Overview

overview

7

Static

static

3

Jindai_Installer.exe

windows10-2004-x64

7

Jindai_Installer.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    142s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    04/07/2026, 12:17

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Jindai_Installer.exe
  • Size 11.7MB
  • Sample260704-pgdnlsa15l
  • SHA256 e1afd23f56cd7e18539e3f68d50d16a0d2e81d7cf9254258c82dd2b7a0301051
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasion

Malware Config

Signatures

  • Loads dropped DLL 18 IoCs
  • Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

    Command interpreters often include specific commands/flags that ignore errors and other hangups.

    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 43 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Jindai_Installer.exe
    "C:\Users\Admin\AppData\Local\Temp\Jindai_Installer.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4776
    • C:\Users\Admin\AppData\Local\Temp\Jindai_Installer.exe
      "C:\Users\Admin\AppData\Local\Temp\Jindai_Installer.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of WriteProcessMemory
      PID:2808
      • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -ExecutionPolicy Bypass -Command " $ErrorActionPreference='Continue' function Norm($s){ if($null -eq $s){return ''}; $t=($s.ToString()).Trim(); $bad=@('','default string','to be filled by o.e.m.','to be filled by o.e.m','none','null','na','n/a','0','00000000-0000-0000-0000-000000000000','ffffffff-ffff-ffff-ffff-ffffffffffff','0123456789','system serial number','system product name','system manufacturer','system version','not specified','not applicable','chassis serial number','oem'); if($bad -contains $t.ToLower()){return ''}else{return $t}} $sysProd=Get-CimInstance Win32_ComputerSystemProduct -ErrorAction SilentlyContinue | Select-Object -First 1 $mobo=Get-CimInstance Win32_BaseBoard -ErrorAction SilentlyContinue | Select-Object -First 1 $uuid=if($sysProd){Norm($sysProd.UUID)}else{''} $board=if($mobo){Norm($mobo.SerialNumber)}else{''} $mguid='' try{ $mguid=Norm((Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Cryptography' -Name MachineGuid -ErrorAction Stop).MachineGuid) }catch{} if(-not ($uuid -or $board -or $mguid)){ exit 1 } function Part($v,$tag){ if($v){return $tag+':'+$v}else{return $tag+':(missing)'} } $combined=(Part $uuid 'U')+'|'+(Part $board 'B')+'|'+(Part $mguid 'M') $bytes=[System.Text.Encoding]::UTF8.GetBytes($combined) $hash=[System.Security.Cryptography.SHA256]::Create().ComputeHash($bytes) $hex=-join ($hash | ForEach-Object { $_.ToString('x2') }) Write-Output $hex.Substring(0,24) "
        3⤵
        • Hide Artifacts: Ignore Process Interrupts
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:2624

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\_bz2.pyd
        • Size 84KB
        • SHA256 1bf985b54f529a3cbb3e52532791cc4d4c64009142d37b54eb3521adec203d5c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _decimal.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\_decimal.pyd
        • Size 280KB
        • SHA256 398117a6af493e34f56ec0d78ced9901b20b8e895686ce5966edeadb23507056
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\_hashlib.pyd
        • Size 67KB
        • SHA256 50f3ce7a2281fd32f378f3ba5067bdd13e18ee95877db5199c6a0babdc9c516a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\_lzma.pyd
        • Size 155KB
        • SHA256 51815b6474d4216c6a2aeaffdae5d2ff4acb7a0236254f2cfe43247022f3d781
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\_queue.pyd
        • Size 34KB
        • SHA256 b5b5368026c33ade7651fb4cf4c6c1ca7eecc9c8cdad0af007da8a3ac0e067f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\_socket.pyd
        • Size 84KB
        • SHA256 8676f3cebd9d01c7ad51a29b3f7ff429c0a8f6bc564cab21eb6cdaa2e26fd259
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\_ssl.pyd
        • Size 177KB
        • SHA256 b8118580b461801df12ec12d3d666aa0ebc2b3750bcf92b90b92789b152bf856
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-console-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-console-l1-1-0.dll
        • Size 22KB
        • SHA256 015bd08815c7b934a8952c3a7578e9ce59f21136e8a880d42bbd414bec2c6058
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-datetime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-datetime-l1-1-0.dll
        • Size 22KB
        • SHA256 5534812cdbdae94ba45cb216e5eb9af686b853948df54365103555abbbaf9d9a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-debug-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-debug-l1-1-0.dll
        • Size 22KB
        • SHA256 837d2b1b2cd03e03fc6ccb050698b6b5763af17c201304872342a5eae9e0a2d2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-errorhandling-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 22KB
        • SHA256 de43b165f568c276c00e95acd454e3092f352a18e95874595f4f4658c06d2ec7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-fibers-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-fibers-l1-1-0.dll
        • Size 22KB
        • SHA256 3cebc45bf479ad74cfabf2c6bfd4994d7ad639ed1221025981d19cedf9ce0416
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-fibers-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-fibers-l1-1-1.dll
        • Size 22KB
        • SHA256 5ef70308bcca628ce6b0e2856b15b1c7ae340c3f9bbbc4c1071d8c191a34a5c3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-file-l1-1-0.dll
        • Size 26KB
        • SHA256 250ac829f2617bcac1c6e5b8c4f630462e20765863ba573526a3e11bbfb94a9a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-file-l1-2-0.dll
        • Size 22KB
        • SHA256 ae14079a114733f60ce87b92cba42acd8083c2cd67594e53bc37dc0b97a4b465
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l2-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-file-l2-1-0.dll
        • Size 22KB
        • SHA256 914bf26a298713119477ea0a8e7bd43171b91344ebe24fb47ad77c49686e3d87
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-handle-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-handle-l1-1-0.dll
        • Size 22KB
        • SHA256 ab5489955e371b15f77906c08ec3c7affe2c7a46a08c514ca628768b4478974b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 c70f9644d8377fa39c5b71f2e9734c1400d7598904fdeb772e8502099982dcb7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-interlocked-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 22KB
        • SHA256 f8129710188e407bb0e6f46d30aeba277d67b947ece5fe09e883fde2323f3ae6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-kernel32-legacy-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-kernel32-legacy-l1-1-1.dll
        • Size 22KB
        • SHA256 5200b16cb2ddc61cfc07373a9a84aa85a3ab50806ca96c879c883275832944c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-libraryloader-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 22KB
        • SHA256 48786fb88b001dcd1f63acea903d3ca9cc0b3060d5a325e3f2f3cbc3bfd53166
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-localization-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-localization-l1-2-0.dll
        • Size 22KB
        • SHA256 9ec3898f7eba91faa28b51616c211a2689e3a13aeef8de6e13cb674e49d689eb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-memory-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-memory-l1-1-0.dll
        • Size 22KB
        • SHA256 3a6cbc524c99e1cd80d5368f5601402a37ad602528b1ab628093573ef638eb3b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-namedpipe-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 22KB
        • SHA256 97145ef89c44949fcf0f04ac834a8bc7d687ef49ee73ae9fc32f3c11136b7201
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processenvironment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 22KB
        • SHA256 8bc7c10b1851aea644e9c9f381cdb935e091fee6b0be3d3aedc6fffaac96adb7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 22KB
        • SHA256 d8030b777617c71f0f94564607699dbf7561487d779db9756aed378c5675213f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 22KB
        • SHA256 f5e676713340f73a03a3d41a6ec9883b431da7d16c7f07bd0a920fb80e6c0753
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-profile-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-profile-l1-1-0.dll
        • Size 22KB
        • SHA256 f023d47e44d3eea6b0743580f57e8c6ba81e79d5ebfa7da26250076c647b980e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-rtlsupport-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 22KB
        • SHA256 9746d8930704153578a628c010638a5f818ffe5a927e25591b108e256dc6afca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-string-l1-1-0.dll
        • Size 22KB
        • SHA256 7c53ae24c982d16ffd1bf7f918d115b11b7f30e57bc7feaa18cb9781e4abb926
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-synch-l1-1-0.dll
        • Size 22KB
        • SHA256 56d9d62ca5dba79a6581b8d574a7d8b2a64a5ecb71e47dcf06ed0285708b1859
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-synch-l1-2-0.dll
        • Size 22KB
        • SHA256 f6482bbec5612c39ecb4822787a333f2b7570f7a5f922a4059be41ba957bb372
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-sysinfo-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 22KB
        • SHA256 272d02765fdd3582618236c2d309abba069642f9bc1062ede069d0c144e17007
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-sysinfo-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-sysinfo-l1-2-0.dll
        • Size 22KB
        • SHA256 8a0900788859d0eb51c2f48f50cc6ed376a120b518100fa20e11d7702ccde260
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-timezone-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-timezone-l1-1-0.dll
        • Size 22KB
        • SHA256 ff35de6c03812b332e140f17dade25c5dd4775156da9eeb1eaae3fddd27236ec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-util-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-core-util-l1-1-0.dll
        • Size 22KB
        • SHA256 191ef3e98641a57296f19d572d8eb62489470ff1ef6030d136af170c2f835173
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-conio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-crt-conio-l1-1-0.dll
        • Size 22KB
        • SHA256 54ee5ec719a051496ff60aa00dbeaa94b9a7d2cdac27fe9b7317f1a666b6a2aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-convert-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-crt-convert-l1-1-0.dll
        • Size 26KB
        • SHA256 8b94662429171019fcd63c70bbf2095a075170599704a5e7dcdbe3da13f3a429
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-environment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-crt-environment-l1-1-0.dll
        • Size 22KB
        • SHA256 39e5929593709e8af3bc9e0a75ec1155778d6f4a247f4cdfc58928ad6db88434
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-filesystem-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 22KB
        • SHA256 5a8ecebac32edf4e1f3c5c6c1c8ea1a1add6cda4f9c9cb26f752fb295bea6865
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-crt-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 c71080cbcb43bf1f8f3e391deb12a582eb0abefc80946f340675a2c616e4feb4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-locale-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-crt-locale-l1-1-0.dll
        • Size 22KB
        • SHA256 6c68648e524187e03c4ad9aaa4a99113c6ee9f29fb39cc0ed93f951975138e63
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-math-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-crt-math-l1-1-0.dll
        • Size 30KB
        • SHA256 d4fbcccbe29371cbce431e43b2eb4f7ba9a6f04a3d740a071f02457a505e9dc8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-process-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-crt-process-l1-1-0.dll
        • Size 22KB
        • SHA256 47c1935942e3ac0812e4dcf18c0e265e565f0194a3349111c299712f5565f7ac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-runtime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 26KB
        • SHA256 72adc1b3677e0814d9c4ebf0964000e84bb2acf67336c8963061665e44f78029
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-stdio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 26KB
        • SHA256 900afc3989673c9bb1a687ed38c192f46db9e6ba6d11a668898a539e7fc23798
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-crt-string-l1-1-0.dll
        • Size 26KB
        • SHA256 fcf12466cc12fd3b73611fc0763a5a1f9d44e90349513c34a0c83b0f36421793
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-time-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-crt-time-l1-1-0.dll
        • Size 22KB
        • SHA256 886e57c4a6adb299b38f02945369f590a67da4e79a798359fc60aaa067212d7c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-utility-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\api-ms-win-crt-utility-l1-1-0.dll
        • Size 22KB
        • SHA256 5f8f26b216ade615b67a41f6fbbb910972fc6153315a65bb8f09912be50215b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\base_library.zip
        • Size 1.3MB
        • SHA256 82f107ba2074d3d4e1932ca5c4344fb7623d391e3901529efc995fcab5c1ae8e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ghostaicon.ico
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\ghostaicon.ico
        • Size 108KB
        • SHA256 00346e2dc2d2585ecff2e378e096547c9ef56aad93aad942723aebad6a0f41d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 eaf6d613b95b61a39558d84c50e72630a66c99914292df88e7b54ebd60c5bd34
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\libssl-3.dll
        • Size 776KB
        • SHA256 cf1a5fdcefa3daf69041f31f98ece1d7911ca4fcb8e9f1043b4d0f459ae4c936
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python313.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\python313.dll
        • Size 5.8MB
        • SHA256 6964e590037c41d631fd1215f05af154f7fa68105993c6f573a20689b473f1ac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\select.pyd
        • Size 32KB
        • SHA256 ddf1221851814943a82ed8a986d228463404da2ada969661bdd69223f14fc050
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tcl86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\tcl86t.dll
        • Size 1.8MB
        • SHA256 a308beae8555cff5ac2aff7eaf0aef40b5fe173f047e246dc49da9a4d3ef62f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tk86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\tk86t.dll
        • Size 1.5MB
        • SHA256 20f4876506bce7f89e53570e64fd1dce30a64548326b45f372871c7019560df4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\ucrtbase.dll
        • Size 1.3MB
        • SHA256 3239227d27667ba20d10a880751924e5719de0078f9fce232d149d383f7681f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\unicodedata.pyd
        • Size 695KB
        • SHA256 b965a80346ee95dbec0b147faab329f3276ba24fceb8df5df171367649f116f3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zlib1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI47762\zlib1.dll
        • Size 142KB
        • SHA256 1dd27f0411ebb31bd148a61589cee254410915f1e6c37aa3ffa52fac71a5426c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        __PSScriptPolicyTest_ncov5rfe.dkc.ps1
        • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_ncov5rfe.dkc.ps1
        • Size 60B
        • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        memory/2624-1066-0x000001899F1A0000-0x000001899F3BC000-memory.dmp
        Download

        memory/2624-1063-0x000001899F710000-0x000001899F734000-memory.dmp
        Download

        memory/2624-1062-0x000001899F710000-0x000001899F73A000-memory.dmp
        Download

        memory/2624-1059-0x000001899E4D0000-0x000001899E4F2000-memory.dmp
        Download

        memory/2624-1053-0x000001899E510000-0x000001899E520000-memory.dmp
        Download

        memory/2808-1067-0x00007FFBDD860000-0x00007FFBDD889000-memory.dmp
        Download