a1dc127add3ab677c6e342e9b4a4952ca9a28e0b23024ab060b6667bd12673c4

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
10-06-2024 05:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a1dc127add3ab677c6e342e9b4a4952ca9a28e0b23024ab060b6667bd12673c4.exe
Size

10.5MB
MD5

99f4956e54717c033294558697b73fc6
SHA1

f528e2da3b2006420fd9cadc8a89f05c6a344c5c
SHA256

a1dc127add3ab677c6e342e9b4a4952ca9a28e0b23024ab060b6667bd12673c4
SHA512

a1bdd9958df6568b8193519bb468d25811d66f7a137fbd6f7e560cb6e926500f322bee8e5dd696a0f71b5a40c2c45c1c5d56c527ddfb61af0f777265c448fb09
SSDEEP

196608:Hw5QgkALtDhMedzjecdLJsv6tWKFdu9C7:DALhh3CcdLJsv6tWKFdu9C

Score

8^/10

Malware Config

Signatures

Downloads MZ/PE file
Executes dropped EXE 1 IoCs

Processes:

Update.exe

pid process

1040 Update.exe
Suspicious behavior: AddClipboardFormatListener 2 IoCs

Processes:

a1dc127add3ab677c6e342e9b4a4952ca9a28e0b23024ab060b6667bd12673c4.exeUpdate.exe

pid process

3548 a1dc127add3ab677c6e342e9b4a4952ca9a28e0b23024ab060b6667bd12673c4.exe
1040 Update.exe

pid	process
1040	Update.exe

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

a1dc127add3ab677c6e342e9b4a4952ca9a28e0b23024ab060b6667bd12673c4.exeUpdate.exe

pid	process
3548	a1dc127add3ab677c6e342e9b4a4952ca9a28e0b23024ab060b6667bd12673c4.exe
3548	a1dc127add3ab677c6e342e9b4a4952ca9a28e0b23024ab060b6667bd12673c4.exe
1040	Update.exe
1040	Update.exe

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

a1dc127add3ab677c6e342e9b4a4952ca9a28e0b23024ab060b6667bd12673c4.exe

description	pid	process	target process
PID 3548 wrote to memory of 1040	3548	a1dc127add3ab677c6e342e9b4a4952ca9a28e0b23024ab060b6667bd12673c4.exe	Update.exe
PID 3548 wrote to memory of 1040	3548	a1dc127add3ab677c6e342e9b4a4952ca9a28e0b23024ab060b6667bd12673c4.exe	Update.exe
PID 3548 wrote to memory of 1040	3548	a1dc127add3ab677c6e342e9b4a4952ca9a28e0b23024ab060b6667bd12673c4.exe	Update.exe

C:\Users\Admin\AppData\Local\Temp\a1dc127add3ab677c6e342e9b4a4952ca9a28e0b23024ab060b6667bd12673c4.exe
"C:\Users\Admin\AppData\Local\Temp\a1dc127add3ab677c6e342e9b4a4952ca9a28e0b23024ab060b6667bd12673c4.exe"
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3548
- C:\Users\Admin\AppData\Local\Temp\Update.exe
  C:\Users\Admin\AppData\Local\Temp\Update.exe
  2⤵
  - Executes dropped EXE
  - Suspicious behavior: AddClipboardFormatListener
  - Suspicious use of SetWindowsHookEx
  PID:1040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\CG70\CG70.exe

Filesize
3.1MB

MD5
3cc1dc425de923dbdc241a1963c8cb00

SHA1
bb7c991100eb8d4fcea9b8afcd3c39443f318747

SHA256
fd202b2731c8519d0bdb71e3ed93e34380e4451cf932fd6d67fbcca2fb8dd8a6

SHA512
1acc3620d2ae06f1c8d41e159b479ffc784ad45a47c3114df732dcc41fb613fa14f1e05dc567ad5f35f59d3f6b0d9f7eb394264256713df528403abe99de7815

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\03E91892B4C23DF04476485E943CD6E8263E00D0.temp

Filesize
18KB

MD5
53ca7b998409bfc859301f816b7fbd6e

SHA1
03e91892b4c23df04476485e943cd6e8263e00d0

SHA256
7e4130cbfbaf8e3c126535b91764c4eba5250ac5e517f2eb6b04c366bbde1dc6

SHA512
4a5c6166e0b5cef0e49afeb9008dc417919a9af6af335f845a1ab3a8e36447edcd50230715a2db3fd5393cbc1bd224f7cc508be2e738b98f08b06d0009426e17

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\05A6F5BAF8BF698BAA581139F782E9B33D26B0D1.temp

Filesize
19KB

MD5
85fe089a81e82131076eca1691d60bb2

SHA1
05a6f5baf8bf698baa581139f782e9b33d26b0d1

SHA256
441c50e7ba4a5807b7eba653850e0d48f31634d0a2c2f5b69e1e06acb3dcf5f7

SHA512
1f52dd82995050613d24febe4bc2b5bf3db3625a21d24a06165f63cd0b5fc7836d7b0270ed31709c70f2356037d7a89cb2ecbb02e5923325e5824fea2bb87cae

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\06D9F4CD22A98549A4CC9B439FFC6FCE53112175.temp

Filesize
19KB

MD5
c0fecb050c762035957bd89ebd4b4f45

SHA1
06d9f4cd22a98549a4cc9b439ffc6fce53112175

SHA256
6453a3fc0f47286f232049f7147300c363312493960a99ab7c40d7bed29a7da0

SHA512
3f4fed26f74c0c6754e99e4543e71ac63818355daf206b3fd2da5e42204e78660def08b830f84525685cd90992a74accd31fb2e1075df98939b835e368455ba0

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\0A6E95DAA685541E7628E07027BC826C750D235E.temp

Filesize
249KB

MD5
9650a706213f661ed95d687ab1adbe0e

SHA1
0a6e95daa685541e7628e07027bc826c750d235e

SHA256
9493a3ab3d194318a12a0c372c16ee19b9259859112c739e9c36a70a9125ee0f

SHA512
99848e3bb2e76cab35b5b58105ff35cf7e35f6b320b260cc51ea12c94aa1b9c3814ace07202189d840665405cd8c7fb0e1cdd306836f9d45f9ba6503781e5e83

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\1153800A293C31069F19035F07CF674ECFA5B5D6.temp

Filesize
22KB

MD5
a446a3fadd7082e74069c36f674b316f

SHA1
1153800a293c31069f19035f07cf674ecfa5b5d6

SHA256
63c8d4ea5fe1f6594dc4b72645bded89c2b637d79d65d0edfacc49f7dd9de960

SHA512
9a309e1a309c2bf141f81403850cbd756db2634a9df3704f05b6c32886f4a6bfe0f285636d56c87d39309cb6b72e2366cbb55b0bfc5822a9204d4c74e32637a6

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\13CAE78A6E3ED88BD840F186E0D31CCD8CA490B5.temp

Filesize
4.6MB

MD5
385f902ad28bc1dca79c2b236dc9c2e8

SHA1
13cae78a6e3ed88bd840f186e0d31ccd8ca490b5

SHA256
71f63bd32d22d2b8813dfe4d15bddbc4025860f2c87a041c4aed1da8f8f9d426

SHA512
342e02a8be7849f314944a25caa2cb1596cbce72e6f9074cadbf3006da35e608f95cb9fc1f8716f5bd2c42b84d2787e36156cc1ac131a4a687a92df23486136f

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\16DEBCD1A74F4EBD5991E8E37CBD60AF96D7CBED.temp

Filesize
18KB

MD5
9ed94fee211a33c585601ccecb8028ff

SHA1
16debcd1a74f4ebd5991e8e37cbd60af96d7cbed

SHA256
4873913495c493c3b8e91637d00544f4a13e512bdbaaac629b89ea5cebb331f4

SHA512
5f86000ec4968a51d6e62e819bda5b3ce2520d6cb43de2c7956f4d6dac8a60f3f4bcb8bce36d68b8e5807472cf22e36b882078f8a2bef946e4acf709848dd33d

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\17F4909A650DB83A2746CFE0524F175EB40CA17A.temp

Filesize
512KB

MD5
eb95593d4ab1ca140c0a6268ed611527

SHA1
17f4909a650db83a2746cfe0524f175eb40ca17a

SHA256
68178e4b50f49984cfaf833a334f94079364be42fe219215452c883ae6d24e93

SHA512
c886bac16f6a71311d7be8479559a0f9d00306c0cfbcae55580a6d671714e4e663066f712ce529e070dc0c629663cc15c2bcd3cca313c76f36cc7bb9ddd0da3a

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\19ABB397CF0DBF4B422A5DFC86DAAA1FFE753310.temp

Filesize
148KB

MD5
fbabd93a054a5640d98f9a0e811381e8

SHA1
19abb397cf0dbf4b422a5dfc86daaa1ffe753310

SHA256
b4d8461e5d2c03e1a6eb58ad696d26aa0a7c8709eb4ca4aec632f3e04607ab04

SHA512
b773d05e1b31109899370bfe211558c2e1aee67edae9eb44a10862b9cb67abb8213f13dfe349c311bf87b807469adf273a173515fcfd041d2864ae3f478612e6

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\1ABB30C52DADFA4FA4BAE50771E352B671A2110B.temp

Filesize
512KB

MD5
56249a703e0af57107cf2c09e5c31023

SHA1
1abb30c52dadfa4fa4bae50771e352b671a2110b

SHA256
71beedd995db8b8e56fab0defa8f4140447786d379cdfcf256153a676bb8e7cb

SHA512
efb00c7148e70d74037ef85f9570325b31fc01e80ac41d3cf9c349f369ae832f32a68a8ae7a7500d748576cac3bb45900f49eb83f7e3eee604fd79c216db1621

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\1ACBA04C7AB704114F004A2FFDC65C231D88DB37.temp

Filesize
18KB

MD5
0a140e3610d15ea1b408266dd54331f2

SHA1
1acba04c7ab704114f004a2ffdc65c231d88db37

SHA256
b8ae54d4cc2848e26beb5c03901ab5097d273d2144b0a0cca24517e4bbbbf78a

SHA512
f64cdbf0f8b3818f01b71ba6d0c437abc9151571726c070bc951196d9532d6dafc0e9ac0e21865635ffb589f7530c413c87e5f9cdf135712288fed84e782e932

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\1B83A8C4A33CA87E9C15450C6671E935EA863B13.temp

Filesize
828KB

MD5
cd96c6562bdbb6de700e3e4fd9807949

SHA1
1b83a8c4a33ca87e9c15450c6671e935ea863b13

SHA256
c0f4933c577d8a326a5995e6a4e555444b2cd61305f66373d0fc206e3aaa10ea

SHA512
65ed6bc9d61a43b4eceab08f9215bb92cf8d6bd0d3a5535ee63aec5ffd7cdcc218cd3f9f95b29bf5244fbdcf603954b2dfc7459522403470a29f7287b9028b76

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\1BDFA14A0883AC96FFED09237C503C8ACCBBC2BD.temp

Filesize
19KB

MD5
cb5dbaa334d0784bb225761474fb4e59

SHA1
1bdfa14a0883ac96ffed09237c503c8accbbc2bd

SHA256
dace42c257053f70a4a6e832ad5586ec01ed874a7762b43f20e018b4907b8dae

SHA512
d5b030a366dea90a971ae2da22845250beabe4bf2f352eaa3870b5fe97815f4f38b0a812aedc7e173fada08d11336115c3bdcf14e4bb1224324bd8bd129f9a6b

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\1E3E06BB40EE195015E3917492B1F89AA0D5F6F4.temp

Filesize
19KB

MD5
2b752370dd03d5b12d4ec2d66a6dc15b

SHA1
1e3e06bb40ee195015e3917492b1f89aa0d5f6f4

SHA256
896bb4e7a7dfb92d040d44c109264a1a57666983bcc34fbce9858b201d26083f

SHA512
c55fc423b7670f2494b264e3270e9ff6d2e7acb587ff25e9d37267bc4ca72c005e2767bb67a3c4a0b755ddeb9e9bbd41a84dfe4e87833598f99f451b97f71f5e

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\2380A9E72AF5DCA2B0311562D3B447D8DC65B17E.temp

Filesize
19KB

MD5
d85d248a5fb70aae8f7b90e7b34f208a

SHA1
2380a9e72af5dca2b0311562d3b447d8dc65b17e

SHA256
e4a91fe4bdc8cb032e9149ee36b4c3b2ad42351652cfae6093d1415d5d6e7c33

SHA512
b37314fb7094234f22bb838903dd1fc093b6b13342176ae175545e85cf9b7d63927c71c4bd671837271d62054a4bf9607e2026b02f5789e2cb916e1ddbd2e888

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\2A706504AB956CFABA611E9551111B7B004A0ED6.temp

Filesize
10.1MB

MD5
41ba5678a81003f4f12cfda4c800f61f

SHA1
2a706504ab956cfaba611e9551111b7b004a0ed6

SHA256
5b1163be18794458dbb11797415111ab61d9cd946395ac417aa9a5b38ab75fd8

SHA512
ef9f906774ef70c758d300f0968e8be8b0503c572bd189f1db3fc88c9ccf574f51a29d5b6bc3a7d80864e2c928623c5f1966226f9bbd56f7e362f39fbd0a8b03

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\368293929ADF4C27790FEBA3E4E21DC3E7356AF7.temp

Filesize
1.7MB

MD5
08886b0fc3c2a293cef515e61ff23107

SHA1
368293929adf4c27790feba3e4e21dc3e7356af7

SHA256
19992dbe8f69cc761c7371f64effd103e5c3952700979051d431d7746c41f24a

SHA512
c7f3a9d3c0a91092734a22a75d48e47c922d5b384a5193b95f4ee49b4268f5c1d5c60f1c1c177bc0816ad7b509aba090eda12778b687b7b8d6358e74766685fc

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\3E1C26ABA565C2BAC093EB70F38B682C10E6DD24.temp

Filesize
22KB

MD5
d3b3e9d889b4a107be11d0c65469ceab

SHA1
3e1c26aba565c2bac093eb70f38b682c10e6dd24

SHA256
583bb3720c39903ea78a38f2a2021c6d1720db9df8dfb7d5742987ab567bdac3

SHA512
af11e1162a6069dc5cbea5ec7c7a0752c93c25acc4761328f2983387e4e1611462f131ffbc2277dc9423512157e031d4012f8be50bbb9805046cfe3174f9b627

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\3EB0E2FE0FB8680E4E146BB02DE499E11DA81AF8.temp

Filesize
72KB

MD5
7769e655fa3f889fa3898d1539e1719d

SHA1
3eb0e2fe0fb8680e4e146bb02de499e11da81af8

SHA256
cee506be6201ddadfefa7334a20ff2701974b37fabd9b972e59e41d910131dbc

SHA512
3a303276cf7132964a57c056076fdda17db586fd4c8203e8740bf7559a270e68742543d595a3b1aaaf4757f2b0cb38522e4279173efe906d8d1afbc30c720113

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\3FFBC4D7D7C4BD276A66ECADE563894451F5C9A6.temp

Filesize
4.2MB

MD5
e2c037cd8212ba25a14ca203347e2ca1

SHA1
3ffbc4d7d7c4bd276a66ecade563894451f5c9a6

SHA256
18c10aea5007d98ace3d84052051c180074d8ff4f0d8d9b4edb4cc82c1e30fd1

SHA512
26d807458f81cb17c557a9d586195cef849b75b6b019ee7476cda85b96db6627870e7468b9fb2f8a1f619dd3959e85dde406bbbbf2477002535f2f4730cb09a0

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\44DBBB35E415941C0DAD7B22A932FC9A604E79CD.temp

Filesize
256KB

MD5
a896986a756a8a742429bab04f1b74fe

SHA1
44dbbb35e415941c0dad7b22a932fc9a604e79cd

SHA256
41d80cb595ecf5bd1a0abd522ff3fa77f6ab89378895291854be78b66dc09f67

SHA512
ef5ca501e883aec8f6716bad77a364f73730aa04464e5d68fbacaf38fd0deb5a5d37605c216c6d9d99544998f10679f1c92253839e2dc1add445930ddde9a965

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\50BCB51AE7A02F84E6355AD962D916EE5214418B.temp

Filesize
19KB

MD5
a3edbf737b4afc093747ae0af7ba8dec

SHA1
50bcb51ae7a02f84e6355ad962d916ee5214418b

SHA256
e3a245cc2092b4833a7e807c40939ed58f788c15ce23b60b980aa29fdd2569a1

SHA512
24ff9cb74598c90904a310e6e7579dfc059fd45d9bf888ca7edd1c135c112faa1e7c0f3814423cbe2366a6e7f50d8e5b6d8682976b6d04d15ede6e6b291dddc8

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\56643F7883CA398DC5A8EC95489916C392F1C90E.temp

Filesize
24KB

MD5
374bb68be767eb63f2255fc174decf9a

SHA1
56643f7883ca398dc5a8ec95489916c392f1c90e

SHA256
74484b81796f7d2c04f353c1915cebe09a324beecf0234c2f35270236aebd152

SHA512
1d34c0ea86f1430e2eb96ad6996f051804142c21a4661cffbfcab19bff38e2cae787b447945fccea3cc6b053584a2f330c9c10011bba642cb5727dbc0de71ba5

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\5F3BA1E4E34BD2BDC769F7E2567C3B6BE329D66C.temp

Filesize
26KB

MD5
14b9c0761b5ef1a35d354ec97cb1faf8

SHA1
5f3ba1e4e34bd2bdc769f7e2567c3b6be329d66c

SHA256
a6f2d6874e034eabbacc9a157996d66e00bc7920bbf943ee80429a049620f6e9

SHA512
0406294b21609ce0e74cec53a037fe1fd42376143f492efacea6ef432fe277c69c3b32b666869aded1fad60debf32ccaaf4b7942eed09e00576bfcfb4eb0d03d

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\612829AAB093EEC25DC2D22C52E8D6ECFC0B2BF9.temp

Filesize
18KB

MD5
5bcb16fecf92cd6cdbc002e3ab04b060

SHA1
612829aab093eec25dc2d22c52e8d6ecfc0b2bf9

SHA256
b956a77b3f942ba7d553aa25a64e380c0335bfece7a6e67709e3d452d5d5b9a4

SHA512
f33419c83c8be195aff4e3b469c99de1c8ecb67290dbe976693819ac55d9465ee780b760a4761431c133af4876f3a5eafe076b3eb382a7b0ec7e341fd73043df

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\62AB8977B1956552EB6E53EB6DB0796B1B35B56B.temp

Filesize
20KB

MD5
79146584883f7c7300e0cff2d2a4afbc

SHA1
62ab8977b1956552eb6e53eb6db0796b1b35b56b

SHA256
f092ce303ca1155d114eae502b6d3880ef54be4ef69b438e6f242bc508b6180c

SHA512
e18fe31648fd87cc811889652271b589d124710631c836333ae838e7367df32170f81dda023b9b21210362e3fbcc29f1df02650d2d89bd43c6b619112f8ce098

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\674DDA8F84E07888E074B8F8806F074DD04C695C.temp

Filesize
29KB

MD5
c4573c621bc52523be3cbc8b52221803

SHA1
674dda8f84e07888e074b8f8806f074dd04c695c

SHA256
bbbd11bdc4fdb5f69ea561e1b278e9a883d2d7bbbbe08acee6658f48cbc2ff39

SHA512
27b96081a09cc2d0818eda4af1c538523753d92ee50c050c9dd945b9c421bfd27468d202d5ef65c505588390fba4d80ef608dba971183b48d15b92bb50863b92

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\73973252C0E0AF5D7C799C451DE42AAC11556A3E.temp

Filesize
23KB

MD5
ad5f367c065966b983f03289883127c2

SHA1
73973252c0e0af5d7c799c451de42aac11556a3e

SHA256
08f33efa415255d25fd12aea6860b695de0dc95e89868b5ef413268d2a77fdc1

SHA512
4e73649123b3a28e45e8dea32d1faed7e8528e59dd420e4ae3ddcb684e35d6171857db12d3f41b382e5331da533f788115bcba553e278ba75b01d53ff04833da

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\772AB6D2EC9372240F52203202CBED926C79B383.temp

Filesize
19KB

MD5
e713d700f89509a1e065c1fa06eeb2ac

SHA1
772ab6d2ec9372240f52203202cbed926c79b383

SHA256
2ac1a88bb448bbd6465ac4f7e0dec30bb1ad290504914515b97a0fe9c80beeca

SHA512
e3d66a6939c3ba5ebff28c0730d3a35363d86fb2e7b10cb6fbf282a4d2266aff951d8e578310f01c1cdcbaa730a2e93996d7e9f1facdfe8b25a39c64e191bcbd

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\79114B4EAC30E643D7CE7E48E811A0886969CAEA.temp

Filesize
20KB

MD5
9a1461e822a7828985031bc91d3a1e82

SHA1
79114b4eac30e643d7ce7e48e811a0886969caea

SHA256
5b43cc851e3b41258e9bb4ba364c74f5058fce9929c17af7c362c3bf0ccb60aa

SHA512
8b500a74c31d8037a2434e90d5a5a9de1bbf0cf0694c3c1325703861adf89da0bb9cf9d7c690f5c173f975c9e7f3d9f746c204b81d615c552b2d0a8feef6c189

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\88A145876586977C5F43CD05DC4A48B8EA35FED1.temp

Filesize
4.4MB

MD5
3d54cba09535808ed300fad872ceed4d

SHA1
88a145876586977c5f43cd05dc4a48b8ea35fed1

SHA256
1f60438f6b590dcd8587eeb19ae95086a94c20ae3520085d775974d660e00312

SHA512
6d7d2014d8307e489dd58e0d9e179d1601d938fcb7bb90181d0ef3484e71fe0a450365d0ebddbcd3648638ba950ff44359c6dcf604fbd97959e5650fba45104a

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\A39B43B3AF06EBEC49B1C93F8AA3B070369330D5.temp

Filesize
18KB

MD5
e670b5cc9dc3c4e74dd7033f83e1080b

SHA1
a39b43b3af06ebec49b1c93f8aa3b070369330d5

SHA256
b06ed70aea63630a0e2e09e3f6c1750adad3674426a30ce00d4751786c744250

SHA512
05305c5985928069337c4a125fac94d043e9566d24f8d0a52e8f8d7c15b94a5df44bfb37d5159da0910dda836311dd62a5d1115d6c708f6aa206a37989fba518

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\A9C199F555094629126C09EF24859B5FE742124A.temp

Filesize
19KB

MD5
6db8767a1a267e991de038abdbccff56

SHA1
a9c199f555094629126c09ef24859b5fe742124a

SHA256
1e98a204d73a01a0a86eaf06b4721fc9ba7524d63d1dba84a1606f9293e9f937

SHA512
71cba918a1cfe8da8f54cce1dd020ff49a5ef17ad99a672c74aeff7b8a21f151202b7c50a4cb580907ca307b27631358a5a9e79f8f32749fc1c54311a08a8c12

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\A9F23689D650EAA20E732FE2E9EB2AD3EDCBA733.temp

Filesize
54KB

MD5
af079e169286404fe4c3eb1ba172356e

SHA1
a9f23689d650eaa20e732fe2e9eb2ad3edcba733

SHA256
2e4bce914d323dcc4a7fa13b5b6271fe89e115ac6c3727ef2608c6a01bd1c997

SHA512
8fcab3b27371ab6f9e6928aa14e0cd077659b991293b983ace6ed9499fd83041d06a4f210cbdfdc1eede047044faa24a87f31c9ef470796421b7f6e64ac467f0

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\AC6B33F0431D31EAE1AAF96D1EA2C813F4B784A2.temp

Filesize
19KB

MD5
5b6d657abda428c1ae59777eb06feeda

SHA1
ac6b33f0431d31eae1aaf96d1ea2c813f4b784a2

SHA256
8b8e184deab14db38b4eea14967d4eeb247266161b595ea4c2301a74fe395da0

SHA512
774da3a7bf10fc472cc59ba3a2c74d7eedaf0de58dbf8e78a4fc4ccd7a7f289a3305003106aa1a54430c609eb6d71e6e3d645f975f0e642290084c863fe5a22a

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\B5A497DAD43C0F0578E7F6CD7F1BB4790BDBE63A.temp

Filesize
21KB

MD5
f43099dbada788e169b20b9ad91b0bfc

SHA1
b5a497dad43c0f0578e7f6cd7f1bb4790bdbe63a

SHA256
3b831368c74bb41ede1565bd052f027e2ac11fa2cfb0bb7e44497596614e0a50

SHA512
ec8b21d8f1c8c238764205077d3d738fe8578ead21adec5df73b374bbe8751bf72c1b4839ce16031b6667c92a70f2c29d345b574effcfe063efc673a4934a986

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\B96D5CDF66BE32E5F6C81EC8049318C379EFA9D5.temp

Filesize
776KB

MD5
5b659305f98f2532e2cdc61ef84f648e

SHA1
b96d5cdf66be32e5f6c81ec8049318c379efa9d5

SHA256
97d21eecefc9e7f5f09391d12a0f0d62d156c12548de12ce9d570fc159623061

SHA512
304ffe15a6a957ae2fd5756215cb93d84a8939c8424b95b3072d46a5e89b094c8408b22a67b2e4ccc6402034e0a2a9671e81ac743bfc8b30a8bcb2a4e5a047ac

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\BCE86BF8406299E9A0696683F4C94ED191FC2DA5.temp

Filesize
20KB

MD5
431ef0218806e1f27a27c0a06596c04f

SHA1
bce86bf8406299e9a0696683f4c94ed191fc2da5

SHA256
e0efecffd9c9e2b375483041d7cec064b8086c21b6ad6da7b6c0a495d702e68e

SHA512
2b97ffbed8a60ffd49a8fa15e0851bf36ffb513993833e158e751c2822276ec42d815d2af5ecd6a34dd265d901c11ea26bc7cd9010aa76acd8ff76c5d3dda732

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\C00A8177E31F7412FB9068455A54F7EE0FD14ABB.temp

Filesize
24KB

MD5
cc50bdb3b1168f9e2f22b5c9f7e518e5

SHA1
c00a8177e31f7412fb9068455a54f7ee0fd14abb

SHA256
6eb0313e5283768fb2b68835f160fdbf44aa396407b57dd59cc036471ec68a31

SHA512
24f4a4aebec5b7f07e29fe81fba0d0cb451b5c5827028f6f084d41e230aa014d9d7c7fb9ec9633f2f79f2114b0d245d7e09a556b0f57e296016cf973908e48e4

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\C0D94BBFAF3A4F7837CA882B8DCCB3E4723E7DD1.temp

Filesize
19KB

MD5
a34e0fbca1e2de81651a9e75785855f3

SHA1
c0d94bbfaf3a4f7837ca882b8dccb3e4723e7dd1

SHA256
4fb1fb026ee4bba128eecbc5ae38c599d269e8235f8f6800b064b164856bcd69

SHA512
21e7d2d58b0557f48046c293c3069dd17e373f733d27613a8cdfacb364e4f8653c2c2d49f289ac42dbc8fce98bedab0655f57715b8c118498b66a6f731b51145

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\C4AAA86A31706DBF817A2BB621829183AA320F24.temp

Filesize
19KB

MD5
c6a0cb44cf430d9941f077cae4241a19

SHA1
c4aaa86a31706dbf817a2bb621829183aa320f24

SHA256
4196875beb7d567e24ce0562973db10fb7217fe567094e4426f59feba9f6fb59

SHA512
d1894a556d8652b064187b6308dbdffc6c57bf865d6b10855e8f7476b1c00f947964ff6794165ba45a5168d3b07b9124ef187e6df396899e2d0c06e36810b26d

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\C759DE99FE96FAA0542267CC2E7C6FE42251466A.temp

Filesize
19KB

MD5
316b785b14a36ae34fbe8dfbe0c43944

SHA1
c759de99fe96faa0542267cc2e7c6fe42251466a

SHA256
622d879d3f03cf36faebff42195674f540c30c36ad496c3b77f6c89c651d4448

SHA512
5af90f564adcb6121cfe67f248ca194af4fdddf5cfe5ec12a0742aee35a60e66f92daf7f266fad6930bf4d59a4bcc91bbd50bba0fd9b5c86ddbfab9557b06ce3

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\C8A6AB6A9F687D76348C8F2542FDB9BAEF4234CD.temp

Filesize
18KB

MD5
907384847a4e3002c9c9d621cabf2508

SHA1
c8a6ab6a9f687d76348c8f2542fdb9baef4234cd

SHA256
f144d246f27eee4ec942b6ccfae54c261b2d60e311d7f6c145a0e49caf402fc6

SHA512
aa9790d67e4551f23e9f3303cf855a065823a25dd23cdc3308d656b2980b9c717bd1131fe27fff5cf1759ea8231dbd69ab18912b080eb11c6b0c5c870433f7af

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\D05D34526ED52F4CC6711F833CD9D9A59BE74F51.temp

Filesize
21KB

MD5
1febaf84a28a62e697eda85e02e48a56

SHA1
d05d34526ed52f4cc6711f833cd9d9a59be74f51

SHA256
b681b2af239f44cb0ba6adb8e5c27a6fab904ba830dfc8f29ac24f525e2780b7

SHA512
83ac96a74989405e38365cf90fe97a68c0cfbbb027faeba1b8a01f5ed7435fd23acc7b822812a16fac50e9ba1f64cc47f85a09cc5d2a4d4bfb2edd261160beb3

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\D0A04074B4076379CD1BE3C489F056DD17942EC5.temp

Filesize
18KB

MD5
f7119a732d816be4a7f11dcd293008f7

SHA1
d0a04074b4076379cd1be3c489f056dd17942ec5

SHA256
628815d6eba2bae4b9e4750bce8d8878c8f8d3ec4d10c7cf10bdf1a6c26fb8eb

SHA512
045077e9d562068c61a87dad8fdb98244562d2f60ba82ca93e86733b997f548b9441666e5810a239696fc6581a8b67e1a4f366a59bf67b8dc03b1555c53784f9

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\D11D0926086E12485EB232724AEC31BDF50C40CC.temp

Filesize
18KB

MD5
27d8e19487a6a6622745af9330062bca

SHA1
d11d0926086e12485eb232724aec31bdf50c40cc

SHA256
3321f78798979aa0d89f25b94e0e419ad9db46bad1debd3ab891b5bddcc09cdf

SHA512
24ff2d0dd6bfa8c635a367844cffb5c9facfdc695009914011201ec35b52d6e383e258dac4bf330e455bdbc2dccd2ab2d5a54ccec7da487361329bc19b8aeb53

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\D3D078CD607072A66B644074FAA122D5FEAE5CCB.temp

Filesize
18KB

MD5
63f2c054b991f67f6b8344971d4968f7

SHA1
d3d078cd607072a66b644074faa122d5feae5ccb

SHA256
b41b84e929a014dcdcb47e0070f95ac96202d52cc8baeac487115d9068910226

SHA512
c4e8778479088408e0e41bbc4e8d2f33a5b52f64e269366348cd5b2d4ca5bda63f2c00692e992dd86abc053ef8848853566d3c4e478165fcdeda96d4b2ad32e8

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\D4D608526AEA3919FBD13DB7A91F310C0E33000A.temp

Filesize
59KB

MD5
cb55c4f6816042a9ab8d135fd492feb2

SHA1
d4d608526aea3919fbd13db7a91f310c0e33000a

SHA256
11baceb7cceab402954eacd688512e033e34c375ae8ae2fbf00904385d7bed09

SHA512
882624d8e91f6ef022343b0d2ad93881c8d5a1b7fc84c60ab9e2bb9f1291dd6b9d767c838fbaaf25d6699470faac5a6bacd19b1b1a7038a1df43938910559c98

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\D54DEDE54A66B846D883792CA766676BBF4EDA8B.temp

Filesize
98KB

MD5
d4e9754cf7d1d07d990d621a8111b29d

SHA1
d54dede54a66b846d883792ca766676bbf4eda8b

SHA256
362852766f050b6bb62d06479f06b5aa37e7a4c91a6f9bdd689ed41f873d423e

SHA512
06ef87fddc791c4b386118f58566c40fcc1cdd6124bb74f7af82543a7e944c83352853944a761a2a7406a9448860a4c8f06a827f4e6c81a1e27e8a01ba5e4abf

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\DC9ADD730406E6B925780F45068AE2AB543E4B58.temp

Filesize
18KB

MD5
b76387fedc728088768f18af998497d6

SHA1
dc9add730406e6b925780f45068ae2ab543e4b58

SHA256
7faf034842c02414d3a0162350600f82f30a9e89e9d0b2c9c39368eabb1529c9

SHA512
e39e47256054b4f655827c9aa96316927fc3fdd39fc9b0fb1125941fd0fb4558dbef6c183ff0e98e7d53b4fcd0fc1ac3c017327d3f25a4a88196609bf271b3ed

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\DFBF7DEF0FD31A10F8E0C7B45271015ACB7A320B.temp

Filesize
152KB

MD5
0c1fe84efca643ee24480d97ea5d01f7

SHA1
dfbf7def0fd31a10f8e0c7b45271015acb7a320b

SHA256
064a15cb6fc2ae1459724f5f90eba807b3043a7c9aa0e7bc9edc14aea625082d

SHA512
fede1636007a89b01b7260ec75eacee55725d31ba339ae288243de4046ff7998e91473664c5f62ca96ec3755c40103ccad8072417e45ea2e68e5283a9c2da891

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\E517E4CBDF4CFDA7A650E12EC0E9FC6BDE80B1D8.temp

Filesize
19KB

MD5
33143360089e149497dd9851102786bf

SHA1
e517e4cbdf4cfda7a650e12ec0e9fc6bde80b1d8

SHA256
9946fa22f09b551892ee91705ff7dead093da7c024291500c0607f2c27b39258

SHA512
9390028172693a38604dbea1c96e834f53604f4ad7324dcb7427575d0c1efc732c404bc17cab750149891e49f096f8f2f063d7e90e788a173f8944f887e93f4d

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\E68DB81AF1C6C57E4C1B07271B2D2C0EA4BB337F.temp

Filesize
18KB

MD5
99fb9f6da5684dada23a68b4de43fb08

SHA1
e68db81af1c6c57e4c1b07271b2d2c0ea4bb337f

SHA256
15ae24eb93397dc23a1e181cf9833431abe4db859055d51ff1e65cb9a43f3c63

SHA512
704aaae4fd0cbfd353594e81814cf565a813aeb5cd623d5d89a17cd324474df8294232e4535c3d4a1070f77f56c9234d1fd9cec38118e274df715abbc049d589

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\ECBFA7B25EF21AB9F0A603D837A2EC85AE2CD205.temp

Filesize
19KB

MD5
4ce2009b865a299d29639f9cfd0e4073

SHA1
ecbfa7b25ef21ab9f0a603d837a2ec85ae2cd205

SHA256
d799fad01dc6a5b891da0910ee8db64be4caa13b589f42957730798ff4f25829

SHA512
4d9a3d1783801ba679cd3f2781ad1c595d40fd8c615877de3cbb430af2f90c87224bc87a30cf1fa0c9bbed9326049d410052358f64adfd633cce0355a365b299

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\F3A7244B19327E964F73364E133918959C7090B1.temp

Filesize
256KB

MD5
d031b6c4fbb2ed54cb82dddc4b2f5c5f

SHA1
f3a7244b19327e964f73364e133918959c7090b1

SHA256
87573a235df6b8d5dac4f2d9fbefc23f700b6f25fb99b2df1e513d802af5d9cb

SHA512
3f4b6ce9db600698a364445affc1a33212dd3855c0317b60e0fb8b1794b928829b56da5622cff64b978b8120ae133b85b2c616a121b2623868278042a6251e76

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\FCD28506896F21B7E9E84166237457A2CF7D33DE.temp

Filesize
19KB

MD5
018dd59bbba9d8daa2eafc4bdcea18a9

SHA1
fcd28506896f21b7e9e84166237457a2cf7d33de

SHA256
8b1330cab1eedf9494f6789918fca0833aca5d3a63446b2847992d08b2494fef

SHA512
303ac119ef7fb25d84d91b9aba9572b42ecf7fc702d20120b6e6694e78eb23cc3c53545293617e098ec357e42e0f0fd592ce0d8b6c60ec1367d0b620a915dac1

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\FE9B0D3CF05A8E39366074574B8C067A094F6FFF.temp

Filesize
18KB

MD5
b16edd687d38af6921d0f3872e7c5915

SHA1
fe9b0d3cf05a8e39366074574b8c067a094f6fff

SHA256
6da76ff6d4d97c6db5897ff9fc5fc30d4f2fd9d917a39792c4a7231816f8c08e

SHA512
daf7c18359cc48b0f348b58ff68636c982ee9c77ffc81339e776c2f7d3ee7f48a52b1182b61e8198c8867deed0257336f0127242c647c164ee5c0ec9c22718ac

Download Submit
C:\Users\Admin\AppData\Local\Changguang\CG100\cache\update.ini

Filesize
2.1MB

MD5
6307839dbc47c812ead23522e822fa32

SHA1
545175b8d5267c092b7556a9669b977135de652f

SHA256
5d6ba9d44366affd4598f16dae357fdd15b05b9f2becb516d46aa0af2e5b52e9

SHA512
ab307609b13cbdfbe611a081f9e85b83b89d099ee03bd6558afbf00048e82b733b1d56847fc8772ae188073503f39e05e0bd2559f767f1331c9099efadaeda65

Download Submit
C:\Users\Admin\AppData\Local\Temp\Update.exe

Filesize
10.5MB

MD5
99f4956e54717c033294558697b73fc6

SHA1
f528e2da3b2006420fd9cadc8a89f05c6a344c5c

SHA256
a1dc127add3ab677c6e342e9b4a4952ca9a28e0b23024ab060b6667bd12673c4

SHA512
a1bdd9958df6568b8193519bb468d25811d66f7a137fbd6f7e560cb6e926500f322bee8e5dd696a0f71b5a40c2c45c1c5d56c527ddfb61af0f777265c448fb09

Download Submit
C:\Users\Admin\AppData\Local\Temp\config

Filesize
18B

MD5
2f3e86b633adb832ca05f09b1fcb4dff

SHA1
de2145e4f1b47fd259ad4f0b33698442f13d5170

SHA256
515ca85f56b4277d9f56ba196c1ab0470a50a7511a2593c93cd5a0cf2ba7a52a

SHA512
c7b1d2fc66e3144af5806833d6f0fb645bdf90678c6937f116838f32386670aaf9618c80093e4c6bc85de65946d0e54ba2d0e4c8826a768989610476d7eadc22

Download Submit
C:\Users\Admin\Documents\Changguang\CG100\Log\cg100_2024-06-10.log

Filesize
263B

MD5
560c198f18048616cea9422148f1c4f3

SHA1
1f166db68e983731a3f4e9b7e4e4c5b015eb844e

SHA256
69db34793155260b1f92c2c545ca4f7f56d8e49c9e2c7c2a714d6c361c11f75f

SHA512
651a4820e205002dec1d2b6695a73edd98d90cff71c3eff04eb076b9aac91db55b20c0bc987158689582fec9f1557a04a4181fd780a0b789cd453fa2732589a0

Download Submit