7fd8743d7db3b41fd686d8225cee3937cee621ee1fee933cd5734be2ddd9eb7f

Analysis

max time kernel
141s
max time network
146s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
29-02-2024 03:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe
Size

10.4MB
MD5

c1c14116d65607f73749b67d99075842
SHA1

ccff447979820f332f5273b99d61e472129efada
SHA256

7fd8743d7db3b41fd686d8225cee3937cee621ee1fee933cd5734be2ddd9eb7f
SHA512

80da28062901e987b736aa9573551b84fcdd387be240d29d98f978c4c2644a34aaea966911c263f94d6f583fd38e2fa81af4c8b07ffaa799fe6a2bc314174a3a
SSDEEP

196608:i+0iHnDSu5gTe3p2VLyMCLLtgQIJQSG5t2FUJti8wHMgIu+z7Ogm5HIjJIJ:i+7HVmTe52VGMCXW+5I9dMgm8HIjJs

Score

7^/10

Malware Config

Signatures

Executes dropped EXE 5 IoCs

pid	Process
2664	lzma.exe
2748	unpack200.exe
1864	unpack200.exe
2000	unpack200.exe
1980	javaw.exe

Loads dropped DLL 21 IoCs

pid	Process
2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe
2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe
2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe
2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe
2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe
2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe
2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe
2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe
2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe
2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe
1980	javaw.exe
1980	javaw.exe
1980	javaw.exe
1980	javaw.exe
1980	javaw.exe
2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe
2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe
2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe
2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe
2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe
2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2296 wrote to memory of 2664	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	28
PID 2296 wrote to memory of 2664	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	28
PID 2296 wrote to memory of 2664	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	28
PID 2296 wrote to memory of 2664	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	28
PID 2296 wrote to memory of 2560	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	29
PID 2296 wrote to memory of 2560	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	29
PID 2296 wrote to memory of 2560	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	29
PID 2296 wrote to memory of 2560	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	29
PID 2296 wrote to memory of 2748	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	31
PID 2296 wrote to memory of 2748	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	31
PID 2296 wrote to memory of 2748	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	31
PID 2296 wrote to memory of 2748	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	31
PID 2296 wrote to memory of 1864	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	32
PID 2296 wrote to memory of 1864	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	32
PID 2296 wrote to memory of 1864	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	32
PID 2296 wrote to memory of 1864	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	32
PID 2296 wrote to memory of 2000	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	33
PID 2296 wrote to memory of 2000	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	33
PID 2296 wrote to memory of 2000	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	33
PID 2296 wrote to memory of 2000	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	33
PID 2296 wrote to memory of 1980	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	34
PID 2296 wrote to memory of 1980	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	34
PID 2296 wrote to memory of 1980	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	34
PID 2296 wrote to memory of 1980	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	34
PID 2296 wrote to memory of 1644	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	35
PID 2296 wrote to memory of 1644	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	35
PID 2296 wrote to memory of 1644	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	35
PID 2296 wrote to memory of 1644	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	35
PID 2296 wrote to memory of 636	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	36
PID 2296 wrote to memory of 636	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	36
PID 2296 wrote to memory of 636	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	36
PID 2296 wrote to memory of 636	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	36
PID 2296 wrote to memory of 2224	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	37
PID 2296 wrote to memory of 2224	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	37
PID 2296 wrote to memory of 2224	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	37
PID 2296 wrote to memory of 2224	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	37
PID 2296 wrote to memory of 2488	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	38
PID 2296 wrote to memory of 2488	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	38
PID 2296 wrote to memory of 2488	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	38
PID 2296 wrote to memory of 2488	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	38
PID 2296 wrote to memory of 2052	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	39
PID 2296 wrote to memory of 2052	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	39
PID 2296 wrote to memory of 2052	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	39
PID 2296 wrote to memory of 2052	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	39
PID 2296 wrote to memory of 2584	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	40
PID 2296 wrote to memory of 2584	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	40
PID 2296 wrote to memory of 2584	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	40
PID 2296 wrote to memory of 2584	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	40
PID 2296 wrote to memory of 1436	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	41
PID 2296 wrote to memory of 1436	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	41
PID 2296 wrote to memory of 1436	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	41
PID 2296 wrote to memory of 1436	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	41
PID 2296 wrote to memory of 1616	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	42
PID 2296 wrote to memory of 1616	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	42
PID 2296 wrote to memory of 1616	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	42
PID 2296 wrote to memory of 1616	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	42
PID 2296 wrote to memory of 2260	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	47
PID 2296 wrote to memory of 2260	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	47
PID 2296 wrote to memory of 2260	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	47
PID 2296 wrote to memory of 2260	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	47
PID 2296 wrote to memory of 2940	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	49
PID 2296 wrote to memory of 2940	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	49
PID 2296 wrote to memory of 2940	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	49
PID 2296 wrote to memory of 2940	2296	SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe	49

C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe
"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.Siggen10.59370.11657.8581.exe"
1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2296
- C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\lzma.exe
  "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\lzma.exe" "d" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\JWrapper-JWrapper-00032144438-archive.p2.l2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\JWrapper-JWrapper-00032144438-archive.p2"
  2⤵
  - Executes dropped EXE
  PID:2664
- C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-JWrapper-00032144438-complete\lzma.exe
  "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-JWrapper-00032144438-complete\lzma.exe" "d" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\JWrapper-Windows32JRE-00028603591-archive.p2.l2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\JWrapper-Windows32JRE-00028603591-archive.p2"
  2⤵
  PID:2560
- C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\bin\unpack200.exe
  "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\bin\unpack200.exe" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\lib\ext\sunpkcs11.jar.p2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\lib\ext\sunpkcs11.jar"
  2⤵
  - Executes dropped EXE
  PID:2748
- C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\bin\unpack200.exe
  "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\bin\unpack200.exe" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\lib\jsse.jar.p2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\lib\jsse.jar"
  2⤵
  - Executes dropped EXE
  PID:1864
- C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\bin\unpack200.exe
  "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\bin\unpack200.exe" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\lib\rt.jar.p2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\lib\rt.jar"
  2⤵
  - Executes dropped EXE
  PID:2000
- C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\bin\javaw.exe
  "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\bin\javaw.exe" "-Xshare:dump"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1980
- C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-JWrapper-00032144438-complete\lzma.exe
  "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-JWrapper-00032144438-complete\lzma.exe" "d" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\JWrapper-SimpleHelp Technician-00032144476-archive.p2.l2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\JWrapper-SimpleHelp Technician-00032144476-archive.p2"
  2⤵
  PID:1644
- C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe
  "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\technician.jar.p2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\technician.jar"
  2⤵
  PID:636
- C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe
  "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\liquidlnf.jar.p2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\liquidlnf.jar"
  2⤵
  PID:2224
- C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe
  "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\SimpleHelp TechnicianMacLauncher32.app\Contents\Resources\Java\osxwrapper.jar.p2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\SimpleHelp TechnicianMacLauncher32.app\Contents\Resources\Java\osxwrapper.jar"
  2⤵
  PID:2488
- C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe
  "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\SimpleHelp TechnicianMacLauncher32.app\Contents\Resources\Java\sevenzip.jar.p2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\SimpleHelp TechnicianMacLauncher32.app\Contents\Resources\Java\sevenzip.jar"
  2⤵
  PID:2052
- C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe
  "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\unpack200.exe" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\jwrapper_utils.jar.p2" "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\jwrapper_utils.jar"
  2⤵
  PID:2584
- C:\Windows\SysWOW64\cacls.exe
  cacls "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWAppsSharedConfig\DetectedProxies" /t /e /g "Users":F
  2⤵
  PID:1436
- C:\Windows\SysWOW64\cacls.exe
  cacls "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWAppsSharedConfig\ProxyCredentials" /t /e /g "Users":F
  2⤵
  PID:1616
- C:\Windows\SysWOW64\cacls.exe
  cacls "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-SimpleHelp Technician-00032144476-complete\JWrapper-SimpleHelp Technician-splash.png" /t /e /g "Users":F
  2⤵
  PID:2260
- C:\Windows\SysWOW64\cacls.exe
  cacls "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWApps\SimpleHelp_TechnicianICO.ico" /t /e /g "Users":F
  2⤵
  PID:2940
- C:\Windows\SysWOW64\cacls.exe
  cacls "C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWApps\JWrapper-SimpleHelp Technician-UninstallerICO.ico" /t /e /g "Users":F
  2⤵
  PID:2032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWAppsSharedConfig\ProxyCredentials

Filesize
4B

MD5
f1d3ff8443297732862df21dc4e57262

SHA1
9069ca78e7450a285173431b3e52c5c25299e473

SHA256
df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119

SHA512
ec2d57691d9b2d40182ac565032054b7d784ba96b18bcb5be0bb4e70e3fb041eff582c8af66ee50256539f2181d7f9e53627c0189da7e75a4d5ef10ea93b20b3

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWApps\JWrapper-SimpleHelp Technician-UninstallerICO.ico

Filesize
48KB

MD5
3629d03fef69370d6933829d175147a5

SHA1
52320b01ee8c0cf248b60180eb8046ab350fe548

SHA256
85f2b156d63d64d4e9998f2e8207a03c096b8aed5b1631823dff36c2e89c52e6

SHA512
f3cb0a706e8ec58795d99f0d3476098872e63c45fd3b50f0b6ceafc632b5f9db74ca8c5e1813c50600e7e235f285157c36a0d7cab099ff2257aa8286224b1fd1

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWApps\SimpleHelp_TechnicianICO.ico

Filesize
41KB

MD5
74bdecd5e52771137f96659f06de7349

SHA1
480200480c34ab8279fb76c5a3737be801a9b347

SHA256
c1a238d4e0d67d687017abf89f547587803b7efcb4087f499f8fb0a128b3febb

SHA512
74547779b51469b7494ae6ab623a9c99d64092e01c339709780b95647b64c388312987524ef75bc78e963c68ce20a130711b7ba6409e8be94ed0fd3b8aa41526

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-SimpleHelp Technician-00032144476-complete\JWrapper-SimpleHelp Technician-ICNS.icns

Filesize
24KB

MD5
262c6cf0a4e47770c36ed880b73c38d7

SHA1
74e016c6e7678b0e7ea8910b91e1f3f24427b09c

SHA256
adf853648c26ae5e82af5c3ad17dcc7bed59a6e6fbb01092c955dac66b93d8d1

SHA512
a7f5b1a836f298eedd1e903ae2d5d7753596c4799a62a7b7e6380fa8b6f0022219545ef53b793b1fd15205b752445f5c3c6ecdf73f4f321a9eeb7988d9f78a0b

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-SimpleHelp Technician-00032144476-complete\JWrapper-SimpleHelp Technician-splash.png

Filesize
8KB

MD5
08051133e368d61036576d3ed5b9cc14

SHA1
817e7a73eb33ab39e3c4d8c99a00c9d05c64f5c5

SHA256
5ac80b373a7de315cc803eea0fc640335369df062de52b53c2a4175af2c0a2a7

SHA512
93400dc7b885e2f51942ccba11ed7f1ebc82b9d726aa3b5c11ea118bfa93d20594243449ce37195cf72387064514c01d0d2d38776d7d049e148050edf873b7ce

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\client\classes.jsa

Filesize
896KB

MD5
dbac53ccbbb3d59f88777c29c8bb94b4

SHA1
1a2e57a357509d19580753b4a001c3755e0641c4

SHA256
b9e8f545f359009f9164a237e32128ceff9d80d6afb51068ee3ef1b05285f4f6

SHA512
50e8002619f2172e0f132db163a5167109e1df6082c6792fa0f46dbff06522f83b16d86a38e08d7b1cd0c1cf652b2c5397c3116ed39c510989e8ecb6a0f18719

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\JWrapper-JWrapper-00032144438-archive.p2

Filesize
2.0MB

MD5
c3c302937b50f937a294f4cb8e8beedb

SHA1
ebd8a9b5ecf1856ff4f2302e3436746758f9f099

SHA256
143e02a97969bef9abb476dcb311877b256313554c0f2e2493f35e94bfb67244

SHA512
92a8dc076fbd0ae2c3f7af40de623b6da554cedd5fba530caa0fa65b757dc031eda79355a12d28160a1a337907aa393114604bc9b89ae0a1448820a3ddaa5c0b

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\JWrapper-JWrapper-00032144438-archive.p2.l2

Filesize
627KB

MD5
7368a9e5046b0071c8125a7703fac0db

SHA1
f828bda136e4b3cf4de5a715ae86c84cd3029119

SHA256
3ffe2027721793ddff505ab1326e1cb8984caf652aab01e42c10bbf47af5ab92

SHA512
4588f3018448f2ca9463afbd83a9ee39465b20385fb756d6c28527cbba514e2cc23673fc20a001915bce19bc608c2b2726e5ef53602094f312af265ee7016716

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\JWrapper-SimpleHelp Technician-00032144476-archive.p2

Filesize
5.3MB

MD5
b4a9c4795026730ab82f908b7785fa80

SHA1
73e8aca042dd1a7c073d12a970a75f54a22a0236

SHA256
f3d5ec8d152802895d80263541719e98487fff13d9089e43307b39126a7618c4

SHA512
e48d629941aae1cb9def4001f3f0a990946d3dd01b8743337a38f20db2c4cf41b1232618cfe7edcdc7a1c3d31c236988e21ba4ae77229cd3d57ad8cd996e153c

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\JWrapper-SimpleHelp Technician-00032144476-archive.p2.l2

Filesize
537KB

MD5
2253a993723ab750b2766c7312427ba4

SHA1
aa9d5069b33a0a9d48149389f5129e82f3635314

SHA256
220aaf2c49b6c753b47d499929847b4759d931908dbc7f8b24833bc1781c45b6

SHA512
4701decd0414e2f60864bb82f99964ce59d46f234554aad1d695cbe23685a1e126a2e9f3f6de67b0305923ecd301f2e4af4dd10f40de4f74669aef83680fa362

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\SimpleHelp TechnicianMacLauncher32.app\Contents\Resources\AppSplash.png

Filesize
4KB

MD5
a3be1246247cfc9a93352d288e81f358

SHA1
b091ac5e9a4c638dc4d499c52fda4469d99f91c2

SHA256
2f7d3bc8ffbe9b3152ec9c332363247a4e89591fc1349bc0eb2e3a3d93055043

SHA512
f4b4b868796f5239adc7fc9d75f3c66c99a0a02fcec2b8094dc24cfe80328ca8920ced932688932d1c4328b4ab37bf74193800f27fa2017e983bb031eb9c4250

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\SimpleHelp TechnicianMacLauncher32.app\Contents\Resources\Java\osxwrapper.jar

Filesize
787KB

MD5
1e4b97404a8ef473d0430f418322cd8b

SHA1
f0fd1fec1a864b635bcf66993c80ee1051ecc3f8

SHA256
77e60fcb9d2be6212c7c0bcf13ce69bcfcd86b87c17a67a9cdb882192bd3a323

SHA512
2f433138215b49c17caddd7ce41633b22e9c6308ea9c2f0f36749533b55e2cc9e5fe4ed432c20d36bb8450ceba5b86f9760d57db48f29d7aff60a1ced502b531

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\SimpleHelp TechnicianMacLauncher32.app\Contents\Resources\Java\osxwrapper.jar.p2

Filesize
532KB

MD5
f91ade8f3fdb2dd79071cf0c201b3504

SHA1
906aa791d059da00449d05d8c73a245c676587ea

SHA256
da0c694099c08c16171796f76f20a8cc48d83f20abf118830809c3d5a97f963d

SHA512
00b91ec52844a967da00f55de989a899cd9fe2a19fcbe7a3692845534c43aea4b3fd5ee1ec558c8aaba86875d4834f98addff39aa898e5f44e7431eb096d74e4

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\SimpleHelp TechnicianMacLauncher32.app\Contents\Resources\Java\sevenzip.jar

Filesize
86KB

MD5
39e169e821046701315b0a8189d15047

SHA1
94430ae2977a289f549f7161d9a917002041b5df

SHA256
0374db7f1225cdde1be184204c7f331aa7b40c76b13e56ed78ab0d65ef9bd695

SHA512
877a37a9287ca2461a6f36ca1205c158b112931ff5de851253765f70ae537c117cacc62a1539bc0498213010f39acf0e03d757abb9d4f1440789d5a673653634

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\SimpleHelp TechnicianMacLauncher32.app\Contents\Resources\Java\sevenzip.jar.p2

Filesize
33KB

MD5
dab276b78843802faac3935d61232589

SHA1
c4865c91adec44cd8431c80a838d33e26be15194

SHA256
6205ec7b69a6d8e608afe50eff5c87726be8cea153ab9ff22db865d2cc181cf5

SHA512
d4c93f7e6abd363bff88a1e0784a28282e7fc813bc7b41414d3a56c0d9f5142b9aaa62bbcdc4269451704bd326f233d5ff39d8a7876cd5ccdf0e3198e787e784

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\jwrapper_utils.jar

Filesize
1.8MB

MD5
311ea2e90ef711f3c5b652a513e295ea

SHA1
8a68bf5753896ec1a51bf95de1d672bd91dd144d

SHA256
05a6883f3c83a82ebd9a262fc628e56e97d632f3a0acab9b5750bf1a28df3cb8

SHA512
a6412165682d2e945c3fd8fd6f767cce1b071e38f5f9459145713f7bea3b9b7e608322abfcbf8dcf00cd0c87d31aa6ca6b65d11b31e1cfcc17df7f76343f7877

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\jwrapper_utils.jar.p2

Filesize
658KB

MD5
691afd8711ee19c456fc87964c2b4b08

SHA1
2c6a7314a9e707e986f183a0793c5d85da3cdb15

SHA256
d3a40f55ee774575b76dfa07705a27c78c97beca699db94df7167bdfb00b3245

SHA512
241747e8eea3312bc42df741a7b5bbe0cc039e79b10897b3b892ac91709ad6728ee04efa44e5616f3996fa9f777668f55ca6a342a4fb89b1f16e834bdac8ced2

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\liquidlnf.jar

Filesize
308KB

MD5
4493e756bc5c08363172cf745707e52b

SHA1
178445f2dc6a709a73457c003735d63897f8f3f6

SHA256
f8e345a075f71d333650f4da54cd30140d0da69ab424c9c79cebd40080251692

SHA512
2bc58a91c690d181c64014aa5428e52c4eaa30d2b888975fbe7cf19f3228203cde0570419151bfcbf95ef3058ce7b37b3ebb46e80c3b052c1a8dc6fadd085ade

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\liquidlnf.jar.p2

Filesize
244KB

MD5
c602c315cf0a159b92a5f08fed2b8810

SHA1
463c17b2d0b5f59c13792f0c008777580036c9ee

SHA256
2a303d52186eb88bdce7580fe0e7fc8ca081ed7efeef590f9ccb2416cb72b33a

SHA512
b29c09fa59d615f68e2e4cd0c4fd07b210a00c020469e5e735a69d648336f995090d4d6648203289b244e7ea2df02b44060ba8fd88e53f6052d237d550ee6b3c

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\technician.jar

Filesize
5.1MB

MD5
3fc696f83310996e7e77d9dffe3bccb1

SHA1
e8f627080b1f2c2c5d20bd5ab6b54688d2249966

SHA256
9fa041c9ae4ce0a6fa993638a7bccd3f7a3bc43e4567d6ca8727d2a05ea05870

SHA512
ba37f7cc0895d5396e21c02769599682f56dde804ff41cbbeb072089b7a336cea5d2cc6a644641e8ad682cb1c6c81a4fab80b4377b18fcde1ada6bdf1aab422f

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\technician.jar.p2

Filesize
4.0MB

MD5
3989d5f43fb21aa93446401529222ed8

SHA1
ce29deedbe2ad76b1d394412e43d2997d49bbf1c

SHA256
e34b36a446100836e0a88150d9a92b8227e5084613a910dc291e4b546c5cc7ec

SHA512
6172bb5ed121b2025c9acb9a104929d54af6dff506cd526b3a2b9822a4be1eed2ffbf2a69f9a7a389b90df1786fc0ff390f996b9b0cceb8fd1ea90437a3c289e

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\JWrapper-Windows32JRE-00028603591-archive.p2

Filesize
17.0MB

MD5
5fef40dac50c383c0450c3bad9e88526

SHA1
6d74345c8b22d310e9e7f632354fe8ca59ce5ac7

SHA256
f621e8a75ba7f1a745bcb9e76a7741eca9502cb39435e763354392e5e2178e67

SHA512
cfc7d0f90c40503910ac15fe51f60c335b59cb89ec66705aa467d8fef018e94ffd2186ab43ea0c0db9f2743e4b58eeedb4e73598dcc408a323071c10c3b4058d

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\JWrapper-Windows32JRE-00028603591-archive.p2.l2

Filesize
5.9MB

MD5
46a5a20549c8750877ff4e0d36fcc2ea

SHA1
be876202268b64ccf4e12897ba96c81ddf6edcd7

SHA256
8362da08b29701d146a62fd0c2005512bad96fd7b95a2eb39338b4dbaec367e9

SHA512
3ce39c852886b9375a8b7c7a047f6a37a5b3eaf28149371ec4697400f95230f3e0f34dbe3ba0051935b9a9434f25eef802dc89fd9a0c0bd8f6d07ed9b1c166e7

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\bin\client\jvm.dll

Filesize
1.6MB

MD5
c9c4c710990b34b3c851e76a56360fc9

SHA1
a1d7bbf2e6f198b2af725eb469b6d41d6ac979c1

SHA256
b6ed5d2218569e924930dd2a84536001ef34f89698b6c65140f05b1873266434

SHA512
d03f1827b5f3ad687a7f0664c537a8dfe090d97cce67f3d7970780777497b4fd1cbbfe893fbed1d3d4e39ed71a27b547c388685ea8d1c6fdbd673ecd87dad8b6

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\bin\hpi.dll

Filesize
32KB

MD5
7f4f5d189ec48566d9d8c2ebaed68c74

SHA1
8ba4ab69b6a453640708ba8337e53d01ce041834

SHA256
ad9a3a3949742995b9b2b302e99b9a15a5c0211acccbdf4d6a9f86a69a3f305a

SHA512
52b461a23c4377974494a1b57f49e8c32e072e933be59f36900290f518504f7d42189e22aab7a51dcda128d0606bcd9c0a85404340313ac322e39db36828da13

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\bin\verify.dll

Filesize
48KB

MD5
95c10f3184ed7aa45709f7cd70b49589

SHA1
1096dc0c79d201b7bd77e0399c6b8d86bc1f8a6f

SHA256
e6f4b6e25a2bc7fc03a73032c60138410b30ac528c7d10da87ea612e52a7b736

SHA512
211c522ccdeee5145cf1cddc9806c79915d16ac1d2614c3bcf75d776d61c314c66ebef53f90aae5218ad472c15fba12f0ad0d19f0dfbb022fd36462e480de637

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\bin\zip.dll

Filesize
60KB

MD5
19984073548bc33fc67c04aa277cdd44

SHA1
64189f2f71e40ae2794dcfb2df53056a82aa33c2

SHA256
f450c1a55a143d35b8b330c7538c22b8781d729aa947e27cbc2afc4e19434686

SHA512
b08ac43a0c6f12301339c30717908989ffe8bc3cf3889bcd347e83dbdc6fb21150d715da8525edd800015122c417da0870d08affbf35b5496410e36b913c5022

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\lib\classlist

Filesize
76KB

MD5
ef2f77d23cd37746737f2f34f953b27c

SHA1
d3fc136fcf5421f31bf379a57f55fdb76450461d

SHA256
c5f11846410444f7eba84742a71d0693f4e25439af58e1ce7db41e21b7806e77

SHA512
66a1729bddc5a8dc8bc47c00c9a59f1d99f282c42dc177d58f11d283437209764e795168aaac03b2c00aff013d1329163faa6406cca8b08cfb6a8679a57e4bb5

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\lib\ext\sunpkcs11.jar

Filesize
166KB

MD5
25edf09d6b9a5fd1fecce20e16cd955c

SHA1
425cb995e9fbe57ee915ffd53a2457cde46f496d

SHA256
0cd8fdfbab6d535c5caec7f70d5dd425d6a7ef6bf953b44e81db7220b8cfcffd

SHA512
02b1f9a4e76257d913ce4280e28c3ef6677e118e329b08cd60c34f28dd57ee99f7a85ec0879ee0cdab36926447dd81771b7c142882fb650d5ed5a5cc407f2f3d

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\lib\ext\sunpkcs11.jar.p2

Filesize
120KB

MD5
1e3aae27c091733c0df95b1762ed5a92

SHA1
d8d865d9c26ff76651cd81d2e253d50a67ff6718

SHA256
dec4fac179d022add2f72f08286ea74687180e3b26f1c79e2c54aa3e815f4636

SHA512
123d55ceb49d93312af5b28e04b9ba6ce24e635e230ca0e6798ab3048f883c58f03c4236d675a56e3163b06825063bd5a0affca35b620e69ba23db5a2c27ac6d

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\lib\i386\jvm.cfg

Filesize
695B

MD5
8d52e756ca8cbe07741e1640b38a0f87

SHA1
bde0eca45c0d1b0be7250245eaa55487384c8bd3

SHA256
db32e24f9ab72c2a30e2cd2f80300b3640b8f04d2cf7dcd86fb15261ba46983c

SHA512
f1faa89f350da7d656d80aa8642e773af4cc5481719b627f3b2d313b03845a78b4700c77e25583e4157fda599745e2f4a06dd71adfb64d7294bfb9ef6e2865c6

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\lib\jce.jar

Filesize
80KB

MD5
8bfb4f2b5a7db5c2f66029cebcda61af

SHA1
544317c36b07e20b091ed1c276a1fba20719a696

SHA256
8c18142a4f95801050b8bddb632fa46b6c77f8937733b1b352ae71fde0d5f0ea

SHA512
06fc3734cfd6778b1f389fb111079ffd959798cfffcf799c563f228c70280373f7e412d2258f0abeeffe0979b3a4295ed123c0992e9fe724c5e6505e14db096b

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\lib\jsse.jar

Filesize
474KB

MD5
3902fa042a832f116c4bbdb8ac260396

SHA1
bbf56369190cd403dffc6114121bc93ef1f8bd94

SHA256
87d8858ed9ba36a65a71410816d041f878d61732be37c00a5521596d5d729b4d

SHA512
f79c93b40d109525d65b008d495751aa85ca9b43e32697028979da597c9ea5d265fd7b23b4979d1e874555768e375e56ada9cdafce776a2acfcb934e94be9706

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\lib\jsse.jar.p2

Filesize
115KB

MD5
41789f3bfea0465b6b5dfdbe133fe342

SHA1
0061d61370170afdc3984d2e0016c5b8d10b3946

SHA256
3f1931393c34b8828c37668bb34891cabce89a4caad9d2a1e8ad07b0c2f205c6

SHA512
2f6f8d579d9806d8b8a6c2e582e065a889c02347f8141e79c02ba238d100a11e2a491f1f915fc95bb297b0be498a2e3c2267bc78d10b9578c40c11f53f166735

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\lib\rt.jar

Filesize
13.5MB

MD5
991a2c2035c6adf6b047c9c75676bb66

SHA1
1e87a09d84d380c9b7d4078fe6cda7a4db831284

SHA256
567e585b25bdc8c54b364c2d5775c5c269ba50c725c99345fa35ce10dd0870a0

SHA512
87ea06e8d6c1e7af2deee56a645ed934e8a3247bd3ea9c47733a7c2fd46e230d37a1b4bd4eff22b0e5d75b6c523999f42a58ea0f5faca7f14c51159ce3ff06b5

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\lib\rt.jar.p2

Filesize
8.8MB

MD5
28b0cedfa214a6db37e63dedd60fe70b

SHA1
f6ef31e6bab599eb0d83d4e7cb9cd906dda56137

SHA256
69e611fffa7d26b950a2b53899f938730fa29ad0f30800260f62fa31c048097d

SHA512
f5b0c967af2e324847da01c6c373ed13558988edea4d36f7167b744e3648e208c9b959cc24626c9d9b05cd8a37e8035d3ce01f27bba13903ddf56a94701f8b29

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\lib\zi\GMT

Filesize
27B

MD5
7da9aa0de33b521b3399a4ffd4078bdb

SHA1
f188a712f77103d544d4acf91d13dbc664c67034

SHA256
0a526439ed04845ce94f7e9ae55c689ad01e1493f3b30c5c2b434a31fa33a43d

SHA512
9d2170571a58aed23f29fc465c2b14db3511e88907e017c010d452ecdf7a77299020d71f8b621a86e94dd2774a5418612d381e39335f92e287a4f451ee90cfb6

Download Submit
C:\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\SimpleHelp TechnicianWinLauncher.exe

Filesize
480KB

MD5
117f089a2c2d5fbaba2c6e80b628c68b

SHA1
3195b0ae36854a094801a10d8dc1df2c1b9d4ec6

SHA256
8a2917735d80af301153ce65f951ffe96bcb7345dfb5fa58b927c819bde2968d

SHA512
2cc8bb38e67dffb7980ee9764826a5c02387cd7142b7d3fe1ec1974b995ac97e3dbbedb8186c5ac7587af5b7fd46dc716d31057888d8a4747b783584d3d38162

Download Submit
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-JWrapper-00032144438-complete\jwutils_win32.dll

Filesize
88KB

MD5
c7680de321eceddacc1e2e6d9910dd35

SHA1
fe95e8b5e8e0a498339a85c813035bad514d503d

SHA256
f03270776b3257f61f75931093565d59760c0316e1865a8c52088ef50c92bde5

SHA512
96a33586273865fe91f5c46b1694c10b8a009fc0eb603bc3f88ff204dea9d6c0a604e5e29034e4229e625a7ebe12aa1427e666a3e567e2a96fe1662b1ab357ea

Download Submit
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\awt.dll

Filesize
1.3MB

MD5
d68a6b4ec67373433e72c26517c32b2f

SHA1
0cbe4c775194b5bc3b59392408d29b097a1ba664

SHA256
f2a7465215f298ec9c604c59ee9cf720560e106b478c425056d13c40e65b1bb8

SHA512
d9debe367be76c5de51a4faf4e68efb9c8c8c34d4c4a62ceb005d7b05a852f6d349354fd023baefcbc697d0ac3a893b44e500f26ebfbe0e1fb7f704a67a4beb0

Download Submit
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\cmm.dll

Filesize
188KB

MD5
42b2f3248d3a71f9491e518c5d30861e

SHA1
51fd120c1f30e7ade09d1c730224da5f9093f57d

SHA256
d809c0dafe1021f890c988c3974f157513b974d6af09f64028a1ebd6e1a4c745

SHA512
8ec139b0e5b647ac3ff8969146405292fccebe31c21e8cb5e5be553d2042de5c7c60897eef1d7af6d8265031adbfb62e95752f1acc81f837c5f079651b811fda

Download Submit
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\fontmanager.dll

Filesize
320KB

MD5
299dcba6f0a9ef5aca70f8b6e032017c

SHA1
cd7f8d02db7403cf364a6267d0f5d588e202692b

SHA256
de5df116cfac6d2dd28c61e25924a18d9f2c201940c2831deb70c6a5bcd17461

SHA512
4c3ff3bde8b8f621ea26a9ad2ed259314d83b515877f3b04e1fc66578bfd99e69966451b29c67bad7a301ae57ccd36d209d949b708d7820dba051e4dcfb627c8

Download Submit
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\jpeg.dll

Filesize
128KB

MD5
4ee73ef7e9f4593e7d1685aac04c312f

SHA1
20b293ac19c5a23d8d7618d72bb14bb993dea2fd

SHA256
a5af9e5407dd2993ff7f1ef589ac8edfb7482a495a434953307cffedfbd8cfbc

SHA512
d7d40950f1522216adf3d169e13600a9fbe579940a41220dbe423a4f2ed5bb868faa895b84c9d20dfc428fc5ed9d372eceab09d8f67c99562d2cef71d2dbfa70

Download Submit
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapper-Windows32JRE-00028603591-complete\bin\net.dll

Filesize
76KB

MD5
c0abcbae12150c44bc99791b28f8bf41

SHA1
ce4a1f1c5177021d49f07f784adc64cf2468b187

SHA256
21c8c8d6e73e4383ef4cc2ea3dee140f6d8b460da78a04d3604c27bd55218edf

SHA512
357435ad7b6aa1d51773ac654e8c8dd9f0a7485f68a16c202172558cf9a1d27520674375319e5e79e2af6288fc5de8c62e26ebb763401e3ca75539b1b802adb7

Download Submit
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176870-0-app\lzma.exe

Filesize
71KB

MD5
e59aa0e52e93c781dcdab8ad7cc4054c

SHA1
1be9c2d8b48d6e0c8a7cab6013cc36ea42ec421e

SHA256
410bfdaddee3767151296fe4f16052c39546151916f05bbe4ae1c6b698b18f0f

SHA512
d0be3580640bb2cca0c097ec2154132eeefd2b2b4b0e45027cc303c47a42f5c545d5f50182c70a69b5d1673112d24f8ae320d097d7034e810dbc0a5128b09050

Download Submit
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\bin\java.dll

Filesize
116KB

MD5
3b3613ae9a31e5099ff803b8c858a86d

SHA1
5cc6c08550cd2f4ef6d37d521c7891051413f16d

SHA256
5a5e216f287cbcaf7a4ba8ccb8fcb3dae0b05378d89ba6a70f1d50b394306796

SHA512
ed360d73fcc2362129ff4e2c52f8fdf84970598f49be081740e7ed23d23fa8cdf7a01d13cbe2b8cff3fa0d2ecc7455487f98e827eabc2c0d76037e1d4afef365

Download Submit
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\bin\javaw.exe

Filesize
52KB

MD5
141c0ddc4b7aa9287d1dea52c9525445

SHA1
b01e93615748020869be5f7dc73be6803ac18619

SHA256
9dee589ab11824cf051afbf5ba0d30e38a464571d23edb14f0ea9b6bdf9fc57c

SHA512
c5d7c14e11ea613b1c4b2a796254142136112b5682fccb1ebafbbc014601e5b103f8ab7a5d3a9d4b319a379741fb0bbffa6a214a142931e4f17aecdd54112a54

Download Submit
\Users\Admin\AppData\Roaming\JWrapper-SimpleHelp Technician\JWrapperTemp-1709176872-0-app\bin\unpack200.exe

Filesize
124KB

MD5
0ac355d4114bcd53ad9aa4a01055c44f

SHA1
3a7c3c936a73de1c414b08391b37fe9c106990da

SHA256
80b00b9c76c491322779d0c2ef3fb0bb6d9609b7a73eb85e1bb08ebb76c049aa

SHA512
f18886f522c226e379166a7dd9cae600f000b696aa31ac9c7e54e76b7a74de226127637eb7cd8de3bb454883a0b82cb1b6236f8180296e6dc42d8a228e6933b4

Download Submit
memory/1980-637-0x0000000001DA0000-0x0000000003DA0000-memory.dmp

Filesize
32.0MB

Download
memory/1980-872-0x0000000001DA0000-0x0000000003DA0000-memory.dmp

Filesize
32.0MB

Download
memory/2296-761-0x0000000004280000-0x0000000006280000-memory.dmp

Filesize
32.0MB

Download
memory/2296-870-0x0000000004280000-0x0000000006280000-memory.dmp

Filesize
32.0MB

Download
memory/2296-811-0x0000000004280000-0x0000000006280000-memory.dmp

Filesize
32.0MB

Download
memory/2296-776-0x0000000004280000-0x0000000006280000-memory.dmp

Filesize
32.0MB

Download
memory/2296-771-0x0000000004280000-0x0000000006280000-memory.dmp

Filesize
32.0MB

Download
memory/2296-779-0x0000000004280000-0x0000000006280000-memory.dmp

Filesize
32.0MB

Download
memory/2296-783-0x0000000004280000-0x0000000006280000-memory.dmp

Filesize
32.0MB

Download
memory/2296-778-0x0000000004280000-0x0000000006280000-memory.dmp

Filesize
32.0MB

Download
memory/2296-768-0x0000000004280000-0x0000000006280000-memory.dmp

Filesize
32.0MB

Download
memory/2296-749-0x000000002D5A0000-0x000000002D5B0000-memory.dmp

Filesize
64KB

Download
memory/2296-873-0x0000000004280000-0x0000000006280000-memory.dmp

Filesize
32.0MB

Download
memory/2296-874-0x0000000004280000-0x0000000006280000-memory.dmp

Filesize
32.0MB

Download
memory/2296-875-0x0000000004280000-0x0000000006280000-memory.dmp

Filesize
32.0MB

Download
memory/2296-876-0x0000000004280000-0x0000000006280000-memory.dmp

Filesize
32.0MB

Download
memory/2296-877-0x0000000004280000-0x0000000006280000-memory.dmp

Filesize
32.0MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads