Overview

overview

8

Static

static

3

2026-06-28...wk.exe

windows10-2004-x64

8

2026-06-28...wk.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    51s
  • max time network
    154s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260617-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    28/06/2026, 22:41

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-06-28_4f814477034993300ffbb19637bf710e_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
  • Size 16.3MB
  • Sample260628-2mdl1sgv4p
  • SHA256 74969aa6ba8c0c3e33a87813160a09ec2637cd8f637d8b9206fd581b6142f13f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 1 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 2 IoCs
    defense_evasion
  • Modifies registry class 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 8 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-06-28_4f814477034993300ffbb19637bf710e_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-06-28_4f814477034993300ffbb19637bf710e_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3692
  • C:\Users\Admin\AppData\Local\Temp\2026-06-28_4f814477034993300ffbb19637bf710e_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
    C:\Users\Admin\AppData\Local\Temp/2026-06-28_4f814477034993300ffbb19637bf710e_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:6028
  • C:\Windows\system32\sihost.exe
    sihost.exe
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:1620
    • C:\Windows\explorer.exe
      explorer.exe /LOADSAVEDWINDOWS
      2⤵
      • Boot or Logon Autostart Execution: Active Setup
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      PID:1784
  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
    1⤵
      PID:5804
    • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
      "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
      1⤵
        PID:1804

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            AppVShNotify.exe
            • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
            • Size 16.6MB
            • SHA256 785acdeb441f4d5f7abe032171a22537e978c8e5348822dc8927c4deb1c1e8e8
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            InspectorOfficeGadget.exe
            • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
            • Size 32.7MB
            • SHA256 5a3b4b5da25d2aa83472f203c0d14de6c9b5b5f92d26a1c3242c896c695e572f
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            IntegratedOffice.exe
            • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
            • Size 36.8MB
            • SHA256 496140258d2890d4b76d9b1b0af40aaf64a962c8be8bb0cec58658796c33f43d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            MavInject32.exe
            • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
            • Size 33.0MB
            • SHA256 b597f90847e25d4e79bd0495c57840db8b2881b628f0b275e6ae18b0b3c1120e
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            appvcleaner.exe
            • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
            • Size 34.8MB
            • SHA256 d6c46e2419b32ae630eac2eeeabbde06a9b379bbd2e533a9534fa1629344dd84
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            VSTOInstaller.exe
            • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
            • Size 32.8MB
            • SHA256 aebe34161a8ef7636a925343c6146ea3090605593a2bc7b4169758c3b75aa64c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            chrmstp.exe
            • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
            • Size 38.7MB
            • SHA256 d813eccfc30f530860d8200e7965e4fa4ac40b890e10af28eb9b9339dfcada77
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            chrome_pwa_launcher.exe
            • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
            • Size 18.1MB
            • SHA256 46ae81fc4b2faa2b4a529969f85068dcf8055c1371e2062eaf0ede0be1f16c76
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            elevated_tracing_service.exe
            • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
            • Size 36.2MB
            • SHA256 b796f1341701445deba0dcfdfbe61a34bc1172569510e503742f39cb22697d39
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            notification_helper.exe
            • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
            • Size 34.3MB
            • SHA256 97578ca48f4b4d58a4e7ba338ac03f6aff9fb2d579cb3bf082166d067207df57
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            os_update_handler.exe
            • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
            • Size 34.5MB
            • SHA256 091ed7a0ef6e73f3274ec607bdd91dc6b4b1b79b6d4125f4c914239060be983c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            chrome.exe
            • Path C:\Program Files\Google\Chrome\Application\chrome.exe
            • Size 19.4MB
            • SHA256 b3131f755ebf2eb83765fbff23b92d160338a2dd9c68fa68fa7b402ba7d3b000
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            chrome_proxy.exe
            • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
            • Size 34.1MB
            • SHA256 91375dacae05b619daf3d073302057d4d58329f0b208e561b60c3343e7ef0b34
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            appletviewer.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
            • Size 32.7MB
            • SHA256 a0c02fc200fb338e8256ac5b9779fda0212d5af6653a3fb68bbe407b05e758f5
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            extcheck.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
            • Size 32.7MB
            • SHA256 c4a8de9b1b35b207cc3ee3bd165f7311162eead66015afee4bb626756bdb125a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            idlj.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
            • Size 32.7MB
            • SHA256 ed4c868a36063d5c8e1dc559733cc800c2ed5d646a9f9e2396b223f71e505b47
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jabswitch.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
            • Size 32.7MB
            • SHA256 c3cebfbd9976735bd5286b34158451b61b29e0595b399ebc6a0da507f249d464
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jar.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
            • Size 32.7MB
            • SHA256 53be9f0b77c455a4233003992e6c71d0789dde9e8fc381fe57da2bcedf189ffd
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jarsigner.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
            • Size 32.7MB
            • SHA256 4b02a9909ed776b236f0d361ae87df1539dba0512f9dc80b97009b4bb4e967b6
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            java-rmi.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
            • Size 32.7MB
            • SHA256 c35e891e711141396de2983bd0c7f3d7b903d1a4c97f21d5f7b9213d65f4033d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            java.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
            • Size 33.0MB
            • SHA256 4c24a9e10fc62b0771a3859e380edcd4e0a35077cb56eb9504d53593ea318701
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            javac.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
            • Size 32.7MB
            • SHA256 922b46732c22554f83711d7f4f64dd23635c895ddd4de792e780a37f3a63b884
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            javadoc.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
            • Size 32.7MB
            • SHA256 a5c84cc37735971420e116a2d422fc1ed1ef922ee5b3b60a926dd8e557268253
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            javafxpackager.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
            • Size 32.8MB
            • SHA256 0129205951864b16f826f1ab50e5636d77e6fa0b681432f993d133c9f6afc2ff
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            javah.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
            • Size 32.7MB
            • SHA256 53b6b810f112451801b87a6c3bd239fbf42ecbc022b80ca598169053628d7e79
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            javap.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
            • Size 32.7MB
            • SHA256 a0f8ce75e78283b6016fdb593184e69e5ef813bc77f688c342ab747df36de5f8
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            javapackager.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
            • Size 32.8MB
            • SHA256 a8ddc88256326957d1631ee3aa6f6febd6f8a67146c3173294080187ecca6b46
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            javaw.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
            • Size 33.0MB
            • SHA256 05a886940f963d77b4937082cd857e2f0733c4af53da7a46464666fa7feec7c3
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            javaws.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
            • Size 33.1MB
            • SHA256 9f1295b79da80307fbe70d32dacbdcdf673bac4bdf0c059a1907e0635c749abd
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jcmd.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
            • Size 32.7MB
            • SHA256 ee1fc222d9870f2f336310cbac4fa6087efef7bbf410896b8ec877e9513af1b8
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jconsole.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
            • Size 32.7MB
            • SHA256 71cb90725fc3549ac94c87d6ee2a51d704142c64153b98f1c2f4914ab26fc16b
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jdb.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
            • Size 32.7MB
            • SHA256 eeb4bc104329fbf01c448260ec1a1924cbe24f6032eb420046518a33d5d59478
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jdeps.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
            • Size 32.7MB
            • SHA256 b7316bbd497e005eec2cb4e91310c30eafc00b89bf5e59a0d26f593375b4cd8f
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jhat.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
            • Size 32.7MB
            • SHA256 d137632e871ca7741f30c0418f5ffc65a803605fb0b102381b52ac0e9535e6ad
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jinfo.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
            • Size 32.7MB
            • SHA256 71276c25681760919dd37dc121ab62e6bec6b06df80df71578f6d45fa99616f0
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jjs.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
            • Size 32.7MB
            • SHA256 6a2e2e2a7028a82c96946f5d7bb6a26278ee1336c653a424067eec320ce983eb
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jmap.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
            • Size 32.7MB
            • SHA256 7d8a0e6b6c3bf4284c40d32207e5880d4c27bf4d1b9d2ee115adee6da96fd0ca
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jps.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
            • Size 32.7MB
            • SHA256 654c7657afc59c30e81e52309773b99e9cf9ea99e4c720f7096849667dfb37c8
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jrunscript.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
            • Size 32.7MB
            • SHA256 a7c33f0c7a824313218a6c840c3126800610897f4885dc0ab1cabb7ff7b0a056
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jsadebugd.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
            • Size 32.7MB
            • SHA256 063158d34545dee450fce93e647499bdcfa954fe8982a2a33a882013526d774d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jstack.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
            • Size 32.7MB
            • SHA256 d78762898045305a15fed2d2f7b9ce37af80caccfdd0e503381385f04c087d2a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jstat.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
            • Size 32.7MB
            • SHA256 4559dc23f706d170f18c541fb4e23eb6ea92bb255700899653cc0d3b91cd28b8
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jstatd.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
            • Size 32.7MB
            • SHA256 afbc7a0453c79515506591dcfe592f6efd380d39bbb1724c01b7c8589149e90b
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            keytool.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
            • Size 32.7MB
            • SHA256 6758761c2a06f58b0a53db06192ae2b714828a44f366ed6c9078b9bf8f4f6f98
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            kinit.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
            • Size 32.7MB
            • SHA256 8be0c17e46e11e4fd8b27c78e39933831bea1cb0f6b21fe1d5c36703d423b464
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            klist.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
            • Size 32.7MB
            • SHA256 431f3897ed2dc4155dc60c6ba720aaaaa52dfb7b30bd3749ecb0d335c1c635dd
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ktab.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
            • Size 32.7MB
            • SHA256 1dba05ceb14c2c0cfb5862dab48ca5110c99218eb2776833141c01d4e04ed114
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            native2ascii.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
            • Size 32.7MB
            • SHA256 91f0b9e33b23a962c7e399534e42bb348e28067e79265cfc799b5499d43f9ce2
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            orbd.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
            • Size 32.7MB
            • SHA256 cc22bb79783d74971570905cf4c65264c1c48bbf97b5320990c28e4770039ce1
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            pack200.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
            • Size 32.7MB
            • SHA256 7b88ba754db522be2681516df054d99d36ba68b05a23910df6de2c02f4c51b65
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            rmic.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
            • Size 32.7MB
            • SHA256 5938d8eb4ff52ddf85aaf8feff906c1b7a0be55d5c85f0fbbd059aa87874b269
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            rmid.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
            • Size 32.7MB
            • SHA256 81569464c8637ebc1edf6ea625790f4b8633ccbe8f600815d3d78cb62e366465
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            rmiregistry.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
            • Size 32.7MB
            • SHA256 99b3cf41336562868c7a5af48d7dffdf561a9613b27adefe9be418440cda94a5
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            schemagen.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
            • Size 32.7MB
            • SHA256 1e130d6f7d8d1b545052e8f22924293349e8d8280ff4ed5a74494a46976138b2
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            serialver.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
            • Size 32.7MB
            • SHA256 12f73a9d786f89d994d14c1c025217b329a6f5fd5eef0774336e038d537a33c0
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            servertool.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
            • Size 32.7MB
            • SHA256 e626dd41f34e3cfb7be93e90fd5cb2a2bd66c1da135789f286ceb045c824bb1d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            tnameserv.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
            • Size 32.7MB
            • SHA256 b81a6bf7d88d0baf9328f7b6db2a716147134464c6d4fb0351a537e4ca32dbfb
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            createdump.exe
            • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
            • Size 32.7MB
            • SHA256 b03f4c0fb0cb32aa596bea499b4a851c675de2e2b03886c789e59008388eab2a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            createdump.exe
            • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
            • Size 32.8MB
            • SHA256 be7b589959f9d4faeb64e75f2abf2255401ddb67d4c35ae4033f96d3880f979b
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            prep_Activatable Class_Hermes_perf.cache
            • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
            • Size 603B
            • SHA256 b346273b0f3e13afaa9f07d97248343c45a667a5e097d1198a449a4de187aebb
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            prep_Activatable Class_Hermes_perf.cache
            • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
            • Size 607B
            • SHA256 be6b74e52e5eef1f1c27c0976bf3bf1bfa99958c00bbef2898a602f691be6dae
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            prep_Activatable Class_Hermes_perf.cache
            • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
            • Size 599B
            • SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            memory/1804-460-0x0000029981C80000-0x0000029981CA0000-memory.dmp
            Download

            memory/1804-461-0x00000299940F0000-0x00000299941F0000-memory.dmp
            Download

            memory/1804-476-0x0000029994400000-0x0000029994420000-memory.dmp
            Download

            memory/1804-462-0x0000029981E40000-0x0000029981E60000-memory.dmp
            Download

            memory/1804-430-0x00000299801E0000-0x00000299802E0000-memory.dmp
            Download

            memory/3692-0-0x0000000000400000-0x00000000004E4000-memory.dmp
            Download

            memory/3692-1-0x0000000000400000-0x00000000004E4000-memory.dmp
            Download

            memory/6028-6-0x0000000000400000-0x00000000004E4000-memory.dmp
            Download