asyncrat | 53cdc49c7fb83b419c07edb45c544b106aaa37db00e8a37211678af6350a82f1

Resubmissions

15-07-2024 07:42

240715-jjvf9aycnb 10

15-07-2024 07:37

240715-jgbw5avgjj 10

Analysis

max time kernel
436s
max time network
428s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
15-07-2024 07:42

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Borat/BoratRat.exe
Size

20.0MB
MD5

65b694d69d327efe28fcbce125401e96
SHA1

049d4d71742b99a598c074458f1f2d5b0119e912
SHA256

de60ecbbfef30c93fe8875ef69b358b20076d1f969fc3d21ab44d59dc9ef7cab
SHA512

7ab57642e414e134e851d9aa2ed3ef8b483f3a5f77877cdc04e08d7f95c44884f8ccc6beaf8ba7f6949cfd7398c46be46c024d4fdeacd3a332d4565609baad5b
SSDEEP

393216:V+G+oTCP+Zw6NLIsFfskh1BmXGnfBd+Uw:IGpTCP+Zlnk0rmkBYUw

Score

10^/10

asyncrat evasion persistence privilege_escalation ransomware rat spyware stealer trojan

Malware Config

Signatures

AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
rat asyncrat

UAC bypass 3 TTPs 3 IoCs

evasion trojan

Bypass User Account Control

T1548.002

Disable or Modify Tools

T1562.001

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\consentpromptbehavioradmin = "0"	Client.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\enablelua = "0"	Client.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\promptonsecuredesktop = "0"	Client.exe

Grants admin privileges 1 TTPs
Uses net.exe to modify the user's privileges.

Account Manipulation
T1098
Renames multiple (4488) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Modifies Windows Firewall 2 TTPs 2 IoCs

evasion

Windows Service

T1543.003

Disable or Modify System Firewall

T1562.004

pid	Process
2200	netsh.exe
1644	netsh.exe

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000\Control Panel\International\Geo\Nation	BoratRat.exe

Executes dropped EXE 1 IoCs

pid	Process
4588	Client.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Checks whether UAC is enabled 1 TTPs 2 IoCs

evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\enablelua	Client.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\enablelua = "0"	Client.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\de\System.RunTime.Serialization.Resources.dll	Client.exe
File created	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsSoundRecorder_10.1906.1972.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\VoiceRecorderMedTile.contrast-white_scale-200.png	Client.exe
File created	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.ZuneMusic_10.19071.19011.0_neutral_split.scale-125_8wekyb3d8bbwe\AppxBlockMap.xml	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_x64__8wekyb3d8bbwe\Assets\SmallTile.scale-200_contrast-white.png	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-96_altform-unplated_contrast-white.png	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\3039_20x20x32.png	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.StorePurchaseApp_11811.1001.18.0_x64__8wekyb3d8bbwe\Store.Purchase\Controls\Xbox360PurchaseHostPage.html	Client.exe
File opened for modification	C:\Program Files\7-Zip\Lang\ja.txt	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ru\ReachFramework.resources.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pl\System.Xaml.resources.dll	Client.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppPackageAppList.targetsize-32_contrast-black.png	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Assets\Square71x71Logo.scale-150.png	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Dial\Opacity.png	Client.exe
File created	C:\Program Files\Common Files\System\ado\msadox.dll	Client.exe
File created	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsFeedbackHub_1.1907.3152.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\InsiderHubWideTile.scale-125_contrast-white.png	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\Weather_TileLargeSquare.scale-200.png	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_x64__8wekyb3d8bbwe\Win10\MicrosoftSolitaireSmallTile.scale-100.jpg	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_neutral_split.scale-100_kzf8qxf38zg5c\Assets\Images\SkypeMedTile.scale-100_contrast-white.png	Client.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\ipsid.xml	Client.exe
File created	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.YourPhone_0.19051.7.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\AppTiles\contrast-black\SplashScreen.scale-125_contrast-black.png	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_1.1911.21713.0_x64__8wekyb3d8bbwe\Assets\Store\AppIcon.altform-unplated_targetsize-16.png	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherImages\210x173\39.jpg	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-32.png	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_x64__8wekyb3d8bbwe\Assets\Background_RoomSetupDisambig_DeskScale.jpg	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\mso20imm.dll	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteSplashLogo.scale-125.png	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Xml.XmlDocument.dll	Client.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\OSF.DLL	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Security.AccessControl.dll	Client.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\lib\plugin.jar	Client.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libcache_read_plugin.dll	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteNewNoteSmallTile.scale-125.png	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\zh-Hant\UIAutomationClientSideProviders.resources.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\cs\PresentationUI.resources.dll	Client.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-processthreads-l1-1-1.dll	Client.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Yellow Orange.xml	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\contrast-white\StoreLogo.scale-150_contrast-white.png	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-white\MixedRealityPortalStoreLogo.scale-100_contrast-white.png	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Globalization.Calendars.dll	Client.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\demux\libps_plugin.dll	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-72_contrast-black.png	Client.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\msvcr120.dll	Client.exe
File opened for modification	C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppPackageSplashScreen.scale-100_contrast-black.png	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-64_contrast-white.png	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\contrast-black\LargeTile.scale-200_contrast-black.png	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_3.6.73.0_x64__8wekyb3d8bbwe\Assets\SplashScreen.scale-200.png	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteAppList.targetsize-256.png	Client.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\legal\javafx\public_suffix.md	Client.exe
File created	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsStore_11910.1002.5.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\AppTiles\contrast-black\StoreSmallTile.scale-100.png	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Dial\ApplySticker.png	Client.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\System.ServiceModel.Resources.dll	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\202.png	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteNewNoteMedTile.scale-125.png	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.1907.2471.0_x64__8wekyb3d8bbwe\Assets\ScreenSketchSquare44x44Logo.targetsize-48_altform-unplated_contrast-black.png	Client.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\de\UIAutomationClient.resources.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\es\System.Xaml.resources.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\zh-Hans\System.Windows.Input.Manipulations.resources.dll	Client.exe
File opened for modification	C:\Program Files\Java\jre-1.8\lib\security\cacerts	Client.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\IFDPINTL.DLL	Client.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\de\System.IdentityModel.Selectors.Resources.dll	Client.exe
File created	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Home\LTR\contrast-black\WideTile.scale-125.png	Client.exe
File created	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Dial\Zview.png	Client.exe

Launches sc.exe 1 IoCs

Sc.exe is a Windows utlilty to control services on the system.

pid	Process
1496	sc.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Event Triggered Execution: Netsh Helper DLL 1 TTPs 6 IoCs

Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

persistence privilege_escalation

Netsh Helper DLL

T1546.007

description	ioc	Process
Key queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key value enumerated	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key opened	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key value enumerated	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key opened	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe

Checks SCSI registry key(s) 3 TTPs 3 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName	taskmgr.exe

Collects information from the system 1 TTPs 1 IoCs

Uses WMIC.exe to find detailed system information.

Data from Local System

T1005

pid	Process
3592	WMIC.exe

Enumerates processes with tasklist 1 TTPs 1 IoCs

Process Discovery

T1057

pid	Process
4136	tasklist.exe

Gathers network information 2 TTPs 2 IoCs

Uses commandline utility to view network configuration.

System Information Discovery

T1082

Command and Scripting Interpreter

T1059

pid	Process
2368	ipconfig.exe
1656	NETSTAT.EXE

Gathers system information 1 TTPs 1 IoCs

Runs systeminfo.exe.

System Information Discovery

T1082

pid	Process
4452	systeminfo.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0000000001000000ffffffff	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\0	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "1"	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16"	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6	BoratRat.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\Shell\SniffedFolderType = "Generic"	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1"	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\0 = 5000310000000000ef58643d10004c6f63616c003c0009000400efbee9587170ef58643d2e00000082e101000000010000000000000000000000000000003e715a004c006f00630061006c00000014000000	BoratRat.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0"	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\0\0 = 4e00310000000000ef58583d100054656d7000003a0009000400efbee9587170ef58583d2e00000083e101000000010000000000000000000000000000005dd68e00540065006d007000000014000000	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\Shell	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "1"	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16"	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\0\0	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\0\0\MRUListEx = 00000000ffffffff	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\4	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1"	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 = 14001f50e04fd020ea3a6910a2d808002b30309d0000	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\0\0\0	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1092616257"	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\4 = 3a002e803accbfb42cdb4c42b0297fe99a87c641260001002600efbe110000007c2e33c908d2da018361775a15d2da01a4c4795a15d2da0114000000	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\4\NodeSlot = "6"	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0 = 5600310000000000e958717012004170704461746100400009000400efbee9587170ef58583d2e0000006fe10100000001000000000000000000000000000000e4f50f004100700070004400610074006100000016000000	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0"	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1"	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 00000000030000000200000001000000ffffffff	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0 = 7800310000000000e95871701100557365727300640009000400efbe874f7748ef58583d2e000000c70500000000010000000000000000003a0000000000c4f2200055007300650072007300000040007300680065006c006c00330032002e0064006c006c002c002d0032003100380031003300000014000000	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\MRUListEx = 00000000ffffffff	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\0\MRUListEx = 00000000ffffffff	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\0\0\0\NodeSlot = "1"	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202020202	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Mode = "4"	BoratRat.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\4\MRUListEx = ffffffff	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0"	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\MRUListEx = 00000000ffffffff	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0 = 5000310000000000e958d37c100041646d696e003c0009000400efbee9587170ef58583d2e00000064e101000000010000000000000000000000000000006c549500410064006d0069006e00000014000000	BoratRat.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1"	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 0400000000000000030000000200000001000000ffffffff	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 00000000ffffffff	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-464762018-485119342-1613148473-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\MRUListEx = 00000000ffffffff	BoratRat.exe

Opens file in notepad (likely ransom note) 1 IoCs

ransomware

pid	Process
1296	NOTEPAD.EXE

Runs net.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1908	BoratRat.exe
1908	BoratRat.exe
1908	BoratRat.exe
1908	BoratRat.exe
1908	BoratRat.exe
1908	BoratRat.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1908	BoratRat.exe
1908	BoratRat.exe
1908	BoratRat.exe
1908	BoratRat.exe
1908	BoratRat.exe
1908	BoratRat.exe
1908	BoratRat.exe
1908	BoratRat.exe
1908	BoratRat.exe
1908	BoratRat.exe
1908	BoratRat.exe
1908	BoratRat.exe
1796	taskmgr.exe
1908	BoratRat.exe
1908	BoratRat.exe
1908	BoratRat.exe
1908	BoratRat.exe
1908	BoratRat.exe
1908	BoratRat.exe
1908	BoratRat.exe
1908	BoratRat.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe

Suspicious behavior: GetForegroundWindowSpam 2 IoCs

pid	Process
1908	BoratRat.exe
1796	taskmgr.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	1796	taskmgr.exe
Token: SeSystemProfilePrivilege	1796	taskmgr.exe
Token: SeCreateGlobalPrivilege	1796	taskmgr.exe
Token: SeDebugPrivilege	1908	BoratRat.exe
Token: SeDebugPrivilege	4588	Client.exe
Token: SeIncreaseQuotaPrivilege	3592	WMIC.exe
Token: SeSecurityPrivilege	3592	WMIC.exe
Token: SeTakeOwnershipPrivilege	3592	WMIC.exe
Token: SeLoadDriverPrivilege	3592	WMIC.exe
Token: SeSystemProfilePrivilege	3592	WMIC.exe
Token: SeSystemtimePrivilege	3592	WMIC.exe
Token: SeProfSingleProcessPrivilege	3592	WMIC.exe
Token: SeIncBasePriorityPrivilege	3592	WMIC.exe
Token: SeCreatePagefilePrivilege	3592	WMIC.exe
Token: SeBackupPrivilege	3592	WMIC.exe
Token: SeRestorePrivilege	3592	WMIC.exe
Token: SeShutdownPrivilege	3592	WMIC.exe
Token: SeDebugPrivilege	3592	WMIC.exe
Token: SeSystemEnvironmentPrivilege	3592	WMIC.exe
Token: SeRemoteShutdownPrivilege	3592	WMIC.exe
Token: SeUndockPrivilege	3592	WMIC.exe
Token: SeManageVolumePrivilege	3592	WMIC.exe
Token: 33	3592	WMIC.exe
Token: 34	3592	WMIC.exe
Token: 35	3592	WMIC.exe
Token: 36	3592	WMIC.exe
Token: SeIncreaseQuotaPrivilege	3592	WMIC.exe
Token: SeSecurityPrivilege	3592	WMIC.exe
Token: SeTakeOwnershipPrivilege	3592	WMIC.exe
Token: SeLoadDriverPrivilege	3592	WMIC.exe
Token: SeSystemProfilePrivilege	3592	WMIC.exe
Token: SeSystemtimePrivilege	3592	WMIC.exe
Token: SeProfSingleProcessPrivilege	3592	WMIC.exe
Token: SeIncBasePriorityPrivilege	3592	WMIC.exe
Token: SeCreatePagefilePrivilege	3592	WMIC.exe
Token: SeBackupPrivilege	3592	WMIC.exe
Token: SeRestorePrivilege	3592	WMIC.exe
Token: SeShutdownPrivilege	3592	WMIC.exe
Token: SeDebugPrivilege	3592	WMIC.exe
Token: SeSystemEnvironmentPrivilege	3592	WMIC.exe
Token: SeRemoteShutdownPrivilege	3592	WMIC.exe
Token: SeUndockPrivilege	3592	WMIC.exe
Token: SeManageVolumePrivilege	3592	WMIC.exe
Token: 33	3592	WMIC.exe
Token: 34	3592	WMIC.exe
Token: 35	3592	WMIC.exe
Token: 36	3592	WMIC.exe
Token: SeIncreaseQuotaPrivilege	4304	WMIC.exe
Token: SeSecurityPrivilege	4304	WMIC.exe
Token: SeTakeOwnershipPrivilege	4304	WMIC.exe
Token: SeLoadDriverPrivilege	4304	WMIC.exe
Token: SeSystemProfilePrivilege	4304	WMIC.exe
Token: SeSystemtimePrivilege	4304	WMIC.exe
Token: SeProfSingleProcessPrivilege	4304	WMIC.exe
Token: SeIncBasePriorityPrivilege	4304	WMIC.exe
Token: SeCreatePagefilePrivilege	4304	WMIC.exe
Token: SeBackupPrivilege	4304	WMIC.exe
Token: SeRestorePrivilege	4304	WMIC.exe
Token: SeShutdownPrivilege	4304	WMIC.exe
Token: SeDebugPrivilege	4304	WMIC.exe
Token: SeSystemEnvironmentPrivilege	4304	WMIC.exe
Token: SeRemoteShutdownPrivilege	4304	WMIC.exe
Token: SeUndockPrivilege	4304	WMIC.exe
Token: SeManageVolumePrivilege	4304	WMIC.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1908	BoratRat.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1908	BoratRat.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1908	BoratRat.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe
1796	taskmgr.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1908	BoratRat.exe
1908	BoratRat.exe

Suspicious use of WriteProcessMemory 54 IoCs

description	pid	Process	procid_target
PID 4588 wrote to memory of 3660	4588	Client.exe	98
PID 4588 wrote to memory of 3660	4588	Client.exe	98
PID 3660 wrote to memory of 4452	3660	cmd.exe	100
PID 3660 wrote to memory of 4452	3660	cmd.exe	100
PID 3660 wrote to memory of 2380	3660	cmd.exe	103
PID 3660 wrote to memory of 2380	3660	cmd.exe	103
PID 3660 wrote to memory of 3592	3660	cmd.exe	104
PID 3660 wrote to memory of 3592	3660	cmd.exe	104
PID 3660 wrote to memory of 3800	3660	cmd.exe	105
PID 3660 wrote to memory of 3800	3660	cmd.exe	105
PID 3800 wrote to memory of 1724	3800	net.exe	106
PID 3800 wrote to memory of 1724	3800	net.exe	106
PID 3660 wrote to memory of 1664	3660	cmd.exe	107
PID 3660 wrote to memory of 1664	3660	cmd.exe	107
PID 1664 wrote to memory of 2812	1664	query.exe	108
PID 1664 wrote to memory of 2812	1664	query.exe	108
PID 3660 wrote to memory of 2932	3660	cmd.exe	109
PID 3660 wrote to memory of 2932	3660	cmd.exe	109
PID 2932 wrote to memory of 412	2932	net.exe	110
PID 2932 wrote to memory of 412	2932	net.exe	110
PID 3660 wrote to memory of 892	3660	cmd.exe	111
PID 3660 wrote to memory of 892	3660	cmd.exe	111
PID 892 wrote to memory of 3128	892	net.exe	112
PID 892 wrote to memory of 3128	892	net.exe	112
PID 3660 wrote to memory of 5112	3660	cmd.exe	113
PID 3660 wrote to memory of 5112	3660	cmd.exe	113
PID 5112 wrote to memory of 3256	5112	net.exe	114
PID 5112 wrote to memory of 3256	5112	net.exe	114
PID 3660 wrote to memory of 3028	3660	cmd.exe	115
PID 3660 wrote to memory of 3028	3660	cmd.exe	115
PID 3028 wrote to memory of 3776	3028	net.exe	116
PID 3028 wrote to memory of 3776	3028	net.exe	116
PID 3660 wrote to memory of 4304	3660	cmd.exe	117
PID 3660 wrote to memory of 4304	3660	cmd.exe	117
PID 3660 wrote to memory of 4136	3660	cmd.exe	118
PID 3660 wrote to memory of 4136	3660	cmd.exe	118
PID 3660 wrote to memory of 2368	3660	cmd.exe	119
PID 3660 wrote to memory of 2368	3660	cmd.exe	119
PID 3660 wrote to memory of 3956	3660	cmd.exe	120
PID 3660 wrote to memory of 3956	3660	cmd.exe	120
PID 3660 wrote to memory of 5092	3660	cmd.exe	121
PID 3660 wrote to memory of 5092	3660	cmd.exe	121
PID 3660 wrote to memory of 1656	3660	cmd.exe	122
PID 3660 wrote to memory of 1656	3660	cmd.exe	122
PID 3660 wrote to memory of 1496	3660	cmd.exe	123
PID 3660 wrote to memory of 1496	3660	cmd.exe	123
PID 3660 wrote to memory of 2200	3660	cmd.exe	124
PID 3660 wrote to memory of 2200	3660	cmd.exe	124
PID 3660 wrote to memory of 1644	3660	cmd.exe	125
PID 3660 wrote to memory of 1644	3660	cmd.exe	125
PID 1908 wrote to memory of 1648	1908	BoratRat.exe	126
PID 1908 wrote to memory of 1648	1908	BoratRat.exe	126
PID 2140 wrote to memory of 1296	2140	explorer.exe	128
PID 2140 wrote to memory of 1296	2140	explorer.exe	128

System policy modification 1 TTPs 3 IoCs

evasion

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\promptonsecuredesktop = "0"	Client.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\consentpromptbehavioradmin = "0"	Client.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\enablelua = "0"	Client.exe

C:\Users\Admin\AppData\Local\Temp\Borat\BoratRat.exe
"C:\Users\Admin\AppData\Local\Temp\Borat\BoratRat.exe"
1⤵
- Checks computer location settings
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1908
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe" C:\Users\Admin\AppData\Local\Temp\Borat\ClientsFolder\9942A1B384B91A05CDBD\Information\Information.txt
  2⤵
  PID:1648

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /0
1⤵
- Checks SCSI registry key(s)
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1796

C:\Windows\system32\wbem\WmiApSrv.exe
C:\Windows\system32\wbem\WmiApSrv.exe
1⤵
PID:4700

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3588

C:\Users\Admin\Desktop\Client.exe
"C:\Users\Admin\Desktop\Client.exe"
1⤵
- UAC bypass
- Executes dropped EXE
- Checks whether UAC is enabled
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
- System policy modification
PID:4588
- C:\Windows\SYSTEM32\cmd.exe
  "cmd.exe"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3660
- - C:\Windows\system32\systeminfo.exe
    systeminfo
    3⤵
    - Gathers system information
    PID:4452
- - C:\Windows\system32\HOSTNAME.EXE
    hostname
    3⤵
    PID:2380
- - C:\Windows\System32\Wbem\WMIC.exe
    wmic logicaldisk get caption,description,providername
    3⤵
    - Collects information from the system
    - Suspicious use of AdjustPrivilegeToken
    PID:3592
- - C:\Windows\system32\net.exe
    net user
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:3800
  - - C:\Windows\system32\net1.exe
      C:\Windows\system32\net1 user
      4⤵
      PID:1724
- - C:\Windows\system32\query.exe
    query user
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:1664
  - - C:\Windows\system32\quser.exe
      "C:\Windows\system32\quser.exe"
      4⤵
      PID:2812
- - C:\Windows\system32\net.exe
    net localgroup
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:2932
  - - C:\Windows\system32\net1.exe
      C:\Windows\system32\net1 localgroup
      4⤵
      PID:412
- - C:\Windows\system32\net.exe
    net localgroup administrators
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:892
  - - C:\Windows\system32\net1.exe
      C:\Windows\system32\net1 localgroup administrators
      4⤵
      PID:3128
- - C:\Windows\system32\net.exe
    net user guest
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:5112
  - - C:\Windows\system32\net1.exe
      C:\Windows\system32\net1 user guest
      4⤵
      PID:3256
- - C:\Windows\system32\net.exe
    net user administrator
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:3028
  - - C:\Windows\system32\net1.exe
      C:\Windows\system32\net1 user administrator
      4⤵
      PID:3776
- - C:\Windows\System32\Wbem\WMIC.exe
    wmic startup get caption,command
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:4304
- - C:\Windows\system32\tasklist.exe
    tasklist /svc
    3⤵
    - Enumerates processes with tasklist
    PID:4136
- - C:\Windows\system32\ipconfig.exe
    ipconfig /all
    3⤵
    - Gathers network information
    PID:2368
- - C:\Windows\system32\ROUTE.EXE
    route print
    3⤵
    PID:3956
- - C:\Windows\system32\ARP.EXE
    arp -a
    3⤵
    PID:5092
- - C:\Windows\system32\NETSTAT.EXE
    netstat -ano
    3⤵
    - Gathers network information
    PID:1656
- - C:\Windows\system32\sc.exe
    sc query type= service state= all
    3⤵
    - Launches sc.exe
    PID:1496
- - C:\Windows\system32\netsh.exe
    netsh firewall show state
    3⤵
    - Modifies Windows Firewall
    - Event Triggered Execution: Netsh Helper DLL
    PID:2200
- - C:\Windows\system32\netsh.exe
    netsh firewall show config
    3⤵
    - Modifies Windows Firewall
    - Event Triggered Execution: Netsh Helper DLL
    PID:1644

C:\Windows\explorer.exe
C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
1⤵
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:2140
- C:\Windows\system32\NOTEPAD.EXE
  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\Borat\ClientsFolder\9942A1B384B91A05CDBD\Information\Information.txt
  2⤵
  - Opens file in notepad (likely ransom note)
  PID:1296

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Persistence

Account Manipulation

T1098

Create or Modify System Process

T1543

Windows Service

T1543.003

Event Triggered Execution

T1546

Netsh Helper DLL

T1546.007

Privilege Escalation

Abuse Elevation Control Mechanism

T1548

Bypass User Account Control

T1548.002

Account Manipulation

T1098

Create or Modify System Process

T1543

Windows Service

T1543.003

Event Triggered Execution

T1546

Netsh Helper DLL

T1546.007

Defense Evasion

Abuse Elevation Control Mechanism

T1548

Bypass User Account Control

T1548.002

Impair Defenses

T1562

Disable or Modify System Firewall

T1562.004

Disable or Modify Tools

T1562.001

Modify Registry

T1112

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pidgenx.dll.BoratRat

Filesize
1.4MB

MD5
b3aa7d3733c8f465eb63860bd0925298

SHA1
f82b15b01971f1316fa70061149ef9600ffca16d

SHA256
51d4b553cc3876165fd09c6bbda4044b2a832e345af766a06f94e32f1037dc27

SHA512
28472246e48da95cb6ae714538819fa5d66dc2aeb3fd04c86e1f1fa668b2036b8aff6e8793b2fe3ee111ca2ae1711a19e7ed80f8faffbd49766650bfef95f497

Download Submit
C:\Program Files\Google\Chrome\Application\123.0.6312.106\Installer\chrmstp.exe.BoratRat

Filesize
4.0MB

MD5
295059f5a036607ed075900ae192cb47

SHA1
beb64a3561a22508773aa5c8e18e8c6f3a74773e

SHA256
eaf56e0eb0bd2313094f4c8de6a5aa3b5806328de2d0847435d76e1457107521

SHA512
663489862d5d31f629df1de0bf7655b878e3e3d959607f5bbdf3e215b3c144f1dabd514fee7b9b02b8df2d0bb28d625505c4ecc85066fe84913339024e4309e4

Download Submit
C:\Program Files\Java\jdk-1.8\jre\README.txt.BoratRat

Filesize
48B

MD5
669f409238ac270d2caed9c008806668

SHA1
30f989d5b8e6cc3dc373beded8feb8b1182e822a

SHA256
dc1c7eb31cac0efe4c7064cedaa701fccbd45668da9b126ea516f088fd3506b2

SHA512
c4139ad46f8a8d6adcc32657dc7047709ac807f68ac182b1752d57d1fc62bd0aafff6fe7aa8fdd8ba287a2102b4023917f21f2fbe16fbe2adc12b227685d2d55

Download Submit
C:\Program Files\Java\jdk-1.8\jre\Welcome.html.BoratRat

Filesize
960B

MD5
bb33ccc02ffb52993dbb01fbf56d3227

SHA1
8d318caabd011017488c97ef73ed2800129a2db5

SHA256
c9191e8d6d5d0c7550c7e0c02b397aa200c44ffb07ce642e2b3311e5996b5f28

SHA512
eec6a3ebe226c432b4e082620119e990f89ab3e92d50dbd5660ef0ca84838f65a1b4d0a80145bd51c8b42c431c09007a75f35f509f27d9c0e7b680400fdbf028

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\msvcp140_1.dll.BoratRat

Filesize
23KB

MD5
ad0919e3e28acb328a4ed93b49628501

SHA1
643e7b3bfc9507eba6e8fb2a9080afc30a50faab

SHA256
8fed7134f0557a1b99d5a4632f4f471a19f13fa73286e4f68102d1b462042508

SHA512
6a734c9911642b3686c1fa1fa5790ffac004c04cfadeecd08290d2c9d656f0b919033e3f7258ff6bbe1623d6ca07c00cc21e6a0b8abe79c3c38ef1b9ae6950a2

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\msvcp140_2.dll.BoratRat

Filesize
182KB

MD5
9b9b9a33b9fbb845ca96d3020dcb4b55

SHA1
af1a29e5c7f7ef15c334fe468d3c9e82852e4544

SHA256
b58c50309bd4c597e426430ed94ab41efef9e2359cbebfb8c3b062c90e440b76

SHA512
62a993436ea4c33f4a18e37749749725d02a62f163a8b3b25b7a616de657669e5fbed07987aee42f2afc9fefbed20159608f4b58c11b4a7820631a6897630b3b

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\plugin2\msvcp140.dll

Filesize
558KB

MD5
c29f9119754ae67bef5b185e31953130

SHA1
1a0f6abe83a5e85698306f2602d7884d81b84dd3

SHA256
63b8fae4c5bbb026ce1506dbc7d68f0539f4db636bcd6946002b4195a2878aa3

SHA512
29d699187faa733b1fd40ea5fb75a698d2c73a659fa7da47f2b2a88ff8aec4b35bb1845197b7bf9d3a28fd777aa0c61214b58a50ed07c2aa855b31158e82e88a

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\plugin2\vcruntime140.dll

Filesize
95KB

MD5
ab0f019cdbb44f965b9dd74cf19dd3e3

SHA1
1625c95973f3297b58a86f41b5c64a789beb0672

SHA256
f3a1b8604a243632ce4f17f0117f188a035cea76f1ee7d8a4304244cfef3832a

SHA512
9f640de601ca3e028bc9d98b2238d3d2fcef48ed79cc1c1b381914e1672cec9e6b72209cee32009671a6e9926b9ea02b6b174d3a2594b74e0552ca0ade0bbc8b

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\plugin2\vcruntime140_1.dll

Filesize
36KB

MD5
e68579c0e98e4f83158fe35c72974b98

SHA1
21b142f127f35675585f7a5265e063620dfb4af7

SHA256
0d5fa7c807e4fc4749dccb0aa1c88d154d64e3be71f19441f82837791050c3a3

SHA512
bd24e8acba093301ca025ac2e318570f4295665a8275c94bc9eaab949adccb647caafbc4e822b796fde4be39503694ec137e3009880d441e6f6c69add40d8943

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\server\Xusage.txt.BoratRat

Filesize
1KB

MD5
e1bfb88864abd59bbc7ea73020d2daad

SHA1
ce47088db44cde4dd4e42e17a75745e49228b9d6

SHA256
55f68095e6f5128c76a54431f7e918343c2dd76d88190bcddbe484d8c6a31e37

SHA512
4d04e0d0891dbf4f3209b66d3f46874368d94cc91783fd39f65ea9c87b1eb5152dfab3d3c2b81f4816d13e3ee52584efec935fdfb4ca326090c1aba97cb53bd5

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\classlist.BoratRat

Filesize
82KB

MD5
615750077327ddcc2813bafea0388bbd

SHA1
dac2c4b23433371080067a95b9e974060c3f7734

SHA256
66823a13f286a44a7014647c71b106514d6eb2b3c86bd03ae5b85e4c78cfd298

SHA512
a31273e8f805cac4d4a07243bd07c66ed666f75a74b14d91239e09dd799237d868f46b78bb38851f94e04c1240a7ada2badf3947c1ec0cc22f82f79ed075efe5

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\deploy.jar.BoratRat

Filesize
4.8MB

MD5
80d1a013465229ea27306df1a295767d

SHA1
ce41bb7629a5b46d3bf826415a39a9ca567ec4ed

SHA256
efaac349a5812988898e0c47469e27f8f96a4b926b599a6cc6f2dacb1e443ca4

SHA512
1c7518ae8a2668be5fb2c1f66077f13068a8adee713309856c1853f065ae5d9e0847db60dead5748b421bf08ad53dab9cf6d7a5e69add500dcd731e5aff6c5e4

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\deploy\ffjcext.zip.BoratRat

Filesize
13KB

MD5
672e9260902161af2e8fef384c0d1c24

SHA1
ee797182117291bd0b0e63d9add7ac7f1ebfaf09

SHA256
076f746c6bc45b45a18e47ce16005a22faa8f33c985da930656a3856c93f8657

SHA512
e7de1b02b3359716d7fa5e332bc08eba32ee7489e6c4c58c76020ac72c302da325ae47223d85d6710d011c4409777a16e9812518478a3aa4d2efe4c7cf9c04d4

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\deploy\splash.gif.BoratRat

Filesize
8KB

MD5
28204e49e5952f174ce918b010bb6419

SHA1
03ea7fda13bb68911a6ba0b78e6fa2005444e872

SHA256
d5271a339e385e8fb003fd029719be41e062472382969135802594e661b456d8

SHA512
fe352c7bf6bae2bd0d9cbaac1463cece49c13e9aaa8962b43cb02c70d8200c75f9f40c88dc525e713bf0e739cc1b95c626e9cfe39d3dec35b8dfaf4510ba05ba

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\deploy\[email protected]

Filesize
14KB

MD5
9bcb9a462650cc240931ba3106b3290b

SHA1
7e462dd5ae99bd9480d3ea4b9c7dc5de3b0eda38

SHA256
c4147d543e2bc13713f071abc373e6d44d2a8f3a64daa7e4a0a170d731c6cb66

SHA512
220598f9b513fe49cd6f4fb8517579630d377f01162756b74d513e4eb151222fd816529fd1c21e512ad0686cf3f93f1a58d0f5a9f9752921c0ae9eb6140f9a83

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\deploy\splash_11-lic.gif.BoratRat

Filesize
7KB

MD5
2ca88704dc0786f405bd00b314c01526

SHA1
852e08568ff811cdf49728616705331d33954ec3

SHA256
153a854d20eb2d3d3a4d02bde6114bc068c0be17ba489773a1d71ca0fd2f0d15

SHA512
74e99558217f32fbb85d5a4c70131e2a18c41fdd5aa6536f5115b5b7dcdd4ffd9904a394751a1f57adb7f08c1cb864a5eaf45c4a5bac4e0c7a5c04dac224f9b2

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\deploy\[email protected]

Filesize
11KB

MD5
38f7b164ae57ed9c200bd8639356c881

SHA1
0a5b12b3801823865a0227c777e3958589a92ce3

SHA256
23a3a22deeafb87e8b67517fbfd71c50a6cb23a473e9884c3f59e640ad2232a5

SHA512
d898742f0619ab0cbf7b4ffaec7955d2c9c382d3f102ef483256390ed6ea4cf322dafb41a62c5b77afa1bc4b7a6428566806d5ffe7cef93a7b90a3b200d3a615

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\ext\access-bridge-64.jar.BoratRat

Filesize
192KB

MD5
2e2801e9751367a73b93031ba3048c63

SHA1
ea751f883659f15ed92f0acaaccd687b3ddaea56

SHA256
b7cb1cdfdb2931728d539df873bee0097459ce3c1fcf8be54d82ee74690eb684

SHA512
3091a1cbee7aa739ea2edaec9c0a02a2cd8d8778dce692c25f4a3f79c5539b2bc7eb8a20bac3f3c9b35c46995da78bde671fbd78341359ece8a53091b9d3f2fb

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\ext\cldrdata.jar.BoratRat

Filesize
3.7MB

MD5
6ea7ef3873eca99f43a94e29c431c94e

SHA1
70292feff47217f97735d264faf612cb5ac96ed2

SHA256
09d1ceca015433609b2d7d832e169655bd076ad4edbfaf4adbd98d9469fb4019

SHA512
dbeb7940443ca326d91e440d3de45f5e9557ceac041283febc94c2d0674a4a36ab8f3ee08228ce56bc9dd8d265e920879dc17934e4ce09e404d7c14030df7f33

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\ext\dnsns.jar.BoratRat

Filesize
8KB

MD5
a7e90a36540ca74d96ca9213fef7d354

SHA1
d3684e43dac7c86f0507e7ffd5b710e5bec8185c

SHA256
4bf208cb326dcb379ef75caccac1974c30b91b14742696782950724d0c5093ca

SHA512
ba9763d4e2143f95527c8706be42db2370c4b1918d4128114c0c16ecbce87837635b50f994b152282a10ccda707456813f2a5c2bc0aa4391935dbf93946ff93b

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\ext\jaccess.jar.BoratRat

Filesize
43KB

MD5
0774a8e090a7372c49a8928c55c687f6

SHA1
9f19f62336edaed347e3e032b52f9116b818fa67

SHA256
442acd8371c067edf020d43cb0cf943ff957d2b70a375ba9b1eb01eb3d6dc508

SHA512
aa3aa58bd5bffeffd6bc16244b9402e8647bf78538eb9ff03971725e681adcb80f385ca98c427d40d324c7c5a6f4b1292959b080d49a6610e6ca54b0f935d047

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\ext\jfxrt.jar.BoratRat

Filesize
17.4MB

MD5
81e48a2c50176ec0ebe5dd7d6e09ab78

SHA1
d8d4c99c8c389d3ed427bbb7a4bd1aab0dc06a41

SHA256
a958c08e25e33b67f614b1b619b4d1de0e5fe35a964400db8943b0668f862c8b

SHA512
53779a3889d7c0648dcbc5a5abe11726f94a0781ed2798ebcca5da1cc67324114f3d843b23d9cc7311f1e5214115019794b32e166c551cc70d4ed6c2520f47ae

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\ext\meta-index.BoratRat

Filesize
1KB

MD5
cb0072f02f7d61624070a949b247fac2

SHA1
ddf1f1ce4932cbdc8c5a522f5a295a7afcdcc263

SHA256
ec9abda3e310602be1b3a47edc9e466bd78bd71cd9faabc1caa6a6837bf0b71f

SHA512
177f989a85eeb7b650ff187fef8ab36bf581d23edf450b9d00595a04aefa77e3b2c9283d41e1e10d26c5e32594c903e21fbc3ea131f043d5cedc0ed0525c73bc

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\ext\nashorn.jar.BoratRat

Filesize
1.9MB

MD5
60708cbed8530a62f1235e6d3587e773

SHA1
580418a12234a78daaa5418959b4f5a7f75ad15b

SHA256
ee3fcf3584d2fa55482fec0628003df0d6bc18847341499f7e4d6aba55a75b37

SHA512
6d542bff9fbfe3eb67ddab6418e4a0c3f7d8c98141d5ff5b5c64d8fc64303a5c36941fbaf72aa849a8dd576d321d071b671f47cd4c017d20662f81254003de34

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\ext\sunec.jar.BoratRat

Filesize
46KB

MD5
169afe55bd90e55e62042f681baa7698

SHA1
3c088d8426f89d81507cab5c4976afe11738ebbb

SHA256
809a5e1e2d3179806140a1fcb02f6e9e924fcfb1994bedca2cf7f3413dfd5aec

SHA512
eb61c0a68102c5ef64e9360f110748963016b60ca0592dc7163bead27657af00ff9615f5fdf0c3988a57098fb99b70bf0f7758a8491b17c08a97c6042959fce0

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\ext\sunjce_provider.jar.BoratRat

Filesize
287KB

MD5
6350c65bf47f6710c4cb3f5750d02af6

SHA1
78bb7fb4d6a5baf3bae36f3f2bc16e451051c746

SHA256
1c02b5cbb95481a74f23c4d6997aac78ea13d7b973bd055471f35c821227dec1

SHA512
169df846faaf54381d6c3d6fa026462df529a6dd99af8bd3255a54f5a94558f8b60e32f68dfc65d119ec100f89de5fc7c9a86d73ece85ed34a565527152f6035

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\ext\sunmscapi.jar.BoratRat

Filesize
48KB

MD5
44a7772f1bd2bb888eedeb77913209da

SHA1
baf1db546d35fd81bdf4f29d22f2f4de738920a9

SHA256
241712fb89801a66cbac0d493862046a5b3106801f2315d6e76f26bb971a569e

SHA512
69cfb8f0f2d023224ad45de37a24591cb01aa064be0e768960775104c01a642ebb3665e76204499a1752408935115663cdf5964530026972a4ca4ddb27118d6e

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\ext\sunpkcs11.jar.BoratRat

Filesize
287KB

MD5
8fd9c9b6512f6d5bbbb9415f2fbf0e75

SHA1
c9d87f7f2255be5b75674e0e7f44572a9add512d

SHA256
4d36bc082b249ff38ddd7f4da4eacad0d466118d01bceeca5c75cfb46a2c4e63

SHA512
7e14e33e2daa288952644556f34b6a8648f23f07a7e223ba719c17f60e40295b1c3a6cd54c979267fd77047727869b56c4628bf4997298b8cfb305120935f521

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\ext\zipfs.jar.BoratRat

Filesize
68KB

MD5
f0bb9dc0c9d1eef5cade88803dbe0565

SHA1
284360bddb2f1618fb2e885a02a33e26eb8acf34

SHA256
eb779d31a0dd977865bcfbcbd3bbd46db4ef7f56249aaecd42bbad5c0cd58b88

SHA512
13e3aee46ab2636f6f50657f3beb3a6e276795e66216bd97bd42cebd5da887694cfa95168fc78f91644853310bd65dbaf43e9f8b5aa7f70b26e7e72051770ab9

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_CopyDrop32x32.gif.BoratRat

Filesize
176B

MD5
ff564e88dcc453cab9a3e485a7fe5d8a

SHA1
2be229e639d304bc6b3bf9f6ef1a3fc0277f14b8

SHA256
c73ae1b9e62749b67491eb8208599e57f0aa5b0cdef8a0cd86cc3357b3006876

SHA512
35a4a1233b0aecfe55de9794c287f0fefd2b394f1a3183847dedcf19749d972db28d8c6be0347390b0b9050e10ea8f0245438caaf5a3f22774b38900e702a2d7

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_LinkDrop32x32.gif.BoratRat

Filesize
176B

MD5
c2095da768fe506f94a84d945f6d65eb

SHA1
e6684183393c296dae092a30ae500100113e3b1e

SHA256
4982179c1f1b6a831626276048768c0b90a9e6951c03aced8f56946c64ef0877

SHA512
c334bd652c4b7d3418b0ecf4d616480daf334744bd11bcee1ec73c4095cc20b97072c4644c4924954007322ce7f098b61145795d7a777a5ad0d814ff42924028

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif

Filesize
160B

MD5
06e6345ac9ad860edde6519d6b408098

SHA1
922dff4a26ad01b9fe70c698f8a36c95c996032a

SHA256
b0ffe3a749796953bf78e627c5526e023d964b7d23ade5c140d50dc38f726e7c

SHA512
dc17cffab706bbb3e1124c0e0e54ea37863d242f445b2dc13237f530661e7458d6c8e7fabbd94b104505ade8a275d87139a97b60a6c72d451114d6183703c616

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_MoveDrop32x32.gif.BoratRat

Filesize
160B

MD5
93d69c52f0727762423d315e5525b06e

SHA1
57e876e3744a6a9dfcf419735e536e8d5edaafcd

SHA256
40250a5e3533336da1b4189cfd8be1adc88ddd468223c49270986512e01249be

SHA512
263e91288dfb60bebbb829f496ca64c413d05f362f4f5250b43d1b477574aa0cf02b0c07cdacf9bff7487e7a5503dfe4d1c3ad36c999001da142c67d0c9d046e

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\javaws.jar.BoratRat

Filesize
934KB

MD5
03ca1e789b1e5f8c4c15f0504779b5d3

SHA1
1ba6bdc66e74cd2f7c970db34db5db476aba57f1

SHA256
c79ac2322b185c4e804bcce915320e18547d20ded858051eafc085e06e44cfff

SHA512
8fec30491a137364ea94a90da6ac08c0c746b50ebfe5f5617483053c926acea1b084004310d6cafd0d85e353660308d9a45a26bb732bbc18423b8d88ac746fa4

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\jce.jar.BoratRat

Filesize
119KB

MD5
ad2b0aa033e0e211b0c8a3c4f0677e6d

SHA1
5b62f30af75f58008f6aafad694b5fca6c1efea1

SHA256
144855553abca20e949d9de58f5865c39f15716fc1cae6f18a7be4ce343a91b4

SHA512
9949e2259e65b4c7ce0532a79cdded45298e4b48b59aab588d12b70c29a4fbe23bc4eccc278f03f288030004230552b730df5d34cae1eadf9fa65177fe464bad

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\jfr.jar.BoratRat

Filesize
560KB

MD5
62a5e8191060c6336e4c166fe989c129

SHA1
3d98d5aa1246a3c83cda86c9fa7e953b03e8399a

SHA256
875f3d71b04b2bde4d4f49e04765b014d0ec3ca8d7296d9bc3e3761f8c0a1876

SHA512
a230b88d746853ffb57d55fa51e2974992f57b9978fbd01ed764f5fe251dba1af156a301b9da0d09e13c87c7d3b7ad55185ad2de78e076718f28610887848104

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\jfxswt.jar.BoratRat

Filesize
33KB

MD5
1906205c7bd2bf8d334693df908355a1

SHA1
137372348c8bb60ba577659242a8eda0351d5981

SHA256
16ca19e592e2a48bb968e2d82ed2156aaf8860b3ba0c784a8d30b60ab011fb1c

SHA512
29647593142f925026f6795ecf5365067fbb533e211fac5092f1ab58df5a2ad9c69c4674a9df989deef4e8f76198ae26b2dd21baae6aaf2d16822c4ee0e9e06a

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\jvm.hprof.txt.BoratRat

Filesize
4KB

MD5
ee7df7c3631c7a054d107e84b0b87d59

SHA1
41636b6ae984c0633a9971aaa9cca5d4e2e58e9f

SHA256
af28f868c45d4fbcd40c9a1ed9d902b99b7c0f107c5e07bc7b6d5c0bc13355d8

SHA512
1c63c2f806e77ed73014be19cf5df535774ec35b54e8a5924377ec49ab75150a5928852573cad7bc116e7738cfb0119f9f3e02f1de5553d8b3efdd39137036b2

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\management-agent.jar.BoratRat

Filesize
384B

MD5
8ecd504ca5f1db4154429f7fa80f5dc2

SHA1
7463a9ec011456052f778abf6d86998bcc081f35

SHA256
e2f5c56aad3e040622b57962b5c4fc90c1c28e49c6d8a6b9d4fe8b7cef7b0d40

SHA512
ee5965b0f3f19f977c05029cb5fa6edf306dd246a50f73f55b0089aa5b10cebf7132bf4fc7460cdac51471310b4b637dff7d6b5ba0abe47fdcf13b77dcb27467

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\meta-index.BoratRat

Filesize
2KB

MD5
424bf3ad5a709db728560c5235ed9b7a

SHA1
7cc507af5ec424adb5fefb3f39bd235f3dd2e4fd

SHA256
0386f6b55a31abca1bb0ec71add26b9f32f50e9a449d2ce770df0c08e48013ac

SHA512
04a6c42eaa5afc561ad333784f188bd28b5677800084a3368527214fe339f0ab6265f80d2b42a90c54bedc55a6dcfd625474c709b105156052b65c6c19c8dd02

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\plugin.jar.BoratRat

Filesize
1.8MB

MD5
022e6df301fb9967ade7f5f4c5a5592d

SHA1
daab3b26a5151331f6ea0f44c87b8d462f8ba133

SHA256
162e03af344ca848c3706587bb116362e4453aa084eb7db2f8bccdaca3f8540a

SHA512
e79213d8f4588f0ef7cf93461c6d1f1e82a00e36c5835e29b1d6946bbd9f913507a29c4ac1506443021abdf94acc520a62fc4f11bf888df577bdb36bca68cc3c

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\psfont.properties.ja.BoratRat

Filesize
2KB

MD5
015b6a57c043a8a86019aefb73ad2c1a

SHA1
64f8e6f0bd4c227e4867d6f685e5d4ec0527431f

SHA256
4fd31fb891ac25b163e2f2cbabab21a27a89c9e0646ddc8521894a872db10d19

SHA512
4315b1d82287e7279182af1b6d6fbd53a2cb5e3b859d167d8baab5c74c0f01b7c16e2ac4d9fc2a89ae50a84334f3ffb29990d8640f5e693581ec8dd16f6d3cdd

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\resources.jar.BoratRat

Filesize
3.4MB

MD5
4bb3bd8f0db8f1e4397ad2bc44af112b

SHA1
5da7b2304e3ea1ba0f4705d7f109c37fbe161142

SHA256
ada5ef1b4183d6d2a3bde50a0ead2298e98582c0541a549c51019eec9a00d658

SHA512
ac0a52cb426e0ea604294956907e1562928d31047c1c058079373fb943b014d5739c0a4e31646562caecae09297f7996a801e7c795d12445fba7784fa13e9562

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\security\blacklist.BoratRat

Filesize
3KB

MD5
7c2e5a843d9c8c640f7271923fa72ba4

SHA1
cef0950cf1db4d7112727cff99cdc01563acd34e

SHA256
5bc08b612385a102d6e4b60a8bd333e5569e47aafc446fbab9e9ea9237b0ebd8

SHA512
947976f7274cb1b7c2d6166515a73f5bb635f2a2f826d891a25d60edbda34648ef19dfb3c863cf9bfa3d3272fb86eb8d2a08c3e4f7f67e3466e850053422cd84

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\security\cacerts.BoratRat

Filesize
109KB

MD5
32975753f1cbad42e8fc9f651c2fda60

SHA1
da6be616b8c7dae6d1e81dd70235b6cc495e6ef4

SHA256
0372ee634d05b2b72e7441dffd122c8569dbb10c4decf94d6f148fbfafc398de

SHA512
b00f3f1f03a405bc2e4c06ba90c9a53c01b40459e2ed2b2aae6530495b536dede9bc3802c1667d6b11053cef7c3099a78b8e66a14f7d77cc0a89cc3f1e8b9340

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\security\policy\limited\US_export_policy.jar.BoratRat

Filesize
3KB

MD5
4f8fbf1dcfd86ccb516c670e653414dd

SHA1
08dcf61dbb504ea56308c4394073949b6797fa67

SHA256
2502503c1e53dc95b5b2b7318b746e11632bfe7cf37fb41b437cf0041af99d07

SHA512
1e89cde67631735b53342d5ab2bf73a02af7c49717b26af73b041487ef706d671aac33205520f5d790e7c0dc9b9a0b013a50e0aa962d7f3dd557c1b894243a1e

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\security\policy\limited\local_policy.jar.BoratRat

Filesize
3KB

MD5
98933b7a486e0fc14f2270bf28a6daf2

SHA1
657513f2b78d89b0c0b9e0e84e20fa31d1594924

SHA256
0c494498296bd268ac5e1f7aa174b448c01601c93f066e67309156f3fe5eb8e7

SHA512
c2b35eba92c165e3936a8b52d4d48207cf181545a1d080b944602b3a0ef37e747093fb67e2d6f82a44374e9e8ee1111c1bb35992d9e60034d1aa2244e692f03e

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\security\policy\unlimited\US_export_policy.jar.BoratRat

Filesize
3KB

MD5
055129f2c93d15bdb7ace1d01cb8a316

SHA1
3dce7c1c5fbcf9a3b36a6b54e0a55db5ea906461

SHA256
9772cb8ed650aa6f38e5eddab5ad0f897401f1a44488bd5ed9e5816f539dc727

SHA512
b42de1b7ac3f7482feaa8eb09f1ff612358c259a6ce9147f2961145fa2b4381b318efe5c13790297fc1e309d4c1c1fb0febb61138fb983948bb863b24a109a53

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\security\policy\unlimited\local_policy.jar.BoratRat

Filesize
3KB

MD5
76b82f3d019d7ab1cc5e2ee852e319e0

SHA1
b9046ddbd7afb8e3f618e45d2c8cf927149ae4d3

SHA256
7dfa0e353a811d3198080e943ba6ff36cfa51a1a33fb874015ff7a9729dc4f62

SHA512
1acd933df1f102475523013f854872d832a8ef1d3d7e4029b4e8499c1564dba4483b207f6a1d777e32caa73d03b96e640c9b5dbc0e941e10533d33a3fb84f978

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\security\public_suffix_list.dat.BoratRat

Filesize
226KB

MD5
f0aee47f76d2639d6e9149e36f51626f

SHA1
85f8ef82b3e08e745b2c03f69d61740e82fa63ae

SHA256
3efc7bcc25d1ce9c60d0e28bd83a742dcf8555f4ec374e2bfcdf14a3d1e7cc13

SHA512
b27369192a60a2a13ff194e1c6a57c33f55687d8dca391286be9d74b9b92f878fbf9a3e6418fddb4b6985097bcd78cd1b5be98ba90020f2a7b33ed0108fe8365

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\tzdb.dat.BoratRat

Filesize
101KB

MD5
85e61798cfcc1e2ca82e1fa12bd15ab2

SHA1
1eca462ba032bac33d05396ac8458aa44f503839

SHA256
5c6959776aa0f83cee82c481f60347d215afc2ab150643428f9d08b9a1a729bf

SHA512
dd3846acc14b3177a43a248715fb4dd02dfcd80d8343280b683a6cfeaa6a12fe4868ccbde22e92c18195e130299c321ec779907c1b63daaacde165bdec23b898

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\tzmappings.BoratRat

Filesize
9KB

MD5
09361eade7ddab9d30291194b96a446b

SHA1
5c591cf083363cb0c334ce0cac2f7f68f8ed976a

SHA256
331dd30b7c31ba45e6f538e785e0431cb4cab88ef5a5ecc47513ab62c104d815

SHA512
54ab7e3a6d6d0fd04d01b63b483484595d7a151cf5581f3fa0eb6d1df6533c3a5c3dc88c75ca04456ea61b5453084ecfeca72a91fa6dfc53a2415e5eb630c377

Download Submit
C:\Program Files\Java\jdk-1.8\release.BoratRat

Filesize
176B

MD5
bb883be16b77fe7680b7db82eed2554e

SHA1
e2b124dfe27cfc0b00fc90a383de31af4e751208

SHA256
ba0a8ab9ab70a4e180eeb405519879afc9b8cf156b3ce8dfeb97af2a577baf67

SHA512
41dba1dbc7f7a48d621f3a3f2bd116c0ea8c1c3714a21088538fc1e43cbdbadca1840869171601b57cee0fb5458ae0699de16fc8ba85c2a24f6487df3d12201b

Download Submit
C:\Program Files\Java\jre-1.8\COPYRIGHT

Filesize
3KB

MD5
7b88397bddc64479e9d5530130d283d7

SHA1
4b0bd1f0843b0813ba3b1cd355841c681ca94ae5

SHA256
030f26df66e51d85e495d5bfa100267f6fa621dbc954693a07b319051083d370

SHA512
35d1860b9d2a36ce29cc7a45d4f2ad202a0334e378a228b6308af3f5fba9471ba78659a48b8ee86895021b36d4f24bb9e21dbd5d2a46b31cd9d75936aa1c9be7

Download Submit
C:\Program Files\Java\jre-1.8\LICENSE

Filesize
48B

MD5
387165a09eac7c4d63021e0bec1b62dd

SHA1
ee6b2e73cfe75f846322f6cef405cd2ab1ac7f98

SHA256
423c08da16a460c8255bc8bbc32f8d60530185ff9cd3b872e84a7fe9691f79b7

SHA512
eead5af7d7d040855978782da947c149ca2af4cd9b39763083788b0017304a292200999b035cb21b90ffc7706b38a82fa59e1a61cb0915e39cb3dba0f5bfede1

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
192B

MD5
926257608e0f4f66ca326286c05f4e08

SHA1
f8243420b97bdfc7569c40964b5fbc4f01480895

SHA256
4c0cf54ae894b052fe56b2a4bdacf7f158e5fba0f2a9fa4d0d9c1dab7fe40a33

SHA512
31d493409c3c32a796be404c4f75b4e4e5fe57b582757acf2ef3f5ff2260a2305a4e0d318cbd788efaa2bf5d292e57df45b3ce4b68ac3b0156748a520ff49e57

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt

Filesize
192B

MD5
061ce498614c0518a0654ec07c54826e

SHA1
5a4ea81b86f7521afd447c69028586177635379d

SHA256
0b4a0b8bfc2b897839855fb515c1f4d54335783f5ab1da6f03719a9b9f3478d4

SHA512
49acbdf74a26bd18a58e874d1332f89f9d652b3908d50efd34dae82e9248004d32a6370ceda3dd46f6495db27dfad1f94a20729141828d7b8634f1e79e7edc45

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-console-l1-1-0.dll

Filesize
11KB

MD5
fde4c8e927b9e7c3696835dbccdda441

SHA1
a7af16efc0a21b4395d72bee8ddc9a110a3726fb

SHA256
f8fbe691320a709620fd21b52a64d29b1a7d098f89bf6cdb74b96345a4b55f15

SHA512
3bebd587cea39025c1dfacea95c638a5b898b2ed96b872f224ac8295f481851e1bc56a039b52c341dda6238750ba7c65d9ba82283eb3cd7c8d3d5f9d47bbb8a5

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-console-l1-2-0.dll

Filesize
11KB

MD5
78374e03bc3984d014ea4272036cb9a4

SHA1
50b6d1eafee8105483230e4a9f3fdb873cbf5ccd

SHA256
86a14c64f07cad2b6a9621c6278dcc98c661d53ad8765ed37a70ecd65072d7ad

SHA512
d823cf7f3784f3a5790b346363f820ea2ff065b8aa42d36eeccfc303ae26f468f0da1a4f1d0c85a05bb33173f74277e0486ec0fe5c56e8b4fe80b71c018ee1ea

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-datetime-l1-1-0.dll

Filesize
11KB

MD5
c55fccfbec828dd18b07b468ce0e4994

SHA1
dbcdb9a260ac5ca59d8afb54dc1608aeab0be237

SHA256
8a2afeac87cc5c6eb7031f75eb119dbb7c935d144a2430ba593b30aa80a85412

SHA512
03d10a1924319ae88bfd51b1120eeb4a8c2d34aeb05d34aa82c7b4b73af9399016c45b9497a16d0ac86c2f53c140ec3690b4c6286c681fad20dca5d7a68ef3be

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-debug-l1-1-0.dll

Filesize
11KB

MD5
19c3d1d763f60dcfd0b18293fb9ebb2b

SHA1
c2c7b57b6c1e64f3758dc3ad225f503abf98652c

SHA256
2211a9df5bdb56d597c2bf160b2b75a47de8170362b1240c937f5ad1844110fb

SHA512
c329edbf793ad52caa05830e1137f8028f289d41255f3d6924d6a272f6336372e2cccb2a279e5870ff8149cf4f234f19b331c2f2ffcee6c82033f74e9f3dd6b8

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-errorhandling-l1-1-0.dll

Filesize
11KB

MD5
ba993d7668d1891b646346605a79c910

SHA1
8e6929abb05bb3e1560c49b765ba5ca55fcfbc57

SHA256
42378bc6658385083f0498966fbe2aca252e019f4407dc203d2603c14b8a2c7e

SHA512
a72a391cce79b6f63135cbc9ed3156888c9b2e5c2161b324f5872fe2116fb1a5d4cb3e1c1de0e63ad06a186c135bd6e571d5634ce38d8757a845eb75b4129a38

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-file-l1-1-0.dll

Filesize
14KB

MD5
460deb5e76826c6cfd0571b5c7997c6e

SHA1
51ae6f2fc22bdb8a88718802ab9c9fbb2ce3302f

SHA256
6b81280af82dfd7312a026c908ecdd0deaffa679a493eda20ef07675bd3c2ded

SHA512
33cbf1335c94ea9a21e7f45e27a897b09c548ea7b9ebfadc423cfe97dc09ed612aad03d984b64f1e861737338fa38ef11d8e5f60ac3ae0f34fca712c3edf1c5e

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-file-l1-2-0.dll

Filesize
11KB

MD5
f751054b64017826b40dc56e40a30ea4

SHA1
913c0f875cceb549870efb8cf18352208597b19d

SHA256
8bc200072017641f729cf09c6491a30c666b2f3e7c8b423c9b1e770d680ece6f

SHA512
2dce9cd8537f3b30b37f1a81268c51645b809c3297c7971e8699f956ac2dd5194e85307aeef1803500db6b34c440cc8bd19a2c83c2c205af4eb4dfde65c872f4

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-file-l2-1-0.dll

Filesize
11KB

MD5
83e7f1e5a64c75397276e825c1d2ab46

SHA1
30ae5bf2193a3ab9f01bbb834fda0a057626ff48

SHA256
ad1b50d0c4bf0dc355a14954d34637e302bf86dcfad4630ceaeb8b81d2db601c

SHA512
da4753c2205dfb120daa00589bddadb2c45ca38b1c6607de2f273f34cc70fddf94c40d69be87a45fd94aba6dfd1187dbdae62350a86830b7085509dbc5a403e0

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-handle-l1-1-0.dll

Filesize
11KB

MD5
ee143417aca0425d3c70367f23c6c573

SHA1
7e32f532eec7a5f55df6b6b936e0db87cdec87a6

SHA256
a53d1f76b9e308c116a785d5428f15c04cdeb02ef18cd40afd388097f0b057c4

SHA512
8febe1f7b59d9077ae4b5ea3d16315aab0aba01cf699ab5ecb42388fcbe65a20e58b2f8912aacce108c04fda92e7e81a96144def8f07fec931a4fba9250dfa22

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-heap-l1-1-0.dll

Filesize
11KB

MD5
1d925bfcf092975cdd7e3eb545e573f7

SHA1
e89c2cefcd7c4c3e76e768c3e9095fd94be1977b

SHA256
595b1f203a471dd6589bc91395dbbdb7e9e9884b02e8a24f61d0147b7d09c549

SHA512
a232967e033b343bc7549f03633f36427a7aae65c026f355b0058870e502db0f2355eb3673a8940ff34f43be63d02e56aea026ce9f72245e6b95ec81c87b8d23

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-interlocked-l1-1-0.dll

Filesize
11KB

MD5
64543aad206a5589cbce5f55e5445298

SHA1
1135bc2c65479698786d17e645c65ce43c466cff

SHA256
03e38cf72b1078f21b39fcd223238b29605ea8f1b8d03069be7e35d172fb3f17

SHA512
8ef9a1e07aaf5155ad4cd2c905ab4692494a8f014754cb63b389d7b43e9580e47911028c8ad9f1ab6b3f47e5d8a55b594b694ead71d2c96d8f935c0f6e650068

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-libraryloader-l1-1-0.dll

Filesize
12KB

MD5
4ca7b36bb0276ae123f4d23db7a40cc5

SHA1
0d845ae180596c2d3e302d89da78c1af7b7e7f81

SHA256
100ffae8fcf70c137d8d6931702eeb7dcc5cc204e57a5981d76833293253692f

SHA512
9711e22f18eb85a17f73f59f157076f369766899ba575e3a437300314d342b8e13276c580768f358ef3eefa6de21aa0e753d18cf81f26bc55c6277d0d90a9519

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-localization-l1-2-0.dll

Filesize
14KB

MD5
fa9006bbee1a8902cfbd63e3d118bebc

SHA1
c9633404bc6d07fcc0f84f661891cf7cdac57918

SHA256
29d7137f35b8b2d51b7fb41369cebd46f9a490c7f05f4665f566c7cf2f392318

SHA512
240e56b9fffc26c3051e7d16d3730e64313a31e94733a0683a5c2f4f5649e289d680e8b2b87600ea1461cfc0d7063e14264f4f3387114101fa742e2ea1c55ad0

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-memory-l1-1-0.dll

Filesize
11KB

MD5
6b3b0f0f58f23db5af81b472a99a64d4

SHA1
05ad6b083111eea4d2f675a37ff5a6c0417f6abb

SHA256
c4487798c1b858ec3956ff4ec308bdfe3551e7c9f532ad36deeafb7be3595b87

SHA512
e59e438ebd66b4bd3d69b68796aaf11365f590d7d540c8a7d21085bba61177c03f8b804b364423a97f43b9a4bab7f203a6fb0b06871d62afc830486e71d547af

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-namedpipe-l1-1-0.dll

Filesize
11KB

MD5
2bb55410911f9943e2c4f4ae7c226118

SHA1
b0aef85659ce8ecffe1cc8db251691bb6e7b4b5d

SHA256
e37d0d7b967e5c69c60769163a33dfb40b5b48ecb1ca3190f20abc4d8cfb602d

SHA512
5eed822eec1d7bd63be4772463d93c58282ae129717af3430833366ad2c39728f8f5db025fb4ff3a5a05ee485f0eaf6d26add7111e9c2bbec6efa3c9beb58db8

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processenvironment-l1-1-0.dll

Filesize
12KB

MD5
57adb362428e34852c2218821cebcf35

SHA1
24d14602fce8a9542fa08d08d39e11e9283cd090

SHA256
125e3b71eaf07c22ab6481cc854102024271f9c9e29b61353ac3092398972d8f

SHA512
123cbbd47742909255ceca6a5e106c76eb299863e639d8e37bc10ed6ead8e19985d4dc68e6187416ce89bdae2fe741ffe1873d4e7b3e705b17c707eb577fbd28

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processthreads-l1-1-0.dll

Filesize
13KB

MD5
318b191df204460fe94fa47d0ad54588

SHA1
406011cef3eda35d8bf75fff976fb62473d4e510

SHA256
530c6a83b4786fa183471a79961c0900fe75420a2d1732997c8358fae7bec202

SHA512
2252642d366e19bb2db6975b645bb340332688bc21eca730cd0043c459a80ab0cd3eb9b2c93a1adbbad1f01cb172b7fdae3add21337ecc771b0f08f68d4a4671

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processthreads-l1-1-1.dll

Filesize
11KB

MD5
f425f7b6bdd0f1ec5053582ec0b059a0

SHA1
ff05115fc09bd1b4c52c5cf3a197faee4d3c649d

SHA256
3cd5c617d21ddd499514873ca65d05e89a0534971fcad9a2f19902e3dee56260

SHA512
10a161f2adb58a564a021136832e63c78095726dbe140ddcfd6a6d123acbfbfa8fecfec288587c0e19b24b34198a9bfd9955110660ad0a531f63b7267028a0dd

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-profile-l1-1-0.dll

Filesize
11KB

MD5
3b64b732e6329e9d36bacf5db31b2a89

SHA1
737332975de69e1a0b6068d8d2365b3545157f17

SHA256
11af0bf8998876e4bdc3d8fe96002ea479932d1322deb164c14e6aa142eab66b

SHA512
62e1f4a6e6a7517cd97100865bc20c958e066c4a3da40a991b124dcd8cea450205c9a014f6a5d81008fdba2a4429bf73eb8d2012d125963d8ef77a4c3a24c51b

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-rtlsupport-l1-1-0.dll

Filesize
11KB

MD5
c979ff1b9fb1c466bc71d44c4ddab2d1

SHA1
b3ffa7d9f21454ef852719d9381c7516828ff89a

SHA256
97ad7d18d2e6e99940d7675be491bda1734a6402a4035bbc3d822d55707eedc0

SHA512
0d2c390aed34c7b67530c595b25699416af1fabdbdc80d3c64379d034f81323f4a9d27a256294ab0e8f727851a87b6805e110db5a93637eff4cb41edc7644f5c

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-string-l1-1-0.dll

Filesize
11KB

MD5
7797b9c2ebd060ad4f25599aa2cb62f2

SHA1
2c683b4c2a4fcf3aa9a7d7f2457754e9c4c3f2e3

SHA256
c4b7b75a4f3d3b6f1282212593bfbf13af46704afb113b93143790abfb80dc5e

SHA512
e9d54a73fe7996e01f6023a39fc5be3f2075459c8f5396aa2785a9a840eb20aa40793ab3f2754c6c050538ec380a7e3737c198a0c9b41c20f15674d290a44fa9

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-synch-l1-1-0.dll

Filesize
13KB

MD5
222f4d99eed36596af4c33d70f34eecc

SHA1
1a711ff3461415363422c0d2bbd0d9ac42962575

SHA256
53cbb2b7f5e35b2512c8b350b35a6f2bd0696004c4e7be1db5192ab63f1da516

SHA512
cbbc410df26f6e6c993e7529d931439289c984ce21a4be4de29c04b267a0f6147c8b9ae485a28e33d69c752dbf072c70784ba7c262441d9bbd556f0d535deaa9

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-synch-l1-2-0.dll

Filesize
11KB

MD5
1718e85ed3c27278bf99a3887b3298d1

SHA1
231726838341ee194a3d4bad5b9dc0b96b6f7a57

SHA256
7b1fed41bd15bd9dd205ec4ea6e033a2d2baa0a2bdde818e543710268a5fea79

SHA512
eab675823da128d61b38a7bb5940bf932b76f92af1fc00129d2b0ca533c46a69cd695aa112b9ffb6d0d3ecf9f95efc85f577e09d553c648656842b777346f725

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-sysinfo-l1-1-0.dll

Filesize
12KB

MD5
9922f4662ef0c0a637701abf30171e44

SHA1
1a546aa0c39ad1344e18bcf0eeb19bd3eb14b897

SHA256
72a1a52e2623ed6726263a75b66c0edfe8d18bd21f7d353b5160f954584cb680

SHA512
c8a9c26b76eb96567f585e8969aef9b843a3c7cc2ca6fb5dc3b4116d326dc1da41f0e555cecf382fe8a3ab8962666f32a6f64ad6d8ee69473f44cbec351e9c36

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-timezone-l1-1-0.dll

Filesize
11KB

MD5
41e94626ac6aa8f06cbada0ae2fd830c

SHA1
76bcf39f8e0fd4638cc41c3a3053234b20d73c09

SHA256
db8a902d4217eb1842d78c54dff7d95c12ccf58bc67a2d320f13fb65328ce1ba

SHA512
ef4dcfe5e6d9ec69b51a1aa4bfc1880ecf596379dc00bdad46708517f9dd3c7d5a4043ae41fd5e7ab791b71b94744928e79ec66f45a6a57d94eee127ab7714b3

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-util-l1-1-0.dll

Filesize
11KB

MD5
b61681eb3f8e49ad03f01e5727e4e4cd

SHA1
d79e1b6aba852bf7fc8ffe670753d0635709fb35

SHA256
baa2fa3f9bdad52ef02468fddc19dd8d533249a7139f3f82659b85e80fc594d4

SHA512
d39f038620dff005908dbd28b5b6fcd43a97746ee7eb8eadcb57d1d0ca82a71cb0883260f15a1832839811fdadbc7390e2069bd215deb87fc64f8c4d30fd3a67

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-conio-l1-1-0.dll

Filesize
12KB

MD5
308b25b59cc585b873acdc2220f6c991

SHA1
94d7c535c3e3a96e08c4db809498f64fc578c67b

SHA256
f9b85c4a5cfdeb68ac23fa8837595d68696f8cef8ad3db39ab87720ceef432c5

SHA512
b20b4d5ac33cb4d1305c662abd226094d6bcce815606b52a2cf8b42d8f0a861c6832f0ac67425fcb0298240ef51223bbd58f4099732cdd7137962e30fac68e3d

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-convert-l1-1-0.dll

Filesize
15KB

MD5
d28463c4962b58ff405aca9f958b33d0

SHA1
327efeabe7c1b2711d28e7d2641d8f614a6841ad

SHA256
9f8eebd3994742e8e1637fd437bf6c3c25afcce2464e11e2a39714cab70f1023

SHA512
f5497b19a8e48ed6de163463d2adcceefc4c7866c5dc983f6056cf425be389c4f78a10f36713314536c14be770feff6348f70e3da0df7483d65202f8e771d831

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-environment-l1-1-0.dll

Filesize
11KB

MD5
835b9fa54acbfe1d47bb8285fc23a4d3

SHA1
84ec5dd0d01d40ee023d607d5a0bc75dc4a557e5

SHA256
728c6f39fe837dfa5447bec080486f3b983e59db794fdf99add3645e29bf17c6

SHA512
f53c66467ee007d1e67bacba2513e7f6d88a20a647abd1794a459e3e3e7830d108279289eeddd016c43deaf22c27213456ff3f56888bd30ca2c43e96bf427daa

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-filesystem-l1-1-0.dll

Filesize
13KB

MD5
d97a43f78825e09d8a7d087b32a88e3b

SHA1
7c140e2348dadae6c67bbc6374ef4c40de5d7ade

SHA256
1f22fe9c91cf878734f4bd96fb769da0295780ff7a8be9e5bd9632333b569b70

SHA512
3f5568f4854788ab31563ecf07086e5119d8334012b4f457165dd172e1f8bd3637da2ffc7fbf38cc5bb8c986044c11902e52ab803d713dcc6d5b4897b1e81735

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-heap-l1-1-0.dll

Filesize
12KB

MD5
3913a3d29cada2dfddf1e60aa2304854

SHA1
45b242cea505edc73f253c6eb9b244a64f617484

SHA256
96e7f788a1d13234296e8a22c7923c61327cc63cb91a8b31e6a39f090c2028ba

SHA512
b7c40f4be0ab9c5de949c5ece5af599c32342824891555c0a16aabf771e60d573b24f558383e280c930e16a2818b535d1c44cb71efb0177dfe9e41483ee167f1

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-locale-l1-1-0.dll

Filesize
11KB

MD5
2652cf8c59f86b78c2a4dcefd8bca007

SHA1
b0b032136ceda5b1293a3c76aaff6924feb0e35c

SHA256
ce87a40ab6f37e500d7971d743d10d11bf899bed5ef0e7050864e5996dc4cb40

SHA512
d553fff77fed658562c8ed589291c349c94eb48edbd33ca8a387670e1f21b6fdb76ed13978d93c87906b5535d08df07d823e0baba586037bb2ac2814c320f779

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-math-l1-1-0.dll

Filesize
20KB

MD5
3a77ade73473b14972966ea28c3d0e68

SHA1
eeb80a721c973d78a03c7fc1a058153e22a76d47

SHA256
5c60c91de56bfb7909f519daa60d549cedfc528b356f73987bf82acdadab3de0

SHA512
3b84d9dccf825c126f5be74796ad370581860c6edaf7043c94ac3a8582138faad67759bf1beb409d5ffc391f9eef37ae9209ad54b08cf740a2256cf9cfb8ae52

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-multibyte-l1-1-0.dll

Filesize
19KB

MD5
ce41d202b61a48ff937d19dedf9ef24a

SHA1
8709973689ccbae050a247dfb17dd91ece9a1a3c

SHA256
f818fcc322ec5608488876072af09772bd2860bcc4e1049f4d6684ba84223dfb

SHA512
38574d12df4a78279cae560035c38f6b23a6fe1170ad7c5c16e39aecb7d6ab01d872a603022a43d945a6ee75ec811c3b736cc8000921c83444eedb139d2843bc

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-private-l1-1-0.dll

Filesize
62KB

MD5
984e9171edc64484bd2b9741312c5682

SHA1
2e1704c6113a7f0c70f087130724600fe0009967

SHA256
a889b8f73b371116f178f133d1612edea1fee362e3e6ad11e782dd167a964814

SHA512
f6e0378062aa6dbf7a3b86d93b2ac2380f3b44a2c159e3a385a0a9d82be359e1bdfcdbb63f31bbfaeb1d605f77b8f12ed3d69d9cb4bc31702593dedc3c868e30

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-process-l1-1-0.dll

Filesize
12KB

MD5
2e86a42dc1216693dbc5b8fc54604cda

SHA1
62cb96054015ee0a510b1ce5f895e31417ca4b9d

SHA256
2d1963c803292539449e477fbec25c0214281c93cbcdc521699befddc305bbf2

SHA512
66b6219a9905bc6acfddb53c8c7ea10d87cd371c24aa026362bbf402daa97b3e08287345a0c033f25eabc3a53fc36af07738363b5d3c67f575eba3f4190e9969

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-runtime-l1-1-0.dll

Filesize
15KB

MD5
787e10b59a6e5c1718dd6b79748748f7

SHA1
155fd973a3c0fbdd40745fbd91599ceeb51adb2e

SHA256
db153e98cae8680c06ce053ba6f34e2e5f5f88c1176e55fcf4d08a64101d4b94

SHA512
0f21e0d24ab84fb30e560ea966a2dd1140431fae75c88b87d38e48ba4b6565f9964e61493599d3e92564cb5ff9b94919a2d3eab7e34f8b659b65aae26b502274

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-stdio-l1-1-0.dll

Filesize
17KB

MD5
ec0d67c0d1b7cc0025e2d3dbd5df45f7

SHA1
76b61d3f2f3aadcc649b417aba073e9bedf06bef

SHA256
7af1da359568dc68a37e6d014848447c1ad8916196271c26f4473232f5c11454

SHA512
fc8b7b437e3fe9fa8c4c70b5758111dfeb00f43b3877bac102067baf89a55b3348d977c8b7ecfb7ccddd9da9351ca24d2720edf04cf78991ca7cca85a4f62195

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-string-l1-1-0.dll

Filesize
17KB

MD5
e8386e0bb24ee8d95c46f18052fd0f29

SHA1
562ccb38728e7510758fb022c959f99e857b817f

SHA256
9bb8df88fc7b4aa951a6a03929fbce5454d1d622ada364e9f7c82d21b712e812

SHA512
cd8847bbdfa392c099b3a8a7adeb0578942d52888f4ec6d90f91960fcc678e2a8c62a13f0cf679d416bed29b3dd74f6f28a17fdb6a6b98b24d00e113df912daa

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-time-l1-1-0.dll

Filesize
13KB

MD5
5b868e156a2be9cb75a0feb46bce6ff7

SHA1
1412941e1fb6069721fec036a9d7fd9c4c550464

SHA256
310d53911c5875c22264057f91b29e753ceb5ae193669fc8bc31872c22c037dc

SHA512
2055c059e76fe4c8b55c8c9d6e9eec08f1ca964e844a6ab71f55ae06348368a3e269ef455fec139f5e1ea7f7215330353ffebf68cb038bfb2d1f54a6e1975896

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-utility-l1-1-0.dll

Filesize
11KB

MD5
37be4609002d5822ada2fca3372c6def

SHA1
b64787b6a129e7f407d86e6432c1f54825c33696

SHA256
ee87296afb7e6dea4ef6bc74f9955dae810e65ffd01912b21f5fdb081a1ab430

SHA512
c57a81cb6c34dae9d767f874ae0cbefbf0442d24e8dad9139f7d35ecf5cb5f785046d9ceb634ed2918fe333dff342ee7a520dc902f95548afd70aea4eba37b31

Download Submit
C:\Program Files\Java\jre-1.8\bin\ucrtbase.dll

Filesize
1011KB

MD5
fbcd9b6e453f79879b201edf81fdeaf0

SHA1
9beae114961a3f622d16f8c3a49713087ddfb63b

SHA256
cc66977da727c3feb0f738a73dbe6521dcfdf8e309cf0b125e43c3a5bd3c3b5e

SHA512
3126ef15f5b962bd975ddf97dc032de43ccacd3952002b84c458a94bf0ab1d85e5b67ad1f254acad7022f45942bd2ac31f8badbadcaf4a4b6408b58f687ec526

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md

Filesize
1KB

MD5
1883ddccbec503c9454df56822fa3285

SHA1
52fbafb7475c24c4be414c7b46b640d74f91a9a7

SHA256
4c7dd7194ea490c21476f059bace14199764e3169b2655fe2e33b7157ecb84ef

SHA512
b83c5cbb826e909cf60860d40011b21ddea534aa873372a403a9688de44ea19843ae1b051ac1548d74507beecd98778910990d7035a54ab30f80705d6951e9dc

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\glib.md

Filesize
31KB

MD5
ab086a3490adb4cf11fea69f9ab00a9b

SHA1
3da098ab962cf92cfcecba269b537dc5c460596f

SHA256
6816132c0772a7dfbf404fcd1153238d59c51079149c801ab7252f5e68030c28

SHA512
68dea496e61f13d41b37adcc9e2f49361c731461b0a1378d83ef5bc6b49adee84fce99df18bcc02b295bfb0e77add62cc95b91f1ca2c0a436613e3085e83e304

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md

Filesize
34KB

MD5
18039ac9c67043b9d7f7395708910b40

SHA1
b8980b0d82e924d63ad9608560319f1e4ec8913c

SHA256
ce5d4ff038e5bb85717252c6f70ed18cd801c174ce82034c269c58797b83202b

SHA512
4aef06dba4b96d0294ecb674dfc4d7a61fe83a61bb2392ebf016d65d42f1ff6bae7e0ac87364f9f25e9f0cbe2324fbf6ac1f92d8a13f6ac7e572d023b41edc5c

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md

Filesize
23KB

MD5
ffdeab5ff8d2dc0eca9624367325511c

SHA1
54ed6418eef5e29871bc5f84f268168aa30ddc51

SHA256
1860a0b53c1f25a55a83eed5f9f89c0c50300705d285e5aa82b14837b258f37d

SHA512
3a64727979cdf2bf5cf0ae579451e5146e15e07731680368c8162db5e1d3591bb28c758da7139a0583c08957fe505c7fe14c1a1e2cd7dc5bf072dd011a0592b0

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md

Filesize
2KB

MD5
28e6bc4d8044a4ef0881d85f893354a5

SHA1
4c93f93f704e9bb6e04d7d5ff4e0dd432ad77b6f

SHA256
0c23b6fa0544c1baeeb9bfc35eeba57739bc915b8c3e0767d7d1de15421e0733

SHA512
05137219e275b6b18ad6dba7e5cbd95c9d92b9bbc7cac6bf262abfe42c4a50c90ed656abbb490f7ba0711d9ac14e87228cf67aae2ce552a17203015f1127bf40

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md

Filesize
1KB

MD5
fedc080961a5471c67510e8aa75fc749

SHA1
579c781512ef196875d2f310016be96a2cecf89b

SHA256
4b7a42347583819e69ecfe95a74384bd7f95647e4b07f474b2606b43627ac007

SHA512
13dccbab209851b702345804c145f0a33f7e216672efcfbaec83fae867ce5ecb13a2dc1719ecbf266f9e026d8b7e88b1519671bc339b6fca48e1a55deb695f6e

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md

Filesize
3KB

MD5
8f24b6446285fd5091eb0f223800fe46

SHA1
3f149d1302de6f561f108301a1576e5bb4cfd096

SHA256
d6909e25dac41f4c23e2d31eab62c2da7ebcf1037dbd48793977f3892f0538bc

SHA512
8363a4f434052f2a651c6caf2c9b8a8aa761d2c135daf2298796fb30d304e58a31cc249634c387e60d943645882489957023e617695eaf52ce4224680d899dd7

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md

Filesize
2KB

MD5
e182c7296ceb5fc0a781101fd134335e

SHA1
01cb0200f1d286ca8fc2643dde8ce748a38f7131

SHA256
c6dbb3a7eed728c9f6dc4362424b321272a2b959d468a4c88df40d9f70b88222

SHA512
4e2c08cc0eba92c201d563bb0727564363b26b37b001f2600f060c1ff51efd0d1979329b98314d19f8d96485ca105013daeccc3fed29c3bcca34c217ecfaebdc

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md

Filesize
5KB

MD5
fb2555407bef5137385fe13af64b191d

SHA1
4f9e346ed61601c5e0e76996c6200191a77ac359

SHA256
093f3bbb0e81f411dc57cda50f07c8fad86bd1d21e21718a0516278bab1b54bb

SHA512
ca90a0275e3594dedba2437fdfa2e03919e3805d106c5ee1fcca25ad3ea4705f9cf068103ef1168bee1e6517a412402b5aab1de345d2c53599f39fd39fe57431

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md

Filesize
17KB

MD5
2d87a07cdd8051b4e5416cf13225c550

SHA1
ebf6b7a1d50446d2a4547b6e02d8d202a308f3f8

SHA256
0f327f6702744b691d276b126cad01b21f7b3a730eb5ac8eb4e4ad553ad723cc

SHA512
b3ba716757e08eee871c21ac82aa2aa3ccef5e629a7b753d77be6b9dc66cdf438df473e2d61b6987626b8aedf82a4d10ddf09e7a75287b7fdf9bd4d22ceafb00

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md

Filesize
320KB

MD5
69624aaf4f10ac96f3520104306b80dd

SHA1
30bc992fd568f5456b9737bd5328fbb55e06e110

SHA256
d73cc99b81fc7547904fbc4effe3d64e67b4426d97cba05c59c55b924eb4d7ff

SHA512
fbece3807769662a55cb5d228faf97ef4552890a7f79eb9f24bfb6ce4f513552c35e929128450c77e2af958d13c809d625b072043fcbb2e530c3e27d9c8d6979

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\asm.md

Filesize
1KB

MD5
5e67d55d7f9ac4326ce9d3e34f7d088d

SHA1
81b452766f8700dd819809777ea022f9d7a7b40d

SHA256
bffd85bd6df767a4fd577e90bc57ff84586c6c2e245489571f76396479895884

SHA512
3d2f24046d883144041ec891221ae2957ac10024199f7e18233590f494ef969e5e72ff88a8684104f02666646229bc788b44c33f1189886e38864eabacb2dbc4

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md

Filesize
10KB

MD5
c0d2e709860e1db888e8efcb376f0441

SHA1
c6b1652e91670f45bf55825a09ea8c99cfb9e638

SHA256
5005c80d9d0ea9d90438f1493bf89287caa4094422a5a507219c849e31a80b8a

SHA512
12a0915d02c51b97d7a6543d7df43663c685773acf53fc1ee3c4a00b7a130f3c3f69058e32419b165f6a4d37d0e47eb8990c6fbd579481424faf8fcd0d4eea56

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md

Filesize
3KB

MD5
c9f32254e3c51dc3dee0d78bb5cca5b6

SHA1
43e993b86d9c628a0f660ec79833de8e74011239

SHA256
71bcf6e0118f85da25168a3cea2ce263e666fa2a8a088a62bf4a02c6a26b1f22

SHA512
eb2f1ea11c96e4ec720f04bdb038fb7f331a7dfef988e659c2c0ea51ef5d50eba3bb3524f91a62a1788a65e8c5fb57f593d8779a4685862dec7e12a4fbcdc5df

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md

Filesize
176B

MD5
94d09fd213569a1f308ed0639b502674

SHA1
f2385e93520036badd733028f19357383e445f01

SHA256
e5f1ad46d52e4aba01313ba7c792047fcffeee760c10468f6df522ed15b74e09

SHA512
7f01f8ad9888dd54e06c99020dd41b20680ec331ad87a539de0075ba901888e5b69c247edcb9df941a06d3c677ce6ce86eab8b8d9c91140cc07e2b1a72c118d5

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md

Filesize
1KB

MD5
b303ad6a7c9fab969eaa51cd85f13e2c

SHA1
b60fb385d6e9c48856030255ff1adfe915bb4f4d

SHA256
925e0d618530ed45cb04c7dacf2fd97da8c4a7758384b33092f2eef5d554b6ee

SHA512
5c10d147f20af5e0c3af38815b4b656b88d476eebbbb48ac6087236424263c69da241cdee6dd58ddbdeb5f9797e281c38582a36094cd251fd41a64627db958e2

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dom.md

Filesize
3KB

MD5
d9cff1b6117444d9e8747b677660d6c1

SHA1
68ed46be624189711a1decdc07d7bb7dab86ecca

SHA256
13ba759a16f33aaed2ea70a33c611159cee16964a72d3612626f5e5a34182425

SHA512
1b0554f20907ffa4e8853c8632d99d2298aa5f23d5cc59d6b7678012d4f023fcad2b35d84a80b27b7de83c2ce9e9f64e77303ff28896b3ce6e3f99958810e862

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md

Filesize
1KB

MD5
95e31f9910b46e2e9cbacb627b2a3ece

SHA1
73658939bb141131a0b2315ab904e8dae033bcd9

SHA256
5a48113fe825a944088202a75b2f5e6123f88763917c6e6e159469e749d8d9ab

SHA512
c64a2ed4ecfe70b04f878b956297f24fdc82a422b40c3f1b9fd8b2e28fad849cfbe1566e8503f0c7f0a110f15c882d1e1f16e137d2e3659aff04b9877df14efb

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md

Filesize
28KB

MD5
e47e482744a0a2355fb220241807c8a2

SHA1
5bce96ac48363589912859b00a9ae1dba5da49f4

SHA256
52c3c24f9ec3fd45120fccb0dfe6ed4899df0a81227b240ef1ed864b61f3044b

SHA512
1be91fcc0f0d87ec65adea14d9c6c509ca76c7c5b9b9a1d6e1295368b2a3aeed544c8949d162c34240e64c130d179596e24d2ef6c9111ac555e6afae5f3b15b1

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md

Filesize
2KB

MD5
7132ff58f5a37a222f031c34f4786caf

SHA1
910816211f8e94be8a0462ebefdd13f727c1a291

SHA256
d21fc58052c9ca72934760f9f9e15f4d4a668e90aa0e012a44d913b7fa037783

SHA512
457fbd4f6dc8d8c582ab6f99c0e7401ba16382ed81212e0cff7b69eeb7e2c758f7cbe2aa009afbf2bcbfc9568a5811e2889771c66ee432dad0abc2293626f4f0

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md

Filesize
1KB

MD5
c34c812efea14fed125d32bf7fafd8f7

SHA1
4591279a9811ee635930b0555fc1b40e46236329

SHA256
a5355ac5a7f90b381780c379b49d96403816ba944affdd933a319e9a5121270e

SHA512
d7be9aeb68eefb400f15e73f678b103b94c18e65ace641717bed9667a700e7543d96c4f70921baff8e0962caf0e14321247a3964649874293e436394b7aedc8f

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\icu.md

Filesize
2KB

MD5
8b0173d2d368d6cce52937cd00fa3fd6

SHA1
0ccdc90807c84d88a6a1cb4f7d7dec7f75ef71c8

SHA256
f98a75137ecbc5dd27b5b28fe23c15c97165f51f91ae17159986fb30cc5ccdc8

SHA512
8c69902f63fd42e9a3d4adec067f1791fc2704a5470d7dd08fe61304fcfb1ecd200896da2f5f3332f1b7720c9ca35a1f8ba754a06213c8cd871d89b6178226da

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md

Filesize
1KB

MD5
71497926bdc9d363205d257419c08628

SHA1
06bbdb414972c920806a7861c65b1fb08b3ccaee

SHA256
9ac9acc3990536133717cf0aed6904b33c7277585d2e9b0234d28d89bad21238

SHA512
745578f579fad17ae04da685a7615400011fae1a806f22192e3735a3df8fbc38b721604c64dfaffc907e1a02395406cfbcce53f7fa2c1d06f646e27f360bb9e9

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\joni.md

Filesize
1KB

MD5
f94072125c18c15affb6b21b64db3f99

SHA1
0528993d122aa27dc2e46aa304162d28e1911fa2

SHA256
49ab4185a9c314ccb32c53565150eed4a93f2c9472d5fefc105c8b952a6c60f2

SHA512
5659dcd308eaa2775e814b126af9fcddff7ff44fbc82fed9fef68bdf5ecd448fa798dbe00b325866045e6f1d330fd762feef9e1c1f0657fa347906147d3e0601

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md

Filesize
1KB

MD5
d64ea964017fcf070dc7455b18c9922f

SHA1
3b507c231da9b6be8776c1d665290a657bf5b058

SHA256
6d65f55b3978e7eddefdf1394509234c9f2645a3941757f7e780945a1a3e9cc4

SHA512
5c577e7f70485227770be386b210b58f28c8efe055c7d04f7d91c415379d44c6b2c87a37a94e2e5a8be6671511b178dbd860e6866d7d5fa282591c9eab9b54f0

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md

Filesize
3KB

MD5
f632023b8da52a20adecd120cb8271fd

SHA1
2ecafdf176b229da735d07e0fb393861ce0ce3da

SHA256
97d3cff474ae15f4cdb9aa6e0badf9c6d9b24c35b2d418b521b7bfd42ea57017

SHA512
5d25b6d4e5864b8762b2b153182f755b08a76305c167b735d057f611561ca55bd67b6f4e0351d7c9d0caec3f498adc25df46681fbc9f74acde4f1716002acf14

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md

Filesize
2KB

MD5
5ca6810f29e99961611013bc93e8c1b4

SHA1
a807e61c61ec7b546986019a1c530db72a764524

SHA256
151e8ab3ee76e4c604d21157394d9a3acb8ebcb6250c813f904140c71b7db803

SHA512
ffd49720a9f2e76f4428b9834a2721fba031560d5055af74892c688045a4700a57a34d2b5ab8e1d9321cac150c549b931cf11d99d798f43bf4aafc3e1e0d4e6a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md

Filesize
6KB

MD5
1783e7ebf1532af185708c1faf71d73b

SHA1
c543e66499fdeb26167dc1f4096e928cb192cdf9

SHA256
55ffe9b6ad3230612297619da73bfe88d72c23fa9cfe9386c93c996a5ece012a

SHA512
67d313607a059533afe1a13df69544b425bfe2779fc934dad6f62a606cc22e964c6b9a77da8e1c000d8296fb6767346474f79e480efc2d8dc42f70eeef96d820

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md

Filesize
5KB

MD5
07de82397b6fae855bc0fec024eef3ba

SHA1
518e6a46b0ca23decb4b2a40d8a920ca1edeea20

SHA256
265eb9194f78dec0ed5fac64611bc65d1665e5a07175570cb68fbc477cc8708f

SHA512
a13d92ae21f9a950b1a3fb4e0f73e60cabe4c026a941e75dac72b0b1c29ca88c35ab342faa9febfc277030bb8f18c204e3bd4481632c99807a7fd0cf859c0af6

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md

Filesize
3KB

MD5
a1fc940b69c4d0ad304710ef13a310aa

SHA1
af767c77e911a0aeb880ed959d9071efca93c354

SHA256
44f1e96a206130eb111eb013c94dc55bb83cbb89fa302ec9ed15690f9b8c8c05

SHA512
cbe17a56820127f5492eea8d8ef8ef304d26e6236e914bc975ea0aa8834bdcc46a5b0e39d5c21bb7d2fbf8a5c3653becfe4ba042bd294514da9b311641633bd9

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md

Filesize
2KB

MD5
64e4c372e70d6c9101419297a0fe8867

SHA1
afac9750ed936c7117a7ade1211e0134d89113b3

SHA256
59aa556705373e0caeb89d64d014e7fff4721712779dc6f68cbc0cdccd0df79f

SHA512
b0c7732c1c503ce3ab2564376c03c9a600038ea1a22241377f482ec0d4e210c26528c9a949e9b3443349348a4e77d3286a28950a183f85d283e5ad92852cbde3

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md

Filesize
2KB

MD5
ae5faf8639b88ddb5f7953edcb20aecf

SHA1
afedc0b65cc98c0728b01b7b037d5f1cc7bb65dc

SHA256
cabf54e87f2e97197658732a995d9791c1d9c974a4f0cf412313d64acba87df6

SHA512
bf07a41a53834a0fd8c141032bb4b7d622f9295c73b4bf725304f69822170d1d3b1deaf53814052dd785bd7c07af5759118d12a94e23b5181a14e079b69d8b16

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md

Filesize
1KB

MD5
991b28c11cd3a7ea54d99156a3231941

SHA1
9a34e30902f983ef6dc9fe52ae1fbb1241ca5f60

SHA256
69008e2eb84d94fe126008b5f38030a314992f9fe6709a394e986ba8fd595d0d

SHA512
f5497103beeb05c28009528723c83340a6c85bd394db0cb1cd66d528b8c24c50a1ddd3bcc09f1742420374c0ceb3466beafedaf162390d9394242d6393b7f69e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md

Filesize
1KB

MD5
cbebc10b0851b3815ad108426efb4bb1

SHA1
4f2f58aca0fc5d4adcfb8de57b8a2e99c6d00aa6

SHA256
71035a5bd33e537c39c4fcde1c068e3fff3f24c3d28ec164844804a12c4cd4ad

SHA512
653c4480611e3446d2bdb7442dfbb97e23b1f2f23f42906d0817148febfa02151da15240e958031ad27d378f51c85f7b26372edc510af58629526f0bb1ee437e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md

Filesize
11KB

MD5
37281248206d1bc2e987362198dd0d33

SHA1
482315a76a71d5aba55f34744d42256101dc675b

SHA256
49ce448d00df903f7f56f2b4a6555b92ba83470c8cefbefc5749a0a2fcf2d243

SHA512
60ca325000e835b8cb416f5f4893ba05fefaf56d9292b2d3ee8984ec956b46ac740302060d7c0008a3f8fd144b18d17dd8609aea991010da9df9d45a01f80c9e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md

Filesize
1KB

MD5
86e3a8c11e719ac48987cf5d05f3ecbb

SHA1
9c6391a50164d31b89d819608f6096bbb86cc7b8

SHA256
e349160ba8c0693955b6cbdb3d7c6174dfc94be1445d3d29dca84535b1401393

SHA512
2c9593c39a2515dbff3ffe178803fab18e77dfe1deabcfbe8e6c2cdf28d2474c836e08be28344e74f8f8552aa877ecc46afbc2108072c40f13cf79c2cf066507

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md

Filesize
2KB

MD5
eedf4049608057af108c2b5931c3dfab

SHA1
d5a79c02a945746191bafc5baed5a104f914c698

SHA256
104ce0fc4ec02bdef8ed55f2083248c4881530f704a513d483952360c59d705d

SHA512
cb2382bd631971485bbabfcfa59820233d9eedffd9ab490f620704c036d565f65e9acc7821bfd113cd7e2a488e9681eea32390f7e1b685fb8d43890d513b43af

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md

Filesize
11KB

MD5
3f687a0fa1da30d4bded9f38b20df4c6

SHA1
d5fc861afd997c2e2d4c0f71851625bfef326230

SHA256
9d09f844d9f19ff95b21b6b8b0ce5af88446fbee0f8a898fdd6bec094deb93b4

SHA512
f7ee30da59417903ee86cf215ba7a864b547c454600fcefce1a63c13cfd960a3312ff2dcfe77ecb25acd4946c7f3d9baf1ef3f5d75d5e5152da9b2e0cc996c10

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md

Filesize
11KB

MD5
39fa91fa9990fab4937b1561efd29276

SHA1
fc1bd0c8033514a2e56c6196f1bf1849b467969e

SHA256
7e78a10d7600c9a3b2824e0ce3de2e83a947bba576a4f8eacec5133fca6764cf

SHA512
7a2ace9fa72de710d10a7809e006336b683cc9d1e4e8ba5839275fff2bc59e978eb3366ae6bd47f2df04fea327b4aa9b79404ecc285ce58af2b5774d0115597a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md

Filesize
11KB

MD5
5bf3caeb3a353e8b39d8ce9bf7213d1b

SHA1
766847e2382f1fbcf5ae67e7fb94e6b3aa58a7d7

SHA256
5cf6ba91ee961089e45774a2565ac5bcb6aeb59504a2fec3947b281395d223c5

SHA512
fe05bfeff5f07618188c12235dbdf90ee835509cd74bbfab6c2ebd15ad7d15b9c06360b0c8703f507dbd6691e511db09f3e8bf8dfb4c50eeb75d7b93f7f18f17

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md

Filesize
1024B

MD5
d901020614c817914d9139830295d85e

SHA1
f5e261f830389e7deb415d68cd3d14c4f0aba4e8

SHA256
0a6e8ba81e6c47833221b793cff22d8bd5ef52db0c7e98cc336ad27c25ee482d

SHA512
7ad3ca72ac45545bc4d2b3d0cad19887416f11f4b67c97841e4c4376d1e43c119d46fc053a513aed2da05c1ca1032cb7e9c957fe33cfe504d87306bf8306b87d

Download Submit
C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe

Filesize
4.1MB

MD5
47422266f07741380b0fd7888a6dbfcb

SHA1
f11faf28cf7b333f1fd0ae41ecf4a562ba38a464

SHA256
881d25e1677e47a70fbac512a5c82ad2e254edcbfad71e366422397f2055e1b7

SHA512
65d3d5c2cc8900ba1c0f3f08e35031e87390ceb4a76f08c1771bbf87e8031d2a8bd06b9c634ad656afefebd67d0059187b00f0ee57e8eac0140bd6f99cae856b

Download Submit
C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub2019_eula.txt

Filesize
48B

MD5
2d6cdf040dd80715a3ec6752508c1ea9

SHA1
c81301b072d9213850955449eb319c0ba5dd139e

SHA256
4c756fe166120db96e1130a4e98788df56f94ae6047141221d054be7cff7cf31

SHA512
174fd3a0b67caa5b483f93a7d4977fdbd1d2864450440cba01ee679f29dd24304e597ee6f69804b26887c10ddd1de1beac7fd05424aba57bf92973e9b07390c7

Download Submit
C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\EventSource.dll

Filesize
16B

MD5
f04b11e54d7f703e8f6652318d86a4bc

SHA1
9c2a5e66bc8289a3ae70f14104e924a32fad3550

SHA256
71094e60c8e597c7bd7c0bd2019cb3068e8eccf0d3126ddbe7f50fd321654f9e

SHA512
458df66a56ca3a9f322146b0dc53140c1f7915d2919e0e4731c2c7c4099dbb78b65ea9eb4a65193fc9f3cb21ddeb038377a1de4813ef10bd1b8dc5df458fa6aa

Download Submit
C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL64.DllA\zlibwapi.dll

Filesize
274KB

MD5
9ee62f7855694eac5afaae322b85583f

SHA1
85e751cdd777c215da0f0a7e182f9013421e7d7d

SHA256
f2254499fe95370a785df2ef6c31c9b2e52cd2e85ce7436f60f9cb83a37baa3b

SHA512
103ee6b7e12af5274cbe424832862c06e733d56408f1e3fd5bb924b7da263c2a5b10baffb93cf2db6ce5eeac257d31251cbc417103e285cfb4a23323b1c0fcca

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-file-l1-2-0.dll

Filesize
18KB

MD5
4635df1a6a721d2a86bb628c15170157

SHA1
4669ee1f7b444f0a2384c2c0eeb153a7f7a564aa

SHA256
1587520e7f70ea1051670b3ed694652a2837dcddbc91ed8aa3345e1297a5a9ec

SHA512
07385beb03afbfa375a973bf771d6febf7088e753752832b244a90c02cabc4818d0a6d7c349f4c6e74bad4e2d5e7b2ce1fc2f9f508e1acdff8bff03ef776fb1d

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-file-l2-1-0.dll

Filesize
18KB

MD5
b60ea1707b3700c6c2e33b08ffba7116

SHA1
c929b7654a5c7555fe9e30348550576d3a49a76b

SHA256
ea6ec94e17e5dd0865714772a623ee527be0eac14ae7c27f4425930705d1c2dd

SHA512
544d3340b06a1d681f86c3e45b8aa064df75613b269b782d7622fbcc0e55ad26216af6eb3eb770e48dd5be88ae0dc698403f409181dcc31482727cca221eee8c

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-localization-l1-2-0.dll

Filesize
20KB

MD5
b8b29a44416922ce1e979b6c68e5b721

SHA1
cac65e9234baf4d3cfe98f35b3562dd7af75d3c3

SHA256
ac9d7681b80db4e0c733114dd5efe5ba07614a024678218a24c4c78877c62e25

SHA512
9bcd11232ac1065e4182d666a94b741f8d10d3a5a172f97151ac976ae752960add9e562bc60a31c3284465320d46dc333745bfc56b9fdde6f41f9c251beba44c

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-processthreads-l1-1-1.dll

Filesize
18KB

MD5
119e897b50a50b357328b8b35d3c3438

SHA1
f59cc51f210bc4d81cf8619e5f7853b3e23eb387

SHA256
f696b11b92461c32058ab63503bda609b628a8d137f94f6465c6019b2d230949

SHA512
d085bad4ab612a345d9e1246786f90c7dc89ca23d8fbc0794335b91fa2256c97e44ac75e85eda7c57be1dd3d5d0e5bb1b1cf471130bbf41a5dfb83099d83bddd

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-synch-l1-2-0.dll

Filesize
18KB

MD5
afae245db3a8e37bbdde4e028b27c481

SHA1
6320382358216a410d67b6f7f784feb9008d8791

SHA256
5a9b1facd210f05674ab0c9982069154d0568683e5cebbef7ac5f1790dec9ed9

SHA512
9334e277704d6ab6698fa5beb4204ba0170cc9f204368c473abb78f7817339711b8a623c0709fa71c29f4b7e5476fd233c7da5e56a7861fa14843f630f2db42e

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-timezone-l1-1-0.dll

Filesize
18KB

MD5
8fc64847fb3f6a673db0e1fb92ff5874

SHA1
885a7d36ef2387fc087a1b7717afd6e6384f627c

SHA256
1396f9ac0a4a909f41499a998e5e2e886a2c6623d0e85ee1cb15aaec831a65d2

SHA512
77acbe281e55ba983f0f90f2ed651dfe5a4b2f4b9860708698e6a9de1d48f53ccf432acb3bcc05a770c590bba7bb166c8de8145ab1cee940bb83a20bf20acc0d

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-xstate-l2-1-0.dll

Filesize
11KB

MD5
ae2259708c39b82d31518949a3860f83

SHA1
b1955a9abea773207bcca64fd42a944917855f4e

SHA256
04e57570b8ece7e6b981d84d32243207ca8de8822656157005c17c2578856f22

SHA512
555e1c80836aad2adc7ded2e1fadafc55b3874a385be1ffb92b17434adec820511aa5781df502741b79a228937cd01b576cbaa14cdaf447914782ef387970d04

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-conio-l1-1-0.dll

Filesize
19KB

MD5
9b6e0eec618d5aa86567dcafac870b38

SHA1
8f0b7a59ec9ec1aecdbab34ceb8bd986afb266d8

SHA256
8192ccb462ce62ec8bbfec018e057a5d6bcb62935a6cad0a558973c6e71da004

SHA512
62b68c80e671bf5012e7b6311a1b87341d7647a908aae46ba5c64dbb87c8b432213857aa2bdd5f8df79159b0c5a409c246ece80f411189541c55a96198f81a30

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-convert-l1-1-0.dll

Filesize
22KB

MD5
5a4fcf916984d4bd17e6db730005dcb4

SHA1
18c2a62bdf01d9d1f0baec6d5910e9fbcfc8cbee

SHA256
1cd3a38532a88171cd91f3a005fe80f66ad60509193b67a89daf167c94a313db

SHA512
f70384ac9b428b40e7bcba82b1b10ae2f04776c4b5df175d62462eb890fb123e103abd0ba642f7379a5e0c1b6df8f07cf2d748353dc953c86fd3e8204130d3c4

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-environment-l1-1-0.dll

Filesize
18KB

MD5
0078de1690eca7cf0795e75d7bf627f8

SHA1
a7db10e0f1486ac27ff3e0ae87b431daa496a003

SHA256
ecfbe56b066ba6c74f0e6807af4e0a196c633bc2d47b22174f54adbb57a1f2e3

SHA512
7e903597f4c2faa8f959ebbe402fe2adb3955b6e65a78b1fe26f44561630894dadefa416d507bf4f1915dfd18886bdff19f1951fba12cc9ca425f93dac3c79fc

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-filesystem-l1-1-0.dll

Filesize
20KB

MD5
1c6ce9cd259f2585c1ada74b0b57d803

SHA1
9e590eb2445c02e8020012b0dcf343510aa583bb

SHA256
b6017f4c0b9582385f22212ae0dac438545df69aa395d0e496ac6c3c3b87bb19

SHA512
34047a2da55b0c40e9b3905fabe06d556352c0b9bd5921fde94fe51d8723b933592edb6c6bac73224ab57bc09bb01a17436df06577eaa14e2e4a81709084f5cc

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-heap-l1-1-0.dll

Filesize
19KB

MD5
9165fdc5a06b1da33c78bdd285aa7d41

SHA1
9038184a8bdf604fe1fd74071e3d5c5e40b0e097

SHA256
823d8d2e6f19bc128847bf7b101c79fe8e0948cfe96cf36b208b237847bc1a28

SHA512
33ef201de0deca51eb1a89b412c8722761854a5f88d0e95db2f65793b157834971a9a3feb4a03bf99f226ced10e856eea4ce5c63af6da97974ad4d9e7e0456dd

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-locale-l1-1-0.dll

Filesize
18KB

MD5
2320060b6ff7ea4f8c9b3a8845f377ce

SHA1
12c12125b267aa8b77379c2890ed20bbbda4fdd3

SHA256
8f179a14bf558fcedc07d7ed6bf51fd823077e7b12212b8c6586f8d54b5cdf66

SHA512
7e289c7a74edeba244920988f65b93b8d1868760fb0c7e54b73c195f58c01fdb5b503c1bc826df2d9508f3dafd3f3263874e85711bed0e24928f01375276d139

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-math-l1-1-0.dll.BoratRat

Filesize
27KB

MD5
e7ac29fc97d9a0e6c219e9788a4abcc8

SHA1
1035515d7aee6f545a5b87b9363092f2fb1bb07f

SHA256
4deece5ef6f78d7a8b5af073c21e72de6bbbd120c98a0621ff36a09248c7381b

SHA512
678631b31642bd39c9597c2f3cb41e7469efc57ca8d51dca5352973d5f8b484972ad1244db1029218e150ecc5a849196d4c14b3bbe9c67c4f94bc9f222b2f766

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-multibyte-l1-1-0.dll

Filesize
26KB

MD5
542cab59c37aad60af47fb19e5b2968a

SHA1
a55401cba4f515f55e3632fa14d0857d6f7ecaab

SHA256
c796eac06ea403847c484bd0cf8dd07d7c9f80f45258bab5e985da5026cea877

SHA512
3dde51b5ce2b6b850e1ea00efce3aeb84cd5c6dad21101aacfe69456289102eadb78967b221e621e0c71db6fa276299e5c34bb69c81794dce31b08b716a7397f

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-private-l1-1-0.dll

Filesize
69KB

MD5
e141012ff75a6a47c17df6e5b8247dc5

SHA1
bdb016becab37c197564654dfca55a08ad5eb4d8

SHA256
831193ec1b354eaa3e4b71704f59eb286c9a2748dd1bce0b59454377e067dffc

SHA512
1d0c125dc59a50caa9e5755e4e3b1bcd86f40c4e3dee7fa10b1f8a9f5cde627701891089e455b1102c66ff25115046719452c6eaf9b853441fffa6b3e9f50cd8

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-process-l1-1-0.dll

Filesize
19KB

MD5
14d5fea0bc3e0d2316b40069a469bfce

SHA1
94ca03698e03cb51a332882d22c9c60ce99f57ea

SHA256
8f49c0d4d35fbf924048fec7fa37310e1fa51a521e54331e4309147d5da1bfb7

SHA512
80d36362c6833f73927723b781ffa9f7968998afc594b844c42f864ee4ddbe662c33e74078d9f8a4315d65c816bb7be723f3dbe818cf523fd1d034501270e700

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-runtime-l1-1-0.dll

Filesize
22KB

MD5
911b1e22815a4bfafd043b9e70587f06

SHA1
eed27fb31821c3b89b7660470811cc7ef92b185d

SHA256
4284418b90948fa709a15e401b6176bb206e674445789bec3d7a2732fb57ae2b

SHA512
cfa3778d09f3bd629a1c3d86dc979146572cb33be53e3f2c625c70cd1303bdf6929afa4e54990d2965c08f116e5cba23809d4b53b5cb122331c4937de5549c19

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-stdio-l1-1-0.dll

Filesize
24KB

MD5
bcedbd7f1b6f2058235ca730116b8fe3

SHA1
e055bc76c8e8d287e6101e78335a5db1adabe984

SHA256
5e0322cd1d38eafccd9dfaa1e918009fd137b7c181a8ad1ea49a8500ff3d03fd

SHA512
f36fae9fd9caa932494cadcf9e01dadb343e002ebbf6a77a2e614e1f9cb295c344394cf93802197cb765390fe626da8f5a459fc2a1866f48a3e2c214ef307d49

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-string-l1-1-0.dll

Filesize
24KB

MD5
d554ad1f0e805d6a57b649478fe18726

SHA1
e563f8fd5ba0ccbdebd7eafbfac242bcbad746c7

SHA256
ecb421d5cf57deaac20d534562f6e5a1bc39c88302a2f67a4335f6bf431a778f

SHA512
12c71c16fdfeee58dd25ff81b314875d2f80f5a0593120dc5cd2c64cf2477808b06612d5ec257a43ec8b275b6b75e701d2bf255d88e03c961722b34cd9ff8009

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-time-l1-1-0.dll

Filesize
20KB

MD5
c936400b9cb6e0a83fd2f8dfb12574bf

SHA1
0803e71a3bbdf5d25aa1b81b260c69df719b1ae1

SHA256
515366570652ca3933d8b062a907d4118f72b32ccc43f8e2808ef8a5b229370e

SHA512
3f6df93db3c25a15a2d7631722f5501fe6bed485c9736097c91eb7679c1100926fafb28523df14737e81381db226cddf6eedb5c16957c85190cda5b951bc9dbd

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-utility-l1-1-0.dll

Filesize
18KB

MD5
27488715a687bbef42e8ad5c2da2f4af

SHA1
c0c367c0f901835be3f20b46ee2c5ee6a51cc96c

SHA256
e42e36ddd682b3a7b83ec37554262eefe456cab750382bbd531bc0ad5b34b166

SHA512
1c3b198d8cba1ec88a8ca7b5cf6a421b2c40bd41b17acc8c605fa4ce026a15bcff954ac2978bd12cb8a9bbf6096015bff2bea92ebe2439a064a317d2b1330757

Download Submit
C:\Program Files\Microsoft Office\root\Office16\concrt140.dll

Filesize
324KB

MD5
2a6542110de41e0757955eb20352daca

SHA1
72208d466929e3dbd252d455be4eb20168e2111f

SHA256
db7187642e66c50d9d1207e37d4d7eb520854f522edbde8582aef82796a12654

SHA512
63d6a671ccd176c5fdc7421b30a30da8f9db36a4f28d69fa9275453da6d78d31129d788bfda83ab15e84c2e070f673a654d0628955cedeb25c7adba34fb7c2e3

Download Submit
C:\Program Files\Microsoft Office\root\Office16\vccorlib140.dll

Filesize
358KB

MD5
be21c38e33b4b6dcba5660a2c8a13351

SHA1
56d776cbf41d6e96a4194df15d156e7e0ff5cf3e

SHA256
bdf808b1f220765fd538cc6bb2f681a9683855607aaad22d9751963a8af31c88

SHA512
55786b0ffc7d17fc9842c1f59e3f2bc1fed3b5bcb67a4a6c0387566a47f1dcecd50e3da875b3407590a50eaedf98d2eccbac24f52e1397a30747504e070500f5

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\mfc140u.dll

Filesize
5.6MB

MD5
cd355ec2d9f2710366103652e066929e

SHA1
699c75014f8d7e3bd4ff876e3ca2becacf746249

SHA256
7a809e2aa3906458f375d16cfe9cb4c54f495e65621807ff4b8b7ef98f982298

SHA512
0320297d4c9b6a2a8683bf50b5a3feaabf227102a28a2e6c9b2837776a0cfb5eeb8f094fb838259bca7c456135dc2be75210e92ec1ebd99a8d2becc87ed32fac

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcp120.dll

Filesize
644KB

MD5
358cabb2e5d61a8df2b3478b1857a77c

SHA1
91135343a77e79917add301e57b75fdcba0036e1

SHA256
575daa3a458256b0218a9387d1ba7f87ffcdd65397403add7cdaacbab66ef2b9

SHA512
697e726ce61b54ea142de76bd683cb119d4f0236f80b8ef1e80a0b61e5441ebf68b7202438ab858ca0d6a5cf33b2e96797013faf8951bc96b238706ecc2ef39f

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcp140.dll

Filesize
613KB

MD5
eb35294b097658d614a69584d3fc187a

SHA1
84fc047c552f62abc4894ef4057df8dcbdd45c0f

SHA256
587aa487be8d31ac7e5942ca61852d1636dd117c58a9286f2407875da57d8664

SHA512
180e493f32e41be73d86a5dfdaacf15fdf227312eda0de795e9e4f683521587ee8bf5122c52cf2bf3c5c9917766c1c11403bfd349268abc8be37a2efac8c539d

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcr120.dll

Filesize
940KB

MD5
00179cdf2e2f10d9a4020a63c9d5c63b

SHA1
098aac7fde0087e3e5037c0aba27841a439bb390

SHA256
649890cb1b2325fb61660abb5abafe79ab629d22d0b3bb877a926f983477586b

SHA512
0ca7a89b501f3e14619f9b4baa5cccb8d34a46667efe4e157db4da68c3f237e9fe5c5acb4ec0e05942b9e2e9f9285f68de45b50c59ef0fbfd6d39f62941ebbc3

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ucrtbase.dll

Filesize
960KB

MD5
28e20c9ee25e98a2257d13353eb2329f

SHA1
847feaaf23b81c2fefa6073e0c4e73fa2aea133a

SHA256
0ddf0e22918401f11529341ff0e7765031d9e5f07f5507cb1873bc99b76430f7

SHA512
5f0b93be2bdae63d0ac820b4e4ecf497d0928dca121655db7361ff614250dd30f79af631676246b025d74513494848f1e91ee7af3c1c4f36e2d26352da49fda0

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\vcruntime140.dll

Filesize
83KB

MD5
439f41e054cbcbd600c80812511948d4

SHA1
2c4fb55f3330e83fa43ac1e7c4588d737dd7a01e

SHA256
982a6a36e04cd7adf70eebfb8e0e6a21a9d21ec80c360cac038d2d24abbe40de

SHA512
07f4ab21e190c42b5717baa7e05c8abafc0ea3b369b6d897535ac8ebcb46df4a078b78224ece3a1ec4ec7636dd2049c87d1a6a119af86ddba04895e98e61ff2c

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-file-l1-2-0.dll

Filesize
18KB

MD5
674b7575e5a984d5f84eb8794fac2799

SHA1
75947937744bd6283a5653fd0bce6593431dbba1

SHA256
d94125dcb7741db902e334ea0671e9cbaca054d2c4c9de04738b7004d8ea882b

SHA512
f74d6675c63c4bcd039da0b95b89f995857673f01ea4c21b11b1bc0126766919e3c49325b89ac8304520adb689d03ee30b4f68f7d2949f127fb0d3ba694f100e

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-file-l2-1-0.dll

Filesize
18KB

MD5
e75dae882e75c735a9b8fdfaef6c2c50

SHA1
6fb8597832119cb28903ae91570ddb55ed165481

SHA256
829e6ae41eec37b769d360810cd50f6a9538abf97933e442791cfa9d3705b2a9

SHA512
393628b756f6a82617dad9c8fa18312c13d05d55d811c9277b188f44294686cb154966b5e0d87bbe531de666caf29824fc82ef9686b4ffc6253ab67821238fda

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-localization-l1-2-0.dll

Filesize
20KB

MD5
b23f0fa8495536b8e1f0243b1bbdc842

SHA1
5756a91b35efef72c23cd1bdbbcce84eaaecd9ad

SHA256
01dd501e9e2fa60cca2d1211010b05521da7c772de3ab0896c7e64292b878455

SHA512
2c08f83d6e2eb5c934a51bf81654ab8bd031e690c9007d3bcb1a8d250a30c65bd4e33637774e5bc3cb5c3f139e8f71b59ad4dcdd95f5784b4dd5c23c8b690ace

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-processthreads-l1-1-1.dll

Filesize
18KB

MD5
2547f0e5a9abc16654fecf8edc02ca0f

SHA1
d042095d71cb2de9ed737d0e6bde90f43c0f65ae

SHA256
4a6bcf4a742f03e627287ea340797222f65e3d69a04ce6c7233889cf444b394d

SHA512
5398c8bd4fc81cef1fa71ed75dbb8a043352f8fb38b57f7d7a81f259647cb9ae50467926cf695904838117b9d31143100fad67e4fba9ab6a9aa2d3ad1d356db6

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-synch-l1-2-0.dll

Filesize
18KB

MD5
238bcab3ac1bf6644adb902d40a4b581

SHA1
0d7c99f5296d18a804af7b8eb5cbfb81b17d4848

SHA256
ef66194bdc47b7a6421faddfa3310c7e941fa4ae919aa0698ce8d38eedeea667

SHA512
9ecd5bcf5608544bcebbb9c1a791aa72c4682f93bea4939b17c5847887f712bb17e5177fd9a6fecd0226b617311df2cbba28d873768594a0e0713e89c6ff1829

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-timezone-l1-1-0.dll

Filesize
18KB

MD5
e5dcb022c626c55a5b320c2a4c2e583e

SHA1
c248f1787fafc0b0e83eaf1b6b907de3a9fdd4ba

SHA256
f15a8b16c86b19853236d6997053adea9002327d6f883e3549b2f533c3707e85

SHA512
a2f12050cd0ddadb8edb52eada6c4754a9268794fa687db0f71b6867dac119802f8ace8d3127c054a649a233f26238654b2ba3a284a3d7d27a2b45105fc1482d

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-xstate-l2-1-0.dll

Filesize
11KB

MD5
bcc294e07d9f3222694bb73b18cc7006

SHA1
ccfa1464d98c331cdc05875dcacd4d130decaf74

SHA256
6f8d803f0f09d7404e0e952dd3791169c5ec13467cb0605ea9f45ace114f2765

SHA512
217c9076dc48bb083fbd1fee60f9f9c7b420deb3f2cd67cd95be2a4ab8fea78eea161b39742ba46d7df469aaab738b1d7938bb0fd8776f827101f56e45d79fd9

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-conio-l1-1-0.dll

Filesize
19KB

MD5
e15bd2db79f7681d7e9a27610e090c86

SHA1
537830fd2bf567556e1e548825fe8f9783808309

SHA256
0173cf2e85d5dc99281f1cca4f9670e89063fad17a357c4c2bb78fe78d0cfae1

SHA512
4e56fe57580c5072327d559ad2d6ef01d79a87e9d7512bd3b3890f10ab08908fde2085d34a3f7153c276fbb449e646361d27c8c7a4efc5f1073a3321a14afc5f

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-convert-l1-1-0.dll

Filesize
22KB

MD5
7b93281f1abc7ea2ffe12c2d40a63ae3

SHA1
0b19be5229624d047ee90ebf6f1f67273bcce99b

SHA256
2b158c8be522c62a4080d23c948015d2d3695d174800b306650e4efeabbefded

SHA512
f3093511c488d01e96b4a694a2d6874e452aa3af38450ca3ebf1e9a24206790a50b3997f6ed7b8148cda90d698893ad45496b7cba292952420ad08147639465b

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-environment-l1-1-0.dll

Filesize
18KB

MD5
cee6d05a9cf54f77a87289672b3a07c8

SHA1
ad437c1b964c9b98e76ef74c3beb09f89d2af979

SHA256
fc814ead10a1406fa5f1dcc153ea0d20c60a8a8d76836c99cb170374b277b75e

SHA512
d6fc64069e82cd2d9d1c6d6aa4281c1256b8b5ee822158f262bc4d286909c2201d95bc232a9dc987bf937ac896e682435d23b2ec17697a1b7e81760ae1cbc5fa

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-filesystem-l1-1-0.dll

Filesize
20KB

MD5
bbd3003eb3ee9d4f31db9eb1bcafb427

SHA1
63226e92f8fbd698836dede71a2c051b49c13a8e

SHA256
2a3b1d4159d0f964bc0255b081a236e36c6ede929459fd5ba108f2e403b7bad2

SHA512
7f105d35021a2df5efe222b89d1242a8b356aacaa726aad21b7c203716940849629c100dcc081a724a0dceef5dee915069c91dab919325ca34b8278c53dad9f2

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-heap-l1-1-0.dll

Filesize
19KB

MD5
830fc30145450467a80dfd059dc3a6e0

SHA1
7f481dc75e8591bbdf863d533b58d7302fcf3c4a

SHA256
9ad405706e9877163fde44678bf1ed98609af8e00f00ed5ffac6d935de48b352

SHA512
57ed6a8845d8aea4ffec4308fcd897a3b82ffa446098ad178daf92313556d52eab7c93a3bd03a5a9231847b189c1c6b1e8f51dc357a4414e9c85a37036a94fc6

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-locale-l1-1-0.dll

Filesize
18KB

MD5
8c97a6955db73989b4096527de467338

SHA1
221ce2a6f0584582e28498df3e29d4815ee40e8b

SHA256
09082a3d0e605310caeca761af16914fff33280d81502299d1d2bef8bc8edd8e

SHA512
dc673fa13f43a2596701fe45fb0eda74817b8c38f8754f971649bf5a085b8906717da8a776553ee08e96115e817cdec3cf0846a499ab8d719889fd4302c1c6df

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-math-l1-1-0.dll

Filesize
28KB

MD5
c8898ffca058472d286f0b5fd17f97f3

SHA1
93d73d45fc28370c5e0be6bc60cf0498e1b4dbbb

SHA256
8ee71b67d398f7fbe445085498752a9c2ade936cf3b83dcdb749f6e565b18a15

SHA512
4673b63c5de6076aad839e5b3c8bc1ce5a404c1e04b94010f0010753d8779fd520916531dac227255d0ac71ae7a100a487a244a4e3ba963abbeebbe40b5492a6

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-multibyte-l1-1-0.dll

Filesize
26KB

MD5
8ddddc773c1bc9b83c394e908d296586

SHA1
9524134dbcbc8ca9496bb26209165fe4737bfdcd

SHA256
c4854299dd60ba327c35d7111693a0e462708cf71c691cfa38fa1faf06e66101

SHA512
cd7dedd82a4007cac12b5a8469fbbc5459af833254850d29f5ae41aa85720227fda50b8bec264e98507e144cb05d85f2b0bdb1f6575a4251e12171e900946ee1

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-private-l1-1-0.dll

Filesize
71KB

MD5
92251fe24228bcace6f1ec0501904074

SHA1
eb2128a40af5be3fab740ed062756d5b622a06f1

SHA256
2f70d1736a328a6ccdb0e70040acbad27dc83c79754480ce45ba2d03b276d7c5

SHA512
8adc3ea01a6dea9e139cca9af6f4f3afcebf39e3e67ebb71edfc82b7e3821977267054de50464aed6a7a19cfaa8e1d403d1839c00a897da1b13099e59eb9d9df

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-process-l1-1-0.dll

Filesize
19KB

MD5
536ba3c918fc354291dcc34bec9af110

SHA1
6fd12a586759b31b848bbc2a845e16c37ef12e06

SHA256
4bdb473ad6c891bc076895160a60442cea56232174b4b76e578ef57d8d8cc25e

SHA512
a883475b6449ef8f5328d15b3e85f2b55355de53f6cb06d6a2152f2132d95894907ac4a9809d00de18d94da42b21a241574e0da3ee439812a006f46487da2aa8

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-runtime-l1-1-0.dll

Filesize
22KB

MD5
ef2cf9912568af7a456fe0db65292280

SHA1
b34135f92efc9f85276a4b17abfb9f610cc4b336

SHA256
7c1d25791890523e6a5c8b3be6f09177153bc6ba5515827e499637e582ab3e63

SHA512
861563cab2d652ca7cf167b51b0150e84dee45bf959ea7e0b52493c8c64f20911545b2926c913ec2ca804476259c0b97841f3272db35c6d43c5b8148b7df2165

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-stdio-l1-1-0.dll

Filesize
24KB

MD5
21b2b6fd77316c0507d864929404eed5

SHA1
8ac285aca906fd441ce35de1a5a1fd8c8e62f9fd

SHA256
5611f494322c141d8d17cf1cf433a984d74fc2b422fd0fa10092b07941d4087e

SHA512
d5c22e7b4e6878d7eebb76f1241e27117b26b65546081539d67711e17208ccb9964837777eebb54dbf06477ffa8e5fa65acb96d1dbf77d8eee53a5cdbc211f20

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-string-l1-1-0.dll

Filesize
24KB

MD5
da3519d6d0a6658b0c07facd09518d20

SHA1
3246f23f5e4d54b31975f02c6b69f4dfa812d447

SHA256
c93bbb3971fa3ff2c74e4348277d6e99eaf759c8a50c1e6495681d6c0125ac40

SHA512
3d9ac4fd6b8732ff7e3ea193541a97da414b8f248445a287565f1ac385e4250ef263172b397ad7ece268f2a5d77075aaddcdbde2693b835f026427fca47b8221

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-time-l1-1-0.dll

Filesize
20KB

MD5
8dd8f6fe828f9e8652ffbc8388d1f190

SHA1
4b2e8832f037d1f9efaeaa0a4f5562863ec4cd57

SHA256
e988dd166343fa441e380b787a74bbab41404ee8d636dd4c9cb3a83b52712d12

SHA512
9fed47a036fa14a25660047021d63c8e6765fd4fd56a2ff7dac3c4c5bd0136a21c247a95739afee736706b82acba2ce67bf73e75ed05228590c2710222551324

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-utility-l1-1-0.dll

Filesize
18KB

MD5
a85b0cad46ccbffc6aeb6de9725c1670

SHA1
d2a3439c95fe7ea2bda4f74755da106dac1df13c

SHA256
8c55eb895419bc56f65f8b0f87a451a01a0f8328dd05083704640b2e8568faf1

SHA512
58f6cc8c2a2f2940fc8e18fb69655610bd0cbfdf0d2299de00a71e1e8f43df2172d7c4604caaef11f17ae3c87aea597f7e34795a3ef2f12dffa951189cfd14d9

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\concrt140.dll

Filesize
244KB

MD5
9826183d55ecb6e2ba9a0116a48494a1

SHA1
4890e693b4c0388794c3f8187a0b2ac6149b3c0b

SHA256
def8214444f25707f084ac0ab3995e6115f5fe85beda688c2a58b9d694b945f1

SHA512
d49eff9eb85e7ad3e376a9176995e70f29cf48793a18b08782d811d3d244601bcd1c090d95739ee3dd1e781174833a26521385a92fdb39cef9d7347bfcfc85ad

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\mfc140u.dll

Filesize
4.8MB

MD5
d080b2193e1bcc19326ab4cec39afc4f

SHA1
6466b6c31ad7431924d902d6d492c09f7b008aa8

SHA256
e7fb0debabed1b3755e9c6a0f5be2f86d087cce4fb6fbf6026576d04a517e4f5

SHA512
001daf25c3ebe2c681f093708231e47ac5499702de75d7f91113f44aa250e713ff070c7109417f9a12daaf41cf44a75eebcf00df5a64c004fcd5ac34cfd0622a

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcp120.dll

Filesize
444KB

MD5
38ea56535f2952dc2cac12dcefb46238

SHA1
45f56ae388ec8a9930edb782842355a42a84c6df

SHA256
21b7ed6874c5c77b1674d4611eb0573a64166c92fd433158b26c0f1ba5bc1e3f

SHA512
8ff58353eedb7c9dd2abc22fc2c82fd3131872af49807122ec263c3288b8f8f711f47c66520191ca45217d407d1ff153abe1752e2bc74b143395c1361a0e80f3

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcp140.dll

Filesize
439KB

MD5
3e21273689258481985c8faca8148a91

SHA1
ef900f6d8114ad14f3bc47e01490401976d10c7c

SHA256
82323ae3db200f229d95f38566c28452f064c698f6b45ddfcaf33d9abf686ef6

SHA512
607dbab11a30c8e2b644b138462798ea353dfcf5593513244a750fec0ee48c15796ee490019af329c56d602795047de867945ff59b8bbb1f9e1241b0ea6f57dc

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcr120.dll

Filesize
946KB

MD5
ae83a5c614ecd818b3ec8e29ec23e394

SHA1
88c6bf09543890403a1279e6d7f08aced1822562

SHA256
6ae62d5cd83f808324e1203b44291aac668e9413813fb196e6e92c397270d90a

SHA512
d9e2167f6e12db81bda769f98bb6b73de213cbeec12fbb55eb88f65d28d24797f40e7705e6d0191af833372b6a1334787e31696971aa19e515695caeb8540183

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\ucrtbase.dll

Filesize
879KB

MD5
5723fb8b8cff85332dd86ee286e92ebd

SHA1
9e60eb10559e41471aafcb54d383810a781d5db0

SHA256
ac04b8275a563a150ce6bdf1d765dc83993557f1a7020dac9761afdd1d77e18c

SHA512
dc9b6dd93e19308d413ce3099b4397cc80f1f5d2ffef5e1a0a7daca83ce347e718e6770e2ede5d449d7c2347a83d116ae3a0bcf99c5a68ec6d710fc341043f11

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\vccorlib140.dll

Filesize
263KB

MD5
2dd1f5d9ece5cfa4c8028a350f925b10

SHA1
67ead21e0297ae648200c3609984d4521275afa7

SHA256
69538377874bbc4800e9979de813b13f09f78544e012906bcb51317a1115597e

SHA512
78ce519eb885e6276ee58e6d8cbad5b13131e1526bc212a1879264f728296b01b9d5ae75724e318cdb23031d4ed23915e3aba69faf6e4eb08a952307e44c5925

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\vcruntime140.dll

Filesize
79KB

MD5
ae84780ac4f19545e7ad9e7cec6f6b79

SHA1
e909cfe0e5947e13336f541b3cc22a3ebd4ddcd7

SHA256
5532235b98525234e164298404e2ffa237f37af3301439f7792bc1fb59dec50e

SHA512
9e6b9dc0b40074bdd06ad6f22c7da1a75d767cf2c070f3a874e0b59ad129fda81a3175d941464b6c3d194018ed470a9eaef5d9a49d8d0d6eab3d550b84087c3b

Download Submit
C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-040C-1000-0000000FF1CE}\misc.exe

Filesize
1014KB

MD5
3cd13e3ae19f08d6e8b7a458df141b72

SHA1
ce2e673fd0bf453c00877f363a74e0e85f1bafd5

SHA256
dcc76ff221ed75144f17ffe18c0eed04789060883d3ea97a7ee4e9a924d1df36

SHA512
f17166c5c68e807b133b35c974f4889a98d7d2311feeaf100165bf0395ebddca01f04024a6e702bb7bc9e67fbd1252f3ee1818dfebbb6fb0627dafe5c8fc0593

Download Submit
C:\Program Files\VideoLAN\VLC\locale\da\LC_MESSAGES\vlc.mo

Filesize
584KB

MD5
81aadf91242211994c5a6568e253658b

SHA1
df522857b058b8a8f9b9094cf3a189bdf569100e

SHA256
705212e4ec90c4a90ce904d1673bd491c8baf5b7f1b642eebcd772b2cae9e0e4

SHA512
863550789a5a2a1ba60c54f29e2e9b913e3ada0ffec98edc2706a675a579d3a16bd7da344b8fe525d062a8e7030b8b906d4f2b7adc1f157229c774b131e9da2d

Download Submit
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\mscordaccore.dll.BoratRat

Filesize
1.3MB

MD5
3e91af96e05e578c010d61dfdfe50675

SHA1
c231b6ed769a6ec0ead6d81690ed535b4c52f5b2

SHA256
f81e90f775e35b4323e84bb4571b13613f9272e3492727a0e9adce5f7854e758

SHA512
0fb9dbf38d0c6366de081a2100b9b85bb5fb43c20fc3fe8392e5dfabf1a5208ce2872d6942dc3b8f2a8d30c40742c165d326eebf70eb4638650ceb01cab65395

Download Submit
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\mscordaccore.dll.BoratRat

Filesize
1.3MB

MD5
f1e86567eb7f7aeebbb0d7fdc8e979f1

SHA1
2b8d37b8ca848f4f50172bf54edfe11f814a27b4

SHA256
2a204b319b49ca7a8623784bf6ad5bd2f90781e4350ba8161a318fd070a3f3d5

SHA512
e45bedf78d961c366ea7e0e720cf029132b9c1afe3fe6b81434a5fccb2c7b2ac3ef9a532fe2025300dd11c841e10881fb9e1d4b48b1d642b04c6d8c80d775311

Download Submit
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\msquic.dll.BoratRat

Filesize
476KB

MD5
a524946cbf61b5e5aa030a15ab0edeff

SHA1
1934a56ba1f280673f7bd147547d1eea7de1798d

SHA256
96ea7b7c3eff5c1d7290c1ded2365892e9ff2dcce0d6516522e4eee0b0728220

SHA512
33dc55f2b97b2f196cb5cf3bfb889d6e173f9b2e750a0df0bc591855bc3e4c21884f9a7fd1982e30e131bcda7c3c7f97eb2b1475893e785e0960795a009cbdc7

Download Submit
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\Microsoft.DiaSymReader.Native.amd64.dll

Filesize
1.8MB

MD5
59b0265208561d9e9f8b0cf2437b3ad5

SHA1
4314adbda10efa99516bcbed0284626612973d35

SHA256
270f9cf2b819b17e3e102183bc8a62896e754de5bd6054d9e6de61081089b457

SHA512
d58b67fef85f022fc20096bfe5315a82582c221423213cce07d944a5029684f4969b4fd4398c7370c1c36ec1c5bac952f481f03475e356bf5ba0061b425ca68f

Download Submit
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\mscordaccore.dll.BoratRat

Filesize
1.3MB

MD5
45ed726e14f095ea96037b8b3b160fba

SHA1
acd2499689330d67e3d73d1aa6ffc4661a1c077d

SHA256
ba6971f76bfbcbb4fb7de9a8b2111a9222d76f9f843271dd5426db4a931bd16a

SHA512
3a62b328c09319b8f36e9f888509ec2083fb2c20aa60c48543a6288066903c803cecff4e3ab16578923717ff100f7428a224d28e309d70b06ae6e27fc7671f15

Download Submit
C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\D3DCompiler_47_cor3.dll

Filesize
4.7MB

MD5
6ce7f2339230bf9f9018773ef6eccf3d

SHA1
30f11e4632fa003a28265950b9df84629ff52288

SHA256
24031e82734922eb56ba523c6f5fbe902511bfac0009a96700ae9fc26d17afee

SHA512
7505816ccb60fc239d61081d1a41e94b3c06ea7c779a24927c17bbee1ff6308809dc05710d1f2910fe2fb9a6d436480ab689c14e8adbc226a8e3e1b605cd0d2d

Download Submit
C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\vcruntime140_cor3.dll

Filesize
116KB

MD5
a5e40fb7caabf92306080bb3727f1a6f

SHA1
fdd9f39c77e5ee7fb74af99fb74b822fcdf7d166

SHA256
29240746b70f935ec4573aed5086905303c6d9b600e934c9ab5643c78d35a5c7

SHA512
6d1996e6d0b1e12091ce5f8dd0cabf651ac1414d2e0ea517128f3f39ccbb89ca3f601680a324f00a36b80065f7ff85453070b5a3c5d9db7f6506d80fb05bf23a

Download Submit
C:\Users\Admin\AppData\Local\Server\BoratRat.exe_Url_gd1rwjpue5ky1rwo1qwl5mnr5ta35yo4\1.0.7.0\user.config

Filesize
309B

MD5
0c6e4f57ebaba0cc4acfc8bb65c589f8

SHA1
8c021c2371b87f2570d226b419c64c3102b8d434

SHA256
a9539ba4eae9035b2ff715f0e755aa772b499d72ccab23af2bf5a2dc2bcfa41c

SHA512
c6b877ff887d029e29bf35f53006b8c84704f73b74c616bf97696d06c6ef237dff85269bdf8dfb432457b031dd52410e2b883fd86c3f54b09f0a072a689a08c0

Download Submit
C:\Users\Admin\AppData\Local\Server\BoratRat.exe_Url_gd1rwjpue5ky1rwo1qwl5mnr5ta35yo4\1.0.7.0\user.config

Filesize
580B

MD5
acb6df8bd0fe9236ea87ea6e3c28173f

SHA1
8b1d88bd749b58905c6db258e7224a67d1179938

SHA256
ec2b3fc4d011e9b8a04188d8f2ff280de854dde7d6ebf8e871e0642f789dfa5b

SHA512
a4222c0f5aeba58679c21361dcb6ab2c7ed1d9cae41d2839089fdb7bbaac3b8735afff8b302557f85389daa977b826cee77b944ba598e3fa6c2a16781453a832

Download Submit
C:\Users\Admin\AppData\Local\Temp\Borat\ClientsFolder\9942A1B384B91A05CDBD\Information\Information.txt

Filesize
110KB

MD5
21c300f184759ac6805f866bc4a2f843

SHA1
c8355761e1ada19ed172d22ba3f827491f208309

SHA256
ec928d405c1e82b79f0956fb2a01f5c160b8323b383931cd59e21f8bb1f77d8d

SHA512
b219cbfcd8554c30f39af183b03a0009d5d82e795fd68631e920b511cbe512f21ecf3be0c6809af2aa92c05225a44c33f9f7417e11b5df50b7b930e2372fc1ba

Download Submit
C:\Users\Admin\Desktop\Client.exe

Filesize
56KB

MD5
bfd1b450e854726e098fd50edb4ba39a

SHA1
aa089dda9c0836e58f590220996c991d99fb4b00

SHA256
75e603ca1206457bbfa30d16a10f83ffc2b4ba14da77c72a1eddd7dda1e91662

SHA512
7ad33ec7ffd0b470019e8ca9c781882f9449985aadf9f626b5eeeb7d249da21e69469de099ad48912af0fd8f3bd3a4239ae3ea6a6b0d1f6840867c5441a1e248

Download Submit
C:\vcredist2010_x64.log.html.BoratRat

Filesize
85KB

MD5
c2a28346b31e68a30400926bc6c1a8b1

SHA1
eec47bb038581ceca85c8bc07343363bb7c68d2f

SHA256
0b8bfa33d5447167a18d229dac14a49518f78ffea3c8281176ec0823fc7e3caf

SHA512
1b0c6e3672f88c310e797e08fee6a412022aa24516b2eec30708dda903e1f9bc438ce1cddb55ba119906551ae46387c49740fa2b414d4e4145cea4a063bfbc30

Download Submit
memory/1796-16-0x000001A873090000-0x000001A873091000-memory.dmp

Filesize
4KB

Download
memory/1796-15-0x000001A873090000-0x000001A873091000-memory.dmp

Filesize
4KB

Download
memory/1796-10-0x000001A873090000-0x000001A873091000-memory.dmp

Filesize
4KB

Download
memory/1796-6-0x000001A873090000-0x000001A873091000-memory.dmp

Filesize
4KB

Download
memory/1796-14-0x000001A873090000-0x000001A873091000-memory.dmp

Filesize
4KB

Download
memory/1796-13-0x000001A873090000-0x000001A873091000-memory.dmp

Filesize
4KB

Download
memory/1796-12-0x000001A873090000-0x000001A873091000-memory.dmp

Filesize
4KB

Download
memory/1796-11-0x000001A873090000-0x000001A873091000-memory.dmp

Filesize
4KB

Download
memory/1796-4-0x000001A873090000-0x000001A873091000-memory.dmp

Filesize
4KB

Download
memory/1796-5-0x000001A873090000-0x000001A873091000-memory.dmp

Filesize
4KB

Download
memory/1908-2-0x00007FFEE46A0000-0x00007FFEE5161000-memory.dmp

Filesize
10.8MB

Download
memory/1908-0-0x00007FFEE46A3000-0x00007FFEE46A5000-memory.dmp

Filesize
8KB

Download
memory/1908-23-0x00007FFEE46A0000-0x00007FFEE5161000-memory.dmp

Filesize
10.8MB

Download
memory/1908-70-0x000002C7B9060000-0x000002C7B927C000-memory.dmp

Filesize
2.1MB

Download
memory/1908-22-0x00007FFEE46A0000-0x00007FFEE5161000-memory.dmp

Filesize
10.8MB

Download
memory/1908-21-0x00007FFEE46A3000-0x00007FFEE46A5000-memory.dmp

Filesize
8KB

Download
memory/1908-3-0x00007FFEE46A0000-0x00007FFEE5161000-memory.dmp

Filesize
10.8MB

Download
memory/1908-1-0x000002C798780000-0x000002C799B8A000-memory.dmp

Filesize
20.0MB

Download
memory/4588-74-0x000000001BC10000-0x000000001BC86000-memory.dmp

Filesize
472KB

Download
memory/4588-69-0x00000000001D0000-0x00000000001E4000-memory.dmp

Filesize
80KB

Download
memory/4588-75-0x00000000022E0000-0x00000000022F0000-memory.dmp

Filesize
64KB

Download
memory/4588-76-0x000000001BB90000-0x000000001BBAE000-memory.dmp

Filesize
120KB

Download
memory/4588-77-0x0000000002280000-0x000000000228E000-memory.dmp

Filesize
56KB

Download
memory/4588-78-0x000000001BA20000-0x000000001BA2C000-memory.dmp

Filesize
48KB

Download
memory/4588-84-0x000000001BC90000-0x000000001BCF6000-memory.dmp

Filesize
408KB

Download
memory/4588-85-0x000000001BA40000-0x000000001BA5E000-memory.dmp

Filesize
120KB

Download
memory/4588-6135-0x000000001C330000-0x000000001C47A000-memory.dmp

Filesize
1.3MB

Download
memory/4588-6136-0x000000001B010000-0x000000001B060000-memory.dmp

Filesize
320KB

Download
memory/4588-6160-0x000000001B060000-0x000000001B082000-memory.dmp

Filesize
136KB

Download
memory/4588-6802-0x00000000299D0000-0x0000000029B3A000-memory.dmp

Filesize
1.4MB

Download