Analysis

  • max time kernel
    125s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    15/08/2026, 01:04

General

  • Target
    2026-08-15_e0c3782c9793e930d94d951f90d42d9a_darkgate_elex_gcleaner_trigona.exe
  • Size 342KB
  • Sample260815-be61gswdja
  • SHA256 7516fd4ff2006781e725727969ae13950dc794afd1bcb3a408fd1af36c7101bf
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 9 IoCs
  • Drops desktop.ini file(s) 3 IoCs
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-15_e0c3782c9793e930d94d951f90d42d9a_darkgate_elex_gcleaner_trigona.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-15_e0c3782c9793e930d94d951f90d42d9a_darkgate_elex_gcleaner_trigona.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    PID:2760

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        626ng.8k0462j6r._4s0j3F

        • Path C:\$Recycle.Bin\S-1-5-21-889581200-2041691093-2048517887-1000\626ng.8k0462j6r._4s0j3F
        • Size 2KB
        • SHA256 8002cd72eb711bb116027c29ab48ecdad13bf2b1140cc056ace3c3a924342139
        • MD5 SHA1 SHA512 TLSH

        desktop.ini

        • Path C:\$Recycle.Bin\S-1-5-21-889581200-2041691093-2048517887-1000\desktop.ini
        • Size 916B
        • SHA256 40f4774489e21821c949c6f526f2683df2772d2695150a45048b658a96fc84fb
        • MD5 SHA1 SHA512 TLSH

        Click on 'Change' to select default PDF handler.pdf

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Click on 'Change' to select default PDF handler.pdf
        • Size 183KB
        • SHA256 ccb6a7c6e54b7a0e623ad428ff69e9d27b982b0530f97af29d3437f020de3a09
        • MD5 SHA1 SHA512 SSDEEP TLSH

        s_filetype_xd.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\s_filetype_xd.svg
        • Size 5KB
        • SHA256 eb8ef68b574b5313de7a96a58af309786a5d6397fd57e2bdebceba6131de02c1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\fr-ma\ui-strings.js
        • Size 4KB
        • SHA256 1875c6c7f67f78dc200193a45e5fbcdfe41631499793fee8bc33dbf4858215ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        exportpdf-selector.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\exportpdf-selector.js
        • Size 175KB
        • SHA256 614a289193787d8d1c08cbe965913f77ecd6a83ae6d755f24cfe04c1fef33ce3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\fr-ma\ui-strings.js
        • Size 11KB
        • SHA256 f97a5d801644f94fe67cf3c2b58c00fa42556467dbfbd382e03d50ffdeb9e3dc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        x.cur

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\themes\dark\x.cur
        • Size 8KB
        • SHA256 1a4984989691fde27d55be5208bbc233704c30f612de917d6d71c5028b3df69e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\en-il\ui-strings.js
        • Size 5KB
        • SHA256 3a13b89be9b79f1d04029afc4428e0e86d327c9e4250b3e137b8336b2eee54c7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\fr-ma\ui-strings.js
        • Size 16KB
        • SHA256 3dee07f137ae6f463555f1c3fa965b520bd054a90b5b05da4310dc011e39dd70
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sk_get.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\sk_get.svg
        • Size 6KB
        • SHA256 b66505b6367019dfe80fd91b63e6d32b94d588fb517b60b7f10269e5398ee4a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\fr-ma\ui-strings.js
        • Size 17KB
        • SHA256 e4afbe0aadde4145b47bc5efd5defbf72160053e5766779861fdaad0ad6219f8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\ui-strings.js
        • Size 22KB
        • SHA256 2e511463b953425c6f91f420ddbb7a8197e18997582f2271517967c55cc9050f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Workflow.Targets

        • Path C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.Targets
        • Size 5KB
        • SHA256 5c04cb61e7216566999b75f54f749f6959395736fcf761d14c6698862b1394e6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Workflow.VisualBasic.Targets

        • Path C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.VisualBasic.Targets
        • Size 5KB
        • SHA256 a22b8cd004d665db41850f2cb56d2574c46c7fcbdebd5a4fd4e5287410d7ba18
        • MD5 SHA1 SHA512 SSDEEP TLSH

        resources.pri

        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\identity_proxy\resources.pri
        • Size 4KB
        • SHA256 7a183b93928b9e6d9b68f554c129cdac402a104b312ff3b7c79f5f83b48b6cc4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-PT.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pt-PT.pak.DATA
        • Size 1.1MB
        • SHA256 9aa09c00999a438ff0d7bf24cea924b859564740b7fdd9c3697e83e4d75275a6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qu.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\qu.pak.DATA
        • Size 1.1MB
        • SHA256 df2d25038cfd57ef1c2731b70930b5fed3d828cf6c3f212f387af0c672cce871
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ro.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ro.pak.DATA
        • Size 1.1MB
        • SHA256 e7bfebcad444e88c917f97fbc2dc0d1768f01a78b2f08a147550168050f7a5e2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ru.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ru.pak.DATA
        • Size 1.7MB
        • SHA256 29b68312c4ad34dcbc7f43454b04b11d0912c3b5b3d4d11325684de6cfc3f208
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sk.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sk.pak.DATA
        • Size 1.1MB
        • SHA256 ffefab8fde2da2ccd54e42227f7d85fca9d364997598e752170f586966671934
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sl.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sl.pak.DATA
        • Size 1.1MB
        • SHA256 f046a22a1906d6cd6875044e65a1c003f612851facba417f7e345cd15f1ff530
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sq.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sq.pak.DATA
        • Size 1.1MB
        • SHA256 e46d66245a8ffbf6c6f5bf398b96b6e8984409832d84fb00f6d9706bc7863187
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sr-Cyrl-BA.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sr-Cyrl-BA.pak.DATA
        • Size 1.6MB
        • SHA256 efb7dd21968254ca42c3891a3fd8dab074b22ef6e0d2fa659f593565b1990a7c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sr-Latn-RS.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sr-Latn-RS.pak.DATA
        • Size 1.0MB
        • SHA256 6956e7da4e5baff72b6ef442ddf9709f0035e6c7af270ad3dbca98c8013647d1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sr.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sr.pak.DATA
        • Size 1.6MB
        • SHA256 91585912249842cb9c7c2693374230ed9ec40074ef0f563685411b2f66f9a315
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sv.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sv.pak.DATA
        • Size 1001KB
        • SHA256 5509a1a4a636f013b7d7b096ff8be45aa19d64eeccc9ea3d10f3a73bb6b555fc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ta.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ta.pak.DATA
        • Size 2.5MB
        • SHA256 5ad18cb2abbad0da2b03a2e247dfbb3ffef80efb0fb4e7e7608cff26853626a3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        te.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\te.pak.DATA
        • Size 2.3MB
        • SHA256 7781eb53a1972e0843000abddaa7b75ff5127d761f8d3c172b70cc61cf9595c7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        th.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\th.pak.DATA
        • Size 2.0MB
        • SHA256 4c5fac402b6f95136e7e6dc9e960118e9dc7b351046e7c042b472649fce3496a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tr.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\tr.pak.DATA
        • Size 1.0MB
        • SHA256 8663d4efe57647353262d436b442a45d052d03e91183194fc4240150ffb4c688
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tt.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\tt.pak.DATA
        • Size 1.6MB
        • SHA256 2fe710b77d818134b3f50bc656f6da1fc83dbc02be4487ac03e81130e3622092
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ug.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ug.pak.DATA
        • Size 1.6MB
        • SHA256 bdf2656542b6a4cfc0e4b2a1f8b465ec5275cb5c89b8e9f20f23ada05fde3f65
        • MD5 SHA1 SHA512 SSDEEP TLSH

        uk.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\uk.pak.DATA
        • Size 1.7MB
        • SHA256 c2fa9274f99f520e3fb865897001d2ea60d68f9f1e6f0e5ef9409528c215e6ff
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ur.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ur.pak.DATA
        • Size 1.5MB
        • SHA256 eec48395bd8373dd18eea159026137effaf9cbc9ca278cad4ca0db8c287e22b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vi.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\vi.pak.DATA
        • Size 1.2MB
        • SHA256 e2a8fadd30bc58c9cfc8f3cd1126f437785483e8a832bf90989420d4c8b632c5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-CN.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\zh-CN.pak.DATA
        • Size 860KB
        • SHA256 bc6664ab681581cdcc5d117230b7bdd20755cf3b3b5c4acc8a8727de8b983e22
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-TW.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\zh-TW.pak.DATA
        • Size 887KB
        • SHA256 71a4bab275747512756843e7810c1529f9a9f55da24ebf11da24fa4d32efb5f9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        manifest.json.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\MEIPreload\manifest.json.DATA
        • Size 1KB
        • SHA256 8deff008a051ded665ef0aa48fed6eac1f4aa927f743507fcadec4904a7b3824
        • MD5 SHA1 SHA512 TLSH

        msedge.exe.sig.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\msedge.exe.sig.DATA
        • Size 2KB
        • SHA256 aa642d4589ae2e64a3f6b5a98c0dda9efac48fb5d354050b33d52bb07598b59a
        • MD5 SHA1 SHA512 TLSH

        CompatExceptions

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\CompatExceptions
        • Size 1KB
        • SHA256 f1a2c01829201952b9f1e4714da9f41f891571adf2e8c4349a77b171e78aba6b
        • MD5 SHA1 SHA512 TLSH

        Cryptomining

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Cryptomining
        • Size 1KB
        • SHA256 4bd7170228b29b8dff44019527e7835382771642bc80a373cc8d6561fe8fe88a
        • MD5 SHA1 SHA512 TLSH

        Fingerprinting

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Fingerprinting
        • Size 2KB
        • SHA256 8818884f5bbcf0568880e57f48e7654be2d23d30146598b65db1d9337010de88
        • MD5 SHA1 SHA512 TLSH

        Other

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Other
        • Size 815B
        • SHA256 acf94c24a8cc8b9f6206d6217ee654f1f5bcb76be922d6ac41d48dfe9ce786eb
        • MD5 SHA1 SHA512 TLSH

        Social

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Social
        • Size 1KB
        • SHA256 4560262b46adea4559a147bdf62a82747ee28cc7df0951875e4e279c88d9d5db
        • MD5 SHA1 SHA512 TLSH

        TransparentAdvertisers

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\TransparentAdvertisers
        • Size 903B
        • SHA256 384c0465d035d42217ce9f008e68ae3ca5509330769effd9d3ebb84c128602dd
        • MD5 SHA1 SHA512 TLSH

        Advertising

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Advertising
        • Size 3KB
        • SHA256 938339aecb0234f63d56fb40d3bb2ac54bdf18822f8b14afba5adb3c078400a9
        • MD5 SHA1 SHA512 TLSH

        Analytics

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Analytics
        • Size 1KB
        • SHA256 a92b3a43f397d7e77832ba676162d1d359831f32f2612aa9d17035b33229fe22
        • MD5 SHA1 SHA512 TLSH

        Content

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Content
        • Size 831B
        • SHA256 5f28af245d34f8a57ac999c3fdb03306d22be67c49b1a1260ae075aacbc73c8a
        • MD5 SHA1 SHA512 TLSH

        Cryptomining

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Cryptomining
        • Size 820B
        • SHA256 5c3df3bae08fd363e12fb31133ee6fc9d7fe9b1f836459602cd13ccba255244e
        • MD5 SHA1 SHA512 TLSH

        Fingerprinting

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Fingerprinting
        • Size 962B
        • SHA256 0ab6d37c5e4b82bda248221724d1f89156fb8c387ce0abe45e000bc026eb682a
        • MD5 SHA1 SHA512 TLSH

        LICENSE

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\LICENSE
        • Size 849B
        • SHA256 a5daa1d8d6511f7ef33a21fd4a7365fa680181f37119fc32b9421a0e09b10f79
        • MD5 SHA1 SHA512 TLSH

        Other

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Other
        • Size 872B
        • SHA256 3fec197c8ff43115344b1d776399c9ec23a3a76549d2e6de7695c20265793ae3
        • MD5 SHA1 SHA512 TLSH

        Social

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Social
        • Size 4KB
        • SHA256 ddfa5c2c1940b4079abb19ad969716ac318196a468540c7c44bcd894a88bdb4a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        manifest.json

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\manifest.json
        • Size 921B
        • SHA256 0fb990f7a47e06b63a956ee60979ecd4c6d342dabea9f0a2f7834c9c9a685df3
        • MD5 SHA1 SHA512 TLSH

        widevinecdm.dll.sig

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig
        • Size 2KB
        • SHA256 6da5732709b79af41f0b7a10c68683858a0710c71a8a60577dca77b5310c3bfb
        • MD5 SHA1 SHA512 TLSH

        manifest.json

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\WidevineCdm\manifest.json
        • Size 1KB
        • SHA256 4094588d89c9bb42b17ee56a82768b22968bc6958610187a1ee0817c6450f19b
        • MD5 SHA1 SHA512 TLSH

        stable.identity_helper.exe.manifest

        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_proxy\stable.identity_helper.exe.manifest
        • Size 2KB
        • SHA256 c4208d5fd57ee4fc21801f83bac011c77f18e2dd59d2f8814ed6802d5703a02c
        • MD5 SHA1 SHA512 TLSH

        Uninstall.exe

        • Path C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe
        • Size 101KB
        • SHA256 e0059f3b4b02d420aeb3e1fb90d0e4c41c57f0f2c5051cd542bd1b06d4e4c169
        • MD5 SHA1 SHA512 SSDEEP TLSH

        maintenanceservice.exe

        • Path C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
        • Size 272KB
        • SHA256 76db78fe60d4be70b116ebee5dfe5d2a5da69d699519a5385ac8750eb1388dc6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MSFT_PackageManagementSource.psm1

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagementSource\MSFT_PackageManagementSource.psm1
        • Size 24KB
        • SHA256 dc53b8983b59487998271a2ba408d10321739bc24d9087e3c751e11ccd29c072
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MSFT_PackageManagement.psm1

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\MSFT_PackageManagement.psm1
        • Size 13KB
        • SHA256 3dbb59c0e7602e6b6047f9af94911378ce4d33878ac0fb13fce77968bb8c2c82
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PackageManagementDscUtilities.psm1

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\PackageManagementDscUtilities.psm1
        • Size 9KB
        • SHA256 d2017ef2c5b3c3eff3e4d40dc93e7144952c6ee75580569e964c1f9d954f10d4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PackageManagement.format.ps1xml

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\PackageManagement.format.ps1xml
        • Size 16KB
        • SHA256 f6a127808faafc5e834ada1764c2ad410fd02c5fcb1c14a1969c7c80e03798a8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PackageProviderFunctions.psm1

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\PackageProviderFunctions.psm1
        • Size 11KB
        • SHA256 0cb7942113c40bc474ec9c3597fb04ae1bb6116ae6797fb3fa42180f239e3e8c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PSGet.Format.ps1xml

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PSGet.Format.ps1xml
        • Size 8KB
        • SHA256 ebb38a005b2e83ed7b7f2da7aacf18427b65d87cd3ccbb0b172fb18013032c94
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PSGet.Resource.psd1

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PSGet.Resource.psd1
        • Size 78KB
        • SHA256 badefdb819dab348de435160938406a969c932f07aa12cd28adf6c0af59982db
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PSModule.psm1

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PSModule.psm1
        • Size 571KB
        • SHA256 b28586a9a8749d51f26fb865e38b07e9e974ede4371cfdce120822da4ed92526
        • MD5 SHA1 SHA512 SSDEEP TLSH

        setup.exe

        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 6.1MB
        • SHA256 9e51c75bb43c42aaf5c068b4c7c798cae05a549a66ee258f075a75b3dd1bfbf2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-console-l1-1-0.dll
        • Size 12KB
        • SHA256 6f0153fa4d0dfdf8881f2dfa68802eeb55cce6bde9730494fd1bd3ef5f431c2b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-2-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-console-l1-2-0.dll
        • Size 12KB
        • SHA256 b992a6e189620e9842fb6816f4fcbecb8fcb4b53bf10511d27ac03cdb2d21983
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-datetime-l1-1-0.dll
        • Size 12KB
        • SHA256 2d37aedfb636cb707e12a91e561b1cbad6640b15860fa2630bb73d9e39a86c21
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-debug-l1-1-0.dll
        • Size 12KB
        • SHA256 b98ee1f4b36bfd6007a0b8cfb5bfb53437d558164b6aab1f609362319c92c714
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 12KB
        • SHA256 d06dbcfd62a435c46f2c9699042e69dada06514bea64fff3aae7204efcda7f66
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-file-l1-1-0.dll
        • Size 15KB
        • SHA256 70d31c1ad80f7b07ec1b1ea45027420ed4fcd7121ba13527ed071eeca054b839
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-file-l1-2-0.dll
        • Size 12KB
        • SHA256 2fac78da1f7197502c6a28114047c458e9f085f0100642a0309631864152c410
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-file-l2-1-0.dll
        • Size 12KB
        • SHA256 1e09e9798989e67f4848c6cf2d584d04d379e0f9eaea5cec0f8126364cb0b8b1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-handle-l1-1-0.dll
        • Size 12KB
        • SHA256 d18ef8033caeed0300e1edbd5b4a9f82db23964eaa9c3e3807c3897181740655
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-heap-l1-1-0.dll
        • Size 12KB
        • SHA256 e5cbe02b5636c974040afe1c3567f378c6ae0c28e60b190cdea1c36b4156826b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 12KB
        • SHA256 e351e38b486044d94b104980689737e920a70ad127f029102124bb02d07b3bcf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 13KB
        • SHA256 cda2cdc6d0cd8c8f380aecc9148ae83464b9ad9dc11d2347946c4133bbefa815
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-localization-l1-2-0.dll
        • Size 15KB
        • SHA256 69c40c47b556d791980f0ecc09174a7fde022481f1c39884886ab38ebf30ce30
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-memory-l1-1-0.dll
        • Size 12KB
        • SHA256 2ebc99938dcb22b447daf983814f9ce2e38bd6a79ba29b5a6626755766795516
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 12KB
        • SHA256 2ecda61f55b5405859d132401d4a964e615f8fe40c81c9c908c55d812f66ee0f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 13KB
        • SHA256 70311199a5d1d2ba5eaa8a12e8c6dbeeb99f0fe5317db50f738adfb2e09beee2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 14KB
        • SHA256 4d0e5b836dd9cc12cb96f15ad64646832882c551c7cf96fc22513b27d35522fd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 12KB
        • SHA256 6789b9b359a4c5870bcea9c37dd9aeaf1913b98b4a461d64a3b1edb9c3b64016
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-profile-l1-1-0.dll
        • Size 12KB
        • SHA256 dc19ef05475972b4ae80ec91c1c17be9ccf2b66f259b66627d36c83f5eaf24bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 12KB
        • SHA256 b70528677ae66943950a2716b2b690e324da4a4e2abb9a0cdc11e4458493f158
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-string-l1-1-0.dll
        • Size 12KB
        • SHA256 a7d85587ebd6ffafd3a1bca243042d5b22a2f6f5385d48db4cd78bf84804972d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-synch-l1-1-0.dll
        • Size 14KB
        • SHA256 7adf231adb2e0a847f0c241d5a6875647e57e00fbdb72b0851d4d81e3fa10e48
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-synch-l1-2-0.dll
        • Size 12KB
        • SHA256 91adaa5ea747b61731459969afd380e931b36fb0fd0f8293bf35369f6c56c5f9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 13KB
        • SHA256 8d15f5d43b92bf95374a53acdd7fc6b1889014257de643e5bd6ce18bb33bf782
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-timezone-l1-1-0.dll
        • Size 12KB
        • SHA256 669afc7160b8a510199c8d0120d011aa475576475795ab14e7079cfe39fc085c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-conio-l1-1-0.dll
        • Size 13KB
        • SHA256 db369639e7630a02a3b7b78cb171373ff6f298ab7307365dffadc694eb55a8b0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-convert-l1-1-0.dll
        • Size 16KB
        • SHA256 efc84244b0f20496282cb0cb043dc09ecaf2b0945a8a48aede4ce2b54719a65e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-environment-l1-1-0.dll
        • Size 12KB
        • SHA256 153632f62f5bd620fb198b6d8bd0e2930993515966cabfe718c2c7035ad95612
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 14KB
        • SHA256 1789df531b34a764b9eb136e39a73cafcb12f9727767b6a65e5175d3e8c1fea1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-heap-l1-1-0.dll
        • Size 13KB
        • SHA256 6f4f0fc0aed05fa94b12d5f636dd09285f5db24ddc60a0c7a833ace28192bd4c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-locale-l1-1-0.dll
        • Size 12KB
        • SHA256 e16caab13c4e7ee9dc8afda7ef6c96a3a5677971bd77ee5df1be235c2f39e4cd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-math-l1-1-0.dll
        • Size 21KB
        • SHA256 5b872d48becd8131ce025c3ed3fb55ff84321bde09405bff6eba58f2120b9a89
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-multibyte-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 20KB
        • SHA256 6b7bd2fcbb1f75860207fa06a221d3a99b04d89cf28c4545d9353420b44bcf64
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-private-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-private-l1-1-0.dll
        • Size 63KB
        • SHA256 02b9b22ae671d6ac698e5d55b661735af7a2dac2f101f2169008fc6a43b19042
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-process-l1-1-0.dll
        • Size 13KB
        • SHA256 d58f323bfc945918a24e91abfeaeed92f923c10656f2c8a71d3ec829f272acd6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 16KB
        • SHA256 35b11db5fc59040a63df07e2f168a6d5573902e499789e596916be6eefb0979b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 18KB
        • SHA256 8dc6846f1664c8d80aaa1f826ea6aeb2e416962b57fbb0594ca7f8d1983d0ffa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-string-l1-1-0.dll
        • Size 18KB
        • SHA256 7aa812883f4e658e66fc8b5d1f147d107676cf62766ff3510da6ae5ca21b73da
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-utility-l1-1-0.dll
        • Size 12KB
        • SHA256 ae106e2896dce193178e118913bf50819dd50ce53c6f01476732c36a6b557b06
        • MD5 SHA1 SHA512 SSDEEP TLSH

        available_for_trial.c5kg707hyhgsj9n063y.b00omj249zr._4s0j3F

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\available_for_trial.c5kg707hyhgsj9n063y.b00omj249zr._4s0j3F
        • Size 14KB
        • SHA256 a8586c02901601c5b2a68c6f36ded0df9b7886d97f61b0b0bc5da7fd2517bb39
        • MD5 SHA1 SHA512 SSDEEP TLSH

        available_for_trial.v33vrn49526bu3t682.700garr._4s0j3F

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\available_for_trial.v33vrn49526bu3t682.700garr._4s0j3F
        • Size 12KB
        • SHA256 846c6e17dd801c193054e0d96afa51775ed3d00c14448a1bfdd853c0dd12f7de
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcp140.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\msvcp140.dll
        • Size 559KB
        • SHA256 e695149baab24558fe900d535c5be73b5856614eb045a88cefa86501dc6b6047
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\ucrtbase.dll
        • Size 1012KB
        • SHA256 b62616e02edab4e198999857af61ae6f6ab9045d2de0cfddb4b09eabb2fdfdfc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcruntime140.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140.dll
        • Size 96KB
        • SHA256 bc270be9a6e69058ff01960c5a2c07adf1a5dd620cfdad010ca00ef59fc1edfc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcruntime140_1.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140_1.dll
        • Size 37KB
        • SHA256 0a377bdfdf4ae79b0a56b0965b4107f1ad90370296c7504fdcd3a477c0a55727
        • MD5 SHA1 SHA512 SSDEEP TLSH

        messages_zh_TW.properties

        • Path C:\Program Files\Java\jdk-1.8\jre\lib\deploy\messages_zh_TW.properties
        • Size 4KB
        • SHA256 ae26b9215807dc977cd88ce99dcae5ef222d0042342fcbc4981ec25f4fa79959
        • MD5 SHA1 SHA512 SSDEEP TLSH

        glib.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\glib.md
        • Size 32KB
        • SHA256 47d5bcea7c624b2c32d1729f9184cddb8ab2e52ba1234ebe8bc8a6b3de2c0283
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gstreamer.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\gstreamer.md
        • Size 35KB
        • SHA256 f0f17c601252d4d5612872ca512d8f937740019dffee6e9c76221be1cd11d00c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icu_web.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\icu_web.md
        • Size 24KB
        • SHA256 c4615f1124dc590ca5cc0c9417070e516f1be1e3c1a776dc4960949ac65343ac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libxml2.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\libxml2.md
        • Size 4KB
        • SHA256 f7567e810e5c8902f654fed2d0729d21d28a8e92916c0ca8978404fe1cfffdbe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mesa3d.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\mesa3d.md
        • Size 6KB
        • SHA256 3636699ab730d6c4a3b88373bb1993e86c9a98317426afd22a498849a4a43867
        • MD5 SHA1 SHA512 SSDEEP TLSH

        public_suffix.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\public_suffix.md
        • Size 18KB
        • SHA256 c3b2f0daadb1cfecd7bedb81a84243fde8a44633db7a146b3d3440e54d1b2901
        • MD5 SHA1 SHA512 SSDEEP TLSH

        webkit.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\webkit.md
        • Size 320KB
        • SHA256 816c9bb62458e592dc10dc753d13ee9604dcfbcc0d7b0ec7310373a7be7641d2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bcel.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\bcel.md
        • Size 11KB
        • SHA256 ab1fb04dda9fc53ebf6840a7fe62d11e972ed41e18a27024680eaf49ae2df712
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dom.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\dom.md
        • Size 4KB
        • SHA256 24e471e8ae9b43f8b7407301dea26942c723232d6e02d21c26d0aa197a599b86
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ecc.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\ecc.md
        • Size 29KB
        • SHA256 a8e6d2c590d5bd113d70d9abdb1f0f8f5944332755e359de1bc61d7b0f99c00f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jpeg.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\jpeg.md
        • Size 4KB
        • SHA256 95755ba58ce40350d38e822000e756c9775ed579fdedf8ff67628a65a262c570
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libpng.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\libpng.md
        • Size 7KB
        • SHA256 6e4bb07be3484f888a9fa2d40a8ec4849f1511b51f7f55c9a8a97e7867b130f6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mesa3d.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\mesa3d.md
        • Size 6KB
        • SHA256 169afbbfe3a4adf2da81c550973d98750b5d150052ac21fb0202fcf9e7faaf4b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pkcs11cryptotoken.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\pkcs11cryptotoken.md
        • Size 4KB
        • SHA256 36271292b214b8585c9426174a1ecdbdbeeb748525001452456cdbe38a5126dd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        santuario.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\santuario.md
        • Size 12KB
        • SHA256 2b36d96943024249e7264b34d10efac9bddc37ebd226e2e469cdaf372a800e57
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xalan.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\xalan.md
        • Size 12KB
        • SHA256 8f48b1a902ae5bb1d8f74b37a560c63e071e9edf619bfcfeeff3c10f18efa602
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xerces.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\xerces.md
        • Size 12KB
        • SHA256 022660514a5dde2358df5828d7f1638390aafc41a843518e50624e954c28bf4e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xmlresolver.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\xmlresolver.md
        • Size 11KB
        • SHA256 3683eff00a5d5de5de8191bdbb5f66e1e787b914cbe0cef68e32f53fc903a88c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcp140_1.dll

        • Path C:\Program Files\Java\jre-1.8\bin\msvcp140_1.dll
        • Size 24KB
        • SHA256 94c367a6f4fe3719af416bb126644292525f160c24fddd4d3bc8519e355cd5e8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcp140_2.dll

        • Path C:\Program Files\Java\jre-1.8\bin\msvcp140_2.dll
        • Size 183KB
        • SHA256 9a6358be61579d3e054c72b77ac9e925f92da410a9c1a1eca910b06c82dd0a0a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        deploy.jar

        • Path C:\Program Files\Java\jre-1.8\lib\deploy.jar
        • Size 4.8MB
        • SHA256 4051b2f30a3ac520ff3ab1d2c93916472ecb241ea667aa5cb091177fa27d9cda
        • MD5 SHA1 SHA512 SSDEEP TLSH

        messages_zh_CN.properties

        • Path C:\Program Files\Java\jre-1.8\lib\deploy\messages_zh_CN.properties
        • Size 4KB
        • SHA256 cf8b4a75d3199354cec386b7066fcf8eaa9d1616238173bddf5a76efda585d6a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fontconfig.bfc

        • Path C:\Program Files\Java\jre-1.8\lib\fontconfig.bfc
        • Size 4KB
        • SHA256 c1ab567454965842a590d665f641f3a8e1a35b4b5f00a4779667c395f4f211e6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LucidaTypewriterRegular.ttf

        • Path C:\Program Files\Java\jre-1.8\lib\fonts\LucidaTypewriterRegular.ttf
        • Size 237KB
        • SHA256 bebf11c0e7756dfa7d9d24e4cffa5b8d690c4377edc8c3a6614e876744d9105a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jfxswt.jar

        • Path C:\Program Files\Java\jre-1.8\lib\jfxswt.jar
        • Size 33KB
        • SHA256 5f0546691b4818359cc03e61d55a9e90f973ae6ff6c15bb0f4adbb6e54bf903b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        psfontj2d.properties

        • Path C:\Program Files\Java\jre-1.8\lib\psfontj2d.properties
        • Size 10KB
        • SHA256 ad838b2b0954f7c8dd4f69eac1d369df50bf6f89cd6c1bfb04a919dc8ca8f20d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        IntegratedOffice.exe

        • Path C:\Program Files\Microsoft Office 15\ClientX64\IntegratedOffice.exe
        • Size 4.1MB
        • SHA256 aea9ad2e741f6b1a41682cae95447e453a9d61b29ad6ad4713e378dd55ef73ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-synch-l1-2-0.dll
        • Size 19KB
        • SHA256 5e9db38ac4675784b59fe0a5dc407cd15e202aeace3e92cca430e71b0a0144a0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 20KB
        • SHA256 0276f1245002637043cd0051c2726f9a3c4816d2c997f36ef65298d252c788f6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-locale-l1-1-0.dll
        • Size 19KB
        • SHA256 60c6d3c915c38bf37f96fae554856e2764062b7e67c5414d83caea4e3020dc35
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-math-l1-1-0.dll
        • Size 27KB
        • SHA256 0371b30a2d2c6d886ac4c853d31e8337eb936c8b1b1bbb9374d17176c851fb5a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        available_for_trial.f2dmvm3f3y940e147zd8v36ghg.n10i5dr._4s0j3F

        • Path C:\Program Files\Microsoft Office\root\Client\available_for_trial.f2dmvm3f3y940e147zd8v36ghg.n10i5dr._4s0j3F
        • Size 19KB
        • SHA256 b71749ebfcc927caa3fde7759a1a536113d4c0d98928740a38cd24b9b5c9eaf2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        concrt140.dll

        • Path C:\Program Files\Microsoft Office\root\Client\concrt140.dll
        • Size 325KB
        • SHA256 8eb178935c142fbf3deb37046adfef89162fb91e800a3cebe9babeec4340316b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vccorlib140.dll

        • Path C:\Program Files\Microsoft Office\root\Client\vccorlib140.dll
        • Size 359KB
        • SHA256 921091535d6f45bc694a1be832784838a5084dd71d23b297c5d3cb50a2a57134
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pkeyconfig-office.xrm-ms

        • Path C:\Program Files\Microsoft Office\root\Licenses16\pkeyconfig-office.xrm-ms
        • Size 905KB
        • SHA256 280ef41119f0838ad4cbfe3e9e73bdc6ec79f1f4e11af6a88ad90c0f29f68800
        • MD5 SHA1 SHA512 SSDEEP TLSH

        available_for_trial.t909ikq04cx76y2k69266ink8y9ocalnx6.8v64h31r._4s0j3F

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\available_for_trial.t909ikq04cx76y2k69266ink8y9ocalnx6.8v64h31r._4s0j3F
        • Size 12KB
        • SHA256 0d9e2bd88d84c6d75199da6954067006b481ffaca563f2d992e61bf2d1b85417
        • MD5 SHA1 SHA512 SSDEEP TLSH

        offsymxl.ttf

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsymxl.ttf
        • Size 735KB
        • SHA256 4b191e99efa370c22625997dbeaf4961fdfc74eb115f0e053e3f48524fd992b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        rk46k89bm8ga6jj8128mc9u17z7m8d7437b58958z2624g50.puw9w9z451r._4s0j3F

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\rk46k89bm8ga6jj8128mc9u17z7m8d7437b58958z2624g50.puw9w9z451r._4s0j3F
        • Size 292KB
        • SHA256 f15560a8a73ac33a658818f7421d493975f557c20a6c088fab2425759dc75dbc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SIST02.XSL

        • Path C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\SIST02.XSL
        • Size 246KB
        • SHA256 24544c8e2c04fac75b6f4ecb30f482bb17332b25cca4f555ca5c8dad3c94d2f9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-1_1-x64.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL64.DllA\libcrypto-1_1-x64.dll
        • Size 2.5MB
        • SHA256 14c4e4d9b3d5bdfdb0cf5cffa2e0ea0638f95dafcee33625fc1fb429cfa5a8bf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libssl-1_1-x64.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL64.DllA\libssl-1_1-x64.dll
        • Size 633KB
        • SHA256 571a6c8fa0d1bc59916cd58a41e87c4d7f7b23ec509f6d27ff8a811dc0fe1add
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mfc140u.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\mfc140u.dll
        • Size 5.5MB
        • SHA256 361db6b63456ff51b11c66c0b0bfbf56605393679fadce4bdc9ae569099fc9bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcr120.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\msvcr120.dll
        • Size 941KB
        • SHA256 0389c171a4f65be6029069f98a0f1158c93ee568493e67fb04dfa89c9466c715
        • MD5 SHA1 SHA512 SSDEEP TLSH

        DBGHELP.DLL

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\DW\DBGHELP.DLL
        • Size 1.9MB
        • SHA256 5bc132bebf25cf74fcd16ebe1ce4a5a0d9bfac83bd1fb8ab1ea5cb898775abaf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sql90.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\sql90.xsl
        • Size 128KB
        • SHA256 7f699d0ad3453899c9d879a2fefea709429a53a4c22d9ff4a22b182844b394e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        trdtv2r41.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\trdtv2r41.xsl
        • Size 102KB
        • SHA256 efa9c2c9af874c9e4616e27d33e91120a5a4b4e02de54dc58243f8470fdd9c3f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hive.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\hive.xsl
        • Size 80KB
        • SHA256 0e93edf4f8e37223caa1ad61b0a6871f8ae69af471e2ee6ed495243e64499560
        • MD5 SHA1 SHA512 SSDEEP TLSH

        as80.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\as80.xsl
        • Size 17KB
        • SHA256 d7f891db0d365181e4e6b40bf0a748314a645a36023b5683199ad38f8ef09af6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        as90.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\as90.xsl
        • Size 20KB
        • SHA256 ec969e2e1ab18ae09556b0ca2104c64aa14205a77bbe6b70eba3912e6e489e38
        • MD5 SHA1 SHA512 SSDEEP TLSH

        db2v0801.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\db2v0801.xsl
        • Size 30KB
        • SHA256 335ba84ecfb1575cddf0fa969bd72cc1566a50e0e197d61e1b50b773618a347f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msql.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\msql.xsl
        • Size 126KB
        • SHA256 1b27bde0830f7f655fb5865ad97e4433650a9f33469bfb6c01c85dccfb59dd75
        • MD5 SHA1 SHA512 SSDEEP TLSH

        orcl7.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\orcl7.xsl
        • Size 94KB
        • SHA256 2c52110052d92e48d7807ca52c7d232c2c917ff9040836a1518e87ac5c75e5e4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sql120.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sql120.xsl
        • Size 132KB
        • SHA256 01129303820006009074ccaed88a5ecbc650e73a2ae09ff948d7276526adc1e2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sql90.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sql90.xsl
        • Size 133KB
        • SHA256 7565ea4487ad752ab190ef5da20b8bffe0ea924140bdf25a903d2a097ac8262f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sqlpdw.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sqlpdw.xsl
        • Size 103KB
        • SHA256 b585f6c5f0a4eb7a68ff48a007a7495c6c5cf849a00b72456de9e93d94bc8aa7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        trdtv2r41.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\trdtv2r41.xsl
        • Size 104KB
        • SHA256 dd91e0246b2726d3f7ce9d1e30794aa279633d3e92364ddf11d69c239ffed3bb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vlc.mo

        • Path C:\Program Files\VideoLAN\VLC\locale\da\LC_MESSAGES\vlc.mo
        • Size 585KB
        • SHA256 6a83dff3bdecd58a38db8bced74d8cb7825e7a94165b354d207e6f9fb4041cb6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vlc.mo

        • Path C:\Program Files\VideoLAN\VLC\locale\mai\LC_MESSAGES\vlc.mo
        • Size 784KB
        • SHA256 f759bbc8d6c4f1768959e10fb88e1c0cff545447aa375c0793d0ca00040788ae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mscordaccore_amd64_amd64_6.0.2724.6912.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\mscordaccore_amd64_amd64_6.0.2724.6912.dll
        • Size 1.3MB
        • SHA256 e35ac11149b78a0cfbd5782e15a9aa07e6b45de0cc6e88729770635b4a9e093e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.DiaSymReader.Native.amd64.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\Microsoft.DiaSymReader.Native.amd64.dll
        • Size 1.8MB
        • SHA256 39ead120e3e0c2110ca89e1457b4c71b633dacfb05d80c77d586642580e105f2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mscordaccore_amd64_amd64_7.0.1624.6629.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\mscordaccore_amd64_amd64_7.0.1624.6629.dll
        • Size 1.3MB
        • SHA256 2eaa479a24c5c0baac923d9be5b33d1c0a51c13f50955b06bda2acaa06e71c2a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mscordaccore_amd64_amd64_8.0.1525.16413.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\mscordaccore_amd64_amd64_8.0.1525.16413.dll
        • Size 1.3MB
        • SHA256 721913ff60e57e9da1fec069ace8bbd12d99c1f7ec36135055623c36457d9ea4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        D3DCompiler_47_cor3.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\D3DCompiler_47_cor3.dll
        • Size 4.7MB
        • SHA256 29e359749c8fbd52b6d8a91ff84c350037f252dd203b8295dbd16854c990beb5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcruntime140_cor3.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\vcruntime140_cor3.dll
        • Size 117KB
        • SHA256 0edd88f471c060ebda9bb248f13272b8f5661d991b70ac0a065a839ffdda1c3d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        how_to_decrypt.hta

        • Path C:\how_to_decrypt.hta
        • Size 11KB
        • SHA256 6c8e840def2e3e5dd509c0d6a305ab43ce127a367e0d3defb09ccdd5364bcab1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/2760-0-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/2760-3366-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/2760-19-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/2760-15-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/2760-7-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/2760-6-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/2760-5-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/2760-2-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/2760-1-0x0000000000400000-0x0000000000463000-memory.dmp