asyncrat | f368400a4f67b6f2390343181e5d1945967c6cd25088798984e6e4654a1b928c

Resubmissions

04/01/2025, 12:14

250104-pej3ls1mbk 10

04/01/2025, 12:10

250104-pcc7aa1lcr 10

Analysis

max time kernel
150s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
04/01/2025, 12:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

cum.exe
Size

63KB
MD5

6ae8830520e0bf079fc97aa207673ac6
SHA1

8eab31bfba85b5847573bda4257f79c607f0c297
SHA256

f368400a4f67b6f2390343181e5d1945967c6cd25088798984e6e4654a1b928c
SHA512

cb8e918f34780d91673fdcc6bf3a70d2a1bf82bafb62f59ab6fc0f98b5ee09a8ed404d99fee25a4d5f55f9b7c4a5dc280d41725c596e6ddb8fae158542f14596
SSDEEP

1536:+62ZBUFWbPZEYUbeM9odcrXuEdpqKmY7:+62CWbP6YUbe1cr5Gz

Score

10^/10

asyncrat default discovery phishing ransomware rat

Malware Config

Extracted

Family

asyncrat

Botnet

Default

127.0.0.1:1337

127.0.0.1:26550

147.185.221.24:1337

147.185.221.24:26550

Attributes

delay
3
install
true
install_file
hawktuah.exe
install_folder
%AppData%

aes.plain

Signatures

AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
rat asyncrat
Asyncrat family
asyncrat

Async RAT payload 1 IoCs

rat

resource	yara_rule
behavioral2/files/0x0008000000023ca4-11.dat	family_asyncrat

Renames multiple (2009) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware
A potential corporate email address has been identified in the URL: [email protected]
phishing

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000\Control Panel\International\Geo\Nation	cum.exe

Executes dropped EXE 1 IoCs

pid	Process
3204	hawktuah.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\MapsAppList.targetsize-16_altform-unplated_contrast-white.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Home\RTL\contrast-black\WideTile.scale-125.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.1907.2471.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\ScreenSketchStoreLogo.scale-125_contrast-white.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\GenericMailMediumTile.scale-200.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarBadge.scale-400.png	hawktuah.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\Common AppData\Microsoft\OFFICE\SharePointPortalSite.ico	hawktuah.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\ExchangeSmallTile.scale-400.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxMailAppList.targetsize-60_altform-unplated.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarAppList.scale-400.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-white\Logo.scale-100_contrast-white.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsCamera_2018.826.98.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraMedTile.contrast-black_scale-125.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Work\LTR\contrast-white\MedTile.scale-125.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Images\Stickers\Sticker_Ear.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\IC_WelcomeBanner.scale-200.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\GenericMailLargeTile.scale-400.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1906.1972.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderSplashScreen.contrast-black_scale-100.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.XboxApp_48.49.31001.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubAppList.targetsize-40.png	hawktuah.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\themes\dark\rhp_world_icon_hover.png	hawktuah.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\AccessRuntime_eula.txt	hawktuah.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected]	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\contrast-black\BadgeLogo.scale-100_contrast-black.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2018.826.98.0_x64__8wekyb3d8bbwe\Assets\Icons\icon_play_prs.png	hawktuah.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\circle_2x.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1906.1972.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderAppList.contrast-black_targetsize-80.png	hawktuah.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_gloss-wave_35_f6a828_500x100.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\AppTiles\contrast-black\MapsSplashScreen.scale-125.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\1949_24x24x32.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1906.1972.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderAppList.contrast-black_targetsize-256.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxMailSmallTile.scale-150.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxA-Google.scale-200.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-72_altform-unplated_contrast-black.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\TrafficHub\contrast-black\LargeTile.scale-200.png	hawktuah.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.scale-100.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\LargeTile.scale-125.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-256_altform-unplated_contrast-white.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\EmptyCalendarSearch-Dark.scale-200.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxMailAppList.targetsize-20_altform-lightunplated.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\GenericMailBadge.scale-150.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\OutlookMailLargeTile.scale-400.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-black\AppList.scale-100_contrast-black.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_x64__8wekyb3d8bbwe\Assets\Background_RoomTracing_04.jpg	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\AppCS\WebviewOffline.html	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1906.2182.0_x64__8wekyb3d8bbwe\Assets\AlarmsBadge.contrast-white_scale-200.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxA-Advanced-Light.scale-250.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-black\LargeLogo.scale-200_contrast-black.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppPackageAppList.targetsize-256_contrast-white.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_x64__8wekyb3d8bbwe\Assets\contrast-white\PeopleAppList.targetsize-40_altform-lightunplated.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.XboxIdentityProvider_12.50.6001.0_neutral_~_8wekyb3d8bbwe\AppxMetadata\AppxBundleManifest.xml	hawktuah.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\pdf-ownership-no-text_2x.gif	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\hand.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\Ratings\Yelp4.scale-200.png	hawktuah.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL119.XML	hawktuah.exe
File created	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsSoundRecorder_10.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\VoiceRecorderAppList.contrast-white_scale-125.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-72_altform-unplated_contrast-white.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\GenericMailMediumTile.scale-200.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteNewNoteWideTile.scale-150.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarWideTile.scale-125.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.XboxApp_48.49.31001.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubSplashScreen.scale-100_contrast-high.png	hawktuah.exe
File opened for modification	C:\Program Files\7-Zip\History.txt	hawktuah.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\CT_ROOTS.XML	hawktuah.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogoSmall.contrast-white_scale-80.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Images\Stickers\Thumbnails\Sticker_Icon_Nose.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\69.png	hawktuah.exe
File created	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-16_altform-unplated_contrast-black.png	hawktuah.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Delays execution with timeout.exe 1 IoCs

evasion

pid	Process
116	timeout.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Scheduled Task/Job: Scheduled Task 1 TTPs 1 IoCs

Schtasks is often used by malware for persistence or to perform post-infection execution.

persistence execution

Scheduled Task

T1053.005

pid	Process
4504	schtasks.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
2816	cum.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe
3204	hawktuah.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 19 IoCs

pid	Process
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: SeDebugPrivilege	2816	cum.exe
Token: SeDebugPrivilege	3204	hawktuah.exe
Token: 33	1912	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1912	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2816 wrote to memory of 3216	2816	cum.exe	85
PID 2816 wrote to memory of 3216	2816	cum.exe	85
PID 2816 wrote to memory of 4592	2816	cum.exe	87
PID 2816 wrote to memory of 4592	2816	cum.exe	87
PID 4592 wrote to memory of 116	4592	cmd.exe	90
PID 4592 wrote to memory of 116	4592	cmd.exe	90
PID 3216 wrote to memory of 4504	3216	cmd.exe	89
PID 3216 wrote to memory of 4504	3216	cmd.exe	89
PID 4592 wrote to memory of 3204	4592	cmd.exe	91
PID 4592 wrote to memory of 3204	4592	cmd.exe	91
PID 2044 wrote to memory of 3876	2044	msedge.exe	111
PID 2044 wrote to memory of 3876	2044	msedge.exe	111
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 3316	2044	msedge.exe	112
PID 2044 wrote to memory of 1272	2044	msedge.exe	113
PID 2044 wrote to memory of 1272	2044	msedge.exe	113
PID 2044 wrote to memory of 3216	2044	msedge.exe	114
PID 2044 wrote to memory of 3216	2044	msedge.exe	114
PID 2044 wrote to memory of 3216	2044	msedge.exe	114
PID 2044 wrote to memory of 3216	2044	msedge.exe	114
PID 2044 wrote to memory of 3216	2044	msedge.exe	114
PID 2044 wrote to memory of 3216	2044	msedge.exe	114
PID 2044 wrote to memory of 3216	2044	msedge.exe	114
PID 2044 wrote to memory of 3216	2044	msedge.exe	114
PID 2044 wrote to memory of 3216	2044	msedge.exe	114
PID 2044 wrote to memory of 3216	2044	msedge.exe	114

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\cum.exe
"C:\Users\Admin\AppData\Local\Temp\cum.exe"
1⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2816
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c schtasks /create /f /sc onlogon /rl highest /tn "hawktuah" /tr '"C:\Users\Admin\AppData\Roaming\hawktuah.exe"' & exit
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3216
- - C:\Windows\system32\schtasks.exe
    schtasks /create /f /sc onlogon /rl highest /tn "hawktuah" /tr '"C:\Users\Admin\AppData\Roaming\hawktuah.exe"'
    3⤵
    - Scheduled Task/Job: Scheduled Task
    PID:4504
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\Temp\tmpA856.tmp.bat""
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4592
- - C:\Windows\system32\timeout.exe
    timeout 3
    3⤵
    - Delays execution with timeout.exe
    PID:116
- - C:\Users\Admin\AppData\Roaming\hawktuah.exe
    "C:\Users\Admin\AppData\Roaming\hawktuah.exe"
    3⤵
    - Executes dropped EXE
    - Drops file in Program Files directory
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:3204

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default
1⤵
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffead7b46f8,0x7ffead7b4708,0x7ffead7b4718
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1992,15828728198350050648,8430823360215162838,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2008 /prefetch:2
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1992,15828728198350050648,8430823360215162838,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 /prefetch:3
  2⤵
  PID:1272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1992,15828728198350050648,8430823360215162838,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2624 /prefetch:8
  2⤵
  PID:3216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15828728198350050648,8430823360215162838,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:3656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15828728198350050648,8430823360215162838,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15828728198350050648,8430823360215162838,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5112 /prefetch:1
  2⤵
  PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15828728198350050648,8430823360215162838,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5040 /prefetch:1
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1992,15828728198350050648,8430823360215162838,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1992,15828728198350050648,8430823360215162838,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15828728198350050648,8430823360215162838,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4708 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15828728198350050648,8430823360215162838,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5328 /prefetch:1
  2⤵
  PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15828728198350050648,8430823360215162838,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5528 /prefetch:1
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15828728198350050648,8430823360215162838,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5116 /prefetch:1
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15828728198350050648,8430823360215162838,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5548 /prefetch:1
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15828728198350050648,8430823360215162838,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3900 /prefetch:1
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15828728198350050648,8430823360215162838,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5544 /prefetch:1
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15828728198350050648,8430823360215162838,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5844 /prefetch:1
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15828728198350050648,8430823360215162838,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5824 /prefetch:1
  2⤵
  PID:800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15828728198350050648,8430823360215162838,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5448 /prefetch:1
  2⤵
  PID:1408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15828728198350050648,8430823360215162838,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5676 /prefetch:1
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15828728198350050648,8430823360215162838,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1320 /prefetch:1
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15828728198350050648,8430823360215162838,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6012 /prefetch:1
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15828728198350050648,8430823360215162838,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6068 /prefetch:1
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1992,15828728198350050648,8430823360215162838,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,15828728198350050648,8430823360215162838,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6052 /prefetch:1
  2⤵
  PID:5052

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4520

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4008

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x344 0x340
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1912

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Persistence

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Privilege Escalation

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\icudtl.dat

Filesize
16B

MD5
e5b89fd7d476e5e1dd0e5cbf4651840e

SHA1
42df3481c68ea22043338f8c85e405d0ca62a61b

SHA256
883d7d22019a092d522d18782683edf229daa1ef6fe01469b3098bedf1f7d841

SHA512
36c6d6ac8067aea03ed67d8f5c7bb61bbeba5b71a2b807aa7cef5530b748aea429a28af9f00f21d4845d2e6b12f589e4d17a5634a2046be75413dff705fb4dba

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png

Filesize
50KB

MD5
9e165e08e5eda157c9faf84808eb630a

SHA1
5058daba5b23c17aa8eecb50836c416e9e0ca4db

SHA256
7815f6f406a86f6a325a99e39f30fd5be947b53fff0abdbb047bee981813d1d0

SHA512
78be4db0fa0beb7de675817da513b3db459903b3285b38a1cd4bb68acba4997d6c01bef7a589bfa901088e1d16ea0ef6f1ff4dfd006377da26b4886de74a0e6f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions.png

Filesize
1KB

MD5
5616aaf7e61bfd7f156ac13d4a26748f

SHA1
55bd1275a866d46dc65eea0aed20e94d2213898b

SHA256
38f1da0426be4511b18d1e62bc2e0c15b5e83d6871f1c312240e0523c92c9928

SHA512
e395f262820f845207063c7ef72363ae30a676c198e3d4b48c0a35b54dd36e135b94406f49090ceaf8d8265e25d874b1e07c80cad61f4f56c190f0385b2fab55

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions2x.png

Filesize
3KB

MD5
ea8b151caaa2302c41f76986f127759e

SHA1
3a43b375dac75d3f8b601460ad2703510220fe4a

SHA256
2e791c5c4a7897a97d19b56cb56073414867b23e56c311b1d89d2d1963a291fc

SHA512
bf909617845ceae1b3a8f175e76a46e468499d017b4b7f1f8a41a513517bfbfc7e54b547d195572dbc98b93757eddbeffc1421b13867e1d9788b0e0132b5ba40

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png

Filesize
688B

MD5
850e46f461a65585e4e0c41b7d298648

SHA1
982b26019fd94a4a82395652e6985fab9115045d

SHA256
436687fbe131bfaff505775c0d265b4fb13f3795c0eceed3ea1e0e48cfc4f342

SHA512
83bac70af3ee0df1a378a830da713f873d38d9125f5b875f4e5b8552a862a0590a06b126e94a81d99ba951ab83895393efcfc30c1d8bc3d66cb2886e9dbfe2a7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png

Filesize
1KB

MD5
dd1c2543ba88aef49a0f5aec478f52a6

SHA1
d180df15e3fa30b80f96db48493c404b081eb8b6

SHA256
a724927928c238c12368ce4a7dfde4dd1b0e51687a7849f44b88c38025859a50

SHA512
affe36c4ef1d05134f560d59cec728498e2f3d600a231c86bb28be54e5f9d8f5b681e724e8c9a0ac0725495c61525f296d11f2f64b355711835259d443b80b5b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png

Filesize
448B

MD5
341fea2e3852adf3a49c080890a7909b

SHA1
8a05c0c68fe1ca98ba2031ae2ada4f5adef80c14

SHA256
0537e3d1aadac6e01de5bc5997cbb0afcd0e9c1af4b31938c14ce2e840fa5754

SHA512
4a65b42702dd89239cbc45026de0c99d274d0308f993f23d14a42908afd52459866f735bc4876887117979aa7816da3a7492239ef716213577cd43b312777a11

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png

Filesize
624B

MD5
0cfe93881f19661c4f7224d3e9df1a66

SHA1
c56dad53a8a0caec4e25c4a231a263b56aa88456

SHA256
cd29a70d021bec47ea771c477ad616cc776924fa685fa1ba08ec3dc321a58cbf

SHA512
2ca6b686900ceb323d2cab8f95c4b8643d912b3b56670fb6f80cfbe188312e12170f8e8b36ce73d0f133cac4203b9e3a5b55c8c1ca057d75988ce851aeff5fb5

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png

Filesize
400B

MD5
50fe97176f0bdf8a7e5df4c472771202

SHA1
a2b586d69bd59e3c0453cf7089fc453bfbe5b39e

SHA256
3342091ca6f246ef5b5c1a0e8af2f89c7b2f9c5021aca7925f77e967bdd7bd26

SHA512
c0a41693636b0a9228c153c709717a6ba8cd44e483977d9f973daf4dd098455219e364d254da09ecf00d7a32604181d00a76b0d8c4ad8c8893f81ab183418dcd

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png

Filesize
560B

MD5
b55acfb5d4a892a8ed848054bafe2d80

SHA1
9a841f06124f55d670783f5e1f62a8f7328cff67

SHA256
5165ca382eff2f5dc75ca2e0c54802619d8b0cb5bc8a60819e6256fb629b1646

SHA512
b8ff88f200514527e31532b65de3d420a45e6e7cdb7a76353cdd512078e22ace66f328fbf045db6d15cd429ac6665aa59830ca2fa595264f424ee3d0bacb0a11

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png

Filesize
400B

MD5
77c7acdd2651cd19ca2c8c7abae5fd38

SHA1
b96c2af1b9dcbc56ee05258769dcb0c98c7c8b61

SHA256
257638cfd9b717f3a5ec46ecf524eaf394bcb62c4920b22823a78392194ec92c

SHA512
c574609cf1688170c0be998975d4c508a507484be3e9a1948ac05f4fad0c9fa631e41ad4129c295a563e1a529aeea79949f0e294ad962aa5ff6d39232c9a02f5

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png

Filesize
560B

MD5
11306716c88b24ad2c748d1da1308f9b

SHA1
f5e7a578761de54334bfd08bcd766f9413d8bf96

SHA256
737fe56f513e6da7ee65408e9871e7770069b3498eb36d35bbe50f4f235f4080

SHA512
5a37f24145b1c3be62169a8fb929b84f935977d2b6ed4ab35d41ce95fb08ca184795a41f53ed201ad94ed88ef7ed85db4e97a882b32414f0fc1ed735ebb99498

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png

Filesize
400B

MD5
d57b6a4b0f6431002069b5a40d6bb367

SHA1
675de9ffb9377f437bcaa98701b39bc5a09252ba

SHA256
89daffd5aedb78d1c345ece9f28dbe18fa5b070495e95d8f4e0dee47684bb7f4

SHA512
a385890234bc23336dc70e626e9ee8ea8da76ace635d7a3fcf2db053b923d52d5e347e2cbc1521a5b02e2d42c5788ab5c0d0b0242d0e8370694f4258322aa5ad

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png

Filesize
560B

MD5
fb0f125a7dd91b797c5d9c268e0f4993

SHA1
ffbbd25dabc6a3ddb3ec24093cf71f4de510f2a4

SHA256
e8fcc4bb96b30efec45e46952e88df712ac3d7278c01704cf842d8a8f823ff17

SHA512
879815180a75dcc55071c0c40a38dc46cdbc70aa01797999fee1b92f823edbdefb4e69e91670ad0361c2fae70ff751423703c8c97edd95930a99925429ae000c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png

Filesize
7KB

MD5
049d8ddc2b3a8e867f104ecffb9ef00c

SHA1
1c5e7da7b1e658a8fff1804d19ad12e3eccd990e

SHA256
004ecb84b9a2d9af3019fc98b099634ca24e50c94587e6de38c341e35d6fc130

SHA512
e8b14a61e4fd4dd15428815bdefbab4e8b7598c65fd48ad9cf8acdf92b63538b828d004c32a63386cd211ff1bdb422516201f140a9781d71b40eaa79ab6d208c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif

Filesize
7KB

MD5
aa600ed3278b32cd6a2c6215cad44cf9

SHA1
338e6b76c267a5096a5121989b324c5d72edd1c4

SHA256
0b9f54534e4e7c3e9abf9581a57e40f756c610cf3bb93d34832a9199d07a882d

SHA512
3651773fe1b97a4d4d145705d6ba05f7275a859a437feb7983221eab95ceffe8177ef8d57735191163c9f113400bcaa4ae73b5279a0545c5f3a6be4adbc5decc

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png

Filesize
15KB

MD5
034bb0a0d42ddc42baad40fe738993dc

SHA1
376acd7ae0fa2f0ea05d3906d39ca3a74f0ce4e8

SHA256
8e761f8a8c8be15d7df339115ffdc23f58f966382dfc55078f70dcf0c6309a49

SHA512
f62103fd92276437871937f98d86d7da93a53491bc3f680792553ac2d67e7665f1cbae58a076092b631f87a647ebe3726d7f164e55cb2a60dfd39276ea755859

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png

Filesize
8KB

MD5
1a77531b8084e2bf18a9b29b78e0ce35

SHA1
e0ae0b498264faebbb929979c20c5d1e52a237cd

SHA256
6f23697386fdbd0d402735d052855ba94fa7e54c00bc094c51980b57b451ab03

SHA512
2e100aa71fdc13519e5807abe2bba7e429c7db24677aca38468dbedc10cf40e9aa80cb4afbdca1707c95d9bb3930dacaa80593c739180fff0ff89bca09907752

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png

Filesize
17KB

MD5
f5f6c4bc6c5ca376ad28505e0b7b6e14

SHA1
66eb9b39b8473dbe7937c4af7ebc700a383b85c8

SHA256
b7368fbb20335b7c9bb917c228267de53214cb82e29bbbac61523fa0cc953799

SHA512
a0f0dd5a0c565259f2c7b22fcac608d2bfd06c24b33a345db9f1a262ac5af88a13377fb55358ad1fe1aa9a4899369008141fd34df789a3f5f9db9af899d75c0e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png

Filesize
192B

MD5
7bfe2e0c6040e46cb4ca7d0bcf88b2b9

SHA1
99697817efb6c11029af1ba1e40ff9792c400d37

SHA256
ab38c116ac4a03de119f90850cf7996534283efea4344de7d16fcce1a85135dd

SHA512
6d60b22004968c43dc631b1bdaef0b48c1ae556b021f4660bf7ecdb08e84acb46e9332a2afc329034639b2435f8f77ca4b7160b7a0f36d323ae6e3a9d35e7638

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png

Filesize
704B

MD5
ca862c535aad9f846c9e1898dbcccd6f

SHA1
430fe846569e3787f35212501f4799d0e94a54c9

SHA256
bacf22f2f1d50f9ad92b8c15e88d121aa02d4c3b889dbdaa62ea34d6d492d53b

SHA512
1415f76293476a4a0a79b2190c1d0eb0955dac453821fc2f67f0a78da437ed54cecaa8af3d43daf28bc38e4c691c2f0117bee699e9ab614f796a1157fb84694b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png

Filesize
8KB

MD5
66504562ae83e5448ffb94ca8abc5236

SHA1
f0127ad38b63ad0373ac3db78365517c314083db

SHA256
2014ee703e1426d311565e0bd2e9064582a8cff23e175658f725d7f76b46b6c0

SHA512
0517601d15dfbe29f352e4fc960b15d36f2a427e4e42645068b6f7731458c5f4e9fa2f69dbe935392174f8f24034b109a9ab15bb072b5ee8e18c9ce5e608f32a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png

Filesize
19KB

MD5
a1bef86c51de211c2e56c124b5530824

SHA1
1680fde7f8a0ae8c4a37942f17a749c389739ad7

SHA256
1582b6abfe721c4636344e44f207b5db073578f2c191cdf79961c222e48bf1de

SHA512
79ff10d0ec1dba37499e0aec4aaf28dc6f27acc3800538808ac93462d200c1b8da370f7d731d17cc6769249e54bd30783e1263e91a6b68471e64d73a19779afc

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\progress.gif

Filesize
19KB

MD5
d186e40dee69c7dc76a8b4f5937e5c49

SHA1
4134fb5c66e966a3e28fc7bbf3430ec62c822cb5

SHA256
6b6cd6ba2b8af60b57af159628450843ef60f0eea5b3093e00ceeb6b07ac22d4

SHA512
fa64963bd52e27cc5aab30ba2822119068cd27101ff692a91cdaaba7ac687f5508ae7e7c1bc456cb9c6fb5019040b6d021d0dbe685f0e8f3b525855d22159658

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\faf_icons.png

Filesize
6KB

MD5
9e7a508993ab03d0583624466d84e34a

SHA1
0de904c95ab2e4c5723455f395474b310a6bae89

SHA256
aa0e48aa715bc0145d000e35c8ee212a450c8b9a41bbeffe96e455c56a32d965

SHA512
dfefac7321780608631f83d9771c7d23d42661427faf30601c1729322b661f8f52650cb6dc3b9d908cba5f8c693abf5c39bb573b0cf8a723211d1ae5eedc21dd

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\bun.png

Filesize
2KB

MD5
7a395988b4ecbecf72652cab40fb8fae

SHA1
6feab07c7b73c48b1c7ccf3e4eea0b6310818d75

SHA256
4703dd2ee4ea93ba2e7000eb725a171cd15e0c38b74262dd8de14aa53381b5b4

SHA512
18eaba547aa4145d188f75916dca3270b71c67cc6c9ffdb0c38cd18cc6c49639042962a49c34b34c9d2b8d2901da3f167fe5ee10637c0987d7fa54349eda7a7b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png

Filesize
2KB

MD5
b0624857affab361f57354431698d3d9

SHA1
0e8097504534e7d542813b7447f5264afaf76be4

SHA256
33f052985a523633ed9c76b790822c8b4c195dff5c120b11d2b234029f3f4d18

SHA512
326c7cd9b13e12ec2ae3e7fc5f16b8f503f088b167ceabcef974e7d7334f1fd4bec760bc210be1175993fdc22a96461be395b018bc62b0dbab9eca3bd08d0f78

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview2x.png

Filesize
4KB

MD5
a78b1e73be12bff60a9e36187503868f

SHA1
f9b4bf2b655f3f119e7f1171d08db486994b1b9e

SHA256
fdbc0fa51df1f53e48cda8123b67e72fc055f95e2713ed0fea49583c1634d237

SHA512
59cff0427f9f77c56a8202fafc216712e97915f16519e6cc5e6c2cd88fdc475eec575f2c56af258265ed4338f1d0b42711d6076949f586d784f5d8043b0595d1

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png

Filesize
304B

MD5
01c413cf4c7ed76076101266cd254248

SHA1
2055699ba20f27561e0f1f222261446494af6403

SHA256
72b34049630f78d60ab97d38c25c73bb61281db49038a7f4d700d3d83d1f0436

SHA512
32344e839a609cd1e2f0bd751b5e45350f07ca0e43062db33e3d3def5b56523f9a2885bb8d505dc4e5eb2e517eede7b34236e8fc418265785a8450f1343675fd

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png

Filesize
400B

MD5
be310f5665a565f4d5a63259123f0bfb

SHA1
2833ca6e10e6208f6c6fe303a115be2f40159ed1

SHA256
06e5b5be97375f3fb1a497cd6d65510a99c781e855780f1c8afe581720520ff2

SHA512
ab5a298d389d436760ce3451c97784344af0facdc5fb07ad7aabc0b16fc52dd8d4854ce92b44a2233846d0539920b9f4087df19768700b9483522d89cbacc5e0

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png

Filesize
4KB

MD5
b3ce6bf0f9fb40b76a5242f1f4027b8b

SHA1
e77b35c2e97bc8e020bcf909f6af68f776fac612

SHA256
a14c27b527ce7836081854437bad0b9b1620e53c7e942c2e387a7fb6321c995f

SHA512
17568fcf0007c904724b96dbbdf5be81730d80c85cb964f2b91db1026c3357cc51e8fe371e6010bb7d8e41af7f3398be2d5abc8270eb059967233c8dd8839924

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png

Filesize
1008B

MD5
303bb93277eb71ee78607fe9e7cceef2

SHA1
573160d33d1904d73bd08e1dbc0217a5aee42baf

SHA256
39253a3b0d04aa2974654fed26e86a440d610599ba2fe3025ec8bd1ac5fe15dd

SHA512
d71a38cd7f2e3ee85dadefb129efd08f53ea0c4861877db1bfb8017352886d2034c78c5e5cb391bc27b57c04e2a5e899ef5767d1ca8d70fc3ece372a7fafdff6

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons.png

Filesize
1KB

MD5
56f29f6633fd7584b2b7563ba6d101d8

SHA1
13bd2dcb475809972455aafeab8ec85d687af85d

SHA256
7cf1f56e3c00e612cb2ebf4bb4e09539d609a7c519d07a88b4752b41a9a38eb0

SHA512
e96662091bcf22109b749bc6dbdb96f765e42563b2b019e13e34bca7372961933ae0c9e79b9e9768685d0bae020caffd1b6f75f632d1d2ba422bf3acbe71dedd

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\share_icons2x.png

Filesize
2KB

MD5
ef0445e80a1716cd3261f896944fd3fa

SHA1
7a90303d1e5482fd8b092497847aa068f6a28c48

SHA256
7ac1268741d9fa3bd4073e6f84098b21cd8cdb452ea638f51ff0f025118f71d8

SHA512
bc94bee759b23b00795f636f346e4733bea4aa9cb3e4c1541e93e00fe1f8198634329c5029431ba109a053026450206c53d5ab9eec354793da21417fb47ef12d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png

Filesize
3KB

MD5
5688d03932a163aa8aa459f0b6d8d916

SHA1
cfb11ae25b3f2b499ad9ad2128f6d4c5ef716532

SHA256
ecaf11017c1e511fb0c638e0788fa97c7036499de0ad792b88bf18f116a730ae

SHA512
fdef7c931beb5f5f1bc9e1d14b50cdc416db1062755033d0260ecae04c8a65042071fbf802e7976aec8038fb877601f329885c3d9e719f4b24db19e055cb4423

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif.ا̘͜ل̬͓͖̘̜̀ͅف̹̙̖͈̣̀و̠͕͖̀ا̛̲ل̸̘̺ف̶̹و͚̖̗̙̝ض̨͇̮͓̠̠ͅى̹̗̯͡ض̢ى̳̬-aj219sj1Uain

Filesize
560B

MD5
786a3d2f99b5a40e4e12349a61cf031c

SHA1
15d83e030d5681eca06e4cc0270bfac01adabeab

SHA256
479b00ddff2dc2b2698434b1460784dd42ed0d818acb21bd5e3f5264a6711ed6

SHA512
b814809b47d530e8a957ddf2aa2d3cf205c839062a3a8e0b18a401d65a5227d87a6836a553d525aea4de1a6f4d41e11299b8c8ae653a5b84da50d734c44446c2

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\logo_retina.png

Filesize
6KB

MD5
8617e69e7f76e626bae3cddcc84542ca

SHA1
9f2c57648a71635aadddd1c817ad9e90384def69

SHA256
5b51151e97bd1b5c63195869858fbb0f9e07d5aa7b8a707336ba93f3e690a3b6

SHA512
547f16418b492b4f70a30852f1634930ea1aa7b477259c1b16dab74e59d6f5a1c8ce7a174dc322cd67fd17f7a2de62001e99813673912e05778f606387beaac9

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo.png

Filesize
832B

MD5
3beb2ca1c42d9baa61a2434ca6974606

SHA1
a62e39c4845d6f75677c08908961d84ba85e45cd

SHA256
82a6828677479530aa47bb9be42ae79a8456baf4a22aaf2664028accc4ba402d

SHA512
660822d43d77e38795baab21509d58cb7e0e1f14f75349db7fce7d036eb9ee8740ccfb87426a7f494872566cbc7b8251e4749dcbd553a4aad56b2774a7f4cdd7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\sat_logo_2x.png

Filesize
1KB

MD5
df863240482712513f47a1ee2d7d66fd

SHA1
b1d1689b17d5164e111b14ac574527b8c879e835

SHA256
ad161f96a808b575733942d4a909cc61a26867ad6a9de9ec52707a97162e0155

SHA512
b0a4baf2a16bae7a2592ba0fb89689a6d2460f5eab2c74156af28fdd5633c511c7c701942b92bbb9916b242bf38b19056125fb4b8d7becf63367e9088fb7711d

Download Submit
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt

Filesize
32KB

MD5
7363fadeffe2c2d690c74a9ac9cb883d

SHA1
feb0a24b63d71df9d7622b49244da347fc63d00c

SHA256
55458bb212103b1758cab5478f86cf76998748bf2dd556c83df7535de81e679a

SHA512
f0a92c0e808688b5f66b8fbd621f0c1397a7946a95a95ae360f50c9a29a08cb4d5121519e7dbe50f22367d4ab7f74fa13586b62ebfa0e2707e1fd73b42249101

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif

Filesize
160B

MD5
e2957077a19d61d2fd43149f449cdda4

SHA1
a012a38f3b5b197af1172da6a1b6cc6306e37980

SHA256
e2e7bd4576cf84bdc3bf5004e296afc4656061841e594f7656dbdb38377a3d47

SHA512
53673f1720f17e923fa1d71d519dd607e0f14bbaad85f957494533985bb014535c3767c8736bef959f5673d00ab6f82a423ea1998cb12370a80ca161e8508035

Download Submit
C:\Program Files\Java\jre-1.8\COPYRIGHT

Filesize
3KB

MD5
1048dedb83625352dec2f59c2a18ff15

SHA1
ce46007764a8f13af2c44984163f7229ed6ed6a9

SHA256
6362156c8b815bf89d5ee7ad4606177ece44a64d6f2da99b86d3a6980bb89aa7

SHA512
cd83ca28a271e67eeaf915f29ead731679620ef6144fdb83228cd4800ddc66b0daefc0e69f5a5b6ac000e9c28debe9666a395386657c030056c25f29bff4786d

Download Submit
C:\Program Files\Java\jre-1.8\LICENSE

Filesize
48B

MD5
e49710ab281a3a4256b3a6a6b54eb650

SHA1
fa9417da309dc3d82abe4c2be20056fb4eb30a1c

SHA256
0eeb863dda06b97bfafafe5f9e123089df3462ca9ebcaae2437732e573206dd9

SHA512
573f24686a09b15fd7884ec59cd5e806dfc75b80d005646a11bea9be14a4caee7e28263cae8629428f91876b7b01a243406c8ca304d020e19eb59c0741cf188a

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
192B

MD5
bb41d899141a0051b80537b3897601e9

SHA1
b298b9b89e6977745e1d136215661ca524deb46d

SHA256
1d50153bb7f894ac5fa3b345cb16d572bd8d780e8ec9fc96e178a8fa33cfc6ef

SHA512
0408f1025973dd5af513854a2b50e6e6e23c3c8ca0ea31d4b19708adef81796bef822d54a07ba211d172f0cac98f05a0e30472371b36a8b2d940670feafd8e16

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt

Filesize
192B

MD5
7636bdf148d825b562b92480f443ec31

SHA1
f0c400d619e5cf88ba05b95c2c03f1269af72e61

SHA256
fa1850ee9be62f9aa28f0eb74f08f17a14b49dca53eb2edc91be448c91c5fd91

SHA512
a9628a023cfcce917539b3afe2ea000e25097ec6edecc7eeb48f1861c70e8699003508473efbbe5ad538772650ae07d3d2e69ede88494e26f27444f64b13c0a0

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md

Filesize
1KB

MD5
895a66e2b3052bd32ee5938acdb49bac

SHA1
d00fc526818498fa0f43790c7ac0548439424db3

SHA256
77abe06be3ce38ce23192ffb439e9001c148683c7d29d249f2b371f9dc8cff1d

SHA512
0ef895b9d26690b3c97abe4fcc68873626b47bb168e33f41af88572dae829094cab9c6fa5522a5769264a66f1fbb95696012c01c77629f6e67445c9974f6ba5e

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\glib.md

Filesize
31KB

MD5
8a369eb57c69f9e00e3fb799becbe966

SHA1
fa29575a5b07bb208682ae66f569deab04d04dc2

SHA256
d4d54c41e41d24f97058ad94f65b0cf736b8e88e00f7dcb81befc0f40f017881

SHA512
2cbeefd81a5b2e1747a827621465ae99be8dc8550479b6544e581caff909268c32c7713a06b4fb49e877628d896957bb6815bac6fe4dd9902a94d34288cd05ab

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md

Filesize
34KB

MD5
466af1ce7cadbedf789d4896b929ca63

SHA1
0679aad74c77a42a8a8699ee7577308ba2668a05

SHA256
5d6fb68d65e8274ee9aab12b4a3bf62454a8657ea574d5152494167a7999c241

SHA512
b09439fac4bc27c0363d754a716a40daa3d1ec68ea5d17c7ac4d015da5b77a007f6e06ff10a35340abc6eac5173dd2100232fc199917f73d18de6a611d5f99fc

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md

Filesize
23KB

MD5
baaf7a94d309c6f9f3b14f89ebcf9061

SHA1
c1c4ffcce62e524289bfbf2815c72196ec02c127

SHA256
563d14b3716c47afba7de54326f22e73263d03d86df843e84a425406bf1c53d0

SHA512
ba0bb6378b17d8cfa66adc142c7b9a5be97d33e5e961451a5a29e3b759a1c570821c96826489c63ae8bb33bf3449f359c290b412c41d92a145065192d6a7b602

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md

Filesize
2KB

MD5
f928c0aa044c185ce3b6c03555dd2578

SHA1
56151da05ff3f38d6da74dc40f9f82f7e5b6d188

SHA256
3af8ff407de77f9e59fcc015090db610c0990641e7da2b64dd29f83957c01b1d

SHA512
7ebd1636d559aaee51252e68a619321153db3b456624d457739788e4e04b423e165c8618ac711b1d070f8a2a5a771e3f8273ff82b749ac257074f66d802a00e7

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md

Filesize
1KB

MD5
bff395d32ca53380ca1d57392e8f3cca

SHA1
b0113690f584b45f598b3e2ed51139b669fa5a43

SHA256
5124c2761e896942ef842cc62f226e637cbf2f72d956a8dce0f464af8f3d202a

SHA512
77751cc1396762b60d6f48bbc8cfc6f8d4bea5b42480c11ace3f66f33db0f907c542cf598c2ed3a3dedfe7d384c4ab856ff179dae2eaf6cd12abab87fa2c2e72

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md

Filesize
3KB

MD5
d42c83a6935f7b9ecee97efb2f858400

SHA1
4156d4eed6a8e5b0d6a2131d68389cb71ba96d48

SHA256
f8476c1a3c682cd28c51aa66914748bcf6f67b40d3cfb717580954b454aba9cc

SHA512
eebacd2ab4dc04ad87d9e62d2573690a02c556be81885ee3c0d924916339f7080eed36a18af70fc656c69f34bb98c76036a2315d7629725fade175df499575ea

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md

Filesize
2KB

MD5
bfaa5d110a1d00af87a0305e27cfdcb6

SHA1
3ee77f64c7aaae256dd5aba3cf78173693a92a4e

SHA256
e158d0c648bc656d437e9e887d46fdfc3fd49877bb8d073ff62bd73bfd9ca6bc

SHA512
0866f09f8af2bb3e4b410b777e52d937d9e0db7c48d2804241a43c29b235e2b432e17ed4bc86ba7f36794bcd07882233bc8ec96fd2728e9ff74740d0bf782f7a

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md

Filesize
5KB

MD5
fad581c925c9ab653d285b47a7dce8d2

SHA1
1cdc4e05d2ac54aaefa1a6d73bb0bcd74c048237

SHA256
b50082ee1a2260cc3d56c31fb240bb31af5d528869038a5600b3a1a6fd9bf0a4

SHA512
fe68385cdfdb655c208b736fc3ac3b2bcefbd017a674f0dd2652ed0af7b8b656dee8c731c512ae52503429d088968dbb05c69ef64535260842f88e8331dbd38f

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md

Filesize
17KB

MD5
b3a81200cb196e024632e4b999122cf8

SHA1
08b631bf5b5668d61554a4a5767c402ce8205c25

SHA256
3c8d87600847c4463845bcaf5e741af7e6ab12e5d71332540c1d1d3937ac7203

SHA512
99d9f66848f72dc7dda6ac3b9aa75562733c13d63603390cc8a097fc2861ca74f354f2da0b65993a8a28063fe0fafb9915fbc8794c6dabb2d5632bb4ad431684

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md

Filesize
320KB

MD5
eaacd998816a6ea890b397ec32be250f

SHA1
9e8e9d209e9889b05dd276a4db97d64c09a372da

SHA256
aed77bb93ee41bdb51df427ff2fd8e9c9467dfbf5de4068c6dcbeb01705c41dc

SHA512
dbda5dc1637d2f76b7e1a97a6782eeaeb6818dea95fe526c5b03dbaec1626b329baa855dc3921a231406c35b3bb09c91bea855dc01823019e6e9c30cda1fe134

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\asm.md

Filesize
1KB

MD5
c78db11d54efe543cd4120f68c50611e

SHA1
64c1992b93d37512d40966ec7ad56d514d4bb432

SHA256
0f298b961a8c0f72e256f4d75fd3a7d2ea521eb49207e41bd7a9a9257fb1c473

SHA512
0155a37b1cb327ff1f5c263863e6029a8366ff57f64e83abf20532cf752fda752f61495a3ec2ea33b59388950f5b3bd48977fe7f1dcb8b0f9af8e5ed95bc72d8

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md

Filesize
10KB

MD5
4f89e8cd4549d2af87aed71d10938113

SHA1
0838603e9ecdb9091c7dd8b4d96fb4b27ef74dc0

SHA256
f0748470c0bd1971bdac3278aa3589c9349c54e7e8e6507fa2c1bc71fbb2c39a

SHA512
53325d31c3e57b0ca95492c036f79b451b1e934d512dcdd9083bc1c58ea9d0e22d1afcad45397834a22b8af3a8adc54a0d8585deb086c4c5db0c9025791a28c9

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md

Filesize
3KB

MD5
3a552828737ed3271911f9f5e0e54edb

SHA1
60a19a306727714c4bbe74d9efc9859e2bd3f834

SHA256
f404a438c58c6e4a61967ebf619aea802fbd97802836b7e28b27ebf5c99c3fb0

SHA512
15206845cfa3feb1083ea12f78a0dd13a0aa50397ea035d09cbab86f2191f4727658abf5b0d6ba2b98c39b9757358f7e2502adcb5d44a4221e252d4ef8dbf663

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md

Filesize
176B

MD5
6ebd86debe43c96b4b2745ecba919449

SHA1
1fd688f14facbb9a9851b2a57ca71832314547a8

SHA256
acf7aba94dd4f94fe63241e61c667e837d80c6730abb2e8f3a4f4509ad125555

SHA512
5adfd15ebca1a3ac5b4e91d87db39c7c1d191728287be112097ef43141569a6e7e0cc64d2c17916efd44c87ff681129ed8d1df6517d264f4d389c22ef8833fc3

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md

Filesize
1KB

MD5
90047f0d16daa34100073cb8b980bbc4

SHA1
a2965f3ccef7ffbbe0e93c48e50f69c5f14cf8d3

SHA256
4ef229a334eb6be45adfc8f67833e918311b267bea27d4a12225defd4db10c83

SHA512
136282829d629c0d48b60e0ec194acabedea6abfff2e3743717cf795dc88457f5a30188a38bfda79990226c3a1d137576c3838a6701cf4f0ec62444a85f5782b

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dom.md

Filesize
3KB

MD5
2b60d29f6a11ad31ca1efa5af7eabfa7

SHA1
d030d5fe39460906373ba262811bd28e6c3a9002

SHA256
a9567ba6c2d7583d4c33d7a2237ba05ce3f0208db53867cff7b9234745ffc55b

SHA512
0af4c84b26b5e88248fb2313e8b3a674182f97b71e1e0065b231c22c690cc113da3ca607d13e823d9f73f02888ec22ad372b778921aeeb2895c9439422ffbd50

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md

Filesize
1KB

MD5
288ef8e94b4122ce72449f9badec8a0b

SHA1
5fed1b95912b7eb0f400f82d9215ecdb9c53916f

SHA256
91e36ba049ace891fcd454685a4483dae2d40a4b9587a9e932678af55cc7979e

SHA512
9376434ccb4e470cabac6415e35d54de73dedbfc55e1337d61cbca1b9b1ed11fef576e048131c62e55e7d33ce6c943798b488ea9a75fb9684eaafea8ce3460f4

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md

Filesize
28KB

MD5
f47c4424b0b595ebbeb222991be7900d

SHA1
0efa600eb0bbb982ec7f96d6772ec18b5cc0a23f

SHA256
d9b9438a9be9c2e53a479813b3f939c854b29add6b800dd0465ec1a256cdbe19

SHA512
0ccb650e5a617bae651f1a2ade42a32f9c5e8cdf6c8a46f18943b0cd53fef17681f7a40dc78c252eedda93b8c81c062e45079274552cf0c8d1f9363254d15a50

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md

Filesize
2KB

MD5
de2aba1ab217f23b918476c8f7901412

SHA1
d81e9b30ab679a8df03308f78ab142dd44b025ee

SHA256
ed805854e26dc9c50e5858f412a341a7093eb04b124bb6bf06062bf9aba1b9e6

SHA512
c7d4470252cf3073978807de9d40ffdfca524fb86aec693a3f516f2cfa3216b4e48b6368ead2fdd41dceaa1cbd19b3671a944c479ba4c8d4417b467407a84fc3

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md

Filesize
1KB

MD5
460e806015805ee3cc6bfcdcf49b792f

SHA1
b9086c4dbd441610f192491d4a51bec459224ddf

SHA256
9cbb58e2eec687e63b9c5a038caad8bdc45a6093802f7d9d0ac6fab20b78efbd

SHA512
81f21852e62126c4c6955029990ad0d024a3e3c28ecee1f1bc79d2b60d69da155d879b08e9d0f3ff839ff60bd85b198fb3e899c41bb99aeb93341649c37e56f3

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\icu.md

Filesize
2KB

MD5
08ea659341626818c3cb87b7d7ce5fc1

SHA1
cf8af8e3d7e6f21ff2692778fd2e630c6bb02ad8

SHA256
d4754160074de7b951c63fb9a773239d523fd1b071a9a724c0f7bd5365e90514

SHA512
8f8da0969799b259daccf18438b2ee43f38bf2c7c760a7acf45a4cbf2de3bde3691607b5e0db6ccbce9fd894ea192732760a1d64fe98a56b1d62102d6374ea35

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md

Filesize
1KB

MD5
94121463932032d0099507945ded365b

SHA1
36ec63ff7e5ddb1a82c632b563dbe510809d2d18

SHA256
b2dd5c0f0334f14d6b22867cf5912778a1a738b63da4104c9f3b30def2b507b4

SHA512
c7bf97842ad9c891cee6248ae66fddfff69e6f5809ded4d56bde8381cdeca6f1b9ba390a7e28ef539aba449093a9a7bb0e9df3cdd5766a7d7ac13c0792105c7b

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\joni.md

Filesize
1KB

MD5
a34aa0312c0616c8a8c876a6e84f0542

SHA1
8bbece89e97097bea3e0f8c268bfadd700458f3f

SHA256
807f7013b3c377e1fa6171ee9f316baf6cb38117bb070524dc92bca0c0d906c1

SHA512
29c460ac6a15fee18a0f16abfb783f750e832ad0abb5d4df2eed08826bb7711baf594dba0974ac7cb09e0924e31a50f5c9e49fc6ce23bb4223aa6797b93c5f85

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md

Filesize
1KB

MD5
da8191641fda00bcd0ee58dca65d0b03

SHA1
c862b400720f59361d40406edc3f2861951e8c4e

SHA256
bc8740866b7497de2b95d79656ea65273d54e510e96e64fef449be0ba2713231

SHA512
0d637dd2cce5d8541ae0b81b5a85111f755ca234520c0c736ac3ac649f7028176d4a2c652b58e0ca0c93d8713377254f58e07fcdfb69c3805ed6c582392dcf3c

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md

Filesize
3KB

MD5
17370a0e1fa8f24d201e61288e512ae3

SHA1
0b90abe8b48c6d1d9e2f7c0873723f4ddd6cd158

SHA256
ac9aa12739c697f05650c1781c67098dbedfdf194ddb0b45182d9fb3b8a1450e

SHA512
37a90dc3597a661b522554d1421aa6c1ea7f99efbc53648cde007be8271aad2ca22d4a1ee6a51aaa5a09d2d8d75c675b2a84812bb866204a9641e4a1d9ef58b7

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md

Filesize
2KB

MD5
6b12857d0a0b445d89759a74dc038923

SHA1
91e8fbbf805d247ab7005144389532e905a4775b

SHA256
9ec50f38eb932bc2e5c8986d761e2b0109b000bcd5e3313b6925920590854702

SHA512
eadffa52341165840dfa9b2613723c4779fd15e1f64cb2a370a66e32fce66f7f35cda92138f5e0cfcf3e55f411d72551f070236f6452de4902c70f9133bf3f5e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md

Filesize
6KB

MD5
ddbd45711946ebfe3da7809310e6e94e

SHA1
a8918f46c97eb10905c7be0a81ab9ffd3dcf616e

SHA256
1c95ee03dffe489fee2d91c679547916a98da56a718012b65977f505fdf54319

SHA512
2c58ed0d1b38fb1a8a7b4851ac517a7dec8261be6f37da5c3ee101bfa2a26787677912b1e589ba3ae5aed5a2d8e4279ce13ba0c8edc561accbf7e31dfd07a3dd

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md

Filesize
5KB

MD5
416fe349797c36c155b9fc6ef499e9b7

SHA1
595a8d9d9a87336f8816ce3ca17b52802e4e71da

SHA256
45f1f8f50d24f13b2a34d0b2abdd0f505367e12bb68e4ff1c5585fe9a3b06f3a

SHA512
03936af8de37488c4c48ef55e749555fa42ece4b33ae699f6226ce1208f7b18dd3e294d842d415eefd68cecf64e15bb6ba18d3341fa64fb6266ddcdee6a45ed6

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md

Filesize
3KB

MD5
20f8fa0181d2cc3a52a13178068eabb9

SHA1
10bee64fef3c4049b1f5684300c6c9dd8ddbaa16

SHA256
dbfcf5772d0c1059f96480a318550cb2d56535d2ed8698b746ca28f7fa2cadaf

SHA512
daacabb0bcc07169fc7e458b35e2256c4ba530c8190625dbd10a36589021facc2324c3fe02ed48b2ae67ad3d0c60daff876ac886b677d13ca46e0e661114583e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md

Filesize
2KB

MD5
3b0322fdb391570b1e99bab648b91f93

SHA1
2d5889d72efb61dba8e6f89bb9bb31ad520c84db

SHA256
546b7228325b2817a6035e1dcbf574621852670f3873ca3495f981a8d8550e55

SHA512
f5d92aed8686f65c058c030b6d6952df67f4830cc7182d4d051988043b428aecc990ecf60fe2b2ff3d7747b8263d020e3cbc6f373e0b7c6aebc3f0b7992fd65a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md

Filesize
2KB

MD5
e4f0fd028b1fe40d7f0a3fa37ae4a3b3

SHA1
e5321d28bd57bccc2c3e22c9c9810fdbb550416e

SHA256
c50586b21791a33a5775bc25063fff2ad4baf5caf90ba0382b480d486a181722

SHA512
2a2329fb4c58f68f43c32f19ed14d0ee21bf8395a40a8c49a095ea06cdb0358b9519fd4c61c3ef0a8b510066e55857c381b4765dd379fe554bc9c56569bb5e36

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md

Filesize
1KB

MD5
4f50e692de963be35e4668efc3ff6883

SHA1
fcd498a86a36356e17b4903057268213c892b370

SHA256
328570f518867772ff782edc3607ca27f19e8c400e649092df4599666ca58d21

SHA512
4b50a866f48d60682febcef261e038932f352cc8c054477b6b0a4fa6921ba3a493b9925380109d3345f67687705c0d7835884edc92fa46891a731fd87c719b85

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md

Filesize
1KB

MD5
3296b1aff833c6e80e27bcc3a235b134

SHA1
6f956dbed6e4b5a79562b528998d55a0f00acdb7

SHA256
6626726a8dc5934aa3478bb13569e218609ff5f9aa8cd7cbe63506cc06228eb0

SHA512
846eaf740e0373a9dd48782a6575e89380139d0f75f4eb397e314a65c63e8bf2eb745ae84cd8f1e604b56f72cf91d363d163cdb46bf2b44271ecd1c0eed3e653

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md

Filesize
11KB

MD5
71b21938513abe49ba039cb6e065eafa

SHA1
6cac560ca59649b2782302de0a0bf4046682770c

SHA256
ab2c3c8f3f0664c5ea424483399919d1ffd134dc4b242f35237ddd76d09b60e7

SHA512
904a29c94f1e4261ee008eaafa08e7d0be76f22100f40b5056d54c63aab88880c08b411aad8ebfe139c65b38fb9a29b49cec50da6ac746f9c59e6c9f81fffe3e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md

Filesize
1KB

MD5
49908758d4071f8ad4223bbb73ac49cf

SHA1
f6bfadfe16bfd11e977fbf81a728384ade352aea

SHA256
5d42e65d667b39ad01a65c94959fe6296766cc00f1d986537f1e9db4f926b4ea

SHA512
b287c446c5946645cec5e772a2ab43d0b7dddcd2e34ac0ae79f39f74d6dc88ba6615c08f51d76a04bea953b6fcb480ddc84adc79a0dd01bd2ee8afa41f78432d

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md

Filesize
2KB

MD5
07c6683495e5922a51b1315ddb5880fd

SHA1
afebc8e67c686702cd8d7c9df4a5c62852edde16

SHA256
3081d62c1299b3a2f35eeb01910eb359853cea698c792648bae42e5b9c8893ab

SHA512
1839a0ba1a3f38e687e220c7ed2055cf68cc074767ec87cfe5791721b9a5e08b2cd27e6a130a02238955ecd80bd8ce36d004b98c4aa419be7027c20981ac7e01

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md

Filesize
11KB

MD5
d51b43d185c7fedf2c9259abfaf8ef1e

SHA1
d0ea797e3856cdf7ec0e2ea2a52ba169925ee2f1

SHA256
315a8c004d5b60f37080eca6f2d588fcf738b5c96a71f255197a334ff107b48a

SHA512
9e372929b623820e1171dbc60a65cac36097dc14549a877fad23cc2e82aa723aac0cb039528aa241dbdf1ab3edec84996999bda6ee65145324286814dee6d0f8

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md

Filesize
11KB

MD5
edceca318128382c9f4e77ae1dd575d9

SHA1
0409b0535969656d6febee8e84de6fbc2bc2d0b1

SHA256
9e6707bafc5707243315da1234017be15bcc2b1c5ced34db8852dd2abacad8cb

SHA512
1b11d89e992d4a1530b4cc46cd1ab2aa44055bc9e0c08799a183e36166de95284a183a510cb6a98a6e2e928f219f279caf6956b8a875d1bda0c9783a3188aa61

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md

Filesize
11KB

MD5
caecb52fa1ac2ef6705cd2e141b03cab

SHA1
e4b2334f886facdb93350a69b1fd24f9284d1bd9

SHA256
4f2cfcc0ca43a1bd141296b392882f6c9ae34b7a2a7f52716b2a41a911c31c38

SHA512
01760cf4eebc39836e18daee4907a15713f8df24a34307c3fc209256cbe8debfe6830441d9148723c4a56212b7a9b4dbc3a01257b70b56950c939fdb9cbedf27

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md

Filesize
1024B

MD5
f96b7abb71642bad64007574631bf6a1

SHA1
2cc5f3330b8834d652e781f9b051a5a293666081

SHA256
56bb8606189344c81483a59e0a0a39a8a4fe9d1efe68d8e8dc4bfbd18abaad56

SHA512
5fc34f27378cf18c6b90803474f43908b33355046e06308777ff1b513065251bb3b70303d5c4160681d80e165cd5836b94223e4e149e643e24807d43aacde69e

Download Submit
C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub2019_eula.txt

Filesize
48B

MD5
a2f559b00196e6f1f5054357572ea3ef

SHA1
ae85dc3a49d88315e707ece24a87cb5ce807b84a

SHA256
63699a795039b9c3a90474252c1761f872bcf02124d42e296dd84ba24267fb2c

SHA512
dc7faf0cba549b861f56abc6b03c8cca271eb8231024d7f52c34c6cc494270f09b55a8e5c1c4df2b7e00934c98930f06fc42bc743c78e6c2d1049c54982a2244

Download Submit
C:\Program Files\VideoLAN\VLC\locale\da\LC_MESSAGES\vlc.mo

Filesize
584KB

MD5
a04b04cc5af812034480e538ac08c461

SHA1
cf3143b402e6a407b42cda40de478d966cd45a07

SHA256
4bd8fa3bb131f62b1ff9ac560e67248e38239ab0de6a2a9c073f5d5ded1ccde6

SHA512
3b4be0fe177f6f7bf212c76cc356c8f395eba5d53faa9905b2ee4376888d46c614fdbbc1b6b91e9c98f85533d3f6b0e5bde2cee55220ffb5de641f8ab8f194b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
37f660dd4b6ddf23bc37f5c823d1c33a

SHA1
1c35538aa307a3e09d15519df6ace99674ae428b

SHA256
4e2510a1d5a50a94fe4ce0f74932ab780758a8cbdc6d176a9ce8ab92309f26f8

SHA512
807b8b8dc9109b6f78fc63655450bf12b9a006ff63e8f29ade8899d45fdf4a6c068c5c46a3efbc4232b9e1e35d6494f00ded5cdb3e235c8a25023bfbd823992d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d7cb450b1315c63b1d5d89d98ba22da5

SHA1
694005cd9e1a4c54e0b83d0598a8a0c089df1556

SHA256
38355fd694faf1223518e40bac1996bdceaf44191214b0a23c4334d5fb07d031

SHA512
df04d4f4b77bae447a940b28aeac345b21b299d8d26e28ecbb3c1c9e9a0e07c551e412d545c7dbb147a92c12bad7ae49ac35af021c34b88e2c6c5f7a0b65f6a8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
47KB

MD5
0d89f546ebdd5c3eaa275ff1f898174a

SHA1
339ab928a1a5699b3b0c74087baa3ea08ecd59f5

SHA256
939eb90252495d3af66d9ec34c799a5f1b0fc10422a150cf57fc0cd302865a3e

SHA512
26edc1659325b1c5cf6e3f3cd9a38cd696f67c4a7c2d91a5839e8dcbb64c4f8e9ce3222e0f69d860d088c4be01b69da676bdc4517de141f8b551774909c30690

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
64KB

MD5
d6b36c7d4b06f140f860ddc91a4c659c

SHA1
ccf16571637b8d3e4c9423688c5bd06167bfb9e9

SHA256
34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92

SHA512
2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
67KB

MD5
69df804d05f8b29a88278b7d582dd279

SHA1
d9560905612cf656d5dd0e741172fb4cd9c60688

SHA256
b885987a52236f56ce7a5ca18b18533e64f62ab64eb14050ede93c93b5bd5608

SHA512
0ef49eeeeb463da832f7d5b11f6418baa65963de62c00e71d847183e0035be03e63c097103d30329582fe806d246e3c0e3ecab8b2498799abbb21d8b7febdc0e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
65KB

MD5
56d57bc655526551f217536f19195495

SHA1
28b430886d1220855a805d78dc5d6414aeee6995

SHA256
f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4

SHA512
7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

Filesize
19KB

MD5
2e86a72f4e82614cd4842950d2e0a716

SHA1
d7b4ee0c9af735d098bff474632fc2c0113e0b9c

SHA256
c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f

SHA512
7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
26KB

MD5
5dea626a3a08cc0f2676427e427eb467

SHA1
ad21ac31d0bbdee76eb909484277421630ea2dbd

SHA256
b19581c0e86b74b904a2b3a418040957a12e9b5ae6a8de07787d8bb0e4324ed6

SHA512
118016178abe2c714636232edc1e289a37442cc12914b5e067396803aa321ceaec3bcfd4684def47a95274bb0efd72ca6b2d7bc27bb93467984b84bc57931fcc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
40KB

MD5
3051c1e179d84292d3f84a1a0a112c80

SHA1
c11a63236373abfe574f2935a0e7024688b71ccb

SHA256
992cbdc768319cbd64c1ec740134deccbb990d29d7dccd5ecd5c49672fa98ea3

SHA512
df64e0f8c59b50bcffb523b6eab8fabf5f0c5c3d1abbfc6aa4831b4f6ce008320c66121dcedd124533867a9d5de83c424c5e9390bf0a95c8e641af6de74dabff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
53KB

MD5
68f0a51fa86985999964ee43de12cdd5

SHA1
bbfc7666be00c560b7394fa0b82b864237a99d8c

SHA256
f230c691e1525fac0191e2f4a1db36046306eb7d19808b7bf8227b7ed75e5a0f

SHA512
3049b9bd4160bfa702f2e2b6c1714c960d2c422e3481d3b6dd7006e65aa5075eed1dc9b8a2337e0501e9a7780a38718d298b2415cf30ec9e115a9360df5fa2a7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000065

Filesize
215KB

MD5
d79b35ccf8e6af6714eb612714349097

SHA1
eb3ccc9ed29830df42f3fd129951cb8b791aaf98

SHA256
c8459799169b81fdab64d028a9ebb058ea2d0ad5feb33a11f6a45a54a5ccc365

SHA512
f4be1c1e192a700139d7cff5059af81c0234ed5f032796036a1a4879b032ce4eedd16a121bbf776f17bc84a0012846f467ad48b46db4008841c25b779c7d8f5a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

Filesize
2KB

MD5
ad6eda4e851baf2d337ffc68ed17b93d

SHA1
d67a187fa74409d66341f55d840c102eec624653

SHA256
81bf08a6f30b12b10d169e78054e1adadab824554f487c57964ec44890a90778

SHA512
1ec572ade1905a0d8cdffb49c74deb7b63b0bacea2745e0a2bada644a1e600723670a7200a9ffcc5eedc7369970393ccce59b8564b67612a7f5da50cda983f51

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
91908739121f84e6353cfaf2f812e5fb

SHA1
9edc1da7bb87d3a57b704cce18f0fd36aadd50b1

SHA256
ea6d4e12b3c49fa8bdb7dd31d9796f4ac659a4411194aa7877b2878f534bac30

SHA512
8f3eabdd4526a8dd14ed611c6eab2cc02970b7c8f5fc73bd19c44c372a21a1245cebb6665bbe0aa29ee2f26bc3f2e4131eedaaf62dc7ad371cfd4f1308521c6e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
779b375f61e05cd537d448f4b83d47da

SHA1
8f2cae8994133baa370fc77339a551334fde09ea

SHA256
2642efde325f052afab9392f6e5b7c4863403e36cba57240394475c5eceac0d3

SHA512
4c905fcbb518392d3fd5d5a887822f5b058c16ebbe81780b819342b775da13320fc5f6727bf299b12692ffa6352799de705ef90b572caa82b870b69ee6b6d212

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
005b4fdc27cbb4cc21d641c5fe276faf

SHA1
7a4b5296701350c7e65b99427c1f3c5102eb5eef

SHA256
8bd13958c3ec4dcd694359c632edafd2601a4a810d368958fa8c46afedd9cb10

SHA512
2edbe0cb68791da01dd4786de08422201f81f9f3c66465b0c8d6895d6f6e490b665b3ca380be3f34eab921d6ecb0f3081ea8758cdf05b6abf4290ea991e0685c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
b1757551b65b889cd6a0628fbbca262d

SHA1
bf2c7dd6396807f9be4ae0d80abedad4470dff6c

SHA256
3828be0d1c6a48322ca4cdd7940fe7740cbb48485b2f842bb0e0774e70cd96c8

SHA512
392224e84564068460c5c15e7531bac471ae2f5202f653e003129cd5e764e66ac3e486fd9b90f4c747b706d584bbc422959e5f1a0d1279bc945cd5cbf82fd70e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
0a805643d6b58b5e1606b791220e06ac

SHA1
1e68d0e807da50eb41805777891b83f3839a41ea

SHA256
0fa526f39f216c4eca31b417c5df4084ce04864121a366c52c3b88e1d28c48b8

SHA512
be6690209455db475043b51f20f2eb5e611491a899113e88d139a10d45d4faf39214e3559a093d505aca591a53d52b1e430a7a7390c244888fd5db84a47d6202

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
72142845179d0526399d79f69d530c40

SHA1
c8d1b75518c65717816015b2ef1fc078d556631d

SHA256
5de87d88fdef09d8c68d2a9b879a4c49a51d1195ff41c5a319c453e218be27d1

SHA512
46ea61e7f1680449d5fc01f5d4362cc96aaa4ebad3dd8f78666065e4451d1a0e753504898983932fe0547678e45012cbac3ee884044a3c331baf0ad95575b6e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
96B

MD5
f015df9ac340401f93ea44b8d5c25983

SHA1
db000a30424535fe8fb03164e368f9a0c9a7c7cc

SHA256
303f52b6defc33b37b04c028efb574276b0d74e9b1d31155ace6eb8044ea061b

SHA512
3fc34cfd76377f6bb0375213bbf054cb7dc077a97b10ba1f8ba46c912859b563eebdcd6cfeda22c01246f8862fba1d08559ed00f98d5811f728a657c8b8ecf37

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59838e.TMP

Filesize
48B

MD5
d46f3cf1dbcd873337f4ff52abac86b4

SHA1
42168f0a0368e03f3d30b8db0b2d74578f82aaab

SHA256
cd07454532ae1c2faa7947b7466064fcc25ac49a4374e311ea87e1d544af862e

SHA512
2fc6c77e610e9e448fc5f6980f83f0bb97ad6e3f0e24b133ac538edc5d7be7447582832482fb00df73b0ae908044f9f3fa3d08b49bbe6ccd7d578be355fedd19

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
705B

MD5
bc22e1fc405fc6534c0cc6e02efdaeea

SHA1
9045d26279b7ff89238e7109e4bcae6d6feed6b7

SHA256
fe874369580f6b4e126ee6f9cc24e0332530e908eb6b102bb736d77d12f7dadf

SHA512
935ceeca0fffd894c4efc2cb6d4772bfa9849ec2450b4ce307f16e30098926b211224032ebe5494c789e7dbeae4b863af4b936204ebb8bc919841b8fd68d2af9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
872B

MD5
fbfad7541c39f468801a37cf485b1486

SHA1
4b08b5894229f3235c76c9db32ac49a5df3fe750

SHA256
44ebce8180df099196f729c52281197baafd4e1a37b022eec62f0f20a37eff84

SHA512
1f27e0e9281b17ce7e7b839318564534023bad0b04df3a146f8a51d0472d14663659e3eebb9d20f1c8fe0fdc5cf1b89904059a16aafe30888aa166226f3d267a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
ed16c72221de8ed12215bf3deedfd317

SHA1
2d0eeb75771056e154bca6ffa125fa68e8e98414

SHA256
7d3f9c792c825251dad43d0ccc3b202efda91dd60d3192817d504d6859b9b937

SHA512
a45ab281b4fcf91ce94c021b34066c1ad1c42d5fdb9e891fbfaa001725a755123f3758c63ef85aa5da9df473c00877c119bec6f96664d884f233ca26a877900c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
754cc2bd06273da02fcc849555c585f5

SHA1
a43298b78d9558bc4813ae3526dae51cba6a7b02

SHA256
33f5f08cfb4515c98557f21a00f10e09d0eb7f63d8be13880ccda059bfb3e0f3

SHA512
c6dd968a94a3fb1f98cb27023787af635a6727257084913db1849c3383f5b99b54096198b661272082b271f211a5b120acaec1ac9ab7848c72bad0c3f959ecbb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe592b5c.TMP

Filesize
538B

MD5
69cf35f22cee58d6f5403f1c7bcc2687

SHA1
123f1ae93192999cd0edecbb674d8bb15a4e4a19

SHA256
35b32210354490154f371bc7ed8c952c5f8fbf1483bd5a3931bb208e4029c90f

SHA512
63fa90ea55edce2eaca16e2610805a35ff20830a0aef8a591c2c6ca5ad74eb7611f61a9046fc297d5f6a836f6862167e9bdc5066c52d958ad49dadb82f04ca48

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
8487953123d4bf5cbd2ee24f8e9b2044

SHA1
029b267519e13f37f688ff391bc7950c1e584b22

SHA256
14bf6bdf79c5c5e91e537bd31e6e3fc04437cff59cd02f9ab99aed57d9087d2b

SHA512
546c77cade7e75d0e4dd857b319e018c7d261e7e42fff7b24692ade0109a8c6bfc34bd42a091adade6a7d41a5451b1ee4c7ed4e588f1b757d1f403f285a7fc44

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpA856.tmp.bat

Filesize
152B

MD5
90f4618f78343100e7d3e47a2d81863b

SHA1
f034d3970c92d8436c694e655c3e21ddb9c7e606

SHA256
7fabf0dcedde7194b432cc51ae0d0034ad586d06fd1a851057f0f52c551f782c

SHA512
d64a58d7a5a094c881281d84f192799a372031806b38ca06a2195e34add7d0f5a3aff707c0a372a23f0ff758d591e06997a2b3447f15ef92ac59374a72ff42de

Download Submit
C:\Users\Admin\AppData\Roaming\hawktuah.exe

Filesize
63KB

MD5
6ae8830520e0bf079fc97aa207673ac6

SHA1
8eab31bfba85b5847573bda4257f79c607f0c297

SHA256
f368400a4f67b6f2390343181e5d1945967c6cd25088798984e6e4654a1b928c

SHA512
cb8e918f34780d91673fdcc6bf3a70d2a1bf82bafb62f59ab6fc0f98b5ee09a8ed404d99fee25a4d5f55f9b7c4a5dc280d41725c596e6ddb8fae158542f14596

Download Submit
memory/2816-0-0x00007FFEB3CD3000-0x00007FFEB3CD5000-memory.dmp

Filesize
8KB

Download
memory/2816-8-0x00007FFEB3CD0000-0x00007FFEB4791000-memory.dmp

Filesize
10.8MB

Download
memory/2816-7-0x00007FFEB3CD0000-0x00007FFEB4791000-memory.dmp

Filesize
10.8MB

Download
memory/2816-2-0x00007FFEB3CD0000-0x00007FFEB4791000-memory.dmp

Filesize
10.8MB

Download
memory/2816-1-0x00000000006F0000-0x0000000000706000-memory.dmp

Filesize
88KB

Download
memory/3204-16-0x000000001D530000-0x000000001D9FC000-memory.dmp

Filesize
4.8MB

Download
memory/3204-15-0x000000001D4B0000-0x000000001D526000-memory.dmp

Filesize
472KB

Download
memory/3204-17-0x000000001D450000-0x000000001D46E000-memory.dmp

Filesize
120KB

Download