89a6461b20ab20ddfd1c7085c22b39c6c95c95b9ccebaa64cabab994c4fc7089

Analysis

user interaction
yes
max time kernel
21s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
03/10/2026, 23:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Nexus_Gaming.exe
Size 49.0MB
Sample261003-256erayfkh
SHA256 89a6461b20ab20ddfd1c7085c22b39c6c95c95b9ccebaa64cabab994c4fc7089
MD5 63212ed377efbaf68abc0c7a85af08b9
SHA1 4abc831d046cecd8c3a1e723ff26c66027e61d5b
SHA512 fe210b7e43b32adf325d6c17455c73c780cc08d4f7b799fead37a3d23a14996cbf0356e5442d56c281c4d0fa2daf9ab5fc8aa78ab6a055377b6c28dd7b9b812c
SSDEEP 1572864:nhD1Fwj+Ml9nA9cYoqgQT+L21dhmAy7Jbp:nhD/wqM0cXqRQACp
TLSH
T1ADB733FC1396C2D2C473B53514229CE1D5A2B535BB13DDAE93A285E23E831F20E7A749
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence

Malware Config

Signatures

Loads dropped DLL 61 IoCs

pid	Process
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe

Power Settings 1 TTPs 2 IoCs

powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.

persistence

Power Settings

T1653

pid	Process
4752	powercfg.exe
3188	powercfg.exe

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Nexus_Gaming.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Nexus_Gaming.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
2600	Nexus_Gaming.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2600	Nexus_Gaming.exe

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4752	powercfg.exe
Token: SeCreatePagefilePrivilege	4752	powercfg.exe
Token: SeShutdownPrivilege	3188	powercfg.exe
Token: SeCreatePagefilePrivilege	3188	powercfg.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2600	Nexus_Gaming.exe
2600	Nexus_Gaming.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3192 wrote to memory of 2600	3192	Nexus_Gaming.exe	82
PID 2600 wrote to memory of 4752	2600	Nexus_Gaming.exe	83
PID 2600 wrote to memory of 3188	2600	Nexus_Gaming.exe	86

C:\Users\Admin\AppData\Local\Temp\Nexus_Gaming.exe
"C:\Users\Admin\AppData\Local\Temp\Nexus_Gaming.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3192
- C:\Users\Admin\AppData\Local\Temp\Nexus_Gaming.exe
  "C:\Users\Admin\AppData\Local\Temp\Nexus_Gaming.exe"
  2⤵
  - Loads dropped DLL
  - Reads the TCP/IP host and domain name from the registry
  - Suspicious behavior: AddClipboardFormatListener
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:2600
- - C:\Windows\SYSTEM32\powercfg.exe
    powercfg /list
    3⤵
    - Power Settings
    - Suspicious use of AdjustPrivilegeToken
    PID:4752
- - C:\Windows\SYSTEM32\powercfg.exe
    powercfg /list
    3⤵
    - Power Settings
    - Suspicious use of AdjustPrivilegeToken
    PID:3188

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Power Settings

T1653

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Nexus_Logo.ico

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\Nexus_Logo.ico
Size 36KB
SHA256 61035d13ce9f76b3ed2f00d09adfda387ef36f68e4aa4931db138587782011bf
MD5 01d2bcd951f7caa699709227c8971023
SHA1 1b20a509fb12dcdd7c8c1aeee1a8e9eddd08aa93
SHA512 369fdd1eae7c42c96661eaa8313c5589f1a2e8cc5ab0a8c5267d6de3e4d2293f1db6aebef5e9e1a07f20db44d20543484987759ac79ebeb3bf5f9ce458df3db1
SSDEEP 768:xFcThwfAe+B2a7AcINtFS2vQcK49Wjym1cHIEX6UQZymc3851NMLyX:vxfA12a7ATtruqWjymyHI0rQZyV3AMLI
TLSH
T16B03E14E7345DD3185902CEABD904CA13EE3B8949310EBE5736F29D8787F849097658D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VCRUNTIME140.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\VCRUNTIME140.dll
Size 117KB
SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
MD5 32da96115c9d783a0769312c0482a62d
SHA1 2ea840a5faa87a2fe8d7e5cb4367f2418077d66b
SHA512 616c78b4a24761d4640ae2377b873f7779322ef7bc26f8de7da0d880b227c577ed6f5ed794fc733468477b2fcdb7916def250e5dc63e79257616f99768419087
SSDEEP 1536:Z9TXF5YXWbj8qr51XlN+dULTCe1IGhKWyxLiyaXYaNxoecbdhUoaLjTz164zEd:ZEnsvReGsWyxLizXFkecbd1aPTzW
TLSH
T10DC38C8572A002FBD16AC274C1A36A17FB75B94487B0A7CF03B58A650F53BE09E3D356
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VCRUNTIME140_1.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\VCRUNTIME140_1.dll
Size 48KB
SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
MD5 c0c0b4c611561f94798b62eb43097722
SHA1 523f515eed3af6d50e57a3eaeb906f4ccc1865fe
SHA512 35db454dbcc7ed89842c0440b92ce0b0b0db41dbd5432a36a0b7e1eddf51704b1f0d6cff5e3a3b0c3ff5db3d8632fed000471180ad72e39d8dbe68a757ccdfb0
SSDEEP 768:vzzO6ujT3MbR3v0Cz6Sz5q83ywug1HDV9zxfYbK9z:mq/oMx3hXHDnzxfYiz
TLSH
T1AE236BA453784486D4AB99B0C0DAEE577D7CFA964B10928F0BA0D15C1F637D0EB3D21B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_bz2.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\_bz2.pyd
Size 85KB
SHA256 a4be36fffeefa8b24c1234d548da8f05558aba53c2ea7d1d2614776eaad8fbf4
MD5 a0946ac3236b70d27de6046ccc467977
SHA1 84f2aa56e58849cf30e632e7eaab4901a681f08c
SHA512 02429781f017b534918657e5c152ea022b52bcddd15ecca7f8b4629940dd4367a09af4d86a1f05d946ca97f2709718b136003693088c480d9b791e4d18361174
SSDEEP 1536:vZAVNz7DkEvkmFfR/l/kM4KPkM/gg8IWRbG3II13VAyvcvR9qfIk2:vGVNzUERn9R4KRg7NlSII13Vk
TLSH
T1A2838E96F3B552B6F59B91B886840793F730BB860750A3AFF14882853F13BD06E5C369
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_ctypes.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\_ctypes.pyd
Size 139KB
SHA256 f8a9f7831e81b2bfba12456e589f8198114f24986bd527ac231a844565afcddb
MD5 03fb3055ed0c56155bbf030596726e03
SHA1 fba03bbf844c08ccf20854d717a84fa62ab291fd
SHA512 9ba8f50f75b37858b3d81d6f7323ae981ae21f57a9897955142bc53098ad74c8ae119e61ccd0bb5cd0071e092e8c2bbb5c146688e29f2cf7d1d3740f47ec9117
SSDEEP 3072:HDpx2Lp7KRmFrkdOJWWcovIMzTF4FyxpEI1GPny:jpxCdK8r8WDvIMn+8xpx
TLSH
T160D37E4B736841A6DA678138C6739E47EBB1F452261087CF4264C99B1F633A2AF3F315
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_decimal.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\_decimal.pyd
Size 283KB
SHA256 04738ee6b96bcc6351446b011b523d831aa88ec3f11d4b64c33414c965b56b80
MD5 bd5ca697bd7da2b805a8372f879dc4d3
SHA1 41e0bb70c6d08fd646fe0100068dacc4d1a4ace8
SHA512 248fe22d992c68912c31988a7ef6a71cbdd18c7facc4e620eb6c09c78a5b4b7e37adfaf10f4461fffed73fd73f211d9f428e7a60960558be13e992c855e31b15
SSDEEP 6144:n6TEZDpJodlvNDRfAT8GqqM43fIWeA5tMo:n6TaDpJcdND4jKo
TLSH
T1AC547D57A2490CA4EF778434CA479A5BF7B2B8414360D78F42A48AA72F933A3377D744
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_hashlib.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\_hashlib.pyd
Size 67KB
SHA256 d4524b261f09806a828c62fc97e8517328b23d65ab87d20706a4bafd86bbf345
MD5 3c7f5536fd531f5115738cad734ba92d
SHA1 aaafd1ee00d2da6bdbaad00ef78f8fdf99865f5e
SHA512 492e61def2ec6b01d0df0c55887a7273adc7fb8bb216a6a9bceda9556546fcebde6a7175c16eac4c87ad2313d74adcfc62a571b401ad2ed9eda79217f92c56d6
SSDEEP 1536:Bs0SOWZsPZJWvSLTRfgI1DIAyvcvR9tfIL46:WLYhJWvSLTNgI1DIpl
TLSH
T17D637B8AA6984092D62382B4C9E38F43FAB5F252270197DF6279C18D2F233C35777756
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_lzma.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\_lzma.pyd
Size 157KB
SHA256 f7ad11fbbb7aeaf7b6566a532a3243e3ae5f92bac480dbe5c2ef300fe2c1dabe
MD5 1dfaf924b4576f551f6dfe3cae50b230
SHA1 ef19846989f337e600c8f9ccacbd4276cc4d35f0
SHA512 2df6a600ecd03de76f066f87a8dd13bf138a51f89fe745813d7a00418fb716c670cb04a9b5573d2b852fc8885acac8b960ba4c42d38fcb7e9a1d2aa2e84f90a9
SSDEEP 3072:z+0m6DKDYtwipfxAbDcoAL+Uznfx9mNoV+dREOII1I1+ZgTT:iTCKDYvNoopYOyGOjeT
TLSH
T182F34C86B794F0D6F3628C78D6618F53E7F5781A0320929A01CC976D2B1FB759A2B313
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_socket.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\_socket.pyd
Size 85KB
SHA256 ff3e97cd11bdc68798e5b3dcd5295d1efba179b7344142d50d066bbf1c2d79cd
MD5 e60e2de0be0f2db133252f103e9b1f8d
SHA1 686000117f1dc472ea8012a7368c936bd04ded08
SHA512 49a002516235cec6870b0d08da61d3aac4440b4ae1437b7357fa493dfcba0b2212cbfefaf5833baa8b6f904f6439389ec3a6b53cd7faa718273ca0c3e00c38fe
SSDEEP 1536:KcVunc70XTxn1egypxz7XP+N6wSzsGNesQAcsqIP4fYEI1GweyvcvR9YpfILO+:zEna2Dypxz7XPs6wSzsDsQ1s6fYEI1Gv
TLSH
T18D835A01AA6040F6EB72C176C6639E63FB74F5C11394A75F1066C65A1F33382BE3AB85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_sqlite3.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\_sqlite3.pyd
Size 129KB
SHA256 c6d7bcea0084bcfa3c487bd7040350ee7c77f4108ce74b964f760133b2a7a6b2
MD5 dbbab4f09db0e661cd8e6e1a92bd76c3
SHA1 e53b86dc5fc0884139b8270aca49fd19b8702f13
SHA512 1299ab4afe7274ee5ab6536411fcff9f4a65dba6fbb189ffffb634eea37b58370269cdb8c5365b724c6a32e54b7bafb780e0277d7e98c08e4612eb7cf1bc1cb4
SSDEEP 3072:KnGQQnVAHcvibxHObCNcC56CzxHLWvxBgI1DQo:KnGGcqTD5MvT
TLSH
T1F6D35B6B631401A6E9F742B8C5738A03EB75F461572093CF51A0C28A1F377D26F3AB69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_ssl.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\_ssl.pyd
Size 180KB
SHA256 43e60bbdff2fe41701f39fa25ea6a8251a2b7623ff18f980a209a451eb5e648f
MD5 d900bf186dc66f71d07808eeae323c17
SHA1 9e86985f7cf11165a773a33efaff343da0e34f00
SHA512 d3229f5da6623844b31bb4b7d93d0baa5e7c71a3b3462e5ce3679238d2d10c17ac47e758188314edc0c30a45d9fba9a08c475cc387d7d22f17aab3e5537861f4
SSDEEP 3072:UQjyHsqUEao3kfj6CuHqMX3jYnizXClit8aN4Qp8VuMG4eJ9i1zktdsQ/3/UpnEO:MJUEV3Qj6CuJ3snOUBzCI
TLSH
T165048C47B1846AF7D913E8F9C6234543EBB4F045332297DE48D6DA860F03346AE66B63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_uuid.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\_uuid.pyd
Size 27KB
SHA256 fc7406772b43caa3b6f41c690753792188b1c14c36a723d49e9276b7457696ce
MD5 9da0ba54ebe20db77d384dc290d29ef2
SHA1 eda4d77dca4520f3c812ec17bc78c5f50e4608cd
SHA512 10ed10a863780aae03ceb1fd39dd7f42e0c245a1725d0cea59c11703108c5b435f62980996bb803b15b21618be72824d26852ae3124238b7ac919d21f29ebb37
SSDEEP 768:Us15cII1IwYYyvcZRYT2Ip42ITxf1mlIJNl:Us15cII1IwpyvcvR920fIkN
TLSH
T13FD26D8E9A784053FA535B70C1F2DF43B979BBD35611879B317A80850E133C1B32B2A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_wmi.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\_wmi.pyd
Size 39KB
SHA256 5a7f3444f1c2f85fb5573bc330c1aea2c583912bb6f948ff81f8fd89a30e67be
MD5 6fded560f9627954b2e46f0fdc9d92d8
SHA1 6f359326458d37c266244b2ab674d3cce7a76e1c
SHA512 f4785ef2f6b052deec4755102ec23c9e1fe7890cc4f852c70ac3fafa8b0fa25c17cdb95caee37f32fd8ff1e4e47a54f05e30b84dd40e8c19999a096e80e13bf2
SSDEEP 768:7u2/EEqrVmjsRuJOQMVII13i0YyvcZRYT2Ip4xTxf1mlIJ2l:7TE9BEXJOQMVII13ilyvcvR9jfIk2
TLSH
T146038D89E6680093EB67CA70C5A5CE43F575F7932711878F32A581990F233D1EB3A279
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_zstd.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\_zstd.pyd
Size 491KB
SHA256 536a3b521a3c42d2827ece0ccfbe40b83a2fd96a0f5496cd60b943b10e1266d4
MD5 b89f5d1345ef95f80ddcbe5b3e4e5bb3
SHA1 2daee236009cc3efe02dc9bbbd8c6faa8ac56478
SHA512 fc925424ad4bd8bdfae04b95fdadfcdbffcac76270997b4ce365be8a47d4c636b7e0b31e78d785a3dc6c9b2dd0f108aa716a92ee4f0506f3a0329e4a424b48e9
SSDEEP 12288:X/WcJlzAwk9mH+65GRRfODoHWDTrWl93mFgR:X/WcJywk9mH+KGRRf2o2YR
TLSH
T1A5B48D43F29983EDE17BC4B8CF465A53FBB1780B1214565B93A5CB943F07B309A6A308
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

about_page.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\about_page.cp314-win_amd64.pyd
Size 71KB
SHA256 fd3e6d71f9f42e83553d23d1dd73e9b2c7e6b82a98dee3c522595cce73ebe7d0
MD5 ff409d9cbdbfeb3dec594380c574f16d
SHA1 43af76fa83345f011dba5e7a1640d03a8b6d765c
SHA512 22d1a6ecb2a6b366af6743db5869c08d65fe5674c52cb4d1f144c2a6d2ec8b7582c07cd66c31022bf7cb843cba6b78072b0f2354969706e392ba9d2dd0fb0cea
SSDEEP 1536:LF7QIflWVgkbWPSHYmSUvRKNf32bIdobJmlKSL7wJ5e8a01b7:x73fEEf0rozye8a01P
TLSH
T1F463180661EA44E5ED970038CE3B69C3EF70F006A730A7EF0614D5A51F866F67EB5262
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

autoclicker_page.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\autoclicker_page.cp314-win_amd64.pyd
Size 255KB
SHA256 1e64898c707d3ebf07f1eb3981ba00dd7dd55cd9a2c99cfed410faeaa6557132
MD5 3991f476e7287438cf5bc839bcb5db8f
SHA1 b8670f7e745a269ea162c262aa0b1285825a1ba5
SHA512 5518e19f976a877067e94fb6d8aea4c42eb5a1c27986d5f4cb8c6d47a67ac4a07ea7c8f43c6a0ef16faf261ffa8a11cf9cd61f32d62dd667d60a182564c650f9
SSDEEP 6144:y/4Z9x6hTQSgiahxgapb+IaSZ9MwuY7l:Q4shhlahxgawMMC
TLSH
T1B544D615519A0CA6FDA704348E2BD8D3EFB2F002B33097E75628C5A52F467F67EB4216
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

base_library.zip

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\base_library.zip
Size 1.3MB
SHA256 c575874f92e7ca71bb1d170ce8bfd42d837c3066a6a74a271e19994be970cbd6
MD5 67dcecd3d3d20cfc03100988c2d90d38
SHA1 e791e960edcca8b91b3cac0c81195f5f55ddc624
SHA512 a5cccb9488ab3bc22d3b01fee03938881bd02bed7cc2279900af50bef0aa4098ef109234c15ac24b962ae427ee180e7fd35e337ca3b25cbc0d362762a99eadc1
SSDEEP 24576:tlb8mT3Fy5PRpVdUsuUFzQeOdP2m2dfXL/:33uPR/d3uUFz/L
TLSH
T1BD552AA1B9917867FEC9F37A35775A0CA715C0109B20D303B4A98DAC6FDF260AE158DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

delay_page.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\delay_page.cp314-win_amd64.pyd
Size 95KB
SHA256 2f6cbea9e7476b055dfb32edac69c49b6a060f66bf497a3149643512c19d0092
MD5 699f436ddf50ec60b65b8862aac7185f
SHA1 8930a73db49ad48ba9815e8f654d0f7ee27feb1a
SHA512 bf8e7868f60d83a07f42acb9386270224e9dc4d78c7dac7e5d9ca82682494f443d39b42ea98b6783739a7de47f2c496f5592c397a033bcd63573d61203943477
SSDEEP 1536:ZyswGfz0DfQdghIm5bSokM3/Q6oefpkzcZz6Pi7iRSG1Ov8tOwmzvjLTUreJM9xJ:ZyswGfz0n34zApkzcZz6PieRz1O/znIJ
TLSH
T145A3F60271AA04E6EDA70434CE2B9993EF71F002B33097EF4614C5A52F567F67EB5262
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gaming_hub.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\gaming_hub.dll
Size 879KB
SHA256 40e71d4fdb443fb2172b73db7a16d0380f836f98d056f4b9e852263f2b7ed6ec
MD5 15ad325c8cbfff30f67e9d8517d2bea6
SHA1 d913a3fd3faae067649184721441fb2d218f3c47
SHA512 b4331a4ee2b179f4b24ee4c78c5b572bf9a1d446f10f46a5cb91af016f6f2e06e7caa6675f80872c406d0da48bc988057042ba4808176c9d3e336c33c0cb9d15
SSDEEP 12288:kD74mlyi1INKTEs2Pm8qOr4Ho4UIhslBenTuCdXc6NSjn6DIfJ+MXCleY5jl:DmsZw/O0HleTCdnMXCleY5jl
TLSH
T1A9154A43269B1CAACC932F7855E7D33AA736FDA04B7A4B2B9518C1311E135D1AD2FB40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gaming_hub_page.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\gaming_hub_page.cp314-win_amd64.pyd
Size 483KB
SHA256 868de1e8bf5b27be9148f1c8c28ad71f3b561861cb607e7389697b3bb779a116
MD5 003db2b63c205e2ab2099009752283ba
SHA1 06f3d9e476d0161fedea6ff878b4028a7dccecda
SHA512 e27eb6be87df0f9e7d51fe4bf8922d08c41b1d9584b7a5b72eba8ac5722984339da6f3dea579b9587294d880438d66358dc3c4947ed96e8b3c570e284fb71ad2
SSDEEP 12288:YuBheMqCkvI/oaB83LXmbkfYXGefgI74kp:rkvVWqWWfm
TLSH
T12BB4D71591AA08A6F9A744348E2BD8D3FF71F002F23467A78A15C9A52F453F67EB4313
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hotkey_page.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\hotkey_page.cp314-win_amd64.pyd
Size 190KB
SHA256 300a5f97ad32e9aeaa0582f1ad821491db8071bb059bc2d4a27b030fd7be4507
MD5 aef6682211803c21888eb85b99da6b98
SHA1 f95387aab97b421a0fbf8557a001393ab423a134
SHA512 76c43e19479db56fc5ae7f00c8a9d28f603b851c7dad854776af7dc557894f0c0d649b626b5034e82e09234d7e46cf817a84a836d1bd722744eec7854dba1055
SSDEEP 3072:G/0BFqcsP16BWYGnaXaj522SnhkN1xlzzQeZ2fJLq6ejAxJY:G/0BFwt2WEKs2SnGN13XTERWqJY
TLSH
T13C14C41261AA0496EDA700348E2FD8D3FB72F402B33097AB5624D5B51F5A3F67EB4613
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libcrypto-3.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\libcrypto-3.dll
Size 5.0MB
SHA256 e03dd02fdcfb791981c9962827cfcf495f2a47a514c1526efb57f847a9df514a
MD5 8e8f32ae40518478e44269cf22cf4399
SHA1 3bd9ea6294eebd45c867178bac0f4f77a49525a9
SHA512 d2d6bf1aac274fbbecafe2344242dd8edf9894c996d5e7c484cff828971287070de20abee1d2d706492063ffed64223020c9859df7596bd4d16c6d738efca6be
SSDEEP 98304:D03+0YMHT8tCl1r2qxPJ1W1CPwDvt3uFlDC1:DyPYMz8tK1r2qxR1W1CPwDvt3uFlDC
TLSH
T1BE367B6AA7A80149E4BAC13CC9534617D2B1F85A57B097CF18A196BD0F33FDA2B3D740
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libffi-8.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\libffi-8.dll
Size 38KB
SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
MD5 0f8e4992ca92baaf54cc0b43aaccce21
SHA1 c7300975df267b1d6adcbac0ac93fd7b1ab49bd2
SHA512 6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978
SSDEEP 768:NiQfxQemQJNrPN+moyijAc5YiSyvkIPxWEqG:dfxIQvPkmoyijP7SytPxF
TLSH
T10B037C0B458418A4E657D53D97A64A2AC335B9240B60F2CB03D4C2BA3F6B7D6FB7C358
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libssl-3.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\libssl-3.dll
Size 776KB
SHA256 1e4bc0638682bfcbb36f4465d6a2e9944d917a60f05ecc8ddf9e96847e05e13f
MD5 f31ed8154564b75e48f2525a7e9f5742
SHA1 d2ff57bdca2030379da6d256892350ca85a0411f
SHA512 dc313916fce80ba99461dd758f424987344d5fdecc4ea28d01764440282b5bcde569eaf8a895fd966ee281aaad94d1b937f0e2164a45ddb18d3698e22b0f6ebb
SSDEEP 12288:gwgpFEKP7Mn162zCpbbICGxsQ7caA0V/jcrldFe9XbE:X6P7Mn16sCpbbI1iecoVGFe9Xb
TLSH
T16FF44CADB3B805DDD8B6C17986934623E3B6F4552330EBEF065186790F277D42B3A248
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

multiplier_page.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\multiplier_page.cp314-win_amd64.pyd
Size 125KB
SHA256 65880d16dad74a7e51a1888771a90a5dd1b3ff803339e5ddb1cc602637d9a6bb
MD5 bc84db6d7a83ab19bdd22218f1c0cbf5
SHA1 64bf30910c77b6dfdc43a8d7d116ce85e269696b
SHA512 35d59c2c2d16e09c8c26d08e21357e3c4318216f94259902cf75841649e4e3b4cc56c7f7add226c8ace48430b74efb673caa54f5d7620a5eb6606098def064a3
SSDEEP 1536:juXujKZ1eMQCB00OZjkKRMyOULYFFURGNpfuLFuZNuwZ6KKW+L7P3MmYj9O6lV:iX41yYj/otbfgFu3JK3DMZj9O6l
TLSH
T1C2C3C81270AA0492E9A74434CE2B98C3EF72F402B73097EF5A14C5A52F563F67EB5253
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nexus_controls.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\nexus_controls.cp314-win_amd64.pyd
Size 416KB
SHA256 91bcfa8487487f2c89ebda2de42267a18212f9989b7da5ad3bf44a07c029e9c0
MD5 1f211af5cd90ca8c52465f75d79120d0
SHA1 e16dfbafc2038c42594dbab8e20507e6344a7acb
SHA512 6040ae627b705254f23d17a59e50b363243021592808ac5ec06118acc80e720b3b4ad4fbc30753eb5c7c8752e22535d412283c558f8599b000e2078a414512e0
SSDEEP 12288:HLgq66ldhN4GZlSbDRdWokp8OhZIdBPA97QOmOYtax1a2BOKY48PD3y9C97u1WTt:HLgqtbtsDLAQbc
TLSH
T15D94C70591A608A6FDA704388E2BD8D3FE71F001F23097E38A25D9A52F557F67EB5312
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nexus_discord.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\nexus_discord.cp314-win_amd64.pyd
Size 117KB
SHA256 b8295ea41b36fdc3cf9aaff5ec78a9ee7ae0c1562f59d87242058428fbd34f7a
MD5 a315c67ffcf634514edd3f0df09aebed
SHA1 3b5f0eb443fa390d005e2fdc69debc906539322b
SHA512 67f6809d267ae82e9bbcd402d7a523504ec240b6b8fd63dd45b2d33d9d8a33bd13490627faa36ae503451c3592dddb8d6dfcd0a3a61174b2380bd84bd588947f
SSDEEP 3072:G8k4hJ/uEMhbRVdiglRw7txtiI7QD2SDQ:GrSJ1wbdiglRCtf1S0
TLSH
T1E3C3B616B19A04D5EDA74038CE279883EF72F401A7309BDF4610E5960F9A7F67EB4722
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nexus_input.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\nexus_input.dll
Size 2.4MB
SHA256 7c4b1b30e66f0b5b646bda0caeb2a5372bfe9ba309936e0fe7c7131a2bbc5f7e
MD5 9748e6f055021f5a1eae268d402ef564
SHA1 ec30c68e32976b2c1dac0a3d147dd74c1b66e771
SHA512 d4724e83f509d02c7697185327a971b0a1e74d215cc3e85713eb9dce200ec4b2f57ba66449bb28ab045727fa460c00be814002056a39c72156d2733dbb3e357a
SSDEEP 49152:uqNYcA0AW+KaFSjGswpM3bq28Y5PkVHMXBHrdn7J:uqe0AW+KaFqq28YaVHMXBHrdn7J
TLSH
T19BC50A4369DB0DA9CDD67BB5A1D313396734FD748B2A1D3BAA08C23519636C4AD2FB00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nexus_instance_lock.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\nexus_instance_lock.cp314-win_amd64.pyd
Size 65KB
SHA256 fe81d574d31cef9ff99523bcc33183dbac542957f6cbea023697bbb1dc21a04e
MD5 4ce23d9e75d47807446c74b8a59f4d8f
SHA1 eec4569b00293e6dfdfdea0b9cd8377dc7e9e491
SHA512 9a48d21ec607d0141c13e7a0f5f6fde4eb3201da446b83b973efd4f432237f9e3a062c63fb7b04d7850741113373c33b3c870e9cb90f07dc901ba38a75f134fb
SSDEEP 1536:7VgOShKwCEfENzjrPOR9RqNhWwrLNgkCE3:SOScw7MNzjrKmhWUakCE3
TLSH
T1A4531916A19604E6EDA24078CE3B99D3FA70F401732097FF4614D5AA1F5B7F62E72322
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nexus_native_gaming.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\nexus_native_gaming.cp314-win_amd64.pyd
Size 161KB
SHA256 83d0df3490f692c2c2f313920c0384c184d8bcfc886cfce151c8f1a5ff046d6d
MD5 89c2f378d3dd79d2da9e6d002b6170db
SHA1 86de93f2d96336e539fd8e48c3fa0534a502075b
SHA512 cc72d591ee4cf74c6e282bf1c67c6fd97e3ca67bc7c1a767bc74d3c6a7587510615cb155139fb7263547ab3a8c7ef8896834ade498701e25f21bce8f9be2acf2
SSDEEP 3072:Ynl7MgUVEk26j8K3tlD9XrfFuTd1GZ07J7fm3R93:GtuEw8K3h7duTd40Bm3
TLSH
T170F3E820629A0056EDD340748D1B588BEBB2F4426730DBEF4521DAF51F863E77EB8362
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nexus_native_input.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\nexus_native_input.cp314-win_amd64.pyd
Size 155KB
SHA256 082c43036fb7d726c4833597fc58c3e4f6d7a25ed951843f102548bed1f1bc65
MD5 82feeec00dc36fb89fc2f7385dbf27de
SHA1 3b357ceaba72fbed2b432d0ea0256f514f29ae37
SHA512 746dd78e2461dd7a06bf36a301b096ae6b8446be08cb70a89e16a3917f5ebae70201fcda408b71572a872717abf537209fc0b5af96a79099c25ae19c74cfe1da
SSDEEP 3072:Xlyn97qO0ZIrSHV6Gjbehgu7nHNp8AaF:1+qJISbemXFF
TLSH
T1F7F3C716654A04D6EDE70034CE2B64D3FE72F002A73097EF4515DAA62F563F67EB8222
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nexus_native_presets.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\nexus_native_presets.cp314-win_amd64.pyd
Size 240KB
SHA256 eb96f851bd57970f259b2ca85d04fcabbf0e2fedcc4975a597aaeb25c18fa2ff
MD5 d0c7fd63692cf2f3f974a7bb42c9b623
SHA1 68810750337ace57d4512d6ac7809432d3ed71eb
SHA512 3240f31f8bcce377f506207a197c1789c7682e2dc969b65635a6ea5cfa09539885cea0ddfd961eba589954581829a26ef547eb313c373cf0ca7be7aa431cf7ca
SSDEEP 3072:6sgRhYXT11Sv3TmBJrHo/N9eyFxr01ZeiGP/J94HqHek:ZwYDnSf6W3Fh0neiKfbe
TLSH
T1A234D61591AA0892FDA340348E2BD897EF72F406B230D7970635D9E51B872B77FB4326
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nexus_panic.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\nexus_panic.cp314-win_amd64.pyd
Size 121KB
SHA256 07eb515ce65c81b943084eeca1d2b499c71d4e476a957ab14c639166b33f12b8
MD5 4e5952fbea98b508fa70d5971fda2f14
SHA1 1a082cbde63fdf7fbd6b45df855784bda70aaf9c
SHA512 2760b6f1b073e714615cec4767a5d18e483936f349e88cd22215829e073f2aa6b37a77be7f5b4632817070a2dabd756a8aa0a747af03f42a7db47e459fa115cc
SSDEEP 3072:kS1zHpyMpRUFmK8HJ/mjRzTCwj8Z35d8Z:VEMRoYlERzTCwc5d
TLSH
T1A9C3E716B1AA04A5D9A74438CE2BA893EF72F001B73097EF4610D5A12F973F27E75352
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nexus_power_plan.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\nexus_power_plan.cp314-win_amd64.pyd
Size 97KB
SHA256 2f195430d11a9daaaa674fcaf48d7ccfe246c0b92dc5e6d025ce37b3ece852e1
MD5 8c894cd03fe7d6997d6fa34680cb268c
SHA1 f7b82f21c7f0f908aaad8858f1430f1a914d7732
SHA512 ba7f0bc57ce62850343266d8b69cc057bf8a1285309f56a5461b502de7646d4b6c2641498077988ce3fecaf03f14da616db5260bc59e6878d5861245cc00524d
SSDEEP 1536:Ic1RPezBw0Tx5q4U0Kj4oGDJcGKueVYWJT+QTi0rz3xwW1KALCbvw0+vr5:R/2zBd5kfLGtuV+wi2x1JawDr5
TLSH
T164A30816A19A04E5EDA34478CE3B98C3EF70F002A33097DF0A54E5561F9A3F16EB5366
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nexus_presets.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\nexus_presets.dll
Size 2.4MB
SHA256 b261451a30893a25cc3b55895e2027b44728c51362439e94901736985137c3b2
MD5 1e6c992af4c419fbd418a24ededd6ddb
SHA1 8440016e8bdaf2058727023dbf1878892f71c8a1
SHA512 9989b6012ea5b9c25935660d491d7366ffa35df5338105904317409228d54ceace45b5610624c5892ba2878b9ba232b23bf8d2db86aaf70e89e7d9dcb3c8bc18
SSDEEP 49152:CMT1YAUYudZsb6pjg5X3hcKEioI1QMXglFNdXQ:CMJEYudZsb6ZqcKEipQMXglFNdXQ
TLSH
T154B50B4369DB0DA9C9D67BB4A1D31335A734FD758B2A1E3AB908C2315D536C4AE2FB00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nexus_profile.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\nexus_profile.cp314-win_amd64.pyd
Size 113KB
SHA256 c9aa338f5b07fbdc260bfb52bd92e776690b718446dbcfd57c67bec36c79d9b1
MD5 b56d33d885a5e5eab43455864570d111
SHA1 f07fbb44845230473c57dbc2f1dfde19b1cc083c
SHA512 838d5f1955a27645d211aacabd2aeec152c5f4d7e7e3d4a689eb2f723a15aecf7955d28647aa5ef96b44e909d6a3802a5896f2db89fb53194de5fbcd7c1ab5b4
SSDEEP 3072:foVeIsbdcjK6FKYKIchVo6+g+XS9L495tuOS3fkyvHpAjd8DoFW8CDL:pIof6FKYX+Vo6+g+XS9L49PuOS3fkyvz
TLSH
T182B31717B19900A5EDA78038CE2758D3EF72F001A320ABEF4514D5661F9A3E5BFB5362
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nexus_runtime.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\nexus_runtime.cp314-win_amd64.pyd
Size 46KB
SHA256 ee32a3ba04b2107cde16a24bee30549390a7779eb34b159294043371fedc0103
MD5 41cf7df9ad93ddb92402c44628f2f8f3
SHA1 dde405304aaecb5bc7a645caba740af2f9fd17cf
SHA512 cbcba98301ffffcdb0b8ca117c2f78b757471e72a91468f230ee434558f4b1a64bf4b7d8fb8e422ba0a27f5c129f07e8ecff14126e9b2b2d46c6372a42a0304c
SSDEEP 768:H2l1u549akn7WfWFvgELGToh2TM2Kkdik/BvO:Hs1urSWfWFYELGVTMqdik/9O
TLSH
T16923394AA29A00E1ECE34178CD376D83EA70F4156720B7DF4218D5EE1FA33E55AB6312
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nexus_settings.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\nexus_settings.cp314-win_amd64.pyd
Size 315KB
SHA256 a23d18417544758c9908af31a9cd7e769d303676ce65b3bb169360033812c8f7
MD5 a106da6697e4842856d10ad7299ecc36
SHA1 a29baa4dc409c2fa04fd00fac3d2880e025c19e8
SHA512 146f25b75075aebd436deaec9b58e78883bf3527c43a84915444b3c86c4f6f68599ae8539cf6a04fdd11029f16cbb16497669317ec04b40d7e3ac17dbded5cb5
SSDEEP 6144:6/XW2lBBlmRD+y6iYLDhS9K7zpEGDV4siAysym5itO:IXtBT53l2K7ugiA3y
TLSH
T19064E917A59608D5EDA74834CE1BE4C3BFB1F002E370AB972624D6562B497B17FB4322
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nexus_theme.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\nexus_theme.cp314-win_amd64.pyd
Size 297KB
SHA256 3f74644829d26bbff596d34d4047f3bd1f2c192d8ada6b0ee3b6a1095b2da0a0
MD5 263661110ade9d2046ead98529bdcf94
SHA1 7426da0cb8e572894111d495565daaa354338da7
SHA512 a223fcb0790e0e11762d15a4bfbc14624307acefcc4df0c05e200bceb5bca693a564616ba113ac6850bd4912c7380b098cdc68160751d577de152a5e4e3addee
SSDEEP 6144:S/Q+QoJIGKRYBemWBfGt2OK72USGPFvsEBbt:wQ+FFKRYBeZUz42U
TLSH
T18654F816A19A0895FDA744348E2BE8D3EF71F001B3306BE75A24D9652F462B27FB4353
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nexus_toast.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\nexus_toast.cp314-win_amd64.pyd
Size 146KB
SHA256 4bbf00ef59449123a051f2da82efc1e0834d14fe6fb66ee66e3eac0d31c82204
MD5 15ae5225aa383980ee4ef7e97cab2714
SHA1 6aab6eec619fc163b3511b7719b5988d30be5eca
SHA512 50750012f8b8020b190b8230eaa9ce16f54b1a72ebf5f6355e5a701235ddfdd3bd98475ce812f757e26c8761de4c7e8ae2a76df1b89c79c73c0120e7ba695e2e
SSDEEP 1536:FGuyWXj9+rsPlykl2DSR/JLd+a1qj7DN2y9kb3zhnVLdO8D8yGvG5rROGnigAXOf:RBQQ1PuUlfD8G5FBLM6sLNgv1
TLSH
T13AE3E606609A04D2EDA704348E2B98D3FE72F006B330A7EB4A15D5B51F563F6BEB4257
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

presets_page.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\presets_page.cp314-win_amd64.pyd
Size 415KB
SHA256 bdd1c60f861638816655495e094dcc8c7a2f3d8333378a54af42f3e35337df2f
MD5 008fba5523255a4de00220d99ef1abb2
SHA1 e7930fa71a8596d03397d60ffb66229e490d40f9
SHA512 41beca3dc4bbcb5b2933ad46a07406a6932576a0f0d167f4dbd89b4fa740b568a436c20868b62c6eb64801bffb8d1f0d579c9b985edebee56903378667ec78a4
SSDEEP 6144:3/jef1XTDzKEV+gZCQ6qqkqrXGday9B4qBnlM/d4rHFjupt/5:Pjex3JV+gMXONdajqB62Jip
TLSH
T18894D71691AA04A6FDA744348E2B98C3FF71F002F33067A38624D9A51F857F67EB4356
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python3.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\python3.dll
Size 72KB
SHA256 be1017ca4ca8ff837efbb343d5c8f739bd67bd1c43fb41068a539b19357c0213
MD5 8d3d1ffbe3bb9539402e8bccb7fadcf8
SHA1 904397a69e08c93fc2080a3cdbf6810bc40313fc
SHA512 312fd7f95d2a76d9dd09336949d3b8ca9b53753a9f45da9d2fec128b2746f128fc1354693e0a995c1e1859a3d90497c8a4a8d4fedffc8bceee0392c456efc68a
SSDEEP 768:IQlHwMvmhZpNVBBr2KyrGYpoQdFxxI4XngqMkf/tFd1WugwBByCsAKyEG+zMRKIU:xbTrnXngXMBEI1G0hyvcvR9NfIko
TLSH
T1C0734D5E6B54F8A2D6B629FC78D199CE242B12FC5F2984DFA47CD3D20D1A310A22734D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python314.DLL

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\python314.DLL
Size 6.4MB
SHA256 1ac15e2224581fc678bbd17728b9aa538d47b891b72c76499ef07e54cd74f151
MD5 5bc0adc1fed509f353832bde6b2add62
SHA1 b2204b0bc93877fcd186d72fbe5006130aa0fb88
SHA512 7b1e52aff81e5e79872d9a22c0218dd8fc46e99cb33adb69d277ea07b21eee0399f0a6a72d190b91f26a96e69aa63a23a06384b9d93db44355f3eb1d7f727650
SSDEEP 98304:YvvKimE4QWS5v+kr/YFboltx9E8rDvQHDMiE2hx0S:qdcQWS5v+kLMolGmidx0S
TLSH
T107668D26737505A5D8BB8076C9034647DBB1BC00AB30D34B49A4B6DA3F733635BAEB85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

select.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\select.pyd
Size 32KB
SHA256 05734bd352ce60c944d474aa62468cc5eebf400097f1d9d0c453d37aed26fcca
MD5 bb2472e8821fce27ee535db0aeb667ca
SHA1 b1329b16873db0f667a5b1ff6b2570cf5cb009ba
SHA512 c1a973e9509f407bcff6288b11011647e168f6b1e71fefa9f1859e98c3db08e266a5e0d833ed912ffa33626cb2c8aeda7be336bdd128cb5a8022ffcab3289ff4
SSDEEP 768:0B7YWHfVEaqFEI1RGTYyvcZRYT2Ip4U8ITxf1ml9dHv7L9mEY:0B7b/CaqFEI1RGUyvcvR9UrfIbHvn9W
TLSH
T169E28D8AAB385047E6A3CA71C6A2DE43FA39F7A3565146DF31B991890E173C0B337354
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings_controls.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\settings_controls.cp314-win_amd64.pyd
Size 267KB
SHA256 cf3494c564c9883f31326c5a47ff635dc3bd1fdb9547e2371d25a61ae92075e6
MD5 a36125ff7ef33565718a874db3724281
SHA1 54e277b3c23127c745b282d955e65cc56ed5d626
SHA512 5bad23da0fc500573d2b8c80d88d3c2c4c9ca4bf1858d6d4863df76b3340af58194b72cf2ee3f456902f1dae019c6f15c311d9aeb4660618b705c8f2a2d30226
SSDEEP 3072:BqsmlHxVTvVc9o6vx4O2Eg4qrPlu/LW+wcAl6lBmRLZeTBeXYJ44wVMuiJ:osmzoK4qrNu/LW0AlRjDXQBu
TLSH
T19844B71590A60896FDA744348E2BD8D3EF71F002F330A7A74A25C9A52F463F67EB4257
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings_page.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\settings_page.cp314-win_amd64.pyd
Size 328KB
SHA256 aa14f67a09971a1660a43c078b4a9e7e4baa23970ef252fc0d7159288b5542ca
MD5 5438de4988bf41036f4dc64fd316c833
SHA1 fe868f4ddfaa2a2be146cd2686ff459b6203852d
SHA512 a3d124093730ded5306724894c6fc8367e3384fe212b2b4ea3bfb52155666afe2b327f1e22e57fbf134a172b66b640f864ec750803e60c41767abffca731dd05
SSDEEP 6144:yeNW37OHxKRSubgvwn7GfazUEEvZUdpYIY/W7rtfltZqInj:lWrOHxKRSubgvwn7Gfg6iIIYEVl
TLSH
T1A464E61590960496F9E704348E2BD8D3EE71F002F37067A35A25C9A92F963F6BEB4317
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Shiboken.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\shiboken6\Shiboken.pyd
Size 32KB
SHA256 0e2c5318c5ac60a016a12230bbb1f6a9d990c45cbf4a7c4af24aefb5ab7dc40a
MD5 da10bfdadc7dad176221e1cb649dddf5
SHA1 3d9e524cbe29ab4a95dc8afed32e0eb9b51d3251
SHA512 ffc75f77f7657ef9c78818fc7cebbda56ecbd39b11098a4dc8fe73f0388fcc1cd88c55a16bb9a5364546fabff3a3efafa3c358215411ea610b58979db6d0c8ec
SSDEEP 384:CBFBhadkk14n3CwmRk3RkbR3mQtbScd0a9upvHQIYiu9cQJwZTy8RbmL4nNy8n6:OBMdkl3OmhYJmAmceeiP5YiuiF95ALm6
TLSH
T1A9E29E438D24648DED21D67A80868D1AE1F1B1560751D3CF136BD1EA5FA33C23E3E7AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VCRUNTIME140_1.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\shiboken6\VCRUNTIME140_1.dll
Size 40KB
SHA256 e4d7ea5f4f4ff6d0c208e693853617cdef0ad71cfe5dd5c3ae16c8a6b64c18ea
MD5 399cebff0f39661153379655451163f2
SHA1 1f8a712990d6534af4af503666861356ff7adb9b
SHA512 923c0e9dd7f9544076e8f0d3efd8af61ee1f9b063641287e972b293273c1f0d805fae2e45d3fc6c27dcba5588e2cddd7e7c238df0efb7f4729ab9b22fe26f35b
SSDEEP 768:h3oZYctpzcx0pdESASv83m5YiuiCOp5ALg:5c6wk3c7uDy
TLSH
T14E037CA297B41856E06BD975C0D32E3BEB71F4651B9083CB03A8825D1F627C07A7E367
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shiboken6.abi3.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\shiboken6\shiboken6.abi3.dll
Size 375KB
SHA256 47f4f9b44c95037565dd14f4be04f350f20c53c05483b750e0be867c39a7441e
MD5 2de027ce82d964b55f71c01fcad2f6de
SHA1 01a61145f111ebaa840f93d0081b1f8327ca6df1
SHA512 3a4b538045380948cda89de3809b350ac51aabf2f7af33a26d2bdacb98f1a2b4aa8452342c749281c16e2f7788bd7919982b219bd8e033460ceca634ccebafaa
SSDEEP 6144:lNjK8duskXY9Fc/BnFGFmuDPgiNkbOdxFF2PejUosGfJXPYVIfwcY:fduqA/BAXN1sPeQosGfBnc
TLSH
T144847D27AF5410DCE67B927C8562CA06E27670A6035097CF23F9C2D52B63AD53A7EB01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sqlite3.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\sqlite3.dll
Size 1.5MB
SHA256 bf85c9ae8a9eda75ce45dee2d325aabc4426557c5223b38cb4271f860cc808c2
MD5 1e847c04ecbd812b2f6606a607bd3f55
SHA1 7a0331c3da5480a0d720f4dc1af1a1506c8c5ecd
SHA512 c1b422ec5198bcd6d2de7d6942e15b9f97870932fe424a010fd4a0b1a8a210a19153430629cbff4a64487207ca9c2c212a295db0da7d4aae93d964fe1b340362
SSDEEP 24576:S7KSScm6YxvKvrQAO2+KxbxVnDAzO3f59CTJ9syFz/4c/3929kiPxmDjygXkX:WKPxCDQAO2+abAzOP59CHsmbv3gPijy
TLSH
T173759D4BF2B801ADD0A7C1BA851B5707EBB1B4051F64A7CF1594CA692F13FE217BA324
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

support_page.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\support_page.cp314-win_amd64.pyd
Size 131KB
SHA256 3e34ea9eeac1a1fef7ed53140311b36dd731819615ddd515b773d4fd06aa0691
MD5 6c8b48c6e27f695b264af11b38eb82e6
SHA1 a2b6a9699964e064ce680d532056c469da098695
SHA512 8bb7ded4819ec32ff0e33f7094978a3c1aba85f75c09d744930ff324ef77b028060594a58e718e7cb7b828412dd4d350c6c2ab6bc5639c29819bd2cac9957bad
SSDEEP 3072:rNaVLOReQRy2CHhLk4tRCITw1s9xKjlrAl:rYVEsL1/CsQl
TLSH
T1B9D3F91671AA1492EDA304348E2B98D3FF72F005B730A7DF1504D6A61F4A7F6BEB5212
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ui_kit.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\ui_kit.cp314-win_amd64.pyd
Size 732KB
SHA256 38248c1ba55579a904d6dbd07d3d408d3c5bb71dfe293acc76fbf116742cf752
MD5 91e7dfd265cb439df833404a65ddbce4
SHA1 94cbc6dc257fa2b24468597aab414fd5d093373c
SHA512 ab4176702117748a05fc8b113fdd00473cae64bc66ca79f7e9b295dc8b149aec2d9579a8395cd4a8dae5e632b05d4f02e9fae86a0852ded408746bfbd606d4bd
SSDEEP 12288:OK6ScaJRYSe1jWbkYmNeswlmoKVYAS82/+B66lgvWrDw:uSzPkjzNePKVYAS82/+BkW
TLSH
T1FCF4B50595AA04A6FDAB44348E2F98D3FF71F002F2306BA38915C9A51F467F67EB4217
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

unicodedata.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\unicodedata.pyd
Size 740KB
SHA256 4445b894f836e89a8b9fdcc88b5e59fbc76aca805baaf40aeb69e869978d4e6d
MD5 e521fd8d69046ac8edee6d9f5d9ae80b
SHA1 b1593ef202bb2ca2041567e986c01bc281a4697c
SHA512 7326988e782c7c8cd547300168e26ccc19905ad387c612fd042024e0a5e45b8575b1d4fb27ee9c0385c791786f703fca384764d62280e1785f27d54b7bf4f66a
SSDEEP 12288:jYxAPtrZmDtBPcH+dEYJ5EAub+z70lDJPT36mwtfy:jYi5ZmDPqO5ElDJPTMfy
TLSH
T1F2F4E5F5BB838C16E69B767A48D3610F4E50C2B35F0A8637B2182355D8EB3B44DD582E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vibration_page.cp314-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI31922\vibration_page.cp314-win_amd64.pyd
Size 175KB
SHA256 4cc21ff1c81b60ec48479d7c7248345b67cb0b0ae43d2b7e4a892233e357a5e2
MD5 a3ca0bc6c7a7014f02af0042d1cd2b7b
SHA1 bb2f2de4e41055f3372cc57659c27f5005be7c7e
SHA512 8b8259cf60ed57ae7d67f509a3ccfb7175e021db2f0a7161ed394d392636bde65960cb56a77a378fada29be00488279a973096a3ef17b2aeb743d2c4afd6e245
SSDEEP 3072:imEl/xXoTTwLmfN8U76YheXfILi7FNE7CmjBIm:iB/5oXwZY8XgiNWCmCm
TLSH
T1CD04C71161AA0496EDA700348E2BD8D3FE72F402B33067AB5629C5B51F5A3F67FB4253
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2600-262-0x0000023A4BCE0000-0x0000023A4C013000-memory.dmp

Download

memory/2600-263-0x00007FFD00870000-0x00007FFD00C2B000-memory.dmp

Download

memory/2600-264-0x00007FFCFFA70000-0x00007FFCFFF29000-memory.dmp

Download

memory/2600-265-0x00007FFCFF420000-0x00007FFCFFA6D000-memory.dmp

Download

memory/2600-266-0x0000023A4D2F0000-0x0000023A4D300000-memory.dmp

Download

memory/2600-294-0x00007FFCFF190000-0x00007FFCFF2E6000-memory.dmp

Download

memory/2600-293-0x0000023A4BCE0000-0x0000023A4C013000-memory.dmp

Download

memory/2600-295-0x0000023A4BCE0000-0x0000023A4C013000-memory.dmp

Download

memory/2600-296-0x00007FFCFF190000-0x00007FFCFF2E6000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads