Analysis

  • max time kernel
    129s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    20/08/2026, 00:40

General

  • Target
    2026-08-19_0d32ecf54a106d8ae47a221a90f0b34f_darkgate_elex_gcleaner_trigona.exe
  • Size 342KB
  • Sample260820-a1chbsxbkh
  • SHA256 d567c7384788b4073fc865e8075bec754ea6667093be342eeb3cf122a8e0d05d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 10 IoCs
  • Drops desktop.ini file(s) 3 IoCs
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-19_0d32ecf54a106d8ae47a221a90f0b34f_darkgate_elex_gcleaner_trigona.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-19_0d32ecf54a106d8ae47a221a90f0b34f_darkgate_elex_gcleaner_trigona.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    PID:1352

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        desktop.ini

        • Path C:\$Recycle.Bin\S-1-5-21-889581200-2041691093-2048517887-1000\desktop.ini
        • Size 913B
        • SHA256 2a21b34348b069242936fd06056f4a54c31e5d1ed81f2eb01658f0aa7b9841b4
        • MD5 SHA1 SHA512 TLSH

        u89257dsu9fqxh5ty6gqz3y.42590j7gr._Tg1S9d

        • Path C:\$Recycle.Bin\S-1-5-21-889581200-2041691093-2048517887-1000\u89257dsu9fqxh5ty6gqz3y.42590j7gr._Tg1S9d
        • Size 2KB
        • SHA256 0a1155c5fc13034e13c976b50e1e3ced3cf387ead4288b9b28d5b7b1b4d0ae0e
        • MD5 SHA1 SHA512 TLSH

        Click on 'Change' to select default PDF handler.pdf

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Click on 'Change' to select default PDF handler.pdf
        • Size 183KB
        • SHA256 29a303625ab31d61d78b5f0ff8b6351b824c1ed1d395bedaf8c552f60d576407
        • MD5 SHA1 SHA512 SSDEEP TLSH

        s_download_pdf_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_download_pdf_18.svg
        • Size 8KB
        • SHA256 9038a40642594d8467c9e3fac2d8e5f4bc2b9f41dcff1ea5b6d827d50bc78cff
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\fr-ma\ui-strings.js
        • Size 5KB
        • SHA256 853d59d29d6b693381b2c3d99c5ddc145120c68d38dcbd428da3751df0e4ee38
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\fr-ma\ui-strings.js
        • Size 4KB
        • SHA256 cd4d8900811e7e284379307f967cb0cb4bf6254bf641a8f962150b1c825183a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\en-il\ui-strings.js
        • Size 9KB
        • SHA256 a29ca61b097cbf6b2b3723d3f628c17fcb0ab58a778a486b83eeeeb2a3d2b912
        • MD5 SHA1 SHA512 SSDEEP TLSH

        file_icons.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\images\themes\dark\file_icons.png
        • Size 24KB
        • SHA256 2c9f38b329bb3bec423e78b20ee4b1d7a103caf2b3e37226d34821a634ee757d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\fr-ma\ui-strings.js
        • Size 6KB
        • SHA256 529ec2be2d17030d18787c0c16fa1a08e63608ed35119586101c3c16f76eade4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\fr-ma\ui-strings.js
        • Size 17KB
        • SHA256 a828cbabc1b0000087300a830f0dd5792e407a25514d3712b974a6f02b19da47
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\fr-ma\ui-strings.js
        • Size 11KB
        • SHA256 31037462de185891f895b5cc2832ebd586fe5828e8f299424a50c5bcd5b3e254
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\he-il\ui-strings.js
        • Size 4KB
        • SHA256 045b915f0f96f517afc3b8d2d532a20ed5dc36838c42b527cf9f66c560d92e5f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\fr-ma\ui-strings.js
        • Size 17KB
        • SHA256 87e2ebc3ddd068b8eedab0a8667f4b7b605b9203d5069aa633fd5d035f0c04ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\fr-ma\ui-strings.js
        • Size 22KB
        • SHA256 19f2368949abdf8068896cfb2468953a97ca48eadbc26e0114102a37d209b2b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Workflow.Targets

        • Path C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.Targets
        • Size 5KB
        • SHA256 c99ea53da6a3f9d45844d392a22ab493cb8cf5696f7504618179f3337c701f4d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Workflow.VisualBasic.Targets

        • Path C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.VisualBasic.Targets
        • Size 5KB
        • SHA256 c2f111e6d86b2d62e0db5e22533c7f8f18ab18f466a2dc4966e96d74f932f186
        • MD5 SHA1 SHA512 SSDEEP TLSH

        EdgeWebView.dat

        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\EdgeWebView.dat
        • Size 8KB
        • SHA256 c00eeca7b13b4d1fe9a547bfc5ea9fdf78064353a933cc400dbed53576ac917d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        widevinecdm.dll.sig

        • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig
        • Size 2KB
        • SHA256 25d3c59f41928159b826827e727eea90b789b521a2678e83d47d33ea1cc67ee2
        • MD5 SHA1 SHA512 TLSH

        Other

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Other
        • Size 812B
        • SHA256 fcf6ed449b901073277583fad703b84bdd9029a206b20df82ac942ce9f928048
        • MD5 SHA1 SHA512 TLSH

        Social

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Social
        • Size 1KB
        • SHA256 096a8ab0a3a738d07e481ba7633c8e628dc28b048a908f5b601189be6eca0649
        • MD5 SHA1 SHA512 TLSH

        TransparentAdvertisers

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\TransparentAdvertisers
        • Size 900B
        • SHA256 fa20cdb0e877872bb3785679e2dac7b63ed31dbde7b0322d929ec71b2b72223c
        • MD5 SHA1 SHA512 TLSH

        Advertising

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Advertising
        • Size 3KB
        • SHA256 0fded050687d7a2f1735d562129ad2f1ac526350397de8f82e61bf37efb5dd89
        • MD5 SHA1 SHA512 TLSH

        Analytics

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Analytics
        • Size 1KB
        • SHA256 49d0d37d76232c4085357c902b98b3d06915a1b8bf420d4e40633185ad82006f
        • MD5 SHA1 SHA512 TLSH

        Content

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Content
        • Size 828B
        • SHA256 5e40c4aadd2c8add43dabbd241b02ad37c2c856b23761cf71272eb9b7a8f27d7
        • MD5 SHA1 SHA512 TLSH

        Cryptomining

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Cryptomining
        • Size 817B
        • SHA256 d870b4791815a7981379c6adbff1e8740cb4b31eb2b77577f96b6cfe6617ab62
        • MD5 SHA1 SHA512 TLSH

        Fingerprinting

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Fingerprinting
        • Size 959B
        • SHA256 85f5100344e1decb626ba35dac901f56df398f9c9e43803af3a67c4e6c95283d
        • MD5 SHA1 SHA512 TLSH

        LICENSE

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\LICENSE
        • Size 846B
        • SHA256 f2e860ee39ad0ffef13d435034f495dd5bad25111ab421b26638088006b90b6a
        • MD5 SHA1 SHA512 TLSH

        Other

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Other
        • Size 869B
        • SHA256 a672985752ebf89a2bdb29f814f82d1ec92405ce3b96a7a8d04382cdb953a5e6
        • MD5 SHA1 SHA512 TLSH

        Social

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Social
        • Size 4KB
        • SHA256 33cd9baa7d5c156172012f3354662ce7e1afe2e9a8130427bf6135f54752824d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        widevinecdm.dll.sig

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig
        • Size 2KB
        • SHA256 15295fa627ba8a2e9618ff76fad5e35d71d014fdac0bea21bf7f48de88eeaef9
        • MD5 SHA1 SHA512 TLSH

        manifest.json

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\WidevineCdm\manifest.json
        • Size 1KB
        • SHA256 8c7b19b144735c8323b602130cea1bfa172505e37c09ec0c8b3c5dc5eff2b7ec
        • MD5 SHA1 SHA512 TLSH

        536y0t4260yn951s94s7.h84zrkr._Tg1S9d

        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\536y0t4260yn951s94s7.h84zrkr._Tg1S9d
        • Size 18KB
        • SHA256 8fc8d204770d7f17c0c424c73528b5db8b6f9a840d2414d16b41c4875a30120e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Uninstall.exe

        • Path C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe
        • Size 101KB
        • SHA256 ed3c22c7fc05a2523e68c6651f62e0ea015722588d50a9f14ba3e8dfa2d03137
        • MD5 SHA1 SHA512 SSDEEP TLSH

        maintenanceservice.exe

        • Path C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
        • Size 272KB
        • SHA256 eab7928c4d63f3a171591019652903e60d7cd5bb8d8a4b4cf0ce11aeebae3eb1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        available_for_trial.o5oa32qd73978408x40np3n52pwr799mj37mc209241ij.pl9c6r._Tg1S9d

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagementSource\available_for_trial.o5oa32qd73978408x40np3n52pwr799mj37mc209241ij.pl9c6r._Tg1S9d
        • Size 24KB
        • SHA256 1ad39ec70169de780cfb0d6d9cb8e9788a4f8a6484181fdc51757d619a83528d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        available_for_trial.55vpo62019f4747nxik23f27oi85x8co41zwu2.f9tr._Tg1S9d

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\available_for_trial.55vpo62019f4747nxik23f27oi85x8co41zwu2.f9tr._Tg1S9d
        • Size 13KB
        • SHA256 f6e702fbb77f08c3644a9631f5d47cdde71cddfbd48bfb13550e008da0af89c4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PackageManagementDscUtilities.psm1

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\PackageManagementDscUtilities.psm1
        • Size 9KB
        • SHA256 c2d2f0eb43a1fb5d19a958f1bf1eb1891af7bef53fdda7bdf62f0f91be574b40
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PackageManagement.format.ps1xml

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\PackageManagement.format.ps1xml
        • Size 16KB
        • SHA256 553937476374d6772cc44192350cbc4215702abe6557e020c2b4b653edbe9f43
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PackageProviderFunctions.psm1

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\PackageProviderFunctions.psm1
        • Size 11KB
        • SHA256 876bc1822cdf56322a34ac8149a25867a842275e369c17b8e69a4dc035fb35f3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PSGet.Format.ps1xml

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PSGet.Format.ps1xml
        • Size 8KB
        • SHA256 e81e385167e2f39e14f7ba0d9880ac9b051d63ac512278186bbf2af374212528
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PSGet.Resource.psd1

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PSGet.Resource.psd1
        • Size 78KB
        • SHA256 66bc7a5ef3eb4420f1f7144e6f809999c461cb0957e7d8613d83ef08d5fac72d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PSModule.psm1

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PSModule.psm1
        • Size 571KB
        • SHA256 352e424ae9ee35db492a4996b32fc436a7d859168cbdfb9dd58739aa719e09a0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        setup.exe

        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 6.1MB
        • SHA256 724afaf458ced0b6fc5c6b5f63aa41b3c31fa2c91d939823385172de77032304
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-console-l1-1-0.dll
        • Size 12KB
        • SHA256 70c8d7faa8f14a1de81da3e3997b10c541abbb77a020b19a23a41f9a51e369bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-2-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-console-l1-2-0.dll
        • Size 12KB
        • SHA256 82c639cd79ee0683658cbdb218c7e62bacaff32719f45eb7e2376dd5220f34f3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-datetime-l1-1-0.dll
        • Size 12KB
        • SHA256 dc5a2468ef2edbb4c9813b6050da6d4d9b4fd07c829e9d69a1ebe48766bc2372
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-debug-l1-1-0.dll
        • Size 12KB
        • SHA256 f2b678e0340942dbfcb374db4206c76016dee6df1990bbd442dea9844703c865
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 12KB
        • SHA256 7cd07b5f1b466da9c056cf9b0477d8e8155557ac5f71d4c2362d0cdfd7286066
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-file-l1-1-0.dll
        • Size 15KB
        • SHA256 7e0918ac48fe217af99b9fdcfaff6d829c24c5ef4ed97dc37523afaaed219e2e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-file-l1-2-0.dll
        • Size 12KB
        • SHA256 6669eab62e8f4fc9e09580c67ef6ed7fda4ef344cc494125750f2ac419598611
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-file-l2-1-0.dll
        • Size 12KB
        • SHA256 013c12255181feeceaf62122e53e58dc082d281030242efc0b521b50e51dde8d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-handle-l1-1-0.dll
        • Size 12KB
        • SHA256 39ba9713a71c7d5354331c0c88addcf4aa0046471f7edaf993e1bfe4131d13db
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 12KB
        • SHA256 1c7f087a645eef1826a06749675da12b305b9e411e6cd990bc3739d5f448c239
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 13KB
        • SHA256 a114ffaa9dd02b360fdf41b3f3caff54a48708ee71e9062020d70fa144425ac5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-localization-l1-2-0.dll
        • Size 15KB
        • SHA256 5a3acdb86ee04febfbbce3cee32246bb2f89f9cec9f4764438a2b0c814e9796c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-memory-l1-1-0.dll
        • Size 12KB
        • SHA256 15a0252c0a4f9b6eca59ad565da6e39537a1f410537acbea167dd2f231248bb2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 12KB
        • SHA256 6ba5976530edcea3660ade20fa6d87458c69b4afd874aa1cd85625c6986109cc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 13KB
        • SHA256 0dc71dfbd725934b1a1c6d825a4a62c4240e3c2d234ad9e9f6454c8d4fcfc881
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 14KB
        • SHA256 7a1b780f85689b5f911147a03a61b36641e7fd8764327939a3f0bb3a6f82fd70
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 12KB
        • SHA256 4aa3880e110d5f650bb226b1184e45c240edaa86382ef5ba22609f73aee5f4da
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-profile-l1-1-0.dll
        • Size 12KB
        • SHA256 4b0b824f6ecec7ffd2365d5690c5f66fd78c42fe5ad6c7630f46a04be9f9fcb1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 12KB
        • SHA256 426594f0a6d5080ac6801e508ff266cd4e88d83fdee0ffeb1cebd1e25b4ed7b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-string-l1-1-0.dll
        • Size 12KB
        • SHA256 88c243844f03f2a3df89bfee641e5d62ac8cc7e7a4512081a8951438890bdc45
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-synch-l1-1-0.dll
        • Size 14KB
        • SHA256 7940a1b73a0e56db45ed798b0ff310d320670c4f51b7075a0f8a3c65f730b939
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-synch-l1-2-0.dll
        • Size 12KB
        • SHA256 d90fa98ba204aebd65e0cecb0c0570cd004294c2635cc539359ad4c0dcdbab26
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 13KB
        • SHA256 b0d4490750afa3bd157a3549eb6f3a80e65a76c21ece287e5411032262ee4f2b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-timezone-l1-1-0.dll
        • Size 12KB
        • SHA256 e885309b4e3204f659b4f17683604988fc6360e41ed494e890e4518cbf0a2363
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-util-l1-1-0.dll
        • Size 12KB
        • SHA256 2a2966a39f533dbc30b28eba53e6e9dba27ad0625df6403229835bdc93204f20
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-conio-l1-1-0.dll
        • Size 13KB
        • SHA256 a849dd026ae7099916c6d1366872a38aef0d55fe28b85725b830b0eb3fe011cb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-convert-l1-1-0.dll
        • Size 16KB
        • SHA256 f07059603678c05ad27a063071de978a3b12a72c3e2a51fc818723463b4b2043
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-environment-l1-1-0.dll
        • Size 12KB
        • SHA256 486d845a37e5f1c05f52fd0007bd35ec20f77caa7fdc835764e0fa8061de61f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 14KB
        • SHA256 291d101afd25616df3935e81ac7f28f31b70d7d818e116c6245901c44eb5d4a9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-heap-l1-1-0.dll
        • Size 13KB
        • SHA256 ec4c9aabda37a414ae00806b9c9338c6af5b3c6b6abbcc3f7c7e9c1a0fb7d237
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-locale-l1-1-0.dll
        • Size 12KB
        • SHA256 68542cf7f2525ba3bb445802528e8b0189f9551da120f92c40e117a87291fadb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-math-l1-1-0.dll
        • Size 21KB
        • SHA256 4d6f285f506350afc76462f9b5c331e505bb8645b781fd7bb575ddbb1a7f19f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-multibyte-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 20KB
        • SHA256 049bddaed5d91ffd69a65672c98cccba5b80ae4d2e3a5d56f3786f23f6ff0128
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-private-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-private-l1-1-0.dll
        • Size 63KB
        • SHA256 07f3a89c83bb73d6a3cd6e87c0f5c9a6ee6202f062f510dd48164c2bbc8e4023
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-process-l1-1-0.dll
        • Size 13KB
        • SHA256 4db4df204429a5c5aaffe9c9a751e1ee058faf431eba4892616c7292da4171fc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 16KB
        • SHA256 a2928c580e10025e5001ed3f7a07489ad51f1dddd71972fb7fd134459aa7a8a8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 18KB
        • SHA256 a40de41789a8073ad004400fbecdacd33f22e506f59ca7884ac6cccc27651c58
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-string-l1-1-0.dll
        • Size 18KB
        • SHA256 509df37cfa1710fc48d9b468a3088a74ad716425f1bad0d2ca15ed78128a1d90
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-time-l1-1-0.dll
        • Size 14KB
        • SHA256 d0317b092001f24fe7fd157b3397efcbddde27b2f8b1d9b5485aae2dbcce195a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-utility-l1-1-0.dll
        • Size 12KB
        • SHA256 e8eda1ce5cfde300e9499d00e360508a30e84721ceb3db9e8b3b1ba85a87dc5a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        available_for_trial.p99t3s9pv6z46p2ug8uospz287w4nj31wz917595uv15l22.7o15r._Tg1S9d

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\available_for_trial.p99t3s9pv6z46p2ug8uospz287w4nj31wz917595uv15l22.7o15r._Tg1S9d
        • Size 12KB
        • SHA256 7190d87e2394157750d1476f6207a139ead492904e5c8ca452466fb4a4876965
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcp140.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\msvcp140.dll
        • Size 559KB
        • SHA256 340dfc4041ba8551f86db43f5c7be80b3270c938286d70c465ff75eb13c66b70
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\ucrtbase.dll
        • Size 1012KB
        • SHA256 211e1f38cae85c76858084605785ea749ea998ba928f9267bb0a63795e26113c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcruntime140.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140.dll
        • Size 96KB
        • SHA256 a071196a3abba85fc64941f04acc3ad3fa46fcf60efb7fa82f0e2d8536d1a40b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcruntime140_1.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140_1.dll
        • Size 37KB
        • SHA256 adb1de1fd9ddc1158e9f1c455044fc1d736a26852fc9142d56d694b527d07e5b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        messages_zh_TW.properties

        • Path C:\Program Files\Java\jdk-1.8\jre\lib\deploy\messages_zh_TW.properties
        • Size 4KB
        • SHA256 ec3dc16678246a2acfd20afa3fbe3e16b8f48d7259bd3e9cba1d68a1a83110a3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        glib.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\glib.md
        • Size 32KB
        • SHA256 274905c2de66bf2ab33299d031dff20ab011741083477bdf40f8d5fc51216651
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gstreamer.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\gstreamer.md
        • Size 35KB
        • SHA256 30d2f5789a89d83c421e55c11dc7305e0eb51957368e56586cb65dd65228ad3c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icu_web.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\icu_web.md
        • Size 24KB
        • SHA256 1f9c2f2801cf408e425f71337bcb36337ec4bfdb8bdd381a2c3e36c3a3304965
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libxml2.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\libxml2.md
        • Size 4KB
        • SHA256 feb0ef189885503759fdc235c4e61c1737bbb111cd54eb72ec0c6b6a37e36166
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mesa3d.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\mesa3d.md
        • Size 6KB
        • SHA256 1ed7a1947a31a7da88a9f3331566db4f90dedcff70d635c8b85baf795e182a7c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        public_suffix.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\public_suffix.md
        • Size 18KB
        • SHA256 212c5f0c4e4597f9ece090a4b630e3a305ae38247dfddcd7acfe28620a041e71
        • MD5 SHA1 SHA512 SSDEEP TLSH

        webkit.md

        • Path C:\Program Files\Java\jdk-1.8\legal\javafx\webkit.md
        • Size 320KB
        • SHA256 a885d8984a086b007754c2d671e62d95a6a6f04ea1004146f60d92c92a2107d6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bcel.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\bcel.md
        • Size 11KB
        • SHA256 e08f8b92c969f2284ce16f018b90aee9ab798f8c29e79e78414c589f15b34abd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dom.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\dom.md
        • Size 4KB
        • SHA256 16ed9156c18184ccd3df099f583c9697cabe23d84ba52af9c468f5faf08d0af1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ecc.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\ecc.md
        • Size 29KB
        • SHA256 1a23ee8b50a431d079ce99437df171069bb17064921ea10b5868cfd25d8c7a0a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jpeg.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\jpeg.md
        • Size 4KB
        • SHA256 b7d38a4dceb4fd319f589ff80b52c129a710b82ccfd7b3263f423bd09e69f283
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libpng.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\libpng.md
        • Size 7KB
        • SHA256 9447572755d14ccb44f2e115fcf6e9c293b93f58166ca126fe979c53ba4ae6cf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mesa3d.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\mesa3d.md
        • Size 6KB
        • SHA256 3fea98d739791e307c201e6164a843eefdc427b4d8188a2e3d5f709e5aba0bfb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pkcs11cryptotoken.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\pkcs11cryptotoken.md
        • Size 4KB
        • SHA256 df44f92aa638858fa3d5dcefcc7f09560991f95a0f8c49a8488b111dd61c500b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        santuario.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\santuario.md
        • Size 12KB
        • SHA256 fd59b2c463665f214b08ef9208f391ba70cac80cfaee1778f8bf17029a1bd338
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xalan.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\xalan.md
        • Size 12KB
        • SHA256 d20304e5f27de9527913b31001c529fa90ef3dba176b17bab2a6f28271656a2e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xerces.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\xerces.md
        • Size 12KB
        • SHA256 f8f18661056355921899610a88dfa1cb257e6a73246d2d608fca20d47fdde6b4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xmlresolver.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\xmlresolver.md
        • Size 11KB
        • SHA256 aee36d76558205e4805c9be3c5f3a4af661baae942b593a4e9f37e3f5d5ac739
        • MD5 SHA1 SHA512 SSDEEP TLSH

        available_for_trial.fp1enqw3s7122gn4lkuv.qmur._Tg1S9d

        • Path C:\Program Files\Java\jre-1.8\bin\available_for_trial.fp1enqw3s7122gn4lkuv.qmur._Tg1S9d
        • Size 183KB
        • SHA256 5a78f8987e23e8db425958a9c885ffb8afa7f71915873f025a672d6e711ecaae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcp140_1.dll

        • Path C:\Program Files\Java\jre-1.8\bin\msvcp140_1.dll
        • Size 24KB
        • SHA256 3a849731adcf17e92b5670b748eff72e8db2008c06b3e81277c5cbf3163b139f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        currency.data

        • Path C:\Program Files\Java\jre-1.8\lib\currency.data
        • Size 4KB
        • SHA256 8c52797a14a0d9248efa9f4a8c169d3a436b7506547cb9c9ad1b00a92c7e23ca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        messages_fr.properties

        • Path C:\Program Files\Java\jre-1.8\lib\deploy\messages_fr.properties
        • Size 4KB
        • SHA256 f279d8bc89030433cb2081f255d48af247cae50c4e41ce12e50dc44817567871
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flavormap.properties

        • Path C:\Program Files\Java\jre-1.8\lib\flavormap.properties
        • Size 4KB
        • SHA256 761382c64720c1b115009ccfc40ec4cf098c3ad52177c60d86722add66410ab7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LucidaBrightRegular.ttf

        • Path C:\Program Files\Java\jre-1.8\lib\fonts\LucidaBrightRegular.ttf
        • Size 337KB
        • SHA256 2f354a9518b2f4fba5637db3dd45c5a1cfd0f14281010e30029e8b3e1083f277
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jce.jar

        • Path C:\Program Files\Java\jre-1.8\lib\jce.jar
        • Size 120KB
        • SHA256 97d60a1d8138b7affe4633fc7f5a28e72000786a4a4b0484153edda34029000c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        local_policy.jar

        • Path C:\Program Files\Java\jre-1.8\lib\security\policy\unlimited\local_policy.jar
        • Size 4KB
        • SHA256 f2a79be911364d8a7cddc722aaf22f22fc76a15bf55617bd732d576680d47b2d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tzdb.dat

        • Path C:\Program Files\Java\jre-1.8\lib\tzdb.dat
        • Size 102KB
        • SHA256 f4f8278cecec3fab93b0b35b36a380e9acc8f2e7d900adfb9ea4711d24ce4474
        • MD5 SHA1 SHA512 SSDEEP TLSH

        IntegratedOffice.exe

        • Path C:\Program Files\Microsoft Office 15\ClientX64\IntegratedOffice.exe
        • Size 3.2MB
        • SHA256 2722ca4b96fb0da75750c35931856e296db7d61b371789a318829faedb812b75
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-synch-l1-2-0.dll
        • Size 19KB
        • SHA256 9527b1f9a33f4b9a868abc227cd4e6375091cc20d9187b49ab52ef707ee00978
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-convert-l1-1-0.dll
        • Size 22KB
        • SHA256 707c3cd9b9273fc5dd5d5ec5b1a71ef7fcdc87de243a9f66275eb9ab8091c3e8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-time-l1-1-0.dll
        • Size 21KB
        • SHA256 646862cff6fbbbf3594756ac5e10fc11fd5d7c310d8fa255c771c3c8fa6d2a95
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-utility-l1-1-0.dll
        • Size 19KB
        • SHA256 528a81ac1e4bfe7fb286e9fa0f513b3a2e0aa29ffc92343a50447819cf5d1fce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        concrt140.dll

        • Path C:\Program Files\Microsoft Office\root\Client\concrt140.dll
        • Size 325KB
        • SHA256 d01283aee9970d1e0c456f86b1549e62f5e0d6250dc50936a3410264f69064bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vccorlib140.dll

        • Path C:\Program Files\Microsoft Office\root\Client\vccorlib140.dll
        • Size 359KB
        • SHA256 902048deee4c06d25c58440a07ae1836becb3e72f944c7d2d013d3d44e412d0c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pkeyconfig-office.xrm-ms

        • Path C:\Program Files\Microsoft Office\root\Licenses16\pkeyconfig-office.xrm-ms
        • Size 905KB
        • SHA256 13b7f58f74300c0c10a8c21423c43866ff76ed2b270bfdf2d63c130434a9ac94
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PREVIEWTEMPLATE2.POTX

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\PREVIEWTEMPLATE2.POTX
        • Size 292KB
        • SHA256 669c3bb97135ecc31317d045fa6c22da55f051cb484841707742ce5e0fcb8883
        • MD5 SHA1 SHA512 SSDEEP TLSH

        word2013bw.dotx

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\word2013bw.dotx
        • Size 12KB
        • SHA256 84688aa939ec2f8bda9b2f37f3b9bcb9230b83a13d5de5054d6448b6cc31f099
        • MD5 SHA1 SHA512 SSDEEP TLSH

        offsymt.ttf

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\offsymt.ttf
        • Size 126KB
        • SHA256 fda60447fd405a0a5c5dedf496d65f9f9a9601127e91c7955f91379a7a286285
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SIST02.XSL

        • Path C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\SIST02.XSL
        • Size 246KB
        • SHA256 d67ad0e1c87beb52ec4d86bac26063782cc62a7754a5f7c53aab4a78b0611ab0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libssl-1_1-x64.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL64.DllA\libssl-1_1-x64.dll
        • Size 633KB
        • SHA256 30a267ea318b1d74a6b8145d093407293e3c32c2f706f24d978637f0f7c904e8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zlibwapi.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL64.DllA\zlibwapi.dll
        • Size 275KB
        • SHA256 89f7e89d76c2149c7a9db6a698b55b8557d1c0a68a1f801a93f15003c707816c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcr120.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\msvcr120.dll
        • Size 941KB
        • SHA256 360609df1f66697d87cf92a0a5ec9b77a0c064f3d6cece81ebc650699af70f6f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcruntime140.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\vcruntime140.dll
        • Size 84KB
        • SHA256 f203b135377ece8052c32dd11731ccd3a0e3e78a6c54336f346d2119fb9b6845
        • MD5 SHA1 SHA512 SSDEEP TLSH

        DBGHELP.DLL

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\DW\DBGHELP.DLL
        • Size 1.9MB
        • SHA256 3f21e89d83301d03403661f472f30f61267e6a4c429edaed71a83f7456d445fc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sybase.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\sybase.xsl
        • Size 30KB
        • SHA256 7944522f101dad6eace581010b10cc9c09cafb5a658f6e2897008887b331bc09
        • MD5 SHA1 SHA512 SSDEEP TLSH

        trdtv2r41.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\trdtv2r41.xsl
        • Size 102KB
        • SHA256 0c75e63dd675bca37a36a79b238a693f898ef8e4f701536db1642d199a4627ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hive.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\hive.xsl
        • Size 80KB
        • SHA256 dc6e2ebaa00ed94b02fa552c469e2c5b8642b0b664c4b3dfe44247585a60e733
        • MD5 SHA1 SHA512 SSDEEP TLSH

        as80.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\as80.xsl
        • Size 17KB
        • SHA256 2e60bcb92fb2bfc6087e779a5b4cad55a703c7ad4b984e54b8a4853588ee0e02
        • MD5 SHA1 SHA512 SSDEEP TLSH

        as90.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\as90.xsl
        • Size 20KB
        • SHA256 9e13047d745dd37fd9515622552c22d6fbea0decb5a1a7cb2293f38d3e9db27e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        db2v0801.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\db2v0801.xsl
        • Size 30KB
        • SHA256 74c44b01836e545f06fe2a2f122a31ff9bc718888631af9ff90a5ff0fcb079e1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msql.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\msql.xsl
        • Size 126KB
        • SHA256 b088bdec6f07907cf0b6f68bc3df91cca6b03e07aa768dd342d0481ae5506f9f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        orcl7.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\orcl7.xsl
        • Size 94KB
        • SHA256 562029b563f35877ccc5d49fbaf2841f0e812e27ad17818a3c7cb633f300c60f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sql120.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sql120.xsl
        • Size 132KB
        • SHA256 a5291cafef37513b9458dde11d10e84762bdeb87cf4032795a1ac289ee5c55b4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sql90.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sql90.xsl
        • Size 133KB
        • SHA256 377e625a2e0ca1a9f7e40c55d5482b4eefe29866d32e545630e7c42e525ef323
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sqlpdw.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sqlpdw.xsl
        • Size 103KB
        • SHA256 769254c8786334c8f2f5fb53863c76397bdb67680ead3b3b23141ec6ad669195
        • MD5 SHA1 SHA512 SSDEEP TLSH

        trdtv2r41.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\trdtv2r41.xsl
        • Size 104KB
        • SHA256 4aa4887b5391d3362f5a9c465a56f616b2354de78c41c12de7551ca382c745e7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vlc.mo

        • Path C:\Program Files\VideoLAN\VLC\locale\da\LC_MESSAGES\vlc.mo
        • Size 585KB
        • SHA256 b6c4cd4a70a6fe74538f06fd0bf210f609f8dabdc6ef6531c5ab14135a165afb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vlc.mo

        • Path C:\Program Files\VideoLAN\VLC\locale\mai\LC_MESSAGES\vlc.mo
        • Size 784KB
        • SHA256 995e1acde1a563aa8c1e506fc89f92d53c02842b98bb90276454657d588fd0d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mscordaccore_amd64_amd64_6.0.2724.6912.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\mscordaccore_amd64_amd64_6.0.2724.6912.dll
        • Size 1.3MB
        • SHA256 d6056a72914b188aa620424e2eb02b39d65fab118ae18d3a311df1b95018b443
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.DiaSymReader.Native.amd64.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\Microsoft.DiaSymReader.Native.amd64.dll
        • Size 1.8MB
        • SHA256 17627850e78ad32d5637efbab0a12cfe243f869a9b7c512390cbc1896973330e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        available_for_trial.0.os7r._Tg1S9d

        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\available_for_trial.0.os7r._Tg1S9d
        • Size 1.3MB
        • SHA256 4fa0d3a21ed36ed4077d65b2d9cd3b7bafb8879b8c5218eb891bdfce943ea495
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mscordaccore.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\mscordaccore.dll
        • Size 1.3MB
        • SHA256 f21eb725469db0936d6ffbd5acc9d432d1277dc4e0c2c4ff2791334ec4d80ceb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        D3DCompiler_47_cor3.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\D3DCompiler_47_cor3.dll
        • Size 4.7MB
        • SHA256 40dd8d8ad08a5a0e9cb6961784f41e8cf9f8e9c7caf6451fbb82d67386fb0935
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcruntime140_cor3.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\vcruntime140_cor3.dll
        • Size 117KB
        • SHA256 3d3b93fc7e05ceaf7a0b53bebbe477c20a75933b2165927b59f04171952e0450
        • MD5 SHA1 SHA512 SSDEEP TLSH

        how_to_decrypt.hta

        • Path C:\how_to_decrypt.hta
        • Size 11KB
        • SHA256 d90505a42ef1e760d9da912ec0d2c078336132540c7e6be5a5951d8158d1af56
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/1352-15-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1352-0-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1352-19-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1352-1144-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1352-7-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1352-6-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1352-4-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1352-3-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1352-2-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/1352-1-0x0000000000400000-0x0000000000463000-memory.dmp