Overview

overview

10

Static

static

10

jaffacakes...le.exe

windows10-2004-x64

10

jaffacakes...le.exe

windows11-ltsc_2024-x64

10

Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    10/09/2026, 04:14

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    jaffacakes118_Advanced SystemCare Pro 3.6.0.709 Portable.exe
  • Size 298KB
  • Sample260910-et5bzsfd28
  • SHA256 6d47c077e6f0faf034a454f577d04df72cc5ad3ad681da566e54d9d4a37af326
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
remotediscoverycybergatepersistencestealertrojanupx

Malware Config

Extracted

Family

  • cybergate

Version

  • v1.04.8

Botnet

  • remote

C2

  • lowin.zapto.org:83

Mutex

  • CK004UNMXSU467

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    Rundll32

  • install_file

    Rundll32.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Remote Administration anywhere in the world.

  • message_box_title

    CyberGate

  • password

    stundenplan

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

  • Family: CyberGate, Rebhip

    CyberGate is a lightweight remote administration tool with a wide array of functionalities.

    trojanstealercybergate
  • Adds policy Run key to start application 2 TTPs 4 IoCs
    persistence
  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 4 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Executes dropped EXE 1 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in System32 directory 3 IoCs
  • UPX packed file 13 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Program crash 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs

Processes

  • C:\Windows\explorer.exe
    explorer.exe /LOADSAVEDWINDOWS
    1⤵
      PID:2380
      • C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Advanced SystemCare Pro 3.6.0.709 Portable.exe
        "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Advanced SystemCare Pro 3.6.0.709 Portable.exe"
        2⤵
        • Adds policy Run key to start application
        • Boot or Logon Autostart Execution: Active Setup
        • Adds Run key to start application
        • Drops file in System32 directory
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:3244
        • C:\Windows\SysWOW64\explorer.exe
          explorer.exe
          3⤵
          • Boot or Logon Autostart Execution: Active Setup
          • System Location Discovery: System Language Discovery
          PID:3404
        • C:\Windows\SysWOW64\explorer.exe
          explorer.exe
          3⤵
          • Drops file in System32 directory
          • System Location Discovery: System Language Discovery
          • Suspicious behavior: GetForegroundWindowSpam
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of WriteProcessMemory
          PID:2616
          • C:\Windows\SysWOW64\Rundll32\Rundll32.exe
            "C:\Windows\system32\Rundll32\Rundll32.exe"
            4⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:5608
            • C:\Windows\SysWOW64\WerFault.exe
              C:\Windows\SysWOW64\WerFault.exe -u -p 5608 -s 656
              5⤵
              • Program crash
              PID:5180
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 5608 -ip 5608
      1⤵
        PID:6000

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            UuU.uUu
            • Path C:\Users\Admin\AppData\Local\Temp\UuU.uUu
            • Size 8B
            • SHA256 e428ce2bb89d3dbfd63cb0d6e26228f7b8ec806478491c9a5a006b4988908dbf
            • MD5 SHA1 SHA512
            Submit Download

            XX--XX--XX.txt
            • Path C:\Users\Admin\AppData\Local\Temp\XX--XX--XX.txt
            • Size 222KB
            • SHA256 396585fff60bdbb551fd6138b1debb575debf221befa4deff8d31637068dca77
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 210d96439fa5db22a104934a62e987415d0a5705187afc4e7ff0e1ccd424c81d
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 2f114d03e57de491ed8c50fcdb2ba0d75a09dd896f4b093c0fe16a6cd9c71d9e
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 566e8398cc90ae874fb67952052f201eb0f98e4d475498d90fdbecd86f34412f
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 68cc651de03355a3f55cff6d19c0bea4bc7700d850a47e026fcec87493d47760
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 12db0f27781a4e9866de53369aa197d6fc62319ab89268c4ed9ad0ae6d106f47
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 f22cef9bf912c97a5727b9d9e88c3647c77ddbbc42cc7f6091036e7c3ff8688b
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 d3800ed7fb05d9a24c2c8a8cbc0e87fb746434b4106da656329caa7cbf074ccb
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 05c51883540004074e811eb945d27500466c0fcd9115f97b2012c512808fb460
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 ab5985de8856cbb37ea95674380cfe58f3b36e38dac794aaf4098c70e6308128
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 a96b8458aa34eecd9f7c8c218d8d26b4f0843742df9006c5efa48d41076b9e8e
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 8919bab9bea7be6f2c880339d9902ec01c3740f4aa30edf6cf98da2723e8cf4b
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 30b3e6cb4a8dea222d4a30c36f2b22090e2e3803a6b684041b75728a561bba2b
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 2d91f44ed9a46223ff2589f4b52967756f7bd4fdb07dab8d13a29f9610ad339b
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 4f08492dba52632110e118d1880128fcebfa4786d93c80e800f760373a52fe3d
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 292cafcae93d70c1f2512856ce02ed2eb9b4105f00461697de367e68bfab5e3e
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 a37f37f805e05d1074289a58e053bb94a5ba8bb0a25067891372a5d5fe0f1e4d
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 0028293580dcdadb594afa878a1fb267f127bd42b91b3c5b60e74dda39421d2a
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 393e3903b3569db3f29f09c24654df26fd55c7b5d077778f51e87baac54a3dd1
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 198cb10eb04add3af40f3d525042c328a4137f30b2c09fd3c5099fbf56a17da8
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 bf91cf4cf136fbca5514fa92eb3f9970fb838efe5853489d6ecd856c434270ac
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 6b24cd8722bab1c0891eb7c0ce7b996bc832810e1435579e66426c04791f76bc
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 105ff574a4df422eca28a1f7108869f7d4f0a0ade4f90dc47c4f7189e038b7b4
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 cb66f118640f413cf800a9d588678abefa1a88d9f307f307450906c24fc57441
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 e2ad81e7ffc68686ff0b0ae008a61b09aface32c3bd93ea59a6da506b658ae29
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 21cc3487b88405beec9a32af1ad58378cf8504702e96e5648e0d2a6565882827
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 e777899c476633e3d23a5853f83a8bb32e8c22a6f61d760e758584c91179ce6d
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 4b3f7c5500d270638123b3a7e816acd9cd558f0fc7768757c0579e349f3896a1
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 2c8fea28ee353276ad1580e9d8860ba0a75bea760c8bb88209721a3502dfcf1b
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 e27506d96f942e1e1e49f2dfe70eda4acb2bf00986698504b6a55d096e907d74
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 5905784de50242f158f158e128fee44df590dc3f3ab36c140b7e9221493acc76
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 5f355c37b7a5c56db07bbaab16fad08e6dd98aa152371b6d8e4bbed32da6ac73
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 ebdf8a7515b20ae7600714178b8d5786b2ea55c5ab3ecea72717f416f7377274
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 adea2732d1994d8b8cb15596d296ce536aa690ba2329a6d870199ef2485ebc69
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 c1f8ff9094fada977eac6dc82f294393d50b774911f16b657391610832e62353
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 5ecfb8f9ff7d7769727808cf4d2c347cc00894874aabd871fc375be48141329b
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 adc4a03f04f353866631e9e7966cf99d0039a10ec04c40c287ceda159df4303d
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 389f98327b352d446df4669107acf0666620f28e28cb8094085338708449b2a3
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 4de2d8e3eea2170d498c49030ba8f45da71294c9aaa5bfb4b8b8088a7d69ea80
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 84335f005d948201fd14fd6bec05fa8d30ddefd18e75e0da05fec86dcacfe737
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 0e2b334947638a6e4e178db86a25241bf04e26cd485ae8b23b33262dcd31c405
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 dda4147b3235336c2085d57325954fe8f92084226efaa4bb06f8599444c7acec
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 69743d1b8449439993c11ce744c43d483b8268978b34b8cf6b7b00887641c335
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 d793cc477508ad60fb69882ffd0b8f623a65efa97cc189f9b7171d6ed17c2fac
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 0a89bd6fb5f6a22f24cac0e2cf397da2fc655eb80bd6e7696d31e03f4f32c1a6
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 4b33de548fdce61714ee0d7d67b1ade7ff742a7e71506640228595227494526c
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 9c85d84c202e3c193eb7567b8e33f2acc2724bdd29f6dcafe8b4c6eab315e4af
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 d619446f2bb3684fac1b11f51dc7aa907845e9ece7a620209aef31b92263316e
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 56d2001d9df68078dde3eb7b119cd88bb13f4a57d62e06603d12dcfd4a61a272
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 f9adaa9645e22527bbbb476200549643ac5c7849ac9e2b80d83f24d4abf7622c
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 d208bfafc748bcfe10d582d6ba6955390d0cb7b6f47aa2c3ff0e9d53710f92fc
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 bc7fcfb4538f095adf58f53484f653a4f3627f3c77c46fc597968d1e5293142e
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 f520aa3792ea2ca734172666a32b6610e403f38ff9fcb3959a6ae4a5640c2435
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 a66832937b65612ddb645ba6aaf76a1a804b0891e20ed2310bb148cb58329c27
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 f3b35ace6da52dc87684817073127238d7299d540dbc53f141e45c27698c53f6
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 557409eb01baf89c3083456aada7a20c59cb66d08b17b8a0c86e9c33f4e6123a
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 b7f24194e41ee3f9122cd8930ab62d58b4be233b43b3071c833df2a46f885b05
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 0278a63d17d920a8aa3272a953a9f8f5bb8a0a06f6cc272fd7e4a9bdf1401329
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 56ad7436d6b27e8b7d0e5426387b4d2a771270c3cd2d025ade2e8756db9517c5
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 d4909c098f46621a92521b07325ac5112a8f7dd311ff41c46511700a9f886a91
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 43136b14c7fca4b44fe2014662eb805cde2e23ab34b71f2da016e123f1f21411
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 fe160fcb4bd5bbc9066cd46d9ebb736bb653c65d100c35e164ff63750b02c7f5
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 bfe92c800488d0e9cc6a9ff6b1ee87e65333adbbe3022bda390e68c9ba766502
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 b416dfbc18cb1fb41b2a8c2dd17b089253ec6c998738f32cab3382b541dc5d53
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 ccb7e9c65621eadde4660d4fcd07ce0bd1d7218c42b2775c635a7f615fa1f501
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 1a78fd42dfdd92f77bba51097bd0f83f7950772b775ed219c02fa85261a2e169
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 8c03ba49617ccf288278169f2a8ad737f77bdcde63511b19f0ece25a4f61baea
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 c9ec13df1037770e35f8e6d859d531c4e83fd6f2e215d6e3e09d84c59df083df
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 2b752d908e4da32fdfdc8d71b142849ebc37278c853057170284429eaaa43747
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 1998e48564f06781bbbd1b6a1cc424daaa2139029132479834665740212e1b10
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 c4c51eb39b73d8b40510bf5d2f612451d6eacf59b95f1d7ff1354bb23304731f
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 bf24722128ea6361183142ec9ae86f5f57d5ac40cb579efa15067f6e013953c6
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 58db13a5220b58d82f5a87f6041db2bac17d42a76438387ad6e55040707f2fed
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 9fe76c5c149aea68f1417a04533c02d2ee4d7bb276799a36858f44e678eda42b
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 cab1e8b2a21b2044d510bbe7695548f0446a839546b418026b1a424335a7d472
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 58b309b91a312c7a25db689cae13dd96f0e06af87f6c730783837ea0da478daa
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 0b427bd71634e5c9185e8a27b00acdec3882d3dff48e116d59adc940027ee145
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 d95d10250b3de622be261e539b1896a1ed98d5ed5283b192c8565604aca19b13
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 27a17d436d46dc46b0f6236744919f02b007d4632e2af5dabd94a5772279fdac
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 92a211570c807a825bde1d68083f3053c173fe37204c46c91faf5f28d3608bbf
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 f073b81a91758624c7f1b002aa37f0576c4582f241e3fed845371f843b592c1e
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 ef398a7c278f128e9ca25ee76a609b6d97d6cfecc0e1f65abe71cc9488138e84
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 fd8f3c86f4233021d91ed6943c88a18f67ca068a4326f631df9fb0024afe5b0a
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 c2f648c41f2f7015f1d57123f7694bcc93b67a93fb431c2a4af031225d8a7e78
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 8a9af214387caf2cea1e615a487d60380ad0d29d7c3b1d6e02e361b5b371942c
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 c6e63b83cec3a0111118c223bde799ce4eebfaffd71667f85a62440ea9adde3b
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 7fb37da3f9240f2d155ab257bd7a49b1438d1b92c498b99cf6a794998e9eae78
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 b9273f625f7d5822e28cb994a30844f4fe959c19bbb3dbdd59bd22766494b3ac
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 8988cdd8cd15eb87700a2aea41e3c6881edc345f85ff64015cd671102ea95ecd
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 027151ab7f0ab8206c30226959ebbd876fb2b16c5a6f9511b2401256c29e51a6
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 def272152bdebca3697033ff0d5510e215e279c9dda2eff7c690bfa70cf5897f
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 128cc9ca4e8cfa1b7796ee17dbb0ed15c86cebfd4a98435f862b118cd3da2308
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 3edc9187ba43b966bc073d6a0edc0bd70e4ea61c9342887ab663dd94c2ea366a
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 48e4cf32303767f032f7e05de4eb41d0a4d4355c194aa650447a6b574c218385
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 e6b6e902bb7883af2dbe9c9c7bb22df84043e19ab953c2e4df113e725b487538
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 f6b86b2427a1c83332188a64bb537dba45598dc2447545bc59c43a9900720fe1
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 6467c01312dfbe44b5017ea6e1d000c74993a1a538358807c550fc6da4bf8534
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 128efad084dd91a7c95e68aeadafa918781627b7b78b3451c152edae7cd04243
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 2ead750c8242192f1c1a0d6a4f311094dff090aa23aa6c33a05bcdbb50fbc19b
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 7b4db68a41de25d3c1c437cb8d696c4ca37cafe725ad8e7ff72b57063e68afe0
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 a61d7d6255115ef91cc3f705e4e8ddcf13f4c702f90ada60635e25f182964f88
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 608656c750a515b5af4edf0ec3d6f6dba978666b863730a155dfc6ed36b32c82
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 bb48e2c1bfd9b29c525fb20d92ca9ae7c5bc7824a3460ba9e4aa040fc6c8f767
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 d962528fc8baa5d4e7e9b3cae7155066289bb26ab29cd6982d7fdd4d7f533b8a
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 d518e1d55a5431a6c6ee76a3855549ad1da18eaadfb7afc44a02b5e8339953b0
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 f2f2a6e3bd5d47522f1460f09d9e7bca5d4d6dc06f5eace9381e9611199f12f6
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 90ba14555c5f98cce3d9b0d15f5ce740bfaee8cb329b3bea95a555846f180a88
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 32840dca085be19d6a39e6bdb8a7f650f232b494521fbb7779c95f51e4fa6203
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 9f523d8e0b8a54fc6a227da141edd1c52a186616f2754b0950ffcfb9bb496607
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 de09e088772b071ae2abe9912c09f49b707d11dddd6e9dce565931f37ee27675
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 c6f743ed4dc185d828844f4f6c01414ed497f928edaba485c33f9c983ccbb46e
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 f9910bf500febf1eaf3bb9de3293aed2a2ce9d1183a8b4c8db6962d0936b79ab
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 9a18d24d82006765716fc51fc7796da35ab62eb4ed4c76d38c635c8147f9ea79
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 35e3be391b79d6db01a0b6b17fe967816a90e581cd78a5573322e8fd68711cdf
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 92332e3a1340af976afe82fea17be063f8f59a4f56edf688c77bdeed948e7e7b
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 7c9398e2b2fe891772d325d66b88c9c2f6a2b01d14cc332547fb6fd5ad29e695
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 883684c4e5544f0c3ddb41d3412ef160db7e409edaa94ae95c68856f637085a4
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 c9130d4072e8486249142ffb11964ad437cd9895677a60f4ba269e74e592b8c3
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 fd00dfabd029ed8fa715d2e4eae33a924e5b51ac7e37a039eb7e417420ba4359
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 94eec9f06e10aa9121304d9a820140debcc12c6392a2f829dd4c597441aefe8c
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 0f1eaad2c2db116e920e9e9dacc5a9b273ce220000e48ef535b9bef9a4e7007b
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 284e0894d71e49e78df5907bd4460d2cd86e5d1433cb0e764487d9023aa5b4af
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 aa97cf271b9849b71cc400795a647c878d56c8bb501f83384cd006acb9939d0f
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 e2cd5e6697353c7ff37ce7c355e90606a395384dea1ad80273e3d01f33c50a92
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 7906b07ff03cf3bfdf62e1b6db3ac72b66249de4ef3c7463c20567df0911dbe4
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 7173b0d4e7e4772c4fa50aee03e58860f10cb46e7d114d1211dd31ec719a71db
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 6773cec81aea0664c243272282ff66302ab408ed9bd2552c8a927abd5082c802
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 ca38988767cfbc7fa212729821096aaaab6748bdfb1475a4ae7fb542fc81a473
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 d76a783b6c4c552a3c8fef1604f30f7ab895716a5417baf1bbe2218272a736d9
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 ddf1ed7d01e1a3d5739ed41ca358d1abb20badaeafebcfec5e68383ee442c0ed
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 7e52ce2378bf5ec8c488c4d81f6cee4b425049691df04a2cd021c499eb9bc01c
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 b020377c93940186093eadb6bcfb0ab1d8e3740a1572166641cdb6dcba13a66e
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 d7628683e93696f1d95aead308fce93e0b86914c656a5ba315ed94af26342943
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 859c322a16d9b539fcec2020c1c62eb95cbc7807fd67d72f1ed9df75f790fd18
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 b91e264e3a4f32a5a56e25e5fbe05e080bda5f0aa89e47aecf1d542eba8a7e56
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 ddc1ee3a6706a8fa4f74012635510b4260e5e5cb574d0b92e1a17fdae359caeb
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 b2bd5fb8ebac108035e100a221fcee9390786e8fca68e1ba190b98b1c1be2ad0
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 73e5c3e969a2bd244daca99c4b243edd71ae80b5fea35734daa5de1b62ab9647
            • MD5 SHA1 SHA512
            Submit Download

            XxX.xXx
            • Path C:\Users\Admin\AppData\Local\Temp\XxX.xXx
            • Size 8B
            • SHA256 45e856d3081053ef985328070fd94da35b1394545a42537ad708a4f7e04a18b9
            • MD5 SHA1 SHA512
            Submit Download

            cglogs.dat
            • Path C:\Users\Admin\AppData\Roaming\cglogs.dat
            • Size 15B
            • SHA256 4a8e75390856bf822f492f7f605ca0c21f1905172f6d3ef610162533c140507d
            • MD5 SHA1 SHA512
            Submit Download

            Rundll32.exe
            • Path C:\Windows\SysWOW64\Rundll32\Rundll32.exe
            • Size 298KB
            • SHA256 6d47c077e6f0faf034a454f577d04df72cc5ad3ad681da566e54d9d4a37af326
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            memory/2616-146-0x0000000010480000-0x00000000104E1000-memory.dmp
            Download

            memory/2616-132-0x0000000010480000-0x00000000104E1000-memory.dmp
            Download

            memory/2616-141-0x0000000010480000-0x00000000104E1000-memory.dmp
            Download

            memory/2616-140-0x0000000010480000-0x00000000104E1000-memory.dmp
            Download

            memory/2616-130-0x0000000010480000-0x00000000104E1000-memory.dmp
            Download

            memory/2616-131-0x0000000010480000-0x00000000104E1000-memory.dmp
            Download

            memory/2616-133-0x0000000010480000-0x00000000104E1000-memory.dmp
            Download

            memory/3244-5-0x0000000010410000-0x0000000010471000-memory.dmp
            Download

            memory/3244-2-0x0000000011370000-0x00000000113D1000-memory.dmp
            Download

            memory/3244-129-0x0000000000400000-0x0000000000452000-memory.dmp
            Download

            memory/3244-62-0x0000000010410000-0x0000000010471000-memory.dmp
            Download

            memory/3244-125-0x0000000010480000-0x00000000104E1000-memory.dmp
            Download

            memory/3244-68-0x0000000010480000-0x00000000104E1000-memory.dmp
            Download

            memory/3404-7-0x00000000012E0000-0x00000000012E1000-memory.dmp
            Download

            memory/3404-6-0x0000000001220000-0x0000000001221000-memory.dmp
            Download

            memory/3404-66-0x0000000010410000-0x0000000010471000-memory.dmp
            Download

            memory/3404-65-0x0000000004720000-0x0000000004721000-memory.dmp
            Download

            memory/5608-151-0x0000000000400000-0x0000000000452000-memory.dmp
            Download