Overview
overview
4Static
static
3My Femboy ...ommate
ubuntu-18.04-amd64
4My Femboy ...hon.so
ubuntu-18.04-amd64
1My Femboy ...api.so
ubuntu-18.04-amd64
1My Femboy ...python
ubuntu-18.04-amd64
1My Femboy ...ythonw
ubuntu-18.04-amd64
1My Femboy .../zsync
ubuntu-18.04-amd64
1My Femboy ...ncmake
ubuntu-18.04-amd64
1My Femboy ...47.dll
windows10-2004-x64
1My Femboy ...GL.dll
windows10-2004-x64
1My Femboy ...GL.dll
windows11-21h2-x64
1My Femboy ...v2.dll
windows10-2004-x64
1My Femboy ...v2.dll
windows11-21h2-x64
1My Femboy ....9.dll
windows10-2004-x64
1My Femboy ....9.dll
windows11-21h2-x64
1My Femboy ...on.dll
windows10-2004-x64
1My Femboy ...on.dll
windows11-21h2-x64
1My Femboy ...-1.dll
windows10-2004-x64
1My Femboy ...-1.dll
windows11-21h2-x64
1My Femboy ...rs.dll
windows10-2004-x64
1My Femboy ...rs.dll
windows11-21h2-x64
1My Femboy ...on.exe
windows10-2004-x64
1My Femboy ...on.exe
windows11-21h2-x64
1My Femboy ...nw.exe
windows10-2004-x64
1My Femboy ...nw.exe
windows11-21h2-x64
1My Femboy ...ay.vbs
windows10-2004-x64
1My Femboy ...ay.vbs
windows11-21h2-x64
1My Femboy ...64.dll
windows10-2004-x64
1My Femboy ...64.dll
windows11-21h2-x64
1My Femboy ...nc.exe
windows10-2004-x64
3My Femboy ...nc.exe
windows11-21h2-x64
3My Femboy ...ke.exe
windows10-2004-x64
3My Femboy ...ke.exe
windows11-21h2-x64
3Analysis
- user interaction
yes - max time kernel
149s - max time network
7s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260126-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260126-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
26/04/2026, 02:01
Static task
static1
Behavioral task
behavioral1
Sample
My Femboy Rommate/gamedata/lib/py3-linux-x86_64/My-Femboy-Roommate
Resource
ubuntu1804-amd64-20260126-en
ubuntu-18.04-amd64
Behavioral task
behavioral2
Sample
My Femboy Rommate/gamedata/lib/py3-linux-x86_64/librenpython.so
Resource
ubuntu1804-amd64-20260126-en
ubuntu-18.04-amd64
Behavioral task
behavioral3
Sample
My Femboy Rommate/gamedata/lib/py3-linux-x86_64/libsteam_api.so
Resource
ubuntu1804-amd64-20260126-en
ubuntu-18.04-amd64
Behavioral task
behavioral4
Sample
My Femboy Rommate/gamedata/lib/py3-linux-x86_64/python
Resource
ubuntu1804-amd64-20260126-en
ubuntu-18.04-amd64
Behavioral task
behavioral5
Sample
My Femboy Rommate/gamedata/lib/py3-linux-x86_64/pythonw
Resource
ubuntu1804-amd64-20260126-en
ubuntu-18.04-amd64
Behavioral task
behavioral6
Sample
My Femboy Rommate/gamedata/lib/py3-linux-x86_64/zsync
Resource
ubuntu1804-amd64-20260126-en
ubuntu-18.04-amd64
Behavioral task
behavioral7
Sample
My Femboy Rommate/gamedata/lib/py3-linux-x86_64/zsyncmake
Resource
ubuntu1804-amd64-20260126-en
ubuntu-18.04-amd64
Behavioral task
behavioral8
Sample
My Femboy Rommate/gamedata/lib/py3-windows-x86_64/d3dcompiler_47.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
My Femboy Rommate/gamedata/lib/py3-windows-x86_64/libEGL.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
My Femboy Rommate/gamedata/lib/py3-windows-x86_64/libEGL.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral11
Sample
My Femboy Rommate/gamedata/lib/py3-windows-x86_64/libGLESv2.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
My Femboy Rommate/gamedata/lib/py3-windows-x86_64/libGLESv2.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral13
Sample
My Femboy Rommate/gamedata/lib/py3-windows-x86_64/libpython3.9.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
My Femboy Rommate/gamedata/lib/py3-windows-x86_64/libpython3.9.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral15
Sample
My Femboy Rommate/gamedata/lib/py3-windows-x86_64/librenpython.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
My Femboy Rommate/gamedata/lib/py3-windows-x86_64/librenpython.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral17
Sample
My Femboy Rommate/gamedata/lib/py3-windows-x86_64/libwinpthread-1.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
My Femboy Rommate/gamedata/lib/py3-windows-x86_64/libwinpthread-1.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral19
Sample
My Femboy Rommate/gamedata/lib/py3-windows-x86_64/nvdrs.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
My Femboy Rommate/gamedata/lib/py3-windows-x86_64/nvdrs.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral21
Sample
My Femboy Rommate/gamedata/lib/py3-windows-x86_64/python.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
My Femboy Rommate/gamedata/lib/py3-windows-x86_64/python.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral23
Sample
My Femboy Rommate/gamedata/lib/py3-windows-x86_64/pythonw.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
My Femboy Rommate/gamedata/lib/py3-windows-x86_64/pythonw.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral25
Sample
My Femboy Rommate/gamedata/lib/py3-windows-x86_64/say.vbs
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
My Femboy Rommate/gamedata/lib/py3-windows-x86_64/say.vbs
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral27
Sample
My Femboy Rommate/gamedata/lib/py3-windows-x86_64/steam_api64.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
My Femboy Rommate/gamedata/lib/py3-windows-x86_64/steam_api64.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral29
Sample
My Femboy Rommate/gamedata/lib/py3-windows-x86_64/zsync.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
My Femboy Rommate/gamedata/lib/py3-windows-x86_64/zsync.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral31
Sample
My Femboy Rommate/gamedata/lib/py3-windows-x86_64/zsyncmake.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
My Femboy Rommate/gamedata/lib/py3-windows-x86_64/zsyncmake.exe
Resource
win11-20260130-en
windows11-21h2-x64
General
- Target My Femboy Rommate/gamedata/lib/py3-linux-x86_64/My-Femboy-Roommate
- Size 5KB
- Sample260426-cfpy2acs8x
- SHA256 590d234571b9ae42ede2a43df44b6ef530d2840c61546fc948f4f746176680c1
- MD5 541e5398c07e73dd738a6924bc65df45
- SHA1 4b23c3839dfaa419cab9268653c831e21a00c9eb
- SHA512 fe18d47a9f22b99435c69ac0242899fb73fc90dad7ca03ac38fbcd6f4b2f81f7d4d047c767f907438c7fed3a0cc248a35a6d28e5a05d979ee2188f01043730ca
- SSDEEP 96:Ru2T8eVnMBWBPUcpMR9mA0V1S0SKg4EkfclcKEY5A:RBob8pUcpG0VLSn4e
- TLSH T101B1DD1AF3A0CE7FC8AC82749057073973B2A85453520BA35305B2B53D533DC1F2AADA
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Changes its process name 2 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself SDLHotplugALSA 1536 My-Femboy-Roommate Changes the process name, possibly in an attempt to hide itself SDLTimer 1538 My-Femboy-Roommate - Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
description ioc Process File opened for reading /proc/cpuinfo My-Femboy-Roommate - Reads CPU attributes 1 TTPs 1 IoCs
description ioc Process File opened for reading /sys/devices/system/cpu/online My-Femboy-Roommate - Enumerates kernel/hardware configuration 1 TTPs 30 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/devices/pci0000:00/0000:00:02.0/subsystem_device My-Femboy-Roommate File opened for reading /sys/devices/pci0000:00/0000:00:05.0/usb1/1-1/1-1:1.0/0003:0222:0001.0001/input/input4/uevent My-Femboy-Roommate File opened for reading /sys/class/hidraw My-Femboy-Roommate File opened for reading /sys/devices/pci0000:00/0000:00:05.0/usb1/1-1/1-1:1.0/0003:0222:0001.0001/uevent My-Femboy-Roommate File opened for reading /sys/bus My-Femboy-Roommate File opened for reading /sys/devices/virtual/input/mice/uevent My-Femboy-Roommate File opened for reading /sys/devices/pci0000:00/0000:00:05.0/usb1/1-1/1-1:1.0/0003:0222:0001.0001/input/input4/mouse0/uevent My-Femboy-Roommate File opened for reading /sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/event0/uevent My-Femboy-Roommate File opened for reading /sys/devices/pci0000:00/0000:00:02.0/vendor My-Femboy-Roommate File opened for reading /sys/devices/pci0000:00/0000:00:05.0/usb1/1-1/1-1:1.0/0003:0222:0001.0001/input/input4/js0/uevent My-Femboy-Roommate File opened for reading /sys/devices/platform/i8042/serio0/input/input1/uevent My-Femboy-Roommate File opened for reading /sys/devices/pci0000:00/0000:00:05.0/usb1/1-1/1-1:1.0/uevent My-Femboy-Roommate File opened for reading /sys/devices/pci0000:00/0000:00:02.0/uevent My-Femboy-Roommate File opened for reading /sys/devices/platform/i8042/serio0/input/input1/event1/uevent My-Femboy-Roommate File opened for reading /sys/devices/pci0000:00/0000:00:05.0/usb1/1-1/product My-Femboy-Roommate File opened for reading /sys/class My-Femboy-Roommate File opened for reading /sys/devices/platform/i8042/serio1/input/input3/mouse1/uevent My-Femboy-Roommate File opened for reading /sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/uevent My-Femboy-Roommate File opened for reading /sys/devices/pci0000:00/0000:00:05.0/usb1/1-1/bcdDevice My-Femboy-Roommate File opened for reading /sys/devices/pci0000:00/0000:00:05.0/usb1/1-1/manufacturer My-Femboy-Roommate File opened for reading /sys/kernel/security/apparmor/features/dbus/mask dbus-daemon File opened for reading /sys/devices/pci0000:00/0000:00:02.0/device My-Femboy-Roommate File opened for reading /sys/class/input My-Femboy-Roommate File opened for reading /sys/devices/pci0000:00/0000:00:05.0/usb1/1-1/1-1:1.0/0003:0222:0001.0001/input/input4/event2/uevent My-Femboy-Roommate File opened for reading /sys/devices/pci0000:00/0000:00:05.0/usb1/1-1/1-1:1.0/bInterfaceNumber My-Femboy-Roommate File opened for reading /sys/devices/platform/i8042/serio1/input/input3/uevent My-Femboy-Roommate File opened for reading /sys/devices/pci0000:00/0000:00:05.0/usb1/1-1/uevent My-Femboy-Roommate File opened for reading /sys/devices/pci0000:00/0000:00:02.0/subsystem_vendor My-Femboy-Roommate File opened for reading /sys/devices/platform/i8042/serio1/input/input3/event3/uevent My-Femboy-Roommate File opened for reading /sys/devices/pci0000:00/0000:00:05.0/usb1/1-1/1-1:1.0/0003:0222:0001.0001/hidraw/hidraw0/uevent My-Femboy-Roommate -
description ioc Process File opened for reading /proc/self/fd My-Femboy-Roommate File opened for reading /proc/filesystems dbus-daemon File opened for reading /proc/mounts dbus-daemon File opened for reading /proc/sys/kernel/cap_last_cap dbus-daemon File opened for reading /proc/1526/status dbus-daemon File opened for reading /proc/1526/attr/current dbus-daemon File opened for reading /proc/1521/cmdline dbus-daemon File opened for reading /proc/sys/vm/overcommit_memory My-Femboy-Roommate - Writes file to tmp directory 64 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/savelocation.cpython-39.pyc.140692744206128 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/parameter.cpython-39.pyc.140692935284656 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/curry.cpython-39.pyc.140692744635952 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/sl2/__pycache__/__init__.cpython-39.pyc.140692742180528 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/sl2/__pycache__/sldisplayables.cpython-39.pyc.140692727520256 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/editor.cpython-39.pyc.140692727736368 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/log.txt My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/display/__pycache__/controller.cpython-39.pyc.140692737201040 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/gl/__pycache__/glfunctions.cpython-39.pyc.140692539639344 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/game/saves/auto-1-LT1.save.new My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/styledata/__pycache__/styleutil.cpython-39.pyc.140692743204416 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/display/__pycache__/module.cpython-39.pyc.140692742740400 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/text/__pycache__/__init__.cpython-39.pyc.140692742490672 My-Femboy-Roommate File opened for modification /tmp/9br0cfhg My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/text/__pycache__/font.cpython-39.pyc.140692742490672 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/gl/__pycache__/__init__.cpython-39.pyc.140692741971632 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/display/__pycache__/particle.cpython-39.pyc.140692737069248 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/display/__pycache__/predict.cpython-39.pyc.140692742171648 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/screenlang.cpython-39.pyc.140692742176944 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/compat/__pycache__/__init__.cpython-39.pyc.140692939144192 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/object.cpython-39.pyc.140692937103536 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/display/__pycache__/imagelike.cpython-39.pyc.140692737425744 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/display/__pycache__/focus.cpython-39.pyc.140692737285552 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/ui.cpython-39.pyc.140692742176944 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/memory.cpython-39.pyc.140692727736368 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/uguu/__pycache__/__init__.cpython-39.pyc.140692659008304 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/add_from.cpython-39.pyc.140692659008816 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/arguments.cpython-39.pyc.140692936157232 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/versions.cpython-39.pyc.140692743062064 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/translation/__pycache__/merge.cpython-39.pyc.140692743338576 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/text/__pycache__/extras.cpython-39.pyc.140692741968432 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/sl2/__pycache__/slast.cpython-39.pyc.140692742180528 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/gl2/__pycache__/gl2functions.cpython-39.pyc.140692658495040 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/minstore.cpython-39.pyc.140692659009584 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/test/__pycache__/testmouse.cpython-39.pyc.140692659010096 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/preferences.cpython-39.pyc.140692938923312 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/ast.cpython-39.pyc.140692935284912 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/text/__pycache__/emoji_trie.cpython-39.pyc.140692742841520 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/display/__pycache__/transition.cpython-39.pyc.140692737940624 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/test/__pycache__/testast.cpython-39.pyc.140692658475056 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/test/__pycache__/testexecution.cpython-39.pyc.140692658383008 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/config.cpython-39.pyc.140692936903088 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/scriptedit.cpython-39.pyc.140692743667760 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/script.cpython-39.pyc.140692743667760 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/revertable.cpython-39.pyc.140692935280304 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/substitutions.cpython-39.pyc.140692743064752 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/display/__pycache__/transform.cpython-39.pyc.140692737567744 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/audio/__pycache__/audio.cpython-39.pyc.140692742155312 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/test/__pycache__/testkey.cpython-39.pyc.140692659010096 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/display/__pycache__/presplash.cpython-39.pyc.140692936690544 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/debug.cpython-39.pyc.140692937103536 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/atl.cpython-39.pyc.140692744635952 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/audio/__pycache__/__init__.cpython-39.pyc.140692742155312 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/python.cpython-39.pyc.140692935280304 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/parser.cpython-39.pyc.140692743667760 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/display/__pycache__/displayable.cpython-39.pyc.140692742635856 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/display/__pycache__/dragdrop.cpython-39.pyc.140692742200320 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/game.cpython-39.pyc.140692938922160 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/color.cpython-39.pyc.140692935284912 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/lexer.cpython-39.pyc.140692897699888 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/savetoken.cpython-39.pyc.140692744206128 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/display/__pycache__/im.cpython-39.pyc.140692737631920 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/__pycache__/character.cpython-39.pyc.140692659586864 My-Femboy-Roommate File opened for modification /tmp/My Femboy Rommate/gamedata/renpy/test/__pycache__/testparser.cpython-39.pyc.140692658381856 My-Femboy-Roommate
Processes
-
/tmp/My Femboy Rommate/gamedata/lib/py3-linux-x86_64/My-Femboy-Roommate"/tmp/My Femboy Rommate/gamedata/lib/py3-linux-x86_64/My-Femboy-Roommate"1⤵
- Changes its process name
- Checks CPU configuration
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
- Writes file to tmp directory
PID:1521 -
/usr/bin/dbus-launchdbus-launch --autolaunch 11c67417355f45d397f6be11f62e85a6 --binary-syntax --close-stderr2⤵PID:1522
-
/usr/bin/dbus-daemon/usr/bin/dbus-daemon --syslog-only --fork --print-pid 5 --print-address 7 --session3⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1524
-
-
-
/usr/local/sbin/unameuname -p2⤵PID:1533
-
-
/usr/local/bin/unameuname -p2⤵PID:1533
-
-
/usr/sbin/unameuname -p2⤵PID:1533
-
-
/usr/bin/unameuname -p2⤵PID:1533
-
-
/sbin/unameuname -p2⤵PID:1533
-
-
/bin/unameuname -p2⤵PID:1533
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /root/.renpy/Roommate-1713512540/auto-1-LT1.save.new
- Size 15KB
- SHA256 1a30560deb340c76429e2a803cbbbacda1689e008e3dea470a334578b7b08874
- MD5 d0680d975388671bd52a127224487a69
- SHA1 c50feea416d7a59e586ad41ba6740addb4ea0a0e
- SHA512 df969a92b260eccc522bbf6480fa9c607ea69a64bcf651757eda6bc22c5b593473b876448a22da1750e95a4ba5430e5b27203d9ad4ffa5a405b1f072641bbe35
- SSDEEP 384:Ggq8I4XAYdQW2+wc4v8+GBbHLBwMXvvLZJJijVPMifv9vH:GgPIRYOW2+340+GBbrBZlJJijVP9v1H
- TLSH T19C72B08C47CF8CA9F78E8634A3736B12770456EAED79AA6787C8C03C7567063C182562
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /root/.renpy/Roommate-1713512540/text.txt
- Size 5B
- SHA256 314ad142957febe390cc7223b4deb1d1b21c187f84f6e7257a23fe46c27fcae3
- MD5 f4020e91252aafd4b18d8acd17f883db
- SHA1 748d77dbb8bdb0dd330c099e7fde82da053fb1ff
- SHA512 301ddd0e34cbd842dae99a2cc4ccbfeb6ee8b3def39c214a719fa9edc26d7142749bbe6e992d26353dc167febbab0dbc05476b68a86ad93cab5f299f0aaf916d
- MD5 SHA1 SHA512
- Path /root/.renpy/tokens/security_keys.txt
- Size 302B
- SHA256 4df8f305866af3c78d0c704b83c7ab362ea05412643914d204df3107b4ea7e73
- MD5 a319198b36952b56ba5bf456508de5ef
- SHA1 31b3bfd09e04e4a36d63f8d4a2642d22728458ab
- SHA512 b8cb456c6badc9e73c3cf40984825745651d4a0cef786a962357414c9af6aed45f9a97d46ff09096117320f46a3e80250ae5981d95f07083b3dcc10da59cb3d5
- TLSH T110E0C2EF6384070C9149BA3407C90237661219D3ACB3FF58A6E125E4B8C836E4677A6D
- MD5 SHA1 SHA512 TLSH
- Path /root/.renpy/tokens/upgraded.txt
- Size 20B
- SHA256 9b4dbd95ccdd1e408a6f43f751496229b95af4d8dcb8b8e22dbaf94aa94acc0a
- MD5 245d6fe3c584a7aa8006177b9fa98d0c
- SHA1 58bf5567537e0762719b6912cb34944b431e69e8
- SHA512 24d875c716207224196814c148e07204103953c822c2ea6f6ac9a79fea1f8bb3d52fa00e200022e5251c65e1ea5f59c2f88d40a8d975de64834293b92e955ee9
- MD5 SHA1 SHA512
- Path /tmp/9br0cfhg
- Size 4B
- SHA256 f02285fb90ed8c81531fe78cf4e2abb68a62be73ee7d317623e2c3e3aefdfff2
- MD5 3f1d1d8d87177d3d8d897d7e421f84d6
- SHA1 dd082d742a5cb751290f1db2bd519c286aa86d95
- SHA512 2ae2b3936f31756332ca7a4b877d18f3fcc50e41e9472b5cd45a70bea82e29a0fa956ee6a9ee0e02f23d9db56b41d19cb51d88aac06e9c923a820a21023752a9
- MD5 SHA1 SHA512