Overview

overview

10

Static

static

5

2026-11-04...ar.exe

windows10-2004-x64

10

2026-11-04...ar.exe

windows11-ltsc_2024-x64

10

Analysis

  • max time kernel
    70s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    05/11/2026, 22:39

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-11-04_80b96444a1c297101f38e7466cf88d87_icedid_njrat_vidar.exe
  • Size 4.1MB
  • Sample261105-2k66jstycx
  • SHA256 3057c26bb052b2c1b8104fd266c870a2b960939c5c83b526d3094c22dced0b99
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
discoveryexecutiondarksideratpersistencetrojan

Malware Config

Signatures

  • Family: DarkSideRAT

    DarkSideRAT is a remote access trojan.

    trojandarksiderat
  • Detects DarkSideRAT 6 IoCs
  • Modifies WinLogon for persistence 2 TTPs 1 IoCs
    persistence
  • Detects Reflective DLL injection artifacts 1 IoCs
  • Downloads MZ/PE file 1 IoCs
  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL 1 IoCs
  • Registers new Windows logon scripts automatically executed at logon. 1 TTPs 1 IoCs
    persistence
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Suspicious use of SetThreadContext 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Executes a command shell one-liner 1 TTPs 4 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 5 IoCs
  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 40 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 34 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-11-04_80b96444a1c297101f38e7466cf88d87_icedid_njrat_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-11-04_80b96444a1c297101f38e7466cf88d87_icedid_njrat_vidar.exe"
    1⤵
    • Checks computer location settings
    • Suspicious use of SetThreadContext
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4940
    • C:\Users\Admin\AppData\Local\Temp\2026-11-04_80b96444a1c297101f38e7466cf88d87_icedid_njrat_vidar.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-11-04_80b96444a1c297101f38e7466cf88d87_icedid_njrat_vidar.exe"
      2⤵
      • Reads the TCP/IP host and domain name from the registry
      • Suspicious use of WriteProcessMemory
      PID:3308
      • C:\Windows\System32\reg.exe
        "C:\Windows\System32\reg.exe"
        3⤵
        • Downloads MZ/PE file
        • Enumerates connected drives
        • Checks processor information in registry
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:1664
        • C:\Windows\system32\cmd.exe
          /c cmd.exe /c "move "C:\ProgramData\bungee.boo" "C:\Windows\omadmapi.dll""
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:1600
          • C:\Windows\system32\cmd.exe
            cmd.exe /c "move "C:\ProgramData\bungee.boo" "C:\Windows\omadmapi.dll""
            5⤵
            • Executes a command shell one-liner
            PID:1000
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /c whoami /user
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:3812
          • C:\Windows\system32\whoami.exe
            whoami /user
            5⤵
            • Suspicious use of AdjustPrivilegeToken
            PID:4204
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /c whoami /user
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:5000
          • C:\Windows\system32\whoami.exe
            whoami /user
            5⤵
            • Suspicious use of AdjustPrivilegeToken
            PID:2736
        • C:\Windows\system32\cmd.exe
          /c reg import "C:\Users\Admin\AppData\Local\Temp\_persist_240742437.reg"
          4⤵
          • Suspicious use of WriteProcessMemory
          PID:3144
          • C:\Windows\system32\reg.exe
            reg import "C:\Users\Admin\AppData\Local\Temp\_persist_240742437.reg"
            5⤵
            • Modifies WinLogon for persistence
            • Registers new Windows logon scripts automatically executed at logon.
            • Modifies registry class
            PID:2384
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --headless --disable-gpu --no-sandbox --disable-dev-shm-usage --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\User Data"
          4⤵
          • Loads dropped DLL
          • Checks processor information in registry
          • Enumerates system info in registry
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of WriteProcessMemory
          PID:2596
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x10c,0x110,0x114,0xe8,0x118,0x7ff84b6cc728,0x7ff84b6cc734,0x7ff84b6cc740
            5⤵
              PID:1948
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-sandbox --headless --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=angle --use-angle=swiftshader-webgl --field-trial-handle=1956,i,7527669590566896109,5520011943625180122,262144 --disable-features=PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1952 /prefetch:2
              5⤵
                PID:1248
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --force-high-res-timeticks=disabled --field-trial-handle=1956,i,7527669590566896109,5520011943625180122,262144 --disable-features=PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1992 /prefetch:3
                5⤵
                • System Time Discovery
                PID:1672
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-sandbox --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --force-high-res-timeticks=disabled --field-trial-handle=1956,i,7527669590566896109,5520011943625180122,262144 --disable-features=PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2144 /prefetch:8
                5⤵
                  PID:3444
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=1956,i,7527669590566896109,5520011943625180122,262144 --disable-features=PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2900 /prefetch:1
                  5⤵
                    PID:4612
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=1956,i,7527669590566896109,5520011943625180122,262144 --disable-features=PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2904 /prefetch:1
                    5⤵
                      PID:3316
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --no-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=1956,i,7527669590566896109,5520011943625180122,262144 --disable-features=PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2876 /prefetch:1
                      5⤵
                        PID:4416
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-sandbox --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --force-high-res-timeticks=disabled --field-trial-handle=1956,i,7527669590566896109,5520011943625180122,262144 --disable-features=PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4608 /prefetch:8
                        5⤵
                          PID:2488
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-sandbox --message-loop-type-ui --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --force-high-res-timeticks=disabled --field-trial-handle=1956,i,7527669590566896109,5520011943625180122,262144 --disable-features=PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4600 /prefetch:8
                          5⤵
                            PID:4184
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-sandbox --message-loop-type-ui --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --force-high-res-timeticks=disabled --field-trial-handle=1956,i,7527669590566896109,5520011943625180122,262144 --disable-features=PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5080 /prefetch:8
                            5⤵
                              PID:3756
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-sandbox --message-loop-type-ui --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --force-high-res-timeticks=disabled --field-trial-handle=1956,i,7527669590566896109,5520011943625180122,262144 --disable-features=PaintHolding --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5100 /prefetch:8
                              5⤵
                                PID:4956
                            • C:\Windows\system32\cmd.exe
                              /c dir /a /s /b C:\*imgui_impl_win32.cpp C:\*.suo C:\*.exe C:\*.vcxproj C:\*.csproj > C:\ProgramData\CDat.bin1
                              4⤵
                                PID:636
                              • C:\Windows\system32\cmd.exe
                                /c dir /a /s /b D:\*imgui_impl_win32.cpp D:\*.suo D:\*.exe D:\*.vcxproj D:\*.csproj > C:\ProgramData\DDat.bin1
                                4⤵
                                  PID:1848
                                • C:\Windows\system32\cmd.exe
                                  /c dir /a /s /b F:\*imgui_impl_win32.cpp F:\*.suo F:\*.exe F:\*.vcxproj F:\*.csproj > C:\ProgramData\FDat.bin1
                                  4⤵
                                    PID:3904
                            • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                              "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                              1⤵
                                PID:4596
                              • C:\Windows\system32\svchost.exe
                                C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                1⤵
                                  PID:4784
                                • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                  "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                  1⤵
                                    PID:3708

                                  Network

                                        MITRE ATT&CK Enterprise v16

                                        Reconnaissance

                                        Resource Development

                                        Initial Access

                                        Execution

                                        Command and Scripting Interpreter

                                        1
                                        T1059

                                        Windows Command Shell

                                        1
                                        T1059.003

                                        Persistence

                                        Boot or Logon Autostart Execution

                                        1
                                        T1547

                                        Winlogon Helper DLL

                                        1
                                        T1547.004

                                        Boot or Logon Initialization Scripts

                                        1
                                        T1037

                                        Logon Script (Windows)

                                        1
                                        T1037.001

                                        Privilege Escalation

                                        Boot or Logon Autostart Execution

                                        1
                                        T1547

                                        Winlogon Helper DLL

                                        1
                                        T1547.004

                                        Boot or Logon Initialization Scripts

                                        1
                                        T1037

                                        Logon Script (Windows)

                                        1
                                        T1037.001

                                        Defense Evasion

                                        Modify Registry

                                        1
                                        T1112

                                        Credential Access

                                        Discovery

                                        Browser Information Discovery

                                        1
                                        T1217

                                        Peripheral Device Discovery

                                        1
                                        T1120

                                        Query Registry

                                        4
                                        T1012

                                        System Information Discovery

                                        4
                                        T1082

                                        System Network Configuration Discovery

                                        1
                                        T1016

                                        System Time Discovery

                                        1
                                        T1124

                                        Lateral Movement

                                        Collection

                                        Command and Control

                                        Exfiltration

                                        Impact

                                        Replay Monitor

                                        Loading Replay Monitor...

                                        Downloads

                                        7z.exe
                                        • Path C:\Program Files\7-Zip\7z.exe
                                        • Size 580KB
                                        • SHA256 13c42b641c35fb8442f8dd8efcc99a8610eb4c81c44ce6db4cae85ac226438af
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        7zFM.exe
                                        • Path C:\Program Files\7-Zip\7zFM.exe
                                        • Size 578KB
                                        • SHA256 7eccd3c1afbc4ac43e590fdb4d7635a34ef91b1d430a49a6d0ae2ec2061d0877
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        7zG.exe
                                        • Path C:\Program Files\7-Zip\7zG.exe
                                        • Size 723KB
                                        • SHA256 f3e5ac87f7e5a74ea997a8fb3ddf2d5c0c9f7eec361933ef364614c847f023ae
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        AppVShNotify.exe
                                        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
                                        • Size 313KB
                                        • SHA256 31d729831fed671040e37905a9c8784f7f6f108d4514e048709bb7bc76dca188
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        IntegratedOffice.exe
                                        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
                                        • Size 904KB
                                        • SHA256 8d1f073ef74c43a71e2261c346383a34014548cbf2ccf3b063cef37c609a2457
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        OfficeC2RClient.exe
                                        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
                                        • Size 758KB
                                        • SHA256 bb331187957986e40b241eb8dc5ab5157a7ac5677227e802b017972c675b0bed
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        appvcleaner.exe
                                        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
                                        • Size 758KB
                                        • SHA256 19ef56b1263ea9ba4844447ffc4f39b05dfc70b48cbcce6a7e89dcfc260db8ec
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        VSTOInstaller.exe
                                        • Path C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe
                                        • Size 128KB
                                        • SHA256 970fdb6963bd5c062633d0ba49dd54eb18c8533f5e9811eff64ed169f1bc52a6
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        chrmstp.exe
                                        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\chrmstp.exe
                                        • Size 577KB
                                        • SHA256 dcb1f51ae53aaef2daa9fad3bb537658f88d6b360a7867cf24ff0e6624dcfca2
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        chrome_pwa_launcher.exe
                                        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
                                        • Size 627KB
                                        • SHA256 d4d3f84c01a5fc5a10f6b1947a67e2fde1e01376c4ce66937ba39f6fe6f91693
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        elevated_tracing_service.exe
                                        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
                                        • Size 618KB
                                        • SHA256 f5b254e8d67cca051ff0e0d0267b5280cab5525a51722fc1144fdc4d6ac605a8
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        elevation_service.exe
                                        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                        • Size 618KB
                                        • SHA256 167f65b9cb3ed040d2e78a544f338703966177cfd5d5152d67cb6a6471081ca5
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        notification_helper.exe
                                        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
                                        • Size 485KB
                                        • SHA256 6b590fbe02b5979376066c31738e380c28cf8cccdee2194845c410217367efb1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        os_update_handler.exe
                                        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\os_update_handler.exe
                                        • Size 476KB
                                        • SHA256 285f78f1de63617ebeeb3322ff0a6eae675161a7a1045a7fe207e75ef6b94b5b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        chrome_proxy.exe
                                        • Path C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
                                        • Size 908KB
                                        • SHA256 c870d3b752adffec37a82d449f81340fc6f5ec9a226344c3fa70b20c80859971
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        appletviewer.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe
                                        • Size 55KB
                                        • SHA256 dac52159adc2886ad7b66a2a364fef7f64f56627b3cba36ce61763298b250640
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        extcheck.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
                                        • Size 55KB
                                        • SHA256 ae917bedf1807d233f56424d28c4ca539d424be18f248e389d1c96560dcb2bd8
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        idlj.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
                                        • Size 55KB
                                        • SHA256 ba4be9d7faa16de16ab9a57a4e74b232353217f0076ae5485d0afd6ae878ef89
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jabswitch.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
                                        • Size 75KB
                                        • SHA256 d1b0d53810a56f5259d6688313f77e7476414f7e769ac0e1982c107f4d321859
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jar.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
                                        • Size 55KB
                                        • SHA256 f35deed07a5bdfd755dc74aa76e9fecce436c8ecf43531f7b77b474f05194f3a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jarsigner.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
                                        • Size 55KB
                                        • SHA256 d2f2a56268c5516e85f7be65ee7e08f4b52737d7ae6e9415c743fa745e01f990
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        java-rmi.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
                                        • Size 55KB
                                        • SHA256 bf723fee0453f0cb4ba3d98a88a07107e6c4451dd3d6254f0ffa62f18eba1f78
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        java.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
                                        • Size 316KB
                                        • SHA256 a6f4079299a04467667d0468b1836805e6ea044108d01c00004622989ed3e418
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        javac.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
                                        • Size 55KB
                                        • SHA256 96152115d5f1318e4f99be34c8a41cc0a1d6bfe62b5d758c3d04b1768e042135
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        javadoc.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\javadoc.exe
                                        • Size 55KB
                                        • SHA256 741b7ed533bcef1dab267d70be20d138a7d5856d70212ec71aa1bfa94a4fc500
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        javafxpackager.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
                                        • Size 193KB
                                        • SHA256 61f6648ccc66159301cbfd891a999df93558472797092f2b666c0e7f0a5bd828
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        javaw.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
                                        • Size 316KB
                                        • SHA256 331753f90825ec3603ece15c6afa2ed11813a2c4e4d2da61d9ea34e64c819078
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        javaws.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
                                        • Size 476KB
                                        • SHA256 46d8ff5b42c1abb7a486413112b276910e633a49e509b52dc10424c302b2fbec
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jcmd.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
                                        • Size 55KB
                                        • SHA256 9aee519cd8cab0ba6331463869c0b447508f59a175c4ea9d4e6378589da3f988
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jconsole.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
                                        • Size 55KB
                                        • SHA256 9f4661768eeeb8ef1d1dc4d2b998b636a3c89cf1deb80a659c8a8fe59c65467f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jdb.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
                                        • Size 55KB
                                        • SHA256 5fcb758faa187e678577dd0f1611205e2988f9bfacb970b36da830a882875c10
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jinfo.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
                                        • Size 55KB
                                        • SHA256 16be8254f4ed6b118fddd4e85b19a86074948f19ac824aa0bf57803390fc5f20
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jmap.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
                                        • Size 55KB
                                        • SHA256 ab4534c23f4472cf6498c1eaf2b36f30c3c1719fe38725d863a983c8019af750
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jrunscript.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe
                                        • Size 55KB
                                        • SHA256 5b4c172a729e1ba0dc0d53f9586e84342a7443c12fdf467d5a4121ed859deb28
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jsadebugd.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
                                        • Size 55KB
                                        • SHA256 252cbe02e781afaf9190c3f51f27b62acdd6a32ad1e93dcb611aabdb43ef8442
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jstack.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
                                        • Size 55KB
                                        • SHA256 a5dc401dad60d3d7d36e56857c11e2b196ff88e5354f1b08cef9baf257114f67
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jstat.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
                                        • Size 55KB
                                        • SHA256 902c74dc1f146f708614ba8db0cd70941eb799c9fc0cf964aace3722fa1d69bc
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jstatd.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
                                        • Size 55KB
                                        • SHA256 abedf6f55a493ca26588a42bba50f1399e24eda246388330e0ab45a7bb17b2be
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        keytool.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
                                        • Size 55KB
                                        • SHA256 0713b1f062c87145dbdeedea779f3a6b13f16a281df202c83109e558078c940e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        kinit.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
                                        • Size 55KB
                                        • SHA256 39a681125c0e7de50414fa48763d09e41202ae5a38c739d766c5d8d0bd4b8794
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        ktab.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
                                        • Size 55KB
                                        • SHA256 55f2d7715240d9b89df84b00d0f6c5736aa47b45bf53afc46981ed0ee30cd7e1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        native2ascii.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
                                        • Size 55KB
                                        • SHA256 f3067573f0780b020370230356c243222234360115dd1c38c1b73257f71088bd
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        orbd.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\orbd.exe
                                        • Size 55KB
                                        • SHA256 1490a86eb88db0cf460f76aa6f1b13caf3894e9352ff1a42ef0aaee3f639b5f0
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        pack200.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
                                        • Size 55KB
                                        • SHA256 61131b5f03619a3f7b85ccdb83b7674eba5818e0e1c09bb87a70a85216849f3a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        policytool.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
                                        • Size 55KB
                                        • SHA256 3cf907b32b5aa1984850e87d58e114152cf2c91a7d72bd7382f3af135262c498
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        rmic.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
                                        • Size 55KB
                                        • SHA256 039ec156904bddb462ed3d2bf6f174281389a7b04abe31e1388b1196af593303
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        rmid.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
                                        • Size 55KB
                                        • SHA256 6522d0273501abf733d789ffa2379ed1956f07731a771225d717d36a42c2a238
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        schemagen.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
                                        • Size 55KB
                                        • SHA256 cf77e4adff2b2403bf3b95b0de24465f76ea026b015016d2b978b8aa5fa7b1b6
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        serialver.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\serialver.exe
                                        • Size 55KB
                                        • SHA256 72cb7d127dd173d6228600855140469788c700ba76c6bd3ff831f58500014ab4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        tnameserv.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
                                        • Size 55KB
                                        • SHA256 21de030c9b8306f9633bb4d8ecf910f825914c58d4357e51833b1fb0d8d47889
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        unpack200.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
                                        • Size 251KB
                                        • SHA256 3f0c7d33c0f7c2741b67ffec2c042dcdb54f5fe3c0b0804c72daa75b8fd4f40f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        wsgen.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\wsgen.exe
                                        • Size 55KB
                                        • SHA256 4203eea02874162c2345e072e133d79308fa833a0a62c45a0770b8ae9df1eecf
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        wsimport.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\wsimport.exe
                                        • Size 55KB
                                        • SHA256 c67efe7736345318cad879cc55da2e432fb51856103749e4a45fb9c5ade63308
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        xjc.exe
                                        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
                                        • Size 55KB
                                        • SHA256 a37df49decc4df95ce933eef17b33bc7b5595c700c633173ea171fd7560e3dfe
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        javacpl.exe
                                        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe
                                        • Size 134KB
                                        • SHA256 9a66f8dd3da7dfae628c414649e2e332bd723e7b6f3a56a0fbc53f02f9040a22
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jp2launcher.exe
                                        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe
                                        • Size 180KB
                                        • SHA256 25b9747f2f8c926e60d5edda62beae83c6cdc9c95df9604d4e4a6f761aa632fc
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        ssvagent.exe
                                        • Path C:\Program Files\Java\jdk-1.8\jre\bin\ssvagent.exe
                                        • Size 129KB
                                        • SHA256 11049dab54a3c2984e2a30e5dc3e1dfd303514391a5792e477355b7d6d206219
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jabswitch.exe
                                        • Path C:\Program Files\Java\jre-1.8\bin\jabswitch.exe
                                        • Size 75KB
                                        • SHA256 fe9f356b0eb94ad3e5f7e4665384a39e2a796f3b25f3c72eb023c50fb81ac889
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        java-rmi.exe
                                        • Path C:\Program Files\Java\jre-1.8\bin\java-rmi.exe
                                        • Size 55KB
                                        • SHA256 dfc60a2a181e8aa755bd53ccd7e18e3a74901610888dae01dea7c224102e402a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        java.exe
                                        • Path C:\Program Files\Java\jre-1.8\bin\java.exe
                                        • Size 156KB
                                        • SHA256 7bf04f965529fef35c377081ee21d1fcdd77a1302464e5c833b85659c524e519
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        javacpl.exe
                                        • Path C:\Program Files\Java\jre-1.8\bin\javacpl.exe
                                        • Size 134KB
                                        • SHA256 49a2ac911b2e03189f26f05f4a12353bf61f1651e4eb020ef87dac9a69b3bb36
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        javaw.exe
                                        • Path C:\Program Files\Java\jre-1.8\bin\javaw.exe
                                        • Size 156KB
                                        • SHA256 2c3bbb429638210caa214025bf7ffa76e267cb62d5f0baea5baf5f041d852952
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        javaws.exe
                                        • Path C:\Program Files\Java\jre-1.8\bin\javaws.exe
                                        • Size 156KB
                                        • SHA256 62919c943df9acda2169921f32e64b26ed80ae3ad324e5314e2ea4878a5e3b87
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jjs.exe
                                        • Path C:\Program Files\Java\jre-1.8\bin\jjs.exe
                                        • Size 55KB
                                        • SHA256 c1179b9ca1073af7f84d70d1bb514176b0b0560d880a069f4e4d8a29bff19259
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        jp2launcher.exe
                                        • Path C:\Program Files\Java\jre-1.8\bin\jp2launcher.exe
                                        • Size 92KB
                                        • SHA256 c22dad2353292f3ff11b9ce8c505983f09cae96f254ccf28c6af0d35f0d787df
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        keytool.exe
                                        • Path C:\Program Files\Java\jre-1.8\bin\keytool.exe
                                        • Size 55KB
                                        • SHA256 dc7900e0d0d540c4ad83635eb9c65d4e8725ff4f8f8e8611fb74e3cb14eaf521
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        kinit.exe
                                        • Path C:\Program Files\Java\jre-1.8\bin\kinit.exe
                                        • Size 55KB
                                        • SHA256 c18d3b24fc1937cd0803f760ff54365871fda4cf941d56abb7c26642f110db79
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        ktab.exe
                                        • Path C:\Program Files\Java\jre-1.8\bin\ktab.exe
                                        • Size 55KB
                                        • SHA256 9e6bb41fa7ffd7ae8392238fb98cd874a8dfd2665add14e17a4b11697d0d1703
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        orbd.exe
                                        • Path C:\Program Files\Java\jre-1.8\bin\orbd.exe
                                        • Size 55KB
                                        • SHA256 d85190f715f606ed7ea1ba8d4ec81b0f550505f1acda6f851253963e7b8b71f3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        pack200.exe
                                        • Path C:\Program Files\Java\jre-1.8\bin\pack200.exe
                                        • Size 55KB
                                        • SHA256 60962a2ae81cbdda750180a17ad311875334279ff49c96c998d26e1614b76be5
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        policytool.exe
                                        • Path C:\Program Files\Java\jre-1.8\bin\policytool.exe
                                        • Size 55KB
                                        • SHA256 90ff1e86ef21e25e1f7e1c3467a312033857b37eff47d03c29ebfa53c890e74a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        rmid.exe
                                        • Path C:\Program Files\Java\jre-1.8\bin\rmid.exe
                                        • Size 55KB
                                        • SHA256 61714644b838630aab3567404bc761e53359572be0bbcfea75773222b4d2b0fa
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        rmiregistry.exe
                                        • Path C:\Program Files\Java\jre-1.8\bin\rmiregistry.exe
                                        • Size 55KB
                                        • SHA256 01298761ec0d27d69d8e1f7287283996dea3ff323e6803b72f09478a31645ed7
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        ssvagent.exe
                                        • Path C:\Program Files\Java\jre-1.8\bin\ssvagent.exe
                                        • Size 92KB
                                        • SHA256 a1298f551ee3540f46b4c23614b708f5c6a4abc1b7ee8afd808449331f7e6455
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        tnameserv.exe
                                        • Path C:\Program Files\Java\jre-1.8\bin\tnameserv.exe
                                        • Size 55KB
                                        • SHA256 9f24321c5e409dccd33f2b0dc17b99b9033e9be1cb5eb4d438e4a4c08141a083
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        unpack200.exe
                                        • Path C:\Program Files\Java\jre-1.8\bin\unpack200.exe
                                        • Size 186KB
                                        • SHA256 f05744e4c698c5e075035d5f371100805c149c936300cbe8571b6e1ccaf486d2
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        AppVDllSurrogate64.exe
                                        • Path C:\Program Files\Microsoft Office\root\Client\AppVDllSurrogate64.exe
                                        • Size 64KB
                                        • SHA256 cf3e03dedb8ad4dd9078d8e99964054eec07e825b1c24444e361dbdfbe8d41aa
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        AppVLP.exe
                                        • Path C:\Program Files\Microsoft Office\root\Client\AppVLP.exe
                                        • Size 187KB
                                        • SHA256 8b702ea9cfb3d2170d4efa479d77a16e848934b8454f910840900edc3b413c50
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        Integrator.exe
                                        • Path C:\Program Files\Microsoft Office\root\Integration\Integrator.exe
                                        • Size 92KB
                                        • SHA256 032eebf1e1d29dcf354823cf74b72daec80ef890bee9191b0fab96ebb64be015
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        IEContentService.exe
                                        • Path C:\Program Files\Microsoft Office\root\Office16\IEContentService.exe
                                        • Size 92KB
                                        • SHA256 a3968ed6fea4e4f2184fe35c7c1bd7f7087ec2260af6671edd6f7898eab419b6
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        excelcnv.exe
                                        • Path C:\Program Files\Microsoft Office\root\Office16\excelcnv.exe
                                        • Size 92KB
                                        • SHA256 aefd3c9448ea717c227e6074c7568bd9f8e94582cec1f63ccf896fc5cfde2dc0
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        msoadfsb.exe
                                        • Path C:\Program Files\Microsoft Office\root\Office16\msoadfsb.exe
                                        • Size 92KB
                                        • SHA256 52194e295cd702a2eee4859e49dd8672e995d45961fc122cf3ad609119bb9204
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        msoasb.exe
                                        • Path C:\Program Files\Microsoft Office\root\Office16\msoasb.exe
                                        • Size 93KB
                                        • SHA256 9562f956ab5375049c86dfe9da7187c6bc319300f0f63af768f19f1c714c01b0
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        msoev.exe
                                        • Path C:\Program Files\Microsoft Office\root\Office16\msoev.exe
                                        • Size 64KB
                                        • SHA256 b2105a85decceee5878ed1a4f9235795b85df64516d52493e5d18e1e16a1faed
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        msoia.exe
                                        • Path C:\Program Files\Microsoft Office\root\Office16\msoia.exe
                                        • Size 64KB
                                        • SHA256 07bdeaa76458d4ef87ee9636f312dfc7e6d643cc689b0ea420e69cf8a0a5bbc6
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        msotd.exe
                                        • Path C:\Program Files\Microsoft Office\root\Office16\msotd.exe
                                        • Size 87KB
                                        • SHA256 bf0eacf119fc82f4a628062114b463fdde2adc45a9f60db1904d80f8627bc435
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        dotnet.exe
                                        • Path C:\Program Files\dotnet\dotnet.exe
                                        • Size 175KB
                                        • SHA256 424a41d14be022f6af99bf16b4c98797fe5b495ea18cefc7fae57097cecf983d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        createdump.exe
                                        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\createdump.exe
                                        • Size 87KB
                                        • SHA256 bfb352886ed891eb1d7c694580615868382f112e5cbb3f36325ce81a92f46ad1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        createdump.exe
                                        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\createdump.exe
                                        • Size 95KB
                                        • SHA256 bdffe87b07f0ee517ebb0631ecc9decb9dca701690639c47936f6178b0377441
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        createdump.exe
                                        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\createdump.exe
                                        • Size 91KB
                                        • SHA256 bd58b7cac2d3a1873329afc526d177e2f98096e4d428685149605f29c76c80ec
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        CDAT.bin1
                                        • Path C:\ProgramData\CDAT.bin1
                                        • Size 540KB
                                        • SHA256 b1f038a22889f6d434668759d8afb27689ac9d57771b6679098f55ec5ed8d9cb
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        bungee.boo
                                        • Path C:\ProgramData\bungee.boo
                                        • Size 55KB
                                        • SHA256 d2797d9aab9ed671b07cc4bda0ccf3d5837aece3bcd38b2be42d6b84607041a1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        103621DE9CD5414CC2538780B4B75751
                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751
                                        • Size 808B
                                        • SHA256 3dd5ea8a14eb665ba6057d424f94e5e83757ffaab456578dbf038af04053b19e
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        1B1495DD322A24490E2BF2FAABAE1C61
                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1B1495DD322A24490E2BF2FAABAE1C61
                                        • Size 355B
                                        • SHA256 12fd0590708bb38d8039bc994178acee8a3d220f0cd194b0f1c2fc9ba622f927
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        22D536C4B4AD2CEF7AC6B7789FD235E3
                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\22D536C4B4AD2CEF7AC6B7789FD235E3
                                        • Size 283B
                                        • SHA256 251ed08cc8f5873098ea5ee083034e7cd99ece955920e12a42e50306a94cb6eb
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        2CCDCCF5E8CDE7E3111F67F3A12942A9
                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2CCDCCF5E8CDE7E3111F67F3A12942A9
                                        • Size 101KB
                                        • SHA256 4fa72e285d3a607c49358ab8f9a10d98f81a2db9349534fc6faa0f27fd5be1db
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        103621DE9CD5414CC2538780B4B75751
                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751
                                        • Size 192B
                                        • SHA256 760c532eca7e1dfca618d7ab987be49e81e2bd19cc42656d762c72e4aaa0e080
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        1B1495DD322A24490E2BF2FAABAE1C61
                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1B1495DD322A24490E2BF2FAABAE1C61
                                        • Size 192B
                                        • SHA256 edfecc9321ce506421a6a24f08d0dfcb0da7fd38276cb10b2ddf238ce8340f02
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        22D536C4B4AD2CEF7AC6B7789FD235E3
                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\22D536C4B4AD2CEF7AC6B7789FD235E3
                                        • Size 192B
                                        • SHA256 48fb5046da351152a00fd4f69d710a47f165a02029e46e7398a0058b4b11b3af
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        2CCDCCF5E8CDE7E3111F67F3A12942A9
                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2CCDCCF5E8CDE7E3111F67F3A12942A9
                                        • Size 246B
                                        • SHA256 fb6f5c324228f0cb60b94ba639bda4e8d11d177d4dc5a3db4d6fd69c35ec4f97
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        217a5cbc-2af3-489d-8743-78874461ef17.tmp
                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\217a5cbc-2af3-489d-8743-78874461ef17.tmp
                                        • Size 274KB
                                        • SHA256 2ac5ca0658b99cdd8eac848506cc9632afd95f07653bb5a607063dc719251980
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        7841645c-2f3f-4c6f-bdac-4b9497f7a96a.tmp
                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\7841645c-2f3f-4c6f-bdac-4b9497f7a96a.tmp
                                        • Size 130KB
                                        • SHA256 9131a3b1e57976b6bd15eb274b68a32528eed638444ceb0e8d212bd00a4d1594
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        00646b00-b23e-4dee-b72e-39cc23a73057.tmp
                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\00646b00-b23e-4dee-b72e-39cc23a73057.tmp
                                        • Size 11KB
                                        • SHA256 986ab2628460896f2d2c5095f80f0efd14bb2f020819e36905315fa4939e6bcd
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        7cab476f-d4c3-41dc-b177-65a5ee4599df.tmp
                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\7cab476f-d4c3-41dc-b177-65a5ee4599df.tmp
                                        • Size 13KB
                                        • SHA256 cbff59adc7b520f0de2985ad921ee12da5b00aa0aaadd64b2862a8b11ece7f19
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        15ded310-8806-47a1-9e05-cf9d91c4b767.tmp
                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\15ded310-8806-47a1-9e05-cf9d91c4b767.tmp
                                        • Size 2KB
                                        • SHA256 317d1d40459662bd9178341075fc70db76bc4f060c7b7a3e87ca35deb615a41d
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        30d7a0da-c274-42f7-bab9-6076a6ab881e.tmp
                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\30d7a0da-c274-42f7-bab9-6076a6ab881e.tmp
                                        • Size 2B
                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                        • MD5 SHA1 SHA512
                                        Submit Download

                                        f4a8449e-d833-4312-a4fb-08d137a67a48.tmp
                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\f4a8449e-d833-4312-a4fb-08d137a67a48.tmp
                                        • Size 12KB
                                        • SHA256 c67f8c98bfc49744406604314be4244268ef74f4702719fcd33f77937888a090
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        f6c3484e-99fd-45d8-83fe-1d63b499b80d.tmp
                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\f6c3484e-99fd-45d8-83fe-1d63b499b80d.tmp
                                        • Size 6B
                                        • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                        • MD5 SHA1 SHA512
                                        Submit Download

                                        f881ed1f-c952-4f64-864f-352af0ad8b41.tmp
                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\f881ed1f-c952-4f64-864f-352af0ad8b41.tmp
                                        • Size 414B
                                        • SHA256 5510a01311ff028ee476ed4b5d96e67854e3470ac5c2f2365fda38d179d84a97
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        d49a5e39-add4-46f8-bf2c-58077a5131f6.tmp
                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\d49a5e39-add4-46f8-bf2c-58077a5131f6.tmp
                                        • Size 274KB
                                        • SHA256 32beb90376f6a89d880c1db9f19dc128537fd7aa54c1c80ca5a02da5f148fd2f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        d733d6d7-125f-47c1-a3e7-4cdd5a531970.tmp
                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\d733d6d7-125f-47c1-a3e7-4cdd5a531970.tmp
                                        • Size 274KB
                                        • SHA256 d2fc5deb4cb645bf78ffd5596158f58b8289448752092e5a7479dfb962a57a62
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        CCCWF.tmp
                                        • Path C:\Users\Admin\AppData\Local\Temp\CCCWF.tmp
                                        • Size 1.0MB
                                        • SHA256 14b7e805a4f95817f3f53b02f74df49709c4a6949db53f276d421646a6b0591f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        _persist_240742437.reg
                                        • Path C:\Users\Admin\AppData\Local\Temp\_persist_240742437.reg
                                        • Size 97KB
                                        • SHA256 57dedfafbcafb45a2a0867aeb0982d1880b03a5e56475c0fa9275f2391f1d4d8
                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                        Submit Download

                                        crx
                                        • Path C:\Users\Admin\AppData\Local\Temp\crx
                                        • Size 64B
                                        • SHA256 453d099caea7f4acd6b7f4285a977711e3f6e3089493a4646a2f2af54700c4ef
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        dll_debug.txt
                                        • Path C:\Users\Admin\AppData\Local\Temp\dll_debug.txt
                                        • Size 559B
                                        • SHA256 d9be7a3d5844afcbc43449975d3d6e21f95e064e70b02b6df4a7cd909856da29
                                        • MD5 SHA1 SHA512 TLSH
                                        Submit Download

                                        memory/1664-270-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-45-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-102-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-196-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-198-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-201-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-203-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-205-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-207-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-32-0x000001AECE730000-0x000001AECE731000-memory.dmp
                                        Download

                                        memory/1664-31-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-38-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-50-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-55-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-56-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-54-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-52-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-53-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-51-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-49-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-48-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-47-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-46-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-44-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-43-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-208-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-59-0x000001AECEB40000-0x000001AECEB41000-memory.dmp
                                        Download

                                        memory/1664-61-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-60-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-62-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-63-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-67-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-70-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-73-0x000001AED0590000-0x000001AED0591000-memory.dmp
                                        Download

                                        memory/1664-76-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-88-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-97-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-268-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-265-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-242-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/1664-227-0x000001AECE020000-0x000001AECE724000-memory.dmp
                                        Download

                                        memory/3308-25-0x0000000180000000-0x0000000180022000-memory.dmp
                                        Download

                                        memory/3308-30-0x0000000140000000-0x0000000140010000-memory.dmp
                                        Download

                                        memory/3308-0-0x0000000140000000-0x0000000140010000-memory.dmp
                                        Download

                                        memory/3308-4-0x0000000140000000-0x0000000140010000-memory.dmp
                                        Download

                                        memory/3308-1-0x0000000140000000-0x0000000140010000-memory.dmp
                                        Download

                                        memory/3308-2-0x0000000140000000-0x0000000140010000-memory.dmp
                                        Download

                                        memory/4940-3-0x0000000140000000-0x000000014042E000-memory.dmp
                                        Download

                                        memory/4940-6-0x0000000140000000-0x000000014042E000-memory.dmp
                                        Download