XWorm-v5-Remote-Access-Tool-main[.]zip

resource
unpack001/XWorm-v5-Remote-Access-Tool-main/ComponentFactory.Krypton.Toolkit.dll
unpack001/XWorm-v5-Remote-Access-Tool-main/Krypton.Toolkit.dll
unpack001/XWorm-v5-Remote-Access-Tool-main/Mono.Cecil.dll
unpack001/XWorm-v5-Remote-Access-Tool-main/Mono.Nat.dll
unpack001/XWorm-v5-Remote-Access-Tool-main/Vestris.ResourceLib.dll
unpack001/XWorm-v5-Remote-Access-Tool-main/XWorm.exe

XWorm-v5-Remote-Access-Tool-main.zip

SHA256 50505aa9a36faa076b8a6894297bc8fed02269938e6592b7b7be7c9c809897dd
MD5 4009932a7e44d607b529598df00ff375
SHA1 ff8bff1c6f707101215aee8d7ff315cba991001d
SHA512 b77816e1aaaf9a09155f91aa91070a099fcd09acec92c28ac6afa4bdf2abcec3d4e1eaa028efc4ff9b0999fc6b90ceaa71146d9023aaecc074a49945364c38de
SSDEEP 98304:pKF5kw1zDBMXSm5yH6FhCUJ4LGH2TqYeRTZ6Im81Xvm/UxRrBMGxaz5naIizTKM:Ic0ev5yaSU6GH2Th2TZsEfms+/kzOM
MD5 SHA1 SHA512 SSDEEP

XWorm-v5-Remote-Access-Tool-main/ComponentFactory.Krypton.Toolkit.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8c69f5df110bc1a61bdc3d8754ebfd3f49d9d995b9dd129accaf88371ce71e30
MD5 129884de0e136521fd650c59b2633e82
SHA1 43fea10a62670568c00a2910c3ee6fc1ceaa1bdc
SHA512 fbd40a8dd172449de46cecc08cdc2078409e5d893426364630c974903499c617f8cca2f4fd52cf030a835a376e140daf113a6d385027a9e2ede289ba32c8da43
SSDEEP 24576:9aA+gKf9mE6kWF2IaltkdgZUfoOJtMl6X1ZTJxf9VqY7djlb1IqdGsUfSYqsyb:UIaltkdgqHJtMl6XD7h7Nh1ImYqsy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

2869934

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\Github\Krypton\build\obj\ComponentFactory.Krypton.Toolkit\Debug\ComponentFactory.Krypton.Toolkit.pdb

XWorm-v5-Remote-Access-Tool-main/ComponentFactory.Krypton.Toolkit.pdb

SHA256 5d48ad683e71d8a28f8b0f75952ddcfac127850fae74f2fdff500278e6a66a4c
MD5 5a3085fdd24c102f3d466ac92b8aaa17
SHA1 c0eaaa892b3af3133c0dc0d20d96055817442260
SHA512 dd20f74f9b74c4a7b03f96e969d764ccc6df33a772d34e0b7b4aea3d4913a8fee8b360ccdd51be57ceec414f13060c70c33419d75af95fc768b1632d6e8264ef
SSDEEP 24576:xmMS2ySy5WenpDs/rUlFftAzngc5p66hNepJ6i2lA2Nc/YpvNyUV:NFOpJIJ9yG
MD5 SHA1 SHA512 SSDEEP

XWorm-v5-Remote-Access-Tool-main/D3DX9_43.dll

IMPHASH 336d8057d1db03e5a3ac3b62e8902f4b
SHA256 84b900dbd7fa978d6e0caee26fc54f2f61d92c9c75d10b35f00e3e82cd1d67b4
MD5 7160fc226391c0b50c85571fa1a546e5
SHA1 2bf450850a522a09e8d1ce0f1e443d86d934f4ad
SHA512 dfab0eaab8c40fb80369e150cd36ff2224f3a6baf713044f47182961cd501fe4222007f9a93753ac757f64513c707c68a5cf4ae914e23fecaa4656a68df8349b
SSDEEP 49152:dbCJsk4VlPXA+15Om5wxw9Qsi55K+31BhZ64nW:YIIBnW
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

bd:1c:4f:ec:4a:e7:0c:11:ef:6d:b7:89:8e:6a:4a:de:c2:22:ed:47

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 22, 2010

Minor OS version

1

Major OS version

6

Entry point

2186524

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d3dx9_43.pdb

msvcrt

malloc _vsnprintf _finite memmove _purecall qsort _stricmp modff iswpunct _clearfp iswdigit iswalpha iswspace ??2@YAPEAX_K@Z ??3@YAXPEAX@Z _strdup setlocale free calloc realloc sscanf _strtime _isatty _write _lseeki64 __pioinfo __badioinfo wctomb _itoa _snprintf _iob _fileno isleadbyte ?terminate@@YAXXZ _onexit _lock __dllonexit _unlock memset memcpy __C_specific_handler _amsg_exit _initterm _XcptFilter srand strtod fread fwrite fflush abort _tempnam _ultoa isalpha atol atof isxdigit wcstombs _isnan rand atoi isalnum _vsnwprintf isdigit isspace longjmp ldexp frexp __CxxFrameHandler _errno _strdate sqrt powf sqrtf floor fmodf memcmp log cos exp sinf cosf floorf ceilf atan2 atan acos asin sin pow atan2f logf acosf fmod asinf _setjmp ceil

gdi32

GetObjectW GetGlyphOutlineW GetCurrentObject GetOutlineTextMetricsA TranslateCharsetInfo ExtTextOutA MoveToEx ExtTextOutW CreateDIBSection GetGlyphOutlineA GetObjectA GetCharacterPlacementA GetCharacterPlacementW SetTextColor SetBkColor SetBkMode GetTextMetricsA GetTextMetricsW GetFontLanguageInfo CreateFontIndirectA CreateFontIndirectW SetTextAlign SetMapMode CreateCompatibleDC DeleteDC DeleteObject SelectObject

kernel32

FindResourceW SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetProcessHeap HeapFree HeapAlloc ReleaseMutex WaitForSingleObject CreateMutexA IsBadWritePtr IsBadReadPtr IsBadCodePtr ExpandEnvironmentStringsA GlobalMemoryStatus GetSystemInfo SetEndOfFile MoveFileW GetTempFileNameW MoveFileA CompareStringA SetFilePointer DeleteFileW FindResourceA LoadResource LockResource SizeofResource GetFileSize CreateFileMappingA MapViewOfFile FreeResource UnmapViewOfFile LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection LocalFree FormatMessageA GetFullPathNameW CreateFileW GetFileSizeEx GetLastError IsDBCSLeadByte WriteFile DeleteFileA CloseHandle ReadFile CreateFileA GetTempFileNameA GetTempPathA IsProcessorFeaturePresent VirtualFree VirtualAlloc GetACP MultiByteToWideChar WideCharToMultiByte OutputDebugStringA GetModuleHandleA FreeLibrary GetProcAddress LoadLibraryA GetVersionExA Sleep VirtualProtect DisableThreadLibraryCalls

advapi32

RegCloseKey RegQueryValueExA RegOpenKeyA

D3DXAssembleShader D3DXAssembleShaderFromFileA D3DXAssembleShaderFromFileW D3DXAssembleShaderFromResourceA D3DXAssembleShaderFromResourceW D3DXBoxBoundProbe D3DXCheckCubeTextureRequirements D3DXCheckTextureRequirements D3DXCheckVersion D3DXCheckVolumeTextureRequirements D3DXCleanMesh D3DXColorAdjustContrast D3DXColorAdjustSaturation D3DXCompileShader D3DXCompileShaderFromFileA D3DXCompileShaderFromFileW D3DXCompileShaderFromResourceA D3DXCompileShaderFromResourceW D3DXComputeBoundingBox D3DXComputeBoundingSphere D3DXComputeIMTFromPerTexelSignal D3DXComputeIMTFromPerVertexSignal D3DXComputeIMTFromSignal D3DXComputeIMTFromTexture D3DXComputeNormalMap D3DXComputeNormals D3DXComputeTangent D3DXComputeTangentFrame D3DXComputeTangentFrameEx D3DXConcatenateMeshes D3DXConvertMeshSubsetToSingleStrip D3DXConvertMeshSubsetToStrips D3DXCreateAnimationController D3DXCreateBox D3DXCreateBuffer D3DXCreateCompressedAnimationSet D3DXCreateCubeTexture D3DXCreateCubeTextureFromFileA D3DXCreateCubeTextureFromFileExA D3DXCreateCubeTextureFromFileExW D3DXCreateCubeTextureFromFileInMemory D3DXCreateCubeTextureFromFileInMemoryEx D3DXCreateCubeTextureFromFileW D3DXCreateCubeTextureFromResourceA D3DXCreateCubeTextureFromResourceExA D3DXCreateCubeTextureFromResourceExW D3DXCreateCubeTextureFromResourceW D3DXCreateCylinder D3DXCreateEffect D3DXCreateEffectCompiler D3DXCreateEffectCompilerFromFileA D3DXCreateEffectCompilerFromFileW D3DXCreateEffectCompilerFromResourceA D3DXCreateEffectCompilerFromResourceW D3DXCreateEffectEx D3DXCreateEffectFromFileA D3DXCreateEffectFromFileExA D3DXCreateEffectFromFileExW D3DXCreateEffectFromFileW D3DXCreateEffectFromResourceA D3DXCreateEffectFromResourceExA D3DXCreateEffectFromResourceExW D3DXCreateEffectFromResourceW D3DXCreateEffectPool D3DXCreateFontA D3DXCreateFontIndirectA D3DXCreateFontIndirectW D3DXCreateFontW D3DXCreateKeyframedAnimationSet D3DXCreateLine D3DXCreateMatrixStack D3DXCreateMesh D3DXCreateMeshFVF D3DXCreateNPatchMesh D3DXCreatePMeshFromStream D3DXCreatePRTBuffer D3DXCreatePRTBufferTex D3DXCreatePRTCompBuffer D3DXCreatePRTEngine D3DXCreatePatchMesh D3DXCreatePolygon D3DXCreateRenderToEnvMap D3DXCreateRenderToSurface D3DXCreateSPMesh D3DXCreateSkinInfo D3DXCreateSkinInfoFVF D3DXCreateSkinInfoFromBlendedMesh D3DXCreateSphere D3DXCreateSprite D3DXCreateTeapot D3DXCreateTextA D3DXCreateTextW D3DXCreateTexture D3DXCreateTextureFromFileA D3DXCreateTextureFromFileExA D3DXCreateTextureFromFileExW D3DXCreateTextureFromFileInMemory D3DXCreateTextureFromFileInMemoryEx D3DXCreateTextureFromFileW D3DXCreateTextureFromResourceA D3DXCreateTextureFromResourceExA D3DXCreateTextureFromResourceExW D3DXCreateTextureFromResourceW D3DXCreateTextureGutterHelper D3DXCreateTextureShader D3DXCreateTorus D3DXCreateVolumeTexture D3DXCreateVolumeTextureFromFileA D3DXCreateVolumeTextureFromFileExA D3DXCreateVolumeTextureFromFileExW D3DXCreateVolumeTextureFromFileInMemory D3DXCreateVolumeTextureFromFileInMemoryEx D3DXCreateVolumeTextureFromFileW D3DXCreateVolumeTextureFromResourceA D3DXCreateVolumeTextureFromResourceExA D3DXCreateVolumeTextureFromResourceExW D3DXCreateVolumeTextureFromResourceW D3DXDebugMute D3DXDeclaratorFromFVF D3DXDisassembleEffect D3DXDisassembleShader D3DXFVFFromDeclarator D3DXFileCreate D3DXFillCubeTexture D3DXFillCubeTextureTX D3DXFillTexture D3DXFillTextureTX D3DXFillVolumeTexture D3DXFillVolumeTextureTX D3DXFilterTexture D3DXFindShaderComment D3DXFloat16To32Array D3DXFloat32To16Array D3DXFrameAppendChild D3DXFrameCalculateBoundingSphere D3DXFrameDestroy D3DXFrameFind D3DXFrameNumNamedMatrices D3DXFrameRegisterNamedMatrices D3DXFresnelTerm D3DXGenerateOutputDecl D3DXGeneratePMesh D3DXGetDeclLength D3DXGetDeclVertexSize D3DXGetDriverLevel D3DXGetFVFVertexSize D3DXGetImageInfoFromFileA D3DXGetImageInfoFromFileInMemory D3DXGetImageInfoFromFileW D3DXGetImageInfoFromResourceA D3DXGetImageInfoFromResourceW D3DXGetPixelShaderProfile D3DXGetShaderConstantTable D3DXGetShaderConstantTableEx D3DXGetShaderInputSemantics D3DXGetShaderOutputSemantics D3DXGetShaderSamplers D3DXGetShaderSize D3DXGetShaderVersion D3DXGetVertexShaderProfile D3DXIntersect D3DXIntersectSubset D3DXIntersectTri D3DXLoadMeshFromXA D3DXLoadMeshFromXInMemory D3DXLoadMeshFromXResource D3DXLoadMeshFromXW D3DXLoadMeshFromXof D3DXLoadMeshHierarchyFromXA D3DXLoadMeshHierarchyFromXInMemory D3DXLoadMeshHierarchyFromXW D3DXLoadPRTBufferFromFileA D3DXLoadPRTBufferFromFileW D3DXLoadPRTCompBufferFromFileA D3DXLoadPRTCompBufferFromFileW D3DXLoadPatchMeshFromXof D3DXLoadSkinMeshFromXof D3DXLoadSurfaceFromFileA D3DXLoadSurfaceFromFileInMemory D3DXLoadSurfaceFromFileW D3DXLoadSurfaceFromMemory D3DXLoadSurfaceFromResourceA D3DXLoadSurfaceFromResourceW D3DXLoadSurfaceFromSurface D3DXLoadVolumeFromFileA D3DXLoadVolumeFromFileInMemory D3DXLoadVolumeFromFileW D3DXLoadVolumeFromMemory D3DXLoadVolumeFromResourceA D3DXLoadVolumeFromResourceW D3DXLoadVolumeFromVolume D3DXMatrixAffineTransformation D3DXMatrixAffineTransformation2D D3DXMatrixDecompose D3DXMatrixDeterminant D3DXMatrixInverse D3DXMatrixLookAtLH D3DXMatrixLookAtRH D3DXMatrixMultiply D3DXMatrixMultiplyTranspose D3DXMatrixOrthoLH D3DXMatrixOrthoOffCenterLH D3DXMatrixOrthoOffCenterRH D3DXMatrixOrthoRH D3DXMatrixPerspectiveFovLH D3DXMatrixPerspectiveFovRH D3DXMatrixPerspectiveLH D3DXMatrixPerspectiveOffCenterLH D3DXMatrixPerspectiveOffCenterRH D3DXMatrixPerspectiveRH D3DXMatrixReflect D3DXMatrixRotationAxis D3DXMatrixRotationQuaternion D3DXMatrixRotationX D3DXMatrixRotationY D3DXMatrixRotationYawPitchRoll D3DXMatrixRotationZ D3DXMatrixScaling D3DXMatrixShadow D3DXMatrixTransformation D3DXMatrixTransformation2D D3DXMatrixTranslation D3DXMatrixTranspose D3DXOptimizeFaces D3DXOptimizeVertices D3DXPlaneFromPointNormal D3DXPlaneFromPoints D3DXPlaneIntersectLine D3DXPlaneNormalize D3DXPlaneTransform D3DXPlaneTransformArray D3DXPreprocessShader D3DXPreprocessShaderFromFileA D3DXPreprocessShaderFromFileW D3DXPreprocessShaderFromResourceA D3DXPreprocessShaderFromResourceW D3DXQuaternionBaryCentric D3DXQuaternionExp D3DXQuaternionInverse D3DXQuaternionLn D3DXQuaternionMultiply D3DXQuaternionNormalize D3DXQuaternionRotationAxis D3DXQuaternionRotationMatrix D3DXQuaternionRotationYawPitchRoll D3DXQuaternionSlerp D3DXQuaternionSquad D3DXQuaternionSquadSetup D3DXQuaternionToAxisAngle D3DXRectPatchSize D3DXSHAdd D3DXSHDot D3DXSHEvalConeLight D3DXSHEvalDirection D3DXSHEvalDirectionalLight D3DXSHEvalHemisphereLight D3DXSHEvalSphericalLight D3DXSHMultiply2 D3DXSHMultiply3 D3DXSHMultiply4 D3DXSHMultiply5 D3DXSHMultiply6 D3DXSHPRTCompSplitMeshSC D3DXSHPRTCompSuperCluster D3DXSHProjectCubeMap D3DXSHRotate D3DXSHRotateZ D3DXSHScale D3DXSaveMeshHierarchyToFileA D3DXSaveMeshHierarchyToFileW D3DXSaveMeshToXA D3DXSaveMeshToXW D3DXSavePRTBufferToFileA D3DXSavePRTBufferToFileW D3DXSavePRTCompBufferToFileA D3DXSavePRTCompBufferToFileW D3DXSaveSurfaceToFileA D3DXSaveSurfaceToFileInMemory D3DXSaveSurfaceToFileW D3DXSaveTextureToFileA D3DXSaveTextureToFileInMemory D3DXSaveTextureToFileW D3DXSaveVolumeToFileA D3DXSaveVolumeToFileInMemory D3DXSaveVolumeToFileW D3DXSimplifyMesh D3DXSphereBoundProbe D3DXSplitMesh D3DXTessellateNPatches D3DXTessellateRectPatch D3DXTessellateTriPatch D3DXTriPatchSize D3DXUVAtlasCreate D3DXUVAtlasPack D3DXUVAtlasPartition D3DXValidMesh D3DXValidPatchMesh D3DXVec2BaryCentric D3DXVec2CatmullRom D3DXVec2Hermite D3DXVec2Normalize D3DXVec2Transform D3DXVec2TransformArray D3DXVec2TransformCoord D3DXVec2TransformCoordArray D3DXVec2TransformNormal D3DXVec2TransformNormalArray D3DXVec3BaryCentric D3DXVec3CatmullRom D3DXVec3Hermite D3DXVec3Normalize D3DXVec3Project D3DXVec3ProjectArray D3DXVec3Transform D3DXVec3TransformArray D3DXVec3TransformCoord D3DXVec3TransformCoordArray D3DXVec3TransformNormal D3DXVec3TransformNormalArray D3DXVec3Unproject D3DXVec3UnprojectArray D3DXVec4BaryCentric D3DXVec4CatmullRom D3DXVec4Cross D3DXVec4Hermite D3DXVec4Normalize D3DXVec4Transform D3DXVec4TransformArray D3DXWeldVertices

XWorm-v5-Remote-Access-Tool-main/Krypton.Toolkit.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 477ebd61ce116c6908a1cd1e50bc93869f6f7b9c3e0e5757551e6dd2a01b4648
MD5 068b4f05eb35479a419bc55da643781e
SHA1 1d0fe6bb23bbd63dc6d4248f7c17afcf4bc16dea
SHA512 f9022c7d91364519f5b773fd641741637f89a4f4f8eb1406d1c594e0a286724cea7494fb047e810bbed0579b6870db49a6828b1c79808e4554d762f326a87dcc
SSDEEP 49152:tmB08naO5IDdOBQNJxtk7ryrDdkny3y+sUFdRcRkMb2J:Mu8naO5oj9k7rODdlmHOMbO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4527002

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

S:\Development\Krypton\Standard-Toolkit\Source\Krypton Components\Krypton.Toolkit\obj\Release\net48\Krypton.Toolkit.pdb

XWorm-v5-Remote-Access-Tool-main/LICENSE

SHA256 8c349f80764d0648e645f41ef23772a70c995a0924b5235f735f4a3d09df127c
MD5 2dd765ca47a05140be15ebafddbeadfe
SHA1 cc1b9f6357720c4005d01f48196e732e6f2415ad
SHA512 80bf2bbc35f1bbbbe6f6aed1c441758a129dfcc721e4ee17c6212719c0ea1a0faa2c2da643cef304287668f772bb017f1de9ecf058b1e95b2a2040d4533f32c3
SSDEEP 384:/0u1CIkVEj6TU2Fa/5NuYuP7kND+2mKKm:dkBFcGA0RKKm
MD5 SHA1 SHA512 SSDEEP

XWorm-v5-Remote-Access-Tool-main/Mono.Cecil.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3e4288b32006fe8499b43a7f605bb7337931847a0aa79a33217a1d6d1a6c397e
MD5 8df4d6b5dc1629fcefcdc20210a88eac
SHA1 16c661757ad90eb84228aa3487db11a2eac6fe64
SHA512 874b4987865588efb806a283b0e785fd24e8b1562026edd43050e150bce6c883134f3c8ad0f8c107b0fb1b26fce6ddcc7e344a5f55c3788dac35035b13d15174
SSDEEP 6144:iYOMWAEq+PAEwGQ9Xivs0s4EtS1Fv8jnLKdFvkPo2:AG+PpjQSHv8jA
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

289950

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\Users\Max\Desktop\lib\cecil-master\obj\net_4_0_Release\Mono.Cecil.pdb

XWorm-v5-Remote-Access-Tool-main/Mono.Nat.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b33435ac7cdefcf7c2adf96738c762a95414eb7a4967ef6b88dcda14d58bfee0
MD5 bf929442b12d4b5f9906b29834bf7db1
SHA1 810a2b3c8e548d1df931538bc304cc1405f7a32b
SHA512 9fcfaf48bfe5455a466e666bafa59a7348a736368daa892333cefa0cac22bcef3255f9cee24a70ed96011b73abea8e5d3dbf24876cffa81e0b532df41dd81828
SSDEEP 768:yoVesKx0V2LpibQJxoKUDHj560aSX3zlJAO:lVespQibC+H56k3fF
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

46574

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

XWorm-v5-Remote-Access-Tool-main/README.md

SHA256 cff3bb97d522f2a05e3210c5b0f7332f73da64ab6f2094a69845eca20148e04d
MD5 c2f508a706b6032a502d5f1c54ce2636
SHA1 72ff9994bb1518e0ba3dbf0a992feee6867ad9b3
SHA512 abc1dc6cb9928321bf0df298e91d3ea0725a4b5503c6e126ac42c9d06c939328b2eeee89ca738b8496b70cc2e11179127a92a34d7654b0746c459871167983af
MD5 SHA1 SHA512

XWorm-v5-Remote-Access-Tool-main/VMProtectSDK64.lib

SHA256 c8c4c4d824b42ff38b05bd9f8f3781a63b9318baef087e4e9cf694ac4844a20d
MD5 f8fb5674b416f5f1a8bb4c94d60817c6
SHA1 56092d5cc15023eda121de5ff1aab47e32bc9a11
SHA512 6e37daba16c47d89766665d0b1e7617878cd4e0e2abd0638e5ca3e9366740af0822a05c3fa62d0f60064a9bad4031f8b7e14d6ae5b4570f8326834ef5aa45920
SSDEEP 48:XrZ5/k5RLRzRCRXB6cI15A3Xy/F/CRcRj15T1tRLRyIBrJaFX43KXyAO4YMKUQl+:bjkqBw1xrR3KxKdKJ0DnBRU/rR
MD5 SHA1 SHA512 SSDEEP

XWorm-v5-Remote-Access-Tool-main/Vestris.ResourceLib.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 34cab594ce9c9af8e12a6923fc16468f5b87e168777db4be2f04db883c1db993
MD5 64e9cb25aeefeeba3bb579fb1a5559bc
SHA1 e719f80fcbd952609475f3d4a42aa578b2034624
SHA512 b21cd93f010b345b09b771d24b2e5eeed3b73a82fc16badafea7f0324e39477b0d7033623923313d2de5513cb778428ae10161ae7fc0d6b00e446f8d89cf0f8c
SSDEEP 1536:5Z0R489PUoltCY19T7Uf5DYoRvtkA2MNmjYgGKeK9jXGYWs:L0R489PUeCy7Uf5pVCMwjVG/K9jp
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

83486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

XWorm-v5-Remote-Access-Tool-main/XWorm.config

SHA256 d61bde901e7189cc97d45a1d4c4aa39d4c4de2b68419773ec774338506d659ad
MD5 c16b0746faa39818049fe38709a82c62
SHA1 3fa322fe6ed724b1bc4fd52795428a36b7b8c131
SHA512 cbcba899a067f8dc32cfcbd1779a6982d25955de91e1e02cee8eaf684a01b0dee3642c2a954903720ff6086de5a082147209868c03665c89f814c6219be2df7c
MD5 SHA1 SHA512

XWorm-v5-Remote-Access-Tool-main/XWorm.exe

IMPHASH eca0c30b65294d02a6c6180a6b323b58
SHA256 9950788284df125c7359aeb91435ed24d59359fac6a74ed73774ca31561cc7ae
MD5 515a0c8be21a5ba836e5687fc2d73333
SHA1 c52be9d0d37ac1b8d6bc09860e68e9e0615255ab
SHA512 4e2bd7ce844bba25aff12e2607c4281b59f7579b9407139ef6136ef09282c7afac1c702adebc42f8bd7703fac047fd8b5add34df334bfc04d3518ea483225522
SSDEEP 6144:2uWP/BtSnurUylcrGYlnIttxv8HbcLgsd1Gus5psdrvV44dixP+MHDkBYdxtG9+V:2uWP/BZUyoLu8Agsmxwrvejkd2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

103583

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualProtect HeapSize GetStringTypeW GetStringTypeA GetLocaleInfoA GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter LCMapStringW LCMapStringA InterlockedExchange RtlUnwind HeapReAlloc VirtualAlloc InitializeCriticalSection LoadLibraryA GetCPInfo GetSystemInfo GetACP EnterCriticalSection LeaveCriticalSection VirtualFree DeleteCriticalSection GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA UnhandledExceptionFilter GetModuleFileNameA GetStdHandle WriteFile TerminateProcess TlsGetValue TlsSetValue TlsFree GetLastError GetCurrentThreadId SetLastError TlsAlloc GetProcAddress HeapCreate VirtualQuery WaitForSingleObject HeapDestroy CreateEventW ExitProcess WideCharToMultiByte OutputDebugStringW CreateFileW ReadFile CloseHandle GetCurrentProcess MultiByteToWideChar GetModuleHandleW InterlockedIncrement GetModuleFileNameW lstrlenW HeapFree OutputDebugStringA MulDiv GetProcessHeap HeapAlloc GetOEMCP GetVersionExA GetCommandLineA GetStartupInfoA GetModuleHandleA

user32

GetClassInfoW FrameRect CharUpperBuffW IsIconic EnableWindow DrawIcon DeleteMenu SetTimer CreateAcceleratorTableW GetSystemMenu DrawMenuBar SetMenuItemInfoW GetWindowTextW GetDCEx RegisterClassW GetMenuItemInfoW SetScrollPos FillRect GetSystemMetrics GetDC MsgWaitForMultipleObjectsEx EndMenu DestroyCursor IsZoomed GetCursor GetScrollPos DispatchMessageW DefFrameProcW DestroyMenu ReleaseDC IsDialogMessageW GetScrollRange DefMDIChildProcW GetMenuStringW PeekMessageW CopyImage ShowCaret LoadIconW DrawFocusRect LoadBitmapW GetDlgCtrlID LoadStringW GetClassInfoExW DestroyIcon ShowWindow EndPaint PostMessageW CreateWindowExW BeginPaint LoadCursorW GetClientRect InsertMenuW CreateIcon DestroyWindow KillTimer GetScrollInfo CreateMenu

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW

gdi32

Pie AngleArc Polygon CreateSolidBrush RectVisible CreateICW CreatePalette PolyBezierTo RoundRect RestoreDC GetWindowOrgEx CreateCompatibleBitmap MoveToEx GetTextMetricsW GetStockObject SetTextColor SetAbortProc SetBkMode StretchBlt CreateDCW GetDeviceCaps SetRectRgn GetEnhMetaFileHeader

ole32

OleInitialize CoUninitialize OleUninitialize CoTaskMemFree CoTaskMemAlloc IsEqualGUID CoInitialize CoCreateInstance

oleaut32

VariantChangeType SafeArrayPutElement VariantCopy VariantClear SafeArrayGetElement SafeArrayGetUBound SysFreeString GetErrorInfo VariantInit SafeArrayPtrOfIndex SysAllocStringLen SafeArrayGetLBound SafeArrayAccessData VariantCopyInd SysReAllocStringLen SafeArrayCreate SafeArrayUnaccessData

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

winspool.drv

EnumPrintersW ord203 OpenPrinterW ClosePrinter DocumentPropertiesW

XWorm-v5-Remote-Access-Tool-main/imgui.ini

SHA256 bea859d15c0dbc0ef79b96c27dbfb538d648ab8090bba7b0885db57da10114dc
MD5 6a7578ca403fbf4a29eae1ea14190bef
SHA1 185048daacfab144bff41a3695670c38dc46fd6a
SHA512 f6e0a8ee2faea78f3019ae780d7d03a14d0534a269b6e53a7bcac9857bdbcce866efca62cb26d9151ea1dbb437404b2a0b79ad7f2bd96f82b4a55c447a5c7447
MD5 SHA1 SHA512