Analysis

  • max time kernel
    151s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/03/2024, 06:31

General

  • Target
    connhost.exe
  • Size 487KB
  • Sample240307-hag9wsfa39
  • SHA256 1c18ce93ce0c1ea0b0838da892dd33af031db3caf49e215dc3beb2c398c09508
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • Trigona

    A ransomware first seen at the beginning of the 2022.

  • Drops desktop.ini file(s) 4 IoCs
  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\connhost.exe
    "C:\Users\Admin\AppData\Local\Temp\connhost.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    PID:4868
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1400 --field-trial-handle=2256,i,6670388345726423024,18382795228658886258,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:9692

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          d5sb28def6o8dt6ee9s38draj2668443bc0t1d06d5wok10p.zhx59r._locked

          • Path C:\$Recycle.Bin\S-1-5-21-3808065738-1666277613-1125846146-1000\d5sb28def6o8dt6ee9s38draj2668443bc0t1d06d5wok10p.zhx59r._locked
          • Size 2KB
          • SHA256 b97b0bf09b64d5cd4f4b1ccb8f202de6e42e336e8c7f2bfcc73e84a291387cae
          • MD5 SHA1 SHA512

          desktop.ini

          • Path C:\$Recycle.Bin\S-1-5-21-3808065738-1666277613-1125846146-1000\desktop.ini
          • Size 947B
          • SHA256 6b82905ae159653cba9ee50b1636c1372a6e07f89f976872a649f38f604ada30
          • MD5 SHA1 SHA512

          12c1ov5by9z62fjhdy0my6.pr._locked

          • Path C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\12c1ov5by9z62fjhdy0my6.pr._locked
          • Size 3.5MB
          • SHA256 4fef9bf0a9fa170ef8c6152707b392a06118a44be6a905e52bf6392a81b4c3af
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-console-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-console-l1-1-0.dll
          • Size 12KB
          • SHA256 25fabd9ae72c2a2a9da45f5fc32897dbee568f0364981a5613b2574742fb7e6a
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-console-l1-2-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-console-l1-2-0.dll
          • Size 12KB
          • SHA256 99684ca2a2c841e09f1608fb77e171bc5ddf64085dbbd47c58793e329e541d18
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-datetime-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-datetime-l1-1-0.dll
          • Size 12KB
          • SHA256 0a58b37525e8505c3a0317cc4935cd7f240b0f0961ea2f5da73061ef7712e540
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-debug-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-debug-l1-1-0.dll
          • Size 12KB
          • SHA256 7a7905754f58294689976d2730122cd46ed84c728bf3d507e40fbfc46c5e9afe
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-errorhandling-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-errorhandling-l1-1-0.dll
          • Size 12KB
          • SHA256 616e6ca8386ca1b7dbff2b3b38d88b51e19df9308f2f07f044a1595145fa2de3
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-file-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-file-l1-1-0.dll
          • Size 15KB
          • SHA256 ec236d98b8cca73f40c9283104b40c627e293b7bfd1ad5f04c60bcfe725e610a
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-file-l1-2-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-file-l1-2-0.dll
          • Size 12KB
          • SHA256 077e4ab7323326c688d1b980ac53ed3b3601dbcb2170da22967adefce6f4e3ac
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-file-l2-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-file-l2-1-0.dll
          • Size 12KB
          • SHA256 312c0f7560fbdea732e08ed5fd406a716f6f6be39dc3a9680c1ea85f90ef47bc
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-handle-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-handle-l1-1-0.dll
          • Size 12KB
          • SHA256 ae865f36e7aed0bc0466cb5ad656647d486d605838b7d4bcfbd4dcb30ca9ccbe
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-heap-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-heap-l1-1-0.dll
          • Size 12KB
          • SHA256 74a46da00ab0f14b2091675fd2222d616942fe425cab425211f3f8eb59d93512
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-interlocked-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-interlocked-l1-1-0.dll
          • Size 12KB
          • SHA256 bc77afcf823169d27e4aa24e29197857752612af2232631908e657701b59e502
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-libraryloader-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-libraryloader-l1-1-0.dll
          • Size 13KB
          • SHA256 9121ef5af1939213fd15815957e60119ce322a678535032db912f81ec9c5a425
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-localization-l1-2-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-localization-l1-2-0.dll
          • Size 15KB
          • SHA256 ef979939866c4f2afd9aa5a7192cbe4cf61edcdf65977e9daf75965df369faca
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-memory-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-memory-l1-1-0.dll
          • Size 12KB
          • SHA256 279409031f0a01a5a358a4d4ff3d314a38e47dc79c5e52b63c3b028df1468a01
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-namedpipe-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-namedpipe-l1-1-0.dll
          • Size 12KB
          • SHA256 426dcd0ee272ac1a33c695197ffc7807c2d9e96c1f83cb078071c10c16939392
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-processenvironment-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-processenvironment-l1-1-0.dll
          • Size 13KB
          • SHA256 ac33006d6dc21efee5c79fc42cb1e26a4a1f989ae8b8f05194ba5372911030ee
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-processthreads-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-processthreads-l1-1-0.dll
          • Size 14KB
          • SHA256 7b4978872eb16f2f1e4fdce10d01f1b4e730719603471eb1d070199234716d55
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-processthreads-l1-1-1.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-processthreads-l1-1-1.dll
          • Size 12KB
          • SHA256 272adba49d3e0e3c3bf2987c2c850a5913ff24a60ab5e181885b74b043002a2f
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-profile-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-profile-l1-1-0.dll
          • Size 12KB
          • SHA256 befb54d46bc4135ef74c48a060dd54e291698ba7212985a79382bcd43a2ffefc
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-rtlsupport-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-rtlsupport-l1-1-0.dll
          • Size 12KB
          • SHA256 d0e94886ad49495d421b24e59ea3d71210d44f94d15850c5877e24453d81a3ba
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-string-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-string-l1-1-0.dll
          • Size 12KB
          • SHA256 9f3aeb2934daa522735df0516be4977e028a08c899a328214cdd1e86972b50ef
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-synch-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-synch-l1-1-0.dll
          • Size 14KB
          • SHA256 447002b602d15ae43fb9c9f8c8861df4d5272d082ab240acfe842121f81d02f0
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-synch-l1-2-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-synch-l1-2-0.dll
          • Size 12KB
          • SHA256 403cc8ec6adf7af7a7c3601e5454987df133b7e634e89952fc3c0ae7f188f505
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-sysinfo-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-sysinfo-l1-1-0.dll
          • Size 13KB
          • SHA256 27ec4989a86a842b366ffef046f2caff6dbaa43799799be5ff7ab86c0cb86adf
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-timezone-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-timezone-l1-1-0.dll
          • Size 12KB
          • SHA256 1459afc492729f50d6bc70b16374a7de4c6df1ed6f3d8b77d7b8f0c7393b4dd8
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-util-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-util-l1-1-0.dll
          • Size 12KB
          • SHA256 2143437c0257b37c6c83f868b1b55e0ba81913cc9c630056804887bac790c7e9
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-conio-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-conio-l1-1-0.dll
          • Size 13KB
          • SHA256 7efa8ce03d3672ff325aa2d0bada1794ad1d7843ef67c0b070d452a1f6103c91
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-convert-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-convert-l1-1-0.dll
          • Size 16KB
          • SHA256 1ed1296fd079759223a549f888f5318d15a077b07f9c39c9808688361db634fa
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-environment-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-environment-l1-1-0.dll
          • Size 12KB
          • SHA256 aacdc33557decc6006e1409e4e9b1a4306221cc564ec0b6d6996483af5e0e3f2
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-filesystem-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-filesystem-l1-1-0.dll
          • Size 14KB
          • SHA256 26f20e1e869180da409e1ad2cbd30ff7bf7690dd10e3c135516315790fc58912
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-heap-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-heap-l1-1-0.dll
          • Size 13KB
          • SHA256 560e5f3882d38ced76c9a5a4f40f27cec769904e84195fed3c965bb391bf370f
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-locale-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-locale-l1-1-0.dll
          • Size 12KB
          • SHA256 838ebf08c92d0ca488ab62c48f838115e8ddd03090d8f438068e06571ab34b38
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-math-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-math-l1-1-0.dll
          • Size 21KB
          • SHA256 f3330636e0801dcbc0b432a288f383cefbdc9e4aa234b692d565f3e99be3c3d3
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-multibyte-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-multibyte-l1-1-0.dll
          • Size 20KB
          • SHA256 477085b4662eb64315953543102af9e22a1623efa1cf14c0e0fe230f187b03bf
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-process-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-process-l1-1-0.dll
          • Size 13KB
          • SHA256 0a30ffb8899858b76ad47003c8326048b7c5e5b287031a3ea83557664bf799db
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-runtime-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-runtime-l1-1-0.dll
          • Size 16KB
          • SHA256 f3ff9700952d34dbe20dd32ecf331b072d5e93b26b0af1f046b342bde83de331
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-stdio-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-stdio-l1-1-0.dll
          • Size 18KB
          • SHA256 9db611fac731687cdf907828bb2b826d2a31b3e212009fe5a259c1cfd817570e
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-string-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-string-l1-1-0.dll
          • Size 18KB
          • SHA256 e81454dcdaf25a2a2f12c6d78106d5f9260c5a26df376aee2bfcc8e89393baed
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-time-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-time-l1-1-0.dll
          • Size 14KB
          • SHA256 51edfffd5d7f5510cb47e839f3346cbcef964fb8ded2bdf6de6c097d0fd53b8e
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-utility-l1-1-0.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-utility-l1-1-0.dll
          • Size 12KB
          • SHA256 32d96762197b76e0c0bebb23078e0cb1aa5470256a516b6d11c9cbed932d3590
          • MD5 SHA1 SHA512 SSDEEP

          available_for_trial.uh53yi58tsk67044kmjsfcv20x61o2.7w55kp7tkr._locked

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\available_for_trial.uh53yi58tsk67044kmjsfcv20x61o2.7w55kp7tkr._locked
          • Size 63KB
          • SHA256 acd9bdc277bded7ff57d2492373d4ce48435c82f880fe5d32e11369733f34f61
          • MD5 SHA1 SHA512 SSDEEP

          msvcp140.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\msvcp140.dll
          • Size 559KB
          • SHA256 b771bf7df37878a450370b7454f5aa66d7012cc89cca187de7f335a25463ebcf
          • MD5 SHA1 SHA512 SSDEEP

          ucrtbase.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\ucrtbase.dll
          • Size 1012KB
          • SHA256 6e71b1bdcb9dcbfe4200cf985f7882e0ab6b5817784db1cdb20feca9dbc084cc
          • MD5 SHA1 SHA512 SSDEEP

          vcruntime140.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140.dll
          • Size 96KB
          • SHA256 dd08f30956758ae27c837c7b70e84bd6fa5d3f199eaf305df33825b289837d35
          • MD5 SHA1 SHA512 SSDEEP

          vcruntime140_1.dll

          • Path C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140_1.dll
          • Size 37KB
          • SHA256 4d701914f6d4e15980dcbf3e9ba333f947636f1a065e54bfa2b0ecdc87c0a124
          • MD5 SHA1 SHA512 SSDEEP

          messages_zh_TW.properties

          • Path C:\Program Files\Java\jdk-1.8\jre\lib\deploy\messages_zh_TW.properties
          • Size 4KB
          • SHA256 5499d02a295d1a18cfb5d72727b37d39198e6878c8c23c14b2ca95c19efd8a10
          • MD5 SHA1 SHA512 SSDEEP

          glib.md

          • Path C:\Program Files\Java\jdk-1.8\legal\javafx\glib.md
          • Size 32KB
          • SHA256 7856472aa5b5df7a7c4a56e72d2b69a549a49f8e5589266d22d5e2ab26a7f4aa
          • MD5 SHA1 SHA512 SSDEEP

          gstreamer.md

          • Path C:\Program Files\Java\jdk-1.8\legal\javafx\gstreamer.md
          • Size 35KB
          • SHA256 51de50fe136e43f35e5aa5f995405a35087c1cc9d2e8232973371c75cf5a7125
          • MD5 SHA1 SHA512 SSDEEP

          icu_web.md

          • Path C:\Program Files\Java\jdk-1.8\legal\javafx\icu_web.md
          • Size 24KB
          • SHA256 e79194ca430011c5762489fc8f900379775a07dc65844c1a15ae3bee4bd2ea3c
          • MD5 SHA1 SHA512 SSDEEP

          libxml2.md

          • Path C:\Program Files\Java\jdk-1.8\legal\javafx\libxml2.md
          • Size 4KB
          • SHA256 ce224ead3e5a63e142fbc7e4f6ca7e6e89e2213fa5a89940df0466b147856445
          • MD5 SHA1 SHA512 SSDEEP

          mesa3d.md

          • Path C:\Program Files\Java\jdk-1.8\legal\javafx\mesa3d.md
          • Size 6KB
          • SHA256 8306fcea40072f5734f813edb12239a07c8a8936e4eeb2ac7220b7260f2f7964
          • MD5 SHA1 SHA512 SSDEEP

          public_suffix.md

          • Path C:\Program Files\Java\jdk-1.8\legal\javafx\public_suffix.md
          • Size 18KB
          • SHA256 7f79f30c7e2635fb728f9bf3d12d65ed26aedf292a6555efc502370aa2c4589b
          • MD5 SHA1 SHA512 SSDEEP

          webkit.md

          • Path C:\Program Files\Java\jdk-1.8\legal\javafx\webkit.md
          • Size 320KB
          • SHA256 48392a62c52857b9e9578bf3df1c4eb26ce7ffebde6562c88c64e8d2a156df02
          • MD5 SHA1 SHA512 SSDEEP

          bcel.md

          • Path C:\Program Files\Java\jdk-1.8\legal\jdk\bcel.md
          • Size 11KB
          • SHA256 8ef1d5c0f63ffae0b5cec137d9937b14666c0e64d41056ca1c9913110d53747f
          • MD5 SHA1 SHA512 SSDEEP

          dom.md

          • Path C:\Program Files\Java\jdk-1.8\legal\jdk\dom.md
          • Size 4KB
          • SHA256 66fee8a678f4a8be4e910c29f43cd1954440994333239e32e04e36cdab503cba
          • MD5 SHA1 SHA512 SSDEEP

          ecc.md

          • Path C:\Program Files\Java\jdk-1.8\legal\jdk\ecc.md
          • Size 29KB
          • SHA256 2957ebf9cf70bac9a57ef4969e7bf6b3a78b1d7d2730718ee69a1e8dc063bc91
          • MD5 SHA1 SHA512 SSDEEP

          jpeg.md

          • Path C:\Program Files\Java\jdk-1.8\legal\jdk\jpeg.md
          • Size 4KB
          • SHA256 b6cff9889cc9bd611d699e82080ed968489d041db06f1ff7fb25ff11445cb3f1
          • MD5 SHA1 SHA512 SSDEEP

          libpng.md

          • Path C:\Program Files\Java\jdk-1.8\legal\jdk\libpng.md
          • Size 7KB
          • SHA256 bf49125ded29034426c6cb6ef5d3915044c11d4ed08f1d6a6942d93591572fde
          • MD5 SHA1 SHA512 SSDEEP

          mesa3d.md

          • Path C:\Program Files\Java\jdk-1.8\legal\jdk\mesa3d.md
          • Size 6KB
          • SHA256 da18b3ba77d951784a0a31665ddfcf3d1bee16e483102e6410b730b4352c6add
          • MD5 SHA1 SHA512 SSDEEP

          pkcs11cryptotoken.md

          • Path C:\Program Files\Java\jdk-1.8\legal\jdk\pkcs11cryptotoken.md
          • Size 4KB
          • SHA256 b7d96c4aadff1be1b210742e58f6cc5e4852590ffc1785e6f3c19a79926e9607
          • MD5 SHA1 SHA512 SSDEEP

          santuario.md

          • Path C:\Program Files\Java\jdk-1.8\legal\jdk\santuario.md
          • Size 12KB
          • SHA256 1b86a266f094914810b0b2004f224b891e066bef13814dba0c7969f4c90362bb
          • MD5 SHA1 SHA512 SSDEEP

          xalan.md

          • Path C:\Program Files\Java\jdk-1.8\legal\jdk\xalan.md
          • Size 12KB
          • SHA256 a7661e682bb060f2955ed966ca62378fbee3c24483afa284207ac8c7170b45e1
          • MD5 SHA1 SHA512 SSDEEP

          xerces.md

          • Path C:\Program Files\Java\jdk-1.8\legal\jdk\xerces.md
          • Size 12KB
          • SHA256 19f954cbc5949f3c60800e0a899d8d3e2e6e868cbe33f30c54ed37a022b7b6c9
          • MD5 SHA1 SHA512 SSDEEP

          xmlresolver.md

          • Path C:\Program Files\Java\jdk-1.8\legal\jdk\xmlresolver.md
          • Size 11KB
          • SHA256 d381f04dd68d4e9ee61221ee9ca227939c46fe32e6b75166359eccbc64ec9a16
          • MD5 SHA1 SHA512 SSDEEP

          msvcp140_1.dll

          • Path C:\Program Files\Java\jre-1.8\bin\msvcp140_1.dll
          • Size 24KB
          • SHA256 92d29519fd9d6c91561b827953541efd2dc9a93867a8fdd1ff3fb75b12959b36
          • MD5 SHA1 SHA512 SSDEEP

          msvcp140_2.dll

          • Path C:\Program Files\Java\jre-1.8\bin\msvcp140_2.dll
          • Size 183KB
          • SHA256 7c82c958b69e07f64244f1afbc12cb38a831b1de4579f967201c1d534bc6c959
          • MD5 SHA1 SHA512 SSDEEP

          16d0t10h42lo8cbe1qo3z4142c41byvj9q6kzvep5e90i.zwfr._locked

          • Path C:\Program Files\Java\jre-1.8\lib\16d0t10h42lo8cbe1qo3z4142c41byvj9q6kzvep5e90i.zwfr._locked
          • Size 10KB
          • SHA256 ac6999d63d11b396358af015ef4a68656c60f1bd2667c93762a4dcd5313f0568
          • MD5 SHA1 SHA512 SSDEEP

          classlist

          • Path C:\Program Files\Java\jre-1.8\lib\classlist
          • Size 83KB
          • SHA256 39eed71dfcc471e52fbc4641d0f1c11c5e8e5758107cab31ca8db5ef7ec17853
          • MD5 SHA1 SHA512 SSDEEP

          CIEXYZ.pf

          • Path C:\Program Files\Java\jre-1.8\lib\cmm\CIEXYZ.pf
          • Size 50KB
          • SHA256 ee82fb06e6cd0ef48124263d2e504d9995d55436800a46c050b1782fbcb08f62
          • MD5 SHA1 SHA512 SSDEEP

          PYCC.pf

          • Path C:\Program Files\Java\jre-1.8\lib\cmm\PYCC.pf
          • Size 268KB
          • SHA256 4a26098c8c0294cbeaed2228bbca611aeece65fffe18b66f313d0ebbc86291ca
          • MD5 SHA1 SHA512 SSDEEP

          content-types.properties

          • Path C:\Program Files\Java\jre-1.8\lib\content-types.properties
          • Size 6KB
          • SHA256 5585d2b7e982c977166fdfda89acd8006ffe21a3b67f682409cb92a2b5a3e512
          • MD5 SHA1 SHA512 SSDEEP

          deploy.jar

          • Path C:\Program Files\Java\jre-1.8\lib\deploy.jar
          • Size 4.8MB
          • SHA256 3a4637fb103bcc7237c5be60119ff95c92631ec674c5e8d9865d82bc17f6d90f
          • MD5 SHA1 SHA512 SSDEEP

          available_for_trial.rcfpissd2tk241wd7qb04a98s073v835hxdx4jpmk6q5f.qbakwcmx49r._locked

          • Path C:\Program Files\Java\jre-1.8\lib\deploy\available_for_trial.rcfpissd2tk241wd7qb04a98s073v835hxdx4jpmk6q5f.qbakwcmx49r._locked
          • Size 8KB
          • SHA256 afa499bfb5e0ccd9f3f546de11e118d0994b7a434443637e08f8bf174b08e2b3
          • MD5 SHA1 SHA512 SSDEEP

          ffjcext.zip

          • Path C:\Program Files\Java\jre-1.8\lib\deploy\ffjcext.zip
          • Size 14KB
          • SHA256 a5a189990554d627b1afedb68dd95886f3184aa5a330fd06e3f05a40f74dfc29
          • MD5 SHA1 SHA512 SSDEEP

          messages_es.properties

          • Path C:\Program Files\Java\jre-1.8\lib\deploy\messages_es.properties
          • Size 4KB
          • SHA256 7f84e2b4b92c1b20a6c259b9de17def34d8db86c17b6d2fb4c015a98d85b22d5
          • MD5 SHA1 SHA512 SSDEEP

          messages_fr.properties

          • Path C:\Program Files\Java\jre-1.8\lib\deploy\messages_fr.properties
          • Size 4KB
          • SHA256 fe0719258199ef419aa76369d8bce7c4f174ac42061353d0a43fcf7881c7765e
          • MD5 SHA1 SHA512 SSDEEP

          messages_ja.properties

          • Path C:\Program Files\Java\jre-1.8\lib\deploy\messages_ja.properties
          • Size 7KB
          • SHA256 a598613ae09167493e488fcc85bc9e0161f50c7b45b39f3dfab42df29862a86c
          • MD5 SHA1 SHA512 SSDEEP

          messages_ko.properties

          • Path C:\Program Files\Java\jre-1.8\lib\deploy\messages_ko.properties
          • Size 6KB
          • SHA256 6871592b16413d52b06d7d96118feb9ce3754e73f6d2eea9fa69106201add2a4
          • MD5 SHA1 SHA512 SSDEEP

          messages_sv.properties

          • Path C:\Program Files\Java\jre-1.8\lib\deploy\messages_sv.properties
          • Size 4KB
          • SHA256 f041d7b1fde0e61e2d4f41d0764d3a4da3812296c8f41d77da7eacff64d8019c
          • MD5 SHA1 SHA512 SSDEEP

          messages_zh_CN.properties

          • Path C:\Program Files\Java\jre-1.8\lib\deploy\messages_zh_CN.properties
          • Size 4KB
          • SHA256 2e248477ba328427b5a23333e8da0568aa973975db9bd472dcc0b6a634a36330
          • MD5 SHA1 SHA512 SSDEEP

          splash.gif

          • Path C:\Program Files\Java\jre-1.8\lib\deploy\splash.gif
          • Size 9KB
          • SHA256 fbf0d608c962160114fb117da2882b7303fcb014ea74ccee42f5c4821393bdc8
          • MD5 SHA1 SHA512 SSDEEP
          • Path C:\Program Files\Java\jre-1.8\lib\deploy\[email protected]
          • Size 15KB
          • SHA256 4cb8f9bc8775d49f555f233d6cf4ac51aa064a797a8b3a1433c280fe6a1104d6
          • MD5 SHA1 SHA512 SSDEEP
          • Path C:\Program Files\Java\jre-1.8\lib\deploy\[email protected]
          • Size 12KB
          • SHA256 61886d54fc7d5962f302ef0f817f6bf1ee36cb82be5eef877b2fd4be27ddb330
          • MD5 SHA1 SHA512 SSDEEP

          access-bridge-64.jar

          • Path C:\Program Files\Java\jre-1.8\lib\ext\access-bridge-64.jar
          • Size 193KB
          • SHA256 2bf9a0f7f910dcf4615845fadbe739e76e82b95da98870b263b7bbe0568041e5
          • MD5 SHA1 SHA512 SSDEEP

          cldrdata.jar

          • Path C:\Program Files\Java\jre-1.8\lib\ext\cldrdata.jar
          • Size 3.7MB
          • SHA256 5cec6b0579d95caabea2a6784d1e22cfb2b14669a7570065fb34fdf136d56b27
          • MD5 SHA1 SHA512 SSDEEP

          dnsns.jar

          • Path C:\Program Files\Java\jre-1.8\lib\ext\dnsns.jar
          • Size 9KB
          • SHA256 4134db523fe7f2efa77e711f026258636d6eb9437831b2fa0903c220fbf7ccfc
          • MD5 SHA1 SHA512 SSDEEP

          jaccess.jar

          • Path C:\Program Files\Java\jre-1.8\lib\ext\jaccess.jar
          • Size 44KB
          • SHA256 f9435f1738fe1583dd47b39b4e240bb9660cb92ded0db0d3ff15fff8f6e792b4
          • MD5 SHA1 SHA512 SSDEEP

          jfxrt.jar

          • Path C:\Program Files\Java\jre-1.8\lib\ext\jfxrt.jar
          • Size 8.0MB
          • SHA256 6aac4b614482734231803b5e3470e9bb2edb03bdc3d1742479527df7c412ffe7
          • MD5 SHA1 SHA512 SSDEEP

          nashorn.jar

          • Path C:\Program Files\Java\jre-1.8\lib\ext\nashorn.jar
          • Size 320KB
          • SHA256 309f1548ff2569abbfd1abc1fb98af0374d926b9ec97298b9ebb008f0ed35b23
          • MD5 SHA1 SHA512 SSDEEP

          sunec.jar

          • Path C:\Program Files\Java\jre-1.8\lib\ext\sunec.jar
          • Size 46KB
          • SHA256 bca56e9b84023a55c4d5cb24bd79abedda4159f5f72700339bbe9a132a621e53
          • MD5 SHA1 SHA512 SSDEEP

          sunjce_provider.jar

          • Path C:\Program Files\Java\jre-1.8\lib\ext\sunjce_provider.jar
          • Size 288KB
          • SHA256 69621c97edef7994fce7d8cc621fb56cc4408e63f0bcce26ed44f0c204657214
          • MD5 SHA1 SHA512 SSDEEP

          sunmscapi.jar

          • Path C:\Program Files\Java\jre-1.8\lib\ext\sunmscapi.jar
          • Size 49KB
          • SHA256 9ffc454a99c34f9f8dd0e2813b9da6dc8638b858069aa322632ee3188cd548c2
          • MD5 SHA1 SHA512 SSDEEP

          sunpkcs11.jar

          • Path C:\Program Files\Java\jre-1.8\lib\ext\sunpkcs11.jar
          • Size 287KB
          • SHA256 a8ec649b4f4e31fa220afc48fa3542ecbeda8c9ea5e7a5f1f5d99511296e24a7
          • MD5 SHA1 SHA512 SSDEEP

          zipfs.jar

          • Path C:\Program Files\Java\jre-1.8\lib\ext\zipfs.jar
          • Size 69KB
          • SHA256 9b8e07ca6b4ec49d7a29e089e77d9f1fc3cb9e0ace63a29e7c09411c354295d3
          • MD5 SHA1 SHA512 SSDEEP

          flavormap.properties

          • Path C:\Program Files\Java\jre-1.8\lib\flavormap.properties
          • Size 4KB
          • SHA256 e8ba6e3d287cdfa3151da5e6863443e2f5de7541a8293ea97bcacfb2eb84a069
          • MD5 SHA1 SHA512 SSDEEP

          fontconfig.bfc

          • Path C:\Program Files\Java\jre-1.8\lib\fontconfig.bfc
          • Size 4KB
          • SHA256 bb4e125c7ada2f1f03c6f83c949b02b304502a742953598e20b56bad34655497
          • MD5 SHA1 SHA512 SSDEEP

          fontconfig.properties.src

          • Path C:\Program Files\Java\jre-1.8\lib\fontconfig.properties.src
          • Size 11KB
          • SHA256 8096da264baa7ccd7f3e4a4649ab045081d6778ca3ae461691900f91a8ce2ffd
          • MD5 SHA1 SHA512 SSDEEP

          LucidaBrightDemiBold.ttf

          • Path C:\Program Files\Java\jre-1.8\lib\fonts\LucidaBrightDemiBold.ttf
          • Size 74KB
          • SHA256 8fc508c838291bf14af855c5ac25475748b064ebe50e3c577ce0618fe71ff936
          • MD5 SHA1 SHA512 SSDEEP

          LucidaBrightDemiItalic.ttf

          • Path C:\Program Files\Java\jre-1.8\lib\fonts\LucidaBrightDemiItalic.ttf
          • Size 74KB
          • SHA256 b5b0299a18a82ec8b7668ee1290839e3363543a79bc4783cf3abeaacdd2cdd85
          • MD5 SHA1 SHA512 SSDEEP

          LucidaBrightItalic.ttf

          • Path C:\Program Files\Java\jre-1.8\lib\fonts\LucidaBrightItalic.ttf
          • Size 79KB
          • SHA256 6068da82905269776c412ea43fa079a4752724356371e8955365038f1b8a4add
          • MD5 SHA1 SHA512 SSDEEP

          LucidaBrightRegular.ttf

          • Path C:\Program Files\Java\jre-1.8\lib\fonts\LucidaBrightRegular.ttf
          • Size 339KB
          • SHA256 f4ee779ecbbb36ea12cc8b1f68241324388542ca789188a49d53a626c9938075
          • MD5 SHA1 SHA512 SSDEEP

          LucidaSansRegular.ttf

          • Path C:\Program Files\Java\jre-1.8\lib\fonts\LucidaSansRegular.ttf
          • Size 682KB
          • SHA256 65085922dc2c3d83cd625e549a50d20110243d9498df937ecf870e7dbe848461
          • MD5 SHA1 SHA512 SSDEEP

          LucidaTypewriterBold.ttf

          • Path C:\Program Files\Java\jre-1.8\lib\fonts\LucidaTypewriterBold.ttf
          • Size 64KB
          • SHA256 0a735337705639ad23a0f38776577bca1d2210fddce6d1e416790d9c2345000b
          • MD5 SHA1 SHA512 SSDEEP

          LucidaTypewriterRegular.ttf

          • Path C:\Program Files\Java\jre-1.8\lib\fonts\LucidaTypewriterRegular.ttf
          • Size 237KB
          • SHA256 d62e766d079c2244688cd00ace6674c574d9f0202d5bd7853e8f75fd2352a7f6
          • MD5 SHA1 SHA512 SSDEEP

          available_for_trial.z6p7ef2207m3r8m0qm981ycj9xpz0w46.74r._locked

          • Path C:\Program Files\Java\jre-1.8\lib\fonts\available_for_trial.z6p7ef2207m3r8m0qm981ycj9xpz0w46.74r._locked
          • Size 311KB
          • SHA256 6e049b24d02066d31ee6a2dfe94f934f6c778af50b8c0643b39cc3f77d2f3221
          • MD5 SHA1 SHA512 SSDEEP

          hbv18kqpwyv02d6sbfqn7fs2fa.ktf3d0kmgmr._locked

          • Path C:\Program Files\Java\jre-1.8\lib\hbv18kqpwyv02d6sbfqn7fs2fa.ktf3d0kmgmr._locked
          • Size 4KB
          • SHA256 f619626785ecc7b9fc7b88403fb58541f7eb53fe8291cfff9ba992d92a8edd83
          • MD5 SHA1 SHA512 SSDEEP

          hijrah-config-umalqura.properties

          • Path C:\Program Files\Java\jre-1.8\lib\hijrah-config-umalqura.properties
          • Size 14KB
          • SHA256 29465a5ba6ce5cc35734e8b7d4185ba028c1a3337a39d2417b3b919b1aeaa058
          • MD5 SHA1 SHA512 SSDEEP

          javaws.jar

          • Path C:\Program Files\Java\jre-1.8\lib\javaws.jar
          • Size 935KB
          • SHA256 8c71cb781db7dc5673b978fcfa5751cc06edc2a1b44e46f47dac7449a24e1639
          • MD5 SHA1 SHA512 SSDEEP

          jce.jar

          • Path C:\Program Files\Java\jre-1.8\lib\jce.jar
          • Size 120KB
          • SHA256 156df3ba41338fe1a5a558f9fd7196a9dceb35113c9e02c7b245945fde1de197
          • MD5 SHA1 SHA512 SSDEEP

          jfr.jar

          • Path C:\Program Files\Java\jre-1.8\lib\jfr.jar
          • Size 561KB
          • SHA256 c7b240d1fb274ef48fade1e84e69406e671c5f78d02daeada4a4c3d7cf448978
          • MD5 SHA1 SHA512 SSDEEP

          default.jfc

          • Path C:\Program Files\Java\jre-1.8\lib\jfr\default.jfc
          • Size 22KB
          • SHA256 e1d5c43f1b0085f62123fad95877685552da106ab5a8df849d5fcb55297db365
          • MD5 SHA1 SHA512 SSDEEP

          profile.jfc

          • Path C:\Program Files\Java\jre-1.8\lib\jfr\profile.jfc
          • Size 21KB
          • SHA256 eae5816801f6e7e6322e2392bc6a4d0ee44c74efb98155348ba2522aea5bbe76
          • MD5 SHA1 SHA512 SSDEEP

          jfxswt.jar

          • Path C:\Program Files\Java\jre-1.8\lib\jfxswt.jar
          • Size 33KB
          • SHA256 b339eb4b598f873aa24dd3494821305dc126c8aec027619d15bfc5e6ae2e88e2
          • MD5 SHA1 SHA512 SSDEEP

          jvm.hprof.txt

          • Path C:\Program Files\Java\jre-1.8\lib\jvm.hprof.txt
          • Size 4KB
          • SHA256 eff43f5564833799e177a9b680ab9b1bd9e4065f222f86ea5403d097fad9275a
          • MD5 SHA1 SHA512 SSDEEP

          jmxremote.access

          • Path C:\Program Files\Java\jre-1.8\lib\management\jmxremote.access
          • Size 6KB
          • SHA256 4adac438bbc328de722f4fb9a98e4bdff248a14fcf9fa26d70730eca4cd08bf7
          • MD5 SHA1 SHA512 SSDEEP

          management.properties

          • Path C:\Program Files\Java\jre-1.8\lib\management\management.properties
          • Size 15KB
          • SHA256 95d7c40946c10fff0b901dfaaa246f1158ecd191068b585625439089ccb0bcfc
          • MD5 SHA1 SHA512 SSDEEP

          snmp.acl.template

          • Path C:\Program Files\Java\jre-1.8\lib\management\snmp.acl.template
          • Size 5KB
          • SHA256 9f0f2c360f21d04907aa3621fba2fb86376ad0d22ba52ae17e1f783fb6fa3b2a
          • MD5 SHA1 SHA512 SSDEEP

          net.properties

          • Path C:\Program Files\Java\jre-1.8\lib\net.properties
          • Size 6KB
          • SHA256 7ea04bc71188d37087149ff47cd410b525d8065e9fccb3ec002864f6b3edecf5
          • MD5 SHA1 SHA512 SSDEEP

          plugin.jar

          • Path C:\Program Files\Java\jre-1.8\lib\plugin.jar
          • Size 1.8MB
          • SHA256 3fd3c4f4df487b28413b368544f300030b66ccef5cedcdfce7c69ad7bd857881
          • MD5 SHA1 SHA512 SSDEEP

          psfontj2d.properties

          • Path C:\Program Files\Java\jre-1.8\lib\psfontj2d.properties
          • Size 10KB
          • SHA256 be6598d6f01000028bd9f28205b480ce704b5e2ec1373ab333e927feb59e6b84
          • MD5 SHA1 SHA512 SSDEEP

          resources.jar

          • Path C:\Program Files\Java\jre-1.8\lib\resources.jar
          • Size 3.4MB
          • SHA256 a3a466f323a8c98b07258cf4d73a5113bb654d22720960526a54f62e0ffe4e57
          • MD5 SHA1 SHA512 SSDEEP

          blacklist

          • Path C:\Program Files\Java\jre-1.8\lib\security\blacklist
          • Size 4KB
          • SHA256 0058027435c007c825e12913494d6a19ad97cba1025b1c4d99d1356fdfe6cd93
          • MD5 SHA1 SHA512 SSDEEP

          cacerts

          • Path C:\Program Files\Java\jre-1.8\lib\security\cacerts
          • Size 110KB
          • SHA256 3db8ec0e0c9a9c856522c186a21e0f88d6c1f76c9172606a1d6d5fa842899428
          • MD5 SHA1 SHA512 SSDEEP

          java.security

          • Path C:\Program Files\Java\jre-1.8\lib\security\java.security
          • Size 56KB
          • SHA256 f8b97b480b24856cbc5f5f5a5795f788498395b2b9d5790f7116fe39b0d85488
          • MD5 SHA1 SHA512 SSDEEP

          US_export_policy.jar

          • Path C:\Program Files\Java\jre-1.8\lib\security\policy\limited\US_export_policy.jar
          • Size 4KB
          • SHA256 57386cfe19c58035be87b5a05cf3e6a17520634db93046e20c100245aaa6c1df
          • MD5 SHA1 SHA512 SSDEEP

          local_policy.jar

          • Path C:\Program Files\Java\jre-1.8\lib\security\policy\limited\local_policy.jar
          • Size 4KB
          • SHA256 052b94f0004c7dd46b0a6f09c0b26ab7ad5390350702fe378639bdddf93a0573
          • MD5 SHA1 SHA512 SSDEEP

          US_export_policy.jar

          • Path C:\Program Files\Java\jre-1.8\lib\security\policy\unlimited\US_export_policy.jar
          • Size 4KB
          • SHA256 009eb89865be7df3024dc3dd39edb91e83029544a5ed204b7338512c9cf52abf
          • MD5 SHA1 SHA512 SSDEEP

          local_policy.jar

          • Path C:\Program Files\Java\jre-1.8\lib\security\policy\unlimited\local_policy.jar
          • Size 4KB
          • SHA256 35d36aa18ba2b3d187cb420a2a0db842e8a1ec4e9ebcf50e89cdce552cecaaa1
          • MD5 SHA1 SHA512 SSDEEP

          public_suffix_list.dat

          • Path C:\Program Files\Java\jre-1.8\lib\security\public_suffix_list.dat
          • Size 227KB
          • SHA256 7588bb7631d780f58c96c8a439bbc582e0d9a40ca2df9a51ff9d9dbdf6134800
          • MD5 SHA1 SHA512 SSDEEP

          tzdb.dat

          • Path C:\Program Files\Java\jre-1.8\lib\tzdb.dat
          • Size 102KB
          • SHA256 75d5246a8a5d609ffde20cbf0b5ebfffdbfe9e9ab3215b240be2b485957105dc
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-file-l1-2-0.dll

          • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-file-l1-2-0.dll
          • Size 19KB
          • SHA256 34d4ca9e488af9ae07f09a482135f60564f7f7e78e90fe9ac50bd88fbf83a793
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-file-l2-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-file-l2-1-0.dll
          • Size 19KB
          • SHA256 bd6f587776547a48f6643ac900a8b4179c316e1330968eb07db622ce66740b92
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-localization-l1-2-0.dll

          • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-localization-l1-2-0.dll
          • Size 21KB
          • SHA256 17897d6e2b7308f5d39004622b30d7f1912575b87febafc9680684fc1b2c03bc
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-processthreads-l1-1-1.dll

          • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-processthreads-l1-1-1.dll
          • Size 19KB
          • SHA256 20e18e1511cbb76d73526f1c664521141ef544537a8cc1b5acd982408626d155
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-synch-l1-2-0.dll

          • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-synch-l1-2-0.dll
          • Size 19KB
          • SHA256 0808b084f26847c2d29cdceadb2f355621ef9ad55be40d560046a64177c6a588
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-timezone-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-timezone-l1-1-0.dll
          • Size 19KB
          • SHA256 3bae8f95ef4097f71df5198c57dcce2344c4049668044d09c54f34b432122775
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-core-xstate-l2-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-xstate-l2-1-0.dll
          • Size 12KB
          • SHA256 323604e67e85c25eda52e472130f0591a6b748f432bc95befd5d0ce004f61c48
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-conio-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-conio-l1-1-0.dll
          • Size 20KB
          • SHA256 ff2b6a3a1230b45b3bb99e601b5515149c442bbc68f60aa5922ac36987718ead
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-convert-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-convert-l1-1-0.dll
          • Size 23KB
          • SHA256 576eecf3c355208b89252906f0bdd45fcd52f24a5f9cf4f12a9471d3d4b6b9be
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-environment-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-environment-l1-1-0.dll
          • Size 19KB
          • SHA256 4c34b185ad2e92d8d808df606dc2e50369cddc5d8030b708ca665735dd8aff4d
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-filesystem-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-filesystem-l1-1-0.dll
          • Size 21KB
          • SHA256 0fd2ca3b24659dad460ef18fed0713c818fdcb632e83c4256acf58247f1203b9
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-heap-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-heap-l1-1-0.dll
          • Size 20KB
          • SHA256 b929be996babab8bfa290371ea45f3b715c7567b7d3d7aa50f0eb0bc103dae62
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-locale-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-locale-l1-1-0.dll
          • Size 19KB
          • SHA256 1f6041c5da9795d005adb9c21f090c83ffe39c2385a7252e28529a08fc0b51a4
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-math-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-math-l1-1-0.dll
          • Size 28KB
          • SHA256 a322a8ae25c4be7268e6c49d656dea4cd622ce6264633eec3b2ecf7b7522539a
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-multibyte-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-multibyte-l1-1-0.dll
          • Size 27KB
          • SHA256 24d48472588e6a97e94a3be537646d589058b6f7bd6799fe9973322e573bcde0
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-private-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-private-l1-1-0.dll
          • Size 70KB
          • SHA256 eabf29b5a51ff8747e348800f877e545863d8075befb6b6ceb495aa36820f6af
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-process-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-process-l1-1-0.dll
          • Size 20KB
          • SHA256 2c1335a71c56ab4b8faa6de319809a93b77329b395a2467df1215bac08ef4036
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-runtime-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-runtime-l1-1-0.dll
          • Size 23KB
          • SHA256 063bf358a0bfc5575cd66ae1a1d98d0676d111c93fffd59ad3145de87bb8aadd
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-stdio-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-stdio-l1-1-0.dll
          • Size 25KB
          • SHA256 174497b5020d24905c51bf41aca85340951c4d5d600f0a3ab410c52e71fb30b7
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-string-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-string-l1-1-0.dll
          • Size 25KB
          • SHA256 81c2f57842ede8655f2f1e55b64fa0f4803eed9d44c1c4385d5119ef2f789748
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-time-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-time-l1-1-0.dll
          • Size 21KB
          • SHA256 4dd88f23a1322d63fb29d77ae5c0494166156eb18abb572b78223caac07345df
          • MD5 SHA1 SHA512 SSDEEP

          api-ms-win-crt-utility-l1-1-0.dll

          • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-utility-l1-1-0.dll
          • Size 19KB
          • SHA256 72cea45d80af152cadcf93eae8160c7918027b11fdb0182002d2711074ca4efe
          • MD5 SHA1 SHA512 SSDEEP

          available_for_trial.my2e.kwg7r._locked

          • Path C:\Program Files\Microsoft Office\root\Client\available_for_trial.my2e.kwg7r._locked
          • Size 359KB
          • SHA256 964d7922c3633a8f38dbc549c04ab42bf3d09e5d68fc01f438f119df1c8ff34f
          • MD5 SHA1 SHA512 SSDEEP

          concrt140.dll

          • Path C:\Program Files\Microsoft Office\root\Client\concrt140.dll
          • Size 325KB
          • SHA256 55da0646750551d651026ba80f234238dc04e8fd78a40be7a3b49c33fc551d73
          • MD5 SHA1 SHA512 SSDEEP

          pkeyconfig-office.xrm-ms

          • Path C:\Program Files\Microsoft Office\root\Licenses16\pkeyconfig-office.xrm-ms
          • Size 905KB
          • SHA256 bfe3de9427434436a27fb29316213f1f6fcec6fb9095486dba23af2b30cb5314
          • MD5 SHA1 SHA512 SSDEEP

          pidgenx.dll

          • Path C:\Program Files\Microsoft Office\root\Office15\pidgenx.dll
          • Size 1.2MB
          • SHA256 9ebb5c372a3b52359ebbaa648219b917f51d2007d510022a83afe48aa599bd05
          • MD5 SHA1 SHA512 SSDEEP

          pkeyconfig-office.xrm-ms

          • Path C:\Program Files\Microsoft Office\root\Office15\pkeyconfig-office.xrm-ms
          • Size 621KB
          • SHA256 e20b8b7c184a07be3c4ee27512fb56dbfe7a930c8869693b99d535c2ef7fec79
          • MD5 SHA1 SHA512 SSDEEP

          PREVIEWTEMPLATE.POTX

          • Path C:\Program Files\Microsoft Office\root\Office16\1033\PREVIEWTEMPLATE.POTX
          • Size 278KB
          • SHA256 5c37c72a1419ca8afee6b991f34474397fc7aaa6af672ccae621297619e776db
          • MD5 SHA1 SHA512 SSDEEP

          word2013bw.dotx

          • Path C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\word2013bw.dotx
          • Size 12KB
          • SHA256 47dc89b48218b39c567becba8c58c34a4393dd32b5d4025043184ffba751f8e3
          • MD5 SHA1 SHA512 SSDEEP

          offsym.ttf

          • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsym.ttf
          • Size 849KB
          • SHA256 4b9698d34d04655fe3a3f9086e67e94281f4383fb75e5818c881b92c014ddda6
          • MD5 SHA1 SHA512 SSDEEP

          offsymb.ttf

          • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsymb.ttf
          • Size 2.0MB
          • SHA256 7e2fd19f10279f32199dc6a7095ee561d3ed49edc5b10650139e4015b8290825
          • MD5 SHA1 SHA512 SSDEEP

          offsymk.ttf

          • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsymk.ttf
          • Size 15KB
          • SHA256 3f0ce0e2b81104403306118347b83f95fbe2797fb1146573c0c9d6f46f6a0320
          • MD5 SHA1 SHA512 SSDEEP

          offsyml.ttf

          • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsyml.ttf
          • Size 57KB
          • SHA256 81bb30966102669a815054e3967e2969a9053bf5886b2a65b8a60943cc3cd9e8
          • MD5 SHA1 SHA512 SSDEEP

          offsymsb.ttf

          • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsymsb.ttf
          • Size 1.9MB
          • SHA256 86135c7a17723274ef6df908fb4ac46289dd04d49c72ed90386ff4f9d3f075b2
          • MD5 SHA1 SHA512 SSDEEP

          offsymsl.ttf

          • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsymsl.ttf
          • Size 2.2MB
          • SHA256 7c1162fc4d211eb63c8da69eae1d1c636bff53d78e843cdf11a6a8e098321225
          • MD5 SHA1 SHA512 SSDEEP

          offsymt.ttf

          • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsymt.ttf
          • Size 126KB
          • SHA256 73a50063b170cc7bbcfb8d8a8da8f4b8d0e7bc1db6cd9a5292777000439bb756
          • MD5 SHA1 SHA512 SSDEEP

          offsymxb.ttf

          • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsymxb.ttf
          • Size 50KB
          • SHA256 11de95c23b188461a0c0ece61e9d0c81c7b0622facc5c72e247b859e88a15ebe
          • MD5 SHA1 SHA512 SSDEEP

          offsymxl.ttf

          • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsymxl.ttf
          • Size 735KB
          • SHA256 2357b33946a588af98487b6daaaa80b524248f65209f942b0d05384d7c8d981d
          • MD5 SHA1 SHA512 SSDEEP

          ISO690.XSL

          • Path C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\ISO690.XSL
          • Size 265KB
          • SHA256 ecee0988fc14b919c28d3a3f4ebfb0adfed084763d735240f071a763ce059b4c
          • MD5 SHA1 SHA512 SSDEEP

          zlibwapi.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\LibCurl64.DllA\OpenSSL64.DllA\zlibwapi.dll
          • Size 275KB
          • SHA256 fb4dd105232c993a5551eb59898e021dea55f201c3fe2f5181c2c282e1dc28e5
          • MD5 SHA1 SHA512 SSDEEP

          libcrypto-1_1-x64.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL64.DllA\libcrypto-1_1-x64.dll
          • Size 2.5MB
          • SHA256 a56d041bd7af611f94fc0b9eec6e5623588bf001440c60b1cc39260a1779a8c0
          • MD5 SHA1 SHA512 SSDEEP

          libssl-1_1-x64.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL64.DllA\libssl-1_1-x64.dll
          • Size 633KB
          • SHA256 0ab12bf9dd56c520509196753a02415aa54ae7a986143aee6cc81acb9a4d375b
          • MD5 SHA1 SHA512 SSDEEP

          UCRTBASE.DLL

          • Path C:\Program Files\Microsoft Office\root\Office16\UCRTBASE.DLL
          • Size 960KB
          • SHA256 2b0eb2e871e60081396c1f7ea345db5311e7acfa6c33335a270664b632dc6a65
          • MD5 SHA1 SHA512 SSDEEP

          mfc140u.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\mfc140u.dll
          • Size 5.6MB
          • SHA256 3cbfef9b50dd16c465c68d1855284ffb629459149ca260504cfe3c5320c0f9ec
          • MD5 SHA1 SHA512 SSDEEP

          msvcp120.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\msvcp120.dll
          • Size 645KB
          • SHA256 0f9c9b74835f314b5410d0e1541f40e24a2be35c0c05ee463d8dc763f0555d14
          • MD5 SHA1 SHA512 SSDEEP

          msvcp140.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\msvcp140.dll
          • Size 614KB
          • SHA256 fd556e099f13bd7fc4c4f06208a88c3713265b98f07a2cbb6af5f498a93b8467
          • MD5 SHA1 SHA512 SSDEEP

          msvcr120.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\msvcr120.dll
          • Size 941KB
          • SHA256 dc398b342c196533ee983a2d10279e74805b0beccf98572457cc6abe303b38b8
          • MD5 SHA1 SHA512 SSDEEP

          vcruntime140.dll

          • Path C:\Program Files\Microsoft Office\root\Office16\vcruntime140.dll
          • Size 84KB
          • SHA256 82792fa05eb174691950648277a92f7abaae356eadb1ac0203a60f5a872603e9
          • MD5 SHA1 SHA512 SSDEEP

          AppXManifestLoc.16.en-us.xml

          • Path C:\Program Files\Microsoft Office\root\loc\AppXManifestLoc.16.en-us.xml
          • Size 10KB
          • SHA256 ebc5ee5558e5069045cef4ceb7001c4232d3424a6b28ec54edcabcc07dc4b012
          • MD5 SHA1 SHA512 SSDEEP

          mscordaccore_amd64_amd64_6.0.2523.51912.dll

          • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.25\mscordaccore_amd64_amd64_6.0.2523.51912.dll
          • Size 1.3MB
          • SHA256 ab50702973b286eab04d4aa7df9151f48021cb763a16920fa74401080b6fd83d
          • MD5 SHA1 SHA512 SSDEEP

          Microsoft.DiaSymReader.Native.amd64.dll

          • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.0\Microsoft.DiaSymReader.Native.amd64.dll
          • Size 1.8MB
          • SHA256 7dac0d1478c77f3734052946bfb8afccceee3a2d211995c1fe29f43c767109fa
          • MD5 SHA1 SHA512 SSDEEP

          mscordaccore_amd64_amd64_8.0.23.53103.dll

          • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.0\mscordaccore_amd64_amd64_8.0.23.53103.dll
          • Size 1.3MB
          • SHA256 7b261455fbe373d6a01bec044165a326c2bcf25788dc4cb7fc95bd44865beb26
          • MD5 SHA1 SHA512 SSDEEP

          D3DCompiler_47_cor3.dll

          • Path C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.0\D3DCompiler_47_cor3.dll
          • Size 4.7MB
          • SHA256 d8be68c2f65a1e11139969807e270595f64b8dcb63ea2bdd6722b1965b294ccd
          • MD5 SHA1 SHA512 SSDEEP

          how_to_decrypt.hta

          • Path C:\how_to_decrypt.hta
          • Size 12KB
          • SHA256 58f81cf993e1c4503296824494ec0a98e615278b299e962590ff32d3f0169f77
          • MD5 SHA1 SHA512 SSDEEP

          vcredist2010_x86.log.html

          • Path C:\vcredist2010_x86.log.html
          • Size 82KB
          • SHA256 47b3063e39487293b1898042ca1bd769ced0f40275f111f551a4e7f20a1e8f27
          • MD5 SHA1 SHA512 SSDEEP

          memory/4868-2074-0x0000000000400000-0x000000000048D000-memory.dmp

          memory/4868-14630-0x0000000000400000-0x000000000048D000-memory.dmp

          memory/4868-15-0x0000000000400000-0x000000000048D000-memory.dmp

          memory/4868-384-0x0000000000400000-0x000000000048D000-memory.dmp

          memory/4868-1-0x0000000000400000-0x000000000048D000-memory.dmp

          memory/4868-5-0x0000000000400000-0x000000000048D000-memory.dmp

          memory/4868-13208-0x0000000000400000-0x000000000048D000-memory.dmp

          memory/4868-3-0x0000000000400000-0x000000000048D000-memory.dmp

          memory/4868-4055-0x0000000000400000-0x000000000048D000-memory.dmp

          memory/4868-22209-0x0000000000400000-0x000000000048D000-memory.dmp

          memory/4868-16981-0x0000000000400000-0x000000000048D000-memory.dmp

          memory/4868-6688-0x0000000000400000-0x000000000048D000-memory.dmp

          memory/4868-9736-0x0000000000400000-0x000000000048D000-memory.dmp

          memory/4868-0-0x0000000000400000-0x000000000048D000-memory.dmp