Analysis

  • max time kernel
    149s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/07/2024, 15:46

General

  • Target

    2024-07-08_24e816d738031190104a31f63b5c5166_bkransomware_karagany.exe

  • Size

    1.3MB

  • MD5

    24e816d738031190104a31f63b5c5166

  • SHA1

    5a9f359c7bda7d6bfeea9236a140219494900e04

  • SHA256

    566a4c51f280010714275d232f9b8e086ce527aaf6bde00d455f234dc9b96cda

  • SHA512

    a7eef9518d6801e0cf2755e1827d9fcff85b9761e5d7aa0d5d64e2531bc1279d0805c3de591b189d248ae7017c91356deea678e0123b855c4ea64f1e1c827053

  • SSDEEP

    12288:evXk1X+lCFcD1goThydrWUeB+QChZsrwbebPeVmfCUqVfZbdbHFK:ik1XUOoTqy8QCYrLLeYKUML

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 6 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Drops file in System32 directory 9 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-07-08_24e816d738031190104a31f63b5c5166_bkransomware_karagany.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-07-08_24e816d738031190104a31f63b5c5166_bkransomware_karagany.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:3960
  • C:\Windows\System32\alg.exe
    C:\Windows\System32\alg.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious use of AdjustPrivilegeToken
    PID:2932
  • C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3544
  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
    "C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:1348
  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:2880
  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"
    1⤵
    • Executes dropped EXE
    PID:1588
  • \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
    "c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
    1⤵
    • Executes dropped EXE
    PID:5064

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe

          Filesize

          2.1MB

          MD5

          da7c6291354e73e03cfa59578ef4cb6e

          SHA1

          1cce585a8036db77726318cadcead38746c3c92e

          SHA256

          80dfa2599113f25a1a73215186b0c1877aabfb747d796c6b4440dd0ca4426ffc

          SHA512

          d1e729f1bd4550969d66120297d34253e5ac81743a5b5513c97f8043adf3c3729877b86a4fb29b7425e64ecf5962a3f728b2be74dc1134f917b4d8613b74e735

        • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

          Filesize

          1.4MB

          MD5

          35d95d3bd5c946967b1abda929559eaf

          SHA1

          8223bf322d364fc2ba9dc3ed0a7309563c7816fe

          SHA256

          3c1e43b4578aa38c5fa939198019cdb903b522a66efb991991bb0e9e0cbe4876

          SHA512

          7a19ab419ed961a821c0e39d563452c1d2489a579376faf6c45cb5ea6a44e5649f4fa6290465e6a3b0cd30461d1680f1b4a8a0c5df85d5924091e063f104b307

        • C:\Program Files\7-Zip\7z.exe

          Filesize

          1.7MB

          MD5

          e0b7dc264049dc037f2eec1f60aed5c9

          SHA1

          fe80208237308405674f75fd672327224c032e65

          SHA256

          c19f2643c2fc2b458b1364e598988252ff67e95251b26c81708d2e14f2f607d0

          SHA512

          aaf0882cd97fc36abdb4b9e58804cb05b193cf4763ad29d6761deb61cc487c401b9359fb5e70ff0ddf3067d9983cb822448b378ddec6cc8193c2349f96cf56ae

        • C:\Program Files\7-Zip\7zFM.exe

          Filesize

          1.5MB

          MD5

          a0057c46d9b3946e31092b31c877085f

          SHA1

          cff8c9edc8b8e237cf91baf51c794de130d6fcbd

          SHA256

          78ee57410433ebfebac287faae3dfb9045124c5b46c535dac38900539f1f90e8

          SHA512

          5784f678e315e820ddddb2919f4db0fde693559bf01eddd872657a4e6a7a1aa78789442bbf137a09d38d64c0725926af62e237e6dd827e9553585b45d0fcb2d6

        • C:\Program Files\7-Zip\7zG.exe

          Filesize

          1.2MB

          MD5

          d835ea86ec4528e22bbb4d40a537952a

          SHA1

          47c391a8f88ce2a00682098505ebb3d27e4fe100

          SHA256

          3df0cd857415ceb0c7c79ce2c547a0236a63f519692a85d74585efd89268a9a2

          SHA512

          1005193791c3be8e79fba11a93439ba10a702cab8f150a50a013cda71e4118a942f0ade81fd01293adc76a266a7300ec03689cb90987aa0932f216323d4d256c

        • C:\Program Files\7-Zip\Uninstall.exe

          Filesize

          1.2MB

          MD5

          25309918e5dd6c2e61d3e83a750c3d44

          SHA1

          94b662d2c590254af3ef1fb8d961cb5c0fc7970b

          SHA256

          11d96da1fefcee7723a1633b24865c60de0863f6a2f787f7961bdd227d82f4e0

          SHA512

          9ff91201692a041a2685b956f4c12d9c829ef0b45cbee0fffe82b14992774f35d2d63c885e36787348f109e835a8701af85509ed7d6e8c05f9a041fd57893c2d

        • C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe

          Filesize

          1.4MB

          MD5

          a3d1d631ebb1c57736064d48e462e4f9

          SHA1

          38e5d9cfe68085df0b03f34762c5e543033ae66f

          SHA256

          e4c9f602290588cc9c62e5a7ea4528ac15eee199aeadc88c24536d47b6a9707f

          SHA512

          f82925f6844c6477e72162e2874a76a1ca22799b51061bfbd82ede51119d68ed50036be91cea6e30834a472a8238fe1207e1c51957ae10e9791306269229eb3f

        • C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe

          Filesize

          4.6MB

          MD5

          1a505fa6f2bee2758214a13a90796e8b

          SHA1

          61ea72fd54236a0c5a8c6050cf621cf38cd36afe

          SHA256

          1ecf608e84115b8ea86eb862b70eec767bb5675eedb9b1ca2d8aa970f2f060cf

          SHA512

          5ee71040785f81118496fd027540b9f9e2958ead75a82e1a51f721e6073599bed328053ec573ef71d9b9ef033c97033624c30319ae54989138b4713766991a4e

        • C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe

          Filesize

          1.5MB

          MD5

          3f2af51aee77d9d2d96c54561382217d

          SHA1

          5ac946d170468fcbf6d600b0459e3848ef0cfe8c

          SHA256

          2a8bb4ba92692964099b977c00b492609ab769b6432d05523a36351c935bc91c

          SHA512

          72cf3b70c1e8cbd055e63e4300016460e6b0c02a0d5a283d389a1789bb7f48ae766d450edc09dd72192d010a40758c71dca5caa9af12424d6467ee7509863bae

        • C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe

          Filesize

          24.0MB

          MD5

          f589549eed6ba920cd6057a81360d644

          SHA1

          2b5a92cd95165ff6691c583a6a5d79330e8c7c65

          SHA256

          da7fe21e6ae7fac2a8005e6bbc415b5f58cc9a6fe85a60cd74a63a228049a47c

          SHA512

          78f96af6336228c9baa13bba87c6dbd7e72c60ded2d6d07dc3c2266f942c05029689626c1642105fd0babeb4d0b32ca5bb2769fccb3e39cb7d625d5cb650b946

        • C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe

          Filesize

          2.7MB

          MD5

          d4eb3a5fde2776f3535d5d04324f5742

          SHA1

          60edf748e9ae3b92795a52dadea9fc276edcf2fa

          SHA256

          85299d0925d5cfbafe36212aeb558dc2526afab2b7c12bce4f660b61b858bf35

          SHA512

          ca9667bb2deb624142b83851b6c88b6d58a0db5580168389352c68a5c7c90b1134305443f79e45c9f1dfe3cf6c3b813ca89bc3767c05e786e5b86f0ecbfa8f59

        • C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE

          Filesize

          1.1MB

          MD5

          559968784785421137457b3a39858dd6

          SHA1

          ee9be774a6da75c375381c40d2a88c484ae0cda5

          SHA256

          4d9e308712a18087f834a4eb8a7fc45be940c1b6c535533930acf57d0da1b343

          SHA512

          9ce7e98c709236bc126b64c428717dca549c5455b8d9a4725af484d225d394f92a2144d3c5cc7c327877c60e983d94024b17d66106cbb98212fa12985d590553

        • C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE

          Filesize

          1.4MB

          MD5

          1ca7a1a31069d1c216a6e508e84af00b

          SHA1

          b0b981a9fb216dabd0caa658e12a7d82b78fb674

          SHA256

          e9f9cf083f95b2e71fd9263809488190facf82fb202bd66cd6e31d20635883d2

          SHA512

          f505908ecc424c1c9e76c6944067c8c010315db0387910d0745af747bd28721b99c6499be086044d2567490b378798beef91e512370c2a66af8f66f88cd5d12e

        • C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe

          Filesize

          1.3MB

          MD5

          b039d0877a470d7d3587bc750a1695df

          SHA1

          4625439c24043d083cb70c3a9b853ee5679b2dad

          SHA256

          c8569bc654162235ec826206f475cbfcadaf9f4c4c1a0791ba996e7880f38a62

          SHA512

          6162a37a84ebe8758a68c326f1bd4d1c7bf524606ef84634c2237e983004cfe0aaa90b5f85770ccb1f2bd7c550e88db2780a3c9cce4ff9664828d52dff739e92

        • C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\chrmstp.exe

          Filesize

          5.4MB

          MD5

          38bf41f27f2cd6f5e2fc65aa7f670d39

          SHA1

          d349e1280b39b9f7c25a63fe212a613947423dfb

          SHA256

          2bcc9ff4475784947d16dd8e7a1f7bfbf133d9795b0ddfd30c8a8f582f05ee45

          SHA512

          61213ed25c9eb0ae040d9beec51ce336f40fd9db78d11a47379440c06659f3c41c9897befed84e260fe4d8548ffae576c57934e67450a8ae737a32d5644d2d40

        • C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe

          Filesize

          5.4MB

          MD5

          c9db6ef9507c3bd0b70449b459a88bd8

          SHA1

          e1f93c119a61c0850e43ff5d2d34399b55dc13fe

          SHA256

          6f5b08ab8afdca1e43fd3624d52cae3d635373a1dfd0bdea6a666bc08e32510d

          SHA512

          7fe2aaf9872f7e02c8da5b43bafe1d619f1a252cf2699756c3b0ab5954c20a4348bd20914a52b66d296bf7ff12015f509d13da7c67bece155c1b2ef380e4219a

        • C:\Program Files\Google\Chrome\Application\110.0.5481.104\chrome_pwa_launcher.exe

          Filesize

          2.0MB

          MD5

          8bd2837185e4a4481f6ceca697f20e53

          SHA1

          3278ee456b1cbb99648a51206454f280221307e2

          SHA256

          c3e30aa74a8d7aa66b8aaba216b90b84952ad52a90f7a20f627c15a4c7cb80f5

          SHA512

          592f2d3c787a5d469512a06647fca9b503705f2d2a796082f22a370d8ff2e89063bf158573f338fcab5dadb5867cfa28a55b6c20a1bce85bab0fff184d488674

        • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

          Filesize

          2.2MB

          MD5

          3c48ac28e8fc66dfc219c8aeca50b215

          SHA1

          b05a8ecad9912625c8f6e48af065acde483df35b

          SHA256

          02086c6341e2718712c515d83d9d0b0d5cfb9cae6ed710b045ff90bc3ac70150

          SHA512

          44ca0656710bc328bb1633d2d1e30f8bb7735ab57e021fe779b1dadb8563be00af9c82c3ae7ed212772da0a48a6c846427c5b013cc0b1984d4e119eacd7e0ba8

        • C:\Program Files\Google\Chrome\Application\110.0.5481.104\notification_helper.exe

          Filesize

          1.8MB

          MD5

          53feea4009227adc4e06048a9bc33ed9

          SHA1

          018627eb278b819548afed9cf41fc302f5303423

          SHA256

          bd87e6be8d45cadecc9c165daae41c57194e31d188b55a22906351f328d16d90

          SHA512

          7d9d612ddb04dd6ba32dfdcfd7ecf9363d12afb41f3825f3f4be054b4dc4b11faa2ea99fe2eb08846de40d0998a3c1ff2e518e301f0e860ab51c5de538023be8

        • C:\Program Files\Google\Chrome\Application\chrome_proxy.exe

          Filesize

          1.7MB

          MD5

          893cb7ccc26dd6b26f207e569946f7c1

          SHA1

          b820d12c5eee7aee7766b33dc09812e13161530f

          SHA256

          222df23cca2f35945a325f6f13b5c7e7865ccd942cde76feda2017322b3417c3

          SHA512

          299adb6a74878670c07857f35b1c08db65a71f640b841f0a19dca06dfb3df91ef1fa105d487f36dc96313108db5e7bb674463605adfad6d786a9a61183f56711

        • C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe

          Filesize

          1.2MB

          MD5

          c2ca6c3bed8441870b3e452ec143e12d

          SHA1

          d6e12d19fab2e759f0eebf4838b1030b62f23f0a

          SHA256

          1554a93624acafafb31205e4f36990d3fa030d0ee5df95ebec7ac9604cad03e7

          SHA512

          8cbbad6e1c164e7ad328dffc5b6b643fc3047b369187495de2b54d6db28a6408902eafc1394e5179dc68c22e49d62017de5ef4f4cc619cb356952dc03cd05531

        • C:\Program Files\Java\jdk-1.8\bin\extcheck.exe

          Filesize

          1.2MB

          MD5

          c067007b8bd5a42a09d57ae4f5b32152

          SHA1

          7fd6416559b5e8ed5fad5ca02f0748a557acf81a

          SHA256

          66e624f5e43e1c94ad67dae7de177e87d78eefd7a824625bd54d09c193122cc0

          SHA512

          f9223f77c33a3e706145d149a0f2e1009e024c3046218138f88df3bbeeeb70226104eb0eb217a878c994fe7d75ca42e1a9d7299c0b025562a00ec3591adc53e4

        • C:\Program Files\Java\jdk-1.8\bin\idlj.exe

          Filesize

          1.2MB

          MD5

          b883d027c07aad22ce60e8d2c66793d3

          SHA1

          ef7c21f7fa7a62f6572b8a9bb2c9788d20e03f6d

          SHA256

          2f6ea654f4c4846e126d9a806d36bbf18889410c6854dfef3f895d5f0bb94177

          SHA512

          aab8f4f24a63e8dc6fc21463efb01cc659f4edb104acc1c57e9c200d1837eb14914e6730de41b5db41cea5070b721fae78ef03f183b49c391ff3055aa70e9555

        • C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe

          Filesize

          1.2MB

          MD5

          cfb83d7ce5acd6e25a9bb24e1d764205

          SHA1

          5a04adcd79e496bb9528ba96c40663cfd7e64080

          SHA256

          6647914d8307df79a9181e0a8af403b672ae6eb97381373a291d5da6c7258637

          SHA512

          07915516648af554aed92e15bdb78abb16356924e65c2ceaf6dce4249a18e3f754a3247a776d24ca4cecbaf57ed9579f63241fd1fa757fa1c338c80cae528bae

        • C:\Program Files\Java\jdk-1.8\bin\jar.exe

          Filesize

          1.2MB

          MD5

          d5f15e869885cfc2540c2ffebf617f83

          SHA1

          220d894b519b6ef1e0864e4e7e9824637df81e7c

          SHA256

          09f32ac4b155959aee2a9dc571f39055c2a0855723cf3257b75e63f4227adda4

          SHA512

          017f0308bc2dbba231c122e1ff33bc0ee4903f20e6b358bba87e5e350ed2ba2e0c5b432a277d2cc5525b6aa2409c624f3a2d8c10eeb887c8b0f59132bf25540a

        • C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe

          Filesize

          1.2MB

          MD5

          6116811fd54523cfd2fd1cec6e9816ee

          SHA1

          5f34460a02969c65e51f35a1fbf09c89d2f55542

          SHA256

          9dbfb7548cf992b6efcfb2880d7b7e7ad1b3a81585b4936741102d12be54d9ef

          SHA512

          a7c8e5025723d577a1bf1a431919dc6a688e9ed72b5381117bb760ca4b390541c8c490339843507d18d13ee53d61e090d6c6ee7ebfa26ea18d6151e8c5fc7f1c

        • C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe

          Filesize

          1.2MB

          MD5

          69326ba94d01c335514161526da1dcdd

          SHA1

          2b7fc0c9750e6a4e87742e4cc18900432408df70

          SHA256

          2d1a15f7ecb0d6012c62684264f4d3c241aa15669a5058da4d1c730a963af489

          SHA512

          9853ddb51282a9b9920924d13d7bbd1adb991acc8e4a056e0cc7c48b1ae375d813424410b8559c55fa575fe0fcc59aa7d184bc2051d486fb0fec97a474cbe938

        • C:\Program Files\Java\jdk-1.8\bin\java.exe

          Filesize

          1.4MB

          MD5

          380856f38c666e6c364da168218198ad

          SHA1

          97c370d36a529259c69deb023f5d30a161543e84

          SHA256

          2ea1b807bc156ec29a34c6bc88e493de3409074f382b58ddb6047fa2d4b79683

          SHA512

          dd29ca2a5248b2cd0610c41db53838b13deb1c8d7d26ff89ae4e6ce5f47f95a7f766e7b3b270393e80d2a88e70f28c3ed5bb33b5b01bc89bf01508e506823df5

        • C:\Program Files\Java\jdk-1.8\bin\javac.exe

          Filesize

          1.2MB

          MD5

          f46183b42ffe8e9c462ead0c13bbf66d

          SHA1

          83b21ceced1b98e81af589d3f412569e188eeff1

          SHA256

          57f4bf4bf71a8d69c6d32d735df5aeb5ba812ce8027044ff6c82bbf5fea542bb

          SHA512

          2f647505f8a04a3dd07ea46d0262971cfee9a4df9696d4c2227e1e538e1a7facb7372a10c3b4052b5e37d2387272d02f020c284d168c4a5836d84ea98ed3b4e4

        • C:\Program Files\Java\jdk-1.8\bin\javadoc.exe

          Filesize

          1.2MB

          MD5

          54d50f87a948a6de188b5b2bdce451f6

          SHA1

          b3500a742358e251095cf68223ea6bc659b00c49

          SHA256

          0aea18de653d3d8a62245596843d7156bd02e77e305f4b3f80b0cd7fd3a43e5c

          SHA512

          b5b87b7f4b431935edcba26e7bb2fae3a21c873249e288e83e8a6584711dffe5f6d94beb0dd9a63737d80eb9d30542424ce4996c878ccfd377eeefa1b360a8f3

        • C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe

          Filesize

          1.3MB

          MD5

          253e9ab78fd263e363fa12c716eaf42d

          SHA1

          a7608bf338bef9e8d7a0c29b86d9de13288d16ee

          SHA256

          4a56e6b27c27553c13e90d97c53f88116e3d9a0dc7f234b7bc9748709433974b

          SHA512

          2aae3a58d101444cee78f7f3ef22aac9e6711249735dc6f78de85e300a0128f5e336200aff013cf8c73399d309ed5eb18e6897a787f885f1fde42bc35bde8795

        • C:\Program Files\Java\jdk-1.8\bin\javah.exe

          Filesize

          1.2MB

          MD5

          2bfaeea5ae8574161d4d5565c8f912aa

          SHA1

          3af410f833ac2ef58cb2dcdacfac7c5956aa7fc4

          SHA256

          4bd7ddc8acf7fb03ce5f633333282b85a97590e450a6729167dd69e0509128d0

          SHA512

          83f900a067a8a3052603c67f2f2d4d7e05c4f2d49d61c8e5b13a46366ecab86f3e031d958668382e16af2811739c7f09735d3c0b8ffed4c95f32d9b4ffc2cf0c

        • C:\Program Files\Java\jdk-1.8\bin\javap.exe

          Filesize

          1.2MB

          MD5

          a919d858ec79c5019a8e5f277e33e09a

          SHA1

          2bf7a947ff78ef53a1355a1712b071662581f133

          SHA256

          f92dd2edafba988d154e9692f43dc94bfe4c35de0abcdf36190a3dc56842be00

          SHA512

          9ed44299a93dc850656438217b1f1dab07285ad54d6692145dcbfeb20241f25636d9f0736c3233fff8671b8c1eeb1c6f505ffd7741eac263c36ea135248b3f7f

        • C:\Program Files\Java\jdk-1.8\bin\javapackager.exe

          Filesize

          1.3MB

          MD5

          4b53797de475c36e207b4803214499ba

          SHA1

          1b235ec09923365fb44bfc53263f06e63ed6557b

          SHA256

          4af3068da6155a0dd51845aff9e50e46360a350828779292fb067414109196a5

          SHA512

          c5a267a9a2757858061d729ce49948e5dd795d4d7f3ee23ef4f722e24b67f4fb039e108e16237d307ce89fa6d8ba8e6f21374f165d98760ab0d33b32f70d0809

        • C:\Program Files\Java\jdk-1.8\bin\javaw.exe

          Filesize

          1.4MB

          MD5

          2a775a6309dc8620a75ae5f630f6c4e0

          SHA1

          9dca4d5aeb9f9716e82ca988929406e432243380

          SHA256

          e16f9311b966a7acbf73305e5ade570351faf534f85e2c3ecd651de5b0b538f3

          SHA512

          43b0fef63397601a100511d19e0192fe69f670b0cedb619618d1381335ca996571b26b9bd5eeb8a77dfc798f864c5c34b90c895f9c62324f8de2917a6e7802b3

        • C:\Program Files\Java\jdk-1.8\bin\javaws.exe

          Filesize

          1.6MB

          MD5

          abee54bf59cdd0a4623677e88dcb0c8b

          SHA1

          4dc44338c86314e8080e1daac8899883b0fb9e8a

          SHA256

          d9400c268db18b4574337b98345c9754986c8146cd268467f0a2a3831fb9d07d

          SHA512

          dcef3ccd8782d0e3386a1bb038ea56b156478e73c1deb717aad36c8f39b4c9fce7d8ee1a82c1dedc809625806875291a695d4576a4c373699fa3f66380af1baf

        • C:\Program Files\Java\jdk-1.8\bin\jcmd.exe

          Filesize

          1.2MB

          MD5

          76d1e3958ac19e6b23ca62bac4b999fb

          SHA1

          bfeeb0eba49f59d722f4330a17c43942b418f953

          SHA256

          1e2f5624a1353706bfef5a7cef8e5857963773b8d69afe07b22184e5916d5dde

          SHA512

          c4c15838baf42e6519b383d5417837bd9770824f18de90646244e7d824580fc1cbe74f9629184bf34fe5fa3c78e3ab92f1dbfd41bc8eb9c7ba4e9043b2b49e9c

        • C:\Program Files\Java\jdk-1.8\bin\jconsole.exe

          Filesize

          1.2MB

          MD5

          be3b83b1e28fc804b3c641e0c7e2e1d6

          SHA1

          e030d4e158145e7f69cf9d5f4dc8ef6635bbe19a

          SHA256

          4f794a8530857c0e388409c3167b2e73b33c5e5ef72c55acd5f0de8e1d4cffc5

          SHA512

          8a282192e77e1339c2b9757aaababc25f771430328c56e158c4f0a9a57ce1e2cab97e79a845157cdabb3fb2b6854798fb895821a2f3a8c013b7530281b3dfcd6

        • C:\Program Files\Java\jdk-1.8\bin\jdb.exe

          Filesize

          1.2MB

          MD5

          a90576c22f19eaabbe817da677c89bfd

          SHA1

          433007c0c7c0956c41e684aa15bd19c02440b62d

          SHA256

          626706ab0132e919c9a9436273a6fd556c842d68ec877ed3df4edbbf9fc44254

          SHA512

          00009fff71256410c86a0b7ad94c218a18c2dbb4c20472a8db509ec31aba88114019789ee2c62548470e3ea06d10a0517473c849d58f18d425726d4762ef0a44

        • C:\Program Files\Java\jdk-1.8\bin\jdeps.exe

          Filesize

          1.2MB

          MD5

          6bae1608ad396365b3bc15deef94e61c

          SHA1

          08e01a2072b72a72ef71e7db20e8ef00f336a056

          SHA256

          3782c909a3657fb205780c2f2942317c35cd851378eb765f926c4aa7ca58c106

          SHA512

          48705a88886e65329ac3a922e72da86b9719ab9b1b2cc03e1e96d6ceb11099f33e68245e4526a42e484adb598e264db03d62275a93eec1b5123e226134eaf116

        • C:\Program Files\Java\jdk-1.8\bin\jhat.exe

          Filesize

          1.2MB

          MD5

          f22ced59863be656191c908d5319d0bf

          SHA1

          40564ab6b5b5af74708cce205aa1ff8fcbd338f9

          SHA256

          c78f89cd5bd7457cd78343c757ff22e3708818e5973ec2f3162e6fd35a32b7e8

          SHA512

          696e8af4a9180a9ddd55c862a4e3ea85dbb75dd16e54bb7ade2f7ba7c813f4d193f308beb0750df13c1c70d1e7014c60922d34327df8b119fb1c041e3aa79d89

        • C:\Program Files\Java\jdk-1.8\bin\jinfo.exe

          Filesize

          1.2MB

          MD5

          6cfea6d73bfa5100f1f7119fbd4ccc3e

          SHA1

          aed12ab2e3ecebacdb0291b0a743014b9c5a0c37

          SHA256

          41baaebc67459a8e1d4decc16da8ff65de3b2160f113fcc607da71e411bd079e

          SHA512

          a12d65eedb8d8f24bc700fea152ed97fdbff6108d37bd0baeb6d52e73d6ef23efc6aae0fa3a17f5599db80fbb045393611fc8cb7420e0b3c6af5c198576b543c

        • C:\Program Files\Java\jdk-1.8\bin\jjs.exe

          Filesize

          1.2MB

          MD5

          2ca34e8cd21f22180953193a64ac440b

          SHA1

          82aa3645d6668f65a8d1eabf3223ec6db2a315a3

          SHA256

          4da9ddc683725ee975593fdb523c86974ede4c6f7a7b4b08c36c5074e9163324

          SHA512

          a6124324a067ee07be4daea6fca18e6e1133ce6fb522812c756bf97a25fc80de240f3c3e71a01aec775d49be06de8d698943a8c5b50d3da75ce46ccc8917ad33

        • C:\Program Files\Java\jdk-1.8\bin\jmap.exe

          Filesize

          1.2MB

          MD5

          7f78c63bb5ba77f890ed0683ea7e2b27

          SHA1

          b1d8a4c40210401c94e6a6e82a85b02940d9610b

          SHA256

          ab1f2ed47f4ba5e52296dd16c0b742d2585b8bf4db99890360be12503dd6f2e1

          SHA512

          4757c0a0017406a66911daf3d30012b31cd3c8e9f769b22899d608a0d9929bb3d8560234c61da89a3dfcfbd8ff9b6fbca2899771e0b1734035ac1bd3a4a0b99c

        • C:\Program Files\Java\jdk-1.8\bin\jps.exe

          Filesize

          1.2MB

          MD5

          eec23bffb7aa2a0dbd7d1ccf8e58957f

          SHA1

          e2cb12bfb336a849250f715b1388fca876d55b37

          SHA256

          75250305b718ba914183f0dca27d5d23b70d57e7dd311482c1fb299ea4524502

          SHA512

          5256db3bd3fe19ea4e336a97900dc652009c292fc2f6dd3ff72fe17d1ba21911ae9a0e49b55605ff8484a606a1e96e85b3440e7b38288715d24a3f3dd119058d

        • C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe

          Filesize

          1.2MB

          MD5

          aef7fd13caabf0170894a6e9d1ea273b

          SHA1

          1df3553fdce3f3343683349482356c957f769053

          SHA256

          498dd8d2edf9e1f150a43f4ec11de982c6de561598fa894ab49c7e419f1c0067

          SHA512

          356b93b420444f1890d405ee24c5bfb7ac0aef5d0750d7520015dc582f01ae9db63f7954d311fc73c8d17c78e3f1ebb9ba08ab81c2ce18309cc88562632c5afd

        • C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe

          Filesize

          1.2MB

          MD5

          2f1d1a38bad18bc0e8565a3a986fb230

          SHA1

          90ccfcc7a7aba10600a8e40ff3f4f9ca583f0e8a

          SHA256

          8d9e3174df373bf29082fb2af27052ea9599afcffeb5f701cc8054186396ff8e

          SHA512

          0d45870b083db1f1c19788bdc71f28332d44af33f5a152771f7f9708fdb188a590528185cf2a7bcc0f228cd38221bba3137c5dc8aa8fc1003b85dbc7e8dcbc66

        • C:\Program Files\Java\jdk-1.8\bin\jstack.exe

          Filesize

          1.2MB

          MD5

          939c8b2fc5946bfb4fd705fdcdab9be1

          SHA1

          fe5616ff3b6281ba286b22284376dc9c911c937c

          SHA256

          47f67b27acb7dc3a6c2914f4f7d1fa82e5383a9d38cfe36e063f587f607dd395

          SHA512

          b8f6091a94f40ad88de23a05b5bbc058177b0f9ec17a9bf53ab7ea282bf50490ca7288ed1ae3766b983ac86670b9e080f3849e62b85ccbe6728cae32476d15cc

        • C:\Program Files\Java\jdk-1.8\bin\jstat.exe

          Filesize

          1.2MB

          MD5

          34ee0658c06a3c7271eda8c0b4d23636

          SHA1

          18cd7263543fbea567deb7d287a939ea9ab9fc1c

          SHA256

          5e9b462ab7d787f18903b645337d6364ae6ca6d658b54ea6ab4804e0dfdf81a4

          SHA512

          ffa7496bb74fe2bafeed59c0ed56f48c830f370bdac99989f198eaaaf73f2238735f190f72d529c9b904473d0ada5e618f8386184960a63333fb61c9b3d96cea

        • C:\Program Files\Java\jdk-1.8\bin\jstatd.exe

          Filesize

          1.2MB

          MD5

          791247dab22cf1d224d33cf09b7d0999

          SHA1

          51cd9c402af85d9f52953219caa03a0bc74cc3d9

          SHA256

          64da8ecc2a738be7a2d3a21d175e594e665670005495c498100e123d8436581e

          SHA512

          cd7b80d0a9255d4d09df8a7787d11b4e18fd8a67ae204e5638866b14db1331100ce57ed3ca92e5536450c8e282aed34a05b18427c4bebc07a72d69afff0f2b64

        • C:\Program Files\Java\jdk-1.8\bin\keytool.exe

          Filesize

          1.2MB

          MD5

          8e7f6a746f3b0f5c5a2436c91b6ca04d

          SHA1

          dbefc6a6db7f893f53c6daf1ee2b2a2f2c8e887e

          SHA256

          cb4fe07cbc1e702143e732f608b78a8b6047f105243186b218ed19b62f5a712d

          SHA512

          679b24deb624e21298056fd06520d273e2ba3d8a10b0e6f9eb8ce52aa76acf10e0a593392b69cd00f1f9077c0de8b3b1bb38b2a2a7881dada99b6560803287d7

        • C:\Program Files\Java\jdk-1.8\bin\kinit.exe

          Filesize

          1.2MB

          MD5

          edd656b52ed2ef30b7e3bb7ff3c5f63b

          SHA1

          80432c831ce7fe2d159c5f76e2bcffe812956cfc

          SHA256

          08776122d3563b9261c5c7d038a8958b3541bb66578dbc8d29d0c2f281b5e9b6

          SHA512

          c98c1a1d3b31cfffe5738d05b3ccd7b17901da4a8d8389e2d38c51fcd18bdac951626b1abc31031d651c07bf961a98aae8801f70a6d353e4f93aa152e0e62e41

        • C:\Program Files\Java\jdk-1.8\bin\klist.exe

          Filesize

          1.2MB

          MD5

          f19529dbaa95b065f31eaac42f8a35fe

          SHA1

          0ad54707d10652da0a66ebe7a232fcdd74d33c60

          SHA256

          a07f0f0344ec2d30daf123fe66a7350f723d182f71d63280834c122eed996f24

          SHA512

          c39647d2e7aa901ac420edcfa9f61cf86ef0c3f5aa94b42846e1cc91650cf177fee38028a4f17c67b43abfa0b3c022f1837a43756ddf6f5b608804d9d4f6b6a2

        • C:\Program Files\Java\jdk-1.8\bin\ktab.exe

          Filesize

          1.2MB

          MD5

          2ae9b4abf16b217fbb4b02e6f08bb281

          SHA1

          1dfb27ad6e87c06bef45708a1c5f2df2f69881bc

          SHA256

          f0b8b6d8dbe611c5f5b4c5c6a7ebad0f072c58a2a8dbb7fdd593300d20e54537

          SHA512

          ae34be1496d7b12ad08c445b6a68c31cdfb3ba14e28c6bef546e5c3748f644b92013079a0c383286d2370d19f3bf9263f036d405c3b690d64729422776a6b74d

        • C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe

          Filesize

          1.2MB

          MD5

          f1866a4c4c9501d371f4cce7e3afcd96

          SHA1

          f47541da69d8f9c2383e21d536720b341da69132

          SHA256

          1d1bc3110d3877c22f370cc4eb6ea2f3d0358e27bcd4632cb32079992663da2e

          SHA512

          60b5b941bb9d4193838d4419d448824d2347d13843dc6b47ec791d1206769f0f9bf684418e15269e3bb7c5617e9e7797f3c935142b8ac1677b66b4a1ecce4caf

        • C:\Program Files\Java\jdk-1.8\bin\orbd.exe

          Filesize

          1.2MB

          MD5

          bc0a611ae3f41041ebc1548a34b7d5da

          SHA1

          5a85a295017c2438a428b8e8271a253123b568ee

          SHA256

          48e2ce03bda98ff293ab59e3cd5e905ca17913373813476a4541426606b71cf6

          SHA512

          6b3e45da13ecb8deefe63ede7d00588cb24187aac1af41d1cbe0332be7a7e23057ffb1086bf67de159cb879ef66ea37b36c4f23e4af265aab301afdd94277daa

        • C:\Program Files\Java\jdk-1.8\bin\pack200.exe

          Filesize

          1.2MB

          MD5

          b5bf57247cb9eb631af9999c77e11448

          SHA1

          af972b100977a8f7d53efd92febd3134e5e8a47c

          SHA256

          b3980821849a763dd068d94e865966857b54cf40be0ef5e48211034f5f26c1b7

          SHA512

          f94645011b637793c3d054bedb76bc52fb1b59bcf16d0eb65766089702798a4e72b217fe8cac468a7ba03a7f8848f04ac36049399928017f31245596145c8fc4

        • C:\Program Files\Java\jdk-1.8\bin\policytool.exe

          Filesize

          1.2MB

          MD5

          93ff54cfc30760c72130e697e6edd897

          SHA1

          51516ecb2cd473c043002659d87de36604dc8689

          SHA256

          780c3a3f81534c5d71cd377ccd3524cc7f2b931b26dae5830a151b795ab9d135

          SHA512

          da2f945a7f6ee2d92a2d38726598df0987bc217240785d7b25d8c115a3101d663e18ed20eab28d7bda3008027264fe8181d861764d5150ee2217f506d8dd04ef

        • C:\Program Files\Java\jdk-1.8\bin\rmic.exe

          Filesize

          1.2MB

          MD5

          dd0e87bb10c50fa6be51c03b2b9ee5a3

          SHA1

          a84f020520f37b9daaf8fcba727ee309ea7d1d78

          SHA256

          5ba4006c2e54f49027e6ee7650402307189e7106cbe241bc650bc678b2853e7a

          SHA512

          b4864878b0850b72878d508dd9e669a2364457966c6fd36d9a3b1f12ed832e71ebf508f86c236abef8f37f15327800f8ae5070f500e0647710cd3e0fc0dec5dc

        • C:\Program Files\dotnet\dotnet.exe

          Filesize

          1.3MB

          MD5

          b4f35c04b494657f5781cf1e3f8ac11e

          SHA1

          98e85e57cfc55132e77b1ace74c9a2a585d6936d

          SHA256

          bdf19f1a41449785c9b46afa02c6d56ae3534065bfb546e463ac2331adbe26ae

          SHA512

          0f7a1940482be2c8f22b10a5b428c916a4da1b501158de770f3d3ed8047ff1c7c1606ae51d65fb3f4ed3d96544970ad546ee890459f080a10100cf6366687194

        • C:\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe

          Filesize

          1.3MB

          MD5

          e0cbc05248b133c1ba16b02f6a3a5f6e

          SHA1

          b77fbd0a471902f9d70163054820249e11ee8c07

          SHA256

          698c22337bc92bf29b1786634485643707270a541b804f097aa95cce05b01ed2

          SHA512

          369772a4f317c3236d4dc227a96316b2fa3f1bcc14e3b9eaf3930bdf3745984c5e2416d2d8b087c72f4ec57bb55f5a415aa717328db52b40759d8d06c0bcc081

        • C:\Windows\System32\alg.exe

          Filesize

          1.3MB

          MD5

          00744c9c655b89cf200f0557e2e004f3

          SHA1

          4ce400776680f3a5924f0661bf2cb100099d4fc5

          SHA256

          47fbbdab2f00744aab31a8cf816770d0887e0f720b510623483570872a41ab5c

          SHA512

          677e2ee66a0cde84555317c7dc0823f030ae35ba3cfe4512d5305989280870be492b70a6ef4341a8c4708e7878eb3b34ed6266e55f54afce85b558f10fc399ed

        • C:\Windows\system32\AppVClient.exe

          Filesize

          1.3MB

          MD5

          59ed7144a149c5b2dd48c31863b78949

          SHA1

          6568b4219f3a3a7e24ddba54fcba5a128342fd09

          SHA256

          4dbb13011ec036f95e2e59ac2b1b068f9639199ee29c763c9fdd8c7585da9cd3

          SHA512

          0eb8490b3787b74c8a2e6ae3f1c9345c10678cc3699dcb1bcbb0545116ed9a01f83779604424e5ab708be5a23fb48950c37903b462234bd3e62278f8f75d294f

        • memory/1348-39-0x0000000140000000-0x000000014024B000-memory.dmp

          Filesize

          2.3MB

        • memory/1348-244-0x0000000140000000-0x000000014024B000-memory.dmp

          Filesize

          2.3MB

        • memory/1348-48-0x0000000000C50000-0x0000000000CB0000-memory.dmp

          Filesize

          384KB

        • memory/1348-40-0x0000000000C50000-0x0000000000CB0000-memory.dmp

          Filesize

          384KB

        • memory/1588-68-0x0000000001A80000-0x0000000001AE0000-memory.dmp

          Filesize

          384KB

        • memory/1588-85-0x0000000140000000-0x000000014020E000-memory.dmp

          Filesize

          2.1MB

        • memory/1588-72-0x0000000001A80000-0x0000000001AE0000-memory.dmp

          Filesize

          384KB

        • memory/1588-70-0x0000000140000000-0x000000014020E000-memory.dmp

          Filesize

          2.1MB

        • memory/1588-62-0x0000000001A80000-0x0000000001AE0000-memory.dmp

          Filesize

          384KB

        • memory/2880-247-0x0000000140000000-0x000000014022B000-memory.dmp

          Filesize

          2.2MB

        • memory/2880-51-0x0000000140000000-0x000000014022B000-memory.dmp

          Filesize

          2.2MB

        • memory/2880-58-0x00000000001A0000-0x0000000000200000-memory.dmp

          Filesize

          384KB

        • memory/2880-52-0x00000000001A0000-0x0000000000200000-memory.dmp

          Filesize

          384KB

        • memory/2932-11-0x0000000000760000-0x00000000007C0000-memory.dmp

          Filesize

          384KB

        • memory/2932-17-0x0000000140000000-0x00000001401E9000-memory.dmp

          Filesize

          1.9MB

        • memory/2932-84-0x0000000140000000-0x00000001401E9000-memory.dmp

          Filesize

          1.9MB

        • memory/2932-18-0x0000000000760000-0x00000000007C0000-memory.dmp

          Filesize

          384KB

        • memory/3544-38-0x0000000140000000-0x00000001401E8000-memory.dmp

          Filesize

          1.9MB

        • memory/3544-35-0x00000000004C0000-0x0000000000520000-memory.dmp

          Filesize

          384KB

        • memory/3544-243-0x0000000140000000-0x00000001401E8000-memory.dmp

          Filesize

          1.9MB

        • memory/3544-29-0x00000000004C0000-0x0000000000520000-memory.dmp

          Filesize

          384KB

        • memory/3960-0-0x0000000000400000-0x00000000005EF000-memory.dmp

          Filesize

          1.9MB

        • memory/3960-26-0x0000000000400000-0x00000000005EF000-memory.dmp

          Filesize

          1.9MB

        • memory/3960-1-0x0000000002480000-0x00000000024E7000-memory.dmp

          Filesize

          412KB

        • memory/3960-6-0x0000000002480000-0x00000000024E7000-memory.dmp

          Filesize

          412KB

        • memory/5064-76-0x00000000007F0000-0x0000000000850000-memory.dmp

          Filesize

          384KB

        • memory/5064-248-0x0000000140000000-0x000000014020E000-memory.dmp

          Filesize

          2.1MB

        • memory/5064-86-0x0000000140000000-0x000000014020E000-memory.dmp

          Filesize

          2.1MB

        • memory/5064-82-0x00000000007F0000-0x0000000000850000-memory.dmp

          Filesize

          384KB