General

  • Target

    Defender.zip

  • Size

    50.2MB

  • MD5

    f6c760eaf8c6f73c4eb21222f126bb07

  • SHA1

    e9033a958f834b4c5c92e476b26d401b597cb610

  • SHA256

    386207d290ef2c79595bea36e79d307a570edaceb35a14fab22db47ac2d02ff1

  • SHA512

    fcbfb1bd55b24b4724c7137baccda591c723ab9a24ec649d4c002001f6d95fa43410e8fb3accc0c08264205ceda64504bbbd88420378e80f1462da89f9a89c77

  • SSDEEP

    786432:I9lziOqQNyzeHAuvtzRqVBbzgaT9x1aL1Gi1UuzntTqCd8tQyjNap1C2SmRqLIMM:ghrgyHAEFagcaL3KGtTJ8CyjNaDAsWzw

Score
1/10

Malware Config

Signatures

Files

  • Defender.zip
    .zip
  • Defender/Crypto/Cipher/_Salsa20.pyd
    .dll windows x64

    88112dcbe3a53e9694d13098c8e7637c


    Headers

    Imports

    Exports

    Sections

  • Defender/Crypto/Cipher/_raw_aes.pyd
    .dll windows x64

    88112dcbe3a53e9694d13098c8e7637c


    Headers

    Imports

    Exports

    Sections

  • Defender/Crypto/Cipher/_raw_aesni.pyd
    .dll windows x64

    2315a0870724532b68e8ce5b56d5f1c9


    Headers

    Imports

    Exports

    Sections

  • Defender/Crypto/Cipher/_raw_cbc.pyd
    .dll windows x64

    88112dcbe3a53e9694d13098c8e7637c


    Headers

    Imports

    Exports

    Sections

  • Defender/Crypto/Cipher/_raw_cfb.pyd
    .dll windows x64

    9cb819c684c2d71d970fe515e12e034c


    Headers

    Imports

    Exports

    Sections

  • Defender/Crypto/Cipher/_raw_ctr.pyd
    .dll windows x64

    2315a0870724532b68e8ce5b56d5f1c9


    Headers

    Imports

    Exports

    Sections

  • Defender/Crypto/Cipher/_raw_ecb.pyd
    .dll windows x64

    f4adbf5e5d5222e266c8b0b2b63f980b


    Headers

    Imports

    Exports

    Sections

  • Defender/Crypto/Cipher/_raw_eksblowfish.pyd
    .dll windows x64

    88112dcbe3a53e9694d13098c8e7637c


    Headers

    Imports

    Exports

    Sections

  • Defender/Crypto/Cipher/_raw_ocb.pyd
    .dll windows x64

    9cb819c684c2d71d970fe515e12e034c


    Headers

    Imports

    Exports

    Sections

  • Defender/Crypto/Cipher/_raw_ofb.pyd
    .dll windows x64

    88112dcbe3a53e9694d13098c8e7637c


    Headers

    Imports

    Exports

    Sections

  • Defender/Crypto/Hash/_BLAKE2s.pyd
    .dll windows x64

    88112dcbe3a53e9694d13098c8e7637c


    Headers

    Imports

    Exports

    Sections

  • Defender/Crypto/Hash/_MD5.pyd
    .dll windows x64

    9cb819c684c2d71d970fe515e12e034c


    Headers

    Imports

    Exports

    Sections

  • Defender/Crypto/Hash/_SHA1.pyd
    .dll windows x64

    9cb819c684c2d71d970fe515e12e034c


    Headers

    Imports

    Exports

    Sections

  • Defender/Crypto/Hash/_SHA256.pyd
    .dll windows x64

    9cb819c684c2d71d970fe515e12e034c


    Headers

    Imports

    Exports

    Sections

  • Defender/Crypto/Hash/_ghash_clmul.pyd
    .dll windows x64

    bc2df86982d9a6709cf8f970eead14c7


    Headers

    Imports

    Exports

    Sections

  • Defender/Crypto/Hash/_ghash_portable.pyd
    .dll windows x64

    88112dcbe3a53e9694d13098c8e7637c


    Headers

    Imports

    Exports

    Sections

  • Defender/Crypto/Protocol/_scrypt.pyd
    .dll windows x64

    9cb819c684c2d71d970fe515e12e034c


    Headers

    Imports

    Exports

    Sections

  • Defender/Crypto/Util/_cpuid_c.pyd
    .dll windows x64

    f4adbf5e5d5222e266c8b0b2b63f980b


    Headers

    Imports

    Exports

    Sections

  • Defender/Crypto/Util/_strxor.pyd
    .dll windows x64

    f4adbf5e5d5222e266c8b0b2b63f980b


    Headers

    Imports

    Exports

    Sections

  • Defender/PIL/_imaging.pyd
    .dll windows x64

    868de4cce6829d5515f1ca0277948c41


    Headers

    Imports

    Exports

    Sections

  • Defender/PIL/_imagingtk.pyd
    .dll windows x64

    7d53c802d6ee5e35f9571c06ed47b9a3


    Headers

    Imports

    Exports

    Sections

  • Defender/PIL/_webp.pyd
    .dll windows x64

    b52c146e9cbb8e045a64d7034a27ed54


    Headers

    Imports

    Exports

    Sections

  • Defender/PySide6/QtCore.pyd
    .dll windows x64

    3fa8657d0e1cdfbdf0be382f3a5117b5


    Headers

    Imports

    Exports

    Sections

  • Defender/PySide6/QtGui.pyd
    .dll windows x64

    5f703e619c5f7298cfae4521387098fb


    Headers

    Imports

    Exports

    Sections

  • Defender/PySide6/QtNetwork.pyd
    .dll windows x64

    53c375cb32684f1d577aed8519b15463


    Headers

    Imports

    Exports

    Sections

  • Defender/PySide6/qt-plugins/iconengines/qsvgicon.dll
    .dll windows x64

    5dd7cbbaa807a34cab2f640429078294


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/PySide6/qt-plugins/imageformats/qgif.dll
    .dll windows x64

    9bd61da700521aad35370d97ba8ca11a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/PySide6/qt-plugins/imageformats/qicns.dll
    .dll windows x64

    1c964f20b121de337cd018f76c89f009


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/PySide6/qt-plugins/imageformats/qico.dll
    .dll windows x64

    5c2b5fec94cda30756ced53f8daf268c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/PySide6/qt-plugins/imageformats/qjpeg.dll
    .dll windows x64

    11e9419e4b781498dfe4dc800a344108


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/PySide6/qt-plugins/imageformats/qsvg.dll
    .dll windows x64

    af81a1661103236e82203f19b71aef81


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/PySide6/qt-plugins/imageformats/qtga.dll
    .dll windows x64

    84c2924f35fcf7efd98ec2621b77f925


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/PySide6/qt-plugins/imageformats/qtiff.dll
    .dll windows x64

    a05c0bf004fd6a990c79d139cbaf7918


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/PySide6/qt-plugins/imageformats/qwbmp.dll
    .dll windows x64

    9b9a3e680b0b6fcecc6e402169ecc29d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/PySide6/qt-plugins/imageformats/qwebp.dll
    .dll windows x64

    af3aca12926549a5dc310f7dd87eafcd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/PySide6/qt-plugins/platforms/qdirect2d.dll
    .dll windows x64

    050843c612fb5b53f669902fe3dbe4ad


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/PySide6/qt-plugins/platforms/qminimal.dll
    .dll windows x64

    743dd41766a00dc6c1cd24f151d8a41e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/PySide6/qt-plugins/platforms/qoffscreen.dll
    .dll windows x64

    e27fa594b5cd64a85d5386368856679c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/PySide6/qt-plugins/platforms/qwindows.dll
    .dll windows x64

    9463f4875cd042ad4cda941c7a988020


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/PySide6/qt-plugins/styles/qwindowsvistastyle.dll
    .dll windows x64

    e48284a13a390d84a88f0894f652c66d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/Windows Security.exe
    .exe windows x64

    4809987fbe2c131beeb2dbe90a6867c2


    Headers

    Imports

    Sections

  • Defender/_asyncio.pyd
    .dll windows x64

    33c2dc620ef3066802b73ad0196a03ca


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/_bz2.pyd
    .dll windows x64

    35a9dacf9f79c03b0381c7eb4ebf6710


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/_cffi_backend.pyd
    .dll windows x64

    79ec101ccbc21cd424dee5b101ba55c7


    Headers

    Imports

    Exports

    Sections

  • Defender/_ctypes.pyd
    .dll windows x64

    ab77d51c0754f22e0927f48087728272


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/_decimal.pyd
    .dll windows x64

    8d495f7690547320cd4bc3d251892f87


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/_elementtree.pyd
    .dll windows x64

    4520d9259ec386a4bffada413311ebc7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/_hashlib.pyd
    .dll windows x64

    dd99273b45baefe9626061e94ec53345


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/_lzma.pyd
    .dll windows x64

    ec321fe6f6ae9199bab3d28c705c7554


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/_multiprocessing.pyd
    .dll windows x64

    89f0000660ca367b2a00a5d0c2c2fc82


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/_overlapped.pyd
    .dll windows x64

    6ece61cb378bdb4f44d497ba91eec65f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/_queue.pyd
    .dll windows x64

    5d36e81fb0694d2f72e478d60df5edc0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/_socket.pyd
    .dll .js windows x64
  • Defender/_sqlite3.pyd
    .dll windows x64

    11eac12190f5facbded6c06cad5de9c2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/_ssl.pyd
    .dll windows x64

    60a4bc7b5a2891d0543ceab618f6cfd2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/_tkinter.pyd
    .dll windows x64

    6c73907222ca794d0a1b78cd051446ff


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/_uuid.pyd
    .dll windows x64

    cb226e072ca26a11e01b792edfba8b4a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/_win32sysloader.pyd
    .dll windows x64

    879ab91058478e56351a7ba0db265d84


    Headers

    Imports

    Exports

    Sections

  • Defender/_zoneinfo.pyd
    .dll windows x64

    c9466c49504e16fdef15d92fa3da1210


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/certifi/cacert.pem
  • Defender/comctl32.dll
    .dll windows x64

    31c279e15ae041dc1102d6bc5abf4eed


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/concrt140.dll
    .dll windows x64

    e29b9617328962a9b58721e88e2fd959


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/cryptography/hazmat/bindings/_openssl.pyd
    .dll windows x64

    c42018e20a455f1d9486034e96f4d3f7


    Headers

    Imports

    Exports

    Sections

  • Defender/cryptography/hazmat/bindings/_rust.pyd
    .dll windows x64

    766367e40071aabef841ec5185cbe1a8


    Headers

    Imports

    Exports

    Sections

  • Defender/gdiplus.dll
    .dll windows x64

    c71c2ce1da9e080b8655b7eeb4644211


    Headers

    Imports

    Exports

    Sections

  • Defender/libcrypto-1_1.dll
    .dll windows x64

    11f2ed72076bbf7871eb95fd5b4e84b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/libffi-7.dll
    .dll windows x64

    3dc8b86d60f90a1851eee5f9dc191312


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/libssl-1_1.dll
    .dll windows x64

    8060a6a4706b6c76da720a52825df240


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/mfc140u.dll
    .dll windows x64

    a012ccfaad99a5a378bf0d7352290d9a


    Code Sign

    Headers

    Imports

    Sections

  • Defender/msvcp140.dll
    .dll windows x64

    2ba11fd5a511c8a409e705e9ab6b5dc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/msvcp140_1.dll
    .dll windows x64

    a1d1434dddb062f5f5d6615852def52b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/msvcp140_2.dll
    .dll windows x64

    8ceeb902c9887e633d0dec0e28e97944


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/multidict/_multidict.pyd
    .dll windows x64

    81b3b507fec0a3cf9ec555a83acda16c


    Headers

    Imports

    Exports

    Sections

  • Defender/psutil/_psutil_windows.pyd
    .dll windows x64

    c24e0e6d824df54278d06f3c140fd2fc


    Headers

    Imports

    Exports

    Sections

  • Defender/pyexpat.pyd
    .dll windows x64

    d56a60a7d9f8ed3a6a815934929c63b8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/pyside6.abi3.dll
    .dll windows x64

    d0cf5a8209f5b45962d83b49e60d7984


    Headers

    Imports

    Exports

    Sections

  • Defender/python3.dll
    .dll windows x64


    Code Sign

    Headers

    Exports

    Sections

  • Defender/python310.dll
    .dll windows x64

    0d0725e28d76d10fe6e01bf87660074f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/pythoncom310.dll
    .dll windows x64

    0f8ba489987e9caa288c632b4b5c3786


    Headers

    Imports

    Exports

    Sections

  • Defender/pywintypes310.dll
    .dll windows x64

    ef98e964cdf77bbe8cde3c189b89321e


    Headers

    Imports

    Exports

    Sections

  • Defender/qt6core.dll
    .dll windows x64

    98e01955cb6619a5c32d907328e01894


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/qt6gui.dll
    .dll windows x64

    cfdcddf6b3672ac949254aecfacd7140


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/qt6network.dll
    .dll windows x64

    8725fa365c8952138f0888dd3dfbaf84


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/qt6svg.dll
    .dll windows x64

    45e0ffe0b957b8d2a771d29d9299c51d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/qt6widgets.dll
    .dll windows x64

    a866bfff3fc1b069ce5492d730cf70c7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/select.pyd
    .dll windows x64

    812f037efaee65aa413caf6a2ec4d7c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/shiboken6.abi3.dll
    .dll windows x64

    13f56badadb742e9f3468893560df5f7


    Headers

    Imports

    Exports

    Sections

  • Defender/shiboken6/Shiboken.pyd
    .dll windows x64

    185a4b40960f929fde7043c5ac1f1cdd


    Headers

    Imports

    Exports

    Sections

  • Defender/sqlite3.dll
    .dll windows x64

    621d0184c311087c184bd1135e5b6c1c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/tcl86t.dll
    .dll windows x64

    63f8d50bc57576c5767c793bd6b231e3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/tk86t.dll
    .dll windows x64

    122ccc329f9b840c1d56dabb6d865c8e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/unicodedata.pyd
    .dll windows x64

    0c1227ef9e5248d56560b944d04025cb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/vcruntime140.dll
    .dll windows x64

    7f07fd94e5bb907093556781cc464017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/vcruntime140_1.dll
    .dll windows x64

    bf380ca954cbf10d1a4cef9ec18e46fd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defender/win32api.pyd
    .dll windows x64

    8e96d8cf5673af94ead097162739db96


    Headers

    Imports

    Exports

    Sections

  • Defender/win32crypt.pyd
    .dll windows x64

    d85d29747dd1920a5b1a07360a15a45a


    Headers

    Imports

    Exports

    Sections

  • Defender/win32gui.pyd
    .dll windows x64

    cf8751a8a7e6b3a8c7d009229f46f67f


    Headers

    Imports

    Exports

    Sections

  • Defender/win32ui.pyd
    .dll windows x64

    3d1a143ce99edd70639fa0175493dafb


    Headers

    Imports

    Exports

    Sections

  • Defender/yarl/_quoting_c.pyd
    .dll windows x64

    1f67795bb7a66349ebd99dd6d3ae3e35


    Headers

    Imports

    Exports

    Sections