Windows Analysis Report
Grumpy_1.8_installer.exe

Overview

General Information

Sample name: Grumpy_1.8_installer.exe
Analysis ID: 1391488
MD5: 4b82b9cd581ba233113e9f6f2ddc12d5
SHA1: a526882700ff1e157f6372aff9ca22f6388de85e
SHA256: a01b6e217c13a06ec6b4e60cbbf0d723e2836546acbf88a47677174443613145
Infos:

Detection

Score: 14
Range: 0 - 100
Whitelisted: false
Confidence: 20%

Signatures

Uses powercfg.exe to modify the power settings
Allocates memory with a write watch (potentially for evading sandboxes)
Binary contains a suspicious time stamp
Drops PE files
Enables debug privileges
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
Found dropped PE file which has not been started or loaded
PE file contains executable resources (Code or Archives)
PE file contains more sections than normal
PE file contains sections with non-standard names
PE file does not import any functions
Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)
Queries the volume information (name, serial number etc) of a device
Sample execution stops while process was sleeping (likely an evasion)
Sample file is different than original file name gathered from version info
Tries to load missing DLLs
Uses 32bit PE files

Classification

RansomwareSpreadingPhishingBankerTrojan / BotAdwareSpywareExploiterEvaderMinercleansuspiciousmalicious
Uses 32bit PE files
Source: Grumpy_1.8_installer.exe Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Registry value created: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{05C55EB5-3E26-47FF-8B69-22F12EA8DA73}_is1 Jump to behavior
Source: Grumpy_1.8_installer.exe Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Source: Binary string: api-ms-win-core-util-l1-1-0.pdb source: is-6E594.tmp.2.dr
Source: Binary string: api-ms-win-crt-time-l1-1-0.pdb source: is-A89F0.tmp.2.dr
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://ab-initio.mit.edu/Faddeeva
Source: Grumpy_app.exe, 00000006.00000002.3344146984.0000029783D50000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://autosar.org/(.
Source: Grumpy_app.exe, 00000006.00000002.3344146984.0000029783D50000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://autosar.org/(3.
Source: Grumpy_app.exe, 00000006.00000002.3344146984.0000029783D50000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://autosar.org/schema/r(4.
Source: Grumpy_app.exe, 00000006.00000002.3344146984.0000029783D50000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://autosar.org/schema/r4.0
Source: Grumpy_app.exe, 00000006.00000002.3344146984.0000029783D50000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://autosar.org/schema/r4.0p
Source: Grumpy_app.exe, 00000006.00000002.3344146984.0000029783D50000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://autosar.org/schema/r4.0xml
Source: Grumpy_app.exe, 00000006.00000002.3344501412.0000029783F60000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://blogs.msdn.com/b/ericwhite/archive/2008/02/23/the-legacy-hashing-algorithm-in-open-xml.aspx
Source: Grumpy_app.exe, 00000006.00000002.3334109101.0000029782000000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://bugs.python.org/issue3905
Source: is-EPN5O.tmp.2.dr String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: is-EPN5O.tmp.2.dr String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: is-EPN5O.tmp.2.dr String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: is-EPN5O.tmp.2.dr String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: Grumpy_app.exe, 00000006.00000002.3345062257.0000029784160000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://chimera.labs.oreilly.com/books/1230000000393/ch08.html#_discussiuncion_130
Source: Grumpy_app.exe, 00000006.00000002.3345707080.0000029784260000.00000004.00001000.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3346400285.0000029784480000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://code.activestate.com/recipes/52303-the-auxiliary-dictionary-idiom-for-sequences-with-/
Source: Grumpy_app.exe, 00000006.00000003.2525309941.00000297F9505000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000003.2525309941.00000297F95E9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://code.activestate.com/recipes/577452-a-memoize-decorator-for-instance-methods/
Source: Grumpy_app.exe, 00000006.00000003.2523737112.00000297F997B000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000003.2523737112.00000297F9956000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000003.2523566138.00000297F99F9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://code.activestate.com/recipes/577916/
Source: Grumpy_app.exe, 00000006.00000002.3345707080.0000029784260000.00000004.00001000.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3346400285.0000029784480000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://codespeak.net/lxml/objectify/pytype
Source: Grumpy_app.exe, 00000006.00000002.3346400285.0000029784480000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://codespeak.net/lxml/objectify/pytype/2006/chart
Source: is-EPN5O.tmp.2.dr String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: is-EPN5O.tmp.2.dr String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: is-EPN5O.tmp.2.dr String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: is-EPN5O.tmp.2.dr String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: is-EPN5O.tmp.2.dr String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://dlmf.nist.gov/
Source: Grumpy_app.exe, 00000006.00000002.3359300612.00000297861B0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://docs.python.org/ref/encodings.html
Source: Grumpy_app.exe, 00000006.00000002.3346106395.0000029784380000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://ewbi.blogs.com/develops/2004/12/excel_formula_p.html
Source: Grumpy_app.exe, 00000006.00000002.3343561793.00000297837E0000.00000004.00001000.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3345707080.0000029784260000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://exslt.org/regular-expressions
Source: Grumpy_app.exe, 00000006.00000002.3344146984.0000029783D50000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://kayak.2codeornot2code.org/1.0
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://mathworld.wolfram.com/ConfluentHypergeometricLimitFunction.html
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://mpmath.org/
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://netlib.org/amos/
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://netlib.org/amos/hankel1ehankel1e(v
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://netlib.org/amos/hankel2ehankel2e(v
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://netlib.org/amos/hankel2hankel2(v
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://netlib.org/amos/huberhuber(delta
Source: is-EPN5O.tmp.2.dr String found in binary or memory: http://ocsp.digicert.com0
Source: is-EPN5O.tmp.2.dr String found in binary or memory: http://ocsp.digicert.com0A
Source: is-EPN5O.tmp.2.dr String found in binary or memory: http://ocsp.digicert.com0C
Source: is-EPN5O.tmp.2.dr String found in binary or memory: http://ocsp.digicert.com0X
Source: Grumpy_app.exe, 00000006.00000002.3343171371.00000297835D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://presbrey.mit.edu/PyDTA
Source: Grumpy_app.exe, 00000006.00000002.3334803146.00000297820DA000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://python-future.org
Source: Grumpy_app.exe, 00000006.00000002.3334803146.00000297820DA000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://python-future.org/automatic_conversion.html
Source: Grumpy_app.exe, 00000006.00000002.3334803146.00000297820DA000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://python-future.org/credits.html
Source: Grumpy_app.exe, 00000006.00000002.3334803146.00000297820DA000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://pythoncharmers.com
Source: Grumpy_app.exe, 00000006.00000002.3336536159.0000029782864000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3336938313.0000029782A81000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://schema.org/Movie
Source: Grumpy_app.exe, 00000006.00000002.3345707080.0000029784260000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://schemas.xmlsoap.org/wsdl/
Source: Grumpy_app.exe, 00000006.00000002.3345707080.0000029784260000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://schemas.xmlsoap.org/wsdl/orm
Source: Grumpy_app.exe, 00000006.00000002.3346400285.0000029784480000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://stackoverflow.com/questions/27711175/regex-with-multiple-optional-groups
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.00000000055F0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://stanford.edu/~boyd/cvxbook/
Source: Grumpy_app.exe, 00000006.00000003.2523737112.00000297F994C000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.apple.com/DTDs/PropertyList-1.0.
Source: Grumpy_app.exe, 00000006.00000002.3343844152.0000029783AD0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.asam.net/mdf/v4
Source: Grumpy_app.exe, 00000006.00000002.3336938313.0000029782A81000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.ascc.net/xml/schematron
Source: is-EPN5O.tmp.2.dr String found in binary or memory: http://www.digicert.com/CPS0
Source: Grumpy_app.exe, 00000006.00000002.3348764936.0000029784C73000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.gnu.org/copyleft/gpl.html.
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.math.sfu.ca/~cbm/aands/page_297.htm
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.netlib.org/cephes/
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.netlib.org/cephes/bdtrcbdtrc(k
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.netlib.org/cephes/bdtribdtri(k
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.netlib.org/cephes/bdtrikbdtrik(y
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.netlib.org/cephes/btdtriabtdtria(p
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.netlib.org/cephes/btdtribtdtri(a
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.netlib.org/cephes/ellipkellipk(m
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.netlib.org/cephes/elliprcelliprc(x
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.00000000055F0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.qhull.org/
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.00000000055F0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.qhull.org/html/qh-impre.htm#limit
Source: is-EPN5O.tmp.2.dr String found in binary or memory: http://www.zlib.net/D
Source: Grumpy_app.exe, 00000006.00000002.3336536159.0000029782864000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://alembic.sqlalchemy.org
Source: Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3334803146.00000297821E9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://arrow.apache.org/docs/cpp/orc.html#data-types
Source: Grumpy_app.exe, 00000006.00000002.3343171371.00000297835D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://arrow.apache.org/docs/format/CDataInterface.html#data-type-description-format-strings
Source: Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3334803146.00000297821E9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://arrow.apache.org/docs/python/
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3334109101.0000029782000000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://arrow.apache.org/docs/python/api/compute.html
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://arrow.apache.org/docs/python/feather.html
Source: Grumpy_app.exe, 00000006.00000002.3336536159.0000029782864000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://arrow.apache.org/docs/python/generated/pyarrow.csv.ParseOptions.html
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://arxiv.org/abs/1806.06725
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://arxiv.org/abs/math/9310223
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://arxiv.org/abs/math/9409227
Source: Grumpy_app.exe, 00000006.00000002.3334803146.00000297821E9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://blog.ganssle.io/articles/2018/02/aware-datetime-arithmetic.html
Source: Grumpy_app.exe, 00000006.00000002.3340544946.0000029782ED9000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3338101751.0000029782CC9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://bugs.python.org/issue38884
Source: Grumpy_app.exe, 00000006.00000003.2525309941.00000297F9505000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://bugs.python.org/issue44497.
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://cloud.google.com/bigquery/docs/access-control#roles
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://cloud.google.com/bigquery/docs/dataset-locations
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://cloud.google.com/bigquery/docs/pandas-gbq-migration
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://cloud.google.com/bigquery/docs/reference/legacy-sql
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://cloud.google.com/bigquery/docs/reference/rest/v2/jobs#configuration.query
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://cloud.google.com/bigquery/docs/reference/standard-sql/
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://cloud.google.com/bigquery/docs/reference/storage/
Source: Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://cloud.google.com/bigquery/docs/samples/bigquery-pandas-gbq-to-gbq-simple
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://console.cloud.google.com/apis/library/bigquerystorage.googleapis.com
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://data-apis.org/dataframe-protocol/latest/index.html
Source: Grumpy_app.exe, 00000006.00000002.3334803146.00000297821E9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://data.iana.org/time-zones/tz-link.html
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://developers.googleblog.com/2022/02/making-oauth-flows-safer.html?m=1#disallowed-oob
Source: is-2BN6V.tmp.2.dr String found in binary or memory: https://dl.acm.org/citation.cfm?id=359153
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/10#PT5
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/10#PT5berber(x
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/10#PT5besselpolybesselpoly(a
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/10#PT5kelvinkelvin(x
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/10#PT5kl_divkl_div(x
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/10.25.E3
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/10.46.E1
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/10.61
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/11
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/13.2#E2
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/13.2#E6
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/14.30
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/15.2
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/19.16.E1
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/19.16.E5
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/19.16.E6
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/19.20.ii
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/19.20.iii
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/19.25#i
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/19.25#iellipjellipj(u
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/19.25#iellipkincellipkinc(phi
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/19.25#iellipkm1ellipkm1(p
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/19.36.i)
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/25
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/5
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/5.12
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/5.2#E1
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/5.2#i
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/5.2#iii
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/6.2#E1
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/6.2#E5
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/7.2#iii
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/8.17
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/8.19#E2
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://dlmf.nist.gov/8.2#E4
Source: Grumpy_app.exe, 00000006.00000003.2523737112.00000297F9956000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://docs.python.org/3.11/library/binascii.html#binascii.a2b_base64
Source: Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://docs.python.org/3/howto/regex.html#compilation-flags
Source: Grumpy_app.exe, 00000006.00000002.3336536159.0000029782864000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3336222806.00000297826C2000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://docs.python.org/3/library/codecs.html#error-handlers
Source: Grumpy_app.exe, 00000006.00000002.3336536159.0000029782864000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://docs.python.org/3/library/codecs.html#standard-encodings
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3336536159.0000029782864000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://docs.python.org/3/library/datetime.html
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://docs.python.org/3/library/datetime.html#strftime-and-strptime-behavior
Source: Grumpy_app.exe, 00000006.00000002.3334803146.00000297821E9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://docs.python.org/3/library/datetime.html#strftime-and-strptime-behavior.
Source: Grumpy_app.exe, 00000006.00000003.2522551530.00000297F95EA000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000003.2525309941.00000297F95E9000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000003.2522316905.00000297F95E9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://docs.python.org/3/library/multiprocessing.html
Source: Grumpy_app.exe, 00000006.00000002.3336536159.0000029782864000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3336222806.00000297826C2000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://docs.python.org/3/library/pickle.html
Source: Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3336222806.00000297826C2000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3334803146.00000297821E9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://docs.python.org/3/library/pickle.html.
Source: Grumpy_app.exe, 00000006.00000002.3336536159.0000029782864000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3334803146.00000297821E9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://docs.python.org/3/library/sqlite3.html#sqlite3.Cursor.rowcount
Source: Grumpy_app.exe, 00000006.00000002.3336938313.0000029782B87000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3347480580.00000297849E0000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://docs.python.org/3/library/uuid.html
Source: Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3336222806.00000297826C2000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://docs.python.org/3/reference/datamodel.html#emulating-numeric-types
Source: Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://docs.python.org/3/reference/lexical_analysis.html)
Source: Grumpy_app.exe, 00000006.00000002.3336222806.00000297826C2000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://docs.python.org/3/reference/simple_stmts.html#expression-statements
Source: Grumpy_app.exe, 00000006.00000002.3336222806.00000297826C2000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://docs.python.org/3/reference/simple_stmts.html#simple-statements
Source: Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://docs.python.org/3/tutorial
Source: Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://docs.python.org/3/tutorial/index.html
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://docs.scipy.org/doc/numpy/reference/ufuncs.html
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://docs.scipy.org/doc/scipy/reference/interpolate.html#univariate-interpolation
Source: Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3336222806.00000297826C2000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://docs.scipy.org/doc/scipy/reference/signal.windows.html#module-scipy.signal.windows
Source: Grumpy_app.exe, 00000006.00000002.3334803146.00000297821E9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://docs.sqlalchemy.org
Source: Grumpy_app.exe, 00000006.00000002.3336536159.0000029782864000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://docs.sqlalchemy.org/en/14/core/connections.html#sqlalchemy.user.BaseCursorResult.rowcount
Source: Grumpy_app.exe, 00000006.00000002.3336536159.0000029782864000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3334803146.00000297821E9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://docs.sqlalchemy.org/en/20/core/connections.html
Source: Grumpy_app.exe, 00000006.00000002.3334803146.00000297821E9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://docs.sqlalchemy.org/en/20/core/connections.html#sqlalchemy.user.CursorResult.rowcount
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://doi.org/10.1007/978-3-030-04480-0
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://doi.org/10.1007/BF02198293
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://doi.org/10.1007/s10444-012-9283-y
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://doi.org/10.1016/S0377-0427(00)00282-X
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://doi.org/10.1017/CBO9780511804441
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://doi.org/10.1137/S0036141092228477
Source: Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://doi.org/10.1145/331770.331775
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.00000000055F0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://doi.org/10.1371/journal.pone.0276302
Source: Grumpy_app.exe, 00000006.00000002.3334803146.00000297821E9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://en.wikibooks.org/wiki/LaTeX/Tables
Source: Grumpy_app.exe, 00000006.00000002.3334803146.00000297820DA000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://en.wikiped
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://en.wikiversity.org/wiki/Cubic_Spline_Interpolation
Source: Grumpy_app.exe, 00000006.00000002.3336536159.0000029782864000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://gist.github.com/zzzeek/89de958cf0803d148e74861bd682ebae
Source: Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3334803146.00000297821E9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/SethMMorton/natsort
Source: Grumpy_app.exe, 00000006.00000002.3343171371.00000297835D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/data-apis/dataframe-api
Source: Grumpy_app.exe, 00000006.00000002.3342771687.00000297833D0000.00000004.00001000.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3341943081.00000297830D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/data-apis/dataframe-api-compat.
Source: Grumpy_app.exe, 00000006.00000002.3334803146.00000297820DA000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/mitsuhiko/jinja2/blob/master/LICENSE)
Source: Grumpy_app.exe, 00000006.00000002.3342771687.00000297833D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/numba/numba/issues/2916
Source: Grumpy_app.exe, 00000006.00000002.3342771687.00000297833D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/numba/numba/issues/2916d
Source: Grumpy_app.exe, 00000006.00000002.3341943081.00000297830D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/numpy/numpy/issues/8352
Source: Grumpy_app.exe, 00000006.00000002.3342162842.00000297831D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/pandas-dev/pandas
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/pandas-dev/pandas/blob/main/pandas/tests/extension/list/array.py
Source: Grumpy_app.exe, 00000006.00000002.3342461616.00000297832D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/pandas-dev/pandas/issues
Source: Grumpy_app.exe, 00000006.00000002.3342461616.00000297832D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/pandas-dev/pandas/issues.
Source: Grumpy_app.exe, 00000006.00000002.3343416940.00000297836E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/pandas-dev/pandas/issues/13492
Source: Grumpy_app.exe, 00000006.00000002.3342162842.00000297831D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/pandas-dev/pandas/issues/19764
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/pandas-dev/pandas/issues/26747.
Source: Grumpy_app.exe, 00000006.00000002.3344146984.0000029783D50000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/pypa/packaging
Source: Grumpy_app.exe, 00000006.00000002.3334803146.00000297820DA000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/python-attrs/attrs/issues/136
Source: Grumpy_app.exe, 00000006.00000002.3334803146.00000297820DA000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/python-attrs/attrs/issues/428
Source: Grumpy_app.exe, 00000006.00000002.3336536159.0000029782864000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3336222806.00000297826C2000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/python-excel/xlrd.
Source: Grumpy_app.exe, 00000006.00000002.3334803146.00000297820DA000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/python/cpython/blob/main/Lib/_strptime.py
Source: Grumpy_app.exe, 00000006.00000003.2525309941.00000297F9505000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000003.2521371007.00000297F959F000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000003.2521216519.00000297F9659000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000003.2522316905.00000297F9581000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/python/cpython/issues/86361.
Source: Grumpy_app.exe, 00000006.00000002.3347183520.0000029784880000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/python/cpython/issues/99304
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/pyviz/hvplot
Source: Grumpy_1.8_installer.exe, 00000001.00000003.2539742601.00000000022A4000.00000004.00001000.00020000.00000000.sdmp, Grumpy_1.8_installer.tmp, 00000002.00000003.2530642522.000000000246C000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/robin-po/grumpy
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2530642522.000000000246C000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/robin-po/grumpy1
Source: Grumpy_1.8_installer.exe, 00000001.00000003.2089952097.0000000002570000.00000004.00001000.00020000.00000000.sdmp, Grumpy_1.8_installer.tmp, 00000002.00000003.2096094776.0000000002DD0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/robin-po/grumpyDhttps://github.com/robin-po/grumpyDhttps://github.com/robin-po/gr
Source: Grumpy_1.8_installer.exe, 00000001.00000003.2539742601.00000000022A4000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/robin-po/grumpyQN
Source: Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://google-auth-oauthlib.readthedocs.io/en/latest/reference/google_auth_oauthlib.flow.html#googl
Source: Grumpy_app.exe, 00000006.00000002.3336536159.0000029782864000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://html.spec.whatwg.org/multipage/dom.html#global-attributes
Source: Grumpy_app.exe, 00000006.00000002.3336536159.0000029782864000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://html.spec.whatwg.org/multipage/tables.html
Source: Grumpy_1.8_installer.exe String found in binary or memory: https://jrsoftware.org/ishelp/index.php?topic=setupcmdlineSetupU
Source: Grumpy_app.exe, 00000006.00000002.3348235757.0000029784BDF000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://legacy.python.org/dev/peps/pep-0249/#paramstyle
Source: Grumpy_app.exe, 00000006.00000002.3336938313.0000029782A81000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://lxml.de/element_classes.html
Source: Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://numba.pydata.org/numba-doc/dev/reference/numpysupported.html
Source: Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://numba.pydata.org/numba-doc/dev/reference/pysupported.html
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000006395000.00000004.00001000.00020000.00000000.sdmp, is-2BN6V.tmp.2.dr String found in binary or memory: https://numpy.org/devdocs/user/troubleshooting-importerror.html#c-api-incompatibility
Source: Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://numpy.org/doc/stable/reference/arrays.scalars.html
Source: Grumpy_app.exe, 00000006.00000002.3347007328.0000029784780000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://openpyxl.readthedocs.io
Source: Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pL.4
Source: Grumpy_app.exe, 00000006.00000003.2526119202.00000297F9AE3000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://packaging.python.org/specifications/entry-points/
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pandas-gbq.readthedocs.io
Source: Grumpy_app.exe, 00000006.00000002.3343416940.00000297836E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://pandas-gbq.readthedocs.io.
Source: Grumpy_app.exe, 00000006.00000002.3343561793.00000297837E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://pandas-gbq.readthedocs.io/en/latest/api.html#pandas_gbq.read_gbq
Source: Grumpy_app.exe, 00000006.00000002.3343561793.00000297837E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://pandas-gbq.readthedocs.io/en/latest/api.html#pandas_gbq.to_gbq
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pandas-gbq.readthedocs.io/en/latest/howto/authentication.html
Source: Grumpy_app.exe, 00000006.00000002.3336222806.00000297826C2000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000003.2541820825.00000297832D9000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3334803146.00000297821E9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pandas.pydata.org/docs/dev/user_guide/copy_on_write.html
Source: Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3336222806.00000297826C2000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pandas.pydata.org/docs/dev/user_guide/groupby.html#filtration
Source: Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3336222806.00000297826C2000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pandas.pydata.org/docs/dev/user_guide/groupby.html#transformation
Source: Grumpy_app.exe, 00000006.00000002.3342461616.00000297832D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://pandas.pydata.org/docs/dev/user_guide/options.html#frequently-used-options
Source: Grumpy_app.exe, 00000006.00000002.3336222806.00000297826C2000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pandas.pydata.org/docs/user_guide/indexing.html
Source: Grumpy_app.exe, 00000006.00000002.3336536159.0000029782864000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pandas.pydata.org/docs/user_guide/io.html#table-schema
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3336536159.0000029782864000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3336222806.00000297826C2000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3334803146.00000297821E9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pandas.pydata.org/docs/user_guide/io.html?
Source: Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3336222806.00000297826C2000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pandas.pydata.org/pandas-docs/stable/groupby.html
Source: Grumpy_app.exe, 00000006.00000002.3342162842.00000297831D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://pandas.pydata.org/pandas-docs/stable/indexing.html#attribute-access
Source: Grumpy_app.exe, 00000006.00000002.3336536159.0000029782864000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pandas.pydata.org/pandas-docs/stable/io.html#io-chunking
Source: Grumpy_app.exe, 00000006.00000002.3336222806.00000297826C2000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pandas.pydata.org/pandas-docs/stable/user_guide/advanced.html
Source: Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pandas.pydata.org/pandas-docs/stable/user_guide/advanced.html#categoricalindex
Source: Grumpy_app.exe, 00000006.00000002.3334803146.00000297820DA000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pandas.pydata.org/pandas-docs/stable/user_guide/advanced.html#intervalindex
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3334803146.00000297820DA000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pandas.pydata.org/pandas-docs/stable/user_guide/categorical.html
Source: Grumpy_app.exe, 00000006.00000002.3336222806.00000297826C2000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pandas.pydata.org/pandas-docs/stable/user_guide/groupby.html#piping-function-calls
Source: Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3336222806.00000297826C2000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pandas.pydata.org/pandas-docs/stable/user_guide/groupby.html#splitting-an-object-into-groups
Source: Grumpy_app.exe, 00000006.00000002.3334109101.0000029782000000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3342162842.00000297831D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://pandas.pydata.org/pandas-docs/stable/user_guide/indexing.html#returning-a-view-versus-a-copy
Source: Grumpy_app.exe, 00000006.00000002.3336536159.0000029782864000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pandas.pydata.org/pandas-docs/stable/user_guide/io.html
Source: Grumpy_app.exe, 00000006.00000002.3336536159.0000029782864000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3336222806.00000297826C2000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pandas.pydata.org/pandas-docs/stable/user_guide/io.html#line-delimited-json
Source: Grumpy_app.exe, 00000006.00000002.3336536159.0000029782864000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pandas.pydata.org/pandas-docs/stable/user_guide/io.html#query-via-data-columns
Source: Grumpy_app.exe, 00000006.00000002.3336222806.00000297826C2000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pandas.pydata.org/pandas-docs/stable/user_guide/merging.html
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pandas.pydata.org/pandas-docs/stable/user_guide/timeseries.html
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3336222806.00000297826C2000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pandas.pydata.org/pandas-docs/stable/user_guide/timeseries.html#dateoffset-objects
Source: Grumpy_app.exe, 00000006.00000002.3336222806.00000297826C2000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3334803146.00000297821E9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pandas.pydata.org/pandas-docs/stable/user_guide/timeseries.html#offset-aliases
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3336222806.00000297826C2000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pandas.pydata.org/pandas-docs/stable/user_guide/timeseries.html#resampling
Source: Grumpy_app.exe, 00000006.00000002.3342771687.00000297833D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://pandas.pydata.org/pdeps/0004-consistent-to-datetime-parsing.html.
Source: Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://parquet.apache.org/
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://people.sc.fsu.edu/~jburkardt/f_src/special_functions/special_functions.html
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://people.sc.fsu.edu/~jburkardt/f_src/special_functions/special_functions.htmlpdtrpdtr(k
Source: Grumpy_app.exe, 00000006.00000003.2521255513.00000297F964E000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000003.2522316905.00000297F9648000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://peps.python.org/pep-0205/
Source: Grumpy_app.exe, 00000006.00000002.3338101751.0000029782C92000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3336938313.0000029782B2E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://peps.python.org/pep-0484/#generics
Source: Grumpy_app.exe, 00000006.00000002.3336536159.0000029782864000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pypi.org/project/XlsxWriter/
Source: Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pypi.org/project/fastparquet
Source: Grumpy_app.exe, 00000006.00000002.3336536159.0000029782864000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pypi.org/project/odfpy/
Source: Grumpy_app.exe, 00000006.00000002.3336536159.0000029782864000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pypi.org/project/odswriter/
Source: Grumpy_app.exe, 00000006.00000002.3336536159.0000029782864000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pypi.org/project/openpyxl/
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3336536159.0000029782864000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pypi.org/project/pyxlsb/
Source: Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://pypi.org/project/tabulate
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://raw.githubusercontent.com/pandas-dev/
Source: Grumpy_app.exe, 00000006.00000003.2522024721.00000297F990E000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000003.2521905228.00000297F9971000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000003.2522024721.00000297F9971000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000003.2522814086.00000297F9971000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000003.2521993304.00000297F990D000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://setuptools.pypa.io/en/latest/pkg_resources.html
Source: Grumpy_app.exe, 00000006.00000003.2521905228.00000297F9971000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000003.2523737112.00000297F997B000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000003.2522024721.00000297F9971000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000003.2521966934.00000297F96A3000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000003.2521905228.00000297F9922000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000003.2522814086.00000297F9971000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://setuptools.pypa.io/en/latest/pkg_resources.html#basic-resource-access
Source: Grumpy_app.exe, 00000006.00000003.2521905228.00000297F9971000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000003.2522024721.00000297F9971000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000003.2521905228.00000297F9922000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://setuptools.pypa.io/en/latest/references/keywords.html#keyword-namespace-packagesr#
Source: Grumpy_app.exe, 00000006.00000003.2521905228.00000297F9971000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000003.2522024721.00000297F9971000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000003.2521905228.00000297F9922000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://setuptools.pypa.io/en/latest/references/keywords.html#keyword-namespace-packagesr#r$Nrjr
Source: Grumpy_app.exe, 00000006.00000002.3343416940.00000297836E0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://specs.frictionlessdata.io/table-schema/
Source: Grumpy_app.exe, 00000006.00000002.3347183520.0000029784880000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://sqlalche.me/e/
Source: Grumpy_app.exe, 00000006.00000002.3347007328.0000029784780000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://sqlalche.me/e/b8d9)
Source: Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://stackoverflow.com/a/17758115
Source: Grumpy_app.exe, 00000006.00000002.3334803146.00000297821E9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://stackoverflow.com/questions/4859217/
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://tqdm.github.io/
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.000000000608B000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://web.maths.unsw.edu.au/~fkuo/sobol/.
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.000000000608B000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://web.maths.unsw.edu.au/~fkuo/sobol/new-joe-kuo-6.21201
Source: Grumpy_app.exe, 00000006.00000003.2523737112.00000297F997B000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000003.2523737112.00000297F9956000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000003.2523566138.00000297F99F9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://www-cs-faculty.stanford.edu/~knuth/fasc2a.ps.gz
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.boost.org/doc/libs/1_61_0/libs/math/doc/html/math_toolkit/sf_gamma/igamma.html
Source: Grumpy_app.exe, 00000006.00000002.3334803146.00000297821E9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://www.egenix.com/products/python/mxBase/mxDateTime/
Source: Grumpy_app.exe, 00000006.00000002.3334803146.00000297821E9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://www.freebsd.org/cgi/man.cgi?query=zic&sektion=8
Source: Grumpy_app.exe, 00000006.00000002.3347480580.0000029784A8D000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://www.gevent.org/
Source: Grumpy_app.exe, 00000006.00000002.3334803146.00000297821E9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://www.gnu.org/software/libc/manual/html_node/TZ-Variable.html
Source: Grumpy_app.exe, 00000006.00000002.3334803146.00000297821E9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://www.iana.org/time-zones
Source: Grumpy_app.exe, 00000006.00000002.3347480580.00000297849E0000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3358580514.0000029785CB0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.ietf.org/rfc/rfc1738.txt
Source: Grumpy_1.8_installer.exe, 00000001.00000003.2091633508.000000007FB50000.00000004.00001000.00020000.00000000.sdmp, Grumpy_1.8_installer.exe, 00000001.00000003.2091180414.0000000002570000.00000004.00001000.00020000.00000000.sdmp, Grumpy_1.8_installer.tmp, 00000002.00000000.2093718269.0000000000401000.00000020.00000001.01000000.00000004.sdmp String found in binary or memory: https://www.innosetup.com/
Source: Grumpy_1.8_installer.tmp, 00000002.00000003.2516037047.0000000005CAB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.itl.nist.gov/div898/handbook/eda/section3/eda3666.htm
Source: Grumpy_app.exe, 00000006.00000002.3343561793.00000297837E0000.00000004.00001000.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3344002148.0000029783C40000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.peak-system.com/produktcd/Pdf/English/PEAK_CAN_TRC_File_Format.pdf
Source: Grumpy_app.exe, 00000006.00000002.3336536159.0000029782864000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3347480580.0000029784A8D000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://www.postgresql.org/docs/current/static/queries-with.html
Source: Grumpy_app.exe, 00000006.00000002.3334803146.00000297821E9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://www.python.org/dev/peps/pep-0249/
Source: Grumpy_app.exe, 00000006.00000002.3358700464.0000029785DB0000.00000004.00001000.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3347183520.0000029784880000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.python.org/dev/peps/pep-0249/#connection-objects
Source: Grumpy_app.exe, 00000006.00000002.3358700464.0000029785DB0000.00000004.00001000.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3347183520.0000029784880000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.python.org/dev/peps/pep-0249/#cursor-objects
Source: Grumpy_app.exe, 00000006.00000002.3347183520.0000029784880000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.python.org/dev/peps/pep-0249/#description
Source: Grumpy_app.exe, 00000006.00000002.3347480580.0000029784A8D000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://www.python.org/dev/peps/pep-0249/#lastrowid
Source: Grumpy_app.exe, 00000006.00000002.3358700464.0000029785DB0000.00000004.00001000.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3347007328.0000029784780000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.python.org/dev/peps/pep-0249/#type-objects
Source: Grumpy_app.exe, 00000006.00000003.2516857078.00000297F90FF000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000003.2516962961.00000297F9135000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000003.2516857078.00000297F912B000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://www.python.org/download/releases/2.3/mro/.
Source: Grumpy_1.8_installer.exe, 00000001.00000003.2091633508.000000007FB50000.00000004.00001000.00020000.00000000.sdmp, Grumpy_1.8_installer.exe, 00000001.00000003.2091180414.0000000002570000.00000004.00001000.00020000.00000000.sdmp, Grumpy_1.8_installer.tmp, 00000002.00000000.2093718269.0000000000401000.00000020.00000001.01000000.00000004.sdmp String found in binary or memory: https://www.remobjects.com/ps
Source: Grumpy_app.exe, 00000006.00000002.3343171371.00000297835D0000.00000004.00001000.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3335571082.0000029782512000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://www.stata.com/help.cgi?datetime
Source: Grumpy_app.exe, 00000006.00000002.3336222806.00000297826C2000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3334803146.00000297821E9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://www.stata.com/help.cgi?missing
Source: Grumpy_app.exe, 00000006.00000002.3343171371.00000297835D0000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://www.statsmodels.org/devel/
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://xarray.pydata.org/en/stable/
Source: Grumpy_app.exe, 00000006.00000002.3335571082.00000297823ED000.00000004.00000020.00020000.00000000.sdmp, Grumpy_app.exe, 00000006.00000002.3336536159.0000029782864000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://xlrd.readthedocs.io/en/latest/

System Summary
barindex
Uses powercfg.exe to modify the power settings
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process created: C:\Windows\System32\powercfg.exe powercfg /change hibernate-timeout-ac 0
PE file contains executable resources (Code or Archives)
Source: Grumpy_1.8_installer.tmp.1.dr Static PE information: Resource name: RT_RCDATA type: PE32+ executable (console) x86-64, for MS Windows
Source: is-16BSN.tmp.2.dr Static PE information: Resource name: RT_RCDATA type: PE32+ executable (console) x86-64, for MS Windows
PE file contains more sections than normal
Source: is-ATABC.tmp.2.dr Static PE information: Number of sections : 19 > 10
PE file does not import any functions
Source: is-7S0IM.tmp.2.dr Static PE information: No import functions for PE file found
Source: is-J9ROR.tmp.2.dr Static PE information: No import functions for PE file found
Source: is-ND8JH.tmp.2.dr Static PE information: No import functions for PE file found
Source: is-119RA.tmp.2.dr Static PE information: No import functions for PE file found
Source: is-RCFU2.tmp.2.dr Static PE information: No import functions for PE file found
Source: is-ITSD2.tmp.2.dr Static PE information: No import functions for PE file found
Source: is-5K4IF.tmp.2.dr Static PE information: No import functions for PE file found
Sample file is different than original file name gathered from version info
Source: Grumpy_1.8_installer.exe, 00000001.00000003.2091180414.000000000265A000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: OriginalFileName vs Grumpy_1.8_installer.exe
Source: Grumpy_1.8_installer.exe, 00000001.00000003.2091633508.000000007FE36000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: OriginalFileName vs Grumpy_1.8_installer.exe
Source: Grumpy_1.8_installer.exe, 00000001.00000000.2089554847.00000000004C6000.00000002.00000001.01000000.00000003.sdmp Binary or memory string: OriginalFileName vs Grumpy_1.8_installer.exe
Source: Grumpy_1.8_installer.exe, 00000001.00000003.2539742601.0000000002278000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: OriginalFilenamekernel32j% vs Grumpy_1.8_installer.exe
Source: Grumpy_1.8_installer.exe Binary or memory string: OriginalFileName vs Grumpy_1.8_installer.exe
Tries to load missing DLLs
Source: C:\Users\user\Desktop\Grumpy_1.8_installer.exe Section loaded: version.dll Jump to behavior
Source: C:\Users\user\Desktop\Grumpy_1.8_installer.exe Section loaded: netapi32.dll Jump to behavior
Source: C:\Users\user\Desktop\Grumpy_1.8_installer.exe Section loaded: netutils.dll Jump to behavior
Source: C:\Users\user\Desktop\Grumpy_1.8_installer.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Users\user\Desktop\Grumpy_1.8_installer.exe Section loaded: apphelp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: mpr.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: version.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: netapi32.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: winhttp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: netutils.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: uxtheme.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: iconcodecservice.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: windowscodecs.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: wtsapi32.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: winsta.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: textinputframework.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: coreuicomponents.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: coremessaging.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: ntmarta.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: windows.storage.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: wldp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: profapi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: shfolder.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: rstrtmgr.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: ncrypt.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: ntasn1.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: textshaping.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: dwmapi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: sspicli.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: explorerframe.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: sfc.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: sfc_os.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: propsys.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: linkinfo.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: ntshrui.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: srvcli.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: cscapi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Section loaded: apphelp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: version.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: vcruntime140.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: libffi-8.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: iphlpapi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: propsys.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: wbemcomn.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: amsi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: wbemcomn.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: libcrypto-3.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: libssl-3.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: libcrypto-3.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: mswsock.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: qt6gui.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: qt6core.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: msvcp140_2.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: mpr.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: authz.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: netapi32.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: winmm.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: msvcp140.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: msvcp140_1.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: vcruntime140_1.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: d3d11.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: msvcp140.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: dxgi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: vcruntime140_1.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: d3d12.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: dwrite.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: msvcp140.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: msvcp140_1.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: vcruntime140_1.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: vcruntime140_1.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: dxgi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: netutils.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: srvcli.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: qt6widgets.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: dwmapi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: libopenblas64__v0.3.23-293-gc2f4bdbb-gcc_10_3_0-2bde3a66a51006b2b53eb373ff767a3f.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: qt6svg.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: qt6openglwidgets.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: qt6opengl.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: qt6test.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: tzres.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: msvcp140-fa0758dedafbbe194d3ee96e3dc2b9a3.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: sqlite3.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: vxlapi64.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: canlib32.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: powrprof.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: pdh.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: umpdc.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: wtsapi32.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: mscoree.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: vcruntime140_clr0400.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: ucrtbase_clr0400.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: ucrtbase_clr0400.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: cryptsp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: rsaenh.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: urlmon.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: iertutil.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: sspicli.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: d3d9.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: devobj.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: windows.ui.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: windowmanagementapi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: textinputframework.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: inputhost.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: twinapi.appcore.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: coreuicomponents.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: twinapi.appcore.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: coreuicomponents.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: ntmarta.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: windows.ui.immersive.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: qt6pdf.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: qt6network.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: dnsapi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: secur32.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: winhttp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: dataexchange.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Section loaded: dcomp.dll Jump to behavior
Source: C:\Windows\System32\powercfg.exe Section loaded: powrprof.dll Jump to behavior
Source: C:\Windows\System32\powercfg.exe Section loaded: powrprof.dll Jump to behavior
Source: C:\Windows\System32\powercfg.exe Section loaded: powrprof.dll Jump to behavior
Source: C:\Windows\System32\powercfg.exe Section loaded: umpdc.dll Jump to behavior
Source: C:\Windows\System32\powercfg.exe Section loaded: powrprof.dll Jump to behavior
Source: C:\Windows\System32\powercfg.exe Section loaded: powrprof.dll Jump to behavior
Source: C:\Windows\System32\powercfg.exe Section loaded: umpdc.dll Jump to behavior
Uses 32bit PE files
Source: Grumpy_1.8_installer.exe Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI
Source: is-AMJGV.tmp.2.dr Static PE information: Section: .qtmimed ZLIB complexity 0.9982733669051205
Source: classification engine Classification label: clean14.evad.winEXE@11/1299@0/0
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Mutant created: NULL
Source: C:\Windows\System32\conhost.exe Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6740:120:WilError_03
Source: C:\Windows\System32\conhost.exe Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4208:120:WilError_03
Source: C:\Users\user\Desktop\Grumpy_1.8_installer.exe File created: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp Jump to behavior
Source: C:\Users\user\Desktop\Grumpy_1.8_installer.exe Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales Jump to behavior
Source: C:\Users\user\Desktop\Grumpy_1.8_installer.exe Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT Architecture FROM Win32_Processor
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File read: C:\Users\desktop.ini Jump to behavior
Source: C:\Users\user\Desktop\Grumpy_1.8_installer.exe Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion RegisteredOrganization Jump to behavior
Source: Grumpy_app.exe, 00000006.00000002.3358310591.0000029785AB0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: Select statement '%r' returned no FROM clauses due to auto-correlation; specify correlate(<tables>) to control correlation manually.
Source: Grumpy_1.8_installer.exe String found in binary or memory: /LOADINF="filename"
Source: C:\Users\user\Desktop\Grumpy_1.8_installer.exe File read: C:\Users\user\Desktop\Grumpy_1.8_installer.exe Jump to behavior
Source: unknown Process created: C:\Users\user\Desktop\Grumpy_1.8_installer.exe C:\Users\user\Desktop\Grumpy_1.8_installer.exe
Source: C:\Users\user\Desktop\Grumpy_1.8_installer.exe Process created: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp "C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp" /SL5="$103CE,84060669,793600,C:\Users\user\Desktop\Grumpy_1.8_installer.exe"
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Process created: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process created: C:\Windows\System32\powercfg.exe powercfg /change hibernate-timeout-ac 0
Source: C:\Windows\System32\powercfg.exe Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process created: C:\Windows\System32\powercfg.exe powercfg /change hibernate-timeout-dc 0
Source: C:\Windows\System32\powercfg.exe Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\Grumpy_1.8_installer.exe Process created: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp "C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp" /SL5="$103CE,84060669,793600,C:\Users\user\Desktop\Grumpy_1.8_installer.exe" Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Process created: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process created: C:\Windows\System32\powercfg.exe powercfg /change hibernate-timeout-ac 0 Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process created: C:\Windows\System32\powercfg.exe powercfg /change hibernate-timeout-dc 0 Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{00BB2765-6A77-11D0-A535-00C04FD7D062}\InProcServer32 Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion RegisteredOwner Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Window found: window name: TMainForm Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Automated click: Next
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Automated click: Install
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Automated click: Next
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Automated click: Next
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Automated click: Next
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Automated click: Next
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Automated click: Next
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Automated click: Next
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Automated click: Next
Source: Window Recorder Window detected: More than 3 window changes detected
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Registry value created: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{05C55EB5-3E26-47FF-8B69-22F12EA8DA73}_is1 Jump to behavior
Source: Grumpy_1.8_installer.exe Static file information: File size 84981162 > 1048576
Source: Grumpy_1.8_installer.exe Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Source: Binary string: api-ms-win-core-util-l1-1-0.pdb source: is-6E594.tmp.2.dr
Source: Binary string: api-ms-win-crt-time-l1-1-0.pdb source: is-A89F0.tmp.2.dr
Binary contains a suspicious time stamp
Source: is-5K4IF.tmp.2.dr Static PE information: 0xF9CDD9FE [Mon Oct 23 03:31:10 2102 UTC]
PE file contains sections with non-standard names
Source: Grumpy_1.8_installer.exe Static PE information: section name: .didata
Source: Grumpy_1.8_installer.tmp.1.dr Static PE information: section name: .didata
Source: is-16BSN.tmp.2.dr Static PE information: section name: .didata
Source: is-AMJGV.tmp.2.dr Static PE information: section name: .qtmimed
Source: is-EAOR0.tmp.2.dr Static PE information: section name: _RDATA
Source: is-L0C74.tmp.2.dr Static PE information: section name: .qtmetad
Source: is-F8T3R.tmp.2.dr Static PE information: section name: .qtmetad
Source: is-GNTSM.tmp.2.dr Static PE information: section name: _RDATA
Source: is-ATABC.tmp.2.dr Static PE information: section name: .xdata
Source: is-ATABC.tmp.2.dr Static PE information: section name: /4
Source: is-ATABC.tmp.2.dr Static PE information: section name: /19
Source: is-ATABC.tmp.2.dr Static PE information: section name: /31
Source: is-ATABC.tmp.2.dr Static PE information: section name: /45
Source: is-ATABC.tmp.2.dr Static PE information: section name: /57
Source: is-ATABC.tmp.2.dr Static PE information: section name: /70
Source: is-ATABC.tmp.2.dr Static PE information: section name: /81
Source: is-ATABC.tmp.2.dr Static PE information: section name: /92
Drops PE files
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-OMDMO.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-1UTBJ.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-DFAGS.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\Qt6OpenGLWidgets.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-QRLO0.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\_sqlite3.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\_queue.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\base.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\is-EPIJ2.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\ops_dispatch.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-environment-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\hashtable.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-stdio-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-utility-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\is-R6KH8.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-MQMJB.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-R6I0P.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\_hashlib.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\QtCore.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\period.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\is-9T600.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\is-VNC6G.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-DBDJD.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-synch-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\properties.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-5BQ2G.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\ops.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\_ssl.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-GSP79.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\is-2OOS5.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\sas.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-KONC8.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-V57GK.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-IEIGG.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-memory-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\window\indexers.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-0N9C9.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\parsing.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\is-SV93D.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\Qt6Core.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\Qt6Network.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\is-L9N31.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\unicodedata.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\is-77TRC.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\_elementpath.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\is-MFEH1.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-errorhandling-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-SJ9KS.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-999UC.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\_testinternalcapi.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\Qt6PrintSupport.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\Qt6OpenGL.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-profile-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\plugins\platforms\qwindows.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\is-385T4.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-16BSN.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\etree.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-0EJBQ.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-convert-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\_cffi_backend.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\clr_loader\ffi\dlls\x86\is-K28R6.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-P6RSI.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-rtlsupport-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\is-S1BG6.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-5K4IF.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-6VBJI.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\window\is-R8B39.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-FTB1O.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-private-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-LKV39.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-localization-l1-2-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-8U1BP.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\markupsafe\_speedups.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-runtime-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\tk86t.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\linalg\_umath_linalg.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-0QFIV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-5AVJT.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-QDJTE.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-filesystem-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\Desktop\Grumpy_1.8_installer.exe File created: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslib.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\_socket.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-ENEMS.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-S2K3A.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\clr_loader\ffi\dlls\amd64\ClrLoader.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-8SSAT.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-console-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-libraryloader-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\sparse.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\dtypes.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-20O04.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\join.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-I4N80.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-35LEV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\_tkinter.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-7S0IM.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-locale-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\offsets.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\timezones.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\Qt6Gui.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\Qt6UiTools.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\is-MB3SO.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-AFS4E.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-LDN0F.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numexpr\interpreter.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\python3.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-time-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\_asyncio.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\indexing.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\arrays.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\is-1RP6M.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\asammdf\blocks\cutils.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\conversion.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\is-AMJGV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-032NJ.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\_philox.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\tcl86t.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\hashing.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-BO88H.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-JP513.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\pandas_datetime.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\is-LGDL4.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-T9UHC.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-HL9F2.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-G77C9.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-BU566.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-namedpipe-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-200BV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\fields.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-IVGLO.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\is-ATAHU.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-datetime-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\html\diff.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-C6JTN.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\_mt19937.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\core\is-E44LG.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\is-53CV8.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\_ctypes.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\QtWidgets.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-DFGKS.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\byteswap.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-sysinfo-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-handle-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\VCRUNTIME140_1.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-2VLEI.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-synch-l1-2-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\algos.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\is-QUQ0L.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-timezone-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\is-7P619.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-BA88G.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\greenlet\is-GNTSM.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\interval.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\is-81OMD.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas.libs\is-LUUR3.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\isal\_isal.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\_generator.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\libssl-3.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\QtTest.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\libcrypto-3.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\_elementtree.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-29IMI.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\Qt6Designer.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\testing.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\is-VECOB.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\html\is-30046.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-RK249.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-CT0P6.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-BSD1S.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-util-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Temp\is-8SOT0.tmp\_isetup\_setup64.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-8D7CJ.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\sip.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-LD8VN.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\core\_multiarray_tests.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-9FQL7.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\QtOpenGLWidgets.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-119RA.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\fft\is-5LRCI.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\is-7BV6T.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\sqlite3.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\designer.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\is-ERRK0.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy.libs\is-ATABC.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-UCS9G.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-ND8JH.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\nattype.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-O5NR8.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\is-A61JL.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\_common.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-file-l1-2-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-EPN5O.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\core\_multiarray_umath.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\is-SPPD0.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\index.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\QtGui.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\winsound.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\np_datetime.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\writers.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\MSVCP140_2.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\select.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\_bounded_integers.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\is-2FOIR.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-processenvironment-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-math-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-DR0FS.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-4EMCO.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\lz4\frame\is-7VFE5.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\_bz2.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-9QBP7.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numexpr\is-KE1QK.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\is-L5H74.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\Qt6Xml.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\ucrtbase.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\psutil\is-H7R5F.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\clr_loader\ffi\dlls\amd64\is-VMALU.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\_overlapped.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\MSVCP140.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\parsers.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\html\clean.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-9208L.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\is-2G516.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pywin32_system32\is-37FJV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\html\is-CS7II.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\unins000.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-JKBKN.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-1UC0O.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\is-50TA1.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-file-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\psutil\_psutil_windows.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\window\is-2BN6V.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\_uuid.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\greenlet\_greenlet.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\is-OQCEI.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\pandas_parser.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-1DFKM.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\is-M2FNM.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\asammdf\blocks\is-8V8PH.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-6E594.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\plugins\styles\qwindowsvistastyle.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\builder.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\core\is-3AL64.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-TD9S0.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-T8MT9.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-H69PC.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-R9OMG.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-H03M1.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\linalg\is-5U4CU.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-13I91.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\is-GEI1U.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\lib.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-processthreads-l1-1-1.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\reshape.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-1U38J.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\groupby.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\_decimal.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-heap-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pyexpat.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\json.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\Qt6Core.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-processthreads-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-UNAFU.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\Qt6Pdf.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\QtSvg.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\Qt6Widgets.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\_lzma.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\markupsafe\is-19A5D.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\plugins\styles\is-F8T3R.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\Qt6OpenGL.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\clr_loader\ffi\dlls\x86\ClrLoader.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\timestamps.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\isal\isal_zlib.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-B5E5S.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\missing.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\zlib1.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-3NPD5.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-E65MK.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-N4KG7.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\objectify.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-KQ9G4.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-9HRDV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-RGUQH.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-E5EEL.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-file-l2-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\is-JM2I3.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-2V70T.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-interlocked-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\timedeltas.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-J9ROR.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-5C36Q.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-CGNPV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\_pcg64.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-TJSC1.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-6HNQ6.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-VFQKP.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\mtrand.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\is-VD9MH.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\_multiprocessing.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\is-87DK5.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\tzconversion.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-UF8H4.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\is-8EIU5.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-A89F0.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\opengl32sw.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas.libs\msvcp140-fa0758dedafbbe194d3ee96e3dc2b9a3.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-S5O6N.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\internals.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\lz4\frame\_frame.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-ITSD2.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\lz4\_version.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\ccalendar.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\Qt6Network.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-OE7RI.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\is-ESS2R.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-debug-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-DQMDQ.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-Q5HF4.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-heap-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\libffi-8.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-string-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-7QT94.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\isal\is-OA776.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-string-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-5ECPN.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\strptime.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\MSVCP140_1.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\python312.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-137H6.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\VCRUNTIME140.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\is-0C0KV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\is-3CUI9.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\vectorized.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-BFBS8.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\lz4\is-HN655.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\plugins\platforms\is-L0C74.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\bit_generator.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\fft\_pocketfft_internal.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\is-VEL4C.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-062AG.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\is-EAOR0.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\window\aggregations.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-EPGUK.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\Qt6Gui.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-803K3.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-AKDLK.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-H1FDI.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\is-T4N7J.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-process-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\_sfc64.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\QtOpenGL.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-74NN4.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-RCFU2.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-SL1R6.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-BS8EN.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-N84PV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\Qt6OpenGLWidgets.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\sax.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-O5E82.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\Qt6DesignerComponents.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-GIFTH.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-conio-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-IMJ6A.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\isal\is-MVP2U.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy.libs\libopenblas64__v0.3.23-293-gc2f4bdbb-gcc_10_3_0-2bde3a66a51006b2b53eb373ff767a3f.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-KB6C1.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\is-K11H4.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\is-ESM5R.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\_testcapi.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\_wmi.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-Q4N90.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp File created: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\is-LFCSI.tmp Jump to dropped file
Source: C:\Users\user\Desktop\Grumpy_1.8_installer.exe Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Allocates memory with a write watch (potentially for evading sandboxes)
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Memory allocated: 29787530000 memory reserve | memory write watch Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Memory allocated: 2979F810000 memory reserve | memory write watch Jump to behavior
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Window / User API: foregroundWindowGot 527 Jump to behavior
Found dropped PE file which has not been started or loaded
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-OMDMO.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-1UTBJ.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-DFAGS.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\_sqlite3.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-QRLO0.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\_queue.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\base.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\is-EPIJ2.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\ops_dispatch.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-environment-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\hashtable.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-stdio-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-utility-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\is-R6KH8.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-MQMJB.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\_hashlib.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\QtCore.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\period.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\is-9T600.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\is-VNC6G.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-DBDJD.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-synch-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\properties.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\ops.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-5BQ2G.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\_ssl.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-GSP79.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\is-2OOS5.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\sas.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-V57GK.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-KONC8.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-IEIGG.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-memory-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\window\indexers.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\parsing.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-0N9C9.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\is-SV93D.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\is-L9N31.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\unicodedata.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\is-77TRC.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\_elementpath.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\is-MFEH1.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-errorhandling-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-SJ9KS.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-999UC.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\_testinternalcapi.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\Qt6PrintSupport.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-profile-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\designer\plugins\platforms\qwindows.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\is-385T4.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\etree.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-16BSN.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-0EJBQ.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\_cffi_backend.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-convert-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\clr_loader\ffi\dlls\x86\is-K28R6.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-P6RSI.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-rtlsupport-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\is-S1BG6.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-5K4IF.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-6VBJI.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-FTB1O.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\window\is-R8B39.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-private-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-LKV39.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-localization-l1-2-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-8U1BP.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\markupsafe\_speedups.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\linalg\_umath_linalg.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-runtime-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\tk86t.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-0QFIV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-5AVJT.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-QDJTE.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-filesystem-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslib.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\_socket.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-ENEMS.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\clr_loader\ffi\dlls\amd64\ClrLoader.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-S2K3A.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-8SSAT.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-console-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-libraryloader-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\sparse.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\dtypes.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-20O04.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\join.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-I4N80.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\_tkinter.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-35LEV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-locale-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-7S0IM.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\offsets.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\timezones.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\Qt6UiTools.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\is-MB3SO.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-AFS4E.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numexpr\interpreter.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-LDN0F.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\python3.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-time-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\_asyncio.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\indexing.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\arrays.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\is-1RP6M.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\asammdf\blocks\cutils.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\conversion.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\is-AMJGV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-032NJ.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\_philox.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\tcl86t.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\hashing.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-BO88H.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\pandas_datetime.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-JP513.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\is-LGDL4.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-T9UHC.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-HL9F2.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-G77C9.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-BU566.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-namedpipe-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-200BV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\fields.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-IVGLO.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\is-ATAHU.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-datetime-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\html\diff.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-C6JTN.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\_mt19937.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\is-53CV8.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\core\is-E44LG.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\_ctypes.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\QtWidgets.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\byteswap.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-DFGKS.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-sysinfo-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-handle-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-2VLEI.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\algos.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-synch-l1-2-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\is-QUQ0L.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-timezone-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\is-7P619.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-BA88G.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\greenlet\is-GNTSM.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\interval.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas.libs\is-LUUR3.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\is-81OMD.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\isal\_isal.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\_generator.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\QtTest.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\_elementtree.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\testing.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-29IMI.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\Qt6Designer.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\is-VECOB.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\html\is-30046.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-RK249.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-CT0P6.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-BSD1S.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-util-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-8SOT0.tmp\_isetup\_setup64.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-8D7CJ.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\sip.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-LD8VN.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\core\_multiarray_tests.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\QtOpenGLWidgets.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-9FQL7.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-119RA.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\fft\is-5LRCI.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\is-7BV6T.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\designer.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\is-ERRK0.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numpy.libs\is-ATABC.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-UCS9G.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\nattype.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-ND8JH.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-O5NR8.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\is-A61JL.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\_common.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-file-l1-2-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\core\_multiarray_umath.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-EPN5O.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\is-SPPD0.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\QtGui.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\index.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\np_datetime.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\winsound.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\writers.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\select.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\_bounded_integers.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\is-2FOIR.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-math-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-processenvironment-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-DR0FS.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-4EMCO.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\lz4\frame\is-7VFE5.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\_bz2.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-9QBP7.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numexpr\is-KE1QK.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\is-L5H74.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\Qt6Xml.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\psutil\is-H7R5F.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\clr_loader\ffi\dlls\amd64\is-VMALU.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\_overlapped.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\parsers.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\html\clean.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-9208L.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\is-2G516.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\html\is-CS7II.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pywin32_system32\is-37FJV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\unins000.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-JKBKN.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-1UC0O.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\psutil\_psutil_windows.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\is-50TA1.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-file-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\_uuid.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\greenlet\_greenlet.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\window\is-2BN6V.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\is-OQCEI.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\pandas_parser.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-1DFKM.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\asammdf\blocks\is-8V8PH.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\is-M2FNM.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-6E594.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\builder.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\designer\plugins\styles\qwindowsvistastyle.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\core\is-3AL64.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-TD9S0.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-T8MT9.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-H69PC.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-R9OMG.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-H03M1.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\is-GEI1U.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\linalg\is-5U4CU.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-13I91.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\lib.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\reshape.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-processthreads-l1-1-1.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-1U38J.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\groupby.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\_decimal.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-heap-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pyexpat.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\json.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-processthreads-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-UNAFU.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\QtSvg.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\_lzma.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\markupsafe\is-19A5D.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\designer\plugins\styles\is-F8T3R.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\timestamps.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\clr_loader\ffi\dlls\x86\ClrLoader.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\isal\isal_zlib.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-B5E5S.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\missing.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\zlib1.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-3NPD5.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-E65MK.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-N4KG7.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\objectify.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-9HRDV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-KQ9G4.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-RGUQH.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-file-l2-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-E5EEL.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\is-JM2I3.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-2V70T.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-interlocked-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\timedeltas.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-CGNPV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-5C36Q.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-J9ROR.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\_pcg64.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-TJSC1.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-6HNQ6.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-VFQKP.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\mtrand.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\is-VD9MH.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\_multiprocessing.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\is-87DK5.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\tzconversion.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-UF8H4.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-A89F0.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\is-8EIU5.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\opengl32sw.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\internals.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-S5O6N.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\lz4\frame\_frame.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-ITSD2.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\ccalendar.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\lz4\_version.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-OE7RI.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\is-ESS2R.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-debug-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\is-DQMDQ.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-Q5HF4.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-heap-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-string-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-7QT94.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\isal\is-OA776.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-core-string-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-5ECPN.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\strptime.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\python312.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-137H6.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\is-0C0KV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\Qt6\bin\is-3CUI9.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\tslibs\vectorized.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-BFBS8.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\lz4\is-HN655.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\bit_generator.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\designer\plugins\platforms\is-L0C74.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\fft\_pocketfft_internal.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-062AG.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\is-VEL4C.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\is-EAOR0.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\window\aggregations.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-EPGUK.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-803K3.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-AKDLK.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-H1FDI.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\is-T4N7J.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-process-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\_sfc64.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\PyQt6\QtOpenGL.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-74NN4.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-RCFU2.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-SL1R6.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-BS8EN.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-N84PV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\lxml\sax.cp312-win_amd64.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-O5E82.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\Qt6DesignerComponents.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\api-ms-win-crt-conio-l1-1-0.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-GIFTH.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-IMJ6A.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\isal\is-MVP2U.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-KB6C1.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\designer\bin\is-K11H4.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\is-ESM5R.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\_testcapi.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\_wmi.pyd (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\pandas\_libs\is-Q4N90.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\Grumpy\numpy\random\is-LFCSI.tmp Jump to dropped file
Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT Architecture FROM Win32_Processor
Sample execution stops while process was sleeping (likely an evasion)
Source: C:\Windows\System32\conhost.exe Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Process information queried: ProcessInformation Jump to behavior
Enables debug privileges
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process token adjusted: Debug Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process token adjusted: Debug Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Process token adjusted: Debug Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Memory allocated: page read and write | page guard Jump to behavior
Queries the volume information (name, serial number etc) of a device
Source: C:\Users\user\AppData\Local\Temp\is-7B89I.tmp\Grumpy_1.8_installer.tmp Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\_ctypes.pyd VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\_lzma.pyd VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\select.pyd VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\_wmi.pyd VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\pyexpat.pyd VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\_queue.pyd VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\base_library.zip VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\win32 VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\win32 VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\pywin32_system32 VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Queries volume information: C:\Users\user\AppData\Local\Programs\Grumpy VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\Grumpy\Grumpy_app.exe Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid Jump to behavior
windows-stand
Behavior
Click here to start
Slideshow Behavior Animation
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 process2 2 Behavior Graph ID: 1391488 Sample: Grumpy_1.8_installer.exe Startdate: 13/02/2024 Architecture: WINDOWS Score: 14 8 Grumpy_1.8_installer.exe 2 2->8         started        file3 25 C:\Users\user\...behaviorgraphrumpy_1.8_installer.tmp, PE32 8->25 dropped 11 Grumpy_1.8_installer.tmp 35 512 8->11         started        process4 file5 27 C:\Users\user\AppData\Local\...\_setup64.tmp, PE32+ 11->27 dropped 29 C:\Users\user\AppData\...\zlib1.dll (copy), PE32+ 11->29 dropped 31 C:\Users\user\AppData\...\winsound.pyd (copy), PE32+ 11->31 dropped 33 399 other files (none is malicious) 11->33 dropped 14 Grumpy_app.exe 2 11->14         started        process6 signatures7 35 Uses powercfg.exe to modify the power settings 14->35 17 powercfg.exe 1 14->17         started        19 powercfg.exe 1 14->19         started        process8 process9 21 conhost.exe 17->21         started        23 conhost.exe 19->23         started       
⊘No contacted IP infos