WinorDLL64 (Malware Family) By Fraunhofer FKIE Archived: 2026-04-05 19:46:57 UTC According to ESET Research, this is a payload downloaded by win.wslink. They attribute it with low confidence to Lazarus. [TLP:WHITE] win_winordll64_auto (20251219 | Detects win.winordll64.) Source: https://malpedia.caad.fkie.fraunhofer.de/details/win.winordll64 https://malpedia.caad.fkie.fraunhofer.de/details/win.winordll64 Page 1 of 1