Overview

overview

8

Static

static

3

2026-07-08...ar.exe

windows10-2004-x64

8

2026-07-08...ar.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    104s
  • max time network
    113s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260706-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    08/07/2026, 11:19

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-08_68962a8c2ca0ff8ea580601950e1066f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
  • Size 12.2MB
  • Sample260708-ne55eaey2t
  • SHA256 0f82fba55be60ab97208a989e309c84f14d7f4c98bd1d48a5e9e9e8b2fb8888d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarediscoverypersistencespyware

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 42 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 16 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 24 IoCs
  • Suspicious use of FindShellTrayWindow 14 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-08_68962a8c2ca0ff8ea580601950e1066f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-08_68962a8c2ca0ff8ea580601950e1066f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:5924
  • C:\Users\Admin\AppData\Local\Temp\2026-07-08_68962a8c2ca0ff8ea580601950e1066f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-08_68962a8c2ca0ff8ea580601950e1066f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:5332
  • C:\Windows\system32\sihost.exe
    sihost.exe
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:5900
    • C:\Windows\explorer.exe
      explorer.exe /LOADSAVEDWINDOWS
      2⤵
      • Boot or Logon Autostart Execution: Active Setup
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:3252
  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:2800
  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:4280

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zFM.exe
        • Path C:\Program Files\7-Zip\7zFM.exe
        • Size 13.2MB
        • SHA256 2c6de62eea104e25b5c16a75cae887ed84dd9f7238e841bcc950b31bbfccc28c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 12.9MB
        • SHA256 08cc605fd6c56931e1348fd47662a9be1ed95ce9c0ec7a9dfe8c5b769fef5f9c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Program Files\7-Zip\Uninstall.exe
        • Size 24.5MB
        • SHA256 77bb2cc963ecbe0692550b3ea2f16dd478d246c47b2233c117c0ecd2ad6f4b13
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVShNotify.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
        • Size 24.7MB
        • SHA256 cc7b474084f27e206bf06818bd9bb4207bbb3c9310ac7925f8ca5825bd38dea3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MavInject32.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
        • Size 12.6MB
        • SHA256 77da683d84fff928df451727183032b29b1ceb56b2851e1733f4f1602152724c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
        • Size 47.9MB
        • SHA256 d3cfb37691e4dedba6d5f2640fa75bed3f0a519da6d7ccb8381a199d21b84014
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appvcleaner.exe
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
        • Size 26.6MB
        • SHA256 91393c5472136b03d7e5a4f53902a28c13b9c3ddb774d6e4d260859570f96ae0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VSTOInstaller.exe
        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
        • Size 24.5MB
        • SHA256 59b40146ca1551a6ad38f9d8f88d80a746a168325c4241ef0727b40204897fa9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrmstp.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
        • Size 30.5MB
        • SHA256 3354e30a861bd0885dcebe10ec735a52e7af7ada923053c849761213858a64c0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 26.2MB
        • SHA256 49f662ddd8c95f9558ae93137662c2547f27fcb3e7091e7c0d105e817341e2ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 27.9MB
        • SHA256 1ebb306047eb1201567e9c6e43fc95b51be046dd2f0e01537fc0f7b7fa4a813e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 26.7MB
        • SHA256 e749e703ce56f2c76281d5d13dfe01f643abc239990df5f3a51d8c32b0396081
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
        • Size 26.1MB
        • SHA256 bd058980d3766b301912edb8e4754a997f77cd8b4dbccd00aa4fbdf28b88f1c0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        os_update_handler.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
        • Size 26.3MB
        • SHA256 56408a9743e57af917f36c8862660728630a9ef26d01f074ddc9bcd7d1d38d2e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome.exe
        • Size 27.5MB
        • SHA256 4afe1e572c2146187c87a27aaf2e291cc43995832da7a123c30b842d053376d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_proxy.exe
        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
        • Size 25.9MB
        • SHA256 94d1071398acddbde01277f750863d9181f533532aaa60facd2f9c8397d8e669
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appletviewer.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
        • Size 24.5MB
        • SHA256 42d45709fe813d699ab3ccd574ac98d608545ded7089800cd65cc1b2f4be05e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 24.5MB
        • SHA256 3a5e622cc2c0d3a598e2bfb8e6d604fe6b0cf9c283fc7bf418857d9d95e9896e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 24.5MB
        • SHA256 68f18230734a5cff58c52f9469199a7d159ce064b07426460a4ac8fe817ce842
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 24.5MB
        • SHA256 d4e1e5ddc10e4f251fd98ac834c90c324cd43b3eeeec79778d915adcb18e44a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 24.5MB
        • SHA256 7bba412a0a0abbdb51c048b76cc73023609d43b027c38181abec83e841ab390e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 24.5MB
        • SHA256 44543d4df23681f961df229f7fd01bcbb376544e77d803aa3385962c1af9cf07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 24.5MB
        • SHA256 60ca5b966812683b317b5f8fd067a5c394fba341f4af4c7f92f893c03222070a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 24.7MB
        • SHA256 2cc7431b0c08173e4e4b5f37141620ed5c1415053c52731c2d46a32e45957e92
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 24.5MB
        • SHA256 460758b872313995a374cce0156057dc590e28deaa9c69f93c83a511f2570193
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javadoc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
        • Size 24.5MB
        • SHA256 913085028ee7a199244803b66e5007962d63ecdabcb05e70301f91961b81fc1b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 24.6MB
        • SHA256 b842095c20ad13c2cf441c6d37dfcdb1c8ef70117893211fbc4034a7e6563f14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 24.5MB
        • SHA256 9dd4c30a6340c6e5be77d48900b5d768974757d7043d1fe2f6a9aca53d6ee17c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 24.5MB
        • SHA256 d20a10a46509571d1c6f502d360c845d374ea3e02ec0bbe2e72c84c65738c710
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 24.6MB
        • SHA256 203de7e9660b02337a9862f12d2948a8e7ef27a7701038c347af4e57932a3971
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 24.7MB
        • SHA256 1e57ef2392a5a5a89361fe9488019b530952ff925e9aea4496ac1af13a62b13e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 24.9MB
        • SHA256 1ef6c485e3bb11a26d7ff6ac9fe37b1591e7b758c892fa07da008d935f88b28b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 24.5MB
        • SHA256 f2762e2403c4b3ee7857af3cc365b09f98264a91e236caff4fa285fe361108eb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 24.5MB
        • SHA256 2858ef257cdb2f836d891ffd24afba4d9dadafe9ec797f28d1f12a92bc83f667
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 24.5MB
        • SHA256 ec68033efd60946b520c6e80823c46e59420c197033b4ddad58792055fd039b3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 24.5MB
        • SHA256 33c36c24c0ba1f8581df0de1164b1b057431726609ba77209cf13dfde22c152b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 24.5MB
        • SHA256 ef76f82b4faf968ffccea9b57439d8a7d6733fbda7f34aac5564eddc065b9f31
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 24.5MB
        • SHA256 9f0f864bad27a939b8cd19621475e89d7ebb2ee2857e1af873ce1f6af9283cf1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 24.5MB
        • SHA256 bf985f74282c978427f4376e33cef89eee70c84572f0dadacb3aac0e53c87053
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 24.5MB
        • SHA256 b4f61fe310521b6be7b2265a609570eedc2003af62b63b56f5eb67db5c64eaca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 24.5MB
        • SHA256 1635298ecdd2c72fd255b39a90db9682e312e6df7d800fefa853c9c4083b69b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jrunscript.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
        • Size 24.5MB
        • SHA256 2cda0b534dd5a7c2c90890e4842f4ccb95461a9fd4a9d588c520eadd3428bceb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 24.5MB
        • SHA256 906b84b7aa376f71e76325b87d58d5ac9a8085a93a3b37c8e93e5ac78a182b7a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 24.5MB
        • SHA256 42e210be8da80a1dfaa8946e0b2c02b21bfee7357aa47fc137ef9d1b04e9f005
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 24.5MB
        • SHA256 347999f355e4bd95798ebd8822def3d3d292e6fd36308f8d5b7cb0a8040beefc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 24.5MB
        • SHA256 75b8befe322927130afda90ddccce41365a554471e5b41dade12499df2fabdb7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 24.5MB
        • SHA256 3503edd4f7bd465711aa564391afe1cac946444660c1a06c5345afe3e87bffaf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 24.5MB
        • SHA256 3fe5c44201825de9e195867e113834e38f4f762448e337cf706d996a31fdb571
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
        • Size 24.5MB
        • SHA256 3d6066eb98d3158f280ff4007be756ef6405f7af51985c5decf2a215151db62f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 24.5MB
        • SHA256 1876af85e83bbdfe8f2ee397c05b23fd3357cc1eb1f4ae7e9278f8431bee1e4e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 24.5MB
        • SHA256 bed83f3b1d02cedffb0df27b59fac1413cfadeb16eb1076aad696c8703cd47d6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        orbd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
        • Size 24.5MB
        • SHA256 94dd620c5eb9a9c9da4b2f83fa1a149a91ea7d9d9f221c9395de5fc7a36d8607
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 24.5MB
        • SHA256 b90be3b3d8f1d3cb1cc4eccea8897dce551d091b7d85e42a07493ff2a07f9d0e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 24.5MB
        • SHA256 d266b6d4037452b036a46ece8bcfc66ad11ba056069b8ceb0ecafe9f33eaf54f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 24.5MB
        • SHA256 b61c8e2f3fd2aa4a7d0211e7993f18b0583c784ac60f855bb520ef9ce98274b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 24.5MB
        • SHA256 9c05d396bbb1c2d60a467ac97fb487805f306f46e8ebc6536574019f2eb2a76a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 24.5MB
        • SHA256 d669fae6f419daaabe7ac839596ad18d6d5c9f552a3c50c30d9529e9016311c0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dotnet.exe
        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 24.6MB
        • SHA256 91db3699a20651ad896390a15e9aa2ad859371141c4aa2c87a4393c246354295
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
        • Size 24.5MB
        • SHA256 0650ece7cd86fbd85ddc228e430241e0cb8b9d3726499b2018a78ee71623bfb9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
        • Size 24.5MB
        • SHA256 02705e8fa159cb9f92e6523b61448410cb4d62310254a890a3cca792c3e3ecb4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        createdump.exe
        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
        • Size 24.5MB
        • SHA256 71a441a2d800b054ca978fc75e3dd7e3cb228e5e6fa50159c77a5be0ef06ce73
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        prep_Activatable Class_Hermes_perf.cache
        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
        • Size 603B
        • SHA256 76051c7134ef5b2b172ae67cc7317ea11daedcc3d11f55c52922e505f501568b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        memory/2800-599-0x000001D7E1C50000-0x000001D7E1D4F000-memory.dmp
        Download

        memory/4280-334-0x0000021980000000-0x0000021980100000-memory.dmp
        Download

        memory/4280-381-0x0000021994420000-0x0000021994440000-memory.dmp
        Download

        memory/4280-357-0x0000021983B60000-0x0000021983C60000-memory.dmp
        Download

        memory/4280-367-0x0000021983980000-0x00000219839A0000-memory.dmp
        Download

        memory/4280-354-0x0000021983980000-0x00000219839A0000-memory.dmp
        Download