Analysis
- max time kernel
150s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
12/08/2026, 11:24
Behavioral task
behavioral1
Sample
BarkFart.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
BarkFart.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
barkfart.pyc
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
barkfart.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target BarkFart.exe
- Size 40.4MB
- Sample260812-nh8ppswake
- SHA256 4d992a10c4335e3aa63feaf0ab21d1e0dabee54ca155120fd3f67a4e507858c2
- MD5 65fb68e2057b9b567223755b114cd4e9
- SHA1 4244952ee35032ac589e4980f371bddb6ae83cb8
- SHA512 bfa84a2d862c97bb54b8281329d9a9e9015826ac84d4dd43441b4cfab6189a4876759a322e3a2d18747e0caead9083edc423bcbf197a440480667d6920418b31
- SSDEEP 786432:/budd2G4TLcNOwQshW1xP16RgAJKvuToWAGWAjQs6PRpfwg18tvloSAZpW/:/0OTIAwQsw1xP1jA80oZgQs6bfRso1ZM
- TLSH T1C29733C31BA009A1FA9EE135DAD34A7BA7F230305E21C90F574987E11E732D99D76B60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 50 IoCs
pid Process 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe 3732 BarkFart.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 5684 wrote to memory of 3732 5684 BarkFart.exe 91
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\VCRUNTIME140.dll
- Size 117KB
- SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
- MD5 32da96115c9d783a0769312c0482a62d
- SHA1 2ea840a5faa87a2fe8d7e5cb4367f2418077d66b
- SHA512 616c78b4a24761d4640ae2377b873f7779322ef7bc26f8de7da0d880b227c577ed6f5ed794fc733468477b2fcdb7916def250e5dc63e79257616f99768419087
- SSDEEP 1536:Z9TXF5YXWbj8qr51XlN+dULTCe1IGhKWyxLiyaXYaNxoecbdhUoaLjTz164zEd:ZEnsvReGsWyxLizXFkecbd1aPTzW
- TLSH T10DC38C8572A002FBD16AC274C1A36A17FB75B94487B0A7CF03B58A650F53BE09E3D356
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\VCRUNTIME140_1.dll
- Size 48KB
- SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
- MD5 c0c0b4c611561f94798b62eb43097722
- SHA1 523f515eed3af6d50e57a3eaeb906f4ccc1865fe
- SHA512 35db454dbcc7ed89842c0440b92ce0b0b0db41dbd5432a36a0b7e1eddf51704b1f0d6cff5e3a3b0c3ff5db3d8632fed000471180ad72e39d8dbe68a757ccdfb0
- SSDEEP 768:vzzO6ujT3MbR3v0Cz6Sz5q83ywug1HDV9zxfYbK9z:mq/oMx3hXHDnzxfYiz
- TLSH T1AE236BA453784486D4AB99B0C0DAEE577D7CFA964B10928F0BA0D15C1F637D0EB3D21B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\_bz2.pyd
- Size 85KB
- SHA256 a4be36fffeefa8b24c1234d548da8f05558aba53c2ea7d1d2614776eaad8fbf4
- MD5 a0946ac3236b70d27de6046ccc467977
- SHA1 84f2aa56e58849cf30e632e7eaab4901a681f08c
- SHA512 02429781f017b534918657e5c152ea022b52bcddd15ecca7f8b4629940dd4367a09af4d86a1f05d946ca97f2709718b136003693088c480d9b791e4d18361174
- SSDEEP 1536:vZAVNz7DkEvkmFfR/l/kM4KPkM/gg8IWRbG3II13VAyvcvR9qfIk2:vGVNzUERn9R4KRg7NlSII13Vk
- TLSH T1A2838E96F3B552B6F59B91B886840793F730BB860750A3AFF14882853F13BD06E5C369
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\_ctypes.pyd
- Size 139KB
- SHA256 f8a9f7831e81b2bfba12456e589f8198114f24986bd527ac231a844565afcddb
- MD5 03fb3055ed0c56155bbf030596726e03
- SHA1 fba03bbf844c08ccf20854d717a84fa62ab291fd
- SHA512 9ba8f50f75b37858b3d81d6f7323ae981ae21f57a9897955142bc53098ad74c8ae119e61ccd0bb5cd0071e092e8c2bbb5c146688e29f2cf7d1d3740f47ec9117
- SSDEEP 3072:HDpx2Lp7KRmFrkdOJWWcovIMzTF4FyxpEI1GPny:jpxCdK8r8WDvIMn+8xpx
- TLSH T160D37E4B736841A6DA678138C6739E47EBB1F452261087CF4264C99B1F633A2AF3F315
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\_lzma.pyd
- Size 157KB
- SHA256 f7ad11fbbb7aeaf7b6566a532a3243e3ae5f92bac480dbe5c2ef300fe2c1dabe
- MD5 1dfaf924b4576f551f6dfe3cae50b230
- SHA1 ef19846989f337e600c8f9ccacbd4276cc4d35f0
- SHA512 2df6a600ecd03de76f066f87a8dd13bf138a51f89fe745813d7a00418fb716c670cb04a9b5573d2b852fc8885acac8b960ba4c42d38fcb7e9a1d2aa2e84f90a9
- SSDEEP 3072:z+0m6DKDYtwipfxAbDcoAL+Uznfx9mNoV+dREOII1I1+ZgTT:iTCKDYvNoopYOyGOjeT
- TLSH T182F34C86B794F0D6F3628C78D6618F53E7F5781A0320929A01CC976D2B1FB759A2B313
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\_socket.pyd
- Size 85KB
- SHA256 ff3e97cd11bdc68798e5b3dcd5295d1efba179b7344142d50d066bbf1c2d79cd
- MD5 e60e2de0be0f2db133252f103e9b1f8d
- SHA1 686000117f1dc472ea8012a7368c936bd04ded08
- SHA512 49a002516235cec6870b0d08da61d3aac4440b4ae1437b7357fa493dfcba0b2212cbfefaf5833baa8b6f904f6439389ec3a6b53cd7faa718273ca0c3e00c38fe
- SSDEEP 1536:KcVunc70XTxn1egypxz7XP+N6wSzsGNesQAcsqIP4fYEI1GweyvcvR9YpfILO+:zEna2Dypxz7XPs6wSzsDsQ1s6fYEI1Gv
- TLSH T18D835A01AA6040F6EB72C176C6639E63FB74F5C11394A75F1066C65A1F33382BE3AB85
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\_tcl_data\encoding\cp1252.enc
- Size 1KB
- SHA256 741859cf238c3a63bbb20ec6ed51e46451372bb221cfff438297d261d0561c2e
- MD5 e9117326c06fee02c478027cb625c7d8
- SHA1 2ed4092d573289925a5b71625cf43cc82b901daf
- SHA512 d0a39bc41adc32f2f20b1a0ebad33bf48dfa6ed5cc1d8f92700cdd431db6c794c09d9f08bb5709b394acf54116c3a1e060e2abcc6b503e1501f8364d3eebcd52
- TLSH T13621362446A58CD8FA4F31D520ECFB70453B75F3D1DA629027B88308E789E8D0C897D9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\_tkinter.pyd
- Size 67KB
- SHA256 b2e1dbe2079b52535b60dbb72ee54ff0da145324afcdb6a7c915c61b8006758b
- MD5 e511128fe0207eeb774340f9b433340d
- SHA1 8cde9a9a61fa93d31725f6f88e8d0d55e9766554
- SHA512 2626a1f20718d807c09336f417dd583c8fe5e41afe9d0da9a9dad6488817296c16a91f1a2a7ad792eefd5271f379887068bc700cb8847b65ba6b532c9ee1ee7d
- SSDEEP 1536:hoTKqNdDaMTf3zrlU9oSTQtbgI1DSLpyvcvR9UfILEx:hoOKTlPSTQtbgI1DSLrq
- TLSH T144637D9FA764008ADEA7D534C5739B13E679FA521910834F01A4D38A1F333F2ABBA754
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\_wmi.pyd
- Size 39KB
- SHA256 5a7f3444f1c2f85fb5573bc330c1aea2c583912bb6f948ff81f8fd89a30e67be
- MD5 6fded560f9627954b2e46f0fdc9d92d8
- SHA1 6f359326458d37c266244b2ab674d3cce7a76e1c
- SHA512 f4785ef2f6b052deec4755102ec23c9e1fe7890cc4f852c70ac3fafa8b0fa25c17cdb95caee37f32fd8ff1e4e47a54f05e30b84dd40e8c19999a096e80e13bf2
- SSDEEP 768:7u2/EEqrVmjsRuJOQMVII13i0YyvcZRYT2Ip4xTxf1mlIJ2l:7TE9BEXJOQMVII13ilyvcvR9jfIk2
- TLSH T146038D89E6680093EB67CA70C5A5CE43F575F7932711878F32A581990F233D1EB3A279
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\_zstd.pyd
- Size 491KB
- SHA256 536a3b521a3c42d2827ece0ccfbe40b83a2fd96a0f5496cd60b943b10e1266d4
- MD5 b89f5d1345ef95f80ddcbe5b3e4e5bb3
- SHA1 2daee236009cc3efe02dc9bbbd8c6faa8ac56478
- SHA512 fc925424ad4bd8bdfae04b95fdadfcdbffcac76270997b4ce365be8a47d4c636b7e0b31e78d785a3dc6c9b2dd0f108aa716a92ee4f0506f3a0329e4a424b48e9
- SSDEEP 12288:X/WcJlzAwk9mH+65GRRfODoHWDTrWl93mFgR:X/WcJywk9mH+KGRRf2o2YR
- TLSH T1A5B48D43F29983EDE17BC4B8CF465A53FBB1780B1214565B93A5CB943F07B309A6A308
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\base_library.zip
- Size 1.3MB
- SHA256 74b5d1189fbce498cba1f58d5cab1cf5f1a9d00b51769ae67d00b75b46602db4
- MD5 5b03205da1302dc8f2bd0f2b6c5f4f0c
- SHA1 9bf6fcc2bd9976927d92dde2a109ace799d54525
- SHA512 df9cacb8b9e0710e1972d098288ecc5aceb463eb0e245968193d511e822aedd20f4fa47ab20b296b2c03a135f9b35638f1efd5a70a02e92259b6c9e7c149aba2
- SSDEEP 24576:HxLLllbhdJ5RpduUFvmRQeOdP2m2df63Fu:HdJ5RzuUFQ/S3E
- TLSH T1D0552AA1B9917867FEC9F37A35775A0CA715C0109B20D303B4A98DAC6FDF260AE158DC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\libffi-8.dll
- Size 38KB
- SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
- MD5 0f8e4992ca92baaf54cc0b43aaccce21
- SHA1 c7300975df267b1d6adcbac0ac93fd7b1ab49bd2
- SHA512 6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978
- SSDEEP 768:NiQfxQemQJNrPN+moyijAc5YiSyvkIPxWEqG:dfxIQvPkmoyijP7SytPxF
- TLSH T10B037C0B458418A4E657D53D97A64A2AC335B9240B60F2CB03D4C2BA3F6B7D6FB7C358
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\SDL2.dll
- Size 1.5MB
- SHA256 b37740a72a7a9706216df9f0134894bb7a850b356fd149398c67d874cbcfacb4
- MD5 34f609d1d268b45375488132be61e858
- SHA1 42c3057e68c8546df6c902155781bb1f7b808c11
- SHA512 105ea5439ec87943b78ccd6920977c8212d93fc740828f14e428618a6db4e425b3126a64f0c6dd434a76c4e6d4781d11ca0af4201808ea00644fd5824399438b
- SSDEEP 24576:SWnSPN8EL05SuQZ7MDFKTQ6G/BqBE3iQBt30o2Thzp:SOSmEL05xQZoIG/BUE3H30o
- TLSH T196759D4FB3B605A9C92740BAC287761BD376740827D15BDF2B540BEA2E33BE4157A360
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\base.cp314-win_amd64.pyd
- Size 30KB
- SHA256 9976a480dbd7ffcd1557a3a6a26d3c5a632faf0aaf1493686107b5b2ace07b9d
- MD5 f1d39e1bbd9e5ddeee32096d239f6a7d
- SHA1 fb1bcf4c39a556082ade089efb7ce43e01b17c11
- SHA512 23812fae0d9875ab805900bfece57d3ea0613aa73fec76fb33687a0066ccaec226a02c0da0d184ac66b1ad6fdf2227ccac22d51e55268daadfc5500f4c01a586
- SSDEEP 768:5ReXZXc7BLCP3Osil/LjH+mMgAnv3zUQ:5RqXc7kDU/LjHzAv3z
- TLSH T163E23C5823AB04A5F692007DC9235E97DE71F1201B6387DF4361C16A2F377DABA3EA41
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\bufferproxy.cp314-win_amd64.pyd
- Size 17KB
- SHA256 6e3ca0d592b5dc2e160937d78e62b813ae32bcb03438a17e349e276a2faf9a7b
- MD5 76af119abbe643f6d3e5f300b12e3f15
- SHA1 4dd5f6106029e48acd487a94b1258426867860b1
- SHA512 96e4a2f7f0814eeab11d97e1a4faefed71256e28ae2590664af1be2b952fce5ed3db126d9e8b6d583fb7275d6f1d507ed6d70c23519cb20a15cd1858a5f243fc
- SSDEEP 384:qOB4l3TGR7RdlPtlUGDEqUueGav2WLQ1q3Marix3Nl/d8CHjlEC:qdaHdNiSeFuWLR2/vZEC
- TLSH T1E282194962D48CE6E1315A3C89B30F95D2A2F526471193CF1264C7AE2F6BBD21A7E780
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\color.cp314-win_amd64.pyd
- Size 40KB
- SHA256 c31843681df0bf16d1bfc655fb5949fa08027c1ac83e0e566495e9aa27540bc6
- MD5 43d6dc57bfdf7a641d11de64724b85e7
- SHA1 673fbcad858142099ad5f4d81284485d9ab238c7
- SHA512 355405241d141890ba4567c91f2c34e25ddff5f11b145d9420b7e2f15e0cb6ac62536c740c33f048e45770cf05e55a99f1f246e1539e79e34f9fb8c654213b60
- SSDEEP 768:AxxOiwO1/wL6uLnt/DZ6Odss8zmsc//7KCXDIP:EO3OLuLJDZ6Av//7K4cP
- TLSH T1C6132B4A67990195E96384BCDD375D87CB80F120A70253EF5EA1C82E1E23BF6677FA40
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\constants.cp314-win_amd64.pyd
- Size 50KB
- SHA256 64a9a264a08557608c186293863ce3e95aa5dc4c236967fbfd43732b9fcfadf7
- MD5 3f5cfffd0f11800832ffdfadd77280c6
- SHA1 4b60e208ad15930536fceeaacfe5065462d4d555
- SHA512 22f0014a9f4d7f58ada1e03da1ff46c78904a4c83aea1a64343619dd2077ee3f3b1bb0130992156a16df73c6a9f9ebd674eb981347988a697be0ee4545256cab
- SSDEEP 1536:Ziq9k815/Mr2xTzr/+u6rtXfNL1i0sc7taNi:Zl5/3xbmbrh140sc7sNi
- TLSH T12A3392BDE38828F5CE28A5BCC2315327D07B7499269071AF5561E325DF3F0632EA0B46
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\display.cp314-win_amd64.pyd
- Size 48KB
- SHA256 ab639341fa0ba074e86b12e9740f2fa932d1e2d7f53c7556d0b7a8acc7194815
- MD5 b88a69d8fd6de6b3699dbe9b8718d0f6
- SHA1 f5936df81cc4f0161ddca1c4d7e24ca1c91e845b
- SHA512 10cd7c4473d6bba571e460ed9f0c08a3771a54ef7308557912ded744fe598cfc0c619ef6b43cc8f4cc799a9e7126e88e73bd962ce022b8e96607f1b48df68423
- SSDEEP 768:ly5p4JygP8+5hoG8FLEk8bzz4nZfVkwGq6xLj9qWMbssOUAVNDkaGb8lyarc7:sGdNyGvk8rwVSxLjoOxkJ8LA7
- TLSH T10C233A5572724099DE72997898332F53E6F0B4202B5193DF57B0C05E2F2B7E3B278A86
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\draw.cp314-win_amd64.pyd
- Size 66KB
- SHA256 2a3d3c8fd20322ad4ecf6669197cf14e568f970732694cdb4cadfdca01af968e
- MD5 2b99245e4a662b1f3650196ea5bb6f17
- SHA1 55ea0f3dba0b18388df3b636ab03bde2a5427cd0
- SHA512 e099bcd8d967f5e650ba7f3a67b7f5f96dc1a929e873cc3573f7f05befe3850dea2656044b900c3a976524fc87ef1e42201a2b536ae23c03e1b24d668efb0131
- SSDEEP 1536:IyAV6O6iyfzhcq4EGcegfyvBoVp88/RCk:IhXeJ4EGKUgp8KRC
- TLSH T179634902F29601D9CC27E978C8B62917E740B81A032556DF17908D9D1F3A7E2AE7F71B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\event.cp314-win_amd64.pyd
- Size 43KB
- SHA256 8aeb03a5001777f6c10e0cc1ad643e033f0ccd656e3068c4b415b2a9fabab1e5
- MD5 f10d737f9d6b7b9f0af249574e0e2b2e
- SHA1 502fbf8db8f4644815bccf5d88f03efacd9a81ec
- SHA512 0bbabcab0ec831ef0cb14e2963fbe2e136c0bf60af47941fb4b99021c0c06f131ac3ed84a794be514cf12629b334e9b864d03cc7f841deb4b3fdf387b96955cc
- SSDEEP 768:t/sUZ4KF60qMmRU83Z+g2o4cV/gsEKlWCZhL7wk0JpVngD94n2:PZ4KF6we+gd/llbrL8ge
- TLSH T102132A5643B800A5C636817DDD77588ACA73F4B697B082CF03B5DCEA1FA2AC3503A785
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\joystick.cp314-win_amd64.pyd
- Size 20KB
- SHA256 a5f54341c1a301b19cd953f1c902e7508c910f5e89ee3c197196b8c83c5fbb0c
- MD5 0455d4f1f2e815e03bcabdf5e95cc2fe
- SHA1 932efa8ab7480c7e4eba65ec8ef56e2103bd6668
- SHA512 e0e3fa29b921fffff1b2b5cfc40f456be7335c1adbd7e3dcb955e8725098761e90d34d21ec3fe5166ab030b5c42e0277dc9557c3e372b1a8cc6b88897d57e33b
- SSDEEP 384:PtGWPBI7ExcwNmBLuAd4mkw9EcecXyCGWjxz:PGIxctLr4Rw9E4GW
- TLSH T1AD92F939E34394AEEE22957CC8BB2E06A3F1F411272146DF0B794E9E0F1B3C555BA544
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\math.cp314-win_amd64.pyd
- Size 72KB
- SHA256 90fac5458d66ea8c6d7f0706dc3a537d9f83e5b54a6da70265af569ffa223ab8
- MD5 1501c28654eaf25326b5b582d2e0713f
- SHA1 fc9046b41a1b92a8b33cfd6802e3e7ad0c402cbb
- SHA512 9844ff60fd99fb2e6afa66c9f5369c528988e70a7b677fcd2bbb58b6450b5d7c2fed05f737b432c89bd4a4bdc34518b3bdc9473ce85ef41fff20d0ddb7ee1f60
- SSDEEP 1536:x30hRXe4+wqSCzjWaPV0lXk94mBz4XXULw45lnSYxm4k8rtFvHSRgXp8IOY+5:x4e4YSCztomLw45lSYx5AIL
- TLSH T151730805A24144E8EC1310B8862BAE93E721F0E1872157CF5BE9C51D1E5B7E25FBFAC6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\rect.cp314-win_amd64.pyd
- Size 70KB
- SHA256 19cfe725daf3696109bbfe58b37c8c10c1d117852164e97c60ad0335a13eada2
- MD5 f6e0c30dc3d7aca030c531abb801d800
- SHA1 e4f2d1e7a3cb978077f340ed57db58e38a5f2c15
- SHA512 72b102cebb3552356af3ec1eb837f1d271dd72ca1e52ea857193aff59ba01a65bbc36cd0867aee9284ab4a1ea6afe82b06e425712ffd5ddda2447bd8ef7838e9
- SSDEEP 1536:cSB1P/4tKSR2HU+tIAlTTELvqi6lFwtsc:vj/HU+YynlFVc
- TLSH T1E9633B6D62A650E0E412A47DD9B3AD53DBA1F4102B0587CF07B0C29E5F633D29BB7B42
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\rwobject.cp314-win_amd64.pyd
- Size 18KB
- SHA256 b3e21348dfe9c4c4c810cb040af09fd7ccd8069c415b0134862bc7f2548a3821
- MD5 f8e693b78ab14aff488d3f4d4b356ee3
- SHA1 5732dd42a805cf44df9db41853ed57fddc7a94d1
- SHA512 fbd8a10f8d4008df5ad5264334213f0924a2a10894ddf405b357d4ec39ac975e1bf65a029b770818ef0fe502e2a6330c41bfd0c3b6ec766951c30a2299846abc
- SSDEEP 384:EEQ2UUXPSbEeaiKgHMyOLS++jSIrke1fbvo54yBZmt:rGSSQMMjLNI9gxPm
- TLSH T1C4820819B248488AE923417CCD22BD8BF9A1F0156712A7DF4790C66F1F267E19E3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\surface.cp314-win_amd64.pyd
- Size 237KB
- SHA256 d767e9b20b408bd5897054146d7d241a4b185d12cc33b8fae91576713faec0a1
- MD5 6bcd71bb57dde740160f24053304e2d5
- SHA1 2593fce44ef96b9563d2578c9476f2570808f44d
- SHA512 ce3ef79ed32241ec0d80e82d5edf2fb0b7abcc31c5f06a62cee172e35de1118078424288dab64d0824c6716ad2b3248887c76099e9782cb2b38067f12cf2893b
- SSDEEP 3072:Hpk6Ah8fF0/+y2rVWxsxmoZhpCSdQAkc1ks0ogAmUQEEwmbLbcShq96EAdCMSlJ/:ajhEWiw5zlAnxP6RCzRDWkzknqXPCo
- TLSH T129343BA571A21ED6F403227C0E2B65A16154BD98038DEDF7E2E1807E6B533F1257CA3E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\surflock.cp314-win_amd64.pyd
- Size 10KB
- SHA256 798c460e1be55a2591286db1c3f8be7d0e68af164fa5111b3b45eb5be964630f
- MD5 69521418e586d74f21c40b740d5eda64
- SHA1 a4cacbd5952bde29ab967b08173c7ce8f88a7ec4
- SHA512 300890efbec11ebc14395c97853562deac436795f1fd043cccd7989843acd9830b0fb33bc799b26fd930a486b264ff9f10de63b45e541b97dc2a408fa86fa96d
- SSDEEP 192:Sy5S5qMt+syFg/oLVl+Wxyf6lfTlf/YB1j9sFbQ:15SssyQoLVIWe6lTlgB1jAb
- TLSH T1F7220A44B3508CEBF126467D88730E467DA5B5201B823BCF1361A85D3E777DAB23DA94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\pygame\window.cp314-win_amd64.pyd
- Size 30KB
- SHA256 f8afb69bcad3d29301d216c5a18a9b2b821ff0c2141d8241ea041a409f3299fc
- MD5 98d03adcf0ded93b5a712104da59b575
- SHA1 539e4720f775a45f40c56b7f05aa147c1da71bc5
- SHA512 17ad5672c2cc4049bfb8fdc3f433ecec5809a274d8bf9180058bd3c4bbeda8d6bb9caf6ede47628d8eac2e2cf39219a5b03568a130302cef2551c0265daf5988
- SSDEEP 768:7jFDiOYGT2G+FSFckh8oAsL+c3DdcnvOs6gTDBg/jYF:7pDljfq0a7sL+c3DduOshTl0EF
- TLSH T116E2F75A625110C6EAB2D5BC69632F52D1E2F0706B1683CF077042CE2F7A3D7B2365CA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\python3.DLL
- Size 72KB
- SHA256 be1017ca4ca8ff837efbb343d5c8f739bd67bd1c43fb41068a539b19357c0213
- MD5 8d3d1ffbe3bb9539402e8bccb7fadcf8
- SHA1 904397a69e08c93fc2080a3cdbf6810bc40313fc
- SHA512 312fd7f95d2a76d9dd09336949d3b8ca9b53753a9f45da9d2fec128b2746f128fc1354693e0a995c1e1859a3d90497c8a4a8d4fedffc8bceee0392c456efc68a
- SSDEEP 768:IQlHwMvmhZpNVBBr2KyrGYpoQdFxxI4XngqMkf/tFd1WugwBByCsAKyEG+zMRKIU:xbTrnXngXMBEI1G0hyvcvR9NfIko
- TLSH T1C0734D5E6B54F8A2D6B629FC78D199CE242B12FC5F2984DFA47CD3D20D1A310A22734D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\python314.dll
- Size 6.4MB
- SHA256 1ac15e2224581fc678bbd17728b9aa538d47b891b72c76499ef07e54cd74f151
- MD5 5bc0adc1fed509f353832bde6b2add62
- SHA1 b2204b0bc93877fcd186d72fbe5006130aa0fb88
- SHA512 7b1e52aff81e5e79872d9a22c0218dd8fc46e99cb33adb69d277ea07b21eee0399f0a6a72d190b91f26a96e69aa63a23a06384b9d93db44355f3eb1d7f727650
- SSDEEP 98304:YvvKimE4QWS5v+kr/YFboltx9E8rDvQHDMiE2hx0S:qdcQWS5v+kLMolGmidx0S
- TLSH T107668D26737505A5D8BB8076C9034647DBB1BC00AB30D34B49A4B6DA3F733635BAEB85
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\tcl86t.dll
- Size 1.8MB
- SHA256 4b79f9cfa40821eed283ee44519420607fdd669db185e4d1872910414f5ea775
- MD5 007926a0a08502f66a0be9b422ba83f0
- SHA1 bae9cce7acc4021b2bb153664c100dd135aadc45
- SHA512 5482fdd4da53dc604cf7ae1c2d416d2194552d1080183e02580e4a74fe6af516015d35cda9af52d84f7768ed8054c551c910d97b6d4805b35c1e79f8c734ead9
- SSDEEP 49152:80W4UbmMRbf0TIWn5SDf/qxF+PJJHmkY7C4wJreAJG4:RBUqMR7i6x9T+4
- TLSH T1A5859E1BE76410ACD8ABD1BCC227E60BDFF1B559136066DB51A08B912F23FE1277A305
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\tk86t.dll
- Size 1.5MB
- SHA256 e66f19c10278844fed1e01b4b23a996626843ee764f0418297edfaa12ff543b4
- MD5 39be5ee049ed3f58f46b5d6ea3bce02f
- SHA1 be3f73bae25fe62e846334d5c8ab107ef6d3ba98
- SHA512 9c67d0639fab8e910aadf488f6f0c1eecf669f8ac963ef37843e910b2766068b43db7523dca2b2ac399729b064d0a75060acf756242439b6bb3e14e51684cf9d
- SSDEEP 49152:J76DXYkBMhchLNqaJvARxr9DrTwylL1y62BEqkEH0CF2MT2JTBKa8SERGezfH:WQchLNqaJvARxr9DrTwylL1y5BEq8JTA
- TLSH T17E755A06B261C198C66FA134C91796BAE7F17C05931057DB72A0BE697F33BE2673A304
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\ucrtbase.dll
- Size 1.3MB
- SHA256 3088326cb0fe5b5646e02c7b2de71ae363fcd26a0000cf32209c8bed05a7a866
- MD5 04e1eb90abb78c5fa6b440a6f17ddddb
- SHA1 aef1c0b9fdf7aaa115e3c0a285c8ca8603f3852d
- SHA512 d9ba76a2bec20eba80481ecdb5616061a45f689d41cfdd8957287675a30a60ca3e997589d4312aba7c148735477a0b432f42fe7f7b8d2f7c2cb1d3aea8f56d86
- SSDEEP 24576:LQPuhXyFmugCw3wUAceM0Xps3pRzgTuJ6b1yats799SmxvSZX0ypKpoPn:LQWhXyFm7Cw3w3ccXpezaM9tp0
- TLSH T1D155AE2266AD01E9C5BFD13DC65B4506E9B2781503709ACB03E94E792E3BBF5077B321
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI56842\zlib1.dll
- Size 144KB
- SHA256 17e85535ff06251fe7e4e454eac519a617ffda70fbaa407733ec8de314f66a46
- MD5 123b4635f88df7072f9422c23d35a3d4
- SHA1 5955e7f286fc2f79cbbe87140940454d962ebae6
- SHA512 3d64081d1fa1df49903c403dade53193faacd8ef2ec275300d9d0bcc760723d6c12a7f32a458ea73676f427626e45b02915f8d9241e5b25c0bf273ec5091aa21
- SSDEEP 3072:EvEO6FnGGVV1m4dkRR5Th2UgvGxbOUJCf:EsVD+RrFgvi7J
- TLSH T1C1E38D9BA6A214BDC677817042E6C7B6F932B8214B309DEF5098D7701B12F906B197FC
- MD5 SHA1 SHA512 SSDEEP TLSH