d18bc187f93f43507c3b6684705b50c5cb87607568b25f5a384563f25124d4e1

Analysis

user interaction
yes
max time kernel
899s
max time network
902s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
17/04/2026, 19:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Injector.exe
Size 16.0MB
Sample260417-xtt55aav4v
SHA256 d18bc187f93f43507c3b6684705b50c5cb87607568b25f5a384563f25124d4e1
MD5 58c6080ff166892471befa8d3da9b387
SHA1 26b998ad7e60feaab83641facf4fb4b34531e986
SHA512 98aca2b4f04cc054bd4c3da7948a730f27702b716ece96e977d920d03acd21bd5afc057f9ba403ae2f952ae5bd0e8b0071b8c45baa7a10653cb24d1fbfbdcb10
SSDEEP 393216:El9RkMdhi5Pxfwx/hEWbdXQfM6R4Rmhg9hHsnvDwHru8S54:8LrhiJxYxZYMc3cgEHiM
TLSH
T11DF633758AD109B7E8C3A13E48748725F3B1BE624BE1C59F0B784B162E776E51D3E220
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

credential_access discovery spyware stealer

Malware Config

Signatures

Loads dropped DLL 64 IoCs

pid	Process
4892	Injector.exe
4892	Injector.exe
4892	Injector.exe
4892	Injector.exe
4892	Injector.exe
4892	Injector.exe
4892	Injector.exe
4892	Injector.exe
4892	Injector.exe
4892	Injector.exe
4892	Injector.exe
4892	Injector.exe
4892	Injector.exe
4892	Injector.exe
4892	Injector.exe
4892	Injector.exe
4892	Injector.exe
4892	Injector.exe
4892	Injector.exe
4892	Injector.exe
4892	Injector.exe
4892	Injector.exe
4892	Injector.exe
4892	Injector.exe
4892	Injector.exe
4892	Injector.exe
4892	Injector.exe
4892	Injector.exe
1652	Zentrix.exe
1652	Zentrix.exe
1652	Zentrix.exe
1652	Zentrix.exe
1652	Zentrix.exe
1652	Zentrix.exe
1652	Zentrix.exe
1652	Zentrix.exe
1652	Zentrix.exe
1652	Zentrix.exe
1652	Zentrix.exe
1652	Zentrix.exe
1652	Zentrix.exe
1652	Zentrix.exe
1652	Zentrix.exe
5148	Injector.exe
5148	Injector.exe
5148	Injector.exe
5148	Injector.exe
5148	Injector.exe
5148	Injector.exe
5148	Injector.exe
5148	Injector.exe
5148	Injector.exe
5148	Injector.exe
5148	Injector.exe
5148	Injector.exe
5148	Injector.exe
5148	Injector.exe
5148	Injector.exe
5148	Injector.exe
5148	Injector.exe
5148	Injector.exe
5148	Injector.exe
5148	Injector.exe
5148	Injector.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003
Unsecured Credentials: Credentials In Files 1 TTPs
Steal credentials from unsecured files.
credential_access stealer

Credentials In Files
T1552.001

Contacts third-party web service commonly abused for C2 1 TTPs 9 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
5	discord.com
6	discord.com
264	discord.com
360	discord.com
361	discord.com
362	discord.com
363	discord.com
260	discord.com
261	discord.com

Enumerates processes with tasklist 1 TTPs 2 IoCs

discovery

Process Discovery

T1057

pid	Process
368	tasklist.exe
2476	tasklist.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4616	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134209268028516547"	chrome.exe

Modifies registry class 7 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-721190819-434563495-2007910846-1000\{579FE01A-97A5-4E72-9F40-7C53610771D7}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe

Suspicious behavior: EnumeratesProcesses 18 IoCs

pid	Process
4892	Injector.exe
4892	Injector.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
4504	chrome.exe
4504	chrome.exe
5148	Injector.exe
5148	Injector.exe
4824	Injector.exe
4824	Injector.exe
3608	Injector.exe
3608	Injector.exe
5940	Injector.exe
5940	Injector.exe
4492	Injector.exe
4492	Injector.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 19 IoCs

pid	Process
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	4892	Injector.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe
Token: SeCreatePagefilePrivilege	3592	chrome.exe
Token: SeShutdownPrivilege	3592	chrome.exe

Suspicious use of FindShellTrayWindow 55 IoCs

pid	Process
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe
3592	chrome.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1652	Zentrix.exe
4292	Zentrix.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4980 wrote to memory of 4892	4980	Injector.exe	84
PID 3592 wrote to memory of 1372	3592	chrome.exe	98
PID 3592 wrote to memory of 3180	3592	chrome.exe	99
PID 3592 wrote to memory of 3180	3592	chrome.exe	99
PID 3592 wrote to memory of 4616	3592	chrome.exe	100
PID 3592 wrote to memory of 920	3592	chrome.exe	101
PID 3592 wrote to memory of 920	3592	chrome.exe	101
PID 3592 wrote to memory of 4256	3592	chrome.exe	103
PID 3592 wrote to memory of 5524	3592	chrome.exe	104
PID 3592 wrote to memory of 4256	3592	chrome.exe	103
PID 3592 wrote to memory of 5524	3592	chrome.exe	104
PID 3592 wrote to memory of 2888	3592	chrome.exe	105
PID 3592 wrote to memory of 2888	3592	chrome.exe	105
PID 3592 wrote to memory of 5872	3592	chrome.exe	106
PID 3592 wrote to memory of 5872	3592	chrome.exe	106
PID 3592 wrote to memory of 1436	3592	chrome.exe	107
PID 3592 wrote to memory of 5152	3592	chrome.exe	111
PID 3592 wrote to memory of 5152	3592	chrome.exe	111
PID 3592 wrote to memory of 748	3592	chrome.exe	112
PID 3592 wrote to memory of 748	3592	chrome.exe	112
PID 3592 wrote to memory of 4656	3592	chrome.exe	113
PID 3592 wrote to memory of 6048	3592	chrome.exe	114
PID 3592 wrote to memory of 4700	3592	chrome.exe	115
PID 3592 wrote to memory of 396	3592	chrome.exe	116
PID 3592 wrote to memory of 3756	3592	chrome.exe	117
PID 3592 wrote to memory of 3756	3592	chrome.exe	117
PID 3592 wrote to memory of 3988	3592	chrome.exe	119
PID 3592 wrote to memory of 3988	3592	chrome.exe	119
PID 3592 wrote to memory of 3704	3592	chrome.exe	120
PID 3592 wrote to memory of 3704	3592	chrome.exe	120
PID 3592 wrote to memory of 4264	3592	chrome.exe	121
PID 3592 wrote to memory of 4264	3592	chrome.exe	121
PID 3592 wrote to memory of 2416	3592	chrome.exe	122
PID 3592 wrote to memory of 2416	3592	chrome.exe	122
PID 3592 wrote to memory of 5820	3592	chrome.exe	123
PID 3592 wrote to memory of 5820	3592	chrome.exe	123
PID 3592 wrote to memory of 2532	3592	chrome.exe	124
PID 3592 wrote to memory of 2532	3592	chrome.exe	124
PID 3592 wrote to memory of 2112	3592	chrome.exe	125
PID 3592 wrote to memory of 2112	3592	chrome.exe	125
PID 3592 wrote to memory of 2508	3592	chrome.exe	126
PID 4644 wrote to memory of 1652	4644	Zentrix.exe	130
PID 1652 wrote to memory of 4704	1652	Zentrix.exe	131
PID 4704 wrote to memory of 368	4704	cmd.exe	133
PID 3592 wrote to memory of 4504	3592	chrome.exe	134
PID 3528 wrote to memory of 1864	3528	cmd.exe	137
PID 1864 wrote to memory of 5148	1864	Injector.exe	138
PID 5324 wrote to memory of 4824	5324	Injector.exe	140
PID 3592 wrote to memory of 4696	3592	chrome.exe	141
PID 3592 wrote to memory of 4696	3592	chrome.exe	141
PID 3592 wrote to memory of 1784	3592	chrome.exe	142
PID 3592 wrote to memory of 1784	3592	chrome.exe	142
PID 3592 wrote to memory of 2188	3592	chrome.exe	143
PID 3592 wrote to memory of 2188	3592	chrome.exe	143
PID 3592 wrote to memory of 3124	3592	chrome.exe	144
PID 3592 wrote to memory of 3124	3592	chrome.exe	144
PID 3592 wrote to memory of 4800	3592	chrome.exe	145
PID 3592 wrote to memory of 4800	3592	chrome.exe	145
PID 3592 wrote to memory of 5064	3592	chrome.exe	146
PID 3592 wrote to memory of 5064	3592	chrome.exe	146
PID 3592 wrote to memory of 2832	3592	chrome.exe	147
PID 3592 wrote to memory of 2832	3592	chrome.exe	147
PID 3592 wrote to memory of 4144	3592	chrome.exe	148
PID 868 wrote to memory of 4292	868	Zentrix.exe	153

C:\Users\Admin\AppData\Local\Temp\Injector.exe
"C:\Users\Admin\AppData\Local\Temp\Injector.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4980
- C:\Users\Admin\AppData\Local\Temp\Injector.exe
  "C:\Users\Admin\AppData\Local\Temp\Injector.exe"
  2⤵
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:4892

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7fffa1a4c728,0x7fffa1a4c734,0x7fffa1a4c740
  2⤵
  PID:1372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1764,i,12863842273521828067,10692359356018804111,262144 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1888 /prefetch:2
  2⤵
  PID:3180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1608,i,10604956586105984845,10539737314055219039,524288 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2252 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2384,i,16610089741605922733,15313541821821868807,524288 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2560 /prefetch:8
  2⤵
  PID:920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3244,i,3337977815270664417,17886339084959171235,2097152 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:4256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3272,i,4061047657066443302,7968735117719355105,2097152 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:5524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4468,i,5940471438966515980,17268037357801142948,2097152 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4476 /prefetch:2
  2⤵
  PID:2888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4708,i,7197888548495664486,3410113483997835820,2097152 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4724 /prefetch:1
  2⤵
  PID:5872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5516,i,1929156612633127846,11110361719461345386,524288 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5520 /prefetch:8
  2⤵
  PID:1436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5856,i,17657750011307357502,12687093399665189392,2097152 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5576 /prefetch:1
  2⤵
  PID:5152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=6008,i,13342405867240454066,3007319252372410550,2097152 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6060 /prefetch:1
  2⤵
  PID:748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5764,i,8316417907613359694,9686489704032722714,524288 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5984 /prefetch:8
  2⤵
  PID:4656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5804,i,10572982030541463854,15162864817656459571,524288 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6164 /prefetch:8
  2⤵
  PID:6048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5556,i,1264115146544454400,13399174357130969807,524288 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6204 /prefetch:8
  2⤵
  PID:4700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4468,i,2017180104890116762,15153862654344580079,524288 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6160 /prefetch:8
  2⤵
  - Modifies registry class
  PID:396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4592,i,10970922179739669808,3854321048813489509,524288 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:3756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6356,i,8912091167173201155,6705010949702470275,2097152 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6332 /prefetch:1
  2⤵
  PID:3988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5992,i,16107369312884218375,11692260339430472287,2097152 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6308 /prefetch:1
  2⤵
  PID:3704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=864,i,12861901845560445132,13598160674160538727,2097152 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:4264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=3568,i,9921565626952722302,830266102356148509,2097152 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:2416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6700,i,2145182865110909228,13800028647345338648,2097152 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:5820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6820,i,10005157956308568739,1412885325810905782,2097152 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6112 /prefetch:1
  2⤵
  PID:2532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6908,i,10899750148668722160,8584603614274385046,2097152 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6904 /prefetch:1
  2⤵
  PID:2112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6816,i,1084474824087264193,3265477725972794616,524288 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6036 /prefetch:8
  2⤵
  PID:2508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=2428,i,17159738341129537183,15619072969458804968,262144 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7420 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5760,i,14142856787717886589,16004176718493201993,524288 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7164 /prefetch:8
  2⤵
  PID:4696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6240,i,8635766677375748657,10942598132833154394,2097152 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6308 /prefetch:1
  2⤵
  PID:1784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=3460,i,8591167719319243436,12036615558017457815,2097152 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6436 /prefetch:1
  2⤵
  PID:2188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=7580,i,12408225429037316938,9463357972428522858,2097152 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5556 /prefetch:1
  2⤵
  PID:3124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=3444,i,6277682270100049824,4953937522496540396,2097152 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7596 /prefetch:1
  2⤵
  PID:4800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=3252,i,7269027912091872400,3692223446672643134,2097152 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7716 /prefetch:1
  2⤵
  PID:5064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=6760,i,10150612950410256647,14771330834282874819,2097152 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1204 /prefetch:1
  2⤵
  PID:2832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4120,i,13839950950023840320,2584257075549607819,524288 --field-trial-handle=1892,i,14259972113912128788,13798486389542207405,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6440 /prefetch:8
  2⤵
  PID:4144

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1912

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4472

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3432

C:\Users\Admin\Downloads\Zentrix v2.0\Zentrix\Bin\Zentrix.exe
"C:\Users\Admin\Downloads\Zentrix v2.0\Zentrix\Bin\Zentrix.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4644
- C:\Users\Admin\Downloads\Zentrix v2.0\Zentrix\Bin\Zentrix.exe
  "C:\Users\Admin\Downloads\Zentrix v2.0\Zentrix\Bin\Zentrix.exe"
  2⤵
  - Loads dropped DLL
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:1652
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "tasklist"
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:4704
  - - C:\Windows\system32\tasklist.exe
      tasklist
      4⤵
      Enumerates processes with tasklist
      PID:368

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Downloads\Zentrix v2.0\Zentrix\Bin\injector.bat" "
1⤵
- Suspicious use of WriteProcessMemory
PID:3528
- C:\Users\Admin\Downloads\Zentrix v2.0\Zentrix\Bin\Injector\Injector.exe
  "Injector.exe"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1864
- - C:\Users\Admin\Downloads\Zentrix v2.0\Zentrix\Bin\Injector\Injector.exe
    "Injector.exe"
    3⤵
    - Loads dropped DLL
    - Suspicious behavior: EnumeratesProcesses
    PID:5148

C:\Users\Admin\Downloads\Zentrix v2.0\Zentrix\Bin\Injector\Injector.exe
"C:\Users\Admin\Downloads\Zentrix v2.0\Zentrix\Bin\Injector\Injector.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5324
- C:\Users\Admin\Downloads\Zentrix v2.0\Zentrix\Bin\Injector\Injector.exe
  "C:\Users\Admin\Downloads\Zentrix v2.0\Zentrix\Bin\Injector\Injector.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4824

C:\Users\Admin\Downloads\Zentrix v2.0 (1)\Zentrix\Bin\Zentrix.exe
"C:\Users\Admin\Downloads\Zentrix v2.0 (1)\Zentrix\Bin\Zentrix.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:868
- C:\Users\Admin\Downloads\Zentrix v2.0 (1)\Zentrix\Bin\Zentrix.exe
  "C:\Users\Admin\Downloads\Zentrix v2.0 (1)\Zentrix\Bin\Zentrix.exe"
  2⤵
  - Suspicious use of SetWindowsHookEx
  PID:4292
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "tasklist"
    3⤵
    PID:3896
  - - C:\Windows\system32\tasklist.exe
      tasklist
      4⤵
      Enumerates processes with tasklist
      PID:2476

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Downloads\Zentrix v2.0 (1)\Zentrix\Bin\injector.bat" "
1⤵
PID:2964
- C:\Users\Admin\Downloads\Zentrix v2.0 (1)\Zentrix\Bin\Injector\Injector.exe
  "Injector.exe"
  2⤵
  PID:5368
- - C:\Users\Admin\Downloads\Zentrix v2.0 (1)\Zentrix\Bin\Injector\Injector.exe
    "Injector.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:3608

C:\Users\Admin\Downloads\Zentrix v2.0 (1)\Zentrix\Bin\Injector\Injector.exe
"C:\Users\Admin\Downloads\Zentrix v2.0 (1)\Zentrix\Bin\Injector\Injector.exe"
1⤵
PID:4012
- C:\Users\Admin\Downloads\Zentrix v2.0 (1)\Zentrix\Bin\Injector\Injector.exe
  "C:\Users\Admin\Downloads\Zentrix v2.0 (1)\Zentrix\Bin\Injector\Injector.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5940

C:\Users\Admin\Downloads\Zentrix v2.0 (1)\Zentrix\Bin\Injector\Injector.exe
"C:\Users\Admin\Downloads\Zentrix v2.0 (1)\Zentrix\Bin\Injector\Injector.exe"
1⤵
PID:1880
- C:\Users\Admin\Downloads\Zentrix v2.0 (1)\Zentrix\Bin\Injector\Injector.exe
  "C:\Users\Admin\Downloads\Zentrix v2.0 (1)\Zentrix\Bin\Injector\Injector.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4492

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 3b9bc285cd131662f3ec8f2646e2622f149b09401a292dabc6682a32e71f0c37
MD5 165aef701fba05735f34bde6104465c6
SHA1 5b84b8472430ca186d3124cbaf1669f4a59f963e
SHA512 ba3be2b981bd1a622b442f48c40ef17acb48e6bf19350a02caa9e1a63dfbff3ec6117ecae8bc35a72578236c2895f0bd053be80e62b608fcee7878b7cb099fef
TLSH
T108E02BAAC971FC2B18FD177C70950749E78413962B54494F3E3D911C8FB8A3B4182C1C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000041

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000041
Size 80KB
SHA256 b0401a13058c309bafbf3537c01d74dc1e3b2e94eb294f968cbca2c4533f300e
MD5 707b0f4240f9412cf8f8ffcdfc9e93cd
SHA1 e4625d1253551a03041398bf42dd37e6c5f03537
SHA512 5ef8376cd3aeb0a6272c2df691c23245b15d21f601821ba20c3958ba6f42678ab1ce1b89de19b078fa03adaed427b3945afcac6a3db0d3d9d3044bf6be637d0b
SSDEEP 1536:T7XgyuiA8ZpPCKmvSJA4GE7ywL15i6RGVBy4DLE/sFgZyInBix:vXjuArC8P/+6RABFLRFgZPnBix
TLSH
T1758302FC26DA6B90080E307F566C5BC24D10D67D85F8F71B193AAADAE15E1CCDE0422A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000042

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000042
Size 221KB
SHA256 04d9b050a5584dd90eca5225b733e074d9022aaccd3e4c3ce103334ac1fb5e5e
MD5 1b566a0e4c2641506db5c581d6f8a777
SHA1 2027c710c64d5ba0012b351b70df493b4915c474
SHA512 83aacde51d76c4c890ea3eb4d4a400d05716785ec54747f3937683ddd803226dd71b8e2830fb4fdf2219abbbcc2f1671a22cb7121f275210592ebbbdb02c6302
SSDEEP 6144:Q5HrjEVv/43DNOuHs4mheITt8K8cb9xgEVJ1tzO8tkR:+HcvQ3hOWohnJPVt56R
TLSH
T1AB2423200FA15696E21D1202AB56334B245683EBD6806DD208EDDFCF9F27673972FE1D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000049

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000049
Size 74KB
SHA256 e1649c17ea16555266789c2007ae07b5a031c8b39f110f7066d2d51c52cfb025
MD5 3174b94525ebefaf05251da45ee41125
SHA1 f9e60f8f7c7b172bade19820fd90a382ff08d9a4
SHA512 bf8b6b934f24368cf7f6372332d3791499d6cab73a0aff1b83248145905f797eea6b2bf5a8140df1407767ad5c9def36950696688798777e3c866c36b3ab2d5e
SSDEEP 1536:5E1QCa4UzYJGLJ34Jq8SofcWyisyA5aFoIt9luwUWQUlxeL7FM:5E1tVUzYYJIJXLZPuIt9lxUW2+
TLSH
T10E7312C86FB38B86E9C0B44FAAEAEB38190621490558B7014C2D77CF279D4C52AD0DE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004f
Size 16KB
SHA256 dcaa06c9e5e3e83e29b62144ee79a2b2ec5a0fa89e3c4e3ef742710017a062cc
MD5 85c1ff536ae53540821b0d3d61c54250
SHA1 40a2e468bf97cc062dfaad6c449582e1dc9c06bd
SHA512 0f086e3def6396e060db8196c66682dc9f4a69d5ef38f71c884ed44414cfc72ad5ec4bb153151358657c5dfd2bda8808b0e9496f9b6603a9804fd9b14d2100f2
SSDEEP 384:YmR7MmYlNLzIUn9VV9d0eamUeNn3VAU3hbbyJHxAv0UGF7sns:vIPXZnLamUMFZXvdGGns
TLSH
T1E672E11A8279BD49412E4E1D8F009B43DFF4EB8248CDBBD39522A05172DAC4799D2EEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000050

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000050
Size 73KB
SHA256 5a6fb2d84993167eac2aaeb0147e3e75a845f6f87492ca62ac8c93dc1445c0dc
MD5 46673ece170741eb05cd83233968c000
SHA1 eb1542a9e277dc35bc46a14f1e26b9d6ad40182b
SHA512 3c36fc5c72b5f50f39ac5c7aed99800de6ca29f9cce428ffe67e2b34e520e5ab41c8857ef4446b70b035ffa60763646909cfa639085185e6de45084fa7b06e29
SSDEEP 1536:JZz9+BUVYe3Wtpdv64OIXJWp0zlJBiQLKyXtAqw9RSV6BU3/QwsRBEub4m:H9+cYegpdv64OoYYZLKydAqiq6BU3U
TLSH
T13A7302E472FFA4CB22718D3FE5A99B803C95DADF9226249981433C1321160EBDF155BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000055

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000055
Size 158KB
SHA256 60072b4eb6fc5f1f1214a34fcd55b3cbd1d05eddf778f85611f9b352c4c6452d
MD5 83266658f29f5cb762001d5d9f6985a7
SHA1 9ff52157193e1e798944e6a3172d938183f5e550
SHA512 60b2a8749bb597b71c6cb7113c4ea6c430ab90c6f6a5f78a36ab5fbd2676fbc173ade236be939e862569c786fbdc8e0aa984f1ae4263e91de2ba681cc8ce5d66
SSDEEP 3072:pqj6fcYjfI87fn/NWUEu+Y4rwgnWSPrrGh9SC2VRvkQdv45cf+Fg:pTvjg87fnVTEu+W3rSC2VRpBf+y
TLSH
T196F3232CABB1EF2298ADD32D789EF491C870553AC097303BB84FDF8575154348A7684E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 db5b5e405a626c30c9ebd81d97903fbeec4555aac86f01491b46fd42cee2dc58
MD5 c2d67d7f35667539b64453743ef691c5
SHA1 002462e88a22985aa315aa01ae8543b2c4f835de
SHA512 ce3902707c937564f826a58e80629fc05cdf89b12885768a0bec0cfb6bf64fb32552279040dba872949d0e2fbbd3caa73686413a1e22194d624da1da9bee7ce3
TLSH
T1E481DA06E2C3E9C0FF2D0273DAE5087D787226080833AF7E66D8797CEE12FA44911121
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 db8d8c66fce560255fa066089ca36a966ca11f1f52106b61b66ad64f70d3c695
MD5 0c0e540fb03fda806185a122579030c9
SHA1 4b7a02e6246b1f468add02947a1c5e27612268a8
SHA512 8bb25a2f194bcaec15584027658d8c83f7fadfe3494dcb201406692774ff5fac54b688946aba70b7d307a10b1043af6ecce9a01ab0d83f3ce68586b578eee01f
SSDEEP 96:PUYMFKpfwfj7HOGcTYmBp2GEd0/vaVRZVrUi:PUwYvVlGxURzp
TLSH
T182B1C805E283D9C2FF6D813BB6E1097EED31E125452EAB7E76E8F92CAD03FA40501161
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_limewire.com_0.indexeddb.leveldb\000003.log
Size 380KB
SHA256 5f488b3d0898dd8e72448fefad7fb1c9fa646aa05b828a1f36bdf07ed9290b29
MD5 52d2f6b9c3806ffd732f0ffbea7b7639
SHA1 e7593accf1d161a6b98479c360dacdd13ad3d888
SHA512 f1cc6947f17125126e5ad05068932a874364e56befe303cf929fa4db4c38831c6f95c994da4563ba9336030d9d1b0289318f3470a24ead33aae5a97e0c7aa5ce
SSDEEP 6144:8QxxEf7YucF6n2wFSEyxm93xsxdF8F/FSxsxTE2ECRy2r65hPFTM/XvEJA:kF2rEnE2ECR7H
TLSH
T15C84201BA6949D3AD19A42B198E91786CB333D19A8B0D804F5CCF13CC7BBE54A871377
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_limewire.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_limewire.com_0.indexeddb.leveldb\LOG
Size 345B
SHA256 d696a037d5d0faec47164bd3d46f47036227316a1c25c4e405b77d7b832a321d
MD5 740f2e3fc04e458d2124c3573d27cc4d
SHA1 7b51863ad872405320b752c6457ea80d4750cc7e
SHA512 4beeab4bed89e013ac15361800f830b31f2b80c6ba7b4d11acf0621504ddd4248f1b3e72a88e4741ac4d0ccabf79e4ba91128e83c3f4ea5805ef48b86763e9e5
TLSH
T136E0D819D5CEDAFF5174C0662534BB0F8EF7554C96DD6C664F41E814B1C640854A92B0
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_limewire.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 19KB
SHA256 c403e7c9738c46eff7116e3ccaa273e912aaa7efbbbf98c4ebb88594d9e3e18b
MD5 5e96740a0c4ceb7bc59d89c723844c7a
SHA1 6249e7b7977a85c46d56b3862432de9f35c2013c
SHA512 edc2f5e9859e22ddb6129e1c41e60c4d4d647d0e000392ec83180ded00389d936507dfc2e7c4c7febd5d892d650309785ee9f2777b73d3f5da810bb7c53a17e9
SSDEEP 384:D049t0GTkhNVZwk87exGf0YJRl6LAwwwFXeqgNeJw2CB2aIaAfElnkIsKIMtSuqu:dcM3U/LqVlTl
TLSH
T1EC928EF787E4896DCD6251F4AB266F1FCE2D0924432C3C66C9E8AF5A93E1471E20174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 19KB
SHA256 1ce54310f29490cceed9f1ad4e131e004d65b7d97063de15ff0a41fbd1c32005
MD5 8d2ebdf0ae36bfa4976916013aa9b2d7
SHA1 c1f27c8ffdbbf44a3dcf7c7571d30a6c74250513
SHA512 435d5069524b9a7390475a01f4306ee3b861038fdd9a983d6cb3994a8f0fd7a2f94c6cb065d18c6d8d1eda91a6a804b287f1a9c973f0df81f2f80e773d7c9bc9
SSDEEP 384:DYB9hUAZOrIaRbFNJe+cCs6OebvLzNJapRaIaAfVlnIkIsLI8I7ZFQKkpIQXEgDN:jqIRHMQ6OAqKp
TLSH
T115928CB7C7E8892DC96255F4AB257F1ECE2D0914432C3D66C9E8EF4B93E1871E20164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 15KB
SHA256 3fff60c3e1ee79ab189e4c24d6d403a49b09e323eb0662b1f2cc77eedf0e521f
MD5 9848d7fa04b778c5e274a8c770f6338c
SHA1 ff03d2d6e95e2aa5a2605ae538c0d38d6f566c70
SHA512 7be4fbf026e286cb16ca9413c69304183d9512b937d05154e5614262a88a8a50c4220615b3301a21648e1abf385b547929f95d37df2e548c2ef491cb6cfdc78f
SSDEEP 384:D049t0GTkhNVZwk87exGf0K0eIEMWYJRqJJWvaIaAfElnkIsKIMtSuqZTEgDrqC4:MCrU/hu858
TLSH
T1A7628BF787E48A6DC92252F0AB166F2FCE2D0924432C3C66C9D8AE5693E1471E24175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 13KB
SHA256 d184b4668aeae42c2db2c978c8a9eb4aa82c23880d8abc927a76b4260a50311a
MD5 bf3581430085b6b6cc6ac209bef071b8
SHA1 622f07c96ee73b10696371c7c904fc051294eade
SHA512 2672c87a3715e5df699a83c27b432044602e5f0eb2664859f2d1b42dd61a480c44cd622adca5c960551644e54c3475fc98f273b6d02e911bca459468a5154941
SSDEEP 384:DYB9hUAZOrIaRbFNJeWaIaAfVlnIkIsLI8I7ZFQKkpIQo7EgDri1q3Zw21cHBLns:gRHMQlOs
TLSH
T1CC52ADF7C7E8853DC92256F4AB156F2FCE290914432C3C66C9D8AF5B93E2871E20165E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 2KB
SHA256 c83668ab97224900183c930a93860d304b7eaa00c9e81061557104ace47f5c70
MD5 959d6abc61a5a62f9af4e1af35058233
SHA1 da8daf6ded9c5ef7973959eadc6e7d5afb190534
SHA512 3597f9277b39018724f2c19a256edef65a53124be5f76a78830fe6d61919711d344315c56fd8858a70aacc50b330eb2fe1cc42445a86c998f5dc0dacc91efe2d
TLSH
T1D0517B93E37FB857707E4DAB5E54BC051CB6A832018164F9DFAAC16C65C19F72B06027
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 b8b9bbd2d0e24552b1866b2256d2fc17c9ca96025b5f9e5a94ede99f1dfc7044
MD5 7eaaf02fb4a83ac549a05e6c1a5191e0
SHA1 b9598b94d070161b0f92550c2eba229530f9222a
SHA512 577ba41ed011ff8ed1163d9bd416db7f6e622d210f67714021b499de3a8880e4318df0bedbe668188b232247a5c54e8cd13f0e4120af06fe9baba19283ca37fd
SSDEEP 192:GgRscBhh6fqdhowjv7Z+YhAPRp2h3d/9CHsb+WNnkvgD1BaY2k62qGaIEZcwfVyr:GgRsmhhRbN+Y8Xe54wk4xf2r2za1iw5e
TLSH
T1D352E82EA914693B5CC7C22AFD217717DBF5102161C82E94EBFCCA2C14EB9CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 aafe1d6f31b88b85959880abb7a6fe7ec7f126b1ebd3f130c8026d3fc7e4324e
MD5 19c952f90a6649d59e0c99dfee2defa0
SHA1 23131b9e1945ba66cfb84022a42659db429fcf07
SHA512 f7743e82b8c2bb1691843ed3a0ab6a73eaa3027cc866404448375994f66a27a3562c7f90847c370c284ab9fbb05b28dab48a1adf4ef0ddfcd5eddadd9c12217b
SSDEEP 192:GgRscBzh6fqdhowjv7tYhAPRp2h3yS9CHsb+WNnkvgD1BaY2462qGaIEZcvfVyII:GgRsmzhRbhY8XeN4wk4xf232za1iv58
TLSH
T13C52E72EA914793B5CC7C22AFD217757DBF5102161C82E98EBFC8A2C14EB9CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 c5e3e327c4bf5f4859e66060c0f0f65e0ba1c12eb573ed7243b7abd84ee2ebee
MD5 aab5c886ce7ed210e25198667e007d00
SHA1 a4f244fc9191af4651f5ed2483234c3c869a60c1
SHA512 ec4a485fd842b887dfbabe30cde303ca782c3e68bd81617d8720c7a1698fbff9aa8e960e05cb1be9cb32269fae66ec6882f02d32513bbc6dc9f569145c7ef1c9
SSDEEP 192:kRMh6fqdhogjv7tYhAPRp2hm9CHsb+WNnVz0J62qGaIEZcvfVyIsnAUgtaJ:kRMhVbhY8Xem4w9082za1iv58
TLSH
T15A42C62DA914793B9CC6C22AFD617757DBF5102161D82E94EBFC8A2C14EB9CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 410e52c26e43a2293fd2bc6e8da3fe34ae67de6a4f413939d6c863f7ed2bf17f
MD5 2d963714231e911d3489d1754fb4162e
SHA1 4c3736cfa683016d6c2d4ae2671ea009f9eb56f4
SHA512 2b57f39db330a26a2c998f9957649edcae90e96c5da216518235427a701ba95c410f7f680442a860902a1c7178a031a0ec40ffe567c8cb4cce2d4b8330b639b0
SSDEEP 384:GgRsmhJlbN+YhXhj4wk4xDsezT2za1i25e:umhJlIYDj4wNzT2WfE
TLSH
T13A52D62EA914693B5CD7C22AFD257B1BDBF5102161842E94EBFCCA2C14EB9CD321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 d6babdbe20a53241997191cace256d1f80cbc698564acfb3855750ce0dbbfbe7
MD5 679d0e478aad121ac881bca7f42b2ad3
SHA1 9f4b0053b2ce672d2c18ca0220f0982ff0088d87
SHA512 7693233e783e322baaf9042da7e0e468c166989f4462491ddb6949190638ae75eae141c733d21f2d96ed81482d291cf258208beb0669c127b9e67d82a8f0cc39
SSDEEP 384:GgRsmhJXbN+YhXhj4wk4xOkeAT2za1i25e:umhJXIYDj4wyAT2WfE
TLSH
T1C552E72EA914693B5CC7C22AFD21772BDBF5102161D42E84EBFCCA2C14EB9CD221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 917735cb270adaeba2e029d086de112418711d220bebe6415b37f3f284979952
MD5 e128940176a3a6f3d575806de8afa8f5
SHA1 ede0c1f0763e0398fd987ba20f32ca1029061501
SHA512 ce95f02ba544856dfb609db2477c153bbc25323a1442dfebbb781bab88347b39a055e9621cce5c93a3bd3b5a4688597ce84b2406e148b19114c7c7d5bd10838b
SSDEEP 192:GgRscBhhVfqdhoDjv7Z+YhAPRp2h3d/9CHsb+WNnkvgD1BmUeU62qGaIEZcwfVyr:GgRsmhhlbN+Y8Xe54wk4xLe72za1iw5e
TLSH
T15952D62EA914693B9CC7C22AFD217757DBF5102161C82E94EBFCCA2C15EB9CD221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 88d76688e5b93eedb08b5d9809c5dfac0daca37934bfa6bf1766ffcc6fb769a3
MD5 95aceeceeace184d28098a69a8f88008
SHA1 024f6e3b3579d2a5106af9b197ccea36fb7262f2
SHA512 76ad1dbf7d4a61e4673e2188652c7e2e88f85bac0ab85afe47e801ed06fec736092584960274a701c7208691177613ea4e96c27113a19eff77ccf7d07028dd92
SSDEEP 384:GgRsmhJJbN+YhXhr4wk4xteeMT2za1i25e:umhJJIYDr4w1MT2WfE
TLSH
T17252E72EB914693B5CD7C22AFD257B1BDBF5102161C42E94EBFC8A2C14EB9CD221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 0543930d5eeef58aa1336bd91cdd4770e18a67c2742dd33eee2ce84cbdfd8740
MD5 cbd874d6a4470fb8b46de3fb3472e931
SHA1 d6794d97461c802e8453590f98f12fd5a1775ffc
SHA512 ceb750289ddebda626477122e24c8bb4870b755d6712253b865d11fc880b0a692cc81559e052bc78144f0077fada4c0c9d7ef5869cbadeaf083c70678ba31037
SSDEEP 384:GgRsmhJ1bN+YhXht4wk4xx+eXT2za1i25e:umhJ1IYDt4wJXT2WfE
TLSH
T18852E62EA914693B5CD7C22AFD257B1BDBF5102161C42E94EBFCCA2C14EB9CD221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 98078d377fd64a17fc5c8bb6e221811246c742188de361276146aafab5bd1129
MD5 72907622bf77fa0aadb409e90749f694
SHA1 3806efb6d17e389f2120aa6808d022105054b0e5
SHA512 9bc715e9b00876545f87ff17555ced88341161b1c4a7d1a552212c61e3845dac52ea69bf559f6c3fff7de6b0a58c6fd7a022598f9b69086218b6c839ecd241af
SSDEEP 384:GgRsmhMJbN+YhXhr4wk4xteeMT2za1i25e:umhMJIYDr4w1MT2WfE
TLSH
T1F352E72EB914693B5CD7C22AFD257B1BDBF5102161C42E94EBFC8A2C14EB9CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 e3e85507733b74e650902d1645f4c8e2a47131f5f4d003efbf580d80d51d1e18
MD5 d25832a19ff9c1c57c95ef5ecf3d457d
SHA1 30d5ae73ddd9dfab1127bd841aef79ad540016fb
SHA512 680876039281bd13201af5a0d12b9eed3257e3547eb60a743076a4ef44ddf64d39464fedf9d363ec15f80fae0d8dd3610e3a09d4d4a9512ce92d01878e2ab95f
SSDEEP 384:S0jWV7KxkXqKf/pUZNCgVLH2Hfgslvy7pLuLcifcdXODW1+ErU3IQHGtHkr0:SYWV7KxkXqKf/pUZNCgVLH2Hfgshy7pd
TLSH
T15372D8676C4C99370F94C6CCDC167E4FADB6024B65DD886893FA582A03D5ACF120A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa813c9ad67834ac_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_0
Size 200KB
SHA256 ad0be15efb9f7f3090144181b6092ea7931fec49d78092373179d9b5bbfd4d61
MD5 cf6fdf7772501069c28407c8d9dff316
SHA1 4fddf8ad868a04d604300f491f21756dc9032673
SHA512 7c2cd674b06eb96deca551236baed657c519287f56929553a51d5295e60f4e5bca5fcca5ad20c36143dc40306974f10c4257bbc22a86f0aae6f36476743ba067
SSDEEP 6144:xlMy6q4og4lZ4raRtRgZ98pDftl1nPBKbrXsvLgz:sqK6Z4mR3D/BQbMLgz
TLSH
T1E9147D712979B47387A20DF184F50106B37899993848C8B4F7BCCE5F29B698485EBF39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa813c9ad67834ac_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_1
Size 410KB
SHA256 990376cb14c036aeb1c66955af2a9294b8663b1b2f3750bd32105cf889fa8926
MD5 bcf4c1c69dee0a4408931eae6e1ea462
SHA1 dd5b42873bc556d31ca338b5e20ce4050febe4af
SHA512 642187547666be629514eaec318cfd9c63bebd387343449337c79679cc85768d981c17e11fc072f4a7a6511d0cecf1be8d373e63e7ffcb8536dc35f5f23e0d19
SSDEEP 6144:w2X+Sz5OCTjFUtEn4Vvq6xCmg7sOaXkiEL5g2ftl1nPBvHhOPKdQT68ao:tzXmKph8Lit/BSwy
TLSH
T1D4944961432239A7CE6303F901634657773484CC7FC7C32BA68293756C667E6E9DA82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 e475068106001273e7e44acb1f17122331ed59e350ece9a0a3b5b6f03b86d16e
MD5 588739a6b214919a11b12965e428cad3
SHA1 fedcec239e9e3bdf54c7c88e27776978c49e4139
SHA512 c83986d9977149c98318be961658efeb5a98e5e1bc85cfa75bf323492207e6f11e969ee72dd5db2f2ff1fdc818f88dc2093b0e510a52e5648a7586b0b3d2ba94
TLSH
T10FC01251C401F071C14E03F62183C4E836B89F21CA291B9DB2EC1D23FC35536C01827A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 cfbb9c4545038834f36aa4762c55d783c4acc8b204f98310cbcf265cf666f1b6
MD5 67bf604a5cc068ae738fe5d6d75b3995
SHA1 4cb3f5a2924bbf0f929d05ba005dc0242516e1f9
SHA512 21cc711f99225838c785e68d8dd155081620bcf65ebb151319a085ec3295971d41100324f8794c5ebc380f567c0a05e72a44db2fcddc8326d916a3c2e2b8bda0
TLSH
T18BB0121084019501C04303B0518204D831146F208B052701A3E87A72D82A5B18139150
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b8ebf.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5b8ebf.TMP
Size 96B
SHA256 35cc25dbdef7e924c9260a3aa22a5e485ff3bd831b02067dc847b9d49d6fb074
MD5 c1c775347513aea2898d7ce8b2fe52b8
SHA1 1c57f8b1e04421dfa3c819b2a66b641fdfde5ed8
SHA512 c4b981ea08cef2a4bbf8e3714ec140cf9def57f6d049e41b70929cbbbd64d9e15f5b2dc7611d81caf950adb3ca4a84f513d48c533e574b77fda5350dabb876b4
TLSH
T1F5B0220AC002E223C08203B0208280CC3220CF28C203022382F00A23CC20B3200A0020
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 234B
SHA256 d5693f3baf9cee4d244a0fa11c1847fdb77a7b264640660acbefb859cb61cf89
MD5 04c63124d5b0472da268dc2696115346
SHA1 f5237cb3fc964bcc67f0a6a8d9661b4ea23a14cd
SHA512 92aa46e034238df97d585226b7eb9b289139c619c223b4e4f26b99d03a0d733996a0fb2c8d9f1f52515f30d30735bbb501c41ab3426c96bd8be6ed8ff99ac04e
TLSH
T181D0A7C3167194BA23709E99202931EDC56B5D0A8DC8CDFC9D08B55724B9A37C102679
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 150B
SHA256 8db07345d90c997c0d5f8da0ad5b8ebce1f21db58b6fb1a2c2c7a447ec657868
MD5 f004d99f7c0ddf7b60665575e8ad93e8
SHA1 88caf3c612251d37ff9c89a0a4f86162b9a05a29
SHA512 6decced0a93148162161261e5c275370580fa7371b3505d5df4fb907a7800ee94619ef84c026127fb58470e85bf76166a1e840553723cf8d0611d35daa1fc2ad
TLSH
T138C08CD31911A4AF47309DD8202832BCC51B820D4CC4CCFCA408604610B8E738001A38
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5beb37.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe5beb37.TMP
Size 157B
SHA256 74130760b921a2964484aed10a019acb9822886d1c6f51aba61fb57891718a4e
MD5 5b696ce8fc962465246e5d97b3fe755f
SHA1 00c02db4c903cbf0a0d3d48aec4f3ddb63f824c7
SHA512 2ca42c378b9632fadf92812f75600725f9eb4553d4fda57520ace58ab26faf7c6ad984f736f109f2728fcb40b038f22a1485f28498235d2683c05279cf68ab4e
TLSH
T1E8C08CD3192154AB473098D5202832FCC42B8C0E4CC4CCFCA408704620B8E33C000A38
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 30a8c92177eacf9d664935600cdc6ab5a556adb6e3122b5891727abcd6fdbeab
MD5 89db12946df69a56738d2fbe5e59ba79
SHA1 089f4c67ad1deacac258befa1b049ba68ffa2132
SHA512 7fd62b14c7c2f74b5da19ab08ff9654e5c4e351d67fed409778c7d4c117dba434d36f28321473e8d2c2e2c76144375218e09f2abe9fece8676ff13d550ca78d3
SSDEEP 1536:0NbcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEB:Ib3Qw/xLANk0mUW5GmRntSFCjEEN3
TLSH
T16A9312BA4E1A46EB957E46C176AD7808CE22130D70AFA9CC316C639D61D41C92B73F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 193KB
SHA256 8fbb9b54a1d4ac4fd3e5111419f50b69d516f6cc2e47c09867838e519a30463c
MD5 a53548c0ec02aca0d7bee898664fbb8c
SHA1 904a5ba48c690c90b3560f5afdc4054e6d8dce4d
SHA512 6db475e541d3236527f4901b60471134038cc74fcf38e8e91cacec2eca1654754dc53a7f875eed6cb4e6a8dc3c1118f9b3b859d2824b48cbe717b5d0416a6b86
SSDEEP 3072:H8MqIicKWneeIOKIQsmd44/9Ez0rcUKf63Qw/xLANk0mUW5GmRntSFCjEEN7:cSi2D2I1r4IorOk0HOGm/SFyEEx
TLSH
T10F14137B673AAEDE15BA42833098A815CE77624571EF61EC31BC630932D91C54BB3E31
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 194KB
SHA256 05e905aff0f3016fba1ff0b2f37c607ac3ff09b95d8e8719cf2915f8eb017182
MD5 0dd72ca98ca84742ecd1e40c30d05fe9
SHA1 392430668a8e35b4d9390b9ab0792d7516beda2b
SHA512 1fe04b5e82cd1992d51cee0be4965a8c95e4ab734937738aa42769249ad8920c428694543ef57284a49e092281d1db77b852561f4c5ea3257394e422b1ba67bd
SSDEEP 3072:la8MqIicKWneeIOKIQsmd44/9Ez0rcUKf63Qw/xLANk0mUW5GmRntSFCjEEN7:vSi2D2I1r4IorOk0HOGm/SFyEEx
TLSH
T13F14137A663B9DDA09BA428331886805CE77A343B5AFA5EC31BC230431D81C59F77E31
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 193KB
SHA256 79f5c38a2d06099ba6ef3e24274ffe7e0fe86d378b83c22327716127b0807fdb
MD5 adc37b98eaf8ba9ffb6d822da24f18ca
SHA1 90d9eb2d9fce28d29b169398f17b3f67d368cd70
SHA512 696d726f7a36b0925704039f08d74efe0e43ace51ac63fa0970c14829ae61d34ebfafbdcad39f84879ce2dea4b5f68f91d894f4512db6be52853a875940134d2
SSDEEP 3072:n8MqIicKWneeIOKIQsmd44/9Ez0rcUKf63Qw/xLANk0mUW5GmRntSFCjEEN7:8Si2D2I1r4IorOk0HOGm/SFyEEx
TLSH
T1E314137B673AAEDE15BA428330986815CE77624571EF61EC31BC630932D91C54BB3E31
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 194KB
SHA256 8ec12a1ff77adfea862fb8f5c911e38b7201832d31ed7648b7da1d151494e283
MD5 79ec712cfae772166702b75ce7f7c5b0
SHA1 5c8a196ddc8b3d09614187f79ed0fbb3437d2c42
SHA512 b4b2bfb32f1b6d0e54a6240f9377b2d1289c296c2a3eb209b5575dd25d2b7f8a97b2cce46952819869acd19ba52ac023c80d9b9830421c60840d3dab64e28fd2
SSDEEP 3072:Na8MqIicKWneeIOKIQsmd44/9Ez0rcUKf63Qw/xLANk0mUW5GmRntSFCjEEN7:3Si2D2I1r4IorOk0HOGm/SFyEEx
TLSH
T12814137A663B9DDA09BA428331885805CE77A343B5AFA5EC71BC270431D81C59F77E31
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

md.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI40122\charset_normalizer\md.cp314-win_amd64.pyd
Size 10KB
SHA256 8e3e0a719a4ec835fbd9b3128636a09692fe173f4e01c527653bfdb7bd723808
MD5 5655da6af0eb292f6b14ebd506b218b8
SHA1 c1c00149ac6b56cb0cc17381c5a09bfa3a5c5a16
SHA512 fa5049bcb2e1f71cb0ffb4d3289919897929f5342cb39ba1f19494ed759ecbfe1cb955a412d4599f552d4be83145b2516e0321b2e53a1708954a0164e7a85ef5
SSDEEP 192:O7JGrmoX+sMl/++Ch9p8OBYQ9NgeAwJz6:yJ4m446R59DAe
TLSH
T1A122F85CFE7458AAD9154138C6374E4AB132BB22170277CF9370A06A1FA37E66534785
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

INSTALLER

Path C:\Users\Admin\AppData\Local\Temp\_MEI40122\cryptography-46.0.7.dist-info\INSTALLER
Size 4B
SHA256 ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508
MD5 365c9bfeb7d89244f2ce01c1de44cb85
SHA1 d7a03141d5d6b1e88b6b59ef08b6681df212c599
SHA512 d220d322a4053d84130567d626a9f7bb2fb8f0b854da1621f001826dc61b0ed6d3f91793627e6f0ac2ac27aea2b986b6a7a63427f05fe004d8a2adfbdadc13c1
MD5 SHA1 SHA512

Submit Download

METADATA

Path C:\Users\Admin\AppData\Local\Temp\_MEI40122\cryptography-46.0.7.dist-info\METADATA
Size 5KB
SHA256 cd6e7fad3b9e42368313d459aa4914bd59f39893828145a00219fbc61c75cff1
MD5 b2ce31d3856ca9f7f1ca630f033dd6a8
SHA1 4dff060e719d5d873c28e90c872a2c4e4642a989
SHA512 abb9f6b9cffa0881f7209ed37fbfef546fc065c04aad8c87495f5a2aa25aa1373305e8ef420075b32028a2062cb4ca63871ef3ab4b774ca74173bafa8e5cebe9
SSDEEP 96:Du3QIUQIhQIKQILbQIRIaMktjaVMvxsxPNsuVbmtGDL4y5GY0WRPK0JQTQCQx5Ko:PcPuPSsldbqGDL4y5GvWs0JQTQ9x5cmn
TLSH
T12BC1645A3BDE6DA06BC3C187B53EC147022AC45D754B618DFFA986A875C1B71427E03C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RECORD

Path C:\Users\Admin\AppData\Local\Temp\_MEI40122\cryptography-46.0.7.dist-info\RECORD
Size 15KB
SHA256 91c64ff07cdd0eda606d7b846bd5ee412dcd424d23ac790496178ebe9f82740f
MD5 c4c50830fd70a0f8c4381c3ce1ef0ee5
SHA1 b72ef6f028f0abb831cd70cc617909ddd3857d5f
SHA512 5bda17723a717d49c5999d72006644aacdeea36dca3936da71df0a7fd4588682f9b2c81a8fcc8bd3653d60ca2441af6f1bbabcf14bcc63bbb6d6e900e4ab3ef5
SSDEEP 192:sXSK1wGofMo5HXsz8gPf14h3KtOy8qAP6SNhba9j5IqWHiGWhWOcOXhH:sXS3Gof3sIc8D6SNhba9j5/WHnWhWnUH
TLSH
T1F272CC1E7E45F0057BE09B59D1FE9622BD4AD9A93273227CFBE057186ADDB40822D033
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WHEEL

Path C:\Users\Admin\AppData\Local\Temp\_MEI40122\cryptography-46.0.7.dist-info\WHEEL
Size 95B
SHA256 f2111ff0dcccd459e633bec08d5b7987c9c3b9890ddd4a99efd2e82001d77911
MD5 cdf468d92f0190b69bc61ac14dc8e923
SHA1 49f5e7a1abfe0b77fb1ca2a8a1c6a141253f5029
SHA512 e7854671e01e3f0ade2045b39d896cbb818c4507570b75ed56d8459385dfa0b69fc06c9166dd468028428097fea0be64bb56b9b5becb1117de96eb43b6da87b3
TLSH
T1C6B01204428000FB85162926C01445147F50D20DC8F3201CF8805141A54C81C11CCDE9
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\_MEI40122\cryptography-46.0.7.dist-info\licenses\LICENSE
Size 197B
SHA256 3e0c7c091a948b82533ba98fd7cbb40432d6f1a9acbf85f5922d2f99a93ae6bb
MD5 8c3617db4fb6fae01f1d253ab91511e4
SHA1 e442040c26cd76d1b946822caf29011a51f75d6d
SHA512 77a1919e380730bcce5b55d76fbffba2f95874254fad955bd2fe1de7fc0e4e25b5fdaab0feffd6f230fa5dc895f593cf8bfedf8fdc113efbd8e22fadab0b8998
TLSH
T188D0233EB357631142D1046E171714CFAF07B40418475209F41415F134E390A4B3C5D0
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE.APACHE

Path C:\Users\Admin\AppData\Local\Temp\_MEI40122\cryptography-46.0.7.dist-info\licenses\LICENSE.APACHE
Size 11KB
SHA256 aac73b3148f6d1d7111dbca32099f68d26c644c6813ae1e4f05f6579aa2663fe
MD5 4e168cce331e5c827d4c2b68a6200e1b
SHA1 de33ead2bee64352544ce0aa9e410c0c44fdf7d9
SHA512 f451048e81a49fbfa11b49de16ff46c52a8e3042d1bcc3a50aaf7712b097bed9ae9aed9149c21476c2a1e12f1583d4810a6d36569e993fe1ad3879942e5b0d52
SSDEEP 192:nUDG5KXSD9VYUKhu1JVF9hFGvV/QiGkS594drFjuHYx5dvTrLh3kTSEnQHbHR:UIvlKM1zJlFvmNz5VrlkTS0QHt
TLSH
T19432623FBA48037706C20162BB9764CBF21E903F3B552568354CC1681F6BA6543FB6EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE.BSD

Path C:\Users\Admin\AppData\Local\Temp\_MEI40122\cryptography-46.0.7.dist-info\licenses\LICENSE.BSD
Size 1KB
SHA256 602c4c7482de6479dd2e9793cda275e5e63d773dacd1eca689232ab7008fb4fb
MD5 5ae30ba4123bc4f2fa49aa0b0dce887b
SHA1 ea5b412c09f3b29ba1d81a61b878c5c16ffe69d8
SHA512 ddbb20c80adbc8f4118c10d3e116a5cd6536f72077c5916d87258e155be561b89eb45c6341a1e856ec308b49a4cb4dba1408eabd6a781fbe18d6c71c32b72c41
TLSH
T14E31655B12844BE34AD2165565A7B9C0B08DC03F3A236E0A3C6EF3485F7B42EC57B051
MD5 SHA1 SHA512 TLSH

Submit Download

INSTALLER

Path C:\Users\Admin\AppData\Local\Temp\_MEI40122\setuptools\_vendor\importlib_metadata-8.7.1.dist-info\INSTALLER
Size 2B
SHA256 e6184ce10e266134fdcfa401e8f1a95005bcd4f18d16b62b757323e2833fe9a9
MD5 45210da832f9626829457a65e9e7c4d0
SHA1 ad5dd33dfa81a91517182f453879cc056a9f1230
SHA512 00a0bdd98e82b3077db4b7cf7746140c204af743c208484934d7cb46b1c55bd31c8a29bd756d3c1eab8737df20f565c0b2a1c4e19b7c9a2785ca091696761cbc
MD5 SHA1 SHA512

Submit Download

METADATA

Path C:\Users\Admin\AppData\Local\Temp\_MEI40122\setuptools\_vendor\importlib_metadata-8.7.1.dist-info\METADATA
Size 4KB
SHA256 a3e38b9ee4326289d4864704f30e299ee769e2309ce9f4a75f0de1a50ad0a356
MD5 395966581da45a834d806a0692ce6746
SHA1 1df950968870ceb8a6c0c0f002236727c4790c90
SHA512 c9c73d4a3173c1af8b1bd655e1e81af716a783923b3f4ac85099d1b9df1fe13afada34a4fdedf5c54065d61ddd360cd1814d6051a0354036eeb4dfed39ecaf1d
SSDEEP 96:DIYZtaCc0coeLMrlNzmpp9hoxN4GTqFc+ZFZyDN00x2jZ2SBXZJSwTE:3c0coOMhNKpThoxN4Gee+dC0vJHJSwTE
TLSH
T195A1959337C24653BBC241C765CCC3AA9126D458A69B4085FF698DBC4F51BFD1376234
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RECORD

Path C:\Users\Admin\AppData\Local\Temp\_MEI40122\setuptools\_vendor\importlib_metadata-8.7.1.dist-info\RECORD
Size 1KB
SHA256 52a6b8ee0de15cf7fd99625f43b97cd2e3942ac86f16054ea90de48e66f29355
MD5 17eacda1d7065b6ea59eb70f9e8ad4db
SHA1 f516b63df75b3852bbc72b0f8fd629248ca313d7
SHA512 c9e3a200f89b2dc64eb75a5ff83729473827496c105df756fa6f8bd5735e89de2c90e2267bcef44d3b58525c247038c4e5026dc9cbaf786fe9949590e236d52b
TLSH
T12931779B3A45D00B3A5724E1AF98AB7178603A83F257C65ADD354F345BB88CCF264D03
MD5 SHA1 SHA512 TLSH

Submit Download

WHEEL

Path C:\Users\Admin\AppData\Local\Temp\_MEI40122\setuptools\_vendor\importlib_metadata-8.7.1.dist-info\WHEEL
Size 91B
SHA256 ff309ddcdd65ebd02bc724dbf2bcc4a0ff53a5b61792a44548d383e4ebb19d3b
MD5 08dd01ac2afdbb287cc668d51c7056c8
SHA1 e7224da97ededfb9d0239cf7cade76ebe3997743
SHA512 917f7621e0d457d149964de3cddf50fe49be13388879f60ed818eaecdf5080864386c9cf2474dc2e514907935983d73dee1967b404f2941edced73856a1d6d1e
TLSH
T1B7B012150A4115F814A0EE134068A1201A70854799956079B14A03446549D1406CDC5E
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\_MEI40122\setuptools\_vendor\importlib_metadata-8.7.1.dist-info\licenses\LICENSE
Size 10KB
SHA256 458502e12d97bbf64438606a20044aa85eb05fb0a8a807bb35dbec253fd1fc04
MD5 cf73015ea0156450506e8000d1f7fa37
SHA1 07d2319108d2b21bbd478a2dedaa69e1f66ff494
SHA512 4688a2d2e7a6c9332367595a0a1e7d59d306bd6dfc6473d9894e8472bbcdab00f03f8d1244bc95a540e3167e73320e851294e7485557434aa24690d5fbd1f456
SSDEEP 192:iaW/NVo4UTo1YEHFNnFE6GheQGC2B1CVnhOCoHqxLJbzjwokTGNH3Hv:iJhUk1Hfl9/GHbLNdkTGNH/
TLSH
T10422643F774803770AC20162BB8BA4CBF32E903D379656645059C068236BD6583FB6DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

top_level.txt

Path C:\Users\Admin\AppData\Local\Temp\_MEI40122\setuptools\_vendor\importlib_metadata-8.7.1.dist-info\top_level.txt
Size 19B
SHA256 08eddf0fdcb29403625e4acca38a872d5fe6a972f6b02e4914a82dd725804fe0
MD5 a24465f7850ba59507bf86d89165525c
SHA1 4e61f9264de74783b5924249bcfe1b06f178b9ad
SHA512 ecf1f6b777970f5257bddd353305447083008cebd8e5a27c3d1da9c7bdc3f9bf3abd6881265906d6d5e11992653185c04a522f4db5655ff75eedb766f93d5d48
MD5 SHA1 SHA512

Submit Download

81d243bd2c585b0f4821__mypyc.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\81d243bd2c585b0f4821__mypyc.cp314-win_amd64.pyd
Size 211KB
SHA256 ab64835b63093c31975df2692756c8008e7ec190e4aa86f15a713bcc62e1d432
MD5 2ff9d894ba5e8f7880f0031866203995
SHA1 dd594003fb744f4b2b944e1b10b78a7026e72104
SHA512 461ad7a749cc6131a77883de4108f20922d85618030f5f640da22e95df7db61fe358790e955204bd71efc873b726c130d71f9fb5193e91ec82718d8d19b43a1b
SSDEEP 6144:B8O7Q321soEr5HXN1GY8DNExkP8VXaVHaT8fyFmiGJZMzIfAf1+mrlpL:BT7Q3ZH98LnYlpL
TLSH
T15324173951580061ECB74275CD67E453EAB2F222473192CF09E0CA761F2B7E5BE79B0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VCRUNTIME140.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\VCRUNTIME140.dll
Size 117KB
SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
MD5 32da96115c9d783a0769312c0482a62d
SHA1 2ea840a5faa87a2fe8d7e5cb4367f2418077d66b
SHA512 616c78b4a24761d4640ae2377b873f7779322ef7bc26f8de7da0d880b227c577ed6f5ed794fc733468477b2fcdb7916def250e5dc63e79257616f99768419087
SSDEEP 1536:Z9TXF5YXWbj8qr51XlN+dULTCe1IGhKWyxLiyaXYaNxoecbdhUoaLjTz164zEd:ZEnsvReGsWyxLizXFkecbd1aPTzW
TLSH
T10DC38C8572A002FBD16AC274C1A36A17FB75B94487B0A7CF03B58A650F53BE09E3D356
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VCRUNTIME140_1.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\VCRUNTIME140_1.dll
Size 48KB
SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
MD5 c0c0b4c611561f94798b62eb43097722
SHA1 523f515eed3af6d50e57a3eaeb906f4ccc1865fe
SHA512 35db454dbcc7ed89842c0440b92ce0b0b0db41dbd5432a36a0b7e1eddf51704b1f0d6cff5e3a3b0c3ff5db3d8632fed000471180ad72e39d8dbe68a757ccdfb0
SSDEEP 768:vzzO6ujT3MbR3v0Cz6Sz5q83ywug1HDV9zxfYbK9z:mq/oMx3hXHDnzxfYiz
TLSH
T1AE236BA453784486D4AB99B0C0DAEE577D7CFA964B10928F0BA0D15C1F637D0EB3D21B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_asyncio.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\_asyncio.pyd
Size 76KB
SHA256 13b374175108c266f4a5bdf907f990d0ccd5b486d0313856e08a60ba9bf856cf
MD5 7c068accfe6b0c30d60c1873889a755f
SHA1 6e4aafbe3bb0622ba08fb210d1fb5d9d9dd9fdcd
SHA512 c86e038d8a6ee0379b9048c51bb30e1159c4f61f35a3cf3311a072894ee9dca69988522af85b0ad9f1a7b7defb3331fb9c6f967cb36df649233dabefeffcc653
SSDEEP 1536:ePrgCA7vEAQ8mCo30GoIADnx0y7NsR9CfIbHMvM:eNcEAQ8Zo31oIADn8T5
TLSH
T17D736C8792A44086EEF79174CE536FC3FBB1F1915904539F51A4C18E2F533A08BBA726
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_bz2.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\_bz2.pyd
Size 85KB
SHA256 33641a8ad0403473d678c7435197d49550fc5185ba7979fb16ab80256b1f9072
MD5 98aa4ec9b691267912bcb3336fc7cafc
SHA1 8955d7e923c4bf05d84a03666ec8cdb4fab2f616
SHA512 62084c7077ed896b92055e5a278651d6eeca65622321e389e551e8a331b51c9fe2a5eb1b903eaed41117a7a8efce514b9d62acf2b62985d1535812ab59011387
SSDEEP 1536:w1sxz74jpCk2wWdyOeR3RYZvksL8DdRbEvtwIA3V4y7NsR9KfIkWO:GsxzsIdtYOeRuZcsYZlitwIA3VU
TLSH
T162838D82E3A462B7F59F91B4D7810753F730FF560710A3AFB25482863F12B91AE58366
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_cffi_backend.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\_cffi_backend.cp314-win_amd64.pyd
Size 177KB
SHA256 58bbe1eb15f9ab8e9ea45715a8311e2366b360d910a4685448bdd728d5177a01
MD5 6b28010dc48e5ea1fad1c9ce83cf8dac
SHA1 5239488b539fd8f5887ab766b368e0c305c3805a
SHA512 db867424841c37e55d6aedbde6acc88b8b8e2806cd8619dc76cb33f949ffecf1a5869a7a4ab145743a00fe20da4ff0ac07350ddfb1245d8441b69bd1d97af8f6
SSDEEP 3072:jpx2gGxvaAuzyJ4vSBGqNX2LstgUzBwDc34YLn+Sz4u6H+S7wxSTL7KDYRepDfH:jpD5yJ4vSBjmstgUzBAc34YL+vbepxSQ
TLSH
T1A6045D5A329C10B2D5A64178CA679B83E7B3B461171097CF0160C6B62F1FBE67A7FB40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_ctypes.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\_ctypes.pyd
Size 139KB
SHA256 79967d8614f735cc62b81649641fd8d0414ca66d3d6656fa7788334bbdbbd35b
MD5 409e2c98beb0554395f65fc8b55951c7
SHA1 f7e25afa8bd80fa8ed709aed8ced4374c0f1ed93
SHA512 8babb6fe295975868c1aa57c63dcab6f2cd151ba7074848dc7da27de2ea46a886496754b7c7e09b043ec5dc2813d30cbdbaa136f0f26302a1b7246a5da7962a7
SSDEEP 3072:5Dpx2Lp7KR+FrkdOJWWcovIXBzTKRFyxpMIAGPwuTkY:tpxCtKUr8WDvIXBnU8xppkY
TLSH
T1DDD38E4B736840A6DA678138C6739E47EBB1F4521A1087CF4264C99B1F633A2AF3F715
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_decimal.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\_decimal.pyd
Size 284KB
SHA256 1f4a8ca9814508d3597992173fdf4db312f3b970f6baeb053b9d8c3087f907e7
MD5 d0cc4eb1597b0d0e851761ad781002bb
SHA1 606a80e9417cca5699fe48e1eb2e6d22f67bd82f
SHA512 4ae19bd6e2bb22697727bec6369725a7a1bc718b28c5a74c1f4bffd1508091714dfe5db644a1b8bfa34d30235ba36111449df72741d61b80415a42442a35bd45
SSDEEP 6144:R/wuhmr5uFGZvFvvpYXqOYv3wGqqM43fIWeAHmMVuq6:lmVuFGZvtmXMntVW
TLSH
T1CE546D96A3490CA4EF738434CA879A57F7B278414360D78F43A48A972F933A3677E744
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_hashlib.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\_hashlib.pyd
Size 67KB
SHA256 58c5c9ff93f989e2a233b8c5e06420ea73dd6c013e1f08d996fb0f2828eba0aa
MD5 c435a8d2988b2b248664a45ac26b8b14
SHA1 224adc85a39374e72de0383810aa747a7bc89705
SHA512 480a76ad73ce1942751af83fca8913e3a36961876b15341035162a121b71aa0a86e992d3b6ca54a8a7ae7d43efc24fe8a824819f833c539a2abd30c41257d62c
SSDEEP 1536:2qCcJ6CJ2GEioPMc5Wv52ztK4oIADIJy7NsR9BfIkH:xCcEyG1X5Wv52zBoIADI4
TLSH
T1F3636C46A6984092D62382B5C9E34E43FA74F6512B1197CFA239C1CD2F233C3677B75A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_lzma.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\_lzma.pyd
Size 157KB
SHA256 a01f1927adaa60adcfbe3b0314205a528cb9dd5a93b7e61cb284eddee9b0b347
MD5 d5e9416137026497171e131dff6e569f
SHA1 16de80a710940e38537d1d2aea22bc33d5948591
SHA512 e7cb2a3c68e7f5129a4712b38b81fc84fc57881bd1d087c755ba16ee6d892be7ec0708a30465d2a28fe9b587226f233e02a2f512f861ad58012b5b80fe7c1927
SSDEEP 3072:QJ66gwnM5uNIJfuPdX+ENYQrHznfx9mNopUpdgwIAI1ho:QURwnNIk1XrBrTpYOQgL
TLSH
T11AF35C86B794F0E6F3628C38D6624F57E6F578190320929A01CC976D2B1FB759A2F313
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_multiprocessing.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\_multiprocessing.pyd
Size 37KB
SHA256 a88475c4cba47977eef5756c217c79441c53cf57d0b05441de87744313e2898b
MD5 f320012244fffc160183d3354e1f1032
SHA1 9ce890d318e65e10b00bb972d5de26074190df86
SHA512 2c3fba6f7469daaf04e7ee38c7dc31c3d1d3179af1e795689db6b3a1d2fac05196653c88e54b29f7fc654dab3830967ebe408de0c90e75a8d1592944ed70e59e
SSDEEP 768:MFMV/wXXybycUlYIA7tThy5RNLaRYT2Ip4oTxf1ml6Z+7UVFg:MtXXybycKYIA7tty7NsR9UfIL+
TLSH
T10A037C85A6680043E9679A30C5A3EF87F535F7871B25869F3165D2CE0E373C1B36A34A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_overlapped.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\_overlapped.pyd
Size 56KB
SHA256 43b9e0bdc41646fc363f144bf050600dab647ce9e7c251a2b6d0e75358cb10cf
MD5 ab8858a46a7be17fac60533920888a44
SHA1 b01429e86b7e994d1952c5c3f8012b44731706fe
SHA512 c439c30a700e3b0b7f199b8bd3adffd1371839215fea569cee31b1de0d7aea71855052bcc60ef6fd77c957fdb1e1e8bee6b31380ebb30102242a8c8d8606d6fb
SSDEEP 1536:4CyjKf/t3jM2POqg4uGsLkIACtTy7NsR9U5MfIks:41qgxGGkIACtu
TLSH
T19C437C496B9401DAED73D579C2A79E03FB74B2D30601931F60A8D28A1F73792A72F385
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_queue.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\_queue.pyd
Size 35KB
SHA256 2a7bb0a53e86ae4982a6f64e2570137829a0be66537bb1c166913af273edbf0c
MD5 ca3c81d27c1baf30131d62f290d69057
SHA1 d8c637b974f7c6d5a8761b02e145f8a1c3b5538c
SHA512 684111ef143ef891701e209857486e3172e6f1d02fd50236e591e231748ba7acee31cffb840a5cb56ba57e92c57654e461cf479cace7bfc3fabcd42442911b7e
SSDEEP 768:ZlBxk6rOVBBmMIARUb6hy5RNLaRYT2Ip4DaTxf1ml9dH3jL:ZjSBBmMIARUbmy7NsR9GfIbH3v
TLSH
T128F28DC66A689097E6A3C970C2E2DE53F575F793170086DF2169828E1F273C2A33635D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_socket.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\_socket.pyd
Size 85KB
SHA256 435a86973131c5d5dc90f828e72d7bb0607578a48ab5bc5377f4a280a6beb8f7
MD5 8a8a372bee9f3b313e44bf441fd5dd61
SHA1 802cc8454b2c5ca4c8a7754821b756d3ca248058
SHA512 bbf0362e306e0679937158647f402bd93a23f7f4270f90eff524b44b0f0af114456f8681b933424a50e3fa764b2ea5aabc67e385a02da2427c340163bf6ed739
SSDEEP 1536:ecVuncT0XH3XAJtZypxQ7XP+66wSz2/jAjI/Lb6NsQ3cs8PgMrMIAGwsy7NsR9dB:nEny2+jypxQ7XPz6wSz2/jAjQOsQssVG
TLSH
T1C5835B01AA6040F6EB72C172C2639E63FB74B5C012D4A75F5466C65A1F333C2BE3AB85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_sqlite3.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\_sqlite3.pyd
Size 129KB
SHA256 9a31c522e38cdea19386ae912f44fb75bb7f155d14d486d6bcf4de7e16883949
MD5 bd885d570bfc475118c98e6eed0006e8
SHA1 805e546a9915b03bb6e8fbedb3e32e18ac8227cf
SHA512 2132b214cbd9067cd6bc5fd8cf3a4a2e6791b4282f7b19cf561c6da16f010ebe8ab3f486c31d6b3755a516729d2fbff49c33a0ce17002725fc4b629f18c4be3f
SSDEEP 3072:8Mig75QUgAeWZTPlrCNcC56UlCkuZTPhASPzoIADQTZ:8MiaPTAD5ff4T+SPzd
TLSH
T113D35B5B631801A6E9B782B8C6B34613EB74F461572053DF51A0C28A1F377D27F3AB29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_ssl.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\_ssl.pyd
Size 180KB
SHA256 06f51fbe150c831af619890eea2d9fca9ce8b49758bfe3f382883551c592e6b3
MD5 372d2752bed978ad699a22fe125fe285
SHA1 9600c5fc4f904f65b29fb523cf9aadc9f109716e
SHA512 87c0a1385e624acfdeec9194a20d02475aac5cc965f558b40a932d955b49e70517f4691c142e8718bec283b3ab5d7671b886084792f47a236759000308716414
SSDEEP 3072:2Lj0a+17gAx5pW3kfh6CM6qMK3wYLizXClit8aN4Qp8VuMG4eJ9i1zktdsQ/3/Uo:4+17gAA3Qh6CM33bLOUBD
TLSH
T147048C47B1946EF7D913E8B9C2234443EBB4F145332287DE48D6D6860F03746AE6AB63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_wmi.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\_wmi.pyd
Size 39KB
SHA256 eccb72a070d63f0ddde054c7a15d375b11b1dfc3362452c55ccabb487dee87fc
MD5 495460dff020ae1b0ed769ca066d2635
SHA1 04dff00adde1f80ed9a367a0d7221af1968afa17
SHA512 d3171934fad631f51edd02526e6f05e43986c1bf8bc16d02877077d39bd7aa27f83efb2f27ada23e792c2a1bad8ce17bc2f0801e308f425c21d3bbae99ace5c8
SSDEEP 768:D2/EEqrVmjsyu2OQMVwIA3ilhy5RNLaRYT2Ip4ETxf1ml9dHMjL:OE9BEe2OQMVwIA3iTy7NsR9YfIbHMv
TLSH
T1A0038E89E6680092FB67DA70C5A6CE53F575B7931712838F326582990F333D1E73A329
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_zstd.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\_zstd.pyd
Size 491KB
SHA256 e5924e2985186797668dd3b2e1efeb9313459258a4564dbf5499935c7ebd44e7
MD5 a75e9eb46c217f915fb8db1deed6dbb3
SHA1 b7e1bb9e18856a93b405c8adff3a198695b37d50
SHA512 c160a4681d9e5ecbeaa9416e294883fae9a212e28a8fdee5b86181f7e1cb35b9f1352e2af7894ae1023fb839e75d4fcaa4c5bc61024bd7cf0e261e21edb02cfb
SSDEEP 6144:dZ87M+EgY9pB2l1eUVcnmw3Vh4S+zKhThruVxzeeO07WEz9LKE+UIHHHRToSH2l4:vNcumw3vT8eeOyWEz8xHnRTrWl93R9D
TLSH
T17AB48D43F29943EDE13BC4B8CF565A13FBB1780B1214965B9395CB993F07B309A6A309
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

base_library.zip

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\base_library.zip
Size 1.3MB
SHA256 211dcd451a2b91bf7e47e24f155139b357d39a1ac13bcb06f29a32a833f1c232
MD5 d44a0056384c89ae1f638e82cd8e0624
SHA1 9afc2f8d9356ee1a7dc6736cbdb7904f0d5b21bd
SHA512 511e6f5ae60504f5d3c1448db2b86370ac4733b4c0ed3f380a9caeb301f6bae225cb7ac3bfb71bd588560e7ca586ccbe2a7d74d5bfcefca4bbd88ee80904b470
SSDEEP 24576:WwBRpKL3ayLcd1lbyuUFHfQeOdP2m2dfqy:WiRk3id2uUF//N
TLSH
T1D2552AA1B9917867FEC9F37A35775A0CA715C0109B20D303B4A98DAC6FDF260AE158DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cacert.pem

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\certifi\cacert.pem
Size 266KB
SHA256 fc9165a12403263e7ebfbdad7be7a3eac0fa5d325d3c70465f28d3690072ca28
MD5 7cec1f8cf3352074cc70f3c6595cc69a
SHA1 b47d7e19601ea93d81dd1fad2fde2916557f2b07
SHA512 59346b000274610016ef1eb57069edf809fab34622fdef6bcdcd01eee491a9335ff8a9ef596e8d2ca4f135fd144b9a7bc6020e7e92e2ed6cd99812d8ed1e7bd4
SSDEEP 6144:MnB8fRRiplrXURrqADwYCuCCgT/QRSRqNb7d84u5/hrB:CiRiLbURrHdRWavdX0/n
TLSH
T196447C964F269C092C9FE1C1CA9B1357DD3A027B99FEF0F1294A2408D24622B57FCD9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cd.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\charset_normalizer\cd.cp314-win_amd64.pyd
Size 10KB
SHA256 da3ce780d6d58ae8c6920b99f806f64d58a1b33f4a01382861b01b50549199f8
MD5 d22406cd44bf4cc0de40f2975eb9cfb7
SHA1 672fae4c492c41a11b82b71ddf6956e25bdf74d9
SHA512 cb8c9f0eb6688412394669d3f1d799e3a89aba0c6c3c3aec67f70cf636df7fa34e29ded3e830a532334f468d55754da3d2d8b7c7954f5ead6a5af2812efe64b9
SSDEEP 192:h7JGrmoX+sMl/++Ch9p85BgQ9NgeAwJz6:hJ4m446OR9DAe
TLSH
T1D122F85CFE6458AAD9158138C6374E4BB132BB22170273CF8370A06A1FA37E66534785
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_rust.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\cryptography\hazmat\bindings\_rust.pyd
Size 8.7MB
SHA256 fe5c4cdb5512f792fb0f5b3ce0cd8c1484614851d56ff5d1e7215213eb9e0bca
MD5 096d119952f45d16c1d55ff15bd1592d
SHA1 a8a436dd1ad10cd3f1a680ecb4e2db165ee9f1a0
SHA512 9b96d91833b63a74de745d0fbbb86ad4bab763859c4ba910fabea84190f97641e804de44f4aee5fcea3db862f25350f4af6fcbeb66c66b28363ad989a34d022c
SSDEEP 98304:1W6bzDfOZTvepY947DuKXzbDq/26mzRs5h+cIIy:1VDXzXq/26mzROj
TLSH
T10D967D29BAA940A8D86AC4B8C34757339B7174CA07747AEF49D486B52F37BE41B3D700
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libcrypto-3.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\libcrypto-3.dll
Size 5.0MB
SHA256 eaf6d613b95b61a39558d84c50e72630a66c99914292df88e7b54ebd60c5bd34
MD5 7e8a8461fcd43c82841a99a2054711f1
SHA1 a931808c56e3a117795491965cb3f679cdc05886
SHA512 023c34e26b7dc7240d4571f8f808bdd0b749bd6e924948c3db9c5bb4f7acf24557d3a94bfe6ff82697f9747b35c13a73b94482dff3568e1dadb8fe08b598bc61
SSDEEP 98304:on+c+4Vp8XhjqO58Pw1CPwDvt3uFlDCQ9p:mPTVpghjqO5841CPwDvt3uFlDCQ/
TLSH
T147367B6AA7A80189E4BAC13CC9534617D2B1F81A57B097CF18A156BD0F37FDA2B3D740
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libffi-8.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\libffi-8.dll
Size 38KB
SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
MD5 0f8e4992ca92baaf54cc0b43aaccce21
SHA1 c7300975df267b1d6adcbac0ac93fd7b1ab49bd2
SHA512 6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978
SSDEEP 768:NiQfxQemQJNrPN+moyijAc5YiSyvkIPxWEqG:dfxIQvPkmoyijP7SytPxF
TLSH
T10B037C0B458418A4E657D53D97A64A2AC335B9240B60F2CB03D4C2BA3F6B7D6FB7C358
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libssl-3.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\libssl-3.dll
Size 776KB
SHA256 cf1a5fdcefa3daf69041f31f98ece1d7911ca4fcb8e9f1043b4d0f459ae4c936
MD5 299335af4f92df8a446d5f98d6e9cfc4
SHA1 75ddcd4863ffde24d22914946ce4e085722dcdbe
SHA512 2da67c01775d71122e6bb951b7e5e7462e8725f79b513551478cd262dae2d97e108427241d13f4fd6ef1d35b739d34fb9c999ca4a6d50271ceda8e0c3dab313c
SSDEEP 12288:8VJ6zW/kDXMeI0niRBRKZk60STGaFc4rldFe9XbC:JDXMeI0iRBRKZN08GaFFe9XbC
TLSH
T1D3F44CADB37C05DDD8B6C17986934623E3B6F4162330EBEB065186790F277D52B3A248
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_psutil_windows.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\psutil\_psutil_windows.pyd
Size 69KB
SHA256 0035450801bd7d938e9e146c5ec28e619cb5a5f4a18cdc53ac7e9734c7f94f78
MD5 0a66d22d2ac4f9d41e1605b8d05de77b
SHA1 062de44628065f96d8137a2f04d1a88cc560b56b
SHA512 aa246c8d757a5be47e529889376faf9c94a5e377b20b418c4c7fa83e00c01060b01a887ebc662ab7bd42a6dac53abaac3a41b48b6a6f336d798c2ae782f80b5a
SSDEEP 768:axgqyAz7MqVIiOSzTVCeur2wTljgUd+mZnJGL0kKoPVMDw4xulnFn9mcBQ3S3X/:uZzwq2+SBRJdpZnJbPoPVM04YnUjHmC
TLSH
T121631895B35900F8C91B913D9EB26A37E7B2B091132657CF0160D68A0FA3BD36E7DB41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pyexpat.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\pyexpat.pyd
Size 213KB
SHA256 05530afc9cbfe68c28c052eec159b852e731316007e1f52e0a31412e4eda07f9
MD5 85913240677e6a75f3dbd5b548e824ec
SHA1 21904e9603cbb4eaea1af1d32a9efae984a5344e
SHA512 aa3429a87d6928fdb27dd0a607ad1f2a901ffde7e2b744079e03b82889bfe6305dd260d617143281c636203aca469b8cb62e8ba4ad76f6383496ac06b9ac7558
SSDEEP 6144:+H/PKxsukBnL1G1QA/3t1sYJsaoYC5mx:+KxsukB41QwOwx
TLSH
T1A1247D9BB265C1E6D853C13CE6968B13DAB1B86203909BCF52C4DA7C9F2B3513B29315
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python3.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\python3.dll
Size 72KB
SHA256 1dd696f02326e32e67b52c25b249b3acce3238176212d16e8fb1a050a1455ae9
MD5 33282f049faffb54e4b5604f18bcb4f7
SHA1 3406bdbd09a8968816f303f5c6e8e220a9336807
SHA512 6a8754ed4a24748d60002f2a02c0cc193a4d2185edba7c834572a6815b1aa1bea4733708460dbd2780cc3a6c856ce8aba0d2f55cd1a65c164599267784e0d2a6
SSDEEP 768:PQlHwMvmhZpNVBBr2KyrGYpoQdFxxI4XngqMkf/tFd1WugwBByCsAKyEG+zMRKI1:ebTrnXngXMjMIAG0Yy7NsR9/fIbHgv
TLSH
T110734B5E6B54F8A2D6F629FC78D199CE242B12FC4F2984DFA47DD3920D1A310A22734D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python314.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\python314.dll
Size 6.5MB
SHA256 a07f7d09c3121492bb066535c6d0811df5fbc2090cbca7031a97bb47ce1480c9
MD5 e823b990ba85afa143b799c291058dce
SHA1 3e53a71a5c72c3011bee19a792a6552a0d702671
SHA512 fc9b0a6795993e1c4519622726647c33c415a9aa9983daa52d1f9f371c58fb74067599052f5b9c25f5acc08ed15021221dc524543a4de87b5705bba145a1b622
SSDEEP 98304:6PEfNNEwwP1Fyh4NIyDB7Qfo7wavAHDMiEuGC:tfXEwM1Eh4ayDpji1
TLSH
T180669E26737401A5D9BB8035CA074647DBB1BC00AB30D34B59A47ADA3F733635BAEB85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pywintypes314.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\pywin32_system32\pywintypes314.dll
Size 133KB
SHA256 74f036548f3321d312205085662b2b92c0654354a718a41c44e02fd4e01fedb9
MD5 97c0fbb6754c4ca45b39cae25b390e2c
SHA1 8768c0cbb6d9bb294c9f317f13b29ca8592d4dbe
SHA512 8a8f8cbc1d0fa0439085f3b0c641c1ce959e1b398db03bb0e69037cc6148eca04c1d8a16963e59f2c183302c0bf8bdc5ef824f50b9f0d874d87eb6bbd7c46fa9
SSDEEP 3072:3x+hyw7Jomer2JCDa3GOY/r06YrpdMzdKK4Ax3/gHG7Mj:3oH7JfeCJCe2OY/rkDMBJ4Axvgm7Mj
TLSH
T114D32A47374688DAE966A37DCD771E42C3A2B0000711E3CF06A1C2976F637E5AD3BA56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

select.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\select.pyd
Size 32KB
SHA256 56441c3148743a0890986ccdf93fea8174155b0ee84db2493151f075d8e7c51a
MD5 220234862600483073f18e48a7860bc5
SHA1 fd000174506afa55ffe67f72b45f8bb9e572ad6c
SHA512 c4b7f64f8934c9892763487fcd0eaf4c8087679082d0bb250cc264bdabaf88fb7245ec5b54abbe412a05c397abe56729f297bff98a956f9d4d8f98310ecbfcde
SSDEEP 768:oB7YoHf8aqFMIARGLhy5RNLaRYT2Ip4zTxf1ml9dH7DjLkB:oB71/8aqFMIARG1y7NsR9RfIbHHv
TLSH
T126E27DCAAB745047E6A3CA7186A2CE43F939B7A35651829F31B991C90E173C1F337319
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Lorem ipsum.txt

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\setuptools\_vendor\jaraco\text\Lorem ipsum.txt
Size 1KB
SHA256 37fedcffbf73c4eb9f058f47677cb33203a436ff9390e4d38a8e01c9dad28e0b
MD5 4ce7501f6608f6ce4011d627979e1ae4
SHA1 78363672264d9cd3f72d5c1d3665e1657b1a5071
SHA512 a4cdf92725e1d740758da4dd28df5d1131f70cef46946b173fe6956cc0341f019d7c4fecc3c9605f354e1308858721dada825b4c19f59c5ad1ce01ab84c46b24
TLSH
T1972163328E9C03006FD1303A636E89EFD948F0281A04BB25ECF9D68FA44115CD6E2375
MD5 SHA1 SHA512 TLSH

Submit Download

sqlite3.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\sqlite3.dll
Size 1.5MB
SHA256 792d69122e0c46705b8778bf038aca6569fe6c96ece1d97d32b5d9bad887a81e
MD5 98681dcdf369c10455d5c1dd91d7a9ca
SHA1 ae8df3e2db4500f3032c4b143e499332d0eab49c
SHA512 bba48f404bc80d8bb1f9a99c968f933781b62ce7f0c1178c90dc364f0ac0cb38c52ab4c1d3f69c18beecdc04cf9ab3c2c39c3e687e0f8875628c07228ee789c5
SSDEEP 24576:ODKX0pwDaOrROsxNkJPcG/ZBZQQSKTWzdPcZb0LJ0ZC5hJ07gf4UBd84ZD1fAX3D:a8pOsxNkJPcGxDQuWRP+bZ6Icf4vC1f
TLSH
T1F5759D4BF2B801ADD0A7C17A851B1707EBB1B4051B64A7CF1594CAA92F53FE217BE324
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

unicodedata.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\unicodedata.pyd
Size 740KB
SHA256 58013696b4f08717aee2885aefa24031f4b18b3e62faa8125248cc3e0a86af2a
MD5 89acf0e666a540a8e22cac1a09f15ff7
SHA1 e11e74df8f7b7448c79f31fafd6a9ef5f1a393d3
SHA512 26c9958de86384a1bfab493f2f733e087de887f3f0c7532bf30fb3de2dd32b5942ac806b8bee1370e2f9ae67b5df7fba65fc43aa88dab78f8408c09d1c769a28
SSDEEP 12288:PPYzAPtrZmDtBPcH+dEYJ5EIub+z70lDJPT36mwtNi:PPY05ZmDPqO54lDJPTMNi
TLSH
T1CDF4E5F5BB838C16E69B767A48D3610F4E50C2B35F0A8637B2182355D8EB3B44DD582E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

win32crypt.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI49802\win32\win32crypt.pyd
Size 122KB
SHA256 61cc3cdd8a543b7cbbcab2ba0f5d1202008711786f713a9f5c49789d738f3dc7
MD5 fd859fa9f45f5a1a0e221e296cbe203a
SHA1 91d5f2f391d40ed561954028ae1ee2f8b0b4b75a
SHA512 a5f4cf451243ea9e372420588dc3bb78e0957826966224c0c71ab8933cbe2a95728505a0e2e94d398094175c9d99902e9c65e7f15b705e4174f94d7d03147cea
SSDEEP 3072:p3PzguXTQDhLpoaiBy5vsksqEYxRvdtPkJ/7Df:pf8uD2nFscR1tPkJ/7L
TLSH
T166C34C13328649D6E9AAD3BDC823A807E7A5B0150721ABCF0950C6D61F67BF06D3E74D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_temp_Default.db

Path C:\Users\Admin\AppData\Local\Temp\chrome_temp_Default.db
Size 40KB
SHA256 06aeb2f9c1ee642348c091fb27541c143545354c273055ce30832e0f61aedf81
MD5 ba979c77c714b67908bc582ec373c723
SHA1 ff6b59b47b8d3ad488eaa7a4b0040a9a93eb19fe
SHA512 fc6b860dcb9e00c6ab7aa72555fb17921bbb8b1276acf0ab5fcb20b5f2dbd4bf71946c5c4fcfc46310f8de29491a63e46d43805070d19f290070f60077f80b01
SSDEEP 96:wDaCn8MouB6w9fUP8iZqmvJKLPeymwil:wDaG7Iw9f/iSi
TLSH
T16103440F2E682801C8B94632BCF124E62E7DA03E4F13EED12CB504659D75C52B52E5EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

edge_temp_Default.db

Path C:\Users\Admin\AppData\Local\Temp\edge_temp_Default.db
Size 56KB
SHA256 a36a4989ed48954499586d6551e61d6bccfc7bee269b4eab0bb836e394c24c7c
MD5 f92de240ae86100670164298edba43f2
SHA1 5d9ede7e7743e75344ee7f996456693f82896e5d
SHA512 2e6b9cbd04baf609d91a0583d742b19c5dc6dd7b334349fac1a71563c140075408fe881388e1fff72f5c1c0124d0603d54d35f5039c544ee9c1350b4e1684c21
SSDEEP 96:/kS/KLPeymOoizhGNOnfmG38tmvJHbn8MouB6w9fUPnP:B4oizhGNOnDV77Iw9fK
TLSH
T15E43651F1B682802C8698632BCB194F36F7CA13E8F639E922CB044359D75852B12D5FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/368-1677-0x000001CEBA820000-0x000001CEBAB75000-memory.dmp

Download

memory/868-3357-0x000001DCA8210000-0x000001DCA8565000-memory.dmp

Download

memory/1652-1680-0x00007FFFA2EC0000-0x00007FFFA2EE9000-memory.dmp

Download

memory/1652-2381-0x00007FFFA2EC0000-0x00007FFFA2EE9000-memory.dmp

Download

memory/1652-2380-0x00000181D9CD0000-0x00000181DA025000-memory.dmp

Download

memory/1652-1679-0x00000181D9CD0000-0x00000181DA025000-memory.dmp

Download

memory/1652-1927-0x00000181D9CD0000-0x00000181DA025000-memory.dmp

Download

memory/1652-1834-0x00000181D9CD0000-0x00000181DA025000-memory.dmp

Download

memory/1652-1868-0x00000181D9CD0000-0x00000181DA025000-memory.dmp

Download

memory/1864-1800-0x0000025A44470000-0x0000025A447C5000-memory.dmp

Download

memory/1864-1825-0x0000025A44470000-0x0000025A447C5000-memory.dmp

Download

memory/1880-3567-0x000001ABB3AD0000-0x000001ABB3E25000-memory.dmp

Download

memory/1880-3581-0x000001ABB3AD0000-0x000001ABB3E25000-memory.dmp

Download

memory/2476-3356-0x0000022E68950000-0x0000022E68CA5000-memory.dmp

Download

memory/3608-3489-0x000001643ABA0000-0x000001643AEF5000-memory.dmp

Download

memory/3608-3474-0x000001643ABA0000-0x000001643AEF5000-memory.dmp

Download

memory/4012-3478-0x000002E9C1CC0000-0x000002E9C2015000-memory.dmp

Download

memory/4012-3497-0x000002E9C1CC0000-0x000002E9C2015000-memory.dmp

Download

memory/4292-3588-0x0000022923070000-0x00000229233C5000-memory.dmp

Download

memory/4292-3502-0x0000022923070000-0x00000229233C5000-memory.dmp

Download

memory/4292-3359-0x00007FFFA3430000-0x00007FFFA3459000-memory.dmp

Download

memory/4292-3358-0x0000022923070000-0x00000229233C5000-memory.dmp

Download

memory/4492-3580-0x000001CB6E930000-0x000001CB6EC85000-memory.dmp

Download

memory/4492-3568-0x000001CB6E930000-0x000001CB6EC85000-memory.dmp

Download

memory/4644-1678-0x0000015B061B0000-0x0000015B06505000-memory.dmp

Download

memory/4644-2382-0x0000015B061B0000-0x0000015B06505000-memory.dmp

Download

memory/4824-1814-0x0000027119CA0000-0x0000027119FF5000-memory.dmp

Download

memory/4824-1831-0x0000027119CA0000-0x0000027119FF5000-memory.dmp

Download

memory/4892-119-0x000001E282D60000-0x000001E2830B5000-memory.dmp

Download

memory/4892-124-0x000001E282D60000-0x000001E2830B5000-memory.dmp

Download

memory/4980-125-0x000001AE58150000-0x000001AE584A5000-memory.dmp

Download

memory/4980-118-0x000001AE58150000-0x000001AE584A5000-memory.dmp

Download

memory/5148-1824-0x0000020D16A20000-0x0000020D16D75000-memory.dmp

Download

memory/5148-1809-0x0000020D16A20000-0x0000020D16D75000-memory.dmp

Download

memory/5324-1832-0x00000200DD9A0000-0x00000200DDCF5000-memory.dmp

Download

memory/5324-1813-0x00000200DD9A0000-0x00000200DDCF5000-memory.dmp

Download

memory/5368-3490-0x000001FAAF740000-0x000001FAAFA95000-memory.dmp

Download

memory/5368-3473-0x000001FAAF740000-0x000001FAAFA95000-memory.dmp

Download

memory/5940-3496-0x000001ECA7A20000-0x000001ECA7D75000-memory.dmp

Download

memory/5940-3479-0x000001ECA7A20000-0x000001ECA7D75000-memory.dmp

Download