HOW TO BACK YOUR FILES

26:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/136wug8odqdqr.js"],"SampleDetailWrapper"] 2d:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 25:T4be,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Ransom.GlobeImposter.Generic Sample 686c6150f2a2… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 686c6150f2a2…. Malware family: Ransom.GlobeImposter.Generic. Threat score 100/100. 23/28 AV engines flagged this file. 6 malicious and 15 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/686c6150f2a254152602e48172bda75b4987fc7f48399c669f3313441a726e96","keywords":["Malicious","Ransom.GlobeImposter.Generic","malware analysis","sandbox report","threat intelligence","686c6150f2a254152602e48172bda75b4987fc7f48399c669f3313441a726e96"],"about":{"@type":"SoftwareApplication","name":"Graf_b2.exe","applicationCategory":["peexe","executable"],"identifier":"686c6150f2a254152602e48172bda75b4987fc7f48399c669f3313441a726e96","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Ransom.GlobeImposter.Generic","antivirusDetections":{"malicious":23,"total":28},"behavioralIndicators":{"malicious":6,"suspicious":15},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T51e,"Graf_b2.exe" read file "C:\Users\desktop.ini" "Graf_b2.exe" read file "C:\Users\Public\desktop.ini" "Graf_b2.exe" read file "C:\Users\Public\Videos\desktop.ini" "Graf_b2.exe" read file "C:\Users\Public\Videos\Sample Videos\desktop.ini" "Graf_b2.exe" read file "C:\Users\Public\Recorded TV\desktop.ini" "Graf_b2.exe" read file "C:\Users\Public\Recorded TV\Sample Media\desktop.ini" "Graf_b2.exe" read file "C:\Users\Public\Pictures\desktop.ini" "Graf_b2.exe" read file "C:\Users\Public\Pictures\Sample Pictures\desktop.ini" "Graf_b2.exe" read file "C:\Users\%OSUSER%\ntuser.ini" "Graf_b2.exe" read file "C:\Users\Public\Music\desktop.ini" "Graf_b2.exe" read file "C:\Users\%OSUSER%\Saved Games\desktop.ini" "Graf_b2.exe" read file "C:\Users\Public\Music\Sample Music\desktop.ini" "Graf_b2.exe" read file "C:\Users\Public\Libraries\desktop.ini" "Graf_b2.exe" read file "C:\Users\Public\Downloads\desktop.ini" "Graf_b2.exe" read file "C:\Users\Public\Documents\desktop.ini" "Graf_b2.exe" read file "C:\Users\Public\Desktop\desktop.ini" "Graf_b2.exe" read file "C:\Users\%OSUSER%\Videos\desktop.ini" "Graf_b2.exe" read file "C:\Users\%OSUSER%\Searches\desktop.ini" "Graf_b2.exe" read file "C:\Users\%OSUSER%\Pictures\desktop.ini" "Graf_b2.exe" read file "C:\Users\%OSUSER%\OneDrive\desktop.ini"28:T148b," HOW TO BACK YOUR FILES

Your personal ID

D4 8E 26 C7 63 F4 C6 A4 65 D1 33 15 F0 37 B4 63
A0 FD 38 6A 8C A7 3E CD 09 82 33 D5 1C D9 59 F7
95 BD 0B 72 CE E9 ED 5A 53 6E 01 48 DC 7B 2E 13
64 BB BA 09 3A 54 8F BF 51 A1 1C BE B0 51 30 C3
4C FC 34 4B EE 0D E6 D5 DA E1 2B C2 5B F5 4F 97
CE 21 A8 F9 F7 86 A2 D4 D7 88 7C 38 CC 5D 08 4A
E9 68 28 07 D4 9F 4C 94 76 04 74 37 A8 C2 3F A0
CD AE 0A 21 A7 D7 5C 4F 32 78 FC 7F B9 B8 1D DA
31 A1 E3 FA 5C ED 8C F1 EC 5B 9B 8B 67 DB C9 11
91 4A 4C 13 4E 27 DF C1 BB CF 34 0C 4A C8 7E CE
0A F7 17 7D 6B 05 A5 40 01 31 D8 24 EB 01 A3 F7
38 4D 69 9C 20 12 2A D7 6C 31 E7 E9 2C 15 19 3E
26 B2 50 FE 6F EF 28 4E A9 78 68 D1 A2 6B AF 3F
D3 8A 48 90 E4 A0 52 C0 7F E6 9E 6A E9 ED 70 42
D9 C4 22 1A EE C8 CA 7C 5E 60 7C FC 83 9E FD 3A
0C 61 55 4A 54 18 C3 F1 66 FC 26 C3 A7 EB EB E9

!!! dont changing this !!! -->

-->

tab-->

English

All your important data has been encrypted.

text data --> The only method of recovering files is to purchase an unique private decryptor.
Only we can give you this decryptor and only we can recover your files.
For fast data recovery and vulnerability removal, contact us by e-mail:

restorefiles666@protonmail.com

In case of no answer in 24 hours write us to this e-mail:

restorefiles666@cock.li

We guarantee full recovery after payment. To confirm the ability to return files, we decrypt one file for free. Attach to your email 1 test file. In the letter include your personal ID (look at the beginning of this document).

We will give you the decrypted file and assign the price for decryption all files.

After we send you instruction how to pay for decrypt and after payment you will receive a decryptor and instructions.

Attention!

Only restorefiles666@protonmail.com or restorefiles666@cock.li can decrypt your files.
Do not attempt to remove the program or run the anti-virus tools.
Attempts to self-decrypting files will result in the loss of your data.
Modify encrypted files will result in the loss of your data.
Decoders other users are not compatible with your data, because each encryption key unique and will result in the loss of your data.

text data -->

tab--> text data -->

tab--> " (Source: how_to_back_files.html, Indicator: "decrypt your files") "

Only restorefiles666@protonmail.com or restorefiles666@cock.li can decrypt your files.

" (Source: how_to_back_files.html, Indicator: "decrypt your files")29:T813,Found dropped filename "cp860.enc" which has been seen in the context of ransomware (Indicator: .ENC) Found dropped filename "cp862.enc" which has been seen in the context of ransomware (Indicator: .ENC) Found dropped filename "ebcdic.enc" which has been seen in the context of ransomware (Indicator: .ENC) Found dropped filename "cp1254.enc" which has been seen in the context of ransomware (Indicator: .ENC) Found dropped filename "cp864.enc" which has been seen in the context of ransomware (Indicator: .ENC) Found dropped filename "cp852.enc" which has been seen in the context of ransomware (Indicator: .ENC) Found dropped filename "cp866.enc" which has been seen in the context of ransomware (Indicator: .ENC) Found dropped filename "big5.enc" which has been seen in the context of ransomware (Indicator: .ENC) Found dropped filename "gb1988.enc" which has been seen in the context of ransomware (Indicator: .ENC) Found dropped filename "gb12345.enc" which has been seen in the context of ransomware (Indicator: .ENC) Found dropped filename "cp950.enc" which has been seen in the context of ransomware (Indicator: .ENC) Found dropped filename "cp932.enc" which has been seen in the context of ransomware (Indicator: .ENC) Found dropped filename "cp775.enc" which has been seen in the context of ransomware (Indicator: .ENC) Found dropped filename "cp936.enc" which has been seen in the context of ransomware (Indicator: .ENC) Found dropped filename "cp1253.enc" which has been seen in the context of ransomware (Indicator: .ENC) Found dropped filename "cp1251.enc" which has been seen in the context of ransomware (Indicator: .ENC) Found dropped filename "gb2312.enc" which has been seen in the context of ransomware (Indicator: .ENC) Found dropped filename "cp1252.enc" which has been seen in the context of ransomware (Indicator: .ENC) Found dropped filename "cp861.enc" which has been seen in the context of ransomware (Indicator: .ENC) Found dropped filename "euc-jp.enc" which has been seen in the context of ransomware (Indicator: .ENC)2a:T6d0,"Graf_b2.exe" opened "C:\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg" with delete access "Graf_b2.exe" opened "C:\autoexec.bat" with delete access "Graf_b2.exe" opened "C:\config.sys" with delete access "Graf_b2.exe" opened "C:\Users\desktop.ini" with delete access "Graf_b2.exe" opened "C:\Users\Public\desktop.ini" with delete access "Graf_b2.exe" opened "C:\Users\Public\Videos\desktop.ini" with delete access "Graf_b2.exe" opened "C:\Users\Public\Videos\Sample Videos\desktop.ini" with delete access "Graf_b2.exe" opened "C:\Users\Public\Videos\Sample Videos\Wildlife.wmv" with delete access "Graf_b2.exe" opened "C:\Users\Public\Recorded TV\desktop.ini" with delete access "Graf_b2.exe" opened "C:\Users\Public\Recorded TV\Sample Media\desktop.ini" with delete access "Graf_b2.exe" opened "C:\Users\Public\Recorded TV\Sample Media\win7_scenic-demoshort_raw.wtv" with delete access "Graf_b2.exe" opened "C:\Users\Public\Pictures\desktop.ini" with delete access "Graf_b2.exe" opened "C:\Users\Public\Pictures\Sample Pictures\Desert.jpg" with delete access "Graf_b2.exe" opened "C:\Users\Public\Pictures\Sample Pictures\desktop.ini" with delete access "Graf_b2.exe" opened "C:\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg" with delete access "Graf_b2.exe" opened "C:\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg" with delete access "Graf_b2.exe" opened "C:\Users\Public\Pictures\Sample Pictures\Koala.jpg" with delete access "Graf_b2.exe" opened "C:\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg" with delete access "Graf_b2.exe" opened "C:\Users\Public\Desktop\desktop.ini" with delete access "Graf_b2.exe" opened "C:\Users\Public\Pictures\Sample Pictures\Penguins.jpg" with delete access2b:Tce3,"p7z3P6gs/nM1]isDefinedArray::*lengthBasicArray::*getBasicArray::*isDefinedBasicArray::*lengthAllocator::*flushAllocator::*reallocMemAllocator::*freeMemAllocator::*allocMemValidateData::*test_3ValidateData::*test_2ValidateData::*test_1ScopeNode::*dumpScopeNode::*toStringScopeNode::*toScopeNodeScopeNode::*foldConstantsLabelNode::*dumpLabelNode::*toStringLabelNode::*toLabelNodeListNode::*dumpListNode::*toStringListNode::*foldConstantsListNode::*toListNodeTernaryNode::*dumpTernaryNode::*toStringTernaryNode::*toTernaryNodeTernaryNode::*foldConstantsBinaryNode::*dumpBinaryNode::*toStringBinaryNode::*toBinaryNodeBinaryNode::*foldConstantsUnaryNode::*dumpUnaryNode::*toStringUnaryNode::*toUnaryNodeUnaryNode::*foldConstantsNode::*dumpNode::*toStringNode::*toScopeNodeNode::*toLabelNodeNode::*toListNodeNode::*toTernaryNodeNode::*toBinaryNodeNode::*toUnaryNodeNode::*foldConstantsGlobalDialogs::*callScript::*storeScript::*getFileNameIDsScript::*getFileNameIDScript::*getFileNameScript::*getSourceScript::*isBinaryEngine::*restoreErrorEngine::*unprotectObjectEngine::*protectObjectEngine::*invalidateClassEngine::*getAPIEngine::*setDebuggerEngine::*getDebuggerEngine::*pollEngine::*suspendTimeoutEngine::*setTimeoutEngine::*isBusyEngine::*stopEngine::*getDispatcherEngine::*addDispatcherEngine::*cancelTasksEngine::*cancelTaskEngine::*scheduleTaskEngine::*fillArrayEngine::*makeArrayEngine::*evalEngine::*compileEngine::*convertToScalarEngine::*getClassInfoEngine::*callEngine::*putEngine::*getEngine::*enumPropertiesEngine::*gcEngine::*lockGCEngine::*deletePropertiesEngine::*deleteObjectEngine::*invalidateObjectEngine::*findObjectEngine::*resetEngine::*goodEngine::*getErrorEngine::*getErrorInfoEngine::*setErrorEngine::*clearErrorEngine::*setStackLimitEngine::*getStackLimitEngine::*setDictionaryEngine::*getDictionaryEngine::*cloneDispatcher::*getClassInfoDispatcher::*getEnumerablePropertiesDispatcher::*getPropertiesDispatcher::*callDispatcher::*putDispatcher::*getDispatcher::*getEnumNamesDispatcher::*hasPropertyEsDebugger::*hideEsDebugger::*writeEsDebugger::*pollEsDebugger::*stopEsDebugger::*startCallback::*engineNotifyCallback::*isValidClassNameCallback::*getClassObjectCallback::*undefinedErrorCallback::*leaveDebugModeCallback::*enterDebugModeCallback::*runtimeErrorCallback::*garbageCollectingCallback::*running.datvtable-vtabletBXBHDA@ugRSDS\TJ-HdnExtendScript.pdb <<=$=\= @< @@=P=$=\=< @x===< @x=X ====X @=x @>$>,>x @> \>l>>>$=\= @\> @>>>$=\= >>?$=\= @> $=\=`!@8@!@@@|@>$=\=!@@@A>$=\=!@@!@0A@AA>$=\=!hAxAAA>$=\=!@hA"@AAA>$=\=<"BB$B@B$=\=<"@Bd"@\BlB@B$=\="BBB|@>$=\="@B"BBCA>$=\="@B"@CPChCA>$=\="@@C&CCCC$=\==&@C&@CDC$=\==&0D@DTDpD$=\=&@0D'@DDpD$=\=('DDD$=\=('@DL'E E0E$=\=L'@E&Ct'tEEEE?$=\=?t'@tE'@EEE?$=\=?t'tE'(F8FHF$=\='@(F'xFFF$=\='@xF(FFF=G(@F((@ G0G8G((@ GL(hGxGG$=\=L(@hGp(GGGG$=\=p(@G(@H$HG$=\='E'E(pHHHE?$=\=?(@pH(pH)HHI$=\=)@H !? !?8)XIhIxI$=\=8)@XI\)III$=\=\)@I|)IJJI$=\=|)@I)LJ\JpJI$=\=)@LJ)JJJI$=\=)@J)JKK,K)@J*@HKXK,K0*tKKK$=\=0*@tKT*KKK>$=\=T*@K|*L(L8L$=\=|*@L*hLxLLF=G*@hL*LLLL$=\=*@L+@M(ML$=\=(+LM\MMM>$=\=MMN(+@LMH+@MMM>$=\=Mx @>((@ G@!@?(+LMh+\NlN|N$=\=h+@\N+NNNN+@N+@OON'D+@OPO`O$=\=+@@O+OOO$=\=+@O,OOP P$=\=,@O@,@$=\=MMcGu|sG9HNo"2c:T570,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1d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$25"}}],["$","$L26",null,{"initialData":{"schema_version":"1.0.15","sha256":"686c6150f2a254152602e48172bda75b4987fc7f48399c669f3313441a726e96","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"malicious","threat_score":100,"unified_at_epoch_ms":1790720332822,"unified_at":"2026-09-29T22:18:52.822Z","metadata":{"hashes":{"sha256":"686c6150f2a254152602e48172bda75b4987fc7f48399c669f3313441a726e96","sha1":"03cbffb4e26f4f0faae2a5728496a10b6313cf29","md5":"30f8b6efe2d4d59680e8c5028a6a3aa8","sha512":"292ff52fd9f1c3207b012f98e668fe4097870649c983c068370168dd3ef58102d44f3cb123a3e300c3131113d7378aacafd7786b2eb4f4b3f8c5f73dd9f82870","ssdeep":"768:ahrvuye1kVtGBk6P/v7nWlHznbkVwrEKD9yDwxVSHrowNI2tG6o/t84B5QMYwEzP:0eytM3alnawrRIwxVSHMweio3UH","ssdeep_chunks":["768:ahrvuye","768:hrvuye1","768:rvuye1k","768:vuye1kV","768:uye1kVt","768:ye1kVtG","768:e1kVtGB","768:1kVtGBk","768:kVtGBk6","768:VtGBk6P","768:tGBk6P/","768:GBk6P/v","768:Bk6P/v7","768:k6P/v7n","768:6P/v7nW","768:P/v7nWl","768:/v7nWlH","768:v7nWlHz","768:7nWlHzn","768:nWlHznb","768:WlHznbk","768:lHznbkV","768:HznbkVw","768:znbkVwr","768:nbkVwrE","768:bkVwrEK","768:kVwrEKD","768:VwrEKD9","768:wrEKD9y","768:rEKD9yD","768:EKD9yDw","768:KD9yDwx","768:D9yDwxV","768:9yDwxVS","768:yDwxVSH","768:DwxVSHr","768:wxVSHro","768:xVSHrow","768:VSHrowN","768:SHrowNI","768:HrowNI2","768:rowNI2t","768:owNI2tG","768:wNI2tG6","768:NI2tG6o","768:I2tG6o/","768:2tG6o/t","768:tG6o/t8","768:G6o/t84","768:6o/t84B","768:o/t84B5","768:/t84B5Q","768:t84B5QM","768:84B5QMY","768:4B5QMYw","768:B5QMYwE","768:5QMYwEz","768:QMYwEzP","1536:ahrvuye","1536:hrvuye1","1536:rvuye1k","1536:vuye1kV","1536:uye1kVt","1536:ye1kVtG","1536:e1kVtGB","1536:1kVtGBk","1536:kVtGBk6","1536:VtGBk6P","1536:tGBk6P/","1536:GBk6P/v","1536:Bk6P/v7","1536:k6P/v7n","1536:6P/v7nW","1536:P/v7nWl","1536:/v7nWlH","1536:v7nWlHz","1536:7nWlHzn","1536:nWlHznb","1536:WlHznbk","1536:lHznbkV","1536:HznbkVw","1536:znbkVwr","1536:nbkVwrE","1536:bkVwrEK","1536:kVwrEKD","1536:VwrEKD9","1536:wrEKD9y","1536:rEKD9yD","1536:EKD9yDw","1536:KD9yDwx","1536:D9yDwxV","1536:9yDwxVS","1536:yDwxVSH","1536:DwxVSHr","1536:wxVSHro","1536:xVSHrow","1536:VSHrowN","1536:SHrowNI","1536:HrowNI2","1536:rowNI2t","1536:owNI2tG","1536:wNI2tG6","1536:NI2tG6o","1536:I2tG6o/","1536:2tG6o/t","1536:tG6o/t8","1536:G6o/t84","1536:6o/t84B","1536:o/t84B5","1536:/t84B5Q","1536:t84B5QM","1536:84B5QMY","1536:4B5QMYw","1536:B5QMYwE","1536:5QMYwEz","1536:QMYwEzP","768:0eytM3a","768:eytM3al","768:ytM3aln","768:tM3alna","768:M3alnaw","768:3alnawr","768:alnawrR","768:lnawrRI","768:nawrRIw","768:awrRIwx","768:wrRIwxV","768:rRIwxVS","768:RIwxVSH","768:IwxVSHM","768:wxVSHMw","768:xVSHMwe","768:VSHMwei","768:SHMweio","768:HMweio3","768:Mweio3U","768:weio3UH"],"imphash":"ba2ce247fa49357770ce28f139e2f1ab"},"file_info":{"file_name":"Graf_b2.exe","file_type":["peexe","executable"],"file_type_id":"exe","file_size":55296,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1554112549000,"last_seen":1647925799000,"last_multi_scan":1647925799000}},"detections":{"summary":{"verdict":"malicious","score":100,"tags":["criminal","pscrypt","ransomware"]},"stats":{"av":{"malicious_count":23,"suspicious_count":0,"total_engines":28},"attributions":{"malware_families_count":1,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":6},"sandbox_signatures":{"informative_count":7,"suspicious_count":15,"malicious_count":6,"total":28},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"aegislab":{"name":"AegisLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ahnlab":{"name":"AhnLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"malicious","threat_name":"Trojan[Ransom]/Win32.GlobeImposter","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"malicious","threat_name":"TR/Crypt.XPACK.Gen","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"malicious","threat_name":"Generic.Ransom.GlobeImposter.D855A6F8","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bytehero":{"name":"ByteHero","success":true,"verdict":"malicious","threat_name":"Virus.Win32.Heur.c","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"comodo":{"name":"Comodo","success":true,"verdict":"malicious","threat_name":"TrojWare.Win32.Necne.AB","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"crowdstrike":{"name":"CrowdStrike","success":true,"verdict":"malicious","threat_name":"win/malicious_confidence_100% (W)","status":"malicious","progress":100,"data_source":"CrowdStrike","permalink":"https://www.crowdstrike.com/en-us/platform/endpoint-security/"},"cyren":{"name":"Cyren","success":true,"verdict":"malicious","threat_name":"W32/S-0a10191d!Eldorado","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"malicious","threat_name":"Generic.Ransom.GlobeImposter.D855A6F8 (B)","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"malicious","threat_name":"a variant of Win32/Filecoder.FV trojan","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ikarus":{"name":"IKARUS","success":true,"verdict":"malicious","threat_name":"Trojan-Ransom.GlobeImposter","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"malicious","threat_name":"Trojan ( 00502c261 )","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"kaspersky":{"name":"Kaspersky","success":true,"verdict":"malicious","threat_name":"HEUR:Trojan.Win32.Generic","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"mcafee":{"name":"McAfee","success":true,"verdict":"malicious","threat_name":"Globelmposter!30F8B6EFE2D4","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"nanoav":{"name":"NANOAV","success":true,"verdict":"malicious","threat_name":"Trojan.Win32.Encoder.faecqn","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"quickheal":{"name":"Quick Heal","success":true,"verdict":"malicious","threat_name":"Trojan.Mauvaise.SL1","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"malicious","threat_name":"Confidence_99","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"malicious","threat_name":"Troj/Ransom-EVE","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"symantec":{"name":"Symantec","success":true,"verdict":"malicious","threat_name":"Ransom.Cryptolocker","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicro":{"name":"Trend Micro","success":true,"verdict":"malicious","threat_name":"Ransom_.7E15F4D8","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicrohousecall":{"name":"Trend Micro HouseCall","success":true,"verdict":"malicious","threat_name":"Ransom_.7E15F4D8","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"malicious","threat_name":"Trojan.Win32.Encoder.RBV","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"virusblokada":{"name":"VirusBlokAda","success":true,"verdict":"malicious","threat_name":"BScope.Trojan.Encoder","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"xvirusantimalware":{"name":"Xvirus Anti-Malware","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"zillya":{"name":"Zillya!","success":true,"verdict":"malicious","threat_name":"Trojan.Generic.Win32.463895","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{"malware_families":[{"value":"Ransom.GlobeImposter.Generic","sources":[{"report_type":"quickscan","report_id":""}]}]},"mitre_attacks":[{"tactic":"Persistence","technique":"Registry Run Keys / Start Folder","attack_id":"T1060","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1060","identifiers":[{"type":"suspicious","value":"Modifies auto-execute functionality by setting/creating a value in the registry"}],"sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"tactic":"Persistence","technique":"Kernel Modules and Extensions","attack_id":"T1215","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1215","identifiers":[{"type":"informative","value":"Opens the Kernel Security Device Driver (KsecDD) of Windows"}],"sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"tactic":"Discovery","technique":"Query Registry","attack_id":"T1012","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1012","identifiers":[{"type":"suspicious","value":"Reads the cryptographic machine GUID"}],"sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"tactic":"Discovery","technique":"Security Software Discovery","attack_id":"T1063","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1063","identifiers":[{"type":"suspicious","value":"Possibly checks for the presence of an Antivirus engine"}],"sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"tactic":"Collection","technique":"Email Collection","attack_id":"T1114","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1114","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"tactic":"Persistence","technique":"Hooking","attack_id":"T1179","attack_id_wiki":"https://attack.mitre.org/wiki/Technique/T1179","identifiers":[{"type":"suspicious","value":"Installs hooks/patches the running process"}],"sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]}],"sandbox_signatures":[{"level":"informative","category":"Anti-Detection/Stealthyness","name":"Contains ability to lookup its own filename","description":"PathFindFileNameW@SHLWAPI.DLL at 00036438-00001760-34053-33-00409C57\n PathFindFileNameW@SHLWAPI.DLL at 00036438-00001760-34053-120-004096D7","origin":"Hybrid Analysis Technology","relevance":5,"id":"stream-65","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"level":"informative","category":"Environment Awareness","name":"Possibly tries to detect the presence of a debugger","description":"GetProcessHeap@KERNEL32.DLL at 00036438-00001760-34053-60-0040278D\n GetProcessHeap@KERNEL32.DLL at 00036438-00001760-34053-11-00402765\n GetProcessHeap@KERNEL32.DLL at 00036438-00001760-34053-14-0040274B\n GetProcessHeap@KERNEL32.DLL at 00036438-00001760-34053-58-00402779","origin":"Hybrid Analysis Technology","relevance":1,"id":"stream-31","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"level":"informative","category":"Installation/Persistance","name":"Dropped files","description":"\"autoexec.bat\" has type \"data\"\n \"1LoWM7zNlVq8h.exe\" has type \"data\"\n \"dSTEZHvd.doc\" has type \"data\"\n \"3TXw.exe\" has type \"data\"\n \"h8fg9WRouk.doc\" has type \"data\"\n \"airappinstaller.exe\" has type \"data\"\n \"dsYny5bq4UJV.doc\" has type \"data\"\n \"Ho7euGVfWh.doc\" has type \"data\"\n \"Desktop.lnk\" has type \"data\"\n \"easy_install-3.6.exe\" has type \"data\"\n \"hgUOm8vUl.doc\" has type \"data\"\n \"dh1024.pem\" has type \"data\"\n \"cacert.pem\" has type \"data\"\n \"activate.bat\" has type \"0420 Alliant virtual executable common library not stripped\"\n \"giDj6Q.doc\" has type \"data\"\n \"Graf_b2.exe\" has type \"PE32 executable (GUI) Intel 80386 for MS Windows\"\n \"empty.vbs\" has type \"data\"\n \"DP001GCJ.doc\" has type \"data\"\n \"FjTsWkpkM.exe\" has type \"data\"\n \"CJ8ZksCqfYdg3Ha.exe\" has type \"data\"","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"level":"informative","category":"Installation/Persistance","name":"Touches files in the Windows directory","description":"\"Graf_b2.exe\" touched file \"%WINDIR%\\System32\\rsaenh.dll\"\n \"Graf_b2.exe\" touched file \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\"","origin":"API Call","relevance":7,"id":"api-55","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"Heuristic match: \"Microsoft.NET\"","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"level":"informative","category":"System Security","name":"Opens the Kernel Security Device Driver (KsecDD) of Windows","description":"\"Graf_b2.exe\" opened \"\\Device\\KsecDD\"","origin":"API Call","mitre_attack_id":"T1215","relevance":10,"id":"api-37","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"level":"suspicious","category":"Anti-Detection/Stealthyness","name":"Possibly checks for the presence of an Antivirus engine","description":"\"COMODO\" (Indicator: \"comodo\")\n \"Kaspersky Lab\" (Indicator: \"kaspersky\")\n \"McAfee\" (Indicator: \"mcafee\")\n \"Avira\" (Indicator: \"avira\")\n \"Avast\" (Indicator: \"avast\")\n \"Symantec\" (Indicator: \"symantec\")","origin":"File/Memory","mitre_attack_id":"T1063","relevance":3,"id":"string-8","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"level":"suspicious","category":"Anti-Detection/Stealthyness","name":"Queries kernel debugger information","description":"\"Graf_b2.exe\" at 00036438-00001760-00000105-4235032157","origin":"API Call","relevance":6,"id":"api-10","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"level":"suspicious","category":"Environment Awareness","name":"Found a dropped file containing the Windows username (possible fingerprint attempt)","description":"Found dropped filename \"HAPUBWS-PC-20171203-1827.log\" containing the Windows username \"HAPUBWS\"\n Found dropped filename \"HAPUBWS-PC-20171204-1724.log\" containing the Windows username \"HAPUBWS\"\n Found dropped filename \"HAPUBWS-PC-20171203-1827a.log\" containing the Windows username \"HAPUBWS\"\n Found dropped filename \"HAPUBWS.contact\" containing the Windows username \"HAPUBWS\"\n Found dropped filename \"HAPUBWS-PC-20171203-1827b.log\" containing the Windows username \"HAPUBWS\"","origin":"Binary File","relevance":5,"id":"binary-19","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"level":"suspicious","category":"Environment Awareness","name":"Reads the cryptographic machine GUID","description":"\"Graf_b2.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")","origin":"Registry Access","mitre_attack_id":"T1012","relevance":10,"id":"registry-1","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"level":"suspicious","category":"General","name":"Reads configuration files","description":"$27","origin":"API Call","relevance":4,"id":"api-6","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"level":"suspicious","category":"Installation/Persistance","name":"Drops executable files","description":"\"activate.bat\" has type \"0420 Alliant virtual executable common library not stripped\"\n \"Graf_b2.exe\" has type \"PE32 executable (GUI) Intel 80386 for MS Windows\"","origin":"Binary File","relevance":10,"id":"binary-1","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"level":"suspicious","category":"Installation/Persistance","name":"Modifies auto-execute functionality by setting/creating a value in the registry","description":"\"Graf_b2.exe\" (Access type: \"CREATE\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE\")\n \"Graf_b2.exe\" (Access type: \"SETVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE\"; Key: \"BROWSERUPDATECHECK\"; Value: \"%LOCALAPPDATA%\\Graf_b2.exe\")","origin":"Registry Access","mitre_attack_id":"T1060","relevance":8,"id":"registry-0","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"level":"suspicious","category":"Ransomware/Banking","name":"Detected indicator that file is ransomware","description":"$28","origin":"File/Memory","relevance":7,"id":"string-13","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"level":"suspicious","category":"Ransomware/Banking","name":"The analysis extracted file with a known ransomware suffix","description":"$29","origin":"Binary File","relevance":10,"id":"binary-22","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"level":"suspicious","category":"Ransomware/Banking","name":"The input sample dropped very many files","description":"The input sample dropped 2000 files (often an indicator for ransomware)","origin":"Binary File","relevance":5,"id":"binary-10","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"level":"suspicious","category":"System Destruction","name":"Opens file with deletion access rights","description":"$2a","origin":"API Call","relevance":7,"id":"api-25","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Entrypoint in PE header is within an uncommon section","description":"\"686c6150f2a254152602e48172bda75b4987fc7f48399c669f3313441a726e96.bin\" has an entrypoint in section \".rdata\"\n \"Graf_b2.exe\" has an entrypoint in section \".rdata\"","origin":"Static Parser","relevance":10,"id":"static-4","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Imports suspicious APIs","description":"RegCreateKeyExW\n RegCloseKey\n RegOpenKeyExW\n CopyFileW\n GetModuleFileNameW\n GetDriveTypeA\n GetFileAttributesW\n GetTempFileNameW\n GetFileSizeEx\n CreateThread\n FindNextFileW\n GetTempPathW\n FindFirstFileW\n WriteFile\n CreateFileW\n CreateProcessW\n Sleep\n ShellExecuteExW","origin":"Static Parser","relevance":1,"id":"static-1","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"level":"malicious","category":"Anti-Detection/Stealthyness","name":"Creates a resource fork (ADS) file (often used to hide data)","description":"\"Graf_b2.exe\" created file \"%LOCALAPPDATA%\\Graf_b2.exe:Zone.Identifier\"","origin":"API Call","relevance":8,"id":"api-19","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"level":"malicious","category":"External Systems","name":"Sample was identified as malicious by a large number of Antivirus engines","description":"54/69 Antivirus vendors marked sample as malicious (78% detection rate)","origin":"External System","relevance":10,"id":"avtest-3","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"level":"malicious","category":"External Systems","name":"Sample was identified as malicious by at least one Antivirus engine","description":"54/69 Antivirus vendors marked sample as malicious (78% detection rate)","origin":"External System","relevance":8,"id":"avtest-0","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"level":"malicious","category":"General","name":"The analysis extracted a file that was identified as malicious","description":"54/69 Antivirus vendors marked dropped file \"Graf_b2.exe\" as malicious (classified as \"Generic.Ransom.GlobeImposter\" with 78% detection rate)","origin":"Binary File","relevance":10,"id":"binary-11","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"level":"malicious","category":"Unusual Characteristics","name":"References BIOS/BOOT related strings","description":"\"ntldr\"","origin":"File/Memory","relevance":9,"id":"string-0","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"level":"informative","category":"General","name":"Contains PDB pathways","description":"$2b","origin":"File/Memory","relevance":1,"id":"string-7","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"level":"suspicious","category":"Environment Awareness","name":"Possibly tries to implement anti-virtualization techniques","description":"\"Y^[]Ujh{dPSVWDA3PEdMPhbox ME$EPMMQEMu8t~M@f;tkhMtY8VEjEP@uMQBMQtButBMEMEMd\" (Indicator: \"qemu\")","origin":"File/Memory","relevance":4,"id":"string-1","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"level":"suspicious","category":"Unusual Characteristics","name":"Installs hooks/patches the running process","description":"\"Graf_b2.exe\" wrote bytes \"711162027a3b6102ab8b02007f950200fc8c0200729602006cc805001ecd5e027d265e02\" to virtual address \"0x74DD07E4\" (part of module \"USER32.DLL\")","origin":"Hook Detection","mitre_attack_id":"T1179","relevance":10,"id":"hooks-8","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"level":"malicious","category":"Unusual Characteristics","name":"Checks for a resource fork (ADS) file","description":"\"Graf_b2.exe\" checked file \"C:\\Graf_b2.exe:Zone.Identifier\"","origin":"API Call","relevance":5,"id":"api-35","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]}],"incidents":[{"name":"Ransomware","details_count":2,"details":[{"detail":"The analysis extracted file with a known ransomware suffix"},{"detail":"Detected indicator that file is ransomware"}],"sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"Persistence","details_count":1,"details":[{"detail":"Modifies auto-execute functionality by setting/creating a value in the registry"}],"sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"Fingerprint","details_count":3,"details":[{"detail":"Queries kernel debugger information"},{"detail":"Found a dropped file containing the Windows username (possible fingerprint attempt)"},{"detail":"Reads the cryptographic machine GUID"}],"sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"Evasive","details_count":1,"details":[{"detail":"Possibly checks for the presence of an Antivirus engine"}],"sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]}]},"activity":{"stats":{"process_count":1,"spawned_processes_count":1,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":0,"imported_dlls_count":22,"dropped_files_count":0,"extracted_files_count":391,"files_written_count":100,"files_deleted_count":0,"registry_keys_created_count":1,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":1,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":0,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":["criminal","pscrypt","ransomware"],"sample_flags":["Extracted Files"],"sandbox_reports":[{"id":"5cb797b40288381186229014","environment_id":120,"environment_description":"Windows 7 64 bit","state":"SUCCESS","verdict":"malicious","threat_score":100,"malware_family":"Generic.Ransom.GlobeImposter","submit_name":"Graf_b2.exe","analysis_start_time":"2019-04-17T21:16:50+00:00","indicators_count":{"informative":5,"suspicious":14,"malicious":6},"tags":["Extracted Files"],"is_in_unified_schema":true},{"id":"5ca1e025028838ca169fe800","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"malicious","threat_score":100,"malware_family":"Generic.Ransom.GlobeImposter","submit_name":"Graf_b2.exe","analysis_start_time":"2019-04-01T09:46:31+00:00","indicators_count":{"informative":6,"suspicious":15,"malicious":6},"tags":["Extracted Files"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":null,"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}],"processes":[{"pid":1760,"ppid":0,"name":"Graf_b2.exe","command_line":"","sha256":"686c6150f2a254152602e48172bda75b4987fc7f48399c669f3313441a726e96","normalized_path":"C:\\Graf_b2.exe","uid":"00036438-00001760","icon":"$2c"}],"all_imported_dlls":["cryptbase.dll","advapi32.dll","rpcrt4.dll","cryptsp.dll","msvcrt.dll","gdi32.dll","usp10.dll","imm32.dll","user32.dll","lpk.dll","ntdll.dll","KernelBase.dll","shlwapi.dll","rsaenh.dll","sechost.dll","shell32.dll","kernel32.dll","msctf.dll","wow64cpu.dll","wow64.dll","sspicli.dll","wow64win.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"Graf_b2.exe","sha256":"686c6150f2a254152602e48172bda75b4987fc7f48399c669f3313441a726e96","verdict":"malicious","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"how_to_back_files.html","sha256":"5f435c96dd163a80bef4d4dccb0a6baf70e9b845245e277c5ab128500212f202","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"addonStartup.json.lz4","sha256":"0723d5c17958a5fdf306d11c8bca81d29e76095ac0312c5322c0eedade14cc7b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"blocklist.xml","sha256":"dc8e0c7df1ecfb8a8a9b8a2a45d0c31fbb9a00a0595a94e9bfcfcfd590364d30","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"addons.json","sha256":"81c73845378ae0077a3af6773797b14e11f1dcaa70dd2849f44dc0dde2514185","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"cert8.db","sha256":"d659bbdcd55419847285458bd46e91a98de7dba316adc79cc7dd226675b1ba1f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"compatibility.ini","sha256":"e334d3c8119bf25426d46f912e4cda7b9f4dfeb073554892bd0dc5ba2f6ba64d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"containers.json","sha256":"cccbd314517027e9f5a4476c55858aec1d9ce0e2a9078e9b4c1bdf5eb0e756b6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"content-prefs.sqlite","sha256":"20f663b642fd0143289d24d9a4527a440767a16875f97694ee7d63382ca0925f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"cookies.sqlite","sha256":"aff6c3bcead0d723d2be22a2010a60c5620c83dd746a1e0740527166b2b7b05a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"1553126679456.b32d95ef-f694-4066-846e-aeb0095efd15.main.jsonlz4","sha256":"181a67256bc1ed5cac7f3b507700f5573ce5f1ed81c0e4eb44737b9c0982ddf6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"1553184347460.1343118b-ab04-4f74-8691-56194940ed13.main.jsonlz4","sha256":"f122a71ecec1c5e80525c80409370e146fcbb61df649405992e1b478d3cb4173","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"extensions.json","sha256":"a21769d93779a0b9a3038af4abd91815ec3288b51cf1a9d0709250a508eec16a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"gmpopenh264.info","sha256":"df27865fd808ef283a7016623682cf73dae5382d17048806bbf175c8d3556543","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"handlers.json","sha256":"6e70d27bd6ae0c5d20867cbffd6e55f93376686efddbcae2619211b58848c87e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":".metadata","sha256":"696a720312c855fc139be4b8d2c31764a7d3ac0c8541f6744be6cbe7d7756240","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":".metadata-v2","sha256":"9528f732ba3ede8fdd2e032f5b5d7a73bb1e80f28bda4c3e5270a2b2be1a1e7a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"2","sha256":"560ea512053dba2ebe88b39e3a7fe360af80095fc830546ddaecfec7eaec4589","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"3312185054sbndi_pspte.sqlite","sha256":"9aa4f9c1a3ac151bc956c0d05ca4da996993e9f59b070c459833fcb52fdbc871","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"5359038EF31D6BB9FC36AE857F24D55576B34077106420F2721B3620D655106B","sha256":"f8f2c67c2735753951228847a5e94a4962d69ee6c5800cd498e67b4b506d3f8d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"Acrobat Reader DC.lnk","sha256":"04b05e39e54f2dc19c756f2ac46742505fb4f0bb7cc31d88344b9668df7f4ace","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"0YdED8h4YnKljVf.doc","sha256":"2e3adde8fb026bb48cf8e2044d832303415e05620b17fd3681f511d9573e3294","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"1LoWM7zNlVq8h.exe","sha256":"ddaefa293926137ae6e75a3129143cace45889e06d83e50993873063b67df742","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"3TXw.exe","sha256":"d0953b8a2e63974473601f9488927ee77318c72ec1dbd2f66cec688a402f8631","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"3VBXaPVG.exe","sha256":"5f0499248084676e8eb8a9ea8dd06c487d2f691beed3b492cfd101bd9fd69f82","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"3kNG.exe","sha256":"0b3d0c5e9bc10dca09f71f319bd2e29125f1a66d24e445ecbc4aed4a3c6fb5da","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"6JQvD1.exe","sha256":"5eb20a423681b412982697b47dcc9a97d39652d22273f00212d481c9735caf2d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"7GXTVgCwg.exe","sha256":"1a745fe12b761dbe26aa9a26b53a7d0ff79958b7b7d821cda2822030eebe8f26","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"A6a4k093.exe","sha256":"2c41f551195b626d21d71f8bd880169355a540515a1ed47a78659c5f4cf6c324","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"AMrt2OL.exe","sha256":"7b4a833e0b0ab77de107458da1ee2052b26a6efaa76177b9af93ca7affee1c3a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"Byf3DiB7aX.doc","sha256":"3b793af5a1a2821f3dea372375a4572846fc4e85cd7360f2267fcb56122e7b08","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"CJ8ZksCqfYdg3Ha.exe","sha256":"20d801f71aae69ceb728ae19bc555a1a6bb9801505198974e4efc4ef03c7ab14","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"CspyTJgM.exe","sha256":"c0242817dcf8f9e493cf88a9bc3afb8a92dbb64a258edc02b973d79d7758296e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"D1JACuX.exe","sha256":"dd3c2b089e51f16340f7975d781fa6f0951dfcad3737bafe9d85caddc16ca0c8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"DP001GCJ.doc","sha256":"76a02b856917aed8fe4081ce6f990b463e093648d013e82be82b5d6acbd1ea9f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"DcNNjRAkEraNbP.doc","sha256":"d6721353368a1aa8c2c36a975194bb02e416ecc307803bdd1c1a8a616692c2f1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"E68SD0Ky01dhTr.exe","sha256":"831adf34092284d4ecf2fa5b3c77383efbf0f1a0fb8f3da10f63b36721a6cbf6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"EW9C2p.exe","sha256":"9487c7b3d81816792a0a4f00209e5331992e3c32272ca59269576ad5b124ec4f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"EatIg.exe","sha256":"a2d81c873bbe8b8fdf656f348bdd6a0c59ba83cee17d9d53bd09c8a4e3e24d21","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"F3ECcNeSSZh2HHk.doc","sha256":"9f118f29b2cca25fc02d6ca7e8fb73d0ff003c287a356d27390aeec97eb50356","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"FjTsWkpkM.exe","sha256":"5efec3e88699d6a7f06aeece52de9c5bf79e5d71b7b9d7dd0433eb0bf0653c10","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"GuVY23qj2s4Td.doc","sha256":"6debb799c021183d304e1a304f2af37037e032c2958172056de8161b5f46e506","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"H5uM4HShGf.doc","sha256":"a45e893e2c0f4aa0c297866dc4b097939b98513994da1dbcbe1fc07a720dc384","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"Ho7euGVfWh.doc","sha256":"483aba1e39846880b6a967df498d2894b440e84003da05bad52616a58fe13dd6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"ara0UGGW3VRU.exe","sha256":"5b7cbed47977b05d72cae9ab55eb114e3b48586e26fc91888d7dc77e1141bfed","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"cUJpjDsZO.doc","sha256":"f8aa00f2678c8679cc752c9aa00f79e0a3b0c2a03660e6e8c1406311faff5922","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"dSTEZHvd.doc","sha256":"70ceb84d0eeca7a54b38fe5cc23931826f175c2b8d819ba3606e248f1cd9ce65","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"dsYny5bq4UJV.doc","sha256":"3bc35cf139f513bea36dca1eefc897ec46bc5b351fc726abe3d8eabee638598c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"fxlTZfcB.exe","sha256":"50ccd118529fe0c585f9a8ed83478bfc97193c1b9f65d1918eb56ede73ddd8d7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"g5pB3.exe","sha256":"cd0cabeeeadbfc521699b18503666605f5884aad91d8c4ea2c31ac56ecc4a972","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"gBiUJ4TRATi57.doc","sha256":"64c0d0d497e8e60bdb350805a92d79b0678c9dd55b5935dfe20f7349013fd5f6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"giDj6Q.doc","sha256":"9e81061d033d876a74495dfc1699ff3ba6b542d84a3e6abba7268834258042b6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"gmSsIkVXD.exe","sha256":"f85292bf54e2e21110b78aa5e07c32c63eafaaa888fd1eea7a13d1702284b937","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"h8fg9WRouk.doc","sha256":"7bf44dc6d9d05c81d7cabf37804b1d0bee595938370e96ffc13b8bf7cd98208b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"hgUOm8vUl.doc","sha256":"ba3257c3c4f347cc8ff66e5851b3ca4c5b866f11ceccb7faeb5ce8d78613a240","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"Desktop.lnk","sha256":"97d7fe602ec9099596bc984686464ab7f35f936da85c465947256fa6147944bb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"Downloads.lnk","sha256":"c3fe8673f75e615922bdcdf3876768b0896cc596f3e90b8f788b446ef1661f36","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"autoexec.bat","sha256":"c63fad65d39bb64103ffb7d9becf1d0ee88904fa1cc91503494479616f7e7ec7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"airappinstaller.exe","sha256":"d45c659723a530ed59831b6a47721d8de8a0c65f1901fd7f264b038c98c6f2c6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"easy_install-3.6.exe","sha256":"7b114d5fa2c5b98b5dc9a184cdfcfa0e30b47d8719760cacfb4995054ed4b8e6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"dh1024.pem","sha256":"a44687e815328bbea987ee5185b5e4891426a34e263b2fe1ac3545090bde0306","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"cacert.pem","sha256":"a1b78853644159261aa967fcd4b06b93d04881cd69436c9d5514ad8dce37ce09","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"activate.bat","sha256":"6ae75f27868e754c324a53fcb7ef768aef45c59270601d0fac258ca2a91e6c2f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"empty.vbs","sha256":"52bf93bb626baea7d2b8dc9958bd4a3aa13978786e7b47a17ca5598289026937","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"Activator_Office.exe","sha256":"4a458bac99fb02e7a697bb19c4f09dcd785c40f5916d03998cc0919dea6336cd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"fetch_macholib.bat","sha256":"9250a19a55a5bf477eeea94def540458128f39b38f9a22415fc929092b0d9ad1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"Hancom_Office_2010_SE_English_Edition_3PC_1User_Downloader.exe","sha256":"0bc00fb9bb92dbaf76889a4956f7d9e75cec960b57153d3d7b5908cb49add09d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"cli-64.exe","sha256":"19d7c94c71d3107e24c33bf61f9e810d0ac2519acb3332106377763106378a24","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"deactivate.bat","sha256":"99e384b63b6464452cbbb66024fad0b3c1a26fb7a6d3d96f069c32ac223b59cf","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"Hancom_Office_2010_SE_English_Edition_3PC_1User_Downloader_1_.exe","sha256":"7b4bfe6dda73283ba2579e84948ff2ba0979d59240e183e05c1ff4079a7fc959","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"badcert.pem","sha256":"04db10e683e4dfa520b0f871367200f9060c8d844d92c339369063d3bc27d6d9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"easy_install.exe","sha256":"4185d774aa1cbda5aa2d3774ddf9be01b379cfdadffd83904b7d4de8154d03ac","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"Activate.ps1","sha256":"a55db7dfffea6680dc2fe30bf907f81bd5eb8dc5eb31da747b85c4aa24a87a73","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"AUTORUN.INF","sha256":"02e0dc09c13d3e6c3ff19b539056ab19fe4fd51b649f2ceeae817dc5e82792e5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"gui-32.exe","sha256":"a9aa7ec6a947566d41a3e61e4d533cef767a9bc6378c2b8a32e7676d45f5090e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"gui.exe","sha256":"24417f016da8e9ed9da3d68ecce6086e01f2e918f426963d06795b26269ff015","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"badkey.pem","sha256":"d899249c8a4f4e5292a1f0abeaffccc2bd6f48c1716d65634ea904272d30a21b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"gui-64.exe","sha256":"2d25acb71130c4440a6deb8ca9a04c75d262f66516ee22f59aa1b8c1771803eb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"cli-32.exe","sha256":"7d07890090f4cd11015008005dd4c4139c806aa66665ae2e96867ae477054f84","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"cli.exe","sha256":"cd33e7a62083b8826da0c2d33d7f337158e1b251107cc488dd6f115b170bc4ba","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"allsans.pem","sha256":"ff7999f8dbc183876a4852cfce5afee1692526e924093d1031ba83a5a6714d43","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"name":"digest.s","sha256":"d37dfdc4c5cf0a67f0acf30b0cd2c770c7ea2050521fe67a320d931fe73b9e81","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"1546532218634.ffab2aca-dc0b-4067-86e1-8bb5d34db051.main.jsonlz4","sha256":"798a0edf175ed98b2762f056d5f4ca407b5a5b9b257d171b8e8ee51579375ff6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"1546533010311.9dd70ea5-0e77-4c66-9847-6354a276b0a9.main.jsonlz4","sha256":"77290830a6a7c5be9bdbcf0b5c7d5f034d6906f09c76888cdec9a0849cf14b4b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"1549280949582.11c9c004-addf-4a2b-bfc6-5aa46984b129.main.jsonlz4","sha256":"065c3c21657ef81026c06946fe6a3c648eb1ce2249865f2be6004c254c6af15f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"formhistory.sqlite","sha256":"29c8adbce41230ec12999b56f1d9a32a39faff44c9f679734e7cd9419adc9971","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"1","sha256":"9907cba6da8aaef1aedbbcd881a3d3102ec45e183ea58cbb41c744a6a7600860","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"07c4.exe","sha256":"db2261594169d6575260929343156ffd3109f929b9817137487a4ce5264720a1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"2VEV49vrsTLgZa.doc","sha256":"a1ff0bbde4d4cf290c640126109f35a23ff85457ccf64553901c4f60267669e7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"2f07Jm4brrx.exe","sha256":"730e8e0d803ae512d485da60a12b3c37771fddb9eb354f68f30c50686ebb24ac","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"3LnBJn.doc","sha256":"70b55185a319572cb5291353637075189ffee6f173b8b3e13991e840b8fc4a1e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"4RHcGmkB.exe","sha256":"1829415405668055168b8aad3489032d774131f92e15e3db34bd0e6a5b0cc4d5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"5F7TBCLUxJG.doc","sha256":"1acc4d3f216dd5a4efa0499152389ad1a39884d131da08d69b6e84be06db8e5a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"603jOLdO.exe","sha256":"85105afa77c9ea3558c288e4f8a2c357c74e68b92c7ec0b8e4acc7c34e74d575","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"7mOyQqezSRsEQhHm.exe","sha256":"c08a085d9e0377ec79580e02d8d9f1f583bfd80d87c5fa564afe8762d70a3a94","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"8L418Npib.exe","sha256":"9f2da8a30cf6b991fff71de564eb0eb550a293e1591f314a48b8950dc3cc537e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"Ae5I9Tp.doc","sha256":"11c0b1fd9ff1ca3aea2714df67fbc351f7e6f0af8b6938982110f54879589432","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"CZspj.doc","sha256":"329228e0f93fafe8f8070a33807a55782fb84ac8360590f1a4d8af0d7074072c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"Czkv.exe","sha256":"9505c224631724505c2ebb3f42f35400a61ce029da0276d9b3fdfd2999bd20d9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"DKwpgw.doc","sha256":"2bb36dd03787a242892640cf3a0244abebc169b1deee2fa9b2232340a2d4fea4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"F42upSs.exe","sha256":"6badbb4469dd3389cb44cdad6685d50722ee2dc424472773f2ff6465ca70b702","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"GgHlzQR.doc","sha256":"4b3e7eba61958df0bbf2b3ae4025d730e968f9d15f96f5a09190c1ecf8a2f179","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"GmpsrAn.exe","sha256":"1be0839d886bfc397810a6a58b07da6e7c438042cd5c6fc5eeb4bd9db4d1def2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"bMTL7.doc","sha256":"158be8f27ba00a3ec9de5b4587e080bfd7dba57cd4b013c24e3e8e5a714013d9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"cQTUR.exe","sha256":"8c67adb33794e921f6275668ae6b9bd53541d7226a5f8288f8303f3f49e5a1d4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"eVGu5yCg91A9.exe","sha256":"ce7a90bebcb9c77d420d97f0901d4f919580b98693f153d02b75f83d17a0a6ee","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"gimap.jar","sha256":"5bfa3d4e6969367c9f7e190996e9132073d1c4201768f5e8e63b1de003d552a9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.flightrecorder.controlpanel.ui_5.5.1.172852.jar","sha256":"bf0a37333ecfdbc1547aeea06f8692cc1b4214026f6838e3e74e7e14281a6256","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-core-libraryloader-l1-1-0.dll","sha256":"fc73bdab1e65da1b3c6700c91716b37b7ab62246c6aa1379c6668bebe27af535","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-crt-environment-l1-1-0.dll","sha256":"e88d9cfaaaeab5d4fc64e29abe849a3bc4df4f9a0ef8bdb9f332cc31233ba89a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-crt-private-l1-1-0.dll","sha256":"88902107f9e2e0f4c6c1473ff5f858969d7b889a6a4f4e7ad71ba90a98f11cdc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-crt-conio-l1-1-0.dll","sha256":"a626a9bb5425d0fdf2156049538a72223b686a7c5de94e1853d4664240158025","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"AutoIt3_x64.exe","sha256":"ba4fb6d8b5476d5f0fd601b7bbcf8318ebc0730a0a6c0d149b6ec280813fcb4e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"ExtendScript.dll","sha256":"c8683f38908afc6a6a3bbf23062e16cf6dc16c5f4fd1ea6d0d625a0389efaea0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-core-util-l1-1-0.dll","sha256":"a75f0cbf2d53649b3f524eb0c45457049f84b334374287d179453e09ab26ef36","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"ccme_base_non_fips.dll","sha256":"a316200d19793c2d721b5bee288fd252f01acb5e90a2b50b54692872c85fe0b8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-jvm.jar","sha256":"784032c6826cc37546d5b1e9b7e19c86091e233916e6e6798eea1061b931d2a6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-core-string-l1-1-0.dll","sha256":"758e2ef4b46d23f49db8627b0d4e5866c490b4e624712449596b5cef59f7df16","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.ui_5.5.1.172852.jar","sha256":"4c2cd2ad34978232bf5500224c743ed80ee90342ad72ba8181ef98518e7a644e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"eclipse.inf","sha256":"4af38dc395b2c5f082349c43b33e43bd8bd15a95df9cb4cd9392c28f18ec58ec","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.attach_5.5.1.172852.jar","sha256":"06416e820c74bef6b239bac06ea0b6cb820d64efb6b219df7c352c7510af1990","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-crt-time-l1-1-0.dll","sha256":"30ef75d4e948b4282d554461e0374b3319f8d660c4d3850cec87eb31e6d51f08","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-charts_zh_CN.jar","sha256":"b82b81946f4d122744d9735fd080d987c17cc1ab3a72d9fcdf5354695ae9f835","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.components.ui.ja_5.5.1.172852.jar","sha256":"4c45e33015b8716cb430a3e54cdc43820e1db810ee3d508678b8894529e156c1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.rjmx.zh_CN_5.5.1.172852.jar","sha256":"23937f47719c277000434335d1df642215082bb942887fca8b933b99b87eba0e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-core-debug-l1-1-0.dll","sha256":"02da73ff55b9b6da572d1ddbd5cd630dab8a5b9646d496837f720d817d6d2423","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-core-interlocked-l1-1-0.dll","sha256":"fb49eca766712ab541fe513772b98dfd37216bf8510748276d3acfb8b29a88a7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"access-bridge-32.jar","sha256":"e9019ce7c831d1a03d426d7f378d0bfdc045676a722af896329999b3a857ac2a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-profiler.jar","sha256":"65c867ecd67423a917ab23349c3c9d2195526338117c6c2e4f8c3c9a8ad94a12","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-uisupport_ja.jar","sha256":"8a6ddcc5f35dfbf9ae09bc701d56d40172ada06eddac954e4252fd4fa570c944","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"coregen.exe","sha256":"2d601cce0d87de1d3c4f94f65dbf994404c1bf605e761f3ab246c48baad4a767","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-host-views.jar","sha256":"ca5dae1ee397da42c4822cc2ef40b2910abf8c137c34d18adc59f1831c494bb5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-profiling_zh_CN.jar","sha256":"e7afe0594b67a718559eb190edeb947ce9cc7792da0f51ae86e8e3aa377bfde5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"AdobeLinguistic.dll","sha256":"e56d5dc712e63463ecc8d2e29793705fd7cf78b1bd412c5da9d072bbf9c72d29","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.console.ui_5.5.1.172852.jar","sha256":"84c09f6fc450fc28f164b6f16d72ce66af3dd53a3d154391fd0ff62d68b12f13","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-threaddump.jar","sha256":"5bb9cbbdda6befe97cdf5600eac82a78491b6bbfecba9d71bdd08662158a6a97","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.browser.jdp.ja_5.5.1.172852.jar","sha256":"6fc83855b41fc1f473d783ff5ce43bcbfa4b08ea42c83fba5b2ca0cca436b105","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-core-localization-l1-2-0.dll","sha256":"3e20b27d1eac67326bf46df34d6ac6c906f04b936c5040ebfcb69f69c8fe6be3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"dcpr.dll","sha256":"93ebf9bf04829c5a23501f5e340060ed969636ec749dfe0843126836f60f369b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-modules-appui.jar","sha256":"1f063627bba5539bb6785b7932d99aa04212934e01ea5c1d59f9b2558e44f09d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-crt-locale-l1-1-0.dll","sha256":"036776338afc4d3a620a6a306964c594510388a5364a7d2c05534c507a306d86","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"BIB.dll","sha256":"358ff146a089e59a05a5f7a42fd34a0829c7831782ac4a05797ca6219268e575","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.browser.ja_5.5.1.172852.jar","sha256":"546639ffbdd571df129c939885195d199eee24c4e1678822fed3e479354d17c5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"deployJava1.dll","sha256":"f9da9d470656ff730add2541f0dfae0db673c554d17d38c3dd0b49fc1edc4a63","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-host-remote_zh_CN.jar","sha256":"2bf6373d3a61111dd327f8523fa8bfd3b68a841741d359cdf9effa14df7e4064","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"core_visualvm.jar","sha256":"f13660ca423ab34a1836b111f947f0afd452235b3751e8ecb5d3fe443549b757","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"ahclient.dll","sha256":"6af5ed651751a21da9ac77faa2cde20659060a74ef7385611ac94611a5f2a008","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-application-views_zh_CN.jar","sha256":"891beb93e1b1923f60b10ff5df866c9b1813449085b61cc3c58698eb92678b4e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.console.ui.ja_5.5.1.172852.jar","sha256":"586b7991c86545333dc9f160815d91a76f516c16396670cd106a029a78e6d967","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"AcroRd32.exe","sha256":"1a4ddb8edbc65e31d336f39e1a052a57430845c4e17047875d2b5fdf71ef3b06","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"derbyLocale_zh_CN.jar","sha256":"91a2ecae6f5d7ef0c38e96f0a95b9f0b42536028a22a599363aa242b5c8ed225","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-crt-stdio-l1-1-0.dll","sha256":"4e52fe0dd3fc013770b12d702c4b0be8def58c3972022445e5a4cf40e9806b05","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.flightrecorder.ui_5.5.1.172852.jar","sha256":"7e399de915b896dfaf812a899d3bbf083bbebd48fb27fe1bbc93055917487623","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"AutoItX3.dll","sha256":"70c441ff15338ee68ca444b1c7a84cb81630710dc60a89072145a5d4cb77d38b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-crt-convert-l1-1-0.dll","sha256":"c7f38121bbf4d28b2c82ca44d6499759a6c5249e146c5a8a625c28d3b9f086a6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-modules-appui_zh_CN.jar","sha256":"c4e3e04bc8f1f621c6f05ad4262182d83244b800afa0694f42be222b633011ec","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.console.historicaldata_5.5.1.172852.jar","sha256":"df0ce4f9712945dd5d4854fc15be9f6715de521ce34975b9e65a995bcabd8321","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.greychart.ui_5.5.1.172852.jar","sha256":"3334776f369fe0ff6184bc348339b354aa2fc50370c6263bb9502be74bb3bf04","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.alert_5.5.1.172852.jar","sha256":"45622fd720c9a0870a26fba8aa3e3975022f7c7e6cc947cc00664ee88e5cdddb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-core-memory-l1-1-0.dll","sha256":"32f79e7729d691cb96f5a4fa54edcb9161d9ffca8dff421ed6c22665e025d123","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-core-synch-l1-2-0.dll","sha256":"08065bb7efdd3ffdb9db77c841a55f0eb4b86971f72149073a137ef35802dadb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-crt-string-l1-1-0.dll","sha256":"cd8cf145cf9508da91067eaa870279501a724ac9c621882743c9ef71cb395944","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"core_zh_CN.jar","sha256":"c53c6908b33e00ea4c133f3e5230545c82422d2e41c1b0ad98cee94ab9d823e7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-core-rtlsupport-l1-1-0.dll","sha256":"e5e557c4292d9fd42473112d15012ab4ac904d8ed538130a641ce64e45958943","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"arh.exe","sha256":"52ecf690435df077f34b8851e3bfa07e4a0838aaddc1bac12b9480461833e5d1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-core-namedpipe-l1-1-0.dll","sha256":"3edc568e8e3cdd5fd58f8aba902ff8f129db6973b3d89ce9915c16aea4078a32","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"core.jar","sha256":"bd97e4eedd4e28384edc2c14417d94e98e78c6f4384b257ebfea643d3efe0323","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"ant-javafx.jar","sha256":"061d62a675b8d9a37f1162692a92379178a18bd2f2e81b715feaf8a3d10df202","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"dt_shmem.dll","sha256":"af1ea5d42a924dba2702919c50727ca962e800d8dee8f4d8462307c6495e6879","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"derbyLocale_hu.jar","sha256":"0da34a78aa1a9327319f5175c8927caf53b4f70add5aa86e59046e7d5041a0d1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"AcroTextExtractor.exe","sha256":"d305bf3cf0288c6ff25399ea3355a4c829407c282bacf5a444ffa181aab741b4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"fxplugins.dll","sha256":"0b37e732e09af00391922ca7b9a8244f633fbc87231aadd17a6eb61e20ba6ecc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-host-remote.jar","sha256":"1a0ffc75ac3336d1c52069629b037090e8a0b4d5207fab9f8a301d06db550bd6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-crt-math-l1-1-0.dll","sha256":"8f9744e67a596c88aaede0a5a0fcc777cea00c493ffcbb6a5bf111b94199c707","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"glib-lite.dll","sha256":"5ec55ec855e5683923b599db6959cec79dc0126f339b909ee4452c2549661b28","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.flightrecorder.ui.zh_CN_5.5.1.172852.jar","sha256":"98d6a83ef8e3710d0c0289eb79107b13c94b339f14b4f27679ef33ca0455ec1b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-crt-runtime-l1-1-0.dll","sha256":"aeff43f63a8b9a827a4e015720727432033729154f88b6994fcadaef0338b419","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.flightrecorder.controlpanel.ui.zh_CN_5.5.1.172852.jar","sha256":"09e0c4085c6ddc5011b976324b64567c7145763c7d8d28318c1983a182a01322","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"AdobeCollabSync.exe","sha256":"35c53ee5a9841da62c177547f815e606b4dfbf3baf4b65ec19a588a8dcf50d08","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"bci.dll","sha256":"719f262838c973161acc392aa8385fb689114900d841ec38ba704abeede75456","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-threaddump_ja.jar","sha256":"fa1457c58fc3620c056f955e3e486d1baea7ff2d3ee02a74b48179a6998f43b8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.console.ui.zh_CN_5.5.1.172852.jar","sha256":"e74fc8f2163d211fa83d78e3c178a931ef320928716d8e191ed5f2bee423a997","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.console.ui.diagnostic.ja_5.5.1.172852.jar","sha256":"197bcb81d012cd4bca23bee355e6661769fc8b3e4e5475bfd5cc14bd5dc5194e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.sun.el_2.2.0.v201303151357.jar","sha256":"c3de70c83851bb9f34f0390a2c78c75948359f279bb792d9268000563c2f41f9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-core-processenvironment-l1-1-0.dll","sha256":"213dc9613e57a714dfc25484bc17873409da17dff51d000c975db5f922b9e1e5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"cldrdata.jar","sha256":"4092d8075e996a9a96dad5de993088125174c0289927a25a0ffaba55382e44ab","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"AdobeXMP.dll","sha256":"7b3e912a2da3759801bbf80562e6895ad201b6e8ce8c6c87e70347674134f45b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-core-timezone-l1-1-0.dll","sha256":"b019eb149576a3af89d9708e638b7877fb2b9df146050daea1ba74d2592d8ac3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-modules-startup_ja.jar","sha256":"63be8cbe6b7d82743b9ef2f9559896504883aaa53957cc96f3493457be147ade","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"AXSLE.dll","sha256":"240f3955240a53fcce352af68ec5a834728d53a9f1bac7eccde889bd0b4c00d2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.console.ui.notification.zh_CN_5.5.1.172852.jar","sha256":"aa936fa500b6a1accaa4685c5167020663bca8250f248ecb78ebf487c5d293c7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-profiling.jar","sha256":"f4b357f6a33d5dc62b126dc67f7be91e5ea8440823dfb9bd4eeec33850714604","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"derbyLocale_de_DE.jar","sha256":"3e602289969017146520ca80d7c477ed4fc45ddf891db987074584bc945a9463","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-core-sysinfo-l1-1-0.dll","sha256":"85bb98a59269287eadea4ad5486368a02f615186bd9103e952a9ed52796998a3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-tools_zh_CN.jar","sha256":"deb0ce6ebe9fce554a3321450e855ed854308699ef466edce55f55b0b28688f8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"derbytools.jar","sha256":"c663d9efe28d12f16167110653feaf2f1b726fc5ff290c4a135f4a6f59b85db6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"dnsns.jar","sha256":"301fcec30f2837e34a97b3948f4f0e9614b2b88aa938607ca2976edd9eef8c79","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"AXE8SharedExpat.dll","sha256":"4f2b3d1db0aa249b9ae893effa1ede996c498fca0660e86749dcc9380b3c5d0d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-host-views_zh_CN.jar","sha256":"864c14a0ca19f5a050cf41e33ffbd19ef12e61155361eab1794489228ed981c8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.browser.jdp_5.5.1.172852.jar","sha256":"a4a9b67eea84431c87e126d65edf224c784f53a73cc7a4b70810ea32f9090805","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-uisupport.jar","sha256":"c49ea6522b48d46754959f2faa7270da30b6607c4053d6d0aa1e89e46ea9ce42","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"AIDE.dll","sha256":"045c9ac718c398d6c67f967e88de5647bd66b55d06458299fa11e5b5abecd2d5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"derbyLocale_es.jar","sha256":"0d6a3c4199558f73f6203678b5f11f8aa1e84440e9596c5cc533175854fc0601","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-api-caching_ja.jar","sha256":"1ef4fed99cdeb00a1859130746f92bc26727dddd3b58eba9e48b810a000b5e29","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"extcheck.exe","sha256":"6a176665aa10c8f809d219cccf2ba495ea8f60286e0e9116de31f800f08cad07","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-coredump.jar","sha256":"14786a6042fb02d5138393720e24f8d60590d6cb6f41abfe55f821faa48d4303","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"eula.dll","sha256":"0dd96ebfcf4811ce847765c5705a21c5f3a344eae66dbbe7ad0c939348c33f6d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.rjmx.ext_5.5.1.172852.jar","sha256":"3c874fc74653014ca4023756a1af5246e2515053345bd2dbe9eaa8970de64afb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"cryptocme.dll","sha256":"95e073c91d43df65fa5206ecdf7abb88ffe02b1f7243f31e97981c31b7c1d643","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-jmx_zh_CN.jar","sha256":"aae4d212925e0c7eef99468f876e80b6499f032d9c588c0bde7a0c7b0c353a33","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"fontmanager.dll","sha256":"4bd9af297e5de00ba7c8c6842eb81231ca0043e055f1fe3ba00a4526b0096278","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.jdp_5.5.1.172852.jar","sha256":"63c23f4bc8b64cfa2d3aefc9fa0514b97bd7d8ec07438bebbf32755143164a3e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"decora_sse.dll","sha256":"cc7570cddd7669cce79b22ab0ab4832bfc69fb8baf87221f6ab3d8c6ee457a10","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"dt_socket.dll","sha256":"109e9d0d85e587569655a8b81e1dbc1d4d4475e3699419c3b0e4e5c9b520f300","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-sampler_zh_CN.jar","sha256":"1cce04b8b06e8f07e6d4b9b3348326b95af44f185bedc8f8703b386571c479ab","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-modules-appui_ja.jar","sha256":"4a6ddaf7553a70ff385c52b15e775f5aeb7eb24c4b20b2b71ea2e5eff2139c5d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.flightrecorder.ui.ja_5.5.1.172852.jar","sha256":"b3c75da1fbdfc04dbc269e562fe5e9842c611666f4b687cced16dfd378648c78","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.docs.ja_5.5.1.172852.jar","sha256":"ab5c27eaa42fff1831b9cf98ae9b194e344f3bc71820481c9e40ff87d4188bae","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"ACE.dll","sha256":"b29a0e591c18e48e053e4c70a8df3f091a5e0e233b38897fc2c2433a4b7e20fd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"eclipse_1665.dll","sha256":"5800dffff8474f13f941faf847920e568b213daf3eeb064ff4f260d1849ce9ef","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-crt-filesystem-l1-1-0.dll","sha256":"fddc1af239cb5e771fe8f3a661f47eb04274de2e54b626ad083644f3aa714d3f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"AcroBroker.exe","sha256":"1e89164b9442e8709fd2f8a5c92a8135ed3cc455397137260d700a9629bd5fd0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"concrt140.dll","sha256":"ef22b50945b7d7b9f93cc6b93148d660403084091cc495b1b8cfda6371bbe157","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-core-processthreads-l1-1-0.dll","sha256":"fbe29d3f30e1a7af8b3386d472de6b42c00942c0dbac4d49cee3009a1acf60a7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"glass.dll","sha256":"e310f5a9df1427dcdfbc68b6d9f6f9f29e83d26377fb5dbebd796c505de68b84","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"AcroRd32Info.exe","sha256":"324d5b1de7c2c15f4ccd2c5ae8151d188e328bca70ef7ea01e4c6d49c388d54f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-heapdump_zh_CN.jar","sha256":"7a1144bf5cc8983f6d26e0dae11ea0865639f5e84d08588fdf5fbb88a6008194","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"derbyLocale_pt_BR.jar","sha256":"1f7ef6a8901e164fa380daa22de21dc9cb100b5183ec4a4a9e7860651e199a1f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"awt.dll","sha256":"295fb3b2aa8946abc8856fe697b04afb291f8189b4c3aff6280536395a7f35dd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-core-processthreads-l1-1-1.dll","sha256":"8711e35ff4ec7725847511616c81c894b3a61e01e1c74173686eac32fbc577ad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.rjmx.ui_5.5.1.172852.jar","sha256":"8fb4488b972cced58829c21cbf12f709928a1fd04dce5172f6899f104d12e739","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-charts.jar","sha256":"58e413f63f8c29afca6853fbcca98de2c9c14ffcc99795ec23d617b4217be06f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-sampler_ja.jar","sha256":"bc7be5aa60bee69c527770769fca19f4b26fd975fa6f20b755423286d9a1f149","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"Au3Info.exe","sha256":"d1044de9d245b118fdf38cd16e083c18b1d0479dc40750eca7583706f45824d8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.browser.attach.zh_CN_5.5.1.172852.jar","sha256":"580c0ee0b8989f5d0f84241288bbc21384c8ed02e5308a9beb571da14fe41326","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-core-heap-l1-1-0.dll","sha256":"7e4660bccd6064d4a0603a8bf67905a797b7ce8ba7367e1c411a84720218302c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-core-file-l1-2-0.dll","sha256":"c7d6db00aa94a6edc1079e431e659a346cc1f99314d7acb521c34fca6ca0df54","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.greychartplugin_5.5.1.172852.jar","sha256":"6667b5aba0714f1fa43746e2e57ab574b8f97631ec57193f5f94060424eb95e6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"derbyclient.jar","sha256":"9f7a06990fe64c39c068d8368704ab565e4176f021a15e862e3891ff3ac7d1c1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.alert.ja_5.5.1.172852.jar","sha256":"782aa8e6581dcf80c490150647d0f609fafea8e17f64066c0ccc49ad86fd5427","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"deploy.dll","sha256":"c8fd370dfbcf95cec56e8d45fc5abf7943be59fa8942c35ab025eb8102113f18","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-api-caching_zh_CN.jar","sha256":"f01ac38f56a6bb06d8a9e2e49f39989f3c655971390fb1ccf4ad741e0cb0da46","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.greychart.ui.zh_CN_5.5.1.172852.jar","sha256":"ad4f02fdfcdac96d9a7c4ffb9944c5e41c41f142602ab02c6e1a6ca64d053790","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"boot_zh_CN.jar","sha256":"31ffd753baed49e019848ec49828dfbb06f7fac9359a7c55e012b4d3d06cb89f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-host-remote_ja.jar","sha256":"d1087f71f5a88488e9503b1a20af6f4e5851bc135a7033e4b7c9206c4390d7f3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-application_zh_CN.jar","sha256":"fb35f13e59de834e31dd9e89c7627ffb8fd9aff458882a5ea628abe672f7cc00","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-threaddump_zh_CN.jar","sha256":"3616cca4df7fa08798a20a392a24c4f64d7804dc42458c0970e018585984ee04","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-core-datetime-l1-1-0.dll","sha256":"451dd478d7c8d9e81a67ed3f99a13925216e3e4d6c72c13b4d1b915bbd8665fc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"boot_ja.jar","sha256":"2af0842fcef7d0e2e0418e438e8cdfb666e03bb298a2dba474a0449801f7b56c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.ui.zh_CN_5.5.1.172852.jar","sha256":"c4f1e848ef9d6eba2d9c3d3d0d034a718f07c425f99b707dc5cfa3a4312b766a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-core-errorhandling-l1-1-0.dll","sha256":"583bc8000608b7726ed76a63907351e9d8025e0271805262a0c2c9280dbf672a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"DirectInk.dll","sha256":"4fdc4eb63aa39ec608bf3c6a6e3ff07597f9f2926883c73db756a8307f1b285b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"AutoItX3_x64.dll","sha256":"1a8f1fc17a4fad01f676f17b3642d97fa4261afe9d84b092a0687edb10e0fa0f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-heapdump.jar","sha256":"58c1c2771b77378102170b408676a77162794e8d556158c92411fc2647dc6663","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-crt-process-l1-1-0.dll","sha256":"81be297b24462fbdea4eeea72d7406a2a76c540bf2897b1da0a979a54ceab03b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-crt-heap-l1-1-0.dll","sha256":"526b0d011d4ccacc35efe04abc9c7f767784c4cbe72db76ffdbacee6b4bf1f40","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.flightrecorder.controlpanel.ui.ja_5.5.1.172852.jar","sha256":"bea0507b28059e3c60550aeb4699e434e5158619e5c899dda3202cb22cfec2db","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-host_zh_CN.jar","sha256":"06ecb55b652f48810af54ad42fdfafbab37c6a79475d4e598639fe025b8495b2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"BCSLaunch.dll","sha256":"3b9127d25c5ee55b6edd47ec9b46f738852a7a7b5ba3809fbabc3e8f7fc3df29","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"eclipse_1655.dll","sha256":"a0aaef412086b5995261c81b11a54bae708d975f4e1289f791e2c1931d2ff2b8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"charsets.jar","sha256":"9fe66ee9b5235c40aa2d1758800984e5101f05f920c07a0ebd2d541b40d75f0b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"agcp.exe","sha256":"d1c5e1c9e4cdd0a419697f482870b56bfb97fc2218a32cda236a6b234f0ac128","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.console.ui.mbeanbrowser.ja_5.5.1.172852.jar","sha256":"ce1e50a41314a380fb6896e3bba14b42f57644854bdabea781d9ef599d65605b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.console.historicaldata.ja_5.5.1.172852.jar","sha256":"844f3f47a627d2553b3208b5fc03e92e13ab10eae0911bd664ddb95dc57114d5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"appletviewer.exe","sha256":"430f023e3637462857a7c75d7aa64daf4cb12347b9d1fe4c20c13d0250078ad1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.browser.attach.ja_5.5.1.172852.jar","sha256":"43b5a8d118856ea3e5ba28312b826f7573be6fe9e2335e3b9bc573cd13c47591","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-core_zh_CN.jar","sha256":"c0c9ce95f4ddad57d32b5c424e19063d451e4fd233710cc25d8b881ffd59e05d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"derbyLocale_it.jar","sha256":"f589756881055415a4a02be6e4f146b95e864e56885fd22d937c7a36ee2af2e5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"derby.jar","sha256":"a28e4e3682cbd075dc9fa4d8a8636299a20813ade6b9a3fb9f3918fc80eb3d42","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-profiling_ja.jar","sha256":"dc1a7cacbb33c97d6702a5fb7f734b5e6a542ff2a564a9d49446ffb0dc039102","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"AUTHZAX.DLL","sha256":"bcba3e1eeae1440b2cd57e0f70e4d17572144743285d719e7f934ffffc5e0fcc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"Aut2exe.exe","sha256":"2d0f7aa29901e912dffaf5834d57c49224748daf423257a3d5452fa6cd4a7628","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"Acrofx32.dll","sha256":"c1994395e3b3a4ef61c48cdb9e8c5535acdd43b53a00ac1f44d434d47a0b6f93","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-host.jar","sha256":"322ef722c9a564e84da2c95b73dba288b6c1ba7a07bf26e5e289fc34968a1011","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.rcp.intro.zh_CN_5.5.1.172852.jar","sha256":"34155529d031828318b714c8bae51504df37698b169124d49121a2e50433c093","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-jvmstat_ja.jar","sha256":"038cbc1aa6de6d2b41a5cc09823ee865a50e831134198da7e44b7d4e0b2a78bb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-core.jar","sha256":"4bb53662e0e5bc4045318ae885204ef44c7c6524bd802ac2166896937ded8922","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.commands_5.5.1.172852.jar","sha256":"688e2c9ec24b74cb4ca1fea759eeef2b3b9809a9120265dc136828df5fffe84a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"AutoItX3.PowerShell.dll","sha256":"f60d486e6bdd83494159db36607c718850a34555a70c4514aebfcb91e5feac94","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.rjmx.ja_5.5.1.172852.jar","sha256":"1d89032d3bd7f753a4184d5b92b7dea36736227ab2872e6b49d84f278d622f2a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-host_ja.jar","sha256":"c617fe9888bd977ecdd10bc19894fc5afb80cce530eb366850bdb80aca779704","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"BIBUtils.dll","sha256":"73c6fbe7f39f8d522fa92e25c33d88da26cc44f4a7d19da0181f2912c1ddf72b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-profiler_ja.jar","sha256":"cc07801ad8d14c57db6cb9db31ffbb1ba047809f5ddf671d14cbc386f74f010d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-coredump_ja.jar","sha256":"893ea9be5384bc4c1dfd02b20b0370cace54e0ec6782175bdccc203c129ad8d1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-core-file-l1-1-0.dll","sha256":"7957c8f90dcc3478722b49594e691a2e22bc4a6dcf4d12bc443bae9bf3998ed7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-jvmstat_zh_CN.jar","sha256":"cdfef16502837ddb5a20e1dd5817103aaf3c2260a4a63f793fac6dea02ab7b14","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"BHOINTL.DLL","sha256":"f41ceb51d126dd7bddd2a866c796b5720923d17b3c94b371f4ec3d1cc2c50a4f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"ccme_asym.dll","sha256":"2d4ecca5d233e9e65586594a63bd960b7a5bd94782ff2a252440e55e3690d821","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.p2.ui.overridden_5.5.1.172852.jar","sha256":"dc7c14515d04c8aa951162f60dcf4fb32ac1be553da03d7a98697b6059234fad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"derbyLocale_ko_KR.jar","sha256":"237ed4286fc62fb8110ecf381efe4b100a72a049e7d1fd16d84548ebe37fe0d7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-crt-utility-l1-1-0.dll","sha256":"19393789a2079308abff3574f556b8988ff4f2f0917851d3e067ad5c7d0297af","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-jvm_zh_CN.jar","sha256":"2d413068ceab07a5aaa090d9a0a120ab8bc73080dbc538b008cbc4e4b0cef39d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-tools_ja.jar","sha256":"218c0a3a4c4bba69a35e3c675009934d9a9eec1d1a408bcb69808bb3ee3f5029","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-modules-startup_zh_CN.jar","sha256":"d1a7dc0b9243dda9cd0a621d6931f563596144a483472d244af2f88b2e630390","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.console.historicaldata.zh_CN_5.5.1.172852.jar","sha256":"da4941951a1bd11c2bcd0bc5ac0c188c2a25b2136cf80c88d6308fbae1527836","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"attach.dll","sha256":"a1c5217a7b6aa95fd3dac5fb83cbb222a3f558608f224860f986c651cc951aeb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.rcp.intro.ja_5.5.1.172852.jar","sha256":"364061159ab333c90cab9b786f345ae01ebf51eb715ce9973a18f7891795f918","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.rjmx.ui.ja_5.5.1.172852.jar","sha256":"dd94cb9b4c12b31c28fe142b528add7a172a9acf484f163d9f967521036b9601","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"derbyLocale_ja_JP.jar","sha256":"fa6d9f2fc2c2152f4d13dd84297a491ec110e4f4b3feaac245fc86e4e2b46266","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-core-synch-l1-1-0.dll","sha256":"d95ee4e4cd987f4e7c386135abe4b7ac174073f44ad319e51d436e967ccfe41e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"AGM.dll","sha256":"7cb630ae31eba0ade51bd66a573ad1d76858016b493b85af4d30018d9b838c0f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.flightrecorder.controlpanel.ui.configuration_5.5.1.172852.jar","sha256":"9a36679e503dc5ef0645abfe1ae9d0ed8224b29f7b521edb9265b687163803a2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.console.ui.diagnostic.zh_CN_5.5.1.172852.jar","sha256":"9c1f54543777f5a0835e1a15a3072f69ab98349503d91ca29584d7846ddd2f00","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"dt.jar","sha256":"bc6dd214de02832403719da024f1e8572443916721d48caff588f5f90c7936e2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"ADelRCP.exe","sha256":"4a0f2ed587759065a3abe10e4490e7312cd5283f1dfee35f751848b1a54cfc72","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.rcp.application_5.5.1.172852.jar","sha256":"6b4e079d5c7346ffd7029e8aed8edc8c45890e9bfaf91b2bc7de19ba22e3ff60","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"FakeClient.exe","sha256":"70de24d77bd52d6c51330b7799ee5488b4ac3850f26393ac351c215d6ed4a8a6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-profiler_zh_CN.jar","sha256":"bc2e8a317d3a3b5c36a981440a568bf5eb3fbabc211f9dc4209429ecd24209e4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"derbyLocale_cs.jar","sha256":"d31c1a6e04aeb2fcddd4399b1d2421dde5671fa2c8633bff924c581865a5848d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-application-views.jar","sha256":"a08813007c5bf6b97f0dae924d1b5c276040c6323999519f1e731db207a21b67","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.flightrecorder_5.5.1.172852.jar","sha256":"6854c507c30edc9c20bca49d607db03a530fa3e94d5931c411aa44955ce7831c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-modules-startup.jar","sha256":"25900d3e13494f98a98152d69f3696d298bd77ca42533af16671df1d869674e7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-jvmstat.jar","sha256":"e2bf5dbb35e26093cfacdab27291003e791b3c9b8d204c46e41e1a1841687d95","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.rcp.application.zh_CN_5.5.1.172852.jar","sha256":"a5c43b6622341e0e75590c1a46635950293724f12589c432b72e58324f903544","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-core_ja.jar","sha256":"dacab67ea7fccdc1a5a9e3f82afb1fbad8b0d4bac84e25e554ddb9e48e824f7d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-core-profile-l1-1-0.dll","sha256":"a8cbd0d91f911baf14a35bcea01eb8c3e0dbd5c2109320c0f5b692f39f9c52e3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"derbyLocale_fr.jar","sha256":"12d3418de4da27bc109da81017eb5ad779132091837f0fadbf22ea03be807bd9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"Au3Info_x64.exe","sha256":"840d6ffb37473a91e8e9a18b4d03c70c0beaa78621a887f1188818e6fca86b79","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-heapdump_ja.jar","sha256":"82782145b60bfa2f3118ce82be2b66af46ef7f2a7a7b7ee2088a2dee222a92b8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-jmx_ja.jar","sha256":"1649cca5e164a2eb1f78d4e428a68ce82c4398ddd054135dca71899c0f8a23a0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-core-handle-l1-1-0.dll","sha256":"684245b41f40fbb1234963807d2be86329aa2f2f0516ef47fa37679b743a4321","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-attach.jar","sha256":"c17ada3e35cb6062673a2d9b1d9a955f49724ac088c8524bc9ca0ef3d388bfab","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-api-caching.jar","sha256":"132f73313909c875ad3987271399dddcd6d78ba9e837f34564d6a7c8f1cca40c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.rjmx.ui.zh_CN_5.5.1.172852.jar","sha256":"99796be589dc4af85abfd16e85ac1fadd47dcf28c4e1454acd9906e8594576df","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"derby_common.bat","sha256":"0ee37e7da3450f377f516d2dbac4dceac00e5478210097ede5bce2ae83767dc5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"ccme_base.dll","sha256":"60e8ebc588ebb717df56c2acb640a6a6cd52610d7eb80eecb3cfc3ce80a1dca5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.browser.attach_5.5.1.172852.jar","sha256":"41d6c384def6f98097b805b99674ba6c3c8f0f433919436a989ff8c775ee5c54","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-application_ja.jar","sha256":"97017695f70d04ed1513ec56f8d8ec38976a34c447c14617994950b6d22b011e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.console.ui.mbeanbrowser_5.5.1.172852.jar","sha256":"6e1f294e2f3f817481e285af26c644fee949df92ec526bf2847e8c05fb09b96f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.rcp.intro_5.5.1.172852.jar","sha256":"5751af37e1df2dcff2bec1e7e967c978f49ed64afc9d2c56d9606e21a05d4de3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"AcroRead.msi","sha256":"9e2d3b8eb9c48ccfafa7c160e2b8455b7642a8d461a408eaa9e1ff566182c11c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"derbynet.jar","sha256":"a3c6314df09e5eba5376f8ec20968ba218aad20913c8c18de4307f4e80e3b5a1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-attach_zh_CN.jar","sha256":"1fddc041ac724e045084c1c891b025849c37bafcb0034b0a94125a053f428f7f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.core_5.5.1.172852.jar","sha256":"88759d5338d6863ab1c0da2afa94aa38e492a624806cb8a20e8d337a49897b2e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"core_ja.jar","sha256":"d0e2df8953a9aa829924cd057e4ebcfbc4407b3cb6288f648c420257a0afe9cc","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-sampler.jar","sha256":"678b4d7956abb1eec51f192a6f7fef967823d6b85e30c709a181801c15f31ca9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"derbyoptionaltools.jar","sha256":"0342fec1d0ce223e45ba68ff7194d6bc76887e32e7e81e1ab6d9792db1de1eaa","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-sa_ja.jar","sha256":"135b3bd2ab95f255938c9a75559c2f27135b898def9354563c40fec50b9becfd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"Aut2exe_x64.exe","sha256":"2be19c4a38dec08c5e33f170d752cdbf74a7959e6ff4a0edb6d3292bd1fa4b8a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"AutoItX3.Assembly.dll","sha256":"b71a185a83c912f14fd9b192be36fd42c998759a18ce2a61a8c89028aa5aab5d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"deploy.jar","sha256":"26b06a1bd9ee135b35d53f490a86aa8a5f4ab86f2e7c5b4f8a675a23f0aa4f74","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-jmx.jar","sha256":"2351f8760acd51767b8df7afe1ad82b44cfe19c01a4311bf60d84532c597f763","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.common_5.5.1.172852.jar","sha256":"ab3114c2f6e1bc3683e808c522fa0a4b06ff2caabbf049be3a7ece0baeed339d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"dblook.bat","sha256":"57f8a306590786daa0242a4393370beed91da055085a6cd198e3423384d8cae9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-crt-multibyte-l1-1-0.dll","sha256":"27e096fe483d0bb612a5de2c7383decee59f97b61dc3ba81e5bd50e3961a6726","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.components.ui_5.5.1.172852.jar","sha256":"b96443da5857f3d4d05df4f7e343ad07cd097077179952ae4c7811b0d59d9e67","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"ccme_ecc.dll","sha256":"652e9aa959ac55227acdf416497cef80e94e49fb82756f667ec0a0d918fabbd1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-core-file-l2-1-0.dll","sha256":"2a487f423cf18e205f019be69cf62fd2ddd120011f9c5db4a965ffddb6654dc6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"adoberfp.dll","sha256":"3ae40031ea783be1c250ea2bad8614000e8334b0db5aa18f290622b8acdf9815","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.greychart.ui.ja_5.5.1.172852.jar","sha256":"09555b01b0e45f56e3c44372c2358ca91ce0d21c0a3feb5840221abd1cb64def","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"AutoIt3Help.exe","sha256":"60240001889daf5cb70659108cb135236d940b0112511b7b2d265c2e2f96cdd1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"derbyrun.jar","sha256":"2c5369ef926c39e7240201fa958ef11a44c09b2664b84b1d260b2e6363b4bea1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"devcon.exe","sha256":"670fcf941c248c70d7a1719be0bbb0b6fec0d9686f8dcd48098bcf397ab69e7e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"A3DUtils.dll","sha256":"110091282bb628fbbb455acc23464b8ad389dd3999d3469eddf7c12f4bd09942","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-jvm_ja.jar","sha256":"5e7c99029f9c98f0e99552f1063d79ed0b3aa4fd64f565d303d3ceb0b3d1e005","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"dsn.jar","sha256":"2bbb677a6eb34041b67aac0d3f1cbce5481390c9521c6b4dceea9b756c1d7ea0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"CoolType.dll","sha256":"1b2b65883cc1045107b404d2ac04d82add04b779011afd3da3d6169f86594fac","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"AutoItX.chm","sha256":"4fafa6b16b5de1527066f86b313e3a4a38cc44828e71eb2f5b72b0feef1edb88","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"calculator.vbs","sha256":"64c6ec141817d2f5446f7b7f6b29714ad5876c5b9896378439762d9286cb0474","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.ui.ja_5.5.1.172852.jar","sha256":"8af301638c32c75da426993db5abe69737d533c967f77e02dbcce36d30a4d3a9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.console.ui.notification.ja_5.5.1.172852.jar","sha256":"7ed32ebc6937638b2309834e04528746da4ecc82011c896da969d5f8c5d33b75","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-tools.jar","sha256":"2edd52beaccad1e8dfbf3e2ee740d0274d0dba2181cb1c86272131f4420500d8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"Au3Check.exe","sha256":"dd1838e9faa464d057a5c023a26766b8b238ea368c85bf440d894206e1471c45","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"AcroSup64.dll","sha256":"1a53841464db1b2547a84f5170daf5ab2036415a5091ff32202ce3d290f4afd4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"api-ms-win-core-console-l1-1-0.dll","sha256":"cb5f24f95354ccb57bc20de8d8776060f4e72d35774706e459d629667dbee7ea","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.docs.zh_CN_5.5.1.172852.jar","sha256":"6a14c3e0d9cf8c51d192f1a2d80b35488e3c0bd15e7227ab9527692972c8962d","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-sa.jar","sha256":"b52c9a0f4093f99ecfa59ed9523990b2c1f85d58929cba4890639a87400be3d9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-charts_ja.jar","sha256":"bd3c05cd59fcb7780869232728cc6ef64419910e63785ce779ce03c4f087244f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"derbyLocale_zh_TW.jar","sha256":"c42642cfb53ab7d56d9e2c7cedece49c7c7eb2c6961e2307e6a4fbf9243092c0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.alert.zh_CN_5.5.1.172852.jar","sha256":"4e66698e0bb96ea1936281e531532b7dd899c0e5c41bcba1d4eae53f0a1d75a0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.components.ui.zh_CN_5.5.1.172852.jar","sha256":"a364345f0f7715fe5c56bec69b60151fc65ae507e60cce1428fca676634c9798","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-uisupport_zh_CN.jar","sha256":"20f234ec94ed3838e34ee14e6108e679d0c723fc6ed96748a62e274ac5fc79e2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.flightrecorder.configuration_5.5.1.172852.jar","sha256":"12b03a8d8c32c8bcc3f8b007e7da08d346ca6e5302e23361919d3d753d252499","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-attach_ja.jar","sha256":"946e312bc68c0c203d5ace3598de8ec76f4a2fccddbeb31e7f15e24000568950","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-host-views_ja.jar","sha256":"3ce0d28a563a4f126e0a6edde442f1e2db4f15f14b51fd746968a7ead57db9b4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.docs_5.5.1.172852.jar","sha256":"81e879f0bdf0c563d59fbfc73d70b7ce414bc1ff8cb91daa45c2399d7174aaa0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-application.jar","sha256":"0d6e9fd4d604d98ffeb76913610b1579e0da0dd7444a87abd4a3fc580adc09be","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-application-views_ja.jar","sha256":"3cb93c770f075d58434c8595ace16274cf419fe9dfd37144448bd7cbbbb94628","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"boot.jar","sha256":"d146366cad421dc1747e284f21fafd9ddb95e18ec572b9a0808942baab98c974","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-coredump_zh_CN.jar","sha256":"38b371427c6787f5df99e54d5696a1b8d58983825691f24f2ea7c5208f6ee197","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.console.ui.diagnostic_5.5.1.172852.jar","sha256":"02dceb943191446ff7a91906f8753d66c1c8bebb2e09360aa685c823e50eec9f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"derbyLocale_ru.jar","sha256":"4b43bdc62b82fa405407e736a59eaaac4b2f58b345ba177f3465c5f087b023d9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"derbyLocale_pl.jar","sha256":"fa0aeb9c76d004e445d3e263f34b7cc36632f3163fd5ca2d090221aeb1e025c1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com-sun-tools-visualvm-sa_zh_CN.jar","sha256":"1bcaad2aec67a674f74c34b3731bd7023ebeba50d1de3f9afab902928463b1da","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"Eula.exe","sha256":"ac83f36a815f6dae600bfb8747db4328aa5b8b7ff3f12df9e2a5614ee5947074","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.browser.jdp.zh_CN_5.5.1.172852.jar","sha256":"bd53ba480d34fc693bd7b34c63a5ac044c5362cff22a99cbd4f73702a0b44f16","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.rcp.application.ja_5.5.1.172852.jar","sha256":"05563051dad22597d4d22dd7d602e7d73e7d69aa98a1f11d2c31a0ac469523c2","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.console.ui.mbeanbrowser.zh_CN_5.5.1.172852.jar","sha256":"169dc5e3be0d171f393f90ae4f0b028e1f1219e7af2ea589bd262eebba62c8c5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.browser_5.5.1.172852.jar","sha256":"3051a4af41129f5be6b21dff3acc3598876a2f8ebc19162a1099e3222fed685e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"com.jrockit.mc.browser.zh_CN_5.5.1.172852.jar","sha256":"20bbcaa6ff67e6c285801ecab2d9444d79516582a6c3c3b85b66f5995c73d37a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"name":"coreclr.dll","sha256":"fb2bd209c908d9ff518fa7a359052f7059ffe09c0287f41598de67ed90d5467a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]}],"files_written":[{"path":"%PUBLIC%\\5359038EF31D6BB9FC36AE857F24D55576B34077106420F2721B3620D655106B","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%WINDIR%\\System32\\rsaenh.dll","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%PUBLIC%\\Pictures\\Sample Pictures\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"C:\\Graf_b2.exe","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%LOCALAPPDATA%\\Graf_b2.exe","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"C:\\Graf_b2.exe:Zone.Identifier","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%LOCALAPPDATA%\\Graf_b2.exe:Zone.Identifier","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"C:\\share","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"C:\\share\\1554112008797$MAPFAILURE","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"C:\\share\\1554112008797$OK","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"C:\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"C:\\pagefile.sys","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"C:\\Users\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%PUBLIC%\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%PUBLIC%\\Videos\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%PUBLIC%\\Videos\\Sample Videos\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%PUBLIC%\\Recorded TV\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%PUBLIC%\\Recorded TV\\Sample Media\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%PUBLIC%\\Pictures\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%USERPROFILE%\\NTUSER.DAT","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%USERPROFILE%\\ntuser.dat.LOG1","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%USERPROFILE%\\ntuser.dat.LOG2","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%USERPROFILE%\\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%USERPROFILE%\\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%USERPROFILE%\\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%PUBLIC%\\Music\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%PUBLIC%\\Music\\Sample Music\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%USERPROFILE%\\Saved Games\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%PUBLIC%\\Libraries\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%PUBLIC%\\Downloads\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%PUBLIC%\\Documents\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%PUBLIC%\\Desktop\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%USERPROFILE%\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%USERPROFILE%\\Videos\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%USERPROFILE%\\Searches\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%USERPROFILE%\\Searches\\Indexed Locations.search-ms","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%USERPROFILE%\\Pictures\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%USERPROFILE%\\OneDrive\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%USERPROFILE%\\Music\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%USERPROFILE%\\Links\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%USERPROFILE%\\Favorites\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%USERPROFILE%\\Favorites\\Windows Live\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%USERPROFILE%\\Favorites\\MSN Websites\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%USERPROFILE%\\Favorites\\Microsoft Websites\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%USERPROFILE%\\Favorites\\Links for United States\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%USERPROFILE%\\Favorites\\Links\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%USERPROFILE%\\Downloads\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\g4h7miqt.default\\storage\\default\\about+newtab\\idb\\3312185054sbndi_pspte.files\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\g4h7miqt.default\\datareporting\\archived\\2019-03\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Crash Reports\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%USERPROFILE%\\Documents\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%USERPROFILE%\\Documents\\Outlook Files\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%USERPROFILE%\\Documents\\hancom\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%USERPROFILE%\\Documents\\Amazon Downloader Logs\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%USERPROFILE%\\Desktop\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%USERPROFILE%\\Contacts\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%APPDATA%\\Wireshark\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\g4h7miqt.default\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\g4h7miqt.default\\AlternateServices.txt","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\g4h7miqt.default\\parent.lock","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\g4h7miqt.default\\SecurityPreloadState.txt","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\g4h7miqt.default\\storage\\temporary\\https+++www.google.com^privateBrowsingId=1\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\g4h7miqt.default\\storage\\default\\about+newtab\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\g4h7miqt.default\\storage\\default\\about+newtab\\idb\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\g4h7miqt.default\\sessionstore-backups\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\g4h7miqt.default\\gmp-widevinecdm\\1.4.8.1008\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\g4h7miqt.default\\gmp-gmpopenh264\\1.7.1\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\g4h7miqt.default\\datareporting\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\g4h7miqt.default\\crashes\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\g4h7miqt.default\\blocklists\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"}]},{"path":"%WINDIR%\\SysWOW64\\rsaenh.dll","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"C:\\share\\1555535823872$MAPFAILURE","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"C:\\share\\1555535823872$OK","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%USERPROFILE%\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%USERPROFILE%\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%USERPROFILE%\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\fg6ygf16.default\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\fg6ygf16.default\\AlternateServices.txt","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\fg6ygf16.default\\parent.lock","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\fg6ygf16.default\\storage\\default\\about+newtab\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\fg6ygf16.default\\storage\\default\\about+newtab\\idb\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\fg6ygf16.default\\storage\\default\\about+newtab\\idb\\3312185054sbndi_pspte.files\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\fg6ygf16.default\\sessionstore-backups\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\fg6ygf16.default\\gmp-widevinecdm\\1.4.8.1008\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\fg6ygf16.default\\datareporting\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\fg6ygf16.default\\datareporting\\archived\\2019-02\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\fg6ygf16.default\\datareporting\\archived\\2019-01\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\fg6ygf16.default\\crashes\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\fg6ygf16.default\\bookmarkbackups\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\fg6ygf16.default\\blocklists\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%APPDATA%\\Macromedia\\Flash Player\\www.macromedia.com\\bin\\airappinstaller\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%APPDATA%\\Macromedia\\Flash Player\\openssl\\cache\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%APPDATA%\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%APPDATA%\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\#www.xinhuanet.com\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%APPDATA%\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\#www.toshiba.com\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%APPDATA%\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\#www.sprint.com\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\fg6ygf16.default\\SecurityPreloadState.txt","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]},{"path":"%APPDATA%\\Mozilla\\Firefox\\Profiles\\fg6ygf16.default\\gmp-gmpopenh264\\1.7.1\\how_to_back_files.html","sources":[{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE\\","sources":[{"report_type":"sandbox","report_id":"5ca1e025028838ca169fe800"},{"report_type":"sandbox","report_id":"5cb797b40288381186229014"}]}],"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":null}},"report_ids":{"sandbox_job_ids":["5cb797b40288381186229014","5ca1e025028838ca169fe800"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Malicious Ransom.GlobeImposter.Generic Sample 686c6150f2a2… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sample 686c6150f2a2…. Malware family: Ransom.GlobeImposter.Generic. Threat score 100/100. 23/28 AV engines flagged this file. 6 malicious and 15 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/686c6150f2a254152602e48172bda75b4987fc7f48399c669f3313441a726e96"}],["$","meta","4",{"property":"og:title","content":"Malicious Ransom.GlobeImposter.Generic Sample 686c6150f2a2… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sample 686c6150f2a2…. Malware family: Ransom.GlobeImposter.Generic. Threat score 100/100. 23/28 AV engines flagged this file. 6 malicious and 15 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/686c6150f2a254152602e48172bda75b4987fc7f48399c669f3313441a726e96"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious Ransom.GlobeImposter.Generic Sample 686c6150f2a2… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sample 686c6150f2a2…. Malware family: Ransom.GlobeImposter.Generic. Threat score 100/100. 23/28 AV engines flagged this file. 6 malicious and 15 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2d","11",{}]]