e78e0ec58d53f43bea3c343f06f32f4a1a43f224d8e76a4e9416c6cbd11e8bae

Analysis

user interaction
yes
max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/07/2026, 15:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
simplex-desktop-windows-x86_64 (1).msi
Size 251.1MB
Sample260709-sdx5macw2q
SHA256 e78e0ec58d53f43bea3c343f06f32f4a1a43f224d8e76a4e9416c6cbd11e8bae
MD5 8a13f4d85de1688545f1ebc03ca3d9d2
SHA1 fc26bed7bd5ff11ff307ac4a05142b39effeb7f5
SHA512 bcdc315556f194b4c4a51f04b8f19670766c6146cc49c870ad1f7a08513f6aa8660ec20811c05aa388b4796b8291a1c4fc4e01f2dea51f13991e4c6fcd17d897
SSDEEP 6291456:eTnCB1+EK1PkSkJJh5TLnpTfFbgI0T0O3Zdb769Dgj1:eTVNkSkZVUsDY
TLSH
T101C8330BBD684672E1BBFD3685B25309852478244522CC3FF3A4B949EAE31E15DB67C3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery ransomware

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation	SimpleX.exe

Executes dropped EXE 2 IoCs

pid	Process
984	SimpleX.exe
4848	SimpleX.exe

Loads dropped DLL 27 IoCs

pid	Process
4260	MsiExec.exe
2384	MsiExec.exe
1296	MsiExec.exe
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe

Enumerates connected drives 3 TTPs 46 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\SimpleX\app\zip4j-2.11.5-c6c0c175af57cc4e678f75dbddc721af.jar	msiexec.exe
File created	C:\Program Files\SimpleX\runtime\legal\java.base\unicode.md	msiexec.exe
File created	C:\Program Files\SimpleX\app\commons-io-2.13.0-8d0fa8939b71b8894637f0ef6ea28c.jar	msiexec.exe
File created	C:\Program Files\SimpleX\runtime\conf\sound.properties	msiexec.exe
File created	C:\Program Files\SimpleX\runtime\lib\psfontj2d.properties	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\audio_filter\libkaraoke_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\text_renderer\libfreetype_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\runtime\bin\api-ms-win-crt-math-l1-1-0.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\okio-jvm-3.9.0-5eb4b8544f2fffe6e23b53499de96d1.jar	msiexec.exe
File created	C:\Program Files\SimpleX\runtime\legal\java.xml\ADDITIONAL_LICENSE_INFO	msiexec.exe
File created	C:\Program Files\SimpleX\runtime\bin\api-ms-win-core-rtlsupport-l1-1-0.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\codec\libaribsub_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\animation-desktop-1.8.2-aa361a5749a780284bf03455dbd58ba2.jar	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\visualization\libglspectrum_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\runtime\conf\security\java.policy	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\control\libgestures_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\stream_filter\librecord_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\codec\libx265_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\access\libshm_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\access\libsmb_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\services_discovery\libupnp_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\video_output\libglwin32_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\access\libdtv_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\codec\libschroedinger_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\codec\libopus_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\meta_engine\libfolder_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\runtime\bin\api-ms-win-crt-convert-l1-1-0.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\video_filter\libgaussianblur_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\spu\libmosaic_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\access\libaccess_wasapi_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\demux\libavi_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\video_chroma\libswscale_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\demux\libps_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\skiko-awt-runtime-windows-x64-0.9.4.2-c66d2dbe4ced482fadc735b4a4cb499b.jar	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\codec\libdmo_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\runtime\legal\jdk.unsupported\ASSEMBLY_EXCEPTION	msiexec.exe
File created	C:\Program Files\SimpleX\runtime\conf\net.properties	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\video_filter\libpuzzle_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\stream_out\libstream_out_delay_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\demux\libvc1_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\demux\libdirectory_demux_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\runtime\lib\jrt-fs.jar	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\packetizer\libpacketizer_a52_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\codec\libscte18_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\audio_filter\libmad_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\access_output\libaccess_output_http_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\ejml-fsparse-0.43.1-ac6d385736642db857b4d613d8347e6.jar	msiexec.exe
File created	C:\Program Files\SimpleX\runtime\lib\fontconfig.properties.src	msiexec.exe
File created	C:\Program Files\SimpleX\runtime\conf\security\policy\README.txt	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\packetizer\libpacketizer_copy_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\batik-gvt-1.16-fe24bef455f4d68232121574ea209b.jar	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\control\libwin_hotkeys_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\batik-xml-1.16-3147e6cfe396df25489c8c5899213dd.jar	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\audio_output\libafile_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\codec\libqsv_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\audio_output\libmmdevice_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\runtime\legal\java.base\ADDITIONAL_LICENSE_INFO	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\codec\libvorbis_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\npvlc.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\demux\libh26x_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\resources\vlc\vlc\plugins\audio_filter\libheadphone_channel_mixer_plugin.dll	msiexec.exe
File created	C:\Program Files\SimpleX\app\snakeyaml-engine-kmp-jvm-2.7.5-d4cea46a6f2fd8ff124a68cf8ad6d45.jar	msiexec.exe
File created	C:\Program Files\SimpleX\runtime\conf\security\policy\limited\default_US_export.policy	msiexec.exe
File created	C:\Program Files\SimpleX\runtime\bin\api-ms-win-crt-filesystem-l1-1-0.dll	msiexec.exe

Drops file in Windows directory 11 IoCs

description	ioc	Process
File created	C:\Windows\Installer\{951D475E-9198-355D-B78B-2547034302CE}\JpARPPRODUCTICON	msiexec.exe
File created	C:\Windows\Installer\e594627.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI47EC.tmp	msiexec.exe
File created	C:\Windows\Installer\SourceHash{951D475E-9198-355D-B78B-2547034302CE}	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI5829.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\{951D475E-9198-355D-B78B-2547034302CE}\JpARPPRODUCTICON	msiexec.exe
File created	C:\Windows\Installer\e594629.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\e594627.msi	msiexec.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log	msiexec.exe
File opened for modification	C:\Windows\Installer\	msiexec.exe
File created	C:\Windows\Installer\inprogressinstallinfo.ipi	msiexec.exe

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe

Checks SCSI registry key(s) 3 TTPs 5 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	SimpleX.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	SimpleX.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27\52C64B7E	msiexec.exe

Modifies registry class 23 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E574D1598919D5537BB85274303420EC\Version = "100990982"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E574D1598919D5537BB85274303420EC\InstanceType = "0"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E574D1598919D5537BB85274303420EC\DeploymentFlags = "3"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\8CBFE9CCFFFA8D04BB96CF7DEC99FE9B	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E574D1598919D5537BB85274303420EC\SourceList\PackageName = "simplex-desktop-windows-x86_64 (1).msi"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E574D1598919D5537BB85274303420EC\SourceList\Net\1 = "C:\\Users\\Admin\\AppData\\Local\\Temp\\"	msiexec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E574D1598919D5537BB85274303420EC\Clients = 3a0000000000	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\E574D1598919D5537BB85274303420EC	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E574D1598919D5537BB85274303420EC\PackageCode = "66C2B02DBBFF89A45A12ED9D521C3B47"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E574D1598919D5537BB85274303420EC\Language = "1033"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E574D1598919D5537BB85274303420EC\ProductIcon = "C:\\Windows\\Installer\\{951D475E-9198-355D-B78B-2547034302CE}\\JpARPPRODUCTICON"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E574D1598919D5537BB85274303420EC\AuthorizedLUAApp = "0"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\8CBFE9CCFFFA8D04BB96CF7DEC99FE9B\E574D1598919D5537BB85274303420EC	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E574D1598919D5537BB85274303420EC\SourceList\Media	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E574D1598919D5537BB85274303420EC	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E574D1598919D5537BB85274303420EC\AdvertiseFlags = "388"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E574D1598919D5537BB85274303420EC\SourceList	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E574D1598919D5537BB85274303420EC\SourceList\LastUsedSource = "n;1;C:\\Users\\Admin\\AppData\\Local\\Temp\\"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\E574D1598919D5537BB85274303420EC\DefaultFeature	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E574D1598919D5537BB85274303420EC\ProductName = "SimpleX"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E574D1598919D5537BB85274303420EC\Assignment = "1"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E574D1598919D5537BB85274303420EC\SourceList\Net	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E574D1598919D5537BB85274303420EC\SourceList\Media\1 = ";"	msiexec.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4496	msiexec.exe
4496	msiexec.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4200	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4200	msiexec.exe
Token: SeSecurityPrivilege	4496	msiexec.exe
Token: SeCreateTokenPrivilege	4200	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	4200	msiexec.exe
Token: SeLockMemoryPrivilege	4200	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4200	msiexec.exe
Token: SeMachineAccountPrivilege	4200	msiexec.exe
Token: SeTcbPrivilege	4200	msiexec.exe
Token: SeSecurityPrivilege	4200	msiexec.exe
Token: SeTakeOwnershipPrivilege	4200	msiexec.exe
Token: SeLoadDriverPrivilege	4200	msiexec.exe
Token: SeSystemProfilePrivilege	4200	msiexec.exe
Token: SeSystemtimePrivilege	4200	msiexec.exe
Token: SeProfSingleProcessPrivilege	4200	msiexec.exe
Token: SeIncBasePriorityPrivilege	4200	msiexec.exe
Token: SeCreatePagefilePrivilege	4200	msiexec.exe
Token: SeCreatePermanentPrivilege	4200	msiexec.exe
Token: SeBackupPrivilege	4200	msiexec.exe
Token: SeRestorePrivilege	4200	msiexec.exe
Token: SeShutdownPrivilege	4200	msiexec.exe
Token: SeDebugPrivilege	4200	msiexec.exe
Token: SeAuditPrivilege	4200	msiexec.exe
Token: SeSystemEnvironmentPrivilege	4200	msiexec.exe
Token: SeChangeNotifyPrivilege	4200	msiexec.exe
Token: SeRemoteShutdownPrivilege	4200	msiexec.exe
Token: SeUndockPrivilege	4200	msiexec.exe
Token: SeSyncAgentPrivilege	4200	msiexec.exe
Token: SeEnableDelegationPrivilege	4200	msiexec.exe
Token: SeManageVolumePrivilege	4200	msiexec.exe
Token: SeImpersonatePrivilege	4200	msiexec.exe
Token: SeCreateGlobalPrivilege	4200	msiexec.exe
Token: SeCreateTokenPrivilege	4200	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	4200	msiexec.exe
Token: SeLockMemoryPrivilege	4200	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4200	msiexec.exe
Token: SeMachineAccountPrivilege	4200	msiexec.exe
Token: SeTcbPrivilege	4200	msiexec.exe
Token: SeSecurityPrivilege	4200	msiexec.exe
Token: SeTakeOwnershipPrivilege	4200	msiexec.exe
Token: SeLoadDriverPrivilege	4200	msiexec.exe
Token: SeSystemProfilePrivilege	4200	msiexec.exe
Token: SeSystemtimePrivilege	4200	msiexec.exe
Token: SeProfSingleProcessPrivilege	4200	msiexec.exe
Token: SeIncBasePriorityPrivilege	4200	msiexec.exe
Token: SeCreatePagefilePrivilege	4200	msiexec.exe
Token: SeCreatePermanentPrivilege	4200	msiexec.exe
Token: SeBackupPrivilege	4200	msiexec.exe
Token: SeRestorePrivilege	4200	msiexec.exe
Token: SeShutdownPrivilege	4200	msiexec.exe
Token: SeDebugPrivilege	4200	msiexec.exe
Token: SeAuditPrivilege	4200	msiexec.exe
Token: SeSystemEnvironmentPrivilege	4200	msiexec.exe
Token: SeChangeNotifyPrivilege	4200	msiexec.exe
Token: SeRemoteShutdownPrivilege	4200	msiexec.exe
Token: SeUndockPrivilege	4200	msiexec.exe
Token: SeSyncAgentPrivilege	4200	msiexec.exe
Token: SeEnableDelegationPrivilege	4200	msiexec.exe
Token: SeManageVolumePrivilege	4200	msiexec.exe
Token: SeImpersonatePrivilege	4200	msiexec.exe
Token: SeCreateGlobalPrivilege	4200	msiexec.exe
Token: SeCreateTokenPrivilege	4200	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	4200	msiexec.exe
Token: SeLockMemoryPrivilege	4200	msiexec.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
4200	msiexec.exe
4200	msiexec.exe
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe

Suspicious use of SendNotifyMessage 4 IoCs

pid	Process
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe
4848	SimpleX.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 4496 wrote to memory of 4260	4496	msiexec.exe	94
PID 4496 wrote to memory of 2384	4496	msiexec.exe	95
PID 4496 wrote to memory of 1276	4496	msiexec.exe	106
PID 4496 wrote to memory of 1296	4496	msiexec.exe	108
PID 984 wrote to memory of 4848	984	SimpleX.exe	113

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Windows\system32\msiexec.exe
msiexec.exe /I "C:\Users\Admin\AppData\Local\Temp\simplex-desktop-windows-x86_64 (1).msi"
1⤵
- Enumerates connected drives
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:4200

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4496
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding ED8E8E9D0EDBCB9D0A59242530E09B92 C
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:4260
- C:\Windows\System32\MsiExec.exe
  C:\Windows\System32\MsiExec.exe -Embedding 5C017B4388CFB4B065239810E87DAEAB C
  2⤵
  - Loads dropped DLL
  PID:2384
- C:\Windows\system32\srtasks.exe
  C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
  2⤵
  PID:1276
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding E74292049DF86BF4F12EE79FBD9903A6
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:1296

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
PID:3908

C:\Program Files\SimpleX\SimpleX.exe
"C:\Program Files\SimpleX\SimpleX.exe"
1⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:984
- C:\Program Files\SimpleX\SimpleX.exe
  "C:\Program Files\SimpleX\SimpleX.exe"
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  - Checks processor information in registry
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  PID:4848

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

e594628.rbs

Path C:\Config.Msi\e594628.rbs
Size 164KB
SHA256 9d93940a0210806a58a77e7819c1527010126943f3e0033546bb16585b346fb0
MD5 04a96db849a9dec683fc725c69d21c5d
SHA1 1afcbaaea8be0288bb563d68e68615ec9e1f93bb
SHA512 9ea77894575a66f9dc3af351ade220c0e3c2c2fbc3360504c7a8eb0e4c40339411621b9fcf9122bd479d3bb44c982ae78044a1c741dd2c39f4f2f3f14f6e5102
SSDEEP 1536:mPy2goLLeDz6L8NinNv0ZjNJDjoeXli8uL0gqBGTbzjfr/MAeCBmNPqQ3m7Mzmxg:GWUs9dxkEL4631J
TLSH
T117F3E23B847EE5F2F93DAD800752662D034888935F4CAC3D93A85B9B69D0DB75B39C81
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SimpleX.exe

Path C:\Program Files\SimpleX\SimpleX.exe
Size 459KB
SHA256 ac08f2d6e2b43f4357053fd4a7c98e14175fbbd85c3eaaaf450d0e5922348550
MD5 14ec214f457d6f0654e95e95f5cd5012
SHA1 f6c9f7ac22b8e2d691c0519c6f804befd58c9815
SHA512 cf73e648a11d2d3964808a946fa24d116945368852a8ef3702207036e1aff7453a2c8505f2bd5070be40d01c103f98f628943e38eda7402c20b55bac0ee6aa64
SSDEEP 6144:sGU8DjX4V5L5jBk3moYLb2GyCWMsJdHv3r442PL:sGlDjX4V5LM2oWbCSsb3MdPL
TLSH
T10DA47D19F76404F9D0B7D278C942890AEB717C5A4761E78F03F499A61F236A09E3EF12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SimpleX.cfg

Path C:\Program Files\SimpleX\app\SimpleX.cfg
Size 10KB
SHA256 45c5c5fcd6960ad6f6bec1b38f56a65f01da57ced22d62af343b3992ae80cfb8
MD5 27b131d2a82cc08840837f0857ec8566
SHA1 7da5f312cbe39d649e52ef3893fdc4012191395d
SHA512 797cb7ec9b93134d6c40cd124e55e2eb6ef895b65da170805ec7dac621848f871bd4a482f92584593cd88344b4934d4863a75769775ed89c1a13fd13d839d869
SSDEEP 192:+RVujXQDXDo7lyTcfe0XJSrIzKlV83y2W0Dgw73qb2Z2ggB4AmKb:u2XgDo7l3/YEz4vS73t2ggB4ab
TLSH
T1143254BA3AC02D2114BF022DDF6A9070EE1D75EDEDF52A6B07F0818C1D35D29B91D61A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

animation-core-desktop-1.8.2-89882254a9c39d5b61e9ebfe58237d8.jar

Path C:\Program Files\SimpleX\app\animation-core-desktop-1.8.2-89882254a9c39d5b61e9ebfe58237d8.jar
Size 364KB
SHA256 710eeb91fd8552e10b67ecae12b1dc31ab317eb6e5bceb04d4c21e3f34252407
MD5 89882254a90c39d5b61e9ebfe58237d8
SHA1 ff4a236b5e86b2e12449ae75755048d1a2a99102
SHA512 a142ac7156e6d6ab44fe0365552c67a3090ba395323ed2ad2934f1687d6730eb696e448aa2cd632b1785f0c4b21b82af59d367e75fb69596cf51ac6fda063e5c
SSDEEP 6144:TVZNFh+rVCQTH9kycLHKHgv7SPaOHWvRj4kamsNaSxGMQ/LsIZV:/hsvZ/cmA2PaOHsj4kamg9xWhr
TLSH
T1B084D0B15AC04110CB7FD372665C04A2BC3A06B8E157293F366001E9E7D7A4A5BB6FF6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

animation-desktop-1.8.2-aa361a5749a780284bf03455dbd58ba2.jar

Path C:\Program Files\SimpleX\app\animation-desktop-1.8.2-aa361a5749a780284bf03455dbd58ba2.jar
Size 326KB
SHA256 80af3d6bf305f0b6c0cfbe8175ae7ec46bf7b3027a9bac1616e05b0e21422432
MD5 aa361a5749a780284bf03455dbd58ba2
SHA1 84109f752086843a85325f8aeffa2302b312c948
SHA512 1eca074d5686cbfea1790792d53eb448611157c16d43e2b6f7e63421a7dcdf2a628641973d0ecbd53f836ec2653303d555f4fe375261b09e47c13c015a4f89bd
SSDEEP 6144:nVsyCGEioPKfv+atb0LliCvDS9Dh1bCfxC3UOVQbg/5kNN45g7PBzKij1K4li:QFA2aN0LliCvDS9DDbaxC3jVQcKNKuKb
TLSH
T1B664F1B533C08450DB67D331625E0466FD3A0AB8A4671A7E3A6412E3A7E7D5343B3BE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

annotation-jvm-1.9.1-1d6a04b3b9847638d0529df8ef76a.jar

Path C:\Program Files\SimpleX\app\annotation-jvm-1.9.1-1d6a04b3b9847638d0529df8ef76a.jar
Size 59KB
SHA256 1e343917ebf27ba96fe4dc52b1cad7fd32b738fbc6355bb6cd5b3b305d7212d0
MD5 01d6a04b3b9847638d000529df8ef76a
SHA1 b17951747e38bf3986a24431b9ba0d039958aa5f
SHA512 ee8cceeb09d0231f6de4015f078e8cb0805de6faf383a9653d5f3763c43bb137e5346c2b177972b1f70d2f648f6f32047051c0f3183bdb50dc01de41931f265a
SSDEEP 768:v36+rKi6fsRc1cdqMMoslWggQTcAbcU6xV8kc+0Ebxe+nom/3lvv2FdYIDDlv5mf:vrKSRIchsfg7fk+5s+oU3lWbDDzmf
TLSH
T1A5435D7EABC88460ED3FD0B375582823F82E25EC8015A26B34B50587F8F542963F7E95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

annotations-23.0.0-8484cd17d040d837983323f760b2c660.jar

Path C:\Program Files\SimpleX\app\annotations-23.0.0-8484cd17d040d837983323f760b2c660.jar
Size 28KB
SHA256 7b0f19724082cbfcbc66e5abea2b9bc92cf08a1ea11e191933ed43801eb3cd05
MD5 8484cd17d040d837983323f760b2c660
SHA1 8cc20c07506ec18e0834947b84a864bfc094484e
SHA512 cb82eb0aaae88e3283b299929173296e30c7b078105e0fc5ecfbcd4eb230026f9a7cc46680832d036e6c1ff036ad99d4c50dc296d4919d223879081ac1616944
SSDEEP 384:jHDe0/WMt9iLf69hMoNTYbyuGXoPhsPmSBfGYsnr:jiMtcf6MgPXiYsr
TLSH
T18AD2D9EED7405335E92F9137B0A25816743EB0C970C13302EBFA46C6A5758266F9BF86
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

atomicfu-jvm-0.23.2-5e4f88ed1c37222d791f5dcadf481498.jar

Path C:\Program Files\SimpleX\app\atomicfu-jvm-0.23.2-5e4f88ed1c37222d791f5dcadf481498.jar
Size 35KB
SHA256 101ff43ff563fca167af5ade98c3b69bf569010eab745013b84d8955034d3b3c
MD5 5e4f88ed1c37222d791f5dcadf481498
SHA1 a4601dc42dceb031a586058e8356ff778a57dea0
SHA512 034699b27c7db728d293d822132a705e517119fb55bc0513c506239f8e81576b2ccacaad3dc339d93c8f3f441a817af2a9fddb9093cdb6d75933ac5ee898873a
SSDEEP 768:RdsKaNFtGc6gWOR7+6a2wpNXu5dO8HKLdjWGz:RdEjtG4w6a295dKhjr
TLSH
T103F2CFA116ECCCA8C937E2F141002C7B946B29CFD1EE621799662CDA23FF94DD261747
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

batik-anim-1.16-ef2d1e77dc121a894a6da6c5028e8dc.jar

Path C:\Program Files\SimpleX\app\batik-anim-1.16-ef2d1e77dc121a894a6da6c5028e8dc.jar
Size 474KB
SHA256 93d2948dfc9837c392cb9c97d5ddaa4db95845e3061974b4ab94148f1587ddbf
MD5 ef2d01e77dc121a894a6da6c5028e8dc
SHA1 aa73e4fff38898d9a4f85e662bd2d40fd71dbc0d
SHA512 284ef2176a20c08eb4a1b9be42fcdada322a6a34e39c34409103a0254c7310473e443361c59429c882803096e9496a639d94fbe1516c2dc3688f239abe13ec1d
SSDEEP 6144:v13gI4Ux2DhxPk62lUQ6u4lkW7l3KEfyi8ngWoX9RugfTOArDc3YL:v1QIfx2FxPk0537l3KEtVX9RugLJ038
TLSH
T1EDA49E11E6505222FABB0937D65304593D3FD24CE05E80DB74BC6AEABCBF9A65F42780
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

batik-awt-util-1.16-5493fc13976389ff705f96f867f5cb8.jar

Path C:\Program Files\SimpleX\app\batik-awt-util-1.16-5493fc13976389ff705f96f867f5cb8.jar
Size 414KB
SHA256 dc0409227230b21a69ac3e79359385e2300df76728ec26081c6ed6c4373d3f13
MD5 5493fc13976389ff705f96f8670f5cb8
SHA1 2f884535c65e892cfe14c7cdc660274528ec15f0
SHA512 aad81a22ea2e832a0759428a36bb767005c7f02ae0ecabb891b99c2777b9f6769d4367577847f585ba4b7790ad0bdc0b842633b17c5b18ebb78ca30660aabecd
SSDEEP 12288:8E5GSjRxSVI+MBvqbd06DIXR7+JPeRov6P:9txSe+MtKd06DOl+JWRoyP
TLSH
T18394D132E55C1053E5A25633E9C30581BCBFC864E04EE2DA29BD06B7F9F6C156B3A790
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

batik-bridge-1.16-67eb64799e6d69a8d9ac19ccc5a8f2d9.jar

Path C:\Program Files\SimpleX\app\batik-bridge-1.16-67eb64799e6d69a8d9ac19ccc5a8f2d9.jar
Size 688KB
SHA256 a96031c2664599b43eee89ada011b6f20fb1d940bf70d1e830fbf780e7e2c86d
MD5 67eb64799e6d69a8d9ac19ccc5a8f2d9
SHA1 d5384b5f1eba4050a2ebe129a9ab686b97d667ac
SHA512 497b226fc7ab14c7faf5211e17dd295278fb32a95ed27358c3b0f440b1d6f7b9444d1d092cbcc57e0130dc222b81378d33cb1afce6f2fc357dd96ad5d738bac9
SSDEEP 12288:wuxf/5f5wPJUPl/1lwx7gE+Frh4aCUsVUo8dR0R7tq+LrCt7qmd3rtE6FdVw:ffky/7wx7KFV4Kaedi7Thmd7LF0
TLSH
T15BE4DF29EE458622E5F751371C82040DBA7FE09ED08E80D6E5BC86B7BC6691B2F533D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

batik-codec-1.16-f8139eda5bd656be3de6c68cc49667ba.jar

Path C:\Program Files\SimpleX\app\batik-codec-1.16-f8139eda5bd656be3de6c68cc49667ba.jar
Size 109KB
SHA256 372f8127e7898256c19af3823a3837c80a58c23f5a5e36f34667b648d1a5e58a
MD5 f8139eda5bd656be3de6c68cc49667ba
SHA1 cf931b81b529f3a0de813ecba1a7fc25b7a7b472
SHA512 7ecc4b8bfcc1af5d44abd95f26e5b7a80ddd8811f09bfca227feabe914f6742d3ac42dfb193d6c2f20c0a565ad3d9e9e64a970773b0a32f58b063829197d2334
SSDEEP 3072:ILWDlRpGgGQ0tZTjk2M4TS2ShsXpDGZEDfbYiO+Ke7:hDpVGtXk2M8N5ABdZe7
TLSH
T19AB3D072EA844167D6A144B2EDCB1415983FDD18C06EE3E62A7C0FE2F549C8A1F693DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

batik-constants-1.16-dbb7585ab60d6fee6b42b814756023.jar

Path C:\Program Files\SimpleX\app\batik-constants-1.16-dbb7585ab60d6fee6b42b814756023.jar
Size 8KB
SHA256 0bdc9ac3e0b93f26cafd3fd8e3065d13fe678865115fc162f4d627fa0af35ad5
MD5 dbb70585ab60d60fee6b42b814756023
SHA1 924370bb08a8ef1d3983d5ea587a17c7845d9af6
SHA512 7b0078656946d300c0d25b24e76c16134c1a96d7fd1ddf5193db648aee638311acced4e2d7cd3752e4d6f55ace9dab01cb850650657b852f976baa35105ebcd8
SSDEEP 192:t6bwJ4O2VCuo2MU8AxoLTPDwu0mvOArVpn:tL4MLWmLT91r/
TLSH
T172025CB0DB5C881CFA9DB6F10F515627A13BD484E56EC2CDF6BC2E66B831D882F11981
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

batik-css-1.16-18b391172074464552b09acb9187e.jar

Path C:\Program Files\SimpleX\app\batik-css-1.16-18b391172074464552b09acb9187e.jar
Size 322KB
SHA256 1f7e51c703813f21de58e9be4e6d907cef3a5540d23047507af9c4c5dc396419
MD5 018b3911720074464552b09acb09187e
SHA1 9151bffd3799b8f55fb27b81f06156183ffeb307
SHA512 7c371ec694972c9b7c8b305e76bfbf5540e0a83264bb5a3e5470fcacd9203d42933bc9fae24a37ee5a3c4b2a1cca0d31d6659886c5952ba067796e04720b0ed9
SSDEEP 6144:iKbnVs7T/tkymD33Lrze1rGM0c9zyfz7kLLR+8y/tFkccs1daPW:iKbnVs7TS33LLM0tfCLI8okc/GW
TLSH
T10464AE26F3C49422E5976233985F5516E83FC24A998E80CF38BCA2F6FD5AC553F02359
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

batik-dom-1.16-3a8e777a8777513a2b80ec91d06252da.jar

Path C:\Program Files\SimpleX\app\batik-dom-1.16-3a8e777a8777513a2b80ec91d06252da.jar
Size 179KB
SHA256 968dbc4bd291bb3c0074dc4b60223c4a95e0455c7b8c2a51ce5fe92aa68e15a1
MD5 3a8e777a8777513a2b80ec91d06252da
SHA1 2d0d63c9177d5c25b52061464457478e9f74363a
SHA512 b7f0fdb00f5603f4a24598e0445b1ac215ab4709425bc516e67847f444143517dfe0985b917dae452c3ad6273928bbdfcd9c0681501cfb10f19d8b2f56356513
SSDEEP 3072:XGOwLKLWmUTtMXCpZPoKz8nUY7aDr5m/BGk1kWmiqaSAwOqRcYrzNaweay:XGOwLvxSSz8UY7aPE/BGk1kWJwPRcwzQ
TLSH
T1B804DF11D25791A6FAF7627357924013353EC089E04EA0EA34ED0BE6EC66CC6EF46793
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

batik-ext-1.16-88db233e758febe33059f2be9f7c7fc8.jar

Path C:\Program Files\SimpleX\app\batik-ext-1.16-88db233e758febe33059f2be9f7c7fc8.jar
Size 9KB
SHA256 a12be0ba0f20a9f57ca16f76685366485b8c3119eaf5a2da4a34008d4947db73
MD5 88db233e758febe33059f2be9f7c7fc8
SHA1 3114e178d00db9053498f23cc46668b93c44dbc5
SHA512 b6fb15bd18d48e561f98690e6d1814c88a313a8771e7d14764c00ecc762ca64d726ed56ae791225921a9ae48e86cf4afb396bc2002ec984546da73616f8dfa4f
SSDEEP 192:h6ewJ4O2VCuo2MU8AxoLnB9//1AImkpCoSY4su:he4MLWmLnzydkcozu
TLSH
T160222B71E704A419FA9961B20B82125F393FC44894AFC1CEBCBC1E96B82E9559F127CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

batik-gvt-1.16-fe24bef455f4d68232121574ea209b.jar

Path C:\Program Files\SimpleX\app\batik-gvt-1.16-fe24bef455f4d68232121574ea209b.jar
Size 187KB
SHA256 2232cfd309c30c5ee2d37d9efbacc8c708da091af747a77c4fc04287e234bd41
MD5 fe24bef455f4d6820321210574ea209b
SHA1 aeee5beb6f1eaa4304bf7e9d4c185b126b743d8c
SHA512 c910e16c7304f79ab1621a0d774d0d4da8c782cce63ebb6e83fc18190f23898b2a81f61f532c945c7aa024e500ed25fecf9cee46df34b4e3714da5edcb825987
SSDEEP 3072:dLW52WDqXx0rEJsYViwxiIzWsjpS7EZ8V/6PLldoMhXHP+ELN01v56xqNNP3:s5hDqBLHPNzWRAwykGXmqc6KNP3
TLSH
T18214DF22E2552425F9DB50F79EC24613387FD08CE44B81EF38BC1B6BB97AA511E1B385
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

batik-i18n-1.16-b2ac749b2277fb0f46ec912da8bfdde.jar

Path C:\Program Files\SimpleX\app\batik-i18n-1.16-b2ac749b2277fb0f46ec912da8bfdde.jar
Size 11KB
SHA256 94fc90806f7cb823dabc0d292012ed97d637207329dc8d2f351f52e0a9107d9a
MD5 b2ac749b22077fb0f46ec912da8bfdde
SHA1 6e45a40b5e67f89d528bb511d7d938c161dcbc1f
SHA512 1d97e816134f440a056460661ac0322790e09a6a33a8a7f47d557a9f6e9250ef57075815266fe4ba1deacb23825e764d28cde54346d430c45e872382b8f02a6f
SSDEEP 192:t6j5wJ4O2VCuo2MU8AxoLlTq3d3iQh1jFF8NhSBUhDMRC6aAZ:tj4MLWmLlm3l3jFUhMUhDWC6aAZ
TLSH
T114327D30FFBD6448E7AA7DB30E910815413FC4D8D56E8BCAB6BC1EE674719816F01961
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

batik-parser-1.16-62c4e0778339752a1f6f4d53ea3aef2f.jar

Path C:\Program Files\SimpleX\app\batik-parser-1.16-62c4e0778339752a1f6f4d53ea3aef2f.jar
Size 75KB
SHA256 98257ac1b9daf378d917d7ac005ec9d85a17cfbb88fa744d0fed0d176e403220
MD5 62c4e0778339752a1f6f4d53ea3aef2f
SHA1 8217bd068a48dc79c207c95821fe5c0d3d4c8b62
SHA512 1507ba85f3de161bb01addd6cf741a7c5ea63e4bf716b5fba0d9e1b47e9cd329fa23531a430fe2359bffe6439036926aa68446d7948d451aa3bb02615aa6670e
SSDEEP 768:VLWm8M0B3bJfDSt2kVTpwcBCr/6oPg2jZbOVHGHOFbTHp8fP/rc/60R+FrGZdzLB:VLW0cJfDSshzZ85NHp8f78R+JwZLB
TLSH
T1D7739E35DE154465FBA7537BCC89D502253EC588E28AE6DA3AFC17B3BC129852F43382
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

batik-rasterizer-1.16-9a4bec95395ecacaee2085945c311ad.jar

Path C:\Program Files\SimpleX\app\batik-rasterizer-1.16-9a4bec95395ecacaee2085945c311ad.jar
Size 8KB
SHA256 42539d0bb6a0892b8880b90b8e655037b92feabf6c2fd4d26277b6babc99e514
MD5 9a4bec95395ecacaee2085945c3101ad
SHA1 d94cfa0648a34d451364bdd84b8e4c46de6ba5bd
SHA512 b2dbe674bc8a388ffc66580d1834312d562498cb95298c297c5d01265808bdbdf53636b4a5dbbe86cdcc699af8eefeccd545d7eeb52450f6c4a4d8573d7ea1c0
SSDEEP 192:/3wowJ4O2VCuo2MU8AxoLaKQ9+fyxBFK4NrTjW:/M4MLWmLRQMqvNW
TLSH
T10E122B70AF89892DFB7AA5764FA15206513FC808C87FC28FF5B82987F5B26540B03591
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

batik-script-1.16-bfcf216f539f5718c7345322e0f060fc.jar

Path C:\Program Files\SimpleX\app\batik-script-1.16-bfcf216f539f5718c7345322e0f060fc.jar
Size 24KB
SHA256 a66febdb41d9bade0e11e6320ed4914ea2799aa6b814c5ec7f35589b370733dc
MD5 bfcf216f539f5718c7345322e0f060fc
SHA1 ba120da776d0ecb18c2280c6d9f503484dc1c12c
SHA512 6a76af215d57ddfe3a781d3f0900787df41d865efa724ac96b4900097487b82b5596eb16d35f08ed944a1b4f371690ee11bf6d9eff50847f64a0a8b7bb2cf1ea
SSDEEP 384:ZV1OJU44MLWmLHaMXSiqlKs9HfBOz0xxPpViSEsx+46F8HDPH2:P1ELWmzTXDqlPHoUpV/nxIqHTH2
TLSH
T1F4B28D31DFB98254E795E0F389A25101297FD048D4ABC44E74FC4ABBECBBA915F02704
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

batik-shared-resources-1.16-d6b1e37464c15ad7cd1a5b06d9ee1a9.jar

Path C:\Program Files\SimpleX\app\batik-shared-resources-1.16-d6b1e37464c15ad7cd1a5b06d9ee1a9.jar
Size 6KB
SHA256 318543fe05ee0d118938d9302b2fce137d040f31d71e042d2ca02406e386974a
MD5 d6b1e374064c15ad7cd1a5b06d9ee1a9
SHA1 75809160dd805a8ce29b655671cd29e47da43efd
SHA512 f011a34625828ccea3d36aaa3b8b617e38925d4fd69ecbffcb8bc45de2221fbf44d1b8c52d7e49c84f9c2dd4b1306787c559fe924500096e588ed6c0226239f1
SSDEEP 96:Z63yawJ4hwXJ1HPSH1TtAzuo2/vcFUk/sTOaoES+DPDTsHVx2cCvBRu47Y:Z6RwJ4O2VCuo2MU8AxoL32cCvBk47Y
TLSH
T100D16DB0FF58582CD76C35FA0F515225D13BD8588D2E83CDF5742C4FA63AFA48A02A82
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

batik-svg-dom-1.16-ee7f7021afdfbe71b29871159da5765.jar

Path C:\Program Files\SimpleX\app\batik-svg-dom-1.16-ee7f7021afdfbe71b29871159da5765.jar
Size 227KB
SHA256 701ee2e9c14ff7d39759db8fa8a8dd04398cbf9d38c75ad5ca178f05d99f4406
MD5 ee7f7021afdfbe71b209871159da5765
SHA1 d16a96149c33cde0eb5ed688308abf067e73e5a4
SHA512 448763ab7d09f01707a5232ba414ced87e81060586c60d0ce653decffcbc94474f37775945e47ca74f68ec3cff0febd4fdc8a097cbdb577cfedab747ff1fbf7d
SSDEEP 6144:fNwN8wTfgYzFxoFnnjhVwUC5SygNSN9OnU6ZJ5P23:fXifXpxo9F2V59OnRZJ5U
TLSH
T17334E132C6A59927FDB2A0329DC24027253EC254D09E85DA71EC5762F4B7DC0EFE2752
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

batik-svggen-1.16-48657fb48029f0427b1e34eb2a6884.jar

Path C:\Program Files\SimpleX\app\batik-svggen-1.16-48657fb48029f0427b1e34eb2a6884.jar
Size 222KB
SHA256 4bb25e0267d80765a4f87063ff3cac77688b045dafe8e903452c6b3fae9b249c
MD5 48657fb48029f0427b01e34eb20a6884
SHA1 714b527914c8295bc1f479b60b0d257357c1318c
SHA512 16b8e080297e0bafb7f090da4d22ac97a16b01a84c8d3bb34bd1b67137010db5a04f51938fda1f04238aff2ab8aa56dfb70da9be95ac8afbff4bfe29363ef7ae
SSDEEP 6144:4AQTHtk32Wc/PbuRuigSHwduiFk41TDJQdHk:4AQzO32VjuEIQ1FkqNh
TLSH
T1B524BF1AD7436652F56251334D42482A3C3FC069F88BA5E721FC06A3EBF79196F067B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

batik-svgrasterizer-1.16-649f564439bc465caa6d1fa68ad24.jar

Path C:\Program Files\SimpleX\app\batik-svgrasterizer-1.16-649f564439bc465caa6d1fa68ad24.jar
Size 60KB
SHA256 828df01e2b696b6b8fdd0bb9eaa29fcace597c3664ff25aee7679f05c00643b2
MD5 6409f5064439bc4605caa6d1fa68ad24
SHA1 494450b1e0869ad88e576bef05df12111366e1ea
SHA512 07594aca3c9d49fcc3b1c25ef04ae1fdb21cdb1b9966e6e6b1d10f1cde6c5ab787dc85fc10e8be40bba1a1b7dd5f6af43124c87aa56dddd1e0b42e3ab97de5d5
SSDEEP 768:DLWmWdVsUwDFi5M+6+sU98BCi/kdWwRD+ME12J+iegnwtPRE3tz2AVO25lgC1K:DLW9sDAMh+8AiMdDR+2siNWE9z2+X0
TLSH
T11E539D24EE05593AFBB3617E0F915522E03FD694E4BA90EB67AC1673FC136181B12BD0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

batik-transcoder-1.16-1290ebbcaf1ebbef5e1675eb639d54c.jar

Path C:\Program Files\SimpleX\app\batik-transcoder-1.16-1290ebbcaf1ebbef5e1675eb639d54c.jar
Size 126KB
SHA256 eaf365c90f758ab95deedf4d21331d5cdf0fa4e00df715df0240ab8f6653ff1e
MD5 1290ebbcaf1ebbef5e16750eb639d54c
SHA1 ddcb38dfddffa775bbda3340e44eddff9ef95451
SHA512 f7693a86c7dfceba1d18e96aed5a7823730fa3fdf2f0f33324b38e5c80af38f7d6e6f99f330360ac82ae0884f4bce30509c9f569626304948083f9d182df0b48
SSDEEP 3072:VLWq2lyJA64byB9tK9FO2ta/vCyPNkuUdr/Tk7NLkG:Uq2lGP4bC9w9FrwaywdvWLkG
TLSH
T1D2C3C051F9825162E5F6A132DACF8C162D3EC148D04FB0DA7ABC2777E8AA42D1F17358
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

batik-util-1.16-d8f93a889db85573d4f8c576ff2ad2f.jar

Path C:\Program Files\SimpleX\app\batik-util-1.16-d8f93a889db85573d4f8c576ff2ad2f.jar
Size 124KB
SHA256 a8306eda7a840685da7a730cdd99a63f8145ceb543017779d438c9d67550bfa2
MD5 d8f93a8809db85573d4f8c576ff2ad2f
SHA1 cc144a6a69fac333e5ed10ac3169768ceff2b840
SHA512 3919d53c027545139c4fb98870f3bc658fc34f9f4010ff50ba5c067b00445592977b713d59a08807faa37a05917e750b46621cd18a885680aac2c1e624bf64a0
SSDEEP 3072:5JHjgo3/jY2lPN7/xIXLWsjo6iyfTMI8ZBWTj6xOFk0v7:5JHVbY8jx1sjGyfTMhZknUR0v7
TLSH
T171C3C022C7CD0678E2BB853298C21A16583ED588F46F505B7CFC469EF9B14EB8743398
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

batik-xml-1.16-3147e6cfe396df25489c8c5899213dd.jar

Path C:\Program Files\SimpleX\app\batik-xml-1.16-3147e6cfe396df25489c8c5899213dd.jar
Size 33KB
SHA256 56f1ed597857bc81f5db7e669d15caa7d9497887e2710f0f98eea4b3e3f8ddaa
MD5 3147e6cfe396df25489c8c5899213d0d
SHA1 3055a9f0b0ee5b327c35c62749189b1c4683bc56
SHA512 ea957ff140761a7f4185bef565cd3d5bf156bd07d6ea67466e2e5ef7f876350860263a59fe0187e90e0cc8910f4d6f6e31cbda7397fe8bad9d492d604688f008
SSDEEP 768:ZLWmod5gn9MBtQHnXrLrZWnkVrRRRRRRRRRRRFmmmmmmmmmmmE3I9B:ZLW1g+bQHnX3rI4rRRRRRRRRRRRFmmmV
TLSH
T166E29E24A5F4B815DA5F9A7A86326BC2D53BE19CC06F4AD6F048C893F973BC90D131C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

boofcv-core-1.1.3-cd7ed044859f6bdb3fe6325518f2fd1.jar

Path C:\Program Files\SimpleX\app\boofcv-core-1.1.3-cd7ed044859f6bdb3fe6325518f2fd1.jar
Size 1KB
SHA256 16b211617619d677771460b1ac59cf912dcaf8096b8bf19b1e967546ca22f06b
MD5 cd7ed044859f6bdb3fe60325518f2fd1
SHA1 31a3902fae810ef8b63bd3f30ac2928feec03fcb
SHA512 80fa308187171b8b969e10697e8aa5397edebf66fa70084c49b3269ef4f083df12361845888a44df14a4eab59fed78880727ffe5e758f68b0a36bbf90ce56b3f
TLSH
T1E23195708DD4F921F0BD2AB647F2529A3437225CDB6C12FD2D943A8A947A0298FD3419
MD5 SHA1 SHA512 TLSH

Submit Download

boofcv-feature-1.1.3-59cbff871bc68e558a47caf63ca5e628.jar

Path C:\Program Files\SimpleX\app\boofcv-feature-1.1.3-59cbff871bc68e558a47caf63ca5e628.jar
Size 1.2MB
SHA256 428dae97b4364a049fa62fbaedae822e23320fcee47854cb2f8dc71b0d3f7030
MD5 59cbff871bc68e558a47caf63ca5e628
SHA1 497f8e369bcc1cf67f05bbde0151d2b440e35da5
SHA512 0d0d5cdd115c7c050131d3725a8531623e5bce512b5c12e80ddc6eb416afc134e5e0f1c7eb6099797ee4b2e231e75b1e10e6925c9e138cde9b1545164b6e0b7c
SSDEEP 24576:khyUi2qWxcmUc56Eu55VYWAsFukzYzkrzTGwFTfT804ZtImOTPNAerze0:Oi2q4255Vzphz6UlIOlrze0
TLSH
T14C45D07A24E12162E53B6633C7B4015EBC6F81DEF106210419B565E6DCFAA4E0FBFA43
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

boofcv-geo-1.1.3-f84cc97629241bfece5898b6dfc355.jar

Path C:\Program Files\SimpleX\app\boofcv-geo-1.1.3-f84cc97629241bfece5898b6dfc355.jar
Size 807KB
SHA256 0fbdbf8ce8d0d76b5411fbbb1e74a86bc8ab5299b69f4484a93ddd61906f02dc
MD5 f84cc9760292410bfece5898b6dfc355
SHA1 cbaa2056a435a79554ca23bd7139a2a3ad038e7d
SHA512 b88f995c25ecae62319286f6be7f72536da9f65def111ac173318821fa7ed075d017ef6f9f695485c219509972a31f092ec4d1cf481d7eb5a5bfd80199a1969d
SSDEEP 12288:MZLArQbha/ttSQfDX+08CohRNvVl1FzQsq46I8/vTQtgBJUAakRww:SCQbha/TVx81ZzX6DLg06Aa9w
TLSH
T1FB05E17BA1809533F6B3A27182BD025F343D88CEF449658858B09FF6ED769451FAB203
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

boofcv-io-1.1.3-ffaf831bea36c585d68448a987dfdc7.jar

Path C:\Program Files\SimpleX\app\boofcv-io-1.1.3-ffaf831bea36c585d68448a987dfdc7.jar
Size 259KB
SHA256 95e3edf462ffd9397ea358c17ebd771cd78a6f637cbf8a61b24ed562157ee0ef
MD5 ffaf831bea36c5085d68448a987dfdc7
SHA1 f07c8e23f6bd88501b605efcf1cd9c12ccca4a55
SHA512 36bd5d66c119974a02d10ccc361cbd7b9672052f58d8ec4cc439e416969b7e772ed0e637e183affac2b03f91e58f17db64512dc3df715c0a9a0f56f8d7038c25
SSDEEP 6144:zqkS3IQL0UtmUNHHA8cHiI5T7OajTDIvW154N9FgqtGmdYWGHCh3y:OkeI205UVApHl7NnDlH4jFgqwmdYnQi
TLSH
T18E4401B620C924B2F03776B193B410AA3C2F04DEF5AA476C2AF124D1EAB79550FD7653
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

desktop-jvm-6.5.6-ae5f8b7ec39e24bfd403ee28f3e32b5.jar

Path C:\Program Files\SimpleX\app\desktop-jvm-6.5.6-ae5f8b7ec39e24bfd403ee28f3e32b5.jar
Size 101KB
SHA256 b4392f62587e0b7ee1a6ecb8c6aa3680c3c45cab390c95b7fcb0730002a58e27
MD5 ae5f08b7ec39e24bfd403ee28f3e32b5
SHA1 0c76d2cfe30af9cb4bb8c985c628380f97744457
SHA512 8af72a0b6ce54efd1a56683a26c1fec5cac1be20bceb9730b5fd873405a35bcb90dc936839fe4861acdff80f44ecba1ea5cef07ba51610898d108ea45ea6316d
SSDEEP 3072:FtUL2MPrTjkOr2+nyjv1liWp4JWrQP/FbgnFzaa:F/2Tjku2+yjXiWpgZgFzaa
TLSH
T195A312C33AC000E5C7BFA1FAE0FE2AA7259F046C7D3D62B36125E716A54A7D741B8245
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

java.dll

Path C:\Program Files\SimpleX\runtime\bin\java.dll
Size 149KB
SHA256 f3abce92aafef5c040573be58de002b489ed07d13eda7a4739a86735ee9470b0
MD5 67fe765cc49a3fa2423b13c4872c145b
SHA1 84dcdebab4c03e76dbfe08f09fa1eced42d34c08
SHA512 31b30755679dc9ec7b62160a526276f80124f0c031a74acbc852caab57ecb88f6165d728a5232b2ee58cc9fc2d9e0bc35ab0a777c148cfb6c2173dce9076b1bd
SSDEEP 3072:FwJ2TqQGcag2fGjw0sa83YreGQi3Dj4L0FbJrzJsFu0gBM//T:FRTqQt6TYJ3fSFRoMD
TLSH
T16DE33A0BE6464062F819B5B8B016411FF3357061426DE3BE43EA865E8FAF7307D87BA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jimage.dll

Path C:\Program Files\SimpleX\runtime\bin\jimage.dll
Size 35KB
SHA256 2b8c9750338a6828b78c112b106d2de1d207813f63b1e9523570e23ce2fff1f0
MD5 3abcb1521f406c98482a27d650d8ef02
SHA1 4b6294a36de2a62abf29b8a2093e158dda674ba5
SHA512 9bbb16a858343092247e5059f8c6f4004393991a30fc22506b26936f04d3843caead65d5b7e8d6303f94b6be4c01810c9e840ed31d1e7fd227b77503436db3e5
SSDEEP 768:cTnPI2Y8SJTLX2vEJkSvRniid/YiVZDT5ALP:cTnA7mv0lpniid/7b8
TLSH
T1F0F28D96EF940845DD37E538D4A65E2BEAB1F9514FA1C3CB1321835E0F733802AAC766
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jli.dll

Path C:\Program Files\SimpleX\runtime\bin\jli.dll
Size 90KB
SHA256 f9e7f508f58f46843a3969f8df6af654dd291f1a2febe6f52ad17bbb264832f9
MD5 de2b358bc12b01003576a8d536da0377
SHA1 ffd6a85304d1c9795bdb72cd10dfc5cbe3224cbd
SHA512 1a60f4f22849d80302539e8e263aaf3bafb1e8eef47f2f8fa8aa6444a6e1e45fd53b7e0d2fc84c756646e9bb3926f40c04180a9ef75c9cd4f1c7c70de88e1277
SSDEEP 1536:6SPPGTTwWZSuocKjOVEf9ZIOkyoStu/WA/7bZv:6KPGTl4BjOVEVkyoSc/WA//V
TLSH
T19F938E5B53D011E4CDB785B9D9A05A1FD3F1F052276193CF036885AA0FA3B513E1CAE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll

Path C:\Program Files\SimpleX\runtime\bin\msvcp140.dll
Size 541KB
SHA256 3bfdb30266ce342c6c9c9fca681c9bd1a2416cc6f37ad1dceff9abec79ba8f02
MD5 18b6618d8cef9e5fc2b36ae9ef597443
SHA1 e47ad9b51ca5fc9020c38fd646d679de3b6c04cb
SHA512 cfb779110417164f12e362cff8bb01cd628217be1b3f1ea721a41038979bcc1d22d8aea73deaa596b9ea31ad22a4c46b5cccce2a0b70d117794527def643d7d2
SSDEEP 12288:YdkDYbKloU7/7mozO39V5WZyhNFdQEKZm+jWodEEVLa6TwY:YdnGoU/7m/V5WZ8dQEKZm+jWodEER7t
TLSH
T129C42A27F74A06B0E195E3B8A1838702D7F1BC498322E3C752EB955D2F573D0A67B690
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

net.dll

Path C:\Program Files\SimpleX\runtime\bin\net.dll
Size 100KB
SHA256 961dc20fbc7477c20f797f0b1a99e1b6c0236b42e76e53b60ab49f688820e7f3
MD5 0cba7ebafccec6c732e0256dea3b8adf
SHA1 1991d53186f8a8216bfde7d83152ba22a52a6357
SHA512 c932f2a6d557dff73c61903881f9a10a33775ca550dee36ec5dc199a02eb6066db4d94ea950de728cbdaef0ce9dc244bf1efb3d45e7f81431de530a86a2c35c6
SSDEEP 3072:doBwkSZkDeXP4iW7iCyreqoN4c9QacK//a:dSrMwjilreqUQHKq
TLSH
T178A34A11A3982485FC77D5B8C842411FEBB274606690878F4366CA4E6FFBA707E1DF92
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nio.dll

Path C:\Program Files\SimpleX\runtime\bin\nio.dll
Size 82KB
SHA256 36390ea15789a6c8dd68d5f9cfb9b4a929e8d33e936c1165394eab0f9d3baa6a
MD5 fdf63a4cabe36a538094e4076f0da2b1
SHA1 4bfa870be4a0d3885643a0d3b232c25746e9a7f0
SHA512 89f8d989491955eeb66f44e218e1af923e0ce5559c4afa4b963a89b07984bbb8c6edc58b84c627a3e4cdf1df1b1e0ac570738446dd9c0d2029b960bfa9939e7f
SSDEEP 1536:VZBUi5JQMOe/XIxcKaTHyy13cHBsKWcEW/MKO/7b/:VshMOe/UcNTSO3c1WcEMMt///
TLSH
T1A5832AA39374889BD83AB138925B535EF732BC105910974F5328C75A9F2F2B23D3D692
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jvm.dll

Path C:\Program Files\SimpleX\runtime\bin\server\jvm.dll
Size 12.2MB
SHA256 1d7dcc58a670c9fe6c3994b7537867a901b3681e4e40a2e27d3242a414c27e16
MD5 9d28d4d7dd6e3f715176d682c5e3d296
SHA1 5fb0c5b89f3ffd6c1416cc6e83f8867e4ac522cb
SHA512 2be439e912a462f0f64ea9ab9cf5c84fa2584068f1c6e3d0064c431653aac81ca66b042c33670832fd7e4dc5b722ba29e4c2b7296de14cc72e92f05b75c3c7ff
SSDEEP 393216:wAQIXXa9aGBdqUNpEfdercEkGNwMe2lN5dESGhuxwAuN/RQ+PlyzOMxeEWBXDB+Z:C9t
TLSH
T129D68D5BA3B440D5D42BC238CA1B5A0BD7F1B494A770E7CF11A8468DAF57BE1963E320
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140.dll

Path C:\Program Files\SimpleX\runtime\bin\vcruntime140.dll
Size 114KB
SHA256 44b6bba84eccb991b2235dc42aec6214b6ba1c4c19077dc66d8e12bc260a6c93
MD5 44c81bc51d5826139d9b1d5eac2b6e88
SHA1 989f956d4c8e411eab66cd66dbec56d1f475bdf4
SHA512 7de766a61c20d55cff63eea68e6740671dcbb6732c3ae04668b9386e075b9fd32937c3f3110030b29072d8a9614493d477ab785d3007ff24f001ee8b1397cfa8
SSDEEP 3072:TtkenID0f6aifkHWBXjG/IuecbfmgNWGB//Ej:CWSIHWBXjGlecbft5s
TLSH
T120B36B52B2F402FBC16ED278C5926E27E7B2B80587609BDF03A986654F57BE02C3D345
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll

Path C:\Program Files\SimpleX\runtime\bin\vcruntime140_1.dll
Size 40KB
SHA256 f7ac81f578a9488710170c7293edc116b088e5c3d2841921e4255149a012b571
MD5 38ea1177f7b4ea0b8e0fe8455718746b
SHA1 80244ba41ed19c7cc0581a83f5da6e8b93031915
SHA512 51fd4ca079f28c3020e089ae9474e0124b676f15a50acb71597b5c816731804795dee387e8033556265be022eb11cc3efb986a709c37617890f6c082814d50aa
SSDEEP 768:O3oZYctpzcx0pdESASv83O/YiVZD65ALE:Kc6wk3O/7be
TLSH
T140136CA197A81841D46BD975D0D32E2BEB71F9215B90D3CB03A9C11C0F627D0BA7E366
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zip.dll

Path C:\Program Files\SimpleX\runtime\bin\zip.dll
Size 88KB
SHA256 ef523fb8df3d370d40042c84fab20e6460ab5f2c70a74a4f06c9d6be2357a865
MD5 b3d69384bd3404d58a5883a39af89b29
SHA1 65965d22528f5d16d811c96efe2d1103b5a6bb35
SHA512 3b331dd485dc2d2d2695ca33e3ec66dbb982158d1c10e708f36cbc01f5949457ee5e8747fa79b772665528323edc8e1e0df2c788d6198a9777fc66ea4716e3c0
SSDEEP 1536:/d+PSDqEc/SIauPw0Ws6cF1OKkUo2IOxwyB6J+iaUR/7bWs:/0Paq3/9akw0X6yEbU9xwyYsiai//Ws
TLSH
T133939D52A9A01055D9F789B0C9E24E2FD3B5B05247A087CF6399839A2F537613F4C3FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Program Files\SimpleX\runtime\legal\java.desktop\LICENSE
Size 33B
SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
MD5 16989bab922811e28b64ac30449a5d05
SHA1 51ab20e8c19ee570bf6c496ec7346b7cf17bd04a
SHA512 86571f127a6755a7339a9ed06e458c8dc5898e528de89e369a13c183711831af0646474986bae6573bc5155058d5f38348d6bfdeb3fd9318e98e0bf7916e6608
MD5 SHA1 SHA512

Submit Download

ADDITIONAL_LICENSE_INFO

Path C:\Program Files\SimpleX\runtime\legal\java.logging\ADDITIONAL_LICENSE_INFO
Size 49B
SHA256 ebf9777bd307ed789ceabf282a9aca168c391c7f48e15a60939352efb3ea33f9
MD5 19c9d1d2aad61ce9cb8fb7f20ef1ca98
SHA1 2db86ab706d9b73feeb51a904be03b63bee92baf
SHA512 7ec63b59d8f87a42689f544c2e8e7700da5d8720b37b41216cbd1372c47b1bc3b892020f0dd3a44a05f2a7c07471ff484e4165427f1a9cad0d2393840cd94e5b
MD5 SHA1 SHA512

Submit Download

ASSEMBLY_EXCEPTION

Path C:\Program Files\SimpleX\runtime\legal\jdk.zipfs\ASSEMBLY_EXCEPTION
Size 44B
SHA256 b998cda101e5a1ebcfb5ff9cddd76ed43a2f2169676592d428b7c0d780665f2a
MD5 7caf4cdbb99569deb047c20f1aad47c4
SHA1 24e7497426d27fe3c17774242883ccbed8f54b4d
SHA512 a1435e6f1e4e9285476a0e7bc3b4f645bbafb01b41798a2450390e16b18b242531f346373e01d568f6cc052932a3256e491a65e8b94b118069853f2b0c8cd619
MD5 SHA1 SHA512

Submit Download

jvm.cfg

Path C:\Program Files\SimpleX\runtime\lib\jvm.cfg
Size 29B
SHA256 aa9efb969444c1484e29adecab55a122458090616e766b2f1230ef05bc3867e0
MD5 7ce21bdcfa333c231d74a77394206302
SHA1 c5a940d2dee8e7bfc01a87d585ddca420d37e226
SHA512 8b37a1a5600e0a4e5832021c4db50569e33f1ddc8ac4fc2f38d5439272b955b0e3028ea10dec0743b197aa0def32d9e185066d2bac451f81b99539d34006074b
MD5 SHA1 SHA512

Submit Download

modules

Path C:\Program Files\SimpleX\runtime\lib\modules
Size 43.2MB
SHA256 d5f7718350abcb5f5dbdc2bb5fc452ecb673c4df968605fd6f650729049932ef
MD5 15b0416e136d96dd440d9b9e39b31633
SHA1 fff082c43c9b172db0267bca3406fc7b6ce72aca
SHA512 ef2e865350b9038088201d36f420a8536a6855b057b72bf681463f34d9a957489f71f8f8d6fc7dfcbc2470e5610125e107c3dfc1f67df9dae46e6abfbde9ead7
SSDEEP 196608:AJ9kK/iWc4g1u+hO0+h3LayuH3wPGNLoOsN:AJDe7j+h3LxOsN
TLSH
T13DA75A27F1015667F241E6BE54A203155330E8B08A83E2E79F7CAD67DEE75D68E213C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSIDFBC.tmp

Path C:\Users\Admin\AppData\Local\Temp\MSIDFBC.tmp
Size 113KB
SHA256 aecd2d2fe766f6d439acc2bbf1346930ecc535012cf5ad7b3273d2875237b7e7
MD5 4fdd16752561cf585fed1506914d73e0
SHA1 f00023b9ae3c8ce5b7bb92f25011eaebe6f9d424
SHA512 3695e7eb1e35ec959243a91ab5b4454eb59aeef0f2699aa5de8e03de8fbb89f756a89130526da5c08815408cb700284a17936522ad2cad594c3e6e9d18a3f600
SSDEEP 1536:YImZwomOndvrhsgz56GoiFmntw1ebC0fsWk0FlcdOJKJpPpxyNokVbY4:jewOdvregz5L/mxb7FUOsrPpxyN7/
TLSH
T19EB37C1275D0C072E8BE0E3D45748A715F7E7930EF648AEB635812694FB42C0AE39E67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSIE02B.tmp

Path C:\Users\Admin\AppData\Local\Temp\MSIE02B.tmp
Size 103KB
SHA256 1e6d1d87d32c241a12f9ce76affd1120e13b4882b488c046775465b121ff6862
MD5 9c85a6da467f1d8a73cfbb1c1b909394
SHA1 9e35eca07acb3a441760a70b82b688e7998e4bc1
SHA512 7d671f242c7e95f70b5a951d1339e2093a0db2123d15813497130ef22654052fe14cc58f062f55f2cc057533a15067353d2858a2bca78988ba75d566c3b198f7
SSDEEP 3072:NPLs8P4HvbAWEgKgaR2Q9ZVbZaZaL42ynM2Wnd:Njs49ngKHQxS
TLSH
T1CDA3395B73F600BBE1B7863884A34A55D772B8515761AFAF0364429A2F237D04E3EF21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jna4288249170693378982.dll

Path C:\Users\Admin\AppData\Local\Temp\jna-63116079\jna4288249170693378982.dll
Size 248KB
SHA256 69c45175ecfd25af023f96ac0bb2c45e6a95e3ba8a5a50ee7969ccab14825c44
MD5 719d6ba1946c25aa61ce82f90d77ffd5
SHA1 94d2191378cac5719daecc826fc116816284c406
SHA512 119152b624948b76921aa91a5024006ef7c8fdbfe5f6fe71b1ec9f2c0e504b22508ff438c4183e60fa8de93eb35a8c7ccdda3a686e3c2f65c8185f1dd2ef248b
SSDEEP 6144:tO+uZb5K8Dy+Zkt9dHlJ1ybBEleb906wslm/m+yygW:tO+MbMOEe3m
TLSH
T19B440807A7B688E5E8B7C03D44236A12F6B178294320EBEB47444A575F67BE0DB3E750
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.properties

Path C:\Users\Admin\AppData\Roaming\SimpleX\settings.properties
Size 538B
SHA256 aa41cc7482ad05979ed9b5dbfbbd1d647e75bfe2680dd3c18ca8b80bf27d48bf
MD5 ce18617a790ba5d95397c14309df457e
SHA1 9456e44f2296494d42d2b99c74540de59f6f7220
SHA512 b4ce46238ca1900fb62031b316ec79cbc48b7094774cdf43dea236a947205ae303fbb16ef3cca29ccd2c3b6dd9108aa6132e9382d40bb54530350776a51c0a28
TLSH
T1CDF0C0D9FFF54F35843D9AF75B10941E85C32A226653802527B50A52216558C3D974D4
MD5 SHA1 SHA512 TLSH

Submit Download

MSI47EC.tmp

Path C:\Windows\Installer\MSI47EC.tmp
Size 211KB
SHA256 c8d190d5be1efd2d52f72a72ae9dfa3940ab3faceb626405959349654fe18b74
MD5 a3ae5d86ecf38db9427359ea37a5f646
SHA1 eb4cb5ff520717038adadcc5e1ef8f7c24b27a90
SHA512 96ecb3bc00848eeb2836e289ef7b7b2607d30790ffd1ae0e0acfc2e14f26a991c6e728b8dc67280426e478c70231f9e13f514e52c8ce7d956c1fad0e322d98e0
SSDEEP 3072:/Jz/kyKA1X1dxbOZU32KndB4GLvyui2lhQtEaY4IDflQn0xHuudQ+cxEHSiZxaQ:/t/kE1jOZy2KL4GBiwQtEa4L2sV
TLSH
T1ED249D316094943EE7FA0936997ED671AE3DF2341760C9AEC3848C0E6D644C16BB7B27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata-2

Path \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\System Volume Information\SPP\metadata-2
Size 24.1MB
SHA256 fb81608e397ec311b623709035ef25ffda05cd53c0e869ca66e3ef8bbd5e1228
MD5 f7935fdd24346f20119284ac05abc370
SHA1 c15f97a9bea62fa27b2b00a7419286887efb8bf2
SHA512 2dc79d6a7a5c65551be115084758657c241b20d558320410db8b1a418cecf415b86ca094086fcddba220348168ac3bbdb3c8f9338dd968661d6c9be4b29472e0
SSDEEP 24576:6u8m+1zLdoO/vvTLbWhuEGalg4kzZ1hSdnGdT+AVpUqwu2YMo/F4ZHaRk:m
TLSH
T1E147D32437F92200E7F79F3DACF06A23493A7D5B9C159E8D45411B4E0921BB1E872F6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{395f1f4b-a559-45b7-806e-26c618d414ac}_OnDiskSnapshotProp

Path \??\Volume{d78106ee-0000-0000-0000-d01200000000}\System Volume Information\SPP\OnlineMetadataCache\{395f1f4b-a559-45b7-806e-26c618d414ac}_OnDiskSnapshotProp
Size 6KB
SHA256 d18fb26272e6415eed3fdff10bba3b50387f9a40e543bb1ee26c846220cd0e22
MD5 dc818e615a3d032033058425983aefb6
SHA1 b8c7a90c304fe5940b19a887d41c34cec5499ca1
SHA512 f7963a3e45fe4109704ea87df18220ef75b7acfd73c85b4d23bae2e529343fd75e22902b5e8624d9b0f9300c0bf2bd184d056089890333b29ceeedf0303881e6
SSDEEP 96:FVQVavc8DD84LTHzbOHXOHBlBRQ88Sc9XE56tOSVQpu:/1b++ZVm
TLSH
T145D189185AE54311E2F3AB7228F14557A477B911EF33CB8E0198238E2670A10F876F6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4848-926-0x000001C76B1D0000-0x000001C76B1D1000-memory.dmp

Download

memory/4848-925-0x000001C76B1D0000-0x000001C76B1D1000-memory.dmp

Download

memory/4848-927-0x000001C76B1D0000-0x000001C76B1D1000-memory.dmp

Download

memory/4848-1125-0x00007FFBDDF80000-0x00007FFBDDFA1000-memory.dmp

Download

memory/4848-1124-0x00007FFBD0CB0000-0x00007FFBD10DC000-memory.dmp

Download