Extracted

• eea56454613528ea4cf28f916e2eacb2_JaffaCakes118

  .gz
• sample

  .tar
• isr-evilgrade/agent/agent.exe

  .exe windows:5 windows x86 arch:x86

  1082b0d24057c525706f0420d775d7ac

  
  

  Code Sign

  0e:34:e0:8e:b4:79:50:bd:4b:6a:77:ee:ec:f1:d9:18

  Certificate

  Issuer

  CN=Root Agency

  Not Before

  25-09-2007 19:56

  Not After

  31-12-2039 23:59

  Subject

  CN=Pantaray Research Ltd.

  38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

  Certificate

  Issuer

  CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

  Not Before

  15-06-2007 00:00

  Not After

  14-06-2012 23:59

  Subject

  CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  04-12-2003 00:00

  Not After

  03-12-2013 23:59

  Subject

  CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  Signer

  Actual PE Digest

  Digest Algorithm

  PE Digest Matches

  false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DEBUG_STRIPPED

  Imports

  comdlg32

  FindTextW

  GetSaveFileNameW

  GetOpenFileNameW

  PrintDlgExW

  ReplaceTextW

  GetFileTitleW

  ChooseFontW

  PageSetupDlgW

  CommDlgExtendedError

  shell32

  DragQueryFileW

  DragFinish

  ShellAboutW

  DragAcceptFiles

  msvcrt

  _initterm

  __getmainargs

  __p__commode

  __setusermatherr

  _adjust_fdiv

  _controlfp

  __p__fmode

  __set_app_type

  _acmdln

  exit

  _XcptFilter

  _exit

  _except_handler3

  time

  localtime

  wcsncpy

  iswctype

  _wtol

  wcsncmp

  advapi32

  IsTextUnicode

  RegCreateKeyW

  RegQueryValueExW

  RegSetValueExW

  RegOpenKeyExA

  RegQueryValueExA

  RegCloseKey

  kernel32

  LocalUnlock

  GlobalUnlock

  GlobalLock

  GetLastError

  SetLastError

  GetModuleHandleA

  GetCPInfo

  GetStartupInfoA

  GetFileInformationByHandle

  CreateFileMappingW

  GlobalFree

  GetLocaleInfoW

  MulDiv

  CreateFileW

  lstrcpyW

  lstrcpynW

  LocalFree

  GetProcAddress

  GetCommandLineW

  lstrcatW

  FindClose

  FindFirstFileW

  lstrcmpW

  LocalAlloc

  lstrlenW

  FormatMessageW

  CompareStringW

  LocalLock

  FoldStringW

  LoadLibraryA

  lstrcmpiW

  IsDBCSLeadByte

  GetTimeFormatW

  GetDateFormatW

  GetUserDefaultLCID

  GetLocalTime

  SetEndOfFile

  WideCharToMultiByte

  MapViewOfFile

  GetUserDefaultLangID

  LocalSize

  DeleteFileW

  WriteFile

  MultiByteToWideChar

  UnmapViewOfFile

  CloseHandle

  GetACP

  LocalReAlloc

  gdi32

  TextOutW

  StartDocW

  GetDeviceCaps

  SelectObject

  SetBkMode

  GetTextMetricsW

  SetAbortProc

  StartPage

  EndPage

  EndDoc

  DeleteDC

  SetWindowExtEx

  GetTextExtentPoint32W

  CreateFontIndirectW

  DeleteObject

  LPtoDP

  SetViewportExtEx

  SetMapMode

  CreateDCW

  GetObjectW

  GetStockObject

  EnumFontsW

  GetTextFaceW

  user32

  IsDialogMessageW

  GetMessageW

  PostQuitMessage

  SetScrollPos

  UpdateWindow

  CharLowerW

  LoadImageW

  MoveWindow

  InvalidateRect

  WinHelpW

  GetDlgCtrlID

  ChildWindowFromPoint

  ScreenToClient

  GetCursorPos

  SendDlgItemMessageW

  SetCursor

  ReleaseDC

  GetDC

  SetFocus

  DialogBoxParamW

  PostMessageW

  GetFocus

  LoadIconW

  MessageBoxW

  GetDesktopWindow

  EnableMenuItem

  GetSubMenu

  SendMessageW

  GetMenu

  SetActiveWindow

  DefWindowProcW

  GetKeyboardLayout

  MessageBeep

  DestroyWindow

  GetForegroundWindow

  IsIconic

  RegisterClassExW

  CharNextW

  DispatchMessageW

  TranslateMessage

  TranslateAcceleratorW

  DrawTextExW

  GetWindowLongW

  GetSystemMetrics

  SetWindowTextW

  CheckMenuItem

  CloseClipboard

  IsClipboardFormatAvailable

  OpenClipboard

  GetMenuState

  wsprintfW

  SetDlgItemTextW

  EndDialog

  GetDlgItemTextW

  PeekMessageW

  GetSystemMenu

  LoadAcceleratorsW

  SetWindowLongW

  CreateDialogParamW

  EnableWindow

  GetWindowTextW

  LoadStringW

  GetWindowPlacement

  LoadCursorW

  RegisterWindowMessageW

  CharUpperW

  ShowWindow

  GetClientRect

  SetWindowPlacement

  CreateWindowExW

  winspool.drv

  GetPrinterDriverW

  OpenPrinterW

  ClosePrinter

  Sections

  .text

  Size: 25KB - Virtual size: 25KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 21KB - Virtual size: 24KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• isr-evilgrade/agent/agent.zip

  .zip
• update.exe

  .exe windows:5 windows x86 arch:x86

  1082b0d24057c525706f0420d775d7ac

  
  

  Code Sign

  0e:34:e0:8e:b4:79:50:bd:4b:6a:77:ee:ec:f1:d9:18

  Certificate

  Issuer

  CN=Root Agency

  Not Before

  25-09-2007 19:56

  Not After

  31-12-2039 23:59

  Subject

  CN=Pantaray Research Ltd.

  38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

  Certificate

  Issuer

  CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

  Not Before

  15-06-2007 00:00

  Not After

  14-06-2012 23:59

  Subject

  CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  04-12-2003 00:00

  Not After

  03-12-2013 23:59

  Subject

  CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  Signer

  Actual PE Digest

  Digest Algorithm

  PE Digest Matches

  false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DEBUG_STRIPPED

  Imports

  comdlg32

  FindTextW

  GetSaveFileNameW

  GetOpenFileNameW

  PrintDlgExW

  ReplaceTextW

  GetFileTitleW

  ChooseFontW

  PageSetupDlgW

  CommDlgExtendedError

  shell32

  DragQueryFileW

  DragFinish

  ShellAboutW

  DragAcceptFiles

  msvcrt

  _initterm

  __getmainargs

  __p__commode

  __setusermatherr

  _adjust_fdiv

  _controlfp

  __p__fmode

  __set_app_type

  _acmdln

  exit

  _XcptFilter

  _exit

  _except_handler3

  time

  localtime

  wcsncpy

  iswctype

  _wtol

  wcsncmp

  advapi32

  IsTextUnicode

  RegCreateKeyW

  RegQueryValueExW

  RegSetValueExW

  RegOpenKeyExA

  RegQueryValueExA

  RegCloseKey

  kernel32

  LocalUnlock

  GlobalUnlock

  GlobalLock

  GetLastError

  SetLastError

  GetModuleHandleA

  GetCPInfo

  GetStartupInfoA

  GetFileInformationByHandle

  CreateFileMappingW

  GlobalFree

  GetLocaleInfoW

  MulDiv

  CreateFileW

  lstrcpyW

  lstrcpynW

  LocalFree

  GetProcAddress

  GetCommandLineW

  lstrcatW

  FindClose

  FindFirstFileW

  lstrcmpW

  LocalAlloc

  lstrlenW

  FormatMessageW

  CompareStringW

  LocalLock

  FoldStringW

  LoadLibraryA

  lstrcmpiW

  IsDBCSLeadByte

  GetTimeFormatW

  GetDateFormatW

  GetUserDefaultLCID

  GetLocalTime

  SetEndOfFile

  WideCharToMultiByte

  MapViewOfFile

  GetUserDefaultLangID

  LocalSize

  DeleteFileW

  WriteFile

  MultiByteToWideChar

  UnmapViewOfFile

  CloseHandle

  GetACP

  LocalReAlloc

  gdi32

  TextOutW

  StartDocW

  GetDeviceCaps

  SelectObject

  SetBkMode

  GetTextMetricsW

  SetAbortProc

  StartPage

  EndPage

  EndDoc

  DeleteDC

  SetWindowExtEx

  GetTextExtentPoint32W

  CreateFontIndirectW

  DeleteObject

  LPtoDP

  SetViewportExtEx

  SetMapMode

  CreateDCW

  GetObjectW

  GetStockObject

  EnumFontsW

  GetTextFaceW

  user32

  IsDialogMessageW

  GetMessageW

  PostQuitMessage

  SetScrollPos

  UpdateWindow

  CharLowerW

  LoadImageW

  MoveWindow

  InvalidateRect

  WinHelpW

  GetDlgCtrlID

  ChildWindowFromPoint

  ScreenToClient

  GetCursorPos

  SendDlgItemMessageW

  SetCursor

  ReleaseDC

  GetDC

  SetFocus

  DialogBoxParamW

  PostMessageW

  GetFocus

  LoadIconW

  MessageBoxW

  GetDesktopWindow

  EnableMenuItem

  GetSubMenu

  SendMessageW

  GetMenu

  SetActiveWindow

  DefWindowProcW

  GetKeyboardLayout

  MessageBeep

  DestroyWindow

  GetForegroundWindow

  IsIconic

  RegisterClassExW

  CharNextW

  DispatchMessageW

  TranslateMessage

  TranslateAcceleratorW

  DrawTextExW

  GetWindowLongW

  GetSystemMetrics

  SetWindowTextW

  CheckMenuItem

  CloseClipboard

  IsClipboardFormatAvailable

  OpenClipboard

  GetMenuState

  wsprintfW

  SetDlgItemTextW

  EndDialog

  GetDlgItemTextW

  PeekMessageW

  GetSystemMenu

  LoadAcceleratorsW

  SetWindowLongW

  CreateDialogParamW

  EnableWindow

  GetWindowTextW

  LoadStringW

  GetWindowPlacement

  LoadCursorW

  RegisterWindowMessageW

  CharUpperW

  ShowWindow

  GetClientRect

  SetWindowPlacement

  CreateWindowExW

  winspool.drv

  GetPrinterDriverW

  OpenPrinterW

  ClosePrinter

  Sections

  .text

  Size: 25KB - Virtual size: 25KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 21KB - Virtual size: 24KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• isr-evilgrade/agent/agent2.zip

  .zip
• Paint.NET.4.3.6.Install.exe

  .exe windows:5 windows x86 arch:x86

  1082b0d24057c525706f0420d775d7ac

  
  

  Code Sign

  0e:34:e0:8e:b4:79:50:bd:4b:6a:77:ee:ec:f1:d9:18

  Certificate

  Issuer

  CN=Root Agency

  Not Before

  25-09-2007 19:56

  Not After

  31-12-2039 23:59

  Subject

  CN=Pantaray Research Ltd.

  38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

  Certificate

  Issuer

  CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

  Not Before

  15-06-2007 00:00

  Not After

  14-06-2012 23:59

  Subject

  CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  04-12-2003 00:00

  Not After

  03-12-2013 23:59

  Subject

  CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  Signer

  Actual PE Digest

  Digest Algorithm

  PE Digest Matches

  false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DEBUG_STRIPPED

  Imports

  comdlg32

  FindTextW

  GetSaveFileNameW

  GetOpenFileNameW

  PrintDlgExW

  ReplaceTextW

  GetFileTitleW

  ChooseFontW

  PageSetupDlgW

  CommDlgExtendedError

  shell32

  DragQueryFileW

  DragFinish

  ShellAboutW

  DragAcceptFiles

  msvcrt

  _initterm

  __getmainargs

  __p__commode

  __setusermatherr

  _adjust_fdiv

  _controlfp

  __p__fmode

  __set_app_type

  _acmdln

  exit

  _XcptFilter

  _exit

  _except_handler3

  time

  localtime

  wcsncpy

  iswctype

  _wtol

  wcsncmp

  advapi32

  IsTextUnicode

  RegCreateKeyW

  RegQueryValueExW

  RegSetValueExW

  RegOpenKeyExA

  RegQueryValueExA

  RegCloseKey

  kernel32

  LocalUnlock

  GlobalUnlock

  GlobalLock

  GetLastError

  SetLastError

  GetModuleHandleA

  GetCPInfo

  GetStartupInfoA

  GetFileInformationByHandle

  CreateFileMappingW

  GlobalFree

  GetLocaleInfoW

  MulDiv

  CreateFileW

  lstrcpyW

  lstrcpynW

  LocalFree

  GetProcAddress

  GetCommandLineW

  lstrcatW

  FindClose

  FindFirstFileW

  lstrcmpW

  LocalAlloc

  lstrlenW

  FormatMessageW

  CompareStringW

  LocalLock

  FoldStringW

  LoadLibraryA

  lstrcmpiW

  IsDBCSLeadByte

  GetTimeFormatW

  GetDateFormatW

  GetUserDefaultLCID

  GetLocalTime

  SetEndOfFile

  WideCharToMultiByte

  MapViewOfFile

  GetUserDefaultLangID

  LocalSize

  DeleteFileW

  WriteFile

  MultiByteToWideChar

  UnmapViewOfFile

  CloseHandle

  GetACP

  LocalReAlloc

  gdi32

  TextOutW

  StartDocW

  GetDeviceCaps

  SelectObject

  SetBkMode

  GetTextMetricsW

  SetAbortProc

  StartPage

  EndPage

  EndDoc

  DeleteDC

  SetWindowExtEx

  GetTextExtentPoint32W

  CreateFontIndirectW

  DeleteObject

  LPtoDP

  SetViewportExtEx

  SetMapMode

  CreateDCW

  GetObjectW

  GetStockObject

  EnumFontsW

  GetTextFaceW

  user32

  IsDialogMessageW

  GetMessageW

  PostQuitMessage

  SetScrollPos

  UpdateWindow

  CharLowerW

  LoadImageW

  MoveWindow

  InvalidateRect

  WinHelpW

  GetDlgCtrlID

  ChildWindowFromPoint

  ScreenToClient

  GetCursorPos

  SendDlgItemMessageW

  SetCursor

  ReleaseDC

  GetDC

  SetFocus

  DialogBoxParamW

  PostMessageW

  GetFocus

  LoadIconW

  MessageBoxW

  GetDesktopWindow

  EnableMenuItem

  GetSubMenu

  SendMessageW

  GetMenu

  SetActiveWindow

  DefWindowProcW

  GetKeyboardLayout

  MessageBeep

  DestroyWindow

  GetForegroundWindow

  IsIconic

  RegisterClassExW

  CharNextW

  DispatchMessageW

  TranslateMessage

  TranslateAcceleratorW

  DrawTextExW

  GetWindowLongW

  GetSystemMetrics

  SetWindowTextW

  CheckMenuItem

  CloseClipboard

  IsClipboardFormatAvailable

  OpenClipboard

  GetMenuState

  wsprintfW

  SetDlgItemTextW

  EndDialog

  GetDlgItemTextW

  PeekMessageW

  GetSystemMenu

  LoadAcceleratorsW

  SetWindowLongW

  CreateDialogParamW

  EnableWindow

  GetWindowTextW

  LoadStringW

  GetWindowPlacement

  LoadCursorW

  RegisterWindowMessageW

  CharUpperW

  ShowWindow

  GetClientRect

  SetWindowPlacement

  CreateWindowExW

  winspool.drv

  GetPrinterDriverW

  OpenPrinterW

  ClosePrinter

  Sections

  .text

  Size: 25KB - Virtual size: 25KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 21KB - Virtual size: 24KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• isr-evilgrade/agent/agent_perl.tar.gz

  .gz
• agent_perl.tar

  .tar
• Time-Format-1.09/Build.PL
• Time-Format-1.09/Changes
• Time-Format-1.09/MANIFEST
• Time-Format-1.09/MANIFEST.SKIP
• Time-Format-1.09/META.yml
• Time-Format-1.09/Makefile
• Time-Format-1.09/Makefile.PL
• Time-Format-1.09/Makefile.old
• Time-Format-1.09/README
• Time-Format-1.09/SIGNATURE
• Time-Format-1.09/lib/Time/Format.pm
• Time-Format-1.09/quickref.ps
• Time-Format-1.09/quickref.txt
• Time-Format-1.09/t/0-signature.t

  .sh linux
• Time-Format-1.09/t/1-load.t
• Time-Format-1.09/t/DateManip.t

  .sh linux
• Time-Format-1.09/t/DateTime.t

  .sh linux
• Time-Format-1.09/t/die.t

  .sh linux
• Time-Format-1.09/t/doc.t

  .sh linux
• Time-Format-1.09/t/export1.t

  .sh linux
• Time-Format-1.09/t/export2.t

  .sh linux
• Time-Format-1.09/t/export3.t

  .sh linux
• Time-Format-1.09/t/funcs.t

  .sh linux
• Time-Format-1.09/t/locale.t

  .sh linux
• Time-Format-1.09/t/manip.t

  .sh linux
• Time-Format-1.09/t/quot.t

  .sh linux
• Time-Format-1.09/t/strftime.t

  .sh linux
• Time-Format-1.09/t/string.t

  .sh linux
• Time-Format-1.09/t/time.t

  .sh linux
• Time-Format-1.09/t/xs_DateTime.t

  .sh linux
• Time-Format-1.09/t/xs_doc.t

  .sh linux
• Time-Format-1.09/t/xs_funcs.t

  .sh linux
• Time-Format-1.09/t/xs_locale.t

  .sh linux
• Time-Format-1.09/t/xs_quot.t

  .sh linux
• Time-Format-1.09/t/xs_time.t

  .sh linux
• isr-evilgrade/agent/apptapp.zip

  .zip
• isr-evilgrade/agent/cygwin_file.tar.bz2

  .bz2
• cygwin_file.tar

  .tar
• usr/bin/gunzip

  .sh linux
• usr/bin/gzexe

  .sh linux
• usr/bin/gzip.exe

  .exe windows:4 windows x86 arch:x86

  5078dc7b2dd6ff2a033c30384bcf5e17

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DEBUG_STRIPPED

  Imports

  cygwin1

  __assert

  __errno

  __getreent

  __main

  __mb_cur_max

  _acl32

  _ctype_

  _exit

  _fstat64

  _getgrgid32

  _getgrnam32

  _getpwuid32

  _impure_ptr

  _lstat64

  _stat64

  _tzname

  abort

  access

  atexit

  btowc

  calloc

  clock_gettime

  closedir

  cygwin_internal

  dirfd

  dll_crt0__FP11per_process

  exit

  fclose

  fflush

  fprintf

  fputs

  free

  fwrite

  getenv

  getpwnam

  gettimeofday

  gmtime_r

  ioctl

  isatty

  iswcntrl

  iswctype

  iswprint

  localeconv

  localtime

  localtime_r

  longjmp

  malloc

  mbrlen

  mbrtowc

  mbsinit

  mbsrtowcs

  memchr

  memcpy

  memmove

  mempcpy

  memset

  opendir

  printf

  putc_unlocked

  putchar_unlocked

  raise

  readdir

  readlink

  realloc

  setjmp

  setlocale

  sigaction

  sigaddset

  sigemptyset

  sigismember

  signal

  sigprocmask

  sprintf

  strcat

  strchr

  strcmp

  strcoll

  strcpy

  strdup

  strerror_r

  strftime

  strlen

  strncmp

  strncpy

  strndup

  strrchr

  strtoul

  strtoumax

  tcgetpgrp

  towlower

  tzset

  vfprintf

  wcscat

  wcslen

  wctype

  wcwidth

  wmemchr

  wmemcpy

  cygintl-8

  libintl_bindtextdomain

  libintl_dcgettext

  libintl_gettext

  libintl_textdomain

  kernel32

  GetModuleHandleA

  Sections

  .text

  Size: 73KB - Virtual size: 73KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 608B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 17KB - Virtual size: 17KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .bss

  Size: - Virtual size: 1KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

• usr/bin/uncompress

  .sh linux
• usr/bin/zcat

  .sh linux
• usr/bin/zcmp

  .sh linux
• usr/bin/zdiff

  .sh .vbs linux polyglot
• usr/bin/zegrep

  .sh linux
• usr/bin/zfgrep

  .sh linux
• usr/bin/zforce

  .sh linux
• usr/bin/zgrep

  .sh linux
• usr/bin/zless

  .sh linux
• usr/bin/zmore

  .sh linux
• usr/bin/znew

  .sh .vbs linux polyglot
• usr/share/info/gzip.info

  .vbs
• usr/share/man/man1/gunzip.1.gz

  .gz
• gunzip.1
• usr/share/man/man1/gzexe.1.gz

  .gz
• usr/share/man/man1/gzip.1.gz

  .gz
• usr/share/man/man1/zcat.1.gz

  .gz
• usr/share/man/man1/zcmp.1.gz

  .gz
• usr/share/man/man1/zdiff.1.gz

  .gz
• usr/share/man/man1/zforce.1.gz

  .gz
• usr/share/man/man1/zgrep.1.gz

  .gz
• usr/share/man/man1/zless.1.gz

  .gz
• usr/share/man/man1/zmore.1.gz

  .gz
• usr/share/man/man1/znew.1.gz

  .gz
• isr-evilgrade/agent/nokiafirmware.c0r
• isr-evilgrade/agent/osx/._istatmenus_upgrade_3.01.zip
• isr-evilgrade/agent/osx/istatmenus_upgrade_3.01.zip

  .zip
• isr-evilgrade/agent/osx/update.dmg

  .dmg .bz2 macos polyglot
• isr-evilgrade/certs/my-ca.pem
• isr-evilgrade/certs/server-cert.pem
• isr-evilgrade/certs/server-key.enc
• isr-evilgrade/certs/server-key.pem
• isr-evilgrade/certs/server-rsa384-dh.pem
• isr-evilgrade/certs/server-wildcard.pem
• isr-evilgrade/certs/test-ca.pem
• isr-evilgrade/certs/www.autoitscript.com-cert.pem
• isr-evilgrade/certs/www.autoitscript.com-key.pem
• isr-evilgrade/docs/AUTHOR
• isr-evilgrade/docs/CHANGES
• isr-evilgrade/docs/CONTRIBUTORS
• isr-evilgrade/docs/FILES
• isr-evilgrade/docs/LICENSE
• isr-evilgrade/docs/README
• isr-evilgrade/evilgrade

  .sh linux
• isr-evilgrade/extra/gen-self-cert-signed-with-ca.sh

  .sh linux
• isr-evilgrade/extra/gen-self-cert.sh
• isr-evilgrade/extra/info
• isr-evilgrade/extra/list.txt
• isr-evilgrade/extra/makelist.pl
• isr-evilgrade/include/allmynotes/version

  .html
• isr-evilgrade/include/appleupdate/061-4339.Spanish.dist

  .xml
• isr-evilgrade/include/appleupdate/061-5117.Spanish.dist

  .js .xml polyglot
• isr-evilgrade/include/appleupdate/appleupdate_catalog.xml

  .xml
• isr-evilgrade/include/appleupdate/back.061-4339.Spanish.dist

  .js .xml polyglot
• isr-evilgrade/include/appleupdate/check/index-windows-1.sucatalog

  .xml
• isr-evilgrade/include/apptapp/1.png

  .png
• isr-evilgrade/include/apptapp/Installer.app/Info.plist

  .xml
• isr-evilgrade/include/apptapp/Installer.app/Installer
• isr-evilgrade/include/apptapp/apptapp.png

  .png
• isr-evilgrade/include/apptapp/backok_repo.xml

  .xml
• isr-evilgrade/include/apptapp/backup.xml

  .xml
• isr-evilgrade/include/apptapp/feature.html
• isr-evilgrade/include/apptapp/new.png

  .png
• isr-evilgrade/include/apptapp/repo.xml

  .xml
• isr-evilgrade/include/apptapp/trusted.plist

  .xml
• isr-evilgrade/include/atube/ytc.php
• isr-evilgrade/include/autoit3/autoitscript.dat
• isr-evilgrade/include/bbappworld/back.click_aplicacion
• isr-evilgrade/include/bbappworld/back.featured
• isr-evilgrade/include/bbappworld/back.images
• isr-evilgrade/include/bbappworld/back2.featured
• isr-evilgrade/include/bbappworld/category
• isr-evilgrade/include/bbappworld/click_aplicacion
• isr-evilgrade/include/bbappworld/click_installapp1
• isr-evilgrade/include/bbappworld/download_archivo1
• isr-evilgrade/include/bbappworld/download_post
• isr-evilgrade/include/bbappworld/download_resp
• isr-evilgrade/include/bbappworld/featured
• isr-evilgrade/include/bbappworld/images
• isr-evilgrade/include/bbappworld/req1
• isr-evilgrade/include/blackberry/facebook.update
• isr-evilgrade/include/blackberry/twitter.update
• isr-evilgrade/include/cpan/01mailrc.txt.gz

  .gz
• isr-evilgrade/include/cpan/02packages.details.txt.gz

  .gz
• isr-evilgrade/include/cpan/03modlist.data.gz

  .gz
• isr-evilgrade/include/cpan/CHECKSUMS
• isr-evilgrade/include/cpan/back.02packages.details.txt.gz

  .gz
• isr-evilgrade/include/cpan/gencpan.pl
• isr-evilgrade/include/cpan/readme.txt
• isr-evilgrade/include/cygwin/cygwin_setup.ini
• isr-evilgrade/include/dap/dap_update.dll
• isr-evilgrade/include/debian/Packages.bz2

  .bz2
• isr-evilgrade/include/debian/Release.gpg
• isr-evilgrade/include/debian/Sources.bz2

  .bz2
• isr-evilgrade/include/debian/Translation.bz2

  .bz2
• isr-evilgrade/include/debian/inject_agent_packages.sh

  .sh linux
• isr-evilgrade/include/divxsuite/divxsuite-update.xml

  .xml
• isr-evilgrade/include/fcleaner/update.txt
• isr-evilgrade/include/flashget/._flashget_fgupdate.ini
• isr-evilgrade/include/flashget/flashget_fgupdate.ini
• isr-evilgrade/include/flip4mac/manifiest.txt

  .xml
• isr-evilgrade/include/flip4mac/manifiest.xml

  .xml
• isr-evilgrade/include/freerip/dev
• isr-evilgrade/include/getjar/GoogleSearch_v2.1.12_getjar.sisx
• isr-evilgrade/include/getjar/file.zip

  .gz
• isr-evilgrade/include/getjar/j2me.jad
• isr-evilgrade/include/getjar/j2me.jar

  .jad
• isr-evilgrade/include/gom/gom.ini
• isr-evilgrade/include/google/ga.js

  .js
• isr-evilgrade/include/growl/version.xml

  .xml
• isr-evilgrade/include/ishield/update.xml
• isr-evilgrade/include/isopen/version
• isr-evilgrade/include/itunes/itunes_version.xml

  .xml
• isr-evilgrade/include/jet/update_info.asp

  .html
• isr-evilgrade/include/jetphoto/back.version

  .html
• isr-evilgrade/include/jetphoto/version

  .html
• isr-evilgrade/include/linkedin/linkedin_web.dat
• isr-evilgrade/include/mirc/update.html

  .html
• isr-evilgrade/include/nokia/catalog

  .xml
• isr-evilgrade/include/nokia/install.sis
• isr-evilgrade/include/nokia/j2me.jad
• isr-evilgrade/include/nokia/j2me.jar

  .jad
• isr-evilgrade/include/nokia/ovi.ico
• isr-evilgrade/include/nokia/ovi.png

  .png
• isr-evilgrade/include/nokia/req1

  .xml
• isr-evilgrade/include/nokia/style.css
• isr-evilgrade/include/nokia/update.html

  .html
• isr-evilgrade/include/opera/opera_update.xml

  .xml
• isr-evilgrade/include/osx/osx_agent.xml

  .xml
• isr-evilgrade/include/osx/osx_catalog.xml

  .xml
• isr-evilgrade/include/paintnet/version
• isr-evilgrade/include/photoscape/update.php
• isr-evilgrade/include/quicktime/update.txt
• isr-evilgrade/include/sparkle/update.xml

  .xml
• isr-evilgrade/include/speedbit/speedbit_update.xml
• isr-evilgrade/include/sunjava/JavaPayload/._use.txt
• isr-evilgrade/include/sunjava/JavaPayload/FunnyClass2.jar

  .jar
• isr-evilgrade/include/sunjava/JavaPayload/FunnyClass2/FunnyClass2.class
• isr-evilgrade/include/sunjava/JavaPayload/FunnyClass2/FunnyClass2.jar

  .jar
• isr-evilgrade/include/sunjava/JavaPayload/FunnyClass2/META-INF/MANIFEST.MF
• isr-evilgrade/include/sunjava/JavaPayload/JavaPayload.jar

  .jar
• isr-evilgrade/include/sunjava/JavaPayload/build.xml

  .xml
• isr-evilgrade/include/sunjava/JavaPayload/lib/asm-3.2.jar

  .jar
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/builder/AgentJarBuilder.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/builder/AppletJarBuilder.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/builder/AttachInjector.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/builder/BeanShellMacroBuilder.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/builder/CVE_2008_5353_AppletJarBuilder.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/builder/ClassBuilder.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/builder/EmbeddedClassBuilder.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/builder/EmbeddedJarBuilder.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/builder/JDWPClassInjector.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/builder/JDWPInjector.java

  .java .js
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/builder/JarBuilder.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/handler/stage/Exec.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/handler/stage/JSh.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/handler/stage/Shell.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/handler/stage/StageHandler.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/handler/stage/SystemInfo.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/handler/stage/UpExec.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/handler/stager/BindTCP.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/handler/stager/JDWPTunnel.java

  .java .js
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/handler/stager/ListeningStagerHandler.java

  .java .js
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/handler/stager/LocalTest.java

  .java .js
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/handler/stager/MultiListen.java

  .java .js
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/handler/stager/ReverseSSL.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/handler/stager/ReverseTCP.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/handler/stager/StagerHandler.java

  .java .js
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/handler/stager/WrappedPipedOutputStream.java

  .java .js
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/handler/stager/keystore.jks
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/loader/AgentJarLoader.java

  .java .js
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/loader/AppletLoader.java

  .java .js
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/loader/CVE_2008_5353.java

  .java .js
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/loader/EmbeddedJarLoader.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/loader/JDWPCommunication.java

  .java .js
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/loader/JDWPLoader.java

  .java .js
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/loader/StandaloneLoader.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/stage/Exec.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/stage/JSh.java

  .java .js
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/stage/JShSignalSender.java

  .java .js
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/stage/JShStreamForwarder.java

  .java .js
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/stage/Shell.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/stage/Stage.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/stage/StreamForwarder.java

  .java .js
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/stage/SystemInfo.java

  .java .js
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/stage/UpExec.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/stager/BindMultiTCP.java

  .java .js
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/stager/BindTCP.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/stager/JDWPTunnel.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/stager/LocalTest.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/stager/ReverseSSL.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/stager/ReverseTCP.java
• isr-evilgrade/include/sunjava/JavaPayload/src/javapayload/stager/Stager.java

  .java .js
• isr-evilgrade/include/sunjava/JavaPayload/tmp
• isr-evilgrade/include/sunjava/JavaPayload/use.txt
• isr-evilgrade/include/sunjava/JavaUpdate.jar

  .jar
• isr-evilgrade/include/sunjava/ReverseSSL.jar

  .jar
• isr-evilgrade/include/sunjava/sunjava_map.xml

  .xml
• isr-evilgrade/include/sunjava/sunjava_update.xml

  .xml
• isr-evilgrade/include/sunjava/sunjava_update_seven.xml

  .xml
• isr-evilgrade/include/sunjava/x.jnlp

  .jnlp .xml polyglot
• isr-evilgrade/include/superantispyware/._superantispyware.xml
• isr-evilgrade/include/superantispyware/superantispyware.xml
• isr-evilgrade/include/trillian/alerts.php
• isr-evilgrade/include/ubertwitter/back.update1
• isr-evilgrade/include/ubertwitter/savelocation
• isr-evilgrade/include/ubertwitter/update
• isr-evilgrade/include/ubertwitter/update1
• isr-evilgrade/include/ubertwitter/update2
• isr-evilgrade/include/winamp/latest-version.php
• isr-evilgrade/include/winamp/notice.php

  .html .js polyglot
• isr-evilgrade/include/wmedia/control.xml
• isr-evilgrade/include/wupdate/file.txt
• isr-evilgrade/include/wupdate/inc/commontop.js

  .js
• isr-evilgrade/include/wupdate/inc/footer.htm

  .js
• isr-evilgrade/include/wupdate/inc/footer_archivos/css.css
• isr-evilgrade/include/wupdate/inc/footer_archivos/v6.htm

  .js
• isr-evilgrade/include/wupdate/inc/mstoolbar.htm

  .js
• isr-evilgrade/include/wupdate/inc/mstoolbar_archivos/css.css
• isr-evilgrade/include/wupdate/inc/mstoolbar_archivos/ms_masthead_ltr.gif

  .gif
• isr-evilgrade/include/wupdate/inc/mstoolbar_archivos/subbanner.jpg

  .jpg
• isr-evilgrade/include/wupdate/inc/mstoolbar_archivos/v6.htm

  .js
• isr-evilgrade/include/wupdate/inc/redirect.js

  .js
• isr-evilgrade/include/wupdate/inc/resultslist.js

  .js
• isr-evilgrade/include/wupdate/inc/splash.htm

  .html .js polyglot
• isr-evilgrade/include/wupdate/inc/splash_archivos/content.css
• isr-evilgrade/include/wupdate/inc/splash_archivos/content.js

  .js
• isr-evilgrade/include/wupdate/inc/splash_archivos/hcp.css
• isr-evilgrade/include/wupdate/inc/splash_archivos/icon.plus.gif

  .gif
• isr-evilgrade/include/wupdate/inc/splash_archivos/tgar.js

  .js
• isr-evilgrade/include/wupdate/inc/splash_archivos/trans_pixel.gif

  .html
• isr-evilgrade/include/wupdate/inc/splash_archivos/trans_pixel_archivos/trans_pixel.gif

  .gif
• isr-evilgrade/include/wupdate/inc/splash_archivos/update_webtrends.js

  .js
• isr-evilgrade/include/wupdate/inc/spupdateids.js

  .js
• isr-evilgrade/include/wupdate/inc/tgar.js

  .js
• isr-evilgrade/include/wupdate/inc/toc.htm

  .js
• isr-evilgrade/include/wupdate/inc/toc_archivos/arrow.gif

  .gif
• isr-evilgrade/include/wupdate/inc/toc_archivos/hcp.css
• isr-evilgrade/include/wupdate/inc/toc_archivos/tgar.js

  .js
• isr-evilgrade/include/wupdate/inc/toc_archivos/toc.css
• isr-evilgrade/include/wupdate/inc/toc_archivos/toc.js

  .js
• isr-evilgrade/include/wupdate/inc/toc_archivos/update_webtrends.js

  .js
• isr-evilgrade/include/wupdate/inc/trans_pixel.gif

  .html
• isr-evilgrade/include/wupdate/inc/webcomtop.js

  .js
• isr-evilgrade/include/wupdate/init.html

  .js
• isr-evilgrade/isrcore/ASCIITable.pm
• isr-evilgrade/isrcore/ASCIITable/Wrap.pm
• isr-evilgrade/isrcore/Shell.pm

  .ps1
• isr-evilgrade/isrcore/Stanford/DNS.pm
• isr-evilgrade/isrcore/Stanford/DNSserver.pm
• isr-evilgrade/isrcore/Time/HiRes.pm
• isr-evilgrade/isrcore/dnsserver.pm
• isr-evilgrade/isrcore/main.pm
• isr-evilgrade/isrcore/shellz.pm
• isr-evilgrade/isrcore/utils.pm
• isr-evilgrade/isrcore/webserver.pm
• isr-evilgrade/modules/allmynotes.pm
• isr-evilgrade/modules/amsn.pm
• isr-evilgrade/modules/appleupdate.pm
• isr-evilgrade/modules/apptapp.pm
• isr-evilgrade/modules/apt.pm
• isr-evilgrade/modules/atube.pm
• isr-evilgrade/modules/autoit3.pm
• isr-evilgrade/modules/bbappworld.pm
• isr-evilgrade/modules/blackberry.pm
• isr-evilgrade/modules/bsplayer.pm
• isr-evilgrade/modules/ccleaner.pm
• isr-evilgrade/modules/clamwin.pm
• isr-evilgrade/modules/cpan.pm
• isr-evilgrade/modules/cygwin.pm
• isr-evilgrade/modules/dap.pm
• isr-evilgrade/modules/divxsuite.pm
• isr-evilgrade/modules/express_talk.pm
• isr-evilgrade/modules/fcleaner.pm
• isr-evilgrade/modules/filezilla.pm
• isr-evilgrade/modules/flashget.pm
• isr-evilgrade/modules/flip4mac.pm
• isr-evilgrade/modules/freerip.pm
• isr-evilgrade/modules/getjar.pm
• isr-evilgrade/modules/gom.pm
• isr-evilgrade/modules/googleanalytics.pm
• isr-evilgrade/modules/growl.pm
• isr-evilgrade/modules/isopen.pm
• isr-evilgrade/modules/istat.pm
• isr-evilgrade/modules/itunes.pm
• isr-evilgrade/modules/jet.pm
• isr-evilgrade/modules/jetphoto.pm
• isr-evilgrade/modules/linkedin.pm
• isr-evilgrade/modules/miranda.pm
• isr-evilgrade/modules/mirc.pm
• isr-evilgrade/modules/nokia.pm
• isr-evilgrade/modules/nokiasoftware.pm
• isr-evilgrade/modules/notepadplus.pm
• isr-evilgrade/modules/openoffice.pm
• isr-evilgrade/modules/opera.pm
• isr-evilgrade/modules/orbit.pm
• isr-evilgrade/modules/osx.pm
• isr-evilgrade/modules/paintnet.pm
• isr-evilgrade/modules/panda_antirootkit.pm
• isr-evilgrade/modules/photoscape.pm
• isr-evilgrade/modules/quicktime.pm
• isr-evilgrade/modules/skype.pm
• isr-evilgrade/modules/sparkle.pm
• isr-evilgrade/modules/speedbit.pm
• isr-evilgrade/modules/sunbelt.pm
• isr-evilgrade/modules/sunjava.pm
• isr-evilgrade/modules/superantispyware.pm
• isr-evilgrade/modules/teamviewer.pm
• isr-evilgrade/modules/techtracker.pm
• isr-evilgrade/modules/trillian.pm
• isr-evilgrade/modules/ubertwitter.pm
• isr-evilgrade/modules/vidbox.pm
• isr-evilgrade/modules/virtualbox.pm
• isr-evilgrade/modules/vmware.pm
• isr-evilgrade/modules/winamp.pm
• isr-evilgrade/modules/winscp.pm
• isr-evilgrade/modules/winupdate.pm
• isr-evilgrade/modules/winzip.pm
• isr-evilgrade/modules/yahoomsn.pm