Analysis

  • max time kernel
    149s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-01-2024 14:29

General

  • Target

    85f4088286ac1eedc94ad9dc6465e9e4b89d1cde3012f9949450fcc9f2b60431.exe

  • Size

    342KB

  • MD5

    c28b33f7365f9dc72cc291d13458f334

  • SHA1

    b4ad79b2800a6540f1c460ce6220a4ebb551a18b

  • SHA256

    85f4088286ac1eedc94ad9dc6465e9e4b89d1cde3012f9949450fcc9f2b60431

  • SHA512

    3bb9e234da571093c05e21b4ffdfa7ceb9d6f95a33a07e39260a974fdc19dfc7ba72e7f9a579ec45585857d5d543ff99a535b479cf77629858c3cfa1c824e46f

  • SSDEEP

    6144:Gx2QdiglMFGfzIBeZO8Wf2cMRsCO/xZqqDLuz+4pQoL27aR9:GAQsgScEydsCJqnuq4z2mR9

Score
10/10

Malware Config

Signatures

  • Trigona

    A ransomware first seen at the beginning of the 2022.

  • Drops desktop.ini file(s) 3 IoCs
  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\85f4088286ac1eedc94ad9dc6465e9e4b89d1cde3012f9949450fcc9f2b60431.exe
    "C:\Users\Admin\AppData\Local\Temp\85f4088286ac1eedc94ad9dc6465e9e4b89d1cde3012f9949450fcc9f2b60431.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    PID:4032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\$Recycle.Bin\S-1-5-21-3073191680-435865314-2862784915-1000\425z66x54au37u44i2q82r4.886o05r._locked
    Filesize

    2KB

    MD5

    4f77f1a3f29fb7e7b8249b4ee661aede

    SHA1

    140ad991ae702057ea98c28c8fb69f8279e7783d

    SHA256

    65319eb88628d73112804f8f6849bd6c85115e50c29ac34261479f831dc65000

    SHA512

    e5387e83dfe096b99ecc56e9b9fea24ad4943212232e98af311551d352566874de2effe30a25e2a037244bfd9926f4b827e3a84c37f8580e48f8b9ae27ec4f80

  • C:\$Recycle.Bin\S-1-5-21-3073191680-435865314-2862784915-1000\desktop.ini
    Filesize

    896B

    MD5

    6f81f6e9dae1680a2c5a7130db6790c6

    SHA1

    ebfc8e8cd14cebf456ffd81db963673cdfe3c042

    SHA256

    bf75e0c152fbdbe2c73cb5b4be5ebc9bbb6336a7a658fc3fffb585793b315e23

    SHA512

    1e4cdd678f7a655d4fe7fd1f1cbf831fb60dd366b97b346ba20661a13b7e6c69b97c01315c9798347a107387d9fd67d47b101f76c8bcacc8d8c8d81c3059e0fb

  • C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\setup.exe
    Filesize

    4.3MB

    MD5

    1057020c32640b3653a1d2cac0c305fc

    SHA1

    8d349763ce59b8b44e652fce2fa0b3ab3b353764

    SHA256

    42a234e68e64d4519bf61b8a62195d783c55c53023dbc2a3579fe98599ca407b

    SHA512

    03b761d01ce3ec11730a96e737414b820f4544c55f6a06646735530f4bf9bcafa168c85e8c01e3486f543846559b0c17c4e1ac2010e8f314394691ebec55ce17

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-console-l1-1-0.dll
    Filesize

    12KB

    MD5

    2b0ac025435daebac6864bbc26cea504

    SHA1

    e43ac31007fe8850782da2f0593be0d315eb0562

    SHA256

    9e1bf831304ec5e6e8a8d4c9fc83cc26602fc5ca33b9343a8ba8d264e042e6b2

    SHA512

    ad40a0ef7cfe833e4df8d1dd5d602ab0ecde93a28c0f1331436a71759bc97b992159fb877176114e929e8a096fbbf239601ffee15e09a2c3288e735da0e8b541

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-console-l1-2-0.dll
    Filesize

    12KB

    MD5

    2280bb51874ba5563da8d5bb4a9dd4cf

    SHA1

    8c4e95eab8b9d9844a73d19258844c046fd4c0df

    SHA256

    1c2c3542e9173f8ee16356270b023be460b991a72d25ce1e2963710d3a8d352f

    SHA512

    26a8cf5a3ab1936ac0d1a54c4725955793ceddff82e4684b7ccf430c7d310c6642b16d32c7b502ee247cc7bd8c6bcea2b0de789d3b9fc532d0b8b5259397bf5f

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-datetime-l1-1-0.dll
    Filesize

    12KB

    MD5

    88f968f25b34d094b4824f8b2eaae99b

    SHA1

    1987cc0c8d8e3cd7b928288d25e5b6dc67ba0f44

    SHA256

    fb050f96c00f56e404f25740fcd3c2431d6fe04773a29fc051b11db242a7c684

    SHA512

    212b04c9b6acca53af828eb0c51d8d30e769068392a81d1c8e71a859499d96e0f2f366b7b880e71e778c04f775790550bdc062a00562682ba361692f5a7707f8

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-debug-l1-1-0.dll
    Filesize

    12KB

    MD5

    b38237dfdc9ae180e8c5093c743ad82f

    SHA1

    990682e72411d5238a875db6158bb72c9f87e926

    SHA256

    c8ed34485d517bd3a480541252ef3663dec91f2724371598fb6fc8f8d35335a4

    SHA512

    f2c6ef020fbd8c4872979e7d68a16010736b0396c9b471d27c67bd2323f1a192bd54b3adcc1364225d826bf8a871db6c90bb38b5ccb2b1c73fec8f87bd20ed1e

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-file-l1-1-0.dll
    Filesize

    15KB

    MD5

    e574a97c63cdc144a662a42756648416

    SHA1

    abeaa020590e3d1bbaa18adaf6179494827a0bfe

    SHA256

    b44a7e6c1eee4105cbab6f50353854cd23d6f75648a9547a53ae5d45e1f1f97e

    SHA512

    698f425b4026fac016e09de604d00c0b9561fe2d226b15c1dbdb069b35205b2219f8af81c03ff0c8000dad75ab79856a2619b9bc6746b41892dbd5c51c9cbcb3

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-file-l1-2-0.dll
    Filesize

    12KB

    MD5

    6bba36413c32dc4aeb1bbace8102e328

    SHA1

    3a2eca20c79ec5730b6e1c489b271f608d0a5796

    SHA256

    eed4d188fed92a0e3029b63286a66ab2e8922e474285833351330dc9aa87bbf2

    SHA512

    b13fa321193452c685cb3fd801bc8421c33bf16af9f3e8cd5804984227bcf0dcb41df98234ea4ceef7142515ddc662907a56f07e7efdbe401abdb08e3e6768d8

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-handle-l1-1-0.dll
    Filesize

    12KB

    MD5

    d5a0f8f4d3a6b838b55215f00214cd76

    SHA1

    b797d627f3c9a08d2edc69fd6a129250599e467a

    SHA256

    8c8cb89cbc1328722822a715b40b631f1d259e8747f84eac8c719adf3cb9ae18

    SHA512

    0bfb710d7a53e7ee75ee8b9011b187ed5d097c83035c635088fb0cd0d77f11e222bd8ce0e6e6865b5694f6972c24378c2b7561ce9c151ebadd0bb455a212c39d

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-heap-l1-1-0.dll
    Filesize

    12KB

    MD5

    d7d8d3b80dcd96ed06863e7f298912a8

    SHA1

    7d62c02020d8d9b61863d558c3e75434ec98e7c5

    SHA256

    57bbac4ed6eacf23db02e995e66dbff235cd25dc25f25e6dc7b6d5124e9de06e

    SHA512

    49a905385317a6c10be137d542e6ae991821b1673e41b8d49146d40eb8767602b07732d5c3b0418927cc590f6cdd62c2901d3f6a49a751604e1dea402007c203

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-libraryloader-l1-1-0.dll
    Filesize

    13KB

    MD5

    813cd1a17ad602a9b2e9083334b04eb0

    SHA1

    316d5d63164b4a7edee73c035682e6eb413bacfa

    SHA256

    5e099b7296ceaee5946b5cc81e9a72d5893bb02c6808b188445b8939bd16ded0

    SHA512

    9faa55e6f4df76000b757b0e50f6cec6c4bcb4c6b0a8a61d7da182a4ff6629953912ee41a0a321b58b4a7a9447f5de33eec5bb7baec0a5d3ddbefeea41ec5ac3

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-localization-l1-2-0.dll
    Filesize

    15KB

    MD5

    447460936968379f0c4a7bc733caf9cf

    SHA1

    83125fd2d9c62030586212dc68ee2863342123b7

    SHA256

    d374e69d779217018c9dbbe5f61d2b5b780fe017284ec53286404029c8407cab

    SHA512

    3048abeb4787c0f2c176cce527ba0c65d5dea3d7efb80e37bbd4c75d75846a6639e345c4c5c99d4573126f44ab7f876495b29eee6ede9cdcbcfeb3f2672f2507

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-memory-l1-1-0.dll
    Filesize

    12KB

    MD5

    795fd5a6e97052be397ea0343a46ead1

    SHA1

    622fad3ad5cee84043821c10f490bd18ec02e723

    SHA256

    7b7764d881bf5acbfd5475b884da0d8314857bf0fd1a6706f75fb22c79a53905

    SHA512

    8a3ff5600c622791b80216881c60224195ac03bc9b09e9c197c2ce2a475a4b4a23c3e8a3c4113b5ce8fd46b02576a6052c3f9a919c375ad5680cf9bf0183c67c

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-namedpipe-l1-1-0.dll
    Filesize

    12KB

    MD5

    a49ab5baaed9558a97e088b85a526bf2

    SHA1

    531b8ef2aa7fc3ae20f6d820c6d16b21a289e170

    SHA256

    e6a2184bc69d766930dd345fe830c6033e99e6ca77912ba123da26a295ac5bec

    SHA512

    dc4eff48296a0798b20d77a6c5ec3ff873381c4b319c6b1e72cc3cf8d309c79c5962dca0ca281d24e13ab036413c2e97031ed5e8915787c6fb07e53a3d12b4f9

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-processenvironment-l1-1-0.dll
    Filesize

    13KB

    MD5

    cfb32e2b6a06c713150924cb68e77c16

    SHA1

    03ad99e09cfa0d3611ce10136259fc21d146268e

    SHA256

    d8fcd5e203f29f30897c67cf3027b677f97e1e2794ea0a403d2fe9002da3ba3f

    SHA512

    28aac4023b37ecc0d640060462f55e81708c7565f71c70c8a80f7f93f1e6b262683ff8b80e16a74be0161d8b471916f375500b1089f0c262b85fe46c93df569b

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-processthreads-l1-1-0.dll
    Filesize

    14KB

    MD5

    447ef02514b6f66f209fcdf4f005ec20

    SHA1

    0a6d09ce34f4d41b348ae3f55eb3aa511c878622

    SHA256

    ab9403f06f212fd867a5349f2252b95cc37441198805c6eb4e8e95eaf791df84

    SHA512

    3f9621767acb7e9c37e062a6e289bacfdaee079653c038cbedf250e360d4f7127c7255a8d7986fcfc74601369964f2473e3dfe42299922008b019eddcc875bb9

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-processthreads-l1-1-1.dll
    Filesize

    12KB

    MD5

    6a129ec4ca88d29883e282b300c8f035

    SHA1

    90a934dbb54c4167874d8c2b1ba77329a2219891

    SHA256

    90ff770c4a5b4cd37e9016ceb370f491a865a9edfb59e836dc077eba56d9a504

    SHA512

    1150455dae3955cb9e0ed9668b6d1d9eeec1c04f235f92a13f382e02d67ad3227323930afcc24c6531946598dc238edeae6259d70cc1703bf44f49a49f57075a

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-profile-l1-1-0.dll
    Filesize

    12KB

    MD5

    edea4eb52e57ddd11ca066eb5653ce7d

    SHA1

    db552fd0e13f7429e4984f0d6099ac55aebcb735

    SHA256

    963ca5c4b71537dcb91d5be3839ed0465e0d95c11b38cf50c865284472fc77d1

    SHA512

    88a83b797883e584e84137c86f421f054efe9cc38ca31ef2d4b3688ae6219d040cb6d87c74d3a74c8e5f208d0e647d44b2b513b193defa09e1549d5c38a01bb5

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-rtlsupport-l1-1-0.dll
    Filesize

    12KB

    MD5

    aebae241e5dfe894601a4c0462c9356c

    SHA1

    1078d583ec0698c44ff7ef63038617683067b61a

    SHA256

    bc96e95b2025f0412998348559ddd79dde169db03e06b40f5e21e3b6f329630f

    SHA512

    41b1bb94e817bc2aaf195c4bf84458ea36d3c3d2a9eff2edcd09b486ccae2ef1dc6e8b7c1794de3df72916a9ed25e53258495b396856c09cf17b2789de32be35

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-string-l1-1-0.dll
    Filesize

    12KB

    MD5

    8fb086f7d191f0ef3466b56e333d7eef

    SHA1

    af0e8200f338f2e4b3d7c027de2b522bea367990

    SHA256

    766add320ad5f5399c4edd5dcb5d0b633e995bc6e43d6572defc98ae11c9a7c6

    SHA512

    56bbc2e6d1f11e7092efffa78e1a273029da47ca7585c576debe1b14b455087b6b5357c7e87ec42508518ca8365786fbe472ecae5cd1f5b4103f9601940fba45

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-synch-l1-1-0.dll
    Filesize

    14KB

    MD5

    d14b1cde4b127c3778409e399a597bb9

    SHA1

    7080281abcd7649979f179ba84565283ce5c0906

    SHA256

    ffc5edf12d44f61facc23a67d3bb48883b94b6c3e594948b03a422a477f68bb7

    SHA512

    efe322a793f997d050f666ec4793166be510ed534426892a647ee1a0a60099924cec8434d840633c0b5359867d07e4c2b0ef521b5d75afc68dca363665ff9802

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-synch-l1-2-0.dll
    Filesize

    12KB

    MD5

    66bb863887cba1300779450d60557441

    SHA1

    eccd6118a24362af6a87abbbf28d5bd718357a80

    SHA256

    440275d08171a5b1b455359cf15391e2c7a476c1a4392a7874a34d731125ea9d

    SHA512

    c642de8f9c79c3c24ea9d6da47e161e64c77fcf944c12e4310bc26d71eb562f2df7caa9aab429848c459ce5672fab96247fe9189ae94b3bf11cd58352c54965a

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-sysinfo-l1-1-0.dll
    Filesize

    13KB

    MD5

    8857de4138648f3769ff1a3adccd3992

    SHA1

    d9b27455fe5f291484d9339a0b696f62462e9d4c

    SHA256

    df52a96d964d3739bed81de03942b5f362b8dde2b8dd7932adfe17a1904e3c0e

    SHA512

    332e8490ed08ca77bc6ed13ecfbcb7c59e64f5b39a5c296d0d8c80f06d7e1a4fe8283cc76bf02dd861e25090ce887d8e1d50b884117283eb548dc88eee8aff22

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-timezone-l1-1-0.dll
    Filesize

    12KB

    MD5

    7e0fad3ba59e256e53a14f32b275b724

    SHA1

    637cfae9094f0f448caaa8c833406624dcae897c

    SHA256

    1c3e05d9048553c1fd73c91e18b9923870d8ff421a92f787f9a2b466889e5fbe

    SHA512

    6f57527ea93a2a846cb1e01b83969d18c84a21df680f38c7c5132f6e65b310ce54dba75b965a21974edfe7e7faa5e4bb3964addb4c4f80bc927b56b0be85768e

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-util-l1-1-0.dll
    Filesize

    12KB

    MD5

    97c2ab2716afc1a3adc1ff386188847e

    SHA1

    f17d6e648d3166ebf99177e61301d533187881dd

    SHA256

    14890d7171a78c13bd8106b4feb5f5896b2093aaa05eccce5144708ecc9c9564

    SHA512

    9aee300e018c762dc7b93f0396f794b0db49f1544c8f76c693b6ebe600162cbd757d36555acbbd6617a532fb8c6501a78edaa831eb1cebda7f89944734f21619

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-conio-l1-1-0.dll
    Filesize

    13KB

    MD5

    1e63be34d569ab0dd453692240bf8487

    SHA1

    ec3b5e556f09d0987ff4e3b7e670a5243068df60

    SHA256

    089f044eea5bdd8c4a5f75e9264efdb8b987e79c728d22ee5e2c1deee290b0e2

    SHA512

    93098eed209c9815307a0575b26c7882e5708d38c6f61022938cb85dc41169c924a406385e7536822ae0e7020e395f7fe67e29ae4b5a728e4e0210e3f74d8fe8

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-convert-l1-1-0.dll
    Filesize

    16KB

    MD5

    9ae06e5b04eb0cc2289984ad0267d486

    SHA1

    2169d04e73ccf043c2ad41c93db0bf60acd897b3

    SHA256

    09c2b42d43e672e9d2fb1d448fe32a0ede6581af6c98ddff5142bcb51fd9a347

    SHA512

    0c8f9bddd8bbf939fc90c5927616277c19f0a563a31a889f4be601592e30d595a6485746c80c89437b57c6888f85d04f4d5cddda1b951094e67bd7d83ca64059

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-environment-l1-1-0.dll
    Filesize

    12KB

    MD5

    c74e885aec4749a0b5cc16fb34787ad8

    SHA1

    ce10b95514bc8da8ed9efbf5982efd4bad1fe362

    SHA256

    38f12d40408c8ae3c9d54b04ee0ed4e3f7d191c4fa32214539f5d1c038317bf9

    SHA512

    6b37c7cd1fa50c9059561348a456b2e3d789dc6e361dd0b2b7b0c096db8171d36cc1b5e7688257c876c297a476574bb195d3f2a3cd3ef019e74af1e98483188a

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-filesystem-l1-1-0.dll
    Filesize

    14KB

    MD5

    c8d38c9762b1bd741a9f78536eebe3c5

    SHA1

    45567af386b419adf6777a14f6df984849589bc0

    SHA256

    5afcc84cb2d1b44635cdd21b69e3ae25292d5c198fce58a8f5f1821da8da6ba3

    SHA512

    0523daa1afbd37b422ae9ce1676a1ae72b21d5c5ffb19a71aba604af85080e52f71fad7461fd477f62d9714551a22c6cd80a15f28cbf6ee467184838a7451f89

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-heap-l1-1-0.dll
    Filesize

    13KB

    MD5

    edb1db5c0433cfa5ec038482b17e57d0

    SHA1

    9b2e501e1cb1ccce1ee18336ddbb02c594f692fe

    SHA256

    8ba3df575fde2d5864cfa7064f5670aaa7fdb55c35455d6a93a879588b569baa

    SHA512

    d626807b9b1ae2a0ac0809fce99df6970e4677dffbeb8ecacac77d1597a12cd4b412a69d89774c8e9fb6da61a8e0cd25974e0a7ebe948b85cdc42a27d905c733

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-locale-l1-1-0.dll
    Filesize

    12KB

    MD5

    dd1b00892a24c1ffca4c962f58aef503

    SHA1

    5dfbbdf7e8fc4e67e7ebec7c20d128c1f0708a0a

    SHA256

    0df28a5424dd73012591bb94f27ac297a2ffd3b1530449d31d501e6c4b3ca743

    SHA512

    c452d899bf2c6bbf497b3cd98c93e2e8e24c068b15b3289c1ecf3eab64d22424056d218d020e59ef91b90a9a08440e3398046fca201762210360fe61013b54d9

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-math-l1-1-0.dll
    Filesize

    21KB

    MD5

    04219d22d65ebd7239c3c9cef48966db

    SHA1

    14879dd8e0f20a9fec0fb83130b7bfbff31f409d

    SHA256

    91e4852cbc9074bf464fea249b5dc283df8e04646c938ea5facae219b74ae892

    SHA512

    93bf9661a463dc300fdd99ba3d3159db14b44a1f6ee67cf5a922d7717d9aadfdd9677b98fa0f04b2487afc9452845b0415b03c925939e903126573251811a2df

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-multibyte-l1-1-0.dll
    Filesize

    20KB

    MD5

    bef9ad41507ecd8536524f784a9e1844

    SHA1

    488d0293c66ec13ff796da43ad6c699fdad63dcb

    SHA256

    e4c0cdd0a4437e7761d8069c4055be51a940b2be2085889390759a8fdf7641d2

    SHA512

    98c71ae26d0d9b8b4a3e6119ec31e80cfccf744752d20d55c0c7382f1ad92101883625b6b20327c17f24d5ce4a65b90f51cae060c4a3242f62e925f16103ed6c

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-private-l1-1-0.dll
    Filesize

    63KB

    MD5

    07a637534b53c0a3f5088561fce8389a

    SHA1

    71a7a47d8fc4d8720ff547a4959e65c02e1ce065

    SHA256

    19f60f5aeaf5f3f39de447040d41b011358e6aab2c13ccddcec600a32d0fea76

    SHA512

    125ba0efdfe603fab7ff89d7d5daa4733442652dc1db37a2a9aa0794d7a3ea31a7de70a9e91b65a2ac4b1e8b208374e7361822f129fbe88ac24f54e5969f0224

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-process-l1-1-0.dll
    Filesize

    13KB

    MD5

    68080ac2c7248dfd86a855ebc1495116

    SHA1

    1ef8cd91d39c84ee5dcbb3c7d6c63a2977106e1e

    SHA256

    be8992d1c026b1880bc597c24be091b0052f3f04a5be17b5d774578813e06b95

    SHA512

    fb949237b7ee023c3115345a049d9829908fc54cce47f67a90b5f9a7592d1abf4d666ef57675452425d9c1f75e6acf1d8115f14fd86aa4200657f4ca93b0b00b

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-runtime-l1-1-0.dll
    Filesize

    16KB

    MD5

    1bfedd3e3cd047bc7ea675a58104faca

    SHA1

    da6ab6ab46d42828863ef020e4291578e41e9319

    SHA256

    e99b5fe46636ccba372e9005f0618a0fca6e209cfcecbb68dcdb6d93e623b3a1

    SHA512

    1052544ce84a9303935c3e61f4f4beb9887c87f21f9fbff46f57541f113feb055db0d9432e6064e64cc972d321167283dbcec0ee7c23525374b5b356eb7efa76

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-stdio-l1-1-0.dll
    Filesize

    18KB

    MD5

    81e177ca5374d4d3fa63b807ad1b005e

    SHA1

    936e16061146584069fdebfce97531af04831d45

    SHA256

    0b2e62074b1da737c67110c1990f512daad75d218cbdc1e0813ba4828b0efb99

    SHA512

    e028a9d11a79bd04a15e7eee5138e38e3074035d8c0148b06c129b9ff2428f843ee72e28847c3b9db1a12e00734637786c9eea948bb8979fd8c3db30a737e74f

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-string-l1-1-0.dll
    Filesize

    18KB

    MD5

    a146083a25727ba2c4b40a3ddea51cab

    SHA1

    a988769e3e0c1b9ab5f061ed4f6d7b83e096b243

    SHA256

    8d8f4b5c30f212a266366ce3b02b088653aba42218476e0d459b9fb4266cd650

    SHA512

    ca1a5c506cb7fab47bdaa6dc483168e150218320f4e5acda28983be3a476ca5c0d44fd70e87ba15d5e7aaa2ab1907a29be2972757321035caf7db2ab6606e022

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-time-l1-1-0.dll
    Filesize

    14KB

    MD5

    64204841a77c1bb0e80e68375a895ad6

    SHA1

    ce199c068d18fb13220477d3b4b8c1d20780e4fb

    SHA256

    7cfdb423b5ef924d13d9f7a4bbf229eecf7b6e6a20cfd2a4901ab5c221447859

    SHA512

    9bb977cb5f743e2bd838a8f19660df9b89a670284963b7ec264b5e4f86f6935fbd9db7f7013348b527a18742c9f5daa8fa06791493b62b9d0189c4f73f4d8160

  • C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-utility-l1-1-0.dll
    Filesize

    12KB

    MD5

    5f12633b3babe8ce069780f1e33a53f9

    SHA1

    b8f091a9affdf996607a6cea6768ee552f38899a

    SHA256

    df285cba11b9837d5c031e5dd0b427ef95bfb308d282b2b6538d0305cf8aba25

    SHA512

    03b5280ca95bea437a4449283afd09368059647fe5f6bea875032650a148e879fe3d063ff9b393629a895af8873edbdc3e4f088873efe8c4e6a2970ababd4060

  • C:\Program Files\Java\jdk-1.8\jre\bin\available_for_trial.0443ai0r03lc46uf48vsmm4e6p193vio72.zr._locked
    Filesize

    12KB

    MD5

    c121d490aecef55036af234669de9668

    SHA1

    2e74852865b969c86b5fae89793fcdd06cc460ec

    SHA256

    fa06e47a1648dfeef1f1564348666dd576ba4bea5727b9fc6323abfde0195e50

    SHA512

    8b884c83b2de8630d2f40a67e76a98dd6e5036f33b599edbf38090a43d1e6b0b1b0613d323d7869622670c26163d0569bc94ebb9b8e6fe7d6ab253f17ff4ce99

  • C:\Program Files\Java\jdk-1.8\jre\bin\available_for_trial.56iepk8s493l0ms1q90ika42y5pexhkkovnu.fn0l8phoor._locked
    Filesize

    12KB

    MD5

    778fd67fc0da083bc99549f89f2ef2f9

    SHA1

    6a5ecbe52678e0ef9afa47e1d1d3d6f5cd086d43

    SHA256

    53db84d5edbcd78ad7674e82b5f613b1b0a40125e0801021025ec69a7bd5d4b9

    SHA512

    525549b7478b440d6cab1f9c08723ca10c179d6e953d319d598f6df0ecc80aeaeca35558a84b6bd88e405b59ad10731f76e356806065e13a31315bb969459ae9

  • C:\Program Files\Java\jdk-1.8\jre\bin\available_for_trial.95532hl39b50f78m816bek6qbt54ftyum282vx.or._locked
    Filesize

    12KB

    MD5

    ec8f7beff4b0f96cb6e80c18fcb5bf43

    SHA1

    d5bec1841537684372c1e905534fd8a7370ff35d

    SHA256

    ed93dd3747d1ce1b96496f4e3bda7d19b70ebdc29d36cd1604e6f570505c9cb7

    SHA512

    dbc6528b1eb150d688add14d64d9f2aa232c44fe0b1a16e513583b6a01c47d533291b3a9602aa4c0cdd9e4ee438d342f1258e883fd8971aea4d2872885c9fe2b

  • C:\Program Files\Java\jdk-1.8\jre\bin\msvcp140.dll
    Filesize

    559KB

    MD5

    50cad02c553e05c8add1a20423e1b796

    SHA1

    08e096a3136cfb1211ac19205decd18f04845dc5

    SHA256

    73d9ede0c62bbe015de73a9932b6f0890dc148d7ed34de074afa6b806ca59a00

    SHA512

    b99a5243067e5fc0b0415616de2de516c5cf6360757697b8cd15da4a0bde6eadb40ff35f064a5d4705773f0780106f3d997bbbe08e90a6045deeadfbf4af069c

  • C:\Program Files\Java\jdk-1.8\jre\bin\ucrtbase.dll
    Filesize

    1012KB

    MD5

    982d641f0fc7e4867fb06cd9126d4f7b

    SHA1

    e71b8953ed90945a54ddd533c6311144ba20d570

    SHA256

    b3a1ac6e632765c317fd6012d0a1ed9d6e39da7b6a8ad0cff1f7d7a120535a7b

    SHA512

    85d5fd3689a7c75e18d523227ddb10dfdd482656b3d9227d5081e3cd65c2442c4b467f9024481122846bf861a5852d8852121f855b450e9b14f1dda809694239

  • C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140.dll
    Filesize

    96KB

    MD5

    e9bf990106c9ee3856a45bf02f3556fd

    SHA1

    440b517b33c786e12d9138de85741d950facd570

    SHA256

    7904f5ccb18be6158654f6e05c9f9e1df263bcef4644a982d2c9fd8dd2bad6e8

    SHA512

    7742cccc690cbe5d73a53bb4e32e877e4c2e9e1546046d96853788b12126a414dc5a0d540035356eb0953ce85012216fc301573a286321db869cdeacb459eae0

  • C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140_1.dll
    Filesize

    37KB

    MD5

    8ed41b4488cd52292649128affa20ccf

    SHA1

    b3471ed38c4f07d34f43845afbe9e06f7108bba1

    SHA256

    586b9ff7f628bf29de99939e0be5fe8b501c1eb98e851648ec79984ade82cde7

    SHA512

    2ed52e7e8a6fa5327f12ec1bc3e47628547057444cf7bc909514bf3ec6462cdda67f88a03601c5abc998fc1535431684bcb65e624556260e9ca8900a6182f3ad

  • C:\Program Files\Java\jdk-1.8\jre\lib\deploy\messages_zh_TW.properties
    Filesize

    4KB

    MD5

    d2a81c6cbd7b9d76473b488e0083a741

    SHA1

    c7fda633f13fbd45b1174c1f3230de97eacf837c

    SHA256

    dcf597272ad3f8038f05369644e0b50b3151d391dee1ca846e05bc551ec2518d

    SHA512

    df346d4f8d964e6fc0ec3478b88586214b19ad8e1282e54fa01f4a95a6b43b33d47437c4091c9cee0436a3ccd5ddb4fb744e770fb360812eaa68e97a75e5bfc6

  • C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.25\mscordaccore.dll
    Filesize

    1.3MB

    MD5

    161e864f59d90743288cf7153271d841

    SHA1

    4e94f327f0db07963a109e80810411905badd4d5

    SHA256

    b6c83f281da38dc1541526b27f1d6d7314baf9630ffdd308dd03a9246573f454

    SHA512

    f65be35e615e90cdeb768717776442602a1085bc17f99a73466e531477dbac7ebbab724b2525c9791d0ca66e5731b2b09b27bd4e44809c5808d239bb6cde1d52

  • C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.0\Microsoft.DiaSymReader.Native.amd64.dll
    Filesize

    1.8MB

    MD5

    1a9bb642eb43e137a9781c6c9696b53e

    SHA1

    cff8723e266734f1265c09cde8bfd2a4f128993b

    SHA256

    f9cfa3b6707e0e271a6a7dd0c36a29d640266fe7f2c59d914a558fdc8ccbfc95

    SHA512

    995ad97db0b91d52151c7915bf780a53d1c953718753c2fb7b2bf644749e392047c47131aef0d112931e69a6e49c44b79cb82fa341575c74feb7f4b281b1ffc0

  • C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.0\mscordaccore_amd64_amd64_8.0.23.53103.dll
    Filesize

    1.3MB

    MD5

    d742bfba9f68d05f0385b0759d9cfc31

    SHA1

    7cd1879c85a106350d0bcf0abb8299fbb83143a2

    SHA256

    a6dd5d8b7873d42b7a7dc7400acc2eaad7bc918d064b646246fc8865965cecef

    SHA512

    8d659e3e056a41cc2484f8595538617e6909dbe1e025569241d0119fd651a409b7afd76d5e74408cfe5f53cfbc0c600dcf51f8986093a6fa37de8541240f3cf7

  • C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.0\D3DCompiler_47_cor3.dll
    Filesize

    4.7MB

    MD5

    da801bb3c5a21683c061a875dd341a55

    SHA1

    e943ebda1225fc6a8bf4aeeb5a5fae7279ff9ca4

    SHA256

    a5fe5c8ec8169a34ce41021feb3aed60828f18ac60b649ba76b2b5f6f2b03bc4

    SHA512

    624c312fc0d128e64c8bffabf2f060dbb8537ba532930ab91810524f3fcdb71e149f37e90555ffcdfb3ea7b048852822f622ecc2cb6324e67248634a5b4921ab

  • C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.0\ru\available_for_trial.1v5vd16bvuekkduq9rd6fl12qt1x40h3woaq.00r._locked
    Filesize

    17KB

    MD5

    f401d1f8169b0891d5f00eb694491d51

    SHA1

    6bc1236910bc9da0528235410309713bcb6e6ee6

    SHA256

    08a6cd99ad6f7ddb122c13997b002d3a0f453f3e550e0e2c35b9ea5fdb14300e

    SHA512

    d9f90a0f9c26ed7543fc3c5adc015e3271610b02ebbb71b2e5d78cc545ea38c5847fd1595ebf7af9ca2a7e1dc15f95074912f3838e8b6574fdc976628a3ed23e

  • C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.0\tr\available_for_trial.03obj096sjg44038i3012k6ka5iw3v61a8aar35.87222592r._locked
    Filesize

    18KB

    MD5

    3e4e8cda2eb89b25e768fb7d627afb41

    SHA1

    2fac751482d481edd7823005ceeb7957f00d8998

    SHA256

    48dec5b4e0779ec549fec4943e393b6bb1af865c9cf93cb2118140e90b3a4eca

    SHA512

    6fd14c2eeed5cf2ffa0447bfa394b96267d99066d16280c78ed65cacef60b0beb412c285f813a12bf223122e39199aad166ef734904dfc571a1f75cf8fdd7fc6

  • C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.0\zh-Hant\available_for_trial.3k1pd91.tr._locked
    Filesize

    80KB

    MD5

    4a2c6560c6d930bc8a882f4d24bca4e7

    SHA1

    59ebfbc8f49a7db9f2a03caf5576b8d6697e9052

    SHA256

    d404e2d94c3d280f0e1938d0b6b309e87ca32f2f6555e524e69ffea16912cc9b

    SHA512

    c5fcf5e21a5e2bb6a4002385b3a1bf102919a74899f27dac8828912e6759e39427a88793565bc79fbb87107dee126ab9c8bb4c659410516600dcdd021e8f8f69

  • C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.0\zh-Hant\available_for_trial.d1j3xm59m9.de._locked
    Filesize

    20KB

    MD5

    243c51aec2233e11d092933c5d75cd41

    SHA1

    4cf08df7fac42cec8999197ff7cadbcc16c0cf5b

    SHA256

    ac74be98f9f1b8cc281e45bf3b9858d575e0eff7e389cc99212809f34d33e07e

    SHA512

    b8d527671632d62507ac08aa88a177feb4cbab8d4167b8cd22209029d00937294b9e24886be9b829a74283f2196fb48ed4c8322f7c636f61ae24f9f97dde1d1d

  • C:\how_to_decrypt.hta
    Filesize

    11KB

    MD5

    489b3aac141135c3e82007e6d4a89858

    SHA1

    e7db02fe0749b0bb4667169ad7a3df99c9091340

    SHA256

    5a15ed37ec590b54dc22ea1171eea6e412aca03eea24cbcf13c83241e481b4c4

    SHA512

    c0d4db5e76c4f5c2de282ab7ab7f04bb0f73d6fb8f111d2fb8bd4e9dfc5f2f85066e05128c708c13a9a239ee9de89e25ec5df01bc19870b1ce806e53b8da99cf

  • C:\vcredist2010_x86.log.html
    Filesize

    82KB

    MD5

    1acf26d0544708b8875cae72804498d2

    SHA1

    1325abbdd149a98c19119e87cdf08d25b34b9fa1

    SHA256

    ad72ca73662014760dc331996af34477f71eef267d9f06bdcf812285bc65f3ba

    SHA512

    1430d3a6416cfd44b4c0183b8903592e61fc520b3033bf440969ff0167519202751f427d013266c8ba0b18e8019e05147ce7d9c6802ed4f764a389190569b0be

  • memory/4032-5204-0x0000000000400000-0x0000000000463000-memory.dmp
    Filesize

    396KB

  • memory/4032-9-0x0000000000400000-0x0000000000463000-memory.dmp
    Filesize

    396KB

  • memory/4032-8-0x0000000000400000-0x0000000000463000-memory.dmp
    Filesize

    396KB

  • memory/4032-6-0x0000000000400000-0x0000000000463000-memory.dmp
    Filesize

    396KB

  • memory/4032-4-0x0000000000400000-0x0000000000463000-memory.dmp
    Filesize

    396KB

  • memory/4032-3-0x0000000000400000-0x0000000000463000-memory.dmp
    Filesize

    396KB

  • memory/4032-2-0x0000000000400000-0x0000000000463000-memory.dmp
    Filesize

    396KB

  • memory/4032-1-0x0000000000400000-0x0000000000463000-memory.dmp
    Filesize

    396KB

  • memory/4032-19-0x0000000000400000-0x0000000000463000-memory.dmp
    Filesize

    396KB

  • memory/4032-20-0x0000000000400000-0x0000000000463000-memory.dmp
    Filesize

    396KB

  • memory/4032-0-0x0000000000400000-0x0000000000463000-memory.dmp
    Filesize

    396KB

  • memory/4032-2341-0x0000000000400000-0x0000000000463000-memory.dmp
    Filesize

    396KB

  • memory/4032-3286-0x0000000000400000-0x0000000000463000-memory.dmp
    Filesize

    396KB

  • memory/4032-7804-0x0000000000400000-0x0000000000463000-memory.dmp
    Filesize

    396KB