download:

inSSIDerSetup.exe

Full analysis: https://app.any.run/tasks/6c6a58fd-6257-4b45-ba6d-27638530b576
Verdict: Malicious activity
Analysis date: April 20, 2020, 14:06:02
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Indicators:
MIME: application/x-dosexec
File info: PE32 executable (GUI) Intel 80386, for MS Windows
MD5:

8BA3ED34E0823BB3EDD4495D5FCC99A2

SHA1:

C2570CFF55F5640D854F3D3B6088B01EA099B76A

SHA256:

C9B431BCC6EC36119C9DCFAF5D90F4BE1A4CD716DAAA1DC020907B49F3A75E79

SSDEEP:

786432:GVRxq/CflkhKhGNirFhYpmKmHMryJ8tbEMZw8SR:GVRxmGlVcNir4AKmsGJ8tvu8S

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Application was dropped or rewritten from another process

      • Update.exe (PID: 1756)
      • inSSIDer.exe (PID: 3972)
      • inSSIDer.exe (PID: 2532)
      • inSSIDer.exe (PID: 1248)
      • inSSIDer.exe (PID: 3920)

    • Loads dropped or rewritten executable

      • inSSIDer.exe (PID: 3920)
      • inSSIDer.exe (PID: 1248)
      • inSSIDer.exe (PID: 2532)

  • SUSPICIOUS

    • Reads Environment values

      • Update.exe (PID: 1756)
      • inSSIDer.exe (PID: 3920)

    • Creates files in the user directory

      • inSSIDer.exe (PID: 2532)

    • Executable content was dropped or overwritten

      • inSSIDerSetup.exe (PID: 3176)
      • Update.exe (PID: 1756)

    • Creates files in the program directory

      • inSSIDer.exe (PID: 1248)
      • inSSIDer.exe (PID: 3920)

  • INFO

    • Manual execution by user

      • inSSIDer.exe (PID: 3972)

    • Reads settings of System Certificates

      • Update.exe (PID: 1756)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win32 Executable (generic) (52.9)
.exe | Generic Win/DOS Executable (23.5)
.exe | DOS Executable Generic (23.5)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2019:02:08 03:59:34+01:00
PEType: PE32
LinkerVersion: 14.16
CodeSize: 117248
InitializedDataSize: 32817664
UninitializedDataSize: -
EntryPoint: 0xab0b
OSVersion: 6
ImageVersion: -
SubsystemVersion: 6
Subsystem: Windows GUI
FileVersionNumber: 5.2.25.0
ProductVersionNumber: 5.2.25.0
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Windows NT 32-bit
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: English (U.S.)
CharacterSet: Unicode
FileDescription: inSSIDer
FileVersion: 5.2.25
InternalName: Setup.exe
LegalCopyright: Copyright 2019
OriginalFileName: Setup.exe
ProductName: inSSIDer
ProductVersion: 5.2.25
SquirrelAwareVersion: 1
CompanyName: MetaGeek, LLC

Summary

Architecture: IMAGE_FILE_MACHINE_I386
Subsystem: IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date: 08-Feb-2019 02:59:34
Detected languages:
  • English - United States
Debug artifacts:
  • C:\Users\ana\code\Squirrel\Squirrel.Windows\src\Setup\bin\Release\Setup.pdb
FileDescription: inSSIDer
FileVersion: 5.2.25
InternalName: Setup.exe
LegalCopyright: Copyright 2019
OriginalFilename: Setup.exe
ProductName: inSSIDer
ProductVersion: 5.2.25
SquirrelAwareVersion: 1
CompanyName: MetaGeek, LLC

DOS Header

Magic number: MZ
Bytes on last page of file: 0x0090
Pages in file: 0x0003
Relocations: 0x0000
Size of header: 0x0004
Min extra paragraphs: 0x0000
Max extra paragraphs: 0xFFFF
Initial SS value: 0x0000
Initial SP value: 0x00B8
Checksum: 0x0000
Initial IP value: 0x0000
Initial CS value: 0x0000
Overlay number: 0x0000
OEM identifier: 0x0000
OEM information: 0x0000
Address of NE header: 0x00000118

PE Headers

Signature: PE
Machine: IMAGE_FILE_MACHINE_I386
Number of sections: 5
Time date stamp: 08-Feb-2019 02:59:34
Pointer to Symbol Table: 0x00000000
Number of symbols: 0
Size of Optional Header: 0x00E0
Characteristics:
  • IMAGE_FILE_32BIT_MACHINE
  • IMAGE_FILE_EXECUTABLE_IMAGE

Sections

Name
Virtual Address
Virtual Size
Raw Size
Charateristics
Entropy
.text
0x00001000
0x0001C82B
0x0001CA00
IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
6.654
.rdata
0x0001E000
0x0000AC3A
0x0000AE00
IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
4.94245
.data
0x00029000
0x00001750
0x00000C00
IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
3.27959
.rsrc
0x0002B000
0x01F3ECC8
0x01F3EE00
IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
7.99974
.reloc
0x01F6A000
0x00001928
0x00001A00
IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
6.52899

Resources

Title
Entropy
Size
Codepage
Language
Type
1
5.31968
999
Latin 1 / Western European
English - United States
RT_MANIFEST
2
3.45536
296
Latin 1 / Western European
English - United States
RT_ICON
3
3.30393
5672
Latin 1 / Western European
English - United States
RT_ICON
4
4.21588
3752
Latin 1 / Western European
English - United States
RT_ICON
5
4.92206
2216
Latin 1 / Western European
English - United States
RT_ICON
6
4.82479
1384
Latin 1 / Western European
English - United States
RT_ICON
7
3.42628
1048
Latin 1 / Western European
English - United States
RT_STRING
8
3.31861
1138
Latin 1 / Western European
English - United States
RT_STRING
9
4.76507
4264
Latin 1 / Western European
English - United States
RT_ICON
10
5.188
1128
Latin 1 / Western European
English - United States
RT_ICON

Imports

COMCTL32.dll
KERNEL32.dll
SHLWAPI.dll
USER32.dll (delay-loaded)
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
42
Monitored processes
6
Malicious processes
6
Suspicious processes
0

Behavior graph

Click at the process to see the details
drop and start start drop and start drop and start inssidersetup.exe update.exe inssider.exe no specs inssider.exe inssider.exe no specs inssider.exe

Process information

PID
CMD
Path
Indicators
Parent process
1248"C:\Users\admin\AppData\Local\inSSIDer\app-5.2.25\inSSIDer.exe" --squirrel-firstrunC:\Users\admin\AppData\Local\inSSIDer\app-5.2.25\inSSIDer.exe
Update.exe
User:
admin
Company:
MetaGeek
Integrity Level:
MEDIUM
Description:
inSSIDer
Exit code:
0
Version:
5.2.25.0
Modules
Images
c:\users\admin\appdata\local\inssider\app-5.2.25\inssider.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\mscoree.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\microsoft.net\framework\v4.0.30319\mscoreei.dll
1756"C:\Users\admin\AppData\Local\SquirrelTemp\Update.exe" --install . C:\Users\admin\AppData\Local\SquirrelTemp\Update.exe
inSSIDerSetup.exe
User:
admin
Company:
GitHub
Integrity Level:
MEDIUM
Description:
Update
Exit code:
0
Version:
1.9.1.0
Modules
Images
c:\users\admin\appdata\local\squirreltemp\update.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\mscoree.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\microsoft.net\framework\v4.0.30319\mscoreei.dll
2532"C:\Users\admin\AppData\Local\inSSIDer\app-5.2.25\inSSIDer.exe" --squirrel-install 5.2.25C:\Users\admin\AppData\Local\inSSIDer\app-5.2.25\inSSIDer.exe—Update.exe
User:
admin
Company:
MetaGeek
Integrity Level:
MEDIUM
Description:
inSSIDer
Exit code:
0
Version:
5.2.25.0
Modules
Images
c:\users\admin\appdata\local\inssider\app-5.2.25\inssider.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\mscoree.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\microsoft.net\framework\v4.0.30319\mscoreei.dll
3176"C:\Users\admin\AppData\Local\Temp\inSSIDerSetup.exe" C:\Users\admin\AppData\Local\Temp\inSSIDerSetup.exe
explorer.exe
User:
admin
Company:
MetaGeek, LLC
Integrity Level:
MEDIUM
Description:
inSSIDer
Exit code:
0
Version:
5.2.25
Modules
Images
c:\users\admin\appdata\local\temp\inssidersetup.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
3920"C:\Users\admin\AppData\Local\inSSIDer\app-5.2.25\inSSIDer.exe" C:\Users\admin\AppData\Local\inSSIDer\app-5.2.25\inSSIDer.exe
inSSIDer.exe
User:
admin
Company:
MetaGeek
Integrity Level:
MEDIUM
Description:
inSSIDer
Exit code:
0
Version:
5.2.25.0
Modules
Images
c:\users\admin\appdata\local\inssider\app-5.2.25\inssider.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\mscoree.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\microsoft.net\framework\v4.0.30319\mscoreei.dll
3972"C:\Users\admin\AppData\Local\inSSIDer\inSSIDer.exe" C:\Users\admin\AppData\Local\inSSIDer\inSSIDer.exe—explorer.exe
User:
admin
Company:
MetaGeek
Integrity Level:
MEDIUM
Description:
inSSIDer
Exit code:
0
Version:
5.2.25.0
Modules
Images
c:\users\admin\appdata\local\inssider\inssider.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\usp10.dll
c:\windows\system32\imm32.dll
Total events
965
Read events
893
Write events
72
Delete events
0

Modification events

(PID) Process:(2532) inSSIDer.exeKey:HKEY_CLASSES_ROOT\Local Settings\MuiCache\12B\52C64B7E
Operation:writeName:LanguageList
Value:
en-US
(PID) Process:(1756) Update.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:UNCAsIntranet
Value:
0
(PID) Process:(1756) Update.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:AutoDetect
Value:
1
(PID) Process:(1756) Update.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Direct3D\MostRecentApplication
Operation:writeName:Name
Value:
Update.exe
(PID) Process:(1756) Update.exeKey:HKEY_CLASSES_ROOT\Local Settings\MuiCache\12B\52C64B7E
Operation:writeName:LanguageList
Value:
en-US
(PID) Process:(1756) Update.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\Update_RASAPI32
Operation:writeName:EnableFileTracing
Value:
0
(PID) Process:(1756) Update.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\Update_RASAPI32
Operation:writeName:EnableConsoleTracing
Value:
0
(PID) Process:(1756) Update.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\Update_RASAPI32
Operation:writeName:FileTracingMask
Value:
4294901760
(PID) Process:(1756) Update.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\Update_RASAPI32
Operation:writeName:ConsoleTracingMask
Value:
4294901760
(PID) Process:(1756) Update.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\Update_RASAPI32
Operation:writeName:MaxFileSize
Value:
1048576
Executable files
84
Suspicious files
2
Text files
12
Unknown types
6

Dropped files

PID
Process
Filename
Type
3176inSSIDerSetup.exeC:\Users\admin\AppData\Local\SquirrelTemp\RELEASEStext
MD5:—
SHA256:—
3176inSSIDerSetup.exeC:\Users\admin\AppData\Local\SquirrelTemp\inSSIDer-5.2.25-full.nupkgcompressed
MD5:—
SHA256:—
1756Update.exeC:\Users\admin\AppData\Local\inSSIDer\packages\inSSIDer-5.2.25-full.nupkgcompressed
MD5:—
SHA256:—
1756Update.exeC:\Users\admin\AppData\Local\inSSIDer\app-5.2.25\CredentialManagement.dllexecutable
MD5:82F5347AB99AAEC20983CCB1E8D1ABB8
SHA256:7489951572F968EB8E2AE863695F72CEA7F5CB483486CE391CDE8D88B1A2227E
3176inSSIDerSetup.exeC:\Users\admin\AppData\Local\SquirrelTemp\setupIcon.icoimage
MD5:9440F26A862BAB3D552497397964FE91
SHA256:3D740B4BDA42DB1EADAD5CC673B59EFE9391ABB3DC460276C1D1138314645FFE
1756Update.exeC:\Users\admin\AppData\Local\inSSIDer\app-5.2.25\MetaGeek.Capture.Backend.dllexecutable
MD5:—
SHA256:—
1756Update.exeC:\Users\admin\AppData\Local\inSSIDer\app-5.2.25\DeltaCompressionDotNet.MsDelta.dllexecutable
MD5:C848A2F5FA5FEAA71409795E8E8C69D0
SHA256:1CE872ED466A8A3466C808A7BABF3B597EC12E1CB84870E7A0CF00B2F5EF6DF4
1756Update.exeC:\Users\admin\AppData\Local\inSSIDer\app-5.2.25\CommandLine.dllexecutable
MD5:EC0E2DD54144D6F6A317B7DAA715D418
SHA256:4923528D3D18689D58FA30B3D822AB72A13BE21A57F13E0BC59B55B864424F7A
1756Update.exeC:\Users\admin\AppData\Local\inSSIDer\app-5.2.25\GongSolutions.Wpf.DragDrop.dllexecutable
MD5:849F3F2A3F72EDF8DB1D802F3C3164D6
SHA256:903CFD9394B2FF51B1F7E5BA7FC30AFB5C1CE0EA75C06EE5DB924EDDCAF35305
1756Update.exeC:\Users\admin\AppData\Local\inSSIDer\app-5.2.25\CsvHelper.dllexecutable
MD5:B05915658E8CAB85739637844E362A70
SHA256:B60F298C6310F5A570DA4C6162EB397017412E2AE944525A5F55307B0DD8B122
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
0
TCP/UDP connections
5
DNS requests
5
Threats
0

HTTP requests

No HTTP requests
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
1756
Update.exe
45.55.111.107:443
metageek.link
Digital Ocean, Inc.
US
unknown
3920
inSSIDer.exe
159.89.220.239:443
my.metageek.com
—
US
unknown
3920
inSSIDer.exe
192.0.73.2:80
www.gravatar.com
Automattic, Inc
US
whitelisted
3920
inSSIDer.exe
157.245.235.42:443
castle.metageek.com
—
US
unknown
1756
Update.exe
162.243.189.2:443
metageek-desktop.nyc3.digitaloceanspaces.com
Digital Ocean, Inc.
US
suspicious

DNS requests

Domain
IP
Reputation
metageek.link
  • 45.55.111.107
suspicious
metageek-desktop.nyc3.digitaloceanspaces.com
  • 162.243.189.2
suspicious
my.metageek.com
  • 159.89.220.239
unknown
castle.metageek.com
  • 157.245.235.42
unknown
www.gravatar.com
  • 192.0.73.2
whitelisted

Threats

No threats detected
Process
Message
inSSIDer.exe
inSSIDer.exe Information: 0 :
inSSIDer.exe
Exception while trying to copy the existing settings: Could not find a part of the path 'C:\Users\admin\AppData\Local\MetaGeek'.
inSSIDer.exe
Exception making user from È
inSSIDer.exe
Exception making user from token: Object reference not set to an instance of an object.
inSSIDer.exe
Not authenticated
inSSIDer.exe
inSSIDer.exe Information: 0 :
inSSIDer.exe
The ComposablePartDefinition 'MetaGeek.InssiderPro.ProModuleDefinition' has been rejected. The composition remains unchanged. The changes were rejected because of the following error(s): The composition produced multiple composition errors, with 7 root causes. The root causes are provided below. Review the CompositionException.Errors property for more detailed information. 1) No exports were found that match the constraint: ContractName MetaGeek.WiSpy.Services.WiSpyDeviceStore RequiredTypeIdentity MetaGeek.WiSpy.Services.WiSpyDeviceStore Resulting in: Cannot set import 'MetaGeek.InssiderPro.ProModuleDefinition.? (ContractName="MetaGeek.WiSpy.Services.WiSpyDeviceStore")' on part 'MetaGeek.InssiderPro.ProModuleDefinition'. Element: MetaGeek.InssiderPro.ProModuleDefinition.? (ContractName="MetaGeek.WiSpy.Services.WiSpyDeviceStore") --> MetaGeek.InssiderPro.ProModuleDefinition --> AssemblyCatalog (Assembly="MetaGeek.InssiderPro, Version=5.2.25.0, Culture=neutral, PublicKeyToken=null") 2) No exports were found that match the constraint: ContractName MetaGeek.InssiderPro.ProUIComposer RequiredTypeIdentity MetaGeek.InssiderPro.ProUIComposer Resulting in: Cannot set import 'MetaGeek.InssiderPro.ProModuleDefinition.? (ContractName="MetaGeek.InssiderPro.ProUIComposer")' on part 'MetaGeek.InssiderPro.ProModuleDefinition'. Element: MetaGeek.InssiderPro.ProModuleDefinition.? (ContractName="MetaGeek.InssiderPro.ProUIComposer") --> MetaGeek.InssiderPro.ProModuleDefinition --> AssemblyCatalog (Assembly="MetaGeek.InssiderPro, Version=5.2.25.0, Culture=neutral, PublicKeyToken=null") 3) No exports were found that match the constraint: ContractName MetaGeek.Infrastructure.Windows.Services.ExceptionLogger RequiredTypeIdentity MetaGeek.Infrastructure.Windows.Services.ExceptionLogger Resulting in: Cannot set import 'MetaGeek.InssiderPro.ProModuleDefinition.? (ContractName="MetaGeek.Infrastructure.Windows.Services.ExceptionLogger")' on part 'MetaGeek.InssiderPro.ProModuleDefinition'. Element: MetaGeek.InssiderPro.ProModuleDefinition.? (ContractName="MetaGeek.Infrastructure.Windows.Services.ExceptionLogger") --> MetaGeek.InssiderPro.ProModuleDefinition --> AssemblyCatalog (Assembly="MetaGeek.InssiderPro, Version=5.2.25.0, Culture=neutral, PublicKeyToken=null") 4) No exports were found that match the constraint: ContractName MetaGeek.Infrastructure.Windows.Services.TraceTextFileLoggerHandler RequiredTypeIdentity MetaGeek.Infrastructure.Windows.Services.TraceTextFileLoggerHandler Resulting in: Cannot set import 'MetaGeek.InssiderPro.ProModuleDefinition.? (ContractName="MetaGeek.Infrastructure.Windows.Services.TraceTextFileLoggerHandler")' on part 'MetaGeek.InssiderPro.ProModuleDefinition'. Element: MetaGeek.InssiderPro.ProModuleDefinition.? (ContractName="MetaGeek.Infrastructure.Windows.Services.TraceTextFileLoggerHandler") --> MetaGeek.InssiderPro.ProModuleDefinition --> AssemblyCatalog (Assembly="MetaGeek.InssiderPro, Version=5.2.25.0, Culture=neutral, PublicKeyToken=null") 5) No exports were found that match the constraint: ContractName MetaGeek.Inssider.Services.InssiderMenuService RequiredTypeIdentity MetaGeek.Inssider.Services.InssiderMenuService Resulting in: Cannot set import 'MetaGeek.InssiderPro.ProModuleDefinition.? (ContractName="MetaGeek.Inssider.Services.InssiderMenuService")' on part 'MetaGeek.InssiderPro.ProModuleDefinition'. Element: MetaGeek.InssiderPro.ProModuleDefinition.? (ContractName="MetaGeek.Inssider.Services.InssiderMenuService") --> MetaGeek.InssiderPro.ProModuleDefinition --> AssemblyCatalog (Assembly="MetaGeek.InssiderPro, Version=5.2.25.0, Culture=neutral, PublicKeyToken=null") 6) No exports were found that match the constraint: ContractName MetaGeek.Inssider.Services.SignalThresholdService RequiredTypeIdentity MetaGeek.Inssider.Services.SignalThresholdService Resulting in: Cannot set import 'MetaGeek.InssiderPro.ProModuleDefinition.? (ContractName="MetaGeek.Inssider.Services.SignalThresholdService")' on part 'MetaGeek.InssiderPro.ProModuleDefin
inSSIDer.exe
The ComposablePartDefinition 'MetaGeek.InssiderPro.ProModuleDefinition' has been rejected. The composition remains unchanged. The changes were rejected because of the following error(s): The composition produced multiple composition errors, with 7 root causes. The root causes are provided below. Review the CompositionException.Errors property for more detailed information. 1) No exports were found that match the constraint: ContractName MetaGeek.WiSpy.Services.WiSpyDeviceStore RequiredTypeIdentity MetaGeek.WiSpy.Services.WiSpyDeviceStore Resulting in: Cannot set import 'MetaGeek.InssiderPro.ProModuleDefinition.? (ContractName="MetaGeek.WiSpy.Services.WiSpyDeviceStore")' on part 'MetaGeek.InssiderPro.ProModuleDefinition'. Element: MetaGeek.InssiderPro.ProModuleDefinition.? (ContractName="MetaGeek.WiSpy.Services.WiSpyDeviceStore") --> MetaGeek.InssiderPro.ProModuleDefinition --> AssemblyCatalog (Assembly="MetaGeek.InssiderPro, Version=5.2.25.0, Culture=neutral, PublicKeyToken=null") 2) No exports were found that match the constraint: ContractName MetaGeek.InssiderPro.ProUIComposer RequiredTypeIdentity MetaGeek.InssiderPro.ProUIComposer Resulting in: Cannot set import 'MetaGeek.InssiderPro.ProModuleDefinition.? (ContractName="MetaGeek.InssiderPro.ProUIComposer")' on part 'MetaGeek.InssiderPro.ProModuleDefinition'. Element: MetaGeek.InssiderPro.ProModuleDefinition.? (ContractName="MetaGeek.InssiderPro.ProUIComposer") --> MetaGeek.InssiderPro.ProModuleDefinition --> AssemblyCatalog (Assembly="MetaGeek.InssiderPro, Version=5.2.25.0, Culture=neutral, PublicKeyToken=null") 3) No exports were found that match the constraint: ContractName MetaGeek.Infrastructure.Windows.Services.ExceptionLogger RequiredTypeIdentity MetaGeek.Infrastructure.Windows.Services.ExceptionLogger Resulting in: Cannot set import 'MetaGeek.InssiderPro.ProModuleDefinition.? (ContractName="MetaGeek.Infrastructure.Windows.Services.ExceptionLogger")' on part 'MetaGeek.InssiderPro.ProModuleDefinition'. Element: MetaGeek.InssiderPro.ProModuleDefinition.? (ContractName="MetaGeek.Infrastructure.Windows.Services.ExceptionLogger") --> MetaGeek.InssiderPro.ProModuleDefinition --> AssemblyCatalog (Assembly="MetaGeek.InssiderPro, Version=5.2.25.0, Culture=neutral, PublicKeyToken=null") 4) No exports were found that match the constraint: ContractName MetaGeek.Infrastructure.Windows.Services.TraceTextFileLoggerHandler RequiredTypeIdentity MetaGeek.Infrastructure.Windows.Services.TraceTextFileLoggerHandler Resulting in: Cannot set import 'MetaGeek.InssiderPro.ProModuleDefinition.? (ContractName="MetaGeek.Infrastructure.Windows.Services.TraceTextFileLoggerHandler")' on part 'MetaGeek.InssiderPro.ProModuleDefinition'. Element: MetaGeek.InssiderPro.ProModuleDefinition.? (ContractName="MetaGeek.Infrastructure.Windows.Services.TraceTextFileLoggerHandler") --> MetaGeek.InssiderPro.ProModuleDefinition --> AssemblyCatalog (Assembly="MetaGeek.InssiderPro, Version=5.2.25.0, Culture=neutral, PublicKeyToken=null") 5) No exports were found that match the constraint: ContractName MetaGeek.Inssider.Services.InssiderMenuService RequiredTypeIdentity MetaGeek.Inssider.Services.InssiderMenuService Resulting in: Cannot set import 'MetaGeek.InssiderPro.ProModuleDefinition.? (ContractName="MetaGeek.Inssider.Services.InssiderMenuService")' on part 'MetaGeek.InssiderPro.ProModuleDefinition'. Element: MetaGeek.InssiderPro.ProModuleDefinition.? (ContractName="MetaGeek.Inssider.Services.InssiderMenuService") --> MetaGeek.InssiderPro.ProModuleDefinition --> AssemblyCatalog (Assembly="MetaGeek.InssiderPro, Version=5.2.25.0, Culture=neutral, PublicKeyToken=null") 6) No exports were found that match the constraint: ContractName MetaGeek.Inssider.Services.SignalThresholdService RequiredTypeIdentity MetaGeek.Inssider.Services.SignalThresholdService Resulting in: Cannot set import 'MetaGeek.InssiderPro.ProModuleDefinition.? (ContractName="MetaGeek.Inssider.Services.SignalThresholdService")' on part 'MetaGeek.InssiderPro.ProModuleDefin
inSSIDer.exe
ition'. Element: MetaGeek.InssiderPro.ProModuleDefinition.? (ContractName="MetaGeek.Inssider.Services.SignalThresholdService") --> MetaGeek.InssiderPro.ProModuleDefinition --> AssemblyCatalog (Assembly="MetaGeek.InssiderPro, Version=5.2.25.0, Culture=neutral, PublicKeyToken=null") 7) No exports were found that match the constraint: ContractName MetaGeek.Capture.Backend.Services.AutomatedCaptureService RequiredTypeIdentity MetaGeek.Capture.Backend.Services.AutomatedCaptureService Resulting in: Cannot set import 'MetaGeek.InssiderPro.ProModuleDefinition.? (ContractName="MetaGeek.Capture.Backend.Services.AutomatedCaptureService")' on part 'MetaGeek.InssiderPro.ProModuleDefinition'. Element: MetaGeek.InssiderPro.ProModuleDefinition.? (ContractName="MetaGeek.Capture.Backend.Services.AutomatedCaptureService") --> MetaGeek.InssiderPro.ProModuleDefinition --> AssemblyCatalog (Assembly="MetaGeek.InssiderPro, Version=5.2.25.0, Culture=neutral, PublicKeyToken=null")
inSSIDer.exe
Exception making user from token: Object reference not set to an instance of an object.
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
inSSIDerSetup.exe