Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/05/2024, 19:53

General

  • Target

    2024-05-28_d6ed41a105a77941c0c36054fbb506ad_bkransomware_karagany.exe

  • Size

    677KB

  • MD5

    d6ed41a105a77941c0c36054fbb506ad

  • SHA1

    934f74a725afa9f174397e97677a256bfa3583f7

  • SHA256

    f901107bfa65ce0b92b46f81117b7ac1264e93a2d76badeabce9129f1afc7e37

  • SHA512

    1d697ef628c2b422a044a24cee3aa8f53b713bbbbcf6e1dd86f9b339c6f6a62a18d26c7858ddfe2b0816d40d2a55040c28627a6ed7b1dc391a0dad6e790b728c

  • SSDEEP

    12288:svXk1J6JvY67VMBNO/aXpXI22+VufvdIOKek1h4TA8bXQJYe:Ik1J6J17W8CX32+KJNA80T

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 6 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Drops file in System32 directory 9 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-28_d6ed41a105a77941c0c36054fbb506ad_bkransomware_karagany.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-28_d6ed41a105a77941c0c36054fbb506ad_bkransomware_karagany.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:4572
  • C:\Windows\System32\alg.exe
    C:\Windows\System32\alg.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious use of AdjustPrivilegeToken
    PID:4520
  • C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2792
  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
    "C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:4316
  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:2300
  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"
    1⤵
    • Executes dropped EXE
    PID:1416
  • \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
    "c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
    1⤵
    • Executes dropped EXE
    PID:644

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe

    Filesize

    2.1MB

    MD5

    223dd9cf94388f9273d99dd6a6d0b54b

    SHA1

    2576919621671b81f81f2b4ebc1ff4d978055e6d

    SHA256

    d6d82ee80755c3927a6af1e13e2c93e17c117591c5784188708e939b34e11e76

    SHA512

    e9ea709ce4822be704a81c4e5f52e7ee8b9502eba3c93d9b9cd3cb11fedee0190160fde53679eeee57b01cf039cdf7b2e91447b0dd401d285fb3f5623aa9ed25

  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

    Filesize

    797KB

    MD5

    cd71e5a0032d1031b78b2ef67e3349b1

    SHA1

    3a6fc7009c7c9c426fb682c1f0a7743d1618c71f

    SHA256

    8ca0a213095ab386f3426299216d5981f10100ed16e8c8fa03d6aace2d05ddb9

    SHA512

    bb0186a33bd245bde1ff19ee9b6011f4bac708046e2cd2d1440b0500937574fc3aa420ae39de2be12b9d715ffd35fdbcc264cceebee6666223761e7a7f1311c8

  • C:\Program Files\7-Zip\7z.exe

    Filesize

    1.1MB

    MD5

    91fee889e959923f508c64e45b3fcd99

    SHA1

    fff291e6eec0959b793790aaf25e95d0d2570341

    SHA256

    ba5b9d7c5a0f905e6e3b14b69a63575790776298e5315193804164346d97bf72

    SHA512

    e38d606cce5f048d2d2e7494cf30e3c4a3bfedc61184ffdc8eac3c0f30d2138ebfe18636f2143d120914e2c27577e39e216435be927622c8dec415f1a176ae11

  • C:\Program Files\7-Zip\7zFM.exe

    Filesize

    1.5MB

    MD5

    338bee8a7b78e53741dadabcd33790f9

    SHA1

    46387e1b74048d78927af23c4696bdd0b64bf339

    SHA256

    1cb7f90193b25564497d3b662710fcc99226a7a1c3ca48b04a386a675532701d

    SHA512

    07d7b8b9bf0e3aa4a50dc04a38afe728570fe2b0ad9b63eea65b36dd243b9b65d18e140a3a622392cd5e8f8b28ad9c3028baafd1b99e9c1ee8707cd8a6b19a27

  • C:\Program Files\7-Zip\7zG.exe

    Filesize

    1.2MB

    MD5

    1df634fcd03bc48bba099b5df5792bda

    SHA1

    47be2eb80e3fb94ac99697d9d60ae3b26f825bbb

    SHA256

    3932e8d5d8e785e1041982e39df069c33aef12b6255bf05bfe02609613f336ff

    SHA512

    3b4e81bce31dafe10c10844770d6291343f12674ad8d1a116294de65428c10288c262a30d1db7b108bea2fe3d11e171aad93d2ccb793dea26946520011e9a4c6

  • C:\Program Files\7-Zip\Uninstall.exe

    Filesize

    582KB

    MD5

    187d6c10c23f6365ffc744a74ef6f6cb

    SHA1

    2637039d4e1e591e78b54c43b42024cc0d44507d

    SHA256

    e8f4e7260922dd44680ab37ab1b7d7aa2df39a7c61f1e4fc58b63954f6da63e4

    SHA512

    64c6837c820dd473857d5b947c896c464a4bad493a24a8ad81366a7d6dd0d06dc84a4b2a4c56da69ae25f531f6c0515bca3d6489834e296ef3029af5c00fb836

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe

    Filesize

    840KB

    MD5

    4d5fd9a14c53a918de0cdfe6581ea4d3

    SHA1

    5a1d514fe6bbbf7c29d824c0e773994fb3bf3a04

    SHA256

    2c9bb519e839392edf7161582c965af560a23db9b88c18500a18b329b9571301

    SHA512

    dc959deb8f78ce3f211e6842fe99f77bd94f939b9bbbdc67774bf08b271882517d14abc1fee712e658f6024599cc7f17b2dc753e7acb6c8e27c166e5facd231f

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe

    Filesize

    4.6MB

    MD5

    a3f355a5c2d8fa5f3d21b5c89410308f

    SHA1

    fbf5e27498866d1be86596bf8efbbfaf974e5510

    SHA256

    a76902bf2cc4d6795a336a8f77fc11ab25bbd1b7b93006ed718519be03116292

    SHA512

    def6dde29558be3e5496536b0d33252ebdd52bb85a39e51b56e7c7ec99d785869a2b2ae75fab4adbc1902e74a1f6768c7f49e2d0120b3ef7120e18ddc14766b9

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe

    Filesize

    910KB

    MD5

    a5faceab8d1fd79053cc5b205a1260b1

    SHA1

    592074dbbff7fae2c1522fdc3a51ee71145cd10b

    SHA256

    26d968a334416e74e2e07ae7fd99ffe6a47dd056da275cb1e9abde56dda5a924

    SHA512

    842055e6cf8b0aa1dbed30c282a6f59ed0b26dbcd298e8ac7b7f4dc7e81cde1f269eb9c75033f43d76fe55a193141acd3a9ced971421373ce0f5e3f39f293939

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe

    Filesize

    24.0MB

    MD5

    bf83be35276315417eb79f44ca374360

    SHA1

    9586faaa7b74532206bf540ec1711088b85f95ee

    SHA256

    017dc471af88b1e0671a6e88a31a42d68e016dd31ac20f6ec8b13e1c37b39e87

    SHA512

    56726d2e6a8ec995f8dcc85f64d2228f4f12b5b3e77314188920eeb9a47ce3c6fe6f531614a66500a6b50930f6d40ab08534753787e5b1ccc50d1647a035469b

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe

    Filesize

    2.7MB

    MD5

    9f807df1db89fcd83e1476d587514e68

    SHA1

    e07b5056216cd7dd24694fbf410e238570600365

    SHA256

    13d97b48f4f376ffe9e021d4a91e5668514155f1dcb8e0c1e71a4f86b7ab200d

    SHA512

    1e11d82d8d391157078a71bb044d95974ac3a9e1f08f89e3b03e625cb440cfe964a57bbede4ca33e37fdad0dcc825df759bd1729ada3e6340471e0ab81715484

  • C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE

    Filesize

    1.1MB

    MD5

    08b381b5b60b5c0a3c27a0e1e8f6c7b7

    SHA1

    ec22e067c8cc0ce62225c17e1d636db8d627b9cf

    SHA256

    4c985ce52cde71969b5a5a5618720f1ecefd1abc0d0156df224c6a5e0e77767b

    SHA512

    09d7ba0b8b2f0b9baefa903b84a6ed47bfbffc7263ba2d59d575a4cf1e41ead1601ca88c005f0f8ea90cef7d5570e6009cb7de2513490de3afa4497e797833b4

  • C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE

    Filesize

    805KB

    MD5

    f1ec5db1e3fc9018cee9cc41beabcc4f

    SHA1

    ea4b6e519bbd88b184f6cad1f2c7d8de470321da

    SHA256

    2c0964b2fceb9967e855975fd2e5beb4aee11f4de9a05f2cf1b5dc93da57eccf

    SHA512

    8073729e6fb240caf87c6baa8b4424026d6ded96a4745b3c9cb97fbd335124e97907eeb450582a0c98d6fdb846e8a2afa35a0d1f1fdd3ec3131251b75ddc5431

  • C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe

    Filesize

    656KB

    MD5

    0d5b0cbade1d7a8affe8779eacb3c256

    SHA1

    e0906222125b2a0b33c50817cabecc127bb0e256

    SHA256

    59e16ab6c259afb67593a8bb7f016c2220247c99a9df1571e129032e487472bc

    SHA512

    b1fd1c6d079db9d434c99fc1e356fe878ca507329232e9250f7a6340090617886fd47e7877b3e9ad47e8d7cf4bca60b4281f6278d4898df3c4bbb15fd2a22fb8

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\chrmstp.exe

    Filesize

    5.4MB

    MD5

    8c3525d3bd429e8923f720b426d4d60b

    SHA1

    88bf03b2ef6126cef16e31cc6b60b23e3d738143

    SHA256

    2657768c8cd87ed0c93310e0bd286dfcfa8f96a70d747e60e9f4bdb562dbc010

    SHA512

    f0d2d876cd1329a26378d8d75167587fbacd6746278cd2f159329f095f7ffcbecaf89a0c9e292db0887a13c4394c8bb3efb2d40f2d6c72bcd2a82bf147257f1c

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe

    Filesize

    5.4MB

    MD5

    ca29a4438473ce584050e8e8591343e3

    SHA1

    e65b6c6adc9fc15177b77c5fe56de6af8afd1963

    SHA256

    4c71cdd55469000ff20a2b0d898761eaaba2e822c75ac0f7bab3bc38eaf94b81

    SHA512

    5f6b3482cdb60dce1263afd7ec681db745ff6e8e78d894ebd20ad3541c549e186dc2d515441e84785776bcfee56e5d225c8ab0168496f798071b1e3ed13be850

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\chrome_pwa_launcher.exe

    Filesize

    2.0MB

    MD5

    2272294ea0c7234fefb9a688a2a92219

    SHA1

    b160b2960b5600ea5c088a3a82fcaf23119132b0

    SHA256

    e4cad9e7797a0540ee46ded409f6efb02c9566cb3ff09d22c80a825aee755092

    SHA512

    adb34163295c250b225702dd570e9938e93e752c2a66f2d951531d82704d1207dddc808ceb161798768c047968b226c87cfad7fe85aee51b79ec3f54b499f491

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

    Filesize

    2.2MB

    MD5

    75ef0abeab66524aa1473e807313c3ca

    SHA1

    3f96bfcf7ff0b818e333d03979a33ddf85a8d4b2

    SHA256

    60f7ae6c8dbb60d20a75e84480c667a5aead34c705439c19a5a9200bab9aeb32

    SHA512

    d52f202bb4ea9e0b0020f1a29e82b4b717fb6d1dfcb511ce2f6076057fb34bccc45c231bf614cade8b44828af99fb221776739005de2cc967871f39509c83f23

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\notification_helper.exe

    Filesize

    1.8MB

    MD5

    39a18209b9cfa17d64790a75e69c7bbf

    SHA1

    3842c35cb1857ac61839c7ab057aeabd2c9aeb4f

    SHA256

    417e40fb75b837ad62988cc51f21013d3884d3b8923dfccf9154f1778781614b

    SHA512

    8b784a74bc65bfeb6d0a8d6c9ae18891bbf9606bcb640fb7a21e7281ef7b3fc9a4dc99fc0b2397f6d91ad3483521aa8c7078bb65f2cb69fa35784bb1f1db38ef

  • C:\Program Files\Google\Chrome\Application\chrome_proxy.exe

    Filesize

    1.7MB

    MD5

    f5c96a02e8f151c8a76056b81aff94dd

    SHA1

    92c12cf67f3c8a5407f25d909ba8d84047a48a40

    SHA256

    19bad9ab16ea77400b2d2a63bb0515c2096bc440e2f4879581e0f28619cd8c80

    SHA512

    5f8a704be5438426e5bcca1b117848879a7577a3eb1bc1f2e5cd4137e132c44a465ee3ff4d9ccf85ceecf5f54d1880c32c5d038e3d83a2b7ffd8e88eeb38b0ef

  • C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe

    Filesize

    581KB

    MD5

    3d27d790a2e68997467bb458d78df81e

    SHA1

    4701548959baef9c4c3db5ce0fff5a10b647e36f

    SHA256

    d1acb8ef7fc4ed62cefd4cd02ee5e9ca52009d073f24432d07b2ec94057027b6

    SHA512

    4691a49074c5b226479c4f50421d150918a4a591aa237c9223179030c1e67c6ff9c77d00df3b04d456e4580de748e091d33be25caec44bbd68ccc3c74bcd9d0f

  • C:\Program Files\Java\jdk-1.8\bin\extcheck.exe

    Filesize

    581KB

    MD5

    09c468a21111cf5cbc95d892ecec666f

    SHA1

    cbdb5b17ad50eabbb5c6aa4cace5175bb6e8ce42

    SHA256

    4a6b7bbeee2fd70ad599eafc30d2bd1eb8745ebb8e5d823a12d485f2a0670e6f

    SHA512

    3756b3a8725ae82ec65eacebf83b13f918b4ca998c815a289681e9a7835ebb4322c794d248c3cb4d14651b6107aa5dbca79dee0bce74d709333ea1e67dc1704c

  • C:\Program Files\Java\jdk-1.8\bin\idlj.exe

    Filesize

    581KB

    MD5

    562bb92b40d27edeb13bde8f65d9a54d

    SHA1

    1a2769149c8ca12801dc07e8b75c6df572e2a750

    SHA256

    d35cba8de9d90bddde494c0efbe5a8f581dd9278dd32ab6e31dcf4f37a541b95

    SHA512

    824dc84b24752d3d4d8da672ebdef0d6bbf7934c10a388cd463f20361e5bc9d40869dc327694c18f8a450e23c794c98391d1291e70890f986965aec7860ee64c

  • C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe

    Filesize

    601KB

    MD5

    fefb1f0b767b34b67a5d70ac8c3f1ac9

    SHA1

    476abecbf72ca642aa81c53542c8f7947c1a1429

    SHA256

    22a56001b889fbc8a4e75a6055835aa89692f1b534c7332ef58d4c51f2f8f3dd

    SHA512

    b17cfdacec4a05b4432c2d05260854598642091e8b115b234d2d1fba316a32dec9959fea4bbf9f56402419e067d7d6870ced4713927a6593ea392142742b68db

  • C:\Program Files\Java\jdk-1.8\bin\jar.exe

    Filesize

    581KB

    MD5

    4ccf46704cdf9e3295ecc690f96b8728

    SHA1

    ad57cd247c4652c28a7ab880f69fc8b133a11d1b

    SHA256

    4c8adbb1b0e5ad70a7cc93c6d486ca1dc76775c8ea0fa2f3a5fb97358212e0e0

    SHA512

    f05db49297ed7c5e5368ed4f41a710df95e8170197944c3d155fd081b46644b6fe1a5da7ffe2b1c83848996b42b48a8a42db2875ad659b659269aaa0d5c207dc

  • C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe

    Filesize

    581KB

    MD5

    94365ee13c87c733169fb36779a3091b

    SHA1

    d17f5d090002578ea795ffcfb5912e567c713c70

    SHA256

    3c1b87bf9b71e69a2c312ee8088813545222646ec07b407b6f86e6bc245785f5

    SHA512

    e6bcaad9d1911e360617d1c8dc17fa046a7cd5689c0ec8c067b21c4b6c73de70b1121c72fb4d0c261d0ca7034a91e89bfc6c52853a30894693ef826fbe7002a5

  • C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe

    Filesize

    581KB

    MD5

    bd6c550249701a83dfda254c762d896d

    SHA1

    8a3205d025f391423754b63417103669c27005a0

    SHA256

    a41e4938d7e0860eec6b119f82f0e4f8b89174e99774f91dd873cc3d4bb2a69d

    SHA512

    9fee4ebc2ffaa949b662da278b3e1b02e8c7dc92fa9ddacf0cd5759dc76c79d2aa55ad2f27b3a48b1f01a843448fcd4d70d6d1dfe785ca2b36fd88ffad489533

  • C:\Program Files\Java\jdk-1.8\bin\java.exe

    Filesize

    841KB

    MD5

    6a88c02a41beca6a500ced47268dc208

    SHA1

    1cf748e378968ff6b3eafe68396a0572d0ed715b

    SHA256

    521fa9398717d23a4b0cc39cea4160946fd300a0edd346036100d58a2574cca7

    SHA512

    ab7d41fea4b4a6dd859bdbb7d3c683643c037972fbfabdb9291151ec96e508121d95bf9a9941bb8c242f154521264dd846161b6f97809e9c1eb9e53083a96d59

  • C:\Program Files\Java\jdk-1.8\bin\javac.exe

    Filesize

    581KB

    MD5

    2fdebd5bf68117ac6a0e41118cbed2f1

    SHA1

    1d97ab55e0fe0127a343ecf6b9c0bc0342d7ff0e

    SHA256

    35aaf0472d59f031481ae0c0c056f28f8548831643c3490c365267989c1b18a2

    SHA512

    c47127152abdc6b8ec4c3d05d61a4982c5d8bc0150404ee7906f9d5c1970ae30e72ccebb23c6947723d044a5f524917b039c7ca8d475a134ab31dd0ef6aa3916

  • C:\Program Files\Java\jdk-1.8\bin\javadoc.exe

    Filesize

    581KB

    MD5

    bceec6c5f18dda7d582b2adf618637ff

    SHA1

    bee0b6d00cfd55d0632c8e1841811be55c8f626f

    SHA256

    e273fbd823827f9e76b093a649dbc8eff64f69da43c7d2bf2740615b7d3372de

    SHA512

    697004724666da87a8b5df44cfb27b2852539fbf96770f52f55dabbdc970160ac4cb02bc369b97f14c113f8a28c7d880909a79fd2c96f17fd78a63b735d8e32c

  • C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe

    Filesize

    717KB

    MD5

    0b34ad14ec1ad8fcc2db5de9369cba94

    SHA1

    8d57aee6ab69365ce23d52f33f58953a64a4164a

    SHA256

    b055cab2912ba6e7e92dfeabd64b4f93dd176b5e580ea3982f3a17c11f76c2f7

    SHA512

    8add48c4ed25b2c44df4c88a2f72833f3247e19222c8aa786d9f0e45f12df1f53e020dc50c031927b86f7b81b910a260104356696df7cc986b834bdf2e970acc

  • C:\Program Files\Java\jdk-1.8\bin\javah.exe

    Filesize

    581KB

    MD5

    f94ac24831ba5e40e27d338197b14f0b

    SHA1

    a6c73bc56d676e789d9fe5512e23f969601ae804

    SHA256

    b13c740ba1e12f1d8345a709f0e9bdeb6fca4930c6f8350321b59552c4fabaf2

    SHA512

    1f3656a1f6e91015be10ed0114eae5893b0b4a73a5cf00c40cd2057c102d56e3ad1d34314524bc5d5bb500ecf848f29fd87e2007c26c11e6465ac84d186fdf1e

  • C:\Program Files\Java\jdk-1.8\bin\javap.exe

    Filesize

    581KB

    MD5

    86625b9d092596d639f09a7d6f3296ba

    SHA1

    7057752aceee62b5af457b3706142cd4432e9528

    SHA256

    43fd3c671774498ed22e394eded717a0642dc01de9371def224e582d81e787ae

    SHA512

    0d74f367b7e196f051b608ab1e28c48ecb8dbac1b0386e3741cf29e27a8d4bda222de8b09e6f44a93611c76624b42c24a3e9e37a7447ede6041cf6d6b1168b93

  • C:\Program Files\Java\jdk-1.8\bin\javapackager.exe

    Filesize

    717KB

    MD5

    2ba60617507070746af1aba453b04f42

    SHA1

    1084c61892bd76a211d09bc42ff00f79e4fe96fb

    SHA256

    1edcfa0a399c6db36bc7800df7ae0b97b4a374054ea3a20d65240f661d0b898a

    SHA512

    b3806367f93b6c83a783ded7a324321838bf7c6e9c390c8757aa3caf7c90c36a850a1831dab03ce16b90cc0bf97e53af58d9278e73a70765d003449c8d689c04

  • C:\Program Files\Java\jdk-1.8\bin\javaw.exe

    Filesize

    841KB

    MD5

    54a9b2a121afe7dd7311153bb2453cfc

    SHA1

    f4bcf3a68a79ab206a4544c76531ef216aaeb65d

    SHA256

    e89af4351b28477ac05a007bad28b861a23f38a31c9c9fb4c74298a756b2e9b2

    SHA512

    9e86316c2ec89e2d76a0c48e0e85f3aa26dc8407e866f00c7860e4c380a42727192061db2918d0258e085743e9803c9a2bb562ffe48081886e3a48f4f8684226

  • C:\Program Files\Java\jdk-1.8\bin\javaws.exe

    Filesize

    1020KB

    MD5

    4e40a6450b12400388507897dc8dc263

    SHA1

    b4613ed5bb264ad27b48e093ea90a01c915ccbb5

    SHA256

    496b64d4e0740d5e5bb36322e672dc97134e7e8d6688e58fa7a8b92f60221afb

    SHA512

    c577e06b3c99b6bc893532df3105ea4d1d2311c2c1fd0bb9adf38aeda7f0ee62a862dd7e1a79b3b20296b76fdfc6c3531adc2e7baec05bd1c01a2db583dfe93f

  • C:\Program Files\Java\jdk-1.8\bin\jcmd.exe

    Filesize

    581KB

    MD5

    7434ed88f6ed402f47dec8fc03917fb8

    SHA1

    8eb342b92c90e219b175daaef87b1a7e662245f4

    SHA256

    e7a5aca803b7827b66d3fb2a9dee49806a2b659d47165f8a7c801e021a9c314f

    SHA512

    1eb35e7eeb5b3b8da207df55c0daf1d334dc2be019b8fae842f270a85bc1a79ac41afdfe85da56c6f5fac17c45dd6ad0cb8b09378628c769b7362cd0965520f9

  • C:\Program Files\Java\jdk-1.8\bin\jconsole.exe

    Filesize

    581KB

    MD5

    a774ebc52ff5cb6e5982c99193e68544

    SHA1

    9c3d04ca776fc2407d6d4b26f2e41a3fea147073

    SHA256

    ba0348759b18099b8abe86835f4f6e3abd1bea9420df039e4ac0537d7c8168c5

    SHA512

    29d403ac41c34be6c53815c58cdefd79f479f8b92a6f80d9caa61aa7d5f7fdd1ca09edc70f06f49bf6bc56a4ec917ae5cea97bde26b56c8a1b994f3597b4c272

  • C:\Program Files\Java\jdk-1.8\bin\jdb.exe

    Filesize

    581KB

    MD5

    67b941f508441e912e935e527094842a

    SHA1

    e224265f37ac7297aeeebcb65bba9c2482fc494f

    SHA256

    6f3fa6658b925e55ead9b7c76545c7ce0b0b7a286c932dfcbb017d49305d5a06

    SHA512

    4dc110bd47fb520819ba00ca20a36460d0e6e7950ce55d7321e64da39560bdd660ebf341618b14a99b852c240dfa87ab24ff528bbe84fb97e2efab88a86df6b3

  • C:\Program Files\Java\jdk-1.8\bin\jdeps.exe

    Filesize

    581KB

    MD5

    b38902b2601a41277679e3691c6bbdbb

    SHA1

    356b631e62cb2fa00e613dcb6827eac70d145e14

    SHA256

    b76d635d7a4661eca90a7d0b5c8f72aaa96f5ffb8c616da96a527444af748ea7

    SHA512

    eba5387c3e5fc2ab7dafe883078215eff55d5ba5b340ed2662ac969ff7e98a6014e5e435708c037875fa132fd1cdc3df01b6eaa6a7b2b55df6e269a21abbbcca

  • C:\Program Files\Java\jdk-1.8\bin\jhat.exe

    Filesize

    581KB

    MD5

    07b961e730cdb432a29c0ecf5b79bdcc

    SHA1

    982b92218701ea98b01d4f08ed4e01cdaae70a2c

    SHA256

    de8df1545fd7dcb6d0ebfe6810dbde34cfb9f6c1e09c28f586119aca9ab87c52

    SHA512

    93b4d1a0f3aa5232e10f423392d4232d1dd39c0e28b5620c4a658312dc293c1170d8851a58cc0ded35175f81fc31323c1d44349fcdb4818c3ac1269a5b9b1159

  • C:\Program Files\Java\jdk-1.8\bin\jinfo.exe

    Filesize

    581KB

    MD5

    e6d645e682f912d890ecfefe8f409180

    SHA1

    ce2da65a319454dc382712179ce756557c96ff19

    SHA256

    2a46d6b862b9b6acc739431a473eb034ccdd3e64708520eccb36910c389e3aa0

    SHA512

    777c9878034ae611e1b5df85d5e9d8613d1979852c3a7623cf914dd4ec27fad52505a68d6b4f7b6e90010639f84ca56e0fe793ddcb00e8d483da635f757cc862

  • C:\Program Files\Java\jdk-1.8\bin\jjs.exe

    Filesize

    581KB

    MD5

    668c61f8699992c9b86735ecbaea3b63

    SHA1

    61d38bc33171ce2f9ab8ef247f6e834ef9421f77

    SHA256

    5ff94ce2e2ba38b29c0b3e66bb04b5b531256e1df62da3257a14c5e51f932a57

    SHA512

    64379aa327dd1cfc68a9be814c2f2d8f0d4adfc978c7eaa92399cf738368cdf0e6fcadb2247d7c44d4fb4c60b0d9c1840256d09774c1e9c8994032c30165b0b7

  • C:\Program Files\Java\jdk-1.8\bin\jmap.exe

    Filesize

    581KB

    MD5

    b7b50ceef2ab92464a3f43d7d496f5c1

    SHA1

    34ab30e42ea098e67abbca4a8a8590ced0eafc46

    SHA256

    fa1766e75af129fe966ef77e375265f28c44fce2aa23613ab93d2b2e65177466

    SHA512

    5cbe6bbb5e7ed96bd9f29b42a5f2ceaf4198fb6ee9b6172074e4d896c50c104575e8f382bdddcfb645323f3449b87e262df20226fdbe317a3b51c43e8786441d

  • C:\Program Files\Java\jdk-1.8\bin\jps.exe

    Filesize

    581KB

    MD5

    317b5306752402421847d87bff39e4df

    SHA1

    94ab4385db48dd3189cdab5f248db4abad00e73d

    SHA256

    4150b89938976584c7c95215184598795a20143eb71098dc583514686dc2f0ec

    SHA512

    4d8670467b06d4f78795dc24740b03a324a562469a7319cb4d8e8ecbe5350d1cea48c074d2543d70e173ef836c577b7640937ff04ea487ec6cc23b5925583b17

  • C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe

    Filesize

    581KB

    MD5

    995a02b1ce49fb6e9f92fe1c64a4c71a

    SHA1

    aaa32fc33aac190b9e8b2d85ccbd0abd7a607c12

    SHA256

    ff0fc14c169d6cbb8cdd0823f4efafb6939d8ddbbdf4e98502d285a11400a966

    SHA512

    f3f23efd80f275d8c4c94499dd6a8a5d7feddadcb432aa0803211c1e9aead188f3dcf48070e3300f443528abae493cbbf2236a69c89dca419607c906b024eb7d

  • C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe

    Filesize

    581KB

    MD5

    9353c5f4f90193b9c23b2d7c62a5072b

    SHA1

    890be59f0b0708ba0b60eb6797ffc6ba53037a3a

    SHA256

    1d459ef9a7b7669fa6ab532358bd7362aaecc912f20ec8c3512a4c5313c9e794

    SHA512

    f06cc300e2efa0f8277d23a1620be08e1b3356f0bf9b937e8a1c385b84a9f9ba174835c8df7689d1e0578822ff51f38b3b4669b5a6bd9b7a3aeca0cb3f0dfcab

  • C:\Program Files\Java\jdk-1.8\bin\jstack.exe

    Filesize

    581KB

    MD5

    e1b572159d008c8fc5c5f6f3f990d981

    SHA1

    39d67a407e8965ad2c5614d58a7bc4c087705ebc

    SHA256

    56a2575c21591e61c9b997331a583db85fc37ca20fdfed2e75f041e4e4479f5b

    SHA512

    b9a8305499eb399e41d385b710ab7884320aac875e334093680bce0d640e10444564183a521e19e26059d9c0d63eba68024a1201eededd85f2bd8ba2b813a42c

  • C:\Program Files\Java\jdk-1.8\bin\jstat.exe

    Filesize

    581KB

    MD5

    86817cadb5d6c44d75703b6188ac4839

    SHA1

    a0c9b885dbbac70399a84262383b84df3d1103a2

    SHA256

    debf3f6bead5cebe7be0bce9b83a032e74505296658567a4d41de884afb20284

    SHA512

    6e2b013d629657a6de3599b125ac63d424ffa714bef9c85cee3d90d6b6c3f66d53cca64e4a20b1a442eae8e1b856de31feb2596b2ee5f4e2b27aa13b4f1e708a

  • C:\Program Files\Java\jdk-1.8\bin\jstatd.exe

    Filesize

    581KB

    MD5

    1a587818ced847882c3b77328f0cfb65

    SHA1

    709c2559c7c964bbec3aa37ed3fcb608d51bd8b1

    SHA256

    48e07405e5f349b72463591c0f5ac8980f674895cdebae4901e077aba31e0c30

    SHA512

    278084b973ff577b006c2f56ca0de0da2cd6d1742f0bf90553aadad0be7663ba39fbe28ceb87fc040cdb2147e3a0e5ea076bc4ff1b357e7a26d7653bfa38f1c6

  • C:\Program Files\Java\jdk-1.8\bin\keytool.exe

    Filesize

    581KB

    MD5

    2007c7c670543e3dd20153c4a5cc5bc6

    SHA1

    42b2b3ea03b84d203939a7a0ecd34c142a829ce6

    SHA256

    02aacd631fb97fe89d1e77a832445a3ed95bac16da53ac716e0d381deff9f3e3

    SHA512

    4c6cd2c6bcbe915a38f4ae5e326c882144ee70970e61fbbd95b8c6ee8bdf0da9c92db8894665ed368c5b9adb46dab259f5592569386c240ee635e3842e4a89b2

  • C:\Program Files\Java\jdk-1.8\bin\kinit.exe

    Filesize

    581KB

    MD5

    58d816a994258deee4cfcb1d76dcd07a

    SHA1

    3c7d80a59c126c6b35a91807fe15852926d4ee44

    SHA256

    da09e57ee0d31fe43552c697f801eb6023bb03b6c02b6464a6253a20a6f7e764

    SHA512

    86c3bb3481aa291e497b6bbf186e2afc10f9eae1ad330ea1f1d27bc228f3b19bd014280aa8e43a1d5e939bc1159ee380a3a142bec932871afb9344db9dec32b7

  • C:\Program Files\Java\jdk-1.8\bin\klist.exe

    Filesize

    581KB

    MD5

    97fd958316b259fe4710fe95316ac6ca

    SHA1

    615916b91c9f560e1655fe6c2207816ce7636032

    SHA256

    2f9df2b452dbbc9a41ac441199e2a921da261a7e94ba574149a3db992e5ce036

    SHA512

    16ef4112f5e9474ad4779fd745f44aee83f00eee68441c1b7b5128c7d49fe69b5d26accc3b8377270ab273aad5a46f3a2dcf48fb821ba60b58d6b025e05a620c

  • C:\Program Files\Java\jdk-1.8\bin\ktab.exe

    Filesize

    581KB

    MD5

    6639d28dcf5ab3f6f71fb2e6e8dcb264

    SHA1

    acebbf4cf09369d048c6015895547fcf69f38050

    SHA256

    9201858828278f1dc3acd66644ef7db62490925ed41aac943d2a9bd26bc7ee70

    SHA512

    307a6e7b0bfbde05beff5ac2346bf503bb9f15984f45433710cec1f292c977fb8d759b603c1ac1448f5ddf39d988e0b545fe37f8870e9a577b27ddb12ca8135f

  • C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe

    Filesize

    581KB

    MD5

    8799ead92063b76eda3e96a97986b2b5

    SHA1

    07c35c2caf8b123931ce93d6ae092602aff24ec2

    SHA256

    d465b46c36cf4dad4c977dcd01f272d538d573fe583e713135ffe6fc8d2dcee6

    SHA512

    fd0db27f4f7b45f21e2c24b70074517a687a0a78f8f6c8fb147579434b03b3a76067d9bdebc19a6db2fa5cf92110424e9eed3b221bd5ad1be089c2f7b1e42771

  • C:\Program Files\Java\jdk-1.8\bin\orbd.exe

    Filesize

    581KB

    MD5

    b000f8b91a784cce0cc6cf2bfb938c8f

    SHA1

    4fe20866125e23302ae3c372f41575f2562f04fa

    SHA256

    fd6654d9a62772e53f3ca10321a3e0ca49931091cb1264002eaf6d7b3e5549b3

    SHA512

    b8b5c14190e2f4f88d1258622daac16dffc905a5827e4022149c27160380bfcede300f49df2e8d8f8b66f3450f64cca2cebec1efcf91ca5a0a90f17a038a3e88

  • C:\Program Files\Java\jdk-1.8\bin\pack200.exe

    Filesize

    581KB

    MD5

    a5c137cb8c56e59805ab64df2cc1746e

    SHA1

    e21910c32fe5a694c83da219107645511b71821a

    SHA256

    45c56116301046976ec21ef266d091f5fa871a6ec51dedf2cf6c29013a4e5edd

    SHA512

    f53a758847a6e648856d1757162df0b06b47293a731380c9d442e9006c9e44646ca79af6451116d9062f9048848686488bff58d8aa92adbfb9d40e87da10cfbe

  • C:\Program Files\Java\jdk-1.8\bin\policytool.exe

    Filesize

    581KB

    MD5

    ae32cbf4410023f855100ca9b85ba9c3

    SHA1

    518d5ee4a4320015b9c8c75427897f8fb374f8c9

    SHA256

    3bd2ec4e2ca676157bd8355f9b1a214ea6ca0dc981cf3a6f267fe62fe6345a9d

    SHA512

    0104ec2893260d66fb5837c77ece076c9e9b8d8ab5ae76a923493c105b6243c9e59cc4ba7c8745b60b3944806293748ed5034df6da3215fefe0fef2a8a987f23

  • C:\Program Files\Java\jdk-1.8\bin\rmic.exe

    Filesize

    581KB

    MD5

    2fc699558824e924aef0d9111be22856

    SHA1

    130fe9344732460c5c51958cffb8287d018a0ff7

    SHA256

    5dcae8bff0088bb9d8eacf027942bd4b57bef2e469ab4d44be8d7aa0fa9cdf93

    SHA512

    bd82487a4a208fc2af2f57dc68bb256ec58d035b03537ffdc5a36c02e4795d1ada746beadea544138f110bb8912c14aa5c19a9b8f8c6b9639527382e744b5d69

  • C:\Program Files\dotnet\dotnet.exe

    Filesize

    701KB

    MD5

    a99b84c4d63eace7c3cade419c0f3860

    SHA1

    df29f6f77fb8137007d104a9b39f44cdecda34e7

    SHA256

    c0b097fa104db408827edfcb9190281ee42eea149e9f2ca9b95b936768023413

    SHA512

    6f88275a75be66ca48e2901b175f32876db7e706281fd8ac603877142a65e766f97efec622f340422dd22c08064a4daf62689dc86a4647718a06093d77e2facc

  • C:\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe

    Filesize

    659KB

    MD5

    33b5470043999bf316862b4a04904f90

    SHA1

    d71f8875418837c5e86846b9a462e45c4caf4bf6

    SHA256

    13d8369ed5fd7af25e488f78ff70eb2eb0f3da64f622e47d2d192de6657db52b

    SHA512

    2a457f014710fe3fc2622133ebb89791cd8fed759147c79053385db7b397b20759ba7e658a5ef1dfbeef344f2079693d03c8d9610c17fdd129ff1044a0e82614

  • C:\Windows\System32\alg.exe

    Filesize

    661KB

    MD5

    bd0dd2f24b11e6e1dd82dd31cab56c08

    SHA1

    310b64070a412b4e9e9b78e3300cb2b8ba76ec9e

    SHA256

    d2b7e6ff4e9f33eca783724f9c7815917fb4db244a2a94b2e8eb0eda3ea82b18

    SHA512

    f2d081565f5e1e1597785009666f967fa36df9dc05d16b6de1c2e60bb4930a99f92812177f8fff908de3a4465da6410b7f907f2ba18d0cf89d39414ce6a799e0

  • C:\Windows\system32\AppVClient.exe

    Filesize

    1.3MB

    MD5

    e9c8a303e8dad4f4a071c1be6bf4f23f

    SHA1

    8cb935c25edb39babe9e9ce5639db3ffe6ce37bb

    SHA256

    e34e88930ee41576ab5fe6778cb7458dcd352a81ff4a17c3970885ad554dc892

    SHA512

    47d9085ab8fc371fe81300eefd93afd76776b34653ac8d9606467a4d13ae1cf7c9b391da66b318b8cdc6fc96522c7768ea8d8a340e49898fa1d9949254bbc628

  • memory/644-86-0x0000000140000000-0x00000001400CF000-memory.dmp

    Filesize

    828KB

  • memory/644-84-0x00000000007F0000-0x0000000000850000-memory.dmp

    Filesize

    384KB

  • memory/644-79-0x00000000007F0000-0x0000000000850000-memory.dmp

    Filesize

    384KB

  • memory/644-251-0x0000000140000000-0x00000001400CF000-memory.dmp

    Filesize

    828KB

  • memory/1416-74-0x0000000000CE0000-0x0000000000D40000-memory.dmp

    Filesize

    384KB

  • memory/1416-68-0x0000000000CE0000-0x0000000000D40000-memory.dmp

    Filesize

    384KB

  • memory/1416-73-0x0000000140000000-0x00000001400CF000-memory.dmp

    Filesize

    828KB

  • memory/1416-76-0x0000000140000000-0x00000001400CF000-memory.dmp

    Filesize

    828KB

  • memory/1416-62-0x0000000000CE0000-0x0000000000D40000-memory.dmp

    Filesize

    384KB

  • memory/2300-72-0x0000000140000000-0x000000014022B000-memory.dmp

    Filesize

    2.2MB

  • memory/2300-52-0x00000000001A0000-0x0000000000200000-memory.dmp

    Filesize

    384KB

  • memory/2300-58-0x00000000001A0000-0x0000000000200000-memory.dmp

    Filesize

    384KB

  • memory/2300-250-0x0000000140000000-0x000000014022B000-memory.dmp

    Filesize

    2.2MB

  • memory/2792-34-0x0000000000680000-0x00000000006E0000-memory.dmp

    Filesize

    384KB

  • memory/2792-33-0x0000000140000000-0x00000001400A9000-memory.dmp

    Filesize

    676KB

  • memory/2792-248-0x0000000140000000-0x00000001400A9000-memory.dmp

    Filesize

    676KB

  • memory/2792-25-0x0000000000680000-0x00000000006E0000-memory.dmp

    Filesize

    384KB

  • memory/4316-249-0x0000000140000000-0x000000014024B000-memory.dmp

    Filesize

    2.3MB

  • memory/4316-41-0x0000000000510000-0x0000000000570000-memory.dmp

    Filesize

    384KB

  • memory/4316-49-0x0000000140000000-0x000000014024B000-memory.dmp

    Filesize

    2.3MB

  • memory/4316-47-0x0000000000510000-0x0000000000570000-memory.dmp

    Filesize

    384KB

  • memory/4520-245-0x0000000140000000-0x00000001400AA000-memory.dmp

    Filesize

    680KB

  • memory/4520-13-0x0000000000560000-0x00000000005C0000-memory.dmp

    Filesize

    384KB

  • memory/4520-19-0x0000000000560000-0x00000000005C0000-memory.dmp

    Filesize

    384KB

  • memory/4520-12-0x0000000140000000-0x00000001400AA000-memory.dmp

    Filesize

    680KB

  • memory/4572-38-0x0000000000400000-0x00000000004B0000-memory.dmp

    Filesize

    704KB

  • memory/4572-0-0x0000000000400000-0x00000000004B0000-memory.dmp

    Filesize

    704KB

  • memory/4572-8-0x0000000002070000-0x00000000020D7000-memory.dmp

    Filesize

    412KB

  • memory/4572-2-0x0000000002070000-0x00000000020D7000-memory.dmp

    Filesize

    412KB