Resubmissions

12/02/2024, 19:56

240212-ynry9ada6410

12/02/2024, 19:35

240212-yazryabb7s10

04/02/2024, 01:11

240204-bjxbvadhh9

23/01/2024, 03:08

240123-dnenpsfccr10

Analysis

  • max time kernel
    150s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    23/01/2024, 03:08

General

  • Target
    85f4088286ac1eedc94ad9dc6465e9e4b89d1cde3012f9949450fcc9f2b60431.exe
  • Size 342KB
  • Sample240123-dnenpsfccr
  • SHA256 85f4088286ac1eedc94ad9dc6465e9e4b89d1cde3012f9949450fcc9f2b60431
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Trigona

    A ransomware first seen at the beginning of the 2022.

  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Drops desktop.ini file(s) 49 IoCs
  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\85f4088286ac1eedc94ad9dc6465e9e4b89d1cde3012f9949450fcc9f2b60431.exe
    "C:\Users\Admin\AppData\Local\Temp\85f4088286ac1eedc94ad9dc6465e9e4b89d1cde3012f9949450fcc9f2b60431.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    PID:2444

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        desktop.ini

        • Path C:\$Recycle.Bin\S-1-5-21-3601492379-692465709-652514833-1000\desktop.ini
        • Size 899B
        • SHA256 0d106b4a5e7ecb9ce12d6bdd720f31d864e3df5d7b52d455f5d6d8eaac1c7d11
        • MD5 SHA1 SHA512

        f4r1668htmt8mol7698k7hg72n4mvt15wzejl49vizawzcotm.1e9jlnr._locked

        • Path C:\$Recycle.Bin\S-1-5-21-3601492379-692465709-652514833-1000\f4r1668htmt8mol7698k7hg72n4mvt15wzejl49vizawzcotm.1e9jlnr._locked
        • Size 2KB
        • SHA256 775d56b49c58a48c35eb08749df7b62612fe7b840c817ca0e1006bdf2e76ad63
        • MD5 SHA1 SHA512

        cu513zx0or2p7fjm906j2c7g5lcqv0wp8nw3.sl458r._locked

        • Path C:\MSOCache\All Users\{90140000-0117-0409-0000-0000000FF1CE}-C\Access.en-us\cu513zx0or2p7fjm906j2c7g5lcqv0wp8nw3.sl458r._locked
        • Size 583KB
        • SHA256 251cedcd0ef39bb47ea7ea743a1643ad6b5c204789359fab4f06fb6522f06361
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.36u7f9j234245i45ubw67un196d7.d19c93er._locked

        • Path C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\available_for_trial.36u7f9j234245i45ubw67un196d7.d19c93er._locked
        • Size 102KB
        • SHA256 cdf7c0a8415d112ffa87df839de5682a589d25e5563f50adb516e447072c57e3
        • MD5 SHA1 SHA512 SSDEEP

        m17tp2bf94ca7p7938djfvd7510v9m52e1cbp256.6r._locked

        • Path C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\m17tp2bf94ca7p7938djfvd7510v9m52e1cbp256.6r._locked
        • Size 23KB
        • SHA256 945404d4e64f02cc45cc53543d4f4b9b4120b4ed0376d0fc0e0d6490878e0667
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.z76d0n61.y92hj8pr._locked

        • Path C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\available_for_trial.z76d0n61.y92hj8pr._locked
        • Size 28KB
        • SHA256 a16a9db4f86cf57301d5a301a374aae2453b6d88f8a7ce960b8a7ea6dbda04b9
        • MD5 SHA1 SHA512 SSDEEP

        usa.fca

        • Path C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\usa.fca
        • Size 5KB
        • SHA256 f1ecabd8f3598c179eebbeef554afc341ee05889364806709e8eb53851355b79
        • MD5 SHA1 SHA512 SSDEEP

        70jri0p8ettf5h3.i6fr84lzs2r._locked

        • Path C:\Program Files (x86)\Common Files\microsoft shared\DW\70jri0p8ettf5h3.i6fr84lzs2r._locked
        • Size 819KB
        • SHA256 a29b9655c4930ec8b2bdd576e51e4cf24b59854cd60c282a1599b88b5287f364
        • MD5 SHA1 SHA512 SSDEEP

        gcd2qy06y0bp6o655w96s1r9mi5n1qjgs70fub7geuc15p8pq.v7117123r._locked

        • Path C:\Program Files (x86)\Common Files\microsoft shared\DW\gcd2qy06y0bp6o655w96s1r9mi5n1qjgs70fub7geuc15p8pq.v7117123r._locked
        • Size 508KB
        • SHA256 29f1ccd7405669f434a99b92a8f7b92142ae9a04346602fa79f798ae3e61f74d
        • MD5 SHA1 SHA512 SSDEEP

        OSETUP.DLL

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\OSETUP.DLL
        • Size 1.2MB
        • SHA256 def28b8612adfe408e824c339b2d9bd8e84714fb96a938ea0d3f482e17f543ac
        • MD5 SHA1 SHA512 SSDEEP

        OSETUPUI.DLL

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\OSETUPUI.DLL
        • Size 188KB
        • SHA256 90262a228c3db50cbb324024c00d1506ea53d1c278fb535f8f31edfc78fd8e19
        • MD5 SHA1 SHA512 SSDEEP

        OfficeMUI.XML

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML
        • Size 6KB
        • SHA256 79b92ea2a968400565250e9199bb25d571511ff75d18a07252aee1fe8905949f
        • MD5 SHA1 SHA512 SSDEEP

        PSS10R.CHM

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM
        • Size 27KB
        • SHA256 adb2df4733c6ba6aff7bea9d16f4a8c9ff25da7a7535e5529b1e8d366702a432
        • MD5 SHA1 SHA512 SSDEEP

        SETUP.CHM

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM
        • Size 66KB
        • SHA256 0b059662ca67a3606759e948ad9d1bca4b57cbe508b35f93d7700e22d04f2829
        • MD5 SHA1 SHA512 SSDEEP

        SETUP.XML

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML
        • Size 10KB
        • SHA256 446172caed7ae348aecdc3e3664444b35d64045f194595a0d60c63d1773a21a0
        • MD5 SHA1 SHA512 SSDEEP

        Office64WW.XML

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office64.WW\Office64WW.XML
        • Size 5KB
        • SHA256 db0d972ca4f3db8f59633596f9abd53ec8e01961dd2c5e5e1f9d3f636a045015
        • MD5 SHA1 SHA512 SSDEEP

        36t2a27f92yo7pe0che152102b5nicbo11a5cjgy9.5ed106r._locked

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Outlook.en-us\36t2a27f92yo7pe0che152102b5nicbo11a5cjgy9.5ed106r._locked
        • Size 4KB
        • SHA256 7a3252e3594b6a2b61746b02fb97b16fb05fa0512fbc03cb05da4c1bdc478bf4
        • MD5 SHA1 SHA512 SSDEEP

        ProPlusWW.XML

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PROPLUS\ProPlusWW.XML
        • Size 17KB
        • SHA256 7b9813373fb8c17006339d602e6dbbbb114e65ed106423011e596e7305a4e841
        • MD5 SHA1 SHA512 SSDEEP

        SETUP.XML

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PROPLUS\SETUP.XML
        • Size 31KB
        • SHA256 6e8356661b874c713e9e1c53f8549cb5bf7b2acaa785d14ad357e198586fd3be
        • MD5 SHA1 SHA512 SSDEEP

        SETUP.XML

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML
        • Size 6KB
        • SHA256 d68e7c1e51dcdcaa152b0d0d8dc50856ab0e56f0924644c85cfccdaa937adf8d
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.756c9st8jvt159z5mtf610497e103yl.5a7976r._locked

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\available_for_trial.756c9st8jvt159z5mtf610497e103yl.5a7976r._locked
        • Size 1.2MB
        • SHA256 61576a0367d14b5293c33d31ae192e54062ca9786172321ed580bab4735e2432
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.hs91mp33m57.d4r._locked

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\available_for_trial.hs91mp33m57.d4r._locked
        • Size 699KB
        • SHA256 9729aa44993e3ef946f66a22921c78c8f0be3f00cef1783d7c5c265ff8fed080
        • MD5 SHA1 SHA512 SSDEEP

        OSE.EXE

        • Path C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\OSE.EXE
        • Size 146KB
        • SHA256 04f23169923346b7a38f5efd5bd91146bbf946bd48a83be9eba6ce7e45c8a974
        • MD5 SHA1 SHA512 SSDEEP

        GoogleUpdate.exe

        • Path C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdate.exe
        • Size 168KB
        • SHA256 021d0148b631ac0c047e863a4a9030a8d5e437683b8e95434f389fec4804a355
        • MD5 SHA1 SHA512 SSDEEP

        chrome_installer.exe

        • Path C:\Program Files (x86)\Google\Update\Install\{F233FC20-BAD7-4319-A416-C4D060784296}\chrome_installer.exe
        • Size 32.6MB
        • SHA256 1d1a0441fd5300532049c10c49a1876d4442da04bfefd97d2760d80c64d4b7e4
        • MD5 SHA1 SHA512 SSDEEP

        Workflow.Targets

        • Path C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.Targets
        • Size 5KB
        • SHA256 48c77709cf008a83a6e335f2a43a3a667518fe816c75b8e622bb7f7c74e5e8ee
        • MD5 SHA1 SHA512 SSDEEP

        Workflow.VisualBasic.Targets

        • Path C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.VisualBasic.Targets
        • Size 5KB
        • SHA256 59fad3837bf2e5859566a8cd1f5b45ba0e116b5a96a8e34530501a4c9089e06f
        • MD5 SHA1 SHA512 SSDEEP

        SCHEME11.CSS

        • Path C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME11.CSS
        • Size 128KB
        • SHA256 8ea7d410474c44fd26e9205d8480f0d54e6791b424e2af1c1986a778906506be
        • MD5 SHA1 SHA512 SSDEEP

        fc82j70i82g7r104q38a2mz9x1w.gl7a8a6r._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\fc82j70i82g7r104q38a2mz9x1w.gl7a8a6r._locked
        • Size 124KB
        • SHA256 6f809bf650806a40509fb61d3aaf772e631da4a656d06d64bab89fcec545a926
        • MD5 SHA1 SHA512 SSDEEP

        hj45r.xs3838hf1r._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\hj45r.xs3838hf1r._locked
        • Size 121KB
        • SHA256 689d1f720531956b4364c909e088dace3309ec31f34ae8cda1136a0ff762d74a
        • MD5 SHA1 SHA512 SSDEEP

        ACEDAO.DLL

        • Path C:\Program Files (x86)\Microsoft Office\Office14\ACEDAO.DLL
        • Size 536KB
        • SHA256 1403b0c215d0c905c738ae165914f37b540e69c7e9272bb0f7a2bb77236effb0
        • MD5 SHA1 SHA512 SSDEEP

        ISO690.XSL

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\ISO690.XSL
        • Size 257KB
        • SHA256 9e3761434ea764adb39d1bd5e6c5f5dbb883b9155c3ceff61cafd6751f439512
        • MD5 SHA1 SHA512 SSDEEP

        TURABIAN.XSL

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\TURABIAN.XSL
        • Size 331KB
        • SHA256 5daf83caff0e3ac335bf52c5784f79813ee8e82eb5b91d61d83eda27f9b438d1
        • MD5 SHA1 SHA512 SSDEEP

        DBGHELP.DLL

        • Path C:\Program Files (x86)\Microsoft Office\Office14\DBGHELP.DLL
        • Size 681KB
        • SHA256 be58b150ff01c45480ba3d107bca58394102d2e0ccb451063a3ad692dfade41d
        • MD5 SHA1 SHA512 SSDEEP

        EXLIRMV.XML

        • Path C:\Program Files (x86)\Microsoft Office\Office14\EXLIRMV.XML
        • Size 78KB
        • SHA256 1e42059254d6208d00fcd7043613283691262baa0145346bbe432609c2ef16da
        • MD5 SHA1 SHA512 SSDEEP

        DataViewIconImages.jpg

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\DataViewIconImages.jpg
        • Size 6KB
        • SHA256 c4a51bf1d3fd3d18e54d25ee59d8d9195b76e912c08d4c957f8a730a2fd14ac1
        • MD5 SHA1 SHA512 SSDEEP

        AlertImage_OffMask.bmp

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_OffMask.bmp
        • Size 7KB
        • SHA256 6e42710dbfcff40d53f90d8c9a51208b7bc43afe0d9cfa1058cc74f902283107
        • MD5 SHA1 SHA512 SSDEEP

        FormToolImages.jpg

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormToolImages.jpg
        • Size 7KB
        • SHA256 c8bb015e4940150d325fc07267d9ec1bdab25053ea2f794b6b0618aa077892f6
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.afpasg6fg3us5x57ve1a1pve6odz.4631rqr._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue\available_for_trial.afpasg6fg3us5x57ve1a1pve6odz.4631rqr._locked
        • Size 7KB
        • SHA256 6743bdb3217d6038df6578c1bc0c5a41f3c0b38da78bc55eaaabae4190b82f5f
        • MD5 SHA1 SHA512 SSDEEP

        header.gif

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\header.gif
        • Size 27KB
        • SHA256 173f437e1f5d388c344cfe23d309fced72e1afcfdff0c36b9f1c135a0fc2b70a
        • MD5 SHA1 SHA512 SSDEEP

        ViewHeaderPreview.jpg

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\ViewHeaderPreview.jpg
        • Size 4KB
        • SHA256 3c8dba5b6095296ad98f74239f14a434c63542dbda40ff8c517efe169579f270
        • MD5 SHA1 SHA512 SSDEEP

        bg_FormsHomePageBlank.gif

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_FormsHomePageBlank.gif
        • Size 20KB
        • SHA256 a7c103473f5c1442a18d65d0372e37a82bae465b8f1d0ee33d7463b0f4be2d7e
        • MD5 SHA1 SHA512 SSDEEP

        FormsViewAttachmentIcons.jpg

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsViewAttachmentIcons.jpg
        • Size 5KB
        • SHA256 ef14b6677659ffe37f2b667b9836bd585809bc2acc50832bcd451634d3dbdc21
        • MD5 SHA1 SHA512 SSDEEP

        bg_FormsHomePage.gif

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePage.gif
        • Size 90KB
        • SHA256 08464cbb623517edffb7f25b61212f413801ee2404425792f67a2888a3aa025e
        • MD5 SHA1 SHA512 SSDEEP

        form_edit.js

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\form_edit.js
        • Size 10KB
        • SHA256 6830f15d47628652b7d2ed628a7aae60b97aa8a6b1d0b6505e17be8a7db38748
        • MD5 SHA1 SHA512 SSDEEP

        FORM.JS

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FORM.JS
        • Size 81KB
        • SHA256 84d42aa23e5c269813644c57d5f305b03c15e482ae4894cb7f164e204e4842f7
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.95166r0j8as015d2ytj07c7u2v37c87762c8.7iw7v996r._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\available_for_trial.95166r0j8as015d2ytj07c7u2v37c87762c8.7iw7v996r._locked
        • Size 10KB
        • SHA256 c8c481c0fd809187c91a514c7101dbee0c8e73be5c03d3e6ecb084fd3323fce2
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.uk7e9244g0q12o9b99cxxgi6013947l8wa78aqd1541n3y4.6l52r._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\available_for_trial.uk7e9244g0q12o9b99cxxgi6013947l8wa78aqd1541n3y4.6l52r._locked
        • Size 192KB
        • SHA256 add039e2ea8f72fa49ffc29d368e3da4999308156ceca07280160773ee9299da
        • MD5 SHA1 SHA512 SSDEEP

        utilityfunctions.js

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\utilityfunctions.js
        • Size 60KB
        • SHA256 534c7f764cf85868020ad990a15671fd20d5f612b1e06e2d3b8988ff2e69deb4
        • MD5 SHA1 SHA512 SSDEEP

        BG_ADOBE.GIF

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\BG_ADOBE.GIF
        • Size 25KB
        • SHA256 039a1437783f2c7eaf88f75aa42ed181da1249b06049384416299b7ec346761b
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.3m8zi2q4v3k78dx73.4hr._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\available_for_trial.3m8zi2q4v3k78dx73.4hr._locked
        • Size 32KB
        • SHA256 8a9f86627b40d718e55cbcc1b589904a7ff25ad786e47a411d93c8e0fd8e893d
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.48mp44r0c23la6.holtr._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\available_for_trial.48mp44r0c23la6.holtr._locked
        • Size 6KB
        • SHA256 86b69b3d9209d84915b8b1110efd3a39ed5a6f9e9bb201b6aa52a25eb72b49a2
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.ewx.68429g8unwr._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\available_for_trial.ewx.68429g8unwr._locked
        • Size 21KB
        • SHA256 c091d99327c4354ec8c33fe0aa03dbc5eea242ebaae19aefcf1134781e6ce234
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.k0vrn94qp3e68.4r._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\available_for_trial.k0vrn94qp3e68.4r._locked
        • Size 7KB
        • SHA256 f1f727b7c5cbe5697bae4bd621fcb6fd28746ea0ca7395df46b1a2b6a870c09b
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.rn18bly4oa34ms19f0vr353p0g451o2i0yr43lyk24see3y.9h9f39n2a9r._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\available_for_trial.rn18bly4oa34ms19f0vr353p0g451o2i0yr43lyk24see3y.9h9f39n2a9r._locked
        • Size 16KB
        • SHA256 3889e7ed7cd664afb24b0a22483f757054020cdd2d29601dd83803fb379fbad9
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.v6i8x43b0.li3884jpr._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\available_for_trial.v6i8x43b0.li3884jpr._locked
        • Size 6KB
        • SHA256 99835860bd749d47f92774486eb3b93ac995b92d66a1bb6b49c53a7dd4d4a604
        • MD5 SHA1 SHA512 SSDEEP

        bg_Earthy.gif

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Earthy.gif
        • Size 5KB
        • SHA256 14d2b750c88c40ff58ea324377ecdba8d849c64c5af5309ac4eccb97758bd430
        • MD5 SHA1 SHA512 SSDEEP

        bg_GreenTea.gif

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_GreenTea.gif
        • Size 22KB
        • SHA256 d01249845ac1a18551bb189f5e4d6741a637ebce6f23330972c564b350bd2824
        • MD5 SHA1 SHA512 SSDEEP

        bg_LightSpirit.gif

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_LightSpirit.gif
        • Size 9KB
        • SHA256 1dfd6da68fbc8a5a22de68a0cb9924717a9e5d6082bd74d33a94dfdca975b179
        • MD5 SHA1 SHA512 SSDEEP

        bg_VelvetRose.gif

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_VelvetRose.gif
        • Size 15KB
        • SHA256 9609554243d829ef566fbb7fbcf16ec95d044a7f083332808302e27741f37610
        • MD5 SHA1 SHA512 SSDEEP

        IPIRMV.XML

        • Path C:\Program Files (x86)\Microsoft Office\Office14\IPIRMV.XML
        • Size 78KB
        • SHA256 1611c9e944ce652b19213c70687c638a9c82210143e4f0b2439d108623bc2dbd
        • MD5 SHA1 SHA512 SSDEEP

        9gvf6oeht6q903eoc9zwg5o5g9495v39ae766efv80.vq2br._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\9gvf6oeht6q903eoc9zwg5o5g9495v39ae766efv80.vq2br._locked
        • Size 248KB
        • SHA256 926eecf8d9afab7ccdb3b3c00101d9669507133ce2ea2ff76ac469d40f503a91
        • MD5 SHA1 SHA512 SSDEEP

        OLKIRMV.XML

        • Path C:\Program Files (x86)\Microsoft Office\Office14\OLKIRMV.XML
        • Size 78KB
        • SHA256 c1f782c1c71d913774829fc7d9967ff673da426e9e27f99fcc8f5f9311b73dc2
        • MD5 SHA1 SHA512 SSDEEP

        PPTIRMV.XML

        • Path C:\Program Files (x86)\Microsoft Office\Office14\PPTIRMV.XML
        • Size 78KB
        • SHA256 823b1ada7f14f14de1f27695be0ad73bf37652ab4d01a006b6de165e59e5c566
        • MD5 SHA1 SHA512 SSDEEP

        WORDIRMV.XML

        • Path C:\Program Files (x86)\Microsoft Office\Office14\WORDIRMV.XML
        • Size 78KB
        • SHA256 3f3c1f6d792c56beac7785d636beb2dfcd5df7a2fc0cc84feeeb99ac766cc373
        • MD5 SHA1 SHA512 SSDEEP

        893fia8vt09728silzvmu4u556.ar._locked

        • Path C:\Program Files (x86)\Mozilla Maintenance Service\893fia8vt09728silzvmu4u556.ar._locked
        • Size 101KB
        • SHA256 4d043d7b00aa9286cfefdaf5aee469dab1de4c7db5558b2a61d91ef26b68271a
        • MD5 SHA1 SHA512 SSDEEP

        maintenanceservice.exe

        • Path C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
        • Size 228KB
        • SHA256 289ef11f36d5337e4d3d4c98728366d00ae3ded25e00bc1d2281d4f99f8cfec5
        • MD5 SHA1 SHA512 SSDEEP

        66632jl17n90s09ey7303ovdi405r84ee3.ab76v8r._locked

        • Path C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\66632jl17n90s09ey7303ovdi405r84ee3.ab76v8r._locked
        • Size 4.3MB
        • SHA256 af4e4e272a291f99db35379a0549752a674636d4ca528b6384855734df7777b4
        • MD5 SHA1 SHA512 SSDEEP

        ij

        • Path C:\Program Files\Java\jdk1.7.0_80\db\bin\ij
        • Size 6KB
        • SHA256 6c751d350c135bc4ef2ec531de0a84a837c33ce890748c6e5ea8c07c7f14fad8
        • MD5 SHA1 SHA512 SSDEEP

        COPYRIGHT

        • Path C:\Program Files\Java\jdk1.7.0_80\jre\COPYRIGHT
        • Size 4KB
        • SHA256 f102c1b1fc37f548ed5354b1d911ae32fe7044e99e85e6df92eb5f16ae465ef0
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.6kq4m938.z9l08se115r._locked

        • Path C:\Program Files\Java\jdk1.7.0_80\jre\available_for_trial.6kq4m938.z9l08se115r._locked
        • Size 109KB
        • SHA256 15a832180196f7dafe7a4e0a91478d8499f0872c83724677bb1ea6404c5b58d2
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.lhrg.i8r._locked

        • Path C:\Program Files\Java\jdk1.7.0_80\jre\available_for_trial.lhrg.i8r._locked
        • Size 173KB
        • SHA256 60f73e74df64704fbbcc7ace8c38518a69706a82d783ee90fe36032aa342fbc4
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.t8b5qcsmml8q8aok32id165fdbah04m823g4eutjh.a3r._locked

        • Path C:\Program Files\Java\jdk1.7.0_80\jre\bin\available_for_trial.t8b5qcsmml8q8aok32id165fdbah04m823g4eutjh.a3r._locked
        • Size 810KB
        • SHA256 3fdbfb915f98da92ede98657b35133d78a265a8edb9fba7b631dfabf3f0ecded
        • MD5 SHA1 SHA512 SSDEEP

        messages_zh_TW.properties

        • Path C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_zh_TW.properties
        • Size 4KB
        • SHA256 63ffdc9ddf3b2cfeafbefb72cad211388cd6e1a07f9c4077b9db2b01f7404f60
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.504vza01ix39q153rr4icoz3ykz3chqo.l0e3trt55r._locked

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\available_for_trial.504vza01ix39q153rr4icoz3ykz3chqo.l0e3trt55r._locked
        • Size 7KB
        • SHA256 160d07194c58a0c2c3433c05083760095f442dd1b7864106e1c37c0e0ed58453
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.8wvi1s411o17pd64m4e4933ahdea17q9638t73kxi4o.1r._locked

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\available_for_trial.8wvi1s411o17pd64m4e4933ahdea17q9638t73kxi4o.1r._locked
        • Size 16KB
        • SHA256 aa3bc0522b2a9c45a00da3b5a298f2490dea1996814f506a5de8f8cec68907e3
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.d19gf3c19w789to3m89r644ne.rse086r._locked

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\available_for_trial.d19gf3c19w789to3m89r644ne.rse086r._locked
        • Size 21KB
        • SHA256 adcdd63302d745ea5ab2ba4ef9a23c06d4ab002105606bcede896c652203edee
        • MD5 SHA1 SHA512 SSDEEP

        feature.properties

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\feature.properties
        • Size 6KB
        • SHA256 8cb89d384fddf39cc5cc7bc87238238dbcef4a9ed2ab69560a86cc605a3eb99c
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.o40p0n4c9980sbx8u926.43868r952r._locked

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\available_for_trial.o40p0n4c9980sbx8u926.43868r952r._locked
        • Size 13KB
        • SHA256 a95c12532a7187f9f00ef698f11b11d5ab5dde16ad3940ed9c517644d992c754
        • MD5 SHA1 SHA512 SSDEEP

        license.html

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\license.html
        • Size 9KB
        • SHA256 8caa4c5ad2df9c998b6a33f2c30f1877fcabc94362a8db6f8372c7f58a0704ac
        • MD5 SHA1 SHA512 SSDEEP

        h4zqs84x16vuds3lgpm4.9ux44s4t2r._locked

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\h4zqs84x16vuds3lgpm4.9ux44s4t2r._locked
        • Size 8KB
        • SHA256 240822c0efcaf950cc14cec3262c7771cd334d9e94f18c4cdc6d787fb62cf315
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.q42ph4v92y4y6hr3iol06k2at48hk6uf188u3ygpt8t538bx.47511m48kr._locked

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\available_for_trial.q42ph4v92y4y6hr3iol06k2at48hk6uf188u3ygpt8t538bx.47511m48kr._locked
        • Size 11KB
        • SHA256 1cb3914fc7a7aa4c243436a97cbf1757661b537cf617b16c0dfdb037cac81b8a
        • MD5 SHA1 SHA512 SSDEEP

        wvp5iz785mwd5a7lk6xw17wtf06kaze0aqkb552t0o87t.gr._locked

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\wvp5iz785mwd5a7lk6xw17wtf06kaze0aqkb552t0o87t.gr._locked
        • Size 8KB
        • SHA256 636272ff94d3d9f3d9c5ca06295f7b110165ddd1a204f69b31595c06ff638f0e
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.mil18j2l7f39116mhdk6.64izkxa8dnr._locked

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\available_for_trial.mil18j2l7f39116mhdk6.64izkxa8dnr._locked
        • Size 14KB
        • SHA256 d9e068ceedf97ab1002cc892492b5b415f5e1444fce32459dacd4fbafe200bd7
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.6vr3esan49tcj467khc9j68xfph6w7j4do1.8azv6dgr._locked

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\available_for_trial.6vr3esan49tcj467khc9j68xfph6w7j4do1.8azv6dgr._locked
        • Size 16KB
        • SHA256 5e90a9abcf4759737d7f6ec7ba1db82f47ab0489a0e5ce5990ea9320e642a0c7
        • MD5 SHA1 SHA512 SSDEEP

        5d795s8vk07.76w4r._locked

        • Path C:\Program Files\Java\jre7\lib\5d795s8vk07.76w4r._locked
        • Size 126KB
        • SHA256 bf2bb6907ed23a599ad0c167e7f56a46dd8c1dd4d1821ec3b8eeb62fe96b6c3a
        • MD5 SHA1 SHA512 SSDEEP

        718ejmhwl63uuys6n83xu0bsik140697ay109k.5j8h91vdr._locked

        • Path C:\Program Files\Java\jre7\lib\718ejmhwl63uuys6n83xu0bsik140697ay109k.5j8h91vdr._locked
        • Size 565KB
        • SHA256 c3fb23b7cdff4fd5349a7a8be01ff0d948f4a446c56ac339417fb79e1b9164a4
        • MD5 SHA1 SHA512 SSDEEP

        8fu.x4eo4gr._locked

        • Path C:\Program Files\Java\jre7\lib\8fu.x4eo4gr._locked
        • Size 109KB
        • SHA256 e7daf5b762409bfa4f59801e77c75e56fe5383492f4137a9ac0031f2202590b2
        • MD5 SHA1 SHA512 SSDEEP

        alt-rt.jar

        • Path C:\Program Files\Java\jre7\lib\alt-rt.jar
        • Size 169KB
        • SHA256 7014a4e7a5e2484cf50b499d1b8eb4a08ef7acf1f2cb9e22dee3a17d27b8cc59
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.24v7jh7k0m4m48p81mzm86zm6fr5642ev8h9f3521.u89ra3r._locked

        • Path C:\Program Files\Java\jre7\lib\available_for_trial.24v7jh7k0m4m48p81mzm86zm6fr5642ev8h9f3521.u89ra3r._locked
        • Size 10KB
        • SHA256 79b6044e9a5fdb69b676db4d4ad491c1f2f96395a665bcb1f86d77226280d83d
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.3g0thb6l13x56uwb.w26r._locked

        • Path C:\Program Files\Java\jre7\lib\available_for_trial.3g0thb6l13x56uwb.w26r._locked
        • Size 6KB
        • SHA256 dfbe315c46842d9f87df1c0d23ba88f6bdd6761f902bbe4932a1509b5838adff
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.iulbo76077a07k3ze5ijrl4c53y8kx1p700l4it12y0.nh675r._locked

        • Path C:\Program Files\Java\jre7\lib\available_for_trial.iulbo76077a07k3ze5ijrl4c53y8kx1p700l4it12y0.nh675r._locked
        • Size 4KB
        • SHA256 951526806a8fb927ef65fc6b0464ed002d9c607f197773f2c73100e5f81a9574
        • MD5 SHA1 SHA512 SSDEEP

        classlist

        • Path C:\Program Files\Java\jre7\lib\classlist
        • Size 74KB
        • SHA256 2d91c7f0894d8e0fe7ddc628df0f8b4b81206880737bf547d936ed68f948a132
        • MD5 SHA1 SHA512 SSDEEP

        sp353z244d8450e8hr19rl7wsn393ncg589l38s81uz2p.1i299u9r._locked

        • Path C:\Program Files\Java\jre7\lib\cmm\sp353z244d8450e8hr19rl7wsn393ncg589l38s81uz2p.1i299u9r._locked
        • Size 50KB
        • SHA256 101bc989b4035f6d68c10df8e83f5b5a7366f7f03dfc8bbaeb4a3e8baf6f74e1
        • MD5 SHA1 SHA512 SSDEEP

        x2042773tvvdcl6id12f0d2.06g084do3wr._locked

        • Path C:\Program Files\Java\jre7\lib\cmm\x2042773tvvdcl6id12f0d2.06g084do3wr._locked
        • Size 22KB
        • SHA256 a70a96bfed4b66aa9eace37381d2ceb639757145b54a70b09230a637c6fd1dc4
        • MD5 SHA1 SHA512 SSDEEP

        currency.data

        • Path C:\Program Files\Java\jre7\lib\currency.data
        • Size 4KB
        • SHA256 54228cf539c92b9151520dc352a9bc92ecb058587407bbaec7fdc77956f85cab
        • MD5 SHA1 SHA512 SSDEEP

        14627021.9fn0217r._locked

        • Path C:\Program Files\Java\jre7\lib\deploy\14627021.9fn0217r._locked
        • Size 18KB
        • SHA256 acf59ce087d00ae626f92f317a2dc8669dc6ad0187a9825d07ebc27d6e455b8f
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.5q.0pc84pir5r._locked

        • Path C:\Program Files\Java\jre7\lib\deploy\available_for_trial.5q.0pc84pir5r._locked
        • Size 6KB
        • SHA256 0a09409a02d2e16d692a98915b138cc492a1415eb2917ef1151c48818b198a51
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.nodw259bko0159ml8.0eh4ur._locked

        • Path C:\Program Files\Java\jre7\lib\deploy\available_for_trial.nodw259bko0159ml8.0eh4ur._locked
        • Size 6KB
        • SHA256 2ca18011b11730120e14ce6d58e4c440c50fd78b924fef9ba1cdeb8a890eb641
        • MD5 SHA1 SHA512 SSDEEP

        messages_es.properties

        • Path C:\Program Files\Java\jre7\lib\deploy\messages_es.properties
        • Size 4KB
        • SHA256 00aa3216090371f001b5af528116ffa2482d66ffe7d2c31f151b3040ea7ce751
        • MD5 SHA1 SHA512 SSDEEP

        messages_fr.properties

        • Path C:\Program Files\Java\jre7\lib\deploy\messages_fr.properties
        • Size 4KB
        • SHA256 5a72c506245e38fbd8cf83a1366f22a3740dc2003a9262ddd9e908c6fceb3809
        • MD5 SHA1 SHA512 SSDEEP

        messages_sv.properties

        • Path C:\Program Files\Java\jre7\lib\deploy\messages_sv.properties
        • Size 4KB
        • SHA256 5926e069f7bcf82bba8153a0309554d013853f5793018f9d44000538851f327d
        • MD5 SHA1 SHA512 SSDEEP

        messages_zh_CN.properties

        • Path C:\Program Files\Java\jre7\lib\deploy\messages_zh_CN.properties
        • Size 4KB
        • SHA256 f85aea2f0e85db83afe90362a2c759b24d89d5d2dc43f9db1b519d8bec04434d
        • MD5 SHA1 SHA512 SSDEEP

        splash.gif

        • Path C:\Program Files\Java\jre7\lib\deploy\splash.gif
        • Size 14KB
        • SHA256 8042d252de22a80d7f3a3300ea914c51e6f4d14e9cf1a05fb300f997cd29a5ca
        • MD5 SHA1 SHA512 SSDEEP

        ety236f7j180r0hj7h9f5fx8oh8zo771l990c90p628o2ft9.kjv7lg3u7r._locked

        • Path C:\Program Files\Java\jre7\lib\ety236f7j180r0hj7h9f5fx8oh8zo771l990c90p628o2ft9.kjv7lg3u7r._locked
        • Size 156KB
        • SHA256 6df40b8aedc2adb4f1766baed2d5c6d9a1d048184591e42b41d98149a9498a5e
        • MD5 SHA1 SHA512 SSDEEP

        access-bridge-64.jar

        • Path C:\Program Files\Java\jre7\lib\ext\access-bridge-64.jar
        • Size 17KB
        • SHA256 37dde3951ae7d3121437be12485ae76aa9397d9ce60b9945874a2c1d7ceeb6ac
        • MD5 SHA1 SHA512 SSDEEP

        dnsns.jar

        • Path C:\Program Files\Java\jre7\lib\ext\dnsns.jar
        • Size 9KB
        • SHA256 0d2cfffe785fab6df1a434539fd11a4b56aaad68731786822c9ea17864a4cec7
        • MD5 SHA1 SHA512 SSDEEP

        jaccess.jar

        • Path C:\Program Files\Java\jre7\lib\ext\jaccess.jar
        • Size 41KB
        • SHA256 012ff29fa99cd31c0c01ca27fd3e1b701ba70f5d395fb2653554d5bf5bc2c4c9
        • MD5 SHA1 SHA512 SSDEEP

        sunec.jar

        • Path C:\Program Files\Java\jre7\lib\ext\sunec.jar
        • Size 16KB
        • SHA256 581cbc9b9f50e57148c606bdc82d3cd5e097f4fe20ef85697b7d97ef1927f847
        • MD5 SHA1 SHA512 SSDEEP

        sunjce_provider.jar

        • Path C:\Program Files\Java\jre7\lib\ext\sunjce_provider.jar
        • Size 194KB
        • SHA256 346d034955ab50cfd91d6aa7ff88507cfac204267d96d81fb2fa728427cc3c91
        • MD5 SHA1 SHA512 SSDEEP

        sunmscapi.jar

        • Path C:\Program Files\Java\jre7\lib\ext\sunmscapi.jar
        • Size 31KB
        • SHA256 750cce9ba77b8eb941e7d810d2e945ee403c1e3eac03d8e6e9bc29f12f891b10
        • MD5 SHA1 SHA512 SSDEEP

        zipfs.jar

        • Path C:\Program Files\Java\jre7\lib\ext\zipfs.jar
        • Size 67KB
        • SHA256 41d513a56577fd4788c1c88fcb154aef7a42896b353fab39abe32f1fbf1f5a73
        • MD5 SHA1 SHA512 SSDEEP

        eyg1r873gteg1be832kzv9rae5g8oe5r263f4583f1.jg8rlrl85r._locked

        • Path C:\Program Files\Java\jre7\lib\eyg1r873gteg1be832kzv9rae5g8oe5r263f4583f1.jg8rlrl85r._locked
        • Size 103KB
        • SHA256 df85edcf5c3702b2895cc57e896d50072f3938ae3b82641cca73d157727821de
        • MD5 SHA1 SHA512 SSDEEP

        flavormap.properties

        • Path C:\Program Files\Java\jre7\lib\flavormap.properties
        • Size 4KB
        • SHA256 50ffcdf47536b905a5dc26725d3906a9c3fe988d5c9e84551b9d5da8b4c5278d
        • MD5 SHA1 SHA512 SSDEEP

        fontconfig.bfc

        • Path C:\Program Files\Java\jre7\lib\fontconfig.bfc
        • Size 4KB
        • SHA256 fe4ed39322c077d42635704fff5b61ca5de0467f2e88838f10dc8eaf75f400f8
        • MD5 SHA1 SHA512 SSDEEP

        fontconfig.properties.src

        • Path C:\Program Files\Java\jre7\lib\fontconfig.properties.src
        • Size 10KB
        • SHA256 19f5030372d333c2e81372476f3180e3323167b4a251ca5ac4cb5b4da438caf9
        • MD5 SHA1 SHA512 SSDEEP

        LucidaBrightDemiBold.ttf

        • Path C:\Program Files\Java\jre7\lib\fonts\LucidaBrightDemiBold.ttf
        • Size 74KB
        • SHA256 fc6f8f7cebd1e58a559d00a9bab9fa612deaf70427ee38538eee54bc4fc83259
        • MD5 SHA1 SHA512 SSDEEP

        LucidaBrightItalic.ttf

        • Path C:\Program Files\Java\jre7\lib\fonts\LucidaBrightItalic.ttf
        • Size 79KB
        • SHA256 20d332bd5e9064054c4cccca777af419644fb9ee675afaee2dc9ab10be2089d2
        • MD5 SHA1 SHA512 SSDEEP

        LucidaSansDemiBold.ttf

        • Path C:\Program Files\Java\jre7\lib\fonts\LucidaSansDemiBold.ttf
        • Size 311KB
        • SHA256 28511ce775219393089157b3904088503e03810057a3cf4e24d65e0787191af9
        • MD5 SHA1 SHA512 SSDEEP

        LucidaTypewriterBold.ttf

        • Path C:\Program Files\Java\jre7\lib\fonts\LucidaTypewriterBold.ttf
        • Size 229KB
        • SHA256 47db6ee613fadf8ce47736a5e0be56a7c66c89167cb81cc558116c5647658de5
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.67vsyfm705ocip9k1g0kj33655uhnul939974.wl8gq44r._locked

        • Path C:\Program Files\Java\jre7\lib\fonts\available_for_trial.67vsyfm705ocip9k1g0kj33655uhnul939974.wl8gq44r._locked
        • Size 237KB
        • SHA256 38d6bbe84091a26aecdf7f8b39d7f5642f1a9446f9ea6a2b7b42817bddd898fd
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.7305yzrk4.84k57r._locked

        • Path C:\Program Files\Java\jre7\lib\fonts\available_for_trial.7305yzrk4.84k57r._locked
        • Size 74KB
        • SHA256 1307b1f92c7fe50cbe69df89a1ac1e2e489c173064d6e1c4926ea6372d0a0431
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.pywfeyn6scj1it0tmcuim7213z65gb58sx141.yh46dmr._locked

        • Path C:\Program Files\Java\jre7\lib\fonts\available_for_trial.pywfeyn6scj1it0tmcuim7213z65gb58sx141.yh46dmr._locked
        • Size 682KB
        • SHA256 eadba932ad2f6716b20c5a6a299374b452b5d76b8dae06c00e35722f34ca4e98
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.s67p5cm5nzm7c04vb26u1adw2e.7une814iwr._locked

        • Path C:\Program Files\Java\jre7\lib\fonts\available_for_trial.s67p5cm5nzm7c04vb26u1adw2e.7une814iwr._locked
        • Size 337KB
        • SHA256 2013c87b4b3eab79c478771b2e18bd951217adacac88dbf67b4736b06fd3defc
        • MD5 SHA1 SHA512 SSDEEP

        default.jfc

        • Path C:\Program Files\Java\jre7\lib\jfr\default.jfc
        • Size 18KB
        • SHA256 030bb9d564453a36cd9b4945f8f0d6eecad42a08c44340944d200da0bf40b9b9
        • MD5 SHA1 SHA512 SSDEEP

        ef5g2il6592g03do580veiyoe31svi2n216yibhjryi.8p14j1wm6r._locked

        • Path C:\Program Files\Java\jre7\lib\jfr\ef5g2il6592g03do580veiyoe31svi2n216yibhjryi.8p14j1wm6r._locked
        • Size 18KB
        • SHA256 c4e0e591d4f2054950d4cbd2d8ffc4c4fdab45b846cc502991084a390bd02ae9
        • MD5 SHA1 SHA512 SSDEEP

        jfxrt.jar

        • Path C:\Program Files\Java\jre7\lib\jfxrt.jar
        • Size 127KB
        • SHA256 b2540c820eec985670d2a87d8dd3267e9247f5c5912891a83efa59ab0f8fff78
        • MD5 SHA1 SHA512 SSDEEP

        jua65p30u56k45r86083qu472pehxf7q2z8678.07br._locked

        • Path C:\Program Files\Java\jre7\lib\jua65p30u56k45r86083qu472pehxf7q2z8678.07br._locked
        • Size 8KB
        • SHA256 b22bd47d8106ea241aac6df455fcec7c8198abb22db29d06ed57dacf32d7baea
        • MD5 SHA1 SHA512 SSDEEP

        jmxremote.access

        • Path C:\Program Files\Java\jre7\lib\management\jmxremote.access
        • Size 4KB
        • SHA256 a68414cdb987d20f3f9b15d8f52605985f3cfc01f70aeb7e4457823feac4256a
        • MD5 SHA1 SHA512 SSDEEP

        management.properties

        • Path C:\Program Files\Java\jre7\lib\management\management.properties
        • Size 14KB
        • SHA256 3c64a55ed58b2c590e27ff375e30b56f8045efbfca8125711d647a9ee203aca2
        • MD5 SHA1 SHA512 SSDEEP

        blacklist

        • Path C:\Program Files\Java\jre7\lib\security\blacklist
        • Size 4KB
        • SHA256 fbab64b6266860d6f1de72190d80c7ecd193709601a07b3a88ea3eca96c32d4f
        • MD5 SHA1 SHA512 SSDEEP

        cacerts

        • Path C:\Program Files\Java\jre7\lib\security\cacerts
        • Size 97KB
        • SHA256 24495f11594a3558a4c5f0fce61467ec87587fbe27baa082d652c26de5c7c8ed
        • MD5 SHA1 SHA512 SSDEEP

        java.security

        • Path C:\Program Files\Java\jre7\lib\security\java.security
        • Size 18KB
        • SHA256 8d7a3f769936d5db3a2d70b8111d09cf295820d6a6cbb4959f396e18a726c276
        • MD5 SHA1 SHA512 SSDEEP

        w00b114al0w9bi824t66.690t5mwwr._locked

        • Path C:\Program Files\Java\jre7\lib\w00b114al0w9bi824t66.690t5mwwr._locked
        • Size 516KB
        • SHA256 500bf030335a84bdb2680cd82041d44b5f48f1505ca6ae591ff7d786ca05ff88
        • MD5 SHA1 SHA512 SSDEEP

        2r049c8h8qo83qp0dw7o7nvo8lfl9183q.62r._locked

        • Path C:\Program Files\Java\jre7\lib\zi\Asia\2r049c8h8qo83qp0dw7o7nvo8lfl9183q.62r._locked
        • Size 5KB
        • SHA256 993c370453d9b853525600f8da7f5cc352e818a21895fc87ba04ca3eb6a68458
        • MD5 SHA1 SHA512 SSDEEP

        7oq095vgb6kov7kmrdjuyi97.1t5xr._locked

        • Path C:\Program Files\Java\jre7\lib\zi\Asia\7oq095vgb6kov7kmrdjuyi97.1t5xr._locked
        • Size 5KB
        • SHA256 c309954597becd6ba69de27b3120aa3566ca83a231189a35a61806ba7fff0119
        • MD5 SHA1 SHA512 SSDEEP

        x6ps96p18om.8ihr._locked

        • Path C:\Program Files\Java\jre7\lib\zi\Asia\x6ps96p18om.8ihr._locked
        • Size 5KB
        • SHA256 05c4c1ab5792ac74b0093b94dc971f715921261c9963b75b9d2d40d0a390f245
        • MD5 SHA1 SHA512 SSDEEP

        ZoneInfoMappings

        • Path C:\Program Files\Java\jre7\lib\zi\ZoneInfoMappings
        • Size 17KB
        • SHA256 e44a78010d95102eef8ca3eced090250eeafde9c47b40c57d3cf02f6772bc9d2
        • MD5 SHA1 SHA512 SSDEEP

        vlc.mo

        • Path C:\Program Files\VideoLAN\VLC\locale\es\LC_MESSAGES\vlc.mo
        • Size 603KB
        • SHA256 13ea95484b15ef9cdd9d6219c020c8374680053b4077c56e7927219e2b8adb72
        • MD5 SHA1 SHA512 SSDEEP

        vlc.mo

        • Path C:\Program Files\VideoLAN\VLC\locale\km\LC_MESSAGES\vlc.mo
        • Size 845KB
        • SHA256 32cdb2fed02e7c53e36ee8833c44db32176b126f391a013633a56a73d9023c43
        • MD5 SHA1 SHA512 SSDEEP

        vlc.mo

        • Path C:\Program Files\VideoLAN\VLC\locale\ks_IN\LC_MESSAGES\vlc.mo
        • Size 664KB
        • SHA256 9e89bc05252a73383171e9ad08e89c1c44a7e0de657c3ea016f73544d7445c7b
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.pne2o8k.4h7p934r._locked

        • Path C:\Program Files\VideoLAN\VLC\locale\oc\LC_MESSAGES\available_for_trial.pne2o8k.4h7p934r._locked
        • Size 527KB
        • SHA256 4bc0adc683e863b98ccbac2f05cdfbf4388bdad9c483a10af747fa1bb5241b80
        • MD5 SHA1 SHA512 SSDEEP

        Pending.GRL

        • Path C:\ProgramData\Microsoft\MF\Pending.GRL
        • Size 15KB
        • SHA256 1e92063cf2bbb3094ced4014e2ae7e77daf908df182859fbe41d7736c9dcbb48
        • MD5 SHA1 SHA512 SSDEEP

        vc_runtimeAdditional_x64.msi

        • Path C:\ProgramData\Package Cache\{5740BD44-B58D-321A-AFC0-6D3D4556DD6C}v12.0.40660\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi
        • Size 140KB
        • SHA256 58c35f88434a2858d3ef969ee6b8b4ad36923dc4b699dd21f46879fe65d5a510
        • MD5 SHA1 SHA512 SSDEEP

        data_2

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_2
        • Size 8KB
        • SHA256 6bbef13cab37a8dd0aca052412f12d9523970a52b273ef776318567a0c46582c
        • MD5 SHA1 SHA512 SSDEEP

        data_0

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_0
        • Size 8KB
        • SHA256 b8fb5ae161451ed7adf7a57e9dc74bcefcc26f539a2b4077b58ba35c941a30c1
        • MD5 SHA1 SHA512 SSDEEP

        data_1

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1
        • Size 264KB
        • SHA256 e5e882add9ad977187f9facea3925a4f8e19f8780a0c5433d8290d67c6e9c14d
        • MD5 SHA1 SHA512 SSDEEP

        data_3

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_3
        • Size 8KB
        • SHA256 04e82d2264af2074764490c9a950924824b59b10f4f3558224650c32c3f6fa10
        • MD5 SHA1 SHA512 SSDEEP

        Login Data For Account

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
        • Size 46KB
        • SHA256 6704ea51a930f4c83f7f83e03869a907380d42a46b97ce3647a3f3659e56626a
        • MD5 SHA1 SHA512 SSDEEP

        Safe Browsing Cookies

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Safe Browsing Network\Safe Browsing Cookies
        • Size 20KB
        • SHA256 22d378dc23dee14ee44318c10f98eae50ac12923b48e1c2da2b2c18be37a752c
        • MD5 SHA1 SHA512 SSDEEP

        USA~dgov Updates~c News and Features~.feed-ms

        • Path C:\Users\Admin\AppData\Local\Microsoft\Feeds\Feeds for United States~\USA~dgov Updates~c News and Features~.feed-ms
        • Size 28KB
        • SHA256 ffe142ed80e1f1540e4eee44a6a161c1398664e796aa40c4f018f98926225ce4
        • MD5 SHA1 SHA512 SSDEEP

        724t9dn04008ddekzs.14ib8k2s0r._locked

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\724t9dn04008ddekzs.14ib8k2s0r._locked
        • Size 2.0MB
        • SHA256 b2fdf4830ca0584bbbf18788b86ee5a29615d7253bda3263d6bd57c72e4cdc0c
        • MD5 SHA1 SHA512 SSDEEP

        1ghifxz5x335jz9tfxx.4r._locked

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Backup\new\1ghifxz5x335jz9tfxx.4r._locked
        • Size 16KB
        • SHA256 59cd5a68a86455ed4a08ae973d6c5a8713b00dfdcf616d070d6edeb88d8dddef
        • MD5 SHA1 SHA512 SSDEEP

        t07df6us9b5h.7b1pr._locked

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Backup\new\t07df6us9b5h.7b1pr._locked
        • Size 2.0MB
        • SHA256 696de408c2dd391d6b4ee486b0d62b36bfbc04ddcb268f36f42cdc2ac315a7ed
        • MD5 SHA1 SHA512 SSDEEP

        Pretty_Peacock.jpg

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Pretty_Peacock.jpg
        • Size 5KB
        • SHA256 077e6878ff257cd9fc8800ce7c614dc23f21e30d77cde286fc3bcb4033696f1c
        • MD5 SHA1 SHA512 SSDEEP

        asrouter.ftl

        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jfsqt8yb.default-release\settings\main\ms-language-packs\browser\newtab\asrouter.ftl
        • Size 8KB
        • SHA256 17c979dcc7aedb45fa0e19a6ee642fea62c70202de1003c526570efb670cbc4c
        • MD5 SHA1 SHA512 SSDEEP

        1657114595AmcateirvtiSty.sqlite

        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jfsqt8yb.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite
        • Size 48KB
        • SHA256 740a8fdc955785b86611066c729846334b7c7a339e2e806625ef4c2f3f91b651
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.2cm8pype33t3pez024lvve5qdkj1p52act92t43867y0s.dr._locked

        • Path C:\available_for_trial.2cm8pype33t3pez024lvve5qdkj1p52act92t43867y0s.dr._locked
        • Size 82KB
        • SHA256 91727a61055f743ce7202ce119003773b23eb0b0b42a81ef8f87aff02d447ddb
        • MD5 SHA1 SHA512 SSDEEP

        how_to_decrypt.hta

        • Path C:\how_to_decrypt.hta
        • Size 11KB
        • SHA256 2effc728d10b6cc68a8765a4c975d079094b63f024fc2f02b8f21aea77a315f4
        • MD5 SHA1 SHA512 SSDEEP

        memory/2444-17-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/2444-2-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/2444-0-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/2444-6-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/2444-13-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/2444-29494-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/2444-1-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/2444-13388-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/2444-5-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/2444-40447-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/2444-42457-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/2444-42680-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/2444-44796-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/2444-58902-0x0000000000400000-0x0000000000463000-memory.dmp