Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/05/2024, 07:10

General

  • Target

    2024-05-29_31adead6cc21e3236f333441d30beea2_bkransomware.exe

  • Size

    1017KB

  • MD5

    31adead6cc21e3236f333441d30beea2

  • SHA1

    e20811627f77200cfc16b43025c6e21af2435aee

  • SHA256

    8df5ecfe5464d5d4e83f5eab54ea600648edf7548a31f03238ea72533b95a2aa

  • SHA512

    8bc34209003958a3261d5b732ba74a2e251b50089421288e1ef3fc0cd3c2480bde09b7701a6ecd95918aa629b3be43edc728649527f97302d4d70eac487a56b7

  • SSDEEP

    24576:I2lm54RdFbmXHHYHKEGGyPIruSv9yWzp/u:I2M54RdRmX4HRGGpuSlyWz

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 6 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Drops file in System32 directory 9 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 5 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-29_31adead6cc21e3236f333441d30beea2_bkransomware.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-29_31adead6cc21e3236f333441d30beea2_bkransomware.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:3540
  • C:\Windows\System32\alg.exe
    C:\Windows\System32\alg.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious use of AdjustPrivilegeToken
    PID:860
  • C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1148
  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
    "C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:1104
  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:2096
  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"
    1⤵
    • Executes dropped EXE
    PID:2472
  • \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
    "c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
    1⤵
    • Executes dropped EXE
    PID:4488

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe

    Filesize

    2.1MB

    MD5

    9e880569423cf69c0c59537e9586b655

    SHA1

    69dc10a79099874ea13afb6ddab092b1cf0945a7

    SHA256

    d2a06fbb8e4600a7a5c6dfd68297c4bab8b966f96b0e433bb905c528b1fad4d1

    SHA512

    7e20fdc940b07508793b6f97f0b90170da2248a1e8da2a4d13ec232786e1e6274ec5179ea18e6456acbe6994542fd8e47c3debdd9251d5ba170e76e1f945f7b1

  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

    Filesize

    797KB

    MD5

    7967f14c73a47f5cc54918d39ad3b872

    SHA1

    28eea1561f469bf3015a648746aaa94763570064

    SHA256

    1544c8f30359d84038713215e517514f1b2d8a1ec30c98e1ff2f7fab309e4c90

    SHA512

    0fc7e9b507872959b9832fbd87c1c50543fd4ddb91f8e23c8fe8b34b22cc2ca82b1e635c42bdc9650b84a43cc71031eb6e645544284f9bd69fd37c80e876f670

  • C:\Program Files\7-Zip\7z.exe

    Filesize

    1.1MB

    MD5

    3edf0fce6fe28e2cada294f55225edbf

    SHA1

    bf10442865fc29820fd517762527e85b21a5df3d

    SHA256

    7415e296c49411427bf1a83ef33cec17fd1d18f3b63383f866bed678c01c8afe

    SHA512

    5f7a6b42b8adcff4c91d7ecfff1eea87ba990d86c40b9e5631465531853e5ea670bcc8f73996c5c8014bd083145286eb679dcd300927c25d3d30798be8ebd607

  • C:\Program Files\7-Zip\7zFM.exe

    Filesize

    1.5MB

    MD5

    59d4af16bfdcdb5ad8ada53f89c35a15

    SHA1

    0218b7934e96ae41b3ce1d926d046e7b382b26f5

    SHA256

    d43de8a0749912d0edccc7aa109ae1e56baa540c52d914c0f3fa67359d9b97cc

    SHA512

    c9b4f9b0d63d1e36a089ce5034160a11ea53285aa852a52c90c13d00eeb6e493e8322aa2682258fae9d08731422a75ac89798d19d7a469b4e316aa4309386461

  • C:\Program Files\7-Zip\7zG.exe

    Filesize

    1.2MB

    MD5

    83c301cb48537d271501939fc79b38a9

    SHA1

    b74c6934f2ef5f083fd0be94dd2723e3a04a2e5b

    SHA256

    fe90bc71cc88aeec6ca7b513bceaa3d0cc517750b0e247d58f0f2cbdac5ec14f

    SHA512

    44ea367f0aee19aa1c5c6afac3b9e9cc909047a2e3f8d956a86523ecab13f4c11dcfe38b036d8cd6b333cce73c4357085fd29c9d1a4b464d7736cc1f38e873a3

  • C:\Program Files\7-Zip\Uninstall.exe

    Filesize

    582KB

    MD5

    e050fee9217471fc2768df20992d22a9

    SHA1

    6f3a7420781c54d46fe1cdc1a85a682a3e1f33cc

    SHA256

    8f1924d2988d09efbf19797fa5b56426356aab8b5a89456e6f914a4c4711b3aa

    SHA512

    8735599d61355aa0b4cfed1eafa03326f22e10231dc04b74ecb489b9500a8ba2007c1ee5093b46c9e65b4da7cc8ccf8d16f433c530a8b5638988d52e21fae157

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe

    Filesize

    840KB

    MD5

    155bd92a722547bf461ff1891dfaafeb

    SHA1

    c60689dac88f85953f1d860be0f56e3502dba7a0

    SHA256

    512c2f14d0dd86be8af2f10ca78e8e7bf2f6f3e182112461088da1707d516a72

    SHA512

    4e1ed95aca65075ee278f1ce1f389782fb46c8c91fc26ea452b15c5aa73d9cdd3dc7a24811577550a87eec2b3a73bde5df839ad79220e9a7070873cdece1b541

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe

    Filesize

    4.6MB

    MD5

    1b2629ee6ca17a77f7c0fb0715374375

    SHA1

    a28ac9b251db0fd9e1e0eaaf12c170c79f9f3848

    SHA256

    46bed2455d17f77307f5575e4d111e70b24137e0fe791a69ea57572ecb721011

    SHA512

    fc7437c7f78b131bee6a92d760f43b5f8b25a39088ea7ae4b9a9a0d512f43bbd56f58c332bbdb8af29a6cdf416f2335142bde66a9fbc2c65e199783dcccc98d8

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe

    Filesize

    910KB

    MD5

    2c8dacf2c153d88bf8998dc11ec4d48c

    SHA1

    db20c5623e08c9de0c778359dcdfd47fe36d071b

    SHA256

    69a84e6c20df6a48fd8f7ef2855e21d8f599765a8478ed37670db6a2ed18da91

    SHA512

    a6bbe153363eca6861528465758c9bb29ebae7bc5165e2366ee9e27a4e6f8cc90e452ad1ee44efa11a9499e1c77d0f0e99b6e8ff243d074d5f46ec9292e0f6ad

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe

    Filesize

    24.0MB

    MD5

    0483aeb745089e88e6cb0bce53ab1ee5

    SHA1

    58a38e30b1cbf48d028d57d1e61360403571bab5

    SHA256

    df73c062facfec7ffa406ba0ce4428241fb57cbb4f436feeb493adf3212685b4

    SHA512

    6bc7bc948b806bf48f2d18a3bbd946ad47a5bde56b56838c4955466b3dacecfe947a206766e52bae9a5307c4d3dbb7037f616aac17b6bcb463d868ced6a7f5ec

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe

    Filesize

    2.7MB

    MD5

    5c720443b7810fd1f17938713643b97b

    SHA1

    76a7a0546deaad77d431557c9217455431905a95

    SHA256

    f1c5dd7020da3389f4781f7f9e7f3a99b4fbdee0543679a16e8cd87e8af1e805

    SHA512

    48dfffff06d3fbc58574e5828c083bb9b640eda84c0cdc14e9c10bd76c9bec898d1859c1ba8d0262a7781412d36345afe8c0c29af7e83a410c1034a675e37a0f

  • C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE

    Filesize

    1.1MB

    MD5

    b102c2adfa21ae3452ec6ba54dd19904

    SHA1

    3e4c9391be943b75526d605ce2d8d7c0afdd6aed

    SHA256

    02e883047075bb551be3fc81d042f74cddd8be777f90b948b08d358fa120625e

    SHA512

    381fe8debd1476244efbdc17377ceb4f94d64029585e639274a281acdbf23626b08a2e75259926948d0fa881e1b54a31199579b25c47c7f793af38d45035c665

  • C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE

    Filesize

    805KB

    MD5

    4041c2680392c46d0ece6740b210ad7a

    SHA1

    58a62b9f61c2d3160e12171d538bc42c4aa2ee41

    SHA256

    ceb4702d94d21ec4e4ec5324009efb4480f3efa62824023efd667d345e0405d4

    SHA512

    39e0633521f3b12d5d1a1153b6909a946f0aed363935455518ca72577829cd90cc45656e2d3644d70578646ff7c94b5140162bcfcd334d5b1d8c1565dba83a4b

  • C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe

    Filesize

    656KB

    MD5

    d2d51297750f9fe5d15579e93dbd1e1e

    SHA1

    db56b6ece4689725f7ba35a0039869470b0252ee

    SHA256

    efa7d3940982110be9725078c06af6f8c75cdb2c1961d71ea50dfce18ea90884

    SHA512

    9fc267cf72cb8108b4edd22aed88122a65abf37c2068eaf9eeb68989fc72a4013739eb57449fa1630ede47875e91c3f49f35e649227275e2f718ee0963270a2d

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\chrmstp.exe

    Filesize

    5.4MB

    MD5

    7e581c35d4ba2541fe121c7c5feafdf9

    SHA1

    8cff270904f94e739b636bf3111c0d3fcc21e83b

    SHA256

    5f8f126f068d771b0f208f0ea1ff74c8ecb90366ff47fdb8bd602c8559194de2

    SHA512

    b0b9b750ac1bce52ebd0f9329ab9706044a45f7204a616a09209b5702277839ef3834ede992242493fee56949ae6eac660002795f565bc5caa4867c0e379fef8

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe

    Filesize

    5.4MB

    MD5

    bfff38407818091b4655fa970a3ec5f1

    SHA1

    6b61dc56f06e19a3e3cc6b25a3b98199d61f9900

    SHA256

    9172681ed778104a7ffe551f337945096501a666742dfc788ff75520d9edce6b

    SHA512

    10d6573c0356bce5cf8ee4527ff3f8aa9d0c85c6057d98c28efb9a01b1e43be16c8d17aaa3e6a766f58a2f5f881cf15c14a6bbc97db36f227013da0d977788c0

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\chrome_pwa_launcher.exe

    Filesize

    2.0MB

    MD5

    1a760c8016a606e7a8607afb86d4398b

    SHA1

    1d9fd505070c1764d8cdb3530b5ca0ecf7cbd796

    SHA256

    b450dbfa8a4f60b7effbe3ea6c32f198e66eb62a74c1d075da6b2a8b6885e370

    SHA512

    4269867709040ebaa1dc593646cc3c2e2c9e62412e64e846cc85d40d1403d6411b36be895a51577ca2d61b487254ef70e963581768204e8589a6e56e5c555adc

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

    Filesize

    2.2MB

    MD5

    d0fb24f5dfec2ccc1499754cac57dae4

    SHA1

    6c2e6cf06df051fb63a05710a72d5e004b15de58

    SHA256

    ad7cd66d6d06a1575f355c1afe091d2fece95ff8caab1c5c9af0c40c30849f4f

    SHA512

    4540fa95e8ae97c7d02c69881789be474892b31ff90a9690b09474375a9b6a9a27da17a8c4b3fed3dc062682b0fcfc47ddc9280b084f5ccdd1d45de0fd9d3a98

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\notification_helper.exe

    Filesize

    1.8MB

    MD5

    34873c35f433d285e80080217e463d91

    SHA1

    1ca7d7a5896e8d632f84a16f6d47ff4da39560d4

    SHA256

    6b21d760d0f95dff4566455bed4ec74d9ca2956f342bb9b606706d7b44793c4f

    SHA512

    1dca9eb0daba301fb3e7118aabb04e81226e1e0c171ad8a81d44de62ef368ba44d638acebb4931f36a6152cd71d1e69beb3bb74d3fa51b0a4fe8fd14710e1775

  • C:\Program Files\Google\Chrome\Application\chrome_proxy.exe

    Filesize

    1.7MB

    MD5

    b26d73db7e3b90d6fdc54253f4644a5b

    SHA1

    fd2178a80d271400d8320af34bd7a97c120c197d

    SHA256

    88c0f433428c17a4842a0a7c52d818e4cb46a4b516536c7d4ec0c80ddef7740d

    SHA512

    a120f7f5044a35d109a32c4ff17f9afcad0dd35ae3563425099b2e62be14eb569df7b1c4ac389e6bf24d75767a9ab0873affb9a137a1682d5214d5197805dcd1

  • C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe

    Filesize

    581KB

    MD5

    4c7548614a8eaeba0dc06e8be06574a9

    SHA1

    cd8e6ee0a187ba1c18525995b21a55f6a1179ea3

    SHA256

    b5b81ff92b1fb0f61a4438cbf3c10f124476b0331174c91f27067a40fb3c5b6c

    SHA512

    bceb331c5c2aa597fe11b1fc8abaf2d1e38df357c0fa49f0e586ac7defe22af8755a8d8d263ef211034991bfa034448e427f9f19b8f648e8115c25f5e24844dc

  • C:\Program Files\Java\jdk-1.8\bin\extcheck.exe

    Filesize

    581KB

    MD5

    d9050c59d3b71d01524a5a21e29d3d5d

    SHA1

    723ca0b16f46f313693bf4d878c2e53af35872fd

    SHA256

    a60c0bc0e18a57bc0855e55f452f84cd0297af6d53b62a7622029a015681ff79

    SHA512

    10a123c3feae1bec98e940043ba26b6a7477067bbee9424f93d4efd76afebea8535fe3b18be2eedf6af8372e1cc899368d5127879058e9178fabd6be982fee14

  • C:\Program Files\Java\jdk-1.8\bin\idlj.exe

    Filesize

    581KB

    MD5

    5e6d4d4e39fb48f3062dcea92e23d0bb

    SHA1

    ea85541eb5be4e3f6c320b9d3e6a806f02473995

    SHA256

    f2a9ec8a449ee5cf4e4f6d36c1323ac6c9666793642f050b95843d814e8e0493

    SHA512

    a45ec1dd5a0c00aca9c44ae57b4d8c655beefc83ee573c240331965d143e92cb0ee933b36ae205a1a9af12fd923224284f373c7ae63d2a1ae555c418f1ed4e29

  • C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe

    Filesize

    601KB

    MD5

    11d5313629abe2cf5f3c32c4a6bf3497

    SHA1

    cb134dcbe475010b3dcf8f42be209d8d2a6fde47

    SHA256

    833e0b2e843d144cc16ca4d937b761a9d369a24f570a907aac88966bc0601250

    SHA512

    fa78e7d51246cb93b120f618b823672e5949f3a2b330129242e4880558141c60c20189ec0b4f4244cc5e7659ae9bdac7132bb9ac869037b30b989e04e2d8e131

  • C:\Program Files\Java\jdk-1.8\bin\jar.exe

    Filesize

    581KB

    MD5

    a17ebb8ae15dd9766eebd3e5f0d9067d

    SHA1

    6a7973ee991485b2f0cfb9d3926e878d17d3b647

    SHA256

    6746f05efaa8bd8009d4da884113901e96e7d34b09834a494713060b6e71e9b5

    SHA512

    b66d08ca6ded64972b97df538cdb0b1f6e8e5d6e823ade8047aaaabd602184f6e3f9c1a132582445c2d17b9e37f38b8534f637a83db4bbfeb8f9b67bce55cb2a

  • C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe

    Filesize

    581KB

    MD5

    5248a76e05949b454204604764ec656d

    SHA1

    a4201ac6bccdeea421fca3a005e919e5ea7d5a02

    SHA256

    c6dba9b94ba7d6208f10304b25d5448f59a1d0aecd7e280106ff3b18edba1f24

    SHA512

    7f72264d4b93d6db9c8ff2900fe846c83d289771a0fb2b2fa4fe0415295cd7095353720068f6dcf67e50f15051e450699c599c9775a00f8b579abba673945f76

  • C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe

    Filesize

    581KB

    MD5

    c34c448d6dd3e9acafb49bf81664b07a

    SHA1

    ffb4373bd34902df797b28ac73daf1d6d355d131

    SHA256

    61d140f9025f3fedcc1b6d9710774b49f6251be1d941c338ca2c46ac9edfe329

    SHA512

    7bb1655dcd9b7e97c8ab14a314dee1a98f2d481454bd6af2777b3e066c4c222b9dd2b83280a99bbe7141180c520a13eef131bb3aa4cc61706ea32eb9ce30de6c

  • C:\Program Files\Java\jdk-1.8\bin\java.exe

    Filesize

    841KB

    MD5

    66596d40d14e215ca5074aeab58f0ede

    SHA1

    5ae2bb1fe33493ecc758f71aae579a86df3c28c5

    SHA256

    b84411dd5de8f7a8b82d3a2e5fe19fc98b1373d05e0eb7383f20a654e4ad1eb5

    SHA512

    a446beb8f74361b2d40086349787aa7136c0f9e81e08ca5fab64ff39cbeb386e8fba4b1e6f48debd3ccb4c9fe862610e088c812137122b14ec5a4b1f71b551d7

  • C:\Program Files\Java\jdk-1.8\bin\javac.exe

    Filesize

    581KB

    MD5

    a613939d98d13728666367381fc515fc

    SHA1

    4b2a719300b0efa476d7fc35c7062bcb1d785730

    SHA256

    8d579491be8d35583943b836e75efa9bacb2d917f5cdfcf0fd7e7bf08f519e7a

    SHA512

    d8645fe132cc158b30571f7e77271a75e19957bb2d5c971d80254dac992f37dc2de10b3b25f2557f02586926a8bae36b1dc1d85b034c4f16e2c61c16b4f58e7d

  • C:\Program Files\Java\jdk-1.8\bin\javadoc.exe

    Filesize

    581KB

    MD5

    7cf352a143f51fba33fff38143213bcb

    SHA1

    b37006f7051fd9e642e4fab4be7709502acff3ed

    SHA256

    2f02c6c5655fa7541619268c0efced871423f56c67586379d72872ba00158bb7

    SHA512

    e32ea0d427b14a2fb1729ab590680924735c04e22b63e203cd8b1b584eebcf181670f03ffe9b8602e5b74c8fa6f3b28b59be061e1b747a5a643b9a011e840a6c

  • C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe

    Filesize

    717KB

    MD5

    7e231eac0ece119e48c85c7b4b4e1fa1

    SHA1

    f0dcda5e9c1ad6417b79e7d4821b6c922eff237a

    SHA256

    7d8944b26ead7023a1447118cc1c061b9542afd4841d5b1b742c3a8d26f773b2

    SHA512

    819a7dad48a957d2842dfd9e3f5ddc4fcbaec6bc1fb596c8babb106a1b22bd3242a21327d1c71fd084addd28ecfe85b1f69d5a94da17df42fe4624792e7b42c4

  • C:\Program Files\Java\jdk-1.8\bin\javah.exe

    Filesize

    581KB

    MD5

    cab59282fc029cde28fe73710dd6a055

    SHA1

    68282f5504022e44d23f064830eb4f6b4a6fa3c8

    SHA256

    5e8cdbf7d7c28c706c39d794eef1e64ba1581c9830f5d09bd14103764aea4688

    SHA512

    3be988f0605405374cc727548602511f862fe654c0d9dbc30a6ea0d21268fd80cfb104347da28df17212e4c48c0c7a465126cb10f396bfd577e328eb1bd55827

  • C:\Program Files\Java\jdk-1.8\bin\javap.exe

    Filesize

    581KB

    MD5

    b0931dcdc0c8bceb4b2f33ad30aad1a3

    SHA1

    ef6351fbed2c971114da9ae113e461efb9a5fed3

    SHA256

    cea7bdd00085bf0520d2f10855f51dbb654849f0c121a7cbe20723f575a7fda7

    SHA512

    b6f861a512f3b938ed0be7d4367cf362a8b90e57c8a5e229087fa3e67afea741c750029720b14ce28978ded1e55e8a68c0d060df8ec9ca992681d0ff17363b22

  • C:\Program Files\Java\jdk-1.8\bin\javapackager.exe

    Filesize

    717KB

    MD5

    f7da6daee7647368ab99806603611203

    SHA1

    cf66af670c081de4108f485c2a519d3e048c8d45

    SHA256

    b680a8e5d085e2151ebfbd2b2d2a5a01930da07ea80931752960befbc077271e

    SHA512

    44d02c00bdf4a81312a49b7918e4cd6ac563bccc51e3ddcda8629b315fb8d22d1c601a0a23571c96f428274e65d020604532051d49a1d3a787b230998663496e

  • C:\Program Files\Java\jdk-1.8\bin\javaw.exe

    Filesize

    841KB

    MD5

    555c7e0edf44c1b1d4ff5b2f68d124a6

    SHA1

    715220cf26a5119d50851f410528212688b39ff6

    SHA256

    8fca71eeeecba06419c3ccc52ee510133d47aa340267b40e52da2e442d3f3cb6

    SHA512

    a8af49b5e7049e9f8c039378a7ef29a262b0c128fce33afb02e052ff06fc3b48d6a29771007c071f1890c083b3dd3e43b3089d5e1b99710a8541d6836a7d8f4c

  • C:\Program Files\Java\jdk-1.8\bin\javaws.exe

    Filesize

    1020KB

    MD5

    08e3f9c7b6249c2e8ba608ff7dec1563

    SHA1

    724123c4baa7fcc3d8c0b9d13cd1d39a077bf5c7

    SHA256

    bc30803adfcdb5e7c0a061b6ea7d4928cd0b0a1fa2467cee5fa791929ef59e40

    SHA512

    79f41b050efb1729564c003ea0db9bb3f186f4e211131d53c1b5061a0fcae3c6ec40167fecd3a2b040705632a3ab2dfd2c7fbac6294f5d759d172deb6dc6c2f1

  • C:\Program Files\Java\jdk-1.8\bin\jcmd.exe

    Filesize

    581KB

    MD5

    6bd71665de25ac92cf6d53b19a20030c

    SHA1

    2dfaf06c97837c46e67267e005db2011b9e9f739

    SHA256

    e616c37211ca7ee76c4e1739d9feb04882c9d7c6ea3b9e9bb053f42e0cbed1c0

    SHA512

    a82750f53d1af14c2dbcdc8d98852b85c9d34f179936eb57918d273b8a9ccfe9012e8a3d23487a5812d5e0fdce2bfcdd6f3637b1a6368001f5a89f52f2ac096f

  • C:\Program Files\Java\jdk-1.8\bin\jconsole.exe

    Filesize

    581KB

    MD5

    3745a7f33b165aeaa5b3c5a452ed6bdf

    SHA1

    942c80afc981514955a7b35c8390121a1a5ad156

    SHA256

    de78a267f7d41628bfd83b490574e9dd04474fa2aa19a7333ff379b7a394f825

    SHA512

    0c037bcf01ee6b2741082311e43cb7cf833b0c246c56b2f0c680399caf0a2f5020354c7d566ac175ee11e89ef0873a958840454248ac457cd3c1174507f30aaf

  • C:\Program Files\Java\jdk-1.8\bin\jdb.exe

    Filesize

    581KB

    MD5

    89006f7f1d2db3a9d86902cfa8412627

    SHA1

    a853a5ae8d41ea3adee2d3913c07dc73229693c9

    SHA256

    bb5d67d8cf62e00d23ce8787274f101ff2659085726d843e7d03abb78d030542

    SHA512

    01dd34b0accabaff3dc679b84a09f732721100dc999fc3d8223a57b77ed1b1c861bef076c13174c089a22e6d21e7eaaaa14fe814d62233f8c8b15aef9c41892c

  • C:\Program Files\Java\jdk-1.8\bin\jdeps.exe

    Filesize

    581KB

    MD5

    e95b68581cb0c9e5b1419ff66d558fe6

    SHA1

    c08509569a697903d4848257e2ea73d154a5fc89

    SHA256

    3b4f7b0194ec1559681898da25a89fd46a0cdbdf1e3f43c2ae371f1665fd1c03

    SHA512

    ae4fbeae83ceaf7242ce787c58a16259f772762faf92a9208a04df94ba2a34bb6e6da66d98f3cd0c3da3a75f89a5d01c646b7a8831912ad889420b5684af2d58

  • C:\Program Files\Java\jdk-1.8\bin\jhat.exe

    Filesize

    581KB

    MD5

    8e0825869caf1a7edcc85f901f895398

    SHA1

    049e9f14d7afc6d88c2cf68caefd38bd5f72465c

    SHA256

    bb73acb848b932286be740a2ecb9a4058c6eaee9f13b0f586cb3fa0c934cbbfb

    SHA512

    a4886f71e9c957deff228dd765af03b25e53b577526a106679eb40d7a1ea8fbde52db1f7e68ba73df24c9f4099c6a9904d6221406ab14a20b5d2a047f4c0adb1

  • C:\Program Files\Java\jdk-1.8\bin\jinfo.exe

    Filesize

    581KB

    MD5

    876a8dae16abd5d7c6918eb75d7e755d

    SHA1

    b2136d6b9a9007f413d0be1afc2794f44d16ccb8

    SHA256

    e57b1153e2b978c799fc3ecdac6849e9c9571bc8e2f71fad2045fdf9add33ae1

    SHA512

    d7b5e439196948bd59a79f182a5ceee8498b411bd71a8bfe3f860daaa84e29c5d719328d41737cae5d3f29f58d1582d75ac6cbcbac7ee820bad63e14f2357ead

  • C:\Program Files\Java\jdk-1.8\bin\jjs.exe

    Filesize

    581KB

    MD5

    0575dc567f3083a98c3469fa69668405

    SHA1

    74590b9dfca593be79c6fa7f1bbd893de0b70b53

    SHA256

    eeb16c31323fff12007c7f533525b76160181ebc4df2f29f5a4d5e9e2629f40f

    SHA512

    08270d8e20fdcf0f65fea5ceadf323c15780abb221fdfb847703d9010bab5e8a5498c42488b6c87a78e7cafd76e2c46979e92a01451a3e417d38e497ef2bbdf2

  • C:\Program Files\Java\jdk-1.8\bin\jmap.exe

    Filesize

    581KB

    MD5

    f6b0d330843cdf39be98d4857a4ef8de

    SHA1

    dc740d9636d8987630b42b6c938058d7235f24c5

    SHA256

    6959cca4cf353eb5cd921cd5964bce4083d0268f19849b8161a0d9ac7e441daa

    SHA512

    8b80d860bfedb9cd4eb600588e7480a9f69fb4a0ae581c1232ed3e2b8f51519836e509d5e5499909f5b56973b47e2c534879ea78465480e7a9d0e9b2aa2232c7

  • C:\Program Files\Java\jdk-1.8\bin\jps.exe

    Filesize

    581KB

    MD5

    4d3cd8b49fe804d8e363657f2172ff63

    SHA1

    2a08ece06f6d8d5ac10de5bf37ab72bdba769108

    SHA256

    fc903dc8095b88c04853b319497aaa8ceec7732b4c00bd97173b8f03363f5d24

    SHA512

    f3ead64f11c6c23c12cf273093b474c5e4aad94d09456f4084cdf0d9f44d403e5d5d799248237e7abb11384b8cabebb38af236a2ba4d3d3a136126e7d59fe09c

  • C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe

    Filesize

    581KB

    MD5

    06590aed165d6026edaa71ca7c643a8d

    SHA1

    598dc031222e2da1ba18926e76f5e771351bebee

    SHA256

    3c96030eb589457e7055d02cce95bdccf724e33285c821cb783321d8de19213d

    SHA512

    ee0b80d5f17782f109778185c3736662bb8450e9412c911d8a557d7cede26ef5e8b2a24c451f5f38d00949e2d72fd27c9f13d7910d34d44a16be1806c0435bd7

  • C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe

    Filesize

    581KB

    MD5

    0dca59030b7d6b82f20ebfe9620cbd88

    SHA1

    b67109412d737eaf4ed4f81004d73b0429f87838

    SHA256

    5a677000bddae96b966e4393944b67397eb3100968a0d348f7542cbb1e3a9ba2

    SHA512

    bfff2c72bb9daa3cccccd8b494e7fad31e0c360b273279ea1dcfcb506f53878464809c883532c9b50181d124e964380be652b2350f5213828d41c1c20b69ec87

  • C:\Program Files\Java\jdk-1.8\bin\jstack.exe

    Filesize

    581KB

    MD5

    bda807c62a83ec042a3056f0699747d1

    SHA1

    692580c4b7419c5fc7e4018c9142a65b7a773183

    SHA256

    942f632a465378b700baf04dafb01b1a3cef7c66622de61fa128cb8797c06010

    SHA512

    7fd6fbf1a4ed0b72d08d97c862a5889638def6ee2266f10aa01cac8a9a03bd80ab66050444a88c45e09a19fd6168e99e98a29eb2a21ecf8bb898d21d16d33a4a

  • C:\Program Files\Java\jdk-1.8\bin\jstat.exe

    Filesize

    581KB

    MD5

    eeaecd16a79489bdc852f4d97a66c83e

    SHA1

    4e57a00c56ed7654b2fe4b0ca6b446eb4eafa587

    SHA256

    fff5b7a3817fbe87e6aab7b7e61f935687280e5a8320ed61d49d0624c661aaea

    SHA512

    7adeecea93fb367ccba6dc3620ab9fe3a6d64de7cd057374f96a2123303fe6ad3514844974fc1694d72799c81a6f35a0fe6b34247b0eb98df3ae9815f29a1704

  • C:\Program Files\Java\jdk-1.8\bin\jstatd.exe

    Filesize

    581KB

    MD5

    13bcade9571f3be9675028886fa9088c

    SHA1

    c9c315099cd9b1aba8068f4bc2d9510fed8dfcc3

    SHA256

    0c5aaadd42984461569f7d56107688d89f296e5c2d91c6c6e3ba625142e89e27

    SHA512

    621cf02597687133a0f54e7adcf4e4fae15fb372a58f56dd88793a0fd585b5bf89853fd9ac565752b81aaf6c6f0c83de40f8d41e96ec0a99562d047d2fbdf523

  • C:\Program Files\Java\jdk-1.8\bin\keytool.exe

    Filesize

    581KB

    MD5

    011923a14ac3fcfd8ae9e68b0a391f11

    SHA1

    2c48b68062dff06613557264baf7e3016d4864a3

    SHA256

    0d85a300000af2a3f066cdce782c99a17f6094d47bb0cc11dac129062c506b94

    SHA512

    ecbe79fc145372c05d5456e90e11319aa80d05f071553881660ed22d2f355a8cd376136cab6216ccd642975e36871aef411de42bd4b7858d08441ca99ff0d6f1

  • C:\Program Files\Java\jdk-1.8\bin\kinit.exe

    Filesize

    581KB

    MD5

    21bbbf0b4c2b2fa120c4a7a9ef7674e9

    SHA1

    bdda3d8d55a03210f8ad643bcc87ed22f05a3782

    SHA256

    1085c1b5e38ac39c6b1e1ae62eea2f4a2ed82d79b70429d31e89960c0c0f3a4f

    SHA512

    62b09228ed93a4e6100a7462ab3f9f9bce144deb400b648872a8f01c139c3149cf3dca6002124a0e7926251be1fb0965fdb376e831182a019c1bf92781e9779d

  • C:\Program Files\Java\jdk-1.8\bin\klist.exe

    Filesize

    581KB

    MD5

    30e70dc12dfa35f8587383f6a04bd9ac

    SHA1

    f10a1284ef22fe8f07d701ecb5cba91dfd22c784

    SHA256

    072d982b5db29a1c815984a60f9940f9a1c6da04d84ebee2aad8ac65441e9a9f

    SHA512

    0b7f8164a6c2ff9e4004c7cb5488242ff790f2f5fd032b3a0b156921f00891af0be6dd17567fbb80551003ffce31dc10f0e66f79da455bb6a9b2f737759cbd9e

  • C:\Program Files\Java\jdk-1.8\bin\ktab.exe

    Filesize

    581KB

    MD5

    936d6df401827b33ea1fc281d95c8d4b

    SHA1

    a658923c0ae239e14652f2b231f09259eaef4776

    SHA256

    8f2982271c3cbb64bc3901452f8bda7d9bc8cfa4ec89a8c7b2163bfde89e1765

    SHA512

    2f986be8321dc33837bbf50f012291adf005c50296656ca085562a992390d5a5c6e1e9a929df97ed60a4517ea134dee6c79454856ece43c184110a4bfd1b24f5

  • C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe

    Filesize

    581KB

    MD5

    3fddbdcb58fc23de9bc0a373a76e85bf

    SHA1

    3c0dafb3d9f0d17e62d656f28109b704d6f699df

    SHA256

    d79a44486899c3fbb4c2a4370ff56ebaf949788a5cb5ec82eb6695ef376521d7

    SHA512

    f23daecf02538eb07adee79d65a26c57807db3df2218ba11205d700305d74cadb45a886cc2e7885807487e2f7ea705b228bfa9ba5630f5382a666b970c273839

  • C:\Program Files\Java\jdk-1.8\bin\orbd.exe

    Filesize

    581KB

    MD5

    2d1db305c17544c62571a78b9cb31556

    SHA1

    61d14fdfba5702ce7e8042ea7be2995c43e48204

    SHA256

    43d9ed3591d7be6e640058d262bb5c0a5711b7184e6ba3e041a2d937842c295e

    SHA512

    16930aac841d2d8c25d6168e7c2e4b6cdc2655eeeaf96f9bd2b21ee7ccf2e22524884b06c182aebc431490c5fd29fd6dd7c43583ce8c31e82b506347af3a4696

  • C:\Program Files\Java\jdk-1.8\bin\pack200.exe

    Filesize

    581KB

    MD5

    8d089da850f7f9b5d8251cba73d3d2df

    SHA1

    dda52e83e3abeaeafc81ca06ca7d326be2c41982

    SHA256

    1c0381bc9d730b3b0c4f01afbca0a35a0364f0761b7df3089b0655f0d348376f

    SHA512

    dc8395225a647be2589cad1b242d6571536d617c54cfd492cab9028bc7a5d1faf7f7f15d67aa1453de0ae4bdd9468e6b9587f11ef4489e08a5dacfe9414413a4

  • C:\Program Files\Java\jdk-1.8\bin\policytool.exe

    Filesize

    581KB

    MD5

    57a4bad5e198105d678075565f51b90a

    SHA1

    1b937b4cf448114e8c56aa6dd72fe9ecf89582b4

    SHA256

    2ff73eeba6c3c94ab27ec18c84df1b3e222396ff88733560c94b804fb933e37d

    SHA512

    1fc5b03a3777decba7004908a8021da9f2cf146da9ffdd2ad91e4419f9f355f415e1da0b5c111d5d51a533adc36428c7fecc52a7be1852f2a1130e3b26798ffd

  • C:\Program Files\Java\jdk-1.8\bin\rmic.exe

    Filesize

    581KB

    MD5

    a168ca699ef4278bfe6e3495eed3d7eb

    SHA1

    43a8227c58fe9142d888436ef018d56fdc5fbd25

    SHA256

    6adbe0e463648be0dea3098d12aa722ea55d1d6cfe4aaa4b0b6eaddec8e6e67f

    SHA512

    104ee4acd393ec73b7ec16d41a587fe92bcfe654de504b8ad487c6705a0ceb4987f7aca3df3632609f5a88b82eb70664978dff49662642a384c86be1d90d1c69

  • C:\Program Files\dotnet\dotnet.exe

    Filesize

    701KB

    MD5

    1989f16f3f9e6e6962f6825a4a4f7765

    SHA1

    936d90c12cb5a7bd1163bfc1954fb0b1ac2c67e3

    SHA256

    3d5195d6eb077487619c8371ec8826cc4f1821b5b672840f23a77c4f3038ec25

    SHA512

    ecd8fd3c5db56e6dd677b581e1d68b15adc7960ed2fa4f362276a0b6b52517df9edcea3093641d2935a9e72c036add6a40694ed5de544457b173da7ec8b7030f

  • C:\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe

    Filesize

    659KB

    MD5

    6babcebbb307fa1692be457c70e33755

    SHA1

    8b579f7fdff7ea3a3a7ad83f7adcd3e867b8ef11

    SHA256

    3df52b96027bcefc5c09615157c7e555769e3d98fa7260cc0e1e0248a2a6d175

    SHA512

    862ff80d8e50e2666fa6c3eced30c29c359065be21e1e632fa1d0e87ddad48c80883a71b36d99852e33d3e36a4c1c73c7809d925805bf85436f8a337d1e216c0

  • C:\Windows\System32\alg.exe

    Filesize

    661KB

    MD5

    6d7ef4c5e96ed469426c2b6d7197aaa2

    SHA1

    839c2be3a3f1bc1a986e3c83b0afc69abb253831

    SHA256

    a84ce4d13369dac6d5a0bede110d02a3002273dc9fe5c23edfd895c0c6dc73c4

    SHA512

    21a5d1adc7f83f713ceb60db28c85dce1a2d0bcc5a562434c6a8bade1e7651522381d326bb78ddcd1fd0344595a86214e3f192a17dba12acec5473a4e4a7199d

  • C:\Windows\system32\AppVClient.exe

    Filesize

    1.3MB

    MD5

    0444b3ea645bfa8fd67bad1d989ba818

    SHA1

    ee9e21ddc346ac6a2560bbd66e49c44bb0303365

    SHA256

    da9f5a1ab98d91a1b985c71c558ad425679a306b8bf832582d4d9a25fce966a7

    SHA512

    829b7e1f49b0c0271209112c0d19551973f7a69a19a1d2d8f9b5eeadc559d8095e11f497edb68c518ee4468e634855f92b5414cf30bfa3a2e84791dcae3b97aa

  • memory/860-11-0x00000000006E0000-0x0000000000740000-memory.dmp

    Filesize

    384KB

  • memory/860-246-0x0000000140000000-0x00000001400AA000-memory.dmp

    Filesize

    680KB

  • memory/860-18-0x00000000006E0000-0x0000000000740000-memory.dmp

    Filesize

    384KB

  • memory/860-17-0x0000000140000000-0x00000001400AA000-memory.dmp

    Filesize

    680KB

  • memory/860-19-0x00000000006E0000-0x0000000000740000-memory.dmp

    Filesize

    384KB

  • memory/1104-249-0x0000000140000000-0x000000014024B000-memory.dmp

    Filesize

    2.3MB

  • memory/1104-41-0x0000000000C80000-0x0000000000CE0000-memory.dmp

    Filesize

    384KB

  • memory/1104-47-0x0000000000C80000-0x0000000000CE0000-memory.dmp

    Filesize

    384KB

  • memory/1104-49-0x0000000140000000-0x000000014024B000-memory.dmp

    Filesize

    2.3MB

  • memory/1148-30-0x00000000006C0000-0x0000000000720000-memory.dmp

    Filesize

    384KB

  • memory/1148-39-0x00000000006C0000-0x0000000000720000-memory.dmp

    Filesize

    384KB

  • memory/1148-38-0x0000000140000000-0x00000001400A9000-memory.dmp

    Filesize

    676KB

  • memory/2096-60-0x0000000140000000-0x000000014022B000-memory.dmp

    Filesize

    2.2MB

  • memory/2096-61-0x00000000001A0000-0x0000000000200000-memory.dmp

    Filesize

    384KB

  • memory/2096-250-0x0000000140000000-0x000000014022B000-memory.dmp

    Filesize

    2.2MB

  • memory/2096-52-0x00000000001A0000-0x0000000000200000-memory.dmp

    Filesize

    384KB

  • memory/2472-71-0x0000000000CE0000-0x0000000000D40000-memory.dmp

    Filesize

    384KB

  • memory/2472-65-0x0000000000CE0000-0x0000000000D40000-memory.dmp

    Filesize

    384KB

  • memory/2472-64-0x0000000140000000-0x00000001400CF000-memory.dmp

    Filesize

    828KB

  • memory/2472-75-0x0000000000CE0000-0x0000000000D40000-memory.dmp

    Filesize

    384KB

  • memory/2472-77-0x0000000140000000-0x00000001400CF000-memory.dmp

    Filesize

    828KB

  • memory/3540-27-0x0000000000400000-0x0000000000506000-memory.dmp

    Filesize

    1.0MB

  • memory/3540-0-0x0000000000400000-0x0000000000506000-memory.dmp

    Filesize

    1.0MB

  • memory/3540-1-0x00000000022D0000-0x0000000002337000-memory.dmp

    Filesize

    412KB

  • memory/3540-6-0x00000000022D0000-0x0000000002337000-memory.dmp

    Filesize

    412KB

  • memory/4488-85-0x00000000007B0000-0x0000000000810000-memory.dmp

    Filesize

    384KB

  • memory/4488-79-0x00000000007B0000-0x0000000000810000-memory.dmp

    Filesize

    384KB

  • memory/4488-87-0x0000000140000000-0x00000001400CF000-memory.dmp

    Filesize

    828KB

  • memory/4488-251-0x0000000140000000-0x00000001400CF000-memory.dmp

    Filesize

    828KB