2026-06-02_e1798cdfd79904e016e5b0fde7a042ed_elex_mespinoza

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-02_e1798cdfd79904e016e5b0fde7a042ed_elex_mespinoza
Size 1.7MB
Sample260602-c7rxpsdv4p
SHA256 c6388525c750d804f425dd7e926f742141c1ee4fa98409a3878264a36ff25c3b
MD5 e1798cdfd79904e016e5b0fde7a042ed
SHA1 49d1f864bd56eaa7c4df39c820a685453c1f5682
SHA512 a571c99e807b553cd391d8e2f6f4d5bd21bd3d94dd838460c87e35f57ce6f18fbf6c932652eb603297afdbe87baf3f9bf444101afd12d90ec361edc312e17454
SSDEEP 24576:MqzyfMAfnZ8L/x8MT9BYnQ/tbw/2Mkjy6Fr7g0oU:5b/BpBYQ/lFTjN4
TLSH
T1E7859E203626C17AD76042F04D79DADE506C9EA50BA5A5CBF3D83EBC6A711C31B3742E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-02_e1798cdfd79904e016e5b0fde7a042ed_elex_mespinoza

File Explorer

2026-06-02_e1798cdfd79904e016e5b0fde7a042ed_elex_mespinoza

.exe 1.7MB

2026-06-02_e1798cdfd79904e016e5b0fde7a042ed_elex_mespinoza

IMPHASH 7f152067b282a9d5c8b4e54a45db24b5
SHA256 c6388525c750d804f425dd7e926f742141c1ee4fa98409a3878264a36ff25c3b
MD5 e1798cdfd79904e016e5b0fde7a042ed
SHA1 49d1f864bd56eaa7c4df39c820a685453c1f5682
SHA512 a571c99e807b553cd391d8e2f6f4d5bd21bd3d94dd838460c87e35f57ce6f18fbf6c932652eb603297afdbe87baf3f9bf444101afd12d90ec361edc312e17454
SSDEEP 24576:MqzyfMAfnZ8L/x8MT9BYnQ/tbw/2Mkjy6Fr7g0oU:5b/BpBYQ/lFTjN4
TLSH
T1E7859E203626C17AD76042F04D79DADE506C9EA50BA5A5CBF3D83EBC6A711C31B3742E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

320839

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\temp\VS2015_Migration\acwebbrowser_proxyfix\main\main\build\bin\Release\x86\acwebbrowser.pdb

shlwapi

PathAppendW PathRemoveFileSpecW

kernel32

GetModuleHandleW GetProcAddress LoadLibraryW GetCommandLineW SetErrorMode GetCurrentProcessId IsDebuggerPresent SetEvent ResetEvent CreateEventW WaitForMultipleObjects HeapDestroy HeapAlloc HeapReAlloc HeapFree GetModuleFileNameW GetProcessHeap FindResourceExW LoadResource LockResource SizeofResource GlobalAlloc GlobalLock GlobalUnlock FindResourceW WideCharToMultiByte RaiseException GetLastError InitializeCriticalSectionEx DeleteCriticalSection LeaveCriticalSection HeapSize LoadLibraryExA InitializeCriticalSectionAndSpinCount VirtualQuery FreeLibrary VirtualProtect GetSystemInfo InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId QueryPerformanceCounter GetStartupInfoW IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter WaitForSingleObjectEx CloseHandle OutputDebugStringW MultiByteToWideChar EnterCriticalSection

advapi32

RegOpenKeyExW RegGetValueW

shell32

SHGetFolderPathW ShellExecuteW

ole32

RevokeDragDrop

user32

DefWindowProcW MessageBoxW IsWindowEnabled IsWindow SetProcessDPIAware OpenClipboard CloseClipboard SetClipboardData EmptyClipboard LoadIconW LoadCursorW GetParent SetWindowLongW GetWindowLongW EndPaint BeginPaint UpdateWindow EnableWindow EndDeferWindowPos CreateWindowExW SetWindowTextW LoadStringW PostMessageW CallWindowProcW ShowWindow BeginDeferWindowPos PostQuitMessage SendMessageW RegisterClassExW GetAncestor GetWindow DeferWindowPos GetWindowRect GetClientRect

libcef

cef_string_utf16_set cef_string_utf8_clear cef_string_utf16_clear cef_string_utf8_to_utf16 cef_string_utf16_to_utf8 cef_string_utf8_set cef_string_utf16_cmp cef_string_userfree_utf16_free cef_string_list_alloc cef_string_list_free cef_post_task cef_register_extension cef_execute_process cef_initialize cef_shutdown cef_run_message_loop cef_quit_message_loop cef_add_cross_origin_whitelist_entry cef_parse_url cef_api_hash cef_v8value_create_int cef_v8value_create_string cef_string_map_alloc cef_string_map_free cef_command_line_create cef_command_line_get_global cef_process_message_create cef_cookie_manager_get_global_manager cef_v8context_get_current_context cef_v8context_in_context cef_browser_host_create_browser cef_browser_host_create_browser_sync cef_string_list_size cef_string_list_value cef_string_list_append cef_string_map_size cef_string_map_key cef_string_map_value cef_string_map_append cef_string_multimap_size cef_string_multimap_key cef_string_multimap_value cef_string_multimap_append cef_string_multimap_alloc cef_string_multimap_free cef_string_list_copy ?CefDoTasks@@YAXXZ

msvcp140

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@ ??_7ios_base@std@@6B@ ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z ?_Xbad_alloc@std@@YAXXZ ?_Xlength_error@std@@YAXPBD@Z ?_Xout_of_range@std@@YAXPBD@Z ??4?$_Yarn@D@std@@QAEAAV01@PBD@Z ??Bid@locale@std@@QAEIXZ ?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z ?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z ?_Init@locale@std@@CAPAV_Locimp@12@_N@Z ?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z ??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@I@Z ??1?$codecvt@_WDU_Mbstatet@@@std@@MAE@XZ ?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ ?_Incref@facet@locale@std@@UAEXXZ ?_Raise_handler@std@@3P6AXABVexception@stdext@@@ZA ?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ ?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ ?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z ?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z ?_BADOFF@std@@3_JB ?_Xbad_function_call@std@@YAXXZ ?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ

vcruntime140

__vcrt_InitializeCriticalSectionEx _CxxThrowException _purecall __std_terminate memchr memset memcpy __CxxFrameHandler3 __RTDynamicCast _except_handler4_common __std_exception_destroy memmove __std_exception_copy

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table _register_onexit_function _crt_atexit _cexit _seh_filter_exe _set_app_type _configure_wide_argv _initialize_wide_environment _get_wide_winmain_command_line _initterm _initterm_e exit _exit _invoke_watson _c_exit _register_thread_local_exe_atexit_callback _errno _invalid_parameter_noinfo_noreturn _invalid_parameter_noinfo _controlfp_s terminate

api-ms-win-crt-filesystem-l1-1-0

_waccess_s

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode __stdio_common_vswprintf __stdio_common_vsscanf __stdio_common_vsprintf_s __stdio_common_vswprintf_s _getcwd __stdio_common_vswscanf __stdio_common_vsprintf

api-ms-win-crt-convert-l1-1-0

_wtoi _itow_s

api-ms-win-crt-string-l1-1-0

wcsnlen strpbrk _strdup wmemcpy_s strcpy_s _wcslwr_s

api-ms-win-crt-environment-l1-1-0

_wgetenv_s getenv_s

api-ms-win-crt-heap-l1-1-0

free _callnewh malloc _set_new_mode calloc _recalloc

api-ms-win-crt-math-l1-1-0

_except1 modf __setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

??0AddressChangedEventHandler@BrowserComponents@Autodesk@@QAE@XZ ??0AuthCredentialsEventHandler@BrowserComponents@Autodesk@@QAE@XZ ??0CAdCefExtension@@QAE@ABV0@@Z ??0CAdCefExtension@@QAE@XZ ??0CallResult@BrowserComponents@Autodesk@@QAE@$$QAV012@@Z ??0CallResult@BrowserComponents@Autodesk@@QAE@ABV012@@Z ??0Exception@BrowserComponents@Autodesk@@QAE@$$QAV012@@Z ??0Exception@BrowserComponents@Autodesk@@QAE@ABV012@@Z ??0Exception@BrowserComponents@Autodesk@@QAE@W4ErrorStatus@12@PBD@Z ??0FrameLoadEndedEventHandler@BrowserComponents@Autodesk@@QAE@XZ ??0FrameLoadStartedEventHandler@BrowserComponents@Autodesk@@QAE@XZ ??0IAdCefNotifier@@QAE@$$QAV0@@Z ??0IAdCefNotifier@@QAE@ABV0@@Z ??0IAdCefNotifier@@QAE@XZ ??0InvokeTarget@BrowserComponents@Autodesk@@IAE@PBD@Z ??0JsonRpcProxyReadyStateChangeEventHandler@BrowserComponents@Autodesk@@QAE@XZ ??0MulticastDelegate@BrowserComponents@Autodesk@@IAE@PAVMulticastDelegateImp@@@Z ??0NavigationStateChangedEventHandler@BrowserComponents@Autodesk@@QAE@XZ ??0TitleChangedEventHandler@BrowserComponents@Autodesk@@QAE@XZ ??1AddressChangedEventHandler@BrowserComponents@Autodesk@@UAE@XZ ??1AuthCredentialsEventHandler@BrowserComponents@Autodesk@@UAE@XZ ??1BrowserProxy@BrowserComponents@Autodesk@@QAE@XZ ??1BrowserWindowProxy@BrowserComponents@Autodesk@@UAE@XZ ??1BrowserWindowProxyIterator@BrowserComponents@Autodesk@@QAE@XZ ??1CAdCefExtension@@UAE@XZ ??1CallResult@BrowserComponents@Autodesk@@QAE@XZ ??1Exception@BrowserComponents@Autodesk@@QAE@XZ ??1FrameLoadEndedEventHandler@BrowserComponents@Autodesk@@UAE@XZ ??1FrameLoadStartedEventHandler@BrowserComponents@Autodesk@@UAE@XZ ??1InvokeTarget@BrowserComponents@Autodesk@@UAE@XZ ??1JsonRpcProxyReadyStateChangeEventHandler@BrowserComponents@Autodesk@@UAE@XZ ??1MulticastDelegate@BrowserComponents@Autodesk@@MAE@XZ ??1NavigationStateChangedEventHandler@BrowserComponents@Autodesk@@UAE@XZ ??1ScriptableObject@BrowserComponents@Autodesk@@MAE@XZ ??1TitleChangedEventHandler@BrowserComponents@Autodesk@@UAE@XZ ??4CAdCefExtension@@QAEAAV0@ABV0@@Z ??4CallResult@BrowserComponents@Autodesk@@QAEAAV012@ABV012@@Z ??4Exception@BrowserComponents@Autodesk@@QAEAAV012@ABV012@@Z ??4IAdCefNotifier@@QAEAAV0@$$QAV0@@Z ??4IAdCefNotifier@@QAEAAV0@ABV0@@Z ??8CallResult@BrowserComponents@Autodesk@@QAE_NABV012@@Z ??8Exception@BrowserComponents@Autodesk@@QAE_NABV012@@Z ??9CallResult@BrowserComponents@Autodesk@@QAE_NABV012@@Z ??9Exception@BrowserComponents@Autodesk@@QAE_NABV012@@Z ??_7CAdCefExtension@@6B@ ??_7IAdCefNotifier@@6B@ ?Execute@IAdCefNotifier@@UAE_NABV?$CefStringBase@UCefStringTraitsUTF16@@@@V?$CefRefPtr@VCefV8Value@@@@ABV?$vector@V?$CefRefPtr@VCefV8Value@@@@V?$allocator@V?$CefRefPtr@VCefV8Value@@@@@std@@@std@@AAV3@AAV2@@Z ?GetAuthCredentials@IAdCefNotifier@@UAE_NV?$CefRefPtr@VCefBrowser@@@@V?$CefRefPtr@VCefFrame@@@@_NABV?$CefStringBase@UCefStringTraitsUTF16@@@@H33V?$CefRefPtr@VCefAuthCallback@@@@@Z ?GetIPC@CAdCefExtension@@QAEPAVJsonRpcProxy@BrowserComponents@Autodesk@@XZ ?GetJSAppCode@CAdCefExtension@@UAE?AV?$CefStringBase@UCefStringTraitsUTF16@@@@XZ ?GetJSHostName@CAdCefExtension@@UAE?AV?$CefStringBase@UCefStringTraitsUTF16@@@@XZ ?GetModule@CAdCefExtension@@QAEPAUHINSTANCE__@@XZ ?OnAddressChange@IAdCefNotifier@@UAE_NV?$CefRefPtr@VCefBrowser@@@@V?$CefRefPtr@VCefFrame@@@@ABV?$CefStringBase@UCefStringTraitsUTF16@@@@@Z ?OnAfterCreated@IAdCefNotifier@@UAE_NV?$CefRefPtr@VCefBrowser@@@@@Z ?OnBeforeChildProcessLaunch@IAdCefNotifier@@UAE_NV?$CefRefPtr@VCefCommandLine@@@@@Z ?OnBeforeCommandLineProcessing@IAdCefNotifier@@UAE_NABV?$CefStringBase@UCefStringTraitsUTF16@@@@V?$CefRefPtr@VCefCommandLine@@@@@Z ?OnBeforeContextMenu@IAdCefNotifier@@UAE_NV?$CefRefPtr@VCefBrowser@@@@V?$CefRefPtr@VCefFrame@@@@V?$CefRefPtr@VCefContextMenuParams@@@@V?$CefRefPtr@VCefMenuModel@@@@@Z ?OnBeforeNavigation@IAdCefNotifier@@UAE_NV?$CefRefPtr@VCefBrowser@@@@V?$CefRefPtr@VCefFrame@@@@V?$CefRefPtr@VCefRequest@@@@W4cef_navigation_type_t@@_N@Z ?OnBeforeResourceLoad@IAdCefNotifier@@UAE_NV?$CefRefPtr@VCefBrowser@@@@V?$CefRefPtr@VCefFrame@@@@V?$CefRefPtr@VCefRequest@@@@@Z ?OnBrowserCreated@IAdCefNotifier@@UAE_NV?$CefRefPtr@VCefBrowser@@@@_N@Z ?OnBrowserDestroyed@IAdCefNotifier@@UAE_NV?$CefRefPtr@VCefBrowser@@@@@Z ?OnContextCreated@IAdCefNotifier@@UAE_NV?$CefRefPtr@VCefBrowser@@@@V?$CefRefPtr@VCefFrame@@@@V?$CefRefPtr@VCefV8Context@@@@@Z ?OnContextInitialized@IAdCefNotifier@@UAE_NV?$CefRefPtr@VCefCookieManager@@@@@Z ?OnContextReleased@IAdCefNotifier@@UAE_NV?$CefRefPtr@VCefBrowser@@@@V?$CefRefPtr@VCefFrame@@@@V?$CefRefPtr@VCefV8Context@@@@@Z ?OnFocusedNodeChanged@IAdCefNotifier@@UAE_NV?$CefRefPtr@VCefBrowser@@@@V?$CefRefPtr@VCefFrame@@@@V?$CefRefPtr@VCefDOMNode@@@@@Z ?OnLoadEnd@IAdCefNotifier@@UAE_NV?$CefRefPtr@VCefBrowser@@@@V?$CefRefPtr@VCefFrame@@@@H@Z ?OnLoadError@IAdCefNotifier@@UAE_NV?$CefRefPtr@VCefBrowser@@@@V?$CefRefPtr@VCefFrame@@@@W4cef_errorcode_t@@ABV?$CefStringBase@UCefStringTraitsUTF16@@@@3@Z ?OnLoadStart@IAdCefNotifier@@UAE_NV?$CefRefPtr@VCefBrowser@@@@V?$CefRefPtr@VCefFrame@@@@@Z ?OnLoadingStateChange@IAdCefNotifier@@UAE_NV?$CefRefPtr@VCefBrowser@@@@_N11@Z ?OnProcessMessageReceived@IAdCefNotifier@@UAE_NV?$CefRefPtr@VCefBrowser@@@@W4cef_process_id_t@@V?$CefRefPtr@VCefProcessMessage@@@@@Z ?OnRegisterCustomSchemes@IAdCefNotifier@@UAE_NV?$CefRefPtr@VCefSchemeRegistrar@@@@@Z ?OnRenderProcessTerminated@IAdCefNotifier@@UAE_NV?$CefRefPtr@VCefBrowser@@@@W4cef_termination_status_t@@@Z ?OnRenderProcessThreadCreated@IAdCefNotifier@@UAE_NV?$CefRefPtr@VCefListValue@@@@@Z ?OnRenderThreadCreated@IAdCefNotifier@@UAE_NV?$CefRefPtr@VCefListValue@@@@@Z ?OnTitleChange@IAdCefNotifier@@UAE_NV?$CefRefPtr@VCefBrowser@@@@ABV?$CefStringBase@UCefStringTraitsUTF16@@@@@Z ?OnUncaughtException@IAdCefNotifier@@UAE_NV?$CefRefPtr@VCefBrowser@@@@V?$CefRefPtr@VCefFrame@@@@V?$CefRefPtr@VCefV8Context@@@@V?$CefRefPtr@VCefV8Exception@@@@V?$CefRefPtr@VCefV8StackTrace@@@@@Z ?OnWebKitInitialized@IAdCefNotifier@@UAE_NPAVCefV8Handler@@@Z ?ReportError@IAdCefNotifier@@UAE_NABV?$CefStringBase@UCefStringTraitsUTF16@@@@@Z ?SetIPC@CAdCefExtension@@QAEXPAVJsonRpcProxy@BrowserComponents@Autodesk@@@Z ?SetModule@CAdCefExtension@@QAEXPAUHINSTANCE__@@@Z ?addEventHandler@BrowserProxy@BrowserComponents@Autodesk@@QAEXPAVAuthCredentialsEventHandler@23@@Z ?addEventHandler@BrowserWindowProxy@BrowserComponents@Autodesk@@QAEXPAVAddressChangedEventHandler@23@@Z ?addEventHandler@BrowserWindowProxy@BrowserComponents@Autodesk@@QAEXPAVFrameLoadEndedEventHandler@23@@Z ?addEventHandler@BrowserWindowProxy@BrowserComponents@Autodesk@@QAEXPAVFrameLoadStartedEventHandler@23@@Z ?addEventHandler@BrowserWindowProxy@BrowserComponents@Autodesk@@QAEXPAVNavigationStateChangedEventHandler@23@@Z ?addEventHandler@BrowserWindowProxy@BrowserComponents@Autodesk@@QAEXPAVTitleChangedEventHandler@23@@Z ?addImpl@MulticastDelegate@BrowserComponents@Autodesk@@CAXAAPAV123@PAV123@@Z ?channelManagerName@BrowserProxy@BrowserComponents@Autodesk@@SAPB_WXZ ?channelName@JsonRpcProxy@BrowserComponents@Autodesk@@SAPB_WXZ ?connectOneWindow@BrowserProxy@BrowserComponents@Autodesk@@SAPAV123@HPAVIpcAsyncDelegate@Ipc@Autocad@@PBDP6APAVScriptableObject@23@PAVJsonRpcProxy@23@PAX@Z@Z ?create@BrowserProxy@BrowserComponents@Autodesk@@SAPAV123@PB_W0PAVIpcAsyncDelegate@Ipc@Autocad@@@Z ?createBrowserWindow@BrowserProxy@BrowserComponents@Autodesk@@QAEPAVBrowserWindowProxy@23@PAUHWND__@@PB_W@Z ?createFailureResult@CallResult@BrowserComponents@Autodesk@@SA?AV123@W4ErrorStatus@23@PBD@Z ?createProxy@JsonRpcProxy@BrowserComponents@Autodesk@@SAPAV123@XZ ?createSuccessResult@CallResult@BrowserComponents@Autodesk@@SA?AV123@PBD@Z ?current@BrowserWindowProxyIterator@BrowserComponents@Autodesk@@QAEPAVBrowserWindowProxy@23@XZ ?deserialize@CallResult@BrowserComponents@Autodesk@@SA?AV123@PBD@Z ?done@BrowserWindowProxyIterator@BrowserComponents@Autodesk@@QAE_NXZ ?execute@AddressChangedEventHandler@BrowserComponents@Autodesk@@SAXPAV123@PAVBrowserWindowProxy@23@PB_W@Z ?execute@AuthCredentialsEventHandler@BrowserComponents@Autodesk@@SA?AVAuthCredentialsRet@123@PAV123@ABVAuthCredentialsArgs@123@@Z ?execute@FrameLoadEndedEventHandler@BrowserComponents@Autodesk@@SAXPAV123@PAVBrowserWindowProxy@23@@Z ?execute@FrameLoadStartedEventHandler@BrowserComponents@Autodesk@@SAXPAV123@PAVBrowserWindowProxy@23@@Z ?execute@InvokeTarget@BrowserComponents@Autodesk@@SA?AVCallResult@23@PAV123@PBD@Z ?execute@JsonRpcProxyReadyStateChangeEventHandler@BrowserComponents@Autodesk@@SAXPAV123@PAVJsonRpcProxy@23@W4Readiness@123@@Z ?execute@NavigationStateChangedEventHandler@BrowserComponents@Autodesk@@SAXPAV123@PAVBrowserWindowProxy@23@_N2@Z ?execute@TitleChangedEventHandler@BrowserComponents@Autodesk@@SAXPAV123@PAVBrowserWindowProxy@23@PB_W@Z ?getOrCreateScriptableObject@BrowserWindowProxy@BrowserComponents@Autodesk@@UAEPAVScriptableObject@23@PBD_N@Z ?getUserData@BrowserWindowProxy@BrowserComponents@Autodesk@@QAEPAXPBD@Z ?getWindow@BrowserWindowProxy@BrowserComponents@Autodesk@@QBEPAUHWND__@@XZ ?invoke@BrowserWindowProxy@BrowserComponents@Autodesk@@UAE?AVCallResult@23@PBD0_N@Z ?invokeAllAsync@BrowserProxy@BrowserComponents@Autodesk@@QAE_NPBD0@Z ?invokeAsync@BrowserWindowProxy@BrowserComponents@Autodesk@@UAE_NPBD0PAVInvokeTarget@23@1@Z ?message@Exception@BrowserComponents@Autodesk@@QBEPBDXZ ?name@InvokeTarget@BrowserComponents@Autodesk@@QBEPBDXZ ?navigate@BrowserWindowProxy@BrowserComponents@Autodesk@@QAEXW4Value@NavigationDirection@23@@Z ?navigateTo@BrowserWindowProxy@BrowserComponents@Autodesk@@QAEXPB_W@Z ?newWindowIterator@BrowserProxy@BrowserComponents@Autodesk@@QAEPAVBrowserWindowProxyIterator@23@XZ ?next@BrowserWindowProxyIterator@BrowserComponents@Autodesk@@QAEXXZ ?next@MulticastDelegate@BrowserComponents@Autodesk@@IBEPAV123@XZ ?parseDottedName@JsonRpcProxy@BrowserComponents@Autodesk@@SAXPADAAPBD1@Z ?postMessage@JsonRpcProxy@BrowserComponents@Autodesk@@QAE_NPBD@Z ?registerDispatcher@JsonRpcProxy@BrowserComponents@Autodesk@@QAEXPAVDelegate@23@@Z ?registerScriptableObject@BrowserProxy@BrowserComponents@Autodesk@@QAE_NPBDP6APAVScriptableObject@23@PAVJsonRpcProxy@23@PAX@Z2@Z ?registerScriptableObject@BrowserWindowProxy@BrowserComponents@Autodesk@@UAE_NPBDP6APAVScriptableObject@23@PAVJsonRpcProxy@23@PAX@Z2@Z ?reload@BrowserWindowProxy@BrowserComponents@Autodesk@@QAEXXZ ?removeEventHandler@BrowserProxy@BrowserComponents@Autodesk@@QAEXPAVAuthCredentialsEventHandler@23@@Z ?removeEventHandler@BrowserWindowProxy@BrowserComponents@Autodesk@@QAEXPAVAddressChangedEventHandler@23@@Z ?removeEventHandler@BrowserWindowProxy@BrowserComponents@Autodesk@@QAEXPAVFrameLoadEndedEventHandler@23@@Z ?removeEventHandler@BrowserWindowProxy@BrowserComponents@Autodesk@@QAEXPAVFrameLoadStartedEventHandler@23@@Z ?removeEventHandler@BrowserWindowProxy@BrowserComponents@Autodesk@@QAEXPAVNavigationStateChangedEventHandler@23@@Z ?removeEventHandler@BrowserWindowProxy@BrowserComponents@Autodesk@@QAEXPAVTitleChangedEventHandler@23@@Z ?removeImpl@MulticastDelegate@BrowserComponents@Autodesk@@CAXAAPAV123@PAV123@@Z ?result@CallResult@BrowserComponents@Autodesk@@QBEPBDXZ ?serialize@CallResult@BrowserComponents@Autodesk@@QBEPBDXZ ?setUserData@BrowserWindowProxy@BrowserComponents@Autodesk@@QAEPAXPBDPAX@Z ?showDevTools@BrowserProxy@BrowserComponents@Autodesk@@QAEXPAVBrowserWindowProxy@23@@Z ?status@CallResult@BrowserComponents@Autodesk@@QBE?AW4ErrorStatus@23@XZ ?status@Exception@BrowserComponents@Autodesk@@QBE?AW4ErrorStatus@23@XZ ?unregisterScriptableObject@BrowserProxy@BrowserComponents@Autodesk@@QAE_NPBD@Z ?unregisterScriptableObject@BrowserWindowProxy@BrowserComponents@Autodesk@@UAE_NPBD@Z

Name

.text

Size

341KB

Virtual Size

341KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

87KB

Virtual Size

87KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

92B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

49KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-02_e1798cdfd79904e016e5b0fde7a042ed_elex_mespinoza

shlwapi

kernel32

advapi32

shell32

ole32

user32

libcef

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic