Overview

overview

10

Static

static

5

jaffacakes...43.exe

windows10-2004-x64

10

jaffacakes...43.exe

windows11-ltsc_2024-x64

10

Analysis

  • max time kernel
    47s
  • max time network
    147s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    19/09/2026, 17:50

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    jaffacakes118__a52524d4d7f46b54785434be89bf5443.exe
  • Size 347KB
  • Sample260919-we15fsvzhy
  • SHA256 d7348e3ee61904493c4d686509f82d1a28f1a84d4cb04d9d35a622027b5667b5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
backdoorimadrapdefense_evasiondiscoverycybergatesalitypersistencestealertrojanupx

Malware Config

Extracted

Family

  • sality

C2

  • http://89.119.67.154/testo5/

  • http://kukutrustnet777.info/home.gif

  • http://kukutrustnet888.info/home.gif

  • http://kukutrustnet987.info/home.gif

Extracted

Family

  • cybergate

Version

  • v1.07.5

Botnet

  • imadrap

C2

  • 127.0.0.1:999

  • 127.0.0.1:81

  • 127.0.0.1:82

  • 127.0.0.1:83

Mutex

  • 244262UJC13PY0

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Remote Administration anywhere in the world.

  • message_box_title

    CyberGate

  • password

    imadrap

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

  • Family: CyberGate, Rebhip

    CyberGate is a lightweight remote administration tool with a wide array of functionalities.

    trojanstealercybergate
  • Family: Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality
  • Modifies firewall policy service 3 TTPs 9 IoCs
    defense_evasion
  • UAC bypass 3 TTPs 3 IoCs
    defense_evasiontrojan
  • Windows security bypass 2 TTPs 18 IoCs
    defense_evasiontrojan
  • Adds policy Run key to start application 2 TTPs 4 IoCs
    persistence
  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 2 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Executes dropped EXE 2 IoCs
  • Windows security modification 2 TTPs 21 IoCs
    defense_evasiontrojan
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Checks whether UAC is enabled 1 TTPs 3 IoCs
    defense_evasiontrojan
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file 60 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Drops file in Windows directory 4 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • System policy modification 1 TTPs 3 IoCs
    defense_evasion

Processes

  • C:\Windows\system32\dwm.exe
    "dwm.exe"
    1⤵
      PID:1180
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
      1⤵
        PID:3080
      • C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s webthreatdefusersvc
        1⤵
          PID:3188
        • C:\Windows\System32\ShellHost.exe
          "C:\Windows\System32\ShellHost.exe"
          1⤵
            PID:3472
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k ClipboardSvcGroup -p -s cbdhsvc
            1⤵
              PID:3312
            • C:\Windows\System32\RuntimeBroker.exe
              C:\Windows\System32\RuntimeBroker.exe -Embedding
              1⤵
                PID:4348
              • C:\Windows\System32\RuntimeBroker.exe
                C:\Windows\System32\RuntimeBroker.exe -Embedding
                1⤵
                  PID:4428
                • C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe -k UdkSvcGroup -s UdkUserSvc
                  1⤵
                    PID:4444
                  • C:\Windows\system32\DllHost.exe
                    C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
                    1⤵
                      PID:4744
                    • C:\Windows\system32\ctfmon.exe
                      /QuitInfo:0000000000000260;000000000000026C;
                      1⤵
                        PID:4488
                      • C:\Windows\system32\DllHost.exe
                        C:\Windows\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
                        1⤵
                          PID:5212
                        • C:\Windows\System32\SecurityHealthSystray.exe
                          "C:\Windows\System32\SecurityHealthSystray.exe"
                          1⤵
                            PID:5316
                          • C:\Windows\System32\smartscreen.exe
                            C:\Windows\System32\smartscreen.exe -Embedding
                            1⤵
                              PID:2868
                            • C:\Windows\system32\sihost.exe
                              sihost.exe
                              1⤵
                                PID:2584
                                • C:\Windows\explorer.exe
                                  explorer.exe /LOADSAVEDWINDOWS
                                  2⤵
                                    PID:2624
                                    • C:\Users\Admin\AppData\Local\Temp\jaffacakes118__a52524d4d7f46b54785434be89bf5443.exe
                                      "C:\Users\Admin\AppData\Local\Temp\jaffacakes118__a52524d4d7f46b54785434be89bf5443.exe"
                                      3⤵
                                      • Modifies firewall policy service
                                      • UAC bypass
                                      • Windows security bypass
                                      • Adds policy Run key to start application
                                      • Boot or Logon Autostart Execution: Active Setup
                                      • Windows security modification
                                      • Adds Run key to start application
                                      • Checks whether UAC is enabled
                                      • Drops file in Windows directory
                                      • System Location Discovery: System Language Discovery
                                      • Suspicious behavior: EnumeratesProcesses
                                      • Suspicious use of AdjustPrivilegeToken
                                      • Suspicious use of WriteProcessMemory
                                      • System policy modification
                                      PID:3948
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
                                        4⤵
                                          PID:5896
                                        • C:\Users\Admin\AppData\Local\Temp\jaffacakes118__a52524d4d7f46b54785434be89bf5443.exe
                                          "C:\Users\Admin\AppData\Local\Temp\jaffacakes118__a52524d4d7f46b54785434be89bf5443.exe"
                                          4⤵
                                          • Modifies firewall policy service
                                          • UAC bypass
                                          • Windows security bypass
                                          • Windows security modification
                                          • Checks whether UAC is enabled
                                          • Enumerates connected drives
                                          • Drops file in Windows directory
                                          • System Location Discovery: System Language Discovery
                                          • Suspicious behavior: EnumeratesProcesses
                                          • Suspicious behavior: GetForegroundWindowSpam
                                          • Suspicious use of WriteProcessMemory
                                          • System policy modification
                                          PID:568
                                          • C:\directory\CyberGate\install\server.exe
                                            "C:\directory\CyberGate\install\server.exe"
                                            5⤵
                                            • Modifies firewall policy service
                                            • UAC bypass
                                            • Windows security bypass
                                            • Executes dropped EXE
                                            • Windows security modification
                                            • Checks whether UAC is enabled
                                            • Enumerates connected drives
                                            • Drops file in Windows directory
                                            • System Location Discovery: System Language Discovery
                                            • Suspicious behavior: EnumeratesProcesses
                                            • Suspicious use of WriteProcessMemory
                                            • System policy modification
                                            PID:3772
                                        • C:\directory\CyberGate\install\server.exe
                                          "C:\directory\CyberGate\install\server.exe"
                                          4⤵
                                          • Executes dropped EXE
                                          • System Location Discovery: System Language Discovery
                                          PID:6120
                                  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                    1⤵
                                      PID:5740
                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                      1⤵
                                        PID:1900
                                      • C:\Windows\system32\svchost.exe
                                        C:\Windows\system32\svchost.exe -k GPSvcGroup
                                        1⤵
                                          PID:5200

                                        Network

                                              MITRE ATT&CK Enterprise v16

                                              Reconnaissance

                                              Resource Development

                                              Initial Access

                                              Execution

                                              Persistence

                                              Boot or Logon Autostart Execution

                                              3
                                              T1547

                                              Active Setup

                                              1
                                              T1547.014

                                              Registry Run Keys / Startup Folder

                                              2
                                              T1547.001

                                              Create or Modify System Process

                                              1
                                              T1543

                                              Windows Service

                                              1
                                              T1543.003

                                              Privilege Escalation

                                              Abuse Elevation Control Mechanism

                                              1
                                              T1548

                                              Bypass User Account Control

                                              1
                                              T1548.002

                                              Boot or Logon Autostart Execution

                                              3
                                              T1547

                                              Active Setup

                                              1
                                              T1547.014

                                              Registry Run Keys / Startup Folder

                                              2
                                              T1547.001

                                              Create or Modify System Process

                                              1
                                              T1543

                                              Windows Service

                                              1
                                              T1543.003

                                              Defense Evasion

                                              Abuse Elevation Control Mechanism

                                              1
                                              T1548

                                              Bypass User Account Control

                                              1
                                              T1548.002

                                              Impair Defenses

                                              4
                                              T1562

                                              Disable or Modify System Firewall

                                              1
                                              T1562.004

                                              Disable or Modify Tools

                                              3
                                              T1562.001

                                              Modify Registry

                                              8
                                              T1112

                                              Credential Access

                                              Discovery

                                              Peripheral Device Discovery

                                              1
                                              T1120

                                              Query Registry

                                              1
                                              T1012

                                              System Information Discovery

                                              3
                                              T1082

                                              System Location Discovery

                                              1
                                              T1614

                                              System Language Discovery

                                              1
                                              T1614.001

                                              Lateral Movement

                                              Collection

                                              Command and Control

                                              Exfiltration

                                              Impact

                                              Replay Monitor

                                              Loading Replay Monitor...

                                              Downloads

                                              Admin2.txt
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin2.txt
                                              • Size 224KB
                                              • SHA256 21ee74eada20aca6200c75e3b11acf609d36b57c8f1790baed1f1b72d419f364
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 8546c5cb496473d3ee501b8bb3aec0e7b99448049456e6d5f6d8d20c268f6e98
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 d23b1e396cf6f484316e5f888687db28f6fe7d21ea11bfec3b8bf011116aacd7
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 f658bc572f94af8994b289538b8e3c4c6d8dcc0e91156850e18cc101060e663c
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 930c8bc60aa65134b32bd5d142af204e8f79bacf2121820739923814fcee04e5
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 30b12f0b45c7e67c100099622050fea3e3919549fc63d3d96847d3f48bf8abaa
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 acb72c503a5153d7d9f2f8348c5048c44a3e8c6f413e01538b9da9c909e6aabf
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 565af2e6e30b0401ede6e40d692fe6d7dbd2d00b5a58521ba70bd022a0d342e8
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 db3e631bf35f6f19f6e22d27ea5a0ad36e4eb1f6eaed4f86b5fb15ce0880a6b0
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 02179949f0250a2906a3f0ced1c4918974292fd27c92fe8f1fccbdd63aff0827
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 3e5e122dfe6b3bbb2f43695c01b2812f22630790f12488a770faa5ff3ebad775
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 84f0e687d239bb6ae5cf2e0d03a8ee310a1274b99c685f5a4394d13e09fd6972
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 9e2201366cbec09b119152d79fe1974d80b269e97abd785761f97648ec170143
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 b2fab52368333a3e4db065982b65e0784cb7d63b7c96980007b8dc9b6b115d02
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 c583403c5f2eb2de741e7962e8aab6c555ba45afd66f8d7e491539fc5137a752
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 751d84988a96f3c516fec005117ec6aad1b1846dd9bea13f9cfa1e5da09e6282
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 6a0530b1b62c342e84d3f8a12cc6a7db5208515a152028f5f338658d8e642715
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 b5805f54de15bf47446d2975e784ab0f834e285840afad439592cd1f45cc5821
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 a142fc80345cdeb7f0e330834727c7a92c20f222a6b67af3cd524a9a67d1788e
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 a062216cc4efd43dd36737f787da01383566a36c02dbef1d375c73a88a343aee
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 4f381db28c2447728c2cd6b8bda8fc3d9b7ae9d734e576c00c5d1d7b178e6d11
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 15794fb81e9d0ef0ce41c3fca2ae94261ad17dc308609fd044e4e1bff5b2b549
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 5403ce2c47801c15af0f33e49c72d2ccddc79c9525abf2232a62203489c91d0c
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 576550e7f217f540333ee956516db2781d21b0ee13547b4935dac4f2080c5a29
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 14ad7e63d6dd9ac26f956ab0fe8272d2e480fca96fefeaf228c2d09d38847304
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 1fe8ad04e9283db5363a9b4f125131be985f913216c1a22b6c9fa5f056ff60b8
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 5116226774686c237e24f4a8a5f2cb15cd7cb4492a5ec370c3795e4a7555e578
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 3ec192aea9391d499594e519df21155f79fe5147cc65134c77de5fd4dc254fcc
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 948a0d0f782ff748180621269774d4a8ecf6d29b1df0519d07643375ed3311cc
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 fe958dec87abc97e6fc4fe5914cdf4c97220e7d1f46c5d70d41a5445ae8acc47
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 35935e0cf6644310135bb154d303df306c1ee73b751060417480c3bd394fd86d
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 54e0cf844c640b6ee7a559b619b6ff7fa7d71e05d2761311d803ed660e8335b7
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 5a97264e6e770a3a40c3843bd0be0e8cf6f8dd2df93342bd7137dc259d1aa89c
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 d5a56754e745845ce1e3ba8d2ccb2d24b22719d187eabc214164d4ae89d85851
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 67336c39cf3bbe1a90f9fd0c7c57715052030323b8295f06ab3a4aa64fce0f9c
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 f808db6e4ef4ac44cc4e6c5b0122795947fc329299bbec4d3baa66d6f0d27bfb
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 cab08dc6e3093009dc2b9d92849fb64c5102a0aefd7a897d1dc092123626a671
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 9aa00566d70861cb4307203a10bdc6c852db60bd6b138f56e6d6b5107db43e7a
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 beb4c15527ba2b53a51df8dcc95ddd229b66b5adf66191b9c9b30ce47513bb6a
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 bf0ba98f07a3c80238defafca619aa39f4e809898aa0e3600b7e3db5e790fa28
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 810ee40e2bed41660242398ff58a480d7d5913bb36bada6ecdf2fe6fe4d8e9f2
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 8fcfc9e796dfa7a5faee027a2cd1800e00ba7c4fcf0334414e2215b01d5f0fe2
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 92df197c5d656c936a3f9fd283e9d314310da68437919408083a2838dd4722be
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 8ae56f2279fd4c7145204c4b0c23e401919687688c10b8234afdf9585ee0cc53
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 efbb540f7b19de74a4122b8ea4330124438bc44686392db24a2cd52979739a41
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 51a0308c4d5d8ffdc70347e8401f08fe3a3b41f30adbc719c37e2acb6b195c7d
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 f63ea35b48ab5116507c7334c8872a6e9f7467bd338c0c13afaf4a26d5b6f76b
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 2c9e5f69a1db1f12ef50f92335d2d9c96a1f681521aae554b7f0d0c668f8a58f
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 147dd89ccf3a07548007ec0ff43f76c0bc0e820f7ffb81ed177a588d6fe68e96
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 ffb2e65602df049d77e77e95518b28ab05ae3daffec0435c803de4a402a2fa15
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 4f067d1de258f88b32749dc8dea92dc398902a1df61e2400b8f43318fba73370
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 49fcb25f4306b91a07c12f4f116ea6da5c379db9d06fa7bf5c087520a6686cdf
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 26d2681c706e9e3b8d3907bce36442f16c5d8abffa9c8d4b0ab43671a0b06896
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 ad8be2c5f37e2f461551035b2d5be3493a872ffafcbc85dfd7ec3c89a21220a9
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 f08aa39118476dfd24afda36c32b53c0504d750fd855cf5d03f34352ed6fc3f6
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 7d9f8a1648e75d1a48c9c77037eb97281a58fa13fb5adaaa5c63672d3f3b2f41
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 b67caa05c4a021ae0559b7f197cf3fabdb84be36c3daf8cbf68454ab13939259
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 7051c57fbbc5ccd66d6f0b60b579dce0781a0610b988401c8aa81b4d2de7d4c3
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 e60ed19e8627cbc0681bf38dea49f4b576b8d310e68e34cb8bee1fdfae568992
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 81dfdd3d47edcc681fd42906bfdd913c30af17341ac3de50c369fbf2ba526e56
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 766d8699711be892c7333a6d7a557edaf7cbedbd809fdb4408d1f4f1276f5e67
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 7dd4370ab4cd4e5988ab5bb09bd230123c48bc789a8e948c782d3da9a72f6c03
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 0156932d9d6e16ed9d56a0cf4984e5a3c02c40bafed7fabe6c54dd43ec1e764e
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 73e8faaec5c702d0804b2765a80ab502676f0b9516b398b51887210662fe8e9e
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 aec8f6d9f494f96fb33d35c54ddaa7d087bbb6ead124e1ddfd557b327b2ac421
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 3252ca401b1422ba7b429dcdb0fb694ec2e63f3bc74c3ed0f8a668ed82e81f4b
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 44e464362d26374e52c84c436652f5cb12aec6487a83877383c0743f22300334
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 8756f409371fea63c6266b32002db0b28a0ce7c40d339e11a496844bd44fd3c4
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 cdb383fffcc3172c8f35cac1e087feeb59ce3ec445c7e5ce24ffba87661afb91
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 b271f0f8663403cd6a74c02fcadb0dec89b306480d61eccfb0b81cc19c83172d
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 9162eeff84e97263a1439da1e53d6fef6719cb89dc480e0b29cbaf45e3eaa3dc
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 af71a3d09a24155837cd20ff5d75b60761865a2fcfaf5aa98870da91f9df589e
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 298828ed0cd006190e45a3444e27972bb38b113342ef97a71a8e7a1e8e6e2cc3
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 0969f648f4c3bef84cfa3f731e21b872061e90f73ab54f2ca405bfdaa3732390
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 59f1827714680de3d46655fcccfb9a3abff8215d98a2a789c5451d5f01843c85
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 275306d7617562276f3a5d0f3a81fc72608898a328ecc12c3e5a1cd41c436bad
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 d31732ecd48bc82f54329b1fec418b08f2bc3a46e53ee633d43af779d40a5329
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 90fcce58966a38615c7145a5ab5cc880e3c3e4bfecca9504b1ce7241af2a6839
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 f8740a50d8ff3e47ddba3bcbeab514068bc6c90da13ff7c4148a9d2a577dff0d
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 0d34d544a4ef06e85dc609cd43f679d5d40a021d0803a1cc3a134b5e624f6f20
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 431674953f1260691dbe6c30404540cb164836f2f31a2a1f7b6bc35ad9e5fe89
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 bab36fcc4670038d9062ae15b676627655c928f028a3a2cd79465706a92cecee
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 7555b82414a1971ba810ac853b422e7429904e34e050ad74d69f74895822eb1e
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 3a48ad154a657067784097da001050f6fa10fca5f18627c5e2951df6c15ace9a
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 1e5538df61d8fb5bf2f5cee710e4374b349140687d21325b4bf295bc4a8e67e2
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 ff0424cedeeb9f107a02c32ede63a42d3dae3c5f7e103bd6e84b5766f181541d
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 58be685c2f476eb9fc5b4934fe3f2eb7d91e7d3db6df74cc79f0f442b1dbf191
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 877a2df2a2114940664e2557a6fcff4addaa5cc584467ca4aba20af50e8bb3c5
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 9ccb6230b026796146b498438982695ed9363fb921b9caae6acc08abec5a13c5
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 6adee37c21b33ef8d0346fa2034b3bd64a5815de03c4fb47baf2ecbdec02e6c0
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 2df453803cac6fa0af5863e23a6302d2b30052b54f8cd2a01cf483a9e6cbb339
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 26559f1ff526cd4bf09b54c7f0f07db1c44ddc6efd1a0957bb83a6f04d56e197
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 e5ea071afbf180449bd4fcf4dfbb8e82f878a81256a6da2174ef41e065f45a28
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 3eb60964607b4261bba9abb5c16dd4a13e5f101117098e22e20bd4a7c2a234a6
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 e1fe8f0ebec35b2431dcba48ba4a44bb80a29c20c05cf0a731911c90ded98900
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 e0313cbb4fce4d8d0bf94cc662354e43f67aa7da173d862dd241e3c946dcb215
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 bcf53a68ccc36fa493fd61609a86c3bea10bbb6a1e242ecead89c66baa49a441
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 89e778571499badedbf5116d4d1158e55ff4f5cbb0693d6dee3a31f33de1d363
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 9c3cb54e20f7e12e772caaaff82a22ea6dd250b961385f0fc5750aa25a6b1bc4
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 5a32d44f73ac1a62dce941ba23172291f8a3c555da53a6434a4e03e0a1ee30a5
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 29118d716dc6ab5da612fba0283fea206384962769c7a073c198b0cbed484abf
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 35247bf01b3465568e2040c3a7dbfb6ac1d107d4592fb6d6947db9586da887bf
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 d4a6f7a68ca6bbe5a9f25007e836b1d1fd866345f1e65929d694b57998c860ed
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 e3b6522fcb19cf01dd71cba4f4e3975733c4af58f7212f30528f5a0b85045e6f
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 dd6cc4bb0cf89de4ae4a109e866efd3b54136ee767d346eb6dbf3ff7a83c2ee6
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 2b2f4e76b17b003c5acdc4e952deb87f4e8d93e7d90db4adf6ff89fdd6b6ffcb
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 6ddac289db80b4a7db27b2639bf4aae7c57494e4c229a46b71f48c3dd2071ae2
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 4179c219710945c8211455b9f5c7ac3bc45a0b5f830d62c5b003b245c0adfb54
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 b4bdf530a1466d262016359d38d5dadd77ec27fdbabf3964433a548f9204af32
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 2f00d0c34d5dd557584cd6594c9217166648562c297844e03c888083e1b45877
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 1fd4e164f23d3a6bcee915cfbcbdd5387be82e015713c4778978ffa759ec2c56
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 03c248436707d15e04dac8205db3e1cb250eb1c7c7077c2463249196c2c38656
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 7f1133c0ab392f6e1eb2ae048096a8d1e04daa4ebbcd548a0b301debce285e06
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Admin7
                                              • Path C:\Users\Admin\AppData\Local\Temp\Admin7
                                              • Size 8B
                                              • SHA256 931c186efed4754691ba68a5fcf43b507407eb8b11557e272685e7a3e08a35ca
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Adminlog.dat
                                              • Path C:\Users\Admin\AppData\Roaming\Adminlog.dat
                                              • Size 15B
                                              • SHA256 4a8e75390856bf822f492f7f605ca0c21f1905172f6d3ef610162533c140507d
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              SYSTEM.INI
                                              • Path C:\Windows\SYSTEM.INI
                                              • Size 257B
                                              • SHA256 7e5bb901b4f667c09b993d8c699dda7bbbc15208eb62975176a60200c2b08347
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              server.exe
                                              • Path C:\directory\CyberGate\install\server.exe
                                              • Size 347KB
                                              • SHA256 d7348e3ee61904493c4d686509f82d1a28f1a84d4cb04d9d35a622027b5667b5
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              arwi.exe
                                              • Path F:\arwi.exe
                                              • Size 97KB
                                              • SHA256 5179bd18d0def411c9f6515364ffae1c8abad7c5127741cc7d35b304b2a334f1
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              memory/568-105-0x0000000010480000-0x00000000104E5000-memory.dmp
                                              Download

                                              memory/568-128-0x0000000010480000-0x00000000104E5000-memory.dmp
                                              Download

                                              memory/568-97-0x0000000010480000-0x00000000104E5000-memory.dmp
                                              Download

                                              memory/568-96-0x0000000010480000-0x00000000104E5000-memory.dmp
                                              Download

                                              memory/568-98-0x0000000010480000-0x00000000104E5000-memory.dmp
                                              Download

                                              memory/568-92-0x0000000003F70000-0x0000000003F71000-memory.dmp
                                              Download

                                              memory/568-157-0x00000000053D0000-0x00000000053D1000-memory.dmp
                                              Download

                                              memory/568-158-0x0000000005380000-0x0000000005382000-memory.dmp
                                              Download

                                              memory/568-193-0x0000000010480000-0x00000000104E5000-memory.dmp
                                              Download

                                              memory/568-106-0x0000000010480000-0x00000000104E5000-memory.dmp
                                              Download

                                              memory/568-107-0x0000000010480000-0x00000000104E5000-memory.dmp
                                              Download

                                              memory/568-93-0x0000000010480000-0x00000000104E5000-memory.dmp
                                              Download

                                              memory/568-94-0x0000000010480000-0x00000000104E5000-memory.dmp
                                              Download

                                              memory/568-49-0x0000000000400000-0x000000000046A000-memory.dmp
                                              Download

                                              memory/568-173-0x0000000010480000-0x00000000104E5000-memory.dmp
                                              Download

                                              memory/568-138-0x0000000010480000-0x00000000104E5000-memory.dmp
                                              Download

                                              memory/568-28-0x00000000005D0000-0x00000000005D1000-memory.dmp
                                              Download

                                              memory/568-27-0x00000000001E0000-0x00000000001E1000-memory.dmp
                                              Download

                                              memory/568-172-0x0000000010480000-0x00000000104E5000-memory.dmp
                                              Download

                                              memory/3772-177-0x00000000043C0000-0x000000000547A000-memory.dmp
                                              Download

                                              memory/3772-163-0x00000000022E0000-0x00000000022E1000-memory.dmp
                                              Download

                                              memory/3772-201-0x00000000022D0000-0x00000000022D2000-memory.dmp
                                              Download

                                              memory/3772-134-0x0000000000400000-0x000000000046A000-memory.dmp
                                              Download

                                              memory/3772-178-0x00000000043C0000-0x000000000547A000-memory.dmp
                                              Download

                                              memory/3772-179-0x00000000043C0000-0x000000000547A000-memory.dmp
                                              Download

                                              memory/3772-165-0x00000000043C0000-0x000000000547A000-memory.dmp
                                              Download

                                              memory/3772-187-0x00000000043C0000-0x000000000547A000-memory.dmp
                                              Download

                                              memory/3772-169-0x00000000043C0000-0x000000000547A000-memory.dmp
                                              Download

                                              memory/3772-135-0x00000000043C0000-0x000000000547A000-memory.dmp
                                              Download

                                              memory/3772-145-0x00000000043C0000-0x000000000547A000-memory.dmp
                                              Download

                                              memory/3772-150-0x00000000043C0000-0x000000000547A000-memory.dmp
                                              Download

                                              memory/3772-155-0x00000000043C0000-0x000000000547A000-memory.dmp
                                              Download

                                              memory/3772-176-0x00000000043C0000-0x000000000547A000-memory.dmp
                                              Download

                                              memory/3772-164-0x00000000022D0000-0x00000000022D2000-memory.dmp
                                              Download

                                              memory/3772-143-0x00000000043C0000-0x000000000547A000-memory.dmp
                                              Download

                                              memory/3772-189-0x00000000043C0000-0x000000000547A000-memory.dmp
                                              Download

                                              memory/3772-168-0x0000000000400000-0x000000000046A000-memory.dmp
                                              Download

                                              memory/3772-153-0x00000000043C0000-0x000000000547A000-memory.dmp
                                              Download

                                              memory/3772-154-0x00000000043C0000-0x000000000547A000-memory.dmp
                                              Download

                                              memory/3772-148-0x00000000043C0000-0x000000000547A000-memory.dmp
                                              Download

                                              memory/3772-146-0x00000000043C0000-0x000000000547A000-memory.dmp
                                              Download

                                              memory/3772-144-0x00000000043C0000-0x000000000547A000-memory.dmp
                                              Download

                                              memory/3772-195-0x00000000043C0000-0x000000000547A000-memory.dmp
                                              Download

                                              memory/3772-213-0x0000000000400000-0x000000000046A000-memory.dmp
                                              Download

                                              memory/3948-25-0x0000000004870000-0x0000000004871000-memory.dmp
                                              Download

                                              memory/3948-11-0x00000000024B0000-0x000000000356A000-memory.dmp
                                              Download

                                              memory/3948-125-0x0000000000400000-0x000000000046A000-memory.dmp
                                              Download

                                              memory/3948-0-0x0000000000400000-0x000000000046A000-memory.dmp
                                              Download

                                              memory/3948-89-0x0000000010480000-0x00000000104E5000-memory.dmp
                                              Download

                                              memory/3948-18-0x00000000024B0000-0x000000000356A000-memory.dmp
                                              Download

                                              memory/3948-29-0x0000000000760000-0x0000000000762000-memory.dmp
                                              Download

                                              memory/3948-30-0x0000000000760000-0x0000000000762000-memory.dmp
                                              Download

                                              memory/3948-4-0x00000000024B0000-0x000000000356A000-memory.dmp
                                              Download

                                              memory/3948-6-0x00000000024B0000-0x000000000356A000-memory.dmp
                                              Download

                                              memory/3948-7-0x00000000024B0000-0x000000000356A000-memory.dmp
                                              Download

                                              memory/3948-8-0x00000000024B0000-0x000000000356A000-memory.dmp
                                              Download

                                              memory/3948-9-0x00000000024B0000-0x000000000356A000-memory.dmp
                                              Download

                                              memory/3948-46-0x00000000024B0000-0x000000000356A000-memory.dmp
                                              Download

                                              memory/3948-40-0x0000000000400000-0x000000000046A000-memory.dmp
                                              Download

                                              memory/3948-48-0x0000000000760000-0x0000000000762000-memory.dmp
                                              Download

                                              memory/3948-20-0x0000000010410000-0x0000000010475000-memory.dmp
                                              Download

                                              memory/3948-24-0x0000000000760000-0x0000000000762000-memory.dmp
                                              Download

                                              memory/3948-2-0x00000000024B0000-0x000000000356A000-memory.dmp
                                              Download

                                              memory/3948-26-0x0000000010480000-0x00000000104E5000-memory.dmp
                                              Download

                                              memory/3948-17-0x00000000024B0000-0x000000000356A000-memory.dmp
                                              Download

                                              memory/3948-12-0x00000000024B0000-0x000000000356A000-memory.dmp
                                              Download

                                              memory/3948-1-0x00000000024B0000-0x000000000356A000-memory.dmp
                                              Download

                                              memory/3948-10-0x00000000024B0000-0x000000000356A000-memory.dmp
                                              Download

                                              memory/3948-5-0x00000000024B0000-0x000000000356A000-memory.dmp
                                              Download

                                              memory/6120-160-0x0000000000B60000-0x0000000000B62000-memory.dmp
                                              Download

                                              memory/6120-167-0x0000000000400000-0x000000000046A000-memory.dmp
                                              Download

                                              memory/6120-133-0x0000000000400000-0x000000000046A000-memory.dmp
                                              Download

                                              memory/6120-181-0x0000000000B60000-0x0000000000B62000-memory.dmp
                                              Download

                                              memory/6120-184-0x0000000000400000-0x000000000046A000-memory.dmp
                                              Download

                                              memory/6120-161-0x0000000002930000-0x0000000002931000-memory.dmp
                                              Download