Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    147s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/06/2024, 13:27

General

  • Target

    2024-06-16_18b4398987e0429db323d0f3f41e4c61_bkransomware_karagany.exe

  • Size

    677KB

  • MD5

    18b4398987e0429db323d0f3f41e4c61

  • SHA1

    6c2670a5785ef8ebf865328071ed4ea07f6471f0

  • SHA256

    1f1f03010a879eda414348d0f439fcce094f76a51464c8db22ca8b222033d5f1

  • SHA512

    dfa5e8ebaf40b6aa4c1f8daccb533d0c285a6eab4e0563481b46ac539407d5130abfab2c247915d6f4031cdeebf2efa78a0f294aa759d6cb8a7a6e28ecc3d514

  • SSDEEP

    12288:ivXk1qYlc+pFByStv9JRa//inz86NRo1qiRlUWC4kXzVC3:Ok1Xc+pFB5z+//ufNRoZW

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 6 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Drops file in System32 directory 12 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-16_18b4398987e0429db323d0f3f41e4c61_bkransomware_karagany.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-16_18b4398987e0429db323d0f3f41e4c61_bkransomware_karagany.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:116
  • C:\Windows\System32\alg.exe
    C:\Windows\System32\alg.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious use of AdjustPrivilegeToken
    PID:60
  • C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4508
  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
    "C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:3508
  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:4268
  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"
    1⤵
    • Executes dropped EXE
    PID:2068
  • \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
    "c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
    1⤵
    • Executes dropped EXE
    PID:4584

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe

    Filesize

    2.1MB

    MD5

    c2af5941f6ca01d0964ffd34a37c5ede

    SHA1

    5ca8aa08ec69bfa381ae96e5fb7bdd0c5610c0b3

    SHA256

    fb8df2d5bdd67b0ad68063ae841e33dbc7cc00c15c63f87aff2d84a1be7009ac

    SHA512

    a20b1cec138384d65dbc86c249013135d8c7f6595573baae83bb15c9d800c9a8ca26c6c4c869d91b7616057036ff7effaf661618c8bb0a817a5f1fddd0fe37ec

  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

    Filesize

    797KB

    MD5

    4fbb0ededdbb2111b3b70c5b1268e54e

    SHA1

    99d381115f46aa23b1cfc9fbd2a0dfac10d691ea

    SHA256

    9de26e1b45b6711ae89ba93f41df166ef167fb85e86ebacf0c4491033f0d8bf3

    SHA512

    8e16acfb39096570a8b2a1ad6128e79b838f3c978eccb29729cd025717fc24f353c5e2ff7dee2efffb5062d2d730294e271f82de51a5e3df4ff06ba85175a730

  • C:\Program Files\7-Zip\7z.exe

    Filesize

    1.1MB

    MD5

    702d6b120652810cae58aee42202c590

    SHA1

    30aa5d90f6570a6227d1988ccae1c232fe422a14

    SHA256

    bc46096d9fc35434f74427352fd1e47b04a7d52b200421259fb2e1b2b72a4865

    SHA512

    6b547625fb782381cba50f736dc8ef249f0a6e01668764a846a7539d5c9fc1d2324ff3589daf02967e2bfbb2b92262f6f54515bab30046bb78ef206b0dba1316

  • C:\Program Files\7-Zip\7zFM.exe

    Filesize

    1.5MB

    MD5

    de11664ed3e6089f007a085e4b27ca57

    SHA1

    e833e6d3b0d940b4c1e72405b9f5a44fde6dbd06

    SHA256

    5412fb4c4f369a3f971023790b659c1cf43a60bbc14a2de769cb0b8415648369

    SHA512

    8d9373484ed7e0d6b50432b4cc2c200ec0178ef842e77a4168ca5fc8e1e91e25101b78af1ea02973159ee67c639002590bfc3cab4da35d7b2b7c6b8d674c0b3c

  • C:\Program Files\7-Zip\7zG.exe

    Filesize

    1.2MB

    MD5

    1046d7b0031fc876f4ac2b0f52d9cc0b

    SHA1

    350d19ffef5f149faeb57c4180395f3073d108f2

    SHA256

    3d2673a375da1962ce7c4bf070dab501d80d835e08aac2a0b1ac8b17696d0758

    SHA512

    be3ae1ec812b5d99c386d3f9cecc83ff09f64a504ec6cc7bb4f5cb88215dd6f621b16bb83639b2244dec9eb9d2702c55dca150bdaa95d5727dc6b1b0b40adbe0

  • C:\Program Files\7-Zip\Uninstall.exe

    Filesize

    582KB

    MD5

    96d7b5dddb128ace630557de4f32bf6f

    SHA1

    040d33b35772ebb8125885dc14260105fe732bf2

    SHA256

    4fe665f3974397a1fedaa4c720bfeb341fe39da23b5dfc91121dfe285a185f0f

    SHA512

    158a6c511127d53b21300298f2680f2fe31dd59ab10569ea6dfa60adeae6edee0c06333907193d914939147ca3a86a2b4903b40284b002a7088d667be3aba27f

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe

    Filesize

    840KB

    MD5

    c5e59442b4b7568819ee544ef16619c3

    SHA1

    c8cbd49a9a63de64d00bc929da28426a3d50c3bc

    SHA256

    2acc25cab3aba18c02589900aad80c59ac05e14145dab3fc0633ea6bc449880f

    SHA512

    4cd30ec0536535254af8eca40717a0573eb0cfe39ac76ba22842d667bb98ec36e6cb11fbf153da3b7963363608918531edec1614e36b932e41558dd8c293ca6f

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe

    Filesize

    4.6MB

    MD5

    e9ac9b0ced4122b5fcf242250d7660f9

    SHA1

    e82464831ad9a84ab3ca1ca40c066b302ff2b1ae

    SHA256

    0b8e3e6c6e271f739650e04f689a44669deb4d5413e3f69aa272dda9ed316e6d

    SHA512

    83518b6cf28a08da06f892ebc24414ce19f326b69d969f027a14c560d77b03d55708acf2b5109b9fa176485bbeca0ff097ce06c9308f4a9c8552ebf4a85a2ae4

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe

    Filesize

    910KB

    MD5

    d62865ea958ffab0e64fc672de1a9a3f

    SHA1

    c28b04e602ee1e13ce099fd655fa159d43118c50

    SHA256

    f67157fec9bf8d9ce21868cff15760dbf9b91573505e782ec15ff67682227dbb

    SHA512

    44912287b91da3cc4362300a888d7417b3d866d1577729c4835a253f6da89be7bd459fbb8724d20e237270d4384812e347da4c6005f29646fc2352b0d09cf229

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe

    Filesize

    24.0MB

    MD5

    5a4792ee5e648ae78d0a0879d5516387

    SHA1

    a5288fdebba124608803e2ea1c2b085808d7a613

    SHA256

    024023d79a337afcf65eefd72c2cab13080c106f5fdb9007837d3090192a5e72

    SHA512

    ef3e3b06eab71ebb55a084ed4628f9f00446b0f7d97813d646f585843344fd2f9428b1efd0abfb68a5be00ae90f473942b5f8d41b07bf1d8d9e974ac24a161a1

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe

    Filesize

    2.7MB

    MD5

    46ff6078cbc0521cdb84e6665bdc0183

    SHA1

    4a01e84c4daa966701c499bc7ff95627f652030f

    SHA256

    66c94306f2062a409634a16d980a61f1525934a39298418a3592274a2b60ad62

    SHA512

    38d15957a4c563d0ef9455ad8aafa3dfb729ad87e24ce3bdacd75d700a2e9e468b905d17fb7453486d1dd9a9aa91635325671afc02480cd1e7877afcfbab3d82

  • C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE

    Filesize

    1.1MB

    MD5

    b8c5c536e0f10b09337d1b9aca227659

    SHA1

    a9f43b08f5b9d68fcfa5ef060a5d5c0b7d3d49c2

    SHA256

    53cd8b4607b797ec836c40adbd95ef36587cc95becf139e583b8025c1b51fe10

    SHA512

    028f2780c3b221ac514bcba37117cb6ebfce29c91df8b2b6522ae01a74f5654a6d66e54ef24113d71e9831e61f59884b96b0acec405c71956715045d3ab6884a

  • C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE

    Filesize

    805KB

    MD5

    c316082e37f06b524c6f60f112950b77

    SHA1

    ef9c9044f07b3bae5f8ccb22ff5f20f7ab46b332

    SHA256

    11a180f51e14b41c84e4a761f94a2ce78bf01a0ec92eaacdfe901a6838915f14

    SHA512

    8346df43adba6baead0fe86db7aa43fedd771ca727ab30a5c9f21eba42c500e6f3a320b31f5fcb97de496428abea53f32e42f9b57c0c3579fe9f61173edc92f1

  • C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe

    Filesize

    656KB

    MD5

    e70ca60240e48dacfa1467bf2a614873

    SHA1

    d6c3eeb7ed74bd8e353f3ea2412c28787585ae92

    SHA256

    ee8f401699bb50e077584bae42b2390e0620c8a4f1603f6f317379cd7606bc3d

    SHA512

    8f0d8e32ddcb1909775dd2f91b2a4b11ad816341606cda7c5fe9154e5e0c9e85cc524ce2de608e033616b15a61df940b125a5bce8c58380bbf496b0f4b8cfa96

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\chrmstp.exe

    Filesize

    5.4MB

    MD5

    43159179eaa18ae82fbfccb6bdbbd4d5

    SHA1

    2ecc9b5f808ccf44b9ec4b0acdb15b60073ffa8e

    SHA256

    3d25f9916f2655f7e57e4b0e4f24da6a5743a472e904df1a45d36fdb169c91a5

    SHA512

    97117cd8f0a1a7eb691678cca04a8b824399cfcce8924a0483fa346b0a70169ebd140fccf8c6c1380ebb818b89173cfabb64c35362414a441b98aa3899377f57

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe

    Filesize

    5.4MB

    MD5

    9912ab2f9f80883c245e08f371b098d9

    SHA1

    56b1ef9740deab4a122a7055efde0d0843eaeb9d

    SHA256

    83082814744f16c5b7deb4f184bf51ab3c42388ee970452081eeb1d5c8d5e0b4

    SHA512

    5217e6182beff2e59f95563373028af2f66968267b09814868d2e1af81aa00e06b55f228e9a664c4525d24103658554182b2c08319c70cb6b677a45705a1cc86

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\chrome_pwa_launcher.exe

    Filesize

    2.0MB

    MD5

    89a6824caa52169cccfbdd7246809a43

    SHA1

    c8901e3ebd1414184bce85b24de6f29d140ebedf

    SHA256

    b7cf918f22a3906b4ab3db359bd19d6b479df9311098d89cfd90dc0a2788bb4c

    SHA512

    e17bf3a12f2b9d028ef634e9f6ce5720e8e078b3dd5dbe9e0f601b129a80754d0a4155532108711e092f6bd54f2f493de414f5391499ba9235e5d4ca122e7623

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

    Filesize

    2.2MB

    MD5

    e78bf5f1d232f0eb78dd31e355f74020

    SHA1

    44b6c5814d2358aac3cbf01fa99aaaa8d7ad13d1

    SHA256

    fa1dec8267ddf46499ab2cfcf8446816a81e106cd61261c1e8e8914745ef2c65

    SHA512

    b3f8a5911a03c2aa160e6f42adfe9bb773404d3d4de727986176f312919a5f50cf85e1742b6726a0d61cb327a14e99f097e5d1c2422ef4f13afa299f160033ce

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\notification_helper.exe

    Filesize

    1.8MB

    MD5

    8e51557a1c2b18a2805164637ae9859b

    SHA1

    5ff4310d52413da7a71a9e295e1f3ed16c6b437b

    SHA256

    a83e64accc33b59b3fe37dde331fad6c3764570dacba385036133a39cc81bd5c

    SHA512

    d548b1244d029f5d0e9bafa27e9ee8eea51e56ecb2a95e8eb871d3c99431b5410ca6efd2470b7987f84f096c6d89536185ed592fc9f06cb7a7d3ee06af16713b

  • C:\Program Files\Google\Chrome\Application\chrome_proxy.exe

    Filesize

    1.7MB

    MD5

    278c681509df2bb6d7595adf03af279e

    SHA1

    bbe2263d57b18820b7f80c1f63e4cbce03ebadf7

    SHA256

    ecdaa89c650afdc1d28c558d70e96a39759e8807b7f7bc429c2f7aa4dcf33602

    SHA512

    7548ca6b8f4099b553ab5b7b7e0e0a47541e357bb964b04cc2554e48b77d1c452858feeaf8645c95dfc869760c2702201683d08a9fba42d4bbdd23e0798ea6c2

  • C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe

    Filesize

    581KB

    MD5

    d24630ec43aa0133863e4f2490c0c73e

    SHA1

    332a11d727e97cdb4f59a2be0f92951fd5d79c32

    SHA256

    232194586256d1b8fcc7bcde8497d14dbcb966eeada00dd965cacfa562f563dc

    SHA512

    21114b44a6b9ef8b5a64135952bad803bd9c72f714a54d4881243f603376a5fa41b4b39e044385bb78c2deb112a8cd6137e056c5c69ead85a7ec8927b9e43407

  • C:\Program Files\Java\jdk-1.8\bin\extcheck.exe

    Filesize

    581KB

    MD5

    3fb0ffecb1cbcfa011d5762050f12cb4

    SHA1

    c06aef55468bac66f76099573a8a9b8d864a5cb1

    SHA256

    d3fc55d28d902465deb639be342470b154e3a1a702606b708072c8b84901a7da

    SHA512

    ca7ffa1b25c9d40cc537e8ccab708c2925bac08208f16ed5bd24de87e24201ad83f09f5d3579cff226b9436b1588cf71c88da274be2125a73c1d071a6af3c583

  • C:\Program Files\Java\jdk-1.8\bin\idlj.exe

    Filesize

    581KB

    MD5

    8f89804df846647444cf8a65c0ce1fc9

    SHA1

    ff47fbf70f770f46c2e9dd867c75091ed96e4623

    SHA256

    d987b2f9b624f78e1ce2c09a5c0bc5dbbd768819e7e121e8e0743a6a99fd5f88

    SHA512

    400d8a26eeef08a4084fd2fb23321abfce89d6171826a6ddc97ead34004485bf3201656ff45eb4014148507854750db0476693d150d27b04721e45369cb643d4

  • C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe

    Filesize

    601KB

    MD5

    548371acf917970348600025d453cfd2

    SHA1

    fef83398e9cab3e474739462a6cf86775a2b819d

    SHA256

    165ff300df4983f5d42c8ee613e8b03824a9913747fc1276739d5bddafc4dc81

    SHA512

    e0bed10954cce84b8b5221c978f9480ae1b3712f905066346b52aeaeb7c5776b5abc17977d824e5c5587e4edb3e0a6461abdbbcfea850f59e41752373b636cf7

  • C:\Program Files\Java\jdk-1.8\bin\jar.exe

    Filesize

    581KB

    MD5

    6bd1e4873c6ed83b29f9351e7707e6dd

    SHA1

    6eef1ec37346c9036817178b16893207bacdbc72

    SHA256

    30f9445b8b365312385dce68bb0df380404aa570fa6b549d13d79b3bd56bf485

    SHA512

    31dee74aa2dd427fbbd624b8a748ac8c73f138ae927a07261dcc7ef402d9188224ca38930634bbb2e6a431251feb8b9809ca02161125f2b21e4cdec02607493f

  • C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe

    Filesize

    581KB

    MD5

    9a7700c5e9cd1fe285111b5c1c6490d7

    SHA1

    6f891be0e579697339a66a1d5f6f94f5ab5c1d3e

    SHA256

    103a7335c04d80ae6ce7efeb9021a1c5901d18a6cab89b2d7714667aebe1c425

    SHA512

    2797f4840d7cb351cc0177a28bb8419290b134806b5e46ef33faa5ce948c7134899711eb02585f4880c37416a595565677a6cd7575b62ecaae3f016e6b873c76

  • C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe

    Filesize

    581KB

    MD5

    d6ea9d951da85b40fa10dea11af0dad6

    SHA1

    c944a473f21e2a8894b0ca241c88c932aa4caa39

    SHA256

    8665806c2f2fd74271acf978818a328c68cc670616e9459c84350fccb46de680

    SHA512

    6e361c060c24e113c021c777e5715c6327afc1b0144512fc9c55fc625dbe937d16f70cdb28dc2df406e0fda0a57888ddf165652f6e657d0d7bc860ba332a4edd

  • C:\Program Files\Java\jdk-1.8\bin\java.exe

    Filesize

    841KB

    MD5

    0f73431fb3ed8d0662076c8e7f1dff1f

    SHA1

    b0e7fd190908914ff3aab5fa914394b52517a46c

    SHA256

    8db54df093909d14681f66ac82748110c28a01847fcc6cad74da96ebd713aaab

    SHA512

    0c5a79e7ff2d036bc60c2e9ba0304f11df00fb8b1eae2ef65f31fbc2caecf886631ec8c450efc2eaba4054567392394203e829742d33fadd422cf57b0deb5a39

  • C:\Program Files\Java\jdk-1.8\bin\javac.exe

    Filesize

    581KB

    MD5

    b7c3cd16908618b548409579a95ccc97

    SHA1

    b79233c6ad5b6f8729d3d84d83ea456112e3d119

    SHA256

    ef34955123e4a83ee491f517d66d78e3910e0f3b95832ab5286e9a83fce947c3

    SHA512

    1b0bb5cb0bf60a2e7c9e0bf883d185197caccb5d3848ea89e73bd8ab74fa0f9a7311253cf8884f0a9fb0b86a4ca7553c9168b5794fb6004451d8b4e566523702

  • C:\Program Files\Java\jdk-1.8\bin\javadoc.exe

    Filesize

    581KB

    MD5

    3b92e6ac407dd515fc0add976cb1658e

    SHA1

    916eb2638cabce0f96ac39a9321314a8fb693301

    SHA256

    41264c934287420e113d360ddf8366ac0bd2e2d10321292f454694170d628f4d

    SHA512

    9429205d28c955bc88b04d2cc68e00bd8241ef348d64d2a5c8817e0fed29cd61535867f57dda04b5cbaa79be8c2d145903034958e8f1e6961f62b0151563db24

  • C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe

    Filesize

    717KB

    MD5

    5f880cc271acb4c3e38f66b85ae9b156

    SHA1

    fbee138bb3bcf5e1cff08cad7ae6f20676d66bae

    SHA256

    6ba1200bdac2d6a4df219a668e8cfed4004123e6f5b140e11055f03104c79970

    SHA512

    218b3f6adb12bfa04aa0aaa790c5936360bebda6c9e848d68812b9e8288027a15f906bb579e1e204a938328c63a6ba2e3c95f94a240f104f13c4e711c5733f84

  • C:\Program Files\Java\jdk-1.8\bin\javah.exe

    Filesize

    581KB

    MD5

    c356332a8e3b3a5f2dc27f7fb3abe083

    SHA1

    9b8634d934ae5cf2815ef8f20e158ff8d2f98f73

    SHA256

    f95b7043c35c4746175ca2759fb90c288edb8dfdebb5c132299019d2d4f8cc00

    SHA512

    0c0ff31c2ea868d6aac43a442b6eff33c9b4e608620ba4e08fc24403af9130c83f36d5188f732fd0bcb608a46090d0d40f96d79071d7becdc82a34492b6f1ec5

  • C:\Program Files\Java\jdk-1.8\bin\javap.exe

    Filesize

    581KB

    MD5

    efd9ba03779d60dd737105c4aada9d79

    SHA1

    59c855154d37ac73eb64abe6ec452635a289e606

    SHA256

    388bc03bde4f1fbee3f66870a376a70633d2a7079563034669a423aee13bf635

    SHA512

    62d315c9e9b460c5663d6792b561d1dd66bbd19d61174e8616cd70ab6ca6559610ae67aa859d0267eb5453e5dd34e34c30bcaffaff20d239d4a53b53af5b6af7

  • C:\Program Files\Java\jdk-1.8\bin\javapackager.exe

    Filesize

    717KB

    MD5

    7aec98689c876d7ae2318c9c46d6f260

    SHA1

    0424d1433537a5ee2d351e21ba92f1810c1dd80c

    SHA256

    916fb5a4c87a457e09bef345bccf4203a08aed42b90a3b04a7961eef335feb4d

    SHA512

    7ea19fd466716007d9fdffb7a5b88b55d2ca6966049652c52a237071a218f62d56c3a79fdd936f021767d59aa3fa5c03cdee1b87493054a74c6dd8426466b38e

  • C:\Program Files\Java\jdk-1.8\bin\javaw.exe

    Filesize

    841KB

    MD5

    0a0303283b08721bd296c6c4978b883b

    SHA1

    0bbfdfb87e825efb02236cbd95788f3a37ac3d10

    SHA256

    8fef7f456c99b397553f9592d291d47f60e0a0c3ee118216bb2b8427965c02fc

    SHA512

    6f5e3105b82b1bf33da72e2e79a845ee33b08560f9822fa7ac6af2f0b16a10777cf2da4e6d8337064b8c535de84f74c2540621b153b51823380aa61f779f295e

  • C:\Program Files\Java\jdk-1.8\bin\javaws.exe

    Filesize

    1020KB

    MD5

    d77e8161326f2c06c607272c3a0a958b

    SHA1

    2882ba98da6f749ba1dd501e47c76f8ee179358c

    SHA256

    4583868a15dc4eb13e7078389562e7b1c3ebb010cfe4a0cecb909b97c49c4e3f

    SHA512

    1bc108c181b5ecccfd1be87ff5c27dd0e161c758beb4082aeb50879d9e54c55988d8082cdfb8c8ccc491ad7ba98287b26bedcfae098843d3f9042d14e4e87db3

  • C:\Program Files\Java\jdk-1.8\bin\jcmd.exe

    Filesize

    581KB

    MD5

    4782a4aec9bd9d1119d60277e5df59b0

    SHA1

    b108cd390150a13b56bab19f54e0bac044194beb

    SHA256

    78b49061d5234650c2f246bff17a0dfe767a0b96c75037faa52192fbeebc152b

    SHA512

    c812f01c6e946e06449606c416f6e6dd2322323dec00629a8b8fb9156398a30da9f4a50f8d370b338b7f0345e3aa827215fd4003353279a2b45daae28ee7e435

  • C:\Program Files\Java\jdk-1.8\bin\jconsole.exe

    Filesize

    581KB

    MD5

    372ddbd50cc5d22dfb13da6eb2182771

    SHA1

    47e1c107098c9c180c68eb1cd5eb2743de88c191

    SHA256

    f6a463052094d3d026dea8f79619cacf7840eec6b2b54214938ba2dd186f61f9

    SHA512

    fe3c769ee209900a9661ca7ce936db139a3c8c2895466e473815c353bfba9c9d952abc1280bdb6ea5b79b12a6618937de96041e1f787f37f910cd899e39438a0

  • C:\Program Files\Java\jdk-1.8\bin\jdb.exe

    Filesize

    581KB

    MD5

    d6a41e1c9726599e60d403681685b348

    SHA1

    a419913e0c069be53c1e5d253fe282980ae82160

    SHA256

    8ed39b63b6cc85e84c498a0b80f7fd748b137a89abe7863ca54a049932af2d2d

    SHA512

    bc2047bb4a1d544e5ee41f70d62b866e00f57b16b8711c0650a0bc0d8ff67b82db0c5543be7013030707ab40f3f6b0ec6c435e6609d66d3261c441622560f0ad

  • C:\Program Files\Java\jdk-1.8\bin\jdeps.exe

    Filesize

    581KB

    MD5

    2ff6be92da4b428084587d9bab0aae3e

    SHA1

    35102e93d04b427aed54093970e1604c4d5a2f7f

    SHA256

    f89a2fd67d2b50a0fdb2138b32e974f17a2210f342adabf3ee09268618511a6e

    SHA512

    9ca21cbed26d4f1f3607369eec680c936fc2eed3140c55f521d484fa1cee944f9ccb745572689081b6e016be606f8975ce53e5e353b89d9b437938f30c728d5a

  • C:\Program Files\Java\jdk-1.8\bin\jhat.exe

    Filesize

    581KB

    MD5

    d8c7fa07c73d850ed5684158a491fc91

    SHA1

    4f3ec1a362d3d696118b34951cbc24641a4fc23e

    SHA256

    ad279f7f663204d7bd11203e9846a86b636ae77fd99c38583d9be49401871cc7

    SHA512

    7c14ecbcea3670bae5baf1e957907ac4da31b15beedf3c014b98878093977f62d8084b3254e644a3d8f961755c2862049d306677f0011f907a7764451f2939e1

  • C:\Program Files\Java\jdk-1.8\bin\jinfo.exe

    Filesize

    581KB

    MD5

    78d1f5296bda454d38e4cc0634f5a362

    SHA1

    25585d1063c24a017cd1d33f0dc39e7746cd77c6

    SHA256

    e0ce93a1f3eac100e21ca130aa86c46be62e4d2455410ccdc21c037412e3e044

    SHA512

    aa8328dfd639f55642d5491781db50f9b4fa93dbbb0f5a91aef335e1b4eb2be1b8bb018d265172ddfedd0f7611dc5eb3963bbeb2e634f6dd9232b6e38cb818b4

  • C:\Program Files\Java\jdk-1.8\bin\jjs.exe

    Filesize

    581KB

    MD5

    ab4c41d365890ef587b5190651f343b5

    SHA1

    c6238d33f5c2cd08dbdb9ff91abff174a47754b0

    SHA256

    10b93d3237dfebcca119aaf7ac30332c092b8765b18e0ae018db66cacc643d0c

    SHA512

    f0b7bf0b181011f77706e210379e25c9f6a13c68d638a1bac237d1aad96c02b5ad4d5815b227dd92afba4ada061eae4575781c9c32184428b31923a3a5162c6f

  • C:\Program Files\Java\jdk-1.8\bin\jmap.exe

    Filesize

    581KB

    MD5

    5381150c7a635531bd8777ded64cfe82

    SHA1

    cd34887f0063c4caf9ebacbac052951dc22cfc54

    SHA256

    15e4b48662ad9b1c8b066443090a3c32c52c068b33c732e8e880a040e85e340e

    SHA512

    230ade89d5684c57483f7ff2a8f3694709a5b52926b35f2e4bc835472d88c6c7c5a2ee67bc757bc2f7d88a84afd7688a81f15136b4f555dc8f3b2ae90f3be0db

  • C:\Program Files\Java\jdk-1.8\bin\jps.exe

    Filesize

    581KB

    MD5

    fba0d4116d0d23fd6925ebded5f9e605

    SHA1

    368397fdcfbb4551ef1c4d08d99b4497b58e8dd9

    SHA256

    8828a7a0a561f28844a03b3f0268fa863d56c50458437d08be378b53117ac016

    SHA512

    a29e1d5ef0019e2cf0a9d22efd39c35b2e5dab98664f3cf17a06b7db325c8877f18b99f5e226f75cd703d5a104c9154783b4762f55beae5d8e973939d5195b21

  • C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe

    Filesize

    581KB

    MD5

    795b29d65b0941ae19ca6538ee39dc60

    SHA1

    753d30de9e7179d6d05db20a3b7e6d7dd889936f

    SHA256

    96d672e53b4163c461b608c0f8cf9be9e965f6d1718856b7e67de813c60b88ac

    SHA512

    b33fe94ac8151fd27b06f0282c3aae0ede18cd292b0965c79816b36cd0582f8401577b4be9405de71b5c92437a7f018c5b6f133564de4b6a17876bbc67f855e1

  • C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe

    Filesize

    581KB

    MD5

    c1033170d0ee94b7d16657639ae25389

    SHA1

    903adbcdf775a858660850ba916f4954c8e648af

    SHA256

    fd1521872fddb7f957ab7626ad616ede82684b68859cd6cafdbc3d9271d111c5

    SHA512

    91be317ef318c9c7a0400a375b8bc4e003d7003bfd95c4517d463711846a813d3a131692ce5205d149f6ad70df0e2bc9df6597e6c47cbe8fca085e3ee3400a65

  • C:\Program Files\Java\jdk-1.8\bin\jstack.exe

    Filesize

    581KB

    MD5

    fc6abbbba43044035dfb76a6d98dca4c

    SHA1

    8dcd4915c9f263a63ec9ed6607bc89d28a7820c4

    SHA256

    12c69925512661db41da00c8b2c5e58dcbe0cac7a4752b06cc7fbd4d28ef1250

    SHA512

    01987f6b9fd6fa463df59f2422eb8cf785dc5d8f6b31fa2a462676aeeb6177227e62cdb027f6ca29e88bf5db1ae36eb600b5dd1bfef72cf9272553b6ad429cd8

  • C:\Program Files\Java\jdk-1.8\bin\jstat.exe

    Filesize

    581KB

    MD5

    f71528f57eadc90f1c8cda54ed38aea5

    SHA1

    6efde615ba0223abcb6ec35904707411602244cb

    SHA256

    41c81ab902a001098f75d9fc641ef5b0c0f293ada32f78674f5769ba68d4d8e4

    SHA512

    04582c23065bb8c5090bad9c7a8fbe6548f48f6bffd9d7ad5ca157f6ab2216d1c4a26f8b1a07d50955d6a325ab81ccfe8ec8ac82bc8e0f4d5111fc28d163a380

  • C:\Program Files\Java\jdk-1.8\bin\jstatd.exe

    Filesize

    581KB

    MD5

    14d192cdce484f8215beb6bbf558d2b0

    SHA1

    7223a6e3b0e8e4a7487b3fb5a29f8d1ba3f2a8fd

    SHA256

    2e8d4fdcc6cd87cf8695b37e063f666b016410dcef066f4924c3834134ae01bc

    SHA512

    868fb9cdd76f5ba888145731924d9c6b3b2488ad3a6515eb379d5260e342cc36048ca892ca5eb13ed7c16677523c6a385c58ce1ade220f18567e6f554920ea40

  • C:\Program Files\Java\jdk-1.8\bin\keytool.exe

    Filesize

    581KB

    MD5

    1cc9a668077aafbc64153188324d5d29

    SHA1

    f3890ddae45805ef40e980f0fdc6a294c3e1f0ef

    SHA256

    96e8e032f263c1ada2bb9e2ef75dd6b0c86c90c4b62d802681215c11e8193604

    SHA512

    dd70a175468921a5ed0e6e5191c7af796e41ed577de784a317faca00db37c70b20b843259c5fbe309ae6458391147a98d53cc829331ed2b74df55806c3c02a17

  • C:\Program Files\Java\jdk-1.8\bin\kinit.exe

    Filesize

    581KB

    MD5

    22138f7b3635c1f8fd4705d170ae992f

    SHA1

    3ad663604cbf8bef2569646008349f0f119dd925

    SHA256

    b00b3892fe52f9a463988a3d4017e458012cfa45e455658df7c0fec506d9d84d

    SHA512

    7ec4c5ed8990d8ed710de86d6c28f88a9eb9feba2092ad6f170f2959bc4ed876c128a6943c6f8d22d30c6c8f7a69750ee6868a7ca990aef1d116e7cdb01d31cc

  • C:\Program Files\Java\jdk-1.8\bin\klist.exe

    Filesize

    581KB

    MD5

    a39346964faf28eaedbf75c11a03fa9b

    SHA1

    b68aa326342f959ab8de59ce9499536521b0a4df

    SHA256

    1590b3f641aaf608261e65cd26c61bf621b90e0459eb72bc679ba246d91ff2f4

    SHA512

    51e11ac4074e229d2669a05c8fd3c2a6ac4e3a363a8a126429eeab1142b0d5a6963c65e1632c319c0f88bb6b877ee64a77c5be50ddaeacb2baa921f12efc04dd

  • C:\Program Files\Java\jdk-1.8\bin\ktab.exe

    Filesize

    581KB

    MD5

    d4587c2dc1087b045702739ec0bd54e8

    SHA1

    8606a9f6ce8677eb92c80569db3c2b1ca4560dfd

    SHA256

    d523b8e431a5d764ee1ebfee7b718422e223034f9064f102c407eb176a1e72b3

    SHA512

    c46f7d91fefdfd83dd79f5af445aef94f6a2a8e615e66d666c9e7298e580a6231e4bbae08c04e35e594d809247f4a367676f1e44f4d4de40f0340d961927abf0

  • C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe

    Filesize

    581KB

    MD5

    3b11182eb0389c0811964cf030e2f375

    SHA1

    97f0675fcac6166757b08d7ff95090ef14c4c3c6

    SHA256

    0baba5fdccd5b2f892a9630bf2e3ebcd08b872c6a2d3343faaddeb59461df5f0

    SHA512

    b89dc3647702f6e8d11719355cf543998c19b23094f708d61be7be96a1b897899325a87d840461068261f5c3fa2ffdc5dda5d689781ccad3ce43a315d2c17631

  • C:\Program Files\Java\jdk-1.8\bin\orbd.exe

    Filesize

    581KB

    MD5

    fd1ea098c0b46a7975a680225e686fb7

    SHA1

    85aa2c88d5b84aacf4b9a139c38b7999abcc16a9

    SHA256

    463ddd7e7b6447b33da791ecdc7683c2b678dcf8bfe85fb1d7166ec61cbca836

    SHA512

    0665ef0f723b97f1e08e07b2233dbb868e9638763f7daa8e5cec7c4f530960ff3d59f3f52723c29643b86d12219ed95aa0d1066c6536d8a721baab8648392ab5

  • C:\Program Files\Java\jdk-1.8\bin\pack200.exe

    Filesize

    581KB

    MD5

    2c8887180773208dfac2422f0bcbfc7d

    SHA1

    4bd5d29bc0545e2a17846b434bc8a4f9fcc96f56

    SHA256

    4b5a2a6aa81111456871ddf5bf72f29f000d4217f2b8189e4655b0fff28ffff1

    SHA512

    22a881cdea03e1cf7679268f2dee1588e71e30f5b9e57c1f4b83a6743571e1e83663d4b8f213f7ebdc9ee515e87e9a494a833a029719f849c4de40d5fcd6e605

  • C:\Program Files\Java\jdk-1.8\bin\policytool.exe

    Filesize

    581KB

    MD5

    3d88b5df944b15521c8b95f19c4ebd4b

    SHA1

    078d00534e7c0a573e4f71613159e0a88dc705f9

    SHA256

    1153ae42e246a717b8460c774d6bf68145f7f4e099b13d56a05e3cff6d2ccec0

    SHA512

    9edbd0b020ba251c54f90937df46798f72efeb107aaa2979cfe8396b1efa3e7badcfb3443f75a676f5d723fab2017bdc9c3fd95ec8616c59fb5712a0116b1ae5

  • C:\Program Files\dotnet\dotnet.exe

    Filesize

    701KB

    MD5

    c437179fd4cc444d39317ad358c258cf

    SHA1

    e557255f61ebb7eda1bad0bcd7e50918e388b65c

    SHA256

    55cea1feefd4738bdaab03c44bd65581c52f3aa61394c793e4e7d3967f02fd8a

    SHA512

    767269ae7485776b6557c51f1d2df90aed58842a9467a1b50102e222494eb711f3ea78ab1218b56d31138c9afc3d1f31a32b85471a1db3735ba3a653fe1b73bc

  • C:\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe

    Filesize

    659KB

    MD5

    7596ddae72458fc0ca58e18fea42bd50

    SHA1

    df54d28970ba42d57764150cab1e509095c2f12f

    SHA256

    e5f0755c892f8e5381d6cbed6bcefdd0be3fc2ce7335b0ef48a35e385bf0eb60

    SHA512

    47989e62d492ee00e287d8bd57539fcc8d452df2bc91dd2f3b3e4fa8f3ea3c3819450d67fe3537fe0329401d242a4d136dd7ac21f250d03307ce634bc93e0515

  • C:\Windows\System32\alg.exe

    Filesize

    661KB

    MD5

    257bb7254e13f8a3279930ec5ca8de79

    SHA1

    ce8ac131b76d27c528cb5501395194c1c1f29428

    SHA256

    64f04d4735f441eb5384a6e74f6e708559f81085c2c0865c6a841bc8615aa0bc

    SHA512

    78e26f9db1043ecc8d6cd0b8524c704f67075c5d3d9232beb47385f0d564978b8e0bac5e155add6a86d804e3d77cb73452f4facd81957344f35dbc0301554761

  • C:\Windows\system32\AppVClient.exe

    Filesize

    1.3MB

    MD5

    7247d6ca1ad4e9f97a4042f8a591c662

    SHA1

    51eb481b5accda1bb60ade00166406e0457acdf0

    SHA256

    2da96baf18dc02c531179de268364f6a2115bc88a9368af8f5881b182f74f682

    SHA512

    189625cbcd979333e64921c8a3a5ffcc591c971c2a29eefa6fa212dd6d36d438aefbbe850a1cab52c7ebbcb09ecc17d40521133dfc0c50cc856f5a2c3a816f80

  • C:\Windows\system32\fxssvc.exe

    Filesize

    1.2MB

    MD5

    69569905cc9404f77b2134adc7bb2856

    SHA1

    f611ad7c17a70a05bccbaed6ca6d57752d078de8

    SHA256

    f7e44ec217916195a4d298b9daf27082c2d0088c6f26a7c471d5b970ab6b3025

    SHA512

    7a5ef788cef9fc4031d5b4164b4972725feef516ce511f39b7977c2a8fe61dd01960482057ba206283b92eb27efa52e48a913141ab017cbe4ede9255f8f8dd83

  • memory/60-11-0x0000000140000000-0x00000001400AA000-memory.dmp

    Filesize

    680KB

  • memory/60-12-0x0000000000750000-0x00000000007B0000-memory.dmp

    Filesize

    384KB

  • memory/60-18-0x0000000000750000-0x00000000007B0000-memory.dmp

    Filesize

    384KB

  • memory/60-243-0x0000000140000000-0x00000001400AA000-memory.dmp

    Filesize

    680KB

  • memory/116-39-0x0000000000400000-0x00000000004B0000-memory.dmp

    Filesize

    704KB

  • memory/116-0-0x0000000000400000-0x00000000004B0000-memory.dmp

    Filesize

    704KB

  • memory/116-1-0x0000000002200000-0x0000000002267000-memory.dmp

    Filesize

    412KB

  • memory/116-6-0x0000000002200000-0x0000000002267000-memory.dmp

    Filesize

    412KB

  • memory/2068-64-0x0000000001A70000-0x0000000001AD0000-memory.dmp

    Filesize

    384KB

  • memory/2068-83-0x0000000001A70000-0x0000000001AD0000-memory.dmp

    Filesize

    384KB

  • memory/2068-73-0x0000000140000000-0x00000001400CF000-memory.dmp

    Filesize

    828KB

  • memory/2068-70-0x0000000001A70000-0x0000000001AD0000-memory.dmp

    Filesize

    384KB

  • memory/2068-87-0x0000000140000000-0x00000001400CF000-memory.dmp

    Filesize

    828KB

  • memory/3508-50-0x0000000000DB0000-0x0000000000E10000-memory.dmp

    Filesize

    384KB

  • memory/3508-42-0x0000000000DB0000-0x0000000000E10000-memory.dmp

    Filesize

    384KB

  • memory/3508-248-0x0000000140000000-0x000000014024B000-memory.dmp

    Filesize

    2.3MB

  • memory/3508-41-0x0000000140000000-0x000000014024B000-memory.dmp

    Filesize

    2.3MB

  • memory/4268-251-0x0000000140000000-0x000000014022B000-memory.dmp

    Filesize

    2.2MB

  • memory/4268-53-0x0000000140000000-0x000000014022B000-memory.dmp

    Filesize

    2.2MB

  • memory/4268-60-0x00000000001A0000-0x0000000000200000-memory.dmp

    Filesize

    384KB

  • memory/4268-54-0x00000000001A0000-0x0000000000200000-memory.dmp

    Filesize

    384KB

  • memory/4508-247-0x0000000140000000-0x00000001400A9000-memory.dmp

    Filesize

    676KB

  • memory/4508-33-0x00000000004C0000-0x0000000000520000-memory.dmp

    Filesize

    384KB

  • memory/4508-32-0x0000000140000000-0x00000001400A9000-memory.dmp

    Filesize

    676KB

  • memory/4508-24-0x00000000004C0000-0x0000000000520000-memory.dmp

    Filesize

    384KB

  • memory/4584-82-0x00000000007D0000-0x0000000000830000-memory.dmp

    Filesize

    384KB

  • memory/4584-76-0x00000000007D0000-0x0000000000830000-memory.dmp

    Filesize

    384KB

  • memory/4584-86-0x0000000140000000-0x00000001400CF000-memory.dmp

    Filesize

    828KB

  • memory/4584-252-0x0000000140000000-0x00000001400CF000-memory.dmp

    Filesize

    828KB