Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/05/2024, 22:17

General

  • Target

    2024-05-24_f77b4b8fe1498eefc5a0bc31acf3e07b_bkransomware.exe

  • Size

    1017KB

  • MD5

    f77b4b8fe1498eefc5a0bc31acf3e07b

  • SHA1

    a2be22139cb4504eca136677286db3ee6efa6ee7

  • SHA256

    bf89071583aaee609af2587e63ca2e02404c8875fae6765fd0d719a868cb9b1f

  • SHA512

    33bc8e0b4446fe61e4a45bd2439fbd2be35b19589aa3ffd57fa2864f50d931e41f15a69cfa6d14d582f6ba328f4d2f6ab8353f54705620c6896448b10a1e6ba1

  • SSDEEP

    24576:Y2lm54RfTNjx+mZCkt76f/24pN+XNqNG6hditW:Y2M54RLf9Ckt7c20+9qNxUW

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 6 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Drops file in System32 directory 9 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 5 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-24_f77b4b8fe1498eefc5a0bc31acf3e07b_bkransomware.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-24_f77b4b8fe1498eefc5a0bc31acf3e07b_bkransomware.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:4600
  • C:\Windows\System32\alg.exe
    C:\Windows\System32\alg.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious use of AdjustPrivilegeToken
    PID:3260
  • C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2772
  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
    "C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:3240
  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:4636
  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"
    1⤵
    • Executes dropped EXE
    PID:3808
  • \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
    "c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
    1⤵
    • Executes dropped EXE
    PID:3516

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe

          Filesize

          2.1MB

          MD5

          75e8d60a426ffe5f64c4ff8734932075

          SHA1

          c0411d832d078ee092ca1e5a0bcf4a9701296ea5

          SHA256

          577234a93be7ba8d560d4c0350e881575569d6c400ed0ed42b445ecd18fdf7bf

          SHA512

          6273bc373ccfc5da8b4176ee40d90a012b5f2516da92e4e7e3313e5d33639de772bacab0240bba064a454451628b1d5a4f8e3045c2d8a60a9d0d1a2378761f46

        • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

          Filesize

          797KB

          MD5

          a98cb7880a751f5ce1e76995e2b142fd

          SHA1

          fd1318fdb67f08b703e6e3c6a2b71d784baba9c8

          SHA256

          49d6d8c0c24b37bd8346e1ec549322a5b7bd3350f30aa1bec527387d272e2383

          SHA512

          ea0db11500f2faeec5cfb5107838d07e62471f096128a502f5108a82b61cb903ab8a0a42bfd4382e14d688785d5a4c76d8d903c6559d9bb9f7a327c7a21cc693

        • C:\Program Files\7-Zip\7z.exe

          Filesize

          1.1MB

          MD5

          6eaf4bf54a5efed405bf9ac109c80a91

          SHA1

          a7353c81f8117e248dd30c3b2b4edfc089a03d41

          SHA256

          a75ecf9bd481fd1faf93255f725e1f05a8d0f2516df848428e07d39b6034ada2

          SHA512

          22cdef1da3c0263c137cebaeb2b05c12e2fa72a4a71c2d5199642e5fa446a2f8510701cc9ed3a2410590c0ea9f1849dd18f20cb4f542bdd317ddaa4768aedf43

        • C:\Program Files\7-Zip\7zFM.exe

          Filesize

          1.5MB

          MD5

          3af7d3a6f73b7478df68f0cea7ac35d6

          SHA1

          8fefa33ffdffd4f7bed3764c26d32961b3013275

          SHA256

          d51f871886736a3a29582e150d3f55df29e140bd738d6491f7ad07e7b78eb65c

          SHA512

          721b2384f40e3e6640bff78fa7867dd559d1ceffafe5bfbeac54763589e2319b9e0534f347efa6cbf6bdb5e3b6d9d26a7b1fdfea446e2abab807771e764f6fce

        • C:\Program Files\7-Zip\7zG.exe

          Filesize

          1.2MB

          MD5

          842331aa06c4cf346c85b6b2b3e54d94

          SHA1

          4518ae12b3a54474377f21d62b8ab0838fb6978c

          SHA256

          7439f83f23470d8433913e6234323706fc220fc67df0004000997e49f528b432

          SHA512

          63f41467297b577f7b152677d07cdd48cfeb2b8c17aa31079a2aaa171c1302c544919550fa6814bc2e524d0239f11cba31200ce34a8fa88cdea2b92b8489e515

        • C:\Program Files\7-Zip\Uninstall.exe

          Filesize

          582KB

          MD5

          7486ea6bce780c0ed16700667b9b2769

          SHA1

          532151d8c71f24271119dfcfe1ac1919777546e8

          SHA256

          16c79d707446f1f77314b415d24fa8a11926c11e1964c19d19947ed71e4f2958

          SHA512

          435be23f5c123799b580281a619794be9b878a77253bf23b323e4024d8144cbedfe67037306cf35e71f52f16cb37de1a284890cd220bc369bf8112c53853a113

        • C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe

          Filesize

          840KB

          MD5

          f6c2539ccf8ecc490a30776bfc0d6de2

          SHA1

          dc09989d8c204c14b3d4c2515db57ffc0f328cce

          SHA256

          238759b96c9029c51c4b27bfe61462e6c8ee3f1246f9a0548ebccabfe5b98e6a

          SHA512

          d444d1ce3eac9b705f9811c45111b62a88c524de0245df75374ba4fe3c7ce65d367087b548594250c4430f25c55a59d00140d105b6efc5150bffb614445dcdc3

        • C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe

          Filesize

          4.6MB

          MD5

          bf88f941a1c5388f61e2afd03f907ef2

          SHA1

          854ee542f4cd6bb12263ccf57d9962fbd4cb28b9

          SHA256

          999d453cffb739def793d7eba83d5a6b83ef1c48fac917e434926a8b30bec466

          SHA512

          61df2f981e282130662cf691e891a9dfdc5af0d75a3b8588dda5020f98b2170c7664161be4b7a9b8d631b1b092223a17b29d2c42cbdb77534d59817121b3cab1

        • C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe

          Filesize

          910KB

          MD5

          05f6fd861ebf270a546f7d3549c3fc37

          SHA1

          68fc016d15a2b1b7afbd263a6d573a454bcd0ce8

          SHA256

          b7b0743a77a27f9ca7875d9c2810334790db0744a04b50a830971b1b85d8e5f4

          SHA512

          29305591edab3050b9195f319673e7fea2d93b5a59e45d8f569ed1ace99b450819d64d63260d0f37dc468407be891a39e0f80f8b84a00fe1793fa8a9e686e52c

        • C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe

          Filesize

          24.0MB

          MD5

          ceaf856272ba88e5249b82fb6226d1d8

          SHA1

          27300690eccf6c2043505712cbb0ba9d37a47beb

          SHA256

          2b80fc5c78f5c2ffd6ea217ab245650370456dd972602ae41c769608ba3d612e

          SHA512

          eef218067b80bfcb6e8a942fd522cd9ddfffa7511a21c48e1ee9674024336b39d77a9c81042ff1dde60409312f4ffb760b031b07a6c26852a14264dbf8541b3f

        • C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe

          Filesize

          2.7MB

          MD5

          44f6213260dfa8a9242550379491c818

          SHA1

          224838f1ee05d8dd59db3585de5d8ddddfa2fb64

          SHA256

          d0d8b987b6871989842b53dd15906a010c74893b941062fbcb0fc84c1f9f6484

          SHA512

          5b6a696824a7778280db3615769bff1ba781322909328d1d16457950650724ae49026bee14aec687b7e3d141033954dc1e789dbdfef30fa3e8d7305f8aacb2c7

        • C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE

          Filesize

          1.1MB

          MD5

          b28f8b631b6b85c510ece57a15ae664e

          SHA1

          9d66228f72bdbd4ab2393b3381895513aa334549

          SHA256

          8e27bc17a9bc79f8d27a9cca9eaf8f1c3b4aea8d45ab8cf58eb633f78679c64e

          SHA512

          781354380b835e8445acc2fd50fae75220691afd45c11763efb430116a0db095fa8af0cefb663446bdf9d3d948165594f94cef683d04697dd81946dd43705077

        • C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE

          Filesize

          805KB

          MD5

          e925d6a38f61e0d3105b92aeb8b9c0dc

          SHA1

          7f9960bd418fe0bcca5bdd3546c8c98781dc298c

          SHA256

          3908957af03a76f9d63ad5961d00e2d9c1a6143cde41c230f9028b9d30e125f5

          SHA512

          0e2e3d1f34c2254ecf3ac29c560fa038be6f6e81e99bc34f48d3bf61550aed9a0721b16545dca55655f54e33d6d0c10fa2f2c7f97785905b4e8d5dc1426971b6

        • C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe

          Filesize

          656KB

          MD5

          138e6e51a2466dd79f12fe5d6f50f077

          SHA1

          2819160a66ebf0f4bbd55d17e9ca700e54c09d89

          SHA256

          66cd1430b844bc4941aa1487e1277df96694ed0a5fe872c924cf3328a9ffc882

          SHA512

          3f695d1c40cedd583a7e4c3188118152906ddd3472156f78195f42c4d145a5cf191b584bacd3893abf0adf0d197b9f10320d2d829949c3f2ef61f260c70ab783

        • C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\chrmstp.exe

          Filesize

          5.4MB

          MD5

          dbd3ded9e8efc1d0f50eb173bc7b1c47

          SHA1

          50144fd5938590467de789714f2ffd361364e223

          SHA256

          2dc0b487b37d18b6afee6f9c6df9ef4f0227fc0ac5b3c7898a8eb65a6ecb100b

          SHA512

          d6bb4d7879a1e63fa4c78a5dc7dad805a612961d8b93f08b1ce4a2c74f7e4eb477161e577e1725b26968afbe89d278a476fc1a0589c2f02e635e608d0c2a4306

        • C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe

          Filesize

          5.4MB

          MD5

          4e5bc39b5ea036c3a2002e04fa1d50cf

          SHA1

          87f8cf48eee79a86781d0a0480a5be10794d4031

          SHA256

          008c22d4282febc0e9ffa7b07ab4ad1bffa59285428d3618a78a4da28dd7e17f

          SHA512

          129e01bcca9adfc4a2149767c0b60f3aaabb733c255526976337a1919d3f2c68fb79ac8bf1d95b6fb13a0ae6b752c26997e88b878508f1529e2d7cd5f2d5b087

        • C:\Program Files\Google\Chrome\Application\110.0.5481.104\chrome_pwa_launcher.exe

          Filesize

          2.0MB

          MD5

          5e1cdccea5328a03187bf46936598b13

          SHA1

          710940ab470ba91590e1cf62c5cf2016f581253d

          SHA256

          0f465dd9e38eb5c19422230e84ec7f42ea065caa49d83eda19f9a565d4b278e2

          SHA512

          ae0e4235eeaee69326779346a255108495ae716797bf3c7ca4c88ae38902085018b88b3491e021fc538866c0b72b5116eb0d47c89cd4af8104f580b953856847

        • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

          Filesize

          2.2MB

          MD5

          2c9979fbb547e709318e769f2d73833f

          SHA1

          f32cce64dff3d9df9b97b7012dba4950f7e42117

          SHA256

          ad3f7683c8b1059217b4a3f6006a31ba494ecba3a75b6ce1b8d4ea9f9809d6e4

          SHA512

          0750ca75781fa8e79af59506924610169ba02d36d808efb94446ec404e1148f94bb0614c697f1c6c4ef675f26ce7221c2f44763d64f6aa0f0da86a4dde6b5c56

        • C:\Program Files\Google\Chrome\Application\110.0.5481.104\notification_helper.exe

          Filesize

          1.8MB

          MD5

          9cd95623839a9c18f1b56ac785882271

          SHA1

          7b895751e038022af3f13b6fe9b2d42566fe8153

          SHA256

          e4720863a53588d531eb833c7ba0926d19107e023f0e6926bb2e16d1abf2c6a9

          SHA512

          ef8ac91b89b038f0ffb9ceffda8bea67dbac69203cf4f0d42c956e3235379d975f4aa5612ea1c2cf4cd2765135e05c024fe9baa7f947358c70775ea76f4ac9dd

        • C:\Program Files\Google\Chrome\Application\chrome_proxy.exe

          Filesize

          1.7MB

          MD5

          4125a7b4b1af69b1d14863f410c1f7e4

          SHA1

          73068430e4596c3b5816b304fc2da9e125c6f6aa

          SHA256

          1b02ed0008cd7cb83e8da17d5f34ff3f747682a8c855cccbf901a98f5e5d167c

          SHA512

          61165a4f338005bbe709f964fc550dfa6921a9bcd38d170829c79d468f9884369c825a39b97d8926ca06b0475e546834f9432ab9e46afb2e44d351fa817040b8

        • C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe

          Filesize

          581KB

          MD5

          016addbee0c3951e5ad059ae4a61dcc2

          SHA1

          b1d8e6272db8badcc9ef966b1edcbb3d69c6b0b8

          SHA256

          9f7cf891b0edae86720bec8be2ca9afb8ae3e4d223b81deef8e99780012be567

          SHA512

          35f8d2faa1681bc5a68b36d7ebaed2f0db9d4253b91c214f75a7927599c02e080fd3c269c9ca586ab23ceb7e34ce3d0597ee76b8a1893f179e2a051eeb1bc800

        • C:\Program Files\Java\jdk-1.8\bin\extcheck.exe

          Filesize

          581KB

          MD5

          2dc5522a06eb0dee492d47550f330599

          SHA1

          8269ca27cac73bd4a4b083323f20ee197858e9fd

          SHA256

          42c3881aea456e4513a68a64d291083760d5d92ff7d50faadc7beb8aa9bf1b0c

          SHA512

          192cd64d3b9d24d6b40a3ad7727145ea6147e795e792ddf07ff2ac1f433c1afb7edafd080906e0ea42871dc5f76a16a644de57f7489a25a4773755bc8377a6e8

        • C:\Program Files\Java\jdk-1.8\bin\idlj.exe

          Filesize

          581KB

          MD5

          552e2934b70b8dd4750bdea5d85b0deb

          SHA1

          fd2ad8f80db6728d122a7b30de1ad76ca6618109

          SHA256

          479329b00fbb9e5f9dc7ee3240023f7af698ab775d01ed45fd02e8c6d5dc4097

          SHA512

          898b488382a49441b90dd3e133ac85bf257385e70aeefbe38528624f18a5324729a4e198c5afee3accad7aac55ae190c2087cd45723a0346a5e2d10ca8fad519

        • C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe

          Filesize

          601KB

          MD5

          5c3e3a45bbf5b1190a7c392f14253a3c

          SHA1

          21aa66ee6749baeffecb2125b18d1190c5888569

          SHA256

          1f87601064cbeca34c81bc40ebb87824a5d2b79bf318470f74673c0a4ce8327c

          SHA512

          75822cf496d052cb1f4797a2e101364baa6031b09887f8607971315f7c32f4d7de6b347e9bf3b6e154f04dbc0ed125d6f5c360f26dad16ea2a30a3852c564d49

        • C:\Program Files\Java\jdk-1.8\bin\jar.exe

          Filesize

          581KB

          MD5

          bc74c7da9f0f12a33348910e2345f6f6

          SHA1

          63b12edd0bde21eec3ee5ae093014c013097d84e

          SHA256

          d4e7384c5a1fad500fc2d28c0b640df175a699f520d50e939c46a8f7a8048b69

          SHA512

          1b372634c6d3a7b39b2cdec60331ea8df6b96af386f610a62db096ee92390c2b10dd457f2c17c7ed94360159961fc2b921e740e9c36ad173e9c809c0e2c06444

        • C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe

          Filesize

          581KB

          MD5

          2d8e6c9db5c080e7db656f9650783c8d

          SHA1

          cd3dcda31cf365f4f4bacf97c2a504cba32c7948

          SHA256

          68621bc8ecddaea41c3663c35b777a1ecf74a0546689c5b37ccead5a2b105f67

          SHA512

          5e163b7e74eefa2754c83fe1cf9a8deb3596b48537999d006948e476bd8c9b86515ca7f3b6357cbc3b6e7122644ea7b9da091cc86e9f9afd5e5aa66426a451ac

        • C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe

          Filesize

          581KB

          MD5

          d351b0b64b6b248a4280ec9453a18e41

          SHA1

          6af2ebd93e835d72ee55f722a0bd07871343d320

          SHA256

          3f3514d39bf21a86cef438bb28aa1464e6e6cc63aa9c7038c63a133534ac5abf

          SHA512

          e7d4c80165b6149f2f198b53bb6cb4820bd6d57f09e12de87e16d90a24be2e758b63499c4149ea291e92a152bf667efe1cbd4e9f67be6c52409081018630df16

        • C:\Program Files\Java\jdk-1.8\bin\java.exe

          Filesize

          841KB

          MD5

          7e0032185cdb93e5ccec7400fdb0f1ab

          SHA1

          a8dfad3f9a62a00ef566a2f5cdf17d6febc11798

          SHA256

          a16f56f09b3bb0870a5f8e5fa3f6d0819493aa88eac89ce3879933de83be68a7

          SHA512

          f2c08b99f125c98e94339e05a339d61fda53e3b821221659226a1840b3c2a157a2c2eb6f27df854c79128b130031c4951d109de33030902bd3b2d4bd9af3dad5

        • C:\Program Files\Java\jdk-1.8\bin\javac.exe

          Filesize

          581KB

          MD5

          56d90e7216a7b5356658411ae2a4a47e

          SHA1

          ad27bbff7b890e52cff569bee14019a807ea4b74

          SHA256

          07ee3f85c3cd3462e85f48b235611d73dd27f1b4afd48bba03a5443d3b3910ec

          SHA512

          97b3b909f5a47e60a13cc9f1ce5b605ca09593a98bfe2ecc1c03709a608a640799ea8a4315d012681561ceb90acb7668c21af66dd8a8a04d6b8ba4cc92e0a3e7

        • C:\Program Files\Java\jdk-1.8\bin\javadoc.exe

          Filesize

          581KB

          MD5

          e090e7add71593ade963bbb712506b10

          SHA1

          117393a6b3f29b3f00cce9f4fe6671badb649d2c

          SHA256

          bda3ddd6c4d691c67d51a58d6fc2dc547f7afd1a759c212483519ab4ea1f1419

          SHA512

          cd195e47601772f39931d54c0e28683e7ae6255fb6f8a9c901cca89622f79f43203e254cecdca7d728195ff074fe3a72899280097b50136fc149bdf061d93fa3

        • C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe

          Filesize

          717KB

          MD5

          82b9324b7c2dda3ccc3c7e237537ddd5

          SHA1

          7e011940cd050830dac0996de7c56aa7361f2bbe

          SHA256

          33669d2470b5c792b3f0393fe6176eda9e24f7eee31d692fd1eff760b343d68c

          SHA512

          548e8bbb989c581f9566e4d6a07794d4a2f61e5b53fa7bc14ab6c365178f18a3055164405597e8444230ab74484e0465a04edefbc4f3595607bfe370a08b9bfc

        • C:\Program Files\Java\jdk-1.8\bin\javah.exe

          Filesize

          581KB

          MD5

          ce6ecceef353ca429b98d243945b2472

          SHA1

          1d186717812fd5548ee8ee171f4c796f8edca8e9

          SHA256

          b8a9718d7ea219e88b18268dea1566b383c5ca7e9722144c70c20ef3c6ffb48f

          SHA512

          5c35ef8c83c44165ef4abd58b87f8360197fa925fd9f9ade9199520e877a0a9a09901d726c46b0b337ad4e0276ce00d79be848a5ba004bb7e63c4772ca7af19e

        • C:\Program Files\Java\jdk-1.8\bin\javap.exe

          Filesize

          581KB

          MD5

          c53612a5cfc9dde89a991c6c1b3ba96c

          SHA1

          a46ba25bf3b390f53ebb984ae1672d0d3cb071d5

          SHA256

          7b7f2a1a5823301ccdef5a1b5174d9b85726fb2b7316cee9690093d5af8de07f

          SHA512

          96a8ebfcf523be3b994609ac02c453da383645e110cd416c6252d05d6593a8d359e4a8293395d54a814810e1b32c63a25d2adfffe45857f781294bf58bd87563

        • C:\Program Files\Java\jdk-1.8\bin\javapackager.exe

          Filesize

          717KB

          MD5

          cef191d87e816b15471ec7c9e740390a

          SHA1

          2d02ea5b0ee31edf821a3ea3d4e116a029640f36

          SHA256

          91587824676dc4b1c80abe77adbae0af6599e1dc0acc4e399d29260f7ea4c079

          SHA512

          d123598077b0877463465d68478ccfa4f7f480c61e1875b2f936a92ed40972ac0c8ac73b59a58d334880cc5b78f7b7a842b204a24403b071f4191f8ecaebe415

        • C:\Program Files\Java\jdk-1.8\bin\javaw.exe

          Filesize

          841KB

          MD5

          dc7366c22308e291f63dfc683ea463f1

          SHA1

          ddcd254ee29fb8c2be4dcac245eb7b261e93bd6b

          SHA256

          dcc7eef731ac7f2c9478180fc5d835f86daab0d94b3804eae092659841cde683

          SHA512

          0ebc03e469993881767af50c5f5f2f69d89c65647b2619a9990be4fde2e3944017a51e30df8e1e0a27712192a8db44845eb5b3f489ed69eb7031563e89cfb822

        • C:\Program Files\Java\jdk-1.8\bin\javaws.exe

          Filesize

          1020KB

          MD5

          9bf21fd9a874e0a5039476eb1c55a17d

          SHA1

          20a4daafc582ce444d01aa6076bb017f2cebb95e

          SHA256

          209679d48862c7384c3d5b743b0a90a5d6fdf5a0590fdd4f3f49cf15624ba6a6

          SHA512

          2852032aa6c3e763de5cdaaa56117d68b21618b1ac99f07d3a122d5ce389468212ef03ca15df1888a71dae5aedad5e9ceccfff66d4b55a63adeb51a59ac7652f

        • C:\Program Files\Java\jdk-1.8\bin\jcmd.exe

          Filesize

          581KB

          MD5

          4c43802339623cb8a31fac9b9f55fafb

          SHA1

          6b769f6a5adbd2e359080fb18b0ed8577c2f0327

          SHA256

          be54b514e3cb0fad5233f1e9ad40a8a4bf2e049f57f28f5d0f4d12fc354aff69

          SHA512

          d5b949b931e3b367d7d20bba2461692ed4a938beb05ccb288f0cae2651e37e0274cb14bedac4faac855b815925e2b64ef565b405af9464e9798a347310004c29

        • C:\Program Files\Java\jdk-1.8\bin\jconsole.exe

          Filesize

          581KB

          MD5

          179eb6cf4ca8865d0e5d0c5fe75a7c82

          SHA1

          8060ac109b23f729c99543bffeb59115c7f5fba5

          SHA256

          4c331870f94a7397b3534d2d115205acc1a19c41985006d7325ec5ce9c6af786

          SHA512

          844683cd8ebde52863b6d164cf55261d7f4b5f5f33dfd0bd0e7d2466d59017a408bdbc11b85e7e2c80da2b5706c25524a86efa7fa9e099dcd8b5000621d3cbd1

        • C:\Program Files\Java\jdk-1.8\bin\jdb.exe

          Filesize

          581KB

          MD5

          96bd9016b5fcb25dcb0310c0f038ce22

          SHA1

          7afb4a00160c2c279ef1a68f622836a7f3ed20b0

          SHA256

          80be4fbcf3bb0224cdae3914acc4a625c3abc6c63772f3ce61ec5e71df6c4021

          SHA512

          bb6255208d12c096ccb8417a41bc0cd382dc6f9e6e716d223f616de967e84bb5d684dd81d6be8257bc9ac8fe9ffee61ac53e0db8008ec4f6d759704782ba2e21

        • C:\Program Files\Java\jdk-1.8\bin\jdeps.exe

          Filesize

          581KB

          MD5

          9293c535cafa5bfd4b2ba7f1297ae2ea

          SHA1

          43af9b265afec915ebb94cdafe79685694db3936

          SHA256

          5e166ca33edc815867d598c04b90e98f409b6aa0b7d10ff2ded8f5e8569220eb

          SHA512

          db6acb23fd711ab20ff93365244ccfec47027da5633de355b43430824b88bdaa42efc1f150c90a26e3b7cc0145453e488bed26b645a530359dfb46692aeaf744

        • C:\Program Files\Java\jdk-1.8\bin\jhat.exe

          Filesize

          581KB

          MD5

          8194661f6832be54c0bbbfc7b8a815d5

          SHA1

          40bfa14dad088c01c57856b190e52ad0cb97d4a6

          SHA256

          0f4760767e7f77c4b339c76813add948eb5e686b5e61bf1aec1fa04e47d4b288

          SHA512

          df5d7fffe2551f331037b3f41a52a25cc07feeb836b6e7a512c6db41e6aa750f380c1edc4e6663eabcf121f70e5648becc419d4e0b2a22a0ab0209fb9c1df28a

        • C:\Program Files\Java\jdk-1.8\bin\jinfo.exe

          Filesize

          581KB

          MD5

          ed01614288071f61d5f1dd801069c54a

          SHA1

          85692c3ba9e0942bdc416834a197c079588de9e8

          SHA256

          a509786520a828cab670b3613d1f859e2dd3c7e8169aedd3cb3c8b5e89ddfb50

          SHA512

          81f7e259ad1aa7dc2e6153664ce1eb43968545105f55c79e813fe78ecef593cb5843780a3bd31ca9232825881e894f138e3a57f284504ca165ae6e08b75d0756

        • C:\Program Files\Java\jdk-1.8\bin\jjs.exe

          Filesize

          581KB

          MD5

          a045163add360956deecd85ee3f07dc4

          SHA1

          558d1ac99265c4a382e0509f30f3797074538a38

          SHA256

          ab2a78dad7bf05ea89c2438fe2fa6c84799aed281375baaf6014a2ee6af3d2fb

          SHA512

          7f0f6353a78632b827354b2ef38d3e2f3ce8773c565913589df673394fab2755ef4fae518c56a8e0143adbea752717d1aa70558d7807665a773937ed015d261e

        • C:\Program Files\Java\jdk-1.8\bin\jmap.exe

          Filesize

          581KB

          MD5

          01665386376e2406efe5440268a90703

          SHA1

          a6200360dd5c75aeba1a79ce017394134357005b

          SHA256

          b2cd709ab850c27f057c7fcd0f0fbde58c3791f4b95b332b101cca3abc437bc9

          SHA512

          a2cb70b70ed2f55b119f3e4a1795b41351960a455b5f81539cfb8d5680ca5f212ca2822698f5ffb1a4ac63c24cc3de2b0802dbf62da49ddadd62e93396a167f0

        • C:\Program Files\Java\jdk-1.8\bin\jps.exe

          Filesize

          581KB

          MD5

          8c5720a4c6ca893b0a35b14ce42c9094

          SHA1

          dd9eadd4cbd5147e9a83c82bfe56bfd9e4f0e8e4

          SHA256

          f76a091156c61bd042469c3264fcf14eb789e64ebc37d7f805cb3ed6ff1274c2

          SHA512

          76f5ddf8ae5969591595d3979daf3a80c7895743a0103efc19499e4f8cb67bd6a80cb21c501bfcb3c739dde37f9f86601f56796b2f8cc8959ea591a223a8d7c6

        • C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe

          Filesize

          581KB

          MD5

          4f37a10d6cab70090af1c9ad5b21a8eb

          SHA1

          e859bceed3041209ee82724e9e0d26f546462520

          SHA256

          2071aaecf1b49fa293cca898ad4c339991856484d4b2b5caa54afb52bb9e0458

          SHA512

          d15018f58ac3b4e080862adc887c855693d17f80da1ec6711ecc1033fc37bd1026ab424288109ce40fbd1f913cd79da817ccb941e508d23807a2db36df2769b2

        • C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe

          Filesize

          581KB

          MD5

          ce9c96dc5790fe38ce8daec2e4520869

          SHA1

          c95fd9820489f6cbcfaf216813778df7d6e676e4

          SHA256

          25820b4208d4b77e4f4e93b503f1e606557fbe3e611f36a4d53c0dde03a3eb3b

          SHA512

          dff093c5aafa8aeb0c03ac49407359bba8f60a43b46e4e26d699f5337811e406dd198f2168efff94c6352b716a304fd2cb2fc337e9289f8baa4bdf7a797892f5

        • C:\Program Files\Java\jdk-1.8\bin\jstack.exe

          Filesize

          581KB

          MD5

          0c9a2a1e044e351be5fc3903a76e267f

          SHA1

          138ff7cdc12734cc439df0dd416b6506c32163fe

          SHA256

          11b8618ab272fdf3d5351ce009d631f87a9a06e4d9981ea397775736a8811514

          SHA512

          e9058551f0a862a5660e92a79a9d5113bab06ef8a11d3c3bdcd6081fa3c8bf9d61d087caadf63bea363b39aa770af53b66c120c8ef7aedd76e3137e2bd02181d

        • C:\Program Files\Java\jdk-1.8\bin\jstat.exe

          Filesize

          581KB

          MD5

          621189ea3409d57d5ed388da9fe60164

          SHA1

          28019da70222f8e49f689c350ed9a90d403ef12b

          SHA256

          78f39eb5138190b81e68e49ffa3ff58c85c862497b3d81071a8b492c3cff99cf

          SHA512

          208b4cf4209401d00d294a5b93508a63cc3ba4018edb3bc04456707d5a312305420dbfb76c490ae5f9a7c5732dc53999ee6d630d3a0a2f5cdbcf3bae2fc9b383

        • C:\Program Files\Java\jdk-1.8\bin\jstatd.exe

          Filesize

          581KB

          MD5

          f580ac4b4ac3e957f7b4f70eaee1bcad

          SHA1

          e0ba7c6b9f79841f85a2f6b231e8b7c54ff8d4c5

          SHA256

          660d80a4149c49c493b9644f082f85f1b781003825802704bad51c261d3010ce

          SHA512

          cca7252817df62f9d897f8a0f2e95597576f24f118b08f74b1cbe07724bc52e2d0f87fb4a77e4d03809649cf20e75bbeebfd46ea5338c7ada29acd926f1c7cc7

        • C:\Program Files\Java\jdk-1.8\bin\keytool.exe

          Filesize

          581KB

          MD5

          180be2b2378003a9c364cb4e6ab8c314

          SHA1

          1493921eea41aed734858c99e6582bc9cbb06b48

          SHA256

          29f93b5c38dbbfca0ef1d9ce52534d065eb8d984bf93bdc91809f69e6e489421

          SHA512

          a71e710ca1da29d017ba6f4b956371a5586fd0f1d79f0bb5c5d96e926e52f89dece9723da1743ba5b6372d4e842527eaff44efe58f3e7dabd96b4bd1613bcf5c

        • C:\Program Files\Java\jdk-1.8\bin\kinit.exe

          Filesize

          581KB

          MD5

          f2196412b1aba96f8853f257e7c6ccd4

          SHA1

          23dfc84e3b5af5fe1f2da14deba8a08e11912914

          SHA256

          7c63a4db0f87a181756aad379f6f408429f17e10ed5b7ab5200fe0fe5828a9ef

          SHA512

          140392e25ae8c50faed4cb71743f4254549c3df389e72386bd0d402896528101de14bb695aaf03b6036e3f7b40f346ed401ad1be6675fafc7837b294f924ed9e

        • C:\Program Files\Java\jdk-1.8\bin\klist.exe

          Filesize

          581KB

          MD5

          0b566e57f9edc2ad40ddd171f515a00c

          SHA1

          822525230771e7a91e276dc8885feb246961c01d

          SHA256

          345e69bb49c16056ed592f01061fc4c26121522f159a4b69284a0adf5dd6a466

          SHA512

          7c1d918f8fd89bec2d0e11d9b08013b7d9d66e7af974cb573b1cb83eb980d6ec8cd37dd87e94d662dd88b434637cff0f7f457ccd2ab0328e911a83c6507824b1

        • C:\Program Files\Java\jdk-1.8\bin\ktab.exe

          Filesize

          581KB

          MD5

          7415e4424c70e888abe1eeadda9f90c7

          SHA1

          70339e7a31d80ee3f2708596b55f752f0aaa3d58

          SHA256

          125c367ce0066d4a2ff16a3a10513d534388ab2e082a71a58194925fbec4ec66

          SHA512

          87fc323317cc48863be1d5f3233dec5613b45cab6ae6c95dd9dfe23761cb0c01a204234fec2407adead67d4abf81f73d5444d9fcbafce9e382351f5c40abec9e

        • C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe

          Filesize

          581KB

          MD5

          b8ca7df1fa9ca9ce0e0c04276622dedc

          SHA1

          70f55c2647ca4b856ab3eab1a19452f0ffe570b5

          SHA256

          56fcfa39aeacfef0e77a1dc0d846db9bebc268409c2db78364fd41a1a8144dca

          SHA512

          39da27dc0be5d9752e927e3571a1a480bf2e6f36ec5ffee01470885bb8cbbe7b060587edb91351364adae049140ba98a7abc839491e7c33c9ceb27e7e0345ccc

        • C:\Program Files\Java\jdk-1.8\bin\orbd.exe

          Filesize

          581KB

          MD5

          53246d8ac4bb7b374f6ade37dc682eee

          SHA1

          2ff754abab7b759580a819bd642d0bc087eee737

          SHA256

          98b68e63112f33a490f5316d2ed0606b2a4a79eb08bbf8956f7099c3439ece8b

          SHA512

          c537bc0c4752ebe961fdc259b1de16a864df4d335f306985a86b6fe6c365060f53e7bc16d5b11b9a2a639ce0721053ee70aceac2e58a022a57e47c53d425c93f

        • C:\Program Files\Java\jdk-1.8\bin\pack200.exe

          Filesize

          581KB

          MD5

          297ed5de1f8be4e3cd7db3152a24a238

          SHA1

          3d5d62e5ecb1ff081e1e325c6aef9062cecebd2d

          SHA256

          516c7555d60600e77057cada582a08350bcfc9c66f85caa25754d6f843aad499

          SHA512

          bb60bbcabe27fcaba5965aa95f58133d3fb888424021b4d956885e8b35880a8df6c5188d7fda7e7cdd2af232a7895cca62bd0394bc911e7d10362cb39fe3beaf

        • C:\Program Files\Java\jdk-1.8\bin\policytool.exe

          Filesize

          581KB

          MD5

          96fc77ce854eba2f085ecbcb73e0d093

          SHA1

          00aafa9911b3fb2a9a0793df37e64f0a51ae9ccd

          SHA256

          6cef73b753030acee6257914854b11b417732741d755ab034c08d5b41f96ee67

          SHA512

          8165f877057a71092d16dd557cf6b83330c83a34d22922a00c080c0212ab42996964e4610fbd5de086089485cb0eb577718baefd0c4415d512a3f51a36039a73

        • C:\Program Files\Java\jdk-1.8\bin\rmic.exe

          Filesize

          581KB

          MD5

          07878a8593086bacbda9270e11e79f18

          SHA1

          93cd251010bc26173fe9cb035e8b9990bf855ddb

          SHA256

          9106c75b04ff78aa4e6d42e0a737213b433f269cb56db11a248d7bf90927da47

          SHA512

          e83a313add611f2518ebc524bfd6f9929eb2ba139b34d309cd8d5ab781fd84a15c3d88275cf502f23df8045935023629ffcf13f87abefccb81f44567972ba86e

        • C:\Program Files\dotnet\dotnet.exe

          Filesize

          701KB

          MD5

          3ac4759ba001994ec3ad747d4d7d789d

          SHA1

          0e4915a855b58f52e983ea077eaa8f5b4dbf78c0

          SHA256

          4fd72d686538266b1b9ad8d06a17f355c3c1f54e6244f8eb54be7b50d4e26c20

          SHA512

          3cf887eeda3cdddad5d97a36681d3f66644162c2571ab87663a4a9338ea2865ac52df212fbfc4daaa2dfe151c79d0ca1e5a70ba423bbafbe67c5c1368e622da6

        • C:\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe

          Filesize

          659KB

          MD5

          a272871be49673ac9a3c900634770bc5

          SHA1

          efebf0943c238dc9fec8f8c92b6a8a0336d12e84

          SHA256

          0600b3d8bf1c7d8ad03f0865ee263792edb6a45f213c9a10706bb06096986b90

          SHA512

          e2d9ecd708479fbebb1befacec6260a266831faa5b4f01b389d9b6a2d328fe83ed77007a09c49ccfe22b65e96f39ac479ff1079f5f44b390810bddbec079c874

        • C:\Windows\System32\alg.exe

          Filesize

          661KB

          MD5

          c0c0a181717007764d58da4578c27956

          SHA1

          047b9cc55e13b81e0e9ebd5a61b6befdc96c981e

          SHA256

          8df70247e84e0f44ed265486f4477c8e8f0e5a68d319ec3d378b4070d778b245

          SHA512

          1a4b18e77e6fa7f2350d20a47fd1a5b44e393cd600ac8f8868d881efcfb15f05ab57f867adc0b8b355ca3af708c663654b9c439fac4a4567da29d62235015374

        • C:\Windows\system32\AppVClient.exe

          Filesize

          1.3MB

          MD5

          8155f6a7115d69388da0c8fc0795b81d

          SHA1

          e3bb4734108a707b55e39fcce6b04b67d96288d1

          SHA256

          53edfe38c47a1a4195914e65e85e854a58408bf4a585e10413bf4f0caf45dcc9

          SHA512

          57ec248ed1aaee75b1383c5081567be0a9137007f0218748f1d5f13ca39f481005706b2e7b2e033d18b3334750eaba35228741345f05ba506cfd198bdb4ca089

        • memory/2772-248-0x0000000140000000-0x00000001400A9000-memory.dmp

          Filesize

          676KB

        • memory/2772-30-0x00000000006C0000-0x0000000000720000-memory.dmp

          Filesize

          384KB

        • memory/2772-36-0x0000000140000000-0x00000001400A9000-memory.dmp

          Filesize

          676KB

        • memory/2772-39-0x00000000006C0000-0x0000000000720000-memory.dmp

          Filesize

          384KB

        • memory/2772-37-0x00000000006C0000-0x0000000000720000-memory.dmp

          Filesize

          384KB

        • memory/3240-249-0x0000000140000000-0x000000014024B000-memory.dmp

          Filesize

          2.3MB

        • memory/3240-49-0x0000000140000000-0x000000014024B000-memory.dmp

          Filesize

          2.3MB

        • memory/3240-41-0x0000000000C40000-0x0000000000CA0000-memory.dmp

          Filesize

          384KB

        • memory/3240-50-0x0000000000C40000-0x0000000000CA0000-memory.dmp

          Filesize

          384KB

        • memory/3260-19-0x0000000140000000-0x00000001400AA000-memory.dmp

          Filesize

          680KB

        • memory/3260-247-0x0000000140000000-0x00000001400AA000-memory.dmp

          Filesize

          680KB

        • memory/3260-11-0x0000000000750000-0x00000000007B0000-memory.dmp

          Filesize

          384KB

        • memory/3260-20-0x0000000000750000-0x00000000007B0000-memory.dmp

          Filesize

          384KB

        • memory/3516-87-0x00000000006F0000-0x0000000000750000-memory.dmp

          Filesize

          384KB

        • memory/3516-80-0x0000000140000000-0x00000001400CF000-memory.dmp

          Filesize

          828KB

        • memory/3516-253-0x0000000140000000-0x00000001400CF000-memory.dmp

          Filesize

          828KB

        • memory/3516-81-0x00000000006F0000-0x0000000000750000-memory.dmp

          Filesize

          384KB

        • memory/3808-72-0x0000000001780000-0x00000000017E0000-memory.dmp

          Filesize

          384KB

        • memory/3808-65-0x0000000140000000-0x00000001400CF000-memory.dmp

          Filesize

          828KB

        • memory/3808-76-0x0000000001780000-0x00000000017E0000-memory.dmp

          Filesize

          384KB

        • memory/3808-66-0x0000000001780000-0x00000000017E0000-memory.dmp

          Filesize

          384KB

        • memory/3808-78-0x0000000140000000-0x00000001400CF000-memory.dmp

          Filesize

          828KB

        • memory/4600-28-0x0000000000400000-0x0000000000506000-memory.dmp

          Filesize

          1.0MB

        • memory/4600-0-0x0000000000400000-0x0000000000506000-memory.dmp

          Filesize

          1.0MB

        • memory/4600-2-0x00000000023B0000-0x0000000002417000-memory.dmp

          Filesize

          412KB

        • memory/4600-6-0x00000000023B0000-0x0000000002417000-memory.dmp

          Filesize

          412KB

        • memory/4636-250-0x0000000140000000-0x000000014022B000-memory.dmp

          Filesize

          2.2MB

        • memory/4636-53-0x00000000001A0000-0x0000000000200000-memory.dmp

          Filesize

          384KB

        • memory/4636-61-0x0000000140000000-0x000000014022B000-memory.dmp

          Filesize

          2.2MB

        • memory/4636-62-0x00000000001A0000-0x0000000000200000-memory.dmp

          Filesize

          384KB