Analysis

  • geolocation tags

    nanew-jerseynorth-americaunited-statesususa
  • max time kernel
    900s
  • max time network
    463s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    09/08/2026, 14:46

General

  • Target
    hj3t1magxsu.exe
  • Size 19.8MB
  • Sample260809-r5dpmaah78
  • SHA256 9b97c3d884a7161e86e8a1007c574ace3b72073da3f5b5a4e07987982eb86fc8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Family: ZGRat

    ZGRat is remote access trojan written in C#.

  • Detect ZGRat V2 1 IoCs
  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 4 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Suspicious use of NtSetInformationThreadHideFromDebugger 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of SendNotifyMessage 4 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\hj3t1magxsu.exe
    "C:\Users\Admin\AppData\Local\Temp\hj3t1magxsu.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:1040
    • C:\Users\Admin\AppData\Local\Temp\ax3wgj0g0lj.exe
      "C:\Users\Admin\AppData\Local\Temp\ax3wgj0g0lj.exe" --delete-old "C:\Users\Admin\AppData\Local\Temp\hj3t1magxsu.exe"
      2⤵
      • Deletes itself
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious use of NtSetInformationThreadHideFromDebugger
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:1092
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:2576
    • C:\Windows\System32\SecurityHealthHost.exe
      \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
      1⤵
        PID:5932

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            MarketWithPerks.json

            • Path C:\Users\Admin\AppData\Local\FortniteBurger2\Profiles\MarketWithPerks.json
            • Size 1.1MB
            • SHA256 fac5e0636f75e38c9173c43ee3104d2e2ac79c9f4b45e46266ac7b962bf2066c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AutoUpdater.NET.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\AutoUpdater.NET.dll
            • Size 248KB
            • SHA256 91f8f0038d5f6597e32229353116dbcbbfa8b1991a22321af4ca56c86de69e09
            • MD5 SHA1 SHA512 SSDEEP TLSH

            BCMakeCert.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\BCMakeCert.dll
            • Size 600KB
            • SHA256 93ba40952f4be52de0c6afb0d66e8c306489edc682ad4515fb12cac8bee2630e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            BasicFormatsForCore.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\BasicFormatsForCore.dll
            • Size 145KB
            • SHA256 f60f48e8a320b6fa2760d2f8fc5dcd5dff2fb526f967545dd2d620d09b9c5675
            • MD5 SHA1 SHA512 SSDEEP TLSH

            BouncyCastle.Cryptography.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\BouncyCastle.Cryptography.dll
            • Size 6.7MB
            • SHA256 a96969c7964648c24aba2795587ee448d07b50ca5212e9d8eade021eb0f0cef6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            DotNetZip.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\DotNetZip.dll
            • Size 234KB
            • SHA256 309f84521fff1f48c3509f7110f1789347a272501992c79af3ef6e6d3b3de7d2
            • MD5 SHA1 SHA512 SSDEEP TLSH

            FiddlerCore.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\FiddlerCore.dll
            • Size 774KB
            • SHA256 e7e7572d2c3028ffaa0b58c765a526525b2bdb5cc9696045e34f36b01ba847fb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            FontAwesome.WPF.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\FontAwesome.WPF.dll
            • Size 204KB
            • SHA256 63d50dbe094bbce5d7bf8af08c0d919cfa5e057ca05ae7b27704a8477c8b348f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            FontAwesome5.Net.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\FontAwesome5.Net.dll
            • Size 1.1MB
            • SHA256 fd4d8ee0fe47c19a5388b80b758b427cf1a05ec3a7290fe8a0203b1d7033911a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            FontAwesome5.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\FontAwesome5.dll
            • Size 2.3MB
            • SHA256 288faeae1f76e37bc4ecf3cf0227754e9e10172c9cece36385049b58cc94fc12
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Hardcodet.NotifyIcon.Wpf.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\Hardcodet.NotifyIcon.Wpf.dll
            • Size 101KB
            • SHA256 2059222c4ae5d0291fce13bd296adcc448d79b6fae27746aedf347608ed3090c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Microsoft.Web.WebView2.Core.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\Microsoft.Web.WebView2.Core.dll
            • Size 461KB
            • SHA256 c6feb73ec1cb9271f2004d2586fe1833621a0fcd3d04a6fc1dcf08557d634ac0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Microsoft.Web.WebView2.WinForms.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\Microsoft.Web.WebView2.WinForms.dll
            • Size 37KB
            • SHA256 983a69e9ae41e7cc91962704a903a2c2dd49d464f243a7d101d0b715f723f1c6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Microsoft.Web.WebView2.Wpf.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\Microsoft.Web.WebView2.Wpf.dll
            • Size 43KB
            • SHA256 29f6e7dac224fc0ba91e45145e209fdb18c985781280d778aeedbd1ea885f137
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Microsoft.Xaml.Behaviors.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\Microsoft.Xaml.Behaviors.dll
            • Size 141KB
            • SHA256 8f782ad7adfdeeaa933183065aa7a0be9387abce6038e912455e78527b04adca
            • MD5 SHA1 SHA512 SSDEEP TLSH

            NetDiscordRpc.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\NetDiscordRpc.dll
            • Size 83KB
            • SHA256 7f4d4192386df8c03f279890a15a271b62b496cc66da7b832d4cff6cbf764a2b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Newtonsoft.Json.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\Newtonsoft.Json.dll
            • Size 695KB
            • SHA256 22c649f75fce5be7c7ccda8880473b634ef69ecf33f5d1ab8ad892caf47d5a07
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Notification.Wpf.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\Notification.Wpf.dll
            • Size 161KB
            • SHA256 190a25f196340ef2b38ea970e609f23e3b926f90197a4243b91d2021bc23b173
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SharpVectors.Converters.Wpf.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\SharpVectors.Converters.Wpf.dll
            • Size 145KB
            • SHA256 f10c1da6aa2b7e6d35627d8ff5a1da7d146d226e0691efd7c5655f3c596890ca
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SharpVectors.Core.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\SharpVectors.Core.dll
            • Size 183KB
            • SHA256 85462c6c76008e89c556afae41ba4860fbb4628c96f60c66e9eff07b0181abce
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SharpVectors.Css.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\SharpVectors.Css.dll
            • Size 91KB
            • SHA256 8bf943e62620bfb811ddd841567d854f6e2c7b6ef4ccbf54790033623d3fc47e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SharpVectors.Dom.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\SharpVectors.Dom.dll
            • Size 33KB
            • SHA256 e2b5b5d9c73a7aab145dbb26222b15aeac0c4bdda88f35dee22230fc3e0684e0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SharpVectors.Model.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\SharpVectors.Model.dll
            • Size 1.0MB
            • SHA256 62d56d695db4030cf75f0e981b12d76ba56cb5d5cf69adcb5ae26d5747123221
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SharpVectors.Rendering.Gdi.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\SharpVectors.Rendering.Gdi.dll
            • Size 110KB
            • SHA256 d491846dd891cf1edff0b63434ad44f14d7399be7c7b24651e3908cfe3a0add9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SharpVectors.Rendering.Wpf.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\SharpVectors.Rendering.Wpf.dll
            • Size 224KB
            • SHA256 ec4fc6f411352e86bbe5a929af1a4d2ed7b0dda8ba48d8df6c81dee0be8034c1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SharpVectors.Runtime.Wpf.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\SharpVectors.Runtime.Wpf.dll
            • Size 71KB
            • SHA256 f2264867d415ffd582049a212dd6e0bbc4eeddc23fcd665cf9f1ee63fdcc94a9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            System.CodeDom.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\System.CodeDom.dll
            • Size 181KB
            • SHA256 e58b1961cc1cafc9bbec52d071fc121809e3501318e0ff5650b5763f24589abe
            • MD5 SHA1 SHA512 SSDEEP TLSH

            System.ComponentModel.Composition.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\System.ComponentModel.Composition.dll
            • Size 262KB
            • SHA256 7e65f888588c79f69acb593d9b39990c33fd58377fc48300a0a93fc8dbaa159f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            System.Diagnostics.EventLog.Messages.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\System.Diagnostics.EventLog.Messages.dll
            • Size 782KB
            • SHA256 68f73ab17fb7f4aff3d35ef6db0e9d5b0fa0151111cb3d03992e23bc29d6c40a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            System.Diagnostics.EventLog.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\System.Diagnostics.EventLog.dll
            • Size 156KB
            • SHA256 2af781190ab7c97d6b846d5027745d609ad227665695e8ecb3afd4cc9fce6537
            • MD5 SHA1 SHA512 SSDEEP TLSH

            System.Management.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\System.Management.dll
            • Size 304KB
            • SHA256 fff7c1e9f12a99c2c52a6c0ae81075be78dbef7dbc4f1162164990b4ccf6eadd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            System.ServiceProcess.ServiceController.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\System.ServiceProcess.ServiceController.dll
            • Size 84KB
            • SHA256 7dfaced56145f3c6b80de25a09e0df6729149ef3c6a8f8f1b559e93b914fd2de
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Telerik.NetworkConnections.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\Telerik.NetworkConnections.dll
            • Size 67KB
            • SHA256 14a8afece485815896fc9f098d66b0457d1be374b10366b48c706dfdbb275094
            • MD5 SHA1 SHA512 SSDEEP TLSH

            WebView2Loader.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\WebView2Loader.dll
            • Size 156KB
            • SHA256 8d6fe8b14529e1d6a02a7f2d5991ee72ace0d7e2f1901c71cfd7df310600f4c1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            WpfPageTransitions.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\WpfPageTransitions.dll
            • Size 17KB
            • SHA256 342394576187bdc2804943e8bc9928f8f4d7e94f0dc4241057e7f401139fd0c1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            _sx6x0249_FB.deps.json

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\_sx6x0249_FB.deps.json
            • Size 27KB
            • SHA256 86a9648e2fa6acdf253cff684caa2669bc5d66e8b6149d325c265c80e80f35a0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            _sx6x0249_FB.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\_sx6x0249_FB.dll
            • Size 1.5MB
            • SHA256 4d4e2bfe368e97c8432247c35ee35d46f507af2aac82a04dffc7890696635b7b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            _sx6x0249_FB.runtimeconfig.json

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\_sx6x0249_FB.runtimeconfig.json
            • Size 372B
            • SHA256 1eca0f0c70070aa83bb609e4b749b26dcb4409784326032726394722224a098a
            • MD5 SHA1 SHA512 TLSH

            AutoUpdater.NET.resources.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\ar\AutoUpdater.NET.resources.dll
            • Size 10KB
            • SHA256 cf2b1c3cf607e7884fe8dbeb87b74ce6c42f4536fb92131704df5abfad96ecd5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AutoUpdater.NET.resources.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\cs\AutoUpdater.NET.resources.dll
            • Size 9KB
            • SHA256 18b1eb31160b5d3ef6e8424204dcfdd2df69a48ff191f08810fd01a95bf3f9a0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AutoUpdater.NET.resources.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\da\AutoUpdater.NET.resources.dll
            • Size 8KB
            • SHA256 3d1dac05f707e995b1fa1a1a1c89dff452036fbf20273e6334afbb4b00033aa6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AutoUpdater.NET.resources.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\de\AutoUpdater.NET.resources.dll
            • Size 8KB
            • SHA256 408bbd72954cdd8e830ebd0787f9214405b5acc15d06c3336d7015cdaebb71ef
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AutoUpdater.NET.resources.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\es\AutoUpdater.NET.resources.dll
            • Size 8KB
            • SHA256 d689092b0e4d74e1a55d0c6fe43abf65580a3fbf52b3b8368285d8639b1d2cb7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AutoUpdater.NET.resources.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\fr\AutoUpdater.NET.resources.dll
            • Size 8KB
            • SHA256 2fb47dfb09f9f24585b8bfa71c773d855b93744dbbd8c376ed8c3edfd3f36064
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AutoUpdater.NET.resources.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\it\AutoUpdater.NET.resources.dll
            • Size 9KB
            • SHA256 eea2adbc5356ce05b2d9fc418e99ef0711e9c7fcdeff3d0c6d85c3758a49a75f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AutoUpdater.NET.resources.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\ja-JP\AutoUpdater.NET.resources.dll
            • Size 8KB
            • SHA256 3370fbd2efb274b714a02ce32b3b642c65fa19a896f3ed7ac0a9502fe7d6beeb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AutoUpdater.NET.resources.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\ko\AutoUpdater.NET.resources.dll
            • Size 8KB
            • SHA256 c5b8a8e7da93b9b50d3a1ef3330035b41c514ef6f361188be97ac273716919ac
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AutoUpdater.NET.resources.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\lv\AutoUpdater.NET.resources.dll
            • Size 8KB
            • SHA256 b00f6217cb875a0daedfea0e00d3311d2608d03c0bee74d524d177de06f4da74
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AutoUpdater.NET.resources.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\nl\AutoUpdater.NET.resources.dll
            • Size 8KB
            • SHA256 6e9df964edd743039174e6dffc068219e59f40cafd33902581e74a08dc72edf2
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AutoUpdater.NET.resources.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\pl\AutoUpdater.NET.resources.dll
            • Size 8KB
            • SHA256 a041069ac5e288d2704ab670efa6753dd268bf86b3223003e4e094754a337936
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AutoUpdater.NET.resources.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\pt-BR\AutoUpdater.NET.resources.dll
            • Size 8KB
            • SHA256 ae81bc07e5daf06825a77b68d5ec12cc5998348c2a73bdbf6d5e6fcef9d64f70
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AutoUpdater.NET.resources.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\pt\AutoUpdater.NET.resources.dll
            • Size 8KB
            • SHA256 1212b1aa059492afa336dcc83a96a409f9d00198f7fc20e340f60619cf3f63b0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AutoUpdater.NET.resources.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\ru\AutoUpdater.NET.resources.dll
            • Size 9KB
            • SHA256 97314053709366284705558e17873ee11b29eac1344306c851c29e4e559fea55
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AutoUpdater.NET.resources.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\sk\AutoUpdater.NET.resources.dll
            • Size 9KB
            • SHA256 1408db02419f71222248b0019446b2d501c7e68584fc155445ed7af56074c9d9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AutoUpdater.NET.resources.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\sv\AutoUpdater.NET.resources.dll
            • Size 8KB
            • SHA256 c428be2722773a6234ade47ac9c7977dfea0bb671fdd893efe74b22665097fb6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AutoUpdater.NET.resources.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\th\AutoUpdater.NET.resources.dll
            • Size 9KB
            • SHA256 048a52e5ea8c4a6d8d8cf7ec46c1f41ae67aced49c10d11d5d13ecacef886077
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AutoUpdater.NET.resources.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\tr\AutoUpdater.NET.resources.dll
            • Size 8KB
            • SHA256 749ebe2660ef8ce869ee88627cb1a7c4ef6f7049b65eb04ef25b610f7f50f9d5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AutoUpdater.NET.resources.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\zh-TW\AutoUpdater.NET.resources.dll
            • Size 8KB
            • SHA256 93d21963b12a0553d4d5b1df679f3b8ff61e5fc699acab45266f0cd3e9764533
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AutoUpdater.NET.resources.dll

            • Path C:\Users\Admin\AppData\Local\Temp\.net\hj3t1magxsu\RjaJiPouZfTDQbyil89PXqfMyjB9CCc=\zh\AutoUpdater.NET.resources.dll
            • Size 8KB
            • SHA256 4ea925fb369c847a76f2adc2e8b48b17189dc29eb13337865ed63e5fa88f3a31
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ax3wgj0g0lj.exe

            • Path C:\Users\Admin\AppData\Local\Temp\ax3wgj0g0lj.exe
            • Size 19.8MB
            • SHA256 85e14de3b7f33467cf092c7cbbf199c9373fbadfc44b1755f2ff5b3e562c4836
            • MD5 SHA1 SHA512 SSDEEP TLSH