Overview

overview

8

Static

static

3

2026-06-30...wk.exe

windows10-2004-x64

8

2026-06-30...wk.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    32s
  • max time network
    118s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260629-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    01/07/2026, 03:35

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-06-30_9f052df427afbac85680b3ccc3aac837_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
  • Size 14.4MB
  • Sample260701-d5f8vsfv6x
  • SHA256 c59892500eaeb6c09b06bb0d6a64fee4d05118358c5bab7330d61cb645b629c6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarediscoverypersistencespyware

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 42 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 15 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 20 IoCs
  • Suspicious use of FindShellTrayWindow 11 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-06-30_9f052df427afbac85680b3ccc3aac837_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-06-30_9f052df427afbac85680b3ccc3aac837_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2564
  • C:\Users\Admin\AppData\Local\Temp\2026-06-30_9f052df427afbac85680b3ccc3aac837_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
    C:\Users\Admin\AppData\Local\Temp/2026-06-30_9f052df427afbac85680b3ccc3aac837_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2084
  • C:\Windows\system32\sihost.exe
    sihost.exe
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:4240
    • C:\Windows\explorer.exe
      explorer.exe /LOADSAVEDWINDOWS
      2⤵
      • Boot or Logon Autostart Execution: Active Setup
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:1100
  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:200
  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:900

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 14.7MB
        • SHA256 7348c447cf37d4202aae0ddab9fbfa44b9dcd107dca0cad42b301c4875f9fb16
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InspectorOfficeGadget.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
        • Size 28.8MB
        • SHA256 b84236b43608c132d5e4b263a5cb2569e3ce5439cdbf8341fb8cbfe30afba1f3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 52.3MB
        • SHA256 dc6b63253354e0e435a6d0cbd212aa8aba8784f4b510b97f4e908cc1671c1ba8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 16.5MB
        • SHA256 218ecce316b849dc9ae7d8e4b6c736c27b1ebd225b619c9658003f3d0a726926
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 28.9MB
        • SHA256 a154067f91d21a76a3a5f82ec59e3f75e053a9841ab2052ce9408d9cd2125344
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 34.9MB
        • SHA256 7b4a41e238d02c8bd73f5662664ac54658cb36a66bc860d77f0e6991288fbcc7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 30.5MB
        • SHA256 6bb67484217ac778bbb968173b7cf4aebec19af2d911abe9401ae06476195fd1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 32.3MB
        • SHA256 e9203dc8433b5a9a9e2071c76a2097463994e549416ec6755691c7bbd5f5a95a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 31.1MB
        • SHA256 53ebf51327ec8f0668988c810ae78dbe3ce6c579f685f1e89a178d5ff90777eb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 30.4MB
        • SHA256 b4fce5781787563f0ef0899b711354604d5b579d5913bfa92277ec71d13a223c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 30.7MB
        • SHA256 33bc69e805fe7a3f6eb4be299c9939df3e77b0f6eb5f152bdbd4ea53e32c77a1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 31.9MB
        • SHA256 dd59e6153ab9813fd2f90be4a3f7e3bdcc637401bfe304a818bf21aefff038a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 30.2MB
        • SHA256 52f9fb1365772af1eba3dfba8a1a28e5b3603578f24373a563278481bc7dd685
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 28.8MB
        • SHA256 93a249cbce4019c2be0b1b71d5e0e61d709eade0499caca56fdd2ee1ed17f62a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 28.8MB
        • SHA256 e45466fc56d91285c59abd4980af13fe4f28fbb4f0d9364344bcd0823cfe90a0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 28.8MB
        • SHA256 846cc0dbcbdd5d1989ab57422fff2a44f05015fb568c99b674f053d09b8e67d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 28.8MB
        • SHA256 90a98873ffed3f5ffca1967f378c7c35fe9ee45302932fc61e44db24592f5428
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 28.8MB
        • SHA256 f7d67bcf409affacb710dc4a4e080b62b6ebc0811583dddb2da16e87683f7447
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 28.8MB
        • SHA256 89bedde28b849f807e5d02f5bbed4c337cf17ff26408321deb884b61e41ccc23
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 28.8MB
        • SHA256 96cdc035bdffa205213decc4714e5454c12238335357957d68cd744d87e75044
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 29.1MB
        • SHA256 8e64e98c2996008292fd135951fd70ff24b0fd243482e05fa5fc9b302cdb9e99
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 28.8MB
        • SHA256 a1819fa23e5cf99886ae8c6bb5148cec2c96b43f33268bcc56bd3c8e7e72efd0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 28.8MB
        • SHA256 cae6bba1326aac9073e5a39500b600af8f0584bc108ae6917104d120b842156f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 29.0MB
        • SHA256 356030d5ded555f0a51413800b094a22b868c73cbf4da07a2cb30c81524501c3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 28.8MB
        • SHA256 5c43505a31f4f79928a74b11b6b6e3037ca7e23b181a6cecdfe39a58557bc82c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 28.8MB
        • SHA256 40c9139062865c4fb854c791343a8e971ffedc193bc7e655e3fa7e534260855a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 29.0MB
        • SHA256 d021b9e0223579ade8a6a557b8aa28183c1f682e5428e61b0193c46a7b56551e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 29.1MB
        • SHA256 72dce67594ee985d9ac6ec37e1c7ab8e24b47b847eb81212532a6e2a62f05a4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 29.3MB
        • SHA256 6e663ca83665cdd034a1c3d360fbe7e2a50a486691127a083562248bd7733f07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 28.8MB
        • SHA256 c2953511eee32266695b2f8f267b4b8a793d37aed3a8af55641137d757dfedf0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 28.8MB
        • SHA256 d15070139671e3885db4e3a79ccaa5cd1d0a2df0de02e742f356e791b4e193c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 28.8MB
        • SHA256 19e0c583794c01ccda05b13f228840c73cea0e2efe37f6217dcd4815e0e53baf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 28.8MB
        • SHA256 1d97e52b93e426a2b9915564fb104d81c6e202f98bf2f87de7ff2754a83bdd99
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 28.8MB
        • SHA256 0c5c0cd43aee4b241ad6dc4df9330f4602a61e987acbd2290fe63c321d9d588e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 28.8MB
        • SHA256 ad8347b9983625801f664518b60d4b258fbcda824cda002f572250649b11dc74
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 28.8MB
        • SHA256 2e8e134827fd1880ca5bd8483174937df7125818bcb9793a69ea927be97bb7b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 28.8MB
        • SHA256 e9384618e60581fa117324ab52b65373dcfbce6e5e65ad09974b0a03280d6abc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 28.8MB
        • SHA256 91e2c296c6d5599bd6a8b5046619cf8ee0a20cf711d81cf096764d113e3a48d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 28.8MB
        • SHA256 c0640f1dbaf6dd1283e8c2b7ef41ee338cfc70c4f528033d016029f32610c812
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 28.8MB
        • SHA256 fe0103f573d9ed32ef88676fbe481d2faca4391d8573446cfaf5d41c2ce35498
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 28.8MB
        • SHA256 9ada8fcfe9b0bdcf1d5253b2053e573b92a9af18d8b2163b85b9ae99e347e458
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 28.8MB
        • SHA256 81277c41441090f7a88cce8d44486e08dbc215c54c785f6b9cb5c5587b447795
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 28.8MB
        • SHA256 6dda83b185f63f51a3bfc40aa0a45b86eb90d53845bbb95d24afde3b7dde42f8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 28.8MB
        • SHA256 672e25930b02731d149f3d4297317e0316bf4a8a4ee5ec3a52f1991fcc134fd8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 28.8MB
        • SHA256 e22cedeeed4e77b1adf2d8700859978cb605bd153ad45f49dcb3baeb025442b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 28.8MB
        • SHA256 697b21986281851137ed7a0e98757a7831fca1a6b0af4014363ae263c7dfc181
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 28.8MB
        • SHA256 a4bb7881a869364f9443f4fb25f7815a47b8f6e737b85978544d7d38dcd88c6e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 28.8MB
        • SHA256 49a85b72c6c9c3baff786b60bdc57e0ff04f3d619561dbfc9c5d7366e3c8710f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 28.8MB
        • SHA256 378df46d85e85cc49c212e7d22b519c62086c3c5f27a8a2d6a0ca3295485b56a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 28.8MB
        • SHA256 72f9a5c641415aab22070c4fa327b2296f610146cfee28f3d909bd2d9953a650
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 28.8MB
        • SHA256 05b4019c3a3c2838c2180218da7ad3eea96e6f903074cf961020600b0afa4454
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 28.8MB
        • SHA256 f9bb6586c40063e14a2efdfe77febdd9602e866a8b73213c9ef0ae23be551ac0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 28.8MB
        • SHA256 5929759b26c85f76314f876da51d05ea8e53fc54786303a4e0d4c66787c04c8c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 28.8MB
        • SHA256 17859e23d473ddcc7e2a8c68116b0dc2141571de27a14daa72efb1e4ac37dbc3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        serialver.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
        • Size 28.8MB
        • SHA256 f90be3a782c4dc410364fe40e064fafda615afd2952ba0fbe4ad06d96d7bb275
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 28.8MB
        • SHA256 28ccf6d5aaaf847bdc8634b086f286f09bf6373d4effda811e056b1912c44349
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 28.8MB
        • SHA256 be54ccb61989f659380ea251a1e6d0d767d204fb84587326a56e02306742430c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 29.0MB
        • SHA256 a1ef8492e2af270bf7d20123062dccc89d1706f775d45018f3cfa082a1c7e22a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wsgen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
        • Size 28.8MB
        • SHA256 7de92083d2f0f2f531f19c8b9ebf72f80b0b009c23bf16331e0fbd313691c5df
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 28.9MB
        • SHA256 8ea52cfee8c1e897c28fdc5effd57df42d0b8117122fd55014bf501ca8a3de01
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 28.9MB
        • SHA256 9e7b6ea45d28320071f9d7355305c6cdabb4d627ef5055eebe9670a7118ff395
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 28.9MB
        • SHA256 0802e0c76feab0b87b296cf8e879e3587acc0564fece3a6ace0396331a530520
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        prep_Activatable Class_Hermes_perf.cache
        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
        • Size 595B
        • SHA256 d4e60617c2afab8263febabe7f14f18595715078d71307a8cefe0707dae76dee
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        prep_Activatable Class_Hermes_perf.cache
        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
        • Size 599B
        • SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        memory/900-290-0x00000294001E0000-0x00000294002E0000-memory.dmp
        Download

        memory/900-335-0x0000029414390000-0x00000294143B0000-memory.dmp
        Download

        memory/900-321-0x0000029403D70000-0x0000029403D90000-memory.dmp
        Download

        memory/900-320-0x0000029403F50000-0x0000029404050000-memory.dmp
        Download

        memory/900-319-0x0000029403B30000-0x0000029403B50000-memory.dmp
        Download