Analysis

  • max time kernel
    148s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    21/01/2024, 14:29

General

  • Target
    85f4088286ac1eedc94ad9dc6465e9e4b89d1cde3012f9949450fcc9f2b60431.exe
  • Size 342KB
  • Sample240121-rtx9wsddcl
  • SHA256 85f4088286ac1eedc94ad9dc6465e9e4b89d1cde3012f9949450fcc9f2b60431
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • Trigona

    A ransomware first seen at the beginning of the 2022.

  • Drops desktop.ini file(s) 14 IoCs
  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\85f4088286ac1eedc94ad9dc6465e9e4b89d1cde3012f9949450fcc9f2b60431.exe
    "C:\Users\Admin\AppData\Local\Temp\85f4088286ac1eedc94ad9dc6465e9e4b89d1cde3012f9949450fcc9f2b60431.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    PID:1936

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        2gcn8h0w01.7r._locked

        • Path C:\$Recycle.Bin\S-1-5-21-1603059206-2004189698-4139800220-1000\2gcn8h0w01.7r._locked
        • Size 2KB
        • SHA256 8d17c54490fbee243ffa2f296b29c9b9b33afaf9c73ddbbc8d2b278e24cb6ebe
        • MD5 SHA1 SHA512

        desktop.ini

        • Path C:\$Recycle.Bin\S-1-5-21-1603059206-2004189698-4139800220-1000\desktop.ini
        • Size 898B
        • SHA256 00cf6911af40dcd35799277d045f49e463ba21851882dcf937001d383eaeb56c
        • MD5 SHA1 SHA512

        branding.xml

        • Path C:\MSOCache\All Users\{90140000-0117-0409-0000-0000000FF1CE}-C\Access.en-us\branding.xml
        • Size 583KB
        • SHA256 32ee72feeec58e152c192afb3358647af007b610029eacc0838feddb368cd4ca
        • MD5 SHA1 SHA512 SSDEEP

        nppdf32.dll

        • Path C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
        • Size 102KB
        • SHA256 ec9bfcabe949200b39b964cecb33c0132675d0967c64948846185d2a9ec769e0
        • MD5 SHA1 SHA512 SSDEEP

        k6610835v82tnshty65tvs360j.hkwl8507f7r._locked

        • Path C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\k6610835v82tnshty65tvs360j.hkwl8507f7r._locked
        • Size 23KB
        • SHA256 1966787bcd8e59982a821a95ac7532681448514f9bc172e76758db9b704cbeb9
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.915jr808rb6a3f6r50k.j7f6r._locked

        • Path C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\available_for_trial.915jr808rb6a3f6r50k.j7f6r._locked
        • Size 28KB
        • SHA256 266ec691957d7b3dcdbbd6e6d2584d9e946b96602691e4c6907b2d3c8b4b863a
        • MD5 SHA1 SHA512 SSDEEP

        hn867ue0w.jl8nk3j38r._locked

        • Path C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\hn867ue0w.jl8nk3j38r._locked
        • Size 5KB
        • SHA256 99762f33e94687acec54296291b9da602280b0d46e50e62bcfb7dd02b97e3ca9
        • MD5 SHA1 SHA512 SSDEEP

        DW20.EXE

        • Path C:\Program Files (x86)\Common Files\microsoft shared\DW\DW20.EXE
        • Size 819KB
        • SHA256 07ac08ba5b6deb1b0003b0123fd247f3260b5d958688a0cd9d9a126a373c8b9e
        • MD5 SHA1 SHA512 SSDEEP

        DWTRIG20.EXE

        • Path C:\Program Files (x86)\Common Files\microsoft shared\DW\DWTRIG20.EXE
        • Size 508KB
        • SHA256 06c4a89d916fbdce69e6b99c1cc73d68b8da2f9e4e683d1d60fa0182afeafc9b
        • MD5 SHA1 SHA512 SSDEEP

        OSETUP.DLL

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\OSETUP.DLL
        • Size 5.5MB
        • SHA256 5e29fcfd546ec7a556f3fecb3272455bde1bbe854454048228d302a74890e869
        • MD5 SHA1 SHA512 SSDEEP

        OSETUPUI.DLL

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\OSETUPUI.DLL
        • Size 188KB
        • SHA256 844b371653c2cbd78ada855677ccf5fe088322155c5f05410a13d8c5d4f8e8f9
        • MD5 SHA1 SHA512 SSDEEP

        OfficeMUI.XML

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML
        • Size 6KB
        • SHA256 d56752b6f80f718dcf7c7bf5197078150430072cc82c0a30eeda8423b6d41748
        • MD5 SHA1 SHA512 SSDEEP

        PSS10R.CHM

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM
        • Size 27KB
        • SHA256 ef2bb7c4328c6e5ce7f4ebb3f5ede54c2ab03275cddd915067c71a809d8940d5
        • MD5 SHA1 SHA512 SSDEEP

        SETUP.CHM

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM
        • Size 66KB
        • SHA256 212eef5476637f803f3ef2c08707248bc81ba9429ac7e31413878144c9e7fd08
        • MD5 SHA1 SHA512 SSDEEP

        SETUP.XML

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML
        • Size 10KB
        • SHA256 ff6f91b05cb92cc60a9db239dfd7b208466630f2de8c4e22e13648a4c0b69442
        • MD5 SHA1 SHA512 SSDEEP

        Office64WW.XML

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office64.WW\Office64WW.XML
        • Size 5KB
        • SHA256 783735d5b83c1721b4ab45029a68afd7745c9f639e10b637afb93c86024edc03
        • MD5 SHA1 SHA512 SSDEEP

        SETUP.XML

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML
        • Size 4KB
        • SHA256 d0cffb826cb6648199c682ea27c1d395b0ca73217ebf1d652b50b3084670a32d
        • MD5 SHA1 SHA512 SSDEEP

        ProPlusWW.XML

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PROPLUS\ProPlusWW.XML
        • Size 17KB
        • SHA256 a6c5f7d76f1cbda3a86f80d0f493c6d7c2f4dd97d5b8f691d005739ecb9bc019
        • MD5 SHA1 SHA512 SSDEEP

        SETUP.XML

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PROPLUS\SETUP.XML
        • Size 31KB
        • SHA256 9584f546d7e0bcc581b27eca350cd671837960eb4327ebd370fce780f89dd33c
        • MD5 SHA1 SHA512 SSDEEP

        SETUP.XML

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML
        • Size 6KB
        • SHA256 982df42e7ceb121899e5194f3d8dbab0fdda38c38415bf7566100da37bd7d855
        • MD5 SHA1 SHA512 SSDEEP

        pidgenx.dll

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\pidgenx.dll
        • Size 1.2MB
        • SHA256 3484cd036f80c1bd7077ac4266b906a1ae013efa1068e00d44e1c767f11ee6ff
        • MD5 SHA1 SHA512 SSDEEP

        pkeyconfig-office.xrm-ms

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\pkeyconfig-office.xrm-ms
        • Size 699KB
        • SHA256 fc2280044867338a9ea4d21ba8bf902f0b508c26703a3217d181141fb1560644
        • MD5 SHA1 SHA512 SSDEEP

        OSE.EXE

        • Path C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\OSE.EXE
        • Size 146KB
        • SHA256 e615fa6e812babed2489795de77c9e31988e067835340ae0f1b01344a651ff8e
        • MD5 SHA1 SHA512 SSDEEP

        GoogleUpdate.exe

        • Path C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdate.exe
        • Size 168KB
        • SHA256 18ed851856cac174937e867f98298cc49ad643d82534eed00b49b6eb58a7c36a
        • MD5 SHA1 SHA512 SSDEEP

        chrome_installer.exe

        • Path C:\Program Files (x86)\Google\Update\Install\{F2D1DCEA-3974-4AE2-AC88-A893D86175E3}\chrome_installer.exe
        • Size 86.4MB
        • SHA256 ed3f2119fafcf4b0c837342ed58d742904cb889733de095289e87928fb186183
        • MD5 SHA1 SHA512 SSDEEP

        0rm47p5e1b0392.l8y74v2r._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\0rm47p5e1b0392.l8y74v2r._locked
        • Size 78KB
        • SHA256 fabf8bef80a3385ca216a4303d91bb7683f10247bf396795594861ed86d941fb
        • MD5 SHA1 SHA512 SSDEEP

        SCHEME11.CSS

        • Path C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME11.CSS
        • Size 128KB
        • SHA256 90b3e170105c03bf15419db588713c5add1a5ad5d1ec6488aa72cade912636dc
        • MD5 SHA1 SHA512 SSDEEP

        SCHEME54.CSS

        • Path C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME54.CSS
        • Size 124KB
        • SHA256 ba805faacff0c3ea82f0307e85867c3b4dedc1ce6cbe37cc1cb2eec85b73b204
        • MD5 SHA1 SHA512 SSDEEP

        v1gc24ebm47ddrjq82d8a3z8ega5ssp53908m127veiw897j.xiir._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\v1gc24ebm47ddrjq82d8a3z8ega5ssp53908m127veiw897j.xiir._locked
        • Size 121KB
        • SHA256 66fd32b96050a23174a97547013ba6212e66362fe2dc73b95094c413eade4e2f
        • MD5 SHA1 SHA512 SSDEEP

        7rb6494verxvz4ht629c5w.0ag548r._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\7rb6494verxvz4ht629c5w.0ag548r._locked
        • Size 78KB
        • SHA256 fe033366894b91f47f21eb3b9d7ab6eaf37d5c2ac57d4fe55d95d20b000c1701
        • MD5 SHA1 SHA512 SSDEEP

        ACEDAO.DLL

        • Path C:\Program Files (x86)\Microsoft Office\Office14\ACEDAO.DLL
        • Size 536KB
        • SHA256 8315219b7fdbbacd396f0c640af8719be5a0d859d620ba48a0dd20487f1371c9
        • MD5 SHA1 SHA512 SSDEEP

        DBGHELP.DLL

        • Path C:\Program Files (x86)\Microsoft Office\Office14\DBGHELP.DLL
        • Size 1.0MB
        • SHA256 63cb03505e604aca6cb634acee30b1fe0ed9fefe77703f1c88a098e5added3e6
        • MD5 SHA1 SHA512 SSDEEP

        OLKIRMV.XML

        • Path C:\Program Files (x86)\Microsoft Office\Office14\OLKIRMV.XML
        • Size 78KB
        • SHA256 da9c4327a2ff1ee7c8953f2b728f244375bcd02d2a51bc743a6f1945a3372fd7
        • MD5 SHA1 SHA512 SSDEEP

        WORDIRMV.XML

        • Path C:\Program Files (x86)\Microsoft Office\Office14\WORDIRMV.XML
        • Size 78KB
        • SHA256 be9f0beb5b3ef24103a6b7fd4094dfbd29903b21bfff4a404afab3852abd4387
        • MD5 SHA1 SHA512 SSDEEP

        yav795920a3ldhq.8jr._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\yav795920a3ldhq.8jr._locked
        • Size 78KB
        • SHA256 501ede661fb07ce57c97359739ddaaf217d3c0704f7c4e4cc334788297250cda
        • MD5 SHA1 SHA512 SSDEEP

        nan6609ymco1bxqg7hwr95iete0f6znu638i.ika0r._locked

        • Path C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\nan6609ymco1bxqg7hwr95iete0f6znu638i.ika0r._locked
        • Size 4.3MB
        • SHA256 aae5057054fd3b580df025250c89238e129fddd5052b675e2ff4c65fcc1927a0
        • MD5 SHA1 SHA512 SSDEEP

        NetworkServerControl

        • Path C:\Program Files\Java\jdk1.7.0_80\db\bin\NetworkServerControl
        • Size 6KB
        • SHA256 16b5e0661e38b2a0dec4ef4432a65eb1f87e0787f7368e5538013e8b3fc8fc15
        • MD5 SHA1 SHA512 SSDEEP

        COPYRIGHT

        • Path C:\Program Files\Java\jdk1.7.0_80\jre\COPYRIGHT
        • Size 4KB
        • SHA256 ac1ef4b0a475ba3a2cbc3e226547b985b233c4a7c270503b842f7cfe0f8d35a1
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.pc4443kutt853984o6e1v3dz7rhv4p3r59h.ulp9z2r._locked

        • Path C:\Program Files\Java\jdk1.7.0_80\jre\available_for_trial.pc4443kutt853984o6e1v3dz7rhv4p3r59h.ulp9z2r._locked
        • Size 109KB
        • SHA256 97a93c39b3393d4fec4148fcc75085b1d6078cc63916df457ce7bc923fb01064
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.xm0076u6pca62fhx.qa6l6s41cr._locked

        • Path C:\Program Files\Java\jdk1.7.0_80\jre\available_for_trial.xm0076u6pca62fhx.qa6l6s41cr._locked
        • Size 173KB
        • SHA256 eea5092e4f2ee0b2db83f840a7e0d09be25f99ab2366b14e77f7c7d59bb82da0
        • MD5 SHA1 SHA512 SSDEEP

        msvcr100.dll

        • Path C:\Program Files\Java\jdk1.7.0_80\jre\bin\msvcr100.dll
        • Size 810KB
        • SHA256 b254a59536cb96d650b44d04b963642d900f7bcca358d75004e7dba5a4f9b15f
        • MD5 SHA1 SHA512 SSDEEP

        messages_zh_TW.properties

        • Path C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_zh_TW.properties
        • Size 4KB
        • SHA256 2d4d5a3490fdfdf609096e232a0a048b8d4b1d1a1443ce9378543a2d0b579e00
        • MD5 SHA1 SHA512 SSDEEP

        eclipse_update_120.jpg

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\eclipse_update_120.jpg
        • Size 21KB
        • SHA256 75b52f5a640c45e58bdb52a960cce49351341155f23497baeb5edbc89b6b62d7
        • MD5 SHA1 SHA512 SSDEEP

        epl-v10.html

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\epl-v10.html
        • Size 16KB
        • SHA256 4aba350ba4e76f181130aa5974d3e2c9646b0fad5320b59a912b62ee285d9f81
        • MD5 SHA1 SHA512 SSDEEP

        feature.properties

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\feature.properties
        • Size 6KB
        • SHA256 e3c0b43144fefca55ff7d6ae483893be2299095c58ae83e72c99443a66a9fa95
        • MD5 SHA1 SHA512 SSDEEP

        license.html

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\license.html
        • Size 7KB
        • SHA256 2c73efa99f7335bc6854cff4dd6d4cd3e252f0be994ad6832ea7ba9c0bb08815
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.oc23up52ux49s259.66yllyw90r._locked

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\available_for_trial.oc23up52ux49s259.66yllyw90r._locked
        • Size 9KB
        • SHA256 c4af1f30ec64090b42fe960e08f9ae44bbb45cbc931d7b4b4995ed28eca55e88
        • MD5 SHA1 SHA512 SSDEEP

        epl-v10.html

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\epl-v10.html
        • Size 13KB
        • SHA256 fb3d96002169d84b06f6246611099d81ebaee179e0e0873cb247789830af8ff5
        • MD5 SHA1 SHA512 SSDEEP

        ECLIPSE_.RSA

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\ECLIPSE_.RSA
        • Size 8KB
        • SHA256 66238325e306f6a9871845b8b7f21993a0408f7c5b545777575988e8246f52ef
        • MD5 SHA1 SHA512 SSDEEP

        asl-v20.txt

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\asl-v20.txt
        • Size 11KB
        • SHA256 ac597f2843fe47d71f3cbc1f642641e5595aae9f53a48fb71bc6c31ac90adda7
        • MD5 SHA1 SHA512 SSDEEP

        ECLIPSE_.RSA

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\ECLIPSE_.RSA
        • Size 8KB
        • SHA256 2578c2b0867eed4a09d9e499c512ae20cde1c9ff4cdf8b814971d49bde8edfdb
        • MD5 SHA1 SHA512 SSDEEP

        about.html

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\about.html
        • Size 14KB
        • SHA256 dca502b1ad0c701a92e4fa1a4d106c57255a367d24d698bd9a71027aa313e900
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.4hgcnme1gzu3npq68u4ke19bbp5dz6.683r._locked

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\available_for_trial.4hgcnme1gzu3npq68u4ke19bbp5dz6.683r._locked
        • Size 16KB
        • SHA256 c61d18927e501a1319763e961473b8bd89993d42ef347449bef32f23c9e4993c
        • MD5 SHA1 SHA512 SSDEEP

        4o8qu9ze2xa8rnrjfy6q98y179u78qyog32g8vh510.w2g4r._locked

        • Path C:\Program Files\Java\jre7\lib\4o8qu9ze2xa8rnrjfy6q98y179u78qyog32g8vh510.w2g4r._locked
        • Size 2.3MB
        • SHA256 2d4e4b9e0fb1c20fee52cba0444a1d08d78fcd2cdbfb8930a92c77663a7838b2
        • MD5 SHA1 SHA512 SSDEEP

        alt-rt.jar

        • Path C:\Program Files\Java\jre7\lib\alt-rt.jar
        • Size 169KB
        • SHA256 9595ea7beb367ebee3d3159ef3cc74a3855af2e4a6c665f27f29faa0b692eb25
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.7kl97c6u046ef27993ssxou6465p53cnd.3dr4mr._locked

        • Path C:\Program Files\Java\jre7\lib\available_for_trial.7kl97c6u046ef27993ssxou6465p53cnd.3dr4mr._locked
        • Size 4KB
        • SHA256 4e8af8a4c98d13be13907663c3576fcea2547522a2ae9ece963282606345f2cc
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.9koplt99s3008687p6y2628090uax04p2jsr81t5z6qh9b7203.33k1jzvy0mr._locked

        • Path C:\Program Files\Java\jre7\lib\available_for_trial.9koplt99s3008687p6y2628090uax04p2jsr81t5z6qh9b7203.33k1jzvy0mr._locked
        • Size 10KB
        • SHA256 aaa069ecac7eb83b4c18cae099312f07bff6ab52509922740c03af24d2792ca4
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.tozx33f5sr3041jkv8zp37il19iby5bune82d59q.3cpjr._locked

        • Path C:\Program Files\Java\jre7\lib\available_for_trial.tozx33f5sr3041jkv8zp37il19iby5bune82d59q.3cpjr._locked
        • Size 10KB
        • SHA256 52d75d5f7371f1b5e20ac190d23ef1d6c2379e00e8a28472a3b87a262e4332e1
        • MD5 SHA1 SHA512 SSDEEP

        classlist

        • Path C:\Program Files\Java\jre7\lib\classlist
        • Size 74KB
        • SHA256 cd7664627cdd2c2d7dcaee119c707080ace45dad9838c67ff21acc37a37c7e68
        • MD5 SHA1 SHA512 SSDEEP

        7n7zog9bw8406h8o765269ny.zr._locked

        • Path C:\Program Files\Java\jre7\lib\cmm\7n7zog9bw8406h8o765269ny.zr._locked
        • Size 50KB
        • SHA256 671b3df791f36adef3d23089dca036c1a8e26f8c1d98b13ac19117b32b61350d
        • MD5 SHA1 SHA512 SSDEEP

        zacuu14nu79aub4xnzvb.9y9gr._locked

        • Path C:\Program Files\Java\jre7\lib\cmm\zacuu14nu79aub4xnzvb.9y9gr._locked
        • Size 268KB
        • SHA256 3b139ebcc814a7562bdf8cda6a2b66fe36befc381a1e0ca4416e3c597ee84dd4
        • MD5 SHA1 SHA512 SSDEEP

        content-types.properties

        • Path C:\Program Files\Java\jre7\lib\content-types.properties
        • Size 6KB
        • SHA256 a99c1e1cd64a67609c152b295ba117ea24af4bc95f1970786e7b89a84e21e242
        • MD5 SHA1 SHA512 SSDEEP

        currency.data

        • Path C:\Program Files\Java\jre7\lib\currency.data
        • Size 4KB
        • SHA256 8762bc862099d0d20c0942ec8e6a7587ac50ecc96e952f075ead374b0ec943d8
        • MD5 SHA1 SHA512 SSDEEP

        deploy.jar

        • Path C:\Program Files\Java\jre7\lib\deploy.jar
        • Size 4.5MB
        • SHA256 b9a38016b394467af77f9951f1407cec1234c66771a4b66110a3c9484ad3a6ad
        • MD5 SHA1 SHA512 SSDEEP

        2dpzh409n.hr._locked

        • Path C:\Program Files\Java\jre7\lib\deploy\2dpzh409n.hr._locked
        • Size 18KB
        • SHA256 6e20a9266262cba9364050862e5fc7888187792de5a428f66260659c30fda539
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.0f7xt35u4ti1n4w.br._locked

        • Path C:\Program Files\Java\jre7\lib\deploy\available_for_trial.0f7xt35u4ti1n4w.br._locked
        • Size 6KB
        • SHA256 f2d4bc324700169935a632f9ae2970a704b1a169b7ac7f355f4977982b54013b
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.3a9j2save83jkv6dd62jv04t73jetq0ph5ql0k093834t.338qme6or._locked

        • Path C:\Program Files\Java\jre7\lib\deploy\available_for_trial.3a9j2save83jkv6dd62jv04t73jetq0ph5ql0k093834t.338qme6or._locked
        • Size 6KB
        • SHA256 372d24f7659c49fe4ebddb81d2e08c12271df4c696b45ce76b4098f398f7a625
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.h46m93zxm6e96502o3q2tcx2k93crdx20552x0dis2qzg.6972u6a02qr._locked

        • Path C:\Program Files\Java\jre7\lib\deploy\available_for_trial.h46m93zxm6e96502o3q2tcx2k93crdx20552x0dis2qzg.6972u6a02qr._locked
        • Size 14KB
        • SHA256 b44b6673b9685dc9a986d13faf7e3960dc2e8719f3e9f671f0f45005ee0909a9
        • MD5 SHA1 SHA512 SSDEEP

        messages_es.properties

        • Path C:\Program Files\Java\jre7\lib\deploy\messages_es.properties
        • Size 4KB
        • SHA256 fad8be7bea44914af216a345faec5f4a76a1b16785c3c5e334a568f6a8e7b716
        • MD5 SHA1 SHA512 SSDEEP

        messages_fr.properties

        • Path C:\Program Files\Java\jre7\lib\deploy\messages_fr.properties
        • Size 4KB
        • SHA256 74b54750d73870f915ea6b0967e85c797e21b53574836aa6eab6a1ab3227435f
        • MD5 SHA1 SHA512 SSDEEP

        messages_sv.properties

        • Path C:\Program Files\Java\jre7\lib\deploy\messages_sv.properties
        • Size 4KB
        • SHA256 6cf60a38275e21542acdf7a74b234d587e18e9d389c93eb3f712a963a9b4dbcc
        • MD5 SHA1 SHA512 SSDEEP

        messages_zh_CN.properties

        • Path C:\Program Files\Java\jre7\lib\deploy\messages_zh_CN.properties
        • Size 4KB
        • SHA256 0ff6d505da27c671d6236a12050c7daf0ef775ab575f4986b5ceacf419537ead
        • MD5 SHA1 SHA512 SSDEEP

        0g4a4dl6k.v6vr._locked

        • Path C:\Program Files\Java\jre7\lib\ext\0g4a4dl6k.v6vr._locked
        • Size 31KB
        • SHA256 fd2a7200affe7d437fe35817550206c50cc536485c7cf3b2ca324c1e98df70b3
        • MD5 SHA1 SHA512 SSDEEP

        153nhf17323b4j7f9.rg9058q2tr._locked

        • Path C:\Program Files\Java\jre7\lib\ext\153nhf17323b4j7f9.rg9058q2tr._locked
        • Size 43KB
        • SHA256 88c41d709c5df65244ddedba2c937fd82f1f32fd6a2a1a3b74ed3f35786d3b2a
        • MD5 SHA1 SHA512 SSDEEP

        30j0yk4yw5g14fykp08b040b2kv5rp49x3hk32j4740.5715zkq60r._locked

        • Path C:\Program Files\Java\jre7\lib\ext\30j0yk4yw5g14fykp08b040b2kv5rp49x3hk32j4740.5715zkq60r._locked
        • Size 9KB
        • SHA256 c50cbaf5020f6519c3f3edf3a6a5bcb3bd890f8e9e3f1a9943a4cea89fd4c450
        • MD5 SHA1 SHA512 SSDEEP

        45oy9g13i92x.z91za8r._locked

        • Path C:\Program Files\Java\jre7\lib\ext\45oy9g13i92x.z91za8r._locked
        • Size 16KB
        • SHA256 cb4279f65af2b4e083b93a5cdd7e2bae96f708fd868e0b7e1a435f15b2a9af8f
        • MD5 SHA1 SHA512 SSDEEP

        a2v4zqi112rk40h12kf847l5g1fgty16tk05r.1mr._locked

        • Path C:\Program Files\Java\jre7\lib\ext\a2v4zqi112rk40h12kf847l5g1fgty16tk05r.1mr._locked
        • Size 67KB
        • SHA256 fd370a3c234136dc9aa5116fd636a3cc2aba28b5f800426dc4a9bf18f5ca6d61
        • MD5 SHA1 SHA512 SSDEEP

        t5u78rgn6s0l69x92975x6nwmg45ul.de99553r._locked

        • Path C:\Program Files\Java\jre7\lib\ext\t5u78rgn6s0l69x92975x6nwmg45ul.de99553r._locked
        • Size 194KB
        • SHA256 8db05f76a74f794a57de3fa87efbaa050e51b717831b126e75123d5e1d247174
        • MD5 SHA1 SHA512 SSDEEP

        v5k9anc3jz7ce8k3824mp4hbbzanijd1jhlbv45vxh4.5x5r._locked

        • Path C:\Program Files\Java\jre7\lib\ext\v5k9anc3jz7ce8k3824mp4hbbzanijd1jhlbv45vxh4.5x5r._locked
        • Size 222KB
        • SHA256 cf34f20c87417c85f1d33847472bf69bcf3c888b5a3e2598df3ff16ed782746f
        • MD5 SHA1 SHA512 SSDEEP

        flavormap.properties

        • Path C:\Program Files\Java\jre7\lib\flavormap.properties
        • Size 4KB
        • SHA256 c29d62d1607864d3f41f03fdb57c93b0bddc58e4221f34d9e84292bcad767222
        • MD5 SHA1 SHA512 SSDEEP

        fontconfig.bfc

        • Path C:\Program Files\Java\jre7\lib\fontconfig.bfc
        • Size 4KB
        • SHA256 ab7f69a1cd2a01a4f2518d3e8fbd3805edf8b358670ad0ae1f235b6a9c4024f5
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.55um94nz5u58ta4z0j8t936z5aq917du0.003vr._locked

        • Path C:\Program Files\Java\jre7\lib\fonts\available_for_trial.55um94nz5u58ta4z0j8t936z5aq917du0.003vr._locked
        • Size 682KB
        • SHA256 25ede0df9d2ab0e4795e2d2cab7aa731479391b749cf45de36e2bdde2751d91b
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.65v5gkai68e847k4dyybr8e6knfw7r4tfut306l38ykp.15xpz7y6xr._locked

        • Path C:\Program Files\Java\jre7\lib\fonts\available_for_trial.65v5gkai68e847k4dyybr8e6knfw7r4tfut306l38ykp.15xpz7y6xr._locked
        • Size 229KB
        • SHA256 9ab6e6b0b63b996dc0762b1d4d4eb2b3b5eea7531bfad2a048acc7cc8afb5f5b
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.95649bzh1e09rm4q0c6a.s19t9632brr._locked

        • Path C:\Program Files\Java\jre7\lib\fonts\available_for_trial.95649bzh1e09rm4q0c6a.s19t9632brr._locked
        • Size 237KB
        • SHA256 4c24f70e92eb3ddc4ad5ed2490da05ad305f53b97500ad8c1360ad20779237f8
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.f4l9i57q64ayime4y4f8236cf50hnsq12c998geooht526vkw.4f60mzgv31r._locked

        • Path C:\Program Files\Java\jre7\lib\fonts\available_for_trial.f4l9i57q64ayime4y4f8236cf50hnsq12c998geooht526vkw.4f60mzgv31r._locked
        • Size 337KB
        • SHA256 418eba1bb4056018a62b6cd94c5437e060448fe5cfd1aeb57d0626903e00b04b
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.g9910visdu3pmh.l4r72w08r._locked

        • Path C:\Program Files\Java\jre7\lib\fonts\available_for_trial.g9910visdu3pmh.l4r72w08r._locked
        • Size 311KB
        • SHA256 f5485fa601f85374d07c3e4ea2904f867a670e3510e0394086058d2871235a70
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.ifsps3ul07pdcbez8a507.qd6v2mr._locked

        • Path C:\Program Files\Java\jre7\lib\fonts\available_for_trial.ifsps3ul07pdcbez8a507.qd6v2mr._locked
        • Size 79KB
        • SHA256 5804c7ecbe07eb9ac3e4187e2a6be766e01e9ff0b43cf2ba68beb3cc37fc8aa9
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.nx12dfr96txhpz99y47jq1eg5b9002.iex138w28r._locked

        • Path C:\Program Files\Java\jre7\lib\fonts\available_for_trial.nx12dfr96txhpz99y47jq1eg5b9002.iex138w28r._locked
        • Size 74KB
        • SHA256 6590c58bada21b92e5d159d26174122b11cd71116560148f0654149d58fb5e1f
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.rfq7v9811185sun1583.0k0e58mr._locked

        • Path C:\Program Files\Java\jre7\lib\fonts\available_for_trial.rfq7v9811185sun1583.0k0e58mr._locked
        • Size 74KB
        • SHA256 c99b3a7552c55c3ebf31f33ffa5af743007f2c075914223fa905ccb2915d620a
        • MD5 SHA1 SHA512 SSDEEP

        javaws.jar

        • Path C:\Program Files\Java\jre7\lib\javaws.jar
        • Size 882KB
        • SHA256 32a9149c3c05e540d48e2e00ec61034a8c0315be580c4d4812c6afe8c8a95707
        • MD5 SHA1 SHA512 SSDEEP

        jfr.jar

        • Path C:\Program Files\Java\jre7\lib\jfr.jar
        • Size 521KB
        • SHA256 0536ee4d7f9e8c059af00f8826f6bf04bc56acb76b82bd9bdd1abc460b091cf8
        • MD5 SHA1 SHA512 SSDEEP

        6kebt39ubd0d5h5k7i46qz9313abzqb56c.g8f9j0gr._locked

        • Path C:\Program Files\Java\jre7\lib\jfr\6kebt39ubd0d5h5k7i46qz9313abzqb56c.g8f9j0gr._locked
        • Size 18KB
        • SHA256 2eee0874e4d66445bf59d9333ce43f2f9ef6f7fa6d86c40aec091c967aa0ee72
        • MD5 SHA1 SHA512 SSDEEP

        profile.jfc

        • Path C:\Program Files\Java\jre7\lib\jfr\profile.jfc
        • Size 18KB
        • SHA256 8046b5e4e75988ae6417a838a54a6052c3f79e8862d4a2627c819cad4d58e303
        • MD5 SHA1 SHA512 SSDEEP

        k73x9859971jzvg7907.029o5ymjr._locked

        • Path C:\Program Files\Java\jre7\lib\k73x9859971jzvg7907.029o5ymjr._locked
        • Size 2.4MB
        • SHA256 3f58346a48a2c084c3262453294f873d54452e991937817e8c603002f1e9b530
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.6w895wgpq5kd9u1x72p545og0f0ez.s25nn9117r._locked

        • Path C:\Program Files\Java\jre7\lib\management\available_for_trial.6w895wgpq5kd9u1x72p545og0f0ez.s25nn9117r._locked
        • Size 14KB
        • SHA256 64f9fe8278926280f4da2e7879ca1883fa26d4e7d13bd600c8b609d9a704e022
        • MD5 SHA1 SHA512 SSDEEP

        jmxremote.access

        • Path C:\Program Files\Java\jre7\lib\management\jmxremote.access
        • Size 4KB
        • SHA256 a75243644a2743c246787f8434061fd468893700b8baf60c5401bb2efa8212ec
        • MD5 SHA1 SHA512 SSDEEP

        oq74h311qy49gii5gxw1r.3u6jr._locked

        • Path C:\Program Files\Java\jre7\lib\oq74h311qy49gii5gxw1r.3u6jr._locked
        • Size 1.8MB
        • SHA256 2b11507ba59f4823803a7bb7a4c022ade735238ebf99f7892ad7ad38f4f2a60a
        • MD5 SHA1 SHA512 SSDEEP

        p99h83l9qtn8q532lyy9wtm8j8ag.43r._locked

        • Path C:\Program Files\Java\jre7\lib\p99h83l9qtn8q532lyy9wtm8j8ag.43r._locked
        • Size 8KB
        • SHA256 61ae0d29e263bf4c4ce70e681af6ac61acf12e6f09e6eaf0e62a747c86bcff47
        • MD5 SHA1 SHA512 SSDEEP

        1srtt6s7hi96bj3.q4t5r._locked

        • Path C:\Program Files\Java\jre7\lib\security\1srtt6s7hi96bj3.q4t5r._locked
        • Size 97KB
        • SHA256 8518d0cb9f748a48fcc2f26fd055acc8189ebae4d41c9199e4842b288b8c7ca8
        • MD5 SHA1 SHA512 SSDEEP

        293c025agf414113.sf1imqpr._locked

        • Path C:\Program Files\Java\jre7\lib\security\293c025agf414113.sf1imqpr._locked
        • Size 18KB
        • SHA256 433cbdf3ba9f18ff3a3bb52817e54698a17320ca367c5cbffa70698f186311ef
        • MD5 SHA1 SHA512 SSDEEP

        blacklist

        • Path C:\Program Files\Java\jre7\lib\security\blacklist
        • Size 4KB
        • SHA256 e63bf388f467516a0a06ad20bfd6f49c0fc56aa9528b3324142fc30bb453f912
        • MD5 SHA1 SHA512 SSDEEP

        x6l3mwq50d7xi032pk3c3r.77lr._locked

        • Path C:\Program Files\Java\jre7\lib\x6l3mwq50d7xi032pk3c3r.77lr._locked
        • Size 109KB
        • SHA256 9d253aeea505be1ad8cc7584308f5299f219f43cd3405a243598e76d1295fa7a
        • MD5 SHA1 SHA512 SSDEEP

        Riyadh87

        • Path C:\Program Files\Java\jre7\lib\zi\Asia\Riyadh87
        • Size 5KB
        • SHA256 da42997313b01fa562b1c8e2f9da6900c8f4de522ec54741b1c18cc666843dc5
        • MD5 SHA1 SHA512 SSDEEP

        Riyadh88

        • Path C:\Program Files\Java\jre7\lib\zi\Asia\Riyadh88
        • Size 5KB
        • SHA256 c06a9b473c4435fa535c2593abd8ffac833bdbe007a2879ee226b774654f341d
        • MD5 SHA1 SHA512 SSDEEP

        Riyadh89

        • Path C:\Program Files\Java\jre7\lib\zi\Asia\Riyadh89
        • Size 5KB
        • SHA256 6e604e8004864bb244a1d6cb20b7e2880f2c1a18f3ac4f00d825e9ab372addfc
        • MD5 SHA1 SHA512 SSDEEP

        ZoneInfoMappings

        • Path C:\Program Files\Java\jre7\lib\zi\ZoneInfoMappings
        • Size 17KB
        • SHA256 91523a534a9d9f00ef297a46342205f2fda16847630dffaa761eb4212f7d3ce6
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.j6r38zm06jf93u4bd0r51.6003nqllr._locked

        • Path C:\Program Files\VideoLAN\VLC\locale\es\LC_MESSAGES\available_for_trial.j6r38zm06jf93u4bd0r51.6003nqllr._locked
        • Size 603KB
        • SHA256 d979e3a2d3f137e99de2810b4287c71d630972aa036b6400849c2fb0031c85aa
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.g3x17c06n962gm3cu.5xhr._locked

        • Path C:\Program Files\VideoLAN\VLC\locale\km\LC_MESSAGES\available_for_trial.g3x17c06n962gm3cu.5xhr._locked
        • Size 845KB
        • SHA256 20ffddf55be73d846455d41d353940836bc482433781aeac2b361b9ca6d96690
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.6aa0eds2a0r91.ix2b7r._locked

        • Path C:\Program Files\VideoLAN\VLC\locale\ks_IN\LC_MESSAGES\available_for_trial.6aa0eds2a0r91.ix2b7r._locked
        • Size 664KB
        • SHA256 b1dcb2db744e401e1ec0364ff050e2953fd32d5de978b9907b451aa81b7d9613
        • MD5 SHA1 SHA512 SSDEEP

        vlc.mo

        • Path C:\Program Files\VideoLAN\VLC\locale\oc\LC_MESSAGES\vlc.mo
        • Size 527KB
        • SHA256 b6c48b0bc1896f9b2b12b91892080e41755cfc81bd3eb275a5a6710c6f1ca36a
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.3r13l5sy7lhebon5484h8yb5l105ipnmx94phm439v406.3u4ar1r._locked

        • Path C:\available_for_trial.3r13l5sy7lhebon5484h8yb5l105ipnmx94phm439v406.3u4ar1r._locked
        • Size 82KB
        • SHA256 f9f40b68c7d9135519020efe55d9753a47e0c96d9f1904dcdf8ee1a0d442955d
        • MD5 SHA1 SHA512 SSDEEP

        how_to_decrypt.hta

        • Path C:\how_to_decrypt.hta
        • Size 12KB
        • SHA256 d4dd68709f1b0e5e8c4c4ba768a7bd2126e9869a64a56cff433e33f15f681d52
        • MD5 SHA1 SHA512 SSDEEP

        memory/1936-12707-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1936-20042-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1936-32840-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1936-0-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1936-4908-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1936-1154-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1936-23927-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1936-27608-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1936-15-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1936-11-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1936-36226-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1936-4-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1936-3-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1936-1-0x0000000000400000-0x0000000000463000-memory.dmp