1ddb3a19547881614e3f832f2ba23f2d8f0b18277105322734660cd41bbaa3bd

Resubmissions

19-03-2024 20:27

240319-y8vwmsfd7z 7

19-03-2024 20:23

240319-y6lj7afc9w 7

19-03-2024 20:16

240319-y2lpdsed73 7

Analysis

max time kernel
167s
max time network
184s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
19-03-2024 20:27

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

TTD_TRADE_SCAM_CLIENT.exe
Size

20.7MB
MD5

b6709ef840959186d7c0e02fe4c5f51e
SHA1

568466b9759939e6c7a4e9cea1309061a1dfd876
SHA256

1ddb3a19547881614e3f832f2ba23f2d8f0b18277105322734660cd41bbaa3bd
SHA512

f9656d61da31cfd0deb7663074354d103cbd1bb0a48aca7bb06a99f30eb9b3c0b18b60c9e1c9c2b0cf5ff73aea0b447fda38aa4c910f9685c2d0a4951f07bb91
SSDEEP

393216:r7DnaUQts2Y2py7ADfDrlpfaMPgFRtaHW8p2m204ezGK0diyRi:v2UQts2Y2CAbPHf9PgF4W8p2mWpAy

Score

7^/10

spyware stealer

Malware Config

Signatures

Loads dropped DLL 45 IoCs

pid	Process
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe
1176	TTD_TRADE_SCAM_CLIENT.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Kills process with taskkill 1 IoCs

evasion

pid	Process
412	taskkill.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	412	taskkill.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 4264 wrote to memory of 1176	4264	TTD_TRADE_SCAM_CLIENT.exe	103
PID 4264 wrote to memory of 1176	4264	TTD_TRADE_SCAM_CLIENT.exe	103
PID 1176 wrote to memory of 2904	1176	TTD_TRADE_SCAM_CLIENT.exe	105
PID 1176 wrote to memory of 2904	1176	TTD_TRADE_SCAM_CLIENT.exe	105
PID 1176 wrote to memory of 3972	1176	TTD_TRADE_SCAM_CLIENT.exe	106
PID 1176 wrote to memory of 3972	1176	TTD_TRADE_SCAM_CLIENT.exe	106
PID 3972 wrote to memory of 412	3972	cmd.exe	107
PID 3972 wrote to memory of 412	3972	cmd.exe	107

C:\Users\Admin\AppData\Local\Temp\TTD_TRADE_SCAM_CLIENT.exe
"C:\Users\Admin\AppData\Local\Temp\TTD_TRADE_SCAM_CLIENT.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4264
- C:\Users\Admin\AppData\Local\Temp\TTD_TRADE_SCAM_CLIENT.exe
  "C:\Users\Admin\AppData\Local\Temp\TTD_TRADE_SCAM_CLIENT.exe"
  2⤵
  - Loads dropped DLL
  - Suspicious use of WriteProcessMemory
  PID:1176
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "ver"
    3⤵
    PID:2904
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c taskkill /f /im chrome.exe
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:3972
  - - C:\Windows\system32\taskkill.exe
      taskkill /f /im chrome.exe
      4⤵
      Kills process with taskkill
      Suspicious use of AdjustPrivilegeToken
      PID:412

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4048 --field-trial-handle=3060,i,1774866140584649235,8085848018931772189,262144 --variations-seed-version /prefetch:8
1⤵
PID:1972

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2432

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\_MEI42642\VCRUNTIME140.dll

Filesize
106KB

MD5
4585a96cc4eef6aafd5e27ea09147dc6

SHA1
489cfff1b19abbec98fda26ac8958005e88dd0cb

SHA256
a8f950b4357ec12cfccddc9094cca56a3d5244b95e09ea6e9a746489f2d58736

SHA512
d78260c66331fe3029d2cc1b41a5d002ec651f2e3bbf55076d65839b5e3c6297955afd4d9ab8951fbdc9f929dbc65eb18b14b59bce1f2994318564eb4920f286

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\VCRUNTIME140_1.dll

Filesize
48KB

MD5
7e668ab8a78bd0118b94978d154c85bc

SHA1
dbac42a02a8d50639805174afd21d45f3c56e3a0

SHA256
e4b533a94e02c574780e4b333fcf0889f65ed00d39e32c0fbbda2116f185873f

SHA512
72bb41db17256141b06e2eaeb8fc65ad4abdb65e4b5f604c82b9e7e7f60050734137d602e0f853f1a38201515655b6982f2761ee0fa77c531aa58591c95f0032

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\_bz2.pyd

Filesize
82KB

MD5
a62207fc33140de460444e191ae19b74

SHA1
9327d3d4f9d56f1846781bcb0a05719dea462d74

SHA256
ebcac51449f323ae3ae961a33843029c34b6a82138ccd9214cf99f98dd2148c2

SHA512
90f9db9ee225958cb3e872b79f2c70cb1fd2248ebaa8f3282afff9250285852156bf668f5cfec49a4591b416ce7ebaaac62d2d887152f5356512f2347e3762b7

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\_ctypes.pyd

Filesize
120KB

MD5
9b344f8d7ce5b57e397a475847cc5f66

SHA1
aff1ccc2608da022ecc8d0aba65d304fe74cdf71

SHA256
b1214d7b7efd9d4b0f465ec3463512a1cbc5f59686267030f072e6ce4b2a95cf

SHA512
2b0d9e1b550bf108fa842324ab26555f2a224aefff517fdb16df85693e05adaf0d77ebe49382848f1ec68dc9b5ae75027a62c33721e42a1566274d1a2b1baa41

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\_lzma.pyd

Filesize
155KB

MD5
0c7ea68ca88c07ae6b0a725497067891

SHA1
c2b61a3e230b30416bc283d1f3ea25678670eb74

SHA256
f74aaf0aa08cf90eb1eb23a474ccb7cb706b1ede7f911daf7ae68480765bdf11

SHA512
fd52f20496a12e6b20279646663d880b1354cffea10793506fe4560ed7da53e4efba900ae65c9996fbb3179c83844a9674051385e6e3c26fb2622917351846b9

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-core-console-l1-1-0.dll

Filesize
21KB

MD5
2143ddc34966bfed00c84ebfece6196f

SHA1
32781e9e0a955dee1f755374bc73444681f3f6df

SHA256
8201a29422733a3da950d5a6b6f88a9da5d70f38b91b1f4465d8ab32f1e4e35f

SHA512
20c83588e08465f038180f0116db1d136b7e355984dfb28b10046b24a54b9f96115288eddae79caf62177395945e3068b699edd71b58cb5e92e42bdc280b1415

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-core-datetime-l1-1-0.dll

Filesize
21KB

MD5
092b677c774860713ff4cca8a187923d

SHA1
c7764697901a160f23b87f5bdd68d7044741185a

SHA256
af19e28aa4ca9fc8bc668bad2a669908c8729fa4f6d04f4e74ccf90b6fd3f762

SHA512
95561366ebd15da52b5201346fde183b363e6df74612f5b0af4e4affb07e785190523d5b682d3e18e14dd7479e48594bc9f2947ac561dfe6de0ba8a5ed7d7f50

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-core-debug-l1-1-0.dll

Filesize
21KB

MD5
5bdb143e6c89de893040a2189ed5fd0f

SHA1
8e02e332936ecc6d57f91aa2b173e4ea15149e9a

SHA256
2905d03d7eb0f43744c3f4d55f822bf87410e3a753ddaf15a3e9d75a1f966c90

SHA512
df320995eb7b2d03a0d5274f8ea511f31bfdb17af7198e4c21589f000084287b6f22ba83aedcc256dd046123295fdc3dd0d99c326153237e3b3e3c8f22436066

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-core-errorhandling-l1-1-0.dll

Filesize
21KB

MD5
558579e5a47b188788bae6961ec15cb6

SHA1
ad06540883dfb1294cf64f60aaae9cbdd1d0bbd3

SHA256
d7a4206300cdaf487994fee81ad08e515fd4fbc48a3f4ed6cdf61695d24bc864

SHA512
38506c7b79a297e9eacad7cae0c789325768124e3b071fde4022b64ceb4e5680f875f46a0855e78893e8ae6ffc2f682632bc095cedaa93b042652d5a696a945d

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-core-fibers-l1-1-0.dll

Filesize
21KB

MD5
49c1b7e3c8b3d8d99e94c6225f0c767f

SHA1
000cebc9cf68a110b4cd97a73c94c2acb763f6c9

SHA256
fed6127aaf2d10ac69eaced27b1baf82451be8bd00e9e586b1c70a753c5001af

SHA512
0556c351f985f801ba926dcbf633049c404a1bd8454fd0132a16c5e271f1e25cd863623c0bd26c4673fa8c4e045f2c15be315b0d59665bbae9d7cee14d586863

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-core-file-l1-1-0.dll

Filesize
25KB

MD5
88cd1931b26cb23b0e3e3acd6b63ce9f

SHA1
fa1a8a97374624fb77e3b179ee284cb8404e570a

SHA256
9e3519dcefc6932612ab355793a48993ee11ad995e6b394b89a9bb49a0be6fc3

SHA512
17467ea58e1ca927a0f027009ee30e592ca4bb4bb2b28a2972a84683c75deb711f72fd59e659e5ce4bd1909d0cc7b601b700d8fefb4184abd2c0dab150b8cf27

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-core-file-l1-2-0.dll

Filesize
21KB

MD5
708c2861a41de23414da002dd74539e8

SHA1
7f4ff50aec4375c9bd3dcadd5e8176579b5d7e78

SHA256
0189b1fa2f0613581a5648ef2731a77520811cf6964d4d60d73afcb43dddf03f

SHA512
a3e17eb3f57504e371b69dacacc3eed42e033e61f63ffe22e94fffb245f3b5edfd16b14421d295d208c6333f7e3402b11f496d4495c767686773e69a06d35e83

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-core-file-l2-1-0.dll

Filesize
21KB

MD5
b6275391dfa7a36e7ad607ba66b9aca2

SHA1
716696198be8c2ccaafc3a51773c84184fb783e1

SHA256
9d01c6df855e8fb8ae4c07af27cbddf9dfd2c4457261622f55115ff19cfec6ba

SHA512
1a39a78e5f840ba856c00eebe83c7b616e7fd69ab8fe8a6615234aa70f30654e884e5a33d00066462919dfc6bba141c0fb2474a20b98fb60ddf853147087d961

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-core-handle-l1-1-0.dll

Filesize
21KB

MD5
b28d1e59016264d7aeac4cf809e9a0a6

SHA1
54468f099023f00eb7ef99a09b1a87fc0f6d7cf6

SHA256
e4e405c78f4bf9d15a14282c63044503fbcac17c92e5258f4bc027f625012369

SHA512
459223290e020a3c4f24765f7a92f6a3749e06686941d10b47f4bab298116491746b6b4873d86332299da5ba009358efc3d068617a0504e979b88075162cf4c6

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-core-heap-l1-1-0.dll

Filesize
21KB

MD5
c3b228e0b491e5cf2045c9cdfc07f6dc

SHA1
44752c7e7f04661fbd6e760b02b106ec1be8b506

SHA256
bec5ffa5fe04958794c49a009447a783a4bc78b0b8861164cbe15a9bac680dda

SHA512
0634c016c492621b8f774435d7ed343f6650b653fb0f83467628ed2dfa4f2f2287361a576ce4fdc5284d051bc03ac2e4f360be3a6fd3ce086d948d07a29619eb

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-core-interlocked-l1-1-0.dll

Filesize
21KB

MD5
4daba42f26c42ca9c028d84a0cfb5c57

SHA1
79be9304491a7d92bf784b4243e4d05cc7b908f5

SHA256
5cb7624b630e7495526bfb9c4fa54856d3ba65f45928ad765ac658d5d23b2e99

SHA512
2a6472f890aa246ae8075f4086cd5882cfce931c5900edefc427dfdd96c74767910cbef5655545d2009f40bd9c4701e98349cea862f95b374d76aa3d4dfbe705

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-core-libraryloader-l1-1-0.dll

Filesize
21KB

MD5
1ebac2900b4c7e34df5af9a6c69075a9

SHA1
4f8b1155f5725255601b73ddcc316c54da70c578

SHA256
67cc3eab562fd4d0d224e6da52e1d6481f79d1c0c7557456adbc86b431186ee0

SHA512
2278a6974aa9e065308d3e50b8a5a81e3e79eff947be0f3013c6ee9839681f76522207b8ed5c56f52b2994506a7ff024ec921247e884dd881ba36224b13855f2

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-core-localization-l1-2-0.dll

Filesize
21KB

MD5
b655f536e30709d8e30c0242e31ce6f0

SHA1
8e99a8b3b3a3cae775a4e54bc89b55a8f652b289

SHA256
c899ad0071e4d9d300212f070a684c4afc99a728f980a638327a204bc48427ed

SHA512
e07034b3bced13a12e4f5eee663052725cbd903e969bef9410377f85b958697b4dc7a2491e205bf22ec857e8c6fdb8c0fca855e3f2af83fce64f6071bab7d306

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-core-memory-l1-1-0.dll

Filesize
21KB

MD5
b881bb0358e31e480f18295940657cd6

SHA1
ec36bad62b115f62b49a341bef400b57f760c315

SHA256
d40f186b6aa0aa1017b8902ceb94b4692ccbc45eae515034af54ef2d6b17bf67

SHA512
647d20d73edafd7d9c20d385742df60fc55d03293828c7c7411b28bb8ac05448587d00526077aada8baf34b7433b8119bfae846f0a5fdc2feff51624ab94a9ab

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-core-namedpipe-l1-1-0.dll

Filesize
21KB

MD5
dd5a6479b460fd9df89d2962887a87b9

SHA1
b8de5406d3cf9d947a7d53234a5781b45112bdbf

SHA256
dfeb6285c0d01662b3b442c712f59b294e56ecc2168e5f46fdc4a3d10b51e9d6

SHA512
ddc465bd3fb891e5294330e54b795e4901c81be1da568425ba2002c7044eef04811a4f5fe494aa44577c8279cb6b5fc8c927fa324f8d245c38e3ecabe4c26453

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-core-processenvironment-l1-1-0.dll

Filesize
21KB

MD5
85c65fff73e81800bf42bfce6fddbebb

SHA1
a39047ef68c9faf9364dde9fec42fde5ae7d2d48

SHA256
20dada70af647ceb68a2d23ce21fce70e2457778c463b13db2d11a172638ffb4

SHA512
fc1063c8c070f1fee9270c290ce159b924b1f3150360c9a2bc4efbfba2c91f9796d8a9905340632be634d505da6925bc9571b26759e86a12ddbfdadc899a6812

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-core-processthreads-l1-1-0.dll

Filesize
21KB

MD5
a31ea419418ec118b983e42abee09f65

SHA1
481a2d081a34acd7b8234aa2f70337e8188a0cef

SHA256
1881e7478bc6e5df712e85869f0a8842dae252f8e2de74fff7accff0ca667a32

SHA512
d902a99efbd90df22027d6c9054de9916751e9672f174c466986400c6a94c3b4cfc48522d2fa2665f5c22bb7c931cad0a7698934dee62f37b172131d9bb231de

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-core-processthreads-l1-1-1.dll

Filesize
21KB

MD5
8fcee7008f86343b3c3457d18de46872

SHA1
b4a26fd572e780d29dee5cd1bb9d55d84594ff78

SHA256
72222b4a4ca744896832d9bf437d177fd0d92bc564dad4ab79e16ec51ca81187

SHA512
cf114d5ec86b28b92bff9de349b7325c2744139398ad59a9f4290cc43db03f81a172f5b029678ef464478ea6e8ad1fce61d5cf73f302043f0b40b2908b73d343

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-core-profile-l1-1-0.dll

Filesize
21KB

MD5
d774c19557320f816be704d937d94945

SHA1
2e7d5518ac8e3b6444be1ca3c36aeb6c14c7ba85

SHA256
a4f3e046387bbc3645ae982e61ab5c7b14d948c60aaf80d4c63447f7c6cb21ad

SHA512
1055f058055c5b390260761dae1f5d57027c7b0ad37964e056c99c49e937ec73610a1f6f8761e7f84879223fa60371e7d01e47fbbfe4fba0db6969d70e970eee

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-core-rtlsupport-l1-1-0.dll

Filesize
21KB

MD5
657975e3ea41b1324d9dcbd9e54434d7

SHA1
f083eb8f0748a9578c0ca37cb375c28fb246f1e5

SHA256
21acc6b81f1df17780829be0a9480b3596f319a30951b6b803fecdd7e4d18b4d

SHA512
657e28362ff1c8166a041031236942e7eeeffabf8020571d941e79d3292aad9311527588b41fd5a9e54a015fa93ebf92a8c0bdb74fe0c67055560f2f42a96b7e

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-core-string-l1-1-0.dll

Filesize
21KB

MD5
9169cb5487d05c9fcf49380a06b45ac7

SHA1
72a1c243bd7e80685ba999b0f0e8958bfcea2940

SHA256
b512eb70a04a28f3c0e72d010f7ac106775449012223e695edea577d09e7de0e

SHA512
0473bfeebd54b13754177288320b244c2ff6811cf5953a23e724229a7f7f4c0781547b78d01cb0fced1d54f2bfc3527597ca598e9ef8466d29a6312d53243866

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-core-synch-l1-1-0.dll

Filesize
21KB

MD5
c38cebd0027d56ad02cc191b76e7710f

SHA1
a95be3bc8453bb998b5a920ba123e9eef7539c60

SHA256
6c02302542b17bb1fbcc410b40ff34dfe3775d7929c40cb6d717bdc871f1c492

SHA512
29826cc2dab3644f8fe42ced15c013f3f364cc4c9b6da9d258d7048ff15736f385dc8b3725ed4c0f5c6f572604f3bcd3c4884899c9d08b79265ebd6b039cb060

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-core-synch-l1-2-0.dll

Filesize
21KB

MD5
607290b1a7f0d6823f7f1d991a7efc01

SHA1
c9eff2ce71e8c5862daab11feb3ec4d9307c8b02

SHA256
265452c8043692f945c778c761f8a1b9d7f152c0f074053723a79698fbf9d076

SHA512
c16bdc9e64d181d286872a013a7ba9152e15f988d0a4b302a1e7a3211ddd4eafbd7e877e0fd9175beecc22a2ce3dc2ab0077860f370099a7c5a0046569d962a4

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-core-sysinfo-l1-1-0.dll

Filesize
21KB

MD5
aa0e9adc80f42faf22699fb0854d0a21

SHA1
b59ab019d7522cb9e5f81f4294fc5b18cbbfae71

SHA256
4c149c16c035a2a903a32736aa0fc0276188daa9dcbcf74edad5933f33289b5c

SHA512
01624f5a82e280db940eca90a0319b6ed5b2d0847e4abd073a8eaf49d15024a49c5e18caec39138f6081b105e790a8ac14b68226c0a78ba25a4d9e83cf11741a

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-core-timezone-l1-1-0.dll

Filesize
21KB

MD5
26c955d0c361a32071108199c55c30d4

SHA1
104633221cd25efcb2f4edd5491b27aaffd398c8

SHA256
a1ce478f22ffdd124fae31ed61aa09d42b0b62866f0a97161b5196d6d5848a89

SHA512
e34f415ce90649d085d648ebdb382b3630471b5928296215a8116f8d7990e922224a55514808b64ec638b164065440c165c76789f0ee711bf65bcf0c62f6b66a

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-core-util-l1-1-0.dll

Filesize
21KB

MD5
c7d4348c271ee6501003da8c6100c83f

SHA1
1cbcc85a1adecfb0f7b9f98577fefdbefdfef8fa

SHA256
b83ad8f5db8efc5637ef028c15b3c04024eb8f7e21c5ae81d6c17e72291fd239

SHA512
90f98a65e96a8919dde0a0bb500597ba8ad3d44cfe6ef3357e5d4582b872164e4e74c364e49e4664f2e434964065b9b8b44e12fa62e5fca37caddf608e73187a

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-crt-conio-l1-1-0.dll

Filesize
21KB

MD5
fb2eeb241fda3a11bb48954c2986cccd

SHA1
c09c752c0461438260016e8a4b7f3c198121c765

SHA256
8c656a21898df98a85bf666ed8d455c2d344d449aa7582dc273fb36343974cd1

SHA512
5addcb0ffe5801e352cfd38475378fdab0d497a7534f54304de25f4dfda0acbccb704a17895a9614b330b41108ca1d4c4d91871497d3a2aac04a8a5f722fa705

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-crt-convert-l1-1-0.dll

Filesize
25KB

MD5
497b312d1c1aa3a0b31a1c7b68b5d508

SHA1
d69282af2dfd8244793ddfdaa33a95c5c542e228

SHA256
5dbaaba9ecd6a20bba8440ff2ef1ad6758dd267bace7a925b8001de2efc4f374

SHA512
8f0b1487b224018a2f974b278b79844a7af755324dd0eabf64351d66c2c91d1296e218318828533e95f52e3eb8c0f65d7bd2dab564b1e725f782ac211b0fa93d

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-crt-environment-l1-1-0.dll

Filesize
21KB

MD5
f68ac205b806e6c95e3052cd73f12d1d

SHA1
1eb30aafeff8482e7daff151a8c07e7328c6f16e

SHA256
c2cbc7f0ee922e3d4c46c9a1d93e8e9978c3acc36b24989238f071ebc9fce4c4

SHA512
83144531784880aaf33c20f7b8e6c56a7c7ed1ed40dea0bf045cbe7d43d3351e9ce648ae49fd3d015bbd22b0cdbda3185c581ae71e1c8bca37791fd1398d3c33

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-crt-filesystem-l1-1-0.dll

Filesize
21KB

MD5
d4562befcb8d31f2a8046d5aee1eba49

SHA1
7e6e93c33e0bb5ee38b19592167ac069660c9a28

SHA256
4a8487dc7d30d6fceb518adbc56f0818fa44bb9bb25a8d6cd66ba0f718d72f02

SHA512
11286a7091d9fe281bb6165ae991fbb17d9dc5a107e10245043cf73f89d003df058be619af1ab5f8547011c28f4e07b7fec8b37c5a24ea79fcf80e14c13b1e59

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-crt-heap-l1-1-0.dll

Filesize
21KB

MD5
b0c0132688c04e051e315d3397aa3ff7

SHA1
89d53f878aef6498457fd4cdeb9c8d8a6e1ba8ab

SHA256
da9799f5819ff0ffcc32ebb971af779f5f2be4cd45e278abd9dc39f489f24be3

SHA512
39d7a59247a1532d38b472d64d859e98513f87fb0edef64b823653f6f0b5d6c456cb8bdf481dd159d7b81caf9f3a139bccc89fbea0440c4cf8c943a761229ee6

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-crt-locale-l1-1-0.dll

Filesize
21KB

MD5
e333f5e98a7c2e481bf10929c3ea4d49

SHA1
dc88faafde60e1282906c754e2eb44d3d2f4e0ef

SHA256
1682d3ef3559b21f74d1e275e62e117acee0c6828270dfb53bc194970714e6b4

SHA512
1b6a7b33fa3bf7a879bc0c78a589dc1736a62af38f2196903629eeb6feaeb63f698900eceadcbd5e0cd6f9acb22d9b70716eefc7ed543ca490d3dfb458905305

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-crt-math-l1-1-0.dll

Filesize
29KB

MD5
10410ca052e74c262735d61d3614360d

SHA1
5ccf48f0f422858f4005f2e753c4f01fb6e4d200

SHA256
687c58b4678e8af29fafb2f22adc8f6e084b34d04302b184c49b3a70fbafa5ee

SHA512
827790c2c4b41971f47fb8a9b10095d79c8f5cd3737378f76ec0b9ac79f5b03245ff47d28437fed3384afbdca10eb9804fea26124deb026da922d717d2c08410

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-crt-multibyte-l1-1-0.dll

Filesize
29KB

MD5
6fb1dcdad0273a6d7f86037b489d6e1f

SHA1
81ba8b3a9031f44f758ee48afd1a9a39fb0b1e0e

SHA256
5a51b9b19e30917fe322da9e0724b418892295424373d3492713bbd833de1bd2

SHA512
ae43708050e3dd16b1ccbbe82be116a4d5812cc787cf7addc040414901dbd39b67ea146bd7dc2deaef7e347f6b78f628b99ef09b701e41b709052b845d861d4d

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-crt-process-l1-1-0.dll

Filesize
21KB

MD5
89675217aecc661744aab0b8351730fe

SHA1
8233458be3830b601488d3999843504b1528fa31

SHA256
3c65eb9a591835f2af9246e3a7ad1db24a15db0e67d9fd28125e255b5fcd0011

SHA512
57123997b6c4840bf81af5455b21578269a70eed8a3d8bc9b563eed146750ecc0930ff2d3f57aea0974580e58b7fce45b1776e3487b07ade334eeee817d7d16e

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-crt-runtime-l1-1-0.dll

Filesize
25KB

MD5
8c37baa24984998b761cced662683731

SHA1
39b34f57dfd2f64d81fc07f74f6a628de9d9b822

SHA256
dc940605c0af31d3208e0f662ae1e13b79f136f22a586fc9bde730b41f36b926

SHA512
d24bdeaea72f4e83a05dbf3cb04bdbd27d2fce2c61d63b7d96d08b250b457ca56ebd91f980e8212f0b11b5b10560464c0ee503a516ff5c5627cd97fe88d74196

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-crt-stdio-l1-1-0.dll

Filesize
25KB

MD5
1c3f2d414eb789463adbc20a1770a8a0

SHA1
b65b930bcd2737266215236fc09fa15b365319e6

SHA256
3c3120e5f3928f491b49316788e035e6113763262609376ec0b164091da040d2

SHA512
88e35819b70df3978f80f2871e92e59ebc86672c7bdc3f76d5e64bf1a156f010133adf6c72c805940b0b6c7388f311c9d4e17b360116352dcf2adcd1c646b970

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-crt-string-l1-1-0.dll

Filesize
25KB

MD5
5bc0b018c7018ce9d6807fefdff452bc

SHA1
25608589e36e5eedd4d8aab44da4627a9a1dcba5

SHA256
877a1fd5126d7986b055b80c6e8eab4188513a0579b757d8ac456bf129e0b06a

SHA512
c3fc3e2899b2b01a7d24e0de5a439512bf8783c0e74064d4ea2337e05e24de04246131e046077f62af54239ba66e5600aaa0f5bd4ac35a52e31cb7cc40a7562f

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-crt-time-l1-1-0.dll

Filesize
21KB

MD5
6ba23a351d2a87e10fb2fa1216f5ddaa

SHA1
344df304bf5e75e4887b69eade7a2cbbea4326af

SHA256
b9f636bce0a07386a06b2c5af27215d21e4aa6211ce5a0e0bf84306a83bfa1ed

SHA512
b099d81390412f5343407e1707f11451e68765c159c14971283e304a516fe28ccf2caaf7aa6bedc8d000287a64a83155b3a4134d2eb45caa7c229f36ed28bfc7

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\api-ms-win-crt-utility-l1-1-0.dll

Filesize
21KB

MD5
ce26d321a4e7bb793fb43299182c2f15

SHA1
aff193263bf8fbbba5fbfc38903bb0505360c52c

SHA256
16b10939411e248a16990e604c950ea50a97657c9516326eba03c504ebb299ec

SHA512
d67403b38cb571f330e86648aa53969a8b345c8ed017002f539127e5a308fce84f46b48b917b7dc602458829f358e5ae991882490595a6c48dffc920e90181e1

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\base_library.zip

Filesize
1.4MB

MD5
5011d68fbea0156fe813d00c1f7d9af2

SHA1
d76d817cac04d830707ce97b4d0d582a988e1dbd

SHA256
b9e9569931047cd6a455ec826791c2e6c249c814dc0fa71f0bd7fa7f49b8948d

SHA512
6a5affde07b5150b5aee854851f9f68c727b0f5ba83513c294d27461546a5ef67bf6c5869fc4abdadaa9bf1767ea897910c640c5494b659a29004050c9c5d099

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\libcrypto-1_1.dll

Filesize
3.3MB

MD5
9d7a0c99256c50afd5b0560ba2548930

SHA1
76bd9f13597a46f5283aa35c30b53c21976d0824

SHA256
9b7b4a0ad212095a8c2e35c71694d8a1764cd72a829e8e17c8afe3a55f147939

SHA512
cb39aa99b9d98c735fdacf1c5ed68a4d09d11f30262b91f6aa48c3f8520eff95e499400d0ce7e280ca7a90ff6d7141d2d893ef0b33a8803a1cadb28ba9a9e3e2

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\libffi-8.dll

Filesize
38KB

MD5
0f8e4992ca92baaf54cc0b43aaccce21

SHA1
c7300975df267b1d6adcbac0ac93fd7b1ab49bd2

SHA256
eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a

SHA512
6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\libssl-1_1.dll

Filesize
688KB

MD5
bec0f86f9da765e2a02c9237259a7898

SHA1
3caa604c3fff88e71f489977e4293a488fb5671c

SHA256
d74ce01319ae6f54483a19375524aa39d9f5fd91f06cf7df238ca25e043130fd

SHA512
ffbc4e5ffdb49704e7aa6d74533e5af76bbe5db297713d8e59bd296143fe5f145fbb616b343eed3c48eceaccccc2431630470d8975a4a17c37eafcc12edd19f4

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\pyexpat.pyd

Filesize
194KB

MD5
48e6930e3095f5a2dcf9baa67098acfb

SHA1
ddcd143f386e74e9820a3f838058c4caa7123a65

SHA256
c1ed7017ce55119df27563d470e7dc3fb29234a7f3cd5fc82d317b6fe559300b

SHA512
b50f42f6c7ddbd64bf0ff37f40b8036d253a235fb67693a7f1ed096f5c3b94c2bde67d0db63d84a8c710505a891b43f913e1b1044c42b0f5f333d0fe0386a62c

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\python311.dll

Filesize
5.4MB

MD5
9c12545ab6435dd7621383f47ddf9a6f

SHA1
0b80c4e84504f1b8823bf03ac7d05daaee0f942c

SHA256
0ebe722316f2743f7001cfa7e34ace3d10ecfcb50f6da2079de1bf3e0faa240c

SHA512
67378da9f0f96a63b8177523794f4738a858bf69beda575def8b3596c759a2dfcc05e4c2867c6b3968c1a269972f3c7ff6f309ba7778a9aac646fb1616df1a4f

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\python311.dll

Filesize
301KB

MD5
5d14bbe256ee85a76d441dc825c81883

SHA1
4447f0ce9beaff680ed520691fc7b1565db1c892

SHA256
60f139cb4fea746ad352d086018082d340366c570d6f96c2bc239f748eb35f89

SHA512
2f057f18efef19ae880ae277c9f2a8f77be907cdf4007d56374a2272ffb1b40938dfe5ac04f95f3831312226ca29a85621d74d85093b592340a9cd780424725e

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\select.pyd

Filesize
29KB

MD5
756c95d4d9b7820b00a3099faf3f4f51

SHA1
893954a45c75fb45fe8048a804990ca33f7c072d

SHA256
13e4d9a734a453a3613e11b6a518430099ad7e3d874ea407d1f9625b7f60268a

SHA512
0f54f0262cf8d71f00bf5666eb15541c6ecc5246cd298efd3b7dd39cdd29553a8242d204c42cfb28c537c3d61580153200373c34a94769f102b3baa288f6c398

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\sqlite3.dll

Filesize
1.4MB

MD5
35f55e2ad0ae11a273408cfeff75b1ab

SHA1
672bff2dea4351e1245806e6af7f1be5da9dd055

SHA256
919572560c314e46b1dba56418bbb50e1620c0af328aec394eaff580c58f2fc5

SHA512
b84a42b42a710cd5fe91def37207200141a03a8e93488d05099115f16961255248aa74c3a9800a82a0c4eb79348b570ca1a2bfa4e3168b5359ce063a688d26a4

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\tcl86t.dll

Filesize
1.8MB

MD5
ac6cd2fb2cd91780db186b8d6e447b7c

SHA1
b387b9b6ca5f0a2b70028ab2147789c4fe24ef7a

SHA256
a91781fe13548b89817462b00058a75fb0b607ec8ce99d265719ced573ade7b6

SHA512
45b24ca07a44d8d90e5efeded2697a37f000b39d305fe63a67292fdd237de3f8efd5e85b139b5702faa695f9f27f12f24ac497e005e2f3c24c141d7cd85305b6

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\tk86t.dll

Filesize
1.5MB

MD5
499fa3dea045af56ee5356c0ce7d6ce2

SHA1
0444b7d4ecd25491245824c17b84916ee5b39f74

SHA256
20139f4c327711baf18289584fa0c8112f7bb3ba55475bded21f3d107672ed94

SHA512
d776749effa241ba1415b28d2fcff1d64ed903569a8c4e56dfddd672a53b2f44119734b1959b72a9b3f4060bb2c67b7dea959cc2d4a8e9f781f17009c6840fc1

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\ucrtbase.dll

Filesize
1.1MB

MD5
07b29a42df29e2b41f241a9b9816520a

SHA1
208914e161e62ea65e7cfff63cce4986e2ff7ac8

SHA256
af845379ccf526abfcd611255049d4c560d17c37cfdb06341c47f615d106951f

SHA512
b5f6d034dd462a7ce7d2b68e71ab64aa21aa1a74b5642470d134abc3280163e47db54dfea2564f3d399adf3dbf108dcd189d5903b5cc4b44f74a540c619e8109

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI42642\unicodedata.pyd

Filesize
1.1MB

MD5
58f7988b50cba7b793884f580c7083e1

SHA1
d52c06b19861f074e41d8b521938dee8b56c1f2e

SHA256
e36d14cf49ca2af44fae8f278e883341167bc380099dac803276a11e57c9cfa1

SHA512
397fa46b90582f8a8cd7df23b722204c38544717bf546837c45e138b39112f33a1850be790e248fca5b5ecd9ed7c91cd1af1864f72717d9805c486db0505fb9c

Download Submit