Overview

overview

8

Static

static

3

Fleasion-v...ws.exe

windows10-2004-x64

8

Fleasion-v...ws.exe

windows11-ltsc_2024-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    60s
  • max time network
    64s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    04/08/2026, 05:37

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Fleasion-v2.3.0-Windows.exe
  • Size 56.9MB
  • Sample260804-gba2jagn71
  • SHA256 e16001a8d80af46d306d1112bb0b577bc8e7900f393316aa384a082ad9ae778a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoveryexecutionpersistenceprivilege_escalationupx

Malware Config

Signatures

  • Drops file in Drivers directory 1 IoCs
  • Loads dropped DLL 64 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 42 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • UPX packed file 64 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Netsh Helper DLL 1 TTPs 6 IoCs

    Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

    persistenceprivilege_escalation
  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 1 IoCs
  • Scheduled Task/Job: Scheduled Task 1 TTPs 7 IoCs

    Schtasks is often used by malware for persistence or to perform post-infection execution.

    persistenceexecution
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 46 IoCs
  • Suspicious use of SendNotifyMessage 44 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 39 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\Fleasion-v2.3.0-Windows.exe
    "C:\Users\Admin\AppData\Local\Temp\Fleasion-v2.3.0-Windows.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1876
    • C:\Users\Admin\AppData\Local\Temp\Fleasion-v2.3.0-Windows.exe
      "C:\Users\Admin\AppData\Local\Temp\Fleasion-v2.3.0-Windows.exe"
      2⤵
      • Drops file in Drivers directory
      • Loads dropped DLL
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:3928
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "ver"
        3⤵
        • Executes a command shell one-liner
        PID:1104
      • C:\Windows\System32\certutil.exe
        C:\Windows\System32\certutil.exe -store Root
        3⤵
          PID:3968
        • C:\Windows\System32\certutil.exe
          C:\Windows\System32\certutil.exe -store Root 3E78FD69FC5A5298BD33BC4F121F73586E1D9911
          3⤵
            PID:4308
          • C:\Windows\System32\certutil.exe
            C:\Windows\System32\certutil.exe -addstore -f Root C:\Users\Admin\AppData\Local\FleasionNT\proxy_ca\ca.crt
            3⤵
              PID:4164
            • C:\Windows\System32\schtasks.exe
              C:\Windows\System32\schtasks.exe /delete /TN Fleasion-HostsWatchdog /F
              3⤵
                PID:5064
              • C:\Windows\SYSTEM32\netsh.exe
                netsh winhttp show proxy
                3⤵
                • Event Triggered Execution: Netsh Helper DLL
                PID:5112
              • C:\Windows\System32\schtasks.exe
                C:\Windows\System32\schtasks.exe /create /TN Fleasion-HostsWatchdog /XML C:\Users\Admin\AppData\Local\Temp\fleasion_watchdog_task.xml /RU SYSTEM /F
                3⤵
                • Scheduled Task/Job: Scheduled Task
                PID:3688
              • C:\Windows\System32\schtasks.exe
                C:\Windows\System32\schtasks.exe /create /TN Fleasion-HostsWatchdog /XML C:\Users\Admin\AppData\Local\Temp\fleasion_watchdog_task.xml /RU SYSTEM /F
                3⤵
                • Scheduled Task/Job: Scheduled Task
                PID:1428
              • C:\Windows\System32\schtasks.exe
                C:\Windows\System32\schtasks.exe /create /TN Fleasion-HostsWatchdog /XML C:\Users\Admin\AppData\Local\Temp\fleasion_watchdog_task.xml /RU SYSTEM /F
                3⤵
                • Scheduled Task/Job: Scheduled Task
                PID:2184
              • C:\Windows\SYSTEM32\schtasks.exe
                schtasks /Query /TN Fleasion_Autostart
                3⤵
                  PID:4740
                • C:\Windows\SYSTEM32\schtasks.exe
                  schtasks /Create /TN Fleasion_Autostart /XML C:\Users\Admin\AppData\Local\Temp\tmplvzhp13s.xml /F
                  3⤵
                  • Scheduled Task/Job: Scheduled Task
                  PID:1528
                • C:\Windows\System32\schtasks.exe
                  C:\Windows\System32\schtasks.exe /create /TN Fleasion-HostsWatchdog /XML C:\Users\Admin\AppData\Local\Temp\fleasion_watchdog_task.xml /RU SYSTEM /F
                  3⤵
                  • Scheduled Task/Job: Scheduled Task
                  PID:1824
                • C:\Windows\System32\schtasks.exe
                  C:\Windows\System32\schtasks.exe /create /TN Fleasion-HostsWatchdog /XML C:\Users\Admin\AppData\Local\Temp\fleasion_watchdog_task.xml /RU SYSTEM /F
                  3⤵
                  • Scheduled Task/Job: Scheduled Task
                  PID:5372
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe"
              1⤵
              • Checks processor information in registry
              • Enumerates system info in registry
              • Modifies data under HKEY_USERS
              • Modifies registry class
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of FindShellTrayWindow
              • Suspicious use of SendNotifyMessage
              • Suspicious use of WriteProcessMemory
              PID:4492
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffefc7bc728,0x7ffefc7bc734,0x7ffefc7bc740
                2⤵
                  PID:3284
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1588,i,5548841424096563291,8423089163420722593,524288 --field-trial-handle=2084,i,9036237114651464642,945821543685340025,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2132 /prefetch:3
                  2⤵
                  • System Time Discovery
                  PID:2152
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,13344562922986808369,9738141027689814772,262144 --field-trial-handle=2084,i,9036237114651464642,945821543685340025,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2068 /prefetch:2
                  2⤵
                    PID:540
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2392,i,751189315049784530,15854177721049582654,524288 --field-trial-handle=2084,i,9036237114651464642,945821543685340025,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2432 /prefetch:8
                    2⤵
                      PID:3980
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3240,i,6913548539968047128,10873281527546708647,2097152 --field-trial-handle=2084,i,9036237114651464642,945821543685340025,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3248 /prefetch:1
                      2⤵
                        PID:2692
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3268,i,4695133641610670186,13741338499802953333,2097152 --field-trial-handle=2084,i,9036237114651464642,945821543685340025,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3288 /prefetch:1
                        2⤵
                          PID:4584
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4448,i,3330278222255975315,5926459584605607302,2097152 --field-trial-handle=2084,i,9036237114651464642,945821543685340025,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4460 /prefetch:2
                          2⤵
                            PID:972
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4660,i,12794529347070897650,16158009580930359113,2097152 --field-trial-handle=2084,i,9036237114651464642,945821543685340025,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4600 /prefetch:1
                            2⤵
                              PID:924
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5464,i,13666693315666260503,6129946250321393767,524288 --field-trial-handle=2084,i,9036237114651464642,945821543685340025,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5484 /prefetch:8
                              2⤵
                                PID:3216
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6024,i,3540325423589662089,13310036517768863132,524288 --field-trial-handle=2084,i,9036237114651464642,945821543685340025,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6016 /prefetch:8
                                2⤵
                                  PID:4040
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6036,i,9007397799830653860,6977785137298538832,524288 --field-trial-handle=2084,i,9036237114651464642,945821543685340025,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6068 /prefetch:8
                                  2⤵
                                    PID:2996
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5936,i,8977829921291960325,1272526442934920174,524288 --field-trial-handle=2084,i,9036237114651464642,945821543685340025,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6000 /prefetch:8
                                    2⤵
                                      PID:4668
                                  • C:\Windows\system32\AUDIODG.EXE
                                    C:\Windows\system32\AUDIODG.EXE 0x2fc 0x150
                                    1⤵
                                      PID:2432
                                    • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                      "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                      1⤵
                                        PID:5052
                                      • C:\Windows\system32\svchost.exe
                                        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                        1⤵
                                          PID:4884
                                        • C:\Users\Admin\AppData\Local\Temp\Fleasion-v2.3.0-Windows.exe
                                          C:\Users\Admin\AppData\Local\Temp\Fleasion-v2.3.0-Windows.exe
                                          1⤵
                                          • Suspicious use of WriteProcessMemory
                                          PID:3308
                                          • C:\Users\Admin\AppData\Local\Temp\Fleasion-v2.3.0-Windows.exe
                                            C:\Users\Admin\AppData\Local\Temp\Fleasion-v2.3.0-Windows.exe
                                            2⤵
                                            • Suspicious behavior: AddClipboardFormatListener
                                            • Suspicious behavior: GetForegroundWindowSpam
                                            • Suspicious use of FindShellTrayWindow
                                            • Suspicious use of SendNotifyMessage
                                            • Suspicious use of SetWindowsHookEx
                                            • Suspicious use of WriteProcessMemory
                                            PID:2576
                                            • C:\Windows\system32\schtasks.exe
                                              schtasks /Query /TN Fleasion_Autostart
                                              3⤵
                                                PID:1316
                                              • C:\Windows\System32\certutil.exe
                                                C:\Windows\System32\certutil.exe -store Root
                                                3⤵
                                                  PID:5380
                                                • C:\Windows\System32\certutil.exe
                                                  C:\Windows\System32\certutil.exe -delstore Root 7F88CD7223F3C813818C994614A89C99FA3B5247
                                                  3⤵
                                                    PID:5460
                                                  • C:\Windows\System32\certutil.exe
                                                    C:\Windows\System32\certutil.exe -store Root 3E78FD69FC5A5298BD33BC4F121F73586E1D9911
                                                    3⤵
                                                      PID:5532
                                                    • C:\Windows\system32\netsh.exe
                                                      netsh winhttp show proxy
                                                      3⤵
                                                      • Event Triggered Execution: Netsh Helper DLL
                                                      PID:5864
                                                    • C:\Windows\System32\schtasks.exe
                                                      C:\Windows\System32\schtasks.exe /create /TN Fleasion-HostsWatchdog /XML C:\Users\Admin\AppData\Local\Temp\fleasion_watchdog_task.xml /RU SYSTEM /F
                                                      3⤵
                                                      • Scheduled Task/Job: Scheduled Task
                                                      PID:5528

                                                Network

                                                      MITRE ATT&CK Enterprise v16

                                                      Replay Monitor

                                                      Loading Replay Monitor...

                                                      Downloads

                                                      Default.json
                                                      • Path C:\Users\Admin\AppData\Local\FleasionNT\configs\Default.json
                                                      • Size 31B
                                                      • SHA256 9dc3d0b822b9ecfae5ecf1032c513b686026d6467b10a0d66f7aa818cdcd80ef
                                                      • MD5 SHA1 SHA512
                                                      Submit Download

                                                      fleasion.log
                                                      • Path C:\Users\Admin\AppData\Local\FleasionNT\logs\fleasion.log
                                                      • Size 392B
                                                      • SHA256 dc52931b207861f81a01d588cdba1997231206a4611164eb4ebd5551345161e2
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      fleasion.log
                                                      • Path C:\Users\Admin\AppData\Local\FleasionNT\logs\fleasion.log
                                                      • Size 805B
                                                      • SHA256 d4def30fab3413902acae5b97535b06e8d7ba19eee388f041e7f03b5c99cee4c
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      fleasion.log
                                                      • Path C:\Users\Admin\AppData\Local\FleasionNT\logs\fleasion.log
                                                      • Size 1KB
                                                      • SHA256 123d356e74024fa4566e7373a25fc461d39ec3e7d168c5ccb612dfc357b448c6
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      fleasion.log
                                                      • Path C:\Users\Admin\AppData\Local\FleasionNT\logs\fleasion.log
                                                      • Size 1KB
                                                      • SHA256 1d745874722d729bc66f541caabb494df5d3deb83530108f62e1598336213727
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      fleasion.log
                                                      • Path C:\Users\Admin\AppData\Local\FleasionNT\logs\fleasion.log
                                                      • Size 2KB
                                                      • SHA256 c1b114583fd3873239ec5c1f643f058aafc6e7558c58c16e99766ece684a9fc6
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      fleasion.log
                                                      • Path C:\Users\Admin\AppData\Local\FleasionNT\logs\fleasion.log
                                                      • Size 3KB
                                                      • SHA256 b22f9c81a2dd1a6de21c103b985837b4945d288e9c6443c92aab5e7de093ec68
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      fleasion.log
                                                      • Path C:\Users\Admin\AppData\Local\FleasionNT\logs\fleasion.log
                                                      • Size 3KB
                                                      • SHA256 da965bf6c679ff1cd77222d338743ce8643f158c1d87cbe9fa33645f15bdb20e
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      fleasion.log
                                                      • Path C:\Users\Admin\AppData\Local\FleasionNT\logs\fleasion.log
                                                      • Size 4KB
                                                      • SHA256 bd39efccafe6133ca1d468c176006849131a25670d231e24c5d56d98db750f20
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      ca.crt
                                                      • Path C:\Users\Admin\AppData\Local\FleasionNT\proxy_ca\ca.crt
                                                      • Size 1KB
                                                      • SHA256 c38b8689c97eec7b5f7c5d8ad25dc442098d176100afed463957c4121bcaa743
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      ca.key
                                                      • Path C:\Users\Admin\AppData\Local\FleasionNT\proxy_ca\ca.key
                                                      • Size 1KB
                                                      • SHA256 bbc4bffdf059170e0fe549708f32734d0edb5a4f188ab88c9b9d381383b50b1e
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      roblox_dirs.json
                                                      • Path C:\Users\Admin\AppData\Local\FleasionNT\roblox_dirs.json
                                                      • Size 25B
                                                      • SHA256 4dd71d9ccfe273ab22d7c695b8b96a02513345a29f2a5d90d49c40c646661374
                                                      • MD5 SHA1 SHA512
                                                      Submit Download

                                                      settings.json
                                                      • Path C:\Users\Admin\AppData\Local\FleasionNT\settings.json
                                                      • Size 2KB
                                                      • SHA256 149fd7a4ed5037c6eed768baf98b282dff596918b73e2585469517fba6b18de6
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      BookmarkMergedSurfaceOrdering
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                      • Size 6B
                                                      • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                      • MD5 SHA1 SHA512
                                                      Submit Download

                                                      BrowsingTopicsState
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                      • Size 414B
                                                      • SHA256 fdfdf6cb266ee57e8266c376ec5106d76431b7f3354b28ea20f98fac661f554c
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      SCT Auditing Pending Reports
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                      • Size 2B
                                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                      • MD5 SHA1 SHA512
                                                      Submit Download

                                                      Preferences
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                      • Size 12KB
                                                      • SHA256 58e25daf7e5c2874745964caaed356010c05ea72cf081ae0b462331787f593b4
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      Secure Preferences
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                      • Size 17KB
                                                      • SHA256 93a969d5494520a313d59c847d3ee10e51ce49e2c8cea4f6ea38850cfab527d0
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      the-real-index
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                      • Size 120B
                                                      • SHA256 0799aa58a9a193c2e77d2b5acb46db2ac37d3eadf5010a867e583643ffda049b
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      the-real-index~RFe58a3bd.TMP
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58a3bd.TMP
                                                      • Size 96B
                                                      • SHA256 656e6b65ec2761c278520f6a2d219039ddc518adc9632b57f148dbf8114a2526
                                                      • MD5 SHA1 SHA512 TLSH
                                                      Submit Download

                                                      Local State
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                      • Size 115KB
                                                      • SHA256 fb1ee809c48b16b974c1e3046ef7ed0e38aa1edf3f4239670ad38ebb1b266255
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      Local State
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                      • Size 235KB
                                                      • SHA256 8d9938a6177539463d82a4e19ac032700ed3558bc97cdaa1c3f30126eb2f3acb
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      Local State
                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                      • Size 235KB
                                                      • SHA256 bb633a9c5d6fe87c4f0293d67b59e04b805cf8d1b6e4d934d5771b8c8a153772
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      VCRUNTIME140.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\VCRUNTIME140.dll
                                                      • Size 121KB
                                                      • SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      _bz2.pyd
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\_bz2.pyd
                                                      • Size 37KB
                                                      • SHA256 efbfb7760de5f92f3549ab5ff9a9737ae47142e08e938523f417d108183102ce
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      _ctypes.pyd
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\_ctypes.pyd
                                                      • Size 54KB
                                                      • SHA256 7ac92efadcbe8877de5c07937f3362a1a8f39bb21c0b488707882da972e741f2
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      _lzma.pyd
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\_lzma.pyd
                                                      • Size 78KB
                                                      • SHA256 785db5833ce2116c3e05e3ae54b1575fdaabe4571bafb6ce59aeb9625e460aea
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      _zstd.pyd
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\_zstd.pyd
                                                      • Size 163KB
                                                      • SHA256 bc4684ce38fd22f5a4f1073703bea7b47f335ccbf1226aeafe00f3815126aa0c
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      ada92cb5d92a588d1b93__mypyc.cp314-win_amd64.pyd
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\ada92cb5d92a588d1b93__mypyc.cp314-win_amd64.pyd
                                                      • Size 66KB
                                                      • SHA256 b23773df4eba4013fd165c70547d3e7a0c2996ce6b385d2c2d8d423928ef3d12
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-console-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-console-l1-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 88ace577a9c51061cb7d1a36babbbefa48212fadc838ffde98fdfff60de18386
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-datetime-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-datetime-l1-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 1bd81dfd19204b44662510d9054852fb77c9f25c1088d647881c9b976cc16818
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-debug-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-debug-l1-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 591358eb4d1531e9563ee0813e4301c552ce364c912ce684d16576eabf195dc3
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-errorhandling-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-errorhandling-l1-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 d56ce7b1cd76108ad6c137326ec694a14c99d48c3d7b0ace8c3ff4d9bcee3ce8
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-fibers-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-fibers-l1-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 91d249d7bc0e38ef6bcb17158b1fdc6dd8888dc086615c9b8b750b87e52a5fb3
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-fibers-l1-1-1.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-fibers-l1-1-1.dll
                                                      • Size 21KB
                                                      • SHA256 fc9d86cec621383eab636ebc87ddd3f5c19a3cb2a33d97be112c051d0b275429
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-file-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-file-l1-1-0.dll
                                                      • Size 25KB
                                                      • SHA256 1ca895aba4e7435563a6b43e85eba67a0f8c74aa6a6a94d0fc48fa35535e2585
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-file-l1-2-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-file-l1-2-0.dll
                                                      • Size 21KB
                                                      • SHA256 4cadbc0c39da7c6722206fdcebd670abe5b8d261e7b041dd94f9397a89d1990d
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-file-l2-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-file-l2-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 93c624b366ba16c643fc8933070a26f03b073ad0cf7f80173266d67536c61989
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-handle-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-handle-l1-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 39095f59c41d76ec81bb2723d646fde4c148e7cc3402f4980d2ade95cb9c84f9
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-heap-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-heap-l1-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 8f105771b236dbcb859de271f0a6822ce1cb79c36988dd42c9e3f6f55c5f7eb9
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-interlocked-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-interlocked-l1-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 53b25e753ca785bf8b695d89dde5818a318890211dc992a89146f16658f0b606
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-kernel32-legacy-l1-1-1.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-kernel32-legacy-l1-1-1.dll
                                                      • Size 21KB
                                                      • SHA256 a9b13a1cd1b8c19b0c6b4afcd5bb0dd29c0e2288231ac9e6db8510094ce68ba6
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-libraryloader-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-libraryloader-l1-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 7f39ba298b41e4963047341288cab36b6a241835ee11ba4ad70f44dacd40906c
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-localization-l1-2-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-localization-l1-2-0.dll
                                                      • Size 21KB
                                                      • SHA256 6ee44dd0d8510dc024c9f7c79b1b9fa88c987b26b6beb6653ddd11751c34e5dc
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-memory-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-memory-l1-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 0512a35316ec9180437f86696a84c5c06a7e4e82e050055a656e5bf9fca206f9
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-namedpipe-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-namedpipe-l1-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 c05f1fffe3b5a2738ea54ce9485cca026fb9635f982626fba1e1dcc531897273
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-processenvironment-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-processenvironment-l1-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 c4eca98c3c67b6395d5b005b00ac1eb0318b86b23aa71035a44c2b1602befba9
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-processthreads-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-processthreads-l1-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 5ccb89e93d67bc3288d4e84649c5346e66e15e3d7cd65d989daf3f4cb584be9a
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-processthreads-l1-1-1.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-processthreads-l1-1-1.dll
                                                      • Size 21KB
                                                      • SHA256 4ad565a8ba3ef0ea8ab87221ad11f83ee0bc844ce236607958406663b407333e
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-profile-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-profile-l1-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 7809160932f44e59b021699f5bc68799eb7293ee1fa926d6fcca3c3445302e61
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-rtlsupport-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-rtlsupport-l1-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 9dc1e91e71c7c054854bd1487cb4e6946d82c9f463430f1c4e8d1471005172b1
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-string-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-string-l1-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 60fc31d2a0c634412f529dba76af3b9bf991352877c6dae528186d3935704cfd
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-synch-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-synch-l1-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 3a72b4f29f39a265d32ad12f0ce15dbf60129c840e10d84d427829ede45e78ad
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-synch-l1-2-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-synch-l1-2-0.dll
                                                      • Size 21KB
                                                      • SHA256 efc1e4460984a73cf47a3def033af1c8f3b1dbc1a56cd27781d3aacf3e3330cb
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-sysinfo-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-sysinfo-l1-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 b203d862ddef1dd62bf623fc866c7f7a9c317c1c2ae30d1f52cb41f955b5698e
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-sysinfo-l1-2-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-sysinfo-l1-2-0.dll
                                                      • Size 21KB
                                                      • SHA256 2703635d835396afd0f138d7c73751afe7e33a24f4225d08c1690b0a371932c0
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-timezone-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-timezone-l1-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 33f4fddc181066fce06b2227bded813f95e94ed1f3d785e982c6b6b56c510c57
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-core-util-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-core-util-l1-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 6eda016742a6171205a387a14b3c0b331841567740376f56768f8c151724207d
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-crt-conio-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-crt-conio-l1-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 b762061b688aae679afe788904d2c9970f74a7dac98f3b42463d08f25e483d3f
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-crt-convert-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-crt-convert-l1-1-0.dll
                                                      • Size 25KB
                                                      • SHA256 ebb2ae5535a64f65daeab8235585114fc9dd2cf1a49f5852d446250b998b6ae4
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-crt-environment-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-crt-environment-l1-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 17d63275d00bdd8670422b95bd264c532998e0a1b041079e54fce4b6b7a55819
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-crt-filesystem-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-crt-filesystem-l1-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 9a9e2a65a281644e368d0f272b95ba5f6b445d1c35910d06056c5ebeb77402db
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-crt-heap-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-crt-heap-l1-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 bab9ac3ec83e380ae51e4295ef3bf2c738627812d3a49d1e713661abbc8dc57a
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-crt-locale-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-crt-locale-l1-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 bd14c67ea28e21d6257ad780a37122c9b5773f69e693f5db6bffaee4d839526e
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-crt-math-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-crt-math-l1-1-0.dll
                                                      • Size 29KB
                                                      • SHA256 606d66d82db562ea7979179d06486a0f94d079941d26b80a1e2c49d29959df6f
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-crt-multibyte-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-crt-multibyte-l1-1-0.dll
                                                      • Size 29KB
                                                      • SHA256 95f49efbe8107786733fa7c474025cf3fee0ac632f240367b296c736d06572aa
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-crt-private-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-crt-private-l1-1-0.dll
                                                      • Size 73KB
                                                      • SHA256 1bc82bed6143d2bf1b6b08a7809f4a5e29317d6fddd338a7da3c0223522e4bbf
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-crt-process-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-crt-process-l1-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 f6156b1020380ec4f0e48577ebedaaef5fb1ab1f337d8b4e72e6a33a7567a9cc
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-crt-runtime-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-crt-runtime-l1-1-0.dll
                                                      • Size 25KB
                                                      • SHA256 c5902934d026d7e15fbe9917d474f3322846a41a25e66f4b2b1f758801879f4b
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-crt-stdio-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-crt-stdio-l1-1-0.dll
                                                      • Size 25KB
                                                      • SHA256 a9c5a153d8c0286f9b41a2b1c65854ad9e6471b8755b7de87bae4470e60bcab6
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-crt-string-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-crt-string-l1-1-0.dll
                                                      • Size 25KB
                                                      • SHA256 25b8f83a7767211b11132775a0e27a45aa4ec8ab4e6572599f9c172ae3606b40
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      api-ms-win-crt-time-l1-1-0.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\api-ms-win-crt-time-l1-1-0.dll
                                                      • Size 21KB
                                                      • SHA256 7c7f6393f06de11750adb09cc5698ae55cd9fb27b2e51e207286feb1b5b2b156
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      base_library.zip
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\base_library.zip
                                                      • Size 1.3MB
                                                      • SHA256 7fb8b30f0104bf8304c920436ab278d9ed6aa49e60090d8938beef20661540c3
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      libffi-8.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\libffi-8.dll
                                                      • Size 17KB
                                                      • SHA256 3f4606d4f11b0c882c001400066fb1b3fdae43f55786b3a713b99039fb6b0bea
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      python3.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\python3.dll
                                                      • Size 58KB
                                                      • SHA256 17fa74085a56ee0b8d437d40aeab66063ac57e23e9a4933cd73520dd0893bdee
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      python314.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\python314.dll
                                                      • Size 2.0MB
                                                      • SHA256 ea3edc5af95eca2161554d18d62cfb8ad4e8b610ad1aa027520d264969e6c762
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      INSTALLER
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\sounddevice-0.5.5.dist-info\INSTALLER
                                                      • Size 2B
                                                      • SHA256 e6184ce10e266134fdcfa401e8f1a95005bcd4f18d16b62b757323e2833fe9a9
                                                      • MD5 SHA1 SHA512
                                                      Submit Download

                                                      ucrtbase.dll
                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\ucrtbase.dll
                                                      • Size 1.3MB
                                                      • SHA256 2e5fb14b7bf8540278f3614a12f0226e56a7cc9e64b81cbd976c6fcf2f71cbfb
                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                      Submit Download

                                                      memory/2576-1617-0x00007FFEF0A50000-0x00007FFEF0A75000-memory.dmp
                                                      Download

                                                      memory/2576-1625-0x00007FFEEE2F0000-0x00007FFEEE31F000-memory.dmp
                                                      Download

                                                      memory/2576-1626-0x00007FFED9DD0000-0x00007FFED9E92000-memory.dmp
                                                      Download

                                                      memory/2576-1627-0x00007FFED9DA0000-0x00007FFED9DCC000-memory.dmp
                                                      Download

                                                      memory/2576-1628-0x00007FFEEEA80000-0x00007FFEEEA90000-memory.dmp
                                                      Download

                                                      memory/2576-1629-0x00007FFED9410000-0x00007FFED9D97000-memory.dmp
                                                      Download

                                                      memory/2576-1631-0x00007FFED93A0000-0x00007FFED93CA000-memory.dmp
                                                      Download

                                                      memory/2576-1632-0x00007FFED92B0000-0x00007FFED9391000-memory.dmp
                                                      Download

                                                      memory/2576-1633-0x00007FFEEE2D0000-0x00007FFEEE2EA000-memory.dmp
                                                      Download

                                                      memory/2576-1634-0x00007FFED8F60000-0x00007FFED909A000-memory.dmp
                                                      Download

                                                      memory/2576-1635-0x00007FFED8CE0000-0x00007FFED8F5A000-memory.dmp
                                                      Download

                                                      memory/2576-1636-0x00007FFED8C80000-0x00007FFED8CD7000-memory.dmp
                                                      Download

                                                      memory/2576-1630-0x00007FFED93D0000-0x00007FFED9406000-memory.dmp
                                                      Download

                                                      memory/2576-1624-0x00007FFEEFB00000-0x00007FFEEFBE4000-memory.dmp
                                                      Download

                                                      memory/2576-1318-0x00007FFEF0010000-0x00007FFEF06EE000-memory.dmp
                                                      Download

                                                      memory/2576-1623-0x00007FFEEFBF0000-0x00007FFEEFD40000-memory.dmp
                                                      Download

                                                      memory/2576-1622-0x00007FFEF0A10000-0x00007FFEF0A46000-memory.dmp
                                                      Download

                                                      memory/2576-1620-0x00007FFEF2390000-0x00007FFEF23A4000-memory.dmp
                                                      Download

                                                      memory/2576-1619-0x00007FFEF52A0000-0x00007FFEF52AF000-memory.dmp
                                                      Download

                                                      memory/2576-1618-0x00007FFEF7BF0000-0x00007FFEF7BFD000-memory.dmp
                                                      Download

                                                      memory/2576-1616-0x00007FFEEFD40000-0x00007FFEF0001000-memory.dmp
                                                      Download

                                                      memory/2576-1615-0x00007FFEF2D10000-0x00007FFEF2D2A000-memory.dmp
                                                      Download

                                                      memory/2576-1614-0x00007FFEF0B10000-0x00007FFEF0B90000-memory.dmp
                                                      Download

                                                      memory/2576-1613-0x00007FFEF11D0000-0x00007FFEF11FE000-memory.dmp
                                                      Download

                                                      memory/2576-1612-0x00007FFEF2F60000-0x00007FFEF2F7A000-memory.dmp
                                                      Download

                                                      memory/2576-1611-0x00007FFEFAF40000-0x00007FFEFAF4F000-memory.dmp
                                                      Download

                                                      memory/2576-1609-0x00007FFEF0010000-0x00007FFEF06EE000-memory.dmp
                                                      Download

                                                      memory/2576-1621-0x00007FFEEE320000-0x00007FFEEEA2C000-memory.dmp
                                                      Download

                                                      memory/2576-1610-0x00007FFEF2D30000-0x00007FFEF2D5A000-memory.dmp
                                                      Download

                                                      memory/2576-1688-0x000001F884090000-0x000001F8840A0000-memory.dmp
                                                      Download

                                                      memory/2576-1687-0x000001F881F20000-0x000001F881F30000-memory.dmp
                                                      Download

                                                      memory/3928-552-0x00007FFF0E9F0000-0x00007FFF0ECB1000-memory.dmp
                                                      Download

                                                      memory/3928-1001-0x00007FFEF3830000-0x00007FFEF38F2000-memory.dmp
                                                      Download

                                                      memory/3928-461-0x00007FFEFC980000-0x00007FFEFD307000-memory.dmp
                                                      Download

                                                      memory/3928-491-0x00007FFEFF2C0000-0x00007FFEFF2FE000-memory.dmp
                                                      Download

                                                      memory/3928-399-0x000001CE7F9F0000-0x000001CE7FA00000-memory.dmp
                                                      Download

                                                      memory/3928-396-0x00007FFF08150000-0x00007FFF08168000-memory.dmp
                                                      Download

                                                      memory/3928-397-0x00007FFEFD790000-0x00007FFEFD7A2000-memory.dmp
                                                      Download

                                                      memory/3928-545-0x00007FFF02420000-0x00007FFF02AFE000-memory.dmp
                                                      Download

                                                      memory/3928-561-0x00007FFEFC980000-0x00007FFEFD307000-memory.dmp
                                                      Download

                                                      memory/3928-563-0x00007FFEFEED0000-0x00007FFEFF2B7000-memory.dmp
                                                      Download

                                                      memory/3928-559-0x00007FFF0E7D0000-0x00007FFF0E920000-memory.dmp
                                                      Download

                                                      memory/3928-564-0x00007FFEFDB00000-0x00007FFEFEECB000-memory.dmp
                                                      Download

                                                      memory/3928-557-0x00007FFF01300000-0x00007FFF01A0C000-memory.dmp
                                                      Download

                                                      memory/3928-393-0x00007FFEFF430000-0x00007FFEFF46E000-memory.dmp
                                                      Download

                                                      memory/3928-553-0x00007FFF0EFD0000-0x00007FFF0EFF5000-memory.dmp
                                                      Download

                                                      memory/3928-394-0x00007FFEFDA40000-0x00007FFEFDA62000-memory.dmp
                                                      Download

                                                      memory/3928-560-0x00007FFF00DB0000-0x00007FFF00E94000-memory.dmp
                                                      Download

                                                      memory/3928-558-0x00007FFF0E920000-0x00007FFF0E956000-memory.dmp
                                                      Download

                                                      memory/3928-395-0x00007FFEFD7B0000-0x00007FFEFDA3C000-memory.dmp
                                                      Download

                                                      memory/3928-392-0x00007FFEFDB00000-0x00007FFEFEECB000-memory.dmp
                                                      Download

                                                      memory/3928-620-0x00007FFEFD7B0000-0x00007FFEFDA3C000-memory.dmp
                                                      Download

                                                      memory/3928-311-0x00007FFF0ECC0000-0x00007FFF0ED40000-memory.dmp
                                                      Download

                                                      memory/3928-309-0x00007FFF0F030000-0x00007FFF0F05E000-memory.dmp
                                                      Download

                                                      memory/3928-305-0x00007FFF14AE0000-0x00007FFF14AFA000-memory.dmp
                                                      Download

                                                      memory/3928-742-0x00007FFF08150000-0x00007FFF08168000-memory.dmp
                                                      Download

                                                      memory/3928-391-0x00007FFEFEED0000-0x00007FFEFF2B7000-memory.dmp
                                                      Download

                                                      memory/3928-302-0x00007FFF10680000-0x00007FFF106AA000-memory.dmp
                                                      Download

                                                      memory/3928-303-0x00007FFF19230000-0x00007FFF1923F000-memory.dmp
                                                      Download

                                                      memory/3928-390-0x00007FFF0E780000-0x00007FFF0E78B000-memory.dmp
                                                      Download

                                                      memory/3928-786-0x00007FFF02420000-0x00007FFF02AFE000-memory.dmp
                                                      Download

                                                      memory/3928-799-0x00007FFF0E920000-0x00007FFF0E956000-memory.dmp
                                                      Download

                                                      memory/3928-795-0x00007FFF10190000-0x00007FFF1019D000-memory.dmp
                                                      Download

                                                      memory/3928-794-0x00007FFF0EFD0000-0x00007FFF0EFF5000-memory.dmp
                                                      Download

                                                      memory/3928-793-0x00007FFF0E9F0000-0x00007FFF0ECB1000-memory.dmp
                                                      Download

                                                      memory/3928-903-0x00007FFF02420000-0x00007FFF02AFE000-memory.dmp
                                                      Download

                                                      memory/3928-384-0x00007FFEFF300000-0x00007FFEFF33B000-memory.dmp
                                                      Download

                                                      memory/3928-385-0x00007FFF0E790000-0x00007FFF0E79B000-memory.dmp
                                                      Download

                                                      memory/3928-930-0x00007FFEFB350000-0x00007FFEFB37F000-memory.dmp
                                                      Download

                                                      memory/3928-931-0x00007FFEF3830000-0x00007FFEF38F2000-memory.dmp
                                                      Download

                                                      memory/3928-933-0x00007FFEFB340000-0x00007FFEFB350000-memory.dmp
                                                      Download

                                                      memory/3928-932-0x00007FFEF52B0000-0x00007FFEF52DC000-memory.dmp
                                                      Download

                                                      memory/3928-977-0x00007FFEF4A60000-0x00007FFEF4A8A000-memory.dmp
                                                      Download

                                                      memory/3928-980-0x00007FFEF8180000-0x00007FFEF819A000-memory.dmp
                                                      Download

                                                      memory/3928-981-0x00007FFEF1350000-0x00007FFEF15CA000-memory.dmp
                                                      Download

                                                      memory/3928-979-0x00007FFEF26B0000-0x00007FFEF27EA000-memory.dmp
                                                      Download

                                                      memory/3928-978-0x00007FFEF32A0000-0x00007FFEF3381000-memory.dmp
                                                      Download

                                                      memory/3928-982-0x00007FFF02420000-0x00007FFF02AFE000-memory.dmp
                                                      Download

                                                      memory/3928-999-0x00007FFEFC3F0000-0x00007FFEFC426000-memory.dmp
                                                      Download

                                                      memory/3928-1008-0x00007FFEF1350000-0x00007FFEF15CA000-memory.dmp
                                                      Download

                                                      memory/3928-1007-0x00007FFEF26B0000-0x00007FFEF27EA000-memory.dmp
                                                      Download

                                                      memory/3928-1010-0x00007FFEF37B0000-0x00007FFEF3807000-memory.dmp
                                                      Download

                                                      memory/3928-1006-0x00007FFEF8180000-0x00007FFEF819A000-memory.dmp
                                                      Download

                                                      memory/3928-1005-0x00007FFEF32A0000-0x00007FFEF3381000-memory.dmp
                                                      Download

                                                      memory/3928-464-0x00007FFEFC3F0000-0x00007FFEFC426000-memory.dmp
                                                      Download

                                                      memory/3928-990-0x00007FFF0EFD0000-0x00007FFF0EFF5000-memory.dmp
                                                      Download

                                                      memory/3928-989-0x00007FFF0E9F0000-0x00007FFF0ECB1000-memory.dmp
                                                      Download

                                                      memory/3928-292-0x00007FFF02420000-0x00007FFF02AFE000-memory.dmp
                                                      Download

                                                      memory/3928-1290-0x00007FFEF3020000-0x00007FFEF306E000-memory.dmp
                                                      Download

                                                      memory/3928-1317-0x00007FFEF06F0000-0x00007FFEF090B000-memory.dmp
                                                      Download

                                                      memory/3928-386-0x00007FFF00DB0000-0x00007FFF00E94000-memory.dmp
                                                      Download

                                                      memory/3928-1330-0x000001CE1B000000-0x000001CE1B010000-memory.dmp
                                                      Download

                                                      memory/3928-1329-0x000001CE1AFF0000-0x000001CE1B000000-memory.dmp
                                                      Download

                                                      memory/3928-1332-0x000001CE1B990000-0x000001CE1B9A0000-memory.dmp
                                                      Download

                                                      memory/3928-1331-0x000001CE1B980000-0x000001CE1B990000-memory.dmp
                                                      Download

                                                      memory/3928-1328-0x000001CE1AFE0000-0x000001CE1AFF0000-memory.dmp
                                                      Download

                                                      memory/3928-1327-0x000001CE1AFD0000-0x000001CE1AFE0000-memory.dmp
                                                      Download

                                                      memory/3928-1338-0x00007FFEF8180000-0x00007FFEF819A000-memory.dmp
                                                      Download

                                                      memory/3928-1339-0x00007FFEF37B0000-0x00007FFEF3807000-memory.dmp
                                                      Download

                                                      memory/3928-387-0x00007FFF08800000-0x00007FFF0881C000-memory.dmp
                                                      Download

                                                      memory/3928-1492-0x00007FFEF3020000-0x00007FFEF306E000-memory.dmp
                                                      Download

                                                      memory/3928-1539-0x00007FFF0E9F0000-0x00007FFF0ECB1000-memory.dmp
                                                      Download

                                                      memory/3928-1540-0x00007FFF0EFD0000-0x00007FFF0EFF5000-memory.dmp
                                                      Download

                                                      memory/3928-1532-0x00007FFF02420000-0x00007FFF02AFE000-memory.dmp
                                                      Download

                                                      memory/3928-1567-0x00007FFEF06F0000-0x00007FFEF090B000-memory.dmp
                                                      Download

                                                      memory/3928-1568-0x00007FFEDD390000-0x00007FFEDE7B0000-memory.dmp
                                                      Download

                                                      memory/3928-388-0x00007FFF006C0000-0x00007FFF00BEF000-memory.dmp
                                                      Download

                                                      memory/3928-389-0x00007FFEFF2C0000-0x00007FFEFF2FE000-memory.dmp
                                                      Download

                                                      memory/3928-383-0x00007FFF0E7D0000-0x00007FFF0E920000-memory.dmp
                                                      Download

                                                      memory/3928-381-0x00007FFF0E920000-0x00007FFF0E956000-memory.dmp
                                                      Download

                                                      memory/3928-382-0x00007FFEFF340000-0x00007FFEFF366000-memory.dmp
                                                      Download

                                                      memory/3928-375-0x00007FFF0F5F0000-0x00007FFF0F5FF000-memory.dmp
                                                      Download

                                                      memory/3928-376-0x00007FFF0E7A0000-0x00007FFF0E7AB000-memory.dmp
                                                      Download

                                                      memory/3928-379-0x00007FFF01300000-0x00007FFF01A0C000-memory.dmp
                                                      Download

                                                      memory/3928-380-0x00007FFEFF370000-0x00007FFEFF42D000-memory.dmp
                                                      Download

                                                      memory/3928-377-0x00007FFEFF430000-0x00007FFEFF46E000-memory.dmp
                                                      Download

                                                      memory/3928-378-0x00007FFF0F300000-0x00007FFF0F314000-memory.dmp
                                                      Download

                                                      memory/3928-374-0x00007FFF0EFC0000-0x00007FFF0EFCD000-memory.dmp
                                                      Download

                                                      memory/3928-372-0x00007FFF0EFD0000-0x00007FFF0EFF5000-memory.dmp
                                                      Download

                                                      memory/3928-373-0x00007FFEFF470000-0x00007FFEFF6DA000-memory.dmp
                                                      Download

                                                      memory/3928-371-0x00007FFF006C0000-0x00007FFF00BEF000-memory.dmp
                                                      Download

                                                      memory/3928-369-0x00007FFF0E9F0000-0x00007FFF0ECB1000-memory.dmp
                                                      Download

                                                      memory/3928-370-0x00007FFF00DB0000-0x00007FFF00E94000-memory.dmp
                                                      Download

                                                      memory/3928-368-0x00007FFF0F3B0000-0x00007FFF0F3CA000-memory.dmp
                                                      Download

                                                      memory/3928-366-0x00007FFF0E920000-0x00007FFF0E956000-memory.dmp
                                                      Download

                                                      memory/3928-367-0x00007FFF0E7D0000-0x00007FFF0E920000-memory.dmp
                                                      Download

                                                      memory/3928-365-0x00007FFF14AE0000-0x00007FFF14AFA000-memory.dmp
                                                      Download

                                                      memory/3928-364-0x00007FFF01300000-0x00007FFF01A0C000-memory.dmp
                                                      Download

                                                      memory/3928-363-0x00007FFF0F300000-0x00007FFF0F314000-memory.dmp
                                                      Download

                                                      memory/3928-360-0x00007FFF02420000-0x00007FFF02AFE000-memory.dmp
                                                      Download

                                                      memory/3928-361-0x00007FFF10680000-0x00007FFF106AA000-memory.dmp
                                                      Download

                                                      memory/3928-362-0x00007FFF0F5F0000-0x00007FFF0F5FF000-memory.dmp
                                                      Download

                                                      memory/3928-359-0x00007FFF10190000-0x00007FFF1019D000-memory.dmp
                                                      Download

                                                      memory/3928-358-0x00007FFF0EFD0000-0x00007FFF0EFF5000-memory.dmp
                                                      Download

                                                      memory/3928-357-0x00007FFF0E9F0000-0x00007FFF0ECB1000-memory.dmp
                                                      Download

                                                      memory/3928-356-0x00007FFF0F3B0000-0x00007FFF0F3CA000-memory.dmp
                                                      Download