1ed34e57092629dacd34bc542795955d36093c62e0f9329543af471b483461d4

Analysis

max time kernel
109s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 11:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-03_618b6d2a4ec603d6b1afab14c15a0df0_cobalt-strike_conti_elex_glassworm_hijackloader.exe
Size 882KB
Sample260804-nsxp7aad74
SHA256 1ed34e57092629dacd34bc542795955d36093c62e0f9329543af471b483461d4
MD5 618b6d2a4ec603d6b1afab14c15a0df0
SHA1 2c87f076b7a236c61731187f9543793fbcf6272d
SHA512 de576210a5747a02c6e6e0d72093642fc364f655ce7ff11e54dd67bac6790986a6d7cbc7f00bd25f2b18d3d08b0b424329010bf50e7470a0d5547a10d4b94aac
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKkl6:N8RFEL8XVav9MkTQfOKkl6
TLSH
T1AD158D13AE6898F2E57A4AB95B7186049F357E210700D7C7E3A4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence spyware stealer

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
4140	patcher.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\WinFirewall = "C:\\905c0769f9a06c95a24ddf945\\patcher.exe"	patcher.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\WinFirewall = "C:\\905c0769f9a06c95a24ddf945\\patcher.exe"	2026-08-03_618b6d2a4ec603d6b1afab14c15a0df0_cobalt-strike_conti_elex_glassworm_hijackloader.exe

Drops autorun.inf file 1 TTPs 2 IoCs

Malware can abuse Windows Autorun to spread further via attached volumes.

Replication Through Removable Media

T1091

description	ioc	Process
File opened for modification	C:\Users\Admin\AppData\Local\Temp\:\autorun.inf	2026-08-03_618b6d2a4ec603d6b1afab14c15a0df0_cobalt-strike_conti_elex_glassworm_hijackloader.exe
File opened for modification	C:\Windows\:\autorun.inf	patcher.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\msedgewebview2.exe	patcher.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe	2026-08-03_618b6d2a4ec603d6b1afab14c15a0df0_cobalt-strike_conti_elex_glassworm_hijackloader.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.NetFX45.exe	patcher.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-0C0A-1000-0000000FF1CE}\misc.exe$	patcher.exe
File created	C:\Program Files\Microsoft Office 15\ClientX64\IntegratedOffice.exe	patcher.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\bin\kinit.exe$	patcher.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\PPTICO.EXE$	patcher.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedge_pwa_launcher.exe$	patcher.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe	2026-08-03_618b6d2a4ec603d6b1afab14c15a0df0_cobalt-strike_conti_elex_glassworm_hijackloader.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\bin\rmid.exe$	patcher.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\PDFREFLOW.EXE$	patcher.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\Wordconv.exe$	patcher.exe
File opened for modification	C:\Program Files\7-Zip\7zG.exe	patcher.exe
File created	C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\pubs.exe	patcher.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\arh.exe	patcher.exe
File created	C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.exe	patcher.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\elevation_service.exe$	patcher.exe
File created	C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe	patcher.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\bin\servertool.exe	patcher.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\CNFNOT32.EXE$	patcher.exe
File opened for modification	C:\Program Files (x86)\Common Files\Java\Java Update\jaureg.exe	patcher.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\bin\javac.exe	patcher.exe
File created	C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe	patcher.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe$	patcher.exe
File opened for modification	C:\Program Files\dotnet\dotnet.exe	2026-08-03_618b6d2a4ec603d6b1afab14c15a0df0_cobalt-strike_conti_elex_glassworm_hijackloader.exe
File created	C:\Program Files\Java\jdk-1.8\bin\javah.exe	patcher.exe
File created	C:\Program Files\Java\jdk-1.8\bin\jps.exe	patcher.exe
File opened for modification	C:\Program Files\Windows Media Player\wmprph.exe	2026-08-03_618b6d2a4ec603d6b1afab14c15a0df0_cobalt-strike_conti_elex_glassworm_hijackloader.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe$	patcher.exe
File created	C:\Program Files\dotnet\dotnet.exe	2026-08-03_618b6d2a4ec603d6b1afab14c15a0df0_cobalt-strike_conti_elex_glassworm_hijackloader.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\bin\xjc.exe$	patcher.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\AppSharingHookController.exe$	patcher.exe
File opened for modification	C:\Program Files\Windows Defender\Offline\OfflineScannerShell.exe	patcher.exe
File created	C:\Program Files\Java\jdk-1.8\bin\kinit.exe	patcher.exe
File created	C:\Program Files\Microsoft Office\root\Office16\officeappguardwin32.exe	patcher.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Installer\setup.exe$	patcher.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\elevation_service.exe$	patcher.exe
File opened for modification	C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe$	patcher.exe
File opened for modification	C:\Program Files (x86)\Windows Media Player\wmplayer.exe	patcher.exe
File created	C:\Program Files\7-Zip\7z.exe	patcher.exe
File opened for modification	C:\Program Files\7-Zip\7zG.exe$	2026-08-03_618b6d2a4ec603d6b1afab14c15a0df0_cobalt-strike_conti_elex_glassworm_hijackloader.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe$	patcher.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe	patcher.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\SQLDumper.exe	patcher.exe
File opened for modification	C:\Program Files (x86)\Windows Media Player\wmprph.exe	patcher.exe
File created	C:\Program Files\Java\jdk-1.8\bin\jhat.exe	patcher.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\SkypeSrv\SKYPESERVER.EXE$	patcher.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-040C-1000-0000000FF1CE}\misc.exe$	patcher.exe
File opened for modification	C:\Program Files\Windows Defender\MpCopyAccelerator.exe	patcher.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe$	patcher.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\msedge.exe$	patcher.exe
File created	C:\Program Files\Java\jdk-1.8\bin\idlj.exe	patcher.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe	patcher.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	patcher.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\notification_click_helper.exe$	patcher.exe
File created	C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\cookie_exporter.exe	patcher.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\bin\keytool.exe	patcher.exe
File created	C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe	patcher.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOICONS.EXE$	patcher.exe
File created	C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\msouc.exe	patcher.exe
File opened for modification	C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaws.exe$	patcher.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\pwahelper.exe	patcher.exe
File opened for modification	C:\Program Files\Microsoft Office\Office16\OSPPREARM.EXE$	patcher.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\bin\jinfo.exe	2026-08-03_618b6d2a4ec603d6b1afab14c15a0df0_cobalt-strike_conti_elex_glassworm_hijackloader.exe

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\:\autorun.inf	patcher.exe

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-03_618b6d2a4ec603d6b1afab14c15a0df0_cobalt-strike_conti_elex_glassworm_hijackloader.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	patcher.exe

NTFS ADS 2 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\AppData\Local\Temp\:\autorun.inf	2026-08-03_618b6d2a4ec603d6b1afab14c15a0df0_cobalt-strike_conti_elex_glassworm_hijackloader.exe
File opened for modification	C:\Windows\:\autorun.inf	patcher.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1504	2026-08-03_618b6d2a4ec603d6b1afab14c15a0df0_cobalt-strike_conti_elex_glassworm_hijackloader.exe
4140	patcher.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-03_618b6d2a4ec603d6b1afab14c15a0df0_cobalt-strike_conti_elex_glassworm_hijackloader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-03_618b6d2a4ec603d6b1afab14c15a0df0_cobalt-strike_conti_elex_glassworm_hijackloader.exe"
1⤵
- Adds Run key to start application
- Drops autorun.inf file
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- NTFS ADS
- Suspicious use of SetWindowsHookEx
PID:1504

C:\905c0769f9a06c95a24ddf945\patcher.exe
C:\905c0769f9a06c95a24ddf945\patcher.exe
1⤵
- Executes dropped EXE
- Adds Run key to start application
- Drops autorun.inf file
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- NTFS ADS
- Suspicious use of SetWindowsHookEx
PID:4140

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Replication Through Removable Media

T1091

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Replication Through Removable Media

T1091

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

patcher.exe

Path C:\905c0769f9a06c95a24ddf945\patcher.exe
Size 882KB
SHA256 1ed34e57092629dacd34bc542795955d36093c62e0f9329543af471b483461d4
MD5 618b6d2a4ec603d6b1afab14c15a0df0
SHA1 2c87f076b7a236c61731187f9543793fbcf6272d
SHA512 de576210a5747a02c6e6e0d72093642fc364f655ce7ff11e54dd67bac6790986a6d7cbc7f00bd25f2b18d3d08b0b424329010bf50e7470a0d5547a10d4b94aac
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKkl6:N8RFEL8XVav9MkTQfOKkl6
TLSH
T1AD158D13AE6898F2E57A4AB95B7186049F357E210700D7C7E3A4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7z.exe$

Path C:\Program Files\7-Zip\7z.exe$
Size 1.4MB
SHA256 f14c1dcc4db1feabb7113c69e69dac3a352e92e00f6742f9800923e39d1058f4
MD5 1264170bf6958fb560a57965d4de37ba
SHA1 d1f2e8edf338e63bc89b7611773de49032251f55
SHA512 dce92f585f0e37461d95d73e92d67333a290de611ea76bdc5453144f72f668750a2a061b1b3650381257d2a907fde54326c124d0f59ef5408fb01af1f7209cf4
SSDEEP 24576:N8RFEL8XVav9MkTQfOKklK0Le5ji0hmxNrM:fv9MNflPji0Aj
TLSH
T12E656C16FA7886B1D076C1B9CAE29649EE313D510720C6C79394B7AC6E337D18E3A731
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Uninstall.exe

Path C:\Program Files\7-Zip\Uninstall.exe
Size 897KB
SHA256 a4d2ecb3dc4e7ec4e25365781a50089ede45b63bd25ddc53ab7e7e55e569582e
MD5 15e0ac85fd14f5cf4beab09aec839ec3
SHA1 453f3d31ab90d1c5f701626f6903d0250709e76b
SHA512 8d3417386d980d3e9dfe4e1c9a2a87584e75b885c4d439452ab8a41dd4949792adf98a4da8776e5dc72862bdeaa42fb8e181bbd986fb625bdc04dbf8afa05d99
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklEa:N8RFEL8XVav9MkTQfOKklEa
TLSH
T1E6158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IntegratedOffice.exe

Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
Size 930KB
SHA256 44129cbf5ee5aeabfaa99cf5f4f1220fa14bcbd8289a87e2d20bbfaf18232d7f
MD5 2f98f55c1953eba05f06b2e65c7369e7
SHA1 25d267d4a42a5d7b76a8b0049d880f9681c671cd
SHA512 48e26a4a1af1c4388c233a93d605ec3bc0a013f0a80fbeb49a3a4da6768b4a12640af10963267b16eee0ff186bb695664f8feba3cfde7b343a3243d902ce9b4f
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklPb:N8RFEL8XVav9MkTQfOKklPb
TLSH
T15F159E13AE6898F2E57E4AB95B7186045F357E210B00D7C7E3A4B79D8D333C09E3A625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

java-rmi.exe

Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
Size 906KB
SHA256 fbe76781682d5a6abd9d707459f6e7da71224e83d08f7da5657a9d939246f7b2
MD5 f1a449388b5410fb5cea7f264fb1a3d4
SHA1 135f42b7bf09e0e7ee2d116bae5f9e7ad0ef52c5
SHA512 c906b2ab53173cc66d662e44895713723a2f9a8b684ef9f1699ef52a61a8075d44efbe9621a2c2203c569df83b783a4456a282e21a716d521120e2cd53ac7f2a
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKkl96:N8RFEL8XVav9MkTQfOKkl96
TLSH
T17D158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javac.exe

Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
Size 906KB
SHA256 dae75db3bad8fed97c29d60364ed5169875a472394bb9f0c4d36364e8159bdde
MD5 34f95873cc87d30b73159b3a22961d37
SHA1 0a8e1a0d594b296d4b23e80550133af8b2189b56
SHA512 80554cdb53a9dd4723f0a3978d0e0702f323b97b72b9113a52301584f7a49b0e4f6527a90610721e2f90396433bf5514d5aa59d620d3d120c2a1eb9486b1b360
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklTN:N8RFEL8XVav9MkTQfOKklTN
TLSH
T12A158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javadoc.exe

Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
Size 906KB
SHA256 b6135c82bc172322bb2b73131e283b796e40f5f490db6e6ef924e67928888902
MD5 48e607242de006f2d4dcd1c6b00f67a2
SHA1 a35dcb44faa91de965042628173d738d7b973a25
SHA512 ed51827e33644548c8dfd2fbe5757a30f1b27e1cbed09ab29f97db4e22123d745ffb2c2e6baa5b28f83c43a61313759e2d771cea2f7f33e6ab9275508e4f35c5
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklhf:N8RFEL8XVav9MkTQfOKklhf
TLSH
T1D5158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javah.exe

Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
Size 906KB
SHA256 c61e928ba2d4515ca83251ec72a43193031a6b994b6060c76c1f77801262bec0
MD5 daf93915465887a5fbc383509e8263f5
SHA1 cc92cc61f251c2321e41046ae3a3929ccf4117df
SHA512 b0bbaad1ea6360b89ffa3c930c6154941f0db62339b4e7594c2bc8ab6671b92210c0bfd36312e7717360a38f32a6a2bcb1da5b694f498b9fd4a0e0495d9d41f2
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklDo:N8RFEL8XVav9MkTQfOKklDo
TLSH
T15A158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javap.exe

Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
Size 906KB
SHA256 5849b7cd997fee6041b0fed727d75a7b49e717e75c06087916032642c7213aef
MD5 2f467b862d8dc441be30a7fe78450462
SHA1 da17e13b17e9414636ce6c5f904128b9e69785cf
SHA512 123c83931134cb2356136f7c521b251fa65b24f76cc0178fe0e6af6a416705285d732b2e26791dbd11221a6123554de4170dc11fe26290a651f42a8dafa10d5d
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKkl3u:N8RFEL8XVav9MkTQfOKkl3u
TLSH
T1E2158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jcmd.exe

Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
Size 906KB
SHA256 01505433b598f0970f9305310a0677619a3697a5f35e0439b11508a0b44ed2e9
MD5 9831c2892079a162d3c5d4d72b7798c7
SHA1 183ed229b6129377ff8d97731ab7f92629b1b3fc
SHA512 1b955430b5034cc31b42fdf2286bae032bc6f09985464f22c3e6e7dec7dc195bf6f30745b3e1563933e24ffb0fc41f66b1686a5869f630e0f3017457670c8020
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklF9:N8RFEL8XVav9MkTQfOKklF9
TLSH
T1BF158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jconsole.exe

Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
Size 906KB
SHA256 434c634f1d505aca261fd91e9692ade62487407d25af64e66abf9c251eaebee6
MD5 a056ce0e16ab0257936dada81118dd74
SHA1 8495c6a3996baac6f3e4e242eb8659816b03fd62
SHA512 5d44babf46fbfd7b63fb48f28bacda839b80e0745e72be25073ee87b3f68f51b8b94f0d21a3c3a24ea51d7e0e9df020b9f8724d07aebbe1cfa0470f1a53cf998
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklhc:N8RFEL8XVav9MkTQfOKklhc
TLSH
T1A3158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jdb.exe

Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
Size 906KB
SHA256 cd0a4fbf51fe65b83993297c841840cf09244a35c6f1be211e64b815c69e9d80
MD5 5f8dcb2c753f747b75a3005503b5f9ef
SHA1 1d5a1285f5199a0639319e334c273579224d4a5c
SHA512 e0749a1ddf9c3ba180444a7bc79bad77274cc9adbf8cd200dc2963d5aba96801311f7146f110ab27f31ec296dc71a266afaf1ebc8ed94e4e2bfe135d33aaa978
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklKp:N8RFEL8XVav9MkTQfOKklKp
TLSH
T15C158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jdeps.exe

Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
Size 906KB
SHA256 da6dd64dd3cd9bf58224887a7f6060d4eb26bbd1a8b3038d7fd773865380e45a
MD5 ea9cf7ccff1ede4fd5d6f903e2be92b2
SHA1 a17ad347a99eb49c53803eff11f7b4e3357dbb05
SHA512 52427068efa2030a9899c49a4dc033761ea1fdc369bc58c03eb4adb9877b56404bb63858aca42c4c0e0c85c6caf76a7bbb0f877103bb19c393fed3186b0bf5bf
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklt0a:N8RFEL8XVav9MkTQfOKkltN
TLSH
T147158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jhat.exe

Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
Size 906KB
SHA256 0ebfc95337502622ba2d47b1aa41fbb51a4fa7f0883578e025884f2caca6ab6b
MD5 f71c11ac2d1a2ec53f1464c41876205d
SHA1 3612e5bb50405779a59ee8a6cb2ede3e5c45b5c6
SHA512 787de79f95f0ebe5a42aba47932ddfeb8818a52d03a9b889175027695b17e3b53b5b9ca777b13ea902e58113766a0e6342fa60017919657c50d6cc93e5370969
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklfF:N8RFEL8XVav9MkTQfOKklfF
TLSH
T120158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jinfo.exe

Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
Size 906KB
SHA256 6d397f9f863e89d9b3e9820978c25a25a6781fc3c134a00550a103d3b3e81ce3
MD5 d0f7a04f1ab10da14089ea15d7daffe5
SHA1 b6c5033b675347503a7af486a8f48438e153945a
SHA512 ab8b1c63105f958b7b460c05925d0156a7cc19f7ab9ccae4f8f7ba49eea82db5f9bacbae0afe93deaf8539e5e3dbcfc124346c6de67e7a835e9d5361edd1bedb
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklAC:N8RFEL8XVav9MkTQfOKklAC
TLSH
T15C158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jjs.exe

Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
Size 906KB
SHA256 200a0e4c189851d7574f73811db1089cd57472f8717d90b57b68d302d9227718
MD5 2ca4e98dbc80acf1ecd918216ccffca2
SHA1 27f1d44e2e3f1816e490f615b7e38305e53fd9d9
SHA512 3dae509e23982d95bb9d53a7fad7b2bb5dc1afa6d82167e36d4737800d4b72bddd64f4e69eb0f201f41a48937315ce58cfb1406c7283aadc4e70ed1b9c413a73
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklTw:N8RFEL8XVav9MkTQfOKklTw
TLSH
T1C8158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jmap.exe

Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
Size 906KB
SHA256 8a635b8b0713dae606a08a69b342189580c1168f3b586dfe3b12068ec6c5143b
MD5 184b50e2cd7c85511d130ddb16f36eae
SHA1 eb88de7b8f252c3cdc5100cb9d6c19f0390e53d2
SHA512 d826e6a0c6d65b7cdad5f54cf9b8dd2bb4741708f8c1c0b860f1bb6ee503531d5f3fa9873503ab496bc08b00e7bb37f61685130adefe4bfc0c5eba4269125c8f
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklaT:N8RFEL8XVav9MkTQfOKklaT
TLSH
T197158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jps.exe

Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
Size 906KB
SHA256 49cd23aacbc00452169f3c3331f51cb3c4efab8cb3f79cddd61afc5ec2573c8b
MD5 d268e0b7a41b1625228fbb58fe668ba0
SHA1 64d05ca8b773f2d26e77373711a39595d2685a54
SHA512 ca4466ff95962528b956cc8a22276ad848f84d931e349c32b662c385ef24df72ead8182d3f404598a34218c1385058a265d81c3c0174c2c37efbc947932a51d6
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKkl6u:N8RFEL8XVav9MkTQfOKkl6u
TLSH
T168158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jrunscript.exe

Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
Size 906KB
SHA256 687fff2c5d24b1294936f39e2874115baeecc6c43bc75db958d590e8bcda100e
MD5 dd14118932acb1ca8ad272ae766671a3
SHA1 87930dfc44b8f3516acbed7fcd5a7859cedce128
SHA512 666d70902f3043b180d6a8ac2d6b076e043e92a8e4d191e99cfff3936088a645d09584bd7f0e2476869c1b438c6e62a0dc0ce4df00b004a4aaa4369288e6b3fc
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklEb:N8RFEL8XVav9MkTQfOKklEb
TLSH
T193158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jsadebugd.exe

Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
Size 906KB
SHA256 4ca7a5796da9a026fe3858eb46806c710daf3289176f9a6dc80aeff73d9b77f0
MD5 cff0e9074d7614b3ade77b997a3134c3
SHA1 6f30657094041fe5e3ec625c3af9f716d4ec7fdf
SHA512 9dd22b76b7bc763b8c9b118ffc4e213cf0e0d9733835d61a7b531db6d79181a24c3d0e59f06dd96dc1873d8aabb82c856f23025843fac1d64b8483708a86588d
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklKf:N8RFEL8XVav9MkTQfOKklKf
TLSH
T1FA158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jstack.exe

Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
Size 906KB
SHA256 2524fdbee8ddfbf20442370c2eaf833cd3477c55df66c4faa0442eceb0503bfc
MD5 33762c9732c8a33a588a28c401129efb
SHA1 08e734b60e315e33d2414d1f3c06ffe8c8f5937e
SHA512 c8d8bad8814c9e1d32eb75c4e6518df3553a8ab984d17fdfb60ecf96af6e2d55a6a9b66e0f319d08466335277a685a193aa7c0e593c683aa414d13b4bf0c8eea
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklXK:N8RFEL8XVav9MkTQfOKklXK
TLSH
T1F5158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jstat.exe

Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
Size 906KB
SHA256 5d0824ff456a104646cd94316f316fba5a1dffb78c0927e1c1b501c12e495e0a
MD5 aabc3f0aa8a18a86ed369fce16485dbf
SHA1 4ba0438f82b087041e744ac75a1c07970c49fbc5
SHA512 1362cb977dc5b8a027a48fff393372ff222027aa0f797f00e77bd7506ade09a439594b6c08b70b043e4b4cbfa3261078e2e6b43d46e49b35b743526130bf4471
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklgk:N8RFEL8XVav9MkTQfOKklgk
TLSH
T19E158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jstatd.exe

Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
Size 906KB
SHA256 967560db61c141cceff9fa2bc642dc0ed5e3fb7dbccc066e350885278e967b87
MD5 2588d033396d04dbe8f2de05bd7e856b
SHA1 458d917e44dbaa0755271f596457e63e28056422
SHA512 bb6bd86650e5260d311af48bf97f96e60587961292db8d7192a571815fc09c6397496d5505311ccb28e5c6ee18ebc703c9d0c25a72295cff46f6258b436815d4
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklR0:N8RFEL8XVav9MkTQfOKklR0
TLSH
T1FE158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

keytool.exe

Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
Size 906KB
SHA256 6012647e76d94e1f470e8c14e5f6c1a290a8b9765893c66bc6c29909566f4067
MD5 ac4aba82d30a5828f692128adcdda170
SHA1 d89566629a112367dda1a1ec0368152faa5bd7fb
SHA512 a464bead1f56dba91946bea4513fe9e8ca7b4ccadbd5bbe87909e4a9ae9fef1e6fe8b1421686423d024daf893ec3e7f0a03f1a317220dfee456ac4ea7b834c4e
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklE70:N8RFEL8XVav9MkTQfOKklEg
TLSH
T1F6158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kinit.exe

Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
Size 906KB
SHA256 023bb14c15f4fa78458ed3c532add270f7f869c1cd8f59dc1c907fb5745ff9c7
MD5 a4800df6da1bb06553bfb10fa858ce97
SHA1 2f85782f069d50d2783d359c32bb02c75ed06d48
SHA512 8cd6a7c70ec47c34f91b67aa6aa16e417ffcf223da28da5c0eaad22d6685f650baef38ec3d6b4ccda14627b9c67b11caccc33ecf3cb56dbe82df3063617dc744
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklhr:N8RFEL8XVav9MkTQfOKklhr
TLSH
T1B5158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

klist.exe

Path C:\Program Files\Java\jdk-1.8\bin\klist.exe
Size 906KB
SHA256 dd6df995265c03cfbefebe3b3b4da9ddfe7a1dee815c9b2e9858b178079a1e4e
MD5 0cff41220fc9777a5e4e84add3fc6240
SHA1 84b71e3a22f74ff4d2d876666351a38a1e9dcc4c
SHA512 745d1ed518f9e41581c6391397c48bcc7be76657cdfd3caabba7067c8bcd7c3dd8b32b092419bbb956cb8e94c5e3af545dab6f69010dabfa3ff0e908257a579b
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKkljn:N8RFEL8XVav9MkTQfOKkljn
TLSH
T1F4158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ktab.exe

Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
Size 906KB
SHA256 866a1be96448604ead1823ca61bcb29d3f20b33256095194aeb666bffc0f9ade
MD5 c97a5d6c9458e4abbf819b2abfcb2030
SHA1 5609716d9a2804367f984af1e1339746468648a2
SHA512 4ba02321927e14f09b4ac733e49e950431f1a8ebe3b5a14b45f91ebdf56b9a5b9f31e4efa3c15aa454b4a16b9611318cab98b284af4ddbcbc8a590053cc6be57
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKkl/x:N8RFEL8XVav9MkTQfOKkl/x
TLSH
T14E158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

native2ascii.exe

Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
Size 906KB
SHA256 a1a2be975fc953052ce2ef51a1dce17790f0137e233e2c82a30357d22d0cb77f
MD5 75b76523009a6a3e730c54d5acda6392
SHA1 8d1d3690b0c771c44b416e3386e1a40c2f20722d
SHA512 6bc492523aeba34d930a588024ac68c9fb2f95744e472d653d4845cfdc95f5430c145083b8e8b06509ad96b9b98678b12431e957860646479d1445ca84b7d8af
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKkllA:N8RFEL8XVav9MkTQfOKkllA
TLSH
T167158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

orbd.exe

Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
Size 906KB
SHA256 9597f62057abbc4cfd31386fc1fc98e9683f491eeec92ee5e6b190367f003d1c
MD5 5006c3c8d64fe34022e5823f0790cbe7
SHA1 1df108e18dc4a4e351801151dd23d1fd05086ef4
SHA512 97b6a8bbc73ac5f6b72e2b96775e0da2f3453f1864359f1579b0545da7a97d6f668226ac73a2456daf3bb474c5a3dbaaf8f9144cf4d6fd87c47cd68964b507ca
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKkle9Q:N8RFEL8XVav9MkTQfOKkle9Q
TLSH
T17D158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pack200.exe

Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
Size 906KB
SHA256 a8aa7e0de6bf41b2354b5d39cce0832a17f1b388203f9d1541fe456d1c3d47c0
MD5 cbba62d933f5f62e1c9e4cb177c7e1cf
SHA1 5599dfed914390ed25a6b2f1b038e7a1c2842987
SHA512 a5a1cb3ffc2aa13bbdcd335d5cd3ef44c94a4ab5c953348e37ae25e38370265e121fb47a6988141c8c8f587f039372aec383c63891181bd86ef791e87edbb024
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklL4:N8RFEL8XVav9MkTQfOKklL4
TLSH
T1E3158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

policytool.exe

Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
Size 906KB
SHA256 b23ccd42d1e15f928e3389de72942a51d4153f27280b2d4ae878ffebb6588bc8
MD5 7e4a3a3cd9a050b12b3285048f0b034f
SHA1 ba16c979895f71c4306b0b15b47cd44f84dd265c
SHA512 1a5f71864f5529ea9733dbb6860286c969361c884cd8f39e770470970255038eb4d661bc660c9cdfed86ac592f4f460cad70c00b6bede682017cea21ad7b2df5
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklCu:N8RFEL8XVav9MkTQfOKklCu
TLSH
T15D158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

rmic.exe

Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
Size 906KB
SHA256 44f396980a6b30fe8b80488e17a5ff3a22a5fc074b5354e123364b6811440e5e
MD5 d0ac706b3760e58e85cfe6e04b53adfe
SHA1 ba690436577251f47ad6804ef4657f7193e341d7
SHA512 be5ed0b2ed2e33efad1821d4bc5b31c7c2f6ecfaba93d46ba00058b5b2b4c91cabb8ab00936ee0a315a16530cffebebb076dcb94e7d4fa77d0b6a22c7487b6a9
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklTj:N8RFEL8XVav9MkTQfOKklTj
TLSH
T181158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3A4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

rmid.exe

Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
Size 906KB
SHA256 b4c1beec42ae1290561ed3e65425bfb7d5a6771506d7275196bed005dd3816aa
MD5 b3cb913deb92b41fced5417d59769379
SHA1 edf98c209b660fbb91adfed58079c64f03f8074f
SHA512 ce9223f487eda267a7c694c04d6a3736cbe95b3d0a1b120cd5ab3b85e4976c22cb443d9a6dfc81b7f8294ad6bc7b5ae1095c0539490f3317973a7023ec22b42a
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKkleg:N8RFEL8XVav9MkTQfOKkleg
TLSH
T10C158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

rmiregistry.exe

Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
Size 906KB
SHA256 8de31b1f8dc6e15d46a2d6c4f88161b590a3fa56d7fa6b76b46622ae54d41255
MD5 004b7105280d64a78355e2db2f053955
SHA1 54cb3a6692e6a877b67705998ce3cfc2fa93497b
SHA512 31ffc4497ca2f86a89110cc2b038ed449f1f8b7abe0ce0fa70476eba10c0a5077a784c28e2ffc751f54228882c0c656b44c868b599f221312b8ad4e96c22c6ed
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklRI:N8RFEL8XVav9MkTQfOKklRI
TLSH
T1FA158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

schemagen.exe

Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
Size 906KB
SHA256 c3213b03414c63a5036bb489414e33b3dde3a54e3177c164fe2e3f4059f2e481
MD5 7044abd1690218eef447b1ec62b81b7c
SHA1 beeca67d7066ceb0bc62627fa081888a7f9d2196
SHA512 5ae2b99e9e3ceac30a2107192dab9029f98fb0d0ea0e88569810cb705f634034061c160a9479cffa4ee5471222484eb5c2d07de46f703d28eae906756d827a5e
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklTo:N8RFEL8XVav9MkTQfOKklTo
TLSH
T1A1158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

serialver.exe

Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
Size 906KB
SHA256 2b692f815d6ff7d21713cdb0278c4b9222eb165d478f256a13bca3e9ff0598db
MD5 1d75d5d4c02982edbd6c91881d9fb5f4
SHA1 72c98fb284eb3ec3c47e270c8e3625af7e6e0b8c
SHA512 1f974767964753e14351c5a0cba3a56b3c2ca8dc0b11d56402d2df17f1034e4bbb3240a27f7b7a050f0f2bc11fa40fd3c6a5a48f8640e6421e44c33c68ad2260
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklY+:N8RFEL8XVav9MkTQfOKklY+
TLSH
T1D1158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

servertool.exe

Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
Size 906KB
SHA256 94db2c8f1a36aed9547fc4be64f069b20654fcc25fa5e4a93a9c73bbdcf282c6
MD5 961a70b0ffbeccbbd9ce6b9720827657
SHA1 f9af7c9fc2802b90bb517dc82e1389e3d0f165d8
SHA512 6648d15cb3ee7ed119f2b0d6528c932b478238d73a4afba776578ea91344c9aeb22b516d31384afd152cf1b13116558aa6880c96ec91e06ec5f82692e609e0e0
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklwQ:N8RFEL8XVav9MkTQfOKklwQ
TLSH
T142158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tnameserv.exe

Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
Size 906KB
SHA256 d86b543c3a631194e628836376a7142803914ac380be6194edc2202c82ea69eb
MD5 ff3a618fed2c00683911ce326386e464
SHA1 96169aa8e4c114e2cf7e0210147bc060ebcf6b78
SHA512 74c5b7dd4ac29109a3f749b157d0db2e9a8dac28c0e98b69216ed2a0a69d46515ccd821876714940d1612220f76676da174b88a49ba45216683d85cec9cf9007
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklZX:N8RFEL8XVav9MkTQfOKklZX
TLSH
T1F0158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wsgen.exe

Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
Size 906KB
SHA256 f23c90097f91fea2339b0118297e3423a985d0e465784a1217ac75e5cdd4c64a
MD5 eec379cfa50ccc29029b130c52dc3241
SHA1 9e41755c654fc295e870bf0d1b7de4cf9be3ec89
SHA512 169dbbd889f849fc815d6a35dab21f435cad5423c173384363af762687150f144661cd550099021d4dca3b480d7506e757b199ade721923621451cb0efb5ee92
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklzL:N8RFEL8XVav9MkTQfOKklzL
TLSH
T1A7158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wsimport.exe

Path C:\Program Files\Java\jdk-1.8\bin\wsimport.exe
Size 906KB
SHA256 09e83cfaa79dcf3846a2bc35b570ac6cb2210f33502117cbfeb845432c2d0990
MD5 213215033f0f219ee95c646d4eb2fcfa
SHA1 6b58fd4156c8ffb72742a824829dec0071c4a1fa
SHA512 e1735a6fba3c70859e3ea1d91c549b160c7e8c6b64a53d91f4146af9cd8df91ede369e6b279acb949cbba05ae08c3c0349b8b77ba77f66522c655875e82b7783
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklZFC:N8RFEL8XVav9MkTQfOKklZM
TLSH
T1F9158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

xjc.exe

Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
Size 906KB
SHA256 973c9acf63d3cb950c94407889a3b15baa9643a575943927010c17e2364c4576
MD5 63e39916abe73d419618b0d7f2ea35e8
SHA1 ecdeaa23bdd5e9267d1b36a4d80fc6959495d369
SHA512 add32d8aa9170b113d78465478b3c673d5093de569300241dc7b445034bd0b8527ff795fe7fd6c0174af3d43e78d5af027b190362ad7934705e4dd2b083d5672
SSDEEP 12288:N880N2YFShlwU/4YLeVX86avEF8JMkKOj0bidyzNJbT7SpKklih:N8RFEL8XVav9MkTQfOKklih
TLSH
T1A8158D13AE6898F2E57A4AB95B7186049F357E210700D7C7A3B4B79D8D333C09E3E625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1504-18-0x00000000006A0000-0x00000000006A3000-memory.dmp

Download

memory/1504-1-0x00000000006A0000-0x00000000006A3000-memory.dmp

Download

memory/1504-0-0x0000000000400000-0x000000000040E000-memory.dmp

Download

memory/4140-25-0x0000000002040000-0x0000000002050000-memory.dmp

Download

memory/4140-11-0x0000000002040000-0x0000000002050000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads