Suspicious Cisco-like binary found in AppData – likely stealth malware, dumped to GitHub

Found voldemort 600MB binary running silently in AppData, impersonating Cisco software.

- Mimics Webex processes

- Scheduled Task persistence

- AV silent

- Behavior overlaps with known stealth backdoor tooling

- Likely modular loader and cloud C2

- Safe, renamed sample uploaded to GitHub for analysis

All files renamed (.exx, .dl_). No direct executables.

Interested in structure, unpacking, or related indicators.

(Mods: if this still gets flagged, happy to adjust.)