Analysis

  • max time kernel
    126s
  • max time network
    136s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    14/08/2026, 12:10

General

  • Target
    2026-08-14_eddf8fa699eb7f5b690575bc01e01bf2_darkgate_elex_gcleaner_trigona.exe
  • Size 342KB
  • Sample260814-pb7phasfjf
  • SHA256 01c7a6718552236762ac2786fb07d9d6b362726d5804576d496c90a9ff8fefda
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 10 IoCs
  • Drops desktop.ini file(s) 3 IoCs
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-14_eddf8fa699eb7f5b690575bc01e01bf2_darkgate_elex_gcleaner_trigona.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-14_eddf8fa699eb7f5b690575bc01e01bf2_darkgate_elex_gcleaner_trigona.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    PID:4552

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        b51egdj3j.7wm2035b3vr._i2EgsO

        • Path C:\$Recycle.Bin\S-1-5-21-540052884-2969440504-464782435-1000\b51egdj3j.7wm2035b3vr._i2EgsO
        • Size 2KB
        • SHA256 57453674620d17899cd06f202798984b8bbdda19cb390c9bafb4f1843846f613
        • MD5 SHA1 SHA512 TLSH

        desktop.ini

        • Path C:\$Recycle.Bin\S-1-5-21-540052884-2969440504-464782435-1000\desktop.ini
        • Size 907B
        • SHA256 428b912cf4dc8f07176a7a6eb77eac9e03c2c6259e7cef142e466cb69d23f4f2
        • MD5 SHA1 SHA512 TLSH

        Click on 'Change' to select default PDF handler.pdf

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Click on 'Change' to select default PDF handler.pdf
        • Size 183KB
        • SHA256 a4ef1f8457d3a14f26a644db9f58cbd47dcf361845897ebd96d3ec28d917e809
        • MD5 SHA1 SHA512 SSDEEP TLSH

        s_export_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_export_18.svg
        • Size 8KB
        • SHA256 cf28c93b392f93a3097711acfdb2268324a53e538bfd06279320ccc467b126a4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        s_download_pdf_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_download_pdf_18.svg
        • Size 8KB
        • SHA256 7ff23cfe2d6f4bfdc111f0f9903626c600d8589052190e724820443bc220b687
        • MD5 SHA1 SHA512 SSDEEP TLSH

        new_icons_retina.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\new_icons_retina.png
        • Size 18KB
        • SHA256 20b1b790bf0d47730dba42625ab484b45486e379511929e91fd519c83491c348
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\fr-ma\ui-strings.js
        • Size 4KB
        • SHA256 af95bc61872cf6fb8c33e5571a86bf2de3bf1bc39727bbfd3874afe1cb986667
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sample-thumb.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\themes\dark\sample-thumb.png
        • Size 7KB
        • SHA256 9b77cba6c0da7d2efd8f8824b7a2a87e7d31f92e5006e04b1d759165aecf7f36
        • MD5 SHA1 SHA512 SSDEEP TLSH

        file_icons.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\images\themes\dark\file_icons.png
        • Size 24KB
        • SHA256 f9929995a81300ecc3a33c1bf9bd1191ac9034aa2d2f0058cfcd64131be37b75
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pdf-ownership-variant2-2x.gif

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\pdf-ownership-variant2-2x.gif
        • Size 812KB
        • SHA256 d6d4a040138fe96164183ffd3de8aef6e1d60b0cf6abb2b2f5745360d8f6a471
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\fr-ma\ui-strings.js
        • Size 17KB
        • SHA256 d8ad69d3a8fa857b0563ceb1a908ca56171033dab692573bbb400d948e98e133
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\he-il\ui-strings.js
        • Size 4KB
        • SHA256 d61b257871a7b3893e4234aae27b4d52b307fc34944a9e4f47b4e85b41263871
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\fr-ma\ui-strings.js
        • Size 17KB
        • SHA256 0328b8989898c7d91efb1d7f2fdc3f9792eef120420bbcc076de8cf80dd34dac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\ui-strings.js
        • Size 22KB
        • SHA256 f6c1dbf0403b8d593a1a7ff6291bb2973d390d7bc1a5f491aee3c99d90c0a8f1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        available_for_trial.88m6zt416s211z5s01e3cgf293xq7.bn0o65dm95r._i2EgsO

        • Path C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\available_for_trial.88m6zt416s211z5s01e3cgf293xq7.bn0o65dm95r._i2EgsO
        • Size 33KB
        • SHA256 8fee075eb36947b94bb35de3580ef6882a8ea7de25932712b02f7107886e31cc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Workflow.Targets

        • Path C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.Targets
        • Size 5KB
        • SHA256 8c0d900133e2311638e61578443063a3fbb38c91c9790402d46954d9747512ed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Workflow.VisualBasic.Targets

        • Path C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.VisualBasic.Targets
        • Size 5KB
        • SHA256 7712496c412bc774e10888ac4443ae14a985f9816af12812f9574e54c40acdf4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        EdgeWebView.dat

        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\EdgeWebView.dat
        • Size 8KB
        • SHA256 bc8884aa4ba6fb270084aac70578bf739d7b629be1abc07ac4dee867550bdecc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        widevinecdm.dll.sig

        • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig
        • Size 2KB
        • SHA256 d824eed970517b5662960331d1fac99ff70845eb89d870aeb583514f53e04117
        • MD5 SHA1 SHA512 TLSH

        uk.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\uk.pak.DATA
        • Size 1.7MB
        • SHA256 7dc3d8723cf34e90e12a76a1542c49619436c66b1313efd3b97915bc38b10041
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ur.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ur.pak.DATA
        • Size 1.5MB
        • SHA256 4bf9c1481f2c89ba5f3c42ce98dc5e5029f555c8498641b56693258059890924
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vi.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\vi.pak.DATA
        • Size 1.2MB
        • SHA256 cc57a7bc75a82390bc7c5469d40f9fcdd97092e1299729c3c33136dd0891b036
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-CN.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\zh-CN.pak.DATA
        • Size 860KB
        • SHA256 0476e843f63db8a6b0a78ccaa9ae357b3e7ccf4393d40441ad4f2592a43c9596
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-TW.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\zh-TW.pak.DATA
        • Size 887KB
        • SHA256 3066630455314b3cda848d22cfc9e6127324f215748a87daa52a9567a59c1a23
        • MD5 SHA1 SHA512 SSDEEP TLSH

        manifest.json.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\MEIPreload\manifest.json.DATA
        • Size 1018B
        • SHA256 f4f1e65b226f8bf67b4d8da34ab15046927c9b1bec090491a539cf6dac346ddc
        • MD5 SHA1 SHA512 TLSH

        CompatExceptions

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\CompatExceptions
        • Size 1KB
        • SHA256 2303587eeb4d17441f8675961e02f58bb450465a32211323fd0663bf7900b327
        • MD5 SHA1 SHA512 TLSH

        Cryptomining

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Cryptomining
        • Size 1KB
        • SHA256 b57d2807ee028fcf3b51a785187f34822b4e9670502febe4b76645fae787ee1a
        • MD5 SHA1 SHA512 TLSH

        Fingerprinting

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Fingerprinting
        • Size 2KB
        • SHA256 88254aafa6af9ecd9d8f398dd6723731791dfebd67a1586678cad7229da1fd91
        • MD5 SHA1 SHA512 TLSH

        Other

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Other
        • Size 806B
        • SHA256 749becd890642f4b480f3127104fb5b43ff086c75e52cbdac2b6543e736d4942
        • MD5 SHA1 SHA512 TLSH

        Social

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Social
        • Size 1KB
        • SHA256 9b912628b90b80c9bbed9a1015bacd787c63859ea4026515d9cc065e105bcf36
        • MD5 SHA1 SHA512 TLSH

        TransparentAdvertisers

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\TransparentAdvertisers
        • Size 894B
        • SHA256 5957a70839e1749a3a151b91f0d34b2441ad2c0617480a34ad0470ebfa673da7
        • MD5 SHA1 SHA512 TLSH

        Advertising

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Advertising
        • Size 3KB
        • SHA256 0122e4cf4d54392fba1d122806a17cb6192fba26d90ad730af9e91412fa46b34
        • MD5 SHA1 SHA512 TLSH

        Analytics

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Analytics
        • Size 1KB
        • SHA256 52b4cd85519e8f036d23e73cd6b4cebdc3e9e12eb5b5ad9fdee7b4a7354894ec
        • MD5 SHA1 SHA512 TLSH

        Content

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Content
        • Size 822B
        • SHA256 ef7589ae224facdb8a4c2266351c9728071ca9f90109425770075923267d7181
        • MD5 SHA1 SHA512 TLSH

        Cryptomining

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Cryptomining
        • Size 811B
        • SHA256 1da7be24bd91315bd9ef9e52e72f523698f7d2736513a0788cd6f8c2e9dcdd65
        • MD5 SHA1 SHA512 TLSH

        Fingerprinting

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Fingerprinting
        • Size 953B
        • SHA256 dc502a2c819fc6c7902dafcc62ac1770d7cdafdda7abdfdf51d26167d9a5ed85
        • MD5 SHA1 SHA512 TLSH

        LICENSE

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\LICENSE
        • Size 840B
        • SHA256 65db7d590dd400e48a6cab444b53a953f17ef9040b7c2580f786cfa588551896
        • MD5 SHA1 SHA512 TLSH

        Other

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Other
        • Size 863B
        • SHA256 061655ca43545a0cfb95984f87ea422486075d4e0027d6f7363f1ce44f54e161
        • MD5 SHA1 SHA512 TLSH

        Social

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Social
        • Size 4KB
        • SHA256 ea3d1a4dc77a556e72d1568c3dc20470d9836b034e687862f22ec0196eea1244
        • MD5 SHA1 SHA512 SSDEEP TLSH

        manifest.json

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\manifest.json
        • Size 912B
        • SHA256 2e1c7a69e2c120c91183c2e737318387e09a5344581627861eae081acac5c491
        • MD5 SHA1 SHA512 TLSH

        widevinecdm.dll.sig

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig
        • Size 2KB
        • SHA256 ed993eef0f925354e9c8c0a9bfe82a78c95c41d8eeb40c06544d63523f252e0b
        • MD5 SHA1 SHA512 TLSH

        manifest.json

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\WidevineCdm\manifest.json
        • Size 1KB
        • SHA256 4a202d48f3f76934ee1c39fd38c7182846224aaf7d3ba40f0519695de3d5f5a8
        • MD5 SHA1 SHA512 TLSH

        stable.identity_helper.exe.manifest

        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_proxy\stable.identity_helper.exe.manifest
        • Size 2KB
        • SHA256 e8664eb88fcd290ac2dcb9caf96d1f78d4ed9a5f59d399fc0fd23cfeba883f21
        • MD5 SHA1 SHA512 TLSH

        Uninstall.exe

        • Path C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe
        • Size 101KB
        • SHA256 6bac76b27ff59a0f1e28b5ab29fd42a0734d57f43497a379c250b23e8190d1ed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        maintenanceservice.exe

        • Path C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
        • Size 272KB
        • SHA256 87b3f8577cb3bb54d060d27e46ea697f1894a02505c735c1cfdb8a891d76e642
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MSFT_PackageManagementSource.psm1

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagementSource\MSFT_PackageManagementSource.psm1
        • Size 24KB
        • SHA256 ecd76ba54e39f7068ad90438a20e5f04c61932586ed6a40c28320b3d364d3e46
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MSFT_PackageManagement.psm1

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\MSFT_PackageManagement.psm1
        • Size 13KB
        • SHA256 f1b087528841ce210983b2422d3a851e6cb3d9d03992234042e8f8b40b01ec8f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PackageManagementDscUtilities.psm1

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\PackageManagementDscUtilities.psm1
        • Size 9KB
        • SHA256 6ba20385cf1ee55324de819f696e1b2781889394e58e2764e264b0969a088744
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PackageManagement.format.ps1xml

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\PackageManagement.format.ps1xml
        • Size 16KB
        • SHA256 5e73d30a559bb4a36699a016b95e6cc901bb3a2d3723af4a123137a129b95e21
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PackageProviderFunctions.psm1

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\PackageProviderFunctions.psm1
        • Size 11KB
        • SHA256 9c6235179e6928b66015ad81c2493bf325404fe2dce0398cc957d5949a7cfc52
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PSGet.Format.ps1xml

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PSGet.Format.ps1xml
        • Size 8KB
        • SHA256 c41dab48a3e2c36bb024b794aefd9cc4c463dbbabb4e200fb867e5eb3ddfb892
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PSGet.Resource.psd1

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PSGet.Resource.psd1
        • Size 78KB
        • SHA256 000ea848ed4cfd5027763087508c8661e1b50c984b9131863deabad6714e01ed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        available_for_trial.697w9.8tr._i2EgsO

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\available_for_trial.697w9.8tr._i2EgsO
        • Size 571KB
        • SHA256 4e751a180ed0b755fe8c679d3cd192c85d548c47b9ac7279288fc088ee29dcea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        6w5cbpakw9l51g48697yir0j2ph1jnnd5lg0i7.k4019i3r._i2EgsO

        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\6w5cbpakw9l51g48697yir0j2ph1jnnd5lg0i7.k4019i3r._i2EgsO
        • Size 6.1MB
        • SHA256 2f2ce4f2176328e5a69a574d9ef1b15ba8c6f427d833d71a0d6b6ca434841388
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-console-l1-1-0.dll
        • Size 12KB
        • SHA256 bc7279259e50627393b1592b6b354728d84dacf058770d83294ccd11aabcd754
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-datetime-l1-1-0.dll
        • Size 12KB
        • SHA256 0f971f37b5ff6cee71daceb98ed57be5c8f1017ff87686b8d3e17037068b7c03
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-debug-l1-1-0.dll
        • Size 12KB
        • SHA256 ce3090e6676648eb10c570b2bdacc641f0db235ebd3c2a988de6f007431b8fc4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 12KB
        • SHA256 7b87ed5f196a6c40857e74ea258b0c95080fcd94f653d514a7ee1edc313cd088
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-file-l1-1-0.dll
        • Size 15KB
        • SHA256 4e20e6d6afac0ae19698b32260edd58a9e8682155d9e8cd6744bddc590414254
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-file-l1-2-0.dll
        • Size 12KB
        • SHA256 b1ff85b16e1c5c297c660ca4217aa2f452b943da0f2f0db9ed42f666c5315f76
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-file-l2-1-0.dll
        • Size 12KB
        • SHA256 1d58c8c08678a7fb404baa46814d4681b252b12eb2a846651ee70755246f6f92
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-handle-l1-1-0.dll
        • Size 12KB
        • SHA256 f68dc2a82c46ea0ea62f5047031eea4d6be14f67143a1e03b5466457e97f74d3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-heap-l1-1-0.dll
        • Size 12KB
        • SHA256 77fad0955789b0a88c57cd95faf43e2064157283c402abb570e999822f303698
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 12KB
        • SHA256 730ab5f55c607c5f3c736cf02dc2882ac4342fb5218d3a7a555d17785f5175fe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 13KB
        • SHA256 38054a015f34cb27b38d2b51d667b7f8f1850a7896359405d10275c200654ca2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-localization-l1-2-0.dll
        • Size 15KB
        • SHA256 784b99b5ce304f9978f0775192c97b77b22a13ce50a9588d5386ae71e9338283
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-memory-l1-1-0.dll
        • Size 12KB
        • SHA256 e575a2114668e55bebe65a5e51e2fe4df6de26a9bc39b7feb46cdb04e1201cfe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 12KB
        • SHA256 e936bc2f4b397b34354e36e67164d281cb1660ad9bf44a6ab0eff674393f79dd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 13KB
        • SHA256 f3708558e9c8c69f2d88184e774e3ef557f36e0d18ff86632fce9a4cb1f62829
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 14KB
        • SHA256 626738b599540bfb28bba0e6ce730598412e3fd63a940a12be8d9e7af1eca295
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 12KB
        • SHA256 585ccf20c2405616db9f30ae9f73913b834b38838a61455cc334b711547ba0c4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-profile-l1-1-0.dll
        • Size 12KB
        • SHA256 1a432f30f748df8eabd8c0981bc33ae6a891e65afbc2699273a5394b92dff11b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 12KB
        • SHA256 969df8810627e7bc49b9e5e0669a9acbb38dad8c7be776c1e9cc823e303e9d45
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-string-l1-1-0.dll
        • Size 12KB
        • SHA256 e1236c1cc9a527bc4e577bd467d8f46fca1276cade26746b7bf2d9ae42d21355
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-synch-l1-1-0.dll
        • Size 14KB
        • SHA256 eea9f112ed53c88fec9caaa98dc0125ee93983862b22570153220ec5797e8a40
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-synch-l1-2-0.dll
        • Size 12KB
        • SHA256 4cfe495acf24b72316ba2598d2f71d9d8a6ea9110d7d2cc70d7c99fc595ab7a8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 13KB
        • SHA256 00d6fdfb408f6be072f235a1a0d81b7382e0c6522667f58cd55e0344a5646774
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-timezone-l1-1-0.dll
        • Size 12KB
        • SHA256 aadb8d31eab7fb13b7750d1a5acceaa20fafd9ae0038fc79b2649f5e4a7892f0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-util-l1-1-0.dll
        • Size 12KB
        • SHA256 1070180b0e598497d2cdda942f89fdd4ee22a121676d8a064e566d1914fd62b6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-conio-l1-1-0.dll
        • Size 13KB
        • SHA256 c0fed0886537978278c2317bb004fa14d5a1f49db0396010148f1c181747d8a8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-convert-l1-1-0.dll
        • Size 16KB
        • SHA256 84a7fa6bda5825ad1527dc46b4f067b4373fbe85404718b22493743a990f1257
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-environment-l1-1-0.dll
        • Size 12KB
        • SHA256 417ffe0fd071f0ef2d3b3bc45c9e9314f008c22fdbcfbd3b693a5d4bf048ab02
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 14KB
        • SHA256 0e38fd38b6d3b6c4b3c8b2429b6ea6d53ae8b1b8570fe8e5eb7d457a36ace52c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-heap-l1-1-0.dll
        • Size 13KB
        • SHA256 88e5367ef980f70f56cb74e7cc9a2c552fb40f8a368ffbcd268ee7fb8b3c9c47
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-locale-l1-1-0.dll
        • Size 12KB
        • SHA256 d741a15361f8db40040c5af335b6814fe922fcfab1815fa2b22b62a0d6433012
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-math-l1-1-0.dll
        • Size 21KB
        • SHA256 e68e0b0c3e9cf74afbab9d6429305160343053d9fbe7f7ca5080c4dab0001ff9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-multibyte-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 20KB
        • SHA256 dcc3d2aaab9183a44c7b3961c0af85eee1547999f09e714288df264b79a26d69
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-private-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-private-l1-1-0.dll
        • Size 63KB
        • SHA256 ac818f161ca806eee4399d8c6084bf5607216faf797f9a973073e2ca29ac725f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-process-l1-1-0.dll
        • Size 13KB
        • SHA256 c427889283235b8d413a2490a34581f4ae3cfc1f59fc4870848cc01637114e8f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 16KB
        • SHA256 a17642fce6bdc0f39864e3b33ebe56b5f699c7e809750a8b19b5004dc01d5a9d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 18KB
        • SHA256 bcf759848c90606914f67c334e8d58e445da7693921ee215351ff161bbb3341e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-string-l1-1-0.dll
        • Size 18KB
        • SHA256 dd59b3379905932a6e720cab95f015383f2b03018271b1e3b844d921d055c25f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-time-l1-1-0.dll
        • Size 14KB
        • SHA256 5193580092b58130654174bb6b4ace96ab70b52f62f83e4d5060ffea177a9f23
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-utility-l1-1-0.dll
        • Size 12KB
        • SHA256 99dfe7bf57616159f49e6c5345308ca0883765cf13c49017ea4a030af10c40c1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        available_for_trial.55w2bit63kr.cuwq0r._i2EgsO

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\available_for_trial.55w2bit63kr.cuwq0r._i2EgsO
        • Size 12KB
        • SHA256 8dee8861b8fe4167f7b5a8013122387144d460cde0fa259271b92c1aeff00b7d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcp140.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\msvcp140.dll
        • Size 559KB
        • SHA256 44d0ae620ced496e32a8244db91b05ef13ca3413bec3c9007ace157e46806370
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\ucrtbase.dll
        • Size 1012KB
        • SHA256 4fbc034bc0d47ff47585e297b73293ac7f83bcf854979adc054c5122be5a99d9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcruntime140.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140.dll
        • Size 96KB
        • SHA256 a1872d046ea040008422a1b79adf941b455703873c7f49bbc93ecc44622212a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcruntime140_1.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140_1.dll
        • Size 37KB
        • SHA256 ddad14e5df018761dd6c9f85fee9e91f1d9c0302ad9890d894767255016ce8b1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        messages_zh_TW.properties

        • Path C:\Program Files\Java\jdk-1.8\jre\lib\deploy\messages_zh_TW.properties
        • Size 4KB
        • SHA256 fcb972d321b08eff41bae182083ec8a1c272eb609def121a40031aad347a79a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        glib.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\glib.md
        • Size 32KB
        • SHA256 8a6321498646d52d1d6d5958f06ebccca354ae16a9eafff0bd758350dc200251
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gstreamer.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\gstreamer.md
        • Size 35KB
        • SHA256 56feab9ee21af9ac0dbace4b59cb090695427e422557544cb182eb7029f264c3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icu_web.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\icu_web.md
        • Size 24KB
        • SHA256 3214563ee1d860450f518907441d146be3bb88575eebceb86e1051519c5442fe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libxml2.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\libxml2.md
        • Size 4KB
        • SHA256 3282c36767d02a1076c552e7d28e21cf1580b0c302e93c2aa8666d943b554180
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mesa3d.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\mesa3d.md
        • Size 6KB
        • SHA256 d58eae438b4a6c8012f9d7f679ed27d8f16da27f39bf0d4cc62d4775cc1335d9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        public_suffix.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\public_suffix.md
        • Size 18KB
        • SHA256 8a8b9047f5ac2525e66f13c01cabc6ae270c55ee9d247cdd0d85582c8209a7db
        • MD5 SHA1 SHA512 SSDEEP TLSH

        webkit.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\webkit.md
        • Size 320KB
        • SHA256 8a6d34120489fc07572f19db847646a36fe62611b25112cc2d712f9b0cbe84d8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bcel.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\bcel.md
        • Size 11KB
        • SHA256 413f69744dab9716c751a4930b28499f9aedf7345cded6f20dc93086f9b6a6b6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dom.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\dom.md
        • Size 4KB
        • SHA256 0a6dfab0b1d07f41c2b8350a370c9a11c334c41bd907ca0fd2a803f890377aa9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ecc.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\ecc.md
        • Size 29KB
        • SHA256 2596caab0414eb6425893347071bf3e1060be105f1f5a2ec445e268a56713fe7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jpeg.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\jpeg.md
        • Size 4KB
        • SHA256 1e2ad497c4918a95e6ad8d235869ced77bd6998a4ea7a17ce3bfc813908035d8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libpng.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\libpng.md
        • Size 7KB
        • SHA256 5dcea97ba69509fbec09449a1f010384096387cc9c35ffff8a9acf4fe3da839b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mesa3d.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\mesa3d.md
        • Size 6KB
        • SHA256 066464ab590b051ed7af7ca42a0bcf6b27c8fd5851dfa4baf8e23de4a2fa84ca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pkcs11cryptotoken.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\pkcs11cryptotoken.md
        • Size 4KB
        • SHA256 2c5a0586b1609ea5992729d66d87ef476216a56fd996751966045fe97d374be4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        santuario.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\santuario.md
        • Size 12KB
        • SHA256 e9b0a5d2e11033c9fb057083790200e41a7201d6a773454889c0b66875ad39e9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xalan.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\xalan.md
        • Size 12KB
        • SHA256 654c223b23ffc90a22fd87633968a6de4fc0aa228aa6fb2a84a98b451bd0209f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xerces.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\xerces.md
        • Size 12KB
        • SHA256 dba8156ea7544463f8164d71db021a632f195b4d5b71dc1c9f1a25408f4a18eb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xmlresolver.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\xmlresolver.md
        • Size 11KB
        • SHA256 42f613c0653cbff94587e74625e1979951db748938ebe64861859a5d647ddb9c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcp140_1.dll

        • Path C:\Program Files\Java\jre-1.8\bin\msvcp140_1.dll
        • Size 24KB
        • SHA256 8b3d1496885c37a477656be6d9fb4769e4f5b1c1118f80126096c1c66fd2e572
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcp140_2.dll

        • Path C:\Program Files\Java\jre-1.8\bin\msvcp140_2.dll
        • Size 183KB
        • SHA256 d770489164fefd26b1f668be6fda8a2e4702e621c07ba2616b873c98ad2b0f60
        • MD5 SHA1 SHA512 SSDEEP TLSH

        classlist

        • Path C:\Program Files\Java\jre-1.8\lib\classlist
        • Size 83KB
        • SHA256 5e8fdf24cc1ad981af0ea07ece5076f96535aedc4a3af84c5e8e9f41eed1372f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CIEXYZ.pf

        • Path C:\Program Files\Java\jre-1.8\lib\cmm\CIEXYZ.pf
        • Size 50KB
        • SHA256 72fd6ce418dac5b6171a7774d911bf6461ffd102ebd88d93e28d5eec5daccbaf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        content-types.properties

        • Path C:\Program Files\Java\jre-1.8\lib\content-types.properties
        • Size 6KB
        • SHA256 b1383ad9a717ab00228f418bc076bc2c0a595c1c5ec78ff5c3a8f922ee534e01
        • MD5 SHA1 SHA512 SSDEEP TLSH

        currency.data

        • Path C:\Program Files\Java\jre-1.8\lib\currency.data
        • Size 4KB
        • SHA256 44f3e71a8685edc08de9d775e2e853850637820e842245f9838beca92f265663
        • MD5 SHA1 SHA512 SSDEEP TLSH

        deploy.jar

        • Path C:\Program Files\Java\jre-1.8\lib\deploy.jar
        • Size 1.6MB
        • SHA256 6d397b17d54a48be4f89a7d2d325fe69556d2573489ecb9d4317824047e50bf4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        • Path C:\Program Files\Java\jre-1.8\lib\deploy\[email protected]
        • Size 12KB
        • SHA256 ee81aee7c14a2d7426143678548187ee88ddb18b110fd59505e4c26b4b11683d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flavormap.properties

        • Path C:\Program Files\Java\jre-1.8\lib\flavormap.properties
        • Size 4KB
        • SHA256 dbd60ef01589104cd54820b4544f1da1571755daa8468249bf91bf79689db22e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fontconfig.bfc

        • Path C:\Program Files\Java\jre-1.8\lib\fontconfig.bfc
        • Size 4KB
        • SHA256 8a85ced9c984a5c972a4d6e221176a2cd59e3314cf0c43bdff1efa6d223a53e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fontconfig.properties.src

        • Path C:\Program Files\Java\jre-1.8\lib\fontconfig.properties.src
        • Size 11KB
        • SHA256 7caac68d18c0144644c6df39d0233f3fd94d4216034881b8a304b11aa2268c17
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hijrah-config-umalqura.properties

        • Path C:\Program Files\Java\jre-1.8\lib\hijrah-config-umalqura.properties
        • Size 14KB
        • SHA256 45c6e6f23dd638b412605c201b9648b74b3ad0724ba2fb9763b505eb55691935
        • MD5 SHA1 SHA512 SSDEEP TLSH

        javaws.jar

        • Path C:\Program Files\Java\jre-1.8\lib\javaws.jar
        • Size 935KB
        • SHA256 3d555e44d351579435d59c04ed0c05cae461b940fce779e43256dc6b945752db
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jce.jar

        • Path C:\Program Files\Java\jre-1.8\lib\jce.jar
        • Size 120KB
        • SHA256 fd8314243be2216dfc19b039c534c4c6828e91ec46074e9ee076ad9e27c39294
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jvm.hprof.txt

        • Path C:\Program Files\Java\jre-1.8\lib\jvm.hprof.txt
        • Size 4KB
        • SHA256 770e01f3794672b653653b1ca01b8553aea1365622ca542ac557197a1f7e885e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        public_suffix_list.dat

        • Path C:\Program Files\Java\jre-1.8\lib\security\public_suffix_list.dat
        • Size 227KB
        • SHA256 7bcfab2574f64cdbd3306182e8a09c91b82d87826b2d96d5df66c1699528e98b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tzdb.dat

        • Path C:\Program Files\Java\jre-1.8\lib\tzdb.dat
        • Size 102KB
        • SHA256 a8854976cdb8cb1a0fe40ebcc7220416bb9017952021027db36e26e4518b5bfd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        IntegratedOffice.exe

        • Path C:\Program Files\Microsoft Office 15\ClientX64\IntegratedOffice.exe
        • Size 3.3MB
        • SHA256 d1b06d3b00eb501dc9181915b21565acdca8f676e94e8553175648b6ad65cfd6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 20KB
        • SHA256 0c7d497c48a510f95e3335db60a288a9abeac4c157fa82c83f954c484e5854bc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-string-l1-1-0.dll
        • Size 24KB
        • SHA256 68e4beaa6c6fd178a560f2729db17d81e1f298f0a49579bd74ec3dc97a8ff720
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-time-l1-1-0.dll
        • Size 21KB
        • SHA256 796d46d44d66355d7b69a7fe73e4b08711717b3f600ef11b6402efe5cb31fa4a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-utility-l1-1-0.dll
        • Size 19KB
        • SHA256 e17dfaa41fee269f4f238debc5e4f1a2433e3a72c2a8e0db980304618fecd826
        • MD5 SHA1 SHA512 SSDEEP TLSH

        concrt140.dll

        • Path C:\Program Files\Microsoft Office\root\Client\concrt140.dll
        • Size 325KB
        • SHA256 d1018dc125df0bfef7b7676e4d7956dfbccdc1e71d315a31ab4ca6ab0cbc763a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vccorlib140.dll

        • Path C:\Program Files\Microsoft Office\root\Client\vccorlib140.dll
        • Size 359KB
        • SHA256 b2b1f16a76a1c7f6538fe872c2fa861142876251b83e834b188b1a60f9c63fc7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pkeyconfig-office.xrm-ms

        • Path C:\Program Files\Microsoft Office\root\Licenses16\pkeyconfig-office.xrm-ms
        • Size 905KB
        • SHA256 cdfdcb8fba704d4ce92293e455239a3c58ec3ce395b6869cd69790dd166cbdf9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PREVIEWTEMPLATE2.POTX

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\PREVIEWTEMPLATE2.POTX
        • Size 292KB
        • SHA256 5c7716f350c4edec19b7184cb0d2e2b2c5b1a514c538c09492193bd60bc83636
        • MD5 SHA1 SHA512 SSDEEP TLSH

        word2013.dotx

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\word2013.dotx
        • Size 12KB
        • SHA256 eb448d9009ada800778a81a5d9b26c8c07cdd50e30ac5edf745cb55721b5b34a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        offsymxl.ttf

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsymxl.ttf
        • Size 735KB
        • SHA256 2a096472f74b512daa33f3fb495995381eeb040114c710ec8d2786f28940af07
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SIST02.XSL

        • Path C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\SIST02.XSL
        • Size 246KB
        • SHA256 986ef0302a6062569d32a9b1a64570db19b8d652e351e0666ed78c89c8bb5866
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libssl-1_1-x64.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL64.DllA\libssl-1_1-x64.dll
        • Size 633KB
        • SHA256 22bbdca6296e78dce2dd80dc1694ca9f785262081932036f14c53b3f9227108b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mfc140u.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\mfc140u.dll
        • Size 4.1MB
        • SHA256 e529a652c0764e43ada7d44cea604ec5ea6dd0446d237d8e45845a5667b992bb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcruntime140.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\vcruntime140.dll
        • Size 84KB
        • SHA256 dfe004dbde3110693c6bca41619d552389f3ffe4fa03288d1c4ff897ad14445a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SLINTL.DLL

        • Path C:\Program Files\Microsoft Office\root\Templates\1033\GettingStarted16\SLINTL.DLL
        • Size 19KB
        • SHA256 84d210fe5cba49bed853346342be67b9cc7ae533234ebb5d2cc6905cb2664f31
        • MD5 SHA1 SHA512 SSDEEP TLSH

        informix.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\informix.xsl
        • Size 31KB
        • SHA256 ee1b2f4ba989c3a36b27d745bc369aae272c8bad1eed59b7ffa42b155b9e22ff
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sybase.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\sybase.xsl
        • Size 30KB
        • SHA256 40680e0344a5017993678265a6b4e166d236e885b18a565a6a1e98b5dfafabbc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hive.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\hive.xsl
        • Size 80KB
        • SHA256 4f20c1c08cab8e12bd3ab8376fab462cf9e286c5c6f8e88807ab5b2b8e200bc4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        as80.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\as80.xsl
        • Size 17KB
        • SHA256 925737c4cfbb8b3599764269d9591104ffa337b1b6df27fdea2bd9545cdd87ad
        • MD5 SHA1 SHA512 SSDEEP TLSH

        as90.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\as90.xsl
        • Size 20KB
        • SHA256 c2b72ee9e83974aab98e4b4291256ae518bc1b2df863d815f8fe0642e5688248
        • MD5 SHA1 SHA512 SSDEEP TLSH

        db2v0801.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\db2v0801.xsl
        • Size 30KB
        • SHA256 c4ca1d7a40f3b7ae12db227fe0d0c794c692c05f938cb87f68a4754f12e1fc9f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msql.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\msql.xsl
        • Size 126KB
        • SHA256 0b5e064906a65c107766f5bebd45f2ee7cc5cd9ec884bec14d2baf67625c1ecc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        orcl7.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\orcl7.xsl
        • Size 94KB
        • SHA256 ac9bca6740d7dd5384f77363f335094c9fec708a74dcc0b4ac1ad5298b5af0a8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sql120.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sql120.xsl
        • Size 132KB
        • SHA256 7077e79b9ff5593373a1b6e69032131ff552ee1a35300672a6d23c3b1634c494
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sql90.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sql90.xsl
        • Size 133KB
        • SHA256 d485c7be0695e2ca5f9a010981e630f40b1e270aaa208351c398a99040401162
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sqlpdw.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sqlpdw.xsl
        • Size 103KB
        • SHA256 571c2724847eb8f65fbf5f7cf065e48808ad1d08d8a16cf3d3dbb3e515e915f0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        trdtv2r41.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\trdtv2r41.xsl
        • Size 104KB
        • SHA256 ea75ddbf29c2fdc877a1e7518b57cea2cc0f97f06fba2231f4652cccfbb53a66
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vlc.mo

        • Path C:\Program Files\VideoLAN\VLC\locale\cs\LC_MESSAGES\vlc.mo
        • Size 605KB
        • SHA256 c761b9fd01ee242de95b8fd68ebb5d6fc75beccc91f19bacc40d720b961c56c8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vlc.mo

        • Path C:\Program Files\VideoLAN\VLC\locale\mai\LC_MESSAGES\vlc.mo
        • Size 784KB
        • SHA256 e77627a03baa161420de6fbbfb65018e78aa803e6fadf23445dd69cbc5966616
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mscordaccore_amd64_amd64_6.0.2724.6912.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\mscordaccore_amd64_amd64_6.0.2724.6912.dll
        • Size 1.3MB
        • SHA256 fd244a43915f9029a556d074926fe04d9dc02aad6089891eb3d807c32b252a08
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.DiaSymReader.Native.amd64.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\Microsoft.DiaSymReader.Native.amd64.dll
        • Size 1.8MB
        • SHA256 9749b457945d515f9d15ae4a2cbd4ebe4cce2c644aae40a0259a3f80aa34f273
        • MD5 SHA1 SHA512 SSDEEP TLSH

        available_for_trial.0r1.sg95b1827tr._i2EgsO

        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\available_for_trial.0r1.sg95b1827tr._i2EgsO
        • Size 1.3MB
        • SHA256 2698ccbcf8882e9c2d39115e3db402df009be0c47a9066c8ca4b0a0e883f58f7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mscordaccore_amd64_amd64_8.0.1525.16413.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\mscordaccore_amd64_amd64_8.0.1525.16413.dll
        • Size 1.3MB
        • SHA256 c7966aac264b30af008a8e7774502b1eccf2f9c6fd4238458c7692c2506646dc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        D3DCompiler_47_cor3.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\D3DCompiler_47_cor3.dll
        • Size 4.7MB
        • SHA256 623a705e9c00ba6133888d50cf26afe787025b320853db77d8c2be5cf9512c4f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcruntime140_cor3.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\vcruntime140_cor3.dll
        • Size 117KB
        • SHA256 b802d9a1c4129ab2c984da809566c7412dcd4ea012bb07e4ea8f42875f1737f7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        how_to_decrypt.hta

        • Path C:\how_to_decrypt.hta
        • Size 12KB
        • SHA256 13cba85cfd22a792f4d99d687bb7a6c13ca17b7f239ad10cbf44b8784852c9ef
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/4552-2755-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/4552-0-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/4552-19-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/4552-15-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/4552-8-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/4552-6-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/4552-5-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/4552-3-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/4552-2-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/4552-1-0x0000000000400000-0x0000000000463000-memory.dmp