Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    91s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/07/2024, 00:13

General

  • Target

    Soar Installer.exe

  • Size

    76.3MB

  • MD5

    4175b4ca85b0c2a70eec398354ac57e3

  • SHA1

    2db6fb3a6b9cabb29dcdd8a91aca8ef9136fd436

  • SHA256

    d3f8e7201ccb06225fe22fa19f5ab5c781ea34e66e120836066845711fe88f2e

  • SHA512

    7fd55889ed25f4e8e537b157e3ddff61d2d83503b0a55c65df4a2e4d6349c0c408c66a860ba7441f33bc2f3cd1455b747ff176394daed42bba9d2b55e845e18a

  • SSDEEP

    1572864:ypSi+t2/oOyCdG/cfCi8ivkRmqRpeZH5CCUWuEXDQIjHnHeydt4QO:YI2dxUcfCi8+kRJEZH5CCXXbjHHFdSQO

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 4 IoCs
  • Loads dropped DLL 22 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs
  • Suspicious use of WriteProcessMemory 10 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Soar Installer.exe
    "C:\Users\Admin\AppData\Local\Temp\Soar Installer.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2820
    • C:\Users\Admin\AppData\Local\Temp\is-AFR6A.tmp\Soar Installer.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-AFR6A.tmp\Soar Installer.tmp" /SL5="$402C0,79072085,1088512,C:\Users\Admin\AppData\Local\Temp\Soar Installer.exe"
      2⤵
      • Executes dropped EXE
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:4464
      • C:\Users\Admin\AppData\Local\.soarclient\Soar Client.exe
        "C:\Users\Admin\AppData\Local\.soarclient\Soar Client.exe"
        3⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:2448
        • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\bin\javaw.exe
          "C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\bin\javaw.exe" -version
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4460
        • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\bin\javaw.exe
          "C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Local\.soarclient\Soar Client.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of SetWindowsHookEx
          PID:2384

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\ProgramData\Oracle\Java\.oracle_jre_usage\fcb08f1b1a875e32.timestamp

    Filesize

    70B

    MD5

    8557cce8b171d6f46b89d4df8ea1af80

    SHA1

    13ebf8cab07d247c565c7d97441548755298c544

    SHA256

    c4294709eb168d69fb9971dc4a8f8b5b549ada43c9158ae8df342aceba3673e8

    SHA512

    0be9feebe495c19fb687ef37171dbb5d5f79a81c2563465b1d6fc3cf0e158b879177be1ad98c97f4e132aa7b14c225a199b9d4a20aa898bc5d776c97ee7b79b3

  • C:\Users\Admin\AppData\Local\.soarclient\Soar Client.exe

    Filesize

    25.8MB

    MD5

    6ef37e591966538acfcb470d0fdb92a7

    SHA1

    e2f49270c6bb8d9ecf32f80155805c15654d9189

    SHA256

    db2845e42b24740e2cc3b048dc6810ff9c39bddcdf63ebdaef1d017afaf0c58e

    SHA512

    0f529d947b024e8061d2695b5fa343764c9730a9e31953693b52aa33291c6f204b5627fe9186b454f7448b0191852cab19e1dd288515a96dad3e9306f198d228

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\bin\awt.dll

    Filesize

    1.4MB

    MD5

    cc3f8d2b68e9c473c9d794eb69fd3264

    SHA1

    87391c7a9acabb8ed73bfa90823ddfbcaf47ccfd

    SHA256

    0964f770a2047c38abfb2f30968edc1f52b127d769a9e63dedd8f218a75d2645

    SHA512

    6384e3c01e50dc35f9d800256cac2807dcdc921a47a5877e385a794b8c83e8e097a4012be21fa2b67feef02cd1ce9e23f04a3b17ee51ec83267522be782a13ff

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\bin\fontmanager.dll

    Filesize

    279KB

    MD5

    0400e77daaaf35d95ddcfac50ed9643f

    SHA1

    dd4013391ca6b7297a25d99633a616b3db2f1565

    SHA256

    ef5b2f917815efb820c78f413df29d26c3b546d8a40a7a729e238cbf330ad8af

    SHA512

    33c71ab35bf943deecaba336bccea173944fdc403dbb2994fb619ff45d2d53455281a02abf18095e8fe4e69bad1fd0d930aaa0a9a7e8146174829c7107840bd9

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\bin\java.dll

    Filesize

    161KB

    MD5

    23dc9ea08f4599c59d681f1c771c744c

    SHA1

    01cf00446982ff6843f7bed429f875091fc80715

    SHA256

    29659ce10aa5ceb1af089dea04ea482d13bb227905912e88c4090b2cb57b137f

    SHA512

    66f461d1c5753c8bd9e51aa316dae90e8545e91ca3040ff7fb13f427dc9ca7fdcc1f9544fb55d3e62c6e3748d5452860f524c609d7c359fa832d67699e8c25bd

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\bin\javaw.exe

    Filesize

    271KB

    MD5

    6231e89239bd86005fc2fb353a8526b4

    SHA1

    3a107bd11ae514e15045899bde8785cdb6581aad

    SHA256

    80a21c722e3b66dec5ba055ffdc676a60df9e51920df87989c4c4e17a86c1362

    SHA512

    8abe107670bd857885b1051f825ae5b5e05d72ee856282d569a505edfccdb5f78461e5363f74e91022129478ecec5febdcf11d3abbb86818883ac72e45aca095

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\bin\management.dll

    Filesize

    41KB

    MD5

    1bf4b967c833f1de30a17167ebe73d31

    SHA1

    963432d72bb03aaea3cbff2ab9aad86f1e23a993

    SHA256

    a2e64efef4b3f680a42eceb32c0fd8fd0a0f3bbdb2339fb8fbe03faa02d0da27

    SHA512

    55fcc71b8afd88e8c7797510050af45b39c462db895fe04183afb514a0ff9352612ca00d595c09a147caaf15ca2ea642fb372009f69bb65f67c60e7bd59e9323

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\bin\msvcp140.dll

    Filesize

    613KB

    MD5

    c1b066f9e3e2f3a6785161a8c7e0346a

    SHA1

    8b3b943e79c40bc81fdac1e038a276d034bbe812

    SHA256

    99e3e25cda404283fbd96b25b7683a8d213e7954674adefa2279123a8d0701fd

    SHA512

    36f9e6c86afbd80375295238b67e4f472eb86fcb84a590d8dba928d4e7a502d4f903971827fdc331353e5b3d06616664450759432fdc8d304a56e7dacb84b728

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\bin\net.dll

    Filesize

    101KB

    MD5

    fc1b8c8cb988e608e773aefe0210028c

    SHA1

    d13cf17dd51c3231a60b31f8c79b3ba81227bbe1

    SHA256

    f8156b2e84c249d6d134f7c78a2f27b93830fd70a7e65847c0c9dfb52648e894

    SHA512

    a658db6e5d0820896ef4f58d442defb7c1d3b3e6185305c2b97f89d6480758bf4e37451d36b6e64c04bd9dfb400aa8e2de8c152bbc45f143504b0a584bf1b753

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\bin\nio.dll

    Filesize

    64KB

    MD5

    90fc946cb34b0e9eaf58a080d3ceefbb

    SHA1

    0922e5a960a2203ef68c6098a98120bf97672e70

    SHA256

    0b052e9d054615407453b1aa735ac423fc3f61c79784cbcd42ded3e0a80da73b

    SHA512

    9b20467ce9f41c553f15d0296e55f705a5ec1925667fdc284dd56ea314655dc87e0b444509438879d1a73c3bd041bfb8ff7ef736df82495774cb4d50ade6e27d

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\bin\server\jvm.dll

    Filesize

    8.2MB

    MD5

    942d98b1501f8c9785ee31abc189b1d1

    SHA1

    79a3db289778c0b56ebbf3200dcc6c3438da00c4

    SHA256

    1909bab49e71b939c7c83264222b336037f812ea9facf8528d1f888d395b1e1a

    SHA512

    3c0e0ce6e8aa3c91ef1ef1d5cf5327eaa9613986cb46995cd154b292c6c827aa3e4f4703571f21007fd1c295bb8c3b49b609c7e49352ce467d426f5153d512f9

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\bin\sunec.dll

    Filesize

    139KB

    MD5

    480ae69ce0b0045411d62230bba525a9

    SHA1

    0037293913a6e6f27cab2244696341be5dd75b10

    SHA256

    6ff741166da2267f4b614f75d36f63bf956690447050bd376cf63ab7b8e9cbde

    SHA512

    8129eac691c3d484b318e9f0bec78fe7bb3d02ecc07fdd825a11de0303dc286472f8a87e3564a0cf389a3df969a46127866e3d100ba8ba0c8289f429b94452e3

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\bin\vcruntime140.dll

    Filesize

    83KB

    MD5

    1453290db80241683288f33e6dd5e80e

    SHA1

    29fb9af50458df43ef40bfc8f0f516d0c0a106fd

    SHA256

    2b7602cc1521101d116995e3e2ddfe0943349806378a0d40add81ba64e359b6c

    SHA512

    4ea48a11e29ea7ac3957dcab1a7912f83fd1c922c43d7b7d78523178fe236b4418729455b78ac672bb5632ecd5400746179802c6a9690adb025270b0ade84e91

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\bin\verify.dll

    Filesize

    52KB

    MD5

    e2cc910caccde3ddea08b9d2c4dc8b71

    SHA1

    ab308c687668fe0026160232f69e21b74bbe572d

    SHA256

    fc55cbdaabcbde5cb41901a83d781bcfac03c0c4065e5c0c10b146365bbdd528

    SHA512

    d334a9ffbb88e2b30ea620917728b6fca32636fa2c44ca0e3d88eca6de5ba149f9de1bbf796bdca447101d89e16aaf469f23f49a1f34b7c15528430606b904b3

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\bin\zip.dll

    Filesize

    83KB

    MD5

    eb34b0abcd15b7e41cf4006c082d71b7

    SHA1

    471e74d6e0b48c878945574244c2075ed35dcbf1

    SHA256

    2245c6bb65085f1f0ce6980a06af46916a82c63cbbb83fb34783ae4bd6da42f2

    SHA512

    ae008698429be0d46108ab5a9dd9c854d3bce150ba63c6230471a8884b5950a3e5f3774b124b033a15e4828a6e5ec80cb487d58beb3a6c8957d9165070c0ea76

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\lib\accessibility.properties

    Filesize

    149B

    MD5

    2ed483df31645d3d00c625c00c1e5a14

    SHA1

    27c9b302d2d47aae04fc1f4ef9127a2835a77853

    SHA256

    68ef2f3c6d7636e39c6626ed1bd700e3a6b796c25a9e5feca4533abfacd61cdf

    SHA512

    4bf6d06f2ceaf070df4bd734370def74a6dd545fd40efd64a948e1422470ef39e37a4909feeb8f0731d5badb3dd9086e96dace6bdca7bbd3078e8383b16894da

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\lib\amd64\jvm.cfg

    Filesize

    634B

    MD5

    499f2a4e0a25a41c1ff80df2d073e4fd

    SHA1

    e2469cbe07e92d817637be4e889ebb74c3c46253

    SHA256

    80847ed146dbc5a9f604b07ec887737fc266699abba266177b553149487ce9eb

    SHA512

    7828f7b06d0f4309b9edd3aa71ae0bb7ee92d2f8df5642c13437bba2a3888e457dc9b24c16aa9e0f19231530cb44b8ccd955cbbdf5956ce8622cc208796b357d

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\lib\charsets.jar

    Filesize

    2.9MB

    MD5

    f4cb41a6ae5faacbc8f4491314b95fac

    SHA1

    c1ccfc571bfea9ce7495232a4ad175cb6523afcf

    SHA256

    cf2254ebcf8498993b5829d96621a6ddab5e227cf94f4e562ac6f8fe3d694d27

    SHA512

    738a678f6604447d1b55c2bd292b03149be414de15605f4d99b838355a5f3be956abf8eca2118865541d20309acc7260d6f64ed6c8764df390db7cc410777d2c

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\lib\ext\cldrdata.jar

    Filesize

    3.7MB

    MD5

    f2fb915036ae0a68866443b946ea62f2

    SHA1

    424f117e4367c181de4b4940a26f474a2495a3b0

    SHA256

    819d13e7e058f0abfc32d74e6322a3d76e751ce13ed0d2b7410d5aaa1a2c2f97

    SHA512

    9418cdeb9c7b07ef5e3db9f2e02972b2c62f1e81e4e705e8fd0f1c76d5a97efc371a256ad21b2183123d7588737e81b964616dea0422236536dcc958cc54e83c

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\lib\ext\localedata.jar

    Filesize

    2.1MB

    MD5

    24a2d12be6e1e91efddb5d121120f8cf

    SHA1

    71ea3600c8762ec60259e54c37b820ddce9def9d

    SHA256

    14bbab44e6a7b76b53d8176fc9e2ed9521584669350c121dce1a99d078975aa0

    SHA512

    2167c7c2501aa13d5665a4680478c8fcb09c357f0cd20fbdbf7fe5c93d82555b3e34eebb921552660e78143fb67b8b268b2fb30929695918e137e410dec22141

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\lib\ext\meta-index

    Filesize

    1KB

    MD5

    005faac2118450bfcd46ae414da5f0e5

    SHA1

    9f5c887e0505e1bb06bd1fc7975a3219709d061d

    SHA256

    f0bce718f8d2b38247ce0ac814a1470c826602f4251d86369c2359ff60676bd8

    SHA512

    8b618c74b359ab3c9d3c8a4864f8e48fe4054514a396352a829a84c9b843a2028c6c31eb53e857e03c803294e05f69c5bf586e261312264e7607b2efd14f78a9

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\lib\ext\sunec.jar

    Filesize

    42KB

    MD5

    8f584d88c5b02b9dde9b4ac752ee05f6

    SHA1

    2dfc8984e13a84aa39b1766072219f6df1a58228

    SHA256

    b7467f44b1e57661c56726e72d5c0ad1d8b608813c9f723373a0e98e5648c98f

    SHA512

    6910bad9e07dda3b8ed8aab665ac4fc66ba4b558f138fc23ce2bee687fb0fc6f34a4dc1e35bc11e199e5f23781a979a1374aefeca0cc172a06ea09945d2fa867

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\lib\ext\sunjce_provider.jar

    Filesize

    286KB

    MD5

    67ac818985503bcc5ef5545a80af1240

    SHA1

    4cfd63f68a2d4c2ea88d6cc536dbafe4aeafbe40

    SHA256

    9990d3b64e314ab6d44898bc7f99d0be2e7990b352d8025ac9f5e6afb547cfd9

    SHA512

    37755048e19af7757c9cb85b54fbfcd26dc8f71fd632574f6db73899d718044cf0e1b8cf754d8d55517e09c557d168210834da9c461b027b5e007cea1f6aea48

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\lib\fontconfig.bfc

    Filesize

    3KB

    MD5

    ad8365719b70a2deade79683d8986a15

    SHA1

    88cbf37d05f28691b7f82e74fa891792e93b41b9

    SHA256

    b2ab990df3c4c1c2ec4317aaf22c946df17f0796727dbda712402307c56558ac

    SHA512

    287b19b6996a189baa3cf2894a57917b14b0615d551c5248ad55860678e5d6e58dd21247799bebe91b8236fc2f5300399fcfc1bb159edb9ae8d663805c6a30f1

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\lib\images\cursors\is-NIL63.tmp

    Filesize

    153B

    MD5

    1e9d8f133a442da6b0c74d49bc84a341

    SHA1

    259edc45b4569427e8319895a444f4295d54348f

    SHA256

    1a1d3079d49583837662b84e11d8c0870698511d9110e710eb8e7eb20df7ae3b

    SHA512

    63d6f70c8cab9735f0f857f5bf99e319f6ae98238dc7829dd706b7d6855c70be206e32e3e55df884402483cf8bebad00d139283af5c0b85dc1c5bf8f253acd37

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\lib\jce.jar

    Filesize

    117KB

    MD5

    781dc309ae8df17c7b14dac228bd6e5f

    SHA1

    aeedfb043d8c8a735c2c23a32985e68717148c9d

    SHA256

    6696d67667cec11385a10b1aecfb5e9c799e3cabb0e435a073487a9e688cc70f

    SHA512

    23f8e4154e2745b85cdef8b8a9824dd0919c0fd11178ee8dc85cef728dccd4ec705961e7ac3c2fdea8ba8a67846b37aa623b613da634344b7b2c0aacffbb980c

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\lib\jfr.jar

    Filesize

    559KB

    MD5

    e9e8b656d73513d45d5b042368c0f77c

    SHA1

    e5b51233e08a1c37fde4cb54a42a814f62937ccf

    SHA256

    ac5e1dcb727e19ec1d549d6011d2a80695f4e233f6b5f511d0b11818c1c6f324

    SHA512

    b72ba451abe1277f5bbb66c2a4dd8323e6048042bcd75f3f6e27636fa2e3caefa2352a0504477c7d6d1fbce720514012cf3356110999137cf695db1d47aa2d31

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\lib\jsse.jar

    Filesize

    1.7MB

    MD5

    989dccca127aa4760d091c1c4c71d1ee

    SHA1

    04de3c4d0aeac4c698429aa9a11b2a10ba235ff0

    SHA256

    b5ac0fe4e10a61fac2cb32afed644e78ce284aff214c905a380969761558421f

    SHA512

    239bd95c12408a595a94f91a23340d88e19896b6bf7f6c27d3f04fe7c25c216e040e60d1a6eb0536c8f9b1ad315336be8aefe845ec974bd1ff468225818e881d

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\lib\logging.properties

    Filesize

    2KB

    MD5

    809c50033f825eff7fc70419aaf30317

    SHA1

    89da8094484891f9ec1fa40c6c8b61f94c5869d0

    SHA256

    ce1688fe641099954572ea856953035b5188e2ca228705001368250337b9b232

    SHA512

    c5aa71ad9e1d17472644eb43146edf87caa7bccf0a39e102e31e6c081cd017e01b39645f55ee87f4ea3556376f7cad3953ce3f3301b4b3af265b7b4357b67a5c

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\lib\meta-index

    Filesize

    2KB

    MD5

    91aa6ea7320140f30379f758d626e59d

    SHA1

    3be2febe28723b1033ccdaa110eaf59bbd6d1f96

    SHA256

    4af21954cdf398d1eae795b6886ca2581dac9f2f1d41c98c6ed9b5dbc3e3c1d4

    SHA512

    03428803f1d644d89eb4c0dcbdea93acaac366d35fc1356ccabf83473f4fef7924edb771e44c721103cec22d94a179f092d1bfd1c0a62130f076eb82a826d7cb

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\lib\net.properties

    Filesize

    5KB

    MD5

    8bc6628d01bad30798440cc00f638165

    SHA1

    fd9471742eb759f4478bb1de9a0dc0527265b6ea

    SHA256

    31ce7ce29c66a1696a985a197195b5e051b2c243ea83e9d1de614f0c4b4f7530

    SHA512

    8da3439774a07a6309f985d1a29dda5383975bbdf6b8e2809bab69a2c44f65d3de2a546231ed6e183864193f834c9a7042fdcc4ee10181d0bd3891363032c242

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\lib\resources.jar

    Filesize

    3.4MB

    MD5

    2aff0487ac3afeec87a90752654ade0d

    SHA1

    770c8c99d6d93f680338cc8e234d0f8766cce836

    SHA256

    ed9f7a1288929464e9ff645371cec95a5b89ac89378485d1b47ddda53d28b95e

    SHA512

    b732dac84b352d2cccec59ac57e73ad0d6928cd11b7c0c0a131ebaba3c8d7e11215c843116c4262f3aa42508802ab8f6cf22799f72b53a85018d55cb4040f5d6

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\lib\security\blacklisted.certs

    Filesize

    2KB

    MD5

    8273f70416f494f7fa5b6c70a101e00e

    SHA1

    aeaebb14fbf146fbb0aaf347446c08766c86ca7f

    SHA256

    583500b76965eb54b03493372989ab4d3426f85462d1db232c5ae6706a4d6c58

    SHA512

    e697a57d64ace1f302300f83e875c2726407f8daf7c1d38b07ab8b4b11299fd698582d825bee817a1af85a285f27877a9e603e48e01c72e482a04dc7ab12c8da

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\lib\security\cacerts

    Filesize

    101KB

    MD5

    7b85ca53850caadc3fcebe933bd36f9c

    SHA1

    6f63ca982d8dbe173db90c61baa90b65f890fbcf

    SHA256

    5da161b94ec09f9a71a4f5ccc66045df5acd92861c85e3b983546f2356c52adf

    SHA512

    df9498cc15a141c3316e569df20dd9dcaaa7dcd0104890b665cf4eb2b2637e62f645d5196258dee584dce91457c4c51aff69ff77681402f57dabe1b737b8c2a5

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\lib\security\java.security

    Filesize

    55KB

    MD5

    9b2547a905c3140b80405617f810b96e

    SHA1

    76651a6ee0bc610eefd0c160543915a9e285e9b2

    SHA256

    9297035c8b63d93f6dc19ecd3ff22f0397a8f371d468b683b598692107f61a8f

    SHA512

    45e4b7d6a2aa9337f9d6612d6627dbf4159ce40b9998e511d237c2e3d4f1056f06088031d4e45ab36c6c6a1167f05d831f1817624d49b8222033e6222cb1e825

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\lib\security\policy\unlimited\US_export_policy.jar

    Filesize

    3KB

    MD5

    6cbca5808b4a8613d2fed6fe4a84c449

    SHA1

    0135b30ebec03fb69d79cdc3126e608d9effb8b2

    SHA256

    761aab2969883e9e5ea76df63ca404fb67673efc3f97def057f8e22517fc9518

    SHA512

    4d9bf052aa124d07673c601cbfb83223b87369f7be7575a13e13c0d893e57849ba11e430b7769901782c26471528dfaa130996916451e1a7e38cf28468e44cfa

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\lib\security\policy\unlimited\local_policy.jar

    Filesize

    3KB

    MD5

    360663f26c5584e6c6127254b261fa0c

    SHA1

    aee6515eede2ad7c697ba8a61bdd9359be3319d2

    SHA256

    02f69a433405ea928c89a8aade74e5462282ccb9a9d30851312ed3459398f85c

    SHA512

    e3920d5abbbe6b0e3029ed1e0b2ce1a53da6c7e728f635b12f00b1fd2eb6151fff74b9dc85ec0c0920f7fda440c1604d24ca766cdbcb78be3425088d97e00208

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\lib\tzdb.dat

    Filesize

    104KB

    MD5

    c173f17e735cbac3634a8cd5e0bec9e3

    SHA1

    dcb5575f9c41e7510159c7003fc13b019837b5e9

    SHA256

    e03ee2a5a7d4f25e2fe2e43f8f04135e53e015d144e976bb06c9ccffda9c09ec

    SHA512

    ab972a8f65ef4d50be4451bc2cbd9f2b6137b19d2dd8f0ca93463dae7d485201f9f7e3ed9310c12d46d274b20c2d3b5cfd43b5d2e1ad192f55fb534d9187c465

  • C:\Users\Admin\AppData\Local\.soarclient\jre1.8.0_333\lib\tzmappings

    Filesize

    9KB

    MD5

    62bc9fa21191d34f1db3ed7ad5106efa

    SHA1

    750cc36b35487d6054e039469039aece3a0cc9e9

    SHA256

    83755efbcb24476f61b7b57bcf54707161678431347e5de2d7b894d022a0089a

    SHA512

    af0ddb1bc2e9838b8f37dc196d26024126ac989f5b632cb2a8efdc29fbce289b4d0bac587fe23f17dfb6905ceada8d07b18508db78f226b15b15900738f581a3

  • C:\Users\Admin\AppData\Local\Temp\is-AFR6A.tmp\Soar Installer.tmp

    Filesize

    3.3MB

    MD5

    12f82197a0231c9c3ce864008b421869

    SHA1

    1f460c14e6b31cfdd79456023933aa8cd5088905

    SHA256

    18a287987ef5c733faef4b8837fb4590ed189f3b9a6f47ca8ab7c30e861d3f42

    SHA512

    133949c9b18a4ad9d42eb7be2b56e97e263494c5d14c561b0a705c10ab194c1a97bd837b568fe22a65abd74e1945f47277ed32dbe359849ae97ba2ae03952c67

  • C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.3.2-snapshot\x64\glfw.dll

    Filesize

    484KB

    MD5

    0580d279ea1497d2e7a499c9fdcc2293

    SHA1

    441763565f855644c715e1adfe6f7ede4bfebe26

    SHA256

    6856d496708ef44499c3be8f0ad347af64c84d07a84e3d0612ec4e645c5fc245

    SHA512

    62d9400c5a9b6da634ad28cb6de10c8860fa5a10558dea507cc4741c411c6272e0d03a9ecf99af2e4e76a45ace26537426706a6462f3d6141c8388f28da90877

  • C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.3.2-snapshot\x64\lwjgl.dll

    Filesize

    465KB

    MD5

    c01cdc2b62193d2626e15e6bf42fa620

    SHA1

    2a78383cdda7062a6a7fea9acaf0b1f3dcdf8577

    SHA256

    4cab9ece5a2c7ec73a4ddb1c6980c5acb337aeccc470858c632bc23bfb26a698

    SHA512

    4dd91559b2a1ed18bd41006e74fb2a8ae9e7a9a8b5a6575c00bd914f8fac4570571028a9b9ad3ad450de8c854733da57f401f88e1372fdcc99902cdb883d57cf

  • memory/2384-652-0x0000010ADB5A0000-0x0000010ADB5A1000-memory.dmp

    Filesize

    4KB

  • memory/2384-653-0x0000010ADB5A0000-0x0000010ADB5A1000-memory.dmp

    Filesize

    4KB

  • memory/2384-777-0x0000010ADB5A0000-0x0000010ADB5A1000-memory.dmp

    Filesize

    4KB

  • memory/2384-771-0x0000010ADB5A0000-0x0000010ADB5A1000-memory.dmp

    Filesize

    4KB

  • memory/2384-676-0x0000010ADB5A0000-0x0000010ADB5A1000-memory.dmp

    Filesize

    4KB

  • memory/2384-734-0x0000010ADB5A0000-0x0000010ADB5A1000-memory.dmp

    Filesize

    4KB

  • memory/2384-681-0x0000010ADB5A0000-0x0000010ADB5A1000-memory.dmp

    Filesize

    4KB

  • memory/2384-757-0x0000010ADB5A0000-0x0000010ADB5A1000-memory.dmp

    Filesize

    4KB

  • memory/2384-782-0x0000010ADB5A0000-0x0000010ADB5A1000-memory.dmp

    Filesize

    4KB

  • memory/2384-760-0x0000010ADB5A0000-0x0000010ADB5A1000-memory.dmp

    Filesize

    4KB

  • memory/2384-761-0x0000010ADB5A0000-0x0000010ADB5A1000-memory.dmp

    Filesize

    4KB

  • memory/2448-633-0x0000000000400000-0x000000000046A000-memory.dmp

    Filesize

    424KB

  • memory/2820-0-0x0000000000400000-0x0000000000517000-memory.dmp

    Filesize

    1.1MB

  • memory/2820-651-0x0000000000400000-0x0000000000517000-memory.dmp

    Filesize

    1.1MB

  • memory/2820-8-0x0000000000400000-0x0000000000517000-memory.dmp

    Filesize

    1.1MB

  • memory/2820-2-0x0000000000401000-0x00000000004B7000-memory.dmp

    Filesize

    728KB

  • memory/4460-615-0x0000018AEBBE0000-0x0000018AEBE50000-memory.dmp

    Filesize

    2.4MB

  • memory/4460-627-0x0000018AEBBE0000-0x0000018AEBE50000-memory.dmp

    Filesize

    2.4MB

  • memory/4460-625-0x0000018AEBBC0000-0x0000018AEBBC1000-memory.dmp

    Filesize

    4KB

  • memory/4464-6-0x0000000000400000-0x0000000000753000-memory.dmp

    Filesize

    3.3MB

  • memory/4464-9-0x0000000000400000-0x0000000000753000-memory.dmp

    Filesize

    3.3MB

  • memory/4464-11-0x0000000000400000-0x0000000000753000-memory.dmp

    Filesize

    3.3MB

  • memory/4464-585-0x0000000000400000-0x0000000000753000-memory.dmp

    Filesize

    3.3MB

  • memory/4464-644-0x0000000000400000-0x0000000000753000-memory.dmp

    Filesize

    3.3MB