30b20bb6941cb0aea38108f656406768c8bc1a3f76ed001d469017162aae204e

Analysis

user interaction
yes
max time kernel
39s
max time network
31s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/06/2026, 09:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LocalHost.exe
Size 44.4MB
Sample260626-lpvejsaz7k
SHA256 30b20bb6941cb0aea38108f656406768c8bc1a3f76ed001d469017162aae204e
MD5 e0302b6d830ca85ae7591d73cf289688
SHA1 1b805ae8d652e741dbd6f26471b10a1a74bf9247
SHA512 deb1d5237bf6dcd0543631cb28930bea2a1d91c09e18f3fb355309b01f59c7e384ed1b2b7de3d9c4766dad12545f43c19869470c7c240f19446fbdbfe88558fa
SSDEEP 786432:ePxxTTn6c4S0bBXnVOXEcJO1AOBBMUsRKW7jIWJSkgbYpEfEJeggFesyFCSu5Noo:yFAFXnVODJO1pBMUsRN7LJ74sUgQT+d8
TLSH
T160A733ED638049E3E067F63E2B5769D3C7A33C54A7628A4F2270B3933D372621835656
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery

Malware Config

Signatures

Loads dropped DLL 29 IoCs

pid	Process
5616	LocalHost.exe
5616	LocalHost.exe
5616	LocalHost.exe
5616	LocalHost.exe
5616	LocalHost.exe
5616	LocalHost.exe
5616	LocalHost.exe
5616	LocalHost.exe
5616	LocalHost.exe
5616	LocalHost.exe
5616	LocalHost.exe
5616	LocalHost.exe
5616	LocalHost.exe
5616	LocalHost.exe
5616	LocalHost.exe
5616	LocalHost.exe
5616	LocalHost.exe
5616	LocalHost.exe
5616	LocalHost.exe
5616	LocalHost.exe
5616	LocalHost.exe
5616	LocalHost.exe
5616	LocalHost.exe
5616	LocalHost.exe
5616	LocalHost.exe
5616	LocalHost.exe
5616	LocalHost.exe
5616	LocalHost.exe
5616	LocalHost.exe

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

Command interpreters often include specific commands/flags that ignore errors and other hangups.

defense_evasion

Ignore Process Interrupts

T1564.011

pid	Process
928	powershell.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
628	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Kills process with taskkill 2 IoCs

defense_evasion

pid	Process
236	taskkill.exe
2352	taskkill.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
5616	LocalHost.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
928	powershell.exe
928	powershell.exe
468	chrome.exe
468	chrome.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5616	LocalHost.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
468	chrome.exe
468	chrome.exe
468	chrome.exe

Suspicious use of AdjustPrivilegeToken 9 IoCs

description	pid	Process
Token: SeDebugPrivilege	928	powershell.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeDebugPrivilege	236	taskkill.exe
Token: SeDebugPrivilege	2352	taskkill.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe

Suspicious use of WriteProcessMemory 22 IoCs

description	pid	Process	procid_target
PID 1112 wrote to memory of 5616	1112	LocalHost.exe	89
PID 5616 wrote to memory of 928	5616	LocalHost.exe	90
PID 468 wrote to memory of 1632	468	chrome.exe	93
PID 468 wrote to memory of 5732	468	chrome.exe	94
PID 468 wrote to memory of 5732	468	chrome.exe	94
PID 468 wrote to memory of 628	468	chrome.exe	95
PID 468 wrote to memory of 4788	468	chrome.exe	97
PID 468 wrote to memory of 4788	468	chrome.exe	97
PID 468 wrote to memory of 3428	468	chrome.exe	98
PID 468 wrote to memory of 3428	468	chrome.exe	98
PID 468 wrote to memory of 5780	468	chrome.exe	99
PID 468 wrote to memory of 5780	468	chrome.exe	99
PID 468 wrote to memory of 2924	468	chrome.exe	100
PID 468 wrote to memory of 2924	468	chrome.exe	100
PID 468 wrote to memory of 3876	468	chrome.exe	101
PID 468 wrote to memory of 3876	468	chrome.exe	101
PID 468 wrote to memory of 5088	468	chrome.exe	102
PID 468 wrote to memory of 5088	468	chrome.exe	102
PID 468 wrote to memory of 5380	468	chrome.exe	103
PID 468 wrote to memory of 5380	468	chrome.exe	103
PID 5616 wrote to memory of 236	5616	LocalHost.exe	105
PID 5616 wrote to memory of 2352	5616	LocalHost.exe	108

C:\Users\Admin\AppData\Local\Temp\LocalHost.exe
"C:\Users\Admin\AppData\Local\Temp\LocalHost.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1112
- C:\Users\Admin\AppData\Local\Temp\LocalHost.exe
  "C:\Users\Admin\AppData\Local\Temp\LocalHost.exe"
  2⤵
  - Loads dropped DLL
  - Suspicious behavior: AddClipboardFormatListener
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of WriteProcessMemory
  PID:5616
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell -NoProfile -ExecutionPolicy Bypass -Command "Get-ChildItem -Path $env:LOCALAPPDATA\Roblox\Versions -Filter RobloxStudioBeta.exe -Recurse -ErrorAction SilentlyContinue | Select-Object -First 1 -ExpandProperty FullName"
    3⤵
    - Hide Artifacts: Ignore Process Interrupts
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:928
- - C:\Windows\SYSTEM32\taskkill.exe
    taskkill /F /T /IM RobloxStudioBeta.exe
    3⤵
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:236
- - C:\Windows\SYSTEM32\taskkill.exe
    taskkill /F /T /IM RobloxPlayerBeta.exe
    3⤵
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:2352

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0xa0,0x134,0x7ffefd76c728,0x7ffefd76c734,0x7ffefd76c740
  2⤵
  PID:1632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1700,i,14689213202100233763,10858432883248902594,262144 --field-trial-handle=1900,i,2779450518678348465,6194801141083365082,262144 --variations-seed-version --mojo-platform-channel-handle=1896 /prefetch:2
  2⤵
  PID:5732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1544,i,5691135660476006218,5484186755788802776,524288 --field-trial-handle=1900,i,2779450518678348465,6194801141083365082,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:11
  2⤵
  - System Time Discovery
  PID:628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2348,i,2960434080939191483,15710140909787059342,524288 --field-trial-handle=1900,i,2779450518678348465,6194801141083365082,262144 --variations-seed-version --mojo-platform-channel-handle=1768 /prefetch:13
  2⤵
  PID:4788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3212,i,2003950622044708450,853813652110053852,2097152 --field-trial-handle=1900,i,2779450518678348465,6194801141083365082,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:3428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3216,i,5577647716449555597,818756862459894733,2097152 --field-trial-handle=1900,i,2779450518678348465,6194801141083365082,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:5780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4624,i,10084680343483349236,2643426268783690435,2097152 --field-trial-handle=1900,i,2779450518678348465,6194801141083365082,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:1
  2⤵
  PID:2924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4908,i,14127710675600067548,1172414598541219253,524288 --field-trial-handle=1900,i,2779450518678348465,6194801141083365082,262144 --variations-seed-version --mojo-platform-channel-handle=4920 /prefetch:14
  2⤵
  PID:3876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5032,i,7274774460896441574,3780424383241039848,524288 --field-trial-handle=1900,i,2779450518678348465,6194801141083365082,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:14
  2⤵
  PID:5088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5220,i,9531897214670334257,14004281463376600273,524288 --field-trial-handle=1900,i,2779450518678348465,6194801141083365082,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:14
  2⤵
  PID:5380

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2168

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Ignore Process Interrupts

T1564.011

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 dc34d454019012c0f1481f90185cdde00a66cd836691f708e59a2743a3ae1ecb
MD5 99b2b534faf76b3751f1cd1418d44881
SHA1 98df33cdcd71167b4ddd765f3dfb2481073b895b
SHA512 e85679580af3f6682530bc9f8728f362cd35a5e57ee09e6a979811be35960fa10f04bf55cad7ac520f4a2e61e5e47a5636bab92a841bbb2583acfd6615f7d623
TLSH
T1C14179B7C3E8C97D890156F8AA216F1FCE290E54531C3C16C9D4AE0F53E69B2E20098E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 523B
SHA256 76a3fd224a9c10c492abe4b50d9203c059088a5eb0e9a584192e73e3d73d7075
MD5 7ea6296997b3336e9c33ab9a7bbd3c53
SHA1 5db72f99eb65a63c400fa604878fb34c9b52c9bb
SHA512 2bfb97d500de50d5dded131e63a551f20793b42e7274e41bf9c73e07e4c09024b3c2151edc42aa9e442467685e11e67be0c71bdb53a49e39da51f35025bef35f
TLSH
T10CF0C0F7977EB02790BD40AB0E087816A8B5E039034168E0CEAA823CA0854B70F1A473
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 10KB
SHA256 1e7c3a5f47877cdff3832180bd8e62fd1feec2f76b9b626205e88c2026a0715a
MD5 1be0805b2521e2ee2760fe654ad84f43
SHA1 5db4966b0463e247163458669ba548c333035c76
SHA512 8e91ac7fecc1faaa05809273f920b8af0fff02962c9259f3dad835fec495ba2882f910e52b488fcbe9fee85999ad9db96663d4887a80793a8cfb0355427a0b9e
SSDEEP 192:dRgtRZP/dv71APRp2g9UHsb+WNnyK0AiFPyIsnAUgR:dRgtRNdEX7KwP0hRR
TLSH
T1DF22842EAD14A53BACCBD22AFA21B753E3F9102136D42E54E6FCCA2C15D79CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 11KB
SHA256 8b10e247449e94d55c545bf72a33ec11e073c6df53e929e2628bb8d6195f1a36
MD5 6a67b94f44a8e09fc4192ffb20c6981c
SHA1 a5f9fb5fc199daf4d85a46ee1308f6ef905afaba
SHA512 fd47013fcd25b24c03e57611a27a791b4578cf3cfec979417a5fbc686a9e2ba5e7bbe3c2d20037b2400c7afdd1d0373e1692813e20159e80749772c3ec22b85d
SSDEEP 192:e2N4K6CM7KxkXqK4I40pUZNCgVLHrKHfFKslEO+kXzKD/RU+ErUkKN9PGl9VvOfB:/NjpM7KxkXqKf/pUZNCgVLH2HfgslOki
TLSH
T17432F827A88D9A7F0FD8D508DC526F8B6DF9015773780C2496FB9D0803997CA114A6FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 4KB
SHA256 b981f7a76ab973d3eb0576efa702603b67d5745d4c38e6f044b0379ee2d147db
MD5 70308e637fa7cf74c69a8cc14453d7b9
SHA1 f8baf4f8cd7b65cfdb8638ed17bcfde690aeb1fa
SHA512 ad9bb50c91a966a0140e67808061f806c49f3c299a28fad7a9f9abf7bad0c0dbdb7ceedd5d241dce3d552616d3c38b110243055c2fe140dcf37469c644548056
SSDEEP 96:dC0d+0JdBXgpHy6xfYBxdM51RDotok5mSDZB6vGyvGdijgbsYv4a:dC0LJdBXgNy6YGDUD5/T7ijgbsC
TLSH
T1AFA13871697C8A7B98B2D84678523A03CFB4619BF612AFA0D9DC1F0C21E74F91781723
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 4fbc8adcf7538b0f896cf48c97b3223f386b00d9cd4141a8dfea00e5ebf5ddeb
MD5 5de16e5d2e062e71b566cd7126476d2b
SHA1 55d22984db1638eb2b5d93dd3037cd19ee1a6383
SHA512 1fbe1b1397ae7751756008adb83065eea7f64f8ea14ba327746c724d6bb4da57496bd771172be96bdd75f9943d5c4e5eb446683e8250cff203c93c7f41cde621
SSDEEP 96:dC63d+0JdBXgpHy6xfYBxdb05hSl8h4otok5mZjDZB6LGyvGivFTHq0j9IB+uZLF:dC0LJdBXgNy6YYiUDiX/LIvFTHqU0T
TLSH
T1B8C12971687C5D7B54F2E85574033D038EB4618BAA529F68DADD4F0C02E74EC2781A1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

MSVCP140_1.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\PySide6\MSVCP140_1.dll
Size 26KB
SHA256 3402e3b5d062f4959c9255c543c81ef6a8e836a13d55f887ab5c8dfeb7c904cc
MD5 02f7e4ff17e56614229359b8a771f080
SHA1 065a8aaa7596fac3ef62979a4cd7c2dcd1b30f1a
SHA512 1a64bd4a24b627a578e7b061a44016bf7b219e7d4a6feb39dcf4e56fd8f844fcb86c3219ad88ca0972c6ecbb0f3d46b8f8111d581841ae77ab76368641bfbe7d
SSDEEP 384:3jC2J9VQH+qNy09dmFWcS5gW7AHQIYiu9csrPwey8RbmL4nNyUF:G8QH+qNy0PmgY5Yiuisr15AL6
TLSH
T1F1C28D43E6508C04EC178D34E8C68D66F676B5804FA2D3CB6359821D0FA63C37DBA769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSVCP140_2.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\PySide6\MSVCP140_2.dll
Size 265KB
SHA256 9af161c91b5285562e0a0b637e802da007e9b7ffcfbc5d35a846075b5446fa3e
MD5 554a5dd57c28a13ad545ddde051ea492
SHA1 860f9b5d551ff5750ffc08101ff4f645dd2aa59e
SHA512 7392a3946da39986d0eee84c9986a8414b670cd55040fc4c609d0e4313ca74f43d6a0cf6c880f85022b3ce9988d8544c80a06d10931043fdc71dc9745b1e9434
SSDEEP 3072:HJ51P7emwi1j+XZi7b1dbqtH0h6XV3Q0JPQo07ICl3Sg2xmygdCg2LMeDh5FD79H:HJbjwvnQo/iy5L/XxTWr8
TLSH
T14C442812B51A2EBFC5D6E8B04939B416FC223A418775C48A57C31C8D9F2BA533FE3529
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt6Core.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\PySide6\Qt6Core.dll
Size 10.0MB
SHA256 89383ca8aa134bd228eac80c879e4048d2f7982f646eda53fee35547c20d0c3c
MD5 b9faeecdfd8533df0afa04732e40a39a
SHA1 896f48d1a92d6768fab6f046ef5e6c691eb5bf39
SHA512 a255028134fd024a7e1aa242f87383e30e0811fe813e677154901765fd72678734894b1bc1aad896ee0b14994e3bb7b6defefef87a3356eef6523fe4f8e7a32d
SSDEEP 98304:027iaV09z8lO8KFdu9CwJsv6twYIJMAFXOIflG/3sUg:03aaYpKFdu9CwJsv6twPSALlG/3s
TLSH
T178B6390766FA0102F6FBDA34DAB75252DBB27C466B3196DF025861181D337F09E3A326
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt6Gui.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\PySide6\Qt6Gui.dll
Size 9.1MB
SHA256 5731a1d41f60ab686859943225848973726f4b00fd5e8e420453a12b1a2d1b95
MD5 3b7778bc33ee90025ba5c177f0f5e68e
SHA1 b5193d7f1c6efc811790a3b2ca4c0394040ec998
SHA512 80efaa362c0678797d65537521340abc4503b5e2fa83ce97b7b0efa69dec9d89fe1786168a914e91013203c8365e465b771ea9fe99d884c34283808cb9a2dd66
SSDEEP 98304:rbjnfkPh1x6Y5Hd7cH0TrP7ezfABVAyzs1:r/kPh1AaHxcH0TrPCz2zE
TLSH
T1F8A68D57A2A911D8C57BD13DCB9B9507EBB2700503669BDB01A4CA162F33BF12ABF311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt6Widgets.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\PySide6\Qt6Widgets.dll
Size 6.3MB
SHA256 0bc3f3d90e6090023210887ea5748d0b0800727cb407bef5090aa338089ea22a
MD5 72356672aae6ec8bc7351b8edce48672
SHA1 aaeac11e14d8255ced22516a46a3db5f3534e0b2
SHA512 a36632973af2f52fe0bf74854988d557b05022d91482d0ce4974aeb12e692dfd0fedd388eedbf08e69d6a0681fad260cdd2fc567538805a0f920b60fe98363b8
SSDEEP 98304:xXUkLxWe0sb8bKTGJd4HWJPD82g+HT5EG:xUwxWe0sb8bKTGJd4HWJPD8J+zmG
TLSH
T1DF666A97A3AA0185C46BD23DCB1B8A17EB72700453629BCF0165CE592F737E22E7E351
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QtCore.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\PySide6\QtCore.pyd
Size 3.2MB
SHA256 9d9ec6d5244ec8cc93156386394fe9d0fc96e749c2969fe013bf15f5c5a9784d
MD5 1e8e137cdc2007ad13a585de6537200c
SHA1 f6365d4402009ab5e8af4b9cad1518c94a63d6d5
SHA512 983107820946f2cffbd9be3f87f3def7f1154115b33898878a8d5c1816150d7e57f45c6d32de7d5522891928ca3394294a78eb8a26691a3a4f761ce14d88e565
SSDEEP 49152:PWgukCuhOWJRDbVLcw/AR/NZzDzbD6CQ4F2dbiDM+DriFVH0a0rMJRNru93ieLQ+:PpDsbIREJaVK
TLSH
T198F55B9B93990180D73BE1BDC90B4A07D6F2309245D6B30B556ACD685FD73A2236EFC2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QtGui.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\PySide6\QtGui.pyd
Size 3.7MB
SHA256 f58a2f83833ff32beb8729cbcf7d17a1a0386d7b535ba1ec60c20478f68bc2bf
MD5 f2406bada30233c3d1db705e798893c0
SHA1 d3fb472fdbda9ec270748e9dde2ce961fb627001
SHA512 98def3a76f36b649a65f9ac4f27ece20c45f2dd39400cd8e95e3758abca97f826bfc2797f4edfa153391f517ac87f1eb3235c623ac74d8e3a02a2125cdfc95e2
SSDEEP 49152:pdNqfzc2l5DLZLHNT+BwyXmlyeuta3tYLlJeSZdC5on2djTHwkAJec+gFBLpK8/k:DNoFgW2D2/
TLSH
T16E064A9A97A901C0D337E07DCD075A17D6F2389289C6A20B5475CD684FE335327AAFE2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QtWidgets.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\PySide6\QtWidgets.pyd
Size 4.6MB
SHA256 f14f92c99618246ee9a08632b46fc2493fb82607edb2f75318e44731ddcc7187
MD5 14f033b6b5286b74a2351015a11d2463
SHA1 b9922e21ccd49837a32db78969c0b78800c7116b
SHA512 e07664a65cf38958ef5fd9c72e5f057110724b998848df1e1d4f599fa7ee6b36602ff05618b6a2a2636f11e0c7fa82ba2d41da543a3055b53827c3b38c3ed2d0
SSDEEP 49152:Oj4V/MEs/GrFeoSAqeLeIsQj9d9oINYJRkxH0USWIRhT+vcPg3ITufZbhCPjKNfJ:sVk0RbZVDelKilLgw83yqa
TLSH
T1AD264CDF57AA01C0C27AD27DCD0B6A17C1F2B4C68885B30F4866C9AC9FB37866A557C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qgif.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\PySide6\plugins\imageformats\qgif.dll
Size 46KB
SHA256 1cfc07dbff333db31fa4df426eed42f3e8c080cf315209f710dc92b48d0f63c0
MD5 91c0c094cee8dc4d22ed8ecaffaaa0f6
SHA1 cb4cb1f265b5cd0270e05446ba07094f04334fa7
SHA512 bcafc8e6e159d7b940bb7a0e45bc3723d7f3fa41bd36c42756be136a1b7cf4d3745cc2f086e5024b4d1abdca5f0e818aa826bc2afa16398c2b76904d6471abf2
SSDEEP 768:0pTlEV6wdBj3NpVt/Mqs0KOIEP7sLzhcocTT65Yiuib5AL0S:uTlEkw3j3XDB/KW7sLzhc1TY7uQS
TLSH
T16B237C46AB6044D8D1238234D9964E2AEBB6B9504B92C7DF4221C62E1F737C23E7C779
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qdirect2d.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\PySide6\plugins\platforms\qdirect2d.dll
Size 1.0MB
SHA256 79bc6ad89693f1806a5df78de90144eab62a3c899a9bba98c19ab5cc08a4280d
MD5 35620c566b0e535a1a778e7b4c3dad9a
SHA1 b8c1ab7708b429fe24abee062e841db099c4737a
SHA512 3eebe487b48d2807b59832b0aff8e8a6d5989b2846e34966e36529d137dcb8d50664611361f699fefd7058b8df4351f6386d831afe4d0dd153a78a152856ec8e
SSDEEP 12288:UoVqFQEXQLg40ySxjAno8oPMx6c2I3Gyp13Ognk+c7ZoPBP58kkqpZwn/lFw4O:UlaEALn04nHoPMzF3lFkbqPBPiwOX+
TLSH
T103357C1B67A80295E43AC1BDC78B8742D6B2706203618ECB4561DE1DBF337E23A3DB55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qminimal.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\PySide6\plugins\platforms\qminimal.dll
Size 60KB
SHA256 690dafa73c039ffed32a71215c96a8c0e8dc3a14ab69ce1fa6753d15e7117502
MD5 72601a3da3649beeca095dcfd5060c4c
SHA1 c123bad96eb0d486ede17a6ade21d889ca548d4b
SHA512 f3b19879229f58ca1c7cff807b0ff7b1636bec0f1be30b4e2afaef1c7666db1a8c1ff3c562558f4f84f5e33e3e3250654cba78c319e1490dda707d4fc68fb970
SSDEEP 768:gRkPddegaLP/vo/b13x/vIK7Z8J8PumoSK52wmhRrIPiZ5YiuiV5AL5A:gRkbar4T13xXIK3RIPiH7ug
TLSH
T1AE5319025A360495D8368B7B81DB4E166435F2240B539BCF702B814E6FB9BC2397D6FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qoffscreen.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\PySide6\plugins\platforms\qoffscreen.dll
Size 111KB
SHA256 53b6c5447c1055d75be99e17b2e84bae323ef6da2954cf8f874eeb8009aa0159
MD5 b2764f97cd52f87fd2591d7f627cd172
SHA1 c830fc1272d856590c8ba692c54673a83ce67f72
SHA512 263e8376247c5daab5f1f1452eb0c6720f3f3b0524dd243386f1695098130dd7562a3bf8912492942ea1c80dda6f3f617db7c8193ac0d95e8162f491b7285760
SSDEEP 3072:Eh64KOpNdP6DPiIQQEDJMUdWEpJw1Q+QXcN08:EhbZnmKrJMyWEpJw1Q+QsT
TLSH
T161B3395226750485D836CB3AC2C74926E736F0140723DFEF615A811A6F6B7D22E7C3EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qwindows.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\PySide6\plugins\platforms\qwindows.dll
Size 976KB
SHA256 f857f6b5675bf70ce582fb166108285f31870a83d87b44bbc4b6da98a10b687b
MD5 9086525cecfc51aa66000bb7e9dd9204
SHA1 8097d85de1b66d8fa48ebadc8d028854c8c254fb
SHA512 ea98f573681e5df8a160d6e6e5be9fbafca257e8509818420cc7d3b8a3a120cad427c373214a9c01d9813b61d7a4d3cfc38d5f031a6475df5c83cc31978fa32a
SSDEEP 12288:ydFZEVZQUIghAOuuscwgQyKwLfwQaiTcFG0utFjXdCGepSBqfe4dG:yzK2ghAOuus1b8fwgcA0utv77Qfer
TLSH
T107257E2B67A80255E83AC07ECF5B8712D6B3705903A186DB4161CE1D7F337E22A3DB59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qmodernwindowsstyle.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\PySide6\plugins\styles\qmodernwindowsstyle.dll
Size 223KB
SHA256 b6cef67376d8fd43a73e7ebe8745634f3ab2bbf42790c699b3aa1a95d8c512b4
MD5 542b483dc4dabea948626e925cb93583
SHA1 1b1afe33fde538bb1dfe2431157464b5d05e6a42
SHA512 e3a3f76a1ee96ac17c7a1638fcba6ff5da02904c0ad51429e5aabaa9b73a59baf3fa415f148e5f94499e9bbbef4825be59fa3cc67bdcb670ead6bdc9d7063be7
SSDEEP 6144:Sp/d15GJ6UUfX/Bsco23KdRHF0db5GJMypUCQyJwoKe9lvqRquNthTFI:Sp/P0J6UUnBscm
TLSH
T146242803729216C6CD67C278C90B4523FAB370544366DAEF4166CEB42F633E2BE3A655
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pyside6.abi3.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\PySide6\pyside6.abi3.dll
Size 261KB
SHA256 1d737937c8335025d5a3cd44fecc70000a8fd2e46bb8e1f031f2bd16cbd9b5c0
MD5 918ad2aeb2dc1df9e4ee7a5066b532b1
SHA1 2dc6a8ba03010b47e2cbda37a81a92543ad809ac
SHA512 f6d7d51c0890acdae1168b02198f07c2b5c63b1ce4abf08ba333921a32664340f31e1a401c9de0bd74976ad0042339056ac6dcd1a6c6fd1526506f0603801fde
SSDEEP 6144:pRGw3AMxp+9kHgZoUtcBkYmZU5rfO37lPUq0UAnfnjPrtxeN19BVzpj4uCyij1FO:c9kXkNZU5r4cq0UAnfnjPrtxeN19BVz7
TLSH
T117445C5F73444EA9EE6BD279C947850AD6B3B4020361E74F02B5CBA61F6B303362E746
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VCRUNTIME140.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\VCRUNTIME140.dll
Size 117KB
SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
MD5 32da96115c9d783a0769312c0482a62d
SHA1 2ea840a5faa87a2fe8d7e5cb4367f2418077d66b
SHA512 616c78b4a24761d4640ae2377b873f7779322ef7bc26f8de7da0d880b227c577ed6f5ed794fc733468477b2fcdb7916def250e5dc63e79257616f99768419087
SSDEEP 1536:Z9TXF5YXWbj8qr51XlN+dULTCe1IGhKWyxLiyaXYaNxoecbdhUoaLjTz164zEd:ZEnsvReGsWyxLizXFkecbd1aPTzW
TLSH
T10DC38C8572A002FBD16AC274C1A36A17FB75B94487B0A7CF03B58A650F53BE09E3D356
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_bz2.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\_bz2.pyd
Size 85KB
SHA256 a4be36fffeefa8b24c1234d548da8f05558aba53c2ea7d1d2614776eaad8fbf4
MD5 a0946ac3236b70d27de6046ccc467977
SHA1 84f2aa56e58849cf30e632e7eaab4901a681f08c
SHA512 02429781f017b534918657e5c152ea022b52bcddd15ecca7f8b4629940dd4367a09af4d86a1f05d946ca97f2709718b136003693088c480d9b791e4d18361174
SSDEEP 1536:vZAVNz7DkEvkmFfR/l/kM4KPkM/gg8IWRbG3II13VAyvcvR9qfIk2:vGVNzUERn9R4KRg7NlSII13Vk
TLSH
T1A2838E96F3B552B6F59B91B886840793F730BB860750A3AFF14882853F13BD06E5C369
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_ctypes.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\_ctypes.pyd
Size 139KB
SHA256 f8a9f7831e81b2bfba12456e589f8198114f24986bd527ac231a844565afcddb
MD5 03fb3055ed0c56155bbf030596726e03
SHA1 fba03bbf844c08ccf20854d717a84fa62ab291fd
SHA512 9ba8f50f75b37858b3d81d6f7323ae981ae21f57a9897955142bc53098ad74c8ae119e61ccd0bb5cd0071e092e8c2bbb5c146688e29f2cf7d1d3740f47ec9117
SSDEEP 3072:HDpx2Lp7KRmFrkdOJWWcovIMzTF4FyxpEI1GPny:jpxCdK8r8WDvIMn+8xpx
TLSH
T160D37E4B736841A6DA678138C6739E47EBB1F452261087CF4264C99B1F633A2AF3F315
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_lzma.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\_lzma.pyd
Size 157KB
SHA256 f7ad11fbbb7aeaf7b6566a532a3243e3ae5f92bac480dbe5c2ef300fe2c1dabe
MD5 1dfaf924b4576f551f6dfe3cae50b230
SHA1 ef19846989f337e600c8f9ccacbd4276cc4d35f0
SHA512 2df6a600ecd03de76f066f87a8dd13bf138a51f89fe745813d7a00418fb716c670cb04a9b5573d2b852fc8885acac8b960ba4c42d38fcb7e9a1d2aa2e84f90a9
SSDEEP 3072:z+0m6DKDYtwipfxAbDcoAL+Uznfx9mNoV+dREOII1I1+ZgTT:iTCKDYvNoopYOyGOjeT
TLSH
T182F34C86B794F0D6F3628C78D6618F53E7F5781A0320929A01CC976D2B1FB759A2B313
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_socket.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\_socket.pyd
Size 85KB
SHA256 ff3e97cd11bdc68798e5b3dcd5295d1efba179b7344142d50d066bbf1c2d79cd
MD5 e60e2de0be0f2db133252f103e9b1f8d
SHA1 686000117f1dc472ea8012a7368c936bd04ded08
SHA512 49a002516235cec6870b0d08da61d3aac4440b4ae1437b7357fa493dfcba0b2212cbfefaf5833baa8b6f904f6439389ec3a6b53cd7faa718273ca0c3e00c38fe
SSDEEP 1536:KcVunc70XTxn1egypxz7XP+N6wSzsGNesQAcsqIP4fYEI1GweyvcvR9YpfILO+:zEna2Dypxz7XPs6wSzsDsQ1s6fYEI1Gv
TLSH
T18D835A01AA6040F6EB72C176C6639E63FB74F5C11394A75F1066C65A1F33382BE3AB85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_uuid.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\_uuid.pyd
Size 27KB
SHA256 fc7406772b43caa3b6f41c690753792188b1c14c36a723d49e9276b7457696ce
MD5 9da0ba54ebe20db77d384dc290d29ef2
SHA1 eda4d77dca4520f3c812ec17bc78c5f50e4608cd
SHA512 10ed10a863780aae03ceb1fd39dd7f42e0c245a1725d0cea59c11703108c5b435f62980996bb803b15b21618be72824d26852ae3124238b7ac919d21f29ebb37
SSDEEP 768:Us15cII1IwYYyvcZRYT2Ip42ITxf1mlIJNl:Us15cII1IwpyvcvR920fIkN
TLSH
T13FD26D8E9A784053FA535B70C1F2DF43B979BBD35611879B317A80850E133C1B32B2A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_zstd.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\_zstd.pyd
Size 491KB
SHA256 536a3b521a3c42d2827ece0ccfbe40b83a2fd96a0f5496cd60b943b10e1266d4
MD5 b89f5d1345ef95f80ddcbe5b3e4e5bb3
SHA1 2daee236009cc3efe02dc9bbbd8c6faa8ac56478
SHA512 fc925424ad4bd8bdfae04b95fdadfcdbffcac76270997b4ce365be8a47d4c636b7e0b31e78d785a3dc6c9b2dd0f108aa716a92ee4f0506f3a0329e4a424b48e9
SSDEEP 12288:X/WcJlzAwk9mH+65GRRfODoHWDTrWl93mFgR:X/WcJywk9mH+KGRRf2o2YR
TLSH
T1A5B48D43F29983EDE17BC4B8CF465A53FBB1780B1214565B93A5CB943F07B309A6A308
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

minus.svg

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\app\assets\icons\minus.svg
Size 245B
SHA256 4479adf4ac7effde850681e1409f02ea2df669b03edcf1f067c2ca07ac6d2e9e
MD5 96e462412342bf8744fc23d02d2ad979
SHA1 f86b8316fcaa7ba4d0e3e058581b1ab148a21bed
SHA512 2ac7a99a673424bd03f991ae9a667e60fea48f69e6b164d99714bee8c9f327b41eed4044efd07c127595242a553dfe57e1a7769f9b6502c0eef12a9f6c48023e
TLSH
T186D0A969CB886C2C9A3A86A1E7293639107A7253630F110CBDE312722F0464FB23739C
MD5 SHA1 SHA512 TLSH

Submit Download

dark.qss

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\app\styles\dark.qss
Size 4KB
SHA256 7716995a183c258168866bf951395da850f24b95ba9450bbf1c37d6088cb1a7a
MD5 81a8aa8310d9bfade532d28a9a4e5bcd
SHA1 9793318731faed46d1b151582717660fa3a55875
SHA512 2a5e30f8f8b59989d3a5f186f301dae16fd9b801ac1dad54bed24ff90aa9a15e984571f04117d0be4cfa7a9ca10bdb5dc1eaf0c0d4febdad097f945191eea85f
SSDEEP 96:Rk+/xMSG2oncgHgPdwF58fK8Gyn1ZdC7C8/FVa5zETTFzFkpoOFFi:S+RGgPyF58f1yFNFpEoOF0
TLSH
T1AFA18BD6FBEF89063026CA997826DAA13F1D4204D419CFFCAFB830FD59415642C39A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

theme.py

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\app\styles\theme.py
Size 363B
SHA256 2eb7e0a166536c61c9f275b05b725565d64304b3d69053e1986f07e122a4d5e5
MD5 139e031763caabcf9b56fb83652ed428
SHA1 d9a8a854f82269320d9aab7d6ffe68752ae6d950
SHA512 ab812aea69ffda5d93030a61d0f79951280a560670e938f6ade574df9d08abfa894903e19df5c5d017c91d27c45a3cb9b8b91463b7cdd4266d5bba03546ab482
TLSH
T167E0C057882130EC5727639D2010C9700D3777DD7F57C4E4686487390DC2011ED2D2D8
MD5 SHA1 SHA512 TLSH

Submit Download

sidebar.py

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\app\ui\sidebar.py
Size 3KB
SHA256 c91f5004e2ca821e446fcd8fcb289e901b71c00568419fafa03c87709e91025e
MD5 5af67b51e88c4a9126c5c6af4d138082
SHA1 7807ca3b62b41c015bab90d7ac6bd5ae7c5d8387
SHA512 83bfcfe4a02856ea13f05847a2e321a04463234f86e8475cecf5405ad97892b7558cd09a6c8ab0e20ac049bac15439502f6af01ea8988e24d86f81555b956f41
TLSH
T1D161DE200612982243A3CDA745477153FA6EA157AE1CF96836BE83C40F99174C1FAEEF
MD5 SHA1 SHA512 TLSH

Submit Download

splash.py

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\app\ui\splash.py
Size 3KB
SHA256 9bd9e535e8b2fded05a21f223b7090c8134ee0fd861ecda29197fa297dc32d4d
MD5 a8bad8d9120925fb1a7c91a76651c794
SHA1 8ad92dd1d48b91cd72abd9fcdfa28276e57b528f
SHA512 b97e35df79657caa53cb1adcb22e6f78ea770f436bf6aa3c83f202569dfc1095b16a9f9aaf66a88ed42aa15c16c8e00a67f067368a677a2cb9d9c73a4bf35f7c
TLSH
T185710DA855034841A327CC234A213547AF6EAA07851EA8343DBD9228FF2117656F5EFE
MD5 SHA1 SHA512 TLSH

Submit Download

title_bar.py

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\app\ui\title_bar.py
Size 2KB
SHA256 0c2e1cc5a6dd54575f64e6eb5a0d72bb51ef96ab05c0dd21c323d2d273b25b01
MD5 aa0f19d4dc9befe400d2847d69fb19f4
SHA1 ba72ccef2aaae120692cda76761bcb19c81c5ff4
SHA512 f14f8585ec38892af110375e96c5229e439a8311b78886aef01d108714bd5a160033ba1e85729ff3dc78dc97c54631716825bf229d04049c7a307d7489ad6c23
TLSH
T11241EF8100068212D777E64684A37033FE762587751E78A539BE85D1AFA40B9C0DEEAB
MD5 SHA1 SHA512 TLSH

Submit Download

window.py

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\app\ui\window.py
Size 23KB
SHA256 15325884b66791a53641358c8b7f13d304db330787281eef34ebcb9274a76444
MD5 6340edd3e4952454edb4edc147b8ca02
SHA1 149219fed630f3dcffefe0921b9af83c52d31ea3
SHA512 893173b0825dbcf1f391fe79d34fb102557bd1325d16f7394a84ba6e488a8f2fe7ce969c804a27518e22ad0d5f5ea0e90129c7b2c983bad36ecaed1b9e448301
SSDEEP 384:RcCMLp5WVf4avpjNkjE0Bj+bLDBfQiOQpn+NSjU:RXXnhjb0Bj+bnBrU
TLSH
T1F6B273245416AC22D3A7CDA7B9A779132F3FAC83190C2834B57C83581F557B885F9EE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

base_library.zip

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\base_library.zip
Size 1.3MB
SHA256 e5ceac8a4c1589a9b88db1ca44c82430a4c05495bb830923fe559106d866e8df
MD5 e740a4847121e702d101694f80350b9b
SHA1 f685c14a1514f03bd6976d65065db0570e7fb4b7
SHA512 0881624272fab1dc26ba86e807af1a531659c8681f2e2e22b88472dc65f7b3a9f0d709c827bd931678fa71d017a3751ceb14cddf1f4cc89b921498e6066d05de
SSDEEP 24576:iQeOdP2m2dfHuUFep3UL9WlbKHpdK8RpWq:i/vuUFep3kdPR3
TLSH
T142552AA1B9917867FEC9F37A35775A0CA715C0109B20D303B4A98DAC6FDF260AE158DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libffi-8.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\libffi-8.dll
Size 38KB
SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
MD5 0f8e4992ca92baaf54cc0b43aaccce21
SHA1 c7300975df267b1d6adcbac0ac93fd7b1ab49bd2
SHA512 6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978
SSDEEP 768:NiQfxQemQJNrPN+moyijAc5YiSyvkIPxWEqG:dfxIQvPkmoyijP7SytPxF
TLSH
T10B037C0B458418A4E657D53D97A64A2AC335B9240B60F2CB03D4C2BA3F6B7D6FB7C358
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python3.DLL

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\python3.DLL
Size 72KB
SHA256 be1017ca4ca8ff837efbb343d5c8f739bd67bd1c43fb41068a539b19357c0213
MD5 8d3d1ffbe3bb9539402e8bccb7fadcf8
SHA1 904397a69e08c93fc2080a3cdbf6810bc40313fc
SHA512 312fd7f95d2a76d9dd09336949d3b8ca9b53753a9f45da9d2fec128b2746f128fc1354693e0a995c1e1859a3d90497c8a4a8d4fedffc8bceee0392c456efc68a
SSDEEP 768:IQlHwMvmhZpNVBBr2KyrGYpoQdFxxI4XngqMkf/tFd1WugwBByCsAKyEG+zMRKIU:xbTrnXngXMBEI1G0hyvcvR9NfIko
TLSH
T1C0734D5E6B54F8A2D6B629FC78D199CE242B12FC5F2984DFA47CD3D20D1A310A22734D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python314.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\python314.dll
Size 6.4MB
SHA256 1ac15e2224581fc678bbd17728b9aa538d47b891b72c76499ef07e54cd74f151
MD5 5bc0adc1fed509f353832bde6b2add62
SHA1 b2204b0bc93877fcd186d72fbe5006130aa0fb88
SHA512 7b1e52aff81e5e79872d9a22c0218dd8fc46e99cb33adb69d277ea07b21eee0399f0a6a72d190b91f26a96e69aa63a23a06384b9d93db44355f3eb1d7f727650
SSDEEP 98304:YvvKimE4QWS5v+kr/YFboltx9E8rDvQHDMiE2hx0S:qdcQWS5v+kLMolGmidx0S
TLSH
T107668D26737505A5D8BB8076C9034647DBB1BC00AB30D34B49A4B6DA3F733635BAEB85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSVCP140.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\shiboken6\MSVCP140.dll
Size 536KB
SHA256 929357e3ca461248daf7a68e2dd49d44d734f28eb8f76959a2cdba3b42ddb1d6
MD5 68a2a8efe9afd012a0e67467777cebd5
SHA1 d1eaf887e3597621f2a30bd9e860f0fdb51c9cd1
SHA512 28b08c1d13c13769854ffd198590a1152fbb2b3bd1db41a51e243b08156ff01b2bf7ca722a90a5b3959fcfac911d54cd19054ab9d7e1400a17f7d67083e120ca
SSDEEP 12288:1dkDYbKloU7/7mozO39V5WZyhNFdQEKZm+jWodEEVLa6C:1dnGoU/7m/V5WZ8dQEKZm+jWodEER7C
TLSH
T1EEC41A27F74A06B0E195E3B8A1838702D7F1BC498322E3C752EB955D2F573D0A67B690
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Shiboken.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\shiboken6\Shiboken.pyd
Size 32KB
SHA256 5bfd3f7dad7c9dd7aaf66c4893cf5e5f073613c03a5c35c0625721556cfc5c5c
MD5 8c6b1e46443ca1b3bbc2d440892037a0
SHA1 3d59b4d0c71e5519d9cba2e298564ff4100ef9d2
SHA512 2b86472bb6fc6259ea9209e8a84d4a4329513e584a85f7a9ce263e5281b2c0f0802c274d3f686ba8df412df958e813c048d39ebbd1f353dfd13a93f7d9691d7a
SSDEEP 384:XfFFBhadUh0+n3CwqRkjlg3/byEJaDw52tOBC0a9u6Q4HQIYiu9c315y8RbmL4nb:HBMdUl3ymJIb9oQyOBbeRP5Yiuiv5AL6
TLSH
T1BBE29E43CA14688DED21C67A80928D2AE1F1B1654790D3CF236AD0EA5F933C33D3E799
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VCRUNTIME140_1.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\shiboken6\VCRUNTIME140_1.dll
Size 40KB
SHA256 92aa4b4fffc5c3c7b7b52a85e665853259c25041ccf527016996622aa769b1f7
MD5 514e60a0cb319d0576b5ff447fe05d38
SHA1 31b80edcd2aad3bc8ed430b2e701048b8474d289
SHA512 8e549c3770a3c8a2a471156de70fe9fc5426616747bb6896c03bbd0774b75353c1851a99e8e7dd90f03aa0f940ad3bfda34e5fa9d545d86786d6e7fe60a8a57d
SSDEEP 768:E3oZYctpzcx0pdESASv83m5YiuiCOt5ALi:oc6wk3c7uDk
TLSH
T1F2038CA297B41846E46BD975C0D31E3BFB71F4256B9093CB03A8825D1F627C07A3E366
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shiboken6.abi3.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI11122\shiboken6\shiboken6.abi3.dll
Size 374KB
SHA256 7c94a10ac0b916fbf46ec7494aa578064d63636737e7081c6b969716c7dc7c9f
MD5 8e1b0c6014104c9aff0e9af1f7ac53c7
SHA1 bbe4279e9cbb36383a79a15b5b86717b041d6d71
SHA512 a012044e7121259a6a9ed0fc559787a49a93710c354a747d82d7af4a2d29204bd7c5aba1f3c0a9d98df6976088ddd59a09dc8c068220635d1eeff32a60e1a8a6
SSDEEP 6144:9hedLJgD/hbQVFjQfL433bXLkxKUommWIux5:XedLJIbQhnk0Uoi
TLSH
T15B847D2BAF5410DCF66B927C8463860AE6767096035097CF23F9C2D52B63AD53A7FB01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/928-264-0x000002134FCA0000-0x000002134FCC2000-memory.dmp

Download

memory/5616-242-0x00007FFEFE070000-0x00007FFEFE6BA000-memory.dmp

Download

memory/5616-232-0x00007FFF00E30000-0x00007FFF01162000-memory.dmp

Download

memory/5616-270-0x000002296BA50000-0x000002296BA60000-memory.dmp

Download

memory/5616-259-0x000002296BA50000-0x000002296BA60000-memory.dmp

Download

memory/5616-241-0x00007FFEFEFF0000-0x00007FFEFF4A9000-memory.dmp

Download

memory/5616-245-0x00007FFEFDCB0000-0x00007FFEFE069000-memory.dmp

Download

memory/5616-387-0x000002296BA50000-0x000002296BA60000-memory.dmp

Download