Overview

overview

10

Static

static

3

windhawk_setup.exe

windows10-2004-x64

10

windhawk_setup.exe

windows11-ltsc_2024-x64

10

Compiler/i...ing.js

windows10-2004-x64

3

Compiler/i...ing.js

windows11-ltsc_2024-x64

3

Compiler/x...++.dll

windows10-2004-x64

1

Compiler/x...++.dll

windows11-ltsc_2024-x64

1

Compiler/x...nd.dll

windows10-2004-x64

1

Compiler/x...nd.dll

windows11-ltsc_2024-x64

1

Compiler/x...im.dll

windows10-2004-x64

1

Compiler/x...im.dll

windows11-ltsc_2024-x64

1

Engine/$R1...wk.dll

windows10-2004-x64

3

Engine/$R1...wk.dll

windows11-ltsc_2024-x64

3

Engine/$R1...wk.dll

windows10-2004-x64

3

Engine/$R1...wk.dll

windows10-2004-x64

3

Engine/$R1...wk.dll

windows11-ltsc_2024-x64

3

Engine/$R1...wk.dll

windows10-2004-x64

5

Engine/$R1...wk.dll

windows11-ltsc_2024-x64

5

Engine/$R1...wk.dll

windows10-2004-x64

1

Engine/$R1...wk.dll

windows10-2004-x64

1

Engine/$R1...wk.dll

windows11-ltsc_2024-x64

6

Engine/$R1...wk.dll

windows10-2004-x64

1

Engine/$R1...wk.dll

windows11-ltsc_2024-x64

1

Engine/$R1...wk.dll

windows10-2004-x64

1

Engine/$R1...wk.dll

windows11-ltsc_2024-x64

8

Engine/$R1...wk.dll

windows10-2004-x64

1

Engine/$R1...wk.dll

windows11-ltsc_2024-x64

1

UI/resourc...dle.js

windows10-2004-x64

3

UI/resourc...dle.js

windows11-ltsc_2024-x64

3

UI/resourc...on.svg

windows10-2004-x64

3

UI/resourc...on.svg

windows11-ltsc_2024-x64

7

UI/resourc...ck.svg

windows10-2004-x64

3

UI/resourc...ck.svg

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    900s
  • max time network
    488s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    03/10/2026, 12:08

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    windhawk_setup.exe
  • Size 11.0MB
  • Sample261003-payp7sda86
  • SHA256 5116cc1703384aac88b8d7a3b57f172aea5da32b6df7355fb2f8247d23813c8f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
defense_evasiondiscoveryexecutionpersistenceprivilege_escalation

Malware Config

Signatures

  • Suspicious use of NtCreateUserProcessOtherParentProcess 1 TTPs 1 IoCs
    defense_evasionprivilege_escalation
  • Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

    Using powershell.exe command.

    execution
  • Enumerates connected drives 3 TTPs 1 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Checks computer location settings 2 TTPs 6 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Drops file in System32 directory 15 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 1 IoCs
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 2 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • Reads the TCP/IP host and domain name from the registry 1 TTPs 10 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 25 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks processor information in registry 2 TTPs 41 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 4 IoCs
  • Modifies data under HKEY_USERS 14 IoCs
  • Modifies registry class 39 IoCs
  • Scheduled Task/Job: Scheduled Task 1 TTPs 2 IoCs

    Schtasks is often used by malware for persistence or to perform post-infection execution.

    persistenceexecution
  • Suspicious behavior: EnumeratesProcesses 13 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 5 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of UnmapMainImage 1 TTPs 1 IoCs
    defense_evasionprivilege_escalation
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Windows\system32\winlogon.exe
    winlogon.exe
    1⤵
    • Executes dropped EXE
    PID:604
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch -p
    1⤵
    • Executes dropped EXE
    • Modifies registry class
    PID:788
    • C:\Windows\system32\DllHost.exe
      C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
      2⤵
        PID:3596
      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
        2⤵
        • Executes dropped EXE
        PID:3688
      • C:\Windows\System32\RuntimeBroker.exe
        C:\Windows\System32\RuntimeBroker.exe -Embedding
        2⤵
        • Loads dropped DLL
        PID:3752
      • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
        "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
        2⤵
        • Executes dropped EXE
        PID:3832
      • C:\Windows\System32\RuntimeBroker.exe
        C:\Windows\System32\RuntimeBroker.exe -Embedding
        2⤵
        • Executes dropped EXE
        PID:4056
      • C:\Windows\System32\RuntimeBroker.exe
        C:\Windows\System32\RuntimeBroker.exe -Embedding
        2⤵
        • Executes dropped EXE
        PID:4612
      • C:\Windows\system32\SppExtComObj.exe
        C:\Windows\system32\SppExtComObj.exe -Embedding
        2⤵
        • Executes dropped EXE
        PID:4780
      • C:\Windows\system32\DllHost.exe
        C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
        2⤵
        • Drops file in System32 directory
        PID:3680
      • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe
        "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe" -ServerName:InputApp.AppX9jnwykgrccxc8by3hsrsh07r423xzvav.mca
        2⤵
        • Executes dropped EXE
        PID:1800
      • C:\Windows\System32\RuntimeBroker.exe
        C:\Windows\System32\RuntimeBroker.exe -Embedding
        2⤵
        • Loads dropped DLL
        PID:4348
      • C:\Windows\System32\RuntimeBroker.exe
        C:\Windows\System32\RuntimeBroker.exe -Embedding
        2⤵
        • Loads dropped DLL
        PID:2076
      • C:\Windows\System32\mousocoreworker.exe
        C:\Windows\System32\mousocoreworker.exe -Embedding
        2⤵
        • Loads dropped DLL
        • Checks processor information in registry
        • Enumerates system info in registry
        PID:3388
      • C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.1220_none_7e21bc567c7ed16b\TiWorker.exe
        C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.1220_none_7e21bc567c7ed16b\TiWorker.exe -Embedding
        2⤵
        • Loads dropped DLL
        PID:3424
      • C:\Windows\system32\DllHost.exe
        C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
        2⤵
          PID:2904
        • C:\Windows\system32\backgroundTaskHost.exe
          "C:\Windows\system32\backgroundTaskHost.exe" -ServerName:App.AppXmtcan0h2tfbfy7k9kn8hbxb6dmzz1zh0.mca
          2⤵
          • Checks processor information in registry
          • Modifies registry class
          PID:936
        • C:\Windows\system32\backgroundTaskHost.exe
          "C:\Windows\system32\backgroundTaskHost.exe" -ServerName:App.AppXmtcan0h2tfbfy7k9kn8hbxb6dmzz1zh0.mca
          2⤵
          • Modifies registry class
          PID:5772
        • C:\Windows\system32\backgroundTaskHost.exe
          "C:\Windows\system32\backgroundTaskHost.exe" -ServerName:App.AppXmtcan0h2tfbfy7k9kn8hbxb6dmzz1zh0.mca
          2⤵
          • Checks processor information in registry
          • Modifies registry class
          PID:2888
        • C:\Windows\system32\BackgroundTaskHost.exe
          "C:\Windows\system32\BackgroundTaskHost.exe" -ServerName:BackgroundTaskHost.WebAccountProvider
          2⤵
          • Modifies registry class
          PID:2092
        • C:\Windows\System32\RuntimeBroker.exe
          C:\Windows\System32\RuntimeBroker.exe -Embedding
          2⤵
            PID:1372
          • C:\Windows\System32\RuntimeBroker.exe
            C:\Windows\System32\RuntimeBroker.exe -Embedding
            2⤵
              PID:968
            • C:\Windows\System32\mousocoreworker.exe
              C:\Windows\System32\mousocoreworker.exe -Embedding
              2⤵
              • Checks processor information in registry
              • Enumerates system info in registry
              PID:6084
            • C:\Windows\system32\backgroundTaskHost.exe
              "C:\Windows\system32\backgroundTaskHost.exe" -ServerName:App.AppXmtcan0h2tfbfy7k9kn8hbxb6dmzz1zh0.mca
              2⤵
              • Modifies registry class
              PID:2108
          • C:\Windows\System32\WUDFHost.exe
            "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-2eda274e-9d48-4e69-a4e8-d005e068547c -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-617c87a2-1930-45d9-b86e-0186ed6443ac -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-f869f04e-7662-42b2-84ce-28fb109ffa51 -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-ec6c96cb-c25f-48b1-a4bc-4a2bc59d11da -LifetimeId:5c4aca9c-202d-476f-a6b9-6b1171c61aa0 -DeviceGroupId:WudfDefaultDevicePool -HostArg:0
            1⤵
            • Executes dropped EXE
            PID:868
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k RPCSS -p
            1⤵
            • Executes dropped EXE
            PID:948
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k DcomLaunch -p -s LSM
            1⤵
            • Executes dropped EXE
            PID:1000
          • C:\Windows\System32\svchost.exe
            C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s lmhosts
            1⤵
            • Executes dropped EXE
            PID:1064
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork -p
            1⤵
            • Executes dropped EXE
            PID:1084
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s TimeBrokerSvc
            1⤵
            • Executes dropped EXE
            PID:1168
          • C:\Windows\System32\svchost.exe
            C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s EventLog
            1⤵
            • Executes dropped EXE
            PID:1176
          • C:\Windows\System32\svchost.exe
            C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService
            1⤵
            • Executes dropped EXE
            PID:1188
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k netsvcs -p -s Schedule
            1⤵
            • Drops file in System32 directory
            • Loads dropped DLL
            PID:1196
            • C:\Program Files\Windhawk\windhawk.exe
              "C:\Program Files\Windhawk\windhawk.exe" -check-for-updates
              2⤵
              • Reads the TCP/IP host and domain name from the registry
              • System Location Discovery: System Language Discovery
              PID:5848
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k netsvcs -p -s ProfSvc
            1⤵
            • Executes dropped EXE
            PID:1280
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k LocalService -p -s nsi
            1⤵
            • Executes dropped EXE
            PID:1336
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k LocalService -p -s DispBrokerDesktopSvc
            1⤵
            • Executes dropped EXE
            PID:1384
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DisplayEnhancementService
            1⤵
            • Executes dropped EXE
            PID:1396
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp
            1⤵
            • Executes dropped EXE
            PID:1440
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k netsvcs -p -s UserManager
            1⤵
            • Executes dropped EXE
            PID:1484
            • C:\Windows\system32\sihost.exe
              sihost.exe
              2⤵
              • Executes dropped EXE
              • Modifies registry class
              PID:2952
          • C:\Windows\System32\svchost.exe
            C:\Windows\System32\svchost.exe -k netsvcs -p -s Themes
            1⤵
            • Executes dropped EXE
            PID:1728
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k LocalService -p -s EventSystem
            1⤵
            • Executes dropped EXE
            PID:1736
          • C:\Windows\System32\svchost.exe
            C:\Windows\System32\svchost.exe -k NetworkService -p -s NlaSvc
            1⤵
            • Executes dropped EXE
            • Suspicious use of AdjustPrivilegeToken
            PID:1744
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k netsvcs -p -s SENS
            1⤵
            • Executes dropped EXE
            PID:1856
          • C:\Windows\System32\svchost.exe
            C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s AudioEndpointBuilder
            1⤵
            • Executes dropped EXE
            PID:1888
          • C:\Windows\System32\svchost.exe
            C:\Windows\System32\svchost.exe -k LocalService -p -s netprofm
            1⤵
            • Executes dropped EXE
            PID:1908
          • C:\Windows\System32\svchost.exe
            C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p
            1⤵
            • Executes dropped EXE
            PID:1996
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k NetworkService -p -s Dnscache
            1⤵
            • Executes dropped EXE
            PID:1760
          • C:\Windows\System32\svchost.exe
            C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p
            1⤵
            • Executes dropped EXE
            PID:1752
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k appmodel -p -s StateRepository
            1⤵
            • Executes dropped EXE
            PID:1932
          • C:\Windows\System32\svchost.exe
            C:\Windows\System32\svchost.exe -k netsvcs -p -s ShellHWDetection
            1⤵
            • Executes dropped EXE
            PID:2116
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k netsvcs -p -s Winmgmt
            1⤵
            • Executes dropped EXE
            PID:2252
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p
            1⤵
            • Executes dropped EXE
            PID:2280
          • C:\Windows\System32\svchost.exe
            C:\Windows\System32\svchost.exe -k NetworkService -p -s LanmanWorkstation
            1⤵
            • Executes dropped EXE
            PID:2320
          • C:\Windows\System32\svchost.exe
            C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -s RmSvc
            1⤵
            • Executes dropped EXE
            PID:2388
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted -p -s PolicyAgent
            1⤵
            • Executes dropped EXE
            PID:2584
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k netsvcs -p -s IKEEXT
            1⤵
            • Executes dropped EXE
            PID:2592
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k NetworkService -p -s CryptSvc
            1⤵
            • Drops file in System32 directory
            • Loads dropped DLL
            PID:2756
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k netsvcs -p -s LanmanServer
            1⤵
            • Executes dropped EXE
            • Suspicious use of AdjustPrivilegeToken
            PID:2788
          • C:\Windows\System32\svchost.exe
            C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s TrkWks
            1⤵
            • Executes dropped EXE
            PID:2828
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k netsvcs -p -s WpnService
            1⤵
            • Executes dropped EXE
            PID:2836
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
            1⤵
            • Executes dropped EXE
            PID:3024
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k netsvcs -p -s TokenBroker
            1⤵
            • Executes dropped EXE
            PID:760
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k LocalService -p -s CDPSvc
            1⤵
            • Executes dropped EXE
            PID:3196
          • C:\Windows\Explorer.EXE
            C:\Windows\Explorer.EXE
            1⤵
            • Loads dropped DLL
            • Suspicious behavior: GetForegroundWindowSpam
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of UnmapMainImage
            PID:3288
            • C:\Users\Admin\AppData\Local\Temp\windhawk_setup.exe
              "C:\Users\Admin\AppData\Local\Temp\windhawk_setup.exe"
              2⤵
              • Suspicious use of NtCreateUserProcessOtherParentProcess
              • Checks computer location settings
              • Drops file in Program Files directory
              • Loads dropped DLL
              • Reads the TCP/IP host and domain name from the registry
              • System Location Discovery: System Language Discovery
              • Suspicious use of AdjustPrivilegeToken
              PID:3440
              • C:\Windows\SysWOW64\schtasks.exe
                schtasks /delete /tn WindhawkRunUITask /f
                3⤵
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:5056
              • C:\Windows\SysWOW64\schtasks.exe
                schtasks /create /tn WindhawkRunUITask /xml "C:\Users\Admin\AppData\Local\Temp\nsg1380.tmp\WindhawkRunUITask.xml"
                3⤵
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Scheduled Task/Job: Scheduled Task
                PID:2928
              • C:\Windows\SysWOW64\cmd.exe
                "C:\Windows\system32\cmd.exe" /S /C "powershell -ExecutionPolicy Bypass -Command "& {$ErrorActionPreference = \"Stop\";$scheduler = New-Object -ComObject \"Schedule.Service\";$scheduler.Connect();$task = $scheduler.GetFolder(\"\").GetTask(\"WindhawkRunUITask\");$sec = $task.GetSecurityDescriptor(0xF);$sec = $sec + '(A;;GRGX;;;AU)';$task.SetSecurityDescriptor($sec, 0)}" -FFFeatureOff"
                3⤵
                • Loads dropped DLL
                • Executes a command shell one-liner
                • System Location Discovery: System Language Discovery
                PID:3352
                • C:\Windows\System32\Conhost.exe
                  \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                  4⤵
                  • Loads dropped DLL
                  PID:4288
                • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                  powershell -ExecutionPolicy Bypass -Command "& {$ErrorActionPreference = \"Stop\";$scheduler = New-Object -ComObject \"Schedule.Service\";$scheduler.Connect();$task = $scheduler.GetFolder(\"\").GetTask(\"WindhawkRunUITask\");$sec = $task.GetSecurityDescriptor(0xF);$sec = $sec + '(A;;GRGX;;;AU)';$task.SetSecurityDescriptor($sec, 0)}" -FFFeatureOff
                  4⤵
                  • Command and Scripting Interpreter: PowerShell
                  • Enumerates connected drives
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Suspicious behavior: EnumeratesProcesses
                  • Suspicious use of AdjustPrivilegeToken
                  PID:220
              • C:\Windows\SysWOW64\schtasks.exe
                schtasks /delete /tn WindhawkUpdateTask /f
                3⤵
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:2940
              • C:\Windows\SysWOW64\schtasks.exe
                schtasks /create /tn WindhawkUpdateTask /xml "C:\Users\Admin\AppData\Local\Temp\nsg1380.tmp\WindhawkUpdateTask.xml"
                3⤵
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Scheduled Task/Job: Scheduled Task
                PID:4080
            • C:\Program Files\Windhawk\windhawk.exe
              "C:\Program Files\Windhawk\windhawk.exe"
              2⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:2480
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k ClipboardSvcGroup -p -s cbdhsvc
            1⤵
            • Executes dropped EXE
            PID:3412
          • C:\Windows\System32\svchost.exe
            C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s StorSvc
            1⤵
            • Executes dropped EXE
            PID:4852
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s SSDPSRV
            1⤵
            • Executes dropped EXE
            PID:2296
          • C:\Windows\System32\svchost.exe
            C:\Windows\System32\svchost.exe -k LocalService -p -s LicenseManager
            1⤵
            • Executes dropped EXE
            PID:1656
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s WinHttpAutoProxySvc
            1⤵
            • Executes dropped EXE
            • Modifies data under HKEY_USERS
            PID:3608
          • C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
            "C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
            1⤵
            • Drops file in System32 directory
            • Loads dropped DLL
            • Modifies data under HKEY_USERS
            PID:3820
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k netsvcs -p -s wlidsvc
            1⤵
            • Executes dropped EXE
            PID:1960
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
            1⤵
            • Executes dropped EXE
            PID:4952
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k appmodel -p -s camsvc
            1⤵
            • Executes dropped EXE
            PID:668
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k netsvcs -p -s Appinfo
            1⤵
            • Executes dropped EXE
            PID:720
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k netsvcs -p -s wuauserv
            1⤵
            • Drops file in Windows directory
            • Loads dropped DLL
            PID:2748
          • C:\Windows\servicing\TrustedInstaller.exe
            C:\Windows\servicing\TrustedInstaller.exe
            1⤵
            • Loads dropped DLL
            PID:4908
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k netsvcs -p -s UsoSvc
            1⤵
            • Loads dropped DLL
            PID:1568
          • C:\Program Files\Windhawk\windhawk.exe
            "C:\Program Files\Windhawk\windhawk.exe" -service
            1⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of WriteProcessMemory
            PID:1096
            • C:\Program Files\Windhawk\windhawk.exe
              "C:\Program Files\Windhawk\windhawk.exe" -tray-only
              2⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Suspicious use of FindShellTrayWindow
              • Suspicious use of SendNotifyMessage
              PID:4372
          • C:\Windows\System32\Conhost.exe
            \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
            1⤵
            • Loads dropped DLL
            • Suspicious use of SetWindowsHookEx
            PID:2672
          • C:\Program Files\Windhawk\windhawk.exe
            "C:\Program Files\Windhawk\windhawk.exe"
            1⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:2976
            • C:\Program Files\Windhawk\UI\VSCodium.exe
              "C:\Program Files\Windhawk\UI\VSCodium.exe" "C:\ProgramData\Windhawk\EditorWorkspace" --locale=en --no-sandbox --disable-gpu-sandbox
              2⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Reads the TCP/IP host and domain name from the registry
              • System Location Discovery: System Language Discovery
              • Checks processor information in registry
              • Modifies registry class
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of FindShellTrayWindow
              PID:4380
              • C:\Program Files\Windhawk\UI\VSCodium.exe
                "C:\Program Files\Windhawk\UI\VSCodium.exe" --type=gpu-process --disable-gpu-sandbox --no-sandbox --user-data-dir="C:\ProgramData\Windhawk\UIData\user-data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1660 --field-trial-handle=1812,i,799126124077851499,11406282751741895931,131072 --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
                3⤵
                • Executes dropped EXE
                • System Location Discovery: System Language Discovery
                PID:1452
              • C:\Program Files\Windhawk\UI\VSCodium.exe
                "C:\Program Files\Windhawk\UI\VSCodium.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\ProgramData\Windhawk\UIData\user-data" --standard-schemes=vscode-webview,vscode-file --secure-schemes=vscode-webview,vscode-file --bypasscsp-schemes --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --streaming-schemes --mojo-platform-channel-handle=1880 --field-trial-handle=1812,i,799126124077851499,11406282751741895931,131072 --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
                3⤵
                • Executes dropped EXE
                • Reads the TCP/IP host and domain name from the registry
                • System Location Discovery: System Language Discovery
                PID:2964
              • C:\Program Files\Windhawk\UI\VSCodium.exe
                "C:\Program Files\Windhawk\UI\VSCodium.exe" --type=renderer --user-data-dir="C:\ProgramData\Windhawk\UIData\user-data" --standard-schemes=vscode-webview,vscode-file --secure-schemes=vscode-webview,vscode-file --bypasscsp-schemes --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --streaming-schemes --app-user-model-id=RamenSoftware.Windhawk --app-path="C:\Program Files\Windhawk\UI\resources\app" --no-sandbox --no-zygote --enable-blink-features=HighlightAPI,WebAppWindowControlsOverlay --no-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2612 --field-trial-handle=1812,i,799126124077851499,11406282751741895931,131072 --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --vscode-window-config=vscode:927829ac-80f6-4fe9-9092-19a10c26056b /prefetch:1
                3⤵
                • Checks computer location settings
                • Executes dropped EXE
                • System Location Discovery: System Language Discovery
                PID:4448
              • C:\Program Files\Windhawk\UI\VSCodium.exe
                "C:\Program Files\Windhawk\UI\VSCodium.exe" --type=renderer --user-data-dir="C:\ProgramData\Windhawk\UIData\user-data" --standard-schemes=vscode-webview,vscode-file --secure-schemes=vscode-webview,vscode-file --bypasscsp-schemes --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --streaming-schemes --app-user-model-id=RamenSoftware.Windhawk --app-path="C:\Program Files\Windhawk\UI\resources\app" --no-sandbox --no-zygote --node-integration-in-worker --no-sandbox --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2968 --field-trial-handle=1812,i,799126124077851499,11406282751741895931,131072 --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --vscode-window-config=vscode:06914c64-69a0-4890-877a-f83d528cdc46 --vscode-window-kind=shared-process /prefetch:1
                3⤵
                • Checks computer location settings
                • Executes dropped EXE
                • System Location Discovery: System Language Discovery
                PID:4728
                • C:\Program Files\Windhawk\UI\VSCodium.exe
                  "C:\Program Files\Windhawk\UI\VSCodium.exe" "c:\Program Files\Windhawk\UI\resources\app\out\bootstrap-fork" --type=ptyHost --logsPath C:\ProgramData\Windhawk\UIData\user-data\logs\20261003T131153
                  4⤵
                  • System Location Discovery: System Language Discovery
                  • Suspicious behavior: EnumeratesProcesses
                  PID:4868
                • C:\Windows\SysWOW64\cmd.exe
                  C:\Windows\system32\cmd.exe /d /s /c "wsl.exe -l -q"
                  4⤵
                  • Executes a command shell one-liner
                  • System Location Discovery: System Language Discovery
                  PID:5172
                  • C:\Windows\System32\Conhost.exe
                    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                    5⤵
                      PID:5196
                  • C:\Program Files\Windhawk\UI\VSCodium.exe
                    "C:\Program Files\Windhawk\UI\VSCodium.exe" "c:\Program Files\Windhawk\UI\resources\app\out\bootstrap-fork" --type=fileWatcher
                    4⤵
                    • System Location Discovery: System Language Discovery
                    • Suspicious behavior: EnumeratesProcesses
                    PID:5184
                • C:\Program Files\Windhawk\UI\VSCodium.exe
                  "C:\Program Files\Windhawk\UI\VSCodium.exe" --inspect-port=0 "c:\Program Files\Windhawk\UI\resources\app\out\bootstrap-fork" --type=extensionHost --skipWorkspaceStorageLock
                  3⤵
                  • Checks computer location settings
                  • Reads the TCP/IP host and domain name from the registry
                  • System Location Discovery: System Language Discovery
                  • Suspicious behavior: EnumeratesProcesses
                  PID:3952
                  • C:\Program Files\Windhawk\UI\VSCodium.exe
                    "C:\Program Files\Windhawk\UI\VSCodium.exe" "c:\Program Files\Windhawk\UI\resources\app\extensions\json-language-features\server\dist\node\jsonServerMain" --node-ipc --clientProcessId=3952
                    4⤵
                    • System Location Discovery: System Language Discovery
                    • Suspicious behavior: EnumeratesProcesses
                    PID:5212
                  • \??\c:\Program Files\Windhawk\windhawk.exe
                    "c:\Program Files\Windhawk\windhawk.exe" -new-updates-found
                    4⤵
                    • System Location Discovery: System Language Discovery
                    PID:5924
                • C:\Program Files\Windhawk\UI\VSCodium.exe
                  "C:\Program Files\Windhawk\UI\VSCodium.exe" --type=renderer --user-data-dir="C:\ProgramData\Windhawk\UIData\user-data" --standard-schemes=vscode-webview,vscode-file --secure-schemes=vscode-webview,vscode-file --bypasscsp-schemes --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --streaming-schemes --app-user-model-id=RamenSoftware.Windhawk --app-path="C:\Program Files\Windhawk\UI\resources\app" --enable-sandbox --enable-blink-features=HighlightAPI,WebAppWindowControlsOverlay --no-sandbox --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3124 --field-trial-handle=1812,i,799126124077851499,11406282751741895931,131072 --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --vscode-window-config=vscode:927829ac-80f6-4fe9-9092-19a10c26056b /prefetch:1
                  3⤵
                  • Checks computer location settings
                  • System Location Discovery: System Language Discovery
                  PID:5260
                • C:\Program Files\Windhawk\UI\VSCodium.exe
                  "C:\Program Files\Windhawk\UI\VSCodium.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --disable-gpu-sandbox --no-sandbox --user-data-dir="C:\ProgramData\Windhawk\UIData\user-data" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1996 --field-trial-handle=1812,i,799126124077851499,11406282751741895931,131072 --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
                  3⤵
                  • System Location Discovery: System Language Discovery
                  • Suspicious behavior: EnumeratesProcesses
                  PID:2896
            • C:\Windows\system32\UsoClient.exe
              C:\Windows\system32\usoclient.exe
              1⤵
                PID:4240

              Network

                    MITRE ATT&CK Enterprise v16

                    Reconnaissance

                    Resource Development

                    Initial Access

                    Execution

                    Command and Scripting Interpreter

                    2
                    T1059

                    PowerShell

                    1
                    T1059.001

                    Windows Command Shell

                    1
                    T1059.003

                    Scheduled Task/Job

                    1
                    T1053

                    Scheduled Task

                    1
                    T1053.005

                    Persistence

                    Scheduled Task/Job

                    1
                    T1053

                    Scheduled Task

                    1
                    T1053.005

                    Privilege Escalation

                    Access Token Manipulation

                    1
                    T1134

                    Parent PID Spoofing

                    1
                    T1134.004

                    Process Injection

                    1
                    T1055

                    Process Hollowing

                    1
                    T1055.012

                    Scheduled Task/Job

                    1
                    T1053

                    Scheduled Task

                    1
                    T1053.005

                    Defense Evasion

                    Access Token Manipulation

                    1
                    T1134

                    Parent PID Spoofing

                    1
                    T1134.004

                    Process Injection

                    1
                    T1055

                    Process Hollowing

                    1
                    T1055.012

                    Credential Access

                    Discovery

                    Network Share Discovery

                    1
                    T1135

                    Peripheral Device Discovery

                    1
                    T1120

                    Query Registry

                    6
                    T1012

                    System Information Discovery

                    5
                    T1082

                    System Location Discovery

                    1
                    T1614

                    System Language Discovery

                    1
                    T1614.001

                    System Network Configuration Discovery

                    1
                    T1016

                    Lateral Movement

                    Collection

                    Command and Control

                    Exfiltration

                    Impact

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    crt2.o
                    • Path C:\Program Files\Windhawk\Compiler\aarch64-w64-mingw32\lib\crt2.o
                    • Size 22KB
                    • SHA256 0184829889f7f6f17beaeacbae44287658062169fd043be2a1f47b33d5551a5d
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    crt2u.o
                    • Path C:\Program Files\Windhawk\Compiler\aarch64-w64-mingw32\lib\crt2u.o
                    • Size 23KB
                    • SHA256 ec329189b158377f8f61208ca4c9681360d1700a00a6c58cbb477078c8758d18
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    dllcrt2.o
                    • Path C:\Program Files\Windhawk\Compiler\aarch64-w64-mingw32\lib\dllcrt2.o
                    • Size 15KB
                    • SHA256 ebb79af116a477310f176cd3daca3212260c4a07d44b67802a7e1cd9c790dd74
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    gcrt1.o
                    • Path C:\Program Files\Windhawk\Compiler\aarch64-w64-mingw32\lib\gcrt1.o
                    • Size 2KB
                    • SHA256 1d163f676a38f291ca9eedf549cdf088e7525423757e5cbe6e05a6288051370c
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    libd3dcompiler_47.a
                    • Path C:\Program Files\Windhawk\Compiler\aarch64-w64-mingw32\lib\libd3dcompiler_47.a
                    • Size 7KB
                    • SHA256 7f86de180e0aa25bf55c2ad91780061f92733613092a1b9f45920381d0d6e3a3
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libmapistub.a
                    • Path C:\Program Files\Windhawk\Compiler\aarch64-w64-mingw32\lib\libmapistub.a
                    • Size 33KB
                    • SHA256 55f6633b44d47ce3f001dfb1a98b6c4b5b5699360320ec67ffc4ca6c2b25d366
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libmsvcrt.a
                    • Path C:\Program Files\Windhawk\Compiler\aarch64-w64-mingw32\lib\libmsvcrt.a
                    • Size 841KB
                    • SHA256 60dde2d94cfc43e705d4592f39fd3dd1b6a23d20c55e0998dac97972731c0924
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libquery.a
                    • Path C:\Program Files\Windhawk\Compiler\aarch64-w64-mingw32\lib\libquery.a
                    • Size 3KB
                    • SHA256 4f65748728e8ce5d28cafa0ed4ea5fb3b51088567d11e2e71445b50b52ac2011
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    libssp.a
                    • Path C:\Program Files\Windhawk\Compiler\aarch64-w64-mingw32\lib\libssp.a
                    • Size 8B
                    • SHA256 f0a17a43c74d2fe5474fa2fd29c8f14799e777d7d75a2cc4d11c20a6e7b161c5
                    • MD5 SHA1 SHA512
                    Submit Download

                    libwinpthread.a
                    • Path C:\Program Files\Windhawk\Compiler\aarch64-w64-mingw32\lib\libwinpthread.a
                    • Size 266KB
                    • SHA256 ab1037f2eb0f98e5a55c0ddbc30d974c1457748436b6906d4ee52003fa48c399
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libwinpthread.dll.a
                    • Path C:\Program Files\Windhawk\Compiler\aarch64-w64-mingw32\lib\libwinpthread.dll.a
                    • Size 32KB
                    • SHA256 d6824f991dcb0f9043eff1505de49f719a5bd8dc9a223fe5863958c67254e3b6
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libxinput1_4.a
                    • Path C:\Program Files\Windhawk\Compiler\aarch64-w64-mingw32\lib\libxinput1_4.a
                    • Size 2KB
                    • SHA256 876bff5be25bb6feb669891fe0df84f0c1211d7a0068374c8b0b857f90565793
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    libc++.dll
                    • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\bin\libc++.dll
                    • Size 2.1MB
                    • SHA256 b424b81b43b8358a5094adb9e4a324a646aebebfad0e4362eb8ed1a4cb49a41a
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libunwind.dll
                    • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\bin\libunwind.dll
                    • Size 215KB
                    • SHA256 f48eaae7c06622b81b55ffa09338af4b7778121847f2f9bf1f0e6cef32d8695e
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    crt2.o
                    • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\crt2.o
                    • Size 21KB
                    • SHA256 ba2370422cedf0f19005352696fa2e381e7fef38f73e236736d0345b0318a116
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    crt2u.o
                    • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\crt2u.o
                    • Size 21KB
                    • SHA256 909a18500cf8df40a6cbe2ae105aff3c87db9576909a6fb87830444054f2d283
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    dllcrt2.o
                    • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\dllcrt2.o
                    • Size 13KB
                    • SHA256 8f2bb292cddcb4e3091eaad29ac704a680b54cc223af82061ca1dc4127d23608
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    gcrt1.o
                    • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\gcrt1.o
                    • Size 2KB
                    • SHA256 96e7ddac57be6ac210342a7a1fa064c620052d3fc903e70bc27f82b636d68cf0
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    libc++.modules.json
                    • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libc++.modules.json
                    • Size 561B
                    • SHA256 a6e5422724e82ee365cdafd73eca17e0987c60fee96c501482240e23b30c5a01
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    libd3dcompiler_34.a
                    • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libd3dcompiler_34.a
                    • Size 3KB
                    • SHA256 d6015cd8643fbda48ef6de3320eb906b1dd4db36bcf0c94d0391b6bd8946adb2
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    libd3dcompiler_47.a
                    • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libd3dcompiler_47.a
                    • Size 8KB
                    • SHA256 5c16fa59b597b1bd3d593f3b7321bdcb9435f8890c45146e3366e371174dd118
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libd3dcsxd_43.a
                    • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libd3dcsxd_43.a
                    • Size 3KB
                    • SHA256 01bbf2b4375364d3f6b3cdce30a17759cabb801604750051199f9a5818f8bd57
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    libd3dx10_43.a
                    • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libd3dx10_43.a
                    • Size 46KB
                    • SHA256 483fd75d2d32844faa399ff4334ee609d7fd1d2c6d859d4b59a2fef0e1b99f89
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libd3dx11_43.a
                    • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libd3dx11_43.a
                    • Size 13KB
                    • SHA256 5d619b2457674fdbdea9286bfc1564c20eac2b8d7d2348b36587368672a0d9e5
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libd3dx9_43.a
                    • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libd3dx9_43.a
                    • Size 85KB
                    • SHA256 2562eacd12e4c5e23c1bdff8ac90bb230e959adb347168c1f8aacaedb7de8a16
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libmsctfmonitor.a
                    • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libmsctfmonitor.a
                    • Size 20KB
                    • SHA256 e499a77e3d37fefd7ab25b4c646293a98ffbf53b3b01cba822dd4df2b8ff2dd2
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libmsvcrt.a
                    • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libmsvcrt.a
                    • Size 1.1MB
                    • SHA256 0d6e4d08caa2efcc0ce5f5123cc2b157cf4f40dc344ffba7b525d8aac6432695
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libquery.a
                    • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libquery.a
                    • Size 3KB
                    • SHA256 265841d43f39120978211a5edf62e611943061dbae5156f520f0a9333ac487b6
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    libwinpthread.a
                    • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libwinpthread.a
                    • Size 223KB
                    • SHA256 ac61dcbe2248d80d99b2c78ccf4fc91c79d1bc02103541b370bbf012ffcb9ce3
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libwinpthread.dll.a
                    • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libwinpthread.dll.a
                    • Size 33KB
                    • SHA256 d849db9022800bb8ef2eead189198b219826cc1b2f4765be2bdadd917067c2fb
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libx3daudio1_7.a
                    • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libx3daudio1_7.a
                    • Size 1KB
                    • SHA256 c5b26985377f1f7fb6b1ab8b93ee35347cbc9ae981f9dfec525258f009e83f60
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    libxapofx1_5.a
                    • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libxapofx1_5.a
                    • Size 1KB
                    • SHA256 904e523c7b93adeea17af8d31aded135eed37dab8b2b5e86042fa0b6d96fb9b6
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    libxinput1_3.a
                    • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libxinput1_3.a
                    • Size 2KB
                    • SHA256 5e644760f02dd3627804d7770b74cfbc1cf074716dd03f125239f74805472e1d
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    COPYING
                    • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\share\mingw32\COPYING
                    • Size 2KB
                    • SHA256 99a69660981156c21336fdb5661f89341b013c94e4bf9e1c7467b4745718397f
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    COPYING.MinGW-w64-runtime.txt
                    • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\share\mingw32\COPYING.MinGW-w64-runtime.txt
                    • Size 10KB
                    • SHA256 e9b2dc02451ea29092a1f25fa0f3c07207ed421f1807dffb0c4e6dce69dee7bd
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    COPYING.MinGW-w64.txt
                    • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\share\mingw32\COPYING.MinGW-w64.txt
                    • Size 5KB
                    • SHA256 f38e6194bd3bfa1b654f118e5acefe0aead437bbe669eee43957ccc65a7127f1
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    COPYING.winpthreads.txt
                    • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\share\mingw32\COPYING.winpthreads.txt
                    • Size 2KB
                    • SHA256 63263614cdd29f2f93cba85e992f041b31f9fc7b4033692f31269489a8a1b177
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    COPYING.winstorecompat.txt
                    • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\share\mingw32\COPYING.winstorecompat.txt
                    • Size 1KB
                    • SHA256 fa7368d1f93d890c173177475d8ec7aff265a7d08f1f364d66f74d138978ce36
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    mdspan
                    • Path C:\Program Files\Windhawk\Compiler\include\c++\v1\__cxx03\mdspan
                    • Size 16KB
                    • SHA256 1580d3b400566a4daa8651a29eb8d50e16335eedf3af6d7e2f17fef7ae1cf859
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    __undef_macros
                    • Path C:\Program Files\Windhawk\Compiler\include\c++\v1\__undef_macros
                    • Size 558B
                    • SHA256 10c542f9493fc3f2ed46e498cda2c8d408ecc578ceef1df9272908143bd22b8f
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    mtsgrp.h
                    • Path C:\Program Files\Windhawk\Compiler\include\mtsgrp.h
                    • Size 237B
                    • SHA256 255a11df990657af623e682c7c3a81274fbb4a80c10f1dc2280cb3ce4eb98cf4
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    mtxadmin_i.c
                    • Path C:\Program Files\Windhawk\Compiler\include\mtxadmin_i.c
                    • Size 1KB
                    • SHA256 161a5cf30fa8e510af75fb4da216746b48aaa88c698372709033002aceb379f4
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    scardmgr.h
                    • Path C:\Program Files\Windhawk\Compiler\include\scardmgr.h
                    • Size 238B
                    • SHA256 a32207b286686ad5f42d72a5c96308b96c5cb5f42fb2a7deef01843e657c6035
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    windows.foundation.idl
                    • Path C:\Program Files\Windhawk\Compiler\include\windows.foundation.idl
                    • Size 28KB
                    • SHA256 967fd66015d6ab104c880cf8603c3c2ae163da7453fdd20a5fd7ea31e6097b25
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    windhawk-compiler-winrt.7z
                    • Path C:\Program Files\Windhawk\Compiler\include\winrt\windhawk-compiler-winrt.7z
                    • Size 4.2MB
                    • SHA256 43870ab78640c7c62d1825a3d39532f3bf78a4fe3895173a1615f521c82f55b3
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    cerrno.inc
                    • Path C:\Program Files\Windhawk\Compiler\share\libc++\v1\std.compat\cerrno.inc
                    • Size 440B
                    • SHA256 ba6d2968e387be16375170a945d210b42a3f103bb7c1c8ab7c9d3d190c746105
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    cerrno.inc
                    • Path C:\Program Files\Windhawk\Compiler\share\libc++\v1\std\cerrno.inc
                    • Size 461B
                    • SHA256 dde40ec35e6728a5ddcde229fe62f85c6c8d2a573126de3a3603fc8981ae6d2a
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    crt2.o
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\crt2.o
                    • Size 23KB
                    • SHA256 6309c5fb8d4fc9331d564721d8536f9fb234100f8578cba04278d41e428ea760
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    crt2u.o
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\crt2u.o
                    • Size 23KB
                    • SHA256 f5f98a124b12d6146aff8d6c945d28e1da679f0d7054c045410258c0bffabdde
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    dllcrt2.o
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\dllcrt2.o
                    • Size 16KB
                    • SHA256 cc55a30c4e28cea5998ad20c04c1f79a2798061ee3adaf39b844c8eea4b29015
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    gcrt1.o
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\gcrt1.o
                    • Size 2KB
                    • SHA256 9b2b03211475012a5c11bd5f6c30b6156934e35c8a626f22d8b44eefcacb31db
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    libadvapi32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libadvapi32.a
                    • Size 196KB
                    • SHA256 25af7787cd9a365f6485900f0f39ce42b40e90561e41843e3e13cb77a5273270
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libadvpack.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libadvpack.a
                    • Size 18KB
                    • SHA256 a2193ffee289912a5c59acc8c92edd3208f8fb63dc1ffe36a647978f5ec86837
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libatl.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libatl.a
                    • Size 12KB
                    • SHA256 5b5f2fbe5f8c4f959465054394e61334f461813aaf5397f9338773b37900c2fc
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libauthz.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libauthz.a
                    • Size 18KB
                    • SHA256 03ca83d1c9a1551e30b0f238cab20dc300e36162c8d9a3bc1aed27e96f71d283
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libavifil32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libavifil32.a
                    • Size 16KB
                    • SHA256 1ba2ce35de2f4b832ecda6c80df8781e2188d91ef666148b8151413b4b513de6
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libazroles.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libazroles.a
                    • Size 9KB
                    • SHA256 b5490fe769145a053c4369ee01448c9d87bf771fe52b34c1b27aaa83f6fa2f01
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libbcrypt.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libbcrypt.a
                    • Size 15KB
                    • SHA256 6f6c23b3f46ee45e56bea34d6574a9e9f709c1330c02be947e3269dcb43ba20b
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libbluetoothapis.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libbluetoothapis.a
                    • Size 26KB
                    • SHA256 92a555fe5099add8d9bae89640f53f021447372a95a30d50a6b32ace0a1bd622
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libbthprops.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libbthprops.a
                    • Size 17KB
                    • SHA256 6be12b59b44aa28f663c3cad4672e829404a778e7cf83f31ccc1b5beeb130436
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libc++.dll.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libc++.dll.a
                    • Size 914KB
                    • SHA256 170821edb0f5f310e74433c6441e49ad3a86c9f90a7acf57ce87b17b530be332
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libcfgmgr32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libcfgmgr32.a
                    • Size 68KB
                    • SHA256 3e53a46d7235b9e10b434e5fb62c412140741e2446e347bb913b277278f7f8e5
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libchakrart.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libchakrart.a
                    • Size 26KB
                    • SHA256 0379c07e09ed41f7fecf90302cff6308b84fa0816d82432bded07df6cde71a85
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libclusapi.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libclusapi.a
                    • Size 46KB
                    • SHA256 14cddc30c1a9ccf33e67355735c31994937563643a584f558406ec6491a33d8b
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libcomctl32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libcomctl32.a
                    • Size 31KB
                    • SHA256 19b2581e2bf876fefcd7eb98acaad0a41f2af2d1239775597ae1d0e513c1a9c1
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libcomputecore.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libcomputecore.a
                    • Size 17KB
                    • SHA256 fc9f3e66245a93b76577b32702788b74dcb2eb1c65e33874e6bd0cf108332a34
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libcomputenetwork.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libcomputenetwork.a
                    • Size 14KB
                    • SHA256 9a002f3bef874ca1f283ddd0cf9e3496bf1b843c78dd214f76f279ba6a5ad676
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libcoremessaging.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libcoremessaging.a
                    • Size 8KB
                    • SHA256 156836919fd58dea890f8eaab5f1180619fa9638bc9ff0aa38cf15653c9b378e
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libcrypt32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libcrypt32.a
                    • Size 72KB
                    • SHA256 91725c34a74762bf9d403b4bd238ec2484ac600d4a1e61b8bc3fce083042a653
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libcryptsp.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libcryptsp.a
                    • Size 14KB
                    • SHA256 8caafb98350f5363910e993b6556932924ff1388caf7ab209f34c00494dd3ed0
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libcryptui.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libcryptui.a
                    • Size 17KB
                    • SHA256 3b765b11391a96824f82943e86c91cdcc1fbc37bc4d70a3d1c5d0da376655f3e
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libd3d10.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libd3d10.a
                    • Size 8KB
                    • SHA256 b86b43ba9e7d20f4d13989710742760f49b7cd037c9d5182a76a5c047dbc4334
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libd3d11.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libd3d11.a
                    • Size 13KB
                    • SHA256 9224f6abafcdd7835b429d80aef135eed58b633c65400a2e46e113c5531959e1
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libd3dcompiler_34.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libd3dcompiler_34.a
                    • Size 3KB
                    • SHA256 17c968c88091e986eb81761a865971b80b71ec1cdd36d5ba66c95743dec926e2
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    libd3dcompiler_47.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libd3dcompiler_47.a
                    • Size 7KB
                    • SHA256 e2861c19b6439aaa6dcc2f7e013fcdc98541cdaf19c30d480a1bb8c9a76bcb54
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libd3dcsxd_43.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libd3dcsxd_43.a
                    • Size 3KB
                    • SHA256 0b835ea9bd412d99d65d5513ed9ac8127a5cba328c5fb10c62b4a04772adc7ce
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    libd3dx10_43.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libd3dx10_43.a
                    • Size 43KB
                    • SHA256 d8c304c59dc684254daeb4e3c918b7108fa4794da778e04b8e36d9083b89a2e8
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libd3dx11_43.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libd3dx11_43.a
                    • Size 13KB
                    • SHA256 3ac07db7decd083f2af7b62fbe8b518aa874738064ded9a175ce25b54a20440b
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libd3dx9_43.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libd3dx9_43.a
                    • Size 79KB
                    • SHA256 d44450b29b3c7057ccc70781aaa488d8cea6cef7e6017dbb84ba4867f92b3c6d
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libdbghelp.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libdbghelp.a
                    • Size 48KB
                    • SHA256 f407acff38e12cb5227a6bad5f023f31c3705aca0a5339fc9b25ec433342e3cc
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libdevobj.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libdevobj.a
                    • Size 13KB
                    • SHA256 d39333d24aa49189d3672bac83929c6a29aaf45d29b6dfacbbc9ef3393a43b06
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libdhcpcsvc.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libdhcpcsvc.a
                    • Size 16KB
                    • SHA256 897af58413ccace59d8a2440525cb61970e3a534f4c9b2fb490d846185e8a707
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libdhcpsapi.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libdhcpsapi.a
                    • Size 48KB
                    • SHA256 9dad44e0de6e6dd71077a5d46bae575cc8194e874a93b93bcb500a77a6615e3b
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libdiagnosticdataquery.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libdiagnosticdataquery.a
                    • Size 11KB
                    • SHA256 c125e3a5d57c3fe4c288dbf9a7b4b33204742ea1904c5b292252aadf50919e9e
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libdismapi.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libdismapi.a
                    • Size 22KB
                    • SHA256 be8b5f73a080dfae8505497b939e087b8cd0a0d7f872d8c2b6bd36b57af71a6b
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libdnsapi.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libdnsapi.a
                    • Size 66KB
                    • SHA256 b55b46c0a5c1ece2b8a763a127e93c5e446f709cf8819bb3947e7488253f995e
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libduser.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libduser.a
                    • Size 33KB
                    • SHA256 63601a4d6a1bbd27b854d93d46c47586ccfccd1cebda83e8e38f17201da46e23
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libdwmapi.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libdwmapi.a
                    • Size 10KB
                    • SHA256 327d8cc06ca419834fa1ee73e4f8ab5f09e8d63697018bb496aedeb5c46ee80e
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libdxgi.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libdxgi.a
                    • Size 14KB
                    • SHA256 2863a1b25aeef1eef4cbb0d1baf78708ac65f206f0f1db548d04db7419b2f0ce
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libdxva2.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libdxva2.a
                    • Size 10KB
                    • SHA256 6036eaa62c9f976e586db2a275472dbcbe6de435ce0da02e765c6550ecdbf278
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libesent.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libesent.a
                    • Size 79KB
                    • SHA256 1c8c5a4b2e0e6c919b7bb38d19c4953ef6e02ae8778b5ee169f4d2ad2be995c8
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libfeclient.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libfeclient.a
                    • Size 9KB
                    • SHA256 b6d42290bc5c351e3d86b1ad109cf1c678068b96d600e0b1690c635412947e78
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libfwpuclnt.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libfwpuclnt.a
                    • Size 69KB
                    • SHA256 b9a2845567fb99e02c4d889493e0898e75d3aaacc024658ed6165dedf27b5c67
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libgdi32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libgdi32.a
                    • Size 203KB
                    • SHA256 4644a7db189fb5dda4e933803b017a4fe1725d04fe7c2b43540e7f12cbe31e7a
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libglu32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libglu32.a
                    • Size 11KB
                    • SHA256 6f8cfe1484cffc587436b585e30095dc385caf8221fa8c2a9e74dbb269ecd6bc
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libhbaapi.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libhbaapi.a
                    • Size 22KB
                    • SHA256 968266a713d89b9691ae6b5377fc6b40ae0fe337cbddac37762831889ae25cfa
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libhid.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libhid.a
                    • Size 10KB
                    • SHA256 8efdeeb049826c6f0dd1074a171e4aad42f2f8e1cce8959bb131f34146f3cda4
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libhlink.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libhlink.a
                    • Size 8KB
                    • SHA256 f674edd3f88f8efc63905e8bde9e3d724bc371661f79e1a8f73789a190ef01b6
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libicu.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libicu.a
                    • Size 198KB
                    • SHA256 caac4424be135e9a42a05e54ebafc851ecab00c68cd8872df92b2d49e1e98fc9
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libimagehlp.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libimagehlp.a
                    • Size 32KB
                    • SHA256 4d305315246df754995ff1424f4b3bf22e589d972d9d824832ffd46098e9e7b5
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libimm32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libimm32.a
                    • Size 30KB
                    • SHA256 07a742829246b2a61e7b31ba231d6f652d92bdef4849b1a1ef90f11151de0de0
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libimskdic.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libimskdic.a
                    • Size 2KB
                    • SHA256 072f963d0bd8dbbe5d63381f6c0565194b7677901a1aea82fbf5ae139637c219
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    libinetcomm.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libinetcomm.a
                    • Size 26KB
                    • SHA256 f9f1dfab3e139692206ddf6a9d7902d71a0f76871a72aca4e9cb5c72fbff1e73
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libiphlpapi.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libiphlpapi.a
                    • Size 82KB
                    • SHA256 6d83b979e5535280f3e6cff327f7a863a9353dfcd60b20ab062f500613ec4c63
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libipnathlp.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libipnathlp.a
                    • Size 8KB
                    • SHA256 1088e9b8d8c8cf357664deed22d0ffae9b16ed60211a48ed1233bb76c3109de4
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libks.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libks.a
                    • Size 56KB
                    • SHA256 9536ce14e23cb33ee355e461d56145ee6467b138231da0ed176175ca9cf946fd
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libksecdd.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libksecdd.a
                    • Size 24KB
                    • SHA256 ccffe29c97c6a53a03855dc374f6fba3a924a456b7147f67cb90c6b36785f1d3
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libktmw32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libktmw32.a
                    • Size 11KB
                    • SHA256 5bb2e1749f5b0d116d6f327601ad27bf121e40778913fbee6468175ecf5d2f1b
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libmf.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmf.a
                    • Size 22KB
                    • SHA256 f63ddb320f39db73ab0bb1e2b896f81ea59ce522033a01f7752d6d40fcda4b3f
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libmfcore.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmfcore.a
                    • Size 12KB
                    • SHA256 9077e847a650754296587797c51dd7541782540205f23e30924185126966e592
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libmfplat.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmfplat.a
                    • Size 58KB
                    • SHA256 44412128562424fcf60c968efb085d21990a8136bb7f9404db987af86123ca09
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libmfsensorgroup.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmfsensorgroup.a
                    • Size 10KB
                    • SHA256 1e7b18c63ac62a6e950e628a8352bc9e5aae66326562b0cdd1aadd55f33ebadd
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libmincore_downlevel.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmincore_downlevel.a
                    • Size 148KB
                    • SHA256 de3afea73fe0f7159ac2b742464c4141133295357505c94b4535a1fe666e1f1c
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libmmdevapi.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmmdevapi.a
                    • Size 9KB
                    • SHA256 5f63fce2e2fa73d43f8ff7ff050573445f2edf5df348ad060037b3fb67477864
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libmpr.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmpr.a
                    • Size 20KB
                    • SHA256 d4da878b3556363f1b828aeb62013fe8ed75740f88a9fda8cdd02b23407d451e
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libmsacm32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmsacm32.a
                    • Size 9KB
                    • SHA256 e5d2535dc952d9f24a96d365581ca82436231931c7a981de0ed49245e9e95014
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libmsajapi.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmsajapi.a
                    • Size 166KB
                    • SHA256 fe1472ac596c87ed943beee57df6111dfe5e3c0f31f481b97b94245eb8d91a98
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libmscat32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmscat32.a
                    • Size 9KB
                    • SHA256 d08410cc28b3fb459b73bfb52bb01747811c41874b91e97ca15bb559cc94d506
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libmscms.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmscms.a
                    • Size 33KB
                    • SHA256 c579b8d0cc96fb0f7b0f00771f18d1cab38304e6336f15ab3eff61ae52d20ce2
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libmsdrm.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmsdrm.a
                    • Size 21KB
                    • SHA256 8a0b7071c4a7b721dca3cc99df53b40d4efbd7170c7b08e586aef227ae861122
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libmsdtclog.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmsdtclog.a
                    • Size 2KB
                    • SHA256 b70de62979e18ef330916c721e2247704e58ac251f6e7de1271d5a625d8205c4
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    libmsi.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmsi.a
                    • Size 64KB
                    • SHA256 f4bf194ac6b7a34964b87e21caa7a4f362ea41e6ba00eb5d486d9d879d7c2910
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libmsls31.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmsls31.a
                    • Size 17KB
                    • SHA256 a829b192bffc6be95db4a969c7ffdda2ae97cd698f4725dc7c19744827b73fc8
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libmssign32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmssign32.a
                    • Size 8KB
                    • SHA256 53bb88cf18744cd0232ab56a5bc01df3400ce86dcf1c5f423cd244345b325a5c
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libmsvcrt.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmsvcrt.a
                    • Size 1.1MB
                    • SHA256 6e9fa11a5c545e3461b6562be3b75ff1c472ffbd1aa0516968ee10fbd69b5753
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libmsvfw32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmsvfw32.a
                    • Size 10KB
                    • SHA256 42ccfcf531d2cf3a82407082d13bc22b072b0cbacee32cfa87225c9072549e72
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libmswsock.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmswsock.a
                    • Size 14KB
                    • SHA256 2cd4ba8151faf8ec5e01b8d8730d806302f6f9608907c6e0816ef87d942c1ea3
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libncrypt.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libncrypt.a
                    • Size 34KB
                    • SHA256 8f374ec1da73f96e9b7affeb4fbcd9c25408ef93ebe91e8735e477c674a0457a
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libndis.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libndis.a
                    • Size 135KB
                    • SHA256 9930e8471b9fa18aaf40f4e897eb9f4c2187837e40af36a08605f55dc16fc37e
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libnetapi32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libnetapi32.a
                    • Size 83KB
                    • SHA256 347b92f7f4f27bf35d177c1b1787d0cb9bcb4cc8d435395748882ba2e12bbb99
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libnetio.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libnetio.a
                    • Size 128KB
                    • SHA256 61a1d15aa3157d3ff40a0bf9bcd34653b539a7283155b80ed74ad37f1fabd86e
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libnetshell.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libnetshell.a
                    • Size 9KB
                    • SHA256 0168e3ec0eff70a6df4c247368e7e684163c7b62dfef7a356cf9db003de2d43e
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libninput.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libninput.a
                    • Size 9KB
                    • SHA256 351885bad48ba88e7b0ef38b6231968e50cf1bc2fadce8505b974d4594f45778
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libntdsapi.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libntdsapi.a
                    • Size 26KB
                    • SHA256 76d73be49f13783823a40a9e5598018779467c8286d2f89952d77fa9a6e4c6af
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libocmsn.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libocmsn.a
                    • Size 1KB
                    • SHA256 dd5da51c970d96fe588886e3dc394b98174c09e97d36e47ef653328c26913462
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    libodbc32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libodbc32.a
                    • Size 36KB
                    • SHA256 b5a6ac53dfae03361d9c891a223981204f114feba0f3b84c7ca22f84e76058f4
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libodbccp32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libodbccp32.a
                    • Size 13KB
                    • SHA256 d1ede21e269129502a89b5e71cce8d6b604bb8ca1e203b122a46494aaef3da6f
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libodbccu32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libodbccu32.a
                    • Size 8KB
                    • SHA256 23afc827b1598964ca5977acd9f3d468eb42ca18946bae934a6b99b5843aa46e
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libole32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libole32.a
                    • Size 115KB
                    • SHA256 4a1f5ce66035e45713b4bfc30451910f084d2d36ef06e9a52abe8e92f28d50ea
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    liboleaut32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\liboleaut32.a
                    • Size 79KB
                    • SHA256 f72b6362e8ca709b045157d0e3d196671ccee1757f2a06a2edd2d57ae7177fec
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libopengl32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libopengl32.a
                    • Size 68KB
                    • SHA256 aaa61b4758bb44d0b0fc821a688829cfd76f915dd1e1865fe2f3b95426330fd6
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libp2p.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libp2p.a
                    • Size 26KB
                    • SHA256 ba4cbbbe5184a56e1badaadee08af98c1e81445edec6db2281e5f0a1a7682c9f
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libp2pgraph.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libp2pgraph.a
                    • Size 10KB
                    • SHA256 e9525d27891e3105c8f08b7f41b7b5227545ec1ea3c7041b8e2135cc1720898f
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libpcwum.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libpcwum.a
                    • Size 9KB
                    • SHA256 61fd57a52445c629b984a13374e8162ddb2e4fdca041836c8ba62ac8f883a960
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libpdh.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libpdh.a
                    • Size 26KB
                    • SHA256 b14c7a7f8bd88995fc415af82327333e42fbf294513316a0e152d29709e60fe5
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libpowrprof.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libpowrprof.a
                    • Size 36KB
                    • SHA256 a18f4147b06c4a53dc5ec48776f33c3c544ffc01e00d2df375b47bbfec1fee0c
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libprntvpt.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libprntvpt.a
                    • Size 8KB
                    • SHA256 76648ec4756261a12cd90c9acbcb1b3ba9fdd1ba42bd053165bff430b29cff8c
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libpropsys.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libpropsys.a
                    • Size 55KB
                    • SHA256 33d0824305aa2b342c0738084c4d4fdf6c7dfa23c11f7f440b414ce652df6c08
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libquery.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libquery.a
                    • Size 3KB
                    • SHA256 d2c99aac77dd0996dbb7ba07170145e6277e39d7e37e36c951e4f3d368c83b39
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    librastapi.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\librastapi.a
                    • Size 9KB
                    • SHA256 628d475e774ef3b7ddfbf9506ba78d2e77c635f65a4c6b9c7719d3cfd196e665
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libregapi.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libregapi.a
                    • Size 23KB
                    • SHA256 257df9ca06a70c5a5a2c6f9904dd24de25cf81b58b93312ee68de648c34ced70
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libresutils.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libresutils.a
                    • Size 31KB
                    • SHA256 02f421b4772e44bb23ecf34d86bb5778a1e3e2111db85d7de5fe0ac71eb02ddb
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    librpcns4.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\librpcns4.a
                    • Size 15KB
                    • SHA256 8a809a64daf18d79c21346dc8e69f161b3595dc109ca0bd88ba71f7a1c8d0904
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    librpcrt4.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\librpcrt4.a
                    • Size 133KB
                    • SHA256 97539a3c42467ee0d0a7d18546872c5fe0408314c8b936bab5829cf63cc72670
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    librtutils.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\librtutils.a
                    • Size 9KB
                    • SHA256 e4a42057bc92d584f6fc5ac7ad31a0a9eeb04b15d43c9f9195d8a5fab8e25f24
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libruntimeobject.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libruntimeobject.a
                    • Size 26KB
                    • SHA256 c4ec0c81f2504a2582bdfd4f0a40101384102bac91f55ba7d7dd864b3d662c12
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libschannel.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libschannel.a
                    • Size 9KB
                    • SHA256 fdabf841902507e9d1c97a280ca1126150ef7c9c62553394226c6bb555301397
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libsecur32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libsecur32.a
                    • Size 25KB
                    • SHA256 dc1af85f55467df50b62485204b0651b1838bb4950a8a16b41312395a6c187a9
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libsecurity.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libsecurity.a
                    • Size 9KB
                    • SHA256 e212f63345a8ee7961a2c3067bff0ec88bb8d8f4c85eb1e4db9b86bd83fc9cbf
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libsetupapi.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libsetupapi.a
                    • Size 187KB
                    • SHA256 0a37f7e93a2c7443886e2573e3bba18c5b8fc7119ce66aac448a86ebb0b38382
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libshcore.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libshcore.a
                    • Size 21KB
                    • SHA256 41c3be7401620af39e087e705e4fb537561d2741d9f95f5345f1d13a0e78c430
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libshlwapi.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libshlwapi.a
                    • Size 92KB
                    • SHA256 c9c72a101b86ec0b4e3f663c6d025007b67418814abb4f88bc5b34d393ea6ace
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libsnmpapi.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libsnmpapi.a
                    • Size 9KB
                    • SHA256 9af28a2fc15735c7a70388bcaa47cc6dca55a870c7b26d0acc111d01dbf3b53d
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libsqlsrv32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libsqlsrv32.a
                    • Size 18KB
                    • SHA256 526f1e763583dac2755998c2a751434dd0474d0a305db79ab839820177a9b4db
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libsspicli.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libsspicli.a
                    • Size 24KB
                    • SHA256 0711dd47b43281f275088d63e81a0bcf370a0fa059b02a03b6f5a11fec460e01
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libsxs.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libsxs.a
                    • Size 8KB
                    • SHA256 99fecb69bc6c064a81a7287a5e21ec8f9d416cccab3f56f8f49931f81e14ec3b
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libtapi32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libtapi32.a
                    • Size 57KB
                    • SHA256 1f27e746566f0489d46a83e62f868a54e849164d551bf87791aa7850eedfd5a6
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libtdh.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libtdh.a
                    • Size 9KB
                    • SHA256 94cc94d389b173be65fb5a4bbf20f14d704c87194a1ec627e04c3d29b6ef0362
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libuiautomationcore.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libuiautomationcore.a
                    • Size 26KB
                    • SHA256 3eaf2db6cc8ad5193366d7f94698b3b82c55da26ed36b3d0cc160bdb204163fc
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    liburlmon.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\liburlmon.a
                    • Size 30KB
                    • SHA256 0458d24c81ea8a0a7b57a217463c69c3cf9a2082d3a96b84db9966be1bf47531
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libuser32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libuser32.a
                    • Size 203KB
                    • SHA256 6b2bea0a02e6a95bcbb684ff4ede16a4a51c8bd0a55e7e15b81255c4467190bb
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libuserenv.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libuserenv.a
                    • Size 19KB
                    • SHA256 c9d73aedfcbde527e9a41e9c1bb72924bd6fac5e8a4d0cae13483e8b72e2f94b
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libusp10.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libusp10.a
                    • Size 10KB
                    • SHA256 2ec2822645f5e945da1d6825dda39518f1788e8ca010728b49b8a969c72f3caf
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libutildll.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libutildll.a
                    • Size 8KB
                    • SHA256 759514cc13e1263ea3b9ab4ce1ad268b99fd7f7883e05aee836da8273eb0cb14
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libuxtheme.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libuxtheme.a
                    • Size 18KB
                    • SHA256 e24817975c639d550b8784a22c63d6bb2e9a6e441447c29f1795ffa69b7ec3d3
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libvfw32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libvfw32.a
                    • Size 28KB
                    • SHA256 3a4320c737e29e6369195e1388067690720ec75bc5eaf67794e7818e04eb6605
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libw32topl.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libw32topl.a
                    • Size 17KB
                    • SHA256 c694b26710c3ee5bb679247bcb3e5ff441e6c58c8b6df94032753e03f291a7b0
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libwebauthn.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwebauthn.a
                    • Size 16KB
                    • SHA256 0c4fcfdbed0d716c0e9af0d1010c1d6384ce809056f156a3bec5c4a8e55ffc88
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libwebservices.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwebservices.a
                    • Size 41KB
                    • SHA256 c0f10fa9398738c87448766c15b022be365fe4985dce71d428c18e050fd229f7
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libwer.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwer.a
                    • Size 20KB
                    • SHA256 4bd533a50760fb5b91972ce2142c213da16287a83e98be397e8e0d83e767c16e
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libwevtapi.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwevtapi.a
                    • Size 11KB
                    • SHA256 a9431dbeee122cb85fdf564c499b0f40a7f2cbdd1b3a247faf85c5428e186725
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libwimgapi.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwimgapi.a
                    • Size 13KB
                    • SHA256 fdc939350897dd5657dadda55f7256c25d11df4910f557736377008aa7a1289f
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libwindowsapp.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwindowsapp.a
                    • Size 1.4MB
                    • SHA256 db14ac0ccf0aa4d89c3377a12d6ffb8e9e3ad9c5aa9b8f80ba3baa64a94ea56f
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libwinhttp.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwinhttp.a
                    • Size 20KB
                    • SHA256 908a44e05021e5e8c51172b92424fb8348720bdb86ad5051ea13fcbe047b575f
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libwininet.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwininet.a
                    • Size 67KB
                    • SHA256 5cbf33adf13c87f782edc16e698babd554e032f6924f06ea0702d235435de117
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libwinmm.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwinmm.a
                    • Size 41KB
                    • SHA256 0cd8df789cf9224f21abde1824d93864f71160de5a0d43ef591ab79275c4f1a6
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libwinpthread.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwinpthread.a
                    • Size 259KB
                    • SHA256 d9e8068ee35009f892166ca678d7fe3e0a3549d4d82d8baa23848773f17564a4
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libwinscard.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwinscard.a
                    • Size 18KB
                    • SHA256 003c473acf85cc120ba224ce5069df030f740d091594335fb218ac0171b26a8a
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libwinspool.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwinspool.a
                    • Size 42KB
                    • SHA256 0ac7b643f820b246a638229e2da6e3ec37aacecf2fb5fbfd89a294bd6d28e921
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libwintrust.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwintrust.a
                    • Size 39KB
                    • SHA256 c31f0ac628b561ac32c58334555689e2629c63d6a90742df6c7001078cc25faa
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libwinusb.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwinusb.a
                    • Size 9KB
                    • SHA256 0d7a2b164cc60783dc03d7bf6df04d50d389e83e49e845e6e6f7a89d1cf61fd9
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libwlanapi.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwlanapi.a
                    • Size 65KB
                    • SHA256 a7ec69d1777e4e9cc82df0bcec3cf06b2d5cbacb49a034f1d96c7a353602fb63
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libwldap32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwldap32.a
                    • Size 50KB
                    • SHA256 11000c0e26fc8836118d149cedb7ad9559b48ae6995142766ae7fafafa75da33
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libwmi.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwmi.a
                    • Size 10KB
                    • SHA256 b5973846a0e220b1a9c9c5259243aec345cc8cc4286fd407af9acf3d73a147bc
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libwscapi.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwscapi.a
                    • Size 9KB
                    • SHA256 f04d061c1165ea1c900eaf50a55dd0a7e107be495b17b68c6f6c593d94123fcb
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libwsmsvc.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwsmsvc.a
                    • Size 2.0MB
                    • SHA256 a33db083f9041bf495b869fe74936869a36866ef3e4710427498cfd0f03b4a8e
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libwsock32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwsock32.a
                    • Size 14KB
                    • SHA256 a6353640658e71f6aed86318a5e2a2eabb37c96d2dc08073321dbbc16a7f4748
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libwtsapi32.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwtsapi32.a
                    • Size 16KB
                    • SHA256 7e92ac1794f8fea894e4d539f0b7b5d65afe3de775a2f342aa8807ce97674f6a
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libx3daudio1_7.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libx3daudio1_7.a
                    • Size 1KB
                    • SHA256 7e7548928b9afefb6aae6243ea6066e22bca213301da259e4d5a78954b33095b
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    libxapofx1_5.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libxapofx1_5.a
                    • Size 1KB
                    • SHA256 47f64ab4e15b3ae509dbf4683990ed55a4f64cc66b95b231a4b1b7e2e9f5ffc3
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    libxinput1_3.a
                    • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libxinput1_3.a
                    • Size 2KB
                    • SHA256 bcb17e07fc3e7fe653ecfc8bd952b8afa4013304ee61dfcba21a36c337babca2
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    windhawk.dll
                    • Path C:\Program Files\Windhawk\Engine\1.7.3\32\windhawk.dll
                    • Size 905KB
                    • SHA256 67cdaaf26d342b3f2a2a84ea6f7474ac43340711675b66edef34cc3fcee1ea8f
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    windhawk.dll
                    • Path C:\Program Files\Windhawk\Engine\1.7.3\64\windhawk.dll
                    • Size 956KB
                    • SHA256 0aad074caf156200be7a77e4615f9171cea884cde96baf90397366c28c4f10a1
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    engine.ini
                    • Path C:\Program Files\Windhawk\Engine\1.7.3\engine.ini
                    • Size 224B
                    • SHA256 2f26a1ccca3d95df17fab8eabc10fb5044e5aecd82a5ce5c7a83c47ca7baeb0c
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    cpp.code-snippets
                    • Path C:\Program Files\Windhawk\UI\resources\app\extensions\cpp\snippets\cpp.code-snippets
                    • Size 204B
                    • SHA256 e941999dfc8e6150665480f07eb1a2b55593eda8f0835dded52fd630c89ea9f6
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    git-rebase.language-configuration.json
                    • Path C:\Program Files\Windhawk\UI\resources\app\extensions\git-base\languages\git-rebase.language-configuration.json
                    • Size 100B
                    • SHA256 4da287b386da11602d2fa4203dbe4bc6048f7263c5c4a917f95dbbb73394fa7f
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    git.png
                    • Path C:\Program Files\Windhawk\UI\resources\app\extensions\git-base\resources\icons\git.png
                    • Size 2KB
                    • SHA256 a6df2fb8c4b89a8e76c9fbf7b0b9e5d26266c2014a6493f14800d7b4e184bd70
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    ssh-askpass-empty.sh
                    • Path C:\Program Files\Windhawk\UI\resources\app\extensions\git\dist\ssh-askpass-empty.sh
                    • Size 17B
                    • SHA256 2233a17368f4ffdc92f9b6c74b450b7c84e355eae0f90693385887136d1d8c55
                    • MD5 SHA1 SHA512
                    Submit Download

                    status-ignored.svg
                    • Path C:\Program Files\Windhawk\UI\resources\app\extensions\git\resources\icons\light\status-ignored.svg
                    • Size 436B
                    • SHA256 a94b36406274f1a1c65e8fef25fed5616deea8a25bfa9aa143410d5c6ff7cdc7
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    status-renamed.svg
                    • Path C:\Program Files\Windhawk\UI\resources\app\extensions\git\resources\icons\light\status-renamed.svg
                    • Size 436B
                    • SHA256 7aa665b1079a0065b38fe17c42fb6b94b33718c4d31a9146aa82e90c581dda81
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    status-untracked.svg
                    • Path C:\Program Files\Windhawk\UI\resources\app\extensions\git\resources\icons\light\status-untracked.svg
                    • Size 436B
                    • SHA256 d6e875c18b47ad8a9046f8f12d19ad901340edb57ce48f93d054ce29ae5488a4
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    jsonClientMain.js.LICENSE.txt
                    • Path C:\Program Files\Windhawk\UI\resources\app\extensions\json-language-features\client\dist\node\jsonClientMain.js.LICENSE.txt
                    • Size 5KB
                    • SHA256 38ee4192b4a1f7da0535d4f2bd219ab5b108b1d3b6b9871ca00c762464b60701
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    DO_NOT_EDIT.txt
                    • Path C:\Program Files\Windhawk\UI\resources\app\extensions\windhawk\webview\locales\da\DO_NOT_EDIT.txt
                    • Size 176B
                    • SHA256 46cf50bf090de247776fbf1c7ff10936a2e2b65e8127ea7854292068204d893a
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    issueReporter.js
                    • Path C:\Program Files\Windhawk\UI\resources\app\out\vs\code\electron-sandbox\issue\issueReporter.js
                    • Size 42KB
                    • SHA256 9ebbf15f353cbc8f254e1dffc79ebf3fa5139a6d432d56c8c49c1b84f04325b0
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    letterpress-hcDark.svg
                    • Path C:\Program Files\Windhawk\UI\resources\app\out\vs\workbench\browser\parts\editor\media\letterpress-hcDark.svg
                    • Size 4KB
                    • SHA256 12d3449ca9393f66b59f1c20cbaeb10d7d187e0f83df2bfbf0c7d87de646a12d
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    windhawk.exe
                    • Path C:\Program Files\Windhawk\windhawk.exe
                    • Size 815KB
                    • SHA256 52db87dee0160a13cf51e31bee6320da09767582f1f359f8cf9a787d1228bf44
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    windhawk.ini
                    • Path C:\Program Files\Windhawk\windhawk.ini
                    • Size 314B
                    • SHA256 57feabeb0b89b91fa67c66101bef23227ee935e15f9e595449adfb3fd35e8994
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    Windhawk.lnk
                    • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windhawk.lnk
                    • Size 1KB
                    • SHA256 3918dbc0a1835361e104c664fa8de42bd906cd1b1baba556c982ab3b30a36537
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    ~indhawk.tmp
                    • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\~indhawk.tmp
                    • Size 1KB
                    • SHA256 6fa0fb8ca5239e07c5b8792d76dc0ab1804ad4f3bea3ad83effe1d35d1c2442d
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    settings.json
                    • Path C:\ProgramData\Windhawk\EditorWorkspace\.vscode\settings.json
                    • Size 48B
                    • SHA256 6b08de3de12991efefcd1ef3836e862ff02896738ab8281fdb2c11d204c8f2c2
                    • MD5 SHA1 SHA512
                    Submit Download

                    settings.json
                    • Path C:\ProgramData\Windhawk\EditorWorkspace\.vscode\settings.json
                    • Size 48B
                    • SHA256 2119f98b717df1804bfd88374d04b42d930165bf334c9e606701fbfedecd6f7f
                    • MD5 SHA1 SHA512
                    Submit Download

                    settings.json
                    • Path C:\ProgramData\Windhawk\EditorWorkspace\.vscode\settings.json
                    • Size 132B
                    • SHA256 212bf7f1772994c8399eaacee875d378e3ac263e6a4950d117666a4f1dce4f08
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    libc++.whl
                    • Path C:\ProgramData\Windhawk\Engine\Mods\64\libc++.whl
                    • Size 2.0MB
                    • SHA256 74c541f76732d738642072e90f26343e44d66d97bb258db76f2f3bee7e30060c
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libunwind.whl
                    • Path C:\ProgramData\Windhawk\Engine\Mods\64\libunwind.whl
                    • Size 211KB
                    • SHA256 6e6d1e74d17ee361b3f3661faa3d07fa7597257df1cd3dd360719222e54aa36c
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    extensions.json
                    • Path C:\ProgramData\Windhawk\UIData\extensions\extensions.json
                    • Size 2B
                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                    • MD5 SHA1 SHA512
                    Submit Download

                    index
                    • Path C:\ProgramData\Windhawk\UIData\user-data\CachedData\d2c422ca15f1fbc976eed3e02e3392bbb39c5824\chrome\js\index
                    • Size 24B
                    • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                    • MD5 SHA1 SHA512
                    Submit Download

                    temp-index
                    • Path C:\ProgramData\Windhawk\UIData\user-data\CachedData\d2c422ca15f1fbc976eed3e02e3392bbb39c5824\chrome\js\index-dir\temp-index
                    • Size 48B
                    • SHA256 569981114d8ecebe6c1c00292e6a6a953653a74dc775633f84501b589fc04d21
                    • MD5 SHA1 SHA512
                    Submit Download

                    CURRENT
                    • Path C:\ProgramData\Windhawk\UIData\user-data\Local Storage\leveldb\CURRENT
                    • Size 16B
                    • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                    • MD5 SHA1 SHA512
                    Submit Download

                    8a2b4b11-c073-4603-8833-bc9066bb9ffc.tmp
                    • Path C:\ProgramData\Windhawk\UIData\user-data\Network\8a2b4b11-c073-4603-8833-bc9066bb9ffc.tmp
                    • Size 296B
                    • SHA256 62dba7c96198d24b666804d450789c822d0b8994adc790c0b46a8ee7b62fae58
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    Network Persistent State
                    • Path C:\ProgramData\Windhawk\UIData\user-data\Network\Network Persistent State
                    • Size 59B
                    • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    temp-index
                    • Path C:\ProgramData\Windhawk\UIData\user-data\Service Worker\CacheStorage\0e5a29808f75335e5bcf8cc978f441a06bd47ab7\7178814d-2bb4-4a3d-b201-9d4a07b65198\index-dir\temp-index
                    • Size 216B
                    • SHA256 dd0b639665f6d035692c754ef7be4e4e21240f9259236f3affd79799ab87a026
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    the-real-index
                    • Path C:\ProgramData\Windhawk\UIData\user-data\Service Worker\CacheStorage\0e5a29808f75335e5bcf8cc978f441a06bd47ab7\7178814d-2bb4-4a3d-b201-9d4a07b65198\index-dir\the-real-index
                    • Size 48B
                    • SHA256 93e75291e11a26f9d8f10eb30664db398aa25e88290e93a88cab152cd89993be
                    • MD5 SHA1 SHA512
                    Submit Download

                    index.txt
                    • Path C:\ProgramData\Windhawk\UIData\user-data\Service Worker\CacheStorage\0e5a29808f75335e5bcf8cc978f441a06bd47ab7\index.txt
                    • Size 150B
                    • SHA256 41598cb756280a47ec680aff3bbdbf6a3a7cd0c97667ebf4c8ffd0b7cbc58875
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    index.txt.tmp
                    • Path C:\ProgramData\Windhawk\UIData\user-data\Service Worker\CacheStorage\0e5a29808f75335e5bcf8cc978f441a06bd47ab7\index.txt.tmp
                    • Size 146B
                    • SHA256 678fd0b72e187e4cd5edd319a21178237766f9e955c6452bc634d5c3db401e29
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    MANIFEST-000001
                    • Path C:\ProgramData\Windhawk\UIData\user-data\Service Worker\Database\MANIFEST-000001
                    • Size 41B
                    • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                    • MD5 SHA1 SHA512
                    Submit Download

                    temp-index
                    • Path C:\ProgramData\Windhawk\UIData\user-data\Service Worker\ScriptCache\index-dir\temp-index
                    • Size 72B
                    • SHA256 47089b3b7f7e7e367a41d4bd2b7f22fa5d3f71f082490d43a5ba010fb373d3c8
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    the-real-index
                    • Path C:\ProgramData\Windhawk\UIData\user-data\Service Worker\ScriptCache\index-dir\the-real-index
                    • Size 72B
                    • SHA256 179ae68cfa6388c641085f32459ac0a9129223d3bcc6aa28d6592e1d6df0d7e7
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    storage.json
                    • Path C:\ProgramData\Windhawk\UIData\user-data\User\globalStorage\storage.json
                    • Size 1KB
                    • SHA256 f38c18b65b2dc3ff81eb7b5655c91df1cfa45471c0d0655a3607d9c4454abef1
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    machineid
                    • Path C:\ProgramData\Windhawk\UIData\user-data\machineid
                    • Size 36B
                    • SHA256 88eaf0c424c73805a98cf7ddd39a4bf85974fb9541a0452d86ddd58fe195fd7b
                    • MD5 SHA1 SHA512
                    Submit Download

                    77EC63BDA74BD0D0E0426DC8F8008506
                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
                    • Size 330B
                    • SHA256 c0a9b84a2e658e67662debf3314088dc1bdd5b8976c68d83e4ed90bdf296d5eb
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    FB0D848F74F70BB2EAA93746D24D9749
                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\MetaData\FB0D848F74F70BB2EAA93746D24D9749
                    • Size 330B
                    • SHA256 cea89bfc66a2b47a0d95d5673fc700f41f01bf9d3aac6925bb6ac77b063a326d
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    eventbeacons.dat.~tmp
                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\338388\eventbeacons.dat.~tmp
                    • Size 601B
                    • SHA256 ed3aceff17664a46a4c8e7ccb93236dc0ab3b4c00d9e300d893d509ab221198b
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    eventbeacons.dat.~tmp
                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\338388\eventbeacons.dat.~tmp
                    • Size 1KB
                    • SHA256 279f55fee8ef1002ed9b76b6a22443f01632eeea2e93e5fccfdc00a060fae128
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    imprbeacons.dat.~tmp
                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\338388\imprbeacons.dat.~tmp
                    • Size 1KB
                    • SHA256 9de93d34272d80a004cb985f3edc32e72f0470fa25914f1df161e12431d45633
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    1791029519.~tmp
                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\338389\1791029519.~tmp
                    • Size 336B
                    • SHA256 86b1187de1ea5b5396b2cd0a8978be73e7d9759ebd20e0df61d4cce1f85aaa3f
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    1791029852.~tmp
                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\338389\1791029852.~tmp
                    • Size 336B
                    • SHA256 0328612a812782dafbeabb680f11c295afa87f03e6df878c1d86fd4df309b706
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    8784a9671b6d44a59cc5b67f12c938bb_1.~tmp
                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\280815\8784a9671b6d44a59cc5b67f12c938bb_1.~tmp
                    • Size 1KB
                    • SHA256 22b05d46197fd112dd2f6076845f99d9069f7856b673ae4e53f227575ad54253
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    bb0a9a6873a440f89ef0082b98079691_1.~tmp
                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\338388\bb0a9a6873a440f89ef0082b98079691_1.~tmp
                    • Size 3KB
                    • SHA256 fe8a08a3a38f5cbb54591241d7d76093581b745e1b5e94126ad4a46b9a90da77
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    37aa15697c294c9a9af41b50565b5ef6_1.~tmp
                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\88000045\37aa15697c294c9a9af41b50565b5ef6_1.~tmp
                    • Size 1KB
                    • SHA256 08cb798a8f078e0235e0c644ecc5551a227c18b10159b86577a82e0e35af788a
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    0.0.filtertrie.intermediate.txt
                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{b39451e6-d8f2-4139-85bd-c8409a045563}\0.0.filtertrie.intermediate.txt
                    • Size 29KB
                    • SHA256 c2d267d17862e082429e690eef76772cf0d79b38485c42d927c61785cc6ed12e
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    0.1.filtertrie.intermediate.txt
                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{b39451e6-d8f2-4139-85bd-c8409a045563}\0.1.filtertrie.intermediate.txt
                    • Size 5B
                    • SHA256 8e1e6a3d56796a245d0c7b0849548932fee803bbdb03f6e289495830e017f14c
                    • MD5 SHA1 SHA512
                    Submit Download

                    0.2.filtertrie.intermediate.txt
                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{b39451e6-d8f2-4139-85bd-c8409a045563}\0.2.filtertrie.intermediate.txt
                    • Size 5B
                    • SHA256 d65b6a3bf11a27a1ced1f7e98082246e40cf01289fd47fe4a5ed46c221f2f73f
                    • MD5 SHA1 SHA512
                    Submit Download

                    Apps.ft
                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{b39451e6-d8f2-4139-85bd-c8409a045563}\Apps.ft
                    • Size 39KB
                    • SHA256 11f47bf010e51d837ffe7d07f686d1aff58d55df5d3c9045e9f64aa3658c3bd1
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    Apps.index
                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{b39451e6-d8f2-4139-85bd-c8409a045563}\Apps.index
                    • Size 1.0MB
                    • SHA256 1f0ae94ec94fc97e33c725b8bd4954dbb40b277f8a978d63f31dc048cc2ff6f0
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    AppCache134355031150202677.txt.~tmp
                    • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134355031150202677.txt.~tmp
                    • Size 79KB
                    • SHA256 4274e07232c0c01eca9d1cfac3c4a058ee9b81d386c902043b963bfa58a581cf
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    __PSScriptPolicyTest_ei1yfv3u.3ul.ps1
                    • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_ei1yfv3u.3ul.ps1
                    • Size 60B
                    • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    AccessControl.dll
                    • Path C:\Users\Admin\AppData\Local\Temp\nsg1380.tmp\AccessControl.dll
                    • Size 15KB
                    • SHA256 5fd5d8aec97cffaad9b7df6371b348d436cf1401e86fab614dc4cb8575428e52
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    ApplicationID.dll
                    • Path C:\Users\Admin\AppData\Local\Temp\nsg1380.tmp\ApplicationID.dll
                    • Size 198KB
                    • SHA256 f6851dcbf0a39edecd8a46564bc455e5273736c3dbcb02b954c201c79ccdf117
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    INetC.dll
                    • Path C:\Users\Admin\AppData\Local\Temp\nsg1380.tmp\INetC.dll
                    • Size 25KB
                    • SHA256 85e03805f90f72257dd41bfdaa186237218bbb0ec410ad3b6576a88ea11dccb9
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    LangDLL.dll
                    • Path C:\Users\Admin\AppData\Local\Temp\nsg1380.tmp\LangDLL.dll
                    • Size 5KB
                    • SHA256 4cf25411f28f639f72156c24b0f66ea42f5aee5973f6c137d901da6ae42d5b7e
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    SimpleSC.dll
                    • Path C:\Users\Admin\AppData\Local\Temp\nsg1380.tmp\SimpleSC.dll
                    • Size 1.1MB
                    • SHA256 1620cdf739f459d1d83411f93648f29dcf947a910cc761e85ac79a69639d127d
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    System.dll
                    • Path C:\Users\Admin\AppData\Local\Temp\nsg1380.tmp\System.dll
                    • Size 12KB
                    • SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    nsDialogs.dll
                    • Path C:\Users\Admin\AppData\Local\Temp\nsg1380.tmp\nsDialogs.dll
                    • Size 9KB
                    • SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    nsExec.dll
                    • Path C:\Users\Admin\AppData\Local\Temp\nsg1380.tmp\nsExec.dll
                    • Size 7KB
                    • SHA256 b121689861b506dbc9c3797b49bc8a90d555cb7db58cb959165cc758391c00bb
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    nsis7z.dll
                    • Path C:\Users\Admin\AppData\Local\Temp\nsg1380.tmp\nsis7z.dll
                    • Size 424KB
                    • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    default.dic
                    • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                    • Size 2B
                    • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                    • MD5 SHA1 SHA512
                    Submit Download

                    Windhawk.lnk
                    • Path C:\Users\Public\Desktop\Windhawk.lnk
                    • Size 1KB
                    • SHA256 e678b47acf7f7064b35a84a12f2c3f5b27748b649d3d555528c7f3980390e5fa
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    ~indhawk.tmp
                    • Path C:\Users\Public\Desktop\~indhawk.tmp
                    • Size 1KB
                    • SHA256 5a4fb9c688abe428904b6a1c4099cc6f666e0de43ea16eeac33f9ab125cb184f
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    Schedule Maintenance Work
                    • Path C:\Windows\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Maintenance Work
                    • Size 2KB
                    • SHA256 129d0b993cd3858af5b7e87fdf74d8e59e6f2110184b5c905df8f5f6f2c39d8b
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    Schedule Wake To Work
                    • Path C:\Windows\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Wake To Work
                    • Size 2KB
                    • SHA256 98c054088df4957e8d6361fd2539c219bcf35f8a524aad8f5d1a95f218e990e9
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    Schedule Wake To Work
                    • Path C:\Windows\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Wake To Work
                    • Size 2KB
                    • SHA256 727c9e7b91e144e453d5b32e18f12508ee84dabe71bc852941d9c9b4923f9e02
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    Schedule Work
                    • Path C:\Windows\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Work
                    • Size 2KB
                    • SHA256 55f203d6b40a39a6beba9dd3a2cb9034284f49578009835dd4f0f8e1db6ebe2f
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    Schedule Work
                    • Path C:\Windows\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Work
                    • Size 2KB
                    • SHA256 a1106ed0845cd438e074344e0fe296dc10ee121a0179e09398eaaea2357c614a
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    Scheduled Start
                    • Path C:\Windows\System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start
                    • Size 5KB
                    • SHA256 0e87af63668ae303e79f8520a414f6450190351f49e084b9d29e1117b60b4f90
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    WindhawkRunUITask
                    • Path C:\Windows\System32\Tasks\WindhawkRunUITask
                    • Size 2KB
                    • SHA256 10b198979ca99ca5bb387af5684014227687a00cf9e0ff71ea8a0ccfcf8250fc
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    WindhawkUpdateTask
                    • Path C:\Windows\System32\Tasks\WindhawkUpdateTask
                    • Size 3KB
                    • SHA256 e862b1b44a7cf126e89ad8bce88be2fd16681f5cd95477c11859dcfb7b6013f3
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    77EC63BDA74BD0D0E0426DC8F8008506
                    • Path C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
                    • Size 330B
                    • SHA256 ff1aef10e534593dfa1f7548a564b8512eb27eb83392fb8c1f4d7acf4c968cab
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    FB0D848F74F70BB2EAA93746D24D9749
                    • Path C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FB0D848F74F70BB2EAA93746D24D9749
                    • Size 330B
                    • SHA256 1ae910f86e36a531cc12f25da3d55e655e7a965d49b9aef1c7030fd30f366407
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    memory/220-18379-0x0000000005750000-0x0000000005AA4000-memory.dmp
                    Download

                    memory/220-18326-0x0000000004770000-0x00000000047A6000-memory.dmp
                    Download

                    memory/220-18369-0x0000000005670000-0x00000000056D6000-memory.dmp
                    Download

                    memory/220-18470-0x0000000006270000-0x000000000628A000-memory.dmp
                    Download

                    memory/220-18370-0x00000000056E0000-0x0000000005746000-memory.dmp
                    Download

                    memory/220-18469-0x0000000007680000-0x0000000007CFA000-memory.dmp
                    Download

                    memory/220-18332-0x0000000004E10000-0x0000000005438000-memory.dmp
                    Download

                    memory/220-18381-0x0000000005D40000-0x0000000005D5E000-memory.dmp
                    Download

                    memory/220-18368-0x0000000004D90000-0x0000000004DB2000-memory.dmp
                    Download

                    memory/220-18382-0x0000000005D70000-0x0000000005DBC000-memory.dmp
                    Download

                    memory/604-18051-0x00000000354D0000-0x00000000354D1000-memory.dmp
                    Download

                    memory/604-18081-0x00007FFE1C8E0000-0x00007FFE1C8F0000-memory.dmp
                    Download

                    memory/668-18196-0x000000003B420000-0x000000003B421000-memory.dmp
                    Download

                    memory/760-18134-0x0000000030680000-0x0000000030681000-memory.dmp
                    Download

                    memory/788-18055-0x000000003A8D0000-0x000000003A8D1000-memory.dmp
                    Download

                    memory/868-18057-0x000000002FE50000-0x000000002FE51000-memory.dmp
                    Download

                    memory/948-18059-0x00000000320D0000-0x00000000320D1000-memory.dmp
                    Download

                    memory/1000-18061-0x0000000000790000-0x0000000000791000-memory.dmp
                    Download

                    memory/1064-18063-0x00000000101A0000-0x00000000101A1000-memory.dmp
                    Download

                    memory/1084-18065-0x000000001CD20000-0x000000001CD21000-memory.dmp
                    Download

                    memory/1168-18067-0x0000000001640000-0x0000000001641000-memory.dmp
                    Download

                    memory/1176-18069-0x00000000342A0000-0x00000000342A1000-memory.dmp
                    Download

                    memory/1188-18071-0x0000000004290000-0x0000000004291000-memory.dmp
                    Download

                    memory/1196-18073-0x00000000000B0000-0x00000000000B1000-memory.dmp
                    Download

                    memory/1280-18075-0x000000003C270000-0x000000003C271000-memory.dmp
                    Download

                    memory/1336-18077-0x000000001BF70000-0x000000001BF71000-memory.dmp
                    Download

                    memory/1384-18079-0x0000000010720000-0x0000000010721000-memory.dmp
                    Download

                    memory/1396-18082-0x000000002B460000-0x000000002B461000-memory.dmp
                    Download

                    memory/1440-18084-0x0000000027AD0000-0x0000000027AD1000-memory.dmp
                    Download

                    memory/1484-18086-0x0000000039550000-0x0000000039551000-memory.dmp
                    Download

                    memory/1656-18182-0x0000000008130000-0x0000000008131000-memory.dmp
                    Download

                    memory/1728-18088-0x0000000028B50000-0x0000000028B51000-memory.dmp
                    Download

                    memory/1736-18090-0x000000001EA10000-0x000000001EA11000-memory.dmp
                    Download

                    memory/1744-18092-0x00000000090A0000-0x00000000090A1000-memory.dmp
                    Download

                    memory/1752-18104-0x000000001EC30000-0x000000001EC31000-memory.dmp
                    Download

                    memory/1760-18102-0x0000000035DB0000-0x0000000035DB1000-memory.dmp
                    Download

                    memory/1800-18194-0x0000000012890000-0x0000000012891000-memory.dmp
                    Download

                    memory/1856-18094-0x000000000F6F0000-0x000000000F6F1000-memory.dmp
                    Download

                    memory/1888-18096-0x000000002FBF0000-0x000000002FBF1000-memory.dmp
                    Download

                    memory/1908-18098-0x00000000273B0000-0x00000000273B1000-memory.dmp
                    Download

                    memory/1932-18106-0x000000003B130000-0x000000003B131000-memory.dmp
                    Download

                    memory/1960-18188-0x00000000309D0000-0x00000000309D1000-memory.dmp
                    Download

                    memory/1996-18100-0x00000000184A0000-0x00000000184A1000-memory.dmp
                    Download

                    memory/2116-18108-0x000000002CB80000-0x000000002CB81000-memory.dmp
                    Download

                    memory/2252-18110-0x0000000031000000-0x0000000031001000-memory.dmp
                    Download

                    memory/2280-18112-0x000000003FB00000-0x000000003FB01000-memory.dmp
                    Download

                    memory/2296-18178-0x000000001FF40000-0x000000001FF41000-memory.dmp
                    Download

                    memory/2320-18114-0x000000003D310000-0x000000003D311000-memory.dmp
                    Download

                    memory/2388-18116-0x0000000000260000-0x0000000000261000-memory.dmp
                    Download

                    memory/2584-18118-0x0000000017E90000-0x0000000017E91000-memory.dmp
                    Download

                    memory/2592-18120-0x00000000066A0000-0x00000000066A1000-memory.dmp
                    Download

                    memory/2756-18122-0x0000000027AD0000-0x0000000027AD1000-memory.dmp
                    Download

                    memory/2788-18124-0x0000000024150000-0x0000000024151000-memory.dmp
                    Download

                    memory/2828-18126-0x0000000024480000-0x0000000024481000-memory.dmp
                    Download

                    memory/2836-18128-0x0000000007180000-0x0000000007181000-memory.dmp
                    Download

                    memory/2952-18130-0x0000000024FE0000-0x0000000024FE1000-memory.dmp
                    Download

                    memory/3024-18132-0x0000000022A80000-0x0000000022A81000-memory.dmp
                    Download

                    memory/3196-18136-0x000000002ED10000-0x000000002ED11000-memory.dmp
                    Download

                    memory/3288-18138-0x0000000002950000-0x0000000002951000-memory.dmp
                    Download

                    memory/3412-18140-0x0000000025810000-0x0000000025811000-memory.dmp
                    Download

                    memory/3440-18045-0x0000000003070000-0x000000000318C000-memory.dmp
                    Download

                    memory/3440-18031-0x0000000003070000-0x000000000318C000-memory.dmp
                    Download

                    memory/3596-18142-0x00000000364C0000-0x00000000364C1000-memory.dmp
                    Download

                    memory/3608-18184-0x0000000029980000-0x0000000029981000-memory.dmp
                    Download

                    memory/3680-18190-0x000000002C360000-0x000000002C361000-memory.dmp
                    Download

                    memory/3688-18144-0x000000000D650000-0x000000000D651000-memory.dmp
                    Download

                    memory/3752-18146-0x0000000005C20000-0x0000000005C21000-memory.dmp
                    Download

                    memory/3820-18186-0x000000002E3E0000-0x000000002E3E1000-memory.dmp
                    Download

                    memory/3832-18170-0x0000000016DB0000-0x0000000016DB1000-memory.dmp
                    Download

                    memory/4056-18172-0x0000000033D80000-0x0000000033D81000-memory.dmp
                    Download

                    memory/4612-18174-0x0000000038730000-0x0000000038731000-memory.dmp
                    Download

                    memory/4780-18180-0x000000000E160000-0x000000000E161000-memory.dmp
                    Download

                    memory/4852-18176-0x000000001E650000-0x000000001E651000-memory.dmp
                    Download

                    memory/4952-18192-0x000000001A2A0000-0x000000001A2A1000-memory.dmp
                    Download