dc195e1ddab8c1d6bd6fe12ae7a6755b4af0e9a47bbdb5584df13a235dfcf980

Analysis

user interaction
yes
max time kernel
389s
max time network
392s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 20:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Nuovo Documento di testo.txt
Size 140B
Sample260930-ytmlqaha86
SHA256 dc195e1ddab8c1d6bd6fe12ae7a6755b4af0e9a47bbdb5584df13a235dfcf980
MD5 0b5f35ac202d9b796f260e94111e7bd5
SHA1 ddb3a83e3a93bc9a85079085ac2d009800ae1a99
SHA512 e7c32737f2e035a57a8124da721445feefe4d1b96d239f9a091e038d05c88c1697025120013ea7f86d5612c4b16ae325908da9df4113da070b8329235977907a
TLSH
T151C02B2314014BAC0FC28BF2CFE0491D79E886B8ED07ECB1000BAC35D520C2000C7C03
MD5 SHA1 SHA512 TLSH

Score

7^/10

discovery pyinstaller

Malware Config

Signatures

Executes dropped EXE 4 IoCs

pid	Process
5344	Discord Sniper.exe
1080	Discord Sniper.exe
3088	Discord Sniper.exe
1140	Discord Sniper.exe

Loads dropped DLL 58 IoCs

pid	Process
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1080	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe
1140	Discord Sniper.exe

Contacts third-party web service commonly abused for C2 1 TTPs 64 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
157	discord.com
160	discord.com
200	discord.com
133	discord.com
167	discord.com
208	discord.com
228	discord.com
243	discord.com
265	discord.com
132	discord.com
153	discord.com
206	discord.com
223	discord.com
261	discord.com
135	discord.com
143	discord.com
144	discord.com
166	discord.com
179	discord.com
213	discord.com
209	discord.com
210	discord.com
233	discord.com
142	discord.com
234	discord.com
183	discord.com
205	discord.com
269	discord.com
131	discord.com
140	discord.com
237	discord.com
241	discord.com
124	discord.com
170	discord.com
236	discord.com
245	discord.com
248	discord.com
168	discord.com
178	discord.com
221	discord.com
225	discord.com
136	discord.com
150	discord.com
162	discord.com
125	discord.com
158	discord.com
165	discord.com
182	discord.com
191	discord.com
230	discord.com
139	discord.com
154	discord.com
174	discord.com
193	discord.com
195	discord.com
259	discord.com
218	discord.com
146	discord.com
190	discord.com
207	discord.com
217	discord.com
306	discord.com
224	discord.com
187	discord.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Detects Pyinstaller 1 IoCs

pyinstaller

resource	yara_rule
behavioral1/files/0x00080000000246a1-287.dat	pyinstaller

Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Discord Sniper.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Discord Sniper.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Discord Sniper.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Discord Sniper.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5088	chrome.exe
3336	chrome.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{34CC010C-45FB-4E66-938A-118632262BE7}	chrome.exe

Suspicious behavior: EnumeratesProcesses 5 IoCs

pid	Process
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5124	chrome.exe
5124	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe

Suspicious use of AdjustPrivilegeToken 58 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5296	chrome.exe
Token: SeCreatePagefilePrivilege	5296	chrome.exe
Token: SeShutdownPrivilege	5296	chrome.exe
Token: SeCreatePagefilePrivilege	5296	chrome.exe
Token: SeShutdownPrivilege	5296	chrome.exe
Token: SeCreatePagefilePrivilege	5296	chrome.exe
Token: SeShutdownPrivilege	5296	chrome.exe
Token: SeCreatePagefilePrivilege	5296	chrome.exe
Token: SeShutdownPrivilege	5296	chrome.exe
Token: SeCreatePagefilePrivilege	5296	chrome.exe
Token: SeShutdownPrivilege	5296	chrome.exe
Token: SeCreatePagefilePrivilege	5296	chrome.exe
Token: SeShutdownPrivilege	5296	chrome.exe
Token: SeCreatePagefilePrivilege	5296	chrome.exe
Token: SeShutdownPrivilege	5296	chrome.exe
Token: SeCreatePagefilePrivilege	5296	chrome.exe
Token: SeShutdownPrivilege	5296	chrome.exe
Token: SeCreatePagefilePrivilege	5296	chrome.exe
Token: SeShutdownPrivilege	5296	chrome.exe
Token: SeCreatePagefilePrivilege	5296	chrome.exe
Token: SeShutdownPrivilege	5296	chrome.exe
Token: SeCreatePagefilePrivilege	5296	chrome.exe
Token: SeRestorePrivilege	4312	7zG.exe
Token: 35	4312	7zG.exe
Token: SeSecurityPrivilege	4312	7zG.exe
Token: SeSecurityPrivilege	4312	7zG.exe
Token: SeShutdownPrivilege	5124	chrome.exe
Token: SeCreatePagefilePrivilege	5124	chrome.exe
Token: SeShutdownPrivilege	5124	chrome.exe
Token: SeCreatePagefilePrivilege	5124	chrome.exe
Token: SeShutdownPrivilege	5124	chrome.exe
Token: SeCreatePagefilePrivilege	5124	chrome.exe
Token: SeShutdownPrivilege	5124	chrome.exe
Token: SeCreatePagefilePrivilege	5124	chrome.exe
Token: SeShutdownPrivilege	5124	chrome.exe
Token: SeCreatePagefilePrivilege	5124	chrome.exe
Token: SeShutdownPrivilege	5124	chrome.exe
Token: SeCreatePagefilePrivilege	5124	chrome.exe
Token: SeShutdownPrivilege	5124	chrome.exe
Token: SeCreatePagefilePrivilege	5124	chrome.exe
Token: SeShutdownPrivilege	5124	chrome.exe
Token: SeCreatePagefilePrivilege	5124	chrome.exe
Token: SeShutdownPrivilege	5124	chrome.exe
Token: SeCreatePagefilePrivilege	5124	chrome.exe
Token: SeShutdownPrivilege	5124	chrome.exe
Token: SeCreatePagefilePrivilege	5124	chrome.exe
Token: SeShutdownPrivilege	5124	chrome.exe
Token: SeCreatePagefilePrivilege	5124	chrome.exe
Token: SeShutdownPrivilege	5124	chrome.exe
Token: SeCreatePagefilePrivilege	5124	chrome.exe
Token: SeShutdownPrivilege	5124	chrome.exe
Token: SeCreatePagefilePrivilege	5124	chrome.exe
Token: SeShutdownPrivilege	5124	chrome.exe
Token: SeCreatePagefilePrivilege	5124	chrome.exe
Token: SeShutdownPrivilege	5124	chrome.exe
Token: SeCreatePagefilePrivilege	5124	chrome.exe
Token: SeShutdownPrivilege	5124	chrome.exe
Token: SeCreatePagefilePrivilege	5124	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
4312	7zG.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5296	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe
5124	chrome.exe

Suspicious use of WriteProcessMemory 42 IoCs

description	pid	Process	procid_target
PID 5296 wrote to memory of 1176	5296	chrome.exe	104
PID 5296 wrote to memory of 5088	5296	chrome.exe	106
PID 5296 wrote to memory of 5356	5296	chrome.exe	107
PID 5296 wrote to memory of 5356	5296	chrome.exe	107
PID 5296 wrote to memory of 1504	5296	chrome.exe	108
PID 5296 wrote to memory of 1504	5296	chrome.exe	108
PID 5296 wrote to memory of 3452	5296	chrome.exe	109
PID 5296 wrote to memory of 3452	5296	chrome.exe	109
PID 5296 wrote to memory of 4244	5296	chrome.exe	110
PID 5296 wrote to memory of 4244	5296	chrome.exe	110
PID 5296 wrote to memory of 1456	5296	chrome.exe	111
PID 5296 wrote to memory of 1456	5296	chrome.exe	111
PID 5296 wrote to memory of 684	5296	chrome.exe	112
PID 5296 wrote to memory of 684	5296	chrome.exe	112
PID 5296 wrote to memory of 2352	5296	chrome.exe	114
PID 5296 wrote to memory of 2352	5296	chrome.exe	114
PID 5296 wrote to memory of 4836	5296	chrome.exe	115
PID 5296 wrote to memory of 4752	5296	chrome.exe	116
PID 5344 wrote to memory of 1080	5344	Discord Sniper.exe	127
PID 3088 wrote to memory of 1140	3088	Discord Sniper.exe	137
PID 5124 wrote to memory of 5132	5124	chrome.exe	141
PID 5124 wrote to memory of 924	5124	chrome.exe	142
PID 5124 wrote to memory of 924	5124	chrome.exe	142
PID 5124 wrote to memory of 3336	5124	chrome.exe	143
PID 5124 wrote to memory of 1312	5124	chrome.exe	144
PID 5124 wrote to memory of 1312	5124	chrome.exe	144
PID 5124 wrote to memory of 5580	5124	chrome.exe	146
PID 5124 wrote to memory of 2076	5124	chrome.exe	147
PID 5124 wrote to memory of 5580	5124	chrome.exe	146
PID 5124 wrote to memory of 2076	5124	chrome.exe	147
PID 5124 wrote to memory of 5144	5124	chrome.exe	149
PID 5124 wrote to memory of 5144	5124	chrome.exe	149
PID 5124 wrote to memory of 5040	5124	chrome.exe	150
PID 5124 wrote to memory of 1988	5124	chrome.exe	153
PID 5124 wrote to memory of 1988	5124	chrome.exe	153
PID 5124 wrote to memory of 6112	5124	chrome.exe	154
PID 5124 wrote to memory of 6112	5124	chrome.exe	154
PID 5124 wrote to memory of 1080	5124	chrome.exe	155
PID 5124 wrote to memory of 1080	5124	chrome.exe	155
PID 5124 wrote to memory of 5624	5124	chrome.exe	156
PID 5124 wrote to memory of 5624	5124	chrome.exe	156
PID 5124 wrote to memory of 5196	5124	chrome.exe	157

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE "C:\Users\Admin\AppData\Local\Temp\Nuovo Documento di testo.txt"
1⤵
PID:2408

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffe5ba6c728,0x7ffe5ba6c734,0x7ffe5ba6c740
  2⤵
  PID:1176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1532,i,3638128136501855434,11424917000611932394,524288 --field-trial-handle=2088,i,10660398161561507042,1776898371205886767,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2200 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1720,i,1319618963146328465,6677587788421187076,262144 --field-trial-handle=2088,i,10660398161561507042,1776898371205886767,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2080 /prefetch:2
  2⤵
  PID:5356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2440,i,492741057723802322,13150153703986305342,524288 --field-trial-handle=2088,i,10660398161561507042,1776898371205886767,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2600 /prefetch:8
  2⤵
  PID:1504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3200,i,14860772418859378551,9006576961143115362,2097152 --field-trial-handle=2088,i,10660398161561507042,1776898371205886767,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:3452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3252,i,9655932441396475944,11699450316430305387,2097152 --field-trial-handle=2088,i,10660398161561507042,1776898371205886767,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:4244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4340,i,4716903736575218154,13026981316480862698,2097152 --field-trial-handle=2088,i,10660398161561507042,1776898371205886767,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4356 /prefetch:2
  2⤵
  PID:1456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4648,i,14984686051039777511,9885479244804158235,2097152 --field-trial-handle=2088,i,10660398161561507042,1776898371205886767,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4764 /prefetch:1
  2⤵
  PID:684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4784,i,2947589695081305746,124224583258961337,2097152 --field-trial-handle=2088,i,10660398161561507042,1776898371205886767,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4960 /prefetch:1
  2⤵
  PID:2352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5584,i,6729382896920190901,2965634546186918078,524288 --field-trial-handle=2088,i,10660398161561507042,1776898371205886767,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5596 /prefetch:8
  2⤵
  PID:4836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6296,i,11941401775862445924,1983231284566966704,524288 --field-trial-handle=2088,i,10660398161561507042,1776898371205886767,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6300 /prefetch:8
  2⤵
  PID:4752

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3576

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4888

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1628

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Desktop\Discord.Sniper\" -ad -an -ai#7zMap1622:86:7zEvent23225
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:4312

C:\Users\Admin\Desktop\Discord.Sniper\Discord Sniper.exe
"C:\Users\Admin\Desktop\Discord.Sniper\Discord Sniper.exe"
1⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5344
- C:\Users\Admin\Desktop\Discord.Sniper\Discord Sniper.exe
  "C:\Users\Admin\Desktop\Discord.Sniper\Discord Sniper.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Reads the TCP/IP host and domain name from the registry
  PID:1080

C:\Users\Admin\Desktop\Discord.Sniper\Discord Sniper.exe
"C:\Users\Admin\Desktop\Discord.Sniper\Discord Sniper.exe"
1⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3088
- C:\Users\Admin\Desktop\Discord.Sniper\Discord Sniper.exe
  "C:\Users\Admin\Desktop\Discord.Sniper\Discord Sniper.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Reads the TCP/IP host and domain name from the registry
  PID:1140

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffe5ba6c728,0x7ffe5ba6c734,0x7ffe5ba6c740
  2⤵
  PID:5132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1704,i,17740681642013786974,8255294412160483176,262144 --field-trial-handle=2000,i,17090813393107685843,13990810636389391094,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=1996 /prefetch:2
  2⤵
  PID:924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2244,i,9315550118304672677,585024442584610096,524288 --field-trial-handle=2000,i,17090813393107685843,13990810636389391094,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=2528 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2340,i,5666221256672371717,17229751244574311093,524288 --field-trial-handle=2000,i,17090813393107685843,13990810636389391094,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=2536 /prefetch:8
  2⤵
  PID:1312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3232,i,16665806530890436014,10652656226544348172,2097152 --field-trial-handle=2000,i,17090813393107685843,13990810636389391094,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:5580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3236,i,13735315982821460661,14224896574873063291,2097152 --field-trial-handle=2000,i,17090813393107685843,13990810636389391094,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:2076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4456,i,15912566613803713413,16571161203598910316,2097152 --field-trial-handle=2000,i,17090813393107685843,13990810636389391094,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=4580 /prefetch:1
  2⤵
  PID:5144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5296,i,16831077264954338693,9722627689005506964,524288 --field-trial-handle=2000,i,17090813393107685843,13990810636389391094,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=5308 /prefetch:8
  2⤵
  PID:5040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5500,i,11664432487151186739,12368217102788477867,2097152 --field-trial-handle=2000,i,17090813393107685843,13990810636389391094,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=5356 /prefetch:1
  2⤵
  PID:1988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5988,i,13702486404117367341,13387878541465675597,2097152 --field-trial-handle=2000,i,17090813393107685843,13990810636389391094,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=5956 /prefetch:1
  2⤵
  PID:6112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=6016,i,14906187426476028092,2933678923047493739,2097152 --field-trial-handle=2000,i,17090813393107685843,13990810636389391094,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=6124 /prefetch:1
  2⤵
  PID:1080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3248,i,5387051660261025685,16520633857856573241,524288 --field-trial-handle=2000,i,17090813393107685843,13990810636389391094,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=3416 /prefetch:8
  2⤵
  PID:5624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3264,i,4767488145713639263,17530124262337802179,524288 --field-trial-handle=2000,i,17090813393107685843,13990810636389391094,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=5628 /prefetch:8
  2⤵
  - Modifies registry class
  PID:5196

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5740

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1308

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 d8069b59ba1cdc110cde92cdc89d02bd5f23941139d79e9234b63999b8afe6ef
MD5 6a6334d09d728c10bd68a9cb97982ddf
SHA1 f0d659e2a7c1287d00edaeb72438749e469f1890
SHA512 056656c470f3886a74d716bf81c288160bf3ac69376a27708f4da95384a73316cb4b9d2af34dba26cad840e42650a59aecb6ae282426b99d8431e86b75a96feb
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 dc6a9a1a52c85e2fa11c5d387d1ed9b2082c852b763efb3960d7e0205717c3f9
MD5 cafbd7661a9bd5b94ef565c7af1a792a
SHA1 4e1b495d9a5cd8f182d338da207ad9f8331f9502
SHA512 f455b2b7c74ffc36098a84e340ccd7bb9c67d5caf7c776bf4bffa94a296f3469e3e8335cf61e423e79b07e7ef33c2e8c897c26a189126ac94bec102378434046
TLSH
T16EF0F9B5C921FC7718FD1B2D50544B47E745135B3681849F3A3D460D8F7863B468981C
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 f2511df3eca24037cae9006f328bb98cf1ed9a46e963ffe918e66695977b7798
MD5 3907c11fc77fa840115b87deb26952ee
SHA1 7ddbf9efb429ce763721eef5cada717cb9ea0f81
SHA512 da816a4745979afc5593e2d2343eca49ac2001dfaaf96712359655a6376ba65fe7d46884306e117b84d25d9c4649db52603261e0cb23b40ef2a6c65499aab951
TLSH
T11C31EBD17BA61154FB2102F71DD5294E75F0FD1E0403FE9A2642BA363E7378249616F4
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 85e9a1698b085cc2c9da02bc6845cdd982fa3c23e20ed51079203502ff5948d0
MD5 2c4d4f0893a18053e440953c4edaf63e
SHA1 96ac34a8f39048974a0a653334b2794286f33c62
SHA512 3213b5b5b879ef156535ee208e87273371dcefaac92701ad1355928712179aaa4ff285de885001245acc9f9dcbe574f62c5f7f28e81c6cdfab1e5566775e38f2
SSDEEP 48:YALlq6q1q1DmsDPJCs1Rs5XLsIfoKsDgmzs84snfsQdm3KsGKshmVzsOVqmkJgmd:Df++DmcpCNcjnFdmY7mFqmDmtLHmgmOZ
TLSH
T1EB918DF7C3E4967DC91196F4AB14AE1BCE2D0A14931C3C66C8E4AE4B93F2872D24174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 f2c6020aa8128ed93fff6f17357853bb9649ddadb70fae1ce6a7a9d893346745
MD5 02afc7cdc296be746d08b12d5a2ba7ab
SHA1 2744fb169d4fa2d2f7fc8c190d0ae3d5df105f77
SHA512 33c4ee92e40337ed80b8954321a6d45c1a8a0bb4f2b1a0a500d57407a2c84aa48554e239a6e0b44e5ecf46422ea75a2f0d8d030330037aa67d91e49bf664d35b
TLSH
T113219EE796BFB42B107E89F30D047C462AB9A432125268F4DBA7C26DF0C64FB2711066
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 ab0f5cd0eb9044fedc7eccff0953820b4fe52c153f76b071147b7aaad04ce38b
MD5 e5fd761908ec565f1ccfe95047a16dbb
SHA1 4eee6b9d307b846e32444defc718e184fc661ca6
SHA512 40550cbb54ac5780aa6bfaa215ca59ad3a8975fc07661e42d5bfab3fd8cad54002632d7a838b90c5757ed28b47b3abd625602ad20594b4552032c6fb0937d278
SSDEEP 192:XR1eB6r4wuv7GpAPRp2ZfS96Hsb+WNnOlv3c2DT2HeMzVyIsnAUgtaJ:XR1eBaKCUXdswE02P2Z8
TLSH
T1EE42A52AFE50797B5CEBC229EA617757D3F5102524C42E84EAFC893C11D76CC221B86B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 5df097922db7b0db4eff76bb28e0d721d72714e538583f78a88567ef6dae2c32
MD5 089176e10012565b006ea203709d2aa8
SHA1 a77c166844759690a39450711105bfee05010bd3
SHA512 03561308c2c0a1737af67ae6666c854f98c6e593bdea737571ebcce2538bd0d749f29c4c0b08ba0ca84173722efc54aec64061f57555e8280de93c31f9364a90
SSDEEP 192:bR1eB6r4uK5v7GTAPRp2ZorMS96H1Evb+WN0nnIQURIOIrIEd3c2ST2HeMNVyIsH:bR1eBVZC+Xj7sK90vkd+Xa2I2f8
TLSH
T1B652842AFA506A7B5CEBC229F9217756D3F5102564C42E88FEFC883C11D76DC221786B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 2402969cd2ec72ea72b513389c43205a9ee2bceca1c456ef576613e3544e19a0
MD5 ef2f6beced6ed991eb5f4b124485b70c
SHA1 13ae98461b417e18835295fc68f98db326a5bad0
SHA512 5adbe06b2aba408c8975b2dfc7f1c8c160dc3367ebb5f8a049421cc510b871c0310b3c4cd24506c3615f6972ff559c98cb7cd22bc47816248c6501f19779082b
SSDEEP 384:tyjCjRyjH7KxkXqKf/pUZNCgVLH2Hfgslqq7pLuLceSzyjDXODRyjr+ErU3J6HG2:Ie0r7KxkXqKf/pUZNCgVLH2HfgsMq7pw
TLSH
T1A0720A77BC0C9A7B0F94C68CD8167E4FEDB5024B65D9886443FA983503D5BDA110A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 bab03047d14f3052e8fef7dd24181ab8884e7c8d4d7258a847380f5d309ec21e
MD5 c333178a7f19b50fa0ef9dbfa7616afa
SHA1 b06eb2ea249374004f8b32ee343f871965553347
SHA512 e8e31aa040210a764d741bcf3b1f9cfc224ecbfb12579e14e9adf21d8cc73a548f20ecd79442743a6a406555fd1725ecd1712373fcacca41d5baacd87353f369
TLSH
T1FFD097A7E15200A0E7A707418762404E83306CC80880E09CD003353C8838AA7A112FB3
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5e604e.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe5e604e.TMP
Size 138B
SHA256 ef339a1051468e6d19566f1a949ad685ea7c94b1f7b77f91e5c747ab9b563ad4
MD5 9ec842ae51807cefa1c920e1cff19a12
SHA1 2cfb9ea3c0b0600618567ef4df83dc5b77f0534a
SHA512 b80bd4693bae6bbfff9a19d813aadcf2b67e1416d1260bfcf0e362a517b3ef6cdce924b13aa53fac7dcec59f01d7c1b30a59bd6daac5e037f54b667f20d290fb
TLSH
T167C02BB3E1400400CB1143410332800EC3222CCC4C85808CF01735281434E373102FA1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 cd202fdb77a872c98c56be7bdbbc9966545945b08207fb3402c8f3c47fa129d7
MD5 d7ca444d4c710915cb86d938308b477e
SHA1 b247c664fbb6e00f5d404ab7444d03077fc4e895
SHA512 07ffbc6c43f73442363648941b4ea6b97e14660ba6b1566f1574a4c5b5facf19d82bd6fc73b7dbf7c8ccfd6da305539fed417260c4182c35f5ca972b25ef6dcd
TLSH
T106B0120D82422310C00503B211A9A054BA909F34E41113D986E02D0198310B25137119
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d8d7.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58d8d7.TMP
Size 96B
SHA256 2a8e8a1169dc38311a876ec5b88d0d2b70db3482918cb2fa9de526bff51194de
MD5 ae5af4e295e63567eb2b271c538534d0
SHA1 06015da068e069071bd4053c12836930085e12db
SHA512 0462b0851196d621ac972022eaca833bf6a9359431770b0edf878c61c970cbdf097b049904bad58b61b75b611c009cbe05ec99c9995f00b854d742cd20d54ae1
TLSH
T19CB00256C222AE13E08343B527D5D5DCB161DF29C6035213D3E0AA66FD356714D26160
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 265KB
SHA256 38ebbf2abe0e23a813b52d70ab8a5149952af8e010e96bdd77495e2bd39ca772
MD5 3ed1fa9036ecec5df1e5ad8077d3a4e7
SHA1 546bca8c2098862f9607a4659fbf71cf71ccc5ee
SHA512 5451c8dbf31ca2cc8a2f255d2d437faf2dc56188ecc8b20458ecae4dd3285136ac9a9d6cd06895c0c6a8531645e1bb614a091aa358db0b2152e2b3ca710f6059
SSDEEP 6144:Zg+Dvz0p3IGzzZDTM+hFD+7t56OD9ZfSAppr1:e+fM4GRPMyFSXD9ZfS4n
TLSH
T17844123669959C7780BDE150E46FE128DE38C9CF42EA6B0A44465F8AD2AFC4E0353D37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 265KB
SHA256 9925c428c249f9ef885342d045972ec2c2bf4724ff4d222228deb190424c8871
MD5 b2ab77440a001ab318743ea816ec23ce
SHA1 96907f95a941529216dc787e4ba6e1d6274e0a6c
SHA512 d60ad812536f4bc8db3972ab15c88f6d2ca4296d1cd264aa8e894f5e171ac7693d0669516dad73a543c9a919cd5d92ee64a17e8ad377a4281dca18293254a513
SSDEEP 6144:ZR+Dvz0p3IGzzZDTM+hFD+7t56OD9ZfSAppr1:r+fM4GRPMyFSXD9ZfS4n
TLSH
T1134412366A959C7780BDE150E46FE124DE38C9CF42EA6B0A44465F8AD2AFC4E0353D37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 139KB
SHA256 b94d787de40fa8c57a0ddad8d0b3d9c022ec34bbfef2a6358ddfb662da71c365
MD5 a595df337568a0c27aa1fc011f921cf8
SHA1 9f1d85d8595487ea53fb922d4a16ea7c0fb2499c
SHA512 bc9544464137be46d6ac6bbe192d4e36f360aa85aaa2686782edb6969019cc87329324206773763c9b4e0c033508830d52d5fe20e3d4173aa9b4516e08866938
SSDEEP 3072:JoRBy6AztpvzHUpwjaRPIGzZvF3d5ZDTa:JA+Dvz0p3IGzzZDTa
TLSH
T167E3133D2CA65D63505AD070E87FB43D963CC24F42F6AF0598526B56C7AA88B0347C3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 4a6059a01beb41aecd0ae490f768454d96609fb8601c17762711f12575595c50
MD5 23df4c4462c74570a87b8e8f5d0d5879
SHA1 c26c7f11a93d88b82a4cacdae31b547fddcb5876
SHA512 22f375fae1551e570764f1fe7a875e1f694988b6b39056377031d5bed1e312285d65aad50eea65826dcdde07e979a5b010d1318bf864885d363017696872f301
SSDEEP 3072:UC+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gB:UC+hFD+7t56OD9ZfSApprB
TLSH
T117D31232AA91D8BBC9BC6141B157A300DE76ACED45DE3A09444A5F8EE05FD4C07B3A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

INSTALLER

Path C:\Users\Admin\AppData\Local\Temp\_MEI30882\customtkinter-5.2.2.dist-info\INSTALLER
Size 4B
SHA256 ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508
MD5 365c9bfeb7d89244f2ce01c1de44cb85
SHA1 d7a03141d5d6b1e88b6b59ef08b6681df212c599
SHA512 d220d322a4053d84130567d626a9f7bb2fb8f0b854da1621f001826dc61b0ed6d3f91793627e6f0ac2ac27aea2b986b6a7a63427f05fe004d8a2adfbdadc13c1
MD5 SHA1 SHA512

Submit Download

VCRUNTIME140.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\VCRUNTIME140.dll
Size 106KB
SHA256 69320f278d90efaaeb67e2a1b55e5b0543883125834c812c8d9c39676e0494fc
MD5 49c96cecda5c6c660a107d378fdfc3d4
SHA1 00149b7a66723e3f0310f139489fe172f818ca8e
SHA512 e09e072f3095379b0c921d41d6e64f4f1cd78400594a2317cfb5e5dca03dedb5a8239ed89905c9e967d1acb376b0585a35addf6648422c7ddb472ce38b1ba60d
SSDEEP 1536:BcghDMWyjXZZIzpdbJhKm6Kuzu8fsecbq8uOFQr+zMtY+zA:BVHyQNdbJAKuzRsecbq8uOFvyU
TLSH
T1E5B37C4672A442F7D0AAD174C2E38A47FB70B4418B60A3CF03B58A650F63BE19E3D359
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_bz2.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\_bz2.pyd
Size 82KB
SHA256 f6922afba2bb98f360dc587ad589b9d57acaaab34f3b0a4a02c6c6b5ceec3694
MD5 5340f9829f7a3b0f1e33909acb8b811f
SHA1 67301d1421305bfbb53a16c4525c954822203394
SHA512 28609842558f7932ba6f56659277e0d14969f64a84f8d76fdd129d3c75045bf2d1c67a6527a4d41c3dfccfd5d27fd8228ff58c3e3a7782032035c89d19a74ca5
SSDEEP 1536:mIADpz7cG978xaD+Y+Kg33Q728oz3hITCVc7SywPx6:gDpzfF1w3ABoz3hITCVcmx6
TLSH
T14F83AE93F3A085B5E41BA2B5A9A10357E331FD49039093EFB648835B2F13F917D6532A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_ctypes.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\_ctypes.pyd
Size 121KB
SHA256 23d56db3d4d6a7cbfef87039d80f0c811cfb48edfe4f16d02b0e6c2f292f48ce
MD5 6297caacf611f05f2755ceb80f3950cd
SHA1 a97e579ccf0afc7ce9c8154a8e4a27e00a08d577
SHA512 0001605cb3737c0642ce93996c0e1b496ce41d4dd9434cd739f0af9e820353b0d4201913e88acb107a527c434895a4f1c51c59353bc7f2f1de8b2d6ee9738ce0
SSDEEP 3072:6nNg11B4NdZAW9vOqc5Sf/Ed4hCPbdu1pFVITLPgtx0:Ay1Eq7If/EfOU
TLSH
T1ACC36C1B339410AAEBA3417DC5B36E07DBB1B45A075087CF12A4C69A2F637936D6F312
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_lzma.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\_lzma.pyd
Size 155KB
SHA256 dc00289ddff9aa52a7aada1bc2d3917ffb452fb752fa355a65c579c8a6de69ce
MD5 97239f95d9ac3efa492b67f02070998e
SHA1 74439be283b0167dda4213d9635b2b09318a0e8e
SHA512 fe8df1e7f66b63f0eabd020815f036cde35eb51bcf0b783565937b631d5bf84b5ba13af1fae4504deee33f6584fa682e7c81a2d691e0eaa25ba3cff14b0b2cdb
SSDEEP 3072:MuKEEwtJBoIy5ywDrNznfB9mNoQXugVh/t4xPhITZ1qnqxv:MuKU/o/dX1pYOQxvKP5K
TLSH
T123F33992A394F4E5F7228C78D6624F13D7F678490310929A02CCC36D2B1FB719A2E727
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-console-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-core-console-l1-1-0.dll
Size 22KB
SHA256 ce71ceb1266f3b83218607ef482b6c9628319aa189c10d8b67b87fc23bff4021
MD5 f34e5ae8c9ff5a9a467fa79a3a2d10e0
SHA1 34ee716b96bb7f3a8fdf38374a14373e298732ae
SHA512 d521cd6da2851d0a95e62bd443edb247f5ea60439c24f12c83ad0d6acaa86d7c9f8c89246cf3cf8f857c113b0e7b22ad7fe02eb03618f079fad6905917811890
SSDEEP 192:qyOEMLWLhWVca8LxydkeR+biMAAUYX01k9z3AYZQeS:qyoWLhWVcaGAOiMgYR9zhKeS
TLSH
T118A23AC34FB89102FD9AAD705698E5533C3DBBC71D60A96136D5F11828E33D5AB0423E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-datetime-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-core-datetime-l1-1-0.dll
Size 22KB
SHA256 39e45f1c3beb47bfbae49f4734fe4ef2a7becf9ae020a360190527a2a78d6b5c
MD5 479e11b5acdacfaab3dc1d39607c3d24
SHA1 4e530f42006d98bc9765faebd6932ae1b86bc4b1
SHA512 846417c434bcfa95fe28384c1a5d83a644341e76c4dfccefe6e9dd90d52869b50ba9ee7ee249b6fcbeb6bc50e9f3d143ee375f356de174560d61a48c72c11f27
SSDEEP 192:cdWLhWlVca8Lxyf7LRroihrSadZvJ7nkU34DcX01k9z3APHwgz:YWLhWzcaGAf7pofaDvtnkcDR9zgHwc
TLSH
T176A25D87577CA003FE9B6EB0A295EA437C3C6BD71D60945611E4F1581CA37CAEA2432E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-debug-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-core-debug-l1-1-0.dll
Size 22KB
SHA256 b13f30d6758370c62d34ffcdaa2c612379714f662a03423f5196018e950b55a2
MD5 c3f55e39879921f2e096d34a0de919d4
SHA1 f69af43a6b0eaa813d725675eafee3edd072ec1a
SHA512 235fa62d5c1ab0cd1fc43e3ab567bebaf040eadd36309fbf9e7766f1cc4163579a98181e404f4d32d84cb9ef6a3a19e43c65860e55018c4d43cf3c5c4e8bf8c2
SSDEEP 192:InWLhWFKca8LxydkeR+bOfEdxP3NGmVX01k9z3AlLvjR5h:AWLhWFKcaGA+OKP3U0R9zYL15h
TLSH
T1E8A24B868B7CE082FD9F6E7051A8EA537C3CA7C71D90D95229D0E5481C933D5EB2063D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-errorhandling-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-core-errorhandling-l1-1-0.dll
Size 22KB
SHA256 78fca728689716dd63140682ed46efec9b223a801d206279479f7a7cb2eb5ffb
MD5 7cb034a815cc1674cdc237910f185fcc
SHA1 5a76919a4e970fd551ca7a80c5ff9edee81277f2
SHA512 dca6c551e994a41c2d7b7168b033c66bac364b180c82a6f91c367655733587c10aaf221dd1e8b4c290b23ef4f9f626986e7ef16ae53c95654f2c81b4b977dec0
SSDEEP 192:W/mxD3OBWLhWTca8LxydkeR+kQTMW128xYqD0cSX01k9z3AmrIu4UNW:W/RBWLhWTcaGADQTfvDyR9z/r5W
TLSH
T1B8A24A864B7CA042FDDBADB01299EA833C3D67C74990C95515D4F55828E37CAEB20B3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-fibers-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-core-fibers-l1-1-0.dll
Size 22KB
SHA256 47b5399c3415a45a85c9ea1d27dae1a0f85396758ea0868b368a51a2d519a833
MD5 2f62e115da9bea67c1a85fb10d4aff97
SHA1 bdf03b39c48ac33773ad48bff4e25c2e953d119d
SHA512 b427b193ff12424752d50c9675747616b90a15ab497c9ab7afdac7926e0dc8461ca092eaf664259d3ca54f2687800d6cf246fb2793fef3d9bae2fb2eb7603b22
SSDEEP 192:bWLhWCca8LxydkeR+YDJcVsiIs/zp9JHX01k9z3Apzx5b64P:bWLhWCcaGARDJcVscFbR9zyx5b6E
TLSH
T14BA24BC2DB789042EA9B5E7052D8DA437C3CABC72C60D5A616C5F1481CE37C9EB1467E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-file-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-core-file-l1-1-0.dll
Size 26KB
SHA256 ff8533d321b4aa43d87bf81eb7d7f6e3228ce3a361fd2d6097f95c5f3c71533c
MD5 d3536118dbf4cc06d77ef8f7355a62c7
SHA1 e2e106eea48ac1864769e956d8a3cb6fe6dc34de
SHA512 822124950de7712a1a4ab84f7221faf61229d95504c561902c50a57c56d5803f5f2897b0e11e75587d435fd5b3896285e3a41867023842544e5b6768fa6233c0
SSDEEP 384:UJPvVraKWLhWQHcaGAoiD1oA9bFs0R9z/0G:UJPvVraHZxb2QZs49zF
TLSH
T164C20983DA74F24BFC8F9A3251A6D943A93843C70450D4861BD4A75C3CF73C6E3986A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-file-l1-2-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-core-file-l1-2-0.dll
Size 22KB
SHA256 a13b6701d753b8c006817b82809768bf9e950e83774764e706c689209079d1f1
MD5 b1db76fdea7646c67896d53313b6ef5c
SHA1 f3015cfd1a893e79aad343eb9cf25c6de20282b3
SHA512 8c45d1798695977fe182501f1e8c3c8318b372a6d4b389692bc82a20643510ee727d3cc6f9499f827d07a1f8a8db018f5fb5a8d9427d256363370602972dc2a8
SSDEEP 192:TDXUWLhW2ca8LxydkeR+KJxnqMAAUYX01k9z3AYZQe0GL25G:TzUWLhW2caGAnJYMgYR9zhKeDLB
TLSH
T1D0A24AC79B789002FA9AAE7062E8E6933C3C77D71D90C56616D8F1481C937D6EA0473E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-file-l2-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-core-file-l2-1-0.dll
Size 20KB
SHA256 f957a4c261506484b53534a9be8931c02ec1a349b3f431a858f8215cecfec3f7
MD5 50abf0a7ee67f00f247bada185a7661c
SHA1 0cddac9ac4db3bf10a11d4b79085ef9cb3fb84a1
SHA512 c2694bb5d103baff1264926a04d2f0fe156b8815a23c3748412a81cc307b71a9236a0e974b5549321014065e393d10228a0f0004df9ba677f03b5d244a64b528
SSDEEP 192:lC+WvhWRWYnO/VWQ4SWHvD480Hy5qnajsBkffy2:4+WvhWRUGEslECl
TLSH
T16A9229D29BACD083F9677D7012D0D443BD3DA7D72550806A1AD8E6AD2C833C1EB14B6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-handle-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-core-handle-l1-1-0.dll
Size 22KB
SHA256 14c0e30851a1bdbd71cbaed52cfb8fa0167fa344cd3e1f054ae35f4df02d9d0a
MD5 6541801231d43fd04a5c9afc2c11143f
SHA1 860f891978b25f3e595050596a9f90d53d28e4ee
SHA512 c8d6e55d8ec5a15674c47ddc8bd6245b31f58688d34733f4f8ccb4ce07b07f6aef196f13ed3db9d1ddc9a299949b6e727b33e2d7e658a4c346b6e82b049f5238
SSDEEP 192:G6WLhWDmca8LxydkeR+p+MftykQKgvkctX01k9z3A6oHM:G6WLhWDmcaGAc+MF/tGkeR9zNoHM
TLSH
T128A23AC28B3C9042FE9A6E705395EE53BD3CA7C71990D9A315C0E1581CA77C5AB2073E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-heap-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-core-heap-l1-1-0.dll
Size 22KB
SHA256 6ed6214d2f5c2086a222e1e306bc5989c4d5e33d1836ae843cd5e8d0432291c1
MD5 bbd2caab9b94aa50871cce23fd56b998
SHA1 ec4b9db16898785717f8b333b2017d0a8044e2dc
SHA512 4e725cd3a406876f9b3bd0d70cb3114d0a00448504d92fcca64161431fe7df13cd4fb6bcb7e60a8ed77198b36ed9cf03e90302c1ce88ccfbc2caae16c2b9d2a8
SSDEEP 384:OJxlkWLhWIcaGAf7pofln78ENXuifSR9zTz3v:o7bdeFjlfe9zff
TLSH
T1D3A24ACA8778E043FA4AAE7042A6CA537C3C67C7187095561AD4F0582CE77C5EB3572D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-interlocked-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-core-interlocked-l1-1-0.dll
Size 22KB
SHA256 ac1d52bdbac0abb81032b29e682c878be9aceb8daa2033ca045017c477f34149
MD5 047625244e6bd0116c2a87a491cd1bbd
SHA1 f8fb108192a987940a6e504b97867ea12530c694
SHA512 25ae086c15c9cff28d3a02fd50444c5a53f31aef8aeaf3925155ef720825e5b3624fc1610f7fced20d2ede5a827c1f213cfa6c8067c35dc22ee377c4e6bdcb67
SSDEEP 192:TEWLhWaca8LxydkeR+RiVIs/zp9JHX01k9z3ApzTU:4WLhWacaGAwivFbR9zyTU
TLSH
T19BA249C28BBC6043FAAA6E7052D8DA437C3C67C72C90D56616D5F14828D77D5EB2432E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-libraryloader-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-core-libraryloader-l1-1-0.dll
Size 22KB
SHA256 c9416ffc04527bb31a8ae53e29c59139e74b52a124c9b11d02892ae7c3e34348
MD5 b20ea39ebd998ea42efc6046dfbe235a
SHA1 c40818da90dbf2e277b060fd125aa66c1ec15795
SHA512 b041103c1851f03389ab907dc0765087ced4df5428830fef4cd05dbfe7bdd115d9c27c2f89fa96976d47464d86da2dbea6b9c7d4d00ea4713b87ac108092b2b0
SSDEEP 384:TTvuBL3B4WLhW2caGAf7pofJhtHeifX7R9zA8eeph:GBL3BtxbdeBF9zALeph
TLSH
T152A26CC3976CA143EADA6E7092A5CA43BC3C67C75C60D96A41D8E24C1CE73C5FA2076D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-localization-l1-2-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-core-localization-l1-2-0.dll
Size 22KB
SHA256 f50ec2db51f8ddf778fbe17877e565aec2c4ce648a4572fedb18adfe1ec1af79
MD5 14e03efb6f0ed726fbe7c7eb69642871
SHA1 7502541b1f495abdc44b19cb215db8cc2b329803
SHA512 52e778c0c00bf796483948e98d91a8e1b65bc683616279c690691dcb53c79c1ac2fd3e972adfbcdfe2faad5d6e4c15df136a43c222f77c66688e0e732431c9b4
SSDEEP 384:KnaOMw3zdp3bwjGzue9/0jCRrndbwWLhWpcaGAf7pofLpDuki+R9z7CJ:/OMwBprwjGzue9/0jCRrndbVwbdehJ9g
TLSH
T142A23B86D7A4E307F94DAE707057C9033C3967864861D99617E1FB1838F778AE6A036C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-memory-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-core-memory-l1-1-0.dll
Size 22KB
SHA256 0d9677fa13f0e59e506d996daa77eb18f83386aa29eb426fa04ac8f6476a1265
MD5 d51ae34929c5ba9090de03cdf0d38cd4
SHA1 6870b551d917223950c61f986870dc0c82577733
SHA512 e31c710eb8a0c84fab045b431206992ab43cc926bd3ec312371888821eed685bb466cb27aa91b75c3eb37041eb54c9f645e6b63292d5118a1ba2cb07baf17afe
SSDEEP 192:8TWLhWKca8LxydkeR+Ci1lUz5j4HsX01k9z3AAxxlHn41:8TWLhWKcaGAXiqR9z5xXnq
TLSH
T10EA25C8987BC9802FA8A5E705394DA577C3EA7C70CE0986516E4E2491CD37CED72067E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-namedpipe-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-core-namedpipe-l1-1-0.dll
Size 22KB
SHA256 b9feb7febbb4143bce245118741e8831c54d2c6baa65e878873674a287f1bbe7
MD5 532c20eade3409c2bd09ba3aa6fc1cd7
SHA1 d06b893b11639618eb8dbccc44d2a262625634a2
SHA512 6d63bc281119080c2cd41d3403ecadf45aeb41fb26738991aedcfa5a87548283f587ba69377bdbf87fd1c5e3436b3b8caae162fd1cac575ea0f1c8fbc213ed5f
SSDEEP 192:BVWLhWD0ca8LxydkeR+it0GxkQKgvkctX01k9z3A6oGH:BVWLhWD0caGAr2GCtGkeR9zNoGH
TLSH
T17AA23BD28B389082EC9F6EB052D4EA537C3C67CB1950D96256D5F4182CA33D5EB3463D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-processenvironment-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-core-processenvironment-l1-1-0.dll
Size 22KB
SHA256 4426162c54c2d9d87f9fbe2485307c6a21df8aec232d8dc8cbbbccdc8ee9a07e
MD5 8bab7abf2b5db1f356cbbbca63821698
SHA1 aa5292ff34fc288597e51f122aab76b91fa2450f
SHA512 f69e4acb72b314b5fc9d87af328e14113d4cf866f620c87b577accbcf66ee0952654756d72f4b3a428da1c1dcabf0065c6344b5e76a8878c3bbda40dea977b5a
SSDEEP 192:C+kFDUWLhWica8Lxyf7LRroihrS8jlkFjo+DF9X01k9z3A/HB4hdT5XX:uFoWLhWicaGAf7pof8jiJp9R9zCHBQNX
TLSH
T1C1A25AC29678A002FE9B6E7041D9EA77383CA7E31C50D16656D4F6182CE7B81F71872E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-processthreads-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-core-processthreads-l1-1-0.dll
Size 22KB
SHA256 293005508ad5c7fba1c3e62f2e7b025a85c02157110d1ecdb51edaae43696b27
MD5 97db2969af0fee1b57f39fe722f8e9a9
SHA1 2487dfcb8e7359c981ada1543252ae3d8de74edd
SHA512 54933b79421133ee824715257fe3d2258776371c6cc49ded231906059106a85c90c6bed2c6c1abcbcf0ad04959e5d1c7f4188d0e009cff37c683386d15ceb153
SSDEEP 384:Ick1JzNcKSIbWLhW+caGAP10mCQq/R9zZ9Q5Ufv5q:ucKSBZbcQU9zZjfM
TLSH
T16CA22AC2467CE283F98E9D70A241EA533D3ED7861C66846106E4E6582DFB3C2D62813C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-processthreads-l1-1-1.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-core-processthreads-l1-1-1.dll
Size 22KB
SHA256 8d01b934168de695033ad54d5116792c7cce33e68eb270756923f5fc15686930
MD5 57e43e27c5349c6753443b7a288289b8
SHA1 ca7aa4aded7234ebdf4a46ed2e663e1019054917
SHA512 0d8d746ba59e280f09265e7aef765d056e79cb8577fe4403aec16dcfed496d8b8a0c9b5b93baaf82277bfbb2a7cf3b56e481e545e9e526930971053dcca48ef9
SSDEEP 384:gVDfIesykWLhWdKcaGAwBpYFPA9bFs0R9z/E1qs:ze/aWbwXwPQZs49zcB
TLSH
T19AA23AC29B7C9043F9DF9E70A294EA833C3DA7C75960C46615A8F15819E73C5EB1023E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-profile-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-core-profile-l1-1-0.dll
Size 22KB
SHA256 fc0848b17ca5e8ea43036119321121dcf60b91dca95bc8e92a1d9ecb0ccfe389
MD5 b66718f3d1f1d7b30221ddd41fb5c2bf
SHA1 e4d9ada02a5cc2fc000241ceabb40ac94cc5f575
SHA512 83bfc60081042832957683f8c33fa1bbe88e5f179af8c9dc66e4bf4040ccbc9044b6e8b530884ecea95b7f3528bcf66a5c76998b3b155db3bd26f9ebecaeb459
SSDEEP 192:/XWLhWOKca8Lxyf7LRroihrSWfp0/FqX01k9z3AQXrmx03:fWLhWOKcaGAf7pofWfpJR9zPrmxc
TLSH
T1A8A25BC2973CA042FEA6AEB092E5DA937C3D6BC75D90951209D4F1441CE33C5EB28B2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-rtlsupport-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-core-rtlsupport-l1-1-0.dll
Size 22KB
SHA256 206f631fe74f68b84d34b5be60a8b966f5721a94c406e8b43673e049f4029481
MD5 edf65e52a99458bef45b6e840d2e69e6
SHA1 69d839bdf737f5eb76b28dfbef4539548bd4d77e
SHA512 4aa669537e2fda7f8e60c3cb52b1cdeb612f5e33766a051fc88b1876ce5a5fbc389cc4dadf44ef2dd76ba1653abe7fc4fda0593db73dcfac53a32732ff880ad1
SSDEEP 192:LGeVHWLhWd9ca8LxydkeR+4cVfdxP3NGmVX01k9z3AlHnDBP:LGeVHWLhW7caGAtcBP3U0R9zYH9P
TLSH
T19CA22A868B386143F9DBAE7052A9EAA77C7D67C71DC0C52618D0E2881CD33D5EB10A7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-string-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-core-string-l1-1-0.dll
Size 22KB
SHA256 50baa235bbf844aa14220a8c047773a948c6fd91b0c8b596c2b7d724b80d0cec
MD5 bbef47ea78e2a71130687c459c53e56c
SHA1 5bf93d42ad6476dd6f1c000734005eabeab019ce
SHA512 abb9fb7e018c65f7292c7d8c01c154ac2bc4a20138f70e7a9efbd2adf66e1bf9ade621d27ec8947b16a11aeb931825aec154a7032fdb67c38f42e60f9fbfce4d
SSDEEP 192:D/yMvroWLhWW/ca8LxydkeR+P7OIKxWXuifSX01k9z3A2zIuHV:D/yMv8WLhWKcaGAW7nNXuifSR9zTzIAV
TLSH
T1ACA26C829778E043FA9B6EB05299EA437C3CA7C75DA095A656C4F1481CE33C9EB1433D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-synch-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-core-synch-l1-1-0.dll
Size 22KB
SHA256 f7f218809d897ab76d4abc36d12aefe1d9193fa99f91e089ba112d8b44e204a8
MD5 d2dfd4564106bd5fece5fde273fde08d
SHA1 0ebb079ebc6e0d0b687ec5f2e292d5cc2453d1cc
SHA512 4ac545bd8d4694a95ffbfabc0edef2309d400e145c709ca6dde51af24b9df6dfc16d01da1a67b1b3000d62f6556e3ce43837b654c34c3ee0fe87ef37566c7761
SSDEEP 384:h3widv3V0dfpkXc0vVaOHWLhWD6caGABesdzlyR9zPst:JHdv3VqpkXc0vVa/YGbFps9z+
TLSH
T1E3A23986E7A4F183F89FDDB09299C553BC3857874960C86316C5E6582DF33C4EB2862D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-synch-l1-2-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-core-synch-l1-2-0.dll
Size 22KB
SHA256 a23a02cd099695e44b51f9944117a08d1880042c994eb8f8ded89efbf9e7fd0b
MD5 acfa7dc1de5c81c5f0eb93c549423715
SHA1 45b190d32a486cb0feb26c4fa9ef07c00a8c6d68
SHA512 d452d8e1fb7e833716c8b7fcbd4d268aa84aad90fdfac0cf9612b3f8e58aaab634390c2f91f873ab8f6a2a218d981d784128cf7ae14c75ca18f0a49c29036be8
SSDEEP 384:jtZ3wEXWLhWccaGAI+JEOSifX7R9zA8Ewh:AEYvbOOjF9zAgh
TLSH
T119A24B8797A8A103FA9FAE7043D5E593BC3C67C61D90881615D9E2182CF73D5EA10A3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-sysinfo-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-core-sysinfo-l1-1-0.dll
Size 22KB
SHA256 c02fdbbed04fd6c59a26b49f5e4d79ad69320f26ea6d6f388b816dd5900640ea
MD5 38628a85a1bf72fb61c2646ff0e282d1
SHA1 7ca912c019c4c782b5faa3a9a2eddb658da2e739
SHA512 271ad1d7bde3706df290327b6703969bd5985f2b64d6e6f74375c9e87e1cd549e095b859ce74a4664c7a0851173f785c5ce88bf4f696fac530d6a3845955cb43
SSDEEP 384:tY72WLhWpcaGAxyurEcUthXBnR9zBztnt:tYPMb0urpCf9zTnt
TLSH
T1A2A23A93ABB8A102F98A9E705299D7437C3C67D71950C91806E0F3686CB33DDE72463E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-timezone-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-core-timezone-l1-1-0.dll
Size 22KB
SHA256 4cd7b298bda25b77bb2594698ce80c580ce2990e06fb4389e9453dcf4718a87b
MD5 817f2327a4c836c8699417a88265df6d
SHA1 46eff87a9f5cfcede561c7d3f669abe56406723b
SHA512 32994dd60ae6aedb12beeba31f9556b2b7171e58b9a96a3e33275057a47293a83f711ab89259713447790c668c6a58d260bc69d740bd9aca3ebaa44a4a064cdb
SSDEEP 192:uB+WLhWPca8Lxyf7LRroihrS0GwwOwGOr49uX01k9z3AB81WTJ1:6+WLhWPcaGAf7pof09wGOrjR9zWgWTJ1
TLSH
T1C8A228D3CB689002FD9E6F7062A6E9637C3C67D64D90965748D2E14828E7789EB2062C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-util-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-core-util-l1-1-0.dll
Size 22KB
SHA256 42af950cd08d7802db7704c4d1ade8e239635728b3699cd0dca425b74517b074
MD5 980877c1881c969de1f68daac28ad315
SHA1 181ff9b3d3328bb0504bc805f63ea429d1f1ce90
SHA512 71e677cbb087b2737820db18e4d5f12b338c00832306177c72b08957fa5bab2b2ef1a0e9959c4c1f31715a46ef31a0a02489ed5491aaf175e2cdc54d81146b5d
SSDEEP 192:pWLhWDeca8LxydkeR+kyxWOwGOr49uX01k9z3AB8N4:pWLhWDecaGA9yxZwGOrjR9zWQ4
TLSH
T193A25AC74BBC9402FAAFAE305284EA437C3C67C7599099921AD4F68418E37D5EB1473E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-conio-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-crt-conio-l1-1-0.dll
Size 22KB
SHA256 92f3c1052288e695f01ebae3e9fabaee962d0c703b3bfff588688e848ccb00ee
MD5 182bb1814da7c8f7c9a7358b4103e424
SHA1 e04ffe98ebc28b6b2994da40706e97e593dfb2da
SHA512 00ebaa0b2a752cd8018dbf0ac521638a0eca6365b4d5135ecc464ad551ed4579094bbc205cfb268a8f62e6c3b6af7af4fbe4f57ec3c5500144c5074565e37286
SSDEEP 192:RLYWLhWl8Nca8Lxyf7LRroihrSsj/DIs/zp9JHX01k9z3ApzLO7e:6WLhWONcaGAf7pofsjlFbR9zyLf
TLSH
T122A2388397B89903E50B5F30A2FADA83BC3957932950B5A645D5F02438C67DAFE2422D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-convert-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-crt-convert-l1-1-0.dll
Size 26KB
SHA256 bb2bdc57bc54e1d906898911a50403d8358663e2f095d437b7157d491d6a9276
MD5 49de429c7e93bf23272f8d04bca6ec86
SHA1 f270da33023a64585a062857ca9d170c04a688b6
SHA512 8a1c3b623e1c5fa15b5d445d9a44672d60b4a685fb0a067812f65e3bd6adad63ea128c4091e1acfd9e5d97a45c1b2c2a65aa43c7bf68f64da705c131798c9856
SSDEEP 192:i9cyNWLhWl6ca8Lxyf7LRroihrSVZ8z5j4HsX01k9z3AAxxe:3yNWLhWQcaGAf7pofVZKR9z5xE
TLSH
T1CAC2E74766E43F15EA9F177221FEDBE72A385B92159053B4C243D14C3483B86BCAB81E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-environment-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-crt-environment-l1-1-0.dll
Size 22KB
SHA256 0b348fa0effeda892d03a98904962d1a0c6651854e4168c3d00ef32611448799
MD5 2394048203d1fadc96cef568dc2e71a4
SHA1 a653426b18e9a0dc490decbd942df470ef92110a
SHA512 79f444f1e46fe4cfd3b791aef50c5c4f58e47f77a843265bf520d0e3f851de9f8dc722804650704946ee5661f6a8d2628cc9bafd64c7f3bf617f256a49878bc4
SSDEEP 192:LVWLhWFca8LxydkeR+RW6zUHWX01k9z3AnzED204:ZWLhWFcaGA4W6zjR9zGz/
TLSH
T1E4A23AC28B789542FADB6E3092B8DA833D3CA7C71D50956645A5F2082CE77C5BF2072D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-filesystem-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-crt-filesystem-l1-1-0.dll
Size 22KB
SHA256 edfdf42d1807b326e7f4faec31904a9217585a8efe4f65d900ad5d6eff36aff6
MD5 89fab734fda76f129987a2241160542a
SHA1 febce33c9a5a08bbeb81637306292fc87e6ef84d
SHA512 46b2df409fe4f88be9a1c4891d6887c4291d2495eabd537a54c463ccb7b49582a00a18e1e8accc1b62bc8c4529efdceaf9f45a37341e8e015d789d4d06aa6481
SSDEEP 192:yEpnWlC0i5C1WLhWVca8LxydkeR+u2qxQcNpcspKLX01k9z3AMiwUYFwtk:znWm5C1WLhWVcaGAIqqscmeR9zjie0k
TLSH
T107A22B8757E47D02EA9F1F7252F8DFD33E3C2B8619828666D086A01825D73847F1156D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-heap-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-crt-heap-l1-1-0.dll
Size 22KB
SHA256 8bda17a495d492fa1343c62addff47e78759b86c693ff185af67253001117f5e
MD5 6f1e4938220b99fee3a863b066c665b9
SHA1 5b0f7868838592f101917e8e79c846d406a30610
SHA512 06dbf8b89a3eec50506b7ea6a09c7cd43fa193d7e219c13e3ffe2aa557dca164385d2ca72878a7446aace70967b508317876447914b054a36ed998e474e63c92
SSDEEP 192:PZTh8Y17aFBR4WLhW0ca8Lxyf7LRroihrS4Z3l9CGZBX01k9z3AkO1nIaBH:9LNWLhW0caGAf7pof4Z3+GR9zdv8
TLSH
T194A23A964BBC6543EA976F7062E4EA8B3C7E47C76C50A92780D6F5542C837C0EB2031D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-locale-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\api-ms-win-crt-locale-l1-1-0.dll
Size 22KB
SHA256 71e0eaa488a7de1561a2f31cc17edee5c501558910cdc834fcef4524549aa71c
MD5 f7fe9db252f566c51fa9e09fa1f0d9b7
SHA1 b10a807bfc34a7d7bbdd57067a32bbcdb932fc77
SHA512 564245e3a91d2b8f8a2162c2448e17bfca83393dcf5f6826e832addc7d4de5ed3139d57245e92f13510616daadb04035e0905470d424eddd78c0789aed756037
SSDEEP 192:fDWLhWDca8LxydkeR+Jq/l/2b8xYqD0cSX01k9z3AmrI7kjw6ZwZ:bWLhWDcaGA+q/gkvDyR9z/rckXwZ
TLSH
T14CA23A878B7C6043F9DBAEB056A8EB877C3D6BC3094289555681F59818933CDBB2063D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

base_library.zip

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\base_library.zip
Size 1.3MB
SHA256 dc2d93f9170241751ffc50ab175d3be8d665027a978c2f0ba8a3d8bc22d32579
MD5 c9c7ae2df70a6dfce475905b3235b34f
SHA1 546ad13898393edb7eeda3070db3d353b7cb4d7e
SHA512 48be7f1d719a394dc1388c30f40b6f2ba8d2354de752263e06b95c159c4bc714b10183ce0067c9be7fe308ae28b70e558cd7aa8865813b9e8783261cd04e72d0
SSDEEP 12288:ru0PtdYZEQcd4c5/l10iW/5XGC/VHtNSYTq+zYgEkA1qJuAAR4m5iqM9J9P:S0PtdYZEQc6c5/l17C9/SJRsR9P
TLSH
T16C55D681B692B5B3FC84F3BA04260A0EA3658571BF45C747389FC5E46F8F6A49E914CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libffi-8.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\libffi-8.dll
Size 38KB
SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
MD5 0f8e4992ca92baaf54cc0b43aaccce21
SHA1 c7300975df267b1d6adcbac0ac93fd7b1ab49bd2
SHA512 6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978
SSDEEP 768:NiQfxQemQJNrPN+moyijAc5YiSyvkIPxWEqG:dfxIQvPkmoyijP7SytPxF
TLSH
T10B037C0B458418A4E657D53D97A64A2AC335B9240B60F2CB03D4C2BA3F6B7D6FB7C358
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python3.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\python3.dll
Size 66KB
SHA256 c7c984194311eaaac308d4d43b0166675a36ec38104ee4d8856211f1f90f5a8b
MD5 50c8107840fe8474cdbd6ea33ec44750
SHA1 c15a2f8063c338e5b52b7a4a2e4c4f6847680cb1
SHA512 c1f12e9cc22a189ee21878d1991e273df88921387590282a04e96874489fc26a57507e53c369b6c1b25e2fbdd83c2026d8cdbc6884da6e490c4f678db3e18778
SSDEEP 768:IV1EbYGVXq6KC/prVHBN0cW18itCQDFPnOMFn+gikF/nFX14uewjBcCCC0yamM/b:IDmF61JFn+/O1VITL0f7Sy3OPx5
TLSH
T132637112BB54F8A3DBFA69FC39D199CD142B12CC872584ECA57893D30E5A310A6E734D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python312.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\python312.dll
Size 6.6MB
SHA256 e579852d33ee8873853799e166e5dca088a47d7903fbdd5a0f1b8328e4d3a73d
MD5 03bbe5f4f4dfa43ca98dba5aea5a987a
SHA1 fea5d979eeffb2e496f9730ef356db8f7d8e988e
SHA512 9f836e632283bf9df7b71b1922a411e0d77af07fa3ade870a2387113a24cc826eb716ac8efa86887448b6860d973dac1ba34c8d435bb16155533e1db33ae05a1
SSDEEP 49152:j9DesghDCEerBt8YGlkw46d3XDzTrcOpzdKQiBKDSUJivm1/ScFqN2WgTDLTf+ai:fgDAtpGXmGxJWWv6HDMiEh5Aosz
TLSH
T1C5666C627398C0A9D96690B4CC33C68FE7B17C517F50430B309AB75E2F737A2966A349
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ucrtbase.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI53442\ucrtbase.dll
Size 1.1MB
SHA256 c04daeba7e7c4b711d33993ab4c51a2e087f98f4211aea0dcb3a216656ba0ab7
MD5 3b337c2d41069b0a1e43e30f891c3813
SHA1 ebee2827b5cb153cbbb51c9718da1549fa80fc5c
SHA512 fdb3012a71221447b35757ed2bdca6ed1f8833b2f81d03aabebd2cd7780a33a9c3d816535d03c5c3edd5aaf11d91156842b380e2a63135e3c7f87193ad211499
SSDEEP 24576:CJG2BrB3ZQAq0AT2jS9HKHdK6AccMs1wmxvSZX0ypFi:0VGrT6SAk3ei
TLSH
T1EC359D64B76C02A9C97BE13DC927554AFA73380147709ACB03E74AB93E2B7E552B7310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Discord Sniper.exe

Path C:\Users\Admin\Desktop\Discord.Sniper\Discord Sniper.exe
Size 24.6MB
SHA256 8c40a7de283c8f275116387beffe90cd2456ff1e96740de0daeef975e71cbd18
MD5 4d4133608e7c6a3c0e2e2796716d02dc
SHA1 a135ddaf40b40d68d9996a60c5c941d21f8f8ffa
SHA512 77b5765796c175dff0b15dad96799381fdd2dee8b3c58f16a3ec193ee2b9d0961b6983a2413b693ac2623de1bad1388e795420fd5d66de2f331838077e15fad4
SSDEEP 786432:XeJYM236RfmBW8c0aGziuilu03QEWYDbfjLKq5thfPKa4y:ofWWfj0izD3QJYfaqN14
TLSH
T1AF473344776048B2F8751976A8B95642A3FA38F3177082CF1BB85E9519B32C0FE3E395
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Discord.Sniper.rar.crdownload

Path C:\Users\Admin\Downloads\Discord.Sniper.rar.crdownload
Size 24.2MB
SHA256 00d6b4a5d05776681ada6de2cb868721a09bf45c86a3736cc223a6cec45f70bd
MD5 852f41c16dc318e28a447c29e884fdbc
SHA1 c395f00663e03faf173c3f4ae2bc9ad9166925d3
SHA512 209733a29b4d1182f6dc18ef70159b4520c05ffb0015c06197b896639cd1f2fa166a688736c3e88a5e8cb6302c85aaece29c3ee2a62fb7e5ab18d1c8436cd907
SSDEEP 786432:PAl9ATbX/Jw7Q9oZDxa3MRurNbBa3AsQqR:P/bX/121a8SbBa3AbO
TLSH
T1714733883CBF905E4B7EA66F1B8779BD989E165DC19BEE436F3700AB144C30B4B90650
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1080-1415-0x00007FFE5A4B0000-0x00007FFE5A4DA000-memory.dmp

Download

memory/1080-1571-0x00007FFE5A4B0000-0x00007FFE5A4DA000-memory.dmp

Download

memory/1140-2653-0x00007FFE6D2B0000-0x00007FFE6D2DA000-memory.dmp

Download

memory/1140-2649-0x00007FFE6D2B0000-0x00007FFE6D2DA000-memory.dmp

Download