Analysis

  • max time kernel
    150s
  • max time network
    129s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-03-2023 14:04

General

  • Target

    CuatroQuintos_setup.exe

  • Size

    21.9MB

  • MD5

    fdd7ae19112850292609313b406cca18

  • SHA1

    e12777831524f7481ace5e2e5f4c6cf15306a9cb

  • SHA256

    0779e4566cc7627e1bbec517148ab1b2a89600d1a1ad291e68a79f6910b911b1

  • SHA512

    44f8193f733011e2f30b9391bd023bc7dd12bf68cd00b12514f33d382b952ac179f9f10ffbdfc3a4f08d8ff3a3eee88fa9b79026d55e0201fcde030a9d71c3ab

  • SSDEEP

    393216:e2yWEUqISHMt49tLtaD5q1B7giGVpDKqx8T+7iyy2rq0UEdCcpG/k:eSE/ISHfzw43GfDKo8yQhjABpGc

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 64 IoCs
  • Detects Pyinstaller 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Checks SCSI registry key(s) 3 TTPs 4 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\CuatroQuintos_setup.exe
    "C:\Users\Admin\AppData\Local\Temp\CuatroQuintos_setup.exe"
    1⤵
    • Loads dropped DLL
    PID:3796
  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\CuatroQuintos.exe
    "C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\CuatroQuintos.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Checks SCSI registry key(s)
    • Suspicious use of SetWindowsHookEx
    PID:804
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x49c 0x430
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:920

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nsn696E.tmp\System.dll

    Filesize

    12KB

    MD5

    cff85c549d536f651d4fb8387f1976f2

    SHA1

    d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e

    SHA256

    8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8

    SHA512

    531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88

  • C:\Users\Admin\AppData\Local\Temp\nsn696E.tmp\modern-wizard.bmp

    Filesize

    25KB

    MD5

    cbe40fd2b1ec96daedc65da172d90022

    SHA1

    366c216220aa4329dff6c485fd0e9b0f4f0a7944

    SHA256

    3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2

    SHA512

    62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63

  • C:\Users\Admin\AppData\Local\Temp\nsn696E.tmp\nsDialogs.dll

    Filesize

    9KB

    MD5

    6c3f8c94d0727894d706940a8a980543

    SHA1

    0d1bcad901be377f38d579aafc0c41c0ef8dcefd

    SHA256

    56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2

    SHA512

    2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\CuatroQuintos.exe

    Filesize

    5.8MB

    MD5

    4d96571255510e619e7ae9f6e4feaae9

    SHA1

    587e2743eecadba8cdbc09a1a71aa3ee2736190d

    SHA256

    b80623ca29d12ffbd7fce2591572dc59d576f09ba254e0c8cd3c862808e72e55

    SHA512

    ca1646d210645467e8e2949d5158aada9a74f9ee073bd932d2968ca5fc9fd7e8f4cf9b92bcb40232563b37ba1dae9ca17a7ba204c339dd9d1f9a3093f8dd92f5

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\CuatroQuintos.exe

    Filesize

    5.8MB

    MD5

    4d96571255510e619e7ae9f6e4feaae9

    SHA1

    587e2743eecadba8cdbc09a1a71aa3ee2736190d

    SHA256

    b80623ca29d12ffbd7fce2591572dc59d576f09ba254e0c8cd3c862808e72e55

    SHA512

    ca1646d210645467e8e2949d5158aada9a74f9ee073bd932d2968ca5fc9fd7e8f4cf9b92bcb40232563b37ba1dae9ca17a7ba204c339dd9d1f9a3093f8dd92f5

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\VCRUNTIME140.dll

    Filesize

    106KB

    MD5

    870fea4e961e2fbd00110d3783e529be

    SHA1

    a948e65c6f73d7da4ffde4e8533c098a00cc7311

    SHA256

    76fdb83fde238226b5bebaf3392ee562e2cb7ca8d3ef75983bf5f9d6c7119644

    SHA512

    0b636a3cdefa343eb4cb228b391bb657b5b4c20df62889cd1be44c7bee94ffad6ec82dc4db79949edef576bff57867e0d084e0a597bf7bf5c8e4ed1268477e88

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\VCRUNTIME140.dll

    Filesize

    106KB

    MD5

    870fea4e961e2fbd00110d3783e529be

    SHA1

    a948e65c6f73d7da4ffde4e8533c098a00cc7311

    SHA256

    76fdb83fde238226b5bebaf3392ee562e2cb7ca8d3ef75983bf5f9d6c7119644

    SHA512

    0b636a3cdefa343eb4cb228b391bb657b5b4c20df62889cd1be44c7bee94ffad6ec82dc4db79949edef576bff57867e0d084e0a597bf7bf5c8e4ed1268477e88

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\_bz2.pyd

    Filesize

    81KB

    MD5

    10d42efac304861ad19821b4594fa959

    SHA1

    1a65f60bba991bc7e9322af1e19f193dae76d77a

    SHA256

    8eecdcc250637652e6babc306ea6b8820e9e835ddd2434816d0e0fd0ca67fd14

    SHA512

    3f16dba627a133586e9d1c16d383b9461424d31892278ab984f7e6932a1cdc51445e1bec017a665bd66c0f2a9ba417387fecc5fdede36d67f8343b82a2ceb9ae

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\_bz2.pyd

    Filesize

    81KB

    MD5

    10d42efac304861ad19821b4594fa959

    SHA1

    1a65f60bba991bc7e9322af1e19f193dae76d77a

    SHA256

    8eecdcc250637652e6babc306ea6b8820e9e835ddd2434816d0e0fd0ca67fd14

    SHA512

    3f16dba627a133586e9d1c16d383b9461424d31892278ab984f7e6932a1cdc51445e1bec017a665bd66c0f2a9ba417387fecc5fdede36d67f8343b82a2ceb9ae

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\_ctypes.pyd

    Filesize

    120KB

    MD5

    df6be515e183a0e4dbe9cdda17836664

    SHA1

    a5e8796189631c1aaca6b1c40bc5a23eb20b85db

    SHA256

    af598ae52ddc6869f24d36a483b77988385a5bbbf4618b2e2630d89d10a107ee

    SHA512

    b3f23530de7386cc4dcf6ad39141240e56d36322e3d4041e40d69d80dd529d1f8ef5f65b55cdca9641e378603b5252acfe5d50f39f0c6032fd4c307f73ef9253

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\_ctypes.pyd

    Filesize

    120KB

    MD5

    df6be515e183a0e4dbe9cdda17836664

    SHA1

    a5e8796189631c1aaca6b1c40bc5a23eb20b85db

    SHA256

    af598ae52ddc6869f24d36a483b77988385a5bbbf4618b2e2630d89d10a107ee

    SHA512

    b3f23530de7386cc4dcf6ad39141240e56d36322e3d4041e40d69d80dd529d1f8ef5f65b55cdca9641e378603b5252acfe5d50f39f0c6032fd4c307f73ef9253

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\_lzma.pyd

    Filesize

    153KB

    MD5

    3230404a7191c6228a8772d3610e49e5

    SHA1

    4e8e36c89b4ff440ddff9a5b084b262c9b2394ec

    SHA256

    33ae42f744d2688bb7d5519f32ff7b7489b96f4eea47f66d2009dba6a0023903

    SHA512

    6ecce0c8e8b3d42275d486e8ff495e81e36adaaacaaa3db37844e204fcdaa6d89cb3d81c43d9e16d938cd8b6671b8800fe74a1e723a9187b0566a8f3c39d5d5b

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\_lzma.pyd

    Filesize

    153KB

    MD5

    3230404a7191c6228a8772d3610e49e5

    SHA1

    4e8e36c89b4ff440ddff9a5b084b262c9b2394ec

    SHA256

    33ae42f744d2688bb7d5519f32ff7b7489b96f4eea47f66d2009dba6a0023903

    SHA512

    6ecce0c8e8b3d42275d486e8ff495e81e36adaaacaaa3db37844e204fcdaa6d89cb3d81c43d9e16d938cd8b6671b8800fe74a1e723a9187b0566a8f3c39d5d5b

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\_queue.pyd

    Filesize

    30KB

    MD5

    045ef55136b1e580582199b3399267a2

    SHA1

    de54519c67a996d0a8b4164417058f4610a57376

    SHA256

    39bd456267fe228a505ef4e9c8d28f948dd65123cb4d48b77da51910013fa582

    SHA512

    7b764fdc92bf10eb05bdd4116a549de67f0fa92f807d8b0eca9d718361c546dbec16ea68ef8ddec1c417530c6eb234c657e45f8c522852ab1bd7cb21976dad1c

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\_queue.pyd

    Filesize

    30KB

    MD5

    045ef55136b1e580582199b3399267a2

    SHA1

    de54519c67a996d0a8b4164417058f4610a57376

    SHA256

    39bd456267fe228a505ef4e9c8d28f948dd65123cb4d48b77da51910013fa582

    SHA512

    7b764fdc92bf10eb05bdd4116a549de67f0fa92f807d8b0eca9d718361c546dbec16ea68ef8ddec1c417530c6eb234c657e45f8c522852ab1bd7cb21976dad1c

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\_socket.pyd

    Filesize

    76KB

    MD5

    0fc65ec300553d8070e6b44b9b23b8c0

    SHA1

    f8db6af578cf417cfcddb2ed798c571c1abd878f

    SHA256

    360744663fce8dec252abbda1168f470244fdb6da5740bb7ab3171e19106e63c

    SHA512

    cba375a815db973b4e8babda951d1a4ca90a976e9806e9a62520a0729937d25de8e600e79a7a638d77df7f47001d8f884e88ee4497bd1e05c1dae6fa67fb3dd8

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\_socket.pyd

    Filesize

    76KB

    MD5

    0fc65ec300553d8070e6b44b9b23b8c0

    SHA1

    f8db6af578cf417cfcddb2ed798c571c1abd878f

    SHA256

    360744663fce8dec252abbda1168f470244fdb6da5740bb7ab3171e19106e63c

    SHA512

    cba375a815db973b4e8babda951d1a4ca90a976e9806e9a62520a0729937d25de8e600e79a7a638d77df7f47001d8f884e88ee4497bd1e05c1dae6fa67fb3dd8

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\base_library.zip

    Filesize

    1.7MB

    MD5

    c6b150f2eca4eec01765bdae9a78e097

    SHA1

    1eaf2a18863af05d4f8183978ea6ecadd21ed3de

    SHA256

    b8e074772e3f8203de0e4313ac274de4d4e5b5e847a3fe3dc4171413ea2a4502

    SHA512

    697cdcd1f23cf67683836cca593df643f3f2d3f139fdbf86bf990bd7c29a6721d8199fbff491cb234d2fb65bcd4f32f07796b8b522b895a52095d17628beb846

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\libffi-8.dll

    Filesize

    37KB

    MD5

    d86a9d75380fab7640bb950aeb05e50e

    SHA1

    1c61aaf9022cd1f09a959f7b2a65fb1372d187d7

    SHA256

    68fba9dd89bfad35f8fd657b9af22a8aebda31bffda35058a7f5ae376136e89b

    SHA512

    18437e64061221be411a1587f634b4b8efa60e661dbc35fd96a6d0e7eff812752de0ada755c01f286efefc47fb5f2daf07953b4cfc4119121b6bee7756c88d0f

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\libffi-8.dll

    Filesize

    37KB

    MD5

    d86a9d75380fab7640bb950aeb05e50e

    SHA1

    1c61aaf9022cd1f09a959f7b2a65fb1372d187d7

    SHA256

    68fba9dd89bfad35f8fd657b9af22a8aebda31bffda35058a7f5ae376136e89b

    SHA512

    18437e64061221be411a1587f634b4b8efa60e661dbc35fd96a6d0e7eff812752de0ada755c01f286efefc47fb5f2daf07953b4cfc4119121b6bee7756c88d0f

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pyexpat.pyd

    Filesize

    193KB

    MD5

    4378685011241d01248dd60fc9cb5436

    SHA1

    d754286af98f5ae2ee82883669d509e105413ed1

    SHA256

    867012edb8a6acd2131c4698b69bb94e6ba07607035e7c621aaa24262817e55b

    SHA512

    f9ed5957de5846b97cd8dc8ef8cf876b3192c03afd148541053b31d1237ead67ca287dc95e109b70305a3eb1422d32d6bec1cd7598c79c718469d88ac2e82575

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pyexpat.pyd

    Filesize

    193KB

    MD5

    4378685011241d01248dd60fc9cb5436

    SHA1

    d754286af98f5ae2ee82883669d509e105413ed1

    SHA256

    867012edb8a6acd2131c4698b69bb94e6ba07607035e7c621aaa24262817e55b

    SHA512

    f9ed5957de5846b97cd8dc8ef8cf876b3192c03afd148541053b31d1237ead67ca287dc95e109b70305a3eb1422d32d6bec1cd7598c79c718469d88ac2e82575

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\SDL2.dll

    Filesize

    2.2MB

    MD5

    5a2819c823a5af53420511a1ceb7a9aa

    SHA1

    3b80b1228631abbb7f2745828a25cbce0d9dce09

    SHA256

    81c70b7bfa5690b0ff20c15caa499f615a82cf5b49d278da89265eb836036465

    SHA512

    da85ca5a8666eb5a2a4bc6b0c9e2f7b7811eb22fe1632a8604274f4fdd5b4303e8943b85cdacb4a3378261d1c0c2d754f4db372294a7146c26a9a546ba83b399

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\SDL2.dll

    Filesize

    2.2MB

    MD5

    5a2819c823a5af53420511a1ceb7a9aa

    SHA1

    3b80b1228631abbb7f2745828a25cbce0d9dce09

    SHA256

    81c70b7bfa5690b0ff20c15caa499f615a82cf5b49d278da89265eb836036465

    SHA512

    da85ca5a8666eb5a2a4bc6b0c9e2f7b7811eb22fe1632a8604274f4fdd5b4303e8943b85cdacb4a3378261d1c0c2d754f4db372294a7146c26a9a546ba83b399

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\base.cp311-win_amd64.pyd

    Filesize

    29KB

    MD5

    abeb7546d8b7008bacfa70e020fdf063

    SHA1

    5866b6e9f7eeac35efd2f7617f5a9bb5e6d21683

    SHA256

    f27789e3b1b38ef3eaafb067475562f7de41c6c8575220adb6bdc39d0267a4af

    SHA512

    42a811040045e182f607a284cefe65bef6b5d1673e41887fead08508698cfe1751eb86ea873d84620c59df00d8f863b5355867ccbb1f0758e83cf7461f69b6d0

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\base.cp311-win_amd64.pyd

    Filesize

    29KB

    MD5

    abeb7546d8b7008bacfa70e020fdf063

    SHA1

    5866b6e9f7eeac35efd2f7617f5a9bb5e6d21683

    SHA256

    f27789e3b1b38ef3eaafb067475562f7de41c6c8575220adb6bdc39d0267a4af

    SHA512

    42a811040045e182f607a284cefe65bef6b5d1673e41887fead08508698cfe1751eb86ea873d84620c59df00d8f863b5355867ccbb1f0758e83cf7461f69b6d0

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\bufferproxy.cp311-win_amd64.pyd

    Filesize

    18KB

    MD5

    b22ea7d3039304b8c65f570b5fabc836

    SHA1

    d56ffc94e76309292e42c2176e20b29f19cdae4d

    SHA256

    a2f1be8fe702f4443e16396f043e7c201107bff5d6c6935310f84adc0719b85f

    SHA512

    050298b076f2f32008df80ef913901f2c08c951744366fbf4278014ce666e17b05376aa3e44ebf490f3c39309da4723a0957b7f23b22b949372e812da24d9397

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\bufferproxy.cp311-win_amd64.pyd

    Filesize

    18KB

    MD5

    b22ea7d3039304b8c65f570b5fabc836

    SHA1

    d56ffc94e76309292e42c2176e20b29f19cdae4d

    SHA256

    a2f1be8fe702f4443e16396f043e7c201107bff5d6c6935310f84adc0719b85f

    SHA512

    050298b076f2f32008df80ef913901f2c08c951744366fbf4278014ce666e17b05376aa3e44ebf490f3c39309da4723a0957b7f23b22b949372e812da24d9397

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\color.cp311-win_amd64.pyd

    Filesize

    34KB

    MD5

    b1f22a4d3938db369d15229641b348e4

    SHA1

    7234c79fbe515f8c974ca0c2b65106b43ee63b7d

    SHA256

    f4caf228bf5cdbdc7b7d2097c7bc27407cc0701160e70d4f89114721cd3e4a23

    SHA512

    58486e20566ebacf515ab50338de5bad67334d2ead13ed50722f493886afa9b1f8e4b5532d1386cde57242b30d9d2754fbfdf91ac7815cd07b73029ebe33aa41

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\color.cp311-win_amd64.pyd

    Filesize

    34KB

    MD5

    b1f22a4d3938db369d15229641b348e4

    SHA1

    7234c79fbe515f8c974ca0c2b65106b43ee63b7d

    SHA256

    f4caf228bf5cdbdc7b7d2097c7bc27407cc0701160e70d4f89114721cd3e4a23

    SHA512

    58486e20566ebacf515ab50338de5bad67334d2ead13ed50722f493886afa9b1f8e4b5532d1386cde57242b30d9d2754fbfdf91ac7815cd07b73029ebe33aa41

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\constants.cp311-win_amd64.pyd

    Filesize

    49KB

    MD5

    fdc1f45c700713d7db5889424869caec

    SHA1

    f8dc4e894c02bb2be584bdc2276314577c6c8d0d

    SHA256

    c454ce99e2aed8fc90631e8f65447c420604215655a83790dfd6d16db1bc0a2c

    SHA512

    50694201b7c86da7f638f9178d74d5538717bee28e3e9284988cada722de37e5625447dea00b65e3642bba09052a443ced3d4898f872da9325f226a039704252

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\constants.cp311-win_amd64.pyd

    Filesize

    49KB

    MD5

    fdc1f45c700713d7db5889424869caec

    SHA1

    f8dc4e894c02bb2be584bdc2276314577c6c8d0d

    SHA256

    c454ce99e2aed8fc90631e8f65447c420604215655a83790dfd6d16db1bc0a2c

    SHA512

    50694201b7c86da7f638f9178d74d5538717bee28e3e9284988cada722de37e5625447dea00b65e3642bba09052a443ced3d4898f872da9325f226a039704252

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\display.cp311-win_amd64.pyd

    Filesize

    43KB

    MD5

    b9c6dd344af656887aa40c0563aeffb8

    SHA1

    3bff0be68767d0efcce5abaabb8f7ddd6afa68f3

    SHA256

    678da926d15947f4f5c98d9118f664d1f4cefbc58856d11032a39e80c8c83589

    SHA512

    6c89889180f9e5d686922a4af8ae2c206e384a1dd14f677c100489bb7c66661fb2da9cfa18ca0d4b2b686179446678e28c2fa0ff4d16a74c8f604882363976f6

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\display.cp311-win_amd64.pyd

    Filesize

    43KB

    MD5

    b9c6dd344af656887aa40c0563aeffb8

    SHA1

    3bff0be68767d0efcce5abaabb8f7ddd6afa68f3

    SHA256

    678da926d15947f4f5c98d9118f664d1f4cefbc58856d11032a39e80c8c83589

    SHA512

    6c89889180f9e5d686922a4af8ae2c206e384a1dd14f677c100489bb7c66661fb2da9cfa18ca0d4b2b686179446678e28c2fa0ff4d16a74c8f604882363976f6

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\draw.cp311-win_amd64.pyd

    Filesize

    46KB

    MD5

    5b31ff0738f1f0cf2f8424ba2acb71d1

    SHA1

    acafef3b0cbe66dc8a9f7c23cf5a961d0268a605

    SHA256

    2b8245e7f27a6874f3feb9c3a29dd55b3ce9698b314d55d7109a2ae2145e91e0

    SHA512

    5679a091beeb5685ae6e611fd2aef1eb7e38fb88af97a752f018d3f1d860fffdb515d1eeee62611503d4b6e8c1e797b5bf5f936a196a1ecd515ad53aa4fc5ebc

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\draw.cp311-win_amd64.pyd

    Filesize

    46KB

    MD5

    5b31ff0738f1f0cf2f8424ba2acb71d1

    SHA1

    acafef3b0cbe66dc8a9f7c23cf5a961d0268a605

    SHA256

    2b8245e7f27a6874f3feb9c3a29dd55b3ce9698b314d55d7109a2ae2145e91e0

    SHA512

    5679a091beeb5685ae6e611fd2aef1eb7e38fb88af97a752f018d3f1d860fffdb515d1eeee62611503d4b6e8c1e797b5bf5f936a196a1ecd515ad53aa4fc5ebc

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\event.cp311-win_amd64.pyd

    Filesize

    42KB

    MD5

    7e76e1760a39fee6829fd0228e19af58

    SHA1

    37f1ae38266c46c0e9a64a32566416cde1d3d55b

    SHA256

    0b7d5e121379509339cfaaf4468b1b7482a2997789c3062ae025532d40622698

    SHA512

    b4cf46ad46c7eedfbbd887930a85b64cba6cb0fee13fc89e3dac9cc066a8efc0fa9f0e6cd1ad8ba976c08a0cbf42d1c16cee151dda1da6e59944d327e833e0f0

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\event.cp311-win_amd64.pyd

    Filesize

    42KB

    MD5

    7e76e1760a39fee6829fd0228e19af58

    SHA1

    37f1ae38266c46c0e9a64a32566416cde1d3d55b

    SHA256

    0b7d5e121379509339cfaaf4468b1b7482a2997789c3062ae025532d40622698

    SHA512

    b4cf46ad46c7eedfbbd887930a85b64cba6cb0fee13fc89e3dac9cc066a8efc0fa9f0e6cd1ad8ba976c08a0cbf42d1c16cee151dda1da6e59944d327e833e0f0

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\image.cp311-win_amd64.pyd

    Filesize

    29KB

    MD5

    3a8dfccd1ab3bff17b8c09ca6c5c9d09

    SHA1

    32b02abf00e8bfe022b18febb6c30226be5adc6c

    SHA256

    fc70d7b210e5c8a0a7631db9e1543e5bf3b83357eb2c90d6cf7c43c2bcec68b8

    SHA512

    54530b3f8e5d76d018761256fe3e7bca4dca4518f8792141d3f9cae53e8f07bc39b9b90d4aad27f0bb8aa1d8b273c67e4fd690c683abec1b4ad08609ef3dbe64

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\image.cp311-win_amd64.pyd

    Filesize

    29KB

    MD5

    3a8dfccd1ab3bff17b8c09ca6c5c9d09

    SHA1

    32b02abf00e8bfe022b18febb6c30226be5adc6c

    SHA256

    fc70d7b210e5c8a0a7631db9e1543e5bf3b83357eb2c90d6cf7c43c2bcec68b8

    SHA512

    54530b3f8e5d76d018761256fe3e7bca4dca4518f8792141d3f9cae53e8f07bc39b9b90d4aad27f0bb8aa1d8b273c67e4fd690c683abec1b4ad08609ef3dbe64

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\imageext.cp311-win_amd64.pyd

    Filesize

    16KB

    MD5

    4f14cda002189339700b785d569a6636

    SHA1

    b0eef8937c89fc633e242012b307da143d0ef455

    SHA256

    d11fcce4bcad6df492720e74aceec71ff9b9eadf729a8c83fc86766e54fc35d6

    SHA512

    5130193dee10d87759fea95c0278760ae53b89a7b35e561e507be7d80f702659dd482fb49cae7c671566dd9416b0d963ed3458a39af2ea080516d2060a879f6d

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\imageext.cp311-win_amd64.pyd

    Filesize

    16KB

    MD5

    4f14cda002189339700b785d569a6636

    SHA1

    b0eef8937c89fc633e242012b307da143d0ef455

    SHA256

    d11fcce4bcad6df492720e74aceec71ff9b9eadf729a8c83fc86766e54fc35d6

    SHA512

    5130193dee10d87759fea95c0278760ae53b89a7b35e561e507be7d80f702659dd482fb49cae7c671566dd9416b0d963ed3458a39af2ea080516d2060a879f6d

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\math.cp311-win_amd64.pyd

    Filesize

    70KB

    MD5

    970ae7e2f11f0486340859c98e131324

    SHA1

    2afde871035471629cd33d75f28e738df08ddb8c

    SHA256

    f87a095c47ca6642cf0b0b3570edd13d5bef17b66bd28c7dd6ea4e2515a43d85

    SHA512

    d86bd8bb85355623f3fc016ba4fc3c646ac2be7a57157ef9b6517b3b9d9973cba18a7e78bb41b3e9fb410ed5ff380c3b18f468cf10ba2a81d76f20f67b46085e

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\math.cp311-win_amd64.pyd

    Filesize

    70KB

    MD5

    970ae7e2f11f0486340859c98e131324

    SHA1

    2afde871035471629cd33d75f28e738df08ddb8c

    SHA256

    f87a095c47ca6642cf0b0b3570edd13d5bef17b66bd28c7dd6ea4e2515a43d85

    SHA512

    d86bd8bb85355623f3fc016ba4fc3c646ac2be7a57157ef9b6517b3b9d9973cba18a7e78bb41b3e9fb410ed5ff380c3b18f468cf10ba2a81d76f20f67b46085e

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\rect.cp311-win_amd64.pyd

    Filesize

    39KB

    MD5

    dbc9c44384c4893b842fd6da6332e74b

    SHA1

    7c7033c632404f0768b4ad039fa6a40a2f022680

    SHA256

    c971310c145bd5ec9b4720d5661ff57b4a9dfedbbe94013836b58a3bfeb400ce

    SHA512

    29c10f944a5ba60ffc43952cbb19028246a573f6e76a55f50ab10e844fc3016dd68bb8ec8f7d9ae030b67591532343f14eaf925d2cd9d01909c9841836522369

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\rect.cp311-win_amd64.pyd

    Filesize

    39KB

    MD5

    dbc9c44384c4893b842fd6da6332e74b

    SHA1

    7c7033c632404f0768b4ad039fa6a40a2f022680

    SHA256

    c971310c145bd5ec9b4720d5661ff57b4a9dfedbbe94013836b58a3bfeb400ce

    SHA512

    29c10f944a5ba60ffc43952cbb19028246a573f6e76a55f50ab10e844fc3016dd68bb8ec8f7d9ae030b67591532343f14eaf925d2cd9d01909c9841836522369

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\rwobject.cp311-win_amd64.pyd

    Filesize

    19KB

    MD5

    1183778e779aafe6a93920caf6f74a4e

    SHA1

    8b70a43e4439ec2fb9e61b7b58159c7a17a312a5

    SHA256

    6ceb24025b79414dca501f6dcacbb65ab63f1c83094a8358e5bbc5d744742f90

    SHA512

    86eebc69f411de1e21e61bc2c5181bddd43982fed5f55ab8577c7e9d662f3064f52661cb93f07e1b5bfbcc27a56d99fe026d49b575532b71dc55cc8427200feb

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\rwobject.cp311-win_amd64.pyd

    Filesize

    19KB

    MD5

    1183778e779aafe6a93920caf6f74a4e

    SHA1

    8b70a43e4439ec2fb9e61b7b58159c7a17a312a5

    SHA256

    6ceb24025b79414dca501f6dcacbb65ab63f1c83094a8358e5bbc5d744742f90

    SHA512

    86eebc69f411de1e21e61bc2c5181bddd43982fed5f55ab8577c7e9d662f3064f52661cb93f07e1b5bfbcc27a56d99fe026d49b575532b71dc55cc8427200feb

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\surface.cp311-win_amd64.pyd

    Filesize

    231KB

    MD5

    1f407f55e003c2251ecbf5e1f4dc7c0e

    SHA1

    cbed33a6e29c556e465cc636d96ab880bbdd03ce

    SHA256

    cef97263b5fc9dd9d36f8e81f43504cf831d97c04042a4f5a23ce672db3a20cb

    SHA512

    12fac5325e00c02a769f1a0758e75cfdf2c077d8a02c9efb5e62d0a4f06367524a053edba327d5c2a0e186427232e05d1a12484db8422cfa5a7c8f3ccd3d46ff

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\surface.cp311-win_amd64.pyd

    Filesize

    231KB

    MD5

    1f407f55e003c2251ecbf5e1f4dc7c0e

    SHA1

    cbed33a6e29c556e465cc636d96ab880bbdd03ce

    SHA256

    cef97263b5fc9dd9d36f8e81f43504cf831d97c04042a4f5a23ce672db3a20cb

    SHA512

    12fac5325e00c02a769f1a0758e75cfdf2c077d8a02c9efb5e62d0a4f06367524a053edba327d5c2a0e186427232e05d1a12484db8422cfa5a7c8f3ccd3d46ff

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\surflock.cp311-win_amd64.pyd

    Filesize

    13KB

    MD5

    8676db29eda942712078e2001a72cd2b

    SHA1

    fbe40105bdd455cb45e495a2ce69150fbeb67e3c

    SHA256

    599525fb95d29b5fefb346d071156f1605ae50fb1fa5f93f5a52de747027fe38

    SHA512

    a086cf0c5be8526599f4001e6769b65622581239bb1ba4b903f87607394dafb6bfeabf3042e95c53b47a89779008fa0045fbc8860173aba54326eff4b480ef02

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pygame\surflock.cp311-win_amd64.pyd

    Filesize

    13KB

    MD5

    8676db29eda942712078e2001a72cd2b

    SHA1

    fbe40105bdd455cb45e495a2ce69150fbeb67e3c

    SHA256

    599525fb95d29b5fefb346d071156f1605ae50fb1fa5f93f5a52de747027fe38

    SHA512

    a086cf0c5be8526599f4001e6769b65622581239bb1ba4b903f87607394dafb6bfeabf3042e95c53b47a89779008fa0045fbc8860173aba54326eff4b480ef02

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\python3.DLL

    Filesize

    64KB

    MD5

    7feb3da304a2fead0bb07d06c6c6a151

    SHA1

    ee4122563d9309926ba32be201895d4905d686ce

    SHA256

    ddd2c77222e2c693ef73d142422d6bf37d6a37deead17e70741b0ac5c9fe095b

    SHA512

    325568bcf1835dd3f454a74012f5d7c6877496068ad0c2421bf65e0640910ae43b06e920f4d0024277eee1683f0ce27959843526d0070683da0c02f1eac0e7d2

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\python3.dll

    Filesize

    64KB

    MD5

    7feb3da304a2fead0bb07d06c6c6a151

    SHA1

    ee4122563d9309926ba32be201895d4905d686ce

    SHA256

    ddd2c77222e2c693ef73d142422d6bf37d6a37deead17e70741b0ac5c9fe095b

    SHA512

    325568bcf1835dd3f454a74012f5d7c6877496068ad0c2421bf65e0640910ae43b06e920f4d0024277eee1683f0ce27959843526d0070683da0c02f1eac0e7d2

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\python3.dll

    Filesize

    64KB

    MD5

    7feb3da304a2fead0bb07d06c6c6a151

    SHA1

    ee4122563d9309926ba32be201895d4905d686ce

    SHA256

    ddd2c77222e2c693ef73d142422d6bf37d6a37deead17e70741b0ac5c9fe095b

    SHA512

    325568bcf1835dd3f454a74012f5d7c6877496068ad0c2421bf65e0640910ae43b06e920f4d0024277eee1683f0ce27959843526d0070683da0c02f1eac0e7d2

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\python311.dll

    Filesize

    5.5MB

    MD5

    a72993488cecd88b3e19487d646f88f6

    SHA1

    5d359f4121e0be04a483f9ad1d8203ffc958f9a0

    SHA256

    aa1e959dcff75a343b448a797d8a5a041eb03b27565a30f70fd081df7a285038

    SHA512

    c895176784b9ac89c9b996c02ec0d0a3f7cd6ebf653a277c20dec104da6a11db084c53dd47c7b6653a448d877ad8e5e79c27db4ea6365ebb8ca2a78aa9c61b38

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\python311.dll

    Filesize

    5.5MB

    MD5

    a72993488cecd88b3e19487d646f88f6

    SHA1

    5d359f4121e0be04a483f9ad1d8203ffc958f9a0

    SHA256

    aa1e959dcff75a343b448a797d8a5a041eb03b27565a30f70fd081df7a285038

    SHA512

    c895176784b9ac89c9b996c02ec0d0a3f7cd6ebf653a277c20dec104da6a11db084c53dd47c7b6653a448d877ad8e5e79c27db4ea6365ebb8ca2a78aa9c61b38

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pywin32_system32\pythoncom311.dll

    Filesize

    675KB

    MD5

    f655cc794762ae686c65b969e83f1e84

    SHA1

    ac635354ea70333c439aa7f97f2e1759df883e38

    SHA256

    9111856645f779f137c46d78a68374292fc512a2a4038466476bb9c6024097b5

    SHA512

    7dde92438d920e832025ae0a54dbf1b7acc6192d937b1babc388706723e92910bd355aa4bb0e8ef6378c71460468537fef9fd3031d048adf0743d48aed229c14

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pywin32_system32\pythoncom311.dll

    Filesize

    675KB

    MD5

    f655cc794762ae686c65b969e83f1e84

    SHA1

    ac635354ea70333c439aa7f97f2e1759df883e38

    SHA256

    9111856645f779f137c46d78a68374292fc512a2a4038466476bb9c6024097b5

    SHA512

    7dde92438d920e832025ae0a54dbf1b7acc6192d937b1babc388706723e92910bd355aa4bb0e8ef6378c71460468537fef9fd3031d048adf0743d48aed229c14

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pywin32_system32\pywintypes311.dll

    Filesize

    134KB

    MD5

    1696732a242bfaf6a50bd98eb7874f23

    SHA1

    090a85275c7c67430d511570bab36eb299c7e787

    SHA256

    6583c15de0f5a1b20c8750b0599e5cf162f91f239f8341bda842485d8bbc9887

    SHA512

    70a03adb89649cece59e6b84a2f79ad53cf7c308ffaca8b19c0b64b59858e73a75addd131776d54b5bf12b747bcbb1ff9a4ce0e35d06bb995e34c5687dd3a25b

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\pywin32_system32\pywintypes311.dll

    Filesize

    134KB

    MD5

    1696732a242bfaf6a50bd98eb7874f23

    SHA1

    090a85275c7c67430d511570bab36eb299c7e787

    SHA256

    6583c15de0f5a1b20c8750b0599e5cf162f91f239f8341bda842485d8bbc9887

    SHA512

    70a03adb89649cece59e6b84a2f79ad53cf7c308ffaca8b19c0b64b59858e73a75addd131776d54b5bf12b747bcbb1ff9a4ce0e35d06bb995e34c5687dd3a25b

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\select.pyd

    Filesize

    28KB

    MD5

    116335ebc419dd5224dd9a4f2a765467

    SHA1

    482ef3d79bfd6b6b737f8d546cd9f1812bd1663d

    SHA256

    813eede996fc08e1c9a6d45aaa4cbae1e82e781d69885680a358b4d818cfc0d4

    SHA512

    41dc7facab0757ed1e286ae8e41122e09738733ad110c2918f5e2120dfb0dbff0daefcad2bffd1715b15b44c861b1dd7fb0d514983db50ddc758f47c1b9b3bf3

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\select.pyd

    Filesize

    28KB

    MD5

    116335ebc419dd5224dd9a4f2a765467

    SHA1

    482ef3d79bfd6b6b737f8d546cd9f1812bd1663d

    SHA256

    813eede996fc08e1c9a6d45aaa4cbae1e82e781d69885680a358b4d818cfc0d4

    SHA512

    41dc7facab0757ed1e286ae8e41122e09738733ad110c2918f5e2120dfb0dbff0daefcad2bffd1715b15b44c861b1dd7fb0d514983db50ddc758f47c1b9b3bf3

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\win32api.pyd

    Filesize

    136KB

    MD5

    3210cb66deb7f1bbcc46b4c3832c7e10

    SHA1

    5c5f59a29f5ef204f52fd3a9433b3a27d8a30229

    SHA256

    bf5147f4fffbffa77d9169b65af13d983e2fcccdbca8151d72814c55939bb2c4

    SHA512

    5d51ede8f464ca7e151bfaaef0b7e81f5ce16678d35a573cae2994db602c2d93f0463c3936fb896dee1cf5192b69fb1051594efa5d4f248a02226ca50b6bfa5c

  • C:\Users\Admin\Documents\LolinohhGames\CuatroQuintos\win32api.pyd

    Filesize

    136KB

    MD5

    3210cb66deb7f1bbcc46b4c3832c7e10

    SHA1

    5c5f59a29f5ef204f52fd3a9433b3a27d8a30229

    SHA256

    bf5147f4fffbffa77d9169b65af13d983e2fcccdbca8151d72814c55939bb2c4

    SHA512

    5d51ede8f464ca7e151bfaaef0b7e81f5ce16678d35a573cae2994db602c2d93f0463c3936fb896dee1cf5192b69fb1051594efa5d4f248a02226ca50b6bfa5c

  • memory/804-430-0x0000000062E80000-0x0000000062EA4000-memory.dmp

    Filesize

    144KB

  • memory/804-448-0x00007FF8FA530000-0x00007FF8FA760000-memory.dmp

    Filesize

    2.2MB

  • memory/804-429-0x0000000068B40000-0x0000000068B7C000-memory.dmp

    Filesize

    240KB

  • memory/804-427-0x00007FF8FA530000-0x00007FF8FA760000-memory.dmp

    Filesize

    2.2MB

  • memory/804-431-0x00007FF8FA340000-0x00007FF8FA4C2000-memory.dmp

    Filesize

    1.5MB

  • memory/804-432-0x00007FF8FA2E0000-0x00007FF8FA331000-memory.dmp

    Filesize

    324KB

  • memory/804-433-0x00000202AA970000-0x00000202AC81F000-memory.dmp

    Filesize

    30.7MB

  • memory/804-434-0x00007FF8FA530000-0x00007FF8FA760000-memory.dmp

    Filesize

    2.2MB

  • memory/804-439-0x00007FF8FA2E0000-0x00007FF8FA331000-memory.dmp

    Filesize

    324KB

  • memory/804-441-0x00007FF8FA530000-0x00007FF8FA760000-memory.dmp

    Filesize

    2.2MB

  • memory/804-446-0x00007FF8FA2E0000-0x00007FF8FA331000-memory.dmp

    Filesize

    324KB

  • memory/804-428-0x000000006A880000-0x000000006A8A7000-memory.dmp

    Filesize

    156KB

  • memory/804-453-0x00007FF8FA2E0000-0x00007FF8FA331000-memory.dmp

    Filesize

    324KB

  • memory/804-455-0x00007FF8FA530000-0x00007FF8FA760000-memory.dmp

    Filesize

    2.2MB

  • memory/804-460-0x00007FF8FA2E0000-0x00007FF8FA331000-memory.dmp

    Filesize

    324KB

  • memory/804-462-0x00007FF8FA530000-0x00007FF8FA760000-memory.dmp

    Filesize

    2.2MB

  • memory/804-467-0x00007FF8FA2E0000-0x00007FF8FA331000-memory.dmp

    Filesize

    324KB

  • memory/804-470-0x00007FF8FA530000-0x00007FF8FA760000-memory.dmp

    Filesize

    2.2MB

  • memory/804-471-0x000000006A880000-0x000000006A8A7000-memory.dmp

    Filesize

    156KB

  • memory/804-472-0x0000000068B40000-0x0000000068B7C000-memory.dmp

    Filesize

    240KB

  • memory/804-474-0x00007FF8FA340000-0x00007FF8FA4C2000-memory.dmp

    Filesize

    1.5MB

  • memory/804-475-0x00007FF8FA2E0000-0x00007FF8FA331000-memory.dmp

    Filesize

    324KB

  • memory/804-473-0x0000000062E80000-0x0000000062EA4000-memory.dmp

    Filesize

    144KB

  • memory/804-476-0x00000202AA970000-0x00000202AC81F000-memory.dmp

    Filesize

    30.7MB