Overview

overview

10

Static

static

3

windhawk_setup.exe

windows10-2004-x64

10

windhawk_setup.exe

windows11-ltsc_2024-x64

10

Compiler/i...ing.js

windows10-2004-x64

3

Compiler/i...ing.js

windows11-ltsc_2024-x64

3

Compiler/x...++.dll

windows10-2004-x64

1

Compiler/x...++.dll

windows11-ltsc_2024-x64

1

Compiler/x...nd.dll

windows10-2004-x64

1

Compiler/x...nd.dll

windows11-ltsc_2024-x64

1

Compiler/x...im.dll

windows10-2004-x64

1

Compiler/x...im.dll

windows11-ltsc_2024-x64

1

Engine/$R1...wk.dll

windows10-2004-x64

3

Engine/$R1...wk.dll

windows11-ltsc_2024-x64

3

Engine/$R1...wk.dll

windows10-2004-x64

3

Engine/$R1...wk.dll

windows10-2004-x64

3

Engine/$R1...wk.dll

windows11-ltsc_2024-x64

3

Engine/$R1...wk.dll

windows10-2004-x64

5

Engine/$R1...wk.dll

windows11-ltsc_2024-x64

5

Engine/$R1...wk.dll

windows10-2004-x64

1

Engine/$R1...wk.dll

windows10-2004-x64

1

Engine/$R1...wk.dll

windows11-ltsc_2024-x64

6

Engine/$R1...wk.dll

windows10-2004-x64

1

Engine/$R1...wk.dll

windows11-ltsc_2024-x64

1

Engine/$R1...wk.dll

windows10-2004-x64

1

Engine/$R1...wk.dll

windows11-ltsc_2024-x64

8

Engine/$R1...wk.dll

windows10-2004-x64

1

Engine/$R1...wk.dll

windows11-ltsc_2024-x64

1

UI/resourc...dle.js

windows10-2004-x64

3

UI/resourc...dle.js

windows11-ltsc_2024-x64

3

UI/resourc...on.svg

windows10-2004-x64

3

UI/resourc...on.svg

windows11-ltsc_2024-x64

7

UI/resourc...ck.svg

windows10-2004-x64

3

UI/resourc...ck.svg

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    900s
  • max time network
    465s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    03/10/2026, 12:08

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    windhawk_setup.exe
  • Size 11.0MB
  • Sample261003-payp7sda86
  • SHA256 5116cc1703384aac88b8d7a3b57f172aea5da32b6df7355fb2f8247d23813c8f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
defense_evasiondiscoveryexecutionpersistenceprivilege_escalation

Malware Config

Signatures

  • Suspicious use of NtCreateUserProcessOtherParentProcess 1 TTPs 1 IoCs
    defense_evasionprivilege_escalation
  • Indicator Removal: Clear Windows Event Logs 1 TTPs 3 IoCs

    Clear Windows Event Logs to hide the activity of an intrusion.

    defense_evasion
  • Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

    Using powershell.exe command.

    execution
  • Enumerates connected drives 3 TTPs 1 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Drops file in System32 directory 11 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 2 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • Reads the TCP/IP host and domain name from the registry 1 TTPs 14 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 28 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks processor information in registry 2 TTPs 32 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies data under HKEY_USERS 16 IoCs
  • Modifies registry class 50 IoCs
  • Scheduled Task/Job: Scheduled Task 1 TTPs 2 IoCs

    Schtasks is often used by malware for persistence or to perform post-infection execution.

    persistenceexecution
  • Suspicious behavior: EnumeratesProcesses 13 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 5 IoCs
  • Suspicious use of UnmapMainImage 1 TTPs 1 IoCs
    defense_evasionprivilege_escalation
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Windows\system32\winlogon.exe
    winlogon.exe
    1⤵
    • Executes dropped EXE
    PID:740
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch -p
    1⤵
    • Executes dropped EXE
    • Modifies registry class
    PID:940
    • C:\Windows\System32\RuntimeBroker.exe
      C:\Windows\System32\RuntimeBroker.exe -Embedding
      2⤵
      • Executes dropped EXE
      • Checks processor information in registry
      PID:4360
    • C:\Windows\System32\RuntimeBroker.exe
      C:\Windows\System32\RuntimeBroker.exe -Embedding
      2⤵
      • Executes dropped EXE
      PID:4432
    • C:\Windows\system32\DllHost.exe
      C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
      2⤵
        PID:5116
      • C:\Windows\system32\DllHost.exe
        C:\Windows\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
        2⤵
          PID:5188
        • C:\Windows\System32\smartscreen.exe
          C:\Windows\System32\smartscreen.exe -Embedding
          2⤵
          • Executes dropped EXE
          PID:5256
        • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
          "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
          2⤵
            PID:5016
          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
            2⤵
            • Executes dropped EXE
            PID:5320
          • C:\Windows\system32\DllHost.exe
            C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
            2⤵
            • Loads dropped DLL
            PID:3228
          • C:\Windows\system32\backgroundTaskHost.exe
            "C:\Windows\system32\backgroundTaskHost.exe" -ServerName:OobeHost.AppXdcwkjpb46w3zw4hbmx5jfxajhymjka0d.mca
            2⤵
            • Modifies registry class
            PID:9064
          • C:\Windows\system32\backgroundTaskHost.exe
            "C:\Windows\system32\backgroundTaskHost.exe" -ServerName:Global.IrisService.AppXwt29n3t7x7q6fgyrrbbqxwzkqjfjaw4y.mca
            2⤵
            • Modifies registry class
            PID:4944
          • C:\Windows\system32\backgroundTaskHost.exe
            "C:\Windows\system32\backgroundTaskHost.exe" -ServerName:Global.DesktopSpotlight.AppXz2j21w56bgxkgsjhtn7zkjsepq96erz2.mca
            2⤵
              PID:1220
            • C:\Windows\system32\backgroundTaskHost.exe
              "C:\Windows\system32\backgroundTaskHost.exe" -ServerName:Global.RulesEngine.AppXgphnekvm0vv49drvfehh4b6kyf6ckafp.mca
              2⤵
              • Modifies registry class
              PID:5460
            • C:\Windows\system32\backgroundTaskHost.exe
              "C:\Windows\system32\backgroundTaskHost.exe" -ServerName:WebExperienceHost.AppXt2rk6m02ana976jna04hdq35jfnzy7f7.mca
              2⤵
              • Modifies registry class
              PID:2772
            • C:\Windows\System32\RuntimeBroker.exe
              C:\Windows\System32\RuntimeBroker.exe -Embedding
              2⤵
              • Checks processor information in registry
              PID:6096
            • C:\Windows\system32\wbem\wmiprvse.exe
              C:\Windows\system32\wbem\wmiprvse.exe -secured -Embedding
              2⤵
                PID:1112
              • C:\Windows\System32\smartscreen.exe
                C:\Windows\System32\smartscreen.exe -Embedding
                2⤵
                  PID:8460
                • C:\Windows\System32\SecurityHealthHost.exe
                  \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
                  2⤵
                    PID:3400
                • C:\Windows\System32\WUDFHost.exe
                  "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-8c1cc30c-0ae3-4c4a-812e-84d0b1c3b842 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-a7bf9048-1462-40be-b901-2112ecdb1e40 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-b11760ba-b0e0-4d63-b39d-c4bc04c9891c -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-d8a09f4f-fd9a-46e1-8cac-861a3b466399 -LifetimeId:e2eab0ad-5992-426e-8c0d-d25b607326ff -DeviceGroupId:WudfDefaultDevicePool -HostArg:0
                  1⤵
                  • Executes dropped EXE
                  PID:360
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k RPCSS -p
                  1⤵
                  • Executes dropped EXE
                  PID:672
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k DcomLaunch -p -s LSM
                  1⤵
                  • Executes dropped EXE
                  PID:1032
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k NetworkService -p
                  1⤵
                  • Drops file in System32 directory
                  • Loads dropped DLL
                  • Suspicious use of UnmapMainImage
                  PID:1116
                • C:\Windows\System32\svchost.exe
                  C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s lmhosts
                  1⤵
                  • Executes dropped EXE
                  PID:1272
                • C:\Windows\System32\svchost.exe
                  C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService
                  1⤵
                  • Executes dropped EXE
                  PID:1352
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s TimeBrokerSvc
                  1⤵
                  • Executes dropped EXE
                  PID:1364
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork -p
                  1⤵
                  • Executes dropped EXE
                  PID:1468
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k LocalService -p -s nsi
                  1⤵
                  • Executes dropped EXE
                  PID:1588
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DisplayEnhancementService
                  1⤵
                  • Executes dropped EXE
                  PID:1600
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k netsvcs -p -s Schedule
                  1⤵
                  • Drops file in System32 directory
                  • Executes dropped EXE
                  PID:1696
                  • C:\Program Files\Windhawk\windhawk.exe
                    "C:\Program Files\Windhawk\windhawk.exe" -check-for-updates
                    2⤵
                    • Reads the TCP/IP host and domain name from the registry
                    • System Location Discovery: System Language Discovery
                    PID:7752
                • C:\Windows\System32\svchost.exe
                  C:\Windows\System32\svchost.exe -k netprofm -p -s netprofm
                  1⤵
                  • Executes dropped EXE
                  PID:1740
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k LocalService -p -s DispBrokerDesktopSvc
                  1⤵
                  • Executes dropped EXE
                  PID:1752
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k UserProfileService -p -s ProfSvc
                  1⤵
                  • Executes dropped EXE
                  PID:1784
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k netsvcs -p -s UserManager
                  1⤵
                  • Executes dropped EXE
                  PID:2000
                  • C:\Windows\system32\sihost.exe
                    sihost.exe
                    2⤵
                    • Executes dropped EXE
                    PID:2828
                    • C:\Windows\explorer.exe
                      explorer.exe /LOADSAVEDWINDOWS
                      3⤵
                      • Executes dropped EXE
                      • Suspicious behavior: GetForegroundWindowSpam
                      • Suspicious use of AdjustPrivilegeToken
                      PID:4976
                      • C:\Users\Admin\AppData\Local\Temp\windhawk_setup.exe
                        "C:\Users\Admin\AppData\Local\Temp\windhawk_setup.exe"
                        4⤵
                        • Suspicious use of NtCreateUserProcessOtherParentProcess
                        • Drops file in Program Files directory
                        • Loads dropped DLL
                        • Reads the TCP/IP host and domain name from the registry
                        • System Location Discovery: System Language Discovery
                        • Suspicious use of AdjustPrivilegeToken
                        PID:5080
                        • C:\Windows\SysWOW64\schtasks.exe
                          schtasks /delete /tn WindhawkRunUITask /f
                          5⤵
                          • Loads dropped DLL
                          • System Location Discovery: System Language Discovery
                          PID:9204
                        • C:\Windows\SysWOW64\schtasks.exe
                          schtasks /create /tn WindhawkRunUITask /xml "C:\Users\Admin\AppData\Local\Temp\nsuDC4.tmp\WindhawkRunUITask.xml"
                          5⤵
                          • Loads dropped DLL
                          • System Location Discovery: System Language Discovery
                          • Scheduled Task/Job: Scheduled Task
                          PID:4128
                        • C:\Windows\SysWOW64\cmd.exe
                          "C:\Windows\system32\cmd.exe" /S /C "powershell -ExecutionPolicy Bypass -Command "& {$ErrorActionPreference = \"Stop\";$scheduler = New-Object -ComObject \"Schedule.Service\";$scheduler.Connect();$task = $scheduler.GetFolder(\"\").GetTask(\"WindhawkRunUITask\");$sec = $task.GetSecurityDescriptor(0xF);$sec = $sec + '(A;;GRGX;;;AU)';$task.SetSecurityDescriptor($sec, 0)}" -FFFeatureOff"
                          5⤵
                          • Loads dropped DLL
                          • Executes a command shell one-liner
                          • System Location Discovery: System Language Discovery
                          PID:3024
                          • C:\Windows\System32\Conhost.exe
                            \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                            6⤵
                            • Loads dropped DLL
                            PID:2772
                          • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                            powershell -ExecutionPolicy Bypass -Command "& {$ErrorActionPreference = \"Stop\";$scheduler = New-Object -ComObject \"Schedule.Service\";$scheduler.Connect();$task = $scheduler.GetFolder(\"\").GetTask(\"WindhawkRunUITask\");$sec = $task.GetSecurityDescriptor(0xF);$sec = $sec + '(A;;GRGX;;;AU)';$task.SetSecurityDescriptor($sec, 0)}" -FFFeatureOff
                            6⤵
                            • Command and Scripting Interpreter: PowerShell
                            • Enumerates connected drives
                            • Loads dropped DLL
                            • System Location Discovery: System Language Discovery
                            • Suspicious behavior: EnumeratesProcesses
                            • Suspicious use of AdjustPrivilegeToken
                            PID:7780
                        • C:\Windows\SysWOW64\schtasks.exe
                          schtasks /delete /tn WindhawkUpdateTask /f
                          5⤵
                          • Loads dropped DLL
                          • System Location Discovery: System Language Discovery
                          PID:1204
                        • C:\Windows\SysWOW64\schtasks.exe
                          schtasks /create /tn WindhawkUpdateTask /xml "C:\Users\Admin\AppData\Local\Temp\nsuDC4.tmp\WindhawkUpdateTask.xml"
                          5⤵
                          • Loads dropped DLL
                          • System Location Discovery: System Language Discovery
                          • Scheduled Task/Job: Scheduled Task
                          PID:2020
                      • C:\Program Files\Windhawk\windhawk.exe
                        "C:\Program Files\Windhawk\windhawk.exe"
                        4⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • System Location Discovery: System Language Discovery
                        PID:4120
                        • C:\Program Files\Windhawk\UI\VSCodium.exe
                          "C:\Program Files\Windhawk\UI\VSCodium.exe" "C:\ProgramData\Windhawk\EditorWorkspace" --locale=en --no-sandbox --disable-gpu-sandbox
                          5⤵
                          • Executes dropped EXE
                          • Loads dropped DLL
                          • Reads the TCP/IP host and domain name from the registry
                          • System Location Discovery: System Language Discovery
                          PID:420
                          • C:\Program Files\Windhawk\UI\VSCodium.exe
                            "C:\Program Files\Windhawk\UI\VSCodium.exe" --type=gpu-process --disable-gpu-sandbox --no-sandbox --user-data-dir="C:\ProgramData\Windhawk\UIData\user-data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1472 --field-trial-handle=1660,i,17722716828344775440,14197184435543440383,131072 --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
                            6⤵
                            • System Location Discovery: System Language Discovery
                            PID:7036
                          • C:\Program Files\Windhawk\UI\VSCodium.exe
                            "C:\Program Files\Windhawk\UI\VSCodium.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\ProgramData\Windhawk\UIData\user-data" --standard-schemes=vscode-webview,vscode-file --secure-schemes=vscode-webview,vscode-file --bypasscsp-schemes --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --streaming-schemes --mojo-platform-channel-handle=1832 --field-trial-handle=1660,i,17722716828344775440,14197184435543440383,131072 --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
                            6⤵
                            • Reads the TCP/IP host and domain name from the registry
                            • System Location Discovery: System Language Discovery
                            PID:6640
                • C:\Windows\System32\svchost.exe
                  C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s EventLog
                  1⤵
                  • Indicator Removal: Clear Windows Event Logs
                  • Executes dropped EXE
                  PID:2036
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k LocalService -p -s EventSystem
                  1⤵
                  • Executes dropped EXE
                  PID:1156
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k NetworkService -p
                  1⤵
                  • Executes dropped EXE
                  PID:2056
                • C:\Windows\System32\svchost.exe
                  C:\Windows\System32\svchost.exe -k netsvcs -p -s Themes
                  1⤵
                  • Executes dropped EXE
                  PID:2064
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k netsvcs -p -s SENS
                  1⤵
                  • Executes dropped EXE
                  PID:2236
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp
                  1⤵
                  • Executes dropped EXE
                  PID:2340
                • C:\Windows\System32\svchost.exe
                  C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s AudioEndpointBuilder
                  1⤵
                  • Executes dropped EXE
                  PID:2372
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s WinHttpAutoProxySvc
                  1⤵
                  • Loads dropped DLL
                  • Modifies data under HKEY_USERS
                  PID:2492
                • C:\Windows\System32\svchost.exe
                  C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p
                  1⤵
                  • Executes dropped EXE
                  PID:2576
                • C:\Windows\System32\svchost.exe
                  C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s TextInputManagementService
                  1⤵
                  • Executes dropped EXE
                  PID:2704
                  • C:\Windows\system32\ctfmon.exe
                    /QuitInfo:0000000000000268;000000000000026C;
                    2⤵
                    • Executes dropped EXE
                    • Suspicious use of FindShellTrayWindow
                    PID:5076
                • C:\Windows\System32\svchost.exe
                  C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -s RmSvc
                  1⤵
                  • Executes dropped EXE
                  PID:2744
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k appmodel -p -s StateRepository
                  1⤵
                  • Executes dropped EXE
                  PID:2756
                • C:\Windows\System32\svchost.exe
                  C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s DusmSvc
                  1⤵
                  • Executes dropped EXE
                  PID:2844
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Wcmsvc
                  1⤵
                  • Executes dropped EXE
                  PID:2852
                • C:\Windows\System32\svchost.exe
                  C:\Windows\System32\svchost.exe -k netsvcs -p -s ShellHWDetection
                  1⤵
                  • Executes dropped EXE
                  PID:3004
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p
                  1⤵
                  • Executes dropped EXE
                  PID:3124
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
                  1⤵
                  • Executes dropped EXE
                  PID:3132
                • C:\Windows\System32\svchost.exe
                  C:\Windows\System32\svchost.exe -k NetworkService -p -s LanmanWorkstation
                  1⤵
                  • Executes dropped EXE
                  PID:3192
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s webthreatdefusersvc
                  1⤵
                  • Executes dropped EXE
                  PID:3236
                • C:\Windows\System32\ShellHost.exe
                  "C:\Windows\System32\ShellHost.exe"
                  1⤵
                  • Executes dropped EXE
                  PID:3508
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k netsvcs -p -s IKEEXT
                  1⤵
                  • Executes dropped EXE
                  PID:3588
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k netsvcs -p -s LanmanServer
                  1⤵
                  • Executes dropped EXE
                  • Suspicious use of AdjustPrivilegeToken
                  PID:3644
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k netsvcs -p -s Winmgmt
                  1⤵
                  • Executes dropped EXE
                  PID:3676
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k netsvcs -p -s WpnService
                  1⤵
                  • Executes dropped EXE
                  PID:3684
                • C:\Windows\System32\svchost.exe
                  C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s TrkWks
                  1⤵
                  • Executes dropped EXE
                  PID:3700
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted -p -s PolicyAgent
                  1⤵
                  • Executes dropped EXE
                  • Modifies data under HKEY_USERS
                  PID:3744
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k ClipboardSvcGroup -p -s cbdhsvc
                  1⤵
                  • Executes dropped EXE
                  PID:3312
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k netsvcs -p -s Appinfo
                  1⤵
                  • Executes dropped EXE
                  PID:1252
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k UdkSvcGroup -s UdkUserSvc
                  1⤵
                  • Executes dropped EXE
                  PID:4500
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k osprivacy -p -s camsvc
                  1⤵
                  • Executes dropped EXE
                  PID:4592
                • C:\Windows\System32\SecurityHealthSystray.exe
                  "C:\Windows\System32\SecurityHealthSystray.exe"
                  1⤵
                  • Executes dropped EXE
                  PID:5296
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k WebThreatDefense -p -s webthreatdefsvc
                  1⤵
                    PID:5656
                  • C:\Windows\system32\svchost.exe
                    C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall
                    1⤵
                    • Executes dropped EXE
                    PID:5228
                  • C:\Windows\System32\svchost.exe
                    C:\Windows\System32\svchost.exe -k LocalService -p -s LicenseManager
                    1⤵
                    • Executes dropped EXE
                    PID:5960
                  • C:\Windows\system32\svchost.exe
                    C:\Windows\system32\svchost.exe -k LocalService -p -s CDPSvc
                    1⤵
                    • Executes dropped EXE
                    PID:5424
                  • C:\Windows\System32\svchost.exe
                    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s StorSvc
                    1⤵
                    • Executes dropped EXE
                    PID:4176
                  • C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
                    "C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
                    1⤵
                    • Drops file in System32 directory
                    • Loads dropped DLL
                    • Modifies data under HKEY_USERS
                    PID:2520
                  • C:\Windows\system32\svchost.exe
                    C:\Windows\system32\svchost.exe -k netsvcs -p -s wlidsvc
                    1⤵
                    • Loads dropped DLL
                    PID:3040
                  • C:\Windows\System32\Conhost.exe
                    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                    1⤵
                    • Loads dropped DLL
                    PID:8736
                  • C:\Program Files\Windhawk\windhawk.exe
                    "C:\Program Files\Windhawk\windhawk.exe" -service
                    1⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of AdjustPrivilegeToken
                    • Suspicious use of WriteProcessMemory
                    PID:8172
                    • C:\Program Files\Windhawk\windhawk.exe
                      "C:\Program Files\Windhawk\windhawk.exe" -tray-only
                      2⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Location Discovery: System Language Discovery
                      • Suspicious use of FindShellTrayWindow
                      • Suspicious use of SendNotifyMessage
                      PID:8832
                  • C:\Windows\System32\Conhost.exe
                    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                    1⤵
                    • Loads dropped DLL
                    PID:3576
                  • C:\Program Files\Windhawk\windhawk.exe
                    "C:\Program Files\Windhawk\windhawk.exe"
                    1⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    PID:964
                    • C:\Program Files\Windhawk\UI\VSCodium.exe
                      "C:\Program Files\Windhawk\UI\VSCodium.exe" "C:\ProgramData\Windhawk\EditorWorkspace" --locale=en --no-sandbox --disable-gpu-sandbox
                      2⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Reads the TCP/IP host and domain name from the registry
                      • System Location Discovery: System Language Discovery
                      • Checks processor information in registry
                      • Modifies registry class
                      • Suspicious use of AdjustPrivilegeToken
                      • Suspicious use of FindShellTrayWindow
                      PID:2268
                      • C:\Program Files\Windhawk\UI\VSCodium.exe
                        "C:\Program Files\Windhawk\UI\VSCodium.exe" --type=gpu-process --disable-gpu-sandbox --no-sandbox --user-data-dir="C:\ProgramData\Windhawk\UIData\user-data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1600 --field-trial-handle=1652,i,4252668117927822928,10210194384355517840,131072 --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
                        3⤵
                        • Executes dropped EXE
                        • System Location Discovery: System Language Discovery
                        PID:4340
                      • C:\Program Files\Windhawk\UI\VSCodium.exe
                        "C:\Program Files\Windhawk\UI\VSCodium.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\ProgramData\Windhawk\UIData\user-data" --standard-schemes=vscode-webview,vscode-file --secure-schemes=vscode-webview,vscode-file --bypasscsp-schemes --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --streaming-schemes --mojo-platform-channel-handle=1820 --field-trial-handle=1652,i,4252668117927822928,10210194384355517840,131072 --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
                        3⤵
                        • Reads the TCP/IP host and domain name from the registry
                        • System Location Discovery: System Language Discovery
                        PID:6724
                      • C:\Program Files\Windhawk\UI\VSCodium.exe
                        "C:\Program Files\Windhawk\UI\VSCodium.exe" --type=renderer --user-data-dir="C:\ProgramData\Windhawk\UIData\user-data" --standard-schemes=vscode-webview,vscode-file --secure-schemes=vscode-webview,vscode-file --bypasscsp-schemes --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --streaming-schemes --app-user-model-id=RamenSoftware.Windhawk --app-path="C:\Program Files\Windhawk\UI\resources\app" --no-sandbox --no-zygote --enable-blink-features=HighlightAPI,WebAppWindowControlsOverlay --no-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2592 --field-trial-handle=1652,i,4252668117927822928,10210194384355517840,131072 --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --vscode-window-config=vscode:206c3c4e-d0b8-4e84-a7a7-eb42c03f00cb /prefetch:1
                        3⤵
                        • System Location Discovery: System Language Discovery
                        PID:6448
                      • C:\Program Files\Windhawk\UI\VSCodium.exe
                        "C:\Program Files\Windhawk\UI\VSCodium.exe" --type=renderer --user-data-dir="C:\ProgramData\Windhawk\UIData\user-data" --standard-schemes=vscode-webview,vscode-file --secure-schemes=vscode-webview,vscode-file --bypasscsp-schemes --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --streaming-schemes --app-user-model-id=RamenSoftware.Windhawk --app-path="C:\Program Files\Windhawk\UI\resources\app" --no-sandbox --no-zygote --node-integration-in-worker --no-sandbox --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2844 --field-trial-handle=1652,i,4252668117927822928,10210194384355517840,131072 --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --vscode-window-config=vscode:b5904998-214e-4233-a70f-150cf968158a --vscode-window-kind=shared-process /prefetch:1
                        3⤵
                        • System Location Discovery: System Language Discovery
                        PID:6720
                        • C:\Program Files\Windhawk\UI\VSCodium.exe
                          "C:\Program Files\Windhawk\UI\VSCodium.exe" "c:\Program Files\Windhawk\UI\resources\app\out\bootstrap-fork" --type=ptyHost --logsPath C:\ProgramData\Windhawk\UIData\user-data\logs\20261003T131203
                          4⤵
                          • System Location Discovery: System Language Discovery
                          • Suspicious behavior: EnumeratesProcesses
                          PID:5556
                        • C:\Program Files\Windhawk\UI\VSCodium.exe
                          "C:\Program Files\Windhawk\UI\VSCodium.exe" "c:\Program Files\Windhawk\UI\resources\app\out\bootstrap-fork" --type=fileWatcher
                          4⤵
                          • System Location Discovery: System Language Discovery
                          • Suspicious behavior: EnumeratesProcesses
                          PID:9164
                        • C:\Windows\SysWOW64\cmd.exe
                          C:\Windows\system32\cmd.exe /d /s /c "wsl.exe -l -q"
                          4⤵
                          • Executes a command shell one-liner
                          • System Location Discovery: System Language Discovery
                          PID:2400
                          • C:\Windows\System32\Conhost.exe
                            \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                            5⤵
                              PID:7756
                        • C:\Program Files\Windhawk\UI\VSCodium.exe
                          "C:\Program Files\Windhawk\UI\VSCodium.exe" --inspect-port=0 "c:\Program Files\Windhawk\UI\resources\app\out\bootstrap-fork" --type=extensionHost --skipWorkspaceStorageLock
                          3⤵
                          • Reads the TCP/IP host and domain name from the registry
                          • System Location Discovery: System Language Discovery
                          • Suspicious behavior: EnumeratesProcesses
                          PID:6972
                          • C:\Program Files\Windhawk\UI\VSCodium.exe
                            "C:\Program Files\Windhawk\UI\VSCodium.exe" "c:\Program Files\Windhawk\UI\resources\app\extensions\json-language-features\server\dist\node\jsonServerMain" --node-ipc --clientProcessId=6972
                            4⤵
                            • System Location Discovery: System Language Discovery
                            • Suspicious behavior: EnumeratesProcesses
                            PID:5988
                          • \??\c:\Program Files\Windhawk\windhawk.exe
                            "c:\Program Files\Windhawk\windhawk.exe" -new-updates-found
                            4⤵
                            • System Location Discovery: System Language Discovery
                            PID:7508
                        • C:\Program Files\Windhawk\UI\VSCodium.exe
                          "C:\Program Files\Windhawk\UI\VSCodium.exe" --type=renderer --user-data-dir="C:\ProgramData\Windhawk\UIData\user-data" --standard-schemes=vscode-webview,vscode-file --secure-schemes=vscode-webview,vscode-file --bypasscsp-schemes --cors-schemes=vscode-webview,vscode-file --fetch-schemes=vscode-webview,vscode-file --service-worker-schemes=vscode-webview --streaming-schemes --app-user-model-id=RamenSoftware.Windhawk --app-path="C:\Program Files\Windhawk\UI\resources\app" --enable-sandbox --enable-blink-features=HighlightAPI,WebAppWindowControlsOverlay --no-sandbox --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2928 --field-trial-handle=1652,i,4252668117927822928,10210194384355517840,131072 --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --vscode-window-config=vscode:206c3c4e-d0b8-4e84-a7a7-eb42c03f00cb /prefetch:1
                          3⤵
                          • System Location Discovery: System Language Discovery
                          PID:1732
                        • C:\Windows\system32\wsl.exe
                          C:\Windows\Sysnative\wsl.exe --status
                          3⤵
                            PID:7648
                          • C:\Program Files\Windhawk\UI\VSCodium.exe
                            "C:\Program Files\Windhawk\UI\VSCodium.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --disable-gpu-sandbox --no-sandbox --user-data-dir="C:\ProgramData\Windhawk\UIData\user-data" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2432 --field-trial-handle=1652,i,4252668117927822928,10210194384355517840,131072 --disable-features=CalculateNativeWinOcclusion,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
                            3⤵
                            • System Location Discovery: System Language Discovery
                            • Suspicious behavior: EnumeratesProcesses
                            PID:4744
                      • C:\Windows\system32\svchost.exe
                        C:\Windows\system32\svchost.exe -k GPSvcGroup
                        1⤵
                          PID:6800

                        Network

                              MITRE ATT&CK Enterprise v16

                              Reconnaissance

                              Resource Development

                              Initial Access

                              Execution

                              Command and Scripting Interpreter

                              2
                              T1059

                              PowerShell

                              1
                              T1059.001

                              Windows Command Shell

                              1
                              T1059.003

                              Scheduled Task/Job

                              1
                              T1053

                              Scheduled Task

                              1
                              T1053.005

                              Persistence

                              Scheduled Task/Job

                              1
                              T1053

                              Scheduled Task

                              1
                              T1053.005

                              Privilege Escalation

                              Access Token Manipulation

                              1
                              T1134

                              Parent PID Spoofing

                              1
                              T1134.004

                              Process Injection

                              1
                              T1055

                              Process Hollowing

                              1
                              T1055.012

                              Scheduled Task/Job

                              1
                              T1053

                              Scheduled Task

                              1
                              T1053.005

                              Defense Evasion

                              Access Token Manipulation

                              1
                              T1134

                              Parent PID Spoofing

                              1
                              T1134.004

                              Indicator Removal

                              1
                              T1070

                              Clear Windows Event Logs

                              1
                              T1070.001

                              Process Injection

                              1
                              T1055

                              Process Hollowing

                              1
                              T1055.012

                              Credential Access

                              Discovery

                              Network Share Discovery

                              1
                              T1135

                              Peripheral Device Discovery

                              1
                              T1120

                              Query Registry

                              4
                              T1012

                              System Information Discovery

                              3
                              T1082

                              System Location Discovery

                              1
                              T1614

                              System Language Discovery

                              1
                              T1614.001

                              System Network Configuration Discovery

                              1
                              T1016

                              Lateral Movement

                              Collection

                              Command and Control

                              Exfiltration

                              Impact

                              Replay Monitor

                              Loading Replay Monitor...

                              Downloads

                              crt2.o
                              • Path C:\Program Files\Windhawk\Compiler\aarch64-w64-mingw32\lib\crt2.o
                              • Size 22KB
                              • SHA256 0184829889f7f6f17beaeacbae44287658062169fd043be2a1f47b33d5551a5d
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              crt2u.o
                              • Path C:\Program Files\Windhawk\Compiler\aarch64-w64-mingw32\lib\crt2u.o
                              • Size 23KB
                              • SHA256 ec329189b158377f8f61208ca4c9681360d1700a00a6c58cbb477078c8758d18
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              dllcrt2.o
                              • Path C:\Program Files\Windhawk\Compiler\aarch64-w64-mingw32\lib\dllcrt2.o
                              • Size 15KB
                              • SHA256 ebb79af116a477310f176cd3daca3212260c4a07d44b67802a7e1cd9c790dd74
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              gcrt1.o
                              • Path C:\Program Files\Windhawk\Compiler\aarch64-w64-mingw32\lib\gcrt1.o
                              • Size 2KB
                              • SHA256 1d163f676a38f291ca9eedf549cdf088e7525423757e5cbe6e05a6288051370c
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              libd3dcompiler_47.a
                              • Path C:\Program Files\Windhawk\Compiler\aarch64-w64-mingw32\lib\libd3dcompiler_47.a
                              • Size 7KB
                              • SHA256 7f86de180e0aa25bf55c2ad91780061f92733613092a1b9f45920381d0d6e3a3
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libmapistub.a
                              • Path C:\Program Files\Windhawk\Compiler\aarch64-w64-mingw32\lib\libmapistub.a
                              • Size 33KB
                              • SHA256 55f6633b44d47ce3f001dfb1a98b6c4b5b5699360320ec67ffc4ca6c2b25d366
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libmsvcrt.a
                              • Path C:\Program Files\Windhawk\Compiler\aarch64-w64-mingw32\lib\libmsvcrt.a
                              • Size 841KB
                              • SHA256 60dde2d94cfc43e705d4592f39fd3dd1b6a23d20c55e0998dac97972731c0924
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libquery.a
                              • Path C:\Program Files\Windhawk\Compiler\aarch64-w64-mingw32\lib\libquery.a
                              • Size 3KB
                              • SHA256 4f65748728e8ce5d28cafa0ed4ea5fb3b51088567d11e2e71445b50b52ac2011
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              libssp.a
                              • Path C:\Program Files\Windhawk\Compiler\aarch64-w64-mingw32\lib\libssp.a
                              • Size 8B
                              • SHA256 f0a17a43c74d2fe5474fa2fd29c8f14799e777d7d75a2cc4d11c20a6e7b161c5
                              • MD5 SHA1 SHA512
                              Submit Download

                              libwinpthread.a
                              • Path C:\Program Files\Windhawk\Compiler\aarch64-w64-mingw32\lib\libwinpthread.a
                              • Size 266KB
                              • SHA256 ab1037f2eb0f98e5a55c0ddbc30d974c1457748436b6906d4ee52003fa48c399
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libwinpthread.dll.a
                              • Path C:\Program Files\Windhawk\Compiler\aarch64-w64-mingw32\lib\libwinpthread.dll.a
                              • Size 32KB
                              • SHA256 d6824f991dcb0f9043eff1505de49f719a5bd8dc9a223fe5863958c67254e3b6
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libxinput1_4.a
                              • Path C:\Program Files\Windhawk\Compiler\aarch64-w64-mingw32\lib\libxinput1_4.a
                              • Size 2KB
                              • SHA256 876bff5be25bb6feb669891fe0df84f0c1211d7a0068374c8b0b857f90565793
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              libc++.dll
                              • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\bin\libc++.dll
                              • Size 2.1MB
                              • SHA256 b424b81b43b8358a5094adb9e4a324a646aebebfad0e4362eb8ed1a4cb49a41a
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libunwind.dll
                              • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\bin\libunwind.dll
                              • Size 215KB
                              • SHA256 f48eaae7c06622b81b55ffa09338af4b7778121847f2f9bf1f0e6cef32d8695e
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              crt2.o
                              • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\crt2.o
                              • Size 21KB
                              • SHA256 ba2370422cedf0f19005352696fa2e381e7fef38f73e236736d0345b0318a116
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              crt2u.o
                              • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\crt2u.o
                              • Size 21KB
                              • SHA256 909a18500cf8df40a6cbe2ae105aff3c87db9576909a6fb87830444054f2d283
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              dllcrt2.o
                              • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\dllcrt2.o
                              • Size 13KB
                              • SHA256 8f2bb292cddcb4e3091eaad29ac704a680b54cc223af82061ca1dc4127d23608
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              gcrt1.o
                              • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\gcrt1.o
                              • Size 2KB
                              • SHA256 96e7ddac57be6ac210342a7a1fa064c620052d3fc903e70bc27f82b636d68cf0
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              libc++.dll.a
                              • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libc++.dll.a
                              • Size 926KB
                              • SHA256 9c6dcd8a47738de9759854ae37075c66aaf8cb5b84a0974ecd23a7c8e6f31c86
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libc++.modules.json
                              • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libc++.modules.json
                              • Size 561B
                              • SHA256 a6e5422724e82ee365cdafd73eca17e0987c60fee96c501482240e23b30c5a01
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              libd3dcompiler_34.a
                              • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libd3dcompiler_34.a
                              • Size 3KB
                              • SHA256 d6015cd8643fbda48ef6de3320eb906b1dd4db36bcf0c94d0391b6bd8946adb2
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              libd3dcompiler_47.a
                              • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libd3dcompiler_47.a
                              • Size 8KB
                              • SHA256 5c16fa59b597b1bd3d593f3b7321bdcb9435f8890c45146e3366e371174dd118
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libd3dcsxd_43.a
                              • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libd3dcsxd_43.a
                              • Size 3KB
                              • SHA256 01bbf2b4375364d3f6b3cdce30a17759cabb801604750051199f9a5818f8bd57
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              libd3dx10_43.a
                              • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libd3dx10_43.a
                              • Size 46KB
                              • SHA256 483fd75d2d32844faa399ff4334ee609d7fd1d2c6d859d4b59a2fef0e1b99f89
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libd3dx11_43.a
                              • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libd3dx11_43.a
                              • Size 13KB
                              • SHA256 5d619b2457674fdbdea9286bfc1564c20eac2b8d7d2348b36587368672a0d9e5
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libd3dx9_43.a
                              • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libd3dx9_43.a
                              • Size 85KB
                              • SHA256 2562eacd12e4c5e23c1bdff8ac90bb230e959adb347168c1f8aacaedb7de8a16
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libmsctfmonitor.a
                              • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libmsctfmonitor.a
                              • Size 20KB
                              • SHA256 e499a77e3d37fefd7ab25b4c646293a98ffbf53b3b01cba822dd4df2b8ff2dd2
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libmsvcrt.a
                              • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libmsvcrt.a
                              • Size 1.1MB
                              • SHA256 0d6e4d08caa2efcc0ce5f5123cc2b157cf4f40dc344ffba7b525d8aac6432695
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libquery.a
                              • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libquery.a
                              • Size 3KB
                              • SHA256 265841d43f39120978211a5edf62e611943061dbae5156f520f0a9333ac487b6
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              libwinpthread.a
                              • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libwinpthread.a
                              • Size 223KB
                              • SHA256 ac61dcbe2248d80d99b2c78ccf4fc91c79d1bc02103541b370bbf012ffcb9ce3
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libwinpthread.dll.a
                              • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libwinpthread.dll.a
                              • Size 33KB
                              • SHA256 d849db9022800bb8ef2eead189198b219826cc1b2f4765be2bdadd917067c2fb
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libx3daudio1_7.a
                              • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libx3daudio1_7.a
                              • Size 1KB
                              • SHA256 c5b26985377f1f7fb6b1ab8b93ee35347cbc9ae981f9dfec525258f009e83f60
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              libxapofx1_5.a
                              • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libxapofx1_5.a
                              • Size 1KB
                              • SHA256 904e523c7b93adeea17af8d31aded135eed37dab8b2b5e86042fa0b6d96fb9b6
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              libxinput1_3.a
                              • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\lib\libxinput1_3.a
                              • Size 2KB
                              • SHA256 5e644760f02dd3627804d7770b74cfbc1cf074716dd03f125239f74805472e1d
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              COPYING
                              • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\share\mingw32\COPYING
                              • Size 2KB
                              • SHA256 99a69660981156c21336fdb5661f89341b013c94e4bf9e1c7467b4745718397f
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              COPYING.MinGW-w64-runtime.txt
                              • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\share\mingw32\COPYING.MinGW-w64-runtime.txt
                              • Size 10KB
                              • SHA256 e9b2dc02451ea29092a1f25fa0f3c07207ed421f1807dffb0c4e6dce69dee7bd
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              COPYING.MinGW-w64.txt
                              • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\share\mingw32\COPYING.MinGW-w64.txt
                              • Size 5KB
                              • SHA256 f38e6194bd3bfa1b654f118e5acefe0aead437bbe669eee43957ccc65a7127f1
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              COPYING.winpthreads.txt
                              • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\share\mingw32\COPYING.winpthreads.txt
                              • Size 2KB
                              • SHA256 63263614cdd29f2f93cba85e992f041b31f9fc7b4033692f31269489a8a1b177
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              COPYING.winstorecompat.txt
                              • Path C:\Program Files\Windhawk\Compiler\i686-w64-mingw32\share\mingw32\COPYING.winstorecompat.txt
                              • Size 1KB
                              • SHA256 fa7368d1f93d890c173177475d8ec7aff265a7d08f1f364d66f74d138978ce36
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              mdspan
                              • Path C:\Program Files\Windhawk\Compiler\include\c++\v1\__cxx03\mdspan
                              • Size 16KB
                              • SHA256 1580d3b400566a4daa8651a29eb8d50e16335eedf3af6d7e2f17fef7ae1cf859
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              __undef_macros
                              • Path C:\Program Files\Windhawk\Compiler\include\c++\v1\__undef_macros
                              • Size 558B
                              • SHA256 10c542f9493fc3f2ed46e498cda2c8d408ecc578ceef1df9272908143bd22b8f
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              mtsgrp.h
                              • Path C:\Program Files\Windhawk\Compiler\include\mtsgrp.h
                              • Size 237B
                              • SHA256 255a11df990657af623e682c7c3a81274fbb4a80c10f1dc2280cb3ce4eb98cf4
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              mtxadmin_i.c
                              • Path C:\Program Files\Windhawk\Compiler\include\mtxadmin_i.c
                              • Size 1KB
                              • SHA256 161a5cf30fa8e510af75fb4da216746b48aaa88c698372709033002aceb379f4
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              scardmgr.h
                              • Path C:\Program Files\Windhawk\Compiler\include\scardmgr.h
                              • Size 238B
                              • SHA256 a32207b286686ad5f42d72a5c96308b96c5cb5f42fb2a7deef01843e657c6035
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              windows.foundation.h
                              • Path C:\Program Files\Windhawk\Compiler\include\windows.foundation.h
                              • Size 661KB
                              • SHA256 c7b78077bd229e0f400e2dade6989d7d19f2cff1b0e7a001089534bd5f84ea44
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              windows.foundation.idl
                              • Path C:\Program Files\Windhawk\Compiler\include\windows.foundation.idl
                              • Size 28KB
                              • SHA256 967fd66015d6ab104c880cf8603c3c2ae163da7453fdd20a5fd7ea31e6097b25
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              windhawk-compiler-winrt.7z
                              • Path C:\Program Files\Windhawk\Compiler\include\winrt\windhawk-compiler-winrt.7z
                              • Size 4.2MB
                              • SHA256 43870ab78640c7c62d1825a3d39532f3bf78a4fe3895173a1615f521c82f55b3
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              cerrno.inc
                              • Path C:\Program Files\Windhawk\Compiler\share\libc++\v1\std.compat\cerrno.inc
                              • Size 440B
                              • SHA256 ba6d2968e387be16375170a945d210b42a3f103bb7c1c8ab7c9d3d190c746105
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              cerrno.inc
                              • Path C:\Program Files\Windhawk\Compiler\share\libc++\v1\std\cerrno.inc
                              • Size 461B
                              • SHA256 dde40ec35e6728a5ddcde229fe62f85c6c8d2a573126de3a3603fc8981ae6d2a
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              crt2.o
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\crt2.o
                              • Size 23KB
                              • SHA256 6309c5fb8d4fc9331d564721d8536f9fb234100f8578cba04278d41e428ea760
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              crt2u.o
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\crt2u.o
                              • Size 23KB
                              • SHA256 f5f98a124b12d6146aff8d6c945d28e1da679f0d7054c045410258c0bffabdde
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              dllcrt2.o
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\dllcrt2.o
                              • Size 16KB
                              • SHA256 cc55a30c4e28cea5998ad20c04c1f79a2798061ee3adaf39b844c8eea4b29015
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              gcrt1.o
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\gcrt1.o
                              • Size 2KB
                              • SHA256 9b2b03211475012a5c11bd5f6c30b6156934e35c8a626f22d8b44eefcacb31db
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              libadvapi32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libadvapi32.a
                              • Size 196KB
                              • SHA256 25af7787cd9a365f6485900f0f39ce42b40e90561e41843e3e13cb77a5273270
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libadvpack.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libadvpack.a
                              • Size 18KB
                              • SHA256 a2193ffee289912a5c59acc8c92edd3208f8fb63dc1ffe36a647978f5ec86837
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libatl.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libatl.a
                              • Size 12KB
                              • SHA256 5b5f2fbe5f8c4f959465054394e61334f461813aaf5397f9338773b37900c2fc
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libauthz.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libauthz.a
                              • Size 18KB
                              • SHA256 03ca83d1c9a1551e30b0f238cab20dc300e36162c8d9a3bc1aed27e96f71d283
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libavifil32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libavifil32.a
                              • Size 16KB
                              • SHA256 1ba2ce35de2f4b832ecda6c80df8781e2188d91ef666148b8151413b4b513de6
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libazroles.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libazroles.a
                              • Size 9KB
                              • SHA256 b5490fe769145a053c4369ee01448c9d87bf771fe52b34c1b27aaa83f6fa2f01
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libbcrypt.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libbcrypt.a
                              • Size 15KB
                              • SHA256 6f6c23b3f46ee45e56bea34d6574a9e9f709c1330c02be947e3269dcb43ba20b
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libbluetoothapis.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libbluetoothapis.a
                              • Size 26KB
                              • SHA256 92a555fe5099add8d9bae89640f53f021447372a95a30d50a6b32ace0a1bd622
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libbthprops.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libbthprops.a
                              • Size 17KB
                              • SHA256 6be12b59b44aa28f663c3cad4672e829404a778e7cf83f31ccc1b5beeb130436
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libc++.dll.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libc++.dll.a
                              • Size 914KB
                              • SHA256 170821edb0f5f310e74433c6441e49ad3a86c9f90a7acf57ce87b17b530be332
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libcfgmgr32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libcfgmgr32.a
                              • Size 68KB
                              • SHA256 3e53a46d7235b9e10b434e5fb62c412140741e2446e347bb913b277278f7f8e5
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libchakrart.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libchakrart.a
                              • Size 26KB
                              • SHA256 0379c07e09ed41f7fecf90302cff6308b84fa0816d82432bded07df6cde71a85
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libclusapi.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libclusapi.a
                              • Size 46KB
                              • SHA256 14cddc30c1a9ccf33e67355735c31994937563643a584f558406ec6491a33d8b
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libcomctl32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libcomctl32.a
                              • Size 31KB
                              • SHA256 19b2581e2bf876fefcd7eb98acaad0a41f2af2d1239775597ae1d0e513c1a9c1
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libcomputecore.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libcomputecore.a
                              • Size 17KB
                              • SHA256 fc9f3e66245a93b76577b32702788b74dcb2eb1c65e33874e6bd0cf108332a34
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libcomputenetwork.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libcomputenetwork.a
                              • Size 14KB
                              • SHA256 9a002f3bef874ca1f283ddd0cf9e3496bf1b843c78dd214f76f279ba6a5ad676
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libcoremessaging.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libcoremessaging.a
                              • Size 8KB
                              • SHA256 156836919fd58dea890f8eaab5f1180619fa9638bc9ff0aa38cf15653c9b378e
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libcrypt32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libcrypt32.a
                              • Size 72KB
                              • SHA256 91725c34a74762bf9d403b4bd238ec2484ac600d4a1e61b8bc3fce083042a653
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libcryptsp.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libcryptsp.a
                              • Size 14KB
                              • SHA256 8caafb98350f5363910e993b6556932924ff1388caf7ab209f34c00494dd3ed0
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libcryptui.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libcryptui.a
                              • Size 17KB
                              • SHA256 3b765b11391a96824f82943e86c91cdcc1fbc37bc4d70a3d1c5d0da376655f3e
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libd3d10.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libd3d10.a
                              • Size 8KB
                              • SHA256 b86b43ba9e7d20f4d13989710742760f49b7cd037c9d5182a76a5c047dbc4334
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libd3d11.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libd3d11.a
                              • Size 13KB
                              • SHA256 9224f6abafcdd7835b429d80aef135eed58b633c65400a2e46e113c5531959e1
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libd3dcompiler_34.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libd3dcompiler_34.a
                              • Size 3KB
                              • SHA256 17c968c88091e986eb81761a865971b80b71ec1cdd36d5ba66c95743dec926e2
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              libd3dcompiler_47.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libd3dcompiler_47.a
                              • Size 7KB
                              • SHA256 e2861c19b6439aaa6dcc2f7e013fcdc98541cdaf19c30d480a1bb8c9a76bcb54
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libd3dcsxd_43.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libd3dcsxd_43.a
                              • Size 3KB
                              • SHA256 0b835ea9bd412d99d65d5513ed9ac8127a5cba328c5fb10c62b4a04772adc7ce
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              libd3dx10_43.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libd3dx10_43.a
                              • Size 43KB
                              • SHA256 d8c304c59dc684254daeb4e3c918b7108fa4794da778e04b8e36d9083b89a2e8
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libd3dx11_43.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libd3dx11_43.a
                              • Size 13KB
                              • SHA256 3ac07db7decd083f2af7b62fbe8b518aa874738064ded9a175ce25b54a20440b
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libd3dx9_43.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libd3dx9_43.a
                              • Size 79KB
                              • SHA256 d44450b29b3c7057ccc70781aaa488d8cea6cef7e6017dbb84ba4867f92b3c6d
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libdbghelp.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libdbghelp.a
                              • Size 48KB
                              • SHA256 f407acff38e12cb5227a6bad5f023f31c3705aca0a5339fc9b25ec433342e3cc
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libdevobj.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libdevobj.a
                              • Size 13KB
                              • SHA256 d39333d24aa49189d3672bac83929c6a29aaf45d29b6dfacbbc9ef3393a43b06
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libdhcpcsvc.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libdhcpcsvc.a
                              • Size 16KB
                              • SHA256 897af58413ccace59d8a2440525cb61970e3a534f4c9b2fb490d846185e8a707
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libdhcpsapi.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libdhcpsapi.a
                              • Size 48KB
                              • SHA256 9dad44e0de6e6dd71077a5d46bae575cc8194e874a93b93bcb500a77a6615e3b
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libdiagnosticdataquery.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libdiagnosticdataquery.a
                              • Size 11KB
                              • SHA256 c125e3a5d57c3fe4c288dbf9a7b4b33204742ea1904c5b292252aadf50919e9e
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libdismapi.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libdismapi.a
                              • Size 22KB
                              • SHA256 be8b5f73a080dfae8505497b939e087b8cd0a0d7f872d8c2b6bd36b57af71a6b
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libdnsapi.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libdnsapi.a
                              • Size 66KB
                              • SHA256 b55b46c0a5c1ece2b8a763a127e93c5e446f709cf8819bb3947e7488253f995e
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libduser.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libduser.a
                              • Size 33KB
                              • SHA256 63601a4d6a1bbd27b854d93d46c47586ccfccd1cebda83e8e38f17201da46e23
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libdwmapi.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libdwmapi.a
                              • Size 10KB
                              • SHA256 327d8cc06ca419834fa1ee73e4f8ab5f09e8d63697018bb496aedeb5c46ee80e
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libdxgi.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libdxgi.a
                              • Size 14KB
                              • SHA256 2863a1b25aeef1eef4cbb0d1baf78708ac65f206f0f1db548d04db7419b2f0ce
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libdxva2.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libdxva2.a
                              • Size 10KB
                              • SHA256 6036eaa62c9f976e586db2a275472dbcbe6de435ce0da02e765c6550ecdbf278
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libesent.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libesent.a
                              • Size 79KB
                              • SHA256 1c8c5a4b2e0e6c919b7bb38d19c4953ef6e02ae8778b5ee169f4d2ad2be995c8
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libfeclient.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libfeclient.a
                              • Size 9KB
                              • SHA256 b6d42290bc5c351e3d86b1ad109cf1c678068b96d600e0b1690c635412947e78
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libfwpuclnt.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libfwpuclnt.a
                              • Size 69KB
                              • SHA256 b9a2845567fb99e02c4d889493e0898e75d3aaacc024658ed6165dedf27b5c67
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libgdi32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libgdi32.a
                              • Size 203KB
                              • SHA256 4644a7db189fb5dda4e933803b017a4fe1725d04fe7c2b43540e7f12cbe31e7a
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libglu32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libglu32.a
                              • Size 11KB
                              • SHA256 6f8cfe1484cffc587436b585e30095dc385caf8221fa8c2a9e74dbb269ecd6bc
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libhbaapi.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libhbaapi.a
                              • Size 22KB
                              • SHA256 968266a713d89b9691ae6b5377fc6b40ae0fe337cbddac37762831889ae25cfa
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libhid.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libhid.a
                              • Size 10KB
                              • SHA256 8efdeeb049826c6f0dd1074a171e4aad42f2f8e1cce8959bb131f34146f3cda4
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libhlink.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libhlink.a
                              • Size 8KB
                              • SHA256 f674edd3f88f8efc63905e8bde9e3d724bc371661f79e1a8f73789a190ef01b6
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libicu.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libicu.a
                              • Size 198KB
                              • SHA256 caac4424be135e9a42a05e54ebafc851ecab00c68cd8872df92b2d49e1e98fc9
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libimagehlp.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libimagehlp.a
                              • Size 32KB
                              • SHA256 4d305315246df754995ff1424f4b3bf22e589d972d9d824832ffd46098e9e7b5
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libimm32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libimm32.a
                              • Size 30KB
                              • SHA256 07a742829246b2a61e7b31ba231d6f652d92bdef4849b1a1ef90f11151de0de0
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libimskdic.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libimskdic.a
                              • Size 2KB
                              • SHA256 072f963d0bd8dbbe5d63381f6c0565194b7677901a1aea82fbf5ae139637c219
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              libinetcomm.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libinetcomm.a
                              • Size 26KB
                              • SHA256 f9f1dfab3e139692206ddf6a9d7902d71a0f76871a72aca4e9cb5c72fbff1e73
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libiphlpapi.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libiphlpapi.a
                              • Size 82KB
                              • SHA256 6d83b979e5535280f3e6cff327f7a863a9353dfcd60b20ab062f500613ec4c63
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libipnathlp.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libipnathlp.a
                              • Size 8KB
                              • SHA256 1088e9b8d8c8cf357664deed22d0ffae9b16ed60211a48ed1233bb76c3109de4
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libks.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libks.a
                              • Size 56KB
                              • SHA256 9536ce14e23cb33ee355e461d56145ee6467b138231da0ed176175ca9cf946fd
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libksecdd.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libksecdd.a
                              • Size 24KB
                              • SHA256 ccffe29c97c6a53a03855dc374f6fba3a924a456b7147f67cb90c6b36785f1d3
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libktmw32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libktmw32.a
                              • Size 11KB
                              • SHA256 5bb2e1749f5b0d116d6f327601ad27bf121e40778913fbee6468175ecf5d2f1b
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libmf.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmf.a
                              • Size 22KB
                              • SHA256 f63ddb320f39db73ab0bb1e2b896f81ea59ce522033a01f7752d6d40fcda4b3f
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libmfcore.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmfcore.a
                              • Size 12KB
                              • SHA256 9077e847a650754296587797c51dd7541782540205f23e30924185126966e592
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libmfplat.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmfplat.a
                              • Size 58KB
                              • SHA256 44412128562424fcf60c968efb085d21990a8136bb7f9404db987af86123ca09
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libmfsensorgroup.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmfsensorgroup.a
                              • Size 10KB
                              • SHA256 1e7b18c63ac62a6e950e628a8352bc9e5aae66326562b0cdd1aadd55f33ebadd
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libmincore_downlevel.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmincore_downlevel.a
                              • Size 148KB
                              • SHA256 de3afea73fe0f7159ac2b742464c4141133295357505c94b4535a1fe666e1f1c
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libmmdevapi.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmmdevapi.a
                              • Size 9KB
                              • SHA256 5f63fce2e2fa73d43f8ff7ff050573445f2edf5df348ad060037b3fb67477864
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libmpr.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmpr.a
                              • Size 20KB
                              • SHA256 d4da878b3556363f1b828aeb62013fe8ed75740f88a9fda8cdd02b23407d451e
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libmsacm32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmsacm32.a
                              • Size 9KB
                              • SHA256 e5d2535dc952d9f24a96d365581ca82436231931c7a981de0ed49245e9e95014
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libmsajapi.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmsajapi.a
                              • Size 166KB
                              • SHA256 fe1472ac596c87ed943beee57df6111dfe5e3c0f31f481b97b94245eb8d91a98
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libmscat32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmscat32.a
                              • Size 9KB
                              • SHA256 d08410cc28b3fb459b73bfb52bb01747811c41874b91e97ca15bb559cc94d506
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libmscms.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmscms.a
                              • Size 33KB
                              • SHA256 c579b8d0cc96fb0f7b0f00771f18d1cab38304e6336f15ab3eff61ae52d20ce2
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libmsdrm.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmsdrm.a
                              • Size 21KB
                              • SHA256 8a0b7071c4a7b721dca3cc99df53b40d4efbd7170c7b08e586aef227ae861122
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libmsdtclog.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmsdtclog.a
                              • Size 2KB
                              • SHA256 b70de62979e18ef330916c721e2247704e58ac251f6e7de1271d5a625d8205c4
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              libmsi.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmsi.a
                              • Size 64KB
                              • SHA256 f4bf194ac6b7a34964b87e21caa7a4f362ea41e6ba00eb5d486d9d879d7c2910
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libmsls31.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmsls31.a
                              • Size 17KB
                              • SHA256 a829b192bffc6be95db4a969c7ffdda2ae97cd698f4725dc7c19744827b73fc8
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libmssign32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmssign32.a
                              • Size 8KB
                              • SHA256 53bb88cf18744cd0232ab56a5bc01df3400ce86dcf1c5f423cd244345b325a5c
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libmsvcrt.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmsvcrt.a
                              • Size 1.1MB
                              • SHA256 6e9fa11a5c545e3461b6562be3b75ff1c472ffbd1aa0516968ee10fbd69b5753
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libmsvfw32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmsvfw32.a
                              • Size 10KB
                              • SHA256 42ccfcf531d2cf3a82407082d13bc22b072b0cbacee32cfa87225c9072549e72
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libmswsock.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libmswsock.a
                              • Size 14KB
                              • SHA256 2cd4ba8151faf8ec5e01b8d8730d806302f6f9608907c6e0816ef87d942c1ea3
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libncrypt.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libncrypt.a
                              • Size 34KB
                              • SHA256 8f374ec1da73f96e9b7affeb4fbcd9c25408ef93ebe91e8735e477c674a0457a
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libndis.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libndis.a
                              • Size 135KB
                              • SHA256 9930e8471b9fa18aaf40f4e897eb9f4c2187837e40af36a08605f55dc16fc37e
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libnetapi32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libnetapi32.a
                              • Size 83KB
                              • SHA256 347b92f7f4f27bf35d177c1b1787d0cb9bcb4cc8d435395748882ba2e12bbb99
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libnetio.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libnetio.a
                              • Size 128KB
                              • SHA256 61a1d15aa3157d3ff40a0bf9bcd34653b539a7283155b80ed74ad37f1fabd86e
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libnetshell.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libnetshell.a
                              • Size 9KB
                              • SHA256 0168e3ec0eff70a6df4c247368e7e684163c7b62dfef7a356cf9db003de2d43e
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libninput.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libninput.a
                              • Size 9KB
                              • SHA256 351885bad48ba88e7b0ef38b6231968e50cf1bc2fadce8505b974d4594f45778
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libntdsapi.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libntdsapi.a
                              • Size 26KB
                              • SHA256 76d73be49f13783823a40a9e5598018779467c8286d2f89952d77fa9a6e4c6af
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libocmsn.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libocmsn.a
                              • Size 1KB
                              • SHA256 dd5da51c970d96fe588886e3dc394b98174c09e97d36e47ef653328c26913462
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              libodbc32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libodbc32.a
                              • Size 36KB
                              • SHA256 b5a6ac53dfae03361d9c891a223981204f114feba0f3b84c7ca22f84e76058f4
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libodbccp32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libodbccp32.a
                              • Size 13KB
                              • SHA256 d1ede21e269129502a89b5e71cce8d6b604bb8ca1e203b122a46494aaef3da6f
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libodbccu32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libodbccu32.a
                              • Size 8KB
                              • SHA256 23afc827b1598964ca5977acd9f3d468eb42ca18946bae934a6b99b5843aa46e
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libole32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libole32.a
                              • Size 115KB
                              • SHA256 4a1f5ce66035e45713b4bfc30451910f084d2d36ef06e9a52abe8e92f28d50ea
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              liboleaut32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\liboleaut32.a
                              • Size 79KB
                              • SHA256 f72b6362e8ca709b045157d0e3d196671ccee1757f2a06a2edd2d57ae7177fec
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libopengl32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libopengl32.a
                              • Size 68KB
                              • SHA256 aaa61b4758bb44d0b0fc821a688829cfd76f915dd1e1865fe2f3b95426330fd6
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libp2p.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libp2p.a
                              • Size 26KB
                              • SHA256 ba4cbbbe5184a56e1badaadee08af98c1e81445edec6db2281e5f0a1a7682c9f
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libp2pgraph.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libp2pgraph.a
                              • Size 10KB
                              • SHA256 e9525d27891e3105c8f08b7f41b7b5227545ec1ea3c7041b8e2135cc1720898f
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libpcwum.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libpcwum.a
                              • Size 9KB
                              • SHA256 61fd57a52445c629b984a13374e8162ddb2e4fdca041836c8ba62ac8f883a960
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libpdh.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libpdh.a
                              • Size 26KB
                              • SHA256 b14c7a7f8bd88995fc415af82327333e42fbf294513316a0e152d29709e60fe5
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libpowrprof.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libpowrprof.a
                              • Size 36KB
                              • SHA256 a18f4147b06c4a53dc5ec48776f33c3c544ffc01e00d2df375b47bbfec1fee0c
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libprntvpt.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libprntvpt.a
                              • Size 8KB
                              • SHA256 76648ec4756261a12cd90c9acbcb1b3ba9fdd1ba42bd053165bff430b29cff8c
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libpropsys.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libpropsys.a
                              • Size 55KB
                              • SHA256 33d0824305aa2b342c0738084c4d4fdf6c7dfa23c11f7f440b414ce652df6c08
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libquery.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libquery.a
                              • Size 3KB
                              • SHA256 d2c99aac77dd0996dbb7ba07170145e6277e39d7e37e36c951e4f3d368c83b39
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              librastapi.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\librastapi.a
                              • Size 9KB
                              • SHA256 628d475e774ef3b7ddfbf9506ba78d2e77c635f65a4c6b9c7719d3cfd196e665
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libregapi.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libregapi.a
                              • Size 23KB
                              • SHA256 257df9ca06a70c5a5a2c6f9904dd24de25cf81b58b93312ee68de648c34ced70
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libresutils.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libresutils.a
                              • Size 31KB
                              • SHA256 02f421b4772e44bb23ecf34d86bb5778a1e3e2111db85d7de5fe0ac71eb02ddb
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              librpcns4.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\librpcns4.a
                              • Size 15KB
                              • SHA256 8a809a64daf18d79c21346dc8e69f161b3595dc109ca0bd88ba71f7a1c8d0904
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              librpcrt4.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\librpcrt4.a
                              • Size 133KB
                              • SHA256 97539a3c42467ee0d0a7d18546872c5fe0408314c8b936bab5829cf63cc72670
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              librtutils.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\librtutils.a
                              • Size 9KB
                              • SHA256 e4a42057bc92d584f6fc5ac7ad31a0a9eeb04b15d43c9f9195d8a5fab8e25f24
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libruntimeobject.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libruntimeobject.a
                              • Size 26KB
                              • SHA256 c4ec0c81f2504a2582bdfd4f0a40101384102bac91f55ba7d7dd864b3d662c12
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libschannel.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libschannel.a
                              • Size 9KB
                              • SHA256 fdabf841902507e9d1c97a280ca1126150ef7c9c62553394226c6bb555301397
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libsecur32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libsecur32.a
                              • Size 25KB
                              • SHA256 dc1af85f55467df50b62485204b0651b1838bb4950a8a16b41312395a6c187a9
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libsecurity.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libsecurity.a
                              • Size 9KB
                              • SHA256 e212f63345a8ee7961a2c3067bff0ec88bb8d8f4c85eb1e4db9b86bd83fc9cbf
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libsetupapi.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libsetupapi.a
                              • Size 187KB
                              • SHA256 0a37f7e93a2c7443886e2573e3bba18c5b8fc7119ce66aac448a86ebb0b38382
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libshcore.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libshcore.a
                              • Size 21KB
                              • SHA256 41c3be7401620af39e087e705e4fb537561d2741d9f95f5345f1d13a0e78c430
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libshlwapi.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libshlwapi.a
                              • Size 92KB
                              • SHA256 c9c72a101b86ec0b4e3f663c6d025007b67418814abb4f88bc5b34d393ea6ace
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libsnmpapi.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libsnmpapi.a
                              • Size 9KB
                              • SHA256 9af28a2fc15735c7a70388bcaa47cc6dca55a870c7b26d0acc111d01dbf3b53d
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libsqlsrv32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libsqlsrv32.a
                              • Size 18KB
                              • SHA256 526f1e763583dac2755998c2a751434dd0474d0a305db79ab839820177a9b4db
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libsspicli.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libsspicli.a
                              • Size 24KB
                              • SHA256 0711dd47b43281f275088d63e81a0bcf370a0fa059b02a03b6f5a11fec460e01
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libsxs.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libsxs.a
                              • Size 8KB
                              • SHA256 99fecb69bc6c064a81a7287a5e21ec8f9d416cccab3f56f8f49931f81e14ec3b
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libtapi32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libtapi32.a
                              • Size 57KB
                              • SHA256 1f27e746566f0489d46a83e62f868a54e849164d551bf87791aa7850eedfd5a6
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libtdh.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libtdh.a
                              • Size 9KB
                              • SHA256 94cc94d389b173be65fb5a4bbf20f14d704c87194a1ec627e04c3d29b6ef0362
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libuiautomationcore.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libuiautomationcore.a
                              • Size 26KB
                              • SHA256 3eaf2db6cc8ad5193366d7f94698b3b82c55da26ed36b3d0cc160bdb204163fc
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              liburlmon.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\liburlmon.a
                              • Size 30KB
                              • SHA256 0458d24c81ea8a0a7b57a217463c69c3cf9a2082d3a96b84db9966be1bf47531
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libuser32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libuser32.a
                              • Size 203KB
                              • SHA256 6b2bea0a02e6a95bcbb684ff4ede16a4a51c8bd0a55e7e15b81255c4467190bb
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libuserenv.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libuserenv.a
                              • Size 19KB
                              • SHA256 c9d73aedfcbde527e9a41e9c1bb72924bd6fac5e8a4d0cae13483e8b72e2f94b
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libusp10.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libusp10.a
                              • Size 10KB
                              • SHA256 2ec2822645f5e945da1d6825dda39518f1788e8ca010728b49b8a969c72f3caf
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libutildll.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libutildll.a
                              • Size 8KB
                              • SHA256 759514cc13e1263ea3b9ab4ce1ad268b99fd7f7883e05aee836da8273eb0cb14
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libuxtheme.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libuxtheme.a
                              • Size 18KB
                              • SHA256 e24817975c639d550b8784a22c63d6bb2e9a6e441447c29f1795ffa69b7ec3d3
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libvfw32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libvfw32.a
                              • Size 28KB
                              • SHA256 3a4320c737e29e6369195e1388067690720ec75bc5eaf67794e7818e04eb6605
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libw32topl.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libw32topl.a
                              • Size 17KB
                              • SHA256 c694b26710c3ee5bb679247bcb3e5ff441e6c58c8b6df94032753e03f291a7b0
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libwebauthn.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwebauthn.a
                              • Size 16KB
                              • SHA256 0c4fcfdbed0d716c0e9af0d1010c1d6384ce809056f156a3bec5c4a8e55ffc88
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libwebservices.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwebservices.a
                              • Size 41KB
                              • SHA256 c0f10fa9398738c87448766c15b022be365fe4985dce71d428c18e050fd229f7
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libwer.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwer.a
                              • Size 20KB
                              • SHA256 4bd533a50760fb5b91972ce2142c213da16287a83e98be397e8e0d83e767c16e
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libwevtapi.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwevtapi.a
                              • Size 11KB
                              • SHA256 a9431dbeee122cb85fdf564c499b0f40a7f2cbdd1b3a247faf85c5428e186725
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libwimgapi.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwimgapi.a
                              • Size 13KB
                              • SHA256 fdc939350897dd5657dadda55f7256c25d11df4910f557736377008aa7a1289f
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libwindowsapp.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwindowsapp.a
                              • Size 1.4MB
                              • SHA256 db14ac0ccf0aa4d89c3377a12d6ffb8e9e3ad9c5aa9b8f80ba3baa64a94ea56f
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libwinhttp.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwinhttp.a
                              • Size 20KB
                              • SHA256 908a44e05021e5e8c51172b92424fb8348720bdb86ad5051ea13fcbe047b575f
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libwininet.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwininet.a
                              • Size 67KB
                              • SHA256 5cbf33adf13c87f782edc16e698babd554e032f6924f06ea0702d235435de117
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libwinmm.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwinmm.a
                              • Size 41KB
                              • SHA256 0cd8df789cf9224f21abde1824d93864f71160de5a0d43ef591ab79275c4f1a6
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libwinpthread.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwinpthread.a
                              • Size 259KB
                              • SHA256 d9e8068ee35009f892166ca678d7fe3e0a3549d4d82d8baa23848773f17564a4
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libwinscard.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwinscard.a
                              • Size 18KB
                              • SHA256 003c473acf85cc120ba224ce5069df030f740d091594335fb218ac0171b26a8a
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libwinspool.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwinspool.a
                              • Size 42KB
                              • SHA256 0ac7b643f820b246a638229e2da6e3ec37aacecf2fb5fbfd89a294bd6d28e921
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libwintrust.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwintrust.a
                              • Size 39KB
                              • SHA256 c31f0ac628b561ac32c58334555689e2629c63d6a90742df6c7001078cc25faa
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libwinusb.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwinusb.a
                              • Size 9KB
                              • SHA256 0d7a2b164cc60783dc03d7bf6df04d50d389e83e49e845e6e6f7a89d1cf61fd9
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libwlanapi.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwlanapi.a
                              • Size 65KB
                              • SHA256 a7ec69d1777e4e9cc82df0bcec3cf06b2d5cbacb49a034f1d96c7a353602fb63
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libwldap32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwldap32.a
                              • Size 50KB
                              • SHA256 11000c0e26fc8836118d149cedb7ad9559b48ae6995142766ae7fafafa75da33
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libwmi.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwmi.a
                              • Size 10KB
                              • SHA256 b5973846a0e220b1a9c9c5259243aec345cc8cc4286fd407af9acf3d73a147bc
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libwscapi.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwscapi.a
                              • Size 9KB
                              • SHA256 f04d061c1165ea1c900eaf50a55dd0a7e107be495b17b68c6f6c593d94123fcb
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libwsmsvc.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwsmsvc.a
                              • Size 2.0MB
                              • SHA256 a33db083f9041bf495b869fe74936869a36866ef3e4710427498cfd0f03b4a8e
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libwsock32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwsock32.a
                              • Size 14KB
                              • SHA256 a6353640658e71f6aed86318a5e2a2eabb37c96d2dc08073321dbbc16a7f4748
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libwtsapi32.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libwtsapi32.a
                              • Size 16KB
                              • SHA256 7e92ac1794f8fea894e4d539f0b7b5d65afe3de775a2f342aa8807ce97674f6a
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libx3daudio1_7.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libx3daudio1_7.a
                              • Size 1KB
                              • SHA256 7e7548928b9afefb6aae6243ea6066e22bca213301da259e4d5a78954b33095b
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              libxapofx1_5.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libxapofx1_5.a
                              • Size 1KB
                              • SHA256 47f64ab4e15b3ae509dbf4683990ed55a4f64cc66b95b231a4b1b7e2e9f5ffc3
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              libxinput1_3.a
                              • Path C:\Program Files\Windhawk\Compiler\x86_64-w64-mingw32\lib\libxinput1_3.a
                              • Size 2KB
                              • SHA256 bcb17e07fc3e7fe653ecfc8bd952b8afa4013304ee61dfcba21a36c337babca2
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              windhawk.dll
                              • Path C:\Program Files\Windhawk\Engine\1.7.3\32\windhawk.dll
                              • Size 905KB
                              • SHA256 67cdaaf26d342b3f2a2a84ea6f7474ac43340711675b66edef34cc3fcee1ea8f
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              windhawk.dll
                              • Path C:\Program Files\Windhawk\Engine\1.7.3\64\windhawk.dll
                              • Size 956KB
                              • SHA256 0aad074caf156200be7a77e4615f9171cea884cde96baf90397366c28c4f10a1
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              engine.ini
                              • Path C:\Program Files\Windhawk\Engine\1.7.3\engine.ini
                              • Size 224B
                              • SHA256 2f26a1ccca3d95df17fab8eabc10fb5044e5aecd82a5ce5c7a83c47ca7baeb0c
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              cpp.code-snippets
                              • Path C:\Program Files\Windhawk\UI\resources\app\extensions\cpp\snippets\cpp.code-snippets
                              • Size 204B
                              • SHA256 e941999dfc8e6150665480f07eb1a2b55593eda8f0835dded52fd630c89ea9f6
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              git-rebase.language-configuration.json
                              • Path C:\Program Files\Windhawk\UI\resources\app\extensions\git-base\languages\git-rebase.language-configuration.json
                              • Size 100B
                              • SHA256 4da287b386da11602d2fa4203dbe4bc6048f7263c5c4a917f95dbbb73394fa7f
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              git.png
                              • Path C:\Program Files\Windhawk\UI\resources\app\extensions\git-base\resources\icons\git.png
                              • Size 2KB
                              • SHA256 a6df2fb8c4b89a8e76c9fbf7b0b9e5d26266c2014a6493f14800d7b4e184bd70
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssh-askpass-empty.sh
                              • Path C:\Program Files\Windhawk\UI\resources\app\extensions\git\dist\ssh-askpass-empty.sh
                              • Size 17B
                              • SHA256 2233a17368f4ffdc92f9b6c74b450b7c84e355eae0f90693385887136d1d8c55
                              • MD5 SHA1 SHA512
                              Submit Download

                              status-ignored.svg
                              • Path C:\Program Files\Windhawk\UI\resources\app\extensions\git\resources\icons\light\status-ignored.svg
                              • Size 436B
                              • SHA256 a94b36406274f1a1c65e8fef25fed5616deea8a25bfa9aa143410d5c6ff7cdc7
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              status-renamed.svg
                              • Path C:\Program Files\Windhawk\UI\resources\app\extensions\git\resources\icons\light\status-renamed.svg
                              • Size 436B
                              • SHA256 7aa665b1079a0065b38fe17c42fb6b94b33718c4d31a9146aa82e90c581dda81
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              status-untracked.svg
                              • Path C:\Program Files\Windhawk\UI\resources\app\extensions\git\resources\icons\light\status-untracked.svg
                              • Size 436B
                              • SHA256 d6e875c18b47ad8a9046f8f12d19ad901340edb57ce48f93d054ce29ae5488a4
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              jsonClientMain.js.LICENSE.txt
                              • Path C:\Program Files\Windhawk\UI\resources\app\extensions\json-language-features\client\dist\node\jsonClientMain.js.LICENSE.txt
                              • Size 5KB
                              • SHA256 38ee4192b4a1f7da0535d4f2bd219ab5b108b1d3b6b9871ca00c762464b60701
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              DO_NOT_EDIT.txt
                              • Path C:\Program Files\Windhawk\UI\resources\app\extensions\windhawk\webview\locales\da\DO_NOT_EDIT.txt
                              • Size 176B
                              • SHA256 46cf50bf090de247776fbf1c7ff10936a2e2b65e8127ea7854292068204d893a
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              issueReporter.js
                              • Path C:\Program Files\Windhawk\UI\resources\app\out\vs\code\electron-sandbox\issue\issueReporter.js
                              • Size 42KB
                              • SHA256 9ebbf15f353cbc8f254e1dffc79ebf3fa5139a6d432d56c8c49c1b84f04325b0
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              letterpress-hcDark.svg
                              • Path C:\Program Files\Windhawk\UI\resources\app\out\vs\workbench\browser\parts\editor\media\letterpress-hcDark.svg
                              • Size 4KB
                              • SHA256 12d3449ca9393f66b59f1c20cbaeb10d7d187e0f83df2bfbf0c7d87de646a12d
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              windhawk.exe
                              • Path C:\Program Files\Windhawk\windhawk.exe
                              • Size 815KB
                              • SHA256 52db87dee0160a13cf51e31bee6320da09767582f1f359f8cf9a787d1228bf44
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              windhawk.ini
                              • Path C:\Program Files\Windhawk\windhawk.ini
                              • Size 314B
                              • SHA256 57feabeb0b89b91fa67c66101bef23227ee935e15f9e595449adfb3fd35e8994
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              Windhawk.lnk
                              • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windhawk.lnk
                              • Size 1KB
                              • SHA256 c7ceac66f27700cd065b9112804c73676d7122131ce47eebaaf4695288d7c513
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ~indhawk.tmp
                              • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\~indhawk.tmp
                              • Size 1KB
                              • SHA256 25612e069b12a865a5adcf8451cc3072de2f2814c0a1999f3081e371b1fab717
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              settings.json
                              • Path C:\ProgramData\Windhawk\EditorWorkspace\.vscode\settings.json
                              • Size 2B
                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                              • MD5 SHA1 SHA512
                              Submit Download

                              settings.json
                              • Path C:\ProgramData\Windhawk\EditorWorkspace\.vscode\settings.json
                              • Size 48B
                              • SHA256 2119f98b717df1804bfd88374d04b42d930165bf334c9e606701fbfedecd6f7f
                              • MD5 SHA1 SHA512
                              Submit Download

                              settings.json
                              • Path C:\ProgramData\Windhawk\EditorWorkspace\.vscode\settings.json
                              • Size 132B
                              • SHA256 212bf7f1772994c8399eaacee875d378e3ac263e6a4950d117666a4f1dce4f08
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              extensions.json
                              • Path C:\ProgramData\Windhawk\UIData\extensions\extensions.json
                              • Size 2B
                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                              • MD5 SHA1 SHA512
                              Submit Download

                              53cbb242-96cf-4ca7-8eed-ac2538bfccf9.tmp
                              • Path C:\ProgramData\Windhawk\UIData\user-data\53cbb242-96cf-4ca7-8eed-ac2538bfccf9.tmp
                              • Size 57B
                              • SHA256 be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              index
                              • Path C:\ProgramData\Windhawk\UIData\user-data\CachedData\d2c422ca15f1fbc976eed3e02e3392bbb39c5824\chrome\js\index
                              • Size 24B
                              • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                              • MD5 SHA1 SHA512
                              Submit Download

                              temp-index
                              • Path C:\ProgramData\Windhawk\UIData\user-data\CachedData\d2c422ca15f1fbc976eed3e02e3392bbb39c5824\chrome\js\index-dir\temp-index
                              • Size 48B
                              • SHA256 cbcecae0a8f4131208847a1d31533e460e7d25c7ff847c21821df0c010e5d86e
                              • MD5 SHA1 SHA512
                              Submit Download

                              CURRENT
                              • Path C:\ProgramData\Windhawk\UIData\user-data\Local Storage\leveldb\CURRENT
                              • Size 16B
                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                              • MD5 SHA1 SHA512
                              Submit Download

                              4d94876f-4764-4426-904d-978134314415.tmp
                              • Path C:\ProgramData\Windhawk\UIData\user-data\Network\4d94876f-4764-4426-904d-978134314415.tmp
                              • Size 296B
                              • SHA256 8cdfc7f930d00224fdd316732a8186fb5285eac6bd31199dc1f7fa11b69758c2
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              96c9d4cd-c13b-4119-8861-d11e7890b234.tmp
                              • Path C:\ProgramData\Windhawk\UIData\user-data\Network\96c9d4cd-c13b-4119-8861-d11e7890b234.tmp
                              • Size 59B
                              • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              temp-index
                              • Path C:\ProgramData\Windhawk\UIData\user-data\Service Worker\CacheStorage\40bf4ff837b663f7ca39faa66915717c599f5426\ef432ef6-2140-477f-ab99-88c872e939ea\index-dir\temp-index
                              • Size 216B
                              • SHA256 9b4c84119947aaed14ce7003dab2248a48bde940a9deb14bd6ff066f10e6cff5
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              the-real-index
                              • Path C:\ProgramData\Windhawk\UIData\user-data\Service Worker\CacheStorage\40bf4ff837b663f7ca39faa66915717c599f5426\ef432ef6-2140-477f-ab99-88c872e939ea\index-dir\the-real-index
                              • Size 48B
                              • SHA256 fce187f2ba86b36c8b6ce76e84f005b8702276d8616f34ee112c5a2eec6a9bb9
                              • MD5 SHA1 SHA512
                              Submit Download

                              index.txt
                              • Path C:\ProgramData\Windhawk\UIData\user-data\Service Worker\CacheStorage\40bf4ff837b663f7ca39faa66915717c599f5426\index.txt
                              • Size 150B
                              • SHA256 60d998a7e00a04ba250960ac099de70c71d91c54af4f6ffe4f0652e4898ed8e4
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              index.txt.tmp
                              • Path C:\ProgramData\Windhawk\UIData\user-data\Service Worker\CacheStorage\40bf4ff837b663f7ca39faa66915717c599f5426\index.txt.tmp
                              • Size 146B
                              • SHA256 d1a67abeccef69fd25bafe11d79d1f8d45bb6df644ebf08a62f84c4a261e4a63
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              MANIFEST-000001
                              • Path C:\ProgramData\Windhawk\UIData\user-data\Service Worker\Database\MANIFEST-000001
                              • Size 41B
                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                              • MD5 SHA1 SHA512
                              Submit Download

                              temp-index
                              • Path C:\ProgramData\Windhawk\UIData\user-data\Service Worker\ScriptCache\index-dir\temp-index
                              • Size 72B
                              • SHA256 689604698efacc41fbb73e82f971339ce5b0d559ef79c57f606c87919e532bcc
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              the-real-index
                              • Path C:\ProgramData\Windhawk\UIData\user-data\Service Worker\ScriptCache\index-dir\the-real-index
                              • Size 72B
                              • SHA256 0538fab7afb58716e502cd4c1eb51ffd2149e983687b5ab77377f7cc72798777
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              storage.json
                              • Path C:\ProgramData\Windhawk\UIData\user-data\User\globalStorage\storage.json
                              • Size 1KB
                              • SHA256 7a1c33e4a85f8c767643486a4862e12b056edcd88b19edf3b373df51a601adef
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              f015d69b-a14b-486d-971e-c3106546ae75.tmp
                              • Path C:\ProgramData\Windhawk\UIData\user-data\f015d69b-a14b-486d-971e-c3106546ae75.tmp
                              • Size 389B
                              • SHA256 98b9ced898651a190b20312f9b202622937fd4589bc1e4eafe1edc6a7a3a177a
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock
                              • Path C:\Users\Admin\AppData\Local\D3DSCache\19f4e3cfcda13cab\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock
                              • Size 4B
                              • SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
                              • MD5 SHA1 SHA512
                              Submit Download

                              57C8EDB95DF3F0AD4EE2DC2B8CFD4157
                              • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157
                              • Size 302B
                              • SHA256 516da8da4832a2cd84bf268883e5c328b49049b83880d32ff2b5ca0569493c75
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              77EC63BDA74BD0D0E0426DC8F8008506
                              • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
                              • Size 290B
                              • SHA256 56da031a4f840fd206691876a275032e1c098da823b61859dc9c5c9ae634a41d
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              AccessControl.dll
                              • Path C:\Users\Admin\AppData\Local\Temp\nsuDC4.tmp\AccessControl.dll
                              • Size 15KB
                              • SHA256 5fd5d8aec97cffaad9b7df6371b348d436cf1401e86fab614dc4cb8575428e52
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              ApplicationID.dll
                              • Path C:\Users\Admin\AppData\Local\Temp\nsuDC4.tmp\ApplicationID.dll
                              • Size 198KB
                              • SHA256 f6851dcbf0a39edecd8a46564bc455e5273736c3dbcb02b954c201c79ccdf117
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              INetC.dll
                              • Path C:\Users\Admin\AppData\Local\Temp\nsuDC4.tmp\INetC.dll
                              • Size 25KB
                              • SHA256 85e03805f90f72257dd41bfdaa186237218bbb0ec410ad3b6576a88ea11dccb9
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              LangDLL.dll
                              • Path C:\Users\Admin\AppData\Local\Temp\nsuDC4.tmp\LangDLL.dll
                              • Size 5KB
                              • SHA256 4cf25411f28f639f72156c24b0f66ea42f5aee5973f6c137d901da6ae42d5b7e
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              SimpleSC.dll
                              • Path C:\Users\Admin\AppData\Local\Temp\nsuDC4.tmp\SimpleSC.dll
                              • Size 1.1MB
                              • SHA256 1620cdf739f459d1d83411f93648f29dcf947a910cc761e85ac79a69639d127d
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              System.dll
                              • Path C:\Users\Admin\AppData\Local\Temp\nsuDC4.tmp\System.dll
                              • Size 12KB
                              • SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              nsDialogs.dll
                              • Path C:\Users\Admin\AppData\Local\Temp\nsuDC4.tmp\nsDialogs.dll
                              • Size 9KB
                              • SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              nsExec.dll
                              • Path C:\Users\Admin\AppData\Local\Temp\nsuDC4.tmp\nsExec.dll
                              • Size 7KB
                              • SHA256 b121689861b506dbc9c3797b49bc8a90d555cb7db58cb959165cc758391c00bb
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              nsis7z.dll
                              • Path C:\Users\Admin\AppData\Local\Temp\nsuDC4.tmp\nsis7z.dll
                              • Size 424KB
                              • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              default.exc
                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
                              • Size 2B
                              • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                              • MD5 SHA1 SHA512
                              Submit Download

                              Windhawk.lnk
                              • Path C:\Users\Public\Desktop\Windhawk.lnk
                              • Size 1KB
                              • SHA256 a4f5ded43976e61d00259cc5c27ed58c04aa069157fbbbd9ed617b462b15ad69
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ~indhawk.tmp
                              • Path C:\Users\Public\Desktop\~indhawk.tmp
                              • Size 1KB
                              • SHA256 283cc580273c69e2bd43705e4f40c4b43cfea9a4d7e228df73a54145a19c9c1e
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              WindhawkRunUITask
                              • Path C:\Windows\System32\Tasks\WindhawkRunUITask
                              • Size 2KB
                              • SHA256 10b198979ca99ca5bb387af5684014227687a00cf9e0ff71ea8a0ccfcf8250fc
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              WindhawkUpdateTask
                              • Path C:\Windows\System32\Tasks\WindhawkUpdateTask
                              • Size 3KB
                              • SHA256 4e1950e86be2aa8765ebc165a9628e05ef964a53396b2710e28c25b37ab30bc2
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              dberr.txt
                              • Path C:\Windows\System32\catroot2\dberr.txt
                              • Size 74KB
                              • SHA256 5627614a7a9e1e17707fb9f154944bb44393699bd8495c2ac507ff22f5b4d707
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              FB0D848F74F70BB2EAA93746D24D9749
                              • Path C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FB0D848F74F70BB2EAA93746D24D9749
                              • Size 330B
                              • SHA256 cd1423e2784072bc7d93425a8278181fe40760cd3d0a6792069e0c44292846d0
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              memory/360-18055-0x0000000025670000-0x0000000025671000-memory.dmp
                              Download

                              memory/672-18057-0x0000000019060000-0x0000000019061000-memory.dmp
                              Download

                              memory/740-18050-0x000000002B840000-0x000000002B841000-memory.dmp
                              Download

                              memory/940-18053-0x0000000007D60000-0x0000000007D61000-memory.dmp
                              Download

                              memory/1032-18059-0x0000000034590000-0x0000000034591000-memory.dmp
                              Download

                              memory/1116-18061-0x0000000013C20000-0x0000000013C21000-memory.dmp
                              Download

                              memory/1156-18087-0x0000000003AD0000-0x0000000003AD1000-memory.dmp
                              Download

                              memory/1252-18139-0x0000000004F50000-0x0000000004F51000-memory.dmp
                              Download

                              memory/1272-18063-0x000000003FC80000-0x000000003FC81000-memory.dmp
                              Download

                              memory/1352-18065-0x000000003E060000-0x000000003E061000-memory.dmp
                              Download

                              memory/1364-18067-0x0000000029650000-0x0000000029651000-memory.dmp
                              Download

                              memory/1468-18069-0x000000000B9C0000-0x000000000B9C1000-memory.dmp
                              Download

                              memory/1588-18071-0x0000000026080000-0x0000000026081000-memory.dmp
                              Download

                              memory/1600-18073-0x0000000018490000-0x0000000018491000-memory.dmp
                              Download

                              memory/1696-18075-0x0000000030B50000-0x0000000030B51000-memory.dmp
                              Download

                              memory/1740-18077-0x00000000159C0000-0x00000000159C1000-memory.dmp
                              Download

                              memory/1752-18079-0x000000001EA20000-0x000000001EA21000-memory.dmp
                              Download

                              memory/1784-18081-0x00000000006A0000-0x00000000006A1000-memory.dmp
                              Download

                              memory/2000-18083-0x000000000E9D0000-0x000000000E9D1000-memory.dmp
                              Download

                              memory/2036-18085-0x0000000033BC0000-0x0000000033BC1000-memory.dmp
                              Download

                              memory/2056-18089-0x000000003E030000-0x000000003E031000-memory.dmp
                              Download

                              memory/2064-18091-0x000000002BBF0000-0x000000002BBF1000-memory.dmp
                              Download

                              memory/2236-18093-0x0000000032600000-0x0000000032601000-memory.dmp
                              Download

                              memory/2340-18095-0x0000000020530000-0x0000000020531000-memory.dmp
                              Download

                              memory/2372-18097-0x00000000025F0000-0x00000000025F1000-memory.dmp
                              Download

                              memory/2492-18099-0x0000000018BA0000-0x0000000018BA1000-memory.dmp
                              Download

                              memory/2520-18169-0x000000000A410000-0x000000000A411000-memory.dmp
                              Download

                              memory/2576-18101-0x0000000034E60000-0x0000000034E61000-memory.dmp
                              Download

                              memory/2704-18103-0x000000001D020000-0x000000001D021000-memory.dmp
                              Download

                              memory/2744-18105-0x0000000005730000-0x0000000005731000-memory.dmp
                              Download

                              memory/2756-18107-0x0000000029A30000-0x0000000029A31000-memory.dmp
                              Download

                              memory/2828-18171-0x0000000031920000-0x0000000031921000-memory.dmp
                              Download

                              memory/2844-18109-0x0000000015010000-0x0000000015011000-memory.dmp
                              Download

                              memory/2852-18111-0x00000000390B0000-0x00000000390B1000-memory.dmp
                              Download

                              memory/3004-18113-0x000000001B060000-0x000000001B061000-memory.dmp
                              Download

                              memory/3124-18115-0x0000000035380000-0x0000000035381000-memory.dmp
                              Download

                              memory/3132-18117-0x00000000170C0000-0x00000000170C1000-memory.dmp
                              Download

                              memory/3192-18119-0x0000000007770000-0x0000000007771000-memory.dmp
                              Download

                              memory/3236-18121-0x000000000CD80000-0x000000000CD81000-memory.dmp
                              Download

                              memory/3312-18137-0x0000000030B20000-0x0000000030B21000-memory.dmp
                              Download

                              memory/3508-18123-0x0000000020F90000-0x0000000020F91000-memory.dmp
                              Download

                              memory/3588-18125-0x000000000AF10000-0x000000000AF11000-memory.dmp
                              Download

                              memory/3644-18127-0x0000000028640000-0x0000000028641000-memory.dmp
                              Download

                              memory/3676-18129-0x000000003C2E0000-0x000000003C2E1000-memory.dmp
                              Download

                              memory/3684-18131-0x000000000EC70000-0x000000000EC71000-memory.dmp
                              Download

                              memory/3700-18133-0x000000002E400000-0x000000002E401000-memory.dmp
                              Download

                              memory/3744-18135-0x000000003F160000-0x000000003F161000-memory.dmp
                              Download

                              memory/4176-18167-0x000000000E3B0000-0x000000000E3B1000-memory.dmp
                              Download

                              memory/4360-18141-0x0000000018200000-0x0000000018201000-memory.dmp
                              Download

                              memory/4432-18143-0x0000000036310000-0x0000000036311000-memory.dmp
                              Download

                              memory/4500-18145-0x000000001E150000-0x000000001E151000-memory.dmp
                              Download

                              memory/4592-18147-0x0000000037D70000-0x0000000037D71000-memory.dmp
                              Download

                              memory/4976-18173-0x0000000000910000-0x0000000000911000-memory.dmp
                              Download

                              memory/5016-18175-0x000000003CEF0000-0x000000003CEF1000-memory.dmp
                              Download

                              memory/5076-18151-0x0000000001C80000-0x0000000001C81000-memory.dmp
                              Download

                              memory/5080-18031-0x00000000007B0000-0x00000000008CC000-memory.dmp
                              Download

                              memory/5116-18149-0x000000003EBF0000-0x000000003EBF1000-memory.dmp
                              Download

                              memory/5188-18153-0x000000001C970000-0x000000001C971000-memory.dmp
                              Download

                              memory/5228-18161-0x0000000024890000-0x0000000024891000-memory.dmp
                              Download

                              memory/5256-18155-0x0000000024EE0000-0x0000000024EE1000-memory.dmp
                              Download

                              memory/5296-18157-0x000000000E2F0000-0x000000000E2F1000-memory.dmp
                              Download

                              memory/5424-18165-0x00000000194F0000-0x00000000194F1000-memory.dmp
                              Download

                              memory/5656-18159-0x000000002EED0000-0x000000002EED1000-memory.dmp
                              Download

                              memory/5960-18163-0x000000001D410000-0x000000001D411000-memory.dmp
                              Download

                              memory/7780-18353-0x0000000005C60000-0x0000000005CC6000-memory.dmp
                              Download

                              memory/7780-18354-0x0000000005CD0000-0x0000000005D36000-memory.dmp
                              Download

                              memory/7780-18357-0x0000000005D40000-0x000000000609B000-memory.dmp
                              Download

                              memory/7780-18369-0x0000000006740000-0x000000000675A000-memory.dmp
                              Download

                              memory/7780-18352-0x0000000005440000-0x0000000005462000-memory.dmp
                              Download

                              memory/7780-18315-0x00000000054A0000-0x0000000005AEA000-memory.dmp
                              Download

                              memory/7780-18310-0x0000000004D40000-0x0000000004D76000-memory.dmp
                              Download

                              memory/7780-18363-0x0000000006240000-0x000000000628C000-memory.dmp
                              Download

                              memory/7780-18362-0x0000000006220000-0x000000000623E000-memory.dmp
                              Download

                              memory/7780-18368-0x0000000007880000-0x0000000007EFC000-memory.dmp
                              Download