Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-06-2024 09:29

General

  • Target

    2024-06-29_2ef5a1705bcc627e7f758cc78e82d55f_bkransomware_karagany.exe

  • Size

    1.3MB

  • MD5

    2ef5a1705bcc627e7f758cc78e82d55f

  • SHA1

    07a5b3e6aa9d0d8b80196720617afce263cf18d0

  • SHA256

    c7e12c0f002d3ab925359100321cadc33b5bbc16468379b2068fef4707d5d1ff

  • SHA512

    74ca5d392c57e16ed89624686e6345e4efebc448a08b94ddf347184d0e10b8fce86998f4d6bfbd4d7da366524d3bc8917a4fe5343330066b2d38e2e5b0321d92

  • SSDEEP

    12288:QvXk1cMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:Ek1tSkQ/7Gb8NLEbeZ

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 6 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Drops file in System32 directory 9 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-29_2ef5a1705bcc627e7f758cc78e82d55f_bkransomware_karagany.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-29_2ef5a1705bcc627e7f758cc78e82d55f_bkransomware_karagany.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:2176
  • C:\Windows\System32\alg.exe
    C:\Windows\System32\alg.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious use of AdjustPrivilegeToken
    PID:2664
  • C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3472
  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
    "C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:3240
  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:5684
  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"
    1⤵
    • Executes dropped EXE
    • Drops file in Program Files directory
    PID:5212
  • \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
    "c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
    1⤵
    • Executes dropped EXE
    PID:3968

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe

    Filesize

    2.1MB

    MD5

    8077422d5bcd83d0a7acb5ec4c42fb2e

    SHA1

    4b36340e8a081e154f7f169e77855bb44a29ee8a

    SHA256

    aa104727f86443ebd2bc0b4238c43d783151f2e04d8340ab49315a5d3b5cc1cb

    SHA512

    0b82ba2591dca119f5d757c95391ab677e2bac4ed7b5a6e81064a1205260b3e2e675d63ec900579be49afe1332aa4d24bf1c0473cf3611c73f12044acdd26c4a

  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

    Filesize

    1.4MB

    MD5

    4c0f723f01859f35fd55291f016217c3

    SHA1

    fbd5f517019342e2b94f2f40d37e5935eb450a0b

    SHA256

    68ed9a60ba5b64bc48c78b783f8c53668cc6e6a8621d2831329eef423f9d429a

    SHA512

    0ccd78adeb078bf5fd4e9795e70fed0e157fa8c2bf77a525fd737e7bc20ec0cd761fb2608203b49e1c25ba78360ebf8856a591f6a695cb58439447b0c948c85f

  • C:\Program Files\7-Zip\7z.exe

    Filesize

    1.7MB

    MD5

    8d70531a2018a377bb64d344ec5cf7a4

    SHA1

    530eab9c063a030cb5b5c1243b795046a78a1b1a

    SHA256

    b0d6c6d6ad5369b56814ece6ff9fd2457ed24c6b181bd37267a12754b40d1c4e

    SHA512

    80139d96219c7d1c82e15e8887d1cb0f8cb830138465ab8eee2f437cc4770c9768de72db398e298e75773c9f1e3744816455ed9e7d6b894076b4e34508ac3c2f

  • C:\Program Files\7-Zip\7zFM.exe

    Filesize

    1.5MB

    MD5

    05b9cf3d6d8964cb697c550ba1e99eeb

    SHA1

    31263188272de7a750bd41057f3f1f4b29ab2d7f

    SHA256

    e0d05bceeabdd0263e7021f4133782addde19c5cbf6a57beae09469d4c384fb0

    SHA512

    79c42c2dda2e7e182cf4e5518456a412dbfe73b3f45cf8a7d0cad0e4bfe9ba7b11b314317b2d8ce3f8ea0793c18ec45165134d2b57c5781d0ef87a0b79173aa3

  • C:\Program Files\7-Zip\7zG.exe

    Filesize

    1.2MB

    MD5

    6824b549380b599bf21d084fb6c34ddf

    SHA1

    04750ea8acb76556dc1f9fd77c8eb410d9e21ccd

    SHA256

    c803eac3495c5371147c09460fb67ff3139a21e3346f05d77aebbb18b22108d6

    SHA512

    d43a4dfb577b651fc681c187a469a885a4e0e70a358211ba7ca1e6be41e3b0de672f8430301454205f3ac1985233e66625d13f5002833ea21bbe327cf37d8772

  • C:\Program Files\7-Zip\Uninstall.exe

    Filesize

    1.2MB

    MD5

    c46ef2253d1578c788c4c4eb6350a204

    SHA1

    18f0e30139a5ddb0e9374b52e03283e2c2eca852

    SHA256

    ce89c8faf369ba7b329360e5f688e68a0d3363d7d05f0e01317e21702575f644

    SHA512

    01856f9daa234fc309b1c579e3d326de02753d88bab39a60908282082396c2def1c38644245b844c9d0dd08175fa129ca368d879222483e2274feeb45fd11560

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe

    Filesize

    1.4MB

    MD5

    db2b270b50cc79ee1f079fb9cc554e03

    SHA1

    b592697c454b3f83693c8ac087a188d7d9596c87

    SHA256

    de0f75e398090dcee23dec2ab658609218fc23031913c2fe6c3dcda6b52e3f65

    SHA512

    0ee9b3233ce2a5380c0f1d21d0bd70d5e34588f22c362aeb89b9308c6df9d65fbddb1360f0b2972d0e9e0470a8327c926306a31e44c971bcc6a7d20566853404

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe

    Filesize

    4.6MB

    MD5

    f5f15454e8a9bb021e0aac0ce4f8643c

    SHA1

    c90c9c0d2e64e51f47ad547c5452a79ebbb71e0e

    SHA256

    fcba0caf9d204372deae6c010108bd3af9da9910ffec6c244fffe788d8be67f0

    SHA512

    0c6c9a981fbc4b92ef499401bba50fbef82efbe6a2a59ef79fba10b9fde486ccb1aa83587d4f43e9bc3103361aa9738c3d08dd3e64e14fe05fd9a0bb93c1f9bd

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe

    Filesize

    1.5MB

    MD5

    1f445710a93ad2e8590d55e5c79a836d

    SHA1

    5a09a2bc2738cdb47ce397a09d979c62391d84a4

    SHA256

    71ef72d8d519d90753b51fcd29eade0e1ded5454eecebdc55591885e908ce8cf

    SHA512

    509a149adfe982bdfb156ecd38658dcc54da626d6b46415d4636ce83021360d94b74659efac7f79042af389a336e8d4d4a1ba9d23519767a9e2942b7f9e12a97

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe

    Filesize

    24.0MB

    MD5

    c80b2ab4a2e73c4004ef91116cbada4a

    SHA1

    d685ba4f67aa4847c21e4e97984f98ffeacef7e7

    SHA256

    0981e55a8fa466ca9f3fba9e90baf7ce328aeb6584e6dbd22a0221f4c3fa5416

    SHA512

    49c4fef543cb4ef0570bb9407ae8251a50501a132cea24a70ca8a2033703c6196cbf11c0e1a9400d4c749ae1c4267b727a7465eccee4b9e4f25185d49ccf411b

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe

    Filesize

    2.7MB

    MD5

    c342f21a800fee64d59bb7efc38fc3c9

    SHA1

    1bfa52dd2b0ba1c06236e856cefbb8d2c438b390

    SHA256

    d8f49f5912d449a96eedba05eef0f20f0eaf314c13837ee9e362c4f9e51bd81a

    SHA512

    5816a3bef443867067dc6b3862129b9af1ce747a2d35029542879a2ecbb05d686bbdb7d7adac8a8ff2e066c4f0793494856e54269ca2a946b72396f307394314

  • C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE

    Filesize

    1.1MB

    MD5

    248f58c37d70bf59b37640164c5e3c92

    SHA1

    1c2941930afdbb98f994021824bdac4541df9626

    SHA256

    ca18405e6bb47a82afa7af0ee0c5e950ba40d80af545a1110b46ff9b1d1f2ede

    SHA512

    2e75240a18ee3359eb155bf95ee4fed5263b0621fc5ef58c451c6873e31f8355858e93aa17b4fb42fcab0ac83686d28c67e1ee9760b3cf058f48b3f00e03d2a1

  • C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE

    Filesize

    1.4MB

    MD5

    4122ec8ea8a61fcb816a8a51e89a3171

    SHA1

    2d0108edf716f0f4a3514e6fa99026a8be06a880

    SHA256

    1a5a020d8aa95b106294a4a0eb7c6fa03fa5cac230b9003cca179a19521dfac3

    SHA512

    0bc428c4ae6f4b5e1272d7ab195b8a064f51c89dbbc874afd21d7a9363274f8e521e53ee35723efda2f57be97b190acf951fee412ab8b7cec80394dfff2d01b8

  • C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe

    Filesize

    1.2MB

    MD5

    e8e7171af22202bd3889799c916fd488

    SHA1

    997c1bf5d91189cfcf7a7e7a019b0246d031b042

    SHA256

    9584f99801a972fb3d2f2853210af995cae1de5cedfc7fe2f9233d9422f7bf8b

    SHA512

    b2820cee1087f6485584929c10798da1176ac18ee0aeedf85623731a901e42e380c7ccfc5901e8ae20bccb6aae73f8e4866eaa0475174c31a9871ce5eaf19f45

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\chrmstp.exe

    Filesize

    5.4MB

    MD5

    bc0c6d29b8dc9ca29547421aed7d5b2f

    SHA1

    8b4a0e59314011d6eb3bbabc794713062e6012c3

    SHA256

    b88465a5cacbd11f97b9736b88d9b9d650b016f33eedfd9285a771ec9cdc31c4

    SHA512

    7ea348fa06c9e6d4c5ac7fce2a2a8dad1fc844fd0cb156ba19d73180b7100ce798497d74cab7de096e92795041df73d94b5b4e86b7db35deaa1f5a7749ffe180

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe

    Filesize

    5.4MB

    MD5

    b197ec4de15de80a8476114f89e77b0a

    SHA1

    06d94a1ff06cd8789c81318063e2241c42191e87

    SHA256

    2271ca447aeb304b60a4c727720aee1b1a0151734afa45415c21b810523b7c34

    SHA512

    76594b650dd53ee75f6668f200da421c6645f625a827f0df5432b600c9de4fa91a4f98e59dc31ff1c3e57100b4990290ee030826e6d80f14a560452d5577cb0e

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\chrome_pwa_launcher.exe

    Filesize

    2.0MB

    MD5

    79dae5da302a75e1b279fd803b53c881

    SHA1

    1cebbfd85d74240466718457d5a65033f857cadf

    SHA256

    ac703a4a20b07b45ee6e79e4cf9a4c56f3ac186e1303e57296524f525980fb9f

    SHA512

    e9ec8f4e37ae6b86b1f2744dcbdded714e511002dabe7b3af6e920f61dd6cb32f83152fb4d9d7b0fb227838305d6bdc2d24159108e11652cbc5a0a45aefe8191

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

    Filesize

    2.2MB

    MD5

    8672f9f18f1699d8da098b1bae33cae1

    SHA1

    8d0dd250c27d9bfc619aa659a697a747eeac41c8

    SHA256

    f74276fbce15b726c3018368d68947c79316473f21d063cc745d3a3cf6045874

    SHA512

    408f50c2bac69de3ffd965e9802bc5c58206b0a202828e434c3f28f4110de7cc5753354f5785da8131934a3b5d26c508cb5e6510171816d833d3a78fb5417eed

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\notification_helper.exe

    Filesize

    1.8MB

    MD5

    cdbf4babe69aa10846d7dfb377ed5eee

    SHA1

    ab0ec2f9796fbfe073eb26d9b5c56f0f0cdc2edc

    SHA256

    9747f069494949f6f3f7e0b5603deb15e29006bfc73ff4dcb7652f05b93448e3

    SHA512

    90b0e9e1c8753e1b01d5c321f0b2f9dae8c00ad1616ffc5bc03145d77597dfdd476e48bfdbeed4b32a66c9859c7f8ebc12abed6dbd59fb87fdd5ce03e5e0fecf

  • C:\Program Files\Google\Chrome\Application\chrome_proxy.exe

    Filesize

    1.7MB

    MD5

    3877658f1071f1c2bf5768f638b8da62

    SHA1

    c19d254e6517bdc3f2db386f5e9b89b93ad7f3b7

    SHA256

    1b0a83c77e7cac2776e7832a31cfe320f7a8a6629439c8b825c12ee6907d1405

    SHA512

    4d45dc2c64c02df4c7b7e4d4ea27e431432c2cf97732eb37a48b111c7be069f1f6c311840d18f8d1e7f7c3671fe55bc42b58f21a2baad71237d50a1a2bc802ee

  • C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe

    Filesize

    1.2MB

    MD5

    3c655d585f58fa9d8fb310fc6f9c64dc

    SHA1

    dd3a2e89caf9c89f66ea836ae4c67826105fc137

    SHA256

    b389035b854e4636862158ff52565cde3702d80fbf9d20d14acb7dc444f5db52

    SHA512

    c1c3b4aa61443b0d21ffe9c385375edb30f48c6f65d1a15f8dbf73a4093ee113adae5a67baaa6cffdce6cd35961dba525ebf7eba62e013d548122bc0d5a7c366

  • C:\Program Files\Java\jdk-1.8\bin\extcheck.exe

    Filesize

    1.2MB

    MD5

    8cb8b55cba3d7bbfef422f182b23a8ca

    SHA1

    55d48b8ecc7c080b74e95134b1897160adc2b1bc

    SHA256

    f2520f4082aa303d7cac90e3801735663393282f080b86544a409955c1e7046f

    SHA512

    00464424fbbc1268d675042e78e36241f3345e8ebeedcda2847fa9371ff4a3a173dc73f91a79d31e0e25778151b8c9108c9022c577ee5161c4b3ff220bf58db3

  • C:\Program Files\Java\jdk-1.8\bin\idlj.exe

    Filesize

    1.2MB

    MD5

    eaa2a670b59e7185d9b473d5e3b36b2e

    SHA1

    c5ac6293ab12376c23f93fa52ea59333171d6373

    SHA256

    287450f8de13e50c7336fbb1d853c318aec4fac43a47e522b5b81de252bd1a2e

    SHA512

    5e7ce2d61a79d5673b64a37fe2df4098c880ec566b5210009d92351d6848614370e11f6a2e707d89aeb4a098f6d1236c690eef22f7d73120fbf2a94ea8714fa3

  • C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe

    Filesize

    1.2MB

    MD5

    c801babd07f5adc29f1dca0acf6e2666

    SHA1

    5ebd07a5b7b21ceac810d65733ef7b8e24397160

    SHA256

    f0a0ec7e6e8489856297e9d70b87ee5b09f885eb618ee1881f23205d55bab383

    SHA512

    1b04b2f4e8c259411aaa2231cec9683a7f4841e66a5ba26dc62480882ed689a607a0e34d3967da5620ada3044d6b17f0480333d61a30af505fde42b78c84cadb

  • C:\Program Files\Java\jdk-1.8\bin\jar.exe

    Filesize

    1.2MB

    MD5

    4edd3cdeefe7223d0618cdada0a03e9d

    SHA1

    4d39ead8732fbb66392b544f0507636d01cf3a24

    SHA256

    847bee65e7a32d272380832aeb9d703319fa75ae131b70001a8e2937f5cab7de

    SHA512

    b14bff7103c197db18ee2687fcbfe7ded68cd18f194dd2a5038918ce357e18b2f78d3721607b0955c806bf10ac44401cc4e2c6727e3855f9ee30bcc4519860f7

  • C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe

    Filesize

    1.2MB

    MD5

    c70fc9e6cd662a4cffef464895285561

    SHA1

    dddac5bee35a436262d2f25d8730a16b9c63b7ee

    SHA256

    b5a520075c5925871d510312fa865ac8213d371e91441fa0524cfd18a4000ed8

    SHA512

    5077e8ee00ed21716762d02033f775e277f8994bd36620cf96565179c0a356f949eee089dd7dfe68a1a1175ac3a30cc1cd223e3b83883f30f9d972ba87352816

  • C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe

    Filesize

    1.2MB

    MD5

    40132057a62ac289ab6d42bca1add558

    SHA1

    b19bb9a6cd6c620a025ab0cc07d2aa31a358b212

    SHA256

    907227dd32998dc75d99196154921e05d30efa467876180d916e0bb723d0a334

    SHA512

    a6f82827f8bdf15965430e273c22900c38812df007804d7a120da6853f225db81339dd3f4097d34c4fccb2a043130ef9b74025e6fc0257d65451cd020018b516

  • C:\Program Files\Java\jdk-1.8\bin\java.exe

    Filesize

    1.4MB

    MD5

    8ff2ce5733f82c443b7fdf2bd8415640

    SHA1

    5e24a6cc5dc15ac964249596b1de82ff3475a58e

    SHA256

    87705c38169ff6efc61e5182f8c3a60d43995ec167aedd412712515baf9b565e

    SHA512

    bfe70c270c0cfba770447d7725ed1e391815bf24829ecb20d98188dc90fa5e9e927358e5821dd393128b12d470d0dfbd16ef67ab3e4a539dc0b0025440c0ab39

  • C:\Program Files\Java\jdk-1.8\bin\javac.exe

    Filesize

    1.2MB

    MD5

    8ceb6ffe8f62603a1a9300440f936355

    SHA1

    710ca0a81084fa6de3ba4a63b42c3b8dc625c1fe

    SHA256

    e43b793cb64f935177d790183bda61ac23638b2fe3132ae45d848fbbd5fab1cf

    SHA512

    da7551c5f4cece22cbc360be58c2df5b6e5fedbdac9549892b44ca5e0eb1c0f99e40097d72d4dbf18e500bc40c264c779cc474c7252e17cc67edbfcbd3a09e0d

  • C:\Program Files\Java\jdk-1.8\bin\javadoc.exe

    Filesize

    1.2MB

    MD5

    fc7b8601b49206215fe8e178f853d568

    SHA1

    d531fdf0fd2025cc52ae9054a44232291ac42d05

    SHA256

    1350f3035548975cb7fe89c92593ddaaedf4912f710c4e6915a39eab4ad17576

    SHA512

    a1b03e2b0c116ff43eeb88989d17228122ea361cbaa189f8a0c6aac42c2af90a2634f7ca215e0859ad1a3becb8d666eb7c2dc433baf04a8603cea5b8f5d33d80

  • C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe

    Filesize

    1.3MB

    MD5

    4843196b227fb50778ca13688d9ff495

    SHA1

    79cace8d3253ac8ded50c7ef77c3446f828c81ec

    SHA256

    084ac5583a99c03a98d16ce223174bcfc71e3e964ba23ba15e7647e9fe19fb49

    SHA512

    791af860a3b4ad17bb6bf7e29ebef2852f305d8e27f5a6858153ce3075329099956758ddef98ee369f89991dcf473888bf68300ea2455124dcafe4baa1bbbecc

  • C:\Program Files\Java\jdk-1.8\bin\javah.exe

    Filesize

    1.2MB

    MD5

    f955971f7e6f18127baba8aa81d0bc13

    SHA1

    6ba485c040610a405f52f33ed20f575a85d95a68

    SHA256

    fc1beb5ac98311fa14cf45f0294ab33d2dd5c2470c1337c45ebeecdff7311450

    SHA512

    afbdecbed3b13427c2da831939a509c99fc6c624e749abb7a12fb797052b2fc2207ff3708128a66cce872ff9428bb77472f7e9eb130053b29a45db4dd8cf0e1a

  • C:\Program Files\Java\jdk-1.8\bin\javap.exe

    Filesize

    1.2MB

    MD5

    df47222d6cc0d772ffc67f3bf55b3679

    SHA1

    3967e8a789ae0230c29d13e979921abb042d69fc

    SHA256

    ca769a8a334004b1ad6fa6b348cff247fd99f4f87b0b5d14ef77fb2076c99fd9

    SHA512

    45d4a2f8132abe2e631338bf2f759a3841745783b8d61c6df9116ea780706428d1cf8e8b4c8627a30dab42a4b7b67e2aa579647f541817274f979dc079f0747a

  • C:\Program Files\Java\jdk-1.8\bin\javapackager.exe

    Filesize

    1.3MB

    MD5

    07a0dc1a7642b6b8a8550011fc7242c5

    SHA1

    8b2f022970d4bc76663570537453447ce869e6b5

    SHA256

    2c15d878d8d25193f42c4adcef3f8ba0584620a8982b6c70796524312f500475

    SHA512

    b67ae58b506397b2e33e1ee9d19ff4de99323a41e5add727177cd4411219093f4a7c075c3b9cf090ec507f2329ba66e62fd919444d0c8108333ad039260672b8

  • C:\Program Files\Java\jdk-1.8\bin\javaw.exe

    Filesize

    1.4MB

    MD5

    f179da8219ce1c7ce8c4918dd988fa81

    SHA1

    8892c109e06793fdb66f8c9f9db60f047faadd61

    SHA256

    c2e20b4ab85de69c9a0bfdac76b9d83cc95e6d2f50751bde38b45f0c48c53f44

    SHA512

    44f13af81179904d54f6b3b0ca2c77bd575be520d8d2e61d157999d3c2ba6901499df7172b7f0b4ebcec5f3c7bf3443ae2aa86233271d96a2fdf442c025326c5

  • C:\Program Files\Java\jdk-1.8\bin\javaws.exe

    Filesize

    1.6MB

    MD5

    2cdc71336ea28225e8ae7c25c0e0f527

    SHA1

    9b4fdaca3042a9e729eacd3f257c6a5400b77cd6

    SHA256

    da8f83d67a44191071851dde933d20be9cb7415c43e52872a6415c7f31392b34

    SHA512

    e4d98800bd382bb62861c35683125892983f74230539bf94678f3e8e820251cb20684ecd6ae7aca9055bae76aeab370cca3dfa62209b1d1d6507fa55ae636cbd

  • C:\Program Files\Java\jdk-1.8\bin\jcmd.exe

    Filesize

    1.2MB

    MD5

    508a5d4eee3c7a08ef188aa9585f11e8

    SHA1

    347fdc945d336dc29cec52e580c0a0ebb0e2fde9

    SHA256

    b5625ac96de1f12830a19799915aec56fae579200ed88359e9ca49b0c583bcb2

    SHA512

    f58d0920086232c13c692d94cd245e42385d3d8cc328b41add7764de8cce9261b9ccfa62612b9aa16be43a24f47b0736ae83539f00d9396c8c0a0865a1695edd

  • C:\Program Files\Java\jdk-1.8\bin\jconsole.exe

    Filesize

    1.2MB

    MD5

    1e0c7b694bdaf2a0222eb63c306e3577

    SHA1

    08261ad85464a04c4259d9970d96af7ccc5b4725

    SHA256

    79115f0d69a4d84d0e591b3ebc4f6c3ecb45e62f36dbd85374c80e934ec61cbb

    SHA512

    8b34ee38921d9b3614a6af148a9044e25b1479e8cee6afe1f5700b7f9e6340f59b2b40711985eb4788998ef1d638f05f48ba2e06c86925ac92a9c767db7d9f99

  • C:\Program Files\Java\jdk-1.8\bin\jdb.exe

    Filesize

    1.2MB

    MD5

    f79cbd5c2b78da8f4db19d181c8ce4d8

    SHA1

    df6b7e730d4805a63cd970236a383595dd0e36e3

    SHA256

    8c5030dee5ed604b138d97650fce0d8a0f070411f54e2facc8c0c348dc972197

    SHA512

    4360a28ab7dd562a509686e688ddf840c3b7e73efd817639f1e9b128aa1201cd0d4771340d59a2ecec095aaa186dfe3a6512d6c43eeecbc8e221786e9be825ea

  • C:\Program Files\Java\jdk-1.8\bin\jdeps.exe

    Filesize

    1.2MB

    MD5

    29d2d2b28aacbeba2087d04e59307f18

    SHA1

    954654b315ac39a56494133dc15a530c0c4d0a7b

    SHA256

    7c27247a7c78e2d789cc3d3d8699ef5ad649af1ff3763d14bcf7bf3148386270

    SHA512

    2ec774f0876eec9f6b2db10415c3ab732577f1f6f810e2f584ecd48ab391a0738c61ee32d3b2bada58696876d855b42038318492b8c06898ac6f8927693ff1e3

  • C:\Program Files\Java\jdk-1.8\bin\jhat.exe

    Filesize

    1.2MB

    MD5

    ace3a5980fa6458d58b2428581f2a502

    SHA1

    b21b987c9e417570d0cc9f235355bda2d73570d8

    SHA256

    7251c654ee0387180bf22dfbfd7819f53eb4c37ce973462072f3fef86827f82e

    SHA512

    a449046c7003906a242fc3b2e109c5bbb6bdd530850948ae309f9d64cd871a17ea8c1f3d4986d6d9957bc5c64d27dfe79554084d023411ada3eae97f08afd997

  • C:\Program Files\Java\jdk-1.8\bin\jinfo.exe

    Filesize

    1.2MB

    MD5

    4bd40c5c9969e8ad1c8d2df2d9015367

    SHA1

    dfac37a65761ef76a9bea979f215e6b61407acf5

    SHA256

    4b555d649a10275d20b1ef7efabcdc6bc39d892ea6ec43e46ad81b10cecba08d

    SHA512

    0cc2d64b338e0a9f9afd9cda9e0fb100b7baa46532dd6d013483e2b276b0204901ac8501b63a4c7b209d45d489e32fcda971550b64942baf3cb27a99864b57fd

  • C:\Program Files\Java\jdk-1.8\bin\jjs.exe

    Filesize

    1.2MB

    MD5

    0bd384c90a876f44b86c77c7c04cdd38

    SHA1

    4213631afb496c2a7eea01bebd8e85a52986cf60

    SHA256

    7fe92a1d7c54a3cb3a7e9f8be425f16f17e73b844e380b5c387c9f2d78498162

    SHA512

    c520ef1efc6e772d50984a1000685268a1aa857b377ced836df49af7faadc52e9c39c88c6f32b7e027e3fbe8ab2e7325b4c8ca5a388c5b7f2bfdba9fd6cfe0f2

  • C:\Program Files\Java\jdk-1.8\bin\jmap.exe

    Filesize

    1.2MB

    MD5

    4e9a5e1cb535908ebbab88505c4c0c13

    SHA1

    442452624062aa757b6c94e492989b101d3c9d22

    SHA256

    cdf3ca0cd298ef67b6ad6a20c8900bea959c42c11db5685cb0512ad775f43d7e

    SHA512

    ec7201f91d24e99e096acb3ee53a5b050c563a55e250e83e90742915c1e7c7d86d3b96f7b0618a8dbd3d56a0d06af23c5f0d574d23d492d83ad6b96ef2749715

  • C:\Program Files\Java\jdk-1.8\bin\jps.exe

    Filesize

    1.2MB

    MD5

    5ff4b9165ffbe33486adb0dc3baf7771

    SHA1

    3063a14d9edd62e83d713bab7a4215bc3b808fc0

    SHA256

    83e19df47a5150d7055393dd0501f6baf4ff7bd83a31a064af9d0ab5582c65e6

    SHA512

    b3b739bf1b6d4f28ae5f640a7f0179a4e18ff7eb2f160965d5f72720a16b9b74b246773dd1391dc4301bf3bb890b8f30f70cf1634ff04fb5f77fe05832a521c5

  • C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe

    Filesize

    1.2MB

    MD5

    039570468ed3253d0f4242a660ef236e

    SHA1

    ace45f9e1e9ef07349746a2a462a0661c01965cb

    SHA256

    202a2267393009f97c6551a8b25393a6195a8f54258dbf21312684ef830387a0

    SHA512

    8ee3ddc5f66b7bf79bd49f4e8ba32761f6d40a6457ee698255e0c46da58d0cbebf15c6653a98c113d659e53f9008dc9af3596d4dc14e5099159feecddb00e4e6

  • C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe

    Filesize

    1.2MB

    MD5

    6df1f45677f642135bec50ffa4480afe

    SHA1

    6e096b8a48b2367f6ccc3431aa635f89dcabda40

    SHA256

    1524f0af4cf166204629d30cb59f01154cdf4425a0897372f7ee2d1c8a3a6f33

    SHA512

    ce9730203eb9fc36d104fc693e55d7a8ca1012313180620a3777d84eac6228e053d0d6f76fe202a4ad7d10f9d6236b3c3907d258aff723265e938db12f556afd

  • C:\Program Files\Java\jdk-1.8\bin\jstack.exe

    Filesize

    1.2MB

    MD5

    4ff8f86013b5a6c11415c157f92b10ce

    SHA1

    8d1eabd7581f6c26cffaed4919f76ac5decd596c

    SHA256

    8b6e13bf1eadf496ff09ee07988fecaded13fda0cb90847721fe2ef41671c4f4

    SHA512

    9460df81dc56b9a76fd0ad677f7d9228ad76bf48550655adf84b64c2ff9c1f0e5ddc56cb15c5f163ff170ae92d9234f5cc7103478e412efd488be6bc39fa7875

  • C:\Program Files\Java\jdk-1.8\bin\jstat.exe

    Filesize

    1.2MB

    MD5

    c926aa04c48a9de65409be43aac2f0a3

    SHA1

    036ac4e591ae06e235ae9ea0a00fe3bd0bc342b7

    SHA256

    c69b255106c10c25e56d372e046021dffc5b0003ad96d7cb9fe1faae8cc8c7ce

    SHA512

    9485ea884d8f00463181eafd9042e2cbe78677b017158de77a86f4960a33cfa8179fd244a52d9a814e2c70b02841d074eb367b2a3d53d33a5a8679f62d867ddc

  • C:\Program Files\Java\jdk-1.8\bin\jstatd.exe

    Filesize

    1.2MB

    MD5

    b6f42bf860fd5352fa07ce4a7826023b

    SHA1

    813e8c35c54ed5ba110669f3eb627bae36c58848

    SHA256

    b94696fc2f27f901d985d5ecf1efef81bf9ac164b15d36e8d57ed2ded32521ca

    SHA512

    442b2d682e6c6deae01053b08ed9d3071cb7fa23dee537ebcd15af4657cf3a85f9472d3a725fde06ab1958d32e76ad3e812c5a1e3fcd4c7bb5a9120725cf5bfc

  • C:\Program Files\Java\jdk-1.8\bin\keytool.exe

    Filesize

    1.2MB

    MD5

    2d6ebf019e102fb6776aa7ce5f6e6197

    SHA1

    72cf51fe4b9a31e848140c3867e40e75f4adbc68

    SHA256

    8e9a25d7637490fa84af10e1a32bda70be6c92d2a396b4f92694d8159b616e8c

    SHA512

    b78f507abb69e681274c24ac4c939336d213a83aa612540e2c04e637c0db8dd30f4edfeca5657bdddc80fd9e2346e7d606de82e0017d6c85757fa7a587daf694

  • C:\Program Files\Java\jdk-1.8\bin\kinit.exe

    Filesize

    1.2MB

    MD5

    d535692047c77beaefd4e1ad7f6edb1a

    SHA1

    ba76d674e5a5b04ccf28d634347c346e25f0e1b9

    SHA256

    46d3b71b009f10242408bb0f27aa1d0d20d4aacd6b628c062b9750439acb5429

    SHA512

    2a75ea410832422686c5dcb8a71e8f3b197dcec109a680b86be1b3c551f374235eec0a66df3b03339afcc19cc465dc18c9771fa6ff1b1ee7eda421570b48a195

  • C:\Program Files\Java\jdk-1.8\bin\klist.exe

    Filesize

    1.2MB

    MD5

    e9f2e5573422565656e499c02b954f32

    SHA1

    da260b5be98496fb7d4e7c1623a9c8562eeba4f3

    SHA256

    978d67ffb44ae4201398d527dac71cf27f7e1638d77f7f721fb280f1c2b394d2

    SHA512

    c1a855325f3795e27394961652bda95a4be500b879b14c957ebc7048ced132af0efb69777f2dbbe2731784bc83d9f65199332e1e3ee0815f9b6ca3eac1cbace1

  • C:\Program Files\Java\jdk-1.8\bin\ktab.exe

    Filesize

    1.2MB

    MD5

    df2c9842342263d1dc5246c9083ebc3d

    SHA1

    685767ff574e7ed35bd204ee4f1b7b4dc32f56f2

    SHA256

    1245790d6a9bdcbfa6265f34af6fd56cb9a9f4120fa717fdf7c2ee5a3fbd90d9

    SHA512

    f343c9829fff21650121cc04490faa9dc967c77b45c93180d6090871fbe4909d2d8094b4bac22079da2ff1a0b94f2d95ff918dfb1aa7dc2a8750011e51d2387b

  • C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe

    Filesize

    1.2MB

    MD5

    81a738584823d7cf98b8efd9a7cf799e

    SHA1

    7c86496552ac69d6751476d7bd5a763ea728004e

    SHA256

    f36aced5553089479bd1c8863f32325a2426e2e93fbf12a2720f095fec3a421a

    SHA512

    7d6490fb0779211a708c449703c13c0b2e5080978dc7f99421781c65e35633a6358a40bfd05fc66a8fed0fce693fffc2588dcd1576c69e86773386c4ddf13b52

  • C:\Program Files\Java\jdk-1.8\bin\orbd.exe

    Filesize

    1.2MB

    MD5

    222b9aff5f4b29f3eaefff9101229678

    SHA1

    70380ee3ccaf64e19c474cf01e84e3fbd1996c07

    SHA256

    bc2b266bbf3a63466ea7bfaccd3f1e8106935303bc09753c459cb4b66652e6e1

    SHA512

    7eda3bc4bc029bb5acb4786f8551b9abee2500d4ca5d89d7521c48d0d45f869e7d5fd9fd649f79acf7480d5b9fdd9b99f48b3e8ca89c2ffa443efb6049f6a752

  • C:\Program Files\Java\jdk-1.8\bin\pack200.exe

    Filesize

    1.2MB

    MD5

    99626c5e42a73417580046e5bd5b7858

    SHA1

    f4c9f1f000eb6fdb6e993bb57182b22019a98c29

    SHA256

    169168bfa21be3628571210e7cb7f5acc6b82d72ff14ee3c7a358ae9afa13f26

    SHA512

    22f6d1f666b14a09c9bc0903c14a3a4bcde74ce16845aa6e56662c69fa6ac871a86a88eac80a3b4383626a6ffa39ead2e309c3ff96f554c080fb4fc8f6105982

  • C:\Program Files\Java\jdk-1.8\bin\policytool.exe

    Filesize

    1.2MB

    MD5

    16c755049c17f22d9373a12143f995d1

    SHA1

    3f7adc59f3144fdc23d3e7397a7ecda7db8b5833

    SHA256

    a1bbd284f1b1f71342e025f16b4233e2a111f1104237e192818b1facc97807d8

    SHA512

    826a2b94f50294763c494834519efbd178f77d0c0e83f3b23cdc68f7a37d1d980f8387f0c61d06f8efec62f370d4cb4087023cbb73f0f96d17658fb9b0eaedfd

  • C:\Program Files\Java\jdk-1.8\bin\rmic.exe

    Filesize

    1.2MB

    MD5

    bf3000d6a88128516bc66555207cbd90

    SHA1

    07e3428a779fb4e46d1be370b05cf74efd859dc7

    SHA256

    c99182eaabdb92f0b6837ef68e10fc5c34bbb55e973788c2506c15278fdb3ab1

    SHA512

    18710d5b8c58726cde3d52e4b9c83ff0a5e935488d5d01c1d10a3bdb95df0a09ec4e29bf0b3d2d559d3d2abc21ff636fff5cc33363d5944b99f2289e509bac49

  • C:\Program Files\dotnet\dotnet.exe

    Filesize

    1.3MB

    MD5

    3d05c86e13ef93011237388f1fc2c2fd

    SHA1

    7982b410037b01cf9bf33acfc5e444f0b3372f66

    SHA256

    cdde14c1a1ea5b4a61491c4186858d5ab91705c3dcc07442526cfdad88f86c9d

    SHA512

    a5b65c980fac8186ff8baf1cc4cb9a862b38f7c6800930350bc87c736ecfdb6d308cf5956e429670cac80fc9c8c414f760d8760f1d82376d89eb6b4d8ce0609a

  • C:\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe

    Filesize

    1.2MB

    MD5

    a3000ed2bec16c9c1ebcddb6afee7b1f

    SHA1

    e941d1a69d96e8bd4d440ee150341b7aae1fbccf

    SHA256

    c09839fb707f57dced11f3fcb5efd23a3e3dd5924f4cb7a914ebc644c1901e88

    SHA512

    c41157d108d1a07730ce96ef56b331c602c0a9e02547041e77c54423e95d74111b2de4e196c00b8aa4ceee13b0d86e27ace7760309a9c18186dbe1465f866bc7

  • C:\Windows\System32\alg.exe

    Filesize

    1.2MB

    MD5

    9a8213f02ea25ac0d71d9e05838fbc9a

    SHA1

    c6ca4961e145e0c6f45247a282a684fa909d70fd

    SHA256

    9d77c2fe8495a72c16b47b8ba61a2907aa91beae5b63a790255c5a1217e983f0

    SHA512

    713e252f18917361264f070db3801df7450905162b9ca35d929e4817273e4a2a0e9ea65e7dd512b2630ee4e8190ff9d8f418f761823b239ccce1bef12bf64916

  • C:\Windows\system32\AppVClient.exe

    Filesize

    1.3MB

    MD5

    7df0521a88a47a8d06dc53e0802ee491

    SHA1

    bcb6bf7080a0b0d78f09cc0240ce90d85154503e

    SHA256

    257c5021abe3c13752c58915e59d45a317574f371bfcf2bcc89f09992031cb95

    SHA512

    0b628a9c9a795990426a35f6f3166a7e6961589ba1cc06e0144b3e3467ec61964a6fb13b4ca2c0b6da1999725f9c7a134a1f88bac25a3108fd15bb4ade706e2e

  • memory/2176-8-0x00000000006D0000-0x0000000000736000-memory.dmp

    Filesize

    408KB

  • memory/2176-7-0x0000000000400000-0x0000000000547000-memory.dmp

    Filesize

    1.3MB

  • memory/2176-40-0x0000000000400000-0x0000000000547000-memory.dmp

    Filesize

    1.3MB

  • memory/2176-0-0x00000000006D0000-0x0000000000736000-memory.dmp

    Filesize

    408KB

  • memory/2664-247-0x0000000140000000-0x0000000140141000-memory.dmp

    Filesize

    1.3MB

  • memory/2664-12-0x0000000000630000-0x0000000000690000-memory.dmp

    Filesize

    384KB

  • memory/2664-18-0x0000000000630000-0x0000000000690000-memory.dmp

    Filesize

    384KB

  • memory/2664-32-0x0000000140000000-0x0000000140141000-memory.dmp

    Filesize

    1.3MB

  • memory/3240-49-0x0000000140000000-0x000000014024B000-memory.dmp

    Filesize

    2.3MB

  • memory/3240-50-0x0000000000C40000-0x0000000000CA0000-memory.dmp

    Filesize

    384KB

  • memory/3240-41-0x0000000000C40000-0x0000000000CA0000-memory.dmp

    Filesize

    384KB

  • memory/3240-248-0x0000000140000000-0x000000014024B000-memory.dmp

    Filesize

    2.3MB

  • memory/3472-24-0x0000000000680000-0x00000000006E0000-memory.dmp

    Filesize

    384KB

  • memory/3472-33-0x0000000000680000-0x00000000006E0000-memory.dmp

    Filesize

    384KB

  • memory/3472-34-0x0000000140000000-0x0000000140140000-memory.dmp

    Filesize

    1.2MB

  • memory/3968-80-0x0000000140000000-0x0000000140166000-memory.dmp

    Filesize

    1.4MB

  • memory/3968-87-0x0000000000420000-0x0000000000480000-memory.dmp

    Filesize

    384KB

  • memory/3968-81-0x0000000000420000-0x0000000000480000-memory.dmp

    Filesize

    384KB

  • memory/3968-252-0x0000000140000000-0x0000000140166000-memory.dmp

    Filesize

    1.4MB

  • memory/5212-71-0x0000000000CD0000-0x0000000000D30000-memory.dmp

    Filesize

    384KB

  • memory/5212-73-0x0000000140000000-0x0000000140166000-memory.dmp

    Filesize

    1.4MB

  • memory/5212-65-0x0000000000CD0000-0x0000000000D30000-memory.dmp

    Filesize

    384KB

  • memory/5212-76-0x0000000000CD0000-0x0000000000D30000-memory.dmp

    Filesize

    384KB

  • memory/5212-78-0x0000000140000000-0x0000000140166000-memory.dmp

    Filesize

    1.4MB

  • memory/5684-53-0x00000000001A0000-0x0000000000200000-memory.dmp

    Filesize

    384KB

  • memory/5684-61-0x00000000001A0000-0x0000000000200000-memory.dmp

    Filesize

    384KB

  • memory/5684-60-0x00000000001A0000-0x0000000000200000-memory.dmp

    Filesize

    384KB

  • memory/5684-59-0x0000000140000000-0x000000014022B000-memory.dmp

    Filesize

    2.2MB

  • memory/5684-249-0x0000000140000000-0x000000014022B000-memory.dmp

    Filesize

    2.2MB