Analysis

  • max time kernel
    150s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07/03/2024, 06:31

General

  • Target
    connhost.exe
  • Size 487KB
  • Sample240307-hag9wsfa39
  • SHA256 1c18ce93ce0c1ea0b0838da892dd33af031db3caf49e215dc3beb2c398c09508
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Trigona

    A ransomware first seen at the beginning of the 2022.

  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Drops desktop.ini file(s) 49 IoCs
  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\connhost.exe
    "C:\Users\Admin\AppData\Local\Temp\connhost.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    PID:1808

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        a86th615.8042e9rmcr._locked

        • Path C:\$Recycle.Bin\S-1-5-21-3452737119-3959686427-228443150-1000\a86th615.8042e9rmcr._locked
        • Size 2KB
        • SHA256 caeaf1f0907b906585e9f1df11a43de6a9e05859351db30278af8816b88ddb5c
        • MD5 SHA1 SHA512

        desktop.ini

        • Path C:\$Recycle.Bin\S-1-5-21-3452737119-3959686427-228443150-1000\desktop.ini
        • Size 922B
        • SHA256 17b169bfce909954c77f7b15110450186e01857b93f692d832df0c70b3b5e920
        • MD5 SHA1 SHA512

        branding.xml

        • Path C:\MSOCache\All Users\{90140000-0117-0409-0000-0000000FF1CE}-C\Access.en-us\branding.xml
        • Size 583KB
        • SHA256 aebc11ef4b6fdd7bf7152aa918d9919e1f460af8a81d96cd0ed8d758d7347d80
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.301alw6k2i12c78l.fj9hr._locked

        • Path C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\available_for_trial.301alw6k2i12c78l.fj9hr._locked
        • Size 102KB
        • SHA256 d047656327bd3dab2513c393e2256afe0475d9b32a625ebf0961f91c0559e6ae
        • MD5 SHA1 SHA512 SSDEEP

        r7kenj.e37589yn5r._locked

        • Path C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\r7kenj.e37589yn5r._locked
        • Size 23KB
        • SHA256 8d9b576fe29cd83ce39f5716bf940d8ab4aa2ac4b0f57e633c1577117b3732cc
        • MD5 SHA1 SHA512 SSDEEP

        DisplayLanguageNames.en_US_POSIX.txt

        • Path C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt
        • Size 28KB
        • SHA256 cad56034d5f01352ae1f3b076a67a38f48f984b2e58c01e1e180d2992003cfa9
        • MD5 SHA1 SHA512 SSDEEP

        04uu385zs54y8p.mr._locked

        • Path C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\04uu385zs54y8p.mr._locked
        • Size 5KB
        • SHA256 016098ba6c33646cebe6613d2da235481f958359c260ce6c2160684edfa01fb9
        • MD5 SHA1 SHA512 SSDEEP

        DW20.EXE

        • Path C:\Program Files (x86)\Common Files\microsoft shared\DW\DW20.EXE
        • Size 819KB
        • SHA256 13389880fdc9e7df0f16927298bcad2e146e2c2d9180a65f9b25b397fd45fa7e
        • MD5 SHA1 SHA512 SSDEEP

        DWTRIG20.EXE

        • Path C:\Program Files (x86)\Common Files\microsoft shared\DW\DWTRIG20.EXE
        • Size 508KB
        • SHA256 797bd15389c376690b4e12089658c19215c5e01cff7e922cf5284a69f63832c4
        • MD5 SHA1 SHA512 SSDEEP

        4l135k3py39rr.tu43e0r._locked

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\4l135k3py39rr.tu43e0r._locked
        • Size 5.5MB
        • SHA256 8604a7f0f1aa0477f4b965ce6cca36fb4edf1e89a819565123517f20fc57cbf5
        • MD5 SHA1 SHA512 SSDEEP

        0tt4o5nl2l6uhi1e3i5091363rv0lsyhb0uo0p57kc.22uoh2rr._locked

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\0tt4o5nl2l6uhi1e3i5091363rv0lsyhb0uo0p57kc.22uoh2rr._locked
        • Size 10KB
        • SHA256 9008bef6b7ae4f4e3b7948441ec6732715d36d833835abce73b03a61a97fdb3e
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.6ua6i41weaooc4.r97eu1451r._locked

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\available_for_trial.6ua6i41weaooc4.r97eu1451r._locked
        • Size 27KB
        • SHA256 8bf381099270ed0547176805f581a6e0b006f87319265271c5a857969e47732e
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.j3q2z5m04p01g313hcz6097h71x.386o272r._locked

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\available_for_trial.j3q2z5m04p01g313hcz6097h71x.386o272r._locked
        • Size 66KB
        • SHA256 aab4f14597872503cefb8c404bfe57f3bf0fcf0942588e92e2f7b865348c56b6
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.u.8r._locked

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\available_for_trial.u.8r._locked
        • Size 188KB
        • SHA256 201183599f438cba58f2243fbd4339257b4b0a139372d56eaa535e8f302459f9
        • MD5 SHA1 SHA512 SSDEEP

        z9lgsey5cq.y2g4iij84r._locked

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\z9lgsey5cq.y2g4iij84r._locked
        • Size 6KB
        • SHA256 82cb942c3089065ac60cdc12584ee3b02c3693afe7f2eb9e0cab07e977697290
        • MD5 SHA1 SHA512 SSDEEP

        97e48165rct2xp461m9mb0x503g8sdl23dgs.o88i9y884r._locked

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office64.WW\97e48165rct2xp461m9mb0x503g8sdl23dgs.o88i9y884r._locked
        • Size 5KB
        • SHA256 d5d3aae3e4a11a02e8d3a1edeefbbdcf24dce484147504d25343011aab266115
        • MD5 SHA1 SHA512 SSDEEP

        SETUP.XML

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML
        • Size 4KB
        • SHA256 1c87d78ff0c90401d10080619e4e91e53a19630fdb4cb7b076186e75a9595f8c
        • MD5 SHA1 SHA512 SSDEEP

        ProPlusWW.XML

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PROPLUS\ProPlusWW.XML
        • Size 17KB
        • SHA256 1c1790b491622c7296178aa25b4a70de7077e516c58f12ab0f67872d1fdc111e
        • MD5 SHA1 SHA512 SSDEEP

        SETUP.XML

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PROPLUS\SETUP.XML
        • Size 31KB
        • SHA256 6a13fb7c80df3773354e0112b8185a2fbe633deeda15769e6ac1a853392a99ba
        • MD5 SHA1 SHA512 SSDEEP

        SETUP.XML

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML
        • Size 6KB
        • SHA256 86e1461f9d444b3d6ecf55bc7c26f4b128853c91b346b171215c6fb2d2f8da2e
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.b4j4kqasmqy8o97i0kr3gj77n4f4u90v0lt8x3ipit.qr._locked

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\available_for_trial.b4j4kqasmqy8o97i0kr3gj77n4f4u90v0lt8x3ipit.qr._locked
        • Size 1.2MB
        • SHA256 9e9bfc16af9099b208ff52e04bafe341daf41452b0a5a888ea496a5507942918
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.m9ds824m3r6j5x5d58xf09515.cp3r._locked

        • Path C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\available_for_trial.m9ds824m3r6j5x5d58xf09515.cp3r._locked
        • Size 699KB
        • SHA256 6123e51d985d471887fa8bd71a9070befe8ffa2e21b4a7e3b54603e4e24d36f7
        • MD5 SHA1 SHA512 SSDEEP

        7p.mr._locked

        • Path C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\7p.mr._locked
        • Size 146KB
        • SHA256 940979441014f10b9f1bc05709055dd0bde54bd5687747923f74cc961534f51f
        • MD5 SHA1 SHA512 SSDEEP

        lmj9d872f.x447g3x06r._locked

        • Path C:\Program Files (x86)\Google\Update\1.3.36.151\lmj9d872f.x447g3x06r._locked
        • Size 168KB
        • SHA256 ac13e25ec1a042d11db4fbd56718b9589ef5bea7d87166cbee4e7f0366072515
        • MD5 SHA1 SHA512 SSDEEP

        762t0d48s4twy54gie813b.66r._locked

        • Path C:\Program Files (x86)\Google\Update\Install\{1FD4E3A4-6FE0-492C-90E9-7EE360CDB9FF}\762t0d48s4twy54gie813b.66r._locked
        • Size 44.4MB
        • SHA256 e2c4e12ecbb7b8298f7e79315ba2a163914cc7822b526975ee8d56fd417de517
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.717k6dx7u48ycvlg0i32eg2s96t3vi.1eeph591r._locked

        • Path C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\available_for_trial.717k6dx7u48ycvlg0i32eg2s96t3vi.1eeph591r._locked
        • Size 5KB
        • SHA256 d03ada09a82c6fc50b2a25cb58724ea19e8ee7da1e89f358e6ea0fe1470d662c
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.cb04c98u868kej1v59lt963lu5jpdwss.ihrje65br._locked

        • Path C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\available_for_trial.cb04c98u868kej1v59lt963lu5jpdwss.ihrje65br._locked
        • Size 5KB
        • SHA256 bd7453d59679650512068c83f5b8fb745f4bb21ad1606d85bed5284bd64dc755
        • MD5 SHA1 SHA512 SSDEEP

        20c9h6c8vtsz1eee1o9x6x27101f54s83.o4f4ir._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\20c9h6c8vtsz1eee1o9x6x27101f54s83.o4f4ir._locked
        • Size 128KB
        • SHA256 56173e0048a4ef9001cc06b7969596e91fadceea27d2a2510dad633b6983a59e
        • MD5 SHA1 SHA512 SSDEEP

        6rp6ga31p85t68ifs7f67bq5i8v4rj3239w3adgs.g686r._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\6rp6ga31p85t68ifs7f67bq5i8v4rj3239w3adgs.g686r._locked
        • Size 121KB
        • SHA256 ff4ede273cfe64780c93aa8d8ca1fd018c08dc0b58e79b2ae40d2a786939fe07
        • MD5 SHA1 SHA512 SSDEEP

        SCHEME54.CSS

        • Path C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME54.CSS
        • Size 124KB
        • SHA256 9d52d7abda459cf09131a6f148a4c120774bba3965ad2a42a89afd006c0cff15
        • MD5 SHA1 SHA512 SSDEEP

        26qiuf160987b24rgms37qfelds.47mmmghr._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\26qiuf160987b24rgms37qfelds.47mmmghr._locked
        • Size 257KB
        • SHA256 2ba7cbd4548b62b2cf4b94278c7f61ed917797130edd9dd897c08ada466bcc6d
        • MD5 SHA1 SHA512 SSDEEP

        9965v.4z92op9hr._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\9965v.4z92op9hr._locked
        • Size 331KB
        • SHA256 177fd6c93b8b6f212f33f39271b94a7f35dfd1e3970519cf0f6469be58cee110
        • MD5 SHA1 SHA512 SSDEEP

        DataViewIconImages.jpg

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\DataViewIconImages.jpg
        • Size 6KB
        • SHA256 0e4cc00f776f1fea5e6d9d0e2d10a2b038e3be6a21e494f1af93df277b48f074
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.46e2h16z56s76w22xi01r9ict5zkh2ole466ipj.q0738n0r._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\available_for_trial.46e2h16z56s76w22xi01r9ict5zkh2ole466ipj.q0738n0r._locked
        • Size 7KB
        • SHA256 3c7ba4f8c89e839c8e096d897faa7054652eb35d2859b4d20b72afc81622f4c1
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.bdd0r3g3l1gkemwcmp82d895758d8vl03o8y11s.1h4728m7r._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue\available_for_trial.bdd0r3g3l1gkemwcmp82d895758d8vl03o8y11s.1h4728m7r._locked
        • Size 7KB
        • SHA256 8caa5886eec1796aaa6c087f7fbb9182923c0dc648fe3b24947fef4d86579d1a
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.r5j.4b54y49p9r._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\available_for_trial.r5j.4b54y49p9r._locked
        • Size 27KB
        • SHA256 13de3448fd38a6c5f8baf1d804a8cc1bcb84e63d9d6fd48c753c4bf57c90de0c
        • MD5 SHA1 SHA512 SSDEEP

        ViewHeaderPreview.jpg

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\ViewHeaderPreview.jpg
        • Size 4KB
        • SHA256 7aeb181186e3099ed296dd8686ba355a2424831a02f72c1a6f5678a463314a11
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.7h16h3c99y8mz5r9c871m95u8k8go98uax45q477jis406.yr._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\available_for_trial.7h16h3c99y8mz5r9c871m95u8k8go98uax45q477jis406.yr._locked
        • Size 7KB
        • SHA256 870215f22a78a395aaedcbf77efa902d43a8d94287555251e7a8c0b0a98846bc
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.tqo7n0v.66xjf93ak4r._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\available_for_trial.tqo7n0v.66xjf93ak4r._locked
        • Size 20KB
        • SHA256 c35b2653b18a4e59ac9c7e450b785d2f586fc6484680db8c24695003d24af14f
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.34t9c1vglwk1khwxpc9ltizya.fr._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\available_for_trial.34t9c1vglwk1khwxpc9ltizya.fr._locked
        • Size 10KB
        • SHA256 33db7cb1c46e208fffae85c8d3f1eea2b5400bde44d67fd7343c096f843fe9a1
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.k5u69425a0s85o7yp58fyx6366d693oyq49230id7.u66r._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\available_for_trial.k5u69425a0s85o7yp58fyx6366d693oyq49230id7.u66r._locked
        • Size 5KB
        • SHA256 a9f70e9fe7ef1a98e901b2061450046e97a211f66f65ac2447e762559bd43220
        • MD5 SHA1 SHA512 SSDEEP

        bg_FormsHomePage.gif

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePage.gif
        • Size 90KB
        • SHA256 8e2c3963c637a3be2383730b1901d1d23bf5253d139b3da0053e782e2d6ac3ad
        • MD5 SHA1 SHA512 SSDEEP

        FORM.JS

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FORM.JS
        • Size 81KB
        • SHA256 7f3bb511e11ea38600ebb5fe0a8619690da357b656ae71385a616d9a5868ee84
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.kg278sx4xbnmw239w51u593et470um92zr3s93ec58919vb.j3uazv053jr._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\available_for_trial.kg278sx4xbnmw239w51u593et470um92zr3s93ec58919vb.j3uazv053jr._locked
        • Size 10KB
        • SHA256 5b6945d30918dbac8584b541234e802a32688dd16e773485e3729781dc12596d
        • MD5 SHA1 SHA512 SSDEEP

        macroprogress.gif

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\macroprogress.gif
        • Size 192KB
        • SHA256 86780bfe4cf0a2d37045246d31aefb60310aed54aed7606ba65efc233de046f3
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.6koeg1m50t33ze92.56j8351r._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\available_for_trial.6koeg1m50t33ze92.56j8351r._locked
        • Size 25KB
        • SHA256 592cc3c3b15012c035d5f708994833a56e7c7b206f6f036539a109b53e5c11f2
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.9i05ewz540.lo973ir._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\available_for_trial.9i05ewz540.lo973ir._locked
        • Size 21KB
        • SHA256 576626655dbe601b705d27a66e4c703c1fb00e3d6b620dcc0a85bbf9ee04c0bd
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.a07gh0b5s6l48n6abll6jcbck9995gr8m844agaq.9r._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\available_for_trial.a07gh0b5s6l48n6abll6jcbck9995gr8m844agaq.9r._locked
        • Size 6KB
        • SHA256 2af719ba5a81a8c306716e249342ef8816d52bd3ae09038f52b99f1dc485f17c
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.s442r4fi4uw82252420c0b85k2hs102t.o4u9p8kqr._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\available_for_trial.s442r4fi4uw82252420c0b85k2hs102t.o4u9p8kqr._locked
        • Size 6KB
        • SHA256 632196858fa538b6df0e5928ec0e9dc84e9b9637615d392ec71d6df0a7e3e92c
        • MD5 SHA1 SHA512 SSDEEP

        bg_Country.gif

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Country.gif
        • Size 32KB
        • SHA256 e58e918b1bceb0e0858856a73386134d9c30acca626d5dc52decc4a023904589
        • MD5 SHA1 SHA512 SSDEEP

        bg_Earthy.gif

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Earthy.gif
        • Size 5KB
        • SHA256 49fd3009ff0da8751de55b4c5f353e978929aff5b93d17660f11a6f1f3d498d5
        • MD5 SHA1 SHA512 SSDEEP

        bg_GreenTea.gif

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_GreenTea.gif
        • Size 22KB
        • SHA256 ddf365b60ace61b9be1afefefa8988c75537497dfbf90e4915d4d839d9671f9c
        • MD5 SHA1 SHA512 SSDEEP

        bg_LightSpirit.gif

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_LightSpirit.gif
        • Size 9KB
        • SHA256 b5d6ddaa23e67086128e0963b5fb338cd0ce047c412f0245aac79c09647fe769
        • MD5 SHA1 SHA512 SSDEEP

        bg_OliveGreen.gif

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_OliveGreen.gif
        • Size 16KB
        • SHA256 7ed24a275d525301c379be5815832c74bc18045cf94cf2470d0a393924d0caf9
        • MD5 SHA1 SHA512 SSDEEP

        bg_TexturedBlue.gif

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_TexturedBlue.gif
        • Size 7KB
        • SHA256 03f99d62742025ffbadafab666bc97117cfcf4f98e76e7c531c97f28da9350f7
        • MD5 SHA1 SHA512 SSDEEP

        bg_VelvetRose.gif

        • Path C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_VelvetRose.gif
        • Size 15KB
        • SHA256 a49e6d010a96c8e37fffcd8691a34d33fd24cb3a46320b69f06ac57539783a88
        • MD5 SHA1 SHA512 SSDEEP

        Microsoft.Office.InfoPath.xml

        • Path C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\Microsoft.Office.InfoPath.xml
        • Size 248KB
        • SHA256 2e1c0ef34630c874c3cb8c4b4ca104151faf1c3b8679cb87b364baa80be1d36d
        • MD5 SHA1 SHA512 SSDEEP

        OLKIRMV.XML

        • Path C:\Program Files (x86)\Microsoft Office\Office14\OLKIRMV.XML
        • Size 78KB
        • SHA256 d3836dbc26a2106d9b85539a371544bb1b9d38de67506135856d0ee23e7db630
        • MD5 SHA1 SHA512 SSDEEP

        WORDIRMV.XML

        • Path C:\Program Files (x86)\Microsoft Office\Office14\WORDIRMV.XML
        • Size 78KB
        • SHA256 6623ebabca723a7db6d833d5400c91015eae8ee6434816370b695e131e7c1c3f
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.c54e53qv2556pe6wl37z026456i760k824695p7n6vw.dx29f1r._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\available_for_trial.c54e53qv2556pe6wl37z026456i760k824695p7n6vw.dx29f1r._locked
        • Size 536KB
        • SHA256 3c2f9d02ee28da91e4a3e16c7c530337b4f76cedddab9760301df33d6db758c0
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.d6214friejso6mfh.v242n1hod9r._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\available_for_trial.d6214friejso6mfh.v242n1hod9r._locked
        • Size 1.0MB
        • SHA256 6c30311095fcda8563e55e27774e7d2b1eff4bd0fa4a25f2b3f963bcb2ec6ccd
        • MD5 SHA1 SHA512 SSDEEP

        p3t32j00qr14p75ynk532h.v641j1r._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\p3t32j00qr14p75ynk532h.v641j1r._locked
        • Size 78KB
        • SHA256 ddae469f9db97012b8147a0dafd766f2d233bc89420720bf7e0abe334b542275
        • MD5 SHA1 SHA512 SSDEEP

        rnwc5w46iq9.l77440t6r._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\rnwc5w46iq9.l77440t6r._locked
        • Size 78KB
        • SHA256 7fabd8ff03987af91d3190daea592fc26067ea3e781ade8c0c9e6b95654c7a4a
        • MD5 SHA1 SHA512 SSDEEP

        v20109y3z4988fc7ci88g4jd36r6h7y3696zn749657.b5541r._locked

        • Path C:\Program Files (x86)\Microsoft Office\Office14\v20109y3z4988fc7ci88g4jd36r6h7y3696zn749657.b5541r._locked
        • Size 78KB
        • SHA256 75fbf95b9313c174db3bda4a26a5a969b5eaaf6427caf6a59472a9d407651223
        • MD5 SHA1 SHA512 SSDEEP

        4jy836s9.1arhjttr._locked

        • Path C:\Program Files (x86)\Mozilla Maintenance Service\4jy836s9.1arhjttr._locked
        • Size 228KB
        • SHA256 3ff9ce9a08e92a0dfe89d832f298ba003317f8efc8fdd56260ef7d8d4dc6d393
        • MD5 SHA1 SHA512 SSDEEP

        74hfxn2.er._locked

        • Path C:\Program Files (x86)\Mozilla Maintenance Service\74hfxn2.er._locked
        • Size 101KB
        • SHA256 3ece0f1381fcae0f90d9814cdffa7bf0207a0937972464e3aad40b0e451620ae
        • MD5 SHA1 SHA512 SSDEEP

        setup.exe

        • Path C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\setup.exe
        • Size 4.3MB
        • SHA256 8598eed07c02b8de20fa67b022c48dfccdbfe610394ffdd547f3cbe3d5ca6b1b
        • MD5 SHA1 SHA512 SSDEEP

        ij

        • Path C:\Program Files\Java\jdk1.7.0_80\db\bin\ij
        • Size 6KB
        • SHA256 78341058f95979989da548680b4171ee2c8c6517eec690628f422b5265011d2a
        • MD5 SHA1 SHA512 SSDEEP

        COPYRIGHT

        • Path C:\Program Files\Java\jdk1.7.0_80\jre\COPYRIGHT
        • Size 4KB
        • SHA256 91ce63e30feda4c07f762b03a7fa203a7c9c28501cb7fee2a1829474326a30e6
        • MD5 SHA1 SHA512 SSDEEP

        THIRDPARTYLICENSEREADME-JAVAFX.txt

        • Path C:\Program Files\Java\jdk1.7.0_80\jre\THIRDPARTYLICENSEREADME-JAVAFX.txt
        • Size 109KB
        • SHA256 d9935952c1d2bf0d605fa205e4f38231c3c52829bef890f9d33bbfde82849807
        • MD5 SHA1 SHA512 SSDEEP

        THIRDPARTYLICENSEREADME.txt

        • Path C:\Program Files\Java\jdk1.7.0_80\jre\THIRDPARTYLICENSEREADME.txt
        • Size 173KB
        • SHA256 2479cedb56d024852a65b662d9e64dea3b2c6823565e91eb2a86ac7794a1f6d8
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.10fmti50pptqn7rz0he7lqc0766n17288e36.iu11k6r._locked

        • Path C:\Program Files\Java\jdk1.7.0_80\jre\bin\available_for_trial.10fmti50pptqn7rz0he7lqc0766n17288e36.iu11k6r._locked
        • Size 810KB
        • SHA256 648a664712c33dc2d80b7728c4281b08f2e60b9edde51b2f1e8db0f97ddecdf1
        • MD5 SHA1 SHA512 SSDEEP

        messages_zh_TW.properties

        • Path C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_zh_TW.properties
        • Size 4KB
        • SHA256 e9e9da93b227c7749b735032643a78239cc27cef106c20ea0c0701bf86fbe1a1
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.0334z9ok26i09.xo3r._locked

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\available_for_trial.0334z9ok26i09.xo3r._locked
        • Size 6KB
        • SHA256 98d7c0e53d910c566890ff8850c1eb3e995ef96e254573202404e142fba2ddeb
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.2346qg857ved450ebh87609l4dy4i9ib4fmp9934.0rpn5r._locked

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\available_for_trial.2346qg857ved450ebh87609l4dy4i9ib4fmp9934.0rpn5r._locked
        • Size 21KB
        • SHA256 0a7ae0791f3c3c1e51c956d35d3424973833f1fde0c8b950609bd52a8d0020b9
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.6k4084.cr._locked

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\available_for_trial.6k4084.cr._locked
        • Size 16KB
        • SHA256 a0f3754de8c6ad8219f4487f2cb0ae1b0a53f60a82b60c9a934130e2dcf4e33c
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.yf0g238.1jtr._locked

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\available_for_trial.yf0g238.1jtr._locked
        • Size 7KB
        • SHA256 45a3385733cb911512cf5601887ea9243a14212a25b9a4eb5e09a22cc79046aa
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.439g20159b2qyh46g8y7t.fr._locked

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\available_for_trial.439g20159b2qyh46g8y7t.fr._locked
        • Size 13KB
        • SHA256 52b119bdcf8ba6eb59eecee70ac8d09ca90fc7410418fbd377a36d09be5df2a2
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.y6e010a7r422h532ub5613edpgeimv990ib3gupb2n3.33au66026or._locked

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\available_for_trial.y6e010a7r422h532ub5613edpgeimv990ib3gupb2n3.33au66026or._locked
        • Size 9KB
        • SHA256 738432da43781256116f066d29c9864e258b1a4044e3d85e209088d5b2ac3719
        • MD5 SHA1 SHA512 SSDEEP

        ECLIPSE_.RSA

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\ECLIPSE_.RSA
        • Size 8KB
        • SHA256 ed300913d9f7ab7a9abe6bb540dd70675e388e24e57f934f065a731669dbbd9c
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.dhc633f03vs3o248f702j1lpwwh034504418d6b3v75i.gp4r._locked

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\available_for_trial.dhc633f03vs3o248f702j1lpwwh034504418d6b3v75i.gp4r._locked
        • Size 11KB
        • SHA256 79901c62bf34d2042d84fcc4297fe4695a9d7da911dff4c9f9afc26ffaa74268
        • MD5 SHA1 SHA512 SSDEEP

        rf8k9u22f2jzacf0m2ghy0xgq31417.5w09y6axr._locked

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\rf8k9u22f2jzacf0m2ghy0xgq31417.5w09y6axr._locked
        • Size 8KB
        • SHA256 c914acce9a8e735d8edb17668f7bd07f843575c85f839420d0959b1a97270dc7
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.i08333f3a3y93mtt28i915yn9myvyu4e540q4y65t21.td4a6qm38mr._locked

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\available_for_trial.i08333f3a3y93mtt28i915yn9myvyu4e540q4y65t21.td4a6qm38mr._locked
        • Size 14KB
        • SHA256 cdf75f89577ac12526c89e6d91ffe736f8f818cd8fcd996ebb7f227d48c43713
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.357vwg405ublsl520ulc7t46tpf.hv5ir._locked

        • Path C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\available_for_trial.357vwg405ublsl520ulc7t46tpf.hv5ir._locked
        • Size 16KB
        • SHA256 3b537d4fc94a84adb7995aba6f2d2772510a661dec44bf22b1cc9e01d67f2a3f
        • MD5 SHA1 SHA512 SSDEEP

        2d05vbu0b26588ohz1u95zlp6fdn.213r._locked

        • Path C:\Program Files\Java\jre7\lib\2d05vbu0b26588ohz1u95zlp6fdn.213r._locked
        • Size 12.9MB
        • SHA256 25af11e810922f0b6abd1fc89402d5e0ce7b0bc7b11791ce9a10be7ed2a0dd12
        • MD5 SHA1 SHA512 SSDEEP

        6.7e95r._locked

        • Path C:\Program Files\Java\jre7\lib\6.7e95r._locked
        • Size 1.8MB
        • SHA256 243a30b1dd2413e2239e7ffce6b7867a14fab5629955fbe2ad1ea0fcc72182ec
        • MD5 SHA1 SHA512 SSDEEP

        7dbj122961uz1fg46flk7sw807739qp878451bmvh53g7twl.tr._locked

        • Path C:\Program Files\Java\jre7\lib\7dbj122961uz1fg46flk7sw807739qp878451bmvh53g7twl.tr._locked
        • Size 882KB
        • SHA256 b81357b0a5dab027095d3a7a02f2a2db96fb96df4754a9a5882ea6f934cf34d8
        • MD5 SHA1 SHA512 SSDEEP

        alt-rt.jar

        • Path C:\Program Files\Java\jre7\lib\alt-rt.jar
        • Size 169KB
        • SHA256 57d27fced66c59db48006be2bc1cbc4e0369b0b556516ca32468ee4d941048c8
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.29y6rzvsxhb.br._locked

        • Path C:\Program Files\Java\jre7\lib\available_for_trial.29y6rzvsxhb.br._locked
        • Size 11KB
        • SHA256 6bb815235bac57c93ef6cf848dc4544805397fda13913c53b6033a294a2accbd
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.3aznuyy1046vfs175mqg48ozl5s20y.2i639hs5r._locked

        • Path C:\Program Files\Java\jre7\lib\available_for_trial.3aznuyy1046vfs175mqg48ozl5s20y.2i639hs5r._locked
        • Size 6KB
        • SHA256 3672429b0cf990e0252850b323344cf63b934c9d20efceeba9fba2bed44eab7e
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.4e3cwtj77o7lbi76c.i882ar._locked

        • Path C:\Program Files\Java\jre7\lib\available_for_trial.4e3cwtj77o7lbi76c.i882ar._locked
        • Size 10KB
        • SHA256 90637a0424bd9af453d24d215d19d3df80db77911820dd2b00757898a955b674
        • MD5 SHA1 SHA512 SSDEEP

        bk82gz5d5cwfr.vcr9g3mr._locked

        • Path C:\Program Files\Java\jre7\lib\bk82gz5d5cwfr.vcr9g3mr._locked
        • Size 4.5MB
        • SHA256 558859659b7989f2fe484fa140d3e8095a34f7cfa9d8042a9c2256365806ca5c
        • MD5 SHA1 SHA512 SSDEEP

        63f1zl45bei3.v2kcr._locked

        • Path C:\Program Files\Java\jre7\lib\cmm\63f1zl45bei3.v2kcr._locked
        • Size 268KB
        • SHA256 e443dd03fae36f7f4190568e7ac7397d54f4dc81aa16daad03f4d9ddaac9d0ec
        • MD5 SHA1 SHA512 SSDEEP

        9lhyvuc33f23r12lif727l.j2r._locked

        • Path C:\Program Files\Java\jre7\lib\cmm\9lhyvuc33f23r12lif727l.j2r._locked
        • Size 50KB
        • SHA256 c0f2780335e092a13f61809e65edc65deb7ce70752fd5b1a3ff9942cc3c601ab
        • MD5 SHA1 SHA512 SSDEEP

        currency.data

        • Path C:\Program Files\Java\jre7\lib\currency.data
        • Size 4KB
        • SHA256 d137a8fffda9080e08dfbfbbab69cc753baab6b0f28304af5c30ab35acede834
        • MD5 SHA1 SHA512 SSDEEP

        6d.ph1xy1r._locked

        • Path C:\Program Files\Java\jre7\lib\deploy\6d.ph1xy1r._locked
        • Size 18KB
        • SHA256 e13085ba2aa1c5c13463352797cdd99eda2cfc32cd437cb81813c9069ee80ecf
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.22bb926vh828k0u198n56r697qyex.6r._locked

        • Path C:\Program Files\Java\jre7\lib\deploy\available_for_trial.22bb926vh828k0u198n56r697qyex.6r._locked
        • Size 14KB
        • SHA256 b7774332cfa79d0fa1a65cf112fa7ec1f7b564d211c003778e1b6af9e9049e1d
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.6gtkl63050dx8u.s9y58r._locked

        • Path C:\Program Files\Java\jre7\lib\deploy\available_for_trial.6gtkl63050dx8u.s9y58r._locked
        • Size 6KB
        • SHA256 828c54bcf83134f50cab20eb97b289d01c55dd50f3193016d1af8bd920ef8a8d
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.9nih9nj2tu72m860.635mr._locked

        • Path C:\Program Files\Java\jre7\lib\deploy\available_for_trial.9nih9nj2tu72m860.635mr._locked
        • Size 6KB
        • SHA256 dd35a1eb594b09c292a45861240e4eb9aa33c15bbbd64cc8edbe52fdde05bae6
        • MD5 SHA1 SHA512 SSDEEP

        messages_es.properties

        • Path C:\Program Files\Java\jre7\lib\deploy\messages_es.properties
        • Size 4KB
        • SHA256 27e45abb58ffcd6de187abefd016a97ea46a92dbf98b7680777fccf0f0773f5e
        • MD5 SHA1 SHA512 SSDEEP

        messages_fr.properties

        • Path C:\Program Files\Java\jre7\lib\deploy\messages_fr.properties
        • Size 4KB
        • SHA256 b12503ab55af63d6ff47363a86180ea2d2fed09a1d3d35fdcfcba639bac0a154
        • MD5 SHA1 SHA512 SSDEEP

        messages_sv.properties

        • Path C:\Program Files\Java\jre7\lib\deploy\messages_sv.properties
        • Size 4KB
        • SHA256 8eed5d06ee0bc2782c5b4a27040d4a2943a9f5ffc3244d9f62f5b356520ea84b
        • MD5 SHA1 SHA512 SSDEEP

        messages_zh_CN.properties

        • Path C:\Program Files\Java\jre7\lib\deploy\messages_zh_CN.properties
        • Size 4KB
        • SHA256 ed3b04c64c472decdfc5627ceeffda2da181bac1ab213caeb1a3cbf321e027e4
        • MD5 SHA1 SHA512 SSDEEP

        dlw54a048w1t2s9rl.lxn2h0r._locked

        • Path C:\Program Files\Java\jre7\lib\dlw54a048w1t2s9rl.lxn2h0r._locked
        • Size 521KB
        • SHA256 208bece0688492c66a461bfaea98081d4a29e81659518c8f15422d229713bcfa
        • MD5 SHA1 SHA512 SSDEEP

        dmc04c20dyq98jsa.834k48r._locked

        • Path C:\Program Files\Java\jre7\lib\dmc04c20dyq98jsa.834k48r._locked
        • Size 8KB
        • SHA256 1980e28ced39da298fd6889e320fa0999b7cd776ea03271ee4c9f16dfe92279c
        • MD5 SHA1 SHA512 SSDEEP

        1n3kujj973q77.427786o12wr._locked

        • Path C:\Program Files\Java\jre7\lib\ext\1n3kujj973q77.427786o12wr._locked
        • Size 16KB
        • SHA256 cb570c06ec864b5c94e429affe19fb97a0a79d5e7b1bdcb90c9cce9695bc0962
        • MD5 SHA1 SHA512 SSDEEP

        60d13397.fq19ivh608r._locked

        • Path C:\Program Files\Java\jre7\lib\ext\60d13397.fq19ivh608r._locked
        • Size 31KB
        • SHA256 02d6de127019a810528eb0201cf819b4dca73392ce53ca7a4353e5c62ec7077c
        • MD5 SHA1 SHA512 SSDEEP

        66h49d09.q67503zvrfr._locked

        • Path C:\Program Files\Java\jre7\lib\ext\66h49d09.q67503zvrfr._locked
        • Size 194KB
        • SHA256 9ef504ee93fc1d1beb079c001ebdb94ed15406a68d4a26747132a52a634e5682
        • MD5 SHA1 SHA512 SSDEEP

        850t1hjohd8zyq3h3u3823p441z8i0f468i66z9xo5x09.s2a9l2w36r._locked

        • Path C:\Program Files\Java\jre7\lib\ext\850t1hjohd8zyq3h3u3823p441z8i0f468i66z9xo5x09.s2a9l2w36r._locked
        • Size 222KB
        • SHA256 953fcb3244c8be27defef78041b134b3c7350edc0689fff2a527535af6f6922b
        • MD5 SHA1 SHA512 SSDEEP

        8c226w37ng53q5542fi7bdvbx4usxf10g1oys5ld.6retx3840r._locked

        • Path C:\Program Files\Java\jre7\lib\ext\8c226w37ng53q5542fi7bdvbx4usxf10g1oys5ld.6retx3840r._locked
        • Size 9KB
        • SHA256 51bac448780cc7fae22e2931df19dbc36a8757168a80f41eda10d3bfe6187ac1
        • MD5 SHA1 SHA512 SSDEEP

        el95rzqf37z76sw40.qr._locked

        • Path C:\Program Files\Java\jre7\lib\ext\el95rzqf37z76sw40.qr._locked
        • Size 43KB
        • SHA256 4fafb1071814bc41feedacb1187e3809f1df69c1605c1860f384369cabb9dc90
        • MD5 SHA1 SHA512 SSDEEP

        qd1a1f0g9nl9158s551e413f47.ir._locked

        • Path C:\Program Files\Java\jre7\lib\ext\qd1a1f0g9nl9158s551e413f47.ir._locked
        • Size 67KB
        • SHA256 5f5244bae045acb5d1bba38518ebccdc58d842b1741a99db7bc4fdd677fe03ab
        • MD5 SHA1 SHA512 SSDEEP

        flavormap.properties

        • Path C:\Program Files\Java\jre7\lib\flavormap.properties
        • Size 4KB
        • SHA256 7aa7042bb8d054aab6ee4026551dbfd7b17cf7d2a8d6a3fb03de881671b68278
        • MD5 SHA1 SHA512 SSDEEP

        fontconfig.bfc

        • Path C:\Program Files\Java\jre7\lib\fontconfig.bfc
        • Size 4KB
        • SHA256 eebf666a13593281a29347686b4ac1aa36e23d91f48970292116e05865adc6da
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.0iu58.5c3nr._locked

        • Path C:\Program Files\Java\jre7\lib\fonts\available_for_trial.0iu58.5c3nr._locked
        • Size 74KB
        • SHA256 85d34ac7326a8cf2cd1bf4d7c7fce74762d0ee0126bea9adeee943fb4871c6a5
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.1.d740sxr._locked

        • Path C:\Program Files\Java\jre7\lib\fonts\available_for_trial.1.d740sxr._locked
        • Size 79KB
        • SHA256 12499ed2641f456e38985ae5c3ab62974139cc8a480317ea232561241fc6c467
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.486yw46o5vtf16xznyki2i1.vl74ajpmxr._locked

        • Path C:\Program Files\Java\jre7\lib\fonts\available_for_trial.486yw46o5vtf16xznyki2i1.vl74ajpmxr._locked
        • Size 311KB
        • SHA256 2a5dd50830afa5dc01a636dc4ca92c5c0346f3251381a9f63de6582c1f7e185f
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.50bq8gl.op5vr._locked

        • Path C:\Program Files\Java\jre7\lib\fonts\available_for_trial.50bq8gl.op5vr._locked
        • Size 229KB
        • SHA256 3ef4044ddef8ee21946a55b62736a52ffa2ec7c42c78baf7d57bd62e3c18369f
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.h2s8j2z35bf133031u2524n5s0u29165.7ex9r._locked

        • Path C:\Program Files\Java\jre7\lib\fonts\available_for_trial.h2s8j2z35bf133031u2524n5s0u29165.7ex9r._locked
        • Size 337KB
        • SHA256 7f2e8f0e0a3f5dc1e043a197b99ab0c5fce1f9257d33fc177446687ac08fb828
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.o3sam237w7v47y732rco53t273451fj3xs0w524oo.3r._locked

        • Path C:\Program Files\Java\jre7\lib\fonts\available_for_trial.o3sam237w7v47y732rco53t273451fj3xs0w524oo.3r._locked
        • Size 682KB
        • SHA256 442746ee04dc5e366ae2e2cfc54d7a67a3d938e7285b7b20fc6d70c40456b5b6
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.qor2tk16v8eegzgfq98q8698m3t79c8h0oqpf8o.9zb7sqr._locked

        • Path C:\Program Files\Java\jre7\lib\fonts\available_for_trial.qor2tk16v8eegzgfq98q8698m3t79c8h0oqpf8o.9zb7sqr._locked
        • Size 237KB
        • SHA256 33b6a8144ef19a5fda48dd5c4c027575f9d399737ea8567dcf74fcc9fbba4544
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.tb850iof4b97g55on357t55435v2x33447x.sjlr._locked

        • Path C:\Program Files\Java\jre7\lib\fonts\available_for_trial.tb850iof4b97g55on357t55435v2x33447x.sjlr._locked
        • Size 74KB
        • SHA256 1266d39ea15c3bf9770b4a94a3e50cbfaaa0a16de34f8c8145a5f36d5ed8408b
        • MD5 SHA1 SHA512 SSDEEP

        profile.jfc

        • Path C:\Program Files\Java\jre7\lib\jfr\profile.jfc
        • Size 18KB
        • SHA256 5a13dceb2df27e2fe1c4bfef98adb0915d4740f6143edfbcb7c66958da8d136e
        • MD5 SHA1 SHA512 SSDEEP

        z5tqdl8j38q7525edrqj6e3jwj5b7ymeol8g8y0qbv4lc.ypwfetvr._locked

        • Path C:\Program Files\Java\jre7\lib\jfr\z5tqdl8j38q7525edrqj6e3jwj5b7ymeol8g8y0qbv4lc.ypwfetvr._locked
        • Size 18KB
        • SHA256 e62282978aa1c71a2bb2506119df81c62fc74c917b63167e9fafd1a3dd55d996
        • MD5 SHA1 SHA512 SSDEEP

        jvm.hprof.txt

        • Path C:\Program Files\Java\jre7\lib\jvm.hprof.txt
        • Size 4KB
        • SHA256 872423810515ead6106c54b77078a893f401ce70b666f552c9c3fef397b9933c
        • MD5 SHA1 SHA512 SSDEEP

        ls6j42ya.926r._locked

        • Path C:\Program Files\Java\jre7\lib\ls6j42ya.926r._locked
        • Size 109KB
        • SHA256 690f6b202d2e7d8ebcc6e82895dfa1fab22041f6f3ce7b09d5d1519708a45abf
        • MD5 SHA1 SHA512 SSDEEP

        m11r0t9497bkbc125zcuqm4izo48ygr6pvt.9iv9yg19wbr._locked

        • Path C:\Program Files\Java\jre7\lib\m11r0t9497bkbc125zcuqm4izo48ygr6pvt.9iv9yg19wbr._locked
        • Size 74KB
        • SHA256 6ccd9da30d959eaf6ba04a4a1125b7649efd9f54a2921fe902060a26d5f9d9e0
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.5a1f.m99lr._locked

        • Path C:\Program Files\Java\jre7\lib\management\available_for_trial.5a1f.m99lr._locked
        • Size 14KB
        • SHA256 e25dc7b4b9487bd21a96576a48b00e48c6a705d98b17bb2aecd903df84f3e0b0
        • MD5 SHA1 SHA512 SSDEEP

        jmxremote.access

        • Path C:\Program Files\Java\jre7\lib\management\jmxremote.access
        • Size 4KB
        • SHA256 2c16acb8dde614fcfdbccf90943b6f8fd46c36c3d589ae8e3edc0ea51abc4693
        • MD5 SHA1 SHA512 SSDEEP

        snmp.acl.template

        • Path C:\Program Files\Java\jre7\lib\management\snmp.acl.template
        • Size 4KB
        • SHA256 ff689d61c2ecc548447b695d6dfd6db3ff794be0c4c1e358b20914aafa64ce4d
        • MD5 SHA1 SHA512 SSDEEP

        r.h43r._locked

        • Path C:\Program Files\Java\jre7\lib\r.h43r._locked
        • Size 2.3MB
        • SHA256 9cced42feab0ae48935cdb9ed6e94f0d3fe70ebd34e9b740f814ec80670e7ac9
        • MD5 SHA1 SHA512 SSDEEP

        67k49757c54c2dls3j32r93d1du3ek2s5l9t8chlfh5s0e.6gn204f88r._locked

        • Path C:\Program Files\Java\jre7\lib\security\67k49757c54c2dls3j32r93d1du3ek2s5l9t8chlfh5s0e.6gn204f88r._locked
        • Size 18KB
        • SHA256 d84df66b840870352ab7d3c12e1c759feb827a20f15f536de001e0cfbe31dc24
        • MD5 SHA1 SHA512 SSDEEP

        blacklist

        • Path C:\Program Files\Java\jre7\lib\security\blacklist
        • Size 4KB
        • SHA256 b62b595c42fe99d42cddc38e0d0242e70178d933ee8812297fbe181a8f23c7b5
        • MD5 SHA1 SHA512 SSDEEP

        eavf5pzhh70k9r9188msi.276hqr._locked

        • Path C:\Program Files\Java\jre7\lib\security\eavf5pzhh70k9r9188msi.276hqr._locked
        • Size 97KB
        • SHA256 01664eea618415915ccc5c70f9ada663bda49cc49830a78737f9f32836960d51
        • MD5 SHA1 SHA512 SSDEEP

        6d270zm9ex59p8i411s5207n58xb014gr2r9y13rl92.49hz7915r._locked

        • Path C:\Program Files\Java\jre7\lib\zi\6d270zm9ex59p8i411s5207n58xb014gr2r9y13rl92.49hz7915r._locked
        • Size 17KB
        • SHA256 adee01614098b7f744f09459ab9cddc077fe5d8055f9d1e8858f7f226a43296d
        • MD5 SHA1 SHA512 SSDEEP

        9puous75ad2dfo60ng948br2xlj87oqtg5wzwr479737.m4m96r._locked

        • Path C:\Program Files\Java\jre7\lib\zi\Asia\9puous75ad2dfo60ng948br2xlj87oqtg5wzwr479737.m4m96r._locked
        • Size 5KB
        • SHA256 70c457f0f7bc1ea6bedf67c45c308713cf69afee95b3854ba7332295db7ad4f9
        • MD5 SHA1 SHA512 SSDEEP

        qndgsp11l68b4s603603o19ygahjj6q9djc.2up8r._locked

        • Path C:\Program Files\Java\jre7\lib\zi\Asia\qndgsp11l68b4s603603o19ygahjj6q9djc.2up8r._locked
        • Size 5KB
        • SHA256 408a3c39fd79ed3d775ff20305e4918f107b17a2bc83c647d915139a2cfb36b0
        • MD5 SHA1 SHA512 SSDEEP

        w362qvuhw5h6n6r48phx6jik7u.ns2172wbzxr._locked

        • Path C:\Program Files\Java\jre7\lib\zi\Asia\w362qvuhw5h6n6r48phx6jik7u.ns2172wbzxr._locked
        • Size 5KB
        • SHA256 c7e5c94fe2a90eb05de11d8a8eee21f3db549e63a1490678f1757bab9ccb2066
        • MD5 SHA1 SHA512 SSDEEP

        vlc.mo

        • Path C:\Program Files\VideoLAN\VLC\locale\es\LC_MESSAGES\vlc.mo
        • Size 603KB
        • SHA256 92feca5ce106c577d1e1683668ed1938ce2855101f35e91dac9a1e5ae92b5b87
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.0up2k7.mj4zr._locked

        • Path C:\Program Files\VideoLAN\VLC\locale\km\LC_MESSAGES\available_for_trial.0up2k7.mj4zr._locked
        • Size 845KB
        • SHA256 5690dd95a5890f33e7a0fab02bec0899387820d38c9bd41e1433c62afcdd4f7f
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.674144u80fcpah1lvy.r19k6jtr._locked

        • Path C:\Program Files\VideoLAN\VLC\locale\ks_IN\LC_MESSAGES\available_for_trial.674144u80fcpah1lvy.r19k6jtr._locked
        • Size 664KB
        • SHA256 888450d9b1512dcb4a6f585486ec37f4dee44a45ee9cb2b06d8a0aa71297c963
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.k5hx73pj3731y02.xt9w78zdr._locked

        • Path C:\Program Files\VideoLAN\VLC\locale\oc\LC_MESSAGES\available_for_trial.k5hx73pj3731y02.xt9w78zdr._locked
        • Size 527KB
        • SHA256 82d212fefa44c9511e419d33fb9f7a0796a6bbddb9c838e0820cc6bab3be3564
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.m045l596vm06bzpn67ksj08lq04c9t.m78317emr._locked

        • Path C:\ProgramData\Microsoft\MF\available_for_trial.m045l596vm06bzpn67ksj08lq04c9t.m78317emr._locked
        • Size 15KB
        • SHA256 26d19d46989ad1375c9f04611678764f76b401e6c278bb887ed167d7ceaa7ad5
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.01933lml6w14r41g3v3cbybs801.46oor._locked

        • Path C:\ProgramData\Package Cache\{5740BD44-B58D-321A-AFC0-6D3D4556DD6C}v12.0.40660\packages\vcRuntimeAdditional_amd64\available_for_trial.01933lml6w14r41g3v3cbybs801.46oor._locked
        • Size 140KB
        • SHA256 fb249e901206dfa8a8b0dbdbe51eab04dbbe89e3a44526d9e262935e723d00f9
        • MD5 SHA1 SHA512 SSDEEP

        data_2

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_2
        • Size 8KB
        • SHA256 9756cb883c9968eb17a9bae6948ce915674f96a0bfa5f6f3d737360ef681750d
        • MD5 SHA1 SHA512 SSDEEP

        data_0

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_0
        • Size 8KB
        • SHA256 e9a566a6856d3c79f42c56d915838d499bf823f96c05f5e9293c72ff9013a7bf
        • MD5 SHA1 SHA512 SSDEEP

        data_1

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1
        • Size 264KB
        • SHA256 6fb2e5e820ce44437a295b4b58342d3634e27830af770ca27f475f1bd1bcb987
        • MD5 SHA1 SHA512 SSDEEP

        data_3

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_3
        • Size 8KB
        • SHA256 351259a92b5eaa0d06d0e742ca3381c79fe5407c2b4f31317be66cf87adb16c2
        • MD5 SHA1 SHA512 SSDEEP

        index

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\index
        • Size 257KB
        • SHA256 7592f8e22d0a6e80669d53b9cb91aa9f4484195f547c7bb1c30603b934896a4c
        • MD5 SHA1 SHA512 SSDEEP

        Login Data For Account

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
        • Size 46KB
        • SHA256 815df8137fc640b2d565d5ff8498195a64e36b13d31856fb23aab49eb7d230cd
        • MD5 SHA1 SHA512 SSDEEP

        Safe Browsing Cookies

        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Safe Browsing Network\Safe Browsing Cookies
        • Size 20KB
        • SHA256 bee593b68e4ef07a01ac999af979ac3786473b91e014b0a5d067efe30da9da4e
        • MD5 SHA1 SHA512 SSDEEP

        09n6g97i15uy1lff3rev722xy.vr._locked

        • Path C:\Users\Admin\AppData\Local\Microsoft\Feeds\Feeds for United States~\09n6g97i15uy1lff3rev722xy.vr._locked
        • Size 28KB
        • SHA256 aacba705df83ed014af5de2f16ea4309d5f198b33f72bf52ddd5afdc49ae4cf7
        • MD5 SHA1 SHA512 SSDEEP

        sgb8243844jr0u894f4i3s.l23r._locked

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Backup\new\sgb8243844jr0u894f4i3s.l23r._locked
        • Size 2.0MB
        • SHA256 f1adaa82c7a1d37e4f560864bc7b378860ed1758907f80dc01b2ce5ade1075b0
        • MD5 SHA1 SHA512 SSDEEP

        t30x99iw16n5r8h88ttbmxb22dq7z4ygp5tq2fcm5v7eqz.78n5c1gt78r._locked

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Backup\new\t30x99iw16n5r8h88ttbmxb22dq7z4ygp5tq2fcm5v7eqz.78n5c1gt78r._locked
        • Size 16KB
        • SHA256 2338faf03f72ebaa9979513951760293054c98c1b90ad0eb1d20994e494e288d
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.pg.7662yr5ju2r._locked

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\available_for_trial.pg.7662yr5ju2r._locked
        • Size 5KB
        • SHA256 18a3f696bac2e2e57aed084fb35afa732be5641c1d7fa01fad97b010812612a2
        • MD5 SHA1 SHA512 SSDEEP

        r7z694t635l1k9rbx7mo491i7wu38xqg1uv56z5s97c.ir._locked

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\r7z694t635l1k9rbx7mo491i7wu38xqg1uv56z5s97c.ir._locked
        • Size 2.0MB
        • SHA256 bff01944fd14305ac81bc56ce682c4996b10994edb5137739c739af96997e43c
        • MD5 SHA1 SHA512 SSDEEP

        asrouter.ftl

        • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ifb4waqr.default-release\settings\main\ms-language-packs\browser\newtab\asrouter.ftl
        • Size 8KB
        • SHA256 6c84896a97e9ebf8bd927037b4ae842b13434ecd40091c8c1082fd8a1d2b76df
        • MD5 SHA1 SHA512 SSDEEP

        1657114595AmcateirvtiSty.sqlite

        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ifb4waqr.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite
        • Size 48KB
        • SHA256 52515a7ec8d237cb1b301dab1c62d158d93983e3d63f941506bfe377de3ff46e
        • MD5 SHA1 SHA512 SSDEEP

        available_for_trial.9.ot7r._locked

        • Path C:\available_for_trial.9.ot7r._locked
        • Size 82KB
        • SHA256 50cf2f092c68380fd8a9c328f396164303a57ad8aa036bc07a141f8502c241ee
        • MD5 SHA1 SHA512 SSDEEP

        how_to_decrypt.hta

        • Path C:\how_to_decrypt.hta
        • Size 11KB
        • SHA256 0004b41688794e2ed45fc5b991b18c2dc52e72be31d5ad508883edcc5241d883
        • MD5 SHA1 SHA512 SSDEEP

        memory/1808-16-0x0000000000400000-0x000000000048D000-memory.dmp

        memory/1808-30391-0x0000000000400000-0x000000000048D000-memory.dmp

        memory/1808-0-0x0000000000400000-0x000000000048D000-memory.dmp

        memory/1808-66-0x0000000000400000-0x000000000048D000-memory.dmp

        memory/1808-1-0x0000000000400000-0x000000000048D000-memory.dmp

        memory/1808-6-0x0000000000400000-0x000000000048D000-memory.dmp

        memory/1808-5-0x0000000000400000-0x000000000048D000-memory.dmp

        memory/1808-15944-0x0000000000400000-0x000000000048D000-memory.dmp

        memory/1808-2-0x0000000000400000-0x000000000048D000-memory.dmp

        memory/1808-41955-0x0000000000400000-0x000000000048D000-memory.dmp

        memory/1808-42501-0x0000000000400000-0x000000000048D000-memory.dmp

        memory/1808-42720-0x0000000000400000-0x000000000048D000-memory.dmp

        memory/1808-44834-0x0000000000400000-0x000000000048D000-memory.dmp

        memory/1808-58943-0x0000000000400000-0x000000000048D000-memory.dmp