Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
146s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
11/09/2024, 12:30
Static task
static1
Behavioral task
behavioral1
Sample
da5a1623c5d5153cd912396aaa48949e_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
da5a1623c5d5153cd912396aaa48949e_JaffaCakes118.dll
-
Size
829KB
-
MD5
da5a1623c5d5153cd912396aaa48949e
-
SHA1
54ff1f3cc4891b3fed84874e8a944a5667b0ad18
-
SHA256
3f5a3b6daf5e8e88f10946aeb3edcfb263f572fde0996a60874126b0c396db82
-
SHA512
ef22f41c8214b3835685b7508f53206cab1c15eb05a1aec4990a9a669e064e08a34c21246f08e065e56b9e3e88729db9d1b20e778c2317729ed4bf3d498dc2bf
-
SSDEEP
24576:yL5/rmRsmDWDPNuFhPvYrpLYHSfcoopooLY9Nu0ULz:oK5hPILYHSfeY9na
Malware Config
Signatures
-
Modifies WinLogon for persistence 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit = "userinit.exe,c:\\program files (x86)\\microsoft\\watermark.exe" svchost.exe -
Executes dropped EXE 2 IoCs
pid Process 2716 rundll32mgr.exe 2224 WaterMark.exe -
Loads dropped DLL 4 IoCs
pid Process 2228 rundll32.exe 2228 rundll32.exe 2716 rundll32mgr.exe 2716 rundll32mgr.exe -
resource yara_rule behavioral1/memory/2716-20-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2716-18-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2716-17-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2716-23-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2716-21-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2716-16-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2716-15-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2224-38-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2224-39-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2224-43-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2224-91-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2224-86-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2224-644-0x0000000000400000-0x0000000000421000-memory.dmp upx -
Drops file in System32 directory 3 IoCs
description ioc Process File created C:\Windows\SysWOW64\rundll32mgr.exe rundll32.exe File created C:\Windows\SysWOW64\dmlconf.dat svchost.exe File opened for modification C:\Windows\SysWOW64\dmlconf.dat svchost.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\7-Zip\7zG.exe svchost.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\sunec.dll svchost.exe File opened for modification C:\Program Files\Java\jre7\bin\w2k_lsa_auth.dll svchost.exe File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll svchost.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\InkObj.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_output\libwasapi_plugin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libsubsusf_plugin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\uninstall.exe svchost.exe File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Icons\SC_Reader.exe svchost.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\UIAutomationTypes.resources.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libtcp_plugin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\misc\libaddonsvorepository_plugin.dll svchost.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\it-IT\settings.html svchost.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\ja-JP\flyout.html svchost.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Windows.Presentation.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libts_plugin.dll svchost.exe File opened for modification C:\Program Files\Windows Defender\MsMpRes.dll svchost.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\es-ES\settings.html svchost.exe File opened for modification C:\Program Files\Windows Media Player\wmpenc.exe svchost.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\ja-JP\settings.html svchost.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome_wer.dll svchost.exe File opened for modification C:\Program Files\Java\jre7\bin\decora-sse.dll svchost.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\fr\UIAutomationTypes.resources.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_srt_plugin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_asf_plugin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_mp4_plugin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\misc\libexport_plugin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_dirac_plugin.dll svchost.exe File opened for modification C:\Program Files\Internet Explorer\iediagcmd.exe svchost.exe File opened for modification C:\Program Files\Internet Explorer\ieproxy.dll svchost.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\epl-v10.html svchost.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\ja\System.Net.Resources.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\control\libnetsync_plugin.dll svchost.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\it-IT\settings.html svchost.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\OSETUPUI.DLL svchost.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\w2k_lsa_auth.dll svchost.exe File opened for modification C:\Program Files\Mozilla Firefox\firefox.exe svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_output\libdirectsound_plugin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_splitter\libpanoramix_plugin.dll svchost.exe File opened for modification C:\Program Files\Windows Journal\JNTFiltr.dll svchost.exe File opened for modification C:\Program Files\Windows Photo Viewer\PhotoViewer.dll svchost.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\verify.dll svchost.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\it\UIAutomationProvider.resources.dll svchost.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\es\System.Xml.Linq.Resources.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_sse2_plugin.dll svchost.exe File opened for modification C:\Program Files\Windows Sidebar\wlsrvc.dll svchost.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll svchost.exe File opened for modification C:\Program Files\Internet Explorer\F12Resources.dll svchost.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\java.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_output\libafile_plugin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_copy_plugin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\visualization\libglspectrum_plugin.dll svchost.exe File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\ViewerPS.dll svchost.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe svchost.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jcmd.exe svchost.exe File opened for modification C:\Program Files\Java\jre7\bin\instrument.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\gui\libqt_plugin.dll svchost.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\ja-JP\settings.html svchost.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\main.html svchost.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEODBC.DLL svchost.exe File opened for modification C:\Program Files\Internet Explorer\ielowutil.exe svchost.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\dtplugin\npdeployJava1.dll svchost.exe File opened for modification C:\Program Files\Java\jre7\bin\fontmanager.dll svchost.exe -
System Location Discovery: System Language Discovery 1 TTPs 5 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32mgr.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WaterMark.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language svchost.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language svchost.exe -
Suspicious behavior: EnumeratesProcesses 37 IoCs
pid Process 2224 WaterMark.exe 2224 WaterMark.exe 2224 WaterMark.exe 2224 WaterMark.exe 2224 WaterMark.exe 2224 WaterMark.exe 2224 WaterMark.exe 2224 WaterMark.exe 2380 svchost.exe 2380 svchost.exe 2380 svchost.exe 2380 svchost.exe 2380 svchost.exe 2380 svchost.exe 2380 svchost.exe 2380 svchost.exe 2380 svchost.exe 2380 svchost.exe 2380 svchost.exe 2380 svchost.exe 2380 svchost.exe 2380 svchost.exe 2380 svchost.exe 2380 svchost.exe 2380 svchost.exe 2380 svchost.exe 2380 svchost.exe 2380 svchost.exe 2380 svchost.exe 2380 svchost.exe 2380 svchost.exe 2380 svchost.exe 2380 svchost.exe 2380 svchost.exe 2380 svchost.exe 2380 svchost.exe 2380 svchost.exe -
Suspicious use of AdjustPrivilegeToken 4 IoCs
description pid Process Token: SeDebugPrivilege 2224 WaterMark.exe Token: SeDebugPrivilege 2380 svchost.exe Token: SeDebugPrivilege 2228 rundll32.exe Token: SeDebugPrivilege 2224 WaterMark.exe -
Suspicious use of UnmapMainImage 2 IoCs
pid Process 2716 rundll32mgr.exe 2224 WaterMark.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 3068 wrote to memory of 2228 3068 rundll32.exe 30 PID 3068 wrote to memory of 2228 3068 rundll32.exe 30 PID 3068 wrote to memory of 2228 3068 rundll32.exe 30 PID 3068 wrote to memory of 2228 3068 rundll32.exe 30 PID 3068 wrote to memory of 2228 3068 rundll32.exe 30 PID 3068 wrote to memory of 2228 3068 rundll32.exe 30 PID 3068 wrote to memory of 2228 3068 rundll32.exe 30 PID 2228 wrote to memory of 2716 2228 rundll32.exe 31 PID 2228 wrote to memory of 2716 2228 rundll32.exe 31 PID 2228 wrote to memory of 2716 2228 rundll32.exe 31 PID 2228 wrote to memory of 2716 2228 rundll32.exe 31 PID 2716 wrote to memory of 2224 2716 rundll32mgr.exe 32 PID 2716 wrote to memory of 2224 2716 rundll32mgr.exe 32 PID 2716 wrote to memory of 2224 2716 rundll32mgr.exe 32 PID 2716 wrote to memory of 2224 2716 rundll32mgr.exe 32 PID 2224 wrote to memory of 2576 2224 WaterMark.exe 33 PID 2224 wrote to memory of 2576 2224 WaterMark.exe 33 PID 2224 wrote to memory of 2576 2224 WaterMark.exe 33 PID 2224 wrote to memory of 2576 2224 WaterMark.exe 33 PID 2224 wrote to memory of 2576 2224 WaterMark.exe 33 PID 2224 wrote to memory of 2576 2224 WaterMark.exe 33 PID 2224 wrote to memory of 2576 2224 WaterMark.exe 33 PID 2224 wrote to memory of 2576 2224 WaterMark.exe 33 PID 2224 wrote to memory of 2576 2224 WaterMark.exe 33 PID 2224 wrote to memory of 2576 2224 WaterMark.exe 33 PID 2224 wrote to memory of 2380 2224 WaterMark.exe 34 PID 2224 wrote to memory of 2380 2224 WaterMark.exe 34 PID 2224 wrote to memory of 2380 2224 WaterMark.exe 34 PID 2224 wrote to memory of 2380 2224 WaterMark.exe 34 PID 2224 wrote to memory of 2380 2224 WaterMark.exe 34 PID 2224 wrote to memory of 2380 2224 WaterMark.exe 34 PID 2224 wrote to memory of 2380 2224 WaterMark.exe 34 PID 2224 wrote to memory of 2380 2224 WaterMark.exe 34 PID 2224 wrote to memory of 2380 2224 WaterMark.exe 34 PID 2224 wrote to memory of 2380 2224 WaterMark.exe 34 PID 2380 wrote to memory of 256 2380 svchost.exe 1 PID 2380 wrote to memory of 256 2380 svchost.exe 1 PID 2380 wrote to memory of 256 2380 svchost.exe 1 PID 2380 wrote to memory of 256 2380 svchost.exe 1 PID 2380 wrote to memory of 256 2380 svchost.exe 1 PID 2380 wrote to memory of 336 2380 svchost.exe 2 PID 2380 wrote to memory of 336 2380 svchost.exe 2 PID 2380 wrote to memory of 336 2380 svchost.exe 2 PID 2380 wrote to memory of 336 2380 svchost.exe 2 PID 2380 wrote to memory of 336 2380 svchost.exe 2 PID 2380 wrote to memory of 384 2380 svchost.exe 3 PID 2380 wrote to memory of 384 2380 svchost.exe 3 PID 2380 wrote to memory of 384 2380 svchost.exe 3 PID 2380 wrote to memory of 384 2380 svchost.exe 3 PID 2380 wrote to memory of 384 2380 svchost.exe 3 PID 2380 wrote to memory of 396 2380 svchost.exe 4 PID 2380 wrote to memory of 396 2380 svchost.exe 4 PID 2380 wrote to memory of 396 2380 svchost.exe 4 PID 2380 wrote to memory of 396 2380 svchost.exe 4 PID 2380 wrote to memory of 396 2380 svchost.exe 4 PID 2380 wrote to memory of 432 2380 svchost.exe 5 PID 2380 wrote to memory of 432 2380 svchost.exe 5 PID 2380 wrote to memory of 432 2380 svchost.exe 5 PID 2380 wrote to memory of 432 2380 svchost.exe 5 PID 2380 wrote to memory of 432 2380 svchost.exe 5 PID 2380 wrote to memory of 476 2380 svchost.exe 6 PID 2380 wrote to memory of 476 2380 svchost.exe 6 PID 2380 wrote to memory of 476 2380 svchost.exe 6 PID 2380 wrote to memory of 476 2380 svchost.exe 6
Processes
-
C:\Windows\System32\smss.exe\SystemRoot\System32\smss.exe1⤵PID:256
-
C:\Windows\system32\csrss.exe%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=161⤵PID:336
-
C:\Windows\system32\wininit.exewininit.exe1⤵PID:384
-
C:\Windows\system32\services.exeC:\Windows\system32\services.exe2⤵PID:476
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k DcomLaunch3⤵PID:608
-
C:\Windows\system32\DllHost.exeC:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}4⤵PID:1312
-
-
C:\Windows\system32\wbem\wmiprvse.exeC:\Windows\system32\wbem\wmiprvse.exe4⤵PID:1812
-
-
C:\Windows\system32\wbem\wmiprvse.exeC:\Windows\system32\wbem\wmiprvse.exe -Embedding4⤵PID:2160
-
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k RPCSS3⤵PID:688
-
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted3⤵PID:764
-
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted3⤵PID:828
-
C:\Windows\system32\Dwm.exe"C:\Windows\system32\Dwm.exe"4⤵PID:1176
-
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k netsvcs3⤵PID:864
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService3⤵PID:988
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k NetworkService3⤵PID:292
-
-
C:\Windows\System32\spoolsv.exeC:\Windows\System32\spoolsv.exe3⤵PID:704
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalServiceNoNetwork3⤵PID:1076
-
-
C:\Windows\system32\taskhost.exe"taskhost.exe"3⤵PID:1116
-
-
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"3⤵PID:1732
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation3⤵PID:1048
-
-
C:\Windows\system32\sppsvc.exeC:\Windows\system32\sppsvc.exe3⤵PID:2876
-
-
-
C:\Windows\system32\lsass.exeC:\Windows\system32\lsass.exe2⤵PID:488
-
-
C:\Windows\system32\lsm.exeC:\Windows\system32\lsm.exe2⤵PID:496
-
-
C:\Windows\system32\csrss.exe%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=161⤵PID:396
-
C:\Windows\system32\winlogon.exewinlogon.exe1⤵PID:432
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵PID:1268
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\da5a1623c5d5153cd912396aaa48949e_JaffaCakes118.dll,#12⤵
- Suspicious use of WriteProcessMemory
PID:3068 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\da5a1623c5d5153cd912396aaa48949e_JaffaCakes118.dll,#13⤵
- Loads dropped DLL
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2228 -
C:\Windows\SysWOW64\rundll32mgr.exeC:\Windows\SysWOW64\rundll32mgr.exe4⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
PID:2716 -
C:\Program Files (x86)\Microsoft\WaterMark.exe"C:\Program Files (x86)\Microsoft\WaterMark.exe"5⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
PID:2224 -
C:\Windows\SysWOW64\svchost.exeC:\Windows\system32\svchost.exe6⤵
- Modifies WinLogon for persistence
- Drops file in System32 directory
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
PID:2576
-
-
C:\Windows\SysWOW64\svchost.exeC:\Windows\system32\svchost.exe6⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2380
-
-
-
-
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\epl-v10.html
Filesize133KB
MD5bfd6a515e5a792b53d2de29dc8d7edc0
SHA11d5ea831afc40ad990beeedd06325e01baa31e1f
SHA256eeb32e2bcd13d6aba987f3502bbe862cfcebfcdac1d3883d9673c4797ed7b27b
SHA5124093eedfe6de35ab60a67b36533980fa488de531a081013b12705075bdaebb43db9da685db81360a07168e1316f7bea1224f43d2c15dc627afe7123bb375decf
-
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\license.html
Filesize129KB
MD5490fdf010562be1a5d2a44cca88fd577
SHA18abe1556eeb7e561eb4e3271219bb413737689e3
SHA2565cf6e587b0fb002c0f672a5b3cba0feeb61c9d9e7434faf248387cae00fccd55
SHA512acaab19df9704d3864250f652f51f4ce0096399e255ba93645f16151097337ed0b0bdb7726f321f5c7985ba06065b1320f13e4b9a7b16fcdaa0c5e8adda0e22c
-
Filesize
60KB
MD5c27dc77f49f2be740e3bf1b64387882e
SHA182f4ce73d55f46e1ecccbf406f9420364a82872f
SHA256a0bac67a54681dcc7ec8204eb959a540356568b06b1a03cec6ec42ed6e9f1715
SHA51214880de329428973dbcc2c726fee09dcc3666ab7aab69e32864577e01216ca8a58ac901d261ad1a84e0d3d6926c328b53d92beb695cc3dd1d6f453a5d853314e