1859dfca6e5251f22c90aa4245a953c6afb26b0d2e6dec2b4747ceef4f7df18d

Resubmissions

19/09/2024, 19:17

240919-xzbwqswana 9

19/09/2024, 14:45

240919-r421tsvbjr 7

19/09/2024, 14:37

240919-rzaqsatcnc 7

Analysis

max time kernel
295s
max time network
301s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
19/09/2024, 14:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

qitasc.exe
Size

5.1MB
MD5

43ebe9df7e67597a160f5effa8868bf3
SHA1

3cd79d15f53e36e4864122d7af81d12581fbf71c
SHA256

1859dfca6e5251f22c90aa4245a953c6afb26b0d2e6dec2b4747ceef4f7df18d
SHA512

c3d73c071ea7da40aad5e693e7690018f488c6d9b74577e111a016deca9fef4725436ee940f82b7940505db21a59f64dedad903a52d0dd39f8446b7f7f99758a
SSDEEP

49152:XOuEZOZHIXrb/TCvO90dL3BmAFd4A64nsfJIUGBXbLxPCZMKd33UicObbWdE5qeH:XOu1oiUoB4X37Z5q0RjyJRJ3pQ+E

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
2944	java.exe
1188	Process not Found

Loads dropped DLL 20 IoCs

pid	Process
744	qitasc.exe
2944	java.exe
2944	java.exe
2944	java.exe
2944	java.exe
2944	java.exe
2944	java.exe
2944	java.exe
2944	java.exe
2944	java.exe
2944	java.exe
2944	java.exe
2944	java.exe
2944	java.exe
2944	java.exe
2944	java.exe
2944	java.exe
2944	java.exe
2944	java.exe
2944	java.exe

Modifies file permissions 1 TTPs 2 IoCs

discovery

File and Directory Permissions Modification

T1222

pid	Process
1236	icacls.exe
2364	icacls.exe

Modifies system certificate store 2 TTPs 8 IoCs

evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6\Blob = 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	qitasc.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6\Blob = 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	qitasc.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6\Blob = 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	qitasc.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A	qitasc.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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	qitasc.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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	qitasc.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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	qitasc.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6	qitasc.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	744	qitasc.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2944	java.exe
2944	java.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 744 wrote to memory of 2084	744	qitasc.exe	31
PID 744 wrote to memory of 2084	744	qitasc.exe	31
PID 744 wrote to memory of 2084	744	qitasc.exe	31
PID 744 wrote to memory of 2944	744	qitasc.exe	33
PID 744 wrote to memory of 2944	744	qitasc.exe	33
PID 744 wrote to memory of 2944	744	qitasc.exe	33
PID 2944 wrote to memory of 1236	2944	java.exe	34
PID 2944 wrote to memory of 1236	2944	java.exe	34
PID 2944 wrote to memory of 1236	2944	java.exe	34
PID 2944 wrote to memory of 2364	2944	java.exe	35
PID 2944 wrote to memory of 2364	2944	java.exe	35
PID 2944 wrote to memory of 2364	2944	java.exe	35

C:\Users\Admin\AppData\Local\Temp\qitasc.exe
"C:\Users\Admin\AppData\Local\Temp\qitasc.exe"
1⤵
- Loads dropped DLL
- Modifies system certificate store
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:744
- C:\Windows\system32\java.exe
  java -version
  2⤵
  PID:2084
- C:\QiTASC\installer\jdk\bin\java.exe
  C:\QiTASC\installer\jdk\bin\java -jar C:\QiTASC\installer\installer-gui.jar
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:2944
- - C:\Windows\system32\icacls.exe
    icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M
    3⤵
    - Modifies file permissions
    PID:1236
- - C:\Windows\system32\icacls.exe
    icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage\c83f529e7bbe975c.timestamp /grant "everyone":(OI)(CI)M
    3⤵
    - Modifies file permissions
    PID:2364

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\ProgramData\Oracle\Java\.oracle_jre_usage\c83f529e7bbe975c.timestamp

Filesize
44B

MD5
ebdc545fae5996fdfe4eab29297b45b5

SHA1
8d266c3b2dd1d860ac2fc5a4eda24c76450f26a9

SHA256
2f265855a5386599e9a1d7bb96ad6b194ae35c81ea6630a87ac08d31baeb15ac

SHA512
e3ac1472bc0828087e49d016f989a39e065741c9c644acfda9dec48b46041db10c0103f300d86847b147286ba9beca125c2405dc31fd735e9eb2994a973a9675

Download Submit
C:\QiTASC\installer\debug.log

Filesize
574B

MD5
9244eef22e236ea2b69ab429d6609fd2

SHA1
dfc384fa6090b9639f12ab5a3c365162bbe87b11

SHA256
a82871069fe48122f7e683e674c6a6ac7a6e3fa104b840a3a5107396c1399119

SHA512
617753239e0a624730c55a44e1da3414bcf47925d494baf91186222cd6c92a2adc29a0f1284666788c7a0ac921b2c1e22966964edc0af0f9fea2b9bc72d091e9

Download Submit
C:\QiTASC\installer\installer-gui.jar

Filesize
5.7MB

MD5
ef7879d4b7f850f161c2eb569c528a7b

SHA1
5400d9b6bff2c01e37a5fb921af0268f86e74fd2

SHA256
cc96c40bc12c33bf4b3457ef9d1f5a60f018efb0f5ad728272c360fb48ba9446

SHA512
ab79e23fcc03427bfcd58cf8179a8dc597f306255b1f0e9a139ed6f9ff2ba62c86f48a2b882b6afc6dc002ce3abffd2f8a499893d4134bb72e330fe1a6fe823c

Download Submit
C:\QiTASC\installer\jdk-8u102-windows-x64\db\bin\NetworkServerControl

Filesize
5KB

MD5
a287562ea6d653c2332f4672aefe7018

SHA1
bf7f5cad6e398179038508a899071647a6537179

SHA256
8b5e931c39f343a22780f0a122ef639f19679ec27c5cde07148fdc26dc478efe

SHA512
fb60bc6920d41daf5b149794c2acd6c5a82889c27342bfb8604e8f149a112d2975e0b0bf97649d28d71d144146e70fb438282ec19d04db9a5acbc0ed118f2f74

Download Submit
C:\QiTASC\installer\jdk-8u102-windows-x64\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\ECLIPSE_.RSA

Filesize
7KB

MD5
36f381cc8f60a659777f1133a006de4f

SHA1
b70e38fecb27a4de0776951a919bf072e601690e

SHA256
a3f56fee6bf824076f7599298272225f054dabac6a45b517eedfedc1f37d3c16

SHA512
dc1afd3b53c97c090c3baae27ef50531b27ce72509fbe2d3d4e53b99bcf7d555d13a7545a072c518e446bc433c2cf14300bb149e784a1db841ef9c3f3dd0efae

Download Submit
C:\QiTASC\installer\jdk-8u102-windows-x64\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\eclipse.inf

Filesize
57B

MD5
adf99b54fd6f317b611320564167c305

SHA1
d3d80dd39b686e04bf31db6ac9335084e841ef73

SHA256
1b68454d53e781f8793547fde8fcb2f3b03b5c8134f37b9d8c4045cb8a5473f3

SHA512
65fb44cdaf01632d60ecf3b49ab1eb661982ee8b6a430dcf6d1e75789787c9e7356754cd071421ca44a1b32ab918be97a630b1b0ca722383eea56d40fa131642

Download Submit
C:\QiTASC\installer\jdk-8u102-windows-x64\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\epl-v10.html

Filesize
12KB

MD5
b35adb5213ca9657e911e9befb180842

SHA1
8d80da0c92c1269b610b03cc8061556004898c85

SHA256
9a96d0daf98aa6fb4aa530d399c742c66121b0bdae4a1f7ffa22d2135e1df7fd

SHA512
82112691ba9b49c3e335e7eb7a426f5d24072c72424612b0d07863560fd37042b6408317db9bd973280eb17e100ec25d3ce18cc6eeedc57c27d338fa517ea6fa

Download Submit
C:\QiTASC\installer\jdk-8u102-windows-x64\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\license.html

Filesize
8KB

MD5
1fabf1d6edd14f933014d5557c7b7522

SHA1
67958aa114880c281036cc14a4e53fa123c4d9ad

SHA256
5f7d79ccbca7bdd2d9e036984a8a60c6bb9051411a740dc538f36f882f983b6e

SHA512
4c4f2caafc7ea9e97303f31c6f6a192a64fea4f24cc9d071b8339a519c1ea7f951e14571c9e9a23eee140fb676c7b213dc25828b274639046d9e01f6cd85dd3b

Download Submit
C:\QiTASC\installer\jdk\jre\bin\msvcr100.dll

Filesize
808KB

MD5
23ddd075ac31d22f94ca2fd0d1c207b5

SHA1
f904062a0199392e697b58c5bf23f6ebaa0ddf1e

SHA256
6e537a0931a5dcbadf23732027648d2fd9ff0390187c5530b4de42c67245094d

SHA512
ecb09a9b86605c1959be07bd8001f132d7895bcd4a44cdbe0c776e35275b9b85e0e05708f0c43f97cf8e364ed4e503c4f955cde8a756c2870578c93800e84f2c

Download Submit
C:\QiTASC\installer\jdk\jre\bin\msvcr120.dll

Filesize
940KB

MD5
9c861c079dd81762b6c54e37597b7712

SHA1
62cb65a1d79e2c5ada0c7bfc04c18693567c90d0

SHA256
ad32240bb1de55c3f5fcac8789f583a17057f9d14914c538c2a7a5ad346b341c

SHA512
3aa770d6fba8590fdcf5d263cb2b3d2fae859e29d31ad482fbfbd700bcd602a013ac2568475999ef9fb06ae666d203d97f42181ec7344cba023a8534fb13acb7

Download Submit
C:\QiTASC\installer\jdk\jre\bin\net.dll

Filesize
93KB

MD5
5dd23f85e09401e6b7cf7da522f91b5b

SHA1
843f1e0f085839afd9cb13566b0d647d01e5ef0e

SHA256
f89682f90b2a0b3af5c3dcc8583d113408d732d8e24e8b47f2f8692ea0f3c411

SHA512
d0a5fe7b6e0c8d972622abb0b938ce8032dd836748966dbf37d247d1b203ce244398ba27d4373c7ddbf7fffa834adeb022f1c54e9890449250bd1f6a02e5befc

Download Submit
C:\QiTASC\installer\jdk\jre\bin\nio.dll

Filesize
59KB

MD5
16c23c0b14f845b178de117e6f777628

SHA1
2568ff1093b21ff00cdf4c26d440341b0b9ec6e9

SHA256
c4ec1502e6b5282d36004920f4871e0e82c3a0eabb9fabe8525c10a4b7e72066

SHA512
cd526924f741aafb91cba32912e9ab0963c89ebb12c9f2730812511d6acffa6f6fd1db758bfaf94f46219d6f66bc216f61189659f3c2372eeadd432488a8702e

Download Submit
C:\QiTASC\installer\jdk\jre\bin\prism_common.dll

Filesize
56KB

MD5
dace55c4597dea349730a9254243c558

SHA1
0eeacc95670ec4e8296af2a1d3ea728fd84e14aa

SHA256
8c68414245feee88fdb83b5e1c3f06d94069ab88658531da286935ba33914098

SHA512
2df1e07e1c60edd6f027c3db1affaff928cc717ffa49c17eb2d74436d57c7876a3c1ab14754e713d2395f9bd100ae7bf627f1571cd05c826f0d8c950a3d2da59

Download Submit
C:\QiTASC\installer\jdk\jre\bin\sunmscapi.dll

Filesize
31KB

MD5
1af0ed31e1e1c57dcc9841bc80378938

SHA1
699c2362a7be5bc783b513af8bfbab7d8502058c

SHA256
fe862a194b6564003334ca0bb3ac513dc3d20cf67ca7bc2d45375c9857b5954c

SHA512
e3b2cb2fd2fd291d0bcb2433826ac19093eb054ceddac608628dfee36d3912ebd88bd893163890b85a7c2280a0780519d1d45fd6c30ab51d0200af02b559a46e

Download Submit
C:\QiTASC\installer\jdk\jre\lib\accessibility.properties

Filesize
149B

MD5
2ed483df31645d3d00c625c00c1e5a14

SHA1
27c9b302d2d47aae04fc1f4ef9127a2835a77853

SHA256
68ef2f3c6d7636e39c6626ed1bd700e3a6b796c25a9e5feca4533abfacd61cdf

SHA512
4bf6d06f2ceaf070df4bd734370def74a6dd545fd40efd64a948e1422470ef39e37a4909feeb8f0731d5badb3dd9086e96dace6bdca7bbd3078e8383b16894da

Download Submit
C:\QiTASC\installer\jdk\jre\lib\amd64\jvm.cfg

Filesize
634B

MD5
499f2a4e0a25a41c1ff80df2d073e4fd

SHA1
e2469cbe07e92d817637be4e889ebb74c3c46253

SHA256
80847ed146dbc5a9f604b07ec887737fc266699abba266177b553149487ce9eb

SHA512
7828f7b06d0f4309b9edd3aa71ae0bb7ee92d2f8df5642c13437bba2a3888e457dc9b24c16aa9e0f19231530cb44b8ccd955cbbdf5956ce8622cc208796b357d

Download Submit
C:\QiTASC\installer\jdk\jre\lib\ext\cldrdata.jar

Filesize
3.7MB

MD5
ce334fca702644b823c09e6b8f21ba72

SHA1
20aed9eb78ecc6d4e376d26b424f2606117212fe

SHA256
0c2e6da9a4ed57ae635108c6084a277859006d51b4bf2cad6792dfb5881afae1

SHA512
74b0eec7d69c89b872329b68e57251b5e0604a6c962ca60815cd941bda839a9ef9a48c24d7fe59b10ab57d4f2fb29fbdb10d5c3bb296778532ae06a842ade638

Download Submit
C:\QiTASC\installer\jdk\jre\lib\ext\jfxrt.jar

Filesize
17.4MB

MD5
2aa728120dc36c5173e322f289d23f14

SHA1
d1591944fea486220152cd80594e3b55755c56f5

SHA256
fa274c9f358c769ffb1e5aa110314ab830c17aec808cd66c9300620932ffe8ba

SHA512
8ca1c2cb2fcec3fe203610a4276e18ee7d8e0fb2cad429dff29d72785ce43c26ecd1ec5b9365518f6948e5a824d9e082c1efdc65fc130389c55249a28a37da77

Download Submit
C:\QiTASC\installer\jdk\jre\lib\ext\localedata.jar

Filesize
2.1MB

MD5
fdbc498326ec6a7ad0ba1992896c8943

SHA1
1335084663d15dbdf9bb1b64f5978f3a3f4c36ca

SHA256
ee5f5be48c25d8f0424cd5a0532d1d869cbe25ced1d02a36b2d2581702dc6ee9

SHA512
76984b98ea9891090278b451c9e5642a72d17c15c33713b3c9da64486acf58e77641850edb5f018347afc23737886cfd74f38f886d88039488c3afdd729cea37

Download Submit
C:\QiTASC\installer\jdk\jre\lib\ext\meta-index

Filesize
1KB

MD5
005faac2118450bfcd46ae414da5f0e5

SHA1
9f5c887e0505e1bb06bd1fc7975a3219709d061d

SHA256
f0bce718f8d2b38247ce0ac814a1470c826602f4251d86369c2359ff60676bd8

SHA512
8b618c74b359ab3c9d3c8a4864f8e48fe4054514a396352a829a84c9b843a2028c6c31eb53e857e03c803294e05f69c5bf586e261312264e7607b2efd14f78a9

Download Submit
C:\QiTASC\installer\jdk\jre\lib\ext\sunec.jar

Filesize
38KB

MD5
a269905bbb9f7d02baa24a756e7b09d7

SHA1
82a0f9c5cbc2b79bdb6cfe80487691e232b26f9c

SHA256
e2787698d746dc25c24d3be0fa751cea6267f68b4e972cfc3df4b4eac8046245

SHA512
496841cf49e2bf4eb146632f7d1f09efa8f38ae99b93081af4297a7d8412b444b9f066358f0c110d33fea6ae60458355271d8fdcd9854c02efb2023af5f661f6

Download Submit
C:\QiTASC\installer\jdk\jre\lib\ext\sunjce_provider.jar

Filesize
272KB

MD5
b04074a9fc78dc1409168e1e2d139647

SHA1
54182c904a48364fc572e3a2631df14823c29cef

SHA256
bfad3fb11e7115aaf34719488551bf3205b2faffb38681c7f6bdad19bb7568c2

SHA512
e97ca3d53e867e957bf467688f83c53b2fd6ff1ea001b19f03a23096581dc8adcec7c1403d164d063b1a437e4bf6fa98e1543626849d4e17e31156cb012f9599

Download Submit
C:\QiTASC\installer\jdk\jre\lib\ext\sunmscapi.jar

Filesize
31KB

MD5
2249eac4f859c7bc578afd2f7b771249

SHA1
76ba0e08c6b3df9fb1551f00189323dac8fc818c

SHA256
a0719cae8271f918c8613feb92a7591d0a6e7d04266f62144b2eab7844d00c75

SHA512
db5415bc542f4910166163f9ba34bc33af1d114a73d852b143b2c3e28f59270827006693d6df460523e26516cab351d2ee3f944d715ae86cd12d926d09f92454

Download Submit
C:\QiTASC\installer\jdk\jre\lib\jce.jar

Filesize
112KB

MD5
8ff69241f0e58a166cf4fc6028b680a8

SHA1
79b799dc954b670879f79ba5c980491f94a67e26

SHA256
97172eac187f45611bc543b5b9b0f024daf5b3e108973ccb5b05d0e66e18666a

SHA512
7081a786fca698559d6715f1b769a8b945f7bff5005bc545f0f76d00ef64997f0fdfa74eccf3fab53fc6e472e928823f0ac93dfd40e5b3f7b2a83879ea430df2

Download Submit
C:\QiTASC\installer\jdk\jre\lib\jfr.jar

Filesize
546KB

MD5
e1247b7d53be7dc6157902037790edad

SHA1
8a0c0c5895f646d85c729fccd866365810626c46

SHA256
122bb3937ad3bee415d2e92257df93b4fc97baee6d4a962400c3e997312e1fdb

SHA512
47a67a1e5a251942c3a26142b93a7dd8cd8b055196774ce496fe2dd7d25ffb6b65540af2f3a2cef4387d7fbb3f0cb92815680dd887eedc5d41096ab85a7007b7

Download Submit
C:\QiTASC\installer\jdk\jre\lib\jsse.jar

Filesize
617KB

MD5
5e610b93a7b7df272cd1efda5c177901

SHA1
1acf2383c307e6b24cd97d2f48009b3074257561

SHA256
4be7e55c6ddfbdbb48b05c0cf13d9798bfb5c3673df66694e688388b21db7816

SHA512
c2446584e3d644eca30e1cd0582bd7b0e222b6a35fbc3cc4669b26e2725d90461a100df158376692ceb5afe9c80268f79b800dd154058d976b4eb6eb46c041b3

Download Submit
C:\QiTASC\installer\jdk\jre\lib\logging.properties

Filesize
2KB

MD5
809c50033f825eff7fc70419aaf30317

SHA1
89da8094484891f9ec1fa40c6c8b61f94c5869d0

SHA256
ce1688fe641099954572ea856953035b5188e2ca228705001368250337b9b232

SHA512
c5aa71ad9e1d17472644eb43146edf87caa7bccf0a39e102e31e6c081cd017e01b39645f55ee87f4ea3556376f7cad3953ce3f3301b4b3af265b7b4357b67a5c

Download Submit
C:\QiTASC\installer\jdk\jre\lib\meta-index

Filesize
2KB

MD5
91aa6ea7320140f30379f758d626e59d

SHA1
3be2febe28723b1033ccdaa110eaf59bbd6d1f96

SHA256
4af21954cdf398d1eae795b6886ca2581dac9f2f1d41c98c6ed9b5dbc3e3c1d4

SHA512
03428803f1d644d89eb4c0dcbdea93acaac366d35fc1356ccabf83473f4fef7924edb771e44c721103cec22d94a179f092d1bfd1c0a62130f076eb82a826d7cb

Download Submit
C:\QiTASC\installer\jdk\jre\lib\net.properties

Filesize
2KB

MD5
19a5c7f5186854362281a152e756ce2f

SHA1
cc738221f126334de60d73b5db63789c41e282ac

SHA256
5d62f39e6eb46c7a731b6997a14acfeb63f5c95dfcef8de3d4d94b5d571372c6

SHA512
24e3489b825015226c7c2a1ac6cc2d20d5056c8d578d612f73a35aa43a953cfe331fd6cbdc251ce23cfaa403130848822dd3efb30ed427f25a1221ba0a2b2bf3

Download Submit
C:\QiTASC\installer\jdk\jre\lib\resources.jar

Filesize
3.3MB

MD5
7a697a3195baabb679b90f8a55d4bd4d

SHA1
61288592ef9e6484cd9801ec2a04f7fce4f43375

SHA256
da4de8e0379ff98907d8636a1cced0d1d1f90f0a39e3935b0668f45401fe04c6

SHA512
d0873731f8979aa10f22b80e0bf9d7c60b902a5453285dce498d4770c394c0500de47b1f41ff0ed8d00068d315ee112e792a9fb80770b5cce90e1c7e66e027a0

Download Submit
C:\QiTASC\installer\jdk\jre\lib\security\US_export_policy.jar

Filesize
2KB

MD5
ee4ed9c75a1aaa04dfd192382c57900c

SHA1
7d69ea3b385bc067738520f1b5c549e1084be285

SHA256
90012f900cf749a0e52a0775966ef575d390ad46388c49d512838983a554a870

SHA512
eae6a23d2fd7002a55465844e662d7a5e3ed5a6a8baf7317897e59a92a4b806dd26f2a19b7c05984745050b4fe3ffa30646a19c0f08451440e415f958204137c

Download Submit
C:\QiTASC\installer\jdk\jre\lib\security\blacklisted.certs

Filesize
1KB

MD5
b9c358f9d668e86fda8048982e741acc

SHA1
8870bef548310b648ef044db40c5ec609f896f0b

SHA256
ddd297102146ac7f6607b35c0e0b565975739a7841da5e5a6207b6f4ebb2d822

SHA512
91ced5411767fba041b950ad46f71a19f5dd48af3d2199da835d6cb9062ab80076a961d1f91856d74dbb0e037b092729d065204a74e113c914b33cd9b2f714b7

Download Submit
C:\QiTASC\installer\jdk\jre\lib\security\cacerts

Filesize
110KB

MD5
a2c167c8e0f275b234cb2c2e943781c7

SHA1
2a6b5fbc476ea3a5ddfb4bf1f6cdf0c4da843bb1

SHA256
a9263831583dfd58bc3584aa0b13e6cde43403fb82093329b47bb65a8c701afb

SHA512
8a0c2240c603210ae963c6a126d19bf51659fded2228503bbf2a2662ccb73b0f9e18c020c9e5e2f3449e2f4f0006d68fe15c8fd5d91dee8a1a6b42a49183beaa

Download Submit
C:\QiTASC\installer\jdk\jre\lib\security\java.security

Filesize
26KB

MD5
409c132fe4ea4abe9e5eb5a48a385b61

SHA1
446d68298be43eb657934552d656fa9ae240f2a2

SHA256
4d9e5a12b8cac8b36ecd88468b1c4018bc83c97eb467141901f90358d146a583

SHA512
7fed286ac9aed03e2dae24c3864edbbf812b65965c7173cc56ce622179eb5f872f77116275e96e1d52d1c58d3cdebe4e82b540b968e95d5da656aa74ad17400d

Download Submit
C:\QiTASC\installer\jdk\jre\lib\security\local_policy.jar

Filesize
3KB

MD5
57aaaa3176dc28fc554ef0906d01041a

SHA1
238b8826e110f58acb2e1959773b0a577cd4d569

SHA256
b8becc3ef2e7ff7d2165dd1a4e13b9c59fd626f20a26af9a32277c1f4b5d5bc7

SHA512
8704b5e3665f28d1a0bc2a063f4bc07ba3c7cd8611e06c0d636a91d5ea55f63e85c6d2ad49e5d8ece267d43ca3800b3cd09cf369841c94d30692eb715bb0098e

Download Submit
C:\QiTASC\installer\jdk\jre\lib\tzdb.dat

Filesize
101KB

MD5
5a7f416bd764e4a0c2deb976b1d04b7b

SHA1
e12754541a58d7687deda517cdda14b897ff4400

SHA256
a636afa5edba8aa0944836793537d9c5b5ca0091ccc3741fc0823edae8697c9d

SHA512
3ab2ad86832b98f8e5e1ce1c1b3ffefa3c3d00b592eb1858e4a10fff88d1a74da81ad24c7ec82615c398192f976a1c15358fce9451aa0af9e65fb566731d6d8f

Download Submit
C:\QiTASC\intaqt-studio\LICENSE.txt

Filesize
11KB

MD5
6d6dd54ad928e62f499d917193c9af4e

SHA1
5fb03c6ac0b8858e5b691b23a72da6fb3531cd0b

SHA256
f0faea91dbf608882a9811211ec58d6c90fea8211b91218532eecb15b08e8ae2

SHA512
88976488c794179014aad0b3af8c00af0d9780eab37e0c38b4d754924a3743f2109dd43589c03b92cc1afe60cb25460539784993e32b64b03616c29a5f9277fe

Download Submit
C:\QiTASC\intaqt-studio\jbr\legal\java.desktop\ADDITIONAL_LICENSE_INFO

Filesize
49B

MD5
19c9d1d2aad61ce9cb8fb7f20ef1ca98

SHA1
2db86ab706d9b73feeb51a904be03b63bee92baf

SHA256
ebf9777bd307ed789ceabf282a9aca168c391c7f48e15a60939352efb3ea33f9

SHA512
7ec63b59d8f87a42689f544c2e8e7700da5d8720b37b41216cbd1372c47b1bc3b892020f0dd3a44a05f2a7c07471ff484e4165427f1a9cad0d2393840cd94e5b

Download Submit
C:\QiTASC\intaqt-studio\jbr\legal\java.desktop\ASSEMBLY_EXCEPTION

Filesize
44B

MD5
7caf4cdbb99569deb047c20f1aad47c4

SHA1
24e7497426d27fe3c17774242883ccbed8f54b4d

SHA256
b998cda101e5a1ebcfb5ff9cddd76ed43a2f2169676592d428b7c0d780665f2a

SHA512
a1435e6f1e4e9285476a0e7bc3b4f645bbafb01b41798a2450390e16b18b242531f346373e01d568f6cc052932a3256e491a65e8b94b118069853f2b0c8cd619

Download Submit
C:\QiTASC\intaqt-studio\jbr\legal\java.desktop\LICENSE

Filesize
33B

MD5
16989bab922811e28b64ac30449a5d05

SHA1
51ab20e8c19ee570bf6c496ec7346b7cf17bd04a

SHA256
86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192

SHA512
86571f127a6755a7339a9ed06e458c8dc5898e528de89e369a13c183711831af0646474986bae6573bc5155058d5f38348d6bfdeb3fd9318e98e0bf7916e6608

Download Submit
C:\QiTASC\intaqt-studio\license\intaqt\bcutil-jdk15on-1.70.jar\LICENSE

Filesize
1KB

MD5
732e05c079f9dbb5eb06d0707c77c084

SHA1
069211d6d1fbc7fc520da9e623d09c322d79834d

SHA256
b5079c4abe94ebf712c602d489658755f28eedff71f02b74e6ce58cd4c98b378

SHA512
0be50d5d6bfa2f596ad6104bf79a810ba250565630e6634f0ebaa91d05192409916387ead70be3204035392dee14da0c3066250698646b52332d10e02bd529d9

Download Submit
C:\QiTASC\intaqt-studio\license\intaqt\grpc-netty-shaded-1.58.0.jar\META-INF\LICENSE.txt

Filesize
11KB

MD5
86d3f3a95c324c9479bd8986968f4327

SHA1
7df059597099bb7dcf25d2a9aedfaf4465f72d8d

SHA256
c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4

SHA512
dc6b68d13b8cf959644b935f1192b02c71aa7a5cf653bd43b4480fa89eec8d4d3f16a2278ec8c3b40ab1fdb233b3173a78fd83590d6f739e0c9e8ff56c282557

Download Submit
C:\QiTASC\intaqt-studio\license\intaqt\jakarta.activation-api-2.1.1.jar\META-INF\LICENSE.md

Filesize
1KB

MD5
96bd82adedeb88d912d2ab1eb9f72c27

SHA1
0e515814ae5d04a67e13f1c2e0dd52c7e72cbbaf

SHA256
87eba02f8a415f1a25de6ca3ac6b5c77eb33f33f00ae5a5f9d6ee963147f7956

SHA512
34a22088afc3128e5d8faf3ab9468db5c65f13c446e9c41a8537b15e19d64356750038389047ae01a5ac7a547f109b4758047a62d15b6a23f99497caa1c2a3c3

Download Submit
C:\QiTASC\intaqt-studio\license\intaqt\jakarta.mail-api-2.1.1.jar\META-INF\LICENSE.md

Filesize
34KB

MD5
fa67fc554cdec477b5675890ed7d3827

SHA1
a4bbeb9f364fccab220ea7eafddc08f04dec4831

SHA256
6e1f002892b81cbe0647019b150c8a056efc1add565671a4f8af629b6cd2cc7b

SHA512
749524aca1cd47b01be458139ada80becd876a99cada506d23b22b864cb5beca3c29e9cb762f8e1f58fdcc4bac2241574f192d521c4bd871d891d47f9fcce173

Download Submit
C:\QiTASC\intaqt-studio\license\intaqt\jcodec-streaming-0.2.3.jar\LICENSE

Filesize
1KB

MD5
2454a477c487e3edc50b86f532ba10b9

SHA1
c80edeb9f1642a57dc3bfd2c362e86df410c9da4

SHA256
f7220bf6058d3348c53677ee8b17b74fed438a7a81a9ed67d96d0d87b2ff143d

SHA512
cefb6a1b824b2672203383d8f5bcf58424b4737ececad1cd796913080294a1b413675413f0139cc9e28c4eb01c963d66951af1f9644a2f55bb338860a56c1043

Download Submit
C:\QiTASC\intaqt-studio\license\intaqt\spring-jcl-5.1.8.RELEASE.jar\META-INF\license.txt

Filesize
14KB

MD5
9786db4aa2aea87e383d4a64be6d792e

SHA1
6ae3ec995bbdc2f6749d10127bcc495ff141d9af

SHA256
d4a5f6d96f82e9ed146b732636112b08e7f026966d9cb64220b24a12b316ea4e

SHA512
29fcad187780d975ceb3b228687b44b173da747a1dacbb8f2c29f31440a90f8d01c6695f576b0a2bea9a6cdb861cc534284def427bc819f7640f11302e3ef50f

Download Submit
C:\QiTASC\intaqt-studio\license\intaqt\spring-jcl-5.1.8.RELEASE.jar\META-INF\notice.txt

Filesize
484B

MD5
190dbb909dca0e79e9f50bb53b56f66d

SHA1
3b15c7db10ecfe9ecf2d5d4351f228ff71cf0b4f

SHA256
4968029318c9e6c3ae6efac13b951672fbb329dfb2cbd65fd222e1441d191efd

SHA512
ba8afe234a04680cf2aa002f325e318c28c23975b00c75a0f0aef64e2506b08f3ddd4640ff92839b24e6b4196961910a2a0e72702283eaefaf02337e3bf2690c

Download Submit
C:\QiTASC\intaqt-studio\manifest

Filesize
80KB

MD5
bfce1c77958c0cef4351bb0836e09861

SHA1
b76e3ecefb05cd07a8550078adaed6598f9159e7

SHA256
6387e0bf300b1ada96aa72497d636aaa4cb089f99690784239d0b28d26de322b

SHA512
86f2c5b4dcb783362a52798df6d57065121b0c243322d62151f4b3fcecc0561a9d3b36150c989acc7db42f8213a952c4a70564699a840ee935c8a314353b964a

Download Submit
C:\QiTASC\intaqt-studio\plugins\intact-configuration-plugin\lib\ST4-4.3.3.jar

Filesize
245KB

MD5
73428d3ad4ff9161ccc2d7ea1ae923a8

SHA1
2a894d43f827164bcf4dc0ef54fa8c0b9c51d50c

SHA256
64503dd855b48edfe0e597494acfb4a481f26a8e254608ad7506d991674f5bce

SHA512
5cdd48d61df3ad0ae66207784241243d7e46eacebdc98d1f1464a180b131816e078317e552c82a3e7021047c94faf9e3afa0a4a2de3ca4055c6d56426ff21f32

Download Submit
C:\QiTASC\intaqt-studio\plugins\intact-configuration-plugin\lib\antlr-runtime-3.5.3.jar

Filesize
169KB

MD5
0b5c0ce1bb9c8190e2e60401fc439daa

SHA1
9011fb189c5ed6d99e5f3322514848d1ec1e1416

SHA256
68bf9f5a33dfcb34033495c587e6236bef4e37aa6612919f5b1e843b90669fb9

SHA512
7714970915d7187d7abb32610b3764305e67798d8289f8a59461ebb3bf7f26a09b933279de1cf95c14bbb60f213bf3f1af6aa8f20e75b26768223883a6883aaa

Download Submit
C:\QiTASC\intaqt-studio\plugins\intact-configuration-plugin\lib\antlr4-runtime-4.10.1.jar

Filesize
314KB

MD5
b694fc738bf1a7e8f7eea2638ef2cc7f

SHA1
10839f875928f59c622d675091d51a43ea0dc5f7

SHA256
da66be0c98acfb29bc708300d05f1a3269c40f9984a4cb9251cf2ba1898d1334

SHA512
901c199e15db7e8d92ff62d2255e44e11d29ce350ad20e32e320bdd29d08bf372a0c1bd912558461a06157d36ad4cddc5f89cb890bc511f8365099042b35bd4d

Download Submit
C:\QiTASC\intaqt-studio\plugins\intact-configuration-plugin\lib\javax.json-1.0.4.jar

Filesize
83KB

MD5
569870f975deeeb6691fcb9bc02a9555

SHA1
3178f73569fd7a1e5ffc464e680f7a8cc784b85a

SHA256
0e1dec40a1ede965941251eda968aeee052cc4f50378bc316cc48e8159bdbeb4

SHA512
5183ffeefd4bc17b63dbcaad08b43ad2b7b49dc18479d725b10693a437425b099b6d73cd19d281222686bc03c75e412c4a189084d95337dfb2c6316485d30628

Download Submit
C:\QiTASC\intaqt-studio\plugins\intact-configuration-plugin\lib\org.abego.treelayout.core-1.0.3.jar

Filesize
26KB

MD5
9c8cefab6360a672565370d5311f0f3c

SHA1
457216e8e6578099ae63667bb1e4439235892028

SHA256
fa5e31395c39c2e7d46aca0f81f72060931607b2fa41bd36038eb2cb6fb93326

SHA512
d12d44cd9dde470035ce72785f1a8af741ca0055b0da174064931d830bd0efdc887f1b3fa6abe452498fbb48ea820b0a842ba55ab6a52a4a1cc914330e655b1d

Download Submit
C:\QiTASC\intaqt-studio\plugins\intact-studio-plugin\lib\icu4j-69.1.jar

Filesize
12.7MB

MD5
1be8018240774c697a812df60e23aed4

SHA1
ff666ac55986650893aacb9e2e0003538e9799c0

SHA256
98286f3d538bc7bde87d70bf2cac3acc9ed7b7fe941db5e94a8c3fa13516f963

SHA512
2d230f98d1820a0b1bb383955b0e8017c19d0678a6477ecc5504954f45f3c330e2bf785c7cf9b045321581de05d088be83c7e87207dc4471be3c1c07a9756465

Download Submit
C:\QiTASC\intaqt-studio\plugins\legacy-intact-languages-plugin\lib\checker-qual-3.33.0.jar

Filesize
218KB

MD5
fc9418b779d9d57dcd52197006cbdb9b

SHA1
de2b60b62da487644fc11f734e73c8b0b431238f

SHA256
e316255bbfcd9fe50d165314b85abb2b33cb2a66a93c491db648e498a82c2de1

SHA512
049c446677b7b386f3fb501bf65e032bdf2b1b29a3f545848035fff2b683cd275380cf302e30eea641af7f0801f779bcda3d82a71d928e4176f564f796640a64

Download Submit
C:\QiTASC\intaqt-studio\plugins\legacy-intact-languages-plugin\lib\failureaccess-1.0.1.jar

Filesize
4KB

MD5
091883993ef5bfa91da01dcc8fc52236

SHA1
1dcf1de382a0bf95a3d8b0849546c88bac1292c9

SHA256
a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26

SHA512
f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae

Download Submit
C:\QiTASC\intaqt-studio\plugins\legacy-intact-languages-plugin\lib\guava-32.1.2-jre.jar

Filesize
2.9MB

MD5
5fe031b3b35ed56182478811a931d617

SHA1
5e64ec7e056456bef3a4bc4c6fdaef71e8ab6318

SHA256
bc65dea7cfd9e4dacf8419d8af0e741655857d27885bb35d943d7187fc3a8fce

SHA512
d683751034688863dc82315a75620abbeeca525cc592d5227b136c29902a0d035f306c6bfaf87d00d95bd1bd967953b00a932286ce09cfba1a0fb35efd852cd4

Download Submit
C:\QiTASC\intaqt-studio\plugins\legacy-intact-languages-plugin\lib\instrumented-error-reporter-R2024.09.2.jar

Filesize
12KB

MD5
7ea89a6eb48b2e4c1963fa12c0b4ff5d

SHA1
c05b3fdf19ea57aa3d75b616d89ccbad535b7d3f

SHA256
48be5ffd99c29b8ef3aa17725057aacaf540b95cc418008f45653e20945802b0

SHA512
6bf84f3bc3dd47ff20eeac0da05a9901ca4ce69d2e79342667fea06bbba99bc75437e10fc89b2cc4faf4fbb0881e1a39c6d33b41673e1165ba35c64346b32a26

Download Submit
C:\QiTASC\intaqt-studio\plugins\legacy-intact-languages-plugin\lib\jsr305-3.0.2.jar

Filesize
19KB

MD5
dd83accb899363c32b07d7a1b2e4ce40

SHA1
25ea2e8b0c338a877313bd4672d3fe056ea78f0d

SHA256
766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7

SHA512
bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804

Download Submit
C:\QiTASC\intaqt-studio\plugins\legacy-intact-languages-plugin\lib\kotlin-logging-1.5.3.jar

Filesize
24KB

MD5
6eeb9fe727a5777eba1b1e87776db7c0

SHA1
25602214def0eb0524e1aeabdfad0a543aac8df3

SHA256
caba9f1d5e1fa28c2df2bbed4a2457176553d0d68db99ac312fb90feff4c5d7b

SHA512
8e7a90c07a45172a8c1bc218c65e1e91c64836e2def5e979c67413123abff4a77b330e0d30b93de79f27fc1ad8f39626f0379a98e7073a4797645f7d016df1f4

Download Submit
C:\QiTASC\intaqt-studio\plugins\legacy-intact-languages-plugin\lib\listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar

Filesize
2KB

MD5
d094c22570d65e132c19cea5d352e381

SHA1
b421526c5f297295adef1c886e5246c39d4ac629

SHA256
b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99

SHA512
c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f

Download Submit
C:\QiTASC\intaqt-studio\plugins\sqedule-plugin\lib\jackson-annotations-2.15.2.jar

Filesize
73KB

MD5
71dabcaac955a8bd17b5bba6580aac5b

SHA1
4724a65ac8e8d156a24898d50fd5dbd3642870b8

SHA256
04e21f94dcfee4b078fa5a5f53047b785aaba69d19de392f616e7a7fe5d3882f

SHA512
c9ffb4cf3e409921bca1fa6126ca8746c611042ac3fcf0e4f991d23d12b20ef0946ef1421d991ae8ed86012059df4e08fb776d96db6d13147c2ec85e22254537

Download Submit
C:\QiTASC\intaqt-studio\plugins\sqedule-plugin\lib\jackson-core-2.15.2.jar

Filesize
536KB

MD5
e51fdee85b48e6637ad9e85ee76b58df

SHA1
a6fe1836469a69b3ff66037c324d75fc66ef137c

SHA256
303c99e82b1faa91a0bae5d8fbeb56f7e2adf9b526a900dd723bf140d62bd4b4

SHA512
a8a3ddf5c8a732fc3810f9c113d88fd59bf613d15dbf9d3e24dd196b2b8c2195f4088375e3d03906f2629e62983fef3267b5478abd5ab1df733ec58cd00efae6

Download Submit
C:\QiTASC\intaqt-studio\plugins\sqedule-plugin\lib\jackson-databind-2.15.2.jar

Filesize
1.5MB

MD5
20ac0d0526a456274409fa852eb74087

SHA1
9353b021f10c307c00328f52090de2bdb4b6ff9c

SHA256
0eb2fdad6e40ab8832a78c9b22f58196dd970594e8d3d5a26ead87847c4f3a96

SHA512
edf622f3d2bb2cdf308875e467f28eafdd581c6ad47992a2b49a2c803b597c7fe4330c8f887687599c8a6a529d8b11054f8b354b7ddddd2bf904ef347d4f1cd2

Download Submit
C:\QiTASC\intaqt-studio\plugins\verification-ruledsl-plugin\lib\antlr4-4.10.1.jar

Filesize
2.5MB

MD5
240cd192cbc2723b6190adde39840ad1

SHA1
fe5750f4c8fa1dfc3fa2c0722f0fb9e363b0c542

SHA256
6bef3dad65a1bd55533981d7ef694d27dcfb4e7a70f560dd026c8895b35a7468

SHA512
8bb9100579ea64d807238ba70271b364ddeba3036e5d6c12e58cb4b25beb0b753ddf3d6ef52e89bfa16222af089c9cf359c26653e004a95e3ab9cab6893537bd

Download Submit
C:\QiTASC\intaqt-studio\plugins\verification-ruledsl-plugin\lib\instrumented-antlr4-intellij-adapter-R2024.09.2.jar

Filesize
21KB

MD5
de8d75e6d90a0f5138c9f239db6168a2

SHA1
319c04320be6095950d0b1dbbc5d11a65f8521ef

SHA256
d43df819b0ac9be711068b8dfb2707118ff4bcfe7979dc6711ce3fe97761c357

SHA512
b3bef11abcaec9982766273c61fe12595e89f9270925ac576be707673c9d26761f843145af07dc8d61d07298b8c7981f9b7f5aa541dd7bc516e9ded7175563b4

Download Submit
C:\Users\Admin\.qitasc-installer

Filesize
34B

MD5
17c98c6eec35c4462440578981fbc4f9

SHA1
cbd7f9f7fc7a591f03868a2a16384bfbba3c0ac8

SHA256
958d0c427ac396becf36406da82e8724484f875d1339e64e5173e914e802b980

SHA512
6b35bfc2baa8297778f619d333ca1b3e834addf42565d4621e77e9320ee2982669c60d68923924ddf93f5853072ac8bb739770f6ba83d6a1c801cd995a708264

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3e796b1bef8f981f1f475cd7c66154e3

SHA1
4f22eaf88d181a80e112a16c2b512c7584b4ad0a

SHA256
2b9e1ff5492e72f96b03abc3880982a035f63a8d5044346eb66966322c354b51

SHA512
063b38e72942702342a1c62c6d9bdb092dd85c50b9a371bbc04d71d02f21f03d6a6ca8c1e0ffcb67c2a54a9882a53df0eff7348931ea0ffe9c918389861a0aa6

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabD1B3.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarD1C5.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit
\QiTASC\installer\jdk\bin\java.exe

Filesize
201KB

MD5
8dfb233d0717f1605a9340a832b57907

SHA1
a2490a6b6765c34e11fde37f9cfea96706fd0585

SHA256
6a0633f3a704cdb60aa9ddd1938c1ba5d6780574d91925bfe44130f6354b0039

SHA512
582fc8f8b9d498fd708537c1b73f3786ab1634d7b0682805c3a4d7003fba249e776c69890f0cffa860593ea412f67fc5dd326204957ea57c61e5735c8bd7a880

Download Submit
\QiTASC\installer\jdk\jre\bin\awt.dll

Filesize
1.4MB

MD5
ed4b989e2760c4e73b2b0fe983a3a86a

SHA1
678b2457fbc8713b6d4c98c3ad0d9627278614ad

SHA256
03cfce6b30acb7d0eea33ce8aeefb1b83fe77be11f9224c165412d21b12c9ac2

SHA512
5c10b0acb1bbbafe6d17d14044378bb6aff10c072958e9846a8be01e8b0af27a7e45f5ed415858d0547e56a9f2131579b8df73e5ace3a8af433901f1cd6be2d4

Download Submit
\QiTASC\installer\jdk\jre\bin\glass.dll

Filesize
259KB

MD5
12e8d70b8c79849336db7e5bc27e291f

SHA1
181cbbaf4e0afaaf2b0e067666f0319fbc65d300

SHA256
2cd26de96c47627cb4153b863d012c888b8b3f8bdd32b853f5325ce8f0740910

SHA512
3f91abc68dbf3de68ae6471982a9b44655d60766bba216923289e0c783b2bfb21829f23a5211415e329b75d9e6437f9693436904c18c0364601a0ef176d09091

Download Submit
\QiTASC\installer\jdk\jre\bin\java.dll

Filesize
155KB

MD5
3819798fd22711fbf49c0f17070c0c9b

SHA1
2024c5b4fbba5e610db71d4290ae8ef4041dff59

SHA256
e7438f8271b91c019a4e9db5358648058a85eff0f8df5b80a7350e22ef8588db

SHA512
e7a486089749e5f0d321fefd6b83392ca887268cc8ac5576bc8be2f439b58f721fe4edb21b15a6786483b914b229288f48ff98d953dd0104c8f9ba1b6b1c9dc6

Download Submit
\QiTASC\installer\jdk\jre\bin\javafx_font.dll

Filesize
67KB

MD5
f6ca10af761ec2404e06950cfc25094e

SHA1
ecbbf893cf7cceeb02788d0342bd52a6b669b6bd

SHA256
c540466709cf80bbfe1a3a42a93bbaaa4fdaaab0527f552d0fe53cc7ab4004e0

SHA512
578a3dfe2a5058c47bc2ca9a232f98ad6844790686dbe0766a8c690d92481ee4b663585c655c0cdda914a2f101fb653c7a4743ab74746fa5eef94870ff4bb2cb

Download Submit
\QiTASC\installer\jdk\jre\bin\msvcp120.dll

Filesize
644KB

MD5
46060c35f697281bc5e7337aee3722b1

SHA1
d0164c041707f297a73abb9ea854111953e99cf1

SHA256
2abf0aab5a3c5ae9424b64e9d19d9d6d4aebc67814d7e92e4927b9798fef2848

SHA512
2cf2ed4d45c79a6e6cebfa3d332710a97f5cf0251dc194eec8c54ea0cb85762fd19822610021ccd6a6904e80afae1590a83af1fa45152f28ca56d862a3473f0a

Download Submit
\QiTASC\installer\jdk\jre\bin\prism_d3d.dll

Filesize
127KB

MD5
7bcd34196a3a98dc7edb12ca648e5c71

SHA1
97ec1377db7afee6244c9bcc63515dc461a00900

SHA256
9ffc4f568f21f3607fe897ce3c8cc68a32feac5b5dd0f3f9e77f6c82a1544917

SHA512
8477553c715c9a2ff0114867c7a832572807b25c742595f05f58722d1ca9cdef769cdd145fb3af67b7fc54c39a829714ba0172649f21551f7a5adfad3c200f01

Download Submit
\QiTASC\installer\jdk\jre\bin\prism_sw.dll

Filesize
95KB

MD5
62c6ab5f449f8c159d408367a771034d

SHA1
d09fbcbdfac43a1a8fee2c48d4a4c06e77a0b297

SHA256
751afd14b842143a5de2c9245e389544ca5e7a8d2623c0cd52f017b715541171

SHA512
c95c8fb7be1652c81e4124fbfaa6d96cf2210c7ccb5e1be0092c28d286c123b5a3e372eba0e1cabc2372dbee2c640b2941f5be040981d9782078c88f05caaa69

Download Submit
\QiTASC\installer\jdk\jre\bin\server\jvm.dll

Filesize
8.4MB

MD5
e1fcb8fe3edb754a19cb018f282a32fe

SHA1
f7582097c125969cc334a98d78ae823527d3d43f

SHA256
dedaf9fa71b4745dc4dc9e2bb1fb9d82841a95a4198796329c09710ecbbf04d3

SHA512
689b35b289becd17cad6f9917d5429b3e4d4602a10c4ced1ac0187c6ea60458e86b0c466b63488b3c6772bb87719fd62d69d4c60902c600c26ca55662df80bbc

Download Submit
\QiTASC\installer\jdk\jre\bin\sunec.dll

Filesize
131KB

MD5
ce047a342b1d391cce1c8b6061a42cd3

SHA1
18edb7f42b5cc01501b7d8b3ecf5879715286ab2

SHA256
c2cc42a75999fe787f31eeb0cc832b341001aa8a6cb742f22741026cef074a37

SHA512
43e7ed72e0595df0fba17dd786e4e2005eac790aa761cb78c7a5485751b2381e5b6c0e18a48784cbe43377d242fdd33ee4b2131b17b59c9d7cc5c3f0d471a5d1

Download Submit
\QiTASC\installer\jdk\jre\bin\verify.dll

Filesize
48KB

MD5
ec7a2983aaf19c8b977b546197124574

SHA1
f992a4e649041486eb5ba9dab70c87a187530969

SHA256
57bd4f1986ff6f2df9f60ffebdb3c9808795d11965d08fcd146b17145aeba3df

SHA512
175b8c0b952d56ae3fa656a12073e8b8237ece8c52e8bc157d2674ac1b7829edf80791bc8b43a88c23a0ffae3b669f6e64fc8bcec24a164331bce91090eaa41e

Download Submit
\QiTASC\installer\jdk\jre\bin\zip.dll

Filesize
76KB

MD5
be110a615e581d22242738ce0390baa6

SHA1
1b280c7c512b9e42aa3ad8f304e61ec34a04ca01

SHA256
e6cadf74e64ed9ba7436c800719e02b6733df1bfd939989ca9f9eef63371fbff

SHA512
50183af08d816160bdcab2a5454e23a6c8b1349e8b459c16546d04db1bd2bf3185185afb38143895832f36d7f975659ca2b2f8377229327fc70e074cafa69c0f

Download Submit
\Users\Admin\AppData\Local\Temp\proxy_vole1168951429631246754.dll

Filesize
39KB

MD5
376e4cfaa0cb5b487b2b5a5426bea58a

SHA1
935f228e0f92018b31657f97391d84d147ab929a

SHA256
2352605e14708002c4e2943246bc2e0ff77afa1eff408c05e1d248b0ba6f480c

SHA512
12d6127cc68d009410610f7ddf0bd4d830f2a911ea5f856d160be468cffe7ebf000f77259b8628dc3d0063f6fe2c6bf35de7266a4518ba00e5b0198bcce28f5c

Download Submit
memory/2084-19-0x0000000002520000-0x0000000002790000-memory.dmp

Filesize
2.4MB

Download
memory/2084-18-0x0000000000450000-0x0000000000451000-memory.dmp

Filesize
4KB

Download
memory/2084-9-0x0000000002520000-0x0000000002790000-memory.dmp

Filesize
2.4MB

Download
memory/2944-1678-0x0000000002980000-0x0000000002BF0000-memory.dmp

Filesize
2.4MB

Download
memory/2944-2053-0x0000000000480000-0x000000000048A000-memory.dmp

Filesize
40KB

Download
memory/2944-2054-0x0000000002C50000-0x0000000002C60000-memory.dmp

Filesize
64KB

Download
memory/2944-2055-0x0000000002C60000-0x0000000002C70000-memory.dmp

Filesize
64KB

Download
memory/2944-2052-0x0000000000480000-0x000000000048A000-memory.dmp

Filesize
40KB

Download
memory/2944-1626-0x0000000002980000-0x0000000002BF0000-memory.dmp

Filesize
2.4MB

Download
memory/2944-2051-0x0000000000480000-0x000000000048A000-memory.dmp

Filesize
40KB

Download
memory/2944-2049-0x0000000002C40000-0x0000000002C50000-memory.dmp

Filesize
64KB

Download
memory/2944-2048-0x0000000002C30000-0x0000000002C40000-memory.dmp

Filesize
64KB

Download
memory/2944-2046-0x0000000002C20000-0x0000000002C30000-memory.dmp

Filesize
64KB

Download
memory/2944-1638-0x0000000000440000-0x0000000000441000-memory.dmp

Filesize
4KB

Download
memory/2944-1998-0x0000000002C10000-0x0000000002C20000-memory.dmp

Filesize
64KB

Download
memory/2944-1916-0x0000000002C00000-0x0000000002C10000-memory.dmp

Filesize
64KB

Download
memory/2944-1659-0x0000000000440000-0x0000000000441000-memory.dmp

Filesize
4KB

Download
memory/2944-1663-0x0000000000440000-0x0000000000441000-memory.dmp

Filesize
4KB

Download
memory/2944-1665-0x0000000000440000-0x0000000000441000-memory.dmp

Filesize
4KB

Download
memory/2944-1670-0x0000000002BF0000-0x0000000002C00000-memory.dmp

Filesize
64KB

Download
memory/2944-1672-0x0000000002C00000-0x0000000002C10000-memory.dmp

Filesize
64KB

Download
memory/2944-1674-0x0000000002C10000-0x0000000002C20000-memory.dmp

Filesize
64KB

Download
memory/2944-1818-0x0000000002BF0000-0x0000000002C00000-memory.dmp

Filesize
64KB

Download
memory/2944-1679-0x0000000002C20000-0x0000000002C30000-memory.dmp

Filesize
64KB

Download
memory/2944-1684-0x0000000000440000-0x0000000000441000-memory.dmp

Filesize
4KB

Download
memory/2944-1680-0x0000000002C30000-0x0000000002C40000-memory.dmp

Filesize
64KB

Download
memory/2944-1771-0x0000000002C60000-0x0000000002C70000-memory.dmp

Filesize
64KB

Download
memory/2944-1748-0x0000000000440000-0x0000000000441000-memory.dmp

Filesize
4KB

Download
memory/2944-1746-0x0000000000440000-0x0000000000441000-memory.dmp

Filesize
4KB

Download
memory/2944-1745-0x0000000002C50000-0x0000000002C60000-memory.dmp

Filesize
64KB

Download
memory/2944-1719-0x0000000002C40000-0x0000000002C50000-memory.dmp

Filesize
64KB

Download
memory/2944-1728-0x0000000000440000-0x0000000000441000-memory.dmp

Filesize
4KB

Download
memory/2944-1733-0x0000000000440000-0x0000000000441000-memory.dmp

Filesize
4KB

Download
memory/2944-1739-0x0000000000480000-0x000000000048A000-memory.dmp

Filesize
40KB

Download
memory/2944-1740-0x0000000000480000-0x000000000048A000-memory.dmp

Filesize
40KB

Download
memory/2944-1741-0x0000000000480000-0x000000000048A000-memory.dmp

Filesize
40KB

Download
memory/2944-1742-0x0000000000480000-0x000000000048A000-memory.dmp

Filesize
40KB

Download