Analysis
- user interaction
yes - max time kernel
898s - max time network
490s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
30/07/2026, 08:30
Behavioral task
behavioral1
Sample
LayF-Infinyty-Launcher-STATIC-INFINITY.exe
Resource
win11-20260513-en
2 signatures
900 seconds
General
- Target LayF-Infinyty-Launcher-STATIC-INFINITY.exe
- Size 26.0MB
- Sample260730-keeexaed47
- SHA256 84be19aa8a1943409e5b0f183a8d6121b68822584e5eaa940c73bad1b21128bd
- MD5 6c038da7e636ef65c1b64eb30d1c339e
- SHA1 24a8f50ece7e2c599a81e1711001daccf1564576
- SHA512 f388c542f7071bf02e4fc08931d735cf8f0672a9977c83385bb3c7db92151c9ff984c8b16f2ba7441e9eb0a94c18e61e0b1ec1edec39dd13f3c47005fb1b921b
- SSDEEP 786432:ipsdZW7wAzF/uf2jpRphSto+WoIygbtSvF7cg:haU0F/usPhUgb0cg
- TLSH T15A5733E9A3444E62E8EA603C29D1DAA6E3F1B0451765C3DF0FF00D500A7F5E8DEB9661
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 24 IoCs
pid Process 4188 LayF-Infinyty-Launcher-STATIC-INFINITY.exe 4188 LayF-Infinyty-Launcher-STATIC-INFINITY.exe 4188 LayF-Infinyty-Launcher-STATIC-INFINITY.exe 4188 LayF-Infinyty-Launcher-STATIC-INFINITY.exe 4188 LayF-Infinyty-Launcher-STATIC-INFINITY.exe 4188 LayF-Infinyty-Launcher-STATIC-INFINITY.exe 4188 LayF-Infinyty-Launcher-STATIC-INFINITY.exe 4188 LayF-Infinyty-Launcher-STATIC-INFINITY.exe 4188 LayF-Infinyty-Launcher-STATIC-INFINITY.exe 4188 LayF-Infinyty-Launcher-STATIC-INFINITY.exe 4188 LayF-Infinyty-Launcher-STATIC-INFINITY.exe 4188 LayF-Infinyty-Launcher-STATIC-INFINITY.exe 4188 LayF-Infinyty-Launcher-STATIC-INFINITY.exe 4188 LayF-Infinyty-Launcher-STATIC-INFINITY.exe 4188 LayF-Infinyty-Launcher-STATIC-INFINITY.exe 4188 LayF-Infinyty-Launcher-STATIC-INFINITY.exe 4188 LayF-Infinyty-Launcher-STATIC-INFINITY.exe 4188 LayF-Infinyty-Launcher-STATIC-INFINITY.exe 4188 LayF-Infinyty-Launcher-STATIC-INFINITY.exe 4188 LayF-Infinyty-Launcher-STATIC-INFINITY.exe 4188 LayF-Infinyty-Launcher-STATIC-INFINITY.exe 4188 LayF-Infinyty-Launcher-STATIC-INFINITY.exe 4188 LayF-Infinyty-Launcher-STATIC-INFINITY.exe 4188 LayF-Infinyty-Launcher-STATIC-INFINITY.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 3680 wrote to memory of 4188 3680 LayF-Infinyty-Launcher-STATIC-INFINITY.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\LayF-Infinyty-Launcher-STATIC-INFINITY.exe"C:\Users\Admin\AppData\Local\Temp\LayF-Infinyty-Launcher-STATIC-INFINITY.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:3680 -
C:\Users\Admin\AppData\Local\Temp\LayF-Infinyty-Launcher-STATIC-INFINITY.exe"C:\Users\Admin\AppData\Local\Temp\LayF-Infinyty-Launcher-STATIC-INFINITY.exe"2⤵
- Loads dropped DLL
PID:4188
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\VCRUNTIME140.dll
- Size 117KB
- SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
- MD5 32da96115c9d783a0769312c0482a62d
- SHA1 2ea840a5faa87a2fe8d7e5cb4367f2418077d66b
- SHA512 616c78b4a24761d4640ae2377b873f7779322ef7bc26f8de7da0d880b227c577ed6f5ed794fc733468477b2fcdb7916def250e5dc63e79257616f99768419087
- SSDEEP 1536:Z9TXF5YXWbj8qr51XlN+dULTCe1IGhKWyxLiyaXYaNxoecbdhUoaLjTz164zEd:ZEnsvReGsWyxLizXFkecbd1aPTzW
- TLSH T10DC38C8572A002FBD16AC274C1A36A17FB75B94487B0A7CF03B58A650F53BE09E3D356
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\VCRUNTIME140_1.dll
- Size 48KB
- SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
- MD5 c0c0b4c611561f94798b62eb43097722
- SHA1 523f515eed3af6d50e57a3eaeb906f4ccc1865fe
- SHA512 35db454dbcc7ed89842c0440b92ce0b0b0db41dbd5432a36a0b7e1eddf51704b1f0d6cff5e3a3b0c3ff5db3d8632fed000471180ad72e39d8dbe68a757ccdfb0
- SSDEEP 768:vzzO6ujT3MbR3v0Cz6Sz5q83ywug1HDV9zxfYbK9z:mq/oMx3hXHDnzxfYiz
- TLSH T1AE236BA453784486D4AB99B0C0DAEE577D7CFA964B10928F0BA0D15C1F637D0EB3D21B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\_asyncio.pyd
- Size 76KB
- SHA256 dc6db118862ab3298e55e0f7c44c2c0dae4af9e810d2578271280202d6aa098a
- MD5 1a44ebfcf46c66c29212b0063f68c9fc
- SHA1 927408b5ccd9af96f1311d9d2cf87a9e65fc98e5
- SHA512 fc3a1c9bfdaf3f587e0c06eb97f549b7c802cc1ee40461709b65f91117fb47d9f98b7d15d90c4b38969da0c9c6e9893b4469edc9c6d322328edc999956b8b157
- SSDEEP 1536:ybpJfNBXdvQSvyhoIGDnMPy1Ni9EfILaqn:ybp1XdvQSvGoIGDnSzn
- TLSH T12A735B8792A44186EEB79178CF536FD3FBB0F1855A00935F5194C18E2F533A18BBA322
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\_bz2.pyd
- Size 85KB
- SHA256 d28c3dd1c22bfb8a6e8a6a9c2359842b797d08e878ecb7805f60e86a45589d11
- MD5 207d4a4b7a113ef494514918f2dccdf3
- SHA1 74b59453b5bb6194e0d2587d26d499d0f7e1aed5
- SHA512 f7e5a2608ee19fd400d4bfe27e8603289a219af6a4a4a9e65ebb76c715d926fb9b08293fc2a3fed2195784804764265fa0b356547f23c501ec8ff9487c948b27
- SSDEEP 1536:xtMtz7eksNCb6YVVEFxO2RqOyuzotWw8pRbIiQIG3VTy1Ni9QfIY6utw:PMtzSqurjOqqfgotWrplIiQIG3VtKtw
- TLSH T14A837E86B3B462B6F59B81B496910353F730FF960710A3BFB25482863F13B91AF58365
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\_ctypes.pyd
- Size 139KB
- SHA256 25d9b0be550d428fecc697ca20450343a7c3ce77c9f5283e9aecfd188d609250
- MD5 eeabc0c7756ed7a29e33e467c398737f
- SHA1 ec5c401946a9df4e4ab764ddb4639e4e33e1ce40
- SHA512 5e1e93545e1be34880fc680ca12004792076e88baa6cac4512fdbbdb90091a9ae441a16b8d24f64c6b03bf14903babddecfa783ce5c016759ed790c0eabc189b
- SSDEEP 3072:G/n1qQ8/27N56EBZrGwrb1OzIJswKRW2r7rw8IGGPzoGc:wn1JDT6wrszIJfUDwtc
- TLSH T1A3D38F4B336841E6DA678138C6739E47FBB1F4511A10878F4264C99B2F637A2AE3F315
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\_decimal.pyd
- Size 283KB
- SHA256 8d41a84db20a9b985e98c802ad6833cf9625c744ad35478dd346f54f81488706
- MD5 4bebc4da7d6319283a8c664bfc55408e
- SHA1 4dc69a8105272711673afa5f712af982a18532e1
- SHA512 411cd0ee4189654e836579efb4df509a02cba39cd9793e6d7250aa4e239449dafb6936ac57cb8ee7bd97cf2fb178beea17f658bf6ae7149ed8ed927a7c47bdf3
- SSDEEP 6144:ASM9SUWXvOOiSx1u8llV6zeGqqM43fIWeA9O8O8OOT6MPgz/:ASM9SUWfQSx1ucapLIz/
- TLSH T1D5547C52A3490CA4EF7384388A479A57F7B2B8414360D78F47A48A972F933E3677E744
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\_hashlib.pyd
- Size 67KB
- SHA256 36ce760b9fac53fe51755f30a68d86f5fde89bf1b66c65c19e04aa3afa404ac2
- MD5 dcf15b3e1858d9324be2c719e4e990c9
- SHA1 8311c2fb0bb75342367a83fcca7161a0f7fadafb
- SHA512 fa2783d0cbbba477a08bf4f2fa3df21d6d0bf5bd5bc7cef25254a3d29fc7d01229337ad5dd54c2f0e67b956fd43953aa98586240102511ddd48d04c674b7ff93
- SSDEEP 1536:KXwAzOYBQca7JKs2+C5oIGDIUy1Ni97BfIkxd8:0J/yJKs2+IoIGDIm6o8
- TLSH T1EF635B8AA6984092DA2382B5C9E34F43F974F252271197DF6678C18E2F233C3573B756
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\_lzma.pyd
- Size 157KB
- SHA256 5f7003f9f0256e36351ca2810b3485db28579b08e4d1d65f6f211fcd1136f395
- MD5 cada2b240b280f172aeb32a1666b21e6
- SHA1 c15dc39329444433c255309eb89bae188aae1b22
- SHA512 8b12298efd28549d46e2c48cff94b07039cf513bbac25063ebad8bae57b96e07eefd7df82229441af142c1b96dc837dec468263c0873d14da280e3ed6e42eb9e
- SSDEEP 3072:BJ66g4T5QW7JfyjEqkSkA51b4pznfJ9mNopUpdbQIGI1HFk:BUR4Tp4QPZ8N4RxYOgbPa
- TLSH T110F34C86B794F0E6F7328C38D2624F57E6F578590320929A01CC976D2B1FB759A2E313
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\_multiprocessing.pyd
- Size 37KB
- SHA256 9e87ce081fbcf0b6596fcba98e121379ad72a33d68e6b2af7a8bcc5b900229ba
- MD5 f4c0f97d3ed7d0c07f86fb7f30e594aa
- SHA1 2f06362552c005d36149d60ceab647754e17b3ef
- SHA512 27aaa5979fe8aa3c01bf4838397b02a4a299bc7376e71dc695e80a7314f9f95e54b4eb8c4de511737676f0fe876a53df77e542dfebd86265daad70a4e03dd15c
- SSDEEP 768:YFMV/e0XybycUlYIG7t2y1KPuBL2Ip4tTxf1ml9dHc7Lo:Yz0XybycKYIG7t2y1Ni9HfIbHcno
- TLSH T16D038C86A6380043F9678670C5A3EE87F571F7831A26965F3195D2CE1F373C1A36A34A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\_overlapped.pyd
- Size 56KB
- SHA256 ac877f3da413c1523c07b6a0dd1f7e0d7ceb3e8590a5e9e20a78eb1bcb700793
- MD5 f2b6270e219a95f9055a6f7eb1baa231
- SHA1 f6f4eb209a62151a1b21de64f5f9d52c1a063be2
- SHA512 4755195491e389621ab6bf87d101ecba63225650dd2daf03775893990406313708030f962a70c17be43b45a3812297453cfe70d5fdf99bcf0cfa2323e8d34c3a
- SSDEEP 1536:AsjKfS6rBgq/Otg4urMp0IGCtOy1Ni9CfIksus:ftgxrMp0IGCtGks
- TLSH T1CF437B4A579401DAEE73D279D1A39E03FB70B2D31601971F21A8D28A1F33792A72F385
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\_queue.pyd
- Size 35KB
- SHA256 bb53357b4e91ac23ed4061f15ff3e5e91a5b3be1cbb0c6cf294521ae5b4efa1c
- MD5 b04ab24c93d4d045a00ad6f2206b4287
- SHA1 2b30376ae320223a4d4f93dfc460a9bae8df604b
- SHA512 5033a0a39d0963c9a08a2a66b1522d6d9aba1eda925df7a33a05bcf607c2dd7b190fe3f426fb5c7563a5cc6b44005eb7df7aa81c045d7e5eeb94a0c0375dc0cd
- SSDEEP 768:RJA4syt6hB1D68IGRUd+y1KPuBL2Ip4FTxf1mlIJdpS:vNkBY8IGRUd+y1Ni9/fIkdo
- TLSH T1A3F27CCBA7584097EA63C970C1A2DF92F575F7935B0186DF21A8C18A1E233C2A737319
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\_socket.pyd
- Size 85KB
- SHA256 25ac83cac32ed0d67b2cc9672ce64cb53f0a29a75b14c276e901023ff43da5f9
- MD5 7a16a21ad11d3e9829ca3b379a2bb010
- SHA1 90707b5c1662a1e4553f1cc10ba96c7452def7c2
- SHA512 5e0268af7dad1646903ddb5e61fb38896a7ae964cadb38b5c28bc1524a69a87b7c09f501f3f570ec6bf78c8fa873b8fbe062bbe06cf839e32a2735f1efd0cae1
- SSDEEP 1536:hcVuncT0XH3XAJtZypxm7XP+66wSzC/jAjI/Lb6NsQ3cs8PgMr8IGGwby1Ni9DFo:SEny2+jypxm7XPz6wSzC/jAjQOsQssV2
- TLSH T19B835B01A66040FAEB77C176C2639E63FBB4B5C01294A75F1466C55A1F333C2BE3AB85
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\_ssl.pyd
- Size 186KB
- SHA256 5c07572df2913618cfb851b608cb5f74d740fcce5c3f2e63dc0a2ba39ab35dad
- MD5 e4ba5a52f5fa2a64baec46486cbdcf82
- SHA1 ff213b504a70d50871eb8432cea1b22563364cb4
- SHA512 111c926a0157d46c48a26da30face546b065eb4afddb6dcf27442fd4f73432808de43978f78f5b297b22a63d82d0d5bf305701e137f6060f59cbd601012e61fa
- SSDEEP 3072:FVpZeIk2MZ7IifVvQto7qrvYLrgp8VuMG4eJ9i1zktdsQ/3Omca45gMqTVBOrQII:Bxk2MZZVvQtmL4457qTVMrQ
- TLSH T1AD147B47B5446EF7D802E8BAC6234543FBB4F045331297DE48D6EA520F03746AE6AB63
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\_tcl_data\encoding\cp1252.enc
- Size 1KB
- SHA256 741859cf238c3a63bbb20ec6ed51e46451372bb221cfff438297d261d0561c2e
- MD5 e9117326c06fee02c478027cb625c7d8
- SHA1 2ed4092d573289925a5b71625cf43cc82b901daf
- SHA512 d0a39bc41adc32f2f20b1a0ebad33bf48dfa6ed5cc1d8f92700cdd431db6c794c09d9f08bb5709b394acf54116c3a1e060e2abcc6b503e1501f8364d3eebcd52
- TLSH T13621362446A58CD8FA4F31D520ECFB70453B75F3D1DA629027B88308E789E8D0C897D9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\_tcl_data\init.tcl
- Size 25KB
- SHA256 acacce15658dd7ce8f69b1e3d3a94770a22972a8e906eb3b61cd06f0ecd5db59
- MD5 ffe4e47b5f4f96ec33fb31d52ef0b636
- SHA1 3a625e493f8778277f65ffef1e0879fbec0e4d0d
- SHA512 dbbfd92ab6d95672f7882f3affb75f31749281c7450c29fcef58b5bdfd4f42b6d1d9f3a50ae0d3aa27e95d48918ed55cde5149751f892538bdd2dc39c618927e
- SSDEEP 768:+XrgPHudKlE7BG6Xg3tMo846ofRRECL9QDjr5v7hzx/i:igGdKlK4Ao846offLmNhNi
- TLSH T104C2A8112388917932B3533686B5E598EE7EC1F706A941BCBCCC825C777150A4AFDBD2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\_tcl_data\tclIndex
- Size 7KB
- SHA256 577f042bbe640e2739606a1f76098abdb8bd1d1f31526402fb82b21091644f65
- MD5 42ec37eee38d6dd33a9fdecd7f1cd0aa
- SHA1 6c8c93e5e5350d93f63f3f99d587ab8fb5aa496b
- SHA512 37d61f27da79c494d225543828c9a29f1397c57506d609481036bfa2a336ec3110e6d10670edcf211a5714629eeb7e16dbf04a8388bc6bb420584edc06dc534d
- SSDEEP 192:eeV1ffxNFxI5XgipSSMw+5p3fphBr2tm87RtmAjm2G03BgPlKif8Qyly5mg2lkYf:eeV1ffxNFxI5XgipSSMw+5p3fphBr2t/
- TLSH T1C8E12C1AE354C51883E485174959DE983AFEE298D32CCC7EDAB491ED10B20176FEE4F2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\_tkinter.pyd
- Size 67KB
- SHA256 a49520e94f19d025a6be6ac7bbb73a7b32442838c62b68c162d44f81d92838ec
- MD5 aff2c94b67aad4ff89fa0f4d33f52099
- SHA1 70905b724afe90e46c918a300b3a32e75c601532
- SHA512 e1864cac5cc425b34246f4febe2cdf4eff33d40332cb90ed67fe8e92006668d3c77949c058ced52fe2dcc83d1efb276e212c104f80f2ff72d9fa1d0a187fd7eb
- SSDEEP 1536:YoTKqNDDa/Tf3HrlU9oo6ptboIGDSeiy1Ni9SfIbHtnY:YoOjflPo6ptboIGDSeuTq
- TLSH T16C637D9BA764008ADE67D538C5739F43E6B9FA521910934F01A4D34A1F333E3A7BA714
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\_uuid.pyd
- Size 27KB
- SHA256 a09308efd309732e3745e70b4456235579c450cac32bed616dfb3913b56f6637
- MD5 cc5b77a3dd4cc06a0b9c760a0b0c5c15
- SHA1 d88f44420c5819b631b3e332dc4903eb620cf216
- SHA512 2dc3d66a8f5b75e194e5511a868d6b110083958c3b0a77e9ac301277c550806295f450cb077119d7b00b129793af39a8b348650fcf50af54d153462b9f570903
- SSDEEP 768:it15cQIGIwFy1KPuBL2Ip4NTxf1mlRaXVCEI:it15cQIGIwFy1Ni9nfIYVo
- TLSH T147D26C8A9A748043FE638770D1F6DE83B939BBD3591157AB316991860E133C1E31B3AD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\_wmi.pyd
- Size 39KB
- SHA256 0ab1fbcf18c95d70343012feb1aad61e1ba95aaed5b4a08e57fc5990e8a9a452
- MD5 99a20947be014e8b4297765f03ed14b7
- SHA1 01327b7b1456ecb3d75ce41e403ad870f4391663
- SHA512 2841071945712547e13b82f2d7b4d72d25be77f239367dee92f31361478f81eb674e91835f679a266c5ad7b8a63118a3412302dc3fd9cfbd487442c6229fb159
- SSDEEP 768:N2/EEqrVmjsOujOQMVQIG3iCFy1KPuBL2Ip4FTxf1ml6Z+7UlFg5yK:IE9BE+jOQMVQIG3iCFy1Ni9/fILKq1
- TLSH T143037D8AE6684092EA6BC574C4A5CE53F675F7D36712838F326482990F333D1E73A325
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\_zstd.pyd
- Size 491KB
- SHA256 262aea62a994920daf152a10bdc0ca83a8b1c0874e71db23734862431de182c6
- MD5 035b0a033dd00dbe887556f4d4b852c3
- SHA1 e86cf52d825f9b68177354c54edaa57e962012c3
- SHA512 0b428aa10a9e977e07023918870368a9c00e0eb4ab4f7cf1e88950d4aebd2ba5774ebea9f3779d05e370bbe315da6634922834106077d511b710c6131d29dc65
- SSDEEP 12288:KccWmYLKvveeFSeX0ro+Q2J5BCl9VNqdp:KccWJKvveeFSeX0roMZdp
- TLSH T143B48D43F29943EDE53BC4B8CF565A13FBB1780B1214965B9395CB993F07B309A6A308
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\ada92cb5d92a588d1b93__mypyc.cp314-win_amd64.pyd
- Size 218KB
- SHA256 3048af5864e17f79410273b3074416d67473eae22b3d7d1b7b58f24a506f82ed
- MD5 adeae0ff252151f98991e536fc6a5177
- SHA1 dbdc0b3b8f9be29cc01275421b24303f024aad81
- SHA512 464ed3b77ff59a9102348456ee4237c947aa9dc114b992a106e1b32a21a20e8334a84ceff100c24136c285f4c3e6ca86454023eccb48ec2da5c3da5765608c23
- SSDEEP 6144:F3bJmLg3z8fUJs9ZouzxkP8VXaVlaz8fnt4HtFmiGJZMIo0pn+lw:F3lk9Sztl
- TLSH T1CC24283A61990461ED774174CE27D453EAB2F421833096CF09D0CAB61F2B7E5BE7970A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\base_library.zip
- Size 1.3MB
- SHA256 e289d2ef42a2d18c95cb2e728ce9bb54487a78b8a646c7c6cd909ba0ffb84e50
- MD5 4e0020bdcf2893051b2e339f64f71642
- SHA1 274c3bd4c66828612098d32bd86487d954521fcd
- SHA512 a2c28e499cc9ac71658ff8b897ce13063484a1d2f5ac007cc483fe17e40971f7312474e407199c32f0c3726e0444b3d3f61d18613d00d4f9619f6d5a56176681
- SSDEEP 24576:gdCLlhuUFjlb/RpuQeOdP2m2dfhHEY4QZ6Rl:gd4uUFJRA/yY4t
- TLSH T121552B91B9917967FEC9F37A35B75A0CA715C0109B20D303B4A88DAC6FDF260AE558CC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\charset_normalizer\cd.cp314-win_amd64.pyd
- Size 10KB
- SHA256 032b490f6b42a0928b3cb6e17fd4caf8a6becaaf05739c4fe41267dcf890c278
- MD5 e58f635d100bd8d6e27d50253f0ba9d7
- SHA1 a7a73a53fafa50b6614fc1956abdc769d7b010d5
- SHA512 5aefbee4805f72f88aa41658c160badd748b1d3a7aa9157810d47605eebb11fa0b8b87e48272ab0195863a1ab5caae2ce4f3f03202481ccbcd2f3ec8769538e3
- SSDEEP 192:M3xKeIaQYVYZuLnN6KxvecRo930aOc1TbEG9c9HDEuO5:UkYVVLN6Kxxo93EA19cZgl
- TLSH T12422E74CFA558CEAE725023E89A70F1E71A5B6250B5237CF4370D52D1EE37EA62785C0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\fabric-api-0.119.4+1.21.4.jar
- Size 2.0MB
- SHA256 d183bacb845167f09264c2f90322b7ecffe8826debda6f60e597889264bef4af
- MD5 128a8d042180e7c92567342e21a21a6d
- SHA1 1c7871b6af04edc8b8f0dbad12606d67f6118a11
- SHA512 16b679f6a42549ca3b6bc147de710b2c8ba2d5e4661ed88df22782c05a4a5f6c1163d7b13867687ed91acde0fdfe5a5037d05662431c946865b58396284e7ee7
- SSDEEP 49152:qysKlZXgbGfRCPAalhVUpGhJfOglIdW/JfSyYsNaoO3A:n/ZQwTalhVHLAW/BRJUA
- TLSH T164A53364F29A1D1CE497F8702CD2D9E18C0794CD3B218B1B759931964A4ACFBB3623B7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\fabric-loader-0.16.14-layf-patched.jar
- Size 1.3MB
- SHA256 ef0b1ff741668d799ac12608789647d81cdf45c025ab81e670b9c229b959d2a1
- MD5 6c407e11cee421fc0b4b1fff28a9918a
- SHA1 014b3a2db871fc3191b7bb32eaf77c27e6d91719
- SHA512 f532772c044066b23018c39c5584c8a2e0f63f2c144aafb985079d73ebe7e997f82476dfd37d54c73630f42f3838c12033b0f9f3a29d152561f29147dce9718c
- SSDEEP 24576:SUthT0riI4rFToBlE68ol+rtv8ZzknCzQpdkN:Su0uIgsBlu8ZgnD3w
- TLSH T1B255D025BE8EE472D43BD53406008931E82D5ECFFD0664C725A9074DC6EE84A93D6AFB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\jarvis-core-hq.png
- Size 24KB
- SHA256 0fde8791cb7144d483019cac532d192d59b7e9bb45f909554b9e932ad648534e
- MD5 164da63e3e7f6d00424a4c04f7a48e78
- SHA1 9fa2f20b467ddffbc7b8e1f9b2d879c5fdb06d98
- SHA512 847ae8df89e47bdee3c16c428be4e055bc8f0d84d52ab2e3773ecbda96936af14793a8026f3a916457d61f33cd7bd1fdf17517bb368df4c2e3d7e25a250d36a9
- SSDEEP 384:SwAP0VirtpU2OZ79+jTav0qSYjdR3NGEcCN/c7gr8DdvKtBE8Obo7qeaMWg1snL4:SeVi5kue0qSU59WW6ImeaAs9cBR
- TLSH T1CFB2D0106C79D8AEC29DAB115F5A80BE78CE0F078F272A5841844997B75170F8BE5DCF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\launcher-bg.png
- Size 598KB
- SHA256 76dfa1fb185160059e6d0a6676fc69cc2bea3fc18d57fc0951fb0ed304a9bd0f
- MD5 669453d5ec4d506a4b1002e3861c1fdb
- SHA1 1153c9990b6bd098a8940da047cb1ef808c18337
- SHA512 29b6d7ee0a34de5cb9f6de77d074b77ebdfd6b858989e18ac5c2204c96faa8883c004ddcd0d972aed304736327a1418e9f24471f45d06ad0cf50541f45aef30e
- SSDEEP 12288:oxPzE6uhTrrjrbpIGK3X22GaWkH9b6eLNFPPQ1EBWWnRbj09GuWnp:oxPy9vj3+3XEah66TPzWWRK0p
- TLSH T185D423048020F349A0DD590F641A5B5FFAB8DDE983E656CC0E0EE525A57F98C22E7377
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\layf-infinyty.jar
- Size 7.0MB
- SHA256 434e5f408c71dfe01f7488a146e568390b36297bcec87fc913d18903a2ad04d4
- MD5 471d34efdcb651637b97dce2ad7aa7de
- SHA1 89f69bf14f5d4e842e45e0c07b5edc2f278d7751
- SHA512 67799d291b363810700807ccdb373fd1e3d5bcc44ad047387dda4588cc4c4f19203236d5c6942f4f91e02207209c35b4af3056a8f549d0ad52cf9a86a29c77fe
- SSDEEP 196608:I38M6yYQ1carT4YR9Tg5W7NL6DxogHHlhKvZxkIEVDn9:+D6yYQ+ks2Zg5WRL660exuX19
- TLSH T1D5763307BEEDE42AC857E073536284D2B429E28D6509D01F39610A8C55F94ABD3CBBDF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\layf-launcher.ico
- Size 149KB
- SHA256 5ec30af8f5c579d47454eb6c3724129a20244949bd58fbf539726384c204a306
- MD5 089f25fb2644d11ea67788b9f63a43f9
- SHA1 57fe1defb8f2113e90000cea0956b6ab6a41236a
- SHA512 528ef671e7c84c4e2356f3e1eb7bcc1f188f774e55262db91ef58698dede79c9245338fca9f231053618a53de992f9422c1152655517fa8e1a5a1236e26dcc27
- SSDEEP 3072:AcxXw1rPLUWdoehbSh95DajpbspTc78mpI64K46vQ:PXw1rzUG09MSpTcFpI6r46vQ
- TLSH T11CE32233B4AC6827DC6E0DF34B89C8EC96F252834DF9D3615E8EC5146BA95084FD12B9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\libcrypto-3.dll
- Size 6.0MB
- SHA256 53c529145339fb042a3dcd3a09c2d7753204f8b4fc79d99e0d31e69a33985958
- MD5 4191d4288230515c5098cc07f699a604
- SHA1 bd8b4d48b2f4513dc378bc5a4cf4a3abbc6998d8
- SHA512 c110a89ebb5b58126d556ffea1bf01efb4a6dd295f7387665223741a171d9353315de4d361d3d02a186c1c659aee20f46c579efc51b4c41f7282e1b5b4d6d040
- SSDEEP 98304:ybM11p6ZVTRwlFh7V6v73WyXTf0W+JJe1CPwDvt3uFA0CaI:ybM1T6ZlalfV6v7GyXbnEJe1CPwDvt3T
- TLSH T1E6566B5EA7A80188E4BAD13CC6534627D2F1F85A5BB097CF05A196790F33BDA2B3D740
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\libffi-8.dll
- Size 38KB
- SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
- MD5 0f8e4992ca92baaf54cc0b43aaccce21
- SHA1 c7300975df267b1d6adcbac0ac93fd7b1ab49bd2
- SHA512 6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978
- SSDEEP 768:NiQfxQemQJNrPN+moyijAc5YiSyvkIPxWEqG:dfxIQvPkmoyijP7SytPxF
- TLSH T10B037C0B458418A4E657D53D97A64A2AC335B9240B60F2CB03D4C2BA3F6B7D6FB7C358
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\libssl-3.dll
- Size 1.3MB
- SHA256 b17a87979862d19241edc4318f967e24c3ec356ed6c2368f561179fab2311001
- MD5 d99207e7e513f87ad7571c4c2450771b
- SHA1 b904eb3989c9a1ad77e3a541e40d84ae890e3df7
- SHA512 bccd034e633b96c2c7dff6ca96c2bb8a8c0f90a872f256e8467e470ed57fc4b442c74da488b258b5a255feba26767a5c95293a636c94c754e2644ed91c5be7ac
- SSDEEP 24576:gk2RrDo2iVOF8hXN1hyeWsoSvSZlRg5aYsC:gRFDo2uOKJ8sIRg5aYsC
- TLSH T11F556D5AA7B8016DD5B6C17CC6938B23D2B2F41623709BEF06658A790F23BD6273D344
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\pyexpat.pyd
- Size 217KB
- SHA256 133942bde91fe43289076a0b50a01b265df4ead078617cca6f6604a4166e1260
- MD5 cba7f704fa489655f2e6391c9faf137f
- SHA1 730c3bfa120dfe0bdb3f42cc6f82a859b53bafa5
- SHA512 5867066057005abe2a8e251e7e745bf82fcc7e41e26513dbbd111df2c9f4d19acbb8e1982fac2f13b0c7ff16400a1587c08b485855f441a6a42d3c03035e7ea1
- SSDEEP 3072:fKHcmklCazVuJATShhjXmrZwFKdWTP3AWxk8pg2H6coK6Vqcm2aciTH9FMG1cEOG:fKhklCagYQhWwKdWTP3X/JrcMT1BOL6
- TLSH T190245C9BB261C0ABD843C13CD9978B17DAB2B86503909ACF12C4D77C9F6B751372A319
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\python314.DLL
- Size 6.5MB
- SHA256 fde89cdb5c2d08ae65de7ef4abca1876c93ba3796002f5ac0bf7e4d4f5a94da0
- MD5 006b0746b5abaf438d1bc753261c6d2c
- SHA1 8f34714617f376cfa6e7e2aedc1e2a73de8c8fd8
- SHA512 1c156c3f542de0a27e16ca5b7d6bbd34f2059b380ce85dbcfd5ae3a64de473fd160baba45ca30ad85dfe45742fdcb42aa969cbbaab26a569e324d4e65fb6d621
- SSDEEP 98304:xVyDBH+ULEfi0VOuZd+FAX/uv3HDMiEEQn0rt:xVyD1+ULW5VrZRxim0rt
- TLSH T136669D26737901A5D9BB8035C9034647DBB1BC00AB30D34B49A4B6DA3F733635BAEB95
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\select.pyd
- Size 32KB
- SHA256 fab1b4cee101359d82d72061b83cff1855337b3677b9fe01cd69f7548f4c496e
- MD5 43a869da7432298fce80f8c163ad8e7f
- SHA1 65d259ba8350561668706a563ee0800c1748c173
- SHA512 26c57d276b82fcb9c4f971a8e74847e14dc1a3b942a62f442740d6244ee8f23ba29c9e56b5001c2734db3fd1ac52a6bda02926f47d12cf727e38703971fa9d55
- SSDEEP 768:TB7YLZnCaqF8IGRGCy1KPuBL2Ip4pTxf1ml9dHu7L3:TB7C5CaqF8IGRGCy1Ni9bfIbHun3
- TLSH T17FE28CCAAB345047EA63C671C6A2CE83FA39F7E35611469F31B5918A1E237C1A337354
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\setuptools\_vendor\jaraco\text\Lorem ipsum.txt
- Size 1KB
- SHA256 37fedcffbf73c4eb9f058f47677cb33203a436ff9390e4d38a8e01c9dad28e0b
- MD5 4ce7501f6608f6ce4011d627979e1ae4
- SHA1 78363672264d9cd3f72d5c1d3665e1657b1a5071
- SHA512 a4cdf92725e1d740758da4dd28df5d1131f70cef46946b173fe6956cc0341f019d7c4fecc3c9605f354e1308858721dada825b4c19f59c5ad1ce01ab84c46b24
- TLSH T1972163328E9C03006FD1303A636E89EFD948F0281A04BB25ECF9D68FA44115CD6E2375
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\tcl86t.dll
- Size 1.8MB
- SHA256 224f7121c7d7b963f4767154dd185f62c49c442bf8916d6d4c1c567702ccc7fa
- MD5 517396ed84bcf876a12cd17ddd75882a
- SHA1 d265d01b5a45ecaab743b8408f035540125a7ba3
- SHA512 cd89a8981156b57b2ab5fc3eb97be601f24160658daedc6dfc9e211fa49d64732a2f6d1e0bbfa0133f4d485cf7ef831a9bf185764cfd312e62a6390c8f1c97a4
- SSDEEP 49152:d0W4UbmMRbf0TIWn5SDf/qxF+PJJHmkY7C4wJreAJGnh:uBUqMR7i6x9T+h
- TLSH T19E859E1BE76410ACD8ABD1BCC227E60BDFF1B559136066DB51A08B912F23FE1277A305
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\tk86t.dll
- Size 1.5MB
- SHA256 39773640fc235b30d1b2a05f7b5eeba6fa9771e10f33f4ccc1649a9d99ff95e8
- MD5 79b271372ed84c23b0da041b29806b77
- SHA1 a25907ddde559cc7c97449c0c4e17b2a44e8915f
- SHA512 28405392f4bb0b6451ab31ae5457eb84ad58da9839513d7705b0b6c7941c6ecb012b4c22ddc62007ec21dba93e934d9d234ddb9f2f64636ddad5a044f0acc0c2
- SSDEEP 49152:l76DXYkBMhchLNqaJvARxr9DrTwylL1y62BEqkEH0CF2MT2JTBKa8SERGezfk:iQchLNqaJvARxr9DrTwylL1y5BEq8JT/
- TLSH T199754A06B261C198C66FA134C91796BAE7F17C05931057DB72A0BE697F33BE2673A304
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\unicodedata.pyd
- Size 741KB
- SHA256 0d4f124b2d6622d276d777f7106972219f9b310edb5df8149c253da7c013d6d8
- MD5 4df357dfce07299b9e6759583f41ca68
- SHA1 d5810b7f7d05ac3a37592566ee898f428919cb53
- SHA512 f741882d4444a4be4342f89932b2510c57fd943cf782079551c202c419805a90a06203464cdf1a209a8da3e56677426dc9af388b2077a5746b3daf0f2da1f69f
- SSDEEP 12288:jIwYBAPtrZmDtBPcH+dEYJ5EYub+z70lDJPT36mwtyqt:jIwYS5ZmDPqO54lDJPTMyqt
- TLSH T11EF4E5F5BB838C16E69B767A48D3210F4E50C2B35F1A8637B2182355D8EB3B44DD582E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI36802\zlib1.dll
- Size 144KB
- SHA256 6e39f7a67e52aec08b2382ab03c4e20857139a86a55d24b3deeb4d63f7d02e47
- MD5 8ee500baf620f8d993c3e68ffde0feb1
- SHA1 32ef5b43d1f69442f2e203fd90359a9bd9fd8fce
- SHA512 745a68c5e043b5445cc8f70ba3152bcd738e3ea0eb7199ac61bf5a2dbd94ed38262a8aa7cad45bc757ce37f8e5c40444e65389557861edda05d303665d98bf99
- SSDEEP 3072:MvEO6FnGGVV1m4dkRR5Th2UgvGxbOUJC0t:MsVD+RrFgvi7JL
- TLSH T10BE38D9BA6A254BDC677817042E7C7B6F932B8214B309DEF5088D7741A12F806B197FC
- MD5 SHA1 SHA512 SSDEEP TLSH