Analysis

  • max time kernel
    148s
  • max time network
    133s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    12/07/2026, 21:49

General

  • Target
    2026-07-12_46b4896d703b22377cfb608d9dd30ace_amadey_elex_glassworm_poet-rat_smoke-loader_stop.exe
  • Size 13.6MB
  • Sample260712-1ppavsbt4w
  • SHA256 f30be4643b03834453d878a0085c1743f17d0d5cf9ed724e59b8fe0116386bc5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-12_46b4896d703b22377cfb608d9dd30ace_amadey_elex_glassworm_poet-rat_smoke-loader_stop.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-12_46b4896d703b22377cfb608d9dd30ace_amadey_elex_glassworm_poet-rat_smoke-loader_stop.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Checks processor information in registry
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4184
    • C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapperTemp-1783893012-0-app\bin\windowslauncher.exe
      "C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapperTemp-1783893012-0-app\bin\windowslauncher.exe" "-Xshare:dump"
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      PID:4672

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        flatlaf-windows-x86-6261520651800.dll

        • Path C:\Users\Admin\AppData\Local\Temp\flatlaf.temp\flatlaf-windows-x86-6261520651800.dll
        • Size 21KB
        • SHA256 bcf8306cf6e3a7c8e870cbb330a658c70b76d1b5f735c29b96396fddc95fa27b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        store

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWAppsSharedConfig\shared\settings\store
        • Size 103B
        • SHA256 91cc3cf5dfa2f48c4220204df30530626996c22fb26964951d803590a8838011
        • MD5 SHA1 SHA512 TLSH

        jwagent.jar

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-JWrapper-00123877845-complete\jwagent.jar
        • Size 4KB
        • SHA256 bdb490dc050d2ddd371f9539177d6dfb34931e7927c9b95b639ddee0f5c532e7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jwutils_win32.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-JWrapper-00123877845-complete\jwutils_win32.dll
        • Size 162KB
        • SHA256 f73ff5159072b06b322a9e4d83bdc00d1d1afaa36e598b672fbef2c77685832f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-console-l1-1-0.dll
        • Size 13KB
        • SHA256 62ba082dd02411c63852029267d0d841ba118d8bd68d9411211c93204a3b8b6d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-console-l1-2-0.dll
        • Size 12KB
        • SHA256 f98bfe24c4c91b4e1b918754a2b92bec092c61cd4b7cf94b767841dd5420b0c3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-datetime-l1-1-0.dll
        • Size 12KB
        • SHA256 b0fea85255f179efb7a71ef81aed083826057bb5366e084acc8170f564743064
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-debug-l1-1-0.dll
        • Size 12KB
        • SHA256 912c71c86e53df1b2c751456cd51a78a9d5b87e4d36b298671fd1c6c047df002
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 12KB
        • SHA256 fbebd7d36524e286e6145b891bdd53381a9fc7ec90b204297cdfe2b5bb596669
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-fibers-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-fibers-l1-1-0.dll
        • Size 12KB
        • SHA256 59d92b01d0b82ecb7fa0744f6721a0f4f19136af263a2b0d42c15dfe42e64658
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-fibers-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-fibers-l1-1-1.dll
        • Size 11KB
        • SHA256 fb6cdb66d7a40d9b0aab173608ffe3aabd4f2078be8dd0bcdc71c7344e19a31e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-file-l1-1-0.dll
        • Size 15KB
        • SHA256 6660b662445eaf4a9d921096f0e150cbd0223d7d3548b34b1cf16af0d6e27d6b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-file-l1-2-0.dll
        • Size 12KB
        • SHA256 3c10129daa43b4674a2e7f5833670a964df32bab674579d64422be4f4b491a97
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-file-l2-1-0.dll
        • Size 12KB
        • SHA256 2378e58e5e14bbd97efaeec67c869204b7e44cdc968941303be730429b405df8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-handle-l1-1-0.dll
        • Size 12KB
        • SHA256 5ac76d6f588bcc8bf34a6e77d7ca67321c043f2c1b390826889aa65d97ba739b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-heap-l1-1-0.dll
        • Size 12KB
        • SHA256 c2a4e72b027ff463ace706c4ed70305e29cdaf9f420c462fe9e3dd1b2b7c8c45
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 12KB
        • SHA256 a8d0435496bb66ea6401167899f838c401b15ccd07f08a421e0eed2430cbf7d4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-kernel32-legacy-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-kernel32-legacy-l1-1-1.dll
        • Size 13KB
        • SHA256 4f729727288d6d5a2f6d85c64c133e13c89ebed42fef7289946d0096eaabc54b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 13KB
        • SHA256 b11b2082ccc104b47125750eff59c5cdec276c22bcd66992ce46d2a4bd3b61e7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-localization-l1-2-0.dll
        • Size 15KB
        • SHA256 aa61a486befcab89b2042bff5f0dd8b2e0d677e79b0f9ce8f1ffa81ae044bb86
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-memory-l1-1-0.dll
        • Size 12KB
        • SHA256 d5199b54b29d7b489c6a1eac1bdb28a22e8fe6e90b3e7a4fe026df5bc1e97fa5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 12KB
        • SHA256 23f3e1b74ef0ff4e57bd0e544a3850f307ac4cedac0133da5754f9fb44f0a8a6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 13KB
        • SHA256 e90454d87c4203c4df2078303d6b99870dfd3ff29724e4c7924a129f253c6f17
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 15KB
        • SHA256 6a6c9b2fa836dad3b4ec1fd719b5e2e1bc58d5c2afce49d8ab244fabd696ea64
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 12KB
        • SHA256 6224d1c684cf7eca00eeadaa1d6883bb6c03dcdb2bac2cd77b2231bae1de600d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-profile-l1-1-0.dll
        • Size 12KB
        • SHA256 5488c6b90d281938cd83396fcb90d231bd3bc145aef4da3c5472a90a09b03d0f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 12KB
        • SHA256 c4248669783715d7560cbc73d60dfb3fc9955df588fe9fc49b7372c7a3ac19bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-string-l1-1-0.dll
        • Size 12KB
        • SHA256 7f257d5d8a7382756d18344fde46e2df9839ca11c956e55fcc3b470c9d229702
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-synch-l1-1-0.dll
        • Size 14KB
        • SHA256 95a02d24caf2d568fe652d227dc3806b4b1b21a8d22bdaa7c5e90cf15a3c1cdb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-synch-l1-2-0.dll
        • Size 12KB
        • SHA256 00f4b1556082265347fbf97053c46e8035617432d665d299b59a95611293d7af
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 13KB
        • SHA256 81670a4f3728cc59c120b0d67760f1fdf9f2c3d3fb1e41db53d2dc632d00d068
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-sysinfo-l1-2-0.dll
        • Size 12KB
        • SHA256 39d6122061ef5da05624d5e1d11b61241a653038f9bb16a63dcd781264a68214
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-timezone-l1-1-0.dll
        • Size 13KB
        • SHA256 f1cc2f221dbf6494171e04f29b0bc2281f83cc01d580027af1b6dadfe3ebd575
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-core-util-l1-1-0.dll
        • Size 12KB
        • SHA256 538d221cfaf3155bc53d22b18d8a25bf74366190aa36d1385d44edf1cdb06def
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-crt-conio-l1-1-0.dll
        • Size 13KB
        • SHA256 bef0afddf359fbfeab70f712f4b7edbe96013c746c4e86ee59590b0cd05e02f9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-crt-convert-l1-1-0.dll
        • Size 16KB
        • SHA256 f79a0c9daac06b9f591ad074c5fa50be10d093819bddf76a6fd6aa0b84e9338a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-crt-environment-l1-1-0.dll
        • Size 13KB
        • SHA256 35b58af8ea73a99e23d353408e8addb42046930fcd27b93782ab8c6db4ea2724
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 14KB
        • SHA256 db8f17406eec80e6b3d4249541cc2be56d5319166c4f725e1f8f45940f000571
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-crt-heap-l1-1-0.dll
        • Size 13KB
        • SHA256 73382c18ddc9a9159c35d0d506501bb305f8824b894456a1da6efad44e200511
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-crt-locale-l1-1-0.dll
        • Size 13KB
        • SHA256 67b8b713fb9bed10217977af23fc60aa63d8cd1b69189c11f1fabb2ac6c21db1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-crt-math-l1-1-0.dll
        • Size 23KB
        • SHA256 8272d9aa75e1659b3ac2bc429cedf60c9c249ab4857db555493f18db7f67b5d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-multibyte-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 20KB
        • SHA256 843f6f1d94366c6be154a4eb8f70100fe64178904d6c532d56145c3957464afd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-private-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-crt-private-l1-1-0.dll
        • Size 65KB
        • SHA256 65220fd24910862c0b6aabeccb9b16d9aeaee1dbf97367c498468d2f26833757
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-crt-process-l1-1-0.dll
        • Size 13KB
        • SHA256 a6cd98f204655f16706e1ebf6392e64e56b4a0aa930c6b761fd426e072642a5a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 17KB
        • SHA256 e8576dd03c9eae33e952a858553f8d0c3197d594278f61214f806502c2768a60
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 18KB
        • SHA256 d65ff89fb1811888cd506b25cad1dbb6703337635b93ee4fac4f4f54328e580e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-crt-string-l1-1-0.dll
        • Size 19KB
        • SHA256 f7522818c7a5368cb006889f0948979b91b99baba3482a65bb20ef929ba6bd99
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-crt-time-l1-1-0.dll
        • Size 14KB
        • SHA256 88ed87934cd1ead8d17d27fb8d7d6fc40535c3165ccd24eb43202976b8e0b0f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\api-ms-win-crt-utility-l1-1-0.dll
        • Size 13KB
        • SHA256 9b4ee9cf03dc228f827d6407e69c94cec9ab24c50eba667f687f9e01cf2013ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        attach.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\attach.dll
        • Size 31KB
        • SHA256 4f10a4dce3d91ed4aed6c20638fe5803a58f01bee4ed1a2af4791df59a2afd63
        • MD5 SHA1 SHA512 SSDEEP TLSH

        awt.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\awt.dll
        • Size 1.3MB
        • SHA256 a8e888c70955fb472cb2d65261618ddaa69b4008f5cb70b31477f450d9d1d952
        • MD5 SHA1 SHA512 SSDEEP TLSH

        freetype.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\freetype.dll
        • Size 453KB
        • SHA256 931c6313707cea606f856bd5c8cbdccbc43baf759b3f8b65fe0c79654b5c36b7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        instrument.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\instrument.dll
        • Size 50KB
        • SHA256 98dd79ee908c7f3badcb8177056accba7a4aa2789231181ebb679b4e3784d70f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        java.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\java.dll
        • Size 130KB
        • SHA256 42213f26ae2105c2096d400b1be42eb9a7f5cbdd98cb18e0f909751973ca2bbc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jimage.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\jimage.dll
        • Size 34KB
        • SHA256 1f8c2c654a09b185b732ad5807d19bfa01b266bf15a4150e3a1e450837dc5d3e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jli.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\jli.dll
        • Size 87KB
        • SHA256 8bcb3194406c78b1a4f7ef27dead4019bd6eec724f2b8c0a62a0366d3476a78d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcp140.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\msvcp140.dll
        • Size 439KB
        • SHA256 c8e7456f4ac9aa65ef3ad61a6daf30efec9737344d173b2d6d2c16e752052a55
        • MD5 SHA1 SHA512 SSDEEP TLSH

        net.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\net.dll
        • Size 85KB
        • SHA256 87e435f2180575759fef03f240a02c555999e5c8003a2b81fade941547ac6413
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nio.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\nio.dll
        • Size 72KB
        • SHA256 36ed6d043398ed7e56b80bae24494f709107d69d36ca9643f301745f062fa418
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jvm.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\server\jvm.dll
        • Size 8.0MB
        • SHA256 a1516b3cfa2e791bdbae56975ed5975c1b69d1bbbbc05560ff92119edce89f1d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sunmscapi.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\sunmscapi.dll
        • Size 44KB
        • SHA256 85f4276968f68e1a8fff0404f93518f95dc26d8c94c975d9bc4c514bec626841
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\ucrtbase.dll
        • Size 1.1MB
        • SHA256 3d3b868ad1441c46ab0cdaf205927b1da75d458a9a0be74172256460503f49c9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcruntime140.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\vcruntime140.dll
        • Size 88KB
        • SHA256 c8e6089e6efe9573af55cf011c4e41b21235b2531f6c395faad53f410f22acaa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zip.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00123866300-complete\bin\zip.dll
        • Size 85KB
        • SHA256 3a44475f59e4fa39629aea7b81c5be0d109fce4e8da672a99b3d26e5ac9d4431
        • MD5 SHA1 SHA512 SSDEEP TLSH

        windowslauncher.exe

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapperTemp-1783893012-0-app\bin\windowslauncher.exe
        • Size 351KB
        • SHA256 f806cda68339016622cf78144d34a0c205dbdb510d71e4f72d10db0e1b45e397
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ADDITIONAL_LICENSE_INFO

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapperTemp-1783893012-0-app\legal\java.naming\ADDITIONAL_LICENSE_INFO
        • Size 48B
        • SHA256 d255311b0a181e243de326d111502a8b1dc7277b534a295a8340ab5230e74c83
        • MD5 SHA1 SHA512

        ASSEMBLY_EXCEPTION

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapperTemp-1783893012-0-app\legal\java.naming\ASSEMBLY_EXCEPTION
        • Size 43B
        • SHA256 7901499314e881a978d80a31970f0daec92d4995f3305e31fb53c38d9cc6ec3b
        • MD5 SHA1 SHA512

        LICENSE

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapperTemp-1783893012-0-app\legal\java.naming\LICENSE
        • Size 32B
        • SHA256 d60635c89c9f352ae1e66ef414344f290f5b5f7ce5c23d9633d41fde0909df80
        • MD5 SHA1 SHA512

        Wrapper-2026-07-12-22-49-49-171.log

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\logs\Wrapper-2026-07-12-22-49-49-171.log
        • Size 45KB
        • SHA256 1694ea7fa836e1fea2e27d78ef9905b433519f5574f39cb7e57cee6822bacbc5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/4184-481-0x0000000005BE0000-0x0000000005BE8000-memory.dmp

        memory/4184-552-0x0000000005C50000-0x0000000005C58000-memory.dmp

        memory/4184-462-0x0000000005B00000-0x0000000005B28000-memory.dmp

        memory/4184-467-0x0000000005BB8000-0x0000000005BC0000-memory.dmp

        memory/4184-466-0x0000000005B90000-0x0000000005B98000-memory.dmp

        memory/4184-465-0x0000000005B48000-0x0000000005B50000-memory.dmp

        memory/4184-469-0x0000000005BC0000-0x0000000005BC8000-memory.dmp

        memory/4184-472-0x0000000005BC8000-0x0000000005BD0000-memory.dmp

        memory/4184-471-0x0000000005B40000-0x0000000005B48000-memory.dmp

        memory/4184-456-0x0000000005BA8000-0x0000000005BB0000-memory.dmp

        memory/4184-476-0x0000000005BD0000-0x0000000005BD8000-memory.dmp

        memory/4184-479-0x0000000005BD8000-0x0000000005BE0000-memory.dmp

        memory/4184-478-0x0000000005B98000-0x0000000005BA0000-memory.dmp

        memory/4184-454-0x0000000005B28000-0x0000000005B30000-memory.dmp

        memory/4184-484-0x0000000005BE8000-0x0000000005BF0000-memory.dmp

        memory/4184-483-0x0000000005BA0000-0x0000000005BA8000-memory.dmp

        memory/4184-486-0x0000000005B28000-0x0000000005B30000-memory.dmp

        memory/4184-487-0x0000000005BF0000-0x0000000005BF8000-memory.dmp

        memory/4184-488-0x0000000002810000-0x0000000002811000-memory.dmp

        memory/4184-490-0x0000000005BA8000-0x0000000005BB0000-memory.dmp

        memory/4184-492-0x0000000005BB0000-0x0000000005BB8000-memory.dmp

        memory/4184-493-0x0000000005BF8000-0x0000000005C00000-memory.dmp

        memory/4184-497-0x0000000002810000-0x0000000002811000-memory.dmp

        memory/4184-496-0x0000000005BB8000-0x0000000005BC0000-memory.dmp

        memory/4184-450-0x0000000005BA0000-0x0000000005BA8000-memory.dmp

        memory/4184-503-0x0000000005C00000-0x0000000005C08000-memory.dmp

        memory/4184-502-0x0000000005BC0000-0x0000000005BC8000-memory.dmp

        memory/4184-505-0x0000000005BC8000-0x0000000005BD0000-memory.dmp

        memory/4184-506-0x0000000005C08000-0x0000000005C10000-memory.dmp

        memory/4184-511-0x0000000005C10000-0x0000000005C18000-memory.dmp

        memory/4184-510-0x0000000005BD0000-0x0000000005BD8000-memory.dmp

        memory/4184-515-0x0000000005BD8000-0x0000000005BE0000-memory.dmp

        memory/4184-516-0x0000000005C18000-0x0000000005C20000-memory.dmp

        memory/4184-521-0x0000000005C20000-0x0000000005C28000-memory.dmp

        memory/4184-520-0x0000000005BE0000-0x0000000005BE8000-memory.dmp

        memory/4184-449-0x0000000005B30000-0x0000000005B38000-memory.dmp

        memory/4184-526-0x0000000005C28000-0x0000000005C30000-memory.dmp

        memory/4184-525-0x0000000005BE8000-0x0000000005BF0000-memory.dmp

        memory/4184-529-0x0000000005BF0000-0x0000000005BF8000-memory.dmp

        memory/4184-530-0x0000000005C30000-0x0000000005C38000-memory.dmp

        memory/4184-441-0x0000000005B98000-0x0000000005BA0000-memory.dmp

        memory/4184-534-0x0000000004290000-0x00000000042B5000-memory.dmp

        memory/4184-439-0x0000000005B38000-0x0000000005B40000-memory.dmp

        memory/4184-541-0x0000000005C38000-0x0000000005C40000-memory.dmp

        memory/4184-544-0x0000000005C40000-0x0000000005C48000-memory.dmp

        memory/4184-543-0x0000000005BF8000-0x0000000005C00000-memory.dmp

        memory/4184-548-0x0000000005C48000-0x0000000005C50000-memory.dmp

        memory/4184-547-0x0000000002810000-0x0000000002811000-memory.dmp

        memory/4184-551-0x0000000005C00000-0x0000000005C08000-memory.dmp

        memory/4184-463-0x0000000005BB0000-0x0000000005BB8000-memory.dmp

        memory/4184-555-0x0000000005C08000-0x0000000005C10000-memory.dmp

        memory/4184-556-0x0000000005C58000-0x0000000005C60000-memory.dmp

        memory/4184-559-0x0000000005C60000-0x0000000005C68000-memory.dmp

        memory/4184-558-0x0000000005C10000-0x0000000005C18000-memory.dmp

        memory/4184-562-0x0000000005C68000-0x0000000005C70000-memory.dmp

        memory/4184-561-0x0000000005C18000-0x0000000005C20000-memory.dmp

        memory/4184-565-0x0000000005C70000-0x0000000005C78000-memory.dmp

        memory/4184-564-0x0000000005C20000-0x0000000005C28000-memory.dmp

        memory/4184-568-0x0000000005C78000-0x0000000005C80000-memory.dmp

        memory/4184-567-0x0000000005C28000-0x0000000005C30000-memory.dmp

        memory/4184-571-0x0000000005C80000-0x0000000005C88000-memory.dmp

        memory/4184-570-0x0000000005C30000-0x0000000005C38000-memory.dmp

        memory/4184-575-0x0000000005C88000-0x0000000005C90000-memory.dmp

        memory/4184-574-0x0000000005C38000-0x0000000005C40000-memory.dmp

        memory/4184-577-0x0000000005C40000-0x0000000005C48000-memory.dmp

        memory/4184-578-0x0000000005C90000-0x0000000005C98000-memory.dmp

        memory/4184-580-0x0000000005C48000-0x0000000005C50000-memory.dmp

        memory/4184-581-0x0000000005C98000-0x0000000005CA0000-memory.dmp

        memory/4184-583-0x0000000005C50000-0x0000000005C58000-memory.dmp

        memory/4184-584-0x0000000005CA0000-0x0000000005CA8000-memory.dmp

        memory/4184-587-0x0000000005CA8000-0x0000000005CB0000-memory.dmp

        memory/4184-586-0x0000000005C58000-0x0000000005C60000-memory.dmp

        memory/4184-590-0x0000000005CB0000-0x0000000005CB8000-memory.dmp

        memory/4184-589-0x0000000005C60000-0x0000000005C68000-memory.dmp

        memory/4184-593-0x0000000005C68000-0x0000000005C70000-memory.dmp

        memory/4184-594-0x0000000005CB8000-0x0000000005CC0000-memory.dmp

        memory/4184-603-0x0000000005CC0000-0x0000000005CC8000-memory.dmp

        memory/4184-602-0x0000000005C70000-0x0000000005C78000-memory.dmp

        memory/4184-607-0x0000000005CC8000-0x0000000005CD0000-memory.dmp

        memory/4184-606-0x0000000005C78000-0x0000000005C80000-memory.dmp

        memory/4184-609-0x0000000005C80000-0x0000000005C88000-memory.dmp

        memory/4184-610-0x0000000005CD0000-0x0000000005CD8000-memory.dmp

        memory/4184-615-0x0000000005C88000-0x0000000005C90000-memory.dmp

        memory/4184-616-0x0000000005CD8000-0x0000000005CE0000-memory.dmp

        memory/4184-619-0x0000000005CE0000-0x0000000005CE8000-memory.dmp

        memory/4184-618-0x0000000005C90000-0x0000000005C98000-memory.dmp

        memory/4184-621-0x0000000005C98000-0x0000000005CA0000-memory.dmp

        memory/4184-622-0x0000000005CE8000-0x0000000005CF0000-memory.dmp

        memory/4184-624-0x0000000005CA0000-0x0000000005CA8000-memory.dmp

        memory/4184-625-0x0000000005CF0000-0x0000000005CF8000-memory.dmp

        memory/4184-628-0x0000000005CF8000-0x0000000005D00000-memory.dmp

        memory/4184-627-0x0000000005CA8000-0x0000000005CB0000-memory.dmp

        memory/4184-630-0x0000000005CB0000-0x0000000005CB8000-memory.dmp

        memory/4184-631-0x0000000005D00000-0x0000000005D08000-memory.dmp

        memory/4184-436-0x0000000005B48000-0x0000000005B50000-memory.dmp

        memory/4184-438-0x0000000005B40000-0x0000000005B48000-memory.dmp

        memory/4184-437-0x0000000005B90000-0x0000000005B98000-memory.dmp

        memory/4184-413-0x0000000005B00000-0x0000000005B28000-memory.dmp