Trojan.MulDrop36.5520

Technical Information

Modifies file system

Creates the following files

%TEMP%\_mei34762\pythonwin\mfc140u.dll
%TEMP%\_mei34762\pythonwin\win32ui.pyd
%TEMP%\_mei34762\sdl2.dll
%TEMP%\_mei34762\sdl2_image.dll
%TEMP%\_mei34762\sdl2_mixer.dll
%TEMP%\_mei34762\sdl2_ttf.dll
%TEMP%\_mei34762\vcruntime140.dll
%TEMP%\_mei34762\vcruntime140_1.dll
%TEMP%\_mei34762\_asyncio.pyd
%TEMP%\_mei34762\_bz2.pyd
%TEMP%\_mei34762\_cffi_backend.cp311-win_amd64.pyd
%TEMP%\_mei34762\_ctypes.pyd
%TEMP%\_mei34762\_decimal.pyd
%TEMP%\_mei34762\_hashlib.pyd
%TEMP%\_mei34762\_lzma.pyd
%TEMP%\_mei34762\_multiprocessing.pyd
%TEMP%\_mei34762\_overlapped.pyd
%TEMP%\_mei34762\_queue.pyd
%TEMP%\_mei34762\_socket.pyd
%TEMP%\_mei34762\_sounddevice_data\portaudio-binaries\readme.md
%TEMP%\_mei34762\_sounddevice_data\portaudio-binaries\libportaudio64bit-asio.dll
%TEMP%\_mei34762\_sounddevice_data\portaudio-binaries\libportaudio64bit.dll
%TEMP%\_mei34762\_ssl.pyd
%TEMP%\_mei34762\_uuid.pyd
%TEMP%\_mei34762\attrs-25.3.0.dist-info\installer
%TEMP%\_mei34762\attrs-25.3.0.dist-info\metadata
%TEMP%\_mei34762\attrs-25.3.0.dist-info\record
%TEMP%\_mei34762\attrs-25.3.0.dist-info\wheel
%TEMP%\_mei34762\attrs-25.3.0.dist-info\licenses\license
%TEMP%\_mei34762\base_library.zip
%TEMP%\_mei34762\certifi\cacert.pem
%TEMP%\_mei34762\charset_normalizer\md.cp311-win_amd64.pyd
%TEMP%\_mei34762\charset_normalizer\md__mypyc.cp311-win_amd64.pyd
%TEMP%\_mei34762\cryptography-46.0.3.dist-info\installer
%TEMP%\_mei34762\cryptography-46.0.3.dist-info\metadata
%TEMP%\_mei34762\cryptography-46.0.3.dist-info\record
%TEMP%\_mei34762\cryptography-46.0.3.dist-info\wheel
%TEMP%\_mei34762\cryptography-46.0.3.dist-info\licenses\license
%TEMP%\_mei34762\cryptography-46.0.3.dist-info\licenses\license.apache
%TEMP%\_mei34762\cryptography-46.0.3.dist-info\licenses\license.bsd
%TEMP%\_mei34762\cryptography\hazmat\bindings\_rust.pyd
%TEMP%\_mei34762\cv2\__init__.py
%TEMP%\_mei34762\cv2\config-3.py
%TEMP%\_mei34762\cv2\config.py
%TEMP%\_mei34762\cv2\cv2.pyd
%TEMP%\_mei34762\cv2\data\__init__.py
%TEMP%\_mei34762\cv2\gapi\__init__.py
%TEMP%\_mei34762\cv2\load_config_py3.py
%TEMP%\_mei34762\cv2\mat_wrapper\__init__.py
%TEMP%\_mei34762\cv2\misc\__init__.py
%TEMP%\_mei34762\cv2\misc\version.py
%TEMP%\_mei34762\cv2\opencv_videoio_ffmpeg4120_64.dll
%TEMP%\_mei34762\cv2\typing\__init__.py
%TEMP%\_mei34762\cv2\utils\__init__.py
%TEMP%\_mei34762\cv2\version.py
%TEMP%\_mei34762\freetype.dll
%TEMP%\_mei34762\importlib_metadata-8.7.0.dist-info\installer
%TEMP%\_mei34762\importlib_metadata-8.7.0.dist-info\metadata
%TEMP%\_mei34762\importlib_metadata-8.7.0.dist-info\record
%TEMP%\_mei34762\importlib_metadata-8.7.0.dist-info\wheel
%TEMP%\_mei34762\importlib_metadata-8.7.0.dist-info\licenses\license
%TEMP%\_mei34762\importlib_metadata-8.7.0.dist-info\top_level.txt
%TEMP%\_mei34762\libcrypto-1_1.dll
%TEMP%\_mei34762\libffi-8.dll
%TEMP%\_mei34762\libjpeg-9.dll
%TEMP%\_mei34762\libmodplug-1.dll
%TEMP%\_mei34762\libogg-0.dll
%TEMP%\_mei34762\libopus-0.dll
%TEMP%\_mei34762\libopusfile-0.dll
%TEMP%\_mei34762\libpng16-16.dll
%TEMP%\_mei34762\libssl-1_1.dll
%TEMP%\_mei34762\libtiff-5.dll
%TEMP%\_mei34762\libwebp-7.dll
%TEMP%\_mei34762\multidict\_multidict.cp311-win_amd64.pyd
%TEMP%\_mei34762\numpy-2.2.6.dist-info\delvewheel
%TEMP%\_mei34762\numpy-2.2.6.dist-info\installer
%TEMP%\_mei34762\numpy-2.2.6.dist-info\license.txt
%TEMP%\_mei34762\numpy-2.2.6.dist-info\metadata
%TEMP%\_mei34762\numpy-2.2.6.dist-info\record
%TEMP%\_mei34762\numpy-2.2.6.dist-info\wheel
%TEMP%\_mei34762\numpy-2.2.6.dist-info\entry_points.txt
%TEMP%\_mei34762\numpy.libs\libscipy_openblas64_-13e2df515630b4a41f92893938845698.dll
%TEMP%\_mei34762\numpy.libs\msvcp140-263139962577ecda4cd9469ca360a746.dll
%TEMP%\_mei34762\numpy\_core\_multiarray_tests.cp311-win_amd64.pyd
%TEMP%\_mei34762\numpy\_core\_multiarray_umath.cp311-win_amd64.pyd
%TEMP%\_mei34762\numpy\fft\_pocketfft_umath.cp311-win_amd64.pyd
%TEMP%\_mei34762\numpy\linalg\_umath_linalg.cp311-win_amd64.pyd
%TEMP%\_mei34762\numpy\random\_bounded_integers.cp311-win_amd64.pyd
%TEMP%\_mei34762\numpy\random\_common.cp311-win_amd64.pyd
%TEMP%\_mei34762\numpy\random\_generator.cp311-win_amd64.pyd
%TEMP%\_mei34762\numpy\random\_mt19937.cp311-win_amd64.pyd
%TEMP%\_mei34762\numpy\random\_pcg64.cp311-win_amd64.pyd
%TEMP%\_mei34762\numpy\random\_philox.cp311-win_amd64.pyd
%TEMP%\_mei34762\numpy\random\_sfc64.cp311-win_amd64.pyd
%TEMP%\_mei34762\numpy\random\bit_generator.cp311-win_amd64.pyd
%TEMP%\_mei34762\numpy\random\mtrand.cp311-win_amd64.pyd
%TEMP%\_mei34762\portmidi.dll
%TEMP%\_mei34762\propcache\_helpers_c.cp311-win_amd64.pyd
%TEMP%\_mei34762\psutil\_psutil_windows.pyd
%TEMP%\_mei34762\pyexpat.pyd
%TEMP%\_mei34762\pygame\sdl2.dll
%TEMP%\_mei34762\pygame\sdl2_image.dll
%TEMP%\_mei34762\pygame\sdl2_mixer.dll
%TEMP%\_mei34762\pygame\sdl2_ttf.dll
%TEMP%\_mei34762\pygame\_freetype.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\base.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\bufferproxy.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\color.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\constants.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\display.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\draw.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\event.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\font.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\freesansbold.ttf
%TEMP%\_mei34762\pygame\freetype.dll
%TEMP%\_mei34762\pygame\image.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\imageext.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\joystick.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\key.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\libjpeg-9.dll
%TEMP%\_mei34762\pygame\libogg-0.dll
%TEMP%\_mei34762\pygame\libopus-0.dll
%TEMP%\_mei34762\pygame\libpng16-16.dll
%TEMP%\_mei34762\pygame\mask.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\math.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\mixer.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\mixer_music.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\mouse.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\pixelarray.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\pixelcopy.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\pygame_icon.bmp
%TEMP%\_mei34762\pygame\rect.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\rwobject.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\scrap.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\surface.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\surflock.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\time.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\transform.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\zlib1.dll
%TEMP%\_mei34762\python3.dll
%TEMP%\_mei34762\python311.dll
%TEMP%\_mei34762\pywin32_system32\pythoncom311.dll
%TEMP%\_mei34762\pywin32_system32\pywintypes311.dll
%TEMP%\_mei34762\select.pyd
%TEMP%\_mei34762\setuptools\_vendor\jaraco\text\lorem ipsum.txt
%TEMP%\_mei34762\unicodedata.pyd
%TEMP%\_mei34762\win32\_win32sysloader.pyd
%TEMP%\_mei34762\win32\win32api.pyd
%TEMP%\_mei34762\win32\win32event.pyd
%TEMP%\_mei34762\win32\win32pdh.pyd
%TEMP%\_mei34762\win32\win32trace.pyd
%TEMP%\_mei34762\yaml\_yaml.cp311-win_amd64.pyd
%TEMP%\_mei34762\yarl\_quoting_c.cp311-win_amd64.pyd
%TEMP%\_mei34762\zlib1.dll
%TEMP%\_mei34762\zstandard\_cffi.cp311-win_amd64.pyd
%TEMP%\_mei34762\zstandard\backend_c.cp311-win_amd64.pyd
<Current directory>\client.exe
%TEMP%\_mei40402\pythonwin\mfc140u.dll
%TEMP%\_mei40402\pythonwin\win32ui.pyd
%TEMP%\_mei40402\sdl2.dll
%TEMP%\_mei40402\sdl2_image.dll
%TEMP%\_mei40402\sdl2_mixer.dll
%TEMP%\_mei40402\sdl2_ttf.dll
%TEMP%\_mei40402\vcruntime140.dll
%TEMP%\_mei40402\vcruntime140_1.dll
%TEMP%\_mei40402\_asyncio.pyd
%TEMP%\_mei40402\_bz2.pyd
%TEMP%\_mei40402\_cffi_backend.cp311-win_amd64.pyd
%TEMP%\_mei40402\_ctypes.pyd
%TEMP%\_mei40402\_decimal.pyd
%TEMP%\_mei40402\_hashlib.pyd
%TEMP%\_mei40402\_lzma.pyd
%TEMP%\_mei40402\_multiprocessing.pyd
%TEMP%\_mei40402\_overlapped.pyd
%TEMP%\_mei40402\_queue.pyd
%TEMP%\_mei40402\_socket.pyd
%TEMP%\_mei40402\_sounddevice_data\portaudio-binaries\readme.md
%TEMP%\_mei40402\_sounddevice_data\portaudio-binaries\libportaudio64bit-asio.dll
%TEMP%\_mei40402\_sounddevice_data\portaudio-binaries\libportaudio64bit.dll
%TEMP%\_mei40402\_ssl.pyd
%TEMP%\_mei40402\_uuid.pyd
%TEMP%\_mei40402\attrs-25.3.0.dist-info\installer
%TEMP%\_mei40402\attrs-25.3.0.dist-info\metadata
%TEMP%\_mei40402\attrs-25.3.0.dist-info\record
%TEMP%\_mei40402\attrs-25.3.0.dist-info\wheel
%TEMP%\_mei40402\attrs-25.3.0.dist-info\licenses\license
%TEMP%\_mei40402\base_library.zip
%TEMP%\_mei40402\certifi\cacert.pem
%TEMP%\_mei40402\charset_normalizer\md.cp311-win_amd64.pyd
%TEMP%\_mei40402\charset_normalizer\md__mypyc.cp311-win_amd64.pyd
%TEMP%\_mei40402\cryptography-46.0.3.dist-info\installer
%TEMP%\_mei40402\cryptography-46.0.3.dist-info\metadata
%TEMP%\_mei40402\cryptography-46.0.3.dist-info\record
%TEMP%\_mei40402\cryptography-46.0.3.dist-info\wheel
%TEMP%\_mei40402\cryptography-46.0.3.dist-info\licenses\license
%TEMP%\_mei40402\cryptography-46.0.3.dist-info\licenses\license.apache
%TEMP%\_mei40402\cryptography-46.0.3.dist-info\licenses\license.bsd
%TEMP%\_mei40402\cryptography\hazmat\bindings\_rust.pyd
%TEMP%\_mei40402\cv2\__init__.py
%TEMP%\_mei40402\cv2\config-3.py
%TEMP%\_mei40402\cv2\config.py
%TEMP%\_mei40402\cv2\cv2.pyd
%TEMP%\_mei40402\cv2\data\__init__.py
%TEMP%\_mei40402\cv2\gapi\__init__.py
%TEMP%\_mei40402\cv2\load_config_py3.py
%TEMP%\_mei40402\cv2\mat_wrapper\__init__.py
%TEMP%\_mei40402\cv2\misc\__init__.py
%TEMP%\_mei40402\cv2\misc\version.py
%TEMP%\_mei40402\cv2\opencv_videoio_ffmpeg4120_64.dll
%TEMP%\_mei40402\cv2\typing\__init__.py
%TEMP%\_mei40402\cv2\utils\__init__.py
%TEMP%\_mei40402\cv2\version.py
%TEMP%\_mei40402\freetype.dll
%TEMP%\_mei40402\importlib_metadata-8.7.0.dist-info\installer
%TEMP%\_mei40402\importlib_metadata-8.7.0.dist-info\metadata
%TEMP%\_mei40402\importlib_metadata-8.7.0.dist-info\record
%TEMP%\_mei40402\importlib_metadata-8.7.0.dist-info\wheel
%TEMP%\_mei40402\importlib_metadata-8.7.0.dist-info\licenses\license
%TEMP%\_mei40402\importlib_metadata-8.7.0.dist-info\top_level.txt
%TEMP%\_mei40402\libcrypto-1_1.dll
%TEMP%\_mei40402\libffi-8.dll
%TEMP%\_mei40402\libjpeg-9.dll
%TEMP%\_mei40402\libmodplug-1.dll
%TEMP%\_mei40402\libogg-0.dll
%TEMP%\_mei40402\libopus-0.dll
%TEMP%\_mei40402\libopusfile-0.dll
%TEMP%\_mei40402\libpng16-16.dll
%TEMP%\_mei40402\libssl-1_1.dll
%TEMP%\_mei40402\libtiff-5.dll
%TEMP%\_mei40402\libwebp-7.dll
%TEMP%\_mei40402\multidict\_multidict.cp311-win_amd64.pyd
%TEMP%\_mei40402\numpy-2.2.6.dist-info\delvewheel
%TEMP%\_mei40402\numpy-2.2.6.dist-info\installer
%TEMP%\_mei40402\numpy-2.2.6.dist-info\license.txt
%TEMP%\_mei40402\numpy-2.2.6.dist-info\metadata
%TEMP%\_mei40402\numpy-2.2.6.dist-info\record
%TEMP%\_mei40402\numpy-2.2.6.dist-info\wheel
%TEMP%\_mei40402\numpy-2.2.6.dist-info\entry_points.txt
%TEMP%\_mei40402\numpy.libs\libscipy_openblas64_-13e2df515630b4a41f92893938845698.dll
%TEMP%\_mei40402\numpy.libs\msvcp140-263139962577ecda4cd9469ca360a746.dll
%TEMP%\_mei40402\numpy\_core\_multiarray_tests.cp311-win_amd64.pyd
%TEMP%\_mei40402\numpy\_core\_multiarray_umath.cp311-win_amd64.pyd
%TEMP%\_mei40402\numpy\fft\_pocketfft_umath.cp311-win_amd64.pyd
%TEMP%\_mei40402\numpy\linalg\_umath_linalg.cp311-win_amd64.pyd
%TEMP%\_mei40402\numpy\random\_bounded_integers.cp311-win_amd64.pyd
%TEMP%\_mei40402\numpy\random\_common.cp311-win_amd64.pyd
%TEMP%\_mei40402\numpy\random\_generator.cp311-win_amd64.pyd
%TEMP%\_mei40402\numpy\random\_mt19937.cp311-win_amd64.pyd
%TEMP%\_mei40402\numpy\random\_pcg64.cp311-win_amd64.pyd
%TEMP%\_mei40402\numpy\random\_philox.cp311-win_amd64.pyd
%TEMP%\_mei40402\numpy\random\_sfc64.cp311-win_amd64.pyd
%TEMP%\_mei40402\numpy\random\bit_generator.cp311-win_amd64.pyd
%TEMP%\_mei40402\numpy\random\mtrand.cp311-win_amd64.pyd
%TEMP%\_mei40402\portmidi.dll
%TEMP%\_mei40402\propcache\_helpers_c.cp311-win_amd64.pyd
%TEMP%\_mei40402\psutil\_psutil_windows.pyd
%TEMP%\_mei40402\pyexpat.pyd
%TEMP%\_mei40402\pygame\sdl2.dll
%TEMP%\_mei40402\pygame\sdl2_image.dll
%TEMP%\_mei40402\pygame\sdl2_mixer.dll
%TEMP%\_mei40402\pygame\sdl2_ttf.dll
%TEMP%\_mei40402\pygame\_freetype.cp311-win_amd64.pyd
%TEMP%\_mei40402\pygame\base.cp311-win_amd64.pyd
%TEMP%\_mei40402\pygame\bufferproxy.cp311-win_amd64.pyd
%TEMP%\_mei40402\pygame\color.cp311-win_amd64.pyd
%TEMP%\_mei40402\pygame\constants.cp311-win_amd64.pyd
%TEMP%\_mei40402\pygame\display.cp311-win_amd64.pyd
%TEMP%\_mei40402\pygame\draw.cp311-win_amd64.pyd
%TEMP%\_mei40402\pygame\event.cp311-win_amd64.pyd
%TEMP%\_mei40402\pygame\font.cp311-win_amd64.pyd
%TEMP%\_mei40402\pygame\freesansbold.ttf
%TEMP%\_mei40402\pygame\freetype.dll
%TEMP%\_mei40402\pygame\image.cp311-win_amd64.pyd
%TEMP%\_mei40402\pygame\imageext.cp311-win_amd64.pyd
%TEMP%\_mei40402\pygame\joystick.cp311-win_amd64.pyd
%TEMP%\_mei40402\pygame\key.cp311-win_amd64.pyd
%TEMP%\_mei40402\pygame\libjpeg-9.dll
%TEMP%\_mei40402\pygame\libogg-0.dll
%TEMP%\_mei40402\pygame\libopus-0.dll
%TEMP%\_mei40402\pygame\libpng16-16.dll
%TEMP%\_mei40402\pygame\mask.cp311-win_amd64.pyd
%TEMP%\_mei40402\pygame\math.cp311-win_amd64.pyd
%TEMP%\_mei40402\pygame\mixer.cp311-win_amd64.pyd
%TEMP%\_mei40402\pygame\mixer_music.cp311-win_amd64.pyd
%TEMP%\_mei40402\pygame\mouse.cp311-win_amd64.pyd
%TEMP%\_mei40402\pygame\pixelarray.cp311-win_amd64.pyd
%TEMP%\_mei40402\pygame\pixelcopy.cp311-win_amd64.pyd
%TEMP%\_mei40402\pygame\pygame_icon.bmp
%TEMP%\_mei40402\pygame\rect.cp311-win_amd64.pyd
%TEMP%\_mei40402\pygame\rwobject.cp311-win_amd64.pyd
%TEMP%\_mei40402\pygame\scrap.cp311-win_amd64.pyd
%TEMP%\_mei40402\pygame\surface.cp311-win_amd64.pyd
%TEMP%\_mei40402\pygame\surflock.cp311-win_amd64.pyd
%TEMP%\_mei40402\pygame\time.cp311-win_amd64.pyd
%TEMP%\_mei40402\pygame\transform.cp311-win_amd64.pyd
%TEMP%\_mei40402\pygame\zlib1.dll
%TEMP%\_mei40402\python3.dll
%TEMP%\_mei40402\python311.dll
%TEMP%\_mei40402\pywin32_system32\pythoncom311.dll
%TEMP%\_mei40402\pywin32_system32\pywintypes311.dll
%TEMP%\_mei40402\select.pyd
%TEMP%\_mei40402\setuptools\_vendor\jaraco\text\lorem ipsum.txt
%TEMP%\_mei40402\unicodedata.pyd
%TEMP%\_mei40402\win32\_win32sysloader.pyd
%TEMP%\_mei40402\win32\win32api.pyd
%TEMP%\_mei40402\win32\win32event.pyd
%TEMP%\_mei40402\win32\win32pdh.pyd
%TEMP%\_mei40402\win32\win32trace.pyd
%TEMP%\_mei40402\yaml\_yaml.cp311-win_amd64.pyd
%TEMP%\_mei40402\yarl\_quoting_c.cp311-win_amd64.pyd
%TEMP%\_mei40402\zlib1.dll
%TEMP%\_mei40402\zstandard\_cffi.cp311-win_amd64.pyd
%TEMP%\_mei40402\zstandard\backend_c.cp311-win_amd64.pyd
<Current directory>\client_game.exe
%TEMP%\sg3rie6h
%TEMP%\comtypes_cache\client-311\_00020430_0000_0000_c000_000000000046_0_2_0.py
%TEMP%\comtypes_cache\client-311\stdole.py
%TEMP%\comtypes_cache\client-311\_c866ca3a_32f7_11d2_9602_00c04f8ee628_0_5_4.py
%TEMP%\comtypes_cache\client-311\speechlib.py
%APPDATA%\microsoft\speech\files\userlexicons\sp_2b577a3462ea4dbb8439a9b4fbb835c5.dat

Sets the 'hidden' attribute to the following files

<Current directory>\client.exe

Deletes following files that it created itself

%TEMP%\_mei34762\attrs-25.3.0.dist-info\installer
%TEMP%\_mei34762\attrs-25.3.0.dist-info\licenses\license
%TEMP%\_mei34762\attrs-25.3.0.dist-info\metadata
%TEMP%\_mei34762\attrs-25.3.0.dist-info\record
%TEMP%\_mei34762\attrs-25.3.0.dist-info\wheel
%TEMP%\_mei34762\base_library.zip
%TEMP%\_mei34762\certifi\cacert.pem
%TEMP%\_mei34762\charset_normalizer\md.cp311-win_amd64.pyd
%TEMP%\_mei34762\charset_normalizer\md__mypyc.cp311-win_amd64.pyd
%TEMP%\_mei34762\cryptography\hazmat\bindings\_rust.pyd
%TEMP%\_mei34762\cryptography-46.0.3.dist-info\installer
%TEMP%\_mei34762\cryptography-46.0.3.dist-info\licenses\license
%TEMP%\_mei34762\cryptography-46.0.3.dist-info\licenses\license.apache
%TEMP%\_mei34762\cryptography-46.0.3.dist-info\licenses\license.bsd
%TEMP%\_mei34762\cryptography-46.0.3.dist-info\metadata
%TEMP%\_mei34762\cryptography-46.0.3.dist-info\record
%TEMP%\_mei34762\cryptography-46.0.3.dist-info\wheel
%TEMP%\_mei34762\cv2\config-3.py
%TEMP%\_mei34762\cv2\config.py
%TEMP%\_mei34762\cv2\cv2.pyd
%TEMP%\_mei34762\cv2\data\__init__.py
%TEMP%\_mei34762\cv2\gapi\__init__.py
%TEMP%\_mei34762\cv2\load_config_py3.py
%TEMP%\_mei34762\cv2\mat_wrapper\__init__.py
%TEMP%\_mei34762\cv2\misc\version.py
%TEMP%\_mei34762\cv2\misc\__init__.py
%TEMP%\_mei34762\cv2\opencv_videoio_ffmpeg4120_64.dll
%TEMP%\_mei34762\cv2\typing\__init__.py
%TEMP%\_mei34762\cv2\utils\__init__.py
%TEMP%\_mei34762\cv2\version.py
%TEMP%\_mei34762\cv2\__init__.py
%TEMP%\_mei34762\freetype.dll
%TEMP%\_mei34762\importlib_metadata-8.7.0.dist-info\installer
%TEMP%\_mei34762\importlib_metadata-8.7.0.dist-info\licenses\license
%TEMP%\_mei34762\importlib_metadata-8.7.0.dist-info\metadata
%TEMP%\_mei34762\importlib_metadata-8.7.0.dist-info\record
%TEMP%\_mei34762\importlib_metadata-8.7.0.dist-info\top_level.txt
%TEMP%\_mei34762\importlib_metadata-8.7.0.dist-info\wheel
%TEMP%\_mei34762\libcrypto-1_1.dll
%TEMP%\_mei34762\libffi-8.dll
%TEMP%\_mei34762\libjpeg-9.dll
%TEMP%\_mei34762\libmodplug-1.dll
%TEMP%\_mei34762\libogg-0.dll
%TEMP%\_mei34762\libopus-0.dll
%TEMP%\_mei34762\libopusfile-0.dll
%TEMP%\_mei34762\libpng16-16.dll
%TEMP%\_mei34762\libssl-1_1.dll
%TEMP%\_mei34762\libtiff-5.dll
%TEMP%\_mei34762\libwebp-7.dll
%TEMP%\_mei34762\multidict\_multidict.cp311-win_amd64.pyd
%TEMP%\_mei34762\numpy\fft\_pocketfft_umath.cp311-win_amd64.pyd
%TEMP%\_mei34762\numpy\linalg\_umath_linalg.cp311-win_amd64.pyd
%TEMP%\_mei34762\numpy\random\bit_generator.cp311-win_amd64.pyd
%TEMP%\_mei34762\numpy\random\mtrand.cp311-win_amd64.pyd
%TEMP%\_mei34762\numpy\random\_bounded_integers.cp311-win_amd64.pyd
%TEMP%\_mei34762\numpy\random\_common.cp311-win_amd64.pyd
%TEMP%\_mei34762\numpy\random\_generator.cp311-win_amd64.pyd
%TEMP%\_mei34762\numpy\random\_mt19937.cp311-win_amd64.pyd
%TEMP%\_mei34762\numpy\random\_pcg64.cp311-win_amd64.pyd
%TEMP%\_mei34762\numpy\random\_philox.cp311-win_amd64.pyd
%TEMP%\_mei34762\numpy\random\_sfc64.cp311-win_amd64.pyd
%TEMP%\_mei34762\numpy\_core\_multiarray_tests.cp311-win_amd64.pyd
%TEMP%\_mei34762\numpy\_core\_multiarray_umath.cp311-win_amd64.pyd
%TEMP%\_mei34762\numpy-2.2.6.dist-info\delvewheel
%TEMP%\_mei34762\numpy-2.2.6.dist-info\entry_points.txt
%TEMP%\_mei34762\numpy-2.2.6.dist-info\installer
%TEMP%\_mei34762\numpy-2.2.6.dist-info\license.txt
%TEMP%\_mei34762\numpy-2.2.6.dist-info\metadata
%TEMP%\_mei34762\numpy-2.2.6.dist-info\record
%TEMP%\_mei34762\numpy-2.2.6.dist-info\wheel
%TEMP%\_mei34762\numpy.libs\libscipy_openblas64_-13e2df515630b4a41f92893938845698.dll
%TEMP%\_mei34762\numpy.libs\msvcp140-263139962577ecda4cd9469ca360a746.dll
%TEMP%\_mei34762\portmidi.dll
%TEMP%\_mei34762\propcache\_helpers_c.cp311-win_amd64.pyd
%TEMP%\_mei34762\psutil\_psutil_windows.pyd
%TEMP%\_mei34762\pyexpat.pyd
%TEMP%\_mei34762\pygame\base.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\bufferproxy.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\color.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\constants.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\display.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\draw.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\event.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\font.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\freesansbold.ttf
%TEMP%\_mei34762\pygame\freetype.dll
%TEMP%\_mei34762\pygame\image.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\imageext.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\joystick.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\key.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\libjpeg-9.dll
%TEMP%\_mei34762\pygame\libogg-0.dll
%TEMP%\_mei34762\pygame\libopus-0.dll
%TEMP%\_mei34762\pygame\libpng16-16.dll
%TEMP%\_mei34762\pygame\mask.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\math.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\mixer.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\mixer_music.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\mouse.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\pixelarray.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\pixelcopy.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\pygame_icon.bmp
%TEMP%\_mei34762\pygame\rect.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\rwobject.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\scrap.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\sdl2.dll
%TEMP%\_mei34762\pygame\sdl2_image.dll
%TEMP%\_mei34762\pygame\sdl2_mixer.dll
%TEMP%\_mei34762\pygame\sdl2_ttf.dll
%TEMP%\_mei34762\pygame\surface.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\surflock.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\time.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\transform.cp311-win_amd64.pyd
%TEMP%\_mei34762\pygame\zlib1.dll
%TEMP%\_mei34762\pygame\_freetype.cp311-win_amd64.pyd
%TEMP%\_mei34762\python3.dll
%TEMP%\_mei34762\python311.dll
%TEMP%\_mei34762\pythonwin\mfc140u.dll
%TEMP%\_mei34762\pythonwin\win32ui.pyd
%TEMP%\_mei34762\pywin32_system32\pythoncom311.dll
%TEMP%\_mei34762\pywin32_system32\pywintypes311.dll
%TEMP%\_mei34762\sdl2.dll
%TEMP%\_mei34762\sdl2_image.dll
%TEMP%\_mei34762\sdl2_mixer.dll
%TEMP%\_mei34762\sdl2_ttf.dll
%TEMP%\_mei34762\select.pyd
%TEMP%\_mei34762\setuptools\_vendor\jaraco\text\lorem ipsum.txt
%TEMP%\_mei34762\unicodedata.pyd
%TEMP%\_mei34762\vcruntime140.dll
%TEMP%\_mei34762\vcruntime140_1.dll
%TEMP%\_mei34762\win32\win32api.pyd
%TEMP%\_mei34762\win32\win32event.pyd
%TEMP%\_mei34762\win32\win32pdh.pyd
%TEMP%\_mei34762\win32\win32trace.pyd
%TEMP%\_mei34762\win32\_win32sysloader.pyd
%TEMP%\_mei34762\yaml\_yaml.cp311-win_amd64.pyd
%TEMP%\_mei34762\yarl\_quoting_c.cp311-win_amd64.pyd
%TEMP%\_mei34762\zlib1.dll
%TEMP%\_mei34762\zstandard\backend_c.cp311-win_amd64.pyd
%TEMP%\_mei34762\zstandard\_cffi.cp311-win_amd64.pyd
%TEMP%\_mei34762\_asyncio.pyd
%TEMP%\_mei34762\_bz2.pyd
%TEMP%\_mei34762\_cffi_backend.cp311-win_amd64.pyd
%TEMP%\_mei34762\_ctypes.pyd
%TEMP%\_mei34762\_decimal.pyd
%TEMP%\_mei34762\_hashlib.pyd
%TEMP%\_mei34762\_lzma.pyd
%TEMP%\_mei34762\_multiprocessing.pyd
%TEMP%\_mei34762\_overlapped.pyd
%TEMP%\_mei34762\_queue.pyd
%TEMP%\_mei34762\_socket.pyd
%TEMP%\_mei34762\_sounddevice_data\portaudio-binaries\libportaudio64bit-asio.dll
%TEMP%\_mei34762\_sounddevice_data\portaudio-binaries\libportaudio64bit.dll
%TEMP%\_mei34762\_sounddevice_data\portaudio-binaries\readme.md
%TEMP%\_mei34762\_ssl.pyd
%TEMP%\_mei34762\_uuid.pyd
%TEMP%\sg3rie6h

Miscellaneous

Creates and executes the following

'<Current directory>\client.exe'

Restarts the analyzed sample

Executes the following

'<SYSTEM32>\cmd.exe' /c "ver"
'<SYSTEM32>\cmd.exe' /c "<Current directory>\client.exe"
'<SYSTEM32>\cmd.exe' /c "ver"' (with hidden window)
'<SYSTEM32>\cmd.exe' /c "<Current directory>\client.exe"' (with hidden window)

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical Information

Curing recommendations

Free trial