General

  • Target

    System32Problems7.zip

  • Size

    12.3MB

  • MD5

    32cf2ee0d072106622af68619936241f

  • SHA1

    325600c7c03603877ddfe1b59dda9f039480871d

  • SHA256

    03d015e091f527695e840cd8427e6497b4a644f01ceb26c9655b508f451c01c5

  • SHA512

    c2ac80c9442dd445c7ec5bb35626bc9beced16fc6f44b58af1ad280ad8025bd15e020fb4cc4c46e8f6fc182fb5ce3b4d8c16f31ac93de40eaf6a25fa9ae000f8

  • SSDEEP

    393216:hzUBSeWIiaJhuO1lvc+VVwFU4WRz2xPvmIfZRrJBH75U:RCWIiavreU9RzWT3NZ75U

Score
3/10

Malware Config

Signatures

  • Unsigned PE 76 IoCs

    Checks for missing Authenticode signature.

Files

  • System32Problems7.zip
    .zip
  • 07409496-a423-4a3e-b620-2cfb01a9318d_HyperV-ComputeNetwork.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • 0ae3b998-9a38-4b72-a4c4-06849441518d_Servicing-Stack.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • 4545ffe2-0dc4-4df4-9d02-299ef204635e_hvsocket.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • 69fe178f-26e7-43a9-aa7d-2b616b672dde_eventlogservice.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • 6bea57fb-8dfb-4177-9ae8-42e8b3529933_RuntimeDeviceInstall.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • ACPBackgroundManagerPolicy.dll
    .dll windows:10 windows x64 arch:x64

    eacd31322b05ebe07f24badc4df282dd


    Headers

    Imports

    Exports

    Sections

  • AJRouter.dll
    .dll windows:10 windows x64 arch:x64

    271ed6be2b719a2dd199a26d9a18977e


    Headers

    Imports

    Exports

    Sections

  • APHostClient.dll
    .dll windows:10 windows x64 arch:x64

    ce981d1c76394b9db32ba7d7cf1011da


    Headers

    Imports

    Exports

    Sections

  • APHostRes.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • APHostService.dll
    .dll windows:10 windows x64 arch:x64

    591146b84eed55a14388ac6af7cac98c


    Headers

    Imports

    Exports

    Sections

  • APMon.dll
    .dll windows:10 windows x64 arch:x64

    db8a6d6a1e7673602b212a8636a36eec


    Headers

    Imports

    Exports

    Sections

  • APMonUI.dll
    .dll windows:10 windows x64 arch:x64

    0aa8e6d7d3c3544c89b26103bac4f14a


    Headers

    Imports

    Exports

    Sections

  • AarSvc.dll
    .dll windows:10 windows x64 arch:x64

    64811aeff0384842511e2a5aec47d2b5


    Headers

    Imports

    Exports

    Sections

  • AboutSettingsHandlers.dll
    .dll windows:10 windows x64 arch:x64

    059b0f6e69ac45ee19fe67efcfd23724


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AboveLockAppHost.dll
    .dll windows:10 windows x64 arch:x64

    f7b54aba11b7a5e8d7ae27f1a07e9dd6


    Headers

    Imports

    Exports

    Sections

  • AcGenral.dll
    .dll windows:10 windows x64 arch:x64

    c16124aa4ed342b37cf467ac9e91d7ef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AcLayers.dll
    .dll windows:10 windows x64 arch:x64

    e7aecfeca6816cac6e2c1bfd943833c1


    Headers

    Imports

    Exports

    Sections

  • AcSpecfc.dll
    .dll windows:10 windows x64 arch:x64

    eaf8f1ee8df1088f64706a39dde1555d


    Headers

    Imports

    Exports

    Sections

  • AcWinRT.dll
    .dll windows:10 windows x64 arch:x64

    143b4d11bccc8451d5c16700edd50bea


    Headers

    Imports

    Exports

    Sections

  • AcXtrnal.dll
    .dll windows:10 windows x64 arch:x64

    1062d7530750e6553052fe265d51f3f3


    Headers

    Imports

    Exports

    Sections

  • AccountsRt.dll
    .dll windows:10 windows x64 arch:x64

    2e700cb770caf4b28b628d4415952108


    Headers

    Imports

    Exports

    Sections

  • ActionCenter.dll
    .dll windows:10 windows x64 arch:x64

    1c9b36505ef2a8502d413b8a9549d941


    Headers

    Imports

    Exports

    Sections

  • ActionCenterCPL.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    ea5a7a9c3d650d7bcaa9cb3c7a590886


    Headers

    Imports

    Exports

    Sections

  • ActionQueue.dll
    .dll windows:10 windows x64 arch:x64

    8d8fec30a01d22955b9b33ca965ef3ea


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ActivationClient.dll
    .dll windows:10 windows x64 arch:x64

    dbe5e28b4aa5dc888a43d5cca5a23d2d


    Headers

    Imports

    Exports

    Sections

  • ActivationManager.dll
    .dll windows:10 windows x64 arch:x64

    37f36530f65f5a4512a8e7623ff82f96


    Headers

    Imports

    Exports

    Sections

  • ActiveSyncCsp.dll
    .dll windows:10 windows x64 arch:x64

    b1c7cfa9b5a0aa128f7d26f6e14d830f


    Headers

    Imports

    Exports

    Sections

  • ActiveSyncProvider.dll
    .dll windows:10 windows x64 arch:x64

    e4f67fcaf64a2e9b15f5fd1a66936cec


    Headers

    Imports

    Exports

    Sections

  • AdaptiveCards.dll
    .dll windows:10 windows x64 arch:x64

    273fa36777a5fb467215af0e06e8c3a4


    Headers

    Imports

    Exports

    Sections

  • AddressParser.dll
    .dll windows:10 windows x64 arch:x64

    2f7c5228fa8df91e86bc452800a750df


    Headers

    Imports

    Exports

    Sections

  • AdvancedEmojiDS.dll
    .dll windows:10 windows x64 arch:x64

    6c66c8302aa86e47014cee776d62fe23


    Headers

    Imports

    Exports

    Sections

  • Analog.Shell.Broker.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    2a3bd753060cbe356d161e60bb9d1bae


    Headers

    Imports

    Exports

    Sections

  • AnalogCommonProxyStub.dll
    .dll windows:10 windows x64 arch:x64

    b08dd6024b14545c24fb43b231d87022


    Headers

    Imports

    Exports

    Sections

  • ApiSetHost.AppExecutionAlias.dll
    .dll windows:10 windows x64 arch:x64

    1e00bd42b7c3b58d7ce0fc2170fa1bab


    Headers

    Imports

    Exports

    Sections

  • AppContracts.dll
    .dll windows:10 windows x64 arch:x64

    a740c37d78928b428a18129844a6d3fc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AppExtension.dll
    .dll windows:10 windows x64 arch:x64

    cf0c899f455a5d5627f7d0317e598496


    Headers

    Imports

    Exports

    Sections

  • AppInstallerPrompt.Desktop.dll
    .dll windows:10 windows x64 arch:x64

    078aabf1137d1fefe5a16f932390bf61


    Headers

    Imports

    Exports

    Sections

  • AppListBackupLauncher.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    b7a3563615cca41016fe31f77ef62164


    Headers

    Imports

    Exports

    Sections

  • AppLockerCSP.dll
    .dll windows:10 windows x64 arch:x64

    d94fa14df25d2d8a08554825d64d1868


    Headers

    Imports

    Exports

    Sections

  • Apphlpdm.dll
    .dll windows:10 windows x64 arch:x64

    f2c50d29003c5d8a953cc1340b77ca4a


    Headers

    Imports

    Exports

    Sections

  • ApplicationControlCSP.dll
    .dll windows:10 windows x64 arch:x64

    a87a12320dc9209ddbea602fae616ab7


    Headers

    Imports

    Exports

    Sections

  • ApplicationFrame.dll
    .dll windows:10 windows x64 arch:x64

    2ff63f6f1e4d9f8fa7989c277faee1ea


    Headers

    Imports

    Exports

    Sections

  • ApplicationTargetedFeatureDatabase.dll
    .dll windows:10 windows x64 arch:x64

    bcb4eeb99a27232aece7058e31c26188


    Headers

    Imports

    Exports

    Sections

  • WSManHTTPConfig.exe
    .exe windows:10 windows x64 arch:x64

    031182968584c829b86d19eb15364008


    Headers

    Imports

    Exports

    Sections

  • WSReset.exe
    .exe windows:10 windows x64 arch:x64

    1fc4cb53a2206655892168907d8c326b


    Headers

    Imports

    Sections

  • WUDFCompanionHost.exe
    .exe windows:10 windows x64 arch:x64

    e4735dcee461268895e8fbe34d25309f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WUDFHost.exe
    .exe windows:10 windows x64 arch:x64

    fbb1e8290f0b168cec3d026f11d7e449


    Headers

    Imports

    Exports

    Sections

  • WWAHost.exe
    .exe windows:10 windows x64 arch:x64

    e519beed39f596dd72563b6c3346d9c1


    Code Sign

    Headers

    Imports

    Sections

  • XblGameSaveTask.exe
    .exe windows:10 windows x64 arch:x64

    8500995099f1fff234c29b2797de4d9f


    Headers

    Imports

    Sections

  • aadWamExtension.dll
    .dll windows:10 windows x64 arch:x64

    ab939286ce5cb298f3c4aeb4e33080b9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • aadauthhelper.dll
    .dll windows:10 windows x64 arch:x64

    d04f42948845ecaafdb48df604d9de10


    Headers

    Imports

    Exports

    Sections

  • aadcloudap.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    a8ff7829bd1c31f64530939ec9db6090


    Headers

    Imports

    Exports

    Sections

  • aadjcsp.dll
    .dll windows:10 windows x64 arch:x64

    ebbdb89ebaecd81022745fc46b001635


    Headers

    Imports

    Exports

    Sections

  • aadtb.dll
    .dll windows:10 windows x64 arch:x64

    2c625e95376c75e227cc998ce2255abd


    Headers

    Imports

    Exports

    Sections

  • accessibilitycpl.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    97e45f403ebe81e6f5dd9bf911502f62


    Headers

    Imports

    Exports

    Sections

  • accountaccessor.dll
    .dll windows:10 windows x64 arch:x64

    7081b58efaaf078692ace5bb377fc391


    Headers

    Imports

    Exports

    Sections

  • acledit.dll
    .dll windows:10 windows x64 arch:x64

    02f6fc922b46bf9b846109dcfb249d30


    Headers

    Imports

    Exports

    Sections

  • aclui.dll
    .dll windows:10 windows x64 arch:x64

    59f7455356c01233afa6827d58cb51ad


    Headers

    Imports

    Exports

    Sections

  • acmigration.dll
    .dll windows:10 windows x64 arch:x64

    e35984eb5738b38ef3ddf9e25ca83dc3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • acppage.dll
    .dll windows:10 windows x64 arch:x64

    933a8964155be2ea2e6c85c5283de581


    Headers

    Imports

    Exports

    Sections

  • acproxy.dll
    .dll windows:10 windows x64 arch:x64

    eee13c6d596c6e9cdf034c605eafec01


    Headers

    Imports

    Exports

    Sections

  • activeds.dll
    .dll windows:10 windows x64 arch:x64

    f9769bfa5983dfe04bf13b2189bef51b


    Headers

    Imports

    Exports

    Sections

  • actxprxy.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    68f3a834aaf7648941eea439c99c9589


    Headers

    Imports

    Exports

    Sections

  • adhapi.dll
    .dll windows:10 windows x64 arch:x64

    32958480369cebb74256d975884cd863


    Headers

    Imports

    Exports

    Sections

  • adhsvc.dll
    .dll windows:10 windows x64 arch:x64

    e4d10e0b84c5d57cda18c25c55803a06


    Headers

    Imports

    Exports

    Sections

  • adprovider.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    f7c0c383d927ae707c617e61d61e78c4


    Headers

    Imports

    Exports

    Sections

  • adsldp.dll
    .dll windows:10 windows x64 arch:x64

    413b698a5a04abdc66d2a831bd5786af


    Headers

    Imports

    Exports

    Sections

  • adsldpc.dll
    .dll windows:10 windows x64 arch:x64

    7179ba3c109cddec2eca5df68bf7dc63


    Headers

    Imports

    Exports

    Sections

  • adsmsext.dll
    .dll windows:10 windows x64 arch:x64

    5cf201375eafa8a286b6cb718aa1bb48


    Headers

    Imports

    Exports

    Sections

  • adsnt.dll
    .dll windows:10 windows x64 arch:x64

    c247c873484e4c098a53f0aff1e5bc8c


    Headers

    Imports

    Exports

    Sections

  • adtschema.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • advapi32.dll
    .dll windows:10 windows x64 arch:x64

    b55125ec5b4041cf9eacca6f0fe107a3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • advapi32res.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • advpack.dll
    .dll windows:10 windows x64 arch:x64

    9f54aec8ee18f83bbe291a2f6d33e648


    Headers

    Imports

    Exports

    Sections

  • aeevts.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • aeinv.dll
    .dll windows:10 windows x64 arch:x64

    139a17fbfba895e061178f590801dbc9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • aemarebackup.dll
    .dll windows:10 windows x64 arch:x64

    8c13c89d9b2658da5d94355c8a2139dc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • aepic.dll
    .dll windows:10 windows x64 arch:x64

    23080abadd79be0da68e451c0562e73c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • agentactivationruntime.dll
    .dll windows:10 windows x64 arch:x64

    2de7a2e5bf54559da8c4fe9c4815a450


    Headers

    Imports

    Exports

    Sections

  • agentactivationruntimewindows.dll
    .dll windows:10 windows x64 arch:x64

    4f93e45132a3dd575e643075dd3d69d0


    Headers

    Imports

    Exports

    Sections

  • amsi.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    53e09f2655b3f6741619cfa138d5f104


    Headers

    Imports

    Exports

    Sections

  • amsiproxy.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    4ae77a4cc9d0e7cf01dedd77e1c306d6


    Headers

    Imports

    Exports

    Sections

  • amstream.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    6661408b41e275d036365271094ac2ac


    Headers

    Imports

    Exports

    Sections

  • apds.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    5289fa55d61484a1bb36e121234c0750


    Headers

    Imports

    Exports

    Sections

  • apisampling.dll
    .dll windows:10 windows x64 arch:x64

    09284ff709bb8ea22e2731e336b0ca00


    Headers

    Imports

    Exports

    Sections

  • apisetschema.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • apphelp.dll
    .dll windows:10 windows x64 arch:x64

    4b94109ad84c4a2b2bcebfecced9952c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • appidapi.dll
    .dll windows:10 windows x64 arch:x64

    8ce3f3bcbecf210156c42b2a28ea2f0b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • appidsvc.dll
    .dll windows:10 windows x64 arch:x64

    130d823cbfba19712e75a46c7fe24afc


    Headers

    Imports

    Exports

    Sections

  • appinfo.dll
    .dll windows:10 windows x64 arch:x64

    e0944d835a98a45cefecedae3535f5e4


    Headers

    Imports

    Exports

    Sections

  • appinfoext.dll
    .dll windows:10 windows x64 arch:x64

    cb4e306d92ffeb0429e68cbc8abaab4a


    Headers

    Imports

    Exports

    Sections

  • wsmprovhost.exe
    .exe windows:10 windows x64 arch:x64

    35c50cc7209a454799c998cde17c6e24


    Headers

    Imports

    Exports

    Sections

  • wsqmcons.exe
    .exe windows:10 windows x64 arch:x64

    cf044a6a8ebba03fd7a29679767e5281


    Headers

    Imports

    Sections

  • wuapihost.exe
    .exe windows:10 windows x64 arch:x64

    1cc79f8314a839e6f87b12ee994e1c4b


    Code Sign

    Headers

    Imports

    Sections

  • wuauclt.exe
    .exe windows:10 windows x64 arch:x64

    7f88106d6a8be4bc98d3aba7fa4b6f89


    Code Sign

    Headers

    Imports

    Sections

  • wusa.exe
    .exe windows:10 windows x64 arch:x64

    cbeb5956a9780dfadbdb4a7b7a1d8925


    Headers

    Imports

    Sections

  • xcopy.exe
    .exe windows:10 windows x64 arch:x64

    1effe65a4f251e4ae9fa8551f9fcdabb


    Headers

    Imports

    Sections

  • xwizard.exe
    .exe windows:10 windows x64 arch:x64

    a64091098129483c3d876a86009bbe1e


    Headers

    Imports

    Sections