Overview

overview

7

Static

static

3

CreamInstaller.zip

windows11-21h2-x64

1

CreamInstaller.exe

windows11-21h2-x64

7

Resubmissions

06/07/2026, 07:41

260706-jjl5wafs8r7

06/07/2026, 06:31

260706-g9818aaz2w7

Analysis

  • user interaction
    yes
  • max time kernel
    60s
  • max time network
    52s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    06/07/2026, 06:31

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    CreamInstaller.exe
  • Size 104.3MB
  • Sample260706-g9818aaz2w
  • SHA256 c301d783f00b980aaa9a2d8969f68a05fcb8573dcfbeb87602424da4bcad3c23
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 41 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\CreamInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\CreamInstaller.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    PID:5152

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Microsoft.Win32.Registry.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\Microsoft.Win32.Registry.dll
        • Size 118KB
        • SHA256 ed53f56693d814c4fd5efcb544051625811757ffad5482865ca7497d3cf83226
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Win32.SystemEvents.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\Microsoft.Win32.SystemEvents.dll
        • Size 102KB
        • SHA256 ad1c9b017b37243f6251c2e2d2a209ea54b88619a1a472efd789649748568c2a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.Concurrent.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Collections.Concurrent.dll
        • Size 286KB
        • SHA256 9b69dc89b84389fe914923c375b7b5d0ecee4c1a53b9b54bf230466a49d92299
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.NonGeneric.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Collections.NonGeneric.dll
        • Size 106KB
        • SHA256 3385fe592454bfae517e67626f0d744a769bdf03032b02c8bab6f53e29077f48
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.Specialized.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Collections.Specialized.dll
        • Size 102KB
        • SHA256 eb15eb5846c264bf00f0619efb6faa3d5d8cc7f0cafceb8a7d0dd290ad92acfc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Collections.dll
        • Size 326KB
        • SHA256 30514afdec5244526d23d5a7452437cce7721da885ad17886cf3d5cd32cbf8e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ComponentModel.EventBasedAsync.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.ComponentModel.EventBasedAsync.dll
        • Size 46KB
        • SHA256 91efe799d11d5a9536f9cfed1e2fb77f64ff73af54f8f5c9da358f7ad07d7524
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ComponentModel.Primitives.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.ComponentModel.Primitives.dll
        • Size 78KB
        • SHA256 2d70e75cf52fb14c09e046cc01757aeaca03272bf35f20fa4b0d26790f70e346
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ComponentModel.TypeConverter.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.ComponentModel.TypeConverter.dll
        • Size 754KB
        • SHA256 0809afb495abb3e93c9a5bcf1eade0831b93f54e43c55c81812d937dda621717
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ComponentModel.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.ComponentModel.dll
        • Size 30KB
        • SHA256 a9dd9c326c74074da8a4d66ee4ba671576e3bb0533dd6fe19b2a9c0f078926e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Data.Common.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Data.Common.dll
        • Size 2.7MB
        • SHA256 aa6635a9d9af526e8abcebeba0a84f5f12cac9d87e13685e2ba6f768d4b083ba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Diagnostics.DiagnosticSource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Diagnostics.DiagnosticSource.dll
        • Size 442KB
        • SHA256 ce212648130d37fd0a5a8128e5bf41f7e6aa79fa238f8cda873c849c515a458a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Diagnostics.Process.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Diagnostics.Process.dll
        • Size 330KB
        • SHA256 650578e2613740871f94c66b1f895641d57c597e4e39a533479b2beac2a097b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Diagnostics.TraceSource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Diagnostics.TraceSource.dll
        • Size 142KB
        • SHA256 da5169249faddf7a48c76f9c5c55a6df01de5328c0001834065bcc6efb231cc7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Drawing.Common.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Drawing.Common.dll
        • Size 1.1MB
        • SHA256 98a1750dbbbe89e93dc836f4fef830d70593aa9133a68e9a9e3b1c866047e18b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Drawing.Primitives.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Drawing.Primitives.dll
        • Size 134KB
        • SHA256 4e76cd530e920b3f3540e2bb5e6127d7d65b0ee6c4c3fd9b0e14c5b3709a32b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Linq.Expressions.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Linq.Expressions.dll
        • Size 3.5MB
        • SHA256 43b8af645575b4f3591d0f0fa8fa4a30b83035e5632b647082758145d1bd66c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Linq.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Linq.dll
        • Size 642KB
        • SHA256 3132d62124491063ce70f4f695ec202a7e51c97acb9cb4d52db16b0eb9b47911
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Memory.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Memory.dll
        • Size 158KB
        • SHA256 52b14ac8025ca843dfa5d452c35295553440b30b80d5f2d8284dbcb47125c2fb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.Http.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Net.Http.dll
        • Size 1.7MB
        • SHA256 3152307f21fb2d4079dd2d6c13051f8e386d5915cb35a87befcf5c74063a15f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.NameResolution.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Net.NameResolution.dll
        • Size 122KB
        • SHA256 683d753b4a832264991d929c9cfffddf414426f2e824f214aa01eced8decd07d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.Primitives.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Net.Primitives.dll
        • Size 222KB
        • SHA256 a8e91aacefcd0b1638cde5d1306d47ff129001e2ecc1238bc48e325f83268a10
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.Security.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Net.Security.dll
        • Size 662KB
        • SHA256 3bb4040b6550b3c689720fa1fb281d93badb7289a74a97be306d5a289dc91ded
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.Sockets.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Net.Sockets.dll
        • Size 534KB
        • SHA256 d6b9ed8b35221e7ee1987a13f2e40b3841a88150d04f557dc826deccdf136083
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ObjectModel.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.ObjectModel.dll
        • Size 82KB
        • SHA256 c009af41bc0749ecc6dd234222dcd6ceee953b3dd96fb816b526aa585621b57b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.CoreLib.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Private.CoreLib.dll
        • Size 14.6MB
        • SHA256 131b4aca32844ecb2aea136874f364668d9fb094f26070a39df39ba53b3d54c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.Uri.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Private.Uri.dll
        • Size 254KB
        • SHA256 05cc8af995af0fd6f17f78c6a3ab3734250316f8b094ce39b1091e1f59d6fdcb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.Windows.Core.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Private.Windows.Core.dll
        • Size 1.2MB
        • SHA256 ab529084168da89e4135730311564dbd5412b08ba4bae6b6c070cc993267ebd5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.Xml.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Private.Xml.dll
        • Size 7.6MB
        • SHA256 febc0c7fcde25a7ccbbf006d52dcaddfb1d5f90da6a0c1fbb3881eb5ffaf8748
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Resources.Extensions.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Resources.Extensions.dll
        • Size 194KB
        • SHA256 c2b441b040bb0e565e089c5d2ab22e225e58cbcfc68af2e68694397cdb9573ba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Runtime.InteropServices.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Runtime.InteropServices.dll
        • Size 110KB
        • SHA256 5dc4c341ce36f96d61f7cb99ca7e04ee2e090e8bd5a3b31d24b6c6e64bfad5c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Runtime.Numerics.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Runtime.Numerics.dll
        • Size 346KB
        • SHA256 0a7c72f1eeab8d815d67fc8a94ffa48016f272f291e5dfd5c96e48134a27feb0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Runtime.Serialization.Formatters.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Runtime.Serialization.Formatters.dll
        • Size 122KB
        • SHA256 7f4a0e3c9ceff0b5d1a454386236f1ec228f04196655a4de2a4774533c13a981
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Runtime.Serialization.Primitives.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Runtime.Serialization.Primitives.dll
        • Size 38KB
        • SHA256 07d3ce39ee354c5b3ae20105e6981b4202db53e97ea74c85349e0ab827220f0e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Security.Claims.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Security.Claims.dll
        • Size 98KB
        • SHA256 74718eaf9ae300101e270be38175c4705ef9061d79926ff5a487616e95e3522f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Security.Cryptography.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Security.Cryptography.dll
        • Size 2.0MB
        • SHA256 0b7aba3b1dca325a83004da6f2c6f942fe2cab0555245ef704b37e63701b90ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Security.Principal.Windows.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Security.Principal.Windows.dll
        • Size 182KB
        • SHA256 ff5e0bc794c922dddfd2dfbe75de8518bc554b21f5de91f0c43eed51c65464ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Text.Json.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Text.Json.dll
        • Size 1.7MB
        • SHA256 1c171581a0dfe76d04c3a7208993dfce2f70415c43c395be8259bfc8b85d09b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Threading.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Threading.dll
        • Size 82KB
        • SHA256 b8a584375092072b2fb072e54053fc18d641df63955118e308779b46f447dc8f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Windows.Forms.Primitives.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Windows.Forms.Primitives.dll
        • Size 3.8MB
        • SHA256 cf6c1fc75501a17099decc4a532988190a7c89458f67ef905cc27c325a9c6bf6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Windows.Forms.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\CreamInstaller\HTQCmUnZAfvv\System.Windows.Forms.dll
        • Size 13.1MB
        • SHA256 39a2770e00e0f7262b3cf00e74333b476a22246d9da9978a65a41d717e5d109b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download