General

Malware Config

Signatures

Files

• Venom_RAT_5.6_[tombstone3#3883].rar

  .rar

  Password: tombstone3#3883

• Venom_RAT_5.6_[tombstone3#3883]/PASSWORD.txt
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/BouncyCastle.Crypto.dll

  .dll windows x86

  Password: tombstone3#3883

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 2.1MB - Virtual size: 2.1MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 4KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/ClientsFolder/7D4E996E03A7DE846E28/Information/Information.txt
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Guna.UI2.dll

  .dll windows x86

  Password: tombstone3#3883

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 2.0MB - Virtual size: 2.0MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/IP2Region.dll

  .dll windows x86

  Password: tombstone3#3883

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 964B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/IconExtractor.dll

  .dll windows x86

  Password: tombstone3#3883

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 8KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Keylogger.exe

  .exe windows x86

  Password: tombstone3#3883

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Newtonsoft.Json.dll

  .dll windows x86

  Password: tombstone3#3883

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2031 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27-04-2018 12:41

  Not After

  27-04-2028 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25-10-2018 00:00

  Not After

  29-10-2021 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  04-01-2017 00:00

  Not After

  18-01-2028 00:00

  Subject

  CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07-01-2016 12:00

  Not After

  07-01-2031 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  e7:f7:51:e6:72:c9:8b:01:74:26:25:32:5b:fe:58:a5:df:cb:23:3c:93:43:64:58:dc:10:9e:40:c8:d1:97:dc

  Signer

  Actual PE Digest

  e7:f7:51:e6:72:c9:8b:01:74:26:25:32:5b:fe:58:a5:df:cb:23:3c:93:43:64:58:dc:10:9e:40:c8:d1:97:dc

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  16-03-2023 15:37

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 649KB - Virtual size: 648KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Plugins/Audio.dll

  .dll windows x86

  Password: tombstone3#3883

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 23KB - Virtual size: 23KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 804B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Plugins/Chat.dll

  .dll windows x86

  Password: tombstone3#3883

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 454KB - Virtual size: 453KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 804B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Plugins/Discord.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 25KB - Virtual size: 24KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 812B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Plugins/Extra.dll

  .dll .ps1 windows x86
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Plugins/FileManager.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 32KB - Virtual size: 32KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 684B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Plugins/FileSearcher.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 278KB - Virtual size: 277KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 836B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Plugins/Fun.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 34KB - Virtual size: 34KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 836B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Plugins/Information.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 25KB - Virtual size: 24KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 828B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Plugins/Keylogger.exe

  .exe windows x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Plugins/Logger.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 26KB - Virtual size: 26KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 812B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Plugins/MessagePackLib.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 16KB - Virtual size: 16KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 844B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Plugins/Miscellaneous.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 83KB - Virtual size: 82KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 692B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Plugins/Netstat.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 25KB - Virtual size: 25KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 812B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Plugins/Options.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 375KB - Virtual size: 374KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 812B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Plugins/ProcessManager.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 25KB - Virtual size: 25KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 844B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Plugins/Recovery.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 1.3MB - Virtual size: 1.3MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 820B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Plugins/Regedit.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 280KB - Virtual size: 279KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 868B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Plugins/RemoteCamera.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 107KB - Virtual size: 107KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 836B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Plugins/RemoteDesktop.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 35KB - Virtual size: 34KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 836B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Plugins/ReverseProxy.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 12KB - Virtual size: 11KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 920B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Plugins/SendFile.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 26KB - Virtual size: 26KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 820B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Plugins/SendMemory.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 28KB - Virtual size: 28KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 828B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Plugins/ip2region.db
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/SMDiagnostics.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 44KB - Virtual size: 44KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/ServerCertificate.p12
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Siticone.Desktop.UI.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 2.4MB - Virtual size: 2.4MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Stub/Client.exe

  .exe windows x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 56KB - Virtual size: 55KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Stub/Client.pdb
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/System.Buffers.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-05-2019 21:37

  Not After

  02-05-2020 21:37

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0e:90:d2:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  08-07-2011 20:59

  Not After

  08-07-2026 21:09

  Subject

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  d4:65:dc:35:86:93:2f:fb:0d:d0:c1:ac:2f:31:92:bd:28:75:14:21:57:3f:3b:7d:55:33:05:32:59:3d:d4:62

  Signer

  Actual PE Digest

  d4:65:dc:35:86:93:2f:fb:0d:d0:c1:ac:2f:31:92:bd:28:75:14:21:57:3f:3b:7d:55:33:05:32:59:3d:d4:62

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  16-03-2023 15:37

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/System.Collections.Immutable.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-05-2019 21:37

  Not After

  02-05-2020 21:37

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0e:90:d2:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  08-07-2011 20:59

  Not After

  08-07-2026 21:09

  Subject

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:35:16:55:df:62:5e:90:93:72:fe:bd:fe:ac:db:f2:1e:96:b4:4d:30:e1:68:45:9c:04:3b:aa:ba:f4:42:36

  Signer

  Actual PE Digest

  33:35:16:55:df:62:5e:90:93:72:fe:bd:fe:ac:db:f2:1e:96:b4:4d:30:e1:68:45:9c:04:3b:aa:ba:f4:42:36

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  16-03-2023 15:37

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 162KB - Virtual size: 162KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/System.Configuration.dll

  .dll windows x64

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Sections

  .data

  Size: 206KB - Virtual size: 205KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 993KB - Virtual size: 993KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 19KB - Virtual size: 18KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/System.Core.dll

  .dll windows x64

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Sections

  .data

  Size: 3.2MB - Virtual size: 3.2MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 6.9MB - Virtual size: 6.8MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 374KB - Virtual size: 373KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/System.DirectoryServices.dll

  .dll windows x64

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Sections

  .data

  Size: 221KB - Virtual size: 220KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 1.2MB - Virtual size: 1.2MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 18KB - Virtual size: 17KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/System.Drawing.dll

  .dll windows x64

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Sections

  .data

  Size: 378KB - Virtual size: 377KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 1.5MB - Virtual size: 1.5MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 30KB - Virtual size: 29KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/System.Memory.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-05-2019 21:37

  Not After

  02-05-2020 21:37

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0e:90:d2:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  08-07-2011 20:59

  Not After

  08-07-2026 21:09

  Subject

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  db:b0:3b:7a:83:84:ef:83:06:3f:da:91:51:13:f8:7d:32:fc:46:43:1c:0f:b6:cd:f7:db:87:4b:17:93:f7:da

  Signer

  Actual PE Digest

  db:b0:3b:7a:83:84:ef:83:06:3f:da:91:51:13:f8:7d:32:fc:46:43:1c:0f:b6:cd:f7:db:87:4b:17:93:f7:da

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  16-03-2023 15:37

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 126KB - Virtual size: 126KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/System.Numerics.Vectors.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  33:00:00:00:c2:a0:09:c5:37:76:e9:f6:cd:00:00:00:00:00:c2

  Certificate

  Issuer

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  07-09-2016 17:58

  Not After

  07-09-2018 17:58

  Subject

  CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:C3B0-0F6A-4111,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  11-08-2017 20:11

  Not After

  11-08-2018 20:11

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:33:26:1a:00:00:00:00:00:31

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  31-08-2010 22:19

  Not After

  31-08-2020 22:29

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:16:68:34:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  03-04-2007 12:53

  Not After

  03-04-2021 13:03

  Subject

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  11-08-2017 20:20

  Not After

  11-08-2018 20:20

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0e:90:d2:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  08-07-2011 20:59

  Not After

  08-07-2026 21:09

  Subject

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  99:0e:22:c8:fb:bc:e4:62:63:f1:99:41:db:03:50:70:a9:f7:d6:99:5f:43:9a:3b:2d:d5:4b:9c:fc:3d:7c:e6

  Signer

  Actual PE Digest

  99:0e:22:c8:fb:bc:e4:62:63:f1:99:41:db:03:50:70:a9:f7:d6:99:5f:43:9a:3b:2d:d5:4b:9c:fc:3d:7c:e6

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  16-03-2023 15:37

  Valid: false

  12:57:a0:40:75:36:a1:51:f8:dd:f2:97:bc:f9:16:a8:2c:bd:f3:8d

  Signer

  Actual PE Digest

  12:57:a0:40:75:36:a1:51:f8:dd:f2:97:bc:f9:16:a8:2c:bd:f3:8d

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  15-05-2018 20:19

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 93KB - Virtual size: 93KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/System.Runtime.CompilerServices.Unsafe.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-05-2019 21:37

  Not After

  02-05-2020 21:37

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0e:90:d2:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  08-07-2011 20:59

  Not After

  08-07-2026 21:09

  Subject

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  10:84:6c:5c:c9:e6:39:56:a6:5f:23:06:01:58:8b:e1:ae:37:c4:fe:71:62:f4:b5:f7:ae:87:52:ec:0c:f4:30

  Signer

  Actual PE Digest

  10:84:6c:5c:c9:e6:39:56:a6:5f:23:06:01:58:8b:e1:ae:37:c4:fe:71:62:f4:b5:f7:ae:87:52:ec:0c:f4:30

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  16-03-2023 15:37

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/System.Runtime.Serialization.dll

  .dll windows x64

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Sections

  .data

  Size: 578KB - Virtual size: 578KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 2.6MB - Virtual size: 2.6MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/System.ServiceModel.Internals.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 215KB - Virtual size: 214KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/System.Windows.Forms.dll

  .dll windows x64

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Sections

  .data

  Size: 2.6MB - Virtual size: 2.6MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 13.9MB - Virtual size: 13.9MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 225KB - Virtual size: 225KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/System.Xml.dll

  .dll windows x64

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Sections

  .data

  Size: 1.3MB - Virtual size: 1.3MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 7.2MB - Virtual size: 7.2MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 119KB - Virtual size: 118KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/System.dll

  .dll windows x64

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Sections

  .data

  Size: 2.6MB - Virtual size: 2.6MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 9.6MB - Virtual size: 9.6MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 243KB - Virtual size: 243KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Venom RAT + HVNC.exe

  .exe windows x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 15.5MB - Virtual size: 15.5MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 9KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Venom RAT + HVNC.exe.config
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Venom.License
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/Vestris.ResourceLib.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 73KB - Virtual size: 73KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/cGeoIp.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 2.3MB - Virtual size: 2.3MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 928B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/dnlib.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 1.1MB - Virtual size: 1.1MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/mscorlib.dll

  .dll windows x64

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Sections

  .data

  Size: 5.2MB - Virtual size: 5.2MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 16.2MB - Virtual size: 16.2MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 545KB - Virtual size: 545KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/mydiscord.txt
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/protobuf-net.Core.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 251KB - Virtual size: 250KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_COMPILED/protobuf-net.dll

  .dll windows x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 246KB - Virtual size: 245KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC.sln
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/FrmBuilder.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/FrmBuilder.cs

  .js
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/FrmBuilder.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/FrmMain.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/FrmMain.cs

  .js
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/FrmMain.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/FrmMassUpdate.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/FrmMassUpdate.cs

  .js
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/FrmMassUpdate.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/FrmTransfer.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/FrmTransfer.cs

  .vbs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/FrmTransfer.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/FrmURL.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/FrmURL.cs

  .js
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/FrmURL.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/FrmVNC.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/FrmVNC.cs

  .js
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/FrmVNC.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/Utils/BuildInfo.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/Utils/Utils.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/HVNC/WebBuilder/WebBuilder.cs

  .js
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/KeyAuth/api.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/KeyAuth/encryption.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/KeyAuth/json_wrapper.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Properties/AssemblyInfo.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Quasar/Server/Forms/FrmReverseProxy.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Quasar/Server/Forms/FrmReverseProxy.cs

  .js
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Quasar/Server/Forms/FrmReverseProxy.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Algorithm/Aes256.cs

  .ps1
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Algorithm/GetHash.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Algorithm/Sha256.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Algorithm/Zip.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Connection/Clients.cs

  .js
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Connection/Listener.cs

  .js
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/FormMain.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/FormMain.cs

  .js
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/FormMain.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/FormSendFileToMemory.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/FormSendFileToMemory.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/FormSendFileToMemory.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormAudio.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormAudio.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormAudio.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormBuilder.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormBuilder.cs

  .js
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormBuilder.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormCertificate.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormCertificate.cs

  .js
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormCertificate.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormDownloadFile.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormDownloadFile.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormDownloadFile.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormFileManager.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormFileManager.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormFileManager.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormFileSearcher.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormFileSearcher.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormFileSearcher.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormFun.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormFun.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormFun.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormKeylogger.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormKeylogger.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormKeylogger.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormLogin.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormLogin.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormLogin.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormNetstat.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormNetstat.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormNetstat.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormPorts.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormPorts.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormPorts.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormProcessManager.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormProcessManager.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormProcessManager.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormRegValueEditBinary.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormRegValueEditBinary.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormRegValueEditBinary.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormRegValueEditMultiString.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormRegValueEditMultiString.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormRegValueEditMultiString.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormRegValueEditString.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormRegValueEditString.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormRegValueEditString.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormRegValueEditWord.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormRegValueEditWord.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormRegValueEditWord.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormRegistryEditor.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormRegistryEditor.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormRegistryEditor.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormRemoteDesktop.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormRemoteDesktop.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormRemoteDesktop.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormShell.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormShell.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormShell.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormWebcam.Designer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormWebcam.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Forms/FormWebcam.resources
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Handle_Packet/HandleAudio.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Handle_Packet/HandleDiscordRecovery.cs

  .js
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Handle_Packet/HandleDos.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Handle_Packet/HandleFileManager.cs

  .ps1
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Handle_Packet/HandleFileSearcher.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Handle_Packet/HandleFun.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Handle_Packet/HandleInformation.cs

  .js
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Handle_Packet/HandleKeylogger.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Handle_Packet/HandleListView.cs

  .js
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Handle_Packet/HandleLogs.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Handle_Packet/HandleNetstat.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Handle_Packet/HandlePassword.cs

  .js
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Handle_Packet/HandlePing.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Handle_Packet/HandleProcessManager.cs

  .ps1
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Handle_Packet/HandleRecovery.cs

  .js
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Handle_Packet/HandleRegManager.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Handle_Packet/HandleRemoteDesktop.cs

  .js
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Handle_Packet/HandleReportWindow.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Handle_Packet/HandleShell.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Handle_Packet/HandleThumbnails.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Handle_Packet/HandleWebcam.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Handle_Packet/Packet.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Helper/AeroListView.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Helper/AsyncTask.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Helper/ByteConverter.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Helper/CreateCertificate.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Helper/DingDing.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Helper/HexEditor/ByteCollection.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Helper/HexEditor/Caret.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Helper/HexEditor/EditView.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Helper/HexEditor/HexEditor.cs

  .vbs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Helper/HexEditor/HexViewHandler.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Helper/HexEditor/IKeyMouseEventHandler.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Helper/HexEditor/StringViewHandler.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Helper/IconInjector.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Helper/ListViewColumnSorter.cs

  .vbs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Helper/ListviewDoubleBuffer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Helper/Methods.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Helper/NativeMethods.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Helper/ReferenceLoader.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Helper/RegValueHelper.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Helper/RegistryKeyExtensions.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Helper/RegistryKeyHelper.cs

  .js
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Helper/RegistrySeeker.cs

  .js
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Helper/RegistryTreeView.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Helper/RegistryValueLstItem.cs

  .vbs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Helper/ReverseProxyClient.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Helper/ReverseProxyServer.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Helper/WordTextBox.cs

  .js
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/MessagePack/BytesTools.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/MessagePack/MsgPack.cs

  .vbs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/MessagePack/MsgPackArray.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/MessagePack/MsgPackEnum.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/MessagePack/MsgPackType.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/MessagePack/ReadTools.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/MessagePack/WriteTools.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Program.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Properties/Resources.cs

  .vbs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Properties/Resources.resources

  .ps1
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Properties/Settings.Designer.cs

  .vbs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Properties/Settings.settings
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Server/Settings.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/StreamLibrary/CodecOption.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/StreamLibrary/IUnsafeCodec.cs

  .vbs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/StreamLibrary/IVideoCodec.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/StreamLibrary/UnsafeCodecs/UnsafeStreamCodec.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/StreamLibrary/src/JpgCompression.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/StreamLibrary/src/LzwCompression.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/StreamLibrary/src/NativeMethods.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Venom RAT + HVNC.csproj
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/Venom RAT + HVNC.ico
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/app.manifest
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/obj/Debug/.NETFramework,Version=v4.6.1.AssemblyAttributes.cs
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/obj/Debug/Venom RAT + HVNC.csproj.AssemblyReference.cache
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/obj/Debug/Venom RAT + HVNC.csproj.CoreCompileInputs.cache
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/Venom RAT + HVNC/obj/Debug/Venom RAT + HVNC.csproj.FileListAbsolute.txt
• Venom_RAT_5.6_[tombstone3#3883]/Venom_RAT_SOURCE_CODE/mydiscord.txt