d4ed40ae7191470d1711c765e8d9dab70cfdc6c3d4da48b941135cbf8762b8d8

Login
Reports

Overview

overview

Static

static

exodus larp HQ.zip

windows11-ltsc_2024-x64

exodus lar...se.dll

windows11-ltsc_2024-x64

exodus lar...ls.dll

windows11-ltsc_2024-x64

exodus lar...rt.dll

windows11-ltsc_2024-x64

exodus lar...op.dll

windows11-ltsc_2024-x64

exodus lar...gs.dll

windows11-ltsc_2024-x64

exodus lar...er.dll

windows11-ltsc_2024-x64

exodus lar...op.dll

windows11-ltsc_2024-x64

exodus lar...ml.dll

windows11-ltsc_2024-x64

exodus lar...up.dll

windows11-ltsc_2024-x64

exodus lar...al.dll

windows11-ltsc_2024-x64

exodus lar...om.dll

windows11-ltsc_2024-x64

exodus lar...ve.dll

windows11-ltsc_2024-x64

exodus lar...GL.dll

windows11-ltsc_2024-x64

exodus lar...UI.dll

windows11-ltsc_2024-x64

exodus lar...ol.dll

windows11-ltsc_2024-x64

exodus lar...ia.dll

windows11-ltsc_2024-x64

exodus lar...nt.dll

windows11-ltsc_2024-x64

exodus lar...32.dll

windows11-ltsc_2024-x64

exodus lar...11.dll

windows11-ltsc_2024-x64

exodus lar...ia.dll

windows11-ltsc_2024-x64

exodus lar...ll.dll

windows11-ltsc_2024-x64

exodus lar...ll.pdb

windows11-ltsc_2024-x64

exodus lar...ta.dll

windows11-ltsc_2024-x64

exodus lar...et.exe

windows11-ltsc_2024-x64

exodus lar...s.json

windows11-ltsc_2024-x64

exodus lar...us.exe

windows11-ltsc_2024-x64

exodus lar...us.exe

windows11-ltsc_2024-x64

exodus lar...us.pdb

windows11-ltsc_2024-x64

exodus lar...g.json

windows11-ltsc_2024-x64

exodus lar...rp.dll

windows11-ltsc_2024-x64

exodus lar...me.dll

windows11-ltsc_2024-x64

Analysis

max time kernel
899s
max time network
461s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/08/2026, 18:58

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

exodus larp HQ.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

Behavioral task

behavioral2

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/Avalonia.Base.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral3

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/Avalonia.Controls.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral4

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/Avalonia.DesignerSupport.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral5

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/Avalonia.Desktop.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral6

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/Avalonia.Dialogs.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral7

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/Avalonia.Fonts.Inter.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral8

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/Avalonia.FreeDesktop.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral9

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/Avalonia.Markup.Xaml.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral10

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/Avalonia.Markup.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral11

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/Avalonia.Metal.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral12

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/Avalonia.MicroCom.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral13

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/Avalonia.Native.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral14

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/Avalonia.OpenGL.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral15

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/Avalonia.ReactiveUI.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral16

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/Avalonia.Remote.Protocol.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral17

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/Avalonia.Skia.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral18

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/Avalonia.Themes.Fluent.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral19

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/Avalonia.Win32.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral20

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/Avalonia.X11.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral21

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/Avalonia.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral22

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/CompositionScroll.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral23

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/CompositionScroll.pdb

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral24

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/DynamicData.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral25

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/Exodus Wallet.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

900 seconds

persistence pyinstaller

Behavioral task

behavioral26

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/Exodus.deps.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral27

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/Exodus.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral28

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/Exodus.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral29

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/Exodus.pdb

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

16 signatures

900 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral30

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/Exodus.runtimeconfig.json

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

5 signatures

900 seconds

discovery execution

Behavioral task

behavioral31

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/HarfBuzzSharp.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral32

Sample

exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/MicroCom.Runtime.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

15 signatures

900 seconds

adware discovery persistence ransomware spyware

Report Analysis Logs

General

Target
exodus larp HQ/exodus larp HQ/exodus larp HQ/net7.0-windows/Avalonia.Skia.dll
Size 105KB
Sample260806-xmkccassct
SHA256 d4ed40ae7191470d1711c765e8d9dab70cfdc6c3d4da48b941135cbf8762b8d8
MD5 6e6b5f43a3873b947a3a56df89e07ef3
SHA1 82a81bea76de0dd967c685e87752903cb26380a9
SHA512 e03e6f91858c100d388c9b4d248e7490a938a241296a12fab04c486a3c463ff69a692ca4e7ff531bf528245526757f1ca3b597daae983ad2bb496c9960338f0a
SSDEEP 1536:RcuHILEqgbWdF24PVwOknuUPbzmg1fXt+GVmpidtxSS1Mk2gRiU9p4Y66Z:R+fawQhGGVJdtxS+MknYU4Yj
TLSH
T111B36C5917198637EA9F0A7AB0F434500771F653F5E3EB4A4D80B6AE2CB33904E15367
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\exodus larp HQ\exodus larp HQ\exodus larp HQ\net7.0-windows\Avalonia.Skia.dll",#1
1⤵
PID:4912

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1596

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:2912

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads