Xworm-V5.6.rar
- SHA256 48b61fce7cf13048976a6e222e721d9bc8aef4b582608d0d77f565953b059a4e
Overview
overview
10Static
static
10Xworm-V5.6/NAudio.dll
windows7-x64
1Xworm-V5.6/NAudio.dll
windows10-2004-x64
1Xworm-V5.6...on.dll
windows7-x64
1Xworm-V5.6...on.dll
windows10-2004-x64
1Xworm-V5.6...ws.dll
windows7-x64
1Xworm-V5.6...ws.dll
windows10-2004-x64
1Xworm-V5.6...at.dll
windows7-x64
1Xworm-V5.6...at.dll
windows10-2004-x64
1Xworm-V5.6...um.dll
windows7-x64
1Xworm-V5.6...um.dll
windows10-2004-x64
1Xworm-V5.6...rd.dll
windows7-x64
1Xworm-V5.6...rd.dll
windows10-2004-x64
1Xworm-V5.6...ss.dll
windows7-x64
1Xworm-V5.6...ss.dll
windows10-2004-x64
1Xworm-V5.6...er.dll
windows7-x64
1Xworm-V5.6...er.dll
windows10-2004-x64
1Xworm-V5.6...er.dll
windows7-x64
1Xworm-V5.6...er.dll
windows10-2004-x64
1Xworm-V5.6...er.dll
windows7-x64
1Xworm-V5.6...er.dll
windows10-2004-x64
1Xworm-V5.6...DP.dll
windows7-x64
1Xworm-V5.6...DP.dll
windows10-2004-x64
1Xworm-V5.6...NC.dll
windows7-x64
1Xworm-V5.6...NC.dll
windows10-2004-x64
1Xworm-V5.6...ry.dll
windows7-x64
1Xworm-V5.6...ry.dll
windows10-2004-x64
1Xworm-V5.6...ps.dll
windows7-x64
1Xworm-V5.6...ps.dll
windows10-2004-x64
1Xworm-V5.6...ns.dll
windows7-x64
1Xworm-V5.6...ns.dll
windows10-2004-x64
1Xworm-V5.6...er.dll
windows7-x64
1Xworm-V5.6...er.dll
windows10-2004-x64
1Behavioral task
behavioral1
Sample
Xworm-V5.6/NAudio.dll
Resource
win7-20231129-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Xworm-V5.6/NAudio.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Xworm-V5.6/Newtonsoft.Json.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Xworm-V5.6/Newtonsoft.Json.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Xworm-V5.6/Plugins/ActiveWindows.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Xworm-V5.6/Plugins/ActiveWindows.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Xworm-V5.6/Plugins/Chat.dll
Resource
win7-20240215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
Xworm-V5.6/Plugins/Chat.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
Xworm-V5.6/Plugins/Chromium.dll
Resource
win7-20240220-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
Xworm-V5.6/Plugins/Chromium.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
Xworm-V5.6/Plugins/Clipboard.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
Xworm-V5.6/Plugins/Clipboard.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
Xworm-V5.6/Plugins/Cmstp-Bypass.dll
Resource
win7-20231129-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
Xworm-V5.6/Plugins/Cmstp-Bypass.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
Xworm-V5.6/Plugins/FileManager.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
Xworm-V5.6/Plugins/FileManager.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
Xworm-V5.6/Plugins/FilesSearcher.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
Xworm-V5.6/Plugins/FilesSearcher.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
Xworm-V5.6/Plugins/HBrowser.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
Xworm-V5.6/Plugins/HBrowser.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
Xworm-V5.6/Plugins/HRDP.dll
Resource
win7-20240215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
Xworm-V5.6/Plugins/HRDP.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
Xworm-V5.6/Plugins/HVNC.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
Xworm-V5.6/Plugins/HVNC.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
Xworm-V5.6/Plugins/HVNCMemory.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
Xworm-V5.6/Plugins/HVNCMemory.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
Xworm-V5.6/Plugins/HiddenApps.dll
Resource
win7-20231129-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
Xworm-V5.6/Plugins/HiddenApps.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
Xworm-V5.6/Plugins/Informations.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
Xworm-V5.6/Plugins/Informations.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
Xworm-V5.6/Plugins/Keylogger.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
Xworm-V5.6/Plugins/Keylogger.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target Xworm-V5.6.rar
- Size 42.3MB
- Sample240504-tfb6lsae4w
- SHA256 48b61fce7cf13048976a6e222e721d9bc8aef4b582608d0d77f565953b059a4e
- MD5 54916f412e009a70efbe24afc8e06203
- SHA1 e015a1171a1257409b37b231e4cbff8f8aa1e7f6
- SHA512 0617afddba92b82fde47557ad7382fdf767b6437f997568f7add9be8620f0aaab10e4e0cba11c70b0227a1a20d1095bd6b980e970e28f863ebb9a6d85e5c8164
- SSDEEP 786432:WybHfTzmkvdVnvDdWL85rXKqSoId8ZqLXsDSw/XZA3Y7Q9ivDnZ+eJ1So:N/vmwFHrXGddL8WMJQY7WivDlv
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- AgentTesla payload 1 IoCs
resource yara_rule static1/unpack001/Xworm-V5.6/Guna.UI2.dll family_agenttesla - Agenttesla family
- Contains code to disable Windows Defender 1 IoCs
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
resource yara_rule static1/unpack001/Xworm-V5.6/Plugins/Options.dll disable_win_def - Detect Xworm Payload 1 IoCs
resource yara_rule static1/unpack001/Xworm-V5.6/RES/XWorm.Resources.resources family_xworm - StormKitty payload 1 IoCs
resource yara_rule static1/unpack001/Xworm-V5.6/Plugins/Recovery.dll family_stormkitty - Stormkitty family
- Xworm family
- Unsigned PE 44 IoCs
Checks for missing Authenticode signature.
resource unpack001/Xworm-V5.6/FastColoredTextBox.dll unpack001/Xworm-V5.6/GMap.NET.Core.dll unpack001/Xworm-V5.6/GMap.NET.WindowsForms.dll unpack001/Xworm-V5.6/IconExtractor.dll unpack001/Xworm-V5.6/Plugins/ActiveWindows.dll unpack001/Xworm-V5.6/Plugins/Chat.dll unpack001/Xworm-V5.6/Plugins/Chromium.dll unpack001/Xworm-V5.6/Plugins/Clipboard.dll unpack001/Xworm-V5.6/Plugins/Cmstp-Bypass.dll unpack001/Xworm-V5.6/Plugins/FileManager.dll unpack001/Xworm-V5.6/Plugins/FilesSearcher.dll unpack001/Xworm-V5.6/Plugins/HBrowser.dll unpack001/Xworm-V5.6/Plugins/HRDP.dll unpack001/Xworm-V5.6/Plugins/HVNC.dll unpack001/Xworm-V5.6/Plugins/HVNCMemory.dll unpack001/Xworm-V5.6/Plugins/HiddenApps.dll unpack001/Xworm-V5.6/Plugins/Informations.dll unpack001/Xworm-V5.6/Plugins/Keylogger.dll unpack001/Xworm-V5.6/Plugins/Maps.dll unpack001/Xworm-V5.6/Plugins/MessageBox.dll unpack001/Xworm-V5.6/Plugins/Microphone.dll unpack001/Xworm-V5.6/Plugins/Options.dll unpack001/Xworm-V5.6/Plugins/Pastime.dll unpack001/Xworm-V5.6/Plugins/Performance.dll unpack001/Xworm-V5.6/Plugins/ProcessManager.dll unpack001/Xworm-V5.6/Plugins/Programs.dll unpack001/Xworm-V5.6/Plugins/Ransomware.dll unpack001/Xworm-V5.6/Plugins/Recovery.dll unpack001/Xworm-V5.6/Plugins/Regedit.dll unpack001/Xworm-V5.6/Plugins/RemoteDesktop.dll unpack001/Xworm-V5.6/Plugins/ReverseProxy.dll unpack001/Xworm-V5.6/Plugins/RunPE.dll unpack001/Xworm-V5.6/Plugins/ServiceManager.dll unpack001/Xworm-V5.6/Plugins/Shell.dll unpack001/Xworm-V5.6/Plugins/StartupManager.dll unpack001/Xworm-V5.6/Plugins/Stealer.dll unpack001/Xworm-V5.6/Plugins/TCPConnections.dll unpack001/Xworm-V5.6/Plugins/UACBypass.dll unpack001/Xworm-V5.6/Plugins/VB.NET Compiler.dll unpack001/Xworm-V5.6/Plugins/VoiceChat.dll unpack001/Xworm-V5.6/Plugins/WSound.dll unpack001/Xworm-V5.6/Plugins/WebCam.dll unpack001/Xworm-V5.6/SimpleObfuscator.dll unpack001/Xworm-V5.6/Xworm V5.6.exe
File Explorer
-
Xworm-V5.6.rar.rar 42.3MB
-
Xworm-V5.6/Background.png.png 924KB
-
Xworm-V5.6/ClientsFolder/056C91765E143596083C/Recovery/Chromium_04-07-2024 16;34;00;469.txt1KB
-
Xworm-V5.6/ClientsFolder/056C91765E143596083C/Recovery/DiscordToken_04-07-2024 16;39;07;496.txt72B
-
Xworm-V5.6/ClientsFolder/056C91765E143596083C/Recovery/ProductKey_04-07-2024 16;39;11;719.txt29B
-
Xworm-V5.6/ClientsFolder/056C91765E143596083C/Recovery/RecoveryData/autofill.json3KB
-
Xworm-V5.6/ClientsFolder/056C91765E143596083C/Recovery/RecoveryData/bookmark.json787B
-
Xworm-V5.6/ClientsFolder/056C91765E143596083C/Recovery/RecoveryData/cookies.json8KB
-
Xworm-V5.6/ClientsFolder/056C91765E143596083C/Recovery/RecoveryData/cookies.txt2KB
-
Xworm-V5.6/ClientsFolder/056C91765E143596083C/Recovery/RecoveryData/credit.json131B
-
Xworm-V5.6/ClientsFolder/056C91765E143596083C/Recovery/RecoveryData/history.json827KB
-
Xworm-V5.6/ClientsFolder/056C91765E143596083C/Recovery/RecoveryData/passwords.json2KB
-
Xworm-V5.6/ClientsFolder/056C91765E143596083C/Recovery/WifiKeys_04-07-2024 16;39;24;105.txt105B
-
Xworm-V5.6/ClientsFolder/168577EB613277D02A59/Recovery/DiscordToken_04-12-2024 20;44;12;096.txt72B
-
Xworm-V5.6/ClientsFolder/168577EB613277D02A59/Recovery/RecoveryData/autofill.json2B
-
Xworm-V5.6/ClientsFolder/168577EB613277D02A59/Recovery/RecoveryData/bookmark.json2B
-
Xworm-V5.6/ClientsFolder/168577EB613277D02A59/Recovery/RecoveryData/cookies.json2B
-
Xworm-V5.6/ClientsFolder/168577EB613277D02A59/Recovery/RecoveryData/credit.json2B
-
Xworm-V5.6/ClientsFolder/168577EB613277D02A59/Recovery/RecoveryData/history.json2B
-
Xworm-V5.6/ClientsFolder/168577EB613277D02A59/Recovery/RecoveryData/passwords.json2B
-
Xworm-V5.6/ClientsFolder/48EB70D0CE0AFA8F224E/Recovery/DiscordToken_04-28-2024 17;47;12;285.txt70B
-
Xworm-V5.6/ClientsFolder/5D1DAD76CD1CC9291C33/Recovery/Chromium_04-27-2024 11;00;44;390.txt2KB
-
Xworm-V5.6/ClientsFolder/5D1DAD76CD1CC9291C33/Recovery/DiscordToken_04-13-2024 11;12;35;159.txt72B
-
Xworm-V5.6/ClientsFolder/5D1DAD76CD1CC9291C33/Recovery/DiscordToken_04-13-2024 15;33;49;282.txt72B
-
Xworm-V5.6/ClientsFolder/5D1DAD76CD1CC9291C33/Recovery/DiscordToken_04-27-2024 11;00;57;063.txt72B
-
Xworm-V5.6/ClientsFolder/5D1DAD76CD1CC9291C33/Recovery/RecoveryData/autofill.json464B
-
Xworm-V5.6/ClientsFolder/5D1DAD76CD1CC9291C33/Recovery/RecoveryData/bookmark.json619B
-
Xworm-V5.6/ClientsFolder/5D1DAD76CD1CC9291C33/Recovery/RecoveryData/cookies.json2B
-
Xworm-V5.6/ClientsFolder/5D1DAD76CD1CC9291C33/Recovery/RecoveryData/credit.json2B
-
Xworm-V5.6/ClientsFolder/5D1DAD76CD1CC9291C33/Recovery/RecoveryData/history.json235KB
-
Xworm-V5.6/ClientsFolder/5D1DAD76CD1CC9291C33/Recovery/RecoveryData/passwords.json718B
-
Xworm-V5.6/ClientsFolder/68083B36C27A4B335E19/Recovery/RecoveryData/autofill.json4KB
-
Xworm-V5.6/ClientsFolder/68083B36C27A4B335E19/Recovery/RecoveryData/bookmark.json2B
-
Xworm-V5.6/ClientsFolder/68083B36C27A4B335E19/Recovery/RecoveryData/cookies.json2B
-
Xworm-V5.6/ClientsFolder/68083B36C27A4B335E19/Recovery/RecoveryData/credit.json2B
-
Xworm-V5.6/ClientsFolder/68083B36C27A4B335E19/Recovery/RecoveryData/history.json437KB
-
Xworm-V5.6/ClientsFolder/68083B36C27A4B335E19/Recovery/RecoveryData/passwords.json3KB
-
Xworm-V5.6/ClientsFolder/6F5FD469A3C5D2786729/Recovery/DiscordToken_04-28-2024 19;53;53;329.txt70B
-
Xworm-V5.6/ClientsFolder/6F5FD469A3C5D2786729/Recovery/RecoveryData/autofill.json98KB
-
Xworm-V5.6/ClientsFolder/6F5FD469A3C5D2786729/Recovery/RecoveryData/bookmark.json2KB
-
Xworm-V5.6/ClientsFolder/6F5FD469A3C5D2786729/Recovery/RecoveryData/cookies.json155KB
-
Xworm-V5.6/ClientsFolder/6F5FD469A3C5D2786729/Recovery/RecoveryData/cookies.txt50KB
-
Xworm-V5.6/ClientsFolder/6F5FD469A3C5D2786729/Recovery/RecoveryData/credit.json2B
-
Xworm-V5.6/ClientsFolder/6F5FD469A3C5D2786729/Recovery/RecoveryData/history.json2.6MB
-
Xworm-V5.6/ClientsFolder/6F5FD469A3C5D2786729/Recovery/RecoveryData/passwords.json13KB
-
Xworm-V5.6/ClientsFolder/79FFA9B5EFAE8CAF9099/Recovery/RecoveryData/autofill.json2B
-
Xworm-V5.6/ClientsFolder/79FFA9B5EFAE8CAF9099/Recovery/RecoveryData/bookmark.json423B
-
Xworm-V5.6/ClientsFolder/79FFA9B5EFAE8CAF9099/Recovery/RecoveryData/cookies.json2B
-
Xworm-V5.6/ClientsFolder/79FFA9B5EFAE8CAF9099/Recovery/RecoveryData/credit.json2B
-
Xworm-V5.6/ClientsFolder/79FFA9B5EFAE8CAF9099/Recovery/RecoveryData/history.json2B
-
Xworm-V5.6/ClientsFolder/79FFA9B5EFAE8CAF9099/Recovery/RecoveryData/passwords.json2B
-
Xworm-V5.6/ClientsFolder/9E8294B154DD453AE185/Recovery/Chromium_04-13-2024 18;21;34;440.txt2KB
-
Xworm-V5.6/ClientsFolder/A36500F0476863C7444E/Recovery/DiscordToken_04-26-2024 21;34;22;009.txt72B
-
Xworm-V5.6/ClientsFolder/A36500F0476863C7444E/Recovery/DiscordToken_04-26-2024 21;37;02;655.txt72B
-
Xworm-V5.6/ClientsFolder/A36500F0476863C7444E/Recovery/RecoveryData/autofill.json42KB
-
Xworm-V5.6/ClientsFolder/A36500F0476863C7444E/Recovery/RecoveryData/bookmark.json968B
-
Xworm-V5.6/ClientsFolder/A36500F0476863C7444E/Recovery/RecoveryData/cookies.json725KB
-
Xworm-V5.6/ClientsFolder/A36500F0476863C7444E/Recovery/RecoveryData/cookies.txt229KB
-
Xworm-V5.6/ClientsFolder/A36500F0476863C7444E/Recovery/RecoveryData/credit.json2B
-
Xworm-V5.6/ClientsFolder/A36500F0476863C7444E/Recovery/RecoveryData/history.json2.2MB
-
Xworm-V5.6/ClientsFolder/A36500F0476863C7444E/Recovery/RecoveryData/passwords.json23KB
-
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;11;695.jpg.jpg 596KB
-
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;11;981.jpg.jpg 567KB
-
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;12;257.jpg.jpg 591KB
-
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;12;559.jpg.jpg 592KB
-
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;13;006.jpg.jpg 597KB
-
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;13;390.jpg.jpg 591KB
-
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;13;738.jpg.jpg 590KB
-
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;14;072.jpg.jpg 590KB
-
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;14;419.jpg.jpg 586KB
-
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;14;790.jpg.jpg 589KB
-
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;15;153.jpg.jpg 590KB
-
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;15;442.jpg.jpg 589KB
-
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;15;735.jpg.jpg 591KB
-
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;16;031.jpg.jpg 592KB
-
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;16;323.jpg.jpg 595KB
-
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;16;610.jpg.jpg 689KB
-
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;16;905.jpg.jpg 678KB
-
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;17;208.jpg.jpg .wsf 669KB
-
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;17;530.jpg.jpg 597KB
-
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;17;803.jpg.jpg 567KB
-
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;18;083.jpg.jpg 647KB
-
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Recovery/Chromium_04-12-2024 19;49;56;311.txt5KB
-
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Recovery/DiscordToken_04-11-2024 20;49;24;684.txt70B
-
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Recovery/DiscordToken_04-12-2024 23;31;12;604.txt70B
-
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Recovery/DiscordToken_04-28-2024 15;36;14;968.txt70B
-
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Recovery/Telegram_tdata_04-25-2024 19;16;41;685.zip.zip 7KB
-
AA39C4F31D51C39Bs140B
-
D877F783D5D3EF8C/3B4E9BFAA303B19Cs460B
-
D877F783D5D3EF8C/FDA44782FB7C3560s92B
-
D877F783D5D3EF8C/configs956B
-
D877F783D5D3EF8C/maps244B
-
D877F783D5D3EF8Cs1KB
-
key_datas388B
-
settingss1KB
-
usertag8B
-
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Recovery/WifiKeys_04-25-2024 19;18;39;752.txt164B
-
Xworm-V5.6/ClientsFolder/EFD443990BC51A663387/Recovery/DiscordToken_04-08-2024 17;49;04;771.txt72B
-
Xworm-V5.6/ClientsFolder/FC9286EBD922A006345E/Recovery/DiscordToken_04-07-2024 18;21;10;330.txt72B
-
Xworm-V5.6/ClientsFolder/FC9286EBD922A006345E/Recovery/ProductKey_04-07-2024 18;34;19;150.txt29B
-
Xworm-V5.6/ClientsFolder/FC9286EBD922A006345E/Recovery/WifiKeys_04-07-2024 18;22;37;282.txt58B
-
Xworm-V5.6/FastColoredTextBox.dll.dll 333KB
-
Xworm-V5.6/Fixer.bat10.2MB
-
Xworm-V5.6/GMap.NET.Core.dll.dll 2.9MB
-
Xworm-V5.6/GMap.NET.WindowsForms.dll.dll 147KB
-
Xworm-V5.6/GeoIP.dat1.2MB
-
Xworm-V5.6/Guna.UI2.dll.dll 1.9MB
-
Xworm-V5.6/IconExtractor.dll.dll 10KB
-
Xworm-V5.6/Icons/icon (1).ico97KB
-
Xworm-V5.6/Icons/icon (10).ico115KB
-
Xworm-V5.6/Icons/icon (11).ico9KB
-
Xworm-V5.6/Icons/icon (12).ico9KB
-
Xworm-V5.6/Icons/icon (13).ico361KB
-
Xworm-V5.6/Icons/icon (14).ico361KB
-
Xworm-V5.6/Icons/icon (15).ico361KB
-
Xworm-V5.6/Icons/icon (16).ico97KB
-
Xworm-V5.6/Icons/icon (17).ico66KB
-
Xworm-V5.6/Icons/icon (2).ico112KB
-
Xworm-V5.6/Icons/icon (3).ico131KB
-
Xworm-V5.6/Icons/icon (4).ico125KB
-
Xworm-V5.6/Icons/icon (5).ico100KB
-
Xworm-V5.6/Icons/icon (6).ico106KB
-
Xworm-V5.6/Icons/icon (7).ico164KB
-
Xworm-V5.6/Icons/icon (8).ico108KB
-
Xworm-V5.6/Icons/icon (9).ico264KB
-
Xworm-V5.6/Logs/ErrorLogs.txt224B
-
Xworm-V5.6/NAudio.dll.dll 502KB
-
Xworm-V5.6/Newtonsoft.Json.dll.dll 695KB
-
Xworm-V5.6/Plugins/ActiveWindows.dll.dll 14KB
-
Xworm-V5.6/Plugins/Chat.dll.dll 18KB
-
Xworm-V5.6/Plugins/Chromium.dll.dll 32KB
-
Xworm-V5.6/Plugins/Clipboard.dll.dll 14KB
-
Xworm-V5.6/Plugins/Cmstp-Bypass.dll.dll 11KB
-
Xworm-V5.6/Plugins/FileManager.dll.dll 679KB
-
Xworm-V5.6/Plugins/FilesSearcher.dll.dll 478KB
-
Xworm-V5.6/Plugins/HBrowser.dll.dll 25KB
-
Xworm-V5.6/Plugins/HRDP.dll.dll 1.7MB
-
Xworm-V5.6/Plugins/HVNC.dll.dll 58KB
-
Xworm-V5.6/Plugins/HVNCMemory.dll.dll 39KB
-
Xworm-V5.6/Plugins/HiddenApps.dll.dll 45KB
-
Xworm-V5.6/Plugins/Informations.dll.dll 22KB
-
Xworm-V5.6/Plugins/Keylogger.dll.dll 17KB
-
Xworm-V5.6/Plugins/Maps.dll.dll 15KB
-
Xworm-V5.6/Plugins/MessageBox.dll.dll 14KB
-
Xworm-V5.6/Plugins/Microphone.dll.dll 540KB
-
Xworm-V5.6/Plugins/Options.dll.dll .ps1 30KB
-
Xworm-V5.6/Plugins/Pastime.dll.dll 17KB
-
Xworm-V5.6/Plugins/Performance.dll.dll 16KB
-
Xworm-V5.6/Plugins/ProcessManager.dll.dll 19KB
-
Xworm-V5.6/Plugins/Programs.dll.dll 13KB
-
Xworm-V5.6/Plugins/Ransomware.dll.dll 20KB
-
Xworm-V5.6/Plugins/Recovery.dll.dll 1.1MB
-
Xworm-V5.6/Plugins/Regedit.dll.dll 15KB
-
Xworm-V5.6/Plugins/RemoteDesktop.dll.dll 18KB
-
Xworm-V5.6/Plugins/ReverseProxy.dll.dll 16KB
-
Xworm-V5.6/Plugins/RunPE.dll.dll 11KB
-
Xworm-V5.6/Plugins/ServiceManager.dll.dll 14KB
-
Xworm-V5.6/Plugins/Shell.dll.dll 14KB
-
Xworm-V5.6/Plugins/StartupManager.dll.dll 188KB
-
Xworm-V5.6/Plugins/Stealer.dll.dll 3.3MB
-
Xworm-V5.6/Plugins/TCPConnections.dll.dll 16KB
-
Xworm-V5.6/Plugins/UACBypass.dll.dll 10KB
-
Xworm-V5.6/Plugins/VB.NET Compiler.dll.dll 14KB
-
Xworm-V5.6/Plugins/VoiceChat.dll.dll 539KB
-
Xworm-V5.6/Plugins/WSound.dll.dll 539KB
-
Xworm-V5.6/Plugins/WebCam.dll.dll 209KB
-
Xworm-V5.6/RES/U40957361f7481084776e6aedU9f0U195KB
-
Xworm-V5.6/RES/XWorm.ACT.resources67KB
-
Xworm-V5.6/RES/XWorm.About.resources3.3MB
-
Xworm-V5.6/RES/XWorm.Builder.resources107KB
-
Xworm-V5.6/RES/XWorm.Chat.resources99KB
-
Xworm-V5.6/RES/XWorm.Clipboard.resources113KB
-
Xworm-V5.6/RES/XWorm.Clipper.resources106KB
-
Xworm-V5.6/RES/XWorm.CustomOpen.resources101KB
-
Xworm-V5.6/RES/XWorm.DDosAttack.resources99KB
-
Xworm-V5.6/RES/XWorm.EditReg.resources107KB
-
Xworm-V5.6/RES/XWorm.FM.resources178KB
-
Xworm-V5.6/RES/XWorm.FilesSearcher.resources151KB
-
Xworm-V5.6/RES/XWorm.Ftp.resources109KB
-
Xworm-V5.6/RES/XWorm.Fun.resources99KB
-
Xworm-V5.6/RES/XWorm.HApps.resources128KB
-
Xworm-V5.6/RES/XWorm.HBrowser.resources92KB
-
Xworm-V5.6/RES/XWorm.HRDP.resources103KB
-
Xworm-V5.6/RES/XWorm.HVNC.resources105KB
-
Xworm-V5.6/RES/XWorm.Hash.resources99KB
-
Xworm-V5.6/RES/XWorm.Hosts.resources102KB
-
Xworm-V5.6/RES/XWorm.INFO.resources171KB
-
Xworm-V5.6/RES/XWorm.Keylogger.resources124KB
-
Xworm-V5.6/RES/XWorm.MBox.resources107KB
-
Xworm-V5.6/RES/XWorm.MIC.resources119KB
-
Xworm-V5.6/RES/XWorm.Main.resources1.8MB
-
Xworm-V5.6/RES/XWorm.Maps.resources140KB
-
Xworm-V5.6/RES/XWorm.Performance.resources106KB
-
Xworm-V5.6/RES/XWorm.Port.resources139KB
-
Xworm-V5.6/RES/XWorm.ProcessV.resources67KB
-
Xworm-V5.6/RES/XWorm.Programs.resources164KB
-
Xworm-V5.6/RES/XWorm.Proxy.resources108KB
-
Xworm-V5.6/RES/XWorm.Ransomware.resources101KB
-
Xworm-V5.6/RES/XWorm.Registry.resources169KB
-
Xworm-V5.6/RES/XWorm.RemoteDesktop.resources99KB
-
Xworm-V5.6/RES/XWorm.Resources.resources.vbs 1.6MB
-
Xworm-V5.6/RES/XWorm.RunPE.resources103KB
-
Xworm-V5.6/RES/XWorm.ServiceManager.resources221KB
-
Xworm-V5.6/RES/XWorm.Shell.resources130KB
-
Xworm-V5.6/RES/XWorm.Sound.resources189KB
-
Xworm-V5.6/RES/XWorm.StartupManager.resources167KB
-
Xworm-V5.6/RES/XWorm.TBotNotify.resources100KB
-
Xworm-V5.6/RES/XWorm.TXT.resources101KB
-
Xworm-V5.6/RES/XWorm.TcpConnectionForm.resources169KB
-
Xworm-V5.6/RES/XWorm.ToolsBox.resources241KB
-
Xworm-V5.6/RES/XWorm.VBCode.resources174KB
-
Xworm-V5.6/RES/XWorm.VoiceChat.resources121KB
-
Xworm-V5.6/RES/XWorm.WebCam.resources100KB
-
Xworm-V5.6/RES/XWorm.ngrok.resources101KB
-
Xworm-V5.6/SimpleObfuscator.dll.dll 1.4MB
-
Xworm-V5.6/Sounds/Chat.wav45KB
-
Xworm-V5.6/Sounds/Intro.wav238KB
-
Xworm-V5.6/XWorm V5.6.exe.config.xml 183B
-
Xworm-V5.6/Xworm V5.6.exe.exe 14.9MB
Xworm-V5.6/Background.png
- SHA256 2f691caff7e1980cfb069d2608b6470b3a06cdb90467ce47820e8602115a0c5b
- MD5 c93ee3abeff4ac24936471f80b36ec7a
- SHA1 0120649571a4b692ff5d10aae8dd87dffd3a0f81
- SHA512 dd319d1eea708284588ff67268cb23bd7b5cde505f3a8a1e7a27a587920ee5877efa4c1d8264cae48de343cabbf11bbe457b49f348b46288765eeff45d20cab5
- SSDEEP 24576:raWlRrTw9AK8jrGL+sUGBcD1MoEX1r/HXKIIfnbY:r/3w/8jzG+OomB/HXKa
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/056C91765E143596083C/Recovery/Chromium_04-07-2024 16;34;00;469.txt
- SHA256 ae60f48b6d052c7dc52eaccb6626e27e79aa0156c1b3ad565b5b589d178c5dd0
- MD5 2e836327f22d43279a88215c488cb785
- SHA1 42701e356809e91c0fd285d4d89b4a6a4e3c245b
- SHA512 c06578cda22b89aa8dcd1bf13fbc6d2a0d9fa594fafd031ca552ecb3fb725ee01ae74b70520274039095325a06a1af10169aa829cdc0d782523f57e2dddc4768
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/056C91765E143596083C/Recovery/DiscordToken_04-07-2024 16;39;07;496.txt
- SHA256 c782fa683ff65172527e7ba71455fdbb7991ea8f538d64df6b67b4d64d7b0012
- MD5 8f0a66814429a9017202f1d665c7f2d7
- SHA1 8765cbb1a673c522b409f8c34e02b6743ae97aa8
- SHA512 027d08f18cae4625f28a95fad57c1a68b072ff7685b5121cd31ba84ec82001bf02c79baa827ba8905e3fc055fb8fea29e8ef42403e4c2ac42309a7dfcf6d3cd6
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/056C91765E143596083C/Recovery/ProductKey_04-07-2024 16;39;11;719.txt
- SHA256 c2a7e91858f87857d6985ff4ca4a5105e03ee6a407c9c01f1ba327570c51e4bd
- MD5 7b23de797af1588ecca025de0ebed781
- SHA1 6221338ea745baededd3a80e25177771d9c0246a
- SHA512 df2fa0348051e02deaaee43d418d0385feef733d3956be91caa5201fedeae9738563fc14c696edf0f861e7aef285da4c1b76b33969241e1de508215b9a17f5bf
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/056C91765E143596083C/Recovery/RecoveryData/autofill.json
- SHA256 53421384aa179d1d57a0adbc5ca4458dc1d46ff647e6adcc03a3a2b44fe684f5
- MD5 f6eab3be4c07cda2ce9aa64628f253d8
- SHA1 4afb4673ad0be46aae6e2eb8d7b416d4f9bec187
- SHA512 e2321ef92b0cf802c0de1f0546bbad672b96eb13c5cfd3f0ea4f0b8d1760112c3693c047fbdc9201263786b55a807b987b1b306ce341c7a26af3ec190729f965
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/056C91765E143596083C/Recovery/RecoveryData/bookmark.json
- SHA256 0c55f8dd71da15ec102a1ff5128ee750e2a2698fed7392bcb38077b713120683
- MD5 da5244fcfa575591c13dcdd1c71fdaf0
- SHA1 b96e606ac83b119c7bfe8fbdf2a382b3bf41514b
- SHA512 50b453d70670a22249ef04916e277a89bdc1e7553e5cb47632842bb65f1568619a235e6dc469fcad969efc5f2d84328d42d4aa111d9150775a7c1dbe4fa74ab8
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/056C91765E143596083C/Recovery/RecoveryData/cookies.json
- SHA256 a72fa5674aca2ea49caec82cd5fc34edea96f760ceafd18afaae6fc18f49e5c5
- MD5 065f52d63b4407e05808c88657654440
- SHA1 e5814e7a434ceaca39cd1da8b209c93cf75ccb4e
- SHA512 0ac1bab9d22671ec45ee458c7d66ff4cd214a773e4fda88d5bcc0bb55c1497d742203b901d8c7b68a41d39ce5e521dfa80c2a8f0f35bd3a66ce30af1824b5a52
- SSDEEP 48:PsHn3/sAVWVG/s7em/s77G/sDC/sDTcZS/sDbHY/sQWU/sA4T+Sd/sDk/sDmu/sA:MWVGj8dHHbxfDZ+Y6wyqkepDc
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/056C91765E143596083C/Recovery/RecoveryData/cookies.txt
- SHA256 271db30456c712aca9985787c1dda37a938e074b8c50b5cf8565de3aa1ba348a
- MD5 eaa0bd8d6d9e51cc57f9ddc909f8e43e
- SHA1 9bbc8d8a332bbc8343b133dfe58812f39b3c04d2
- SHA512 8c6830dfdbcae5d30604ab6d23f55ef58a3d7f11b1397af57fb35074cafff79dbd768ab1b0e4601d4da0a048bf8e6abe0e994692451948f8d78d7db8808d7b4b
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/056C91765E143596083C/Recovery/RecoveryData/credit.json
- SHA256 a53e75942ab2767c5bb6e9950ea5b887a3fdc782d1aacac90c20f3cbbcac867b
- MD5 61626e19fced945a46d00a6888d78992
- SHA1 fca00aa22aaeb1dc922c873e27ccb3c887e20eda
- SHA512 fd260bc3f50f5d8bf76981519188a221bb64bd5a78b2179db9625c3907e788801a3c06efeb38a54b1e00e70297376a3537573f0f882fa4ea504cde89a3e6f05b
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/056C91765E143596083C/Recovery/RecoveryData/history.json
- SHA256 15d0b1147abe8ae0c2f928e878eabbaee17cc2689ec344210aa697e4b713849b
- MD5 bbc291ee152b37ac6d22d224ad4da15d
- SHA1 ae63ce45bed76b73fe559188f5c33e136948d923
- SHA512 609dcbf1da6ee95aee72d556b10d681d621f4c1222d7c8de44a203b18f0b2f2511a5ed0ea8659a6784f790ff7146b494f3d5fb45b3e6b45bfb9dd256db601e9a
- SSDEEP 6144:23eAJFhTGYOBFCD+ftFlN6Iy05KAYbagd7xtDApL/qPX4itr0BzquCdj8i:23eAfbO9FHO05b+LxApmAquCdj8i
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/056C91765E143596083C/Recovery/RecoveryData/passwords.json
- SHA256 17326b04683d471d2310e2034820cc3c91b86f06370907c1b52e728b590ffd92
- MD5 59bf3182adfae9e58007902e80ace35d
- SHA1 9a4243e7cb9956461ceea9ef5089e0b28b2cdbdc
- SHA512 d7ebf9aab7a10a1464b9cf63701802432006da118fa694689289cc2cd17526b886baf322bfbc6cd71ff7c3d370a060a66dd0a1389050d40866774270726e4b34
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/056C91765E143596083C/Recovery/WifiKeys_04-07-2024 16;39;24;105.txt
- SHA256 e26a076466ee12e2dd88f5a717d5baa8fd34256a60e3ea9b97e7b28119b234ca
- MD5 dfd065b2e2c85e46eaec3705371978a9
- SHA1 db853ea82aae7fbeb7d0d01c56224e8d2dce0e86
- SHA512 bca01d8ef6363c11d392cd9328c432f5865380646e3de5fc5c993aab2a6312b006e2de2c7e8f86128044be8989c76f059ec8191c5a3b3b1b4ce5e5beb97317b3
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/168577EB613277D02A59/Recovery/DiscordToken_04-12-2024 20;44;12;096.txt
- SHA256 9ac7f0fce6433b2db1c9aca0fe1e589bf432f4d1b4120b495ab85c6a4343a3c2
- MD5 b7cf3ccd4bdc4e2e885e57435f65fb7b
- SHA1 e6ac88a99b439776dd2632bf1c4ce14f1c9fb057
- SHA512 d9a47f7b338bd515a2af681329f95f554c7e2e75a6e389e96060f9b398748ed0c9f2700f234b33597f3dd7c1856c395770494584a1218b4729f6808d58cb6c6a
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/168577EB613277D02A59/Recovery/RecoveryData/autofill.json
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/168577EB613277D02A59/Recovery/RecoveryData/bookmark.json
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/168577EB613277D02A59/Recovery/RecoveryData/cookies.json
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/168577EB613277D02A59/Recovery/RecoveryData/credit.json
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/168577EB613277D02A59/Recovery/RecoveryData/history.json
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/168577EB613277D02A59/Recovery/RecoveryData/passwords.json
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/48EB70D0CE0AFA8F224E/Recovery/DiscordToken_04-28-2024 17;47;12;285.txt
- SHA256 251f1f0873cbb50a79da7bf46cea8ddb15b71db5231a1ceef8d4d8a34753b641
- MD5 29b9d3a3710d1b5ed5c92693e002d29c
- SHA1 3312f726c65447d552383579083913c78770bd18
- SHA512 7fad5a5bc221f00ec598e0c2f0ae377244a9e687765883fab1f0ea1c5bd7a85e6d2dcb2100ed192682727f7ddb98ce781fad5eb86cec3fc4203af68890834fe2
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/5D1DAD76CD1CC9291C33/Recovery/Chromium_04-27-2024 11;00;44;390.txt
- SHA256 41aa2da5ed3aec371a383953573205b26ccf988acb42a9dade0222e1370647dc
- MD5 73b4d3d0a0c6b2e770d73dcd42f55a17
- SHA1 cb0e593727ff0c90950e5b25ed1284711a0731a9
- SHA512 a614c155f4341c545d8aafb58f173f16e0e693223f8a1178f838174e870f970f78bce628a9e21fc7a61582b637333e5807e1743e3d4ba9073382ed53b87a9f05
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/5D1DAD76CD1CC9291C33/Recovery/DiscordToken_04-13-2024 11;12;35;159.txt
- SHA256 92b9e0b79bb528707a04ec1033dde83f34daf2cd04d66d112216e413f8fbb230
- MD5 45c7677c0083b3b3d958c0a01adb4af6
- SHA1 a033557b37a0f88af3c01d6b3027f6067bb04c3f
- SHA512 792666e23cbfdba381456bebc019ee0bef2938d661c199ac2d4778c0132dbe1ad82f6252c759710fda4c12e818269fa620e9146bfa7d412953786d41206800b9
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/5D1DAD76CD1CC9291C33/Recovery/DiscordToken_04-13-2024 15;33;49;282.txt
- SHA256 92b9e0b79bb528707a04ec1033dde83f34daf2cd04d66d112216e413f8fbb230
- MD5 45c7677c0083b3b3d958c0a01adb4af6
- SHA1 a033557b37a0f88af3c01d6b3027f6067bb04c3f
- SHA512 792666e23cbfdba381456bebc019ee0bef2938d661c199ac2d4778c0132dbe1ad82f6252c759710fda4c12e818269fa620e9146bfa7d412953786d41206800b9
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/5D1DAD76CD1CC9291C33/Recovery/DiscordToken_04-27-2024 11;00;57;063.txt
- SHA256 92b9e0b79bb528707a04ec1033dde83f34daf2cd04d66d112216e413f8fbb230
- MD5 45c7677c0083b3b3d958c0a01adb4af6
- SHA1 a033557b37a0f88af3c01d6b3027f6067bb04c3f
- SHA512 792666e23cbfdba381456bebc019ee0bef2938d661c199ac2d4778c0132dbe1ad82f6252c759710fda4c12e818269fa620e9146bfa7d412953786d41206800b9
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/5D1DAD76CD1CC9291C33/Recovery/RecoveryData/autofill.json
- SHA256 7dfd7af7db1ddd49abbbb142076f67b31ebef86b464a93da0165c91408b1ed9e
- MD5 695ca307f1bd60389280cd81e1dac95f
- SHA1 892d6af44a21d412d8209c2975c3ab0a77c037f1
- SHA512 d11060652da18bf514d9ff9f2c356eb9cfe082064d288a2f9240793d570dd90cbc078862f4d6bc5e131b17be85f3c5cc11c5ce0ca3acf82d0bed914248ccada2
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/5D1DAD76CD1CC9291C33/Recovery/RecoveryData/bookmark.json
- SHA256 0bccca8e7acbc39ee5784bbd070284e5a6edeb0a0b63de040010af83920207d6
- MD5 278bb705cf7f1f00e0e509f671946904
- SHA1 239a1b544578db5a03054b96e1a76b7b60491729
- SHA512 eb734bcfe1a8f6251b0e391e7e390dbab1f36cde978b2862b486b35bb75925a9fe700e0f1dc42261a21ea944c8187519903dae516c3ae5f9a19627d3133cd39f
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/5D1DAD76CD1CC9291C33/Recovery/RecoveryData/cookies.json
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/5D1DAD76CD1CC9291C33/Recovery/RecoveryData/credit.json
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/5D1DAD76CD1CC9291C33/Recovery/RecoveryData/history.json
- SHA256 8558fdfb45c50b81d3491b259e980c1a13685368f07d87fc35bdf8eff07c8681
- MD5 300c83fc8e618b2d7cb3bfcb991f8bd9
- SHA1 55b95b461c9ae2dc2e5679197bb27d57d954623f
- SHA512 7ec6ec309d7bf5bebd470b19338393f74d9ee2bff51490c5580e361bfa87f95306b81df35cbc078c8186c9b0b8dfc1b434f485967562fcf07902506f3081e637
- SSDEEP 3072:LzaEuVu6E8n4pkiesulBKCFyE7TELvWjLzb5F1rL5x4ftZb1c7:LzaPY6E8n4k1KCFyqTELvWjNFp5x4fZ4
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/5D1DAD76CD1CC9291C33/Recovery/RecoveryData/passwords.json
- SHA256 8c73536b7a4ff8769475c8e1c707d17a227e60ea686401dafca3b8133a42aad1
- MD5 b2bb2fc112bc2509817dd9d0cd7c0c7d
- SHA1 fd2ab9406c0dc7a750e1e3f2e7022fe0e7922a62
- SHA512 49b1e981bd8dabc25d16e35e692a435e6139d4ee0174c1e9288756e355c628f3e8b36d5aaa63473a741557dc1f0e872f2e056f162c4c816995cf163c10471db2
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/68083B36C27A4B335E19/Recovery/RecoveryData/autofill.json
- SHA256 1b3f648dd1cc80b955304a7c0ef1e2205083b8e69617058d657db9e849882764
- MD5 15ac7c0f1ee4a4638c4abdc8347f7e3b
- SHA1 21d7d0c9d9a4c4a61797b7aeb340e51d0cacce0d
- SHA512 3a96670fa405a54e90ec2f36966c00b9345b387155f81b9d6c95f4de80a774921b09b7aee5f4439ef0c8f4539f2bdd4ee4a77abf90e4f45de9a44ab01421645c
- SSDEEP 48:P7+/9W/mAI/0Xa/q/+/l/f+/Z/G/p/Lf/L/x/m/x/Q/x/r/T/N/aY/4/Y/V/RvTF:zE5dlD9t3J
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/68083B36C27A4B335E19/Recovery/RecoveryData/bookmark.json
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/68083B36C27A4B335E19/Recovery/RecoveryData/cookies.json
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/68083B36C27A4B335E19/Recovery/RecoveryData/credit.json
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/68083B36C27A4B335E19/Recovery/RecoveryData/history.json
- SHA256 2dc8150c4b2aff6b78384e9a6b8bda9c6fd3f43c5da7aff92be717fd8869423b
- MD5 1b23e2405c308bd97e7e46903d248e83
- SHA1 664d93b18d4f7e5c60bff5417ccebfe78094fd73
- SHA512 eb331d8ec92bf34fe30c3b495ca2dbd63b8f06803794566f6d02d5c31dbdb27299818913a103a63e8333bd53abfcf72093a8dd45441e470da89f77ade881673a
- SSDEEP 12288:ykrY+KAA4U6qnraDgknJXFQ4b7dW4KUpAzf8nOIHEtPPv8qFcE7WrHPB8Ay1v5qF:ykrY+KAA4U6qnraDgknJXFQ4b7dW4KU1
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/68083B36C27A4B335E19/Recovery/RecoveryData/passwords.json
- SHA256 46e07a3c0257a130a29344f08504e91954691107757dfafd61d5fbd056e1fb50
- MD5 d23228ad27c2a8f3fd858bc7f0fd669b
- SHA1 8d9925c2f17ffdf05bf34974497ad15f5c38ec93
- SHA512 fd08e3e457b5ceb77bec23ca35a6b8cc76bde1571cf479fd5306d6800a5fd69c2ad66dd3ec4355c8aa64b94fb131f414712ca6115b0f4f9396e0696a94fd92ac
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/6F5FD469A3C5D2786729/Recovery/DiscordToken_04-28-2024 19;53;53;329.txt
- SHA256 abbe620a3096b1c2c19300dab866013519d181ff114a5a3099bdf98ad23da765
- MD5 d665d066942442b734712fcc19ad5578
- SHA1 487bdff13921c8f952b68cbc9d5c71afcc86f539
- SHA512 c8ddaf724f3b94e9305ea604e5c838408eca7d4c2881ea6dd6f826d19acba459a1c657179e211dfd5b2b483376403086a3014e9d1b48201efbf92da3817b21ab
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/6F5FD469A3C5D2786729/Recovery/RecoveryData/autofill.json
- SHA256 3c7ff99bfde0684c96af82d7c31496527ad7a82f441aaa164056cd6875ad64e0
- MD5 4250d13728937f6a3d978c4fc1ce54e6
- SHA1 4ee062d3451ab4fc0552695491b9a5cc2e792835
- SHA512 c091dab872a24c3c1fa360d3b1705a590e01c70207639da9e0318ffcde499427dc323c184b42c3938366ce130ce05a582fa9ce0d9b40e7bd631f140b99c1ac02
- SSDEEP 384:8Leyko1zub8H7tsvWL2wHZfx84hjoSn3vQ8Am5G/HIyWA7tIux+C:8L7kolub8bivWBHftuH91PN
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/6F5FD469A3C5D2786729/Recovery/RecoveryData/bookmark.json
- SHA256 69746d7cbb5dca187bf668099d8a47d868d2a510a2c9c3b1e64ed7db1e280cb8
- MD5 2f7108e172eb36705ee05bc7889ebc2d
- SHA1 fd1fb6c3093b6c37a574c4fab2349e694980d88d
- SHA512 a630769e4217c23cb0dfd0e56cda3f869a71f6474575e59697bd9052d0194079beff87de9d293e7950ede11558facec34ff2ad2a6b5f604bbc8c79dfa5313c02
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/6F5FD469A3C5D2786729/Recovery/RecoveryData/cookies.json
- SHA256 045dc5374e45e1989167411d33bc1810c59fef7b7c95239913000bea016a01e1
- MD5 b333d74d4cd1d6ac4c362f4a9d190bd7
- SHA1 50f449d30ccfac1057c496607ff796e8ee4756b7
- SHA512 b4aa0516309a8ef06fd5a81840b1a0629ae9ade8c3c5b7744c4f151b9534c0287246f6b35c8441f243b09a944285339dbfeca779117badcbe2a5a8339db1f66b
- SSDEEP 1536:sYjVlMJ7btDXVc1rMDOj7cxDzht19qqZYpnHPVhHefeLCG:l7+IhH6AF
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/6F5FD469A3C5D2786729/Recovery/RecoveryData/cookies.txt
- SHA256 0e6b128ca0ee26c9d66861b406c32d26847d60e67cbc9eab911c44e80fe804fa
- MD5 aeef9984343687ca3d1fbc6315af1590
- SHA1 858104ce4ba2534dba1a01c1993d87730bb3c529
- SHA512 ac5657fdc98639f420e849354a721a0a3cf75c8cb40431d8ea1c44f55ec6eb28f1c1fc3f48e5f89f044b28c8847e6fc153d210e33dbf4f1caaafb37570e444ec
- SSDEEP 768:4fWz88lMJMu6SQn/i5PcQKwn5i98OObRyLTLzLSYDQHuGTd:4f+lMJZDO/iwwnPlbYnHzQHuo
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/6F5FD469A3C5D2786729/Recovery/RecoveryData/credit.json
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/6F5FD469A3C5D2786729/Recovery/RecoveryData/history.json
- SHA256 83179362907e2af8d0650f1707314312d39f9f069d4f3f974bbc27b4f879b52d
- MD5 3acc2070ebcd905c8ebb18597d33acfe
- SHA1 60b480c703ee155dea319a4f9017285c2d9094c2
- SHA512 d0f576e86bc920e48f9ad99631497f6ec5fdc56eb03c257fec2e557d7051ea0db16814526e939b308f98523441711f53b4e1e306bcc9db5d6d8c10a025c09f6b
- SSDEEP 49152:VKfnZ4SB5anXqWdozyTVHeneTHleUc+maAs2S4fmWAaH6QNOQaA3veBwMRCtd1cn:D1
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/6F5FD469A3C5D2786729/Recovery/RecoveryData/passwords.json
- SHA256 b181c444aa219bbd0add0b21d23cfe299a5fa95cea34438e627a5932dd9682fb
- MD5 b5b573a597340aa2768fea745f58983e
- SHA1 cb4ac2965168f9efc51ca5880311f65b44169d7a
- SHA512 343394873f1a1d5039ffd181f4095039f9515b463168424eda64426696eda06f53edc23f61c77a7b5feaeb4ecd166f9ff56755c123a0bf81063078ba17faa117
- SSDEEP 192:3sbjpV0HzKbj2bDsbjJFJLHIqb3dbjgFma7gCDbjd2AyMOA:3sjyOuUxfL9Z4l7DwA/OA
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/79FFA9B5EFAE8CAF9099/Recovery/RecoveryData/autofill.json
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/79FFA9B5EFAE8CAF9099/Recovery/RecoveryData/bookmark.json
- SHA256 38cb7b8cc2acdce5809b6b4bc6017f68061bb5377b3c367ebbc3285eb8b29d67
- MD5 fbd64865e019a143be04de4653ec2680
- SHA1 170f5780f52b0a2986cb5b58062829e3c7ed57ac
- SHA512 1e5477416600a9bb8ce0ca50ba9ffd187f80d467a6e924cd32bfe551d5e0edb2551548d70ac469600bfcb36d5261b15ff95d8b92effe44ae6aecd3d3076f9ccb
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/79FFA9B5EFAE8CAF9099/Recovery/RecoveryData/cookies.json
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/79FFA9B5EFAE8CAF9099/Recovery/RecoveryData/credit.json
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/79FFA9B5EFAE8CAF9099/Recovery/RecoveryData/history.json
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/79FFA9B5EFAE8CAF9099/Recovery/RecoveryData/passwords.json
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/9E8294B154DD453AE185/Recovery/Chromium_04-13-2024 18;21;34;440.txt
- SHA256 cc97d710f4034c0c6a3127c12c9dd1675d14c1ca0679168fe5b7bce822592675
- MD5 99cf1a9c6f35164df34eea44b321d860
- SHA1 2328ad687064edd84442c413e14469407b14b5ed
- SHA512 942ac2d4bba4a70c76be5bfb291b06ed466a035d36c663a73e0ae030632b56c354e48dbcf238ce3669b4a2faffdaebc4b9f6309fe0c6463d72f9210b68dd5675
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/A36500F0476863C7444E/Recovery/DiscordToken_04-26-2024 21;34;22;009.txt
- SHA256 82197cd801bfd5aeaa47a800e07850a3f7450bed5e645efe70105a4bfa7aaf15
- MD5 3cac779581666722065af334d48b24fe
- SHA1 7e7ff947092423b9964ca0629c49ba923faa81f3
- SHA512 9b262c3a0759142f27aca2309b83817be6ee2edf76b923430ee7d5b200efed0d7693a9fae5bbe6da2b46fad7db39ba16c96e9e987b00fbc8dfee2bd0a763e6aa
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/A36500F0476863C7444E/Recovery/DiscordToken_04-26-2024 21;37;02;655.txt
- SHA256 82197cd801bfd5aeaa47a800e07850a3f7450bed5e645efe70105a4bfa7aaf15
- MD5 3cac779581666722065af334d48b24fe
- SHA1 7e7ff947092423b9964ca0629c49ba923faa81f3
- SHA512 9b262c3a0759142f27aca2309b83817be6ee2edf76b923430ee7d5b200efed0d7693a9fae5bbe6da2b46fad7db39ba16c96e9e987b00fbc8dfee2bd0a763e6aa
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/A36500F0476863C7444E/Recovery/RecoveryData/autofill.json
- SHA256 21fe2216f0b1dfd50e4a2d8474c35a674c4a1d96b3e40fd6a73fe4f725cee19d
- MD5 194e82a38cbeb74f2a04950b4744fee6
- SHA1 be95a7ce1fcf2789cd38a3e63c0df878b8917b47
- SHA512 7ca2f584f81d83ce9737bc6634caaf6c6c1345dc0f32fe91295246e74fdaf62e6aa5104651d564b7200da4787673d792b612e56fb1cb9afc83b6dbd12dd96b43
- SSDEEP 192:oWEVjegOjQw/OMlkkNkt9tn8HKDdheK+kQjpwzycVdbnY90+/XHXKXQCRUsQhLg1:E8gac9O0dhehp3MQVxN64ais
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/A36500F0476863C7444E/Recovery/RecoveryData/bookmark.json
- SHA256 9c10647184199e08be944817a9ec11f56496dd2c5426540eee5b1785a1bb7da6
- MD5 1cfd318ac486eb936974e462c4db9663
- SHA1 5560a933d388a6e07b829ea49cbbafe625c75df0
- SHA512 b0c58e198acd15267d7b0f880c456ae4c88463983f629dacf2e82572cd9627c886ec312e3e5b10eacdae3a734c057ce597d13bffed54848e4385f083e2f5f89c
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/A36500F0476863C7444E/Recovery/RecoveryData/cookies.json
- SHA256 04dbe2de10cbc50286179b437403f3b0b4b5ed54325551e1da32421288079468
- MD5 f25116c2a16d930818d53dc23c29dec7
- SHA1 8920ac8eb535d7881b503512c045c10f3343cb03
- SHA512 0162be94cb56e31c23fbf159ea5bae93dbb22ed6b304b52b200d0296d6d8dede44e6b5289ee8ceef69acc9c9bc95e41867db0b8f2d55d540c64425c850eff03e
- SSDEEP 1536:FzJ18xxlIB7sRUx2bE3K8S5Er4qR+AwB3taerBauuoJ3EvQ0rrHzD39Fj4QTjsQT:aNlRUxJvdPDJjshxURhjxHs7pI
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/A36500F0476863C7444E/Recovery/RecoveryData/cookies.txt
- SHA256 7132f07e8459b76d147e17874f1dcc0571cdb1435c438c6ad5e770a8e2e61c8d
- MD5 0b60975a7ce200cb8923a8c423bd4674
- SHA1 257b11879cd0d2656774b191396f45180cc06cd1
- SHA512 1a8aa5554e67bfb5cd36ec5377250ceb994af8ad7d9a32ea7ad99b9f06e3d19343767dbe10ae414a12b31206e9f861e76977d29c24acf0ebe320feb7879672ef
- SSDEEP 1536:CzJ1/zglP8uXFJN9cHWII9SBauuoJFvu0acQcS2jqpkTWsaHO5Rg0P4d1H08whgC:qoXFJN9QvdQ32jqQpnpwAdsecK
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/A36500F0476863C7444E/Recovery/RecoveryData/credit.json
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/A36500F0476863C7444E/Recovery/RecoveryData/history.json
- SHA256 b1ea9d73cfdda3ea06013ad9113c754e89ac7bea898877b8bd433a2bbbf940f8
- MD5 d52e309cf37f7e66e637b3d41ebdfaae
- SHA1 71addc460f12168e8d38cf4a26fc84367cfff1aa
- SHA512 348ba76208d23d9bad8f27a5c48dab0570567ecb3af14428c6fc4a83e0722b0d9ef7c6f562698421c1cf98f9cb5a133f24990686ff034f4ae9ef20124df2ff5b
- SSDEEP 49152:CBphYCJSmWv3yJL8eB0Lvzxi7wrZJ2x3pMffPdNjM0TWV38LespOz7ruEKuaIrSP:X
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/A36500F0476863C7444E/Recovery/RecoveryData/passwords.json
- SHA256 61c2ceb65cdc173d94bfe97eed6c3a55c397eb52219936b25d4e1416bb265f2c
- MD5 91fb98731405fc584121f6195d3e7f20
- SHA1 186e007aefe1729fac633f9d32d7341f1b3e930e
- SHA512 844fb373434cd4d9e9d9b88bdbdadeea867748a3d2919f72c0b1564590311bab8937fefc5c0d34a33157d84f621c9be09de50f2473e2d240ac6b42bba8a164e6
- SSDEEP 192:zpOcleV1Nz/FE7hp+PtM00rSUhLaXtc2q7evLUipNpWuKeVo:zZE1Nz/FZOa+2qivjNVfo
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;11;695.jpg
- SHA256 07982d9155af9ff12741eba1578aa649cdc4640b043628337cbaf114f6c24e75
- MD5 f5ad0dad78532ba77b98bac706c43964
- SHA1 c3e49093592434ac6df89b8dba8febb788b32822
- SHA512 346d481126551b75af225b6c664d00c01004decbb2d36be6fea8d5cac4bcc6fa8d455dee3604ff78bdd312497a232a0cfaee3ce39429b0b7e83182b4b5e086da
- SSDEEP 12288:DdbXO47IZ0HmGat/QOq41AWN+5lkqZKzr8Fqko/:BfPaNj311Hr8fg
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;11;981.jpg
- SHA256 0690d0909af9991005f7b7abe01c830a4148ff10a7ce59a2a136a94237f368a8
- MD5 93297f37839fe30cbf213279a523b02d
- SHA1 90f5d8b215e44b10ec655141d7fa4e065a5c7205
- SHA512 77e66e3c5e0ec9f5cd48224a434c2085b6f06176b9da5e821a0e9da06bc887ab65cce3b7baef8005b674e5c303848d042c6e293175ed98027a3b5e94cbac647a
- SSDEEP 12288:TW5dIbOmCPKKkhNQrHfVfHZZXKnq7dPTr+4y6hyMljpJplszi:TRKmKKi9ranaD3/L
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;12;257.jpg
- SHA256 c95e3ec3454fbf580ca731d52a699d3e148e7c616da8d94a077d277490abd1db
- MD5 950aa0e2552f3bba2b4c1f949fa4088b
- SHA1 66cbdf14f66c8927ac70c9800125fa560049bce1
- SHA512 0a505f6d1effb4203103616ecbf9b5a8fbff3097f995d80643b2a7ce2b41393dbc44586442c0fb9b7b542c7ca41cb592cd16a6b405ef2436128f7a4fa19f1bb9
- SSDEEP 12288:E62YfvWA0vvWNN0RyW7SwIBYLK37B3Fg9dCEstrf1eASo:E6TXEvAgzxL2BV2dFstJMo
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;12;559.jpg
- SHA256 35fd2aa6f0e94a75aa56c15ff725c848a195177a12edd3ad31516315b06b879d
- MD5 9c7e14f32f39108ee5b97ad6ee3ba0a0
- SHA1 dbccd060adf0b4876e94b286f76459a176f5c184
- SHA512 a0b422bdb83fb7b5c912774c7de6e5ebde5b26dc26780ca90419955867a74098be410bb08ca42d54b47e8d0eb36b271ed4e10a83109a465510a33f23361b9010
- SSDEEP 12288:4V8QGmis4uKk/x5hqsLstCfXR8KUWLFVNWOyL3ARF3TkBAKTKCjW6y8:Cis4HkRxw6XPFmL3ARaBAo3f
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;13;006.jpg
- SHA256 1124a39755c6e0bb6c949a41ca672016db198685e3de56f28e93fef490c15486
- MD5 b5b2f75e7f143032c5c6fb3422793a93
- SHA1 4d1d4c28ab4cd3cfcb0f225d7946d8b266df7865
- SHA512 d37fcf9cc2389d458a98bbfcef76e9f4b53ae9d500e1f74d0e096bc987535130b48453f2b13043d264c182c2fb887ced9511cd1c23d8fc3ab97c2f916c3a521d
- SSDEEP 12288:O+NPeVoJ9mthB6dcUHaLULAVzSyENJ8bv0pK:DPOoJ9mcpHXAV2JNJicpK
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;13;390.jpg
- SHA256 97331749b092661bf92f7b77e614dc8e3dec5b5071a36648a75f593b53b6aad8
- MD5 b0b8d318dba6702b43de2fd0642a0f70
- SHA1 0b90804fc68d4170b39ef563db5f88999c2de1ba
- SHA512 fdc0727025abb62dbe774044e90cb509736b0e9895efa2ac834f8d167d239f69f6fe15cacc68cf0f68b169f5b50c0d109161695a75f574722ad1e8fe8e6c1db8
- SSDEEP 12288:h1x3IXNcOiMQX9SCwam5Md1gl8Mofa8UKAEZ4GwSxMjBXSe7:3xeNViMQtjwaqlDGdUKAPGwSxMV
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;13;738.jpg
- SHA256 5fb73a30bda8a372ff409860929307ac4f80ba2979d7475700196e4d0cf50dc2
- MD5 8ff25d4b1f1f7d993b53f50838322d16
- SHA1 7bcbbf94239c0bd4e6b72911b6252bb5c67526bd
- SHA512 56eb1bba6f3184297d8f4506aeb26c1627da97b474a730da30faec7f582fee8ff98e16032449712be8ca87d597da9b7b84ddce4cf4719b3b84359b823ab652f9
- SSDEEP 12288:F6vsNllv0na0ukUukI0y8hg9OQCECkKGB1z0RfnuS4d:FHQE1uP8mWNkKozcOd
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;14;072.jpg
- SHA256 dc96f5ac72617fba72fb7efce899b801f3ebf19f9410c067d939e102cda5447c
- MD5 7a6bb3cbda7287d6f0fb6c2c140f078b
- SHA1 cdc2ba243a38225a3b27f0e4134a0f99eef82cb0
- SHA512 668cb8941e5caf5efc76ee2b7fcf341642125a9f3ebd4c9aad3f8441ef836bc9ba0bfa38d6ff2bb1dffaf04289b4e52d71814b831e622c77f83e80af332e15e2
- SSDEEP 12288:hiq4Hi03mZGdAeUIXRPZw+ck1fbRcBZz/7gy:9+i02GdAKrdbRcDQy
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;14;419.jpg
- SHA256 fb5718fe656211b9646493bf285d6d63acb5d195834bd00e04a6a79742c255bf
- MD5 2c3cdf81e3dc02c6dfb4aeffee355e94
- SHA1 3a53feef80a6056203da56732f91f2afe1a409f5
- SHA512 0b3694b0f36bf02e18c6249ce7ed7deb502102d90827094c0a7b3ef59deebf09c66dea8474d63cb41b3145981788ee8b8f60ffa18517ae4d216b54d4f8f2afe8
- SSDEEP 12288:/uv7S8LX6whr7IuQuOMSm6LNjuvfjl2FuVx20uD/pOYMzCtgK8GALk0YoAoKK:673LMuXL6Jy2aJuD/wYvtgdk0YRK
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;14;790.jpg
- SHA256 8c898ed231bd4acfa14d00561b3542591421588e5b1be59117178ec1dfa586ac
- MD5 e39b1a3a79d7b74202ed2e73fc7308e0
- SHA1 2e5290824dbffce9bf508a5c6c2c65023feb8c15
- SHA512 9f91356fe6815dbe2e6676b263022b417e905897aa0b60ed3364f69721928eccfe3b5df1bbff808199c63a29e501ccf323989a1a2ed2524dde11f573ba6b4fd9
- SSDEEP 12288:c5yY/4lBxhQeBVrxLMfMWEoX0ec+iqu1ud5uM8EYatknckDQ+nm1:YyYih9BmMWEoXSU2DEbtkckDQ+m1
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;15;153.jpg
- SHA256 65099b262aca1c582a413ad00fb6e4d06b6b6c3fa99bddfc593ef04b6aa9a055
- MD5 9623f66a4ecc722c235ff344db89d2f9
- SHA1 c6c23d4714e557c3cd9f1ea571e10572d71510df
- SHA512 ee5d3b45ddbd260f5839938bf4dfc2a08f6d8d9f44759b9cb7eed7d3089c34afdb6881e357d8c5fe2f360cfacd64f2800fd59f21f36e91c893c4dbb542f27a20
- SSDEEP 12288:v1Mn/6u7AhWakisEHm9IM0SoLGRRhgzjiicadfJT8QIOpVveRVFc2:9aGkakhEHfpS0NfJo6Vv2
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;15;442.jpg
- SHA256 af732dc4b2d6d9a6c5b6753cdb8ab8f0cbc55a90b52908c987a981eea20c3b0c
- MD5 c16a4e936aa12305914ff1601a496f79
- SHA1 1137b6e3c175ec692bce177c83b8c8771d2192c1
- SHA512 6c47991e9fe139ed2555ca82d3ab40911e80f6d6a7eb289a11f31c9ded658030d24b309e977b77c84765e2c92e1fee3b64076d96dd0bc89f39f07a2e6cba2360
- SSDEEP 12288:FAfwZrnOLjIRLZXrLgif3CHtR/liNJdbDbvezYeUZhmrlV+7:TG8gifm3+Jdf9e+hilV+7
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;15;735.jpg
- SHA256 151ea88ba8faa2aa97c48a46e3f5c73c48931646042ba49fb5a5c0564088ad03
- MD5 a8b9df1d19ffb758c3e7d0e2a02a5ff7
- SHA1 5028346f62bc22b6c15f3ac384643b8ccd1e206d
- SHA512 9ab621a5db19c1a60fd0ff0c692c08f8a5236ccd735a02f50cc0b51706334a9d6c597882dae987e21550608c8aee6d559c2edb10591931bc13b62966c5333bdd
- SSDEEP 12288:2pE7WlGyPT2p7NaSSRDdxJgoO2aovf6Y94onal2dFO:2pENqQ7Q5Zzijhovio4onawd4
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;16;031.jpg
- SHA256 8b0985bb716d0dca081ec07dd7cbc31ccea2b0a072d9d42d2b00690c2fedeb36
- MD5 4cf59941f4a168e7a1e92d100025579d
- SHA1 747e553dab2982db1d2d35c501ee7d2c3a667c77
- SHA512 ef25d3efbae65ddfe9ac327cd1ee132eeefeaced05837fb84f7bdbdc2388e1814d22a81c5540ff2549e58a99223465670604eee698b2a78658a0097b6c6bb0dc
- SSDEEP 12288:rhM0CIH41TBAHV1T9jTvN0z8kGYL9/xj5CgigLsknq9UfuEOStZM:r+LY41Tw3N+AkGE5jtLFh28M
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;16;323.jpg
- SHA256 1021645e44b20f193ed7e68bd2cfa2f4560230a557f8e5d465cae2ab1c3c179e
- MD5 56552e69af44758ff2d0a4960e29e034
- SHA1 c8de6704a0bdc7411c88df8a4f779a32e42d95d4
- SHA512 14ff0dda5a6dc241fc22a6c422e0af9ccec5f0f9d6c1e6a9187080b19942550959d0775ed11341d185c34a609ed2a934acefadd55ca9a5c6e66dc21ad0634ba7
- SSDEEP 12288:61Ihy58iLMcfeutQLrzKj18LmFHQNUZz6D4s1ag70f8uY8kuPshX2Sm9DSC6XMvv:f85ac3QLJvmz6EsMYtmshiDjhNL
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;16;610.jpg
- SHA256 549bcf1abdcf751020a0a77f1909eb75e7f0c0b5ed014e432feb24789e505d50
- MD5 d50ffe7772a29e9bf1817310a48eddc6
- SHA1 12afd2c7a76314b73e559392b0d6970bfaa136db
- SHA512 d36b67bf7664e2c7426dcc27f37a324ce4b2cd08ee3b0e35d11d16bc3e72c3969e8a7715ba44e8b70a8e8dc044f2adbcc2c03c0eccc6ab0cee8ca117582229a1
- SSDEEP 12288:nFF65A0T6jjQ+4HSR7UX1jtnwN86Uw1xV2hsINY6L9BV9zvYCZvi:/hU6jvKSUXLwNT6RY6FpvYt
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;16;905.jpg
- SHA256 f1b43f5736d0f854de0f7b21e07c0f9d9d64c96c6664888075f060b68bd934da
- MD5 a9bc5cb4ecda427f13ad66b5f007a002
- SHA1 2a939ee144bad3a5ae0c37dac580cbac752e6c37
- SHA512 27614d0bde2778477cb941bb52df5b8d7973079e587c82ad321143b3680da83f1311639592d8aa7532fe6af70d354f0be9ab0d8d74c54ce27b2d817a09eaeedd
- SSDEEP 12288:zhbdHiWffW1rOQhadxpLFcYOyR556H9hA2CKRCZhrLttoYxEKK/9AzwxUm:z1dHDffNJ0YOiQhYIqh/PBzExUm
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;17;208.jpg
- SHA256 18e9c5e9eaf6bafce082d472b26206cc0f7c1d3cae8e6aed74389e49f0bcb690
- MD5 31540fc1c4eedc2c54893c4b27bc7665
- SHA1 021140c3f936e5ef0ee170caca1fc38c4bc6ba1d
- SHA512 3ae30c4cc7b6018be28ea948e98780fd69dcff886f278e201c2a9082762ab44716f73394dc666a43400c02639c66d84818a92cf6a725f7c3270877cd55ad0df5
- SSDEEP 12288:aNsDPjoBYJHM8DMuAIMJsUQ5UhD3FppPLaX/M+7yIXw6ChdC76xV8KfjrZYz:OsD8grRAIM62D3FTPLcMqyIXidCexV8x
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;17;530.jpg
- SHA256 f0e28bc6675afd7e67326adc992480a5c101cd4e20588ffba34905934a765415
- MD5 06ff6ad7dd27abd8528131b58991afd5
- SHA1 a7ee5888839acb9fc3f3be9cadebc120a1521f35
- SHA512 111050d21611697e42e2ff018523aa1e92faf0175d3e30abc745ddbaab1b3105b28a7de1138169c2d1df22e2edac0fee0d40cb0e29229db738eceffac5727deb
- SSDEEP 12288:BpW+ckmHnI3iaeaaIjrYR4AOSCnVt1p97XlmRmlmeh2PEoJP+bPCepJXT9V:BM+LmH2iaearaIb1p51vm+jCejP
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;17;803.jpg
- SHA256 7bc5c6e5598d01c3f5e2bc2e951501346f87a491d812665cb8a541ca11a2dbb0
- MD5 dd538274d2b749e7fb4c39ef49f7aa8a
- SHA1 80390e4ffbd23e4985cb7b4136760f98ce973466
- SHA512 e6dc12107e71754a820ba48da253a15ce21a37a2f8bb4c876178ec7a37a4764ac545bdafbad6297090f28b8f35207ef36893673bae29e829e3fc89b13b73a8fb
- SSDEEP 12288:ui+UQUPpWxlos9jReGU0cLlepfL99Nb92lT8d:5YUPpW9xIGgLY19gT8d
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Monitor/04-11-2024 20;55;18;083.jpg
- SHA256 7132bbea1493981a327703039f41f33dd2bb2cb91a99d615c19810755bbb4e19
- MD5 a5ccd0f1a794d41547e07dea776abc97
- SHA1 b1778ee3e74687f36e9be9fd09d51053d1423802
- SHA512 036beab7d5470901e2a836121638a22ca2de361c201a8da4087c33cdee3a7015c6667c80880ae4e6c63cad2173f61c887aa39a4d3431424e22a2c124c534fb8e
- SSDEEP 12288:1NIMgPZUIC1M/MdWKMOaApymzc1f+D8986jTci1xhSRsUMoUEwk/x5aad4gV2:wBxKwvOzpx0+DUjX/usVe9x2
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Recovery/Chromium_04-12-2024 19;49;56;311.txt
- SHA256 d0b685f56313871e54a8bba55781c61c1ee2861e5ad58e8396c306c0b378ca89
- MD5 f5825aa13e7ad5fd81d798103a3511a7
- SHA1 9be845e96608c010ca1bc521b4a3dea238bbf4d5
- SHA512 f141c09157502f331f0100edbdb3ce8874457b0fa16d66a3a61d80067eeb0a450af38a288b912a9b5fcd7c1df639115eff15b9a5bb747dae990bed3dfe2693a9
- SSDEEP 96:KInpc/MRwB0xRRqBVHwU981217yH2IX24zMEI8Mu5RMuPH:KERW0cQUTyHbXbTI8nRx
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Recovery/DiscordToken_04-11-2024 20;49;24;684.txt
- SHA256 21f77413e75d8c19d32fcf117fc45cae6a0419c5f14d42aa8dbd36ee3eb6788a
- MD5 bc0a51b6a647a5481b19586ab19754eb
- SHA1 f160f427f121b07a4ba908fc69a81509c316eef8
- SHA512 f80bb20b74ab9edaf855515f579552edaa4261b3f0326478daf819277bee316252d11652f130fa57a9d2c532a2acc11f0e20656a68ca84b6685f6f0079eaa345
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Recovery/DiscordToken_04-12-2024 23;31;12;604.txt
- SHA256 21f77413e75d8c19d32fcf117fc45cae6a0419c5f14d42aa8dbd36ee3eb6788a
- MD5 bc0a51b6a647a5481b19586ab19754eb
- SHA1 f160f427f121b07a4ba908fc69a81509c316eef8
- SHA512 f80bb20b74ab9edaf855515f579552edaa4261b3f0326478daf819277bee316252d11652f130fa57a9d2c532a2acc11f0e20656a68ca84b6685f6f0079eaa345
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Recovery/DiscordToken_04-28-2024 15;36;14;968.txt
- SHA256 2a925f64d36be5feadd135a25770d2a0899e749cd123e6a9e3081007c952af47
- MD5 e147f9078d25933181befb60cfe35083
- SHA1 a3e577f17f964aed55499a0ea14260c595137eb8
- SHA512 569e6591678c8e4ac0a06457c1527c13c466a49a98b93cec556ccbbde4b3e0eb79374bcbc7840567f3b6f8ad2f084cd597a6dc8b13cfc7ad6359f1b1808915a9
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Recovery/Telegram_tdata_04-25-2024 19;16;41;685.zip
- SHA256 f702e2d0bd48c3ea4bd8c24dc2fbf79a9565f25c651dec40a9393393ed34e66c
- MD5 bc9c00a34b953051b430a795516d347b
- SHA1 8e50fc67495c45aad0d5ac0ef6b0fcbc98ab265f
- SHA512 ebf12ee32e2d4fc4d4ca4815fa64e001c1d9bd09bf9d7077d9555f2b4f55b8778406959e6d71dea50da75eb24ffcd969e9c26040d8526da41156b125b8266143
- SSDEEP 96:DLAPkyeVJFl4evAf6zxhIOKMmvReNQkH65Z+MGV4N6vV5BripVWrqm4Jd6f4De5:DUPkycDl4eVxhI5tvBkkCvBGHWrqv65
- MD5 SHA1 SHA512 SSDEEP
AA39C4F31D51C39Bs
- SHA256 9a20acdcab65fbd08ab9f5ea924aa4680b36a328888ba640c40963be83dbfad0
- MD5 fec1aa50cb8038856d172c43ab235cdd
- SHA1 6cb087c83631bbbc7092efce3ce3b2f317869644
- SHA512 052e027b040d8a79989a9efec20d3025e7398799d56d94a4bec7bdd5090c6fdd4b65228d7e91e69f7dca1edbd0a9305d1231efa1e0c48f06c0f4b2d7f7e5cf09
- MD5 SHA1 SHA512
D877F783D5D3EF8C/3B4E9BFAA303B19Cs
- SHA256 814040261ce93014685ff57208afd825e680607a4ef96a5a8cc9fec28e102b55
- MD5 51d7d651b25b97b0c21ba886f12cd86e
- SHA1 056ee5f9fbec3b5907c18837d32f798d052fdbb9
- SHA512 f97150ed79147cf3f6e33445f67c7bdbe93fe503b1e366fde30a5bcbfe38c496106de0eaaa413fa1bc1789adb6b265a34872dd4db671a71cc475ec05a01af116
- MD5 SHA1 SHA512
D877F783D5D3EF8C/FDA44782FB7C3560s
- SHA256 74fdf1ac7b92c7c314262cef2f2c326ea137b2042ff84c1f4d83f27c50c7bf0d
- MD5 71dad32654d62da297f6bbf46dc7825e
- SHA1 592f93c5262c3d0da886eb16c0b25127d9db9b3f
- SHA512 eaf38b1495cd76d63c49a405117a6a5fb7256031ec0192298f90dfcd3d5d278e75bab3aac3ced45068dcea2d8eefb572667930a215acaea18a2e7d8f8ebeb4e3
- MD5 SHA1 SHA512
D877F783D5D3EF8C/configs
- SHA256 da62ca35732d554c052638205d45fc30cd6a91077ffee377d41ed6b3e6a044ce
- MD5 f3cb53f5a552fbf46170a203a1d6d095
- SHA1 c1a2c0c3753a006ccbc627bb88eb2b451a4a51d5
- SHA512 ce3f6c48e8af91b5c1fdd0a098ae5abad09c24ff38e1f170ccad71fdb80ae338663ccf3d8dba0e5c80edf710ce50642a6b7f534e548d552b7c2263607ba5408d
- MD5 SHA1 SHA512
D877F783D5D3EF8C/maps
- SHA256 bf4c15ce491fa126d1a2a65ce7402ab518ef00f88ea44e9a25a0ac21409b6100
- MD5 02a55bbe17ddbf3dccf93227bc4ea932
- SHA1 72cd3721129f1b6fae09d3694d470648d937fe83
- SHA512 ef95bab308e58e719e9f2f882d0bff69f1bd66ed13ac490e06d32c2dabadae2e2e56a66a1148176df6824bf1c88eab799a4bc5d075feabd8824a94b2519a91b9
- MD5 SHA1 SHA512
D877F783D5D3EF8Cs
- SHA256 882ba60720325cc7b78b07b013eccb35cb7dff1a65aa9054865bab04b730c514
- MD5 81f5fade5a6ddd8b17d4f16e290d8328
- SHA1 5491908b7943ff70679b87b6c7e66155c97ca8db
- SHA512 9a37cbbd2a97c62aa35a31c816cfc45aeda0ec379e7375c57190bb3bfc6c4333184e126ee97d0080ec1bc570314c38a8034841b8da83c46e677194780f58af2b
- MD5 SHA1 SHA512
key_datas
- SHA256 0f0349ef24c45fff9bb2f95509d9b8627c68225fd93d231eacecd7e493c72635
- MD5 9cda2f740a147e1fc230950cffa05535
- SHA1 552c114138848dc06b2be760b513fd4903cccbef
- SHA512 1f4f6d1d9d0fe4e81f81b8fd78ec9c7463ac35e11972f8cba4ea3c937f88d8ec2984d072424e50499ea6f67c65e1e4e4a7e5105ffb9ebb9f0d3194fba2f39e81
- MD5 SHA1 SHA512
settingss
- SHA256 7ee3804b6ac3b029ab4aad33d184b3170ec243ea457109d9fdb301d696b524e8
- MD5 c18c37c2a2f375a0cbf5e95b89dcf75e
- SHA1 106a4ae3f126428d1ae0c4a317cc6c0c37e2210d
- SHA512 5444e6f6b508dbf0261649e9de46f68066681c11264838d88b27874f3f5efa842e7f3f0510566af1dea725db97bb77598def18040da488a00cb290785f2f0896
- MD5 SHA1 SHA512
usertag
- SHA256 6595224ba1ba3ef27c7ddb847ac020fddfdaed8c96fbeef35d75ad0c52afe14e
- MD5 a295915a71e5963bf93f593d23c2e9d6
- SHA1 41d8599b4c2732099fb482b4ed792a8d525c083b
- SHA512 f3a29d42989bf156c7440f03c48955b18b2281a7c3609509d5ce7443a16df7a259414c3320fcac5d6bb18e468bfcf41ee4f187a00a4a0c962417ceea6890be4b
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/CBCAE7B5404B13A6C6E3/Recovery/WifiKeys_04-25-2024 19;18;39;752.txt
- SHA256 f38b57d7fb20118db31f594b34571a2b8f4cb2557ef02e1321ce357eceaa48d6
- MD5 970857fb604f5004738a6159443d2bd6
- SHA1 84766d1b42b33000556c8eb67afce330871aa5ba
- SHA512 86cb415728b16dff3b62ad3d35a580a35ab872e32d2ed7580e1de3f5800f1ba9b19d46eb82634aaac73431b1da1a5e46a622210aebe9f03c05d2067cd1e33424
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/EFD443990BC51A663387/Recovery/DiscordToken_04-08-2024 17;49;04;771.txt
- SHA256 f7f61e4f0a08e6eab01c1cc8ce6b0b9f8d152eecb0fa12100facee6300d05375
- MD5 e785ee3257fef223202da76f891e8cf4
- SHA1 573ef9a30d4e6e837a611fc596890764f09558c9
- SHA512 8eeeef85733378c7ce806ad5956014945d7bdf6f1bc96c8138e937bb3a0d3aa02f153d23ceaab20519dc8e565a79890a63dde57789fe20690afae3c93a1fba2d
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/FC9286EBD922A006345E/Recovery/DiscordToken_04-07-2024 18;21;10;330.txt
- SHA256 560c978f7f0f9bcd902c580995a4c76230bdecc52109115602b668ec5226085e
- MD5 687f261117a7e274b715cae9404a53d9
- SHA1 1e0ba99a62cfaccd12ca3f94d563f8b5bc84ee0b
- SHA512 8af1b92bc36e800307a50b1d616f75d0bcfdd82fc262bc27c9f7ab2e60627d78fd3392675e0cca5be6eb20a9c9fc47c9de9281d8cb1d223fd77c8ac5553ef860
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/FC9286EBD922A006345E/Recovery/ProductKey_04-07-2024 18;34;19;150.txt
- SHA256 485cb8d5980773c07e76d62e72f3dbb9877e1ed965337c719b548ea55430e204
- MD5 ac11fa5755d786f37f36aa5f2bd3739b
- SHA1 f39b7b862c106a9f1614826708e6af7a7bec5953
- SHA512 18b267138a745c81d670f520942f0aab061ab16abf4c4d9ad49e42eaca8dc184ae9de027934ccce7e40e6371c74bfe43b04f203b4b7e74b94432e10354936c4d
- MD5 SHA1 SHA512
Xworm-V5.6/ClientsFolder/FC9286EBD922A006345E/Recovery/WifiKeys_04-07-2024 18;22;37;282.txt
- SHA256 4fddb46e4bd4a02f4117d86bccd98f10d5dd62b1dd19974834fc192cd7d097ad
- MD5 0dbc876433fcb16bb6da79d6fa5677ea
- SHA1 7351d0ab2328b56976758ac80215b02020b8776a
- SHA512 06e94b344d8f7b6dd36bf454a227351a3d472b48cb90395b7485b23fd062c34ebe569f7648d5d2c0e722be4c6a97d88e8b1e821cb6a5096638a86812fd671c88
- MD5 SHA1 SHA512
Xworm-V5.6/FastColoredTextBox.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3701b19ccdac79b880b197756a972027e2ac609ebed36753bd989367ea4ef519
- MD5 b746707265772b362c0ba18d8d630061
- SHA1 4b185e5f68c00bef441adb737d0955646d4e569a
- SHA512 fd67f6c55940509e8060da53693cb5fbac574eb1e79d5bd8f9bbd43edbd05f68d5f73994798a0eed676d3e583e1c6cde608b54c03604b3818520fa18ad19aec8
- SSDEEP 6144:4FErOIif3RzSHh+20lXs1TzCeBcQeDbNlz7:eEeR52bmeh0n
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
346910
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Projects_CSharp\FastColoredTextBox\FastColoredTextBox\obj\Debug\FastColoredTextBox.pdb
mscoree
_CorDllMain
Name
.text
Size
331KB
Virtual Size
330KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Fixer.bat
- SHA256 d0e741141bd5dc58a81ed070e135dcd08730f8fcbcf5320e970068b1121682d3
- MD5 40985f35fd2f1e5109b11c9de16466d8
- SHA1 1eb87a260c8c2edadf13ffa2ee2de4469da46e8f
- SHA512 a5d64be324e708c496ab04c78507219ccbf941ecb39ae970bb7ff7fc49ece6d511b5e70d8a8f1efa0bf55fcea63e4fc2cc68e1c244f71add3baff7ad5de69465
- SSDEEP 49152:D9xM970V+k3CiKy4tQeE7xfjW8FmtUelitgJWszzw4yjCDf4N4Fy8NuHIAUrG7Nw:DE
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/GMap.NET.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 58c755fcfc65cddea561023d736e8991f0ad69da5e1378dea59e98c5db901b86
- MD5 819352ea9e832d24fc4cebb2757a462b
- SHA1 aba7e1b29bdcd0c5a307087b55c2ec0c7ca81f11
- SHA512 6a5b0e1553616ea29ec72c12072ae05bdd709468a173e8adbdfe391b072c001ecacb3dd879845f8d599c6152eca2530cdaa2c069b1f94294f778158eaaebe45a
- SSDEEP 49152:ot12Gb/hz7ZsK9qY5uyUW57VC4IB1+fXhQ1hyCzMw/22fSg7gjxhUE/nbTC0xemh:oLbteKb57W1+PhQ1HM1gmJ/SZmh
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
3002430
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.9MB
Virtual Size
2.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/GMap.NET.WindowsForms.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 741e1a8f05863856a25d101bd35bf97cba0b637f0c04ecb432c1d85a78ef1365
- MD5 32a8742009ffdfd68b46fe8fd4794386
- SHA1 de18190d77ae094b03d357abfa4a465058cd54e3
- SHA512 22418d5e887a6022abe8a7cbb0b6917a7478d468d211eecd03a95b8fb6452fc59db5178573e25d5d449968ead26bb0b2bfbfada7043c9a7a1796baca5235a82b
- SSDEEP 3072:k1GmgYqIY/0YSDBRGlDUqL63budipxj64m8HWYh3vHbFwMhLJSb+:lIO6rGloqL63qW62lJ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
155790
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
144KB
Virtual Size
144KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/GeoIP.dat
- SHA256 bc07ff22d4ee0b6fafcc12482ecf2981c172a672194c647cedf9b4d215ad9740
- MD5 8ef41798df108ce9bd41382c9721b1c9
- SHA1 1e6227635a12039f4d380531b032bf773f0e6de0
- SHA512 4c62af04d4a141b94eb3e1b0dbf3669cb53fe9b942072ed7bea6a848d87d8994cff5a5f639ab70f424eb79a4b7adabdde4da6d2f02f995bd8d55db23ce99f01b
- SSDEEP 24576:0L/59ah0USm3uwl00odi9AnW1fUmdbxv6bA3wOzRAc3InsZLONMrZb:+/59a6USdi9Ues6bV6boLO6rZ
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/Guna.UI2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c6264665a882e73eb2262a74fea2c29b1921a9af33180126325fb67a851310ef
- MD5 bcc0fe2b28edd2da651388f84599059b
- SHA1 44d7756708aafa08730ca9dbdc01091790940a4f
- SHA512 3bfc3d27c095dde988f779021d0479c8c1de80a404454813c6cae663e3fe63dc636bffa7de1094e18594c9d608fa7420a0651509544722f2a00288f0b7719cc8
- SSDEEP 24576:FIVZLRYIVQd9INo3FDbWX7SsOobBTEAjg+m+ZFNwaxwGoHQ/jzK+:+oWodbi9XFEAjg+m+ZFKaxw
- MD5 SHA1 SHA512 SSDEEP
-
AgentTesla payload
PE Signature issue
Digest
eb:22:ce:41:1a:e8:9c:9e:92:46:cc:c0:c9:06:fc:f3:4b:8d:c1:21
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sobatdata Software
Chains
Feb 21, 2023
Subject
CN=Sobatdata Software
Serial Number
7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Issuer
CN=Sobatdata Root CA
Timespan
Oct 23, 2019 - Oct 22, 2025
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 21, 2022 - Nov 21, 2033
Minor OS version
0
Major OS version
4
Entry point
2031518
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/IconExtractor.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 440912d85d2f98bb4f508ab82847067c18e1e15be0d8ecdcff0cc19327527fc2
- MD5 640d8ffa779c6dd5252a262e440c66c0
- SHA1 3252d8a70a18d5d4e0cc84791d587dd12a394c2a
- SHA512 e12084f87bd46010aded22be30e902c5269a6f6bc88286d3bef17c71d070b17beada0fe9e691a2b2f76202b5f9265329f6444575f89aff8551c486eafe4d5f32
- SSDEEP 192:7f77J4cGYyfQknxLvIgyLY5xJeU5pPpZlEAs:HS2yINgyLYLJR5wl
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16170
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\HMJ\Desktop\IconExtractor-master\IconExtractor\obj\Release\IconExtractor.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
940B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Icons/icon (1).ico
- SHA256 115f0db669b624d0a7782a7cfaf6e7c17282d88de3a287855dbd6fe0f8551a8f
- MD5 4f409511e9f93f175cd18187379e94cb
- SHA1 598893866d60cd3a070279cc80fda49ee8c06c9b
- SHA512 0d1f50243a3959968174aa3fd8f1a163946e9f7e743cbb2c9ef2492073f20da97949bf7d02c229096b97482ff725c08406e2e9aa72c820489535758470cf604f
- SSDEEP 1536:RBrn6a7/Zu/M615kfNOfEK3EpQkGhD94TtcmeVQU71qiLSeznFkKeUqvllR/t6c1:RBz65/M6If+3Js+3JFkKeTn1
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/Icons/icon (10).ico
- SHA256 7a97547954aaad629b0563cc78bca75e3339e8408b70da2ed67fa73b4935d878
- MD5 ad1740cb3317527aa1acae6e7440311e
- SHA1 7a0f8669ed1950db65632b01c489ed4d9aba434e
- SHA512 eee7807b78d4dd27b51cee07a6567e0d022180e007e1241266f4c53f1192c389be97332fcd9f0b8fda50627b40b8cf53027872304a68a210f4d754aa0243b0c2
- SSDEEP 768:VDRRKECMsn3H2GkmPe3KUDlGEJ57ukb8rJXAtnvWrpLDvZ8EZN:tjls3WGkoe6Uso9T8r9AtnertLFN
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/Icons/icon (11).ico
- SHA256 3b64b79e4092251ebf090164cd2c4815390f34849bbd76fb51085b6a13301b6d
- MD5 1c2cea154deedc5a39daec2f1dadf991
- SHA1 6b130d79f314fa9e4015758dea5f331bbe1e8997
- SHA512 dceebc1e6fdfe67afebaef1aff11dd23eda6fae79eb6b222de16edebdfebd8e45de896e501608254fb041824080cb41c81ac972032638407efc6bfeb930bfd00
- SSDEEP 96:hc4i1w+DSf0RxO/Csg9nL2CupMqM4pSg36IfgT9A+QdwhFKQfkIvxIm3sW88H:qa+DSf0RxOQnLjoSg3hfG5/X8cOO88H
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/Icons/icon (12).ico
- SHA256 84b48ca52dfcd7c74171cf291d2ef1247c3c7591a56b538083834d82857fee50
- MD5 4ea9ab789f5ae96766e3f64c8a4e2480
- SHA1 423cb762ce81fab3b2b4c9066fe6ea197d691770
- SHA512 f917059b6f85e4a25909a27cad38b1ef0659161c32df54860226ff3d858127d8da592ea9072ad41d5a9986dd8c04a37e9ad34e2251883a8c2f0933e6aa201414
- SSDEEP 192:8mEKEEjOjzSId77Fe0ggzSXlYtAMXa77gieRHw9S1IId:HUNdsgzS1EAEaHB8IId
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/Icons/icon (13).ico
- SHA256 2e2f17b7dd15007192e7cbbd0019355f8be58068dc5042323123724b99ae4b44
- MD5 e6fec4185b607e01a938fa405e0a6c6c
- SHA1 565e72809586e46700b74931e490e2dc1e7e3db1
- SHA512 13daeb2bf124e573590359f18a1d962157dc635a88319c9ed1a2e8ccad6322fb081579e1e8fbe62ffe55c8286c2bc8acb251d572a4beb00641ad5009a380e513
- SSDEEP 384:AyIh9xb9bexqcmOg1/JuiiiiiilllllioiiiilllliiiiiuGxbu:9Ih9Z91hJy
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/Icons/icon (14).ico
- SHA256 8fc693238afc49a8098dac1762bfae891e818bb84749c6eef5f1b0c6c8ffddb2
- MD5 0c24edec606abda7c6570b7dcf439298
- SHA1 4478a102892e5eb4bb1da8e9c62d17724965691a
- SHA512 f8de3ffb8f9fe1394b3626ae5616213d4612b43f0635fa9053d74ac6fe536657e796289487f245b8abff74f1de8368c0df8e56bf21f540366ed86a378649ea24
- SSDEEP 384:FY9tDXICTUj6Q+CUsn2JiAAA/////////A+AA////////AAAiA////kujYYFsG3I:+PMXT0
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/Icons/icon (15).ico
- SHA256 b2f57a23ecc789c1bbf6037ac0825bf98babc7bf0c5d438af5e2767a27a79188
- MD5 e3143e8c70427a56dac73a808cba0c79
- SHA1 63556c7ad9e778d5bd9092f834b5cc751e419d16
- SHA512 74e0f4b55625df86a87b9315e4007be8e05bbecca4346a6ea06ef5b1528acb5a8bb636ef3e599a3820dbddcf69563a0a22e2c1062c965544fd75ec96fd9803fc
- SSDEEP 768:0nnnnnnnnnnnnnnnnnnnnnnnQInU2/gohN/yRUZZZZZZZZZZZaaa0KaaILjeuFgZ:Rkccckccccct
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/Icons/icon (16).ico
- SHA256 3f3c5ce486e5b9fa88dc60b60916053e8808c69167df1a11287fd3cd6db1ca6e
- MD5 14465d8d0f4688a4366c3bf163ba0a17
- SHA1 9f1fa68a285db742e4834f7d670cae415ce6b3b6
- SHA512 01db4fac75136baf9c162265785877b21fba9c4b8d9dbe4e495191f15aa9c914e3d5baf1c4606041279a7138c7e5c8f4ccf6e64689354fc3fb3fa66ab3b1da2d
- SSDEEP 768:5As1Fd6jrW6QKysmsolxc4nvPQIfjRuw+mqbz9j1MWLQes2aXS5Cjr:5AMwflmsolaTIrRuw+mqbz9j1MWLQs2
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/Icons/icon (17).ico
- SHA256 12f600b09c0db00877684a950fc14936ecc28df8f0ddc6821d68e4b82077ad92
- MD5 167425a3fa7114b1800aa903adc35b2a
- SHA1 601e8bd872ea31aff03721a0361e65a57b299cad
- SHA512 586ce1360eb06f1df8e95ad178abfae7c9d41cba1be55276b3d3947d0504ca09185e543b7dbf1ba72dde4942ff626859a6d2e8a1faaaf6c5daaebd8740dcf538
- SSDEEP 384:keGRHCUZYDikdQarfw8lGqMtxoYDQqrp0KR1QCOICdu2kkyPgE+zi/hScVsUIGVN:8fY/lVoTlR1vCU/he6H
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/Icons/icon (2).ico
- SHA256 142b529799268a753f5214265c53a26a7a6f8833b31640c90a69a4ff94cee5ec
- MD5 f1463f4e1a6ef6cc6e290d46830d2da1
- SHA1 bda0d74a53c3f7aaf0da0f375d0c1b5aca2a7aaf
- SHA512 0fa93d009cc2f007d19e6fdda7ebe44c7ed77f30b49a6ef65c319133c0570ab84f2d86e8282b5069d7f2e238547722ac3966d2fa2fae4504133f0001a0387ae2
- SSDEEP 1536:WE4NpLpq8Bb7RFRz8nqF+o2Hc0cccwccyccxcccMcccNmccdccccTccccncccNJ+:j4NpVq8BxFRzaqF+o2GQJ7/JzqVfGv2
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/Icons/icon (3).ico
- SHA256 b2f7fb22cd5b935cf19a2f58f7fef9db99db40772ff4bb331a73c345161c2574
- MD5 a512719efc9e6ecc5e2375abceb1669a
- SHA1 51fae98edfab7cd6b6baac6df5ecbda082eeb1db
- SHA512 e0153dbc8f3fdda8d1a7082bc30a3895d7f4b3bc2982b4b4ece55653d1b4c293eba3ba6d4a0a581f0f7db95ab287d6616ef7bf03af4485904111798bf9d9e625
- SSDEEP 1536:Ms6se7llqn17KineXd2wwKtivEYoNRh8RX9EIKhI49NT:MsgbcUieNJHKoPC5+Ld
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/Icons/icon (4).ico
- SHA256 5bb21d6c04ed64a1368dace8f44aff855860e69f235492a5dc8b642a9ea88e41
- MD5 9c053bef57c4a7b575a0726af0e26dae
- SHA1 47148d30bc9a6120a1d92617bf1f3e1ba6ca1a2c
- SHA512 482d639ba60f57827d8a343f807f4f914289c45643307efaa666b584a085fe01ac7892252f41b7756fde93d215b4f3fed16e608bc45102d320d77239fa93146a
- SSDEEP 1536:zVRUhw3TWxcZss+SP21wH7QOK/PPLr8zdYpizfgMRHGuTRLJHPxDsPsx3CXhRcVN:ZRUGKXs+S++7KFSbxeY+qDDrMY
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/Icons/icon (5).ico
- SHA256 45c85bdaaf0e0c30678d8d77e2585871ea6d1298ee0d30037745bacea6338484
- MD5 9dbdd6972e129d31568661a89c81d8f9
- SHA1 747399af62062598120214cef29761c367cfd28a
- SHA512 e52572de3f0d57d24a24d65eca4ff638890ccc9c5aca3f213ff885eda3c40de115849eb64c341f557d601f566ce21f8fc0df25cc4b13aaad5e941449a6b7f87d
- SSDEEP 192:sVLDqC6ot/2AlVx1qa6mgIwEk4w00wILxuudXCnadwyHXZ:EH/6A/9d1qDIwEk4w00wsuuXdwyHJ
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/Icons/icon (6).ico
- SHA256 6ea04cf08751a2f6bb2f0e994258a44d5183b6cdb1471a0ee285659eada045b5
- MD5 d7c9666d30936e29ce156a2e04807863
- SHA1 845e805d55156372232e0110e5dc80380e2cb1e5
- SHA512 3cfd7a41f65c5a0dc23a90c6af358179efb3ae771f50534c3d76c486fe2d432ea3128a46b4b367c4714e86e8c0862a7385bd80662fe6ea82d7048f453570ed56
- SSDEEP 768:LZe7enyslZ87gUcXmEHNBFNJC5jWb2NM2:Npysa7iAM2
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/Icons/icon (7).ico
- SHA256 29d38c75af79aa0554f34cdfecb311f88f8dd02b02facaa299b9700841806ab8
- MD5 7891c91d1761dc8a8846d362e6e31869
- SHA1 0229bb01b7b4a0fca305eb521ec5dfbaa53674ea
- SHA512 ed14614a706da985566853dc13df0d1128a718f39ec9957320813803fe07e59de337d51033970e2f57d9f56da3546c506f5f0f3becfa91ce741576855be14ba7
- SSDEEP 3072:Y8SKfbzxcwg7es6/Vsb8VKTu549oJMfF/H9N3Ky9NzLn+:YUhcX7elbKTua9bfF/H9d9n+
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/Icons/icon (8).ico
- SHA256 a65cbbdc2ca671a9edd7edac0c6737b3b116e357727e003e5fdeff163c6c21ab
- MD5 af1739a9b1a1bf72e7072ad9551c6eea
- SHA1 8da0a34c3a8040c4b7c67d7143c853c71b3d208d
- SHA512 eeeac307371c38b75e256083c55a3fe4ab096c1c7520a4b7acb40fad3af5a0d6c88aaf85f2c3e418034abee422c2a3ba13731adf7ee6078016da4dd2e989b120
- SSDEEP 768:ygjWAisCkoAbhMDB8dfO944J+IiIxzAILEhmtkW9iVHD:yOybBYfOS4J+1oEhyiHD
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/Icons/icon (9).ico
- SHA256 bd1c33a67244801e828035904882ec53bd2ea8a1db9265a06d1aa08cf444ca80
- MD5 3e24e40b41ecc59750c9231d8f8da40b
- SHA1 91a701cf25aea2984f75846b6c83865d668ccad6
- SHA512 fe62edddb62dd4b695f1ef40ffb7a0119d480d1c176f0254acee19a45d6433ef6c308acbe567c721018390626c71f7a0f7bcd195d59d54c19cf019f13c4f7572
- SSDEEP 3072:HAZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ+ZZZZZZZZZZZZZZZZZZZZZZvZZZ+:H+GIIIIIIIhIIIIIIIIIIIIIIIUP
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/Logs/ErrorLogs.txt
- SHA256 633eef2d5302c0c224cd71aeb7d29901564f30e5a9b3d31cc0a55c1c6eeb3d5c
- MD5 f77f4fb386c891a5640cf26473cebea4
- SHA1 db2fc673ed4b895561caf8670d1e40204a3d6fa6
- SHA512 47fe461ccb295c95d951c0499d943febdc7b9b41923bd03b9b0876e52abc220cde47dd4a3ff13e98f991636fc21b6ef5297b679dde8dcd38b51cd0648eea38f9
- MD5 SHA1 SHA512
Xworm-V5.6/NAudio.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 81b3f1dc3f1eac9762b8a292751a44b64b87d0d4c3982debfdd2621012186451
- MD5 3b87d1363a45ce9368e9baec32c69466
- SHA1 70a9f4df01d17060ec17df9528fca7026cc42935
- SHA512 1f07d3b041763b4bc31f6bd7b181deb8d34ff66ec666193932ffc460371adbcd4451483a99009b9b0b71f3864ed5c15c6c3b3777fabeb76f9918c726c35eb7d7
- SSDEEP 6144:96/i10SZtfzWctj98vZcE0wmLlaIZs5eku2sX2hrjAzvgmXa6W9FwsT9idwktQZG:9yrSKMJR9aGs55T1X9Fwspi2tGpmS
- MD5 SHA1 SHA512 SSDEEP
Digest
d0:94:af:d7:9f:51:16:9c:c5:1a:e7:ea:23:e5:08:16:11:ae:03:76:1d:25:05:ee:5f:c2:9d:59:4a:68:c8:54
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Razer USA Ltd.,O=Razer USA Ltd.,L=Irvine,ST=California,C=US
Chains
Jun 3, 2020
CN=Razer USA Ltd.,O=Razer USA Ltd.,L=Irvine,ST=California,C=US
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=Razer USA Ltd.,O=Razer USA Ltd.,L=Irvine,ST=California,C=US
Serial Number
37:37:aa:de:9f:72:21:81:eb:6e:a4:00:21:65:fb:e1
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 22, 2019 - Feb 27, 2022
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Minor OS version
0
Major OS version
4
Entry point
510758
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\code\GitHub\NAudio\NAudio\obj\Release\NAudio.pdb
mscoree
_CorDllMain
Name
.text
Size
494KB
Virtual Size
493KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
952B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
38:27:11:d0:35:02:fc:58:64:ae:1e:6c:cb:c5:eb:67:eb:5d:dc:c8:86:9e:e4:59:cc:0d:02:0e:5f:d1:fc:9b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Mar 8, 2023
Subject
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Serial Number
06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 15, 2021 - Jan 14, 2046
Subject
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Serial Number
0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 15, 2021 - Jul 14, 2031
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29
Issuer
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 13, 2021 - Oct 29, 2024
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 21, 2022 - Nov 21, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
704578
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
681KB
Virtual Size
680KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/ActiveWindows.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 567b9861026a0dbc5947e7515dc7ab3f496153f6b3db57c27238129ec207fc52
- MD5 5a766a4991515011983ceddf7714b70b
- SHA1 4eb00ae7fe780fa4fe94cedbf6052983f5fd138b
- SHA512 4bd6b24e236387ff58631207ea42cd09293c3664468e72cd887de3b3b912d3795a22a98dcf4548fb339444337722a81f8877abb22177606d765d78e48ec01fd8
- SSDEEP 384:vRt5r7olU5QrGPbMrodT8ptsY7XZ1EDI6:vRtSRrGPb9t0Z1ED7
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20742
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/Chat.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 aab20f465955d77d6ec3b5c1c5f64402a925fb565dda5c8e38c296cb7406e492
- MD5 59f75c7ffaccf9878a9d39e224a65adf
- SHA1 46b0f61a07e85e3b54b728d9d7142ddc73c9d74b
- SHA512 80056163b96ce7a8877874eaae559f75217c0a04b3e3d4c1283fe23badfc95fe4d587fd27127db4be459b8a3adf41900135ea12b0eeb4187adbcf796d9505cb8
- SSDEEP 384:4MOna4ifKQtuUvl0BY0iYUsBG/crwTKvh6GIKoIafWUWmfN:vKQtuq2Y0lUUG0r0pIafWXe
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
24714
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
856B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/Chromium.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b6d8bccdf123ceac6b9642ad3500d4e0b3d30b9c9dd2d29499d38c02bd8f9982
- MD5 edb2f0d0eb08dcd78b3ddf87a847de01
- SHA1 cc23d101f917cad3664f8c1fa0788a89e03a669c
- SHA512 8f87da834649a21a908c95a9ea8e2d94726bd9f33d4b7786348f6371dfae983cc2b5b5d4f80a17a60ded17d4eb71771ec25a7c82e4f3a90273c46c8ee3b8f2c3
- SSDEEP 768:6SyQlmUmBlEu0FXfjq2sgDrLjfcVJ5sN9aWdMIxbKhJ+GEq3ZsL5f62:3yQltmBlmFXfjq2sgDrLjfcVJ5sNkQOa
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
38630
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
30KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
888B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/Clipboard.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e31a1c2b1baa2aa2c36cabe3da17cd767c8fec4c206bd506e889341e5e0fa959
- MD5 831eb0de839fc13de0abab64fe1e06e7
- SHA1 53aad63a8b6fc9e35c814c55be9992abc92a1b54
- SHA512 2f61bcf972671d96e036b3c99546cd01e067bef15751a87c00ba6d656decb6b69a628415e5363e650b55610cf9f237585ada7ce51523e6efc0e27d7338966bee
- SSDEEP 192:xh23MTInqHX7qRlrZk1/X7eOFXgNTer149iY6IW1mX/YWMqS7RSLOIU:cTWElV0/X7eUSTe5Wi2X/ShIU
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20054
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
888B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/Cmstp-Bypass.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fa420fd3d1a5a2bb813ef8e6063480099f19091e8fa1b3389004c1ac559e806b
- MD5 cf15259e22b58a0dfd1156ab71cbd690
- SHA1 3614f4e469d28d6e65471099e2d45c8e28a7a49e
- SHA512 7302a424ed62ec20be85282ff545a4ca9e1aecfe20c45630b294c1ae72732465d8298537ee923d9e288ae0c48328e52ad8a1a503e549f8f8737fabe2e6e9ad38
- SSDEEP 192:KpXpS1QWlPkiqdE7FNNGGO9mWbpGkjgyaYcIW1vr/8TNU7aL7YiLsO08hdW5:Kp5IfL0mWbEkUyaYir/oNJL7KQ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17130
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/FileManager.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b58ed3ebbcd27c7f4b173819528ff4db562b90475a5e304521ed5c564d39fffd
- MD5 641a8b61cb468359b1346a0891d65b59
- SHA1 2cdc49bcd7428fe778a94cdcd19cabf5ece8c9c0
- SHA512 042702d34664ea6288e891c9f7aa10a5b4b07317f25f82d6c9fa9ba9b98645c14073d0f66637060b416a30c58dec907d9383530320a318523c51f19ebd0a4fee
- SSDEEP 12288:bVnchrRTHcQ3nrn6xtI9qR5WcygA5KeirCDD/:btJQ3nrnMI9MUlr5Kei+DD/
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
700934
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
677KB
Virtual Size
676KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
900B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/FilesSearcher.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e66e1273dc59ee9e05ce3e02f1b760b18dd296a47d92b3ce5b24efb48e5fb21b
- MD5 6f8f1621c16ac0976600146d2217e9d2
- SHA1 b6aa233b93aae0a17ee8787576bf0fbc05cedde4
- SHA512 eb55acdea8648c8cdefee892758d9585ff81502fc7037d5814e1bd01fee0431f4dde0a4b04ccb2b0917e1b11588f2dc9f0bfe750117137a01bbd0c508f43ef6a
- SSDEEP 6144:ZAHdfUpnnBuIbE7SCQeGtSV41QJDsTDDh0Yhe6dwxLV/Quhg08OwR75:yVUpnkZ7slS4Ys50ie6Cfzg0M
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
495966
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
476KB
Virtual Size
476KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
916B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/HBrowser.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 75e8ff57fa6d95cf4d8405bffebb2b9b1c55a0abba0fe345f55b8f0e88be6f3c
- MD5 f0e921f2f850b7ec094036d20ff9be9b
- SHA1 3b2d76d06470580858cc572257491e32d4b021c0
- SHA512 16028ae56cd1d78d5cb63c554155ae02804aac3f15c0d91a771b0dcd5c8df710f39481f6545ca6410b7cd9240ec77090f65e3379dcfe09f161a3dff6aec649f3
- SSDEEP 384:tp33X3L5/QrX8nB9d13+6HcLReMWaFnp9l/1DRVTbg0Ut4xh+TfYMoKAB1R:tR3nL5/QrQ13kRR9bTbz+DYMoFBf
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
31318
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
888B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/HRDP.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4aa18745a5fddf7ec14adaff3ad1b4df1b910f4b6710bf55eb27fb3942bb67de
- MD5 f27b6e8cf5afa8771c679b7a79e11a08
- SHA1 6c3fcf45e35aaf6b747f29a06108093c284100da
- SHA512 0d84966bbc9290b04d2148082563675ec023906d58f5ba6861c20542271bf11be196d6ab24e48372f339438204bd5c198297da98a19fddb25a3df727b5aafa33
- SSDEEP 24576:3rKxoVT2iXc+IZ++6WiaTAsN/3ebTvK+63CWH8iA/iD2hgPjcC8SVdKumYr7:WHZ5pdqYH8ia6GcKuR7
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1790470
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
856B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/HVNC.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3a287acb1c89692f2c18596dd4405089ac998bb9cf44dd225e5211923d421e96
- MD5 30eb33588670191b4e74a0a05eecf191
- SHA1 08760620ef080bb75c253ba80e97322c187a6b9f
- SHA512 820cca77096ff2eea8e459a848f7127dc46af2e5f42f43b2b7375be6f4778c1b0e34e4aa5a97f7fbabe0b53dcd351d09c231bb9afedf7bcec60d949918a06b97
- SSDEEP 768:XsKVHERYe3lgPPTxOEUyP82P6mUrYrthCO7h2ORS9SQdHfiLpmbG8p:8K1ERYe0TEE3P82P1EMS36Kp
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
56KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
856B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/HVNCMemory.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 285b462e3cd4a5b207315ad33ee6965a8b98ca58abb8d16882e4bc2d758ff1a4
- MD5 065f0830d1e36f8f44702b0f567082e8
- SHA1 724c33558fcc8ecd86ee56335e8f6eb5bfeac0db
- SHA512 bac0148e1b78a8fde242697bff1bbe10a18ffab85fdced062de3dc5017cd77f0d54d8096e273523b8a3910fe17fac111724acffa5bec30e4d81b7b3bd312d545
- SSDEEP 768:EofXMCBlQ6Kms0n6GE30IU1YKtq9oQog1zq/xPP7:EyXTa6hEZU1YKwo8Uj
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
46462
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
904B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/HiddenApps.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6a098f5a7f9328b35d73ee232846b13e2d587d47f473cbc9b3f1d74def7086ea
- MD5 ba2141a7aefa1a80e2091bf7c2ca72db
- SHA1 9047b546ce9c0ea2c36d24a10eb31516a24a047d
- SHA512 91e43620e5717b699e34e658d6af49bba200dcf91ac0c9a0f237ec44666b57117a13bc8674895b7a9cac5a17b2f91cdc3daa5bcc52c43edbabd19bc1ed63038c
- SSDEEP 768:aEN0W4dmvWt9VG2LqIvwYGYRpXpWk/x0qqBi3qMG0gpfN3ffiCIT:SdmvWHVGMVwtYRtpl/x5qIXdEdXiCK
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
51742
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
43KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
904B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/Informations.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cba453460be46cfa705817abbe181f9bf65dca6b6cea1ad31629aa08dbeaf72b
- MD5 67a884eeb9bd025a1ef69c8964b6d86f
- SHA1 97e00d3687703b1d7cc0939e45f8232016d009d9
- SHA512 52e852021a1639868e61d2bd1e8f14b9c410c16bfca584bf70ae9e71da78829c1cada87d481e55386eec25646f84bb9f3baee3b5009d56bcbb3be4e06ffa0ae7
- SSDEEP 384:SCUEeL4D574MvGjydqXwxDJop0n3TmyxhxJNgSg4PbOFsK:SCXeL4DSjydqXwx1FjfNfwr
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
28658
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/Keylogger.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 acfe5c3aa2a3bae3437ead42e90044d7eee972ead25c1f7486bea4a23c201d3a
- MD5 246f7916c4f21e98f22cb86587acb334
- SHA1 b898523ed4db6612c79aad49fbd74f71ecdbd461
- SHA512 1c256ca9b9857e6d393461b55e53175b7b0d88d8f3566fd457f2b3a4f241cb91c9207d54d8b0867ea0abd3577d127835beb13157c3e5df5c2b2b34b3339bd15d
- SSDEEP 192:rJV/HNfwK5RSpyv3RIw9RtO1Lnq4Ur1XneDN6IW1Y6Uph1KzaA0UbnnSLWqV:fFl5Rp3RntMO4U5uD8Upml0yhqV
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23606
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
888B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/Maps.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 34b532a4d0560e26b0d5b81407befdc2424aacc9ef56e8b13de8ad0f4b3f1ab6
- MD5 806c3802bfd7a97db07c99a5c2918198
- SHA1 088393a9d96f0491e3e1cf6589f612aa5e1df5f8
- SHA512 ed164822297accd3717b4d8e3927f0c736c060bb7ec5d99d842498b63f74d0400c396575e9fa664ad36ae8d4285cfd91e225423a0c77a612912d66ea9f63356c
- SSDEEP 192:E0XOBqmqKYNg/ymxa07XW5U6chariK8GtnNK7gGteb1/C9T6IW14X/bmjIAd2vLV:mBqmqunYL6thaujK4jtepa9BX/bY1h2
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
21794
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
856B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/MessageBox.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bc09b671894c9a36f4eca45dd6fbf958a967acea9e85b66c38a319387b90dd29
- MD5 7db8b7e15194fa60ffed768b6cf948c2
- SHA1 3de1b56cc550411c58cd1ad7ba845f3269559b5c
- SHA512 e7f5430b0d46f133dc9616f9eeae8fb42f07a8a4a18b927dd7497de29451086629dfc5e63c0b2a60a4603d8421c6570967c5dbde498bb480aef353b3ed8e18a1
- SSDEEP 384:56lIcAn3tURnUKCvUUVT/95gG3UX/NZSQW9:56lIL3tUSvbVa/NZG
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20958
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
904B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/Microphone.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 612898afdf9120cfef5843f9b136c66ecc3e0bb6f3d1527d0599a11988b7783c
- MD5 9c3d90ccf5d47f6eef83542bd08d5aeb
- SHA1 0c0aa80c3411f98e8db7a165e39484e8dae424c7
- SHA512 0786f802fbd24d4ab79651298a5ba042c275d7d01c6ac2c9b3ca1e4ee952de7676ec8abf68d226b72696e9480bd4d4615077163efbcda7cff6a5f717736cbdfe
- SSDEEP 12288:+0OeMv3MrIb8CkZKobg3Wi1bRuSvazv+Uro:ROe+WIb8CkZLbg3Wa8Waz2j
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
558638
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
538KB
Virtual Size
537KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
868B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/Options.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5c34aee5196e0f8615b8d1d9017dd710ea28d2b7ac99295d46046d12eea58d78
- MD5 97193fc4c016c228ae0535772a01051d
- SHA1 f2f6d56d468329b1e9a91a3503376e4a6a4d5541
- SHA512 9f6d7da779e8c9d7307f716d4a4453982bb7f090c35947850f13ec3c9472f058fc11e1120a9641326970b9846d3c691e0c2afd430c12e5e8f30abadb5dcf5ed2
- SSDEEP 768:ULxkuz7dDWH839iybgkf/sGRNW9S9dhjcI:ULNHqUPbgQsGRNW9S9
- MD5 SHA1 SHA512 SSDEEP
-
Contains code to disable Windows Defender
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
36546
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
872B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/Pastime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a46787527ac34cd71d96226ddfc0a06370b61e4ad0267105be2aec8d82e984c1
- MD5 6430ab4458a703fb97be77d6bea74f5b
- SHA1 59786b619243d4e00d82b0a3b7e9deb6c71b283c
- SHA512 7b6cf7a613671826330e7f8daddc4c7c37b4d191cf4938c1f5b0fb7b467b28a23fb56e412dc82192595cfa9d5b552668ef0aaa938c8ae166029a610b246d3ecc
- SSDEEP 384:WK9Y5jI8MYODPqeivepi5zOY7//fNCsA8/h5U:WK9YNI8MVDZiWwr/TA8/hC
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23794
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
872B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/Performance.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 043b6a0284468934582819996dbaa70b863ab4caa4f968c81c39a33b2ac81735
- MD5 1841c479da7efd24521579053efcf440
- SHA1 0aacfd06c7223b988584a381cb10d6c3f462fc6a
- SHA512 3005e45728162cc04914e40a3b87a1c6fc7ffde5988d9ff382d388e9de4862899b3390567c6b7d54f0ec02283bf64bcd5529319ca32295c109a7420848fa3487
- SSDEEP 384:LtpW2/E3mawGD1XTgOw2QxHN7yVppy6+:JY2ImYRDKHxV
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
22034
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
904B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/ProcessManager.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7cf1921a5f8429b2b9e8197de195cfae2353fe0d8cb98e563bdf1e782fe2ee4e
- MD5 3d4ec14005a25a4cb05b1aa679cf22bf
- SHA1 6f4a827d94ad020bc23fbd04b7d8ca2995267094
- SHA512 0ee72d345d5431c7a6ffc71cf5e37938b93fd346e5a4746f5967f1aa2b69c34ca4ba0d0abd867778d8ca60b56f01e2d7fc5e7cf7c5a39a92015d4df2d68e382e
- SSDEEP 384:2dqZXY/oSd1PTQLvLELadRtZa/rnRvDSQUT5S97/Y5bLOEYQfwrpn45rDhUn1kAO:2dqZXWrQPQQtZqrRrlU+cYv1kAvZc
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
25286
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
936B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/Programs.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 953a8276faa4a18685d09cd9187ed3e409e3cccd7daf34b6097f1eb8d96125a4
- MD5 a6734a047b0b57055807a4f33a80d4dd
- SHA1 0b3a78b2362b0fd3817770fdc6dd070e3305615c
- SHA512 7292eab25f0e340e78063f32961eff16bb51895ad46cfd09933c0c30e3315129945d111a877a191fc261ad690ad6b02e1f2cabc4ff2fdac962ee272b41dd6dfa
- SSDEEP 192:Z3eKcfO/TCOAOG+uCno9SFwN4O4FgkT8zr1P9YD6IW1GX/V3wd0yzSLWVb:8PG/TCXF1SamdnTu5lYTX/NwKyNVb
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19822
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
888B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/Ransomware.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 14c2bbccdabb8408395d636b44b99de4b16db2e6bf35181cb71e7be516d83ad9
- MD5 ccc9ea43ead4aa754b91e2039fe0ac1c
- SHA1 f382635559045ac1aeb1368d74e6b5c6e98e6a48
- SHA512 5d05254ba5cd7b1967a84d5b0e6fd23c54766474fb8660a001bf3d21a3f5c8c20fcdb830fb8659a90da96655e6ee818ceefb6afa610cc853b7fba84bb9db4413
- SSDEEP 384:DVSO27QJHvpebFn0LC9Tk7ff2ji+ZMuqI+sHY4k7E7eEDuQZh:DVm7Q1vpebF0LC9TqH2Mj7qtqg
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
26282
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
904B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/Recovery.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 66dbe3b90371fe58caa957e83c1c1f0acce941a36cf140a0f07e64403dd13303
- MD5 776193701a2ed869b5f1b6e71970a0ac
- SHA1 2f973458531aaa283cdc835af4e24f5f709cbad1
- SHA512 a41f981c861e8d40487a9cd0863f9055165427e10580548e972a47ef47cf3e777aab2df70dc6f464cc3077860e86eda7462e9754f9047a1ecc0ed9721663aeb9
- SSDEEP 12288:LaoFeouLUFNFfcaFeFOFwcGF6cmFWc0FWc8cIcKcUFJFpcNcHc7cbchFFc5cbc1a:pFetLic805jbibGATp/j5T
- MD5 SHA1 SHA512 SSDEEP
-
StormKitty payload
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1157618
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
884B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/Regedit.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2f73dc0f3074848575c0408e02079fd32b7497f8816222ae3ce8c63725a62fe6
- MD5 53a2cfe273c311b64cf5eaca62f8c2fd
- SHA1 4ec95ec4777a0c5b4acde57a3490e1c139a8f648
- SHA512 992b37d92157ae70a106a9835de46a4ac156341208cfe7fb0477dc5fc3bc9ddae71b35e2336fc5c181630bac165267b7229f97be436912dfd9526a020d012948
- SSDEEP 384:0ZMOBwQbGwAspmewuYvpYr3fgr9A8/VjceZ:0ZMOykGRzYwA8/Vl
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
21678
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
872B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/RemoteDesktop.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cc52384910cee944ddbcc575a8e0177bfa6b16e3032438b207797164d5c94b34
- MD5 e6367d31cf5d16b1439b86ae6b7b31c3
- SHA1 f52f1e73614f2cec66dab6af862bdcb5d4d9cf35
- SHA512 8bc78a9b62f4226be146144684dc7fcd085bcf4d3d0558cb662aacc143d1438b7454e8ac70ca83ebeedc2a0fcea38ad8e77a5d926a85254b5a7d420a5605538a
- SSDEEP 384:nKr81F+CoNFZpeg7qX+mK3sxjt9l/C6I5YxBXWKeVFjyJ:KTvZY4gTPXBojG
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
24586
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/ReverseProxy.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8c4efe2c8702141ffa8ff8f55d248dc4220231ae8d12ecea1f22906a9285b32b
- MD5 a22d11379e413cf832b3943ce46f2463
- SHA1 99b9552e8a25bff29678aff828901edbc23eaba5
- SHA512 cc1eccb29135acd35804b44f73447bd8dedc8ea085dee3670cf49120baa905aa7ca512c14a3f4df6aeb5a70347bd214865f9dc8b709a00abbb0c745164d87074
- SSDEEP 384:sNsDP97BkZ3pBkHEk8G1QxFUzTNnrYFXoMZlS9yPCn:sNuR+ZZ+mScWfEoMZQ9yPg
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
22862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/RunPE.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7adfe849345edd76aa975b0647fed2ccaa5f4a6aaf7d55f488af939c0dbef153
- MD5 224be01635cff2dca827fbdeaddb983c
- SHA1 11fa00c5e172c9cd1c81acaef52934f785f91374
- SHA512 1a4915b7b21e8166a6ddb6460c77e02c306a460c08fc7ee574832b0576c827db343eda9533959298819ee443790769328ad580fc67fe4817110b63d49248c736
- SSDEEP 192:vbfqh94qP9XFw3l+JNGGOueq1JtSnIW1fUse2po7SLOYN:vbChWqPj5jJtGUse2poHYN
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17334
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
856B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/ServiceManager.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c552d11db168a4f64db584283a617a6ec51ab6095c20ba4b706c3138beb68a22
- MD5 2e5f127cb0a69cdd46aa4fd9e603f982
- SHA1 994a6ab276c417301ed9208aaaf6719bf9594bc6
- SHA512 4455cb3b9d4a9c69abec7180e9a60e16e6be0ae2290f48aa09c5d926370de5512ced4d37b6e6e49515d5f51999211eff6f751c4594db936882fb7f40ee5bf97e
- SSDEEP 192:D6FAiNLB2n5QnRBiMcs/XAaICPczrOFsgXTZr106Yq6IW1yShrM7+WAMLuO1Jjm:Ziq5QRBiMn/wpDUtTZ5nYsShY3AgJjm
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20534
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
936B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/Shell.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6c69b4d45638097e31169d94914e4acb6a8cc7f46788ffa4f241e4c1efb213bb
- MD5 04609b39e656e297db73be0d02c7e35e
- SHA1 f8abd484e7703a4d9629b033e8ec39c82eaf4654
- SHA512 11a88d55497fedeeb05b146ebd3135755aeb08c4596e9379eec83501e734aa6ba926d9bbda1c5f50e361836d65ea88d2c018f0b4b4b668c82ff2163730eaaf27
- SSDEEP 192:TDXwH3m0L3G33Kkw720sM76ODzKOFBLggT051i9Yd6IW1OU1YoWPbs5cLWT:oH3m0GqHT76OSUXT0HoYpU1XWoxT
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20966
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
856B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/StartupManager.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1802e16379d96021fee05f583633c8091bb669350b7d32064179a8944d45a5a6
- MD5 3d76ef15ab712b93eabd4b68ea0111d5
- SHA1 0f309663fae17c4ccae983e1fabb16a1e5f77d9b
- SHA512 6c0d0291abb696bee33b6e42392b07028c82bcffc8fb7934ba234f178f011ab14fde38cdccb322c8dba058ae66fc023349de5db1c587d3417709bf263cfd28f3
- SSDEEP 3072:7ITmgSRcBHAt+yM1KlUKEHBAnpK37nXnF8KBOQv174Syoh2sKdm/vl7bQcX1Okta:7MmgSRcBHAt+yM1KlU18g1xNYVc
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
199114
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
186KB
Virtual Size
186KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
932B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/Stealer.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 018e06f57725563e4525700edffafb1b062bf5d4b0e9fee498507f0f8200fcdf
- MD5 ade4edd66bc695c9465816fa2538d0cb
- SHA1 e4351a2531307c848c60b20ffb50bcc04156fdbc
- SHA512 e2bf3962787366d7a975eb55d2edd1fe35935205febc00f720dc0efff0c62b5df7f0207fd569f692205e8a227c059eea596904995855458e9c02306842e88a6f
- SSDEEP 49152:eVbwgxmbsO2B7wKOfpUL6GbriHeGAb4TkyNejjWSqE08:eVbFxmbsO2B7wKOxTSf
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
3453418
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3.3MB
Virtual Size
3.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
868B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/TCPConnections.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 27e17a43478448f64107df786a170753dbd116eafca7c027f6d357f11e6a4def
- MD5 9cae90969d14ab4d686c56bae19e041e
- SHA1 0359e8eeed993bbbc6f141b115bd533eeb52533d
- SHA512 04a9dc16299d866af7f56ff2ef355310d9437c909ec0dd3549d2f142e71149b09822106e254970f00801fe2f0df6b6d2670cf6a8256d85cd35b963c028f6202d
- SSDEEP 192:VsFaPxrfOKHEWS3/tQ6v/Lvyrq6gNZOtyEox0GTeA19Z/J6IW1Gz/yyY8RKIxLuM:/9GKkWuv/LyvSwyzTeej/Zz/IHUv
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
22454
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
936B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/UACBypass.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ebd51f1e33673cb8e55f10aa890a04027d62b1c1c0b0ae9b1d6f83f1602f53a2
- MD5 158e789d0b6cbc52fcb6653fefca38f9
- SHA1 4e913315dc3d69abe2be5e5b3a5d37b5f49f7deb
- SHA512 23243daadbad2f68b6ed6720d5792226f9c2aeb0b14cf3bf24ac54dcb7a2aa4aff9d26a5633d3add0d871e4ec65c230752c7c173cc4a4374f9263e2c46f9977a
- SSDEEP 192:kcq0WYKDFxDviOGOko8bZfmgyOYkIW1UZ/Xvjljw2ugiSL20V:kntNFxOrE8bLyOYBZ/XTugU0V
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15954
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
888B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/VB.NET Compiler.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1940d563046c67dbbeaf5f2a2417aaccdae587c1eb97b79c263994896805bece
- MD5 2401bee633ea4032a758ffc6d729deac
- SHA1 3040e0e27f48eacf45860be4ece6f94db7bc1c4e
- SHA512 af016b5d2bf8c08e16b593d72a25284f31d6de7300ef98a226db8ce4f2a9dd512ec793adf0730b40dc0a37e9dc5a9d6ef0a50354a697aa5816b3cbe440655692
- SSDEEP 192:TGESp/+S2SoW+O4A083xaU12HeZOCeJyxlTer1c9gotlF6IW1oXxvZLY4cGSLOBL:w3+O4aADifeyTe5agIXxvNccZ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20918
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
936B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/VoiceChat.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1a2da0a66c7771962d525b8fe9491052efbd5f87b97d935c267fd96519b5a35e
- MD5 56a8b030ade4736915e5b601a4bf39f8
- SHA1 ab03e7948c4604fbd15d285f674ea879082a8e7c
- SHA512 d0f2990adb10221c88bbe04b4f2b702f99c046ae9ce5e713e2d26f73f9353dfe5fd983cd37c7b712341a58cfc4f833e590ff1e449c66fd5de98604d58a92dbd9
- SSDEEP 6144:TkcVpiCslfiJOBvKbfaIKlEZfb78+SmmCENCT/7CbRNid2/c2Co+5CJfSp7Of:4Zjp8fIlE9bg/AgBcRCcp7O
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
557686
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
537KB
Virtual Size
536KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
884B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/WSound.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4bea01b7d691d1f59ca0bb5149e5baf71cde71019da3d352141b1d4921e70bc2
- MD5 f0d8beccffd6a4831c0712a4da4a0c2d
- SHA1 238a2878f1bef8f002ba501c1f65862ed384cc75
- SHA512 1c5244736aa53d5dda52b65a26facda8334bc7f98ce2eb6356c51fcae03b183623d0c3bb7f45993b8bab0c65d261a23164f987aa5f6a47f2f307380567367904
- SSDEEP 12288:Ayw8KX3HOt3qqDQkoJBBg3bgtP1TviDH6MJyKwYalFEYU:1w7qDQkocbgttGzTa
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
558162
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
537KB
Virtual Size
537KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
860B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Plugins/WebCam.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8d413b40aef41e53557d91f3b3ac64cfc13adb0f8c3edc364e7b8501170e2657
- MD5 71a9109ccafa90550c1c879a304d27f5
- SHA1 c77ce45aaf8b2d8aaaa2a41833275f3eda78046d
- SHA512 fc92190d8a889fb088b2e8c2e4ea4751fcda59eff076b205da7c420b2f26564c1835d6ff1af470b583ec2ec92c0fcfb472e443e29d33f538572e6edd36c8c47e
- SSDEEP 3072:pA0VnWR/jKGR5BfF/g50PBgakLA3LC2FY+EdzYZHAx+dqRN51hdJFxtZV9l5hhJz:pBn+22fFcgBgakL320zYZHpMXM/I/
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
220286
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
207KB
Virtual Size
207KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
860B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/RES/U40957361f7481084776e6aedU9f0U1
- SHA256 294f977ce530e3d471a9e2bb09305b6ad4516f42e3c2ce5c6c715f7dddb18991
- MD5 13f3948fa620d58ed6242262b575c784
- SHA1 8d8e32815bba106ba7452c7dd80bf6012d88def7
- SHA512 a74d3d704a075b390cb555864d531a49ce9e8ecf1e4314eb53c3f11a9486473160c02a9c03bdf6057d466f34aa87e3a53b50764bf2d493dd0dafedbc0fe22df1
- SSDEEP 1536:IuX+Mqm083ykKjsbDt1+PLCgmCZVLsDTvNIW97tXm6LSDfUW3jTzBHk1mTl0tNap:ut8Hv+P2JDhZvEcMzpl0P0bQnUBzt
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.ACT.resources
- SHA256 b7ab18c6ddc022a4018d576dcafda0352984dee3a7cd0e4d4f45cbe0f4df2b85
- MD5 7b9622f29c461e36d8a4c3e27dffb741
- SHA1 5f6204efc91e64f42978f7c8c293346e27fb533a
- SHA512 49736fa0a285f837ba12a7067b803e918b2a39c21d408cbbb39ee42efebbf64a4a19549ac2b7d7ca1e4524dc85d38c1a025ae41b947f40a36d18767fd12a4889
- SSDEEP 1536:67ETH1QatyHkrVOceYM/pjq9bTQPmbYakBxBW/7jpYaGs:6YLe7HkrVOiqyTaxw7jpY7s
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.About.resources
- SHA256 c403d852d1d8693c70b23199af2db9e70dd7d540e62c95bb8ee295022ccb9ba1
- MD5 dba99ce51cb7cf664617714d7c5d0664
- SHA1 79bb6210c1a5d3e37c93143d39c385445e167aac
- SHA512 1e09bf3bf45dbf4e8b7ca9b7e222f0382305d73ef1ec9626b5bc6414b6e1709265da1e4995cec56e187df251b18ecea9778e52850ff8c33385632ed395dc439d
- SSDEEP 98304:J5F/i9sHzcTiT38Ed4ihzD3w38dXdvinSh8q:l/BAe1d4ihvy85JP
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.Builder.resources
- SHA256 2cd4edf6e3fcc6465e393ecc856a6f5ddff29ccd38da3c784dbb5eeab6c3d3e1
- MD5 fced32c3b698eb4204689d5ab088caba
- SHA1 fff555f9eb79f9226221d1116776e2ac4dd45d3c
- SHA512 53ad5d2b03e3f561ac55f3274d8a2d1a552490a577e4f44076be8e395981f25b6142b218fbc019a5bd19f32d6a57a196be8fa6ec9d453966f398d2feabf57aca
- SSDEEP 768:6YkB9omkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkfFakkkkkkkkkkkkkkkkkkkkkA:6r9oNnJHyh/HOL
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.Chat.resources
- SHA256 9388906dced6dafbf91726771e55b4d07f870790ca6a7e5ded930d812cd13374
- MD5 8dca4f7300e5fe396ef7401b5ac9b450
- SHA1 fb91f139fcae116bf834292c47757312162bcdcf
- SHA512 f355ac08e80d1b513aa40a9b1bacbdd4d2ddea2c645156fa55521a93c759a4cf4e6a605254bac02fb9c1b7eb43ad72b75fb293720bbd2d114d77e407236a07f2
- SSDEEP 768:r/Xxu2kkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkF:TkE316
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.Clipboard.resources
- SHA256 18b66195ef662a04125191fc381e1181350ad081667c6437e708d29573c3822c
- MD5 98d7b91bac73c075f30116b9bd3c67f9
- SHA1 b9e705565a4ff351fe36486f12fca717915707af
- SHA512 23e542a75c1c546343c7ab236b103b47fcace224791eaeacd4fa7fe376e69b4b84773a30d7f13991f0d0b3e5b245b00252089c0c89125cef55034a06048011eb
- SSDEEP 768:mPFvvvmjF2/2KZeQ46XhNcEqnKqaglXXI:mtvvvmjILp4KNcEq8gt4
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.Clipper.resources
- SHA256 fb95146658664f1a39e459d914dd6de69b3b946cc433e9927998b2e6eca2e185
- MD5 38d4e87d0095a63194c0cad81bc211f1
- SHA1 a15531063c6c341094a05d325a32808eb06d1f65
- SHA512 93589625ddf9979d348bf252bcfed5039241ca1860a8d647761220b6b6343161bff73294af80600aa525b251b7e2881985c2c939be672ded827a9071437d50c8
- SSDEEP 768:1QinR1KLCUAgc9h6RVTqSXFbnPHHWygDHS0Zvq3Sa+OGapJ:++vKLOsVZX9PH2ygbNvq3SazxD
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.CustomOpen.resources
- SHA256 598558968242dea51f96c5733c13bb430ef5444364acd72c7e47300ab760547b
- MD5 3c655ef71e0f2b716ed5a89c9b11ae2e
- SHA1 433e4a0b3a074e8df88989b31297ee38d83a98c1
- SHA512 03e457011d933cd4c4514a8c144fea2458efdedfa1ad4f3b28e963682f3c0b71f456bae40cbe15864dd527ef0dc22e0f141b7b3a5b8f02353514b26a861bc70b
- SSDEEP 768:pUUiy7kkkkkkkkkkkkkkwJ2zcrq+5kkkkkkkkknpmU0GDkdz2EapJ:LwJ3qR0oD
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.DDosAttack.resources
- SHA256 f5d6acd85a0c639a1488802afd8494c712df2925276217f71fa3540bf11e9f4e
- MD5 c84ccb00cc3e74c2aebcf95d31d72b08
- SHA1 67e30f0f0c3472ae96898e18002a8332ece8509d
- SHA512 a27090fe6877fc6df3ea0164b80d337871e2c1ac9aaa8718e2575aae1cb0533dd158a26d3c42ef73770c6fba78b41d1f1bdfa1259c7eb9c042a1253a9fe2e330
- SSDEEP 192:rkvwKwq6k94PfBMao1p1/Z+NhAaOSgG59A888Tf6Z:rkvwKwq6u4PfBO1p1faONG7A888Tfs
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.EditReg.resources
- SHA256 d1e026edbe1d06e58073bca992133a94cc495fe8958d7de0c229e9f6a4a23253
- MD5 5fec710a19fe099ac9928ea500ab63b0
- SHA1 5f539bd8383c61470b2839bce6c8e6a9eb966e55
- SHA512 f91027078a3b6384ad9db49962d7c398204d48f632a77c3f423e5cb5034d71012fbbf1d6bbdf9b56968861f34ad2e5e74bf9efb3dde1736e23b0dc29a7b880bb
- SSDEEP 3072:0TTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTLD8:a8
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.FM.resources
- SHA256 697350ca911bb5af342a5485dfb5787bef0541526f053f7cb559fbf005e66333
- MD5 16f2d71e8e805a3d8678576532e45cb3
- SHA1 69116054f7a15e73b51bb0145d3cba80ec362297
- SHA512 f327d1fbfeaabed971d2255da64ab4875aaa2b8923113e62cfed68b4dc5643c07a33eadb473361a7ad30647470b744ebfffd8d806c28dd35c1681158504bc8ee
- SSDEEP 1536:Fikp4KNcEq88sXgAHWOIcK7ETH1QatyHkrVOceYM2mX:FixF8JjHVKYLe7HkrVOiVS
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.FilesSearcher.resources
- SHA256 8f6b3e617286b240c1117bf6cda40a11bd6d59d2a94ea9b9817730fec7cd3d70
- MD5 95818cf2184044335cdfb896b28843ff
- SHA1 037e53ddd857c9dcc49ba02810179d7ce8437069
- SHA512 a63e479aae870b623d1dd057b6814f10510b54e74e232a16b269acc2435fc36f7a7a19341d2b1de79bdab0603ff7b0cddc698c6b9e73fed52cd4c6e3e955e289
- SSDEEP 1536:fqZScK4323F5VLx9WXjbR2H8fsKFBT2L0RjpY6WjvhY:ffRWXjN2asKFBZxpYxvhY
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.Ftp.resources
- SHA256 c497bcd280f3f33d1b49d4e7dcac03434c20bfadf435a71b0eb501cb74eba68e
- MD5 7c65f0d2d6700ea2011d8cf8698ce129
- SHA1 b1af1045a19306cd397ef3f87ecd26b7060fa778
- SHA512 d76e7470f5c2f152c699714837d8d6d046edb0953e016af3719b48f9155771e47b3a8a160f0074f96287fe2cc26f38cf9ef581b1c2dbaa4a4b579c7ac48a1e3a
- SSDEEP 3072:9BMaTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTLD8:9BMo8
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.Fun.resources
- SHA256 d1e2cde8706b7574139a8d0843121fe4b469e191c64bee885b16f53c398c0634
- MD5 03ed9f7cfdc4c4022748d28866ab8392
- SHA1 14c6e19f536fe87b36ca19af03ef6808a27eca42
- SHA512 37ca143122078e3412eaf01e3120b36c43c0acc5e4a0f3b625fe8c661fa5e07a9579565a29854f80b9e510da6bc52ebd041c6ac543e32796e74b4ba338e47ea9
- SSDEEP 384:rkvwKwq6udiHHHC3P3P3P3zXqvbvQYmkvbv:m3P3P3P32vbvQVkDv
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.HApps.resources
- SHA256 d7fdbbfacc23d6cb577df5908678ea33a458f5ba0b96359efb5ca1839bfd086b
- MD5 60f80d71c8d9986035368b61a80ec39c
- SHA1 9336b5bbda4b1eb92d8b5f7cb99d482ea74964e9
- SHA512 3411e36495e958706e1bd9f37551daa76e2bacfb5bca242ff8a20921437c443f1b91aa28c25526115ad7248358d2e29d62f0de3da6aa63e7cca6aa39517d8f29
- SSDEEP 3072:OUjCDfWaFnj2tpyTaxw7jpY7kESYLe7HkrVOik9C9R:OsQW7kEubq9kwX
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.HBrowser.resources
- SHA256 3ff03acd8bda3bba40e14064dcedcf188b5c5d9b1c899920a0ba49238812ad03
- MD5 1b4955c4d297f43c89a4db73f0054346
- SHA1 d90fa8dbb8897ff4a565b8b019186fd13e0807a0
- SHA512 ada52944b61e64d28b3ca7f8eb75601a287b6d5c90b51d0707bb00ca697638589dce8469eadc738b45ac5d541908143b9c3a02b5c6d0f51b1f3df1fc2914e8c2
- SSDEEP 1536:opx1pWvE2lPpjq9bTQPmbYakBxBW/7jpYaGlVf01NiPu7ETH1QatyHkrVOceYMs:opDpW86pyTaxw7jpY7lELYLe7HkrVOih
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.HRDP.resources
- SHA256 f8d74378cb9be4608271a4d4994ef57ebbdfeab037c90c913c39ae3d89c9fb57
- MD5 fa9343a592c72c5624ee76c157265bb3
- SHA1 570197edaccd2c58f1c1d6a96a92d031933b6c71
- SHA512 a5e99e9645be0d6ce506635eebedf1307615d44c3bd85ad91f29a45f86685c1a9833df150d7bc27a19182fa73b52da2ca97c33c0337faf18052bc4f3be457640
- SSDEEP 3072:c4jEWtQbQEm/Q+NQMQSQ5QnQ+QYQQfQQuQQJQQzQCQlQbQQzQAQxZsgBTYUwmfJX:z
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.HVNC.resources
- SHA256 c1eccd021db7b1d686e10cc6aa14505a21386723fa85d2e7eea6adf361a92335
- MD5 cbd7e355e5a99120d510874ea6dc5c83
- SHA1 90e324eaced544ec96e4f773ee8f65687b2e7661
- SHA512 1e3accd3b979dec6268acd56ec9fd30f4ebdbd6fac3090e9af13f9f39dc437ad69abee431747597408ed1ae3a402bf795ba06ddd892c5897796d45b6e4aa98a8
- SSDEEP 384:rkvwKwq6uqWHMDzelakhLZS3UrjTgwE/9xxNTT0TTbo/t+H1wLzzWySGjqu9epXY:QselVg6n89zNTT0TTe9jeXWzSg
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.Hash.resources
- SHA256 f5d054da5630a8fb711ec674feaf8597d1219a72cdfc6d4ca4d7e3806c84812c
- MD5 cb331a72ba58813e6b3924749bcd6390
- SHA1 18009c5eca68ae32598c3200fca3782c5b1e443d
- SHA512 98777f7558a4af46b2469d4ab4dfa4e92496e3bc1fe74401da758c902a59701ff8fd00268395e5c8a511c9d64af82af812c195b23d77d4d5b4f0a592594fa8ca
- SSDEEP 192:rkvwKwq6k9TCvWkGIlL9h1yhq9nZoWA/m7iP8Gp:rkvwKwq6uTCXpOsZob/m2
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.Hosts.resources
- SHA256 3439ac9f2377613b6b499844fc39cb8c2e0958ffb22014409b5cea95c626e91d
- MD5 83793c37782eb28178b2196b51681877
- SHA1 88749fcbf6382cd36e1c94009ed7ae1404a07d00
- SHA512 c03434cf2cfe85b30a4526afee6a158b77420d2bf1350b73e3c02e9dc6febc5d9a7debb5287607dae9992467ecc49573d92ccc50a2334e0e93786936e92eb9f0
- SSDEEP 384:r0vwtokwbwq6u84ELf8Yo1TFE02rVaM3/2ptMx1bU2o07zwAWV:9j8N0Rxi2op
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.INFO.resources
- SHA256 501e089e1db08562e14f2750e406b0533d7b3aae3705e1973b29849cbbda6fb1
- MD5 5ee5eb03c4d8e504b7a996fd5410666e
- SHA1 dddcc286a7fa6cf82cbca91e1d9b67bdf9b2581c
- SHA512 e2f7acb328edf79899d8774ca9cc94574d12defcaf2ff9047b201a009d27ee7044cdfa0b761b11c1c8a12d3bf514f21bdbd35a538c52ce8b53d43a586a968027
- SSDEEP 1536:ZU4VmTTyTTRTTPTTdpgiCiCiCiiTExaFlM7ETH1QatyHkrVOceYMs:j/cFqYLe7HkrVOih
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.Keylogger.resources
- SHA256 89f3a42141b619bfd652c9825bcba07b91475997bac48e001e74dcd90bef754c
- MD5 a1778b17ac5f0f62b3771e9886e0acba
- SHA1 0a0d5f1a4fec5c677ebf29e0dbbe0ab7032fef38
- SHA512 1669aa46676ab5f03ced3463a84e2a99be0789e7649f50e6d33cbe6934a058ac1088660c457caafdf42d7bc4342fcd844c9811bd2d2a02efa7cad5ecd10b7a98
- SSDEEP 3072:S6F8jWZcccccccccccccccccccccccccccccccccccccN:E
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.MBox.resources
- SHA256 a2a724d05f289fe51f6a3639937c460764ee42935c6eddbd5f7cc7ab6d26954a
- MD5 ffbc6e01f688097960937446350eb01d
- SHA1 6753b872c838f2439e91fbab20671cdcd7bc3d1e
- SHA512 2cfa07a45ed9b8547a9ca303d66a71c943f1723fcd692d9d8f5f20f6ce9671e5e5f11bbb2ba7d6e41a27806bbbb7ecfd2f7e7d37af5420aa3c68b0f64dc9c6fa
- SSDEEP 768:hFGla/np/wpRGZPdKOqoJLTapjappD+2f:jDfd3ckHjf
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.MIC.resources
- SHA256 aa4f13af48d1d3b3735a732e90163e6d302fe33a8f0041933dc76427f099aece
- MD5 d079b64991e7ae90dcb355f1036831cf
- SHA1 980f639c4e3db7cea44ab28e40ccdd2c728ee179
- SHA512 e6e5e21438d7b60eb9f7b6d8cc9e2a672e15dd5af2cecdfbc63dfce8e371982abbb951ce052e731daec9c86f356af54e81623dc7e72ff36a802907345d52f6b1
- SSDEEP 768:moZmmittmc9ik83EavHr/QS99wkwcMPliv+j4bctbK:5etYOC3lvHr/39Kcki2jAMbK
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.Main.resources
- SHA256 35a6f657c6d1db902ff3fbb3149e629acbf926c7c244bbce502c0b65cd2c536d
- MD5 8d7f5438261b974eaf34287253799b87
- SHA1 086e994fa1ce12ebeba3c134ec9af69244e8c2e0
- SHA512 2e33671bf500e8a3727181e14cea8be2d4f77d4422720710056676ce4f8e6b4b2b3a9f38a0713750e7363c52af097ebb5c489c45d46c5627236d6afc81e67f67
- SSDEEP 24576:nm8179dddddNjYkDTFKlDy/Y3BZabuwVAeNgFfWN:nm815ddddde+MlDyg3BZaSI
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.Maps.resources
- SHA256 f690fd15ad3c3150a48fd33962b44ec118bb3f9b210f0d0b27e3ee83420c73f4
- MD5 ed0eb94f77f681a3600539bb9a6cb6f5
- SHA1 b176e3455cd0224448e9d9b4b015789c794d8b06
- SHA512 8e097d3d8617043419154821d9721bd4f7e16f12a19f7e8873c8086872540c61e4d932e43515573eac08372a243c0ead855ebfe5488a1e6e53142c44cbb5eebb
- SSDEEP 1536:jjbwDfOmcgfteiMWWZoSp9wmLZoSp9wmT:nSfO0tkZAMZAA
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.Performance.resources
- SHA256 16ea3b81c6f9ad74d27c621f0b8485929dcbe293435b151124c388aa66f09c52
- MD5 4c7233c83c2f749762fa0e000021e5e3
- SHA1 9b1a4826da8279f52aae9cf29570dd2679ada1bb
- SHA512 0f9b830fb139173f321a78b32b3166271cd5345df85b63b2a797e38cf3fa441715cc648e89768bf12bcdfcdb621273eb53b62d6fd66f5cabf6b8c40d3474174f
- SSDEEP 1536:LcP/zyxY/FVGJ+j+chraMRNPnLRhtAN4RRH9nl85gi:yyu/FVG8jbraMRDA
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.Port.resources
- SHA256 bd3da4a9c29cb564c774bd8b8c0b79078f09b037cf2f3a8fa2566648f68a012c
- MD5 faf23924f3c859e9d570109d930928e1
- SHA1 6003549ef256bac573ff809a9a5d967b8106f9ab
- SHA512 227f0c0245ff48955a1ba95fcae513237c1d4f548ccba955c4b26a633e7330a312fcdea474dc87f2847b51a3694427f5227f60a77dd5168760cf28b770ee3fd3
- SSDEEP 1536:wi2AP+ew+ksEvCwVwLM+uvpIVyXJyozbGyMqmyVttdGFQeOPigp3dIHyYNSL:2A2ewhLapuvpAsZOyMqmyBeYVYi
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.ProcessV.resources
- SHA256 1e1b3bd4c4dfe056edf30fba8d6bbf94665e9bcf936ab06db79213e8b400b61f
- MD5 abfd25fb3ace375c63f8e9cd4ecff32c
- SHA1 d7b7f30bd62e17e1da6bad889b9f77d93c795039
- SHA512 d8c0546d1ee9a35a7b8a3b9304ad63794b1e71d014f8c45145b60343f8140457a8711065f7a2aa87e68e1d564a45171425adab9b83adbe9491afe065d990fe0a
- SSDEEP 1536:io7ETH1QatyHkrVOceYM4pjq9bTQPmbYakBxBW/7jpYaGs:VYLe7HkrVOilyTaxw7jpY7s
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.Programs.resources
- SHA256 55c19900015145bee8c83f27ca58032550871a92047abf6166dbf547b6afa505
- MD5 9f05c761cba903361771cea155ede6fb
- SHA1 af0311816e6f1315bf29e5a42ac3d75adf71d115
- SHA512 d4e049c341deeb7376e7def96e071808c9e04e085171b46af7f7096f52cf4288df19d3c2aa2c87816a6eaf5feb3f2257bd58e93f582498ad8e4fd4bcc652859c
- SSDEEP 3072:XfH6ZxP8NJAceI82I98CBCYLe7HkrVOiqyTaxw7jpY7s:XfH6ZxP8NJAceI82I98CBebq9TW7s
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.Proxy.resources
- SHA256 ee84fb0146a0a7e6bb8506159eaf12fc2888ae87b0553e1cb031e044830584dc
- MD5 d6e648329cd1473e66a01a9402e907d7
- SHA1 ebe34259546be5638bde8ae75f96d6f70e3da62b
- SHA512 0d44e33084f163b0d56798ace44294825fd76478acf303ca03bbdf6dfa286cf8cd0677c50fc1a422073ec7498d13aeeaebfb89b1a4eefd55dd010c6c23c1a7ec
- SSDEEP 768:+SEnnnXXXXHXXX/fffbyuyuyuyonnny/vXH/zLHvEppicZXvZZHf+m:+SEnnnHXXX/fff3nnny///zLHv6JZ/D
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.Ransomware.resources
- SHA256 bcea581804fc0d0e1d66c76a47f9b7bd40b81578bff0241bb4155a0c67486a46
- MD5 c653b8b3f18eb2a2882c2f3905b2380a
- SHA1 62235a88bc833fe7a41c9da2e5766306a026e144
- SHA512 a01927f5a4f3b1d838919074c42125d60d6e50af3e876bf614f0dd264627234973ba4b642f30040332c328587340be82f6057a5130baa0d79851fede67069a4c
- SSDEEP 384:r0vwtokwOdwq6upS9LvgUuYkYezHbMTb7+JZf5NXJAdDzMwA6jp:Y9XuYkYez67+JZ58zf
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.Registry.resources
- SHA256 ce34680ff2984c6c4766889684a358358711d2cdf3171813ff768d7f1c9c53de
- MD5 d098b950169502933b9ef1f417f25172
- SHA1 8f40b86fa8a986588788676ecdcad5bf55c586d7
- SHA512 4a38f88db6a585d6a47e6da36ac8aceb15825453e5ff4804b2943be9e4053fb85206e473115e72a86c4b0c2d13fa9a1ae18ed7d96b52edd050e7e918fed33317
- SSDEEP 1536:6s67ETH1QatyHkrVOceYMa7ETH1QatyHkrVOceYMJ:6NYLe7HkrVOipYLe7HkrVOi8
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.RemoteDesktop.resources
- SHA256 1dc136b225528fe4ee8020f46aa549e4bbdd76493d0579b6c1837d10acc3ba13
- MD5 0f5fc0694c9d76a6fd5b7e4158fd03e3
- SHA1 aa7eb852f5743e456e5737ca25e7b75ca7349b42
- SHA512 af3c1ff80a247ac8ee6440ff4410460603430f24557dce392b90961b77a2d978b6b75a9a606ca433ce16cc565d07c2b5fc41413c1229147194b24bbc1869c67a
- SSDEEP 384:rkvwKwq6uD0hAAAgAAAgAAAgAAAliIGzl8nnnJP5JJJJRetmJJJJ5gCnnnsjBy:rDnzly
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.Resources.resources
- SHA256 557058bd29a5eb55ef073ea9c4dec0baea1fd3f3f4bf2cdd5ee3dfd33735e93a
- MD5 34986e38b463873af40f694874c1f6d3
- SHA1 8fa89cdb7a394cf8093d548ca9db4652c703ee72
- SHA512 c1b0278e8c21e5c28204f692a5cf5ed16c8ada0c6022d7d38e70905255f3aeb5d2c0fd4549f0ed19ead52aa0ced891a8f9372123bf5e1710be004958750874e4
- SSDEEP 49152:OsP2WTJcLsk9Pk6gAK6BN2NQUe+ErnuVqjNhHXH:zuWTGLP9Pk6gAK6n4ldyNh3
- MD5 SHA1 SHA512 SSDEEP
-
Detect Xworm Payload
Xworm-V5.6/RES/XWorm.RunPE.resources
- SHA256 823554153d20aabf65c8635b7727dd6f26f14f79da929de9af8131314ec2c347
- MD5 147c16f102addfdd7b756b8ee1558b82
- SHA1 e9aa9624bb96d369aa905d14e03db625d17d00f6
- SHA512 2df2784f5284e0808224a58fec6e12f02a5e09001c77991bf643b4304d99b633a3511551ef42e2e64f1ad6e5de0a44ff2c3b358413dd6ea6a9b08c0dfc592c38
- SSDEEP 384:rkvwKwq6u29Ax59IWzT9DfLtFbm44XdZcGe5Eas1gMVuM:D9Ax5x9vtFbm44XdZNeG3
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.ServiceManager.resources
- SHA256 fc7906c147eb0066e6cee2a528ab531b6d0ad1eb0b0a4d2a32a1be422809ecb9
- MD5 776d31cf63f902ede47ccd1e09c463cd
- SHA1 a45e4761bc40019d6e5b72ece5d731c520d91303
- SHA512 f8f099d291b0ecab01d84d0c4f4480c7ea266cc79f1071d71c71ca3113f6c8594d82f192feb3b136be0e007542da1cc6a7b28b860bb3ee2e0e7747b75222bf0e
- SSDEEP 3072:VqR3kbym/bBGIgEJjHbD1yLHpkv+GhSx7BQFgfMyd9tbYLe7HkrVOih:lbJGcJj7D1cJkPhCprxbq9h
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.Shell.resources
- SHA256 7f71160fb4d68eda2e6af07f2b89416cd5668ffa5260dfbeb69391dfc5508586
- MD5 a3fea8391774bbb0376e1f69eb6ee9d2
- SHA1 96032202ca3dee1983d1990ae856112f8c832173
- SHA512 10a3c77631a0d1ee80198ffe430a0a389897201ef60a8f3e9beff5125545477d8ce6ea8fa5d186ef31dc4681b62048d71fcbb3106a88f22aaa08ee75de2c842c
- SSDEEP 768:aoR1HiAxeglYAQ8BXIHDiJ9zUQI0xV3PrEiv/ewrmTIgdEM7XoSxSdL5NCc+Y:ayheg/Q8B59zUQISXnFmV+Ib81NJ+Y
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.Sound.resources
- SHA256 7d7ca0ead2e362c4b2b4e5e7799b0bd115eff66abe9f7bb184734444142bfd9a
- MD5 d867ec78d12cbf85eca15722c1ffcca3
- SHA1 90dc339c7ad81447758eadd2535298cfc2eb1bcf
- SHA512 5bcbbccad3f71207e6c28784fa27e38d8c24c4d2edcdf3b55d5937974c63c9a8fe6ce311d6946ea13b669ade3c262f0c3bba82a330fbbb08a00bf066734ea638
- SSDEEP 3072:njXXX////ePrLaPp5+SRqRN1SMLVivg1AGA8JlT6rZQnmmQo:RPp5jyNQMLAvkAl8JlmNV2
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.StartupManager.resources
- SHA256 73d138786a5f08114204491631867e44f5d1d60a683890509c7f69a78198c60e
- MD5 3e7ce35b2e085ba831d417d582b249b9
- SHA1 63926a8d61ef3eb1e9408e9c531ce35adba66886
- SHA512 27a6de57b2c88a8d1119232ef123e728b4f1bf9aedaae8caa026bdce9541ef61c4c3d5a59fb4c7613febbae5f5e19ae754c51a4ae9176f2eca5dc03d938048ac
- SSDEEP 1536:LasebR3b313F3F3goXjmtt32325JT8J8pjq9bTQPmbYakBxBW/7jpYaGS7ETH1Q0:L9eS5JyTaxw7jpY7SYLe7HkrVOih
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.TBotNotify.resources
- SHA256 6ec33992edc80f131e4a9f7f89fe9c9dba233f7c3bda8ce6e06711021e8645fb
- MD5 b219d1ee4ae25f781e5bc88165839987
- SHA1 bcb30240b697493fd238c0d611081200a0abc3a0
- SHA512 e4d013c746ca857a135484d908fd2fca6257236b8b3cba8bc10209fdbb5f7cb3b595da15618f4713eb5cdeb7033772f72c22eb9ef5022c337d1dc3ebba67c746
- SSDEEP 384:r0vwtokwswq6uTq4fffjfff+7f75ArrqWKwA+apJ:dfffjfff+7f78rqWnapJ
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.TXT.resources
- SHA256 1ec2de5a4bb61ecb3a2e57da228d3c9f278853b21ead5553643bbaf6c6706b50
- MD5 9cddc18b39b043d9542e5f0989faabf8
- SHA1 afe5c5b7d6a978ac504ec272c1e8dcaaae1d5b34
- SHA512 b9da58a39c39cfa665e63af0ea206ccbdeaf7452f801b3d2d9bd89e643c3c729de172ff6f86b8389d94f2f0ae92153275f4cb1a30fc60fa93e5fdb717cfa4a8a
- SSDEEP 384:r0vwtokwzwq6uCoAf+q7xVsFoSNDUSh+w6HvQdBeQanPw9h+w6HvQdBeQRzrh7ji:2iB7bsnWfffJFB
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.TcpConnectionForm.resources
- SHA256 5d1dcb82a528c97aa161d0ffa742032abdc3e911125d2171768ceeacf8fb9285
- MD5 84f1c4ac6a6d9b44bc830ab1129da3ee
- SHA1 55b207a19d11950267ce10e914c0b4adcad52f1c
- SHA512 4faaff764f6074216c5d9a5493e949ffa6e0cf32a74181d8141d0e3d5b5795d3afd3dbf79f9bd2890d37f420205cd75328d8e488424e139ea1aa7fc9898c0aa2
- SSDEEP 1536:ZLnTGFCnE2TeaHXvSQ7ETH1QatyHkrVOceYM/pjq9bTQPmbYakBxBW/7jpYaGs:ZTUEeM/hYLe7HkrVOiqyTaxw7jpY7s
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.ToolsBox.resources
- SHA256 f6a8d146ab66f03723e3ab551b1579f695947cbed073727af9fc396b2613f62c
- MD5 73bda4b934275a61f1ca27e88299a29c
- SHA1 63cb4ac6a9b0dcac53dfc35bcc817ddf46e5e399
- SHA512 9f2b82b1971a195eea9401084edf15f33694b3ff757b3c1b71d80315425c6942a3e924b9fb2681419f256128257682565ad13d78570db41fcb3e9095269cfdd0
- SSDEEP 6144:626twOOCanAtwOOCantAHzfadhIVBfVBd:62iwO7wOf0I3F
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.VBCode.resources
- SHA256 0a8d6cdc13ff8387d4216b31384339e56fbe205ebbbdf1dc3f8f4d8587007ffa
- MD5 76d53ae7107963acbfcd4597019c7f06
- SHA1 6d01fa4b76be5007a5e1b6a7068ef32e8c09b258
- SHA512 8c5a7fae83626de3f87b0b6ab382e2b2d60e002a701c87d7ede28fd976d34e7d88d664a72c22c956c2f54e0b93150634e8ed535d4b04b2d65f2516d6cbe4a270
- SSDEEP 1536:fYWQm2zLGIBhvbXetsYOIw1AVLx9WXjbR2H8fsSp4KNcEq8YnFBT2L0RjpY6Wjvb:zQ1mInYW1jXjN2asvF8YnFBZxpYxvh5
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.VoiceChat.resources
- SHA256 1e5b9f16f88c4de8c4a3ad03cb318815f92c40f89eabcfdd1ad0483a41113527
- MD5 9b4613ca9da1999c6b521410d75e417e
- SHA1 4671b2d8ce2280fefd6bd7aafbbf709ee0f554c2
- SHA512 a107f4d40581c2380b745a54640fd1ae5aa6ebde04310077074de22444b5adf3e64206c078cffc10725a77add0d023e52c2d763920e2e8941fd2f3ec58ec3e0c
- SSDEEP 768:V2bS6Pq2Ykkk+p/C+5hKf9wkwcMPliv+j4bctbK:4up2SFl5huKcki2jAMbK
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.WebCam.resources
- SHA256 0ff62be2bcacad7ddda3b3cc32fee9c0a1c3bb5d72d81318728c1805204b2433
- MD5 0a82ee1d886148e7b149c3b4745ab653
- SHA1 a6b3e0127fa58c4479d5cdc4bcaadd9b6e666424
- SHA512 6a13d2e45d710d80970dfdf0bc09ec0709fc88e62d22c4aa2cfe6c8dab18bee14e134d613b1fcf8204b70cd9950c82d040eaf718a97a8f64502d05e3ec9f6c0c
- SSDEEP 768:LVLgN8K///iee8xxpe7ee8xxpe7ee8xxpe7ee8xxpeTD28g806Pj8ql:a1xxzxxzxxzxx2n0Tql
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/RES/XWorm.ngrok.resources
- SHA256 b7e3e334ae48421bd3cd08679d94614e3f5c2d5847aff6eb7e06532966a43013
- MD5 b776cefaa200763a77bf55211c838b3e
- SHA1 4296aecaec1f77623dafb7e34a76c8b25ef6bff3
- SHA512 19fbaa3369ff3424bcd6fdcd35c677b686bc465bb558e8933a93ce0997bf782929f4cb5c1e2022d0d3ce3f54d4fb6bff25b11444760972919d3ba0fc00aae7b0
- SSDEEP 384:r0vwtokwPwq6ub5wAlec7vxohnxNQI5EOyK/WdpcN6Y9F/2KWowAglB:JMKyqNri9B
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/SimpleObfuscator.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b7a6eea19188b987dad97b32d774107e9a1beb4f461a654a00197d73f7fad54c
- MD5 9043d712208178c33ba8e942834ce457
- SHA1 e0fa5c730bf127a33348f5d2a5673260ae3719d1
- SHA512 dd6fa02ab70c58cde75fd4d4714e0ed0df5d3b18f737c68c93dba40c30376cc93957f8eef69fea86041489546ce4239b35a3b5d639472fd54b80f2f7260c8f65
- SSDEEP 24576:FDy7cKOfkiRrXP5WtJvW1mpjSWr7uoZme1V86:+8/AtJes1LJ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1456282
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
948B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Xworm-V5.6/Sounds/Chat.wav
- SHA256 45f4136e58a5f749d125d2ab54308f81954d2c5b364b66013660a6c358845d1e
- MD5 832a3652fd780edcdb2439ec33532c0d
- SHA1 f0754ee6519d77700f5ee5b744b8c99386d7b577
- SHA512 3b3b55afcdfa00d9b7085b20ed52a7b4d8b7d403f5d0d1c539781db1a20257efd8c856e19b8f32ea33766a580690b498ff063849519691a9a4cbbcd3e9447cd4
- SSDEEP 768:QVPqefmaP5C3KduJn13jSHYHzIcr6DPW75Pvi3Fy5NQbIbhuJLA+LhDclY3Rp6:yP1mU5GlJnBS4TIQ6o163ofQ8b4Pfm
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/Sounds/Intro.wav
- SHA256 e3e5029bf5f29fa32d2f6cdda35697cd8e6035d5c78615f64d0b305d1bd926cf
- MD5 ad3b4fae17bcabc254df49f5e76b87a6
- SHA1 1683ff029eebaffdc7a4827827da7bb361c8747e
- SHA512 3d6ecc9040b5079402229c214cb5f9354315131a630c43d1da95248edc1b97627fb9ba032d006380a67409619763fb91976295f8d22ca91894c88f38bb610cd3
- SSDEEP 3072:FU3hYG9X9JzhaLL5+QYKHZDa6D+4LT92KEpcP+b8FGUt0Ybs5e9jXjubLtNmBNs9:GjVsLL5lva6D+4P9llWvaGe9CHeBNm
- MD5 SHA1 SHA512 SSDEEP
Xworm-V5.6/XWorm V5.6.exe.config
- SHA256 7ea08548c23bd7fd7c75ca720ac5a0e8ca94cb51d06cd45ebf5f412e4bbdd7d7
- MD5 66f09a3993dcae94acfe39d45b553f58
- SHA1 9d09f8e22d464f7021d7f713269b8169aed98682
- SHA512 c8ea53ab187a720080bd8d879704e035f7e632afe1ee93e7637fad6bb7e40d33a5fe7e5c3d69134209487d225e72d8d944a43a28dc32922e946023e89abc93ed
- MD5 SHA1 SHA512
Xworm-V5.6/Xworm V5.6.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 90f58865f265722ab007abb25074b3fc4916e927402552c6be17ef9afac96405
- MD5 56ccb739926a725e78a7acf9af52c4bb
- SHA1 5b01b90137871c3c8f0d04f510c4d56b23932cbc
- SHA512 2fee662bc4a1a36ce7328b23f991fa4a383b628839e403d6eb6a9533084b17699a6c939509867a86e803aafef2f9def98fa9305b576dad754aa7f599920c19a1
- SSDEEP 196608:P4/BAe1d4ihvy85JhhYc3BSL1kehn4inje:PuyIhhkRka4i
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15469470
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
14.7MB
Virtual Size
14.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
137KB
Virtual Size
136KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ