Analysis
-
max time kernel
148s -
max time network
154s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
14-05-2022 15:05
Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220414-en
General
-
Target
tmp.exe
-
Size
10.6MB
-
MD5
7e05c717f031c0725d0e18c1c1527dfb
-
SHA1
3a1033293865a68cefb1c2d49104ab0e9d538758
-
SHA256
874811e94570c18fe7516d26cbe1294b33ac8209c2f904bf10e81693b653dc56
-
SHA512
5b2f72f0dffbf2cd97737347289afd1f54e135173d27e744e50f4f9a645b1f62c5cc9bb17ad5b1b23fa324f1ad9d42f78727def595acd67fd105a6154c716d7d
Malware Config
Signatures
-
Executes dropped EXE 7 IoCs
Processes:
lzma.exeunpack200.exeunpack200.exeunpack200.exejavaw.exeSimpleHelp TechnicianLauncher.exeSimpleHelp Technician.exepid process 1876 lzma.exe 1892 unpack200.exe 848 unpack200.exe 1128 unpack200.exe 576 javaw.exe 908 SimpleHelp TechnicianLauncher.exe 1900 SimpleHelp Technician.exe -
Loads dropped DLL 38 IoCs
Processes:
tmp.exejavaw.exeSimpleHelp TechnicianLauncher.exeSimpleHelp Technician.exepid process 388 tmp.exe 388 tmp.exe 388 tmp.exe 388 tmp.exe 388 tmp.exe 388 tmp.exe 388 tmp.exe 388 tmp.exe 388 tmp.exe 388 tmp.exe 576 javaw.exe 576 javaw.exe 576 javaw.exe 576 javaw.exe 576 javaw.exe 388 tmp.exe 388 tmp.exe 388 tmp.exe 388 tmp.exe 388 tmp.exe 388 tmp.exe 388 tmp.exe 388 tmp.exe 908 SimpleHelp TechnicianLauncher.exe 388 tmp.exe 388 tmp.exe 388 tmp.exe 388 tmp.exe 1900 SimpleHelp Technician.exe 1900 SimpleHelp Technician.exe 1900 SimpleHelp Technician.exe 1900 SimpleHelp Technician.exe 1900 SimpleHelp Technician.exe 1900 SimpleHelp Technician.exe 1900 SimpleHelp Technician.exe 1900 SimpleHelp Technician.exe 1900 SimpleHelp Technician.exe 1900 SimpleHelp Technician.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Modifies registry class 9 IoCs
Processes:
SimpleHelp Technician.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-1819626980-2277161760-1023733287-1000_CLASSES\simplehelp SimpleHelp Technician.exe Key created \REGISTRY\USER\S-1-5-21-1819626980-2277161760-1023733287-1000_CLASSES\simplehelp\shell\open\command SimpleHelp Technician.exe Key created \REGISTRY\USER\S-1-5-21-1819626980-2277161760-1023733287-1000_CLASSES\simplehelp\shell\open SimpleHelp Technician.exe Set value (str) \REGISTRY\USER\S-1-5-21-1819626980-2277161760-1023733287-1000_CLASSES\simplehelp\URL Protocol SimpleHelp Technician.exe Set value (str) \REGISTRY\USER\S-1-5-21-1819626980-2277161760-1023733287-1000_CLASSES\simplehelp\DefaultIcon\ = "SimpleHelp TechnicianWinLauncher.exe,1" SimpleHelp Technician.exe Key created \REGISTRY\USER\S-1-5-21-1819626980-2277161760-1023733287-1000_CLASSES\simplehelp\DefaultIcon SimpleHelp Technician.exe Key created \REGISTRY\USER\S-1-5-21-1819626980-2277161760-1023733287-1000_CLASSES\simplehelp\shell SimpleHelp Technician.exe Set value (str) \REGISTRY\USER\S-1-5-21-1819626980-2277161760-1023733287-1000_CLASSES\simplehelp\ = "URL:simplehelp" SimpleHelp Technician.exe Set value (str) \REGISTRY\USER\S-1-5-21-1819626980-2277161760-1023733287-1000_CLASSES\simplehelp\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\JWrapper-SimpleHelp Technician\\SimpleHelp TechnicianWinLauncher.exe\" JWVAPP \"SessionUI\" JW_urlhandler=%1" SimpleHelp Technician.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
tmp.exeSimpleHelp Technician.exepid process 388 tmp.exe 1900 SimpleHelp Technician.exe 1900 SimpleHelp Technician.exe 1900 SimpleHelp Technician.exe -
Suspicious use of WriteProcessMemory 64 IoCs
Processes:
tmp.exedescription pid process target process PID 388 wrote to memory of 1876 388 tmp.exe lzma.exe PID 388 wrote to memory of 1876 388 tmp.exe lzma.exe PID 388 wrote to memory of 1876 388 tmp.exe lzma.exe PID 388 wrote to memory of 1876 388 tmp.exe lzma.exe PID 388 wrote to memory of 2044 388 tmp.exe lzma.exe PID 388 wrote to memory of 2044 388 tmp.exe lzma.exe PID 388 wrote to memory of 2044 388 tmp.exe lzma.exe PID 388 wrote to memory of 2044 388 tmp.exe lzma.exe PID 388 wrote to memory of 1892 388 tmp.exe unpack200.exe PID 388 wrote to memory of 1892 388 tmp.exe unpack200.exe PID 388 wrote to memory of 1892 388 tmp.exe unpack200.exe PID 388 wrote to memory of 1892 388 tmp.exe unpack200.exe PID 388 wrote to memory of 848 388 tmp.exe unpack200.exe PID 388 wrote to memory of 848 388 tmp.exe unpack200.exe PID 388 wrote to memory of 848 388 tmp.exe unpack200.exe PID 388 wrote to memory of 848 388 tmp.exe unpack200.exe PID 388 wrote to memory of 1128 388 tmp.exe unpack200.exe PID 388 wrote to memory of 1128 388 tmp.exe unpack200.exe PID 388 wrote to memory of 1128 388 tmp.exe unpack200.exe PID 388 wrote to memory of 1128 388 tmp.exe unpack200.exe PID 388 wrote to memory of 576 388 tmp.exe javaw.exe PID 388 wrote to memory of 576 388 tmp.exe javaw.exe PID 388 wrote to memory of 576 388 tmp.exe javaw.exe PID 388 wrote to memory of 576 388 tmp.exe javaw.exe PID 388 wrote to memory of 1536 388 tmp.exe lzma.exe PID 388 wrote to memory of 1536 388 tmp.exe lzma.exe PID 388 wrote to memory of 1536 388 tmp.exe lzma.exe PID 388 wrote to memory of 1536 388 tmp.exe lzma.exe PID 388 wrote to memory of 1068 388 tmp.exe unpack200.exe PID 388 wrote to memory of 1068 388 tmp.exe unpack200.exe PID 388 wrote to memory of 1068 388 tmp.exe unpack200.exe PID 388 wrote to memory of 1068 388 tmp.exe unpack200.exe PID 388 wrote to memory of 908 388 tmp.exe unpack200.exe PID 388 wrote to memory of 908 388 tmp.exe unpack200.exe PID 388 wrote to memory of 908 388 tmp.exe unpack200.exe PID 388 wrote to memory of 908 388 tmp.exe unpack200.exe PID 388 wrote to memory of 1824 388 tmp.exe unpack200.exe PID 388 wrote to memory of 1824 388 tmp.exe unpack200.exe PID 388 wrote to memory of 1824 388 tmp.exe unpack200.exe PID 388 wrote to memory of 1824 388 tmp.exe unpack200.exe PID 388 wrote to memory of 2028 388 tmp.exe unpack200.exe PID 388 wrote to memory of 2028 388 tmp.exe unpack200.exe PID 388 wrote to memory of 2028 388 tmp.exe unpack200.exe PID 388 wrote to memory of 2028 388 tmp.exe unpack200.exe PID 388 wrote to memory of 1600 388 tmp.exe unpack200.exe PID 388 wrote to memory of 1600 388 tmp.exe unpack200.exe PID 388 wrote to memory of 1600 388 tmp.exe unpack200.exe PID 388 wrote to memory of 1600 388 tmp.exe unpack200.exe PID 388 wrote to memory of 336 388 tmp.exe cacls.exe PID 388 wrote to memory of 336 388 tmp.exe cacls.exe PID 388 wrote to memory of 336 388 tmp.exe cacls.exe PID 388 wrote to memory of 336 388 tmp.exe cacls.exe PID 388 wrote to memory of 1532 388 tmp.exe cacls.exe PID 388 wrote to memory of 1532 388 tmp.exe cacls.exe PID 388 wrote to memory of 1532 388 tmp.exe cacls.exe PID 388 wrote to memory of 1532 388 tmp.exe cacls.exe PID 388 wrote to memory of 1812 388 tmp.exe cacls.exe PID 388 wrote to memory of 1812 388 tmp.exe cacls.exe PID 388 wrote to memory of 1812 388 tmp.exe cacls.exe PID 388 wrote to memory of 1812 388 tmp.exe cacls.exe PID 388 wrote to memory of 1116 388 tmp.exe cacls.exe PID 388 wrote to memory of 1116 388 tmp.exe cacls.exe PID 388 wrote to memory of 1116 388 tmp.exe cacls.exe PID 388 wrote to memory of 1116 388 tmp.exe cacls.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\tmp.exe"C:\Users\Admin\AppData\Local\Temp\tmp.exe"1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\lzma.exe"C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\lzma.exe" "d" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\JWrapper-JWrapper-00033611938-archive.p2.l2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\JWrapper-JWrapper-00033611938-archive.p2"2⤵
- Executes dropped EXE
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-JWrapper-00033611938-complete\lzma.exe"C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-JWrapper-00033611938-complete\lzma.exe" "d" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\JWrapper-Windows32JRE-00028603591-archive.p2.l2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\JWrapper-Windows32JRE-00028603591-archive.p2"2⤵
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\unpack200.exe"C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\unpack200.exe" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\ext\sunpkcs11.jar.p2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\ext\sunpkcs11.jar"2⤵
- Executes dropped EXE
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\unpack200.exe"C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\unpack200.exe" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\jsse.jar.p2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\jsse.jar"2⤵
- Executes dropped EXE
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\unpack200.exe"C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\unpack200.exe" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\rt.jar.p2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\rt.jar"2⤵
- Executes dropped EXE
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\javaw.exe"C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\javaw.exe" "-Xshare:dump"2⤵
- Executes dropped EXE
- Loads dropped DLL
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-JWrapper-00033611938-complete\lzma.exe"C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-JWrapper-00033611938-complete\lzma.exe" "d" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\JWrapper-SimpleHelp Technician-00033663525-archive.p2.l2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\JWrapper-SimpleHelp Technician-00033663525-archive.p2"2⤵
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe"C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\technician.jar.p2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\technician.jar"2⤵
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe"C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\liquidlnf.jar.p2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\liquidlnf.jar"2⤵
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe"C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\SimpleHelp TechnicianMacLauncher32.app\Contents\Resources\Java\osxwrapper.jar.p2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\SimpleHelp TechnicianMacLauncher32.app\Contents\Resources\Java\osxwrapper.jar"2⤵
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe"C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\SimpleHelp TechnicianMacLauncher32.app\Contents\Resources\Java\sevenzip.jar.p2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\SimpleHelp TechnicianMacLauncher32.app\Contents\Resources\Java\sevenzip.jar"2⤵
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe"C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\jwrapper_utils.jar.p2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\jwrapper_utils.jar"2⤵
-
C:\Windows\SysWOW64\cacls.execacls "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWAppsSharedConfig\DetectedProxies" /t /e /g "Users":F2⤵
-
C:\Windows\SysWOW64\cacls.execacls "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWAppsSharedConfig\ProxyCredentials" /t /e /g "Users":F2⤵
-
C:\Windows\SysWOW64\cacls.execacls "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-SimpleHelp Technician-00033663525-complete\JWrapper-SimpleHelp Technician-splash.png" /t /e /g "Users":F2⤵
-
C:\Windows\SysWOW64\cacls.execacls "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWApps\SimpleHelp_TechnicianICO.ico" /t /e /g "Users":F2⤵
-
C:\Windows\SysWOW64\cacls.execacls "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWApps\JWrapper-SimpleHelp Technician-UninstallerICO.ico" /t /e /g "Users":F2⤵
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\SimpleHelp TechnicianLauncher.exe"C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\SimpleHelp TechnicianLauncher.exe" -cp "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-SimpleHelp Technician-00033663525-complete\technician.jar;C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-SimpleHelp Technician-00033663525-complete\liquidlnf.jar;C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-SimpleHelp Technician-00033663525-complete\jwrapper_utils.jar;" -Xmx256m -XX:MinHeapFreeRatio=15 -XX:MaxHeapFreeRatio=30 -Djava.util.Arrays.useLegacyMergeSort=true -Djava.net.preferIPv4Stack=true -Dsun.java2d.dpiaware=false jwrapper.JWrapper "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-SimpleHelp Technician-00033663525-complete\JWLaunchProperties-1652540807955-44"2⤵
- Executes dropped EXE
- Loads dropped DLL
-
C:\Windows\SysWOW64\cacls.execacls "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWApps\JRE-LastSuccessfulOptions-JWrapper-Windows32JRE-00028603591-complete" /t /e /g "Users":F3⤵
-
C:\Windows\SysWOW64\cacls.execacls "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWApps\ChosenLanguage" /t /e /g "Users":F2⤵
-
C:\Windows\SysWOW64\cacls.execacls "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-SimpleHelp Technician-00033663525-complete\jwLastRun" /t /e /g "Users":F2⤵
-
C:\Windows\SysWOW64\cacls.execacls "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-JWrapper-00033611938-complete\jwLastRun" /t /e /g "Users":F2⤵
-
C:\Windows\SysWOW64\cacls.execacls "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\jwLastRun" /t /e /g "Users":F2⤵
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\SimpleHelp Technician.exe"C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\SimpleHelp Technician.exe" -cp "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-SimpleHelp Technician-00033663525-complete\technician.jar;C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-SimpleHelp Technician-00033663525-complete\liquidlnf.jar;C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-SimpleHelp Technician-00033663525-complete\jwrapper_utils.jar;" -Xmx256m -XX:MinHeapFreeRatio=15 -XX:MaxHeapFreeRatio=30 -Djava.util.Arrays.useLegacyMergeSort=true -Djava.net.preferIPv4Stack=true -Dsun.java2d.dpiaware=false jwrapper.JWrapper "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-SimpleHelp Technician-00033663525-complete\JWLaunchProperties-1652540838266-46"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\cacls.execacls "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWApps\JRE-LastSuccessfulOptions-JWrapper-Windows32JRE-00028603591-complete" /t /e /g "Users":F3⤵
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWAppsSharedConfig\DetectedProxiesFilesize
4B
MD5f1d3ff8443297732862df21dc4e57262
SHA19069ca78e7450a285173431b3e52c5c25299e473
SHA256df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119
SHA512ec2d57691d9b2d40182ac565032054b7d784ba96b18bcb5be0bb4e70e3fb041eff582c8af66ee50256539f2181d7f9e53627c0189da7e75a4d5ef10ea93b20b3
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWAppsSharedConfig\ProxyCredentialsFilesize
4B
MD5f1d3ff8443297732862df21dc4e57262
SHA19069ca78e7450a285173431b3e52c5c25299e473
SHA256df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119
SHA512ec2d57691d9b2d40182ac565032054b7d784ba96b18bcb5be0bb4e70e3fb041eff582c8af66ee50256539f2181d7f9e53627c0189da7e75a4d5ef10ea93b20b3
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWApps\JWrapper-SimpleHelp Technician-UninstallerICO.icoFilesize
48KB
MD53629d03fef69370d6933829d175147a5
SHA152320b01ee8c0cf248b60180eb8046ab350fe548
SHA25685f2b156d63d64d4e9998f2e8207a03c096b8aed5b1631823dff36c2e89c52e6
SHA512f3cb0a706e8ec58795d99f0d3476098872e63c45fd3b50f0b6ceafc632b5f9db74ca8c5e1813c50600e7e235f285157c36a0d7cab099ff2257aa8286224b1fd1
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWApps\SimpleHelp_TechnicianICO.icoFilesize
41KB
MD574bdecd5e52771137f96659f06de7349
SHA1480200480c34ab8279fb76c5a3737be801a9b347
SHA256c1a238d4e0d67d687017abf89f547587803b7efcb4087f499f8fb0a128b3febb
SHA51274547779b51469b7494ae6ab623a9c99d64092e01c339709780b95647b64c388312987524ef75bc78e963c68ce20a130711b7ba6409e8be94ed0fd3b8aa41526
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-SimpleHelp Technician-00033663525-complete\JWrapper-SimpleHelp Technician-splash.pngFilesize
8KB
MD508051133e368d61036576d3ed5b9cc14
SHA1817e7a73eb33ab39e3c4d8c99a00c9d05c64f5c5
SHA2565ac80b373a7de315cc803eea0fc640335369df062de52b53c2a4175af2c0a2a7
SHA51293400dc7b885e2f51942ccba11ed7f1ebc82b9d726aa3b5c11ea118bfa93d20594243449ce37195cf72387064514c01d0d2d38776d7d049e148050edf873b7ce
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\client\classes.jsaFilesize
11.8MB
MD5d44983103334a714197fd5fb87d0a45d
SHA1a5572b1e25dfb3013c5f738d3c3275243a917fc2
SHA256a4f742c1883d0a57c3cec01084636f72195c6e58911308956b03a4c9c81fa7fa
SHA51270250107fe2484cac422d09185fa6eaaf81eb375460fe5dbc4dec297c7db5ccdb75d8ba498cc84a08382dd8b777ff4cfe425e9259d24319bdc1ef87138607472
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\JWrapper-JWrapper-00033611938-archive.p2Filesize
2.0MB
MD59b5606227a77c282875f52f76c070bc4
SHA10287a157aa6ef8f6c51be0fef43b7aab1dfea226
SHA2564904c9597183806621d087311fe47a1e5fb9f4f5ccf5d7ab38d7600c301169af
SHA512934f044bcb6b6e8a9ff098c29b12aee3f428c6fc15fb41687ab0fe6ba74386f9e6f6a00365a38e346b7010cd6528fa4caddf28d5e54c400997aded2ccd9b2917
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\JWrapper-JWrapper-00033611938-archive.p2.l2Filesize
632KB
MD54e0277df32caa97d95f845eb5d3b4272
SHA1f38f0dce54d96a12ec6f86243ef319525975b80d
SHA256b3c206abdae9350977c0fa3368d93386cd402b72553b1e08bcb76a1616d19e0c
SHA512d3e49154898bdce7d4922add1cfe230f60c39fcec658b529d3610060fee2a8110b3802b21d75f8729ff2ee9bb2b1b63001826a8430d85a226d198ff54b2a9b14
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\JWrapper-SimpleHelp Technician-00033663525-archive.p2Filesize
10.9MB
MD5632ec91c34a4a7c3dac13e06eac81d97
SHA127a8f87bf6b67f705c0557afaf356eda2e280542
SHA25601c4805cfe58054ed7cadcee2f35109d3e4d2236ed95470748d05b2fcb15e491
SHA512aa1c756ed0de0013bda0df69ddc2ee5a980d9a8a575fa3f50a862a7dc017bb234fb4563071ed212da6417d63e624b9b11a2e10a1b3ea0cf9a81969cec2908cc6
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\JWrapper-SimpleHelp Technician-00033663525-archive.p2.l2Filesize
3.4MB
MD5aa56b6dd3716e84d0e3f14cf3f117ae1
SHA172ab8281b516dbbad0ef2e3e10ad719cd61d2b70
SHA25690e576c86e3fb1b26d0d8c9f9c6fd7aa0b766303f48b6b8848eba421a1686f09
SHA5123c5a41412147ba42d6b337b4578afe0e7e5dcc170e9e866ab8c793ca29b448715549a578e524e94695b91a4b7c9e49e2c4d9831baaeddc225a766487b4f64f60
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\SimpleHelp TechnicianMacLauncher32.app\Contents\Resources\Java\osxwrapper.jarFilesize
792KB
MD58501c5dba159f6f9ba97fca621add660
SHA19fae3876e083032b1f1531f858c58a000c017789
SHA256217c986b8720b74fd8f86cda450f4d336c5adb823ac49906eea9916a30df6bb3
SHA512e46569785a449707f3b0729b58dabf1cfc7a2146aa984c30e168fc38cb4f61dd7a26bb7e35911538e1e167910a0226da7c96850b35e94cb0322e6c9f55bc836a
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\SimpleHelp TechnicianMacLauncher32.app\Contents\Resources\Java\osxwrapper.jar.p2Filesize
536KB
MD5f13c13f12aa2eb1a5f8ef5c6cd43e828
SHA17e3a146edbd4502d76f642688fb705021e73f2ba
SHA256afb79c2858308bb7184943fdd80cd51e6054de73661dbf23c82067c0f130cc1a
SHA5126c8fc23045ad24b00c217a34ae5cb997548b56506fc221b3da6719234a0fe1a0bc6a39bccbbc90dec03ee6cf47ae4b29fde0aba21ea2c56a2eb72b57321a40da
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\SimpleHelp TechnicianMacLauncher32.app\Contents\Resources\Java\sevenzip.jarFilesize
86KB
MD5899d94af414a62dfc3658daaf3578e64
SHA1e3feba8ca39701857b03756b4bae5a8185cdc8cb
SHA2566c8ef378880fd0d72075f0a6b7d9efff85b3cd9168c452c6f429ecdce429c840
SHA512ca4bd9f9b9b53737ac7cc955f693cfeb7a1b4e0a925b4b2701e13647fc35f74c22ff2b2d3c94cc5620c23bdbce246b5a423f215688bae7c22ee010b56c469849
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\SimpleHelp TechnicianMacLauncher32.app\Contents\Resources\Java\sevenzip.jar.p2Filesize
33KB
MD566f7a65d140e99e800b2bd07c317b9a6
SHA12996e1daf17586ce951dc52703b54059457e792e
SHA256be0c15e4adbddcab0e10550e345558c75944902f78d95b5fc4682f7e7e86021b
SHA512dc62437a664db8fdbbc376210faeda7b77df092d35a5919e981d32a79f511706621439dc16c896926cd5928724054418aaa24f7dd74554f8e7e20bd1836950c4
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\jwrapper_utils.jarFilesize
1.8MB
MD56fe1905f52cf7712f375154c9e12d996
SHA1e5aed036c09399628d6cfdcbaead67f912f331b0
SHA25634c093ff70cbbed59b907f7da12d6d015c477fcc88d11ae5608ada130e4d5dda
SHA512ef77c9bfc609fe71679fbd36eb1d03c52315ea6630a048937044117777514e6357174fe1205b25a3b77731757c484cc0353b5e0b4c0e46e91cc093cfe868202f
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\jwrapper_utils.jar.p2Filesize
662KB
MD5b5c05459578b6088a9aed27955e58930
SHA12c0eaff3680a598af6220154dcf05910eb9302ef
SHA2563e85f20efa00608f11c057f131bc56c7bb227cb7e1775d1d6a7b3d0f15db1cee
SHA51253134fa43e868f6247a1efa01a6851e45538670d3a744536bdb227b8dd28a6b309fb5cf9a2ed1eb3283440a6363757cc4772bfac12ca388121c352896b377f48
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\liquidlnf.jarFilesize
308KB
MD54493e756bc5c08363172cf745707e52b
SHA1178445f2dc6a709a73457c003735d63897f8f3f6
SHA256f8e345a075f71d333650f4da54cd30140d0da69ab424c9c79cebd40080251692
SHA5122bc58a91c690d181c64014aa5428e52c4eaa30d2b888975fbe7cf19f3228203cde0570419151bfcbf95ef3058ce7b37b3ebb46e80c3b052c1a8dc6fadd085ade
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\liquidlnf.jar.p2Filesize
244KB
MD5c602c315cf0a159b92a5f08fed2b8810
SHA1463c17b2d0b5f59c13792f0c008777580036c9ee
SHA2562a303d52186eb88bdce7580fe0e7fc8ca081ed7efeef590f9ccb2416cb72b33a
SHA512b29c09fa59d615f68e2e4cd0c4fd07b210a00c020469e5e735a69d648336f995090d4d6648203289b244e7ea2df02b44060ba8fd88e53f6052d237d550ee6b3c
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\lzma.exeFilesize
71KB
MD5e59aa0e52e93c781dcdab8ad7cc4054c
SHA11be9c2d8b48d6e0c8a7cab6013cc36ea42ec421e
SHA256410bfdaddee3767151296fe4f16052c39546151916f05bbe4ae1c6b698b18f0f
SHA512d0be3580640bb2cca0c097ec2154132eeefd2b2b4b0e45027cc303c47a42f5c545d5f50182c70a69b5d1673112d24f8ae320d097d7034e810dbc0a5128b09050
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\technician.jarFilesize
10.4MB
MD50ccd0ceb2a08e5f508c2be9613dc0965
SHA15aa7a6ba0d250cfa9442361f8504784119d69ecd
SHA25628d3d24c518314c848056dfd220669b802d40769e0bae4debeda5287941a0ce6
SHA5122e595bc10b11bbc434a01a20d6e843c750dbe143d8e90c64398b82807c1a45148277580339ce764b5af32ee91edea75dcc896e93fa9a71a1f2cb00f413d3d250
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\technician.jar.p2Filesize
4.1MB
MD5f6e7554e76e8f67200f43fca0a1fffdb
SHA167c93564f8e6d67a0fb59471d22583037853af8a
SHA256c8387e7f000632bfd9f116a71c3d0e407f0707160a1c3e4c904b4477ae78c295
SHA51233ab04236875cf9976b8f70d8d0f7a8baa5b46e9e5e81b9b1f0a4d98cb34fe70d9b05e72c5b14bafdc8f6ee1e80cbc90ab4947a262aa19502c8c22e8152b37d6
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\JWrapper-Windows32JRE-00028603591-archive.p2Filesize
17.0MB
MD55fef40dac50c383c0450c3bad9e88526
SHA16d74345c8b22d310e9e7f632354fe8ca59ce5ac7
SHA256f621e8a75ba7f1a745bcb9e76a7741eca9502cb39435e763354392e5e2178e67
SHA512cfc7d0f90c40503910ac15fe51f60c335b59cb89ec66705aa467d8fef018e94ffd2186ab43ea0c0db9f2743e4b58eeedb4e73598dcc408a323071c10c3b4058d
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\JWrapper-Windows32JRE-00028603591-archive.p2.l2Filesize
5.9MB
MD546a5a20549c8750877ff4e0d36fcc2ea
SHA1be876202268b64ccf4e12897ba96c81ddf6edcd7
SHA2568362da08b29701d146a62fd0c2005512bad96fd7b95a2eb39338b4dbaec367e9
SHA5123ce39c852886b9375a8b7c7a047f6a37a5b3eaf28149371ec4697400f95230f3e0f34dbe3ba0051935b9a9434f25eef802dc89fd9a0c0bd8f6d07ed9b1c166e7
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\client\jvm.dllFilesize
1.6MB
MD5c9c4c710990b34b3c851e76a56360fc9
SHA1a1d7bbf2e6f198b2af725eb469b6d41d6ac979c1
SHA256b6ed5d2218569e924930dd2a84536001ef34f89698b6c65140f05b1873266434
SHA512d03f1827b5f3ad687a7f0664c537a8dfe090d97cce67f3d7970780777497b4fd1cbbfe893fbed1d3d4e39ed71a27b547c388685ea8d1c6fdbd673ecd87dad8b6
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\hpi.dllFilesize
32KB
MD57f4f5d189ec48566d9d8c2ebaed68c74
SHA18ba4ab69b6a453640708ba8337e53d01ce041834
SHA256ad9a3a3949742995b9b2b302e99b9a15a5c0211acccbdf4d6a9f86a69a3f305a
SHA51252b461a23c4377974494a1b57f49e8c32e072e933be59f36900290f518504f7d42189e22aab7a51dcda128d0606bcd9c0a85404340313ac322e39db36828da13
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\java.dllFilesize
116KB
MD53b3613ae9a31e5099ff803b8c858a86d
SHA15cc6c08550cd2f4ef6d37d521c7891051413f16d
SHA2565a5e216f287cbcaf7a4ba8ccb8fcb3dae0b05378d89ba6a70f1d50b394306796
SHA512ed360d73fcc2362129ff4e2c52f8fdf84970598f49be081740e7ed23d23fa8cdf7a01d13cbe2b8cff3fa0d2ecc7455487f98e827eabc2c0d76037e1d4afef365
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\javaw.exeFilesize
52KB
MD5141c0ddc4b7aa9287d1dea52c9525445
SHA1b01e93615748020869be5f7dc73be6803ac18619
SHA2569dee589ab11824cf051afbf5ba0d30e38a464571d23edb14f0ea9b6bdf9fc57c
SHA512c5d7c14e11ea613b1c4b2a796254142136112b5682fccb1ebafbbc014601e5b103f8ab7a5d3a9d4b319a379741fb0bbffa6a214a142931e4f17aecdd54112a54
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\unpack200.exeFilesize
124KB
MD50ac355d4114bcd53ad9aa4a01055c44f
SHA13a7c3c936a73de1c414b08391b37fe9c106990da
SHA25680b00b9c76c491322779d0c2ef3fb0bb6d9609b7a73eb85e1bb08ebb76c049aa
SHA512f18886f522c226e379166a7dd9cae600f000b696aa31ac9c7e54e76b7a74de226127637eb7cd8de3bb454883a0b82cb1b6236f8180296e6dc42d8a228e6933b4
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\unpack200.exeFilesize
124KB
MD50ac355d4114bcd53ad9aa4a01055c44f
SHA13a7c3c936a73de1c414b08391b37fe9c106990da
SHA25680b00b9c76c491322779d0c2ef3fb0bb6d9609b7a73eb85e1bb08ebb76c049aa
SHA512f18886f522c226e379166a7dd9cae600f000b696aa31ac9c7e54e76b7a74de226127637eb7cd8de3bb454883a0b82cb1b6236f8180296e6dc42d8a228e6933b4
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\unpack200.exeFilesize
124KB
MD50ac355d4114bcd53ad9aa4a01055c44f
SHA13a7c3c936a73de1c414b08391b37fe9c106990da
SHA25680b00b9c76c491322779d0c2ef3fb0bb6d9609b7a73eb85e1bb08ebb76c049aa
SHA512f18886f522c226e379166a7dd9cae600f000b696aa31ac9c7e54e76b7a74de226127637eb7cd8de3bb454883a0b82cb1b6236f8180296e6dc42d8a228e6933b4
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\verify.dllFilesize
48KB
MD595c10f3184ed7aa45709f7cd70b49589
SHA11096dc0c79d201b7bd77e0399c6b8d86bc1f8a6f
SHA256e6f4b6e25a2bc7fc03a73032c60138410b30ac528c7d10da87ea612e52a7b736
SHA512211c522ccdeee5145cf1cddc9806c79915d16ac1d2614c3bcf75d776d61c314c66ebef53f90aae5218ad472c15fba12f0ad0d19f0dfbb022fd36462e480de637
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\zip.dllFilesize
60KB
MD519984073548bc33fc67c04aa277cdd44
SHA164189f2f71e40ae2794dcfb2df53056a82aa33c2
SHA256f450c1a55a143d35b8b330c7538c22b8781d729aa947e27cbc2afc4e19434686
SHA512b08ac43a0c6f12301339c30717908989ffe8bc3cf3889bcd347e83dbdc6fb21150d715da8525edd800015122c417da0870d08affbf35b5496410e36b913c5022
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\classlistFilesize
76KB
MD5ef2f77d23cd37746737f2f34f953b27c
SHA1d3fc136fcf5421f31bf379a57f55fdb76450461d
SHA256c5f11846410444f7eba84742a71d0693f4e25439af58e1ce7db41e21b7806e77
SHA51266a1729bddc5a8dc8bc47c00c9a59f1d99f282c42dc177d58f11d283437209764e795168aaac03b2c00aff013d1329163faa6406cca8b08cfb6a8679a57e4bb5
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\ext\sunpkcs11.jarFilesize
166KB
MD525edf09d6b9a5fd1fecce20e16cd955c
SHA1425cb995e9fbe57ee915ffd53a2457cde46f496d
SHA2560cd8fdfbab6d535c5caec7f70d5dd425d6a7ef6bf953b44e81db7220b8cfcffd
SHA51202b1f9a4e76257d913ce4280e28c3ef6677e118e329b08cd60c34f28dd57ee99f7a85ec0879ee0cdab36926447dd81771b7c142882fb650d5ed5a5cc407f2f3d
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\ext\sunpkcs11.jar.p2Filesize
120KB
MD51e3aae27c091733c0df95b1762ed5a92
SHA1d8d865d9c26ff76651cd81d2e253d50a67ff6718
SHA256dec4fac179d022add2f72f08286ea74687180e3b26f1c79e2c54aa3e815f4636
SHA512123d55ceb49d93312af5b28e04b9ba6ce24e635e230ca0e6798ab3048f883c58f03c4236d675a56e3163b06825063bd5a0affca35b620e69ba23db5a2c27ac6d
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\i386\jvm.cfgFilesize
695B
MD58d52e756ca8cbe07741e1640b38a0f87
SHA1bde0eca45c0d1b0be7250245eaa55487384c8bd3
SHA256db32e24f9ab72c2a30e2cd2f80300b3640b8f04d2cf7dcd86fb15261ba46983c
SHA512f1faa89f350da7d656d80aa8642e773af4cc5481719b627f3b2d313b03845a78b4700c77e25583e4157fda599745e2f4a06dd71adfb64d7294bfb9ef6e2865c6
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\jce.jarFilesize
80KB
MD58bfb4f2b5a7db5c2f66029cebcda61af
SHA1544317c36b07e20b091ed1c276a1fba20719a696
SHA2568c18142a4f95801050b8bddb632fa46b6c77f8937733b1b352ae71fde0d5f0ea
SHA51206fc3734cfd6778b1f389fb111079ffd959798cfffcf799c563f228c70280373f7e412d2258f0abeeffe0979b3a4295ed123c0992e9fe724c5e6505e14db096b
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\jsse.jarFilesize
474KB
MD53902fa042a832f116c4bbdb8ac260396
SHA1bbf56369190cd403dffc6114121bc93ef1f8bd94
SHA25687d8858ed9ba36a65a71410816d041f878d61732be37c00a5521596d5d729b4d
SHA512f79c93b40d109525d65b008d495751aa85ca9b43e32697028979da597c9ea5d265fd7b23b4979d1e874555768e375e56ada9cdafce776a2acfcb934e94be9706
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\jsse.jar.p2Filesize
115KB
MD541789f3bfea0465b6b5dfdbe133fe342
SHA10061d61370170afdc3984d2e0016c5b8d10b3946
SHA2563f1931393c34b8828c37668bb34891cabce89a4caad9d2a1e8ad07b0c2f205c6
SHA5122f6f8d579d9806d8b8a6c2e582e065a889c02347f8141e79c02ba238d100a11e2a491f1f915fc95bb297b0be498a2e3c2267bc78d10b9578c40c11f53f166735
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\rt.jarFilesize
32.6MB
MD57dadc17907c9e2aeb4dc7a9faccfceec
SHA119ff33fb9bd10a53b201c2ea6c4e537838534880
SHA2561ea594712c7e982dc297e0da402473a8f9c0ed75bdb357594c7eab4857d568e1
SHA51214311a2fa97cf9b623ab9aaffbecd06aecf584d6b7312eef6b3b125d7e42e4eebe79a7b906903306a05c9ba9f6d0facf0ce94bcd69928f123989cf0ad7291037
-
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\lib\rt.jar.p2Filesize
8.8MB
MD528b0cedfa214a6db37e63dedd60fe70b
SHA1f6ef31e6bab599eb0d83d4e7cb9cd906dda56137
SHA25669e611fffa7d26b950a2b53899f938730fa29ad0f30800260f62fa31c048097d
SHA512f5b0c967af2e324847da01c6c373ed13558988edea4d36f7167b744e3648e208c9b959cc24626c9d9b05cd8a37e8035d3ce01f27bba13903ddf56a94701f8b29
-
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-JWrapper-00033611938-complete\jwutils_win32.dllFilesize
88KB
MD5c7680de321eceddacc1e2e6d9910dd35
SHA1fe95e8b5e8e0a498339a85c813035bad514d503d
SHA256f03270776b3257f61f75931093565d59760c0316e1865a8c52088ef50c92bde5
SHA51296a33586273865fe91f5c46b1694c10b8a009fc0eb603bc3f88ff204dea9d6c0a604e5e29034e4229e625a7ebe12aa1427e666a3e567e2a96fe1662b1ab357ea
-
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\SimpleHelp TechnicianLauncher.exeFilesize
52KB
MD5141c0ddc4b7aa9287d1dea52c9525445
SHA1b01e93615748020869be5f7dc73be6803ac18619
SHA2569dee589ab11824cf051afbf5ba0d30e38a464571d23edb14f0ea9b6bdf9fc57c
SHA512c5d7c14e11ea613b1c4b2a796254142136112b5682fccb1ebafbbc014601e5b103f8ab7a5d3a9d4b319a379741fb0bbffa6a214a142931e4f17aecdd54112a54
-
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\SimpleHelp TechnicianLauncher.exeFilesize
52KB
MD5141c0ddc4b7aa9287d1dea52c9525445
SHA1b01e93615748020869be5f7dc73be6803ac18619
SHA2569dee589ab11824cf051afbf5ba0d30e38a464571d23edb14f0ea9b6bdf9fc57c
SHA512c5d7c14e11ea613b1c4b2a796254142136112b5682fccb1ebafbbc014601e5b103f8ab7a5d3a9d4b319a379741fb0bbffa6a214a142931e4f17aecdd54112a54
-
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\awt.dllFilesize
1.3MB
MD5d68a6b4ec67373433e72c26517c32b2f
SHA10cbe4c775194b5bc3b59392408d29b097a1ba664
SHA256f2a7465215f298ec9c604c59ee9cf720560e106b478c425056d13c40e65b1bb8
SHA512d9debe367be76c5de51a4faf4e68efb9c8c8c34d4c4a62ceb005d7b05a852f6d349354fd023baefcbc697d0ac3a893b44e500f26ebfbe0e1fb7f704a67a4beb0
-
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\cmm.dllFilesize
188KB
MD542b2f3248d3a71f9491e518c5d30861e
SHA151fd120c1f30e7ade09d1c730224da5f9093f57d
SHA256d809c0dafe1021f890c988c3974f157513b974d6af09f64028a1ebd6e1a4c745
SHA5128ec139b0e5b647ac3ff8969146405292fccebe31c21e8cb5e5be553d2042de5c7c60897eef1d7af6d8265031adbfb62e95752f1acc81f837c5f079651b811fda
-
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\fontmanager.dllFilesize
320KB
MD5299dcba6f0a9ef5aca70f8b6e032017c
SHA1cd7f8d02db7403cf364a6267d0f5d588e202692b
SHA256de5df116cfac6d2dd28c61e25924a18d9f2c201940c2831deb70c6a5bcd17461
SHA5124c3ff3bde8b8f621ea26a9ad2ed259314d83b515877f3b04e1fc66578bfd99e69966451b29c67bad7a301ae57ccd36d209d949b708d7820dba051e4dcfb627c8
-
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\jpeg.dllFilesize
128KB
MD54ee73ef7e9f4593e7d1685aac04c312f
SHA120b293ac19c5a23d8d7618d72bb14bb993dea2fd
SHA256a5af9e5407dd2993ff7f1ef589ac8edfb7482a495a434953307cffedfbd8cfbc
SHA512d7d40950f1522216adf3d169e13600a9fbe579940a41220dbe423a4f2ed5bb868faa895b84c9d20dfc428fc5ed9d372eceab09d8f67c99562d2cef71d2dbfa70
-
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\net.dllFilesize
76KB
MD5c0abcbae12150c44bc99791b28f8bf41
SHA1ce4a1f1c5177021d49f07f784adc64cf2468b187
SHA25621c8c8d6e73e4383ef4cc2ea3dee140f6d8b460da78a04d3604c27bd55218edf
SHA512357435ad7b6aa1d51773ac654e8c8dd9f0a7485f68a16c202172558cf9a1d27520674375319e5e79e2af6288fc5de8c62e26ebb763401e3ca75539b1b802adb7
-
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\lzma.exeFilesize
71KB
MD5e59aa0e52e93c781dcdab8ad7cc4054c
SHA11be9c2d8b48d6e0c8a7cab6013cc36ea42ec421e
SHA256410bfdaddee3767151296fe4f16052c39546151916f05bbe4ae1c6b698b18f0f
SHA512d0be3580640bb2cca0c097ec2154132eeefd2b2b4b0e45027cc303c47a42f5c545d5f50182c70a69b5d1673112d24f8ae320d097d7034e810dbc0a5128b09050
-
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540762-0-app\lzma.exeFilesize
71KB
MD5e59aa0e52e93c781dcdab8ad7cc4054c
SHA11be9c2d8b48d6e0c8a7cab6013cc36ea42ec421e
SHA256410bfdaddee3767151296fe4f16052c39546151916f05bbe4ae1c6b698b18f0f
SHA512d0be3580640bb2cca0c097ec2154132eeefd2b2b4b0e45027cc303c47a42f5c545d5f50182c70a69b5d1673112d24f8ae320d097d7034e810dbc0a5128b09050
-
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\client\jvm.dllFilesize
1.6MB
MD5c9c4c710990b34b3c851e76a56360fc9
SHA1a1d7bbf2e6f198b2af725eb469b6d41d6ac979c1
SHA256b6ed5d2218569e924930dd2a84536001ef34f89698b6c65140f05b1873266434
SHA512d03f1827b5f3ad687a7f0664c537a8dfe090d97cce67f3d7970780777497b4fd1cbbfe893fbed1d3d4e39ed71a27b547c388685ea8d1c6fdbd673ecd87dad8b6
-
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\hpi.dllFilesize
32KB
MD57f4f5d189ec48566d9d8c2ebaed68c74
SHA18ba4ab69b6a453640708ba8337e53d01ce041834
SHA256ad9a3a3949742995b9b2b302e99b9a15a5c0211acccbdf4d6a9f86a69a3f305a
SHA51252b461a23c4377974494a1b57f49e8c32e072e933be59f36900290f518504f7d42189e22aab7a51dcda128d0606bcd9c0a85404340313ac322e39db36828da13
-
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\java.dllFilesize
116KB
MD53b3613ae9a31e5099ff803b8c858a86d
SHA15cc6c08550cd2f4ef6d37d521c7891051413f16d
SHA2565a5e216f287cbcaf7a4ba8ccb8fcb3dae0b05378d89ba6a70f1d50b394306796
SHA512ed360d73fcc2362129ff4e2c52f8fdf84970598f49be081740e7ed23d23fa8cdf7a01d13cbe2b8cff3fa0d2ecc7455487f98e827eabc2c0d76037e1d4afef365
-
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\java.dllFilesize
116KB
MD53b3613ae9a31e5099ff803b8c858a86d
SHA15cc6c08550cd2f4ef6d37d521c7891051413f16d
SHA2565a5e216f287cbcaf7a4ba8ccb8fcb3dae0b05378d89ba6a70f1d50b394306796
SHA512ed360d73fcc2362129ff4e2c52f8fdf84970598f49be081740e7ed23d23fa8cdf7a01d13cbe2b8cff3fa0d2ecc7455487f98e827eabc2c0d76037e1d4afef365
-
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\java.dllFilesize
116KB
MD53b3613ae9a31e5099ff803b8c858a86d
SHA15cc6c08550cd2f4ef6d37d521c7891051413f16d
SHA2565a5e216f287cbcaf7a4ba8ccb8fcb3dae0b05378d89ba6a70f1d50b394306796
SHA512ed360d73fcc2362129ff4e2c52f8fdf84970598f49be081740e7ed23d23fa8cdf7a01d13cbe2b8cff3fa0d2ecc7455487f98e827eabc2c0d76037e1d4afef365
-
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\javaw.exeFilesize
52KB
MD5141c0ddc4b7aa9287d1dea52c9525445
SHA1b01e93615748020869be5f7dc73be6803ac18619
SHA2569dee589ab11824cf051afbf5ba0d30e38a464571d23edb14f0ea9b6bdf9fc57c
SHA512c5d7c14e11ea613b1c4b2a796254142136112b5682fccb1ebafbbc014601e5b103f8ab7a5d3a9d4b319a379741fb0bbffa6a214a142931e4f17aecdd54112a54
-
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\javaw.exeFilesize
52KB
MD5141c0ddc4b7aa9287d1dea52c9525445
SHA1b01e93615748020869be5f7dc73be6803ac18619
SHA2569dee589ab11824cf051afbf5ba0d30e38a464571d23edb14f0ea9b6bdf9fc57c
SHA512c5d7c14e11ea613b1c4b2a796254142136112b5682fccb1ebafbbc014601e5b103f8ab7a5d3a9d4b319a379741fb0bbffa6a214a142931e4f17aecdd54112a54
-
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\unpack200.exeFilesize
124KB
MD50ac355d4114bcd53ad9aa4a01055c44f
SHA13a7c3c936a73de1c414b08391b37fe9c106990da
SHA25680b00b9c76c491322779d0c2ef3fb0bb6d9609b7a73eb85e1bb08ebb76c049aa
SHA512f18886f522c226e379166a7dd9cae600f000b696aa31ac9c7e54e76b7a74de226127637eb7cd8de3bb454883a0b82cb1b6236f8180296e6dc42d8a228e6933b4
-
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\unpack200.exeFilesize
124KB
MD50ac355d4114bcd53ad9aa4a01055c44f
SHA13a7c3c936a73de1c414b08391b37fe9c106990da
SHA25680b00b9c76c491322779d0c2ef3fb0bb6d9609b7a73eb85e1bb08ebb76c049aa
SHA512f18886f522c226e379166a7dd9cae600f000b696aa31ac9c7e54e76b7a74de226127637eb7cd8de3bb454883a0b82cb1b6236f8180296e6dc42d8a228e6933b4
-
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\unpack200.exeFilesize
124KB
MD50ac355d4114bcd53ad9aa4a01055c44f
SHA13a7c3c936a73de1c414b08391b37fe9c106990da
SHA25680b00b9c76c491322779d0c2ef3fb0bb6d9609b7a73eb85e1bb08ebb76c049aa
SHA512f18886f522c226e379166a7dd9cae600f000b696aa31ac9c7e54e76b7a74de226127637eb7cd8de3bb454883a0b82cb1b6236f8180296e6dc42d8a228e6933b4
-
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\unpack200.exeFilesize
124KB
MD50ac355d4114bcd53ad9aa4a01055c44f
SHA13a7c3c936a73de1c414b08391b37fe9c106990da
SHA25680b00b9c76c491322779d0c2ef3fb0bb6d9609b7a73eb85e1bb08ebb76c049aa
SHA512f18886f522c226e379166a7dd9cae600f000b696aa31ac9c7e54e76b7a74de226127637eb7cd8de3bb454883a0b82cb1b6236f8180296e6dc42d8a228e6933b4
-
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\verify.dllFilesize
48KB
MD595c10f3184ed7aa45709f7cd70b49589
SHA11096dc0c79d201b7bd77e0399c6b8d86bc1f8a6f
SHA256e6f4b6e25a2bc7fc03a73032c60138410b30ac528c7d10da87ea612e52a7b736
SHA512211c522ccdeee5145cf1cddc9806c79915d16ac1d2614c3bcf75d776d61c314c66ebef53f90aae5218ad472c15fba12f0ad0d19f0dfbb022fd36462e480de637
-
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1652540770-0-app\bin\zip.dllFilesize
60KB
MD519984073548bc33fc67c04aa277cdd44
SHA164189f2f71e40ae2794dcfb2df53056a82aa33c2
SHA256f450c1a55a143d35b8b330c7538c22b8781d729aa947e27cbc2afc4e19434686
SHA512b08ac43a0c6f12301339c30717908989ffe8bc3cf3889bcd347e83dbdc6fb21150d715da8525edd800015122c417da0870d08affbf35b5496410e36b913c5022
-
memory/336-129-0x0000000000000000-mapping.dmp
-
memory/336-189-0x0000000000000000-mapping.dmp
-
memory/388-122-0x000000002D5B0000-0x000000002D5C0000-memory.dmpFilesize
64KB
-
memory/388-154-0x00000000042F0000-0x00000000062F0000-memory.dmpFilesize
32.0MB
-
memory/388-125-0x00000000042F0000-0x00000000062F0000-memory.dmpFilesize
32.0MB
-
memory/388-54-0x0000000076C81000-0x0000000076C83000-memory.dmpFilesize
8KB
-
memory/388-126-0x00000000042F0000-0x00000000062F0000-memory.dmpFilesize
32.0MB
-
memory/388-128-0x00000000042F0000-0x00000000062F0000-memory.dmpFilesize
32.0MB
-
memory/388-130-0x00000000042F0000-0x00000000062F0000-memory.dmpFilesize
32.0MB
-
memory/388-139-0x00000000042F0000-0x00000000062F0000-memory.dmpFilesize
32.0MB
-
memory/388-137-0x00000000042F0000-0x00000000062F0000-memory.dmpFilesize
32.0MB
-
memory/388-133-0x00000000042F0000-0x00000000062F0000-memory.dmpFilesize
32.0MB
-
memory/388-124-0x00000000042F0000-0x00000000062F0000-memory.dmpFilesize
32.0MB
-
memory/388-174-0x00000000042F0000-0x00000000062F0000-memory.dmpFilesize
32.0MB
-
memory/560-172-0x0000000000000000-mapping.dmp
-
memory/576-85-0x0000000000000000-mapping.dmp
-
memory/576-103-0x0000000001DB0000-0x0000000003DB0000-memory.dmpFilesize
32.0MB
-
memory/772-144-0x0000000000000000-mapping.dmp
-
memory/848-72-0x0000000000000000-mapping.dmp
-
memory/908-108-0x0000000000000000-mapping.dmp
-
memory/908-167-0x0000000001FB0000-0x0000000003FB0000-memory.dmpFilesize
32.0MB
-
memory/908-169-0x0000000001FB0000-0x0000000003FB0000-memory.dmpFilesize
32.0MB
-
memory/908-168-0x0000000001FB0000-0x0000000003FB0000-memory.dmpFilesize
32.0MB
-
memory/908-165-0x0000000001FB0000-0x0000000003FB0000-memory.dmpFilesize
32.0MB
-
memory/908-161-0x0000000001FB0000-0x0000000003FB0000-memory.dmpFilesize
32.0MB
-
memory/908-160-0x0000000001FB0000-0x0000000003FB0000-memory.dmpFilesize
32.0MB
-
memory/908-159-0x0000000001FB0000-0x0000000003FB0000-memory.dmpFilesize
32.0MB
-
memory/908-149-0x0000000000000000-mapping.dmp
-
memory/1068-105-0x0000000000000000-mapping.dmp
-
memory/1088-173-0x0000000000000000-mapping.dmp
-
memory/1100-171-0x0000000000000000-mapping.dmp
-
memory/1116-143-0x0000000000000000-mapping.dmp
-
memory/1128-77-0x0000000000000000-mapping.dmp
-
memory/1532-131-0x0000000000000000-mapping.dmp
-
memory/1536-101-0x0000000000000000-mapping.dmp
-
memory/1600-117-0x0000000000000000-mapping.dmp
-
memory/1812-141-0x0000000000000000-mapping.dmp
-
memory/1824-111-0x0000000000000000-mapping.dmp
-
memory/1876-57-0x0000000000000000-mapping.dmp
-
memory/1892-67-0x0000000000000000-mapping.dmp
-
memory/1900-218-0x0000000001C40000-0x0000000003C40000-memory.dmpFilesize
32.0MB
-
memory/1900-208-0x0000000001C40000-0x0000000003C40000-memory.dmpFilesize
32.0MB
-
memory/1900-225-0x0000000001C40000-0x0000000003C40000-memory.dmpFilesize
32.0MB
-
memory/1900-185-0x0000000001C40000-0x0000000003C40000-memory.dmpFilesize
32.0MB
-
memory/1900-179-0x0000000001C40000-0x0000000003C40000-memory.dmpFilesize
32.0MB
-
memory/1900-184-0x0000000001C40000-0x0000000003C40000-memory.dmpFilesize
32.0MB
-
memory/1900-175-0x0000000000000000-mapping.dmp
-
memory/1900-186-0x0000000001C40000-0x0000000003C40000-memory.dmpFilesize
32.0MB
-
memory/1900-187-0x0000000001C40000-0x0000000003C40000-memory.dmpFilesize
32.0MB
-
memory/1900-223-0x0000000001C40000-0x0000000003C40000-memory.dmpFilesize
32.0MB
-
memory/1900-201-0x0000000001C40000-0x0000000003C40000-memory.dmpFilesize
32.0MB
-
memory/1900-203-0x0000000001C40000-0x0000000003C40000-memory.dmpFilesize
32.0MB
-
memory/1900-207-0x0000000001C40000-0x0000000003C40000-memory.dmpFilesize
32.0MB
-
memory/1900-224-0x0000000001C40000-0x0000000003C40000-memory.dmpFilesize
32.0MB
-
memory/1900-209-0x0000000001C40000-0x0000000003C40000-memory.dmpFilesize
32.0MB
-
memory/1900-210-0x0000000001C40000-0x0000000003C40000-memory.dmpFilesize
32.0MB
-
memory/1900-211-0x0000000001C40000-0x0000000003C40000-memory.dmpFilesize
32.0MB
-
memory/1900-212-0x0000000001C40000-0x0000000003C40000-memory.dmpFilesize
32.0MB
-
memory/1900-214-0x0000000001C40000-0x0000000003C40000-memory.dmpFilesize
32.0MB
-
memory/1900-215-0x0000000001C40000-0x0000000003C40000-memory.dmpFilesize
32.0MB
-
memory/1900-222-0x0000000001C40000-0x0000000003C40000-memory.dmpFilesize
32.0MB
-
memory/1900-219-0x0000000001C40000-0x0000000003C40000-memory.dmpFilesize
32.0MB
-
memory/1992-170-0x0000000000000000-mapping.dmp
-
memory/2028-114-0x0000000000000000-mapping.dmp
-
memory/2044-62-0x0000000000000000-mapping.dmp
-
memory/2044-162-0x0000000000000000-mapping.dmp