Malicious PE Executable analysis – 2f0e72216bac

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

File

Type

Portable Executable file

Detection

PeID

Microsoft Visual C++ v6.0 DLL

3 malicious · 30 files

EXE2f0e72216baccb5d3cd1c7198f6e0671

Structure

BIN[NSIS Installer] @ #00009608

DLLUserInfo.dll

DLLAudioCapture.dll

EXEBackupService.exe

INICLIENT32.ini

DLLHTCTL32.DLL

LICNSM.LIC

ININSM.ini

DLLPCICHEK.DLL

DLLPCICL32.DLL

DLLTCBR32.DLL

DLLTCCTL32.DLL

INIclient32u.ini

DLLmsvcr100.dll

INFnskbfltr.inf

INInsm_vpro.ini

EXEnspowershell.exe

DLLpcicapi.dll

PS1processing.ps1

PS1[Deobfuscated PS]

EXEremcmdstub.exe

DLLnsExec.dll

PS1[SETUP_DECOMPILED.NSI]

BINOverlay_1837058e.bin

BINResources

Name	Value
Info	Overlay extracted: Overlay_1837058e.bin (5691657 bytes)