Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/07/2024, 21:43

General

  • Target

    2024-07-03_079d17694b6dbedf638fe580eb41c265_bkransomware_karagany.exe

  • Size

    677KB

  • MD5

    079d17694b6dbedf638fe580eb41c265

  • SHA1

    22c1cb22ccb9885ba65c00befeb37dde40a56bd5

  • SHA256

    43b75b436144894a3e095030fd5011e7aaa58d3d7f28e9b12d4a61cc1fb99933

  • SHA512

    576b9b58e95963ee5c71eb3ecb96287650493bbfffb601624ebb925eed6e448b8feaecdcf6dfd2754737e2fcf5551d1122b4ad93da991d0f1496a615ae53df7b

  • SSDEEP

    12288:bvXk1RUMAdB8qr0zw9iXQ40AOzDr5YJjsF/5v3ZkHRik8n:bk1Ratr0zAiX90z/F0jsFB3SQk0

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 6 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Drops file in System32 directory 9 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-07-03_079d17694b6dbedf638fe580eb41c265_bkransomware_karagany.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-07-03_079d17694b6dbedf638fe580eb41c265_bkransomware_karagany.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:2852
  • C:\Windows\System32\alg.exe
    C:\Windows\System32\alg.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious use of AdjustPrivilegeToken
    PID:4864
  • C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:956
  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
    "C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:4000
  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:4980
  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"
    1⤵
    • Executes dropped EXE
    • Drops file in Program Files directory
    PID:1416
  • \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
    "c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
    1⤵
    • Executes dropped EXE
    PID:4564

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe

    Filesize

    2.1MB

    MD5

    fa27b802eb74f24686ae8fe52ff20c3c

    SHA1

    3db66e5450e204ea353b264be2263f44bce4b157

    SHA256

    9d4c32aa24ae8f0692e1bd0ccd366b4e5d4a1730471feb12ffb048553fa4e9aa

    SHA512

    b2ca30dc469d2762ace0cd785017aaa2247aa13f961055ac1d39733bceb965f7143474dfde837be53c4e359265543f1372749990ecaab3372bf749f20bd6a83a

  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

    Filesize

    797KB

    MD5

    d617c17ae4b527efb04d41b785b4967c

    SHA1

    1129e333d38a74ea7a5ccb4c2f104527f2fd120c

    SHA256

    6725f93d37d8056ed810030ba7eefc3d124387c450e11a94196b5795a40643b4

    SHA512

    8d6afab289fcc8c519996f4fbd67a75478c329b7d4f0c47f52beebfa5e019c0511268302a728e3eba625db3a5cb8f2ac394633310fa54617633e2f84ac233d1b

  • C:\Program Files\7-Zip\7z.exe

    Filesize

    1.1MB

    MD5

    fa5f41f7c3b643bf4a676d5ce4c7e3b4

    SHA1

    ecde993ba8583271977895f6974b43ad869fa2cc

    SHA256

    3440eeb30363c7d8411d7b8b7c098a77a324c243699a158158df5fa68ec6702d

    SHA512

    212222e1e8e627d122500bb0dc9dac1e6fe8752bc8ce10d177fdc514dac4aa17949dd7dc993ee6f263b0392dc3b84118ca46a8b723f99bcec93bc65db6f4fed4

  • C:\Program Files\7-Zip\7zFM.exe

    Filesize

    1.5MB

    MD5

    d600d5fdeccd035d30ad967bdb918105

    SHA1

    83f1bde60b1751a72497b2964036f0ddb3bc1ed1

    SHA256

    b9d6d21eca28f6e6dcb5443c430c8524f00832656f3e3c5710e5643cddd0aed0

    SHA512

    642a9a5b1a312682bf25893737abe0d3e68004617e264429ac8b57f6b73c899481f566f93042f32b74292397cec2de134272551aa3f56e71d34dfa8726fd1c2f

  • C:\Program Files\7-Zip\7zG.exe

    Filesize

    1.2MB

    MD5

    7895ecd31954bb892287f0c3536bd6c1

    SHA1

    043d95fc578c7936347fb8dbc525495ece8a6cb6

    SHA256

    5ee06417f2575c963203c04c8baf215041be256a5baf44a5b389faaf61bd165b

    SHA512

    1f90ed768aa60fb1983edd92b9a3ad4aff2005919637d9365e9084b8fa0145276dfc362508b248c16bb98d0c8416be4e7b0ce49ed49d381dc7cf2c22a12b7dce

  • C:\Program Files\7-Zip\Uninstall.exe

    Filesize

    582KB

    MD5

    e5ee300fb7ab84a7e4804561f0f44020

    SHA1

    59e6615962295c54a9072eeddfc8f1f38ef6848c

    SHA256

    369f4a8256ab3e1773ed003ee9ec96e90a7b494b41fd8623cd8e64e30cebe81c

    SHA512

    e9b3cf3b7cdea61722c2186e7dc0f2b5b1a1fbf714864166ac41de00edb254bd3621d184f85a4761b8f61bd921dc62352511c3f51411b3e9571fdc4d9cf8b9a7

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe

    Filesize

    840KB

    MD5

    ccf6daad553adacfe023fd7eae8905da

    SHA1

    7f9da2697aee776f681d5b9ccb6247c9076d5425

    SHA256

    42288609ec2de5b33161b3ec1b226f8ac5d8d52b1b3052e74bd50f27a3ded1a6

    SHA512

    4cdc93b0083ae64b8517b3134dcbd56f14c134114771dde1ed52e68ec028bb7217bb90f7e8bb3882e27dac69136e640d93321febb7cc2c8a478a8e1b9fb210ef

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe

    Filesize

    4.6MB

    MD5

    8695ebd53011117a1d8897ad5d514999

    SHA1

    d42d97da715aeee208d44e4825d9a035167c4e90

    SHA256

    e905a145aadb444acbbe587676d5267cb0bd82b378e52848bbb74d9b1eda4128

    SHA512

    e8b7e5c881f046dae350ae60308152c088f56571cbf63dd3f5c0bf3eaad171c7f2b80c47a9d27ec29e52f90204bea23675ee83781b4c7c68cfbcaed1be5432da

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe

    Filesize

    910KB

    MD5

    c38273fe1fe4bc6d6881f100ebf910dd

    SHA1

    2c16d0989d9c57f5346ac7706da8e01305ce61ea

    SHA256

    2bd3423c39331ff46061f4de0921653021627627a3ed59c70fe548c8c7d0f240

    SHA512

    ca232bac9512029ab76b7fe0d40fa9c5cd1f40613ff6e9f98452a280788e1c7f02c04ffeabbcdd34ab92408d22341593e627936435ace1d18edf662ef85bce08

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe

    Filesize

    24.0MB

    MD5

    75b4ccc533655cadba5dd4ed41d2563a

    SHA1

    177558fb3f2c2c6ce5fe1aced83542cbae9c61d6

    SHA256

    1fe437f6e599edb87d07207bd29fd5d2ae6f60832754daf2ff515baaa3acfa9c

    SHA512

    6357d70b9ad87a4a3731a312dbfc1f19743c794b3b8f6e5dbb4ddbbe2df659ddc4ad8bc7b54221c7c69a44ef897eadc9d60184cd2f92cf192e35e5ebbdf75194

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe

    Filesize

    2.7MB

    MD5

    6ede90d2da97af9258e53fb8e98bcf44

    SHA1

    d863d2c6b38172f2259cb51e21be468bb506c8a5

    SHA256

    3c06f222cdc207f96db3c0a9c288d3fe11666c278008085f52e79620d09f2162

    SHA512

    9667fe9a6c11cad97b78e45263e1efeaf2dad11145880f486deaa4964b842fffe918ada8cbe5e95aff1efec1ff7250c2bfa6a23006b9f6a0aa4cc8cdb47cc25f

  • C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE

    Filesize

    1.1MB

    MD5

    c6554ba72d925aa33b1d284a150c0cb3

    SHA1

    135161f995eb85659357a09e384f045e603f9214

    SHA256

    836a95a257210fa3160cd371e76b40410fd451f166eb3ca566c05a35e67785b8

    SHA512

    4c49df594fb9bb4f216f301372ebbf64534858a451169445542bdcc1ddbe837ca7f4ec0f645156bfff6ff4cc2876bf996e19523b7e810d3022f7bd903ae10b2a

  • C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE

    Filesize

    805KB

    MD5

    308e73e8fb5f36aae91d772c48a2a0f4

    SHA1

    e2360b639fc32137d61a46bb7f4f7ed9da956569

    SHA256

    5e2b9a52f8fac4662405bb1a69b5d04bcfd31e8c1aaceee9f229e860b95c0dd3

    SHA512

    3a1e9b92d9c642a11c29e4fde484c940db3c61c6e3c7c4a57149e86a40e9f50debb737269323ba27489ddcc9e075c9c804b3e20501216240aeb36219e23e77d5

  • C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe

    Filesize

    656KB

    MD5

    f6582fdb6f41cc234b6ef4d8230cb272

    SHA1

    ae72339582aa3cfb933c3298985e60453b8440c6

    SHA256

    7a967ea665422acfcdb1f509a109b62465fd0663946320ea35fd4be18947600c

    SHA512

    8a7e4d9d6ea2203a808b7e9cf40e692dcecefda6c6eb16f400d6cc1f2753ab357c443e044cef55e99223989d719120fe18f6984c34b34b5ed80826e776ce1aed

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\chrmstp.exe

    Filesize

    5.4MB

    MD5

    470d7a816439c895265ffbd994f64798

    SHA1

    170591e12f62ca847c3e6e61b855b66971bb0785

    SHA256

    b6e1d24b63d1cac5afaeab1b7715c14a4acf3fce142d9de465054e2cf5977dfc

    SHA512

    2e8777e1c52aed16b2a1235ece8a9d9ae9de1693915f66e265d270bf2f05dcc1e5d50bb12a83026fa4bea328c013d5dee550377d50640c5b30b2513f067780c1

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe

    Filesize

    5.4MB

    MD5

    5316bf9ad27eef277586a824af2412c0

    SHA1

    0169a7239f7317b65f264f48371878a2d2e9a4ba

    SHA256

    b7f4b08dfac88bc6d3e6142e9726cc798258e4ed7c42365cde4ac5fe1f7c0ee3

    SHA512

    6adbdea3758ec058fa9b5c38c340b417c57898de70c403d5351948adf67b42e8c5863d84ec3dc9e0e4382204bea3ddd8d972afcfd9e2f0a309a0b8321f22ba84

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\chrome_pwa_launcher.exe

    Filesize

    2.0MB

    MD5

    7bc2b3dfddd1f7f0450e6dfc255937ac

    SHA1

    2b7f07877ca7b608538ec4bba9095a71116c5a83

    SHA256

    82b6eb9170582bae01ef70dd1d53e2d489b3e2d4fcc410217d89d2b4e8acdc04

    SHA512

    ca8122bbb270612079492aef8565c5778aa045d6eb8a8628ccc21f5ac9179fa0fca10e18aa61876ff72bd0259779a9acf1c6ff49e468875d2c45857920b35862

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

    Filesize

    2.2MB

    MD5

    fca36124312e812fbd233fa72dbf3dcd

    SHA1

    64ac6e806fb098cb23fde47592a5dd9e1eb96133

    SHA256

    98d8667ce43b744db007d70704d08601324761bc6b61650f4827b09648bdaf37

    SHA512

    f268a4af4220bd5f0d3676c8d8d28d7daaca0abb19d36b3df348e1533af71558eb6168d1aee8b32b7050c87541a0f96e3217d48b52604c79b389e512975fb4c8

  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\notification_helper.exe

    Filesize

    1.8MB

    MD5

    b41a3e8ffd9f42a9800b928d738244e1

    SHA1

    a2df4f082c50a0c662809c8e905779c5a9bf8351

    SHA256

    3a7144dd76a5d94c773209d5655516e55c261fe74ba9387dd2ff7bc885621628

    SHA512

    6af5f2ed127d092bf0ebea3e4cee42e19b122925e19031dfc53cae8317cf296e1367dbdd01a16acfe159f821da73c3140297ffb02ccd875c1992c0e6527df96f

  • C:\Program Files\Google\Chrome\Application\chrome_proxy.exe

    Filesize

    1.7MB

    MD5

    d3d6fb5c386b75b8055ec8f4537b7fe5

    SHA1

    5bfbf5ae9798c7238afe346072749c8a6dfb17ee

    SHA256

    363df8ac1cd976fde2fd8963109d803e431372d00a6de229b5aad934b22ba2b7

    SHA512

    7d99604ea708da87d049e4104a54317f3986b91f05b84d41afdb64c79c8835ab026dcd39f52f2ca8a2eef4303bcf0d25c1aba680a06afe279b9e03f586376008

  • C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe

    Filesize

    581KB

    MD5

    59ad87dd454c8f07bd124fb541ad6223

    SHA1

    1fe609e012ae2768eaa698ed66a0622e62ab277f

    SHA256

    73e17acda3c84125dae686388ab364fd3244b49d825464bfe46ec6fb3d75aff7

    SHA512

    9959be924128f7d6b7b137546699973995ac28f2e2a131a5cf166319f97ed92534dca740a66418162e08ff08c33933bcb979b399f6d5fc09b3daa1a7078216f4

  • C:\Program Files\Java\jdk-1.8\bin\extcheck.exe

    Filesize

    581KB

    MD5

    38950228a32108d46107bd797fb1c578

    SHA1

    469eb96142dbf45b146c3cea6de29fe1d5017aa0

    SHA256

    5cba195ef6a68df5d552940798b654b80dbe50217c5f2ab79c55da785b353672

    SHA512

    287bc2e408ac8513ebf218cdc291dfe7861455ed86f9d52a5acbfa0b7b00930c6493704c8476b9237874d74f776420da36ef151b7bcd838220ded91611b3cafc

  • C:\Program Files\Java\jdk-1.8\bin\idlj.exe

    Filesize

    581KB

    MD5

    970b6fefeddcf9e4fb236e0b62d403bd

    SHA1

    54c085892a04814b439a3f978f9a4dc4607eee4a

    SHA256

    5564b9c6aa92dbac080db5dc6e09fb01d9dd0e6d5c76e378288d1d012a8690b0

    SHA512

    3a63e091a11ddfbcb991569c6a26f1095d4021f221e92972bff6b4c46b39a17db7e5c237b9eb747fab96dab450ac47e8923439f0a1553e0f92b0316613d73c5a

  • C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe

    Filesize

    601KB

    MD5

    6d0381fc4ff13f6d465c0774e0ce1c02

    SHA1

    c13b67f6953b6fe000bcf164b30ce8ccb8d11d70

    SHA256

    2e3ac9eb377ebc57c6850a1405f25adb3f0982771f5d9d18b5d7267ea754cbb0

    SHA512

    e49b1c384e482968b12e6f82b76ff8f6080a6d41b5d741b807794b026aaa5a8e0d3413a8af7bc3e0f24079ed833c1bc0b09aff1f2651829b2c8396258debeb66

  • C:\Program Files\Java\jdk-1.8\bin\jar.exe

    Filesize

    581KB

    MD5

    1845bb5a04f5e415916e71627a25960f

    SHA1

    a31531b3bbdeb694e80306a295ba006ebbf29a8b

    SHA256

    489c32ac8e06e6f48502c22e446b6ef45a1253c8051cdaf5778674a7b681f027

    SHA512

    16f9954e07c0d9c4ecb030bb4b9034c0f02e86b0f389a91ead1d2d16468b829ca632e17530f6dd2df87ea5e9adc9d2aba76bb5d5e8ce9b8e3e25a7be4c84d57d

  • C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe

    Filesize

    581KB

    MD5

    90fa203cbea638f428c86ae9fb821e98

    SHA1

    841fd5ab8b78c6bee3b54313f6657fa5613e0c15

    SHA256

    afd18595ba63649e63c48fa24b5341a8c0b27df22fa2850c734ce6ad683eba72

    SHA512

    c58f0aada3bfcff3593ec8ce55df5b75f3b330e55222f2394f507a72988f607b5d3d7b56177e5407852fdd990660a64bbaf2a947d900db1b16ace47142fcacf0

  • C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe

    Filesize

    581KB

    MD5

    e19d97fba20c59ed4afea27ba9c3edaa

    SHA1

    fa291eec346f6d0458c8d7e2cdf84ff883cf64ce

    SHA256

    c320c405c2e4c6ec65df755265459e2eaf818f6129adb5f5d1f8528f9c7e0bee

    SHA512

    5a1826e7260053699cbe513aab117256ac17cb02049b5595c60a3029a7b9bad4bda4e2b4a4b2eea8b0ae510b571cadbf19b9287e7d7ef6057939a31c7edbc780

  • C:\Program Files\Java\jdk-1.8\bin\java.exe

    Filesize

    841KB

    MD5

    de1ea0db17787ab3d6e194014934ca8c

    SHA1

    ce19135914f7617d0f2dd2e4ef73546fd27aeb9d

    SHA256

    d05136bb8ffa59b55895603914b8c35c2e392e6d2ff621301b55b18820e3f650

    SHA512

    4b7d44167f143b4c7e006a13ad1bbd4738bfdbf4fe54a9d13515754de995c3a0fb03d2031c73d9e9fe57317bedecfd5d8cd6bc31459d82fbcf4edbfca97bfdaf

  • C:\Program Files\Java\jdk-1.8\bin\javac.exe

    Filesize

    581KB

    MD5

    8a62bf904d1e2a8af8c3337b8bd6de11

    SHA1

    3257db9948ea74569fe71acb6283b3f18152d4d8

    SHA256

    f2d4d9182ed1e2480aad847b2a018f37e4673321f2c8844029d559882ff4927b

    SHA512

    765673f78fe1f29a02284222f03ee7142811438246a8e508d0f81201f16e859b06db1e269de0e6194af8b1e9d6b71be4eecb023006cef1300cf7dc64950f32b6

  • C:\Program Files\Java\jdk-1.8\bin\javadoc.exe

    Filesize

    581KB

    MD5

    c1aa55e9f4118c2f57220b5169133051

    SHA1

    5a3f0ac5254b619dddbf853d1394b5e0ac56d385

    SHA256

    bcc36b8ba8914517dbe5fd5f11e8191513352d3336b0de17b2621e92d5645841

    SHA512

    143a45b7d5fd2be33d5cba788965d75a9b606d7cec526a1c5c8ea5fb610e25c3be68f97dffb475d6fe6d8f4eb1340672e035cea9b0f4eafa3b6f1b61d60d0a54

  • C:\Program Files\Java\jdk-1.8\bin\javah.exe

    Filesize

    581KB

    MD5

    2f291dea15899a5156b97e745904a421

    SHA1

    94645b0ad36bc023dca29c439a7760000c4be7ac

    SHA256

    5fecbcbf76ca38b07444cc76328a52d7eca934c61b1cca5da6e7b5f1413bc94d

    SHA512

    2e4a74bc78b9a75c38201f2f33aad170114fcafc831db080fba63a924a4b1d2c3fc5fa8073d2c9c9c992b09cb4ae64ea7b25f830350f219239ccd11a08ead104

  • C:\Program Files\Java\jdk-1.8\bin\javap.exe

    Filesize

    581KB

    MD5

    bf010caca8e645c41339b37797bfd1c8

    SHA1

    bccc881fb913fbfed39d59264996e93861e95391

    SHA256

    f142924886ccc2532c0a8aaa3ee2227a591a87e7b1bbe29d0874f53505982fcd

    SHA512

    70e2b5e697a7c1d2a7169ea4368977f8af89a5f9d234501a9a05093779307b3298c9d3cd797132cca806f0310dc9cd51c3a6a08d826d34dddb6fc380d2f3ec7a

  • C:\Program Files\Java\jdk-1.8\bin\javapackager.exe

    Filesize

    717KB

    MD5

    ab4d8fb029bb6b1f5dfdbbe689fb6ab6

    SHA1

    573dcc1f478d2138c1992b71ec6aa2700c26353f

    SHA256

    23128ba67506aa4bf0646e3ce9f4fc3901df9584281540d8539457aac1381e86

    SHA512

    f934be7142a4c5468c37a4a49ebfb468d0e767dc1c093f915412e916066d06e30569f734d2f9b0d34d17c6d9e712fc532344f7afd35104df3e73513d789ddebf

  • C:\Program Files\Java\jdk-1.8\bin\javaw.exe

    Filesize

    841KB

    MD5

    6be1aa42d11c5e24a943138ee57d64b7

    SHA1

    f0127e73a6ef0b232908067bac3aeac0cf396166

    SHA256

    b25a0e5e59588bb1f3886c14f75cc1ef357e15fe27833876f5ed62df68300dee

    SHA512

    4d325ef4d9070b1bbac9cec8e6e1e292f7e3ef19e02f6ee706cebd58577cd642503f49c9311d6ca946ac25ac233200517d0afd9c10099ea99c60ca8a9e0ea23d

  • C:\Program Files\Java\jdk-1.8\bin\javaws.exe

    Filesize

    1020KB

    MD5

    8dbc7a420754433512be1f0c0e409448

    SHA1

    4b46cc8a93b2df1b30586d5488d828231d52ec74

    SHA256

    513dc2065a4043946ac47b3342d59d4e762bc09b506cb30962bde0d7065052e6

    SHA512

    1f36199aa3a097ed04d8cb672ebd9fb9cc65c997d85dacff6c386fde6536ec43aa274a508a8b4293e44568fd4a21d35cadac807e631aff201349a3e15de7ddcd

  • C:\Program Files\Java\jdk-1.8\bin\jcmd.exe

    Filesize

    581KB

    MD5

    dc52c3163eee6057734d45a6119552f8

    SHA1

    80ef6aac94a65009706f5aaff5bd54ac78ae3dbc

    SHA256

    076ce6d7d8b854905f6662f68b38205dfb835a5361c6843d92724ca584e8f76d

    SHA512

    550f1f0955c22ac2a959f66ee7c8b6b1845addf94d13eb82f43485139e8fb099e2ff8f42b9352ade9999bf79eaeac092adf8a6bf8b910b543267bc713fb162e4

  • C:\Program Files\Java\jdk-1.8\bin\jconsole.exe

    Filesize

    581KB

    MD5

    14abf2960ced20ed2b0c330f006756cb

    SHA1

    e989124c1e63ea0846d6254fc0ca0421782646be

    SHA256

    e7b42c3a5b5c8d5d769a780788056fa3d87fdb483e53d3be62fceb48a608ee8f

    SHA512

    8bea7f5738a13b2f6905ea9469c8c2e92d4ad27cc7ff364a6deec8145319f1ed703ea12d472124cc40352aea84dd3ff9493cf6b4d59d39409b8625ed9c539891

  • C:\Program Files\Java\jdk-1.8\bin\jdb.exe

    Filesize

    581KB

    MD5

    d55cfd5ffbe57c07ab6debef428f634b

    SHA1

    5298f7557a95e1294af30cbe6c00ca124b3e9e7d

    SHA256

    2200b8379a254cc582cfa786bcab8434adb8d467e5e2e8cea05ef2c339be847d

    SHA512

    226d0785e3bbc317476e21450fdf0db3815cb99140bf3dadb691a5b3ad05fb0054768715dcce834f8792abd76fe8971ceeed5e77be95b8145d6b23d3f82669e0

  • C:\Program Files\Java\jdk-1.8\bin\jdeps.exe

    Filesize

    581KB

    MD5

    933e02a5813ec05c378243b2f3829742

    SHA1

    d80f8f800ba5930c87e68d85384201bc918d0741

    SHA256

    e83d1c43c981391a097c027d73fc5361bd7776e73db4f2486c33b253d17e4ef7

    SHA512

    000848a88f13fd5fe5fdcf1cf008c97c252c9d37b2da0514329612ef56367ae11f37fe0fb9af6ec590630d940b8afe980d7cf90f7fc734a1429051ef73102241

  • C:\Program Files\Java\jdk-1.8\bin\jhat.exe

    Filesize

    581KB

    MD5

    9402016d3e65713f7a361ff184813f5c

    SHA1

    c5c822f5f027dea74e7db388dbcf69712a7eb887

    SHA256

    73e59461bb1a753b9a75efc84ab97a322635fdc48c6fec9fa84088e951bac730

    SHA512

    6be58676ccd9fd7e8fc49a4d8d41a8cf64e67f1ab5566f2c852060cb99c3c40052bf00bddb964e4c0fc581731426c1836d40770ebf21d17e3faf01e77a3cf5b5

  • C:\Program Files\Java\jdk-1.8\bin\jinfo.exe

    Filesize

    581KB

    MD5

    88edd3cefbb0dc3215ac32d3100aa6f1

    SHA1

    84f8f35cf4428ada3fb4bc5c3a0a55cc0ae85bb0

    SHA256

    1c4f3e834987b9319d7bced38557dd2cdd6c39edee2d02be4bfa62eb9c7b5c78

    SHA512

    58f7c575f7a64526e2bda790b1feb58b76cab5b7d1eff121334c6d23281b7ecc138eee36d0385b2292b068525918e18bfc4336cd39e644253b19f709ec566c59

  • C:\Program Files\Java\jdk-1.8\bin\jjs.exe

    Filesize

    581KB

    MD5

    ae21dace66e0686a058e61b68cec1446

    SHA1

    6e59b05ae03bcca30b8f13a26295a667ecaa1e3c

    SHA256

    5a46eb41de1c5d905bbb9fcd0143e780977b4c2e47da8bbbce5a9582db1e9f67

    SHA512

    2df4720cb2ea21321ed8f58c514ff8cc2f202096f2b5122f482deb4831e304c9848646ab1babf96584fb9c571fd6109942acae82ed70e162710e81820e48ae28

  • C:\Program Files\Java\jdk-1.8\bin\jmap.exe

    Filesize

    581KB

    MD5

    cec9a70a6bdb299077fac0b2c4f79378

    SHA1

    93450acdcdc67a995fb4a35cf9a130ef308cfdc5

    SHA256

    1e4fc55d7a73fb9bbeace68251537136925abef579cab87abe562be7b7a53f2e

    SHA512

    b93c7e890901c22c95d137faab0e933c674323c53f636a65d5f05e2d4b6f8c541cd918967115a10cc9a51bf0258273fbd27166ec7b1da204ff07bc8b372a10e2

  • C:\Program Files\Java\jdk-1.8\bin\jps.exe

    Filesize

    581KB

    MD5

    44349c1c64e2f21cd93474e302a96acc

    SHA1

    e268b6f33cca946ccf94d9774f502792d63f55c7

    SHA256

    7b0d7f6258d007a1718734c62c68786656247e0cb03e1a3a08cf0f72447f8fe7

    SHA512

    691d7cd7d7148cd2c6c12a579e0668a2135f4182b9982b9f2e3ab0fd5779b715e14d4fd7b0a3dc0d41a48eb0ed98ca7fd747c1267559ae1166f855a7a52c9c07

  • C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe

    Filesize

    581KB

    MD5

    71c2f82595363289d1b655ff52734579

    SHA1

    9c22a283c556c1f5cb7447ba1b996d208f9b56af

    SHA256

    3f71e05c4aaa427bdee50ca1ecb0e7a0dd61212254d22ce09d058cf1abaa908c

    SHA512

    c348f40987f3cbb487fe8816151019700aeff346acc153821c5e2ce6740163cf1d365562957138544127693ce537cbff266e9b21779000beb111e2ba40c81475

  • C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe

    Filesize

    581KB

    MD5

    b06ec1e019a1d31adebbaf6ac5fb54d7

    SHA1

    f0061cca26228a541b51e8ad49720b58f1e9131d

    SHA256

    64520014515b7375e951ccd551de2ff089ac3e338a8199056db9d61e68a99740

    SHA512

    517daede235a16a33a0f6d711362a03dc0b1ec799aeea845a6df3eb311180da6a91f1d4ede66eb941626b332e2119a77564c69b7aa332194d7f08c2c1c6c9f52

  • C:\Program Files\Java\jdk-1.8\bin\jstack.exe

    Filesize

    581KB

    MD5

    75cf12eb37659d4c601c21e1d476772c

    SHA1

    645576b0d07e5ada452c1fa425602a8e6cf8879f

    SHA256

    627fe7f96695d3453a52345223bffe933e475093d6b8cd9fe1f23713de70536c

    SHA512

    51b1463c3273f3e85d874bbc0e513083aa0b449c92946fa99a12d4fbcbefb1393906bdce4968b6bb548841770faeed90e5b8caa8204f0cc54614964f54594968

  • C:\Program Files\Java\jdk-1.8\bin\jstat.exe

    Filesize

    581KB

    MD5

    89c1aa2530dc50b27a1eed09e04cd582

    SHA1

    72d70628ac977b8ad3b4520b4ec7291f4dfb88a2

    SHA256

    492866622998f1568d81a7f7a46268aa6f60621fba2e9454e1a22859ca529ee5

    SHA512

    0a132b71d8cbbeb0aeceb3769fc089448e601be8cf1eaf295085b0a6859758e367f5a9e7bfcd774bfc22e4827b3ee272d8edf60557a20970d954903813b5fab8

  • C:\Program Files\Java\jdk-1.8\bin\jstatd.exe

    Filesize

    581KB

    MD5

    bb135846fe3a005422e367c0c604c287

    SHA1

    5d22d75c14a5e1fcdb071b40eca757aeeb9fa6e8

    SHA256

    937489265e26e14cfda393e8269e67fffdbfb178124692502563ee29d85ecbdf

    SHA512

    adace301dacd88cb048d6a39887efb55a061d518c9ae4a98c25f033b1789f8825d6561f5d4beae0b960e61b0ab65070333ac2db2a92758edab0d8a6a3c028d80

  • C:\Program Files\Java\jdk-1.8\bin\keytool.exe

    Filesize

    581KB

    MD5

    bf852bf95bc32f3beda8379a18537ae6

    SHA1

    57432c2e8b96e3803bcd3a2739a31429616e7dbc

    SHA256

    1bc2ab097be5380a4a102515d3a1ccdac97ea848eefde70b12fb0d387176fc69

    SHA512

    8b7717119bb7aaccf9a38d93f9ee2c929519483eb68de8359029669a904066ae12ddfb55b2ea9a00c381e6a6222ac94a21534274c8ae9207523b8426d1a99d84

  • C:\Program Files\Java\jdk-1.8\bin\kinit.exe

    Filesize

    581KB

    MD5

    67a9fe301213ecf2c6b848da754166e6

    SHA1

    af1d0c371189d253e42b93f0056f0f5b6ce7129b

    SHA256

    8b380e859896a72c50203e3802a4fa6415b3b3a868f3b532a98e0b08022680ee

    SHA512

    4f20372d0baa409da6636a7ce931a296da16a1a9b0fb57ddddc9c611635142f04fe09942ca6431454f5818275943e6e4ba9753ebad95eecf4cc0818bfb2f66fd

  • C:\Program Files\Java\jdk-1.8\bin\klist.exe

    Filesize

    581KB

    MD5

    fe30961ac684b371c9fb64ac580bd731

    SHA1

    994cf7ab5284a2de776fde41ad3a875c8f3431dd

    SHA256

    00a746b4ef48c30a9a18c23a5705f149d561fcf20bff1e309a5124080d7ecf4f

    SHA512

    65edbbe890421a304d14a25ca261db7b7ea9fc5b529ef7f6c1cfc8df3838aaeda9878c3302b188f3666770ea6b1f813b566dd5805327d9842ddfad07d24bfe96

  • C:\Program Files\Java\jdk-1.8\bin\ktab.exe

    Filesize

    581KB

    MD5

    7014b4d4c679ec274f69511f39fb72d3

    SHA1

    aea2ef38b57f07b8344fe21336f52f88bccd229a

    SHA256

    e6a0c78386823a7499b2c647c8b9099903372decd40ea7920d18ea29d027eed7

    SHA512

    a681f6b0c5ad3da214900c43fd3c1817ea63e309e2929db7e3a6ce54248524dc12d9e896318481c991a80df356a070efd05538cdfcdfb42d3056eed337acac2f

  • C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe

    Filesize

    581KB

    MD5

    21dcf80928afacba07dfba13bf9e683e

    SHA1

    d6ce0331364924b2870fd860a35d291f0aeff56d

    SHA256

    75625b396a9239f29f75a4a795d0e371c04853d63b1384e4c6bbc73ff4c10f70

    SHA512

    bfdbc1c5928685c6657fb6364ab8e573613d8f5571d32ebab15e9c237e49fafc37ba5e4ca8069c9be116575eb9c4b7f018b62b859a6725d8c6c142053e16253b

  • C:\Program Files\Java\jdk-1.8\bin\orbd.exe

    Filesize

    581KB

    MD5

    8a8f181ea53135675522919a919d7969

    SHA1

    1710970bd7e944b0d1d5bac02b83220db914639f

    SHA256

    76597072f692b03a368a780a716821766c699b9348d64fbf3ff4f43f9ca46616

    SHA512

    77899ccee7c3ad102ed10f6342d31400153f252840488c7f6df61c0a2cdec4fd8c86bcc317657570529fe62a5b1e3a3a149754b9f315ddcef06c81fbe886103a

  • C:\Program Files\Java\jdk-1.8\bin\pack200.exe

    Filesize

    581KB

    MD5

    1fe6496845c57a0d7e4021c1654e556d

    SHA1

    8a78c29dda3fcd376a231b6c1c08ea3b4319af23

    SHA256

    ea11aca722e15c91f639905954f381d11b5aafd738f553aa631fe51a6f819831

    SHA512

    c5d4cf05546d1b7d658714eb12455beafc214a359694b0290041d7e7f4d4f7f3fe44e0cc5798c8a78a4df108cb6dc31b3e69661168e077d9ce11fc6d4ee90350

  • C:\Program Files\Java\jdk-1.8\bin\policytool.exe

    Filesize

    581KB

    MD5

    9e8626b84b68ebcb28dd859f64f147f3

    SHA1

    2f9969dcfca4785beccf6baf2f53c6c8d44928d2

    SHA256

    37db2b2d777490f97984ba0995e7e0a700e8d65a33bf72716996a50abeccf52e

    SHA512

    5dcbbf2d19bc982d14cd77025ffeceaa2733bad96e115e34c61260383036660d618c5f82ce316ad14570fed535de2251d9f9cdf25bf8de42a8a8d54f31453814

  • C:\Program Files\Java\jdk-1.8\bin\rmic.exe

    Filesize

    581KB

    MD5

    d912ce6ecc03c3dc9cf1c101547bbf98

    SHA1

    5c9d8f8b3b9cb936f12fe191dc38d8daabf06311

    SHA256

    a3c06cb501879238f55123d690200fb3279f880576593210b26e76b87ce74101

    SHA512

    a2539345000a3b08627d2afbb8d55a4a05582cccd9e21c1aaa08acdc3526d2dada6dae8c2d9e48910cdc376160e68901dc4c17e7075f9e24a2b4c1b9b7410732

  • C:\Program Files\dotnet\dotnet.exe

    Filesize

    701KB

    MD5

    eabf11843589ecd6b7417f07b532a7b4

    SHA1

    7ad50673d54daa79d183e91e74a74bf141b34736

    SHA256

    1f1112f68d16a357b1b25c850cf3e1f336c51de3bc11dd81a58265d67c680ea2

    SHA512

    9ac8835c4c691a4e0096011d379ca805078cd3cb2b490d62a1443980ee971dec71cca4bcacc33b9c1c2e398c299cbb9e3746b1e05003aab83b13dc5ad424bad6

  • C:\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe

    Filesize

    659KB

    MD5

    f0b75e15c85c5c63fab72424cf6fbe7b

    SHA1

    62a1ddb494547b931aa12de5e008356dce043402

    SHA256

    dadd493db303c1dd33db45147a9095e2c4f231b323425c8a2087065e9ee208de

    SHA512

    0ff1abf5caca77ac26128d3becff881b747809b49f33342bcd7f794835eee4aee3e063dfe84bb466cd6c96f35683af25a5b65b34207a42ff9e295d47becf3b59

  • C:\Windows\System32\alg.exe

    Filesize

    661KB

    MD5

    bab9152fd4d250f4f73b603daac9be9e

    SHA1

    c8c2964754d3c3ad8d834a0b81f4651b7dd28b7b

    SHA256

    780d98d61c45323cb178edbce73b008b820821f496ef2412ef2e430cc5d16262

    SHA512

    171c9ee9e7272a5c7e49b60dc0b9fcd072555af5ddd522c57de531c08ab1af7345e4bc4a2ec13f42b67a4c998d12704e79e1ad89b26a3018881369c105686bb7

  • C:\Windows\system32\AppVClient.exe

    Filesize

    1.3MB

    MD5

    580c88ef25e936b702ca815e2c24358b

    SHA1

    48efbf42ad51e4e5e17ea4302640c1e9124f36eb

    SHA256

    28f247a85e9d14edc13a06470f62acecea50dbb948436962fc218a05bce450f9

    SHA512

    3d0f872a0dbdb7528791bafab9dbdb9cb62195349f87e6c43f55eae4354866b3fde590d39b998a7841046c16a0cfcae6161f9883f50131d231c573b2d5d6251c

  • memory/956-26-0x0000000140000000-0x00000001400A9000-memory.dmp

    Filesize

    676KB

  • memory/956-248-0x0000000140000000-0x00000001400A9000-memory.dmp

    Filesize

    676KB

  • memory/956-35-0x0000000000730000-0x0000000000790000-memory.dmp

    Filesize

    384KB

  • memory/956-27-0x0000000000730000-0x0000000000790000-memory.dmp

    Filesize

    384KB

  • memory/1416-65-0x0000000000CD0000-0x0000000000D30000-memory.dmp

    Filesize

    384KB

  • memory/1416-87-0x0000000000CD0000-0x0000000000D30000-memory.dmp

    Filesize

    384KB

  • memory/1416-89-0x0000000140000000-0x00000001400CF000-memory.dmp

    Filesize

    828KB

  • memory/1416-71-0x0000000000CD0000-0x0000000000D30000-memory.dmp

    Filesize

    384KB

  • memory/1416-73-0x0000000140000000-0x00000001400CF000-memory.dmp

    Filesize

    828KB

  • memory/2852-39-0x0000000000400000-0x00000000004B0000-memory.dmp

    Filesize

    704KB

  • memory/2852-0-0x0000000000400000-0x00000000004B0000-memory.dmp

    Filesize

    704KB

  • memory/2852-2-0x0000000002140000-0x00000000021A7000-memory.dmp

    Filesize

    412KB

  • memory/2852-8-0x0000000002140000-0x00000000021A7000-memory.dmp

    Filesize

    412KB

  • memory/4000-50-0x0000000140000000-0x000000014024B000-memory.dmp

    Filesize

    2.3MB

  • memory/4000-51-0x0000000000C90000-0x0000000000CF0000-memory.dmp

    Filesize

    384KB

  • memory/4000-42-0x0000000000C90000-0x0000000000CF0000-memory.dmp

    Filesize

    384KB

  • memory/4000-249-0x0000000140000000-0x000000014024B000-memory.dmp

    Filesize

    2.3MB

  • memory/4564-85-0x0000000140000000-0x00000001400CF000-memory.dmp

    Filesize

    828KB

  • memory/4564-76-0x00000000007D0000-0x0000000000830000-memory.dmp

    Filesize

    384KB

  • memory/4564-82-0x00000000007D0000-0x0000000000830000-memory.dmp

    Filesize

    384KB

  • memory/4564-253-0x0000000140000000-0x00000001400CF000-memory.dmp

    Filesize

    828KB

  • memory/4864-247-0x0000000140000000-0x00000001400AA000-memory.dmp

    Filesize

    680KB

  • memory/4864-21-0x0000000000580000-0x00000000005E0000-memory.dmp

    Filesize

    384KB

  • memory/4864-13-0x0000000000580000-0x00000000005E0000-memory.dmp

    Filesize

    384KB

  • memory/4864-12-0x0000000140000000-0x00000001400AA000-memory.dmp

    Filesize

    680KB

  • memory/4980-54-0x00000000001A0000-0x0000000000200000-memory.dmp

    Filesize

    384KB

  • memory/4980-250-0x0000000140000000-0x000000014022B000-memory.dmp

    Filesize

    2.2MB

  • memory/4980-60-0x00000000001A0000-0x0000000000200000-memory.dmp

    Filesize

    384KB

  • memory/4980-62-0x0000000140000000-0x000000014022B000-memory.dmp

    Filesize

    2.2MB