hxxps://www[.]bluej[.]org/

Analysis

user interaction
yes
max time kernel
132s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/09/2026, 18:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.bluej.org/
Sample260925-wtmwdatajg

Score

7^/10

discovery execution ransomware

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000\Control Panel\International\Geo\Nation	javaw.exe

Executes dropped EXE 2 IoCs

pid	Process
4636	BlueJ.exe
2776	javaw.exe

Loads dropped DLL 64 IoCs

pid	Process
5080	MsiExec.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe
2776	javaw.exe

Enumerates connected drives 3 TTPs 49 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\F:\	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
	\??\F:\	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
	\??\F:\	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\BlueJ\lib\italian\frame-labels	msiexec.exe
File created	C:\Program Files\BlueJ\jdk\legal\jdk.unsupported.desktop\ADDITIONAL_LICENSE_INFO	msiexec.exe
File created	C:\Program Files\BlueJ\lib\chinese\templates\newclass\JavaFXclass.tmpl	msiexec.exe
File created	C:\Program Files\BlueJ\jdk\legal\jdk.jdeps\LICENSE	msiexec.exe
File created	C:\Program Files\BlueJ\lib\tutorial\Cat.java	msiexec.exe
File created	C:\Program Files\BlueJ\lib\afrikaans\templates\newclass\abstractclass.kt.tmpl	msiexec.exe
File created	C:\Program Files\BlueJ\jdk\include\win32\bridge\AccessBridgeCalls.h	msiexec.exe
File created	C:\Program Files\BlueJ\lib\images\greenfoot-project.png	msiexec.exe
File created	C:\Program Files\BlueJ\jdk\legal\jdk.jdi\ASSEMBLY_EXCEPTION	msiexec.exe
File created	C:\Program Files\BlueJ\lib\english\labels	msiexec.exe
File created	C:\Program Files\BlueJ\lib\italian\templates\readme.tmpl	msiexec.exe
File created	C:\Program Files\BlueJ\lib\japanese\templates\newclass\interface.kt.tmpl	msiexec.exe
File created	C:\Program Files\BlueJ\lib\korean\frame-labels	msiexec.exe
File created	C:\Program Files\BlueJ\jdk\legal\jdk.xml.dom\ASSEMBLY_EXCEPTION	msiexec.exe
File created	C:\Program Files\BlueJ\lib\chinese\templates\newclass\README	msiexec.exe
File created	C:\Program Files\BlueJ\lib\images\bluej_arrow_naviview_open.gif	msiexec.exe
File created	C:\Program Files\BlueJ\jdk\bin\j2pcsc.dll	msiexec.exe
File created	C:\Program Files\BlueJ\jdk\bin\api-ms-win-crt-convert-l1-1-0.dll	msiexec.exe
File created	C:\Program Files\BlueJ\lib\stylesheets\flow.css	msiexec.exe
File created	C:\Program Files\BlueJ\lib\catalan\templates\newclass\kotlinfile.kt.tmpl	msiexec.exe
File created	C:\Program Files\BlueJ\lib\fonts\SourceCodePro-Bold.ttf	msiexec.exe
File created	C:\Program Files\BlueJ\jdk\legal\jdk.random\LICENSE	msiexec.exe
File created	C:\Program Files\BlueJ\lib\czech\labels	msiexec.exe
File created	C:\Program Files\BlueJ\lib\portuguese\templates\newclass\stdclass.tmpl	msiexec.exe
File created	C:\Program Files\BlueJ\jdk\legal\jdk.accessibility\ASSEMBLY_EXCEPTION	msiexec.exe
File created	C:\Program Files\BlueJ\jdk\bin\api-ms-win-core-util-l1-1-0.dll	msiexec.exe
File created	C:\Program Files\BlueJ\jdk\bin\jcmd.exe	msiexec.exe
File created	C:\Program Files\BlueJ\jdk\bin\serialver.exe	msiexec.exe
File created	C:\Program Files\BlueJ\jdk\bin\java.dll	msiexec.exe
File created	C:\Program Files\BlueJ\jdk\legal\java.management\ADDITIONAL_LICENSE_INFO	msiexec.exe
File created	C:\Program Files\BlueJ\lib\catalan\templates\newclass\stdclass.tmpl	msiexec.exe
File created	C:\Program Files\BlueJ\lib\fonts\SourceSansPro-Italic.ttf	msiexec.exe
File created	C:\Program Files\BlueJ\lib\swedish\templates\newclass\enum.tmpl	msiexec.exe
File created	C:\Program Files\BlueJ\jdk\bin\ucrtbase.dll	msiexec.exe
File created	C:\Program Files\BlueJ\jdk\legal\java.instrument\LICENSE	msiexec.exe
File created	C:\Program Files\BlueJ\lib\images\class-icon.png	msiexec.exe
File created	C:\Program Files\BlueJ\jdk\bin\api-ms-win-core-synch-l1-2-0.dll	msiexec.exe
File created	C:\Program Files\BlueJ\lib\czech\dialogues	msiexec.exe
File created	C:\Program Files\BlueJ\lib\portuguese\templates\readme.tmpl	msiexec.exe
File created	C:\Program Files\BlueJ\lib\JavaEWAH-1.2.3.jar	msiexec.exe
File created	C:\Program Files\BlueJ\lib\images\bluej_arrow_naviview_close.gif	msiexec.exe
File created	C:\Program Files\BlueJ\lib\dutch\readme.txt	msiexec.exe
File created	C:\Program Files\BlueJ\jdk\legal\jdk.internal.opt\ADDITIONAL_LICENSE_INFO	msiexec.exe
File created	C:\Program Files\BlueJ\lib\czech\templates\newclass\kotlinfile.kt.tmpl	msiexec.exe
File created	C:\Program Files\BlueJ\lib\german\templates\newclass\openclass.kt.tmpl	msiexec.exe
File created	C:\Program Files\BlueJ\jdk\lib\jfr\default.jfc	msiexec.exe
File created	C:\Program Files\BlueJ\lib\images\small-object.gif	msiexec.exe
File created	C:\Program Files\BlueJ\jdk\legal\jdk.javadoc\jqueryUI.md	msiexec.exe
File created	C:\Program Files\BlueJ\icons\bluej-vista.ico	msiexec.exe
File created	C:\Program Files\BlueJ\lib\czech\templates\newclass\enum.tmpl	msiexec.exe
File created	C:\Program Files\BlueJ\jdk\legal\java.rmi\ADDITIONAL_LICENSE_INFO	msiexec.exe
File created	C:\Program Files\BlueJ\lib\fonts\SourceSansPro-Bold.ttf	msiexec.exe
File created	C:\Program Files\BlueJ\jdk\legal\jdk.nio.mapmode\LICENSE	msiexec.exe
File created	C:\Program Files\BlueJ\lib\org.eclipse.jgit.ssh.apache-7.1.0.202411261347-r.jar	msiexec.exe
File created	C:\Program Files\BlueJ\lib\junit-jupiter-params-5.5.2.jar	msiexec.exe
File created	C:\Program Files\BlueJ\jdk\legal\jdk.jcmd\ASSEMBLY_EXCEPTION	msiexec.exe
File created	C:\Program Files\BlueJ\lib\italian\templates\method.tmpl	msiexec.exe
File created	C:\Program Files\BlueJ\lib\french\templates\newclass\openclass.kt.tmpl	msiexec.exe
File created	C:\Program Files\BlueJ\lib\stylesheets\pkgmgrframe.css	msiexec.exe
File created	C:\Program Files\BlueJ\lib\danish\templates\newclass\interface.tmpl	msiexec.exe
File created	C:\Program Files\BlueJ\lib\russian\dialogues	msiexec.exe
File created	C:\Program Files\BlueJ\jdk\legal\jdk.jcmd\LICENSE	msiexec.exe
File created	C:\Program Files\BlueJ\jdk\legal\jdk.jdi\LICENSE	msiexec.exe
File created	C:\Program Files\BlueJ\THIRDPARTYLICENSE.txt	msiexec.exe

Drops file in Windows directory 8 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Installer\MSIF042.tmp	msiexec.exe
File created	C:\Windows\Installer\e59e48c.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\e59e48a.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\	msiexec.exe
File created	C:\Windows\Installer\e59e48a.msi	msiexec.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log	msiexec.exe
File created	C:\Windows\Installer\inprogressinstallinfo.ipi	msiexec.exe
File created	C:\Windows\Installer\SourceHash{5D31341F-509C-4208-928D-EC5374AF98AB}	msiexec.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	javaw.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	javaw.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2832	chrome.exe

Checks SCSI registry key(s) 3 TTPs 5 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	javaw.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	javaw.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies registry class 14 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\BlueJ\shell\open\command	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\BlueJ	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\BlueJ\shell\open	msiexec.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\BlueJ\shell\open\command\ = "\"C:\\Program Files\\BlueJ\\BlueJ.exe\" \"%1\""	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\.bluej	msiexec.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\.bluej\Content Type = "application/binary"	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\.bjar	msiexec.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\.bjar\Content Type = "application/binary"	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\BlueJ\shell	msiexec.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\.bluej\ = "BlueJ"	msiexec.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\BlueJ\ = "BlueJ Project File"	msiexec.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\.bjar\ = "BlueJ"	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\BlueJ\DefaultIcon	msiexec.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\BlueJ\DefaultIcon\ = "\"C:\\Program Files\\BlueJ\\BlueJ.exe\",0"	msiexec.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
4804	msiexec.exe
4804	msiexec.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	6072	chrome.exe
Token: SeCreatePagefilePrivilege	6072	chrome.exe
Token: SeShutdownPrivilege	6072	chrome.exe
Token: SeCreatePagefilePrivilege	6072	chrome.exe
Token: SeShutdownPrivilege	6072	chrome.exe
Token: SeCreatePagefilePrivilege	6072	chrome.exe
Token: SeShutdownPrivilege	6072	chrome.exe
Token: SeCreatePagefilePrivilege	6072	chrome.exe
Token: SeShutdownPrivilege	6072	chrome.exe
Token: SeCreatePagefilePrivilege	6072	chrome.exe
Token: SeShutdownPrivilege	6072	chrome.exe
Token: SeCreatePagefilePrivilege	6072	chrome.exe
Token: SeShutdownPrivilege	6072	chrome.exe
Token: SeCreatePagefilePrivilege	6072	chrome.exe
Token: SeShutdownPrivilege	6072	chrome.exe
Token: SeCreatePagefilePrivilege	6072	chrome.exe
Token: SeShutdownPrivilege	6072	chrome.exe
Token: SeCreatePagefilePrivilege	6072	chrome.exe
Token: SeShutdownPrivilege	6072	chrome.exe
Token: SeCreatePagefilePrivilege	6072	chrome.exe
Token: SeShutdownPrivilege	6072	chrome.exe
Token: SeCreatePagefilePrivilege	6072	chrome.exe
Token: SeShutdownPrivilege	6072	chrome.exe
Token: SeCreatePagefilePrivilege	6072	chrome.exe
Token: SeShutdownPrivilege	6072	chrome.exe
Token: SeCreatePagefilePrivilege	6072	chrome.exe
Token: SeShutdownPrivilege	6072	chrome.exe
Token: SeCreatePagefilePrivilege	6072	chrome.exe
Token: SeShutdownPrivilege	6072	chrome.exe
Token: SeCreatePagefilePrivilege	6072	chrome.exe
Token: SeShutdownPrivilege	6072	chrome.exe
Token: SeCreatePagefilePrivilege	6072	chrome.exe
Token: SeShutdownPrivilege	6072	chrome.exe
Token: SeCreatePagefilePrivilege	6072	chrome.exe
Token: SeShutdownPrivilege	6072	chrome.exe
Token: SeCreatePagefilePrivilege	6072	chrome.exe
Token: SeShutdownPrivilege	6072	chrome.exe
Token: SeCreatePagefilePrivilege	6072	chrome.exe
Token: SeShutdownPrivilege	6072	chrome.exe
Token: SeCreatePagefilePrivilege	6072	chrome.exe
Token: SeShutdownPrivilege	6072	chrome.exe
Token: SeCreatePagefilePrivilege	6072	chrome.exe
Token: SeShutdownPrivilege	6072	chrome.exe
Token: SeCreatePagefilePrivilege	6072	chrome.exe
Token: SeShutdownPrivilege	6072	chrome.exe
Token: SeCreatePagefilePrivilege	6072	chrome.exe
Token: SeShutdownPrivilege	4284	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4284	msiexec.exe
Token: SeSecurityPrivilege	4804	msiexec.exe
Token: SeCreateTokenPrivilege	4284	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	4284	msiexec.exe
Token: SeLockMemoryPrivilege	4284	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4284	msiexec.exe
Token: SeMachineAccountPrivilege	4284	msiexec.exe
Token: SeTcbPrivilege	4284	msiexec.exe
Token: SeSecurityPrivilege	4284	msiexec.exe
Token: SeTakeOwnershipPrivilege	4284	msiexec.exe
Token: SeLoadDriverPrivilege	4284	msiexec.exe
Token: SeSystemProfilePrivilege	4284	msiexec.exe
Token: SeSystemtimePrivilege	4284	msiexec.exe
Token: SeProfSingleProcessPrivilege	4284	msiexec.exe
Token: SeIncBasePriorityPrivilege	4284	msiexec.exe
Token: SeCreatePagefilePrivilege	4284	msiexec.exe
Token: SeCreatePermanentPrivilege	4284	msiexec.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe

Suspicious use of SendNotifyMessage 40 IoCs

pid	Process
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe
6072	chrome.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2776	javaw.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 6072 wrote to memory of 5996	6072	chrome.exe	88
PID 6072 wrote to memory of 2268	6072	chrome.exe	89
PID 6072 wrote to memory of 2268	6072	chrome.exe	89
PID 6072 wrote to memory of 2832	6072	chrome.exe	90
PID 6072 wrote to memory of 3596	6072	chrome.exe	91
PID 6072 wrote to memory of 3596	6072	chrome.exe	91
PID 6072 wrote to memory of 2300	6072	chrome.exe	93
PID 6072 wrote to memory of 2300	6072	chrome.exe	93
PID 6072 wrote to memory of 5432	6072	chrome.exe	94
PID 6072 wrote to memory of 5432	6072	chrome.exe	94
PID 6072 wrote to memory of 3444	6072	chrome.exe	95
PID 6072 wrote to memory of 3444	6072	chrome.exe	95
PID 6072 wrote to memory of 4372	6072	chrome.exe	98
PID 6072 wrote to memory of 4372	6072	chrome.exe	98
PID 6072 wrote to memory of 5256	6072	chrome.exe	99
PID 6072 wrote to memory of 4548	6072	chrome.exe	106
PID 6072 wrote to memory of 4764	6072	chrome.exe	107
PID 6072 wrote to memory of 2004	6072	chrome.exe	108
PID 6072 wrote to memory of 4108	6072	chrome.exe	114
PID 4804 wrote to memory of 5080	4804	msiexec.exe	123
PID 4804 wrote to memory of 1992	4804	msiexec.exe	128
PID 4636 wrote to memory of 2776	4636	BlueJ.exe	133
PID 2776 wrote to memory of 1780	2776	javaw.exe	135
PID 2776 wrote to memory of 2580	2776	javaw.exe	137

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.bluej.org/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff84f8cc728,0x7ff84f8cc734,0x7ff84f8cc740
  2⤵
  PID:5996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1680,i,9459023279146738385,6488485627541099985,262144 --field-trial-handle=2000,i,11173092540224874545,1241774744579028912,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1996 /prefetch:2
  2⤵
  PID:2268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,15904195888055957740,7401180497682060721,524288 --field-trial-handle=2000,i,11173092540224874545,1241774744579028912,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2268 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2352,i,16452895504497181072,12137716271412734625,524288 --field-trial-handle=2000,i,11173092540224874545,1241774744579028912,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2508 /prefetch:8
  2⤵
  PID:3596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3196,i,16370341266637438700,15915302545516682579,2097152 --field-trial-handle=2000,i,11173092540224874545,1241774744579028912,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:2300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3200,i,1278755708188494976,2678097336252838668,2097152 --field-trial-handle=2000,i,11173092540224874545,1241774744579028912,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:5432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4396,i,16898222292821367799,2598527747758551809,2097152 --field-trial-handle=2000,i,11173092540224874545,1241774744579028912,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4432 /prefetch:2
  2⤵
  PID:3444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4800,i,16806059022450186932,10005798091464558345,2097152 --field-trial-handle=2000,i,11173092540224874545,1241774744579028912,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4812 /prefetch:1
  2⤵
  PID:4372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5492,i,5338682425507806835,2812226001572447419,524288 --field-trial-handle=2000,i,11173092540224874545,1241774744579028912,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5500 /prefetch:8
  2⤵
  PID:5256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4760,i,10631180642068486807,15313767456713561285,524288 --field-trial-handle=2000,i,11173092540224874545,1241774744579028912,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6044 /prefetch:8
  2⤵
  PID:4548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6040,i,10230850146835784338,6034352930214683281,524288 --field-trial-handle=2000,i,11173092540224874545,1241774744579028912,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6092 /prefetch:8
  2⤵
  PID:4764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6048,i,4820150280737120498,11702243494224361203,524288 --field-trial-handle=2000,i,11173092540224874545,1241774744579028912,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5612 /prefetch:8
  2⤵
  PID:2004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4792,i,4116900577195135987,18085103622797625397,524288 --field-trial-handle=2000,i,11173092540224874545,1241774744579028912,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3312 /prefetch:8
  2⤵
  PID:4108

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5344

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:224

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5972

C:\Windows\System32\msiexec.exe
"C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\Downloads\BlueJ-windows-6.0.1.msi"
1⤵
- Enumerates connected drives
- Suspicious use of AdjustPrivilegeToken
PID:4284

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4804
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding A350BD81E24CA8330309D6C8E5393570 C
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:5080
- C:\Windows\system32\srtasks.exe
  C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
  2⤵
  PID:1992

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
PID:6116

C:\Program Files\BlueJ\BlueJ.exe
"C:\Program Files\BlueJ\BlueJ.exe"
1⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4636
- C:\Program Files\BlueJ\jdk\bin\javaw.exe
  "C:\Program Files\BlueJ\jdk\bin\javaw.exe" -Dhttps.protocols=TLSv1,TLSv1.1,TLSv1.2 -classpath "C:\Program Files\BlueJ\lib\boot.jar;C:\Program Files\BlueJ\lib\javafx-base-23.0.2-win.jar;C:\Program Files\BlueJ\lib\javafx-controls-23.0.2-win.jar;C:\Program Files\BlueJ\lib\javafx-fxml-23.0.2-win.jar;C:\Program Files\BlueJ\lib\javafx-graphics-23.0.2-win.jar;C:\Program Files\BlueJ\lib\javafx-media-23.0.2-win.jar;C:\Program Files\BlueJ\lib\javafx-swing-23.0.2-win.jar;C:\Program Files\BlueJ\lib\javafx-web-23.0.2-win.jar" bluej.Boot
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  - Reads the TCP/IP host and domain name from the registry
  - Checks processor information in registry
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:2776
- - C:\Windows\SYSTEM32\cscript.exe
    cscript "C:\Program Files\BlueJ\lib\windowtofront.js" 2776
    3⤵
    PID:1780
- - C:\Windows\SYSTEM32\cscript.exe
    cscript "C:\Program Files\BlueJ\lib\windowtofront.js" 2776
    3⤵
    PID:2580

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

e59e48b.rbs

Path C:\Config.Msi\e59e48b.rbs
Size 227KB
SHA256 71e741903d64b31727a828ffb4d6d62db3e013449afa5fc9ede66732bd4d1ec0
MD5 f74233ac80827630c4881755ecffdba8
SHA1 e2923422b534c20b4c0f2a4adcbd174938040972
SHA512 8d5902c6a53d61daf824a45ee3b6449b55127a04595da8dc28c1127f75bbf0444fcd403aa162354a305a9f8c9b822727324a81fc04f8b2ad4b3d35a1f832acbf
SSDEEP 1536:tfHiy20Zo6CIYQWKPc44wz7PFn3aOowl0UNUBiF8dpHR/BEmtifH/H0BxbNo5aDZ:g/aFOsBQK6hBgbHj25/PP9
TLSH
T1E9346B51D91EE7F8F20730AB27816D58A345E828BF49502F228CD72FED507A787786E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BlueJ.exe

Path C:\Program Files\BlueJ\BlueJ.exe
Size 963KB
SHA256 4cb5907563c169fed7f585ccf8f124cfe18696ec23cd361a1646bf2b541221c7
MD5 47f8aa24cbe99ed051f2606b9a5d6333
SHA1 4a3782a1759a31045c1a591d0f5747dcdd3ab895
SHA512 7bc38c2a40b4786d2d75aa0adc52b12941dec97e7138805e9ba1e503f573ffbc1a0ece8e5885010719915a461f3bc61ad2cd9ea286a2dfb09973b4aca5808eb5
SSDEEP 24576:9L7KcNEyrN/hMLWMqDKTpMzzMeF4lCr3LIsaSwk3:h7KcNEyrN/ZMqEK/HQCrB
TLSH
T1C0252B5BE2A344E8C53FC07446979772BA70B46A42347D6E1ED5D7321E20E60AF6EB30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

java.dll

Path C:\Program Files\BlueJ\jdk\bin\java.dll
Size 118KB
SHA256 f474176d8e3e8fb77596cd0f902c576cc954d17622aacb2c474404395a981ce3
MD5 b8f9d4e627536e73ba387de89ea1a175
SHA1 ad64f514572a512e8e80c458d23a931fbdb99705
SHA512 1eea44d4ad4a3062b0230eeaea33e9962768e96bfd49922baeba9f2352b943caf5b24d3095cd1f3cc39ad431aad562b511421f52267d52341f0a1b6a49e72e71
SSDEEP 3072:ubxUK8dJPnC1A8hdPcAkreh9nfyNG3lSnIrP76jp:u2K8dJqVkAUwVSS7U
TLSH
T130C34A5BF3254056F47AB1BC801A864BD372B4B11145E30E43A9CAAEDF9FB613D0AB85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

java.exe

Path C:\Program Files\BlueJ\jdk\bin\java.exe
Size 48KB
SHA256 abd12f952caba9b7404f15ca3939100f5ad5db5553187a3449814c57c2bf4b82
MD5 c79c8a6cf3810dd661864a2b713eb51c
SHA1 76c042fbafa47a191e60ce6f0863521d973c338c
SHA512 c56294565d54826d454b75c34ad5098116ebcfae30aaa6db1a4495245bc72197b0c2fd1672be965a08dc8e104488dd5a97cd57dcfdffaa1ecde346e782fa7e5d
SSDEEP 768:IUmOFxM5R2TyJ5R3s8D/bkt5Ruz3Vb3kS5fEpYi6uyC:INAM5RdJ5R3sozkt5RA3kS5Y76m
TLSH
T1E6236D87AA182C81F01F84F198A7752A55B47D032BD063FA7DCAF20E4D71391A9176EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javac.exe

Path C:\Program Files\BlueJ\jdk\bin\javac.exe
Size 23KB
SHA256 c81b3bece8daf28136b387841f924c66a9da88746246211cf769bfa6ac3a6f25
MD5 45e3dcf669406615e4353e410a8d02f4
SHA1 f070f2eef208d71e0106e63033badb157a185eb2
SHA512 af9706fc3aacab30bad356008ddd9d33bac0f241d2cf0977b693482488f37618ac906cb22db1aaf34e04552ea581bd09c3b858ea408799650349e85c601ec4eb
SSDEEP 384:4DivTlFnAtz5KF57s5AaNyb8E9VF6IYijSJIVIJGQ9/nCm5U6S:7BFtFJs5pEpYi6uy1+
TLSH
T177B28D52CE540CEAEA1A86F4B4D5531EE974B397AE90C3D7132DC0144F227C27B992EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javaw.exe

Path C:\Program Files\BlueJ\jdk\bin\javaw.exe
Size 48KB
SHA256 f162274fe8723a859e70b863f83e02a95b418812932d94ea3c9105f0265fe48d
MD5 8f3cea4ecc6d33e6774a71521df84bec
SHA1 f5c861c029954a95852dde3623677ffbe4d575f6
SHA512 e6168c296ef64505d9214970cc30a92bb04c92963186e3d8d3d916826f322366c1425b2cbf64b383bd75610e061f1706918cc375dc994f778167d135f6077b08
SSDEEP 768:NR27M5R2TyJ5R3s8D/bkt5Ruz3Vb3Jk5nEpYi6uyry:NmM5RdJ5R3sozkt5RA3Jk5A76i
TLSH
T162237D47AA182C82F02F84F154A7792A55B4BD032BD173F67DCAB21E0C713519927AEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jimage.dll

Path C:\Program Files\BlueJ\jdk\bin\jimage.dll
Size 32KB
SHA256 0bd4173c377c2a8369803adf92862e314745e7e01a44edd2685060cf8699da20
MD5 21a02272f514787cbb894834a86db8d1
SHA1 27c46d3737aba5fa4719bb169157383bc59fd6b5
SHA512 7d439d3ac47bdb030aa8be964bb9c02fde66325af157f9114e8d9247068ba473922c456ed203d5deb393711ef90c01ae6e0bd97419c81faef95779dc681006f7
SSDEEP 768:8XtTSB+LFFGyyD6slR5BEvvZfvEpYi6uyC/:vlWslR56vRfI762/
TLSH
T1E5E27B5AEB504C65E927D63CC49B9A2FE6B1F9425F90C3CB1721424A0F333813F697A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jli.dll

Path C:\Program Files\BlueJ\jdk\bin\jli.dll
Size 87KB
SHA256 7dd4a08bbd29ea590dd8253332c6e33df4f9052a599710e4c30c9eeeed9db35e
MD5 7343522fd185f72df3abba7ff67f2db6
SHA1 3a5a3aa04f8249e4e39da041ff7a8e2014ac14a1
SHA512 39956e14e6c84f04c7a17b403ba0c3ee9f5e76bb7b1b27c8124f212c1d24d429e4a4afa166f8ea915ac1722af1150e7faef2c5eec0c1b5c46ebe7b6ddb182029
SSDEEP 1536:iInMSe1CB5jz+dFDeb5M+UvaRnlYnsNIO9Tc7tVWg76o:p++l+YW1iRlYnsH9Tc7LWgv
TLSH
T1CF937E9643E021E0DEB785B5DAB59A0BC3F2F0162761938F136C85A50F637613E1CBE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jsvml.dll

Path C:\Program Files\BlueJ\jdk\bin\jsvml.dll
Size 849KB
SHA256 9b8a36cd33b25bd81388208784d19a137f685b14b7b81be77bec4a9471c7d6ca
MD5 ae0ffee3c346d1c7fe6d0738069cdbab
SHA1 64218372a65e90a39ab04ef7b02dec714d0031c4
SHA512 faff265b2660d23cedbfe9a0363e68b9cce89a3561fc35ff21df76db1a4f6bfef01b4c3e69be50aabb6e96971cad9f0148370b5a0f5fc12b717024f756a8d278
SSDEEP 12288:cRybOUKnvJNeCs5wHuTzh/V71AVNV+Ssc3j:cobO7JN3qwHyzhN7wj+9Oj
TLSH
T1A805AF82F81285CDC03534B024FFBD95A91A1CE941BC0EB32732AE9D2AFD7467957A74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll

Path C:\Program Files\BlueJ\jdk\bin\msvcp140.dll
Size 561KB
SHA256 a4c2229bdc2a2a630acdc095b4d86008e5c3e3bc7773174354f3da4f5beb9cde
MD5 72f3d84384e888bf0d38852eb863026b
SHA1 8e6a0257591eb913ae7d0e975c56306b3f680b3f
SHA512 6d53634bc51bd383358e0d55988d70aee6ed3897bc6ae5e0d2413bed27ecff4c8092020682cd089859023b02d9a1858ac42e64d59c38ba90fbaf89b656c539a6
SSDEEP 12288:rSTTigI46Bb3SUPvRgrKtzL4oaQEKZm+jWodEEVPLwtQB:rUStZaQEKZm+jWodEE9CQB
TLSH
T1B9C41A23B74905A0E195E3B8A1878316D7F1BC4A8312A3C792FBD66D2F673D1673B250
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

net.dll

Path C:\Program Files\BlueJ\jdk\bin\net.dll
Size 58KB
SHA256 1530c4d8c3737e04910137256d0513e20bff854b08c0a830da73dfbacd27be60
MD5 cd0c6c6f6a96364d3211bcda4d903b5f
SHA1 adfeac52d9ff3161a350a6cd1820f8ff0e08eedc
SHA512 2e3bf431fe16f152c5b85b4ef3f497499220845000c886f0facfcd66558b00e40f91c0c9aff112e31a62ecc927b515d46114659b86804cfe1b09ade253d4c91e
SSDEEP 1536:J7+Z+29hcbOSwhnqa/QHTEEnUn8umFUpi76q1:EfDTJ/CED8um+pij
TLSH
T1AC437D06979448D1F827C77C81A34E16DB72F8A0625087DF0379C6AE6FD77A23B25781
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nio.dll

Path C:\Program Files\BlueJ\jdk\bin\nio.dll
Size 78KB
SHA256 abd40c27d299fd26dc0c0e030257a1db9d1f3b330451671073bf0f5f51f5911b
MD5 d35a0d9eb225eae4b3d4a719f4d42b2a
SHA1 83fc1791b23bc90a112ccd9a57e6cf88f21f6762
SHA512 23706c74fd1b40915d1fe19e2f1cf2616103ce02c89fc336bd7b17d7466ebead53947941addc11e921c4ca155a1c3044bc30875821fc2cc17fed11bc3e248afc
SSDEEP 1536:QCxcxzmqHiOKMW0yusCAZnWMIRrwCEdo78VeI76z:QCyxKqHICyujAFW7RkCEy5IQ
TLSH
T157733AA34374849BE86A7138428A5747E632FC114510A79F5368C7669F6F2B33E3E7C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

classes.jsa

Path C:\Program Files\BlueJ\jdk\bin\server\classes.jsa
Size 12.8MB
SHA256 66233eed58093398fe02768e160dd089ad1948ea9692bb79c172bc947c87bf01
MD5 2b042790ebb98b4efe48e74f8a084a09
SHA1 f414aa3cd349ec4014b617387f11772d20f3e2ae
SHA512 50b39bcba61dc789bfc3de2f5f9a8b8871a2e58567716e0f200fbdfdf5849b01cea2a7c783de7d7adb1f967eed0cb90c85e1cb2a85ca7d827e3b9edf9dba9910
SSDEEP 49152:HMcxoRBbg8nNpcHC3sfeT9LFHLrqRF4FaQqC:HMcwBbTNWC35T9LtLesaQ
TLSH
T15FD6E917FA8196ABE03D9335CCEA07906333F865AB028B072646B3BDEDC35958D475C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jvm.dll

Path C:\Program Files\BlueJ\jdk\bin\server\jvm.dll
Size 13.2MB
SHA256 c2bcdbc497292a1f31a43f39c7c8d03f8ea9c9db10d6697d6df84bc8e59fc35c
MD5 b9c8a7ad16b31b337b431721e7571274
SHA1 565d2b35f77532b1695abee8465643801f7f1b46
SHA512 2e0532eb592cf10be089b03559861dea756fd3312eec0f238617000809378a54d3d248ab6b46cce27ce063d9f60219f02cef87070c7e57cf47abd9d1ff14dac8
SSDEEP 393216:2LypctUQvTDKxU8vv31q64/c5wLCbDXVDSDvUXMZ3Ue21iI8zbxND8JowdUb9m1C:7qZ
TLSH
T13FD66B56A6BA41E1D47BC57C8A2B8907D7F2B4904330D7CF21E01AAD6F23BE15A3E714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140.dll

Path C:\Program Files\BlueJ\jdk\bin\vcruntime140.dll
Size 117KB
SHA256 02c6aa0e6e624411a9f19b0360a7865ab15908e26024510e5c38a9c08362c35a
MD5 caf9edded91c1f6c0022b278c16679aa
SHA1 4812da5eb86a93fb0adc5bb60a4980ee8b0ad33a
SHA512 32ac84642a9656609c45a6b649b222829be572b5fdeb6d5d93acea203e02816cf6c06063334470e8106871bdc9f2f3c7f0d1d3e554da1832ba1490f644e18362
SSDEEP 1536:dI2v39UXigCBs29DdxfggO6vMMKZsY2ofRjoecbdhUwdJTzmZhTzC:diwskD8B6vMMEs5oGecbd2wHT0Te
TLSH
T1FBC38C4672A042FBD16AC274C1E35E17FB75B84487A0A7CF03A58A690F53BE09E3D385
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll

Path C:\Program Files\BlueJ\jdk\bin\vcruntime140_1.dll
Size 48KB
SHA256 7dd9aa02e271c68ca6d5f18d651d23a15d7259715af43326578f7dde27f37637
MD5 2bd576cbc5cb712935eb1b10e4d312f5
SHA1 dfa7a46012483837f47d8c870973a2dea786d9ff
SHA512 abbd3eb628d5b7809f49ae08e2436af3d1b69f8a38de71ede3d0cb6e771c7758e35986a0dc0743b763ad91fd8190084ee5a5fbe1ac6159eb03690ccc14c64542
SSDEEP 768:IzzO6ujT3MbR3vXCz6S5Mq83yJ9d3+DuO9zUgElq9z6m:Fq/XuA3o9dgzUZWz5
TLSH
T17C235C9457784086D59F95B0C1D6EE537E7CFA964B00928F0BA1E1882F637D0EB3D22B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zip.dll

Path C:\Program Files\BlueJ\jdk\bin\zip.dll
Size 87KB
SHA256 8bbc3fabf069699adbab5276df097a9a878ebb3e4552ff3f22d9e861f268574a
MD5 81ecec3848e39716ec9113d7204f2d45
SHA1 08f01b443c99d03c870f9c161d6d2550b5656044
SHA512 9a6cd89600bcfa74a48b8616a6c7247c5283eb50b022c3ae93a820ffda281885bf0d032030f1d0c5a62e689882ef1f0db5dab5a61e2b555439edee1a8a903873
SSDEEP 1536:LvHSkWnbUY6ijLGBHtr2RKVWjGIOQIOhWdMv762g:LvHSkWnbz6ZaR6WjkGhWdMvfg
TLSH
T15E938C959AB05151DABA85B0C9F24A2ED3BAB02253D0578B535CC39A2F137613F4C3FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

logging.properties

Path C:\Program Files\BlueJ\jdk\conf\logging.properties
Size 2KB
SHA256 b62d2733ab99556b108a1951d894c5a8d76b1ac7a00c02c388f9eb9be046c56f
MD5 0f00ec3e7a7767a4efeae1875fb5f3d4
SHA1 167808418571e9209b952188ddab2f4e62920e68
SHA512 e869f4a3b821a9933796dc9a56ee00483493369dfbfe07b3b1d895cb8318c6821cd44134eb37513f15b830c25861b596646824ed56672d08b678fefe6a4c7504
TLSH
T13B51EE5EAB4E2D35434E00AA5A7FF6527E1898BC1C23A5F6B35E6304711D83485DBBC2
MD5 SHA1 SHA512 TLSH

Submit Download

java.security

Path C:\Program Files\BlueJ\jdk\conf\security\java.security
Size 64KB
SHA256 327adb06968ca5b45ac7b3b0feec12a8ca20286f1ed1152bf23f639587125049
MD5 e1b7b2a5c7e2a1f425e5245888e8ad91
SHA1 fd76a263a2ec03b695987411b6ac6178c2cd83e7
SHA512 cc65b4d186500661fe36b6aa605fd747166cf8299cf16bffc093b5b89ad69c429875192646ab4fa7c987c089d7d9baeb33a85291bc8ddb767e6fc78f39c03f9b
SSDEEP 1536:r+My8Si8MRjtWp5/jTNHu1UoQ2k/gl0ugzYueNndOck:v8MHWD/jTNO1UoQDcugndOck
TLSH
T11653C322BB896B7206F211A363ADF1E9F76DA12A36321154748D420C7326F71C3776E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ADDITIONAL_LICENSE_INFO

Path C:\Program Files\BlueJ\jdk\legal\java.instrument\ADDITIONAL_LICENSE_INFO
Size 49B
SHA256 ebf9777bd307ed789ceabf282a9aca168c391c7f48e15a60939352efb3ea33f9
MD5 19c9d1d2aad61ce9cb8fb7f20ef1ca98
SHA1 2db86ab706d9b73feeb51a904be03b63bee92baf
SHA512 7ec63b59d8f87a42689f544c2e8e7700da5d8720b37b41216cbd1372c47b1bc3b892020f0dd3a44a05f2a7c07471ff484e4165427f1a9cad0d2393840cd94e5b
MD5 SHA1 SHA512

Submit Download

LICENSE

Path C:\Program Files\BlueJ\jdk\legal\jdk.internal.le\LICENSE
Size 33B
SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
MD5 16989bab922811e28b64ac30449a5d05
SHA1 51ab20e8c19ee570bf6c496ec7346b7cf17bd04a
SHA512 86571f127a6755a7339a9ed06e458c8dc5898e528de89e369a13c183711831af0646474986bae6573bc5155058d5f38348d6bfdeb3fd9318e98e0bf7916e6608
MD5 SHA1 SHA512

Submit Download

ASSEMBLY_EXCEPTION

Path C:\Program Files\BlueJ\jdk\legal\jdk.localedata\ASSEMBLY_EXCEPTION
Size 44B
SHA256 b998cda101e5a1ebcfb5ff9cddd76ed43a2f2169676592d428b7c0d780665f2a
MD5 7caf4cdbb99569deb047c20f1aad47c4
SHA1 24e7497426d27fe3c17774242883ccbed8f54b4d
SHA512 a1435e6f1e4e9285476a0e7bc3b4f645bbafb01b41798a2450390e16b18b242531f346373e01d568f6cc052932a3256e491a65e8b94b118069853f2b0c8cd619
MD5 SHA1 SHA512

Submit Download

jvm.cfg

Path C:\Program Files\BlueJ\jdk\lib\jvm.cfg
Size 29B
SHA256 aa9efb969444c1484e29adecab55a122458090616e766b2f1230ef05bc3867e0
MD5 7ce21bdcfa333c231d74a77394206302
SHA1 c5a940d2dee8e7bfc01a87d585ddca420d37e226
SHA512 8b37a1a5600e0a4e5832021c4db50569e33f1ddc8ac4fc2f38d5439272b955b0e3028ea10dec0743b197aa0def32d9e185066d2bac451f81b99539d34006074b
MD5 SHA1 SHA512

Submit Download

tzdb.dat

Path C:\Program Files\BlueJ\jdk\lib\tzdb.dat
Size 99KB
SHA256 87022eb5ae9465d75762de6fb2a668c60d411c1394e500c24651895681228148
MD5 279c3ed6f608a9bd037d87af1a2262f4
SHA1 b6f633c4f7b68be0dad361b8e505e12b5c017830
SHA512 741a8ba22a71ff6d785579ca680160ea9c55e9de462c112ec737bd1e23b0e8bbcc7ce12f550358ea6d8a42424e9cf00015d12d04c478db0298513afbee776b51
SSDEEP 1536:h0E6xFtdhPdr92L674jAGubVj0Lg/////UzJbPdJPNL0mOTLM4a3jy9j:hQxfdhPdrcWzbVj0hJzdxgTL6Tg
TLSH
T1D4A3B3B57F7150B7B2CB8122262B5B93097DAC816FC3084675B4BD4E8A76AD7203335E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tzmappings

Path C:\Program Files\BlueJ\jdk\lib\tzmappings
Size 21KB
SHA256 b41575b332809b37ad423bdca30c7c48cdef3d82f82fa9d534781a6f15d6a2ab
MD5 4c30d7867505379a18a27d0e8f03198c
SHA1 0cc871d5bd91e061d676a861749af68bbc0ca9c6
SHA512 873d329682ce67267f438b88eee0fc25cecbbcc1f7d694118417ad12756ec2b6ae7502ec4eea0cc9b4ae8b9e68f5f8877762fa13dea89c4a6dcd54fd8bf82c56
SSDEEP 192:3nqW46ARn1+RQ7wbNQQSaapvQZglEcCDqvOCJqGic3yzA6bbAdOFmYXKhJmBW:3nqW46ARnGQqN2KhcQ+qAa9W
TLSH
T1CDA25386B06662D4C073EC0D7B527AD3F886F3C899C69A4D2943C366BD019B767E1837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

enum.tmpl

Path C:\Program Files\BlueJ\lib\afrikaans\templates\newclass\enum.tmpl
Size 270B
SHA256 0cc1199ecda73e8b262da02b774d8840e0490daeb95da7454fb23bf3ffa946c4
MD5 c0e80f5cccf8ab7b1ffcd3a79e12dc9c
SHA1 029d6e377d7b77d3b44470c5a5bbd4e0783387e2
SHA512 ec1e0b3b1d0f5836d600f257b5099abcd8799529b447ce2feb133d4d6e4d0854336af6dbf11f07d9c5155b291d559fd8e0e0190ee08104d06dfabdf346964d99
TLSH
T105D02B268804133761FF4B7620BA60507F31F26186614B0EB8D9C0F14F9B1F70764DD4
MD5 SHA1 SHA512 TLSH

Submit Download

bluej.defs

Path C:\Program Files\BlueJ\lib\bluej.defs
Size 21KB
SHA256 378b54cbf4ebfb0e61bfb1ba9f034c6d03e9a410f0b7e05bc1f1a674f96f7cac
MD5 67cfb70c61e7b08f844a233aba39d6c3
SHA1 2f7808e05f8fe7eed3e78c41da44776cdfcc5123
SHA512 10aa8207e7b442236a5ba8ddcc0c9f2b752367f3dcb8d01044207f9c0dcb39971e15a4821a1b09fa33bb2a39b860d5f7c43ade09b0ceb101fb40131aea67ea2d
SSDEEP 192:GmxblPC7mIh7CApXKItLT5scmbcrUgA0FvVyOgfFb2JiyB1ZnNSZGglcaEcI2UGG:Gm19ZIhm/CBtmbWgD9b2JTS03GDeEw
TLSH
T11AA2B616A78A93B917620163F20FB7E5E36941BF5F333914316C42C83386F6983A65DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

boot.jar

Path C:\Program Files\BlueJ\lib\boot.jar
Size 432KB
SHA256 d61b11c66aade64ef12ff0dd6dfcec91dab57be86617961be7951cc02dbf8756
MD5 2a33b7bc689d30bbd3c1085e157d20ff
SHA1 a4525d03a270cdfbfb67230750823837e3c907de
SHA512 8b36ceedd0c8b832452c34d398244f37c95deb2014272ce827969ab539fea499eb8f1716338545320f08765b9bfd53dd378be2f45ccf2e611ff9ddaf9aa6ee3b
SSDEEP 6144:R/ALfkpclMaELy4Zrzq2qO7qMWra1GJgDAE9QesZ+KfIvLxRQgOutrb69dGSAGS8:RHpc+BLhZvq2qO7ya1IEzlXIO6DSPXk
TLSH
T13B9423C771A63259838BCAB9C365268230DCE408B1257FDE7967E1ACE47D02513A17EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

openclass.kt.tmpl

Path C:\Program Files\BlueJ\lib\czech\templates\newclass\openclass.kt.tmpl
Size 521B
SHA256 3b724fbeda264a639d38ab59704691d97afda50ca6dd4767a4ba8dc003efd433
MD5 430b17ccffa3f8fdde85ca7b4662c82e
SHA1 b0dfbfbe3c7f87fd41ea6cf0b6e143f3530bcb61
SHA512 2e00615c494d06442585c5f7ced779f67a0cf1880b9a80d7e93ded85792e6d18e4baefd2195eb8130494abf3f8b294009450b0a9c3da8f457bb9e6404872e542
TLSH
T1C5F0E24ABBC2322334B5933A0815A048F6E45233954999443EEE92B11FB47E9E1A4E99
MD5 SHA1 SHA512 TLSH

Submit Download

stdclass.kt.tmpl

Path C:\Program Files\BlueJ\lib\czech\templates\newclass\stdclass.kt.tmpl
Size 536B
SHA256 888efd715c46730ac840a7af77a60c3e1205af2e1f17b5b4c957bc80827daeb8
MD5 eeb4cf1ce414ded3d8c77db5ae57794f
SHA1 f70128f526c7415375b3534f70b39216e9c83f3e
SHA512 beb8440299ab6be3da43995947e99f1ae13e6699bb7f91b94014893b1e448579f0fb4a5e3fde78db905a1c55ef1e0143f42117b2b9c264f94b20992ad00068c4
TLSH
T11DF0520E7BC1222274B5873A0544B000F2E45333854898003CEE53751FB43E9D2A4EDE
MD5 SHA1 SHA512 TLSH

Submit Download

abstractclass.kt.tmpl

Path C:\Program Files\BlueJ\lib\english\templates\newclass\abstractclass.kt.tmpl
Size 515B
SHA256 43a5b5756d75bf2d11bd15f1d9ff190c87e6e94a86cb1067acf910f6c853d04a
MD5 0cb77e31fbbd049c81e73af85208096c
SHA1 30ee89d5fc39c11ab3115570381446806f8c86cb
SHA512 4a9da3983e001c8fc05eddd1385de0934572cb518f8177eb8d3ca6cb1fcf0d23a2b97047b4100f315e879e130a156c376e54c6536bbf8505d013e8a1c1117709
TLSH
T1D7F02E4E7FC262A334F5972A0818B448F7E41363554895407DEE43701F747E9E1B4E9D
MD5 SHA1 SHA512 TLSH

Submit Download

unittest.tmpl

Path C:\Program Files\BlueJ\lib\english\templates\newclass\unittest.tmpl
Size 770B
SHA256 9f832daca020216721efbee4695836247199ebd8ac3b3215fea43dd8ec74aa62
MD5 6f1b34f1b0b74eed617b7fdbd2ddd4a3
SHA1 635df1843ed7dd36210cc0f0e609e8fb286a4d49
SHA512 e060444fe06dd8109c582aacc59e3cd5ecdcdf11c3cc5352b4031d2bdab424dac16e331c2c13edbfd7b350cea9a02fbe8f6620bb73641046f497b073d7edc3df
TLSH
T15801472915C29733757283A886422194E327A3AB5A323180FDFE8B305FB2F5482A2C95
MD5 SHA1 SHA512 TLSH

Submit Download

javafx-base-23.0.2-win.jar

Path C:\Program Files\BlueJ\lib\javafx-base-23.0.2-win.jar
Size 738KB
SHA256 72f8958b4a552fca14ab3628c672f399aa68bbe6b4cd45107fe174b4670c7cb6
MD5 2eea376d7e6a3860cca5e7cfc0661776
SHA1 e44e750005596dc44ce37c07fc3b8c10da9ab354
SHA512 af754022c45ea3803dac8861948389982d046416afbdf01571492f9d12c521cce2e173175e43f5947aec304087422489a763c4fddf837c049b1258cbd32d1a05
SSDEEP 12288:C7M59OkuTsALWSQdotBHYT6gRwjwiIPbVBNjAuquG9ioO1dkIZYL9r:COA3e1wUiIrNkdt9ioO1dkIZ0
TLSH
T14CF4CF32F2C94764DCE3D3F56A955F93681C11FC937B21AA27EC8943E4329996F0230A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javafx-controls-23.0.2-win.jar

Path C:\Program Files\BlueJ\lib\javafx-controls-23.0.2-win.jar
Size 2.5MB
SHA256 874daf48b0ec01e4eb0caf24cdb85b32d951999837f8e1c285f6d1e1e34870ba
MD5 67e90092d12db62da705a89a421c5446
SHA1 ea7a2048ce6b344273affb916713120fe77fb1e8
SHA512 05f850ecba083319f23783c6953bfaf69bc72b6fd8b06cf156c1e9ec7080343a35ed95ca255c3c2b1b80111e515c0919c8bc188c2a5d4865b8007f76a0fc6f1a
SSDEEP 49152:W+mQ2JLM1VqbBh72ePSp46D7UzA1kVZDf0Y3W3vNMy+ix:jr12h9Excsk7AKW3VMNO
TLSH
T156C5D022FBBE4734DA63C1F87BC19F4BF4C8F6B8D206106620E85C82967545ED763626
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javafx-fxml-23.0.2-win.jar

Path C:\Program Files\BlueJ\lib\javafx-fxml-23.0.2-win.jar
Size 127KB
SHA256 bad2d0cb43e329513e86c41fc0c59015d3093d90cfce2dc637d4fdc302fa66de
MD5 860a2960b3256b0571c60f9ef06d8ae6
SHA1 b032052fc189c1c702cc9b01f416f7cae53674df
SHA512 2ec340c8a12a62e34cd7c5312cb5d6445d66f2e9e47d91f391e233d8f3d256f42363a58d87cc62cee776f9a291c19f6cd75a4b4a393fdcbe34de80128bd7c147
SSDEEP 3072:etsM2d7bovV9IGDHFGyHVBz06SH9l+NQs2WFyP:CsFdvoIGDEyjo99WFyP
TLSH
T191D3D033E7D8172ADCF3C2F6BA611F93212C51FC722B726E54B88C4652349969B52738
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javafx-graphics-23.0.2-win.jar

Path C:\Program Files\BlueJ\lib\javafx-graphics-23.0.2-win.jar
Size 5.8MB
SHA256 6b5b3041f2735508a8aad23c5795e745d5bf78a0a6aa920bae43ab41ec22d8c2
MD5 c74dcd216c3bd165e720ca630867f28c
SHA1 21ed994c9ba8a9d30099204c556e6dba3a23f169
SHA512 7824d75cd2aa71c906beea4a99c262a960ab3e8f690a4f044b05f06c36c5d564264eb9a57faf65e4f462058b52a298ee58b37f9c6511a0b9ee1dba3bb204f9a1
SSDEEP 98304:mULVucrod6znkVfiFRVc0YbcvoOfOm0YE6+i/AcsM498MGOB56UFjUFqxdhTwzx8:ZLVuKoA7kqicfIU+bcCGjUznyxXs
TLSH
T1F956F123E7DFC25ADC33C2F2B9825F53791C55BDD35A21BE14E90947A872C9E8722224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javafx-media-23.0.2-win.jar

Path C:\Program Files\BlueJ\lib\javafx-media-23.0.2-win.jar
Size 1.1MB
SHA256 eb2ae99397333094172ad73c7689b6a48ae59b2b7a0d80d571521214f4a770ec
MD5 2bd5be14e727067cb591a7d4027e967e
SHA1 b27f12b417de89f6fd6180a6540f6f26ab98a0ee
SHA512 719b3b5fbec161bb15d469aa590a9771c9fa099fefacad3da68fe9421ce48945b3d0efcfa076e15afd741160808a1c1c2fcea068648fd434d13d259148ad5480
SSDEEP 24576:PkbwNInunlEO6plHma42V7Pq77oq1DHpVSsgKJcvstBnQXPkt:ckNIN3mV2dc7lpVSsg+2stBQXPM
TLSH
T142352362DBCEC43AF82BE2FA7E83965230291C7D95063DB4BDC0630B54B56464BA3E45
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javafx-swing-23.0.2-win.jar

Path C:\Program Files\BlueJ\lib\javafx-swing-23.0.2-win.jar
Size 89KB
SHA256 875d14a5c2cf8ce04e5c48c39b5c9a3ff1d794820b8a473ec010af1c631afcb3
MD5 254c87a9df0a94964fa9e498a9b05395
SHA1 1d61c77af59fa5179ef2671772be10a8d0689a93
SHA512 992583397946b925d2842d3db32f7ffc6d22c1aec6a251f42fc3ca1c01388b9cc6094e7775fce11c102810275972a190d0311b1ec6b2465a64777e5d3d8057c3
SSDEEP 1536:LVFfR5G1Ud+vEfc1/uwmOGk+tDzSYFRPhjOnPN/kLnWWNjkk95o+:JFfiKdAX1R0k0+YFRPxOPmWskk951
TLSH
T1C293E023E30B5C37FD67D3B26DC2CED3603D84F4C0D5A29899B85AA5A0B5C1117236AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javafx-web-23.0.2-win.jar

Path C:\Program Files\BlueJ\lib\javafx-web-23.0.2-win.jar
Size 31.1MB
SHA256 a18008ae0d3df1b8046a99d44f761dd01cce279ae1539a7e4685263aec2ea5fc
MD5 809d9ffcfd1b87bd478396259c1c3af8
SHA1 9513d540da2e54cf7db3ac6ca1ef980ca91f25f5
SHA512 42ad9a9770036ec5652dff5e50f593dcc1ff1d229ae3f5e148a177b9e85b4938175e45cc7646b2aea19b38a9a0313ebea7c45faca94ca685e9017114e277ce22
SSDEEP 786432:Z5pKdQ9yU6Hrfc2AAgr+f/b9HFP4nx9aUHYpHBlEclPEddxpEV:Z5Aq8H4w9lw2UelEQElpY
TLSH
T1D26733DEE16CED96EC33A9708C88AAB25F19455CD4530A39A0DD4796C8F3BC9C3C624D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dataclass.kt.tmpl

Path C:\Program Files\BlueJ\lib\slovak\templates\newclass\dataclass.kt.tmpl
Size 208B
SHA256 b4e76ea267e77dcdaf195d4a4f17ef35fdf1717191413c7a516d6a132f15ac67
MD5 6107ac9fc0ea6d6db8d6c695a03beed6
SHA1 57a0aaa0312c2cb12781ae0a7b2156c905b372d1
SHA512 02c9a809cb96421ba63287f924a46d9359873392be5180c93c525adc877d871e7fe27a5f8d6dc3d8f718c6506f527dba354b798e13b280b72444881de717a343
TLSH
T1BAD0131DF50052736DF6413D18B2E144E1D157178511655DBDF9C0500FD4EEC9755DC5
MD5 SHA1 SHA512 TLSH

Submit Download

kotlinfile.kt.tmpl

Path C:\Program Files\BlueJ\lib\slovak\templates\newclass\kotlinfile.kt.tmpl
Size 352B
SHA256 47fad8e2e4569e04b3e8079068e2650c156008635a17f7e758ade2f9a4e9c1b3
MD5 7782625c4157d2779e87280cda3ad757
SHA1 265ff5e9e17f78388c5c21dfb87c202f2f47b55a
SHA512 730ef6aac283fa4903080bfaf33a6f46d8af762bf8579a27d5ed6516355cc35155b642c7383e8f37b40bd6b8a24e6a54467bb992849f302a194cbbc13a2469ff
TLSH
T1BFE026AD79C1624321722BB9648BB208E47472217D59B08D7AFB4AA07FA82A95110F88
MD5 SHA1 SHA512 TLSH

Submit Download

readme.tmpl

Path C:\Program Files\BlueJ\lib\spanish\templates\readme.tmpl
Size 480B
SHA256 7538aa6934cb76b96467297bb398d7b9b60877df54d87f2e0365632feeef5021
MD5 e0bd14ae2d3ad5777283895c2308d96d
SHA1 895d785810047c1ff08100d6adc6e972568b027e
SHA512 dc513e68614f48377b1ed4597b808ddc2b48bc8c7176081df0aab2ff98211bf190e84022215ca72cfd041b4adb4f2c3f204587fc97506d306cb2fe156a5902a3
TLSH
T1C5F0684D8DCDC7F4A148D08C69069D8EF58E572167A62520A012804C7CB45870ADF116
MD5 SHA1 SHA512 TLSH

Submit Download

interface.kt.tmpl

Path C:\Program Files\BlueJ\lib\swedish\templates\newclass\interface.kt.tmpl
Size 415B
SHA256 d6fca3164386b319f7ef0a439e30d37b5899e2d061f185685c2278a7968da3ba
MD5 200616ad41a7cb0580324ecd64af72f7
SHA1 de4809718e08640ad4a2c723a5f820d7ea210665
SHA512 8e7103017ac4172ef97fe77aea38e7596fa7ad625efae94f2183cb76bfbb08ff2b373d1fc5f4f88ec71e0d2e90b41ab2c767862ea1c92856427ac54253b5273d
TLSH
T138E068565FC6220334B887380842B800E6F49373158A10447DED01B41FF57F8E2A8FDC
MD5 SHA1 SHA512 TLSH

Submit Download

api-ms-win-core-console-l1-1-0.dll

Path C:\Users\Admin\.openjfx\cache\23.0.2+3\amd64\api-ms-win-core-console-l1-1-0.dll
Size 20KB
SHA256 89384f8f64a9b7f67c8deccaa721e2d76b8a17026d8083630859ed0cd1a9b58b
MD5 2c146bc8d73b8944f35506241b9953a9
SHA1 ac64abd745418cea35c0506b9cb0331b171b51ea
SHA512 02713948a156baccb2e7c38646193e82fef65400c086644866b698bc3e0a8c155a8eab829463e3868ce2b8a06608c5ea6de1e390bff976c5f92e2e42dd6c04f1
SSDEEP 384:WyWfhWoLm0Gf21MgKlx+YEL1MgKlx+YybT:AVRig8Xg8yf
TLSH
T151923AC38EBC9443EE976DB017A8D9837C3C9BC72910916515BAF5A91CC37D6EB0462C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 57a182e5330d9098a1efba99600ff6a56d6060c5f158bdce10f57dc079cca2aa
MD5 e7d15353339e4d2d099d18b8a3de153e
SHA1 155f7041dcbc7437e04d4f64976fbd765d8a3726
SHA512 aad426dc71bfc1dbe05110d91ac5c56515537763a9c9f6c3bd492572e21cbe69aadae89926631a0186ea57e33468ee4a3e5ebdc98ff8a5000b87d6260855cd16
TLSH
T148F0F4B9C921BC7B18FD1B2D60548B8BEB4513673680845B3A3D824D8FB8A3B468981C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 65f40db0a00245d66a9db38832c3b9c58ff9410968fa4f9f7cc4abe1b0dbead3
MD5 9067ef7ecc21463fa27e03a42fe9ff29
SHA1 435fb0aec06212e0542313a54e5c1fdb9e8b4fb2
SHA512 891a9345626e9d2f22bb8bdecb29d2f59fb178cb7d78e23b18cfdad8b20961f972527906a1f6ff19610c84f7ddf4f6251d44b8a1d205cc7e3e7f894ffb6b6073
TLSH
T105C0921E81482615D387BA72DDFA05742124091C4426AA15AAD2806AF1053B58200035
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 a2c9615543d2d279e8fe9d4c21edf58edf3f3818108e369f227f5975f8af698c
MD5 d18cbb5659a9cdc6b0a7122545b7a709
SHA1 ac3a31a684b1cdbb8761d86dc857d2b28fe26ac8
SHA512 b72fcbdabaf4590279d3570b91d95b1da2f09a1fe4373768c0fc9a8e0b42336a51fb55f225e86ee1b795ceb52dce8b916bf83a7b252210aa2847054cd8adbb54
SSDEEP 3:MsEllllkEthXllkl2zEklrNC:/M/xT02znrN
TLSH
T1284404447FC00405CD0430714115C37003F0D4141D115FC335D104175CD5DC00C00014
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 00a080961d8bb3ac6dbfa631a2b1f9ccd0e98263825f217a96b0c8b70b226c29
MD5 ae32a07ee0222d7a6dfce03c2f153a93
SHA1 b486b7a129964d4698209a44ccc62ac812079ae5
SHA512 7b2e04dee61e2ee26ed22397fef7631ed67660da317a13de03932b165aac6f0572b16b5e5b4e376b5bb9a74757f2a8983279749b9a4f787486e9963be9667ee7
TLSH
T1C581AFF7C3E8967D891156F5EB156F2ECE290914531C3C66C8E8AE1B93E28B1D34064E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 858B
SHA256 b4c68d67a6ca76bf2fde01f45fa1aebc5ae949cedcc5b786c083fc9bf4e84654
MD5 b283ef5add55d57463d6e1842a556be5
SHA1 9656507a15fa9e4c6d0ce7e8b9208eac4bb96c55
SHA512 ed1abb206e6ba1648ddf289d295c27b998cc4f2ec56158e3b85afaf0532d1e153417fab715dd8fac2d95a39e949bd315ff12da9b816d79c8d9f63fec4190afad
TLSH
T19611CEDB92BE7033613B89AB2D457C052EFAB435014618F4EE9B826CB0D2AF30F02413
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 802d032b2a89966a1d35ff8cf15fda119e20254e059be027592dc6d81756536b
MD5 6ec1f5359e4dc23029d8713333c4c234
SHA1 38f257805926856ddb2896cf015632e8aba25b6f
SHA512 0800a86ed1527feec8dc01c1b5e29d65deaf6b97576ccfa6b2510a9c1fba478e7247ba48ea9acc2243dc4ff14ecb7656608b07c2222ff00d128eabb3f2031efd
SSDEEP 192:hR5t/MV+Rav7GpAPRp2Q296Hsb+WNnX4Rt62PteZAVyIsnAUge:hR5t/F2CUXcswoW23e
TLSH
T19942732EBE10797B5CDBC229FA217B67E7F5102624942E44EAFC893C11E76CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 b359c22b07803ca9a88d1f728e81ef1c9e687041487a804dff07bd7959754345
MD5 f692c6dac15865bc31347ad9cde76536
SHA1 86805dfc85cfc43f8602bd055886a52f398ce74e
SHA512 f982677136a72fda5b2d23711481e3793dac41c5f3e3b1ac56dce6bbb06f17c979d60bff7f11004650ad64214201c5ee4038570058968abc3e902b8911d5b768
SSDEEP 192:hR5tCMV+Rav7GpAPRp2Q296Hsb+WNnX4Ro/YVteZwVyIsnAUgE:hR5tCF2CUXcswoSYBE
TLSH
T19042832EBE10797B5CDBD229FA217B57E7F5102620946E44EAFC8A3C11E76CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 2402969cd2ec72ea72b513389c43205a9ee2bceca1c456ef576613e3544e19a0
MD5 ef2f6beced6ed991eb5f4b124485b70c
SHA1 13ae98461b417e18835295fc68f98db326a5bad0
SHA512 5adbe06b2aba408c8975b2dfc7f1c8c160dc3367ebb5f8a049421cc510b871c0310b3c4cd24506c3615f6972ff559c98cb7cd22bc47816248c6501f19779082b
SSDEEP 384:tyjCjRyjH7KxkXqKf/pUZNCgVLH2Hfgslqq7pLuLceSzyjDXODRyjr+ErU3J6HG2:Ie0r7KxkXqKf/pUZNCgVLH2HfgsMq7pw
TLSH
T1A0720A77BC0C9A7B0F94C68CD8167E4FEDB5024B65D9886443FA983503D5BDA110A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 038d1aa72dfccb2acf675c02f205a4e06969a40f0c27f3b68a488feefb3ae7d5
MD5 82e965f52a2005f231b579e524c15f4f
SHA1 f50336639f8266e61e63cf0bb342e10fd1c4979f
SHA512 fb1e364cc8cd29f3b2b8d09defba5cd8eb75d9b03a94702e13cd252c25fe6b927a56d19de76ab2afed66956a6d1ba29f10cf98510bb5b72e748c56ca864386f6
TLSH
T1BFB0121681416326C40603701150A0B832F08F38D112138641E00F01C8351B2A067168
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591a35.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe591a35.TMP
Size 96B
SHA256 7ee4e887323f31db6403ef18fa01e54a7d529b1fb777d2d2021c3807f444fcb6
MD5 8bd2674b9eb013d028a4f74c90022a85
SHA1 e6b5a83f6f77b838ffa205b9ea32246a75d59ea7
SHA512 a51d3dea00e204dcc6801707c882f75b8fafba65833e72ef550e43d441060d370c0d2946f7cf5078c9fe716abba9805616c852cea7ad6c365f3bf6caac50451f
TLSH
T1B1B02202C2022323C00203B023C0A0E83030CF28C2230203C3F00A22EC22A3300200B0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 290999ba42e79b60cdba1e5c966452496f2f1d54f0f7b3c41f3a546464829458
MD5 717bfc050526ff90933d622a08353464
SHA1 502075c6263bdc809fa3b610307ea16d00792c8e
SHA512 2cd40e00b9149a83b294cbb693a6db623d5fc7d89d8ca243acb84de240b09b231eeaeb8b1afe81492f43dca3bf6d7a722ae23528b85d39015d1899c5b9734094
SSDEEP 3072:UO+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gB:UO+hFD+7t56OD9ZfSApprB
TLSH
T1F9D31232AA95D8B7C9FD6141B187A300CE766CEE45DE3A09444A5F8ED09F94C07B3A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 1ccfde6e0b221861a44eb11ab1604e052c9a92588793c85b2b260e4003806b1e
MD5 8b7587190efdc85a744dd5c88aac54c2
SHA1 457a9206a1d626a2e7876e2778b9f7019fd4a64c
SHA512 e0ac9e8ee52c0ab38c5525c721350b98ca3b55c50c64f5a2f8ecf76b57806acb9da05df6cc3305d63cafad080b602b2ed50d07d38ec9b90d33272732f95a4348
SSDEEP 3072:U6+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gB:U6+hFD+7t56OD9ZfSApprB
TLSH
T168D31232AA91D8BBC9BC6141B157A300DE76ACED45DE3A09444A5F8EE05FD4C07B3A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 368045d7d805210b99464ea313c0209ed92bbcf32e5aaeeb5ebabd7f2a6e2e47
MD5 746c90245c5e4d852744dfa93eb49535
SHA1 692de129aba474d1cafa32687e279e4fff190828
SHA512 d30bb3ad212d812ea537150b11d56d1b623d68752ed7620a0dfd031654a9325a618f8c56d342f48f12443f56b8c2c4ce1666a9709814a7ead5681199ea5aa54f
SSDEEP 3072:XO+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gB:XO+hFD+7t56OD9ZfSApprB
TLSH
T10ED31232AA95D8B7C9FD6141B143A300DE75ACEE45DE3A09444A5F8ED09F94C07B3A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 221KB
SHA256 c5898ce85a3ebd3bb8258b49272985eea09e8f5b3b77527c2bbc499c7a2419d8
MD5 8c6c844b7b0bb3956602655512207081
SHA1 5654a758a80753ba65bcf5243851be2ef742f6cb
SHA512 69431a97ea175b09a02d0148fca8bd227b1ecb3774ba8cabb1975caa590e03f938cb494a4ef4aff66a2259d950c9e218393864f94fde1fa58d1ac65fadd3002c
SSDEEP 6144:XQKqqYS8wSH4qSFKEe110jF+hFD+7t56OD9ZfSApprB:Tqe8wStaKEe11AyFSXD9ZfS4j
TLSH
T18A242322658988E7CAFC6055A287B3409E5859ED54783D0FC9885FCFE1AF8091793F37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSI9E3A.tmp

Path C:\Users\Admin\AppData\Local\Temp\MSI9E3A.tmp
Size 132KB
SHA256 7f47d98ab25cfea9b3a2e898c3376cc9ba1cd893b4948b0c27caa530fd0e34cc
MD5 cfbb8568bd3711a97e6124c56fcfa8d9
SHA1 d7a098ae58bdd5e93a3c1b04b3d69a14234d5e57
SHA512 860cbf3286ac4915580cefaf56a9c3d48938eb08e3f31b7f024c4339c037d7c8bdf16e766d08106505ba535be4922a87dc46bd029aae99a64ea2fc02cf3aec04
SSDEEP 3072:Kx2YbpcgwmiTPJDnCO+DATkURBnrskNwPj2:XXgwmY1CPx2XG2
TLSH
T1DBD39D02B5D0C473D9BE09390870DB229F7EB930DF909EDB636856699E702C19E35A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata-2

Path \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\System Volume Information\SPP\metadata-2
Size 24.1MB
SHA256 e602d96fbad0048f1797a32255d85e3d2802aeb1670e745a18c2e8ff249e7d08
MD5 b9ca62e68bef84eb50a1ee252f691929
SHA1 9cce04c0cd7d27ffc3a28e8f0937fcf222df616c
SHA512 879489c39e45fba11ceeb9abd78ec4745ec547588b9171de13e9d55705253a1fe6a5e44c4af04fe559f7038a56c2614510f581bdd95a48cfd0fc4396fe63b5c1
SSDEEP 24576:Zu8m+1z/doO/vvTLL2WezWqCHvkTel2y6gGNUJX1O0K3+x/L4vlvuwdhz:p
TLSH
T15047F42436F92210E7F39F3CA8F16A2B493A7D5B9C15DE8D05411F4E0921BB1E872F5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{d86182ab-a6bd-4eb6-bcc3-1226f2869dd4}_OnDiskSnapshotProp

Path \??\Volume{7d83d395-0000-0000-0000-d01200000000}\System Volume Information\SPP\OnlineMetadataCache\{d86182ab-a6bd-4eb6-bcc3-1226f2869dd4}_OnDiskSnapshotProp
Size 6KB
SHA256 116eed4df06c014f8327d5cec646a70d0cff87ba9a1b3ffbe267a81c50a4de60
MD5 658455985bc77391b50888fc4706029c
SHA1 a5a2335d89383b1ac7a8982bf526999c6721c001
SHA512 6026352d1e2df177fc13fa299ad5683031cf969b01574527aebd2aa971a387cf2c3390e44773ee060161ba463b1b9c2fa4d32407a35d03b014ae4f520e761fbf
SSDEEP 96:F8/TLmZ4T2kvc8DD84LTHzbOHXOHBlBRQ88Sc9XE56tOSVQpuN:CL1b++ZVmN
TLSH
T15FD198085AF54311E2B3AB7128F18557A877B811EF33CB8E0198238E6670A10F975F5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2776-1687-0x000001D1F3A60000-0x000001D1F8A2D000-memory.dmp

Download

memory/4636-1318-0x00007FF701850000-0x00007FF701947000-memory.dmp

Download