Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/10/2024, 04:13

General

  • Target

    2024-10-18_e684f78b68c567204320198a6d631f03_bkransomware_karagany.exe

  • Size

    677KB

  • MD5

    e684f78b68c567204320198a6d631f03

  • SHA1

    bd7d59e1cf6ccb4366738a7f35a9826b45929683

  • SHA256

    2da894bf4407dfe035cf13b396511a028d8a4bcc6252fc9698d67bc5759d087c

  • SHA512

    b41c337e6dcae94891243354a280f02359fd579a4c4f076cf2a88013c05d94bf22770a9688156a7ec71f211423138d9c975d05d29d54a1d1a7f49aab678e5e3d

  • SSDEEP

    12288:2vXk19TNjYGgpK/vnRsmH5Ckt73qfKrrzD89f24pWYbCXGah2JoHq1MGJlyw9hdT:qk19TNjx+mZCkt76f/24pN+XNqNG6hdn

Malware Config

Signatures

  • Executes dropped EXE 6 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Drops file in System32 directory 9 IoCs
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-10-18_e684f78b68c567204320198a6d631f03_bkransomware_karagany.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-10-18_e684f78b68c567204320198a6d631f03_bkransomware_karagany.exe"
    1⤵
    • Drops file in System32 directory
    • System Location Discovery: System Language Discovery
    • Suspicious use of AdjustPrivilegeToken
    PID:3936
  • C:\Windows\System32\alg.exe
    C:\Windows\System32\alg.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious use of AdjustPrivilegeToken
    PID:3380
  • C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4536
  • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
    "C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:1200
  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:4648
  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"
    1⤵
    • Executes dropped EXE
    • Drops file in Program Files directory
    PID:2812
  • \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
    "c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
    1⤵
    • Executes dropped EXE
    PID:1220

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe

    Filesize

    2.1MB

    MD5

    1b34cc408378d37328ff899954c304ee

    SHA1

    38066fcc73e83a8b30c8c403e923f265c4e957a8

    SHA256

    821721f5b4b57bbf65ec4f9d1eb817a07d17297ef3d96120b34bbf78cd12e3fa

    SHA512

    94553c3b32cc26f0a1f2e15a85a5c2a4328a0c86c208b98d1185ea65ca99ca5b8e85e337e950769491209b991ba16cc804499ff081fe1adc12928c39eba25a06

  • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

    Filesize

    789KB

    MD5

    7dfd6b764ebefc5d43808dfa06e6569b

    SHA1

    e7e9d03322eb09fa504ceb41eadce163766f529d

    SHA256

    40821b42551cbe39524f96831a119d2e3e4acd9d496c26024b58ff1f5b4de5be

    SHA512

    8106de08babb525f749bb531fe6ac0acc78cdcb9a3ef40c7f9274d0d0532c4f9764b30657f6aa39a0be27a1f9d87002fe9dc39a28ab515051d9404a7ff32aefa

  • C:\Program Files\7-Zip\7z.exe

    Filesize

    1.1MB

    MD5

    03b08d68b1ae6cb12839b2923d030f84

    SHA1

    d1aed551839b84bc440bc570d05ad5d96a49ee19

    SHA256

    e6bf9740bb4cb1399a40e2dbbc1454c82e9bc5c86b3115082fca8b79f9d399f7

    SHA512

    887d4cf58f1b8a5dd253d99360278c6fa3a53b2f72c1557d937073f0788f71e8f32d2210d51cbee474128831097fc4a86d0622f6e9ab6b1070f9ae14048e7ff7

  • C:\Program Files\7-Zip\7zFM.exe

    Filesize

    1.5MB

    MD5

    e05636129c9829143a705307fe970c96

    SHA1

    e5b0c701ef64b09ce56c1b4656eb211aadbb1931

    SHA256

    a4674b38d6c9c28da9e0265040f5f21e122ae50269e350d68c11969ab5336493

    SHA512

    cefa64b1ae3b44297c8b678b3302c2609f45850064297ef4255aaff28191730fe81f2911266b6492856636bc9298e98b8957d27208260612523ec4039c3a6206

  • C:\Program Files\7-Zip\7zG.exe

    Filesize

    1.2MB

    MD5

    1892ad2b1451dd47dc8bc41ac3a538e7

    SHA1

    2b48a842daffa428a7188e66f016cdff4e7f30b6

    SHA256

    66934567b4076599c5591eb05ff20fbf8e0d08efd529b5f394e03eb8d2fbc8da

    SHA512

    2947182ddfdeee32705943b0e4c1097dc2b38f044f18d904649d5d5e64b81c7c49de0563eb889acd96fcb3ae7a3cdaeeb109e502477908637994ac5dceaaa407

  • C:\Program Files\7-Zip\Uninstall.exe

    Filesize

    582KB

    MD5

    a0e3a56b535f49e9799d4e3c933eb7b5

    SHA1

    115e87eca5a891e6c79c21d417fc157414977e9f

    SHA256

    2b193153f6145f22a93305c04cffb698accf094aef31bb74402b514658047ef2

    SHA512

    960bd2fc0118655f1020b300759bdaa3e098c46d47bcb7fea1b14bc11fbcf12754b38e7c40eaefb4e889678cd22a6c1829ecba718de1b21f9ef538f11bf6ca51

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe

    Filesize

    840KB

    MD5

    996c51cde55d7618b4b49c82d448c81c

    SHA1

    babf229e322081c32ffb76615041a4bc81f2c791

    SHA256

    eb126ea65ab2dc5b07cfbd9a576d656e5b5f6fe2ed368e752f1093cf973746a8

    SHA512

    fb95c2399512d94bed4732b5beb004e0a7615099dbcb162892a92adbe3cfd781da4262dd24f91c339baeffc953db2dd6fadd52b192411a56b3e1d750cc4da9f9

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe

    Filesize

    4.6MB

    MD5

    3b768b3d3245013d594955c8416c7519

    SHA1

    6f64f0bcf8b0a6b0312ab4cec8c208568ffa8f5f

    SHA256

    0bb681369e8e6eb3832727a76499324ae05881d145779975a05c0aec0406fbb7

    SHA512

    0d2302c73fe404251d2fcbc9ed6d5193d5ffeb3a2997cc75e445193d504aadee6731f32f912a7aed3fea7d8a238effd3f5fa76d22b4868266e3cf8dd17d8b15a

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe

    Filesize

    910KB

    MD5

    3df72649047b2042869a2d683177ac30

    SHA1

    6c0b03c704cc9336faa167e79024c191fcd24b64

    SHA256

    fd9af4dfc09f69eb0af4a901141691466929d229814778fd98acf11c245fee88

    SHA512

    4f5575ec503f3f6be1b1953dec7693fc3ff3142ce8d48e247a5919b8dd8b45817feaae2bcffb7afad4f9ed5bbe306d5443899032a1822c22bcea2343ec51cbc6

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe

    Filesize

    24.0MB

    MD5

    594b09f5c637ddebe4d93688f9d701fe

    SHA1

    8d1fa14cd5943de94f506d6324e63270a7060d0e

    SHA256

    1b45337edafa7c87cc044276a762c7929d0e2e63e95aa854c4715861fba0b401

    SHA512

    bf31980b75c13132ff0708baa68057b17fe07d8ea516b35126da21b979572b75fb1c4bc22d28bebb13a0d453b04d631ad37a51f77b087a3c6373d589a9f9b732

  • C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe

    Filesize

    2.7MB

    MD5

    43e62fcf42df79369acda45838647473

    SHA1

    bf127ad7f3de05973e00601b6a991cde224ad0d1

    SHA256

    a57768285884414ed6352ef31e6274e32fe6856b246c0ad546eef1f8fca4ba02

    SHA512

    142e88d12f05c304562daf89e2c2c9052b2df15a94355718ce2e4c0260009d5087f818049854dcac3659a8eda092959c131e258cbdc9346d652ef96362582c91

  • C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE

    Filesize

    1.1MB

    MD5

    fe1d6a31fc206f3a938744b2995d5805

    SHA1

    6c8dc6e0b986befd9c77e774f4dba0d2bef2927a

    SHA256

    b7ba721174463be090a707a93777b528a99bc2238d6e81f281515977114613f5

    SHA512

    dec77b7c00570fc10bf85ddcdd81ccc8eb501cb5106a185b8dfeb9aded0e6b44af05622ce2d924d7637677d197dc3c6927bf2b3f60bf58795c130f5c19933ace

  • C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE

    Filesize

    805KB

    MD5

    9f13b8393cb0f988b00c6a447f081f13

    SHA1

    121eabda4c603d763b47f8a0215cd075f9f5a79d

    SHA256

    351bb59a9004bf694a93e8a7a6d98e903609200d06396f8d6a544bd7633513de

    SHA512

    5dc48f845b3af43e41902bf11626889a0349d114687ccc9aac9b6a4f851b656f0ac64599a9f113df339abf1deaf749a097b3e6af4e3ac3cf6ee8ebecb549c934

  • C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe

    Filesize

    656KB

    MD5

    fc1b24c71ff94c7ef505a455a3e5f8ce

    SHA1

    fd00dea1fec90ca896a794c247fc3b459ed02937

    SHA256

    f75cfcc4da02dcc3eafa8dc50d85d4265924cb0a390ddc217a94a0e9efa1f374

    SHA512

    143a0a15572908cbad3b905701de431100dc8f5c4040babbcde84035ba292d064f18b1f4fde1e393fc48eaffe69d1ae9dabe89ea689f94eb8dd2421f8df3f41f

  • C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\chrmstp.exe

    Filesize

    4.6MB

    MD5

    ecb93fe89a01cd77290658b681e03dee

    SHA1

    fa2ddbbac63f523151812b189ed863d974e30283

    SHA256

    c2e3b14131c7adac75b8b7a2b339a8eb7643b894525758ff2a5e31e7a649f7dd

    SHA512

    cff0729533bfbe2e9f0bd77c0665947da21079192da5d8d1c2147373acae392f929bf4a56980aa282c97138dfc04299e2e616732c11be41c51f70ee4001eb947

  • C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe

    Filesize

    4.6MB

    MD5

    694d2137aa2f326f09a0426fdab93dc9

    SHA1

    a9abdf64dd94b8608ff59c56b0190db85d093af8

    SHA256

    c4736c26c9c305f9d1aeee874590084cbbb6b50c67770ccde0b458c1e3224c83

    SHA512

    b4896ae1000e235edd7a817a4d597ee7ef21bbc7a1d3d6933504df2dce855a176a262bef65db869faa99f3bc0f1d4bc680e8d18941b71de8d67a118e1c7dce45

  • C:\Program Files\Google\Chrome\Application\123.0.6312.123\chrome_pwa_launcher.exe

    Filesize

    1.9MB

    MD5

    6d9401f7491e03bc0a22be26e5bf7f21

    SHA1

    cdb0800bbde3aaebeab2ed1b284d3af9802dcfed

    SHA256

    beab8eb375c86fb789d6365c379d6a59aaab1197c5bc8178325909d3b8eef4fd

    SHA512

    8f10d6b010b1797b8a72597ced93f7c6e6bdbd92148614c0bc7d8bd6f6fe6f54a5df6c875c53992a00286ab6f0056e3cf517d96a8bb3be5aeefde80254ad8520

  • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe

    Filesize

    2.1MB

    MD5

    a4526080a2068125920dae955f1f1887

    SHA1

    7e881c6ea9416b2e58220e0eb3bbc84ae1da3cec

    SHA256

    d35acb4ad25d1b03e27044b724c1955f749bf1212983697483faf715836a7a93

    SHA512

    3665da98d9cc78a1d826c38a5c84d3014525ccf7deaf3680de5d1d114adb5b7def8140393c41f49d29704437db228b6361ce0df897e9eae6c4f50c9272d941d5

  • C:\Program Files\Google\Chrome\Application\123.0.6312.123\notification_helper.exe

    Filesize

    1.8MB

    MD5

    4d4327abbdedf94b5c48d67909a07162

    SHA1

    3088548ccfc55985a1f971bd3fc007fdf7da0f46

    SHA256

    e8c629f1406dbb8316c6cec52be4dc5378203d36f5522582fb7a50da5cb59f43

    SHA512

    b4856ecdf2eb361149ee1a7cd5f2bcc8aee5d51bcc2e5fb95f8dbf87d00f1b3bded6a7babd14f22b62c1b2e2597f963fc1c49da14bbd8fccc6cdaf6186b9edb6

  • C:\Program Files\Google\Chrome\Application\chrome_proxy.exe

    Filesize

    1.6MB

    MD5

    1d3183f9c8cca8f1feb9539836b7627f

    SHA1

    4dfb90e1d9d702787dd3dd6070c41486857dad8f

    SHA256

    e7575d0c091fdf8581fb904181bbe68b8df0030c1bc55acdc444b8858038d71b

    SHA512

    f4e773ac8a7c3e3be99d0d5ef577d143e279bc07282ad6a638a4a33ebecd29ad6fb9bd1f4b7a73988cf06b8657fd56bb57cf4efd9b9539a0810451681dfba3be

  • C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe

    Filesize

    581KB

    MD5

    1b10ca87c21cec543310ca8ca73ba112

    SHA1

    e628777226a112df63ba5e01d33e7376e27d8a88

    SHA256

    1340b088d54a66bbf6cd9efb2844d99fa2458774afd8f724346213d5b55046d9

    SHA512

    0fe1af8dbd38ed076acc2fd577402925af7a54e97b709e9bf5342185b6d27b52b2f08092f01080fc23e5f47a24d60cb214b73b99c664679365fa1f99da93f3a0

  • C:\Program Files\Java\jdk-1.8\bin\extcheck.exe

    Filesize

    581KB

    MD5

    c130ac58a91a127ea20fbc0344b89b86

    SHA1

    cc929381b2d77ae40432076eaf0d81f243dd3a6e

    SHA256

    82ea3b2787a28ae2face970dc73a6bf3266c07456e6a4df4081d03aa6522ddf0

    SHA512

    67f23abaf7653be61158078010b248343b5031b9fd29bd7daae5a61cbece48c54348d538f7e80fe554a519f0ef0d2b0eeec44540ba7f20e02ce767deb48f90fe

  • C:\Program Files\Java\jdk-1.8\bin\idlj.exe

    Filesize

    581KB

    MD5

    4384bc8a11011ba9a06ae172eaa2bcc3

    SHA1

    c88789464228d7ad604e0c584007183283020f6c

    SHA256

    7e3f25a59be557b9f3592f1c6c4c23e0ecfa5d5dea850548af7dfa5dd581e655

    SHA512

    ef4508d34965ccd7b480c32e241dccdfc257b303bd72c8d5fc0b262e016502dec18a423ceb221ef25555e3ebe0c1c8ec65189541ba391c8976f027e12ec3bccb

  • C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe

    Filesize

    601KB

    MD5

    c1b28651e7772d5752258316214c7179

    SHA1

    5a8951f990abb0491e8fc93c2439583a32ab18da

    SHA256

    538014ca7dafa47bdeed9f6545e1a258ee8d4b9e5af2435f4f0981404665bd40

    SHA512

    e4ff82ca1c69f6bd67e44a5414c429c1dd8744927f3a109e471a09c3039920911e0c3d25495db803b486f76b3f24901d7ec289eac0542e32251234817762c8ac

  • C:\Program Files\Java\jdk-1.8\bin\jar.exe

    Filesize

    581KB

    MD5

    ae56c050f656d3360009abe501209ea9

    SHA1

    31241b9d3fb3d849431816a7284f33ddfef6106d

    SHA256

    af30f8f56ecfb49f44f6835c49e78a17200eec22d2d5a2dab70ed77081c9a0d4

    SHA512

    ba4e5f1d3ddc87a5a1d326bf98c8a13bf241db3adce989338d0b54459b847ced871fa124f037571a11503a378d25a9e7b8d80a349d4c2ae058f09d1dea7cfcbb

  • C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe

    Filesize

    581KB

    MD5

    c957ba2ee4b4fcc7184716a96ce8677c

    SHA1

    5e89bb6749aff9ce1522dfae8888b4e9f4834c5c

    SHA256

    c3d0000c2ed084db7cd9e55489571d1cb7a1c8b86659fedb9cb6067e04cf513d

    SHA512

    806956f1ce2ada8e8f5bd2876b9874f7265ee82395d3a1a3db6fb78a773b0ddc6251c3f7770a1f3a66649312f0541a4ed6ad01ddae3d4664b852ee777e0aa2de

  • C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe

    Filesize

    581KB

    MD5

    9e9ffab939af15c0a9343eca030f2fec

    SHA1

    6f897b74f24367025d2b14f4c3bebac60f596386

    SHA256

    babd4e1b77ca1d3c593506b350c47bc9a200e886a767f0223e74ef148cc9669e

    SHA512

    6f395dfe731bea7d9f015b08b071e3ed1cbf3765175402178d22d5b3170b4f66e43d75fc84485c86911c9d2396d40262ca69d0ac58413fa108b8cb989be262b8

  • C:\Program Files\Java\jdk-1.8\bin\java.exe

    Filesize

    841KB

    MD5

    776d165013b30fe765d94f543e68913e

    SHA1

    c1d2160072460fc15e8db52657327af93f3b7613

    SHA256

    361ae9f50b3c40696e51adbfd0d305028fbc4acae6cd62ab5fb147d616a48dd7

    SHA512

    d08296a561f1a181cd64061f4a5ed1d84b6018b56c499d0837174d611345ffebc82005605da821b66cc261b505f3b55ff4967b62b7e062757b7e0e82623bf2ff

  • C:\Program Files\Java\jdk-1.8\bin\javac.exe

    Filesize

    581KB

    MD5

    de1b63e1e6cf72242c6089f2a297b27b

    SHA1

    5efebcace2b02618e9b7375cb0bb91aa4bf95eda

    SHA256

    aa6f05b18056deaa8261c213262a79810f79066ec8a14e934f9659f9ed830654

    SHA512

    b2b458975b9c59967d77ca5dbbe831236dafe4f936fb62ea33961210e94c0a850986887663343d73aef08929bb19abac1196a5383959050910340e355e9e2cde

  • C:\Program Files\Java\jdk-1.8\bin\javadoc.exe

    Filesize

    581KB

    MD5

    ab00aba2e6fa951129560040620448eb

    SHA1

    f47bf2788904c0566ad6e9814c54d875c7655907

    SHA256

    75a1032f574861587a006ab7a3108b701a2192962d2ac8efa30bf096541f9f7f

    SHA512

    b22a6c52dc6605fcac7cba592df297ae37915bcc8511a8c30cb5c905ba5e136e1d87611de739e07abca472ff1a2823cc1963736bdb73cd14c2c7c05133cec9bb

  • C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe

    Filesize

    717KB

    MD5

    937025eec7eea62f8e60a65b3663a97b

    SHA1

    afde8e2b7960bc6ebc25d516f81c332baef920c5

    SHA256

    9ac9c628d5e26b717f017c508ac6a66fba5e98bea3fcd700f0f318bd08096da7

    SHA512

    0fa34c3670c2b06353bfcc384917340b095967f69ed9e90b03e99442947f8ef1ee678b778f2f60afdd828f02551e1b1555047774c9eb0e6d123eb4aacbb9ff2a

  • C:\Program Files\Java\jdk-1.8\bin\javah.exe

    Filesize

    581KB

    MD5

    1264f3d2df2431b6a82eea9fab97046d

    SHA1

    c7a0e84d989d79367aaf7174e544f3324ff51ee2

    SHA256

    a42078728090c33f3cc815021a1cfd7ce5ca8e5ac7a68396ffb575511087f3fc

    SHA512

    feb86b9e736cdc373946a4e16692a94a5fac31a537478e5883028dfafa6339418a993a4d1be16935f77ede3577f5ee68a6ea9282902c62de4defd4783c2a3b99

  • C:\Program Files\Java\jdk-1.8\bin\javap.exe

    Filesize

    581KB

    MD5

    217d2ee7b526af88382ffb22bb1fb590

    SHA1

    111d053d60d1fb41b270ed2b08b9debb6a3ffac4

    SHA256

    a1e7d78a3cf8ac855575b7dbfde6403fa9143e33ef3913f3aee98ec6be4e362d

    SHA512

    6213ab0843202053e25b4485762a43d57d61c31f4ba77c9f94732b880a9a6463a8aadbb38239d41734cf8cf1ac7c79c0ad78e8ea44971332db4fb1eada59631e

  • C:\Program Files\Java\jdk-1.8\bin\javapackager.exe

    Filesize

    717KB

    MD5

    988b6c5675b73a7d4e8a77825e7e2058

    SHA1

    05a743d4f757e8065e29e397247224ed27d044c7

    SHA256

    9efb4f46fd8e4d22a5a7774acd32d8394454678ccd63e54f3d5253d849b937f7

    SHA512

    8466ad09461e1fc93c869dbb884ce1d76478a24a97dafa01fd231f559f09357c86df82c06083f5fe5e68813721fa11fc5ba18c19b14ae9096243662b301a1925

  • C:\Program Files\Java\jdk-1.8\bin\javaw.exe

    Filesize

    841KB

    MD5

    da83fcff3092ff43ac89f39b2d869f10

    SHA1

    b4b5d247801ec9088f8861ef779b04c7fa800e4d

    SHA256

    94b9c44907a47d26571e3f0706bac6b0518530e3357919fa93e1ef7ccbdac9c0

    SHA512

    00aedfe2ee288effab8c19f0bc5ea708f74472fa122c3fd7d18721e65e114869f3b78fd857026a984fbed52d51e29cd22dc36cd9016575c9748c3ac36c1db792

  • C:\Program Files\Java\jdk-1.8\bin\javaws.exe

    Filesize

    1020KB

    MD5

    c5fb8beec38b81ce8ebe916382a380c9

    SHA1

    3b86112d7fbf9fa0e3621c1f9133abb8d5565171

    SHA256

    c0caa949f2a6d374cd1676fca647dd9a5305e3cd41516110e766d97ba00fcfc2

    SHA512

    f63a1cede71a1d8de7097de2abc98a302e5fa2b1533478ce1001b69b27ee1a83dc3c6b1560483cfc7bf335d7f84e659c431f4ba82585eac2078fc893b3e7cab0

  • C:\Program Files\Java\jdk-1.8\bin\jcmd.exe

    Filesize

    581KB

    MD5

    ff104565da147f5d1b3fee69d4739912

    SHA1

    9b105423017e62f737ead130b90fc1fc52331952

    SHA256

    cde77d2b069b8a20de55f1b18a35e8f8b344596f955176b913bfb2b10f779b34

    SHA512

    0ea3eba5ba145ae4d871934149f39cc3627089fd8d333261faea0326b1d192d00129eb1592242c2efdc08ba27471570b36637b947603f6b34b527dbc73e8a2a0

  • C:\Program Files\Java\jdk-1.8\bin\jconsole.exe

    Filesize

    581KB

    MD5

    a4c647d2aad889fe3df39dd037a2ed24

    SHA1

    aadc5e4aa56775eeebd97af9411debde10beb862

    SHA256

    108f18123494c65090080a83ab5dc07c16f9e1fe1ba629a828c6af3c8445884c

    SHA512

    c4e9dfaf752e1f0f2a2a06a7fdbd6ec728ed66aa124b7da10411ebd11b8b8947e2b8a6bd86bb7aa0ceffe46b54e6809badb99b688bc6d13310e2909d05f17d30

  • C:\Program Files\Java\jdk-1.8\bin\jdb.exe

    Filesize

    581KB

    MD5

    de5531dd9e9201a8ea6d646204e7de96

    SHA1

    80a17b3046575b315d1a0f8f97caa604fda95f9c

    SHA256

    39319d07d6a3d635abd95fd0f0ae9a3c74ba09842cf6a590264001490753c6a9

    SHA512

    4a695f4249f7948626e6209562e8f35c73cafcab7ffdb2af5f4bc2c475e6539cf7b4c9a5329a4b68c934bd7649421b41ee7116be0d3a769c67288ba989c56d50

  • C:\Program Files\Java\jdk-1.8\bin\jdeps.exe

    Filesize

    581KB

    MD5

    5d72a7c987fc06767b6b79a6a01cccef

    SHA1

    6c56cf15631d865ebc82c238157d50b4bba213e2

    SHA256

    6acda1163a9e5db57ed2913886d47b9d18bff1153ebf7d1f1bf9da6a43995bc6

    SHA512

    80d0d2b6169efc24ebe566d3fe3cdf702eddd1dcffc866a7855507adc41cabcc2192e9688e2a6a497e57a44c64afb99bc1493920bdca93051a676c7ab9bde612

  • C:\Program Files\Java\jdk-1.8\bin\jhat.exe

    Filesize

    581KB

    MD5

    f6140fd6e7e96c67576ef070513104ae

    SHA1

    b03432b6f775772fdace565d9647bf506d26e4ed

    SHA256

    ba180951b87c25f297f802fbedc81b96b483a6bdb2ea94656a373b39ef840850

    SHA512

    0579cc7fd516bfe2260ceb59a859b0aeca5217cb9cdca10f2307784ac2850b5bb8af9fead9413c8d0f10fba53a6ea0e9228f935f6c3f69d86049d74ea8431401

  • C:\Program Files\Java\jdk-1.8\bin\jinfo.exe

    Filesize

    581KB

    MD5

    fb471e4572ae3fb11db9afc129821c69

    SHA1

    3656a7e4d2f38f214f539c00b0632dbfb437972c

    SHA256

    a84cb0e1882638f4beac1bc18d8cd42b0ce5ce20ef1c9633fef5055c9b07abcc

    SHA512

    ba0f60b7e95319dfd386431bccbc988117cbd2ffb2dfb3c37dcf9f9df02e09863cfe39213db4a34c40dde13a29a897167d038967f992dfda0e7b5cd6a7003671

  • C:\Program Files\Java\jdk-1.8\bin\jjs.exe

    Filesize

    581KB

    MD5

    7eef7e08f6f79dee09ccaddf754ced34

    SHA1

    7ae480418eb296c8e1cd4db4f27fc5b90b41ce9f

    SHA256

    4ee6a36fa208518a46c809fea181546653c49ff52c60f2df87468d3231a032a1

    SHA512

    03a0d56651e3e55f6663a3fd03c09ef2a3c1e691cb40de9d4c23c5be2d91ffb08e870c85f0c05cd76324399ee980a766e3e509aafc4a7df464c7177fbb7c8ca9

  • C:\Program Files\Java\jdk-1.8\bin\jmap.exe

    Filesize

    581KB

    MD5

    d2a04c69449667f93cdc96552c06cb2c

    SHA1

    3721a7a087d2d6ae0809e22eff190bd7fea14296

    SHA256

    442e8c1c390f1e95498709763d9626a092b78d3d71f81d6d7164e85471147e6d

    SHA512

    2b2cf73b7ddab5a6bf68884a3de3c2e23d7d30662a52120bb88c1f96f16224b3edb5ef1813839d808ca8823ff0c1d9ee63f4f84f82aaaf805066075f7ebc2a7c

  • C:\Program Files\Java\jdk-1.8\bin\jps.exe

    Filesize

    581KB

    MD5

    4bc1c97ffe801b2a636f754eb742ff14

    SHA1

    c17323164f0b9bd6dcc04474978ff2036d4d01e5

    SHA256

    2361dd0626c4a4c4e1b538e023a60e54fe3f8b65513832f3b8a82dc083208710

    SHA512

    a459fa2cec4d58f7f0a48bc748ffc8110cd7f0d01bd95a1945297b8e575066d59d7d5d4c5e48331e7006759f3b77923ddeebc81f5a6bd8abb10e9302575cc41d

  • C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe

    Filesize

    581KB

    MD5

    0b24df40dc2709e8c70f2cd7d7fb5cdd

    SHA1

    fa766c5180691e9f23046f22468c38882c8fd8fe

    SHA256

    78200f5e08aaf4f6174df58e28dd42ba68379dd04d3fb92ff55e49017a3dd8a1

    SHA512

    4d29ae25a6744c912a5149b6b5e41be24ea8110647be4c88b12cbe110552ff06c6b1859d905a7d92bbf354bd1bbe0ab6c17d93d8a7e2667ff4cbfd46d8e19aba

  • C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe

    Filesize

    581KB

    MD5

    b35d65ddf6fc1aaca3eb1a8e414a331a

    SHA1

    dacdb610260e53cb4cb66f77e0babb3d5cb5add5

    SHA256

    45587a4ff5db6396b98784de8537990944a0aeabbd7aac063d6a337ec8b783c6

    SHA512

    d47f0f308351ced71e06d96ed701496d87e6f59d04b3aaed2531e800f2d0b73331699e358020805fcbf36f637960ba0b697e77af12dcb9ae983ba17af70bf8f8

  • C:\Program Files\Java\jdk-1.8\bin\jstack.exe

    Filesize

    581KB

    MD5

    609eb89b442df130a8fa12065d87bb5e

    SHA1

    d7a7430296475b9d36144d9bef0e5fa28959dd89

    SHA256

    1c9adb17f340fdd237eea38573811a48574967cca2f42199ace37594f142c5be

    SHA512

    bec80235e9f295e0914f1556457cde797d1de645df59a0a7d4fa8bbf3e0e306729aa8c187fca08a39f0830e464f67e595ae7785652aa70e14d6a3eb2ede351d6

  • C:\Program Files\Java\jdk-1.8\bin\jstat.exe

    Filesize

    581KB

    MD5

    e8779eae5e2cf2fcd9ee55c1d546a405

    SHA1

    db32cdfae5c1701b3f3612669491ebf6c1cb9de9

    SHA256

    6f5733d9e7e79330dec5979dfd33f56031c75032292bc213dc73855de7c1c15d

    SHA512

    cb6edbce6881a073ea6c06a60c06d77b9558c2ec1fb0e773ea889d573cf3d5383fcd003b10eabae1ccec7ad0028f3bcaa64bcfc27009f2cdb1fcfe3b72335e51

  • C:\Program Files\Java\jdk-1.8\bin\jstatd.exe

    Filesize

    581KB

    MD5

    b347201484ca69c8af1bf1be2073cf5f

    SHA1

    337273158247002e8be3ea31a0f55350de5ee4dc

    SHA256

    a25d93209772ff92f52667f144f2fbccadc181d5bd93bf9238a1ff6da9514df9

    SHA512

    c1dcdfdb18a97446d9ea2ae0f75384cd6f934c1f42816c8673e930f3d06546ffcf7ceffeaebc404955473007eec48979365241cfb7f5432b0a01aaefe7c24c6d

  • C:\Program Files\Java\jdk-1.8\bin\keytool.exe

    Filesize

    581KB

    MD5

    8af69a6ae1ce8cf1b7de0e5561a4611f

    SHA1

    7c02ba73bcb094225dd931eacaafa201d7cdc28d

    SHA256

    b89c9d6b51f1948ae019bd6236457d34d5f7e1008e967302c259f7592f567042

    SHA512

    1da9845702b948019c7e411ccfa99a908cc36bffe727b62cb8fad8badf8df213d97069ab118c849939aa54d6fb9d9b503f6890ca8c51e75fc2df94550d409c2f

  • C:\Program Files\Java\jdk-1.8\bin\kinit.exe

    Filesize

    581KB

    MD5

    bf0822f4d5a459a172f4dcbe1e15a4c5

    SHA1

    debb0d17cf71d85ee49e1b59adaf3f07c80d56f1

    SHA256

    5b3c4e51b607a7aa1f33b6820e34da16b85c7f57f97295344b9e776bf9bde2c9

    SHA512

    c1f14f3887daa86af84fe2ed4e6e253ff7882f7e42fc1432d91843bd5161727384e27ee7ea6596a5aef923f7bf816df8eff55ee2b20c4d67a8afaa238883c6f8

  • C:\Program Files\Java\jdk-1.8\bin\klist.exe

    Filesize

    581KB

    MD5

    bcd8343a3fe55cabfa7c26749c39aece

    SHA1

    0ee10067a10616f5a810ee5fa1107bb0fba64629

    SHA256

    99ee5d77e164a1b25436f632bef871b9cf65d8629a136ec8f512896ff48882fe

    SHA512

    4081897dfc1e29af90eb9f2aa571b274177eb4fd9447588573ff8a05ae51cb9fc79e9348d967bc34fd09f9ffa20cac5134a7af6ba2d6e2ccf64eb35fe4626f8f

  • C:\Program Files\Java\jdk-1.8\bin\ktab.exe

    Filesize

    581KB

    MD5

    d7f7189f2e0aac2fced091af417e165a

    SHA1

    41702a58f41ce6a7aa1c8651ec4d764076c6bf71

    SHA256

    cc68c3468e7cc035f3daf4b6c737ede68ef79997e21c78a2c5c0c856d0593db5

    SHA512

    6a3aad923835787b20dfd266373fdab45f5043d8ad5bf5afde68047da77423760141cbfe825ed13d9359a0edea97b1c26be1d75aa72af34d94a492bc54cc6a0f

  • C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe

    Filesize

    581KB

    MD5

    4a1a8c999c6373be32fda4842edce38b

    SHA1

    405b4c63d083166bc1c9744f7f962842b01951bd

    SHA256

    af431eda8a549d4bd35e981bc9b7b1ace0383fa2f78c3ba2ac1ee6d56d3df646

    SHA512

    5989144abd7151d5b602f6d72e1bf0ce0c172ca50732dd90d831ffdf33409333856c73033f467dcb9cfeff97f22dd2220bf557bea820222aff6abd773449838c

  • C:\Program Files\Java\jdk-1.8\bin\orbd.exe

    Filesize

    581KB

    MD5

    3c05c04adf2a94fe117f2277251930f6

    SHA1

    02d3724e3a011ed7c7c8d7ee416b9e83c61f477f

    SHA256

    5e0686dd49f9e9019b2bee20aed958bd41496b4ca34a25e77a77546b7ef2cf55

    SHA512

    63567ba0cf62397ad8c3b44fed254728bd72d3195bbe8179aa9ff9852bb4edff3a9b26110a352a054dc2c9795ebcb82888580c5b162f8f7261e7b59643fbd98c

  • C:\Program Files\Java\jdk-1.8\bin\pack200.exe

    Filesize

    581KB

    MD5

    d9b0ce2feee8c42f9e0bfaef3ba74b79

    SHA1

    b8228d1b00c89ba2c6dec2b372305cd18a3dd5c1

    SHA256

    cb3bdb4b5c37f1a2ac6002a541cd872506cda53d14f5f565b15e201b66007951

    SHA512

    f835afb7f6b818e7c8bb8932c69c806b35630970c75f6bcaef7b023f6a1192a05e5a0ef3db410579455667c2f0b9a26cbbf0ec8674966cb841e2654eafc5f7fd

  • C:\Program Files\Java\jdk-1.8\bin\policytool.exe

    Filesize

    581KB

    MD5

    d942ae38c216473656c3f6fbc4819296

    SHA1

    ac87c0cb017cd3ec6ad19e9bce8f96651a0e96cb

    SHA256

    b0819333348fb665bb54bd88700ab61561ca30ccc08dd300e6368df2bbda4f96

    SHA512

    7661aa7da99667aa3250d1109898d4096715a2d7ddee046ddd8c5241979fdcd429bc689f3c7bd6eaa1a7dc1469dc5648cf92ecff4471f4df4955e9cb09ad6733

  • C:\Program Files\Java\jdk-1.8\bin\rmic.exe

    Filesize

    581KB

    MD5

    24f34bba7ba952252edf1d6bfb9772a8

    SHA1

    79f93a396f04771c8b50a60099688c11fa1bf8a1

    SHA256

    f19465b929490d5f9f79cd1a8d69726062b89b72c6c3d64a34cfaef070c967f8

    SHA512

    6d76f35c92a2e4f562e02146d763678020a946d8bf432681d9198ecf8b1ec907f99df2d2193edee6e66098de250cc22051ed9e9b4fa83c16f1ffc668e55f0ced

  • C:\Program Files\dotnet\dotnet.exe

    Filesize

    701KB

    MD5

    89e6279867cb98cd7cffd0d75cbfc9d7

    SHA1

    a2c87e00221427f66959e125871f3b182223ae61

    SHA256

    9539255ea915210f3f7e13ad283a603dec3718d12758e1bd48353600c17c0442

    SHA512

    8f02eefab10b2f47ac333ebf6f0bfb03032d7de97d14b040fe08fc87ef4953c574bb560122616944639de5fe43d38d92ac3a6085f8cc21a95f11af890db1dba1

  • C:\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe

    Filesize

    659KB

    MD5

    a165db5dcbf6e7c5105eb4ab5edcb560

    SHA1

    a7c16857c0630be5f3904f0d5bba5018e9a294cc

    SHA256

    8148565a1de073bfadf1f40899a2b8156460f5bf6114c617abff25f68b995c66

    SHA512

    2d0f78540ecbefc1123638c9e5169c0d911d293aa6d736df0c244609d847c8d5b17ecb38a205fc5a99d82c0d97ad47c36bcedd97aae48c60ba6aa551bd3cc5c8

  • C:\Windows\System32\alg.exe

    Filesize

    661KB

    MD5

    92ebd51c095b48fc634c8fab6fdce24f

    SHA1

    4501290234368641bb0839368e3170197edf5b9b

    SHA256

    38c442021037d6cf65e5863b8af4eb9c436f9f865d37f52f485af206e569bb04

    SHA512

    4c120a5dbe1639a4bcec087c2ba9666286a524c7a99d7755b4f909203622c1e4f0459c717fc188a978ba1fa61b57c354c544a1792b82ef738c3084e053dc70db

  • C:\Windows\system32\AppVClient.exe

    Filesize

    1.3MB

    MD5

    5fafa06bca718c1dbe0bfad3a1350dc8

    SHA1

    b5f0293c677955de83d39287b790323814eeec98

    SHA256

    1cf88e6b067d0711857052665439a35ef18ccceb1477efd8d10ee3439ed6ed23

    SHA512

    264af274bdecc0e9f46b5ba50d7163593768d2990990ebaf1ff601540cac374eb7470eab0a0a5753ce771a08af6bc8755f0b01328def095f599c76f84bed74c9

  • memory/1200-50-0x0000000140000000-0x0000000140234000-memory.dmp

    Filesize

    2.2MB

  • memory/1200-42-0x0000000000440000-0x00000000004A0000-memory.dmp

    Filesize

    384KB

  • memory/1200-51-0x0000000000440000-0x00000000004A0000-memory.dmp

    Filesize

    384KB

  • memory/1200-247-0x0000000140000000-0x0000000140234000-memory.dmp

    Filesize

    2.2MB

  • memory/1220-81-0x0000000140000000-0x00000001400CF000-memory.dmp

    Filesize

    828KB

  • memory/1220-82-0x00000000007C0000-0x0000000000820000-memory.dmp

    Filesize

    384KB

  • memory/1220-88-0x00000000007C0000-0x0000000000820000-memory.dmp

    Filesize

    384KB

  • memory/1220-249-0x0000000140000000-0x00000001400CF000-memory.dmp

    Filesize

    828KB

  • memory/2812-79-0x0000000140000000-0x00000001400CF000-memory.dmp

    Filesize

    828KB

  • memory/2812-77-0x0000000000CD0000-0x0000000000D30000-memory.dmp

    Filesize

    384KB

  • memory/2812-66-0x0000000000CD0000-0x0000000000D30000-memory.dmp

    Filesize

    384KB

  • memory/2812-72-0x0000000000CD0000-0x0000000000D30000-memory.dmp

    Filesize

    384KB

  • memory/2812-74-0x0000000140000000-0x00000001400CF000-memory.dmp

    Filesize

    828KB

  • memory/3380-12-0x0000000140000000-0x00000001400AA000-memory.dmp

    Filesize

    680KB

  • memory/3380-164-0x0000000140000000-0x00000001400AA000-memory.dmp

    Filesize

    680KB

  • memory/3380-13-0x00000000006C0000-0x0000000000720000-memory.dmp

    Filesize

    384KB

  • memory/3380-21-0x00000000006C0000-0x0000000000720000-memory.dmp

    Filesize

    384KB

  • memory/3936-8-0x0000000002220000-0x0000000002287000-memory.dmp

    Filesize

    412KB

  • memory/3936-0-0x0000000000400000-0x00000000004B0000-memory.dmp

    Filesize

    704KB

  • memory/3936-39-0x0000000000400000-0x00000000004B0000-memory.dmp

    Filesize

    704KB

  • memory/3936-1-0x0000000002220000-0x0000000002287000-memory.dmp

    Filesize

    412KB

  • memory/4536-243-0x0000000140000000-0x00000001400A9000-memory.dmp

    Filesize

    676KB

  • memory/4536-26-0x0000000140000000-0x00000001400A9000-memory.dmp

    Filesize

    676KB

  • memory/4536-27-0x00000000006B0000-0x0000000000710000-memory.dmp

    Filesize

    384KB

  • memory/4536-35-0x00000000006B0000-0x0000000000710000-memory.dmp

    Filesize

    384KB

  • memory/4648-63-0x00000000001A0000-0x0000000000200000-memory.dmp

    Filesize

    384KB

  • memory/4648-60-0x0000000140000000-0x000000014022B000-memory.dmp

    Filesize

    2.2MB

  • memory/4648-54-0x00000000001A0000-0x0000000000200000-memory.dmp

    Filesize

    384KB

  • memory/4648-248-0x0000000140000000-0x000000014022B000-memory.dmp

    Filesize

    2.2MB