Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
143s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
19/01/2025, 12:42
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_c81fd03698ac39336710545a59e31fdc.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_c81fd03698ac39336710545a59e31fdc.exe
-
Size
95KB
-
MD5
c81fd03698ac39336710545a59e31fdc
-
SHA1
836b52d47757d6875564aa481ba87dee50134bd3
-
SHA256
1e7e7c06c63d3cf8626579a3bec0aa11bb15b43a65313d5ec8bf86afaad69fe0
-
SHA512
9e64e5e199a8e385e386dbfca7ee0780f786e00b9601c7d785b057fc2c42ab9d8fba0ac7857176f262d1ea2ea1fec07e445967d2ce219e2c822a64d9d85df604
-
SSDEEP
768:i06R0UKzOgnKqGR7//GPc0LOBhvBrHks3IiyhDYQbGmxlNaM+WGa1wuxnzgOYw9Y:oR0vxn3Pc0LCH9MtbvabUDzJYWu3B
Malware Config
Signatures
-
Modifies WinLogon for persistence 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit = "userinit.exe,c:\\program files (x86)\\microsoft\\watermark.exe" svchost.exe -
Ramnit family
-
Executes dropped EXE 1 IoCs
pid Process 1228 WaterMark.exe -
Loads dropped DLL 2 IoCs
pid Process 2064 JaffaCakes118_c81fd03698ac39336710545a59e31fdc.exe 2064 JaffaCakes118_c81fd03698ac39336710545a59e31fdc.exe -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\dmlconf.dat svchost.exe File opened for modification C:\Windows\SysWOW64\dmlconf.dat svchost.exe -
resource yara_rule behavioral1/memory/2064-1-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2064-8-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2064-7-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2064-6-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2064-4-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2064-3-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/1228-28-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/2064-2-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/1228-71-0x0000000000400000-0x0000000000421000-memory.dmp upx behavioral1/memory/1228-608-0x0000000000400000-0x0000000000421000-memory.dmp upx -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll svchost.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\MSOINTL.DLL svchost.exe File opened for modification C:\Program Files\Common Files\System\ado\msadrh15.dll svchost.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\eclipse_1655.dll svchost.exe File opened for modification C:\Program Files\Java\jre7\bin\msvcr100.dll svchost.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\fr-FR\picturePuzzle.html svchost.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\pipanel.exe svchost.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\IpsMigrationPlugin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_ts_plugin.dll svchost.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\settings.html svchost.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\it-IT\flyout.html svchost.exe File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Onix32.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libball_plugin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libcolorthres_plugin.dll svchost.exe File opened for modification C:\Program Files\Windows Media Player\wmprph.exe svchost.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\EXP_XPS.DLL svchost.exe File opened for modification C:\Program Files\Mozilla Firefox\api-ms-win-crt-process-l1-1-0.dll svchost.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\fr\PresentationBuildTasks.resources.dll svchost.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.ComponentModel.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libd3d11va_plugin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_av1_plugin.dll svchost.exe File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\authplay.dll svchost.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\3082\hxdsui.dll svchost.exe File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AXSLE.dll svchost.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\epl-v10.html svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libes_plugin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libsid_plugin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libsap_plugin.dll svchost.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\es-ES\settings.html svchost.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\de-DE\slideShow.html svchost.exe File opened for modification C:\Program Files\Internet Explorer\jsdebuggeride.dll svchost.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\WindowsFormsIntegration.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\libvlccore.dll svchost.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.htm svchost.exe File opened for modification C:\Program Files\GrantConnect.htm svchost.exe File opened for modification C:\Program Files\Java\jre7\bin\sunmscapi.dll svchost.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\es\System.Data.Services.Design.resources.dll svchost.exe File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\pipres.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\visualization\libvisual_plugin.dll svchost.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe svchost.exe File opened for modification C:\Program Files\Internet Explorer\jsprofilerui.dll svchost.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\launcher.exe svchost.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\epl-v10.html svchost.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\de\WindowsFormsIntegration.resources.dll svchost.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\it\PresentationCore.resources.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libddummy_plugin.dll svchost.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\ja-JP\slideShow.html svchost.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\about.html svchost.exe File opened for modification C:\Program Files\Java\jre7\bin\javaws.exe svchost.exe File opened for modification C:\Program Files\Mozilla Firefox\pingsender.exe svchost.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\it\System.Data.Linq.Resources.dll svchost.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\fr-FR\calendar.html svchost.exe File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\es-ES\slideShow.html svchost.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\notification_helper.exe svchost.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\w2k_lsa_auth.dll svchost.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\license.html svchost.exe File opened for modification C:\Program Files\Java\jre7\bin\kcms.dll svchost.exe File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\ja\System.Xml.Linq.Resources.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libnoseek_plugin.dll svchost.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libinvert_plugin.dll svchost.exe File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\LogTransport2.dll svchost.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\tipskins.dll svchost.exe -
System Location Discovery: System Language Discovery 1 TTPs 4 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language JaffaCakes118_c81fd03698ac39336710545a59e31fdc.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WaterMark.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language svchost.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language svchost.exe -
Suspicious behavior: EnumeratesProcesses 37 IoCs
pid Process 1228 WaterMark.exe 1228 WaterMark.exe 1228 WaterMark.exe 1228 WaterMark.exe 1228 WaterMark.exe 1228 WaterMark.exe 1228 WaterMark.exe 1228 WaterMark.exe 2728 svchost.exe 2728 svchost.exe 2728 svchost.exe 2728 svchost.exe 2728 svchost.exe 2728 svchost.exe 2728 svchost.exe 2728 svchost.exe 2728 svchost.exe 2728 svchost.exe 2728 svchost.exe 2728 svchost.exe 2728 svchost.exe 2728 svchost.exe 2728 svchost.exe 2728 svchost.exe 2728 svchost.exe 2728 svchost.exe 2728 svchost.exe 2728 svchost.exe 2728 svchost.exe 2728 svchost.exe 2728 svchost.exe 2728 svchost.exe 2728 svchost.exe 2728 svchost.exe 2728 svchost.exe 2728 svchost.exe 2728 svchost.exe -
Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeDebugPrivilege 1228 WaterMark.exe Token: SeDebugPrivilege 2728 svchost.exe Token: SeDebugPrivilege 1228 WaterMark.exe -
Suspicious use of UnmapMainImage 2 IoCs
pid Process 2064 JaffaCakes118_c81fd03698ac39336710545a59e31fdc.exe 1228 WaterMark.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2064 wrote to memory of 1228 2064 JaffaCakes118_c81fd03698ac39336710545a59e31fdc.exe 31 PID 2064 wrote to memory of 1228 2064 JaffaCakes118_c81fd03698ac39336710545a59e31fdc.exe 31 PID 2064 wrote to memory of 1228 2064 JaffaCakes118_c81fd03698ac39336710545a59e31fdc.exe 31 PID 2064 wrote to memory of 1228 2064 JaffaCakes118_c81fd03698ac39336710545a59e31fdc.exe 31 PID 1228 wrote to memory of 2096 1228 WaterMark.exe 32 PID 1228 wrote to memory of 2096 1228 WaterMark.exe 32 PID 1228 wrote to memory of 2096 1228 WaterMark.exe 32 PID 1228 wrote to memory of 2096 1228 WaterMark.exe 32 PID 1228 wrote to memory of 2096 1228 WaterMark.exe 32 PID 1228 wrote to memory of 2096 1228 WaterMark.exe 32 PID 1228 wrote to memory of 2096 1228 WaterMark.exe 32 PID 1228 wrote to memory of 2096 1228 WaterMark.exe 32 PID 1228 wrote to memory of 2096 1228 WaterMark.exe 32 PID 1228 wrote to memory of 2096 1228 WaterMark.exe 32 PID 1228 wrote to memory of 2728 1228 WaterMark.exe 33 PID 1228 wrote to memory of 2728 1228 WaterMark.exe 33 PID 1228 wrote to memory of 2728 1228 WaterMark.exe 33 PID 1228 wrote to memory of 2728 1228 WaterMark.exe 33 PID 1228 wrote to memory of 2728 1228 WaterMark.exe 33 PID 1228 wrote to memory of 2728 1228 WaterMark.exe 33 PID 1228 wrote to memory of 2728 1228 WaterMark.exe 33 PID 1228 wrote to memory of 2728 1228 WaterMark.exe 33 PID 1228 wrote to memory of 2728 1228 WaterMark.exe 33 PID 1228 wrote to memory of 2728 1228 WaterMark.exe 33 PID 2728 wrote to memory of 256 2728 svchost.exe 1 PID 2728 wrote to memory of 256 2728 svchost.exe 1 PID 2728 wrote to memory of 256 2728 svchost.exe 1 PID 2728 wrote to memory of 256 2728 svchost.exe 1 PID 2728 wrote to memory of 256 2728 svchost.exe 1 PID 2728 wrote to memory of 336 2728 svchost.exe 2 PID 2728 wrote to memory of 336 2728 svchost.exe 2 PID 2728 wrote to memory of 336 2728 svchost.exe 2 PID 2728 wrote to memory of 336 2728 svchost.exe 2 PID 2728 wrote to memory of 336 2728 svchost.exe 2 PID 2728 wrote to memory of 384 2728 svchost.exe 3 PID 2728 wrote to memory of 384 2728 svchost.exe 3 PID 2728 wrote to memory of 384 2728 svchost.exe 3 PID 2728 wrote to memory of 384 2728 svchost.exe 3 PID 2728 wrote to memory of 384 2728 svchost.exe 3 PID 2728 wrote to memory of 396 2728 svchost.exe 4 PID 2728 wrote to memory of 396 2728 svchost.exe 4 PID 2728 wrote to memory of 396 2728 svchost.exe 4 PID 2728 wrote to memory of 396 2728 svchost.exe 4 PID 2728 wrote to memory of 396 2728 svchost.exe 4 PID 2728 wrote to memory of 432 2728 svchost.exe 5 PID 2728 wrote to memory of 432 2728 svchost.exe 5 PID 2728 wrote to memory of 432 2728 svchost.exe 5 PID 2728 wrote to memory of 432 2728 svchost.exe 5 PID 2728 wrote to memory of 432 2728 svchost.exe 5 PID 2728 wrote to memory of 476 2728 svchost.exe 6 PID 2728 wrote to memory of 476 2728 svchost.exe 6 PID 2728 wrote to memory of 476 2728 svchost.exe 6 PID 2728 wrote to memory of 476 2728 svchost.exe 6 PID 2728 wrote to memory of 476 2728 svchost.exe 6 PID 2728 wrote to memory of 492 2728 svchost.exe 7 PID 2728 wrote to memory of 492 2728 svchost.exe 7 PID 2728 wrote to memory of 492 2728 svchost.exe 7 PID 2728 wrote to memory of 492 2728 svchost.exe 7 PID 2728 wrote to memory of 492 2728 svchost.exe 7 PID 2728 wrote to memory of 500 2728 svchost.exe 8 PID 2728 wrote to memory of 500 2728 svchost.exe 8 PID 2728 wrote to memory of 500 2728 svchost.exe 8 PID 2728 wrote to memory of 500 2728 svchost.exe 8 PID 2728 wrote to memory of 500 2728 svchost.exe 8
Processes
-
C:\Windows\System32\smss.exe\SystemRoot\System32\smss.exe1⤵PID:256
-
C:\Windows\system32\csrss.exe%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=161⤵PID:336
-
C:\Windows\system32\wininit.exewininit.exe1⤵PID:384
-
C:\Windows\system32\services.exeC:\Windows\system32\services.exe2⤵PID:476
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k DcomLaunch3⤵PID:608
-
C:\Windows\system32\wbem\wmiprvse.exeC:\Windows\system32\wbem\wmiprvse.exe4⤵PID:636
-
-
C:\Windows\system32\DllHost.exeC:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}4⤵PID:1564
-
-
C:\Windows\system32\wbem\wmiprvse.exeC:\Windows\system32\wbem\wmiprvse.exe -Embedding4⤵PID:1472
-
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k RPCSS3⤵PID:672
-
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted3⤵PID:752
-
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted3⤵PID:820
-
C:\Windows\system32\Dwm.exe"C:\Windows\system32\Dwm.exe"4⤵PID:1060
-
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k netsvcs3⤵PID:860
-
\\?\C:\Windows\system32\wbem\WMIADAP.EXEwmiadap.exe /F /T /R4⤵PID:2232
-
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService3⤵PID:972
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k NetworkService3⤵PID:268
-
-
C:\Windows\system32\taskhost.exe"taskhost.exe"3⤵PID:1072
-
-
C:\Windows\System32\spoolsv.exeC:\Windows\System32\spoolsv.exe3⤵PID:1092
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalServiceNoNetwork3⤵PID:1172
-
-
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"3⤵PID:1220
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation3⤵PID:2368
-
-
C:\Windows\system32\sppsvc.exeC:\Windows\system32\sppsvc.exe3⤵PID:700
-
-
-
C:\Windows\system32\lsass.exeC:\Windows\system32\lsass.exe2⤵PID:492
-
-
C:\Windows\system32\lsm.exeC:\Windows\system32\lsm.exe2⤵PID:500
-
-
C:\Windows\system32\csrss.exe%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=161⤵PID:396
-
C:\Windows\system32\winlogon.exewinlogon.exe1⤵PID:432
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵PID:1144
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_c81fd03698ac39336710545a59e31fdc.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_c81fd03698ac39336710545a59e31fdc.exe"2⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
PID:2064 -
C:\Program Files (x86)\Microsoft\WaterMark.exe"C:\Program Files (x86)\Microsoft\WaterMark.exe"3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
PID:1228 -
C:\Windows\SysWOW64\svchost.exeC:\Windows\system32\svchost.exe4⤵
- Modifies WinLogon for persistence
- Drops file in System32 directory
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
PID:2096
-
-
C:\Windows\SysWOW64\svchost.exeC:\Windows\system32\svchost.exe4⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2728
-
-
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\epl-v10.html
Filesize204KB
MD5d08310ae4add4fd9afaea93823b20f99
SHA18c875c4bc2f93350d1c8b49b40d93d7646a71f6f
SHA256f4dd261d097685defd6fb4a0cba090ea4699e57b54a870ccd6e708c89a788436
SHA512e3fcab6078926b1cb914ce3f65b4833881d8d744cc2419eb54f70fa69aa2ba661545f8e353715a712c7cf422e365accada86d5ce96d295770fbda4985030dbcc
-
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\license.html
Filesize200KB
MD5de4b40cbe50095037cffaecb424eaba9
SHA1e9a132726d1d9bc995c0bf66963d20286a6a2e82
SHA2561bf2362357dfa9f3a6c71845e47d9f9242429c6f43a5159b941afeb88c8cf453
SHA512d423be9c7ec323d6c13cdb34474687b46bf55f4519f3e4ddf8a65bdb6904e06ddb8ac3b760772bcfdd89eb6f31268ba803be43e9d00383b8a3ab1e9e8527e171
-
Filesize
95KB
MD5c81fd03698ac39336710545a59e31fdc
SHA1836b52d47757d6875564aa481ba87dee50134bd3
SHA2561e7e7c06c63d3cf8626579a3bec0aa11bb15b43a65313d5ec8bf86afaad69fe0
SHA5129e64e5e199a8e385e386dbfca7ee0780f786e00b9601c7d785b057fc2c42ab9d8fba0ac7857176f262d1ea2ea1fec07e445967d2ce219e2c822a64d9d85df604