Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/05/2024, 09:23

General

  • Target

    2024-05-07_0570eaafff1e468e4b45554b814035b7_bkransomware_karagany.exe

  • Size

    677KB

  • MD5

    0570eaafff1e468e4b45554b814035b7

  • SHA1

    2ee3b08c987f28942005f08bb2acd4ac4d2d6ee3

  • SHA256

    ae72ac44d356e6edc2b0a8943f95c2e0efa2418a6627555f92910a73d84e77cb

  • SHA512

    f186ebe50764d0382ddf2bc4a4ba0e597b4851d16ebbf5bb9a5d7ec3c2003de65ec8c0ca798cd97765a5090024ed8e05b18749e49f22539af341acc2ad8fbdab

  • SSDEEP

    12288:RvXk1iJKQ1uBeAMlwesHU8wqy2VYCIbvpOBlU1RlgIDMCZgjtGlxHZ9/I:Jk131SwPHU8X31PfU17DhZy0lxHZ9/I

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 6 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Drops file in System32 directory 9 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-07_0570eaafff1e468e4b45554b814035b7_bkransomware_karagany.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-07_0570eaafff1e468e4b45554b814035b7_bkransomware_karagany.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:1724
  • C:\Windows\System32\alg.exe
    C:\Windows\System32\alg.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious use of AdjustPrivilegeToken
    PID:1096
  • C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3724
  • C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe
    "C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:5044
  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:2296
  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"
    1⤵
    • Executes dropped EXE
    PID:5008
  • \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
    "c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
    1⤵
    • Executes dropped EXE
    PID:3316

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe

    Filesize

    2.1MB

    MD5

    79723887e26dce6c06062ae60861bf1d

    SHA1

    fa9da9f2299e7e0c592797252085a1e678550395

    SHA256

    a97c5ab3eb47aa775e9a477d538cf27ebdcbd436a49dc14ccdf28132cde83ae5

    SHA512

    1ce9e0a6330aeff6aa2dff4fce97beb6e61a67da98f95f2b3406175caf8601e57ad16a66208542b84cee9631fc3440fb9268b4e687d49ae7ef0bc558797832cc

  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

    Filesize

    789KB

    MD5

    dbe6dc8cb2f8b7413f909fd266856963

    SHA1

    43c51137298c7e264d6fa48ea70b0d0e7c375fc5

    SHA256

    ae4fca3ef54526e84824401ec7bb980b4b34288c6893bfb52d8410cfbf40e06e

    SHA512

    f69f976d07f460e8e207a5dedb7800e9f9b8f0ec8bb6cab1dade690bf130106827f69fba07c8d49504834c1d9f7c580152d04e131454bbc09a885ace2aa5777d

  • C:\Program Files\7-Zip\7z.exe

    Filesize

    1.1MB

    MD5

    7a92b38d4d7d6495f864a4764e5e8443

    SHA1

    78289a7bf9a85ed31f45523580d5f1b855c1a434

    SHA256

    72b3a8f5f98c9bb9ba9d65eb62432f7a36aa6e7f25fc0445c540e6cb18660e8c

    SHA512

    17c4ad079a53f1b0694ff1c48e6ff0f558d0f1dd448d81ed46294571484869f0ef4f63703c3f917565b2cf59f3adcd3fce045bf6f5c5f74eae3021d53c6c9278

  • C:\Program Files\7-Zip\7zFM.exe

    Filesize

    1.5MB

    MD5

    c2654ca0c3d5f10fad51fc0d0984a133

    SHA1

    c2f3878ada0ddf33d5491027f74784b6617730bc

    SHA256

    364c5a8bd4f1ccb100f425da0e4d8eaf5519df7c489536a44c43f87b817bdf99

    SHA512

    7f88dfcd905af82c60d97799baf0025e731195668e06f26e07c0cbb3747535562567df658482b8c4d15db0c7726176cb455e07bf8e0eb0a20ba966ea038f29a8

  • C:\Program Files\7-Zip\7zG.exe

    Filesize

    1.2MB

    MD5

    c6baeb5d03a77015ecb1180c9afab5ea

    SHA1

    20965adecbbd63aedcd8f792d52e67f61268202d

    SHA256

    164f52d028b349b71418b60d9b16ef6ec8b91400b008d365d00548a276079f52

    SHA512

    e42526625a5ca5d77b8f880d4b587da5179189072449cca9b75736f0110f1ed2190278932f91da2450a62a965ca0753db743663bda43beeb8929838b9a2017de

  • C:\Program Files\7-Zip\Uninstall.exe

    Filesize

    582KB

    MD5

    f3e6e9983cb447e2c9ddd9377ba1eccb

    SHA1

    1b7ead139408795e0c08c8e4cc7362036cfb83df

    SHA256

    3e00328b4977567693446ed4622676d0357fdac52bfea2a47d6cb51e992f2d98

    SHA512

    c1997d11ebec81f2117b1a7388a1e72fae7d7519c6f864add56251b5c27b2c3e217c23d15bc7ddae6f55a91dc1755cfc2696e7fa69a23205e79350113aa18cdf

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe

    Filesize

    840KB

    MD5

    a219d4f37747a40981c431a2a272d84b

    SHA1

    01d3d491384c8d574a0a6d93a586d40f1b496fd0

    SHA256

    452031e42f98103a1748ad343966a2465f665590cbc203043d8acb33b94a884d

    SHA512

    be515e5677244312dec71b7c14c952032f8a94b756a21118724e791a329088bcf9183066decf9bf5db7a9cbd12d9c10bb3ab9aa8e53fe9edc3b76d5253adb4d4

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe

    Filesize

    4.6MB

    MD5

    10ae4bc700398a6a3708b0a5299fd6e1

    SHA1

    12a64703d789720be4bba2bf8a371903e426fc45

    SHA256

    3a4af22e01bec910a8605a22623ad6717fd47521a8ae1f282e051c443ede5292

    SHA512

    9f0441a317fbd5a1400aacb056d33815c6603cc200bc09d2b629b6e89dd81cf448b819637a063a0d70dbe6ed7b5f72b424024b4ae7899f12992cb7878b284732

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe

    Filesize

    910KB

    MD5

    1debf9840f44c7c7f0db8c01469a213d

    SHA1

    14cab2fc112041a217c379b2d2c75e1723a6ad9e

    SHA256

    f198679cbfbf886c6f762600af66947c448580efe2c8ebc7355eff2edf25b576

    SHA512

    278e1f8211d80aba0b322448dbdb1be9e1d27951f0ec09d9986fbdf272e63d0c836ca226ca3bb9e58f19791c2a6bbed661602874ff5563e0c7e5c3153dc598ab

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe

    Filesize

    24.0MB

    MD5

    478fea562fc80016acb6595223314a00

    SHA1

    f454e29b2eeda91cc1087f8effedfbd0dc8316d3

    SHA256

    a60cfcccef79994f7b52fd96ca089ccf37cff06189a05f0e88c7b07153b86b0c

    SHA512

    f601be971c9030af6ab3c81f3bf1a715aa7c55b43dae44f1a8955da35f4b87ea13e4a0d9005c2abe4646f27b1f7d6d644bfd8c7344c2b9f8b86fcdafd90c2c81

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe

    Filesize

    2.7MB

    MD5

    6290851e0d5c4b082db7f9b43e1bca62

    SHA1

    992fea9ea2afe0210a905dae83bb4e6095f04050

    SHA256

    341bbeaf20d3c5274b5e967b0074bc5c77d0faa9ed3efcfafc2fad01bc80bd82

    SHA512

    1136d0b19aae968d82a392623b8ece42b08a4a2bf330b32b159e99298e06e13304c6d0f7c001253c7165e682b932a5801fc218bc370d111c5b184cabd5122c5c

  • C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE

    Filesize

    1.1MB

    MD5

    5e2a11d9e93af09889bbde0e2ce9f5de

    SHA1

    c042043d03bbc17371116d43580f76cdd5d4adb7

    SHA256

    b7abbb3557dd2b80482b8f94f5936297a0dd16593a4abb68260249d91ff48856

    SHA512

    b17b09628519a87a430a2810a0f5bff3749c46b5dc25a8cd3fa9340cbfd6eababf67f131c7b46d8cfd8372f76d4e72a5ffd474ed0b3c63ff95b550958001bf57

  • C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE

    Filesize

    805KB

    MD5

    08208e498b4cc3895abccadfd0b5e111

    SHA1

    ede375229d1e416c8fc06b94b2428aa4fc4aae5f

    SHA256

    2a50ec626d0e8a6ee6d74221338727728470270da99447b2ee822bce32e16b12

    SHA512

    dc57882174562762ebde4c9a7a8083c231f5d01c4971fd19556da401a598a4f011dc4ad7dc2ce5613a36979ecf7dbf76c06800becc7a7f6a15ef820caa10f213

  • C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe

    Filesize

    656KB

    MD5

    33742e6e08a277adb5b918a81ea2abbb

    SHA1

    f94a559fa73eb6d7667562252c7137c7d75687d9

    SHA256

    653d8c3ee414313917061d99d0590c89c8353834cc18400ac228a497e2b8fbc1

    SHA512

    5314bb324d3d163e5f6776a073dd79a2ae536097ccdf3376ea3c71f8fcf420be9d36589c24ee4aeb5452cf113ac8c03e63d066f2875a904bb42ff00438179141

  • C:\Program Files\Google\Chrome\Application\123.0.6312.106\Installer\chrmstp.exe

    Filesize

    4.6MB

    MD5

    5c22f8134f432e1a4cb5d6ca61f6ca30

    SHA1

    532ace0b7ee09dfa02f4bd1584ffc477637f2fdd

    SHA256

    0858d4c0ab9a1f55b752afaed7adb00aea26e79f26fb67708044192df8818aff

    SHA512

    f28858d3ecdc49124d1a52f19fa5ecb0231c23047a7263737bf88d707cb742372c318f286a9efa783133d4d7037c5073b87b07707cb27e7bd12aee02df91d60f

  • C:\Program Files\Google\Chrome\Application\123.0.6312.106\Installer\setup.exe

    Filesize

    4.6MB

    MD5

    148a72b730c0d37272df7bcc8d628120

    SHA1

    256a9aff8cbdb9fcff5ca148c67b76af47084463

    SHA256

    55af29d640c1c5d27a602ed592bd93a1cf6885833ca884f37bd3fe69bba74b16

    SHA512

    c813ced2479e50ac63afdf874288a401b4f1a997126ef384242c16dc191129a5ece3137362e3f132dfc0ccf3139c3e2eb74413dfd1148ab26a57aed3b0e8b168

  • C:\Program Files\Google\Chrome\Application\123.0.6312.106\chrome_pwa_launcher.exe

    Filesize

    1.9MB

    MD5

    dafa30503c0f649e67144a7f34bacaad

    SHA1

    3dff742bf11f58ef310ed756ce65fdfc94e7ce19

    SHA256

    d0e50078b6430ace5644295c3ff7d7ded285afd2c4575e696b84e4dfb5d4152c

    SHA512

    0626e6d50f0713b7bf2059d970a1e78adbc57cdb11db47d594baf37199b496cb9c9a46634a07adf68a5efd47bf90b933648571ca1dae754a302633fc4830de8b

  • C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe

    Filesize

    2.1MB

    MD5

    e547f7f89b994ca7bd1002a15a2fc1a8

    SHA1

    50cd568f20a5915c5ca93888d6629e4f13144119

    SHA256

    4abc760009211a36c2fccf8f36fa9b6bec7bea749060a6446e4d49fe73c80f1d

    SHA512

    7781a8d71babd172221aabfecade8c067145a2f18af3176dfb2e01fe3dccda02c2290ce7d7bfb99f57042b119fec51fc2b0fbed054b6333fbfeadd3391260abc

  • C:\Program Files\Google\Chrome\Application\123.0.6312.106\notification_helper.exe

    Filesize

    1.8MB

    MD5

    af32b69fe3a65bc7829a19b507d8584a

    SHA1

    b46bf284b2f58b1d6ef6626e3476bf24c7207532

    SHA256

    7bf4f5a98c9786027c1b398f6cccbfafd87cb51f7a266dd500ddac939313635f

    SHA512

    d6750e491d95c65fed87510118ce43ff81b10c630442462c8aa49d3291cb78deaa0933d695248d0274634d82640c999f964e47e9dc8412cbbc95811bbcee3efe

  • C:\Program Files\Google\Chrome\Application\chrome_proxy.exe

    Filesize

    1.6MB

    MD5

    274a1ac6ca49c8dfe457dc0f294c38e4

    SHA1

    f6ac6c58b5039fea6ce2ae414a2626da1a49ee61

    SHA256

    cb3301a3bebc3540285cf6ae106d5a0fe6e52d02af773c08dd2f270641181782

    SHA512

    564e6e55f8678e48bca4c1ecf478d9b34807db56d5bdc2783e8f9ca994fbf6de2b0e75ad09187b90097e7eb6587d3b24f920dbbcee2d8c6dae36653e8bc321d3

  • C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe

    Filesize

    581KB

    MD5

    e320d0fccacaf63ce8ed3ca7aab74499

    SHA1

    4ef961c68d1b8a30372fd762daac419493eaab37

    SHA256

    0b94f7d5b771d3f6e3c2c86776a3ffdeac24280ce36b93be2aad539069278e12

    SHA512

    9474eb9c600192e9e16b9afdecd918451e019d26876dfc4dc71034d2836cde86b5b2f1a14d3e653ffaaff1171cd79caa5ccd743ecabfa3e4f85ec53522c68f0d

  • C:\Program Files\Java\jdk-1.8\bin\extcheck.exe

    Filesize

    581KB

    MD5

    f24156d4c767751d0f4b94e7df157044

    SHA1

    c08c5437f590f0da62eda3177a53e4ba36d3c02d

    SHA256

    f7ca6015fe9addc35c7ff27b61b18e2a69b7b951eebdd304d95782bad3fac904

    SHA512

    0f33b9357dd9f71de8d95a9388664516a1db14a4e92cc3a6581902e03d896714943f74bc691ed6527691e6d9b8e5d163b7fc5cc2289f4f98e5d8f5d0c5707fff

  • C:\Program Files\Java\jdk-1.8\bin\idlj.exe

    Filesize

    581KB

    MD5

    09896c023724d69e57bbc217daaa2b81

    SHA1

    8fd81636ad4cdb0c2c6258b5618b61f2320e58b7

    SHA256

    1ecaaf9518756702025cd83e74cc0dfab376efac2905d718d24642e2b2612cc8

    SHA512

    e9cc291932053fd2b4545152edb867513c2a70905bd114fac45ab7ae0b4a1522cefb487121c0926339e9aae33d84b48f061eece9b3426b1eddd4896a83eff84b

  • C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe

    Filesize

    601KB

    MD5

    b5f7065fe20b6096ff866a0b0b8638ca

    SHA1

    3922eabb929c62f8ec6e9d297b709ea6370ade6d

    SHA256

    c84505c0e6f0ac37a127c7ac9fa7ab26942e90e26896b24c133794a1077d12a0

    SHA512

    1e5e8798e584b1ae0b0f3cd1cbdefbd5ec7fb78136fbdee5174b7e244b6ee90753a839a4767870785e5cbd7d8e713646acd3e259b99f40ee149ba0b08886736a

  • C:\Program Files\Java\jdk-1.8\bin\jar.exe

    Filesize

    581KB

    MD5

    c3d4cc7647087610f0c7749c38c16fe7

    SHA1

    66250f9d6cca8b0dd517465b82aabf9c890ff7ba

    SHA256

    9f85b1ff41bda941749247cd1255c6dc0d8b873a364c7d5db60cd320b9613aae

    SHA512

    0350c6d48c5490c0d780c0d3486280c806ab3ade11abcf853c78b827a32c8aa15bae419ce230a9b251fd2f5a97212a0ae6a59d663c456f5c7ac42160355b113b

  • C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe

    Filesize

    581KB

    MD5

    56bfca7baf106e40224fda03888d3fe0

    SHA1

    a654b7e8317367cecef3a7d60dc93ca0bd14841f

    SHA256

    14bb01e761eea4ed88d22f4cd503df96395018d91f1b0afa9a6de7d1e36c9221

    SHA512

    4ff3a95dcec87b5e61968a07b4f4f6d2eb0c93c4a5a3641a85fd934dfc806981c180f70285f4c120c368fde53a625995e920b7f3976fd950507994d97a97bc10

  • C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe

    Filesize

    581KB

    MD5

    ce917180585e25a67ea46877874bd96f

    SHA1

    e40ae39cc3dd6db73aaba38b21823e58fa11f29f

    SHA256

    91a9b7ca2982f0ea83e9f9b8d5dd66745e439861c0aeb206ac491b8e4929709c

    SHA512

    38cd59c16b89ca6aa95e1d9a28e8a2481aaba97e6e034065785ec6b3422cc4b0ca5a00f053553d38fb13529e06e9cb93812f94dfdcf4af31a24a95a34c055dd7

  • C:\Program Files\Java\jdk-1.8\bin\java.exe

    Filesize

    841KB

    MD5

    654423f3ad257a8ae7fce18495ab8950

    SHA1

    dec28973deaacc15e0086b3b3686b8792736e313

    SHA256

    d0c56614c6df8f7bca942afe9b53991950058be3ef10382c77d0ab7634f8db64

    SHA512

    fdb0b7bb62cbaab929c4e20b180adf8698c5e134ca4781fa82cde93adb8b5c95aa0b81ab37931aecef689a6149f80c73a88baf1f64adcafc8df6afa6593504a1

  • C:\Program Files\Java\jdk-1.8\bin\javac.exe

    Filesize

    581KB

    MD5

    d77e603d90ed0b53a82be0255f63da9f

    SHA1

    e17c4d3e0cff11de6b747b542141a38572ab439a

    SHA256

    5a01fee6cc6577455cb693c906d7ccd3ae90d351e938a3539a8cb88db3db79af

    SHA512

    d5bfb3fffb1426bf0ff1b300aeb9e87b72e76b1c4346cf930871c0d1a462e63f6c8651c172ac19ce3bd6eefdc87abcd1b9973bddc7c991854b0c6c03322dbfa3

  • C:\Program Files\Java\jdk-1.8\bin\javadoc.exe

    Filesize

    581KB

    MD5

    b0d74a48cd844bfdb65e1066d9b00887

    SHA1

    ef48aeca69e526ed080dd7471a3d9ecd489197a3

    SHA256

    b84f707c931db83dc78462b7ad5e01784000d11a6995f5bcf6d4c1b44796a823

    SHA512

    e150549d7a0abb4745d9ca6fbc3878c91940c2e89bb37363e7b97ffdcb9262a4c65ffec512a4bcbc970019ed82aa5dad3b40a58353568609777637544ed8daf9

  • C:\Program Files\Java\jdk-1.8\bin\javah.exe

    Filesize

    581KB

    MD5

    d70f3cf31bdd2aa287101b2106f733c1

    SHA1

    b8c1f7130db883d109925fdad152647fd32cfe6e

    SHA256

    07646b43948d8cd9cc4c9862612dd01453abbf4b7cc29aa47e2cacded8506aad

    SHA512

    6cf9da50deb65c15eabcbcbe62b4606077e13acd2828b6e96390bae0e9bcac13dfe9c69049612036fb121f18da5d875cd2c3aa1bb34b877f809d64dcb173dcfa

  • C:\Program Files\Java\jdk-1.8\bin\javap.exe

    Filesize

    581KB

    MD5

    29bb2b7ed3257387cf20b2d68cab2ca2

    SHA1

    250858b80c601e7f3677134a2f9db6687e2b0c81

    SHA256

    3114660f9c2e55f6edf7c269ab8b69567db5432124047819a97f692415d22a0d

    SHA512

    34c33c07d0dc12acfd1df33d61426a488aa1f22826744f7728437df9de87c6049b68be194fb058b2f5006be0c3ea113954d3366bca429993c69055cc3f7bb8e3

  • C:\Program Files\Java\jdk-1.8\bin\javapackager.exe

    Filesize

    717KB

    MD5

    ad2d26e036c69fec49f3140376cd6102

    SHA1

    906104d498c874ffe0168e9ee2703fc4fb03bb39

    SHA256

    1289d39fd3d0e7cbe284596d1e8843917f6e8098aed54fc446357c4e65558bd6

    SHA512

    d8dc4e06fdbee844c0194ecbe5d54e248fe041f76128b908b79eb10839246e18aca9959425a1324744e8c8bb149bb806383aeb15f1b6301502a06f0e85ecfd55

  • C:\Program Files\Java\jdk-1.8\bin\javaw.exe

    Filesize

    841KB

    MD5

    728bedacf7844b17de80d98c691e24e8

    SHA1

    005e30a15d39db7de6ac8b0a31374a3be8be2878

    SHA256

    b527250208eadc8424214d4c02b23e7380f2b01989483b6ae460a38c6c84f4c3

    SHA512

    f8f2ddfedc79f0079f8787277a4f31b89b15030e158be0177db76187318e2545023d2ed95456639be3a6d9f1e7e324d5f8350bc83783ca10d8577f7e6d32bd5e

  • C:\Program Files\Java\jdk-1.8\bin\javaws.exe

    Filesize

    1020KB

    MD5

    312391145297fe6e378f00cd662e24f1

    SHA1

    e74c5189cf1df3be9ad7723e7fee070fac5fb673

    SHA256

    2ae411c89b8569b8faca21dbc7d2dc3daac162b507e7d55ebedf2d75de22b357

    SHA512

    021240534b140804fd6f8e6cbca5f707f1a025de38008cc0039181dc2940a6212b84b5025f8e623ee4fd1947d385ace71e28d8307690930b456aff2839572f66

  • C:\Program Files\Java\jdk-1.8\bin\jcmd.exe

    Filesize

    581KB

    MD5

    d4b6460642c557d7e645514e1422bef6

    SHA1

    aa8ff419fa0b5788d2dc908d6fa6936ce1caf1f9

    SHA256

    852ede5919654a29b5b5716e2f31d40d9c9ad406fc4bc21306cfbe29488ed25f

    SHA512

    5c96e40d9789de6c5d367bb27baad9ee09c9e086fd493eea75b091abc23572b23f4900e7566986f30a7e92d083c144fb5a34df9715c8e04291026d51dece8946

  • C:\Program Files\Java\jdk-1.8\bin\jconsole.exe

    Filesize

    581KB

    MD5

    f7b1d3206a29111e787436961e2bdd88

    SHA1

    b103a7ed3aae48879ae079775d92ec1da9c03d60

    SHA256

    622d26c0ca0d2c34476eeae00af2f488061f0a4b1f4408b654073845d58ee0f8

    SHA512

    92f0ee4b765a7f26753b9cccbdbfe307f0dccc6955cd1fadb0fa40e60ee1747f688ed84506d3f5c951fddc235749719b9ee96f1b9250ae57cdc6324c4950c86c

  • C:\Program Files\Java\jdk-1.8\bin\jdb.exe

    Filesize

    581KB

    MD5

    7b207fdfa7cea46a70b5ad6a155913a7

    SHA1

    b2d476d6fe8e5aa466e43b59ad7c4ddd1506dd6f

    SHA256

    b0c77d2e50d1e4e4565f68939ba212c2ac34ec0f09411109428f92f4d0f5cbe3

    SHA512

    7de686eaed76aa35b50ba14efd73429d20423ba287eabee257a8c160506c677baa05d70eb31178273849783aa9502e0f43172c81d32887834da2067390790f76

  • C:\Program Files\Java\jdk-1.8\bin\jdeps.exe

    Filesize

    581KB

    MD5

    b62ba59f82ebfe108422114347309119

    SHA1

    435d368a7430c5a8531747b48f27e0fc7e73a614

    SHA256

    8eda470c923ccb246e3fad81073558546c52ae589cbab28a99004025b7c89010

    SHA512

    67a161e956d454e00726d539d733f25ac6d68b45efffdc8718d90d99751244ee6caa946b009e0044b066599be61781eeb63401e5034365cdfa148e9cc18c1ecb

  • C:\Program Files\Java\jdk-1.8\bin\jhat.exe

    Filesize

    581KB

    MD5

    58072715feebb5ac999e9b0d9561a391

    SHA1

    d4f351832b66862f236714a4fda43965a607e5c6

    SHA256

    84ddc77fd19e29e482347a89c26ab6ea5c3418fe5f7534e1d6effbe66501c264

    SHA512

    1552b981f36baecf6bc9410b98b4c8d6f35bcf95912c956a2fdebdfb7eb8bf94dca4afb806410b25b9670ff9a4ad547531e9289a6f850c2133bd5b58adb4c96b

  • C:\Program Files\Java\jdk-1.8\bin\jinfo.exe

    Filesize

    581KB

    MD5

    58b7b2da0b10dfd9f43e3136e3a91f99

    SHA1

    981e14d0add8e6560da090915cbd7d3b2e933092

    SHA256

    30f8f683a4919ab5bcda3dd6a0e7c88c173e8a0384de237e2d819349660f973e

    SHA512

    69058f4fbfee6d2f216cfdd314da558dddc536b2df5aff87e50010529aa53f687ae3479532b87ec0dac7a5a33ae7c8b398266d35fd186ce8599cf9ce09615ef5

  • C:\Program Files\Java\jdk-1.8\bin\jjs.exe

    Filesize

    581KB

    MD5

    95ed80fdd9b2604263c6a6474d2c4011

    SHA1

    773f6e4b9461cf060737e5c1b460c2ef8a85ff57

    SHA256

    a0aa2aa951363058c3262084b058ffdf7491cd6e9b6489b6555f8fda8f15458f

    SHA512

    fcaa8a803a1807184ec7d7384cb7b187df59174d0fc432163d5d7c18cc22c489327e5490b3838b47c886d77903b5d5ea3e55e2a093deab988fd57772a787303e

  • C:\Program Files\Java\jdk-1.8\bin\jmap.exe

    Filesize

    581KB

    MD5

    ef019a901591b1213f7a4fd6a94dd587

    SHA1

    30a8bb4eb5a3efbc01b0fd276542914f3ce89810

    SHA256

    44a76025109ad2f8b60770b7c822e50dbca448bca5bd7ab31a4ad4eabd8db67c

    SHA512

    bae52c5ee4543f6551c346611655a681886214a093b719e38a8b1e47e0bf19c544380843b157d71eb52f4b47e0fa4bf0e3f27150285624eb1d57b1107d16e3fb

  • C:\Program Files\Java\jdk-1.8\bin\jps.exe

    Filesize

    581KB

    MD5

    4af3453b4fbbfeeca63becd5d161c77f

    SHA1

    c1783e678f2a9f834105d1ea21bf5a33972db433

    SHA256

    ed294d572a2485a0d90a25d0c6bd21df1c5f397c34f0eb414077519bd5dad970

    SHA512

    44ad6dd97e7e7157b96854205e2aa9d865ac43b9231a3eae12ed2e474a41d981a4e8fcbb08a79137824e1b84fe37b59ef1ab770fbaca86a444db7ef286e1c8bb

  • C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe

    Filesize

    581KB

    MD5

    632bff2e0d731ca8c96e04d9599ced1d

    SHA1

    882b31728675fe753ea1cac821ba4850be635a7c

    SHA256

    b40c2c1b1a0debdeb3cdd53bf5c81729713ee300ee02a7597cd5a1692c607e84

    SHA512

    6dd29404f88714e62fe120b6b219aacdb034357d5cdadcefc4d84a27e237d026df24eaf9f21f32345b299da7bf98f0d4f4414b6f9bd10140d939cf82fa0ae58c

  • C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe

    Filesize

    581KB

    MD5

    05804cfb994a75d18ea061ae8acbf900

    SHA1

    d1b71c4c115e3227024ba7a884958d82613086e7

    SHA256

    2b89b7d5ae72059e0066c1f5494d83a5ef9033bb04e700c33ab564d6042f92e3

    SHA512

    9f040867b15cd71292c431326250d9b0d9b0b9f64cd5f565fe62f4d75dfc5fb8d2f7c0900b6a8312c320cf41b6adebd8814c7ab7c15f447d6d71e7564dc80726

  • C:\Program Files\Java\jdk-1.8\bin\jstack.exe

    Filesize

    581KB

    MD5

    3bb65ce6bc9adf983bac67c953d30e9b

    SHA1

    5677f4a9e87fdbb8dd7b6a59f580ddfbe55652ef

    SHA256

    b0a84b096b39c2ab6003cd494c8a7cba1a4e90794fb2e0336f6e615bc14d7350

    SHA512

    138026dda53d793e1bb29b5318e94f8ba7356ff35de4d5ea33e9624b2b286eec3df66a82ab302fb2d5f589a71ecef802a23416e5d7c9e20f05aca9e7c575b1bb

  • C:\Program Files\Java\jdk-1.8\bin\jstat.exe

    Filesize

    581KB

    MD5

    57a6c0cc42d11317b36b9b95c32081d3

    SHA1

    793759872829dfa8469f72478eb126309c7053ef

    SHA256

    bf705690f35bc9fc28a43a831c05970caa2a6d1a88b321e3b5912d1b93058bf0

    SHA512

    e409e0f481646469b99aa4e469b30d60af4f44013bc91be8ae12587188faaa9195a98e4e46a8007c69814fab6aa4b0d180bc60aa449ef4b94b29daf9748ba40b

  • C:\Program Files\Java\jdk-1.8\bin\jstatd.exe

    Filesize

    581KB

    MD5

    c02cef48f235865789fecaa995b938f6

    SHA1

    d0420816cd976715ce95f80ca1318700234c3788

    SHA256

    89949105ebc3f25a2e84348c5260bdaee4eca971905448c10aba5c537b102fb7

    SHA512

    cddb67626a3d9ca6c36c8aad4a8b0023198864deed7f9e2b7f5a4d805c9a874befbf2ff403f9c83ad1f79d81e3b5e8ab076b868eceae0b4d187a27b9442a29bb

  • C:\Program Files\Java\jdk-1.8\bin\keytool.exe

    Filesize

    581KB

    MD5

    735a7c68bd6fa28f4432075f6615214a

    SHA1

    ca78a1bd67e2262c9167e672ac31222d16a0b95f

    SHA256

    bed3734568dd9b3bee28809e3915154729397d50efd55d8745713cdeae684c24

    SHA512

    5818c5a98075bd0827a2d1fdace0d077ec7bcf1db9eefe3ad4d2151883f80af4bb0677245f9afee26ba27ad6e9c04793fdc9058c8aa1722c0c5671bdbe4c6d91

  • C:\Program Files\Java\jdk-1.8\bin\kinit.exe

    Filesize

    581KB

    MD5

    bc9632365b582773c993189d342a16a6

    SHA1

    16368614db5d1eb470a774d71799bfd2b0c8c247

    SHA256

    71ebd35073a0842b2e63a7508f22fb84fcbe7dfec659d13cb9a918b1b5253505

    SHA512

    2d748c8208c61964588f3ad2f204c68067a83da4c1c7da329d7287ae7b620b1ea04978ee6768bfee471569c15434c1d0f48c8bb9abe2e9fd32d9a1b57b946aa3

  • C:\Program Files\Java\jdk-1.8\bin\klist.exe

    Filesize

    581KB

    MD5

    8e481ebcc4a3bd5ff84e71ea71b42622

    SHA1

    7c9e51927375fc98292b95ce8132422a81fd01d1

    SHA256

    78ae982b9902a269f0dc6a2e8352424f011c820b7e082c3bc4da0dd718789502

    SHA512

    aab9d9c3e34fff17f0e06d627cb476d6c31e97133a2fcba3e318ef41e23161156061a29612a047d827ed22c87e11cba05fad70094746182899a2ccbd7e13b5dc

  • C:\Program Files\Java\jdk-1.8\bin\ktab.exe

    Filesize

    581KB

    MD5

    7290f3dfc687dd52e4438106d7f895f7

    SHA1

    9ea77600af276635cbb02a80662be32c8fb3ee26

    SHA256

    5804df9dffd68b5fbd61f0722da94cb1ffa93d7b035e6e003d595f6dde18330e

    SHA512

    3d6fc17bedfa96793789c08e26e1acd67c7afc0857d86bbea52d012ac51ffbd91552968f1cbf60df311cd44e3cb4a04589cd5757e29a85fda254b3cbaebb879f

  • C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe

    Filesize

    581KB

    MD5

    5aacfb8bfbcdabb2c59eb3de8e66f218

    SHA1

    d81544b7d436f9f99c623e1371575cd929ec058d

    SHA256

    f195c43bdf225d910067bbd93ddd634688e437a46d30e7dfb41073baf8e89c10

    SHA512

    9267ccac9f9a8d7b54aca95e061bc794c87920645a6fbb75c2ea960059d97dd962e9dc039d0d039b292dbf9d0f5d946e81cf757ae4f7ede455ae342764de7d3a

  • C:\Program Files\Java\jdk-1.8\bin\orbd.exe

    Filesize

    581KB

    MD5

    9ae5851f5698a60300a1f25ccd3957e1

    SHA1

    0ad9d73d887110e976b521bb79fdc6ecb9e6336e

    SHA256

    75f2a64c9b687f41894856e90ea13a95cfee76ff53e66aaad4dcdc9587b60b52

    SHA512

    c5239f27bd67e1835e2440a661a43be8e1f66da3899b95aa83e4a9ef9d83bcc2a2b71e1b0c46be6992ec69b59335df59dcd266338e9acf86a90ac03c552dbb74

  • C:\Program Files\Java\jdk-1.8\bin\pack200.exe

    Filesize

    581KB

    MD5

    8eeec33ff753a8923479730f30b241c3

    SHA1

    a44c5c2a3eb88890bb4e75cae56f421d737baa49

    SHA256

    9827408cb07296684fa504a2f0b0ec52db2f413af0ca11b792c16e3981cc39db

    SHA512

    1ed70edd2aee28396617080eb1c3872ce5564bc98026cb4092ca2bb945c8e01d93f0f3f6caf7bfb72a96b5173d800d2bd2c36f884016f859c48173da7dbe04f7

  • C:\Program Files\Java\jdk-1.8\bin\policytool.exe

    Filesize

    581KB

    MD5

    2dca8a21d5c13375a879f42a8bba8720

    SHA1

    9d2e43cc0b29cf15775dedda38c015c8c253ce82

    SHA256

    497c67e5c1edb1cc70e16049b828c0e57e23cb040b8f9510cd49bffa77faa242

    SHA512

    a271b77fcab260cad8842938e574764602d59ed0c6c13438fbe53a27a69049f2d30c4f19119096405b2dedfb6d196ed3978da655aad5f74ec0d9b3de3b210238

  • C:\Program Files\Java\jdk-1.8\bin\rmic.exe

    Filesize

    581KB

    MD5

    89d5a4b331894b6213b30615407a297b

    SHA1

    3cfe1a53e0729f19dc485b3324db4fa365d9043a

    SHA256

    553abf22bbda96575feedd8ddbfe3d85d2c46c45e716b862bb04b54f5cbcd81e

    SHA512

    5ca986e641fd5fd41833db06aec3fb2438303a068e944369f425984d02f0d18cefd764598058f7aeacf203db3acb7ae72c814cf35fd4a18511dc926163c7b5f9

  • C:\Program Files\dotnet\dotnet.exe

    Filesize

    701KB

    MD5

    7ba471f483bbdc391b9bad576e0dade5

    SHA1

    b5c7b8f54348a1b48403143987c5f4e9d6f196d3

    SHA256

    111e60d01922a65450ce793e06bc7d0b4c3d8969732fb30a557e678eb0c1eb77

    SHA512

    ff77d2e8d94141317b32b571a05c86e9e6b31804852781ac8df287068ea5e72f9f0ad148249897f8857572d2e7a963a8d4b8815224bdc5130122aba131d47a1f

  • C:\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe

    Filesize

    659KB

    MD5

    b702ec71a3daf19e0acc666895f7d895

    SHA1

    150e0d472c0ce14dc9fc62bd0c8908f4db167e48

    SHA256

    a031d58a36e2836891c44dd0a46baaf74d37215dcc49489526680221e9d268ea

    SHA512

    7fec7cd035991ede9b06b0eed414b0e87d939664e500776e2d5ede430ecd268753692bdf943242580a8b02e92d94494ceb8ee7e3e2e371a134aa4758e76e8cf5

  • C:\Windows\System32\alg.exe

    Filesize

    661KB

    MD5

    02bb5a77801cdd89f5fb882d09af1bd0

    SHA1

    2f047b2601483717b0f50c3de0be1d3fa40e147f

    SHA256

    d5485071a40af36babbb101e26b6f0417fe0c3ded845e92aa0c88f7ab9593d77

    SHA512

    3a4ca847d6f3e4e671e80916672d942d88d2a51042b5ab4df56d4a79441f995ad9bf3634f39bc7056a6dd12225aafc0709ee3f640a750dd2817a0fa51baa73be

  • C:\Windows\system32\AppVClient.exe

    Filesize

    1.3MB

    MD5

    a2f3f390a3c965f26352196d71d2e5bf

    SHA1

    c74f77d32b14820f1091d7c70d5e9e218440ed2e

    SHA256

    eae348f1888f01f394f349532df4686ca42b401765928abb3acf35772f21ef42

    SHA512

    8bc6456e629abdc30de81e88f898816e0f37c646c5b397883aa3b80e6de88e4582bf1f54f234f34dc52d0626616ca63c9cdc12ca958d6b0a299a543147dddd80

  • memory/1096-11-0x0000000140000000-0x00000001400AA000-memory.dmp

    Filesize

    680KB

  • memory/1096-12-0x0000000000610000-0x0000000000670000-memory.dmp

    Filesize

    384KB

  • memory/1096-244-0x0000000140000000-0x00000001400AA000-memory.dmp

    Filesize

    680KB

  • memory/1096-18-0x0000000000610000-0x0000000000670000-memory.dmp

    Filesize

    384KB

  • memory/1724-26-0x0000000000400000-0x00000000004B0000-memory.dmp

    Filesize

    704KB

  • memory/1724-1-0x00000000021C0000-0x0000000002227000-memory.dmp

    Filesize

    412KB

  • memory/1724-6-0x00000000021C0000-0x0000000002227000-memory.dmp

    Filesize

    412KB

  • memory/1724-0-0x0000000000400000-0x00000000004B0000-memory.dmp

    Filesize

    704KB

  • memory/2296-59-0x0000000140000000-0x000000014022B000-memory.dmp

    Filesize

    2.2MB

  • memory/2296-61-0x00000000001A0000-0x0000000000200000-memory.dmp

    Filesize

    384KB

  • memory/2296-51-0x00000000001A0000-0x0000000000200000-memory.dmp

    Filesize

    384KB

  • memory/2296-248-0x0000000140000000-0x000000014022B000-memory.dmp

    Filesize

    2.2MB

  • memory/3316-84-0x00000000007F0000-0x0000000000850000-memory.dmp

    Filesize

    384KB

  • memory/3316-86-0x0000000140000000-0x00000001400CF000-memory.dmp

    Filesize

    828KB

  • memory/3316-78-0x00000000007F0000-0x0000000000850000-memory.dmp

    Filesize

    384KB

  • memory/3724-28-0x00000000006B0000-0x0000000000710000-memory.dmp

    Filesize

    384KB

  • memory/3724-38-0x00000000006B0000-0x0000000000710000-memory.dmp

    Filesize

    384KB

  • memory/3724-37-0x0000000140000000-0x00000001400A9000-memory.dmp

    Filesize

    676KB

  • memory/5008-75-0x0000000140000000-0x00000001400CF000-memory.dmp

    Filesize

    828KB

  • memory/5008-63-0x0000000001690000-0x00000000016F0000-memory.dmp

    Filesize

    384KB

  • memory/5008-73-0x0000000001690000-0x00000000016F0000-memory.dmp

    Filesize

    384KB

  • memory/5008-71-0x0000000140000000-0x00000001400CF000-memory.dmp

    Filesize

    828KB

  • memory/5008-69-0x0000000001690000-0x00000000016F0000-memory.dmp

    Filesize

    384KB

  • memory/5044-40-0x0000000140000000-0x0000000140234000-memory.dmp

    Filesize

    2.2MB

  • memory/5044-47-0x0000000000440000-0x00000000004A0000-memory.dmp

    Filesize

    384KB

  • memory/5044-42-0x0000000000440000-0x00000000004A0000-memory.dmp

    Filesize

    384KB

  • memory/5044-245-0x0000000140000000-0x0000000140234000-memory.dmp

    Filesize

    2.2MB