Analysis

  • max time kernel
    150s
  • max time network
    126s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/07/2026, 21:28

General

  • Target
    2026-07-30_3511388e7f6faa2a02750f9a19f861fa_amadey_elex_glassworm_poet-rat_smoke-loader_stop.exe
  • Size 13.6MB
  • Sample260730-1bcpxagj2x
  • SHA256 ce63d43b78145ced165ac57e0e72cf6379e68aad5935e06049375146d3f67111
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-30_3511388e7f6faa2a02750f9a19f861fa_amadey_elex_glassworm_poet-rat_smoke-loader_stop.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-30_3511388e7f6faa2a02750f9a19f861fa_amadey_elex_glassworm_poet-rat_smoke-loader_stop.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Checks processor information in registry
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:6516
    • C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapperTemp-1785446899-0-app\bin\windowslauncher.exe
      "C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapperTemp-1785446899-0-app\bin\windowslauncher.exe" "-Xshare:dump"
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      PID:5404

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        JWrapper-Windows32JRE-version[1].txt

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\UUDBCMNF\JWrapper-Windows32JRE-version[1].txt
        • Size 11B
        • SHA256 9ffdaaac2a4bb2a917e4684aea1a59c43e4d122e5525fb1fbaaba7119369dda6
        • MD5 SHA1 SHA512

        flatlaf-windows-x86-6101101888200.dll

        • Path C:\Users\Admin\AppData\Local\Temp\flatlaf.temp\flatlaf-windows-x86-6101101888200.dll
        • Size 21KB
        • SHA256 bcf8306cf6e3a7c8e870cbb330a658c70b76d1b5f735c29b96396fddc95fa27b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        store

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWAppsSharedConfig\shared\settings\store
        • Size 103B
        • SHA256 48f67f3d9185f294caabf70ded1c2b387390439d5791d51f8bf9a95d0eb78dd7
        • MD5 SHA1 SHA512 TLSH

        jwagent.jar

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-JWrapper-00124029069-complete\jwagent.jar
        • Size 4KB
        • SHA256 9007b9f5d594db535f90c942574e9bb89381d9401ca872e6655bddcc73d9e9d8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jwutils_win32.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-JWrapper-00124029069-complete\jwutils_win32.dll
        • Size 162KB
        • SHA256 c866a999b661e89543ef25dacdb696e2a0f770ef8dc35f3fdef68b5271f28db2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nativesplash.png

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-JWrapper-00124029069-complete\nativesplash.png
        • Size 14KB
        • SHA256 966931541fc1d98033618d2603c20fc753829a4822ad8b036f3d9ef554a2a367
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-console-l1-1-0.dll
        • Size 13KB
        • SHA256 62ba082dd02411c63852029267d0d841ba118d8bd68d9411211c93204a3b8b6d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-console-l1-2-0.dll
        • Size 12KB
        • SHA256 f98bfe24c4c91b4e1b918754a2b92bec092c61cd4b7cf94b767841dd5420b0c3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-datetime-l1-1-0.dll
        • Size 12KB
        • SHA256 b0fea85255f179efb7a71ef81aed083826057bb5366e084acc8170f564743064
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-debug-l1-1-0.dll
        • Size 12KB
        • SHA256 912c71c86e53df1b2c751456cd51a78a9d5b87e4d36b298671fd1c6c047df002
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 12KB
        • SHA256 fbebd7d36524e286e6145b891bdd53381a9fc7ec90b204297cdfe2b5bb596669
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-fibers-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-fibers-l1-1-0.dll
        • Size 12KB
        • SHA256 59d92b01d0b82ecb7fa0744f6721a0f4f19136af263a2b0d42c15dfe42e64658
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-fibers-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-fibers-l1-1-1.dll
        • Size 11KB
        • SHA256 fb6cdb66d7a40d9b0aab173608ffe3aabd4f2078be8dd0bcdc71c7344e19a31e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-file-l1-1-0.dll
        • Size 15KB
        • SHA256 6660b662445eaf4a9d921096f0e150cbd0223d7d3548b34b1cf16af0d6e27d6b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-file-l1-2-0.dll
        • Size 12KB
        • SHA256 3c10129daa43b4674a2e7f5833670a964df32bab674579d64422be4f4b491a97
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-file-l2-1-0.dll
        • Size 12KB
        • SHA256 2378e58e5e14bbd97efaeec67c869204b7e44cdc968941303be730429b405df8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-handle-l1-1-0.dll
        • Size 12KB
        • SHA256 5ac76d6f588bcc8bf34a6e77d7ca67321c043f2c1b390826889aa65d97ba739b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-heap-l1-1-0.dll
        • Size 12KB
        • SHA256 c2a4e72b027ff463ace706c4ed70305e29cdaf9f420c462fe9e3dd1b2b7c8c45
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 12KB
        • SHA256 a8d0435496bb66ea6401167899f838c401b15ccd07f08a421e0eed2430cbf7d4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-kernel32-legacy-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-kernel32-legacy-l1-1-1.dll
        • Size 13KB
        • SHA256 4f729727288d6d5a2f6d85c64c133e13c89ebed42fef7289946d0096eaabc54b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 13KB
        • SHA256 b11b2082ccc104b47125750eff59c5cdec276c22bcd66992ce46d2a4bd3b61e7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-localization-l1-2-0.dll
        • Size 15KB
        • SHA256 aa61a486befcab89b2042bff5f0dd8b2e0d677e79b0f9ce8f1ffa81ae044bb86
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-memory-l1-1-0.dll
        • Size 12KB
        • SHA256 d5199b54b29d7b489c6a1eac1bdb28a22e8fe6e90b3e7a4fe026df5bc1e97fa5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 12KB
        • SHA256 23f3e1b74ef0ff4e57bd0e544a3850f307ac4cedac0133da5754f9fb44f0a8a6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 13KB
        • SHA256 e90454d87c4203c4df2078303d6b99870dfd3ff29724e4c7924a129f253c6f17
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 15KB
        • SHA256 6a6c9b2fa836dad3b4ec1fd719b5e2e1bc58d5c2afce49d8ab244fabd696ea64
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 12KB
        • SHA256 6224d1c684cf7eca00eeadaa1d6883bb6c03dcdb2bac2cd77b2231bae1de600d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-profile-l1-1-0.dll
        • Size 12KB
        • SHA256 5488c6b90d281938cd83396fcb90d231bd3bc145aef4da3c5472a90a09b03d0f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 12KB
        • SHA256 c4248669783715d7560cbc73d60dfb3fc9955df588fe9fc49b7372c7a3ac19bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-string-l1-1-0.dll
        • Size 12KB
        • SHA256 7f257d5d8a7382756d18344fde46e2df9839ca11c956e55fcc3b470c9d229702
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-synch-l1-1-0.dll
        • Size 14KB
        • SHA256 95a02d24caf2d568fe652d227dc3806b4b1b21a8d22bdaa7c5e90cf15a3c1cdb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-synch-l1-2-0.dll
        • Size 12KB
        • SHA256 00f4b1556082265347fbf97053c46e8035617432d665d299b59a95611293d7af
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 13KB
        • SHA256 81670a4f3728cc59c120b0d67760f1fdf9f2c3d3fb1e41db53d2dc632d00d068
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-sysinfo-l1-2-0.dll
        • Size 12KB
        • SHA256 39d6122061ef5da05624d5e1d11b61241a653038f9bb16a63dcd781264a68214
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-timezone-l1-1-0.dll
        • Size 13KB
        • SHA256 f1cc2f221dbf6494171e04f29b0bc2281f83cc01d580027af1b6dadfe3ebd575
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-core-util-l1-1-0.dll
        • Size 12KB
        • SHA256 538d221cfaf3155bc53d22b18d8a25bf74366190aa36d1385d44edf1cdb06def
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-conio-l1-1-0.dll
        • Size 13KB
        • SHA256 bef0afddf359fbfeab70f712f4b7edbe96013c746c4e86ee59590b0cd05e02f9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-convert-l1-1-0.dll
        • Size 16KB
        • SHA256 f79a0c9daac06b9f591ad074c5fa50be10d093819bddf76a6fd6aa0b84e9338a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-environment-l1-1-0.dll
        • Size 13KB
        • SHA256 35b58af8ea73a99e23d353408e8addb42046930fcd27b93782ab8c6db4ea2724
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 14KB
        • SHA256 db8f17406eec80e6b3d4249541cc2be56d5319166c4f725e1f8f45940f000571
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-heap-l1-1-0.dll
        • Size 13KB
        • SHA256 73382c18ddc9a9159c35d0d506501bb305f8824b894456a1da6efad44e200511
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-locale-l1-1-0.dll
        • Size 13KB
        • SHA256 67b8b713fb9bed10217977af23fc60aa63d8cd1b69189c11f1fabb2ac6c21db1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-math-l1-1-0.dll
        • Size 23KB
        • SHA256 8272d9aa75e1659b3ac2bc429cedf60c9c249ab4857db555493f18db7f67b5d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-multibyte-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 20KB
        • SHA256 843f6f1d94366c6be154a4eb8f70100fe64178904d6c532d56145c3957464afd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-private-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-private-l1-1-0.dll
        • Size 65KB
        • SHA256 65220fd24910862c0b6aabeccb9b16d9aeaee1dbf97367c498468d2f26833757
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-process-l1-1-0.dll
        • Size 13KB
        • SHA256 a6cd98f204655f16706e1ebf6392e64e56b4a0aa930c6b761fd426e072642a5a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 17KB
        • SHA256 e8576dd03c9eae33e952a858553f8d0c3197d594278f61214f806502c2768a60
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 18KB
        • SHA256 d65ff89fb1811888cd506b25cad1dbb6703337635b93ee4fac4f4f54328e580e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-string-l1-1-0.dll
        • Size 19KB
        • SHA256 f7522818c7a5368cb006889f0948979b91b99baba3482a65bb20ef929ba6bd99
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-time-l1-1-0.dll
        • Size 14KB
        • SHA256 88ed87934cd1ead8d17d27fb8d7d6fc40535c3165ccd24eb43202976b8e0b0f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\api-ms-win-crt-utility-l1-1-0.dll
        • Size 13KB
        • SHA256 9b4ee9cf03dc228f827d6407e69c94cec9ab24c50eba667f687f9e01cf2013ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        attach.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\attach.dll
        • Size 31KB
        • SHA256 4f10a4dce3d91ed4aed6c20638fe5803a58f01bee4ed1a2af4791df59a2afd63
        • MD5 SHA1 SHA512 SSDEEP TLSH

        awt.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\awt.dll
        • Size 1.3MB
        • SHA256 a8e888c70955fb472cb2d65261618ddaa69b4008f5cb70b31477f450d9d1d952
        • MD5 SHA1 SHA512 SSDEEP TLSH

        freetype.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\freetype.dll
        • Size 453KB
        • SHA256 931c6313707cea606f856bd5c8cbdccbc43baf759b3f8b65fe0c79654b5c36b7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        instrument.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\instrument.dll
        • Size 50KB
        • SHA256 98dd79ee908c7f3badcb8177056accba7a4aa2789231181ebb679b4e3784d70f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        java.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\java.dll
        • Size 130KB
        • SHA256 42213f26ae2105c2096d400b1be42eb9a7f5cbdd98cb18e0f909751973ca2bbc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jimage.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\jimage.dll
        • Size 34KB
        • SHA256 1f8c2c654a09b185b732ad5807d19bfa01b266bf15a4150e3a1e450837dc5d3e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jli.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\jli.dll
        • Size 87KB
        • SHA256 8bcb3194406c78b1a4f7ef27dead4019bd6eec724f2b8c0a62a0366d3476a78d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcp140.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\msvcp140.dll
        • Size 439KB
        • SHA256 c8e7456f4ac9aa65ef3ad61a6daf30efec9737344d173b2d6d2c16e752052a55
        • MD5 SHA1 SHA512 SSDEEP TLSH

        net.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\net.dll
        • Size 85KB
        • SHA256 87e435f2180575759fef03f240a02c555999e5c8003a2b81fade941547ac6413
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nio.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\nio.dll
        • Size 72KB
        • SHA256 36ed6d043398ed7e56b80bae24494f709107d69d36ca9643f301745f062fa418
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jvm.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\server\jvm.dll
        • Size 8.0MB
        • SHA256 a1516b3cfa2e791bdbae56975ed5975c1b69d1bbbbc05560ff92119edce89f1d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sunmscapi.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\sunmscapi.dll
        • Size 44KB
        • SHA256 85f4276968f68e1a8fff0404f93518f95dc26d8c94c975d9bc4c514bec626841
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\ucrtbase.dll
        • Size 1.1MB
        • SHA256 3d3b868ad1441c46ab0cdaf205927b1da75d458a9a0be74172256460503f49c9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcruntime140.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\vcruntime140.dll
        • Size 88KB
        • SHA256 c8e6089e6efe9573af55cf011c4e41b21235b2531f6c395faad53f410f22acaa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zip.dll

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapper-Windows32JRE-00124017500-complete\bin\zip.dll
        • Size 85KB
        • SHA256 3a44475f59e4fa39629aea7b81c5be0d109fce4e8da672a99b3d26e5ac9d4431
        • MD5 SHA1 SHA512 SSDEEP TLSH

        windowslauncher.exe

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapperTemp-1785446899-0-app\bin\windowslauncher.exe
        • Size 351KB
        • SHA256 3d17eeff158efe79be0475942c81d912e6541141138306646920abb513f74acc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ADDITIONAL_LICENSE_INFO

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapperTemp-1785446899-0-app\legal\java.naming\ADDITIONAL_LICENSE_INFO
        • Size 48B
        • SHA256 d255311b0a181e243de326d111502a8b1dc7277b534a295a8340ab5230e74c83
        • MD5 SHA1 SHA512

        ASSEMBLY_EXCEPTION

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapperTemp-1785446899-0-app\legal\java.naming\ASSEMBLY_EXCEPTION
        • Size 43B
        • SHA256 7901499314e881a978d80a31970f0daec92d4995f3305e31fb53c38d9cc6ec3b
        • MD5 SHA1 SHA512

        LICENSE

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\JWrapper-Remote Support Bundle-\JWrapperTemp-1785446899-0-app\legal\java.naming\LICENSE
        • Size 32B
        • SHA256 d60635c89c9f352ae1e66ef414344f290f5b5f7ce5c23d9633d41fde0909df80
        • MD5 SHA1 SHA512

        Wrapper-2026-07-30-22-28-17-751.log

        • Path C:\Users\Admin\AppData\Roaming\JWrapper-Remote Support\logs\Wrapper-2026-07-30-22-28-17-751.log
        • Size 45KB
        • SHA256 27a4aa4df4e8d39d5351679a3cff646329a2fcfceb8648fe668e2c0ddc76851b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/6516-482-0x00000000069F0000-0x00000000069F8000-memory.dmp

        memory/6516-552-0x0000000006A10000-0x0000000006A18000-memory.dmp

        memory/6516-464-0x00000000069C0000-0x00000000069C8000-memory.dmp

        memory/6516-468-0x00000000069C8000-0x00000000069D0000-memory.dmp

        memory/6516-467-0x00000000069A0000-0x00000000069A8000-memory.dmp

        memory/6516-466-0x0000000006958000-0x0000000006960000-memory.dmp

        memory/6516-470-0x00000000069D0000-0x00000000069D8000-memory.dmp

        memory/6516-472-0x0000000006950000-0x0000000006958000-memory.dmp

        memory/6516-473-0x00000000069D8000-0x00000000069E0000-memory.dmp

        memory/6516-475-0x00000000069E0000-0x00000000069E8000-memory.dmp

        memory/6516-457-0x00000000069B8000-0x00000000069C0000-memory.dmp

        memory/6516-479-0x00000000069A8000-0x00000000069B0000-memory.dmp

        memory/6516-480-0x00000000069E8000-0x00000000069F0000-memory.dmp

        memory/6516-455-0x0000000006938000-0x0000000006940000-memory.dmp

        memory/6516-484-0x00000000069B0000-0x00000000069B8000-memory.dmp

        memory/6516-485-0x00000000069F8000-0x0000000006A00000-memory.dmp

        memory/6516-486-0x00000000031A0000-0x00000000031A1000-memory.dmp

        memory/6516-489-0x00000000031A0000-0x00000000031A1000-memory.dmp

        memory/6516-492-0x0000000006A00000-0x0000000006A08000-memory.dmp

        memory/6516-491-0x00000000069B8000-0x00000000069C0000-memory.dmp

        memory/6516-487-0x0000000006938000-0x0000000006940000-memory.dmp

        memory/6516-497-0x00000000069C0000-0x00000000069C8000-memory.dmp

        memory/6516-453-0x00000000069B0000-0x00000000069B8000-memory.dmp

        memory/6516-500-0x00000000069C8000-0x00000000069D0000-memory.dmp

        memory/6516-501-0x0000000006A08000-0x0000000006A10000-memory.dmp

        memory/6516-504-0x0000000006A10000-0x0000000006A18000-memory.dmp

        memory/6516-503-0x00000000069D0000-0x00000000069D8000-memory.dmp

        memory/6516-510-0x0000000006A18000-0x0000000006A20000-memory.dmp

        memory/6516-508-0x00000000069D8000-0x00000000069E0000-memory.dmp

        memory/6516-516-0x0000000006A20000-0x0000000006A28000-memory.dmp

        memory/6516-515-0x00000000069E0000-0x00000000069E8000-memory.dmp

        memory/6516-519-0x0000000006A28000-0x0000000006A30000-memory.dmp

        memory/6516-518-0x00000000069E8000-0x00000000069F0000-memory.dmp

        memory/6516-449-0x0000000006940000-0x0000000006948000-memory.dmp

        memory/6516-525-0x0000000006A30000-0x0000000006A38000-memory.dmp

        memory/6516-523-0x00000000069F0000-0x00000000069F8000-memory.dmp

        memory/6516-528-0x0000000006A38000-0x0000000006A40000-memory.dmp

        memory/6516-527-0x00000000069F8000-0x0000000006A00000-memory.dmp

        memory/6516-442-0x00000000069A8000-0x00000000069B0000-memory.dmp

        memory/6516-532-0x00000000031A0000-0x00000000031C5000-memory.dmp

        memory/6516-537-0x0000000006A40000-0x0000000006A48000-memory.dmp

        memory/6516-440-0x0000000006948000-0x0000000006950000-memory.dmp

        memory/6516-543-0x0000000006A48000-0x0000000006A50000-memory.dmp

        memory/6516-542-0x0000000006A00000-0x0000000006A08000-memory.dmp

        memory/6516-546-0x0000000006A50000-0x0000000006A58000-memory.dmp

        memory/6516-545-0x00000000031A0000-0x00000000031A1000-memory.dmp

        memory/6516-549-0x0000000006A58000-0x0000000006A60000-memory.dmp

        memory/6516-548-0x0000000006A08000-0x0000000006A10000-memory.dmp

        memory/6516-553-0x0000000006A60000-0x0000000006A68000-memory.dmp

        memory/6516-463-0x0000000006910000-0x0000000006938000-memory.dmp

        memory/6516-556-0x0000000006A68000-0x0000000006A70000-memory.dmp

        memory/6516-555-0x0000000006A18000-0x0000000006A20000-memory.dmp

        memory/6516-558-0x0000000006A20000-0x0000000006A28000-memory.dmp

        memory/6516-559-0x0000000006A70000-0x0000000006A78000-memory.dmp

        memory/6516-561-0x0000000006A28000-0x0000000006A30000-memory.dmp

        memory/6516-562-0x0000000006A78000-0x0000000006A80000-memory.dmp

        memory/6516-565-0x0000000006A30000-0x0000000006A38000-memory.dmp

        memory/6516-566-0x0000000006A80000-0x0000000006A88000-memory.dmp

        memory/6516-567-0x0000000006A38000-0x0000000006A40000-memory.dmp

        memory/6516-568-0x0000000006A88000-0x0000000006A90000-memory.dmp

        memory/6516-571-0x0000000006A90000-0x0000000006A98000-memory.dmp

        memory/6516-570-0x0000000006A40000-0x0000000006A48000-memory.dmp

        memory/6516-574-0x0000000006A48000-0x0000000006A50000-memory.dmp

        memory/6516-575-0x0000000006A98000-0x0000000006AA0000-memory.dmp

        memory/6516-578-0x0000000006AA0000-0x0000000006AA8000-memory.dmp

        memory/6516-577-0x0000000006A50000-0x0000000006A58000-memory.dmp

        memory/6516-580-0x0000000006A58000-0x0000000006A60000-memory.dmp

        memory/6516-581-0x0000000006AA8000-0x0000000006AB0000-memory.dmp

        memory/6516-585-0x0000000006AB0000-0x0000000006AB8000-memory.dmp

        memory/6516-584-0x0000000006A60000-0x0000000006A68000-memory.dmp

        memory/6516-589-0x0000000006AB8000-0x0000000006AC0000-memory.dmp

        memory/6516-588-0x0000000006A68000-0x0000000006A70000-memory.dmp

        memory/6516-592-0x0000000006AC0000-0x0000000006AC8000-memory.dmp

        memory/6516-591-0x0000000006A70000-0x0000000006A78000-memory.dmp

        memory/6516-594-0x0000000006A78000-0x0000000006A80000-memory.dmp

        memory/6516-595-0x0000000006AC8000-0x0000000006AD0000-memory.dmp

        memory/6516-598-0x0000000006AD0000-0x0000000006AD8000-memory.dmp

        memory/6516-597-0x0000000006A80000-0x0000000006A88000-memory.dmp

        memory/6516-603-0x0000000006A90000-0x0000000006A98000-memory.dmp

        memory/6516-604-0x0000000006AE0000-0x0000000006AE8000-memory.dmp

        memory/6516-606-0x0000000006A98000-0x0000000006AA0000-memory.dmp

        memory/6516-602-0x0000000006AD8000-0x0000000006AE0000-memory.dmp

        memory/6516-600-0x0000000006A88000-0x0000000006A90000-memory.dmp

        memory/6516-607-0x0000000006AE8000-0x0000000006AF0000-memory.dmp

        memory/6516-611-0x0000000006AF0000-0x0000000006AF8000-memory.dmp

        memory/6516-610-0x0000000006AA0000-0x0000000006AA8000-memory.dmp

        memory/6516-614-0x0000000006AF8000-0x0000000006B00000-memory.dmp

        memory/6516-613-0x0000000006AA8000-0x0000000006AB0000-memory.dmp

        memory/6516-617-0x0000000006B00000-0x0000000006B08000-memory.dmp

        memory/6516-616-0x0000000006AB0000-0x0000000006AB8000-memory.dmp

        memory/6516-625-0x0000000006AB8000-0x0000000006AC0000-memory.dmp

        memory/6516-626-0x0000000006B08000-0x0000000006B10000-memory.dmp

        memory/6516-632-0x0000000006B10000-0x0000000006B18000-memory.dmp

        memory/6516-631-0x0000000006AC0000-0x0000000006AC8000-memory.dmp

        memory/6516-439-0x0000000006950000-0x0000000006958000-memory.dmp

        memory/6516-437-0x0000000006958000-0x0000000006960000-memory.dmp

        memory/6516-438-0x00000000069A0000-0x00000000069A8000-memory.dmp

        memory/6516-414-0x0000000006910000-0x0000000006938000-memory.dmp