c239a0e143d63c177f0647cb88febe8695feb31c7f9d2f67d7fdd0d3d3b4731c

Analysis

max time kernel
186s
max time network
202s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
22-12-2023 15:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

e342274b59e65578a37019215b798b45.exe
Size

104KB
MD5

e342274b59e65578a37019215b798b45
SHA1

6f1acccea63b791e26b464066aca10d6b5263bec
SHA256

c239a0e143d63c177f0647cb88febe8695feb31c7f9d2f67d7fdd0d3d3b4731c
SHA512

0a96c7f3ddc34dd52a907d0d96ee99245f57a22ad7460c5bbd9749d1887e5b2a765365bf4a36d22026e97f60c9ba22607c4dff17c9dc86380dff484f96977032
SSDEEP

3072:OCFqSLhcXBVMKkQNsgrr/8vsp0vrqUs/8ICqP5:OqhcXBVMRQHsvS0jdDM5

Score

9^/10

persistence ransomware

Malware Config

Signatures

Renames multiple (722) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Alcmeter = "C:\\Users\\Admin\\AppData\\Local\\Temp\\8lX6v1peh72Mukh.exe"	e342274b59e65578a37019215b798b45.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\VideoLAN\VLC\locale\fi\LC_MESSAGES\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\Java\jdk-1.8\jre\legal\javafx\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\legal\javafx\directshow.md	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\TPN.txt	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\MEDIA\SUCTION.WAV	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\Microsoft Office\Office16\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.contrast-white_scale-80.png	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected]	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\Microsoft Office\root\Templates\1033\GettingStarted16\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\BOLDSTRI\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\lib\deploy\[email protected]	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\Java\jre-1.8\bin\plugin2\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\Microsoft Office\root\Integration\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\Microsoft Office\root\Office16\PersonaSpy\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected]	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\ExcelMessageDismissal.txt	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected]	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\SLATE\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_gloss-wave_35_f6a828_500x100.png	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.0\it\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Filters\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\EVRGREEN\PREVIEW.GIF	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\VideoLAN\VLC\locale\bn_IN\LC_MESSAGES\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\VideoLAN\VLC\locale\sq\LC_MESSAGES\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\images\Back-48.png	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\Java\jdk-1.8\jre\bin\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.scale-80.png	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\Microsoft Office\root\Office16\MSIPC\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\ECLIPSE\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ar\LC_MESSAGES\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\VideoLAN\VLC\locale\sl\LC_MESSAGES\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\7-Zip\Lang\va.txt	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\Java\jdk-1.8\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\Microsoft Office\root\Office16\MEDIA\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\AFTRNOON\THMBNAIL.PNG	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\PROTTPLV.PPT	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\Microsoft Office\root\Office16\MSIPC\bg\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\7-Zip\Lang\sl.txt	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\Common Files\microsoft shared\VGX\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\legal\jdk\relaxngdatatype.md	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\Java\jre-1.8\bin\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\Java\jre-1.8\bin\dtplugin\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000018\cardview\lib\native-common\assets\[email protected]	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected]	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Smart Tag\METCONV.TXT	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\VideoLAN\VLC\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\VideoLAN\VLC\locale\uz\LC_MESSAGES\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected]	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\QUAD\THMBNAIL.PNG	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\WATERMAR\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\7-Zip\Lang\ku-ckb.txt	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\Java\jre-1.8\lib\jvm.hprof.txt	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.contrast-black_scale-100.png	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\MEDIA\CLICK.WAV	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\CancelFluent.png	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\7-Zip\Lang\hi.txt	e342274b59e65578a37019215b798b45.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\legal\jdk\freebxml.md	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\LEVEL\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\TRANSLAT\ENES\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\dialogs\HOW TO DECRYPT FILES.txt	e342274b59e65578a37019215b798b45.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\JIXYNMTGOFNNODU	e342274b59e65578a37019215b798b45.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\JIXYNMTGOFNNODU\ = "CRYPTED!"	e342274b59e65578a37019215b798b45.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\JIXYNMTGOFNNODU\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\8lX6v1peh72Mukh.exe,0"	e342274b59e65578a37019215b798b45.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\JIXYNMTGOFNNODU\shell\open\command	e342274b59e65578a37019215b798b45.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\JIXYNMTGOFNNODU\shell	e342274b59e65578a37019215b798b45.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\JIXYNMTGOFNNODU\shell\open	e342274b59e65578a37019215b798b45.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.CryptoLocker2015	e342274b59e65578a37019215b798b45.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.CryptoLocker2015\ = "JIXYNMTGOFNNODU"	e342274b59e65578a37019215b798b45.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\JIXYNMTGOFNNODU\DefaultIcon	e342274b59e65578a37019215b798b45.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\JIXYNMTGOFNNODU\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\8lX6v1peh72Mukh.exe"	e342274b59e65578a37019215b798b45.exe

C:\Users\Admin\AppData\Local\Temp\e342274b59e65578a37019215b798b45.exe
"C:\Users\Admin\AppData\Local\Temp\e342274b59e65578a37019215b798b45.exe"
1⤵
- Adds Run key to start application
- Drops file in Program Files directory
- Modifies registry class
PID:2348

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\7-Zip\HOW TO DECRYPT FILES.txt

Filesize
438B

MD5
515f29d240c8defcfd6ee9395f2f7564

SHA1
e7ff1b461236fc7dacfa7776e43bde1188fe8a0f

SHA256
dabcf6b327c3ec0f177e21044c1aa01d215055b8b195aa1a7298ff8f8820ddc3

SHA512
5c42006bdfde4ba445325c3ad5dc28b5c5583d50c0cd853911c6224827b0dc1ba76d3bb16514b5815b3d82ebbf8e990a32ac64450df45de52a9f36fe74e0bf8c

Download Submit
C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif

Filesize
153B

MD5
61f51ef4c749977540451baa47632167

SHA1
bb9f0c5d17205316589cfaca227feba29de7f324

SHA256
536c04cf0c28c408eae391476b9e3e192dd595ab2d9dcc657eef9899454b2f33

SHA512
867fc234780ac7f432cc6f6b256117293fffb720b286397b8e7856830821ec5a81dc7753c3cf4b25d6aa3fc9a5b2255270a41705bb3e393da862f00a1b1abcaa

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt

Filesize
190B

MD5
6a86043da7e970f3a936e60f1b021c0a

SHA1
0e7466afd643210e6fe0dc8de568d41f8d2d296f

SHA256
71926580c3e091566d9316a60999908df51bd4a3a75f7341bbb189051b2cd878

SHA512
033d68ef297ec0ebdab347c8f569d3b3868d1e75b4c93a348ffb676b14d35a393d0416f5329b80a19d737479292359d34e3e96553bd2172e85fd73fba40d669b

Download Submit
C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt

Filesize
190B

MD5
1cfa92245910eb9b98a39e725cd2d051

SHA1
890992c4d4b7c3ce16be011f602b487b6245ad6b

SHA256
76e5c13d602247db44593713e5485b97740b4472473859f223d75a7580d0e380

SHA512
0273e461bdd874807cdda95d5070401007ade22a63b89eb5fb3acfc7964b17a6efb04bf7221c768737037661e0fc6b1ddf7cff04ebdb6a48582be1547b949b2a

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md

Filesize
1KB

MD5
aecc71263bb97bbf6fef382b1524cc50

SHA1
5e8e273ed72774fc1a70a2c4372261be9901a319

SHA256
c1088c6b9019c69204f6754778a88fa7c62039bbb8aadc88ecef64ea8ddfa3d1

SHA512
ecfe1d2004eff72d2977d4d4d586d447498a5148de9d2270ded37bf29729735edf7d7646359864530cceecbb2d6ab60de69ff0d202f0c8c7bb891090c5c75c50

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\glib.md

Filesize
31KB

MD5
985ddcb637e37ecfec27b92c4e69210e

SHA1
c3c725a3b06755c6c5664ece432faeae2d56ebc9

SHA256
95849fc1c07c6bb2f298e84d11bdb651813ec5cb16e5bb64e404fc428d65431d

SHA512
2ba56a52d34385b9fc9205037cef89b9cb6c6af86a471865f219a12ca08bb1bc422cc0c9ff50dd34a4c68339ee84feb8527f394a1a51ada7c79f34763d862703

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md

Filesize
34KB

MD5
61e20256f286b9611ec31134fa90d027

SHA1
a53f747c812e9fdaedabda23bfd600057b52e988

SHA256
d67f320c2297667c987b57fa4d290b140b115a6a9669acfe1f06797bcefec3d4

SHA512
9a651177d1edadb5b969255fa19017d4753eba9f59864db37af0d313898f96b17d2e88c2accfae0161a9a8cfbe2501e91c1b5cc7262c3c15f7d60b90d4158351

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md

Filesize
23KB

MD5
f36fa926fbb317f1728acfb457327dbd

SHA1
31fb6601bf500b3fd4f04786b56a1d9fa55ad1d6

SHA256
5915285b49241dbd3887c2de9f8fa744f8d701d63a858f9f9804ab3fd3422a2b

SHA512
f9bc819e2759a787769c619f9992986004931bd9dbb601e040244c71e524f467524a73c17441fdd37a244fbdc7bf773f15e24837554e8e30d2d682ed0193f8ae

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md

Filesize
2KB

MD5
b5ae8d8fe89568739e44a14b6ae2f022

SHA1
4262e586a2d8a0734094242c178f7d6aaf834a9d

SHA256
a08d88ac954150a5c673aa7b90ae9725b57d2aff50ac60432685d764bb0fd497

SHA512
93ce909003735de777e9bb0f68cbbc9b4c22b633ad047a7ce7b6b7597d6e954cb78af90237654e8ac27b27573247314e16836146833f31069fdb10a53e2a3fe4

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md

Filesize
1KB

MD5
7019e074b8d10739ff474b8f86c8e825

SHA1
ead9b6a59946af35e411d9c10d85f8ebc77cbf61

SHA256
f194f29317d9198b086fdd090194e6bd47d296b93818225015567a0e27c6a4f7

SHA512
ce72f49af4731d9b48e6cb2cdce201c58c767020cb772f9854a94dd7d856b80ab3cbf55b340ef6d2fa2412755db4acade4e621ced5a9cc04c7508f1f8c8ff2ac

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md

Filesize
3KB

MD5
495b671793daf9f7f53da86a5b0022c7

SHA1
ea226b92a64fa19698cbeb11e6b372521917b745

SHA256
9be684995d8e5001f5bc83446601e20286ba1c082c75747486c7713fe5735c3c

SHA512
0c07c66e326fcd9ca6591843e67ef79519a0ca6a6a11b1a92c88b2549480029c32a7db1ab4230e7dcdc33b70d9bf419561af8cd571429c7186e0601914c83a87

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md

Filesize
2KB

MD5
92aabae7a473e54daf687146453f28e6

SHA1
15d6eba289e1c5ac96c6115ecc4c70278fc5dbf9

SHA256
2a93451c78d9b07dfaa82a62442d3fbebbdbba620d80122273c84502dcc07033

SHA512
b3f3a887d427393d0f184622d23291b23768f20d08df328a6ee491903684f4babd9b29aee2cfd33911762f541207eb11be2d37632a91b68b8b7ae4bfc434fc68

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md

Filesize
5KB

MD5
9b859ca244ab30d42e15fb361c83f1ba

SHA1
091c4d1854d8a2252c37ed15543763b9474321e0

SHA256
aefa3ad6aac4f9ef6d1a980fd7be61415c9427df4c34217f5c6c717605c6f7c7

SHA512
fe6c7ed7fe95423d921d4dbfd35beaf4dced474079877684dc29a1b6521af7856c52bdd53e5518650773c9b398d8f88df3027a0acf7728c89c100336211f7d42

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md

Filesize
17KB

MD5
9375465f66b95f6f1d4cd195ad2665b0

SHA1
362d9c11f6707ea5cfa3c9596df252db9ee6cc2d

SHA256
fd7617c38cf499c91e20cd453944ccbca68a7cb0e5f3a1158a943729129cac72

SHA512
9dda636f15efbb5be4a9ffd40bb63a6ce1966e534a1160750987a96991cd0e0895664946e9aded5888536519e57d29a67a8510485e2c01ade745a3441e7fd215

Download Submit
C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md

Filesize
320KB

MD5
77326d505e9a7fcf8dc312a381dd6a83

SHA1
3080cf2ff0c649730749edcb384aad45335ca66d

SHA256
f0212b4ce6d3c87ef3ea2cde02388083bd05b81a16a9d89c144eba9e7c9cc97d

SHA512
9a7ecbb43779f42c68584e791aff2cddb4113d640a4bbf6a7aab8e8bcc9d265525a3567f1f1f7193246edc3d2f03c732080ab9ab73a4258910742b915b3899d8

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\asm.md

Filesize
1KB

MD5
31a88f5b1e15e3997782a1fa344882a8

SHA1
7593753be107be92b9b108972f80e4109a2d93be

SHA256
5e59cec8a4fe732fb998ea3462ccf5f142f5e64f3b8443fa82d4f1fdc5156f43

SHA512
b95dca151c0b881a625c2847028e0a5f6dfeb119c374c2a247d8190941b6469b8a893687eb9a606e1a088490a7b6b0d972f6597dcc74e1066490ea9daa094de5

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md

Filesize
10KB

MD5
679300d1a275f6e22b957ab7d188a65b

SHA1
a246e38fc2f556b529ad4af7d4ea05caeb08a66f

SHA256
bb209f550ca274dd1ccbbb8c141561acb449989666367aecb84aff7e99a16c3d

SHA512
a1d60f1aa52755ec58a36ee7f127763a34d82a438901146f7176f314d694282cdb25acf8cd7bbe09a82d83938e36465655555cd2409a02e4e8ad0acd4fef33af

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md

Filesize
3KB

MD5
8365aa835bd88da082bc26000453bb6e

SHA1
9a549b0341b9e5a814f2ba5147fc4bc190752ec3

SHA256
cf5d6fe6f0ab84b55811b403890e89eb063919ed7c3ece1c7b6469db3269b311

SHA512
c74104e77618962df9dd80dd270cc9590a3d49cf84ae0d1ec7fffca1678a2dbbef6f44c37bddcfd06e51b0296f8693a4d9e544a42e23b6e47497b5d7963718f8

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md

Filesize
162B

MD5
561b6e7baa3006d16c89e45ca8184091

SHA1
9621663c0d0a80050713e9f3a81c36cdbc4b42c6

SHA256
9f9de53d9052479e5f7e9138048f8a069bee1e6ff8822f3dc22fa91451c0d66c

SHA512
a05d5e52616ecfa8c8f5db692c24a923571fb08776a2e25354f402d24395c9afefbe170dbf7ccd1828f06f9aac1a5b66936a800724e508e4515157ac433d737f

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md

Filesize
1KB

MD5
aa4c3384e3ffc3b6fa32b32d61451fc0

SHA1
1616375e82de3fc5086ff9de7a085f8e5821da62

SHA256
69936abce775e68f8f55074d1b3bfdea95a75557615ca404905b968f7f653562

SHA512
81ec7d177ec3b02988b7a98721c1ea368f250a02fcbbbe05003e475ad2a1ab873e16a3eb773b66cf240d82b231d76be9bc3ed6b91504d92c84fbeaa989a4b2dc

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dom.md

Filesize
3KB

MD5
8b66e2c3e3e1f246fa72331d44d77567

SHA1
5584c620017f1f6b061607bca6b8b13af3a125da

SHA256
b9d7798c2a77a639602b827944c51358b2959687d961d52de8c884c9789e8f0f

SHA512
31e5b580d4e328af4d1b5c326e04d83fbcb2d6f2269a68c1a7b2f36c5d161ac324c7ed246fce5a007258a83d8d64ab75e6d2e1cc09cdb877cfa62d0851e9704a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md

Filesize
1KB

MD5
67f5b70cb5bfa08cb7cd50997252fbd7

SHA1
825ab442aa5167c9af7d284b3e29936e454f3f45

SHA256
be4d368846e19915c9e217717cbd66b2c96254b34d39f228face0391d894ff8a

SHA512
e1154ca4d87987ac6cef08df9270c6528f7ccb1b4c81f3b56c53a838843521dbb259e897f930090ed9ff59a257b4e1a8035d302a571d7d5bef8008ca78b77c89

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md

Filesize
28KB

MD5
5a1ecf98c0984a66d9c58f02a64d942a

SHA1
7a7a04c13a83853a5e8922e74110b708307d1eb4

SHA256
173360ad6972577d1f91eaa56468d95b1b220ec1845ac1ef89369bf28242cd16

SHA512
62f9459cbe12e8806f20c9f9680903ce3f7987ef12583d5c8e5160eb1e8f188324f59fdb0bcd770e7344ba71deeb0c335812265c459ce90a028a2322661e26f1

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md

Filesize
2KB

MD5
d8e526bac8d01d7b0008abcbc5f39184

SHA1
bc9c92925de0796990388f405e60ce5aba8d3b80

SHA256
615190676f59bb134a6f466b4d3cec62115f474d598d166d7454eab639d7232a

SHA512
0c0a93dc220df721fb70ae90a9f343e43aee041bcce4f931953ba7d3ceaf460f9879125a26824129a9f7f4fb2b0efd9a8e69c8e61bdc6ffd7eff8de8f59684b3

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md

Filesize
1KB

MD5
178766bf5c65b1581efd6e793fc2947e

SHA1
69f8a25c00e57d21e632e734ec3cb8293ec25742

SHA256
c0366bd5822bb8a808c77e9c815031502b59f6269fc7e117425b96d5e0749c3d

SHA512
bd797e70b7b985cf040f4194819cb27a958b0e372695ad931c73a4edc5579a9c7d76e3927112bfa8cb357eb66b4438519fc6055536f6e2d86b374718366c92c2

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\icu.md

Filesize
2KB

MD5
ed35df8121c275eb0025565894a41ea2

SHA1
ea5c68985db2dfce7a743cb1da816a0bb28eb473

SHA256
5e3d868ea4c3141204e114bf8255664446077509e321192ca7c99c17eeb648a3

SHA512
f5bfbadbc776939a29923b8d46bada28b03d69fc8f8ce27713cad7e109ec0b16233ecda97fe3800836fdfd2e79de256115fc8577be64d6b65388bdc9f111f7ac

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md

Filesize
1KB

MD5
47f3e0cbbea48ae5a3c0d2ca8ba9f6ea

SHA1
853124df1a62c11fde7e1cce0e777d43e306ff09

SHA256
f970b88e2f8af8a1c554f26adfa8af12be16f9e48fba7cbdb31e2bc774e387a0

SHA512
1ce44241f033e80b717193707ce22e0aac6745de4bd7dc816ff426bcbed734921052013ba8908508393a38e889e69baa5d01e4f176476a299d7ef94b717f6a9c

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\joni.md

Filesize
1KB

MD5
4b7e5ac0e325dca9edbb28b335284f22

SHA1
fc2947536cedb130d1bc6e3425e62bf7991dc2f7

SHA256
e17c6a5783b463ba1cb0345fb395d442a805cc13913d1efdcc1c41de16713818

SHA512
b39a7c0aa8e89456b646f2322bdad08f5e7a48bc12724f4a766376ccf6bee6e12937cf86370680aa1d5bb8344228388ad90a25d2619c3f7e2eee1a37f6951393

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md

Filesize
1KB

MD5
b8729821a39642694322020637bab0bc

SHA1
081e722b7956c38f2b1603dbb079e6de403c1765

SHA256
0faefa9af3bd2e3b530c8adc39442d21a07bdfc53039d051eff46eb99bd8734b

SHA512
6e31639cc3732fdaf07301a7b81913d23cbfcaec5ff73dc43fdb23d0a883e9c38199ecf4001c8d78f91312d7cb0d8641c991890c92932d2ad21d85e688aeea2d

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md

Filesize
3KB

MD5
7072ea411bd78e88b6ee59a2945a21bb

SHA1
e18749abca992b0b09569e29fb09e8b3f06c007e

SHA256
a6ae0917bb393ad886b572a2cd3643fb3ab5955a832009a88d8b08e9547baa01

SHA512
71f1337b11b91c47e124b4d0efc91ef40b28f65e154456119966c040e073f6d6872b0db9626ff295010f6ab2603af9f6bf7cc5aac5f0ae84bb8c185077288175

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md

Filesize
2KB

MD5
3a765edf38c843a0ebe7ebf9f47d2e2a

SHA1
fb38c6d2f14c4f7b9abdba2e623406829a2e079d

SHA256
e75635347edd68b421be5058f8ee2d12dfc4135a7de14abbff2fcf4d547d8b97

SHA512
1dc3c24d68042f384f318295b41c612beff4bcad94d9d491635e14a2f6d20b599e4ab3ae7891860d5aa2033bfaba10fdcd0b787d8cd8b6abff22da1f922c8d9b

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md

Filesize
6KB

MD5
55b745c7b0843e3f89ac271c663498d3

SHA1
3caa858164ee49aa50203e3ee31108f6de496541

SHA256
422a89048e60de925e8b76afd3f5c10d13f5eaed1c104609ef67856324824533

SHA512
7694fbd665a0ea752f8889ea50c7b283154b09b9ce4c08395fdfc8d62253780bd353622f975c8dcd7daf80a373625368a97130043c4f3988eec60d77594530d5

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md

Filesize
5KB

MD5
798a3d75185fc7683bc18c6a2844b5b6

SHA1
54558b7052878bb639c36d58e0401ac0fb7699a2

SHA256
edd9fe5223abf711cbb409217601195337f7bb8275d5335e50a66179617c1b44

SHA512
0a7da4be61c27bc37fdc92d8745e3b31d2de9100b221dda30973c968197e9e1698d44ce5d0f2922b980898e3bbe1bc3a12ddf4abb2e8d205f3103db7221874b7

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md

Filesize
3KB

MD5
9fe18cda7cac62d8072adf86ab24e116

SHA1
1a8ba131136e02bf9db9683e35d9b172b4457c52

SHA256
c0a788cb181edaf08392b2acd91643d50129b01b981695b29981a3bbf6e31f03

SHA512
b057b91b16f58b13ec77aa14c3424f35efde7ede1211ad8cdc12b87b6de63839622db41f5b660955e56dc416785dd439d998b892f34354796ffbeef59fce33fb

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md

Filesize
2KB

MD5
8141005033a1fdfc1d9edfa5925da78a

SHA1
5f3cbaefffd6f27a13ebdf3df8e27962f1dd5a20

SHA256
3252ef9b6a6feca91368191516a266ed7ccf10dd8d912a67d264a3f2861c783f

SHA512
b9a38ef6bfb22680c6a8c4820d3c66f656a9553697d3680f31aa5f0b25149b834ddea76b0e83b737533e9c2468f3ad74fee10fdfe115671dce60451962689de9

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md

Filesize
2KB

MD5
143a2d7bc249891b2cc4946b0efd2d2d

SHA1
16c971a9f43c0421d371820d1228082ada5f28f5

SHA256
e2c4a044262c44355469e48aff035d408344efe56757e030044422ae44a6cb73

SHA512
e95a3e25dea2337ee2a0d1f5e863d681d9930a0e5f24215d2c1da314c4bf4c5f0b78504466bd1dec5ea5a60f7b139b9e55efe8aaecc479f81e0b0a6f666f6637

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md

Filesize
1KB

MD5
37686cb3783ec1993c670ef27daeecee

SHA1
1285f2242d23f6e9024967ec7d77ad9317476f63

SHA256
0946633140b95588f6dee16c5895f7dc0a2669d6a9c3a073383c75828962a351

SHA512
0a01b77d8957e9542197f5bf3eb65ba41203c6b0b38570a6e9c0502a5c57202ad1cc494c557b6442ac38914fc0617a91c1ea63a401fbd3b3fbfb0ba40c0cacfd

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md

Filesize
1KB

MD5
b1fd7960e04559a89efa58d86cd99932

SHA1
24f0920ee502c042a0091729c7da45c865537c42

SHA256
5bb39bd16988f0c37dc3fc09106db4544a0eed7f40ff4948cfb9282d58282530

SHA512
0a95228272ffd092145866a4218fd8f1d6d2be9b6c36404bd92d49b643b6ad7a3beae6e17ed888e95e71b3975200e2964fdc3fe6e057e6630d9dbc207c6f8ab3

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md

Filesize
11KB

MD5
d5f9b74eefe85471e86823c7aeb578f5

SHA1
1aba36cad62934f9b0c21639eaf0f85c9d901ce3

SHA256
b7e64b16e484c66cc1ce15c05be8791079b70663373c9fa28f6dade5d3dc812d

SHA512
8f25723f3202b959cdd3c2f4a81e1a976bb3b0929dc7d15962ca381319464faffb83e930c3dadd83145f3458c0b7faf605ab60f580549a3bfa7ea2070d8e8cb3

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md

Filesize
1KB

MD5
99182f4e22a7611123496e2c19dab32d

SHA1
b297d802f6294c25967990a17eefa9ea4c968fa4

SHA256
4807d259f452113e4edbfdd129850f25f34d2477a071f699bc651d94ad22e5b6

SHA512
306970aeb5d222e017987569794216f208a5d90489e4dfea6f7dcec0eb3a94b75212e1943ca0e3584aca24a56bdd81a4bd0e85ad40d0cfecda4f02cc3afb7eb3

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md

Filesize
2KB

MD5
2ea6348c2d8e4e6e4d4307ede6eddb5c

SHA1
dda5aead9d2c162e14bc3430d86ea4f50ef40150

SHA256
7ecbc102f6f59926771b5bc7d14a70b255cf089e2cdb2367a5ed4871ad3c3451

SHA512
a3898c66a7a1a8819547a3e38563f7db12deceec6a1266650a258e7904b355e6a665f31d71b026ef6a7d485b88f89ac7586bf20803d4f0b1b769a1c17709a28a

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md

Filesize
11KB

MD5
8f2efda0749a3ebd88fa49058d3075af

SHA1
b113fa2d8190f4630613c6f272369104639e479e

SHA256
9f1f3f396f157856edc90a407a6b005878741e53448b8616aaa60ccb091efdb5

SHA512
3d7a319b7ce86f226bf33344e590e4c42ed507b4740ba2d0572057f9ee056877cb2a0b48c17fadee9d598a0f829eab1ba4c33140ed09f527f770a4b693b91a06

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md

Filesize
11KB

MD5
f88e04d81a77b578eae247de70babfc7

SHA1
5c66d7df679ac2d8cf84feaee114e745f0995f4b

SHA256
d3e8a75f42389ac3068c7a2871338af18d97dbf7bba18bf84c0a4df55a867b0b

SHA512
c2d5f22f359123498339d910d1b1987540c0bc9726587ca15decd4f420d817d8dd8ef2c34543a12f00dc7107e47d3640196234c3038a9611f943a78f06e707d4

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md

Filesize
11KB

MD5
d4798c13fcfdf5cbca71555ea7f7f808

SHA1
727dcbd315cc2ba485d2879f11d1fb232cade467

SHA256
4e95e20add59a85dd74e2f78e23585fabb8d1acbc83a12a15f81c539299d2e9c

SHA512
f4c320faeaaf1a3e7baed7a23b609f537fd6db86f459dc0e5cd961a5d1778398ffba285f0a8f0454debc116f02993d2e78ce23414cdebf44142bad3e9dd27c29

Download Submit
C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md

Filesize
1011B

MD5
1a188ab5b27f392f046b44e89708b61a

SHA1
1c614686353b923986808d07c561cb3558b14fd3

SHA256
959a5b62adedda3f48347f03447cdef92a3e9b14360de1ffc2fb6e3a81fb9e3e

SHA512
44d4b90c61699394f4379099b9b0ed8a384e20684c4f5d971adaa060052bcc4ce036db715f8e51983f27d61b891c0caf317f82e53f6552aa2f79843ae7f22c7b

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads