Resubmissions

11-10-2024 15:01

241011-sdwa2ayblh 7

02-10-2024 03:16

241002-dsqa1avapn 8

02-10-2024 03:04

241002-dkt9zsxfna 7

02-10-2024 02:53

241002-ddfg9axcpa 7

02-10-2024 02:33

241002-c15vzssgkp 7

Analysis

  • max time kernel
    570s
  • max time network
    429s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-10-2024 02:53

General

  • Target

    MKMA.exe

  • Size

    132.8MB

  • MD5

    26210a8c2404f926deeaff3a0b078650

  • SHA1

    036222021f2905127521b863d3b45a57d377996c

  • SHA256

    11268095435c4f1de4e84c48b39db70f6f405c5d9619b8f4708d2accdb6c878a

  • SHA512

    6a6c590bb314ecb8c52fc466020226ff472ead6ac1564d0dd71ec20568a22acc95709fb92bbd4d8d9233f295ca2e2c9e3d0d2822a441fa3b2d595353437d8205

  • SSDEEP

    3145728:b6mC1E0qtOU9SC++6y9MgYR5tyJb2PlRy3gWINvmbcad:boHqtOnC4y9Mx5u27PNkca

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 64 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\MKMA.exe
    "C:\Users\Admin\AppData\Local\Temp\MKMA.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4432
    • C:\Users\Admin\AppData\Local\Temp\MKMA.exe
      "C:\Users\Admin\AppData\Local\Temp\MKMA.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      PID:4484
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x2f8 0x2f4
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1304

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\MSVCP140.dll

    Filesize

    576KB

    MD5

    01b946a2edc5cc166de018dbb754b69c

    SHA1

    dbe09b7b9ab2d1a61ef63395111d2eb9b04f0a46

    SHA256

    88f55d86b50b0a7e55e71ad2d8f7552146ba26e927230daf2e26ad3a971973c5

    SHA512

    65dc3f32faf30e62dfdecb72775df870af4c3a32a0bf576ed1aaae4b16ac6897b62b19e01dc2bf46f46fbe3f475c061f79cbe987eda583fee1817070779860e5

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\MSVCP140_1.dll

    Filesize

    30KB

    MD5

    0fe6d52eb94c848fe258dc0ec9ff4c11

    SHA1

    95cc74c64ab80785f3893d61a73b8a958d24da29

    SHA256

    446c48c1224c289bd3080087fe15d6759416d64f4136addf30086abd5415d83f

    SHA512

    c39a134210e314627b0f2072f4ffc9b2ce060d44d3365d11d8c1fe908b3b9403ebdd6f33e67d556bd052338d0ed3d5f16b54d628e8290fd3a155f55d36019a86

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\Qt5Core.dll

    Filesize

    5.7MB

    MD5

    817520432a42efa345b2d97f5c24510e

    SHA1

    fea7b9c61569d7e76af5effd726b7ff6147961e5

    SHA256

    8d2ff4ce9096ddccc4f4cd62c2e41fc854cfd1b0d6e8d296645a7f5fd4ae565a

    SHA512

    8673b26ec5421fce8e23adf720de5690673bb4ce6116cb44ebcc61bbbef12c0ad286dfd675edbed5d8d000efd7609c81aae4533180cf4ec9cd5316e7028f7441

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\Qt5DBus.dll

    Filesize

    426KB

    MD5

    0e8ff02d971b61b5d2dd1ac4df01ae4a

    SHA1

    638f0b46730884fa036900649f69f3021557e2fe

    SHA256

    1aa70b106a10c86946e23caa9fc752dc16e29fbe803bba1f1ab30d1c63ee852a

    SHA512

    7ba616ede66b16d9f8b2a56c3117db49a74d59d0d32eaa6958de57eac78f14b1c7f2dbba9eae4d77937399cf14d44535531baf6f9db16f357f8712dfaae4346a

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\Qt5Gui.dll

    Filesize

    6.7MB

    MD5

    47307a1e2e9987ab422f09771d590ff1

    SHA1

    0dfc3a947e56c749a75f921f4a850a3dcbf04248

    SHA256

    5e7d2d41b8b92a880e83b8cc0ca173f5da61218604186196787ee1600956be1e

    SHA512

    21b1c133334c7ca7bbbe4f00a689c580ff80005749da1aa453cceb293f1ad99f459ca954f54e93b249d406aea038ad3d44d667899b73014f884afdbd9c461c14

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\Qt5Network.dll

    Filesize

    1.3MB

    MD5

    3569693d5bae82854de1d88f86c33184

    SHA1

    1a6084acfd2aa4d32cedfb7d9023f60eb14e1771

    SHA256

    4ef341ae9302e793878020f0740b09b0f31cb380408a697f75c69fdbd20fc7a1

    SHA512

    e5eff4a79e1bdae28a6ca0da116245a9919023560750fc4a087cdcd0ab969c2f0eeec63bbec2cd5222d6824a01dd27d2a8e6684a48202ea733f9bb2fab048b32

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\Qt5Qml.dll

    Filesize

    3.4MB

    MD5

    d055566b5168d7b1d4e307c41ce47c4b

    SHA1

    043c0056e9951da79ec94a66a784972532dc18ef

    SHA256

    30035484c81590976627f8face9507caa8581a7dc7630cccf6a8d6de65cab707

    SHA512

    4f12d17aa8a3008caa3ddd0e41d3ed713a24f9b5a465ee93b2e4beccf876d5bdf0259aa0d2dd77ad61bb59dc871f78937ffbe4d0f60638014e8ea8a27caf228d

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\Qt5QmlModels.dll

    Filesize

    428KB

    MD5

    2030c4177b499e6118be5b9e5761fce1

    SHA1

    050d0e67c4aa890c80f46cf615431004f2f4f8fc

    SHA256

    51e4e5a5e91f78774c44f69b599fae4735277ef2918f7061778615cb5c4f6e81

    SHA512

    488f7d5d9d8deee9bbb9d63dae346e46efeb62456279f388b323777999b597c2d5aea0ee379bdf94c9cbcfd3367d344fb6b5e90ac40be2ce95efa5bbdd363bcc

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\Qt5Quick.dll

    Filesize

    4.0MB

    MD5

    65f59cfc0c1c060ce20d3b9ceffbaf46

    SHA1

    cfd56d77506cd8c0671ca559d659dab39e4ad3c2

    SHA256

    c81ad3c1111544064b1830c6f1aef3c1fd13b401546ab3b852d697c0f4d854b3

    SHA512

    d6f6dc19f1a0495026cba765b5a2414b6af0dbfc37b5aceed1cd0ae37b3b0f574b759a176d75b01edd74c6ce9a3642d3d29a3fd7f166b53a41c8978f562b4b50

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\Qt5Svg.dll

    Filesize

    322KB

    MD5

    03761f923e52a7269a6e3a7452f6be93

    SHA1

    2ce53c424336bcc8047e10fa79ce9bce14059c50

    SHA256

    7348cfc6444438b8845fb3f59381227325d40ca2187d463e82fc7b8e93e38db5

    SHA512

    de0ff8ebffc62af279e239722e6eedd0b46bc213e21d0a687572bfb92ae1a1e4219322233224ca8b7211ffef52d26cb9fe171d175d2390e3b3e6710bbda010cb

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\Qt5WebSockets.dll

    Filesize

    145KB

    MD5

    a016545f963548e0f37885e07ef945c7

    SHA1

    cbe499e53ab0bd2da21018f4e2092e33560c846f

    SHA256

    6b56f77da6f17880a42d2f9d2ec8b426248f7ab2196a0f55d37ade39e3878bc6

    SHA512

    47a3c965593b97392f8995c7b80394e5368d735d4c77f610afd61367ffe7658a0e83a0dbd19962c4fa864d94f245a9185a915010afa23467f999c833982654c2

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\Qt5Widgets.dll

    Filesize

    5.2MB

    MD5

    4cd1f8fdcd617932db131c3688845ea8

    SHA1

    b090ed884b07d2d98747141aefd25590b8b254f9

    SHA256

    3788c669d4b645e5a576de9fc77fca776bf516d43c89143dc2ca28291ba14358

    SHA512

    7d47d2661bf8fac937f0d168036652b7cfe0d749b571d9773a5446c512c58ee6bb081fec817181a90f4543ebc2367c7f8881ff7f80908aa48a7f6bb261f1d199

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\SDL2.dll

    Filesize

    2.4MB

    MD5

    83c5ff24eae3b9038d74ad91dc884e32

    SHA1

    81bf9f8109d73604768bf5310f1f70af62b72e43

    SHA256

    520d0459b91efa32fbccf9027a9ca1fc5aae657e679ce8e90f179f9cf5afd279

    SHA512

    38ff01891ad5093d0e4f222c5ab703a540514271bf3b94fb65f910193262af722adb9d4f4d2bd6a54c090a7d631d8c98497b7d78bd21359fdea756ff3ac63689

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\SDL2_image.dll

    Filesize

    122KB

    MD5

    b8d249a5e394b4e6a954c557af1b80e6

    SHA1

    b03bb9d09447114a018110bfb91d56ef8d5ec3bb

    SHA256

    1e364af75fee0c83506fbdfd4d5b0e386c4e9c6a33ddbddac61ddb131e360194

    SHA512

    2f2e248c3963711f1a9f5d8baea5b8527d1df1748cd7e33bf898a380ae748f7a65629438711ff9a5343e64762ec0b5dc478cdf19fbf7111dac9d11a8427e0007

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\SDL2_mixer.dll

    Filesize

    285KB

    MD5

    201aa86dc9349396b83eed4c15abe764

    SHA1

    1a239c479e275aa7be93c5372b2d35e98d8d8cec

    SHA256

    2a0fc5e9f72c2eaec3240cb82b7594a58ccda609485981f256b94d0a4dd8d6f8

    SHA512

    bb2cd185d1d936ceca3cc20372c98a1b1542288ad5523ff8b823fb5e842205656ec2f615f076929c69987c7468245a452238b509d37109c9bec26be5f638f3b7

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\SDL2_ttf.dll

    Filesize

    1.5MB

    MD5

    f187dfdccc102436e27704dc572a2c16

    SHA1

    be4d499e66b8c4eb92480e4f520ccd8eaaa39b04

    SHA256

    fcdfabdfce868eb33f7514025ff59c1bb6c418f1bcd6ace2300a9cd4053e1d63

    SHA512

    75002d96153dfd2bfdd6291f842fb553695ef3997012dae0b9a537c95c3f3a83b844a8d1162faefcddf9e1807f3db23b1a10c2789c95dd5f6fad2286bae91afb

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\VCRUNTIME140.dll

    Filesize

    116KB

    MD5

    be8dbe2dc77ebe7f88f910c61aec691a

    SHA1

    a19f08bb2b1c1de5bb61daf9f2304531321e0e40

    SHA256

    4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83

    SHA512

    0da644472b374f1da449a06623983d0477405b5229e386accadb154b43b8b083ee89f07c3f04d2c0c7501ead99ad95aecaa5873ff34c5eeb833285b598d5a655

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\VCRUNTIME140_1.dll

    Filesize

    43KB

    MD5

    6bc084255a5e9eb8df2bcd75b4cd0777

    SHA1

    cf071ad4e512cd934028f005cabe06384a3954b6

    SHA256

    1f0f5f2ce671e0f68cf96176721df0e5e6f527c8ca9cfa98aa875b5a3816d460

    SHA512

    b822538494d13bda947655af791fed4daa811f20c4b63a45246c8f3befa3ec37ff1aa79246c89174fe35d76ffb636fa228afa4bda0bd6d2c41d01228b151fd89

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\_asyncio.pyd

    Filesize

    69KB

    MD5

    cc0f232f2a8a359dee29a573667e6d77

    SHA1

    d3ffbf5606d9c77a0de0b7456f7a5314f420b1f7

    SHA256

    7a5c88ce496bafdf31a94ae6d70b017070703bc0a7da1dfae7c12b21bb61030d

    SHA512

    48484177bf55179607d66f5a5837a35cd586e8a9fb185de8b10865aab650b056a61d1dc96370c5efc6955ccb4e34b31810f8e1c8f5f02d268f565a73b4ff5657

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\_bz2.pyd

    Filesize

    83KB

    MD5

    dd26ed92888de9c57660a7ad631bb916

    SHA1

    77d479d44d9e04f0a1355569332233459b69a154

    SHA256

    324268786921ec940cbd4b5e2f71dafd08e578a12e373a715658527e5b211697

    SHA512

    d693367565005c1b87823e781dc5925146512182c8d8a3a2201e712c88df1c0e66e65ecaec9af22037f0a8f8b3fb3f511ea47cfd5774651d71673fab612d2897

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\_cffi_backend.cp312-win_amd64.pyd

    Filesize

    175KB

    MD5

    d8caf1c098db12b2eba8edae51f31c10

    SHA1

    e533ac6c614d95c09082ae951b3b685daca29a8f

    SHA256

    364208a97336f577d99bbaaed6d2cf8a4a24d6693b323de4665f75a964ca041d

    SHA512

    77e36f4fb44374b7c58a9005a1d7dfeb3214eabb90786e8a7c6593b5b1c7a305d6aa446be7a06ae0ff38f2bedea68cacb39053b7b7ec297bff3571b3922fd938

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\_ctypes.pyd

    Filesize

    122KB

    MD5

    c8afa1ebb28828e1115c110313d2a810

    SHA1

    1d0d28799a5dbe313b6f4ddfdb7986d2902fa97a

    SHA256

    8978972cf341ccd0edf8435d63909a739df7ef29ec7dd57ed5cab64b342891f0

    SHA512

    4d9f41bd23b62600d1eb097d1578ba656b5e13fd2f31ef74202aa511111969bb8cfc2a8e903de73bd6e63fadaa59b078714885b8c5b8ecc5c4128ff9d06c1e56

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\_lzma.pyd

    Filesize

    156KB

    MD5

    8cfbafe65d6e38dde8e2e8006b66bb3e

    SHA1

    cb63addd102e47c777d55753c00c29c547e2243c

    SHA256

    6d548db0ab73291f82cf0f4ca9ec0c81460185319c8965e829faeacae19444ff

    SHA512

    fa021615d5c080aadcd5b84fd221900054eb763a7af8638f70cf6cd49bd92773074f1ac6884f3ce1d8a15d59439f554381377faee4842ed5beb13ff3e1b510f4

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\admin_stuff.py

    Filesize

    6KB

    MD5

    d10da531a2ba14b3cab26a3ff737269d

    SHA1

    4e7904f1fdf63b8404bbb4c03abd9d19c8622f78

    SHA256

    c21bf3706fb4991a68cdb2a67d35ccf16bd087bb1a8692b59e39c02f3b7a4d6a

    SHA512

    ab83ccaeae1cdae5275f0a16a41155f565569f6f38cf4ff4b1d07dd08fc0c134616060d5ace460cd790a0c04b9b4b784ad83b11fac52428828f38e0ea64988e8

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\base_library.zip

    Filesize

    1.3MB

    MD5

    605cf0c0ef63fe301e94cbc073a503b8

    SHA1

    12589064c85195249a53656ea9a8ce6d1ae13ae6

    SHA256

    730a7bc70fdc6f06751d8f96604a5106563e0954602b0413f086956dbd3e9d5c

    SHA512

    9432476968b6dd04f9f6dd63987f7ce7693392f0d7b8f82d1f7a56e937607c016ec12d58c8fab32446ef1f2de55a0216767614eaae6f487a2bfc545ff4c78e4b

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\base_path.py

    Filesize

    39B

    MD5

    7e337c022f22e8f6c52d295f4b15bb79

    SHA1

    a0d34cd2511ca61f25c16997384e1b553b4147df

    SHA256

    bbe7e45e44d908ddf7aeffa268bb8decb7c4d6246c3bc96ee2a5e05664396b4e

    SHA512

    d7cc00579269070d6fd83de62fc456087b72d3978874e9a0ebc44f2d2bc16b01d811f63a656b35aba17268c0318c54fbe15a8abd64953c5102663ae8faaddeb6

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\file_util.py

    Filesize

    532B

    MD5

    6266c96dd59ae8b39c57b123eedf3a1b

    SHA1

    1373f26b086d2e6cc3109c221a577c700a321ff6

    SHA256

    5b35d6ec75ff099b924c0e9e13f00c599c4c6e7dae319ae73f1536a8adb01ae6

    SHA512

    49aa3dad78e5222a862389c7ebd90147908a42d3e8e4a543f6c77ce5ce83f13d559284272ad8c57528558a24de7e3b53eacb9efd599909a32182e776d85017f2

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\fractal_split.py

    Filesize

    8KB

    MD5

    48adaea167cc01ec1a0ce3578f802a56

    SHA1

    1000bb08474d39fd6261384e66222487b496f1de

    SHA256

    00d3500367a285ac6a9408170340c4c0e98ad64bf907a6ddb3d0caccef579e84

    SHA512

    6550bb505aa286ac6f3c69a44dd87c36051de30df058d7e99cd8b23272657e55d1a28e7fc92cb99b05ee25f19a842ca0a03882aa7105921a6c4ce365077aedac

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\freetype.dll

    Filesize

    639KB

    MD5

    236f879a5dd26dc7c118d43396444b1c

    SHA1

    5ed3e4e084471cf8600fb5e8c54e11a254914278

    SHA256

    1c487392d6d06970ba3c7b52705881f1fb069f607243499276c2f0c033c7df6f

    SHA512

    cc9326bf1ae8bf574a4715158eba889d7f0d5e3818e6f57395740a4b593567204d6eef95b6e99d2717128c3bffa34a8031c213ff3f2a05741e1eaf3ca07f2254

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\input_handle.py

    Filesize

    408B

    MD5

    1125c481a7689d912cff01ad5f3dd612

    SHA1

    4652f218dcb581febde6be3bf2a0ba95c631786a

    SHA256

    039cde5cc09b5d183fa74f59b5180f56ae506e9f0b1840c8de92303374750767

    SHA512

    21ecd421d1a0282c2828d6a01baeb3cdd04d5081be168680e2d7bd76b8fc2b21f6d202af429fd5b45659ecc223b2548b9616b1885567aba396279e8be1977469

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\libGLESv2.dll

    Filesize

    3.2MB

    MD5

    2247ee4356666335df7d72129af8d600

    SHA1

    f0131c1a67fc17c0e8dcc4a4ca38c9f1780e7182

    SHA256

    50fad5605b3d57627848b3b84a744dfb6a045609b8236b04124f2234676758d8

    SHA512

    67f2a7bf169c7b9a516689cf1b16446ca50e57f099b9b742ccb1abb2dcde8867f8f6305ad8842cd96194687fc314715ae04c1942b0e0a4f51b592b028c5b16d3

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\libcrypto-3.dll

    Filesize

    5.0MB

    MD5

    e547cf6d296a88f5b1c352c116df7c0c

    SHA1

    cafa14e0367f7c13ad140fd556f10f320a039783

    SHA256

    05fe080eab7fc535c51e10c1bd76a2f3e6217f9c91a25034774588881c3f99de

    SHA512

    9f42edf04c7af350a00fa4fdf92b8e2e6f47ab9d2d41491985b20cd0adde4f694253399f6a88f4bdd765c4f49792f25fb01e84ec03fd5d0be8bb61773d77d74d

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\libffi-8.dll

    Filesize

    38KB

    MD5

    0f8e4992ca92baaf54cc0b43aaccce21

    SHA1

    c7300975df267b1d6adcbac0ac93fd7b1ab49bd2

    SHA256

    eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a

    SHA512

    6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\libjpeg-9.dll

    Filesize

    238KB

    MD5

    c540308d4a8e6289c40753fdd3e1c960

    SHA1

    1b84170212ca51970f794c967465ca7e84000d0e

    SHA256

    3a224af540c96574800f5e9acf64b2cdfb9060e727919ec14fbd187a9b5bfe69

    SHA512

    1dadc6b92de9af998f83faf216d2ab6483b2dea7cdea3387ac846e924adbf624f36f8093daf5cee6010fea7f3556a5e2fcac494dbc87b5a55ce564c9cd76f92b

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\libmodplug-1.dll

    Filesize

    259KB

    MD5

    ead020db018b03e63a64ebff14c77909

    SHA1

    89bb59ae2b3b8ec56416440642076ae7b977080e

    SHA256

    0c1a9032812ec4c20003a997423e67b71ecb5e59d62cdc18a5bf591176a9010e

    SHA512

    c4742d657e5598c606ceff29c0abb19c588ba7976a7c4bff1df80a3109fe7df25e7d0dace962ec3962a94d2715a4848f2acc997a0552bf8d893ff6e7a78857e5

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\libogg-0.dll

    Filesize

    25KB

    MD5

    307ef797fc1af567101afba8f6ce6a8c

    SHA1

    0023f520f874a0c3eb3dc1fe8df73e71bde5f228

    SHA256

    57abc4f6a9accdd08bf9a2b022a66640cc626a5bd4dac6c7c4f06a5df61ee1fe

    SHA512

    5b0b6049844c6fef0cd2b6b1267130bb6e4c17b26afc898cfc17499ef05e79096cd705007a74578f11a218786119be37289290c5c47541090d7b9dea2908688e

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\libopus-0.dll

    Filesize

    359KB

    MD5

    e1adac219ec78b7b2ac9999d8c2e1c94

    SHA1

    6910ec9351bee5c355587e42bbb2d75a65ffc0cf

    SHA256

    771cae79410f7fcc4f993a105a18c4ed9e8cbddd6f807a42228d95f575808806

    SHA512

    da1912243491227168e23fb92def056b229f9f1d8c35ae122e1a0474b0be84ceb7167b138f2ee5fffd812b80c6aca719250aca6b25931585e224e27384f4cc67

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\libopusfile-0.dll

    Filesize

    45KB

    MD5

    245498839af5a75cd034190fe805d478

    SHA1

    d164c38fd9690b8649afaef7c048f4aabb51dba8

    SHA256

    ccaaca81810bd2d1cab4692b4253a639f8d5516996db0e24d881efd3efdcc6a4

    SHA512

    4181dea590cbc7a9e06729b79201aa29e8349408cb922de8d4cda555fc099b3e10fee4f5a9ddf1a22eaec8f5ede12f9d6e37ed7ad0486beb12b7330cca51a79e

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\libpng16-16.dll

    Filesize

    206KB

    MD5

    3a26cd3f92436747d2285dcef1fae67f

    SHA1

    e3d1403be06beb32fc8dc7e8a58c31e18b586a70

    SHA256

    e688b4a4d18f4b6ccc99c6ca4980f51218cb825610775192d9b60b2f05eff2d5

    SHA512

    73d651f063246723807d837811ead30e3faca8cb0581603f264c28fea1b2bdb6d874a73c1288c7770e95463786d6945b065d4ca1cf553e08220aea4e78a6f37f

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\libssl-3.dll

    Filesize

    768KB

    MD5

    19a2aba25456181d5fb572d88ac0e73e

    SHA1

    656ca8cdfc9c3a6379536e2027e93408851483db

    SHA256

    2e9fbcd8f7fdc13a5179533239811456554f2b3aa2fb10e1b17be0df81c79006

    SHA512

    df17dc8a882363a6c5a1b78ba3cf448437d1118ccc4a6275cc7681551b13c1a4e0f94e30ffb94c3530b688b62bff1c03e57c2c185a7df2bf3e5737a06e114337

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\libtiff-5.dll

    Filesize

    422KB

    MD5

    7d40a697ca6f21a8f09468b9fce565ad

    SHA1

    dc3b7f7fc0d9056af370e06f1451a65e77ff07f7

    SHA256

    ebfe97ac5ef26b94945af3db5ffd110a4b8e92dc02559bf81ccb33f0d5ebce95

    SHA512

    5a195e3123f7f17d92b7eca46b9afa1ea600623ad6929ac29197447bb4d474a068fd5f61fca6731a60514125d3b0b2cafe1ff6be3a0161251a366355b660d61a

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\libwebp-7.dll

    Filesize

    437KB

    MD5

    2c5aca898ff88eb2c9028bbeefebbd1e

    SHA1

    7a0048674ef614bebe6cc83b1228d670372076c9

    SHA256

    9a53563b6058f70f2725029b7dd2fe96f869c20e8090031cd303e994dfe07b50

    SHA512

    46fe8b151e3a13ab506c4fc8a9f3f0f47b21f64f37097a4f1f573b547443ed23e7b2f489807c1623fbc41015f7da11665d88690d8cd0ddd61aa53789586c5a13

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\portmidi.dll

    Filesize

    41KB

    MD5

    df538704b8cd0b40096f009fd5d1b767

    SHA1

    d2399fbb69d237d43624e987445694ec7e0b8615

    SHA256

    c9f8d9043ac1570b10f104f2d00aec791f56261c84ee40773be73d0a3822e013

    SHA512

    408de3e99bc1bfb5b10e58ae621c0f9276530913ff26256135fe44ce78016de274cbe4c3e967457eb71870aad34dfeb362058afcebfa2d9e64f05604ab1517d4

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\pyexpat.pyd

    Filesize

    197KB

    MD5

    815f1bdabb79c6a12b38d84aa343196d

    SHA1

    916483149875a5e20c6046ceffef62dd6089ddd5

    SHA256

    31712ae276e2ced05ecda3e1c08fbbcc2cff8474a972626aba55f7797f0ed8c9

    SHA512

    1078e7e48b6f6ed160ae2bccf80a43a5f1cca769b8a690326e112bf20d7f3d018f855f6aa3b56d315dc0853472e0affcfe8e910b5ce69ce952983cfaa496c21d

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\pygame\tests\run_tests__tests\all_ok\fake_6_test.py

    Filesize

    899B

    MD5

    1298138791b1f707f862d39399f4aff7

    SHA1

    cb2c58d7ad6bc5093688ebc28f5411544c797133

    SHA256

    cc550db032e61fd3efa68f98129bdf5b6ada43203a10bfc15b70ae3f5d1820a5

    SHA512

    bbe5517e97ffb388848817941a0c80e1e1af9d7887dba072ced6f1bb8b1b4b3b84ed73d2602ebeb7811a85c21c11b5bf891015a170cb64b9c3e50ead10c94e63

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\pygame\tests\run_tests__tests\failures1\__init__.py

    Filesize

    8B

    MD5

    d5b0eaf0ea4aa52b0dab64b782f42a29

    SHA1

    36610e835a94dc7a61ef9309348a9561774ea896

    SHA256

    f7ff302fd49cbfcfc2b3c1c9c891c6bf1d6fc1712bb2ebe5b00a8d64b709411d

    SHA512

    70241fcf496c6c14019c9611d0c9597a4ab4e4fea249a17702a9d255a701852008d6a530fc9f5df59f2e9b6b6f8b915545d1caccb919e2c2d9649c7295442e8d

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\python3.DLL

    Filesize

    66KB

    MD5

    8dbe9bbf7118f4862e02cd2aaf43f1ab

    SHA1

    935bc8c5cea4502d0facf0c49c5f2b9c138608ed

    SHA256

    29f173e0147390a99f541ba0c0231fdd7dfbca84d0e2e561ef352bf1ec72f5db

    SHA512

    938f8387dcc356012ac4a952d371664700b110f7111fcc24f5df7d79791ae95bad0dbaf77d2d6c86c820bfd48a6bdbe8858b7e7ae1a77df88e596556c7135ed4

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\python312.dll

    Filesize

    6.6MB

    MD5

    cae8fa4e7cb32da83acf655c2c39d9e1

    SHA1

    7a0055588a2d232be8c56791642cb0f5abbc71f8

    SHA256

    8ad53c67c2b4db4387d5f72ee2a3ca80c40af444b22bf41a6cfda2225a27bb93

    SHA512

    db2190da2c35bceed0ef91d7553ff0dea442286490145c3d0e89db59ba1299b0851e601cc324b5f7fd026414fc73755e8eff2ef5fb5eeb1c54a9e13e7c66dd0c

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\pywintypes312.dll

    Filesize

    131KB

    MD5

    26d752c8896b324ffd12827a5e4b2808

    SHA1

    447979fa03f78cb7210a4e4ba365085ab2f42c22

    SHA256

    bd33548dbdbb178873be92901b282bad9c6817e3eac154ca50a666d5753fd7ec

    SHA512

    99c87ab9920e79a03169b29a2f838d568ca4d4056b54a67bc51caf5c0ff5a4897ed02533ba504f884c6f983ebc400743e6ad52ac451821385b1e25c3b1ebcee0

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\select.pyd

    Filesize

    30KB

    MD5

    79ce1ae3a23dff6ed5fc66e6416600cd

    SHA1

    6204374d99144b0a26fd1d61940ff4f0d17c2212

    SHA256

    678e09ad44be42fa9bc9c7a18c25dbe995a59b6c36a13eecc09c0f02a647b6f0

    SHA512

    a4e48696788798a7d061c0ef620d40187850741c2bec357db0e37a2dd94d3a50f9f55ba75dc4d95e50946cbab78b84ba1fc42d51fd498640a231321566613daa

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\setuptools-74.1.2.dist-info\INSTALLER

    Filesize

    4B

    MD5

    365c9bfeb7d89244f2ce01c1de44cb85

    SHA1

    d7a03141d5d6b1e88b6b59ef08b6681df212c599

    SHA256

    ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508

    SHA512

    d220d322a4053d84130567d626a9f7bb2fb8f0b854da1621f001826dc61b0ed6d3f91793627e6f0ac2ac27aea2b986b6a7a63427f05fe004d8a2adfbdadc13c1

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\setuptools\_vendor\jaraco.functools-4.0.1.dist-info\LICENSE

    Filesize

    1023B

    MD5

    141643e11c48898150daa83802dbc65f

    SHA1

    0445ed0f69910eeaee036f09a39a13c6e1f37e12

    SHA256

    86da0f01aeae46348a3c3d465195dc1ceccde79f79e87769a64b8da04b2a4741

    SHA512

    ef62311602b466397baf0b23caca66114f8838f9e78e1b067787ceb709d09e0530e85a47bbcd4c5a0905b74fdb30df0cc640910c6cc2e67886e5b18794a3583f

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\setuptools\_vendor\jaraco.text-3.12.1.dist-info\WHEEL

    Filesize

    92B

    MD5

    43136dde7dd276932f6197bb6d676ef4

    SHA1

    6b13c105452c519ea0b65ac1a975bd5e19c50122

    SHA256

    189eedfe4581172c1b6a02b97a8f48a14c0b5baa3239e4ca990fbd8871553714

    SHA512

    e7712ba7d36deb083ebcc3b641ad3e7d19fb071ee64ae3a35ad6a50ee882b20cd2e60ca1319199df12584fe311a6266ec74f96a3fb67e59f90c7b5909668aee1

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\tcl86t.dll

    Filesize

    1.7MB

    MD5

    3ae729942d15f4f48b1ea8c91880f1f4

    SHA1

    d27596d14af5adeb02edab74859b763bf6ac2853

    SHA256

    fe62ca2b01b0ec8a609b48f165ca9c6a91653d3966239243ad352dd4c8961760

    SHA512

    355800e9152daad675428421b867b6d48e2c8f8be9ca0284f221f27fae198c8f07d90980e04d807b50a88f92ffb946dc53b7564e080e2e0684f7f6ccc84ff245

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\terminal.py

    Filesize

    3KB

    MD5

    ad243ec8f47745e61b33160c8d4aa55c

    SHA1

    bfdea9157b404ff5ca14dd0b8ff393148e38f6c4

    SHA256

    517e695174bd2f84c381ba02cb531dff240362004688a3cf19d40e80790d4bff

    SHA512

    0f1e15b33a0dad96edb5d941f9adff2b02e82c9c496524097f20eab6436d6b8614a901979b3da2eb31888887875f17fdb538ae499149db939a19247df2305a07

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\terminal_util.py

    Filesize

    5KB

    MD5

    9826c2d1e78f1228b503c21d7884721d

    SHA1

    ea2d19fcd0e8e7390ff1cdf8b564809afbb0f482

    SHA256

    c961aa5aa32f53a509cbb807216357cf7c12950ee19bd2b78bd3661960894500

    SHA512

    efca063a07adc8e4cd1ab9dd6002b379109045359d4f7e32ded1c722e28a3addbbd13eb182ec7e91af6bcae6b9536cb318994d60acda77ab6d9808963f7dd3fa

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\tk86t.dll

    Filesize

    1.5MB

    MD5

    966580716c0d6b7eec217071a6df6796

    SHA1

    e3d2d4a7ec61d920130d7a745586ceb7aad4184d

    SHA256

    afc13fce0690c0a4b449ec7ed4fb0233a8359911c1c0ba26a285f32895dbb3d2

    SHA512

    cf0675ea888a6d1547842bcfb27d45815b164337b4a285253716917eb157c6df3cc97cba8ad2ab7096e8f5131889957e0555bae9b5a8b64745ac3d2f174e3224

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\unicodedata.pyd

    Filesize

    1.1MB

    MD5

    b848e259fabaf32b4b3c980a0a12488d

    SHA1

    da2e864e18521c86c7d8968db74bb2b28e4c23e2

    SHA256

    c65073b65f107e471c9be3c699fb11f774e9a07581f41229582f7b2154b6fc3c

    SHA512

    4c6953504d1401fe0c74435bceebc5ec7bf8991fd42b659867a3529cee5cc64da54f1ab404e88160e747887a7409098f1a85a546bc40f12f0dde0025408f9e27

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\video_stuff.py

    Filesize

    10KB

    MD5

    7ed56139e35d6e09dfa7fa2d7f7f8ff9

    SHA1

    37d1f89d36b9391fabab53169f4fb08a6b6122b7

    SHA256

    53f3217c9a6345a57c4ebb600727416e75bf80da21daba87a2fa594ca866313f

    SHA512

    07a5ed1948bd596d5e71d638ac6a37ac295dfe390632b45029d52e03b417ac0b5fd182129673f8255814bd2ede8f4b5f3c9358c7a14e6d3856fa0bf6f2a62ea6

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\view_window.py

    Filesize

    9KB

    MD5

    38423f7ec74fcdc74dd906e479b0b176

    SHA1

    e3e8c43e70cfedba32273808ff7d84349ab1cba2

    SHA256

    70185326ef845b498d7722ce375139b5c56ddb94262a19a1557b2f1e42067083

    SHA512

    c878a9f0b97745b492fd8823f942d74eb8159d9da7acd9904e385c1141187ddd02c2ee5a66ccbcdf99c413722ca1d0c41ee500bec2c7b213a91e0c852e8fe88b

  • C:\Users\Admin\AppData\Local\Temp\_MEI44322\zlib1.dll

    Filesize

    106KB

    MD5

    5eac41b641e813f2a887c25e7c87a02e

    SHA1

    ec3f6cf88711ef8cfb3cc439cb75471a2bb9e1b5

    SHA256

    b1f58a17f3bfd55523e7bef685acf5b32d1c2a6f25abdcd442681266fd26ab08

    SHA512

    cad34a495f1d67c4d79ed88c5c52cf9f2d724a1748ee92518b8ece4e8f2fe1d443dfe93fb9dba8959c0e44c7973af41eb1471507ab8a5b1200a25d75287d5de5

  • memory/4484-2129-0x00007FF92D880000-0x00007FF92DAE3000-memory.dmp

    Filesize

    2.4MB

  • memory/4484-2130-0x00007FF92C8C0000-0x00007FF92CDAC000-memory.dmp

    Filesize

    4.9MB

  • memory/4484-2132-0x00007FF92BA40000-0x00007FF92BCA5000-memory.dmp

    Filesize

    2.4MB

  • memory/4484-2131-0x00007FF92C370000-0x00007FF92C8B1000-memory.dmp

    Filesize

    5.3MB

  • memory/4484-2133-0x0000027147410000-0x0000027147420000-memory.dmp

    Filesize

    64KB

  • memory/4484-2134-0x0000027145DA0000-0x0000027145DA1000-memory.dmp

    Filesize

    4KB