Overview

overview

10

Static

static

1

CyberGhost...1).exe

windows7-x64

3

CyberGhost...1).exe

windows10-2004-x64

10

Analysis

  • max time kernel
    150s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231127-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-11-2023 19:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    CyberGhostVPNSetup (1).exe

  • Size

    127KB

  • MD5

    fd093f3100a56b710c50d41667da7e2b

  • SHA1

    5ec9063e4380f642d2a551da76fd4d3f00fd4c96

  • SHA256

    f6dfae75fd23c0446ec1721994cf2530c66bd76366423176414747b39153bf58

  • SHA512

    d3daebf6e3669a4b2a944e60d97c86fd31878cea66e252f05ea8d23f92c1f02ef8e6f4dda250b979a9b9df3fa71dc43c4ab98e2cae52e7687861d1e9a3dd09c0

  • SSDEEP

    3072:ACNd5JY06+ywjDnJShh8N7JNzFrxO/DLxPO4GV:TNVPtVQ7LtOz

Score
10/10
purelogsdiscoverypersistencestealer

Malware Config

Signatures

  • Detect PureLogs payload 1 IoCs
  • PureLogs

    PureLogs is an infostealer written in C#.

    stealerpurelogs
  • Downloads MZ/PE file
  • Drops file in Drivers directory 3 IoCs
  • Manipulates Digital Signatures 1 TTPs 2 IoCs

    Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.

  • Checks computer location settings 2 TTPs 6 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 17 IoCs
  • Loads dropped DLL 42 IoCs
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in System32 directory 30 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 6 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 5 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 15 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies system certificate store 2 TTPs 10 IoCs
    evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: LoadsDriver 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\CyberGhostVPNSetup (1).exe
    "C:\Users\Admin\AppData\Local\Temp\CyberGhostVPNSetup (1).exe"
    1⤵
    • Checks computer location settings
    • Modifies system certificate store
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:1948
    • C:\Program Files\caba9c68-f7b6-40ce-b3a3-30ab74513f45\7cebc91a-50eb-4bc5-953f-e3f4d48bf272.exe
      "C:\Program Files\caba9c68-f7b6-40ce-b3a3-30ab74513f45\7cebc91a-50eb-4bc5-953f-e3f4d48bf272.exe" "C:\Users\Admin\AppData\Local\Temp\CyberGhostVPNSetup (1).exe"
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Drops file in System32 directory
      • Drops file in Program Files directory
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:5072
      • C:\Program Files\CyberGhost 8\Dashboard.exe
        "C:\Program Files\CyberGhost 8\Dashboard.exe" /install
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Modifies Internet Explorer settings
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:3560
        • C:\Program Files\CyberGhost 8\Dashboard.Service.exe
          "C:\Program Files\CyberGhost 8\Dashboard.Service.exe" --install
          4⤵
          • Executes dropped EXE
          PID:4272
        • C:\Program Files\CyberGhost 8\Applications\VPN\Data\OpenVPN\x64\tap-windows-9.21.2.exe
          "C:\Program Files\CyberGhost 8\Applications\VPN\Data\OpenVPN\x64\tap-windows-9.21.2.exe" /S
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of WriteProcessMemory
          PID:1320
          • C:\Program Files\TAP-Windows\bin\tapinstall.exe
            "C:\Program Files\TAP-Windows\bin\tapinstall.exe" hwids tap0901
            5⤵
            • Executes dropped EXE
            • Checks SCSI registry key(s)
            PID:4176
          • C:\Program Files\TAP-Windows\bin\tapinstall.exe
            "C:\Program Files\TAP-Windows\bin\tapinstall.exe" install "C:\Program Files\TAP-Windows\driver\OemVista.inf" tap0901
            5⤵
            • Executes dropped EXE
            • Drops file in System32 directory
            • Drops file in Windows directory
            • Checks SCSI registry key(s)
            • Suspicious use of AdjustPrivilegeToken
            PID:4376
  • C:\Program Files\CyberGhost 8\Dashboard.Service.exe
    "C:\Program Files\CyberGhost 8\Dashboard.Service.exe"
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4984
    • C:\Program Files\CyberGhost 8\wyUpdate.exe
      "C:\Program Files\CyberGhost 8\wyUpdate.exe" /justcheck /quickcheck /noerr -server="https://download.cyberghostvpn.com/windows/updates/8/nt/wyserver.wys"
      2⤵
      • Executes dropped EXE
      • Drops file in System32 directory
      • Modifies data under HKEY_USERS
      • Suspicious use of AdjustPrivilegeToken
      PID:1136
    • C:\Program Files\CyberGhost 8\Applications\VPN\Data\Tools\nvspbind.exe
      "C:\Program Files\CyberGhost 8\Applications\VPN\Data\Tools\nvspbind.exe" "TAP-Windows Adapter" /d *
      2⤵
      • Executes dropped EXE
      PID:4648
    • C:\Program Files\CyberGhost 8\Applications\VPN\Data\Tools\nvspbind.exe
      "C:\Program Files\CyberGhost 8\Applications\VPN\Data\Tools\nvspbind.exe" "TAP-Windows Adapter" /e ms_tcpip
      2⤵
      • Executes dropped EXE
      PID:2404
    • C:\Program Files\CyberGhost 8\Applications\VPN\Data\Tools\nvspbind.exe
      "C:\Program Files\CyberGhost 8\Applications\VPN\Data\Tools\nvspbind.exe" "TAP-Windows Adapter" /e ms_tcpip6
      2⤵
      • Executes dropped EXE
      PID:3944
    • C:\Windows\system32\netsh.exe
      "netsh" interface ipv6 set teredo disable
      2⤵
        PID:4016
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p
      1⤵
        PID:2164
      • C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall
        1⤵
        • Drops file in Windows directory
        • Checks SCSI registry key(s)
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:3928
        • C:\Windows\system32\DrvInst.exe
          DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{6e5f89a3-708b-114a-8b68-26be3443f754}\oemvista.inf" "9" "4d14a44ff" "0000000000000148" "WinSta0\Default" "0000000000000158" "208" "c:\program files\tap-windows\driver"
          2⤵
          • Manipulates Digital Signatures
          • Drops file in System32 directory
          • Drops file in Windows directory
          • Checks SCSI registry key(s)
          • Modifies data under HKEY_USERS
          • Suspicious use of WriteProcessMemory
          PID:4224
          • C:\Windows\system32\rundll32.exe
            rundll32.exe C:\Windows\system32\pnpui.dll,InstallSecurityPromptRunDllW 20 Global\{e86b83f7-f6cd-bf43-9d0a-bc59e7a3bc6f} Global\{4ce572d9-1ad0-9f4c-bf4e-2a48ec13e67f} C:\Windows\System32\DriverStore\Temp\{a40bd26e-670c-d547-bac7-3c34dfbf993a}\oemvista.inf C:\Windows\System32\DriverStore\Temp\{a40bd26e-670c-d547-bac7-3c34dfbf993a}\tap0901.cat
            3⤵
            • Modifies system certificate store
            PID:4284
        • C:\Windows\system32\DrvInst.exe
          DrvInst.exe "2" "211" "ROOT\NET\0000" "C:\Windows\INF\oem3.inf" "oem3.inf:3beb73aff103cc24:tap0901.ndi:9.0.0.21:tap0901," "4d14a44ff" "0000000000000148"
          2⤵
          • Drops file in Drivers directory
          • Drops file in Windows directory
          • Checks SCSI registry key(s)
          • Suspicious use of AdjustPrivilegeToken
          PID:4076
      • C:\Windows\system32\wbem\WmiApSrv.exe
        C:\Windows\system32\wbem\WmiApSrv.exe
        1⤵
          PID:672
        • C:\Program Files\CyberGhost 8\Dashboard.exe
          "C:\Program Files\CyberGhost 8\Dashboard.exe" /firststart
          1⤵
          • Manipulates Digital Signatures
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • Adds Run key to start application
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of WriteProcessMemory
          PID:3644
          • C:\Program Files\CyberGhost 8\Data\Cef\116.0.23\x64\CefSharp.BrowserSubprocess.exe
            "C:\Program Files\CyberGhost 8\Data\Cef\116.0.23\x64\CefSharp.BrowserSubprocess.exe" --type=gpu-process --no-sandbox --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CyberGhost" --cefsharpexitsub --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --log-file="C:\Program Files\CyberGhost 8\debug.log" --mojo-platform-channel-handle=5020 --field-trial-handle=5528,i,3700070062129455843,12962906432620753668,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion /prefetch:2 --host-process-id=3644
            2⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:1320
          • C:\Program Files\CyberGhost 8\Data\Cef\116.0.23\x64\CefSharp.BrowserSubprocess.exe
            "C:\Program Files\CyberGhost 8\Data\Cef\116.0.23\x64\CefSharp.BrowserSubprocess.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\CyberGhost" --cefsharpexitsub --no-sandbox --log-file="C:\Program Files\CyberGhost 8\debug.log" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=6892 --field-trial-handle=5528,i,3700070062129455843,12962906432620753668,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion --host-process-id=3644 /prefetch:1
            2⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            • Drops file in Program Files directory
            • Suspicious use of AdjustPrivilegeToken
            PID:5404
          • C:\Program Files\CyberGhost 8\Data\Cef\116.0.23\x64\CefSharp.BrowserSubprocess.exe
            "C:\Program Files\CyberGhost 8\Data\Cef\116.0.23\x64\CefSharp.BrowserSubprocess.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\CyberGhost" --cefsharpexitsub --first-renderer-process --no-sandbox --log-file="C:\Program Files\CyberGhost 8\debug.log" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=6884 --field-trial-handle=5528,i,3700070062129455843,12962906432620753668,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion --host-process-id=3644 /prefetch:1
            2⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            • Suspicious use of AdjustPrivilegeToken
            PID:5364
          • C:\Program Files\CyberGhost 8\Data\Cef\116.0.23\x64\CefSharp.BrowserSubprocess.exe
            "C:\Program Files\CyberGhost 8\Data\Cef\116.0.23\x64\CefSharp.BrowserSubprocess.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CyberGhost" --cefsharpexitsub --log-file="C:\Program Files\CyberGhost 8\debug.log" --mojo-platform-channel-handle=6500 --field-trial-handle=5528,i,3700070062129455843,12962906432620753668,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion /prefetch:8 --host-process-id=3644
            2⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Drops file in Program Files directory
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:5508
          • C:\Program Files\CyberGhost 8\Data\Cef\116.0.23\x64\CefSharp.BrowserSubprocess.exe
            "C:\Program Files\CyberGhost 8\Data\Cef\116.0.23\x64\CefSharp.BrowserSubprocess.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-sandbox --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CyberGhost" --cefsharpexitsub --log-file="C:\Program Files\CyberGhost 8\debug.log" --mojo-platform-channel-handle=6484 --field-trial-handle=5528,i,3700070062129455843,12962906432620753668,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion /prefetch:8 --host-process-id=3644
            2⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:5496
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe"
          1⤵
          • Suspicious use of WriteProcessMemory
          PID:3480
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe"
            2⤵
            • Checks processor information in registry
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:3888
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3888.0.725251219\1505844178" -parentBuildID 20221007134813 -prefsHandle 1916 -prefMapHandle 1908 -prefsLen 20808 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {db8d5c59-adb4-4c70-8233-762bee1fd46d} 3888 "\\.\pipe\gecko-crash-server-pipe.3888" 1992 224461dda58 gpu
              3⤵
                PID:4228
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3888.1.1825924198\1011016347" -parentBuildID 20221007134813 -prefsHandle 2380 -prefMapHandle 2376 -prefsLen 20844 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8f620bf2-f61f-41bb-8a4f-5579f5691d55} 3888 "\\.\pipe\gecko-crash-server-pipe.3888" 2392 22445931a58 socket
                3⤵
                  PID:1484
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3888.2.1067768280\1782320341" -childID 1 -isForBrowser -prefsHandle 3004 -prefMapHandle 3020 -prefsLen 20947 -prefMapSize 233444 -jsInitHandle 1092 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2cece814-7d5a-4cc1-a641-14be40ec9aa2} 3888 "\\.\pipe\gecko-crash-server-pipe.3888" 3056 22449cc7558 tab
                  3⤵
                    PID:5940
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3888.3.63459766\1835060955" -childID 2 -isForBrowser -prefsHandle 3576 -prefMapHandle 3564 -prefsLen 26126 -prefMapSize 233444 -jsInitHandle 1092 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {7d9ebd49-e44d-40fd-ac6b-eafe6ce2fd18} 3888 "\\.\pipe\gecko-crash-server-pipe.3888" 3588 2244a1c4158 tab
                    3⤵
                      PID:1240
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3888.4.1861129418\901138081" -childID 3 -isForBrowser -prefsHandle 4628 -prefMapHandle 4620 -prefsLen 26185 -prefMapSize 233444 -jsInitHandle 1092 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e5fae124-b9cf-4c99-ba66-d9d5bc9d0f8a} 3888 "\\.\pipe\gecko-crash-server-pipe.3888" 4640 22449fbca58 tab
                      3⤵
                        PID:4904
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3888.5.100236403\603155164" -childID 4 -isForBrowser -prefsHandle 5020 -prefMapHandle 5052 -prefsLen 26185 -prefMapSize 233444 -jsInitHandle 1092 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {38b91412-ac1c-4998-827b-267f4233fb1a} 3888 "\\.\pipe\gecko-crash-server-pipe.3888" 5032 2244b246258 tab
                        3⤵
                          PID:4644
                        • C:\Program Files\Mozilla Firefox\firefox.exe
                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3888.7.1790814875\1346728472" -childID 6 -isForBrowser -prefsHandle 5356 -prefMapHandle 5360 -prefsLen 26185 -prefMapSize 233444 -jsInitHandle 1092 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {49e9dcee-d159-410d-9ee9-ceea257aa186} 3888 "\\.\pipe\gecko-crash-server-pipe.3888" 5348 2244c2c1d58 tab
                          3⤵
                            PID:1536
                          • C:\Program Files\Mozilla Firefox\firefox.exe
                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3888.6.1879260763\1584915562" -childID 5 -isForBrowser -prefsHandle 5164 -prefMapHandle 5168 -prefsLen 26185 -prefMapSize 233444 -jsInitHandle 1092 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b58b4696-2ba8-4786-a170-77e7fff374d4} 3888 "\\.\pipe\gecko-crash-server-pipe.3888" 5156 2244c2c2358 tab
                            3⤵
                              PID:1212
                            • C:\Program Files\Mozilla Firefox\firefox.exe
                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3888.8.1460896703\1166063332" -childID 7 -isForBrowser -prefsHandle 3044 -prefMapHandle 2900 -prefsLen 26520 -prefMapSize 233444 -jsInitHandle 1092 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0716e760-2715-4a0e-b8fa-2109c4f8fa8f} 3888 "\\.\pipe\gecko-crash-server-pipe.3888" 5708 22448e31458 tab
                              3⤵
                                PID:2824

                          Network

                          MITRE ATT&CK Enterprise v15

                          Replay Monitor

                          Loading Replay Monitor...

                          Downloads

                          • C:\Program Files\CyberGhost 8\Applications\AntiVirus\AntiVirus.Core.dll
                            Filesize

                            193KB

                            MD5

                            1d47dbf77d3d345e7ef441f4abcf2158

                            SHA1

                            30136eea525aaf9a15822e1021828cd1d545b5d6

                            SHA256

                            f573945da393beec528095f18c9d9c0e287b151ab1082d24a5d8e16cee9478e3

                            SHA512

                            cb0042bbfec132f0ae38bd85c126bbd464894f85abcf1256821db8ba1cc4612a453345028ec088da06d9704179a934d59eaa6256401532e18487dd1a0e291ad9

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Applications\AntiVirus\AntiVirus.dll
                            Filesize

                            342KB

                            MD5

                            df87f21564ab8bb632d13623dca1205c

                            SHA1

                            9620cbf164c6b27cdc5b2b467556efc23d46519d

                            SHA256

                            e59500d03ee69fb901799e5a6617977a4ba91c09630944af357046ecd78dba80

                            SHA512

                            6bbf3d7c32489aedfa5ecf9947608f9946303b0034146dc3bc93811aaa28ee06d83dba2da2c71d064f077ed1aec04b285c5975e263fc3ec56ac7258de927b52f

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Applications\AntiVirus\Data\Assets\Default\Logos\antivirus.svg
                            Filesize

                            4KB

                            MD5

                            0bcd519bc47d8f289ba01fb8e37c1aa5

                            SHA1

                            d10057b61b65268f17162d135b6d67105fcf3d3d

                            SHA256

                            98b63c9fa091c300e73ce1369f010f4cdc43d24b8dc45a1ad7e00d212a49fab5

                            SHA512

                            f73cfe41c1f96cf8169c7641d47185f60fa469c9d89dd7d3ab5ddb44980c6c9ab397a81edf3c14de1f1ef7f3ac903ca2a672fda073f5abab5ebe432f653f0cba

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Applications\AntiVirus\de\AntiVirus.resources.dll
                            Filesize

                            46KB

                            MD5

                            86edfc6eafd94aedc9905a6d26015607

                            SHA1

                            2c1a2a8d9bfc70f983b694f00c1d07b72c1c3bf7

                            SHA256

                            63234e049f27819da83b4ab976b1b4c5489db3cea3f7308907db7d690ac53480

                            SHA512

                            64eaca865b2bee670838691f6b1346e783d5d754a7c1a13fbec57017bf4cae57bde826b8e8583f33f26a162cca2a8ab30e2d03de9b6d7f4545b42fac6c41b9a0

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Applications\AntiVirus\es\AntiVirus.resources.dll
                            Filesize

                            45KB

                            MD5

                            0226cea5974a04df09f1d261c38c91c6

                            SHA1

                            1b62d2cbdb5e2e1a22175d301a1be510aa5577fb

                            SHA256

                            41d4bedf1c98bd8b567237995c144cbf7f59639b7ff2a519e08fe1a1c0c85738

                            SHA512

                            b746000218cabd5c12a6b2f1f28a2a85d47cfae889e8035abe44c7f7a6a833431df34a0041d8101173a819fa1e82de61fd4f006daac7b5e0cb0feaa9c1ba8d63

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Applications\AntiVirus\fr\AntiVirus.resources.dll
                            Filesize

                            46KB

                            MD5

                            ebabce81506e9a4d233e375c07613519

                            SHA1

                            ff8c027e617862c09aea9160d4ff21a6d0315fd1

                            SHA256

                            15f02ac78058f657ae85a21019b56852018438d3f8e0234da3eab9007d1d3913

                            SHA512

                            cb2d09ff9d80cc1a432fe0ced82f7aed77fbe1a7846684575efcd2a3dbfed0f2043bf6d14a13133478f2d8b741fac4af5d09d9cd2fed3639a866cd19f6299508

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Applications\AntiVirus\it\AntiVirus.resources.dll
                            Filesize

                            44KB

                            MD5

                            ef14218721c86532f0177dd80739a5c1

                            SHA1

                            5f5fb9b6c89d62aaae3063434ab4ead73b1be5f3

                            SHA256

                            2fb535cdfab3eb22fdeaa6294c7463c5cd8aed9065f88f2edced83aa359918f6

                            SHA512

                            d0f04a783576d68814373ea30939bcff3278b576d4291aa406e5c591cfc99b44555d52e91dfb1cc65de7756411935caa4cca3c3ba3a653a4165acc716e4e467d

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Applications\AntiVirus\ko\AntiVirus.resources.dll
                            Filesize

                            46KB

                            MD5

                            d458e0a94650c093eaa270bff198b42e

                            SHA1

                            da6e9c4e3c848f36996af7258a768228f87f75fa

                            SHA256

                            9d4d91752b4e04e00f973e9dce03e856f95841295cc18e76e529c81cf4235a63

                            SHA512

                            a1d95d326f7b1b361d37eb780f24755c59330632dd3487367f4c5ecbac7b6b15f7340d3e7b9b66e8220b02f39bfa6a001608d5826008819445870dcbc90f6149

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Applications\AntiVirus\pl\AntiVirus.resources.dll
                            Filesize

                            46KB

                            MD5

                            9b89aad95d0ea9b52174561118b3c021

                            SHA1

                            11df518e82b7b2d6a620068cd3e3d4b223559bd8

                            SHA256

                            64c974544c35f6c2072cd65ca4c17a8d986bd17c626b0e5e563c92a61661561c

                            SHA512

                            c7a9b62bbb1adb48c5101108ba7cbc901efcd456a8510b459bfa277a490a5c65841a7f0cd73bd827533aa21aff81a50a64c14100428ab7d5eca816061616740c

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Applications\AntiVirus\pt\AntiVirus.resources.dll
                            Filesize

                            45KB

                            MD5

                            45ee7dd8686f39f948c99773b5b0a3e2

                            SHA1

                            6c4df0185053c270116eb5bd5d6f5bd3870c34ad

                            SHA256

                            b57d99098128edb118316f2f82a68f1a9e186e874274f739efc0e57de239b142

                            SHA512

                            72d90361a2bf92fa91b47a84004d48820fb18051c6927c40aee79be3f8c9eea6c547a4d594b49c11b0f0943e2d5cfbd9d6c8e0132f4b5bc6e6a4ad474b33eaad

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Applications\AntiVirus\ro\AntiVirus.resources.dll
                            Filesize

                            46KB

                            MD5

                            0c0f38ec7e774ef9eac5fdedb7701dc8

                            SHA1

                            58032be0ada405e4e6f33e12534713479a8afa1d

                            SHA256

                            c85d1beee7f2ea0cf81672f5ce6717585dc4f2ba735d8e2b7bf8441b5a7eab2f

                            SHA512

                            9d68fe863574b1ff07aba68231fdc00c13055770d6ab52f588470ec56fca8cca040343776d69315f0aaeea3c5d4435a29f5290879e8567967064acd797245ee8

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Applications\AntiVirus\ru\AntiVirus.resources.dll
                            Filesize

                            53KB

                            MD5

                            9b00d766618c9efc3808241d4927f2fe

                            SHA1

                            b9a2a076ae6f2cbd61fe593e95f72742ce3ff658

                            SHA256

                            16d7b9ae772a077e9360ecbecce9cd42b197f1ddc2d24f0156623f50aa24f130

                            SHA512

                            5fa7edcf19c4846d447f3fee02ccd23ae152d0c5226da06dea42698bb83fde4f1c4d43b902fad061890ac033e0d74b05d1fac4f92eea45474ce7d5e9cbf985ff

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Applications\PrivacyGuard\PrivacyGuard.dll
                            Filesize

                            720KB

                            MD5

                            e37f97b1c4d1479b6921567930ba57c2

                            SHA1

                            5164aca9abdfad16aade5c0425de3ed971b49609

                            SHA256

                            e6d7f2d7440e3c370a5cd1a6c03ac1aa5dcfa59022ee08868df6ca40d85cb5da

                            SHA512

                            bb7a9431672136daaa3925fa84466941294b3e986f8de8e2bfdb25d968df736ad424b962b249e35f6a03447d8baedb8b9e55c726ab0c7884d7043578ee0d28c4

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Applications\PrivacyGuard\de\PrivacyGuard.resources.dll
                            Filesize

                            96KB

                            MD5

                            2f08601e2e1cdcd3e18309a6fc4669ba

                            SHA1

                            2eabca2d72a7cadba7186c7cdce14e947a95bb77

                            SHA256

                            27ae1d07d4e1af4c647615abb880c81509d87fb03881ab4cafddeb67a6ec79f1

                            SHA512

                            7ab7a6e02e590c465d7b48ec6da9d03c5653c043db34d157a05113dea03ce84a41b054264d15751a93a43355c23b20ba48d2dacfc0c83e2575cb903c3b910fe2

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Applications\Updater\Updater.Core.dll
                            Filesize

                            116KB

                            MD5

                            17a5a921354fdfa15bd67344722722ec

                            SHA1

                            d1ff2671a3b0748e4a740e9e9fae99c10210ffa0

                            SHA256

                            38bbcf18ac3e463b974442b1c7b79aab7c3ac65eedf02b3ff1763869c8e6fc28

                            SHA512

                            b17211dd565b784e0cea5ebcd4cd683b00476b1857f17c23d53b4e65e01a331d1a3928bbd842337d68624fbd4f71249ab4b45f82f7a4528c8f187e1a379eb3b1

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Applications\Updater\Updater.dll
                            Filesize

                            165KB

                            MD5

                            69fae3d77d7cd48834dc2280f6b639f7

                            SHA1

                            722422b30325e402a8de9d1e7cd92d4e76ec3f7a

                            SHA256

                            2241185eac330e5a7ac405872fbc8717118ee34cf152e785d3dfcaa3f8f2b5cb

                            SHA512

                            e81f5a968cc8988a45ff47b2d6fc5b4ff479aa1029579165af8070a6d92398aa4a7a4de72fdd5c11f5f48e1842fe7a964b61ba29e4b4d9ed0973b93ec5a9e06d

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Applications\VPN\CyberGhost.VPN.dll
                            Filesize

                            788KB

                            MD5

                            cbb8a2ed75fcfde85dead7a5c5d89cc8

                            SHA1

                            79a55a274f85bb24ce60cd9f5823139a37fb6745

                            SHA256

                            128d4cafe1120f43ff2568f68bd70dca82a0c29d4981aa18835bb4b950c79377

                            SHA512

                            1f476652154d0390b9ceb7421988a1614b81db982e95e476e1299b33fe8d0651ec3e4501ea7ae1fbb80e9584d065ab4999641c5df71d886ca750abb7b1dad16a

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Applications\VPN\CyberGhost.VPNServices.dll
                            Filesize

                            139KB

                            MD5

                            8c3bae7a8e1ba418ecced29696fee102

                            SHA1

                            90da6aab03886ad1ebf45ef2373541d04a6e28e8

                            SHA256

                            db46ca5c791fda95bf37657c5b3b9626762045a7cd0b2378a2108bc6ba6e4e79

                            SHA512

                            82b31913d8d775f2b4fe051aba5ae4923ec4df19dba357767b69a5eaedc487bfd61ff917796f5d2a9cd670dd7e74cb21bb3f1fe66d54e5744e773fc87acdf8b1

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Applications\VPN\Data\Assets\Default\Flags\64\CP.png
                            Filesize

                            136B

                            MD5

                            30bea326e5024b6a9b0136a000403d75

                            SHA1

                            0b6e65e87f670af6fbc4a28171aedf4db4daa0a5

                            SHA256

                            e58c331133d8f780738133e2aa966c8bcb5b17a07c860a990bc401afd6382e1a

                            SHA512

                            43362cef837497bc264a46dd70a67c3129d854cf7a9866bee4a33a4f62acb833ba96b4720441c6d6db56301c9b49f8c29f1465363b5c057ec6e16a213f06caac

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Applications\VPN\Data\Assets\Default\Flags\64\FR.png
                            Filesize

                            114B

                            MD5

                            42c4c4ecb4448888421a7c1180b4cd08

                            SHA1

                            bb515751cc2f7616fe41929d2577fc965c69b51a

                            SHA256

                            1ef1946b6e352f2d5a4b003367b968374d6af122c5b645c6b4d9577645fb819d

                            SHA512

                            0e8d4b1c124b86d696e979d9b3aae007c80258672202f66fe3d2ea72e64d205f8dace52333d6749feab74abbd090173f6811490e9b09c3a06682f58b14e5fcbf

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Castle.Core.dll
                            Filesize

                            425KB

                            MD5

                            3be0857aa4ff5712c36b512ea6ba7a09

                            SHA1

                            b0a0ff99bff0d1d9e749e45c1dd39e7add8a98b3

                            SHA256

                            c2ed092037a5fc4fd6b67bbc8c8c6a71d7fc63f2450f46cfe644dd89daf74c00

                            SHA512

                            bf4c9bee180f558128cfe9f7bfef258a262ea64754b33d401967f60206e38e1f8510cb9e81a4e3347a422acb16a5fefc3f5014ee2039f1d219bd61d3030bec2e

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Castle.Windsor.dll
                            Filesize

                            356KB

                            MD5

                            f0aa0b98026e7a4d1b74eafa4e181e31

                            SHA1

                            20c7b4631e49b0ea13f60b877643c9834c92336f

                            SHA256

                            7d4ac8f6c11d7dd24bae1d6f8a42cb358079dba87794f086ab507172ca1af1de

                            SHA512

                            f5a6dccf469cda2e2f8d97a8e96b56638d631e02014af94b2383d4c191090f91cd4c84fb98b8b8814d34013a132df7174a11e37ea2a865c524c1f06d633b8556

                            Download Submit

                          • C:\Program Files\CyberGhost 8\CyberGhost.Browser.dll
                            Filesize

                            56KB

                            MD5

                            08417264ca26039845fd3fffdd650ab8

                            SHA1

                            bd29ea42e281030c86561ccbd180fa626090214b

                            SHA256

                            1b8b93bfe34767928e85181dc9401507db2f3cf42791bb817c918eae7de03e42

                            SHA512

                            26f3d31e912863f8c5309b1d7d2d996eae6af014a7bbe04e8e04ad5fe93601bc4603e5f56fc2a1295ca0831c135f16050e6fb9f8fbb3bb3a36c2138658f39899

                            Download Submit

                          • C:\Program Files\CyberGhost 8\CyberGhost.Controls.dll
                            Filesize

                            629KB

                            MD5

                            6988f29e2cb57e5b24e32d102b05bb6d

                            SHA1

                            aaadfc8ed80a5bc1c56072d0d1cb85cb37269ba4

                            SHA256

                            8f3dcb5f7da46aae2b7fe6aa7fee7bd6042176860790b872efdeecb065016fdb

                            SHA512

                            5fb5a1749fcc93b2c27ff6d103e67353116022407be487396e678bc3049957c967a7574a733913fbcc44eb31ae37a94cd96c4518ba1f57b4d812ba205da0f539

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Dashboard.Contracts.dll
                            Filesize

                            207KB

                            MD5

                            78c1d20ec032c5cc89219266113dab31

                            SHA1

                            1358e303689afe0d9b7e8a6739fe7cc951617b0e

                            SHA256

                            b2f138171e8cf773827ced5d8e98bf485001b4845c8aa2aeb260baae7021aa55

                            SHA512

                            d7bed0ee0b559ef035d5e3062b6837a8c6ac063ee32e1bdb9923b61e473b8aa4ac30b77325feda77e6b96cd6fe0d9233da7b961ac6c50b7f507ef2d0df1731ce

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Dashboard.Core.dll
                            Filesize

                            200KB

                            MD5

                            47a9db2eb893ee7c7d79967f93908a31

                            SHA1

                            333f4971acc2bfe4a29bc5a4fcd1f91d37151d0b

                            SHA256

                            07bfbf3bfbab3d10347392fa483cabcc473208b468a05470cfa38e208d19943b

                            SHA512

                            dabe5a8b8f097fbefece2424f4f4aed7284b472d309ed23cbdf504ede99244d849494974a5b8c15b56c1904bd604469f4e18fd4b3adfa2d656594dc52b6533b3

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Dashboard.MPAHelper.dll
                            Filesize

                            157KB

                            MD5

                            0da5d9da5696e58a2c87c8f1efce88c6

                            SHA1

                            30b351da85dec8d39aca6b15b7ef9374302fb214

                            SHA256

                            04b066bf5e3ba15f6d33d60de5ff483d18734572cdcb9bbee11a70734d10d918

                            SHA512

                            75e41af6f9e26c20069aa119c572d3f11195d609ae91b3929178dc74565f0a3b397a848178d36172f31a0565940bb241790f28a3a8ea6f8a369203d8c2db351e

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Dashboard.Pipes.dll
                            Filesize

                            31KB

                            MD5

                            801f36bad1dd95b10c12b7e23c5fce4c

                            SHA1

                            a9c0bc7523505270cff377cf861b7d157184119f

                            SHA256

                            346ae439d1e023d17d3e812d8b20fb624aa81d46c68ae7851b8040ec3d89065a

                            SHA512

                            6542b33ba8a6ab40bdf17f1deb4cd0e5fcb826dcc061bb772423c8ef0a5da2d21fb9cb4a26ab23877c9660790031490eb27892a20fcf2e88030353d656d68fc6

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Dashboard.Service.InstallLog
                            Filesize

                            439B

                            MD5

                            7f45be626acd834af4bc05aec26a70b7

                            SHA1

                            e4595250912835dc7c92fa0a09b62e03eba7b9a3

                            SHA256

                            9dcc45001296eb80ac59c4291839a9bed4910bfe818751cdd73ba998c35bf0bd

                            SHA512

                            3d693476a0eef6cc6f493443dd320cc16db8858844f4332d2388df55860d3ae0c8e685563f2b6c6533cb25019b90df5645136f50eb783a0a654cf3e5ec00cdc2

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Dashboard.Service.InstallLog
                            Filesize

                            705B

                            MD5

                            93db14a63444f0640443ef75ef8e0276

                            SHA1

                            93789457f75725d2af59d0ad214c65a1db9038df

                            SHA256

                            4f233323f8bd797a8f1a1f7b42fd59b7b2cb4e5b8ef5c6e94a8bf85020e8543e

                            SHA512

                            45f469c0f7cf7f016a6eee01251407a783f1f4845bf6596e4e54c73e7cc460e8827b701760a676c47e4d75cf12c65a5649123304f175f7803327e2fe84f6d549

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Dashboard.Service.exe
                            Filesize

                            70KB

                            MD5

                            53b0086d3cec791b454d7fddd0511358

                            SHA1

                            bcfdeaec52819a7b9797d9be607e2a36d799db3d

                            SHA256

                            254f4948fb7088a19d3b17bc4d7aaaf2479c9bd0ee3c76e846e0853298234347

                            SHA512

                            86ee8b202cc0f94e1799cd45aed3beb81828bfe9c0fe782aafbf2fd75575510ea8257895709848d5c7116a59e8f249873ea63f6642b0a9571a4969276a02d492

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Dashboard.Service.exe
                            Filesize

                            70KB

                            MD5

                            53b0086d3cec791b454d7fddd0511358

                            SHA1

                            bcfdeaec52819a7b9797d9be607e2a36d799db3d

                            SHA256

                            254f4948fb7088a19d3b17bc4d7aaaf2479c9bd0ee3c76e846e0853298234347

                            SHA512

                            86ee8b202cc0f94e1799cd45aed3beb81828bfe9c0fe782aafbf2fd75575510ea8257895709848d5c7116a59e8f249873ea63f6642b0a9571a4969276a02d492

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Dashboard.Service.exe
                            Filesize

                            70KB

                            MD5

                            53b0086d3cec791b454d7fddd0511358

                            SHA1

                            bcfdeaec52819a7b9797d9be607e2a36d799db3d

                            SHA256

                            254f4948fb7088a19d3b17bc4d7aaaf2479c9bd0ee3c76e846e0853298234347

                            SHA512

                            86ee8b202cc0f94e1799cd45aed3beb81828bfe9c0fe782aafbf2fd75575510ea8257895709848d5c7116a59e8f249873ea63f6642b0a9571a4969276a02d492

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Dashboard.Service.exe.config
                            Filesize

                            3KB

                            MD5

                            594b609d1b0b91f92ed36f59bf431555

                            SHA1

                            ab5a419d98f2d3abfa602513bc1f43615932c1fc

                            SHA256

                            478004e9145ef9db15781ce66a4334c76347cab3da033e1be8831bd4bedd484e

                            SHA512

                            8efb48c17461df3bc765889ff9bfa6a85a325e285119aad76dc4abd2320b9d25bb8453a254aa0f20a76a4029087eafbfb9e61b56d8d8a66fee02b8eb1a862b12

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Dashboard.exe
                            Filesize

                            1.3MB

                            MD5

                            12ad5a5fd7399ff201ea7782ab5097cf

                            SHA1

                            e39d26693ac1e213fe52cc330495d17968b046d8

                            SHA256

                            0d4da18458b12ec16812aea11317ff33a451b7146b8d444976f30ba6c396e9a8

                            SHA512

                            2c7c5a7f53088efe47377bc0d6a73c7f442e8cc68912ece4f6796eb727fff8cdfce9d0f31bfd3b84f295db2c8ea62762dc4a3413efebf3c477fe7165bedee673

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Dashboard.exe
                            Filesize

                            1.3MB

                            MD5

                            12ad5a5fd7399ff201ea7782ab5097cf

                            SHA1

                            e39d26693ac1e213fe52cc330495d17968b046d8

                            SHA256

                            0d4da18458b12ec16812aea11317ff33a451b7146b8d444976f30ba6c396e9a8

                            SHA512

                            2c7c5a7f53088efe47377bc0d6a73c7f442e8cc68912ece4f6796eb727fff8cdfce9d0f31bfd3b84f295db2c8ea62762dc4a3413efebf3c477fe7165bedee673

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Dashboard.exe
                            Filesize

                            1.3MB

                            MD5

                            12ad5a5fd7399ff201ea7782ab5097cf

                            SHA1

                            e39d26693ac1e213fe52cc330495d17968b046d8

                            SHA256

                            0d4da18458b12ec16812aea11317ff33a451b7146b8d444976f30ba6c396e9a8

                            SHA512

                            2c7c5a7f53088efe47377bc0d6a73c7f442e8cc68912ece4f6796eb727fff8cdfce9d0f31bfd3b84f295db2c8ea62762dc4a3413efebf3c477fe7165bedee673

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Dashboard.exe.config
                            Filesize

                            3KB

                            MD5

                            dbad1342429edce620d2e96b1e44e179

                            SHA1

                            38ae22086e612f3b8f5e1f48d725799bebaa71c9

                            SHA256

                            0a44b47433ae1cfd272368b9bfc8e963aae80a833cf094a2a8136879c41cd1f1

                            SHA512

                            89965204168dc28556838d9cc392f2aa10eed06f60aeda0a3a189b34a01bb6c9236a63f01fba67093ba3f4f092677507f9dfeaa38fe039aec3368deb2ae9508f

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Microsoft.Bcl.AsyncInterfaces.dll
                            Filesize

                            23KB

                            MD5

                            53dbf7a94ecc332323769777c457c30f

                            SHA1

                            01a617f202edc2ac4ba4599cfce17bbdef05586e

                            SHA256

                            11210062a90ede187be30ab6af79afebd32090ed0eca0d47cd6036e71e02ca24

                            SHA512

                            758952b75e8e9ccb4a3f4bd4a6edb656a162f52c969c8d3091bb1a6cdc20d0ab060964a6407fb036479d5c86e14c5d3dded3e0ed5f3f74af42f6c0107504016a

                            Download Submit

                          • C:\Program Files\CyberGhost 8\MobileConcepts45.dll
                            Filesize

                            593KB

                            MD5

                            a50b02c722c8ee1b659c821bf21b0481

                            SHA1

                            071e8f90ec31ea6ad9911f0fe43830e3529b0e79

                            SHA256

                            e97a3fa12f003b525d8bcbec2e5429b22af952fcf21594c15c7757e514ad7fa4

                            SHA512

                            0009b11ae8fef18466e28cc2ed40fc0292c564e826e8696f85d30a074f185949a76abad163629a21813dc951e9660f7f17fb2a5caf204bd994e777f21a367e0d

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Newtonsoft.Json.dll
                            Filesize

                            694KB

                            MD5

                            0d5360d673585857548c294452e3be1e

                            SHA1

                            596413c49e324451bb8f0b891607eaffa7c96198

                            SHA256

                            fc97f41620d54578319a51382633d43acbb648f037fe59416b7048c47e5f9179

                            SHA512

                            c7674460259c678ce8b0d6c388a753496e0b007e73d1099e9fab1bee3b4b7b584b33fcaa53f7f3b3dc681b949c6b6973c35ff1b40ca0ce79d29b6ded6a24d969

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Sentry.dll
                            Filesize

                            587KB

                            MD5

                            3f82d579d19428a2478b7e8c3847e0a3

                            SHA1

                            8ad78190caebc699c0ea3945ff8cf6d727ebd55a

                            SHA256

                            ed5cfb123802291bb75b7bfabbd4d2b6487d6500cdec03bb300b18d7161311fd

                            SHA512

                            8c1948bd50533671b9114d17826862dc2a796d15aa6ab4ceefcb087e723121347259cdacdd0ce60dbdbdc58ce574b9189446760f07ed5e4e95f1f14893a4ada7

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Serilog.Formatting.Compact.dll
                            Filesize

                            19KB

                            MD5

                            0a5bdc4a2033fe83d2231a318bf31537

                            SHA1

                            6cef797f1098b58f6a52facb589bd5845afa87a5

                            SHA256

                            fa7cfa1e1cf096cb4edb5c246cbbc68f9b7ace413355e777124379ad29cb592d

                            SHA512

                            168b337c33a08e91dcc2fdc78d1a67a950970c8e6ff32ecaa58cc97fdb48cd06f1e32798f1c2ba770397aa959e9c2b0dc999deacca7983ceb35732d254a07266

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Serilog.dll
                            Filesize

                            148KB

                            MD5

                            52de92bda112d367a8dd78bf483a73a0

                            SHA1

                            7b79300b5f2238fed10da45bfe68104aa72269a7

                            SHA256

                            488c71b5268f28af00961e96d6928609393ebcadbebbd4518795a3e0a685c5b1

                            SHA512

                            f8988b1f286f247adb4daf59a9ff121d89dfcdbaba54a00b0abb1134ee696b441b066c12322963235c717f96daf72ca4ce7b10fb0618b912da541011058c42d2

                            Download Submit

                          • C:\Program Files\CyberGhost 8\Svg2Xaml.dll
                            Filesize

                            70KB

                            MD5

                            0bdc0560d4f01adb30eb39d7d3be7ac4

                            SHA1

                            b7417f286bca828b9519f22429668dadc7fe9b04

                            SHA256

                            19982c2812ca53d764051660aa689178f80f41b5fb1509231a6aad8fb962301e

                            SHA512

                            fa8c1b9544027c0fc186e3bef681ba85c826d4a15070342c6c140b4c05f31ac5037a1772e64d12339e520ceb5fb7139b32995bff7b80818273cb0efad945c80c

                            Download Submit

                          • C:\Program Files\CyberGhost 8\System.Threading.Tasks.Extensions.dll
                            Filesize

                            27KB

                            MD5

                            f6a94a1ea814e34cf5442c2c1d717c81

                            SHA1

                            66f37b339f676c7b1be1f95eaa5eaf9c3f1a230a

                            SHA256

                            746f1b5065a47a03134eaaee77e2f41288ba50782838e64aab899a0d41463523

                            SHA512

                            b221e4d9ac5f36aa88c3fe00dd8e3b62cbbffb07a67a3a5e1fa1f506790788f0ee2421a9e8145296f39bec8657343bb2cf29b50df694ab0fdc2ce416dd36cd42

                            Download Submit

                          • C:\Program Files\CyberGhost 8\WPFLocalizeExtension.dll
                            Filesize

                            88KB

                            MD5

                            6513307f3940bbd289d4697d01321fab

                            SHA1

                            e332574b02639ad634caac62fb6478ce905cf851

                            SHA256

                            fefac7aa0525528a36af1d9d46fbb71ceba6746a4286b1a37fc5639e718030bf

                            SHA512

                            4eda7014e9cdcbd3355e8141d1a2b9f74ab0f51aaa3cd82db2d510e9f6f50c478b2dc641dfef5217e567c459ee120d5e7cd73663e2202fb83b0f0b02af332bc0

                            Download Submit

                          • C:\Program Files\CyberGhost 8\XAMLMarkupExtensions.dll
                            Filesize

                            40KB

                            MD5

                            a43f955cff263bc9435741ec08b10322

                            SHA1

                            67e5e88d92debeb1bd37157fd758ad8c9ec2a556

                            SHA256

                            e95afc0411b088a3fe475c9d39b7756160719e0cd5c8f574da9d2a59d165afdb

                            SHA512

                            01699200e6480ce3159d4552bab7f984fa502b42efe8e250f34f46eb6b3fba93a169add2282ecfcc08cdfddcda0eefe69d739e56b02b1b16a8eeeed232e5c88a

                            Download Submit

                          • C:\Program Files\CyberGhost 8\client.wyc
                            Filesize

                            59KB

                            MD5

                            e8836e44f05bd7ac0c84a0d9b7678c5c

                            SHA1

                            e18bbb525593c29260a4334094220f70b3488911

                            SHA256

                            d41f4e19885200f6580c5d1fbc9bc4f8139be3f03028c33fcb6faaa72cc08158

                            SHA512

                            d6433cf0898ec449ceebea01446cc5299a1795db8ddc8ebe255934123fa05d26b9bfd1a5d8a0f6da4b275f3a06d22849bd78a101f11557313e5c2b0c29f9d729

                            Download Submit

                          • C:\Program Files\CyberGhost 8\de\Dashboard.resources.dll
                            Filesize

                            55KB

                            MD5

                            71bb9ec2fe47efcbfae10ce0cbf55313

                            SHA1

                            0c371f1d4abd71593340569a0d4c78d17039cdda

                            SHA256

                            eaeb27a571d35844b261f1e0b7ba30608da3d8ab24e5184b0d08298ed5edd89a

                            SHA512

                            4cb2fa755d0a5947ef253755c58e646e567073c0b8261c466041a3530fca05487654e3c3dcbfbe9137a8cbedfd58adcbc7cd80ba8470e94100b039b2a3d09db0

                            Download Submit

                          • C:\Program Files\CyberGhost 8\es\Dashboard.resources.dll
                            Filesize

                            54KB

                            MD5

                            db56574ad278319b0618c06cb379e6a7

                            SHA1

                            e2d195920d402c419b5ab942a9797df7e8699a84

                            SHA256

                            d3896e42eacfaddca66daa0f7b3b38e7ab21cfb974f6bfb2e7d9e672588b10cc

                            SHA512

                            91f513a9af7e29d45a1940453194dbb6a20ae3c2ec6e404d328face578e283148c37660f68b2316339b6267c1117efcc54bd3320355f58ceb7864dd204a2870d

                            Download Submit

                          • C:\Program Files\CyberGhost 8\fr\Dashboard.resources.dll
                            Filesize

                            56KB

                            MD5

                            cf34860e0d9a42d872559cc5a4e963e3

                            SHA1

                            2cecb0b6bd117aaacd14f5c31e0370a52db5cd7a

                            SHA256

                            f59d0d244702e0d7611c28dfe93ffe027e42722361ce52131d2bedde527a606a

                            SHA512

                            d6aba3c694b21bac4dbdc11e444b013e2d6c38d2dab5256b4ade88b58c5387f9fbbe50c61168ea0e69fe9d5eb136203b9f59b8da5713eaad61fac0ecdb518102

                            Download Submit

                          • C:\Program Files\CyberGhost 8\it\Dashboard.resources.dll
                            Filesize

                            54KB

                            MD5

                            da789777ad235c8a1b476baf2260121e

                            SHA1

                            ab03b58b3c1c68155fa802780112747deba8b064

                            SHA256

                            579ff3f1bf0211ad370f77c6f8d425ed5b20abe571617ef694393a9cc6f6fa0a

                            SHA512

                            825f0119654fee79af4ef96a57a45077e0983e87a6178cc4f1e8feab037d3b46c988fb531dbcced4bd9c3ed91bee2754ed714441651d937ad7497eb0ab9984d8

                            Download Submit

                          • C:\Program Files\CyberGhost 8\ko\Dashboard.resources.dll
                            Filesize

                            56KB

                            MD5

                            40d696858119e1e2dd8c445963b4f75a

                            SHA1

                            baad61fe52be393f207e4f295e612ef2edf891cc

                            SHA256

                            4007f18965305ef2926c16cedd147bbf2e55f79b4931aef0c1b0ea20758eda7c

                            SHA512

                            f91b4bd62ba52eadc5d08ff4db8575ef6d3f88a999fd89daab2d4d9c489ff0a2587d947ccec88923c4b313026560b475be58d0f55732022ebaf4d5219b584c11

                            Download Submit

                          • C:\Program Files\CyberGhost 8\pl\Dashboard.resources.dll
                            Filesize

                            55KB

                            MD5

                            90187484db99941ab15002fefed54fe2

                            SHA1

                            ab9e04bc1ac79e3256e0db765fc7bc771d9f4136

                            SHA256

                            d5c4715cd5fb4bb8973f52bf3cd8eaefd204def4bcd9d9c6c405827cc0ef20b1

                            SHA512

                            455bcb6a0663284122d7028e2e9f31ad217b4e59ec26e040bc1d448b95225c9cad7d4f36af1c6535085ce72873ffec508862d14afb048b3d8a4f9f62a3363ca0

                            Download Submit

                          • C:\Program Files\CyberGhost 8\pt\Dashboard.resources.dll
                            Filesize

                            55KB

                            MD5

                            32d055fda957cb191dd2ec658a92e501

                            SHA1

                            ced772ce30440878137ca90f8a948baf2ae037c5

                            SHA256

                            1d4ff281754c9f139021ae66d77ffe0aa7f21546bbfbe62adf2fce9ece90b68f

                            SHA512

                            bf0cee0da35ee43d169c9a4f83e0ac9eac0d769426a1f39445f708afdd836003f52d021f3e8a943834971a3d4579081fec6bf4358c6b573a90ce27d82bb3a577

                            Download Submit

                          • C:\Program Files\CyberGhost 8\ro\Dashboard.resources.dll
                            Filesize

                            55KB

                            MD5

                            7f0ffd0da836021540f00e136bf1dc9b

                            SHA1

                            5bc51e99a46eb3ad1451a9ec3b6c07a82b824149

                            SHA256

                            044a5a2cae5a80df2cc5747c0deba151ebfae0cc0626ea9370176dbd71377578

                            SHA512

                            d7bd8eaa170d201459ad1ce1441b4654d8f20fc38a1148d7132264a0cca2dc2afb222d82b8bfe02543a634486afaa8df598dd8b0c08cdfa9c8688b26c31483af

                            Download Submit

                          • C:\Program Files\CyberGhost 8\ru\Dashboard.resources.dll
                            Filesize

                            65KB

                            MD5

                            b72ca09bf0cc3ee455ddacf4d30b26e8

                            SHA1

                            1cf2fa2fdc18778e304f8fe7a5d1b0e0f8f46018

                            SHA256

                            cf463d5761eb2544c902e2430cae96c954a55d075b55f943e5cb43a1be9789cc

                            SHA512

                            af54510fdb7d83328da2eb83fbb126a8545be6b41c8a2707b5d68f4c9c4b90d7e16ea164b0f804c2de21480d039ba91f13470850006d85a8aa518fcca112263f

                            Download Submit

                          • C:\Program Files\CyberGhost 8\wyUpdate.exe
                            Filesize

                            624KB

                            MD5

                            a2693d2717e7b9a359a86e64102cf1fd

                            SHA1

                            53ee455767ecff54ca7823cd26aa1e29b0ffb137

                            SHA256

                            39df124ecb19cf738cb2c03a7ecd23183b6d9cc60d05a98a01fb9efce7c68515

                            SHA512

                            baf5810572ca6f8b93b2202ce12e0e2299111de240210cf9e94aae57e0ba3f257d9eedb8007aacb2ab13ee990f1430cdfaab2c5927e283099c7e7967ebc3c6d3

                            Download Submit

                          • C:\Program Files\CyberGhost 8\wyUpdate.exe
                            Filesize

                            625KB

                            MD5

                            15268b4d9db9d29274fb619bec0368e8

                            SHA1

                            f29af6f7c7244c4e99cc3e7446fe013c5fa15a04

                            SHA256

                            8573b6e2a7ce347a05b65389cfc03d511cac48b0079ad1a9ea064699e8029fa2

                            SHA512

                            bff93999ddcea1f8020605a475e4761ad9f8582ea424b998707a571620cb3d730df2a9898d7e8f2304abc8743bef77ef8b5d216061b4da6e7a9137c26959eb30

                            Download Submit

                          • C:\Program Files\CyberGhost 8\wyUpdate.new
                            Filesize

                            625KB

                            MD5

                            15268b4d9db9d29274fb619bec0368e8

                            SHA1

                            f29af6f7c7244c4e99cc3e7446fe013c5fa15a04

                            SHA256

                            8573b6e2a7ce347a05b65389cfc03d511cac48b0079ad1a9ea064699e8029fa2

                            SHA512

                            bff93999ddcea1f8020605a475e4761ad9f8582ea424b998707a571620cb3d730df2a9898d7e8f2304abc8743bef77ef8b5d216061b4da6e7a9137c26959eb30

                            Download Submit

                          • C:\Program Files\caba9c68-f7b6-40ce-b3a3-30ab74513f45\7cebc91a-50eb-4bc5-953f-e3f4d48bf272.exe
                            Filesize

                            5.0MB

                            MD5

                            72540194bd451dac050609406eb50a56

                            SHA1

                            57c33ec10f90f81f6abc612b4d251510c36ebd6b

                            SHA256

                            3a18d5fd76abcfe537d78457dab4797231af313028b5594231f019245c5f7a74

                            SHA512

                            ec9b24c877e82269aba78701a9828879e8b91580c4d3002227ee18868b8db76b6c0fba08e687aba1ea3127eea05e37124e2b615c224b33e4dac2512dbefb3444

                            Download Submit

                          • C:\Program Files\caba9c68-f7b6-40ce-b3a3-30ab74513f45\7cebc91a-50eb-4bc5-953f-e3f4d48bf272.exe
                            Filesize

                            5.0MB

                            MD5

                            72540194bd451dac050609406eb50a56

                            SHA1

                            57c33ec10f90f81f6abc612b4d251510c36ebd6b

                            SHA256

                            3a18d5fd76abcfe537d78457dab4797231af313028b5594231f019245c5f7a74

                            SHA512

                            ec9b24c877e82269aba78701a9828879e8b91580c4d3002227ee18868b8db76b6c0fba08e687aba1ea3127eea05e37124e2b615c224b33e4dac2512dbefb3444

                            Download Submit

                          • C:\Program Files\caba9c68-f7b6-40ce-b3a3-30ab74513f45\7cebc91a-50eb-4bc5-953f-e3f4d48bf272.exe
                            Filesize

                            5.0MB

                            MD5

                            72540194bd451dac050609406eb50a56

                            SHA1

                            57c33ec10f90f81f6abc612b4d251510c36ebd6b

                            SHA256

                            3a18d5fd76abcfe537d78457dab4797231af313028b5594231f019245c5f7a74

                            SHA512

                            ec9b24c877e82269aba78701a9828879e8b91580c4d3002227ee18868b8db76b6c0fba08e687aba1ea3127eea05e37124e2b615c224b33e4dac2512dbefb3444

                            Download Submit

                          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\18E6B4A57A6BC7EC9B861CDF2D6D0D02_C3B142D2C5374581DC2FDFFDEDBDEDDB
                            Filesize

                            765B

                            MD5

                            740e3944d4df7427dd8d79ba9a0cbe3a

                            SHA1

                            9bad37dcdd3f5d37517a3c9cd5f092bb6bcbb3df

                            SHA256

                            1f1c81df6298a756bb720d75988da90b132e3d8f1dbd8ebdc00530bad56cf015

                            SHA512

                            a2a4d64025eb6cd75f390be44c067e61bbc544c37d81a303c2a67b1741d0380b675ddf0137f541b81e835700307c80fab323331d9f4714161f2d4810c88b887b

                            Download Submit

                          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\AEACCDA8653DD8D7B2EA32F21D15D44F_46E4040B4A28D439FBFA7E9FC642442C
                            Filesize

                            637B

                            MD5

                            6078f44171846424f18fbe60cd982a60

                            SHA1

                            1867cc25eecd7a2d2c2fdcfa5a07c1aa999b3134

                            SHA256

                            650322ff23062308d3fe982194c1c440ab39ef33f367c332f3e32572ab735e15

                            SHA512

                            fc084cfa63be0793628ec2a0d9f88824503ae40ff47a37707c36829700dc4e90e07bb608928f729a180fec8e2a1924ff13dba2e2f499c3224f3fb746cd0c474f

                            Download Submit

                          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_93702E680A5530C052C8D2BA33A2225F
                            Filesize

                            1KB

                            MD5

                            2e4766c15e017fc9632716654a2a0acb

                            SHA1

                            2fbf0fee362bb02036ab4c71643733c296ef8d3c

                            SHA256

                            0cd8b908bae133a2713b5c678e43ccc6e3ff8561a481d456e9f7726325d8a2d8

                            SHA512

                            1119b289a7c2dd3a792ca0d56a24bd8be6c8d92bca7b39b1c7978be0d02898fa07df341ef768630fffac0b73756b12ab447dd1407c87828c19f2d064d0f92f08

                            Download Submit

                          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\18E6B4A57A6BC7EC9B861CDF2D6D0D02_C3B142D2C5374581DC2FDFFDEDBDEDDB
                            Filesize

                            484B

                            MD5

                            147e6903e81cbaf4fbea831ca4babf83

                            SHA1

                            0b4c37303b85147860a82b48cdbd71b71d4ec6d3

                            SHA256

                            fb1807da4b0813b9152f9d820a48261495d0f6a73fdfdb82f9047765ca01a58e

                            SHA512

                            4ea21386df7d1f1ac8df2d317faacf80f0ff58fac831fb4a313c3463712ee828a45e4b6f2e705d3793357474ce3e23e7a27bc980076e83b19e8db6f6e0706ebb

                            Download Submit

                          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\AEACCDA8653DD8D7B2EA32F21D15D44F_46E4040B4A28D439FBFA7E9FC642442C
                            Filesize

                            488B

                            MD5

                            df0bc7887e0bb4422ed9531617d43546

                            SHA1

                            e1ee2305c7d5ba98ddbb42c3dbb7c2212d29c894

                            SHA256

                            15a50dfc29fc0a7e864fc2b80a03ecfd4f67b934ded8d355252454a4253de0cf

                            SHA512

                            a400e6dea5d879f48877272a8b91dbd0b98755a7624cc68c7e7629dec2fe277725c4e6c936070e71070445aad86b4d4281b083812f51b7ad2649773cbbd3f7cf

                            Download Submit

                          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_93702E680A5530C052C8D2BA33A2225F
                            Filesize

                            482B

                            MD5

                            0d1c8d9de4460e093f65b0dc61d67bd7

                            SHA1

                            e50cb9efc47c48323e27cbe4e4a0a26faec1d365

                            SHA256

                            b7ece93e6aad7b058d5883efd5faa871a93584ac8268f67e7b7a9ff037fb6eed

                            SHA512

                            f5a98afefa561365bd9d2be22ce361ca29cd8fa26976b4e78b65872c25771dcfc6ae250bec1d5b0b50e208537cfb71b0dfa3eeb5baf79d37bf1b4981f4ca1c21

                            Download Submit

                          • C:\Users\Admin\AppData\Local\CyberGhost\Code Cache\js\index-dir\the-real-index
                            Filesize

                            48B

                            MD5

                            d8bad71bc9745e3f0f19ea213cbaa45b

                            SHA1

                            1a5bf116d587d927f920822087008bd66af4af84

                            SHA256

                            606d64f0e3b58822c29898f75913b0c431612eed1db1013d6e7c6af19c5c7d99

                            SHA512

                            d13b9ad023343af5805ff343477b3f3bc703ab40423ecf28941f38e830d241f33fe2982452b0101874d0cd52767da5f739bc6143b7a35ff8598d8502d8b06f5a

                            Download Submit

                          • C:\Users\Admin\AppData\Local\CyberGhost\Code Cache\js\index-dir\the-real-index
                            Filesize

                            144B

                            MD5

                            15599dab149702511f3c5f6649979a92

                            SHA1

                            4599a1dbc70285e3775c1fe799a2acaf0699782b

                            SHA256

                            2f9303bf33fd4437ca1a46804ca3067de02ef601f9f80d57b73560cf5041c3d6

                            SHA512

                            a28f7ae6ada9b8ee8ed222491f5075d48d6a5aad867b883bc40660407159a995e0604cd6710129c426835840e01a3989082900a8391c7e694b639b75e744d50b

                            Download Submit

                          • C:\Users\Admin\AppData\Local\CyberGhost\Local Storage\leveldb\CURRENT
                            Filesize

                            16B

                            MD5

                            46295cac801e5d4857d09837238a6394

                            SHA1

                            44e0fa1b517dbf802b18faf0785eeea6ac51594b

                            SHA256

                            0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                            SHA512

                            8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                            Download Submit

                          • C:\Users\Admin\AppData\Local\CyberGhost\Local Storage\leveldb\MANIFEST-000001
                            Filesize

                            41B

                            MD5

                            5af87dfd673ba2115e2fcf5cfdb727ab

                            SHA1

                            d5b5bbf396dc291274584ef71f444f420b6056f1

                            SHA256

                            f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

                            SHA512

                            de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

                            Download Submit

                          • C:\Users\Admin\AppData\Local\CyberGhost\LocalPrefs.json
                            Filesize

                            717B

                            MD5

                            d0260f718af37334c6d85db9091daee9

                            SHA1

                            dc37cf29c6cf89fc4e7dd5e7c725b996e068b712

                            SHA256

                            7e4ec348f87c00984ad3dac634b57f518a38fadf32052529e9d8ca77200f0e7a

                            SHA512

                            920a4f1865c5244c1b3e39c765dfc2937daaba290384db5a004c58e3fd928e40701c29745cf8dc5add627289c6abc24da6b046e540a6a275da930703242c449a

                            Download Submit

                          • C:\Users\Admin\AppData\Local\CyberGhost\LocalPrefs.json~RFe59a2ce.TMP
                            Filesize

                            529B

                            MD5

                            cabe0b7908a0fca9fbb2caf7f9bb726a

                            SHA1

                            cd03ee448162817e9a9f3758ea5acdb765fed413

                            SHA256

                            775e19b8a215e565c7b54f58b7ac9fb6037de27db68fcfaad3b926fb4a228493

                            SHA512

                            86341bccc46db0fc3fb0528342f30a25fedf6e7ae638076d036d5f4be1094a5a766ea599c8561f3ba6a8073d2ea0dbce988f2b80a234b24a43ca91c9b3488aa0

                            Download Submit

                          • C:\Users\Admin\AppData\Local\CyberGhost\Network\Network Persistent State
                            Filesize

                            908B

                            MD5

                            3d3a22539d312323b6be17075b289f37

                            SHA1

                            11487376ec4c05fac2d39eb0c1b8784850835922

                            SHA256

                            c5b740ff96b52851de1afccf35ce7175cb93cdfef48ef9e38db7d5777b083ec7

                            SHA512

                            ccb5f77f2ae15425ffb173a53271a73a6b4a7f8a5f09ba17b1c38f91b732e692606fc4c8916591242b07403b8b30198962f2beea417b33729965616c759c56a0

                            Download Submit

                          • C:\Users\Admin\AppData\Local\CyberGhost\Network\Network Persistent State~RFe59a7df.TMP
                            Filesize

                            59B

                            MD5

                            2800881c775077e1c4b6e06bf4676de4

                            SHA1

                            2873631068c8b3b9495638c865915be822442c8b

                            SHA256

                            226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

                            SHA512

                            e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

                            Download Submit

                          • C:\Users\Admin\AppData\Local\IsolatedStorage\dkpawjq4.bgb\44macjhh.a44\StrongName.1r34rtndphgwhqowmyxywu5guyuf1gh2\StrongName.bx0ds5js14qgmnal5bhexnafezsd5pyy\identity.dat
                            Filesize

                            529B

                            MD5

                            b81dfaf8c0f7f1e2f170f4c6cb8c5634

                            SHA1

                            c24612cfc0b9c1067c311b4a9e6f7a98feda645f

                            SHA256

                            1f8da753d2cdc1c999a1cf1331c7ce4156c3cccf9ac6ed14b6621e6697566fdf

                            SHA512

                            980f1be6a48154a65cfd92d45a5737b53b20e2da48f1d88afb0e8186cb0cd9079436d4f6ad422012e8a7bcacba5b5452558ed3fddf904cb1e5c5bbb6dae0c051

                            Download Submit

                          • C:\Users\Admin\AppData\Local\IsolatedStorage\dkpawjq4.bgb\44macjhh.a44\StrongName.1r34rtndphgwhqowmyxywu5guyuf1gh2\identity.dat
                            Filesize

                            516B

                            MD5

                            cbd3f64897bc369fa23f36147efea527

                            SHA1

                            bb67513ae0cd937b13065ac4309af362c584cd41

                            SHA256

                            fdc1bfa45ac28a73c370ef0f9cf5da0c6a55705cd114b6a85a167f635a05c3d0

                            SHA512

                            3b77226186fc43aca07b439a3e3545c441140f781a2f7f9daf86a068320593124af99b4dd039f1c6fcddc3a9804e6aa97dc22542ac884d8b3ea19b944fec9087

                            Download Submit

                          • C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\d7q3g01j.default-release\activity-stream.discovery_stream.json.tmp
                            Filesize

                            21KB

                            MD5

                            42d3328c74bf9ed784a4d69acdda8e10

                            SHA1

                            a991b8ebaaebc8fdd3c3a90406e88b98813c4be6

                            SHA256

                            2cf68a4bf055e0962d2aeecf6bbf8c2c9bef870a52bd5e6c70a5d8e31f704331

                            SHA512

                            e344503f951812e08f35c373a9f66f58f6a49bdfb5af8b4779b5d0f8542f706fe65138d7e324f1e4b485a49f8c30b505a8432bdbd3cc3f225343dbf8ac0f4d7f

                            Download Submit

                          • C:\Users\Admin\AppData\Local\Temp\TmpA45E.tmp
                            Filesize

                            2KB

                            MD5

                            647f843626b023aaaa748f924f95ac25

                            SHA1

                            652cacf99409e3dcd39b6eb8839c16d22b1800e8

                            SHA256

                            732dee732e0261afbfba21eca43008a5009cfc9e4c405ece8826a9746564cceb

                            SHA512

                            61093dcbe07efa5bdffec4933243168bf40b8159bc5a9840552bc3ea8e7c129156276a8548c658e5267bf0b8c4448dcb5c8ab10140c72ed48eb8910c075022fa

                            Download Submit

                          • C:\Users\Admin\AppData\Local\Temp\nsr170E.tmp\System.dll
                            Filesize

                            11KB

                            MD5

                            c17103ae9072a06da581dec998343fc1

                            SHA1

                            b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

                            SHA256

                            dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

                            SHA512

                            d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

                            Download Submit

                          • C:\Users\Admin\AppData\Local\Temp\nsr170E.tmp\UserInfo.dll
                            Filesize

                            4KB

                            MD5

                            7579ade7ae1747a31960a228ce02e666

                            SHA1

                            8ec8571a296737e819dcf86353a43fcf8ec63351

                            SHA256

                            564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5

                            SHA512

                            a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b

                            Download Submit

                          • C:\Users\Admin\AppData\Local\Temp\nsr170E.tmp\nsExec.dll
                            Filesize

                            6KB

                            MD5

                            acc2b699edfea5bf5aae45aba3a41e96

                            SHA1

                            d2accf4d494e43ceb2cff69abe4dd17147d29cc2

                            SHA256

                            168a974eaa3f588d759db3f47c1a9fdc3494ba1fa1a73a84e5e3b2a4d58abd7e

                            SHA512

                            e29ea10ada98c71a18273b04f44f385b120d4e8473e441ce5748cfa44a23648814f2656f429b85440157988c88de776c6ac008dc38bf09cbb746c230a46c69fe

                            Download Submit

                          • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\d7q3g01j.default-release\datareporting\glean\db\data.safe.bin
                            Filesize

                            2KB

                            MD5

                            1b1ae28fd370f3e14380e33407537f42

                            SHA1

                            2b0fdc64f5a2c172eb3906ff18e03e6164911ab5

                            SHA256

                            5c4b475994cc96e5e4ecb5d320533ab99510fecea89c3e3500b3559ad6a3104b

                            SHA512

                            443df55b6fb4c8a46da640202faee8a2024f5f9fc7516c0864ff63c6f085389e83a7ef69f5d6e7a37e0dc8a7e4ce10066b0291189936c10d0bc92bb8dd88b65e

                            Download Submit

                          • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\d7q3g01j.default-release\datareporting\glean\pending_pings\76b37f42-a9d7-4ac4-858c-8c77851657b7
                            Filesize

                            11KB

                            MD5

                            7591b11c5de19cffcfefb3b5a62a6ccb

                            SHA1

                            8c99a2fa2f15725b02f0f1068f80470c66214f6e

                            SHA256

                            d0e4ab498f42ae974609b01fa69d6ed8e768d491110e06d5826df1137e430080

                            SHA512

                            93ea40165a173357c50bfae481369f8fbcbad1fdcfb92f9681ecbf1f105f16cdc1b7182c63da25023e4029c2c437594836031010a5019f0f6d7f9dd278a5bc5c

                            Download Submit

                          • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\d7q3g01j.default-release\datareporting\glean\pending_pings\88569caa-3ed9-4c37-8b40-118a7c7e7cf7
                            Filesize

                            746B

                            MD5

                            01a27b42c545f3b42922035571a09bb7

                            SHA1

                            77b95f9b1a894b8de8953c8df8ed48b107f18601

                            SHA256

                            8875135d6f28c2d7818fc24373a656e2b3bfdbc9510f5e2af5619cf17fdc9dde

                            SHA512

                            27494b19cbfd4cc6cdeb4b574c3d06cd031ca2a8a33f5d0f8fd78e659499ec49810aa1db31cda74ccbc37bbb9ffa226391e9d1ff6d082ceedcc24fb61cc18fd9

                            Download Submit

                          • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\d7q3g01j.default-release\prefs.js
                            Filesize

                            6KB

                            MD5

                            a384c1d9ce96773a7f732c6be136aa05

                            SHA1

                            af67eac9d5ea3736144d9ff284292b78d7b8d08a

                            SHA256

                            36741b38206027d43a208b5c3be3e75c2ba59806af8e6bcd08f71418eb669ab4

                            SHA512

                            b7351f79bd88bbc5cbf6cb58b73a67134fa80997e42a829373c5781cc8297932557d0b48e0605f8a98279f58c59aa4e988419e26002023088eaf91ed4aa92aee

                            Download Submit

                          • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\d7q3g01j.default-release\prefs.js
                            Filesize

                            6KB

                            MD5

                            1bd71fa7dd9b75bbc4c757d4ebd4147d

                            SHA1

                            f9ad2bfc44cb8694a0af956366db7bccbad186a3

                            SHA256

                            7c49994897052cf2d7179b1d4191226b628c052ce7a2af6b89a7fa664f36a9ea

                            SHA512

                            e5a089e7e1934b82c2b72348b17bd9b2e4c9f06103393eec9fe1b1f5b2a3539ea00fe78d46a7d1a4a71f2daa5b2836db1e5013213a877209fb2aa805a73ba52f

                            Download Submit

                          • C:\Windows\System32\DriverStore\Temp\{a40bd26e-670c-d547-bac7-3c34dfbf993a}\SET1AD6.tmp
                            Filesize

                            7KB

                            MD5

                            87868193626dc756d10885f46d76f42e

                            SHA1

                            94a5ce8ed7633ed77531b6cb14ceb1927c5cae1f

                            SHA256

                            b5728e42ea12c67577cb9188b472005ee74399b6ac976e7f72b48409baee3b41

                            SHA512

                            79751330bed5c16d66baf3e5212be0950f312ffd5b80b78be66eaea3cc7115f8a9472d2a43b5ce702aa044f3b45fd572775ff86572150df91cc27866f88f8277

                            Download Submit

                          • C:\Windows\System32\DriverStore\Temp\{a40bd26e-670c-d547-bac7-3c34dfbf993a}\SET1B06.tmp
                            Filesize

                            19KB

                            MD5

                            c757503bc0c5a6679e07fe15b93324d6

                            SHA1

                            6a81aa87e4b07c7fea176c8adf1b27ddcdd44573

                            SHA256

                            91ebea8ad199e97832cf91ea77328ed7ff49a1b5c06ddaacb0e420097a9b079e

                            SHA512

                            efd1507bc7aa0cd335b0e82cddde5f75c4d1e35490608d32f24a2bed0d0fbcac88919728e3b3312665bd1e60d3f13a325bdcef4acfddab0f8c2d9f4fb2454d99

                            Download Submit

                          • C:\Windows\System32\DriverStore\Temp\{a40bd26e-670c-d547-bac7-3c34dfbf993a}\SET1B07.tmp
                            Filesize

                            26KB

                            MD5

                            d765f43cbea72d14c04af3d2b9c8e54b

                            SHA1

                            daebe266073616e5fc931c319470fcf42a06867a

                            SHA256

                            89c5ca1440df186497ce158eb71c0c6bf570a75b6bc1880eac7c87a0250201c0

                            SHA512

                            ff83225ed348aa8558fb3055ceb43863bad5cf775e410ed8acda7316b56cd5c9360e63ed71abbc8929f7dcf51fd9a948b16d58242a7a2b16108e696c11d548b2

                            Download Submit

                          • memory/1948-4-0x000000001D1D0000-0x000000001D6F8000-memory.dmp

                            Filesize

                            5.2MB

                            Download

                          • memory/1948-3-0x000000001CAD0000-0x000000001CC92000-memory.dmp

                            Filesize

                            1.8MB

                            Download

                          • memory/1948-0-0x0000000000F30000-0x0000000000F52000-memory.dmp

                            Filesize

                            136KB

                            Download

                          • memory/1948-101-0x00007FF8DD4B0000-0x00007FF8DDF71000-memory.dmp

                            Filesize

                            10.8MB

                            Download

                          • memory/1948-102-0x0000000003100000-0x0000000003110000-memory.dmp

                            Filesize

                            64KB

                            Download

                          • memory/1948-2-0x0000000003100000-0x0000000003110000-memory.dmp

                            Filesize

                            64KB

                            Download

                          • memory/1948-1-0x00007FF8DD4B0000-0x00007FF8DDF71000-memory.dmp

                            Filesize

                            10.8MB

                            Download

                          • memory/3560-1275-0x000001DFF4C60000-0x000001DFF4C98000-memory.dmp

                            Filesize

                            224KB

                            Download

                          • memory/3560-1278-0x000001DFF5840000-0x000001DFF58D8000-memory.dmp

                            Filesize

                            608KB

                            Download

                          • memory/3560-1269-0x000001DFF2E70000-0x000001DFF2FC4000-memory.dmp

                            Filesize

                            1.3MB

                            Download

                          • memory/3560-1272-0x000001DFF56B0000-0x000001DFF5750000-memory.dmp

                            Filesize

                            640KB

                            Download

                          • memory/3560-1270-0x00007FF8DD4B0000-0x00007FF8DDF71000-memory.dmp

                            Filesize

                            10.8MB

                            Download

                          • memory/3560-1280-0x000001DFF58E0000-0x000001DFF593C000-memory.dmp

                            Filesize

                            368KB

                            Download

                          • memory/3560-1282-0x000001DFF5940000-0x000001DFF59AE000-memory.dmp

                            Filesize

                            440KB

                            Download

                          • memory/3644-1993-0x00000287CF500000-0x00000287D0500000-memory.dmp

                            Filesize

                            16.0MB

                            Download

                          • memory/3644-1872-0x00000287CD3C0000-0x00000287CD468000-memory.dmp

                            Filesize

                            672KB

                            Download

                          • memory/5072-48-0x000001A289B00000-0x000001A28A010000-memory.dmp

                            Filesize

                            5.1MB

                            Download

                          • memory/5072-55-0x000001A2A4740000-0x000001A2A47E0000-memory.dmp

                            Filesize

                            640KB

                            Download

                          • memory/5072-51-0x000001A28BC30000-0x000001A28BC38000-memory.dmp

                            Filesize

                            32KB

                            Download

                          • memory/5072-50-0x000001A28BBE0000-0x000001A28BBE8000-memory.dmp

                            Filesize

                            32KB

                            Download

                          • memory/5072-49-0x000001A2A4480000-0x000001A2A4516000-memory.dmp

                            Filesize

                            600KB

                            Download

                          • memory/5072-47-0x00007FF8DD4B0000-0x00007FF8DDF71000-memory.dmp

                            Filesize

                            10.8MB

                            Download

                          • memory/5072-56-0x000001A2A48D0000-0x000001A2A48EA000-memory.dmp

                            Filesize

                            104KB

                            Download

                          • memory/5072-62-0x000001A2A5130000-0x000001A2A5138000-memory.dmp

                            Filesize

                            32KB

                            Download

                          • memory/5072-63-0x000001A2A5730000-0x000001A2A5738000-memory.dmp

                            Filesize

                            32KB

                            Download

                          • memory/5072-64-0x000001A2A57D0000-0x000001A2A57D8000-memory.dmp

                            Filesize

                            32KB

                            Download

                          • memory/5072-65-0x000001A2A5830000-0x000001A2A5838000-memory.dmp

                            Filesize

                            32KB

                            Download

                          • memory/5072-66-0x000001A2A5870000-0x000001A2A5878000-memory.dmp

                            Filesize

                            32KB

                            Download

                          • memory/5072-67-0x000001A2A5A10000-0x000001A2A5A18000-memory.dmp

                            Filesize

                            32KB

                            Download

                          • memory/5072-68-0x000001A2A5A70000-0x000001A2A5A78000-memory.dmp

                            Filesize

                            32KB

                            Download

                          • memory/5072-53-0x000001A28BC10000-0x000001A28BC1A000-memory.dmp

                            Filesize

                            40KB

                            Download

                          • memory/5072-69-0x000001A2A5B50000-0x000001A2A5B58000-memory.dmp

                            Filesize

                            32KB

                            Download

                          • memory/5072-70-0x000001A2A5BD0000-0x000001A2A5BD8000-memory.dmp

                            Filesize

                            32KB

                            Download

                          • memory/5072-54-0x000001A28BC20000-0x000001A28BC2A000-memory.dmp

                            Filesize

                            40KB

                            Download

                          • memory/5072-71-0x000001A2A5D30000-0x000001A2A5D46000-memory.dmp

                            Filesize

                            88KB

                            Download

                          • memory/5072-61-0x000001A2A4BD0000-0x000001A2A4BD8000-memory.dmp

                            Filesize

                            32KB

                            Download

                          • memory/5072-1276-0x000001A2A4730000-0x000001A2A4740000-memory.dmp

                            Filesize

                            64KB

                            Download

                          • memory/5072-79-0x000001A2A9370000-0x000001A2A93AA000-memory.dmp

                            Filesize

                            232KB

                            Download

                          • memory/5072-60-0x000001A2A4AD0000-0x000001A2A4AD8000-memory.dmp

                            Filesize

                            32KB

                            Download

                          • memory/5072-1273-0x000001A2A4730000-0x000001A2A4740000-memory.dmp

                            Filesize

                            64KB

                            Download

                          • memory/5072-72-0x000001A2A4730000-0x000001A2A4740000-memory.dmp

                            Filesize

                            64KB

                            Download

                          • memory/5072-52-0x000001A2A4520000-0x000001A2A45B4000-memory.dmp

                            Filesize

                            592KB

                            Download

                          • memory/5072-59-0x000001A2A4AA0000-0x000001A2A4ACA000-memory.dmp

                            Filesize

                            168KB

                            Download

                          • memory/5072-73-0x000001A2A82F0000-0x000001A2A82F8000-memory.dmp

                            Filesize

                            32KB

                            Download

                          • memory/5072-74-0x000001A2A8320000-0x000001A2A8328000-memory.dmp

                            Filesize

                            32KB

                            Download

                          • memory/5072-75-0x000001A2A4730000-0x000001A2A4740000-memory.dmp

                            Filesize

                            64KB

                            Download

                          • memory/5072-76-0x000001A2A83B0000-0x000001A2A83E8000-memory.dmp

                            Filesize

                            224KB

                            Download

                          • memory/5072-1247-0x000001A2AAB00000-0x000001A2AAB76000-memory.dmp

                            Filesize

                            472KB

                            Download

                          • memory/5072-1246-0x000001A2AAA30000-0x000001A2AAA80000-memory.dmp

                            Filesize

                            320KB

                            Download

                          • memory/5072-77-0x000001A2A8380000-0x000001A2A838E000-memory.dmp

                            Filesize

                            56KB

                            Download

                          • memory/5072-58-0x000001A2A4720000-0x000001A2A472E000-memory.dmp

                            Filesize

                            56KB

                            Download

                          • memory/5072-57-0x000001A2A48F0000-0x000001A2A4936000-memory.dmp

                            Filesize

                            280KB

                            Download

                          • memory/5072-78-0x000001A2A83F0000-0x000001A2A8428000-memory.dmp

                            Filesize

                            224KB

                            Download

                          • memory/5072-780-0x000001A2A4730000-0x000001A2A4740000-memory.dmp

                            Filesize

                            64KB

                            Download

                          • memory/5072-237-0x00007FF8DD4B0000-0x00007FF8DDF71000-memory.dmp

                            Filesize

                            10.8MB

                            Download

                          • memory/5072-108-0x000001A2A98B0000-0x000001A2A98BA000-memory.dmp

                            Filesize

                            40KB

                            Download

                          • memory/5072-107-0x000001A2A98C0000-0x000001A2A98C8000-memory.dmp

                            Filesize

                            32KB

                            Download

                          • memory/5072-106-0x000001A2AA010000-0x000001A2AA036000-memory.dmp

                            Filesize

                            152KB

                            Download

                          • memory/5072-105-0x000001A2A9F80000-0x000001A2AA012000-memory.dmp

                            Filesize

                            584KB

                            Download

                          • memory/5072-100-0x000001A2A4730000-0x000001A2A4740000-memory.dmp

                            Filesize

                            64KB

                            Download

                          • memory/5072-99-0x000001A2A4730000-0x000001A2A4740000-memory.dmp

                            Filesize

                            64KB

                            Download

                          • memory/5072-98-0x000001A2A9500000-0x000001A2A9512000-memory.dmp

                            Filesize

                            72KB

                            Download

                          • memory/5072-97-0x000001A2A9450000-0x000001A2A9502000-memory.dmp

                            Filesize

                            712KB

                            Download

                          • memory/5072-96-0x000001A2A9410000-0x000001A2A944A000-memory.dmp

                            Filesize

                            232KB

                            Download

                          • memory/5072-95-0x000001A2A8390000-0x000001A2A839A000-memory.dmp

                            Filesize

                            40KB

                            Download

                          • memory/5072-94-0x000001A2A93E0000-0x000001A2A9402000-memory.dmp

                            Filesize

                            136KB

                            Download