Malicious
Malicious

4e9d03120fbf22907879c9328a07f6da

Share on LinkedIn
Print
ZIP Archive
MD5: 4e9d03120fbf22907879c9328a07f6da
Size: 16.68 MB
application/zip
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 4e9d03120fbf22907879c9328a07f6da
Sha1 d9a5c124433a06c79a05395ef3da3ddd3c7c730b
Sha256 88cd0f5f6f0ed0780b450cc53f18136cb3f8245aef432e563ca30b6ec30bbfc6
Sha384 5229520d844e9d9e9e8ad150592cbabe6adc56674d1934ea7af9c859beb515217d53fd6c04dd0ed1d2910c75d2b0a8cd
Sha512 cca22f92fda9e76b8591256b4973581a6ac47f7d23f9020fa65c4ab40a1c813e9bbb4882fbd94cad40af39f60b7c583281b8a573a4da7fa126e3753640a0b850
SSDeep 393216:PXMCHWUjetodaI8pEB1bSEKhmR44t0Mc933zqv80:PXMb8etDIDhKhmh+N933zCZ
TLSH 32F63333C85653B7DADB9D321EF66D2B050EE16A7A1799DBBFA026503C331DA0127C09
4e9d03120fbf22907879c9328a07f6da
Malicious
libcrypto-3.dll
[Authenticode]_92308a29.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.idata
.00cfg
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
libffi-8.dll
[Authenticode]_398cf2a2.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
libssl-3.dll
[Authenticode]_bf0d0bbb.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.idata
.00cfg
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
LICENSE.txt
pyexpat.pyd
[Authenticode]_e405f4c1.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0002
ID:1033
python.exe
[Authenticode]_80a7dad3.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:1033-preview.png
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
python3.dll
[Authenticode]_77360a86.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.rdata
.rsrc
Resources
RT_VERSION
ID:0001
ID:1033
python312.dll
[Authenticode]_8d290ff8.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
PyRuntim
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
python312.zip
abc.pyc
aifc.pyc
antigravity.pyc
argparse.pyc
ast.pyc
base64.pyc
bdb.pyc
bisect.pyc
bz2.pyc
calendar.pyc
cgi.pyc
cgitb.pyc
chunk.pyc
cmd.pyc
code.pyc
codecs.pyc
codeop.pyc
colorsys.pyc
compileall.pyc
configparser.pyc
contextlib.pyc
contextvars.pyc
copy.pyc
copyreg.pyc
cProfile.pyc
crypt.pyc
csv.pyc
dataclasses.pyc
datetime.pyc
decimal.pyc
difflib.pyc
dis.pyc
doctest.pyc
enum.pyc
filecmp.pyc
fileinput.pyc
fnmatch.pyc
fractions.pyc
ftplib.pyc
functools.pyc
genericpath.pyc
getopt.pyc
getpass.pyc
gettext.pyc
glob.pyc
graphlib.pyc
gzip.pyc
hashlib.pyc
heapq.pyc
hmac.pyc
imaplib.pyc
imghdr.pyc
inspect.pyc
io.pyc
ipaddress.pyc
keyword.pyc
linecache.pyc
locale.pyc
lzma.pyc
mailbox.pyc
mailcap.pyc
mimetypes.pyc
modulefinder.pyc
netrc.pyc
nntplib.pyc
ntpath.pyc
nturl2path.pyc
numbers.pyc
opcode.pyc
operator.pyc
optparse.pyc
os.pyc
pathlib.pyc
pdb.pyc
pickle.pyc
pickletools.pyc
pipes.pyc
pkgutil.pyc
platform.pyc
plistlib.pyc
poplib.pyc
posixpath.pyc
pprint.pyc
profile.pyc
pstats.pyc
pty.pyc
pyclbr.pyc
pydoc.pyc
py_compile.pyc
queue.pyc
quopri.pyc
random.pyc
reprlib.pyc
rlcompleter.pyc
runpy.pyc
sched.pyc
secrets.pyc
selectors.pyc
shelve.pyc
shlex.pyc
shutil.pyc
signal.pyc
site.pyc
smtplib.pyc
sndhdr.pyc
socket.pyc
socketserver.pyc
sre_compile.pyc
sre_constants.pyc
sre_parse.pyc
ssl.pyc
stat.pyc
statistics.pyc
string.pyc
stringprep.pyc
struct.pyc
subprocess.pyc
sunau.pyc
symtable.pyc
sysconfig.pyc
tabnanny.pyc
tarfile.pyc
telnetlib.pyc
tempfile.pyc
textwrap.pyc
this.pyc
threading.pyc
timeit.pyc
token.pyc
tokenize.pyc
trace.pyc
traceback.pyc
tracemalloc.pyc
tty.pyc
types.pyc
typing.pyc
uu.pyc
uuid.pyc
warnings.pyc
wave.pyc
weakref.pyc
webbrowser.pyc
xdrlib.pyc
zipapp.pyc
zipimport.pyc
_aix_support.pyc
_collections_abc.pyc
_compat_pickle.pyc
_compression.pyc
_markupbase.pyc
_osx_support.pyc
_pydatetime.pyc
_pydecimal.pyc
_pyio.pyc
_pylong.pyc
_py_abc.pyc
_sitebuiltins.pyc
_strptime.pyc
_threading_local.pyc
_weakrefset.pyc
__future__.pyc
__hello__.pyc
asyncio
base_events.pyc
base_futures.pyc
base_subprocess.pyc
base_tasks.pyc
constants.pyc
coroutines.pyc
events.pyc
exceptions.pyc
format_helpers.pyc
futures.pyc
locks.pyc
log.pyc
mixins.pyc
proactor_events.pyc
protocols.pyc
queues.pyc
runners.pyc
selector_events.pyc
sslproto.pyc
staggered.pyc
streams.pyc
subprocess.pyc
taskgroups.pyc
tasks.pyc
threads.pyc
timeouts.pyc
transports.pyc
trsock.pyc
unix_events.pyc
windows_events.pyc
windows_utils.pyc
__init__.pyc
__main__.pyc
collections
abc.pyc
__init__.pyc
concurrent
__init__.pyc
futures
process.pyc
thread.pyc
_base.pyc
__init__.pyc
ctypes
util.pyc
wintypes.pyc
_aix.pyc
_endian.pyc
__init__.pyc
macholib
dyld.pyc
dylib.pyc
fetch_macholib
fetch_macholib.bat
framework.pyc
README.ctypes
__init__.pyc
curses
ascii.pyc
has_key.pyc
panel.pyc
textpad.pyc
__init__.pyc
dbm
dumb.pyc
gnu.pyc
ndbm.pyc
__init__.pyc
email
architecture.rst
base64mime.pyc
charset.pyc
contentmanager.pyc
encoders.pyc
errors.pyc
feedparser.pyc
generator.pyc
header.pyc
headerregistry.pyc
iterators.pyc
message.pyc
parser.pyc
policy.pyc
quoprimime.pyc
utils.pyc
_encoded_words.pyc
_header_value_parser.pyc
_parseaddr.pyc
_policybase.pyc
__init__.pyc
mime
application.pyc
audio.pyc
base.pyc
image.pyc
message.pyc
multipart.pyc
nonmultipart.pyc
text.pyc
__init__.pyc
encodings
aliases.pyc
ascii.pyc
base64_codec.pyc
big5.pyc
big5hkscs.pyc
bz2_codec.pyc
charmap.pyc
cp037.pyc
cp1006.pyc
cp1026.pyc
cp1125.pyc
cp1140.pyc
cp1250.pyc
cp1251.pyc
cp1252.pyc
cp1253.pyc
cp1254.pyc
cp1255.pyc
cp1256.pyc
cp1257.pyc
cp1258.pyc
cp273.pyc
cp424.pyc
cp437.pyc
cp500.pyc
cp720.pyc
cp737.pyc
cp775.pyc
cp850.pyc
cp852.pyc
cp855.pyc
cp856.pyc
cp857.pyc
cp858.pyc
cp860.pyc
cp861.pyc
cp862.pyc
cp863.pyc
cp864.pyc
cp865.pyc
cp866.pyc
cp869.pyc
cp874.pyc
cp875.pyc
cp932.pyc
cp949.pyc
cp950.pyc
euc_jisx0213.pyc
euc_jis_2004.pyc
euc_jp.pyc
euc_kr.pyc
gb18030.pyc
gb2312.pyc
gbk.pyc
hex_codec.pyc
hp_roman8.pyc
hz.pyc
idna.pyc
iso2022_jp.pyc
iso2022_jp_1.pyc
iso2022_jp_2.pyc
iso2022_jp_2004.pyc
iso2022_jp_3.pyc
iso2022_jp_ext.pyc
iso2022_kr.pyc
iso8859_1.pyc
iso8859_10.pyc
iso8859_11.pyc
iso8859_13.pyc
iso8859_14.pyc
iso8859_15.pyc
iso8859_16.pyc
iso8859_2.pyc
iso8859_3.pyc
iso8859_4.pyc
iso8859_5.pyc
iso8859_6.pyc
iso8859_7.pyc
iso8859_8.pyc
iso8859_9.pyc
johab.pyc
koi8_r.pyc
koi8_t.pyc
koi8_u.pyc
kz1048.pyc
latin_1.pyc
mac_arabic.pyc
mac_croatian.pyc
mac_cyrillic.pyc
mac_farsi.pyc
mac_greek.pyc
mac_iceland.pyc
mac_latin2.pyc
mac_roman.pyc
mac_romanian.pyc
mac_turkish.pyc
mbcs.pyc
oem.pyc
palmos.pyc
ptcp154.pyc
punycode.pyc
quopri_codec.pyc
raw_unicode_escape.pyc
rot_13.pyc
shift_jis.pyc
shift_jisx0213.pyc
shift_jis_2004.pyc
tis_620.pyc
undefined.pyc
unicode_escape.pyc
utf_16.pyc
utf_16_be.pyc
utf_16_le.pyc
utf_32.pyc
utf_32_be.pyc
utf_32_le.pyc
utf_7.pyc
utf_8.pyc
utf_8_sig.pyc
uu_codec.pyc
zlib_codec.pyc
__init__.pyc
html
entities.pyc
parser.pyc
__init__.pyc
http
client.pyc
cookiejar.pyc
cookies.pyc
server.pyc
__init__.pyc
importlib
abc.pyc
machinery.pyc
readers.pyc
simple.pyc
util.pyc
_abc.pyc
_bootstrap.pyc
_bootstrap_external.pyc
__init__.pyc
metadata
_adapters.pyc
_collections.pyc
_functools.pyc
_itertools.pyc
_meta.pyc
_text.pyc
__init__.pyc
resources
abc.pyc
readers.pyc
simple.pyc
_adapters.pyc
_common.pyc
_itertools.pyc
_legacy.pyc
__init__.pyc
json
decoder.pyc
encoder.pyc
scanner.pyc
tool.pyc
__init__.pyc
logging
config.pyc
handlers.pyc
__init__.pyc
msilib
schema.pyc
sequence.pyc
text.pyc
__init__.pyc
multiprocessing
connection.pyc
context.pyc
forkserver.pyc
heap.pyc
managers.pyc
pool.pyc
popen_fork.pyc
popen_forkserver.pyc
popen_spawn_posix.pyc
popen_spawn_win32.pyc
process.pyc
queues.pyc
reduction.pyc
resource_sharer.pyc
resource_tracker.pyc
sharedctypes.pyc
shared_memory.pyc
spawn.pyc
synchronize.pyc
util.pyc
__init__.pyc
dummy
connection.pyc
__init__.pyc
re
_casefix.pyc
_compiler.pyc
_constants.pyc
_parser.pyc
__init__.pyc
site-packages
README.txt
sqlite3
dbapi2.pyc
dump.pyc
__init__.pyc
__main__.pyc
tomllib
_parser.pyc
_re.pyc
_types.pyc
__init__.pyc
urllib
error.pyc
parse.pyc
request.pyc
response.pyc
robotparser.pyc
__init__.pyc
wsgiref
handlers.pyc
headers.pyc
simple_server.pyc
types.pyc
util.pyc
validate.pyc
__init__.pyc
xml
__init__.pyc
dom
domreg.pyc
expatbuilder.pyc
minicompat.pyc
minidom.pyc
NodeFilter.pyc
pulldom.pyc
xmlbuilder.pyc
__init__.pyc
etree
cElementTree.pyc
ElementInclude.pyc
ElementPath.pyc
ElementTree.pyc
__init__.pyc
parsers
expat.pyc
__init__.pyc
sax
expatreader.pyc
handler.pyc
saxutils.pyc
xmlreader.pyc
_exceptions.pyc
__init__.pyc
xmlrpc
client.pyc
server.pyc
__init__.pyc
zipfile
__init__.pyc
__main__.pyc
_path
glob.pyc
__init__.pyc
zoneinfo
_common.pyc
_tzpath.pyc
_zoneinfo.pyc
__init__.pyc
__phello__
spam.pyc
__init__.pyc
ham
eggs.pyc
__init__.pyc
python312._pth
pythonw.exe
[Authenticode]_b9f939a9.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:1033-preview.png
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
select.pyd
[Authenticode]_114b0f0a.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
sqlite3.dll
[Authenticode]_6bdbd6a5.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
unicodedata.pyd
[Authenticode]_b53da177.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
vcruntime140.dll
[Authenticode]_1ccdeaeb.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
fothk
.rdata
.data
.pdata
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
vcruntime140_1.dll
[Authenticode]_4b0c5154.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
winsound.pyd
[Authenticode]_59f58099.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
_asyncio.pyd
[Authenticode]_cb80e8b2.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
_bz2.pyd
[Authenticode]_7f2aea67.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
_ctypes.pyd
[Authenticode]_fcf85860.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
_elementtree.pyd
[Authenticode]_6fc1fe61.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
_hashlib.pyd
[Authenticode]_b9189e79.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
_msi.pyd
[Authenticode]_ce823e1f.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
_multiprocessing.pyd
[Authenticode]_65a52be5.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
_overlapped.pyd
[Authenticode]_30dedfdc.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
_queue.pyd
[Authenticode]_2b6fbb06.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
_socket.pyd
[Authenticode]_b77c1a4c.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
_sqlite3.pyd
[Authenticode]_6e373693.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
_ssl.pyd
[Authenticode]_e6e55205.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
_uuid.pyd
[Authenticode]_672bbaf2.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
_wmi.pyd
[Authenticode]_b360118a.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
_zoneinfo.pyd
[Authenticode]_f19ccb00.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
AppHost
app.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_RCDATA
ID:0003
ID:0
main.py
Lib
Malicious
site-packages
Malicious
81d243bd2c585b0f4821__mypyc.cp312-win_amd64.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0002
ID:1033
pythoncom.py
pywin32.pth
pywin32.version.txt
wmi.py
adodbapi
adodbapi.py
ado_consts.py
apibase.py
is64bit.py
process_connect_string.py
schema_table.py
setup.py
__init__.py
examples
db_print.py
db_table_names.py
xls_read.py
xls_write.py
certifi
cacert.pem
core.py
py.typed
__init__.py
__main__.py
charset_normalizer
api.py
cd.cp312-win_amd64.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
cd.py
constant.py
legacy.py
md.cp312-win_amd64.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
md.py
models.py
utils.py
version.py
__init__.py
__main__.py
cli
__init__.py
__main__.py
Crypto
__init__.py
Cipher
AES.py
ARC2.py
ARC4.py
Blowfish.py
CAST.py
ChaCha20.py
ChaCha20_Poly1305.py
DES.py
DES3.py
PKCS1_OAEP.py
PKCS1_v1_5.py
Salsa20.py
_ARC4.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_chacha20.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_EKSBlowfish.py
_mode_cbc.py
_mode_ccm.py
_mode_cfb.py
_mode_ctr.py
_mode_eax.py
_mode_ecb.py
_mode_gcm.py
_mode_kw.py
_mode_kwp.py
_mode_ocb.py
_mode_ofb.py
_mode_openpgp.py
_mode_siv.py
_pkcs1_decode.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_pkcs1_oaep_decode.py
_raw_aes.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_raw_aesni.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_raw_arc2.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_raw_blowfish.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_raw_cast.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_raw_cbc.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_raw_cfb.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_raw_ctr.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_raw_des.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_raw_des3.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_raw_ecb.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_raw_eksblowfish.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_raw_ocb.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_raw_ofb.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_Salsa20.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
__init__.py
Hash
BLAKE2b.py
BLAKE2s.py
CMAC.py
cSHAKE128.py
cSHAKE256.py
HMAC.py
KangarooTwelve.py
keccak.py
KMAC128.py
KMAC256.py
MD2.py
MD4.py
MD5.py
Poly1305.py
RIPEMD.py
RIPEMD160.py
SHA.py
SHA1.py
SHA224.py
SHA256.py
SHA384.py
SHA3_224.py
SHA3_256.py
SHA3_384.py
SHA3_512.py
SHA512.py
SHAKE128.py
SHAKE256.py
TupleHash128.py
TupleHash256.py
TurboSHAKE128.py
TurboSHAKE256.py
_BLAKE2b.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_BLAKE2s.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_ghash_clmul.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_ghash_portable.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_keccak.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_MD2.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_MD4.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_MD5.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_poly1305.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_RIPEMD160.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_SHA1.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_SHA224.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_SHA256.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_SHA384.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_SHA512.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
__init__.py
IO
PEM.py
PKCS8.py
_PBES.py
__init__.py
Math
Numbers.py
Primality.py
_IntegerBase.py
_IntegerCustom.py
_IntegerGMP.py
_IntegerNative.py
_modexp.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Protocol
DH.py
HPKE.py
KDF.py
SecretSharing.py
_scrypt.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
__init__.py
PublicKey
DSA.py
ECC.py
ElGamal.py
RSA.py
_curve.py
_curve25519.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_curve448.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_ec_ws.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_ed25519.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_ed448.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_edwards.py
_montgomery.py
_nist_ecc.py
_openssh.py
_point.py
__init__.py
Random
random.py
__init__.py
SelfTest
loader.py
st_common.py
__init__.py
__main__.py
Cipher
common.py
test_AES.py
test_ARC2.py
test_ARC4.py
test_Blowfish.py
test_CAST.py
test_CBC.py
test_CCM.py
test_CFB.py
test_ChaCha20.py
test_ChaCha20_Poly1305.py
test_CTR.py
test_DES.py
test_DES3.py
test_EAX.py
test_GCM.py
test_KW.py
test_OCB.py
test_OFB.py
test_OpenPGP.py
test_pkcs1_15.py
test_pkcs1_oaep.py
test_Salsa20.py
test_SIV.py
__init__.py
Hash
common.py
test_BLAKE2.py
test_CMAC.py
test_cSHAKE.py
test_HMAC.py
test_KangarooTwelve.py
test_keccak.py
test_KMAC.py
test_MD2.py
test_MD4.py
test_MD5.py
test_Poly1305.py
test_RIPEMD160.py
test_SHA1.py
test_SHA224.py
test_SHA256.py
test_SHA384.py
test_SHA3_224.py
test_SHA3_256.py
test_SHA3_384.py
test_SHA3_512.py
test_SHA512.py
test_SHAKE.py
test_TupleHash.py
test_TurboSHAKE.py
__init__.py
IO
test_PBES.py
test_PKCS8.py
__init__.py
Math
test_modexp.py
test_modmult.py
test_Numbers.py
test_Primality.py
__init__.py
Protocol
test_ecdh.py
test_HPKE.py
test_KDF.py
test_rfc1751.py
test_SecretSharing.py
__init__.py
PublicKey
test_DSA.py
test_ECC_Curve25519.py
test_ECC_Curve448.py
test_ECC_Ed25519.py
test_ECC_Ed448.py
test_ECC_NIST.py
test_ElGamal.py
test_import_Curve25519.py
test_import_Curve448.py
test_import_DSA.py
test_import_ECC.py
test_import_RSA.py
test_RSA.py
__init__.py
Random
test_random.py
__init__.py
Signature
test_dss.py
test_eddsa.py
test_pkcs1_15.py
test_pss.py
__init__.py
Util
test_asn1.py
test_Counter.py
test_number.py
test_Padding.py
test_rfc1751.py
test_strxor.py
__init__.py
Signature
DSS.py
eddsa.py
pkcs1_15.py
PKCS1_PSS.py
PKCS1_v1_5.py
pss.py
__init__.py
Util
asn1.py
Counter.py
number.py
Padding.py
py3compat.py
RFC1751.py
strxor.py
_cpuid_c.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_cpu_features.py
_file_system.py
_raw_api.py
_strxor.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
__init__.py
idna
cli.py
codec.py
compat.py
core.py
idnadata.py
intranges.py
package_data.py
uts46data.py
__init__.py
__main__.py
PIL
AvifImagePlugin.py
BdfFontFile.py
BlpImagePlugin.py
BmpImagePlugin.py
BufrStubImagePlugin.py
ContainerIO.py
CurImagePlugin.py
DcxImagePlugin.py
DdsImagePlugin.py
EpsImagePlugin.py
ExifTags.py
features.py
FitsImagePlugin.py
FliImagePlugin.py
FontFile.py
FpxImagePlugin.py
FtexImagePlugin.py
GbrImagePlugin.py
GdImageFile.py
GifImagePlugin.py
GimpGradientFile.py
GimpPaletteFile.py
GribStubImagePlugin.py
Hdf5StubImagePlugin.py
IcnsImagePlugin.py
IcoImagePlugin.py
Image.py
ImageChops.py
ImageCms.py
ImageColor.py
ImageDraw.py
ImageDraw2.py
ImageEnhance.py
ImageFile.py
ImageFilter.py
ImageFont.py
ImageGrab.py
ImageMath.py
ImageMode.py
ImageMorph.py
ImageOps.py
ImagePalette.py
ImagePath.py
ImageQt.py
ImageSequence.py
ImageShow.py
ImageStat.py
ImageText.py
ImageTk.py
ImageTransform.py
ImageWin.py
ImImagePlugin.py
ImtImagePlugin.py
IptcImagePlugin.py
Jpeg2KImagePlugin.py
JpegImagePlugin.py
JpegPresets.py
McIdasImagePlugin.py
MicImagePlugin.py
MpegImagePlugin.py
MpoImagePlugin.py
MspImagePlugin.py
PaletteFile.py
PalmImagePlugin.py
PcdImagePlugin.py
PcfFontFile.py
PcxImagePlugin.py
PdfImagePlugin.py
PdfParser.py
PDF @0x00003809
PixarImagePlugin.py
PngImagePlugin.py
PpmImagePlugin.py
PsdImagePlugin.py
PSDraw.py
QoiImagePlugin.py
report.py
SgiImagePlugin.py
SpiderImagePlugin.py
SunImagePlugin.py
TarIO.py
TgaImagePlugin.py
TiffImagePlugin.py
TiffTags.py
WalImageFile.py
WebPImagePlugin.py
WmfImagePlugin.py
XbmImagePlugin.py
XpmImagePlugin.py
XVThumbImagePlugin.py
_binary.py
_deprecate.py
_imaging.cp312-win_amd64.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_imagingtk.cp312-win_amd64.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_tkinter_finder.py
_typing.py
_util.py
_version.py
__init__.py
__main__.py
psutil
_common.py
_ntuples.py
_psaix.py
_psbsd.py
_pslinux.py
_psosx.py
_psposix.py
_pssunos.py
_psutil_windows.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
_pswindows.py
__init__.py
pywin32_system32
pythoncom312.dll
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
pywintypes312.dll
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
requests
adapters.py
api.py
auth.py
certs.py
compat.py
cookies.py
exceptions.py
help.py
hooks.py
models.py
packages.py
sessions.py
status_codes.py
structures.py
utils.py
_internal_utils.py
_types.py
__init__.py
__version__.py
urllib3
connection.py
connectionpool.py
exceptions.py
fields.py
filepost.py
poolmanager.py
py.typed
response.py
_base_connection.py
_collections.py
_request_methods.py
_version.py
__init__.py
contrib
pyopenssl.py
socks.py
emscripten
connection.py
emscripten_fetch_worker.js
fetch.py
request.py
response.py
__init__.py
http2
connection.py
probe.py
__init__.py
util
connection.py
proxy.py
request.py
response.py
retry.py
ssltransport.py
ssl_.py
ssl_match_hostname.py
timeout.py
url.py
util.py
wait.py
__init__.py
vdf
vdict.py
__init__.py
win32
Malicious
mmapfile.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
odbc.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
perfmon.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
perfmondata.dll
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_MESSAGETABLE
ID:0001
ID:1033
pythonservice.exe
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_STRING
ID:007E
ID:1033
servicemanager.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_MESSAGETABLE
ID:0001
ID:1033
timer.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
win32api.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
win32clipboard.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
win32console.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
win32cred.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
win32crypt.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
win32event.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
win32evtlog.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_MESSAGETABLE
ID:0001
ID:1033
win32file.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
win32gui.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
win32help.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
win32inet.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
win32job.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
win32lz.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
win32net.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
win32pdh.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
win32pipe.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
win32print.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
win32process.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
win32profile.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
win32ras.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
win32security.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
win32service.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
win32trace.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
win32transaction.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
win32ts.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
win32wnet.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
winxpgui.py
_win32sysloader.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
_winxptheme.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
Demos
Malicious
BackupRead_BackupWrite.py
BackupSeek_streamheaders.py
CopyFileEx.py
CreateFileTransacted_MiniVersion.py
desktopmanager.py
eventLogDemo.py
EvtFormatMessage.py
EvtSubscribe_pull.py
EvtSubscribe_push.py
FileSecurityTest.py
getfilever.py
GetSaveFileName.py
mmapfile_demo.py
NetValidatePasswordPolicy.py
OpenEncryptedFileRaw.py
print_desktop.py
rastest.py
RegCreateKeyTransacted.py
RegRestoreKey.py
SystemParametersInfo.py
timer_demo.py
Malicious
win32clipboardDemo.py
win32clipboard_bitmapdemo.py
win32comport_demo.py
win32console_demo.py
win32cred_demo.py
win32fileDemo.py
win32gui_demo.py
win32gui_devicenotify.py
win32gui_dialog.py
win32gui_menu.py
win32gui_taskbar.py
win32netdemo.py
win32rcparser_demo.py
win32servicedemo.py
win32ts_logoff_disconnected.py
winprocess.py
c_extension
setup.py
dde
ddeclient.py
ddeserver.py
images
frowny.bmp
smiley.bmp
pipes
cat.py
runproc.py
security
account_rights.py
explicit_entries.py
GetTokenInformation.py
get_policy_info.py
list_rights.py
localized_names.py
lsaregevent.py
lsastore.py
query_information.py
regsave_sa.py
regsecurity.py
sa_inherit.py
security_enums.py
setkernelobjectsecurity.py
setnamedsecurityinfo.py
setsecurityinfo.py
setuserobjectsecurity.py
set_file_audit.py
set_file_owner.py
set_policy_info.py
sspi
fetch_url.py
simple_auth.py
socket_server.py
validate_password.py
service
nativePipeTestService.py
pipeTestService.py
pipeTestServiceClient.py
serviceEvents.py
win32wnet
testwnet.py
winnetwk.py
lib
afxres.py
commctrl.py
mmsystem.py
netbios.py
ntsecuritycon.py
pywin32_bootstrap.py
pywin32_testutil.py
pywintypes.py
rasutil.py
regcheck.py
regutil.py
sspi.py
sspicon.py
win2kras.py
win32con.py
win32cryptcon.py
win32evtlogutil.py
win32gui_struct.py
win32inetcon.py
win32netcon.py
win32pdhquery.py
win32pdhutil.py
win32rcparser.py
win32serviceutil.py
win32timezone.py
win32traceutil.py
win32verstamp.py
winerror.py
winioctlcon.py
winnt.py
winperf.py
winxptheme.py
_win32verstamp_pywin32ctypes.py
libs
pywintypes.lib
scripts
backupEventLog.py
ControlService.py
h2py.py
killProcName.py
pywin32_postinstall.py
pywin32_testall.py
rasutil.py
regsetup.py
setup_d.py
VersionStamp
BrandProject.py
bulkstamp.py
vssutil.py
win32com
Malicious
olectl.py
storagecon.py
universal.py
util.py
__init__.py
client
build.py
CLSIDToClass.py
combrowse.py
connect.py
dynamic.py
gencache.py
genpy.py
makepy.py
selecttlb.py
tlbrowse.py
util.py
__init__.py
demos
connect.py
dump_clipboard.py
eventsApartmentThreaded.py
eventsFreeThreaded.py
excelAddin.py
excelRTDServer.py
iebutton.py
ietoolbar.py
outlookAddin.py
trybag.py
HTML
COM_Records.html
docindex.html
GeneratedSupport.html
index.html
misc.html
package.html
PythonCOM.html
QuickStartClientCom.html
QuickStartServerCom.html
variant.html
image
blank.gif
blank.gif-preview.png
BTN_HomePage.gif
BTN_HomePage.gif-preview.png
BTN_ManualTop.gif
BTN_ManualTop.gif-preview.png
BTN_NextPage.gif
BTN_NextPage.gif-preview.png
BTN_PrevPage.gif
BTN_PrevPage.gif-preview.png
pycom_blowing.gif
pycom_blowing.gif-preview.png
pythoncom.gif
pythoncom.gif-preview.png
www_icon.gif
www_icon.gif-preview.png
libs
axscript.lib
pythoncom.lib
makegw
makegw.py
makegwenum.py
makegwparse.py
__init__.py
server
connect.py
dispatcher.py
exception.py
factory.py
localserver.py
policy.py
register.py
util.py
__init__.py
servers
Malicious
dictionary.py
Malicious
interp.py
Malicious
perfmon.py
Malicious
PythonTools.py
test_pycomtest.py
win32comext
adsi
adsi.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
adsicon.py
__init__.py
demos
objectPicker.py
scp.py
search.py
test.py
axcontrol
axcontrol.pyd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
__init__.py
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 15 STICH kept: 7secondary ignored: 8
bin 6img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
7 / 7
Path arc:zip>scr:vbs~T1027~T1059.005
Shape arc:zip>scr:vbs
malicious 2 nodes
Path arc:zip>scr:vbs~T1059.005
Shape arc:zip>scr:vbs
technique2 nodes
Trace COM ordonnée UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙