Overview

overview

7

Static

static

3

EasyInstaller.exe

windows10-2004-x64

7

EasyInstaller.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    116s
  • max time network
    66s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260629-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    03/07/2026, 01:14

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    EasyInstaller.exe
  • Size 16.8MB
  • Sample260703-bl2pcaet9n
  • SHA256 8bb1cd83e5ea8a3eacda3e257372f3d9de2951e87907e7dcbdd7e34759ffe438
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
execution

Malware Config

Signatures

  • Loads dropped DLL 28 IoCs
  • Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

    Using powershell.exe command.

    execution
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\EasyInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\EasyInstaller.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:900
    • C:\Users\Admin\AppData\Local\Temp\EasyInstaller.exe
      "C:\Users\Admin\AppData\Local\Temp\EasyInstaller.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:5364
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "ver"
        3⤵
          PID:2132
        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
          powershell -Command " $registry_apps = Get-ItemProperty HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\*, HKLM:\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\*, HKCU:\Software\Microsoft\Windows\CurrentVersion\Uninstall\* | Select-Object DisplayName, UninstallString | Format-Table -AutoSize | Out-String -Width 4096; $store_apps = Get-AppxPackage -AllUsers | Select-Object Name, PackageFullName, @{Name='UninstallCommand';Expression={'Remove-AppxPackage -Package ' + $_.PackageFullName}} | Format-Table -AutoSize | Out-String -Width 4096; \"$registry_apps`n$store_apps\" "
          3⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:4892

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          7za.exe
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\7za.exe
          • Size 826KB
          • SHA256 bf2ec1a2ea0242a24bb9c5b7bcaee3f335edcc384aabd07bbfe93e74888cb26c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          VCRUNTIME140.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\VCRUNTIME140.dll
          • Size 96KB
          • SHA256 c179d8914ba8e57b2f8f4d6c101c2c550c7c6712a7f0f9920a97db340f9d9574
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _bz2.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\_bz2.pyd
          • Size 80KB
          • SHA256 90cc01781e30aee2b106612a8ae32367f8f91d3d086cb5364507fc9f3343fdec
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _ctypes.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\_ctypes.pyd
          • Size 125KB
          • SHA256 ab5deed59ff5f9c925e170e2bacb35c083a23658833d29e5f827c9cd8fa06358
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _lzma.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\_lzma.pyd
          • Size 175KB
          • SHA256 55e45c9cec05b3951aafda51ee178c0b278f846c0053fac9213036d22dbeeef4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-console-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-core-console-l1-1-0.dll
          • Size 18KB
          • SHA256 5c1cbd16acf9191f17525f5dd887d944b4eb0083c5ec1adb68ce1b82639182ae
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-datetime-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-core-datetime-l1-1-0.dll
          • Size 18KB
          • SHA256 e353ecf9deb083da0f00f40f2fe99cc4eea4a904e7118a1cac4ef6e43f89b154
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-debug-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-core-debug-l1-1-0.dll
          • Size 18KB
          • SHA256 d3b5273eccc758493c9cfac5cc43ea74f08216bb1c195609ab27e9b2a241d8b3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-errorhandling-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-core-errorhandling-l1-1-0.dll
          • Size 18KB
          • SHA256 d71714c34fabf8a93ae316a0d8679bb8cdc843f6128c9afd42e18e0de70b1a91
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-file-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-core-file-l1-1-0.dll
          • Size 21KB
          • SHA256 72e79ce895ab6506d2c85bcd1709ef6a250b63c990c76c9df530ec4e5b5cbb6a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-file-l1-2-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-core-file-l1-2-0.dll
          • Size 18KB
          • SHA256 bd9e07bbc62ce82dbc30c23069a17fbfa17f1c26a9c19e50fe754d494e6cd0b1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-file-l2-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-core-file-l2-1-0.dll
          • Size 18KB
          • SHA256 355633a84db0816ab6a340a086fb41c65854c313bd08d427a17389c42a1e5b69
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-handle-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-core-handle-l1-1-0.dll
          • Size 18KB
          • SHA256 8a52a26afaf4d7cd698cf79dcd339ec3f1b3ab3c0031a8ae9064d50f63462b99
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-heap-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-core-heap-l1-1-0.dll
          • Size 18KB
          • SHA256 6a803d6cbe4dcbb6e4c9e8b8945d92d7edbd1f51cfb875d3d6c312d83840dde2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-interlocked-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-core-interlocked-l1-1-0.dll
          • Size 18KB
          • SHA256 26f90d2086687edf6fc02be5dcfd7575faad2022c3d716cdd0b5ca3e70a3c022
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-libraryloader-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-core-libraryloader-l1-1-0.dll
          • Size 18KB
          • SHA256 4a02983d6632c2fb92409d56269ca9a5bb0c31d33a8f2a89b0ab847d263c3f96
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-localization-l1-2-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-core-localization-l1-2-0.dll
          • Size 20KB
          • SHA256 b39a515b9e48fc6589703d45e14dcea2273a02d7fa6f2e1d17985c0228d32564
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-memory-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-core-memory-l1-1-0.dll
          • Size 18KB
          • SHA256 d699e0c0de1d2f12bb69b3d464faa7ad4734d18a3e725877d8a96aabf29c0542
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-namedpipe-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-core-namedpipe-l1-1-0.dll
          • Size 18KB
          • SHA256 5ebd891df029e795372f8665db7f15b4964d434aa8d58eb2b50634bc58d74132
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-processenvironment-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-core-processenvironment-l1-1-0.dll
          • Size 19KB
          • SHA256 6088c2aa22ae8a579518c347163571e243d9a74d542176d63520f370040382e3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-processthreads-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-core-processthreads-l1-1-0.dll
          • Size 20KB
          • SHA256 bc5ddb364256a38e57b21b1a16b5736a8eacbae32b4c3760514cf51629066881
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-processthreads-l1-1-1.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-core-processthreads-l1-1-1.dll
          • Size 18KB
          • SHA256 ccb974c24ddfa7446278ca55fc8b236d0605d2caaf273db8390d1813fc70cd5b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-profile-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-core-profile-l1-1-0.dll
          • Size 17KB
          • SHA256 753494588fa1c14146a9a3f7d0f02ddd0a6850ba6a719e2513a64cf9dbf1ae7d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-rtlsupport-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-core-rtlsupport-l1-1-0.dll
          • Size 18KB
          • SHA256 ea04e9b6cf4646d36ab691ff93964f0c7b0b01fd194b8db37a96fb1513ae656a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-string-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-core-string-l1-1-0.dll
          • Size 18KB
          • SHA256 ac18630de43781ac58f0a8a1aba4304292e0f73db93acbe606b1814fecea0822
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-synch-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-core-synch-l1-1-0.dll
          • Size 20KB
          • SHA256 59e86b54319f7a6872cd888582c75559b96ae6f67c0dfe554184538b0ed08cd7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-synch-l1-2-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-core-synch-l1-2-0.dll
          • Size 18KB
          • SHA256 0c5c4dfea72595fb7ae410f8fa8da983b53a83ce81aea144fa20cab613e641b7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-sysinfo-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-core-sysinfo-l1-1-0.dll
          • Size 19KB
          • SHA256 2fa840523904c7b133ded29ec073a9c24184202e8847c9e731897fdd8473b367
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-timezone-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-core-timezone-l1-1-0.dll
          • Size 18KB
          • SHA256 7d4252ab1b79c5801b58a08ce16efd3b30d8235733028e5823f3709bd0a98bcf
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-util-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-core-util-l1-1-0.dll
          • Size 18KB
          • SHA256 77b53d3970c7e3f68e0c31b7f3cd64b671a3003c5a771d4659c48339331f2994
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-conio-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-crt-conio-l1-1-0.dll
          • Size 19KB
          • SHA256 3067981026fad83882f211bfe32210ce17f89c6a15916c13e62069e00d5a19e3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-convert-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-crt-convert-l1-1-0.dll
          • Size 22KB
          • SHA256 cd5256b2fb46deaa440950e4a68466b2b0ff61f28888383094182561738d10a9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-environment-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-crt-environment-l1-1-0.dll
          • Size 18KB
          • SHA256 c4ed8f65c5a0dbf325482a69ab9f8cbd8c97d6120b87ce90ac4cba54ac7d377a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-filesystem-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-crt-filesystem-l1-1-0.dll
          • Size 20KB
          • SHA256 6c86e40c956eb6a77313fa8dd9c46579c5421fa890043f724c004a66796d37a6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-heap-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-crt-heap-l1-1-0.dll
          • Size 19KB
          • SHA256 7050043b0362c928aa63dd7800e5b123c775425eba21a5c57cbc052ebc1b0ba2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-locale-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-crt-locale-l1-1-0.dll
          • Size 18KB
          • SHA256 fab41a942f623590402e4150a29d0f6f918ee096dba1e8b320ade3ec286c7475
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-math-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-crt-math-l1-1-0.dll
          • Size 27KB
          • SHA256 9b05a43fdc185497e8c2cea3c6b9eb0d74327bd70913a298a6e8af64514190e8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-multibyte-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-crt-multibyte-l1-1-0.dll
          • Size 26KB
          • SHA256 d7e676b9f1e162957d0549ab0b91e2cd754643490b0654bf9a86aa1e77cb3c37
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-process-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-crt-process-l1-1-0.dll
          • Size 19KB
          • SHA256 b06b2d8c944bff73bd5a4aad1cad6a4d724633e7bd6c6b9e236e35a99b1d35f2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-runtime-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-crt-runtime-l1-1-0.dll
          • Size 22KB
          • SHA256 bf55134f17b93d8ac4d8159a952bee17cb0c925f5256aa7f747c13e5f2d00661
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-stdio-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-crt-stdio-l1-1-0.dll
          • Size 24KB
          • SHA256 293c76a26fbc0c86dcf5906dd9d9ddc77a5609ea8c191e88bdc907c03b80a3a5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-string-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-crt-string-l1-1-0.dll
          • Size 24KB
          • SHA256 01e3c0aa24ce9f8d62753702df5d7a827c390af5e2b76d1f1a5b96c777fd1a4e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-time-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-crt-time-l1-1-0.dll
          • Size 20KB
          • SHA256 f4163cbc464a82fce47442447351265a287561c8d64ecc2f2f97f5e73bcb4347
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-utility-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\api-ms-win-crt-utility-l1-1-0.dll
          • Size 18KB
          • SHA256 bba068f29609630e8c6547f1e9219e11077426c4f1e4a93b712bfba11a149358
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          base_library.zip
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\base_library.zip
          • Size 824KB
          • SHA256 08f341beeae9449450aef671a264d55ae0d169b6dd4efd04baa1345cc64474be
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          hid.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\hid.pyd
          • Size 71KB
          • SHA256 e702f6a24779336eab986496145807175294d28692129d091e9392f56d2f6f96
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libcrypto-3-x64.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\libcrypto-3-x64.dll
          • Size 5.0MB
          • SHA256 168d09bc76b420dc67459f3feff39c072963429692e7a97435887a7e62a7868d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libffi-7.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\libffi-7.dll
          • Size 32KB
          • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libssl-3-x64.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\libssl-3-x64.dll
          • Size 770KB
          • SHA256 abf2ed8e430c7177e6906527082fb8ef0a45d90c9609546b1b52cec9f5ee3607
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          pyexpat.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\pyexpat.pyd
          • Size 202KB
          • SHA256 62b2afd1bcde65448cfa06b39a6d36f7d7def20c76c6d3031a382ac54c975694
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          python3.DLL
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\python3.DLL
          • Size 50KB
          • SHA256 8b0b138558181f193770bbaed6d6eed29a3186ebaeaab939b3a8c330008da6aa
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          python38.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\python38.dll
          • Size 4.7MB
          • SHA256 b6827cd687bb0112aa03f6023d8dd60f8632364d22298d4d1dcaaa1aa9f16332
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          select.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\select.pyd
          • Size 19KB
          • SHA256 95bd45b1954763255a8c02a45f24f1000d1cb0395184c41b532cdb8ca4f774a4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          tcl86t.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\tcl86t.dll
          • Size 1.6MB
          • SHA256 f650d6bc321bcda3fc3ac3dec3ac4e473fb0b7b68b6c948581bcfc54653e6768
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          tk86t.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\tk86t.dll
          • Size 1.4MB
          • SHA256 1a6d0871be2fa7153de22be008a20a5257b721657e6d4b24da8b1f940345d0d5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ucrtbase.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI9002\ucrtbase.dll
          • Size 959KB
          • SHA256 2ab2a74bcb5bfd8248d232eb3bc56698fb5173b9ff7fc0daf87d8120d0f448d7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          __PSScriptPolicyTest_lg2kss4o.e1g.ps1
          • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_lg2kss4o.e1g.ps1
          • Size 60B
          • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          memory/4892-1087-0x00007FFFFD540000-0x00007FFFFDEE4000-memory.dmp
          Download

          memory/4892-1089-0x00007FFFFD540000-0x00007FFFFDEE4000-memory.dmp
          Download

          memory/4892-1078-0x0000029268950000-0x0000029268972000-memory.dmp
          Download

          memory/4892-1079-0x00007FFFFD540000-0x00007FFFFDEE4000-memory.dmp
          Download

          memory/4892-1080-0x00007FFFFD540000-0x00007FFFFDEE4000-memory.dmp
          Download

          memory/4892-1081-0x00007FFFFD540000-0x00007FFFFDEE4000-memory.dmp
          Download

          memory/4892-1082-0x00007FFFFD540000-0x00007FFFFDEE4000-memory.dmp
          Download

          memory/4892-1083-0x00007FFFFD540000-0x00007FFFFDEE4000-memory.dmp
          Download

          memory/4892-1084-0x00007FFFFD540000-0x00007FFFFDEE4000-memory.dmp
          Download

          memory/4892-1085-0x00007FFFFD540000-0x00007FFFFDEE4000-memory.dmp
          Download

          memory/4892-1086-0x00007FFFFD540000-0x00007FFFFDEE4000-memory.dmp
          Download

          memory/4892-1070-0x00007FFFFD6CF000-0x00007FFFFD6D0000-memory.dmp
          Download

          memory/4892-1088-0x00007FFFFD540000-0x00007FFFFDEE4000-memory.dmp
          Download

          memory/4892-1076-0x00007FFFFD540000-0x00007FFFFDEE4000-memory.dmp
          Download

          memory/4892-1096-0x0000029268DE0000-0x0000029268DFE000-memory.dmp
          Download

          memory/4892-1097-0x0000029268F80000-0x0000029269032000-memory.dmp
          Download

          memory/4892-1099-0x0000029268E00000-0x0000029268E1A000-memory.dmp
          Download

          memory/4892-1098-0x0000029269250000-0x0000029269454000-memory.dmp
          Download

          memory/4892-1100-0x00000292690D0000-0x00000292690FA000-memory.dmp
          Download

          memory/4892-1103-0x0000029268DF0000-0x0000029268DFA000-memory.dmp
          Download

          memory/4892-1104-0x0000029269040000-0x0000029269048000-memory.dmp
          Download

          memory/4892-1105-0x0000029269080000-0x00000292690A6000-memory.dmp
          Download

          memory/4892-1102-0x0000029268DE0000-0x0000029268DE6000-memory.dmp
          Download

          memory/4892-1101-0x0000029268CD0000-0x0000029268CD8000-memory.dmp
          Download

          memory/4892-1106-0x00007FFFFD540000-0x00007FFFFDEE4000-memory.dmp
          Download

          memory/4892-1108-0x00007FFFFD540000-0x00007FFFFDEE4000-memory.dmp
          Download

          memory/4892-1109-0x00007FFFFD540000-0x00007FFFFDEE4000-memory.dmp
          Download