Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    94s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/09/2024, 18:56

General

  • Target

    womsz_main.exe

  • Size

    14.4MB

  • MD5

    4b79c976e5ec7be6346c46e84202f74a

  • SHA1

    06af2a8d68d98d81319a4c6aabd8c1fcdf576e46

  • SHA256

    866b38e2a8bf10bac9afb26b3e7e02dcd631882155c5b6e04ec7a95f40f8f94e

  • SHA512

    b8d1afdea4245db35c060e84f1e45f85e4dcf40e0860f3f0f1893e9100f5358ec64d9ab40205b549ff9853aa4cda9a6b1c1a9b2ca161eba6c75aed084f1c4f28

  • SSDEEP

    393216:rPDdi8AT61+TtIigeJ3YPDdyETpvB5IjWqkzCi:rPJjAO1QtIbS3YPJyEN3ILj

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 43 IoCs
  • Checks SCSI registry key(s) 3 TTPs 4 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\womsz_main.exe
    "C:\Users\Admin\AppData\Local\Temp\womsz_main.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3272
    • C:\Users\Admin\AppData\Local\Temp\womsz_main.exe
      "C:\Users\Admin\AppData\Local\Temp\womsz_main.exe"
      2⤵
      • Loads dropped DLL
      • Checks SCSI registry key(s)
      • Suspicious use of SetWindowsHookEx
      PID:5012
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x2f4 0x474
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1592

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\SDL2_image.dll

    Filesize

    122KB

    MD5

    b8d249a5e394b4e6a954c557af1b80e6

    SHA1

    b03bb9d09447114a018110bfb91d56ef8d5ec3bb

    SHA256

    1e364af75fee0c83506fbdfd4d5b0e386c4e9c6a33ddbddac61ddb131e360194

    SHA512

    2f2e248c3963711f1a9f5d8baea5b8527d1df1748cd7e33bf898a380ae748f7a65629438711ff9a5343e64762ec0b5dc478cdf19fbf7111dac9d11a8427e0007

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\SDL2_mixer.dll

    Filesize

    285KB

    MD5

    201aa86dc9349396b83eed4c15abe764

    SHA1

    1a239c479e275aa7be93c5372b2d35e98d8d8cec

    SHA256

    2a0fc5e9f72c2eaec3240cb82b7594a58ccda609485981f256b94d0a4dd8d6f8

    SHA512

    bb2cd185d1d936ceca3cc20372c98a1b1542288ad5523ff8b823fb5e842205656ec2f615f076929c69987c7468245a452238b509d37109c9bec26be5f638f3b7

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\SDL2_ttf.dll

    Filesize

    1.5MB

    MD5

    f187dfdccc102436e27704dc572a2c16

    SHA1

    be4d499e66b8c4eb92480e4f520ccd8eaaa39b04

    SHA256

    fcdfabdfce868eb33f7514025ff59c1bb6c418f1bcd6ace2300a9cd4053e1d63

    SHA512

    75002d96153dfd2bfdd6291f842fb553695ef3997012dae0b9a537c95c3f3a83b844a8d1162faefcddf9e1807f3db23b1a10c2789c95dd5f6fad2286bae91afb

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\VCRUNTIME140.dll

    Filesize

    116KB

    MD5

    be8dbe2dc77ebe7f88f910c61aec691a

    SHA1

    a19f08bb2b1c1de5bb61daf9f2304531321e0e40

    SHA256

    4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83

    SHA512

    0da644472b374f1da449a06623983d0477405b5229e386accadb154b43b8b083ee89f07c3f04d2c0c7501ead99ad95aecaa5873ff34c5eeb833285b598d5a655

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\_bz2.pyd

    Filesize

    82KB

    MD5

    59d60a559c23202beb622021af29e8a9

    SHA1

    a405f23916833f1b882f37bdbba2dd799f93ea32

    SHA256

    706d4a0c26dd454538926cbb2ff6c64257c3d9bd48c956f7cabd6def36ffd13e

    SHA512

    2f60e79603cf456b2a14b8254cec75ce8be0a28d55a874d4fb23d92d63bbe781ed823ab0f4d13a23dc60c4df505cbf1dbe1a0a2049b02e4bdec8d374898002b1

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\_ctypes.pyd

    Filesize

    122KB

    MD5

    2a834c3738742d45c0a06d40221cc588

    SHA1

    606705a593631d6767467fb38f9300d7cd04ab3e

    SHA256

    f20dfa748b878751ea1c4fe77a230d65212720652b99c4e5577bce461bbd9089

    SHA512

    924235a506ce4d635fa7c2b34e5d8e77eff73f963e58e29c6ef89db157bf7bab587678bb2120d09da70594926d82d87dbaa5d247e861e331cf591d45ea19a117

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\_decimal.pyd

    Filesize

    246KB

    MD5

    f930b7550574446a015bc602d59b0948

    SHA1

    4ee6ff8019c6c540525bdd2790fc76385cdd6186

    SHA256

    3b9ad1d2bc9ec03d37da86135853dac73b3fe851b164fe52265564a81eb8c544

    SHA512

    10b864975945d6504433554f9ff11b47218caa00f809c6bce00f9e4089b862190a4219f659697a4ba5e5c21edbe1d8d325950921e09371acc4410469bd9189ee

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\_hashlib.pyd

    Filesize

    64KB

    MD5

    b0262bd89a59a3699bfa75c4dcc3ee06

    SHA1

    eb658849c646a26572dea7f6bfc042cb62fb49dc

    SHA256

    4adfbbd6366d9b55d902fc54d2b42e7c8c989a83016ed707bd7a302fc3fc7b67

    SHA512

    2e4b214de3b306e3a16124af434ff8f5ab832aa3eeb1aa0aa9b49b0ada0928dcbb05c57909292fbe3b01126f4cd3fe0dac9cc15eaea5f3844d6e267865b9f7b1

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\_lzma.pyd

    Filesize

    155KB

    MD5

    b71dbe0f137ffbda6c3a89d5bcbf1017

    SHA1

    a2e2bdc40fdb83cc625c5b5e8a336ca3f0c29c5f

    SHA256

    6216173194b29875e84963cd4dc4752f7ca9493f5b1fd7e4130ca0e411c8ac6a

    SHA512

    9a5c7b1e25d8e1b5738f01aedfd468c1837f1ac8dd4a5b1d24ce86dcae0db1c5b20f2ff4280960bc523aee70b71db54fd515047cdaf10d21a8bec3ebd6663358

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\_queue.pyd

    Filesize

    31KB

    MD5

    f3eca4f0b2c6c17ace348e06042981a4

    SHA1

    eb694dda8ff2fe4ccae876dc0515a8efec40e20e

    SHA256

    fb57ee6adf6e7b11451b6920ddd2fb943dcd9561c9eae64fdda27c7ed0bc1b04

    SHA512

    604593460666045ca48f63d4b14fa250f9c4b9e5c7e228cc9202e7692c125aacb0018b89faa562a4197692a9bc3d2382f9e085b305272ee0a39264a2a0f53b75

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\_socket.pyd

    Filesize

    81KB

    MD5

    9c6283cc17f9d86106b706ec4ea77356

    SHA1

    af4f2f52ce6122f340e5ea1f021f98b1ffd6d5b6

    SHA256

    5cc62aac52edf87916deb4ebbad9abb58a6a3565b32e7544f672aca305c38027

    SHA512

    11fd6f570dd78f8ff00be645e47472a96daffa3253e8bd29183bccde3f0746f7e436a106e9a68c57cc05b80a112365441d06cc719d51c906703b428a32c93124

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\_ssl.pyd

    Filesize

    173KB

    MD5

    ddb21bd1acde4264754c49842de7ebc9

    SHA1

    80252d0e35568e68ded68242d76f2a5d7e00001e

    SHA256

    72bb15cd8c14ba008a52d23cdcfc851a9a4bde13deee302a5667c8ad60f94a57

    SHA512

    464520ecd1587f5cede6219faac2c903ee41d0e920bf3c9c270a544b040169dcd17a4e27f6826f480d4021077ab39a6cbbd35ebb3d71672ebb412023bc9e182a

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\_wmi.pyd

    Filesize

    35KB

    MD5

    c1654ebebfeeda425eade8b77ca96de5

    SHA1

    a4a150f1c810077b6e762f689c657227cc4fd257

    SHA256

    aa1443a715fbf84a84f39bd89707271fc11a77b597d7324ce86fc5cfa56a63a9

    SHA512

    21705b991e75efd5e59b8431a3b19ae5fcc38a3e7f137a9d52acd24e7f67d61758e48abc1c9c0d4314fa02010a1886c15ead5bca8dca1b1d4ccbfc3c589d342e

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\base_library.zip

    Filesize

    1.3MB

    MD5

    630153ac2b37b16b8c5b0dbb69a3b9d6

    SHA1

    f901cd701fe081489b45d18157b4a15c83943d9d

    SHA256

    ec4e6b8e9f6f1f4b525af72d3a6827807c7a81978cb03db5767028ebea283be2

    SHA512

    7e3a434c8df80d32e66036d831cbd6661641c0898bd0838a07038b460261bf25b72a626def06d0faa692caf64412ca699b1fa7a848fe9d969756e097cba39e41

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\freetype.dll

    Filesize

    639KB

    MD5

    236f879a5dd26dc7c118d43396444b1c

    SHA1

    5ed3e4e084471cf8600fb5e8c54e11a254914278

    SHA256

    1c487392d6d06970ba3c7b52705881f1fb069f607243499276c2f0c033c7df6f

    SHA512

    cc9326bf1ae8bf574a4715158eba889d7f0d5e3818e6f57395740a4b593567204d6eef95b6e99d2717128c3bffa34a8031c213ff3f2a05741e1eaf3ca07f2254

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\libcrypto-3.dll

    Filesize

    5.0MB

    MD5

    e547cf6d296a88f5b1c352c116df7c0c

    SHA1

    cafa14e0367f7c13ad140fd556f10f320a039783

    SHA256

    05fe080eab7fc535c51e10c1bd76a2f3e6217f9c91a25034774588881c3f99de

    SHA512

    9f42edf04c7af350a00fa4fdf92b8e2e6f47ab9d2d41491985b20cd0adde4f694253399f6a88f4bdd765c4f49792f25fb01e84ec03fd5d0be8bb61773d77d74d

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\libffi-8.dll

    Filesize

    38KB

    MD5

    0f8e4992ca92baaf54cc0b43aaccce21

    SHA1

    c7300975df267b1d6adcbac0ac93fd7b1ab49bd2

    SHA256

    eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a

    SHA512

    6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\libjpeg-9.dll

    Filesize

    238KB

    MD5

    c540308d4a8e6289c40753fdd3e1c960

    SHA1

    1b84170212ca51970f794c967465ca7e84000d0e

    SHA256

    3a224af540c96574800f5e9acf64b2cdfb9060e727919ec14fbd187a9b5bfe69

    SHA512

    1dadc6b92de9af998f83faf216d2ab6483b2dea7cdea3387ac846e924adbf624f36f8093daf5cee6010fea7f3556a5e2fcac494dbc87b5a55ce564c9cd76f92b

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\libmodplug-1.dll

    Filesize

    259KB

    MD5

    ead020db018b03e63a64ebff14c77909

    SHA1

    89bb59ae2b3b8ec56416440642076ae7b977080e

    SHA256

    0c1a9032812ec4c20003a997423e67b71ecb5e59d62cdc18a5bf591176a9010e

    SHA512

    c4742d657e5598c606ceff29c0abb19c588ba7976a7c4bff1df80a3109fe7df25e7d0dace962ec3962a94d2715a4848f2acc997a0552bf8d893ff6e7a78857e5

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\libogg-0.dll

    Filesize

    25KB

    MD5

    307ef797fc1af567101afba8f6ce6a8c

    SHA1

    0023f520f874a0c3eb3dc1fe8df73e71bde5f228

    SHA256

    57abc4f6a9accdd08bf9a2b022a66640cc626a5bd4dac6c7c4f06a5df61ee1fe

    SHA512

    5b0b6049844c6fef0cd2b6b1267130bb6e4c17b26afc898cfc17499ef05e79096cd705007a74578f11a218786119be37289290c5c47541090d7b9dea2908688e

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\libopus-0.dll

    Filesize

    359KB

    MD5

    e1adac219ec78b7b2ac9999d8c2e1c94

    SHA1

    6910ec9351bee5c355587e42bbb2d75a65ffc0cf

    SHA256

    771cae79410f7fcc4f993a105a18c4ed9e8cbddd6f807a42228d95f575808806

    SHA512

    da1912243491227168e23fb92def056b229f9f1d8c35ae122e1a0474b0be84ceb7167b138f2ee5fffd812b80c6aca719250aca6b25931585e224e27384f4cc67

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\libopusfile-0.dll

    Filesize

    45KB

    MD5

    245498839af5a75cd034190fe805d478

    SHA1

    d164c38fd9690b8649afaef7c048f4aabb51dba8

    SHA256

    ccaaca81810bd2d1cab4692b4253a639f8d5516996db0e24d881efd3efdcc6a4

    SHA512

    4181dea590cbc7a9e06729b79201aa29e8349408cb922de8d4cda555fc099b3e10fee4f5a9ddf1a22eaec8f5ede12f9d6e37ed7ad0486beb12b7330cca51a79e

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\libpng16-16.dll

    Filesize

    206KB

    MD5

    3a26cd3f92436747d2285dcef1fae67f

    SHA1

    e3d1403be06beb32fc8dc7e8a58c31e18b586a70

    SHA256

    e688b4a4d18f4b6ccc99c6ca4980f51218cb825610775192d9b60b2f05eff2d5

    SHA512

    73d651f063246723807d837811ead30e3faca8cb0581603f264c28fea1b2bdb6d874a73c1288c7770e95463786d6945b065d4ca1cf553e08220aea4e78a6f37f

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\libssl-3.dll

    Filesize

    768KB

    MD5

    19a2aba25456181d5fb572d88ac0e73e

    SHA1

    656ca8cdfc9c3a6379536e2027e93408851483db

    SHA256

    2e9fbcd8f7fdc13a5179533239811456554f2b3aa2fb10e1b17be0df81c79006

    SHA512

    df17dc8a882363a6c5a1b78ba3cf448437d1118ccc4a6275cc7681551b13c1a4e0f94e30ffb94c3530b688b62bff1c03e57c2c185a7df2bf3e5737a06e114337

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\libtiff-5.dll

    Filesize

    422KB

    MD5

    7d40a697ca6f21a8f09468b9fce565ad

    SHA1

    dc3b7f7fc0d9056af370e06f1451a65e77ff07f7

    SHA256

    ebfe97ac5ef26b94945af3db5ffd110a4b8e92dc02559bf81ccb33f0d5ebce95

    SHA512

    5a195e3123f7f17d92b7eca46b9afa1ea600623ad6929ac29197447bb4d474a068fd5f61fca6731a60514125d3b0b2cafe1ff6be3a0161251a366355b660d61a

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\libwebp-7.dll

    Filesize

    437KB

    MD5

    2c5aca898ff88eb2c9028bbeefebbd1e

    SHA1

    7a0048674ef614bebe6cc83b1228d670372076c9

    SHA256

    9a53563b6058f70f2725029b7dd2fe96f869c20e8090031cd303e994dfe07b50

    SHA512

    46fe8b151e3a13ab506c4fc8a9f3f0f47b21f64f37097a4f1f573b547443ed23e7b2f489807c1623fbc41015f7da11665d88690d8cd0ddd61aa53789586c5a13

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\portmidi.dll

    Filesize

    41KB

    MD5

    df538704b8cd0b40096f009fd5d1b767

    SHA1

    d2399fbb69d237d43624e987445694ec7e0b8615

    SHA256

    c9f8d9043ac1570b10f104f2d00aec791f56261c84ee40773be73d0a3822e013

    SHA512

    408de3e99bc1bfb5b10e58ae621c0f9276530913ff26256135fe44ce78016de274cbe4c3e967457eb71870aad34dfeb362058afcebfa2d9e64f05604ab1517d4

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\pyexpat.pyd

    Filesize

    194KB

    MD5

    f179c9bdd86a2a218a5bf9f0f1cf6cd9

    SHA1

    4544fb23d56cc76338e7f71f12f58c5fe89d0d76

    SHA256

    c42874e2cf034fb5034f0be35f7592b8a96e8903218da42e6650c504a85b37cc

    SHA512

    3464ece5c6a0e95ef6136897b70a96c69e552d28bfedd266f13eec840e36ec2286a1fb8973b212317de6fe3e93d7d7cc782eb6fc3d6a2a8f006b34f6443498de

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\pygame\SDL2.dll

    Filesize

    2.4MB

    MD5

    0293f98e4ae63f376f293c95f197b9ce

    SHA1

    6e6ae66a791001399d7dde625de50799decfbe9c

    SHA256

    2e4e823b46e95a29ad4ce4e7134417b0cd60145fefe606920ef6dc0ebcfb0021

    SHA512

    0f5f7537e414fbf04e54e744bd2c0d587c920e93ac8dcca58a15fbe041e53383b66bd7b2c1cd75f3584cab435e9ddb38354cfd7d4676dcf515642de601f3ed46

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\pygame\base.cp312-win_amd64.pyd

    Filesize

    30KB

    MD5

    e818ee9af91f276bb3aabe9b8239bcc1

    SHA1

    ff68373c78abdf5e6a77e4d062704f8f87546f76

    SHA256

    3d3d41f1bbd83323cb9c02808d50a5e1e9c8cfd8b511da81ac41b59fbbca9950

    SHA512

    f910544f7016cd6eb8a2edd5b1dfbdb82b48992a7bb63726baa7be6b30e70d2c5bead3023f286dfcfccad89f104ddc4b9c8885c78528f0e1eb0203430872bcc5

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\pygame\bufferproxy.cp312-win_amd64.pyd

    Filesize

    18KB

    MD5

    edc6c6a333956452c70a66058717cab8

    SHA1

    2abcbc6e8c9d29d7f4097ef49fb9c2c7944f91fb

    SHA256

    d165141c39be0b608d8d8f978859da069cb9748fa5ca01d4cfff37a872e646c8

    SHA512

    3fa69dbb68f09cba77c5720f601929c13c22fd5d216b1113f6c51030d86e0bba47a76cffe1fa6321985cc60b8a59b0744067cc50f8a4c6cede5f1729f73d8571

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\pygame\color.cp312-win_amd64.pyd

    Filesize

    35KB

    MD5

    e158ae9592d26e9e4572c43089c50a9f

    SHA1

    4e4e31f65b4e900e359750631cb5b24dcfeb512e

    SHA256

    2e33fb8224adfc1ca5d3076ea269bf68c569c93df890410f66c0d0f1ffd7f03b

    SHA512

    5f666c3719116d702ee35513db1bae92a6133749e27dacc593d6ae973a3a8a76a4014edc1bd7e06c1509f14a6a2bbee89624d2e8758c2891aaa6bf837873b2ab

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\pygame\constants.cp312-win_amd64.pyd

    Filesize

    49KB

    MD5

    de73e62f7003ee24e14464c87cc66c1a

    SHA1

    79df1829d55d8952328e5c467965cc95f35d5a18

    SHA256

    e564df6e3c1babf9b5fc70cc71f57a1366bc77e0b284579b443fcc6f13acf679

    SHA512

    bf69c530b18bc90d770c3400a9125b89d4ab9e086fd4568e84188994f8a8f8ec5a936f32111c0aedb9f415987b589795589ec8ab19380fa8f09d52b73f9b796f

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\pygame\display.cp312-win_amd64.pyd

    Filesize

    44KB

    MD5

    35048062ac5e538b3716c157d65ab23c

    SHA1

    1618802d2a4d90671c47df630e284feb120c3313

    SHA256

    97286c57dc7ebd768c41182999889b64cc696e72901c1ec43b6194571809c3b7

    SHA512

    71d1f88915babf575313c29bec82f56630e222a606bddd819d8f01c39b7115605f3c87cccba3360f61495443c49de228ec2582b45b8687e7e1e62e25cfa90266

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\pygame\math.cp312-win_amd64.pyd

    Filesize

    75KB

    MD5

    ee26eadf814de7320a19c5ad550eee81

    SHA1

    75affc0eea5ee5a1890375682921ddbebfc4824e

    SHA256

    359dce44d76c5c427fc907b001f57491b1a770d730398c432c3077df129007d9

    SHA512

    2db9d3672258b3a9ce34c1fd3f977130af3c2c15930f579f0dcd1b6373bb28f43d499728a07d1dfdc0ca08dd1a08b93a625962fc646817569504e1f4f85c2147

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\pygame\rect.cp312-win_amd64.pyd

    Filesize

    44KB

    MD5

    04a963ef2fd342f36d3165564b7a9a36

    SHA1

    79edc4877080924d08f4bc39018b3fe87e5d24d9

    SHA256

    afbbfb052359193b9994f40816fe955042a810ffe454335bedf78a09afa258e2

    SHA512

    c73d6ad93034863919f06b1566b3bb076e9e822079969146c5bde3c85475ccce423f874f4b950f1563c84dd05b3a7fc8a6a96ef080723409dda5b637f2af1240

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\pygame\rwobject.cp312-win_amd64.pyd

    Filesize

    19KB

    MD5

    e6b03d16c8321985b36c71597eaf2ad9

    SHA1

    76e615d3d2a7d0190b45176944111217d0cf2a16

    SHA256

    b0d0145e4daa8ed75f04b7e6659f22d08ac268b9f7cf01509a5366815389f8ce

    SHA512

    5797f7e29a76bdebdd9993da743df5d6391e54c6eb8e7392afc29bc3c2c24a8022b590e9f16371a5228bc68046c922b732ae782f3c9c678fb17bb2ff93e3138c

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\pygame\surflock.cp312-win_amd64.pyd

    Filesize

    13KB

    MD5

    0f80b51f8c0ce6abc9f5882016393f04

    SHA1

    ec1115c53f4bcaea13eddd80833c86612212ab03

    SHA256

    689794b8f6a694709f7940db47c4ae8adf2e2ef3a692deaf98e5a68bf7bc1567

    SHA512

    b5670851c86a6ad225c5f020f88e5b5b997a96e2826668750db1612ae09f3257d7c610983e881b6a79a2741136aa70db5ee9c9b482785be2f1e627758bd67c17

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\python312.dll

    Filesize

    6.7MB

    MD5

    550288a078dffc3430c08da888e70810

    SHA1

    01b1d31f37fb3fd81d893cc5e4a258e976f5884f

    SHA256

    789a42ac160cef98f8925cb347473eeeb4e70f5513242e7faba5139ba06edf2d

    SHA512

    7244432fc3716f7ef27630d4e8fbc8180a2542aa97a01d44dca260ab43966dd8ac98b6023400b0478a4809aace1a128f1f4d6e544f2e591a5b436fd4c8a9d723

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\select.pyd

    Filesize

    29KB

    MD5

    8a273f518973801f3c63d92ad726ec03

    SHA1

    069fc26b9bd0f6ea3f9b3821ad7c812fd94b021f

    SHA256

    af358285a7450de6e2e5e7ff074f964d6a257fb41d9eb750146e03c7dda503ca

    SHA512

    7fedae0573ecb3946ede7d0b809a98acad3d4c95d6c531a40e51a31bdb035badc9f416d8aaa26463784ff2c5e7a0cc2c793d62b5fdb2b8e9fad357f93d3a65f8

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\unicodedata.pyd

    Filesize

    1.1MB

    MD5

    04f35d7eec1f6b72bab9daf330fd0d6b

    SHA1

    ecf0c25ba7adf7624109e2720f2b5930cd2dba65

    SHA256

    be942308d99cc954931fe6f48ed8cc7a57891ccbe99aae728121bcda1fd929ab

    SHA512

    3da405e4c1371f4b265e744229dcc149491a112a2b7ea8e518d5945f8c259cad15583f25592b35ec8a344e43007ae00da9673822635ee734d32664f65c9c8d9b

  • C:\Users\Admin\AppData\Local\Temp\_MEI32722\zlib1.dll

    Filesize

    106KB

    MD5

    5eac41b641e813f2a887c25e7c87a02e

    SHA1

    ec3f6cf88711ef8cfb3cc439cb75471a2bb9e1b5

    SHA256

    b1f58a17f3bfd55523e7bef685acf5b32d1c2a6f25abdcd442681266fd26ab08

    SHA512

    cad34a495f1d67c4d79ed88c5c52cf9f2d724a1748ee92518b8ece4e8f2fe1d443dfe93fb9dba8959c0e44c7973af41eb1471507ab8a5b1200a25d75287d5de5

  • memory/5012-137-0x000000006A880000-0x000000006A8A7000-memory.dmp

    Filesize

    156KB

  • memory/5012-139-0x0000000062E80000-0x0000000062EA4000-memory.dmp

    Filesize

    144KB

  • memory/5012-140-0x00007FF983170000-0x00007FF9832F2000-memory.dmp

    Filesize

    1.5MB

  • memory/5012-138-0x0000000068B40000-0x0000000068B7C000-memory.dmp

    Filesize

    240KB

  • memory/5012-136-0x00007FF983300000-0x00007FF98356C000-memory.dmp

    Filesize

    2.4MB