Resubmissions

21/01/2024, 14:51

240121-r8a3xaeac410

21/01/2024, 14:31

240121-rvt9madddn10

Analysis

  • max time kernel
    149s
  • max time network
    155s
  • platform
    windows10-1703_x64
  • resource
    win10-20231215-en
  • resource tags

    arch:x64arch:x86image:win10-20231215-enlocale:en-usos:windows10-1703-x64system
  • submitted
    21/01/2024, 14:51

General

  • Target
    85f4088286ac1eedc94ad9dc6465e9e4b89d1cde3012f9949450fcc9f2b60431.exe
  • Size 342KB
  • Sample240121-r8a3xaeac4
  • SHA256 85f4088286ac1eedc94ad9dc6465e9e4b89d1cde3012f9949450fcc9f2b60431
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Trigona

    A ransomware first seen at the beginning of the 2022.

  • Creates a large amount of network flows 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Drops desktop.ini file(s) 5 IoCs
  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\85f4088286ac1eedc94ad9dc6465e9e4b89d1cde3012f9949450fcc9f2b60431.exe
    "C:\Users\Admin\AppData\Local\Temp\85f4088286ac1eedc94ad9dc6465e9e4b89d1cde3012f9949450fcc9f2b60431.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    PID:4256

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        desktop.ini

        • Path C:\$Recycle.Bin\S-1-5-21-4068299709-2976237847-2753307267-1000\desktop.ini
        • Size 901B
        • SHA256 1cc90433c2c71e0ecd0e3e3bc30022eb34ef1cb8553b4eff644834e386251af8
        • MD5 SHA1 SHA512

        z93kfu0d30bu83.35763f63r._locked

        • Path C:\$Recycle.Bin\S-1-5-21-4068299709-2976237847-2753307267-1000\z93kfu0d30bu83.35763f63r._locked
        • Size 2KB
        • SHA256 44425aa8a55e21bf3769d7187d98dbf71cec7c51087bc16af7b4c434caf6726e
        • MD5 SHA1 SHA512

        setup.exe

        • Path C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\setup.exe
        • Size 4.3MB
        • SHA256 f4becb4c0389099cd43eca2aee9c63750fe262447cc014397b5fd8aca1452a95
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-console-l1-1-0.dll
        • Size 12KB
        • SHA256 238c6f258e1b866f81e8729ab69befa33bb74e53eae71a37d834840d0bd96c31
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-console-l1-2-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-console-l1-2-0.dll
        • Size 12KB
        • SHA256 5296251b58c4d848524b3017d739105dda7d3c336ca8edd1ddd3337435099da6
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-debug-l1-1-0.dll
        • Size 12KB
        • SHA256 583e927e6cdb598b8070ac0d4c7fa6ff0c8c5656a52f2b16f069fbc7a2717a18
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 12KB
        • SHA256 9552062f61fc17ab889dba433529c686d00501fa8e04d1f12d0d9ce0f39365a7
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-file-l1-1-0.dll
        • Size 15KB
        • SHA256 70165a550f9417f1029722596588cbdd6158a79dffa6f5d1285545da3c7dde99
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-file-l1-2-0.dll
        • Size 12KB
        • SHA256 78f29a8104d0099b286533da80993f2e47bab77d944034bd055a5e235d56b48a
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-file-l2-1-0.dll
        • Size 12KB
        • SHA256 ca1f76e70e576386291f9951cad173fe46e3e62b64c0e0e9a9fb96b70aa11390
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-handle-l1-1-0.dll
        • Size 12KB
        • SHA256 e10205c8f1386677c399d452bd352eb32855324b14d27a30f63bee86e8ccfce8
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-heap-l1-1-0.dll
        • Size 12KB
        • SHA256 ddc51aee85bc1540a5e01f8906089ad8fc0b9a6bc289fd0af52781a81025e03e
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 12KB
        • SHA256 3bdcd3c7bd0ddff1c6b6573c7f32d90c9ab852dafd78f5e133fb3d5979aa91e2
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 13KB
        • SHA256 f1e044606cab3203da8da750610722b7b8e71934744b198dd41b2e76cc7e2c2f
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-localization-l1-2-0.dll
        • Size 15KB
        • SHA256 5d7f798ed748b9ec49823c65e2da0aa9279983ba8d88f91f5668044c9ddbf0ce
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-memory-l1-1-0.dll
        • Size 12KB
        • SHA256 22c9e8db12e40c9933423331e8047b3a6a887c97d2124a3729f8dd7f5c6caa45
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 12KB
        • SHA256 fd5d9aea9333aa78a164d199cb15f7717772f11408a9598b5b5df692d40faae3
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 13KB
        • SHA256 a26823cec33f017171bd2dff2826a8f7adc3a3e92a351a4ad2c93566e06bd5c3
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 14KB
        • SHA256 a471f04e0a1d2a45c9e2297e0a5a9f6adb8007aa55429745b9f1702ef7a48b76
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 12KB
        • SHA256 42f86f12554c41eb9ecd97d0ee6de08768ba5766b01b3e4c87c5ffcec82b2e1f
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-profile-l1-1-0.dll
        • Size 12KB
        • SHA256 ce969d63f0e76b836d729bc3dda54deead9c3a2e56946d70f832020a7c4764a5
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 12KB
        • SHA256 56ca791022b0cb58994a0a279f003e93943811932851af2282cffad9321897aa
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-string-l1-1-0.dll
        • Size 12KB
        • SHA256 ef0304db3454ce5fd1a3cb6eb35484d83c87e05d4c10c0eb0e865c5446fb2706
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-synch-l1-1-0.dll
        • Size 14KB
        • SHA256 c5e137bcd7a6e1bf215567074e24f80be905eebfda94c5cc497151b64edf123c
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-synch-l1-2-0.dll
        • Size 12KB
        • SHA256 f5e39d6cf7b6859c1ac42743ba89b566816a000b7071970c5c7466ecefb841cf
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 13KB
        • SHA256 fd14c03153d8c2f872e71be3275f1111d07cac89378ce68e3f0015378b681a10
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-timezone-l1-1-0.dll
        • Size 12KB
        • SHA256 7eaa1855d3c08f62759700827c5961be0aad4641cdf8482bd68ffe1443afa2a5
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-util-l1-1-0.dll
        • Size 12KB
        • SHA256 5de63fe0e1044313b7b893c98d9719a7ff7aa104be24d108cfe5c9b13a503671
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-conio-l1-1-0.dll
        • Size 13KB
        • SHA256 0b11d666aa9b9fb41bf8e40ad9690a27631a7c759875d98f5bb96f7dd3f5bde5
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-convert-l1-1-0.dll
        • Size 16KB
        • SHA256 7e596ffa755c14e62e1a282f25436f4b97a16d933c18fe24f49270e800642023
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-environment-l1-1-0.dll
        • Size 12KB
        • SHA256 5d250269d31f8574a3406fb801d57148b59ec469fdae3bdbb892786eb5b7cc3d
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 14KB
        • SHA256 fcbe27a9025db8e84473cab4a90be4ad286ed59e9b9110523581a61b820862e9
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-heap-l1-1-0.dll
        • Size 13KB
        • SHA256 63563ce39ad66d533079df382ab5d118b6550acf814e983dfed9b49ffcb00f39
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-locale-l1-1-0.dll
        • Size 12KB
        • SHA256 77fcf951ad0b9f4e9cdfa85cc9c153ee4ea91f329f087edf36ac6d45c5a5d1ee
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-math-l1-1-0.dll
        • Size 21KB
        • SHA256 663959a2233527097ad250b23626d18624d75d05fe267e10e40e7b2187b559ad
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-private-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-private-l1-1-0.dll
        • Size 63KB
        • SHA256 7c5bbcc5b3f0adc562ecce1c4d19bbca5a3abacca7064a3d48012d7840278a47
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-process-l1-1-0.dll
        • Size 13KB
        • SHA256 1685036a4d4c9de93eccc79b548d279249293262cde9133c6f619b9223d4944b
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 16KB
        • SHA256 112f9b379a055fb8148849c687d803bcea0b6d9d05a68b440caa4e47c81c2f26
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 18KB
        • SHA256 aa2da02d84ecc3544351820e71923b8dc1460318c5bdf7663aa10ca2d57040f7
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-time-l1-1-0.dll
        • Size 14KB
        • SHA256 11c7c5178b882284f0020c41592d1b1cf44df4a0c302a147edf2ad9aa3eda9ff
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-utility-l1-1-0.dll
        • Size 12KB
        • SHA256 328559609d2e72a117b43166886bdcb4d762ec33ed277e667654028d8f2294ba
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.0gw6c94un18jirrci76y8tpxb28k.4r._locked

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\available_for_trial.0gw6c94un18jirrci76y8tpxb28k.4r._locked
        • Size 20KB
        • SHA256 f0db42140e9fc8d7b38fe8c7517acd2cc312b1d0b54b5e1405b5bc12741e2176
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.7.51lv0r._locked

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\available_for_trial.7.51lv0r._locked
        • Size 18KB
        • SHA256 37e6bbe651f245b8731c3783d03281c2e2e0f25cc239c6be3659401fded01a6e
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.x024jk.k58r._locked

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\available_for_trial.x024jk.k58r._locked
        • Size 12KB
        • SHA256 3ab29334d2a05544ac35f5e8005f9f711c34b1f491191951c91189866edb9c5c
        • MD5 SHA1 SHA512 SSDEEP

        msvcp140.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\msvcp140.dll
        • Size 559KB
        • SHA256 cbed15bd3e5d6bddf0abe20e429ba4dcf0941521c2ef9087a4259303fa10580a
        • MD5 SHA1 SHA512 SSDEEP

        ucrtbase.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\ucrtbase.dll
        • Size 1012KB
        • SHA256 de8d7120669414d5a787d65d644fe0c346d02d267002a362530e3088159ab4f6
        • MD5 SHA1 SHA512 SSDEEP

        vcruntime140.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140.dll
        • Size 96KB
        • SHA256 fce2a847ca309f90116fd9a3e898a77b9ad4ea4a8ee21100ababb5327a709f15
        • MD5 SHA1 SHA512 SSDEEP

        vcruntime140_1.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140_1.dll
        • Size 37KB
        • SHA256 380df2a9658727e22824c9b8124a23445ba267221c20bcd9588e7c46a2a14dd3
        • MD5 SHA1 SHA512 SSDEEP

        messages_zh_TW.properties

        • Path C:\Program Files\Java\jdk-1.8\jre\lib\deploy\messages_zh_TW.properties
        • Size 4KB
        • SHA256 8553ff0c9f3df90ae0ddbe4e45c8ce706c30df0b367f576d7fae14339424b633
        • MD5 SHA1 SHA512 SSDEEP

        4jj517fo6p9g1e6v0529p5.4be81nc518r._locked

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\4jj517fo6p9g1e6v0529p5.4be81nc518r._locked
        • Size 32KB
        • SHA256 d0a572343f976e02d85527513e724152876635da8f669745d7bfd9a4eeb1af7d
        • MD5 SHA1 SHA512 SSDEEP

        gstreamer.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\gstreamer.md
        • Size 35KB
        • SHA256 9ed3fccda56aae7b829ef57b62bfa0f55e3721cc4073074815e87499713b9393
        • MD5 SHA1 SHA512 SSDEEP

        icu_web.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\icu_web.md
        • Size 24KB
        • SHA256 b3d7b6b3120b312b4bfe376549203ab9354b267220ca2430b5ed616d47647d08
        • MD5 SHA1 SHA512 SSDEEP

        libxml2.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\libxml2.md
        • Size 4KB
        • SHA256 44bdbc077cbc8121d1fc70a5fc107fba535f7797e49479dcce17b449de710fe1
        • MD5 SHA1 SHA512 SSDEEP

        mesa3d.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\mesa3d.md
        • Size 6KB
        • SHA256 67804feb650b3e12c986514db722fe075cb961f2c493b1f1e8da0377f2f3a345
        • MD5 SHA1 SHA512 SSDEEP

        public_suffix.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\public_suffix.md
        • Size 18KB
        • SHA256 93d4ed3e9a4de2d69aaeb8c037b2a18a7aa38d1aa1ffbcba11afac0c817476a8
        • MD5 SHA1 SHA512 SSDEEP

        webkit.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\webkit.md
        • Size 320KB
        • SHA256 c15ca5ba57f32b4bd00e5614109a183ee5d411e4ebf3278b2b1824579210888f
        • MD5 SHA1 SHA512 SSDEEP

        bcel.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\bcel.md
        • Size 11KB
        • SHA256 8711cfbda5c31916a952102af2e6066fe3da5e4ae3d048cb97139a21d07e847a
        • MD5 SHA1 SHA512 SSDEEP

        dom.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\dom.md
        • Size 4KB
        • SHA256 605acb78971a0f8bdb3ebf5c984f8e79e9a2646c2a8327563cd63eb61577c690
        • MD5 SHA1 SHA512 SSDEEP

        ecc.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\ecc.md
        • Size 29KB
        • SHA256 d1ae654f134c638dca39a7497e3b7350a952518b7b20390e898ac3ee1ff845c5
        • MD5 SHA1 SHA512 SSDEEP

        jpeg.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\jpeg.md
        • Size 4KB
        • SHA256 5d47ac6aaf2d64d93c3b014beb275d9447f2326854180ddf0fec21a00f9027a0
        • MD5 SHA1 SHA512 SSDEEP

        libpng.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\libpng.md
        • Size 7KB
        • SHA256 8e7e5833610c940f6d08675d6a82090202a204e1f7bd41eccd35152d16f7ab5e
        • MD5 SHA1 SHA512 SSDEEP

        mesa3d.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\mesa3d.md
        • Size 6KB
        • SHA256 d74e033a277b85162b10c79f38a5690f101ae962d7bd4b171740ac1ff7b92e5a
        • MD5 SHA1 SHA512 SSDEEP

        pkcs11cryptotoken.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\pkcs11cryptotoken.md
        • Size 4KB
        • SHA256 f7b703d414fe0f4026c2cb30f1ee678d7cd2eb48d6a9a0c080ebebc6b4adead9
        • MD5 SHA1 SHA512 SSDEEP

        santuario.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\santuario.md
        • Size 12KB
        • SHA256 592aecdb3cae7a607d3b01ad60f3809d65aaf7c4109c3be323e09674b7eb21cb
        • MD5 SHA1 SHA512 SSDEEP

        xalan.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\xalan.md
        • Size 12KB
        • SHA256 5e859581063542686640dcc116eeb35799fb2fb1ba22f4f6b90e639eb49d823d
        • MD5 SHA1 SHA512 SSDEEP

        xerces.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\xerces.md
        • Size 12KB
        • SHA256 fbf068e8d4834b801e439f696a2d1831312b6bf382edd8a6528f63d263574797
        • MD5 SHA1 SHA512 SSDEEP

        xmlresolver.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\xmlresolver.md
        • Size 11KB
        • SHA256 90da214c05d8f506b0acfa551725d826efca1fda037991fc6a55fa14c9296d22
        • MD5 SHA1 SHA512 SSDEEP

        msvcp140_1.dll

        • Path C:\Program Files\Java\jre-1.8\bin\msvcp140_1.dll
        • Size 24KB
        • SHA256 efa9f65e7fdfc2e607687d45129255a4008236aa405ef45499d7425875ecd920
        • MD5 SHA1 SHA512 SSDEEP

        msvcp140_2.dll

        • Path C:\Program Files\Java\jre-1.8\bin\msvcp140_2.dll
        • Size 183KB
        • SHA256 859fd8c72ae5e9197a0f95c12f7abd4f662bf484e8be57c02aef0c2149984e41
        • MD5 SHA1 SHA512 SSDEEP

        classlist

        • Path C:\Program Files\Java\jre-1.8\lib\classlist
        • Size 83KB
        • SHA256 9153a2081a5cebe26d4769db4688e0be0eeb4feaa49aa879ef634061ac90228e
        • MD5 SHA1 SHA512 SSDEEP

        CIEXYZ.pf

        • Path C:\Program Files\Java\jre-1.8\lib\cmm\CIEXYZ.pf
        • Size 50KB
        • SHA256 85dc48a7cd1ebadfc9e284a6eeb2a63e8f9bffbc1f21c0940c99ef95ba0f399c
        • MD5 SHA1 SHA512 SSDEEP

        PYCC.pf

        • Path C:\Program Files\Java\jre-1.8\lib\cmm\PYCC.pf
        • Size 268KB
        • SHA256 c1f244a05e12e1a3dd7a91cc97317d8eddb919daca0a842d8a26ab9309e73635
        • MD5 SHA1 SHA512 SSDEEP

        content-types.properties

        • Path C:\Program Files\Java\jre-1.8\lib\content-types.properties
        • Size 6KB
        • SHA256 bb830ae7830e4160f4135865194948a9c4cdbba247c8c70b3cbde91d6fd37d41
        • MD5 SHA1 SHA512 SSDEEP

        currency.data

        • Path C:\Program Files\Java\jre-1.8\lib\currency.data
        • Size 4KB
        • SHA256 b23c43f8c56c8a1a0a493a064f36d86d3550361266d7969dbc2d93802e1b2192
        • MD5 SHA1 SHA512 SSDEEP

        deploy.jar

        • Path C:\Program Files\Java\jre-1.8\lib\deploy.jar
        • Size 1.3MB
        • SHA256 cc40853e82902c6111ae38493c1cdd38cdfab908fd71fc3106f9f203e99c6ca6
        • MD5 SHA1 SHA512 SSDEEP

        ffjcext.zip

        • Path C:\Program Files\Java\jre-1.8\lib\deploy\ffjcext.zip
        • Size 14KB
        • SHA256 cd4ebbdcd5203cefd52d03a42c1c7fe6a857c6fe1ad753424416f0b269366200
        • MD5 SHA1 SHA512 SSDEEP

        messages_es.properties

        • Path C:\Program Files\Java\jre-1.8\lib\deploy\messages_es.properties
        • Size 4KB
        • SHA256 6b34b453cff13fbe7e8d2bbd7dc799473416bcbd32142fa0a542635ab0ab0b7c
        • MD5 SHA1 SHA512 SSDEEP

        messages_fr.properties

        • Path C:\Program Files\Java\jre-1.8\lib\deploy\messages_fr.properties
        • Size 4KB
        • SHA256 f6ef726b8fa0596a10c31834bccd6b574421e6ec67b36b4e3140ddc8bd713ebd
        • MD5 SHA1 SHA512 SSDEEP

        messages_ja.properties

        • Path C:\Program Files\Java\jre-1.8\lib\deploy\messages_ja.properties
        • Size 6KB
        • SHA256 eed24e8381f915ed9e20425ce0dd3131ebbacd74f01e5c2c7ef74c4e7ae0cabb
        • MD5 SHA1 SHA512 SSDEEP

        messages_ko.properties

        • Path C:\Program Files\Java\jre-1.8\lib\deploy\messages_ko.properties
        • Size 6KB
        • SHA256 36bce24cdc599f97dd4468d01b3f2694bd280384006bab6282bb09a7b4b7052d
        • MD5 SHA1 SHA512 SSDEEP

        messages_zh_CN.properties

        • Path C:\Program Files\Java\jre-1.8\lib\deploy\messages_zh_CN.properties
        • Size 4KB
        • SHA256 a6612a92fb6b5fd5b068d6399c35101301de47ff09995d4fcfeffd036fa3048d
        • MD5 SHA1 SHA512 SSDEEP

        splash.gif

        • Path C:\Program Files\Java\jre-1.8\lib\deploy\splash.gif
        • Size 9KB
        • SHA256 8b8b40ad4f7b683a2272754d999367983be65120b2cd45234e099e03785c1b40
        • MD5 SHA1 SHA512 SSDEEP
        • Path C:\Program Files\Java\jre-1.8\lib\deploy\[email protected]
        • Size 15KB
        • SHA256 3dc115c2371a5e34f09a695a3269219771ae11fd532816b138d9d175512d3033
        • MD5 SHA1 SHA512 SSDEEP

        splash_11-lic.gif

        • Path C:\Program Files\Java\jre-1.8\lib\deploy\splash_11-lic.gif
        • Size 8KB
        • SHA256 722f4a2075ab15b32d0aff5163a43d824a6c435aef0a54b119c2d9a0bde092b1
        • MD5 SHA1 SHA512 SSDEEP
        • Path C:\Program Files\Java\jre-1.8\lib\deploy\[email protected]
        • Size 12KB
        • SHA256 c94ad7b768cbb48493ff68591af98a7b138d72ccea5e9300fbeee3b46c8c9188
        • MD5 SHA1 SHA512 SSDEEP

        9g.m2309z9p7r._locked

        • Path C:\Program Files\Java\jre-1.8\lib\ext\9g.m2309z9p7r._locked
        • Size 193KB
        • SHA256 7f5a1495941bfed08c953e2c9986c0161d210b2aae799701f4ff4900b020bc35
        • MD5 SHA1 SHA512 SSDEEP

        cldrdata.jar

        • Path C:\Program Files\Java\jre-1.8\lib\ext\cldrdata.jar
        • Size 1.9MB
        • SHA256 6ec21ade29f36fe9be36492af79ded7a9132eccdb0c9320fa06aa73cd0b18ddb
        • MD5 SHA1 SHA512 SSDEEP

        dnsns.jar

        • Path C:\Program Files\Java\jre-1.8\lib\ext\dnsns.jar
        • Size 9KB
        • SHA256 409a7b5716339d077952ad8ad8186dc9a200954611b5bfa4275cdfe4a200bf3c
        • MD5 SHA1 SHA512 SSDEEP

        jaccess.jar

        • Path C:\Program Files\Java\jre-1.8\lib\ext\jaccess.jar
        • Size 44KB
        • SHA256 69d3d8e91937d33709fbad4db5cdba2baba4bc7f395d3e71084af40b3bf6bcae
        • MD5 SHA1 SHA512 SSDEEP

        jfxrt.jar

        • Path C:\Program Files\Java\jre-1.8\lib\ext\jfxrt.jar
        • Size 1.7MB
        • SHA256 8ea3beb264eb36ada04df5377406383a90f411305ac581944b8b48e68b502ea7
        • MD5 SHA1 SHA512 SSDEEP

        nashorn.jar

        • Path C:\Program Files\Java\jre-1.8\lib\ext\nashorn.jar
        • Size 1.2MB
        • SHA256 ce9ea4af672c94139429a8ca0d2e539f4d3bf426ee11351ad69d56db5fda075f
        • MD5 SHA1 SHA512 SSDEEP

        sunec.jar

        • Path C:\Program Files\Java\jre-1.8\lib\ext\sunec.jar
        • Size 46KB
        • SHA256 77ad1bc7787ea351835452659380665fd0ea96167ffc268d3b833a86d2c451e9
        • MD5 SHA1 SHA512 SSDEEP

        sunjce_provider.jar

        • Path C:\Program Files\Java\jre-1.8\lib\ext\sunjce_provider.jar
        • Size 288KB
        • SHA256 46fff99206ba2334df24b49b54270e71f28eb00d3ea91e14b0b8c053332dedfd
        • MD5 SHA1 SHA512 SSDEEP

        sunmscapi.jar

        • Path C:\Program Files\Java\jre-1.8\lib\ext\sunmscapi.jar
        • Size 49KB
        • SHA256 35914fb1cd71f64e1ba6a1fd9bdf622fc090efc17b0b424d9c6ae7b70615f644
        • MD5 SHA1 SHA512 SSDEEP

        sunpkcs11.jar

        • Path C:\Program Files\Java\jre-1.8\lib\ext\sunpkcs11.jar
        • Size 287KB
        • SHA256 7088af01ccf56ca63faa27076a3ea4e6e4b15032994314d835f2ef64a42a099a
        • MD5 SHA1 SHA512 SSDEEP

        zipfs.jar

        • Path C:\Program Files\Java\jre-1.8\lib\ext\zipfs.jar
        • Size 69KB
        • SHA256 4ac172d4c6877e9fc073eaefb48559bc290bb1b7536e32052cfdb95fbf43526f
        • MD5 SHA1 SHA512 SSDEEP

        flavormap.properties

        • Path C:\Program Files\Java\jre-1.8\lib\flavormap.properties
        • Size 4KB
        • SHA256 c201542914d5b606697c0f91d20f92f422a0fcc2029866da9282400c9026e755
        • MD5 SHA1 SHA512 SSDEEP

        fontconfig.bfc

        • Path C:\Program Files\Java\jre-1.8\lib\fontconfig.bfc
        • Size 4KB
        • SHA256 97be243a3c01cea0f7ec664eaf092019dd61dab418e079079452f203156bfa89
        • MD5 SHA1 SHA512 SSDEEP

        fontconfig.properties.src

        • Path C:\Program Files\Java\jre-1.8\lib\fontconfig.properties.src
        • Size 11KB
        • SHA256 b2a06c3063a78749a050a2ef0fe28edb12e0201fb4ab77786b0353f6e78ed5d3
        • MD5 SHA1 SHA512 SSDEEP

        LucidaBrightDemiBold.ttf

        • Path C:\Program Files\Java\jre-1.8\lib\fonts\LucidaBrightDemiBold.ttf
        • Size 74KB
        • SHA256 09bccdea1b28fe66e38a7a3007981b1607280d453462ad25fdbdafc8ba7056bc
        • MD5 SHA1 SHA512 SSDEEP

        LucidaBrightDemiItalic.ttf

        • Path C:\Program Files\Java\jre-1.8\lib\fonts\LucidaBrightDemiItalic.ttf
        • Size 74KB
        • SHA256 487bf2bf7a5da6b69f86f7a2525bf7cb87592fe211ec9d346176767c1f489b65
        • MD5 SHA1 SHA512 SSDEEP

        LucidaBrightItalic.ttf

        • Path C:\Program Files\Java\jre-1.8\lib\fonts\LucidaBrightItalic.ttf
        • Size 79KB
        • SHA256 30a36a2828b3236bf3966a599b57d9abe8061ae229e353df08fcaa84ef09b593
        • MD5 SHA1 SHA512 SSDEEP

        LucidaBrightRegular.ttf

        • Path C:\Program Files\Java\jre-1.8\lib\fonts\LucidaBrightRegular.ttf
        • Size 337KB
        • SHA256 e8a73fbfa2ac3a46e2983211a528287d90a400ac00afe94670528dfc3b4705f9
        • MD5 SHA1 SHA512 SSDEEP

        LucidaSansDemiBold.ttf

        • Path C:\Program Files\Java\jre-1.8\lib\fonts\LucidaSansDemiBold.ttf
        • Size 311KB
        • SHA256 3b6bf5e841b0bb300d788a9673ace14d843f4e9b8810c755d89f8b9648b7cf94
        • MD5 SHA1 SHA512 SSDEEP

        LucidaSansRegular.ttf

        • Path C:\Program Files\Java\jre-1.8\lib\fonts\LucidaSansRegular.ttf
        • Size 682KB
        • SHA256 2cc5d4d199422661a90230cae89c95b801f8e43d570a8bc329c67d547ea41754
        • MD5 SHA1 SHA512 SSDEEP

        LucidaTypewriterBold.ttf

        • Path C:\Program Files\Java\jre-1.8\lib\fonts\LucidaTypewriterBold.ttf
        • Size 229KB
        • SHA256 74fbd23b7a83122b3305db49b455811e123cd9e13d9dd68eb74c63015b4a66a1
        • MD5 SHA1 SHA512 SSDEEP

        LucidaTypewriterRegular.ttf

        • Path C:\Program Files\Java\jre-1.8\lib\fonts\LucidaTypewriterRegular.ttf
        • Size 237KB
        • SHA256 c6f5849304caaf2c5601a8a55a972a99c1f869dc6acd7d44cc5d5d320f22e387
        • MD5 SHA1 SHA512 SSDEEP

        hijrah-config-umalqura.properties

        • Path C:\Program Files\Java\jre-1.8\lib\hijrah-config-umalqura.properties
        • Size 14KB
        • SHA256 5a7070acb20372856891dc28df4a65cb7faabbd53836c97a8ed345affc7ee494
        • MD5 SHA1 SHA512 SSDEEP

        javaws.jar

        • Path C:\Program Files\Java\jre-1.8\lib\javaws.jar
        • Size 935KB
        • SHA256 56867988d9e79945154050d9c3916b0aac69942357d87891175cbccf03fbdc52
        • MD5 SHA1 SHA512 SSDEEP

        jce.jar

        • Path C:\Program Files\Java\jre-1.8\lib\jce.jar
        • Size 120KB
        • SHA256 30ad55519a68e27aff152b85f82c005159f758a94f1136ed65a5eb344b90d926
        • MD5 SHA1 SHA512 SSDEEP

        jfr.jar

        • Path C:\Program Files\Java\jre-1.8\lib\jfr.jar
        • Size 561KB
        • SHA256 a49b4c735dedb1c960c4476ae167c47baa5f7909a75031f988916ad8d6ae50ed
        • MD5 SHA1 SHA512 SSDEEP

        default.jfc

        • Path C:\Program Files\Java\jre-1.8\lib\jfr\default.jfc
        • Size 21KB
        • SHA256 162b297014a8d304c988daff12969d64a5865772783afcb88792b4c7cf3257fc
        • MD5 SHA1 SHA512 SSDEEP

        profile.jfc

        • Path C:\Program Files\Java\jre-1.8\lib\jfr\profile.jfc
        • Size 21KB
        • SHA256 7854aeaf1303129b1200fa93d0f2cd245821e1564c37268c874ba0b30458f1c6
        • MD5 SHA1 SHA512 SSDEEP

        jfxswt.jar

        • Path C:\Program Files\Java\jre-1.8\lib\jfxswt.jar
        • Size 33KB
        • SHA256 118bfc6a85f0a691da46e5ed0a0d16e319a29ce5dd56d2d0b8460d57e39698f0
        • MD5 SHA1 SHA512 SSDEEP

        jvm.hprof.txt

        • Path C:\Program Files\Java\jre-1.8\lib\jvm.hprof.txt
        • Size 4KB
        • SHA256 107ed2658bbdce74566b76ea22bac96168ff58240917a6674c89b9b171445a0c
        • MD5 SHA1 SHA512 SSDEEP

        jmxremote.access

        • Path C:\Program Files\Java\jre-1.8\lib\management\jmxremote.access
        • Size 4KB
        • SHA256 d35f1ee2470e81024931ffcb8f63842b03120447f495febade782869206e9e1c
        • MD5 SHA1 SHA512 SSDEEP

        management.properties

        • Path C:\Program Files\Java\jre-1.8\lib\management\management.properties
        • Size 15KB
        • SHA256 5babd4869651a77412f3a3e07085afeff381c63b1b755007ed175806cc7f243a
        • MD5 SHA1 SHA512 SSDEEP

        net.properties

        • Path C:\Program Files\Java\jre-1.8\lib\net.properties
        • Size 5KB
        • SHA256 703e2be6b1de40008f63f1fecb9ebaa4ee45158f52087a1773f82b41ae51b893
        • MD5 SHA1 SHA512 SSDEEP

        plugin.jar

        • Path C:\Program Files\Java\jre-1.8\lib\plugin.jar
        • Size 1021KB
        • SHA256 72232b9e0533859017278582521733cbcffb4aaa2284ab7376cfc2e4f4e3c5a2
        • MD5 SHA1 SHA512 SSDEEP

        psfontj2d.properties

        • Path C:\Program Files\Java\jre-1.8\lib\psfontj2d.properties
        • Size 10KB
        • SHA256 a5c09a93d50093e1fe0cd03f1824b18943a7a4a7bc29c6b58646b4acc04d6383
        • MD5 SHA1 SHA512 SSDEEP

        resources.jar

        • Path C:\Program Files\Java\jre-1.8\lib\resources.jar
        • Size 1.0MB
        • SHA256 33955c92b95b410fe7306d0cbefc225e4ce37c28cf42485979e04491b378996a
        • MD5 SHA1 SHA512 SSDEEP

        blacklist

        • Path C:\Program Files\Java\jre-1.8\lib\security\blacklist
        • Size 4KB
        • SHA256 cfd9cc184160cfd091c3ab61e48ee83cbddcd86348682c00540e8bc407306348
        • MD5 SHA1 SHA512 SSDEEP

        cacerts

        • Path C:\Program Files\Java\jre-1.8\lib\security\cacerts
        • Size 110KB
        • SHA256 b440a3b00e0536011253613fa36fed25f9c30759ca186ef860eabbb9612ef85c
        • MD5 SHA1 SHA512 SSDEEP

        java.security

        • Path C:\Program Files\Java\jre-1.8\lib\security\java.security
        • Size 56KB
        • SHA256 7002cdc800981d530c42e4eb6af38466d56712e2f2fc91eb8959490a23922f70
        • MD5 SHA1 SHA512 SSDEEP

        US_export_policy.jar

        • Path C:\Program Files\Java\jre-1.8\lib\security\policy\limited\US_export_policy.jar
        • Size 4KB
        • SHA256 63b933f62f7d078e742d3f4ab6f4d26ae62245c07da81a75f5c8a9e2bd126ef4
        • MD5 SHA1 SHA512 SSDEEP

        local_policy.jar

        • Path C:\Program Files\Java\jre-1.8\lib\security\policy\limited\local_policy.jar
        • Size 4KB
        • SHA256 8d1137cc3e949bd74bc24a2ec8ba3339f9b6efbf985b3c572237b06fe3e5ee27
        • MD5 SHA1 SHA512 SSDEEP

        US_export_policy.jar

        • Path C:\Program Files\Java\jre-1.8\lib\security\policy\unlimited\US_export_policy.jar
        • Size 4KB
        • SHA256 2f076c02ec3b7e04a3463b917c571da7dec6e7769e43fc644abe8722ae4ffb7c
        • MD5 SHA1 SHA512 SSDEEP

        local_policy.jar

        • Path C:\Program Files\Java\jre-1.8\lib\security\policy\unlimited\local_policy.jar
        • Size 4KB
        • SHA256 fd71386088960983db2b8eaa1903b4bf5b3b61e98c751a8c59f5ab131238cd60
        • MD5 SHA1 SHA512 SSDEEP

        public_suffix_list.dat

        • Path C:\Program Files\Java\jre-1.8\lib\security\public_suffix_list.dat
        • Size 227KB
        • SHA256 a02eb216c1d2abd662f8d7480b46e2e4bc8179e0d2dc63574a8f5fc66dea49f2
        • MD5 SHA1 SHA512 SSDEEP

        tzdb.dat

        • Path C:\Program Files\Java\jre-1.8\lib\tzdb.dat
        • Size 102KB
        • SHA256 97d7a101df3c9ee106c3b957b7a81320214f18af1a68df2abaacfacade9e36f3
        • MD5 SHA1 SHA512 SSDEEP

        tzmappings

        • Path C:\Program Files\Java\jre-1.8\lib\tzmappings
        • Size 10KB
        • SHA256 1298b8425b1f1d23cf95c6470666d8c0d9535903bc1d73fad293d1943524d521
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-file-l1-2-0.dll
        • Size 18KB
        • SHA256 6df536959601544d4face182ef527a996f983b82ea47143c33bfba2919fe20e5
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-file-l2-1-0.dll
        • Size 18KB
        • SHA256 4468971d9bba25d25c626dd695b50a8073d65b5824f4bec73d08ef846a6564b9
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-localization-l1-2-0.dll
        • Size 21KB
        • SHA256 78152265f09b4bf66001a421654572c412ca1391f0a978a51d3be8a905fd2f48
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 19KB
        • SHA256 f93da7631ae223852caaf96653de5789168c28d0222a9e9d3fc039148fe68778
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-synch-l1-2-0.dll
        • Size 19KB
        • SHA256 968a716704be525f2117559996d7e84ae782fdca42229cb178709dda539c3dd8
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-timezone-l1-1-0.dll
        • Size 18KB
        • SHA256 c5eb5917e2823c7c9aeea5c2ba2e0e6736ceae8b56df6c957c414e63e6d007fd
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-xstate-l2-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-xstate-l2-1-0.dll
        • Size 12KB
        • SHA256 4f93eb7a56b91062d477cae1a6168ebe0bdcf628b0da3b7a68c1885e811fb01e
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-conio-l1-1-0.dll
        • Size 19KB
        • SHA256 43b3e308ee9eca18f1b516b390cd26dd35510bd7865a4ae138f508adb3374e0d
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-convert-l1-1-0.dll
        • Size 22KB
        • SHA256 2c812fe6c225b7eb8d61f3ba5c8ca91e6ef692e39d0f1573c482fca2512306ae
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-environment-l1-1-0.dll
        • Size 19KB
        • SHA256 6e9c548709c9f87cf192dbd8232d121760133d01128ab90b8f90b5718ee742eb
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 20KB
        • SHA256 390caafb2de89f8dab8d75daf0814f8d9f232610687fc105886a3de8bde65985
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-heap-l1-1-0.dll
        • Size 19KB
        • SHA256 6b62f32c2dc6a0fb16678701fd0614cb747bf792edff789f9e4f7ac5d1b502d7
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-locale-l1-1-0.dll
        • Size 19KB
        • SHA256 8a887b22ed1f4f07c355cab57c6dc867b7c7da1c0632582b63be6c9594008d4e
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-math-l1-1-0.dll
        • Size 27KB
        • SHA256 34e88edf5eaf3f0cb29b85a78a544e4dcfa44ecf479e05a2e711542c00b60a4d
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-multibyte-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 26KB
        • SHA256 93665a6827143ba56a572acbebaddfbaa751f4f6b956f0a24ba776ed3db29ff4
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-private-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-private-l1-1-0.dll
        • Size 69KB
        • SHA256 c84622b991537b6d71ad6cbffb9a4550016c0eeb16ffe4f92d7a9701135e702b
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-process-l1-1-0.dll
        • Size 19KB
        • SHA256 cb64b7170535895c48a79a8ccabb42a3fea54ad7646811fadc4c3cae20ff3921
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 23KB
        • SHA256 96bfe8891bdf8d5e600ab2f9614850f1f7b39281d154da04d2f0c44ae3895655
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 24KB
        • SHA256 d1df330508487fc44b7c7956ee1d918d50ff8c4f5aa466d2f1a4a097ffa28a8c
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-string-l1-1-0.dll
        • Size 24KB
        • SHA256 85b113626f425f52bbc5a0de30d2fb3a99474a9842c0c25dabef4b431375343f
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-time-l1-1-0.dll
        • Size 21KB
        • SHA256 0d3b2fc06a2256b6fffdccf22be6b618800d6d10b6824af4297cd5a892881423
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-utility-l1-1-0.dll
        • Size 19KB
        • SHA256 dca75e81d1697b2a7684603e2625bff83b3a1f2715528370210f69b71d842dce
        • MD5 SHA1 SHA512 SSDEEP

        concrt140.dll

        • Path C:\Program Files\Microsoft Office\root\Client\concrt140.dll
        • Size 325KB
        • SHA256 2cc19fad06d44f49db5c3bf9a5536b6cb63fe1ef0361a0d4a0241bab92bf8179
        • MD5 SHA1 SHA512 SSDEEP

        vccorlib140.dll

        • Path C:\Program Files\Microsoft Office\root\Client\vccorlib140.dll
        • Size 359KB
        • SHA256 513d17041871c608d8649d9c9929d5d8ce216173f5fc5e21e5d623e0575b4fc7
        • MD5 SHA1 SHA512 SSDEEP

        pkeyconfig-office.xrm-ms

        • Path C:\Program Files\Microsoft Office\root\Licenses16\pkeyconfig-office.xrm-ms
        • Size 905KB
        • SHA256 8b0052f22e28bdabbceb4cabde796e85b7b76d5890fc3ddc0840e9032183ba1e
        • MD5 SHA1 SHA512 SSDEEP

        pidgenx.dll

        • Path C:\Program Files\Microsoft Office\root\Office15\pidgenx.dll
        • Size 1.4MB
        • SHA256 c27d5545012e89609f85aed388a0cbedd1a14388b0eb85708417aa0d8c7bd76c
        • MD5 SHA1 SHA512 SSDEEP

        pkeyconfig-office.xrm-ms

        • Path C:\Program Files\Microsoft Office\root\Office15\pkeyconfig-office.xrm-ms
        • Size 621KB
        • SHA256 e57fa25fe286ea0b7fd5eafbf12ab5be0beb8d27dae30feb7411a5ed048815d8
        • MD5 SHA1 SHA512 SSDEEP

        PREVIEWTEMPLATE.POTX

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\PREVIEWTEMPLATE.POTX
        • Size 278KB
        • SHA256 5ee11f644511dc4494f40fe14ba176bd2c75652f5801b437a5f65e495bc2f254
        • MD5 SHA1 SHA512 SSDEEP

        word2013bw.dotx

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\word2013bw.dotx
        • Size 12KB
        • SHA256 2eb05e576211efa557e41e6c3ed1535e3c187bfce8de8cde2fcafba9fce49242
        • MD5 SHA1 SHA512 SSDEEP

        offsym.ttf

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsym.ttf
        • Size 849KB
        • SHA256 ce50c9976f15dd461471d13a1fb792130efaa19e31deff825decf7d65ca62a80
        • MD5 SHA1 SHA512 SSDEEP

        offsymb.ttf

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsymb.ttf
        • Size 1.4MB
        • SHA256 5233f6660448f66fa6210dea2dc501da8638687170dd0f518861c1484f03d4e6
        • MD5 SHA1 SHA512 SSDEEP

        offsymk.ttf

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsymk.ttf
        • Size 15KB
        • SHA256 3d11832f8325f49e8a8eb1f2c9259afcf95aef19062af164649cc3d021fb0d7b
        • MD5 SHA1 SHA512 SSDEEP

        offsyml.ttf

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsyml.ttf
        • Size 57KB
        • SHA256 bd8b3d07b38051775de81daccbf5d522aada1c9442dacd5dedd186bf52b2affb
        • MD5 SHA1 SHA512 SSDEEP

        offsymsb.ttf

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsymsb.ttf
        • Size 1.0MB
        • SHA256 efbab91b2da0ca1e37e430db002b60d58538ab0c7dfae69a593b968ea0acef13
        • MD5 SHA1 SHA512 SSDEEP

        offsymsl.ttf

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsymsl.ttf
        • Size 903KB
        • SHA256 61ec5566e03fedca8754a33264b325c514b028d7ec8f6e718c76002238aa360c
        • MD5 SHA1 SHA512 SSDEEP

        offsymt.ttf

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsymt.ttf
        • Size 126KB
        • SHA256 4bca604d2a67553c1e921308c7634cae71b4849acb702c45015a18d620e556e6
        • MD5 SHA1 SHA512 SSDEEP

        offsymxb.ttf

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsymxb.ttf
        • Size 50KB
        • SHA256 4c3b2c86cc8aeeba4ef34bd0a79a7078ec07d4ffcea5aa94bb3462119728287e
        • MD5 SHA1 SHA512 SSDEEP

        offsymxl.ttf

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsymxl.ttf
        • Size 735KB
        • SHA256 d82d95fa08b09a75a09f8279660313a2cde5317a4014ffb57a45cc0f78d9029f
        • MD5 SHA1 SHA512 SSDEEP

        ISO690.XSL

        • Path C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\ISO690.XSL
        • Size 265KB
        • SHA256 6ea507b430322b39723f4375f85b0a35563fe7e34f55005620d6073082fbfd34
        • MD5 SHA1 SHA512 SSDEEP

        zlibwapi.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\LibCurl64.DllA\OpenSSL64.DllA\zlibwapi.dll
        • Size 275KB
        • SHA256 edeb015711b1298d5e1d2e082eab4a7804f535c629ad619d5b9f5a8a3cc477b2
        • MD5 SHA1 SHA512 SSDEEP

        libcrypto-1_1-x64.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL64.DllA\libcrypto-1_1-x64.dll
        • Size 2.5MB
        • SHA256 2b514d766fb624876badbe6430592e041871a757a365c7c12e7b0766522e78ac
        • MD5 SHA1 SHA512 SSDEEP

        libssl-1_1-x64.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL64.DllA\libssl-1_1-x64.dll
        • Size 633KB
        • SHA256 9300740e706272203a854feb9b01a6dc688c779bf466d9cc9103428001ee6540
        • MD5 SHA1 SHA512 SSDEEP

        UCRTBASE.DLL

        • Path C:\Program Files\Microsoft Office\root\Office16\UCRTBASE.DLL
        • Size 960KB
        • SHA256 36352aa0a7f4529036c04febab07512b8c63e53f95809b27650feefe206abeb7
        • MD5 SHA1 SHA512 SSDEEP

        mfc140u.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\mfc140u.dll
        • Size 2.0MB
        • SHA256 f714fb3f5f49109e4a341359c77a7e24d0dc08a56c5c27c9b45ce16db05b868f
        • MD5 SHA1 SHA512 SSDEEP

        msvcp120.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\msvcp120.dll
        • Size 313KB
        • SHA256 44190e6e6ab1d7bcdfe3e0f178b462c8011d453b8de05787c85fe4ff9490be6e
        • MD5 SHA1 SHA512 SSDEEP

        msvcp140.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\msvcp140.dll
        • Size 247KB
        • SHA256 971480801721dabc9b2bd12c52a32271587ce26abcadada20513713d73b1d7e1
        • MD5 SHA1 SHA512 SSDEEP

        msvcr120.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\msvcr120.dll
        • Size 346KB
        • SHA256 d65d54cfd0fc7d5e7808d3cacdb0abbf2889ea810f3f8097346cdda524f95c9f
        • MD5 SHA1 SHA512 SSDEEP

        vcruntime140.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\vcruntime140.dll
        • Size 84KB
        • SHA256 5014efb01f2ba764de31d273ce70eb87457fdefaa820b37eaa255229ccf073da
        • MD5 SHA1 SHA512 SSDEEP

        SLINTL.DLL

        • Path C:\Program Files\Microsoft Office\root\Templates\1033\GettingStarted16\SLINTL.DLL
        • Size 19KB
        • SHA256 07de8315825f784aa816527ae5865de881ad6cf1cda9099b546148a9a6746d24
        • MD5 SHA1 SHA512 SSDEEP

        AppXManifestLoc.16.en-us.xml

        • Path C:\Program Files\Microsoft Office\root\loc\AppXManifestLoc.16.en-us.xml
        • Size 10KB
        • SHA256 3e7441456fc99fed1dcd61501e2b190620900907328615b8b6640b158b45601e
        • MD5 SHA1 SHA512 SSDEEP

        DBGCORE.DLL

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\DW\DBGCORE.DLL
        • Size 169KB
        • SHA256 a26a976ded3047e8937295476be974f58e3dc211256965473e1c92c49525695d
        • MD5 SHA1 SHA512 SSDEEP

        DBGHELP.DLL

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\DW\DBGHELP.DLL
        • Size 1.9MB
        • SHA256 b7b1087bf06f56cea33026115ae2f7362295cf9e69e63cd746dcde6f1afc8bc9
        • MD5 SHA1 SHA512 SSDEEP

        osmdp64.msi

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\1033\osmdp64.msi
        • Size 2.4MB
        • SHA256 143f29cb01aacee642ef1c670df11d1fc5f2cea07009a4b134f982bdca62bb3a
        • MD5 SHA1 SHA512 SSDEEP

        Csi.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\Csi.dll
        • Size 3.1MB
        • SHA256 b7b363b1bd1509f3df8b240adfcfa8c8cecf41a7142a34962ae120963dc5fb6c
        • MD5 SHA1 SHA512 SSDEEP

        as80.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\as80.xsl
        • Size 17KB
        • SHA256 735100720b7eefed30e98d27893c330e60f57b18a7f92d92ed1fe5c42ea95cc8
        • MD5 SHA1 SHA512 SSDEEP

        as90.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\as90.xsl
        • Size 19KB
        • SHA256 63351c8677df57c0ece11ba321b188e8f549af8a7b3a9d4ad44d9892ebdd25f4
        • MD5 SHA1 SHA512 SSDEEP

        db2v0801.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\db2v0801.xsl
        • Size 30KB
        • SHA256 acbd7de3aca89c5aa6f07e848cbcbe07093b16489681564df349394dad129efd
        • MD5 SHA1 SHA512 SSDEEP

        informix.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\informix.xsl
        • Size 31KB
        • SHA256 9b43e5c9c61757b211e828af797e29651b8fea11988f19dfa1f076dfab165944
        • MD5 SHA1 SHA512 SSDEEP

        msjet.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\msjet.xsl
        • Size 30KB
        • SHA256 1dc23cf293f1da1ff3f388fae602d90566f91318a8310316b4671d78771771b1
        • MD5 SHA1 SHA512 SSDEEP

        orcl7.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\orcl7.xsl
        • Size 92KB
        • SHA256 4491e905523516996d1ec7f5547f4501ee71d708009c986b763aaf4615d14c4f
        • MD5 SHA1 SHA512 SSDEEP

        sql2000.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\sql2000.xsl
        • Size 34KB
        • SHA256 d0bb650398ef4f4e300b7259890b0635aae57ee778f3cc458c0b5fa407945279
        • MD5 SHA1 SHA512 SSDEEP

        sql70.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\sql70.xsl
        • Size 32KB
        • SHA256 1084e6ac3d549cc577c3e1a836dd5ff6433bc578b0b34815c3588e40212cfffa
        • MD5 SHA1 SHA512 SSDEEP

        sql90.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\sql90.xsl
        • Size 128KB
        • SHA256 5a627100bbc0349742d12bcd0be69cebc53bb27a54f6fbea15d7ddcf59c8dd44
        • MD5 SHA1 SHA512 SSDEEP

        sqlpdw.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\sqlpdw.xsl
        • Size 100KB
        • SHA256 8cb8f2aa1955e065ea1d790385f2dbcafdee5f1b67ebcae5a735916e0b13b981
        • MD5 SHA1 SHA512 SSDEEP

        sybase.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\sybase.xsl
        • Size 30KB
        • SHA256 10059ec45300f3c793a87dcbd6856a44a2cbf97c196f05269c154f6154feeb79
        • MD5 SHA1 SHA512 SSDEEP

        trdtv2r41.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\trdtv2r41.xsl
        • Size 101KB
        • SHA256 c7f49df69a9f590b0b99273150e62d70402d15a68a256f4cd80c6a321866e73a
        • MD5 SHA1 SHA512 SSDEEP

        Microsoft.AnalysisServices.Common.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Microsoft.AnalysisServices.Common.dll
        • Size 1.5MB
        • SHA256 0c60e78b5beccdc075c3e705d286ca47b5f014ba4b79f26821e4427261b5d0d1
        • MD5 SHA1 SHA512 SSDEEP

        Microsoft.AnalysisServices.Excel.BackEnd.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Microsoft.AnalysisServices.Excel.BackEnd.dll
        • Size 2.0MB
        • SHA256 129af3ad96930f99cc3fdc25885cc4c5b97c7f04dcc9911acc8b2db42124eadb
        • MD5 SHA1 SHA512 SSDEEP

        Microsoft.Data.ConnectionUI.Dialog.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Microsoft.Data.ConnectionUI.Dialog.dll
        • Size 400KB
        • SHA256 1e1b6458dfb8df61b0b915912fc6c61c70df5906e48cfe570e55317ca247e833
        • MD5 SHA1 SHA512 SSDEEP

        Microsoft.Data.ConnectionUI.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Microsoft.Data.ConnectionUI.dll
        • Size 22KB
        • SHA256 5718121e199f2f1cf359361c665b2e59b4466451ef160905e8690fc262bd6d2b
        • MD5 SHA1 SHA512 SSDEEP

        Microsoft.SqlServer.Configuration.SString.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Microsoft.SqlServer.Configuration.SString.dll
        • Size 33KB
        • SHA256 f1ffbe1375173d912868e6990d67d3b5edae68401480a9366fb9905787fc1d63
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-core-file-l1-2-0.dll
        • Size 18KB
        • SHA256 870c7fd74ebc8e42be62e3a736cbac74a414bc43241ddb1776724b442845eba4
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-core-file-l2-1-0.dll
        • Size 18KB
        • SHA256 caafbe3a0552766ec58696bbca02de0d948247a1b1e3fd7bedebb22f8d675cb1
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-core-localization-l1-2-0.dll
        • Size 21KB
        • SHA256 f9399e4dc697cfb47e9a77ed0a16c7fb52b373afc7f27646f05c971c9256e99d
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-core-synch-l1-2-0.dll
        • Size 19KB
        • SHA256 4d4800d0ccfc4acf7191fb2273c610b25ec05167be024b447f9b40dfef99e941
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-core-timezone-l1-1-0.dll
        • Size 18KB
        • SHA256 f4b0e0960fa89d7b4aa7b12c09dc6c0c958aac507a4496c337c3194aac371506
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-xstate-l2-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-core-xstate-l2-1-0.dll
        • Size 12KB
        • SHA256 edd68458f529935ccc7153d4277252236741fd1231de9e4f77e08e2f23a79dd2
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-crt-convert-l1-1-0.dll
        • Size 22KB
        • SHA256 54d37e0b73d6cdc64fb525c8a31eebba00a0809770c8c00101ffc286acdd4569
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-crt-environment-l1-1-0.dll
        • Size 19KB
        • SHA256 7112aff32c0f5b41050e6ecc38846eebae08d564992158127866bb83bc6ab631
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 20KB
        • SHA256 a605cc29ee7893944e17b8a50de1a909797a3dc3989e9ffe450c93b7e1b673c9
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-crt-heap-l1-1-0.dll
        • Size 19KB
        • SHA256 7c948f829d48cf348ae324b500baf8b50261c187627607fb5832fae35366b816
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-crt-locale-l1-1-0.dll
        • Size 19KB
        • SHA256 f55723f9ddf119427d445fcc097460de922b704d7a10a27fa5577ba8d2d491db
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-crt-math-l1-1-0.dll
        • Size 29KB
        • SHA256 a6d4b6a997d2d87dc0a9e1ef4dd96ee8d6cc481a77a456730a533a149bd9df8f
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-multibyte-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 26KB
        • SHA256 89c19fb929fcdd37501f6e8c12c222571cb84972afe38e152087393a684cc062
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-private-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-crt-private-l1-1-0.dll
        • Size 72KB
        • SHA256 10452faf2db8610c8b73ce19f272c2f414f33dc855c94eafe18d0a78b47d931f
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-crt-process-l1-1-0.dll
        • Size 19KB
        • SHA256 1173eecbd73d88d92d9741f84bcc0cd909086ed723055bce423956f387506aff
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 23KB
        • SHA256 e73c5fd8d173dcf7964b2c230f9608d543996d3635b4c4a720a9a60749eaae5c
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 24KB
        • SHA256 4d696a2404fedc5a6b9604ab7c390fc609e3f4c92437fcad796a6078921b63fe
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-crt-string-l1-1-0.dll
        • Size 24KB
        • SHA256 4046be99887cefe8ebeaf7a44eff33c2c84b2838610fcd0acbf2dcc027f86c92
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-crt-time-l1-1-0.dll
        • Size 21KB
        • SHA256 07a5f98eb706476ca137bf12620d479507af010cf74d5d5d3571807216a82c57
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\api-ms-win-crt-utility-l1-1-0.dll
        • Size 19KB
        • SHA256 09475820feeb35b870a6f5e6c82852b9ba454c339c0d935d5c4b6839efe7b9af
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.8a9m26omhgyzqe9x1218a5b8sa5f81b4thv66u26i1w6ngnj.1gdiq667er._locked

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\available_for_trial.8a9m26omhgyzqe9x1218a5b8sa5f81b4thv66u26i1w6ngnj.1gdiq667er._locked
        • Size 19KB
        • SHA256 1961da8120be5044c85bf9ed26757cb5747592f44058413e4a543430b0e8e2a8
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.9g0hkdz84n76s98v4776efl74q64f285p1z7926zcpy9.6105q1r._locked

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\available_for_trial.9g0hkdz84n76s98v4776efl74q64f285p1z7926zcpy9.6105q1r._locked
        • Size 19KB
        • SHA256 dc8328d879807128d78187d4c9caf9a3a44d477353d5e2fe276610c480747fb7
        • MD5 SHA1 SHA512 SSDEEP

        concrt140.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\concrt140.dll
        • Size 245KB
        • SHA256 a7937be6bd31309a0770c06881a5a5c308614a2e2cb1d3c952e03b341418415d
        • MD5 SHA1 SHA512 SSDEEP

        mfc140u.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\mfc140u.dll
        • Size 2.1MB
        • SHA256 f872e6dcbe9337adcff25c860a0310fce25d92f133b9f0777b40bbbd02ec4c98
        • MD5 SHA1 SHA512 SSDEEP

        msvcp120.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\msvcp120.dll
        • Size 445KB
        • SHA256 80d8308a4b47d5c854083e1cf9fc1f8e20e036f6fab4041a6f959d74db0cd106
        • MD5 SHA1 SHA512 SSDEEP

        msvcp140.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\msvcp140.dll
        • Size 440KB
        • SHA256 2e9684335a3a1643bbb952103b6460c3cb58f264e1e8167190c2980a2e2bbee8
        • MD5 SHA1 SHA512 SSDEEP

        msvcr120.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\msvcr120.dll
        • Size 946KB
        • SHA256 4c677aef61a3a62f04f34cfdd1543bcf080ae7aa65cb2c5bcde4a090d0d61349
        • MD5 SHA1 SHA512 SSDEEP

        ucrtbase.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\ucrtbase.dll
        • Size 879KB
        • SHA256 c6536b2279ef565f28661ee1b1b7876cc17e5524680e90d27740289b9b73aaec
        • MD5 SHA1 SHA512 SSDEEP

        vccorlib140.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\vccorlib140.dll
        • Size 264KB
        • SHA256 ea3da904cec1d3884ca95409cbcef374ca85ab0871b2ed81a4db1f689d739155
        • MD5 SHA1 SHA512 SSDEEP

        vcruntime140.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\vcruntime140.dll
        • Size 79KB
        • SHA256 1476a26801639dfd671a6bbffea41b2850da32f38ede951142956a6cdc956067
        • MD5 SHA1 SHA512 SSDEEP

        hive.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\hive.xsl
        • Size 80KB
        • SHA256 e99cffc222e7e88c060a5d7a8c4763cde50358f23a42f989d8283377e8fab483
        • MD5 SHA1 SHA512 SSDEEP

        as80.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\as80.xsl
        • Size 17KB
        • SHA256 b9633e5020750ab00d84c5d66006d309d21af94c53cb87f5f583e92ecf42b425
        • MD5 SHA1 SHA512 SSDEEP

        as90.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\as90.xsl
        • Size 20KB
        • SHA256 2c8e5ce4c3eef29161dfb66927f7440eeb868e80895f4583bb0ae4ff48b4737d
        • MD5 SHA1 SHA512 SSDEEP

        db2v0801.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\db2v0801.xsl
        • Size 30KB
        • SHA256 050aeccd4b588cea8800c1c95daa5733bd722116f29f83456cdf14810582988f
        • MD5 SHA1 SHA512 SSDEEP

        msql.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\msql.xsl
        • Size 126KB
        • SHA256 493f5512e7217c8de02c3c82f10b72f01f25650e8096dfc6a5da54e5387e6e5f
        • MD5 SHA1 SHA512 SSDEEP

        orcl7.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\orcl7.xsl
        • Size 94KB
        • SHA256 b272b9e41c1a1eea68c8fe57b759488bd41df9e9887f915718a9d313c03e777a
        • MD5 SHA1 SHA512 SSDEEP

        sql120.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sql120.xsl
        • Size 132KB
        • SHA256 fb0178596371e700d948c78fe1c2f9418c19cba7398629b103e98a4272c9e54e
        • MD5 SHA1 SHA512 SSDEEP

        sql90.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sql90.xsl
        • Size 128KB
        • SHA256 097800922dc16c8725ca2f63563edff720a616649b7a8fb2af63f78ef4616a66
        • MD5 SHA1 SHA512 SSDEEP

        sqlpdw.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sqlpdw.xsl
        • Size 103KB
        • SHA256 3c77bff316082e6e5a2c1fe6eccb095c7885de46db4845688db7c7e48e6a1c64
        • MD5 SHA1 SHA512 SSDEEP

        trdtv2r41.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\trdtv2r41.xsl
        • Size 104KB
        • SHA256 62f98a306b8df012c2ffe456e4ebfc1b441ce1cfc8b1ae43f5684067cb97cf63
        • MD5 SHA1 SHA512 SSDEEP

        how_to_decrypt.hta

        • Path C:\how_to_decrypt.hta
        • Size 12KB
        • SHA256 504d26e0fb362d29759831dbae30ea7f656f45c2837999f82ecaaf41f568ad86
        • MD5 SHA1 SHA512 SSDEEP

        vcredist2010_x86.log.html

        • Path C:\vcredist2010_x86.log.html
        • Size 82KB
        • SHA256 609a806b896023cf8bc83cecc41ad16879c1d4e9a81ca02466bb31f3d41eb86d
        • MD5 SHA1 SHA512 SSDEEP

        memory/4256-20252-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/4256-3169-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/4256-6354-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/4256-5362-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/4256-18674-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/4256-20213-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/4256-0-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/4256-18702-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/4256-9759-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/4256-1-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/4256-3-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/4256-4-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/4256-15-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/4256-16-0x0000000000400000-0x0000000000463000-memory.dmp