6c04a994524bc861714c4a325328df0c2ad9f2306e15cc45a9bf0c03d8d611c0

Analysis

user interaction
yes
max time kernel
900s
max time network
480s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 15:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ejx.exe
Size 23.4MB
Sample260730-srtpcsvtas
SHA256 6c04a994524bc861714c4a325328df0c2ad9f2306e15cc45a9bf0c03d8d611c0
MD5 e1a025c75721db232315bf9961adbb43
SHA1 d92c94e3e7e3acb3822e87704957964d443c0ce0
SHA512 00d05721ba9011e9a9cb7d4d435fb6e6938fb4976d660517b75170f670bec59961fe6f510e526578c753037dc77710c71af21a2a41b08f9cf2b8f5f3fc41241c
SSDEEP 393216:0UF0D/V63MUjb40GdyQIBd7DUgWoY85Lnfzwi5iVt34UiWfkF7G71sy:BHHmd/Ijwv85IFV2TWfKa7x
TLSH
T10F37333FB28B613EE06E5A36B972A251413B6721A4134C57D7F4C84CCF590B11E3EB9A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution installer persistence

Malware Config

Signatures

Creates new service(s) 2 TTPs
persistence execution

Windows Service
T1543.003

Service Execution
T1569.002

Executes dropped EXE 4 IoCs

pid	Process
4360	ejx.tmp
3704	EJX.exe
5096	EJXHelperService.exe
4560	EJXCore.exe

Loads dropped DLL 21 IoCs

pid	Process
3704	EJX.exe
3704	EJX.exe
3704	EJX.exe
3704	EJX.exe
3704	EJX.exe
3704	EJX.exe
3704	EJX.exe
3704	EJX.exe
3704	EJX.exe
3704	EJX.exe
3704	EJX.exe
3704	EJX.exe
3704	EJX.exe
3704	EJX.exe
3704	EJX.exe
3704	EJX.exe
3704	EJX.exe
3704	EJX.exe
3704	EJX.exe
3704	EJX.exe
5096	EJXHelperService.exe

Stops running service(s) 4 TTPs
defense_evasion execution

Windows Service
T1543.003

Impair Defenses
T1562

Service Stop
T1489

Service Execution
T1569.002
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 62 IoCs

description	ioc	Process
File created	C:\Program Files\EJX\is-D4WC6TNUNC.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\is-TVO2YSW8DI.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\shaders\is-15SU4VKNBM.tmp	ejx.tmp
File created	C:\Program Files\EJX\is-O3W7AHX7KB.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\is-MW1UVE4OCD.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\assets\fonts\is-UKAZKVJ6US.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\assets\fonts\is-2E2CHF6K5T.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\shaders\is-M9F0P68G1F.tmp	ejx.tmp
File created	C:\Program Files\EJX\is-ZDT9EHZZKQ.tmp	ejx.tmp
File created	C:\Program Files\EJX\is-BQPD37INZ3.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\is-47QX91272I.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\assets\ejx\is-1TNWT2H0F0.tmp	ejx.tmp
File created	C:\Program Files\EJX\is-11J17WGINP.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\assets\fonts\is-ZLTSVTQ5QY.tmp	ejx.tmp
File opened for modification	C:\Program Files\EJX\unins000.dat	ejx.tmp
File created	C:\Program Files\EJX\is-POBJVX8OFT.tmp	ejx.tmp
File created	C:\Program Files\EJX\is-EFUYC3R98E.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\is-YQDTOYBF2O.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\assets\ejx\is-P3RUL3JA9Z.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\assets\ejx\is-WNF1EPCXOA.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\assets\ejx\ads\is-4BK87APFW5.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\assets\ejx\ads\is-Y9Y6869CQO.tmp	ejx.tmp
File created	C:\Program Files\EJX\is-MHHI6KQC8E.tmp	ejx.tmp
File created	C:\Program Files\EJX\is-123SIZWQJ6.tmp	ejx.tmp
File created	C:\Program Files\EJX\is-AS3VCEDTT6.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\assets\ejx\is-PODN3TA500.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\assets\ejx\tray\is-IPS4ZC3FF7.tmp	ejx.tmp
File created	C:\Program Files\EJX\is-O3JN93JM9U.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\assets\ejx\is-IW0HV557O5.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\assets\ejx\tray\is-K47HJSKWWG.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\fonts\is-K6DI2BSLHJ.tmp	ejx.tmp
File created	C:\Program Files\EJX\is-FHL5UGADFN.tmp	ejx.tmp
File created	C:\Program Files\EJX\is-BV5OACAWIM.tmp	ejx.tmp
File created	C:\Program Files\EJX\is-IYFCIBMBP3.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\assets\ejx\is-1XE4ZN77VH.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\assets\ejx\tray\is-V7QM3VP4Q1.tmp	ejx.tmp
File created	C:\Program Files\EJX\is-IM8QT0PCP5.tmp	ejx.tmp
File created	C:\Program Files\EJX\unins000.dat	ejx.tmp
File created	C:\Program Files\EJX\is-AF0OXH2JCC.tmp	ejx.tmp
File created	C:\Program Files\EJX\is-HC56XT50EB.tmp	ejx.tmp
File created	C:\Program Files\EJX\is-LFIVMYRKKW.tmp	ejx.tmp
File created	C:\Program Files\EJX\is-MNAKG35UDA.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\assets\ejx\is-WIMKYU4D05.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\assets\ejx\tray\is-NTOVP4HOF2.tmp	ejx.tmp
File created	C:\Program Files\EJX\is-H3YCR0X6WK.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\assets\ejx\is-8EPIWGKVP1.tmp	ejx.tmp
File created	C:\Program Files\EJX\is-W6SPTLZ684.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\is-KPO3R7C9AT.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\assets\fonts\is-O8C6WN8CBZ.tmp	ejx.tmp
File created	C:\Program Files\EJX\is-WLQUS5HWQT.tmp	ejx.tmp
File created	C:\Program Files\EJX\is-024XP1UD5B.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\is-ZT9SUSERT6.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\assets\ejx\is-ITG7UBES39.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\assets\ejx\is-BX7Q6WDKM2.tmp	ejx.tmp
File created	C:\Program Files\EJX\is-0BFKJPRWNO.tmp	ejx.tmp
File created	C:\Program Files\EJX\is-HL51H7BK3S.tmp	ejx.tmp
File created	C:\Program Files\EJX\is-MVRZ735MBU.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\assets\ejx\is-KGYJWDH86V.tmp	ejx.tmp
File created	C:\Program Files\EJX\is-HJMITN2Q3F.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\assets\ejx\tray\is-V524P3ADL5.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\assets\ejx\tray\is-5JZUGPL7ES.tmp	ejx.tmp
File created	C:\Program Files\EJX\data\flutter_assets\packages\flutter_js\assets\js\is-HA5ZCCFWWG.tmp	ejx.tmp

Launches sc.exe 9 IoCs

Sc.exe is a Windows utlilty to control services on the system.

pid	Process
1716	sc.exe
3424	sc.exe
2248	sc.exe
5416	sc.exe
3368	sc.exe
2828	sc.exe
2760	sc.exe
5060	sc.exe
4800	sc.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4448	cmd.exe

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ejx.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ejx.tmp

Inno Setup is an open-source installation builder for Windows applications. 2 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral2/memory/4180-1-0x0000000000960000-0x0000000000A3C000-memory.dmp	innosetup
behavioral2/memory/4180-8-0x0000000000960000-0x0000000000A3C000-memory.dmp	innosetup

Kills process with taskkill 6 IoCs

defense_evasion

pid	Process
3224	taskkill.exe
1452	taskkill.exe
5508	taskkill.exe
3436	taskkill.exe
4824	taskkill.exe
4616	taskkill.exe

Modifies registry class 13 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3989226554-2204910950-1522900112-1000_Classes\ejx\ = "URL:ejx Protocol"	ejx.tmp
Set value (str)	\REGISTRY\USER\S-1-5-21-3989226554-2204910950-1522900112-1000_Classes\ejx\URL Protocol	ejx.tmp
Set value (str)	\REGISTRY\USER\S-1-5-21-3989226554-2204910950-1522900112-1000_Classes\ejx\DefaultIcon\ = "C:\\Program Files\\EJX\\EJX.exe,0"	ejx.tmp
Key created	\REGISTRY\USER\S-1-5-21-3989226554-2204910950-1522900112-1000_Classes\ejx\shell\open\command	ejx.tmp
Key created	\REGISTRY\USER\S-1-5-21-3989226554-2204910950-1522900112-1000_Classes\ejx\shell	ejx.tmp
Key created	\REGISTRY\USER\S-1-5-21-3989226554-2204910950-1522900112-1000_Classes\ejx\shell\open	ejx.tmp
Set value (str)	\REGISTRY\USER\S-1-5-21-3989226554-2204910950-1522900112-1000_Classes\ejx\shell\open\command\ = "\"C:\\Program Files\\EJX\\EJX.exe\" \"%1\""	ejx.tmp
Key created	\REGISTRY\USER\S-1-5-21-3989226554-2204910950-1522900112-1000_Classes\ejx\DefaultIcon	ejx.tmp
Key created	\REGISTRY\USER\S-1-5-21-3989226554-2204910950-1522900112-1000_Classes\ejx	EJX.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3989226554-2204910950-1522900112-1000_Classes\ejx\URL Protocol	EJX.exe
Key created	\REGISTRY\USER\S-1-5-21-3989226554-2204910950-1522900112-1000_Classes\ejx\shell\open\command	EJX.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3989226554-2204910950-1522900112-1000_Classes\ejx\shell\open\command\ = "\"C:\\Program Files\\EJX\\EJX.exe\" \"%1\""	EJX.exe
Key created	\REGISTRY\USER\S-1-5-21-3989226554-2204910950-1522900112-1000_Classes\ejx	ejx.tmp

Suspicious use of AdjustPrivilegeToken 8 IoCs

description	pid	Process
Token: SeDebugPrivilege	4824	taskkill.exe
Token: SeDebugPrivilege	4616	taskkill.exe
Token: SeDebugPrivilege	3224	taskkill.exe
Token: SeDebugPrivilege	1452	taskkill.exe
Token: SeDebugPrivilege	5508	taskkill.exe
Token: SeDebugPrivilege	3436	taskkill.exe
Token: SeShutdownPrivilege	3704	EJX.exe
Token: SeCreatePagefilePrivilege	3704	EJX.exe

Suspicious use of FindShellTrayWindow 5 IoCs

pid	Process
4360	ejx.tmp
3704	EJX.exe
3704	EJX.exe
3704	EJX.exe
3704	EJX.exe

Suspicious use of SendNotifyMessage 3 IoCs

pid	Process
3704	EJX.exe
3704	EJX.exe
3704	EJX.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3704	EJX.exe
3704	EJX.exe
3704	EJX.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 4180 wrote to memory of 4360	4180	ejx.exe	89
PID 4360 wrote to memory of 2828	4360	ejx.tmp	90
PID 4360 wrote to memory of 4824	4360	ejx.tmp	92
PID 4360 wrote to memory of 4616	4360	ejx.tmp	95
PID 4360 wrote to memory of 3224	4360	ejx.tmp	97
PID 4360 wrote to memory of 1452	4360	ejx.tmp	99
PID 4360 wrote to memory of 5508	4360	ejx.tmp	101
PID 4360 wrote to memory of 3436	4360	ejx.tmp	103
PID 4360 wrote to memory of 3424	4360	ejx.tmp	106
PID 4360 wrote to memory of 3704	4360	ejx.tmp	108
PID 3704 wrote to memory of 2760	3704	EJX.exe	109
PID 3704 wrote to memory of 5060	3704	EJX.exe	111
PID 3704 wrote to memory of 2248	3704	EJX.exe	113
PID 3704 wrote to memory of 4448	3704	EJX.exe	115
PID 4448 wrote to memory of 4800	4448	cmd.exe	117
PID 3704 wrote to memory of 5416	3704	EJX.exe	118
PID 4448 wrote to memory of 3368	4448	cmd.exe	120
PID 3704 wrote to memory of 1716	3704	EJX.exe	122
PID 5096 wrote to memory of 4560	5096	EJXHelperService.exe	124

C:\Users\Admin\AppData\Local\Temp\ejx.exe
"C:\Users\Admin\AppData\Local\Temp\ejx.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4180
- C:\Users\Admin\AppData\Local\Temp\is-C8DDZ2CIGN.tmp\ejx.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-C8DDZ2CIGN.tmp\ejx.tmp" /SL5="$400AE,23327863,842240,C:\Users\Admin\AppData\Local\Temp\ejx.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Modifies registry class
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4360
- - C:\Windows\SYSTEM32\sc.exe
    "sc.exe" stop "EJXHelperService"
    3⤵
    - Launches sc.exe
    PID:2828
- - C:\Windows\SYSTEM32\taskkill.exe
    "taskkill" /im EJX.exe
    3⤵
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:4824
- - C:\Windows\SYSTEM32\taskkill.exe
    "taskkill" /im EJXCore.exe
    3⤵
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:4616
- - C:\Windows\SYSTEM32\taskkill.exe
    "taskkill" /im EJXHelperService.exe
    3⤵
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:3224
- - C:\Windows\SYSTEM32\taskkill.exe
    "taskkill" /f /im EJX.exe
    3⤵
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:1452
- - C:\Windows\SYSTEM32\taskkill.exe
    "taskkill" /f /im EJXCore.exe
    3⤵
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:5508
- - C:\Windows\SYSTEM32\taskkill.exe
    "taskkill" /f /im EJXHelperService.exe
    3⤵
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:3436
- - C:\Windows\system32\sc.exe
    "sc.exe" start "EJXHelperService"
    3⤵
    - Launches sc.exe
    PID:3424
- - C:\Program Files\EJX\EJX.exe
    "C:\Program Files\EJX\\EJX.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Modifies registry class
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:3704
  - - C:\Windows\SYSTEM32\sc.exe
      sc query EJXHelperService
      4⤵
      Launches sc.exe
      PID:2760
  - - C:\Windows\SYSTEM32\sc.exe
      sc query EJXHelperService
      4⤵
      Launches sc.exe
      PID:5060
  - - C:\Windows\SYSTEM32\sc.exe
      sc query EJXHelperService
      4⤵
      Launches sc.exe
      PID:2248
  - - C:\Windows\System32\cmd.exe
      "C:\Windows\System32\cmd.exe" /c sc create EJXHelperService binPath= "C:\Program Files\EJX\EJXHelperService.exe" start= auto && sc start EJXHelperService
      4⤵
      Executes a command shell one-liner
      Suspicious use of WriteProcessMemory
      PID:4448
    - - C:\Windows\system32\sc.exe
        
        sc create EJXHelperService binPath= "C:\Program Files\EJX\EJXHelperService.exe" start= auto
        5⤵
        Launches sc.exe
        
        PID:4800
    - - C:\Windows\system32\sc.exe
        
        sc start EJXHelperService
        5⤵
        Launches sc.exe
        
        PID:3368
  - - C:\Windows\SYSTEM32\sc.exe
      sc query EJXHelperService
      4⤵
      Launches sc.exe
      PID:5416
  - - C:\Windows\SYSTEM32\sc.exe
      sc query EJXHelperService
      4⤵
      Launches sc.exe
      PID:1716

C:\Program Files\EJX\EJXHelperService.exe
"C:\Program Files\EJX\EJXHelperService.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:5096
- C:\Program Files\EJX\EJXCore.exe
  "C:\Program Files\EJX\EJXCore.exe" 50032 C:\Users\Admin\AppData\Roaming\com.ejx\home
  2⤵
  - Executes dropped EXE
  PID:4560

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1576

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:1420

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

System Services

T1569

Service Execution

T1569.002

Persistence

Create or Modify System Process

T1543

Windows Service

T1543.003

Privilege Escalation

Create or Modify System Process

T1543

Windows Service

T1543.003

Defense Evasion

Impair Defenses

T1562

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

T1489

Replay Monitor

Loading Replay Monitor...

Downloads

EJX.exe

Path C:\Program Files\EJX\EJX.exe
Size 96KB
SHA256 31d69703c8964f8f176f549193ba7bf15bd3e5c443c83df25f4dde7d74858ac9
MD5 75df107fd511d94a42d393e3b73aa439
SHA1 42bbe398577a07017d2740be3e94654b5fdcb0e8
SHA512 7bb5b5e1d45a61e0d34cd43a0199d8d90336dae6bea0ba4495beaa444874fe6e39a7791dcab269bbae43f8424cb04f231a5bbdbd7c7db64ae093183b705a2bcb
SSDEEP 1536:TcqxYA/VDLZ4HhQKxxvIEiP6wC5eaWhlzbu8ovX2iJkrW3dZEx7QCiQV81:Qqxd/BmHhpgEO6HzWrzbu+iJkrOZEiAc
TLSH
T1C5A34C27EA1810EAD229C47DCA578946DB73BC9A47A097CF4B900ED70E67AD45F3E201
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EJXCore.exe

Path C:\Program Files\EJX\EJXCore.exe
Size 39.4MB
SHA256 8685be06352ead2d75b1b2dd830a44a390b00e4b5d258fd4d155051100ca12da
MD5 6ef4322c47a4fe2d25865d8e4f8ab954
SHA1 6eb4baf11816163851fbf0ef13aaf91c8dcfcbd7
SHA512 286347ee1cfdb189abd5571379f2a27eade395908e99e9372487995b124ce1e3227132d2eaf929044a422033c908fdeed47075901ab088060172f2222fa1ee7c
SSDEEP 393216:MGEwdIHgGD3JxHCLlZddEqfsCJ6iX7aCY:MGEuIHgGDTH6lZdqC84XY
TLSH
T19997494BFD2508E5E4AEC839C5A656237B713C65572423D72B10FA142F3EFE06ABA710
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EJXHelperService.exe

Path C:\Program Files\EJX\EJXHelperService.exe
Size 704KB
SHA256 79db865230aa5f2be77b487e08bdedd5b9ff24aee3e19f0a26923cfaacfdad98
MD5 1e5a4f036eeabff3f83940ebedb5a393
SHA1 654ea209034fb5f969eac382d81437522aa0c2d9
SHA512 eff5dba9e9f4463fe967e3b9b4b5fc9dad10a11b5ce06a2fe4fede9b56e4ae3b7bf2f8995f2a7e526a1331dddcfadba6cebc16a6abf4b2c0441eb83dd7619365
SSDEEP 12288:KXCObKsj4KjkBLX3iGrIj1we2ug7fgXdybyZS:WCObKsj4KjEX3iwGALgJS
TLSH
T10DE45B13FA9581FCD05AC074831A9633FA72B88A0B3575FF06D456313E69EA1AF2D718
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSVCP140.dll

Path C:\Program Files\EJX\MSVCP140.dll
Size 544KB
SHA256 0f885b509a685d2bbfa652fed26b5fb31d88fbdab0a978c641d1c7b8aa460aa9
MD5 bc88b387cafa556068b5c5d6ff3ccc8f
SHA1 b370eca8fa727e46cf61d834fcc956698b02e1fd
SHA512 b7aee12e1bf86027e3c42ae28f6f6fb34dca81c1f5af6983ea4aac559f2fedf945956a381f529c553d71bc83cd71dcbad12266fad86c944f17f63db92b8ca95b
SSDEEP 12288:tdkDYbKloU7/7mozO39V5WZyhNFdQEKZm+jWodEEVLa69sU:tdnGoU/7m/V5WZ8dQEKZm+jWodEER7N
TLSH
T10BC41A27F74A06B0E195E3B8A1838702D7F1BC598322E3C752EB955D2F573D0A63B690
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VCRUNTIME140.dll

Path C:\Program Files\EJX\VCRUNTIME140.dll
Size 121KB
SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
MD5 6ca4edb2b52ec46c7fca3fd372ca6c00
SHA1 3d2998a27d164dd7cc3bc7d3eca08acf89a0ee42
SHA512 bda93ff2c306c82f1942ebd538f5c77ba593e3e20792159b2a2f5ebd086c524f6c6bd3de5ad722c71ff7d832d0149608289929e9b23f7858ebb960dbb3422f5f
SSDEEP 3072:ltkenID0f6aifkHWBXjG/Iuecbfmg4DCUil:YWSIHWBXjGlecbfYmN
TLSH
T1E4C36C42B2B401FBD16ED174C2A6AE23FB76B84547209BDF07A58A640F53BE06D3D345
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app_links_plugin.dll

Path C:\Program Files\EJX\app_links_plugin.dll
Size 136KB
SHA256 b9063f2b68c426b710bbcaca309bdd96aff3323a100a02ee5dc4b33a09dbf928
MD5 c5c6d20ba9eeb2003ff253cf7a68dad1
SHA1 396b9114e70de460fb39d74441744871de7a6064
SHA512 28fb6d8224cd3de32abbd4ac0dbb82272a99a1d937d6a1ed1d3feacff731326dc8bb2629057f26483a4b83bd1f17ecf8fdf97926b8c7332754b1d1274812bb32
SSDEEP 3072:UTZB3vnv6YEQa6XhiCKk02nhMpZdTdcCc9GTamSEC:UTZB3Pv6YEQa6E2nhMpZdTdcC7TamSE
TLSH
T1BED36D2BF71940A7E25AC07CCA534945EBB2B8910BA197CF17500B9B1F27BE85E7E311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

connectivity_plus_plugin.dll

Path C:\Program Files\EJX\connectivity_plus_plugin.dll
Size 97KB
SHA256 e01644346c127300ae22ac2da1991b0a3e657a9175521444501674055c550768
MD5 777dd233ff875d1ae51e6a1b35b2e071
SHA1 060a7424d948804b948fb13a713424e00b869360
SHA512 09ded2c3373fe7f81b6ccb8fb7b86c429bcf8f2455b27741f9254e497a551f4b79a5da53a9ad34702f1fbe2faf8ac82568a48166c8c1026d62f2c49a2d897dc5
SSDEEP 1536:S4k9FrGV4x6TqhGx7WH2G/BiVQgPRCm2XPMAfC/y4iCL:R+rGV4x6HqH2G5isXPMAfC/yPq
TLSH
T145A32A3BBA5D50ABE219C4BCCA574945DB72B8854791A7CF17900A9B0F2BFE40F3E601
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.so

Path C:\Program Files\EJX\data\app.so
Size 10.8MB
SHA256 c4355ee27e1d6fa4f49e8bbdd89cb14d801374145d9291ab50032f10b3560dc2
MD5 bac493f5f9df008bbf6f83673a713096
SHA1 1e6ab222d17b77093e5df472d150cc969066bb9d
SHA512 e22049090b179333b1a4b4200e46a0962541a103b69a2b6a4b24d1ed77552b3983adb5349dea753fe5289f82e2d5c8e20e338f8a50f60146d998cf0de1673039
SSDEEP 196608:pviasyiLmjVwWYG7TgiwHz7NrB1gu8mgW99QX5vhNpHFt:pKasyiLmjVwWYG7TgiwHgNp
TLSH
T13AB60947D4E48760E473E772BB5F26A59E2078DC4A34778706D45A663E8BCE04ACE332
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AssetManifest.bin

Path C:\Program Files\EJX\data\flutter_assets\AssetManifest.bin
Size 1KB
SHA256 eafaf4f627f62750fb6ed398223fa8b3502e92edd21d787f2c11184121ef1b28
MD5 a7ef18a07c71502a5e6b3d0b5ca41bdd
SHA1 d1a7c14f8a00a2d0880f917c5f663a9622ad842a
SHA512 8ca840bdb7115009f1a970222e8a21ad5948bdf5856648360546d7e005dc7915d6e457bf1977f04981396c2a78fc380b2bb96a575f0aab0abdda122e9f4e59f7
TLSH
T1FE31D51897A5B5A939107326E89805C25C4F6B896464F1FF7339C498B985CFA08FBCF2
MD5 SHA1 SHA512 TLSH

Submit Download

FontManifest.json

Path C:\Program Files\EJX\data\flutter_assets\FontManifest.json
Size 392B
SHA256 3b25f92ac19a244e66650f5c974350eee79ff2e7dd6998510ef8a25137e4ef97
MD5 d1b0e7e12ab95ecc3783a1c7530fb470
SHA1 4b0c9f50e249c4982dc097bc3da04b4409e8160b
SHA512 1f471350cc442afdb66254da43327727aabbc3b4d8126d1d9979860afe01b7bd53667ec277648c2236ba257d8334201831130ce2d5b93298221d4f96c5394a40
TLSH
T16DE0650F492606B550CCD89AF067559274952F1B324DFC0FD6711EE4A6F031013747BB
MD5 SHA1 SHA512 TLSH

Submit Download

NativeAssetsManifest.json

Path C:\Program Files\EJX\data\flutter_assets\NativeAssetsManifest.json
Size 45B
SHA256 9548a31e4a048135c1d94f919328bfb62ae2c7bb3cab96557c7941daa97776cb
MD5 f3a664e105b4f792c6c7fe4e4d22c398
SHA1 adee29ec4f2b3cb2ec37ec3368f37ff805695d36
SHA512 b7df555970e20c6a50f650cd0df6ab782fba7004782b3f7921ccfd314db53bfb61523986628d2e05d085f4c2263dfcf54000ffdfc946b0158c5766fc6f1d0a86
MD5 SHA1 SHA512

Submit Download

reklama.webp

Path C:\Program Files\EJX\data\flutter_assets\assets\ejx\ads\reklama.webp
Size 15KB
SHA256 6f24c1fcc94fb558158f00b6b041e57bbd5730e54cd817ef6d0314acdc20cf6e
MD5 f699274ab5fef27d9b6d21f02b6eec59
SHA1 501b73119ca364f62611df33ca2bbfca2156dd01
SHA512 e061afa69f40440e95d0186b8a4402d3c9c9cb3fc2c7c8af2a1708d1b1b6578aae1d521ec9daca8db3198d2309aeccbeb8727ad764c7104054df6178eb94ab97
SSDEEP 384:HI4z1AjoZ/MATkE6yPL4k8l3ysuYu2aIghKN:HIsBil3yx1gtN
TLSH
T11C62D187F5CB1617FB032AE21287BDFA58A7E959E714A8EE934042F7809D711D803C4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

logo.svg

Path C:\Program Files\EJX\data\flutter_assets\assets\ejx\logo.svg
Size 9KB
SHA256 fea66473a90f2fe12374990de4de3238cbe83c93e6ea9aeb4933fd5c60c5141c
MD5 24030a1011ab502c6381ae49d71f5100
SHA1 9345fefacad091f58f40f0e5fd075b76a9083267
SHA512 7b171b293931102c2c09b2e330a5f11be8b8d8cbd4c609e0c37f7b94eed7a4c268dd4275e1c974c6cc66288ecc73674c6db5589e6931a4463e5bf65885fe0f8f
SSDEEP 192:LG7+K8RmUZcgjLWdMXjqo1Gu0Mv44JcuaGAEvqRz/PDo6:LGD8kUZcgjLWEjqo1Gu0MQ4uuaV9RDz
TLSH
T1511274EE9BEBA3F5E003F3F4CB5058697A5F14F66A23CE14C7A91D0AD96206D9014C82
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.svg

Path C:\Program Files\EJX\data\flutter_assets\assets\ejx\settings.svg
Size 1KB
SHA256 91f7aa95dda55d2f73a358c56f665bf353ee68bee3bbe9058422c1e49f9a3fd3
MD5 13ec5970cb74adc866dd82a6ffa701d5
SHA1 c88415edff50145d87f88362ec3cff72bdc89398
SHA512 7c1cf398301caf6bbf6450c338341be596ed0eeb88ff84bb4f1dadfa18bdd3a9b4a889b79f45deac95cbe74202d7e18c4d3333d7de005dba620097366181562e
TLSH
T1924186F6828C3AD4D146ABF0CC3B68F4754F74FB2A03DDD64394A9C8DA1208C500A554
MD5 SHA1 SHA512 TLSH

Submit Download

support.svg

Path C:\Program Files\EJX\data\flutter_assets\assets\ejx\support.svg
Size 1KB
SHA256 e3d6fdc8a71ab37fc5e819bf328d90095ef9e153d152cff139172957a2662464
MD5 37ae15cb12880faa2f459d332cded743
SHA1 83b97afd989b6338d3396e806398152e6bb5331f
SHA512 917a344add81c5537c66de27ff728650fe9e67a749824db52ec794c38cc0f9cab034b6ac86c0af27b3597dacd84e7162c3f234c829dedc942b3bce3ac9580a81
TLSH
T191219A61A1D1B551D2C583FE4A37F28673AF38A93F554746C2B8CEB8B9A291ECC0CC45
MD5 SHA1 SHA512 TLSH

Submit Download

inactive.ico

Path C:\Program Files\EJX\data\flutter_assets\assets\ejx\tray\inactive.ico
Size 4KB
SHA256 27b077d51e59977c9614123e20d4e12dc9d1abb9dcbe91faf198ae6849963c72
MD5 3013f686e4028268fd63121f1d34ee7f
SHA1 a5d2b56947df2279f0503d2078b75f5537430adc
SHA512 870cdf5b3b297c4a6af87c0582335904f6c24e28b4ec2aed296269bb6f3022debcfd6cf82307671b21baa4b60b51e6048e00be996366eb14fbecea5e84bbab40
SSDEEP 96:EFAvJIBBB3KoLcac9CM67K2lqzgIEs5TPCPx6KeSY:n7oLcacwe2lqz6s5T6PxjY
TLSH
T13D919517883C509DEC3E04B1486B78FA0E7F453DCE583A1605E473BA6106A9A6BB9E81
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Jost-Medium.ttf

Path C:\Program Files\EJX\data\flutter_assets\assets\fonts\Jost-Medium.ttf
Size 60KB
SHA256 07aebfbb345c3e5faca53cdc2cdb09bfae3cd696358a79d153060625129ef580
MD5 090175d88161f36142c3b541783ca73b
SHA1 4a4abef46a165bc7468d240f70fdb948f12e97f7
SHA512 58ffbb67b60d60565582f7430e315ee3a709018d50a0e286953f46cd0ff8cbdc56fd5f25a0419bb0f5007a4d3a3e444308ec850f17b15316ffb30667d2663139
SSDEEP 768:7oj5X/xwClUQQsyaDWl0B4BTjuJVM74nP5IPscHttQ7MH6/a8FEjQ4P43nGsyXLV:LsETjuJVM74nP5YsQttI/IQuUnGZXLPN
TLSH
T15D531906D373935EE3172E7C46B3D22695C9EC36D6A6437DC10DE617F8EA8A09E89304
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MaterialIcons-Regular.otf

Path C:\Program Files\EJX\data\flutter_assets\fonts\MaterialIcons-Regular.otf
Size 1.6MB
SHA256 d9865b671a09d683d13a863089d8825e0f61a37696ce5d7d448bc8023aa62453
MD5 e7069dfd19b331be16bed984668fe080
SHA1 fc25284ee3d0aaa75ec5fc8e4fd96926157ed8c4
SHA512 27d9662a22c3e9fe66c261c45bf309e81be7a738ae5dc5b07ad90d207d9901785f3f11dc227c75ca683186b4553b0aa5a621f541c039475b0f032b7688aaa484
SSDEEP 24576:PsSIRolMKvGXtkXKLkMp2fXrNsAxI6zD2/qxDoq4eeeDrG2eOeGr2lkzhlTMrRoV:P9njdzbwc9
TLSH
T1787529100276EF4CC1EF507D43B74A48F4C59AFEA53ABB1AF9B64795220BDBDA1C8181
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Program Files\EJX\data\icudtl.dat
Size 842KB
SHA256 998367809a821d595928089c197b3f7959f0420f81f79d4d0daee53378492ed5
MD5 018361032ba13dfeab636138ab6b9831
SHA1 8f9c259d3a330786ab8bbd49e7e79abfa1d552ed
SHA512 d7d3fffb41576cf2c90cd260727cc0ea23c5a4c458f84b01426c2a4578004b94168047c7282222e9ffade2f082e189cf167146cc3303bd7dbbb252a593236967
SSDEEP 12288:8Mlhw771h0jM7ykPG07rr4c8w0P4N48Rkjt3dPHz982VYhq:Zhw3zVtjLbGu4RjTPHzMhq
TLSH
T199056A17B0435E6FE0C48277C652E7B65637838DEB3317EAB698B5593E8A1C20241BCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dynamic_color_plugin.dll

Path C:\Program Files\EJX\dynamic_color_plugin.dll
Size 81KB
SHA256 6a69ea3bb857e1f3285e5eeb13d974220c57e0bd249ed750cef756f98d9cf520
MD5 68937944a37dc788cdc784c0f45b01a1
SHA1 a331f68ea4e48a0b7e4273f9e4e87edde9dc7301
SHA512 1c66f4469a4fb4e479c2d2ea4fe5a37979d52a57b450cf9d1d98992be436804875c1b11ab52e7fd4da2439626fb208c07dd0574ed315d4e809aeacc6e0a0470c
SSDEEP 1536:pmaGg/U6h8xDn1bcx0sbM8z1WM1lalNlD:A7T6qr1W0sbM8z1WM1cln
TLSH
T108832A2BEA1D50ABD259C878CA534905DF72B8964BD1A7CF57500ADA0F27FE80F3E211
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

file_selector_windows_plugin.dll

Path C:\Program Files\EJX\file_selector_windows_plugin.dll
Size 109KB
SHA256 ddb4c31c305a53e27d2f935384f226658485f6f56d8c47f3c8f575f24c555658
MD5 4ad4f1384e9d0919c9e39d925141521b
SHA1 50426891e6bf93474a6747b60f5bcdfdbb9bc01e
SHA512 521eb8317722f39f53f58950b67d6cdee9875db8ed9a92bf72468cdd774a619ce3140fd0eb0e97565597a97a85289ece8b7966ae3946b6a0d7d37548e1ba5a65
SSDEEP 1536:UBXrl+wCXtRGN1jl/nHu9kxFnKxpm61abZho1uCpVMfZGTx9+5:QblHCKHueFKq64bZho1J7MfZGTx9+5
TLSH
T108B31B2BF61D40BAE26AC47CCE539901DB72B8954790A7CF57500ADB0E57BE45F3E201
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

flutter_js_plugin.dll

Path C:\Program Files\EJX\flutter_js_plugin.dll
Size 86KB
SHA256 e46d36f034fb7ddae37e45edfd73476ed0d085d3de254e1840982c455c1769bc
MD5 de72bc82f7ea04a8ba624943ee1897be
SHA1 64c3c0349923aaf4b46ed3a5dd9bb6002cf1d9b9
SHA512 a406b060d6829b8b946c1f97a9b792a695cfb6424b96831b5fed3bdc7bcf88f72bfc28e9a96cbf3bea278bdba222150e76053ccca2e30ed319530ac8ba692a35
SSDEEP 1536:k8td+56bSKxR6ON+YDmuZuecRFxBEMAJCEsEBWv:lI56b5jDOBRTBEMAJCEsEBWv
TLSH
T176833B2BE61950ABD319C5B8CA834A05CB7278815B91A7CF57904EDB0F27BE81F3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

flutter_windows.dll

Path C:\Program Files\EJX\flutter_windows.dll
Size 19.8MB
SHA256 e225762642535e2f31b9ebb3d7def4dae93162d357e09bee241e19d461b9ff46
MD5 4f110b4f83285c211d56a503bc300c7a
SHA1 5dbe13d3231cfef7e09447948bb7d8c5324f788f
SHA512 66526e7017f4b0f380ba1787afb38646a90c5fc8328d1e41c0b80d3c3524f570b578a229116956d320a5a2b8382b118765a856e080e725c08729c91cc05038e9
SSDEEP 98304:r8wG47fQ6x7Foser61UwcaRdKckSYIrZXYh624nV4lkmHKVGsvvNSQE1bSsKZU/7:rbZvtdKcy0pdeSslYe5qfNODaq
TLSH
T1EE276B03F29680EDC459E178971BAA27F671B8490720B6DF27584B223F66FE05B3E750
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hotkey_manager_windows_plugin.dll

Path C:\Program Files\EJX\hotkey_manager_windows_plugin.dll
Size 104KB
SHA256 b9e091e23130c498ee07a8ffaf08dda69097b5c6bac3bcaf61fdffba333401f0
MD5 53e7dad228ef1f44bb8e3969159c20fc
SHA1 40817b4d111e4974c391289fafe52681241eb13c
SHA512 f40c9e99e7a3f1d1d4f605a17e23d5cf64a01222f601911e7aa924307dd67b307c054f381e1fa3db044825fac42313f52618c42f694e8a3ba8fbf3ead005adef
SSDEEP 1536:tiKblVJQryWHrgI16uBxFc+YgOHn2aMuOOYqi0uT:dbpEgO6SO+YJH7MuOOYqi0
TLSH
T1CDA32A3BAB6D40ABD26AC57DCA474945DB71B88507A1A7CF57900B9B0F17BE80E3E600
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

screen_retriever_windows_plugin.dll

Path C:\Program Files\EJX\screen_retriever_windows_plugin.dll
Size 116KB
SHA256 446e9b8ac8900e406903c8c4d8c9210ae0aa31be8744fe5e9e6d759730a8a7b9
MD5 9472effe84cd6403ae0ab305f8be5223
SHA1 8ba279e53b196ab19d889fad1ad2abae41429ee9
SHA512 9808f642d8d5356da09534d53206258a9c07fc7fef77115700ba03f4500cac172ca35c94eca8e7c97d9da28a5428edb43c2baeee6406954725f25399d4f61046
SSDEEP 1536:QsILOR6ScJJsKeRcz06Z7xS+kZ3hhrSoqz1wKnqMp+eCRAySHvD:QDOcOw063KdGoqvqMp+eCRAys
TLSH
T122C33C2BF75940A7D26AC4B9C9438D46DB72B8914791A7CF57900A9B0F27BE84F3E301
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

share_plus_plugin.dll

Path C:\Program Files\EJX\share_plus_plugin.dll
Size 131KB
SHA256 e20bec5a8d8b05a5d2995060c46ec266b9cc2a77ae178bf3c20b810530bf9dcd
MD5 c6e5851da56de6a6e3d74227a125c901
SHA1 397448c2e329b8fd9a00524fb96358916a82b210
SHA512 9a5d38637e88344364777c33d659ad930923caad2c87eddd0a5145662b1bdb7e583404a4f81d3b2f83c657174069129e66b53d4524d2f61bd925def45c3bc43e
SSDEEP 1536:gpNAti4ITRKMG6JtkxhIVoPv50ajBOGZhMfT4xAxYMUvRn5k6f/U/0e/5Qe+WP/M:gpNRqR6wuVoPvCajBOGZhMfT4xAxKz
TLSH
T1F4D32A2BBA2C40D7D12AA079C9438E45D772F8A74F9187CB27510B9F4E63BD84E3A311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tray_manager_plugin.dll

Path C:\Program Files\EJX\tray_manager_plugin.dll
Size 105KB
SHA256 b9beb12012d0c9d0841550347e4ea46eb1f5d49b52199afca3c98464780d641d
MD5 117dd90405e9406360a60d84daa260eb
SHA1 e74bca2ee4426d2bdf6403d4fe89a3c539e477ba
SHA512 230b7f50f5343980c72c979d0815aa240d3e896679b9fc2813634b6efbc5951e344c5f2f65f0959a2643c5ed140954905d7cb56aa5028b5d61e33043bbf71855
SSDEEP 1536:X+aiLhJu6wZlP1fD3Uk6Relxh8CzockvuovpZJHCKPI0TPR:FiFwfD316UhPockvuovpZJHCKPIu
TLSH
T131B33C2BAA5D506BD26AC4BCCD534D45DBB2BC8547A1A7CF57800ADB0F27BE40E3E601
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

url_launcher_windows_plugin.dll

Path C:\Program Files\EJX\url_launcher_windows_plugin.dll
Size 96KB
SHA256 0f7d384c3800ec97ef00e128ad8fa6b70c596d8302026a784f78ba437bd32a65
MD5 001d4dbc69de217a2cfbb50562fa340f
SHA1 e0f7f8449c2f26c8ebf0b40358d4bebf335e43f0
SHA512 56f44dc166f6a339525b0026fee217c63011a30e528676af7d853cb7c2466d67db34a6e8f4bc385188d7f1a5a3d3356002b946953f4d969c5bdf1faaac496ea8
SSDEEP 1536:9GpZR9r942MfYxKj2866rzCoFB22it9LBwdIBBaM8xVxiSjigb:9kfr942MQ86nxvhBsM8xVxiSj
TLSH
T19DA33A3BAB1D10ABD259D4BCCA534941DB72BC854791A7CF57A00ADB0F27BE44E3E602
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll

Path C:\Program Files\EJX\vcruntime140_1.dll
Size 48KB
SHA256 1f2d41c4aa5db0bc33ebf7b66d72943a817d7ce6cbe880502a9403823633093f
MD5 cd1b08f4930b276ad78853580b76b5c6
SHA1 a0330279d3d0d47f19ed984726e25260b547a228
SHA512 6bcdd6b16d815d72dc7efd6a2352319ece102f3b7d85c648286e4b3b594b7670d61b7e05c580fc416421e1a1622b38737b1e90080171384e7e2cd5e37ac71225
SSDEEP 768:g3oZYctpzcx0pdESASv83Tw4DYEOMg9z7NONRds9zb:kc6wk3TgEqz7N6Rdkzb
TLSH
T140236BE4977C4082D8ABA870C1E6EE17BD38F7A61B10968B07A5D14C1E537D1AB3D31A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

window_ext_plugin.dll

Path C:\Program Files\EJX\window_ext_plugin.dll
Size 93KB
SHA256 4004f846e488ee9395b89402bde32bb3d97d6790dde4d6334531d214f252cf17
MD5 9332dabffcdb23f286fb874c3b21197a
SHA1 a7bb28b2ac70bf6ba1d0123e985acffdafe46328
SHA512 f0efb589289c123674eb0c4a236cbd0dff0206854a2bccb64d7507b99fad953f3ca8089bc687c4c85de490cc5656190bacab7a67ee30de3925e057ca7b308ac1
SSDEEP 1536:M3zsqXrQ66oTxLc9/wHqMJRIMpZdsCnJL5vhv:MxrF6Ge/YqMJRIMpZdsCnJL5J
TLSH
T1E6931A3BEA2940ABD21AC57DCA478945DB71BC954791A7CF57900ECB0F23BE80E3E611
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

window_manager_plugin.dll

Path C:\Program Files\EJX\window_manager_plugin.dll
Size 127KB
SHA256 85b3364e5ffa00b5495e655e4cf1d0961c1fc73c524f8e55284f3ff62656d3aa
MD5 3d076be713fd6fecd0628eaad010ff7b
SHA1 e1d5dcffee99271e43bf7eaa0d3d83addac53fa1
SHA512 cac0569778c56d49e5dc8e015ec603a3148dfb6a22c08fea83959a776532e9134ba0652b75d4c1ffcb231d98299c44f324cd4a94bbb54af1b2db1086f61afb78
SSDEEP 3072:98CLcqRAAePnX6CQ9H0T9tP0QoPvpZJHJTeKtIS:6CgqRAAeP6CQUavpZJHJTeKtI
TLSH
T137D34D2BF75900ABD16AD4B8CD438946DF72B8854B91A7CF07904A9B1F27BE41F3E601
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ejx.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-C8DDZ2CIGN.tmp\ejx.tmp
Size 4.1MB
SHA256 609c91716742ea5c214243e3749926e9dc1a5243394d567c9b827f02b721271f
MD5 15693b98f8b622cfcecc67f79522c59c
SHA1 67e44f8f9eed8c48df82b0b90c1f6d3530e0e09b
SHA512 3b07e2536a6d6260166ce5ecbafb84d8938c06afe149dba24c07f171ccd2a18a1fd49f49f8a84eb04d4ef5abdbb3602c3cf8de80067cc11ac2b35327c236de80
SSDEEP 98304:LYU5hnuOajWwMPdCpepI3GrwrA+Jr333w:FxuHjWfZIzw
TLSH
T168168F03B388753EE4671A3A583FA284983F7A213A26CD4F6BF40D5C8F395416D2A757
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ejx_2026-07-30_16-22-31.log

Path C:\Users\Admin\AppData\Roaming\com.ejx\home\logs\ejx_2026-07-30_16-22-31.log
Size 620B
SHA256 aaa80f6d025ce7f742a05590939187b847d21ff3df615aa4c813e6334bcd456a
MD5 9eddb87d7cdb6f3179a20f86dd9b719b
SHA1 454e3a327d5c57d1e915ae0a181604eb93d471e4
SHA512 7db8fe3a57281eb297158c19b0eb70824199e4a23a066deff5d6cf9dc0ad1e3d9f2e7d69ab6f851ccf7a1e3330cc60617b207961f7ae4771947827a186d93245
TLSH
T158F0F49896A752A3500CA9E39D29DA1CCCB8F50B3A4C09B1F318089C639740B1EAF4AC
MD5 SHA1 SHA512 TLSH

Submit Download

ejx_2026-07-30_16-22-31.log

Path C:\Users\Admin\AppData\Roaming\com.ejx\home\logs\ejx_2026-07-30_16-22-31.log
Size 1KB
SHA256 75d0b58229bde5b609bbcc865f73c4063db558565eb8d3bf7662eff29dadf6ce
MD5 ea101a248745100b98a9b3540c6dfdd9
SHA1 2514c809749279b2c544a52c849c70628dcbd670
SHA512 3018b762ea0162a9bf22b84bfd22d9c50846f4089272a3af0e2aa7d85d4050b13af2f6856b9f2ff65f9a3cd51ac86b0d8434517973a045c7234c66a591979e82
TLSH
T1E1317BC685F276E6402A24D2EC1ACB98C4F0F546350C38B4B3944489ABEBC1F9DDF5D8
MD5 SHA1 SHA512 TLSH

Submit Download

ejx_2026-07-30_16-22-31.log

Path C:\Users\Admin\AppData\Roaming\com.ejx\home\logs\ejx_2026-07-30_16-22-31.log
Size 2KB
SHA256 0487f876ab682f9587b7a143cd9d0491ac0a8db8c2155602c54824d4feb9a401
MD5 84c70d43d4e72ec7ea186be25114b0e1
SHA1 b7a45040e54cc05200742803151d06a7197d6a0c
SHA512 21bf9817df5be35a6f06e7f631f4d677cfdd3bce3f166482c3d722cc6e7688006a5f9596f0fae4279e2b1b269d6a8632a599146703765015d9c07bdeb8a0780d
TLSH
T1D7415BC685A276E5402A24D2EC1ACB98C4F0F646350C38A4B3944499ABEBC1F9DDF6D8
MD5 SHA1 SHA512 TLSH

Submit Download

ejx_2026-07-30_16-22-31.log

Path C:\Users\Admin\AppData\Roaming\com.ejx\home\logs\ejx_2026-07-30_16-22-31.log
Size 2KB
SHA256 61e7e20167efc1056c63d1da59a120e885a450a9b3b81a818b5530a051d605f6
MD5 556a9ca7d6e3326fd5d9351d6456bb73
SHA1 45d0ab280e8675c30e730b3ea3a5891f49e1511d
SHA512 0853d0e424c9e880495886c83a3fb3ef555be725c687a2812014aece8e97cc9becd46f78a715c6238b87d8af0f8bf4a9c0e102340793798185866d7c78fd062d
TLSH
T16A516DC685E232E5502A24D2EC1BDB98C5F0FA46310C38B4B794449967EAC1F5DEF5DC
MD5 SHA1 SHA512 TLSH

Submit Download

ejx_2026-07-30_16-22-31.log

Path C:\Users\Admin\AppData\Roaming\com.ejx\home\logs\ejx_2026-07-30_16-22-31.log
Size 4KB
SHA256 c3897ff2c0cd5711db71c40a086545583028e6e4d4ccb3729599c3b079e4e48d
MD5 01e3252a19b29c4927b9bb2c47034bfd
SHA1 fa1c674255e74b9223c78338e111e9bdda2c308a
SHA512 da1ee7a8ccec51c39e2c9dd6f27663bbdef911d21903ec103bc8f5b0c6923704ae9daaf81aafdda8607cf4a41e11fbaaad785f8bbab0144464968de5a3de9719
SSDEEP 96:AIoZa57xqI+GmOBgdV9wNolE1pCLyKuuw:ia57xqI9mzwG6K3w
TLSH
T14791ECD585A333E2612E28C2ED168A68C5F0F946320C3C60B798589867D7C4F6DEF4DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ejx_2026-07-30_16-22-31.log

Path C:\Users\Admin\AppData\Roaming\com.ejx\home\logs\ejx_2026-07-30_16-22-31.log
Size 5KB
SHA256 b09fb1dbfa76bb5a9c551542e1a11605afd4023898be61bf62dd2e6ce753f5f0
MD5 cf7f9671105bbdbcb36d6ded57c0727b
SHA1 d1c4ecc63827394d9fa56785a54b673bf08cc6e4
SHA512 c19a60d5c09bd26fe085f99b3054868e9a4fed1299901b1fb85e7c1dc5756b0eff2d77f6b1ec82bc5a1862f9271f6c40be93c33fc5bde1b676f121f770316033
SSDEEP 96:AIoZa57xqI+GmOBgdV9wNolE1pCLyKuuEoUaR3AcWxGb/D/:ia57xqI9mzwG6K3EoZR3AozD
TLSH
T167C1ED9592A333E7512E38D5EC129A68D8F1B942310C38A0B75818AC63D7C4F6DEF4ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3704-182-0x000002183A550000-0x000002183B029000-memory.dmp

Download

memory/3704-181-0x000002183A550000-0x000002183B029000-memory.dmp

Download

memory/3704-180-0x000002183A550000-0x000002183B029000-memory.dmp

Download

memory/3704-183-0x000002183A4E0000-0x000002183A4E1000-memory.dmp

Download

memory/3704-179-0x000002183A4D0000-0x000002183A4D1000-memory.dmp

Download

memory/4180-8-0x0000000000960000-0x0000000000A3C000-memory.dmp

Download

memory/4180-1-0x0000000000960000-0x0000000000A3C000-memory.dmp

Download

memory/4360-6-0x0000000002D80000-0x0000000002D81000-memory.dmp

Download

memory/4360-177-0x00000000007B0000-0x0000000000BE6000-memory.dmp

Download

memory/4360-10-0x0000000002D80000-0x0000000002D81000-memory.dmp

Download

memory/4360-9-0x00000000007B0000-0x0000000000BE6000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads