Overview

overview

7

Static

static

7

2026-07-23...op.exe

windows10-2004-x64

5

2026-07-23...op.exe

windows11-ltsc_2024-x64

4

Analysis

  • max time kernel
    150s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    24/07/2026, 00:27

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-23_0638d485f6fbf38adaff0dd3454ae130_amadey_elex_glassworm_poet-rat_smoke-loader_stop.exe
  • Size 13.6MB
  • Sample260724-ar9fpsdr2w
  • SHA256 4fe4de5eb1d050b4a16c1f58de68018c7259603168d6b4dd1295846d9ddbe7f9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
discovery

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-23_0638d485f6fbf38adaff0dd3454ae130_amadey_elex_glassworm_poet-rat_smoke-loader_stop.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-23_0638d485f6fbf38adaff0dd3454ae130_amadey_elex_glassworm_poet-rat_smoke-loader_stop.exe"
    1⤵
    • Checks computer location settings
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Checks processor information in registry
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1432
    • C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapperTemp-1784852883-0-app\bin\windowslauncher.exe
      "C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapperTemp-1784852883-0-app\bin\windowslauncher.exe" "-Xshare:dump"
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      PID:4792

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        flatlaf-windows-x86-5774346496200.dll
        • Path C:\Users\Admin\AppData\Local\Temp\flatlaf.temp\flatlaf-windows-x86-5774346496200.dll
        • Size 21KB
        • SHA256 bcf8306cf6e3a7c8e870cbb330a658c70b76d1b5f735c29b96396fddc95fa27b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        store
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWAppsSharedConfig\shared\settings\store
        • Size 103B
        • SHA256 0ba09b53d5fd6ff1712a12901a23b34419ef8e0dacc5254d0a087765b9a3c34d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        jwagent.jar
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-JWrapper-00124029069-complete\jwagent.jar
        • Size 4KB
        • SHA256 9007b9f5d594db535f90c942574e9bb89381d9401ca872e6655bddcc73d9e9d8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jwutils_win32.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-JWrapper-00124029069-complete\jwutils_win32.dll
        • Size 162KB
        • SHA256 c866a999b661e89543ef25dacdb696e2a0f770ef8dc35f3fdef68b5271f28db2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nativesplash.png
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-JWrapper-00124029069-complete\nativesplash.png
        • Size 16KB
        • SHA256 0ce6cc5bd65639c9420877a12f53d72660d9fe394c355caa810cb208db9dcf83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-console-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-console-l1-1-0.dll
        • Size 13KB
        • SHA256 62ba082dd02411c63852029267d0d841ba118d8bd68d9411211c93204a3b8b6d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-console-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-console-l1-2-0.dll
        • Size 12KB
        • SHA256 f98bfe24c4c91b4e1b918754a2b92bec092c61cd4b7cf94b767841dd5420b0c3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-datetime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-datetime-l1-1-0.dll
        • Size 12KB
        • SHA256 b0fea85255f179efb7a71ef81aed083826057bb5366e084acc8170f564743064
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-debug-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-debug-l1-1-0.dll
        • Size 12KB
        • SHA256 912c71c86e53df1b2c751456cd51a78a9d5b87e4d36b298671fd1c6c047df002
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-errorhandling-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 12KB
        • SHA256 fbebd7d36524e286e6145b891bdd53381a9fc7ec90b204297cdfe2b5bb596669
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-fibers-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-fibers-l1-1-0.dll
        • Size 12KB
        • SHA256 59d92b01d0b82ecb7fa0744f6721a0f4f19136af263a2b0d42c15dfe42e64658
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-fibers-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-fibers-l1-1-1.dll
        • Size 11KB
        • SHA256 fb6cdb66d7a40d9b0aab173608ffe3aabd4f2078be8dd0bcdc71c7344e19a31e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-file-l1-1-0.dll
        • Size 15KB
        • SHA256 6660b662445eaf4a9d921096f0e150cbd0223d7d3548b34b1cf16af0d6e27d6b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-file-l1-2-0.dll
        • Size 12KB
        • SHA256 3c10129daa43b4674a2e7f5833670a964df32bab674579d64422be4f4b491a97
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l2-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-file-l2-1-0.dll
        • Size 12KB
        • SHA256 2378e58e5e14bbd97efaeec67c869204b7e44cdc968941303be730429b405df8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-handle-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-handle-l1-1-0.dll
        • Size 12KB
        • SHA256 5ac76d6f588bcc8bf34a6e77d7ca67321c043f2c1b390826889aa65d97ba739b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-heap-l1-1-0.dll
        • Size 12KB
        • SHA256 c2a4e72b027ff463ace706c4ed70305e29cdaf9f420c462fe9e3dd1b2b7c8c45
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-interlocked-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 12KB
        • SHA256 a8d0435496bb66ea6401167899f838c401b15ccd07f08a421e0eed2430cbf7d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-kernel32-legacy-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-kernel32-legacy-l1-1-1.dll
        • Size 13KB
        • SHA256 4f729727288d6d5a2f6d85c64c133e13c89ebed42fef7289946d0096eaabc54b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-libraryloader-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 13KB
        • SHA256 b11b2082ccc104b47125750eff59c5cdec276c22bcd66992ce46d2a4bd3b61e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-localization-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-localization-l1-2-0.dll
        • Size 15KB
        • SHA256 aa61a486befcab89b2042bff5f0dd8b2e0d677e79b0f9ce8f1ffa81ae044bb86
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-memory-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-memory-l1-1-0.dll
        • Size 12KB
        • SHA256 d5199b54b29d7b489c6a1eac1bdb28a22e8fe6e90b3e7a4fe026df5bc1e97fa5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-namedpipe-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 12KB
        • SHA256 23f3e1b74ef0ff4e57bd0e544a3850f307ac4cedac0133da5754f9fb44f0a8a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processenvironment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 13KB
        • SHA256 e90454d87c4203c4df2078303d6b99870dfd3ff29724e4c7924a129f253c6f17
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 15KB
        • SHA256 6a6c9b2fa836dad3b4ec1fd719b5e2e1bc58d5c2afce49d8ab244fabd696ea64
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 12KB
        • SHA256 6224d1c684cf7eca00eeadaa1d6883bb6c03dcdb2bac2cd77b2231bae1de600d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-profile-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-profile-l1-1-0.dll
        • Size 12KB
        • SHA256 5488c6b90d281938cd83396fcb90d231bd3bc145aef4da3c5472a90a09b03d0f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-rtlsupport-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 12KB
        • SHA256 c4248669783715d7560cbc73d60dfb3fc9955df588fe9fc49b7372c7a3ac19bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-string-l1-1-0.dll
        • Size 12KB
        • SHA256 7f257d5d8a7382756d18344fde46e2df9839ca11c956e55fcc3b470c9d229702
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-synch-l1-1-0.dll
        • Size 14KB
        • SHA256 95a02d24caf2d568fe652d227dc3806b4b1b21a8d22bdaa7c5e90cf15a3c1cdb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-synch-l1-2-0.dll
        • Size 12KB
        • SHA256 00f4b1556082265347fbf97053c46e8035617432d665d299b59a95611293d7af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-sysinfo-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 13KB
        • SHA256 81670a4f3728cc59c120b0d67760f1fdf9f2c3d3fb1e41db53d2dc632d00d068
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-sysinfo-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-sysinfo-l1-2-0.dll
        • Size 12KB
        • SHA256 39d6122061ef5da05624d5e1d11b61241a653038f9bb16a63dcd781264a68214
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-timezone-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-timezone-l1-1-0.dll
        • Size 13KB
        • SHA256 f1cc2f221dbf6494171e04f29b0bc2281f83cc01d580027af1b6dadfe3ebd575
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-util-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-util-l1-1-0.dll
        • Size 12KB
        • SHA256 538d221cfaf3155bc53d22b18d8a25bf74366190aa36d1385d44edf1cdb06def
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-conio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-conio-l1-1-0.dll
        • Size 13KB
        • SHA256 bef0afddf359fbfeab70f712f4b7edbe96013c746c4e86ee59590b0cd05e02f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-convert-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-convert-l1-1-0.dll
        • Size 16KB
        • SHA256 f79a0c9daac06b9f591ad074c5fa50be10d093819bddf76a6fd6aa0b84e9338a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-environment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-environment-l1-1-0.dll
        • Size 13KB
        • SHA256 35b58af8ea73a99e23d353408e8addb42046930fcd27b93782ab8c6db4ea2724
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-filesystem-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 14KB
        • SHA256 db8f17406eec80e6b3d4249541cc2be56d5319166c4f725e1f8f45940f000571
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-heap-l1-1-0.dll
        • Size 13KB
        • SHA256 73382c18ddc9a9159c35d0d506501bb305f8824b894456a1da6efad44e200511
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-locale-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-locale-l1-1-0.dll
        • Size 13KB
        • SHA256 67b8b713fb9bed10217977af23fc60aa63d8cd1b69189c11f1fabb2ac6c21db1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-math-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-math-l1-1-0.dll
        • Size 23KB
        • SHA256 8272d9aa75e1659b3ac2bc429cedf60c9c249ab4857db555493f18db7f67b5d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-multibyte-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 20KB
        • SHA256 843f6f1d94366c6be154a4eb8f70100fe64178904d6c532d56145c3957464afd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-private-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-private-l1-1-0.dll
        • Size 65KB
        • SHA256 65220fd24910862c0b6aabeccb9b16d9aeaee1dbf97367c498468d2f26833757
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-process-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-process-l1-1-0.dll
        • Size 13KB
        • SHA256 a6cd98f204655f16706e1ebf6392e64e56b4a0aa930c6b761fd426e072642a5a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-runtime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 17KB
        • SHA256 e8576dd03c9eae33e952a858553f8d0c3197d594278f61214f806502c2768a60
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-stdio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 18KB
        • SHA256 d65ff89fb1811888cd506b25cad1dbb6703337635b93ee4fac4f4f54328e580e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-string-l1-1-0.dll
        • Size 19KB
        • SHA256 f7522818c7a5368cb006889f0948979b91b99baba3482a65bb20ef929ba6bd99
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-time-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-time-l1-1-0.dll
        • Size 14KB
        • SHA256 88ed87934cd1ead8d17d27fb8d7d6fc40535c3165ccd24eb43202976b8e0b0f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-utility-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-utility-l1-1-0.dll
        • Size 13KB
        • SHA256 9b4ee9cf03dc228f827d6407e69c94cec9ab24c50eba667f687f9e01cf2013ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        attach.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\attach.dll
        • Size 31KB
        • SHA256 4f10a4dce3d91ed4aed6c20638fe5803a58f01bee4ed1a2af4791df59a2afd63
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        awt.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\awt.dll
        • Size 1.3MB
        • SHA256 a8e888c70955fb472cb2d65261618ddaa69b4008f5cb70b31477f450d9d1d952
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        instrument.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\instrument.dll
        • Size 50KB
        • SHA256 98dd79ee908c7f3badcb8177056accba7a4aa2789231181ebb679b4e3784d70f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\java.dll
        • Size 130KB
        • SHA256 42213f26ae2105c2096d400b1be42eb9a7f5cbdd98cb18e0f909751973ca2bbc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jimage.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\jimage.dll
        • Size 34KB
        • SHA256 1f8c2c654a09b185b732ad5807d19bfa01b266bf15a4150e3a1e450837dc5d3e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jli.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\jli.dll
        • Size 87KB
        • SHA256 8bcb3194406c78b1a4f7ef27dead4019bd6eec724f2b8c0a62a0366d3476a78d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msvcp140.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\msvcp140.dll
        • Size 439KB
        • SHA256 c8e7456f4ac9aa65ef3ad61a6daf30efec9737344d173b2d6d2c16e752052a55
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        net.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\net.dll
        • Size 85KB
        • SHA256 87e435f2180575759fef03f240a02c555999e5c8003a2b81fade941547ac6413
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nio.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\nio.dll
        • Size 72KB
        • SHA256 36ed6d043398ed7e56b80bae24494f709107d69d36ca9643f301745f062fa418
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jvm.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\server\jvm.dll
        • Size 8.0MB
        • SHA256 a1516b3cfa2e791bdbae56975ed5975c1b69d1bbbbc05560ff92119edce89f1d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sunmscapi.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\sunmscapi.dll
        • Size 44KB
        • SHA256 85f4276968f68e1a8fff0404f93518f95dc26d8c94c975d9bc4c514bec626841
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\ucrtbase.dll
        • Size 1.1MB
        • SHA256 3d3b868ad1441c46ab0cdaf205927b1da75d458a9a0be74172256460503f49c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vcruntime140.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\vcruntime140.dll
        • Size 88KB
        • SHA256 c8e6089e6efe9573af55cf011c4e41b21235b2531f6c395faad53f410f22acaa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zip.dll
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\zip.dll
        • Size 85KB
        • SHA256 3a44475f59e4fa39629aea7b81c5be0d109fce4e8da672a99b3d26e5ac9d4431
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        windowslauncher.exe
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapperTemp-1784852883-0-app\bin\windowslauncher.exe
        • Size 351KB
        • SHA256 3d17eeff158efe79be0475942c81d912e6541141138306646920abb513f74acc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ADDITIONAL_LICENSE_INFO
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapperTemp-1784852883-0-app\legal\java.naming\ADDITIONAL_LICENSE_INFO
        • Size 48B
        • SHA256 d255311b0a181e243de326d111502a8b1dc7277b534a295a8340ab5230e74c83
        • MD5 SHA1 SHA512
        Submit Download

        ASSEMBLY_EXCEPTION
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapperTemp-1784852883-0-app\legal\java.naming\ASSEMBLY_EXCEPTION
        • Size 43B
        • SHA256 7901499314e881a978d80a31970f0daec92d4995f3305e31fb53c38d9cc6ec3b
        • MD5 SHA1 SHA512
        Submit Download

        LICENSE
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapperTemp-1784852883-0-app\legal\java.naming\LICENSE
        • Size 32B
        • SHA256 d60635c89c9f352ae1e66ef414344f290f5b5f7ce5c23d9633d41fde0909df80
        • MD5 SHA1 SHA512
        Submit Download

        Wrapper-2026-07-24-01-28-01-937.log
        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\logs\Wrapper-2026-07-24-01-28-01-937.log
        • Size 46KB
        • SHA256 cda5c67e367b8fe5173a4e1de8083dbdbc46e6393163b3a7bdb6f7d3bf2f9942
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/1432-479-0x00000000049C8000-0x00000000049D0000-memory.dmp
        Download

        memory/1432-549-0x0000000004A28000-0x0000000004A30000-memory.dmp
        Download

        memory/1432-467-0x00000000049E8000-0x00000000049F0000-memory.dmp
        Download

        memory/1432-470-0x00000000049F0000-0x00000000049F8000-memory.dmp
        Download

        memory/1432-469-0x00000000049C0000-0x00000000049C8000-memory.dmp
        Download

        memory/1432-468-0x0000000004978000-0x0000000004980000-memory.dmp
        Download

        memory/1432-466-0x00000000049E0000-0x00000000049E8000-memory.dmp
        Download

        memory/1432-465-0x0000000004930000-0x0000000004958000-memory.dmp
        Download

        memory/1432-473-0x00000000049F8000-0x0000000004A00000-memory.dmp
        Download

        memory/1432-472-0x0000000004970000-0x0000000004978000-memory.dmp
        Download

        memory/1432-455-0x0000000004958000-0x0000000004960000-memory.dmp
        Download

        memory/1432-477-0x0000000004A00000-0x0000000004A08000-memory.dmp
        Download

        memory/1432-480-0x0000000004A08000-0x0000000004A10000-memory.dmp
        Download

        memory/1432-451-0x00000000049D0000-0x00000000049D8000-memory.dmp
        Download

        memory/1432-483-0x0000000004A10000-0x0000000004A18000-memory.dmp
        Download

        memory/1432-485-0x00000000049D0000-0x00000000049D8000-memory.dmp
        Download

        memory/1432-486-0x0000000004A18000-0x0000000004A20000-memory.dmp
        Download

        memory/1432-490-0x0000000004958000-0x0000000004960000-memory.dmp
        Download

        memory/1432-499-0x00000000049E8000-0x00000000049F0000-memory.dmp
        Download

        memory/1432-498-0x00000000049E0000-0x00000000049E8000-memory.dmp
        Download

        memory/1432-497-0x0000000004A20000-0x0000000004A28000-memory.dmp
        Download

        memory/1432-496-0x00000000049D8000-0x00000000049E0000-memory.dmp
        Download

        memory/1432-450-0x0000000004960000-0x0000000004968000-memory.dmp
        Download

        memory/1432-484-0x0000000002620000-0x0000000002621000-memory.dmp
        Download

        memory/1432-500-0x0000000004A28000-0x0000000004A30000-memory.dmp
        Download

        memory/1432-503-0x0000000004A30000-0x0000000004A38000-memory.dmp
        Download

        memory/1432-502-0x00000000049F0000-0x00000000049F8000-memory.dmp
        Download

        memory/1432-510-0x0000000004A38000-0x0000000004A40000-memory.dmp
        Download

        memory/1432-509-0x00000000049F8000-0x0000000004A00000-memory.dmp
        Download

        memory/1432-515-0x0000000004A40000-0x0000000004A48000-memory.dmp
        Download

        memory/1432-514-0x0000000004A00000-0x0000000004A08000-memory.dmp
        Download

        memory/1432-520-0x0000000004A48000-0x0000000004A50000-memory.dmp
        Download

        memory/1432-519-0x0000000004A08000-0x0000000004A10000-memory.dmp
        Download

        memory/1432-442-0x00000000049C8000-0x00000000049D0000-memory.dmp
        Download

        memory/1432-530-0x0000000004A10000-0x0000000004A18000-memory.dmp
        Download

        memory/1432-531-0x0000000004A50000-0x0000000004A58000-memory.dmp
        Download

        memory/1432-440-0x0000000004968000-0x0000000004970000-memory.dmp
        Download

        memory/1432-534-0x0000000004A58000-0x0000000004A60000-memory.dmp
        Download

        memory/1432-533-0x0000000004A18000-0x0000000004A20000-memory.dmp
        Download

        memory/1432-526-0x000000002AA80000-0x000000002AAA5000-memory.dmp
        Download

        memory/1432-542-0x0000000004A20000-0x0000000004A28000-memory.dmp
        Download

        memory/1432-541-0x0000000002620000-0x0000000002621000-memory.dmp
        Download

        memory/1432-540-0x0000000004A68000-0x0000000004A70000-memory.dmp
        Download

        memory/1432-539-0x0000000004A60000-0x0000000004A68000-memory.dmp
        Download

        memory/1432-545-0x0000000004A70000-0x0000000004A78000-memory.dmp
        Download

        memory/1432-439-0x0000000004970000-0x0000000004978000-memory.dmp
        Download

        memory/1432-552-0x0000000004A30000-0x0000000004A38000-memory.dmp
        Download

        memory/1432-551-0x0000000004A80000-0x0000000004A88000-memory.dmp
        Download

        memory/1432-550-0x0000000004A78000-0x0000000004A80000-memory.dmp
        Download

        memory/1432-457-0x00000000049D8000-0x00000000049E0000-memory.dmp
        Download

        memory/1432-555-0x0000000004A38000-0x0000000004A40000-memory.dmp
        Download

        memory/1432-556-0x0000000004A88000-0x0000000004A90000-memory.dmp
        Download

        memory/1432-563-0x0000000004A48000-0x0000000004A50000-memory.dmp
        Download

        memory/1432-562-0x0000000004A98000-0x0000000004AA0000-memory.dmp
        Download

        memory/1432-568-0x0000000004AA0000-0x0000000004AA8000-memory.dmp
        Download

        memory/1432-566-0x0000000004A50000-0x0000000004A58000-memory.dmp
        Download

        memory/1432-561-0x0000000004A90000-0x0000000004A98000-memory.dmp
        Download

        memory/1432-560-0x0000000004A40000-0x0000000004A48000-memory.dmp
        Download

        memory/1432-571-0x0000000004AA8000-0x0000000004AB0000-memory.dmp
        Download

        memory/1432-570-0x0000000004A58000-0x0000000004A60000-memory.dmp
        Download

        memory/1432-575-0x0000000004AB0000-0x0000000004AB8000-memory.dmp
        Download

        memory/1432-574-0x0000000004A68000-0x0000000004A70000-memory.dmp
        Download

        memory/1432-573-0x0000000004A60000-0x0000000004A68000-memory.dmp
        Download

        memory/1432-578-0x0000000004AB8000-0x0000000004AC0000-memory.dmp
        Download

        memory/1432-580-0x0000000004A70000-0x0000000004A78000-memory.dmp
        Download

        memory/1432-579-0x0000000004AC0000-0x0000000004AC8000-memory.dmp
        Download

        memory/1432-583-0x0000000004A78000-0x0000000004A80000-memory.dmp
        Download

        memory/1432-587-0x0000000004AD8000-0x0000000004AE0000-memory.dmp
        Download

        memory/1432-586-0x0000000004AD0000-0x0000000004AD8000-memory.dmp
        Download

        memory/1432-591-0x0000000004AE0000-0x0000000004AE8000-memory.dmp
        Download

        memory/1432-590-0x0000000004A88000-0x0000000004A90000-memory.dmp
        Download

        memory/1432-585-0x0000000004AC8000-0x0000000004AD0000-memory.dmp
        Download

        memory/1432-584-0x0000000004A80000-0x0000000004A88000-memory.dmp
        Download

        memory/1432-605-0x0000000004AF8000-0x0000000004B00000-memory.dmp
        Download

        memory/1432-604-0x0000000004AF0000-0x0000000004AF8000-memory.dmp
        Download

        memory/1432-610-0x0000000004B00000-0x0000000004B08000-memory.dmp
        Download

        memory/1432-609-0x0000000004AA0000-0x0000000004AA8000-memory.dmp
        Download

        memory/1432-602-0x0000000004A98000-0x0000000004AA0000-memory.dmp
        Download

        memory/1432-617-0x0000000004AB0000-0x0000000004AB8000-memory.dmp
        Download

        memory/1432-616-0x0000000004B10000-0x0000000004B18000-memory.dmp
        Download

        memory/1432-615-0x0000000004B08000-0x0000000004B10000-memory.dmp
        Download

        memory/1432-614-0x0000000004AA8000-0x0000000004AB0000-memory.dmp
        Download

        memory/1432-603-0x0000000004AE8000-0x0000000004AF0000-memory.dmp
        Download

        memory/1432-600-0x0000000004A90000-0x0000000004A98000-memory.dmp
        Download

        memory/1432-621-0x0000000004B18000-0x0000000004B20000-memory.dmp
        Download

        memory/1432-620-0x0000000004AC0000-0x0000000004AC8000-memory.dmp
        Download

        memory/1432-619-0x0000000004AB8000-0x0000000004AC0000-memory.dmp
        Download

        memory/1432-623-0x0000000004B20000-0x0000000004B28000-memory.dmp
        Download

        memory/1432-628-0x0000000004B28000-0x0000000004B30000-memory.dmp
        Download

        memory/1432-627-0x0000000004AD8000-0x0000000004AE0000-memory.dmp
        Download

        memory/1432-626-0x0000000004AD0000-0x0000000004AD8000-memory.dmp
        Download

        memory/1432-625-0x0000000004AC8000-0x0000000004AD0000-memory.dmp
        Download

        memory/1432-630-0x0000000004B30000-0x0000000004B38000-memory.dmp
        Download

        memory/1432-633-0x0000000004AE8000-0x0000000004AF0000-memory.dmp
        Download

        memory/1432-632-0x0000000004AE0000-0x0000000004AE8000-memory.dmp
        Download

        memory/1432-437-0x0000000004978000-0x0000000004980000-memory.dmp
        Download

        memory/1432-438-0x00000000049C0000-0x00000000049C8000-memory.dmp
        Download

        memory/1432-413-0x0000000004930000-0x0000000004958000-memory.dmp
        Download