Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
146s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
01/01/2025, 23:00
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_612a2386c55501842c6e56dbda4efa0a.dll
Resource
win7-20240729-en
General
-
Target
JaffaCakes118_612a2386c55501842c6e56dbda4efa0a.dll
-
Size
276KB
-
MD5
612a2386c55501842c6e56dbda4efa0a
-
SHA1
685eaefa54f9afa2488bdef4299a22e4344527a1
-
SHA256
4c45106de3ed32c285b016fdd2aa38f3ce2e6bdd66e4fde309464ecd03c21778
-
SHA512
ecd79e250ebae5eef6dd03b125e9f038509b135a00fd464d95bf62be546e7b0d7afe5eb4f33393dbe974c859d353d46545e96f19c2c87a89e8cf188dde2cd4cf
-
SSDEEP
3072:5dcQ2ZNMSQvbajUTUItjT68+xQmWoBvxs2cKSH/03dSWsGNbhSR+DqAtY6:5ATSOjUQKJotC2crf03BsYbha8J5
Malware Config
Signatures
-
Modifies WinLogon for persistence 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit = "userinit.exe,c:\\program files (x86)\\microsoft\\watermark.exe" svchost.exe -
Ramnit family
-
Executes dropped EXE 2 IoCs
pid Process 2852 rundll32mgr.exe 2948 WaterMark.exe -
Loads dropped DLL 4 IoCs
pid Process 2440 rundll32.exe 2440 rundll32.exe 2852 rundll32mgr.exe 2852 rundll32mgr.exe -
Drops file in System32 directory 3 IoCs
description ioc Process File created C:\Windows\SysWOW64\rundll32mgr.exe rundll32.exe File created C:\Windows\SysWOW64\dmlconf.dat svchost.exe File opened for modification C:\Windows\SysWOW64\dmlconf.dat svchost.exe -
resource yara_rule behavioral1/memory/2852-16-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2852-15-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2852-18-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2852-20-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2948-38-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2948-42-0x0000000000400000-0x000000000042B000-memory.dmp upx behavioral1/memory/2948-40-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2852-17-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2852-14-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2852-12-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2948-83-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2948-611-0x0000000000400000-0x0000000000421000-memory.dmp upx -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libball_plugin.dll svchost.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\1049\hxdsui.dll svchost.exe File opened for modification C:\Program Files\Mozilla Firefox\msvcp140.dll svchost.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\UIAutomationProvider.resources.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libshm_plugin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_ogg_plugin.dll svchost.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\es\System.Data.Entity.Resources.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\spu\libaudiobargraph_v_plugin.dll svchost.exe File opened for modification C:\Program Files\Windows NT\TableTextService\TableTextService.dll svchost.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\es-ES\clock.html svchost.exe File opened for modification C:\Program Files\7-Zip\7zFM.exe svchost.exe File opened for modification C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSCommon.dll svchost.exe File opened for modification C:\Program Files\Microsoft Office\Office14\MSOHEVI.DLL svchost.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\de\Microsoft.Build.Conversion.v3.5.resources.dll svchost.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\2052\hxdsui.dll svchost.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\mshwLatin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\liblibmpeg2_plugin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\misc\libaudioscrobbler_plugin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\misc\libexport_plugin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll svchost.exe File opened for modification C:\Program Files\Internet Explorer\JSProfilerCore.dll svchost.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\license.html svchost.exe File opened for modification C:\Program Files\Microsoft Games\Solitaire\Solitaire.exe svchost.exe File opened for modification C:\Program Files\Mozilla Firefox\nssckbi.dll svchost.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Entity.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libts_plugin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libadjust_plugin.dll svchost.exe File opened for modification C:\Program Files\Mozilla Firefox\plugin-container.exe svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\axvlc.dll svchost.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\ja-JP\flyout.html svchost.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\1.0\Microsoft.Ink.dll svchost.exe File opened for modification C:\Program Files\Microsoft Games\Multiplayer\Checkers\chkrzm.exe svchost.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\System.RunTime.Serialization.Resources.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll svchost.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\WebKit.dll svchost.exe File opened for modification C:\Program Files\Windows Media Player\wmpenc.exe svchost.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\InkWatson.exe svchost.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome_elf.dll svchost.exe File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll svchost.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\de\System.Xml.Linq.Resources.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libtwolame_plugin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll svchost.exe File opened for modification C:\Program Files\Internet Explorer\ieproxy.dll svchost.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\license.html svchost.exe File opened for modification C:\Program Files\Mozilla Firefox\api-ms-win-crt-environment-l1-1-0.dll svchost.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\de\System.Data.Services.resources.dll svchost.exe File opened for modification C:\Program Files\Windows Journal\MSPVWCTL.DLL svchost.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\EQNEDT32.EXE svchost.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\tpcps.dll svchost.exe File opened for modification C:\Program Files\Common Files\System\ado\msadox.dll svchost.exe File opened for modification C:\Program Files\Java\jre7\bin\sunmscapi.dll svchost.exe File opened for modification C:\Program Files\Mozilla Firefox\ucrtbase.dll svchost.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\UIAutomationTypes.resources.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\mobile_view.html svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_extractor\libarchive_plugin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\text_renderer\libfreetype_plugin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libchain_plugin.dll svchost.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\schemagen.exe svchost.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2launcher.exe svchost.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\wsdetect.dll svchost.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\System.IdentityModel.Selectors.Resources.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_output\libdirect3d9_plugin.dll svchost.exe File opened for modification C:\Program Files\Windows Journal\PDIALOG.exe svchost.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\net.dll svchost.exe -
System Location Discovery: System Language Discovery 1 TTPs 5 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32mgr.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WaterMark.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language svchost.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language svchost.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe -
Suspicious behavior: EnumeratesProcesses 37 IoCs
pid Process 2948 WaterMark.exe 2948 WaterMark.exe 2948 WaterMark.exe 2948 WaterMark.exe 2948 WaterMark.exe 2948 WaterMark.exe 2948 WaterMark.exe 2948 WaterMark.exe 2916 svchost.exe 2916 svchost.exe 2916 svchost.exe 2916 svchost.exe 2916 svchost.exe 2916 svchost.exe 2916 svchost.exe 2916 svchost.exe 2916 svchost.exe 2916 svchost.exe 2916 svchost.exe 2916 svchost.exe 2916 svchost.exe 2916 svchost.exe 2916 svchost.exe 2916 svchost.exe 2916 svchost.exe 2916 svchost.exe 2916 svchost.exe 2916 svchost.exe 2916 svchost.exe 2916 svchost.exe 2916 svchost.exe 2916 svchost.exe 2916 svchost.exe 2916 svchost.exe 2916 svchost.exe 2916 svchost.exe 2916 svchost.exe -
Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeDebugPrivilege 2948 WaterMark.exe Token: SeDebugPrivilege 2916 svchost.exe Token: SeDebugPrivilege 2948 WaterMark.exe -
Suspicious use of UnmapMainImage 2 IoCs
pid Process 2852 rundll32mgr.exe 2948 WaterMark.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2744 wrote to memory of 2440 2744 rundll32.exe 30 PID 2744 wrote to memory of 2440 2744 rundll32.exe 30 PID 2744 wrote to memory of 2440 2744 rundll32.exe 30 PID 2744 wrote to memory of 2440 2744 rundll32.exe 30 PID 2744 wrote to memory of 2440 2744 rundll32.exe 30 PID 2744 wrote to memory of 2440 2744 rundll32.exe 30 PID 2744 wrote to memory of 2440 2744 rundll32.exe 30 PID 2440 wrote to memory of 2852 2440 rundll32.exe 31 PID 2440 wrote to memory of 2852 2440 rundll32.exe 31 PID 2440 wrote to memory of 2852 2440 rundll32.exe 31 PID 2440 wrote to memory of 2852 2440 rundll32.exe 31 PID 2852 wrote to memory of 2948 2852 rundll32mgr.exe 32 PID 2852 wrote to memory of 2948 2852 rundll32mgr.exe 32 PID 2852 wrote to memory of 2948 2852 rundll32mgr.exe 32 PID 2852 wrote to memory of 2948 2852 rundll32mgr.exe 32 PID 2948 wrote to memory of 2288 2948 WaterMark.exe 33 PID 2948 wrote to memory of 2288 2948 WaterMark.exe 33 PID 2948 wrote to memory of 2288 2948 WaterMark.exe 33 PID 2948 wrote to memory of 2288 2948 WaterMark.exe 33 PID 2948 wrote to memory of 2288 2948 WaterMark.exe 33 PID 2948 wrote to memory of 2288 2948 WaterMark.exe 33 PID 2948 wrote to memory of 2288 2948 WaterMark.exe 33 PID 2948 wrote to memory of 2288 2948 WaterMark.exe 33 PID 2948 wrote to memory of 2288 2948 WaterMark.exe 33 PID 2948 wrote to memory of 2288 2948 WaterMark.exe 33 PID 2948 wrote to memory of 2916 2948 WaterMark.exe 34 PID 2948 wrote to memory of 2916 2948 WaterMark.exe 34 PID 2948 wrote to memory of 2916 2948 WaterMark.exe 34 PID 2948 wrote to memory of 2916 2948 WaterMark.exe 34 PID 2948 wrote to memory of 2916 2948 WaterMark.exe 34 PID 2948 wrote to memory of 2916 2948 WaterMark.exe 34 PID 2948 wrote to memory of 2916 2948 WaterMark.exe 34 PID 2948 wrote to memory of 2916 2948 WaterMark.exe 34 PID 2948 wrote to memory of 2916 2948 WaterMark.exe 34 PID 2948 wrote to memory of 2916 2948 WaterMark.exe 34 PID 2916 wrote to memory of 256 2916 svchost.exe 1 PID 2916 wrote to memory of 256 2916 svchost.exe 1 PID 2916 wrote to memory of 256 2916 svchost.exe 1 PID 2916 wrote to memory of 256 2916 svchost.exe 1 PID 2916 wrote to memory of 256 2916 svchost.exe 1 PID 2916 wrote to memory of 336 2916 svchost.exe 2 PID 2916 wrote to memory of 336 2916 svchost.exe 2 PID 2916 wrote to memory of 336 2916 svchost.exe 2 PID 2916 wrote to memory of 336 2916 svchost.exe 2 PID 2916 wrote to memory of 336 2916 svchost.exe 2 PID 2916 wrote to memory of 384 2916 svchost.exe 3 PID 2916 wrote to memory of 384 2916 svchost.exe 3 PID 2916 wrote to memory of 384 2916 svchost.exe 3 PID 2916 wrote to memory of 384 2916 svchost.exe 3 PID 2916 wrote to memory of 384 2916 svchost.exe 3 PID 2916 wrote to memory of 392 2916 svchost.exe 4 PID 2916 wrote to memory of 392 2916 svchost.exe 4 PID 2916 wrote to memory of 392 2916 svchost.exe 4 PID 2916 wrote to memory of 392 2916 svchost.exe 4 PID 2916 wrote to memory of 392 2916 svchost.exe 4 PID 2916 wrote to memory of 424 2916 svchost.exe 5 PID 2916 wrote to memory of 424 2916 svchost.exe 5 PID 2916 wrote to memory of 424 2916 svchost.exe 5 PID 2916 wrote to memory of 424 2916 svchost.exe 5 PID 2916 wrote to memory of 424 2916 svchost.exe 5 PID 2916 wrote to memory of 480 2916 svchost.exe 6 PID 2916 wrote to memory of 480 2916 svchost.exe 6 PID 2916 wrote to memory of 480 2916 svchost.exe 6 PID 2916 wrote to memory of 480 2916 svchost.exe 6
Processes
-
C:\Windows\System32\smss.exe\SystemRoot\System32\smss.exe1⤵PID:256
-
C:\Windows\system32\csrss.exe%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=161⤵PID:336
-
C:\Windows\system32\wininit.exewininit.exe1⤵PID:384
-
C:\Windows\system32\services.exeC:\Windows\system32\services.exe2⤵PID:480
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k DcomLaunch3⤵PID:600
-
C:\Windows\system32\DllHost.exeC:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}4⤵PID:2036
-
-
C:\Windows\system32\wbem\wmiprvse.exeC:\Windows\system32\wbem\wmiprvse.exe4⤵PID:1564
-
-
C:\Windows\system32\wbem\wmiprvse.exeC:\Windows\system32\wbem\wmiprvse.exe -Embedding4⤵PID:2232
-
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k RPCSS3⤵PID:676
-
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted3⤵PID:760
-
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted3⤵PID:808
-
C:\Windows\system32\Dwm.exe"C:\Windows\system32\Dwm.exe"4⤵PID:1268
-
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k netsvcs3⤵PID:848
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService3⤵PID:960
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k NetworkService3⤵PID:112
-
-
C:\Windows\System32\spoolsv.exeC:\Windows\System32\spoolsv.exe3⤵PID:908
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalServiceNoNetwork3⤵PID:268
-
-
C:\Windows\system32\taskhost.exe"taskhost.exe"3⤵PID:1140
-
-
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"3⤵PID:1436
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation3⤵PID:2556
-
-
C:\Windows\system32\sppsvc.exeC:\Windows\system32\sppsvc.exe3⤵PID:2584
-
-
-
C:\Windows\system32\lsass.exeC:\Windows\system32\lsass.exe2⤵PID:488
-
-
C:\Windows\system32\lsm.exeC:\Windows\system32\lsm.exe2⤵PID:496
-
-
C:\Windows\system32\csrss.exe%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=161⤵PID:392
-
C:\Windows\system32\winlogon.exewinlogon.exe1⤵PID:424
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵PID:1360
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_612a2386c55501842c6e56dbda4efa0a.dll,#12⤵
- Suspicious use of WriteProcessMemory
PID:2744 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_612a2386c55501842c6e56dbda4efa0a.dll,#13⤵
- Loads dropped DLL
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2440 -
C:\Windows\SysWOW64\rundll32mgr.exeC:\Windows\SysWOW64\rundll32mgr.exe4⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
PID:2852 -
C:\Program Files (x86)\Microsoft\WaterMark.exe"C:\Program Files (x86)\Microsoft\WaterMark.exe"5⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
PID:2948 -
C:\Windows\SysWOW64\svchost.exeC:\Windows\system32\svchost.exe6⤵
- Modifies WinLogon for persistence
- Drops file in System32 directory
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
PID:2288
-
-
C:\Windows\SysWOW64\svchost.exeC:\Windows\system32\svchost.exe6⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2916
-
-
-
-
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\epl-v10.html
Filesize259KB
MD59a9454b757455fd4c8fce47b76c1ba57
SHA1eee6090767129077fea54f023eed531a262ddb12
SHA2564b1dc5033ce492403038bce45729e52238eb1af3bd041ccd373f9428b45a4e41
SHA512b680575588eb7db0f1d5eabe53a78942b7ff62aeddfea78d896d834941e39d18a97478321c0e9e4451addad424132ab571141171129b5aec7564cca50fd46ed1
-
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\license.html
Filesize255KB
MD5799d2d6444391420b59c3c874be852ec
SHA14a9ef77dcbbfae16562f9822110a4d78cf16e377
SHA25689b3c4185df3d0f40137f49640805a37fb159ba09c8f6f1e361f727c05219d37
SHA5122e4c2d659f144069b8f4036f3603ce1ab410fc74fe9194011627d36cf27b46e01db9c6927bd6ed9d40c44af9ff793cc9ff15bc7a8c576d324ce987d434550085
-
Filesize
123KB
MD5bfeab24969e80e4fd4362b05f5c54554
SHA1bc2365f8bc9163e0f327e11541e0462395a879ac
SHA256cc900fe27a79e792b7b2547191b65dbadb550b02b1b42d072c06d73096185206
SHA5124c658ed109aa774121820af99c16417c71a2adf0117446ea898ceb2a5e86bd61c0b758023bd0ab33e13c2d91c7c60cb9e5ea26a2d969257c6d26909dbb9da259