1
5013c013880c7a8541c515b6b83ddd00a6ec322c

SHA256
f2383faa75010d558c98226e13a964e03c8897c887c2814dbd1f195d6a53df32

SHA512
e545010548b931ccb8c01b37a5a3ab8ba819fffb62a3b980ea6e8d45b96c11a7ed1863fb3973376b5aeba30748110ceb5d95b936f831787e553d5a988dac8266

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md

Filesize
5KB

MD5
5ba038f93c88428b691967dfc1656de2

SHA1
607eb09dc6e03c15320ed31dde2802908558ade2

SHA256
470fbeea4faec18e7abb50c8330acd602d57ff412305972ca75113df30d503f6

SHA512
5999be8496510078bfb02d5841245636432fee89cf253632485b85b22e3e893ac3d27211695b3b7aab77e9debaf33868d6f8360943678de6c966250bcc13eb09

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md

Filesize
3KB

MD5
2e4f522bf727cc362dd944fcaf25e846

SHA1
08ccbafdf37311b842ab865856b6504e0a675a78

SHA256
f48e7ff0170c6524f4a7943c088f1d4bf611d1b72d43a5b164f5a6bfc5614557

SHA512
acfafc34786ac99b2a4113486cf4a046e3801a03fda5939a0f821c2c06353fa974266bd3964a06cb54020f072082e876f95485ad9e50cf514d34e6280ac1e5ae

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md

Filesize
2KB

MD5
e2c5ce07d54d04653624017084459134

SHA1
347a845ec06c3923b86106d5d97c4afa22d91839

SHA256
642c88dc8191710e5ac9ae048215aa64b3c8d8b695422828ff2f48ab7f8690f4

SHA512
54d0776017296cce1b7299a36fe68238392404330646a515df4304d9fb9318667f2793d38777d6c412e220131df9ddec5714caf65148b083fa5a4d0d832fa04a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md

Filesize
2KB

MD5
1f9a398cdafb09c07523ed362ef73dcb

SHA1
fc4d9b2c95e828186c3927866bd43268eb97d4ed

SHA256
119d1b47a7302463be8731dd3b3fa37a54e8c8d6d55aedf5c54516dd080fb172

SHA512
50f5f0841de57e57d6cd8db321112fff7a24841ae82652a9d59aded4d7da5e56f8094a5107bc2358c81c9a8265a2547499916ce3679e0f3d6fd4fb8dd91515c8

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md

Filesize
1KB

MD5
dbd38e7fa71fae110e43390a90f1be69

SHA1
f93406a2189cd7c63063f804b977eb45d6affef4

SHA256
e176b6f566f245d7527418e4fceb0a69d6dda4677cdb7345604f622b5a115b27

SHA512
4073655d2560fd811e0b6a87135db61f3ef20ce90207e4b868402d7afc367a329b3d9df4473aa933c6811c8806a781fccd5c14fbf7a9b341966f5ec14012cc6d

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md

Filesize
1KB

MD5
f223a5d545fe0088f0f6b986d90e1193

SHA1
9b757b6519caf89982c1770ef2cd4c52032a8375

SHA256
408811b07c30d58050415cbc187176111619f5f65eb7d284df2f5e8a898e1b14

SHA512
f1ef63679079b3b6e36218aa1f8688a50ce5f68c94ff846c0e64950f8a5d304b278780f5ecb7da9be0a9a66288693cde3982476fd260d9b49484b03df65fa38a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md

Filesize
11KB

MD5
290e39cbd6438bcf559fd662d021d18f

SHA1
b1818f6029241c276fe9996805a974e51412799a

SHA256
83396b7973856e2ba7a19679c7228234247e8df8a2f8e3092b659e650b7c859f

SHA512
373667de1e4c78c2e6237fee17b5b9454b1051a26ae7493c4a85d4bfeca7ba73bc5e7b70e29d89bd44800d58438f3c35bf09b3e7145949461566e8af66da8384

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md

Filesize
1KB

MD5
730d9d3791ff40021795716f42801f67

SHA1
beba9a986513d81a22dd5e20ec33affd94ac6f17

SHA256
21c8b831211c98d3858532f515743687516b2dfa65cce041bda70dd020d39574

SHA512
592c900247a5a03e5b6cd7170e78737fa67b150666c14562b72f6fe8a35d452e478b3804392df010c731de9423251be62d8878b7ee188140e588c732a0e56981

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md

Filesize
2KB

MD5
70f17de0e60759a799d369b6e3709ce8

SHA1
f09f76b42ee89a4187ba02b15d8f385e88619479

SHA256
73a230c55864df6fd330448233422eded9c07905c49b9ff61208e7e8fd311ba5

SHA512
8d56819f87fada201e8ce88211a8efa6af0b5784405b109e37398901248716294c01801310957bc85ca4a801879fc7d92cc4cb32b0b21e4639dc176cf5901461

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md

Filesize
11KB

MD5
8aca29f80aa3eeffcb2a7e32c6b28080

SHA1
00d03c9f4ed0c23fc37495f5cbb518ad584e2385

SHA256
8d48c7f4a09832b5a7fc1a052baa3b9b23e5b217356ec65115cdbbc321e16e3f

SHA512
601017ea9980210afc39eec4cd0941f85e51a05691104182da882eacb622ae1916fbae363362a101d7c6970beceaf4e8e93fc78a87806574326ad458a6b7bee3

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md

Filesize
11KB

MD5
ae8ee082966ea298171c0f485d9e3f9d

SHA1
73b59441136bb42dd11d250973da52f28dabf2d5

SHA256
67ba0111cd6a09d6ea384ceb89f03b13a415406ee2317279f7507a5f5c9921f1

SHA512
25cdca2b8850585b373fe384734ac5ee073a512c94c0a546554bfa15ae3083cbc20d1a2adf07e14da95d2bf656e642a2534e4fa753c3df7e105456a7d7b4da75

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md

Filesize
11KB

MD5
95089ee20d34a7de5969055fd99fbff6

SHA1
fc73b3ad7f26e2c93cc5cbcb6e43f268d5089a11

SHA256
71d7ff70793a0d9de68331c9a6e5d8043371f78ef72b79785203288d336c2aa5

SHA512
e93c2225177788c3debff10130535bcdcc297334f2cb8062db99a227d1a0177fd35b31de50febd37d97b246d78d189fb9fc356b0765b292040bcbf1be305103a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md

Filesize
1024B

MD5
7ec696623716e0fb30386d878de4c0e6

SHA1
45b971b1d1fa1af35196a372c93df1be7a988403

SHA256
bdc7a72057803e0f0b06ac2fa9c23ae481baa90bafd148360434a8619f7812e8

SHA512
f11f994dda8305985a6189e9dc0770d330c2275fb782a565d369f85e15d691c6d6413a87febc510c960169f30b5f8bb5f923f415b636a305133b937fe83c20f5

Download Submit
C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub2019_eula.txt

Filesize
48B

MD5
bc89ebe237ab829bec0317f7d8c1164c

SHA1
1e8d3726bdbfa3d4ce8403285b80b9dd347d6729

SHA256
b18964df3b13c167e5896034817e500ec70ab3ceb82956949ec5b83790477208

SHA512
27751aef9e801e11c0ec084a2ce0692ab44bfa34fd2d3a3a9153baf303aa399a33d96b7d230e8b152b2d3c7ea701fd9ba64d36ed9b74acc3593e9db6a2ad6c2f

Download Submit
C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe

Filesize
21KB

MD5
fec89e9d2784b4c015fed6f5ae558e08

SHA1
581fd9fb59bd42fbe7bd065cf0e6ff6d4d0daba2

SHA256
489f2546a4ad1e0e0147d1ca2fd8801785689f67fb850171ccbaa6306a152065

SHA512
e3bbf89cc0a955a2819455137e540952c55f417732a596ef314a46d5312b3bed644ac7595f75d3639ebc30e85f0f210dba0ef5b013d1b83bafd2c17a9d685a24

Download Submit
memory/696-38-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-30-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-11-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-133-0x0000000074930000-0x00000000750E0000-memory.dmp

Filesize
7.7MB

Download
memory/696-134-0x000000007493E000-0x000000007493F000-memory.dmp

Filesize
4KB

Download
memory/696-135-0x0000000074930000-0x00000000750E0000-memory.dmp

Filesize
7.7MB

Download
memory/696-136-0x00000000054A0000-0x00000000054AE000-memory.dmp

Filesize
56KB

Download
memory/696-1-0x00000000024C0000-0x00000000024F2000-memory.dmp

Filesize
200KB

Download
memory/696-2-0x0000000002670000-0x00000000026A2000-memory.dmp

Filesize
200KB

Download
memory/696-3-0x0000000074930000-0x00000000750E0000-memory.dmp

Filesize
7.7MB

Download
memory/696-51-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-27-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-39-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-4-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-5-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-7-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-9-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-13-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-15-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-132-0x0000000074930000-0x00000000750E0000-memory.dmp

Filesize
7.7MB

Download
memory/696-17-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-19-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-21-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-23-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-25-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-0-0x000000007493E000-0x000000007493F000-memory.dmp

Filesize
4KB

Download
memory/696-31-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-33-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-35-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-67-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-41-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-43-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-45-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-47-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-49-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-54-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-55-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-57-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-59-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-61-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-64-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-131-0x0000000005360000-0x000000000536A000-memory.dmp

Filesize
40KB

Download
memory/696-65-0x0000000002670000-0x000000000269B000-memory.dmp

Filesize
172KB

Download
memory/696-130-0x0000000005130000-0x00000000051C2000-memory.dmp

Filesize
584KB

Download
memory/696-129-0x0000000004B60000-0x0000000005104000-memory.dmp

Filesize
5.6MB

Download
memory/696-128-0x0000000074930000-0x00000000750E0000-memory.dmp

Filesize
7.7MB

Download
memory/4532-152-0x00007FFF2F290000-0x00007FFF2FD51000-memory.dmp

Filesize
10.8MB

Download
memory/4532-2634-0x00007FFF2F290000-0x00007FFF2FD51000-memory.dmp

Filesize
10.8MB

Download
memory/4532-1962-0x00007FFF2F293000-0x00007FFF2F295000-memory.dmp

Filesize
8KB

Download
memory/4532-149-0x00000000001F0000-0x00000000001FC000-memory.dmp

Filesize
48KB

Download
memory/4532-148-0x00007FFF2F293000-0x00007FFF2F295000-memory.dmp

Filesize
8KB

Download