Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/06/2024, 23:16

General

  • Target

    2024-06-02_a2a6eacd66ccd601ed31d8eada737323_bkransomware_karagany.exe

  • Size

    677KB

  • MD5

    a2a6eacd66ccd601ed31d8eada737323

  • SHA1

    c011697ce0cc532ee8ef05a56f9f448dca9d58d3

  • SHA256

    83ad6f64dfa3c5210cbac3bd881c279e8a289a58b1f58def47d83c29efec0d2c

  • SHA512

    1c10a3987d581cc0770f11da30a1e025d80e9ed6705e17298f7d0eba1b682068c7950b9d56f99dce01bc64a8a78839931e9cc07b83b07d61bfc47a4d80d02a20

  • SSDEEP

    12288:3vXk1d4+/x8J7ct3z5htUcQ1MlhrmQgwwJzt5+7fyZkCtXFiWZF/3o:Pk1d4+mIJz5IcuMlQHJxrDiSi

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 7 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Drops file in System32 directory 12 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Modifies data under HKEY_USERS 5 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-02_a2a6eacd66ccd601ed31d8eada737323_bkransomware_karagany.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-02_a2a6eacd66ccd601ed31d8eada737323_bkransomware_karagany.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:4376
  • C:\Windows\System32\alg.exe
    C:\Windows\System32\alg.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious use of AdjustPrivilegeToken
    PID:4812
  • C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2036
  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
    "C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:336
  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:740
  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"
    1⤵
    • Executes dropped EXE
    PID:3752
  • \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
    "c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
    1⤵
    • Executes dropped EXE
    PID:4740
  • C:\Windows\System32\svchost.exe
    C:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv
    1⤵
      PID:4864
    • C:\Windows\system32\fxssvc.exe
      C:\Windows\system32\fxssvc.exe
      1⤵
      • Executes dropped EXE
      • Modifies data under HKEY_USERS
      • Suspicious use of AdjustPrivilegeToken
      PID:4412

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe

      Filesize

      2.1MB

      MD5

      c849ed7348885d5a75e390ffe8e8fd20

      SHA1

      40fbc0478661ea862c95dc02e2e0caa20c5becb4

      SHA256

      fd961ff4f3c32e1635c43c0902bd3d73fe1cd61bdb625965b9c4a5f3a6d459d0

      SHA512

      7c80ba7bbb220b8dd7df0c0befcca4b05380fb459287475df3275f51ba49058c39fb76ae795152a88cb747ba653d2c3107e8bb945bd7c302c28b259225745095

    • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

      Filesize

      797KB

      MD5

      5c84c1592309915e1e802f603267c1e2

      SHA1

      d806714f98aaacfba99c095799b7ad2fdd8799a4

      SHA256

      6baeec2f999f783bc6d7226ed527d51dba7326b94000132100e3f81e19f4c14b

      SHA512

      d34443b486dc75576d3e442caea35d3bac60e1f61d295aff64e6ed7cdc95b192b11590ff68a891d6a015068d7da0a1a1f4c19d5c7ae15ce1758218ff5bd3beb7

    • C:\Program Files\7-Zip\7z.exe

      Filesize

      1.1MB

      MD5

      db1acb01b48f9bf55e9304954a09f72f

      SHA1

      30e955dcf690fd20742d7395e1992bcb13c9030f

      SHA256

      05a685715afe157e8ecec1decf5a7a9ab8cc6fa5be9d1ff20fbde68bca4d9495

      SHA512

      06fe1ef40ef8e32efd789d430d5a1e8983d01ddae88deb499c63c4fa6f683125bfc5146231ef9a687f004b335a82e1e5e8809a71d6100a008b35205b4ac42a60

    • C:\Program Files\7-Zip\7zFM.exe

      Filesize

      1.5MB

      MD5

      c2e08304e54a374f6ec8d5b76eea0057

      SHA1

      082f281b5ba9ca38074073116d1c6e0dcb5b28a4

      SHA256

      ec7d43e942e75afbe3d36080c81d31f3952b490734f0d289879eb35a4c6897a3

      SHA512

      0dedafa9007456e2ef2a85131a4dedc43e9c1faef3c653f9d4b45d888dba704f83681e019ad19621e94f7a00352b2efd189ed73ce5faf5c27a9560cfa76ab8db

    • C:\Program Files\7-Zip\7zG.exe

      Filesize

      1.2MB

      MD5

      4acf7cae4ab871ae12d4f2fc1858c92a

      SHA1

      89f00c3bd577638e1e56f56a65c9d6702aaeef28

      SHA256

      6fdc38758cd631e6261a3df9d2c66871a81dd6a42dd466ba16f9fc20b9a07f60

      SHA512

      3ea64bf8fb0a2877ddf17eb2fa64847b0e0042c957e1c4c09752a691d3ab233b19c4bfee4358ab2e0adc989787ce2c33ccc9bf6af80950a3bf69210714aad380

    • C:\Program Files\7-Zip\Uninstall.exe

      Filesize

      582KB

      MD5

      8090dab0d36206bc5090b8321f6001df

      SHA1

      f8c41e62b0bda969b4f98bd951db38c090bb3b6a

      SHA256

      50abc6042e7825563f34e47677f0ecd1a0fffd7787eb0063a5a7a2748cc87ef8

      SHA512

      d72b306c27c2b4f3f69530a353283c7235939d330f849182220a9989eea41bf9d409046f36cf69d00e9fe9b4fb60e4b10bcf001aa5dde6940375287aff334be9

    • C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe

      Filesize

      840KB

      MD5

      9e0afe00515c3fe1adeca6969383de5e

      SHA1

      442df26d6fd8f47dae1bbd8cf73b15b8ee163cad

      SHA256

      c217debf68ef54f0eba1a5e5977e4275ee78126237d96f1e7fd7acac84b2dd36

      SHA512

      fc21745ede895ecc113c81eac72c94f1b287b0cf1d6ff85dff0ea62ffb59594f45226f2bdcc0e5bad334fd2ab0275bb6606c3c2e504c9c2153726d2d0ff6fa11

    • C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe

      Filesize

      4.6MB

      MD5

      7587f6cb9fee44e88b2c4117d5fb7bc5

      SHA1

      3ab3b1d07b29c17f87dafeb81d482212aa8a25f1

      SHA256

      31a9974e694d37de5afbdb4886f3b71e6bac6c2518a943c6a343e8b443bdf54e

      SHA512

      9969edfa86adb2d01278f80e4a08fea9a5829db296b83aa167c40d874f67f1689356297c1e0c825881fcd535ef1524d50f4aaf0820c53fec7e88a66b5d4d6a1a

    • C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe

      Filesize

      910KB

      MD5

      935eabc6681b6a019af16678e0c035d3

      SHA1

      f94665cbaa256485348e0f4fc5a00991902566da

      SHA256

      fbfcb9166e3fd509ed1d6ec44f794580ad253b63f28f06bb02aec84d254e9f3f

      SHA512

      bb60a661a68616042d64f1b127ea5d262dc31a737972c18ad3c54f21a365195ad6f27336cb5ba354d3d31604181666bd62c9db330619955d1689042ff4acdcb9

    • C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe

      Filesize

      24.0MB

      MD5

      c6c6c8e42ae41e3aa10d19a574ff36e1

      SHA1

      95dbc88f55bd22f2b5fcb658ba093d9fc99f84cf

      SHA256

      904555d77816546ad79e2172eeb7c504a95ce0c388702063ba57738c54906846

      SHA512

      5359c74573ee7d589b024ad364f1dfd44cf2a15112436bcd0cddb22e1734c9c1fd114898f0c8dfea4e3859349a2f013b960d33000fd6a4a1d257ca8933fdcdcc

    • C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe

      Filesize

      2.7MB

      MD5

      2fe1bbb18c5cb3410576f3260964401e

      SHA1

      a36ef5eda73218efebb65399d7a431e84f58eab8

      SHA256

      843c89d6210c91f22fe455b3f42b26ff00b67ed3cb65ada6c770ae5d47c21cf1

      SHA512

      2a9614b5a7e943d040c4ac2c5bd68a66c2ed57be473df83e3e0c5d62ab34a1166e962354202da9be03b9846f6f0bd856f42cb08c6ad8360d154b6ccca71e9583

    • C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE

      Filesize

      1.1MB

      MD5

      2c8814b72adfc554a812588dc5452302

      SHA1

      57756e9a345e81f3f6af8f9fc092d2a225bad99c

      SHA256

      0ff4fb85c253694315a7b2eaeab1aaedfff4b11533442499cdf90963a30d3d1a

      SHA512

      54f44ccf59062f4ad3762ad13e6850ce2ca1661ba8b41fa8ca7ac583fa4712909a96e922325a19b54931afa7c674260f036603c02022446842e9666808383416

    • C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE

      Filesize

      805KB

      MD5

      6768fb5454627ceb2282119dca3c4c0f

      SHA1

      47c1215709bc392cc0f710fb18723a40733fe5a2

      SHA256

      3b7c989e2c2777fac3743352dac4f7aef76f245114ae0a9734327683845bc001

      SHA512

      2907e588c9daf3d7b3abea9c05ae7bc9cd66cbdcd76eca5477afc240753509370f5444d63839ca44f005757b00c383747bea960e65e9de427e2bb02c8f621278

    • C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe

      Filesize

      656KB

      MD5

      dbb8ced0f0b1ec5e6be59a090d7fadbd

      SHA1

      eaaaabe16049df9dfe76a9beb762c4b4a397bd52

      SHA256

      ea2727381da6042f94934a0af96e12bbcac29b6228aa4a35dde851ca66bfe551

      SHA512

      7879a34905e4f32db0af747d232561c446e91e450f72a7b98daadf61f9d4e38241ed7a607aa7587bf4c883e567671bf59715db23f82fb6959d3e49c47c64a9fe

    • C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\chrmstp.exe

      Filesize

      5.4MB

      MD5

      026927bd77c7e83115b2407482aa3812

      SHA1

      2d407eb2a0a5c4243e554cc1c72e9e5c0c9b4939

      SHA256

      bdd142a457e1f5a00fd0a5b2ec8d337eb267b87f7d7817f769ba7441fbc9008e

      SHA512

      67e131d85f9f62d8d5a92e230fdbd6a3fe31dc4c4e7ba21e052927466e5e86895b2e21a44b7f63ca9a0b30656d9edcc67ee16e123b98d02c8f5e13844aaa84b1

    • C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe

      Filesize

      5.4MB

      MD5

      def75269f14d0603c495e20f435d6cb4

      SHA1

      805a407d9b366dc2b639ee9bcf39a217ccbfa9f4

      SHA256

      f22028bf0500091fa9410f0dec99e255ec39bae0d528454d287a0aed7efbe4a3

      SHA512

      b7450a99fba79ac12ecc432cf2be59cc1e6622b9898d95a0c389b3278dda2d00c06b2da59f04002d2667b45b218bb71cce5560b9b51065a46259abf9376314e8

    • C:\Program Files\Google\Chrome\Application\110.0.5481.104\chrome_pwa_launcher.exe

      Filesize

      2.0MB

      MD5

      a645ece23d514ddc9a6ac0ff5fb77d86

      SHA1

      a965f4cb6b08efba7462838f151a7296600a34a8

      SHA256

      ca05671b5f5fad81294d6a9aae3cfd2d3403216c07aef037b9c7a08f44624f22

      SHA512

      634b7927682c7a2753adc06d52f6b4bb9a6b76f8848942ed18ea2ef26cd237dcfc87d389cec44e88112488b2116fe5cbe8f7fd69367eed9f48c614cbd7591c6c

    • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

      Filesize

      2.2MB

      MD5

      30dac2df28e11f229fd1e91a92c3ad0e

      SHA1

      062e1f824c03a32cd5bac291384827fb11c13c2b

      SHA256

      34b268218746f8df34fea8a4b816a71953a3e91013328045a2e39646cfdcf6fc

      SHA512

      006b0c3ea01c1add28e71976903cd8295b446e8f0e0a1711bb25e53b86d3d1be83a949c25eedcaf44c80a95a357225070e208c9c0b5ca303fd69ebd78babb488

    • C:\Program Files\Google\Chrome\Application\110.0.5481.104\notification_helper.exe

      Filesize

      1.8MB

      MD5

      b57c69386c4c5f3eb7f37c313e76e5b3

      SHA1

      e9189c7260682c1c86e1c3df100590ad9afd7f20

      SHA256

      d9492cbb300625a2ae750f8d6da81e318a346d6a7192b502205d1f218ead49ee

      SHA512

      b733c0f1d77680891b58850683e6f9a930814e26650a7ecb1a8e7df12bc895119f3f2c28ecf8355722c5fe4eb1eb89a82f2627a375df4b94000c7825512ad64c

    • C:\Program Files\Google\Chrome\Application\chrome_proxy.exe

      Filesize

      1.7MB

      MD5

      8458ff6928701f431fb9398c986b9076

      SHA1

      d1d1d4af9d4647824b11146bbb07684d7d1d9995

      SHA256

      ec7e4784a114a2f8daee661646ecb980476990a95e5c74d485f324ac8389ff1b

      SHA512

      740426aef1043e19e777451f7ee18a0793e9f80f831d1afe90fcc7d32166aa83cf03b085c781052a24a87d6a9e178edfa7a2fcbc4ee249cb08655833e6d8ef97

    • C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe

      Filesize

      581KB

      MD5

      be4250039b4baa1c3f3c9ec9dc8c34b7

      SHA1

      4f9d5c5d37cde1f26aee4a37d19dd24fd9183640

      SHA256

      9c94cd9ddc9f794e91093b56d8efca415245eb64628e93336eed77284b2634bc

      SHA512

      5f3af7361ec866d98078f9756fb0753dc1f048cd246b3c85058879a668f8539f59e2c1fd1b3743f59de3622648665a936bc4118e8e9687b798a5237385fb3d72

    • C:\Program Files\Java\jdk-1.8\bin\extcheck.exe

      Filesize

      581KB

      MD5

      f46488f179eacb0838ed64227c8af7c2

      SHA1

      6aad81e0c4cec4ca88fb5589b59f49dbac109c86

      SHA256

      c902aa7ef98d52c676d5bf081176e3f0e8af57b456f96555c22f1a2fa1fb5911

      SHA512

      ab13068303bca0ae889acbb9002f2e8f96a9fdf4dad057d18c1e8de30cbbc1dae1c05d76b6b35c5d25631bcd65177b3787959311ff43e81c27c5c7a2fa592239

    • C:\Program Files\Java\jdk-1.8\bin\idlj.exe

      Filesize

      581KB

      MD5

      d82fea80f63b5098442ebffce49dfc00

      SHA1

      7bb0b705b8d95c21430b235f36fd4e82a25eb8d5

      SHA256

      396bdf81b8bd02e50c8ef41e5fa42995f56e461034eabacc63cc7564856b1cf6

      SHA512

      9e0823128aed16bb747cc35d77429a0f59e3a8e73502c318ebe2dc3fe6347eced59d641d0e1533891191c10bdb9abdc632783b14591da3991ee4adb719df6cf9

    • C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe

      Filesize

      601KB

      MD5

      36e9bd8bf38e647fbdd20b8bfe572653

      SHA1

      85dab1ac7bfbfc959da722ff6084cdffa05c1095

      SHA256

      55020f9a1597e161f2ddb888e2103fd730e90821c126640a2d1c983fe9a5526f

      SHA512

      d5ca9be3e1cd3fc3e4ba7835e6545ad86e5006488477addf22a4db2aab39de250e665ddf69ff48347b772bc31ffe4033c739bd427547e0054f3a085fd4056861

    • C:\Program Files\Java\jdk-1.8\bin\jar.exe

      Filesize

      581KB

      MD5

      b06cece274eb7d204500966746b7ad4b

      SHA1

      48b7074420e36e9a296fbca901ac4cd533a59c1e

      SHA256

      0297bd99d9c823402a32166c9423003110e1b80f98977bb8de29fc9799cf1263

      SHA512

      706b9463536213c310c1d4d9c8a76f05a2c21b006c47d2e3b94561400ad327baad127f032bad2e1c7c6058df4a859a9de1d65c19184e91f85bf1072c138f51fc

    • C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe

      Filesize

      581KB

      MD5

      63ec601b13c4c95dad0fa8b2a2d92b12

      SHA1

      670e4b66370cd8228e5d755ba384ea0eb2bd0161

      SHA256

      bf131d6d3be0028071e5b5119cf8e25bf287ac55ec423373b3468d4b5ca74e13

      SHA512

      2348f50529ce468bbfe3033dd2300c3ed5a543313cd5bec281670571f0a09fc6260ca6ed02b77c5bb500717322f0e35f4e69dd14dd30bc4675ddc268d49face3

    • C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe

      Filesize

      581KB

      MD5

      26b9d20c58becf5209a8758b32595918

      SHA1

      31426da821a47961b317fdcabaf9aef1e5bea657

      SHA256

      d62cb48852234cd6b216867be5f61b5593c76c5e5a47714dd9d1ebc09d4d57ee

      SHA512

      208baae645c642a52710aee6c0537190de99c563898fda77ac6df854cfe009c43d6827d4795d1fec36dfc4d461d92d6a6b8452ea6fe1c34d5b9d4516bd7fc443

    • C:\Program Files\Java\jdk-1.8\bin\java.exe

      Filesize

      841KB

      MD5

      8314778d78c2ec1a857d751d817660cb

      SHA1

      f5eb50f36e7ffa08a11d1f8746e4835bcd61c890

      SHA256

      95c2f286ddc6942546441cba7b3a807eb974f6ccd186aefa214f20d392a1a807

      SHA512

      f39b22a2be77f77669a60081aa4bba798f36c31592377542118e9e2428bc8be2fcb35325bd15658b175a3f3058c396a4bc7f0ea23077bcf74f21610bd9db180e

    • C:\Program Files\Java\jdk-1.8\bin\javac.exe

      Filesize

      581KB

      MD5

      e6166646cf762951961e3dddebbf0620

      SHA1

      00381d31be3f76a336fe15c9456154355f199e23

      SHA256

      0bd84d6ee61c41ba20a3fdeda9502de5c05d060ff51f6db8f8ce3497c1585aeb

      SHA512

      0ebe20c4e558a86c8f6c82b0e330eb687929965d1a29c595d04ba756da95c573dfc68a49cb5c9b6870bcfb138e7036747e8414be9ae87aa60a13aa1249f11501

    • C:\Program Files\Java\jdk-1.8\bin\javadoc.exe

      Filesize

      581KB

      MD5

      16a3056b2db1b4819b201205f269fdc6

      SHA1

      2a5cc0b2c571f0f5e30e279d01a5f0e5a00d3855

      SHA256

      a0ee9dfc706fbaa0ab21a907de11441ebcd75d9f9a8b9c1dbaf133aa15ea6e4c

      SHA512

      8c03ccfcc4747d9b43fcfa1e6e6dc4206be01da07f07946ee8cf365fca29a60d96eaa3edc48c690d322e9d1daa57ff422506f51b5e003305d264d66538b91a9a

    • C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe

      Filesize

      717KB

      MD5

      3df5c1579d2f69fc5192fc7f7f3b8bc6

      SHA1

      56dc47e4c0bf7bc23e2d0e3c6f2483d504778285

      SHA256

      0d3dc35f8b97b5049484db1981bb2f0723cef7d60c1e7325877d8dd31c7ed36f

      SHA512

      2fed29f66c5861fab36730b9855291903dd4a46028cfa3a6bfa51fb58cb6f4b436fd53f0dd28137fa04a121cd5a3bc97afa39cb1ef4c876114923c14783dbcc1

    • C:\Program Files\Java\jdk-1.8\bin\javah.exe

      Filesize

      581KB

      MD5

      2800e6df96d3bb68c39686269fe0ed9a

      SHA1

      fe334213b2949d5e325e84b8c699aa78abc3cdfa

      SHA256

      1ae0f669f8c36be8d38880c241b112b8280b42f8af9a9c2f79926d359d5217a0

      SHA512

      a136f843d3cca03d87e331c0a5c7e6549d16b85340f2a339600c1a6adf4f0db00d44f4512eeddcb1f42f81d08933fc45081e94fc922b5caf8b29ef8810e2a5d4

    • C:\Program Files\Java\jdk-1.8\bin\javap.exe

      Filesize

      581KB

      MD5

      e2a070ba4905d42dcbdc93328311181d

      SHA1

      790d072bf2019b4d497a05d04c458b0ab2222588

      SHA256

      6b91d61611c5b901f9fc8de8a08549f689370619715bdb76f2e581e8d5ab525c

      SHA512

      014642ebb7bbd531a025cd90dd549a348347e8d23ccc811fbc2948ff0b410af93b87de9f50835d75ccedf66e74244b11cca6f5187eebefda5b1578d0950948f9

    • C:\Program Files\Java\jdk-1.8\bin\javapackager.exe

      Filesize

      717KB

      MD5

      732db7dc2fc61d2a2f64c26b32b45bac

      SHA1

      03a19858122a672a0eaf15d3617e55dd93dfcb01

      SHA256

      a3994d5d71863fd07eab1d58f48c65ae765d84785fabaab2a1d0e6c2a88da52a

      SHA512

      6806a1acd0501d50425ac9cae0ac153a53ec7968e897d4fa17358989bfdefbea61fc1f8ad86c7dc14e421a71db930e2aec632b7dfdeaa0fd155f510434a6579d

    • C:\Program Files\Java\jdk-1.8\bin\javaw.exe

      Filesize

      841KB

      MD5

      4701b9b3145986420d2a727d522ef0ce

      SHA1

      693c08e384dd48f30c99a0b487675ba6da2dba2a

      SHA256

      cf75d5f4ed5ad2f1b94ddef7f26f35864593f7ad9a0731870c7b607bf7fbaf5c

      SHA512

      80f0c77c8e75da791d22953f22e4d1bd18b56149b1cf4496080a35e2862cf194b743b73e6c19e05d38dd4571b0374a9e9475b6742cddb74ab809268763bdf5a8

    • C:\Program Files\Java\jdk-1.8\bin\javaws.exe

      Filesize

      1020KB

      MD5

      70a916d9cdc38b224520526b0acbda44

      SHA1

      8876124da51afc93659d1f3522eeec41ab2a5a95

      SHA256

      957ac3a45e7a6e5a6f8a8de7d988c489ae218a9c24ab7e5229f62d21c73c7724

      SHA512

      f7242632d53f70165fe40483ba5b73e7033f536a318ed37e19ed127a16d3cc0b125a470b1eca241d0d2c5bca6948523fefc0fd5619c4a93510849462b927f563

    • C:\Program Files\Java\jdk-1.8\bin\jcmd.exe

      Filesize

      581KB

      MD5

      0a70ad459f3d7890dac1891b199811af

      SHA1

      1889981e606408b947119d2cf9db4a9a28145277

      SHA256

      6c72aecb995a23631b53125ac9014c089544054eb9ac57452c5f1441f42529e1

      SHA512

      bf65eabb14671cf72fde70d6e9c4876236e58ca127b0071e312bcb047a73d733a76949da4d72c16e6fda7a7ec98f311a5cbbd7193899889f843fa8923d67ed2a

    • C:\Program Files\Java\jdk-1.8\bin\jconsole.exe

      Filesize

      581KB

      MD5

      86c72d2f351114cfa2f9a8d6edda5b09

      SHA1

      0101095d93830909c7695a29c223693ee7b0f30e

      SHA256

      9788ade80c08e18f14afc3eb4e92345091e98832a69debb93bacd2e4b621a004

      SHA512

      53cca505046c67d01bdc03cc9c6b96f7729c04d8bb00a85be0c262f2657137c764262c7fa6c1632c7124c147245e8e789704dedbc06f5e0fd6c0ff3d40ea2057

    • C:\Program Files\Java\jdk-1.8\bin\jdb.exe

      Filesize

      581KB

      MD5

      39a0d3d1c1aa1052714323e393ea94fa

      SHA1

      0b8476e52b57023ddbe5364d2961490e3e8fd3c0

      SHA256

      bf47fe58ca3e8c01799e5cb1dcd2047581da08b0dfecd8c5d31c56a0fda55c90

      SHA512

      650f0f8d84306081fd3b1f4032bf9f30c6a27e30537205fa042d679c806cb0d0670b843a9c731304d9ed21851627c06cbea18ad27ae0fb9d8cab6c6c41ad03ca

    • C:\Program Files\Java\jdk-1.8\bin\jdeps.exe

      Filesize

      581KB

      MD5

      c45d66a8064e639d5987e7ba1affee68

      SHA1

      4da7ce82c8090eb3144c640d23930f056bdcf409

      SHA256

      168e2d586360e285bff9e84e4c1696be48d130b2cf79bff7ffa74608388074b5

      SHA512

      9b379a589d4c915454847f43b547776fa3e5df951562a452f8eece6feeed7792e0222338b0113419d1e213f2c5a570705280edae5a90a2261b178c0523d063eb

    • C:\Program Files\Java\jdk-1.8\bin\jhat.exe

      Filesize

      581KB

      MD5

      79143d9d960662defe01f1a47fa6eee2

      SHA1

      7bae550392f39c6bbfd5dcc21260c16cf778e70a

      SHA256

      b7dec0eb13d9adcc5b6c28b82265100c3b97c833550e9a59c9923d4263f70224

      SHA512

      ba4696fcba3cc86ae6e187a804ae757888ace2d8b440a10365e15f2d8200b87244be71dd27e9cf5003853b6c37868c8ded7d949ab75799ed6d62c1804e5560a9

    • C:\Program Files\Java\jdk-1.8\bin\jinfo.exe

      Filesize

      581KB

      MD5

      4a8b1907b7873a91642ee85ece0aef1f

      SHA1

      e1426e6ead7cef6c34dd19fcf348d0bdb983c9dc

      SHA256

      8c2d05fc3a33f6bac6e9c054c07606e8f6c20c0731c2bfe721fd03aa966d8eaa

      SHA512

      72a278bebda295c2d154392e76b5262603e85ee30fd5763b3c10dc52926d7ebf4af2aa0101b717810a77878426f03f6d012cfef2f9bc51f45f31a6263ebe5c68

    • C:\Program Files\Java\jdk-1.8\bin\jjs.exe

      Filesize

      581KB

      MD5

      9567714c354034a539ad03419881a8e6

      SHA1

      9cbe9a438f763efa224c90365d53cd9cdf23984d

      SHA256

      524974abacd6ee30125644972385ab5ef1cab633c4d454b770cb8e0e30eb150f

      SHA512

      89c3256240f65d9adc08ae9605742074b7846a9a194465bbb75c6286ed7dae4cfe538dccb740be60262ae74e75518e22060f60f7c95ebcc2f2b2d23934485859

    • C:\Program Files\Java\jdk-1.8\bin\jmap.exe

      Filesize

      581KB

      MD5

      693429c9861daddb0322393f5febf272

      SHA1

      ba9f703a8fc777708d8cac2af6c152c95bf58760

      SHA256

      79e4dc074d1098da39f3c68a3a04c4da31bdacf5e8f2841adab20ea4fb49262e

      SHA512

      b3f38fa09e25a8fd437df451555bb2687a8d484bfea1bbee66ad129f8bcecb8f62ad215ee999f0cbd2d8d76a3376a823e61a49b17c6befc460c613cc96077230

    • C:\Program Files\Java\jdk-1.8\bin\jps.exe

      Filesize

      581KB

      MD5

      308eac80af28e3589d669d556124b79e

      SHA1

      939cc2a0736e2363c3c221d7da7d8bbb3bd42ddd

      SHA256

      805a539f22904d646c388b6ffa44a897b3b697c1898d7eb288867dce54806a69

      SHA512

      38b97b7eb94c0571f6ff44d275002df4e31756c1442494626f778f93cc98596dd50cc20151a7e1e20f8a4c99fa91e333d2ac1132538080950933ff9f792e54c0

    • C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe

      Filesize

      581KB

      MD5

      618f945c75f6f0fbc6d63e0073eaecc2

      SHA1

      33df01685583557c13dabce410505cda28e44b99

      SHA256

      9d5882f4b970e158ceb3e2ad4a424c22734e81810d1ab367e00d34d641ea4aeb

      SHA512

      d5e0af18ae4dfa9041496bb0b0346d9413c7111230b4753d58a1d490c211763fb82bd6e28dd8f5bcc3d06707099c9a0c7abc907655b92f1c260188fd1d16db75

    • C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe

      Filesize

      581KB

      MD5

      2bca22f3b73f12676cdc6a42295a3e85

      SHA1

      fec55225774f37b8b3a7bb7215bf4c1940b0b819

      SHA256

      0dfb75803060c3cede9001e1e0f7ff68900dba8e1564c2a908aa46dd05c1d569

      SHA512

      c68ad27d4fbe29f01c019e78373c7a54c0f8fcb2cdf04b84a3f7d018c1e0ed4c03af33298fc7837975aa1adde2ba4e9276fd06c5761e96b22efcaddbd5c839cd

    • C:\Program Files\Java\jdk-1.8\bin\jstack.exe

      Filesize

      581KB

      MD5

      aa5d12aa870462278f5ed75a8b543d8c

      SHA1

      14376e696415706223ec37b59bb15aab68862173

      SHA256

      c3053576437d92b4c3bd955cfe3344cb76b5b94dc8c146ad006a9200d596e566

      SHA512

      f2e01b9b5fd0c83335ffcb762b413efe6ceef1b01b819666d827cf723fb89d066d6a179b5526fc304e9be8d4d924478005f299ac84d62fb523bcd0cef745530e

    • C:\Program Files\Java\jdk-1.8\bin\jstat.exe

      Filesize

      581KB

      MD5

      bfb24c10677c3429bc6e3440812038a4

      SHA1

      2bc7be951d7a876ee16682ba08745829ff07d690

      SHA256

      4177db363cda7d48bb10cae7c352b7e30cd26853587d25bc58dca77ef78b96c4

      SHA512

      54c5b7f27ce92f0d48b7bcf9f4f1445807e64c949dfb09796bd3c7e7843d394bf3ac461f2b844e65e0ded66f4fe79385e5d995583570d788e9bf769ff6b2f889

    • C:\Program Files\Java\jdk-1.8\bin\jstatd.exe

      Filesize

      581KB

      MD5

      09bc4c1e184b5d06f4a14b19bbd31f03

      SHA1

      f1fe1ac6d764e48debe7c2275ad9d45b4885df1d

      SHA256

      4543c51a84b16033b47c75bbd90723427b321933c623163a511b0fd359985bcd

      SHA512

      760f20d7b1a9da0b146de5d6709e71e474127ea40a2244aeef371fdd26452a03d437c49f569776f46721facd77c8ebd9c73e82105acc86f4a6a1d06bf393ead6

    • C:\Program Files\Java\jdk-1.8\bin\keytool.exe

      Filesize

      581KB

      MD5

      5d4065d7c033dd53c8b2ce581c05c1bd

      SHA1

      c2eae478d6564cbf740051a0f5209bd285048b1c

      SHA256

      ddef9ae2e82f588e3f0760dab7af5a960b8f0280aa89de1bebb575a19c8b2ef7

      SHA512

      8b63996438b44d589f12b4b3b1982a38678ffc8cfa7fa09e024acaf3a54b5b35b5fa05f070c91f9ae8f7f12e13d476ffa5baea3c60e12cc8be279da2d488e8e4

    • C:\Program Files\Java\jdk-1.8\bin\kinit.exe

      Filesize

      581KB

      MD5

      ae5de3085d7914f41eab79499014ac31

      SHA1

      b0e5e3dbb38bbc564247e8de5073b1b5c98d1c70

      SHA256

      54db3caa3ebae49b37a0dea8684f39eb952e08cd59d6ed49fd8fc8a3a216ff5d

      SHA512

      03d5257b929c03b2585a12e15c63765dc6e8f50a8edc98daefe8fd1c044e06d262d98bdb98891e8fccb2e2468512aa9e2d89c2ebc87d1f59b9dc5322dab339b8

    • C:\Program Files\Java\jdk-1.8\bin\klist.exe

      Filesize

      581KB

      MD5

      9d960cfbbeab909e38d579e676e462eb

      SHA1

      51c500354cbbeb3accc1daec6e3ef2e574fdb6bc

      SHA256

      ea3d8f0e881a8f32d50cf6e3121187237e241f261e8cc5aa6af0471892e3ed95

      SHA512

      0a37417397e6e27e421e7e610d277b5e8b2989bf8f4ea7f8e14c531622bcbc50da5b90c1854d28fef22814fb033494fa011dd45f22177b2c002755e9d103e88c

    • C:\Program Files\Java\jdk-1.8\bin\ktab.exe

      Filesize

      581KB

      MD5

      2e67e07cf1910719ed98c6c11cbc9316

      SHA1

      09447304afe0cc014d1639d03772c07e22eace1a

      SHA256

      c9b06e91631f2ad32c094580d75e53afad566640f4e554cf036340671fc72e3a

      SHA512

      1f4204169889e83f7fff8abfa3372d6cb89b98f2b1204647448fa95b4c54814b76c84ced0552a895f72c36667d8700a09d23f6dfef614792cd962d65016d9400

    • C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe

      Filesize

      581KB

      MD5

      b97f0f1bda807f693ccc3d9bb1c67e21

      SHA1

      874ac402327555db4db45a173d1f518908e0f8d9

      SHA256

      e345a3041c0d78462a45adf2352a4f5e1619d232325caa80b06ea650b9b324f3

      SHA512

      171ba38dce620520af6829edf61a42ee40fbd41255e640f2fdb8d867de3295dc3f2d33f937d43f06159588668069ed14d4af7c72e2c3b1afd8c5b273d3d0820e

    • C:\Program Files\Java\jdk-1.8\bin\orbd.exe

      Filesize

      581KB

      MD5

      eedc14071aa117e7c790ca18a812c400

      SHA1

      687c7b07266efffa4e6e2578752b251a24227b53

      SHA256

      5b3c1098bf348e1d29847620a71aa08d86dd7fc00d0b40bf67527723c8a0c5b6

      SHA512

      5ddcf2291d63d43fefc56fbdefa76a94fdac36f318b25efe1e70c65ff03c9c5f5f31c58d6e7068972f28082e1442b841b1efbdadc84664861cfe318f294e612e

    • C:\Program Files\Java\jdk-1.8\bin\pack200.exe

      Filesize

      581KB

      MD5

      aecc12a580f3e0291a9af414f47ea770

      SHA1

      7bf6a4daef7db5c99aa8eafdd88f0574cd927af4

      SHA256

      98387397ad35c3bed1a66c22ccd100895f911255bb3cfa982289410755f68780

      SHA512

      668453ed360d6d1f2ed5b695c75d9c735b8e1926cd93d1ea17f63f803ad52dafd2f88e878cdada34d02a7a14ed2a85f31f921d5e5d10325e9e83967acfb33142

    • C:\Program Files\Java\jdk-1.8\bin\policytool.exe

      Filesize

      581KB

      MD5

      7af4f65fd54b5705b4143e766771da45

      SHA1

      7ad8fdc7131ff286ad2d800b7bffa125533c109f

      SHA256

      bc29f1c421194e4b5a6c490dfd5b4c123701f8027e61ee201195e1f3e6b92d84

      SHA512

      bc8df48e09ff767c59bad646f9680171a4a431014f01a8500f91effd7016e5240118a1d3e47c61864ba3c94f585b9f422fa37a5106d7c1c82179073057b66070

    • C:\Program Files\dotnet\dotnet.exe

      Filesize

      701KB

      MD5

      0cb00e33fbf85f65211a43f7cef3609d

      SHA1

      52acd9b74ec0895712dfce7dd23ae84391552a6d

      SHA256

      9f460d0a14240084909c7e8eea21e232c2180035f35614d3e2dff07f6dc2e89d

      SHA512

      ff5088daca84dd0912da7ac064620949f98fe0d2f274a5969f20048280156c5b1a8b7354c7ad6256e7a60dd6feaf43108aa2d55cf2aad4d9d83e4472bd485ab6

    • C:\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe

      Filesize

      659KB

      MD5

      14fedd67cd073e15ab39a9c8a4878d15

      SHA1

      906ba5173b83ef24a478cdad9635833c2a3db102

      SHA256

      089990a2b18aca3f0c8e1d4483c7752e1b3c18051db935f109dbb11c8950f1c8

      SHA512

      987d9cd93a77cff67602477fc77d8e7089b9119954f07e949091ef398d3b3cdc6c383a24e98d81d4ec01434dddba37665144aea90f77abd1a05ed036cc26e956

    • C:\Windows\System32\FXSSVC.exe

      Filesize

      1.2MB

      MD5

      2c0270ae3c2f1a7469c2f70e08bb96da

      SHA1

      b8b9bfdef6e72a828c122ce348611d4841cfffdf

      SHA256

      739207b557a60925a946bbc12a85676ef43e8144beb9574c4e9a9ac7e8406c8b

      SHA512

      05cd163a42650892b7e675b1cc7b858b46730ddff3af6c7a6fb8f0e85aab0ddb8e72ee83a022922cb5e1caf88d14df869ba3fe13522dd9a4f0b0b9ebef820336

    • C:\Windows\System32\alg.exe

      Filesize

      661KB

      MD5

      d73b165756e26e1f3ca55404e0ad6f2f

      SHA1

      c46bb6f57333a40c409066ffad0874e1f86f37fc

      SHA256

      62c62bb51998e30919df8dbf4b7e42253db7f3c9b3bce74e12b84233c1bec78d

      SHA512

      85f81e92c0c94c4a94897cf7350273383d84b7de3d57add71a870103bd93224d79852856546e130143fada3130d99a527a20ac1fd3d2c107de653e43b272687a

    • C:\Windows\system32\AppVClient.exe

      Filesize

      1.3MB

      MD5

      1afa03c5732c4839fcc3c730d5dc9e4a

      SHA1

      352ecc09da4cb7a34ee80dc4357c70777edd06a7

      SHA256

      9ff31b20045caae3625ef305bfe6b7bdcc7bc9c9af218e4272e64cf7e44726f9

      SHA512

      a05c727ff3a5661c258069e7694c8f48caf43884b8531cd2e7e162fab38ee719ba0fdf18c288d1c7ca1a5b826ecccc2e83ae85b406957a66066a6b07536335e6

    • memory/336-50-0x0000000000510000-0x0000000000570000-memory.dmp

      Filesize

      384KB

    • memory/336-249-0x0000000140000000-0x000000014024B000-memory.dmp

      Filesize

      2.3MB

    • memory/336-47-0x0000000140000000-0x000000014024B000-memory.dmp

      Filesize

      2.3MB

    • memory/336-41-0x0000000000510000-0x0000000000570000-memory.dmp

      Filesize

      384KB

    • memory/740-61-0x0000000140000000-0x000000014022B000-memory.dmp

      Filesize

      2.2MB

    • memory/740-252-0x0000000140000000-0x000000014022B000-memory.dmp

      Filesize

      2.2MB

    • memory/740-53-0x00000000001A0000-0x0000000000200000-memory.dmp

      Filesize

      384KB

    • memory/740-62-0x00000000001A0000-0x0000000000200000-memory.dmp

      Filesize

      384KB

    • memory/2036-34-0x0000000000740000-0x00000000007A0000-memory.dmp

      Filesize

      384KB

    • memory/2036-248-0x0000000140000000-0x00000001400A9000-memory.dmp

      Filesize

      676KB

    • memory/2036-25-0x0000000000740000-0x00000000007A0000-memory.dmp

      Filesize

      384KB

    • memory/2036-30-0x0000000140000000-0x00000001400A9000-memory.dmp

      Filesize

      676KB

    • memory/3752-88-0x0000000140000000-0x00000001400CF000-memory.dmp

      Filesize

      828KB

    • memory/3752-72-0x0000000000C10000-0x0000000000C70000-memory.dmp

      Filesize

      384KB

    • memory/3752-66-0x0000000000C10000-0x0000000000C70000-memory.dmp

      Filesize

      384KB

    • memory/3752-86-0x0000000000C10000-0x0000000000C70000-memory.dmp

      Filesize

      384KB

    • memory/3752-65-0x0000000140000000-0x00000001400CF000-memory.dmp

      Filesize

      828KB

    • memory/4376-0-0x0000000000400000-0x00000000004B0000-memory.dmp

      Filesize

      704KB

    • memory/4376-1-0x0000000000730000-0x0000000000796000-memory.dmp

      Filesize

      408KB

    • memory/4376-8-0x0000000000730000-0x0000000000796000-memory.dmp

      Filesize

      408KB

    • memory/4376-38-0x0000000000400000-0x00000000004B0000-memory.dmp

      Filesize

      704KB

    • memory/4412-285-0x0000000140000000-0x0000000140135000-memory.dmp

      Filesize

      1.2MB

    • memory/4412-257-0x0000000140000000-0x0000000140135000-memory.dmp

      Filesize

      1.2MB

    • memory/4412-259-0x0000000000DB0000-0x0000000000E10000-memory.dmp

      Filesize

      384KB

    • memory/4740-253-0x0000000140000000-0x00000001400CF000-memory.dmp

      Filesize

      828KB

    • memory/4740-83-0x00000000007E0000-0x0000000000840000-memory.dmp

      Filesize

      384KB

    • memory/4740-77-0x00000000007E0000-0x0000000000840000-memory.dmp

      Filesize

      384KB

    • memory/4740-85-0x0000000140000000-0x00000001400CF000-memory.dmp

      Filesize

      828KB

    • memory/4812-247-0x0000000140000000-0x00000001400AA000-memory.dmp

      Filesize

      680KB

    • memory/4812-19-0x0000000000750000-0x00000000007B0000-memory.dmp

      Filesize

      384KB

    • memory/4812-13-0x0000000000750000-0x00000000007B0000-memory.dmp

      Filesize

      384KB

    • memory/4812-12-0x0000000140000000-0x00000001400AA000-memory.dmp

      Filesize

      680KB