Analysis

  • max time kernel
    148s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-06-2024 01:23

General

  • Target

    2024-06-07_17a3155a11d08a95b334b0e1a9f9c051_bkransomware_karagany.exe

  • Size

    1.5MB

  • MD5

    17a3155a11d08a95b334b0e1a9f9c051

  • SHA1

    000f1a218fd0fb18d855ad9d5718ceb3184d159c

  • SHA256

    bbb51fbeed6e7fd9ebb4a1fb77f9f9251c07a6e7cf41488bd67186427af491f3

  • SHA512

    7a9e11e84795c7ec55986ead425bdef8c4ba07c155e5d462f8142f4480ef687a622b8eb02ec17822aa729023e81e19c056765589c7006093a0eff05c6cc04afc

  • SSDEEP

    24576:0k1q+L6VMRCPU6CENltmVVdpx7fLrQWd:0k1x6ZU6CENlc7dpJLrQWd

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 6 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Drops file in System32 directory 9 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-07_17a3155a11d08a95b334b0e1a9f9c051_bkransomware_karagany.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-07_17a3155a11d08a95b334b0e1a9f9c051_bkransomware_karagany.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:660
  • C:\Windows\System32\alg.exe
    C:\Windows\System32\alg.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious use of AdjustPrivilegeToken
    PID:3316
  • C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:876
  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
    "C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:2132
  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:1484
  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"
    1⤵
    • Executes dropped EXE
    PID:3656
  • \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
    "c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
    1⤵
    • Executes dropped EXE
    PID:3056

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe

    Filesize

    2.1MB

    MD5

    0604239c7bba28ace41e578610225e5b

    SHA1

    9bf10784a6ce34f6d10b12d703b80fedff785a4c

    SHA256

    06fb75a5ea9a4b40f671786eedb657e8d9daaf798edc470885fd7ecc2097b2c6

    SHA512

    6cda1e6afedc7ab2d4d66a3438f3bab9a4f133292837851944d691e9c61a6e911a270e96a75d2aac710d57a04a7c43bac3852493b564992d31c561c61d87da74

  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

    Filesize

    1.6MB

    MD5

    a0a7b89260a8b815e71e59f425d31761

    SHA1

    7eb745f4b59f53756c55f43ebe953fbcf07d1ae6

    SHA256

    9462e775b994a4aa0af75699d00d3838c4620de5adafcdd590d3f5edac2546d3

    SHA512

    e23a68ec61c978ed8cc80763dce254178b13bf05ae079da67f17a2426c3a3b13d0b7345c01ef164156be29010f4344f5b5597c8186bee83a87fd7d9872f2de3b

  • C:\Program Files\7-Zip\7z.exe

    Filesize

    2.0MB

    MD5

    5ce6b0c286f9330d5e0335383f8f23a3

    SHA1

    dbffe6beb7c7b94448475d40865843db7e795cea

    SHA256

    993dbbbfcda77fef3dc5177a15daedff78b9ea87c6aebbf50eac1f442c5c507a

    SHA512

    672656a9313feef7a3bebc121120171788cd175266628ccc0dd0f85a8fcb4ad21f721a6f7387acac21e5bd7dc413d0bfc71106820742ff89029ebb279f92b763

  • C:\Program Files\7-Zip\7zFM.exe

    Filesize

    1.5MB

    MD5

    e876cb53000625b757da058bd1725e11

    SHA1

    e2585df8a30191ef0f1eaafadd1b1d034849a25c

    SHA256

    172f221fe57957f09cab6fd70f7bec3294f26b1dae20ef0b98333c68b60b36c6

    SHA512

    8cc4fd02c9ad3083605985840c65a54461510d2ff14b1532dde8a6c7462544a513fade4fa17c866571c4d1db8ca0f41d6816bea7449ec1a4efbc46c272808784

  • C:\Program Files\7-Zip\7zG.exe

    Filesize

    384KB

    MD5

    7ce6ae2454b7afc849538b7f8b7dc2a9

    SHA1

    5ec5a1f1908fdcd2e926beb34bc30a8481484dda

    SHA256

    fabb1dd6a823ca1cde018affa925751494c0720ca2a54a4ff4826ad10f82395d

    SHA512

    e5fd57150dba9617fd79f0dbe0c5e9e5838fdfd5f90ad2e5c09a0619fb23bcb6e15cb5a2ff04928ee1566d91a5ec8b9982ffb06afe72bef9a1fe08ae5f241296

  • C:\Program Files\7-Zip\Uninstall.exe

    Filesize

    1.4MB

    MD5

    c93e541dac7b7a6ea470eb77562e7f41

    SHA1

    c90923a3f3da35bd9b7b1ecc66a02fcfc4b386ef

    SHA256

    c7f7a75161991cdb303ccefdff27d20804b2acfd5aa05866d6784eb847ca81f2

    SHA512

    2dc482e42ccfa8c9f478a7e3374fe59f6249a695e2533fd151998abf0572441051ad43fb04e615982a2d9ab677f8d1b5f2bad8dd88b8699cf431afcea6e9d2cf

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe

    Filesize

    1.7MB

    MD5

    bd87e838b29f8c6f2eeb61cdf1c18517

    SHA1

    4c920d04d7ec7fe73542a516a95a9948e549affc

    SHA256

    8f0abe322700492ec7d030bc5baf8faf05d42fcc00c9eff9d887b713ad30d05d

    SHA512

    d7d8a23f1cd0646dc3f1c3b1f05029587724b8b25fab5c934e1302b4544bb272fbda953fedb7fcbb3c8c5621d09d989d867c9f73644e813bb70e8c55bac7e015

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe

    Filesize

    448KB

    MD5

    0ee4136a47ace9cfbc60ecca17c10cb0

    SHA1

    659e151445c25897568f51a38412076b6631e5a0

    SHA256

    70be3a8261be1f7bdc3a9a170a4bd1f91c40a5380c97b9ccadccc1ef5dddbf0f

    SHA512

    eb7012f3b90816434a2ba5aab64b1e48555c25670c2d65ae3ccd0b9c983f276da11d909d6d0a6725f6914cbe386802d7dddfd6a258ab88a36f3ec1e9a9ad47af

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe

    Filesize

    1.8MB

    MD5

    791d055553b5ece628436a298f74d2d1

    SHA1

    550c3dee70a400ed06330ee9d624bf05cc8fd308

    SHA256

    ba43940f680fa6b06607facb718960776debc3e907cc5484a9cbd489f86b8edb

    SHA512

    fc6d58dfbeb310fb467895ed08b619fa4b1edda2f27db1f2c1e4b18e33ac45f5ee06a8dfa351d09436d6a027dfb74afc86fabcedbf20dd86c7c630738f283c10

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe

    Filesize

    2.1MB

    MD5

    ea2eff1202b3cf5c95eacaf3955a74a8

    SHA1

    92311b4e2d47ede1f0fd7c99019ae214e0863ee7

    SHA256

    96f90cbbd6098e2bace69e8b147a5d291c7ad8ff06bece1c52da028d4bdb948c

    SHA512

    7dabb22a7cf7cac1f7dcafb2926a36931a5f06eab59bab293299b4ec4ffd00ce8b68d5a75fb781950fe340249e1b9e648add184ca26fd8c36cab221147dd871d

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe

    Filesize

    2.7MB

    MD5

    396212e52a0eb7f3f7c64a39f776dae8

    SHA1

    da133c579d6dea8f44c5025b5908d9bf52eca363

    SHA256

    64b4f59b881a709c149e2007a8bc7cef6771069a9edfc0cee2798de8b9f0ac02

    SHA512

    f640a3abb61ca3cfc9b2a3f494ac058dc0aec5114b7983a6e51fc62fef8479f99ecfae2a51171dd838e6464d128fe602e739aba1151b1ae77c519c8b5c66300f

  • C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE

    Filesize

    1.1MB

    MD5

    09ec53bd826809e078e18e5485b8af5e

    SHA1

    ee2432504a55c2ed9511ad7ca052ec03075342c3

    SHA256

    1c8ac392f7f3072ba9ed2107e18b52c540fd2d554ce80398a270cb07ab8e8e09

    SHA512

    53be6aee701bdf7fd157f282cd7a40f5f6318c6a53c7bd7f107fe06bc52949886c26510101821c56a70b78df1b91690d472397d773a34784bb2cc85c734646a2

  • C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE

    Filesize

    1.7MB

    MD5

    04d32494e2adb114babd850e56b0323a

    SHA1

    cfa41ae1b97bbad0552519004a8baa139aa428fe

    SHA256

    e07401231dbb96e3d140dd6f54de8acb3a3fee10080d7a294c448ca0fbc49e91

    SHA512

    bef9528aa261d56ac5c2644cec234bf49cc4f84f69c6ea7c2cd7934fcfc382cb5787204da12e8b00b9098e9f3afeb678291360516ebac1edf1599b784e2254be

  • C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe

    Filesize

    1.5MB

    MD5

    3fa16775c56d0401f519fd813ee52ee8

    SHA1

    71c6ed8c02694e81fe6adb55a22e0bc1b4f4b41a

    SHA256

    1604967ffc06910018d61843c08bbc6752cc9cccacccad42f7bce397fe577604

    SHA512

    b84390392e77f9cd7784e79da4c50f15354d1b30332459235987719f463176ffe2e5ede483a7c97ce96361369ced37334e20a82f3cb890ad56c84384056cd89c

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\chrmstp.exe

    Filesize

    2.1MB

    MD5

    5c510615eb2a0abd35095724a939bdde

    SHA1

    330276a1c4bda67ea4ffa2deeab2959ea536dd8d

    SHA256

    d6a6e071e89432f4d0df03d972d712b2910eaf0c05c36a29b99de09e81c8f96a

    SHA512

    7706c23b08eb5bc5cdf72ad9102c0fb5b2c5813a7bc815f1fefbfd8535189002a3246ee2f68f3f7fb7f45210c810b8f5af1fe2a9eb2966b5948621408ef291e1

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe

    Filesize

    5.4MB

    MD5

    0ab3cdd3e03242f2c3d2b853556f62ef

    SHA1

    61d1fde35652a771a32eb0d46e80341c01343750

    SHA256

    8b23bbfe8139e23a4063f441da4f0a209d78a37cb7fedff29fe8d803ba5b613f

    SHA512

    84cf4c98612f27baa335018ca957fbaa652c68019d2adc3d793be71183bedab6deac8a0d1d1db80e6120408fd4b3241bf55ec19e67c21bc1b99542784c46b039

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\chrome_pwa_launcher.exe

    Filesize

    2.0MB

    MD5

    0cc5b70d40c7913c139699df0516ba57

    SHA1

    90600fc15413f21add94fe170d278009954ce6ee

    SHA256

    40a728b23240faa0bf89ef40488eccde81d101004720480521121c14b4e4b56e

    SHA512

    91064a6e7ab5e7939372385a0735ea641438226d94bdc61aa4186a6f11d38c3b4c71cf4f050034ed1a518ec9a7d54df492aef06e42f0c4744a747a9da6999754

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

    Filesize

    2.2MB

    MD5

    0f40ce999167a93c7533ce08a2d7f896

    SHA1

    a43af9d52733e1a364ca1b0920710ec58aa7ba05

    SHA256

    91edfd27b8fe3601c1bb4315a29e3aa0477e1286169a1990df94cb439fbf7598

    SHA512

    d1ab6c7f011f02ec04c95797e506d273832151343e8b4892266bc94e9b4e42643fc89f0e09ddd1bea6d5814202c07ad47e05b33c48acf6e137d4ad4f6310b285

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\notification_helper.exe

    Filesize

    384KB

    MD5

    512b3e90890d6db3622f3605291737ca

    SHA1

    2b644fa4db6ee2bab0b7988f97b9fed71c850150

    SHA256

    72ee0398cf8598b63e2e015408504f8a92be8a31799aad38bcfea98e122a0cf8

    SHA512

    bf58a4af97d863405b636e2faee641d02e18367374417397ff61c45a1f0950ad9e38109747d5490a90be9f6bb63b4fbe50df116054708264458fc08e613372d4

  • C:\Program Files\Google\Chrome\Application\chrome_proxy.exe

    Filesize

    1.7MB

    MD5

    ebc56c792f58092ded4b840546090238

    SHA1

    89e1045dc05d935dec1db8fc7bb17f62c11f6728

    SHA256

    6a0bc75d8b1972201de5d4debfed5e1d9e1e67f25825883e42070b2d4426fcbf

    SHA512

    62fc7885ee0417cbb90d7c4ecccac6a3af45df00a43a7c277b2355ce138c277e298d3a7878554783f2970d3c3ec8f28f2dcd34171f446d81fa4cb8507611a853

  • C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe

    Filesize

    1.4MB

    MD5

    c011f0cff1f41622e639c3504d7c56da

    SHA1

    1a0deca6ac6a0e1da0c3b573b191ba2ddc9c6c4d

    SHA256

    a4cd93f6b44942b037f60c6edbedb0ba8f863587e61ccdf6654116a1abe458f2

    SHA512

    ec75baffe5e5b71ea2df7545b8321ad42a5a26fcd73ccbb94f369a61a29b4580f8756b2c5214ffab79a6b8a2df982f706bc43a54bef9e3e7ce9e2a8a1a1932c9

  • C:\Program Files\Java\jdk-1.8\bin\extcheck.exe

    Filesize

    576KB

    MD5

    418b584d018c79d8b960356f9af3cf1f

    SHA1

    09b09ba751e8683f7f5f566aeae52185e695f1c2

    SHA256

    94185d25751df76b5982bea0e03ce4b4f64d4b47136095cfc2efbf582d32314c

    SHA512

    306d3f5ff389b596ff06dd4aa028e1bb45d29832fce1a5bb2e3973398d0a2384eada84f3c0cf9f750d34be450ff4cd23908bc53ef2410254d7194a80d0ec6d54

  • C:\Program Files\Java\jdk-1.8\bin\idlj.exe

    Filesize

    1.4MB

    MD5

    00f0279dbaeb4c4882a64ca095dafe46

    SHA1

    7b756ffc9ad5f894a2b92e5f4cf9defac67dfc64

    SHA256

    1b38759d8e20f55e13224f9fa02f61751a62dc0e1d33727ef04c4f5bea792d96

    SHA512

    97f5c8347ff26d6d6affea66b41abb1ce781e02c40ced52e851635a50686331235cbf553a3989324b60931cb9ef3c1c00f66bc8fc57acd88f2c71bb02e590ef8

  • C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe

    Filesize

    1.5MB

    MD5

    aa1d80b9af500ce05b8f0832e608f16f

    SHA1

    0580807e86ce5575c7c99027351377c875e26f3c

    SHA256

    f00f76fa581818bc8f819b1accf0c9679226bdc53c4c92594de971929bbbd191

    SHA512

    fe40ce4fcb19663303f011eb7b8c6edaf29bf8dc5f8b2db482e9f8a8a1f3c7f899209f24c0bac4fc5201f2bd23918cbc0698fdd42a29ff7501eecc40880c2e92

  • C:\Program Files\Java\jdk-1.8\bin\jar.exe

    Filesize

    1.4MB

    MD5

    bc24a115981c438583cdcffa4c002260

    SHA1

    51787ec3634a8474dc44bc1040a89473f00195c4

    SHA256

    b17790babb1b382841af028cbd6ddf46b02464a50bd74e048e490dc1fe9f6bd2

    SHA512

    68bb0c9fea2ff1e584ce5c45c73ae0afe28451d3c882a6a951cd836e00a69a8dc5ac56a94bdb9a4cdeb0d2aa02d4dcbc1b5e7e882801d7e5493cad5661b395a7

  • C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe

    Filesize

    512KB

    MD5

    7efd7bd6bcc11b6b694189e87c60aac8

    SHA1

    cfa68b606acb792a4924cb7cf26f871b02497693

    SHA256

    180b6c186640bae343504b0f40d7c30aa47c36310cb52af7b0133bac6a0d1833

    SHA512

    c048241f2220395a61e0a5c28aebf1d3e3cc207872d722c95fab78fef87adff452293a149b6c95fab4d5ada4a0068c989a3d4940707348a7a2121ada1327eb1b

  • C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe

    Filesize

    1.4MB

    MD5

    963afef48a9b158728c8731002af7109

    SHA1

    a2f756bf53459535b98febf30383cb224f639043

    SHA256

    5f89c9d279254e7f00878e0eb915076b9e69c239ee923835521b31a83ef40b22

    SHA512

    c37712ee31ed225212dd36987c189f345e58ef9e820e037d5e45b774090ea9b5df95d738a80c7327880eaeb529aa16ae861f8aa2053367b9af50dc165a7d4961

  • C:\Program Files\Java\jdk-1.8\bin\java.exe

    Filesize

    1.7MB

    MD5

    2a65c077c0b56fbdcee1720e98f7e3f1

    SHA1

    9d6015a5d82ff720f07b4913a50e5935c7105fe4

    SHA256

    30a0831a5fbc218aa3e947e0e33f38c9b278752a4d70db853be80aed3ed49b79

    SHA512

    7c55028b54466844aae6cbd6bba571c3b47d80d07d245824011b129ece3d1228a66e733b2b58d4f43073c6562b9d1398be7c81442b69710eafce2f2ab966ec2d

  • C:\Program Files\Java\jdk-1.8\bin\javac.exe

    Filesize

    1.4MB

    MD5

    20f546f12ba84097d0ea06572b112fbb

    SHA1

    1d385dfb0737776ae1e88c0c4a7bf6eba7981f0d

    SHA256

    2be498854c1b18a9bd6bd554e35f0bb6d2d6617bcac2ca228c0cfc628ab97506

    SHA512

    df3e790e86bfe3d604da198ef1e58806cd7fc21a5e9e480295a81f39db9b19b3cb75ff6e1882215e6cb7d5304bc85aef9dd83a508cb86e09318ef64a196ca74c

  • C:\Program Files\Java\jdk-1.8\bin\javadoc.exe

    Filesize

    1.4MB

    MD5

    e74dc526b177bf996e6f558eec5de284

    SHA1

    496d0b7141bec4d2d471d1e264dc4b0e6e6f8547

    SHA256

    49ede687d73adec824b9146fbf6264f6d9b9a4393c116d707bf1ed5d9baf5ec9

    SHA512

    d2ae9783fd487739461db1d5e0203b98451aeeede511454cf2c1c50d544e06f4f566aef9ac7b95401de5823b1372c20be9b523b10c994939fa0358c5fe5c3fe9

  • C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe

    Filesize

    512KB

    MD5

    00dc258f88a83090ddfffecfc870c576

    SHA1

    a10139c23198a668ca26351cc3c2a5f160de94b1

    SHA256

    82538f8d0726baa57502151ae3409f35d169006a76c4af97dbbca13d9249ce6b

    SHA512

    4364450638948520138e79a14b93c2ea063829cf6ec188c1ecb248eb1ec856c265ff440d731a8d58b7c76e752e4a73906f490bf7fa3e2d5581da171c0b62be3b

  • C:\Program Files\Java\jdk-1.8\bin\javah.exe

    Filesize

    1.4MB

    MD5

    35b1b6c2b079e55b5f47e617e10befd1

    SHA1

    0d225b72b84c19b84f5a9103303611c052d3c7bd

    SHA256

    a5162c525c29da0639a9ab45b3917902ee0b41c4a466562d205ceae379d80cb5

    SHA512

    72819463352ef469ac22c8e6d31df1722c47f2d7703c04d1f85dbef3907e0a585ab1e23608e030e10f427c5a9df5ff95bcecaa2b7f05d6431046482ce31f81e9

  • C:\Program Files\Java\jdk-1.8\bin\javap.exe

    Filesize

    1.4MB

    MD5

    bad260d401e64c7a79bdfa55cf36a26a

    SHA1

    4cea8d18b84ef812882879b4410435c53329d6a4

    SHA256

    edf87578e9d64626f1c8a0bff67ff0f2d36368829df935ca5e055ac1b67919b8

    SHA512

    7a7e94eb776161f65421eeac8e7c77d24aa1ef95d726533e4c5435a308340a8fb30cc092c63b2105d52e6e35680584b2d5fc4f46b1caf6cdddb0ae3876f5f470

  • C:\Program Files\Java\jdk-1.8\bin\javapackager.exe

    Filesize

    1.6MB

    MD5

    c816133f1abb6f8dd08e99e455c18c81

    SHA1

    231fd1a2d6bddfaddef48b69571e9ae2d7094215

    SHA256

    b05631b90b75ceb124fdcfd4fdb7fc9812f9ebdfe3f75650e2514a98bd01ca70

    SHA512

    23c6bdccc5f41f4a38902c235379784c608cc60c652b28ae0addd8864f25b64bcf480fafe902473e22cddb30c52c9179a06b5eabe65fe7c43a44247678163166

  • C:\Program Files\Java\jdk-1.8\bin\javaw.exe

    Filesize

    576KB

    MD5

    e9fcf735384036198ab477119a8700db

    SHA1

    bac20c0fdcf34fc57412b0192cadd0a9dc011410

    SHA256

    3e8baf5fa3fd275fd8a18365fbfed3b56c563cafc061f6d426af37c3cdf7a3d4

    SHA512

    273913d47dd25c42ab0edac173f26812c77d3a87b282db54c9e5b6f821d4df1a7c13983479e3af23504d4ec4aac4873eb13322d1d014dec14fe9eb3f89a4a16e

  • C:\Program Files\Java\jdk-1.8\bin\javaws.exe

    Filesize

    1.9MB

    MD5

    ad73c897f7cb3f0028cdb1ac91cf4859

    SHA1

    0c3ea8fa9f48437d50117688b7f9a44747b831a8

    SHA256

    8d7d82c1e5ed094023a3889ad9c11862a4076f50971fd80219d839bd3a392551

    SHA512

    55dc6de3233433be7ebace17c33b19bb03d3b82582d68a7531b0d11bbf50c8b52fa9e41109945555100ce7c3976a840f2fdfeafa521753a6b637b8295105fdd5

  • C:\Program Files\Java\jdk-1.8\bin\jcmd.exe

    Filesize

    512KB

    MD5

    cd1dfb6d1f609112a1ffbdb1ddbce509

    SHA1

    3f1aef96eaa060545d8276d4e2018e70bef9b483

    SHA256

    4edc5531e629eb326b1931ed3f116dbfb27ee3c9ff858ed37c845b81f058982c

    SHA512

    6e4106a850a21c8f717bc4459bfb2b0d9518908c1ebc65aca7df05142ffc03e9463fa1c8dc9e62a4580b3644356fef9cb888c8a0939ea2d9362f5e5978d785e5

  • C:\Program Files\Java\jdk-1.8\bin\jconsole.exe

    Filesize

    1.4MB

    MD5

    7b63954543c1ed4171a43f58911fef15

    SHA1

    a9ddface4be843a95453272894a9ac291fe158c0

    SHA256

    b82b0dbe741d60af0dbb355cf122e8ff952fcbef0946a369980b66228f0ef419

    SHA512

    a0e6dfef05dd17e17202ffa05d7c97f955a60f9dd714d27ad6bd11c77f38842469227f52288c0bcc3f2800755cd88453bdde466d4b5e53254c2d6289c3fd1ba4

  • C:\Program Files\Java\jdk-1.8\bin\jdb.exe

    Filesize

    1.4MB

    MD5

    fed70f8c876b71aeced0247b0671a058

    SHA1

    0f4f1a3aba2a05c1d28117df789f6538c5fdf522

    SHA256

    4e1037702c0b2ef4739255d7dc85681b56d4516749200db28d635c3950decb75

    SHA512

    40139c939dd70caa6a44d72f011294988c4699f0f6162e8518f7ff0ed9cc7ed5092fad619a228ad44e6490de7567e061364999ebef8739510fc37be6c4925ac3

  • C:\Program Files\Java\jdk-1.8\bin\jdeps.exe

    Filesize

    1.4MB

    MD5

    4bfe4a84011eafa4c0730e2fea672ba7

    SHA1

    f6ce489304f5c6b3af20d83d17c5b7138e74fbeb

    SHA256

    068f93cf3673185af82e049c4cfc0965b4bdea0ab867deb8eed8ac4993406765

    SHA512

    8a77ce98af9f0d0e792e122fbf19d5327629b0a4f5218c640982117676a7cd7005e276fd6b978c19409cdad8ccd5d7bef87abc6c3f17a674552daaa053352a43

  • C:\Program Files\Java\jdk-1.8\bin\jhat.exe

    Filesize

    1.4MB

    MD5

    efd4be2a53f825b7ce2527fbdbde90e4

    SHA1

    d29062b01f0c45ec7db07307c0da40af0df993d8

    SHA256

    91ea7fb2e68d1425f2c2e228bdfc8b9c24e9bedf9169e6a0c2f3252010523272

    SHA512

    8cc48c27dde513b057c5bcc2b22791e2373871058d6d5db20f340b28b7996e9be643e38fe19c9a4545d9225a984028074b8b07aeeb9b92a3b583da3996ebadb5

  • C:\Program Files\Java\jdk-1.8\bin\jinfo.exe

    Filesize

    1.4MB

    MD5

    48b641ec696b5821ecacfcca13653b51

    SHA1

    d9e098bb53c70f29618c759afafc9cd1ed1a96cf

    SHA256

    b098889e3006f7587f598c51a8cfc4ded978a2c3678761f1755c61d20aef9c27

    SHA512

    a9a7fed00cbc3120c95c1d6e9956aad10be878e026a18986bf5f98089746fad32726a4e4803093287bcf143702a139d9ee30c92b8bca9006d58b6439d6e235e5

  • C:\Program Files\Java\jdk-1.8\bin\jjs.exe

    Filesize

    1.4MB

    MD5

    c5df538ff5b3b2954ef702244f59cded

    SHA1

    58346e5a00107db9064f854a3ab0c6e49364a015

    SHA256

    8c03439e3898187ad5ef21c916f1b34e73aa1fc91c76e2e5f9e6d44ab2abfcce

    SHA512

    d70a84a21c49cfb8b66bc64b844f625bb93128e0f3de0194ebf3cbc7a8fd7b0a6658452456c541fe71e8bce4d09b7f88b4f3d197480912cebeee08bb84f19d15

  • C:\Program Files\Java\jdk-1.8\bin\jmap.exe

    Filesize

    1.4MB

    MD5

    f9f9f3e04a40dfbfea84eff07b975bd5

    SHA1

    c4b8374b52412d866b3c373f9f3ba571d46a4eba

    SHA256

    939a56551f45f9b10f72161ef62517217d7a0b347452c298c6593647d7134069

    SHA512

    1e87bb5d67f27dad6d330015f8ca328e390cc63c1fa9b10ba19869e58e905d2ac93771bde330a91470e3eb12441878b0a54c49abebf3bb6bb182629741fe71fb

  • C:\Program Files\Java\jdk-1.8\bin\jps.exe

    Filesize

    1.4MB

    MD5

    4b7bd922029954be20ff8dbf08b8f0fb

    SHA1

    2e0eda80ad5eed640db7105573f089b2872b2107

    SHA256

    fc4e62b3930e19b2c118ea84a2a0a3cc26e0ea45ac0020760feaa96ac22eff26

    SHA512

    fecd722cafc644f590ae07e62fef016dcd3bd8d72726ed0f1f4e0f75a127f22b61de487acbf41410b8395d6b9dcb4d7394c547524be25f777944195a0a2ae9b5

  • C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe

    Filesize

    1.4MB

    MD5

    54b46a9c5adf48c6f47a3f2eb937d966

    SHA1

    c75027cea0d5f4daab754e4ec6d79807f8e6bbf5

    SHA256

    3b1ff7c1ec1aa3916030d5859632de696f022839be77e3c5a5c36bad0ee43f22

    SHA512

    260aedbd74cd0660d2d6199d6ea0532e728a46cfebf0d5fdbbe5750f73bba6a20479089113c36a93048c881caf7d6e5813f3449bd0541bac72d16f18aec3104c

  • C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe

    Filesize

    576KB

    MD5

    673a99c213072e713d84732f25fd3746

    SHA1

    51d50fdf58da1d490be05450326231d811981da0

    SHA256

    cb4ca364f25045c9993012948ecfbc5a3030167b0d7c7a78e2fa13fba1879b22

    SHA512

    06cd5b80957abdd6febebd6b3a3bed8f71a759dbfdd9582de559d1545f2d72394708bb7c0cc08f2e61436e06cb5fa9362e06fe78bc97c8617a784218b15411ad

  • C:\Program Files\Java\jdk-1.8\bin\jstack.exe

    Filesize

    1.4MB

    MD5

    461e25f29548e8399513aa45ce42aafc

    SHA1

    34c4870173d4f6af786809b88daa8e55fbcb82cc

    SHA256

    03f6a017748bf836d6a610c461c4a83670cd77fae664c48a7abd40f2d9b3871b

    SHA512

    65e106312ea6703833f34c962e3629aa5a3a9d964857081f0bf679dc04d578794b762bb4a596d9e7415a29f2c27b2cff59378a6f5ead12fe227a998cd2dab047

  • C:\Program Files\Java\jdk-1.8\bin\jstat.exe

    Filesize

    1.4MB

    MD5

    7cc395c936b6b0138461461df6c7dccd

    SHA1

    ffeecb962902a37598a03c08bcc93ac0c99174f6

    SHA256

    adc9303ae4ade490c7dff619cf10d95edce8c6ef72561cac00bcb8f51c08ccee

    SHA512

    b9384a126aa0627e75f7e06761e1f50e6340f5a9fff5e69ead331b40277a15bfd9f80873d26f5a04450a06e5ecf4a06e394a0d44ad1eb27e20930040d45e9fca

  • C:\Program Files\Java\jdk-1.8\bin\jstatd.exe

    Filesize

    1.4MB

    MD5

    91ab3aa6aa682e504ca386351a59b82e

    SHA1

    5205532c8b50ef6f808ffc9c779879a1f84f6198

    SHA256

    75bf75ab0728a51c3277c460606c8286ac7bdb90c38083447ca2ceb03a1521da

    SHA512

    b8a6364d7c3bdc067d4456043228911f726e46d7ee4d6f641dba42a7b28f1c35ff3dde12dce0e0e221c476cf37cee8c8871d7f55f9d2bf76c9dc9166ebfc7b45

  • C:\Program Files\Java\jdk-1.8\bin\keytool.exe

    Filesize

    1.4MB

    MD5

    93a55ccf58285ac95a36c476a373eac1

    SHA1

    cd4aec39202309b1868d438eab1ab628a367c1e4

    SHA256

    b1bb20f90050d5e69e62486dfc57ffba8edb7358d3fc1a46e4ac4d0c9623dab2

    SHA512

    c86559d2dc95bdc397c50f719fbac7e2b993c1da6514efa07819ea1e7b7e6e9c358e698a658e38449c333651e71f0d5032393932b994ad21c68933b7a57f325f

  • C:\Program Files\Java\jdk-1.8\bin\kinit.exe

    Filesize

    1.4MB

    MD5

    5f9a543da48faf29a8a83e648bb637e5

    SHA1

    142cabdb33c0022149a881120e2ba9c563ee5af4

    SHA256

    c6b6f240a8fccf7df4103e8513185079b72ceea0226313211a5ae43ddd916f2b

    SHA512

    f06eee20d03d3edeb58577962c9ada8b41b9d021cdcafb21f89f3c5d5e3cedbe91ba6de6161151b009b2d0ab75012938412751646950253ddac03ff0726b2c09

  • C:\Program Files\Java\jdk-1.8\bin\klist.exe

    Filesize

    576KB

    MD5

    e81f5f0c879435c68a4922f7459d5da4

    SHA1

    91b7675d8e561e3f366cd60acbbb8a4bc1160975

    SHA256

    f283e6e206e935bfa6682922c8c03d16b222b489cd788c7d958a9041c16032ef

    SHA512

    512060faa14f04ade82b35d63ef34f793f8a184df1851f15724533580adb62946bd5b4092a10ed27670e9c66aa022ff4b2dfe91bc9907fb96fbc43dbfe74fd70

  • C:\Program Files\Java\jdk-1.8\bin\ktab.exe

    Filesize

    1.4MB

    MD5

    66438335d9e3ac532449b03559b2331f

    SHA1

    7eb95e60a46ca8f742621ec204db44dd02b3a7d4

    SHA256

    6b1ae0b91f1af62740e45b97264ce0bb5d2bce24c122950b76906c63e5cb55f4

    SHA512

    88ef01db45c3f6ed882cca3fe6a10e44001a7245815fda248f12a846add2d688257e5e757a677e60c644fe99bd20d00b812cd68135e9c52c3dde9f4e79385fa8

  • C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe

    Filesize

    1.4MB

    MD5

    c7cabc9df1b508ccaff29e25cc7531e9

    SHA1

    90a09c1b9bd785a23c14c5a5d28cc76546717192

    SHA256

    f632185ee097a35352b632717b2783e2ba33fbfb11918c4e6cdd6e567cc450e1

    SHA512

    439622ec078676d82b459ae5280b7a5f33c26d2b64d43e8f0fab9063154b71bda00f8b1a2d8f350c1e467cd56ec0a260d48f3c242b4727eeeb07585831a44da9

  • C:\Program Files\Java\jdk-1.8\bin\orbd.exe

    Filesize

    1.4MB

    MD5

    b024f622410d5f08113000e9570d2bd6

    SHA1

    1e78d83678aee023ca6785510c66660e364faaca

    SHA256

    52b1ac3a69bcb61102445bfe8f47b9fa784bda5cf34dee57a4d3502bb254624f

    SHA512

    db2ffd1fcd3fc847f6253cfaa87eb76ad6008eda6a1f7a78a9060a9cde443cb07959b4185f0681d0112b16129de27e48262c071f8a066eae1b216e135ffedaa9

  • C:\Program Files\Java\jdk-1.8\bin\pack200.exe

    Filesize

    1.1MB

    MD5

    ceb69adedea5479c59060bbb161e6c0b

    SHA1

    f6789b58ffef29bc1c9c9aad6fbaf3a79af9551c

    SHA256

    a2c85cccc91db197a624008230048f1165c15d65dcc3206e08e84ef308990679

    SHA512

    6167c04b0441388ee84e845ab824cb3b3ed964f231ccaf80cf6f97566463e5194cb04c96f4a83b3e20068704308d80dafe53cf51d221b86c1f277b0125653e49

  • C:\Program Files\Java\jdk-1.8\bin\policytool.exe

    Filesize

    1.4MB

    MD5

    2a5c2cebe0af102662fd3653bfe9b5c4

    SHA1

    9483166613446aa5f82b3af1b45761b50b11818c

    SHA256

    32f6f05803e4d44d8945a591d6ba2f873f00b41fd112a613504139df1746179a

    SHA512

    d80960d1a4edd1160a3753a9c57df9a087fc10d67060ca72a7d50aef5f83d4412f7f3bf4a1722a8622b04aa846a243915ef0648d2dc3bc3a702a81f60e9ceb5d

  • C:\Program Files\Java\jdk-1.8\bin\rmic.exe

    Filesize

    1.1MB

    MD5

    6b168d196be8aabf364af12ec08288ee

    SHA1

    00093e40d9777bb690b8ecb2a26c0ecb87481147

    SHA256

    ab2409dd928730fc7ef82d1574acdc3791e8f532e9248c40acee4c88779b5feb

    SHA512

    c03962e1d9a86a691c6b8592a07575a4b1f93264e6a14636f0fcdd4502df2f669fe38037d4d3fc1c496de9a1fcc9793cb2e7a38b9689f574ecac3156f9332136

  • C:\Program Files\dotnet\dotnet.exe

    Filesize

    1.6MB

    MD5

    833b958ce435fc83327a4b17af981310

    SHA1

    4467086108a28febde1862c73b40a8b7a9c8b5aa

    SHA256

    5f78c4f13435b03f656e64f671db3829eaee180b67f00f467b04294ae16abf67

    SHA512

    b7132f174400c4aeea549448c4b6d72281b3d1a7ba0d9ef9ef28df44391501d78aa75f71dca6f128f7cb6241a8f0d483f42fc0a2c696feb4081b9842b76e3ee5

  • C:\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe

    Filesize

    1.5MB

    MD5

    fe63ca18067d06870d965ccd5227e872

    SHA1

    2001126bcfc968564536ebfe1baa55a7796ce69d

    SHA256

    abec52b4d51e88b6d4a774d0ede097589c0c960303a5c5e4030a4c5db8830588

    SHA512

    5301f5006e84705415ae3f0115c64ced88035313c792cfe3ac831a3e47f9bca33a4f1f5ce49f0ee25675b13ce63295b7ca792b1790ff9273dc2b681ebd222387

  • C:\Windows\System32\alg.exe

    Filesize

    1.5MB

    MD5

    7ceb02db2767671f223221c81bd0e239

    SHA1

    03beebb02939eccb7124bfcac91f005b0df64d30

    SHA256

    e883bec92fe2320550baed1f8cf7aa245813966ffd72b3eb93953e6f1a49aa9a

    SHA512

    2d318f5a65494571ae1d53aafca6e3593612c57716f570b30ebddbd944b8e4305a93a439836cf607649015120adb0d0df2253dabba8bc019d0da6e5baf2d89ad

  • C:\Windows\system32\AppVClient.exe

    Filesize

    1.3MB

    MD5

    8d6128192e8152ce93ab653cb166c925

    SHA1

    45fc72664839284c7064cf3aac7e9c7664085cc5

    SHA256

    b3d94252b19b59c6d43f19fbb9df9ef00c6479c4a728af8cc5cea2a02325ef36

    SHA512

    3be21a1c8a6de5898ad110fd4915b3f966fff75a9adb2280b22862f0aec7cda1a00206abf6c09a205c29a22bb3e0ce02c5e1d2f28c28bd3309b842fb848c22ec

  • memory/660-37-0x0000000000400000-0x000000000058F000-memory.dmp

    Filesize

    1.6MB

  • memory/660-6-0x00000000006B0000-0x0000000000717000-memory.dmp

    Filesize

    412KB

  • memory/660-0-0x0000000000400000-0x000000000058F000-memory.dmp

    Filesize

    1.6MB

  • memory/660-1-0x00000000006B0000-0x0000000000717000-memory.dmp

    Filesize

    412KB

  • memory/876-246-0x0000000140000000-0x0000000140188000-memory.dmp

    Filesize

    1.5MB

  • memory/876-34-0x00000000006D0000-0x0000000000730000-memory.dmp

    Filesize

    384KB

  • memory/876-28-0x00000000006D0000-0x0000000000730000-memory.dmp

    Filesize

    384KB

  • memory/876-24-0x0000000140000000-0x0000000140188000-memory.dmp

    Filesize

    1.5MB

  • memory/1484-248-0x0000000140000000-0x000000014022B000-memory.dmp

    Filesize

    2.2MB

  • memory/1484-51-0x00000000001A0000-0x0000000000200000-memory.dmp

    Filesize

    384KB

  • memory/1484-60-0x00000000001A0000-0x0000000000200000-memory.dmp

    Filesize

    384KB

  • memory/1484-59-0x0000000140000000-0x000000014022B000-memory.dmp

    Filesize

    2.2MB

  • memory/2132-48-0x0000000000800000-0x0000000000860000-memory.dmp

    Filesize

    384KB

  • memory/2132-247-0x0000000140000000-0x000000014024B000-memory.dmp

    Filesize

    2.3MB

  • memory/2132-39-0x0000000000800000-0x0000000000860000-memory.dmp

    Filesize

    384KB

  • memory/2132-47-0x0000000140000000-0x000000014024B000-memory.dmp

    Filesize

    2.3MB

  • memory/3056-83-0x0000000140000000-0x00000001401AE000-memory.dmp

    Filesize

    1.7MB

  • memory/3056-251-0x0000000140000000-0x00000001401AE000-memory.dmp

    Filesize

    1.7MB

  • memory/3056-80-0x00000000004F0000-0x0000000000550000-memory.dmp

    Filesize

    384KB

  • memory/3056-74-0x00000000004F0000-0x0000000000550000-memory.dmp

    Filesize

    384KB

  • memory/3316-11-0x0000000140000000-0x0000000140189000-memory.dmp

    Filesize

    1.5MB

  • memory/3316-18-0x00000000007A0000-0x0000000000800000-memory.dmp

    Filesize

    384KB

  • memory/3316-12-0x00000000007A0000-0x0000000000800000-memory.dmp

    Filesize

    384KB

  • memory/3316-220-0x0000000140000000-0x0000000140189000-memory.dmp

    Filesize

    1.5MB

  • memory/3656-84-0x0000000000CD0000-0x0000000000D30000-memory.dmp

    Filesize

    384KB

  • memory/3656-86-0x0000000140000000-0x00000001401AE000-memory.dmp

    Filesize

    1.7MB

  • memory/3656-69-0x0000000000CD0000-0x0000000000D30000-memory.dmp

    Filesize

    384KB

  • memory/3656-63-0x0000000000CD0000-0x0000000000D30000-memory.dmp

    Filesize

    384KB

  • memory/3656-71-0x0000000140000000-0x00000001401AE000-memory.dmp

    Filesize

    1.7MB