Analysis

  • max time kernel
    148s
  • max time network
    154s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    14-05-2022 15:05

General

  • Target

    tmp.exe

  • Size

    10.6MB

  • MD5

    7e05c717f031c0725d0e18c1c1527dfb

  • SHA1

    3a1033293865a68cefb1c2d49104ab0e9d538758

  • SHA256

    874811e94570c18fe7516d26cbe1294b33ac8209c2f904bf10e81693b653dc56

  • SHA512

    5b2f72f0dffbf2cd97737347289afd1f54e135173d27e744e50f4f9a645b1f62c5cc9bb17ad5b1b23fa324f1ad9d42f78727def595acd67fd105a6154c716d7d

Score
8/10

Malware Config

Signatures

  • Executes dropped EXE 7 IoCs
  • Loads dropped DLL 38 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Modifies registry class 9 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\tmp.exe
    "C:\Users\Admin\AppData\Local\Temp\tmp.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:388
    • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\lzma.exe
      "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\lzma.exe" "d" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\JWrapper-JWrapper-00033611938-archive.p2.l2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\JWrapper-JWrapper-00033611938-archive.p2"
      2⤵
      • Executes dropped EXE
      PID:1876
    • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-JWrapper-00033611938-complete\lzma.exe
      "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-JWrapper-00033611938-complete\lzma.exe" "d" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\JWrapper-Windows32JRE-00028603591-archive.p2.l2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\JWrapper-Windows32JRE-00028603591-archive.p2"
      2⤵
        PID:2044
      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\unpack200.exe
        "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\unpack200.exe" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\ext\sunpkcs11.jar.p2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\ext\sunpkcs11.jar"
        2⤵
        • Executes dropped EXE
        PID:1892
      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\unpack200.exe
        "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\unpack200.exe" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\jsse.jar.p2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\jsse.jar"
        2⤵
        • Executes dropped EXE
        PID:848
      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\unpack200.exe
        "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\unpack200.exe" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\rt.jar.p2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\rt.jar"
        2⤵
        • Executes dropped EXE
        PID:1128
      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\javaw.exe
        "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\javaw.exe" "-Xshare:dump"
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:576
      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-JWrapper-00033611938-complete\lzma.exe
        "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-JWrapper-00033611938-complete\lzma.exe" "d" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\JWrapper-SimpleHelp Technician-00033663525-archive.p2.l2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\JWrapper-SimpleHelp Technician-00033663525-archive.p2"
        2⤵
          PID:1536
        • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe
          "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\technician.jar.p2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\technician.jar"
          2⤵
            PID:1068
          • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe
            "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\liquidlnf.jar.p2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\liquidlnf.jar"
            2⤵
              PID:908
            • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe
              "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\SimpleHelp TechnicianMacLauncher32.app\Contents\Resources\Java\osxwrapper.jar.p2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\SimpleHelp TechnicianMacLauncher32.app\Contents\Resources\Java\osxwrapper.jar"
              2⤵
                PID:1824
              • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe
                "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\SimpleHelp TechnicianMacLauncher32.app\Contents\Resources\Java\sevenzip.jar.p2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\SimpleHelp TechnicianMacLauncher32.app\Contents\Resources\Java\sevenzip.jar"
                2⤵
                  PID:2028
                • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe
                  "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\jwrapper_utils.jar.p2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\jwrapper_utils.jar"
                  2⤵
                    PID:1600
                  • C:\Windows\SysWOW64\cacls.exe
                    cacls "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWAppsSharedConfig\DetectedProxies" /t /e /g "Users":F
                    2⤵
                      PID:336
                    • C:\Windows\SysWOW64\cacls.exe
                      cacls "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWAppsSharedConfig\ProxyCredentials" /t /e /g "Users":F
                      2⤵
                        PID:1532
                      • C:\Windows\SysWOW64\cacls.exe
                        cacls "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-SimpleHelp Technician-00033663525-complete\JWrapper-SimpleHelp Technician-splash.png" /t /e /g "Users":F
                        2⤵
                          PID:1812
                        • C:\Windows\SysWOW64\cacls.exe
                          cacls "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWApps\SimpleHelp_TechnicianICO.ico" /t /e /g "Users":F
                          2⤵
                            PID:1116
                          • C:\Windows\SysWOW64\cacls.exe
                            cacls "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWApps\JWrapper-SimpleHelp Technician-UninstallerICO.ico" /t /e /g "Users":F
                            2⤵
                              PID:772
                            • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\SimpleHelp TechnicianLauncher.exe
                              "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\SimpleHelp TechnicianLauncher.exe" -cp "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-SimpleHelp Technician-00033663525-complete\technician.jar;C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-SimpleHelp Technician-00033663525-complete\liquidlnf.jar;C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-SimpleHelp Technician-00033663525-complete\jwrapper_utils.jar;" -Xmx256m -XX:MinHeapFreeRatio=15 -XX:MaxHeapFreeRatio=30 -Djava.util.Arrays.useLegacyMergeSort=true -Djava.net.preferIPv4Stack=true -Dsun.java2d.dpiaware=false jwrapper.JWrapper "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-SimpleHelp Technician-00033663525-complete\JWLaunchProperties-1652540807955-44"
                              2⤵
                              • Executes dropped EXE
                              • Loads dropped DLL
                              PID:908
                              • C:\Windows\SysWOW64\cacls.exe
                                cacls "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWApps\JRE-LastSuccessfulOptions-JWrapper-Windows32JRE-00028603591-complete" /t /e /g "Users":F
                                3⤵
                                  PID:2044
                              • C:\Windows\SysWOW64\cacls.exe
                                cacls "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWApps\ChosenLanguage" /t /e /g "Users":F
                                2⤵
                                  PID:1992
                                • C:\Windows\SysWOW64\cacls.exe
                                  cacls "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-SimpleHelp Technician-00033663525-complete\jwLastRun" /t /e /g "Users":F
                                  2⤵
                                    PID:1100
                                  • C:\Windows\SysWOW64\cacls.exe
                                    cacls "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-JWrapper-00033611938-complete\jwLastRun" /t /e /g "Users":F
                                    2⤵
                                      PID:560
                                    • C:\Windows\SysWOW64\cacls.exe
                                      cacls "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\jwLastRun" /t /e /g "Users":F
                                      2⤵
                                        PID:1088
                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\SimpleHelp Technician.exe
                                        "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\SimpleHelp Technician.exe" -cp "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-SimpleHelp Technician-00033663525-complete\technician.jar;C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-SimpleHelp Technician-00033663525-complete\liquidlnf.jar;C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-SimpleHelp Technician-00033663525-complete\jwrapper_utils.jar;" -Xmx256m -XX:MinHeapFreeRatio=15 -XX:MaxHeapFreeRatio=30 -Djava.util.Arrays.useLegacyMergeSort=true -Djava.net.preferIPv4Stack=true -Dsun.java2d.dpiaware=false jwrapper.JWrapper "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-SimpleHelp Technician-00033663525-complete\JWLaunchProperties-1652540838266-46"
                                        2⤵
                                        • Executes dropped EXE
                                        • Loads dropped DLL
                                        • Modifies registry class
                                        • Suspicious use of SetWindowsHookEx
                                        PID:1900
                                        • C:\Windows\SysWOW64\cacls.exe
                                          cacls "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWApps\JRE-LastSuccessfulOptions-JWrapper-Windows32JRE-00028603591-complete" /t /e /g "Users":F
                                          3⤵
                                            PID:336

                                      Network

                                      MITRE ATT&CK Matrix ATT&CK v6

                                      Discovery

                                      System Information Discovery

                                      1
                                      T1082

                                      Replay Monitor

                                      Loading Replay Monitor...

                                      Downloads

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWAppsSharedConfig\DetectedProxies
                                        Filesize

                                        4B

                                        MD5

                                        f1d3ff8443297732862df21dc4e57262

                                        SHA1

                                        9069ca78e7450a285173431b3e52c5c25299e473

                                        SHA256

                                        df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119

                                        SHA512

                                        ec2d57691d9b2d40182ac565032054b7d784ba96b18bcb5be0bb4e70e3fb041eff582c8af66ee50256539f2181d7f9e53627c0189da7e75a4d5ef10ea93b20b3

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWAppsSharedConfig\ProxyCredentials
                                        Filesize

                                        4B

                                        MD5

                                        f1d3ff8443297732862df21dc4e57262

                                        SHA1

                                        9069ca78e7450a285173431b3e52c5c25299e473

                                        SHA256

                                        df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119

                                        SHA512

                                        ec2d57691d9b2d40182ac565032054b7d784ba96b18bcb5be0bb4e70e3fb041eff582c8af66ee50256539f2181d7f9e53627c0189da7e75a4d5ef10ea93b20b3

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWApps\JWrapper-SimpleHelp Technician-UninstallerICO.ico
                                        Filesize

                                        48KB

                                        MD5

                                        3629d03fef69370d6933829d175147a5

                                        SHA1

                                        52320b01ee8c0cf248b60180eb8046ab350fe548

                                        SHA256

                                        85f2b156d63d64d4e9998f2e8207a03c096b8aed5b1631823dff36c2e89c52e6

                                        SHA512

                                        f3cb0a706e8ec58795d99f0d3476098872e63c45fd3b50f0b6ceafc632b5f9db74ca8c5e1813c50600e7e235f285157c36a0d7cab099ff2257aa8286224b1fd1

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWApps\SimpleHelp_TechnicianICO.ico
                                        Filesize

                                        41KB

                                        MD5

                                        74bdecd5e52771137f96659f06de7349

                                        SHA1

                                        480200480c34ab8279fb76c5a3737be801a9b347

                                        SHA256

                                        c1a238d4e0d67d687017abf89f547587803b7efcb4087f499f8fb0a128b3febb

                                        SHA512

                                        74547779b51469b7494ae6ab623a9c99d64092e01c339709780b95647b64c388312987524ef75bc78e963c68ce20a130711b7ba6409e8be94ed0fd3b8aa41526

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-SimpleHelp Technician-00033663525-complete\JWrapper-SimpleHelp Technician-splash.png
                                        Filesize

                                        8KB

                                        MD5

                                        08051133e368d61036576d3ed5b9cc14

                                        SHA1

                                        817e7a73eb33ab39e3c4d8c99a00c9d05c64f5c5

                                        SHA256

                                        5ac80b373a7de315cc803eea0fc640335369df062de52b53c2a4175af2c0a2a7

                                        SHA512

                                        93400dc7b885e2f51942ccba11ed7f1ebc82b9d726aa3b5c11ea118bfa93d20594243449ce37195cf72387064514c01d0d2d38776d7d049e148050edf873b7ce

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\client\classes.jsa
                                        Filesize

                                        11.8MB

                                        MD5

                                        d44983103334a714197fd5fb87d0a45d

                                        SHA1

                                        a5572b1e25dfb3013c5f738d3c3275243a917fc2

                                        SHA256

                                        a4f742c1883d0a57c3cec01084636f72195c6e58911308956b03a4c9c81fa7fa

                                        SHA512

                                        70250107fe2484cac422d09185fa6eaaf81eb375460fe5dbc4dec297c7db5ccdb75d8ba498cc84a08382dd8b777ff4cfe425e9259d24319bdc1ef87138607472

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\JWrapper-JWrapper-00033611938-archive.p2
                                        Filesize

                                        2.0MB

                                        MD5

                                        9b5606227a77c282875f52f76c070bc4

                                        SHA1

                                        0287a157aa6ef8f6c51be0fef43b7aab1dfea226

                                        SHA256

                                        4904c9597183806621d087311fe47a1e5fb9f4f5ccf5d7ab38d7600c301169af

                                        SHA512

                                        934f044bcb6b6e8a9ff098c29b12aee3f428c6fc15fb41687ab0fe6ba74386f9e6f6a00365a38e346b7010cd6528fa4caddf28d5e54c400997aded2ccd9b2917

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\JWrapper-JWrapper-00033611938-archive.p2.l2
                                        Filesize

                                        632KB

                                        MD5

                                        4e0277df32caa97d95f845eb5d3b4272

                                        SHA1

                                        f38f0dce54d96a12ec6f86243ef319525975b80d

                                        SHA256

                                        b3c206abdae9350977c0fa3368d93386cd402b72553b1e08bcb76a1616d19e0c

                                        SHA512

                                        d3e49154898bdce7d4922add1cfe230f60c39fcec658b529d3610060fee2a8110b3802b21d75f8729ff2ee9bb2b1b63001826a8430d85a226d198ff54b2a9b14

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\JWrapper-SimpleHelp Technician-00033663525-archive.p2
                                        Filesize

                                        10.9MB

                                        MD5

                                        632ec91c34a4a7c3dac13e06eac81d97

                                        SHA1

                                        27a8f87bf6b67f705c0557afaf356eda2e280542

                                        SHA256

                                        01c4805cfe58054ed7cadcee2f35109d3e4d2236ed95470748d05b2fcb15e491

                                        SHA512

                                        aa1c756ed0de0013bda0df69ddc2ee5a980d9a8a575fa3f50a862a7dc017bb234fb4563071ed212da6417d63e624b9b11a2e10a1b3ea0cf9a81969cec2908cc6

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\JWrapper-SimpleHelp Technician-00033663525-archive.p2.l2
                                        Filesize

                                        3.4MB

                                        MD5

                                        aa56b6dd3716e84d0e3f14cf3f117ae1

                                        SHA1

                                        72ab8281b516dbbad0ef2e3e10ad719cd61d2b70

                                        SHA256

                                        90e576c86e3fb1b26d0d8c9f9c6fd7aa0b766303f48b6b8848eba421a1686f09

                                        SHA512

                                        3c5a41412147ba42d6b337b4578afe0e7e5dcc170e9e866ab8c793ca29b448715549a578e524e94695b91a4b7c9e49e2c4d9831baaeddc225a766487b4f64f60

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\SimpleHelp TechnicianMacLauncher32.app\Contents\Resources\Java\osxwrapper.jar
                                        Filesize

                                        792KB

                                        MD5

                                        8501c5dba159f6f9ba97fca621add660

                                        SHA1

                                        9fae3876e083032b1f1531f858c58a000c017789

                                        SHA256

                                        217c986b8720b74fd8f86cda450f4d336c5adb823ac49906eea9916a30df6bb3

                                        SHA512

                                        e46569785a449707f3b0729b58dabf1cfc7a2146aa984c30e168fc38cb4f61dd7a26bb7e35911538e1e167910a0226da7c96850b35e94cb0322e6c9f55bc836a

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\SimpleHelp TechnicianMacLauncher32.app\Contents\Resources\Java\osxwrapper.jar.p2
                                        Filesize

                                        536KB

                                        MD5

                                        f13c13f12aa2eb1a5f8ef5c6cd43e828

                                        SHA1

                                        7e3a146edbd4502d76f642688fb705021e73f2ba

                                        SHA256

                                        afb79c2858308bb7184943fdd80cd51e6054de73661dbf23c82067c0f130cc1a

                                        SHA512

                                        6c8fc23045ad24b00c217a34ae5cb997548b56506fc221b3da6719234a0fe1a0bc6a39bccbbc90dec03ee6cf47ae4b29fde0aba21ea2c56a2eb72b57321a40da

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\SimpleHelp TechnicianMacLauncher32.app\Contents\Resources\Java\sevenzip.jar
                                        Filesize

                                        86KB

                                        MD5

                                        899d94af414a62dfc3658daaf3578e64

                                        SHA1

                                        e3feba8ca39701857b03756b4bae5a8185cdc8cb

                                        SHA256

                                        6c8ef378880fd0d72075f0a6b7d9efff85b3cd9168c452c6f429ecdce429c840

                                        SHA512

                                        ca4bd9f9b9b53737ac7cc955f693cfeb7a1b4e0a925b4b2701e13647fc35f74c22ff2b2d3c94cc5620c23bdbce246b5a423f215688bae7c22ee010b56c469849

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\SimpleHelp TechnicianMacLauncher32.app\Contents\Resources\Java\sevenzip.jar.p2
                                        Filesize

                                        33KB

                                        MD5

                                        66f7a65d140e99e800b2bd07c317b9a6

                                        SHA1

                                        2996e1daf17586ce951dc52703b54059457e792e

                                        SHA256

                                        be0c15e4adbddcab0e10550e345558c75944902f78d95b5fc4682f7e7e86021b

                                        SHA512

                                        dc62437a664db8fdbbc376210faeda7b77df092d35a5919e981d32a79f511706621439dc16c896926cd5928724054418aaa24f7dd74554f8e7e20bd1836950c4

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\jwrapper_utils.jar
                                        Filesize

                                        1.8MB

                                        MD5

                                        6fe1905f52cf7712f375154c9e12d996

                                        SHA1

                                        e5aed036c09399628d6cfdcbaead67f912f331b0

                                        SHA256

                                        34c093ff70cbbed59b907f7da12d6d015c477fcc88d11ae5608ada130e4d5dda

                                        SHA512

                                        ef77c9bfc609fe71679fbd36eb1d03c52315ea6630a048937044117777514e6357174fe1205b25a3b77731757c484cc0353b5e0b4c0e46e91cc093cfe868202f

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\jwrapper_utils.jar.p2
                                        Filesize

                                        662KB

                                        MD5

                                        b5c05459578b6088a9aed27955e58930

                                        SHA1

                                        2c0eaff3680a598af6220154dcf05910eb9302ef

                                        SHA256

                                        3e85f20efa00608f11c057f131bc56c7bb227cb7e1775d1d6a7b3d0f15db1cee

                                        SHA512

                                        53134fa43e868f6247a1efa01a6851e45538670d3a744536bdb227b8dd28a6b309fb5cf9a2ed1eb3283440a6363757cc4772bfac12ca388121c352896b377f48

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\liquidlnf.jar
                                        Filesize

                                        308KB

                                        MD5

                                        4493e756bc5c08363172cf745707e52b

                                        SHA1

                                        178445f2dc6a709a73457c003735d63897f8f3f6

                                        SHA256

                                        f8e345a075f71d333650f4da54cd30140d0da69ab424c9c79cebd40080251692

                                        SHA512

                                        2bc58a91c690d181c64014aa5428e52c4eaa30d2b888975fbe7cf19f3228203cde0570419151bfcbf95ef3058ce7b37b3ebb46e80c3b052c1a8dc6fadd085ade

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\liquidlnf.jar.p2
                                        Filesize

                                        244KB

                                        MD5

                                        c602c315cf0a159b92a5f08fed2b8810

                                        SHA1

                                        463c17b2d0b5f59c13792f0c008777580036c9ee

                                        SHA256

                                        2a303d52186eb88bdce7580fe0e7fc8ca081ed7efeef590f9ccb2416cb72b33a

                                        SHA512

                                        b29c09fa59d615f68e2e4cd0c4fd07b210a00c020469e5e735a69d648336f995090d4d6648203289b244e7ea2df02b44060ba8fd88e53f6052d237d550ee6b3c

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\lzma.exe
                                        Filesize

                                        71KB

                                        MD5

                                        e59aa0e52e93c781dcdab8ad7cc4054c

                                        SHA1

                                        1be9c2d8b48d6e0c8a7cab6013cc36ea42ec421e

                                        SHA256

                                        410bfdaddee3767151296fe4f16052c39546151916f05bbe4ae1c6b698b18f0f

                                        SHA512

                                        d0be3580640bb2cca0c097ec2154132eeefd2b2b4b0e45027cc303c47a42f5c545d5f50182c70a69b5d1673112d24f8ae320d097d7034e810dbc0a5128b09050

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\technician.jar
                                        Filesize

                                        10.4MB

                                        MD5

                                        0ccd0ceb2a08e5f508c2be9613dc0965

                                        SHA1

                                        5aa7a6ba0d250cfa9442361f8504784119d69ecd

                                        SHA256

                                        28d3d24c518314c848056dfd220669b802d40769e0bae4debeda5287941a0ce6

                                        SHA512

                                        2e595bc10b11bbc434a01a20d6e843c750dbe143d8e90c64398b82807c1a45148277580339ce764b5af32ee91edea75dcc896e93fa9a71a1f2cb00f413d3d250

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\technician.jar.p2
                                        Filesize

                                        4.1MB

                                        MD5

                                        f6e7554e76e8f67200f43fca0a1fffdb

                                        SHA1

                                        67c93564f8e6d67a0fb59471d22583037853af8a

                                        SHA256

                                        c8387e7f000632bfd9f116a71c3d0e407f0707160a1c3e4c904b4477ae78c295

                                        SHA512

                                        33ab04236875cf9976b8f70d8d0f7a8baa5b46e9e5e81b9b1f0a4d98cb34fe70d9b05e72c5b14bafdc8f6ee1e80cbc90ab4947a262aa19502c8c22e8152b37d6

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\JWrapper-Windows32JRE-00028603591-archive.p2
                                        Filesize

                                        17.0MB

                                        MD5

                                        5fef40dac50c383c0450c3bad9e88526

                                        SHA1

                                        6d74345c8b22d310e9e7f632354fe8ca59ce5ac7

                                        SHA256

                                        f621e8a75ba7f1a745bcb9e76a7741eca9502cb39435e763354392e5e2178e67

                                        SHA512

                                        cfc7d0f90c40503910ac15fe51f60c335b59cb89ec66705aa467d8fef018e94ffd2186ab43ea0c0db9f2743e4b58eeedb4e73598dcc408a323071c10c3b4058d

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\JWrapper-Windows32JRE-00028603591-archive.p2.l2
                                        Filesize

                                        5.9MB

                                        MD5

                                        46a5a20549c8750877ff4e0d36fcc2ea

                                        SHA1

                                        be876202268b64ccf4e12897ba96c81ddf6edcd7

                                        SHA256

                                        8362da08b29701d146a62fd0c2005512bad96fd7b95a2eb39338b4dbaec367e9

                                        SHA512

                                        3ce39c852886b9375a8b7c7a047f6a37a5b3eaf28149371ec4697400f95230f3e0f34dbe3ba0051935b9a9434f25eef802dc89fd9a0c0bd8f6d07ed9b1c166e7

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\client\jvm.dll
                                        Filesize

                                        1.6MB

                                        MD5

                                        c9c4c710990b34b3c851e76a56360fc9

                                        SHA1

                                        a1d7bbf2e6f198b2af725eb469b6d41d6ac979c1

                                        SHA256

                                        b6ed5d2218569e924930dd2a84536001ef34f89698b6c65140f05b1873266434

                                        SHA512

                                        d03f1827b5f3ad687a7f0664c537a8dfe090d97cce67f3d7970780777497b4fd1cbbfe893fbed1d3d4e39ed71a27b547c388685ea8d1c6fdbd673ecd87dad8b6

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\hpi.dll
                                        Filesize

                                        32KB

                                        MD5

                                        7f4f5d189ec48566d9d8c2ebaed68c74

                                        SHA1

                                        8ba4ab69b6a453640708ba8337e53d01ce041834

                                        SHA256

                                        ad9a3a3949742995b9b2b302e99b9a15a5c0211acccbdf4d6a9f86a69a3f305a

                                        SHA512

                                        52b461a23c4377974494a1b57f49e8c32e072e933be59f36900290f518504f7d42189e22aab7a51dcda128d0606bcd9c0a85404340313ac322e39db36828da13

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\java.dll
                                        Filesize

                                        116KB

                                        MD5

                                        3b3613ae9a31e5099ff803b8c858a86d

                                        SHA1

                                        5cc6c08550cd2f4ef6d37d521c7891051413f16d

                                        SHA256

                                        5a5e216f287cbcaf7a4ba8ccb8fcb3dae0b05378d89ba6a70f1d50b394306796

                                        SHA512

                                        ed360d73fcc2362129ff4e2c52f8fdf84970598f49be081740e7ed23d23fa8cdf7a01d13cbe2b8cff3fa0d2ecc7455487f98e827eabc2c0d76037e1d4afef365

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\javaw.exe
                                        Filesize

                                        52KB

                                        MD5

                                        141c0ddc4b7aa9287d1dea52c9525445

                                        SHA1

                                        b01e93615748020869be5f7dc73be6803ac18619

                                        SHA256

                                        9dee589ab11824cf051afbf5ba0d30e38a464571d23edb14f0ea9b6bdf9fc57c

                                        SHA512

                                        c5d7c14e11ea613b1c4b2a796254142136112b5682fccb1ebafbbc014601e5b103f8ab7a5d3a9d4b319a379741fb0bbffa6a214a142931e4f17aecdd54112a54

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\unpack200.exe
                                        Filesize

                                        124KB

                                        MD5

                                        0ac355d4114bcd53ad9aa4a01055c44f

                                        SHA1

                                        3a7c3c936a73de1c414b08391b37fe9c106990da

                                        SHA256

                                        80b00b9c76c491322779d0c2ef3fb0bb6d9609b7a73eb85e1bb08ebb76c049aa

                                        SHA512

                                        f18886f522c226e379166a7dd9cae600f000b696aa31ac9c7e54e76b7a74de226127637eb7cd8de3bb454883a0b82cb1b6236f8180296e6dc42d8a228e6933b4

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\unpack200.exe
                                        Filesize

                                        124KB

                                        MD5

                                        0ac355d4114bcd53ad9aa4a01055c44f

                                        SHA1

                                        3a7c3c936a73de1c414b08391b37fe9c106990da

                                        SHA256

                                        80b00b9c76c491322779d0c2ef3fb0bb6d9609b7a73eb85e1bb08ebb76c049aa

                                        SHA512

                                        f18886f522c226e379166a7dd9cae600f000b696aa31ac9c7e54e76b7a74de226127637eb7cd8de3bb454883a0b82cb1b6236f8180296e6dc42d8a228e6933b4

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\unpack200.exe
                                        Filesize

                                        124KB

                                        MD5

                                        0ac355d4114bcd53ad9aa4a01055c44f

                                        SHA1

                                        3a7c3c936a73de1c414b08391b37fe9c106990da

                                        SHA256

                                        80b00b9c76c491322779d0c2ef3fb0bb6d9609b7a73eb85e1bb08ebb76c049aa

                                        SHA512

                                        f18886f522c226e379166a7dd9cae600f000b696aa31ac9c7e54e76b7a74de226127637eb7cd8de3bb454883a0b82cb1b6236f8180296e6dc42d8a228e6933b4

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\verify.dll
                                        Filesize

                                        48KB

                                        MD5

                                        95c10f3184ed7aa45709f7cd70b49589

                                        SHA1

                                        1096dc0c79d201b7bd77e0399c6b8d86bc1f8a6f

                                        SHA256

                                        e6f4b6e25a2bc7fc03a73032c60138410b30ac528c7d10da87ea612e52a7b736

                                        SHA512

                                        211c522ccdeee5145cf1cddc9806c79915d16ac1d2614c3bcf75d776d61c314c66ebef53f90aae5218ad472c15fba12f0ad0d19f0dfbb022fd36462e480de637

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\zip.dll
                                        Filesize

                                        60KB

                                        MD5

                                        19984073548bc33fc67c04aa277cdd44

                                        SHA1

                                        64189f2f71e40ae2794dcfb2df53056a82aa33c2

                                        SHA256

                                        f450c1a55a143d35b8b330c7538c22b8781d729aa947e27cbc2afc4e19434686

                                        SHA512

                                        b08ac43a0c6f12301339c30717908989ffe8bc3cf3889bcd347e83dbdc6fb21150d715da8525edd800015122c417da0870d08affbf35b5496410e36b913c5022

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\classlist
                                        Filesize

                                        76KB

                                        MD5

                                        ef2f77d23cd37746737f2f34f953b27c

                                        SHA1

                                        d3fc136fcf5421f31bf379a57f55fdb76450461d

                                        SHA256

                                        c5f11846410444f7eba84742a71d0693f4e25439af58e1ce7db41e21b7806e77

                                        SHA512

                                        66a1729bddc5a8dc8bc47c00c9a59f1d99f282c42dc177d58f11d283437209764e795168aaac03b2c00aff013d1329163faa6406cca8b08cfb6a8679a57e4bb5

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\ext\sunpkcs11.jar
                                        Filesize

                                        166KB

                                        MD5

                                        25edf09d6b9a5fd1fecce20e16cd955c

                                        SHA1

                                        425cb995e9fbe57ee915ffd53a2457cde46f496d

                                        SHA256

                                        0cd8fdfbab6d535c5caec7f70d5dd425d6a7ef6bf953b44e81db7220b8cfcffd

                                        SHA512

                                        02b1f9a4e76257d913ce4280e28c3ef6677e118e329b08cd60c34f28dd57ee99f7a85ec0879ee0cdab36926447dd81771b7c142882fb650d5ed5a5cc407f2f3d

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\ext\sunpkcs11.jar.p2
                                        Filesize

                                        120KB

                                        MD5

                                        1e3aae27c091733c0df95b1762ed5a92

                                        SHA1

                                        d8d865d9c26ff76651cd81d2e253d50a67ff6718

                                        SHA256

                                        dec4fac179d022add2f72f08286ea74687180e3b26f1c79e2c54aa3e815f4636

                                        SHA512

                                        123d55ceb49d93312af5b28e04b9ba6ce24e635e230ca0e6798ab3048f883c58f03c4236d675a56e3163b06825063bd5a0affca35b620e69ba23db5a2c27ac6d

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\i386\jvm.cfg
                                        Filesize

                                        695B

                                        MD5

                                        8d52e756ca8cbe07741e1640b38a0f87

                                        SHA1

                                        bde0eca45c0d1b0be7250245eaa55487384c8bd3

                                        SHA256

                                        db32e24f9ab72c2a30e2cd2f80300b3640b8f04d2cf7dcd86fb15261ba46983c

                                        SHA512

                                        f1faa89f350da7d656d80aa8642e773af4cc5481719b627f3b2d313b03845a78b4700c77e25583e4157fda599745e2f4a06dd71adfb64d7294bfb9ef6e2865c6

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\jce.jar
                                        Filesize

                                        80KB

                                        MD5

                                        8bfb4f2b5a7db5c2f66029cebcda61af

                                        SHA1

                                        544317c36b07e20b091ed1c276a1fba20719a696

                                        SHA256

                                        8c18142a4f95801050b8bddb632fa46b6c77f8937733b1b352ae71fde0d5f0ea

                                        SHA512

                                        06fc3734cfd6778b1f389fb111079ffd959798cfffcf799c563f228c70280373f7e412d2258f0abeeffe0979b3a4295ed123c0992e9fe724c5e6505e14db096b

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\jsse.jar
                                        Filesize

                                        474KB

                                        MD5

                                        3902fa042a832f116c4bbdb8ac260396

                                        SHA1

                                        bbf56369190cd403dffc6114121bc93ef1f8bd94

                                        SHA256

                                        87d8858ed9ba36a65a71410816d041f878d61732be37c00a5521596d5d729b4d

                                        SHA512

                                        f79c93b40d109525d65b008d495751aa85ca9b43e32697028979da597c9ea5d265fd7b23b4979d1e874555768e375e56ada9cdafce776a2acfcb934e94be9706

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\jsse.jar.p2
                                        Filesize

                                        115KB

                                        MD5

                                        41789f3bfea0465b6b5dfdbe133fe342

                                        SHA1

                                        0061d61370170afdc3984d2e0016c5b8d10b3946

                                        SHA256

                                        3f1931393c34b8828c37668bb34891cabce89a4caad9d2a1e8ad07b0c2f205c6

                                        SHA512

                                        2f6f8d579d9806d8b8a6c2e582e065a889c02347f8141e79c02ba238d100a11e2a491f1f915fc95bb297b0be498a2e3c2267bc78d10b9578c40c11f53f166735

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\rt.jar
                                        Filesize

                                        32.6MB

                                        MD5

                                        7dadc17907c9e2aeb4dc7a9faccfceec

                                        SHA1

                                        19ff33fb9bd10a53b201c2ea6c4e537838534880

                                        SHA256

                                        1ea594712c7e982dc297e0da402473a8f9c0ed75bdb357594c7eab4857d568e1

                                        SHA512

                                        14311a2fa97cf9b623ab9aaffbecd06aecf584d6b7312eef6b3b125d7e42e4eebe79a7b906903306a05c9ba9f6d0facf0ce94bcd69928f123989cf0ad7291037

                                      • C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\rt.jar.p2
                                        Filesize

                                        8.8MB

                                        MD5

                                        28b0cedfa214a6db37e63dedd60fe70b

                                        SHA1

                                        f6ef31e6bab599eb0d83d4e7cb9cd906dda56137

                                        SHA256

                                        69e611fffa7d26b950a2b53899f938730fa29ad0f30800260f62fa31c048097d

                                        SHA512

                                        f5b0c967af2e324847da01c6c373ed13558988edea4d36f7167b744e3648e208c9b959cc24626c9d9b05cd8a37e8035d3ce01f27bba13903ddf56a94701f8b29

                                      • \Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-JWrapper-00033611938-complete\jwutils_win32.dll
                                        Filesize

                                        88KB

                                        MD5

                                        c7680de321eceddacc1e2e6d9910dd35

                                        SHA1

                                        fe95e8b5e8e0a498339a85c813035bad514d503d

                                        SHA256

                                        f03270776b3257f61f75931093565d59760c0316e1865a8c52088ef50c92bde5

                                        SHA512

                                        96a33586273865fe91f5c46b1694c10b8a009fc0eb603bc3f88ff204dea9d6c0a604e5e29034e4229e625a7ebe12aa1427e666a3e567e2a96fe1662b1ab357ea

                                      • \Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\SimpleHelp TechnicianLauncher.exe
                                        Filesize

                                        52KB

                                        MD5

                                        141c0ddc4b7aa9287d1dea52c9525445

                                        SHA1

                                        b01e93615748020869be5f7dc73be6803ac18619

                                        SHA256

                                        9dee589ab11824cf051afbf5ba0d30e38a464571d23edb14f0ea9b6bdf9fc57c

                                        SHA512

                                        c5d7c14e11ea613b1c4b2a796254142136112b5682fccb1ebafbbc014601e5b103f8ab7a5d3a9d4b319a379741fb0bbffa6a214a142931e4f17aecdd54112a54

                                      • \Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\SimpleHelp TechnicianLauncher.exe
                                        Filesize

                                        52KB

                                        MD5

                                        141c0ddc4b7aa9287d1dea52c9525445

                                        SHA1

                                        b01e93615748020869be5f7dc73be6803ac18619

                                        SHA256

                                        9dee589ab11824cf051afbf5ba0d30e38a464571d23edb14f0ea9b6bdf9fc57c

                                        SHA512

                                        c5d7c14e11ea613b1c4b2a796254142136112b5682fccb1ebafbbc014601e5b103f8ab7a5d3a9d4b319a379741fb0bbffa6a214a142931e4f17aecdd54112a54

                                      • \Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\awt.dll
                                        Filesize

                                        1.3MB

                                        MD5

                                        d68a6b4ec67373433e72c26517c32b2f

                                        SHA1

                                        0cbe4c775194b5bc3b59392408d29b097a1ba664

                                        SHA256

                                        f2a7465215f298ec9c604c59ee9cf720560e106b478c425056d13c40e65b1bb8

                                        SHA512

                                        d9debe367be76c5de51a4faf4e68efb9c8c8c34d4c4a62ceb005d7b05a852f6d349354fd023baefcbc697d0ac3a893b44e500f26ebfbe0e1fb7f704a67a4beb0

                                      • \Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\cmm.dll
                                        Filesize

                                        188KB

                                        MD5

                                        42b2f3248d3a71f9491e518c5d30861e

                                        SHA1

                                        51fd120c1f30e7ade09d1c730224da5f9093f57d

                                        SHA256

                                        d809c0dafe1021f890c988c3974f157513b974d6af09f64028a1ebd6e1a4c745

                                        SHA512

                                        8ec139b0e5b647ac3ff8969146405292fccebe31c21e8cb5e5be553d2042de5c7c60897eef1d7af6d8265031adbfb62e95752f1acc81f837c5f079651b811fda

                                      • \Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\fontmanager.dll
                                        Filesize

                                        320KB

                                        MD5

                                        299dcba6f0a9ef5aca70f8b6e032017c

                                        SHA1

                                        cd7f8d02db7403cf364a6267d0f5d588e202692b

                                        SHA256

                                        de5df116cfac6d2dd28c61e25924a18d9f2c201940c2831deb70c6a5bcd17461

                                        SHA512

                                        4c3ff3bde8b8f621ea26a9ad2ed259314d83b515877f3b04e1fc66578bfd99e69966451b29c67bad7a301ae57ccd36d209d949b708d7820dba051e4dcfb627c8

                                      • \Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\jpeg.dll
                                        Filesize

                                        128KB

                                        MD5

                                        4ee73ef7e9f4593e7d1685aac04c312f

                                        SHA1

                                        20b293ac19c5a23d8d7618d72bb14bb993dea2fd

                                        SHA256

                                        a5af9e5407dd2993ff7f1ef589ac8edfb7482a495a434953307cffedfbd8cfbc

                                        SHA512

                                        d7d40950f1522216adf3d169e13600a9fbe579940a41220dbe423a4f2ed5bb868faa895b84c9d20dfc428fc5ed9d372eceab09d8f67c99562d2cef71d2dbfa70

                                      • \Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\net.dll
                                        Filesize

                                        76KB

                                        MD5

                                        c0abcbae12150c44bc99791b28f8bf41

                                        SHA1

                                        ce4a1f1c5177021d49f07f784adc64cf2468b187

                                        SHA256

                                        21c8c8d6e73e4383ef4cc2ea3dee140f6d8b460da78a04d3604c27bd55218edf

                                        SHA512

                                        357435ad7b6aa1d51773ac654e8c8dd9f0a7485f68a16c202172558cf9a1d27520674375319e5e79e2af6288fc5de8c62e26ebb763401e3ca75539b1b802adb7

                                      • \Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\lzma.exe
                                        Filesize

                                        71KB

                                        MD5

                                        e59aa0e52e93c781dcdab8ad7cc4054c

                                        SHA1

                                        1be9c2d8b48d6e0c8a7cab6013cc36ea42ec421e

                                        SHA256

                                        410bfdaddee3767151296fe4f16052c39546151916f05bbe4ae1c6b698b18f0f

                                        SHA512

                                        d0be3580640bb2cca0c097ec2154132eeefd2b2b4b0e45027cc303c47a42f5c545d5f50182c70a69b5d1673112d24f8ae320d097d7034e810dbc0a5128b09050

                                      • \Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\lzma.exe
                                        Filesize

                                        71KB

                                        MD5

                                        e59aa0e52e93c781dcdab8ad7cc4054c

                                        SHA1

                                        1be9c2d8b48d6e0c8a7cab6013cc36ea42ec421e

                                        SHA256

                                        410bfdaddee3767151296fe4f16052c39546151916f05bbe4ae1c6b698b18f0f

                                        SHA512

                                        d0be3580640bb2cca0c097ec2154132eeefd2b2b4b0e45027cc303c47a42f5c545d5f50182c70a69b5d1673112d24f8ae320d097d7034e810dbc0a5128b09050

                                      • \Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\client\jvm.dll
                                        Filesize

                                        1.6MB

                                        MD5

                                        c9c4c710990b34b3c851e76a56360fc9

                                        SHA1

                                        a1d7bbf2e6f198b2af725eb469b6d41d6ac979c1

                                        SHA256

                                        b6ed5d2218569e924930dd2a84536001ef34f89698b6c65140f05b1873266434

                                        SHA512

                                        d03f1827b5f3ad687a7f0664c537a8dfe090d97cce67f3d7970780777497b4fd1cbbfe893fbed1d3d4e39ed71a27b547c388685ea8d1c6fdbd673ecd87dad8b6

                                      • \Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\hpi.dll
                                        Filesize

                                        32KB

                                        MD5

                                        7f4f5d189ec48566d9d8c2ebaed68c74

                                        SHA1

                                        8ba4ab69b6a453640708ba8337e53d01ce041834

                                        SHA256

                                        ad9a3a3949742995b9b2b302e99b9a15a5c0211acccbdf4d6a9f86a69a3f305a

                                        SHA512

                                        52b461a23c4377974494a1b57f49e8c32e072e933be59f36900290f518504f7d42189e22aab7a51dcda128d0606bcd9c0a85404340313ac322e39db36828da13

                                      • \Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\java.dll
                                        Filesize

                                        116KB

                                        MD5

                                        3b3613ae9a31e5099ff803b8c858a86d

                                        SHA1

                                        5cc6c08550cd2f4ef6d37d521c7891051413f16d

                                        SHA256

                                        5a5e216f287cbcaf7a4ba8ccb8fcb3dae0b05378d89ba6a70f1d50b394306796

                                        SHA512

                                        ed360d73fcc2362129ff4e2c52f8fdf84970598f49be081740e7ed23d23fa8cdf7a01d13cbe2b8cff3fa0d2ecc7455487f98e827eabc2c0d76037e1d4afef365

                                      • \Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\java.dll
                                        Filesize

                                        116KB

                                        MD5

                                        3b3613ae9a31e5099ff803b8c858a86d

                                        SHA1

                                        5cc6c08550cd2f4ef6d37d521c7891051413f16d

                                        SHA256

                                        5a5e216f287cbcaf7a4ba8ccb8fcb3dae0b05378d89ba6a70f1d50b394306796

                                        SHA512

                                        ed360d73fcc2362129ff4e2c52f8fdf84970598f49be081740e7ed23d23fa8cdf7a01d13cbe2b8cff3fa0d2ecc7455487f98e827eabc2c0d76037e1d4afef365

                                      • \Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\java.dll
                                        Filesize

                                        116KB

                                        MD5

                                        3b3613ae9a31e5099ff803b8c858a86d

                                        SHA1

                                        5cc6c08550cd2f4ef6d37d521c7891051413f16d

                                        SHA256

                                        5a5e216f287cbcaf7a4ba8ccb8fcb3dae0b05378d89ba6a70f1d50b394306796

                                        SHA512

                                        ed360d73fcc2362129ff4e2c52f8fdf84970598f49be081740e7ed23d23fa8cdf7a01d13cbe2b8cff3fa0d2ecc7455487f98e827eabc2c0d76037e1d4afef365

                                      • \Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\javaw.exe
                                        Filesize

                                        52KB

                                        MD5

                                        141c0ddc4b7aa9287d1dea52c9525445

                                        SHA1

                                        b01e93615748020869be5f7dc73be6803ac18619

                                        SHA256

                                        9dee589ab11824cf051afbf5ba0d30e38a464571d23edb14f0ea9b6bdf9fc57c

                                        SHA512

                                        c5d7c14e11ea613b1c4b2a796254142136112b5682fccb1ebafbbc014601e5b103f8ab7a5d3a9d4b319a379741fb0bbffa6a214a142931e4f17aecdd54112a54

                                      • \Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\javaw.exe
                                        Filesize

                                        52KB

                                        MD5

                                        141c0ddc4b7aa9287d1dea52c9525445

                                        SHA1

                                        b01e93615748020869be5f7dc73be6803ac18619

                                        SHA256

                                        9dee589ab11824cf051afbf5ba0d30e38a464571d23edb14f0ea9b6bdf9fc57c

                                        SHA512

                                        c5d7c14e11ea613b1c4b2a796254142136112b5682fccb1ebafbbc014601e5b103f8ab7a5d3a9d4b319a379741fb0bbffa6a214a142931e4f17aecdd54112a54

                                      • \Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\unpack200.exe
                                        Filesize

                                        124KB

                                        MD5

                                        0ac355d4114bcd53ad9aa4a01055c44f

                                        SHA1

                                        3a7c3c936a73de1c414b08391b37fe9c106990da

                                        SHA256

                                        80b00b9c76c491322779d0c2ef3fb0bb6d9609b7a73eb85e1bb08ebb76c049aa

                                        SHA512

                                        f18886f522c226e379166a7dd9cae600f000b696aa31ac9c7e54e76b7a74de226127637eb7cd8de3bb454883a0b82cb1b6236f8180296e6dc42d8a228e6933b4

                                      • \Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\unpack200.exe
                                        Filesize

                                        124KB

                                        MD5

                                        0ac355d4114bcd53ad9aa4a01055c44f

                                        SHA1

                                        3a7c3c936a73de1c414b08391b37fe9c106990da

                                        SHA256

                                        80b00b9c76c491322779d0c2ef3fb0bb6d9609b7a73eb85e1bb08ebb76c049aa

                                        SHA512

                                        f18886f522c226e379166a7dd9cae600f000b696aa31ac9c7e54e76b7a74de226127637eb7cd8de3bb454883a0b82cb1b6236f8180296e6dc42d8a228e6933b4

                                      • \Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\unpack200.exe
                                        Filesize

                                        124KB

                                        MD5

                                        0ac355d4114bcd53ad9aa4a01055c44f

                                        SHA1

                                        3a7c3c936a73de1c414b08391b37fe9c106990da

                                        SHA256

                                        80b00b9c76c491322779d0c2ef3fb0bb6d9609b7a73eb85e1bb08ebb76c049aa

                                        SHA512

                                        f18886f522c226e379166a7dd9cae600f000b696aa31ac9c7e54e76b7a74de226127637eb7cd8de3bb454883a0b82cb1b6236f8180296e6dc42d8a228e6933b4

                                      • \Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\unpack200.exe
                                        Filesize

                                        124KB

                                        MD5

                                        0ac355d4114bcd53ad9aa4a01055c44f

                                        SHA1

                                        3a7c3c936a73de1c414b08391b37fe9c106990da

                                        SHA256

                                        80b00b9c76c491322779d0c2ef3fb0bb6d9609b7a73eb85e1bb08ebb76c049aa

                                        SHA512

                                        f18886f522c226e379166a7dd9cae600f000b696aa31ac9c7e54e76b7a74de226127637eb7cd8de3bb454883a0b82cb1b6236f8180296e6dc42d8a228e6933b4

                                      • \Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\verify.dll
                                        Filesize

                                        48KB

                                        MD5

                                        95c10f3184ed7aa45709f7cd70b49589

                                        SHA1

                                        1096dc0c79d201b7bd77e0399c6b8d86bc1f8a6f

                                        SHA256

                                        e6f4b6e25a2bc7fc03a73032c60138410b30ac528c7d10da87ea612e52a7b736

                                        SHA512

                                        211c522ccdeee5145cf1cddc9806c79915d16ac1d2614c3bcf75d776d61c314c66ebef53f90aae5218ad472c15fba12f0ad0d19f0dfbb022fd36462e480de637

                                      • \Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\zip.dll
                                        Filesize

                                        60KB

                                        MD5

                                        19984073548bc33fc67c04aa277cdd44

                                        SHA1

                                        64189f2f71e40ae2794dcfb2df53056a82aa33c2

                                        SHA256

                                        f450c1a55a143d35b8b330c7538c22b8781d729aa947e27cbc2afc4e19434686

                                        SHA512

                                        b08ac43a0c6f12301339c30717908989ffe8bc3cf3889bcd347e83dbdc6fb21150d715da8525edd800015122c417da0870d08affbf35b5496410e36b913c5022

                                      • memory/336-129-0x0000000000000000-mapping.dmp
                                      • memory/336-189-0x0000000000000000-mapping.dmp
                                      • memory/388-122-0x000000002D5B0000-0x000000002D5C0000-memory.dmp
                                        Filesize

                                        64KB

                                      • memory/388-154-0x00000000042F0000-0x00000000062F0000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/388-125-0x00000000042F0000-0x00000000062F0000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/388-54-0x0000000076C81000-0x0000000076C83000-memory.dmp
                                        Filesize

                                        8KB

                                      • memory/388-126-0x00000000042F0000-0x00000000062F0000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/388-128-0x00000000042F0000-0x00000000062F0000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/388-130-0x00000000042F0000-0x00000000062F0000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/388-139-0x00000000042F0000-0x00000000062F0000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/388-137-0x00000000042F0000-0x00000000062F0000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/388-133-0x00000000042F0000-0x00000000062F0000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/388-124-0x00000000042F0000-0x00000000062F0000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/388-174-0x00000000042F0000-0x00000000062F0000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/560-172-0x0000000000000000-mapping.dmp
                                      • memory/576-85-0x0000000000000000-mapping.dmp
                                      • memory/576-103-0x0000000001DB0000-0x0000000003DB0000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/772-144-0x0000000000000000-mapping.dmp
                                      • memory/848-72-0x0000000000000000-mapping.dmp
                                      • memory/908-108-0x0000000000000000-mapping.dmp
                                      • memory/908-167-0x0000000001FB0000-0x0000000003FB0000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/908-169-0x0000000001FB0000-0x0000000003FB0000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/908-168-0x0000000001FB0000-0x0000000003FB0000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/908-165-0x0000000001FB0000-0x0000000003FB0000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/908-161-0x0000000001FB0000-0x0000000003FB0000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/908-160-0x0000000001FB0000-0x0000000003FB0000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/908-159-0x0000000001FB0000-0x0000000003FB0000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/908-149-0x0000000000000000-mapping.dmp
                                      • memory/1068-105-0x0000000000000000-mapping.dmp
                                      • memory/1088-173-0x0000000000000000-mapping.dmp
                                      • memory/1100-171-0x0000000000000000-mapping.dmp
                                      • memory/1116-143-0x0000000000000000-mapping.dmp
                                      • memory/1128-77-0x0000000000000000-mapping.dmp
                                      • memory/1532-131-0x0000000000000000-mapping.dmp
                                      • memory/1536-101-0x0000000000000000-mapping.dmp
                                      • memory/1600-117-0x0000000000000000-mapping.dmp
                                      • memory/1812-141-0x0000000000000000-mapping.dmp
                                      • memory/1824-111-0x0000000000000000-mapping.dmp
                                      • memory/1876-57-0x0000000000000000-mapping.dmp
                                      • memory/1892-67-0x0000000000000000-mapping.dmp
                                      • memory/1900-218-0x0000000001C40000-0x0000000003C40000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/1900-208-0x0000000001C40000-0x0000000003C40000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/1900-225-0x0000000001C40000-0x0000000003C40000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/1900-185-0x0000000001C40000-0x0000000003C40000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/1900-179-0x0000000001C40000-0x0000000003C40000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/1900-184-0x0000000001C40000-0x0000000003C40000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/1900-175-0x0000000000000000-mapping.dmp
                                      • memory/1900-186-0x0000000001C40000-0x0000000003C40000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/1900-187-0x0000000001C40000-0x0000000003C40000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/1900-223-0x0000000001C40000-0x0000000003C40000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/1900-201-0x0000000001C40000-0x0000000003C40000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/1900-203-0x0000000001C40000-0x0000000003C40000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/1900-207-0x0000000001C40000-0x0000000003C40000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/1900-224-0x0000000001C40000-0x0000000003C40000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/1900-209-0x0000000001C40000-0x0000000003C40000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/1900-210-0x0000000001C40000-0x0000000003C40000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/1900-211-0x0000000001C40000-0x0000000003C40000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/1900-212-0x0000000001C40000-0x0000000003C40000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/1900-214-0x0000000001C40000-0x0000000003C40000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/1900-215-0x0000000001C40000-0x0000000003C40000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/1900-222-0x0000000001C40000-0x0000000003C40000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/1900-219-0x0000000001C40000-0x0000000003C40000-memory.dmp
                                        Filesize

                                        32.0MB

                                      • memory/1992-170-0x0000000000000000-mapping.dmp
                                      • memory/2028-114-0x0000000000000000-mapping.dmp
                                      • memory/2044-62-0x0000000000000000-mapping.dmp
                                      • memory/2044-162-0x0000000000000000-mapping.dmp