Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
FileType
Portable Executable file
DetectionPeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
4 malicious · 1233 files
EXE0f778361e2abac4672f9d823e6714221PE32 x86
Structure
BIN[NSIS Installer] @ #0000F408
BIN[NSIS Installer] @ #000932B9
BMPmodern-wizard.bmpextracted from PE Executable
DLLnsDialogs.dllextracted from PE Executable · PE32 x86
DLLSystem.dllextracted from PE Executable · PE32 x86
BMPmodern-header.bmpextracted from PE Executable
INFOemVista.infextracted from PE Executable
CATtap0901.catextracted from PE Executable
EXEtap0901.sysextracted from PE Executable · PE32+ x64
EXEtapinstall.exeextracted from PE Executable · PE32+ x64
EXEUpdate.exeextracted from PE Executable · PE32 x86
EXELetsPRO.exeextracted from PE Executable · PE32 x86
INILetsPRO.iniextracted from PE Executable
DLLCommunityToolkit.Mvvm.dllextracted from PE Executable · PE32 x86
DLLDeltaCompressionDotNet.MsDelta.dllextracted from PE Executable · PE32 x86
DLLDeltaCompressionDotNet.PatchApi.dllextracted from PE Executable · PE32 x86
DLLDeltaCompressionDotNet.dllextracted from PE Executable · PE32 x86
DLLFontAwesome.WPF.dllextracted from PE Executable · PE32 x86
DLLHardcodet.Wpf.TaskbarNotification.dllextracted from PE Executable · PE32 x86
DLLICSharpCode.AvalonEdit.dllextracted from PE Executable · PE32 x86
DLLINIFileParser.dllextracted from PE Executable · PE32 x86
DLLLetsGoogleAnalytics.dllextracted from PE Executable · PE32 x86
EXELetsGoogleAnalytics.exeextracted from PE Executable · PE32 x86
BINLetsPRO.exe.configextracted from PE Executable
DLLLetsVPNDomainModel.dllextracted from PE Executable · PE32 x86
DLLLetsVPNInfraStructure.dllextracted from PE Executable · PE32 x86
DLLMdXaml.dllextracted from PE Executable · PE32 x86
DLLMicrosoft.Bcl.AsyncInterfaces.dllextracted from PE Executable · PE32 x86
DLLMicrosoft.Expression.Interactions.dllextracted from PE Executable · PE32 x86
DLLMicrosoft.Toolkit.Uwp.Notifications.dllextracted from PE Executable · PE32 x86
DLLMicrosoft.Web.WebView2.Core.dllextracted from PE Executable · PE32 x86
DLLMicrosoft.Web.WebView2.WinForms.dllextracted from PE Executable · PE32 x86
DLLMicrosoft.Web.WebView2.Wpf.dllextracted from PE Executable · PE32 x86
DLLMicrosoft.Win32.Primitives.dllextracted from PE Executable · PE32 x86
DLLMicrosoft.Win32.Registry.AccessControl.dllextracted from PE Executable · PE32 x86
DLLMicrosoft.Win32.Registry.dllextracted from PE Executable · PE32 x86
DLLMicrosoft.Win32.SystemEvents.dllextracted from PE Executable · PE32 x86
DLLMono.Cecil.Mdb.dllextracted from PE Executable · PE32 x86
DLLMono.Cecil.Pdb.dllextracted from PE Executable · PE32 x86
DLLMono.Cecil.Rocks.dllextracted from PE Executable · PE32 x86
DLLMono.Cecil.dllextracted from PE Executable · PE32 x86
DLLNewtonsoft.Json.dllextracted from PE Executable · PE32 x86
DLLNuGet.Squirrel.dllextracted from PE Executable · PE32 x86
DLLPusherClient.dllextracted from PE Executable · PE32 x86
DLLSQLite-net.dllextracted from PE Executable · PE32 x86
DLLSQLiteNetExtensions.dllextracted from PE Executable · PE32 x86
DLLSQLiteNetExtensionsAsync.dllextracted from PE Executable · PE32 x86
DLLSQLitePCLRaw.batteries_v2.dllextracted from PE Executable · PE32 x86
DLLSQLitePCLRaw.core.dllextracted from PE Executable · PE32 x86
DLLSQLitePCLRaw.nativelibrary.dllextracted from PE Executable · PE32 x86
DLLSQLitePCLRaw.provider.dynamic_cdecl.dllextracted from PE Executable · PE32 x86
DLLSVGImage.dllextracted from PE Executable · PE32 x86
DLLSentry.dllextracted from PE Executable · PE32 x86
DLLSharpCompress.dllextracted from PE Executable · PE32 x86
DLLSquirrel.dllextracted from PE Executable · PE32 x86
DLLSuperSocket.ClientEngine.dllextracted from PE Executable · PE32 x86
DLLSystem.AppContext.dllextracted from PE Executable · PE32 x86
DLLSystem.Buffers.dllextracted from PE Executable · PE32 x86
DLLSystem.CodeDom.dllextracted from PE Executable · PE32 x86
DLLSystem.Collections.Concurrent.dllextracted from PE Executable · PE32 x86
DLLSystem.Collections.Immutable.dllextracted from PE Executable · PE32 x86
DLLSystem.Collections.NonGeneric.dllextracted from PE Executable · PE32 x86
DLLSystem.Collections.Specialized.dllextracted from PE Executable · PE32 x86
DLLSystem.Collections.dllextracted from PE Executable · PE32 x86
DLLSystem.ComponentModel.Annotations.dllextracted from PE Executable · PE32 x86
DLLSystem.ComponentModel.EventBasedAsync.dllextracted from PE Executable · PE32 x86
DLLSystem.ComponentModel.Primitives.dllextracted from PE Executable · PE32 x86
DLLSystem.ComponentModel.TypeConverter.dllextracted from PE Executable · PE32 x86
DLLSystem.ComponentModel.dllextracted from PE Executable · PE32 x86
DLLSystem.Configuration.ConfigurationManager.dllextracted from PE Executable · PE32 x86
DLLSystem.Console.dllextracted from PE Executable · PE32 x86
DLLSystem.Data.Common.dllextracted from PE Executable · PE32 x86
DLLSystem.Data.Odbc.dllextracted from PE Executable · PE32 x86
DLLSystem.Data.OleDb.dllextracted from PE Executable · PE32 x86
DLLSystem.Data.SqlClient.dllextracted from PE Executable · PE32 x86
DLLSystem.Diagnostics.Contracts.dllextracted from PE Executable · PE32 x86
DLLSystem.Diagnostics.Debug.dllextracted from PE Executable · PE32 x86
DLLSystem.Diagnostics.EventLog.dllextracted from PE Executable · PE32 x86
DLLSystem.Diagnostics.FileVersionInfo.dllextracted from PE Executable · PE32 x86
DLLSystem.Diagnostics.PerformanceCounter.dllextracted from PE Executable · PE32 x86
DLLSystem.Diagnostics.Process.dllextracted from PE Executable · PE32 x86
DLLSystem.Diagnostics.StackTrace.dllextracted from PE Executable · PE32 x86
DLLSystem.Diagnostics.TextWriterTraceListener.dllextracted from PE Executable · PE32 x86
DLLSystem.Diagnostics.Tools.dllextracted from PE Executable · PE32 x86
DLLSystem.Diagnostics.TraceSource.dllextracted from PE Executable · PE32 x86
DLLSystem.Diagnostics.Tracing.dllextracted from PE Executable · PE32 x86
DLLSystem.Drawing.Common.dllextracted from PE Executable · PE32 x86
DLLSystem.Drawing.Primitives.dllextracted from PE Executable · PE32 x86
DLLSystem.Dynamic.Runtime.dllextracted from PE Executable · PE32 x86
DLLSystem.Globalization.Calendars.dllextracted from PE Executable · PE32 x86
DLLSystem.Globalization.Extensions.dllextracted from PE Executable · PE32 x86
DLLSystem.Globalization.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.Compression.ZipFile.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.Compression.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.FileSystem.AccessControl.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.FileSystem.DriveInfo.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.FileSystem.Primitives.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.FileSystem.Watcher.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.FileSystem.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.IsolatedStorage.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.MemoryMappedFiles.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.Packaging.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.Pipes.AccessControl.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.Pipes.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.Ports.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.UnmanagedMemoryStream.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.dllextracted from PE Executable · PE32 x86
DLLSystem.Linq.Expressions.dllextracted from PE Executable · PE32 x86
DLLSystem.Linq.Parallel.dllextracted from PE Executable · PE32 x86
DLLSystem.Linq.Queryable.dllextracted from PE Executable · PE32 x86
DLLSystem.Linq.dllextracted from PE Executable · PE32 x86
DLLSystem.Management.Automation.dllextracted from PE Executable · PE32 x86
DLLSystem.Memory.dllextracted from PE Executable · PE32 x86
DLLSystem.Net.Http.dllextracted from PE Executable · PE32 x86
DLLSystem.Net.IPNetwork.dllextracted from PE Executable · PE32 x86
DLLSystem.Net.NameResolution.dllextracted from PE Executable · PE32 x86
DLLSystem.Net.NetworkInformation.dllextracted from PE Executable · PE32 x86
DLLSystem.Net.Ping.dllextracted from PE Executable · PE32 x86
DLLSystem.Net.Primitives.dllextracted from PE Executable · PE32 x86
DLLSystem.Net.Requests.dllextracted from PE Executable · PE32 x86
DLLSystem.Net.Security.dllextracted from PE Executable · PE32 x86
DLLSystem.Net.Sockets.dllextracted from PE Executable · PE32 x86
DLLSystem.Net.WebHeaderCollection.dllextracted from PE Executable · PE32 x86
DLLSystem.Net.WebSockets.Client.dllextracted from PE Executable · PE32 x86
DLLSystem.Net.WebSockets.dllextracted from PE Executable · PE32 x86
DLLSystem.Numerics.Vectors.dllextracted from PE Executable · PE32 x86
DLLSystem.ObjectModel.dllextracted from PE Executable · PE32 x86
DLLSystem.Reflection.Extensions.dllextracted from PE Executable · PE32 x86
DLLSystem.Reflection.Metadata.dllextracted from PE Executable · PE32 x86
DLLSystem.Reflection.Primitives.dllextracted from PE Executable · PE32 x86
DLLSystem.Reflection.dllextracted from PE Executable · PE32 x86
DLLSystem.Resources.Reader.dllextracted from PE Executable · PE32 x86
DLLSystem.Resources.ResourceManager.dllextracted from PE Executable · PE32 x86
DLLSystem.Resources.Writer.dllextracted from PE Executable · PE32 x86
DLLSystem.Runtime.CompilerServices.Unsafe.dllextracted from PE Executable · PE32 x86
DLLSystem.Runtime.CompilerServices.VisualC.dllextracted from PE Executable · PE32 x86
DLLSystem.Runtime.Extensions.dllextracted from PE Executable · PE32 x86
DLLSystem.Runtime.Handles.dllextracted from PE Executable · PE32 x86
DLLSystem.Runtime.InteropServices.RuntimeInformation.dllextracted from PE Executable · PE32 x86
DLLSystem.Runtime.InteropServices.dllextracted from PE Executable · PE32 x86
DLLSystem.Runtime.Numerics.dllextracted from PE Executable · PE32 x86
DLLSystem.Runtime.Serialization.Formatters.dllextracted from PE Executable · PE32 x86
DLLSystem.Runtime.Serialization.Json.dllextracted from PE Executable · PE32 x86
DLLSystem.Runtime.Serialization.Primitives.dllextracted from PE Executable · PE32 x86
DLLSystem.Runtime.Serialization.Xml.dllextracted from PE Executable · PE32 x86
DLLSystem.Runtime.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.AccessControl.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.Claims.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.Cryptography.Algorithms.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.Cryptography.Cng.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.Cryptography.Csp.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.Cryptography.Encoding.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.Cryptography.Pkcs.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.Cryptography.Primitives.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.Cryptography.ProtectedData.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.Cryptography.X509Certificates.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.Cryptography.Xml.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.Permissions.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.Principal.Windows.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.Principal.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.SecureString.dllextracted from PE Executable · PE32 x86
DLLSystem.ServiceModel.Duplex.dllextracted from PE Executable · PE32 x86
DLLSystem.ServiceModel.Http.dllextracted from PE Executable · PE32 x86
DLLSystem.ServiceModel.NetTcp.dllextracted from PE Executable · PE32 x86
DLLSystem.ServiceModel.Primitives.dllextracted from PE Executable · PE32 x86
DLLSystem.ServiceModel.Security.dllextracted from PE Executable · PE32 x86
DLLSystem.ServiceModel.Syndication.dllextracted from PE Executable · PE32 x86
DLLSystem.ServiceProcess.ServiceController.dllextracted from PE Executable · PE32 x86
DLLSystem.Text.Encoding.CodePages.dllextracted from PE Executable · PE32 x86
DLLSystem.Text.Encoding.Extensions.dllextracted from PE Executable · PE32 x86
DLLSystem.Text.Encoding.dllextracted from PE Executable · PE32 x86
DLLSystem.Text.Encodings.Web.dllextracted from PE Executable · PE32 x86
DLLSystem.Text.Json.dllextracted from PE Executable · PE32 x86
DLLSystem.Text.RegularExpressions.dllextracted from PE Executable · PE32 x86
DLLSystem.Threading.AccessControl.dllextracted from PE Executable · PE32 x86
DLLSystem.Threading.Overlapped.dllextracted from PE Executable · PE32 x86
DLLSystem.Threading.Tasks.Extensions.dllextracted from PE Executable · PE32 x86
DLLSystem.Threading.Tasks.Parallel.dllextracted from PE Executable · PE32 x86
DLLSystem.Threading.Tasks.dllextracted from PE Executable · PE32 x86
DLLSystem.Threading.Thread.dllextracted from PE Executable · PE32 x86
DLLSystem.Threading.ThreadPool.dllextracted from PE Executable · PE32 x86
DLLSystem.Threading.Timer.dllextracted from PE Executable · PE32 x86
DLLSystem.Threading.dllextracted from PE Executable · PE32 x86
DLLSystem.ValueTuple.dllextracted from PE Executable · PE32 x86
DLLSystem.Web.Services.Description.dllextracted from PE Executable · PE32 x86
DLLSystem.Windows.Interactivity.dllextracted from PE Executable · PE32 x86
DLLSystem.Xml.ReaderWriter.dllextracted from PE Executable · PE32 x86
DLLSystem.Xml.XDocument.dllextracted from PE Executable · PE32 x86
DLLSystem.Xml.XPath.XDocument.dllextracted from PE Executable · PE32 x86
DLLSystem.Xml.XPath.dllextracted from PE Executable · PE32 x86
DLLSystem.Xml.XmlDocument.dllextracted from PE Executable · PE32 x86
DLLSystem.Xml.XmlSerializer.dllextracted from PE Executable · PE32 x86
DLLToastNotifications.Messages.dllextracted from PE Executable · PE32 x86
DLLToastNotifications.dllextracted from PE Executable · PE32 x86
DLLUtils.dllextracted from PE Executable · PE32 x86
DLLWebSocket4Net.dllextracted from PE Executable · PE32 x86
DLLWpfAnimatedGif.dllextracted from PE Executable · PE32 x86
DLLlibwin.dllextracted from PE Executable · PE32 x86
BINlog4net.configextracted from PE Executable
DLLlog4net.dllextracted from PE Executable · PE32 x86
DLLmicrosoft.identitymodel.dllextracted from PE Executable · PE32 x86
DLLnetstandard.dllextracted from PE Executable · PE32 x86
DLLwintun.dllextracted from PE Executable · PE32 x86
IMGnotification_icon.pngextracted from PE Executable · PNG Image
DLLWebView2Loader.dllextracted from PE Executable · PE32 x86
DLLSystem.Web.Services.Description.resources.dllextracted from PE Executable · PE32 x86
DLLLetsPRO.resources.dllextracted from PE Executable · PE32 x86
DLLe_sqlite3.dllextracted from PE Executable · PE32 x86
EXEndp462-web.exeextracted from PE Executable · PE32 x86
DLLnsExec.dllextracted from PE Executable · PE32 x86
DLLnsProcess.dllextracted from PE Executable · PE32 x86
DLLINetC.dllextracted from PE Executable · PE32 x86
PS1[SETUP_DECOMPILED.NSI]decompiled · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
BIN[NSIS Uninstaller] @ #0103D2F1
BIN[NSIS Uninstaller] @ #0104616C
BINOverlay_db7f9906.binoverlay
| Name |
Value |
|---|
| Info |
Overlay extracted: Overlay_db7f9906.bin (17002857 bytes) |
4 malicious · 1233 files
EXE0f778361e2abac4672f9d823e6714221PE32 x86
Structure
BIN[NSIS Installer] @ #0000F408
BIN[NSIS Installer] @ #000932B9
BMPmodern-wizard.bmpextracted from PE Executable
DLLnsDialogs.dllextracted from PE Executable · PE32 x86
DLLSystem.dllextracted from PE Executable · PE32 x86
BMPmodern-header.bmpextracted from PE Executable
INFOemVista.infextracted from PE Executable
CATtap0901.catextracted from PE Executable
EXEtap0901.sysextracted from PE Executable · PE32+ x64
EXEtapinstall.exeextracted from PE Executable · PE32+ x64
EXEUpdate.exeextracted from PE Executable · PE32 x86
EXELetsPRO.exeextracted from PE Executable · PE32 x86
INILetsPRO.iniextracted from PE Executable
DLLCommunityToolkit.Mvvm.dllextracted from PE Executable · PE32 x86
DLLDeltaCompressionDotNet.MsDelta.dllextracted from PE Executable · PE32 x86
DLLDeltaCompressionDotNet.PatchApi.dllextracted from PE Executable · PE32 x86
DLLDeltaCompressionDotNet.dllextracted from PE Executable · PE32 x86
DLLFontAwesome.WPF.dllextracted from PE Executable · PE32 x86
DLLHardcodet.Wpf.TaskbarNotification.dllextracted from PE Executable · PE32 x86
DLLICSharpCode.AvalonEdit.dllextracted from PE Executable · PE32 x86
DLLINIFileParser.dllextracted from PE Executable · PE32 x86
DLLLetsGoogleAnalytics.dllextracted from PE Executable · PE32 x86
EXELetsGoogleAnalytics.exeextracted from PE Executable · PE32 x86
BINLetsPRO.exe.configextracted from PE Executable
DLLLetsVPNDomainModel.dllextracted from PE Executable · PE32 x86
DLLLetsVPNInfraStructure.dllextracted from PE Executable · PE32 x86
DLLMdXaml.dllextracted from PE Executable · PE32 x86
DLLMicrosoft.Bcl.AsyncInterfaces.dllextracted from PE Executable · PE32 x86
DLLMicrosoft.Expression.Interactions.dllextracted from PE Executable · PE32 x86
DLLMicrosoft.Toolkit.Uwp.Notifications.dllextracted from PE Executable · PE32 x86
DLLMicrosoft.Web.WebView2.Core.dllextracted from PE Executable · PE32 x86
DLLMicrosoft.Web.WebView2.WinForms.dllextracted from PE Executable · PE32 x86
DLLMicrosoft.Web.WebView2.Wpf.dllextracted from PE Executable · PE32 x86
DLLMicrosoft.Win32.Primitives.dllextracted from PE Executable · PE32 x86
DLLMicrosoft.Win32.Registry.AccessControl.dllextracted from PE Executable · PE32 x86
DLLMicrosoft.Win32.Registry.dllextracted from PE Executable · PE32 x86
DLLMicrosoft.Win32.SystemEvents.dllextracted from PE Executable · PE32 x86
DLLMono.Cecil.Mdb.dllextracted from PE Executable · PE32 x86
DLLMono.Cecil.Pdb.dllextracted from PE Executable · PE32 x86
DLLMono.Cecil.Rocks.dllextracted from PE Executable · PE32 x86
DLLMono.Cecil.dllextracted from PE Executable · PE32 x86
DLLNewtonsoft.Json.dllextracted from PE Executable · PE32 x86
DLLNuGet.Squirrel.dllextracted from PE Executable · PE32 x86
DLLPusherClient.dllextracted from PE Executable · PE32 x86
DLLSQLite-net.dllextracted from PE Executable · PE32 x86
DLLSQLiteNetExtensions.dllextracted from PE Executable · PE32 x86
DLLSQLiteNetExtensionsAsync.dllextracted from PE Executable · PE32 x86
DLLSQLitePCLRaw.batteries_v2.dllextracted from PE Executable · PE32 x86
DLLSQLitePCLRaw.core.dllextracted from PE Executable · PE32 x86
DLLSQLitePCLRaw.nativelibrary.dllextracted from PE Executable · PE32 x86
DLLSQLitePCLRaw.provider.dynamic_cdecl.dllextracted from PE Executable · PE32 x86
DLLSVGImage.dllextracted from PE Executable · PE32 x86
DLLSentry.dllextracted from PE Executable · PE32 x86
DLLSharpCompress.dllextracted from PE Executable · PE32 x86
DLLSquirrel.dllextracted from PE Executable · PE32 x86
DLLSuperSocket.ClientEngine.dllextracted from PE Executable · PE32 x86
DLLSystem.AppContext.dllextracted from PE Executable · PE32 x86
DLLSystem.Buffers.dllextracted from PE Executable · PE32 x86
DLLSystem.CodeDom.dllextracted from PE Executable · PE32 x86
DLLSystem.Collections.Concurrent.dllextracted from PE Executable · PE32 x86
DLLSystem.Collections.Immutable.dllextracted from PE Executable · PE32 x86
DLLSystem.Collections.NonGeneric.dllextracted from PE Executable · PE32 x86
DLLSystem.Collections.Specialized.dllextracted from PE Executable · PE32 x86
DLLSystem.Collections.dllextracted from PE Executable · PE32 x86
DLLSystem.ComponentModel.Annotations.dllextracted from PE Executable · PE32 x86
DLLSystem.ComponentModel.EventBasedAsync.dllextracted from PE Executable · PE32 x86
DLLSystem.ComponentModel.Primitives.dllextracted from PE Executable · PE32 x86
DLLSystem.ComponentModel.TypeConverter.dllextracted from PE Executable · PE32 x86
DLLSystem.ComponentModel.dllextracted from PE Executable · PE32 x86
DLLSystem.Configuration.ConfigurationManager.dllextracted from PE Executable · PE32 x86
DLLSystem.Console.dllextracted from PE Executable · PE32 x86
DLLSystem.Data.Common.dllextracted from PE Executable · PE32 x86
DLLSystem.Data.Odbc.dllextracted from PE Executable · PE32 x86
DLLSystem.Data.OleDb.dllextracted from PE Executable · PE32 x86
DLLSystem.Data.SqlClient.dllextracted from PE Executable · PE32 x86
DLLSystem.Diagnostics.Contracts.dllextracted from PE Executable · PE32 x86
DLLSystem.Diagnostics.Debug.dllextracted from PE Executable · PE32 x86
DLLSystem.Diagnostics.EventLog.dllextracted from PE Executable · PE32 x86
DLLSystem.Diagnostics.FileVersionInfo.dllextracted from PE Executable · PE32 x86
DLLSystem.Diagnostics.PerformanceCounter.dllextracted from PE Executable · PE32 x86
DLLSystem.Diagnostics.Process.dllextracted from PE Executable · PE32 x86
DLLSystem.Diagnostics.StackTrace.dllextracted from PE Executable · PE32 x86
DLLSystem.Diagnostics.TextWriterTraceListener.dllextracted from PE Executable · PE32 x86
DLLSystem.Diagnostics.Tools.dllextracted from PE Executable · PE32 x86
DLLSystem.Diagnostics.TraceSource.dllextracted from PE Executable · PE32 x86
DLLSystem.Diagnostics.Tracing.dllextracted from PE Executable · PE32 x86
DLLSystem.Drawing.Common.dllextracted from PE Executable · PE32 x86
DLLSystem.Drawing.Primitives.dllextracted from PE Executable · PE32 x86
DLLSystem.Dynamic.Runtime.dllextracted from PE Executable · PE32 x86
DLLSystem.Globalization.Calendars.dllextracted from PE Executable · PE32 x86
DLLSystem.Globalization.Extensions.dllextracted from PE Executable · PE32 x86
DLLSystem.Globalization.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.Compression.ZipFile.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.Compression.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.FileSystem.AccessControl.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.FileSystem.DriveInfo.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.FileSystem.Primitives.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.FileSystem.Watcher.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.FileSystem.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.IsolatedStorage.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.MemoryMappedFiles.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.Packaging.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.Pipes.AccessControl.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.Pipes.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.Ports.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.UnmanagedMemoryStream.dllextracted from PE Executable · PE32 x86
DLLSystem.IO.dllextracted from PE Executable · PE32 x86
DLLSystem.Linq.Expressions.dllextracted from PE Executable · PE32 x86
DLLSystem.Linq.Parallel.dllextracted from PE Executable · PE32 x86
DLLSystem.Linq.Queryable.dllextracted from PE Executable · PE32 x86
DLLSystem.Linq.dllextracted from PE Executable · PE32 x86
DLLSystem.Management.Automation.dllextracted from PE Executable · PE32 x86
DLLSystem.Memory.dllextracted from PE Executable · PE32 x86
DLLSystem.Net.Http.dllextracted from PE Executable · PE32 x86
DLLSystem.Net.IPNetwork.dllextracted from PE Executable · PE32 x86
DLLSystem.Net.NameResolution.dllextracted from PE Executable · PE32 x86
DLLSystem.Net.NetworkInformation.dllextracted from PE Executable · PE32 x86
DLLSystem.Net.Ping.dllextracted from PE Executable · PE32 x86
DLLSystem.Net.Primitives.dllextracted from PE Executable · PE32 x86
DLLSystem.Net.Requests.dllextracted from PE Executable · PE32 x86
DLLSystem.Net.Security.dllextracted from PE Executable · PE32 x86
DLLSystem.Net.Sockets.dllextracted from PE Executable · PE32 x86
DLLSystem.Net.WebHeaderCollection.dllextracted from PE Executable · PE32 x86
DLLSystem.Net.WebSockets.Client.dllextracted from PE Executable · PE32 x86
DLLSystem.Net.WebSockets.dllextracted from PE Executable · PE32 x86
DLLSystem.Numerics.Vectors.dllextracted from PE Executable · PE32 x86
DLLSystem.ObjectModel.dllextracted from PE Executable · PE32 x86
DLLSystem.Reflection.Extensions.dllextracted from PE Executable · PE32 x86
DLLSystem.Reflection.Metadata.dllextracted from PE Executable · PE32 x86
DLLSystem.Reflection.Primitives.dllextracted from PE Executable · PE32 x86
DLLSystem.Reflection.dllextracted from PE Executable · PE32 x86
DLLSystem.Resources.Reader.dllextracted from PE Executable · PE32 x86
DLLSystem.Resources.ResourceManager.dllextracted from PE Executable · PE32 x86
DLLSystem.Resources.Writer.dllextracted from PE Executable · PE32 x86
DLLSystem.Runtime.CompilerServices.Unsafe.dllextracted from PE Executable · PE32 x86
DLLSystem.Runtime.CompilerServices.VisualC.dllextracted from PE Executable · PE32 x86
DLLSystem.Runtime.Extensions.dllextracted from PE Executable · PE32 x86
DLLSystem.Runtime.Handles.dllextracted from PE Executable · PE32 x86
DLLSystem.Runtime.InteropServices.RuntimeInformation.dllextracted from PE Executable · PE32 x86
DLLSystem.Runtime.InteropServices.dllextracted from PE Executable · PE32 x86
DLLSystem.Runtime.Numerics.dllextracted from PE Executable · PE32 x86
DLLSystem.Runtime.Serialization.Formatters.dllextracted from PE Executable · PE32 x86
DLLSystem.Runtime.Serialization.Json.dllextracted from PE Executable · PE32 x86
DLLSystem.Runtime.Serialization.Primitives.dllextracted from PE Executable · PE32 x86
DLLSystem.Runtime.Serialization.Xml.dllextracted from PE Executable · PE32 x86
DLLSystem.Runtime.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.AccessControl.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.Claims.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.Cryptography.Algorithms.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.Cryptography.Cng.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.Cryptography.Csp.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.Cryptography.Encoding.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.Cryptography.Pkcs.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.Cryptography.Primitives.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.Cryptography.ProtectedData.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.Cryptography.X509Certificates.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.Cryptography.Xml.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.Permissions.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.Principal.Windows.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.Principal.dllextracted from PE Executable · PE32 x86
DLLSystem.Security.SecureString.dllextracted from PE Executable · PE32 x86
DLLSystem.ServiceModel.Duplex.dllextracted from PE Executable · PE32 x86
DLLSystem.ServiceModel.Http.dllextracted from PE Executable · PE32 x86
DLLSystem.ServiceModel.NetTcp.dllextracted from PE Executable · PE32 x86
DLLSystem.ServiceModel.Primitives.dllextracted from PE Executable · PE32 x86
DLLSystem.ServiceModel.Security.dllextracted from PE Executable · PE32 x86
DLLSystem.ServiceModel.Syndication.dllextracted from PE Executable · PE32 x86
DLLSystem.ServiceProcess.ServiceController.dllextracted from PE Executable · PE32 x86
DLLSystem.Text.Encoding.CodePages.dllextracted from PE Executable · PE32 x86
DLLSystem.Text.Encoding.Extensions.dllextracted from PE Executable · PE32 x86
DLLSystem.Text.Encoding.dllextracted from PE Executable · PE32 x86
DLLSystem.Text.Encodings.Web.dllextracted from PE Executable · PE32 x86
DLLSystem.Text.Json.dllextracted from PE Executable · PE32 x86
DLLSystem.Text.RegularExpressions.dllextracted from PE Executable · PE32 x86
DLLSystem.Threading.AccessControl.dllextracted from PE Executable · PE32 x86
DLLSystem.Threading.Overlapped.dllextracted from PE Executable · PE32 x86
DLLSystem.Threading.Tasks.Extensions.dllextracted from PE Executable · PE32 x86
DLLSystem.Threading.Tasks.Parallel.dllextracted from PE Executable · PE32 x86
DLLSystem.Threading.Tasks.dllextracted from PE Executable · PE32 x86
DLLSystem.Threading.Thread.dllextracted from PE Executable · PE32 x86
DLLSystem.Threading.ThreadPool.dllextracted from PE Executable · PE32 x86
DLLSystem.Threading.Timer.dllextracted from PE Executable · PE32 x86
DLLSystem.Threading.dllextracted from PE Executable · PE32 x86
DLLSystem.ValueTuple.dllextracted from PE Executable · PE32 x86
DLLSystem.Web.Services.Description.dllextracted from PE Executable · PE32 x86
DLLSystem.Windows.Interactivity.dllextracted from PE Executable · PE32 x86
DLLSystem.Xml.ReaderWriter.dllextracted from PE Executable · PE32 x86
DLLSystem.Xml.XDocument.dllextracted from PE Executable · PE32 x86
DLLSystem.Xml.XPath.XDocument.dllextracted from PE Executable · PE32 x86
DLLSystem.Xml.XPath.dllextracted from PE Executable · PE32 x86
DLLSystem.Xml.XmlDocument.dllextracted from PE Executable · PE32 x86
DLLSystem.Xml.XmlSerializer.dllextracted from PE Executable · PE32 x86
DLLToastNotifications.Messages.dllextracted from PE Executable · PE32 x86
DLLToastNotifications.dllextracted from PE Executable · PE32 x86
DLLUtils.dllextracted from PE Executable · PE32 x86
DLLWebSocket4Net.dllextracted from PE Executable · PE32 x86
DLLWpfAnimatedGif.dllextracted from PE Executable · PE32 x86
DLLlibwin.dllextracted from PE Executable · PE32 x86
BINlog4net.configextracted from PE Executable
DLLlog4net.dllextracted from PE Executable · PE32 x86
DLLmicrosoft.identitymodel.dllextracted from PE Executable · PE32 x86
DLLnetstandard.dllextracted from PE Executable · PE32 x86
DLLwintun.dllextracted from PE Executable · PE32 x86
IMGnotification_icon.pngextracted from PE Executable · PNG Image
DLLWebView2Loader.dllextracted from PE Executable · PE32 x86
DLLSystem.Web.Services.Description.resources.dllextracted from PE Executable · PE32 x86
DLLLetsPRO.resources.dllextracted from PE Executable · PE32 x86
DLLe_sqlite3.dllextracted from PE Executable · PE32 x86
EXEndp462-web.exeextracted from PE Executable · PE32 x86
DLLnsExec.dllextracted from PE Executable · PE32 x86
DLLnsProcess.dllextracted from PE Executable · PE32 x86
DLLINetC.dllextracted from PE Executable · PE32 x86
PS1[SETUP_DECOMPILED.NSI]decompiled · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
BIN[NSIS Uninstaller] @ #0103D2F1
BIN[NSIS Uninstaller] @ #0104616C
BINOverlay_db7f9906.binoverlay
No malware configuration was found at this point.
Coming soon: export of this report's indicators to MISP and EDR platforms.
