7b978990f7cac5f342b3ac32715aa3f9024c58ac3af23aa708a864be6c0b4a99

Analysis

max time kernel
34s
max time network
39s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
04-09-2024 22:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

OFGB-Deps.exe
Size

169.6MB
MD5

5a58b2159900d4f20b6edc4648922b37
SHA1

1a7824b1234f0a1fc8d662c35c7794df93c2d171
SHA256

7b978990f7cac5f342b3ac32715aa3f9024c58ac3af23aa708a864be6c0b4a99
SHA512

1a459338acb589d9d130d3abb35ee6c4642d276d4d3896a5700673f0222c903952edacb189ffeb9fce8efde8dd17cf9cc448a029d075a9919c7bad707d06bd24
SSDEEP

786432:9dyRHFxTqmYEj69kQshjNNmoiufO5zNJDT7uVtpbSgXWlRszew9LHWPO48s2kW:9dyxHTHY42yTiu2hvTyVDOli9yO48t

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 51 IoCs

pid	Process
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe
2896	OFGB-Deps.exe

C:\Users\Admin\AppData\Local\Temp\OFGB-Deps.exe
"C:\Users\Admin\AppData\Local\Temp\OFGB-Deps.exe"
1⤵
- Loads dropped DLL
PID:2896

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\D3DCompiler_47_cor3.dll

Filesize
4.7MB

MD5
a7349236212b0e5cec2978f2cfa49a1a

SHA1
5abb08949162fd1985b89ffad40aaf5fc769017e

SHA256
a05d04a270f68c8c6d6ea2d23bebf8cd1d5453b26b5442fa54965f90f1c62082

SHA512
c7ff4f9146fefedc199360aa04236294349c881b3865ebc58c5646ad6b3f83fca309de1173f5ebf823a14ba65e5ada77b46f20286d1ea62c37e17adbc9a82d02

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\DirectWriteForwarder.dll

Filesize
244KB

MD5
e385fe89ba8c88193a0aa6fd04ba1f24

SHA1
85f489f6864b7ab67fcc35c506f076f9a50ac89c

SHA256
937d44304ff5a1c667ac054ad7f5ffe4cc8aca6ccf41486c0b5727d705e3174b

SHA512
2bc4148a37cb20f7f69439dc861a1af9f107b8983831b3f1ad0df3a96053d4ad8733c9688d7fd6401c66b35a418c0d2d32f659c15b96e1a2b9542d66dc524e40

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\Microsoft.Win32.Primitives.dll

Filesize
16KB

MD5
c9d3ddbee9f9fc44132a13c1897cf3f5

SHA1
e7a2d5a91b54163b4e8ec99e01b0ec8172a3e4a0

SHA256
c50d58aa4529d451ef82dcc9cc6121ad229c8cbae90141dc7a71da2f4d58764e

SHA512
348096b66d751bc984a9fa566dbe9e3d7bd03877644d87ae1651ad8973c9577e37df352f957b9e15752057c07cb16b4f7885a08591c543b8df9081e080a775fb

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\Microsoft.Win32.Registry.dll

Filesize
56KB

MD5
4ff32db53527123df00b9c91af95e211

SHA1
60bbc0358d8598b41add53ab1738e8e41e438972

SHA256
02e49bd15913c8a87f9fb2d902ef161d67de1853fc905c0b9c79a53f85ca1e81

SHA512
d7d3c64bc047afb60899c585c42a9f7f8316f534ffd619fd72780946f771c78ef907dd7476c02c68a135f1473aca2b7b15de1aa8e279d61e731aecb37ae86e0f

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\OFGB.dll

Filesize
40KB

MD5
873042728ba5c98ce7d1ecbaf8defb9c

SHA1
0842405adcf0de21892a0ca9fcde42401e7ffbda

SHA256
60a90e6ba74c2abe747b66429e395d718a12c34e3955f034724c17dc7b004368

SHA512
525f8bb13e6f230c15a3d45ddf6d3e18c03aba3c52dc2820b5de917ce6ff75edf69f6f9c62089cb043cbff56ab6b94aae26a005a382804e572150978dfa42cc6

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\PresentationCore.dll

Filesize
3.3MB

MD5
35333e0ffe899e1a36cca2e46acb15e5

SHA1
bfcf723bea7983f608f8277f5f28434000fb32c2

SHA256
92a098f86d58c3e1a3bbd5c922ddf8a7ac53c4230789dd94c2b773d1d02ab012

SHA512
38e63d0d3d6248802cbdf8a2d83eb5b1767ddb4e4b8aaa793ae8e36f4f855a84070ff9c88993942e4c8bcc5eed8c35d303fab62af5657e9137154293e1c9ee0b

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\PresentationFramework-SystemXml.dll

Filesize
20KB

MD5
72172f5ab6b7ca6bc1cb91100d9a7a73

SHA1
b8a90c8b8962a6f8cd5555e9da2716890db66fd7

SHA256
2149926362a125ae43df16da08e8c5c0fefe08981b8fa3ca98f75f0c2c17643a

SHA512
3b290924d92ad9ee63fcc95debcc2fd48db7ab39c7364abd7d4026ffd114871a35f67b91e60e4fcb7ffcb94ecbf48a5801b0a8436cd093b127ff91e88e60af97

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\PresentationFramework.Aero2.dll

Filesize
252KB

MD5
6d80848e1732985b20650004f9ab9719

SHA1
54151449c76c091b6a23b3ff63ae5f29180d5481

SHA256
8717d8dd5a518d3a27c55f9d66464dbf86c2eeb74057bc1a21fd2094e7de3a6e

SHA512
b93428dcece5ff7db293c7e9f5f930b86fa2ce9e8bc70596acbb33650f5c15673ec7c18e2562c4c9982caaf6941ac55a9e0609bb0246875b3f8e603cdb5e7d73

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\PresentationFramework.dll

Filesize
5.7MB

MD5
7dfb9a983425dec5989d78094f8b3e5b

SHA1
11b75b93e65f6a12bd267fdeaedcf9468fa39ed0

SHA256
a22eeb5400254dfc1fca68e06b3de7c2ef685435dccb75b3e193900650186444

SHA512
736f562ad77ccfb4e9a40890a227477a3d733a287c43b72306327d90d0896ac9a4d75102ff3708d0ec87c8c7a744a4c42f419c198bd00bee2862a9dd3a29ec16

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\PresentationNative_cor3.dll

Filesize
1.2MB

MD5
7d1615f573257a22895081a4d5c6cc0a

SHA1
c7d5bf31e6d53eca990f7a663a87ebacd89b5aed

SHA256
ddb6caa919d51b6cc56e19ed5d064bb04b2fee9028564b518ad06665ab8b0683

SHA512
096dafed275df9e1ea7dbd29b11dc0230e0c894bcc562f7c9c84c7a45276d762056fbdf1da69b0b1de4c4b753374ff1d6901fcb764041de206fdab107676e869

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Collections.Concurrent.dll

Filesize
88KB

MD5
258e68c1daf4e163802872e27de2ba7a

SHA1
d52b10237bd2bd66f05b3c91ef62ba44c466f03a

SHA256
2a3b443fcdb5eb9012b0279c49fa65de5bf5193c6da9969e6b015a49e9b0c4b7

SHA512
fb896bfe3cf0e69bacdac10ce1c72a52e8a775990e9c2d402d6881790bd7d4b8b11f8a861bee7bcb36f2e0ae45393a891f629da7151a8dc50f5fc7b035fc4874

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Collections.NonGeneric.dll

Filesize
48KB

MD5
0a440c4229af6c69e8c08a3f529cb1bd

SHA1
0b860153a2209b51cc581c3b0bd38e6864f41781

SHA256
9b0c8924e57a493065a81f13888ad4cddce3efc245afad8cacc2ec44949566c2

SHA512
f3aab9779f00b8d14f7d755ebd6d239bbd1e199a70e0e4c86c6bf8cd361717cf9373aea1ab1ab67f67593bea0005002ed5c91e60e52c1c996287b6c27eeaabdb

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Collections.Specialized.dll

Filesize
48KB

MD5
e6926806f3550ad5cfce82a384bb425a

SHA1
ab5669f3c6d273a66bf7dd73b8109bd6d50ba275

SHA256
a44f9f804400e89ebc1ce55ba108bb931cfdfbdeede9e12cd21c9ca2f30cb391

SHA512
47132bd0c3fdf5e04a770380b55c42747bc09bc54a8a1934751c9c2c372a2cdc080d5279f5a36ebcd4eb33c774631c32790158bff28de5541b3efb085eeb79f8

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Collections.dll

Filesize
104KB

MD5
3eddae617bfa1231c00eef0c63bdb618

SHA1
a4c452e4151dcb7b99356142a348ce35a1072412

SHA256
0ef63b7afc936e0746efe93c7a408e15365be959159c5751b6dde3fc6a20394b

SHA512
67711450cce31300308116c9c9404412353cb6a06b227a957484f9cb52b01aa02f11b3eba916a683b7f59aa56d2e4005a5acfb911e5a5bf677c3e7af8074154a

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.ComponentModel.Primitives.dll

Filesize
44KB

MD5
11bc1890482188bc80f78c675e7a68c3

SHA1
c2fb11f6af2465ecbaaef2418d7671b7de697109

SHA256
425b4c8225ca1505836a2c6304057a233a7b0edd4277291278a1154e6fc1bf2f

SHA512
cbc33a450ac3ebdd68303cf5db4b5923b081eb460894a5cc01b9528f7f2f8f191f01761d30af29abf328a2b3ac7f603031c4ddd5d9f8fa90496f5ccc992eb87e

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.ComponentModel.TypeConverter.dll

Filesize
300KB

MD5
bc95e35ffe5cd1a9682d3bbc3e406c2d

SHA1
bb1ed55b4e4b24be69a8559f4686de6eee1280ea

SHA256
04a144ffe285c32be9994007503adfdbe2c59a5ccb2dfc5102440bf62250d6cd

SHA512
7398539f37035df496e5337538efb1859f1bfdd8b56b23440c376a9f5335776a75a93adfb72625d30a271d11e686b46ecfd8776c801530fd92457b283257e50e

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.ComponentModel.dll

Filesize
20KB

MD5
a88576a73d2ec37dc7dac0abc9f044dc

SHA1
35206360c812366af5577d9c52d93274d22d93fe

SHA256
8149f105db08949972aa6abb5b9616f53ffede8c5a0379f77d603299db9c390b

SHA512
8094380837bb46b08e0fcb8666dc750a64a32f5e45da16c6aa0ddf80cc4a8fa104429a8e37f82d1dd8d5985ce55d0acdc7a92ef0ba94f6a990feb339668f6ca5

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Configuration.ConfigurationManager.dll

Filesize
436KB

MD5
fd2daaaf73447e809a4fc8095a12f55a

SHA1
c965c8fe9b0ac8279473d50517980fabfb3d12ed

SHA256
f4a0b05afb33f2ef1752b0e114adbe96f68e1a9b31271f63277abc3414edc1df

SHA512
828238fce93fb8a886c71a3581a734afcb1a228e6c26c114be7bbaf032f7407e2e2b78515fca58f2e117c2cdb366493f1b3fc2abeb223ab062407da96328d189

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Diagnostics.Debug.dll

Filesize
16KB

MD5
04387c2337a12593bd56061e82fb5d38

SHA1
4b6c2f1c236f26de5754bb7344b022eaa45e9c8a

SHA256
89c6c1af7cf57f284d92af0c7e756f19f233f163de1942f049ea95b01b1e41f2

SHA512
21df06eb7148444e6d267909b2cd11ff2c9355b2bbd9b2beb49e74c792bbbfc87451afce68d0d3b62d0cd830776552484086b84b38c2e9745a7c0b23a6176ff4

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Diagnostics.Process.dll

Filesize
144KB

MD5
3bf4ee4f45ed00a8d2b3532ae468ec47

SHA1
64c10b738356033ce817f6afdf70480e68c688a3

SHA256
905a598bee339a81fb4a6e7f57c87eb67f3ad504f8440cc42702a4e2961c11da

SHA512
3d0cb0d21aeccebe94cb4c173aeeffb7d6eb2e096b939fbd98503b26f8735cc13d21eb6455f301a00b3c2e99f14c8fb014ef196d66f0f7eb1938bbb098991d31

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Diagnostics.TraceSource.dll

Filesize
60KB

MD5
a48690c382468e5b605183dd6cda9556

SHA1
dfee489455a0186af7ae80065ac8e62b5536a272

SHA256
17b1a759fa45d56b694c4f93f1061c789fe4c18a3edca083b9f388bca7496e3c

SHA512
5c2e0eb02652541090f3e9cec65c50439543903bf154aad6d8525c1d0cc536037011b20d96ae01517c08705fc26670f4df1131305f3dfec6fe1dd79de45a4c59

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Diagnostics.Tracing.dll

Filesize
20KB

MD5
a86445022bdeea8dab52ba5f39388cd6

SHA1
c3e3fb3a4f12c569ec61f55c7412960f3017204c

SHA256
8141bfa25c03eaccff2aada972003a946f45ab87649766e9b4cfcfecec8fd3d2

SHA512
62c9476a78bd63e7be3cd68b6c98bf30ae1b896d0ce606e5342c566f3634603869974eb54c2c695cb4bcb92bd642baf9dad78930ea6761cd0821949bbe05b7d2

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.IO.Packaging.dll

Filesize
140KB

MD5
f2f166737114244d25eee1060321e24e

SHA1
89270f3baf4828f52d0e5ea25d3625cbbb928aca

SHA256
abbd5dc12fea036267c01cc770c2d458e09e7e4d0e22afd0eb9d5846cfbf180b

SHA512
f459f02fc6ef083f6712a8b06a188a0dc36b0e0dea6329d989d74da742f92771c63a353c9f752c6cb3d3f3806b264710d6accc49364415caba735732bbec30fa

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Linq.dll

Filesize
164KB

MD5
ed42287a915d9417663d860651d97755

SHA1
83061fe730ed741cac528cacc22115550b440f9c

SHA256
a85588c877221fe7c493e2c92fbb7ba47c84979bce36d346b211901590a2c070

SHA512
fe9e78332dcf3ff310145f7ef8bc954f246ee3b6360826eeeff77637523ec657d565636020c2319f6609a6c3cfe2d26848b24ccf076f3c74140991f83860c4a9

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Memory.dll

Filesize
56KB

MD5
35a4c354542210c4cc73835c891b9c0f

SHA1
237d10412ebe214ad2aa31178102fe48d8319fde

SHA256
6a51c0d6378980f02362539614406f8b49beea7c7c1476a91d7394d84c8f06bb

SHA512
4602a6d889d558f1e75573fe49ee687865135ffe07963fa4a041887a77ea3292eb3131fe427966c91356f218bc5eaeb772c2b861bad51498307cb5d8503af0d4

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Net.Primitives.dll

Filesize
100KB

MD5
8dfa59a317d8531c798cc4a1ec406c3b

SHA1
f85e0925f78c812250015fe84799dc7703ae8606

SHA256
70d5a17294528adb8dfb42de68259a045fb9e4056f5e2cf22cb1e9ab3756a26e

SHA512
ccfb259d5361f972d375c232497663519002f1c91f68f80a35cb82e6032e7521d962d6e19a31e0146b4367ff76a65325220811008432c77eb386d801400c76f9

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Net.Requests.dll

Filesize
148KB

MD5
983ee3dfe5b0f172ba2af28591771e94

SHA1
81344d73dfd726cd550b1e3045c88b580730a69c

SHA256
c61676fb01ed0f7db648946512e9c37e04a5fdeb20a2dbe0c0a6dd8e233ba87d

SHA512
4be9c1233b4b2b7204154eec7583b6f720bfc48b61a125aedd01d270a39976950f7fd701e8686f668019a839c643ad8b6fe4cab6cebe03ee59e4419a1bdc9ae1

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Net.WebClient.dll

Filesize
72KB

MD5
f37c5df788894eb6dc3e365f8a806481

SHA1
fc7a83d2a2eb16c3b8443f5ed5cd4a545f5278ea

SHA256
63601670722dfab6ffd8baa06b299bd1eec1e08d2998e84ff0ffb22d5fa2b5d2

SHA512
76bc34f4c318d801afdfe3523e49aceca3f36aab6052c6c21d85c73760f15efb8049f6aa4a19d6e01f571ab91faaa013b07475f15c186ab3276229737a25da38

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Net.WebHeaderCollection.dll

Filesize
36KB

MD5
8bc65e29aa309b4eee81185223d76f2e

SHA1
72db1e01364cb9bed90dc1ca812c78f9aaa2c690

SHA256
449588cc8554834d92142d2d8c247bdf380f79af3152935865d40200cc63403f

SHA512
2fdb34abb3b3c4ce357135c9c530201464154540159040c5abf4861b0593913909a1d6616bc721fd768341eb7c76b959461450b77b36ecaa2f2ee6efff968218

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.ObjectModel.dll

Filesize
40KB

MD5
43bb2402ef23014a558175de0ac483bb

SHA1
85cf3452811256d6557f2ca5b0dfd94a9607cf8f

SHA256
770d72071d53ab80db3c2f7b85cf30cb761d2d437a51764a240a05b4d31a2b63

SHA512
28166c5047283a40f41b199c874b46ba8d91855a611cfd8646a625dad0330390557fbd08802e68b9289892047e9c65351aa07e4b489c7637e52cd738b9886676

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Private.CoreLib.dll

Filesize
4.5MB

MD5
4d006e32ff377a33e67a1d278a48f798

SHA1
88d9c23252db5538ef73bd4478d93366ea077f4d

SHA256
6eaf21a2f7783765b527e56ef74690e877763ff9452eb906c2ecf80d76ab9677

SHA512
f3d2f20788b9edc38a462e44daf55e2eb2a2141a7659e10dec1d86238d6c63c2cde6f7a874b600327d1fbb6ef506ef519d93c4bc1944b1620e0ffa4ff74f49e7

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Private.Uri.dll

Filesize
104KB

MD5
fe5e2d2fb9b0e1878fccbaea352ce8ce

SHA1
e28d46f4400010681852480ee3bca61a32c70f54

SHA256
0697c9001db509c3fde5836a4cfe877a07f56984980e6cae67d1ffce3008b813

SHA512
beda12a0393a209ace904dbe765426d4808cdb8140bbfb2610315cddcf33cbcc752ae801a6e69e470f500ac9fd0e352ceb27ffa3b175fe822f13fa2abf7c68eb

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Private.Xml.dll

Filesize
3.0MB

MD5
781dbc976ac2cca4e59fa724312db6f0

SHA1
8514184d06cf9f5dfdcbd41e5a0865614ca5c3d6

SHA256
c6a649df6e9188113aa88429b98a60ce21d0dfd0dbe44118b2f74b13fbaf14b5

SHA512
da47a15414a7ee02aee6f9f1013b33cab025a811b36af2ffedee4a744927d45440d68ad03a8718c8127d12a97e200cd2e10bc6d579de07d938408ecfccfd6df9

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Runtime.CompilerServices.VisualC.dll

Filesize
20KB

MD5
486c495b5a9e790e498c4e3bc32e997f

SHA1
27604037933a45ecd9720e4354b9b9ff57ed5d57

SHA256
f899fd53387d91e6af68dd6e104efc5440eaefd1b9bd9cbea19c028e2935470c

SHA512
59b3f139a0d4a6a2440d85417de67e2368c41afbbeaa201eebe18755cb68112ae5e6736e03b15964820f14a95d109943775321298f85f479f49fbd3c97856a6b

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Runtime.Extensions.dll

Filesize
20KB

MD5
8a342fca967dac98dcca2a5e865ece0d

SHA1
a009e9091ca9c7c701b7041454b6b2bf93e2d76e

SHA256
90dc96fab3bbfead222aec86e3e37baf5009b0acf93bc11f75cb027662490a3f

SHA512
247c97a7d172ded5feef715b1b2addc1c4cc0c27d9456ce8ce171087a59d5a73b1154b3d8c53fce3ed5002ecd94609d86e0a5072ef6db67a609ec0b9a9c6804f

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Runtime.InteropServices.dll

Filesize
60KB

MD5
1fabf8e57560d4b3d24e638dc2976368

SHA1
4bd9f50055571a0824885c464ec5500e07e0347f

SHA256
3981a82228771209aae18c2b7a47624cfa11d7db9b9984e212a62a2405eeff7f

SHA512
938914ca79f09fff59f9d843d12be479f3b4a551aa403691ff9f7f327071ac3e350065f3fa3f427423068e0767a0e9174c5b9901526700848322722df0d5de54

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Runtime.Loader.dll

Filesize
16KB

MD5
c4b2b72b6aeec1407781aef44c9d3112

SHA1
a1040f19a6754b911e11e2683f2745a999b0f10b

SHA256
cb81567298fc0014abad32da74aad39beb28fa4e21e9bde526306324247facc6

SHA512
1f428a8c5e6e3d1856ebcede85081cd8cddef3d9351eed9bdea0a0b532e697269f15d16d27d7ff18ffb218dcb30be37c87f97b1c4b8451177a90dafd35fa2dc2

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Runtime.dll

Filesize
44KB

MD5
1cd3176a0ff55a6b959872cfb7be3b61

SHA1
58b88ba50d471b602a0538f3c5e6e833806f94ad

SHA256
501f0aa5c989cb2b0e820b763fada11b57b09b6a940535a552edcb5bbfc1dd2e

SHA512
6e2084d04ffdbd32ecf805fed7929f1480d43b1efbef8b93441d13c5f774579b62094fe9a1d062a266143f34c4ed8aeff60334fc54e203476bdc93e00f32a36a

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Security.Claims.dll

Filesize
56KB

MD5
dbda31b4516c968e42da92613a10ecaa

SHA1
9e2f3de037b1bdd82b5b0e54b1a1307512f11338

SHA256
f69939a0718bc94ce70d1799c2c6aafec1ddfe632c93e27e575ea40a63a75ecc

SHA512
aa5cedfe9ee254dd1261dc0d9c2f21a98340f64a3c73771cc3ec685a3795f130093fee4945e51733e66b2c1b1b3ab3b67241cc7b6e839d1e72181772bbcf4ebc

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Security.Principal.Windows.dll

Filesize
84KB

MD5
9ad558004223e57e56a41d77b867f9a8

SHA1
bc5bf673f49ad502402b7e1a2179f60eac3e053f

SHA256
feb3ce0e88abc74483c7e8707e6eb1e460a06c1e64049ab186c9ed858c1e6bbb

SHA512
38413b20af25a2228e151c70d300b66674c5dbeecb04f0d6d517b0be6ca57cc9c33be8387589f52d83ce134c135c2eff9added708bc2107b44e6c1f93c7599c8

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Threading.Thread.dll

Filesize
16KB

MD5
70891147ff5d97147bbe1071a7966cf3

SHA1
5bebe5810ad982b63acdb046ca918f510e61b0f9

SHA256
d03191a1947213fbe4dc55492aedeea43d88aeb6653f0336b4a2a59dfb2d9b6a

SHA512
3df283316d5fd5eda6a88dcf97d29d3d29d90637f108ab9826ad8495e4cde14ab54b36ca346a83a812b84b022bb5eb71db5398abb4f4e22de354d6d117c10061

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Threading.dll

Filesize
44KB

MD5
36f633fbb623d6eedb01a0324cec90b9

SHA1
aff12f6ca47246a8af22cdef428a6bcb643d5e5f

SHA256
06765ac6d78f96baf2c220f7922997ab451a47426b9b3606533b5e27f17056b1

SHA512
862839a0df76b2381e9543351685bd05ac55f6e41e55a101cfedbf78ab9976d8796fe0baabf499d4f6f7fa31bcd18413d73e555638baa3f2f0b5c00dda962573

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Windows.Extensions.dll

Filesize
72KB

MD5
2d0cfaa1d600aba647e079e0f117b58b

SHA1
70ed90c6d761be8e0fa26319585fdaf3042e76da

SHA256
be6b41ac8d921bc1bd8164a1d25e508d5930bc45c8a3ec298806be8f2c6a8407

SHA512
b373bfc5f9970bc5d06a12f0048dd5ff1d8866f4f44f9dfdf987e28e981b27e4beda3e04e75dab3a566180aba50d80d1327f15fda021ab887a13707f7967ba74

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Xaml.dll

Filesize
564KB

MD5
7f752e897726bb95e9c75765c48df986

SHA1
683ac3ebf60e73b5b2d885adac3f31ca30c49f36

SHA256
3d44d0746b16712b3de41d285b53b02962fe36e77f81a251b9a473437560dd72

SHA512
12ea2aedac4a99df9310b393f666aab0ec95c5015510bea0d6130c39d7012f1d3e5b46c3edd83e99f63e2ebbbbd7f0cc4ae4d4b06a326ff12c1c89ba26837aa3

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\System.Xml.ReaderWriter.dll

Filesize
24KB

MD5
cf7458d464d5dd966b18b83e2c752a3b

SHA1
0a8f879c4a927a625dca923d4c8db286e485335c

SHA256
d6030b8b315283bae653b0ab20e51dea8fb9bc1f3616d39c34f2e330371831ac

SHA512
1ea09cd4eea051b188d80796bb8968e0dd432a7894dc472e51c429017976a884ef6edd9399a95f40ca0d0b37b26feb8053aed04f5d7b40272d9b20aee540b03e

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\UIAutomationProvider.dll

Filesize
44KB

MD5
aa8b8f8a7ccea6a87bdeb7769b43a61b

SHA1
cf9c2878ce3c6f5ea3f2ec3cbfe2705e0b36dd45

SHA256
aacf2b99d0d464548f2bb2277c4a0dbedf382fc174cbe15c14871f6f8c8135c3

SHA512
306dc8c3515b033dbcd4598c1669038c4eb8871b0f22546077adcc49298a5a2674a520f1239695615292d4b2bb8e3be3413044fcb2d5cd57e6f296e45d9780d9

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\UIAutomationTypes.dll

Filesize
224KB

MD5
7578b1406ca83451ea5128d6ac7f0eea

SHA1
b96cf06f2f4357b59743e535bcb33a9bf192ff03

SHA256
dc5fe5bb0b7383baf350a01bc0906f20847b371b8d883c6c13b18d70b49d1db5

SHA512
b5884267f88ae901a6f96f7b2b21b0dd09588bdce62eff5bbe8330a3fda62ce2a13e8819c691bec82ef9f3c6a8b856f465a829a57302b0f4fc3bcd21394de2ba

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\WindowsBase.dll

Filesize
1.0MB

MD5
c96389a27895280bd8d3ebb2761df14f

SHA1
b433cf021c68c6c01af2f6359a31ea38791dd12e

SHA256
fb2b1fc76ff3c7394083355d4200f2cbbf80cd461c040399ac230064c61a1611

SHA512
2d62e119734df863d038b13d5959d7e1a3d8d5e9e2abe9fab08a887667e4f2495fec6e64e83bbbb06e3aecbc2f6f0c2f429a75379b73cda232157245939e9437

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\vcruntime140_cor3.dll

Filesize
116KB

MD5
c9ac7198d1f928be77174571d0a32876

SHA1
fa1f44782a5c2f5ec2697f31e6d06dc6dc62b909

SHA256
9598f69055d2c0509eba534b0e6e9a4ee0af93082a370aa5de09105c49d20977

SHA512
6326f6d3bba9c7ff2209d563d75a29e8a30fdb3f1c1f67c9f9fb7b33d22d9748be2bac7331c36d470965c9897b17154561c8d63e1b0c37b26ae39d2e6823d74e

Download Submit
C:\Users\Admin\AppData\Local\Temp\.net\OFGB-Deps\p25sRTPbPw_Yzn7bCL9KbvTDWkYvBPA=\wpfgfx_cor3.dll

Filesize
1.9MB

MD5
17865fea38dc57e608161668c52178f6

SHA1
f5d0c8614eb95aa2fb7c2e821e35511eeebe4387

SHA256
19fc50f7cdf852d88b86e86bd4a385d7689bc90ecb96fb93a6e7ea1d3d3a4b9b

SHA512
e1e989a092cbda53fa68fc2e717f9513ac723309cb80d75b9aaa32a746dc0042b67317f1ff98750434756a439123975d0ef1b1404a35ee29f7282164f3fa6f22

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads