Resubmissions

21/01/2024, 14:51

240121-r8gkpaddhk10

21/01/2024, 14:29

240121-rt2bjsdhh410

Analysis

  • max time kernel
    148s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/01/2024, 14:29

General

  • Target
    85f4088286ac1eedc94ad9dc6465e9e4b89d1cde3012f9949450fcc9f2b60431.exe
  • Size 342KB
  • Sample240121-rt2bjsdhh4
  • SHA256 85f4088286ac1eedc94ad9dc6465e9e4b89d1cde3012f9949450fcc9f2b60431
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • Trigona

    A ransomware first seen at the beginning of the 2022.

  • Drops desktop.ini file(s) 3 IoCs
  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\85f4088286ac1eedc94ad9dc6465e9e4b89d1cde3012f9949450fcc9f2b60431.exe
    "C:\Users\Admin\AppData\Local\Temp\85f4088286ac1eedc94ad9dc6465e9e4b89d1cde3012f9949450fcc9f2b60431.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    PID:1204

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        desktop.ini

        • Path C:\$Recycle.Bin\S-1-5-21-3073191680-435865314-2862784915-1000\desktop.ini
        • Size 903B
        • SHA256 2a362e81ae94d7a22af91d9074c7b8ac9b62c406223356865bb87b604a1506ab
        • MD5 SHA1 SHA512

        zhstkeu9yub169028mt3.6b6phl15r._locked

        • Path C:\$Recycle.Bin\S-1-5-21-3073191680-435865314-2862784915-1000\zhstkeu9yub169028mt3.6b6phl15r._locked
        • Size 2KB
        • SHA256 6faef07247b83d5b62bab44dc5d4bdb8a1421c1493ffa77943ca01e9dd0a617e
        • MD5 SHA1 SHA512

        setup.exe

        • Path C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\setup.exe
        • Size 4.3MB
        • SHA256 438e609b0de84a5901a467a4a5d971c185537329e181ef05720bca9bae261344
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-console-l1-2-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-console-l1-2-0.dll
        • Size 12KB
        • SHA256 4d544c54f7e698cb65eee7b5c114374fddb54e8272e350463a1accbfeba8b417
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-datetime-l1-1-0.dll
        • Size 12KB
        • SHA256 62bd513b65111eaed4e4c8821165524afadcf28421972453210cacfd8edd26df
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-debug-l1-1-0.dll
        • Size 12KB
        • SHA256 db77712b523ebe0c7a05f42302cbf1ff762d339436dd54265f95b6dc5ad44168
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 12KB
        • SHA256 e2787cc570157500e05ec0e21902e3439978a2766c9e1ec74b6725e345d3619b
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-file-l1-1-0.dll
        • Size 15KB
        • SHA256 0fe5f4aadc3385984a471ef5021994ffaba74b3ecb6fed839fe5a5bfbb7f6592
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-file-l1-2-0.dll
        • Size 12KB
        • SHA256 67419d99e5025228521780fd99f2bbc7de3fcc3dcff4093bcbdedcca5a023bdf
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-file-l2-1-0.dll
        • Size 12KB
        • SHA256 adafe2ad85678cbf09601f618d794910bc372bc9d94b256280b051a2e733652b
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-handle-l1-1-0.dll
        • Size 12KB
        • SHA256 f2e8a19571d4d7d577006e6ce97023e78fd102e45c29364e513fef877d60e20f
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-heap-l1-1-0.dll
        • Size 12KB
        • SHA256 2e4c6bdeda8d83aba7ea15b0161ab1d2becbb0fb1ded044da5188ea6e9ba33cc
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 12KB
        • SHA256 4c29527658f180619fa755a0032178c1325c4806258627ac25dfdd6d1a64738a
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 13KB
        • SHA256 128882d4bb0606810b73ed769b08595cc80ae4226bd3f3c6ec06408fe33bc5f6
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-localization-l1-2-0.dll
        • Size 15KB
        • SHA256 cad50359f086bb9a60a73d09ad17293f59f60e323daa49228bbc8381b06a522e
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-memory-l1-1-0.dll
        • Size 12KB
        • SHA256 cb024b02df06f73745e98ea53ded5e3b305ce44a0bacff5e34b3cf88bbca50a9
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 12KB
        • SHA256 5009d4a832ef6242a418ef70db4e66a837def8f7ed66c5d06dfc9e4ec8d45190
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 13KB
        • SHA256 f14767b1eb786ffa106a6a9487abbd7608d00e70528aaf8d388a0a72dbcaee71
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 14KB
        • SHA256 1e4aa073c9dba6be5b9833262c840d874a9d22f90e3abeb014fe968fd07dcbac
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 12KB
        • SHA256 d0fc8030eea238cc27198b04eccd0045a433d7a2d622c3ba3304466fae50b82c
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-profile-l1-1-0.dll
        • Size 12KB
        • SHA256 fca41cb24cb6e4f0138fae31ed04a27b7e7620cc94281735ec435536b0d3f75a
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 12KB
        • SHA256 7938327cca6a2536be094a5c32c4a67f748128718b5562f676b82022659f8c9e
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-string-l1-1-0.dll
        • Size 12KB
        • SHA256 8f9844ce71df5979f7a508ae8bd915e95f869d7bc3abb7c083edcd6f46ed68d9
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-synch-l1-1-0.dll
        • Size 14KB
        • SHA256 8823c63fcab24e7911ab6eb9949635d1dead0dba85bd403def8cc80e98c8dfeb
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-synch-l1-2-0.dll
        • Size 12KB
        • SHA256 29bf15ec2390643b6815f2a56edd77b6fdeeb94fab6028659780b2262bce8a73
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 13KB
        • SHA256 71d5e404e6468e6e2d5fcd4650a74529e6e4e4e903aa8a339c975de8744431a0
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-timezone-l1-1-0.dll
        • Size 12KB
        • SHA256 d03a27abaf31e0320c255a694798e87d7eee3eba175457e4444938f309df8684
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-util-l1-1-0.dll
        • Size 12KB
        • SHA256 c6c0d2bd2f7df585258c00b6882ab31e9129219c0fae45337251b98cb65d04c3
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-conio-l1-1-0.dll
        • Size 13KB
        • SHA256 25de94ff64f8ad0e48cce278568c67ab0734ec9c948a606cada8a0057041356d
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-convert-l1-1-0.dll
        • Size 16KB
        • SHA256 56fc96ae90cec7aa636bcf96734f905447ccb1eb125cdba7b77048b03bf01070
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-environment-l1-1-0.dll
        • Size 12KB
        • SHA256 5a95e5b1088a193717adf2bf3f08f0c095e8e48f226758032ca4e331fbeba2d7
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 14KB
        • SHA256 6ec1c78f9d0067a2306367f46521bd7e8f4d2a4732c7c10f1ef3c127c1e8c9e1
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-heap-l1-1-0.dll
        • Size 13KB
        • SHA256 b1625ce365bc730085da6c27c857a17eaec183f11f8288e8863a4fe83be3d0ea
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-locale-l1-1-0.dll
        • Size 12KB
        • SHA256 223ca948bfbb51d02a32f66e994d9c455b95881894423e02496b10fb38988b5c
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-math-l1-1-0.dll
        • Size 21KB
        • SHA256 28c914f13e2c4a22e10c3f2fcd98fea5c7bba15efcf5f9da68808d291f17f24d
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-multibyte-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 20KB
        • SHA256 010c68450d0553a3b21f062204ffe18ed0240b03bc8669939491a397d88a2e03
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-private-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-private-l1-1-0.dll
        • Size 63KB
        • SHA256 f1eb0a15c916e52d685c335f8f9adee2138e0eca1d82eaed6c835fe53a532fd2
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-process-l1-1-0.dll
        • Size 13KB
        • SHA256 b3fa254b6742c4a5b36d6be284b4d04f64aa4d5a852de5754e0e4cf404ffd76d
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 16KB
        • SHA256 0eadbf7dbc9387a02d2c8351e4967d04e72f2a1bd442492bd79145108956bc5f
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 18KB
        • SHA256 7c6e0eb170e830054e9b31c233f08e46433bd3bae043797adebddb9596d7361b
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-string-l1-1-0.dll
        • Size 18KB
        • SHA256 6f88c7298624b94c064038598f9165a0d52fb21c7b7744df8000befaa41ccd74
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-time-l1-1-0.dll
        • Size 14KB
        • SHA256 bd71407d936e5c1e2b35f702bd6f28e98fbc6daafad0181b7c38fa455cbf8cc6
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-utility-l1-1-0.dll
        • Size 12KB
        • SHA256 ac39e51a85b2fd9ab2bf9585499339f796e6a95cf585f1d488e8c228c1acd250
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.69govi68ga72be3240g2uujh1559.6m61pr._locked

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\available_for_trial.69govi68ga72be3240g2uujh1559.6m61pr._locked
        • Size 12KB
        • SHA256 a3ebcef2c22441efb52b3f2b3b515f2b994fe8e02813a33419a9f9890aa5d741
        • MD5 SHA1 SHA512 SSDEEP

        msvcp140.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\msvcp140.dll
        • Size 559KB
        • SHA256 0e2ebf862a4c69b003ac5da27eb747b2a1d921b5dfb599d3b44f338930874979
        • MD5 SHA1 SHA512 SSDEEP

        ucrtbase.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\ucrtbase.dll
        • Size 1012KB
        • SHA256 e766be6dc5c134919551860d744103fd44b8f9e7b17e0e3eba770dbee35f0637
        • MD5 SHA1 SHA512 SSDEEP

        vcruntime140.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140.dll
        • Size 96KB
        • SHA256 1329ce6865009fe8eb792ef4c7edd90001e995ee833100aac1394931986f08f2
        • MD5 SHA1 SHA512 SSDEEP

        vcruntime140_1.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140_1.dll
        • Size 37KB
        • SHA256 1ece10434e2f11517670be28f071f850139021e35766083c5c718e34408b967b
        • MD5 SHA1 SHA512 SSDEEP

        messages_zh_TW.properties

        • Path C:\Program Files\Java\jdk-1.8\jre\lib\deploy\messages_zh_TW.properties
        • Size 4KB
        • SHA256 b2eadf3040ed1b2472d24ded433513acc44818d67eab1ba479d828c2d0efa154
        • MD5 SHA1 SHA512 SSDEEP

        98127mw199f.8ar._locked

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\98127mw199f.8ar._locked
        • Size 6KB
        • SHA256 ef06b97a554f1497d33b1e15b2a904ab7b79073dd27f85a5cc4c2e532c6779c0
        • MD5 SHA1 SHA512 SSDEEP

        glib.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\glib.md
        • Size 32KB
        • SHA256 80c831338d59419426f4ef02752960b3a192cacca3fed9d31b969fbca71827a1
        • MD5 SHA1 SHA512 SSDEEP

        gstreamer.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\gstreamer.md
        • Size 35KB
        • SHA256 dec55bf98e6c04817cd4ef3c23b0e8246927f186f70b20be643701a768062832
        • MD5 SHA1 SHA512 SSDEEP

        icu_web.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\icu_web.md
        • Size 24KB
        • SHA256 afecd9fb7d78bd13b713bc359c7b3df922cd17a8c4675f05f16c916a19e05fef
        • MD5 SHA1 SHA512 SSDEEP

        libxml2.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\libxml2.md
        • Size 4KB
        • SHA256 2d619acd49c324de3da6ddaba7ee0f2ec1e63b15ebb37e35ddffca2f16a8db7b
        • MD5 SHA1 SHA512 SSDEEP

        public_suffix.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\public_suffix.md
        • Size 18KB
        • SHA256 90194c4a8018461613f077c292506b881f64c44034e9cd79073392cf20dced51
        • MD5 SHA1 SHA512 SSDEEP

        webkit.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\webkit.md
        • Size 320KB
        • SHA256 39e3aa7d2fcf819299accc5875e48b0835a4de454d405a4dde07129236c54064
        • MD5 SHA1 SHA512 SSDEEP

        bcel.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\bcel.md
        • Size 11KB
        • SHA256 64f83da2aa46d8554e24855403d830c4073fd0b53756d8b8b46e8e69e26860ca
        • MD5 SHA1 SHA512 SSDEEP

        dom.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\dom.md
        • Size 4KB
        • SHA256 8d658d2e483bb37bca4a7f00b87b67938f6d80a8e8c571eb4aa7e36ec168b0b8
        • MD5 SHA1 SHA512 SSDEEP

        ecc.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\ecc.md
        • Size 29KB
        • SHA256 0144fe647d0258b34f465233564caf486c2cc305230656610b94be4653bde9de
        • MD5 SHA1 SHA512 SSDEEP

        jpeg.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\jpeg.md
        • Size 4KB
        • SHA256 3fa9080be7b1d0d327bdc1490f69fe71cc9f92d67c8a4f8f617671b486cffe2f
        • MD5 SHA1 SHA512 SSDEEP

        libpng.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\libpng.md
        • Size 7KB
        • SHA256 cbfbfd820934c2895b375b7101699ce970cbd1578d8a31193d4053af12daf1a6
        • MD5 SHA1 SHA512 SSDEEP

        mesa3d.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\mesa3d.md
        • Size 6KB
        • SHA256 f08c59459b2476e9c598a44c95570f5342dcdeb5a57094a3d87fcc4fa54ed57e
        • MD5 SHA1 SHA512 SSDEEP

        pkcs11cryptotoken.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\pkcs11cryptotoken.md
        • Size 4KB
        • SHA256 94d9af368f24f0f67df3e7e9e3cd85ff617bd90740580a208c760812a84db0e4
        • MD5 SHA1 SHA512 SSDEEP

        santuario.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\santuario.md
        • Size 12KB
        • SHA256 e7cae8a4198aca0f3ed990483f584cba25c6594537c1aba9c29e5c33f446a77e
        • MD5 SHA1 SHA512 SSDEEP

        xalan.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\xalan.md
        • Size 12KB
        • SHA256 5511fde12495f2c1da4a6611ef02db080855acac9b03b6e0868e46c2c9897ff0
        • MD5 SHA1 SHA512 SSDEEP

        xerces.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\xerces.md
        • Size 12KB
        • SHA256 c6e7ff6b5ccf3bad460bd7198d8e14b232509331ddd59ba416b4aaa65e9e033f
        • MD5 SHA1 SHA512 SSDEEP

        xmlresolver.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\xmlresolver.md
        • Size 11KB
        • SHA256 cafdf2d47644f2e984ac2af72ea960f8f63a94c20be45271fdf48a44dafb541f
        • MD5 SHA1 SHA512 SSDEEP

        msvcp140_1.dll

        • Path C:\Program Files\Java\jre-1.8\bin\msvcp140_1.dll
        • Size 24KB
        • SHA256 3c158fd527bb09f2c7f66195c5559d407648c28a897f3b68e710296fa85f1208
        • MD5 SHA1 SHA512 SSDEEP

        msvcp140_2.dll

        • Path C:\Program Files\Java\jre-1.8\bin\msvcp140_2.dll
        • Size 183KB
        • SHA256 b07917c92c8308610f4909bd133482e3c9475053dd6dd6afb6ead49b35657569
        • MD5 SHA1 SHA512 SSDEEP

        classlist

        • Path C:\Program Files\Java\jre-1.8\lib\classlist
        • Size 83KB
        • SHA256 d151d30d2b438b4dcf2bfe3bd370caa1cfc324d4646d712923955921a74b6d7f
        • MD5 SHA1 SHA512 SSDEEP

        CIEXYZ.pf

        • Path C:\Program Files\Java\jre-1.8\lib\cmm\CIEXYZ.pf
        • Size 50KB
        • SHA256 73dfe0e9cc42f6e96f959fc163b60aea5455d3740b001a26b0f4b5a75130eb0f
        • MD5 SHA1 SHA512 SSDEEP

        PYCC.pf

        • Path C:\Program Files\Java\jre-1.8\lib\cmm\PYCC.pf
        • Size 268KB
        • SHA256 2ac9fee91c3e370712ea274d3a16ce549fe3c7fa1338483a9ce82063d46e3b2d
        • MD5 SHA1 SHA512 SSDEEP

        content-types.properties

        • Path C:\Program Files\Java\jre-1.8\lib\content-types.properties
        • Size 6KB
        • SHA256 0c075a092219a42daa9ee75a15f5a5f5960706bda8ad0d6294884e24de0bdb78
        • MD5 SHA1 SHA512 SSDEEP

        currency.data

        • Path C:\Program Files\Java\jre-1.8\lib\currency.data
        • Size 4KB
        • SHA256 26016aabb4bf736e91f77389e5b9c22b9e19128ad1326c3136602c29be5fa10f
        • MD5 SHA1 SHA512 SSDEEP

        deploy.jar

        • Path C:\Program Files\Java\jre-1.8\lib\deploy.jar
        • Size 4.8MB
        • SHA256 1cfce1272f1139b9b4e51156da295804013954628f4b36a8ac8770fb95621c55
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.cgzw94ykl99n122845dpz.t2r._locked

        • Path C:\Program Files\Java\jre-1.8\lib\deploy\available_for_trial.cgzw94ykl99n122845dpz.t2r._locked
        • Size 12KB
        • SHA256 afdeedcc1794d32287e7d7740da6aebb3533686cfd681032f3be92a5d592d005
        • MD5 SHA1 SHA512 SSDEEP

        ffjcext.zip

        • Path C:\Program Files\Java\jre-1.8\lib\deploy\ffjcext.zip
        • Size 14KB
        • SHA256 e88bf0ca5ed46948559b0fff24e19c3d3336508579c45bb9a23700b42fc4daa5
        • MD5 SHA1 SHA512 SSDEEP

        messages_es.properties

        • Path C:\Program Files\Java\jre-1.8\lib\deploy\messages_es.properties
        • Size 4KB
        • SHA256 8f94210e819ddc4e19e1afd761c5dd387b0b746c118c0a331b61cbcc15b96248
        • MD5 SHA1 SHA512 SSDEEP

        messages_fr.properties

        • Path C:\Program Files\Java\jre-1.8\lib\deploy\messages_fr.properties
        • Size 4KB
        • SHA256 bacefacb85c877d62bd595a3fa9ebd2abc5e1d3d703ec4416a64c30078840585
        • MD5 SHA1 SHA512 SSDEEP

        messages_ja.properties

        • Path C:\Program Files\Java\jre-1.8\lib\deploy\messages_ja.properties
        • Size 6KB
        • SHA256 8397131caa12d290d788d7a9ec505f1d81b8f280c101c58cd03208c1a84a61df
        • MD5 SHA1 SHA512 SSDEEP

        messages_ko.properties

        • Path C:\Program Files\Java\jre-1.8\lib\deploy\messages_ko.properties
        • Size 6KB
        • SHA256 8c438a69a3e361274d6923016229b9c3aa1e11300620dc672aecfbee536bfaa8
        • MD5 SHA1 SHA512 SSDEEP

        messages_zh_CN.properties

        • Path C:\Program Files\Java\jre-1.8\lib\deploy\messages_zh_CN.properties
        • Size 4KB
        • SHA256 99d098575bd19d3bb8f16f155bd1355dce79ba5d0c0ef1fc024969a2fbd34a2b
        • MD5 SHA1 SHA512 SSDEEP

        splash.gif

        • Path C:\Program Files\Java\jre-1.8\lib\deploy\splash.gif
        • Size 9KB
        • SHA256 beaa5d9a29da8a964f1fc05500b4d46d82a880ff5bcdcf2cbac2f66ef8922ec9
        • MD5 SHA1 SHA512 SSDEEP
        • Path C:\Program Files\Java\jre-1.8\lib\deploy\[email protected]
        • Size 15KB
        • SHA256 ccfe6ae3912bbc2ba013140bbec2feb3c9376ef2b119ca70736eca7e0e9da457
        • MD5 SHA1 SHA512 SSDEEP

        splash_11-lic.gif

        • Path C:\Program Files\Java\jre-1.8\lib\deploy\splash_11-lic.gif
        • Size 8KB
        • SHA256 afc314fa8fb071b843b6237ac7a23b85ed53938cc0b9d694529e4b0a17202ebf
        • MD5 SHA1 SHA512 SSDEEP

        access-bridge-64.jar

        • Path C:\Program Files\Java\jre-1.8\lib\ext\access-bridge-64.jar
        • Size 193KB
        • SHA256 129622b8ac3edcd2f228cdd5e2a37c94f274d1f1998bbdb3bfb68b0473ca38b5
        • MD5 SHA1 SHA512 SSDEEP

        cldrdata.jar

        • Path C:\Program Files\Java\jre-1.8\lib\ext\cldrdata.jar
        • Size 3.7MB
        • SHA256 2227cc7701a4247325ebfd7110a5411b6674b1312c1a4c136e6f6c0e570edb98
        • MD5 SHA1 SHA512 SSDEEP

        dnsns.jar

        • Path C:\Program Files\Java\jre-1.8\lib\ext\dnsns.jar
        • Size 9KB
        • SHA256 f1eda74291c45fb5efe69cbac9413273451d26a0bf12e76a33d1b48761f44fc7
        • MD5 SHA1 SHA512 SSDEEP

        jaccess.jar

        • Path C:\Program Files\Java\jre-1.8\lib\ext\jaccess.jar
        • Size 44KB
        • SHA256 361f2d811c1c30cd077b3ed9d8a48e47cd172ec6c37397419610a79ec9e444ff
        • MD5 SHA1 SHA512 SSDEEP

        jfxrt.jar

        • Path C:\Program Files\Java\jre-1.8\lib\ext\jfxrt.jar
        • Size 17.4MB
        • SHA256 c537884d77bd969caf402e31eee602cbb0f2bc10011e9d51de9273a88110c6d2
        • MD5 SHA1 SHA512 SSDEEP

        nashorn.jar

        • Path C:\Program Files\Java\jre-1.8\lib\ext\nashorn.jar
        • Size 1.9MB
        • SHA256 6adef830f8060e362b7de061ea7dd213cedd8c71f3982b157347c921dcfa59e6
        • MD5 SHA1 SHA512 SSDEEP

        sunec.jar

        • Path C:\Program Files\Java\jre-1.8\lib\ext\sunec.jar
        • Size 46KB
        • SHA256 d15ecc34696efc2c94c7809040dbc5e7e83d0cff8fb0ced6a953db453d0a4477
        • MD5 SHA1 SHA512 SSDEEP

        sunjce_provider.jar

        • Path C:\Program Files\Java\jre-1.8\lib\ext\sunjce_provider.jar
        • Size 288KB
        • SHA256 ce0fbd442d02389c27551c85949dbc3be9fc2f9f47fb14c709e79c70f2cb7dfa
        • MD5 SHA1 SHA512 SSDEEP

        sunmscapi.jar

        • Path C:\Program Files\Java\jre-1.8\lib\ext\sunmscapi.jar
        • Size 49KB
        • SHA256 fd7890f327f04c444b489b8a3a17180d9cbd0f6592ff57e9af87bc50a217889b
        • MD5 SHA1 SHA512 SSDEEP

        sunpkcs11.jar

        • Path C:\Program Files\Java\jre-1.8\lib\ext\sunpkcs11.jar
        • Size 287KB
        • SHA256 20e8b0611f8347b19927ca8fab9b29b8865896fa258fbf2505339c42fd3d5ac1
        • MD5 SHA1 SHA512 SSDEEP

        zipfs.jar

        • Path C:\Program Files\Java\jre-1.8\lib\ext\zipfs.jar
        • Size 69KB
        • SHA256 5b0888e61b60cb085f63e7a93d179060a89e400ae9badac0a4c86699ea2b7690
        • MD5 SHA1 SHA512 SSDEEP

        flavormap.properties

        • Path C:\Program Files\Java\jre-1.8\lib\flavormap.properties
        • Size 4KB
        • SHA256 bad1edca4bfb25ab26e5e57c882cbb90fa4732e8a25f9c2763eebf8b7c7ea36f
        • MD5 SHA1 SHA512 SSDEEP

        fontconfig.bfc

        • Path C:\Program Files\Java\jre-1.8\lib\fontconfig.bfc
        • Size 4KB
        • SHA256 d6d100614109400d282349e08fb482452a635112355daa2842004f7a7c273353
        • MD5 SHA1 SHA512 SSDEEP

        fontconfig.properties.src

        • Path C:\Program Files\Java\jre-1.8\lib\fontconfig.properties.src
        • Size 11KB
        • SHA256 ad989b2e7b3ec17abc57340c9263b6395f27e1ced515e747db7eddf5dfd975db
        • MD5 SHA1 SHA512 SSDEEP

        LucidaBrightDemiBold.ttf

        • Path C:\Program Files\Java\jre-1.8\lib\fonts\LucidaBrightDemiBold.ttf
        • Size 74KB
        • SHA256 3a5774be0c1eddb6ce3e481a7849953bdbd766345aab22f8dde59c6f008db916
        • MD5 SHA1 SHA512 SSDEEP

        LucidaBrightDemiItalic.ttf

        • Path C:\Program Files\Java\jre-1.8\lib\fonts\LucidaBrightDemiItalic.ttf
        • Size 74KB
        • SHA256 b7241ec5c8462e58b8d0710d9f2eeed08978ff4f7bc16efaf61743fa0237d2e5
        • MD5 SHA1 SHA512 SSDEEP

        LucidaBrightItalic.ttf

        • Path C:\Program Files\Java\jre-1.8\lib\fonts\LucidaBrightItalic.ttf
        • Size 79KB
        • SHA256 d7ed53ad8d5c5ece2dca84ea848d5d206b59abcbbc8166cd504d4fcd2033fd35
        • MD5 SHA1 SHA512 SSDEEP

        LucidaBrightRegular.ttf

        • Path C:\Program Files\Java\jre-1.8\lib\fonts\LucidaBrightRegular.ttf
        • Size 337KB
        • SHA256 c13f71086aee8c241acf1cf440619e2322d6a07c27aaa19879588d43a4bf29d3
        • MD5 SHA1 SHA512 SSDEEP

        LucidaSansDemiBold.ttf

        • Path C:\Program Files\Java\jre-1.8\lib\fonts\LucidaSansDemiBold.ttf
        • Size 311KB
        • SHA256 0c81748f160dda1484c80ace32609844ec9545c38b974c593625773e35f42304
        • MD5 SHA1 SHA512 SSDEEP

        LucidaSansRegular.ttf

        • Path C:\Program Files\Java\jre-1.8\lib\fonts\LucidaSansRegular.ttf
        • Size 682KB
        • SHA256 f2c146d29b9de36ddaf6815b6a51e6eefbe45cc66aa04823b0d2ac1d5e98b567
        • MD5 SHA1 SHA512 SSDEEP

        LucidaTypewriterBold.ttf

        • Path C:\Program Files\Java\jre-1.8\lib\fonts\LucidaTypewriterBold.ttf
        • Size 229KB
        • SHA256 d307296875cf89ad244dd6f515034c97b626451d85a9dd27dea2425abe75999f
        • MD5 SHA1 SHA512 SSDEEP

        LucidaTypewriterRegular.ttf

        • Path C:\Program Files\Java\jre-1.8\lib\fonts\LucidaTypewriterRegular.ttf
        • Size 237KB
        • SHA256 c508ce01fbf3cd12f0fd9170fba01a63e3f90a88e7b24101ff5699400d456034
        • MD5 SHA1 SHA512 SSDEEP

        hijrah-config-umalqura.properties

        • Path C:\Program Files\Java\jre-1.8\lib\hijrah-config-umalqura.properties
        • Size 14KB
        • SHA256 a1fe2fc2c152386ec7f87da157843fceebc2c101ecdf0596e2eb2073a5ca6740
        • MD5 SHA1 SHA512 SSDEEP

        javaws.jar

        • Path C:\Program Files\Java\jre-1.8\lib\javaws.jar
        • Size 935KB
        • SHA256 b1ae1ea772b0bac1e9e3f1a9519731fe99b87568c1fb153309d2d0d241bc64f9
        • MD5 SHA1 SHA512 SSDEEP

        jce.jar

        • Path C:\Program Files\Java\jre-1.8\lib\jce.jar
        • Size 120KB
        • SHA256 4f4e256cd09fe730e8d098c731f28db831802145e6860fe80cfb27cc23c2073a
        • MD5 SHA1 SHA512 SSDEEP

        jfr.jar

        • Path C:\Program Files\Java\jre-1.8\lib\jfr.jar
        • Size 561KB
        • SHA256 5a4f2824b8214eaebe4377f37be7a92a7ebce2cbe9880a6f6334c8bff78c8cbb
        • MD5 SHA1 SHA512 SSDEEP

        default.jfc

        • Path C:\Program Files\Java\jre-1.8\lib\jfr\default.jfc
        • Size 21KB
        • SHA256 8796c10dc322d3a035570256aad3e95331f864c2736fb78f110cb8a9ab77dc7c
        • MD5 SHA1 SHA512 SSDEEP

        profile.jfc

        • Path C:\Program Files\Java\jre-1.8\lib\jfr\profile.jfc
        • Size 21KB
        • SHA256 acbb7417624591ca551f603315d36509887c5490845bbc749b9afb700d483374
        • MD5 SHA1 SHA512 SSDEEP

        jfxswt.jar

        • Path C:\Program Files\Java\jre-1.8\lib\jfxswt.jar
        • Size 33KB
        • SHA256 0d2a1e23b9b2148754d75e18be7af219172ff1e5901a4552276c24de6518b9a7
        • MD5 SHA1 SHA512 SSDEEP

        jvm.hprof.txt

        • Path C:\Program Files\Java\jre-1.8\lib\jvm.hprof.txt
        • Size 4KB
        • SHA256 7bea8ca4c04b4f0663b9bbe86908ef6ccae089dc07e1d15e0abff1e4dfda3117
        • MD5 SHA1 SHA512 SSDEEP

        jmxremote.access

        • Path C:\Program Files\Java\jre-1.8\lib\management\jmxremote.access
        • Size 4KB
        • SHA256 0c842bb2d0608de0d74933d43b6de120e4e526ef526e72fc1daed3a2d0dcd724
        • MD5 SHA1 SHA512 SSDEEP

        management.properties

        • Path C:\Program Files\Java\jre-1.8\lib\management\management.properties
        • Size 15KB
        • SHA256 d6859608c3699344a4306a48b686b33d57ff0222c9abf71d5b8919589e31be25
        • MD5 SHA1 SHA512 SSDEEP

        net.properties

        • Path C:\Program Files\Java\jre-1.8\lib\net.properties
        • Size 5KB
        • SHA256 6e6298f246087441d50a7c77f87940657f3f427452beba2a612f86d875fe5994
        • MD5 SHA1 SHA512 SSDEEP

        plugin.jar

        • Path C:\Program Files\Java\jre-1.8\lib\plugin.jar
        • Size 1.8MB
        • SHA256 e362bc46163dbdc12936719cf59a1d651bd688aa5f065fa866d16cd6cbac9276
        • MD5 SHA1 SHA512 SSDEEP

        psfontj2d.properties

        • Path C:\Program Files\Java\jre-1.8\lib\psfontj2d.properties
        • Size 10KB
        • SHA256 7dcd5f3308ad00645a2dd0d6d6bb49c0a45fbdbbb179b5eddff8694f7ae25ad9
        • MD5 SHA1 SHA512 SSDEEP

        resources.jar

        • Path C:\Program Files\Java\jre-1.8\lib\resources.jar
        • Size 3.4MB
        • SHA256 9bd7021aa23c2c0e2509439aa8e02cfa70daa78ea4ac36891d2ecf9340f1c933
        • MD5 SHA1 SHA512 SSDEEP

        blacklist

        • Path C:\Program Files\Java\jre-1.8\lib\security\blacklist
        • Size 4KB
        • SHA256 011d4d0cfe868a3e52a62359a9e58d125c29f781cc495810c7d0405c88cedec8
        • MD5 SHA1 SHA512 SSDEEP

        cacerts

        • Path C:\Program Files\Java\jre-1.8\lib\security\cacerts
        • Size 110KB
        • SHA256 4a180d3d87f82c5482675c1a80a37e7638295027a4c0ce321d0e60b7923894e0
        • MD5 SHA1 SHA512 SSDEEP

        java.security

        • Path C:\Program Files\Java\jre-1.8\lib\security\java.security
        • Size 56KB
        • SHA256 4939867a8a4a6a8383cc3b362baba14511c316e75ff83f1beeca4484521c907f
        • MD5 SHA1 SHA512 SSDEEP

        US_export_policy.jar

        • Path C:\Program Files\Java\jre-1.8\lib\security\policy\limited\US_export_policy.jar
        • Size 4KB
        • SHA256 947c97c66111741d99707a0a9539aabfb35bdff0011982c8293bd94be82c9f0a
        • MD5 SHA1 SHA512 SSDEEP

        local_policy.jar

        • Path C:\Program Files\Java\jre-1.8\lib\security\policy\limited\local_policy.jar
        • Size 4KB
        • SHA256 4ed20ba9eb1c840cef54a904e1ff8e3369948d24a75466a570cb5a950b889fbf
        • MD5 SHA1 SHA512 SSDEEP

        US_export_policy.jar

        • Path C:\Program Files\Java\jre-1.8\lib\security\policy\unlimited\US_export_policy.jar
        • Size 4KB
        • SHA256 3b7e223b04b4d852f407b79768602df9cac7bf62932c71b41c5e6fe35ef72199
        • MD5 SHA1 SHA512 SSDEEP

        local_policy.jar

        • Path C:\Program Files\Java\jre-1.8\lib\security\policy\unlimited\local_policy.jar
        • Size 4KB
        • SHA256 3633006f35c43337ce4fd4e6566ee7c8aae52a6855b10a8372b458cc604599bf
        • MD5 SHA1 SHA512 SSDEEP

        public_suffix_list.dat

        • Path C:\Program Files\Java\jre-1.8\lib\security\public_suffix_list.dat
        • Size 227KB
        • SHA256 b5beda5fdb8beedb407ab2120b92ad233ae662309d7269a72f8c4feba0d1a538
        • MD5 SHA1 SHA512 SSDEEP

        tzdb.dat

        • Path C:\Program Files\Java\jre-1.8\lib\tzdb.dat
        • Size 102KB
        • SHA256 9607b44ade93c2cb5c538f0e4cc5991f5400c89747ed2db8d41ed707a1c701e0
        • MD5 SHA1 SHA512 SSDEEP

        tzmappings

        • Path C:\Program Files\Java\jre-1.8\lib\tzmappings
        • Size 10KB
        • SHA256 d574b0aa7b209c6f157378961ee6377ca43c8d770d2861a91d0519704f1f2edd
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-file-l1-2-0.dll
        • Size 18KB
        • SHA256 164e53c254fcb3ef3126d86c57bf3f608b21dd9e793ac1573fe09a3abef33537
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-file-l2-1-0.dll
        • Size 18KB
        • SHA256 df5eca24d40b2049c4b74e2a0e3369cc037edfc12e7481c834f2d488d52ac666
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-localization-l1-2-0.dll
        • Size 21KB
        • SHA256 a286407f462cb1417904b3af830bfce149ac4249f6b4e62c83ed7da5810a43ae
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 19KB
        • SHA256 2bc4057eb9f97702e6ee3a93c1f73c54080364bd03b3fb349ef228b17f884d5f
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-synch-l1-2-0.dll
        • Size 19KB
        • SHA256 d6e7e371b1e7452e2022d84bc13d92cabb5e9ab865ce42dd9ad4151988053034
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-timezone-l1-1-0.dll
        • Size 18KB
        • SHA256 76b78890db6625efb02d36d2017506cde0f765e5f7eabe93646a8f04b91f4099
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-core-xstate-l2-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-xstate-l2-1-0.dll
        • Size 12KB
        • SHA256 3d2eaaef00ab8fd386fc7998679fdc36078696dfa4544cd85caa3976376afb95
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-conio-l1-1-0.dll
        • Size 19KB
        • SHA256 885921a5459950ba77c2771ad6605a0f8a14fc8bdb6be56049269297062b0395
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-convert-l1-1-0.dll
        • Size 22KB
        • SHA256 cf6730ae3f69f03416c5f31da5635f15f36b0c277be91abcf1868e7a7b1c69e5
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 20KB
        • SHA256 dad0667e8ddb6117324a2fce6277a337f63e17ad5d6fbf4132a14465763ac563
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-heap-l1-1-0.dll
        • Size 19KB
        • SHA256 9e861204d08ce0ac185fbb56052da3b1852907c09e6d212a2f78dcd503182afd
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-locale-l1-1-0.dll
        • Size 19KB
        • SHA256 1c1d86a1a28c50d53e2afabdc35f48ee688fcb57f89d6ca23ae7b445abbe9d40
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-multibyte-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 26KB
        • SHA256 2e19904178b0b4d2434a0538ba3d8e19b2c4b3e13c36857cb86a42b379f01b4a
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-private-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-private-l1-1-0.dll
        • Size 69KB
        • SHA256 60b074891af446a4acf1ebefc3448892de07488fa92d72f8e54fc4fa96eaac7d
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-process-l1-1-0.dll
        • Size 19KB
        • SHA256 fe220f96179a99f3b1d8fa344f559ae9c0ae01dbfb74898f9054c4829733e1d6
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 23KB
        • SHA256 9e582f9fef6cb287c29f7ae0ce7a3108ef70674b7b319c7b13368c74ac5aee93
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 24KB
        • SHA256 185746792358692d96409003f8f6a9df4e482aec7b0ea059b12d8d158b2d8ab6
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-string-l1-1-0.dll
        • Size 24KB
        • SHA256 2a5d9309388df7110f58c437485025326451556e2f328ddfd93de6ae5d893436
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-time-l1-1-0.dll
        • Size 21KB
        • SHA256 2036f047651a6b213ea2a31dd28416d61541fa176e145f6fc685674694b7f196
        • MD5 SHA1 SHA512 SSDEEP

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-utility-l1-1-0.dll
        • Size 19KB
        • SHA256 c090158d1a5a0361e8345e903622d4c9d7314b8eed33baf41730532761ed449c
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.27b97vy.6m7a8wmr._locked

        • Path C:\Program Files\Microsoft Office\root\Client\available_for_trial.27b97vy.6m7a8wmr._locked
        • Size 27KB
        • SHA256 fc7e06d85acf33ebbbde6f2efaac2617b06a84a140e52a5cee90fce3e4a08344
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.5c951271yj5494146z1np5sv568c89xe42kb163165.3qlb2r._locked

        • Path C:\Program Files\Microsoft Office\root\Client\available_for_trial.5c951271yj5494146z1np5sv568c89xe42kb163165.3qlb2r._locked
        • Size 19KB
        • SHA256 3c59f638cb5fc75ea62b20d9619188a2ec1414f5dfc96febde818d5525a05103
        • MD5 SHA1 SHA512 SSDEEP

        concrt140.dll

        • Path C:\Program Files\Microsoft Office\root\Client\concrt140.dll
        • Size 325KB
        • SHA256 641de01ec62d9f99b2b2cfbea0e48f9a982fb229081742e185f251e35ea67a3d
        • MD5 SHA1 SHA512 SSDEEP

        vccorlib140.dll

        • Path C:\Program Files\Microsoft Office\root\Client\vccorlib140.dll
        • Size 359KB
        • SHA256 b5ce38b191f78297be60c974f64527e84640c42f565cfe4e757ec3f81d36860c
        • MD5 SHA1 SHA512 SSDEEP

        pkeyconfig-office.xrm-ms

        • Path C:\Program Files\Microsoft Office\root\Licenses16\pkeyconfig-office.xrm-ms
        • Size 905KB
        • SHA256 d5a7ebe26e60ad7ee91af332040aeba6ef77dc1dcb1ebe9067e2c9da1e02bc91
        • MD5 SHA1 SHA512 SSDEEP

        pidgenx.dll

        • Path C:\Program Files\Microsoft Office\root\Office15\pidgenx.dll
        • Size 1.4MB
        • SHA256 0a4f15702e231d0d5be97b7a306e6ce2793d2138ea1f3ea5093eb7a6a9c0e941
        • MD5 SHA1 SHA512 SSDEEP

        pkeyconfig-office.xrm-ms

        • Path C:\Program Files\Microsoft Office\root\Office15\pkeyconfig-office.xrm-ms
        • Size 621KB
        • SHA256 e67cb0a583537cbd0be8c16a19fd115327387f8b062ac5d4ecfa465b9450cc89
        • MD5 SHA1 SHA512 SSDEEP

        PREVIEWTEMPLATE2.POTX

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\PREVIEWTEMPLATE2.POTX
        • Size 292KB
        • SHA256 9555d9f935ccc2012d772497ef25646aac8fa37eb903f77a4e1a01180a9eb27b
        • MD5 SHA1 SHA512 SSDEEP

        word2013.dotx

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\word2013.dotx
        • Size 12KB
        • SHA256 6b5a52207da5a54201a55521ec78abebc8883cf3d94780b2b78aa83a411a127f
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.l683y011ogm2y8jxv718tfak098zzxn.9ibr._locked

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\available_for_trial.l683y011ogm2y8jxv718tfak098zzxn.9ibr._locked
        • Size 1.1MB
        • SHA256 c1ee7e4e271ef65c540b9662ddcec1382df16928174808e1f8baaf3285911990
        • MD5 SHA1 SHA512 SSDEEP

        offsym.ttf

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsym.ttf
        • Size 849KB
        • SHA256 4d399957d67b4772c811c98729e8b5ac8c63cde545a0c4e3a8a2a2c2d65f75bd
        • MD5 SHA1 SHA512 SSDEEP

        offsymk.ttf

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsymk.ttf
        • Size 15KB
        • SHA256 2bed370a8e11d9edc3676f6f1c2cd61ffe2cda978ecb326f281264f377117beb
        • MD5 SHA1 SHA512 SSDEEP

        offsyml.ttf

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsyml.ttf
        • Size 57KB
        • SHA256 797748567baec855a62a4106fd90c5d0a1402e3bc061cea2846d94d29ac06766
        • MD5 SHA1 SHA512 SSDEEP

        offsymsb.ttf

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsymsb.ttf
        • Size 1.1MB
        • SHA256 8a165ee00011eb7470633fe1842971d0ae9a96dbe75d2a60e95492d8feec0ce2
        • MD5 SHA1 SHA512 SSDEEP

        offsymsl.ttf

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsymsl.ttf
        • Size 2.2MB
        • SHA256 c77d8d6e6d74bc48ff7236bc09af62458690cbd7afd56bebcc9e9c14931febde
        • MD5 SHA1 SHA512 SSDEEP

        offsymt.ttf

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsymt.ttf
        • Size 126KB
        • SHA256 5914bccfdb779f4aa2718869fb3a3887a7fbb3ffb5b76062984fb4fd62b27f72
        • MD5 SHA1 SHA512 SSDEEP

        offsymxb.ttf

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsymxb.ttf
        • Size 50KB
        • SHA256 695f0c9632b2685a39ad08e4030cd72c1c045cc43fbf3f07056e8b07ab9d5adf
        • MD5 SHA1 SHA512 SSDEEP

        offsymxl.ttf

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsymxl.ttf
        • Size 640KB
        • SHA256 e117ded5fc7ee7621cdb27a57c3abf5fbb346506cf9215f333b230cee5d65278
        • MD5 SHA1 SHA512 SSDEEP

        UCRTBASE.DLL

        • Path C:\Program Files\Microsoft Office\root\Office16\UCRTBASE.DLL
        • Size 960KB
        • SHA256 212b13d8ab4663ccb5432fd95b5bc13939748fc7ac053b1f63b8f4ca7dd94e0c
        • MD5 SHA1 SHA512 SSDEEP

        mfc140u.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\mfc140u.dll
        • Size 5.6MB
        • SHA256 9979a00108fe052717f109bba4c97f9fb6034717c1dd8cebad2e1d98edee789c
        • MD5 SHA1 SHA512 SSDEEP

        msvcp120.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\msvcp120.dll
        • Size 645KB
        • SHA256 33125da166619c4db9a72852b9013e3284aded190d85f112a11f056646fda8ec
        • MD5 SHA1 SHA512 SSDEEP

        msvcp140.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\msvcp140.dll
        • Size 614KB
        • SHA256 71b6d315702bd7a2a73a64965e30a5124ac9cb7191a5ace16e5a27a426697108
        • MD5 SHA1 SHA512 SSDEEP

        msvcr120.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\msvcr120.dll
        • Size 941KB
        • SHA256 70762960b0e875779c58780e0f6e9239d03201a50459616a8ad679c8cecd5790
        • MD5 SHA1 SHA512 SSDEEP

        vcruntime140.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\vcruntime140.dll
        • Size 84KB
        • SHA256 a16c9978eb8b3956790a711acb07c2d1b7a1722cdfdb6265d868ce1870c347c9
        • MD5 SHA1 SHA512 SSDEEP

        AppXManifestLoc.16.en-us.xml

        • Path C:\Program Files\Microsoft Office\root\loc\AppXManifestLoc.16.en-us.xml
        • Size 10KB
        • SHA256 9405e86aec982abf5bcff11826385f1fc6043dcf1887b56abc802d259d924f7b
        • MD5 SHA1 SHA512 SSDEEP

        mscordaccore_amd64_amd64_6.0.2523.51912.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.25\mscordaccore_amd64_amd64_6.0.2523.51912.dll
        • Size 1.3MB
        • SHA256 8489f1d57b0a04b467725dc6065f20fa736f597c4e3cea4ce80de30b10692ca2
        • MD5 SHA1 SHA512 SSDEEP

        Microsoft.DiaSymReader.Native.amd64.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.0\Microsoft.DiaSymReader.Native.amd64.dll
        • Size 1.8MB
        • SHA256 c1681e65245778638d9b068bb767cb77e063ba7beaeedcbe8b95aa947e7af551
        • MD5 SHA1 SHA512 SSDEEP

        mscordaccore_amd64_amd64_8.0.23.53103.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.0\mscordaccore_amd64_amd64_8.0.23.53103.dll
        • Size 1.3MB
        • SHA256 972d5ce74964c5761347672c21573c54bfa31aa835b7f08d830ded1d7caee4d9
        • MD5 SHA1 SHA512 SSDEEP

        D3DCompiler_47_cor3.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.0\D3DCompiler_47_cor3.dll
        • Size 4.7MB
        • SHA256 92518492169faf9ed1169030fe1425132a171d18ad61fa70d6faa0a6cc6b3049
        • MD5 SHA1 SHA512 SSDEEP

        how_to_decrypt.hta

        • Path C:\how_to_decrypt.hta
        • Size 11KB
        • SHA256 0edec0d46cf779f0c6abde97dbb59688fb316f10f142fa8e9ff0c690fa58c324
        • MD5 SHA1 SHA512 SSDEEP

        vcredist2010_x86.log.html

        • Path C:\vcredist2010_x86.log.html
        • Size 82KB
        • SHA256 8f26251420d3c811761a4a467919d4c46df99243d44662fe5e7ce4a920382b16
        • MD5 SHA1 SHA512 SSDEEP

        memory/1204-2-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1204-12620-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1204-16-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1204-4-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1204-16309-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1204-367-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1204-1-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1204-12-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1204-13362-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1204-2702-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1204-14730-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1204-6039-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1204-9204-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1204-0-0x0000000000400000-0x0000000000463000-memory.dmp