hxxps://drive[.]google[.]com/file/d/1_fFHxWCmU8DsQZ5cmki8n5HHLnoWIs_3/view

Analysis

max time kernel
1049s
max time network
1014s
platform
windows10-2004_x64
resource
win10v2004-20241007-es
resource tags

arch:x64arch:x86image:win10v2004-20241007-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
01-11-2024 20:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://drive.google.com/file/d/1_fFHxWCmU8DsQZ5cmki8n5HHLnoWIs_3/view

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
1920	java.exe
2300	java.exe

Loads dropped DLL 12 IoCs

pid	Process
1920	java.exe
1920	java.exe
1920	java.exe
1920	java.exe
1920	java.exe
1920	java.exe
2300	java.exe
2300	java.exe
2300	java.exe
2300	java.exe
2300	java.exe
2300	java.exe

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
3	drive.google.com
6	drive.google.com

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\INF\display.PNF	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133749660029658231"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings	chrome.exe

Opens file in notepad (likely ransom note) 2 IoCs

ransomware

pid	Process
116	NOTEPAD.EXE
2064	NOTEPAD.EXE

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4948	chrome.exe
4948	chrome.exe
5000	chrome.exe
5000	chrome.exe
5000	chrome.exe
5000	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe
Token: SeShutdownPrivilege	4948	chrome.exe
Token: SeCreatePagefilePrivilege	4948	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe
4948	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4948 wrote to memory of 4380	4948	chrome.exe	84
PID 4948 wrote to memory of 4380	4948	chrome.exe	84
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 2828	4948	chrome.exe	85
PID 4948 wrote to memory of 3652	4948	chrome.exe	86
PID 4948 wrote to memory of 3652	4948	chrome.exe	86
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87
PID 4948 wrote to memory of 680	4948	chrome.exe	87

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://drive.google.com/file/d/1_fFHxWCmU8DsQZ5cmki8n5HHLnoWIs_3/view
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7fffd7d6cc40,0x7fffd7d6cc4c,0x7fffd7d6cc58
  2⤵
  PID:4380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1940,i,8057715205412948979,3743029849149116384,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1928 /prefetch:2
  2⤵
  PID:2828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2164,i,8057715205412948979,3743029849149116384,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2176 /prefetch:3
  2⤵
  PID:3652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2248,i,8057715205412948979,3743029849149116384,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2592 /prefetch:8
  2⤵
  PID:680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3136,i,8057715205412948979,3743029849149116384,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3152 /prefetch:1
  2⤵
  PID:1228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3148,i,8057715205412948979,3743029849149116384,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:4548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4356,i,8057715205412948979,3743029849149116384,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4524 /prefetch:1
  2⤵
  PID:5016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4788,i,8057715205412948979,3743029849149116384,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4800 /prefetch:8
  2⤵
  PID:4268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=5092,i,8057715205412948979,3743029849149116384,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4364 /prefetch:1
  2⤵
  PID:4128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5372,i,8057715205412948979,3743029849149116384,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3264 /prefetch:8
  2⤵
  PID:3480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=4920,i,8057715205412948979,3743029849149116384,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4864 /prefetch:8
  2⤵
  - Drops file in Windows directory
  - Suspicious behavior: EnumeratesProcesses
  PID:5000

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
1⤵
PID:4720

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1300

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3480

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\" -an -ai#7zMap1703:70:7zEvent21746
1⤵
PID:324

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\" -an -ai#7zMap8021:70:7zEvent22254
1⤵
PID:4868

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Desktop\" -an -ai#7zMap31124:66:7zEvent22723
1⤵
PID:1652

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Desktop\Rise\Start.cmd" "
1⤵
PID:872
- C:\Users\Admin\Desktop\Rise\files\azul-1.8.9_345\bin\java.exe
  ..\files\azul-1.8.9_345\bin\java.exe -noverify -XX:+DisableAttachMechanism -Xms4096m -Xmx4g -Djava.library.path=..\files\1.8.9-natives-win -cp "..\files\RiseCompressed.jar;lwjgl.jar;lwjgl_util.jar" net.minecraft.client.main.Main -uuid fc5bc365-aedf-30a8-8b89-04e462e29bde -accessToken yes -version 1 --assetIndex 1.8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1920

C:\Windows\system32\NOTEPAD.EXE
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\Rise\fixes.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:116

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Desktop\Rise\Start.cmd" "
1⤵
PID:2352
- C:\Users\Admin\Desktop\Rise\files\azul-1.8.9_345\bin\java.exe
  ..\files\azul-1.8.9_345\bin\java.exe -noverify -XX:+DisableAttachMechanism -Xms4096m -Xmx4g -Djava.library.path=..\files\1.8.9-natives-win -cp "..\files\RiseCompressed.jar;lwjgl.jar;lwjgl_util.jar" net.minecraft.client.main.Main -uuid fc5bc365-aedf-30a8-8b89-04e462e29bde -accessToken yes -version 1 --assetIndex 1.8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:2300

C:\Windows\System32\NOTEPAD.EXE
"C:\Windows\System32\NOTEPAD.EXE" C:\Users\Admin\Desktop\Rise\Start.cmd
1⤵
- Opens file in notepad (likely ransom note)
PID:2064

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

Filesize
649B

MD5
43fdad2434299be328bb1c16a5c4b20a

SHA1
3c420dedeee8d899a5b2ab6ae1350daaf641f5d2

SHA256
d24b580ce980c5aaa913b48f73b51ef9cc9bed818a200641fe8ea4dbd6c3faa2

SHA512
8515a3c71fc1cb9f66104d1bb7c4df8b7f6310089405103b5ea95c5e765b353abcabbcc6d1c53d7cab30b0ba02140a0eb20d44ae0bc401163cf7ce70e810aec5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
408B

MD5
3d5b85fbbf57b4dc0e8dcb40ac03ee45

SHA1
b502ccb0c9b630c8a936d25a3670374331f9df1c

SHA256
12f6cdd7dfd2661f8bdc7805f2815402f9b44d68038a7efe1e57c59895a0585e

SHA512
3287a9697d9f4c94b180aa0106ad279717d538c8ccca6e7ffdb4fabeaef07c6ed5d1aae66a8312d29ca7c942727c5432179ae62b54f62dbff03fe3d19ca8e972

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
6KB

MD5
96a7cc8c92f66108a1d9945a673edfc3

SHA1
2b12e8272726f28a1016eb145aebb2207c01a804

SHA256
24c8f444ba20cb5525dd6a46d565c05e961b38ae522d67ac91c7f0e30ad91297

SHA512
5c2454c5a19d6cabd84826cdd284f6db51c89c11c46a8899afa484a561f54e7623f9aad5ed55990bbb4586920c92e6fc399c7c146c6f0452ca37ac4ecf7c7e34

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
6KB

MD5
cd3cf2a96e38ec423a90022e2ee788db

SHA1
492b25dfa407607b54caa906881ee9643455124c

SHA256
2aab7c80ad2c93540d7af38ba281e52ec7d93e8b44a3b291409872087cb95339

SHA512
27144bc40a43cf2df8ee2e2c89fc0729f46770b83ee992201d8093e1268471ae0a75fc5dbe8bd8079059456aabe5f0bb4d95d812f95ffb53a22325de0e66d48f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1016B

MD5
4fd19578bb15a742cd4da748b86f4cde

SHA1
550c62b7fa08f5892eca65691f93d05b52fe39c9

SHA256
bfb62cf68dc21131f818a5c8ad1ee030af406e94497d919787496b879644c619

SHA512
c052163dd8b80b434016fba5f7bc1a5983012ba7aa63618229ee1e8057ddfbd0f58a5b169d04153c43bdbfef419a63a30527dd3812ac2138c2ec7ea4350ec179

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
891c102739aafaa7094ff09b1d5cc93f

SHA1
020ef16ef73b960e7f87567b60dd75a133176fd5

SHA256
1b0d142256456ee43ad0b867de752cb35f53942b2de76a00516aafef71e58b79

SHA512
ccd4d6448aa84e2a000f47beab306ee7f0c9713d3d32021d4760a83552da824f0270b25b87277ff8ceb38b8a98b77469dad03f1a11fe10b89fcf7a5164cfe033

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
69d175bc52efcfe4f963710199031dac

SHA1
ef2c9facf70363432e1e49455141fa9f915bcd1f

SHA256
1c6a360d33702b087748031a0adcc6d6f8e1a13041354b2d3b1d648cb11f7de9

SHA512
48dc71ec6f2eee5b9573c3abf460f44de6f6cc95c06ef1bc11b06aae58750d0c0c4cd4cf8fd2b2085afd9cc18595bc442b667436e1201bb6f0d90d9338b4eccd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
b5dc5ef53b4bfd86a3335c6a8b8c0512

SHA1
cc33c3ed30d4595155b2a8237d7f2c654141a76a

SHA256
59a418837a1230556cbca8eb747f833ef0148bd61329da25288e54d6b84e9bcf

SHA512
13fe46a617b0f9b75d5fc0c1d5f175174f886cdd0b336156dacf7c6ae2ac7050b3b4d86da0a7d639b57bc78bdaa72aa252c78464272f0e08dc768550dea280e4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
2370708960e5eab4580d8cbcbc638a73

SHA1
0fc94b735218ff89cbd3d2b61253c7c0246bdf64

SHA256
3e6013228070da449c281b543262f6246bcbf9c9e9d4e4e80ce6b8e98cf9c1bd

SHA512
cb7644d2ace5fa9d466486b89b6dbb9971c898b03dda90e0cd38f01c87de369f742f2fc6669271110d896ff736cc07fbf1110fe3ec4e9f3056b15ea1e51de247

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
b04fde829c4baee705c119db510106d7

SHA1
d78fc371d80c5d711365fa8904fc984ea2bbaf4b

SHA256
7ec0f646826871a6bc47c0d285e15098f4abba0da70303d140606b6331003b24

SHA512
6c57306eb165c1aa7d55ffd9a15737588fa5625cb1c375a40c42ce5c7bbaf3483c66bba67e45db543d56a0664d57665b5297b99ed495c0add60c4d96efa0d255

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
ae6bfc8bf0c97bac88685d964f013f42

SHA1
1c465db1be7c5a8c2b9564e6dc21609cccf36cec

SHA256
71919c5e628bfd15d6d5072bcb0f40bf10a3ad1e8103bc9660fb826fdcb3f26d

SHA512
3ed04e1ab479ac6aac63e25a323228292372a23c8b1aa8610c1dd10315613564bb9f5e2fb084efbeed8a6e07710220078cdf329c37281fb9b5417a3412868dfe

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
326403b4255c6d7af0e732ab20c914b8

SHA1
9041a0a0bfb719a261e8e1646c928649de8ae367

SHA256
688db6f92d00b4930850fabbd6739e037534766824c837d22064955f8f2d7820

SHA512
19df7ae92060138122f39c5d86d65feeea1f2857c0410e84802cf37fd8186900b552d464442485a7516a4d18a0de3b7f27abc057ce4ab77616afbf8b279c3425

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
90abdb75cbef0c828a22bdbb1eb5be53

SHA1
d954cd34e15a4c086b97ef20924f9124086f94fe

SHA256
7dd58c3700cba35391379990413e24df380ab2001282ffa8e07f0032dec992ff

SHA512
86c322d63032dca4eeea01c5b6d95078e59a15273db3dc4e956fb82b112c1ef66062dca9dbd687863c3402e0b2a0181adae7ba8698e910176b5ee2cf09f39177

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
7eba31290478683e12b51b5d700b3ef9

SHA1
22b8ab9fb958bc0b11803c6423ca9c1d1cb7f87e

SHA256
4de7bf48b0d33624db852ad19db66df1f38e36fbb9e06a4124e2374a3d5ab64a

SHA512
d88abf5cf0de59bf0220fef1ae3c8d962d419ea718f512be56d5ca597c7026ffdd4da6b2aa803718dccc8b7cc06cbab68c3db95aad3561cddb6a8e0077b42087

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
d8f80c60affb3207e768823f2b32ddee

SHA1
7a37ab5545d99da9f8815abf9707578436826ccc

SHA256
3504b584edfb1a0b7d9b40aa1618bc690ef1c982345a05855ee82c0e46f274e7

SHA512
4a29e174932b5a2706676c652ee6991cd473aa0b73278d8f671aeb80065365a1c27017efda5efd2802dc9d202fb5fc0b89a40c5e687414a25e3d65e74e53bfdc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
87edf577d58664bd578aaae20ae996f8

SHA1
53b1851e3c651f881c0bbaca3e73fed879ff7abc

SHA256
8f2ab33c419fb7075ef1a4d89f01941b18f16257a0938ef88b84872bd3d5d663

SHA512
3959c7bf8d6e872d2178dd2620b58b2a53b7fab50203be9ff15ade0efb86ee390042692caf3d9390cb5566abfa9ea1332137c324eff53ac5a58541c8fe09a3d3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
469f447cba0f3eb340bce37fb12b7f14

SHA1
691232a3462ea2ecd7b900b0d1a6cadd7a084d9c

SHA256
30e9d522e78165608ba1a48fcd6ad52145d62a7fd7cf392793dad47f4d2d60ed

SHA512
99843c7908faa5040843b17479d8ce9a76014e24b8fa217226ad382a58e43c1a3063082afb95c704d8d93fa1d7ddfaad0e423d3a5206b0872b0a192669f4aa67

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
fb713baba1616df81ed93d603a08d9dd

SHA1
5a412d9e39b0f76bc035e641570f5cc108a3eed6

SHA256
f0e96c15e53ffd3effd63ad5999c5d38eb30707a13a1f36cbc650f682b201a7b

SHA512
2dae2a30e0f767276c7821e802dea062a5bbdb9ff90b4a8ceddc3bf8705ed497d403c1f8c6ef2177fdb8b2a4572b96db09f7f15ad46ee406bca3b53934c1a690

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
75fa9e78b54c5c0a29b512daf00f2e69

SHA1
b19bf0413add7226be285d5be548cba9931dce66

SHA256
cc896d8e85b2ad36075723c9a5eb37e4538204c0bc760512c80de5d18d9aa688

SHA512
a1516ca279a48e0008fa5c7cbd9655ffa35ed53573ffe9e0bb1ec24763dec492051a831c4f1f429a3d946ec186bbdb0f787968fa3aaeded893e7348d346ffcf7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
ecab033c34f6ff08fd6aa06e73287db2

SHA1
da8a9933955217640bd727b743fc3c4d8ccadfbd

SHA256
4a5b5dd35e71e2b01a982ba6f0343d204923822e2f99bd49c96bba86d4ebed28

SHA512
d6d9c419ea7e5be089ad21d4b7463598145265876c826b81c638fc37411965990b7519ed72623b91a1360b35fd44f8957f8f8f0371bce5449b38cfb1c7590a59

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
700001f8dc22b8b166968fb9f2a1db41

SHA1
7b42d0fc0b7b67410f042e21d19a95f485ed7207

SHA256
2fcea76c4e73048c5e0070c3c5dcb34f80a354dc43cf7945369555e872bebbe3

SHA512
b916cc86abcdb9d7bafcef1c1590aacd1d62cc2f42fc57a6941d70786d436549940270c973b03e63dbab3c60c510af16f7ca2faed880d7adecd52708fdfc72c5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
2f3f278cbbde09577199ac6d183c0cdb

SHA1
ca97c3d60ba013fd5a1d955de968cf3850d5e8ea

SHA256
6476d46d97d3c65b610e07a78e62b786a4381caac948c7bf5bea9fe67b60cb98

SHA512
5428de0f5a060dac9c1edb08674aefa2532ffbfe02ec4c4b85dbb3a43381f5616dffc582e9f21884736234126b359f32f181a79a2c82ec1da1c62a116e585bf2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
640daf05209c3e02b7622b1815ca2647

SHA1
86c061961198fbeb74362c96fc46139d7d1043d6

SHA256
81d0cb7a6b6f5c2c12cbeba85e782a3cf02ec61e63e257e727aedbb455bf4d7f

SHA512
79d0d03d8fb886b982153701f29112bde51beabdcba44f816eb6fb2e08e1c3c2a07754355fdad9e518bd12327370a210a2b741866d33d49577c49d1c1001b704

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
c7f2a8c8ffee747e14e50ad0f7fb21d9

SHA1
0c15ca1624a6780b5742b204b266732b980d0a4f

SHA256
fab4c9340ee53f1b8c5995c89de6f7c32edc156188820d4740445fb8c5ba8941

SHA512
527d706feed6d16437f4c842cd956bf60741d0aac491d1e0294ec309d5e9971c8d3d6339a1973ba42edccdf06c0d031af3b92e1e2f3b3a80a1ab4f3ff60e9240

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
59649fabb161c6c9b0390579af5299d4

SHA1
552eb5a94f009a42902aaf5c2c4f13d16ff3e1fb

SHA256
96bfaf1ed682d157afdde72c294edf1e9f0690b3ace69eca493fa3466ff972ce

SHA512
c076171e2ec30b15381cdb90a1f0a56ce39db5c708affd060dad6ec9cfd11a8c3264de50d1e9638044220717b4fb32f6f1f735a077f5a50a88d1be23f8e05b98

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
ac355d6b639994db4a0fc5005eaf1f48

SHA1
565801500f0c45c57dcd0403f674adfcd1024de7

SHA256
779a93628251f0db9360fd4dde8ea773fb999fa71bcf69b4e8d46cdb7f7ad5f7

SHA512
1a4a17a6f94d80525a9b9a9c70c27aa5c132068abcd72e6b1eceb7f186bcd1c225e079d9f8bcd44e3e68b9f4be2d24c140b424b45a4474135a6104501b911dcb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
bfae4191c61c907f26bb20657d96e79f

SHA1
1c32fe3c0a37d15886eedc47fb94ee618f2da300

SHA256
7aed7e20e1fe1e45663abd68461461bf74f5306d1da2c0a69243467a4a65c779

SHA512
c0608fed710824d1aa6c29ddcceec8a60ba9164d9d1077fbc8c3b872c258232fb54732fa6ef63d39f530bfad3d5247462e70ac8a9bceb4de71c04850b91e9e31

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
a6d4714c7905e5d3281a18ed8c375e37

SHA1
314b210d3ae7229e4908ae2b4c335f40285a9c50

SHA256
598458c306d684005fd55ad5d320db323f8c41d95d22cb90a6c543d6ce410667

SHA512
64836aec39ca91e2bf2793ee8b3816e76f48b8392e882857d7731e04b4688b2d78b59d60959b2e070135a841bb1f23d0bbfd7e09b137ebf93e5371f7fbc781f3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
867e997a5b95aa40433410c5b82fc12f

SHA1
aa8c48dffcac37e13568f7fa5ba5556672762828

SHA256
00eaa1e5a36f5352e8a7b77c44aad3f0543332ac65e987f19d3a5ba9035d8b22

SHA512
302c3aecc7fa2d7808ca70eef23b3673340a404b8c0ebe4d0ef538301aadd0fa3962982c2f51775a9ae866e1a74e94caf18dbeeea38cabc41b51836e89eb9ea4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
082a34dc3b2b56d4eb6821b5c8e936a6

SHA1
6db6b6bdc57bee28b4d03eabcd587f53b9d31fbd

SHA256
98c2ad4bf826cc0815a6379f0928db4a7aa06a404f083e9063bb2045997da853

SHA512
2aadc155a6b5312965589dbf6971cc160fb247663d84e2846db5dc7bdd3d3767a8f72ac64a7efb3fc51658c08bbc9c120ffbb017ade3182e43e1d2f57660f493

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
1d268916fc9b6ba5dee195796351d0ba

SHA1
d0e0559e7a6b0da36a2c4e0fe2a3dfe898c5d235

SHA256
4da46e078f7dc9915c82cecb88ba77c581a059bd508ec19e2ec5df974c438e57

SHA512
be8148381ab7251df60d7ee83aac25d44845cffe80a2812bb029feac1f0db988a750db4361930975324160d251eb69b3e0eb1b93b40f3181a0202f6a132e3074

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
ea4c21ce5d85ffd02e61701557f15172

SHA1
22be92818059f339773bf95c2a79ecb46981f7d0

SHA256
9ec07064a8efe0a79b12b1883ab64a712c2f249fd69646e82ad5acacc15a588d

SHA512
313a2664df8cef6c3de047bb4bab3abaa104f6cb637e3d74e935e5930c9d8abe84807529de6888bd2e98582e918c93555c9df88e29c2c616ccc33da4c181975d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
6b2ecf27ff3304f4fe1f86c59de5c009

SHA1
3b7354b0f22eafea0b28bab5d7a9191d315e2406

SHA256
2c916fcfd25397a679edbe904132e711e45caac3007815fbcc1f620bd37f86a7

SHA512
ccc0003f8934f633c807247d18795611470703211eed67c6f24945e7aa74e4e3a3d3588f5a0830a75dc20dd52919953a035d4630e480fcd59e70c05c12ef12a4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
8b5082eeb90e813c06303dd4c324b337

SHA1
b8a4d687c9e29aa0b6e942adce72cc5ece4cbf95

SHA256
07cda8dd28b47f7332fb37a5bc4dee8fb4d9ecf749e0f6da4b7dd2ce71cb9d31

SHA512
fd99521c9dc78775c6abb0543e573c7f26d7f4e5d66f9f728f24bc8377b1bb07f6d66b3615961c1a5095f21dd624962bfcc7951f42677db7f44b52d3760c6609

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
e5b6a346b6a4bb2a2dfa4bf38a10e619

SHA1
8f137d71fd6f1b5f1402c9feb6316996700058f7

SHA256
8b77af2e38d569f4d7af8bce9df5b27170fcb3bdbc219270a2d5beb71c43611f

SHA512
bb5cf48ff567a91716cacfd10d07f02012ef6bda5a47ac0dc247f4bb2e03a0a50b336cdf54ddfecba28a502f59ead7250d52dd7fa996d75d14245ddfd090052e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
f3486f31a600d91e9bd6e8ff01912de7

SHA1
e6bbda4d9528d1ab3e70f793117c3f7591f7d4b7

SHA256
ef4fc407f5e594bb1af753cca0590e867bcfa85acf09fd5b92c55286ed523473

SHA512
810de69fb58b6c66a234d634d1cd4b055513e40726d93199df9a6cc7c1fd7c51a418f7e875778e3bfa7420804bde1afb68c020a0b3dd4d4ec8f9ee6743059fa6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
e0cd162107a694d41571246a2e6336f3

SHA1
f74ba80791166a4a8af29701f82891d8a14dd558

SHA256
e450e1db7d8ed56038caf42bcc9f4a56f683556c7289a3afdd3e64bed03c6752

SHA512
8dd6bd8db5e4f7067e0326f75b9bd24ddffb32b73469aeff476f219bf463f32f2d6c96ef374f3bcc2f9d87e537fb4981b422c57deec047246ade22ee8a866c0e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
c70920bd8fd6fb6631c7c9653bb38ddb

SHA1
54b69101373e194b5fc7dce204436d494aa09171

SHA256
12bcf385663d18d393c333312bed3465639d6ce351bb289bfc7d6f4743330d1e

SHA512
f812e89122b0a24c4df8fb382af34925d62a23ea0fb0d139461a18302b9ace7a583287fd12a26332405d5f60654ee379302ac6414152bf5010e4a61da6762d17

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
dfd2e8f16f7fbc9850918baf431b52a7

SHA1
5bf975abb39b573266173a836d3fc1565a7d834c

SHA256
8cc47697ef23a5371702a95a0bd4d5654515c61d0a4e29c652c314520c563dba

SHA512
dd0a487fc11bbaf8616b785209c8012f55bd619912a7e6c2c8cf2e05603f9a62763e8518db9b82a7881049541ade0d0a3d5f91d3e463b8dfc5fe38ca131a5c38

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
99897b55a24eb924d6ac74379c2b98e6

SHA1
e96ba28430bfa5109623970760297ea844c9d3d2

SHA256
b7672254055fc9e3d2a849445490dbf05fddae1afa073d7c41741bd5f38a707d

SHA512
457958d09ee41d23da4ef4a7d0b539034f85f70bdbbbf48fe7eba3b57805fa87e0dc4bb20e5815b608b8b4459c34243a7451e1eb6eccfafad626c9fea601169d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
251b267a72c836a68266116850fcae1d

SHA1
86d559640f9ef27cfa90d77008f23cf37420ed89

SHA256
48f2cfaebadefa3d362a02777cb99301f983471c0f475cdb8c6670d959b6dc82

SHA512
bdb0b6fbc262398aeca381a8c7fdf1aac2eac2dfc8132031a1c03b765c422158cde6dee1e3973f08f606d901b17aa37effaa855693ee89f33ef209e8f9f73acf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
f8d8103b47d1c181e727fa555b6219a9

SHA1
c6bbe174154fe85418263531c4472fac82c0fe36

SHA256
3186f07c43bd83fb7c695c29ad2bd0586f2d04896f53f25fc3c47b6955e64e0b

SHA512
973c1fcbb342131d91c29f7f0bc9b78b9b3dd1a7d8c19ec1aab4aa4aacf660665123090bd1792f7de476c01e7c51fbd31093ab1d7d21cddf1ef8241cb7a15366

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
ca9275bd9aed46232bb7489d0df26724

SHA1
d42ba6e0b0c4976e55ee95849b33c7abe05bb742

SHA256
3944ad4e7f9968b83bcc9d9c67285d43fc2786348bd11c03d75e2dbfaaecd9eb

SHA512
2e936a36c5c15c497ebc6ffb56d9256b27f3d5a3b1f981cb4a55d9d3a06b932dd66289a2adbb10c50f2f822cc6b303b16161f1b35cb2928e20f1dcb554629a71

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
6d520b9077db6b5caad154c79e6fca47

SHA1
dde015622a70cc69135b7254ec54882185176263

SHA256
6491066fb8ac6f97d95c69bf65a96d6cf60679d09a52b85aad04a4bde2f26ded

SHA512
7d8f742d3c6170109074df628541867f0e0310890517ad4bf3aeba629b4dc264c6f981a698403dbcb4153528976ac90de598cb22c407b67a91d261252a302d0f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
6f0b83de45c07898bf3c9329be392dbb

SHA1
922e8ec5290301e4639daa8d058f0dafd9ad230a

SHA256
ce7bd27fe94b023f2b0c81f9c7fc9b52fa397d150c11fb9f4c56bb90e3abadcc

SHA512
a1ce51d86197886407d1eec1e85beeea0fd704303de23bf59d935df925e3edeed2581e9a2b1d7448be939ca9ec6d3589ea427cf8a509875f6c3bb6b995ff38b3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
ccd44a7d4958c9f20cfe037c1aa118b9

SHA1
2021b2696c81355ad5a9a7b82861c7bfa740c0a4

SHA256
321046d17b81efcfe49cd2ee7b10da3452a8c5b3282bf6528d20677456fd514a

SHA512
dd81d1d627d4d6ac27a335e52342d84cde39ddc46b5a6b2c78901569aff3c2ca85b6063361ff5cce1cddf0b48712b64609081eb7412a5280336f6de086937ce6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
ac1f64ab281cf11bf39cee086c6e8367

SHA1
179390620d59e73b6b6d6fc3be8e39a1692f69ab

SHA256
44f8f4445a5e77f91d704f1dc9deceef0ffb0af059374fd641eaeb1e861fde53

SHA512
dccb632936500026c4148d8c7e7f4371c0d5755bbae17083286204e2562fbcb8ce896132bfde3e7eed008826d52d1f5de7537c8f8bcbc888e647171bce64df2e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
033293759adb7a4d8eb5083b8cac6f01

SHA1
89b18f00e0f6335324e85140691df41b95bc432a

SHA256
569a190743cdfabc629bb35691fade601ebf8538fed7c90d0a9d05e2bfe0597b

SHA512
8a53eb49b6cb82197c9a8f957c25e8649547bb7569138e3ca4f7ce9be2070a7241ace83f2a0534e568fb00a2d703f899db5394d50a7c5693d7d22f8e29eed36a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
116KB

MD5
1dcf53d306249a2fa7450fbbbde0a5be

SHA1
40016200f522d50eac61415cb8ed2d9383d63919

SHA256
1e42a1fdfba23dcb836cd544323959c4d12abf4d726efa8f1cfe97ae02dd00cc

SHA512
d751e79375b74eb3e16cd55152bbea905968d2a860559325a6cd8127ba1a26b10c2cb7bcb3331e24e56cf75e80c162706da8a46492aa87f43d683b0c020f16f3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
116KB

MD5
0142664a240416e676264fd15cfa05bf

SHA1
cea140bd061f6701288c5e93a6c1020171d940c0

SHA256
12509db1be9764f1a0c5a6d130c332fc0bb3ee942e818e8017230dc5f7e929af

SHA512
f46ce7581294a132888cbbfe1d5587048fc5739934df34713fb630a7525c45bb0d5e060828aadae03f9aa5ef227dbd1e4f9672e22e81c8a0a155d6df74997482

Download Submit
C:\Users\Admin\Desktop\Rise\Start.cmd

Filesize
339B

MD5
ffe49b04533f3813cdb321439b94cfc8

SHA1
d6fb5a4370be3dac3aefbdcf60cfdb229cc97c17

SHA256
b4422c74a10c554877ebb2ebb970ba2bf3f7fd60679be0ad771c1b00f52a938d

SHA512
6aa0a571e9dc3cedf6f0f5c012462d766fb9ee32281eda9af72c5c4d7d9fbb41b253209ec139cc99f5c21339ca9c208bc56190fd549e3382f59665782f6b59ea

Download Submit
C:\Users\Admin\Desktop\Rise\files\azul-1.8.9_345\bin\java.dll

Filesize
162KB

MD5
d456f04dca10fae8acd90b8a3b73868f

SHA1
c498a8aca1dfc0f9697a8a0a9a24039db014dce8

SHA256
3c2ed1572da3e0eb240d8407eae5cef1c3b5ea510e88a33978fe408d6e33f788

SHA512
5380d131a03e23b4efbf90766307842cff2138e820ee9047c65c5d2cd633eb7503e4aeeb5463afbd32324a699add8069df566d9a002990854af1ff25f98253aa

Download Submit
C:\Users\Admin\Desktop\Rise\files\azul-1.8.9_345\bin\java.exe

Filesize
304KB

MD5
2ba945d79c0bf0b58abb0349feffb866

SHA1
574bc8bc7bc3e6a06ff2f1275e69bb4d566e131d

SHA256
2ab91cb317f899a46abfd48f3868ce51d8d5b80144a3fcd5409bc75a9453db38

SHA512
a1f8d94c51d959a4c12b5f701e76c40349f719c88913317282c810d6e711af83723566e651e90b55077eb13037f58cf7cb893fe8ff32c13c0a944856f534a6bf

Download Submit
C:\Users\Admin\Desktop\Rise\files\azul-1.8.9_345\bin\msvcp140.dll

Filesize
613KB

MD5
c1b066f9e3e2f3a6785161a8c7e0346a

SHA1
8b3b943e79c40bc81fdac1e038a276d034bbe812

SHA256
99e3e25cda404283fbd96b25b7683a8d213e7954674adefa2279123a8d0701fd

SHA512
36f9e6c86afbd80375295238b67e4f472eb86fcb84a590d8dba928d4e7a502d4f903971827fdc331353e5b3d06616664450759432fdc8d304a56e7dacb84b728

Download Submit
C:\Users\Admin\Desktop\Rise\files\azul-1.8.9_345\bin\server\jvm.dll

Filesize
8.3MB

MD5
2169bce3a35b1176c10cb2b61a290e76

SHA1
f6b3a15c0841076d3d022dea9a71c150365ebdb8

SHA256
07eca45e986083d56ec3ac9dbd21a8b052b22f10bc49e655be1137b0ba27b8ff

SHA512
d906e9a6eb1df1e4c7d988f0c38671e5a7b483540c3066a1a4778bf5fe05bcf5f7c2fd10af533de67b5106dbe986f0f3d36b58cabda9f58a3925cc81afbd3f03

Download Submit
C:\Users\Admin\Desktop\Rise\files\azul-1.8.9_345\bin\vcruntime140.dll

Filesize
83KB

MD5
1453290db80241683288f33e6dd5e80e

SHA1
29fb9af50458df43ef40bfc8f0f516d0c0a106fd

SHA256
2b7602cc1521101d116995e3e2ddfe0943349806378a0d40add81ba64e359b6c

SHA512
4ea48a11e29ea7ac3957dcab1a7912f83fd1c922c43d7b7d78523178fe236b4418729455b78ac672bb5632ecd5400746179802c6a9690adb025270b0ade84e91

Download Submit
C:\Users\Admin\Desktop\Rise\files\azul-1.8.9_345\bin\verify.dll

Filesize
53KB

MD5
3d28205df05c112d3f04ade83d246c8a

SHA1
33d5a3739a65dbb3fd79aee0c6be15a9c14040cd

SHA256
1a2804ab343e9fa5377930892683a40502a291bec793c83dcb6f0c903e08c259

SHA512
12cae02cb2874437bd030efd4c7cb7aebb7777fb35f2957e9ce8dbb0e7b3b0d9c732ce204c50f558c344aca864bd45da47ec93d41085ed49e8e9680e751bfd8c

Download Submit
C:\Users\Admin\Desktop\Rise\files\azul-1.8.9_345\bin\zip.dll

Filesize
84KB

MD5
922d316548f0eec2512c8463f5581d03

SHA1
686855a729329829a178539119f84fabb5b29fa6

SHA256
5cc507860ea72fd2058c68ca67a9b996a5490fb2a0b1285848dbeb3986ed68b9

SHA512
cc5245cae3fc2d380bcb0c8912034bab37b2300b661d01f256dccb6096ce8ab1e83d22bed1bee4c3b79aee9660a8daa0a85c3f108d8ca06f2bc9ed3ce0f4cb2b

Download Submit
C:\Users\Admin\Desktop\Rise\files\azul-1.8.9_345\lib\amd64\jvm.cfg

Filesize
1KB

MD5
c60e77ff5f3887c743971e73e6f0e0b1

SHA1
9b0cfd38ec5b7bd5bd1c364dee2e1b452a063c02

SHA256
23f728cc2bf14e62d454190ea0139f159031b5bd9c3f141ca9237c4c5c96ec1d

SHA512
07aca3de1a03a3b64b691fd41e35e6596760baf24c4f24e86fca87d2acf3a4814b17cd9751adc2dcd0689848f3d582fb3ee01d413e3a61d1d98397d72fe545e9

Download Submit
C:\Users\Admin\Desktop\Rise\files\azul-1.8.9_345\lib\cat.jar

Filesize
14KB

MD5
462c1062f82b8e24a30d61776bba99ab

SHA1
8f148032ffd8903175af7c1833ce6f551008032d

SHA256
6ec90d4f4d8f2f0eb83ba2bd54f0725c35d0b251ef164e798f167a73c0df104b

SHA512
b1ba5063ae3bcfb248596d92281136e65a1106eef6eae819f2b14d2c0e3b30532ad6710e60cccea9d9ae9bc37e192d495e50486fe85be4a8a1716dbd6e58d744

Download Submit
C:\Users\Admin\Desktop\Rise\files\azul-1.8.9_345\lib\charsets.jar

Filesize
2.9MB

MD5
c5f3e1f1106cb1b8ab5ed543d5b80d38

SHA1
e59d8a1016cafa9c8be9a6565cb652829d2b0617

SHA256
9cbda2d00346f87983c76dbc02c1d2f8ab36fcc13ebeae5e45ea1b0b81928469

SHA512
8fad60b535ef5f72b603575793ac46dd2cf221e60253406453e9b472ddb6441e34a74e3c792e8dc21c3f8fbc0d9a41b058be6ac431d616df007bc40883fc4b27

Download Submit
C:\Users\Admin\Desktop\Rise\files\azul-1.8.9_345\lib\jce.jar

Filesize
95KB

MD5
8a6577cbc01d57e6516d6b798cb72135

SHA1
35e57539d922207e6f6aa53ab188b114c50ba19d

SHA256
9a08c7043cf96d36f7838be459899d82856dfcab461e7a0fdd54f7f64335f705

SHA512
6c851e43112468d2d4a53561b81a208817628d61c619cef96d0920b721705534e298ffacd93b9b6ecf12fb89abfd2bfd54a4bcbc9b1988f930fbcbb439d7bf03

Download Submit
C:\Users\Admin\Desktop\Rise\files\azul-1.8.9_345\lib\jfr.jar

Filesize
870KB

MD5
8160efb56957183d2b4392d1ca386b83

SHA1
fb1deca67fe435453fd32619fbd6cc4d9d055e2c

SHA256
14a6dfef330b831c4a7b6d1a977e0524542ce567c759f609753e375394411a1a

SHA512
1001666355cfee6406a9b621fd47a197e0abd5698f2300444ea66c6d7f27bc5793fe7143a9cc3b588fe1809e18b6eca697a3c25e72a662ab0883394f326689d5

Download Submit
C:\Users\Admin\Desktop\Rise\files\azul-1.8.9_345\lib\jsse.jar

Filesize
1.8MB

MD5
099f546a37acc4271f3bed37ad329787

SHA1
5a8cb31a694bbd8cf67f543533675d9c16858c63

SHA256
4748db39b004a57e1039649587864ab34c683acc6e226185963323431b73cac1

SHA512
77d725355959fa4da923c4ac56ca287d735b5e8c48c193e1b8640905fc28925c0884a98d027b4562b7703993cb46a4958ee0709903ba2a1f995cf3b74fb233d0

Download Submit
C:\Users\Admin\Desktop\Rise\files\azul-1.8.9_345\lib\meta-index

Filesize
2KB

MD5
5b097e5035ee1aea6ff03924328f00b5

SHA1
3058f7710a0fd725f63222dcdfe1f04b8b1e3ed0

SHA256
98f4efb75a8e4a008dd3826c67c6d2b2c04a74dcf4a313210660111ec922514c

SHA512
bb21fcbe26ebb08a7b26fad26a638198b2995426e340c9df80c7ff18d9a99d74816a71e00506f5ad2c5fbca792f3047ea94b2972883018f98267612e9d979660

Download Submit
C:\Users\Admin\Desktop\Rise\files\azul-1.8.9_345\lib\resources.jar

Filesize
3.4MB

MD5
e343890b09137844dce9367afc9221c4

SHA1
657b9267ca69f06b013658f094586c133495b2b7

SHA256
251d84172d2aa385f118aeae4cf21e1cbbc5b292186c4764a687c680dafbc365

SHA512
9105184a7321339a19425e789c82e9557b4bc01b57e2134ee60a01bc5f32a348b3670eafe684cb73ebb8d79cd0add3f90fbd20a496ce8df3028aded9dd19c90d

Download Submit
C:\Users\Admin\Desktop\Rise\files\azul-1.8.9_345\lib\security\policy\limited\US_export_policy.jar

Filesize
622B

MD5
a920e713ee3364fe229eb773bbc40187

SHA1
ab9e283bb3e9805651f22e7e46dec868e353c6df

SHA256
1d9e8365c0bdcb3e4c4737a844fa30a73f7667b6de47579fd6420d6a562f6b94

SHA512
ead61b1e9bb8ce404604f70c859f447244d6bd0965d2363a324db277826491da3511b67ac28c47281662e91bbd9d4adcd71d86882202533f72c0d6e7e9e290f7

Download Submit
C:\Users\Admin\Desktop\Rise\fixes.txt

Filesize
336B

MD5
1d9a8c506a1c1ffcd1cadb3228e45926

SHA1
96a20905b0ceca4c80cca4d3e6f1c00a33299652

SHA256
4f01ceea71d0af99cb3a84968861fb151c90355b4a725888abc15ae93a3b0ecf

SHA512
bcc981fa38430f915050493f1abdd0fbfabca235c37cdfa6ac5ca88a7199cd750228cc4985982f63ab15f5ec11138da77bf340dadff00b4799930df5d1d630b4

Download Submit
C:\Users\Admin\Downloads\Rise\files\azul-1.8.9_345\lib\images\cursors\win32_LinkNoDrop32x32.gif

Filesize
153B

MD5
1e9d8f133a442da6b0c74d49bc84a341

SHA1
259edc45b4569427e8319895a444f4295d54348f

SHA256
1a1d3079d49583837662b84e11d8c0870698511d9110e710eb8e7eb20df7ae3b

SHA512
63d6f70c8cab9735f0f857f5bf99e319f6ae98238dc7829dd706b7d6855c70be206e32e3e55df884402483cf8bebad00d139283af5c0b85dc1c5bf8f253acd37

Download Submit