Resubmissions

27/06/2024, 12:05

240627-n9aa8asgnn 7

27/06/2024, 11:13

240627-nbm5es1bqn 10

27/06/2024, 10:55

240627-mz55gazfmj 7

27/06/2024, 10:51

240627-mxybvaxdrb 7

27/06/2024, 10:10

240627-l7bp6awape 7

27/06/2024, 10:00

240627-l1435axhpm 7

Analysis

  • max time kernel
    105s
  • max time network
    107s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240419-en
  • resource tags

    arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    27/06/2024, 10:00

General

  • Target

    setup-program-jpk.exe

  • Size

    141.4MB

  • MD5

    6d63cbd3a38407394a5e4226dbf652c4

  • SHA1

    b79445a99db3169bd0c372897ec474b1be7ef2cc

  • SHA256

    075e3e1097b5a6376358f94fdda63513aed5c88b67494f23c1224c2dddf38f63

  • SHA512

    878d5e21b204bca2d921d16552202832d6287e30cfb024bd84725a44fde40fba342b3366e9992d02825d320c094e824048026c8582c7c46355e3a34d3bc8d6fd

  • SSDEEP

    3145728:tQqSfallJBxCN1GPUFmkVeuMAfpLziGyeAuAKWqLqT/Abhmgk7:tvSwvBxCN4qcxAfpC/eTI4ha7

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 11 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 48 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 31 IoCs
  • Suspicious use of SendNotifyMessage 10 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\setup-program-jpk.exe
    "C:\Users\Admin\AppData\Local\Temp\setup-program-jpk.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4876
    • C:\Users\Admin\AppData\Local\Temp\is-R3FQJ.tmp\setup-program-jpk.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-R3FQJ.tmp\setup-program-jpk.tmp" /SL5="$4020E,147465875,780800,C:\Users\Admin\AppData\Local\Temp\setup-program-jpk.exe"
      2⤵
      • Executes dropped EXE
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:3636
      • C:\Windows\system32\cmd.exe
        "C:\Windows\system32\cmd.exe" /C ""C:\Program-JPK\FirebirdSQL\bin\install_classic.bat" TGSoft"
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:3572
        • C:\Program-JPK\FirebirdSQL\BIN\instsvc.exe
          instsvc install -auto -classic -z -n TGSoft
          4⤵
          • Executes dropped EXE
          PID:3952
        • C:\Program-JPK\FirebirdSQL\BIN\instsvc.exe
          instsvc start -n TGSoft
          4⤵
          • Executes dropped EXE
          PID:4956
  • C:\Program-JPK\FirebirdSQL\bin\fb_inet_server.exe
    C:\Program-JPK\FirebirdSQL\bin\fb_inet_server.exe -s TGSoft
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    PID:1008
  • C:\Program-JPK\Program-JPK.exe
    "C:\Program-JPK\Program-JPK.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1488

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program-JPK\DevExpress.BonusSkins.v21.1.dll

    Filesize

    21.5MB

    MD5

    f339125b9222eec6814a40222d02c438

    SHA1

    af8d8a0a9ffcf69c914bcfd4b3066aac8e2b3715

    SHA256

    747ec9206df78684b1a516756f33ce0d8970870adeb1b61d250eab2b0b1058a9

    SHA512

    ccc02272af56c6fd2445a540030da0df483649d8e1447d2634d4ff6abbe1ab7647c7a1e413c878b5851bc3a1d22e06918466cccca50827c4cabb2f11d11673c6

  • C:\Program-JPK\DevExpress.Data.Desktop.v21.1.dll

    Filesize

    446KB

    MD5

    823dcc6386159428e1a934652be84005

    SHA1

    49aba0b95935e5072f4585913b6ecddd5ad60d13

    SHA256

    60ee4c5a597245de257407e0cc3e838bdbd5a73e5a91b8da3d869cf34fd21680

    SHA512

    971328a17d356685af6013f04f11fa91925ecd0b7f3e8fe0a5b9316e3f97a60beb37d73cf34d211a9d741f7a9f39926fefe9e765fc6bc4dd54257f8d8292c4c5

  • C:\Program-JPK\DevExpress.Data.v21.1.dll

    Filesize

    5.1MB

    MD5

    bb7800bea048c751fa89fe3a0bf87458

    SHA1

    83db32ec9a23e0b92853ce52c6f0963a26bb1646

    SHA256

    252716259fa5ab6c5f95feb3e639561b919a6b2aaa963b7c8d292ba14c994e45

    SHA512

    63eb045ffc423914b4790382ea109473cb1a39f8db9fd4f5daa5007cbd131081d6f5389e504e7feb8bbdedcfa973d757e0f028aa33d4e508375807c620b98065

  • C:\Program-JPK\DevExpress.RichEdit.v21.1.Core.dll

    Filesize

    8.2MB

    MD5

    93ce6fca2477c99f517cdccc3b89f0b9

    SHA1

    59c4d9fb0d482cd41dea35b88844288c33850a98

    SHA256

    b2572b41982a52a772411af52901a31bcce6d90a6b70fcbdcd727e8e0586c08f

    SHA512

    648ed8fc9f88d82fba1cb231fbe4083abadd7e5dc875332c7d6b06aa3d3616ff0b76fe0eb841ce1af775066502ac51a06a11c72e2662772bb6150444feabefac

  • C:\Program-JPK\DevExpress.SpellChecker.v21.1.Core.dll

    Filesize

    1.2MB

    MD5

    684ffa7eabba36f2587f96d89142cb1b

    SHA1

    f35db0872c9ec944d3ab057af1a47baa3768b382

    SHA256

    a702e06ecc49d97af38bf026587c0de2eddd91728fbb230533fa5e5d05da4973

    SHA512

    69db9def970878c4b69e929e01166ac019c865eae96f8c025a38d797f9a7fe1f2b3236bc6abed54a4e27916715422bef45c1c7b92a2e3669914efb052ffe1919

  • C:\Program-JPK\DevExpress.Utils.v21.1.dll

    Filesize

    17.3MB

    MD5

    9fa2e49376adee2dd90d19f3c3de3d24

    SHA1

    932d7f8cca1aa68a7e90db827e8e949c77aa8dc7

    SHA256

    fd4a0f77bac9a7bef8cfab289c678766b2c3d9a798363360dcdba8b3a62ad74f

    SHA512

    405e3a5cd395dea4dc644fad8da2a75f25810fe8ce84f893b21d83492c52596ed70102b17168b1ae2b7e10c781a6fb627b783e5d82a217aa4cf1e200c6d983c9

  • C:\Program-JPK\DevExpress.XtraBars.v21.1.dll

    Filesize

    6.4MB

    MD5

    af5377206cd03a08c5b575136c71de5b

    SHA1

    a1955101148acb76dd1f07ef071ffdb3d30759ff

    SHA256

    3f7f3ef8e3c9f464953d22ee9901fec76562a991d66ecd092c76480ecad55a35

    SHA512

    e30648a038d81efb040043ab55da44c3842b574784904476b4a521b255de0dfa9f454e3de24b698280070ece699ae216b2216b4104daaaeefb5daf7129eaaba9

  • C:\Program-JPK\DevExpress.XtraEditors.v21.1.dll

    Filesize

    7.4MB

    MD5

    791d254eeb0bd21b9bebc433fa899b0f

    SHA1

    093ed232aba85417ab9c5e7a93ee068c05b89c30

    SHA256

    b0859d224ab7831880ec735bf92a07b2763aa36dad4f3970a58ef452632d6c79

    SHA512

    8745e0f4ecbd9bc0c939debe526f40a145964cc28fe84acc2679562e414aa47f52b08277fd8f475db4fbbb666443925e722fca3c161abff646b5980a05eabe19

  • C:\Program-JPK\DevExpress.XtraGrid.v21.1.dll

    Filesize

    3.5MB

    MD5

    585e92504f226b227a8ea682ceac6f3f

    SHA1

    6ca5cf02af74bfe2702aa3dbd1f92eab404857d4

    SHA256

    abe2414a25a0945e8a947a3aa369a65e7ebef8223809ba65a2cb3a85ecd42907

    SHA512

    878d2e4664688976d1b12199da706f43881ebf168cd2d5f5165b913afbf7650cbc97acd3a7a9792ed4932674c4e710549401a16f2b08a0015c2b0bc1ed351be3

  • C:\Program-JPK\DevExpress.XtraLayout.v21.1.dll

    Filesize

    2.0MB

    MD5

    68ea09c05c255a84ba95da8cd1a99b88

    SHA1

    d19401b46b5f30758421b02daf7b7f5e34a0f770

    SHA256

    72020105ae2f2d229544de8dccdd17b508f134de183c9b12af3334541a5ce0a7

    SHA512

    b1174c8f3d065098c586c5bca50f490bd9d56dfd6e291f2abd58be3842496016ea2f096423153c3e441893f8d3e285b3077e9047d8c0e25c3dd409946882a998

  • C:\Program-JPK\DevExpress.XtraScheduler.v21.1.Core.Desktop.dll

    Filesize

    1.2MB

    MD5

    0e50620bb19bad224374c74c41cff9d1

    SHA1

    7036f841038d47d9a6b9b292755e76bd84603b7d

    SHA256

    766195b308ec915f316d1669fb32f178b3873488f48a9efd132d0e8577aa4f3e

    SHA512

    230673bcea261e91f447cd32ad70ee4e7e36b2c49b4cea1b7714075cb9bc2df7bbf3d8870cadac310e6aa0bcbaab13dd4edec4b430fd7ed4287a785253659f2b

  • C:\Program-JPK\DevExpress.XtraScheduler.v21.1.Core.dll

    Filesize

    632KB

    MD5

    388f38d7840f14efcea14a8c74930085

    SHA1

    9c093290a6f1b2f0e1ad63da37122a3d585f6e55

    SHA256

    586f9282b27ac599b1c4db1784d2e1a43b5417910c9e8b858e264a81befec759

    SHA512

    196a276c9e8265daee8c1d55b0025865ccb4d38f115530f1835a06721e50fd2ed46a18236faea3dba4f8cd5f46cb799b838a2d5407aa473ed6bbb9083d11a107

  • C:\Program-JPK\DevExpress.XtraScheduler.v21.1.Extensions.dll

    Filesize

    268KB

    MD5

    88ab02d04751c7597b261d1d0b48da9f

    SHA1

    1b8f3e9fc2051e96ed361df48e8eacce32917cd5

    SHA256

    489002ac430d09cb7b8f8bbc962ef05df7ef6b4de8106b947ca74e2d3612de5e

    SHA512

    00505e5e399acad86ce8c3f55066e9a2f64255a33b00c0772d211567400757b7f223641ea9df95b62ee5e893b4bd4bc65840079ba41fd9f711baf8ff57399a79

  • C:\Program-JPK\DevExpress.XtraScheduler.v21.1.dll

    Filesize

    3.3MB

    MD5

    e2b770c74970ecb5a77afcab6d92dfab

    SHA1

    b29fbe1c7f74827a523fef4790e98d9876db7d34

    SHA256

    27180731cab10806099d1316e243242ee384db3dc157b4e461cb4b4a75fb8eb0

    SHA512

    ad443c264257595e50c9074ac53fcea915f4a14acfdc717acff3b9bf9c8c7d4884ab19259281fc6c97be6be8ef2675eeb80b501d9d7d79ae4c18fba53520c061

  • C:\Program-JPK\DevExpress.XtraSpellChecker.v21.1.dll

    Filesize

    259KB

    MD5

    556eadfe1dd7df3f6d8f49d1cf96d98e

    SHA1

    186cbc2ca3a144124d6dbf16593cbf7878cbf29b

    SHA256

    c5691c8f59867c1bf84ab4cfdc241471485d1188041e089eb585ec29b57fe4f3

    SHA512

    cb2bc4cf197213c4e2fe4e5333ba55e07d571f120e8102a4dd2cc47e86d43864f8bf90cc9de3f832c053721a7accec084faec0c7ea98a31f67b6ffc123189518

  • C:\Program-JPK\DevExpress.XtraWizard.v21.1.dll

    Filesize

    94KB

    MD5

    5f6a178d31889e566fbd6e54f68bfe15

    SHA1

    938ccf70c3be7cc559d7e553882261148b13b5d5

    SHA256

    6b83839f60d87bb877830537e92e8725d2a733cc6627a15b26283014e321b72b

    SHA512

    4d2df126b1a9cb4d7ab17876eac0487f4b2785ee5f2a4932fc9c82118a93c4772b6920f4f8c8a6e656b1b367e80ae893b8f5699ab834e1d65f6e56f73f2e50b9

  • C:\Program-JPK\FirebirdSQL\bin\fb_inet_server.exe

    Filesize

    5.5MB

    MD5

    68d9eeb070faec44bd2d49e1acd6e7ce

    SHA1

    a1c85bd0ef5da4fbb88c0b615281f27a8c0ca5d1

    SHA256

    77a8e2c0b440c0adc61756028f51e95534115163d7c37aff898f4f3661e31228

    SHA512

    3b6202825530810129bf94346ba3c7f349d3b8fde03c76b263a931bd16c867c8c903c0d4ff3b1d7c6669654a42cee2d5baa050587939b2cda915744fc93eb992

  • C:\Program-JPK\FirebirdSQL\bin\icudt30.dll

    Filesize

    1.5MB

    MD5

    808718f3a7c1ff3cea7ada2b13cad855

    SHA1

    4d4f9ada21f7296d1c09fcdcdedd6b482eb6a814

    SHA256

    44cf13b3cc2015c4134f587c8ccda910cd3a7f2426db50a1a84a2192edbd8f80

    SHA512

    117976a53181401ebc40c9690b9473ab218568b2e6e5887e20a83a3e91abab6c75210a7d8be637f85275077fec23f96cb354b6f2225211c730fce3edeb9a0872

  • C:\Program-JPK\FirebirdSQL\bin\icuuc30.dll

    Filesize

    914KB

    MD5

    81be734380c9c5dae22c16f887c2e3be

    SHA1

    8a3a928065aaf0e607d03c4303c01585d07794d2

    SHA256

    8c1a14d86390bd7a2de314a856094870523e158a4ffad79d41fcc9199b6fe1ae

    SHA512

    a8ebd155b56d3f6553ba87c632bf605c1b661100a83e7010dc8f7df4c137b119c528dc4319900f95220e6f8d92ad30b03dc43128e55d54583f2ebe0d314b86ab

  • C:\Program-JPK\FirebirdSQL\bin\install_classic.bat

    Filesize

    303B

    MD5

    1c25aa7e165bb0a047bf259b5faf523b

    SHA1

    2fe48efbd5e7a29471735dcb767dcb56bcf4a443

    SHA256

    9d451c921a09ff3e30c93edce8865a4fb6b92aa44a59708e85080b3e24d3adab

    SHA512

    47c5e126b22339b85e01227a1a4d80c9a7aa7f220d4b68ca383c361bcce94443847c9db6d32993d2e3a8185dbf0b9f030b97e858ccfb6bbb08f3434a84df5797

  • C:\Program-JPK\FirebirdSQL\bin\instsvc.exe

    Filesize

    78KB

    MD5

    350801f6e640df410a2836ac6441009a

    SHA1

    2f7e4aa0d1512c4b42509d727f8066c90dfe9e89

    SHA256

    d486ef2923b88b1a440e5423f864ea10a07ed03a808a02e9f20eb8818f01451b

    SHA512

    bdf5b5c5fc2498c8d6ecd0212592d4740526790c1be3085a089f749d90b54e5c87ee6ea3ea3c89277cb94092274e16f06178e7e5eb74294551e7de580decb484

  • C:\Program-JPK\FirebirdSQL\firebird.conf

    Filesize

    27KB

    MD5

    30e28d5d771321457fee3ecba28cd43e

    SHA1

    52f61826212af26de852d85b4abc6cd57b1c5503

    SHA256

    507c792995734ca5f91b4dcb2154453a31384b75399e1224fdd99888a54581eb

    SHA512

    8237e9da05258ce855e92d7d145d685108f26547018c324b1e918538fbbc3e297bde9e668602c638e6cc1de3fb52dc43b10adb17eca9adb19c5a40590afeefc2

  • C:\Program-JPK\FirebirdSql.Data.FirebirdClient.dll

    Filesize

    591KB

    MD5

    04e3dd7b8143547e02a537d83cbdde83

    SHA1

    c525d31281ba1c7d7a03a4133056ed6a954aadf7

    SHA256

    60b5f5b3ede37efcebc787313d1c47b7f0177d554219dd219a06523bea8f3676

    SHA512

    23751f90680bf3f439182dad49f83d82b35c4bab0d53857da1b0b8616e046a37a0aa0af06434be1d061d352df634d3ba719b15a23cd5def33b14070da33f436a

  • C:\Program-JPK\Mail.dll

    Filesize

    961KB

    MD5

    548af7a0a7b29f9c158e21a3e95889b2

    SHA1

    49375d72116dfd5d81e6f466296d329feba320bb

    SHA256

    d176bfb13455968efcf10e7937608afd9270e9d02394b6cbdf709f4729942681

    SHA512

    61680fd61d25d445267c3cc783c6ac28f767aee56e3217b25a24f71909ecccb787fd3c56fcd599f4ea5e5f73a739b3b33a685ddd4d343976c3a4e6f2c89cda2c

  • C:\Program-JPK\Program-JPK.exe

    Filesize

    1.9MB

    MD5

    aae49bb03f3fcd7987f2848eb3629146

    SHA1

    143f6b9135039f132c55ac8613db15870abb1ebc

    SHA256

    21f908310d1ef22c27f4bc1f385f3ee32ca7943ba24d880d253dd5a70e98db0e

    SHA512

    e7cb5f91b146fbb72632fc31b246a68bdb35c97ff64add8c8fa4cb3b1cea178c4618487af35ee46f9a6267835f33e60088e0f794108d7d8ab0ac2574f0fb1d74

  • C:\Program-JPK\Program-JPK.license

    Filesize

    1KB

    MD5

    6adf4f7c01441bbf7b3fcef4eb032557

    SHA1

    66fd264bfd2d6a5031605c410ec3ad582f72476d

    SHA256

    091550a842daf734493a0a3cd62e051a0644580e525fb135c67fe3f3bf0b7004

    SHA512

    7c99103f6fa971da9589fa76f4d72ff65b3838b39af866f6df74815f02df2b6c0147bc967219bd20f8846db792da8ecdce3a9dc90e079d23da32d1a8a5d628f8

  • C:\Program-JPK\RemObjects.DataAbstract.Server.dll

    Filesize

    488KB

    MD5

    18af1a2042f8b805ac7754e9d5903fe3

    SHA1

    7971a4b2c70cfb8f68824149f819a0a3fb42b513

    SHA256

    2a8500e10df487222e5e0747c8a84a03620f8ec20296c5feba1cc54568ec60ca

    SHA512

    a3d2bdb88f92246515ae7c64949871a5217f8a2483ee7f215d9ba09e0db8fc5ce76f99cac4fc0f1408c6ec3c7184ff429c0e156d33febd717a5b7904e219fbc4

  • C:\Program-JPK\RemObjects.DataAbstract.dll

    Filesize

    330KB

    MD5

    6976da0ab628193e4051e3dad45dc8a3

    SHA1

    56bcb3149d7b3a91bd9b7a8e4e495bcc4c4e218c

    SHA256

    eb391cda39400e9b81bfab92fbea0be096c4eda833b5e7eca3d3115ebbb5ff67

    SHA512

    feb438c698e8d03ec74995acbb3af3cfddd05a56bdb788a8a50a4f5f6cf56f28bafd98bc4fe6aae8a3e5b953bc3b387eff5f78bc46b8779a5cac06ee64d94703

  • C:\Program-JPK\RemObjects.InternetPack.dll

    Filesize

    224KB

    MD5

    1b694610d88ed5ecd350d9c53211fd09

    SHA1

    a6e284e43b8c225a7d2519176269c9e7a2b589a7

    SHA256

    87e5c1a3774a9018b71340ade76676eccd472911f16ddf1275a07caff389fe67

    SHA512

    7011aa14e0b2d6e9b586f9d223c858f2faec52a8638a169221222e49564fcff0ab1b32b0cf81d45f044f276b846cb59baaad4e8e3e15ff5fe18b76f3546ab494

  • C:\Program-JPK\RemObjects.SDK.Server.dll

    Filesize

    312KB

    MD5

    977991b886cd6af80531a23d13bee6ba

    SHA1

    d4b5eeb22796b3c3c4332ebf8c59b452bc8f3688

    SHA256

    e6e8d624f04a07f7e38427ca9bd1a89820eddf7c3cd0873bfed3db08e167c6ce

    SHA512

    afcd05b0d13f904a3d9dc01f2830f6ed1218e8552c95ea8b1701c3def665cbb8551eeace188a39389abd2b5da465642d40cb6d2b362c3c7cb271b00683312220

  • C:\Program-JPK\RemObjects.SDK.dll

    Filesize

    348KB

    MD5

    30428a02ebf6c3f6229687e30e006c0a

    SHA1

    330b40e1d08e278012dbbf9867f6c9804ff5df0f

    SHA256

    d2dd644617c8e65fdb4031020976abb4a18cc25d97f411b56fa270ef023b4de5

    SHA512

    8293d55617fe4e05d329fcc60f1a43bffcae0177130ec81a75e3d99b9829b826c31c5fd5c877371019041253f54e579659a9d98677748a0589871129cb2617d5

  • C:\Program-JPK\TGSoft.DB.dll

    Filesize

    198KB

    MD5

    a2294cb6432555d5b388bcf55cb4a4c2

    SHA1

    619eec5c9f57da9d41b01e2fed236647a36c5894

    SHA256

    11c7870a878939fa5a1e6568565820608e158ed49f096228b492c298774cda4e

    SHA512

    124cf4953c0deb21f8e25574f399a314c42d3dbca5328635ccdc7a26602f792e79bfebc93efb46e211fdb3e066fe169831c0436edecd2af26ff8ac865ed539c2

  • C:\Program-JPK\TGSoft.Data.dll

    Filesize

    1.3MB

    MD5

    3cf98a347210a6499bd8d412f85c803c

    SHA1

    23c1366d9b1380d59cb30505d038bdbba0bb2d25

    SHA256

    9f76243b8635c93ce5bf7a5287605e5fc354a72df8614f4033f5bf588d890e16

    SHA512

    58cbf9b2dc6d8d03536da401dc7e7c0ecb711dc57fe35ef2037803d89459833815f40adfb992f962e7aa55f41ab23228374acb2b29ebe85f0718882267e69249

  • C:\Program-JPK\TGSoft.Forms.dll

    Filesize

    233KB

    MD5

    ae48c74607de49fbfc87e201b3a95571

    SHA1

    ff10bd099042e956e2df8fad9d3f9e862802646a

    SHA256

    dd6d56fb0b6c497cd120f00980017669ab6d1113a21646bbd5ce8031aee267a0

    SHA512

    8300150afc1e535978dd65713ad123bb9d6ca554934d43f9f491e40cf7252d81c62c2c9255650f09fb02c9462caa13b800c85e7fea418c30abda89dc42bc27f1

  • C:\Program-JPK\TGSoft.LiteServer.dll

    Filesize

    5.3MB

    MD5

    161646072fcbe2912db643124b1f5f48

    SHA1

    d73236253fa1cde2f93945ceceb8e7484164a477

    SHA256

    27cc210354c6eebef6f9bd82badb2cf5a0e9b11a960f66b0cfa25e2f3f3f4208

    SHA512

    e79009f72cf7240deb3d4fe2b8ef2acf9c79b3141765a294e12fe3e5c4d0ebc074df3b7c53276a720d49372204204e5133eab3b9e74b28d5b165b7430952ed4c

  • C:\Program-JPK\TGSoft.Repository.dll

    Filesize

    6.3MB

    MD5

    f70a0fb0380a2596ec1859126c45b2c9

    SHA1

    32cafbdc15a3fcb956d19effa67d2599933b5454

    SHA256

    f66173c45eb319398ee9cd4454826f3c5952e43792bf201831c99d28fa7bbd7a

    SHA512

    edf4cfe669458eacd07fc63e38d3711ca9408023b28c63c6715b28071476eb66afb22ebf3dcfd188e01a9e6fdb1b8b0077735fec976a33b53d405fc00e1cd6c6

  • C:\Program-JPK\TGSoft.Tools.dll

    Filesize

    4.5MB

    MD5

    9b58e1e8185c38c09f26dcc02a20de71

    SHA1

    5334ec6d96eaaa499b6405a7acf4e44b97f37c74

    SHA256

    f2d45e798675846db0ce7fcfcef35e80ab31051811dd780b636cac46e9f1c581

    SHA512

    785b9f2d0a6436ed8f76279463dcbf8c60ddd804a7b842715280fa3e14a48a8e8d5edb0baad030b6cf8a149430772e61578bfb2766654aadb73452bc1da3bd69

  • C:\Program-JPK\TGSoft.UI.dll

    Filesize

    3.0MB

    MD5

    50880d4a82f90b1edc53dcfae522d9f4

    SHA1

    e20943c862ae10e88c609d11aee875bb437dbdb0

    SHA256

    920f31aa92d0f12efdf4103d9458d5b655842b10a7967f248f8e756466192ea7

    SHA512

    c3d41d1e8d00fee35eda676261661f4226f448d16a72a14c135b479dc6d2f5ef00831e99c437033e36101c03171b1d277b3fb2c6af0d3246caae8ecb77108dd4

  • C:\Program-JPK\TGSoft.Utils.dll

    Filesize

    268KB

    MD5

    2c89510bee09b388dc0d87c91ac5e6e4

    SHA1

    9159a2325573593b596cdab656f6557d19f4f0d6

    SHA256

    0deb045df2dd551fb9f3cb20a5c8819703349f6eb0ac9583563353a69910feb8

    SHA512

    f5c2c446dba18288e46e184e472bf8ca038919dd50968ce7c67e7366cde2b4808e769db04701a39bac5fd55986719ab6e8ee2a3132ffc1d613a0fa52a5ab6a67

  • C:\Program-JPK\fbembed.DLL

    Filesize

    5.4MB

    MD5

    2661932ac0e6ce18b2b90d4d65ebd808

    SHA1

    bdccccd29f4da7bdc27ed7b826dd31450e795231

    SHA256

    25ab3dd5ec8486f4ee4b7e82507a0256be390dffa546d38fbf57611aa29ab53a

    SHA512

    1d4f2fa17f912e864d4168b87cd8777128237fa71568368e726f4cc052e38c97ed2c193000a9d203ce5c0906e19fc14118bd46cfd28964290f5a473cb784e1eb

  • C:\Program-JPK\ib_util.dll

    Filesize

    8KB

    MD5

    c7298ac60511b6111626172f31d015c2

    SHA1

    18ea3b4a246a0edeaa7c4dcd7b92d96b4d2637cc

    SHA256

    e252d1fd627564dee3241d4b8ee82eb8856a7ec022d2014682a503b0d316ff4f

    SHA512

    41d9cccf1367b9c2a0048f1bda5b191ee44068733b3f7ebe4fb4bb699853bba8158cc7d675c20e1563f68a7dcc65c9b8137fb2cebc15a2195573898403bda066

  • C:\Program-JPK\icuin30.dll

    Filesize

    562KB

    MD5

    8cfbecaeb39f4043f4c7a8997c3b7df0

    SHA1

    62c6650d3324ad3a906eaf139c417d40751b5ea3

    SHA256

    8f3237e1fbfaac3f3e03ec1390f4bbbdb0681d470d0fe1523fbddb931c88a0b2

    SHA512

    588037ac905831d35811b9a90db7dbed6c8b96445d9e1413673302efa28fb5d28474d56b41b2abb3f5c73605899b2dbdeac3a669d9cb4499f30e4e57b60187ee

  • C:\Program-JPK\intl\fbintl.conf

    Filesize

    6KB

    MD5

    fadb2fc3c12e0700d073d02420c1d00d

    SHA1

    82c6d8cb5e04d2475447f0f9d35b23a79b5d51ab

    SHA256

    0192eb2179dce11444784eb51f2213169e305e84c33d8b79302838175e5a1f40

    SHA512

    054cc9bc773eb4ecf43f0aa132ea7a26e105515a4d88bd5ace0c7a78b477f3ad315d84887e5839252ab336d332dfd39ce0771e8b12af22b4ab47939e63725c29

  • C:\Program-JPK\intl\fbintl.dll

    Filesize

    1.1MB

    MD5

    5465be8130c00e73ed5b5e60262e2f92

    SHA1

    237e9fd2f6fd87cdc3f1e7b2a5e4e9514e6cc927

    SHA256

    d2a054362dd8be02514d2139466f2998220c122097ce75c6c7df875a172dc586

    SHA512

    08bc431cc7b8e29657ebcdab58ed769d9c992e7899b75f7a454e3db08ca61c6e15a7d2bf0adf90a3126dd77e99a81925b5eeb9102adf11a18cafa2ef42df9e0f

  • C:\Users\Admin\AppData\Local\Temp\is-R3FQJ.tmp\setup-program-jpk.tmp

    Filesize

    2.9MB

    MD5

    f63a314b6fef30ce0194ab5c556f5130

    SHA1

    d5ccd62c4566031fb30d0378f8d2006591329cce

    SHA256

    819820c235c79e40a071a5e3e680de7244c09f85fedfb88d8f6c1d7598981ae6

    SHA512

    94c45bc5ff5d3ac832f5371d027e23047bac2a28f5663d4dc43d55977f60da8791b05c773970340f345fbeda0a7865f4d7d921e85bb74c3e22ce1438b4f5633a

  • memory/1488-1224-0x000001FFF2770000-0x000001FFF2812000-memory.dmp

    Filesize

    648KB

  • memory/1488-1263-0x000001FFF6380000-0x000001FFF63BA000-memory.dmp

    Filesize

    232KB

  • memory/1488-1216-0x000001FFF1D80000-0x000001FFF1DC6000-memory.dmp

    Filesize

    280KB

  • memory/1488-1212-0x000001FFF1DE0000-0x000001FFF1E3A000-memory.dmp

    Filesize

    360KB

  • memory/1488-1210-0x000001FFF1FE0000-0x000001FFF263E000-memory.dmp

    Filesize

    6.4MB

  • memory/1488-1208-0x000001FFEF430000-0x000001FFEF4DA000-memory.dmp

    Filesize

    680KB

  • memory/1488-1218-0x000001FFF2640000-0x000001FFF276C000-memory.dmp

    Filesize

    1.2MB

  • memory/1488-1207-0x000001FFEEBE0000-0x000001FFEEC00000-memory.dmp

    Filesize

    128KB

  • memory/1488-1206-0x000001FFEECB0000-0x000001FFEECFA000-memory.dmp

    Filesize

    296KB

  • memory/1488-1222-0x000001FFF28C0000-0x000001FFF2A02000-memory.dmp

    Filesize

    1.3MB

  • memory/1488-1204-0x000001FFEEC20000-0x000001FFEEC60000-memory.dmp

    Filesize

    256KB

  • memory/1488-1220-0x000001FFF2AC0000-0x000001FFF2E0C000-memory.dmp

    Filesize

    3.3MB

  • memory/1488-1302-0x000001FFEE670000-0x000001FFEE680000-memory.dmp

    Filesize

    64KB

  • memory/1488-1226-0x000001FFF1EA0000-0x000001FFF1EE8000-memory.dmp

    Filesize

    288KB

  • memory/1488-1202-0x000001FFEEEF0000-0x000001FFEF1FA000-memory.dmp

    Filesize

    3.0MB

  • memory/1488-1200-0x000001FFEE000000-0x000001FFEE074000-memory.dmp

    Filesize

    464KB

  • memory/1488-1228-0x000001FFF32A0000-0x000001FFF33F2000-memory.dmp

    Filesize

    1.3MB

  • memory/1488-1229-0x000001FFEF380000-0x000001FFEF3A2000-memory.dmp

    Filesize

    136KB

  • memory/1488-1198-0x000001FFEF500000-0x000001FFF0A7A000-memory.dmp

    Filesize

    21.5MB

  • memory/1488-1231-0x000001FFF3C30000-0x000001FFF3D26000-memory.dmp

    Filesize

    984KB

  • memory/1488-1232-0x000001FFF2820000-0x000001FFF2870000-memory.dmp

    Filesize

    320KB

  • memory/1488-1193-0x000001FFE8E40000-0x000001FFE8E78000-memory.dmp

    Filesize

    224KB

  • memory/1488-1234-0x000001FFF4290000-0x000001FFF47E8000-memory.dmp

    Filesize

    5.3MB

  • memory/1488-1191-0x000001FFEB7B0000-0x000001FFEBC38000-memory.dmp

    Filesize

    4.5MB

  • memory/1488-1236-0x000001FFEF3D0000-0x000001FFEF3EC000-memory.dmp

    Filesize

    112KB

  • memory/1488-1237-0x000001FFF3240000-0x000001FFF326E000-memory.dmp

    Filesize

    184KB

  • memory/1488-1238-0x000001FFF3B70000-0x000001FFF3BA8000-memory.dmp

    Filesize

    224KB

  • memory/1488-1189-0x000001FFED540000-0x000001FFEDC9E000-memory.dmp

    Filesize

    7.4MB

  • memory/1488-1240-0x000001FFF5990000-0x000001FFF5A2A000-memory.dmp

    Filesize

    616KB

  • memory/1488-1187-0x000001FFEB280000-0x000001FFEB7A4000-memory.dmp

    Filesize

    5.1MB

  • memory/1488-1185-0x000001FFEC3E0000-0x000001FFED534000-memory.dmp

    Filesize

    17.3MB

  • memory/1488-1256-0x0000000000FE0000-0x00000000010F2000-memory.dmp

    Filesize

    1.1MB

  • memory/1488-1183-0x000001FFEAC00000-0x000001FFEB272000-memory.dmp

    Filesize

    6.4MB

  • memory/1488-1181-0x000001FFE6FD0000-0x000001FFE71B2000-memory.dmp

    Filesize

    1.9MB

  • memory/1488-1301-0x000001FFFD800000-0x000001FFFE062000-memory.dmp

    Filesize

    8.4MB

  • memory/1488-1261-0x000001FFF6870000-0x000001FFF6D98000-memory.dmp

    Filesize

    5.2MB

  • memory/1488-1264-0x000001FFF6340000-0x000001FFF6366000-memory.dmp

    Filesize

    152KB

  • memory/1488-1214-0x000001FFF1E40000-0x000001FFF1E98000-memory.dmp

    Filesize

    352KB

  • memory/1488-1300-0x000001FFFCE40000-0x000001FFFD7FC000-memory.dmp

    Filesize

    9.7MB

  • memory/1488-1297-0x000001FFF3FF0000-0x000001FFF400A000-memory.dmp

    Filesize

    104KB

  • memory/1488-1270-0x000001FFF6FF0000-0x000001FFF702C000-memory.dmp

    Filesize

    240KB

  • memory/1488-1268-0x000001FFF7070000-0x000001FFF70F0000-memory.dmp

    Filesize

    512KB

  • memory/1488-1296-0x000001FFF3EB0000-0x000001FFF3ECE000-memory.dmp

    Filesize

    120KB

  • memory/1488-1266-0x000001FFF6F90000-0x000001FFF6FE2000-memory.dmp

    Filesize

    328KB

  • memory/1488-1295-0x000001FFF4030000-0x000001FFF4062000-memory.dmp

    Filesize

    200KB

  • memory/1488-1294-0x000001FFF3D90000-0x000001FFF3DA2000-memory.dmp

    Filesize

    72KB

  • memory/1488-1272-0x000001FFF7300000-0x000001FFF750C000-memory.dmp

    Filesize

    2.0MB

  • memory/1488-1274-0x000001FFF7D50000-0x000001FFF858E000-memory.dmp

    Filesize

    8.2MB

  • memory/1488-1293-0x000001FFF3D40000-0x000001FFF3D4E000-memory.dmp

    Filesize

    56KB

  • memory/1488-1276-0x000001FFF7890000-0x000001FFF7C0A000-memory.dmp

    Filesize

    3.5MB

  • memory/1488-1277-0x000001FFF3DB0000-0x000001FFF3E28000-memory.dmp

    Filesize

    480KB

  • memory/1488-1278-0x000001FFF89F0000-0x000001FFF8E42000-memory.dmp

    Filesize

    4.3MB

  • memory/1488-1279-0x000001FFF3D50000-0x000001FFF3D6A000-memory.dmp

    Filesize

    104KB

  • memory/1488-1280-0x000001FFF7510000-0x000001FFF766E000-memory.dmp

    Filesize

    1.4MB

  • memory/1488-1281-0x000001FFF8E50000-0x000001FFF9200000-memory.dmp

    Filesize

    3.7MB

  • memory/1488-1282-0x000001FFF96D0000-0x000001FFF9B9C000-memory.dmp

    Filesize

    4.8MB

  • memory/1488-1283-0x000001FFF70F0000-0x000001FFF71A0000-memory.dmp

    Filesize

    704KB

  • memory/1488-1284-0x000001FFF3E30000-0x000001FFF3E62000-memory.dmp

    Filesize

    200KB

  • memory/1488-1285-0x000001FFFAC10000-0x000001FFFBC7A000-memory.dmp

    Filesize

    16.4MB

  • memory/1488-1286-0x000001FFF9200000-0x000001FFF94C2000-memory.dmp

    Filesize

    2.8MB

  • memory/1488-1288-0x000001FFF71A0000-0x000001FFF7264000-memory.dmp

    Filesize

    784KB

  • memory/1488-1289-0x000001FFF3FB0000-0x000001FFF3FEC000-memory.dmp

    Filesize

    240KB

  • memory/1488-1287-0x000001FFF3E70000-0x000001FFF3EA4000-memory.dmp

    Filesize

    208KB

  • memory/1488-1290-0x000001FFF7730000-0x000001FFF77E2000-memory.dmp

    Filesize

    712KB

  • memory/1488-1291-0x000001FFFA180000-0x000001FFFA75A000-memory.dmp

    Filesize

    5.9MB

  • memory/1488-1292-0x000001FFF8720000-0x000001FFF88AC000-memory.dmp

    Filesize

    1.5MB

  • memory/3636-7-0x0000000000400000-0x00000000006EE000-memory.dmp

    Filesize

    2.9MB

  • memory/3636-9-0x0000000000400000-0x00000000006EE000-memory.dmp

    Filesize

    2.9MB

  • memory/3636-1175-0x0000000000400000-0x00000000006EE000-memory.dmp

    Filesize

    2.9MB

  • memory/3636-1177-0x0000000000400000-0x00000000006EE000-memory.dmp

    Filesize

    2.9MB

  • memory/4876-2-0x0000000000401000-0x00000000004B7000-memory.dmp

    Filesize

    728KB

  • memory/4876-8-0x0000000000400000-0x00000000004CC000-memory.dmp

    Filesize

    816KB

  • memory/4876-1178-0x0000000000400000-0x00000000004CC000-memory.dmp

    Filesize

    816KB

  • memory/4876-0-0x0000000000400000-0x00000000004CC000-memory.dmp

    Filesize

    816KB