← Reports InfoStealer VIPKeyLogger - ENCRYPTED.ps1 Author Moise Medici Updated 09 May 2026 · Completed Difficulty Easy Platform Windows Family VIPKeyLogger Languages PowerShellVB.NET MITRE T1059.001 (Command and Scripting Interpreter: PowerShell) T1027 (Obfuscated Files or Information) T1027.007 (Obfuscated Files or Information: Dynamic API Resolution) T1027.009 (Obfuscated Files or Information: Embedded Payloads) T1027.010 (Obfuscated Files or Information: Command Obfuscation) T1027.013 (Obfuscated Files or Information: Encrypted/Encoded File) T1055.012 (Process Injection: Process Hollowing) T1070.004 (Indicator Removal: File Deletion) T1140 (Deobfuscate/Decode Files or Information) T1497.001 (Virtualization/Sandbox Evasion: System Checks) T1620 (Reflective Code Loading) T1539 (Steal Web Session Cookie) T1552.001 (Unsecured Credentials: Credentials In Files) T1552.002 (Unsecured Credentials: Credentials in Registry) T1555.003 (Credentials from Password Stores: Credentials from Web Browsers) T1016 (System Network Configuration Discovery) T1033 (System Owner/User Discovery) T1082 (System Information Discovery) T1217 (Browser Information Discovery) T1614 (System Location Discovery) T1005 (Data from Local System) T1048.003 (Exfiltration Over Alternative Protocol: Exfiltration Over Unencrypted Non-C2 Protocol) T1567 (Exfiltration Over Web Service) Appendix 1 ↩ CyberChef: CyberChef 2 ↩ Microsoft: about_Operators 3 ↩ Microsoft: about_Profiles 3 ↩ Microsoft: about_Execution_Policies 4 ↩ Microsoft: about_script_blocks 5 ↩ Microsoft: Assembly.GetType Method 6 ↩ Microsoft: Delegates (C# Programming Guide) 7 ↩ Microsoft: Marshal.GetDelegateForFunctionPointer Method 8 ↩ RedTeamLeaders: Chrome Password Dumper: Guide to Browser Password Recovery 9 ↩ Wikipedia: Data Protection API 10 ↩ Microsoft: ProtectedData.Unprotect Method 11 ↩ Microsoft: Introduction to lock files (laccdb and ldb) in Access 12 ↩ Microsoft: NewLateBinding.LateGet Method 13 ↩ Microsoft: WebRequest.Create Method 14 ↩ Solarwinds: FTP Commands: APPE, MLSD, MLST, LIST, RETR, STOR, STOU 15 ↩ Mozilla Support: Missing mozglue.dll when launching Firefox 16 ↩ Firefox Source Docs: Introduction to Network Security Services 17 ↩ pk11sdr.h: pk11sdr.h Source Code Section 13 of 13: Appendix ← MITRE ATT&CK