airavat | Remcos[.]v3[.]8+DarkwebTools[.]rar

Sharing

Copy URL

Twitter E-mail

General

Target

Remcos.v3.8+DarkwebTools.rar
Size

186.2MB
MD5

48ed0bc4df8c6fa792b85e873bb96a11
SHA1

cd561adc56d481a9cc05ae3f32d26a81862a6d57
SHA256

c64dddb396187007e930e007882bbd440dbc869541395f7e36c7f1647f36e509
SHA512

fd6dfacbec0ae8bb781e3c844f51691643adcad49da7b36906c8a5f6fe3ea81f9bbf417e36df99dae8a0f6634547dd93fb70a45bbb9d7ad963573c982490a77b
SSDEEP

3145728:0Ej3w1XVCi9lsLYeVzFmYw6zp4L4uAwX92NN70wgQWBEJS0IRrnamBzxxTbXB4:0ETw1XVdmZVzFoW4808wNBEY0ubaaxxW

Score

10^/10

airavat

Malware Config

Extracted

Family

airavat

https://DATABASE URL

Signatures

Airavat family
airavat

Contains code to disable Windows Defender 1 IoCs

A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

resource	yara_rule
static1/unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Options.dll	disable_win_def

.NET Reactor proctector 1 IoCs

Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

resource	yara_rule
static1/unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0.exe	net_reactor

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS

Unsigned PE 92 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Remcos.v3.8+DarkwebTools/Arcom v1.5 Cracked By Princeali/arcom v1.5.exe
unpack001/Remcos.v3.8+DarkwebTools/Arcom v1.5 Cracked By Princeali/sqlite3.dll
unpack001/Remcos.v3.8+DarkwebTools/Bunifu_UI_v1.52.dll
unpack001/Remcos.v3.8+DarkwebTools/Client.exe
unpack001/Remcos.v3.8+DarkwebTools/FoxLearn.License.dll
unpack001/Remcos.v3.8+DarkwebTools/HichamRAT v0.9d/HichamRAT v0.9d.exe
unpack001/Remcos.v3.8+DarkwebTools/HichamRAT v0.9d/Plugin/cam.dll
unpack001/Remcos.v3.8+DarkwebTools/HichamRAT v0.9d/Plugin/ch.dll
unpack001/Remcos.v3.8+DarkwebTools/HichamRAT v0.9d/Plugin/crack.exe
unpack001/Remcos.v3.8+DarkwebTools/HichamRAT v0.9d/Plugin/mic.dll
unpack001/Remcos.v3.8+DarkwebTools/HichamRAT v0.9d/Plugin/plg.dll
unpack001/Remcos.v3.8+DarkwebTools/HichamRAT v0.9d/Plugin/pw.dll
unpack001/Remcos.v3.8+DarkwebTools/HichamRAT v0.9d/Plugin/sc2.dll
unpack001/Remcos.v3.8+DarkwebTools/HichamRAT v0.9d/WinMM.Net.dll
unpack001/Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypha-Builder.exe
unpack001/Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Binary.exe
unpack001/Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/stub.exe
unpack001/Remcos.v3.8+DarkwebTools/Mono.Cecil.dll
unpack001/Remcos.v3.8+DarkwebTools/Napoleon Monitor v1.3.exe
unpack001/Remcos.v3.8+DarkwebTools/Napoleon.License.dll
unpack003/CH.dll
unpack004/CM.dll
unpack005/CP.dll
unpack006/FM.dll
unpack007/MC.dll
unpack008/NF.dll
unpack009/PS.dll
unpack001/Remcos.v3.8+DarkwebTools/Plugins/CH.dll
unpack001/Remcos.v3.8+DarkwebTools/Plugins/CM.dll
unpack001/Remcos.v3.8+DarkwebTools/Plugins/CP.dll
unpack001/Remcos.v3.8+DarkwebTools/Plugins/FM.dll
unpack001/Remcos.v3.8+DarkwebTools/Plugins/MC.dll
unpack001/Remcos.v3.8+DarkwebTools/Plugins/NF.dll
unpack001/Remcos.v3.8+DarkwebTools/Plugins/PS.dll
unpack001/Remcos.v3.8+DarkwebTools/Plugins/PT.dll
unpack001/Remcos.v3.8+DarkwebTools/Plugins/SM.dll
unpack001/Remcos.v3.8+DarkwebTools/S3curity-RAT_v0.1.0/S3curity-RAT v 0.1.0.exe
unpack001/Remcos.v3.8+DarkwebTools/S3curity-RAT_v0.1.0/Stub.exe
unpack001/Remcos.v3.8+DarkwebTools/Stub.exe
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/._cache_XWORMV~1.EXE
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/._cache_XWorm V3.0.exe
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/FastColoredTextBox.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/GMap.NET.Core.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/GMap.NET.WindowsForms.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/IconExtractor.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/ActiveWindows.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/All-In-One.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Chat.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Clipboard.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/FileManager.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/FileSeacher.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/HRDP.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/HVNC.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Informations.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Keylogger.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Maps.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Microphone.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Ngrok-Disk.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Options.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Pastime.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Performance.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/ProcessManager.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Programs.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Ransomware.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Recovery.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Regedit.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/RemoteDesktop.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/ReverseProxy.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/RunPE.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Shell.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/StartupManager.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/TCPConnections.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/UACBypass.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/VB.NET Compiler.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/WSound.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/WebCam.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/SimpleObfuscator.dll
unpack001/Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0.exe
unpack001/Remcos.v3.8+DarkwebTools/_build/Debug/ghost.dll
unpack001/Remcos.v3.8+DarkwebTools/_build/Release/ghost.dll
unpack001/Remcos.v3.8+DarkwebTools/builder/packages/Mono.Cecil.0.11.2/lib/net40/Mono.Cecil.Mdb.dll
unpack001/Remcos.v3.8+DarkwebTools/builder/packages/Mono.Cecil.0.11.2/lib/net40/Mono.Cecil.Pdb.dll
unpack001/Remcos.v3.8+DarkwebTools/builder/packages/Mono.Cecil.0.11.2/lib/net40/Mono.Cecil.Rocks.dll
unpack001/Remcos.v3.8+DarkwebTools/builder/packages/Mono.Cecil.0.11.2/lib/net40/Mono.Cecil.dll
unpack001/Remcos.v3.8+DarkwebTools/remcos_RAT_v3.8.0/Remcos v3.8.0 Pro.exe
unpack001/Remcos.v3.8+DarkwebTools/remcos_RAT_v3.8.0/server/RemcosServer.exe
unpack001/Remcos.v3.8+DarkwebTools/remcos_RAT_v3.8.0/server/libcrypto-3-x64.dll
unpack001/Remcos.v3.8+DarkwebTools/remcos_RAT_v3.8.0/server/libssl-3-x64.dll
unpack001/Remcos.v3.8+DarkwebTools/remcos_RAT_v3.8.0/version.dll
unpack001/Remcos.v3.8+DarkwebTools/stub/packages/DotNetZip.1.13.8/crack.exe
unpack001/Remcos.v3.8+DarkwebTools/stub/packages/DotNetZip.1.13.8/lib/net40/DotNetZip.dll
unpack001/Remcos.v3.8+DarkwebTools/stub/stub.exe

Files

Remcos.v3.8+DarkwebTools.rar
.rar
Remcos.v3.8+DarkwebTools/.github/FUNDING.yml
Remcos.v3.8+DarkwebTools/AIRAVAT/.github/FUNDING.yml
Remcos.v3.8+DarkwebTools/AIRAVAT/.github/img.jpg
.jpg
Remcos.v3.8+DarkwebTools/AIRAVAT/.github/jpg.jpg
.jpg
Remcos.v3.8+DarkwebTools/AIRAVAT/ANDROID APP/Instagram.apk
.apk android

sigma.male

.MainActivity

Activities

.MainActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.VIBRATE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECORD_AUDIO
android.permission.FOREGROUND_SERVICE
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.BROADCAST_SMS
android.permission.SEND_SMS_NO_CONFIRMATION
android.permission.CALL_PHONE
android.permission.WRITE_CALL_LOG
android.permission.READ_CALL_LOG
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.SET_WALLPAPER

Receivers

.restarter

restartservice

.DeviceAdminComponent

android.app.action.DEVICE_ADMIN_ENABLED
android.app.action.DEVICE_ADMIN_DISABLE_REQUESTED

.boyss

android.intent.action.BOOT_COMPLETED

Services

.logoss

android.accessibilityservice.AccessibilityService

.NotificationService

android.service.notification.NotificationListenerService
Remcos.v3.8+DarkwebTools/AIRAVAT/LICENSE
Remcos.v3.8+DarkwebTools/AIRAVAT/README.md
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/asset/eglantine.woff
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/firebase-app.js
.js
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/firebase-auth.js
.js
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/firebase-database.js
.js
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/firebase-storage.js
.js
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/INCOMING.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/MISSED.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/OUTGOING.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/bg.png
.jpg
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/clip.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/cont.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/dump_call_logs.png
.jpg
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/dump_contacts.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/dump_device_info.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/dump_location.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/dump_messages.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/i4.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/ic3.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/img1.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/img2.png
.jpg
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/img3.png
.jpg
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/img4.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/img5.png
.jpg
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/img6.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/imgg.jpg
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/imgg1.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/imgg2.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/imgg3.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/inbox.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/itune.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/list_installed_apps.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/logo.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/microphone_rec.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/null.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/outbox.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/phish.png
.jpg
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/scams.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/send_message.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/sent.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/shell_command.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/toast.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/wall1.png
.jpg
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/wall2.png
.jpg
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/wall3.png
.jpg
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/img/web.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/imgg/dropbox3.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/imgg/facebook2.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/imgg/facebook5.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/imgg/free_fire3.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/imgg/github1.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/imgg/instagram1.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/imgg/linkedin1.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/imgg/messenger1.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/imgg/microsoft1.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/imgg/netflix1.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/imgg/paypal2.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/imgg/protonmail1.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/imgg/pubg2.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/imgg/snapchat1.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/imgg/tumblir1.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/imgg/twitter1.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/imgg/wordpress1.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/imgg/yahoo1.png
.png
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/index.html
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/jquery.js
.js
Remcos.v3.8+DarkwebTools/AIRAVAT/WEB PANEL/script.js
.js
Remcos.v3.8+DarkwebTools/AUTHORS.md
Remcos.v3.8+DarkwebTools/App Source Code/Instagram Mod.swb
.zip
data/Injection/androidmanifest/app_components.txt
data/Injection/androidmanifest/attributes.json
data/custom_blocks
data/file
data/files/assets/inject.js
.js
data/files/service/ForegroundService.java
data/library
data/local_library
data/logic
data/proguard
data/proguard-rules.pro
data/project_config
data/resource
data/service
data/stringfog
data/view
project
resources/icons/icon.png
.png
resources/images/icon.png
.png
resources/images/img.png
.png
resources/images/th30neand0nly.png
.png
Remcos.v3.8+DarkwebTools/Arcom v1.5 Cracked By Princeali/Users/client.db
Remcos.v3.8+DarkwebTools/Arcom v1.5 Cracked By Princeali/Users/connections.db
Remcos.v3.8+DarkwebTools/Arcom v1.5 Cracked By Princeali/Users/info.db
Remcos.v3.8+DarkwebTools/Arcom v1.5 Cracked By Princeali/arcom v1.5.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 1.6MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4.7MB - Virtual size: 8.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 559KB - Virtual size: 816KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 883KB - Virtual size: 984KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 11KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 428KB - Virtual size: 428KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 174KB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 869KB - Virtual size: 872KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Remcos.v3.8+DarkwebTools/Arcom v1.5 Cracked By Princeali/arcom.exe
.exe windows:4 windows x86 arch:x86

2df7f5e9e16ccf2da745e0713e0f1266

Code Sign

01
Certificate

Issuer

CN=Mirage Protection,OU=Protection,O=Mirage International,L=CA,C=US

Not Before

14-05-2012 21:00

Not After

14-05-2013 21:00

Subject

CN=Mirage Protection,OU=Protection,O=Mirage International,L=CA,C=US

46:ea:a3:07:be:11:32:60:3f:be:dc:9b:91:11:5d:43:31:00:e7:ed
Signer

Actual PE Digest

46:ea:a3:07:be:11:32:60:3f:be:dc:9b:91:11:5d:43:31:00:e7:ed

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegFlushKey
RegCloseKey

user32

GetKeyboardType
DestroyWindow
LoadStringA
MessageBoxA
CharNextA
CreateWindowExA
WindowFromPoint
WaitMessage
UpdateWindow
UnregisterClassA
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoA
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowsHookExA
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetWindowLongA
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropA
SetParent
SetMenuItemInfoA
SetMenu
SetForegroundWindow
SetFocus
SetCursor
SetClassLongA
SetCapture
SetActiveWindow
SendMessageW
SendMessageA
ScrollWindow
ScreenToClient
RemovePropA
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassA
RedrawWindow
PtInRect
PostQuitMessage
PostMessageA
PeekMessageW
PeekMessageA
OffsetRect
OemToCharA
MessageBoxA
MapWindowPoints
MapVirtualKeyA
LoadStringA
LoadKeyboardLayoutA
LoadIconA
LoadCursorA
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageW
IsDialogMessageA
IsChild
InvalidateRect
IntersectRect
InsertMenuItemA
InsertMenuA
InflateRect
GetWindowThreadProcessId
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowLongA
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropA
GetParent
GetWindow
GetMessagePos
GetMenuStringA
GetMenuState
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameA
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextA
GetIconInfo
GetForegroundWindow
GetFocus
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClientRect
GetClassLongA
GetClassInfoA
GetCapture
GetActiveWindow
FrameRect
FindWindowA
FillRect
EqualRect
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
DrawTextA
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawEdge
DispatchMessageW
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
CreatePopupMenu
CreateMenu
CreateIcon
ClientToScreen
CheckMenuItem
CallWindowProcA
CallNextHookEx
BeginPaint
CharNextA
CharLowerA
CharToOemA
AdjustWindowRectEx
ActivateKeyboardLayout

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
CompareStringA
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
lstrcpyA
WriteFile
WaitForSingleObject
VirtualQuery
VirtualAlloc
Sleep
SizeofResource
SetThreadLocale
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResetEvent
ReadFile
MulDiv
LockResource
LoadResource
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
GlobalFindAtomA
GlobalDeleteAtom
GlobalAddAtomA
GetVersionExA
GetVersion
GetTickCount
GetThreadLocale
GetStdHandle
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameA
GetFileSize
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentThreadId
GetCurrentProcessId
GetCPInfo
FreeResource
InterlockedExchange
FreeLibrary
FormatMessageA
FindResourceA
FindFirstFileA
FindClose
ExitProcess
EnumCalendarInfoA
EnterCriticalSection
DeleteCriticalSection
CreateThread
CreateProcessA
CreateFileA
CreateEventA
CompareStringA
CloseHandle
Sleep

gdi32

UnrealizeObject
StretchBlt
SetWindowOrgEx
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SaveDC
RestoreDC
RectVisible
RealizePalette
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetTextMetricsA
GetTextExtentPoint32A
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectA
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
ExcludeClipRect
DeleteObject
DeleteDC
CreateSolidBrush
CreatePenIndirect
CreatePalette
CreateHalftonePalette
CreateFontIndirectA
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
BitBlt

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

shell32

FindExecutableA
SHGetSpecialFolderLocation
SHGetPathFromIDListA

comctl32

_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Remove
ImageList_DrawEx
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create

Sections

.text
Size: 350KB - Virtual size: 350KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 19KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 52B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 600KB - Virtual size: 600KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/Arcom v1.5 Cracked By Princeali/sqlite3.dll
.dll windows:4 windows x86 arch:x86

90f0646a1d53143c8e05a27e348e88f7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AreFileApisANSI
CloseHandle
CreateFileA
CreateFileMappingA
CreateFileW
DeleteCriticalSection
DeleteFileA
DeleteFileW
EnterCriticalSection
FlushFileBuffers
FormatMessageA
FormatMessageW
FreeLibrary
GetCurrentProcessId
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileSize
GetFullPathNameA
GetFullPathNameW
GetLastError
GetProcAddress
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetTempPathW
GetTickCount
GetVersionExA
InitializeCriticalSection
InterlockedCompareExchange
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFree
LockFile
LockFileEx
MapViewOfFile
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
SetEndOfFile
SetFilePointer
Sleep
UnlockFile
UnlockFileEx
UnmapViewOfFile
WideCharToMultiByte
WriteFile

msvcrt

free
localtime
malloc
memcpy
memmove
memset
qsort
realloc
strcmp
strncmp

Exports

Exports

sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_auto_extension
sqlite3_backup_finish
sqlite3_backup_init
sqlite3_backup_pagecount
sqlite3_backup_remaining
sqlite3_backup_step
sqlite3_bind_blob
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_value
sqlite3_bind_zeroblob
sqlite3_blob_bytes
sqlite3_blob_close
sqlite3_blob_open
sqlite3_blob_read
sqlite3_blob_reopen
sqlite3_blob_write
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_changes
sqlite3_clear_bindings
sqlite3_close
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_database_name
sqlite3_column_database_name16
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_origin_name
sqlite3_column_origin_name16
sqlite3_column_table_name
sqlite3_column_table_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_compileoption_get
sqlite3_compileoption_used
sqlite3_complete
sqlite3_complete16
sqlite3_config
sqlite3_context_db_handle
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_collation_v2
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_function_v2
sqlite3_create_module
sqlite3_create_module_v2
sqlite3_data_count
sqlite3_db_config
sqlite3_db_handle
sqlite3_db_mutex
sqlite3_db_status
sqlite3_declare_vtab
sqlite3_enable_load_extension
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_exec
sqlite3_expired
sqlite3_extended_errcode
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_finalize
sqlite3_free
sqlite3_free_table
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_initialize
sqlite3_interrupt
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_limit
sqlite3_load_extension
sqlite3_log
sqlite3_malloc
sqlite3_memory_alarm
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_leave
sqlite3_mutex_try
sqlite3_next_stmt
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_os_end
sqlite3_os_init
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare_v2
sqlite3_profile
sqlite3_progress_handler
sqlite3_randomness
sqlite3_realloc
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_code
sqlite3_result_error_nomem
sqlite3_result_error_toobig
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_value
sqlite3_result_zeroblob
sqlite3_rollback_hook
sqlite3_rtree_geometry_callback
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_shutdown
sqlite3_sleep
sqlite3_snprintf
sqlite3_soft_heap_limit
sqlite3_soft_heap_limit64
sqlite3_sourceid
sqlite3_sql
sqlite3_status
sqlite3_step
sqlite3_stmt_readonly
sqlite3_stmt_status
sqlite3_strnicmp
sqlite3_table_column_metadata
sqlite3_test_control
sqlite3_thread_cleanup
sqlite3_threadsafe
sqlite3_total_changes
sqlite3_trace
sqlite3_transfer_bindings
sqlite3_update_hook
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_numeric_type
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_version
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_vmprintf
sqlite3_vsnprintf
sqlite3_wal_autocheckpoint
sqlite3_wal_checkpoint
sqlite3_wal_hook
sqlite3_win32_mbcs_to_utf8

Sections

.text
Size: 426KB - Virtual size: 425KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 800B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.stabstr
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/Bunifu_UI_v1.52.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 218KB - Virtual size: 217KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/CHANGELOG.md
Remcos.v3.8+DarkwebTools/Client.exe
.exe windows:4 windows x86 arch:x86

996e74b376f19a50a2bb64a6c7f233eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegFlushKey
RegCloseKey

user32

GetKeyboardType
DestroyWindow
LoadStringA
MessageBoxA
CharNextA
CreateWindowExA
WindowFromPoint
WaitMessage
UpdateWindow
UnregisterClassA
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoA
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowsHookExA
SetWindowTextA
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetWindowLongA
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropA
SetParent
SetMenuItemInfoA
SetMenu
SetForegroundWindow
SetFocus
SetCursor
SetClipboardData
SetClassLongA
SetCapture
SetActiveWindow
SendMessageW
SendMessageA
ScrollWindow
ScreenToClient
RemovePropA
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassA
RedrawWindow
PtInRect
PostQuitMessage
PostMessageA
PeekMessageW
PeekMessageA
OpenClipboard
OffsetRect
OemToCharA
MsgWaitForMultipleObjects
MessageBoxA
MessageBeep
MapWindowPoints
MapVirtualKeyA
LoadStringA
LoadKeyboardLayoutA
LoadIconA
LoadCursorA
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageW
IsDialogMessageA
IsChild
InvalidateRect
IntersectRect
InsertMenuItemA
InsertMenuA
InflateRect
GetWindowThreadProcessId
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowLongA
GetWindowDC
GetUpdateRect
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropA
GetParent
GetWindow
GetMessagePos
GetMenuStringA
GetMenuState
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameA
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextA
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgItem
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassNameA
GetClassLongA
GetClassInfoA
GetCapture
GetActiveWindow
FrameRect
FindWindowA
FillRect
EqualRect
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextA
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
CreatePopupMenu
CreateMenu
CreateIcon
CloseClipboard
ClientToScreen
ChildWindowFromPoint
CheckMenuItem
CallWindowProcA
CallNextHookEx
BeginPaint
CharNextA
CharLowerBuffA
CharLowerA
CharUpperBuffA
CharToOemA
AdjustWindowRectEx
ActivateKeyboardLayout

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
SetCurrentDirectoryA
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCurrentDirectoryA
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
ExitThread
CreateThread
CompareStringA
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileA
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
lstrcpyA
lstrcmpA
WritePrivateProfileStringA
WriteFile
WaitForSingleObject
VirtualQuery
VirtualAlloc
UpdateResourceA
SuspendThread
SizeofResource
SetThreadLocale
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
ReadFile
QueryPerformanceFrequency
QueryPerformanceCounter
MulDiv
LockResource
LoadResource
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
GlobalUnlock
GlobalLock
GlobalFree
GlobalFindAtomA
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetVersionExA
GetVersion
GetTickCount
GetThreadLocale
GetSystemInfo
GetStdHandle
GetProfileStringA
GetProcAddress
GetPrivateProfileStringA
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameA
GetFileAttributesA
GetExitCodeThread
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentThreadId
GetCurrentProcessId
GetCPInfo
FreeResource
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
FreeLibrary
FormatMessageA
FindResourceA
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumCalendarInfoA
EnterCriticalSection
EndUpdateResourceA
DeleteFileA
DeleteCriticalSection
CreateThread
CreateFileA
CreateEventA
CreateDirectoryA
CopyFileA
CompareStringA
CloseHandle
BeginUpdateResourceA
Sleep

gdi32

UnrealizeObject
StretchDIBits
StretchBlt
StartPage
StartDocA
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetMapMode
SetEnhMetaFileBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SetAbortProc
SelectPalette
SelectObject
SelectClipRgn
SaveDC
RoundRect
RestoreDC
Rectangle
RectVisible
RealizePalette
Polyline
Polygon
PlayEnhMetaFile
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsA
GetTextExtentPointA
GetTextExtentPoint32W
GetTextExtentPoint32A
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectA
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
GdiFlush
ExtTextOutW
ExtTextOutA
ExcludeClipRect
EndPage
EndDoc
Ellipse
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateICA
CreateHalftonePalette
CreateFontIndirectA
CreateDIBitmap
CreateDIBSection
CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileA
CombineRgn
BitBlt

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

ole32

CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CoInitialize
CLSIDFromString

comctl32

_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
InitCommonControls

shell32

Shell_NotifyIconA
ShellExecuteA

winspool.drv

OpenPrinterA
EnumPrintersA
DocumentPropertiesA
ClosePrinter

comdlg32

GetOpenFileNameA

wsock32

WSACleanup
WSAStartup
gethostbyname
socket
shutdown
send
recv
listen
inet_ntoa
inet_addr
htons
getpeername
connect
closesocket
bind
accept

Sections

.text
Size: 887KB - Virtual size: 886KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 147KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 64B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/FIRST READ ME !!.txt
Remcos.v3.8+DarkwebTools/Flags/--.png
.png
Remcos.v3.8+DarkwebTools/Flags/Thumbs.db
Remcos.v3.8+DarkwebTools/Flags/_ASEAN.png
.png
Remcos.v3.8+DarkwebTools/Flags/_African Union(OAS).png
.png
Remcos.v3.8+DarkwebTools/Flags/_Arab League.png
.png
Remcos.v3.8+DarkwebTools/Flags/_CARICOM.png
.png
Remcos.v3.8+DarkwebTools/Flags/_CIS.png
.png
Remcos.v3.8+DarkwebTools/Flags/_Commonwealth.png
.png
Remcos.v3.8+DarkwebTools/Flags/_England.png
.png
Remcos.v3.8+DarkwebTools/Flags/_European Union.png
.png
Remcos.v3.8+DarkwebTools/Flags/_Islamic Conference.png
.png
Remcos.v3.8+DarkwebTools/Flags/_Kosovo.png
.png
Remcos.v3.8+DarkwebTools/Flags/_NATO.png
.png
Remcos.v3.8+DarkwebTools/Flags/_Northern Cyprus.png
.png
Remcos.v3.8+DarkwebTools/Flags/_Northern Ireland.png
.png
Remcos.v3.8+DarkwebTools/Flags/_OPEC.png
.png
Remcos.v3.8+DarkwebTools/Flags/_Olimpic Movement.png
.png
Remcos.v3.8+DarkwebTools/Flags/_Red Cross.png
.png
Remcos.v3.8+DarkwebTools/Flags/_Scotland.png
.png
Remcos.v3.8+DarkwebTools/Flags/_Somaliland.png
.png
Remcos.v3.8+DarkwebTools/Flags/_United Nations.png
.png
Remcos.v3.8+DarkwebTools/Flags/_Wales.png
.png
Remcos.v3.8+DarkwebTools/Flags/ad.png
.png
Remcos.v3.8+DarkwebTools/Flags/ae.png
.png
Remcos.v3.8+DarkwebTools/Flags/af.png
.png
Remcos.v3.8+DarkwebTools/Flags/ag.png
.png
Remcos.v3.8+DarkwebTools/Flags/ai.png
.png
Remcos.v3.8+DarkwebTools/Flags/al.png
.png
Remcos.v3.8+DarkwebTools/Flags/am.png
.png
Remcos.v3.8+DarkwebTools/Flags/an.png
.png
Remcos.v3.8+DarkwebTools/Flags/ao.png
.png
Remcos.v3.8+DarkwebTools/Flags/aq.png
.png
Remcos.v3.8+DarkwebTools/Flags/ar.png
.png
Remcos.v3.8+DarkwebTools/Flags/as.png
.png
Remcos.v3.8+DarkwebTools/Flags/at.png
.png
Remcos.v3.8+DarkwebTools/Flags/au.png
.png
Remcos.v3.8+DarkwebTools/Flags/aw.png
.png
Remcos.v3.8+DarkwebTools/Flags/az.png
.png
Remcos.v3.8+DarkwebTools/Flags/ba.png
.png
Remcos.v3.8+DarkwebTools/Flags/bb.png
.png
Remcos.v3.8+DarkwebTools/Flags/bd.png
.png
Remcos.v3.8+DarkwebTools/Flags/be.png
.png
Remcos.v3.8+DarkwebTools/Flags/bf.png
.png
Remcos.v3.8+DarkwebTools/Flags/bg.png
.png
Remcos.v3.8+DarkwebTools/Flags/bh.png
.png
Remcos.v3.8+DarkwebTools/Flags/bi.png
.png
Remcos.v3.8+DarkwebTools/Flags/bj.png
.png
Remcos.v3.8+DarkwebTools/Flags/bm.png
.png
Remcos.v3.8+DarkwebTools/Flags/bn.png
.png
Remcos.v3.8+DarkwebTools/Flags/bo.png
.png
Remcos.v3.8+DarkwebTools/Flags/br.png
.png
Remcos.v3.8+DarkwebTools/Flags/bs.png
.png
Remcos.v3.8+DarkwebTools/Flags/bt.png
.png
Remcos.v3.8+DarkwebTools/Flags/bw.png
.png
Remcos.v3.8+DarkwebTools/Flags/by.png
.png
Remcos.v3.8+DarkwebTools/Flags/bz.png
.png
Remcos.v3.8+DarkwebTools/Flags/ca.png
.png
Remcos.v3.8+DarkwebTools/Flags/cd.png
.png
Remcos.v3.8+DarkwebTools/Flags/cf.png
.png
Remcos.v3.8+DarkwebTools/Flags/cg.png
.png
Remcos.v3.8+DarkwebTools/Flags/ch.png
.png
Remcos.v3.8+DarkwebTools/Flags/ci.png
.png
Remcos.v3.8+DarkwebTools/Flags/ck.png
.png
Remcos.v3.8+DarkwebTools/Flags/cl.png
.png
Remcos.v3.8+DarkwebTools/Flags/cm.png
.png
Remcos.v3.8+DarkwebTools/Flags/cn.png
.png
Remcos.v3.8+DarkwebTools/Flags/co.png
.png
Remcos.v3.8+DarkwebTools/Flags/cr.png
.png
Remcos.v3.8+DarkwebTools/Flags/cu.png
.png
Remcos.v3.8+DarkwebTools/Flags/cv.png
.png
Remcos.v3.8+DarkwebTools/Flags/cy.png
.png
Remcos.v3.8+DarkwebTools/Flags/cz.png
.png
Remcos.v3.8+DarkwebTools/Flags/de.png
.png
Remcos.v3.8+DarkwebTools/Flags/dj.png
.png
Remcos.v3.8+DarkwebTools/Flags/dk.png
.png
Remcos.v3.8+DarkwebTools/Flags/dm.png
.png
Remcos.v3.8+DarkwebTools/Flags/do.png
.png
Remcos.v3.8+DarkwebTools/Flags/dz.png
.png
Remcos.v3.8+DarkwebTools/Flags/ec.png
.png
Remcos.v3.8+DarkwebTools/Flags/ee.png
.png
Remcos.v3.8+DarkwebTools/Flags/eg.png
.png
Remcos.v3.8+DarkwebTools/Flags/eh.png
.png
Remcos.v3.8+DarkwebTools/Flags/er.png
.png
Remcos.v3.8+DarkwebTools/Flags/es.png
.png
Remcos.v3.8+DarkwebTools/Flags/et.png
.png
Remcos.v3.8+DarkwebTools/Flags/fi.png
.png
Remcos.v3.8+DarkwebTools/Flags/fj.png
.png
Remcos.v3.8+DarkwebTools/Flags/fm.png
.png
Remcos.v3.8+DarkwebTools/Flags/fo.png
.png
Remcos.v3.8+DarkwebTools/Flags/fr.png
.png
Remcos.v3.8+DarkwebTools/Flags/ga.png
.png
Remcos.v3.8+DarkwebTools/Flags/gb.png
.png
Remcos.v3.8+DarkwebTools/Flags/gd.png
.png
Remcos.v3.8+DarkwebTools/Flags/ge.png
.png
Remcos.v3.8+DarkwebTools/Flags/gg.png
.png
Remcos.v3.8+DarkwebTools/Flags/gh.png
.png
Remcos.v3.8+DarkwebTools/Flags/gi.png
.png
Remcos.v3.8+DarkwebTools/Flags/gl.png
.png
Remcos.v3.8+DarkwebTools/Flags/gm.png
.png
Remcos.v3.8+DarkwebTools/Flags/gn.png
.png
Remcos.v3.8+DarkwebTools/Flags/gp.png
.png
Remcos.v3.8+DarkwebTools/Flags/gq.png
.png
Remcos.v3.8+DarkwebTools/Flags/gr.png
.png
Remcos.v3.8+DarkwebTools/Flags/gt.png
.png
Remcos.v3.8+DarkwebTools/Flags/gu.png
.png
Remcos.v3.8+DarkwebTools/Flags/gw.png
.png
Remcos.v3.8+DarkwebTools/Flags/gy.png
.png
Remcos.v3.8+DarkwebTools/Flags/hk.png
.png
Remcos.v3.8+DarkwebTools/Flags/hn.png
.png
Remcos.v3.8+DarkwebTools/Flags/hr.png
.png
Remcos.v3.8+DarkwebTools/Flags/ht.png
.png
Remcos.v3.8+DarkwebTools/Flags/hu.png
.png
Remcos.v3.8+DarkwebTools/Flags/id.png
.png
Remcos.v3.8+DarkwebTools/Flags/ie.png
.png
Remcos.v3.8+DarkwebTools/Flags/il.png
.png
Remcos.v3.8+DarkwebTools/Flags/im.png
.png
Remcos.v3.8+DarkwebTools/Flags/in.png
.png
Remcos.v3.8+DarkwebTools/Flags/iq.png
.png
Remcos.v3.8+DarkwebTools/Flags/ir.png
.png
Remcos.v3.8+DarkwebTools/Flags/is.png
.png
Remcos.v3.8+DarkwebTools/Flags/it.png
.png
Remcos.v3.8+DarkwebTools/Flags/je.png
.png
Remcos.v3.8+DarkwebTools/Flags/jm.png
.png
Remcos.v3.8+DarkwebTools/Flags/jo.png
.png
Remcos.v3.8+DarkwebTools/Flags/jp.png
.png
Remcos.v3.8+DarkwebTools/Flags/ke.png
.png
Remcos.v3.8+DarkwebTools/Flags/kg.png
.png
Remcos.v3.8+DarkwebTools/Flags/kh.png
.png
Remcos.v3.8+DarkwebTools/Flags/ki.png
.png
Remcos.v3.8+DarkwebTools/Flags/km.png
.png
Remcos.v3.8+DarkwebTools/Flags/kn.png
.png
Remcos.v3.8+DarkwebTools/Flags/kp.png
.png
Remcos.v3.8+DarkwebTools/Flags/kr.png
.png
Remcos.v3.8+DarkwebTools/Flags/kw.png
.png
Remcos.v3.8+DarkwebTools/Flags/ky.png
.png
Remcos.v3.8+DarkwebTools/Flags/kz.png
.png
Remcos.v3.8+DarkwebTools/Flags/la.png
.png
Remcos.v3.8+DarkwebTools/Flags/lb.png
.png
Remcos.v3.8+DarkwebTools/Flags/lc.png
.png
Remcos.v3.8+DarkwebTools/Flags/li.png
.png
Remcos.v3.8+DarkwebTools/Flags/lk.png
.png
Remcos.v3.8+DarkwebTools/Flags/lr.png
.png
Remcos.v3.8+DarkwebTools/Flags/ls.png
.png
Remcos.v3.8+DarkwebTools/Flags/lt.png
.png
Remcos.v3.8+DarkwebTools/Flags/lu.png
.png
Remcos.v3.8+DarkwebTools/Flags/lv.png
.png
Remcos.v3.8+DarkwebTools/Flags/ly.png
.png
Remcos.v3.8+DarkwebTools/Flags/ma.png
.png
Remcos.v3.8+DarkwebTools/Flags/mc.png
.png
Remcos.v3.8+DarkwebTools/Flags/md.png
.png
Remcos.v3.8+DarkwebTools/Flags/me.png
.png
Remcos.v3.8+DarkwebTools/Flags/mg.png
.png
Remcos.v3.8+DarkwebTools/Flags/mh.png
.png
Remcos.v3.8+DarkwebTools/Flags/mk.png
.png
Remcos.v3.8+DarkwebTools/Flags/ml.png
.png
Remcos.v3.8+DarkwebTools/Flags/mm.png
.png
Remcos.v3.8+DarkwebTools/Flags/mn.png
.png
Remcos.v3.8+DarkwebTools/Flags/mo.png
.png
Remcos.v3.8+DarkwebTools/Flags/mq.png
.png
Remcos.v3.8+DarkwebTools/Flags/mr.png
.png
Remcos.v3.8+DarkwebTools/Flags/ms.png
.png
Remcos.v3.8+DarkwebTools/Flags/mt.png
.png
Remcos.v3.8+DarkwebTools/Flags/mu.png
.png
Remcos.v3.8+DarkwebTools/Flags/mv.png
.png
Remcos.v3.8+DarkwebTools/Flags/mw.png
.png
Remcos.v3.8+DarkwebTools/Flags/mx.png
.png
Remcos.v3.8+DarkwebTools/Flags/my.png
.png
Remcos.v3.8+DarkwebTools/Flags/mz.png
.png
Remcos.v3.8+DarkwebTools/Flags/na.png
.png
Remcos.v3.8+DarkwebTools/Flags/nc.png
.png
Remcos.v3.8+DarkwebTools/Flags/ne.png
.png
Remcos.v3.8+DarkwebTools/Flags/ng.png
.png
Remcos.v3.8+DarkwebTools/Flags/ni.png
.png
Remcos.v3.8+DarkwebTools/Flags/nl.png
.png
Remcos.v3.8+DarkwebTools/Flags/no.png
.png
Remcos.v3.8+DarkwebTools/Flags/np.png
.png
Remcos.v3.8+DarkwebTools/Flags/nr.png
.png
Remcos.v3.8+DarkwebTools/Flags/nz.png
.png
Remcos.v3.8+DarkwebTools/Flags/om.png
.png
Remcos.v3.8+DarkwebTools/Flags/pa.png
.png
Remcos.v3.8+DarkwebTools/Flags/pe.png
.png
Remcos.v3.8+DarkwebTools/Flags/pf.png
.png
Remcos.v3.8+DarkwebTools/Flags/pg.png
.png
Remcos.v3.8+DarkwebTools/Flags/ph.png
.png
Remcos.v3.8+DarkwebTools/Flags/pk.png
.png
Remcos.v3.8+DarkwebTools/Flags/pl.png
.png
Remcos.v3.8+DarkwebTools/Flags/pr.png
.png
Remcos.v3.8+DarkwebTools/Flags/ps.png
.png
Remcos.v3.8+DarkwebTools/Flags/pt.png
.png
Remcos.v3.8+DarkwebTools/Flags/pw.png
.png
Remcos.v3.8+DarkwebTools/Flags/py.png
.png
Remcos.v3.8+DarkwebTools/Flags/qa.png
.png
Remcos.v3.8+DarkwebTools/Flags/re.png
.png
Remcos.v3.8+DarkwebTools/Flags/ro.png
.png
Remcos.v3.8+DarkwebTools/Flags/rs.png
.png
Remcos.v3.8+DarkwebTools/Flags/ru.png
.png
Remcos.v3.8+DarkwebTools/Flags/rw.png
.png
Remcos.v3.8+DarkwebTools/Flags/sa.png
.png
Remcos.v3.8+DarkwebTools/Flags/sb.png
.png
Remcos.v3.8+DarkwebTools/Flags/sc.png
.png
Remcos.v3.8+DarkwebTools/Flags/sd.png
.png
Remcos.v3.8+DarkwebTools/Flags/se.png
.png
Remcos.v3.8+DarkwebTools/Flags/sg.png
.png
Remcos.v3.8+DarkwebTools/Flags/si.png
.png
Remcos.v3.8+DarkwebTools/Flags/sk.png
.png
Remcos.v3.8+DarkwebTools/Flags/sl.png
.png
Remcos.v3.8+DarkwebTools/Flags/sm.png
.png
Remcos.v3.8+DarkwebTools/Flags/sn.png
.png
Remcos.v3.8+DarkwebTools/Flags/so.png
.png
Remcos.v3.8+DarkwebTools/Flags/sr.png
.png
Remcos.v3.8+DarkwebTools/Flags/st.png
.png
Remcos.v3.8+DarkwebTools/Flags/sv.png
.png
Remcos.v3.8+DarkwebTools/Flags/sy.png
.png
Remcos.v3.8+DarkwebTools/Flags/sz.png
.png
Remcos.v3.8+DarkwebTools/Flags/tc.png
.png
Remcos.v3.8+DarkwebTools/Flags/td.png
.png
Remcos.v3.8+DarkwebTools/Flags/tg.png
.png
Remcos.v3.8+DarkwebTools/Flags/th.png
.png
Remcos.v3.8+DarkwebTools/Flags/tj.png
.png
Remcos.v3.8+DarkwebTools/Flags/tl.png
.png
Remcos.v3.8+DarkwebTools/Flags/tm.png
.png
Remcos.v3.8+DarkwebTools/Flags/tn.png
.png
Remcos.v3.8+DarkwebTools/Flags/to.png
.png
Remcos.v3.8+DarkwebTools/Flags/tr.png
.png
Remcos.v3.8+DarkwebTools/Flags/tt.png
.png
Remcos.v3.8+DarkwebTools/Flags/tv.png
.png
Remcos.v3.8+DarkwebTools/Flags/tw.png
.png
Remcos.v3.8+DarkwebTools/Flags/tz.png
.png
Remcos.v3.8+DarkwebTools/Flags/ua.png
.png
Remcos.v3.8+DarkwebTools/Flags/ug.png
.png
Remcos.v3.8+DarkwebTools/Flags/us.png
.png
Remcos.v3.8+DarkwebTools/Flags/uy.png
.png
Remcos.v3.8+DarkwebTools/Flags/uz.png
.png
Remcos.v3.8+DarkwebTools/Flags/va.png
.png
Remcos.v3.8+DarkwebTools/Flags/vc.png
.png
Remcos.v3.8+DarkwebTools/Flags/ve.png
.png
Remcos.v3.8+DarkwebTools/Flags/vg.png
.png
Remcos.v3.8+DarkwebTools/Flags/vi.png
.png
Remcos.v3.8+DarkwebTools/Flags/vn.png
.png
Remcos.v3.8+DarkwebTools/Flags/vu.png
.png
Remcos.v3.8+DarkwebTools/Flags/ws.png
.png
Remcos.v3.8+DarkwebTools/Flags/ye.png
.png
Remcos.v3.8+DarkwebTools/Flags/za.png
.png
Remcos.v3.8+DarkwebTools/Flags/zm.png
.png
Remcos.v3.8+DarkwebTools/Flags/zw.png
.png
Remcos.v3.8+DarkwebTools/FoxLearn.License.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\users\fox\documents\visual studio 2015\Projects\FoxLearn.License\FoxLearn.License\obj\Release\FoxLearn.License.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/GeoIP.dat
Remcos.v3.8+DarkwebTools/HichamRAT v0.9d/GeoIP.dat
Remcos.v3.8+DarkwebTools/HichamRAT v0.9d/HichamRAT v0.9d.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Hicham-Hacker\Desktop\SRC - NjRAT 0.7D\NjRAT\obj\Debug\HichamRAT v0.9d.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/HichamRAT v0.9d/Plugin/cam.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/HichamRAT v0.9d/Plugin/ch.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/HichamRAT v0.9d/Plugin/crack.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/HichamRAT v0.9d/Plugin/mic.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/HichamRAT v0.9d/Plugin/plg.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/HichamRAT v0.9d/Plugin/pw.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Super\Documents\visual studio 2013\Projects\pw plugin\WindowsApplication12\obj\Release\pw.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 237KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/HichamRAT v0.9d/Plugin/sc2.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/HichamRAT v0.9d/Stub.il
.ps1
Remcos.v3.8+DarkwebTools/HichamRAT v0.9d/Stub.manifest
.xml
Remcos.v3.8+DarkwebTools/HichamRAT v0.9d/WinMM.Net.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/LICENSE
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypha-Builder.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\david\Documents\Visual Studio 2012\Projects\Lypha-Builder\Lypha-Builder\obj\Release\Lypha-Builder.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 435KB - Virtual size: 435KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Binary.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/auth.php
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/classes/core.class.php
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/classes/index.html
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/classes/mysql.class.php
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/classes/objects.class.php
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/classes/plugin.class.php
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/classes/template.class.php
.ps1
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/config.php
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/00.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/01.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ad.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ae.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/af.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ag.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ai.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/al.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/am.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/an.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ao.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ar.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/as.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/at.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/au.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/aw.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ax.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/az.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ba.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/bb.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/bd.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/be.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/bf.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/bg.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/bh.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/bi.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/bj.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/bm.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/bn.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/bo.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/br.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/bs.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/bt.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/bv.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/bw.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/by.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/bz.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ca.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/catalonia.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/cc.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/cd.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/cf.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/cg.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ch.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ci.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ck.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/cl.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/cm.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/cn.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/co.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/cr.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/cs.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/cu.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/cv.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/cx.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/cy.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/cz.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/de.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/dj.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/dk.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/dm.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/do.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/dz.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ec.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ee.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/eg.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/eh.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/england.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/er.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/es.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/et.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/europeanunion.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/fam.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/fi.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/fj.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/fk.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/fm.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/fo.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/fr.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ga.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/gb.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/gd.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ge.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/gf.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/gh.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/gi.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/gl.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/gm.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/gn.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/gp.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/gq.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/gr.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/gs.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/gt.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/gu.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/gw.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/gy.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/hk.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/hm.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/hn.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/hr.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ht.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/hu.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/id.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ie.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/il.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/in.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/index.html
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/io.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/iq.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ir.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/is.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/it.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/jm.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/jo.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/jp.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ke.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/kg.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/kh.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ki.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/km.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/kn.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/kp.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/kr.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/kw.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ky.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/kz.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/la.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/lb.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/lc.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/li.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/lk.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/lr.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ls.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/lt.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/lu.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/lv.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ly.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ma.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/mc.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/md.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/me.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/mg.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/mh.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/mk.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ml.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/mm.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/mn.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/mo.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/mp.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/mq.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/mr.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ms.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/mt.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/mu.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/mv.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/mw.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/mx.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/my.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/mz.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/na.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/nc.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ne.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/nf.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ng.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ni.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/nl.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/no.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/np.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/nr.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/nu.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/nz.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/om.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/pa.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/pe.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/pf.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/pg.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ph.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/pk.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/pl.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/pm.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/pn.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/pr.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ps.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/pt.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/pw.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/py.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/qa.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/re.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ro.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/rs.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ru.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/rw.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/sa.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/sb.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/sc.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/scotland.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/sd.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/se.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/sg.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/sh.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/si.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/sj.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/sk.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/sl.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/sm.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/sn.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/so.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/sr.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/st.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/sv.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/sy.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/sz.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/tc.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/td.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/tf.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/tg.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/th.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/tj.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/tk.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/tl.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/tm.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/tn.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/to.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/tr.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/tt.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/tv.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/tw.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/tz.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ua.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ug.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/um.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/us.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/uy.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/uz.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/va.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/vc.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ve.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/vg.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/vi.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/vn.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/vu.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/wales.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/wf.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ws.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/ye.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/yt.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/za.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/zm.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/flags/zw.gif
.gif
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/index.html
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/other/add.png
.png
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/other/bg.jpg
.png
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/other/bots.png
.png
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/other/bots3.png
.png
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/other/delete.png
.png
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/other/detail.png
.png
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/other/edit.png
.png
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/other/error.png
.png
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/other/favicon.ico
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/other/home.png
.png
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/other/index.html
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/other/logo.png
.png
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/other/logout.png
.png
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/other/plugins.png
.png
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/other/run.png
.png
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/other/settings.png
.png
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/other/statistic.png
.png
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/other/sucess.png
.png
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/other/tasks.png
.png
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/other/wait.png
.png
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/other/win.png
.png
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/images/other/win8.png
.png
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/inc/geo/geoip.inc
.js
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/inc/geo/geoipcity.inc
.js
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/inc/geo/geoipregionvars.php
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/inc/geo/geolitecity.dat
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/inc/geo/getlocation.php
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/inc/geo/index.html
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/inc/index.html
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/inc/js/index.html
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/inc/js/jquery-ui-timepicker-addon.css
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/inc/js/jquery-ui-timepicker-addon.js
.js
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/index.php
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/plugins/index2.html
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/plugins/pwdgrabber/de_install.php
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/plugins/pwdgrabber/icon.png
.png
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/plugins/pwdgrabber/index.html
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/plugins/pwdgrabber/info.php
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/plugins/pwdgrabber/main.php
.ps1
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/plugins/reversesocks5/de_install.php
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/plugins/reversesocks5/icon.png
.png
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/plugins/reversesocks5/index.html
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/plugins/reversesocks5/info.php
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/plugins/reversesocks5/main.php
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/plugins/steamphisher/de_install.php
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/plugins/steamphisher/icon.png
.png
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/plugins/steamphisher/index.html
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/plugins/steamphisher/info.php
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/plugins/steamphisher/main.php
.ps1
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/settings/ddos.lip
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/settings/dlexec.lip
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/settings/index.html
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/settings/install.lip
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/settings/installexec.lip
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/settings/kill.lip
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/settings/update.lip
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/sql_dump.sql
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/css/index.html
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/css/style.css
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/index.html
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/bots/bots.tpl
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/bots/botsrows.tpl
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/bots/index.html
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/index.html
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/login/index.html
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/login/login.tpl
.html
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/plugins/index.html
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/plugins/plugins.tpl
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/plugins/pluginsrows.tpl
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/settings/index.html
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/settings/setting.tpl
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/settings/settings.tpl
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/settings/settingsrows.tpl
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/settings/settingsrowsfile.tpl
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/settings/settingsselect.tpl
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/standard.tpl
.html
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/statistics/cstatsrows.tpl
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/statistics/index.html
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/statistics/infectionsrows.tpl
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/statistics/osrows.tpl
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/statistics/pluginstats.tpl
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/statistics/pluginstatsrows.tpl
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/statistics/stats.tpl
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/tasks/addtask.tpl
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/tasks/addtasknext.tpl
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/tasks/countries.tpl
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/tasks/edittask.tpl
.js
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/tasks/index.html
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/tasks/overtime.tpl
.js
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/tasks/tasklog.tpl
.html
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/tasks/tasklogrows.tpl
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/tasks/tasks.tpl
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Panel/style/templates/tasks/tasksrows.tpl
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Plugins/MOD_DDos
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Plugins/MOD_PwdGrabber
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Plugins/MOD_RSocks5
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/Lypheria/Plugins/MOD_Steam
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/AssemblyInfo.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Module_0.csproj
.xml
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_0/Type_0.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_0/Type_14.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_1/Type_1.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_1/Type_21.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_2/Type_19.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_2/Type_2.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_2/Type_20.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_2/Type_3.cs
.js
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_2/Type_4.cs
.js
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_2/Type_5.cs
.vbs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_2/Type_6.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_2/Type_7.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_3/Type_13.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_3/Type_9.cs
.js
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_4/Type_10.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_4/Type_11.cs
.vbs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_5/Type_15.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_5/Type_16.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_5/Type_18.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_22.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_23.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_24.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_25.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_26.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_27.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_28.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_29.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_30.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_31.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_32.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_33.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_34.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_35.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_36.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_37.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_38.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_39.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_40.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_41.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_42.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_43.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_44.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_45.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_46.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_47.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_48.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_49.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_50.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_51.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_52.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_53.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_54.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_55.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_56.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_57.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_58.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_59.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_60.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_61.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_62.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_63.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_64.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_65.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_66.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_67.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_68.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_69.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_70.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_71.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_72.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_73.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_74.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_75.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_76.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_77.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_78.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_79.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_80.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_81.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_82.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_83.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_84.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_85.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_86.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_87.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_88.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_89.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_90.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_91.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_92.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_93.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_94.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_95.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_96.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_6/Type_97.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_7/Type_12.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/src/Namespace_7/Type_8.cs
Remcos.v3.8+DarkwebTools/Liphyra_bot _ Source and Builder KAWAY/stub.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\User\AppData\Local\Temp\kLQAq.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1005KB - Virtual size: 1005KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/Logo.jpg
.jpg
Remcos.v3.8+DarkwebTools/Mono.Cecil.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\njq8\Desktop\jbevain-cecil-0.9.5-73-ga5ffcc0\jbevain-cecil-a5ffcc0\obj\net_2_0_Debug\Mono.Cecil.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 303KB - Virtual size: 302KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/Napoleon Monitor v1.3.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/Napoleon.License.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\users\fox\documents\visual studio 2015\Projects\FoxLearn.License\FoxLearn.License\obj\Release\FoxLearn.License.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/NoIP.dat
Remcos.v3.8+DarkwebTools/Plugins/All/CH.dll
.gz
CH.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Project\Cobian SRC\SRC\Chat\Ch\obj\Debug\CH.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 103B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/Plugins/All/CM.dll
.gz
CM.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Project\Cobian SRC\SRC\Webcam\Cm\obj\Debug\CM.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 105B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/Plugins/All/CP.dll
.gz
CP.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Project\Cobian SRC\SRC\Remote Desktop\C\obj\x86\Debug\CP.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/Plugins/All/FM.dll
.gz
FM.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Project\Cobian SRC\SRC\File Manager\FM\obj\Debug\FM.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 111B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/Plugins/All/MC.dll
.gz
MC.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Project\Cobian SRC\SRC\Microphone\Mic\obj\Debug\MC.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 110B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/Plugins/All/NF.dll
.gz
NF.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Project\Cobian SRC\SRC\Informations\INF\obj\Debug\NF.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/Plugins/All/PS.dll
.gz
PS.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Project\Cobian SRC\SRC\Password Recovery\PS\obj\Debug\PS.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 282KB - Virtual size: 281KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/Plugins/All/PT.dll
.gz
Remcos.v3.8+DarkwebTools/Plugins/All/SM.dll
.gz
Remcos.v3.8+DarkwebTools/Plugins/CH.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Project\Cobian SRC\SRC\Chat\Ch\obj\Debug\CH.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 103B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/Plugins/CH.pdb
Remcos.v3.8+DarkwebTools/Plugins/CH.xml
Remcos.v3.8+DarkwebTools/Plugins/CM.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Project\Cobian SRC\SRC\Webcam\Cm\obj\Debug\CM.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 105B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/Plugins/CM.pdb
Remcos.v3.8+DarkwebTools/Plugins/CM.xml
Remcos.v3.8+DarkwebTools/Plugins/CP.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Project\Cobian SRC\SRC\Remote Desktop\C\obj\x86\Debug\CP.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/Plugins/CP.pdb
Remcos.v3.8+DarkwebTools/Plugins/CP.xml
Remcos.v3.8+DarkwebTools/Plugins/FM.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Project\Cobian SRC\SRC\File Manager\FM\obj\Debug\FM.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 111B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/Plugins/FM.pdb
Remcos.v3.8+DarkwebTools/Plugins/FM.vshost.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:0f:78:4d:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-08-2007 00:23

Not After

23-02-2009 00:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:14:2c:a7:00:00:00:00:00:06
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-06-2007 23:54

Not After

13-06-2012 00:04

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:27F4-D440-54F3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:14:2c:a7:00:00:00:00:00:06
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12-06-2007 23:54

Not After

13-06-2012 00:04

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:27F4-D440-54F3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

38:52:5b:27:4a:e4:b3:3f:6b:cd:4c:35:4c:f1:36:f8:a2:85:c0:c5
Signer

Actual PE Digest

38:52:5b:27:4a:e4:b3:3f:6b:cd:4c:35:4c:f1:36:f8:a2:85:c0:c5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\dd\vsproject\vshost\vshostneutral\objr\i386\vshost.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/Plugins/FM.xml
Remcos.v3.8+DarkwebTools/Plugins/MC.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Project\Cobian SRC\SRC\Microphone\Mic\obj\Debug\MC.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 110B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/Plugins/MC.pdb
Remcos.v3.8+DarkwebTools/Plugins/MC.xml
Remcos.v3.8+DarkwebTools/Plugins/NF.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Project\Cobian SRC\SRC\Informations\INF\obj\Debug\NF.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/Plugins/NF.pdb
Remcos.v3.8+DarkwebTools/Plugins/NF.xml
Remcos.v3.8+DarkwebTools/Plugins/PS.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Project\Cobian SRC\SRC\Password Recovery\PS\obj\Debug\PS.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 282KB - Virtual size: 281KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/Plugins/PS.pdb
Remcos.v3.8+DarkwebTools/Plugins/PS.xml
Remcos.v3.8+DarkwebTools/Plugins/PT.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Project\Cobian SRC\SRC\Pastime\PT\obj\Debug\PT.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 106B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/Plugins/PT.pdb
Remcos.v3.8+DarkwebTools/Plugins/PT.xml
Remcos.v3.8+DarkwebTools/Plugins/SM.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Project\Cobian SRC\SRC\System Manager\SM\obj\Debug\SM.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 113B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/Plugins/SM.pdb
Remcos.v3.8+DarkwebTools/Plugins/SM.xml
Remcos.v3.8+DarkwebTools/Profiles/User
Remcos.v3.8+DarkwebTools/Profiles/po
Remcos.v3.8+DarkwebTools/README.md
Remcos.v3.8+DarkwebTools/S3curity-RAT_v0.1.0/S3curity-RAT v 0.1.0.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Hacker.IQ\Desktop\SpyGateRAT v 2.6\SpyGate-RAT v 0.2.6\obj\Debug\S3curity-RAT v 0.1.0.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 151B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 251KB - Virtual size: 250KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/S3curity-RAT_v0.1.0/Settings.ini
Remcos.v3.8+DarkwebTools/S3curity-RAT_v0.1.0/Stub.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Hacker.IQ\Desktop\StubX\StubX\obj\Debug\StubX.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 111B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/Src PW/.vs/PS/v16/.suo
Remcos.v3.8+DarkwebTools/Src PW/.vs/PS/v16/Server/sqlite3/storage.ide
Remcos.v3.8+DarkwebTools/Src PW/PS.sln
Remcos.v3.8+DarkwebTools/Src PW/PS/A.vb
.vbs
Remcos.v3.8+DarkwebTools/Src PW/PS/Chrome.vb
.vbs
Remcos.v3.8+DarkwebTools/Src PW/PS/My Project/AssemblyInfo.vb
Remcos.v3.8+DarkwebTools/Src PW/PS/My/MyApplication.vb
Remcos.v3.8+DarkwebTools/Src PW/PS/My/MyComputer.vb
Remcos.v3.8+DarkwebTools/Src PW/PS/My/MyProject.vb
.vbs
Remcos.v3.8+DarkwebTools/Src PW/PS/My/MySettings.Designer.vb
Remcos.v3.8+DarkwebTools/Src PW/PS/My/MySettings.settings
Remcos.v3.8+DarkwebTools/Src PW/PS/My/MySettingsProperty.vb
Remcos.v3.8+DarkwebTools/Src PW/PS/My/Resources/Resources.vb
.vbs
Remcos.v3.8+DarkwebTools/Src PW/PS/PS.ico
Remcos.v3.8+DarkwebTools/Src PW/PS/PS.vbproj
Remcos.v3.8+DarkwebTools/Src PW/PS/Resources.resources
Remcos.v3.8+DarkwebTools/Src PW/PS/SQLiteHandler.vb
.vbs
Remcos.v3.8+DarkwebTools/Src PW/PS/firefox5.vb
.vbs
Remcos.v3.8+DarkwebTools/Src PW/PS/obj/Debug/PS.vbprojAssemblyReference.cache
Remcos.v3.8+DarkwebTools/Src PW/PS/p.vb
.vbs
Remcos.v3.8+DarkwebTools/Src c#/.vs/PS/v16/.suo
Remcos.v3.8+DarkwebTools/Src c#/.vs/PS/v16/Server/sqlite3/storage.ide
Remcos.v3.8+DarkwebTools/Src c#/PS.My.Resources/Resources.cs
.vbs
Remcos.v3.8+DarkwebTools/Src c#/PS.My/MyApplication.cs
Remcos.v3.8+DarkwebTools/Src c#/PS.My/MyComputer.cs
Remcos.v3.8+DarkwebTools/Src c#/PS.My/MyProject.cs
Remcos.v3.8+DarkwebTools/Src c#/PS.My/MySettings.cs
Remcos.v3.8+DarkwebTools/Src c#/PS.My/MySettingsProperty.cs
Remcos.v3.8+DarkwebTools/Src c#/PS.csproj
.xml
Remcos.v3.8+DarkwebTools/Src c#/PS/A.cs
.js
Remcos.v3.8+DarkwebTools/Src c#/PS/Chrome.cs
.js
Remcos.v3.8+DarkwebTools/Src c#/PS/Resources.resx
Remcos.v3.8+DarkwebTools/Src c#/PS/SQLiteHandler.cs
Remcos.v3.8+DarkwebTools/Src c#/PS/firefox5.cs
.js
Remcos.v3.8+DarkwebTools/Src c#/PS/p.cs
.js
Remcos.v3.8+DarkwebTools/Src c#/Properties/AssemblyInfo.cs
Remcos.v3.8+DarkwebTools/Src c#/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
Remcos.v3.8+DarkwebTools/Src c#/obj/Debug/PS.csprojAssemblyReference.cache
Remcos.v3.8+DarkwebTools/Stub.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\Project\Cobian SRC\SRC\B\B\obj\Debug\B.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 98B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/Stub.pdb
Remcos.v3.8+DarkwebTools/Term Of Service.txt
Remcos.v3.8+DarkwebTools/VPNConnect.pbk
Remcos.v3.8+DarkwebTools/Web Panel/app.js
.js
Remcos.v3.8+DarkwebTools/Web Panel/firebase-app.js
.js
Remcos.v3.8+DarkwebTools/Web Panel/firebase-auth.js
.js
Remcos.v3.8+DarkwebTools/Web Panel/firebase-database.js
.js
Remcos.v3.8+DarkwebTools/Web Panel/index.html
.html .js polyglot
Remcos.v3.8+DarkwebTools/Web Panel/jquery.js
.js
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/._cache_XWORMV~1.EXE
.exe windows:4 windows x86 arch:x86

a9c887a4f18a3fede2cc29ceea138ed3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

malloc
memset
strcmp
strcpy
getenv
sprintf
fopen
fwrite
fclose
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit

shell32

ShellExecuteA

kernel32

SetUnhandledExceptionFilter

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7.2MB - Virtual size: 7.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/._cache_XWorm V3.0.exe
.exe windows:4 windows x86 arch:x86

a9c887a4f18a3fede2cc29ceea138ed3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

malloc
memset
strcmp
strcpy
getenv
sprintf
fopen
fwrite
fclose
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit

shell32

ShellExecuteA

kernel32

SetUnhandledExceptionFilter

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7.2MB - Virtual size: 7.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Background.png
.png
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/FastColoredTextBox.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Projects_CSharp\FastColoredTextBox\FastColoredTextBox\obj\Debug\FastColoredTextBox.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 331KB - Virtual size: 330KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Fixer.bat
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/GMap.NET.Core.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/GMap.NET.WindowsForms.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/GeoIP.dat
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/IconExtractor.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\HMJ\Desktop\IconExtractor-master\IconExtractor\obj\Release\IconExtractor.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Icons/icon (1).ico
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Icons/icon (10).ico
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Icons/icon (11).ico
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Icons/icon (12).ico
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Icons/icon (13).ico
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Icons/icon (14).ico
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Icons/icon (15).ico
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Icons/icon (16).ico
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Icons/icon (17).ico
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Icons/icon (2).ico
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Icons/icon (3).ico
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Icons/icon (4).ico
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Icons/icon (5).ico
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Icons/icon (6).ico
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Icons/icon (7).ico
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Icons/icon (8).ico
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Icons/icon (9).ico
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Intro.wav
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/NAudio.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

37:37:aa:de:9f:72:21:81:eb:6e:a4:00:21:65:fb:e1
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22-01-2019 00:00

Not After

27-02-2022 23:59

Subject

CN=Razer USA Ltd.,O=Razer USA Ltd.,L=Irvine,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10-12-2013 00:00

Not After

09-12-2023 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

d0:94:af:d7:9f:51:16:9c:c5:1a:e7:ea:23:e5:08:16:11:ae:03:76:1d:25:05:ee:5f:c2:9d:59:4a:68:c8:54
Signer

Actual PE Digest

d0:94:af:d7:9f:51:16:9c:c5:1a:e7:ea:23:e5:08:16:11:ae:03:76:1d:25:05:ee:5f:c2:9d:59:4a:68:c8:54

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\code\GitHub\NAudio\NAudio\obj\Release\NAudio.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 494KB - Virtual size: 493KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/ActiveWindows.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/All-In-One.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4.8MB - Virtual size: 4.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Chat.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Clipboard.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/FileManager.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/FileSeacher.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 476KB - Virtual size: 476KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/HRDP.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/HVNC.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Informations.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Keylogger.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Maps.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Microphone.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 538KB - Virtual size: 537KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Ngrok-Disk.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7.0MB - Virtual size: 7.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Options.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Pastime.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Performance.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/ProcessManager.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Programs.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Ransomware.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Recovery.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\PC\Desktop\XWorm V3.0\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Recovery\Recovery\obj\Debug\Recovery.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 494KB - Virtual size: 494KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Regedit.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/RemoteDesktop.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/ReverseProxy.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/RunPE.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/Shell.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/StartupManager.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/TCPConnections.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/UACBypass.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/VB.NET Compiler.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/WSound.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 537KB - Virtual size: 537KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Plugins/WebCam.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/Readme.txt
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/SimpleObfuscator.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0 Bin/XWorm V3.0.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7.0MB - Virtual size: 7.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/_build/Debug/ghost.dll
.dll windows:6 windows x86 arch:x86

7ba5df8d93d91c9ce0dd649d728c558c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Andre\Documents\Visual Studio 2015\Projects\ghost\Debug\ghost.pdb

Imports

msvcp140d

?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBE_JXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?good@ios_base@std@@QBE_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Lockit_dtor@_Lockit@std@@SAXH@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?width@ios_base@std@@QAE_J_J@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?_BADOFF@std@@3_JB
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??Bid@locale@std@@QAEIXZ
?_Lockit_ctor@_Lockit@std@@SAXH@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?_Debug_message@std@@YAXPB_W0I@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Xbad_alloc@std@@YAXXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Xlength_error@std@@YAXPBD@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?_Xout_of_range@std@@YAXPBD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z

vcruntime140d

__std_exception_copy
memset
__FrameUnwindFilter
__CxxUnregisterExceptionObject
__CxxDetectRethrow
__CxxRegisterExceptionObject
__CxxExceptionFilter
__CxxQueryExceptionSize
memmove
memcpy
__std_type_info_destroy_list
__std_exception_destroy
_CxxThrowException
__telemetry_main_invoke_trigger
__telemetry_main_return_trigger
__vcrt_GetModuleFileNameW
__vcrt_GetModuleHandleW
__vcrt_LoadLibraryExW
_except_handler4_common

ucrtbased

_initterm
_initterm_e
_wmakepath_s
_wsplitpath_s
wcscpy_s
_seh_filter_dll
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_free_dbg
__stdio_common_vsprintf_s
__stdio_common_vsprintf
strlen
__acrt_iob_func
_invalid_parameter
_wassert
_get_stream_buffer_pointers
fwrite
fclose
puts
_lock_file
_unlock_file
fputc
ungetc
fgetc
_errno
_invalid_parameter_noinfo
_fseeki64
fgetpos
fsetpos
setvbuf
fflush
abort
_malloc_dbg
_callnewh
malloc
_CrtDbgReportW
__stdio_common_vfprintf

kernel32

Sleep
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetProcAddress
FreeLibrary
VirtualQuery
GetProcessHeap
HeapFree
HeapAlloc
GetLastError
WideCharToMultiByte
MultiByteToWideChar
RaiseException
IsDebuggerPresent

sqlite3

sqlite3_close
sqlite3_exec
sqlite3_open

mscoree

_CorDllMain

Exports

Exports

?addZombie@ghostlib@@YAXU_clientData@1@@Z
?deleteZombie@ghostlib@@YAXH@Z
?getZombieCount@ghostlib@@YAHXZ
?getZombieData@ghostlib@@YAPAU_clientData@1@H@Z
?getZombieIndex@ghostlib@@YAHI@Z
?loadZombies@ghostlib@@YAXXZ
?parseZombie@ghostlib@@YAXIHPAD@Z
?saveZombies@ghostlib@@YAXXZ
?updateZombieConnection@ghostlib@@YAXHI@Z

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 336KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/_build/Debug/ghost.exp
Remcos.v3.8+DarkwebTools/_build/Debug/ghost.lib
Remcos.v3.8+DarkwebTools/_build/Release/ghost.dll
.dll windows:6 windows x86 arch:x86

e46f6570fae44048af48d3411fda1e1f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Andre\Documents\Visual Studio 2015\Projects\ghost\Release\ghost.pdb

Imports

vcruntime140

__CxxQueryExceptionSize
__CxxExceptionFilter
__CxxRegisterExceptionObject
__CxxDetectRethrow
__CxxUnregisterExceptionObject
memmove
__std_exception_copy
_except_handler4_common
memset
__std_type_info_destroy_list
__telemetry_main_return_trigger
__telemetry_main_invoke_trigger
_CxxThrowException
__std_exception_destroy
__FrameUnwindFilter

api-ms-win-crt-runtime-l1-1-0

_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
terminate
_initialize_narrow_environment
_seh_filter_dll
_initterm_e
_initterm
_invalid_parameter_noinfo_noreturn
abort
_initialize_onexit_table

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

kernel32

IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
Sleep

msvcp140

?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z

mscoree

_CorDllMain

Exports

Exports

?addZombie@ghostlib@@YAXU_clientData@1@@Z
?deleteZombie@ghostlib@@YAXH@Z
?getZombieCount@ghostlib@@YAHXZ
?getZombieData@ghostlib@@YAAAU_clientData@1@H@Z
?getZombieIndex@ghostlib@@YAHI@Z
?parseZombie@ghostlib@@YAXIHPAD@Z
?updateZombieConnection@ghostlib@@YAXHI@Z

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 254KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/_build/Release/ghost.exp
Remcos.v3.8+DarkwebTools/_build/Release/ghost.lib
Remcos.v3.8+DarkwebTools/_resources/ghost.html
Remcos.v3.8+DarkwebTools/_resources/icon.ico
Remcos.v3.8+DarkwebTools/_resources/wget.exe
.exe windows:4 windows x86 arch:x86

fe8f0bebf787f35580b2866a83df1c53

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07-06-2005 08:09

Not After

30-05-2020 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31-12-2015 00:00

Not After

09-07-2019 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24-08-2011 00:00

Not After

30-05-2020 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

03:1c:e8:45:cc:a9:7a:ae:1e:ad:8b:64:64:f9:c7:b6
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

28-03-2016 00:00

Not After

28-03-2019 23:59

Subject

CN=Jernej Simončič,O=Jernej Simončič,POSTALCODE=1000,STREET=Herbersteinova 29,L=Ljubljana,ST=-,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

77:71:45:5b:05:17:ad:b7:7e:cc:60:1c:24:f2:a9:73
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-03-2016 00:00

Not After

25-03-2021 23:59

Subject

CN=Jernej Simončič,O=Jernej Simončič,POSTALCODE=1000,STREET=Herbersteinova 29,L=Ljubljana,ST=-,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31-12-2015 00:00

Not After

09-07-2019 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:ff:86:29:32:f6:1c:8a:66:76:43:f3:55:3b:aa:60:00:93:b5:71:4f:6e:e3:70:8d:fb:87:fa:2e:6b:18:9d
Signer

Actual PE Digest

6a:ff:86:29:32:f6:1c:8a:66:76:43:f3:55:3b:aa:60:00:93:b5:71:4f:6e:e3:70:8d:fb:87:fa:2e:6b:18:9d

Digest Algorithm

sha256

PE Digest Matches

true

54:84:d8:90:dd:49:39:da:8b:d3:6f:d0:46:84:c0:6b:a2:ea:92:e5
Signer

Actual PE Digest

54:84:d8:90:dd:49:39:da:8b:d3:6f:d0:46:84:c0:6b:a2:ea:92:e5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptAcquireContextA
CryptCreateHash
CryptDecrypt
CryptDestroyHash
CryptDestroyKey
CryptEnumProvidersA
CryptExportKey
CryptGetProvParam
CryptGetUserKey
CryptReleaseContext
CryptSetHashParam
CryptSignHashA
DeregisterEventSource
RegisterEventSourceA
ReportEventA

crypt32

CertCloseStore
CertDuplicateCertificateContext
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenStore

gdi32

CreateCompatibleBitmap
DeleteObject
GetDIBits
GetDeviceCaps
GetObjectA

kernel32

CloseHandle
CreateEventA
CreateFileMappingA
CreateProcessA
CreateThread
DeleteCriticalSection
EnterCriticalSection
FindClose
FindFirstFileA
FindFirstVolumeW
FindNextFileA
FindNextVolumeW
FindVolumeClose
FormatMessageW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetConsoleMode
GetConsoleScreenBufferInfo
GetConsoleWindow
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceExW
GetFileInformationByHandle
GetFileSize
GetFileSizeEx
GetFileType
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetNumberOfConsoleInputEvents
GetProcAddress
GetStartupInfoA
GetStdHandle
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetTickCount
GetTimeZoneInformation
GetVersion
GetVolumeInformationW
GlobalMemoryStatus
InitializeCriticalSection
IsDBCSLeadByteEx
IsValidCodePage
LeaveCriticalSection
LoadLibraryA
LockFileEx
MapViewOfFile
MultiByteToWideChar
OpenFileMappingA
PeekConsoleInputA
PeekNamedPipe
QueryPerformanceCounter
QueryPerformanceFrequency
ResumeThread
SetConsoleCtrlHandler
SetConsoleTitleA
SetEndOfFile
SetEvent
SetFilePointer
SetLastError
SetUnhandledExceptionFilter
Sleep
SleepEx
SystemTimeToFileTime
TerminateProcess
TerminateThread
TlsGetValue
UnhandledExceptionFilter
UnlockFile
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile

msvcrt

__dllonexit
__doserrno
__getmainargs
__initenv
__lconv_init
__mb_cur_max
__pioinfo
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_chmod
_close
_errno
_exit
_fdopen
_filelengthi64
_fileno
_fmode
_fstati64
_get_osfhandle
_getch
_getpid
_initterm
_iob
_isctype
_lock
_lseeki64
_mkdir
_onexit
_open
_open_osfhandle
_setmode
_snwprintf
_stat
time
localtime
gmtime
_stati64
_stricmp
_strnicmp
_telli64
calloc
clearerr
clock
exit
fclose
feof
ferror
fflush
fgetc
fgetpos
fgets
fopen
fprintf
fputc
fputs
fread
free
fseek
fsetpos
ftell
fwprintf
fwrite
getc
getenv
gmtime
isalnum
isalpha
iscntrl
isgraph
islower
isprint
ispunct
isspace
isupper
iswctype
isxdigit
localeconv
localtime
malloc
memchr
memcmp
memcpy
memmove
memset
perror
printf
puts
qsort
raise
rand
realloc
rename
rewind
setlocale
setvbuf
signal
sprintf
srand
sscanf
strcat
strchr
strcmp
strcpy
strcspn
strerror
strftime
strlen
strncat
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtok
strtol
strtoul
_unlock
_wfopen
_wopen
_write
abort
atoi
time
tmpfile
tolower
toupper
towlower
towupper
ungetc
vfprintf
wcscat
wcscpy
wcslen
wcsstr
wcstombs
_snprintf
_vsnprintf
_write
_utime
_unlink
_strdup
_read
_open
_isatty
_getpid
_fileno
_fdopen
_dup
_close
_chmod

ole32

CoCreateInstance
CoInitializeEx
CoUninitialize

user32

DispatchMessageA
GetDC
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxA
MessageBoxW
MsgWaitForMultipleObjects
PeekMessageA
ReleaseDC
TranslateMessage

ws2_32

WSAAddressToStringA
WSACleanup
WSAEnumNetworkEvents
WSAEventSelect
WSAGetLastError
WSASetLastError
WSASocketA
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
getpeername
getsockname
htons
ioctlsocket
listen
ntohs
recv
select
send
setsockopt
shutdown

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 648KB - Virtual size: 647KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 41KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/_src/Encryption/encrypt.h
Remcos.v3.8+DarkwebTools/_src/ghostdll/AssemblyInfo.cpp
Remcos.v3.8+DarkwebTools/_src/ghostdll/ghostlib.cpp
Remcos.v3.8+DarkwebTools/_src/ghostdll/ghostlib.h
Remcos.v3.8+DarkwebTools/_src/ghostdll/resource.h
Remcos.v3.8+DarkwebTools/_src/server/AssemblyInfo.cpp
Remcos.v3.8+DarkwebTools/_src/server/INIReader.cpp
Remcos.v3.8+DarkwebTools/_src/server/INIReader.h
Remcos.v3.8+DarkwebTools/_src/server/callbacks.h
Remcos.v3.8+DarkwebTools/_src/server/config.h
Remcos.v3.8+DarkwebTools/_src/server/console.h
Remcos.v3.8+DarkwebTools/_src/server/gui.h
Remcos.v3.8+DarkwebTools/_src/server/info.h
Remcos.v3.8+DarkwebTools/_src/server/ini.cpp
Remcos.v3.8+DarkwebTools/_src/server/ini.h
Remcos.v3.8+DarkwebTools/_src/server/resource.h
Remcos.v3.8+DarkwebTools/_src/server/server.cpp
Remcos.v3.8+DarkwebTools/_src/zombie/info.cpp
Remcos.v3.8+DarkwebTools/_src/zombie/info.h
Remcos.v3.8+DarkwebTools/_src/zombie/resource.h
Remcos.v3.8+DarkwebTools/_src/zombie/zombie.cpp
Remcos.v3.8+DarkwebTools/builder/StormKittyBuilder.sln
Remcos.v3.8+DarkwebTools/builder/StormKittyBuilder/App.config
Remcos.v3.8+DarkwebTools/builder/StormKittyBuilder/Modules/build/build.cs
.js
Remcos.v3.8+DarkwebTools/builder/StormKittyBuilder/Modules/build/icon.cs
.js
Remcos.v3.8+DarkwebTools/builder/StormKittyBuilder/Modules/build/obfuscation.cs
Remcos.v3.8+DarkwebTools/builder/StormKittyBuilder/Modules/cli.cs
Remcos.v3.8+DarkwebTools/builder/StormKittyBuilder/Modules/crypt.cs
.js
Remcos.v3.8+DarkwebTools/builder/StormKittyBuilder/Modules/telegram.cs
.js
Remcos.v3.8+DarkwebTools/builder/StormKittyBuilder/Program.cs
Remcos.v3.8+DarkwebTools/builder/StormKittyBuilder/Properties/AssemblyInfo.cs
Remcos.v3.8+DarkwebTools/builder/StormKittyBuilder/StormKittyBuilder.csproj
Remcos.v3.8+DarkwebTools/builder/StormKittyBuilder/packages.config
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/LICENSE.TXT
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/Microsoft.VisualBasic.10.3.0.nupkg
.nupkg
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/THIRD-PARTY-NOTICES.TXT
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/lib/netcore50/Microsoft.VisualBasic.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-08-2016 20:17

Not After

02-11-2017 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28-10-2015 20:31

Not After

28-01-2017 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

84:92:ec:1c:c4:98:cb:e8:8f:2d:2c:bf:89:af:db:7d:c3:17:17:05:31:bc:39:6c:ee:93:1d:3b:3f:12:ff:e2
Signer

Actual PE Digest

84:92:ec:1c:c4:98:cb:e8:8f:2d:2c:bf:89:af:db:7d:c3:17:17:05:31:bc:39:6c:ee:93:1d:3b:3f:12:ff:e2

Digest Algorithm

sha256

PE Digest Matches

true

f6:01:db:ab:76:44:5e:96:dd:a6:9f:b6:90:cc:15:52:a9:76:32:e0
Signer

Actual PE Digest

f6:01:db:ab:76:44:5e:96:dd:a6:9f:b6:90:cc:15:52:a9:76:32:e0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\A\_work\39\s\bin\obj\AnyOS.AnyCPU.Release\Microsoft.VisualBasic\Microsoft.VisualBasic.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/lib/netstandard1.3/Microsoft.VisualBasic.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-08-2016 20:17

Not After

02-11-2017 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28-10-2015 20:31

Not After

28-01-2017 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

84:92:ec:1c:c4:98:cb:e8:8f:2d:2c:bf:89:af:db:7d:c3:17:17:05:31:bc:39:6c:ee:93:1d:3b:3f:12:ff:e2
Signer

Actual PE Digest

84:92:ec:1c:c4:98:cb:e8:8f:2d:2c:bf:89:af:db:7d:c3:17:17:05:31:bc:39:6c:ee:93:1d:3b:3f:12:ff:e2

Digest Algorithm

sha256

PE Digest Matches

true

f6:01:db:ab:76:44:5e:96:dd:a6:9f:b6:90:cc:15:52:a9:76:32:e0
Signer

Actual PE Digest

f6:01:db:ab:76:44:5e:96:dd:a6:9f:b6:90:cc:15:52:a9:76:32:e0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\A\_work\39\s\bin\obj\AnyOS.AnyCPU.Release\Microsoft.VisualBasic\Microsoft.VisualBasic.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/lib/netstandard2.0/Microsoft.VisualBasic.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:c2:a0:09:c5:37:76:e9:f6:cd:00:00:00:00:00:c2
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:C3B0-0F6A-4111,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:20

Not After

11-08-2018 20:20

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

51:8e:7c:eb:fd:fa:64:09:5b:01:1b:d9:ec:91:c3:28:72:d0:49:1d:2c:24:32:cf:ca:b4:e0:b9:e2:1c:e6:f5
Signer

Actual PE Digest

51:8e:7c:eb:fd:fa:64:09:5b:01:1b:d9:ec:91:c3:28:72:d0:49:1d:2c:24:32:cf:ca:b4:e0:b9:e2:1c:e6:f5

Digest Algorithm

sha256

PE Digest Matches

true

d6:a9:a2:f4:d2:22:72:82:8f:d6:5b:ca:30:47:ac:a5:09:2a:30:85
Signer

Actual PE Digest

d6:a9:a2:f4:d2:22:72:82:8f:d6:5b:ca:30:47:ac:a5:09:2a:30:85

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Microsoft.VisualBasic.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/ref/netcore50/Microsoft.VisualBasic.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:99:aa:c5:81:9f:8c:a2:7d:8a:00:00:00:00:00:99
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

30-03-2016 19:21

Not After

30-06-2017 19:21

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:98FD-C61E-E641,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-06-2015 17:42

Not After

04-09-2016 17:42

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28-10-2015 20:31

Not After

28-01-2017 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

49:bd:b0:6b:98:1a:10:3d:5e:95:04:da:d7:8d:aa:66:35:1c:18:41:51:2f:71:2e:2e:4e:50:b1:39:16:b6:17
Signer

Actual PE Digest

49:bd:b0:6b:98:1a:10:3d:5e:95:04:da:d7:8d:aa:66:35:1c:18:41:51:2f:71:2e:2e:4e:50:b1:39:16:b6:17

Digest Algorithm

sha256

PE Digest Matches

true

68:b5:9d:c6:89:2a:4b:5a:93:9c:a6:db:f6:a8:d8:2b:68:70:2c:b8
Signer

Actual PE Digest

68:b5:9d:c6:89:2a:4b:5a:93:9c:a6:db:f6:a8:d8:2b:68:70:2c:b8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\A\_work\21\s\bin\obj\ref\Microsoft.VisualBasic\10.0.0.0\Microsoft.VisualBasic.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/ref/netcore50/Microsoft.VisualBasic.xml
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/ref/netcore50/de/Microsoft.VisualBasic.xml
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/ref/netcore50/es/Microsoft.VisualBasic.xml
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/ref/netcore50/fr/Microsoft.VisualBasic.xml
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/ref/netcore50/it/Microsoft.VisualBasic.xml
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/ref/netcore50/ja/Microsoft.VisualBasic.xml
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/ref/netcore50/ko/Microsoft.VisualBasic.xml
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/ref/netcore50/ru/Microsoft.VisualBasic.xml
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/ref/netcore50/zh-hans/Microsoft.VisualBasic.xml
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/ref/netcore50/zh-hant/Microsoft.VisualBasic.xml
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/ref/netstandard1.1/Microsoft.VisualBasic.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:99:aa:c5:81:9f:8c:a2:7d:8a:00:00:00:00:00:99
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

30-03-2016 19:21

Not After

30-06-2017 19:21

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:98FD-C61E-E641,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-06-2015 17:42

Not After

04-09-2016 17:42

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28-10-2015 20:31

Not After

28-01-2017 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

49:bd:b0:6b:98:1a:10:3d:5e:95:04:da:d7:8d:aa:66:35:1c:18:41:51:2f:71:2e:2e:4e:50:b1:39:16:b6:17
Signer

Actual PE Digest

49:bd:b0:6b:98:1a:10:3d:5e:95:04:da:d7:8d:aa:66:35:1c:18:41:51:2f:71:2e:2e:4e:50:b1:39:16:b6:17

Digest Algorithm

sha256

PE Digest Matches

true

68:b5:9d:c6:89:2a:4b:5a:93:9c:a6:db:f6:a8:d8:2b:68:70:2c:b8
Signer

Actual PE Digest

68:b5:9d:c6:89:2a:4b:5a:93:9c:a6:db:f6:a8:d8:2b:68:70:2c:b8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\A\_work\21\s\bin\obj\ref\Microsoft.VisualBasic\10.0.0.0\Microsoft.VisualBasic.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/ref/netstandard1.1/Microsoft.VisualBasic.xml
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/ref/netstandard1.1/de/Microsoft.VisualBasic.xml
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/ref/netstandard1.1/es/Microsoft.VisualBasic.xml
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/ref/netstandard1.1/fr/Microsoft.VisualBasic.xml
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/ref/netstandard1.1/it/Microsoft.VisualBasic.xml
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/ref/netstandard1.1/ja/Microsoft.VisualBasic.xml
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/ref/netstandard1.1/ko/Microsoft.VisualBasic.xml
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/ref/netstandard1.1/ru/Microsoft.VisualBasic.xml
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/ref/netstandard1.1/zh-hans/Microsoft.VisualBasic.xml
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/ref/netstandard1.1/zh-hant/Microsoft.VisualBasic.xml
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/ref/netstandard2.0/Microsoft.VisualBasic.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:bb:b6:77:24:71:4a:20:00:20:00:00:00:00:00:bb
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:0DE8-2DC5-3CA9,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:20

Not After

11-08-2018 20:20

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ae:37:3a:1a:02:ea:74:da:28:07:38:73:d8:d7:83:09:24:fc:8c:a7:30:f9:8d:3f:1a:aa:07:34:76:75:45:e6
Signer

Actual PE Digest

ae:37:3a:1a:02:ea:74:da:28:07:38:73:d8:d7:83:09:24:fc:8c:a7:30:f9:8d:3f:1a:aa:07:34:76:75:45:e6

Digest Algorithm

sha256

PE Digest Matches

true

8f:44:b9:d7:6c:7c:61:e7:98:f4:4a:d9:bc:40:df:09:55:b8:d6:cd
Signer

Actual PE Digest

8f:44:b9:d7:6c:7c:61:e7:98:f4:4a:d9:bc:40:df:09:55:b8:d6:cd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\A\_work\39\s\corefx\bin\obj\ref\Microsoft.VisualBasic\10.0.0.0\netstandard\Microsoft.VisualBasic.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/ref/netstandard2.0/Microsoft.VisualBasic.xml
Remcos.v3.8+DarkwebTools/builder/packages/Microsoft.VisualBasic.10.3.0/version.txt
Remcos.v3.8+DarkwebTools/builder/packages/Mono.Cecil.0.11.2/Mono.Cecil.0.11.2.nupkg
.nupkg
Remcos.v3.8+DarkwebTools/builder/packages/Mono.Cecil.0.11.2/lib/net40/Mono.Cecil.Mdb.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\sources\cecil\symbols\mdb\obj\Release\net40\Mono.Cecil.Mdb.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/builder/packages/Mono.Cecil.0.11.2/lib/net40/Mono.Cecil.Mdb.pdb
Remcos.v3.8+DarkwebTools/builder/packages/Mono.Cecil.0.11.2/lib/net40/Mono.Cecil.Pdb.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\sources\cecil\symbols\pdb\obj\Release\net40\Mono.Cecil.Pdb.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/builder/packages/Mono.Cecil.0.11.2/lib/net40/Mono.Cecil.Pdb.pdb
Remcos.v3.8+DarkwebTools/builder/packages/Mono.Cecil.0.11.2/lib/net40/Mono.Cecil.Rocks.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\sources\cecil\rocks\obj\Release\net40\Mono.Cecil.Rocks.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/builder/packages/Mono.Cecil.0.11.2/lib/net40/Mono.Cecil.Rocks.pdb
Remcos.v3.8+DarkwebTools/builder/packages/Mono.Cecil.0.11.2/lib/net40/Mono.Cecil.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\sources\cecil\obj\Release\net40\Mono.Cecil.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 335KB - Virtual size: 334KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/builder/packages/Mono.Cecil.0.11.2/lib/net40/Mono.Cecil.pdb
Remcos.v3.8+DarkwebTools/images/img1.png
.png
Remcos.v3.8+DarkwebTools/images/img2.png
.png
Remcos.v3.8+DarkwebTools/images/img3.png
.png
Remcos.v3.8+DarkwebTools/images/img4.png
.png
Remcos.v3.8+DarkwebTools/images/part1.mp4
Remcos.v3.8+DarkwebTools/images/part2.mp4
Remcos.v3.8+DarkwebTools/images/thumbnail1.png
.jpg
Remcos.v3.8+DarkwebTools/images/thumbnail2.png
.jpg
Remcos.v3.8+DarkwebTools/remcos_RAT_v3.8.0/1 - Important Note.txt
Remcos.v3.8+DarkwebTools/remcos_RAT_v3.8.0/Remcos v3.8.0 Pro.exe
.exe windows:5 windows x86 arch:x86

66d02481b572b9fc096045c59dd5f5f3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveOutOpen

wininet

InternetCloseHandle

winspool.drv

DocumentPropertiesW

comdlg32

GetSaveFileNameW

comctl32

ImageList_GetImageInfo

shell32

SHGetFileInfoW

user32

MoveWindow
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW

version

GetFileVersionInfoSizeW

oleaut32

SysFreeString

advapi32

RegSetValueExW

msvcrt

memcpy

kernel32

GetVersion
GetVersionExW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

wsock32

accept

ole32

IsEqualGUID

gdi32

Pie

wtsapi32

WTSSendMessageW

Exports

Exports

TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
�o��Q��e�k�oϻ<v@.�n79�8n4�ه�Y��B��޸x�9h/��p�&��cț(�"�1BS�}W�6�BG��}��J�y�b�"� �I�Xk96�2�:�@T6(�_s��g��Y��C�<G��'��-�l�M�~��\�t��cn�Cy�{��a�f�wF��6��۲��R7]��O��a�Q�ڷ(o�E��yj�)D�' {LI4}"��K4�8��5�2(TM��d��sQ��ڵ^|�� Y��4`��u��#\ =L̔��AA�s�`�J��ɺQ�o8��)�QcE��=�V�Z�`'ɕ{ ��e9M�^��-�[#p%�ة��VU��ʅK�b+x�O��`�(|� �R�~e܆�w?� �"խׄ��z��8�#��w/f��x��{b�� -:��zNz�^Wݣ��ڡ�k��ܸ�2�5��;]z�Cۃ�&�9 �5��G"�՝��'�dHD_��|q�+P+��$��G��x_rBTc��8�c��e`� ��w��k�1H��a|,�ր�`@Qg =��/�&��4I&R?��<Z,�p�y�D��6�5�m�+�V��X&C �J��Y�S��A��u��{��bf�8J�>{G"P��p+dL��{�m�]z�Q��!��!�M/_yξV��%jy�T��-�"��bF[Xy��Q~ �"R��?#��b� ��|��T /�B�UneK��D.'��ͳ_ƅf��,�#y��D��A��<��Ry{p�fg��[��%�6�9��]r�o�=��#zB+�,ՇMm��1�Y��I�:��l��c��x O�E��~��6*Ȗ��u�H��W&��(t��/�2�X��~�b%�"e�;ģB�SW"W⦤H� �ZM|F��?�H��}�a��V%YI��|�)�T��4 l�G��Oo��Ƹ��2:^�[��Uʪh{n%JN+Z�9��^�ƋN��YIe�4�x�e�j��I��!�r��ׅA��?A�&�>�� {�� yv�6py��]�l�CG<��s��Y/h��ڊ�M��3��X��g}R�avI��q�\�y-��'K֚�� l�#��,_h`^V�*C� �=0Sz�k��ڰ�wW/x�7T��E��6�J%�Kc=�w}�aLB�df�vXx�ܜ��y9 mv��]�-X�%�]�G��{G��O�(�#�Ѻ��ӡ� ��6��&��{�_*�+]8�f�#��K��_�%�z �%4ġJ^)sf_h��tsg"03��:�c��2e��|Tۉ��X�E]~ �O|�s�,-��S�fRH��Qr�Z.�T�}��f��Shv)?`�dƢ&Fݒss�~�0�4�/$"�i#��c!LF��H��J��e��}��?#s��mT ��Ԡ�}Rv7$hs#W��=�@��+S2Vf��aӏsBR��_PF��FN��{r�ppPgAW��ᶦ~�R�p�}\��v�+N]��R�� *&$��A�� ZK�|��LW��/g�XMz0�u^�<�i��|�!��唥�6q��17^��Mt�0xJP��DE��'N��@��N7{��`\R�7�b(뭒+|�~�ǘ!7=��"�!FA��L��s� l��6v��ۨ��Խ@�@5Rx��w�+�ig�`��F��7��ML��v.64\R�J�滄p��*��m�;XI��A� ��V�`�{��Uk��R�CV�)�a c.��Hfy�r��&芋#�0[�� r��?��!��Zr��g��h��k~ {�� U��~�d�c��UU�eeA��Wy�3�N<7fv�ѮƷ(��6S�B�S;�/2��yn��i��/y)O�z� q�6w�l��w��!�'��X��y2��50&>3�{�j؃��J*{*�H��Q�.��xK�a�m�.�5��B�07%к��I��7��b+T��}�fF�Y_䏈� �#F��uF<d+$�&�_0��i̠tn)��P#*��ح��hh6̈́�ǋ�m��*�]��SM��ooZ�'z�xA?��w��סe�6��Nʍ(W �@� ~O" �_ш2�3��'�~��75�A�S��r��2UGO8��9d��% ��@l�y9p7\��b^�ێFG��٩�J��o&0Q�.l��1��t�6��oߟ�C��N�0�k٫j?eQ L��;��5 ��M�D��hw{��Q㢫�88�� ^�ꅁ�F;1��ɕc}"�� O'Y�ߥP��mÕ�L��c�u��y��X��E�~]�nV+9��-S5\ci��U"i�>�{HUZ��9�z�\)��C�[��~�Ҹ�B<��yu�(�)]9R��<hf�Y#t�1@��Yd�z�7jf��z�rS��OH*wu�R�>Q�z��&5�z��#��-^��0Y��@T 5�`3X܇�%�� H��ǈ�$7Y��x�1��JM�0�jØ: Id��p�=J�w$:�W��*2��}ӻ�%��g��y�s,��T��5��uz��f��T��]��nXw �#�� Qɡ��?� ��d�!�� p&�8��`��_�D>��Y�f�c&0�G��V8Y�J�(5��nG��]�L��5E.9ڮ�f�By�{��J�V�+�h�,. p��je��D�]�:��i�'U��/��IG�� l��"3��[��W4c��K�W1~j5��3�TO,�,��f�mTE��׭��>�*�6�:��{e��2V|��wE��<��udƲ�h�C�5�6�m

Sections

.text
Size: - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 364KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 84B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.viotto0
Size: - Virtual size: 25.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.viotto1
Size: 25.4MB - Virtual size: 25.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 282KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/remcos_RAT_v3.8.0/server/RemcosServer.exe
.exe windows:6 windows x64 arch:x64

d9d5175c5951b2f5e681f77634514a7c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ws2_32

WSARecv

wsock32

ord1142

libssl-3-x64

SSL_get_shutdown

libcrypto-3-x64

BIO_ctrl_pending

kernel32

GetCurrentThreadId

msvcp140

?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

vcruntime140

_purecall

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_cexit

api-ms-win-crt-heap-l1-1-0

_set_new_mode

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-filesystem-l1-1-0

_unlock_file

api-ms-win-crt-string-l1-1-0

tolower

api-ms-win-crt-time-l1-1-0

_gmtime64

api-ms-win-crt-math-l1-1-0

ceilf

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

iphlpapi

GetInterfaceInfo

msvcrt

_wcsnicmp

psapi

GetMappedFileNameW

user32

GetWindow

advapi32

RegSetValueExA

shell32

SHGetFolderPathW

Sections

.text
Size: 202KB - Virtual size: 492KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/remcos_RAT_v3.8.0/server/libcrypto-3-x64.dll
.dll windows:5 windows x64 arch:x64

afa8a10163b2aa7831ee0e91bbe7d929

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\CFILES\Projects\WinSSL\openssl-3.0.5-temp_64\libcrypto-3-x64.pdb

Imports

ws2_32

select
getsockopt
getsockname
ioctlsocket
WSAGetLastError
WSACleanup
getservbyname
getservbyport
gethostbyname
htonl
gethostbyaddr
ntohs
inet_ntoa
inet_addr
htons
accept
bind
closesocket
connect
listen
setsockopt
socket
shutdown
recv
send
recvfrom
sendto
WSAStartup
WSASetLastError

advapi32

CryptReleaseContext
CryptAcquireContextW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
CryptGenRandom

user32

GetUserObjectInformationW
GetProcessWindowStation
MessageBoxW

kernel32

RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
ReadConsoleW
ReadConsoleA
SetConsoleMode
GetConsoleMode
TlsFree
RtlLookupFunctionEntry
TlsGetValue
TlsAlloc
GetCurrentThreadId
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
FindNextFileW
FindFirstFileW
FindClose
VirtualLock
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
TlsSetValue
UnhandledExceptionFilter
VirtualFree
VirtualProtect
VirtualAlloc
GetSystemInfo
RtlVirtualUnwind
ConvertFiberToThread
ConvertThreadToFiber
SwitchToFiber
DeleteFiber
CreateFiber
GetSystemDirectoryA
FreeLibrary
GetProcAddress
LoadLibraryA
FormatMessageA
Sleep
GetSystemTime
SystemTimeToFileTime
GetLastError
SetLastError
CloseHandle
LoadLibraryW
GetEnvironmentVariableW
GetStdHandle
GetFileType
WriteFile
GetModuleHandleW
MultiByteToWideChar
WideCharToMultiByte
GetACP
GetModuleHandleExW

vcruntime140

__current_exception
__C_specific_handler
wcsstr
__current_exception_context
strstr
strchr
memmove
strrchr
memcmp
memset
memcpy
memchr
__std_type_info_destroy_list

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
__stdio_common_vfprintf
__stdio_common_vsscanf
__stdio_common_vsprintf_s
__acrt_iob_func
__stdio_common_vswprintf
fputs
ftell
_wfopen
fopen
_setmode
fclose
feof
ferror
clearerr
setbuf
setvbuf
fwrite
fseek
fflush
fgets
fread
_fileno

api-ms-win-crt-convert-l1-1-0

strtoul
strtol
atoi

api-ms-win-crt-string-l1-1-0

tolower
strspn
strcspn
strcpy_s
_strdup
isspace
strncmp
strncpy_s
strcat_s
isdigit
strcmp
strncpy

api-ms-win-crt-time-l1-1-0

_gmtime64_s
_time64

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

free
calloc
realloc
malloc

api-ms-win-crt-runtime-l1-1-0

perror
_crt_atexit
_execute_onexit_table
_cexit
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
signal
_initterm
_initterm_e
_errno
strerror_s
terminate
_crt_at_quick_exit
_register_onexit_function
raise
_exit

api-ms-win-crt-filesystem-l1-1-0

_stat64i32
_chmod
_fstat64i32

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

ACCESS_DESCRIPTION_free
ACCESS_DESCRIPTION_it
ACCESS_DESCRIPTION_new
ADMISSIONS_free
ADMISSIONS_get0_admissionAuthority
ADMISSIONS_get0_namingAuthority
ADMISSIONS_get0_professionInfos
ADMISSIONS_it
ADMISSIONS_new
ADMISSIONS_set0_admissionAuthority
ADMISSIONS_set0_namingAuthority
ADMISSIONS_set0_professionInfos
ADMISSION_SYNTAX_free
ADMISSION_SYNTAX_get0_admissionAuthority
ADMISSION_SYNTAX_get0_contentsOfAdmissions
ADMISSION_SYNTAX_it
ADMISSION_SYNTAX_new
ADMISSION_SYNTAX_set0_admissionAuthority
ADMISSION_SYNTAX_set0_contentsOfAdmissions
AES_bi_ige_encrypt
AES_cbc_encrypt
AES_cfb128_encrypt
AES_cfb1_encrypt
AES_cfb8_encrypt
AES_decrypt
AES_ecb_encrypt
AES_encrypt
AES_ige_encrypt
AES_ofb128_encrypt
AES_options
AES_set_decrypt_key
AES_set_encrypt_key
AES_unwrap_key
AES_wrap_key
ASIdOrRange_free
ASIdOrRange_it
ASIdOrRange_new
ASIdentifierChoice_free
ASIdentifierChoice_it
ASIdentifierChoice_new
ASIdentifiers_free
ASIdentifiers_it
ASIdentifiers_new
ASN1_ANY_it
ASN1_BIT_STRING_check
ASN1_BIT_STRING_free
ASN1_BIT_STRING_get_bit
ASN1_BIT_STRING_it
ASN1_BIT_STRING_name_print
ASN1_BIT_STRING_new
ASN1_BIT_STRING_num_asc
ASN1_BIT_STRING_set
ASN1_BIT_STRING_set_asc
ASN1_BIT_STRING_set_bit
ASN1_BMPSTRING_free
ASN1_BMPSTRING_it
ASN1_BMPSTRING_new
ASN1_BOOLEAN_it
ASN1_ENUMERATED_free
ASN1_ENUMERATED_get
ASN1_ENUMERATED_get_int64
ASN1_ENUMERATED_it
ASN1_ENUMERATED_new
ASN1_ENUMERATED_set
ASN1_ENUMERATED_set_int64
ASN1_ENUMERATED_to_BN
ASN1_FBOOLEAN_it
ASN1_GENERALIZEDTIME_adj
ASN1_GENERALIZEDTIME_check
ASN1_GENERALIZEDTIME_dup
ASN1_GENERALIZEDTIME_free
ASN1_GENERALIZEDTIME_it
ASN1_GENERALIZEDTIME_new
ASN1_GENERALIZEDTIME_print
ASN1_GENERALIZEDTIME_set
ASN1_GENERALIZEDTIME_set_string
ASN1_GENERALSTRING_free
ASN1_GENERALSTRING_it
ASN1_GENERALSTRING_new
ASN1_IA5STRING_free
ASN1_IA5STRING_it
ASN1_IA5STRING_new
ASN1_INTEGER_cmp
ASN1_INTEGER_dup
ASN1_INTEGER_free
ASN1_INTEGER_get
ASN1_INTEGER_get_int64
ASN1_INTEGER_get_uint64
ASN1_INTEGER_it
ASN1_INTEGER_new
ASN1_INTEGER_set
ASN1_INTEGER_set_int64
ASN1_INTEGER_set_uint64
ASN1_INTEGER_to_BN
ASN1_ITEM_get
ASN1_ITEM_lookup
ASN1_NULL_free
ASN1_NULL_it
ASN1_NULL_new
ASN1_OBJECT_create
ASN1_OBJECT_free
ASN1_OBJECT_it
ASN1_OBJECT_new
ASN1_OCTET_STRING_NDEF_it
ASN1_OCTET_STRING_cmp
ASN1_OCTET_STRING_dup
ASN1_OCTET_STRING_free
ASN1_OCTET_STRING_it
ASN1_OCTET_STRING_new
ASN1_OCTET_STRING_set
ASN1_PCTX_free
ASN1_PCTX_get_cert_flags
ASN1_PCTX_get_flags
ASN1_PCTX_get_nm_flags
ASN1_PCTX_get_oid_flags
ASN1_PCTX_get_str_flags
ASN1_PCTX_new
ASN1_PCTX_set_cert_flags
ASN1_PCTX_set_flags
ASN1_PCTX_set_nm_flags
ASN1_PCTX_set_oid_flags
ASN1_PCTX_set_str_flags
ASN1_PRINTABLESTRING_free
ASN1_PRINTABLESTRING_it
ASN1_PRINTABLESTRING_new
ASN1_PRINTABLE_free
ASN1_PRINTABLE_it
ASN1_PRINTABLE_new
ASN1_PRINTABLE_type
ASN1_SCTX_free
ASN1_SCTX_get_app_data
ASN1_SCTX_get_flags
ASN1_SCTX_get_item
ASN1_SCTX_get_template
ASN1_SCTX_new
ASN1_SCTX_set_app_data
ASN1_SEQUENCE_ANY_it
ASN1_SEQUENCE_it
ASN1_SET_ANY_it
ASN1_STRING_TABLE_add
ASN1_STRING_TABLE_cleanup
ASN1_STRING_TABLE_get
ASN1_STRING_clear_free
ASN1_STRING_cmp
ASN1_STRING_copy
ASN1_STRING_data
ASN1_STRING_dup
ASN1_STRING_free
ASN1_STRING_get0_data
ASN1_STRING_get_default_mask
ASN1_STRING_length
ASN1_STRING_length_set
ASN1_STRING_new
ASN1_STRING_print
ASN1_STRING_print_ex
ASN1_STRING_print_ex_fp
ASN1_STRING_set
ASN1_STRING_set0
ASN1_STRING_set_by_NID
ASN1_STRING_set_default_mask
ASN1_STRING_set_default_mask_asc
ASN1_STRING_to_UTF8
ASN1_STRING_type
ASN1_STRING_type_new
ASN1_T61STRING_free
ASN1_T61STRING_it
ASN1_T61STRING_new
ASN1_TBOOLEAN_it
ASN1_TIME_adj
ASN1_TIME_check
ASN1_TIME_cmp_time_t
ASN1_TIME_compare
ASN1_TIME_diff
ASN1_TIME_dup
ASN1_TIME_free
ASN1_TIME_it
ASN1_TIME_new
ASN1_TIME_normalize
ASN1_TIME_print
ASN1_TIME_print_ex
ASN1_TIME_set
ASN1_TIME_set_string
ASN1_TIME_set_string_X509
ASN1_TIME_to_generalizedtime
ASN1_TIME_to_tm
ASN1_TYPE_cmp
ASN1_TYPE_free
ASN1_TYPE_get
ASN1_TYPE_get_int_octetstring
ASN1_TYPE_get_octetstring
ASN1_TYPE_new
ASN1_TYPE_pack_sequence
ASN1_TYPE_set
ASN1_TYPE_set1
ASN1_TYPE_set_int_octetstring
ASN1_TYPE_set_octetstring
ASN1_TYPE_unpack_sequence
ASN1_UNIVERSALSTRING_free
ASN1_UNIVERSALSTRING_it
ASN1_UNIVERSALSTRING_new
ASN1_UNIVERSALSTRING_to_string
ASN1_UTCTIME_adj
ASN1_UTCTIME_check
ASN1_UTCTIME_cmp_time_t
ASN1_UTCTIME_dup
ASN1_UTCTIME_free
ASN1_UTCTIME_it
ASN1_UTCTIME_new
ASN1_UTCTIME_print
ASN1_UTCTIME_set
ASN1_UTCTIME_set_string
ASN1_UTF8STRING_free
ASN1_UTF8STRING_it
ASN1_UTF8STRING_new
ASN1_VISIBLESTRING_free
ASN1_VISIBLESTRING_it
ASN1_VISIBLESTRING_new
ASN1_add_oid_module
ASN1_add_stable_module
ASN1_bn_print
ASN1_buf_print
ASN1_check_infinite_end
ASN1_const_check_infinite_end
ASN1_d2i_bio
ASN1_d2i_fp
ASN1_digest
ASN1_dup
ASN1_generate_nconf
ASN1_generate_v3
ASN1_get_object
ASN1_i2d_bio
ASN1_i2d_fp
ASN1_item_d2i
ASN1_item_d2i_bio
ASN1_item_d2i_bio_ex
ASN1_item_d2i_ex
ASN1_item_d2i_fp
ASN1_item_d2i_fp_ex
ASN1_item_digest
ASN1_item_dup
ASN1_item_ex_d2i
ASN1_item_ex_free
ASN1_item_ex_i2d
ASN1_item_ex_new
ASN1_item_free
ASN1_item_i2d
ASN1_item_i2d_bio
ASN1_item_i2d_fp
ASN1_item_i2d_mem_bio
ASN1_item_ndef_i2d
ASN1_item_new
ASN1_item_new_ex
ASN1_item_pack
ASN1_item_print
ASN1_item_sign
ASN1_item_sign_ctx
ASN1_item_sign_ex
ASN1_item_unpack
ASN1_item_verify
ASN1_item_verify_ctx
ASN1_item_verify_ex
ASN1_mbstring_copy
ASN1_mbstring_ncopy
ASN1_object_size
ASN1_parse
ASN1_parse_dump
ASN1_put_eoc
ASN1_put_object
ASN1_sign
ASN1_str2mask
ASN1_tag2bit
ASN1_tag2str
ASN1_verify
ASRange_free
ASRange_it
ASRange_new
ASYNC_WAIT_CTX_clear_fd
ASYNC_WAIT_CTX_free
ASYNC_WAIT_CTX_get_all_fds
ASYNC_WAIT_CTX_get_callback
ASYNC_WAIT_CTX_get_changed_fds
ASYNC_WAIT_CTX_get_fd
ASYNC_WAIT_CTX_get_status
ASYNC_WAIT_CTX_new
ASYNC_WAIT_CTX_set_callback
ASYNC_WAIT_CTX_set_status
ASYNC_WAIT_CTX_set_wait_fd
ASYNC_block_pause
ASYNC_cleanup_thread
ASYNC_get_current_job
ASYNC_get_wait_ctx
ASYNC_init_thread
ASYNC_is_capable
ASYNC_pause_job
ASYNC_start_job
ASYNC_unblock_pause
AUTHORITY_INFO_ACCESS_free
AUTHORITY_INFO_ACCESS_it
AUTHORITY_INFO_ACCESS_new
AUTHORITY_KEYID_free
AUTHORITY_KEYID_it
AUTHORITY_KEYID_new
BASIC_CONSTRAINTS_free
BASIC_CONSTRAINTS_it
BASIC_CONSTRAINTS_new
BF_cbc_encrypt
BF_cfb64_encrypt
BF_decrypt
BF_ecb_encrypt
BF_encrypt
BF_ofb64_encrypt
BF_options
BF_set_key
BIGNUM_it
BIO_ADDRINFO_address
BIO_ADDRINFO_family
BIO_ADDRINFO_free
BIO_ADDRINFO_next
BIO_ADDRINFO_protocol
BIO_ADDRINFO_socktype
BIO_ADDR_clear
BIO_ADDR_family
BIO_ADDR_free
BIO_ADDR_hostname_string
BIO_ADDR_new
BIO_ADDR_path_string
BIO_ADDR_rawaddress
BIO_ADDR_rawmake
BIO_ADDR_rawport
BIO_ADDR_service_string
BIO_accept
BIO_accept_ex
BIO_asn1_get_prefix
BIO_asn1_get_suffix
BIO_asn1_set_prefix
BIO_asn1_set_suffix
BIO_bind
BIO_callback_ctrl
BIO_clear_flags
BIO_closesocket
BIO_connect
BIO_copy_next_retry
BIO_ctrl
BIO_ctrl_get_read_request
BIO_ctrl_get_write_guarantee
BIO_ctrl_pending
BIO_ctrl_reset_read_request
BIO_ctrl_wpending
BIO_debug_callback
BIO_debug_callback_ex
BIO_dgram_non_fatal_error
BIO_do_connect_retry
BIO_dump
BIO_dump_cb
BIO_dump_fp
BIO_dump_indent
BIO_dump_indent_cb
BIO_dump_indent_fp
BIO_dup_chain
BIO_f_asn1
BIO_f_base64
BIO_f_buffer
BIO_f_cipher
BIO_f_linebuffer
BIO_f_md
BIO_f_nbio_test
BIO_f_null
BIO_f_prefix
BIO_f_readbuffer
BIO_f_reliable
BIO_fd_non_fatal_error
BIO_fd_should_retry
BIO_find_type
BIO_free
BIO_free_all
BIO_get_accept_socket
BIO_get_callback
BIO_get_callback_arg
BIO_get_callback_ex
BIO_get_data
BIO_get_ex_data
BIO_get_host_ip
BIO_get_init
BIO_get_line
BIO_get_new_index
BIO_get_port
BIO_get_retry_BIO
BIO_get_retry_reason
BIO_get_shutdown
BIO_gethostbyname
BIO_gets
BIO_hex_string
BIO_indent
BIO_int_ctrl
BIO_listen
BIO_lookup
BIO_lookup_ex
BIO_meth_free
BIO_meth_get_callback_ctrl
BIO_meth_get_create
BIO_meth_get_ctrl
BIO_meth_get_destroy
BIO_meth_get_gets
BIO_meth_get_puts
BIO_meth_get_read
BIO_meth_get_read_ex
BIO_meth_get_write
BIO_meth_get_write_ex
BIO_meth_new
BIO_meth_set_callback_ctrl
BIO_meth_set_create
BIO_meth_set_ctrl
BIO_meth_set_destroy
BIO_meth_set_gets
BIO_meth_set_puts
BIO_meth_set_read
BIO_meth_set_read_ex
BIO_meth_set_write
BIO_meth_set_write_ex
BIO_method_name
BIO_method_type
BIO_new
BIO_new_CMS
BIO_new_NDEF
BIO_new_PKCS7
BIO_new_accept
BIO_new_bio_pair
BIO_new_connect
BIO_new_dgram
BIO_new_ex
BIO_new_fd
BIO_new_file
BIO_new_fp
BIO_new_from_core_bio
BIO_new_mem_buf
BIO_new_socket
BIO_next
BIO_nread
BIO_nread0
BIO_number_read
BIO_number_written
BIO_nwrite
BIO_nwrite0
BIO_parse_hostserv
BIO_pop
BIO_printf
BIO_ptr_ctrl
BIO_push
BIO_puts
BIO_read
BIO_read_ex
BIO_s_accept
BIO_s_bio
BIO_s_connect
BIO_s_core
BIO_s_datagram
BIO_s_fd
BIO_s_file
BIO_s_log
BIO_s_mem
BIO_s_null
BIO_s_secmem
BIO_s_socket
BIO_set_callback
BIO_set_callback_arg
BIO_set_callback_ex
BIO_set_cipher
BIO_set_data
BIO_set_ex_data
BIO_set_flags
BIO_set_init
BIO_set_next
BIO_set_retry_reason
BIO_set_shutdown
BIO_set_tcp_ndelay
BIO_snprintf
BIO_sock_error
BIO_sock_info
BIO_sock_init
BIO_sock_non_fatal_error
BIO_sock_should_retry
BIO_socket
BIO_socket_ioctl
BIO_socket_nbio
BIO_socket_wait
BIO_test_flags
BIO_up_ref
BIO_vfree
BIO_vprintf
BIO_vsnprintf
BIO_wait
BIO_write
BIO_write_ex
BN_BLINDING_convert
BN_BLINDING_convert_ex
BN_BLINDING_create_param
BN_BLINDING_free
BN_BLINDING_get_flags
BN_BLINDING_invert
BN_BLINDING_invert_ex

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 337B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/remcos_RAT_v3.8.0/server/libssl-3-x64.dll
.dll windows:5 windows x64 arch:x64

a5db4944ca4c6446f5fbd8bbdc2b1577

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\CFILES\Projects\WinSSL\openssl-3.0.5-temp_64\libssl-3-x64.pdb

Imports

libcrypto-3-x64

OPENSSL_cleanse
COMP_CTX_new
COMP_CTX_free
BIO_s_mem
OSSL_PARAM_construct_octet_string
OSSL_PARAM_construct_end
EVP_MD_get_type
EVP_MD_get_size
EVP_MD_CTX_get0_md
EVP_CIPHER_get0_provider
EVP_CIPHER_get_key_length
EVP_CIPHER_get_iv_length
EVP_MD_CTX_set_params
EVP_MD_CTX_copy_ex
EVP_DigestFinal_ex
EVP_CipherInit_ex
EVP_CIPHER_CTX_new
EVP_CIPHER_CTX_reset
OPENSSL_sk_num
OPENSSL_sk_value
OPENSSL_sk_new_reserve
OPENSSL_sk_pop_free
CRYPTO_memdup
CRYPTO_strdup
EVP_PKEY_CTX_set_dh_pad
EVP_PKEY_is_a
EVP_PKEY_up_ref
EVP_PKEY_free
EVP_PKEY_CTX_new_from_name
EVP_PKEY_CTX_new_from_pkey
EVP_PKEY_CTX_free
EVP_PKEY_derive_init
EVP_PKEY_derive_set_peer
EVP_PKEY_derive
EVP_PKEY_encapsulate_init
EVP_PKEY_encapsulate
EVP_PKEY_decapsulate_init
EVP_PKEY_decapsulate
EVP_PKEY_paramgen_init
EVP_PKEY_paramgen
EVP_PKEY_keygen_init
EVP_PKEY_keygen
EVP_PKEY_CTX_set_group_name
X509_NAME_free
X509_free
RAND_bytes_ex
INT32_it
ZINT32_it
UINT32_it
ZUINT32_it
ZINT64_it
ZUINT64_it
ASN1_OCTET_STRING_it
X509_it
CRYPTO_strndup
ASN1_item_free
ASN1_item_d2i
ASN1_item_i2d
OPENSSL_DIR_read
OPENSSL_DIR_end
OPENSSL_sk_shift
OPENSSL_sk_pop
OPENSSL_sk_set_cmp_func
CRYPTO_THREAD_lock_new
CRYPTO_THREAD_lock_free
CRYPTO_get_ex_new_index
CRYPTO_THREAD_run_once
OSSL_LIB_CTX_set0_default
BIO_s_file
BIO_snprintf
OBJ_nid2ln
OBJ_nid2sn
OPENSSL_LH_new
OPENSSL_LH_free
OPENSSL_LH_insert
OPENSSL_LH_retrieve
X509_verify_cert
X509_STORE_new
X509_STORE_free
X509_STORE_up_ref
X509_STORE_CTX_new_ex
X509_STORE_CTX_free
X509_STORE_CTX_init
X509_STORE_CTX_set_verify_cb
X509_STORE_add_cert
X509_STORE_CTX_set_ex_data
X509_STORE_CTX_get_error
X509_STORE_CTX_get0_chain
X509_STORE_CTX_get1_chain
X509_STORE_CTX_set_flags
X509_STORE_CTX_get0_param
X509_STORE_CTX_set_default
X509_STORE_CTX_set0_dane
X509_VERIFY_PARAM_set1
X509_VERIFY_PARAM_set_auth_level
X509_VERIFY_PARAM_move_peername
X509_verify_cert_error_string
X509_NAME_dup
i2d_X509_NAME
X509_new_ex
X509_get_subject_name
X509_up_ref
X509_chain_up_ref
X509_cmp
X509_NAME_hash_ex
PEM_read_bio_X509
OSSL_STORE_open
OSSL_STORE_load
OSSL_STORE_eof
OSSL_STORE_error
OSSL_STORE_close
OSSL_STORE_INFO_get_type
OSSL_STORE_INFO_get0_NAME
OSSL_STORE_INFO_get0_CERT
OSSL_STORE_INFO_free
X509_get_extension_flags
OPENSSL_sk_new
OPENSSL_sk_delete
OPENSSL_sk_unshift
OPENSSL_sk_dup
OPENSSL_sk_sort
COMP_get_type
COMP_get_name
COMP_zlib
EVP_CIPHER_get_block_size
EVP_CIPHER_get_flags
EVP_CIPHER_get_mode
EVP_CIPHER_fetch
EVP_get_cipherbyname
EVP_get_digestbyname
EVP_PKEY_asn1_find_str
EVP_PKEY_asn1_get0_info
EVP_SIGNATURE_free
EVP_SIGNATURE_fetch
EVP_KEYEXCH_free
EVP_KEYEXCH_fetch
CONF_parse_list
ERR_set_mark
ERR_pop_to_mark
OPENSSL_strcasecmp
OPENSSL_strncasecmp
ERR_clear_last_mark
X509_STORE_load_path
X509_STORE_load_file_ex
X509_STORE_load_store_ex
OSSL_DECODER_CTX_free
OSSL_DECODER_from_bio
OSSL_DECODER_CTX_new_for_pkey
ERR_reason_error_string
ERR_load_strings_const
OPENSSL_init_crypto
OPENSSL_atexit
OPENSSL_sk_insert
CRYPTO_THREAD_read_lock
CRYPTO_THREAD_write_lock
CRYPTO_THREAD_unlock
CRYPTO_new_ex_data
CRYPTO_dup_ex_data
CRYPTO_free_ex_data
CRYPTO_set_ex_data
CRYPTO_get_ex_data
CRYPTO_realloc
CRYPTO_secure_zalloc
CRYPTO_secure_free
BUF_MEM_free
COMP_CTX_get_method
BIO_int_ctrl
BIO_pop
BIO_free_all
BIO_s_socket
ASN1_OCTET_STRING_free
OPENSSL_LH_num_items
ERR_peek_error
OBJ_bsearch_
EVP_MD_get0_provider
EVP_CIPHER_up_ref
EVP_CIPHER_free
EVP_MD_fetch
EVP_MD_up_ref
EVP_MD_free
EVP_CIPHER_CTX_free
EVP_PKEY_get_security_bits
X509_STORE_add_lookup
X509_LOOKUP_hash_dir
X509_LOOKUP_file
X509_LOOKUP_store
X509_LOOKUP_ctrl
X509_LOOKUP_ctrl_ex
X509_STORE_set_default_paths_ex
X509_VERIFY_PARAM_new
X509_VERIFY_PARAM_free
X509_VERIFY_PARAM_inherit
X509_VERIFY_PARAM_set_purpose
X509_VERIFY_PARAM_set_trust
X509_VERIFY_PARAM_set_depth
X509_VERIFY_PARAM_set1_host
X509_VERIFY_PARAM_add1_host
X509_VERIFY_PARAM_set_hostflags
X509_VERIFY_PARAM_get0_peername
X509_VERIFY_PARAM_get1_ip_asc
X509_VERIFY_PARAM_set1_ip_asc
X509_VERIFY_PARAM_get_depth
d2i_PUBKEY
X509_EXTENSION_free
d2i_X509
X509_get0_pubkey
X509_check_private_key
X509_get_ext_d2i
ASYNC_WAIT_CTX_new
ASYNC_WAIT_CTX_free
ASYNC_WAIT_CTX_get_all_fds
ASYNC_WAIT_CTX_set_callback
ASYNC_WAIT_CTX_get_status
ASYNC_WAIT_CTX_get_changed_fds
ASYNC_start_job
SHA224_Init
CT_POLICY_EVAL_CTX_new_ex
CT_POLICY_EVAL_CTX_free
CT_POLICY_EVAL_CTX_set1_cert
CT_POLICY_EVAL_CTX_set1_issuer
CT_POLICY_EVAL_CTX_set_shared_CTLOG_STORE
CT_POLICY_EVAL_CTX_set_time
SCT_LIST_free
SCT_set_source
SCT_get_validation_status
SCT_LIST_validate
o2i_SCT_LIST
CTLOG_STORE_new_ex
CTLOG_STORE_free
CTLOG_STORE_load_file
CTLOG_STORE_load_default_file
X509_get_key_usage
a2i_IPADDRESS
RAND_priv_bytes_ex
OCSP_response_get1_basic
OCSP_resp_count
OCSP_resp_get0
OCSP_SINGLERESP_get1_ext_d2i
OCSP_BASICRESP_free
OCSP_RESPID_free
CRYPTO_clear_free
d2i_OCSP_RESPONSE
conf_ssl_get
conf_ssl_name_find
conf_ssl_get_cmd
ERR_peek_last_error
EVP_PKEY_can_sign
d2i_PrivateKey_ex
EVP_PKEY_copy_parameters
EVP_PKEY_missing_parameters
EVP_PKEY_eq
d2i_X509_bio
d2i_PrivateKey_ex_bio
X509_get_pubkey
PEM_read_bio
PEM_read_bio_X509_AUX
PEM_read_bio_PrivateKey_ex
RSA_free
RSA_up_ref
d2i_RSAPrivateKey
EVP_PKEY_assign
EVP_PKEY_new
d2i_RSAPrivateKey_bio
PEM_read_bio_RSAPrivateKey
OPENSSL_LH_delete
OPENSSL_LH_get_down_load
OPENSSL_LH_set_down_load
PEM_ASN1_read_bio
PEM_ASN1_write_bio
PEM_ASN1_read
PEM_ASN1_write
BIO_puts
BIO_dump_indent
BIO_printf
OSSL_PARAM_construct_int
OSSL_PARAM_construct_size_t
OSSL_PARAM_construct_utf8_string
EVP_MD_get0_name
EVP_DigestSignInit_ex
EVP_CIPHER_CTX_ctrl
EVP_CIPHER_CTX_set_params
EVP_PKEY_new_mac_key
EVP_PKEY_new_raw_private_key_ex
EVP_KDF_free
EVP_KDF_fetch
EVP_KDF_CTX_new
EVP_KDF_CTX_free
EVP_KDF_derive
CRYPTO_memcmp
BN_free
BN_get_rfc2409_prime_1024
BN_get_rfc3526_prime_2048
BN_get_rfc3526_prime_3072
BN_get_rfc3526_prime_4096
BN_get_rfc3526_prime_8192
OBJ_txt2nid
OBJ_ln2nid
OBJ_sn2nid
OSSL_PARAM_locate_const
OSSL_PARAM_get_int
OSSL_PARAM_get_uint
OSSL_PARAM_free
EVP_CIPHER_CTX_get_iv_length
EVP_DecryptInit_ex
EVP_DecryptUpdate
EVP_DecryptFinal
EVP_MAC_fetch
EVP_MAC_free
EVP_MAC_CTX_new
EVP_MAC_CTX_free
EVP_MAC_CTX_get_mac_size
EVP_MAC_init
EVP_MAC_update
EVP_MAC_final
EVP_PKEY_get_id
EVP_PKEY_get_bits
EVP_PKEY_get_size
EVP_PKEY_set_type
EVP_PKEY_digestsign_supports_digest
EVP_PKEY_set1_encoded_public_key
EVP_KEYMGMT_fetch
EVP_KEYMGMT_free
EVP_KEYMGMT_get0_provider
EVP_PKEY_fromdata_init
EVP_PKEY_fromdata
EVP_PKEY_get_ec_point_conv_form
EVP_PKEY_get_field_type
EVP_PKEY_get_group_name
X509_get_signature_info
X509_get_signature_nid
X509_get_issuer_name
X509_chain_check_suiteb
X509_NAME_cmp
OSSL_PROVIDER_do_all
OSSL_PROVIDER_get_capabilities
OSSL_PARAM_BLD_new
OSSL_PARAM_BLD_to_param
OSSL_PARAM_BLD_free
OSSL_PARAM_BLD_push_uint
OSSL_PARAM_BLD_push_BN
BIO_indent
d2i_X509_NAME
X509_NAME_print_ex
X509_print_ex
PEM_write_bio_X509
EVP_Q_mac
EC_GROUP_get_curve_name
EC_KEY_get0_group
EVP_PKEY_set1_DH
ENGINE_get_ssl_client_cert_function
ENGINE_get_cipher
ENGINE_get_digest
ENGINE_init
ENGINE_finish
ENGINE_load_ssl_client_cert
ENGINE_get_cipher_engine
ENGINE_get_digest_engine
HMAC_size
HMAC_CTX_new
HMAC_CTX_free
HMAC_Init_ex
HMAC_Update
HMAC_Final
BN_is_zero
BN_num_bits
BN_clear_free
BN_copy
BN_bin2bn
BN_bn2bin
BN_dup
BN_ucmp
SRP_create_verifier_BN_ex
SRP_check_known_gN_param
SRP_get_default_gN
SRP_Calc_server_key
SRP_Calc_B_ex
SRP_Verify_A_mod_N
SRP_Calc_u_ex
SRP_Calc_x_ex
SRP_Calc_A
SRP_Calc_client_key_ex
SRP_Verify_B_mod_N
EVP_CIPHER_CTX_get0_cipher
COMP_compress_block
COMP_expand_block
OSSL_PARAM_construct_octet_ptr
EVP_MD_CTX_get_pkey_ctx
EVP_CIPHER_CTX_get_block_size
EVP_Cipher
EVP_MD_CTX_ctrl
EVP_MD_CTX_copy
EVP_CipherUpdate
EVP_DigestSignUpdate
EVP_DigestSignFinal
EVP_CIPHER_CTX_get_params
EVP_PKEY_CTX_set_params
EVP_CipherFinal_ex
EVP_PKEY_get1_encoded_public_key
i2d_X509_EXTENSIONS
i2d_OCSP_RESPID
EVP_DigestSign
d2i_X509_EXTENSIONS
d2i_OCSP_RESPID
BUF_MEM_new
BUF_MEM_grow_clean
ERR_vset_error
EVP_Digest
EVP_DigestInit
EVP_DigestVerify
EVP_DigestVerifyInit_ex
EVP_PKEY_CTX_ctrl
EVP_PKEY_encrypt_init
EVP_PKEY_encrypt
EVP_PKEY_public_check
EVP_PKEY_param_check_quick
EVP_PKEY_CTX_set_rsa_padding
EVP_PKEY_CTX_set_rsa_pss_saltlen
BUF_reverse
EVP_DigestVerifyUpdate
EVP_DigestVerifyFinal
i2d_X509
ASN1_ANY_it
ASN1_TYPE_get
ASN1_item_new
OSSL_PARAM_construct_uint
EVP_EncryptInit_ex
EVP_EncryptUpdate
EVP_EncryptFinal
EVP_PKEY_decrypt_init
EVP_PKEY_decrypt
EVP_PKEY_get_bn_param
SHA1_Transform
SHA1_Init
MD5_Transform
MD5_Init
EVP_DigestFinal
EVP_DigestUpdate
EVP_DigestInit_ex
EVP_MD_CTX_free
EVP_MD_CTX_new
EVP_MD_is_a
CRYPTO_malloc
OPENSSL_sk_push
OPENSSL_sk_find
OPENSSL_sk_free
OPENSSL_sk_new_null
ERR_clear_error
BIO_ADDR_clear
BIO_ADDR_free
BIO_ADDR_new
BIO_read
BIO_test_flags
BIO_copy_next_retry
BIO_f_buffer
BIO_s_connect
BIO_set_retry_reason
BIO_get_retry_reason
BIO_set_next
BIO_next
BIO_find_type
BIO_push
BIO_callback_ctrl
BIO_ctrl
BIO_write
BIO_up_ref
BIO_get_shutdown
SHA512_Transform
SHA512_Init
SHA384_Init
BIO_set_shutdown
BIO_get_init
BIO_set_init
BIO_get_data
BIO_set_data
BIO_free
BIO_new
BIO_method_type
BIO_clear_flags
BIO_set_flags
ERR_set_error
ERR_set_debug
ERR_new
BUF_MEM_grow
CRYPTO_free
SHA256_Transform
OCSP_RESPONSE_free
SHA256_Init
ASYNC_get_current_job
CRYPTO_zalloc

kernel32

GetCurrentThreadId
SetLastError
GetSystemTime
SystemTimeToFileTime
GetLastError
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentProcessId
DisableThreadLibraryCalls
GetStartupInfoW
GetModuleHandleW
InitializeSListHead
IsDebuggerPresent

vcruntime140

strstr
memchr
__std_type_info_destroy_list
memset
memcpy
memcmp
memmove
__current_exception
__current_exception_context
__C_specific_handler
strchr

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-string-l1-1-0

strncmp

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-runtime-l1-1-0

_errno
terminate
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

Exports

Exports

BIO_f_ssl
BIO_new_buffer_ssl_connect
BIO_new_ssl
BIO_new_ssl_connect
BIO_ssl_copy_session_id
BIO_ssl_shutdown
DTLS_client_method
DTLS_get_data_mtu
DTLS_method
DTLS_server_method
DTLS_set_timer_cb
DTLSv1_2_client_method
DTLSv1_2_method
DTLSv1_2_server_method
DTLSv1_client_method
DTLSv1_listen
DTLSv1_method
DTLSv1_server_method
ERR_load_SSL_strings
OPENSSL_cipher_name
OPENSSL_init_ssl
OSSL_default_cipher_list
OSSL_default_ciphersuites
PEM_read_SSL_SESSION
PEM_read_bio_SSL_SESSION
PEM_write_SSL_SESSION
PEM_write_bio_SSL_SESSION
SRP_Calc_A_param
SSL_CIPHER_description
SSL_CIPHER_find
SSL_CIPHER_get_auth_nid
SSL_CIPHER_get_bits
SSL_CIPHER_get_cipher_nid
SSL_CIPHER_get_digest_nid
SSL_CIPHER_get_handshake_digest
SSL_CIPHER_get_id
SSL_CIPHER_get_kx_nid
SSL_CIPHER_get_name
SSL_CIPHER_get_protocol_id
SSL_CIPHER_get_version
SSL_CIPHER_is_aead
SSL_CIPHER_standard_name
SSL_COMP_add_compression_method
SSL_COMP_get0_name
SSL_COMP_get_compression_methods
SSL_COMP_get_id
SSL_COMP_get_name
SSL_COMP_set0_compression_methods
SSL_CONF_CTX_clear_flags
SSL_CONF_CTX_finish
SSL_CONF_CTX_free
SSL_CONF_CTX_new
SSL_CONF_CTX_set1_prefix
SSL_CONF_CTX_set_flags
SSL_CONF_CTX_set_ssl
SSL_CONF_CTX_set_ssl_ctx
SSL_CONF_cmd
SSL_CONF_cmd_argv
SSL_CONF_cmd_value_type
SSL_CTX_SRP_CTX_free
SSL_CTX_SRP_CTX_init
SSL_CTX_add1_to_CA_list
SSL_CTX_add_client_CA
SSL_CTX_add_client_custom_ext
SSL_CTX_add_custom_ext
SSL_CTX_add_server_custom_ext
SSL_CTX_add_session
SSL_CTX_callback_ctrl
SSL_CTX_check_private_key
SSL_CTX_clear_options
SSL_CTX_config
SSL_CTX_ct_is_enabled
SSL_CTX_ctrl
SSL_CTX_dane_clear_flags
SSL_CTX_dane_enable
SSL_CTX_dane_mtype_set
SSL_CTX_dane_set_flags
SSL_CTX_enable_ct
SSL_CTX_flush_sessions
SSL_CTX_free
SSL_CTX_get0_CA_list
SSL_CTX_get0_certificate
SSL_CTX_get0_ctlog_store
SSL_CTX_get0_param
SSL_CTX_get0_privatekey
SSL_CTX_get0_security_ex_data
SSL_CTX_get_cert_store
SSL_CTX_get_ciphers
SSL_CTX_get_client_CA_list
SSL_CTX_get_client_cert_cb
SSL_CTX_get_default_passwd_cb
SSL_CTX_get_default_passwd_cb_userdata
SSL_CTX_get_ex_data
SSL_CTX_get_info_callback
SSL_CTX_get_keylog_callback
SSL_CTX_get_max_early_data
SSL_CTX_get_num_tickets
SSL_CTX_get_options
SSL_CTX_get_quiet_shutdown
SSL_CTX_get_record_padding_callback_arg
SSL_CTX_get_recv_max_early_data
SSL_CTX_get_security_callback
SSL_CTX_get_security_level
SSL_CTX_get_ssl_method
SSL_CTX_get_timeout
SSL_CTX_get_verify_callback
SSL_CTX_get_verify_depth
SSL_CTX_get_verify_mode
SSL_CTX_has_client_custom_ext
SSL_CTX_load_verify_dir
SSL_CTX_load_verify_file
SSL_CTX_load_verify_locations
SSL_CTX_load_verify_store
SSL_CTX_new
SSL_CTX_new_ex
SSL_CTX_remove_session
SSL_CTX_sess_get_get_cb
SSL_CTX_sess_get_new_cb
SSL_CTX_sess_get_remove_cb
SSL_CTX_sess_set_get_cb
SSL_CTX_sess_set_new_cb
SSL_CTX_sess_set_remove_cb
SSL_CTX_sessions
SSL_CTX_set0_CA_list
SSL_CTX_set0_ctlog_store
SSL_CTX_set0_security_ex_data
SSL_CTX_set0_tmp_dh_pkey
SSL_CTX_set1_cert_store
SSL_CTX_set1_param
SSL_CTX_set_allow_early_data_cb
SSL_CTX_set_alpn_protos
SSL_CTX_set_alpn_select_cb
SSL_CTX_set_async_callback
SSL_CTX_set_async_callback_arg
SSL_CTX_set_block_padding
SSL_CTX_set_cert_cb
SSL_CTX_set_cert_store
SSL_CTX_set_cert_verify_callback
SSL_CTX_set_cipher_list
SSL_CTX_set_ciphersuites
SSL_CTX_set_client_CA_list
SSL_CTX_set_client_cert_cb
SSL_CTX_set_client_cert_engine
SSL_CTX_set_client_hello_cb
SSL_CTX_set_cookie_generate_cb
SSL_CTX_set_cookie_verify_cb
SSL_CTX_set_ct_validation_callback
SSL_CTX_set_ctlog_list_file
SSL_CTX_set_default_ctlog_list_file
SSL_CTX_set_default_passwd_cb
SSL_CTX_set_default_passwd_cb_userdata
SSL_CTX_set_default_read_buffer_len
SSL_CTX_set_default_verify_dir
SSL_CTX_set_default_verify_file
SSL_CTX_set_default_verify_paths
SSL_CTX_set_default_verify_store
SSL_CTX_set_ex_data
SSL_CTX_set_generate_session_id
SSL_CTX_set_info_callback
SSL_CTX_set_keylog_callback
SSL_CTX_set_max_early_data
SSL_CTX_set_msg_callback
SSL_CTX_set_next_proto_select_cb
SSL_CTX_set_next_protos_advertised_cb
SSL_CTX_set_not_resumable_session_callback
SSL_CTX_set_num_tickets
SSL_CTX_set_options
SSL_CTX_set_post_handshake_auth
SSL_CTX_set_psk_client_callback
SSL_CTX_set_psk_find_session_callback
SSL_CTX_set_psk_server_callback
SSL_CTX_set_psk_use_session_callback
SSL_CTX_set_purpose
SSL_CTX_set_quiet_shutdown
SSL_CTX_set_record_padding_callback
SSL_CTX_set_record_padding_callback_arg
SSL_CTX_set_recv_max_early_data
SSL_CTX_set_security_callback
SSL_CTX_set_security_level
SSL_CTX_set_session_id_context
SSL_CTX_set_session_ticket_cb
SSL_CTX_set_srp_cb_arg
SSL_CTX_set_srp_client_pwd_callback
SSL_CTX_set_srp_password
SSL_CTX_set_srp_strength
SSL_CTX_set_srp_username
SSL_CTX_set_srp_username_callback
SSL_CTX_set_srp_verify_param_callback
SSL_CTX_set_ssl_version
SSL_CTX_set_stateless_cookie_generate_cb
SSL_CTX_set_stateless_cookie_verify_cb
SSL_CTX_set_timeout
SSL_CTX_set_tlsext_max_fragment_length
SSL_CTX_set_tlsext_ticket_key_evp_cb
SSL_CTX_set_tlsext_use_srtp
SSL_CTX_set_tmp_dh_callback
SSL_CTX_set_trust
SSL_CTX_set_verify
SSL_CTX_set_verify_depth
SSL_CTX_up_ref
SSL_CTX_use_PrivateKey
SSL_CTX_use_PrivateKey_ASN1
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_RSAPrivateKey
SSL_CTX_use_RSAPrivateKey_ASN1
SSL_CTX_use_RSAPrivateKey_file
SSL_CTX_use_cert_and_key
SSL_CTX_use_certificate
SSL_CTX_use_certificate_ASN1
SSL_CTX_use_certificate_chain_file
SSL_CTX_use_certificate_file
SSL_CTX_use_psk_identity_hint
SSL_CTX_use_serverinfo
SSL_CTX_use_serverinfo_ex
SSL_CTX_use_serverinfo_file
SSL_SESSION_dup
SSL_SESSION_free
SSL_SESSION_get0_alpn_selected
SSL_SESSION_get0_cipher
SSL_SESSION_get0_hostname
SSL_SESSION_get0_id_context
SSL_SESSION_get0_peer
SSL_SESSION_get0_ticket
SSL_SESSION_get0_ticket_appdata
SSL_SESSION_get_compress_id
SSL_SESSION_get_ex_data
SSL_SESSION_get_id
SSL_SESSION_get_master_key
SSL_SESSION_get_max_early_data
SSL_SESSION_get_max_fragment_length
SSL_SESSION_get_protocol_version
SSL_SESSION_get_ticket_lifetime_hint
SSL_SESSION_get_time
SSL_SESSION_get_timeout
SSL_SESSION_has_ticket
SSL_SESSION_is_resumable
SSL_SESSION_new
SSL_SESSION_print
SSL_SESSION_print_fp
SSL_SESSION_print_keylog
SSL_SESSION_set1_alpn_selected
SSL_SESSION_set1_hostname
SSL_SESSION_set1_id
SSL_SESSION_set1_id_context
SSL_SESSION_set1_master_key
SSL_SESSION_set1_ticket_appdata
SSL_SESSION_set_cipher
SSL_SESSION_set_ex_data
SSL_SESSION_set_max_early_data
SSL_SESSION_set_protocol_version
SSL_SESSION_set_time
SSL_SESSION_set_timeout
SSL_SESSION_up_ref
SSL_SRP_CTX_free
SSL_SRP_CTX_init
SSL_accept
SSL_add1_host
SSL_add1_to_CA_list
SSL_add_client_CA
SSL_add_dir_cert_subjects_to_stack
SSL_add_file_cert_subjects_to_stack
SSL_add_ssl_module
SSL_add_store_cert_subjects_to_stack
SSL_alert_desc_string
SSL_alert_desc_string_long
SSL_alert_type_string
SSL_alert_type_string_long
SSL_alloc_buffers
SSL_bytes_to_cipher_list
SSL_callback_ctrl
SSL_certs_clear
SSL_check_chain
SSL_check_private_key
SSL_clear
SSL_clear_options
SSL_client_hello_get0_ciphers
SSL_client_hello_get0_compression_methods
SSL_client_hello_get0_ext
SSL_client_hello_get0_legacy_version
SSL_client_hello_get0_random
SSL_client_hello_get0_session_id
SSL_client_hello_get1_extensions_present
SSL_client_hello_isv2
SSL_client_version
SSL_config
SSL_connect
SSL_copy_session_id
SSL_ct_is_enabled
SSL_ctrl
SSL_dane_clear_flags
SSL_dane_enable
SSL_dane_set_flags
SSL_dane_tlsa_add
SSL_do_handshake
SSL_dup
SSL_dup_CA_list
SSL_enable_ct
SSL_export_keying_material
SSL_export_keying_material_early
SSL_extension_supported
SSL_free
SSL_free_buffers
SSL_get0_CA_list
SSL_get0_alpn_selected
SSL_get0_dane
SSL_get0_dane_authority
SSL_get0_dane_tlsa
SSL_get0_next_proto_negotiated
SSL_get0_param
SSL_get0_peer_CA_list
SSL_get0_peer_certificate
SSL_get0_peer_scts
SSL_get0_peername
SSL_get0_security_ex_data
SSL_get0_verified_chain
SSL_get1_peer_certificate
SSL_get1_session
SSL_get1_supported_ciphers
SSL_get_SSL_CTX
SSL_get_all_async_fds
SSL_get_async_status
SSL_get_certificate
SSL_get_changed_async_fds
SSL_get_cipher_list
SSL_get_ciphers
SSL_get_client_CA_list
SSL_get_client_ciphers
SSL_get_client_random
SSL_get_current_cipher
SSL_get_current_compression
SSL_get_current_expansion
SSL_get_default_passwd_cb
SSL_get_default_passwd_cb_userdata
SSL_get_default_timeout
SSL_get_early_data_status
SSL_get_error
SSL_get_ex_data
SSL_get_ex_data_X509_STORE_CTX_idx
SSL_get_fd
SSL_get_finished
SSL_get_info_callback
SSL_get_key_update_type
SSL_get_max_early_data
SSL_get_num_tickets
SSL_get_options
SSL_get_peer_cert_chain
SSL_get_peer_finished
SSL_get_peer_signature_type_nid
SSL_get_pending_cipher
SSL_get_privatekey
SSL_get_psk_identity
SSL_get_psk_identity_hint
SSL_get_quiet_shutdown
SSL_get_rbio
SSL_get_read_ahead
SSL_get_record_padding_callback_arg
SSL_get_recv_max_early_data
SSL_get_rfd
SSL_get_security_callback
SSL_get_security_level
SSL_get_selected_srtp_profile
SSL_get_server_random
SSL_get_servername
SSL_get_servername_type
SSL_get_session
SSL_get_shared_ciphers
SSL_get_shared_sigalgs
SSL_get_shutdown
SSL_get_sigalgs
SSL_get_signature_type_nid
SSL_get_srp_N
SSL_get_srp_g
SSL_get_srp_userinfo
SSL_get_srp_username
SSL_get_srtp_profiles
SSL_get_ssl_method
SSL_get_state
SSL_get_verify_callback
SSL_get_verify_depth
SSL_get_verify_mode
SSL_get_verify_result
SSL_get_version
SSL_get_wbio
SSL_get_wfd
SSL_group_to_name
SSL_has_matching_session_id
SSL_has_pending
SSL_in_before
SSL_in_init
SSL_is_dtls
SSL_is_init_finished
SSL_is_server
SSL_key_update
SSL_load_client_CA_file
SSL_load_client_CA_file_ex
SSL_new
SSL_new_session_ticket
SSL_peek
SSL_peek_ex
SSL_pending
SSL_read
SSL_read_early_data
SSL_read_ex
SSL_renegotiate
SSL_renegotiate_abbreviated
SSL_renegotiate_pending
SSL_rstate_string
SSL_rstate_string_long
SSL_select_next_proto
SSL_sendfile
SSL_session_reused
SSL_set0_CA_list
SSL_set0_rbio
SSL_set0_security_ex_data
SSL_set0_tmp_dh_pkey
SSL_set0_wbio
SSL_set1_host
SSL_set1_param
SSL_set_SSL_CTX
SSL_set_accept_state
SSL_set_allow_early_data_cb
SSL_set_alpn_protos
SSL_set_async_callback
SSL_set_async_callback_arg
SSL_set_bio
SSL_set_block_padding
SSL_set_cert_cb
SSL_set_cipher_list
SSL_set_ciphersuites
SSL_set_client_CA_list
SSL_set_connect_state
SSL_set_ct_validation_callback
SSL_set_debug
SSL_set_default_passwd_cb
SSL_set_default_passwd_cb_userdata
SSL_set_default_read_buffer_len
SSL_set_ex_data
SSL_set_fd
SSL_set_generate_session_id
SSL_set_hostflags
SSL_set_info_callback
SSL_set_max_early_data
SSL_set_msg_callback
SSL_set_not_resumable_session_callback
SSL_set_num_tickets
SSL_set_options
SSL_set_post_handshake_auth
SSL_set_psk_client_callback
SSL_set_psk_find_session_callback
SSL_set_psk_server_callback
SSL_set_psk_use_session_callback
SSL_set_purpose
SSL_set_quiet_shutdown
SSL_set_read_ahead
SSL_set_record_padding_callback
SSL_set_record_padding_callback_arg
SSL_set_recv_max_early_data
SSL_set_rfd
SSL_set_security_callback
SSL_set_security_level
SSL_set_session
SSL_set_session_id_context
SSL_set_session_secret_cb
SSL_set_session_ticket_ext
SSL_set_session_ticket_ext_cb
SSL_set_shutdown
SSL_set_srp_server_param
SSL_set_srp_server_param_pw
SSL_set_ssl_method
SSL_set_tlsext_max_fragment_length
SSL_set_tlsext_use_srtp
SSL_set_tmp_dh_callback
SSL_set_trust
SSL_set_verify
SSL_set_verify_depth
SSL_set_verify_result
SSL_set_wfd
SSL_shutdown
SSL_srp_server_param_with_username
SSL_state_string
SSL_state_string_long
SSL_stateless
SSL_trace
SSL_up_ref
SSL_use_PrivateKey
SSL_use_PrivateKey_ASN1
SSL_use_PrivateKey_file
SSL_use_RSAPrivateKey
SSL_use_RSAPrivateKey_ASN1
SSL_use_RSAPrivateKey_file
SSL_use_cert_and_key
SSL_use_certificate
SSL_use_certificate_ASN1
SSL_use_certificate_chain_file
SSL_use_certificate_file
SSL_use_psk_identity_hint
SSL_verify_client_post_handshake
SSL_version
SSL_waiting_for_async
SSL_want

Sections

.text
Size: 522KB - Virtual size: 522KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 337B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/remcos_RAT_v3.8.0/server/server.crt
Remcos.v3.8+DarkwebTools/remcos_RAT_v3.8.0/server/server.key
Remcos.v3.8+DarkwebTools/remcos_RAT_v3.8.0/version.dll
.dll windows:6 windows x86 arch:x86

c24637d831a2119fdb5a229aaecbf747

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

AddVectoredExceptionHandler

msvcp140

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ

vcruntime140

_CxxThrowException

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func

api-ms-win-crt-heap-l1-1-0

_callnewh

api-ms-win-crt-runtime-l1-1-0

_cexit

api-ms-win-crt-convert-l1-1-0

mbstowcs

api-ms-win-crt-string-l1-1-0

strcmp

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

user32

GetWindow

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Exports

Exports

GetFileInformationByHandle
GetFileVersionInfoA
GetFileVersionInfoExA
GetFileVersionInfoExW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeExA
GetFileVersionInfoSizeExW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueW

Sections

.text
Size: 5.5MB - Virtual size: 7.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 855KB - Virtual size: 856KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/settings.ini
Remcos.v3.8+DarkwebTools/stub/Neko/App.config
.xml
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Clipper/Clipboard.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Clipper/Clipper.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Clipper/EventManager.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Clipper/Patterns.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Implant/AntiAnalysis.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Implant/Mutex.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Implant/SelfDestruct.cs
.ps1
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Implant/StartDelay.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Implant/Startup.cs
.ps1
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Implant/StringsCrypt.cs
.js
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Keylogger/EventManager.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Keylogger/Keylogger.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Keylogger/PornDetection.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Manager/AnonFile.cs
.js
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Manager/ClipboardManager.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Manager/CommandHelper.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Manager/Filemanager.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Manager/Flags.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Manager/LibLoader.cs
.js
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Manager/SystemInfo.cs
.js
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Manager/Telegram.cs
.js
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Manager/WindowManager.cs
.js
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Helpers/Banking.cs
.js
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Helpers/Common.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Helpers/Counter.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Helpers/Paths.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Helpers/Report.cs
.js
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Helpers/SQLite.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Helpers/SqlReader.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Stealer.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Browsers/BrowserUtils.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Browsers/Chromium/AesGcm.cs
.js
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Browsers/Chromium/AutoFill.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Browsers/Chromium/BCrypt.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Browsers/Chromium/Bookmarks.cs
.js
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Browsers/Chromium/Chromium.cs
.js
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Browsers/Chromium/Cookies.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Browsers/Chromium/CreditCards.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Browsers/Chromium/Downloads.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Browsers/Chromium/History.cs
.ps1
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Browsers/Chromium/Passwords.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Browsers/Edge/AutoFill.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Browsers/Edge/Bookmarks.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Browsers/Edge/CreditCards.cs
.js
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Browsers/Edge/Edge.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Browsers/Firefox/Bookmarks.cs
.js
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Browsers/Firefox/Cookies.cs
.js
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Browsers/Firefox/Firefox.cs
.js
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Browsers/Firefox/History.cs
.js
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Browsers/Firefox/Logins.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Browsers/Internet Explorer/InternetExplorer.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Browsers/Internet Explorer/Passwords.cs
.js
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Browsers/Internet Explorer/VaultCli.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/FileZilla.cs
.ps1
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Gaming/Minecraft.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Gaming/Steam.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Gaming/Uplay.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Messengers/Discord.cs
.js
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Messengers/Pidgin.cs
.js
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Messengers/Telegram.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/System/ActiveWindows.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/System/DesktopScreenshot.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/System/DirectoryTree.cs
.js
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/System/FileGrabber.cs
.js
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/System/ProcessList.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/System/ProductKey.cs
.js
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/System/WebcamScreenshot.cs
.js
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/System/Wifi.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/VPN/NordVPN.cs
.js
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/VPN/OpenVPN.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/VPN/ProtonVPN.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Modules/Passwords/Targets/Wallets.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Program.cs
Remcos.v3.8+DarkwebTools/stub/Neko/Properties/AssemblyInfo.cs
Remcos.v3.8+DarkwebTools/stub/Neko/StormKitty.csproj
Remcos.v3.8+DarkwebTools/stub/Neko/StormKitty.csproj.user
Remcos.v3.8+DarkwebTools/stub/Neko/config.cs
Remcos.v3.8+DarkwebTools/stub/Neko/packages.config
Remcos.v3.8+DarkwebTools/stub/StormKitty.sln
Remcos.v3.8+DarkwebTools/stub/packages/DotNetZip.1.13.8/DotNetZip.1.13.8.nupkg
.nupkg
Remcos.v3.8+DarkwebTools/stub/packages/DotNetZip.1.13.8/crack.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/stub/packages/DotNetZip.1.13.8/lib/net40/DotNetZip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\dotnetzip-semverd\src\Zip\obj\Release\DotNetZip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 446KB - Virtual size: 445KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Remcos.v3.8+DarkwebTools/stub/packages/DotNetZip.1.13.8/lib/net40/DotNetZip.pdb
Remcos.v3.8+DarkwebTools/stub/packages/DotNetZip.1.13.8/lib/net40/DotNetZip.xml
.js .xml polyglot
Remcos.v3.8+DarkwebTools/stub/stub.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 271KB - Virtual size: 271KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Extracted

Signatures

Files

sigma.male

.MainActivity

Activities

.MainActivity

Permissions

Receivers

.restarter

.DeviceAdminComponent

.boyss

Services

.logoss

.NotificationService

Headers

File Characteristics

Sections

Size: 1.6MB - Virtual size: 4.4MB

Size: 4.7MB - Virtual size: 8.1MB

Size: 1024B - Virtual size: 4KB

Size: 559KB - Virtual size: 816KB

Size: 883KB - Virtual size: 984KB

Size: 512B - Virtual size: 4KB

Size: 11KB - Virtual size: 24KB

Size: 512B - Virtual size: 24KB

.rsrc Size: 428KB - Virtual size: 428KB

Size: 174KB - Virtual size: 2.5MB

.data Size: 869KB - Virtual size: 872KB

2df7f5e9e16ccf2da745e0713e0f1266

Code Sign

01Certificate

46:ea:a3:07:be:11:32:60:3f:be:dc:9b:91:11:5d:43:31:00:e7:edSigner

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

gdi32

version

shell32

comctl32

Sections

.text Size: 350KB - Virtual size: 350KB

.itext Size: 3KB - Virtual size: 2KB

.data Size: 11KB - Virtual size: 11KB

.bss Size: - Virtual size: 19KB

.idata Size: 9KB - Virtual size: 9KB

.tls Size: - Virtual size: 52B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 23KB - Virtual size: 23KB

.rsrc Size: 600KB - Virtual size: 600KB

90f0646a1d53143c8e05a27e348e88f7

Headers

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 426KB - Virtual size: 425KB

.data Size: 3KB - Virtual size: 3KB

.bss Size: - Virtual size: 800B

.edata Size: 6KB - Virtual size: 5KB

.idata Size: 2KB - Virtual size: 1KB

.reloc Size: 9KB - Virtual size: 8KB

.stab Size: 5KB - Virtual size: 4KB

.stabstr Size: 5KB - Virtual size: 5KB

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

.rsrc
Size: 428KB - Virtual size: 428KB

.data
Size: 869KB - Virtual size: 872KB

01
Certificate

46:ea:a3:07:be:11:32:60:3f:be:dc:9b:91:11:5d:43:31:00:e7:ed
Signer

.text
Size: 350KB - Virtual size: 350KB

.itext
Size: 3KB - Virtual size: 2KB

.data
Size: 11KB - Virtual size: 11KB

.bss
Size: - Virtual size: 19KB

.idata
Size: 9KB - Virtual size: 9KB

.tls
Size: - Virtual size: 52B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 23KB - Virtual size: 23KB

.rsrc
Size: 600KB - Virtual size: 600KB

.text
Size: 426KB - Virtual size: 425KB

.data
Size: 3KB - Virtual size: 3KB

.bss
Size: - Virtual size: 800B

.edata
Size: 6KB - Virtual size: 5KB

.idata
Size: 2KB - Virtual size: 1KB

.reloc
Size: 9KB - Virtual size: 8KB

.stab
Size: 5KB - Virtual size: 4KB

.stabstr
Size: 5KB - Virtual size: 5KB

.text
Size: 218KB - Virtual size: 217KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 887KB - Virtual size: 886KB

.itext
Size: 3KB - Virtual size: 2KB

.data
Size: 23KB - Virtual size: 23KB

.bss
Size: - Virtual size: 147KB

.idata
Size: 12KB - Virtual size: 12KB

.tls
Size: - Virtual size: 64B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 56KB - Virtual size: 55KB

.rsrc
Size: 320KB - Virtual size: 320KB

.text
Size: 21KB - Virtual size: 21KB

.rsrc
Size: 1024B - Virtual size: 952B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 3.7MB - Virtual size: 3.7MB

.sdata
Size: 512B - Virtual size: 312B

.rsrc
Size: 110KB - Virtual size: 110KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 61KB - Virtual size: 61KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 512B - Virtual size: 12B