b40b1477...f3b4 | VMRay Analyzer Report
Try VMRay Analyzer
VTI SCORE: 100/100
Dynamic Analysis Report
Classification: Ransomware, Trojan

VMRay Threat Indicators (11 rules, 601 matches)

Severity Category Operation Count Classification
5/5
Local AV Malicious content was detected by heuristic scan 2 -
5/5
Reputation Known malicious file 1 Trojan
  • File "C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\rlrgwq.exe" is a known malicious file.
4/5
File System Renames user files 1 Ransomware
  • Renames multiple user files. This is an indicator for an encryption attempt.
4/5
File System Modifies content of user files 1 Ransomware
  • Modifies the content of multiple user files. This is an indicator for an encryption attempt.
3/5
File System Possibly drops ransom note files 1 Ransomware
  • Possibly drops ransom note files (creates 74 instances of the file "#NEW_WAVE.html" in different locations).
2/5
Information Stealing Reads sensitive browser data 1 -
  • Trying to read sensitive data of web browser "Mozilla Firefox" by file.
1/5
Persistence Installs system startup script or application 1 -
  • Adds "C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Local\rlrgwq.exe" to Windows startup via registry.
1/5
Masquerade Changes folder appearance 46 -
  • Folder "c:\users\public" has a changed appearance.
  • Folder "c:\users\public\videos" has a changed appearance.
  • Folder "c:\users\public\videos\sample videos" has a changed appearance.
  • Folder "c:\users\public\recorded tv" has a changed appearance.
  • Folder "c:\users\public\recorded tv\sample media" has a changed appearance.
  • Folder "c:\users\public\pictures" has a changed appearance.
  • Folder "c:\users\public\pictures\sample pictures" has a changed appearance.
  • Folder "c:\users\public\music" has a changed appearance.
  • Folder "c:\users\public\music\sample music" has a changed appearance.
  • Folder "c:\users\public\libraries" has a changed appearance.
  • Folder "c:\users\public\downloads" has a changed appearance.
  • Folder "c:\users\public\documents" has a changed appearance.
  • Folder "c:\users\public\desktop" has a changed appearance.
  • Folder "c:\users\default\videos" has a changed appearance.
  • Folder "c:\users\default\searches" has a changed appearance.
  • Folder "c:\users\default\saved games" has a changed appearance.
  • Folder "c:\users\default\pictures" has a changed appearance.
  • Folder "c:\users\default\music" has a changed appearance.
  • Folder "c:\users\default\links" has a changed appearance.
  • Folder "c:\users\default\favorites" has a changed appearance.
  • Folder "c:\users\default\favorites\links" has a changed appearance.
  • Folder "c:\users\default\downloads" has a changed appearance.
  • Folder "c:\users\default\documents" has a changed appearance.
  • Folder "c:\users\default\desktop" has a changed appearance.
  • Folder "c:\users\default\contacts" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\videos" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\searches" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\saved games" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\pictures" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\music" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\links" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\favorites" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\favorites\links" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\downloads" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\documents" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\documents\my shapes" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\desktop" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\contacts" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\appdata\local\temp\temporary internet files\content.ie5" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\appdata\local\temp\temporary internet files\content.ie5\xt1rpyg9" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\appdata\local\temp\temporary internet files\content.ie5\vb18b0kb" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\appdata\local\temp\temporary internet files\content.ie5\ketajp6d" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\appdata\local\temp\temporary internet files\content.ie5\03j4uqw0" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\appdata\local\temp\history\history.ie5" has a changed appearance.
  • Folder "c:\program files (x86)" has a changed appearance.
1/5
Information Stealing Possibly does reconnaissance 1 -
  • Possibly trying to gather information about application "Mozilla Firefox" by file.
1/5
File System Modifies application directory 545 -
  • Modifies "c:\program files (x86)\desktop.ini".
  • Modifies "c:\program files (x86)\#new_wave.html".
  • Modifies "c:\program files (x86)\mozilla maintenance service\updater.ini".
  • Modifies "c:\program files (x86)\mozilla maintenance service\#new_wave.html".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\appconfigurationinternal.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\#new_wave.html".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\assemblyinfointernal.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\class.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\dataset.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\dialog.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\emptydatabase.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\explorer.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\form.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\loginform.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\mdiparent.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\module.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\resourceinternal.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\settingsinternal.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\splashscreen.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\text.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\usercontrol.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\aboutbox.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\#new_wave.html".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\appconfig.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\appconfiginternal.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\assemblyinfo.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\assemblyinfointernal.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\class.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\codefile.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\dataset.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\emptydatabase.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\form.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\interface.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\mdiparent.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\resource.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\resourceinternal.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\settings.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\settingsinternal.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\textfile.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\usercontrol.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\visualizer.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\xmlfile.zip".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\resources\1033\msmdsrv.rll".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\resources\1033\#new_wave.html".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\resources\1033\msolui100.rll".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\cartridges\as80.xsl".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\cartridges\#new_wave.html".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\cartridges\as90.xsl".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\cartridges\informix.xsl".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\cartridges\msjet.xsl".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\cartridges\sql70.xsl".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\cartridges\sql90.xsl".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\cartridges\sybase.xsl".
  • Modifies "c:\program files (x86)\java\jre7\copyright".
  • Modifies "c:\program files (x86)\java\jre7\#new_wave.html".
  • Modifies "c:\program files (x86)\java\jre7\license".
  • Modifies "c:\program files (x86)\java\jre7\readme.txt".
  • Modifies "c:\program files (x86)\java\jre7\release".
  • Modifies "c:\program files (x86)\java\jre7\thirdpartylicensereadme-javafx.txt".
  • Modifies "c:\program files (x86)\java\jre7\thirdpartylicensereadme.txt".
  • Modifies "c:\program files (x86)\java\jre7\welcome.html".
  • Modifies "c:\program files (x86)\java\jre7\lib\accessibility.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\#new_wave.html".
  • Modifies "c:\program files (x86)\java\jre7\lib\alt-rt.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\calendars.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\charsets.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\classlist".
  • Modifies "c:\program files (x86)\java\jre7\lib\content-types.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\currency.data".
  • Modifies "c:\program files (x86)\java\jre7\lib\deploy.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\flavormap.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\fontconfig.bfc".
  • Modifies "c:\program files (x86)\java\jre7\lib\fontconfig.properties.src".
  • Modifies "c:\program files (x86)\java\jre7\lib\javafx.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\javaws.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\jce.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\jfr.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\jfxrt.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\jsse.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\jvm.hprof.txt".
  • Modifies "c:\program files (x86)\java\jre7\lib\logging.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\management-agent.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\meta-index".
  • Modifies "c:\program files (x86)\java\jre7\lib\net.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\plugin.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\psfont.properties.ja".
  • Modifies "c:\program files (x86)\java\jre7\lib\psfontj2d.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\resources.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\rt.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\sound.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\tzmappings".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\cet".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\#new_wave.html".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\cst6cdt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\eet".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\est".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\est5edt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\gmt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\hst".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\met".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\mst".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\mst7mdt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pst8pdt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\wet".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\zoneinfomappings".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\systemv\ast4".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\systemv\#new_wave.html".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\systemv\ast4adt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\systemv\cst6".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\systemv\cst6cdt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\systemv\est5".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\systemv\est5edt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\systemv\hst10".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\systemv\mst7".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\systemv\mst7mdt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\systemv\pst8".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\systemv\pst8pdt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\systemv\yst9".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\systemv\yst9ydt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\apia".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\#new_wave.html".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\auckland".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\chatham".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\chuuk".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\easter".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\efate".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\enderbury".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\fakaofo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\fiji".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\funafuti".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\galapagos".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\gambier".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\guadalcanal".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\guam".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\honolulu".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\johnston".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\kiritimati".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\kosrae".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\kwajalein".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\majuro".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\marquesas".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\midway".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\nauru".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\niue".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\norfolk".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\noumea".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\pago_pago".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\palau".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\pitcairn".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\pohnpei".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\port_moresby".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\rarotonga".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\saipan".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\tahiti".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\tarawa".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\tongatapu".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\wake".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\wallis".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\indian\antananarivo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\indian\#new_wave.html".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\indian\chagos".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\indian\christmas".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\indian\cocos".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\indian\comoro".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\indian\kerguelen".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\indian\mahe".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\indian\maldives".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\indian\mauritius".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\indian\mayotte".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\indian\reunion".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\amsterdam".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\#new_wave.html".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\andorra".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\athens".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\belgrade".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\berlin".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\brussels".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\bucharest".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\budapest".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\chisinau".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\copenhagen".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\dublin".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\gibraltar".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\helsinki".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\istanbul".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\kaliningrad".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\kiev".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\lisbon".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\london".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\luxembourg".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\madrid".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\malta".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\minsk".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\monaco".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\moscow".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\oslo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\paris".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\prague".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\riga".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\rome".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\samara".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\simferopol".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\sofia".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\stockholm".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\tallinn".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\tirane".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\uzhgorod".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\vaduz".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\vienna".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\vilnius".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\volgograd".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\warsaw".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\zaporozhye".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\zurich".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\#new_wave.html".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt+1".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt+10".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt+11".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt+12".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt+2".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt+3".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt+4".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt+5".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt+6".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt+7".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt+8".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt+9".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-1".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-10".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-11".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-12".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-13".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-14".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-2".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-3".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-4".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-5".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-6".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-7".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-8".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-9".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\uct".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\utc".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\australia\adelaide".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\australia\#new_wave.html".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\australia\brisbane".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\australia\broken_hill".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\australia\currie".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\australia\darwin".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\australia\eucla".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\australia\hobart".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\australia\lindeman".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\australia\lord_howe".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\australia\melbourne".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\australia\perth".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\australia\sydney".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\atlantic\azores".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\atlantic\#new_wave.html".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\atlantic\bermuda".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\atlantic\canary".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\atlantic\cape_verde".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\atlantic\faroe".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\atlantic\madeira".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\atlantic\reykjavik".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\atlantic\south_georgia".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\atlantic\stanley".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\atlantic\st_helena".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\aden".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\#new_wave.html".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\almaty".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\amman".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\anadyr".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\aqtau".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\aqtobe".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\ashgabat".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\baghdad".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\bahrain".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\baku".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\bangkok".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\beirut".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\bishkek".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\brunei".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\choibalsan".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\chongqing".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\colombo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\damascus".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\dhaka".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\dili".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\dubai".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\dushanbe".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\gaza".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\harbin".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\hebron".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\hong_kong".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\hovd".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\ho_chi_minh".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\irkutsk".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\jakarta".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\jayapura".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\jerusalem".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\kabul".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\kamchatka".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\karachi".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\kashgar".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\kathmandu".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\khandyga".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\kolkata".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\krasnoyarsk".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\kuala_lumpur".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\kuching".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\kuwait".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\macau".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\magadan".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\makassar".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\manila".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\muscat".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\nicosia".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\novokuznetsk".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\novosibirsk".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\omsk".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\oral".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\phnom_penh".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\pontianak".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\pyongyang".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\qatar".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\qyzylorda".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\rangoon".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\riyadh".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\riyadh87".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\riyadh88".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\riyadh89".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\sakhalin".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\samarkand".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\seoul".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\shanghai".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\singapore".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\taipei".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\tashkent".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\tbilisi".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\tehran".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\thimphu".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\tokyo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\ulaanbaatar".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\urumqi".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\ust-nera".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\vientiane".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\vladivostok".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\yakutsk".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\yekaterinburg".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\yerevan".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\antarctica\casey".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\antarctica\#new_wave.html".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\antarctica\davis".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\antarctica\dumontdurville".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\antarctica\macquarie".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\antarctica\mawson".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\antarctica\mcmurdo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\antarctica\palmer".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\antarctica\rothera".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\antarctica\syowa".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\antarctica\vostok".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\adak".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\#new_wave.html".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\anchorage".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\anguilla".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\antigua".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\araguaina".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\aruba".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\asuncion".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\atikokan".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\bahia".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\bahia_banderas".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\barbados".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\belem".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\belize".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\blanc-sablon".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\boa_vista".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\bogota".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\boise".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\cambridge_bay".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\campo_grande".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\cancun".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\caracas".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\cayenne".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\cayman".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\chicago".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\chihuahua".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\costa_rica".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\creston".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\cuiaba".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\curacao".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\danmarkshavn".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\dawson".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\dawson_creek".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\denver".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\detroit".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\dominica".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\edmonton".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\eirunepe".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\el_salvador".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\fortaleza".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\glace_bay".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\godthab".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\goose_bay".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\grand_turk".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\grenada".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\guadeloupe".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\guatemala".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\guayaquil".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\guyana".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\halifax".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\havana".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\hermosillo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\inuvik".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\iqaluit".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\jamaica".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\juneau".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\la_paz".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\lima".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\los_angeles".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\maceio".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\managua".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\manaus".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\martinique".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\matamoros".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\mazatlan".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\menominee".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\merida".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\metlakatla".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\mexico_city".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\miquelon".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\moncton".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\monterrey".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\montevideo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\montreal".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\montserrat".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\nassau".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\new_york".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\nipigon".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\nome".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\noronha".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\ojinaga".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\panama".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\pangnirtung".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\paramaribo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\phoenix".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\port-au-prince".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\porto_velho".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\port_of_spain".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\puerto_rico".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\rainy_river".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\rankin_inlet".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\recife".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\regina".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\resolute".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\rio_branco".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\santarem".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\santa_isabel".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\santiago".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\santo_domingo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\sao_paulo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\scoresbysund".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\sitka".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\st_johns".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\st_kitts".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\st_lucia".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\st_thomas".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\st_vincent".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\swift_current".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\tegucigalpa".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\thule".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\thunder_bay".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\tijuana".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\toronto".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\tortola".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\vancouver".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\whitehorse".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\winnipeg".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\yakutat".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\yellowknife".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\north_dakota\beulah".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\north_dakota\#new_wave.html".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\north_dakota\center".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\north_dakota\new_salem".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\kentucky\louisville".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\kentucky\#new_wave.html".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\kentucky\monticello".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\indiana\indianapolis".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\indiana\#new_wave.html".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\indiana\knox".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\indiana\marengo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\indiana\petersburg".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\indiana\tell_city".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\indiana\vevay".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\indiana\vincennes".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\indiana\winamac".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\argentina\buenos_aires".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\argentina\#new_wave.html".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\argentina\catamarca".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\argentina\cordoba".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\argentina\jujuy".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\argentina\la_rioja".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\argentina\mendoza".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\argentina\rio_gallegos".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\argentina\salta".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\argentina\san_juan".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\argentina\san_luis".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\argentina\tucuman".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\argentina\ushuaia".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\abidjan".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\#new_wave.html".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\accra".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\addis_ababa".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\algiers".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\asmara".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\bamako".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\bangui".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\banjul".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\bissau".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\blantyre".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\brazzaville".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\bujumbura".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\cairo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\casablanca".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\ceuta".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\conakry".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\dakar".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\dar_es_salaam".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\djibouti".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\douala".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\el_aaiun".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\freetown".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\gaborone".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\harare".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\johannesburg".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\juba".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\kampala".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\khartoum".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\kigali".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\kinshasa".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\lagos".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\libreville".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\lome".
1/5
File System Creates an unusually large number of files 1 -

Screenshots

Monitored Processes

Sample Information

ID #665757
MD5 6d92f32b6611ba982fd122c1f0af68a8 Copy to Clipboard
SHA1 06eead569c68a759ede51f4dfc6cafbdbec770e5 Copy to Clipboard
SHA256 b40b147728289e7d7216008c66a7c94ea9adf5a3d37b3dac1099d4524391f3b4 Copy to Clipboard
SSDeep 768:mvuye1kVtGBk6P/v7nWlHznbkVwrEKD9yDwxVSHrowNI2tG6o/t84B52MM1XRT:8eytM3alnawrRIwxVSHMweio3jM15 Copy to Clipboard
ImpHash ba2ce247fa49357770ce28f139e2f1ab Copy to Clipboard
Filename rlrgwq.exe
File Size 53.00 KB
Sample Type Windows Exe (x86-32)

Analysis Information

Creation Time 2019-05-29 02:45 (UTC+2)
Analysis Duration 00:04:01
Number of Monitored Processes 2
Execution Successful True
Reputation Enabled True
WHOIS Enabled True
Local AV Enabled True
YARA Enabled True
Number of AV Matches 4
Number of YARA Matches 0
Termination Reason Maximum binlog size reached
Tags
Function Logfile
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Before

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
After

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Screenshot
Expand-Icon
Exit-Icon
icon_left
icon_left
image