Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/05/2024, 19:28

General

  • Target

    2024-05-11_09b8910a221a2f6d4d6a4009d02c11e6_bkransomware_karagany.exe

  • Size

    1.6MB

  • MD5

    09b8910a221a2f6d4d6a4009d02c11e6

  • SHA1

    dd564afbcf303db62e60ab18025e47ce12f17654

  • SHA256

    907160dc5f7955c72e16aa8fee77d9ae6c4b1da597e77f55a8a96cdadd51fd5b

  • SHA512

    87ed7ea5189c0937eec1f73e20bf19dcdf15275a2be59ae5b481f59cef1463201cc729732f60349a470b57ba855d974d1812d958e257fd6505cd5f9ff7cfb0d6

  • SSDEEP

    12288:XvXk1yV3VfCfHcqNS0zKepmlDlpVfjp8EizX+AuV27snt5odJMsk:vk1qVg9N9JMlDlfjRiVuVsWt5MJMsk

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 6 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Drops file in System32 directory 9 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-11_09b8910a221a2f6d4d6a4009d02c11e6_bkransomware_karagany.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-11_09b8910a221a2f6d4d6a4009d02c11e6_bkransomware_karagany.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:2064
  • C:\Windows\System32\alg.exe
    C:\Windows\System32\alg.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious use of AdjustPrivilegeToken
    PID:2176
  • C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2132
  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
    "C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:4108
  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:4264
  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"
    1⤵
    • Executes dropped EXE
    PID:4804
  • \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
    "c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
    1⤵
    • Executes dropped EXE
    PID:1808

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe

    Filesize

    2.1MB

    MD5

    6d2166fbc5878d9fad4f97eb75189bac

    SHA1

    0aad152a86699853b42f079baa35397e2b798df2

    SHA256

    a35dca865d6eb4aaa4e5fea31b7f5ac3297806cda98657e2e0d03bddb17f8017

    SHA512

    154a982202f53fa5840857e45e291d133eafb97c892e1f70f857200afcc28ee1730d9865df969d16bbdb21188d5b764584e3c36567373b4904c3b150e925c650

  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

    Filesize

    1.7MB

    MD5

    7a494bf6ab3aeff045ae487c2bee998d

    SHA1

    dbaad930c9f875705d01ac7f177054515c13de91

    SHA256

    25905a76c451217223cce7569a83f477db6325738723a2dcb87295288dffaeb9

    SHA512

    eae9cc4b7f4087b4d0b503390723a2c0f09478da606faf385707ae2c9ee74cb885a043a4af3e5900ffb7e0cda1ea6ac8ce46fcc6fe1bfca4ac61b2c8dee4f32b

  • C:\Program Files\7-Zip\7z.exe

    Filesize

    2.0MB

    MD5

    cbb3ab32d1465a534b6685c3405fc4f7

    SHA1

    af1c890dbd128732a758f45f2d50a31dc8703013

    SHA256

    66fe02dec69aa205e70c0a828a99ca4dd978992eb5b964d41fefb131499496fa

    SHA512

    d9498d6d820a181922019eae3057fb3851ae693825b7d8737783022adb3e5e0d74c136e131c7f84d410cce529b55fd7c69b60dd5d39b81b3b6b00f76a4e294e3

  • C:\Program Files\7-Zip\7zFM.exe

    Filesize

    1.5MB

    MD5

    222e9b90c5e60e5f7b11b2ec306f25be

    SHA1

    dbbafe27c0014b5504e3ab50ea8eeeabad27660c

    SHA256

    68accc12750f9c5b3991db8e746d2b4c28d77cb3741000b09cd130a7d6913538

    SHA512

    99cfd65374389293aec4cbd36694810fa2ff81d88224731067a7380f2af02e54e4aca9f25dde7db480b688e03e10f80ddb6bf4f51f9edbc634f154c9f86f4f4e

  • C:\Program Files\7-Zip\7zG.exe

    Filesize

    1.2MB

    MD5

    213b9782c4c913770227bc838a993949

    SHA1

    6d11e8e5a564581c0a0ca1bd5c00c77875e1f591

    SHA256

    80fa3213e90c63ff2552199fe9bf728ebc7ecdde51eae6650b1a316d4ef22406

    SHA512

    47888a102d223fec25ab5dea4686eec22f418849bb95ea607542c076bb7daccb85626e40b277ec13a6f328a3a2349f01ee948f8dab2155b67bda1f67e69268f7

  • C:\Program Files\7-Zip\Uninstall.exe

    Filesize

    1.5MB

    MD5

    301ea3a7e60d843a7fbe85a8938b083b

    SHA1

    75b33a78cee35f1ae3d00a3578136107a636a2ca

    SHA256

    d97467fb94993c2226a3818c0dc006adc794cd995c61a37ff458efa7fe0ecf84

    SHA512

    766547dfb52f00d0061f8f845c0fa952e9ac6efa3eb1127dbb53d1e7c71866371dcecd292433863d762509cd4c25b7f7ea980edd5f4b5325f79a822c219d4a46

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe

    Filesize

    1.7MB

    MD5

    2586b859f33c2ad808568bbd138ad7a0

    SHA1

    b0327de530608e941e2a8c8afb3b4c79a2056f66

    SHA256

    acd9e8727bcd2c5ebb457e1bb183fe88f03bdcc6de6e15327a8f152ff37cfbb8

    SHA512

    55b7112ec7f0c2d63511b220d737e4b3a814ba6e2bc0152dce4660b1c4eb14a9f37dedcda90641aac9048d0eef8323e539b93e9f9e4bc6b014677df6a10e4475

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe

    Filesize

    4.6MB

    MD5

    d4511fcd1dcb2d684d7a10534a048772

    SHA1

    b91e723cf0fd4cb65735881e9df50554a2dfbadf

    SHA256

    ff4b71558e7e0ba1cf392f5ea85d20509bba75bbf2aef4dcc8c1aaa43ca489fe

    SHA512

    c0a150bcf26b4538930ca0c873b1423482eaa75e43cb39fc56acb2552e68cff0433a87cbca24715c7d1e50e1e3d5afe14ae8be6fa7184ea1ad697b7e9833fc57

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe

    Filesize

    1.8MB

    MD5

    a98353f2fc3fea3e8199c00ce36f9618

    SHA1

    8e6142541f68f8a2329decbec54e57fdeb13c0c0

    SHA256

    b6eb652b4489a7c2ac791e3ffcde439e000b5ab141bc54a1ffde8065414a3ca6

    SHA512

    585be92859a5a67b0906d56105b494c9138c2d5bf9bc20cc171642587d0ba743381fca33c2125b7665a3a96aca2314ade3e8bcdb6ffa0bcca417051504439a3b

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe

    Filesize

    24.0MB

    MD5

    a49f62671dce524b9d156ebaafcebfe6

    SHA1

    e31acb722e1cae1cf808436f7021507b2d2ae0b5

    SHA256

    ae54a39f8b3f2620f8ff3aa46c0c632a241d7669f6a882154483949459922765

    SHA512

    0675d1b3621aee9a175cd5d0920250ff7be42557d0fabb97b458a95e7b3a680da83ebed2f57d3bf06c27d8eb369df600c1aad22b46e004b74a73b5281e84e394

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe

    Filesize

    2.7MB

    MD5

    b515cc85bb5ae34ba25e0504522da34d

    SHA1

    67d87842038d014cb425bc3cec4d83469c34b35f

    SHA256

    b4a4ae1af824c451664d4ccb78ee902c861a3012a865c1f660880b9b46b8b6f6

    SHA512

    93434891dc871163a20bce9e42bbf79b7318e9254eebe44bb68da03f9c87a75c82e201f2a595dc2dd1500ab9e609ac9b7af9354af211646bf72cf243ce7ea857

  • C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE

    Filesize

    1.1MB

    MD5

    5b1e21dfbfa0a0d8becf42563475d5b3

    SHA1

    2396df319cb842a8ad6acd8176d24cfe4286a6ec

    SHA256

    c6c1d8fa19d3429b02495bd89ba156ac75bad793ecccfb00dbe97b0fc36b0733

    SHA512

    6ba0b745743543c49dde4792986dbc174b9542e63c8343347ce3368e3bb7f27ec53a8a5629cda520bd5f291dfc9812acbb5fa330291b3bac06cd795e7f5b548d

  • C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE

    Filesize

    1.7MB

    MD5

    fc7674d112517b78dc10c6d6044cb998

    SHA1

    eca1229d3dd27682f87d59bccdda2c6bb6587187

    SHA256

    f30437d7625a413956f771d0a2e552c2c3e28e65db1cdf60897a1397ee8ef4b0

    SHA512

    7547753f3a6e4c7d0bb098673832ff12003b4f22c1705d912d45f5221eabe26e3e7fc5f29aed44ad9285ede99131cc7fda36f1fec715e27268c64760ff7e5635

  • C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe

    Filesize

    1.5MB

    MD5

    1f0b352bca2bb4d8e2afa8432ca09188

    SHA1

    3e77cfb95ea45cc3331905ba85f8d5a20c1cedc7

    SHA256

    a9e63264ff0d58d85e81253a5408c4657726a8ebac302e8254035fc70bb20d70

    SHA512

    ed9b1176c5d56eb02af8a39bcbf349cba96541c386bff5658caffe12d1cdce7b47480824f4cfe29a70a16b3005a365138e83ca4edb5b0d98ccea411ea3fb1f85

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\chrmstp.exe

    Filesize

    5.4MB

    MD5

    07ee58329a869ff2ca9897f6ba3fce49

    SHA1

    1b4f2999370b65dd5c995b363ff9eff9f19e27bb

    SHA256

    93977a7cfc19bc9b2596fb0c94cc8a5fb9816a748c7045fe275429eddfb93357

    SHA512

    9c9d0d3dd94545c4adc11790192eece223935466f513391b7bf4ac2c1e372d2425d8bbab40ce33c3b4cbdee57847d94de224154809da95149aa73fed0c9892bc

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe

    Filesize

    5.4MB

    MD5

    ea9d6f09223a050e61e95dcfd17eabdc

    SHA1

    5ff18f277f2fcfdd4f3318ce16a301069dc24900

    SHA256

    32a0f81ea1bc6d46cec1d72877152acddaee76311ede57e5b1244b4ecbe51ff6

    SHA512

    a4b3ca1381da4f3d297f57e2724233eb01d648ff290f52040acbae4741b75d4513b5d50fd3128ba362c93b60d460cc5a84f7ce764230260f0ac7e99ee493034f

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\chrome_pwa_launcher.exe

    Filesize

    2.0MB

    MD5

    581a86fad166ff71e24cdc6f6380f3c2

    SHA1

    f5ef3bbbbb1a92a92d12b2fc916f238621026f1d

    SHA256

    b958536fd354c9cfed5114276532184b3fb8f9a4245874d00dbfd2418d4e14e7

    SHA512

    b8bd2c4d2306f7e7accb8f68a95b93fe1899c96db966b7c95f10078099bd5549fe63da4b7c4f216ba79fb794e45216accee15a5e55c56e80b088b30440f0610a

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

    Filesize

    2.2MB

    MD5

    058f8fbec3b5407d207cae8ead87020b

    SHA1

    3c0c9679cfe4d5eccad28165ec6ea2b090852524

    SHA256

    8bf85164e1b78b8a41cd185dc69ca740b8e09aa8b599be52e52045aa6911a483

    SHA512

    3dc56237ff28217ef0e68465f049b88e378df684fcd929b80ccca69c1adb1388ff77c625459020dbc053a1f83b44896cc845c4f8bfdb3a8c6b596576f3872c2c

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\notification_helper.exe

    Filesize

    1.8MB

    MD5

    15887496df7a1515b487603da9605d58

    SHA1

    9fee7113d8a4196a3ecda3970b7e748e43a60e01

    SHA256

    86046d1b0b967e48f9a6decbd9501d57192b2f0c6b0b22fdb0e5291ba0b78ed3

    SHA512

    1904a71e58472bf23262f1f54d3ce14324e2391c9c2d7c4f2b87b36b642d0d8aae90d0dbbbb4aa773d6cc4061b5bf62c6573e57f8df74af20036d1aff18d9878

  • C:\Program Files\Google\Chrome\Application\chrome_proxy.exe

    Filesize

    1.7MB

    MD5

    c491b7ec91c30277eac36d1f09cfbb59

    SHA1

    82cd216fb3ee56dd9a95e6b9442167a04a76d129

    SHA256

    d9ca76086931fd87cb9a4b193cacb5f46a9a19c2e5868fbf479b06be9f5ff3fb

    SHA512

    db8233825074bece4741ba5b950fbf24b161d1e926dd0d7e59d7212e34fc3f5c1f24d01429852d6907cbd7d24ad73e05251afdf7d09b88fb6475f8b7f33b8c62

  • C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe

    Filesize

    1.5MB

    MD5

    7f281b01d2fd81e27c5071e26c59d0b1

    SHA1

    9c3eea540faba67035e3162bdbc1dad4b2a345fa

    SHA256

    88236e9d1ba078d9e18443110b576f1641b4d98bd9d06f2ab795eb67dbcf4399

    SHA512

    15f4537bc30ea2ad3463540092649fe9ceb1605177e7bda1af265eda7cc45da2d1c6eb4dbeb97419d7a93b2d2afabfdf952ca856024c5a99dfc39e4778381a05

  • C:\Program Files\Java\jdk-1.8\bin\extcheck.exe

    Filesize

    1.5MB

    MD5

    0651d74f5a9ec8bffe49048f3b424b8d

    SHA1

    76f8db58716c732d7918c5dc6100409fedff6011

    SHA256

    ace89da06699512ac9a8d1df2f7df5dcf6245aa57d5adf43959056fd26d2522b

    SHA512

    8433e668e3fa950e9eef8de3a2f0429a514656688680d3b7f59b133cd27b4f34e48babfdcf7e9ab660b839c97a96fb7a18922cd2d175c563eaf639c5cbd8bfdf

  • C:\Program Files\Java\jdk-1.8\bin\idlj.exe

    Filesize

    1.5MB

    MD5

    786889d2a0ea49fc3440c24512deb42d

    SHA1

    1a8996fc2e28f2dc5ae3d6d79b39a8d1daf73c7f

    SHA256

    f6e8295d0becd1ddc800da4fa8304615e2d46b800e5333b59c4948597d52eaf5

    SHA512

    754359cf4687aadee6f5c017651016790cf6408fc6f63b312b2670587fd01c111211a682a7ad439f1341e85404dfee4e1cec1bb02fa3e7aebe01340e4115c8e2

  • C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe

    Filesize

    1.5MB

    MD5

    157ca42101fe4d3b004c0ae9764d3f7c

    SHA1

    86319732f8c98ffc1c15c605397b90b0df3090a6

    SHA256

    0e8d5121b4be448f87cb8809756b7b926823e3af9bb1015e6b00708797ff86e7

    SHA512

    b955362022d45b0663cf72c2d04c832e7368952e6f163148c068adc8a82a3f347f0a1988d9102970476598637ab3be1010cc2584e62237322273405d073d463f

  • C:\Program Files\Java\jdk-1.8\bin\jar.exe

    Filesize

    1.5MB

    MD5

    80e472e885a94424acf6a846448615c4

    SHA1

    8ef528ea0809775f9d35637b287ea578684c6b98

    SHA256

    5a353c6a1980744cc22d7d9997d2895ea7cbfc65e938ae257437104bfc4036ed

    SHA512

    b25e8b710457b2be1cc971f0ba1087851445edbe8503819964df12f91fe34bd3abf603215e1bbed2673d7273c98c1422198f08bbec6d67fe32a2dfa290f6a6ea

  • C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe

    Filesize

    1.5MB

    MD5

    5882f3feb5acf73fa666176c3d8db406

    SHA1

    b9253700be2889f48bde5c8c9bc968bb75e54b99

    SHA256

    2660a7fddcb9394c7d2a202d82fc27b8b5ae4e62cb9695b07aa6fadf68b81734

    SHA512

    d0182fe283065b2bfee14390e5951aca602ae63b6970a6fdeec5da83342e8c07e0fdedf0fe90b5d9bb4eac0f3f11f7db812114cf1806f8af013074f4f4f41ab1

  • C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe

    Filesize

    1.5MB

    MD5

    64ead7c91e2763e4a6d3dac9d42bbf4b

    SHA1

    e7d2fbee808ebfe0a499fb0278807be6e256d24e

    SHA256

    14760673f84c37fec1c9de4f0a75862749590a3fd9dd4a1ad88a5e0a4c0218e5

    SHA512

    e9ab4a7407be368a989008410c127bbbc0e47309ea4ca2d088306379c23022431179ebaddd5d6e4b3530a03e11b1344e0ef7da9de8658760bc7842c1dc7a6ec4

  • C:\Program Files\Java\jdk-1.8\bin\java.exe

    Filesize

    1.7MB

    MD5

    560b96170d07b6b597360dfa61d32313

    SHA1

    113064658cca4e0690d744e56daffd9ff5153f70

    SHA256

    311b734d7a9b2d649f2cb7037c70a28b051fddc33cba5d4141c12b265dab2085

    SHA512

    b1e72835714d127a1028d09e6fca9c9f5ce23868708b462323ef502f220d5588f0c4b8919a7814c17f9b1005644e4b385d5850af345676eb7f82980105b093eb

  • C:\Program Files\Java\jdk-1.8\bin\javac.exe

    Filesize

    1.5MB

    MD5

    76662e52f053bdca3e62743104eb696e

    SHA1

    4d700123e8318157c21bb240e519b1b4fae29628

    SHA256

    076f3c0fd9e2de84a6472b90547ff07c13a9761814673b75e3e7886ed6eb606f

    SHA512

    043276a3ec2053ed1ae0e029ebb76cf59de9da02d9129bfe43bc3ba5841ce936d07d49c60b40aa227ff9ef374c081a61c15f9a7da869a5fef5dddaaba086436f

  • C:\Program Files\Java\jdk-1.8\bin\javadoc.exe

    Filesize

    1.5MB

    MD5

    f7aa0ca4a18f0fb9f45d0230234a483d

    SHA1

    d61b40a297714e8ceb1b2a7fc350e74d11eae983

    SHA256

    e1d0f124d7d3d08a9b4c45e30bf7ab6b9b7ba6a5e48ebd569ff1644ae820cda0

    SHA512

    e9a9570881ac5eef00027ea20536d4f46ab8a79d022245627fa9d1fc9b31ff5ae7bd1502716eec8e620eb6111bee679dd30a389f2eb6f6d09fca39b56f7c88ed

  • C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe

    Filesize

    1.6MB

    MD5

    86977809ba52bba849137fe726ac3fea

    SHA1

    dc833d53da5e998daad319f73c24e00e383321f2

    SHA256

    3a0069003d7889e8b2d744d0e85c05679dc005fbc4aece2f41154cd4b4cee31f

    SHA512

    03a495bd2b8fafd0f40f6a67bdedb5ade220a2fd1686d4af046e2b84a40d42b2476ae4b7f401dc7fce98b2e0f6d89dc3cb02523145e0b16daf8b9bebeefe5531

  • C:\Program Files\Java\jdk-1.8\bin\javah.exe

    Filesize

    1.5MB

    MD5

    a5c665ce494ac3dfc05c0a74cd4eafe5

    SHA1

    216389a487cb0ea6b6f4d9ffd2bdbb80bbb47ca3

    SHA256

    f3f583b9c268803910592bae247db4e3c0209f1e453402ad45f4ad3db6d49760

    SHA512

    071630ad8452c597a98064152ca39adaa567e175eb639c2b4c578aa1305b78e5d3107fb0f382027144f905badb1d70b19b370eb51868a239bc1feb1c52aafe8b

  • C:\Program Files\Java\jdk-1.8\bin\javap.exe

    Filesize

    1.5MB

    MD5

    31a56b7ab4c9d5491a0306020d0d2b88

    SHA1

    3cc49561a8d77d883883da20768f51af0c0b4d66

    SHA256

    3bc60d27ac4b5e204e1d6b5beee10d3ed5f7e4e5771a0b767057c81e2b48d548

    SHA512

    2b04d91215847507efbbbeccaffe1a474a9daca79a8493596a493335e6f63219856479f2caccf8f6eb303cc4dc42cb752a639f44a41c7541e8250e0529a82ca0

  • C:\Program Files\Java\jdk-1.8\bin\javapackager.exe

    Filesize

    1.6MB

    MD5

    4412a1a3ce4ab66e37bb26b6bff53633

    SHA1

    1306e150ea39a2189cb85695abd7eb088e3e4985

    SHA256

    5d465f7dac62c646e0d26a95be77dc94f33055bd6f7dff310f6be82e28523094

    SHA512

    b08c420856daeb625142fb61b42e0182fdf77c26ed9253987f5c3a6b08a792df4950576086cc534405f00e4f9e4a3303f0997184392b67adb826058f0c274b0c

  • C:\Program Files\Java\jdk-1.8\bin\javaw.exe

    Filesize

    1.7MB

    MD5

    c5205bca95b871bc55958ac975bcb628

    SHA1

    f1738d7faf44bfb7805f5b6a002895e7a1ec84ce

    SHA256

    61217ff93897c84647999f8a4e25b39dcf76d45e584a933419e80d3ad8d956b8

    SHA512

    78d5787f1b3868004b09452d68fd4dc076aa6b0be9f31dc0fa20021023d361baf449e165fcb8253e45d20696104926cfec11753635e6c414d43e283d78c18779

  • C:\Program Files\Java\jdk-1.8\bin\javaws.exe

    Filesize

    1.9MB

    MD5

    febc34db838aaf1f354ac3711a293327

    SHA1

    007da2f585760080937e9e6f3c25c61f605c2ab5

    SHA256

    ce42da6b522fb70e23fdab501a8dd835bf637bc64bc35a9f85949c503e627ed3

    SHA512

    9f7e7764a158dc6d34f0e8e81ec2d2d627ef5706b7281c7c445fe7abfde6a73ad901724ae2805af3aef9fc213ac357ed75283b3f161b769a1e1cd721ae1867b5

  • C:\Program Files\Java\jdk-1.8\bin\jcmd.exe

    Filesize

    1.5MB

    MD5

    a79fb4db568f845eb1d95323ee8d1e66

    SHA1

    e93a01d1ff6e08d0b848671cdb1b4f1e6547a47b

    SHA256

    745ab32b8ef75469d26c67d23aa55eabf69802667a85a1d7dc055252c8b70139

    SHA512

    cc7acbde85375b9b7d60fe31d722e310dcd294210e7423556f2f5456423e2f67c08c3e226444f55805e15729f6a9e15a08b79f548f427e0da5ce10e6a27fadb4

  • C:\Program Files\Java\jdk-1.8\bin\jconsole.exe

    Filesize

    1.5MB

    MD5

    ce51177c6055f40cfbb0606943f31395

    SHA1

    2a19e88c39ff95f83c488b5ed7be273f775ff849

    SHA256

    6344d0b6d3d3cb9b88f6581c1311ab7c0d88da5bac37fbe4eccc8e0d8fe0c89b

    SHA512

    d04d743e8b058ecb05bb9e2e052c927a983d6a7a3e0934c07cad4dbfa57e25db6c73a50722d6a6869e5e2df8c56745dfba93a6c42525fa60e8aaa25f1c10bb85

  • C:\Program Files\Java\jdk-1.8\bin\jdb.exe

    Filesize

    1.5MB

    MD5

    6626caf0d33797355cd285821f5653e2

    SHA1

    5b608f71a92f9445da5d7dee64cb6a6352e7d675

    SHA256

    41e5bbd511c4a0e9d893fa407baa96096189b7e275b77304a7b9a737a6f4795d

    SHA512

    6b08eaac3d8f9584b0597993bdccf571160e909c6f30d6a83f608c0a908d88bd0132fccb65efd2d82080d0232a0cd7068d6e5bac07186d9935d7ba95c0d98361

  • C:\Program Files\Java\jdk-1.8\bin\jdeps.exe

    Filesize

    1.5MB

    MD5

    45b99d0f0d0b76763d08dd106ac7432d

    SHA1

    b14617b4c5cb3c32d0c831b03706342ca9d36cbb

    SHA256

    244f71bae66bda4f3bd696f5d7323b6ef975bb2c5870400115e7c2fdc4901776

    SHA512

    188de21ff4d21ba22e31cde1061a2a7b07a79977430d9774918f75975a617d8bdabce5505fda48caf8e65e4546bff500e0e1d93f2a592edb462de8e334fbaf71

  • C:\Program Files\Java\jdk-1.8\bin\jhat.exe

    Filesize

    1.5MB

    MD5

    8533426776908919a9d25d45caf3e8d3

    SHA1

    3d7a633d543e293cb770c7778303203a48af5faa

    SHA256

    5eb70325ef7be262ca9dd4cee8db0f4859d53d420bd5e020fb0f40735444d94e

    SHA512

    2e46e2df8b90be7883e224cf553b0069ac635201de5472f23a3cff6569a1749bb4c8be62ac6cbab965bb30460fc2c8118c30ce5eeb35b8aa055857a3716d45d3

  • C:\Program Files\Java\jdk-1.8\bin\jinfo.exe

    Filesize

    1.5MB

    MD5

    5efa285b4f980d5692f7ea93c90fb325

    SHA1

    763212b66d9057b3f32bd638808a1f0dece9ab24

    SHA256

    adf145d5ce375fadf09d2dbac0bdcc1539d20190cbc004d1bf69013ee6d41728

    SHA512

    8e97cd69cf027b3990594b20b8b311d8d8a17eee19a75ec1070617874faf10ce3ad818a939b725eb64090bb99df0f2e283e7143293637b2c0dc64bf474b39192

  • C:\Program Files\Java\jdk-1.8\bin\jjs.exe

    Filesize

    1.5MB

    MD5

    1d4a770864c9cd2d48dd56a2c11b53b6

    SHA1

    3ec224f8a85dd07dbc60fe5900efc708699a5a2d

    SHA256

    ee59ae2654c0e22c630cd32bc0ef5f5ee54b4f9bd382d197a7bea5b6442feccc

    SHA512

    7fc8449c84ae20f1bd36f392ec822e038ee0b75cbf964106f6e07677c3401ebb8ff2af805b4d05ac8a9416ebe62500f9f30698e67e02fbde1a1639f176b7de64

  • C:\Program Files\Java\jdk-1.8\bin\jmap.exe

    Filesize

    1.5MB

    MD5

    489d5751c3c10b86b8e902011371b33e

    SHA1

    86d4457f0199519649ab315700ed89bebd823cae

    SHA256

    2fbf76e2d7e1af81ebe2aa2c217e9500aceeb5e6ee4e42fe01e7aace35a3cb23

    SHA512

    6541f5add639863840a0da2224561c92537517c598966183752703f20542fed7403ff8ee1d6c936f8f769a6ada46a9e181c4fdda084770e5a0152164f3d3b376

  • C:\Program Files\Java\jdk-1.8\bin\jps.exe

    Filesize

    1.5MB

    MD5

    5df01454de9041f9b19e26c53f14de05

    SHA1

    e5cc816840eee0d4eb7d17118ecad6ee1b4d79bf

    SHA256

    2886f7e6fcd90f4beab702f1c1e2e2b085d8083a945c0e59c71db00d112ae8f5

    SHA512

    e0a4e50d494a3098da4e8f2bb2c2c833b0915594f7e02a8835c2fa3dd1c899b7a3ae5de340e22dd7d26deaa14747fa2460e32453c3660e582eb3c876a52ec1dc

  • C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe

    Filesize

    1.5MB

    MD5

    9e99ed7d600d3d45f9692bffe1bc1cd0

    SHA1

    372b16a62eefb49e6ad1b1c0c5d5a3539ba849fd

    SHA256

    052b4c5e46fd06a713a34160ea6f2836d168fdb2e126168f0c21efdfec9e82f4

    SHA512

    de5c284363259389ae79fe18f09d991b4d4fdc3b0792f164c1ee7e1829232348885bc2984a0f9d41b2e1e54a75f3af58b66377bbbb9cc02f035641a423b562ac

  • C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe

    Filesize

    1.5MB

    MD5

    e60f6abc68d83ed4264bcf40db35ae50

    SHA1

    bf4f83dce4e9ddec4c24d42c6ce0fd06ab1b0dd0

    SHA256

    bc124d43ab8a7c214b89fa29758eff1342e1eb7efeb46064ba4df9070f93f7e8

    SHA512

    07ae80ca7fc1eec31b92ed9244b12953107b4b15e0b7ff40dec2e5362af428f2623535c40b3a521f2f26a85164967499f0bda98d6ce2b5f68de57f23f3df5ef6

  • C:\Program Files\Java\jdk-1.8\bin\jstack.exe

    Filesize

    1.5MB

    MD5

    f47a8c4cc880196a3e8bdb3f0298a27c

    SHA1

    46598a82b55d88ef53898653f57fc35edc550ded

    SHA256

    834adc32f79125ff7eafc783e0af819d921f763b5233fefec14e682ded71a8f0

    SHA512

    3a15dd2367ffe1c2969dee4f9c949801fe029c13a8b872b05ed32ed4c62e0cc14fa88dfd14bd200294162811f6b3a27ffa9801ac363ba248ce367c2b4ca4486d

  • C:\Program Files\Java\jdk-1.8\bin\jstat.exe

    Filesize

    1.5MB

    MD5

    7e8e0129680e301b84442b8dc31e8b78

    SHA1

    76e0ecca8667ef2400398cca1377d26adfc56f47

    SHA256

    2ef74e7fb348f8563f36288a8b955afad8defcba27d12f25a52f90760ccb6766

    SHA512

    422520e99d9a86633d72479042138a313af9c7a3ce209ba9c47d3f67215a78f39264ac9080ca66c7f8a128d40a2e002a7a0844bd88e4dc13492a9a8ac3c87891

  • C:\Program Files\Java\jdk-1.8\bin\jstatd.exe

    Filesize

    1.5MB

    MD5

    741d478c95bf88f3f40684ebe0e020e1

    SHA1

    c88eb0f3ae7ae7b6efb60d6864209553c7ccfbe2

    SHA256

    3c687228f9598d6ce180a88422a40c61b6ddb4187d855e6eca23fbcb60bde371

    SHA512

    cc3587c7cfb5859772b2432df908b92516434d21ff3819107912f2ccb5f5d86b644c2daa3dd1a3a0f801c58a9447bd3926210b3595f19d9cfe37a61d020d5d17

  • C:\Program Files\Java\jdk-1.8\bin\keytool.exe

    Filesize

    1.5MB

    MD5

    5f6782b2f7cb21d33aa8dae693152367

    SHA1

    084107e2dc83e5bf852fc9e1ed1755d4dc891fdf

    SHA256

    9a0ea220b158ef0369532dc217353c5a697d7ed7dbc232ea57724107d9dee5c4

    SHA512

    1d8a76c70f5f00685a4fc96a5447d052a8d619f71f0eaa6a5f43341bd1f2b079c687c337590da71c06b3c3571e2ca1fe246472c9708ebe3d7c6da0447ed19d8a

  • C:\Program Files\Java\jdk-1.8\bin\kinit.exe

    Filesize

    1.5MB

    MD5

    06fe56fe755c86799f58d2a98a87fe8f

    SHA1

    a7a0abbc04c1888680566e8c57ab76bb21dfa9aa

    SHA256

    16124f2d32f6234c507c0b8d91e7259111967e87d5c8c70070e1d747bf1bf58e

    SHA512

    f63bfcb8e86d119ef7d2abd406c056312658330c42558079443d999dc5b9977548f0ce4ac1230722071b0064803cbe499c6acda479dc4e323178c19e5a1c8b52

  • C:\Program Files\Java\jdk-1.8\bin\klist.exe

    Filesize

    1.5MB

    MD5

    dcfc62b372cc4f0ec33cadfa8dcc626c

    SHA1

    f1409845c12add19c050556118a6d5ba91651ed2

    SHA256

    7a93f1ee06fcda42e8afdaeff64cb3a7dfa6fd8a18635b45d41b72e5d4900de2

    SHA512

    99e95d428235181d676a61c835b27db91abec0898ec6371b94abd4e75bc7c093ffa23ccea15af51e6f8243b08db248c73e54f1a1719a32e6e911adb6777a1159

  • C:\Program Files\Java\jdk-1.8\bin\ktab.exe

    Filesize

    1.5MB

    MD5

    7e36c8f591277233ae1fd8e2275fb680

    SHA1

    62a086dced1b2e7ace3b224621fc6596c322bafa

    SHA256

    c5dd08c7815f7146524d4c9d1070356e678ba6581c7fbb0fdc4a8e14c964e051

    SHA512

    ab7e086206ceeb0760f2f5314d3f45a850acd92d0cb8bb804a5dfb0d7b008279d1f6d3bfcb42b380a29ad0bc8591b0f8fd27624433b9d695be02ca02a09961b2

  • C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe

    Filesize

    1.5MB

    MD5

    4beedfd46acd41a20d4b8011f65c76db

    SHA1

    df5256e9c7209275ecb5e7665eb849ac783fb11b

    SHA256

    5a44e2ac3a7bdbd862dc0d4e0ee3d8d49ea68896cc834a8150406d0bfee061d4

    SHA512

    f1b1f9b1e40e85869ea0d8072f68978b8dc074e14f6cb0a8de179d16998b7948a94e816c049103d3b9522f085cfecef087752e6cf4af9aedeb5e0c6a4a04e2bd

  • C:\Program Files\Java\jdk-1.8\bin\orbd.exe

    Filesize

    1.5MB

    MD5

    24a48ca22353d86bb3c66f5b34031943

    SHA1

    b3d929585cb390935d155a276aafd5a751ecfe37

    SHA256

    e92f7d2c77cea83ae56ab39ecc45523c742ab850d5e675e4b44059786da4fb38

    SHA512

    f3793b707579e22eead91b1746ec4fd68fa359ccbc1a1396e87cfabb927d9b57efed4af034b9dd73d13ac7e077acfaa112ba586abedb75bc1924d9c0207d62d3

  • C:\Program Files\Java\jdk-1.8\bin\pack200.exe

    Filesize

    1.5MB

    MD5

    e87955a2733198c70d51faac585a86e0

    SHA1

    b5573b4bc2e3e43490f16b03dcbf243ff9bd2d58

    SHA256

    22378db0535318786ce952531e02b3e157150a91c37cf5e424e2e7d831610e7d

    SHA512

    542193e282bcda7c42e80af5129e60f3585bc3a39b7c9ccc1a198c429af39f393991f9c155277f1b5cede899b20a756f85ad4775afe9dfdba485656a4a5eb9a2

  • C:\Program Files\Java\jdk-1.8\bin\policytool.exe

    Filesize

    1.5MB

    MD5

    fe2b4ca1f76571f98cb8d3e07226d31d

    SHA1

    5f194e219c5439a9801b19c71393735dc95e02f7

    SHA256

    d0a08f0e827cbf1761b6777b84b1a21bdcc3bff70f7796348dad26226cb5245c

    SHA512

    3199cc51b83981384b2dd2387c80dced88400754eb9e261b7feb0f7a3f8129cc2e1652c2722dee9f655295dc4da187d572e45fc3964ae255e9b396c29189c383

  • C:\Program Files\Java\jdk-1.8\bin\rmic.exe

    Filesize

    1.5MB

    MD5

    8d635c0f3e4a86eda9ed25c418e0fd54

    SHA1

    466feeecb0f40ee1995e574cd7105352205febed

    SHA256

    906146887f4883e7ae6a28ac891ac7c6e925a422a44f9d7aba1f5ea146067fca

    SHA512

    c39addac1c22e6f93e6bd365ee0b75d16b4be6c988d20e2c8a8dd1ee6af75eaca7c18522dd9f2ed0db3197d4e6b30d5eb0c8b7bc774273c0a3e089e4e69449f3

  • C:\Program Files\dotnet\dotnet.exe

    Filesize

    1.6MB

    MD5

    a2360a2b45a8fea8818a6b9cbc229f7d

    SHA1

    61f3463083f3455310f4c25a9f5bd6231a8497cf

    SHA256

    75c7c582dc75f5f13502c11d953e79fc41dbb64a266be8771712d2192c38f426

    SHA512

    2273d6531fa877fa00e29918db0e76e229be9066ef2c2ebd5a8785b70785c9ad820ce314fad90d0ebe51a0f7a6706e55ee8f2688c9ff58d8563084e5e4bfd2c9

  • C:\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe

    Filesize

    1.5MB

    MD5

    db87cbdb1d3664ba04e87e231ffecf7e

    SHA1

    3c0965581a5b8d54195f9bf8a5d44f7c53aa2ce8

    SHA256

    a9a0a87873ec44f3a507ab4a6e307086e092b6ef7dde8cea7c4ef9934669b9b1

    SHA512

    e7d2595adfb825021dd58efabf889f033e473004636dfb23f59169794e70285fc8e39982d9a8ff7f9dcbb07a5aac1660262e37b83be4b1ed68bd63432d472a49

  • C:\Windows\System32\alg.exe

    Filesize

    1.5MB

    MD5

    55423a9afaff636a7a886017a0b01adb

    SHA1

    146bdea1441ce9370ec7e0eb6e9851cbc77b281f

    SHA256

    a1ff87ab6a101c9b0e9416bf54c57b9f6fb83093abe640545282e6960d1454e3

    SHA512

    8f28659f067c500fe8be00ff23a38163fc0ed9b7f05786a351bbe4e65a889eac9fa6c89e2d442fd03a50ca07ac38a528aa02a99e65705b6cf128f49c939437b1

  • C:\Windows\system32\AppVClient.exe

    Filesize

    1.3MB

    MD5

    944d9abeaf1014a0c810e76ec2d3af99

    SHA1

    0c730da5b7bdb037828d6664be7f9061e9b85a9c

    SHA256

    b98e0606fab50a36faf6a8a8aa812253a0b7b3f4b3012f6e5ee6bc69c500528f

    SHA512

    1a1fe67d2f0e6b8169404f966dbf0e747b427661ec26d172312b6139ba0b72b89f04e3a3687e75c393e239d71b5c63ca73803d5a75de1d2cce557ea13d899667

  • memory/1808-78-0x0000000000420000-0x0000000000480000-memory.dmp

    Filesize

    384KB

  • memory/1808-87-0x0000000140000000-0x0000000140298000-memory.dmp

    Filesize

    2.6MB

  • memory/1808-84-0x0000000000420000-0x0000000000480000-memory.dmp

    Filesize

    384KB

  • memory/1808-252-0x0000000140000000-0x0000000140298000-memory.dmp

    Filesize

    2.6MB

  • memory/2064-2-0x00000000021A0000-0x0000000002207000-memory.dmp

    Filesize

    412KB

  • memory/2064-0-0x0000000000400000-0x0000000000679000-memory.dmp

    Filesize

    2.5MB

  • memory/2064-6-0x00000000021A0000-0x0000000002207000-memory.dmp

    Filesize

    412KB

  • memory/2064-38-0x0000000000400000-0x0000000000679000-memory.dmp

    Filesize

    2.5MB

  • memory/2132-247-0x0000000140000000-0x0000000140272000-memory.dmp

    Filesize

    2.4MB

  • memory/2132-37-0x0000000000750000-0x00000000007B0000-memory.dmp

    Filesize

    384KB

  • memory/2132-36-0x0000000140000000-0x0000000140272000-memory.dmp

    Filesize

    2.4MB

  • memory/2132-25-0x0000000000750000-0x00000000007B0000-memory.dmp

    Filesize

    384KB

  • memory/2176-20-0x0000000000700000-0x0000000000760000-memory.dmp

    Filesize

    384KB

  • memory/2176-246-0x0000000140000000-0x0000000140273000-memory.dmp

    Filesize

    2.4MB

  • memory/2176-11-0x0000000000700000-0x0000000000760000-memory.dmp

    Filesize

    384KB

  • memory/2176-19-0x0000000140000000-0x0000000140273000-memory.dmp

    Filesize

    2.4MB

  • memory/4108-50-0x0000000000C90000-0x0000000000CF0000-memory.dmp

    Filesize

    384KB

  • memory/4108-41-0x0000000000C90000-0x0000000000CF0000-memory.dmp

    Filesize

    384KB

  • memory/4108-250-0x0000000140000000-0x000000014024B000-memory.dmp

    Filesize

    2.3MB

  • memory/4108-49-0x0000000140000000-0x000000014024B000-memory.dmp

    Filesize

    2.3MB

  • memory/4264-53-0x00000000001A0000-0x0000000000200000-memory.dmp

    Filesize

    384KB

  • memory/4264-59-0x00000000001A0000-0x0000000000200000-memory.dmp

    Filesize

    384KB

  • memory/4264-62-0x0000000140000000-0x000000014022B000-memory.dmp

    Filesize

    2.2MB

  • memory/4264-251-0x0000000140000000-0x000000014022B000-memory.dmp

    Filesize

    2.2MB

  • memory/4804-64-0x0000000002240000-0x00000000022A0000-memory.dmp

    Filesize

    384KB

  • memory/4804-74-0x0000000002240000-0x00000000022A0000-memory.dmp

    Filesize

    384KB

  • memory/4804-86-0x0000000140000000-0x0000000140298000-memory.dmp

    Filesize

    2.6MB

  • memory/4804-70-0x0000000140000000-0x0000000140298000-memory.dmp

    Filesize

    2.6MB

  • memory/4804-71-0x0000000002240000-0x00000000022A0000-memory.dmp

    Filesize

    384KB