Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-08-2024 00:31

General

  • Target

    2024-08-10_b52bf30da50a1effa608daf04704541a_bkransomware.exe

  • Size

    1.6MB

  • MD5

    b52bf30da50a1effa608daf04704541a

  • SHA1

    72ae120f86768cd5b7be5bc9967c6299a89512eb

  • SHA256

    cbee4d967d3b3b77031cca577e2742117d3b82f57ecc4fdb70ad7b1a9c964c75

  • SHA512

    c5eda799702c26411ede5bfcd925b04f1839a3fbc010bfd039db1fb8ef7475a4a7ee0d1c912e1efcc9c9b8caf75cf226e96bd4ac2ba960bcc1b96ad09b330043

  • SSDEEP

    12288:+85bM3nKxYfj63hgD1ZifMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:I3nKi63ibSkQ/7Gb8NLEbeZ

Malware Config

Signatures

  • Executes dropped EXE 6 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Drops file in System32 directory 9 IoCs
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 5 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-08-10_b52bf30da50a1effa608daf04704541a_bkransomware.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-08-10_b52bf30da50a1effa608daf04704541a_bkransomware.exe"
    1⤵
    • Drops file in System32 directory
    • System Location Discovery: System Language Discovery
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:1820
  • C:\Windows\System32\alg.exe
    C:\Windows\System32\alg.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious use of AdjustPrivilegeToken
    PID:2588
  • C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3636
  • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
    "C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:552
  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:740
  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"
    1⤵
    • Executes dropped EXE
    PID:4796
  • \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
    "c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
    1⤵
    • Executes dropped EXE
    PID:5084

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe

    Filesize

    2.1MB

    MD5

    7e6695d7639737e5b051881fda73ea60

    SHA1

    81c6316b7673068a6ee43042eb3615b93ec29c44

    SHA256

    0f9314c26b8319b36b077dd5c2a4226284e860e8c0cb94a39599dee48410b662

    SHA512

    f893b6c31e5e6c470c295fcc86e083b2e092b0d40556109096e7e85b095861cf0041a57dcf850a767b53355e8485614c9fc8382d4dfcf4653136e5b7c7a0faac

  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

    Filesize

    1.4MB

    MD5

    ad913143ea7114907aea43aeb19d7e1a

    SHA1

    e9598e31df4ef6fd90de2e31ed6c3cfcf1610f06

    SHA256

    e8ddebde70b000227ff59c8c2afec1d56710d86fb6726eac2f59cc35d3de0434

    SHA512

    3d2e9ae60ca1488d21d6c2a8754ddc0350031732444bf90913b20403472e5cf84694c0da22cfea92049ae5543038b824df5145733faf2ecba61d4799455beb5f

  • C:\Program Files\7-Zip\7z.exe

    Filesize

    1.7MB

    MD5

    b63d99206b7d5e17e38fc08498b2519b

    SHA1

    e9cfdd86728bef86427a580bf366daaaf63e8ab5

    SHA256

    f19ea72990eb2f65a0e4d39cf8b812acbcecb0cedf26bcf2dfce82fe4111b61f

    SHA512

    43b464fe1786cab803e93626eced829ca04c3480c1ea23cd68cc90ffe74aae6e002d53ce4a3d6274b89b492a2d5c6fc59fd7340ad10c90c81d58d7d693b90484

  • C:\Program Files\7-Zip\7zFM.exe

    Filesize

    1.5MB

    MD5

    5ffa366e498944c76d0cdb008ab5ecd7

    SHA1

    1d4861855450a5a38030aa6d8569ab23a660c3e2

    SHA256

    34a2a794bb7ff1e90f3cf8572b526d0284b23c2f9f5c0602bf602e211798f80d

    SHA512

    5fa0462149d2c36a46d3cf38074da0dae596cfa160165a9be073b81d379a98df102b8eb5b4f12b05563057aabbcc83e8e6085e216fac6303887b8c2d5fc32ad9

  • C:\Program Files\7-Zip\7zG.exe

    Filesize

    1.2MB

    MD5

    ff544628c3520ff7d33b57855dcc4acf

    SHA1

    1f9b4cb36d5c2f39d31b80a38418164542699604

    SHA256

    49eac25a5d7fd5865f28910d3b35de21fa25e62db689eb291535d9c690ae5789

    SHA512

    2e6c9a5344acf12ccac40892b2b144dd9007d15c937907ab919b140c8bdbe633d4f14f5850f1560c12604f007edf33c9ac70db7e54a5866faf5049fe2fbb4dac

  • C:\Program Files\7-Zip\Uninstall.exe

    Filesize

    1.2MB

    MD5

    e04b92107103e529aff24bc45680bf50

    SHA1

    5f7154c7ab1366391a25f8b78361d63440db835e

    SHA256

    c3022818b657d6157d4023a865638dff7641fe9b0f9bcdde7221f7bf22c7192a

    SHA512

    f5e3c3522f59ac3f9132e0cdefdba8c9cb7897123e8f2b1d311789db7ef1966e25840685c6bf22c1b75ac2ca5a18668343bac97f37659b45e8a783ad00cc5e7d

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe

    Filesize

    1.4MB

    MD5

    c247fcc20d888483bbde921f5bca283d

    SHA1

    278387d8fda228c1dbe73362107e23487652c779

    SHA256

    f867873ade34fc207a632ef48dd11de9541af334b5b5b7fb2714cf88c740824c

    SHA512

    925f1bb7cf0c42de3cf45d9a664f096fe3088048b0229a6e695e3797bb1c531db6c081bfa55ee5626a13dc57307ad22302f8505dc3f569ed419f2c828ed60910

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe

    Filesize

    4.6MB

    MD5

    3d5f3103db11fd87dd1515bf170164bc

    SHA1

    18e92554eb2c0e791185a518c09d99a7f2ab9960

    SHA256

    3014bec24c34f87e6bf50fede21293b411695897e7af3fa0ab426bc29e701155

    SHA512

    47d21e42fc65fc02413946c3713198b8147c4a9cb26c02ac2e71cb7552355de389773960806036106a50eeed5715e680302f2c39575fbcdf177e46f710506df1

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe

    Filesize

    1.5MB

    MD5

    7d1056cc536bba6f04e00038d2e86152

    SHA1

    3574d198ec1a2483763e942b1a47370312e8d7fd

    SHA256

    50a6afa2accd16af27478dd784487b4412b7f0cea7aaf9bfae6f5dc03d820545

    SHA512

    0037e0db790e950d3939036ddc0b2ba5d515c40bca7e058197bb5ce35b435611bf9bba92ae7e4e7d9182eae677a8643bee1e8e0ee704f0bc167614379a9ad0b5

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe

    Filesize

    24.0MB

    MD5

    c6221dccb987ac006e190112f6a2ac63

    SHA1

    37963da6beb4c6303cae5639dc8926a1ad79d454

    SHA256

    2f3299d75c4428e94545af1f510ba201475c36bfb331f1deda6035bee96dc70d

    SHA512

    b25ec68b655dc7c0e0ae2ca08a3ca4fea5d1d84830254c8b642a3f627388af02c87e8c9be5765c18a288a9c25b3ffe747da9002a9a6c646fc2cf3922e201b102

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe

    Filesize

    2.7MB

    MD5

    ec5748d7d267c3336930f2cea10f9f39

    SHA1

    8729d5abc7659741b55e86f086d43376402f82f6

    SHA256

    a966959b3eff4a1a105a323c998eed5c232f8bb64c072861358964d69ec6581e

    SHA512

    f02cdb3e086e54bfbb7042eefbd1b284cc82e84e18e6d2c2fe1080cc69a4ad62bb07357a1752a89850633227d106f590eb58acf8d525189eb3e6b2d6117575ae

  • C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE

    Filesize

    1.1MB

    MD5

    c80220edcdca3b5057120dd969829622

    SHA1

    93daa9eaa9e138ddc309604a4e85e96acef3260e

    SHA256

    a79c210c2c9312d85afb40096dc39f036b211bb6526f2b6ee4848f581854f4c8

    SHA512

    cd115b3868d562babf136d1a7977d98d2b9d9042b1de137ef18a2fe1abbd8f6a65fa2a19fff03be247e0c7ef79bb7ea6c09ac377c8ae92226135d71abfe126d8

  • C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE

    Filesize

    1.4MB

    MD5

    4eb1e49c26b2680d58782231b6c039cd

    SHA1

    6e93557ce08d93a42216c470429b445527039949

    SHA256

    ec345b9aa0d756e41053c11f1fa41dd6bdd409623cb2c90657ab97c673f4204a

    SHA512

    1a18522afcc217b62de062525ca483ec7a07ecc09be0108c32f5e8b4ad2dfc6deac17757944d530f4d641a473961a5082255f5a68733b9fc00935f63c6e0a6a5

  • C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe

    Filesize

    1.2MB

    MD5

    267de6be5169bf02f2877206c000a446

    SHA1

    1396ad5c910fe332bce491b9dae1b31d3e25de3b

    SHA256

    37ba0ac1cd870333f2ce645667a7c18e3655e90503711cd379ce9ecbac091d84

    SHA512

    cfd7e213ac5d1464cc45ed29a212d567e0743b3680887f6a12b5bd1278c4e5d4dd1c256c4f470ef6ec8d03b207ae22bcfb4ced0c3c08fff2f30607588cb02aad

  • C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\chrmstp.exe

    Filesize

    4.6MB

    MD5

    b81ceb9508fe8825d89d37ee53b5d43a

    SHA1

    04f669cb5a9e16a6de2b3bc066e246404acbc81a

    SHA256

    9c8b6bca48afcd84ebd89ce614c5ace473d7b350240a0753c3bf12814553c9f1

    SHA512

    6ac02e2abc848a765e0df87f1f1efe7a2c6247e22aa76dca340b1786d45f1160a592ff26bb63065857c168d17d85b712d3252d5d3b6f7da51345215d7ec50834

  • C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe

    Filesize

    4.6MB

    MD5

    a80f23a03d18893b9986b545314f5479

    SHA1

    dbecd83a67e4770bbb22bc279778e2683a737f0d

    SHA256

    62cc23aa10cc9db3327cdbdeca5677a22987718b4ee47a12cf481cc23616c8fd

    SHA512

    5037b732f65b2bbc0c9c85553e2da355042f6043b18c9354054f48c7c337235d9a936a2b62ce446b9d3be8fe7c23c46f215f06f297d8773465733004dbb4578c

  • C:\Program Files\Google\Chrome\Application\123.0.6312.123\chrome_pwa_launcher.exe

    Filesize

    1.9MB

    MD5

    867614c447e50034bf6e019f0567e997

    SHA1

    6b9368f8f8807ee497ea3b9512a6d0e519d8eda0

    SHA256

    1824e4d23937cb6d196ed42fec3a8e5224a3e6ce6c7c940cf6a2dce0cd3b8860

    SHA512

    172d52448e5df68342dd5ce9ee134130aa2325170cf621ca37f02a43816e089516cb474cc42848ce54e1a5fa74db696afb0fecc2da40f10e9b1d7b98bb811cbc

  • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe

    Filesize

    2.1MB

    MD5

    2fa77b80513ca38efbd665941ec1bcff

    SHA1

    933d2d93529bb83090cb865979a736c84e7afd5b

    SHA256

    334a1bbe3b69a59aa8deec492a407316bab0416d5f977eb2b861d45188bf2d23

    SHA512

    6fa57d6859788fa3809dac6a85bc63e76b456d900d0f0df65bcb39d7530d4d6ab510036682b79f39a4752e57867298ae721c841aed0c07de3a5f70b7a81497c2

  • C:\Program Files\Google\Chrome\Application\123.0.6312.123\notification_helper.exe

    Filesize

    1.8MB

    MD5

    7dd7f5cac951c77f75fbf9a1c52df3a5

    SHA1

    f04dacb73fa9012646e1cdba8dfb37d3eea73fdc

    SHA256

    f36920edc803952bd2ade552bf0e54e39f2e708134685f9f868639d41948a5ae

    SHA512

    c717e105f6c2e5c13ce3146f9f4c7bda4fd19408141313441678adf12eab9e55ae5e3b5bdb7aa381365436f941fcb4dfe5adfc1a32f89f4a92fe2ac42142e953

  • C:\Program Files\Google\Chrome\Application\chrome_proxy.exe

    Filesize

    1.6MB

    MD5

    60a26a03f214316ffec796c175002d64

    SHA1

    6bc1bad124dc7b7ca315116e20855c71a003ac9c

    SHA256

    b2596f59435bb2fc1be36ea6efb33c03fe2cf6ea670eef65d0a871059c480f98

    SHA512

    3815e4edb5fa784540318482a64822fff07691e4dfd64c27fa523b9259080f000dad8dea8c680c5a9c4bb18f10bb50b8fa2a27a2764f538ccf4feba9702b90b1

  • C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe

    Filesize

    1.2MB

    MD5

    cb9179c2cf696aab9caa63b8eec12b1c

    SHA1

    c7c828dbfbc5a4ee2a276f4b054c221fb70da5e4

    SHA256

    e66c8a0fe4d58c7e6fd3568c2d54c2b732ff9a8081c68a142859d30ecdbba161

    SHA512

    bc576d48ff97d6bda74a908d3b235be83b778119d23fb90479d1a51a4bda26fa7fbebaf1c6cd15582df3ca8c822db9df79b3106f18de8cc056507afa0870d3e6

  • C:\Program Files\Java\jdk-1.8\bin\extcheck.exe

    Filesize

    1.2MB

    MD5

    89264cab9a4e8596e9d99b85a42420a2

    SHA1

    913077c6e646fa2ef8a046120c949c4aef036a52

    SHA256

    31176e397d8c0ec01a91811ae84d026fb8889d84314f24d4d9ad9e1ce6b87b1d

    SHA512

    87b258ab9a45c38139e4fc8aad573bbb7f9cbbfcd1197d948595fcda2aeb7754232a2e078a61263c3f57bb729d5623bbe281777c3fccc4e2b33fb3e3b1b364e6

  • C:\Program Files\Java\jdk-1.8\bin\idlj.exe

    Filesize

    1.2MB

    MD5

    fc65961fb21e29e4d5b232eafbbe6794

    SHA1

    c9deda451cfa663d16f2612689c9fae7a143c341

    SHA256

    2bad477c2cbcedf2820eb42f1eafac16000dd064920fb05d555f35a6900b0f7d

    SHA512

    0be10ab14269455383ce6821ba905c8e0831b4a5c27c073fe886320b02539cd3568e490a2355d85ffc6b3ce775ccf78dd96c5f579ef72a7356ba110f08533fa9

  • C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe

    Filesize

    1.2MB

    MD5

    6de03aec20c4974a5d33d40a16a3774b

    SHA1

    3b0c96870913080d95ba882ee4a818632dbe4258

    SHA256

    44c68eaf12bc3d264865b6282dea9995caf314b65156cd49085bc33569cd0bd6

    SHA512

    4454c6e5f895196e1588307bfd97e50034e11eee6dd684200db8b0dfaeb5394f8616c68993ee471a498b651f0af6027a05abcb9a8308139a074f11b2376244fa

  • C:\Program Files\Java\jdk-1.8\bin\jar.exe

    Filesize

    1.2MB

    MD5

    5fa5835c9dfd91bd7a0ad5d9d2427469

    SHA1

    b9ae8f3500436110c4f12ddadc2e0785d9b6a191

    SHA256

    3ebf0e4bc01fb845cc00461a857916e09e0cc3894b4fbcded7f813d086680d9b

    SHA512

    b1c368ae993768b9534e7b5520544fa0b5f81946dd290722e6cd7b5116f2b755f6bfc7f18da348d1b211c1f26273108920e4314914322219c4f5f3aa8d6cbd82

  • C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe

    Filesize

    1.2MB

    MD5

    ebaed6921e8005377dd4598648b261a2

    SHA1

    a168a03772fa9b73b38f58bd62064109adf21f53

    SHA256

    9e026cdf8fd3aa3f7e0b72d8a60b86185c8d94ea07f683e6348d122285cdb041

    SHA512

    384b68006e670b9f99b19951edb89cdb00a15541611c11cd06e0157c142053ceed424535e06338a0117b3589e2ab4ab4f3ee5392bdbd343b59ad314e73d271f9

  • C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe

    Filesize

    1.2MB

    MD5

    1ff341fcf854bb2f2585250933e7c1df

    SHA1

    0e29a8a61aac32f7b2e0114439ae832ccde7fc45

    SHA256

    9a1167330e09c4c8498f789322aae88330db03ebfd27db90386d9ebffecf03ff

    SHA512

    744996515ed7db72862cd69fb27a4362a9b165aea773b1e16df7487d3e7337454053e168c3ca23862127982e3b9713e6ee909f5ca7e3cc53748431c3fcbede44

  • C:\Program Files\Java\jdk-1.8\bin\java.exe

    Filesize

    1.4MB

    MD5

    ead5c5f25500a0b28f9df7fd22163d5e

    SHA1

    b0b8fa266e91ea4066c7658ae1e24b6d2e8a4135

    SHA256

    002430dfe0f8a265ad78ba1767652de6e45218e3a001bf256dda5bdada7f3a03

    SHA512

    6958ebb428978a71eb7f683093c15ce10d62f22e04f52ace3368390071292ac840a0a46c3fac1013d1308b90a56c962809b53af9611450757137a96814aa6999

  • C:\Program Files\Java\jdk-1.8\bin\javac.exe

    Filesize

    1.2MB

    MD5

    fde71c16371f6a842125d5b193a3d582

    SHA1

    4fa176ce18d687ac786b0b76acc3f43dd7555b54

    SHA256

    923b56b97260b13307e6bbd938f38ddfa91ec7a925a693539c2cb78b2e9065f0

    SHA512

    7f14b1edefcf0cfac02db4356a33943b3e658434345874e509e42ed172188fd88b6a6ff4fcedd37860cd5aaccfb40ca785d8cd8ed6c520d21cd892a257fed30e

  • C:\Program Files\Java\jdk-1.8\bin\javadoc.exe

    Filesize

    1.2MB

    MD5

    e3707285c2c8949d9799e2bb4ef293e1

    SHA1

    46e41c27f087229e4a30a9361f90b643e0c8795e

    SHA256

    b396afe404e2d9d8e39596af2daf000f468a8a107099540d5438d2dfcf276af7

    SHA512

    420b8a07526fbc33d4a4761260ab3352a9951c31b49417f487193c89b9c739e8a4feb4d0617a71bf06a1ae7791d7c4b492606e9a58798dfbbe443254e9096e0c

  • C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe

    Filesize

    1.3MB

    MD5

    31f64c6c06658147fb8762e6d6c73448

    SHA1

    30bc67f1ee66c3beaa727d6e013dd308362a5a52

    SHA256

    acd65f2f39edd5ab177bf334cc1983a82b706767896c4fe4099cc12413d03080

    SHA512

    6b1234ab532d3a9dfe7559c09ca265f09da049cdf7bf69f3ee9ea67377fb4f0d0d0a6727055338913939d2aa481a7c87ac3fef2ba3e97d2aed1439885e01f898

  • C:\Program Files\Java\jdk-1.8\bin\javah.exe

    Filesize

    1.2MB

    MD5

    1decee67d582f05ed6a7e9c3161568ef

    SHA1

    2241b0ad5c98ed8bf48c102227f33ed95e1200e9

    SHA256

    161e70e1207e44117e1f0b058d20d85443a59d2cd6bfc81add9a0db8f5438ae3

    SHA512

    a74f34cba6d4d58f54df5f76c24d5e642786688f8c355ea2e96ea40e831f2efbb686979a070df8fb964eb2a56a7bdbd33f1c4dfa69957e21c54cbafc5203c6e6

  • C:\Program Files\Java\jdk-1.8\bin\javap.exe

    Filesize

    1.2MB

    MD5

    c69d888d59d72d63f4cf55056255e016

    SHA1

    472415a6c87a99263f65de344587ca6f386a67e5

    SHA256

    8dec08b6d41f5ac4dba280d1eaf9d8cddf8d2c4ff33d1af4f5f8b63ccc976dc9

    SHA512

    6a035d22d30195114b15c8b69ef56d7281f70bde9bfa57eabe33becdadc77fe2ca42c298d8a6f0b6ec42022682063d6910099a400c06426445cbba1d48deeada

  • C:\Program Files\Java\jdk-1.8\bin\javapackager.exe

    Filesize

    1.3MB

    MD5

    c82c94a26a32434a161c5624ff631de9

    SHA1

    8e8aed4a1c9017f1400376722c0793e648f3e106

    SHA256

    bba86d01b14ef25b6c74c90f421dc2b44a6a95d7a171c84474f55e2af5386ec7

    SHA512

    7c789a3c5ab7fc5a753154565d47ec1e9fa98f3c13fe9c5195d320113636fcc167df6a9c50a8694253bc5292283d4e4de52d3e2925d5d34e7782ba527bceae5b

  • C:\Program Files\Java\jdk-1.8\bin\javaw.exe

    Filesize

    1.4MB

    MD5

    5e262c66c71f9c680676e8655f305460

    SHA1

    903dab2089e133f4e268950738141b2bbdeab055

    SHA256

    05addd56925b6bc2f5a6426764049593ec1a8a620cbeb268eff08ae926869a0e

    SHA512

    31f07c5f199d54b0bd262157a637d70460a287374a511d47c136318688f022bc24b678686b14046b8a332ed91c71e85a9f006d01d6ebfd411ce605ec02dbd677

  • C:\Program Files\Java\jdk-1.8\bin\javaws.exe

    Filesize

    1.6MB

    MD5

    049f9d63d36c8fe1b4abcb04b812dc63

    SHA1

    604acb121b6152639212cb8bbbd7528a5978c5ec

    SHA256

    5404ba4ff103be54dfee4f4214267481d3d795848b2ab9b704ebd010017711b0

    SHA512

    636e8f08984078a750ef3e839986448fe111475d238ff6b87db36aeb7204e718004669c32320fd5f942f66f379cbc256414432e0c26a451835eeeca14dfeae8a

  • C:\Program Files\Java\jdk-1.8\bin\jcmd.exe

    Filesize

    1.2MB

    MD5

    14b217bf4458eaed40f3cf665ce2828f

    SHA1

    b37ba23aeddf7b8fde9d7d4b63c3d8437018fbb2

    SHA256

    ab94ca4e54e31389bc88eded244123aaf1a56faf877e47dffb604c776a478e90

    SHA512

    2f0d8eceba8c75817ee9b3cc62709c20ce2807361c5d01590c444cfbfc49a4dbd69c0b6ebef748c1a25e61ce0911d601643ad344cc63ec9c8817fa68151fabe5

  • C:\Program Files\Java\jdk-1.8\bin\jconsole.exe

    Filesize

    1.2MB

    MD5

    63d7a0b08f854976c63ead183b7dc0e0

    SHA1

    90386662bf98a8da504ad8433d7ada58152ed5bd

    SHA256

    b8c9875578d491769fdd450a8de7bb7936481e99f4a30629e059531062e7be13

    SHA512

    63b7f56305d9737d45757455bbd48bf33b8c48e4fbf417168891f06fc36b2f2211f482ec41ed4d7487956ea71ff590b43e063eaca321d4675e484bbf9148444c

  • C:\Program Files\Java\jdk-1.8\bin\jdb.exe

    Filesize

    1.2MB

    MD5

    d506360150d3afa927f45fc413296e2a

    SHA1

    205a4785be8b07b624d6d9b225307c19741c315d

    SHA256

    3c4502d62711e49c8e0bb4ab1abe5134a296b4db36554d1b03849b4856bb48a8

    SHA512

    f57e8d6b0d12c47879ce4c2eba15bb28e0cd95d5084a3cc6139859ed8bacaae39d6d658eddc3b9068e951c4a83ee2512d6e32f16ea333ffc0f1bfe2da4e14809

  • C:\Program Files\Java\jdk-1.8\bin\jdeps.exe

    Filesize

    1.2MB

    MD5

    e3e6a5eee28f038920cf7877e62c1fe1

    SHA1

    aa715eb1411e33db98c77e5c8c515df9a5889b32

    SHA256

    030447cd6fb6f0e176412e10ba8667ebcd959e60826218a4fb30519d4581bd9d

    SHA512

    6c31a01bf06df8d4a841ddd63966782b7208c3d03f83cd404d55fb3301eb2855b328187395b52f01db31fcf8f6161c5ba7f3d9b6977a029fceff3496f85d15c2

  • C:\Program Files\Java\jdk-1.8\bin\jhat.exe

    Filesize

    1.2MB

    MD5

    ec997e2eb445a5984f53363c1b922fef

    SHA1

    0c62706302f891d5464c903bd54880934a9d3633

    SHA256

    f87f372373e5f898c0f53b2228a43d938c0a9aebf8fc9a857a4163d488ce63aa

    SHA512

    a20a91a0effbd2a5bcf3cbddcdd1e9acb17b36feb62aa305d1aa479e09a3b52803180d1215f439ab488cd1f960a968254a4da1da626e9ed66e51cebd23d0b0c2

  • C:\Program Files\Java\jdk-1.8\bin\jinfo.exe

    Filesize

    1.2MB

    MD5

    46ac211e2fe693f9d2c9401e77c33c39

    SHA1

    66347fe864ef886eb18d9c11ae2b07f5f50c255f

    SHA256

    f2e784d6d2fb6a42773579e2839b76abb0907b70a9cbc46acff01c6a265a303e

    SHA512

    0143bceaab453398a1a75d2d432450a5fb62f80de33071fe0299fdce5006eb43f90351703ea084341e18342980e3981aab7c83136cdb06d56c1ad0c565bc191c

  • C:\Program Files\Java\jdk-1.8\bin\jjs.exe

    Filesize

    1.2MB

    MD5

    fc0ec95e92c839b43f14dceeb285cf55

    SHA1

    59b6d1645b88c7272a430235f943dbf7d22b3f8b

    SHA256

    7a8ae9999baa76600534e56e6714dece84d2d0e3f060c2b0e5a958c3e2eddf40

    SHA512

    8a380797bd0985bf7b3f79c6bfedb80f3866b46fa6687e7fda2c8a42dab7670038932780f846574573eeee2efeb0d07e6205c663c7d290002c39d20104095395

  • C:\Program Files\Java\jdk-1.8\bin\jmap.exe

    Filesize

    1.2MB

    MD5

    d2122a109c2bd2903808cc81d22944ba

    SHA1

    b8cbab940b77bea1b86af029ebe5bfa384d75c94

    SHA256

    9d774afd9dd0cc384f283bfe0414b3d0c489127a5fad5928e740f1fddf2f3e06

    SHA512

    f39e0e3c59105e10f2ffe98086abb5b212fc0c814a05e66f3f4e6d12a738404a7c9be076b07c1600216291fa455a8848cb1745d2d0de261914e5f185a413aa84

  • C:\Program Files\Java\jdk-1.8\bin\jps.exe

    Filesize

    1.2MB

    MD5

    c45b3e01a2aaa1c950c341c648895358

    SHA1

    77343fdbc8193e040384eb001d9db36afd0324af

    SHA256

    d9b27e18dad681d29a438febfd7be5b27a0f3aeb48e1abbe7fdc63874b9e8b35

    SHA512

    e1852fa2b7e535688197a1d1ab4a3fbdb66240ac92469fce9a101f250f0e8c8b2af4b0ad933a1ea69ebe73e0b9476ddcfe7165c0713a2d4d9be4b87298dab236

  • C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe

    Filesize

    1.2MB

    MD5

    384a67028e740d06c80862886b951e8d

    SHA1

    3660fcf301e12754187c5b018c45dd401576fe8e

    SHA256

    317a725cbecd16d76467e061402801ec5dc9138ef1e00887b84b4142356d8adb

    SHA512

    0e4197e19a143d9070284adb30037403287a161e55f611536e3bbd0e6cf6a440940a885a8c0c02b61849a922d2ad5b0e9a3b8467827e374cc6354ffc37979a40

  • C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe

    Filesize

    1.2MB

    MD5

    cf7cb4c98e3e8206a9f7a450a3765bd7

    SHA1

    3e172a753c50c778f4f310740b7bf405408a14b8

    SHA256

    c84addab3486124c67522801f85c8feabd8df722dd3132aadda2cd0ae8e31623

    SHA512

    f9532331d4bd5fe939e077e47c949a5474b666ea6f772c8b19fa111b7bb13e38a66aef0d9c50d010c2de7813606c66392ee24366dc0212de4691cb6ef1ed3bb8

  • C:\Program Files\Java\jdk-1.8\bin\jstack.exe

    Filesize

    1.2MB

    MD5

    0e7465d8a571bbb36b2b123c499d18bd

    SHA1

    fe9aa7bf7aa658c9685d1e74943f45893d651599

    SHA256

    769127bd8e7939d7440c70fa70a4c3e8a4086f7496a8778a7c0f8294f8df7fb1

    SHA512

    42f760d0cadfacb50c91a3033a1927eebad07c8b62d96fc5a7f6b1c809340f842d443f618dc74bcb525cf83a40718df5b3a7eb60e8ce8f5d320ab0e895635198

  • C:\Program Files\Java\jdk-1.8\bin\jstat.exe

    Filesize

    1.2MB

    MD5

    1c8256f12edea306626d76828414d168

    SHA1

    df165639abc6c345b0c5ecf740bcee11d97a3122

    SHA256

    6d65ab265c44efa154d0d05e18a6a8ffa3f067bc622594dbc3d0962713b90e48

    SHA512

    33b66bea77a5acac87fef13edba2866b2556218995a03829800da8ec3313f44ffeae647f5a1c6bed70cac4f952446f81e3549363470b06fd8946481c22d8869f

  • C:\Program Files\Java\jdk-1.8\bin\jstatd.exe

    Filesize

    1.2MB

    MD5

    59db8014d134709ff817c5f03c53aa4b

    SHA1

    9a1791769d53135d8943ccd4d2700b00a3ca5854

    SHA256

    e1539dc35c2f97d758875ca5795a6913cd9ac4be75825f7082844b0ab179be99

    SHA512

    008d91ea3553a45b1585ccd0d1684f82c6def33f178ca046adfea719f2a2caec4c5aadb94587a7d1ba14d60f045b264cc0b5acab61fc5ddbfc9348ae800508f7

  • C:\Program Files\Java\jdk-1.8\bin\keytool.exe

    Filesize

    1.2MB

    MD5

    146c6005cf9cc28a1f0df3f429c3b934

    SHA1

    6e40c4d8c93ec515998f6fe77344b80d8f9fc83d

    SHA256

    4b572d77e7c720bc08b47ccf54ef0202d0318b14f9866102ee82b7b5be65c9e1

    SHA512

    2953030bec9d5a69427d412ea3443cec373bad8b04aeb2aec61dda0e920ea8219fe3b890fb714cdbba022edfcf9b03b064a785a0e7e2306d499238c82f43f7d8

  • C:\Program Files\Java\jdk-1.8\bin\kinit.exe

    Filesize

    1.2MB

    MD5

    a0edc84e5524c8c9954200ac3df53c28

    SHA1

    5151d0431e25776eaadfe70ec67af51f14080ec7

    SHA256

    d2e6c3d65ece512c9ab0e8e55cbe0bdb056bc9014eb2c2510f4b50d79de0302a

    SHA512

    48a92e5a34e6d078dbf110e7821d8b9af53c84c731940f0e9ff3cc7d6a2d4e7443b42ab5bbbaebeb1e70de9927792196c0836ec11c79e57556aa01b4b88c9ee8

  • C:\Program Files\Java\jdk-1.8\bin\klist.exe

    Filesize

    1.2MB

    MD5

    c3913066c5d30efe48863a19218b6cb4

    SHA1

    687b10f4d44574c47491e1984f1f003c4e8e4b80

    SHA256

    42e1b24a23b59915149f900e3dbab95e2a15ae09caf074d1a473878a21ce02a1

    SHA512

    fa1246635bba96e719aef39778574624a31843b5a545c5793357286526cf231f7f9df260be0b169a4a41ca06ba51be3645805aeab354643099dbc83138491e2d

  • C:\Program Files\Java\jdk-1.8\bin\ktab.exe

    Filesize

    1.2MB

    MD5

    b6188a1b1fc8ccf44c00c29f51bb0180

    SHA1

    ccd3810d57fd962d9d7c56426b1e8e1ae7a1d9a4

    SHA256

    ab09c433912307009c445501cd04a7c6892369e1c31a4edfba1edc2806127c34

    SHA512

    1a371c7ea03dcc9a52be5df729161125b31385589e4f1f67e910eba03806588e9f119ff7865fb46cd6a57a27b930f325ec8942b786a2414a22846e635ee8c799

  • C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe

    Filesize

    1.2MB

    MD5

    97395bf9449b011aadcb53f761a1c955

    SHA1

    f792e4cac8f30bf1cb77f9c52a5665ea70712a7a

    SHA256

    984e73e097ebcec7c2de30662f0256bbbf892b66d6c302ad77150760e147ea34

    SHA512

    9b5bf1a3dc8784685d425df66d37eb18c1148fdd742b84b51d30109d2b8aaccedc22dfd09374180934703fa84ff47c8e3608907a16b590f4d7343b2b5c10ecd4

  • C:\Program Files\Java\jdk-1.8\bin\orbd.exe

    Filesize

    1.2MB

    MD5

    80df960f03400bcd66663d056203d95c

    SHA1

    9a7c5adfffb0c024058578f1dafaab393bd9328b

    SHA256

    517d58e6ef8866f5f2ed445b74ae626bffa59eb55ea90eb5491bb35d3685367f

    SHA512

    35a9fc1f98dc2582b468639706f41571d7072d6ef8dc188ecaeabe61d1b0ee7a6b96bb4bf44b38ebaefd4ce8ea6dd4fc6b6ff58a66fe3447fbfc8940277f2403

  • C:\Program Files\Java\jdk-1.8\bin\pack200.exe

    Filesize

    1.2MB

    MD5

    1675b5e40c855c5b251d84455f4daad5

    SHA1

    251cc16ea083bed399c73442b84cbb1b4eb88ab9

    SHA256

    0d8569d53f85ebd05a9c1d26d3212973f43b80d0d19daa812e66ea63b9203dc9

    SHA512

    fc88ddf82976c03362396df0b1f3509e532fb8e743d37c21ccbef21eeecf6b3d6f362a029233dfb7f7855b145395cdde00654847a635029f9d1c27832662846c

  • C:\Program Files\Java\jdk-1.8\bin\policytool.exe

    Filesize

    1.2MB

    MD5

    62f524bc9034fc72b367772f8f672afe

    SHA1

    d646650864171477dfef92c20a1fbeb2c5e624f1

    SHA256

    3149c7db9a2ea7beb5aa5cd89dd7bdfed2e04b55a2a8b956ce4c0bd1f7912de1

    SHA512

    f6b0942b2cf07556df0b2fe06f15c3c92a0a4c0dfbbe5686a4386b1262ff5b6a5add724126396c91017b22e055570b9b4cd921fa7ff01c0b47b5250e6f57b253

  • C:\Program Files\Java\jdk-1.8\bin\rmic.exe

    Filesize

    1.2MB

    MD5

    c8bb000f521b81cfc5d93574f90ac5bb

    SHA1

    1a09aa9e3451297969b0adfcdbbff42b70efaff2

    SHA256

    d2a0b41aff3ceaedc393054e9e5c5fc7deafa2466edacc1b545edba43cc51c0b

    SHA512

    6c4bbc361c793c0b1032bd0303180e4ba54e9024d7652f33391e802fd2737f9eb91e85e54c1097d4bbc933f2e373b0003198d8cf498d9649020c9e802b8b9402

  • C:\Program Files\dotnet\dotnet.exe

    Filesize

    1.3MB

    MD5

    fc0a96e99c4482193416f08d21c6919d

    SHA1

    ed074611fc9a7cda615c2ecd13fd2cf0cab7287e

    SHA256

    7c447f4c8f88ba243998a356a5e16805090b04344e329ffbcbe4539d18356f02

    SHA512

    855253bca116aab3b292792bdb15a8aa49358ecf7651d30faf04dcda105716ea10b238e8e0a11a2ed47131ebf71373eb0d2d484fe00a789cd2a0cc3cb104b7b5

  • C:\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe

    Filesize

    1.2MB

    MD5

    c220d9353a16b910ffd64092b8c72fcd

    SHA1

    17cbcc9c23637f5b49673c5c639bce79c1adce22

    SHA256

    e45620244475e318e80dbe41c1d15321836830f2dd2d1a388158aea070cb6f81

    SHA512

    4754c4c36995e7955e3d5aa11f9fe7956c143a376d8aada8b397923dc0446514badc00b7101b3d434f30794ce65d8e9922aea43542a84bcc325db8f22b7f0f87

  • C:\Windows\System32\alg.exe

    Filesize

    1.2MB

    MD5

    7344c0e6ef0d030717997f4766b841de

    SHA1

    c7500267bcc349689650f235dc3e4b7133b17f6f

    SHA256

    1968b54234f5c561813e9e0372727aae4aac74e2e202907381050415fb9b2e0b

    SHA512

    23929d461356421d11b1c83fd3ef6a011d9f3234993d1512fa28ff3c8f87a746c36b9fd5a2631b0eb711a004c5bfa66e11eea6111941e797086600511137c732

  • C:\Windows\system32\AppVClient.exe

    Filesize

    1.3MB

    MD5

    bf3bfafdff60a7d6db8126d041e12809

    SHA1

    610dda0e6b7e97f55565f00be408cc49f7455afa

    SHA256

    8b33db0a86559892916a51abec2518856e677c2cc9957856f81517551f49cc39

    SHA512

    8020579f557df0526fd7d3670b3f4932959a830c03cd2d60c651f29d852afe1cb4bac4d25279762440a197ae4264e8e549fb12c22527969e4b4b33805b57b70a

  • memory/552-42-0x0000000140000000-0x0000000140234000-memory.dmp

    Filesize

    2.2MB

  • memory/552-51-0x0000000000760000-0x00000000007C0000-memory.dmp

    Filesize

    384KB

  • memory/552-247-0x0000000140000000-0x0000000140234000-memory.dmp

    Filesize

    2.2MB

  • memory/552-43-0x0000000000760000-0x00000000007C0000-memory.dmp

    Filesize

    384KB

  • memory/740-54-0x00000000001A0000-0x0000000000200000-memory.dmp

    Filesize

    384KB

  • memory/740-62-0x0000000140000000-0x000000014022B000-memory.dmp

    Filesize

    2.2MB

  • memory/740-248-0x0000000140000000-0x000000014022B000-memory.dmp

    Filesize

    2.2MB

  • memory/740-63-0x00000000001A0000-0x0000000000200000-memory.dmp

    Filesize

    384KB

  • memory/1820-28-0x0000000000400000-0x000000000059B000-memory.dmp

    Filesize

    1.6MB

  • memory/1820-0-0x0000000000400000-0x000000000059B000-memory.dmp

    Filesize

    1.6MB

  • memory/1820-8-0x0000000000BA0000-0x0000000000C06000-memory.dmp

    Filesize

    408KB

  • memory/1820-2-0x0000000000BA0000-0x0000000000C06000-memory.dmp

    Filesize

    408KB

  • memory/2588-20-0x0000000140000000-0x0000000140141000-memory.dmp

    Filesize

    1.3MB

  • memory/2588-22-0x00000000006E0000-0x0000000000740000-memory.dmp

    Filesize

    384KB

  • memory/2588-13-0x00000000006E0000-0x0000000000740000-memory.dmp

    Filesize

    384KB

  • memory/2588-81-0x0000000140000000-0x0000000140141000-memory.dmp

    Filesize

    1.3MB

  • memory/3636-31-0x0000000140000000-0x0000000140140000-memory.dmp

    Filesize

    1.2MB

  • memory/3636-41-0x0000000000730000-0x0000000000790000-memory.dmp

    Filesize

    384KB

  • memory/3636-32-0x0000000000730000-0x0000000000790000-memory.dmp

    Filesize

    384KB

  • memory/3636-246-0x0000000140000000-0x0000000140140000-memory.dmp

    Filesize

    1.2MB

  • memory/4796-66-0x0000000000C00000-0x0000000000C60000-memory.dmp

    Filesize

    384KB

  • memory/4796-72-0x0000000000C00000-0x0000000000C60000-memory.dmp

    Filesize

    384KB

  • memory/4796-77-0x0000000000C00000-0x0000000000C60000-memory.dmp

    Filesize

    384KB

  • memory/4796-76-0x0000000140000000-0x0000000140166000-memory.dmp

    Filesize

    1.4MB

  • memory/4796-79-0x0000000140000000-0x0000000140166000-memory.dmp

    Filesize

    1.4MB

  • memory/5084-251-0x0000000140000000-0x0000000140166000-memory.dmp

    Filesize

    1.4MB

  • memory/5084-82-0x0000000000820000-0x0000000000880000-memory.dmp

    Filesize

    384KB

  • memory/5084-88-0x0000000140000000-0x0000000140166000-memory.dmp

    Filesize

    1.4MB

  • memory/5084-89-0x0000000000820000-0x0000000000880000-memory.dmp

    Filesize

    384KB