Extracted

• 15993026ade985e2d41f8f8d6d60179901f2d5be4515870c1c4030f78466dbb0

  .zip
• Tb2_Payment_receipt_Pdf.vhd

  .vhd
• $RECYCLE.BIN/$I40P23D.exe
• $RECYCLE.BIN/$I4FIL8H.js
• $RECYCLE.BIN/$I5VEPRW.js
• $RECYCLE.BIN/$IMH8R2U.js
• $RECYCLE.BIN/$INQFVCX.js
• $RECYCLE.BIN/$R40P23D.exe

  .exe windows x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 8KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 83KB - Virtual size: 82KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $RECYCLE.BIN/$R4FIL8H.js

  .js
• $RECYCLE.BIN/$R5VEPRW.js

  .js
• $RECYCLE.BIN/$RMH8R2U.js

  .js
• $RECYCLE.BIN/$RNQFVCX.js

  .js
• $RECYCLE.BIN/desktop.ini
• System Volume Information/WPSettings.dat
• Tb2_payment_receipt_pdf.vbs

  .vbs