53cdc49c7fb83b419c07edb45c544b106aaa37db00e8a37211678af6350a82f1

Analysis

max time kernel
160s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
25-09-2024 13:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Borat/BoratRat.exe
Size

20.0MB
MD5

65b694d69d327efe28fcbce125401e96
SHA1

049d4d71742b99a598c074458f1f2d5b0119e912
SHA256

de60ecbbfef30c93fe8875ef69b358b20076d1f969fc3d21ab44d59dc9ef7cab
SHA512

7ab57642e414e134e851d9aa2ed3ef8b483f3a5f77877cdc04e08d7f95c44884f8ccc6beaf8ba7f6949cfd7398c46be46c024d4fdeacd3a332d4565609baad5b
SSDEEP

393216:V+G+oTCP+Zw6NLIsFfskh1BmXGnfBd+Uw:IGpTCP+Zlnk0rmkBYUw

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3811) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Executes dropped EXE 1 IoCs

pid	Process
2760	Client.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\fr\UIAutomationClient.resources.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Drawing.Design.dll	Client.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.reportviewer.common.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\System.Windows.Input.Manipulations.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\de\UIAutomationClientSideProviders.resources.dll	Client.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\bin\vcruntime140_1.dll	Client.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.contrast-white_scale-180.png	Client.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.sr-latn-rs.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\pt-BR\ReachFramework.resources.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Runtime.Serialization.Xml.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ko\WindowsBase.resources.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\zh-Hant\WindowsBase.resources.dll	Client.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\OMRAUT.DLL	Client.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\JitV.dll	Client.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pidgenx.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\System.Printing.dll	Client.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Red Violet.xml	Client.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Slipstream.xml	Client.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Office.Interop.Excel.dll	Client.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\OneNoteLogo.contrast-white_scale-80.png	Client.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\msmdlocal_xl.dll	Client.exe
File opened for modification	C:\Program Files\7-Zip\Lang\sq.txt	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ko\WindowsBase.resources.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\WindowsFormsIntegration.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\de\UIAutomationProvider.resources.dll	Client.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\EXCELPLUGINSHELL.DLL	Client.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\EQUATION\api-ms-win-crt-filesystem-l1-1-0.dll	Client.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.et-ee.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Globalization.Calendars.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\pl\PresentationUI.resources.dll	Client.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-file-l2-1-0.dll	Client.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected]	Client.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe	Client.exe
File opened for modification	C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt	Client.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.contrast-white_scale-80.png	Client.exe
File opened for modification	C:\Program Files\7-Zip\Lang\ba.txt	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Net.WebSockets.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Formats.Asn1.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\pt-BR\UIAutomationClient.resources.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pt-BR\WindowsFormsIntegration.resources.dll	Client.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\api-ms-win-crt-convert-l1-1-0.dll	Client.exe
File created	C:\Program Files\Common Files\System\Ole DB\msdasql.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\cs\System.Windows.Forms.resources.dll	Client.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Cambria.xml	Client.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.el-gr.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Linq.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Configuration.ConfigurationManager.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\tr\System.Windows.Input.Manipulations.resources.dll	Client.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\legal\javafx\public_suffix.md	Client.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\ipsptb.xml	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\createdump.exe	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ko\PresentationCore.resources.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ja\PresentationUI.resources.dll	Client.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Help\hxds.dll	Client.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ACEODATA.DLL	Client.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\ipschs.xml	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\UIAutomationClient.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\it\System.Windows.Controls.Ribbon.resources.dll	Client.exe
File opened for modification	C:\Program Files\Java\jre-1.8\lib\deploy.jar	Client.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Web.HttpUtility.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\System.Resources.Extensions.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\PresentationFramework-SystemXml.dll	Client.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\fr\System.Windows.Controls.Ribbon.resources.dll	Client.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 64 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16"	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1092616257"	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\MuiCache	MiniSearchHost.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 00000000ffffffff	BoratRat.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16"	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Mode = "4"	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0 = 500031000000000002592a80100041646d696e003c0009000400efbe0259ac7b3959346a2e0000005c5702000000010000000000000000000000000000009a462701410064006d0069006e00000014000000	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0"	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "1"	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\MRUListEx = 00000000ffffffff	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\MRUListEx = 00000000ffffffff	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 = 14001f50e04fd020ea3a6910a2d808002b30309d0000	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\0\0\0\MRUListEx = ffffffff	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\0\0	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1"	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0 = 19002f433a5c000000000000000000000000000000000000000000	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2	BoratRat.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\0\0 = 4e003100000000003959346a100054656d7000003a0009000400efbe0259ac7b3959346a2e0000007c570200000001000000000000000000000000000000d30e9300540065006d007000000014000000	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\0\0\0 = 50003100000000003959346a1000426f726174003c0009000400efbe3959346a3959346a2e00000014a9020000000200000000000000000000000000000094716a0042006f00720061007400000014000000	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0"	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\MRUListEx = 00000000ffffffff	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\0	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1092616257"	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1"	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0"	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0 = 56003100000000000259ac7b12004170704461746100400009000400efbe0259ac7b3959346a2e00000067570200000001000000000000000000000000000000f8f923004100700070004400610074006100000016000000	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\0 = 500031000000000039593b6a10004c6f63616c003c0009000400efbe0259ac7b39593b6a2e0000007b570200000001000000000000000000000000000000035607004c006f00630061006c00000014000000	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	BoratRat.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\SniffedFolderType = "Generic"	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\0\MRUListEx = 00000000ffffffff	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0 = 78003100000000000259ac7b1100557365727300640009000400efbec5522d603959346a2e0000006c0500000000010000000000000000003a0000000000ab47320055007300650072007300000040007300680065006c006c00330032002e0064006c006c002c002d0032003100380031003300000014000000	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\0\0\0	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "1"	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 0100000000000000ffffffff	BoratRat.exe
Key created	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell	BoratRat.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell\SniffedFolderType = "Generic"	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\0\0\MRUListEx = 00000000ffffffff	BoratRat.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\NodeSlot = "2"	BoratRat.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3761892313-3378554128-2287991803-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0"	BoratRat.exe

Suspicious behavior: EnumeratesProcesses 31 IoCs

pid	Process
1964	BoratRat.exe
1964	BoratRat.exe
1964	BoratRat.exe
1964	BoratRat.exe
1964	BoratRat.exe
1964	BoratRat.exe
1964	BoratRat.exe
1964	BoratRat.exe
1964	BoratRat.exe
1964	BoratRat.exe
1964	BoratRat.exe
1964	BoratRat.exe
1964	BoratRat.exe
1964	BoratRat.exe
1964	BoratRat.exe
1964	BoratRat.exe
1964	BoratRat.exe
1964	BoratRat.exe
1964	BoratRat.exe
1964	BoratRat.exe
1964	BoratRat.exe
1964	BoratRat.exe
1964	BoratRat.exe
1964	BoratRat.exe
1964	BoratRat.exe
2760	Client.exe
2760	Client.exe
2760	Client.exe
2760	Client.exe
2760	Client.exe
2760	Client.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1964	BoratRat.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	1964	BoratRat.exe
Token: SeDebugPrivilege	2760	Client.exe

Suspicious use of FindShellTrayWindow 4 IoCs

pid	Process
1964	BoratRat.exe
1964	BoratRat.exe
2760	Client.exe
2760	Client.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
1964	BoratRat.exe
1964	BoratRat.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1964	BoratRat.exe
2972	MiniSearchHost.exe

C:\Users\Admin\AppData\Local\Temp\Borat\BoratRat.exe
"C:\Users\Admin\AppData\Local\Temp\Borat\BoratRat.exe"
1⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1964

C:\Windows\system32\wbem\WmiApSrv.exe
C:\Windows\system32\wbem\WmiApSrv.exe
1⤵
PID:3560

C:\Users\Admin\Desktop\Client.exe
"C:\Users\Admin\Desktop\Client.exe"
1⤵
- Executes dropped EXE
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:2760

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:1012

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2972

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\Java\jdk-1.8\jre\bin\plugin2\msvcp140.dll

Filesize
558KB

MD5
fb441321ceaae7620c3bd05e3635ecaf

SHA1
6b89fa767ddc88f826ee8e9dc9b589c8bda1e5fb

SHA256
1e01ad33fc5f4bf73ca74ffd708fcada19ecf8ae68e46cc5fb659ac3bbe0afcb

SHA512
4c41d20660415b9a09cc8a7a06683aa9d9679761893fce9658e167bf7e2c259e57a925a0ab5fa58e22de9650854b3432d6714df4a816c0750042a684ebd64320

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\plugin2\vcruntime140.dll

Filesize
95KB

MD5
363777149d7df163daa350ee35ec14df

SHA1
c62fc9b6fa5dc3f4989131e027dbb46ef8408195

SHA256
8f87ce8e2dc7090eadb18e41fe3fdd5314e876ad760fe68e14b023a3facd957b

SHA512
38c724e12de93f7523e73a4f1ad923786cd0838b76c99c6cdcbd6bcf666b253ccaf8f03404ecae11ff91bc54fe1e52efaadb5f8f3e690bbab6857a93e7d1f2a3

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\plugin2\vcruntime140_1.dll

Filesize
36KB

MD5
ac11e54f0129e546459474b5ded3a69a

SHA1
18d18b6f20904c875800ef7ffab302daad1b436d

SHA256
328474e047525ebecaa19ebddcb3fa69c80358ad10dcf6274f5a1b0859a29188

SHA512
39d7f7deed6c9493680c0ccfad765ff62af99392bd830291c9d9cc0c7fcb8e76cb83f43b2828eb9da818bf170c851a0f7417a454ee08c531479fc66dde4d3392

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif

Filesize
160B

MD5
d7112d02cf760e71a6797563ec03a96a

SHA1
fed6e98fa0858c9e8725dd62ca3ac1584b2bf8cb

SHA256
b60f999bd95842d111d51e39cfb24f1cead4f0adc63190a18e2dd63fecabd947

SHA512
a4c4e808d62627339db22f97175ec1f6a18fafec0b76ac42489d3715785e13f1e8af8a79f29320b03ca98c5b296220093d03fc48da9e964d954f3ac174131271

Download Submit
C:\Program Files\Java\jre-1.8\COPYRIGHT

Filesize
3KB

MD5
0962ea2c9f3030ff49cf3d98798abc9d

SHA1
40ad36be2a6001099b201e85971f1f317ba6486e

SHA256
30a6f1f827b73a264de1c46e1f6812182370494e48c0563cbda41d0ec470e6b5

SHA512
1ae2a80a54a5baa3974c28c13974d8487098717f53b63622e3d109ea70b28b4d5a8bf8b74ed60747c9a31e99e371efa6efec62fe22de18be909b0302cda8f36c

Download Submit
C:\Program Files\Java\jre-1.8\LICENSE

Filesize
48B

MD5
7e312a5307ee41ad9b63cc936a35df07

SHA1
f81bb88a6857cfdf202b712d67856019e3a2d107

SHA256
d1f857c24200856bebe9af27f36f0cbb9574efecca0a5e03e732df6c68c1af52

SHA512
c62115c4d281cc4b58d72a22fcfeef0852d517a20443d1fd5addba2d1ba5de87560b97ecadd44d3ff8ac4e4923fdbc861f5444481ce6a1a37d39df22da401844

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
192B

MD5
cba691517a2628c72103aacb9d4285ba

SHA1
8eda6870c547d68f830fcae18b7fbab06acb5c41

SHA256
da8bac947a65cd1ee76d2e16587464a7738d834c2cac1b64fd42f723a3572c09

SHA512
20a7d5f22952ae1d5435b20e8d71fc4307f2fb644563f559de1b929b93a513abb9e001bc7ca1b2e56192210d17b98a17eb364617a19c9acc3e9d7c815d9b723c

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt

Filesize
192B

MD5
8c736e7663389fd377d3bd26fcd978bb

SHA1
abddf1963ea7a5938ad40dd3179e4c250b30df99

SHA256
b688925b11e1ec686b972ec3f6f75754c2bb03e326b25bf5f6fa74a39062a234

SHA512
10f23237ff7824466c5e91a684625f63806b8fa10ca689e6a871b7c7d5ce953c400accb77a46bb9c87607002f07fa903672c747cb400ee7ffc15f8fd515a4478

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-console-l1-1-0.dll

Filesize
11KB

MD5
eb9e6f5d73e1f19c80a6b27c3e6a548b

SHA1
fe958d8e426b40d6afcabe60ac69cacafdcf4388

SHA256
ac48bd87d9feab38969a33aca8c03382facaea2f8942857584bcc8d17671d0a4

SHA512
ab6343b1a9dbf9a1c5ca186ea9a2cc6d3c1a08c51f37bc46bc595fef544ee2e0c556775fc09e7b01afb6ba547c50f47dd4c6c70efb554bfee87d57a5f50a4fc4

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-console-l1-2-0.dll

Filesize
11KB

MD5
1fa6ba79aebb4b04c8e71e0e16b79f64

SHA1
071930718ad8b0c0ebd62879b31113c87ce72879

SHA256
f3037b0704c9e186c0b955c8fc1c771e3d8ea41654d32d0fe2745561e1009662

SHA512
2dad8112bc09033e5fa26bfead17046570b2609a672a0f6ff43338e23be19d2a2ad30ae87d1f05d8930cf6a87b97efc8f33f766abfe4c0afff3f382b20d4a747

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-datetime-l1-1-0.dll

Filesize
11KB

MD5
2b9c1777e2482ffbf212d13b53ae36f0

SHA1
11408e7b9ad96e4a3332c52fe029fcbd29799f77

SHA256
0e6e98f6d4474a13c2c25ea1d355b88005b69f8d9e936f9021d1fc38cbcb4741

SHA512
882a00a2ded284f065b5bd4c763005b3d868151dd161be652641f435a3ce62393de740e431d1e0352ae43b381acfbe69d76300c8dab17f13a8bce8d0786218d9

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-debug-l1-1-0.dll

Filesize
11KB

MD5
4ce3458031d682c92e4d9b9a233106e4

SHA1
5f29f5a9bb5b24e48f94a02c758366dc3db6264a

SHA256
9130817882085961358d019edc333e60a813c96d7f39f6f48e67ddf747d0a805

SHA512
ccac741ae49814fa0fb10f5efce5a11039b234fe74be30b66b791e14f94fcb75ab7cd739f27fcd374c93e858890b35b14cca54b96526fe81327cd1e81b271ad1

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-errorhandling-l1-1-0.dll

Filesize
11KB

MD5
c5e198cb9a0c517972e2569d1c0b5a35

SHA1
fd4879dca1c32558930d4bf27e3c0a8a867da098

SHA256
6cc787fd68092e6e3c150de445cdb386ce4af748bf755af603e77a303e301223

SHA512
c16ceff54c6df99c4df0aa6ff5a759b8bc90c6f5dbe2ecc677d629487f850410a89cad757325e7dfc5eb5d72a28da6b75b1deb32754bd353d501d53a00f7ffef

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-file-l1-1-0.dll.BoratRat

Filesize
14KB

MD5
4b9795f9a68b85366de769e2eda2fee5

SHA1
4a4c874d5fcce789e2da00048a94b19415518073

SHA256
7de49f24cf60c35a7a8b895afae7f9ab118c1597d12733742afbd6f31fa1baaa

SHA512
8c43c880c85eee9e3bea19f7d10c1d591f78bfd3aa099fc5aea2f5dceb16dfbbd91b5d5fcd707d470f5ba5dc37a25b6a99065bbf838b9314ff48131980d921e9

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-file-l1-2-0.dll

Filesize
11KB

MD5
a405e01ffa42f0f34cfa9bfbe9104b28

SHA1
53dd3131d10bf47acd9f901cf0f53c7f501b8b0c

SHA256
6301f04ba8f390302a10416eed84df6c5a17bbc13e88c59b00776012d46f4ed2

SHA512
c7b4d3400457c6e153db8b134b0a2772c2c2dac120f6e8eaae1d0ff45b4a816a90f6d940fc5d19a1dfd05e4fc812641add208fab6f1f67993020991713056910

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-file-l2-1-0.dll

Filesize
11KB

MD5
0e130b0a7039c43da656e3c343d8524a

SHA1
d8886e7c19d8215b459d153340c653dce2e42365

SHA256
ed9c98dfb407923a49f8b16752d1589d853547e998bf84c98bfdd4cb3479673f

SHA512
fdbfbc48e0705f69ad5704b8b5c696a3457763f7b923ae9abfff0c12e8a998ea1d79bd6cfcd60d0b4bbff6e6fd310f6a4d7f15d1fabed4aa89061f950a6e3477

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-handle-l1-1-0.dll

Filesize
11KB

MD5
115a4287b69a8e8df60ad8912cca9763

SHA1
a6f3ae5c6ae5993ecc604af468df92ed6700aaf5

SHA256
236d6472cfc96b431859bb7cf7390161b6d174f0a106e56dce1928d3cbae373a

SHA512
08df764de0aa2cdc45fe9034726a5d3a95440a762ae5757931729f20b48974189d1b5652a13027c50ad8244ea5a8415dd910632b80b89e69480c06d6926312c7

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-heap-l1-1-0.dll

Filesize
11KB

MD5
63307a67c999e580ec4e30187e7858a7

SHA1
8687b83592e6e0fec6723615e71d7874d086df32

SHA256
111a17b911b51912bd13494b962a71c379b21e070d9986d4b1e27bf5e3cd4004

SHA512
94b904e9ca352698c75fcbedd89252f3b1a0502ca46264e7251cc0f167aa772c14a1067703ea94c27d685d54898a93012d1efb0bdfe7fc8692580f586dd4107b

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-interlocked-l1-1-0.dll

Filesize
11KB

MD5
c96a9a521a7e9f608c71d375bc0e2a25

SHA1
75bc7848614d4474f27d111f345599e6ded67105

SHA256
e1c80423d1297bca5bccbf2b5190ecbf428c12598a02078324dbce8468aab463

SHA512
642f83e99937a5c57fd8e42917bf11f87225bfda9fe0544217a65e80ebf46723375f496ee8a5655d1062b7bb125febef38b1ab4f394e15ab54d62ea9cac2b3ba

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-libraryloader-l1-1-0.dll

Filesize
12KB

MD5
5d094357f7dca4fe2ffd62709169e49d

SHA1
7851f05171dbe894e64687345f06933dd22dd100

SHA256
76db2da20585ca1e3f5dc9dd77a741fa0205cd7b5002e9abadc94bb97e13c14a

SHA512
344ca06baaafe041ebcb5f6bffaf66c18f6f12cc072a4ebc2a1a0a35dd0a9debe0149c34a9b7eefe91d7c0b88228da12e58708dcf3c9c48db0d719956385b00b

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-localization-l1-2-0.dll

Filesize
14KB

MD5
5d47d243dc9d4714845aff79bad6c17d

SHA1
b53289944975dee892efc50dde6e2148d47736dc

SHA256
b4857011c53632be0267bb565f94142215b8db119c725a0da02d7192e359e9b2

SHA512
7e29c5f3808afa162772d965c3e353cd177b162ec3b8dd8ae6f69e63c8bdd369c80ec258995c911f8840b803f7e8e2f05c49ec04f022d91ba12483cae955b085

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-memory-l1-1-0.dll

Filesize
11KB

MD5
f23549c0da6587a6c0f15d514cb6465d

SHA1
16aab221982e0d08cf027d04c77fcdd6355e31b3

SHA256
16397518bca5c01b4d67a0f3d3b7db1aa0f49bf1d0648ffa4e650b217712fc6e

SHA512
085c9026a1c35943f4358e0083ef0525102f0fe2dfe5c18ef6c3a197cf6b3ed9bb8eb9edb18e7df2ea270dc3c933309000f13075a6d39c2043c363210cd8db7d

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-namedpipe-l1-1-0.dll

Filesize
11KB

MD5
7f6c232c2fd7ffe7e706c533b81321ab

SHA1
402d3ba7e76b36bd78f69255c5c28f3a3988e41e

SHA256
da50d3ed4c278961ccfb289a96f0a462e58e01baf8e2accd8c218d210ee6e2eb

SHA512
2298c47621975f5495048f792d31f493b0f37d62666defe992e1eb93c1c74b6fd3a500c7ddd070e49af58665bbfcafa7eaa3a962a8a2e43848ea63a39790066f

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processenvironment-l1-1-0.dll

Filesize
12KB

MD5
4800ad286f5d32323aeb5f9c28e7b9e0

SHA1
792f653524270a5f76c5106b8eb200e3333473ba

SHA256
33ab91c441fb6f1c64b992b0fe7cba06322d6a8fdc4ccb8fbae1f583d78ba842

SHA512
418da6fdef4fef521e5ee3869430be4525348c316e0394a92bdf20df6adbf9b8a534c078cb07f4a3435b64572c5834486c8ef9a7e2f1e03288b0929fa5ca34df

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processthreads-l1-1-0.dll

Filesize
13KB

MD5
ff18e93694bbe203a1905d48ba04f700

SHA1
4bab51068e4a98aeb364d18121ea20ef484e1f6e

SHA256
61042312c5e8e4b6d07195b3119d6330bdf2b65f649b75d2f09b138fdc8f1a45

SHA512
07084f39e3c0e9a7d3884904d14edd5e2fcb85f3e1fa8ae078b92ce96c9c78a5c12b0fa5f1d18e9d4dbac881293ca9a40e85fd3134dc849f40376055ca0083fb

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processthreads-l1-1-1.dll

Filesize
11KB

MD5
8ae5b124274153d0a8dd1c745ddb55ea

SHA1
f5c03ccf9b18ca0cee78c0f1cb55db1e1845081d

SHA256
b6265940845aae30a38c8cab09af4b1a08b9e02c2a4f06310fa295bb3aad5b8e

SHA512
d105e2a3a3caae05259f4f3cb2da04c4af5e1924d8a57387d027eab204aa67bdda0aaaaff2666b3203977876b35502f2a394ea230b12e2185593ddbc83893b51

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-profile-l1-1-0.dll

Filesize
11KB

MD5
0cb2b1bbb4d9fbf187d2c99db9331dc9

SHA1
b9029dc80389e588f18de72cfea2bc445ffe60fa

SHA256
1d7a1e6df2d1cc66910d8f6ba0a2810fc21cd3124cedc6d2fcd28c844cca485d

SHA512
362db0cf9650d7b7e4bbfb6dc78a75b7cb2f1e8c88ea6f1c2e263ebd167acf99f92dde57241375febacfc24e350c745d296fad058a4af07c40a7c617b5a164b1

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-rtlsupport-l1-1-0.dll

Filesize
11KB

MD5
6f44e5438f62a0ba725fc7ae0e68a55d

SHA1
62d7a7e32756312d492ebf5aa80f53c398ffacbd

SHA256
9fda35e9c4e3d00df5aa96cee6e033ea9606978765bf348357fe9024ad615084

SHA512
1fb7d0aba881fa237f0fea944b7a095e943b5d6a854d6b6668bed410f59dc44ada160d3f26ab955cef928d0e4801188480f748a2f9ac27338a712a0af8a53ab2

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-string-l1-1-0.dll

Filesize
11KB

MD5
7b78accc32132ddd0456613cddba2215

SHA1
0ae4d575db66dd954312aa3ab52a43e5a8a6b5ac

SHA256
ed626721c54c24fe5f741c2e0902242ff1b97738b95eba0b200bb55d22dadf26

SHA512
4f7669598d6fd41c173316fc2e691467139a669398e3404da4bc7e77c77193b0a48ac040ca0935494ecba690e83799d3b0782376e1c9a2d5ba90779d5f932cae

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-synch-l1-1-0.dll

Filesize
13KB

MD5
1c575bdc3ebefa682106c3a146678bdd

SHA1
cb37f93ea3fad004c9adb4229e4b20b2a00811d4

SHA256
4a5b97f9b08e03603d440c5871dd3bbe7a99aae6b4cf34b9a23a7073f28e9982

SHA512
a417c59f92b47bacefad76f19d0bb1e6821dd28a19f912180708caa0b9baf1c84a0ad023fa7687f75b21b0ed90594edae95523ac7dca9e14d213fe60441e26b9

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-synch-l1-2-0.dll

Filesize
11KB

MD5
10b3b6802eb30fc2546cd03426cdf47c

SHA1
d2f61233e62c455d4dd31e84564b486c5aebf3c1

SHA256
7c7238bb3816781ff8e717ca98650ae9bbda04ec1b5b7045f2d879ea9761f1e2

SHA512
5eb38a40cc21df2a4e6ba35d582e87851dd7c0ef2753cdd92ca4890204de447e82d3d17b74b6827739174c6ce3049299914de8b133169742cbf059c4e11d41a3

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-sysinfo-l1-1-0.dll

Filesize
12KB

MD5
469ff29b03bd1a7f3fc0d5c51db67a05

SHA1
05579e74fcf4ebc1c6ff0439e7f8e74aeabfc183

SHA256
e6e7ea07f63928e5640a186b8c1c554f5fe2b3da9d78262a63b01f533da46a8d

SHA512
136bb031dd40359d97d6520f8579c5fc00302b45de96311bfc177dca69d17c729580f52a7b5925218eee937ca4e0b3272f51d0ca599dd8219c06ce922d3d32c5

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-timezone-l1-1-0.dll

Filesize
11KB

MD5
d61c969d35e4ec3c269b7fcad596eebc

SHA1
99ce40fdbd60b3b6c9b29c4cbd80307552adcc63

SHA256
f5686a6f5a4b84b1eccc3f83c127f7872c5de9c2931bc24d11ef04b8c6996bea

SHA512
78b8b939fe72a2f14a88f0275b7e58e8a2a0899d72ef3c4d58fea1870023bc752928e91a85871d509832d094b15783ee713bf0268c7cde3094c60b6d47ef2ff0

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-util-l1-1-0.dll

Filesize
11KB

MD5
2547f6f90d488e3ef6a1a639c4ad195f

SHA1
51a63f0096fe8c05beb32b1c165c950f56d40c00

SHA256
07b1c4b21d926b902dc45bb19385938318275bd81cbf3cf80100158d33f98c8c

SHA512
dcc845c6e5f2cc26e08875f957fd5501c19cdfc269b933b465ca7439435634d1cd491592bb68b084cd79a82d291003771f72a0a2b9068018433ec1e5d8715b78

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-conio-l1-1-0.dll

Filesize
12KB

MD5
81374f265ae82c2bf0a350e4ffcc16d6

SHA1
994e73de57084dde104d1fe821ff44d396150ca8

SHA256
c1ec4e9cbf1542a58de03eb24098f396ac80389449337714c02c81462dfca7ce

SHA512
c3406c471c591f56d7e73ec5d3f30abb97843c600946f0982fd3387abe313e3af4ce732716a25f061b39e5414d82c73bcc78bef6b0beb3f5e83dcd6f6dc2cc63

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-convert-l1-1-0.dll

Filesize
15KB

MD5
16ed9835c9406d5d1785ed11ecf01634

SHA1
ed0453f0c169d36e37b2b5dae24c8411f82beb53

SHA256
75cca5d0568fe227557cea149455bfea7cede4351e6843f153b3b3d77f5ff6d4

SHA512
b65bcaf9fc3ae226a44bac46824de2bdbe6529e583ed6e8f5a56b9e079595d0a728f6275f0a5199880d4819d535ea456c2180944d0d3e9bd53d829885e1a8cbf

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-environment-l1-1-0.dll

Filesize
11KB

MD5
b204f7b546c663f7d0ded1c3c68f08f0

SHA1
01a031c369a3bfd86c1ae1aa4edad3ad0d6471d2

SHA256
c0cb2056b542f7558d92a6f5e796efa7b1311901e9939ec0579ce3655c9437a9

SHA512
b143b9523c2995e6e7f934cfa0586298305118fb8691067dc1fd31f7e8b7d6d5969d0bf545454f348b4f467f71cfd13fcee98a4407bfe8d92506214a94a37fec

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-filesystem-l1-1-0.dll

Filesize
13KB

MD5
c8de9fe86af5ba10d5e538556e48cadf

SHA1
f6ab666ae1a81a3a8a674b3d16f69d3d7f6bc3e5

SHA256
b0c54262023a08504b9bcc756d6c0198a64db616338dd6adb24a225ee1ac0e0b

SHA512
193dabb5d3fbc62eca04b4f001eb4a3c465b92a9129b5e3e7fc93e55833dc7ad30ecc126c22133e6e7f6fb860f8872560b9c62377dcd4410f3bb667c1dacfae7

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-heap-l1-1-0.dll

Filesize
12KB

MD5
27711986708e42c1152dcc81cec2bb0e

SHA1
26a69d221bdb7683aa64bce68ab934b8b0fa3e8d

SHA256
6521fa52427ec50adb9fde034ee97bb7f4cb091543db3cc48f7decd18a67fec6

SHA512
f2e44619428d7f220ef207bb10916de5c5146b86745418836708afdfd312ead49358470b41a5cd73ab72118923ab1afcc9f85e2db87e37bdd66522da1f864d7d

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-locale-l1-1-0.dll

Filesize
11KB

MD5
0a66411638700bbcf40c1f8f8e221269

SHA1
2b64e8b68503189971f01c1700b2c007fc728ef1

SHA256
7e21facddade256156db85666d8820930ccdff483c946956aa5df9675f212974

SHA512
e12cd6eccab188bff95467b9ae2924fcfd720db533e44bf8b51a107f653db66d47e16ed088e1b7983ecc20b5a6a4bf89dc26b452eb0c5d759d6905c6dd390d96

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-math-l1-1-0.dll.BoratRat

Filesize
20KB

MD5
2a109307644ae9bdede4689aa5a42e36

SHA1
3e5f4eb424f30f4275ae5af658ca679d584ad47e

SHA256
2058c6c4842748a0674e41f6d4197829cb09e196878c174cd03b1ebede966b86

SHA512
da5eba378b498f7f56458bc46e78d1c229a66ca2ee4fc394bfbc1bcb5433f062dfe7a32e6f4277db475ccde09a096d3f26eb6fd2e0f364708af356014f0229ac

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-multibyte-l1-1-0.dll

Filesize
19KB

MD5
7cc7cd2c9f7cf0455929db35720aca6c

SHA1
bbc6723ed8a27c8e0515d567c8ca4130154d238d

SHA256
0b98284293ca28d68a1cc01016be79ad25d027cfdae6ca5ef6d5fb3c3920265e

SHA512
bca16a347d483a11f9dcb0df74d5109267cb75c6e5c7a27e0a2622cbfbfaa0f45b98a14f69cfeb5bda84455cab2b1ca2bf0f4f86922b1d8df85ee4ea36142786

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-private-l1-1-0.dll

Filesize
62KB

MD5
dc7858f2f0c468c90a421ecfae4d1bda

SHA1
5bf9da7f5e13b98cd1a1c208a4b02a170043244b

SHA256
573c04fbfa32b33a5ef287a49419c0fbd8c9a2136e896967ede1fa55877d76e6

SHA512
62f30de8153c780a80b5475a494015f93ebba54ab0917490681bab0e0af5bbb31dd8668aad88ba8f49a0163609641ea537374a82e7a3c7ceb301a739b5e44809

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-process-l1-1-0.dll

Filesize
12KB

MD5
737e046babeb6b7a0e8bd074be673cae

SHA1
97be2dcf297d65b3b584f6b710b746c05e026fff

SHA256
ae98f295ae7ecdadc7ca148c72f404482b761d142db238f9b0cc3cdb110c7d2f

SHA512
8a073e4e8ce01ecc1f1f80da380e66a3e64ebb6675efe3c95a4f5febe904fcf2d3e444de2d43d2e99ab580a1017d505fc2a47dbe6e70b1cc3dea8bf6fabc6821

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-runtime-l1-1-0.dll

Filesize
15KB

MD5
ea3b99842f9cc01b96d72d51b9be5011

SHA1
a62cf821da60e2fd19b804ebe3f2e6b8b20429cb

SHA256
7b02c7d9eb6bcc0b8c610c9922dcadc225fb63d57aaf42c28fc7ef8c8601f36b

SHA512
44906208fa71c95c5fec6cb29491457d44c1e19f79bed66d1cf406c5aadb951e20ca59345a8ec77d81534e757a1b1fafb4b0dc5648ce746f45dde43742c944f7

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-stdio-l1-1-0.dll

Filesize
17KB

MD5
7cfe83d4ef0bbd903ef369d95efbaaf0

SHA1
6e22d5532f930be0cff86b26d475eb807d70532c

SHA256
7ef5388ed3ea01f7077fec22dd54daac567ccace96002463ec9f1f1e3baa9d30

SHA512
c93f4435a8862ed926db7208c0b38a860ee3623d12cbacdd24d1efa0c9c73b0306a16ebcacd76d58ee15019843ef608061b70dee82e33d5c0411afebd0199e6b

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-string-l1-1-0.dll

Filesize
17KB

MD5
7e77e9b20d4a59e113861f6a4702859a

SHA1
fbae433d26be4e2dd045b27d0fd35c174dd458b3

SHA256
0ccef274e2567ca6fe0e811e7d62b61d19abbe9136c17ef46857448879b160a7

SHA512
4d5265cc16ed9ac5015ed45b32041caaafd4680a7a14142226c20a81cfda60eb67715087807ac1f58eddb58a9cd5003c3d937d5d9f54ecc92641fc5aa208868a

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-time-l1-1-0.dll

Filesize
13KB

MD5
f236998172f8f00c3c17bae03d40b941

SHA1
8714b2596353ef523ae8d2f26deb0fb1b937906d

SHA256
c79647882684752e3020d492effd64903ead16d43c3bfc282435eba5f9e56c28

SHA512
e236a1f1d9f62df4169001e543ffed278581077c9603663cc70a78b67335f2879b2cb77292d93103e55f4216d6eafe9939f659334b7c6bf7f69afc305edaf7d8

Download Submit
C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-utility-l1-1-0.dll

Filesize
11KB

MD5
3b2f12bbdce48b902cdc7bd36a0df2b4

SHA1
01120eaa377ec94102a017f9b425e9d39d634a49

SHA256
53338438507fb6873002be9ea8c6e2c7182e06330181ac189c58eba2da4b3164

SHA512
7a818cf6531e2f4a3e1f2bcbc55fd5f51669fcb448b27d7906bd1773bc78d814e59fc6013b771642d619e27b16cd9eaf1243e56b46b26a251f7195c14b969f51

Download Submit
C:\Program Files\Java\jre-1.8\bin\ucrtbase.dll

Filesize
1011KB

MD5
d8a94e9bdef4c68f2ad99614ed0917d0

SHA1
c21d44f3aa4a9c8aca6453a5f049fbb84ae5620a

SHA256
780f74bc4b51cfa7621c1c13a71f7030a7451ff03f1fa4426651a64dd654d474

SHA512
9a21bcbe7e4743739179feb2f1dda838f62e7c77a7042963745ac3c56ad5a1cb08ee936f4fa4c3a9f26f990c11e82b81b45c6415069856c5db8a638b932cd679

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md

Filesize
1KB

MD5
25dd2188697107d8dd96fda6ecc7fc95

SHA1
b3ff430955add1a68cbea8daf46be9cf64d80994

SHA256
81f6b6f71dc928dba1ef28a293a4d8752f4d02155b309ca745c9e4936cb00984

SHA512
aed7cb2ad6e771fb7f2163a17926f1bfa5d98b3dc7ce19fa9201a7ea03a7bfe36d10567eec4693cd62e3351d399dbac7295b25d8851349cfcc489f19af4b2f6b

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\glib.md

Filesize
31KB

MD5
280ec0a2ef9805847cfed66fe3955313

SHA1
f41363477c11213f2f2196b91dad934f192c16b0

SHA256
4eb9196f8ccb454958fe382870b74b49a3541c40cb11d699cf31a1522b10f12d

SHA512
697d0eff587eedc39242e5c4590258fc399b4fb455611ed629ca4982aa504b22f5e09229d33ed9cd11a809d6bb21af65e978c4ee1efec4ca971137d5adcee755

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md

Filesize
34KB

MD5
34f750c9ccbc654f4b4b4de22973e55a

SHA1
7dc21cc94fd08b2bf2fada3bdcc4856bb4c32fca

SHA256
fde43a90f4d6294a611dd83574bd12c70db2d32d8566edf708e27c3ef40ccaa1

SHA512
2981cd78778280c60b69e54b6c0d621909d64aa373a68b9077c51538cbee0776398a5627218d98d41ca8bd2170a63af2bda549ebcbe4f17639402b86540df8c7

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md

Filesize
23KB

MD5
cf373107a682c7e18c586e92a3b37433

SHA1
7aec3e8f620160b7590252739619bea60564521e

SHA256
679ad2b7df4a1ceef450cb0af84a049c0d5d081d7a5532a8e2be5088174062d9

SHA512
6b0bb6e60a1bdea4a3bef7b5778e8dd0a600cd644a20df56816b8d7246a40e0478fe61f84701c3d22bc2bd6048fcc76a32a6fe69ad1bb87db459c4f67187ceef

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md

Filesize
2KB

MD5
6d99a95f966e4bb588cf4bccb8fbf59a

SHA1
dab9b402f36f9ce1b192b30b5e31da2acc3d371a

SHA256
fd8b249534b13bb88705fbc34bf76821e020d23a541e6873ef13ede431903424

SHA512
eb3675e9548ca3571887c262592765c4dd06886be5c281bfcf5223eef79011941fd7d9a5f350bf899496783a1eec275f60853db11d609b86701ef75bf6a9f59a

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md

Filesize
1KB

MD5
5939d56c2de327cbfcbcbf7576b2add5

SHA1
125ce94de3e46cf977d7faaca88c3840ac37285a

SHA256
1fa7b8b565a048f1cd58cf3ee8e1b76d02923c5cfe7081f57ac855653be8dc40

SHA512
032995db2d3564baeae4d974794cfda078079c21fed0a1f7a2902b0e3035b67fe1b57a1cd76ccfd21ca28b0443c26169bbc970b72d389e66c1e4de8419470aa3

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md

Filesize
3KB

MD5
d363ca02221e02404abaeec5bfd23aa5

SHA1
e37e50863a347e275230c8a624e32d240a98791e

SHA256
0899df4e87b83d9e8dac49395726affc2da0c552395fc75802226820d8f33d3a

SHA512
b76972e935c90f47ea74152c064250a0044465da8025f9ce5dae0aaa51cbf23689f75371939b3ef7c958a6faa0c10c65628eb3811547e2053c487c3686f4a7ab

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md

Filesize
2KB

MD5
dca14192e7e7401397a6244e5f86dedc

SHA1
c8ba322ee5e2395cba981516eff7e8219241810a

SHA256
22c547967bad07aea3ab712220f88fea6ef10344c6f608a8fc344d26a1ae3ee0

SHA512
44afcf9b702f57cfea6ac37a4843e3ef0dce370cec32936d5a2fdde123fc2438be5a580945ac9040320325ad3342d39b4c55f39f5825351703f9f0c7047bd716

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md

Filesize
5KB

MD5
e422afd32856e86531044e4a837691d1

SHA1
c13b8c3607222446b85fb46b77bfb4461a2e5228

SHA256
0850f837b3ccce07ab38f1ffbd61bf2e42c1ef71ad3bc6e5467d36a346c8e99d

SHA512
1b1dec18e38de5e4c09b2ad3ce760986afd59b4d87f3856a3074e3a64cf54a254a6a3efdb8e826c726499b7c569a43d838ab531f9252e32a47b266f240e31ebe

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md

Filesize
17KB

MD5
45ce68029ccff9016a5c529f27a5b7f5

SHA1
62d4e227a0aa5c12df6ef62fef383827e01eb0a6

SHA256
3290cb8181bce2ae2ae7a06935b44a82bf22564df6447d4c33795eb989d2d01f

SHA512
2e4983c4599da2e2f37ef4633c28ddcee4eabcf3eda8b3029bd76d137363f73854d538357d337101a277db7c300ac166a5ca5f810f0ce5930d244d1696ef8eff

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md

Filesize
320KB

MD5
bbb8ce787f7f2746849dbac5fbabe4bd

SHA1
f2d63dab40b0ebcb6e26cab021c718a12886401e

SHA256
d9073f3a3289cd1eb62b103b4cee73236b2f305a65cb2d34b08ed6c8bf2a81be

SHA512
d137f9623c75dd1edbb880153e712cf8665d2b04f671b04554c353374e67bebf288529cf17661403dd7742ae043d8e5ecae9a5105ecc9e74524f768b9e90902a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\asm.md

Filesize
1KB

MD5
04fd86216e29a375943e88e2c2e0be14

SHA1
c186aea22c6d023a9cfed0cb7d222c495648c2c5

SHA256
200040a268b74b254fb23781c6c636084240bff4df8efcca1683a7a339fbb512

SHA512
47b1ccfeaa08e9b89db605bc05d5d63d1472188651376e1a8068105be3bf818bf5ed6c2eed436d6172099b31d37132089aa3206a91a975ba9013d0cd1006a2e3

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md

Filesize
10KB

MD5
36682e9967243ec3733c496a326de5eb

SHA1
01e4a2cd7a917bd0992fecbf73d266b565b73511

SHA256
0e19a8e999c424790c3de705dedf89a3800632d204d37c035ec2a17d7b42cb81

SHA512
ee917f6153d9c3a815e8f5b323c060833b0a2605d7e93561a3c6d1aca69915075a61ade76dfb66682288a9dcc9941845b57e7e909dadc4a692e7a2ec7865853f

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md

Filesize
3KB

MD5
8cc47f67db611a290b47a321a51a9ee9

SHA1
10c8e5afab7de4d4a1373192330030d530bf51b5

SHA256
09f35c77bce8e43fcf327aac4ded2a90765d221ebd09fe787c19a397b8e977ab

SHA512
98c06c703e388b5e38e894b8dada54e2a42951ad622485c6cdcb41206f87f9a836e57a69299be3681125ea3a1b690e8e3d8457fcae0175b08f4aedfc0458afba

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md

Filesize
176B

MD5
57b68235a9db5b577d7cdfce79130c38

SHA1
329aa6fdc25c7dda9d4a3c4e4ee17aea89b1d36a

SHA256
8155b3e216eb547080b5f87b9752070843828d71546252da230a85920b73e4f8

SHA512
20b80220ba73e1c61024129ac9983f0758fdf84ff2fc08af90fb8568c9272ae6ccdaaf8feae1f8ba3646d5158b27e362444c924a2c3ac85de5b40d205b333cff

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md

Filesize
1KB

MD5
fd345d701036caa2a7826811be56b064

SHA1
94b0d515801583c8ecb095a0efa93b1beb61cc74

SHA256
85f8d86629e7e360ba91de4a224c5ce76e448421bd115f8c2144cf5695a4c822

SHA512
7c04cc339166d7cd300176132d125424fb94bbb4bef526df88aac767717e507aadf6fb607d4e882dfc2c27598c59cbe55887008972e5c5709abf867422c68b25

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dom.md

Filesize
3KB

MD5
49b2658f22182ba29090c5c2bf284cc0

SHA1
8baa69c7a7e2bec9970e4626bd0692926b11d66f

SHA256
ea65acea9a19c549595d9d2b203af32a64d4b842b8f4c8fc12a2e033cea5e895

SHA512
11b4a76d10cb1aec12e8e17e7b4486d02342f6e9c224bb1e173fae6e5e59d4a580c73b1f2217a7bfa7e561d4c1b306e66f4a8a1169c846a889e06f7eb84b4ab4

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md

Filesize
1KB

MD5
dd62818715c5fd9fce223ad36c9d7cb4

SHA1
4d08721dd24411dc41ee75c16fd6a34d1d73eeb5

SHA256
317ce99bde59cb6638167d4b4095a34c0d4b5d48f702002ca4cd74d3918c79da

SHA512
04d07bf65e792b7ffb02eba3573bc8b628233073bc6743df79eb3764770da96d7d876d95acb5e10600f29f9e5ffc8053d4bdd7a601e8c37f6bfcd63e2f9687a0

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md

Filesize
28KB

MD5
a6dbcac2d7ea9bb4295753b4b9787263

SHA1
5f647ea80dbdaebfb26be9bb8397b9331f42d3d4

SHA256
a268079e837ec4c39a2feda287c49a921fa7c4bd145eb65aa1cb9f8f4140f927

SHA512
6733bfa10a2c0d1f9c8a5fab1b959741bd873d3a6207dc9c9c2a771ef98e1170da452e7ea4139374ea2b00cee93879d8025a92d8962008f625d3e2c107632ddb

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md

Filesize
2KB

MD5
4ef4a5b2088cfe6599aa69ae66127dbc

SHA1
a2763eb55913ec0ddff55f2f96c3e11e868b8747

SHA256
af03156a946b91456b0311e4357fa6a4bb3676ed357009649dacf2d21a0ff7cc

SHA512
10fa9e34eff6ff0b878d6f8a4982461e7b0d5dce08c34076c794dea2d55b021a06f0ec8c29c41388129121209672b7a92474e59e8f49383c5ccc86b0da755d92

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md

Filesize
1KB

MD5
6b05f55c787711be9d1c6d53c48e5f07

SHA1
24642c057e45cc17551c1d326839f6a2fe094330

SHA256
22f5a67562fe1c6c92037987f0703b42c93d532dd15707b4331c44397ee735e0

SHA512
0c3648a2468130a4613f17233c0c7cac9cd12b792e2a697d8d82efbb654f083a72773fd53eac2dcf0ee623c0c82cf852bde05aadc1b12b7e319d30c7b5d447b0

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\icu.md

Filesize
2KB

MD5
b0724fea914817da332de675129ba964

SHA1
4a9d97e5b8a6f85a6e3ffa08a69b1d00d19769dc

SHA256
d64813afc0c3a260b4ee593aee0d86f3d602433e631008d2dbae9844d6943ee8

SHA512
0d0068eab3862c49565d650c2bac46f30b41117cf124bfcffd6504ff6e1a5ec6a9a50cc467b2ec571ce2874da850cc80f1aa8563d4fb606574c2dda840313f05

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md

Filesize
1KB

MD5
005a17fcdbdaa45a44466e0e064da220

SHA1
3450691bd4156905657c4bfa4b9bd24c3a2ab102

SHA256
3474502b5ba0ac857efeb04d35de90a57490e569b33033d3b403312858b45745

SHA512
701c29798cb0c58fe0a11a820e818a58e553251a92dd71b440ea571340412dc0c3ac93c7045838fb965bbb844f982a9ebb52730a50c84c2d60108009b64f5ed2

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\joni.md

Filesize
1KB

MD5
b94e3317fa9651952c3c7c1598c0355e

SHA1
f4bb2a27cbc7b15df733b36aa7797fcf7fafae80

SHA256
d795e227efc0d134b789761a817bed9457de911c692bb4970a39e989425a672b

SHA512
48fb17889829cff4d28608659c9aa0ef261efb24b4579f19e1b83e50eb91ae04027e227eb3734e23f6bd7ae030a7ad573096a1318edc467427a12fa10fd81fed

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md

Filesize
1KB

MD5
f703fdcd96ba8aa1a12b1c6c6a93a096

SHA1
a160967530305531b53a282175b190be065fbcc7

SHA256
bf7d1718d278cc77d0d989d4fe5f80be18d49b3e8b15e85dcab9ba32cb2dceb2

SHA512
2231e58fa389e948e881c4bd79c090ca0cd5af2328557d9f863ce38ddf1ba5de843da8eef460b4a95b5e53bc8752fc95d9297c4fe45ee4ececbc8ec12b2f70cb

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md

Filesize
3KB

MD5
f2bd31c035582fcedd77cd216875c229

SHA1
8c143abaee7b68cc52f3b1a0bdccc1f73391df2b

SHA256
be72023300af27ef53bf035289e775bf1aa6683ff2a49c20fc39580ebc3368c6

SHA512
315bae245dc318f8706e4a3d42d01172b4b45a3532a9af797d25de78b9c000b0fdb1c42b3e38f68800189cccc582037605255ba7249874fc1df0f85fdaae9b1a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md

Filesize
2KB

MD5
fb9b2c759f8f8aed9ff318a74fff31f0

SHA1
baf934630f23a5a61a9ede8ec782ed867bb48841

SHA256
072f6d025b10f549b9e3b30885304f6ebe73040b9442381789867cd59f1810ba

SHA512
09f135a536bc099431084031687b5c9a78c578f2959b909f14b7999b8aa3db68add83a049e93b49f1ead269f058f248efa9f4c1b0d9d595700653f7dc3ffca64

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md

Filesize
6KB

MD5
d09001ef4847ae3f05b593a2a3c05d40

SHA1
0693021ac8796009c096985cced57a3c9a1f9bba

SHA256
ce41fa656e2ad8cf1659e66ae0143b9adf1685698cbf74f539d8a404a423cfed

SHA512
5bdbc9cf7fbee939677bc4b6271edb373668146e794f04658111e1ad70416a3c10593d66b096728f322e4a5da61ec3b35e57f48a5627bb2bc924716f3db7f470

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md

Filesize
5KB

MD5
de234b54f83a141986d1592e7e91e7db

SHA1
15c02f881d115a76660453cc128b757a57874f80

SHA256
bc444c0ea8eeda16b76a026c6381fd8e95e87bae19fd390789fe3e1cc857d165

SHA512
b781fd3adbc309308632e1e2b5542890e9548debe5336e93c911287309b8c45e0a849d56b3bba50853641b5719f46ded65fd66dfe9ba252b329d34a4087adc71

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md

Filesize
3KB

MD5
a7aaaab3682d847d40abbfe17b5b9efc

SHA1
ac179443aaa3d29539e00cee64f05ebd72685a80

SHA256
d8eab7280012a92ca232bac5b541426bf3e021cb707beb0fb5129dbb4a73c88b

SHA512
11240c314a0413c1993d2343b2563326e37c28d785158eefafd03c715a4c90ccb4f3de7b547e400b2316a93c1894318dad3ae6cd35fc6bd8994ce42d517c585c

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md

Filesize
2KB

MD5
7838b796224deda51e63481f6c35f124

SHA1
965033f263d29c887aacc00edbfa2baea74007df

SHA256
51cd609e9980977931e9f46daa41570a097688615d4cec0bedf16ef9b560e327

SHA512
c394c3f7ccd072e87c74bb01f1adb207bc0f1008661c17fb4e163b416f66976933c3832930670e7c16eda74b994e069cb2892e13d4fa730b631740bee7eeded9

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md

Filesize
2KB

MD5
3d6d382dc39b4fa9f08752a7acfb74f2

SHA1
687895644d78b2cabc95add3b60860a3e5043410

SHA256
d71073c31a53d7ab539e87f165aa64dae8cdffc243a550fede1da634611e943d

SHA512
13d433010dae12a4af6bfa211b7e9bcd273dfff90d6d6c9b574edd8d77e6b30e7e573e28d58a542933f9609a6e04aa6b84f388ce56c57965707674da32a637dc

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md

Filesize
1KB

MD5
8de6c0abe3e930011a2c1262a53710ef

SHA1
abc674f7813f99356feb994afe2fcf9ad829cd14

SHA256
e8c8f03ecda6545881809df530f9b3db1b3f320c079cdb861216f97b3663b463

SHA512
3ff2d7774b6f34b42a6ce3260792138fe6575250f43727c11fe68617db268d26b20263bfb0403a58bec9c18fbfff3c60cbcef8e1705eb438e33192e0da2ecb89

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md

Filesize
1KB

MD5
ab157cf416389f855ac892fb38af7f25

SHA1
f825b0ac95bc6ae9f9f4395f474af63096ed671f

SHA256
15b0edaad3c12e6dfddb0a6c1d97a03e15235444c57c839babf64569e2ca9304

SHA512
077dbaee1dc6a3dc464e061e6e6094a6141a6f3b94cfc8cad86f6ee8660e318ff373c11dd129808440643f55ab74e1ff085c085a167ed1635f0754c28a97c3fc

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md

Filesize
11KB

MD5
982d644f8b664fed30804fe467b31223

SHA1
e5e73ae1513627d939978ecd3af58e80edd6d854

SHA256
dcb7b7259390900eec70ec79f7565e4c778453d5c51b63c7d5351f8b619f27a8

SHA512
7c5ee781eef45ccaecc3cd1ba9a8d9ea034eeb7d70c0a54bd1df4f3b2a602bfa0e9dcbc84acc5414de10dfebb3a34a2c8f7b2e40c32913c9eab7c355419a0c69

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md

Filesize
1KB

MD5
05cd69d8d7d6a7acec66aef5f546e318

SHA1
e3c41d599b9e5efc8018ed4ddbecd3abe48ea847

SHA256
888ebb2aaa8e75f41efedbb20bd9cb701493e3b25eb7729362662bd40e216e16

SHA512
b7ced507038fa8eae016adc8348f67b511c0fcccf21f0ccd82108f1352691825a2f1faaa86b747da8c0a577d1a5ab6ebfa126880563e743fa2f24f373ba62029

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md

Filesize
2KB

MD5
736ccdbf9f08ccd620ca4a7cd45eeb9e

SHA1
35ec906661674f6a4bc0fd483a7f1653ce8b334b

SHA256
548baf453bdbaa10796d33dee7dbe2c4a5b1846c6d3c1b3b1de56e6f90ab4c63

SHA512
1314d4b0ded4299a47affe79d24482e09eb4db6ed2c4c51636ef65a1c0a1a57961bca7a5e980821f955b159583c8cfeb91d5dc5dac7782574d92e87fe464a5aa

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md

Filesize
11KB

MD5
4e5ee4322d349db849a3399be87e5668

SHA1
bad1b4b1689ef16b519c3304d8ddbbbb25fdda20

SHA256
90a4c4e46bf669b34f321ea494e07fcfc65275ec4dd448f2e1d18106d5a5d86b

SHA512
05ff8aedddd5ab2293de400af8dcc342dd07b86011594592b7c5e30e61a40e90bb64fd33a915829179487d8e8c0d5379c4c383d64bf66205fdd5107704596e3e

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md

Filesize
11KB

MD5
62015fb6603fe8bcb151147db50d9cbe

SHA1
a97cbe4b108d4f4e8ebedeb1bffa7ef19ddeaee7

SHA256
58d68a13de8d7e47d771c6771affb16c684a86cffc6b93e3b5b1eb3cfe518599

SHA512
eb0a65bf5c31e2207f19d7f33e5050ed02db6aac6d01cd84f56eaa17a571b84656e46052aebd826ca0faf8a52fe39a2072998b8167f43742d3c866191ea4d479

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md

Filesize
11KB

MD5
6b72bb6b9ff6c634664671c1d62d3668

SHA1
d78d7e8d3d6fdfb13e397087a8a8199a0dca3008

SHA256
38e0e39b5553e438fa72ed703319d8e3de1ddca6cb398e9e696be4e18435a62f

SHA512
10dd91bac1515e06058c8c7fada97d4a52a2e8b4c30daf6067299eb6d034557dcb250abb414614d2db83c4ac5d8158dd0a87bc7bd96a8ad3e3bc4e16521b7256

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md

Filesize
1024B

MD5
ed792e76ccd7b0fbccdee5920d2c1335

SHA1
3a6e0b63d8730d5479c4c4cd66025003b8ef17ba

SHA256
fd27b0d5f60b723fe53e04745bc99d6fb37d17a26f63eb6f1007f0aff86033de

SHA512
5d55bdfa479651f7f73242ce1feae9a5ea5866f7d9cb2c2d1b84fbb9fd9aafe92ead1868e6f6f13cff174757d93098aa3df54a8ebde78b062da95bcfb0a79506

Download Submit
C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub2019_eula.txt

Filesize
48B

MD5
a5619e55e12ff75db9ebaf7b4a368c22

SHA1
56d31a5ac66fed698d756f232e8c8635a9db731f

SHA256
d4ad242527d97110d168391bd0ae43279ac296c3ba994e0ef6ea1cdc6bf2f785

SHA512
00b5e1797153f01f6361fcb133ea64ecd36e2618e9e78b7c54dbd2c0401a8e910da17e1ad4b6dc69570ef97fdf0bf9b4e5c473b876c023339847b05aaed3c32b

Download Submit
C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Localytics.dll

Filesize
16B

MD5
05b5df9a91adf52fde979e79603f4d79

SHA1
84616441fdc5b282a4e09e8561a413ab75333924

SHA256
3b81b98a5fe8798753939e0d862e34bc2bd33b8cb3fc6ab9a149bd8423f99710

SHA512
340b311bb07162c3a9fda71fb65b3f69c1eb4462d2010ce2662ad25716c2300730507ce4ae127f6b856e91d71183d8bf392ff75edc3ab4cb371038371dfe2c47

Download Submit
C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL64.DllA\zlibwapi.dll

Filesize
274KB

MD5
3eff0556e38a623f1821c848521a32a6

SHA1
28b39921f0cae6f993e37183ca533c7222f2dc87

SHA256
4f227dc3c774d7eafaa596ea05b742064e7a5fa72dacc66ae94ea6aaea09fd1c

SHA512
a25f1787718a0e11f2223bf01b99c6b27ac8dd4ec26269087e653261375f0876851f8e75ace8c3f6cf7c68889231084e25d47e119471e66500dd30b583ccec50

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-file-l1-2-0.dll.BoratRat

Filesize
18KB

MD5
8dc5738d9a8ae50d03cf1394ecad69e9

SHA1
963eb5b04aa30cef7b12184da563aee17d0ae8a8

SHA256
e0ec7b94927b674ba86e5d2cd69248fbe29b66ed8f5e5d1d04608daa1683bdb8

SHA512
4d9f07178d3145975bca1d43022c67651d39dd0b419a0a9494e12da68775aba672790177e222baafe9c67256c135e5c902b129e1040a208ada068ed5834b2249

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-file-l2-1-0.dll

Filesize
18KB

MD5
2a9e31570e4eaf23b49b7a768458d5f1

SHA1
e594d331fc552fe38e9437e3da49c3ac8fc00de3

SHA256
508bed7befb9a8d60320bc58133f8508b38e595c897c1aa72dc3328b1ac8182b

SHA512
d4e685ac2853747f8e6f6c9dd11bc4c2ce38c010dc69b5b945e90f95c752ffea494c23a6d6928d0af567e6abebd62556f800956c6ab1c58cba14b87a5d07d1e4

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-localization-l1-2-0.dll

Filesize
20KB

MD5
01dde1e6cfe8dadc1ce9020fc4c81141

SHA1
4ef60390cd542ce1651087c3b822a7771a5f79a9

SHA256
77dbb5f1b8ca95867a497a5f72f781a63253cd1469e933e4c03c5c2279446090

SHA512
8c27114bf4ae463ebfdf990a8948923b3e39b75db90e92641caeefe5536db5279d6ded42f4a97ea0d022b099ede488472ee29a435828418a34f6a40c375ed0c5

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-processthreads-l1-1-1.dll

Filesize
18KB

MD5
755cd566fb4f7a94355d697c5c8cff5f

SHA1
603ae207b3d5db92e593d1c99032e8be9db96afc

SHA256
6a50e03cd6440d737128e98351e1cdc7c6fc39ad321f82a24e3ac50802cf02be

SHA512
f0bdc09f889fa0f511e1565362617fe805eb955d38c068d32e865601d6d52dde31e5d92790a923a1fbaf45ff03fe9cad039be785865b6079b4e460f79f6b7f8e

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-synch-l1-2-0.dll

Filesize
18KB

MD5
b20069c67eac832f462ca025d0422437

SHA1
9adc3444dd1b6d6679dbcb3c3182773d2b5bba7c

SHA256
765fa1ee2fa0711aadb6cd6834ab2e92d4c363cd76e6050376e46ec6069131eb

SHA512
e849137b29bf4b2a27b97d4f9996d2b961efbd090a7db76ff50615fad57187d4c179368f9e5a1996d29a620ef4d81d1c4fbc49ea568feb38280fc979846090d7

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-timezone-l1-1-0.dll

Filesize
18KB

MD5
0829ee61434b8e9a9aa9665df17c5ee0

SHA1
e52518a305e24da54fe2892662dcaf53ddd391cb

SHA256
075e422f9ea4ab6dac44ef5976a7e81a24f6c362d779e029b992c465ddf6146f

SHA512
a19d39d945c0fe8fd8903c533bb7140274030c9e5bbbe2265a87b97fcd01231bb51785bd42fc0d4a5c2f2b36c3e6975e75a95fa03a60e1071b8915f2a87b9e28

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-xstate-l2-1-0.dll

Filesize
11KB

MD5
64d245ce1e068087804791ca2adb2b94

SHA1
46f969913479bd40a41e0c780b22158c0c035a48

SHA256
7a011bfdd0c2a0e159969a158cf2768307b03ffe78c33261c5dd8e34eaa1f6e5

SHA512
003530c1fcd7bf8e875fcc04fc3dc2db8a8644f44d92218ee79f5fc1110baa57cf6deeef550bf0fcfb4970b02ea9614299f70ac68c76da9c96c0c8ff91efadc2

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-conio-l1-1-0.dll

Filesize
19KB

MD5
069912a44f294a45a1844bdf489332ed

SHA1
e271c4a3c3218930efadf54209bd333c2253811d

SHA256
b26921ad76d0f91760a083d3afa1131e166ebb925c15742f6efc8338b96c78ab

SHA512
df01653ca892bb58b895b954f1e37bba5c7fbf8179f82f6f38a3f9f790d8aa739a6348a274cf9cae7e16c1a8bb5cc742f47ebc483ebfa2f451f34372ba70ef35

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-convert-l1-1-0.dll

Filesize
22KB

MD5
80cd9ed2f623f1319e83d9282e7a8c82

SHA1
d331a067cb0116853002ed7cd4a845dea926b1a9

SHA256
5bdd14f8088e2339695eeb80cd7b32cae0868c2ebdc422dc5a4d125f727ec4e6

SHA512
e5bac4cc3085b9402f812f58c7a717c14c1e213dc7777a482f9be18ab715fcf897610a3b1ab9fa494b0edd036cf7ea9468e764124be7386d7e1e081dd6ac7067

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-environment-l1-1-0.dll

Filesize
18KB

MD5
e68f7ed49ca2e6a79fda2907b3bf9f7b

SHA1
f8bd29c0c913f779f6edd2ba6755eb54294739e0

SHA256
cf0d6ddb4ccc71cd98f0616b355bdc6dd7782993e8bacaee4ddfbed5f7c4c3b0

SHA512
75bec472beaf5f23fbf983b86172ba6eb7ab87c8b923e6c254d63c6d3340f3ae5b66dd753d3fd086f2fbd7dd3bb9d0ba06369211978c0f6de5046f726af4ad29

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-filesystem-l1-1-0.dll

Filesize
20KB

MD5
8940a61bcb66471464e044935abf1e74

SHA1
05fac6a328da2d49148630d7b2f88d46605dee69

SHA256
c19a9100e441cbfe6ad411947e984658e0a200d6a5f12bd8617581cd6fe17ad5

SHA512
5062609f1e2eecd8589a5889c6c89d068d59690ada41c2cb2a0bf09669a65bf28ebbdef1e6f84cd317bc48c7b1a3a77191b57704958e6d1f398290c50843a965

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-heap-l1-1-0.dll

Filesize
19KB

MD5
a52dadb808cd1f70fa72b8aaa0450363

SHA1
72f927f03480613a5d01e91a6cfe9486d6e4189b

SHA256
843e6442eb2c42381e887d6b38a91864b4eff84cc6ddfc32fbbce3abe8410c5e

SHA512
c6a42df8a1f80dbfa9739cef3a8c94012bbb9a7d14bb18963c6a305c51f6c1443c1e860d0bb1ffd41335b345233ec99cea7f17f2000e7500e391d94638787758

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-locale-l1-1-0.dll

Filesize
18KB

MD5
ac71c61235d3a43ba3b52879304eb67e

SHA1
5469b7134fac61ca18917a88dc41784993f98a7b

SHA256
bca741dd48cc9ad5b3ab3e4a90e6063103505da66f638a6e5dbf546473aa55f0

SHA512
4dcabf1ecd78ea6479ac18db82c072960d4edba81486ab92d8d259461fc0f8ea6084f4ad2ae121548d4773609f04d1faa7fffbd8804e7a9fa0b417bdc3dd907f

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-math-l1-1-0.dll

Filesize
27KB

MD5
446c5c9a3a3c4c13a5fdaee6aa2d9515

SHA1
694e0da627cdc1512ff678186553a9f51f18ca20

SHA256
30dd055b6a63466cf431c3cc52af843c888e0be59d62cb39ad6fdd79ab07ae92

SHA512
744fb75896bb619be702e193038279bb7c40c638d9d849f0a077dc076014d4620cf5217415b42c44125625306467061215f74a55fb159094fcc2849caa91a6bf

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-multibyte-l1-1-0.dll

Filesize
26KB

MD5
bc1bfaa5d1bac1bad32a0dee2ab0b69e

SHA1
3a618b7bf213796f667ec027fbd8d75bdbf2be00

SHA256
81d4ecc6f3c37e383aa129e14e5071761ee952234990d643ba13e00ba5351c59

SHA512
0fe840ba886bef4a33eac1df9f4c9fd716a543d6275c8450da4d78705196dc904942a6265745c08be138dd4ca588a74645a4330863baf04f5a0b3d3aaf39157c

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-private-l1-1-0.dll

Filesize
69KB

MD5
c67f798c4eafbaefab951f57623118c9

SHA1
e0ffe368102fe0ceef616d90dc508b215b952b2c

SHA256
1229c1a5956180f46520b6f7305ddf3b32a8208e02909d2d4264dec74e5cbe29

SHA512
5a2ac5d923adb8dd966d4302665aa8959e20e1c986978593e071ce0b0c6ed3a2797f63b402da7bb3fde117babf23ddee9e3a37e6a8eaf398075e33ae3945d6aa

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-process-l1-1-0.dll

Filesize
19KB

MD5
3dd08ca9eabc0fe47c8b80faed5428db

SHA1
498a4364284e03cd2186fe097a2b8d85b132c9a0

SHA256
f23ca772f199cd966d9de32d56733753b2cc2b24f301c572ff2509ddddd33876

SHA512
915c62fd7db447f6207e36f6d610483c5b9e08fb72e7ca93941597c8c2f52acfbd5d55f1def49a86361b2c2dbc13884a8820753da88c1cf2665d9df08021fd45

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-runtime-l1-1-0.dll

Filesize
22KB

MD5
ef5a9c0e807f0b718b7536faef0457a1

SHA1
ad0897a7c6640c6c54840f940df2a66e98b8f691

SHA256
cf2a2a64eca48a208b4bd5880ab161701edb8df15bc1da8dc2a642591c3118e8

SHA512
e092fe64f78e3d8d9cd73cab30a3526dda8d54ee57d388c485cc9e0b9fde26861a90e6c3d74de7529a35e55d454f6f1145a423e596bfcf3803ea834c2b95befd

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-stdio-l1-1-0.dll

Filesize
24KB

MD5
d811da6bddaf3b88dfcb18a05b0fd684

SHA1
d85a585c5be3811b7844058a3785f897a24a9a37

SHA256
c0581cf32c75d7d54d51546c34ffd8cf7d8e6974f68df2eaaa258794fde440c5

SHA512
f049aa808f3e834681a9ba46883152dea839d1e4bd0aa8d4381364ce8cc017af7137a96a3ec804a3852348f94f2add6e16e5291df153d79ab0725bef9fdd1ea3

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-string-l1-1-0.dll

Filesize
24KB

MD5
d059efaa5eb9a009d082d0d144bed8b7

SHA1
1f9f7221e2c5ea26fe2b9d3369df15c3fc0538c8

SHA256
d5d2382de1b6295e2a52cbe213f78ba3fac4a84f08e32f89222f178e4666d959

SHA512
ead1ab8adc54c025816cde7a88c49c81da6d5e50102ca2bcb31f37b4e1784cdde6b5ef3066eca744e0f45ad970801d7e683ebac46da2c6678c0db4deee86773a

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-time-l1-1-0.dll

Filesize
20KB

MD5
1f9727558a5dd195ecfc0c04e63a0f7e

SHA1
3e758b3d5c2c98957e2dcdb94d248bc17cd5e1c9

SHA256
5ad3aa296fd6f99602cd7d6ab84280eb5e0149587890e0cf0f89fb4a6d9ede8f

SHA512
668d09365ca7752851ed47bf34411bb9667ea042186ea0c5764c9f308046cf1a04406e3974c9b8fb4620a997548110f825b20c4c10d67cf27b3f62d7763798a9

Download Submit
C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-utility-l1-1-0.dll

Filesize
18KB

MD5
3e0e7c90ad3baee200c10ec922a20ef9

SHA1
9bc6a4708a082960326ff5cea0d3c18b83523025

SHA256
94d2451165a2376a4ef4d12128aef9cf67b60dced3bc5274e98a9c46f7505de4

SHA512
30ddad317627f073443d36382a8e7ed725e06252d4ce86b3d4cfad0d0a5f306af3471ac9787245fb4afb1ea8178d7beb4f176c00ac6d2b73951ceda77bf0aa41

Download Submit
C:\Program Files\Microsoft Office\root\Office16\concrt140.dll

Filesize
324KB

MD5
13255747770500e8db997a957b7d4796

SHA1
874dd8a8256bcb947e36cfc986de8ce8e7fd2408

SHA256
79ac9c9571af4c795de1ffc39e110d033ded74c34b195a237084ad76584d0c6d

SHA512
a1e3c9f4c35eadb6f1642067fe0e8cbc60c92f4aba08f4b4937c776386e15688708681f598fbe5d172d4efeecd0fb456c86362bea0cf0defd04667a88e3ea9b7

Download Submit
C:\Program Files\Microsoft Office\root\Office16\vccorlib140.dll

Filesize
358KB

MD5
d9854396e5599f959376f9aabdbbf7b5

SHA1
f2e83ebb4022981e7c94cdda16217341613fbb0a

SHA256
483e46199f5e625f5c31ff615eb2471afe53fb319d33ff1758c10f0cb3374a25

SHA512
8448020583bc5b2364a5ca36017907d4774c3e61a0e14ab9118565396f54c3571d46e79e6f2f7bb0844820dde832d00e92b8b6476dea2f04e69eee4992bda250

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\mfc140u.dll

Filesize
5.6MB

MD5
63ac139e9f8cd818d618e5bee46e7734

SHA1
90ce9bb7d155e7cd801bf438edab0b78895c2ebb

SHA256
9768d63246dd703103b20722b40c05c036fe1c3462643089de7b90d893ba7972

SHA512
62636198a7054910894bb366e72b7969feace1cc329152943845090b291643c63ee71ce4b0d30ba37d74a9c0b8e38a3129dcd40935381a718f67ef2c535179cb

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcp120.dll

Filesize
644KB

MD5
e2bef7a4ee07f9f90b56329ab51531be

SHA1
fd073116a6c9539818738b2af161bbbdf7dc7562

SHA256
9ee1c885f3f2b506696b6562e973c744d68d3c8ffa6aa41d27f027f97f258e77

SHA512
0557e6da80be07678c0ab4b90545060e4465c4db7723ed7e15c76cb605fb3e52e7032137bd925874fb3cf7a51525c2aee19b0622d6dc6c7cce555c77f13affb5

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msvcr120.dll

Filesize
940KB

MD5
1b84c67f7fa4ee149290466e8ff27276

SHA1
6a90ee04d0fd62beb03cffe2e5099cf3cfba020f

SHA256
da0e034d64325d28d346ceed37dc1d9a09b7e432101166676c11afd3b3809002

SHA512
51685d64ed5f4941ebfd33b21f507294da135076af7e30f2e213c1ef9a8c337421b179b94ba845b3ae88dd2b743795567f27c0ae7bb055dbd7f7f701a7abc113

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ucrtbase.dll

Filesize
960KB

MD5
ef23e2d6d4c5324fbf91f65a3af5e657

SHA1
dd20decf69e43d8842e9af0ad147337b96806a18

SHA256
02d0c75c7c69b299dbccf0b9e614a7da042cef14658b2ecb2bfbf114cc8803dc

SHA512
0ddd6ff9b2571b28129534df59070fe783e7a67d9367a75b194908cb67fe86b2c928f34bd013804fba8db40a4af17a05071c9ba18a8e197ee4b73baf2b79cc93

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-file-l1-2-0.dll

Filesize
18KB

MD5
9e71ea8e8d2d625d68e5e98a134d2ef4

SHA1
827e0d0469e18c6e39a34194726bd4c091a1823c

SHA256
1fe7ad044bc07c857734b9ac67a9e4b48ffafe874e52c1a81ec8b48d6d7facbf

SHA512
f74e752576776ab1c4a6459be88c481ad84808bb64a4686041dc39b4e1955df06180bb624b6bfcca511d3fe639767a99aa56c2b59bdcc984769418b45950745f

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-file-l2-1-0.dll

Filesize
18KB

MD5
4fa83e16ae5da25fc9fd4bb0897ef6ac

SHA1
38f7017de544d54c88cd2e51cb340fe2da0e189c

SHA256
1734e193c6dc023e18bdf32dc76c54a788c75deefd73b5ffc8c44b36a7d632bc

SHA512
40757a4cb766805bd90f9e8b689357fa4190f973124f97a3d29b51382f1d40b23a728932261d58795369c9b7cf7e7649e1ff4b703384a4eb3bea54a3fd3fda8d

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-localization-l1-2-0.dll

Filesize
20KB

MD5
5aadc85bfb3d039b10764eb5464f355a

SHA1
5f4e38abd105f276144dc61cc46663a7d127d957

SHA256
7bbd216884cd8c2bb9dfc049c6f1edeece88cb115971372fb3c99231e7870a30

SHA512
2fb29107be35643fa25790d0880bc58f0a52ec7aa79ba376b4988da25a57c0b5df38a698d278253bca53214307a6dffa64c4ada0c7b0606f38bf86b893edd29c

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-processthreads-l1-1-1.dll

Filesize
18KB

MD5
4059bb162855a8bb31aae3e6e5bb855d

SHA1
3ad17c7b15a0d0140e27ae1908cd72b0c624d96a

SHA256
2749b4d3866c7867500665daa78454abcf493cf1f8de1ba8d06b6ce2c68ea69b

SHA512
b487f96186f1c373fdfbef20c6f89678f9a8ef79c162f9f1e97753434138ec2f85078c43c8b9fc22ddc9319a83964bfc39683d4ffaef181d12f03fb742d626e7

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-synch-l1-2-0.dll

Filesize
18KB

MD5
a060382f83fc4eadc0affeaac5086dee

SHA1
dd9402e59752df4dbde21d987e773b23660451bb

SHA256
b35366498d506b7c96107a74c082e4eae2c0b8e60fde09c59e3bd14e2a8159b6

SHA512
dd5aef2fb1fd216023e20f9c0bd8e280b98b6e26764f17d5671471e2a60b9f4fa5967e57fe4454dc7e1d6d55833bb5d59b5c1f4ef6c0f9f83d150f72428b3883

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-timezone-l1-1-0.dll

Filesize
18KB

MD5
4ecd7ae18e89d44cf216ba386466a97d

SHA1
91db77114e07f0e9eafd4b08b6136cfdaa648db7

SHA256
e1ee358251c871a1321f1ac7e6949cde0a0cac48de7b6c2215f8f2ba3f9c7cd8

SHA512
e7081b7398ba16d63b4e5dd90a9b8c5f9d2149e72d43e89de58a77b9321d65a4acc31600bae2e6bf3234cf311dbdd1b5a27627894864e43865aad485039563dc

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-core-xstate-l2-1-0.dll

Filesize
11KB

MD5
1ec23e5c764038634bb19403aa9ad764

SHA1
57be568b0a95d786417add2dfdb9b4747852b0c0

SHA256
529edc1ab3ddc6a5c923e51b10f7b8a11554dafc6562772741eaef274fe6dc6c

SHA512
25c9432344517977dd2238e59a74377b76efd9f621658e863d6833dc5c443a337443ed634269376ce2172ed51e09a623b2395811dac84b9f9fe70001a2b294e4

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-conio-l1-1-0.dll

Filesize
19KB

MD5
b7cbbec44bc54bc96e8660da731cd676

SHA1
d11ffd71f02fe135486c70df858530969a5700ef

SHA256
442af0b9ff007d716c883d6912b6f42b582abe6471d08561ef7fbb4b224be5ac

SHA512
d8270949aa328af1526def4340fb64480ae0cf044dbe21e53849581229ff78931e2924856c625da205e29e41446fa8a215ac0b197de6d226f69724640a47f10f

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-convert-l1-1-0.dll

Filesize
22KB

MD5
cdfe2c0e496027f96fbcd7d0c6cab029

SHA1
959ae27f63dfac624fc50aded45f3991ee6e15b2

SHA256
bee6da8896a71aa0330de88fa70c98249a7b8f5dbf1d37ed26938517a0710238

SHA512
86b403c39e59197dbb871c639fd527133edcbb856f64a0c7b681136ba261613579a04e5755091473f07361367d45ebf2f501930cc44b5ce5c93728feb25c23cd

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-environment-l1-1-0.dll

Filesize
18KB

MD5
4b55a45b17c80add6c7c8704301c9b2c

SHA1
b5066baae30fe9ac9da4c59c7cf43cebc90b3877

SHA256
1b35ab704b88c34f36dacb4e47191869d82135dae66a86f2e41b184cfcbb32f9

SHA512
77773b3459d0c5a0f279b8f4af872c5ef077fa2b6928f8c2cb3cafa31b96ca43e3ff1889757a25ab09df7eb796e73bd90ddcf04af3fd3495303d49a5b3989d57

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-filesystem-l1-1-0.dll

Filesize
20KB

MD5
2d7de6cfabf21344ccc6128e0cc0c98e

SHA1
d049d82bb5f279e7837dc15a3ba6d347ba36bb21

SHA256
5ebf245f816b431653d6aae30aca67c48ff9297fb9a90ba66b3d8196a7557277

SHA512
8c09058dd57e6c7d7f496c21d917e7fbb84cac30369e0e32077646e15b21c64ba589f107080175cfc67d4c827f87b4a5e6343d68667f1d798630cb55618497fc

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-heap-l1-1-0.dll

Filesize
19KB

MD5
16e1f67a468a2f766cdb0b57af484045

SHA1
e481bafc5c3b1d3c4eb04676344ed022b591422b

SHA256
5ffd64f22be02eb308fe7e486dbb929a894020fc4428aadaff334536b85ab7ef

SHA512
879eee7eee222c32e337f6dc723356e94d5b9da4f3d30e55a8f36038a6a9e072c01b45bfdd3f70bcaf7b8b5ff370a8626081be58dd5557dfd4a43a92e85b70cb

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-locale-l1-1-0.dll

Filesize
18KB

MD5
1bd8745c06030fec46aa0c22290943d2

SHA1
aabc337505b1269c19c722c7f87b70c937074a09

SHA256
9831bef4589ca4b7b23e2f862e17069997e7b1e841f6283c513fd587312bf3b5

SHA512
bf0492268dec29c935ef19f312810d718dc0fed24be40b3b18a8edb9bf9421f3773bfb4ff0039626dc84136c981ba205c53bc3c7fcbe77092333d17a74d1addf

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-math-l1-1-0.dll

Filesize
28KB

MD5
44ed1ca4a7d0bad1d30bf0ac08d25f84

SHA1
38448fe85dd3be440f5dda822578f99324de299a

SHA256
8d9b4fc0be22b396aa81d4947b490e28191c0156faa28ba56ee1290f6deca817

SHA512
338505b09b764c75f164020650f8d2b01248adfb032af88f83b7a6bf008dc23649a7b6a1c397669b7af533343486b735ddce4f5f07688cdc751c9ff06ecade2a

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-multibyte-l1-1-0.dll

Filesize
26KB

MD5
99e8b2c7a97cfd0af600d873ba2f44fb

SHA1
4751dd4da60b8cf81985975c27ea5d664cfec153

SHA256
598f626c953c252f238df8ac993d6a8db5862464c793b99aad47b2b098dadce5

SHA512
d001c835b479c9fd06acb7f1d6737e927c5fe34a48ba66475a49e1c654b7b0d288384b1aba245d067d987ee99cd456892bb39156c7686d121feb8b4e22b9500b

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-private-l1-1-0.dll

Filesize
71KB

MD5
b5d671546ae21217ec63bc87f0b07ffd

SHA1
cb8784a940325ee47214782b86f63426a52b9e00

SHA256
a5229719df6fde6d11a456e2dab89659ec6e40f211f78ad5fb2adb471cd9b8cc

SHA512
d6155e8410b24cfc51430ffcdfa09f0b5d84ebfb445057c111c40b6c6582019b8d9bb4b92ff332861a35276ab7ea1d4bb89e1914d522b7beb81918dd548011a2

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-process-l1-1-0.dll

Filesize
19KB

MD5
7bc82724adb6c6fcddbe875f9d3e0d69

SHA1
d5a24b959d0bbb8491759fc1dd35f7e3332bba45

SHA256
b1fdb4db1b43f3693590f2ba8d02413efff8ca7dcc6ba1c28a42ba40c8c7e181

SHA512
20c8d0bce18cf27276c0097d14ba9760799b2ef863cfaa7ac651b5c0587f091f26f6fe70eec6bceee8297afe75dc2591c4d691ebd1f4cbff765c5117951640fb

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-runtime-l1-1-0.dll

Filesize
22KB

MD5
468abc0f7e67b701de7211979d384245

SHA1
044bf216102bc18a8feadc3142db55c6573fbead

SHA256
b58e75f05363052d067114cafc7424612d1119ad73db2de1636440847caaebad

SHA512
aa708b374e7fd599244f321d04a02fa528771dc11e3d23bf25f3737145b538bcd863d63c9def40e2a59bd1eadf6b69249f7f5e7c694505201b5367cb41ec7ce6

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-stdio-l1-1-0.dll

Filesize
24KB

MD5
23c31495318d1baaa0841256c1c20764

SHA1
96d9bc6878811cc24f6384030e61ed2db4661a90

SHA256
dd19d60ee7c86c3199d9f9d41e3a29f1ebe940860746a9458453ac259ae0d93b

SHA512
e169a85484f3fe8957ef054626ee5c917cc0272cd08f3b9f9362841fc97697232a23375cbe0097c8616a2bd53ef18edd2b1a955a92207b6b739b7d33db869230

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-string-l1-1-0.dll

Filesize
24KB

MD5
bbfbd1d943799876ce56939806519238

SHA1
8cfe4880b470ce902e1cb27627c43efa83d7cedc

SHA256
65f0a29577ceee6ece135588577764092e96894ec9e5d5ed33251300afd4cbdc

SHA512
e7566f1a39fc05af3ada762f04d6344cc131e46de0fb42a52e08531f2cfb714cb7cb9bf86d891dc6cf0e7def7c521020afcd2c0db975561a3ccfe013e999e9c1

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-time-l1-1-0.dll

Filesize
20KB

MD5
bb5cbceb0fd1f4b494f206deb67f76b3

SHA1
355b2d85eabf9e8a84aedde03bd03587c8e9ec4c

SHA256
2ce50c7c84b1a5999265931de9b5500ba278e80b7295fb2d59536a742d57b05c

SHA512
df41a60be0621522cfbb55281dd334e9ba8ff176ec656bf22a1ad6ac410aa09a21cb9f50786937b36986fb31c5e3d2593c4b6ae7438d0e10d2b603555f85de80

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-utility-l1-1-0.dll

Filesize
18KB

MD5
324559978e601ea32b9965c73fb85708

SHA1
ca25d8906185d7c996cd771f4f7f1c41550407a9

SHA256
017df47c3cfd6c1835056d21e029323f74b3cf81d6ae9fa282d937c805f873ad

SHA512
d5c35682caee86d6ef1ebfa237922683a7ae638da0cda1930ce4b942ab291c3394133c2fcc9117ff6f92e0479296215f80ba218231c39f1ce0fa160d06e52c94

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\concrt140.dll

Filesize
244KB

MD5
feceafd75c17e6640c89db792e2c8a0d

SHA1
80343a03609d7d8a436c8a5c9d51a738d45d4f57

SHA256
750fcf6a0a6aa2098042c517f39c3ee5c9ba5150e337a4916b9ab07bf35f2b70

SHA512
f773e4b2085598ad9ab40ea6cbb4475a2d5d1b637bba5ad475698e777e2b462562ae7a96b87fefb0d467c5e524bc306f5dbc72b3e66e4dced845ab86d8bb1283

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\mfc140u.dll

Filesize
4.8MB

MD5
b755b118f77111abe5db5e1f1aa812ff

SHA1
ab80b2837ffa484a94b5e33860cd33e928872d10

SHA256
ff497de4f388f6deaf277443dc910b2b6de645f5363d51d5c9b692413f5d7fb1

SHA512
d9d09a2f145d19b85b943e5d185b40a3d57451f2c4d7bd14be44fa12e08d5f2413488f85b20785faef9e0aa0677121743e33e920c27e67e28dde525b9adfd8dc

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcp120.dll

Filesize
444KB

MD5
7fa1a4e43e47d5a0f9176f1fecffeceb

SHA1
93f6f06cdd1b8938739d6322f55ce197ed399fee

SHA256
889e68ea20e197d7d004611eac8c7458143c93df8abe28b4d2e6c6125200d142

SHA512
e993b5de172f4ad6ffd930e928a191e9d8f584eb8c856ffdfa204c5c415dd32ff7e0d5dcd42c7df9cd80ebd8418fd130a4877c3c8107f74c653897d6e0cc58da

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcp140.dll

Filesize
439KB

MD5
379f0972f15f90b54af549b44b1c48fe

SHA1
468be7325065e5e2d38567eb84179563d80c84d6

SHA256
b62f8173a06d1ead1d422cb636c5adf6b02e9fb2e5e95c5749f1d4893f017ccc

SHA512
042f0d392d0b7dc41e2dc383899efa8ffc9e8c8890ffd3c5e6d2ca98dd9fc3e3ac03212801b9b200e4276d983839a6438c2563934933c2b6f27c4a0f69fcbb8f

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\msvcr120.dll

Filesize
946KB

MD5
c1ff4dd4efe9153ace269ce512188c1b

SHA1
a16fb1ca02c8bb77f47b22d5ee674ba6745bc351

SHA256
17d591dc9d7141dbd1376c198d4619ffcf72a2f91c581e770769978239d6ff00

SHA512
ece771ad464917060ba1da33f55e6733f013f303db8e30da9b8e50a96a099985020ea7f25c4006fac71657cff44cd2a5cdead36eed4fce96c2cc4d400efb8954

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\ucrtbase.dll

Filesize
879KB

MD5
046415fedff5d72954518249179e76ca

SHA1
077dd72d90998bdf7042f1a2026a1fc657ad47ea

SHA256
874776c2e40ac79be019e08bf3b90c59e6c8e2bc7fb8381a6a9bf9d7230b4752

SHA512
b27344bfe07ef8897304fd374c0af207f35ed03fb98533c5bcb34b2106dccb9a33db9a26ecaff9c6dadbfb6ea3a14cc30aad2986332ebc9f027cd2484097c3d9

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\vccorlib140.dll

Filesize
263KB

MD5
e8a97ea7cc4f614e5c573a4cefce17cb

SHA1
935453767ad6457b1f1b30dcb6b31a80ebef8ce4

SHA256
faba0f74206707ee06063a23f035e50f7f9a26da1eb5affe96170366f5f9a0dd

SHA512
3274320d6ca8b6ca944e1ed70b23a0fc20fc6df7859cb2e328f0bfeeed21ff8e0d776eb8a27c9023ba6f6510fa1fffacd5e0a626a04ff337e7fe19f371a05a95

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\vcruntime140.dll

Filesize
79KB

MD5
507426212def27b9273e55d35b29269d

SHA1
0ea608bad8b74e2f40c743869a4fa07df6e6ae15

SHA256
037a49ae3d56ce3f739e3105111287c4c1b25f5830e3c35bec4bd040cf361670

SHA512
90d7ecde393641732f0e37d0294b7ec6f5f0975afc5d91b8241173603b12da0742fd3ed7fe67c357dfcfd65495cd292fa39edb68559199c62a854421a616bc7b

Download Submit
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\Microsoft.DiaSymReader.Native.amd64.dll

Filesize
1.8MB

MD5
d745607efc9fe08834087062980285cb

SHA1
6e451ab7c0d137cdcaf276b2bfac500d259e4732

SHA256
9e920f5ff2c57043c596ad610d8371f8e3cc937ca6dd1491fc744642cbf04c86

SHA512
7e7215a0357b8b4d8aab72eb4feb6919c19e077c7031c8a362f2666764a2542fb2a74538224e72625211d4274e4af535f3f53cb7cf0330d8d0ac9836e6d42e6f

Download Submit
C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\D3DCompiler_47_cor3.dll

Filesize
4.7MB

MD5
23aefdc8e621ba5ee9511d52d21ee681

SHA1
b0f52fbd8e09fbaa7c834d52fa20dc737579d15e

SHA256
0cf0915767e074a228a7c2e4ba35212a2a9141402aad7c718ae442d081a1cc27

SHA512
2cbb9e4d2ff7549592601a09a7b235dcd464d7ba8c5f85faf58c5c00349a011051141f50181beb8ee30be764768075cd98a1bc62d108b70661017caddfa72e4a

Download Submit
C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\vcruntime140_cor3.dll

Filesize
116KB

MD5
1d5454b8c3bd3fa81f374c2b317d70a1

SHA1
f7e33d7c06e5e009c7cd47f84835589db0d9caba

SHA256
84173645067b84631723c735888941f90d24310e2f444d278015ac659e26c8ed

SHA512
7aea285333e4f3be7d2001e5555261304cdc8468ac05612772944205e375106250424f76c6eea6a394d29e37b6d4d9d13a40a836e303cded06307932ba4d5c0a

Download Submit
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat

Filesize
10KB

MD5
d12e797f18cb79137ad12b5e5139e1b8

SHA1
f15fb437b1be86b714e278ce927b315fa0e16ea3

SHA256
afb0f4a0229174f8118ab512b569fdb9eb3ebb0389cb11c9f4a0a2aa88ec258b

SHA512
f6e8f99bcd0ecff7683c8e56fa2ffa3fdff16d6c17a2066b36bc3d78e2838130b5b23059a239b29a7ebdd0b5ca36b3f9cf388945bf1aad50a3f91cb8091223cd

Download Submit
C:\Users\Admin\AppData\Local\Server\BoratRat.exe_Url_gd1rwjpue5ky1rwo1qwl5mnr5ta35yo4\1.0.7.0\user.config

Filesize
309B

MD5
0c6e4f57ebaba0cc4acfc8bb65c589f8

SHA1
8c021c2371b87f2570d226b419c64c3102b8d434

SHA256
a9539ba4eae9035b2ff715f0e755aa772b499d72ccab23af2bf5a2dc2bcfa41c

SHA512
c6b877ff887d029e29bf35f53006b8c84704f73b74c616bf97696d06c6ef237dff85269bdf8dfb432457b031dd52410e2b883fd86c3f54b09f0a072a689a08c0

Download Submit
C:\Users\Admin\AppData\Local\Server\BoratRat.exe_Url_gd1rwjpue5ky1rwo1qwl5mnr5ta35yo4\1.0.7.0\user.config

Filesize
580B

MD5
acb6df8bd0fe9236ea87ea6e3c28173f

SHA1
8b1d88bd749b58905c6db258e7224a67d1179938

SHA256
ec2b3fc4d011e9b8a04188d8f2ff280de854dde7d6ebf8e871e0642f789dfa5b

SHA512
a4222c0f5aeba58679c21361dcb6ab2c7ed1d9cae41d2839089fdb7bbaac3b8735afff8b302557f85389daa977b826cee77b944ba598e3fa6c2a16781453a832

Download Submit
C:\Users\Admin\Desktop\Client.exe

Filesize
56KB

MD5
6f98368d469721ebdd5c28f369fd5829

SHA1
955fd59399a265a47d4307f2660d6a43ffd3b5d2

SHA256
1522f5f502c9ef7218d5981357da8f7319086961fbb9266518aeebdf11171c15

SHA512
97c974e0a83ebdcebe2d0f952de9cc23146fd860d1a56d23c428416d36e8327e58d6b2bedd953bfab365d3395fca623ee46712a8f8e7c047d027774ea93b1533

Download Submit
memory/1964-2-0x00007FFB2D550000-0x00007FFB2E012000-memory.dmp

Filesize
10.8MB

Download
memory/1964-5-0x00007FFB2D553000-0x00007FFB2D555000-memory.dmp

Filesize
8KB

Download
memory/1964-0-0x00007FFB2D553000-0x00007FFB2D555000-memory.dmp

Filesize
8KB

Download
memory/1964-15-0x00007FFB2D550000-0x00007FFB2E012000-memory.dmp

Filesize
10.8MB

Download
memory/1964-14-0x00007FFB2D550000-0x00007FFB2E012000-memory.dmp

Filesize
10.8MB

Download
memory/1964-13-0x00007FFB2D550000-0x00007FFB2E012000-memory.dmp

Filesize
10.8MB

Download
memory/1964-12-0x00007FFB2D550000-0x00007FFB2E012000-memory.dmp

Filesize
10.8MB

Download
memory/1964-9-0x00007FFB2D550000-0x00007FFB2E012000-memory.dmp

Filesize
10.8MB

Download
memory/1964-6-0x00007FFB2D550000-0x00007FFB2E012000-memory.dmp

Filesize
10.8MB

Download
memory/1964-1-0x000001BADCCA0000-0x000001BADE0AA000-memory.dmp

Filesize
20.0MB

Download
memory/1964-4-0x00007FFB2D550000-0x00007FFB2E012000-memory.dmp

Filesize
10.8MB

Download
memory/1964-3-0x00007FFB2D550000-0x00007FFB2E012000-memory.dmp

Filesize
10.8MB

Download
memory/2760-5621-0x0000000002F20000-0x0000000002F2E000-memory.dmp

Filesize
56KB

Download
memory/2760-37-0x000000001D960000-0x000000001D9D6000-memory.dmp

Filesize
472KB

Download
memory/2760-36-0x0000000000E00000-0x0000000000E14000-memory.dmp

Filesize
80KB

Download
memory/2760-38-0x0000000002F40000-0x0000000002F4E000-memory.dmp

Filesize
56KB

Download
memory/2760-39-0x000000001D8E0000-0x000000001D8FE000-memory.dmp

Filesize
120KB

Download
memory/2760-42-0x000000001D930000-0x000000001D94E000-memory.dmp

Filesize
120KB

Download