Malicious
Malicious

MS Office Document
MD5: b157cc8493fe006bccefaca83a353311
Size: 17.16 MB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Microsoft Office Document
Size
17.16 MB · 17,162,240 B
First seen
2025-12-21 22:01 · 10 months ago
Last seen
2025-12-21 22:01 · 10 months ago
Last analysis
2025-12-21 22:15 · 10 months ago
Hashes
MD5 b157cc8493fe006bccefaca83a353311 Sha1 aad3a95d8c73a6107226b859d829bbaf95983f79 Sha256 3f650e17436767520c57a268135de7a4912f340b895650ed505325047cf08268 Sha384 839fdd8687d7addaff36afa408c8c82b617c47da88c2874323c4ce7f399e881b6caab1b4b1af1d6e5f739bb7c2baf4e1 Sha512 7bb0eeac6a8d9fd538637bf7d7ff602ed20d8af773eda882eaa044deecc2fc751ca5ca4664bfc00aa6cb7f0ee027251ff7bbd53a5a2f98745a00d1d24fe11373 SSDeep 393216:GHX2K5qWIVORi1se3sJhHGAk0n0COLpuyThNDy9:GHPkSi1se8DGX00COLpRND TLSH EB0733D29B8DFFB7E1BE8435A5FAC6911545ED202320C88BB7683E5428322F3B359715
3 malicious · 1488 files
OFFb157cc8493fe006bccefaca83a353311
BINRoot Entry
BIN䡀䆒䑲
BIN䡀䈖䌧䠤
BIN䡀䌋䄱䜵
BIN䡀㬿䏲䐸䖱
BIN䡀㽿䅤䈯䠶
BIN䡀䈏䗤䕸䠨
BIN䡀䈛䌪䗶䜵
BIN䡀䓞䕪䇤䠨
BIN䡀䕙䓲䕨䜷
BIN䡀䌍䈵䗦䕲䠼
BIN䡀䒌䓰䑲䑨䠷
BIN䡀㼿䕷䑬㭪䗤䠤
BIN䡀㼿䕷䑬㹪䒲䠯
BIN䡀㿿䏤䇬䗤䒬䠱
BIN䡀䘌䗶䐲䆊䌷䑲
BIN䆒䑲㹾䒵䘧䗦䆒䑲
BIN䡀䄕䑸䋦䒌䇱䗬䒬䠱
BIN䡀䇊䌰㾱㼒䔨䈸䆱䠨
BIN䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
BIN䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
BIN䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
BIN䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
BIN䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
EXE䌋䄱䜵䅾䞽䘌䗶䐲䆊䌷䑲䏍䠯
Structure
BINResources
BINRT_MANIFEST
BINID:0002
BINID:1033
BIN䌋䄱䜵䅾䞽䕠䓤䈳㼧䗨䓸䕙䊲䄵䠰
EXE_zoneinfo.pyd
Structure
P7B[Authenticode]_395a1c8a.p7b
BINDigitalSignature
BINSummaryInformation
BINMsiDigitalSignatureEx
BINDocumentSummaryInformation
PYcerts.py
DLLClosedXML.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
DLLDocumentFormat.OpenXml.dll
Structure
P7B[Authenticode]_507d4455.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BIN.Net Resources
BINDocumentFormat.OpenXml.Resources.ExceptionMessages.resources
BINDocumentFormat.OpenXml.Validation.ValidationResources.resources
RTFEULA.rtf
DLLExcelNumberFormat.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
DLLFastMember.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
DLLFastMember.Signed.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
DLLlibcrypto-3.dll
Structure
P7B[Authenticode]_af72d1ae.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLlibffi-8.dll
Structure
P7B[Authenticode]_b7239277.p7b
DLLlibssl-3.dll
Structure
P7B[Authenticode]_28c3d423.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
TXTLICENSE.txt
PS1lnk.ps1
PS1[Deobfuscated PS]
BINlog4net.config
DLLlog4net.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
DLLMicrosoft.ApplicationInsights.dll
Structure
P7B[Authenticode]_ad6dffb6.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:0
DLLNewtonsoft.Json.dll
Structure
P7B[Authenticode]_5366eba8.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:0
EXEpyexpat.pyd
Structure
P7B[Authenticode]_919abb8b.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
CATpython.cat
EXEpython.exe
Structure
P7B[Authenticode]_72697581.p7b
BINResources
BINRT_ICON
BINID:0001
IMGID:1033
IMGID:1033-preview.png
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINID:0006
BINID:1033
BINID:0007
IMGID:1033
IMGID:1033-preview.png
BINID:0008
BINID:1033
BINID:0009
BINID:1033
BINID:000A
BINID:1033
BINID:000B
BINID:1033
BINID:000C
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0001
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
DLLpython3.dll
Structure
P7B[Authenticode]_644085e8.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLpython313.dll
Structure
P7B[Authenticode]_06c034bb.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
ZIPpython313.zip
PYCabc.pyc
PYCantigravity.pyc
PYCargparse.pyc
PYCast.pyc
PYCbase64.pyc
PYCbdb.pyc
PYCbisect.pyc
PYCbz2.pyc
PYCcalendar.pyc
PYCcmd.pyc
PYCcode.pyc
PYCcodecs.pyc
PYCcodeop.pyc
PYCcolorsys.pyc
PYCcompileall.pyc
PYCconfigparser.pyc
PYCcontextlib.pyc
PYCcontextvars.pyc
PYCcopy.pyc
PYCcopyreg.pyc
PYCcProfile.pyc
PYCcsv.pyc
PYCdataclasses.pyc
PYCdatetime.pyc
PYCdecimal.pyc
PYCdifflib.pyc
PYCdis.pyc
PYCdoctest.pyc
PYCenum.pyc
PYCfilecmp.pyc
PYCfileinput.pyc
PYCfnmatch.pyc
PYCfractions.pyc
PYCftplib.pyc
PYCfunctools.pyc
PYCgenericpath.pyc
PYCgetopt.pyc
PYCgetpass.pyc
PYCgettext.pyc
PYCglob.pyc
PYCgraphlib.pyc
PYCgzip.pyc
PYChashlib.pyc
PYCheapq.pyc
PYChmac.pyc
PYCimaplib.pyc
PYCinspect.pyc
PYCio.pyc
PYCipaddress.pyc
PYCkeyword.pyc
PYClinecache.pyc
PYClocale.pyc
PYClzma.pyc
PYCmailbox.pyc
PYCmimetypes.pyc
PYCmodulefinder.pyc
PYCnetrc.pyc
PYCntpath.pyc
PYCnturl2path.pyc
PYCnumbers.pyc
PYCopcode.pyc
PYCoperator.pyc
PYCoptparse.pyc
PYCos.pyc
PYCpdb.pyc
PYCpickle.pyc
PYCpickletools.pyc
PYCpkgutil.pyc
PYCplatform.pyc
PYCplistlib.pyc
PYCpoplib.pyc
PYCposixpath.pyc
PYCpprint.pyc
PYCprofile.pyc
PYCpstats.pyc
PYCpty.pyc
PYCpyclbr.pyc
PYCpydoc.pyc
PYCpy_compile.pyc
PYCqueue.pyc
PYCquopri.pyc
PYCrandom.pyc
PYCreprlib.pyc
PYCrlcompleter.pyc
PYCrunpy.pyc
PYCsched.pyc
PYCsecrets.pyc
PYCselectors.pyc
PYCshelve.pyc
PYCshlex.pyc
PYCshutil.pyc
PYCsignal.pyc
PYCsite.pyc
PYCsmtplib.pyc
PYCsocket.pyc
PYCsocketserver.pyc
PYCsre_compile.pyc
PYCsre_constants.pyc
PYCsre_parse.pyc
PYCssl.pyc
PYCstat.pyc
PYCstatistics.pyc
PYCstring.pyc
PYCstringprep.pyc
PYCstruct.pyc
PYCsubprocess.pyc
PYCsymtable.pyc
PYCtabnanny.pyc
PYCtarfile.pyc
PYCtempfile.pyc
PYCtextwrap.pyc
PYCthis.pyc
PYCthreading.pyc
PYCtimeit.pyc
PYCtoken.pyc
PYCtokenize.pyc
PYCtrace.pyc
PYCtraceback.pyc
PYCtracemalloc.pyc
PYCtty.pyc
PYCtypes.pyc
PYCtyping.pyc
PYCuuid.pyc
PYCwarnings.pyc
PYCwave.pyc
PYCweakref.pyc
PYCwebbrowser.pyc
PYCzipapp.pyc
PYCzipimport.pyc
PYC_aix_support.pyc
PYC_android_support.pyc
PYC_collections_abc.pyc
PYC_colorize.pyc
PYC_compat_pickle.pyc
PYC_compression.pyc
PYC_ios_support.pyc
PYC_markupbase.pyc
PYC_opcode_metadata.pyc
PYC_osx_support.pyc
PYC_pydatetime.pyc
PYC_pydecimal.pyc
PYC_pyio.pyc
PYC_pylong.pyc
PYC_py_abc.pyc
PYC_sitebuiltins.pyc
PYC_strptime.pyc
PYC_threading_local.pyc
PYC_weakrefset.pyc
PYC__future__.pyc
PYC__hello__.pyc
BINasyncio
PYCbase_events.pyc
PYCbase_futures.pyc
PYCbase_subprocess.pyc
PYCbase_tasks.pyc
PYCconstants.pyc
PYCcoroutines.pyc
PYCevents.pyc
PYCexceptions.pyc
PYCformat_helpers.pyc
PYCfutures.pyc
PYClocks.pyc
PYClog.pyc
PYCmixins.pyc
PYCproactor_events.pyc
PYCprotocols.pyc
PYCqueues.pyc
PYCrunners.pyc
PYCselector_events.pyc
PYCsslproto.pyc
PYCstaggered.pyc
PYCstreams.pyc
PYCsubprocess.pyc
PYCtaskgroups.pyc
PYCtasks.pyc
PYCthreads.pyc
PYCtimeouts.pyc
PYCtransports.pyc
PYCtrsock.pyc
PYCunix_events.pyc
PYCwindows_events.pyc
PYCwindows_utils.pyc
PYC__init__.pyc
PYC__main__.pyc
BINcollections
PYCabc.pyc
PYC__init__.pyc
BINconcurrent
PYC__init__.pyc
BINfutures
PYCprocess.pyc
PYCthread.pyc
PYC_base.pyc
PYC__init__.pyc
BINctypes
PYCutil.pyc
PYCwintypes.pyc
PYC_aix.pyc
PYC_endian.pyc
PYC__init__.pyc
BINmacholib
PYCdyld.pyc
PYCdylib.pyc
BINfetch_macholib
BATfetch_macholib.bat
PYCframework.pyc
BINREADME.ctypes
PYC__init__.pyc
BINcurses
PYCascii.pyc
PYChas_key.pyc
PYCpanel.pyc
PYCtextpad.pyc
PYC__init__.pyc
BINdbm
PYCdumb.pyc
PYCgnu.pyc
PYCndbm.pyc
PYCsqlite3.pyc
PYC__init__.pyc
BINemail
RSTarchitecture.rst
PYCbase64mime.pyc
PYCcharset.pyc
PYCcontentmanager.pyc
PYCencoders.pyc
PYCerrors.pyc
PYCfeedparser.pyc
PYCgenerator.pyc
PYCheader.pyc
PYCheaderregistry.pyc
PYCiterators.pyc
PYCmessage.pyc
PYCparser.pyc
PYCpolicy.pyc
PYCquoprimime.pyc
PYCutils.pyc
PYC_encoded_words.pyc
PYC_header_value_parser.pyc
PYC_parseaddr.pyc
PYC_policybase.pyc
PYC__init__.pyc
BINmime
PYCapplication.pyc
PYCaudio.pyc
PYCbase.pyc
PYCimage.pyc
PYCmessage.pyc
PYCmultipart.pyc
PYCnonmultipart.pyc
PYCtext.pyc
PYC__init__.pyc
BINencodings
PYCaliases.pyc
PYCascii.pyc
PYCbase64_codec.pyc
PYCbig5.pyc
PYCbig5hkscs.pyc
PYCbz2_codec.pyc
PYCcharmap.pyc
PYCcp037.pyc
PYCcp1006.pyc
PYCcp1026.pyc
PYCcp1125.pyc
PYCcp1140.pyc
PYCcp1250.pyc
PYCcp1251.pyc
PYCcp1252.pyc
PYCcp1253.pyc
PYCcp1254.pyc
PYCcp1255.pyc
PYCcp1256.pyc
PYCcp1257.pyc
PYCcp1258.pyc
PYCcp273.pyc
PYCcp424.pyc
PYCcp437.pyc
PYCcp500.pyc
PYCcp720.pyc
PYCcp737.pyc
PYCcp775.pyc
PYCcp850.pyc
PYCcp852.pyc
PYCcp855.pyc
PYCcp856.pyc
PYCcp857.pyc
PYCcp858.pyc
PYCcp860.pyc
PYCcp861.pyc
PYCcp862.pyc
PYCcp863.pyc
PYCcp864.pyc
PYCcp865.pyc
PYCcp866.pyc
PYCcp869.pyc
PYCcp874.pyc
PYCcp875.pyc
PYCcp932.pyc
PYCcp949.pyc
PYCcp950.pyc
PYCeuc_jisx0213.pyc
PYCeuc_jis_2004.pyc
PYCeuc_jp.pyc
PYCeuc_kr.pyc
PYCgb18030.pyc
PYCgb2312.pyc
PYCgbk.pyc
PYChex_codec.pyc
PYChp_roman8.pyc
PYChz.pyc
PYCidna.pyc
PYCiso2022_jp.pyc
PYCiso2022_jp_1.pyc
PYCiso2022_jp_2.pyc
PYCiso2022_jp_2004.pyc
PYCiso2022_jp_3.pyc
PYCiso2022_jp_ext.pyc
PYCiso2022_kr.pyc
PYCiso8859_1.pyc
PYCiso8859_10.pyc
PYCiso8859_11.pyc
PYCiso8859_13.pyc
PYCiso8859_14.pyc
PYCiso8859_15.pyc
PYCiso8859_16.pyc
PYCiso8859_2.pyc
PYCiso8859_3.pyc
PYCiso8859_4.pyc
PYCiso8859_5.pyc
PYCiso8859_6.pyc
PYCiso8859_7.pyc
PYCiso8859_8.pyc
PYCiso8859_9.pyc
PYCjohab.pyc
PYCkoi8_r.pyc
PYCkoi8_t.pyc
PYCkoi8_u.pyc
PYCkz1048.pyc
PYClatin_1.pyc
PYCmac_arabic.pyc
PYCmac_croatian.pyc
PYCmac_cyrillic.pyc
PYCmac_farsi.pyc
PYCmac_greek.pyc
PYCmac_iceland.pyc
PYCmac_latin2.pyc
PYCmac_roman.pyc
PYCmac_romanian.pyc
PYCmac_turkish.pyc
PYCmbcs.pyc
PYCoem.pyc
PYCpalmos.pyc
PYCptcp154.pyc
PYCpunycode.pyc
PYCquopri_codec.pyc
PYCraw_unicode_escape.pyc
PYCrot_13.pyc
PYCshift_jis.pyc
PYCshift_jisx0213.pyc
PYCshift_jis_2004.pyc
PYCtis_620.pyc
PYCundefined.pyc
PYCunicode_escape.pyc
PYCutf_16.pyc
PYCutf_16_be.pyc
PYCutf_16_le.pyc
PYCutf_32.pyc
PYCutf_32_be.pyc
PYCutf_32_le.pyc
PYCutf_7.pyc
PYCutf_8.pyc
PYCutf_8_sig.pyc
PYCuu_codec.pyc
PYCzlib_codec.pyc
PYC__init__.pyc
BINhtml
PYCentities.pyc
PYCparser.pyc
PYC__init__.pyc
BINhttp
PYCclient.pyc
PYCcookiejar.pyc
HTMcookies.pyc
PYCserver.pyc
PYC__init__.pyc
BINimportlib
PYCabc.pyc
PYCmachinery.pyc
PYCreaders.pyc
PYCsimple.pyc
PYCutil.pyc
PYC_abc.pyc
PYC_bootstrap.pyc
PYC_bootstrap_external.pyc
PYC__init__.pyc
BINmetadata
PYCdiagnose.pyc
PYC_adapters.pyc
PYC_collections.pyc
PYC_functools.pyc
PYC_itertools.pyc
PYC_meta.pyc
PYC_text.pyc
PYC__init__.pyc
BINresources
PYCabc.pyc
PYCreaders.pyc
PYCsimple.pyc
PYC_adapters.pyc
PYC_common.pyc
PYC_functional.pyc
PYC_itertools.pyc
PYC__init__.pyc
BINjson
PYCdecoder.pyc
PYCencoder.pyc
PYCscanner.pyc
PYCtool.pyc
PYC__init__.pyc
BINlogging
PYCconfig.pyc
PYChandlers.pyc
PYC__init__.pyc
BINmultiprocessing
PYCconnection.pyc
PYCcontext.pyc
PYCforkserver.pyc
PYCheap.pyc
PYCmanagers.pyc
PYCpool.pyc
PYCpopen_fork.pyc
PYCpopen_forkserver.pyc
PYCpopen_spawn_posix.pyc
PYCpopen_spawn_win32.pyc
PYCprocess.pyc
PYCqueues.pyc
PYCreduction.pyc
PYCresource_sharer.pyc
PYCresource_tracker.pyc
PYCsharedctypes.pyc
PYCshared_memory.pyc
PYCspawn.pyc
PYCsynchronize.pyc
PYCutil.pyc
PYC__init__.pyc
BINdummy
PYCconnection.pyc
PYC__init__.pyc
BINpathlib
PYC_abc.pyc
PYC_local.pyc
PYC__init__.pyc
BINpydoc_data
PYCtopics.pyc
CSS_pydoc.css
PYC__init__.pyc
BINre
PYC_casefix.pyc
PYC_compiler.pyc
PYC_constants.pyc
PYC_parser.pyc
PYC__init__.pyc
BINsite-packages
TXTREADME.txt
BINsqlite3
PYCdbapi2.pyc
PYCdump.pyc
PYC__init__.pyc
PYC__main__.pyc
BINsysconfig
PYC__init__.pyc
PYC__main__.pyc
BINtomllib
PYC_parser.pyc
PYC_re.pyc
PYC_types.pyc
PYC__init__.pyc
BINunittest
PYCasync_case.pyc
PYCcase.pyc
PYCloader.pyc
PYCmain.pyc
PYCmock.pyc
PYCresult.pyc
PYCrunner.pyc
PYCsignals.pyc
PYCsuite.pyc
PYCutil.pyc
PYC_log.pyc
PYC__init__.pyc
PYC__main__.pyc
BINurllib
PYCerror.pyc
PYCparse.pyc
PYCrequest.pyc
PYCresponse.pyc
PYCrobotparser.pyc
PYC__init__.pyc
BINwsgiref
PYChandlers.pyc
PYCheaders.pyc
PYCsimple_server.pyc
PYCtypes.pyc
PYCutil.pyc
PYCvalidate.pyc
PYC__init__.pyc
BINxml
PYC__init__.pyc
BINdom
PYCdomreg.pyc
PYCexpatbuilder.pyc
PYCminicompat.pyc
PYCminidom.pyc
PYCNodeFilter.pyc
PYCpulldom.pyc
PYCxmlbuilder.pyc
PYC__init__.pyc
BINetree
PYCcElementTree.pyc
PYCElementInclude.pyc
PYCElementPath.pyc
PYCElementTree.pyc
PYC__init__.pyc
BINparsers
PYCexpat.pyc
PYC__init__.pyc
BINsax
PYCexpatreader.pyc
PYChandler.pyc
PYCsaxutils.pyc
PYCxmlreader.pyc
PYC_exceptions.pyc
PYC__init__.pyc
BINxmlrpc
PYCclient.pyc
PYCserver.pyc
PYC__init__.pyc
BINzipfile
PYC__init__.pyc
PYC__main__.pyc
BIN_path
PYCglob.pyc
PYC__init__.pyc
BINzoneinfo
PYC_common.pyc
PYC_tzpath.pyc
PYC_zoneinfo.pyc
PYC__init__.pyc
BIN_pyrepl
PYCcommands.pyc
PYCcompleting_reader.pyc
PYCconsole.pyc
PYCcurses.pyc
PYCfancy_termios.pyc
PYChistorical_reader.pyc
PYCinput.pyc
PYCkeymap.pyc
PYCmain.pyc
INImypy.ini
PYCpager.pyc
PYCreader.pyc
PYCreadline.pyc
PYCsimple_interact.pyc
PYCtrace.pyc
PYCtypes.pyc
PYCunix_console.pyc
PYCunix_eventqueue.pyc
PYCutils.pyc
PYCwindows_console.pyc
PYC_minimal_curses.pyc
PYC_threading_handler.pyc
PYC__init__.pyc
PYC__main__.pyc
BIN__phello__
PYCspam.pyc
PYC__init__.pyc
BINham
PYCeggs.pyc
PYC__init__.pyc
BINcertifi
PEMcacert.pem
PYcore.py
BINpy.typed
PY__init__.py
PY__main__.py
BINidna
PYcodec.py
PYcompat.py
PYcore.py
PYidnadata.py
PYintranges.py
PYpackage_data.py
PYuts46data.py
PY__init__.py
BINrequests
PYadapters.py
PYapi.py
PYauth.py
PYcerts.py
PYcompat.py
PYcookies.py
PYexceptions.py
PYhelp.py
PYhooks.py
PYmodels.py
PYpackages.py
PYsessions.py
PYstatus_codes.py
PYstructures.py
PYutils.py
PY_internal_utils.py
PY__init__.py
PY__version__.py
BINurllib3
PYconnection.py
PYconnectionpool.py
BINcontrib
BINemscripten
PYconnection.py
JSemscripten_fetch_worker.js
PYfetch.py
PYrequest.py
PYresponse.py
PY__init__.py
BIN__pycache__
PYCconnection.cpython-313.pyc
PYCfetch.cpython-313.pyc
PYCrequest.cpython-313.pyc
PYCresponse.cpython-313.pyc
PYC__init__.cpython-313.pyc
PYpyopenssl.py
PYsocks.py
BIN__pycache__
PYCpyopenssl.cpython-313.pyc
PYCsocks.cpython-310.pyc
PYCsocks.cpython-313.pyc
PYC__init__.cpython-310.pyc
PYC__init__.cpython-313.pyc
PYexceptions.py
PYfields.py
PYfilepost.py
BINhttp2
PYconnection.py
PYprobe.py
PY__init__.py
BIN__pycache__
PYCconnection.cpython-313.pyc
PYCprobe.cpython-310.pyc
PYCprobe.cpython-313.pyc
PYC__init__.cpython-310.pyc
PYC__init__.cpython-313.pyc
PYpoolmanager.py
BINpy.typed
PYresponse.py
BINutil
PYconnection.py
PYproxy.py
PYrequest.py
PYresponse.py
PYretry.py
PYssltransport.py
PYssl_.py
PYssl_match_hostname.py
PYtimeout.py
PYurl.py
PYutil.py
PYwait.py
PY__init__.py
BIN__pycache__
PYCconnection.cpython-310.pyc
PYCconnection.cpython-313.pyc
PYCproxy.cpython-310.pyc
PYCproxy.cpython-313.pyc
PYCrequest.cpython-310.pyc
PYCrequest.cpython-313.pyc
PYCresponse.cpython-310.pyc
PYCresponse.cpython-313.pyc
PYCretry.cpython-310.pyc
PYCretry.cpython-313.pyc
PYCssltransport.cpython-310.pyc
PYCssltransport.cpython-313.pyc
PYCssl_.cpython-310.pyc
PYCssl_.cpython-313.pyc
PYCssl_match_hostname.cpython-310.pyc
PYCssl_match_hostname.cpython-313.pyc
PYCtimeout.cpython-310.pyc
PYCtimeout.cpython-313.pyc
PYCurl.cpython-310.pyc
PYCurl.cpython-313.pyc
PYCutil.cpython-310.pyc
PYCutil.cpython-313.pyc
PYCwait.cpython-310.pyc
PYCwait.cpython-313.pyc
PYC__init__.cpython-310.pyc
PYC__init__.cpython-313.pyc
PY_base_connection.py
PY_collections.py
PY_request_methods.py
PY_version.py
PY__init__.py
_PTHpython313._pth
EXEpythonw.exe
Structure
P7B[Authenticode]_44fa3521.p7b
BINResources
BINRT_ICON
BINID:0001
IMGID:1033
IMGID:1033-preview.png
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINID:0006
BINID:1033
BINID:0007
IMGID:1033
IMGID:1033-preview.png
BINID:0008
BINID:1033
BINID:0009
BINID:1033
BINID:000A
BINID:1033
BINID:000B
BINID:1033
BINID:000C
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0001
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
EXERVTools.exe
Structure
P7B[Authenticode]_643cbc10.p7b
BINResources
BINRT_ICON
BINID:0001
BINID:0
BINRT_GROUP_CURSOR4
BINID:7F00
BINID:0
BINRT_VERSION
BINID:0001
BINID:0
BINRT_MANIFEST
BINID:0001
BINID:0
BIN.Net Resources
BINRVTools.AboutBox.resources
ICON$this.Icon
BINRVTools.FMain.resources
BINDatastoreToolStripMenuItem.Image
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINStatusServer.Image
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINStatusUsername.Image
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINStatusVCFullname.Image
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINaboutToolStripMenuItem.Image
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINexitToolStripMenuItem.Image
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINRVTools.FPreferences.resources
BINRVTools.FWait.resources
ICON$this.Icon
BIN[NBF]root.IconData
BINRVTools.Properties.Resources.resources
BINAcrobat
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINAdobePDF
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINHealth_Check
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINHealth_Properties
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINPortgroup
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINPreferences
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINapplication_go
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINarrow_refresh
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINcluster
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINconsole
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINcsv
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINdrive
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINdrive_magnify
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINemail
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINexcel
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINexport
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINfilter
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINlicense
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINmemory
BINpartition
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINpartition1
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINproc
BINresourcePool
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINrvtools_16x16pxpng
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINrvtools_32x32px
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINrvtools_64x64
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINserver_link
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINsnapshot
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINtwitter
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINvCD
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINvCPU
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINvDatastore
IMG[NBF]root.Data
BINvHost
BINvInfo
BINvMemory
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINvNic
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINvSwitch
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINvTools
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINvUSB1
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINworld_go
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINx-logo-black
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINRVTools.exe.config
PDFRVTools.pdf
BINText (Preview)
TXTPage #1
TXTPage #2
TXTPage #3
TXTPage #4
TXTPage #5
TXTPage #6
TXTPage #7
TXTPage #8
TXTPage #9
TXTPage #10
TXTPage #11
TXTPage #12
TXTPage #13
TXTPage #14
TXTPage #15
TXTPage #16
TXTPage #17
TXTPage #18
TXTPage #19
TXTPage #20
TXTPage #21
TXTPage #22
TXTPage #23
TXTPage #24
TXTPage #25
TXTPage #26
TXTPage #27
TXTPage #28
TXTPage #29
TXTPage #30
TXTPage #31
TXTPage #32
TXTPage #33
TXTPage #34
TXTPage #35
TXTPage #36
TXTPage #37
TXTPage #38
TXTPage #39
TXTPage #40
TXTPage #41
TXTPage #42
TXTPage #43
TXTPage #44
TXTPage #45
TXTPage #46
TXTPage #47
TXTPage #48
TXTPage #49
TXTPage #50
TXTPage #51
TXTPage #52
TXTPage #53
TXTPage #54
TXTPage #55
TXTPage #56
TXTPage #57
TXTPage #58
TXTPage #59
TXTPage #60
TXTPage #61
TXTPage #62
TXTPage #63
TXTPage #64
TXTPage #65
TXTPage #66
TXTPage #67
TXTPage #68
TXTPage #69
TXTPage #70
TXTPage #71
TXTPage #72
TXTPage #73
TXTPage #74
TXTPage #75
TXTPage #76
TXTPage #77
TXTPage #78
TXTPage #79
TXTPage #80
TXTPage #81
TXTPage #82
TXTPage #83
TXTPage #84
TXTPage #85
TXTPage #86
TXTPage #87
TXTPage #88
TXTPage #89
TXTPage #90
TXTPage #91
TXTPage #92
TXTPage #93
TXTPage #94
TXTPage #95
TXTPage #96
TXTPage #97
TXTPage #98
TXTPage #99
TXTPage #100
TXTPage #101
TXTPage #102
TXTPage #103
TXTPage #104
TXTPage #105
TXTPage #106
TXTPage #107
TXTPage #108
TXTPage #109
TXTPage #110
TXTPage #111
TXTPage #112
TXTPage #113
TXTPage #114
TXTPage #115
TXTPage #116
TXTPage #117
TXTPage #118
TXTPage #119
TXTPage #120
TXTPage #121
TXTPage #122
TXTPage #123
TXTPage #124
TXTPage #125
TXTPage #126
TXTPage #127
TXTPage #128
TXTPage #129
TXTPage #130
TXTPage #131
TXTPage #132
TXTPage #133
TXTPage #134
TXTPage #135
TXTPage #136
TXTPage #137
TXTPage #138
TXTPage #139
TXTPage #140
TXTPage #141
TXTPage #142
TXTPage #143
TXTPage #144
BIN#Stream {7777}
BIN#Stream {7781}
BIN#Stream {7785}
BIN#Stream {18}
BIN#Stream {17}
BIN#Stream {5}
BIN#Stream {7788}
BIN#Stream {7790}
BIN#Stream {7780}
BIN#Stream {282}
BIN#Stream {289}
BIN#Stream {288}
BIN#Stream {312}
BIN#Stream {311}
BIN#Stream {317}
BIN#Stream {316}
BIN#Stream {322}
BIN#Stream {321}
BIN#Stream {338}
BIN#Stream {337}
BIN#Stream {342}
BIN#Stream {341}
BIN#Stream {349}
BIN#Stream {348}
BIN#Stream {353}
BIN#Stream {352}
BIN#Stream {357}
BIN#Stream {356}
BIN#Stream {7798}
BIN#Stream {361}
BIN#Stream {360}
BIN#Stream {7792}
BIN#Stream {7791}
BIN#Stream {374}
BIN#Stream {373}
BIN#Stream {377}
BIN#Stream {378}
BIN#Stream {376}
BIN#Stream {386}
BIN#Stream {385}
BIN#Stream {392}
BIN#Stream {391}
BIN#Stream {400}
BIN#Stream {399}
BIN#Stream {403}
BIN#Stream {402}
BIN#Stream {406}
BIN#Stream {405}
BIN#Stream {410}
BIN#Stream {409}
BIN#Stream {414}
BIN#Stream {413}
BIN#Stream {419}
BIN#Stream {418}
BIN#Stream {425}
BIN#Stream {424}
BIN#Stream {428}
BIN#Stream {427}
BIN#Stream {432}
BIN#Stream {431}
BIN#Stream {436}
BIN#Stream {435}
BIN#Stream {438}
BIN#Stream {437}
BIN#Stream {440}
BIN#Stream {439}
BIN#Stream {7797}
BIN#Stream {7809}
BIN#Stream {441}
BIN#Stream {451}
BIN#Stream {454}
BIN#Stream {453}
BIN#Stream {455}
BIN#Stream {20}
BIN#Stream {7811}
BIN#Stream {7810}
BIN#Stream {456}
BIN#Stream {466}
BIN#Stream {464}
BIN#Stream {472}
BIN#Stream {7776}
BIN#Stream {479}
BIN#Stream {473}
BIN#Stream {7805}
BIN#Stream {7804}
BIN#Stream {493}
BIN#Stream {499}
BIN#Stream {501}
BIN#Stream {7816}
BIN#Stream {505}
BIN#Stream {7818}
BIN#Stream {506}
BIN#Stream {509}
BIN#Stream {510}
BIN#Stream {514}
BIN#Stream {516}
BIN#Stream {517}
BIN#Stream {520}
BIN#Stream {164}
BIN#Stream {522}
BIN#Stream {523}
BIN#Stream {524}
BIN#Stream {525}
BIN#Stream {526}
BIN#Stream {527}
BIN#Stream {528}
BIN#Stream {529}
BIN#Stream {530}
BIN#Stream {7821}
BIN#Stream {7820}
BIN#Stream {531}
BIN#Stream {220}
BIN#Stream {537}
BIN#Stream {540}
BIN#Stream {539}
BIN#Stream {541}
BIN#Stream {542}
BIN#Stream {266}
BIN#Stream {290}
BIN#Stream {7796}
BIN#Stream {298}
BIN#Stream {301}
BIN#Stream {302}
BIN#Stream {304}
BIN#Stream {303}
BIN#Stream {305}
BIN#Stream {306}
BIN#Stream {308}
BIN#Stream {307}
BIN#Stream {309}
BIN#Stream {310}
BIN#Stream {313}
BIN#Stream {314}
BIN#Stream {315}
BIN#Stream {318}
BIN#Stream {319}
BIN#Stream {320}
BIN#Stream {324}
BIN#Stream {325}
BIN#Stream {323}
BIN#Stream {7802}
BIN#Stream {7801}
BIN#Stream {326}
BIN#Stream {335}
BIN#Stream {336}
BIN#Stream {339}
BIN#Stream {340}
BIN#Stream {343}
BIN#Stream {346}
BIN#Stream {347}
BIN#Stream {350}
BIN#Stream {351}
BIN#Stream {354}
BIN#Stream {355}
BIN#Stream {358}
BIN#Stream {359}
BIN#Stream {362}
BIN#Stream {365}
BIN#Stream {366}
BIN#Stream {367}
BIN#Stream {370}
BIN#Stream {371}
BIN#Stream {369}
BIN#Stream {372}
BIN#Stream {375}
BIN#Stream {379}
BIN#Stream {380}
BIN#Stream {381}
BIN#Stream {382}
BIN#Stream {383}
BIN#Stream {384}
BIN#Stream {387}
BIN#Stream {388}
BIN#Stream {389}
BIN#Stream {390}
BIN#Stream {393}
BIN#Stream {394}
BIN#Stream {395}
BIN#Stream {396}
BIN#Stream {397}
BIN#Stream {398}
BIN#Stream {401}
BIN#Stream {404}
BIN#Stream {407}
BIN#Stream {408}
BIN#Stream {411}
BIN#Stream {412}
BIN#Stream {415}
BIN#Stream {416}
BIN#Stream {417}
BIN#Stream {420}
BIN#Stream {421}
BIN#Stream {422}
BIN#Stream {423}
BIN#Stream {426}
BIN#Stream {429}
BIN#Stream {430}
BIN#Stream {433}
BIN#Stream {434}
BIN#Stream {468}
BIN#Stream {469}
BIN#Stream {470}
BIN#Stream {471}
BIN#Stream {467}
BIN#Stream {7814}
BIN#Stream {485}
BIN#Stream {480}
BIN#Stream {488}
BIN#Stream {486}
BIN#Stream {490}
BIN#Stream {500}
BIN#Stream {502}
BIN#Stream {521}
BIN#Stream {7823}
TXTStructure
ICOrvtools32x32.ico
PS1RVToolsBatchMultipleVCs.ps1
PS1RVToolsCreateLocalUser.ps1
PS1RVToolsFindBadVM.ps1
EXERVToolsMergeExcelFiles.exe
Structure
P7B[Authenticode]_90e8fbe4.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BINRVToolsMergeExcelFiles.exe.config
PS1RVToolsPasswordEncryption.ps1
EXERVToolsSendMail.exe
Structure
P7B[Authenticode]_3fc8f8fb.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BINRVToolsSendMail.exe.config
EXEselect.pyd
Structure
P7B[Authenticode]_42f4d402.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLsqlite3.dll
Structure
P7B[Authenticode]_4158430f.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLSTSService.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
DLLSystem.Buffers.dll
Structure
P7B[Authenticode]_8c38879e.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BIN.Net Resources
BINFxResources.System.Buffers.SR.resources
DLLSystem.Diagnostics.DiagnosticSource.dll
Structure
P7B[Authenticode]_91abd80f.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BIN.Net Resources
BINFxResources.System.Diagnostics.DiagnosticSource.SR.resources
XMLILLink.Substitutions.xml
DLLSystem.IO.FileSystem.Primitives.dll
Structure
P7B[Authenticode]_0a79d4d6.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:0
DLLSystem.Memory.dll
Structure
P7B[Authenticode]_8f789375.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BIN.Net Resources
BINFxResources.System.Memory.SR.resources
DLLSystem.Net.Http.dll
Structure
P7B[Authenticode]_f330f522.p7b
BINResources
BINIBC
BINID:0000
BINID:0
BINRT_VERSION
BINID:0001
BINID:1033
BIN.Net Resources
BINSystem.Net.Http.SR.resources
DLLSystem.Numerics.Vectors.dll
Structure
P7B[Authenticode]_ae030d4d.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BIN.Net Resources
BINFxResources.System.Numerics.Vectors.SR.resources
DLLSystem.Runtime.CompilerServices.Unsafe.dll
Structure
P7B[Authenticode]_86d02839.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:0
DLLtcl86t.dll
Structure
P7B[Authenticode]_6082743a.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLtk86t.dll
Structure
P7B[Authenticode]_4c594636.p7b
BINResources
BINRT_CURSOR
BINID:000E
BINID:1033
BINID:000F
BINID:1033
BINID:0010
BINID:1033
BINID:0011
BINID:1033
BINID:0012
BINID:1033
BINID:0013
BINID:1033
BINID:0014
BINID:1033
BINID:0015
BINID:1033
BINID:0016
BINID:1033
BINID:0017
BINID:1033
BINID:0018
BINID:1033
BINID:0019
BINID:1033
BINID:001A
BINID:1033
BINID:001B
BINID:1033
BINID:001C
BINID:1033
BINID:001D
BINID:1033
BINID:001E
BINID:1033
BINID:001F
BINID:1033
BINID:0020
BINID:1033
BINID:0021
BINID:1033
BINID:0022
BINID:1033
BINID:0023
BINID:1033
BINID:0024
BINID:1033
BINID:0025
BINID:1033
BINID:0026
BINID:1033
BINID:0027
BINID:1033
BINID:0028
BINID:1033
BINID:0029
BINID:1033
BINID:002A
BINID:1033
BINID:002B
BINID:1033
BINID:002C
BINID:1033
BINID:002D
BINID:1033
BINID:002E
BINID:1033
BINID:002F
BINID:1033
BINID:0030
BINID:1033
BINID:0031
BINID:1033
BINID:0032
BINID:1033
BINID:0033
BINID:1033
BINID:0034
BINID:1033
BINID:0035
BINID:1033
BINID:0036
BINID:1033
BINID:0037
BINID:1033
BINID:0038
BINID:1033
BINID:0039
BINID:1033
BINID:003A
BINID:1033
BINID:003B
BINID:1033
BINID:003C
BINID:1033
BINID:003D
BINID:1033
BINID:003E
BINID:1033
BINID:003F
BINID:1033
BINID:0040
BINID:1033
BINID:0041
BINID:1033
BINID:0042
BINID:1033
BINID:0043
BINID:1033
BINID:0044
BINID:1033
BINID:0045
BINID:1033
BINID:0046
BINID:1033
BINID:0047
BINID:1033
BINID:0048
BINID:1033
BINID:0049
BINID:1033
BINID:004A
BINID:1033
BINID:004B
BINID:1033
BINID:004C
BINID:1033
BINID:004D
BINID:1033
BINID:004E
BINID:1033
BINID:004F
BINID:1033
BINID:0050
BINID:1033
BINID:0051
BINID:1033
BINID:0052
BINID:1033
BINID:0053
BINID:1033
BINID:0054
BINID:1033
BINID:0055
BINID:1033
BINID:0056
BINID:1033
BINID:0057
BINID:1033
BINID:0058
BINID:1033
BINID:0059
BINID:1033
BINID:005A
BINID:1033
BINID:005B
BINID:1033
BINRT_BITMAP
BINID:0000
BINID:1033
BINRT_ICON
BINID:0001
BINID:1033
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINID:0006
BINID:1033
BINID:0007
BINID:1033
BINID:0008
BINID:1033
BINID:0009
BINID:1033
BINID:000A
BINID:1033
BINID:000B
BINID:1033
BINID:000C
BINID:1033
BINID:000D
BINID:1033
BINRT_DIALOG
BINID:0600
BINID:1033
BINRT_GROUP_CURSOR2
BINID:0000
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0000
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0001
BINID:1033
EXEunicodedata.pyd
Structure
P7B[Authenticode]_a9cdf807.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLvcruntime140.dll
Structure
P7B[Authenticode]_72993650.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLvcruntime140_1.dll
Structure
P7B[Authenticode]_4b0c5154.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLVim25Service.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
DLLVMware.Binding.WsTrust.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
EXEwinsound.pyd
Structure
P7B[Authenticode]_5d88328f.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLzlib1.dll
Structure
P7B[Authenticode]_5ab26e9d.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_asyncio.pyd
Structure
P7B[Authenticode]_cf5aa3d5.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_bz2.pyd
Structure
P7B[Authenticode]_d211eed6.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_ctypes.pyd
Structure
P7B[Authenticode]_a8332083.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_decimal.pyd
Structure
P7B[Authenticode]_7ab21f1e.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_elementtree.pyd
Structure
P7B[Authenticode]_70697af6.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_hashlib.pyd
Structure
P7B[Authenticode]_dcc1b2dd.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_lzma.pyd
Structure
P7B[Authenticode]_1660de3b.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_multiprocessing.pyd
Structure
P7B[Authenticode]_2663f9d9.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_overlapped.pyd
Structure
P7B[Authenticode]_e54c068d.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_queue.pyd
Structure
P7B[Authenticode]_de5e40d2.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_socket.pyd
Structure
P7B[Authenticode]_60ab8462.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_sqlite3.pyd
Structure
P7B[Authenticode]_84651039.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_ssl.pyd
Structure
P7B[Authenticode]_6555d580.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_uuid.pyd
Structure
P7B[Authenticode]_62d23155.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_wmi.pyd
Structure
P7B[Authenticode]_18fcb787.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_zoneinfo.pyd
Structure
P7B[Authenticode]_d7833812.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0002
BINID:1033
Config. Field Value
URL #1 http:/huhuhuhuhuhuhuhuhuhuhu
URL #2 http:/huhuhuhuhuhuhuhuhuhuhu
URL #3 http:/huhuhuhuhuhuhuhuhuhuhu
URL #4 http:/huhuhuhuhuhuhuhuhuhuhu
URL #5 https:huhuhuhuhuhuhuhuhuhuhu
URL #6 http:/huhuhuhuhuhuhuhuhuhuhu
URL #7 https:huhuhuhuhuhuhuhuhuhuhu
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
Name Value
RVTools.pdf
1.7
RVTools.pdf
Rob de Veij
RVTools.pdf
D:20240930143555+01'00'
RVTools.pdf
Microsoft® Word for Microsoft 365
RVTools.pdf
D:20240930143555+01'00'
RVTools.pdf
RVTools 4.7.1 October 3, 2024
RVTools.pdf
Microsoft® Word for Microsoft 365
RVTools.pdf
true
RVTools.pdf
2023-10-13T16:49:30Z
RVTools.pdf
Privileged
RVTools.pdf
Public No Visual Label
RVTools.pdf
945c199a-83a2-4e80-9f8c-5a91be5752dd
RVTools.pdf
99a04929-6196-4e8e-ba9f-4d322af4fd51
RVTools.pdf
0
RVTools.pdf
RVTools 4.7.1 October 3, 2024
RVTools.pdf
Rob de Veij
RVTools.pdf
Microsoft® Word for Microsoft 365
RVTools.pdf
D:20240930143555+01'00'
RVTools.pdf
D:20240930143555+01'00'
RVTools.pdf
Microsoft® Word for Microsoft 365
Deobfuscated PowerShell UNKNWOWNmalicious
$currehuhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #1 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #3 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #4 URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #5 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #6 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #7 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #8 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #9 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #10 URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #11 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #12 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #13 URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #14 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #15 URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #16 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #17 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #1 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URI URI
http:/huhuhuhuhuhuhu
URI URI
http:/huhuhuhuhuhuhu
URI URI
mailtohuhuhuhuhuhuhu
URI URI
mailtohuhuhuhuhuhuhuhuhuhuhu
URI URI
https:huhuhuhuhuhuhuhuhuhuhu
URI URI
https:huhuhuhuhuhuhuhuhuhuhu
URI URI
http:/huhuhuhuhuhuhuhuhuhuhu
URI URI
https:huhuhuhuhuhuhuhuhuhuhu
URI URI
mailtohuhuhuhuhuhuhu
URI URI
mailtohuhuhuhuhuhuhu
URI URI
http:/huhuhuhuhuhuhuhuhuhuhu
URI URI
http:/huhuhuhuhuhuhuhuhuhuhu
URI URI
http:/huhuhuhuhuhuhuhuhuhuhu
URI URI
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #1 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
3 malicious · 1488 files
OFFb157cc8493fe006bccefaca83a353311
PYcerts.py
RTFEULA.rtf
TXTLICENSE.txt
PS1lnk.ps1
PS1[Deobfuscated PS]
BINlog4net.config
CATpython.cat
_PTHpython313._pth
BINRVTools.exe.config
ICOrvtools32x32.ico
PS1RVToolsBatchMultipleVCs.ps1
PS1RVToolsCreateLocalUser.ps1
PS1RVToolsFindBadVM.ps1
BINRVToolsMergeExcelFiles.exe.config
PS1RVToolsPasswordEncryption.ps1
BINRVToolsSendMail.exe.config
Config. Field Value
URL #1 http:/huhuhuhuhuhuhuhuhuhuhu
URL #2 http:/huhuhuhuhuhuhuhuhuhuhu
URL #3 http:/huhuhuhuhuhuhuhuhuhuhu
URL #4 http:/huhuhuhuhuhuhuhuhuhuhu
URL #5 https:huhuhuhuhuhuhuhuhuhuhu
URL #6 http:/huhuhuhuhuhuhuhuhuhuhu
URL #7 https:huhuhuhuhuhuhuhuhuhuhu
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
Deobfuscated PowerShell UNKNWOWNmalicious
$currehuhuhuhuhuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › lnk.ps1
URLs in VB Code - #1 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › python313.dll
URLs in VB Code - #2 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › python313.dll
URLs in VB Code - #3 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › python313.dll
URLs in VB Code - #4 URIsuspect
http:/huhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › python313.dll
URLs in VB Code - #5 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › python313.dll
URLs in VB Code - #6 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › python313.dll
URLs in VB Code - #7 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › python313.dll
URLs in VB Code - #8 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › python313.dll
URLs in VB Code - #9 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › python313.dll
URLs in VB Code - #10 URIsuspect
http:/huhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › python313.dll
URLs in VB Code - #11 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › python313.dll
URLs in VB Code - #12 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › python313.dll
URLs in VB Code - #13 URIsuspect
http:/huhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › python313.dll
URLs in VB Code - #14 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › python313.dll
URLs in VB Code - #15 URIsuspect
http:/huhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › python313.dll
URLs in VB Code - #16 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › python313.dll
URLs in VB Code - #17 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › python313.dll
URLs in VB Code - #1 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › python313.zip › pydoc_data › topics.pyc
URLs in VB Code - #2 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › python313.zip › pydoc_data › topics.pyc
URI URI
http:/huhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › RVTools.pdf
URI URI
http:/huhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › RVTools.pdf
URI URI
mailtohuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › RVTools.pdf
URI URI
mailtohuhuhuhuhuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › RVTools.pdf
URI URI
https:huhuhuhuhuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › RVTools.pdf
URI URI
https:huhuhuhuhuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › RVTools.pdf
URI URI
http:/huhuhuhuhuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › RVTools.pdf
URI URI
https:huhuhuhuhuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › RVTools.pdf
URI URI
mailtohuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › RVTools.pdf
URI URI
mailtohuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › RVTools.pdf
URI URI
http:/huhuhuhuhuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › RVTools.pdf
URI URI
http:/huhuhuhuhuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › RVTools.pdf
URI URI
http:/huhuhuhuhuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › RVTools.pdf
URI URI
http:/huhuhuhuhuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › RVTools.pdf
URLs in VB Code - #1 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
b157cc8493fe006bccefaca83a353311 › tk86t.dll
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙