Overview

overview

8

Static

static

3

2026-07-01...as.exe

windows10-2004-x64

8

2026-07-01...as.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    55s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260629-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    01/07/2026, 15:36

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-01_270803a3665ee57b371949b0736d59bc_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
  • Size 17.3MB
  • Sample260701-s17btabs7v
  • SHA256 3833918bb39d3c67428dacf4db549c93d0184d773911ec799c0947df31300fe6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 1 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 2 IoCs
    defense_evasion
  • Modifies registry class 7 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 10 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-01_270803a3665ee57b371949b0736d59bc_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-01_270803a3665ee57b371949b0736d59bc_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1172
  • C:\Users\Admin\AppData\Local\Temp\2026-07-01_270803a3665ee57b371949b0736d59bc_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-01_270803a3665ee57b371949b0736d59bc_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1092
  • C:\Windows\system32\sihost.exe
    sihost.exe
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:2648
    • C:\Windows\explorer.exe
      explorer.exe /LOADSAVEDWINDOWS
      2⤵
      • Boot or Logon Autostart Execution: Active Setup
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      PID:1816
  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
    1⤵
      PID:2388
    • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
      "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
      1⤵
        PID:4364
      • C:\Windows\system32\werfault.exe
        werfault.exe /hc /shared Global\49107fe3353247d68e546183d0ce9e4e /t 5348 /p 2388
        1⤵
          PID:6020

        Network

              MITRE ATT&CK Enterprise v16

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              AppVShNotify.exe
              • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
              • Size 17.6MB
              • SHA256 eb4d73bcecf86a77bb5918c39ca2ba039ddde607b5335ec7c7f6d9b491530476
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              InspectorOfficeGadget.exe
              • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
              • Size 34.6MB
              • SHA256 f8fe1cd615f58d67e4bc864f4546ee325480062216720af0ac75d3bdb715c4e6
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MavInject32.exe
              • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
              • Size 34.9MB
              • SHA256 5657c3cfa3b715abcc0d22c618f205d10fe68fff44640a7554c4eb6bcb310f88
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              OfficeC2RClient.exe
              • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
              • Size 40.8MB
              • SHA256 80eebc2708eb42cdbfb2ec0c171349e7eda078def0f7b2f41823f809e762cfbd
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              appvcleaner.exe
              • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
              • Size 19.4MB
              • SHA256 e125f3b6d8380e324cf8f2e96de306edb6226291c2600561221ea32770f1a998
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              VSTOInstaller.exe
              • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
              • Size 34.7MB
              • SHA256 16990804a1c093aaf7dd9ad5c4f0b5b8a0ecf5272d17fdc51bf00371c39ad69d
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              chrmstp.exe
              • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
              • Size 40.6MB
              • SHA256 ef5aa926115ef837b86725b81c80575bd1764bf9f83aa179236e95576cdc25ee
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              setup.exe
              • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
              • Size 23.3MB
              • SHA256 7be338ffe81cc643e431b3f78fe4e19c7ad75970c3aab47e3224aa6a612e3fa3
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              chrome_pwa_launcher.exe
              • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
              • Size 36.3MB
              • SHA256 0f6016600ff5058aee1bdebf7b7879c9c435ba5a0ce43207d5c1802eb4821061
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              elevation_service.exe
              • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
              • Size 19.6MB
              • SHA256 7ae7753c855986ee8a31afdaa2785807f61e75899f1a8e9755b9343754c6e56f
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              notification_helper.exe
              • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
              • Size 18.9MB
              • SHA256 cef2f661920cf74e093185b6d2c10dc9b4c568fc1a01d80570c9b1cf8f46d357
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              chrome.exe
              • Path C:\Program Files\Google\Chrome\Application\chrome.exe
              • Size 37.6MB
              • SHA256 9bf4025a9b396c865afd032b873105c2cea06314cd4bb144d27a0fde1457dbd7
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              chrome_proxy.exe
              • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
              • Size 36.0MB
              • SHA256 23d2336d7ca3549b6108a8d980728585e179110888ae584e45c0616fc406cc31
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              appletviewer.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
              • Size 34.6MB
              • SHA256 e5dca6e59f2b5a7dc0a9ddf23d1ecfec443ae29055b9077d1627025bfd8f3633
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              extcheck.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
              • Size 34.6MB
              • SHA256 57ef11542146bc4f23cee2c73dd173c65b8b923a49da3db0cb97cbc3faa8e2d4
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              idlj.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
              • Size 34.6MB
              • SHA256 3d219854ea09bb7a6b0cef3a84a27ef4b49ef76fb7ae1d1764e3bcd2abcc6943
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              jabswitch.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
              • Size 34.6MB
              • SHA256 ae782c5f5d09d12f2ae7fabde39d5ef466f4b4bfb3ee9e3ae7cd67843ff08342
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              jar.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
              • Size 34.6MB
              • SHA256 b1eca821b026d1debdc8c490e99545715e8364065904aff803b8338288867194
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              jarsigner.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
              • Size 34.6MB
              • SHA256 5bd8448ef5b60cc9ac81c9d1489ef157be77b23f52d7dec12c676c7f34078b46
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              java-rmi.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
              • Size 34.6MB
              • SHA256 82b53de0d5690c24c681b00f39cf9141db49fe98c28ee0e5160134a270020118
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              java.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
              • Size 34.9MB
              • SHA256 afdccd16e09fd81ff9689839463842acd31b13942be1e2c971bb952924b28c6b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              javac.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
              • Size 34.6MB
              • SHA256 18202348a44f3f984a15299232c0848394f3c6a5f2b66a565c8d5ca3cee2f1eb
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              javadoc.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
              • Size 34.6MB
              • SHA256 1793be1f547ef9e417d76785110e54f5b3ec6624736add986f930a755f62deb8
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              javafxpackager.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
              • Size 34.7MB
              • SHA256 4893127d932b476eb6ce80808cf0dc880d7c159e3c728b5145bd297bd1759900
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              javah.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
              • Size 34.6MB
              • SHA256 aa5ece442eec0972ce2422055f772c3d72f1dbaa450f19b2f3c88a78e361f3f6
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              javap.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
              • Size 34.6MB
              • SHA256 ee0f38a21c5bb7a71911fda48042f7888122b30f092533f6529874d982a96078
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              javapackager.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
              • Size 34.7MB
              • SHA256 b6eab9f492a136a7a305a47b50020fe1e1ef405d4920502a9c6d1618cc01e6b8
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              javaw.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
              • Size 34.9MB
              • SHA256 639bb7abc929b6674c36cb388041aa1271276bf75a76c25941fd267ae256156a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              javaws.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
              • Size 35.0MB
              • SHA256 539884775b569ae16b188f0e260e4d7a28e4a5b9a4def392c04d8faa5d801724
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              jcmd.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
              • Size 34.6MB
              • SHA256 33d0b681d67578da3b3e412867207af488312a3bad753f15c846f25cc4031cdb
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              jdb.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
              • Size 34.6MB
              • SHA256 3ffec0dce5b37859323e9c713db1f534f3eb326b7a1bcb5451991460b8178859
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              jdeps.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
              • Size 34.6MB
              • SHA256 adaa681c9189012f27a55688fdb158a2f2ac03b7c8a31968d3e07a53b9f9c0fe
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              jhat.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
              • Size 34.6MB
              • SHA256 494ce0eb355a476d83c9f94be98cd1a41d2bf2a17830d822f694db6b90afa646
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              jinfo.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
              • Size 34.6MB
              • SHA256 cdd54c8402f39a6ef2dbbf9c47847349feea4ccd3514d5f26972c756d9281776
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              jjs.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
              • Size 34.6MB
              • SHA256 dce0d264758a35aaf302668d47cd1efa31f14c21ef0f30df55342c76a69675e0
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              jmap.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
              • Size 34.6MB
              • SHA256 bf6491b90847e2e94debd23c7d61c734fb01e616c0fdfb4caa99686e1bd61676
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              jps.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
              • Size 34.6MB
              • SHA256 924dbfebb1b2d84ad929793b022865f913569b92c49b8a9565a56dd99fc69adc
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              jrunscript.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
              • Size 34.6MB
              • SHA256 ef8553828182d48268cca54fe839edc8ec0a7b21773811b8a2222aa79bb876fe
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              jsadebugd.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
              • Size 34.6MB
              • SHA256 f17ad9c06123d03881bb52f4b58b6755d5f8bc7f29f3d260ff5b6d2b432dc0c9
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              jstack.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
              • Size 34.6MB
              • SHA256 ad5b83adffd675d20cadd5fa62eb8d9316abfda3eb86a11519d2042bf5173184
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              jstat.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
              • Size 34.6MB
              • SHA256 6b1772a30dcf2d16214cbb20d7d8cabddbd60d278df5d2e3e55765f147d21810
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              jstatd.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
              • Size 34.6MB
              • SHA256 8ec14c2310ee835a17629a9fd0e19cc0a2faeaf3841e7a0bb7da50d91af18223
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              keytool.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
              • Size 34.6MB
              • SHA256 6334cde9493370e0235f31fb9721c88d735bbb53342f730a0d827bee9c28abc0
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              klist.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
              • Size 34.6MB
              • SHA256 fab55f35271e41ebef1bdd34c7f30b2c843548a610dc9a523146599b0477072e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ktab.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
              • Size 34.6MB
              • SHA256 f34983a75c9531df58b19b6923f3e4476785659a6244000db9bf09c1c7152a54
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              native2ascii.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
              • Size 34.6MB
              • SHA256 370ae70d99e357da443a5ca90d9ae3373295ce34810134897eb0a8f0949be40d
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              orbd.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
              • Size 34.6MB
              • SHA256 f082b0cfdb184ad3d0e9a73bdb2504963a57d992c815b70c0816567723c258f2
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              pack200.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
              • Size 34.6MB
              • SHA256 6694781605a9bf45daecd943d3c08de1924c903510b48df77249525b789bb54a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              policytool.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
              • Size 34.6MB
              • SHA256 eb342804d7c2bd63ed28a8047b1af667451694ec16456b7afbaa9aa59ff222ea
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              rmic.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
              • Size 34.6MB
              • SHA256 42f54d580da073ce847a544ffa2c4d2250df8d8786230f87729d6b2f7680ca06
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              rmid.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
              • Size 34.6MB
              • SHA256 2dad5f1c336772b272d3cd3a626a3bf9b463dd96e7d438607d717e7cd957f89e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              rmiregistry.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
              • Size 34.6MB
              • SHA256 7bf7410f48d7d6cce03734d055fad364d204c265ae3282367b212d582d5379ae
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              schemagen.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
              • Size 34.6MB
              • SHA256 e2b413ed0ded0368e0db129773e1a305acd27d9d5a822bdf8999ec7b251c1783
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              serialver.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
              • Size 34.6MB
              • SHA256 bc1f9e1702bad963fed986bbc1892f6a5fb689124015f5872adfd70e6465e637
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              servertool.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
              • Size 34.6MB
              • SHA256 4ed422b12137e964c69c0c7700f86cdb9dfdfab1435622b97f8354fb6f24d2f2
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              tnameserv.exe
              • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
              • Size 34.6MB
              • SHA256 a8e5cbe3e292df939cef1a738317f9e8073e68e764ede47c25b488a089e94bf6
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              dotnet.exe
              • Path C:\Program Files\dotnet\dotnet.exe
              • Size 34.7MB
              • SHA256 18e8d243c83996cbe105eccb502a71e7f158d29b40c835e4b2ee27ca4ac58bfd
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              createdump.exe
              • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
              • Size 17.3MB
              • SHA256 757302353e8bfd40a75a32c1dfa111b05d6fa9b65657d239d50be67c2e29aa8c
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              createdump.exe
              • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
              • Size 17.4MB
              • SHA256 14d36e236b5cbcc01dcbaf6aa2e03a7a862be5470b981ecd6570f7fb5be19c3c
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              createdump.exe
              • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
              • Size 17.3MB
              • SHA256 51db2f2ab2feef079a84602f3720766fa5394694b8fd33ee896fd7b5c719799b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              memory/4364-432-0x000002CE02A40000-0x000002CE02A60000-memory.dmp
              Download

              memory/4364-435-0x000002CE02DC0000-0x000002CE02DE0000-memory.dmp
              Download

              memory/4364-433-0x000002CE02E60000-0x000002CE02F60000-memory.dmp
              Download

              memory/4364-449-0x000002CE146C0000-0x000002CE146E0000-memory.dmp
              Download