Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/06/2024, 13:36

General

  • Target

    2024-06-01_966c234fa6ac00db4784002343757c50_bkransomware.exe

  • Size

    1017KB

  • MD5

    966c234fa6ac00db4784002343757c50

  • SHA1

    f94f736f4010c46de242da559ce97d47f6c9bfe2

  • SHA256

    81ec3f3289fb1ad5d821d8bf36335ae919b70666554765620564cf5fc2c024af

  • SHA512

    9175fb7720633d50f880b256a8690ff64383378d2007c91644afd249c65b42d072dab3d7077f21066a00fbc5f49186b27531e6008450ca4c49d225f6e7fd5383

  • SSDEEP

    12288:K2lWRPhhA9PRWg9H3Dbif4YAJ93y1NrLiLtJ8nBxu7DCOzRq8DvQgqAbhI:K2lmh4RzHofe3y1sInB2COzRq8DvFqt

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 6 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Drops file in System32 directory 12 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 5 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-01_966c234fa6ac00db4784002343757c50_bkransomware.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-01_966c234fa6ac00db4784002343757c50_bkransomware.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:4572
  • C:\Windows\System32\alg.exe
    C:\Windows\System32\alg.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious use of AdjustPrivilegeToken
    PID:3040
  • C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4644
  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
    "C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:1612
  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:2000
  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"
    1⤵
    • Executes dropped EXE
    PID:5028
  • \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
    "c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
    1⤵
    • Executes dropped EXE
    PID:1596

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe

    Filesize

    2.1MB

    MD5

    f9df7c033c6da39182a4e5fd9dcabf28

    SHA1

    43b15995c9b7a3787abe59c251be68c385569f69

    SHA256

    401f47fed9359ae3544562fd95cf23e7fbd6ca81ce2d4778d2d37ee0c51dba1a

    SHA512

    e5c567fcc811318873498dc34ef0e64b1d10c318e64e89047ceed90a27356017234bb9cb7aa54ec9606a471f4278bfcde6b7db97b15ef12c0bdfeaeac921ada1

  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

    Filesize

    797KB

    MD5

    71a8bf71e2cc1e690a5eae6f4ee52b25

    SHA1

    0fde91c4614dc538a86a15dbed304c68b7f08758

    SHA256

    3c33aa77fbee96eba7d7064435889b94c9ddb4a40070aebd0e46922ce68cb9d6

    SHA512

    de5a6ca88302ced45750b6422c95d8ca702e4e05cc1ffb4271f0a4a16e44e800d02cbb0008fefddd47269f1927d14606aaf90a6e434f790da42f37f6eb353254

  • C:\Program Files\7-Zip\7z.exe

    Filesize

    1.1MB

    MD5

    e8aa169bb13555aba29209d383225bc4

    SHA1

    7964bb1307f97c82ed2ae2c2fc7fcb5358818d9c

    SHA256

    f8a48d2339fa1c44a32fd7068aee33d018b9c8aef7b91bfaff1710831a319815

    SHA512

    f6b564a38f7c51952512c5ff80db682ec8a462013822e1c4130c998c9d510598723bbff5d99c143b80aa66da1f8186a3919b9be77ed2e1a620ca65fbdac06249

  • C:\Program Files\7-Zip\7zFM.exe

    Filesize

    1.5MB

    MD5

    79c73afeb6ac5227d07494489cd19487

    SHA1

    e369858f89c00d6d5ae3b2077eea41350c826c51

    SHA256

    1c96d2491ae92fff6971c90e42d7498be5738eb43a3af0eb6709a7a1690ff260

    SHA512

    bed6d4170f8d469a35dd1f4868a20f1dd171869947891555b7998c781a210f2c719846e691b3a6d2df367a98251cb7f63794783cf643285e8e0846cbe47a1c00

  • C:\Program Files\7-Zip\7zG.exe

    Filesize

    1.2MB

    MD5

    a33eddd4efc821e12b589ac7550566ff

    SHA1

    2485d03071ad14e36fe84eec6ccafaf803be537e

    SHA256

    83217138afb7d7612998c95902fc61476fb24ccaccb265317c46bce060d867a5

    SHA512

    f2ad47f0bb168bf96a71eebdc33778d89883dbbe71e90510d7f7c2e273677754740b5fb7c960a83fb3aadba1570c54fccc5f622380772908addceeea707cf6dd

  • C:\Program Files\7-Zip\Uninstall.exe

    Filesize

    582KB

    MD5

    159e48b9090fadabb06871984a6e9b6d

    SHA1

    a5dc3345d9e7de8525038b390f3d651acdf304be

    SHA256

    739ef9d0fe6d7b918d0106c04a93349003560540b47ce3e40420ff8c7d949fb4

    SHA512

    ce82edde21cc3ed625ba4e116cee1f9dbb18908d87f7c9bb73d010e32b3ca7f34657d56fb2c3b6e492321971bb2d6327b2568321a6d73054b8bb7864571ebc46

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe

    Filesize

    840KB

    MD5

    cb4c82c94c129bbf3df6e7e38921d2db

    SHA1

    8b4bde7dee7bb0323d8d7999f3023e560fe47007

    SHA256

    ea3ac011127ba78529ecee48c2f3f43765c5938dbf77056bd55908637810b393

    SHA512

    bff0376f37cc2c783b29950781414a548f56b949fd6dd795937fdf34cd9b594d77fa2c187aa029d6357da8ba6e36f4d1fb39d453070f1c5c1d9fdff291bea371

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe

    Filesize

    4.6MB

    MD5

    a0943188cd4b77f470e78e8e15bd7149

    SHA1

    1c6f7af9b4bef27c3c5c2ba3bdce3fab53d233cc

    SHA256

    39ce51adc9b43fc06912a5a4a12168a2d50819a2aec82771bfd1bac97bb99896

    SHA512

    f5badb3f4b29424158a321dad9b746b2721139cd079ee58528490a593962820894ee8de12cb5bb65510ba5b2286edcd8c70c57fcdfa08f1f105ce6c1669e1595

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe

    Filesize

    910KB

    MD5

    b7530d8e385cbf04ec06c05df14e696e

    SHA1

    b4287b4c95b5716aaae0ae937103b090a8ffa066

    SHA256

    8ac36c4e29eb47f5eb3b58ce183dba887090d2a28cd25dce30d5669a1c5c0585

    SHA512

    7f2a3f6748be30c6808067b14ea27a87d998e4c1ab81d5cca3e53e664a200115b153808b10027ed92159b567d75271e810e379f1f06bc474bb01ab979970b2ae

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe

    Filesize

    24.0MB

    MD5

    a3519e5e33efc96ee77f3ae9f8c8a1cd

    SHA1

    be17a34fe1dbc17ad326e99d89abf78082c7c2a1

    SHA256

    b0c51748579deb10cea8bf7073c5886a74a191183e66a20baf5e0c7aee8fe8c0

    SHA512

    691255ed48bdaa803f6279974557e856e188fcd854200a133e23e4c0d462672f54fd108a77606a9a47e06a1f961b725c438d6d50cd2d35eddc587aafd517e1d8

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe

    Filesize

    2.7MB

    MD5

    76a62d1bd133c2fcb0cd0fe49cd844a8

    SHA1

    8878389d160849c0258506244a83275597b04d4d

    SHA256

    5951293def34a1e53ea4ac74cad61fa22caa0230d5dd2375ecf11da18508ec7f

    SHA512

    5d264309f1f2fcf448c068ccbc6a63ece6109d4865be3d0d1a8600eb9bd3b742852bdd09a756f9ca91d0edbf30601efa14930927d2fe30d740e0348073fea5ca

  • C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE

    Filesize

    1.1MB

    MD5

    a31302c209904f5d8fd1cfd56611ec49

    SHA1

    ac7eadb158828710f7671977833e5775838dc789

    SHA256

    3b6de18827a4338dc4723adc1a6aa6f4d3469f1378e579a3377ee3237ed05ade

    SHA512

    ec851aba212d589a10a75b1b47ecc885223a50241915fd2e0c51f3ecc20642c119e67030a807f467253724d88c0cf770dd3cdee7dc6a1383c1123d84104cb384

  • C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE

    Filesize

    805KB

    MD5

    e44f25d5a76822914eb64ace9e6a5325

    SHA1

    2c401c463eafe17518d8fd85b90b67c172372de0

    SHA256

    d0e9c2c84dd109ff21179a6e6fe191424aeb2359d044d850f61fd58bcd4865eb

    SHA512

    025e5f6d3f3c4c8512dd7cdaed41cfcd0fc82322e4a99f08dda81736dda5dcdefb720cea3961abd08c26551fa914fdb9c1167e5509c1d64ed71b1d6636af7f4e

  • C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe

    Filesize

    656KB

    MD5

    f60d486aeadadaece4ada7c9d0408af2

    SHA1

    5fc1a9330c50b095f97f90941eff33db7feda2f7

    SHA256

    0a3d54c3bd9606fee98f5c5f93ba6dd7fd8494f150767da9b06ac56a73b5e6cd

    SHA512

    852099d099179f5d25d68c4ba8ee26a2b0ebd233416f846687a0a5bebd6198d11def4b84f01f1cc612389e1003f980ed33f71aaaf88342d48934fbbe652cede4

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\chrmstp.exe

    Filesize

    5.4MB

    MD5

    506d59ab9cb5c8f910f99841848b431f

    SHA1

    9bc472284c0e3b0cd26c25b6116276b9ad3fdc26

    SHA256

    42540cbf1b5e78f09c08b86b1498ade662a574a860cf38948ffc5738398cd309

    SHA512

    5f04c35a64d98c23d443c557dde76f18e2e94f1ae54b4ce6f407e500dbf70a2afba1c0d2f839c93248bd8466c8774ae0b124d50333586918ab86bf51fd653e9a

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe

    Filesize

    5.4MB

    MD5

    0d69541be353bd7a07654bdd55ff86a3

    SHA1

    2dc4f34c91873c003bfb52f34631efcb59cd29c4

    SHA256

    e58ce1d9ed7efe27897c5ccc3834668dc0b9c90b7350ff1cd43e0e0e740b3852

    SHA512

    10288fcc6df92ce7769cccb695a3ea17f42f26b9feecf21d5a3d34ec3185c39b012e84e573e4a253b4629e22e9f51daad9484afdcfaaae96dde51319cf95d09a

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\chrome_pwa_launcher.exe

    Filesize

    2.0MB

    MD5

    7d1311f9c348bb81f7633150d1c96f40

    SHA1

    a79f29a8e6bd579c94d5fb88a157aa71ab7c19a4

    SHA256

    dbd1b50a359df7a5d81210366baeab2d6954f50354137d219df8df7653e27592

    SHA512

    8bd8abc7a5c16b64c40051ae9ed05d23020728e0f38863af20e5a7f0270432266acf6b860126188c86f09ff7cf06242b2c6100df25dd22a54c5cdf97a3626d19

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

    Filesize

    2.2MB

    MD5

    ee92181e2002751dc198e5893ad73576

    SHA1

    b3e372aa4838168d32caffb84a432d12cc61e8a4

    SHA256

    1e559588ac5f8b93b31b32337a52a01fad4e834eb0b80c56ff3b6128762632c9

    SHA512

    b8d79fcc63bc1987a7fcdc4149f947f37a943b38afe135e39465e0957d69417df24353df1d62627678e1a6d90b76a4259563ea14860b4ffd7f9ff87916b6853d

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\notification_helper.exe

    Filesize

    1.8MB

    MD5

    38ba38846a7f8e9ee3421c54bdb06184

    SHA1

    a062b2860d4a464d8464a7867bc72cb733e9908e

    SHA256

    7ed24919a75b22bd84cd6c3e85e24a10a8267b7f039f3652667c9bff2af0625b

    SHA512

    b4fd47219c9e61c89c4cc20d354a9ae9b4b785318f1d67bf58567e726e2818a4eb33c02659d062ddd3d2a4061dd8d0bf1114117b19d7d2d7346cf6c098566a0e

  • C:\Program Files\Google\Chrome\Application\chrome_proxy.exe

    Filesize

    1.7MB

    MD5

    449b0d4a95acfb91cd30fb2e25d94762

    SHA1

    1691b70ea725da8d527637af8e9dd1d631089caa

    SHA256

    a8a36b92ce1bedf64e80ad0898f1f0e2afef893cfc11a2e07e0fbf6e76116388

    SHA512

    87b9b6b04f7fe198964788f39d41da7bcf49a7253c845977a2fc04e048b3a7cffa26a99220adc660c320ec76449f94739cd841b891acc113e710263625c78780

  • C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe

    Filesize

    581KB

    MD5

    d1e34b12987f97b680b43317e2ec79ac

    SHA1

    6a2b91eb35698197010204e44a136dabc2bb3188

    SHA256

    71b45348c02a105c1221f8149da76fdfd47d85b15622f6cdd43931b2fb332664

    SHA512

    0266905cad110ff0d6eabb5db46480998c9ebece6b6e77b32d94f1a6602a086436f56760710cb068b39a3a20171d857df862daad0d4aed073bfc80b17bdfc8ad

  • C:\Program Files\Java\jdk-1.8\bin\extcheck.exe

    Filesize

    581KB

    MD5

    4a7bfcecb175197871c63d9730f4590a

    SHA1

    11606d59c0b970957e5b387ecbffae7d3e14a5dd

    SHA256

    37c82a1f34150202a66b8a605584bd7c319ab73be95ac65590fbaf60dfecaa5b

    SHA512

    4a1987b48fa3373069addcdc80f7d154597898b184dcbec2ab00c62dbae161072c36683e30826015a612c76dbf9199473074a49f14011d014a231232565397ad

  • C:\Program Files\Java\jdk-1.8\bin\idlj.exe

    Filesize

    581KB

    MD5

    0472c22235ab87bfaa4b36a5d3b2c83c

    SHA1

    4690fa1e78b9fd201e38698244f28433e5fcb1b6

    SHA256

    8659448102188bd3f8b0fd00fb7818c7e01afee03cc5f575f8c4fda39f207e0e

    SHA512

    7c36fc18d61edbdd7b3d169e384108139d1b18a2ff3315e8d02d2e8db471257b984432f2b78c56c8f9699f8d9e33d0bbbdd7b2581f8a9e80eb23b26b2bd73a79

  • C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe

    Filesize

    601KB

    MD5

    ed96c89ac270964c4426f4d85666aa95

    SHA1

    38497c3a2872f78ea344b15d7de1e606817652aa

    SHA256

    697049313e3a58609e622fb3379a881798018e80149be89eed6dfa18aeac7709

    SHA512

    2241da16304acb43f113c1e5dd1dbee3a083223316736da76064f7096404d2a7cd07a8df14c2a99209ea5f8a60fb78419f01a2ce37dc26811d5c10fa943ab205

  • C:\Program Files\Java\jdk-1.8\bin\jar.exe

    Filesize

    581KB

    MD5

    2c05e42616a08a7e8dc5e62e307a5b35

    SHA1

    941873cb1f990e28fe9c683b08bbcbba53fb585d

    SHA256

    fb0d808cdbed259dd13bf672fb2bdda08660f1c2f2b0d8e7e21431c7878d4df2

    SHA512

    50473b772ed9d0be59f50f21cbdb72fc5136a553e200edbce332b54a18eabafda8a3b311a7c5bbb23533cff7e0e10290db85d461d64ff1ffbf7b4ce731daf162

  • C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe

    Filesize

    581KB

    MD5

    b81d1ff9be25356237aa7bc2b2510083

    SHA1

    c3e7bae60c7d879efd45883e5758839e810bc69e

    SHA256

    bb22afae85ae95d6f6c64088479e8e865947c69e0a580e08304086a62225a14e

    SHA512

    e269c26fd8e9a80b0907fc6f3870f239a40138a476908cff66662224b59d576802d2b73bd825a1fa9710e41ba70b3067b4a8f2f9ecacd848580664d99fab9ed1

  • C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe

    Filesize

    581KB

    MD5

    aff4b26733fe5ab785a98a7c431bba13

    SHA1

    837d43ed4fd0f2bcb9cfcbb7b3cc5ed27861c6a2

    SHA256

    01df00201c31f4455b70f8b91cabd9e3f312737f24561af6252cc3f62b295014

    SHA512

    be4abfb6b4763721d90f1317e10a412de9900cfbdc48dd23ad9bf407477af464f136da75a55d8e371512bdbd8e397f57d3a5a64f17ff3213406631e473f98f65

  • C:\Program Files\Java\jdk-1.8\bin\java.exe

    Filesize

    841KB

    MD5

    629035fd8fb74e43c0d8378a639acb7a

    SHA1

    707630613ab279d00b591f46b5faa88089b7d9b6

    SHA256

    5ca72b757ca9d807def3d1c2ac2c24fb3fe759d2fd0f2cd02acb2dabfdfafdba

    SHA512

    2b057bdbc52e5c2ec7ebb0d8e262389e64a77704ebecce2782ac0bd770f1a0819739772471967697fc20af485f6c3417729ba042968cbed7c6762317bde63ab2

  • C:\Program Files\Java\jdk-1.8\bin\javac.exe

    Filesize

    581KB

    MD5

    db12d22a47a661a0bbf75bfebb9bffed

    SHA1

    104a7996c668fd3f491914f38c5d5c58d05efead

    SHA256

    1610c422a2554bab2b611602edd52b8af3a3e89117a560fc13b2591937ac5cfd

    SHA512

    30a50cecceeef7e9c0d7a1503814bd49f3fa09733f7a47e3f2cd77e3cf8d446f2db0c7c55aaeefed63a4400ebbb48555c9ec8d1556d7d8d8b2b05dc7a0c9bf0a

  • C:\Program Files\Java\jdk-1.8\bin\javadoc.exe

    Filesize

    581KB

    MD5

    b84c68161adb892064a4861716675b49

    SHA1

    db869bc799efb721dcf413d3011c4daec46982f5

    SHA256

    051d30c8dad685f53519f5e68eaff4dd6b26257b3d07579e9a2ed9a89339fdce

    SHA512

    06446bac7f4075d1f58799f7d968e67a3349260c88829b9f87ba24da956662f2ad25d446237ff55f0452eae66adb2f16501604dffa3eb166dda4f9b4467165f2

  • C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe

    Filesize

    717KB

    MD5

    6cf3699c52ae4eec3b3fc21715cb5640

    SHA1

    f65206fcc9cb3aa2c2c2e77ca3f025cffdecdf10

    SHA256

    b5d71fc8625aa98330c332dc8d67c8d1b2c5c70ebdaaa4045b15e4fb2783b17a

    SHA512

    63c43f346ad643cc1cd62dc88ea3a1ac6c9b866444cd4ea313744fcc8f3d27c9e773007db36954beceb649f6584ba115a4288603f09cbc32072194c12225895b

  • C:\Program Files\Java\jdk-1.8\bin\javah.exe

    Filesize

    581KB

    MD5

    2cd4f0706b3e8b3933b0112268d0f6ea

    SHA1

    bdf01d6b0ba962ca69092668efd234cca28180ef

    SHA256

    560d9d973de578d5b49dc4f5d8f1b0b8bacf1c2246179e178b627f5609673e02

    SHA512

    9a2761bf670799ccf19c91d7ac32533d4b8ecfe93943371dc4ddd20fd266a558c0bd8608c0b445c2eb655346cc2f18a08ca1f98c9dccad2dff99cd5c15424d53

  • C:\Program Files\Java\jdk-1.8\bin\javap.exe

    Filesize

    581KB

    MD5

    3922ed0019c18561bbbbbd3e2ef5e863

    SHA1

    ec6771fc845aeecb690f4efac19437e76354b08b

    SHA256

    c43214f429ba377a5c753a1faaa3fe79a85e838cee668e6cd7ac7494d6541399

    SHA512

    a2dcce4b6b6b2cd74a199139a21ae361f76b12c178242207e69a92a6320296ff59536de3a2a1915fb4b26270663b9fc0188436048d11bcd968c8315caea21988

  • C:\Program Files\Java\jdk-1.8\bin\javapackager.exe

    Filesize

    717KB

    MD5

    3350efcd6e0d4b63cff44bb12d7f05dd

    SHA1

    9709d9ed7e3532cc2e25e29df26d6db930fee7b0

    SHA256

    14c7ab845c914ceed7684923efb6801df65a30ec7a78323c2d42ecacf62c7b3f

    SHA512

    bfc331624f22fbac33097902dbb77ff461edfa441060c646542855b68fb9405c28d16bcbffa9e0e502727d573815d6c74866296c7d7bef97cf7ebdd37e29b219

  • C:\Program Files\Java\jdk-1.8\bin\javaw.exe

    Filesize

    841KB

    MD5

    5daea0c8e80369d4b6059741b51f7475

    SHA1

    2fc4dd905cbfaab7b5ce86cd9c56afefeb77ad47

    SHA256

    6844b7e0e0722f2e08b808d8f48b0cd209de06cd7c64b4b0db96c86e2616e566

    SHA512

    b38976424391b00f9b9f4d99eb0a6cb7382f1ee0b79e90409df81b389c553955f3326eab60233da5f4a709a4845bd3227c93701f511da429916b8c3051794254

  • C:\Program Files\Java\jdk-1.8\bin\javaws.exe

    Filesize

    1020KB

    MD5

    1c74cb7c088c38fe27c870168d07d429

    SHA1

    f7b0a8f81fe194628e2de3de7c814740759c8686

    SHA256

    1250ece45547f95c44d82d24358823f3ebb74a9f881db8912661aa1aa40e17cc

    SHA512

    e22641454374a63fcbb870c7e71594698b2d3c59782988cdb68f63d368e8892b8435ad87b01ba56f9ac7c0beb310ce31ce748f0098e71d03c76280430cba19a9

  • C:\Program Files\Java\jdk-1.8\bin\jcmd.exe

    Filesize

    581KB

    MD5

    147a13bf815021e2328817e69c5770c6

    SHA1

    45791024dc20bba2b47deafa566c340686a893de

    SHA256

    81c81e5336360a111bfb5e4879e87e55a708722223c8a8bd74ff339251567a61

    SHA512

    aff83d71aa7de26fa7d7b70cc19d243b7bc46a276f6e8da8f24a15925442fcd908ed4ad178b41ed0ff98d45739ac0b1db47889e325979c0ad4c50ebb90fb6392

  • C:\Program Files\Java\jdk-1.8\bin\jconsole.exe

    Filesize

    581KB

    MD5

    f8ce765d28d606005221803069cd0475

    SHA1

    fd1624df621303e298d87b9e7631b52d5749f774

    SHA256

    884003b48aba7cb8c62cc71f1eb2e38c9cdfe0eebeec0a0f088f58f04abfa905

    SHA512

    59d1eb366a5058dbe57f5638760f7bc3b98e97723e6009e303cb07dd39d4cd7f65963b17750d719d6e50aba7da03afed1e73605908fe3964591069833d90989e

  • C:\Program Files\Java\jdk-1.8\bin\jdb.exe

    Filesize

    581KB

    MD5

    c7ce47872738fd8c798577b583bc4ff6

    SHA1

    49c9f570a8e1eceb537ab780deeeba60bf978b7e

    SHA256

    a70cf358937821f21fc3b00ac17cac3619e36882f8000f7efa06e869e80cb85d

    SHA512

    3060bbfc01a32aae05eb77e6bb96494fe57e5da3e2e8f203e3dbe07acf4a6c8b281443bebc4dbc5b57c96c0b499aa7ad831a93fdeb08d95424ee50519399556b

  • C:\Program Files\Java\jdk-1.8\bin\jdeps.exe

    Filesize

    581KB

    MD5

    e02e2506bb350fb0c9b760a9ab4fb0a8

    SHA1

    be152b463838687852e7b909dac794a48f31f96d

    SHA256

    cd57b2a856639475b4792ca7d900f373d9b031652642dcbe72aefe5bc34572a1

    SHA512

    598812d944c9bff0f53198f98525a07bdd6db3bf1f746472cc20f6b662422c963d31fbf5b90e8f3b200762517e4b35b11df7ed9322fe823e51e97d13e4cad720

  • C:\Program Files\Java\jdk-1.8\bin\jhat.exe

    Filesize

    581KB

    MD5

    12d4d89c389684016bcac6c5156a1661

    SHA1

    ca47f300b2b69629019cb51fc45d244632fc2273

    SHA256

    5cf047aab036999c1dbb4f010aba56ca4e00e33adf1e3d443f425a23a578a90f

    SHA512

    009162561173cc08e5e198e6f795f5876e5c6dc2b05d74d9b8cd0c0670443c02e0e82b49e3564fff3d6744914c3d92aa73775e03daf7773edd708f65cc87132f

  • C:\Program Files\Java\jdk-1.8\bin\jinfo.exe

    Filesize

    581KB

    MD5

    272c072b3db1c50b5841829453ac1a0e

    SHA1

    a3de9bf4d349539e7f7670e66c1dc583303b5818

    SHA256

    7f94babb6b427fcccb2423ffa8a2fbd1e0aca076af708a5e7c7618092c466876

    SHA512

    b24797702679cb5aa4099811fb17ff430e8526c7b36786b9b28f9a25ae9976a0a39eedba85d40e4d95b3ade55c6df95e552b3ea71f516c704cd317a81e7e2d06

  • C:\Program Files\Java\jdk-1.8\bin\jjs.exe

    Filesize

    581KB

    MD5

    edac6817068daa04bc1a6fdf1ec9eb6e

    SHA1

    23390e4867bb90dcc862f93bef882661db65da40

    SHA256

    0323c22efc7451743f1c04ab5ef03d25ea250c145f3476c873bd14df1db6395d

    SHA512

    bb158ce6d9254e4685234401deeb78a306dc2fcf6eb8b1985fb5fca091d81757383bca66bd15ae526f075f50ed0711c69929349e4cd056275e340a4249b70133

  • C:\Program Files\Java\jdk-1.8\bin\jmap.exe

    Filesize

    581KB

    MD5

    faf2da3471c1dc25162610cb16dc7116

    SHA1

    3c946f58a6fd0b04bdd8c733ed9ecc5d9c4be18a

    SHA256

    b6ffac1776292ed5f429a0d48c72588a048baf02060e900d907c2cc223f4ea11

    SHA512

    83028a81a126e575debad7ab68c4d461f88f84b633471f6d85dec2be10cc9ba3b37e08a3513bbf307af0fb6735dd79fd179b81af7ef70a1018267e029d4cfd8c

  • C:\Program Files\Java\jdk-1.8\bin\jps.exe

    Filesize

    581KB

    MD5

    af51032e2106b052945cebcd83e11d24

    SHA1

    d635f53744b78bd84c0a8e6d7bd0c2c03257a6eb

    SHA256

    76e3704983629e94cd161b958b74cb72a2cd850cbbb82c21042c446e780512dd

    SHA512

    c7a3a12a5c04edb8b85b15aaad0bfb9c7b7e79bd51062ba87e36a98ee613a031ed72b9a1016965d879a92a750c970e485b4a6b3ffcb293c414e275c2a95ff391

  • C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe

    Filesize

    581KB

    MD5

    d715cf8e88cd7f501822d68613f9dbb9

    SHA1

    2f6fe515dd1ac53ea5fe74a6b6eb1b18617f827d

    SHA256

    dae7258c1dce42cb9f3b1fc722f56a24951da4c75c1186a371002b8458e93469

    SHA512

    b2d11c5c79d476cd768c4786edc5234e63cde3df645ea909f22b02b6689f7425f1a62bef6c07b24e8357e622d2779a36467986d9a7419e483d7df802c2b7e8f3

  • C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe

    Filesize

    581KB

    MD5

    9a7f02a311138eccb4868a5b3b8ed44a

    SHA1

    4d1d557320a7948b42b13620383f323fe5e3e50f

    SHA256

    b78f022e376fad4b2d4486894f2d5917f1650838b74e47036a6a2156ac4bce7e

    SHA512

    489338e301eb8312593abad3ab45b11740d3140d3c751d5a2b68864f63f0ca2406e82cfcc04c53dd72ba5c8a08f5be0ec7d57c52fa5e53f72f74995f6820917f

  • C:\Program Files\Java\jdk-1.8\bin\jstack.exe

    Filesize

    581KB

    MD5

    1ff3ecf66db57c994aaec77e8b4fe02c

    SHA1

    e088f8e7818d43d669c17668ffbd351534954698

    SHA256

    3d936fb5d14443022fcea441733c648948c857a21852cf633e7e607661aab984

    SHA512

    010aca1d46ae32982387394d6d9c70e1130093d17832e08e096bcc6e064992fa8ca4732766b13a12720642b0c37e64e33930981d314d3236f553e2dd8abbbdf5

  • C:\Program Files\Java\jdk-1.8\bin\jstat.exe

    Filesize

    581KB

    MD5

    975609b1b10145a5ae91d23f0f65f0b2

    SHA1

    57844a2f4c02dbb54a7caacb8efa8d324b03a917

    SHA256

    fdfd8dd8488dee59e2f49053354a72613c5bb9808cf8c2de495f1c7a5a555e40

    SHA512

    4afbf0fb37c8cb14933c83fea4d3df90787a06ab727a490ef51ae1c53a9afeea6e340651563255f57436c5059818eaac4bcd76c6a8c5acbfbb5de94dcf4c9664

  • C:\Program Files\Java\jdk-1.8\bin\jstatd.exe

    Filesize

    581KB

    MD5

    80de1c96af8a03a4ad568c4718bc41bc

    SHA1

    4e2cbdf20032c203cac47bad0c837836fba41535

    SHA256

    fb6df1d47bd1151729764ce22fcd5335d00d49e44c531a507907ee72bf5f56c7

    SHA512

    73db4666102fe38a5cfa258004aef3962b5707e3c291ba364704f00242beb0f0b5e313c8892ae2f723bedc4d61482a4501dcd1cae5ca0f7d6f0602736ed1cca7

  • C:\Program Files\Java\jdk-1.8\bin\keytool.exe

    Filesize

    581KB

    MD5

    8dd57fca77fb8c3e43f68febccbdbdb7

    SHA1

    06ecc39bccde593b585a84524e56f4928656f6d9

    SHA256

    19d1d3881d452960f6e94ce781a10c285e8851e55583d4edb18c0134f9b1419e

    SHA512

    0409baf67ae044725b9018268696f93b25d14b2a06e9deacf28b1d2fa31fd8404f8108722d606d111165b2133478cc26704042ba58ceb9ed6eecd780242a5a7e

  • C:\Program Files\Java\jdk-1.8\bin\kinit.exe

    Filesize

    581KB

    MD5

    7bf88468286721a02819358eef5fb917

    SHA1

    f81e4ec7956be87581ea39d11b66a7e22c744acf

    SHA256

    d99a26e6f8ea0027a5efc7a4b83d8f7a27fb100f7a3654f7706791b465720281

    SHA512

    c2fb1044f892f3acf79d920b41c0797a6a31ee465b48231c439fd7a8f6ea4edf0409b576d0bea16563d3e90564421cf9e2238a9cea9e487854af1bf902a20373

  • C:\Program Files\Java\jdk-1.8\bin\klist.exe

    Filesize

    581KB

    MD5

    665f71b6e6e48f8eb05c0e4b22c7f04c

    SHA1

    d24ac5b36b681abf0a4271b545a2f6ff20e74327

    SHA256

    706e0a6125c32531bc597b02a2dddb793ad5bc30957c5a171acfa3c090179d30

    SHA512

    f9ea49aa8473c030df6c60ac494ed4ff144081ed3d469badf7bd62d6af59f96cbbf0f5238483119c39b9df65dd821c9264c92abeaa04d447f946e459f1ab633d

  • C:\Program Files\Java\jdk-1.8\bin\ktab.exe

    Filesize

    581KB

    MD5

    945750ed3f969d2aa9e21c3b1f64b08d

    SHA1

    fb7f906d625afe14f44a8bb05cc9627b43f331fc

    SHA256

    3c03f3205c5849a43773e235ddc5b03584fa7db5c3d0cf3c4641ab7ccd9153b1

    SHA512

    e6b44fabe9242c924f965d652d63bbe1717a29c9348eb381562970a82bd8f5f46dc7c621143d951c70d41a239a2ed359020caf8c9ce491f9852744c61fa26dd5

  • C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe

    Filesize

    581KB

    MD5

    328186cc4ed5e3e596b3c8dcf7327121

    SHA1

    6305e67803ee1e50fcfa28ad3351230758b0d94f

    SHA256

    bf84998e2f593159602484f490e096722bf297c5a21aa1c4af720713818e6b11

    SHA512

    d0d83dab8ce271d1127693dc2f8b93cd78e9385daf816fa8329dacc18518e760669fabf6d8c7374d220c40f893f990c6609ae92d26028fa3075192c7a67c519b

  • C:\Program Files\Java\jdk-1.8\bin\orbd.exe

    Filesize

    581KB

    MD5

    c5d474d2dc33788f80809b3db9e09c23

    SHA1

    a9471a0190230b8cba9c9a0d3806f0ea04ee24af

    SHA256

    d434dbf9dfbc91e5167642d701635594267db6431e6c94dbb36f65ea03f2fc3e

    SHA512

    29260ccd923c1efd2ae23dedb5ce43a1f54b1ba99da8f176a5350cbd5584323a34aaf8f0ec2e1579412c3aeee9e775f86d4ca4e5ca72b9f3f99a38fd8db5ec6c

  • C:\Program Files\Java\jdk-1.8\bin\pack200.exe

    Filesize

    581KB

    MD5

    b4e9d6a5365d1acc3d009678ebb874b1

    SHA1

    dcb12038c707094ca1e3d19b4ba28ea4222b33f5

    SHA256

    1d73dfdf948e75e7e3566e617f67584132011a45627d3a10d9e1560085898059

    SHA512

    de8275f1911a705b477e8f83ecb7175efe825a099e438d381bbbc3c56abf6ca9200538a5ff53269927fc044a78bcb68401aaa2fb7005692bc1a3f0786fa05cd6

  • C:\Program Files\Java\jdk-1.8\bin\policytool.exe

    Filesize

    581KB

    MD5

    8cefd3af43e8c4f525f1bf7e19b7391c

    SHA1

    9e7e2d8af9731ecc2154025756b6caba69d9ef03

    SHA256

    12271d31a437a897282e375c7eb3a5c4753108d29f4967f91194f6523c05929b

    SHA512

    440e3c79ca457b1e784f8d92b8fe471bf9ad36eff3b0a447224f6bf5bdc5064b9b1ce55f9e4507ec35a38a150ca53d20e1267c16c193fce70f85a686d4645b12

  • C:\Program Files\dotnet\dotnet.exe

    Filesize

    701KB

    MD5

    b5be011f32f00b0fe23fbdbbc621285e

    SHA1

    effc3db1d0e929aaf0e7398e6ac69cb378a1dd2c

    SHA256

    f99b18690ce8c5130d906a13c739f890f2523dd588f3dfa6efccb43e270e3346

    SHA512

    e8cd221baa7c1de46fef0b483ba52be8e059d1980186c2fb7c9b46f6dd25db0fbac90c2b5690ce920c9c1a49053e6e9d0cceb8869d2e9ff92e877e2957641e91

  • C:\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe

    Filesize

    659KB

    MD5

    9d4c08cc84bbda6a888098ae84839cd2

    SHA1

    6cb33471bb232db6dfd29278432493b1c4da8e6e

    SHA256

    2812c515a824131e8036c465c799a932c62638279308746c6000f249e2be54cd

    SHA512

    642a6c1cf4f4256f4688713fb011e1ab8465cbe94e03ee31ecd966b899a1d0ca4e3700219e50903093b0b938af9d2131730a83eea3238e75f2eff1837ee316dc

  • C:\Windows\System32\alg.exe

    Filesize

    661KB

    MD5

    6a6b3a4e68b3e2db280662f656b6ebf9

    SHA1

    c90e38c61e9c8a7353b6183f6d075b43d5ea104f

    SHA256

    b8849aa0a43b65c703698174730ca7c01d4963d9ced939d6b6c41728f15fd43f

    SHA512

    7fe342948a5f2dfa83ea2b0f8af1a3b633e4f08f7223641130718d2e8d7edb7cdf45bf64a75f7ed53ad404b0d7e04fb1ac3fa88a98421b325dabb16decb0b8da

  • C:\Windows\system32\AppVClient.exe

    Filesize

    1.3MB

    MD5

    15ea931990663f2f39f8b7265a1066de

    SHA1

    64689e589f92b2fee04375bb759c0e222e3b30a1

    SHA256

    648d576509d3307f8c5841e9b4978bc79e59c03ad721e838d4207ed8850b90ce

    SHA512

    dedb60917224304aa4e9c1befe6ea5fa77a8c953b2e01b750040c3e299e2b6b3235839fa0cd1d3d578e76a27174d0cc81723bdd2233d056c6f20065c45331bd2

  • C:\Windows\system32\fxssvc.exe

    Filesize

    1.2MB

    MD5

    9ba7b5e43a130c4dc0ffdef1dd77f9b2

    SHA1

    857b41300a517f38646e545ba1c06201d7bf49a8

    SHA256

    1402b70cd97b91067bf839b54ae390fdf67d888ffcdef9e4f66a464332d6fe44

    SHA512

    fe7206165d00bc3123eb43e8706ffd4789cd2904cbf6faaf512fc6ad4d434f44eda623cc1cedced6c8ec9a81e8656b223d77162bd6d1b0b125672fbb90cd47d7

  • memory/1596-82-0x0000000000510000-0x0000000000570000-memory.dmp

    Filesize

    384KB

  • memory/1596-87-0x0000000140000000-0x00000001400CF000-memory.dmp

    Filesize

    828KB

  • memory/1612-248-0x0000000140000000-0x000000014024B000-memory.dmp

    Filesize

    2.3MB

  • memory/1612-48-0x0000000000510000-0x0000000000570000-memory.dmp

    Filesize

    384KB

  • memory/1612-42-0x0000000000510000-0x0000000000570000-memory.dmp

    Filesize

    384KB

  • memory/1612-84-0x0000000140000000-0x000000014024B000-memory.dmp

    Filesize

    2.3MB

  • memory/2000-85-0x0000000140000000-0x000000014022B000-memory.dmp

    Filesize

    2.2MB

  • memory/2000-52-0x00000000001A0000-0x0000000000200000-memory.dmp

    Filesize

    384KB

  • memory/2000-58-0x00000000001A0000-0x0000000000200000-memory.dmp

    Filesize

    384KB

  • memory/2000-249-0x0000000140000000-0x000000014022B000-memory.dmp

    Filesize

    2.2MB

  • memory/3040-245-0x0000000140000000-0x00000001400AA000-memory.dmp

    Filesize

    680KB

  • memory/3040-11-0x0000000000730000-0x0000000000790000-memory.dmp

    Filesize

    384KB

  • memory/3040-18-0x0000000000730000-0x0000000000790000-memory.dmp

    Filesize

    384KB

  • memory/3040-20-0x0000000000730000-0x0000000000790000-memory.dmp

    Filesize

    384KB

  • memory/3040-17-0x0000000140000000-0x00000001400AA000-memory.dmp

    Filesize

    680KB

  • memory/4572-6-0x00000000007A0000-0x0000000000807000-memory.dmp

    Filesize

    412KB

  • memory/4572-1-0x00000000007A0000-0x0000000000807000-memory.dmp

    Filesize

    412KB

  • memory/4572-39-0x0000000000400000-0x0000000000506000-memory.dmp

    Filesize

    1.0MB

  • memory/4572-0-0x0000000000400000-0x0000000000506000-memory.dmp

    Filesize

    1.0MB

  • memory/4644-33-0x0000000140000000-0x00000001400A9000-memory.dmp

    Filesize

    676KB

  • memory/4644-25-0x0000000000690000-0x00000000006F0000-memory.dmp

    Filesize

    384KB

  • memory/4644-34-0x0000000000690000-0x00000000006F0000-memory.dmp

    Filesize

    384KB

  • memory/5028-74-0x0000000140000000-0x00000001400CF000-memory.dmp

    Filesize

    828KB

  • memory/5028-62-0x0000000001A80000-0x0000000001AE0000-memory.dmp

    Filesize

    384KB

  • memory/5028-72-0x0000000001A80000-0x0000000001AE0000-memory.dmp

    Filesize

    384KB

  • memory/5028-68-0x0000000001A80000-0x0000000001AE0000-memory.dmp

    Filesize

    384KB