Analysis

  • user interaction
    yes
  • max time kernel
    72s
  • max time network
    66s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    28/06/2026, 17:49

General

  • Target
    mituk.exe
  • Size 11.4MB
  • Sample260628-wd5fgsax21
  • SHA256 21e2eef82fbd5ddb90516c01418a74e6483476d49a99aa333d4928e226f2ca5a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 19 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 6 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Drops file in System32 directory 11 IoCs
  • Gathers network information 2 TTPs 1 IoCs

    Uses commandline utility to view network configuration.

  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\mituk.exe
    "C:\Users\Admin\AppData\Local\Temp\mituk.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2212
    • C:\Users\Admin\AppData\Local\Temp\mituk.exe
      "C:\Users\Admin\AppData\Local\Temp\mituk.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of WriteProcessMemory
      PID:3776
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "whoami"
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:2972
        • C:\Windows\system32\whoami.exe
          whoami
          4⤵
          • Suspicious use of AdjustPrivilegeToken
          PID:2252
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "ipconfig"
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:1196
        • C:\Windows\system32\ipconfig.exe
          ipconfig
          4⤵
          • Gathers network information
          PID:3384
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "iwconfig"
        3⤵
          PID:3812
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /c "cat /etc/passwd"
          3⤵
            PID:2276
          • C:\Windows\system32\cmd.exe
            C:\Windows\system32\cmd.exe /c "dir"
            3⤵
              PID:2940
            • C:\Windows\system32\cmd.exe
              C:\Windows\system32\cmd.exe /c "cat /etc/shadow"
              3⤵
                PID:312
          • C:\Windows\system32\mspaint.exe
            "C:\Windows\system32\mspaint.exe" "C:\Users\Admin\Desktop\EnablePop.png" /ForceBootstrapPaint3D
            1⤵
            • Modifies registry class
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of SetWindowsHookEx
            PID:4780
          • C:\Windows\System32\svchost.exe
            C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s DsSvc
            1⤵
            • Drops file in System32 directory
            PID:3556
          • C:\Windows\system32\OpenWith.exe
            C:\Windows\system32\OpenWith.exe -Embedding
            1⤵
            • Suspicious behavior: GetForegroundWindowSpam
            • Suspicious use of SetWindowsHookEx
            PID:2420

          Network

                MITRE ATT&CK Enterprise v16

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                VCRUNTIME140.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\VCRUNTIME140.dll
                • Size 117KB
                • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
                • MD5 SHA1 SHA512 SSDEEP TLSH

                VCRUNTIME140_1.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\VCRUNTIME140_1.dll
                • Size 48KB
                • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
                • MD5 SHA1 SHA512 SSDEEP TLSH

                _asyncio.pyd

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\_asyncio.pyd
                • Size 70KB
                • SHA256 adaaf0c703641f6dbed30d101a5e23c17cc9454c36303394b9e28a52ea457471
                • MD5 SHA1 SHA512 SSDEEP TLSH

                _bz2.pyd

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\_bz2.pyd
                • Size 83KB
                • SHA256 965f199679afa9b31d537d98c3ca8403afd6b9e58e1a463ae47697ae4bf12771
                • MD5 SHA1 SHA512 SSDEEP TLSH

                _ctypes.pyd

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\_ctypes.pyd
                • Size 129KB
                • SHA256 697d05cac7c167c00ccf22ea4fdbc7a8db93ab9c6421061191558e42478068c5
                • MD5 SHA1 SHA512 SSDEEP TLSH

                _decimal.pyd

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\_decimal.pyd
                • Size 273KB
                • SHA256 90045140e45edcfe4f4859b3190184faff1249220011330a9d01319745766607
                • MD5 SHA1 SHA512 SSDEEP TLSH

                _hashlib.pyd

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\_hashlib.pyd
                • Size 68KB
                • SHA256 1430e4a2ed19eda840668a292c39ff44488b598f53e903a61739a86b779ecbfe
                • MD5 SHA1 SHA512 SSDEEP TLSH

                _lzma.pyd

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\_lzma.pyd
                • Size 156KB
                • SHA256 b78f5a8476139ff04731046459efd047bb8f52dc92c5b2082eabf2929c0ca02d
                • MD5 SHA1 SHA512 SSDEEP TLSH

                _multiprocessing.pyd

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\_multiprocessing.pyd
                • Size 36KB
                • SHA256 7b21c5b0ebee82b0d85724f245857d65e23f82c6aaf392efcd4f800462025d92
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-core-console-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-core-console-l1-1-0.dll
                • Size 21KB
                • SHA256 c890c11170b631a674f340557339c90c2f2116c2d78c8ecfa91427ff121a5ec2
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-core-datetime-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-core-datetime-l1-1-0.dll
                • Size 21KB
                • SHA256 30d3f727c1b397a6b59f3f3e58e812b4ab8aea4088e5d2c59dd832c17965229c
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-core-debug-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-core-debug-l1-1-0.dll
                • Size 21KB
                • SHA256 7db2d8e3c7b9fd6da8093dd175426ed9f5e5134718592660ee15a48bbda321d7
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-core-errorhandling-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-core-errorhandling-l1-1-0.dll
                • Size 21KB
                • SHA256 b935aebf33146212ed71f85b7b25e2db98fdc2d94e94fb6306169ddf5e76c5d6
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-core-fibers-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-core-fibers-l1-1-0.dll
                • Size 21KB
                • SHA256 fa7ce3865afec1cc640488a6c63d6245586326937f3551ffb63c08a9af27ee9e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-core-file-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-core-file-l1-1-0.dll
                • Size 25KB
                • SHA256 3d55993fbaeda346059c41b27750ca79508ddf0e52ab880b9610f062c86ced9a
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-core-file-l1-2-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-core-file-l1-2-0.dll
                • Size 21KB
                • SHA256 12bce3364b96571e89a8bec10ecaa3131959b40d2f6a8bec13086919020ee054
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-core-file-l2-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-core-file-l2-1-0.dll
                • Size 20KB
                • SHA256 f957a4c261506484b53534a9be8931c02ec1a349b3f431a858f8215cecfec3f7
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-core-handle-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-core-handle-l1-1-0.dll
                • Size 21KB
                • SHA256 da99f3f67fa9cba5b709583ca00a52fa3fa7d3e381007cdab7e3efab72002711
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-core-heap-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-core-heap-l1-1-0.dll
                • Size 21KB
                • SHA256 950e038433add25bfc1078202286545cb71b085094099cd0ee55e1d8ae618370
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-core-interlocked-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-core-interlocked-l1-1-0.dll
                • Size 21KB
                • SHA256 36f62388de7b5853d61f8e675eabee6a2b573af562d9510e60ff534b67c96e42
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-core-libraryloader-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-core-libraryloader-l1-1-0.dll
                • Size 21KB
                • SHA256 7ef40dc1fea2e48689eb32d16604d202eba0a9fd71666550c316588c7723ee11
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-core-localization-l1-2-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-core-localization-l1-2-0.dll
                • Size 21KB
                • SHA256 f0384cdc9015ccf808b27d89aab47ff62d77701f9d8ef96096a1b213204ef41d
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-core-memory-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-core-memory-l1-1-0.dll
                • Size 21KB
                • SHA256 58dcd77041d0485323b7d8f53f5e36bc25475ec33ce91a7888400a87e8e91d43
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-core-namedpipe-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-core-namedpipe-l1-1-0.dll
                • Size 21KB
                • SHA256 57b40bf135fe4e436c7abd5cefd6270eeec2cc1d349e708a61cfd03fec189f81
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-core-processenvironment-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-core-processenvironment-l1-1-0.dll
                • Size 21KB
                • SHA256 6bd7d7c2b67d10240e214e381a5f9b6a017de372d7ef71e60157e8daf1d0c9de
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-core-processthreads-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-core-processthreads-l1-1-0.dll
                • Size 21KB
                • SHA256 336e1a29182d1d3235f99e5921515fb30bac5002d3ff42ad62e94929cc5775c9
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-core-processthreads-l1-1-1.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-core-processthreads-l1-1-1.dll
                • Size 21KB
                • SHA256 840d6953082758031ed604853447bdd3509b1e21bf80a30355db45f52a367c43
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-core-profile-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-core-profile-l1-1-0.dll
                • Size 21KB
                • SHA256 433aa6ac7f0a3c9b4af7e12d2b1d40bd0ec5dab0a58ef33940e03181a026ff5e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-core-rtlsupport-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-core-rtlsupport-l1-1-0.dll
                • Size 21KB
                • SHA256 3c64042bee4c2561065fa324fbd49731db96b98efbcdeb550943be5429aab1da
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-core-string-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-core-string-l1-1-0.dll
                • Size 21KB
                • SHA256 129aaa574e775c8397595c435dce87303d03916af2a1df3365f218a41631fb79
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-core-synch-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-core-synch-l1-1-0.dll
                • Size 21KB
                • SHA256 da0027f68c0b6959de94bb4703c397ed646b57d52274b192845d2856446f2693
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-core-synch-l1-2-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-core-synch-l1-2-0.dll
                • Size 21KB
                • SHA256 b356061a7dee95cc1adbb2a21668b5c1c6a16e1c9cea918904b895216032c08b
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-core-sysinfo-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-core-sysinfo-l1-1-0.dll
                • Size 21KB
                • SHA256 d90b0d12da527f92e2729ea15e19d7d2336bac4e7001e0afca3a03f1a9d3fb83
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-core-timezone-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-core-timezone-l1-1-0.dll
                • Size 21KB
                • SHA256 b34171187edcdb6c3700919ac791b0ac9762058e7b5268d1b44e7428d06585cf
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-core-util-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-core-util-l1-1-0.dll
                • Size 21KB
                • SHA256 493b4dcb9884ec9484b0d86a45bd16ade847e0f09e078875f820057a2da05b8c
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-crt-conio-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-crt-conio-l1-1-0.dll
                • Size 21KB
                • SHA256 a1b4c73a3f9f1813ce70fc1862c3473a80a6119581e1e06f9ecd9faa70dd1443
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-crt-convert-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-crt-convert-l1-1-0.dll
                • Size 25KB
                • SHA256 950276bf1c7408dd30ec8a4f43f5a65420d345ffd2601e6d149d30039e79d976
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-crt-environment-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-crt-environment-l1-1-0.dll
                • Size 21KB
                • SHA256 07050ef042264a3c015b4b24a3609975ea70ea6b0a1ff96248b71674b67bda08
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-crt-filesystem-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-crt-filesystem-l1-1-0.dll
                • Size 21KB
                • SHA256 5db171401ceb22573bed41ed6165ca52b9fa85cb3fda5c56c7ecd9fc58e69a80
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-crt-heap-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-crt-heap-l1-1-0.dll
                • Size 21KB
                • SHA256 3ac1f5532746a357f53cf0f990471cc7ce20773f9b980a410def43be923591c6
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-crt-locale-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-crt-locale-l1-1-0.dll
                • Size 21KB
                • SHA256 66da920d3714c8edb95040b0d7b10820d4b2cbd2ae069b3bcc5cbbba0dd921c3
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-crt-math-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-crt-math-l1-1-0.dll
                • Size 29KB
                • SHA256 f36c45c6e97435c37bf520ac394a230dbafbd2b97f2d7c05548f39c16668cf8d
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-crt-process-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-crt-process-l1-1-0.dll
                • Size 21KB
                • SHA256 4bd8d67e3ebb6266950cd7f362c5cee54cefd811ee3082529f7082c0aa174aeb
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-crt-runtime-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-crt-runtime-l1-1-0.dll
                • Size 25KB
                • SHA256 ef524aee201048dcaca499e5b69dc93432972136f77002889fcfc1f6573f83d0
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-crt-stdio-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-crt-stdio-l1-1-0.dll
                • Size 25KB
                • SHA256 63bd54f9e4231ea9b7ae5991a328a3581433abb02128f12652bb21592c9e4838
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-crt-string-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-crt-string-l1-1-0.dll
                • Size 25KB
                • SHA256 9eba5f87d8bc12edb0931f9db799891afaf8326ae9a3a2926725b6456e1aa0ae
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-crt-time-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-crt-time-l1-1-0.dll
                • Size 21KB
                • SHA256 2da6176fc5272c941e39b86b892a73109a763697930de97431903892521f359d
                • MD5 SHA1 SHA512 SSDEEP TLSH

                api-ms-win-crt-utility-l1-1-0.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\api-ms-win-crt-utility-l1-1-0.dll
                • Size 21KB
                • SHA256 cef434a44b9ed6833e3730d00e7c3b2094628964840390891d402e8c60716bd9
                • MD5 SHA1 SHA512 SSDEEP TLSH

                base_library.zip

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\base_library.zip
                • Size 1.3MB
                • SHA256 99c6f5012eb33f4fb8f40c8a0d2c60a5bec800ba1be3cc5f4c282fb5a53e63e5
                • MD5 SHA1 SHA512 SSDEEP TLSH

                libcrypto-3.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\libcrypto-3.dll
                • Size 5.0MB
                • SHA256 ccfffddcd3defb8d899026298af9af43bc186130f8483d77e97c93233d5f27d7
                • MD5 SHA1 SHA512 SSDEEP TLSH

                libffi-8.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\libffi-8.dll
                • Size 38KB
                • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
                • MD5 SHA1 SHA512 SSDEEP TLSH

                libssl-3.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\libssl-3.dll
                • Size 776KB
                • SHA256 007142039f04d04e0ed607bda53de095e5bc6a8a10d26ecedde94ea7d2d7eefe
                • MD5 SHA1 SHA512 SSDEEP TLSH

                pyexpat.pyd

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\pyexpat.pyd
                • Size 199KB
                • SHA256 567f19a92479e66b652ffaadbddba26b7c5dda43d5e97c67a4a76a076021b736
                • MD5 SHA1 SHA512 SSDEEP TLSH

                python313.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\python313.dll
                • Size 5.8MB
                • SHA256 0565965617d94274d7f2c2958d0bef33392cd9d2f346f99d8e1bedbdf264ee85
                • MD5 SHA1 SHA512 SSDEEP TLSH

                select.pyd

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\select.pyd
                • Size 32KB
                • SHA256 d1e486de9653640be7c3a9bed04aa716b29ea76a69e1de758dd9fa708f2c9d38
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ucrtbase.dll

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\ucrtbase.dll
                • Size 1.1MB
                • SHA256 c04daeba7e7c4b711d33993ab4c51a2e087f98f4211aea0dcb3a216656ba0ab7
                • MD5 SHA1 SHA512 SSDEEP TLSH

                unicodedata.pyd

                • Path C:\Users\Admin\AppData\Local\Temp\_MEI22122\unicodedata.pyd
                • Size 695KB
                • SHA256 e7d0375a7064b1c8916cca7cabf7e3df559fc8463dfdf831f403e95c79499121
                • MD5 SHA1 SHA512 SSDEEP TLSH

                memory/3556-154-0x0000020A6B8B0000-0x0000020A6B8B1000-memory.dmp

                memory/3556-155-0x0000020A6B8B0000-0x0000020A6B8B1000-memory.dmp

                memory/3556-153-0x0000020A6B8A0000-0x0000020A6B8A1000-memory.dmp

                memory/3556-152-0x0000020A6B8A0000-0x0000020A6B8A1000-memory.dmp

                memory/3556-151-0x0000020A6B810000-0x0000020A6B811000-memory.dmp

                memory/3556-149-0x0000020A6B810000-0x0000020A6B811000-memory.dmp

                memory/3556-147-0x0000020A6B790000-0x0000020A6B791000-memory.dmp

                memory/3556-140-0x0000020A5B4A0000-0x0000020A5B4B0000-memory.dmp

                memory/3556-136-0x0000020A5B460000-0x0000020A5B470000-memory.dmp