plpscripts_freeV2 (1)[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

plpscripts_freeV2 (1).zip
Size

12.8MB
MD5

a236077d4478142cc405890ac29dcf67
SHA1

2727125deeeb12957ee16ee319fe1c5c4bcf3e27
SHA256

ceecefcf9cdd5c58e5b934ae568c241986f85df3ba4648dc925fc93b2243cbf8
SHA512

ebc935e4950eed03bfa8a5a003be829a469cb4653d00b74ff9ba7632b75e08ced38f1bf78052d7ecd69745a98311ec20b03d0e9c30be5387a2355528f3933002
SSDEEP

393216:yDFf6mky+kKfHX/oRGyAqlitjj+2TmpRA:yDFf6ny+TwAdRj7Tme

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/plpscripts_freeV2/plpscripts free ai aimbot/pyarmor_runtime_000000/pyarmor_runtime.pyd

Files

plpscripts_freeV2 (1).zip
.zip
plpscripts_freeV2/1.READ ME & THIS HAS HELP.md
plpscripts_freeV2/auto_setup_install.bat
.bat .vbs
plpscripts_freeV2/plpscripts free ai aimbot/aimbot.py
plpscripts_freeV2/plpscripts free ai aimbot/config/best.pt
.zip
archive/data.pkl
archive/data/94907481988160
archive/data/94909076651120
archive/data/94909076651216
archive/data/94909076760992
archive/data/94909076785696
archive/data/94909076797712
archive/data/94909083665328
archive/data/94909083860848
archive/data/94909084060304
archive/data/94909084374192
archive/data/94909084374288
archive/data/94909084501856
archive/data/94909084582784
archive/data/94909084647568
archive/data/94909084701936
archive/data/94909084741200
archive/data/94909084778800
archive/data/94909086274048
archive/data/94909086279424
archive/data/94909086291840
archive/data/94909086291936
archive/data/94909086302864
archive/data/94909086350160
archive/data/94909086388528
archive/data/94909087216560
archive/data/94909087891552
archive/data/94909087891696
archive/data/94909088526352
archive/data/94909093821408
archive/data/94909095923280
archive/data/94909101344976
archive/data/94909101352272
archive/data/94909101449040
archive/data/94909101449136
archive/data/94909101526800
archive/data/94909101530752
archive/data/94909101579600
archive/data/94909101588608
archive/data/94909101687872
archive/data/94909101933136
archive/data/94909102588608
archive/data/94909102589488
archive/data/94909102593392
archive/data/94909102606128
archive/data/94909102606224
archive/data/94909102663152
archive/data/94909102918912
archive/data/94909103779440
archive/data/94909103996656
archive/data/94909104007680
archive/data/94909104280128
archive/data/94909104931104
archive/data/94909112031136
archive/data/94909112148432
archive/data/94909113660496
archive/data/94909120943296
archive/data/94909120975648
archive/data/94909122556800
archive/data/94909122595136
archive/data/94909122595232
archive/data/94909122609536
archive/data/94909127568944
archive/data/94909127569552
archive/data/94909127569648
archive/data/94909127588912
archive/data/94909127592256
archive/data/94909127595360
archive/data/94909127617328
archive/data/94909127642720
archive/data/94909127791776
archive/data/94909127838832
archive/data/94909127848480
archive/data/94909127875760
archive/data/94909128920368
archive/data/94909130443632
archive/data/94909130445152
archive/data/94909137797232
archive/data/94909137808416
archive/data/94909138989904
archive/data/94909138999024
archive/data/94909142371264
archive/data/94909143302448
archive/data/94909143310128
archive/data/94909143428528
archive/data/94909143428624
archive/data/94909147565792
archive/data/94909147565888
archive/data/94909147666832
archive/data/94909147707072
archive/data/94909147769696
archive/data/94909147769792
archive/data/94909147828400
archive/data/94909147834624
archive/data/94909147834768
archive/data/94909147968912
archive/data/94909148096080
archive/data/94909148266880
archive/data/94909149006528
archive/data/94909149012688
archive/data/94909150166720
archive/data/94909150706160
archive/data/94909150764640
archive/data/94909150764736
archive/data/94909152022640
archive/data/94909152022784
archive/data/94909153252624
archive/data/94909153252720
archive/data/94909155350048
archive/data/94909156905360
archive/data/94909159130528
archive/data/94909159130672
archive/data/94909159236544
archive/data/94909159261664
archive/data/94909160856944
archive/data/94909161747616
archive/data/94909167424240
archive/data/94909168388880
archive/data/94909169466640
archive/data/94909189329216
archive/data/94909199397664
archive/data/94909199397760
archive/data/94909199539040
archive/data/94909199539136
archive/data/94909202134928
archive/data/94909202141328
archive/data/94909230426736
archive/data/94909231109344
archive/data/94909231111040
archive/data/94909231112752
archive/data/94909231113952
archive/data/94909231114512
archive/data/94909231190208
archive/data/94909231191840
archive/data/94909231193504
archive/data/94909231194752
archive/data/94909231195360
archive/data/94909231235264
archive/data/94909279980144
archive/data/94909280278848
archive/data/94909282977184
archive/data/94909282979392
archive/data/94909282981616
archive/data/94909282983328
archive/data/94909282983936
archive/data/94909282985696
archive/data/94909282989040
archive/data/94909282990768
archive/data/94909282992480
archive/data/94909282993696
archive/data/94909282994272
archive/data/94909282996016
archive/data/94909282999872
archive/data/94909283002112
archive/data/94909283004336
archive/data/94909283006048
archive/data/94909283006656
archive/data/94909283011360
archive/data/94909283014704
archive/data/94909283016432
archive/data/94909283018144
archive/data/94909283019360
archive/data/94909283020080
archive/data/94909283021792
archive/data/94909283025136
archive/data/94909283026864
archive/data/94909283028576
archive/data/94909283029792
archive/data/94909283030512
archive/data/94909283032224
archive/data/94909283036080
archive/data/94909283038320
archive/data/94909283040544
archive/data/94909283042272
archive/data/94909283042992
archive/data/94909283044704
archive/data/94909283048048
archive/data/94909283049776
archive/data/94909283051488
archive/data/94909283052704
archive/data/94909283053424
archive/data/94909283055136
archive/data/94909283058480
archive/data/94909283060208
archive/data/94909283061920
archive/data/94909283063136
archive/data/94909283063856
archive/data/94909283067344
archive/data/94909283070688
archive/data/94909283072384
archive/data/94909283074096
archive/data/94909283075296
archive/data/94909283076048
archive/data/94909283079024
archive/data/94909283082112
archive/data/94909283083584
archive/data/94909283085040
archive/data/94909283085984
archive/data/94909283086736
archive/data/94909283088528
archive/data/94909283091616
archive/data/94909283093056
archive/data/94909283094512
archive/data/94909283095456
archive/data/94909283096208
archive/data/94909283098000
archive/data/94909283101344
archive/data/94909284157232
archive/data/94909284157328
archive/data/94909287949984
archive/data/94909288489120
archive/data/94909289436160
archive/data/94909290696368
archive/data/94909290707136
archive/data/94909290924544
archive/data/94909291030496
archive/data/94909291030592
archive/data/94909291046864
archive/data/94909291048144
archive/data/94909291050352
archive/data/94909291052720
archive/data/94909291052816
archive/data/94909291975248
archive/data/94909292008416
archive/data/94909303009232
archive/data/94909303009632
archive/data/94909303012896
archive/data/94909303014624
archive/data/94909303016304
archive/data/94909303017504
archive/data/94909303018256
archive/data/94909303020592
archive/data/94909303023936
archive/data/94909313979776
archive/data/94909314018736
archive/data/94909314897120
archive/data/94909315027344
archive/data/94909315056112
archive/data/94909315076880
archive/data/94909319273888
archive/data/94909319275552
archive/data/94909319276800
archive/data/94909319277552
archive/data/94909319312160
archive/data/94909319315248
archive/data/94909319316720
archive/data/94909319318176
archive/data/94909319319136
archive/data/94909319319856
archive/data/94909319321616
archive/data/94909319324704
archive/data/94909319326144
archive/data/94909319327600
archive/data/94909319328544
archive/data/94909319329296
archive/data/94909319332864
archive/data/94909319335904
archive/data/94909319337376
archive/data/94909319338800
archive/data/94909319339744
archive/data/94909319340496
archive/data/94909428673200
archive/data/94909428676160
archive/data/94909428677504
archive/data/94909428678832
archive/data/94909428679648
archive/data/94909428680400
archive/data/94909428715040
archive/data/94909428718000
archive/data/94909428719344
archive/data/94909428720672
archive/data/94909428721504
archive/data/94909428722224
archive/data/94909428756832
archive/data/94909428759920
archive/data/94909428761392
archive/data/94909428762848
archive/data/94909428763808
archive/data/94909428764528
archive/data/94909428774560
archive/data/94909428777520
archive/data/94909428778864
archive/data/94909428780192
archive/data/94909428781024
archive/data/94909428781744
archive/data/94909428857312
archive/data/94909428860272
archive/data/94909428861616
archive/data/94909428862944
archive/data/94909428863776
archive/data/94909428864496
archive/data/94909429163072
archive/data/94909429166112
archive/data/94909429167584
archive/data/94909429169008
archive/data/94909429169952
archive/data/94909429170704
archive/data/94909429238752
archive/data/94909429241760
archive/data/94909429243232
archive/data/94909429244656
archive/data/94909429245600
archive/data/94909429246352
archive/data/94909429313760
archive/data/94909429316848
archive/data/94909429318320
archive/data/94909429319776
archive/data/94909429320736
archive/data/94909429321456
archive/data/94909429454368
archive/data/94909429457712
archive/data/94909429459440
archive/data/94909429461152
archive/data/94909429462368
archive/data/94909429463088
archive/data/94909429497696
archive/data/94909429500784
archive/data/94909429502256
archive/data/94909429503712
archive/data/94909429504672
archive/data/94909429505392
archive/data/94909429802144
archive/data/94909429805232
archive/data/94909429806704
archive/data/94909429808160
archive/data/94909429809120
archive/data/94909431289824
archive/data/94909431291504
archive/data/94909431292704
archive/data/94909431293456
archive/data/94909431557472
archive/data/94909431560816
archive/data/94909431562544
archive/data/94909431564256
archive/data/94909431565472
archive/data/94909431566192
archive/data/94909432092320
archive/data/94909432096176
archive/data/94909432098416
archive/data/94909432100640
archive/data/94909432102368
archive/data/94909432103088
archive/data/94909432236000
archive/data/94909432239344
archive/data/94909432241072
archive/data/94909432242784
archive/data/94909432244000
archive/data/94909432244720
archive/data/94909433426208
archive/data/94909433429552
archive/data/94909433431280
archive/data/94909433432992
archive/data/94909433434208
archive/data/94909433434928
archive/data/94909433438464
archive/data/94909433439072
archive/data/94909433444416
archive/data/94909433445488
archive/data/94909433457536
archive/data/94909433458624
archive/data/94909433479264
archive/data/94909433480320
archive/data/94909433500480
archive/data/94909433505712
archive/data/94909433507520
archive/data/94909433508272
archive/data/94909433511584
archive/data/94909433769824
archive/data/94909434955392
archive/version
plpscripts_freeV2/plpscripts free ai aimbot/config/config.json
plpscripts_freeV2/plpscripts free ai aimbot/config/style.json
plpscripts_freeV2/plpscripts free ai aimbot/main.py
plpscripts_freeV2/plpscripts free ai aimbot/plpscripts_freev2.py
plpscripts_freeV2/plpscripts free ai aimbot/pyarmor_runtime_000000/__init__.py
plpscripts_freeV2/plpscripts free ai aimbot/pyarmor_runtime_000000/pyarmor_runtime.pyd
.dll windows:4 windows x64 arch:x64

000235d4e716867abc7a7561e6384707

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

python310

PyBuffer_FillInfo
PyBuffer_Release
PyBytes_AsString
PyBytes_AsStringAndSize
PyBytes_FromStringAndSize
PyBytes_Type
PyCFunction_GetSelf
PyCFunction_Type
PyCMethod_New
PyCell_Get
PyCell_New
PyCell_Set
PyCode_NewWithPosOnlyArgs
PyCode_Type
PyComplex_FromCComplex
PyComplex_ImagAsDouble
PyComplex_RealAsDouble
PyComplex_Type
PyDict_Copy
PyDict_DelItem
PyDict_GetItem
PyDict_GetItemString
PyDict_New
PyDict_Next
PyDict_SetItem
PyDict_Type
PyDict_Update
PyErr_CheckSignals
PyErr_Clear
PyErr_ExceptionMatches
PyErr_Fetch
PyErr_Format
PyErr_GivenExceptionMatches
PyErr_NoMemory
PyErr_NormalizeException
PyErr_Occurred
PyErr_Restore
PyErr_SetFromWindowsErr
PyErr_SetImportError
PyErr_SetObject
PyErr_SetString
PyEval_EvalCode
PyEval_GetBuiltins
PyEval_GetFrame
PyEval_GetGlobals
PyExc_AttributeError
PyExc_EOFError
PyExc_ImportError
PyExc_NotImplementedError
PyExc_RuntimeError
PyExc_StopIteration
PyExc_SystemExit
PyExc_TypeError
PyExc_UnboundLocalError
PyExc_ValueError
PyException_SetCause
PyException_SetContext
PyException_SetTraceback
PyFloat_FromDouble
PyFloat_Type
PyFrozenSet_New
PyFrozenSet_Type
PyFunction_GetCode
PyFunction_NewWithQualName
PyImport_ExecCodeModuleObject
PyImport_GetModule
PyImport_GetModuleDict
PyImport_ImportModule
PyImport_ImportModuleLevel
PyImport_ImportModuleLevelObject
PyIter_Next
PyList_Append
PyList_AsTuple
PyList_GetItem
PyList_New
PyList_Type
PyLong_AsLong
PyLong_AsLongAndOverflow
PyLong_AsVoidPtr
PyLong_FromLong
PyLong_FromVoidPtr
PyLong_Type
PyMarshal_ReadObjectFromString
PyMem_Free
PyMem_Malloc
PyMem_Realloc
PyMemoryView_FromBuffer
PyMethod_Function
PyMethod_Type
PyModule_Create2
PyModule_GetDict
PyModule_GetFilenameObject
PyModule_GetName
PyModule_Type
PyNumber_Add
PyNumber_And
PyNumber_AsSsize_t
PyNumber_FloorDivide
PyNumber_InPlaceAdd
PyNumber_InPlaceAnd
PyNumber_InPlaceFloorDivide
PyNumber_InPlaceLshift
PyNumber_InPlaceMatrixMultiply
PyNumber_InPlaceMultiply
PyNumber_InPlaceOr
PyNumber_InPlacePower
PyNumber_InPlaceRemainder
PyNumber_InPlaceRshift
PyNumber_InPlaceSubtract
PyNumber_InPlaceTrueDivide
PyNumber_InPlaceXor
PyNumber_Invert
PyNumber_Lshift
PyNumber_MatrixMultiply
PyNumber_Multiply
PyNumber_Negative
PyNumber_Or
PyNumber_Positive
PyNumber_Power
PyNumber_Remainder
PyNumber_Rshift
PyNumber_Subtract
PyNumber_TrueDivide
PyNumber_Xor
PyOS_double_to_string
PyOS_string_to_double
PyObject_ASCII
PyObject_Call
PyObject_CallFunction
PyObject_CallFunctionObjArgs
PyObject_CallMethod
PyObject_CheckBuffer
PyObject_DelItem
PyObject_Format
PyObject_GetAttr
PyObject_GetAttrString
PyObject_GetBuffer
PyObject_GetItem
PyObject_GetIter
PyObject_IsTrue
PyObject_Repr
PyObject_RichCompare
PyObject_SetAttr
PyObject_SetItem
PyObject_Str
PySequence_Check
PySequence_Contains
PySet_Add
PySet_New
PySet_Type
PySlice_New
PySys_GetObject
PyThreadState_Get
PyTraceBack_Here
PyTuple_GetItem
PyTuple_GetSlice
PyTuple_New
PyTuple_SetItem
PyTuple_Size
PyTuple_Type
PyType_IsSubtype
PyUnicode_AsEncodedString
PyUnicode_AsUTF8
PyUnicode_AsUTF8AndSize
PyUnicode_DecodeUTF8
PyUnicode_FromFormat
PyUnicode_FromKindAndData
PyUnicode_FromString
PyUnicode_InternInPlace
PyUnicode_New
PyUnicode_Type
Py_BuildValue
Py_DecRef
Py_IncRef
Py_InspectFlag
_PyArg_ParseTuple_SizeT
_PyBytes_Resize
_PyDict_GetItemIdWithError
_PyErr_Clear
_PyErr_GetTopmostException
_PyErr_SetString
_PyFloat_Pack8
_PyFloat_Unpack8
_PyList_Extend
_PyLong_AsInt
_PyLong_FromByteArray
_PyLong_New
_PyModuleSpec_IsInitializing
_PyObject_CallFunction_SizeT
_PyObject_CallMethodId_SizeT
_PyObject_CallMethod_SizeT
_PyObject_GetAttrId
_PyObject_LookupAttr
_PyObject_LookupSpecial
_PyObject_MakeTpCall
_PyRuntime
_PySet_NextEntry
_PyUnicode_JoinArray
_Py_BuildValue_SizeT
_Py_CheckFunctionResult
_Py_Dealloc
_Py_EllipsisObject
_Py_FalseStruct
_Py_NoneStruct
_Py_TrueStruct
_Py_fstat_noraise
_Py_hashtable_compare_direct
_Py_hashtable_destroy
_Py_hashtable_hash_ptr
_Py_hashtable_new_full
_Py_hashtable_set

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegCloseKey
RegEnumKeyExA
RegGetValueA
RegOpenKeyExA

iphlpapi

GetAdaptersAddresses
GetNetworkParams

kernel32

CloseHandle
CreateFileA
CreateFileMappingA
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
FlushViewOfFile
FormatMessageA
GetComputerNameA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetLastError
GetProcAddress
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
GlobalAlloc
GlobalFree
HeapAlloc
HeapFree
InitializeCriticalSection
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryA
LocalFree
MapViewOfFile
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualLock
VirtualProtect
VirtualQuery
VirtualUnlock

msvcrt

__iob_func
_amsg_exit
_fileno
_errno
_get_osfhandle
_initterm
_lock
_mktime64
_snprintf
_stat64
_time64
_unlock
_vsnprintf
abort
calloc
clock
exit
fprintf
fputc
fread
free
fwrite
getc
getenv
isprint
isxdigit
malloc
memcmp
memcpy
memmove
memset
rand
realloc
signal
sprintf
srand
strchr
strcmp
strerror
strlen
strncmp
strncpy
strrchr
strstr
toupper
vfprintf

user32

wsprintfA

ws2_32

WSACleanup
WSAGetLastError
WSAStartup
closesocket
connect
gethostbyname
htons
inet_ntoa
ioctlsocket
ntohl
recv
recvfrom
select
send
sendto
setsockopt
socket

Exports

Exports

PyInit_pyarmor_runtime

Sections

.text
Size: 516KB - Virtual size: 515KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 25KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
plpscripts_freeV2/plpscripts free ai aimbot/start.bat
plpscripts_freeV2/requirements.txt

Sharing

General

Malware Config

Signatures

Files

000235d4e716867abc7a7561e6384707

Headers

File Characteristics

Imports

python310

advapi32

iphlpapi

kernel32

msvcrt

user32

ws2_32

Exports

Exports

Sections

.text Size: 516KB - Virtual size: 515KB

.data Size: 18KB - Virtual size: 17KB

.rdata Size: 49KB - Virtual size: 49KB

.pdata Size: 9KB - Virtual size: 8KB

.xdata Size: 10KB - Virtual size: 9KB

.bss Size: - Virtual size: 25KB

.edata Size: 512B - Virtual size: 93B

.idata Size: 13KB - Virtual size: 12KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 1024B - Virtual size: 684B

.text
Size: 516KB - Virtual size: 515KB

.data
Size: 18KB - Virtual size: 17KB

.rdata
Size: 49KB - Virtual size: 49KB

.pdata
Size: 9KB - Virtual size: 8KB

.xdata
Size: 10KB - Virtual size: 9KB

.bss
Size: - Virtual size: 25KB

.edata
Size: 512B - Virtual size: 93B

.idata
Size: 13KB - Virtual size: 12KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 1024B - Virtual size: 684B