Malicious
Malicious

Share on LinkedIn
Print
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
PeID
Microsoft Visual C++Microsoft Visual C++ 5.0Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0Microsoft Visual C++ v6.0Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
e1cfbd187772abfca97cbb2b41d763d9
Malicious
[NSIS Installer] @ #000D07B9
Malicious
modern-wizard.bmp
nsDialogs.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_DIALOG
ID:0001
ID:1033
System.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.reloc
modern-header.bmp
OemVista.inf
tap0901.cat
tap0901.sys
[Authenticode]_89e08687.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
PAGE
INIT
.rsrc
.reloc
Resources
RT_RCDATA
ID:0000
ID:1033
RT_VERSION
ID:0001
ID:1033
tapinstall.exe
[Authenticode]_454917c6.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_STRING
ID:00BC
ID:1033
ID:00BD
ID:1033
RT_RCDATA
ID:0000
ID:1033
RT_MESSAGETABLE
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Update.exe
7z-stream @ 0x000B0D00.7z
[Authenticode]_305d951b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
ILRepack.List
Microsoft.Web.XmlTransform.SR.resources
NuGet.CommonResources.resources
NuGet.Resources.AnalysisResources.resources
NuGet.Resources.NuGetResources.resources
NuGet.Authoring.nuspec.xsd
LetsPRO.exe
[Authenticode]_5d6a4ee5.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
[Authenticode]_b4647cdd.p7b
.Net Resources
LetsPRO.g.resources
LetsVPN.Properties.Resources.resources
LetsVPN.Properties.ResourcesOrigin.resources
LetsVPN.Resources.hosts.template
CommunityToolkit.Mvvm.dll
[Authenticode]_a760065a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
DeltaCompressionDotNet.MsDelta.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
DeltaCompressionDotNet.PatchApi.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
DeltaCompressionDotNet.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
FontAwesome.WPF.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FontAwesome.WPF.g.resources
FontAwesome.WPF.FontAwesome.Icon.png
FontAwesome.WPF.FontAwesome.Icon.png-preview.png
Hardcodet.Wpf.TaskbarNotification.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
ICSharpCode.AvalonEdit.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
ICSharpCode.AvalonEdit.g.resources
ICSharpCode.AvalonEdit.Highlighting.Resources.ASPX.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.Boo.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.Coco-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.CPP-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.CSharp-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.CSS-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.HTML-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.Java-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.JavaScript-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.Json.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.MarkDown-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.MarkDownWithFontSize-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.Patch-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.PHP-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.PowerShell.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.Python-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.Tex-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.TSQL-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.VB-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.XML-Mode.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.XmlDoc.xshd
ICSharpCode.AvalonEdit.Highlighting.Resources.ModeV1.xsd
ICSharpCode.AvalonEdit.Highlighting.Resources.ModeV2.xsd
LetsGoogleAnalytics.dll
[Authenticode]_35dc2a8d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rdata
.bss
.edata
.idata
.CRT
.tls
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
LetsGoogleAnalytics.exe
[Authenticode]_3c48aa69.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rdata
.bss
.idata
.CRT
.tls
.rsrc
4
19
31
45
57
70
81
92
Resources
RT_VERSION
ID:0001
ID:1033
LetsPRO.exe.config
LetsPRO.ini
LetsVPNDomainModel.dll
[Authenticode]_a0cba54b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
LetsVPNInfraStructure.dll
[Authenticode]_84227379.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
MdXaml.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
MdXaml.g.resources
MdXaml.EmojiTable.txt
Microsoft.Bcl.AsyncInterfaces.dll
[Authenticode]_5bf00412.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
Microsoft.Expression.Interactions.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
ExceptionStringTable.resources
Microsoft.Toolkit.Uwp.Notifications.dll
[Authenticode]_12b39fd1.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
Microsoft.Web.WebView2.Core.dll
[Authenticode]_a374ec40.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
Microsoft.Web.WebView2.WinForms.dll
[Authenticode]_e411726b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
Microsoft.Web.WebView2.Wpf.dll
[Authenticode]_37cf879e.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
Microsoft.Win32.Primitives.dll
[Authenticode]_0eace63a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
Microsoft.Win32.Registry.AccessControl.dll
[Authenticode]_3a89b26a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
ILLink.Substitutions.xml
Microsoft.Win32.Registry.dll
[Authenticode]_4a73ed43.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.Microsoft.Win32.Registry.SR.resources
ILLink.Substitutions.xml
Microsoft.Win32.SystemEvents.dll
[Authenticode]_514418e3.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.Microsoft.Win32.SystemEvents.SR.resources
ILLink.Substitutions.xml
Mono.Cecil.Mdb.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
Mono.Cecil.Pdb.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
Mono.Cecil.Rocks.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
Mono.Cecil.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
Newtonsoft.Json.dll
[Authenticode]_220cad77.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
NuGet.Squirrel.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
NuGet.CommonResources.resources
NuGet.Resources.AnalysisResources.resources
NuGet.Resources.NuGetResources.resources
PusherClient.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
SQLite-net.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
SQLiteNetExtensions.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
SQLiteNetExtensionsAsync.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
SQLitePCLRaw.batteries_v2.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
SQLitePCLRaw.core.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
ILLink.Descriptors.xml
SQLitePCLRaw.nativelibrary.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
SQLitePCLRaw.provider.dynamic_cdecl.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
SVGImage.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
SVGImage.g.resources
Sentry.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
SharpCompress.dll
7z-stream @ 0x0006C1EC.7z
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
Squirrel.dll
[Authenticode]_84d489b0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
SuperSocket.ClientEngine.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
System.AppContext.dll
[Authenticode]_a5aef8f6.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
System.Buffers.dll
[Authenticode]_8c38879e.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Buffers.SR.resources
System.CodeDom.dll
[Authenticode]_cbade23c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.CodeDom.SR.resources
ILLink.Substitutions.xml
System.Collections.Concurrent.dll
[Authenticode]_5e25c536.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
System.Collections.Immutable.dll
[Authenticode]_e61ac24a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Collections.Immutable.SR.resources
ILLink.Substitutions.xml
System.Collections.NonGeneric.dll
[Authenticode]_eecaa1f0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
System.Collections.Specialized.dll
[Authenticode]_642764aa.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
System.Collections.dll
[Authenticode]_9323bd82.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
System.ComponentModel.Annotations.dll
[Authenticode]_d788dcd4.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.ComponentModel.Annotations.SR.resources
System.ComponentModel.Annotations.Resources.System.ComponentModel.Annotations.rd.xml
System.ComponentModel.EventBasedAsync.dll
[Authenticode]_080d1a4d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
System.ComponentModel.Primitives.dll
[Authenticode]_ccf0afa1.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
System.ComponentModel.TypeConverter.dll
[Authenticode]_068bfba6.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
System.ComponentModel.dll
[Authenticode]_c81486e4.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
System.Configuration.ConfigurationManager.dll
[Authenticode]_08d563fc.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Configuration.ConfigurationManager.SR.resources
ILLink.Substitutions.xml
System.Console.dll
[Authenticode]_2b78bb38.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
System.Data.Common.dll
[Authenticode]_8aac7822.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Data.Common.SR.resources
System.Data.Odbc.dll
[Authenticode]_f58aa5b7.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Data.Odbc.SR.resources
System.Data.Odbc.OdbcMetaData.xml
ILLink.Substitutions.xml
System.Data.OleDb.dll
[Authenticode]_ffd5c584.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Data.OleDb.SR.resources
System.Data.OleDb.OleDbMetaData.xml
ILLink.Substitutions.xml
System.Data.SqlClient.dll
[Authenticode]_bd5639e0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Data.SqlClient.SR.resources
System.Data.SqlClient.SqlMetaData.xml
System.Diagnostics.Contracts.dll
[Authenticode]_b51e7343.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
System.Diagnostics.Debug.dll
[Authenticode]_c3857e3a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
System.Diagnostics.EventLog.dll
[Authenticode]_bf89666c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Diagnostics.EventLog.SR.resources
ILLink.Substitutions.xml
System.Diagnostics.FileVersionInfo.dll
[Authenticode]_d7308aba.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
System.Diagnostics.PerformanceCounter.dll
[Authenticode]_4b76c749.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Diagnostics.PerformanceCounter.SR.resources
ILLink.Substitutions.xml
System.Diagnostics.Process.dll
[Authenticode]_03d7980b.p7b
Structure
DosHeader
PE Header