Overview

overview

10

Static

static

10

jaffacakes...us.exe

windows10-2004-x64

10

jaffacakes...us.exe

windows11-ltsc_2024-x64

10

Analysis

  • max time kernel
    147s
  • max time network
    153s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    10/09/2026, 02:52

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    jaffacakes118_AVG 9.0 Pro Anti-Virus.exe
  • Size 298KB
  • Sample260910-dcx1xadn8y
  • SHA256 e03aedb0b7e758cc4de2f7dbb24de41e6928631b1c426310d4b6f5f6e1a53616
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
remotediscoverycybergatepersistencestealertrojanupx

Malware Config

Extracted

Family

  • cybergate

Version

  • v1.04.8

Botnet

  • remote

C2

  • lowin.zapto.org:83

Mutex

  • CK004UNMXSU467

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    Rundll32

  • install_file

    Rundll32.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Remote Administration anywhere in the world.

  • message_box_title

    CyberGate

  • password

    stundenplan

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

  • Family: CyberGate, Rebhip

    CyberGate is a lightweight remote administration tool with a wide array of functionalities.

    trojanstealercybergate
  • Adds policy Run key to start application 2 TTPs 4 IoCs
    persistence
  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 4 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Executes dropped EXE 1 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in System32 directory 3 IoCs
  • UPX packed file 18 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Program crash 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs

Processes

  • C:\Windows\explorer.exe
    explorer.exe /LOADSAVEDWINDOWS
    1⤵
      PID:1832
      • C:\Users\Admin\AppData\Local\Temp\jaffacakes118_AVG 9.0 Pro Anti-Virus.exe
        "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_AVG 9.0 Pro Anti-Virus.exe"
        2⤵
        • Adds policy Run key to start application
        • Boot or Logon Autostart Execution: Active Setup
        • Adds Run key to start application
        • Drops file in System32 directory
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:6104
        • C:\Windows\SysWOW64\explorer.exe
          explorer.exe
          3⤵
          • Boot or Logon Autostart Execution: Active Setup
          • System Location Discovery: System Language Discovery
          PID:5760
        • C:\Windows\SysWOW64\explorer.exe
          explorer.exe
          3⤵
          • Drops file in System32 directory
          • System Location Discovery: System Language Discovery
          • Suspicious behavior: GetForegroundWindowSpam
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of WriteProcessMemory
          PID:2456
          • C:\Windows\SysWOW64\Rundll32\Rundll32.exe
            "C:\Windows\system32\Rundll32\Rundll32.exe"
            4⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:2832
            • C:\Windows\SysWOW64\WerFault.exe
              C:\Windows\SysWOW64\WerFault.exe -u -p 2832 -s 652
              5⤵
              • Program crash
              PID:3588
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2832 -ip 2832
      1⤵
        PID:3340

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            UuU.uUu
            • Path C:\Users\Admin\AppData\Local\Temp\UuU.uUu
            • Size 8B
            • SHA256 148e0f28dbe7a7d3d4d5db8bbd9ffee6baf36de9ea715f8ddd53a3d5e7baa79c
            • MD5 SHA1 SHA512
            Submit Download

            XX--XX--XX.txt
            • Path C:\Users\Admin\AppData\Local\Temp\XX--XX--XX.txt
            • Size 222KB
            • SHA256 7f439120b2edf6997ff77edb4adad1de31422652fd3158f99af8617214889073
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 5468159648ef299fe43cd0a0b05474e5831e4f6d86b2a3ec70e982d02ce18625
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 2c2060761a7dd1ec917b7f4e51644534cc9ce7f57c23e7566f1d9844e791d0df
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 fba351dcbcca04849e6703f38966f7ec7f4a2d40d943144365a41c4c3ce607a4
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 999d110ecd8335081eade08c339d93ac4b1f20924effd5ef58686120c3e48d15
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 a0139d729532e34f77b3f43bbc76fc7233e6f12fe44550b318044191468defa8
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 89db2dd41c6b5cba36cff733febff6db35e58db44a94ee213b11c16e3db0b59f
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 fcf6bc2bfd306e0c81035d9f2186f005fc32cc867d107819fe150718772b1824
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 e6ee7745c8d96f1d4ff4f13d0233ba3792affebad5d1d05619324e85adf5bce3
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 f5b8e45666a4fd6e57460ac45d58a44076a1d554225ef6d610cf9225c6b2b0d7
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 55aadf7324debf36084170007d16839d1d3eb972e0a62d11622e14aac32d3cd9
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 688625cbfecb7671b89c81063cd51168c8a87406cbf4a55960a55489c3934f0f
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 b621946d5e61b7a81675444a22e171cd66546c8125cf9a176b948ef24221a5b8
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 67a47d42ccf29a458772f6a9e8096b658cf24a0a698e7f77103afe67918b3385
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 38e51c922af3eb4f52856352c9466eae56319d1db9203517b369675d8300dd22
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 7dcad11976cd4bbd782ce25d3438737f730e6b0d54b632addbf729530a3b0d27
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 f57810c81415d90cb921b1473424b66d432a51a9bfad9bb78e41ec80deb7dbf6
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 46ecbc40f15628c8e6a2822664c0336d5891ce0ed403e722c82a64ef3bd27d96
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 bba8bf2d897789140c016c20c8d6866830152b7e1e63616b334d8ce02ea91d85
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 3dd6065913b7f8daab883ca32fa3c2189141b23a7ee0d493a769cbb03bcfa983
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 82c32709bbd5f98f4f4b4d804ae8548563f88fdd6dbe394a3e95646150ede576
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 c5a8cbfd4356ec5023f0636e7bbc0d0508bbbeadea963be55e5161aa69bb4f5d
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 b99c5b4bfb2972c8f7f290a6f4d58f349d8dcc88d8331df494852edd3c3c3d28
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 2ec58d682e9b8e664aa27b25f1667797c8574373216267f4163c0fb4721275ad
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 b46bdac75a9c08dc699436da852fbe2ca1f424ffa755668cb13e708a53d94ad1
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 c25ce16264a339275d0bbec433a17a3f9fd9a428d0f5b4e1dd3c4631064f757c
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 1f199d2cad393c5a25b15cee7b6a75feca08b4c943a305bb3e14894f8c380625
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 67443a6662747d194df125c5994e4f973442151f9de9e34abce0c96014cba282
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 87085cc46d93afdfd8e4741e4328f34c66c439103994ee04e92e8de111234f73
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 fbbac7fb611e554d78819c52ebf4a83f763e2f557b26bd2120aa4b014dc755f3
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 ae9fc7f4dc9fdbf9a0afc582cf03a5d9a500cffc6e60b6a20f8046ee0d9a2782
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 32bfe7f6d5d82e0be937222fe8a266c035fe24596d228c1500bd3756ffb803f3
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 63872cd229bbdbe7d720c7ebeaec03f1af2fb05b661bc3eaea42c3299f9f1e09
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 70816326be555e7d16f0611a169fe9b2154bb30383b4bfe7dadba86e8fc6b780
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 4d9cd4ab841007e40e2d9de61d3a0f3b0940ef3449aebbd50f01815d39cb0514
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 14542069fb1b6899cbfba00bf63cacf7b060c36177b02da9d2447be9246278b3
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 2948dc55ca94703e1463f7413cdab5aa5059b68465c1419e730e72ef923b6b6a
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 14734c4002564906aabfd622c0989dc18a090799a41bb981893ad4cc1d4e5c0a
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 67232d2cf7f5a9cb4eff48cd2a21d6758a76f85c79a427d522dd037b8c17f21f
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 4ca94eb09ddfadc97cbfbe12fddf05dd9776fbb881489b64377b35de97c5c1a6
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 8bb8fbba6a62f91314d6daf0f50ab913725976db7c38b5cf0655b633cb07dae8
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 7018557398d042d79db5565bcd268031d17c9e37749b2773a19445bcf31dcbce
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 b0415e230141e4038e29d829d1ca3ea76421e770e6b55e72932c2ec4c60014c1
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 fcdeae86d6602b1567d3e7dbcce287124640e006ac62e8f6e8f78631fb2686aa
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 6c033bf63a8bc94570482a2a7d48b7cb86cb47cf5b156b3b90b2fcfad0d8190e
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 64dd127550314077d78a5e44984a90dea9bf4a100c00cd53badecda68e42ea45
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 2c14973751d53eb59617c3edd5468d1771f14fc91da6d75596b38e1111c0b935
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 bf5724c599212ab0f26b4cff52a4069bea73f840d05b775d138ee254db661be4
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 aad859fed80163ea9b8ef2b66db3b2187961af707dd3627800a801836cd2f32c
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 473e95e3963af15e4494ec44e0a2262f907385f6c7d7cfa22fe24e0df49a0b96
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 3586b07bbabdf4bd28bef489b722eb86a52d583ef8d6d18b313b792a7e05c007
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 ff93ff635276c4eba51041cb4214d4f4b26960c51e4b6296ed61170c496793d1
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 838e9fbdeb7f27d5b27441b24bb5b6d25665b55d6d3cf00e824392a99dee226d
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 b50ff6d68cedcf45563cf39011fe960af8fae48d9112b2a9df3098013b4cb3bd
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 f369de48cdb0ece1c50eadb0c619e57b2cf585b6d547b6ffcd8d0aada71d2da4
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 9fe4f04d567d0fcbccca04e25337059f85b270ccb491d78a633a727da4b0c7d9
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 c6b22414da89c737741702607b3fdd9aa51676077e14d743842bad1caf0bde6d
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 8514ad85dab22ba85b41447d7530004ab76ce5b482ef55879b3242028f8b3e58
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 7277edfb3f7eda6613237786bf1b39cde0e695510ec1d7b976c26d0aad259bc1
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 c2100de37c913834728ed062a3fa2962456881b4c75585f023c1fca0655274ad
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 3d01fedf1cc726088908d224bfd8ee219028afc46ccdf844a06c71dd8702a61d
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 3ecf809d9328b7f9ac2358ddfe2f272abe7f5b6fba189eb88ccd03426234f157
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 042373e92a345e316541875d29b139ab9b35ec35d3cd0154163aadd9523bb4dc
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 d2a3ed8a567f4a4f57807d92ba88464abddb875176a4c90633e998a499c0fd68
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 d34e23ef29464b6adf22b940a68645edacd9b532b8a417d90428aea960c6d3ed
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 fe9463c1894a3f46af95673834bfcb92c7969129b31fe21c9829f71695703ff9
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 645ee83a1a32652434b167138506aace7af9bc66dfac4201b728dbb3fc276530
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 ad5d5c2daf20dc9298d7eb143fbbf583472d5fd99347131dd8afe131155eb527
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 5ddccadd9f2458ea199845f24a714a471ec153d939a985ce7e3c43dc14dbab4b
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 be44d4108a66b5208d969ea90c5d0b7c23a130db83b9d15467412ae7273218da
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 45b372b13a79ea8222c5ab7894149b6bdfd88fe655528959eda67232aea6bd1b
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 9afa28b91ba8db4e38d505e0c882a64ce04a26a4ae02e37e6b0ae9ead70f34c7
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 71f155e3d99466a0b925cbc7215ba0901eaa58e8d1b16c72eba4bd982b932079
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 7e2876410f46392756c546719200f526a4f095c71e321982f8974568fdca8c43
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 183d31240adf32ef1507b96a7de67fd85718f380959dde5e116f7cf73358dd8d
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 5eb329e49eeb0a880ad6c63c9e1ef367a2c453aa0108f1d2489dca3dfd77c95a
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 ad6137f5e6b7bd4f801e24a174073e115257e544f4332ff97786f9e0ed8263e3
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 af2c0a263bbbaa53a5bea9b232c28be3246b1fc2a014fa087a8f6578f079fdaf
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 ecedeede902dc779bfd2731d5c1d3ee03d511676891207350a9d2fcc85cb47c7
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 3bac018c99d5700d0012299246b6a076dd6a5cfcbe359b67e18df99e22c61628
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 cd71abe5657074439e190997ccddda758b7cf7ed476ee518d60f5221acfeb823
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 30957e4dacdd5211948feab97a13340a96b302a0426c06c21746c33f68c9b0ec
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 1ce665b3678941625b2037a81142b077611d0954b1b6a52509e744c9f76f2ec3
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 e73fd9c237693b78ff618c062798b58868d535aee5af2cbd2607ff8a386be498
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 eb3ab88d4deec348f6d5713dacea2c8f9cfbb05c7e075f7156333d6ab56f0c9a
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 294b505249cb883ce9cfb86e5d4d34f459da06dab907091c4c4d5896a4f64d88
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 674c22ac88209acdb0064044e369ec7e005a5482b1ab424af9b1cb5328fda918
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 d2e0a1e97526ede2f3ed500a9c3b1a271c829656bdaa2d4001d5ae0a0db39166
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 38076274058e02d76552e14209b3d531f1f8e4c2ed6bfbf4b112061889bf5b81
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 4b7596034ab2c69a41d011ccbf69da8d1133793dc8fb8cf577b95411dd436e52
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 f0c21f83aa7dcc41a7f870264284a37796ce709ac57655f5ecb4a8cf55c10459
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 6e888a1dd0a51e843c1240c61b41060dd4cadd14a54ed2c88d7632e97ac15495
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 00321938b78dbb12fc4597e9c2d651bc78018eb34236dc0a35c42e7c24266860
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 393059173927bdfaaa9c7fb693a694c7cf40711e703ca3353f83dd10f26ac7ad
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 784f08b406f11e9def2ad464771f80d30123606a81f8923a7b59af42aa858eb3
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 a5d0b8f1a3fa3e8c9e157f027c02c788138d81d0e2ec622da7247f398a154def
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 c7d3140682cc30896259098c25afee8cbbf152e18cdab2a2555d43ffee279e49
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 ff52073295b85e324a8f90f17f2e0fc206a98a52b68a8ebcf82954ed29ecf3fe
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 6b1a253fa66e8e9a62a7b4c73e50593c3152a7fc1aefe471d5f585ba3022d6e7
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 d9ecccc7e3c80509d40e8f72604f38dd83f6749eea29c41a923d5c5c2bc0704b
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 b050d39c03b9954653d4ab216287601dab0536362e6704f56e621ae371f5e0ba
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 e566bf10de8c4c7cd8f49c8fe572b11d9e51373b3ec1a7f3d54c0b7c63651e1b
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 4f3665c9740169765971cc18e5f0e5c8316bd2008aff2ca7317944e668909416
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 dda86c71e3ade95179311eecbfadd361ac7285a3142179a8ed5b008d17234e6d
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 6dda9e2426264d79c1f0b5711407b34884b3a1ba39db6356099d7c8ce5d2c587
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 7b56f67037e161fe80f70178c1528c7580198f96ee7f3e635d676cf289d4cc9c
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 e9f96f2a151614699a85e4b3bf50a9ccd4ba33614218f2b87f98c1608d1d50de
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 1383bf17f9a32848d36bf1c29772217c39424a94109e2afcc53a8fc0c486fe44
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 c18b6076cc08302afb9e2969ca8140275b2b064197b5f515193f61ecb0a76906
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 7710e1f693fcb79ed1758ab89ec102c3a6d0c30ed1428414a50c373c8f4dad96
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 021c160a018c5c80bed564807e8e2cc3f7f6f5002e54aaf0014931adfb2be1f6
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 f9d5939781373258f69da7e9f254d34c2c4ce80bf25d19e565ea00fae112e054
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 ef97263e34b698519f98a1ca278f8c3f5ac1f92fa4f799f6ecae3ea0dffd8614
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 98fbe8e6b33b8bbea8b0d6509ae8a108b3c2eda006512d037be4e037226c3cc8
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 aa30048b24615512a12bd902ae7a516d4af579944ed132651dc9bbf7aa6aaf0b
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 c3b363eb50eb8ea1a04bc6a6ca5e29a0c209c71c5928c548e7a23e24d3e53d67
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 5e68a82676243e8c399a9ab7671cd1f50905f053060ca017dbc65fbb5e718e02
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 40c62a079b2f33ef70a03e704d47609fb2f7af2e220e8a5412fecba1fc3dea5c
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 f2ad07698b2d3c68a49e526485f8d63be75b625576a3ba6358b4ff8a5db5e237
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 03a95606f9308965a647f033404761e46b54e77f96b72f26576879a981b9f380
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 a537b7d52b7b84713298f7439594d006a8299501edc3d4833979407f6f8ab473
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 038fc4bd4f2f7b58d7444a81736b40377406140c9b3a9d6fc65d81830cb9902e
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 1f73644cedf7ceaf03c3ba2b827a28ada5597080527a9b3ac1cfbe6a8a3f9afb
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 b35e1657df85712493739fa9feedfdb42e0f63d5f850c23bec7b84ae8fea544b
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 3443a3f9c61c7c05b4358e4f40f1bbde5c2927ca16bb8b80483c0177573a0ce0
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 e5f0f8945003c77e51290e70fb8ed2f8c68e60454c9b4858a9c967f26ba5e778
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 cf9e01d9d4f3aff9007965316c4f747f8b7e8f1c140df7706488a3bad782c379
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 7197413b49e7a673df7df6c336687898e5136df7bac6eb6c889793d74e3ed542
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 57fa086c65dba94518e05cba6b6b8c4ad563d2157273f5f24ffde26f4607f82a
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 14d7ab31556c2274f8445a7e55751bcc69b22dec62415663ef3d82f66a5d4f09
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 12a87ee547d157d1f067b95debf4c02878039906ccbc755155c1457f8a30adfc
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 5974dcf6b7b637236af7e40dc8a769b1771ead7549c3edafe252f72a74880461
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 378f042e25447d29aa3b4110504acc8a3304df9b43cc74ca9ee01a8dfde94e5e
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 86cdbfa0ef495b2d3c40f2ce2ed3926c94088b206155e0cd4366f71f922c5719
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 ff779a6d3e76835c90bbaa6f02dd93a92ba3235625e2b982e6c020799ef5e1f0
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 ffdc5deca65543a8522342de0ece4d82e2d8e2cb2241f7c882665d4d37dec170
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 402e6d4dfd28b910cf4e0508996a9617a90aabcd4585b82c6ce2b05365e0ffda
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 9bc03da628ef0b7134b999d87de734002577225f4a6c0d252a2fa20730225061
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 fbd6eb4456943c9e19d04112d983969e14b68d0798ae666692b7efa0a2fc81d0
            • MD5 SHA1 SHA512
            Submit Download

            cglogs.dat
            • Path C:\Users\Admin\AppData\Roaming\cglogs.dat
            • Size 15B
            • SHA256 4a8e75390856bf822f492f7f605ca0c21f1905172f6d3ef610162533c140507d
            • MD5 SHA1 SHA512
            Submit Download

            Rundll32.exe
            • Path C:\Windows\SysWOW64\Rundll32\Rundll32.exe
            • Size 298KB
            • SHA256 e03aedb0b7e758cc4de2f7dbb24de41e6928631b1c426310d4b6f5f6e1a53616
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            memory/2456-157-0x00000000104F0000-0x0000000010551000-memory.dmp
            Download

            memory/2456-148-0x00000000104F0000-0x0000000010551000-memory.dmp
            Download

            memory/2456-131-0x00000000104F0000-0x0000000010551000-memory.dmp
            Download

            memory/2456-132-0x00000000104F0000-0x0000000010551000-memory.dmp
            Download

            memory/2456-135-0x00000000104F0000-0x0000000010551000-memory.dmp
            Download

            memory/2456-130-0x00000000104F0000-0x0000000010551000-memory.dmp
            Download

            memory/2456-143-0x00000000104F0000-0x0000000010551000-memory.dmp
            Download

            memory/2456-141-0x00000000104F0000-0x0000000010551000-memory.dmp
            Download

            memory/2456-142-0x00000000104F0000-0x0000000010551000-memory.dmp
            Download

            memory/2456-133-0x00000000104F0000-0x0000000010551000-memory.dmp
            Download

            memory/2832-153-0x0000000000400000-0x0000000000452000-memory.dmp
            Download

            memory/5760-7-0x0000000000D10000-0x0000000000D11000-memory.dmp
            Download

            memory/5760-65-0x0000000004150000-0x0000000004151000-memory.dmp
            Download

            memory/5760-67-0x0000000010480000-0x00000000104E1000-memory.dmp
            Download

            memory/5760-6-0x0000000000C50000-0x0000000000C51000-memory.dmp
            Download

            memory/5760-66-0x0000000010480000-0x00000000104E1000-memory.dmp
            Download

            memory/5760-154-0x0000000010480000-0x00000000104E1000-memory.dmp
            Download

            memory/6104-134-0x0000000000400000-0x0000000000452000-memory.dmp
            Download

            memory/6104-5-0x0000000010480000-0x00000000104E1000-memory.dmp
            Download

            memory/6104-1-0x0000000010410000-0x0000000010471000-memory.dmp
            Download

            memory/6104-62-0x0000000010480000-0x00000000104E1000-memory.dmp
            Download

            memory/6104-69-0x00000000104F0000-0x0000000010551000-memory.dmp
            Download

            memory/6104-126-0x00000000104F0000-0x0000000010551000-memory.dmp
            Download