Analysis

  • max time kernel
    35s
  • max time network
    40s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-es
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-eslocale:es-esos:windows10-2004-x64systemwindows
  • submitted
    05-02-2023 14:29

General

  • Target

    PrometheusLauncher.exe

  • Size

    14.5MB

  • MD5

    19ccd4526523f5056ef90bbf8a097f1d

  • SHA1

    a9a84bc1b5eb7004ae142d30fb78f18b5214eaf9

  • SHA256

    40588332b5001817dcc49d6a251e86132af4a8486cbd3e9d655ce4f34fe2ebc6

  • SHA512

    acb6b8b323367b5bea23d9a32879f26d540da77177953e7fa6c647137ada4273a47a9c00a45bea9bafeec8a1cecec978dddbcce143c10ac2e8f05618bfcda2a7

  • SSDEEP

    393216:V/OyazuXZCjdQuslOIwdfq3+d9zRUf5kcaW8AeIA:V2xzuJedQuPxyOd9z+icaW8DIA

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 30 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\PrometheusLauncher.exe
    "C:\Users\Admin\AppData\Local\Temp\PrometheusLauncher.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:900
    • C:\Users\Admin\AppData\Local\Temp\PrometheusLauncher.exe
      "C:\Users\Admin\AppData\Local\Temp\PrometheusLauncher.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:4580
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "ver"
        3⤵
          PID:3676

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\MSVCP140.dll

      Filesize

      566KB

      MD5

      0929e46b1020b372956f204f85e48ed6

      SHA1

      9dc01cf3892406727c8dc7d12ad8855871c9ef09

      SHA256

      cb3c74d6fcc091f4eb7c67ee5eb5f76c1c973dea8b1c6b851fcca62c2a9d8aa8

      SHA512

      dd28fca139d316e2cc4d13a6adffb7af6f1a9dc1fc7297976a4d5103fae44de555a951b99f7601590b331f6dbb9bfc592d31980135e3858e265064117012c8d5

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\MSVCP140.dll

      Filesize

      566KB

      MD5

      0929e46b1020b372956f204f85e48ed6

      SHA1

      9dc01cf3892406727c8dc7d12ad8855871c9ef09

      SHA256

      cb3c74d6fcc091f4eb7c67ee5eb5f76c1c973dea8b1c6b851fcca62c2a9d8aa8

      SHA512

      dd28fca139d316e2cc4d13a6adffb7af6f1a9dc1fc7297976a4d5103fae44de555a951b99f7601590b331f6dbb9bfc592d31980135e3858e265064117012c8d5

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\PIL\_imaging.cp310-win_amd64.pyd

      Filesize

      2.3MB

      MD5

      6f9f5e464f798717f3269ddc1a8f7134

      SHA1

      f54f230966e957fb4fd5804b377821fcc4495fe4

      SHA256

      3c53bbc597b1ee75d172353cc0eca706665d0666472fb62c8d1937f8a1508ba8

      SHA512

      c000c43fe11d4174389ad2f2661e881fbf84d710c0b7fe9595a88a726b86fe1f855fe810ef29ff246d4a97213740da0b09e27abd844388b57ebe0e554e9917ab

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\PIL\_imaging.cp310-win_amd64.pyd

      Filesize

      2.3MB

      MD5

      6f9f5e464f798717f3269ddc1a8f7134

      SHA1

      f54f230966e957fb4fd5804b377821fcc4495fe4

      SHA256

      3c53bbc597b1ee75d172353cc0eca706665d0666472fb62c8d1937f8a1508ba8

      SHA512

      c000c43fe11d4174389ad2f2661e881fbf84d710c0b7fe9595a88a726b86fe1f855fe810ef29ff246d4a97213740da0b09e27abd844388b57ebe0e554e9917ab

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\VCRUNTIME140.dll

      Filesize

      96KB

      MD5

      f12681a472b9dd04a812e16096514974

      SHA1

      6fd102eb3e0b0e6eef08118d71f28702d1a9067c

      SHA256

      d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8

      SHA512

      7d3accbf84de73fb0c5c0de812a9ed600d39cd7ed0f99527ca86a57ce63f48765a370e913e3a46ffc2ccd48ee07d823dafdd157710eef9e7cc1eb7505dc323a2

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\VCRUNTIME140.dll

      Filesize

      96KB

      MD5

      f12681a472b9dd04a812e16096514974

      SHA1

      6fd102eb3e0b0e6eef08118d71f28702d1a9067c

      SHA256

      d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8

      SHA512

      7d3accbf84de73fb0c5c0de812a9ed600d39cd7ed0f99527ca86a57ce63f48765a370e913e3a46ffc2ccd48ee07d823dafdd157710eef9e7cc1eb7505dc323a2

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\VCRUNTIME140_1.dll

      Filesize

      37KB

      MD5

      75e78e4bf561031d39f86143753400ff

      SHA1

      324c2a99e39f8992459495182677e91656a05206

      SHA256

      1758085a61527b427c4380f0c976d29a8bee889f2ac480c356a3f166433bf70e

      SHA512

      ce4daf46bce44a89d21308c63e2de8b757a23be2630360209c4a25eb13f1f66a04fbb0a124761a33bbf34496f2f2a02b8df159b4b62f1b6241e1dbfb0e5d9756

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\VCRUNTIME140_1.dll

      Filesize

      37KB

      MD5

      75e78e4bf561031d39f86143753400ff

      SHA1

      324c2a99e39f8992459495182677e91656a05206

      SHA256

      1758085a61527b427c4380f0c976d29a8bee889f2ac480c356a3f166433bf70e

      SHA512

      ce4daf46bce44a89d21308c63e2de8b757a23be2630360209c4a25eb13f1f66a04fbb0a124761a33bbf34496f2f2a02b8df159b4b62f1b6241e1dbfb0e5d9756

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\_asyncio.pyd

      Filesize

      62KB

      MD5

      b988a4de700d7016b472534990fb91c7

      SHA1

      d53a24f4bc5cc26a1ff04292e0935b0e2aefad61

      SHA256

      91d9bf73b360ba801ba595e90dbff182ef9c682331e2d39d210999a63d4bde54

      SHA512

      bea0c0caf2d8b58aa8d066f9e475938a94320e027656d48114e988c96955d7eaad73442290fdc0ff4034484cda53a8a2a38075b667305750af3eb4ecb4c83904

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\_asyncio.pyd

      Filesize

      62KB

      MD5

      b988a4de700d7016b472534990fb91c7

      SHA1

      d53a24f4bc5cc26a1ff04292e0935b0e2aefad61

      SHA256

      91d9bf73b360ba801ba595e90dbff182ef9c682331e2d39d210999a63d4bde54

      SHA512

      bea0c0caf2d8b58aa8d066f9e475938a94320e027656d48114e988c96955d7eaad73442290fdc0ff4034484cda53a8a2a38075b667305750af3eb4ecb4c83904

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\_brotli.cp310-win_amd64.pyd

      Filesize

      861KB

      MD5

      6d44fd95c62c6415999ebc01af40574b

      SHA1

      a5aee5e107d883d1490257c9702913c12b49b22a

      SHA256

      58bacb135729a70102356c2d110651f1735bf40a602858941e13bdeabfacab4a

      SHA512

      59b6c07079f979ad4a27ec394eab3fdd2d2d15d106544246fe38f4eb1c9e12672f11d4a8efb5a2a508690ce2677edfac85eb793e2f6a5f8781b258c421119ff3

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\_brotli.cp310-win_amd64.pyd

      Filesize

      861KB

      MD5

      6d44fd95c62c6415999ebc01af40574b

      SHA1

      a5aee5e107d883d1490257c9702913c12b49b22a

      SHA256

      58bacb135729a70102356c2d110651f1735bf40a602858941e13bdeabfacab4a

      SHA512

      59b6c07079f979ad4a27ec394eab3fdd2d2d15d106544246fe38f4eb1c9e12672f11d4a8efb5a2a508690ce2677edfac85eb793e2f6a5f8781b258c421119ff3

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\_bz2.pyd

      Filesize

      81KB

      MD5

      183f1289e094220fbb2841918798598f

      SHA1

      e85072e38ab8ed17c13dd4c65dcf20ef8182672b

      SHA256

      164f1bf42630b589b50c8f0c6e55aaa8d817e439a00882be036fff3cbe8e6ded

      SHA512

      a0a5536709b0701c10b91ab1c670de80163689bd95168ea5dc5ebc11b20d84da4c639495779d0317659d6b1ce037daf34764f78759b3f0d785e33b52fa94ffad

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\_bz2.pyd

      Filesize

      81KB

      MD5

      183f1289e094220fbb2841918798598f

      SHA1

      e85072e38ab8ed17c13dd4c65dcf20ef8182672b

      SHA256

      164f1bf42630b589b50c8f0c6e55aaa8d817e439a00882be036fff3cbe8e6ded

      SHA512

      a0a5536709b0701c10b91ab1c670de80163689bd95168ea5dc5ebc11b20d84da4c639495779d0317659d6b1ce037daf34764f78759b3f0d785e33b52fa94ffad

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\_ctypes.pyd

      Filesize

      119KB

      MD5

      9872a3aeee09cf796a1190b610cf0a54

      SHA1

      9d9eaba3946f4ea8b26e952586c01b9bd8395693

      SHA256

      147b080ceb8dfd6df865570addba3864659adef4b85a20b750f3ca6735c4bf1b

      SHA512

      b49503e5db34c0a6f5dbf9aee215c55f4c5d82cb0906e37a78252d13d9c3ce9673ebda026be3b801d6c1d1d4a070ad2a9fab5c9051c9586651ad363a0b469c3f

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\_ctypes.pyd

      Filesize

      119KB

      MD5

      9872a3aeee09cf796a1190b610cf0a54

      SHA1

      9d9eaba3946f4ea8b26e952586c01b9bd8395693

      SHA256

      147b080ceb8dfd6df865570addba3864659adef4b85a20b750f3ca6735c4bf1b

      SHA512

      b49503e5db34c0a6f5dbf9aee215c55f4c5d82cb0906e37a78252d13d9c3ce9673ebda026be3b801d6c1d1d4a070ad2a9fab5c9051c9586651ad363a0b469c3f

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\_decimal.pyd

      Filesize

      244KB

      MD5

      6b07f5c49ae2af116e4d41ce7d552451

      SHA1

      6339519c7247f08aea6a10190b5d61321dfa8714

      SHA256

      04afe789eab63d204337e9edabef1e1cd003db69d66dc2cf0fc9e9e7a47304a6

      SHA512

      3fa82ee955e61913bccd58aa72448d02dfaa2636c850746258b6d19cbf2bfcc8241f9ef66618cfc7760c0b15d77625a7c450784d7ee9c09d588a091dab5801bc

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\_decimal.pyd

      Filesize

      244KB

      MD5

      6b07f5c49ae2af116e4d41ce7d552451

      SHA1

      6339519c7247f08aea6a10190b5d61321dfa8714

      SHA256

      04afe789eab63d204337e9edabef1e1cd003db69d66dc2cf0fc9e9e7a47304a6

      SHA512

      3fa82ee955e61913bccd58aa72448d02dfaa2636c850746258b6d19cbf2bfcc8241f9ef66618cfc7760c0b15d77625a7c450784d7ee9c09d588a091dab5801bc

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\_hashlib.pyd

      Filesize

      60KB

      MD5

      f883652e056ff4882e1bc900d382edab

      SHA1

      34f5d93eea4defe48135bf7000cce8cfa9e53eeb

      SHA256

      583f6d20998e45ff94400efaeecc4e17204449a0cc7ba68a20d1e8d13617f27b

      SHA512

      4df74da9feea4e06149b22d08d249b7207c7b7ab0d44a8a9ddaa7810718b28ee56c0ee8429154c28525b6f9379357293b8dece10491c32fb72d1c8c82dbde89d

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\_hashlib.pyd

      Filesize

      60KB

      MD5

      f883652e056ff4882e1bc900d382edab

      SHA1

      34f5d93eea4defe48135bf7000cce8cfa9e53eeb

      SHA256

      583f6d20998e45ff94400efaeecc4e17204449a0cc7ba68a20d1e8d13617f27b

      SHA512

      4df74da9feea4e06149b22d08d249b7207c7b7ab0d44a8a9ddaa7810718b28ee56c0ee8429154c28525b6f9379357293b8dece10491c32fb72d1c8c82dbde89d

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\_lzma.pyd

      Filesize

      154KB

      MD5

      fd4c7582bee16436bb3f790e1273eb22

      SHA1

      6d6850b03c5238fff6b53cb85f94eff965fa8992

      SHA256

      8aa5cd82d775ea718d3ddd270f0b28985d8711ef937447ee2168318200f0eb80

      SHA512

      c508bea6e1eed5b71b3e78d0817c6fce27152f6bc539fea94c7923183339c1559655b74808ef0403dbc458e037342de97c3b01e06e7b7f56ce152267f8db8a80

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\_lzma.pyd

      Filesize

      154KB

      MD5

      fd4c7582bee16436bb3f790e1273eb22

      SHA1

      6d6850b03c5238fff6b53cb85f94eff965fa8992

      SHA256

      8aa5cd82d775ea718d3ddd270f0b28985d8711ef937447ee2168318200f0eb80

      SHA512

      c508bea6e1eed5b71b3e78d0817c6fce27152f6bc539fea94c7923183339c1559655b74808ef0403dbc458e037342de97c3b01e06e7b7f56ce152267f8db8a80

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\_overlapped.pyd

      Filesize

      47KB

      MD5

      f6d69dac927d18c3596f490bbb642b8e

      SHA1

      c40db435db3e1aeb2c3cb03635f74a92be54657d

      SHA256

      b4c2156119bee84c5d153415d9fe802825a7179877b8943dc00c38a5c985eb7d

      SHA512

      30ec35604d957ba5961590a91b88f6cb209a1d09ad43c5f24195617ff9002fd6a3f359676e4844c5793348ea9be9611d759a4fc92e8b46752e357398f8fb09e4

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\_overlapped.pyd

      Filesize

      47KB

      MD5

      f6d69dac927d18c3596f490bbb642b8e

      SHA1

      c40db435db3e1aeb2c3cb03635f74a92be54657d

      SHA256

      b4c2156119bee84c5d153415d9fe802825a7179877b8943dc00c38a5c985eb7d

      SHA512

      30ec35604d957ba5961590a91b88f6cb209a1d09ad43c5f24195617ff9002fd6a3f359676e4844c5793348ea9be9611d759a4fc92e8b46752e357398f8fb09e4

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\_queue.pyd

      Filesize

      29KB

      MD5

      1ac1d8599977b0731665ba01e946f481

      SHA1

      a90181902acd3262920f1e7f11d030cd086d57c7

      SHA256

      c6d4f9c54efe7536bba4f9a2a4e7da46c5af74771ea2fa881287c61db9676986

      SHA512

      473b7fba46339eaad4c1680491c2d533f005fc5ddef2104f3d3600145c0368a79757068b9b78017cf9700c7167f23b77beb84ee522472234c32d0c5287dd80d1

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\_queue.pyd

      Filesize

      29KB

      MD5

      1ac1d8599977b0731665ba01e946f481

      SHA1

      a90181902acd3262920f1e7f11d030cd086d57c7

      SHA256

      c6d4f9c54efe7536bba4f9a2a4e7da46c5af74771ea2fa881287c61db9676986

      SHA512

      473b7fba46339eaad4c1680491c2d533f005fc5ddef2104f3d3600145c0368a79757068b9b78017cf9700c7167f23b77beb84ee522472234c32d0c5287dd80d1

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\_socket.pyd

      Filesize

      75KB

      MD5

      f73b9863071fb3088c08605f76b8e909

      SHA1

      e74bc96f45e1e0c283a93dc1a07e497cf724ff55

      SHA256

      8efdbacf67c223f47b608e57222cf80dd12cee163945847f6cfa9ea6c26ada36

      SHA512

      cc414add8e017c805d3d822b94781ef6a1c4260f959cb3c9825eabe35522af7c9f47796e4eea4b77d176c29030141dd92fd8119a7ed6b60248144e55b9da1c5c

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\_socket.pyd

      Filesize

      75KB

      MD5

      f73b9863071fb3088c08605f76b8e909

      SHA1

      e74bc96f45e1e0c283a93dc1a07e497cf724ff55

      SHA256

      8efdbacf67c223f47b608e57222cf80dd12cee163945847f6cfa9ea6c26ada36

      SHA512

      cc414add8e017c805d3d822b94781ef6a1c4260f959cb3c9825eabe35522af7c9f47796e4eea4b77d176c29030141dd92fd8119a7ed6b60248144e55b9da1c5c

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\_ssl.pyd

      Filesize

      155KB

      MD5

      955b117ae363945352c6ba5a18163736

      SHA1

      0b85d366b38120157e65f5a19551c42569b1a6f5

      SHA256

      09fdf00110acfa4c3239de64d7955a625195625745559432a13e97c9d0e01368

      SHA512

      02f3e1a25f92b2b86e3883bb6ae2f1bfbffd6695bcb56e301bc157d38f205565e58b598f382220778da0ccf3e90f7ee9fd1e44e64cb387a7a5c00df00aafe57b

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\_ssl.pyd

      Filesize

      155KB

      MD5

      955b117ae363945352c6ba5a18163736

      SHA1

      0b85d366b38120157e65f5a19551c42569b1a6f5

      SHA256

      09fdf00110acfa4c3239de64d7955a625195625745559432a13e97c9d0e01368

      SHA512

      02f3e1a25f92b2b86e3883bb6ae2f1bfbffd6695bcb56e301bc157d38f205565e58b598f382220778da0ccf3e90f7ee9fd1e44e64cb387a7a5c00df00aafe57b

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\_tkinter.pyd

      Filesize

      63KB

      MD5

      dea4e7b79d307cda01a7cc983bce35ce

      SHA1

      b2497b7b209bf63e868538a37e9a398e8ba13d7c

      SHA256

      072ca785120b78644549e6da6ab742003d81f098831c9f969a51dbe50e5213d3

      SHA512

      f625ae5bbad6a8c29c2959d2096fbf322816a51dbe0809cc471d35fd93e9cd97259709890766a1e1109f90a029ec6ef3d521d705b09b78025822927f66307908

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\_tkinter.pyd

      Filesize

      63KB

      MD5

      dea4e7b79d307cda01a7cc983bce35ce

      SHA1

      b2497b7b209bf63e868538a37e9a398e8ba13d7c

      SHA256

      072ca785120b78644549e6da6ab742003d81f098831c9f969a51dbe50e5213d3

      SHA512

      f625ae5bbad6a8c29c2959d2096fbf322816a51dbe0809cc471d35fd93e9cd97259709890766a1e1109f90a029ec6ef3d521d705b09b78025822927f66307908

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\base_library.zip

      Filesize

      1.0MB

      MD5

      7d73ddb5cae408c43f0557d80e0290b2

      SHA1

      21829515e5931d85c1e249cdf2e6c69b8cade788

      SHA256

      a7733efae58fc9b64ab6c79876f69035acfc383291a93bcd462e3f88851e9ee0

      SHA512

      6d471af4d1713625a6b3c47841f06be05a33b9d1871c2afc98e3c6ddb89749e69347567fbfa0d9c7a73d010fde8f2af12c00e94aba0484b3d02d3d43ce3c9adb

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\customtkinter\assets\themes\blue.json

      Filesize

      4KB

      MD5

      c7c493acfcb9b881f976b8b114d856dd

      SHA1

      e0d93ebc8992e6b708dccf892b9c00428148f114

      SHA256

      6d316999cead382dc90dbe985dc125d278971af3391009e9bbadcbcd4b0358a6

      SHA512

      906792109c4debd92de5d8206cdfdf85747f5d9ba407bfca381405a0c7eccffbfaa9092acf22666c2f6dda573361cdaedecb9ad0b6c18db0ec7a304ff321055e

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\customtkinter\assets\themes\dark-blue.json

      Filesize

      4KB

      MD5

      7cb2d3ba6d6564dd6ff91ba9bbc92b23

      SHA1

      0b51381d73c41f0f902cb3950154916d0197f14e

      SHA256

      522439484e3487156a6c68a54d232250700356f8659d19a217d58eaaa1543074

      SHA512

      abbf2f4dd2594b392196d44feb3a33034835e433bc19c297e272cba11bee57ba70e539e2d81b54c97b6913a790bb42869f1b841e62376d55c0061c4db37d7829

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\libcrypto-1_1.dll

      Filesize

      3.3MB

      MD5

      6f4b8eb45a965372156086201207c81f

      SHA1

      8278f9539463f0a45009287f0516098cb7a15406

      SHA256

      976ce72efd0a8aeeb6e21ad441aa9138434314ea07f777432205947cdb149541

      SHA512

      2c5c54842aba9c82fb9e7594ae9e264ac3cbdc2cc1cd22263e9d77479b93636799d0f28235ac79937070e40b04a097c3ea3b7e0cd4376a95ed8ca90245b7891f

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\libcrypto-1_1.dll

      Filesize

      3.3MB

      MD5

      6f4b8eb45a965372156086201207c81f

      SHA1

      8278f9539463f0a45009287f0516098cb7a15406

      SHA256

      976ce72efd0a8aeeb6e21ad441aa9138434314ea07f777432205947cdb149541

      SHA512

      2c5c54842aba9c82fb9e7594ae9e264ac3cbdc2cc1cd22263e9d77479b93636799d0f28235ac79937070e40b04a097c3ea3b7e0cd4376a95ed8ca90245b7891f

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\libcrypto-1_1.dll

      Filesize

      3.3MB

      MD5

      6f4b8eb45a965372156086201207c81f

      SHA1

      8278f9539463f0a45009287f0516098cb7a15406

      SHA256

      976ce72efd0a8aeeb6e21ad441aa9138434314ea07f777432205947cdb149541

      SHA512

      2c5c54842aba9c82fb9e7594ae9e264ac3cbdc2cc1cd22263e9d77479b93636799d0f28235ac79937070e40b04a097c3ea3b7e0cd4376a95ed8ca90245b7891f

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\libffi-7.dll

      Filesize

      32KB

      MD5

      eef7981412be8ea459064d3090f4b3aa

      SHA1

      c60da4830ce27afc234b3c3014c583f7f0a5a925

      SHA256

      f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081

      SHA512

      dc9ff4202f74a13ca9949a123dff4c0223da969f49e9348feaf93da4470f7be82cfa1d392566eaaa836d77dde7193fed15a8395509f72a0e9f97c66c0a096016

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\libffi-7.dll

      Filesize

      32KB

      MD5

      eef7981412be8ea459064d3090f4b3aa

      SHA1

      c60da4830ce27afc234b3c3014c583f7f0a5a925

      SHA256

      f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081

      SHA512

      dc9ff4202f74a13ca9949a123dff4c0223da969f49e9348feaf93da4470f7be82cfa1d392566eaaa836d77dde7193fed15a8395509f72a0e9f97c66c0a096016

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\libssl-1_1.dll

      Filesize

      686KB

      MD5

      8769adafca3a6fc6ef26f01fd31afa84

      SHA1

      38baef74bdd2e941ccd321f91bfd49dacc6a3cb6

      SHA256

      2aebb73530d21a2273692a5a3d57235b770daf1c35f60c74e01754a5dac05071

      SHA512

      fac22f1a2ffbfb4789bdeed476c8daf42547d40efe3e11b41fadbc4445bb7ca77675a31b5337df55fdeb4d2739e0fb2cbcac2feabfd4cd48201f8ae50a9bd90b

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\libssl-1_1.dll

      Filesize

      686KB

      MD5

      8769adafca3a6fc6ef26f01fd31afa84

      SHA1

      38baef74bdd2e941ccd321f91bfd49dacc6a3cb6

      SHA256

      2aebb73530d21a2273692a5a3d57235b770daf1c35f60c74e01754a5dac05071

      SHA512

      fac22f1a2ffbfb4789bdeed476c8daf42547d40efe3e11b41fadbc4445bb7ca77675a31b5337df55fdeb4d2739e0fb2cbcac2feabfd4cd48201f8ae50a9bd90b

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\psutil\_psutil_windows.pyd

      Filesize

      75KB

      MD5

      5e9fc79283d08421683cb9e08ae5bf15

      SHA1

      b3021534d2647d90cd6d445772d2e362a04d5ddf

      SHA256

      d5685e38faccdf97ce6ffe4cf53cbfcf48bb20bf83abe316fba81d1abd093cb6

      SHA512

      9133011ae8eb0110da9f72a18d26bbc57098a74983af8374d1247b9a336ee32db287ed26f4d010d31a7d64eacdc9cf99a75faab194eff25b04299e5761af1a79

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\psutil\_psutil_windows.pyd

      Filesize

      75KB

      MD5

      5e9fc79283d08421683cb9e08ae5bf15

      SHA1

      b3021534d2647d90cd6d445772d2e362a04d5ddf

      SHA256

      d5685e38faccdf97ce6ffe4cf53cbfcf48bb20bf83abe316fba81d1abd093cb6

      SHA512

      9133011ae8eb0110da9f72a18d26bbc57098a74983af8374d1247b9a336ee32db287ed26f4d010d31a7d64eacdc9cf99a75faab194eff25b04299e5761af1a79

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\pyexpat.pyd

      Filesize

      193KB

      MD5

      3a283295d506a8c86ab643ce2c743223

      SHA1

      e45de5dea739cc089da1d9449d8f8a9bfd0aadde

      SHA256

      1f8c0a490e6d0b9c16a58abb01398b4642fba73797b714df5a5418051248422b

      SHA512

      c56b853cd856b7d7a5da5444f41aedfc5a9fef9865194006a0073f90f162d50b22eeb953d1f8aa2a5395188636451016f9332126fc9d2399800da4ab7d80c6fc

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\pyexpat.pyd

      Filesize

      193KB

      MD5

      3a283295d506a8c86ab643ce2c743223

      SHA1

      e45de5dea739cc089da1d9449d8f8a9bfd0aadde

      SHA256

      1f8c0a490e6d0b9c16a58abb01398b4642fba73797b714df5a5418051248422b

      SHA512

      c56b853cd856b7d7a5da5444f41aedfc5a9fef9865194006a0073f90f162d50b22eeb953d1f8aa2a5395188636451016f9332126fc9d2399800da4ab7d80c6fc

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\python3.DLL

      Filesize

      63KB

      MD5

      4d9aacd447860f04a8f29472860a8362

      SHA1

      b0e8f5640c7b01c5eb3671d725c450bad9d4ca62

      SHA256

      82fc45243160de816b82c1c0412437bd677f0d1e53088416555a6e9e889734e9

      SHA512

      98726cb9a1d1ca0e60b7433090bbdd55411893551280883a120ca733e49d07be4012ee6ed43148a33d16635d726cd4a1214f4371b059d31ccd685aa2af7db2dd

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\python3.dll

      Filesize

      63KB

      MD5

      4d9aacd447860f04a8f29472860a8362

      SHA1

      b0e8f5640c7b01c5eb3671d725c450bad9d4ca62

      SHA256

      82fc45243160de816b82c1c0412437bd677f0d1e53088416555a6e9e889734e9

      SHA512

      98726cb9a1d1ca0e60b7433090bbdd55411893551280883a120ca733e49d07be4012ee6ed43148a33d16635d726cd4a1214f4371b059d31ccd685aa2af7db2dd

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\python3.dll

      Filesize

      63KB

      MD5

      4d9aacd447860f04a8f29472860a8362

      SHA1

      b0e8f5640c7b01c5eb3671d725c450bad9d4ca62

      SHA256

      82fc45243160de816b82c1c0412437bd677f0d1e53088416555a6e9e889734e9

      SHA512

      98726cb9a1d1ca0e60b7433090bbdd55411893551280883a120ca733e49d07be4012ee6ed43148a33d16635d726cd4a1214f4371b059d31ccd685aa2af7db2dd

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\python310.dll

      Filesize

      4.3MB

      MD5

      342ba224fe440b585db4e9d2fc9f86cd

      SHA1

      bfa3d380231166f7c2603ca89a984a5cad9752ab

      SHA256

      cdb8158dcf4f10517bd73e1334fc354fd98180d4455f29e3df2b0aa699fa2432

      SHA512

      daa990ff3770a39b778f672f2596ab4050bff9b16bb2222e5712327df82d18f39ac5100e3b592a5db9e88302e6e94c06881fbf61431e7670ff287f7f222254c1

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\python310.dll

      Filesize

      4.3MB

      MD5

      342ba224fe440b585db4e9d2fc9f86cd

      SHA1

      bfa3d380231166f7c2603ca89a984a5cad9752ab

      SHA256

      cdb8158dcf4f10517bd73e1334fc354fd98180d4455f29e3df2b0aa699fa2432

      SHA512

      daa990ff3770a39b778f672f2596ab4050bff9b16bb2222e5712327df82d18f39ac5100e3b592a5db9e88302e6e94c06881fbf61431e7670ff287f7f222254c1

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\select.pyd

      Filesize

      28KB

      MD5

      fcacfa9c2694118ccc3cd6956949ce15

      SHA1

      e01aa8957f39133a4c77bbb03d1c3af5a5d9649b

      SHA256

      2bfa63b823c54d6b3c55dc17e446129fc02ca930d247abadbc7680f0f71d03a6

      SHA512

      57ca335b941059d5fe65e2cecf95bd59c02515d1f15da212cc845c77f673cc749ee77eb4381787a4b357cec8a722c37c991789d6ee872d5130b32d78c10468d3

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\select.pyd

      Filesize

      28KB

      MD5

      fcacfa9c2694118ccc3cd6956949ce15

      SHA1

      e01aa8957f39133a4c77bbb03d1c3af5a5d9649b

      SHA256

      2bfa63b823c54d6b3c55dc17e446129fc02ca930d247abadbc7680f0f71d03a6

      SHA512

      57ca335b941059d5fe65e2cecf95bd59c02515d1f15da212cc845c77f673cc749ee77eb4381787a4b357cec8a722c37c991789d6ee872d5130b32d78c10468d3

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\simplejson\_speedups.cp310-win_amd64.pyd

      Filesize

      44KB

      MD5

      d6ae1cc799e7e8005915152c61a41ed3

      SHA1

      7de4237291e870e2f830a65986bbe74dbf81ba2b

      SHA256

      05d78b69e5486a0cf9c18a133a458900523167c9179c7b5f7bed056cc5e5a8d5

      SHA512

      24e153dcf874596f8cab9af6344e0e9daf4c2555cc504e6170f347b1c31c3b5d293afc22daf97239f7c0628ceba4433f11aa4771c40e37694db7354ceaeb26e4

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\simplejson\_speedups.cp310-win_amd64.pyd

      Filesize

      44KB

      MD5

      d6ae1cc799e7e8005915152c61a41ed3

      SHA1

      7de4237291e870e2f830a65986bbe74dbf81ba2b

      SHA256

      05d78b69e5486a0cf9c18a133a458900523167c9179c7b5f7bed056cc5e5a8d5

      SHA512

      24e153dcf874596f8cab9af6344e0e9daf4c2555cc504e6170f347b1c31c3b5d293afc22daf97239f7c0628ceba4433f11aa4771c40e37694db7354ceaeb26e4

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\tcl86t.dll

      Filesize

      1.8MB

      MD5

      75909678c6a79ca2ca780a1ceb00232e

      SHA1

      39ddbeb1c288335abe910a5011d7034345425f7d

      SHA256

      fbfd065f861ec0a90dd513bc209c56bbc23c54d2839964a0ec2df95848af7860

      SHA512

      91689413826d3b2e13fc7f579a71b676547bc4c06d2bb100b4168def12ab09b65359d1612b31a15d21cb55147bbab4934e6711351a0440c1533fb94fe53313bf

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\tcl86t.dll

      Filesize

      1.8MB

      MD5

      75909678c6a79ca2ca780a1ceb00232e

      SHA1

      39ddbeb1c288335abe910a5011d7034345425f7d

      SHA256

      fbfd065f861ec0a90dd513bc209c56bbc23c54d2839964a0ec2df95848af7860

      SHA512

      91689413826d3b2e13fc7f579a71b676547bc4c06d2bb100b4168def12ab09b65359d1612b31a15d21cb55147bbab4934e6711351a0440c1533fb94fe53313bf

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\tcl\encoding\cp1252.enc

      Filesize

      1KB

      MD5

      e9117326c06fee02c478027cb625c7d8

      SHA1

      2ed4092d573289925a5b71625cf43cc82b901daf

      SHA256

      741859cf238c3a63bbb20ec6ed51e46451372bb221cfff438297d261d0561c2e

      SHA512

      d0a39bc41adc32f2f20b1a0ebad33bf48dfa6ed5cc1d8f92700cdd431db6c794c09d9f08bb5709b394acf54116c3a1e060e2abcc6b503e1501f8364d3eebcd52

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\tcl\init.tcl

      Filesize

      25KB

      MD5

      982eae7a49263817d83f744ffcd00c0e

      SHA1

      81723dfea5576a0916abeff639debe04ce1d2c83

      SHA256

      331bcf0f9f635bd57c3384f2237260d074708b0975c700cfcbdb285f5f59ab1f

      SHA512

      31370d8390c4608e7a727eed9ee7f4c568ecb913ae50184b6f105da9c030f3b9f4b5f17968d8975b2f60df1b0c5e278512e74267c935fe4ec28f689ac6a97129

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\tcl\tclIndex

      Filesize

      5KB

      MD5

      c62fb22f4c9a3eff286c18421397aaf4

      SHA1

      4a49b8768cff68f2effaf21264343b7c632a51b2

      SHA256

      ddf7e42def37888ad0a564aa4f8ca95f4eec942cebebfca851d35515104d5c89

      SHA512

      558d401cb6af8ce3641af55caebc9c5005ab843ee84f60c6d55afbbc7f7129da9c58c2f55c887c3159107546fa6bc13ffc4cca63ea8841d7160b8aa99161a185

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\tk86t.dll

      Filesize

      1.5MB

      MD5

      4b6270a72579b38c1cc83f240fb08360

      SHA1

      1a161a014f57fe8aa2fadaab7bc4f9faaac368de

      SHA256

      cd2f60075064dfc2e65c88b239a970cb4bd07cb3eec7cc26fb1bf978d4356b08

      SHA512

      0c81434d8c205892bba8a4c93ff8fc011fb8cfb72cfec172cf69093651b86fd9837050bd0636315840290b28af83e557f2205a03e5c344239356874fce0c72b9

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\tk86t.dll

      Filesize

      1.5MB

      MD5

      4b6270a72579b38c1cc83f240fb08360

      SHA1

      1a161a014f57fe8aa2fadaab7bc4f9faaac368de

      SHA256

      cd2f60075064dfc2e65c88b239a970cb4bd07cb3eec7cc26fb1bf978d4356b08

      SHA512

      0c81434d8c205892bba8a4c93ff8fc011fb8cfb72cfec172cf69093651b86fd9837050bd0636315840290b28af83e557f2205a03e5c344239356874fce0c72b9

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\unicodedata.pyd

      Filesize

      1.1MB

      MD5

      1218db005c9c809ab151e3fc15f4c41e

      SHA1

      e53cd5c9a4e39ed30e871aea0aef67294cbf4130

      SHA256

      a84f488f2ae2a74268da36bd8c3fe7b6e8d2b9b89a3c99f5173a827a8ddca2f4

      SHA512

      28c9c031b881b6c585e5fdda006f8c7c257c55ad15651dda6412e26f52d0e6acfaa58547da7e04b5a52c0f9962e94e5d7e48679733e0495b335cb6a37851758f

    • C:\Users\Admin\AppData\Local\Temp\_MEI9002\unicodedata.pyd

      Filesize

      1.1MB

      MD5

      1218db005c9c809ab151e3fc15f4c41e

      SHA1

      e53cd5c9a4e39ed30e871aea0aef67294cbf4130

      SHA256

      a84f488f2ae2a74268da36bd8c3fe7b6e8d2b9b89a3c99f5173a827a8ddca2f4

      SHA512

      28c9c031b881b6c585e5fdda006f8c7c257c55ad15651dda6412e26f52d0e6acfaa58547da7e04b5a52c0f9962e94e5d7e48679733e0495b335cb6a37851758f

    • memory/3676-157-0x0000000000000000-mapping.dmp

    • memory/4580-132-0x0000000000000000-mapping.dmp