Overview

overview

8

Static

static

3

2026-07-08...ar.exe

windows10-2004-x64

8

2026-07-08...ar.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    47s
  • max time network
    127s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260706-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    08/07/2026, 13:41

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-08_d4f9b3e6c3344d59a9f385b2c9f86ef7_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
  • Size 11.4MB
  • Sample260708-qy4rssf14x
  • SHA256 c0f0dd9c13f1f4a3cd92a42ca241c447589aa1ce4068c3aeb5498f872f61e7eb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Sets desktop wallpaper using registry 2 TTPs 1 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 2 IoCs
    defense_evasion
  • Modifies registry class 13 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 8 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-08_d4f9b3e6c3344d59a9f385b2c9f86ef7_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-08_d4f9b3e6c3344d59a9f385b2c9f86ef7_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4188
  • C:\Users\Admin\AppData\Local\Temp\2026-07-08_d4f9b3e6c3344d59a9f385b2c9f86ef7_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
    C:\Users\Admin\AppData\Local\Temp/2026-07-08_d4f9b3e6c3344d59a9f385b2c9f86ef7_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:944
  • C:\Windows\system32\sihost.exe
    sihost.exe
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:764
    • C:\Windows\explorer.exe
      explorer.exe /LOADSAVEDWINDOWS
      2⤵
      • Boot or Logon Autostart Execution: Active Setup
      • Enumerates connected drives
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      PID:3660
  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
    1⤵
      PID:1692
    • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
      "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
      1⤵
        PID:3844

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            7zFM.exe
            • Path C:\Program Files\7-Zip\7zFM.exe
            • Size 12.3MB
            • SHA256 db22f9d7200504807f9e212b99844289e33aacc1cb8cf9f547e1b4b650ccd397
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Uninstall.exe
            • Path C:\Program Files\7-Zip\Uninstall.exe
            • Size 22.8MB
            • SHA256 da39fa2196bbf54dc923b1ccc8059b81a441c7e9cd1676cd657cc397234db0f8
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            AppVShNotify.exe
            • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
            • Size 11.6MB
            • SHA256 8ff7c8af5257dabb4dc870879b1a235fa47f082a8608cdecbfadefa908337f98
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            InspectorOfficeGadget.exe
            • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe
            • Size 22.8MB
            • SHA256 b949b2de6de396c7d09695fb53fe760a04992241c688e7e17c1e6ac77e179376
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            IntegratedOffice.exe
            • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
            • Size 26.8MB
            • SHA256 1ed0cca75ca174b92a8873ce3886c16a953aa8dc2f88c61c7402134b657afbf9
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            MavInject32.exe
            • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe
            • Size 23.1MB
            • SHA256 c91693e1c3a8b4117f541b538623407bae2a71d05f4cf2304bd7eb9a78a49081
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            OfficeC2RClient.exe
            • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
            • Size 46.2MB
            • SHA256 88e7d1b5987558295512388b10b47034cb5588b877c14ab611c176bf4cd4b2a8
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            appvcleaner.exe
            • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
            • Size 24.9MB
            • SHA256 747560701dc97f3c86c269197f996c8704a89461422469f6eba25fbf768236b1
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            VSTOInstaller.exe
            • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
            • Size 22.8MB
            • SHA256 aa82e20e35b7e9cfa805ab4141f9501ae82d3ed9566a41a4809fa59df57c459a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            chrmstp.exe
            • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
            • Size 28.8MB
            • SHA256 c4c64210db432448bd5aed61b597e0cde0fe104681809e2cf3e0a921b93b7bb0
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            elevated_tracing_service.exe
            • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
            • Size 26.2MB
            • SHA256 1aaa3fcdcc67d38c966932a23822b21e506607bf2c3c3e201b363893bc08e43a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            elevation_service.exe
            • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
            • Size 25.0MB
            • SHA256 7b116458fb274604df1f325a7fd3ee96f2d122d3e0d4e4b78fc305d92dd0a0ef
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            notification_helper.exe
            • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
            • Size 24.4MB
            • SHA256 fd76d4550b6de78563955916d2645da6f39ee0ae00800b0e5a4e2af042c20746
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            os_update_handler.exe
            • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
            • Size 24.6MB
            • SHA256 6179433decf5befdaf621ce6300ef152e3892b4bd793d037c28801e906e57123
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            chrome.exe
            • Path C:\Program Files\Google\Chrome\Application\chrome.exe
            • Size 25.8MB
            • SHA256 199830a74f90a16f6e1aba03d3595683d11ece8000af9ee87e2ac987c194e2a5
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            chrome_proxy.exe
            • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
            • Size 24.2MB
            • SHA256 ebe5c301e709f854d224b4ebe6d162986204869c976c3958345be9fd3814428d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            appletviewer.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
            • Size 22.8MB
            • SHA256 71797b236c4f2f64cfb59b01bcfd5042050ac7ec83261d826801b92af62a5b23
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            extcheck.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
            • Size 22.8MB
            • SHA256 73a684e55e4c9fc914bfb076a1020d69fc1390b42b0f102597ce81452fab188d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            idlj.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
            • Size 22.8MB
            • SHA256 49e161bce279772fba8227f132b3f0a9ee50fd73c92446df964c69e82a4e6ca7
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jabswitch.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
            • Size 22.8MB
            • SHA256 731a88a71d33296c13dc8c0aab5666e8d67fdb9ce2062ce2f25a5d2864a7eeda
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jar.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
            • Size 22.8MB
            • SHA256 0dd76d52f5b6e771e4940ceab1b945159bcfbddd0ed9828dc38f320ed7a931e3
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jarsigner.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
            • Size 22.8MB
            • SHA256 2468dc105556f160dfddcea2e84e575afbb48ea3da44f76190bf061ebc1d88ab
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            java-rmi.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
            • Size 22.8MB
            • SHA256 17cf3ced8cd3ff55c451e9c17368b3ca67a6902382e45d8cb7545e213b17374c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            java.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
            • Size 11.6MB
            • SHA256 23a4682f62cffdb3476f6d4dd0000adf8681d6a34b3dc418fd286bab828911e3
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            javac.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
            • Size 22.8MB
            • SHA256 c1042df09bdec1e6dac4abe8d45f5bdc5c90734fdf236414256d7de4fb9a5798
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            javadoc.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
            • Size 22.8MB
            • SHA256 f584dfac9bf013c746000ee15d41294db2c54a92c10eb7c5bd7bf2410b3fb3ee
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            javafxpackager.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
            • Size 22.9MB
            • SHA256 899a278c065c3b13e52bd30bbe037caa8a2acb4816a93243bc8ebf84d0c3ad6a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            javah.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
            • Size 22.8MB
            • SHA256 b55c0d7c6d19abb5bfdd147d072ceb4be484ec1980a4e608c7393f8d0f2dde60
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            javap.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
            • Size 22.8MB
            • SHA256 4687f7c5dd06adc8f0d805e445c3be60998db32a0dc5fe8f8d8c4f810e2f094f
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            javapackager.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
            • Size 22.9MB
            • SHA256 a0f9933946db69cf7499cfebdaf8333cccfc58dba0e237bf26788ac1d02d91ba
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            javaws.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
            • Size 23.2MB
            • SHA256 5849469e231b9e723f1a0155bcfae5acd532e9e2b3c62c5accb0dd5763a26ebc
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jcmd.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
            • Size 22.8MB
            • SHA256 81b91b2b61b1d25e634b60718af2ae011f93157617677b9560696446b18530bb
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jconsole.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
            • Size 22.8MB
            • SHA256 c342236d5332d3266115d1ba96e187a34b286c100f1a415e32e94f790766d7a1
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jdb.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
            • Size 22.8MB
            • SHA256 c84125518fb5ecc652605bb6481d5699f14d0c834861314814eafd1a18672f70
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jdeps.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
            • Size 22.8MB
            • SHA256 17b473f2e24a08dfdf284e714faccd9fc846c65174fac76c6c86d2eefbd1241f
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jhat.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
            • Size 22.8MB
            • SHA256 c70a597155ba357de49da8d86097c364e1f01c5e4901eeb80684df83ebcdebd9
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jinfo.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
            • Size 22.8MB
            • SHA256 ebef8e274d4d714d9642a770234729054d873052053121322854b5020e6d666a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jjs.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
            • Size 22.8MB
            • SHA256 72b867138e4abad9fb54e4af93f6f11b7ff2b33f4304c5e0ec8344cc514e2952
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jmap.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
            • Size 22.8MB
            • SHA256 c61fd11151a25a97c39f63be1625ebdd9928592f55e6750dd267bfdc41888560
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jps.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
            • Size 22.8MB
            • SHA256 279adee3f8589c5a729c9abded4f9a94c71d74a929479a884f0376814c2635b4
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jrunscript.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
            • Size 22.8MB
            • SHA256 2e1bb92679445f4ba08f793fe8d423759b39c3444dbf4afdb01beebbca9789f8
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jsadebugd.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
            • Size 22.8MB
            • SHA256 ccb55d56a6f0d51e045d7a78e34cc6684f05265534f81980e0e5286587c978d5
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jstack.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
            • Size 22.8MB
            • SHA256 51587b3135105de4af687102d5a1ff172656f6bf96cf28a2e50de2b37dc00783
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jstat.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
            • Size 22.8MB
            • SHA256 ab0da06fe6ca76b133087ebfdb2f2a6267ef33d02a6d2cc064dd50a9492f6b10
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jstatd.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
            • Size 22.8MB
            • SHA256 844f9fa61fddd3c94d060823c37806c816b49ec711976ecb59ad48de4aaf6570
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            keytool.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
            • Size 22.8MB
            • SHA256 caebb13c584e16df023f5919219b50e2842e80462c33447dcbcc5e8dceb0d971
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            kinit.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
            • Size 22.8MB
            • SHA256 dd3e06d4e70b0ccdfc878f41ba7581db7f32063b5c04f2085b98d76583701827
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            klist.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
            • Size 22.8MB
            • SHA256 ccccf93dfd95897fdc9d141b7ecd42e0c82b59e9ffed9f8c8e8821dd428330fb
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ktab.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
            • Size 22.8MB
            • SHA256 d2740cfb78446b1d2bf9c0c89595dd717258d3a4dc64e5fbc6388447265022b6
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            native2ascii.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
            • Size 22.8MB
            • SHA256 e34eecdaa95df398ad547121b3deb217ecd1ed7a5faeb0ac60281daf4363e5e8
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            orbd.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
            • Size 22.8MB
            • SHA256 bfcec29bd8447e2d57831ecf19f02eda452a295d6fb1dec4778ec4781844cf73
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            pack200.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
            • Size 22.8MB
            • SHA256 c8f4468cf8137df4bd2601ce2e8c513089c273ef3b2e52e773ee5cbdd5856ba8
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            policytool.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
            • Size 22.8MB
            • SHA256 a6c5d2571ff494c9d4ed1225b90ed1efa068a0311b5419e7ea9f99b806382ecc
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            rmic.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
            • Size 22.8MB
            • SHA256 f81a54cda6ac8940c524270d007b556bce02dfe132c50ed4e0e93647d76347bc
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            rmid.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
            • Size 22.8MB
            • SHA256 8698e20948d424aaf49196738e3e70640e1fae2ace0836ee5b7cd8d845e9df69
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            rmiregistry.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
            • Size 22.8MB
            • SHA256 a26978f948e61ecd24ec9b0a830de7d4cc9806c5840ee735cdf9f2d3e88d768c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            schemagen.exe
            • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
            • Size 22.8MB
            • SHA256 9dd23ed7667f3f6ea27c8e0cc8b1df852a8abba6ead14a909bf5acbf2274062d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            dotnet.exe
            • Path C:\Program Files\dotnet\dotnet.exe
            • Size 22.9MB
            • SHA256 dbd9b4d9a2cde80c66c2a8a3fefa11922bda36855dded8e2af5d979ccdd9c739
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            createdump.exe
            • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
            • Size 22.8MB
            • SHA256 1a33fee0dae847f447bab42568a8ad58082eb6349cea983e169d60b52da891ff
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            createdump.exe
            • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
            • Size 22.8MB
            • SHA256 ca1d60ea4a81a75f87af6e8c4ee0a7f972175d27627176612e6e498da48e7aeb
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            createdump.exe
            • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
            • Size 22.8MB
            • SHA256 b2ce670fd565c99d78bd9c6969b341f72fa7dde4bcbea5142c8a3189c2d8ff04
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            prep_Activatable Class_Hermes_perf.cache
            • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
            • Size 607B
            • SHA256 be6b74e52e5eef1f1c27c0976bf3bf1bfa99958c00bbef2898a602f691be6dae
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            memory/944-18-0x0000000000400000-0x00000000004E4000-memory.dmp
            Download

            memory/3844-432-0x000001E3001E0000-0x000001E3002E0000-memory.dmp
            Download

            memory/3844-476-0x000001E3146A0000-0x000001E3146C0000-memory.dmp
            Download

            memory/3844-462-0x000001E301C90000-0x000001E301CB0000-memory.dmp
            Download

            memory/3844-446-0x000001E301A30000-0x000001E301A50000-memory.dmp
            Download

            memory/3844-448-0x000001E314000000-0x000001E314100000-memory.dmp
            Download

            memory/3844-431-0x000001E3001E0000-0x000001E3002E0000-memory.dmp
            Download

            memory/3844-430-0x000001E3001E0000-0x000001E3002E0000-memory.dmp
            Download

            memory/4188-0-0x0000000000400000-0x00000000004E4000-memory.dmp
            Download

            memory/4188-1-0x0000000000400000-0x00000000004E4000-memory.dmp
            Download