Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

11/10/2024, 15:01

241011-sdwa2ayblh 7

02/10/2024, 03:16

241002-dsqa1avapn 8

02/10/2024, 03:04

241002-dkt9zsxfna 7

02/10/2024, 02:53

241002-ddfg9axcpa 7

02/10/2024, 02:33

241002-c15vzssgkp 7

Analysis

  • max time kernel
    633s
  • max time network
    607s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/10/2024, 03:04

General

  • Target

    MKMA.exe

  • Size

    132.8MB

  • MD5

    26210a8c2404f926deeaff3a0b078650

  • SHA1

    036222021f2905127521b863d3b45a57d377996c

  • SHA256

    11268095435c4f1de4e84c48b39db70f6f405c5d9619b8f4708d2accdb6c878a

  • SHA512

    6a6c590bb314ecb8c52fc466020226ff472ead6ac1564d0dd71ec20568a22acc95709fb92bbd4d8d9233f295ca2e2c9e3d0d2822a441fa3b2d595353437d8205

  • SSDEEP

    3145728:b6mC1E0qtOU9SC++6y9MgYR5tyJb2PlRy3gWINvmbcad:boHqtOnC4y9Mx5u27PNkca

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 64 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\MKMA.exe
    "C:\Users\Admin\AppData\Local\Temp\MKMA.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2448
    • C:\Users\Admin\AppData\Local\Temp\MKMA.exe
      "C:\Users\Admin\AppData\Local\Temp\MKMA.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      PID:4344
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4100,i,4356837537417149674,16553092232944545509,262144 --variations-seed-version --mojo-platform-channel-handle=3928 /prefetch:8
    1⤵
      PID:536
    • C:\Windows\system32\AUDIODG.EXE
      C:\Windows\system32\AUDIODG.EXE 0x528 0x2f8
      1⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:3328
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4768,i,4356837537417149674,16553092232944545509,262144 --variations-seed-version --mojo-platform-channel-handle=3776 /prefetch:8
      1⤵
        PID:2076
      • C:\Windows\System32\rundll32.exe
        C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
        1⤵
          PID:6656

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\MSVCP140.dll

          Filesize

          576KB

          MD5

          01b946a2edc5cc166de018dbb754b69c

          SHA1

          dbe09b7b9ab2d1a61ef63395111d2eb9b04f0a46

          SHA256

          88f55d86b50b0a7e55e71ad2d8f7552146ba26e927230daf2e26ad3a971973c5

          SHA512

          65dc3f32faf30e62dfdecb72775df870af4c3a32a0bf576ed1aaae4b16ac6897b62b19e01dc2bf46f46fbe3f475c061f79cbe987eda583fee1817070779860e5

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\MSVCP140_1.dll

          Filesize

          30KB

          MD5

          0fe6d52eb94c848fe258dc0ec9ff4c11

          SHA1

          95cc74c64ab80785f3893d61a73b8a958d24da29

          SHA256

          446c48c1224c289bd3080087fe15d6759416d64f4136addf30086abd5415d83f

          SHA512

          c39a134210e314627b0f2072f4ffc9b2ce060d44d3365d11d8c1fe908b3b9403ebdd6f33e67d556bd052338d0ed3d5f16b54d628e8290fd3a155f55d36019a86

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\Qt5Core.dll

          Filesize

          5.7MB

          MD5

          817520432a42efa345b2d97f5c24510e

          SHA1

          fea7b9c61569d7e76af5effd726b7ff6147961e5

          SHA256

          8d2ff4ce9096ddccc4f4cd62c2e41fc854cfd1b0d6e8d296645a7f5fd4ae565a

          SHA512

          8673b26ec5421fce8e23adf720de5690673bb4ce6116cb44ebcc61bbbef12c0ad286dfd675edbed5d8d000efd7609c81aae4533180cf4ec9cd5316e7028f7441

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\Qt5DBus.dll

          Filesize

          426KB

          MD5

          0e8ff02d971b61b5d2dd1ac4df01ae4a

          SHA1

          638f0b46730884fa036900649f69f3021557e2fe

          SHA256

          1aa70b106a10c86946e23caa9fc752dc16e29fbe803bba1f1ab30d1c63ee852a

          SHA512

          7ba616ede66b16d9f8b2a56c3117db49a74d59d0d32eaa6958de57eac78f14b1c7f2dbba9eae4d77937399cf14d44535531baf6f9db16f357f8712dfaae4346a

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\Qt5Gui.dll

          Filesize

          6.7MB

          MD5

          47307a1e2e9987ab422f09771d590ff1

          SHA1

          0dfc3a947e56c749a75f921f4a850a3dcbf04248

          SHA256

          5e7d2d41b8b92a880e83b8cc0ca173f5da61218604186196787ee1600956be1e

          SHA512

          21b1c133334c7ca7bbbe4f00a689c580ff80005749da1aa453cceb293f1ad99f459ca954f54e93b249d406aea038ad3d44d667899b73014f884afdbd9c461c14

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\Qt5Network.dll

          Filesize

          1.3MB

          MD5

          3569693d5bae82854de1d88f86c33184

          SHA1

          1a6084acfd2aa4d32cedfb7d9023f60eb14e1771

          SHA256

          4ef341ae9302e793878020f0740b09b0f31cb380408a697f75c69fdbd20fc7a1

          SHA512

          e5eff4a79e1bdae28a6ca0da116245a9919023560750fc4a087cdcd0ab969c2f0eeec63bbec2cd5222d6824a01dd27d2a8e6684a48202ea733f9bb2fab048b32

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\Qt5Qml.dll

          Filesize

          3.4MB

          MD5

          d055566b5168d7b1d4e307c41ce47c4b

          SHA1

          043c0056e9951da79ec94a66a784972532dc18ef

          SHA256

          30035484c81590976627f8face9507caa8581a7dc7630cccf6a8d6de65cab707

          SHA512

          4f12d17aa8a3008caa3ddd0e41d3ed713a24f9b5a465ee93b2e4beccf876d5bdf0259aa0d2dd77ad61bb59dc871f78937ffbe4d0f60638014e8ea8a27caf228d

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\Qt5QmlModels.dll

          Filesize

          428KB

          MD5

          2030c4177b499e6118be5b9e5761fce1

          SHA1

          050d0e67c4aa890c80f46cf615431004f2f4f8fc

          SHA256

          51e4e5a5e91f78774c44f69b599fae4735277ef2918f7061778615cb5c4f6e81

          SHA512

          488f7d5d9d8deee9bbb9d63dae346e46efeb62456279f388b323777999b597c2d5aea0ee379bdf94c9cbcfd3367d344fb6b5e90ac40be2ce95efa5bbdd363bcc

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\Qt5Quick.dll

          Filesize

          4.0MB

          MD5

          65f59cfc0c1c060ce20d3b9ceffbaf46

          SHA1

          cfd56d77506cd8c0671ca559d659dab39e4ad3c2

          SHA256

          c81ad3c1111544064b1830c6f1aef3c1fd13b401546ab3b852d697c0f4d854b3

          SHA512

          d6f6dc19f1a0495026cba765b5a2414b6af0dbfc37b5aceed1cd0ae37b3b0f574b759a176d75b01edd74c6ce9a3642d3d29a3fd7f166b53a41c8978f562b4b50

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\Qt5Svg.dll

          Filesize

          322KB

          MD5

          03761f923e52a7269a6e3a7452f6be93

          SHA1

          2ce53c424336bcc8047e10fa79ce9bce14059c50

          SHA256

          7348cfc6444438b8845fb3f59381227325d40ca2187d463e82fc7b8e93e38db5

          SHA512

          de0ff8ebffc62af279e239722e6eedd0b46bc213e21d0a687572bfb92ae1a1e4219322233224ca8b7211ffef52d26cb9fe171d175d2390e3b3e6710bbda010cb

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\Qt5WebSockets.dll

          Filesize

          145KB

          MD5

          a016545f963548e0f37885e07ef945c7

          SHA1

          cbe499e53ab0bd2da21018f4e2092e33560c846f

          SHA256

          6b56f77da6f17880a42d2f9d2ec8b426248f7ab2196a0f55d37ade39e3878bc6

          SHA512

          47a3c965593b97392f8995c7b80394e5368d735d4c77f610afd61367ffe7658a0e83a0dbd19962c4fa864d94f245a9185a915010afa23467f999c833982654c2

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\Qt5Widgets.dll

          Filesize

          5.2MB

          MD5

          4cd1f8fdcd617932db131c3688845ea8

          SHA1

          b090ed884b07d2d98747141aefd25590b8b254f9

          SHA256

          3788c669d4b645e5a576de9fc77fca776bf516d43c89143dc2ca28291ba14358

          SHA512

          7d47d2661bf8fac937f0d168036652b7cfe0d749b571d9773a5446c512c58ee6bb081fec817181a90f4543ebc2367c7f8881ff7f80908aa48a7f6bb261f1d199

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\SDL2.dll

          Filesize

          2.4MB

          MD5

          83c5ff24eae3b9038d74ad91dc884e32

          SHA1

          81bf9f8109d73604768bf5310f1f70af62b72e43

          SHA256

          520d0459b91efa32fbccf9027a9ca1fc5aae657e679ce8e90f179f9cf5afd279

          SHA512

          38ff01891ad5093d0e4f222c5ab703a540514271bf3b94fb65f910193262af722adb9d4f4d2bd6a54c090a7d631d8c98497b7d78bd21359fdea756ff3ac63689

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\SDL2_image.dll

          Filesize

          122KB

          MD5

          b8d249a5e394b4e6a954c557af1b80e6

          SHA1

          b03bb9d09447114a018110bfb91d56ef8d5ec3bb

          SHA256

          1e364af75fee0c83506fbdfd4d5b0e386c4e9c6a33ddbddac61ddb131e360194

          SHA512

          2f2e248c3963711f1a9f5d8baea5b8527d1df1748cd7e33bf898a380ae748f7a65629438711ff9a5343e64762ec0b5dc478cdf19fbf7111dac9d11a8427e0007

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\SDL2_mixer.dll

          Filesize

          285KB

          MD5

          201aa86dc9349396b83eed4c15abe764

          SHA1

          1a239c479e275aa7be93c5372b2d35e98d8d8cec

          SHA256

          2a0fc5e9f72c2eaec3240cb82b7594a58ccda609485981f256b94d0a4dd8d6f8

          SHA512

          bb2cd185d1d936ceca3cc20372c98a1b1542288ad5523ff8b823fb5e842205656ec2f615f076929c69987c7468245a452238b509d37109c9bec26be5f638f3b7

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\SDL2_ttf.dll

          Filesize

          1.5MB

          MD5

          f187dfdccc102436e27704dc572a2c16

          SHA1

          be4d499e66b8c4eb92480e4f520ccd8eaaa39b04

          SHA256

          fcdfabdfce868eb33f7514025ff59c1bb6c418f1bcd6ace2300a9cd4053e1d63

          SHA512

          75002d96153dfd2bfdd6291f842fb553695ef3997012dae0b9a537c95c3f3a83b844a8d1162faefcddf9e1807f3db23b1a10c2789c95dd5f6fad2286bae91afb

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\VCRUNTIME140.dll

          Filesize

          116KB

          MD5

          be8dbe2dc77ebe7f88f910c61aec691a

          SHA1

          a19f08bb2b1c1de5bb61daf9f2304531321e0e40

          SHA256

          4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83

          SHA512

          0da644472b374f1da449a06623983d0477405b5229e386accadb154b43b8b083ee89f07c3f04d2c0c7501ead99ad95aecaa5873ff34c5eeb833285b598d5a655

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\VCRUNTIME140_1.dll

          Filesize

          43KB

          MD5

          6bc084255a5e9eb8df2bcd75b4cd0777

          SHA1

          cf071ad4e512cd934028f005cabe06384a3954b6

          SHA256

          1f0f5f2ce671e0f68cf96176721df0e5e6f527c8ca9cfa98aa875b5a3816d460

          SHA512

          b822538494d13bda947655af791fed4daa811f20c4b63a45246c8f3befa3ec37ff1aa79246c89174fe35d76ffb636fa228afa4bda0bd6d2c41d01228b151fd89

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\_asyncio.pyd

          Filesize

          69KB

          MD5

          cc0f232f2a8a359dee29a573667e6d77

          SHA1

          d3ffbf5606d9c77a0de0b7456f7a5314f420b1f7

          SHA256

          7a5c88ce496bafdf31a94ae6d70b017070703bc0a7da1dfae7c12b21bb61030d

          SHA512

          48484177bf55179607d66f5a5837a35cd586e8a9fb185de8b10865aab650b056a61d1dc96370c5efc6955ccb4e34b31810f8e1c8f5f02d268f565a73b4ff5657

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\_bz2.pyd

          Filesize

          83KB

          MD5

          dd26ed92888de9c57660a7ad631bb916

          SHA1

          77d479d44d9e04f0a1355569332233459b69a154

          SHA256

          324268786921ec940cbd4b5e2f71dafd08e578a12e373a715658527e5b211697

          SHA512

          d693367565005c1b87823e781dc5925146512182c8d8a3a2201e712c88df1c0e66e65ecaec9af22037f0a8f8b3fb3f511ea47cfd5774651d71673fab612d2897

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\_cffi_backend.cp312-win_amd64.pyd

          Filesize

          175KB

          MD5

          d8caf1c098db12b2eba8edae51f31c10

          SHA1

          e533ac6c614d95c09082ae951b3b685daca29a8f

          SHA256

          364208a97336f577d99bbaaed6d2cf8a4a24d6693b323de4665f75a964ca041d

          SHA512

          77e36f4fb44374b7c58a9005a1d7dfeb3214eabb90786e8a7c6593b5b1c7a305d6aa446be7a06ae0ff38f2bedea68cacb39053b7b7ec297bff3571b3922fd938

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\_ctypes.pyd

          Filesize

          122KB

          MD5

          c8afa1ebb28828e1115c110313d2a810

          SHA1

          1d0d28799a5dbe313b6f4ddfdb7986d2902fa97a

          SHA256

          8978972cf341ccd0edf8435d63909a739df7ef29ec7dd57ed5cab64b342891f0

          SHA512

          4d9f41bd23b62600d1eb097d1578ba656b5e13fd2f31ef74202aa511111969bb8cfc2a8e903de73bd6e63fadaa59b078714885b8c5b8ecc5c4128ff9d06c1e56

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\_lzma.pyd

          Filesize

          156KB

          MD5

          8cfbafe65d6e38dde8e2e8006b66bb3e

          SHA1

          cb63addd102e47c777d55753c00c29c547e2243c

          SHA256

          6d548db0ab73291f82cf0f4ca9ec0c81460185319c8965e829faeacae19444ff

          SHA512

          fa021615d5c080aadcd5b84fd221900054eb763a7af8638f70cf6cd49bd92773074f1ac6884f3ce1d8a15d59439f554381377faee4842ed5beb13ff3e1b510f4

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\admin_stuff.py

          Filesize

          6KB

          MD5

          d10da531a2ba14b3cab26a3ff737269d

          SHA1

          4e7904f1fdf63b8404bbb4c03abd9d19c8622f78

          SHA256

          c21bf3706fb4991a68cdb2a67d35ccf16bd087bb1a8692b59e39c02f3b7a4d6a

          SHA512

          ab83ccaeae1cdae5275f0a16a41155f565569f6f38cf4ff4b1d07dd08fc0c134616060d5ace460cd790a0c04b9b4b784ad83b11fac52428828f38e0ea64988e8

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\base_library.zip

          Filesize

          1.3MB

          MD5

          605cf0c0ef63fe301e94cbc073a503b8

          SHA1

          12589064c85195249a53656ea9a8ce6d1ae13ae6

          SHA256

          730a7bc70fdc6f06751d8f96604a5106563e0954602b0413f086956dbd3e9d5c

          SHA512

          9432476968b6dd04f9f6dd63987f7ce7693392f0d7b8f82d1f7a56e937607c016ec12d58c8fab32446ef1f2de55a0216767614eaae6f487a2bfc545ff4c78e4b

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\base_path.py

          Filesize

          39B

          MD5

          7e337c022f22e8f6c52d295f4b15bb79

          SHA1

          a0d34cd2511ca61f25c16997384e1b553b4147df

          SHA256

          bbe7e45e44d908ddf7aeffa268bb8decb7c4d6246c3bc96ee2a5e05664396b4e

          SHA512

          d7cc00579269070d6fd83de62fc456087b72d3978874e9a0ebc44f2d2bc16b01d811f63a656b35aba17268c0318c54fbe15a8abd64953c5102663ae8faaddeb6

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\file_util.py

          Filesize

          532B

          MD5

          6266c96dd59ae8b39c57b123eedf3a1b

          SHA1

          1373f26b086d2e6cc3109c221a577c700a321ff6

          SHA256

          5b35d6ec75ff099b924c0e9e13f00c599c4c6e7dae319ae73f1536a8adb01ae6

          SHA512

          49aa3dad78e5222a862389c7ebd90147908a42d3e8e4a543f6c77ce5ce83f13d559284272ad8c57528558a24de7e3b53eacb9efd599909a32182e776d85017f2

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\fractal_split.py

          Filesize

          8KB

          MD5

          48adaea167cc01ec1a0ce3578f802a56

          SHA1

          1000bb08474d39fd6261384e66222487b496f1de

          SHA256

          00d3500367a285ac6a9408170340c4c0e98ad64bf907a6ddb3d0caccef579e84

          SHA512

          6550bb505aa286ac6f3c69a44dd87c36051de30df058d7e99cd8b23272657e55d1a28e7fc92cb99b05ee25f19a842ca0a03882aa7105921a6c4ce365077aedac

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\freetype.dll

          Filesize

          639KB

          MD5

          236f879a5dd26dc7c118d43396444b1c

          SHA1

          5ed3e4e084471cf8600fb5e8c54e11a254914278

          SHA256

          1c487392d6d06970ba3c7b52705881f1fb069f607243499276c2f0c033c7df6f

          SHA512

          cc9326bf1ae8bf574a4715158eba889d7f0d5e3818e6f57395740a4b593567204d6eef95b6e99d2717128c3bffa34a8031c213ff3f2a05741e1eaf3ca07f2254

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\input_handle.py

          Filesize

          408B

          MD5

          1125c481a7689d912cff01ad5f3dd612

          SHA1

          4652f218dcb581febde6be3bf2a0ba95c631786a

          SHA256

          039cde5cc09b5d183fa74f59b5180f56ae506e9f0b1840c8de92303374750767

          SHA512

          21ecd421d1a0282c2828d6a01baeb3cdd04d5081be168680e2d7bd76b8fc2b21f6d202af429fd5b45659ecc223b2548b9616b1885567aba396279e8be1977469

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\libGLESv2.dll

          Filesize

          3.2MB

          MD5

          2247ee4356666335df7d72129af8d600

          SHA1

          f0131c1a67fc17c0e8dcc4a4ca38c9f1780e7182

          SHA256

          50fad5605b3d57627848b3b84a744dfb6a045609b8236b04124f2234676758d8

          SHA512

          67f2a7bf169c7b9a516689cf1b16446ca50e57f099b9b742ccb1abb2dcde8867f8f6305ad8842cd96194687fc314715ae04c1942b0e0a4f51b592b028c5b16d3

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\libcrypto-3.dll

          Filesize

          5.0MB

          MD5

          e547cf6d296a88f5b1c352c116df7c0c

          SHA1

          cafa14e0367f7c13ad140fd556f10f320a039783

          SHA256

          05fe080eab7fc535c51e10c1bd76a2f3e6217f9c91a25034774588881c3f99de

          SHA512

          9f42edf04c7af350a00fa4fdf92b8e2e6f47ab9d2d41491985b20cd0adde4f694253399f6a88f4bdd765c4f49792f25fb01e84ec03fd5d0be8bb61773d77d74d

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\libffi-8.dll

          Filesize

          38KB

          MD5

          0f8e4992ca92baaf54cc0b43aaccce21

          SHA1

          c7300975df267b1d6adcbac0ac93fd7b1ab49bd2

          SHA256

          eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a

          SHA512

          6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\libjpeg-9.dll

          Filesize

          238KB

          MD5

          c540308d4a8e6289c40753fdd3e1c960

          SHA1

          1b84170212ca51970f794c967465ca7e84000d0e

          SHA256

          3a224af540c96574800f5e9acf64b2cdfb9060e727919ec14fbd187a9b5bfe69

          SHA512

          1dadc6b92de9af998f83faf216d2ab6483b2dea7cdea3387ac846e924adbf624f36f8093daf5cee6010fea7f3556a5e2fcac494dbc87b5a55ce564c9cd76f92b

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\libmodplug-1.dll

          Filesize

          259KB

          MD5

          ead020db018b03e63a64ebff14c77909

          SHA1

          89bb59ae2b3b8ec56416440642076ae7b977080e

          SHA256

          0c1a9032812ec4c20003a997423e67b71ecb5e59d62cdc18a5bf591176a9010e

          SHA512

          c4742d657e5598c606ceff29c0abb19c588ba7976a7c4bff1df80a3109fe7df25e7d0dace962ec3962a94d2715a4848f2acc997a0552bf8d893ff6e7a78857e5

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\libogg-0.dll

          Filesize

          25KB

          MD5

          307ef797fc1af567101afba8f6ce6a8c

          SHA1

          0023f520f874a0c3eb3dc1fe8df73e71bde5f228

          SHA256

          57abc4f6a9accdd08bf9a2b022a66640cc626a5bd4dac6c7c4f06a5df61ee1fe

          SHA512

          5b0b6049844c6fef0cd2b6b1267130bb6e4c17b26afc898cfc17499ef05e79096cd705007a74578f11a218786119be37289290c5c47541090d7b9dea2908688e

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\libopus-0.dll

          Filesize

          359KB

          MD5

          e1adac219ec78b7b2ac9999d8c2e1c94

          SHA1

          6910ec9351bee5c355587e42bbb2d75a65ffc0cf

          SHA256

          771cae79410f7fcc4f993a105a18c4ed9e8cbddd6f807a42228d95f575808806

          SHA512

          da1912243491227168e23fb92def056b229f9f1d8c35ae122e1a0474b0be84ceb7167b138f2ee5fffd812b80c6aca719250aca6b25931585e224e27384f4cc67

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\libopusfile-0.dll

          Filesize

          45KB

          MD5

          245498839af5a75cd034190fe805d478

          SHA1

          d164c38fd9690b8649afaef7c048f4aabb51dba8

          SHA256

          ccaaca81810bd2d1cab4692b4253a639f8d5516996db0e24d881efd3efdcc6a4

          SHA512

          4181dea590cbc7a9e06729b79201aa29e8349408cb922de8d4cda555fc099b3e10fee4f5a9ddf1a22eaec8f5ede12f9d6e37ed7ad0486beb12b7330cca51a79e

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\libpng16-16.dll

          Filesize

          206KB

          MD5

          3a26cd3f92436747d2285dcef1fae67f

          SHA1

          e3d1403be06beb32fc8dc7e8a58c31e18b586a70

          SHA256

          e688b4a4d18f4b6ccc99c6ca4980f51218cb825610775192d9b60b2f05eff2d5

          SHA512

          73d651f063246723807d837811ead30e3faca8cb0581603f264c28fea1b2bdb6d874a73c1288c7770e95463786d6945b065d4ca1cf553e08220aea4e78a6f37f

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\libssl-3.dll

          Filesize

          768KB

          MD5

          19a2aba25456181d5fb572d88ac0e73e

          SHA1

          656ca8cdfc9c3a6379536e2027e93408851483db

          SHA256

          2e9fbcd8f7fdc13a5179533239811456554f2b3aa2fb10e1b17be0df81c79006

          SHA512

          df17dc8a882363a6c5a1b78ba3cf448437d1118ccc4a6275cc7681551b13c1a4e0f94e30ffb94c3530b688b62bff1c03e57c2c185a7df2bf3e5737a06e114337

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\libtiff-5.dll

          Filesize

          422KB

          MD5

          7d40a697ca6f21a8f09468b9fce565ad

          SHA1

          dc3b7f7fc0d9056af370e06f1451a65e77ff07f7

          SHA256

          ebfe97ac5ef26b94945af3db5ffd110a4b8e92dc02559bf81ccb33f0d5ebce95

          SHA512

          5a195e3123f7f17d92b7eca46b9afa1ea600623ad6929ac29197447bb4d474a068fd5f61fca6731a60514125d3b0b2cafe1ff6be3a0161251a366355b660d61a

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\libwebp-7.dll

          Filesize

          437KB

          MD5

          2c5aca898ff88eb2c9028bbeefebbd1e

          SHA1

          7a0048674ef614bebe6cc83b1228d670372076c9

          SHA256

          9a53563b6058f70f2725029b7dd2fe96f869c20e8090031cd303e994dfe07b50

          SHA512

          46fe8b151e3a13ab506c4fc8a9f3f0f47b21f64f37097a4f1f573b547443ed23e7b2f489807c1623fbc41015f7da11665d88690d8cd0ddd61aa53789586c5a13

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\portmidi.dll

          Filesize

          41KB

          MD5

          df538704b8cd0b40096f009fd5d1b767

          SHA1

          d2399fbb69d237d43624e987445694ec7e0b8615

          SHA256

          c9f8d9043ac1570b10f104f2d00aec791f56261c84ee40773be73d0a3822e013

          SHA512

          408de3e99bc1bfb5b10e58ae621c0f9276530913ff26256135fe44ce78016de274cbe4c3e967457eb71870aad34dfeb362058afcebfa2d9e64f05604ab1517d4

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\pyexpat.pyd

          Filesize

          197KB

          MD5

          815f1bdabb79c6a12b38d84aa343196d

          SHA1

          916483149875a5e20c6046ceffef62dd6089ddd5

          SHA256

          31712ae276e2ced05ecda3e1c08fbbcc2cff8474a972626aba55f7797f0ed8c9

          SHA512

          1078e7e48b6f6ed160ae2bccf80a43a5f1cca769b8a690326e112bf20d7f3d018f855f6aa3b56d315dc0853472e0affcfe8e910b5ce69ce952983cfaa496c21d

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\pygame\tests\run_tests__tests\all_ok\fake_6_test.py

          Filesize

          899B

          MD5

          1298138791b1f707f862d39399f4aff7

          SHA1

          cb2c58d7ad6bc5093688ebc28f5411544c797133

          SHA256

          cc550db032e61fd3efa68f98129bdf5b6ada43203a10bfc15b70ae3f5d1820a5

          SHA512

          bbe5517e97ffb388848817941a0c80e1e1af9d7887dba072ced6f1bb8b1b4b3b84ed73d2602ebeb7811a85c21c11b5bf891015a170cb64b9c3e50ead10c94e63

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\pygame\tests\run_tests__tests\failures1\__init__.py

          Filesize

          8B

          MD5

          d5b0eaf0ea4aa52b0dab64b782f42a29

          SHA1

          36610e835a94dc7a61ef9309348a9561774ea896

          SHA256

          f7ff302fd49cbfcfc2b3c1c9c891c6bf1d6fc1712bb2ebe5b00a8d64b709411d

          SHA512

          70241fcf496c6c14019c9611d0c9597a4ab4e4fea249a17702a9d255a701852008d6a530fc9f5df59f2e9b6b6f8b915545d1caccb919e2c2d9649c7295442e8d

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\python3.dll

          Filesize

          66KB

          MD5

          8dbe9bbf7118f4862e02cd2aaf43f1ab

          SHA1

          935bc8c5cea4502d0facf0c49c5f2b9c138608ed

          SHA256

          29f173e0147390a99f541ba0c0231fdd7dfbca84d0e2e561ef352bf1ec72f5db

          SHA512

          938f8387dcc356012ac4a952d371664700b110f7111fcc24f5df7d79791ae95bad0dbaf77d2d6c86c820bfd48a6bdbe8858b7e7ae1a77df88e596556c7135ed4

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\python312.dll

          Filesize

          6.6MB

          MD5

          cae8fa4e7cb32da83acf655c2c39d9e1

          SHA1

          7a0055588a2d232be8c56791642cb0f5abbc71f8

          SHA256

          8ad53c67c2b4db4387d5f72ee2a3ca80c40af444b22bf41a6cfda2225a27bb93

          SHA512

          db2190da2c35bceed0ef91d7553ff0dea442286490145c3d0e89db59ba1299b0851e601cc324b5f7fd026414fc73755e8eff2ef5fb5eeb1c54a9e13e7c66dd0c

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\pywintypes312.dll

          Filesize

          131KB

          MD5

          26d752c8896b324ffd12827a5e4b2808

          SHA1

          447979fa03f78cb7210a4e4ba365085ab2f42c22

          SHA256

          bd33548dbdbb178873be92901b282bad9c6817e3eac154ca50a666d5753fd7ec

          SHA512

          99c87ab9920e79a03169b29a2f838d568ca4d4056b54a67bc51caf5c0ff5a4897ed02533ba504f884c6f983ebc400743e6ad52ac451821385b1e25c3b1ebcee0

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\select.pyd

          Filesize

          30KB

          MD5

          79ce1ae3a23dff6ed5fc66e6416600cd

          SHA1

          6204374d99144b0a26fd1d61940ff4f0d17c2212

          SHA256

          678e09ad44be42fa9bc9c7a18c25dbe995a59b6c36a13eecc09c0f02a647b6f0

          SHA512

          a4e48696788798a7d061c0ef620d40187850741c2bec357db0e37a2dd94d3a50f9f55ba75dc4d95e50946cbab78b84ba1fc42d51fd498640a231321566613daa

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\setuptools-74.1.2.dist-info\INSTALLER

          Filesize

          4B

          MD5

          365c9bfeb7d89244f2ce01c1de44cb85

          SHA1

          d7a03141d5d6b1e88b6b59ef08b6681df212c599

          SHA256

          ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508

          SHA512

          d220d322a4053d84130567d626a9f7bb2fb8f0b854da1621f001826dc61b0ed6d3f91793627e6f0ac2ac27aea2b986b6a7a63427f05fe004d8a2adfbdadc13c1

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\setuptools\_vendor\jaraco.functools-4.0.1.dist-info\LICENSE

          Filesize

          1023B

          MD5

          141643e11c48898150daa83802dbc65f

          SHA1

          0445ed0f69910eeaee036f09a39a13c6e1f37e12

          SHA256

          86da0f01aeae46348a3c3d465195dc1ceccde79f79e87769a64b8da04b2a4741

          SHA512

          ef62311602b466397baf0b23caca66114f8838f9e78e1b067787ceb709d09e0530e85a47bbcd4c5a0905b74fdb30df0cc640910c6cc2e67886e5b18794a3583f

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\setuptools\_vendor\jaraco.text-3.12.1.dist-info\WHEEL

          Filesize

          92B

          MD5

          43136dde7dd276932f6197bb6d676ef4

          SHA1

          6b13c105452c519ea0b65ac1a975bd5e19c50122

          SHA256

          189eedfe4581172c1b6a02b97a8f48a14c0b5baa3239e4ca990fbd8871553714

          SHA512

          e7712ba7d36deb083ebcc3b641ad3e7d19fb071ee64ae3a35ad6a50ee882b20cd2e60ca1319199df12584fe311a6266ec74f96a3fb67e59f90c7b5909668aee1

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\tcl86t.dll

          Filesize

          1.7MB

          MD5

          3ae729942d15f4f48b1ea8c91880f1f4

          SHA1

          d27596d14af5adeb02edab74859b763bf6ac2853

          SHA256

          fe62ca2b01b0ec8a609b48f165ca9c6a91653d3966239243ad352dd4c8961760

          SHA512

          355800e9152daad675428421b867b6d48e2c8f8be9ca0284f221f27fae198c8f07d90980e04d807b50a88f92ffb946dc53b7564e080e2e0684f7f6ccc84ff245

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\terminal.py

          Filesize

          3KB

          MD5

          ad243ec8f47745e61b33160c8d4aa55c

          SHA1

          bfdea9157b404ff5ca14dd0b8ff393148e38f6c4

          SHA256

          517e695174bd2f84c381ba02cb531dff240362004688a3cf19d40e80790d4bff

          SHA512

          0f1e15b33a0dad96edb5d941f9adff2b02e82c9c496524097f20eab6436d6b8614a901979b3da2eb31888887875f17fdb538ae499149db939a19247df2305a07

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\terminal_util.py

          Filesize

          5KB

          MD5

          9826c2d1e78f1228b503c21d7884721d

          SHA1

          ea2d19fcd0e8e7390ff1cdf8b564809afbb0f482

          SHA256

          c961aa5aa32f53a509cbb807216357cf7c12950ee19bd2b78bd3661960894500

          SHA512

          efca063a07adc8e4cd1ab9dd6002b379109045359d4f7e32ded1c722e28a3addbbd13eb182ec7e91af6bcae6b9536cb318994d60acda77ab6d9808963f7dd3fa

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\tk86t.dll

          Filesize

          1.5MB

          MD5

          966580716c0d6b7eec217071a6df6796

          SHA1

          e3d2d4a7ec61d920130d7a745586ceb7aad4184d

          SHA256

          afc13fce0690c0a4b449ec7ed4fb0233a8359911c1c0ba26a285f32895dbb3d2

          SHA512

          cf0675ea888a6d1547842bcfb27d45815b164337b4a285253716917eb157c6df3cc97cba8ad2ab7096e8f5131889957e0555bae9b5a8b64745ac3d2f174e3224

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\unicodedata.pyd

          Filesize

          1.1MB

          MD5

          b848e259fabaf32b4b3c980a0a12488d

          SHA1

          da2e864e18521c86c7d8968db74bb2b28e4c23e2

          SHA256

          c65073b65f107e471c9be3c699fb11f774e9a07581f41229582f7b2154b6fc3c

          SHA512

          4c6953504d1401fe0c74435bceebc5ec7bf8991fd42b659867a3529cee5cc64da54f1ab404e88160e747887a7409098f1a85a546bc40f12f0dde0025408f9e27

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\video_stuff.py

          Filesize

          10KB

          MD5

          7ed56139e35d6e09dfa7fa2d7f7f8ff9

          SHA1

          37d1f89d36b9391fabab53169f4fb08a6b6122b7

          SHA256

          53f3217c9a6345a57c4ebb600727416e75bf80da21daba87a2fa594ca866313f

          SHA512

          07a5ed1948bd596d5e71d638ac6a37ac295dfe390632b45029d52e03b417ac0b5fd182129673f8255814bd2ede8f4b5f3c9358c7a14e6d3856fa0bf6f2a62ea6

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\view_window.py

          Filesize

          9KB

          MD5

          38423f7ec74fcdc74dd906e479b0b176

          SHA1

          e3e8c43e70cfedba32273808ff7d84349ab1cba2

          SHA256

          70185326ef845b498d7722ce375139b5c56ddb94262a19a1557b2f1e42067083

          SHA512

          c878a9f0b97745b492fd8823f942d74eb8159d9da7acd9904e385c1141187ddd02c2ee5a66ccbcdf99c413722ca1d0c41ee500bec2c7b213a91e0c852e8fe88b

        • C:\Users\Admin\AppData\Local\Temp\_MEI24482\zlib1.dll

          Filesize

          106KB

          MD5

          5eac41b641e813f2a887c25e7c87a02e

          SHA1

          ec3f6cf88711ef8cfb3cc439cb75471a2bb9e1b5

          SHA256

          b1f58a17f3bfd55523e7bef685acf5b32d1c2a6f25abdcd442681266fd26ab08

          SHA512

          cad34a495f1d67c4d79ed88c5c52cf9f2d724a1748ee92518b8ece4e8f2fe1d443dfe93fb9dba8959c0e44c7973af41eb1471507ab8a5b1200a25d75287d5de5

        • memory/4344-2129-0x00007FFAC6FF0000-0x00007FFAC7253000-memory.dmp

          Filesize

          2.4MB

        • memory/4344-2131-0x00007FFAC5AE0000-0x00007FFAC6021000-memory.dmp

          Filesize

          5.3MB

        • memory/4344-2132-0x00007FFAC51B0000-0x00007FFAC5415000-memory.dmp

          Filesize

          2.4MB

        • memory/4344-2130-0x00007FFAC6030000-0x00007FFAC651C000-memory.dmp

          Filesize

          4.9MB

        • memory/4344-2133-0x0000026905A40000-0x0000026905A50000-memory.dmp

          Filesize

          64KB

        • memory/4344-2134-0x00000269043D0000-0x00000269043D1000-memory.dmp

          Filesize

          4KB