Overview
overview
6Static
static
3mesa/Micro...es.dll
windows10-2004-x64
1mesa/Micro...es.dll
windows11-ltsc_2024-x64
6mesa/Syste...ic.dll
windows10-2004-x64
1mesa/Syste...ic.dll
windows11-ltsc_2024-x64
1mesa/Syste...ns.dll
windows10-2004-x64
1mesa/Syste...ns.dll
windows11-ltsc_2024-x64
1mesa/Syste...es.dll
windows10-2004-x64
1mesa/Syste...es.dll
windows11-ltsc_2024-x64
6mesa/Syste...le.dll
windows10-2004-x64
1mesa/Syste...le.dll
windows11-ltsc_2024-x64
1mesa/Syste...ss.dll
windows10-2004-x64
1mesa/Syste...ss.dll
windows11-ltsc_2024-x64
6mesa/System.Linq.dll
windows10-2004-x64
1mesa/System.Linq.dll
windows11-ltsc_2024-x64
1mesa/Syste...ry.dll
windows10-2004-x64
1mesa/Syste...ry.dll
windows11-ltsc_2024-x64
6mesa/Syste...ib.dll
windows10-2004-x64
1mesa/Syste...ib.dll
windows11-ltsc_2024-x64
6mesa/Syste...es.dll
windows10-2004-x64
1mesa/Syste...es.dll
windows11-ltsc_2024-x64
1mesa/Syste...me.dll
windows10-2004-x64
1mesa/Syste...me.dll
windows11-ltsc_2024-x64
1mesa/Syste...ns.dll
windows10-2004-x64
1mesa/Syste...ns.dll
windows11-ltsc_2024-x64
1mesa/Syste...ad.dll
windows10-2004-x64
1mesa/Syste...ad.dll
windows11-ltsc_2024-x64
6mesa/Syste...ng.dll
windows10-2004-x64
1mesa/Syste...ng.dll
windows11-ltsc_2024-x64
1mesa/WinUp...er.exe
windows10-2004-x64
1mesa/WinUp...er.exe
windows11-ltsc_2024-x64
1mesa/clrjit.dll
windows10-2004-x64
1mesa/clrjit.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
899s - max time network
461s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
07/09/2026, 02:09
Static task
static1
Behavioral task
behavioral1
Sample
mesa/Microsoft.Win32.Primitives.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
mesa/Microsoft.Win32.Primitives.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
mesa/System.Collections.NonGeneric.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
mesa/System.Collections.NonGeneric.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
mesa/System.Collections.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
mesa/System.Collections.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
mesa/System.ComponentModel.Primitives.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
mesa/System.ComponentModel.Primitives.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
mesa/System.Console.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
mesa/System.Console.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
mesa/System.Diagnostics.Process.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
mesa/System.Diagnostics.Process.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
mesa/System.Linq.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
mesa/System.Linq.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
mesa/System.Memory.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
mesa/System.Memory.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
mesa/System.Private.CoreLib.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
mesa/System.Private.CoreLib.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
mesa/System.Runtime.InteropServices.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
mesa/System.Runtime.InteropServices.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
mesa/System.Runtime.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
mesa/System.Runtime.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
mesa/System.Text.Encoding.Extensions.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
mesa/System.Text.Encoding.Extensions.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
mesa/System.Threading.Thread.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
mesa/System.Threading.Thread.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
mesa/System.Threading.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
mesa/System.Threading.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
mesa/WinUpdateHelper.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
mesa/WinUpdateHelper.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
mesa/clrjit.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
mesa/clrjit.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
General
- Target mesa/System.Runtime.dll
- Size 41KB
- Sample260907-clckwsbl6w
- SHA256 82fa676a897296ac6265e63bb582d03bf7df54e59c83e6bcd08f6f99a3249ba9
- MD5 79d8b0685cf2d323c7cadbd276e435bd
- SHA1 ac74c0958d691b4009f8c8657639e4115a03729c
- SHA512 eeafe9cc578da300dbaa4190a866dfcd3d65ebfeaa0484f6595225d28cd713fab347f7b3f00af1f1ddd02adc83f83a2d03087a77ab374dfc905f1a88b3f74c6f
- SSDEEP 768:U0BV0jdpFKYl5f4bGRi2xVbcVT4pftdhDGE0nkpaNEuLSoQuSivU:UIedGYl5f4bGR3G0BtdRGvkwpL7SP
- TLSH T11B130660AE4B5273CE8E9772C8B3A08109F633CF64B7CDBA541E8546298F244D3B3759
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\mesa\System.Runtime.dll,#11⤵PID:4108
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:5212
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:4068