Static | ZeroBOX

PE Compile Time

2085-10-18 01:47:36

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0003dc84 0x0003de00 5.86473308613
.rsrc 0x00040000 0x000005ac 0x00000600 4.06798123736
.reloc 0x00042000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x00040090 0x0000031c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000403bc 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
KDBM(
Y_c
Y_c
+X*.sf
-,+6(9
Y_c
Y_c
KDBM(
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP<oY
127.0.0.1
77.239.116.189
'\e(8iY
mhttps://github.com/LimerBoy/StormKitty
L[a2/A?
^B09SH
v4.0.30319
#Strings
! !.!C!Y!g!n!~!
"K"n"T)
. /+/Q/
NXN@NdNMNqN{N<
:fpz
p y '!
$%%P'a'
/'070?0W0d0
__StaticArrayInitTypeSize=10
<checkchrome>5__10
<CreateReport>b__10
CEB1CC71FC33A5B2E3A8E0727D334A0B236251779D5BAF438C965B4FB341F460
<>9__10_0
<Parse>b__10_0
<GetWindowsVersion>b__10_0
<>c__DisplayClass10_0
<>9__0_0
<GetProfiles>b__0_0
<GetInheritedClasses>b__0_0
<>c__DisplayClass0_0
<>c__DisplayClass1_0
<>9__12_0
<GetDefaultGateway>b__12_0
<>9__2_0
<DirectorySize>b__2_0
<>c__DisplayClass2_0
<>9__13_0
<GetAntivirus>b__13_0
<Concat>b__13_0
<>c__DisplayClass13_0
<>9__3_0
<Collect>b__3_0
<>c__DisplayClass3_0
<>9__14_0
<Parse>b__14_0
<GetLocalIp>b__14_0
<>c__DisplayClass14_0
<>9__4_0
<Main>b__4_0
<>c__DisplayClass4_0
<>9__15_0
<FindFileHandle>b__15_0
<>c__DisplayClass15_0
<>9__5_0
<GrabDirectoryAsync>b__5_0
<GetTokens>b__5_0
<>c__DisplayClass5_0
<>c__DisplayClass16_0
<>9__6_0
<RunAsync>b__6_0
<>c__DisplayClass6_0
<>9__7_0
<ParseDiscordTokens>b__7_0
<>9__8_0
<InjectIntoExodus>b__8_0
<>c__DisplayClass8_0
<>c__DisplayClass9_0
<>9__0
<IsVM>b__0
<ReadFile>b__0
<Key3Database>b__0
<ParseDatabase>b__0
<Create>b__0
<AppendValue>b__0
<CleanDomain>b__0
<ParsePasswords>b__0
<PasswordsTags>b__0
<CookiesTags>b__0
<ParseExtensions>b__0
<GatherZips>b__0
<CreateReport>b__0
<ParseMasterKey>b__0
<CollectWalletExtensions>d__0
get_<>h__TransparentIdentifier0
28496878C202D72EEC073359CF7783F1765A4C5CDF405FA79CE14256F0D4E501
D38F1F4A152CEB94D7366FB851BD64D0C557CD57A0486E57BFB5926A910D5111
<CreateReport>b__11
<Finalize>d__11
<PerformInjection>d__11
2FAE78BDFE8022A734B50102E5AAAAD1BA2BB7AD72AAB6DECC21EF57D6DFE421
8688D249E9D047B4FC2FB89CE05AFE9EC89252FFCCDD969DE6EEF260DD7FFB21
HMACSHA1
F9CD20F9BE4EBA8920C22293BAF9687E83B65C0DD5D44641A905FC535BC053B1
215470030B0DA49A7329BA30F0A38AD32EC6E7AAB0A17C2AB501FEFDD688A3D1
<>9__10_1
<Parse>b__10_1
<>c__DisplayClass10_1
<>9__0_1
<GetInheritedClasses>b__0_1
<>c__DisplayClass0_1
<>9__12_1
<GetDefaultGateway>b__12_1
<>9__2_1
<DirectorySize>b__2_1
<>9__3_1
<Collect>b__3_1
<>c__DisplayClass3_1
<>9__14_1
<Parse>b__14_1
<>9__4_1
<Main>b__4_1
<>c__DisplayClass4_1
<>9__5_1
<GrabDirectoryAsync>b__5_1
<GetTokens>b__5_1
<>9__16_1
<ReadFile>b__16_1
<>9__6_1
<Key3Database>b__6_1
<>c__DisplayClass9_1
<>9__1
<IsVM>b__1
<FindFileHandle>b__1
<Create>b__1
<GatherZips>b__1
<Collect>b__1
<CreateReport>b__1
<>u__1
<>c__0`1
Func`1
Nullable`1
IEnumerable`1
IOrderedEnumerable`1
ConfiguredTaskAwaitable`1
Task`1
Action`1
ReadOnlyCollection`1
AsyncTaskMethodBuilder`1
EqualityComparer`1
IEnumerator`1
List`1
message1
get_Item1
get_<>h__TransparentIdentifier1
paths1
CS$<>8__locals1
746183F1318C28F724CFE8B949E669E523944C8C9123C416BFB2DB7832172A02
__StaticArrayInitTypeSize=12
3E471BEB9C4B699F9DBF2C4C30AD2DB5A2E93120A2AA6F2C4923FCC1BB456922
__StaticArrayInitTypeSize=32
ConvertFromUtf32
Kernel32
Microsoft.Win32
ReadUInt32
ToUInt32
ReadInt32
ToInt32
5506141862EC002C0B6A1CE9E5133BEA4C9E2B0A2874B340618309782AFC7472
7FA01FA7C14EB995D3D3BEFA2652AC0FF088D5D7124283029658722E6FDD1F72
A4956ED9AA7996A00C7593BFFCBDB3FBE5A11F729876DF9AC5A1A33EF3EFE3A2
6D19E80E711937EC8EE72041A1BD75D33F4C76E03210863CD343F584F3CD07E2
PBKDF2
ParseStringV2
<>9__10_2
<Parse>b__10_2
<>9__12_2
<GetDefaultGateway>b__12_2
<>9__3_2
<Collect>b__3_2
<>9__14_2
<Parse>b__14_2
<>9__4_2
<Main>b__4_2
<>9__5_2
<GetTokens>b__5_2
<>9__6_2
<Key3Database>b__6_2
<>9__8_2
<Create>b__8_2
<>c__DisplayClass9_2
<publicIp>5__2
<dirs>5__2
<client>5__2
<GrabDirectoryAsync>b__2
<GatherZips>b__2
<Collect>b__2
<CreateReport>b__2
<>f__AnonymousType0`2
<>f__AnonymousType1`2
<>f__AnonymousType2`2
<>f__AnonymousType3`2
<>f__AnonymousType4`2
<>f__AnonymousType5`2
<>f__AnonymousType6`2
Func`2
Tuple`2
IGrouping`2
KeyValuePair`2
Dictionary`2
message2
get_Item2
get_<>h__TransparentIdentifier2
paths2
CS$<>8__locals2
D3709EF761A0DEFC0ABE47CF9B3476718CE15F873291CF43E1AE3DC080DE5523
8B50B05A3346D82FE685DF445B7EE749C33B9BAA114363A578CEE3EDBACB7B43
D170DC7768D26A111EF0E7B910988BFC4ACBCA3BE6A5B476EED1F48C70040F93
489804EB6063B4C4D2E6D0B2D9E89A9AE050854562A681691C1A041E7B96D3C3
A8F810D24584EC3B7929D304606C2DD1E44F852CA90C291ED8CC398AA3F07FD3
<>9__10_3
<Parse>b__10_3
<>9__14_3
<Parse>b__14_3
<>9__4_3
<Main>b__4_3
<>9__5_3
<GetTokens>b__5_3
<>9__6_3
<Key3Database>b__6_3
<exodusExists>5__3
<>9__3
<Collect>b__3
<CreateReport>b__3
message3
get_<>h__TransparentIdentifier3
paths3
__StaticArrayInitTypeSize=64
ToUInt64
ReadInt64
ToInt64
<>9__10_4
<Parse>b__10_4
<>9__3_4
<Collect>b__3_4
<>9__14_4
<Parse>b__14_4
<>9__5_4
<GetTokens>b__5_4
<>9__6_4
<Key3Database>b__6_4
<localmetamask>5__4
<Main>b__4
<CreateReport>b__4
<TokenStateAsync>d__4
<Main>d__4
get_<>h__TransparentIdentifier4
9F4785B3A7FCE2DB47B762BD03298BC60B643A91C35D994BB012774200919455
4957FD0951018A72CA86C078BC1F6B094E80D0CEF42ABDA6C07D7ED6BD14B775
<>9__10_5
<Parse>b__10_5
<>9__14_5
<Parse>b__14_5
<>9__4_5
<Main>b__4_5
<>9__6_5
<Key3Database>b__6_5
<binance>5__5
<Collect>b__5
<CreateReport>b__5
<GrabDirectoryAsync>d__5
get_<>h__TransparentIdentifier5
__StaticArrayInitTypeSize=16
ReadUInt16
ToUInt16
HMACSHA256
A981F5EDD35DDFF3F41F44A598272BBEAFA5F5B9C1595DC02FC6044CE81BE666
A515425C81DC183149AF8B446E168A9509399B54129E92DAC27E19364B0D7B86
__StaticArrayInitTypeSize=6
5DE1095525AB303CB1757E42A4D855AFD36C459D66738BB6D29EC4EFDABF9EB6
8CBFD58F16D5B1964C4D7949E760F475F6239F22B303C8389A6B995ADE64D4D6
064ACC46CE47C1A29B9D27B9D71B070821B627C96B594BAC77D236C37EC2CCE6
<>9__10_6
<Parse>b__10_6
<>9__14_6
<Parse>b__14_6
<>9__4_6
<Main>b__4_6
<>9__6_6
<Key3Database>b__6_6
<blockhain>5__6
<Collect>b__6
<CreateReport>b__6
<RunAsync>d__6
<>h__TransparentIdentifier6
4644D25C296EA1EDD5CA2B89F2032ACB2831E8D6D2BB65F379E56AE3E993AD27
CAB1D35DDB8E2426F9750F1040D87B301146E2BFAB7CF292C14EC1133A2ACB37
__StaticArrayInitTypeSize=7
1B31AC76D464F22FCBDE794043D4533B09B5154FA12F2A510B042D64D7F674A7
VAULT_ITEM_WIN7
VaultGetItem_WIN7
<>9__10_7
<Parse>b__10_7
<>9__14_7
<Parse>b__14_7
<>9__4_7
<Main>b__4_7
<staledfiles>5__7
<Collect>b__7
<CreateReport>b__7
__StaticArrayInitTypeSize=38
42D76814205DCCDE199937F4024AFDD40F59A577C59AD64BBAF1511E31E09648
__StaticArrayInitTypeSize=48
00F45B18720CF90093967548198B72DB662917AB9D3BF26582BAC88BCEBABDB8
FD2AD7331099CFB7A118458E12965559ABF6D870A4B3DFF975FF43C3C56C09C8
get_UTF8
EncodeUTF8
GetUTF8
VAULT_ITEM_WIN8
VaultGetItem_WIN8
<>9__10_8
<Parse>b__10_8
<>9__3_8
<Collect>b__3_8
<>9__14_8
<Parse>b__14_8
<checkfilezilla>5__8
<>9__8
<Main>b__8
<CreateReport>b__8
<GatherAll>d__8
<InjectIntoExodus>d__8
EncodeUtf8
sNonUtf8
BAAD10E40DF6B5D52A22FCCE498BBD641EBB2377BB7DA4FE04EE26F084647F69
7D78CB380BF5EFB7B851409CA6A875F77DECF09D19B9149DA17A3EBF674BC0F9
625B1FA8EEFB9345CB2D80CDA3F78B5244D70DCB459672425C6AA7DD95FBB8F9
<>9__10_9
<Parse>b__10_9
<>9__14_9
<Parse>b__14_9
<checkedge>5__9
<Main>b__9
<CreateReport>b__9
<InjectIntoAtomic>d__9
<Module>
<Main>
<PrivateImplementationDetails>
86D45C838620BD08CBFC6C4C730273D4BF33AD9593E495D84F08F858B511678A
SendMessageA
A223DB41D9BFBC0280EBD0050A8BBD8EA7A943B251C8FD2D0B01A040462EDB0B
D61B7716B5AD4A42CC6C9300587B2C389EB40C3E8BF9B039E7DB98097247DC1B
143CDFB281A50A6468F7C1991D0FEDA05655ED447DACA6B3F3BCCA90446E723B
ACDF4A22C9359C1328E1CC966BC6C0D0D95B468AF46466FFAEC92C411050E17B
A25CC6D70519A408CEA3AE72EBFF915335C6E6E613B18720FA746D0D8056559B
BerkeleyDB
BCRYPT_KEY_DATA_BLOB
0296D458811879A7CC04B6F85C52DEE81EE432EAD4E5765F051459B7F02CE1AC
7A769000E553478A16851DBBA454E822F03DB7C01B83809B4F5EC163F7D977BC
2758F11D171C684E6D95159D46260BE6438DAD2764618E91687E9E0AEAC641FC
BCRYPT_KEY_DATA_BLOB_MAGIC
E0CFAA5A692BF7845AE59939493B0B96CCFFDACB3413C4CB3CD461DDE28C3D0D
0FAAA1B82B57C8DDDC82E0F99608244BE805FEF53B4B7CD47D6E398EDF3EBB7D
6C56BD00410C5FA60309B238EED42CFC1A6220172A54CD8D230165B65534A0BD
CE8979E74A40B6869BD5BED7E5610AA981486221166D6F6E65F3B34BF501B8DD
get_LCID
VAULT_SCHEMA_ELEMENT_ID
FileHandleID
fileHandleID
ProcessID
processID
843991BD752E8C2C833B29AD5C915D1D94DC3F19FC14C1C8DCF720D5557A281E
BF8CAA158736480861E8F91826FFFA6545B27C3EC30153CA68330811329C2A8E
956066B197B0FDDE9C9C9D6DBCC411ECFBC0A9A012AC9BC2CD775065BB27DF9E
DUPLICATE_CLOSE_SOURCE
SW_HIDE
BCRYPT_CHAINING_MODE
4ACDF780C59C51FA1663A503E275650BA7099CACB51E54889D693D1316BF81EE
INVALID_HANDLE
CCH_RM_MAX_SVC_NAME
CCH_RM_MAX_APP_NAME
FILETIME
RM_APP_TYPE
VAULT_ELEMENT_TYPE
F18366628A466F286AC60A27D59CADD5FD347730C9D55E04CE70FFDA96CB236F
ACDCB1AFB15194F894860BA7E2B85B91B6E5AB701407DFBAC51146F0C6E53B6F
84CDC3B9C7D6E1967A6EA1F24F2D6EEF32880F0874A2609A082EF83268D008EF
BCRYPT_AUTH_MODE_CHAIN_CALLS_FLAG
UNICODE_STRING
STATUS_AUTH_TAG_MISMATCH
STATUS_INFO_LENGTH_MISMATCH
BCRYPT_AUTH_TAG_LENGTH
BCRYPT_OBJECT_LENGTH
get_ASCII
BCRYPT_CHAIN_MODE_GCM
BCRYPT_AES_ALGORITHM
AntiVM
BCRYPT_INIT_AUTH_MODE_INFO_VERSION
ZeroTrace.Stub.Target.VPN
GLINFO
BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO
BCRYPT_OAEP_PADDING_INFO
BCRYPT_PSS_PADDING_INFO
RM_PROCESS_INFO
System.IO
BCRYPT_PAD_OAEP
MS_PRIMITIVE_PROVIDER
SYSTEM_INFORMATION_CLASS
OBJECT_INFORMATION_CLASS
DUPLICATE_SAME_ACCESS
ERROR_SUCCESS
STATUS_SUCCESS
RM_UNIQUE_PROCESS
UnLoadNSS
BCRYPT_PAD_PSS
BCRYPT_KEY_LENGTHS_STRUCT
BattleNET
VAULT_ITEM_ELEMENT
GetCPU
get_IV
set_IV
STATUS_BUFFER_OVERFLOW
OperaGX
value__
FileZilla
filezilla
get_Enigma
set_Enigma
get_Data
set_Data
CbData
cbData
sWebData
pbData
ProtectedData
bEncryptedData
GetClipboardData
_cbAuthData
_pbAuthData
SECItemData
ScanData
sLoginData
tsData
CryptUnprotectData
GetTdata
lappdata
SetQuota
CopyLevelDb
mscorlib
DataBlob
github
ZeroTrace.Stub
GetMac
DecryptByteDesCbc
DecryptStringDesCbc
InjectIntoAtomic
System.Collections.Generic
ExtractFileAsync
TokenStateAsync
GetStringAsync
DownloadFileTaskAsync
AddStreamAsync
RunAsync
ConnectAsync
GrabDirectoryAsync
get_sExpiresUtc
set_sExpiresUtc
get_Id
SchemaId
schemaId
get_CurrentManagedThreadId
<>l__initialThreadId
pszAlgId
TSSessionId
childProcessId
dwProcessId
processId
SchemaElementId
GetProcessById
PageExecuteRead
FileMapRead
VirtualMemoryRead
CreateThread
pnProcInfoNeeded
SHA1Managed
RijndaelManaged
AesManaged
LastModified
failed
get_cookieCleaned
Undefined
lpOverlapped
_isDisposed
get_Connected
AwaitUnsafeOnCompleted
get_IsCompleted
get_HasExited
bytesToBeDecrypted
encrypted
exitRequested
pReserved
System.Collections.Specialized
Synchronized
targetPid
pPackageSid
ComputeVoid
vaultGuid
NewGuid
GetHwid
get_hwid
<<>h__TransparentIdentifier0>i__Field
<<>h__TransparentIdentifier1>i__Field
<<>h__TransparentIdentifier2>i__Field
<<>h__TransparentIdentifier3>i__Field
<<>h__TransparentIdentifier4>i__Field
<<>h__TransparentIdentifier5>i__Field
<cookieCleaned>i__Field
<name>i__Field
<secure>i__Field
<value>i__Field
<path>i__Field
<domain>i__Field
<expires>i__Field
<httpOnly>i__Field
<Enigma>k__BackingField
<Data>k__BackingField
<sExpiresUtc>k__BackingField
<Discord>k__BackingField
<MasterPassword>k__BackingField
<sPassword>k__BackingField
<sTitle>k__BackingField
<Name>k__BackingField
<sName>k__BackingField
<sUsername>k__BackingField
<Type>k__BackingField
<Skype>k__BackingField
<Secure>k__BackingField
<sIsSecure>k__BackingField
<InstallDate>k__BackingField
<Value>k__BackingField
<sValue>k__BackingField
<Path>k__BackingField
<sPath>k__BackingField
<sExpMonth>k__BackingField
<Outlook>k__BackingField
<Signal>k__BackingField
<AutoFill>k__BackingField
<sUrl>k__BackingField
<Steam>k__BackingField
<Telegram>k__BackingField
<Algorithm>k__BackingField
<Domain>k__BackingField
<Pidgin>k__BackingField
<Version>k__BackingField
<Vpn>k__BackingField
<Icq>k__BackingField
<sExpYear>k__BackingField
<IdentifyingNumber>k__BackingField
<sNumber>k__BackingField
<Vector>k__BackingField
<Downloads>k__BackingField
<CreditCards>k__BackingField
<Passwords>k__BackingField
<BankingServices>k__BackingField
<DetectedBankingServices>k__BackingField
<PornServices>k__BackingField
<DetectedPornServices>k__BackingField
<CryptoServices>k__BackingField
<DetectedCryptoServices>k__BackingField
<GrabberSourceCodes>k__BackingField
<GrabberImages>k__BackingField
<Cookies>k__BackingField
<Expires>k__BackingField
<GrabberDatabases>k__BackingField
<Bookmarks>k__BackingField
<SavedWifiNetworks>k__BackingField
<MasterPass>k__BackingField
<Objects>k__BackingField
<Wallets>k__BackingField
<BrowserWallets>k__BackingField
<GrabberDocuments>k__BackingField
<FtpHosts>k__BackingField
<Keys>k__BackingField
<BattleNet>k__BackingField
<Lenght>k__BackingField
<Salt>k__BackingField
<GlobalSalt>k__BackingField
<EntrySalt>k__BackingField
<Element>k__BackingField
<Content>k__BackingField
<iCount>k__BackingField
<IterationCount>k__BackingField
<WebcamScreenshot>k__BackingField
<DesktopScreenshot>k__BackingField
<CipherText>k__BackingField
<Ciphertext>k__BackingField
<PartIv>k__BackingField
<Tox>k__BackingField
<Uplay>k__BackingField
<Key>k__BackingField
<sKey>k__BackingField
<ProductKey>k__BackingField
<sHostKey>k__BackingField
<HttpOnly>k__BackingField
<History>k__BackingField
RecordHeaderField
TrimEnd
ReadToEnd
AppEnd
Append
UriKind
get_Second
Method
_method
FormatCreditCard
CloseClipboard
OpenClipboard
SearchForWord
WriteEndRecord
LogRecord
WriteCentralDirRecord
get_Discord
set_Discord
WriteDiscord
pPassword
get_MasterPassword
masterPassword
get_sPassword
set_sPassword
FormatPassword
GetPassword
DecryptPassword
password
NetworkInterface
Replace
IsNullOrWhiteSpace
get_StackTrace
ZeroTrace
QueryDosDevice
IService
RmService
service
CreateInstance
defaultInstance
Sequence
_cbNonce
_pbNonce
_source
ReadEmbeddedResource
GetHashCode
set_Mode
FileMode
ShareMode
ZipArchiveMode
PaddingMode
chainingMode
CryptoStreamMode
CompressionMode
CipherMode
SelectSingleNode
XmlNode
Decode
get_Unicode
get_BigEndianUnicode
VaultFree
GetDirectoryTree
FromImage
SectionImage
CentralDirImage
_centralDirImage
ZipStorage
storage
get_Message
SendMessage
ReceiveMessage
message
Stealer.Edge
checkedge
AddRange
SectionNoCache
cCookie
sCookie
FormatCookie
cookie
Handshake
EndInvoke
BeginInvoke
CrcTable
ReadTable
ReadMasterTable
GetEnvironmentVariable
IsClipboardFormatAvailable
IEnumerable
IDisposable
bRestartable
ToDouble
NextDouble
RuntimeFieldHandle
foundHandle
hSourceHandle
FindFileHandle
ProcessFileHandle
fileHandle
RuntimeTypeHandle
CloseHandle
DuplicateHandle
GetTypeFromHandle
pSessionHandle
dwSessionHandle
hSourceProcessHandle
hTargetProcessHandle
lpTargetHandle
bInheritHandle
vaultHandle
get_MainWindowHandle
handle
Rectangle
Single
GrabFile
ReadFile
AddFile
ReadLockedFile
CopyDatabaseFile
CreateFile
hTemplateFile
localStateFile
WriteFile
MapViewOfFile
UnmapViewOfFile
SaveAppsToFile
ZipFile
ExtractFile
targetFile
CreateSummaryFile
sProfile
GetProfile
SetProfile
profile
RmConsole
get_sTitle
set_sTitle
DetectTitle
get_MainWindowTitle
hModule
get_MainModule
ProcessModule
set_WindowStyle
ProcessWindowStyle
get_Name
set_Name
sProcName
procName
methodName
NormalizeDeviceName
lpDeviceName
deviceName
GetServiceName
resourceName
tableName
get_FileName
set_FileName
GetRandomFileName
lpFileName
GetTempFileName
sFileName
GetFileName
ParseProfileName
profileName
get_MachineName
valueName
GetElementsByTagName
get_EnglishName
dllName
get_FullName
ItemName
GetBrowserPathFromName
get_TwoLetterISORegionName
extensionName
GetWindowsVersionName
zipName
lpName
BrowserPathToAppName
strAppName
get_UserName
GetBrowserName
browserName
sourceDirName
destDirName
get_sName
set_sName
get_ProcessName
processName
strServiceShortName
GetHostName
GetCpuName
GetGpuName
GetProcessesByName
pszCredentialFriendlyName
GetDirectoryName
get_name
NormalizedFilename
_filename
_pathname
get_Compname
get_Username
get_sUsername
set_sUsername
username
hostname
_modTime
FromFileTime
ToFileTime
DosTimeToDateTime
GetLastWriteTime
SetLastWriteTime
GetCreationTime
SetCreationTime
DateTimeToDosTime
SetLastAccessTime
ProcessStartTime
ModifyTime
Chrome
checkchrome
AppendLine
WriteLine
Combine
IAsyncStateMachine
SetStateMachine
stateMachine
LocalMachine
DataProtectionScope
get_Type
set_Type
pszBlobType
DetectCreditCardType
get_NetworkInterfaceType
RecordFileType
DetectFileType
GetFileType
ValueType
get_DriveType
SECItemType
ApplicationType
DetermineBrowserType
browserType
myType
get_Skype
set_Skype
FileShare
Compare
System.Core
get_Secure
set_Secure
get_sIsSecure
set_sIsSecure
get_secure
failure
PtrToStructure
get_Culture
set_Culture
resourceCulture
get_InvariantCulture
get_CurrentCulture
Capture
ApplicationSettingsBase
ToTitleCase
Key3Database
Key4Database
ParseDatabase
database
ReadHandshakeResponse
NtClose
System.IDisposable.Dispose
toParse
TryParse
Reverse
get_InstallDate
set_InstallDate
GetInstallDate
TryCreate
MulticastDelegate
Deflate
Terminate
DebuggerBrowsableState
EditorBrowsableState
<>1__state
ZeroPrivate
RecursiveDelete
SQLite
PageReadWrite
PageExecuteReadWrite
get_CanWrite
nNumberOfBytesToWrite
FileMapWrite
VirtualMemoryWrite
Remote
EmbeddedAttribute
CompilerGeneratedAttribute
GuidAttribute
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
AttributeUsageAttribute
DebuggableAttribute
DebuggerBrowsableAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
AsyncStateMachineAttribute
IteratorStateMachineAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
DebuggerHiddenAttribute
AssemblyFileVersionAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
UnmanagedFunctionPointerAttribute
RefSafetyRulesAttribute
FlagsAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
ParamArrayAttribute
IsReadOnlyAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
set_UseShellExecute
FileMapExecute
get_Minute
Compute
ReadByte
WriteByte
hMozGlue
GetBValue
GetIValue
GetLValue
GetSValue
get_Value
set_Value
AppendValue
SanitizeCookieValue
NullableValue
HandleValue
SanitizeValue
CleanupValue
get_sValue
set_sValue
get_HasValue
ExtractValue
TryGetValue
DecryptValue
get_value
ZipArchive
SystemDrive
HiddenCallResolve
Remove
SectionReserve
ZeroTrace.exe
get_Size
CbSize
cbSize
CompressedSize
_pageSize
lpFileSize
_sqlDataTypeSize
MaxAuthTagSize
get_HashSize
get_BlockSize
set_BlockSize
_blockSize
chunkSize
HeaderSize
Get32BitSize
get32bitSize
get_KeySize
set_KeySize
DirectorySize
Deserialize
SuppressFinalize
Synchronize
Resize
SizeOf
get_ItemOf
IsSubclassOf
LastIndexOf
_cbTag
_pbTag
authTag
DecryptConfig
get_Png
System.Threading
set_Padding
OrderByDescending
_dbEncoding
GetEncoding
DefaultEncoding
System.Drawing.Imaging
ZeroPrivate.Cryptography.Hashing
Banking
ZeroTrace.Stub.Target.Gaming
System.Runtime.Versioning
CreateFileMapping
FromBase64String
DownloadString
encodedString
ParseString
CleanString
get_VersionString
JsonString
jsonString
HexStringToString
GetString
OctetString
HexString
hexString
Substring
disposing
ForceDeflating
System.Drawing
ConvertToULong
ForEach
IsMatch
dwMaximumSizeHigh
dwFileOffsetHigh
ComputeHash
Refresh
GetCookiesDBPath
GetBookmarksDBPath
ICQPath
get_Path
set_Path
MozillaPath
levelDbPath
dbPath
copiedPath
sourcePath
EdgePath
ProcessExecutablePath
executablePath
zipFilePath
sFilePath
filePath
SkypePath
sSavePath
_savePath
FindFirstExistingPath
localPath
SignalPath
PidginPath
GetTempPath
CopyTempPath
desktopPath
tempFolderPath
GetFolderPath
GetBrowserPath
sPrevBrowserPath
get_sPath
set_sPath
lpTargetPath
targetPath
MinecraftPath
ElementPath
GetPswPath
ToxPath
directoryPath
sHistoryPath
get_path
tmppath
get_Width
get_Length
MaximumLength
dwMinLength
SystemInformationLength
ObjectInformationLength
ReturnLength
SetLength
dwMaxLength
length
EndsWith
StartsWith
get_Month
get_sExpMonth
set_sExpMonth
currentDepth
maxDepth
Vivaldi
VaultCli
PtrToStringUni
StringToHGlobalUni
WinApi
installDateObj
get_inj
AsyncCallback
callback
performCheck
GlobalLock
TransformFinalBlock
GlobalUnlock
get_CanSeek
get_Outlook
set_Outlook
GrabOutlook
bBookmark
FormatBookmark
get_Task
AllocHGlobal
FreeHGlobal
RmCritical
Illegal
Marshal
get_Signal
set_Signal
cbLabel
pbLabel
set_Cancel
System.Collections.ObjectModel
System.ComponentModel
maxLevel
PriorityLevel
SaveAll
WhenAll
GatherAll
kernel32.dll
user32.dll
crypt32.dll
vaultcli.dll
ntdll.dll
rstrtmgr.dll
bcrypt.dll
get_AutoFill
set_AutoFill
WriteAutoFill
FormatAutoFill
FormatAutofill
System.Xml
get_sUrl
set_sUrl
ExtractWebsocketUrl
GetTotalRam
AddStream
GetManifestResourceStream
ZipFileStream
_zipFileStream
get_BaseStream
DeflateStream
NetworkStream
DeserializeFromStream
CryptoStream
GetStream
MemoryStream
_stream
get_Steam
set_Steam
get_Telegram
set_Telegram
ZipTelegram
Program
cAesGcm
TSECItem
get_Item
set_Item
VaultGetItem
vaultItem
ZeroTrace.Stub.Target.System
System.IO.Compression.FileSystem
get_Is64BitOperatingSystem
get_Algorithm
SymmetricAlgorithm
phAlgorithm
KeyedHashAlgorithm
algorithm
Random
searchTerm
ICryptoTransform
RootNum
rowNum
Medium
Stealer.Chromium
resourceMan
Boolean
IsLittleEndian
littleEndian
TimeSpan
SECItemLen
CopyFromScreen
get_PrimaryScreen
GoogleToken
_leaveOpen
lpNumberOfBytesWritten
get_Domain
set_Domain
existingDomain
CleanDomain
get_domain
get_Pidgin
set_Pidgin
SeekOrigin
get_CurrentRegion
region
get_Extension
GetExtension
get_OSVersion
get_Version
set_Version
GetSystemVersion
DwInfoVersion
dwInfoVersion
browserVersion
RandomWindowsVersion
GetWindowsVersion
GetBitVersion
version
RmEndSession
GetSteamSession
GetSession
GetBattleNetSession
RmStartSession
GetUplaySession
System.IO.Compression
application
get_Location
profileLocation
rootLocation
location
ObjectDataInformation
SystemRegistryQuotaInformation
SystemBasicInformation
ObjectBasicInformation
QueryLimitedInformation
SystemPerformanceInformation
SystemProcessorPerformanceInformation
SystemLookasideInformation
SystemHandleInformation
ObjectNameInformation
ObjectTypeInformation
System.Net.NetworkInformation
ObjectAllInformation
NtQuerySystemInformation
SystemExceptionInformation
GetGeoInformation
SystemProcessInformation
GatewayIPAddressInformation
ObjectInformation
SetInformation
SystemInterruptInformation
SystemTimeOfDayInformation
QueryInformation
VirtualMemoryOperation
System.Configuration
indentation
pszImplementation
System.Globalization
System.Web.Script.Serialization
Action
op_Subtraction
PerformInjection
System.Reflection
NameValueCollection
MatchCollection
GatewayIPAddressInformationCollection
GroupCollection
WebHeaderCollection
ManagementObjectCollection
FileMapProtection
get_Position
set_Position
CreationDisposition
CallingConvention
SearchOption
Win32Exception
IOException
InvalidDataException
CryptographicException
NotSupportedException
DirectoryNotFoundException
IndexOutOfRangeException
PathTooLongException
ArgumentNullException
InvalidOperationException
UnauthorizedAccessException
UriFormatException
SetException
ArgumentException
pszDescription
NewEncryption
Newtonsoft.Json
StringComparison
get_Vpn
set_Vpn
NordVpn
OpenVpn
ProtonVpn
searchPattern
fpNssShutdown
Unknown
CopyTo
ReadExtraInfo
CreateExtraInfo
pnProcInfo
BcryptAuthenticatedCipherModeInfo
ReadFileInfo
CultureInfo
DriveInfo
pPaddingInfo
FileSystemInfo
RegionInfo
SysInfo
set_StartInfo
ProcessStartInfo
get_TextInfo
ConsoleKeyInfo
DirectoryInfo
Crypto
GetPublicIp
GetLocalIp
ServerIp
BuildDeviceMap
dwNumberOfBytesToMap
Bitmap
GamingZip
CreateFinalZip
FilenameInZip
_filenameInZip
_pathnameInZip
OtherZip
WalletsZip
get_ip
TimeStamp
Interop
hwndApp
RmUnknownApp
System.Net.Http
get_Icq
set_Icq
System.Linq
<<>h__TransparentIdentifier0>j__TPar
<<>h__TransparentIdentifier1>j__TPar
<<>h__TransparentIdentifier2>j__TPar
<<>h__TransparentIdentifier3>j__TPar
<<>h__TransparentIdentifier4>j__TPar
<<>h__TransparentIdentifier5>j__TPar
<cookieCleaned>j__TPar
<name>j__TPar
<secure>j__TPar
<value>j__TPar
<path>j__TPar
<domain>j__TPar
<expires>j__TPar
<httpOnly>j__TPar
get_Year
get_sExpYear
set_sExpYear
ToChar
DirectorySeparatorChar
Asn1Der
FileGrabber
ObjectTypeNumber
get_IdentifyingNumber
set_IdentifyingNumber
get_sNumber
set_sNumber
number
WriteLocalHeader
SQLiteReader
XmlReader
SqlReader
StreamReader
JsonReader
XmlTextReader
JsonTextReader
BinaryReader
reader
ImportHider
SHA1CryptoServiceProvider
TripleDESCryptoServiceProvider
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
IFormatProvider
provider
AsyncTaskMethodBuilder
StringBuilder
<>t__builder
sourceFolder
sLocalStateFolder
SpecialFolder
browserFolder
destFolder
folder
placeholder
sender
Buffer
buffer
get_ResourceManager
FileManager
Filemanager
Integer
ManagementObjectSearcher
bCipher
ObjectIdentifier
endMarker
startMarker
WalletStealer
lineHandler
ConsoleCancelEventHandler
System.CodeDom.Compiler
hWndNewOwner
CommandHelper
LockHelper
BrowserHelper
ToUpper
BrowserDevToolsWrapper
RmExplorer
Stealer.InternetExplorer
ZipStorer
CurrentUser
JsonParser
IBrowser
browser
ConfiguredTaskAwaiter
GetAwaiter
StreamWriter
TextWriter
Object_Pointer
GetDelegateForFunctionPointer
ServiceCounter
BitConverter
RuntimeResolver
SendFileAndInfoAndOthersToServer
ToLower
JsonSerializer
JavaScriptSerializer
JsonDeserializer
sourceDir
sSaveDir
ReadCentralDir
destinationDir
target_dir
GetLastWin32Error
get_StandardError
set_RedirectStandardError
GetLastError
Authenticator
separator
IEnumerator
ManagementObjectEnumerator
System.Collections.Generic.IEnumerable<ZeroPrivate.Classes.LogRecord>.GetEnumerator
System.Collections.IEnumerable.GetEnumerator
RandomNumberGenerator
Activator
.cctor
get_Vector
set_Vector
WalletExtensionCollector
CreateDecryptor
passwordVaultPtr
IntPtr
get_Hour
GetGPUs
Graphics
ScreenMetrics
System.Diagnostics
get_Downloads
set_Downloads
FromSeconds
get_Bounds
GetBounds
SaveMods
get_CreditCards
set_CreditCards
AddRecords
records
get_Passwords
set_Passwords
cPasswords
ParsePasswords
WritePasswords
pPasswords
TripleDes
GetAllNetworkInterfaces
ZeroPrivate.Services
detectedServices
get_BankingServices
get_DetectedBankingServices
DetectedSocialServices
get_PornServices
get_DetectedPornServices
get_CryptoServices
get_DetectedCryptoServices
System.Runtime.InteropServices
KeyloggerServices
System.Runtime.CompilerServices
DetectServices
targetServices
System.Resources
RmRegisterResources
ZeroTrace.Properties.Resources.resources
get_GrabberSourceCodes
set_GrabberSourceCodes
DebuggingModes
get_ChildNodes
get_GrabberImages
set_GrabberImages
Matches
get_Cookies
set_Cookies
cCookies
WriteCookies
ExtractBrowserCookies
ExtractCookies
DiscordDirectories
EnumerateDirectories
SaveDirectories
<0>__GetDirectories
maxRetries
get_Entries
_masterTableEntries
_tableEntries
RemoveEntries
ZeroTrace.Properties
GetIPProperties
IPInterfaceProperties
GetDBFiles
CopyRequiredFiles
requiredFiles
EnumerateFiles
SaveFiles
ExistingFiles
_existingFiles
nFiles
GetFiles
keyFiles
_files
staledfiles
GetProfiles
ListProfiles
profiles
NumberStyles
_fieldNames
rgsServiceNames
GetHandleNames
WalletsExtNames
GetSubKeyNames
rgsFilenames
CreditCardTypes
GrabberFileTypes
CultureTypes
System.Runtime.InteropServices.ComTypes
GetTypes
get_Expires
set_Expires
get_expires
GetCultures
get_GrabberDatabases
set_GrabberDatabases
ZeroPrivate.Classes
GetInheritedClasses
candidateProcesses
WriteProcesses
GetLockingProcesses
GetProcesses
KillWalletProcesses
ClipperAddresses
get_GatewayAddresses
FlagsAndAttributes
FileAttributes
lpFileMappingAttributes
SetAttributes
SecurityAttributes
get_TotalMinutes
_fileBytes
Rfc2898DeriveBytes
ReadAllBytes
WriteAllBytes
HexToBytes
_bufferBytes
GetAddressBytes
GetBytes
saltBytes
ParsePasswordsValues
GetLogicalDrives
GetDrives
UpdateCrcAndSizes
PasswordsTags
CookiesTags
dwSessionFlags
ProcessAccessFlags
dwPromptFlags
DwFlags
dwFlags
ZipThings
LoadServerSettings
SaveLogs
GetLogs
ConsoleCancelEventArgs
devicePaths
WalletLocalPaths
sGeckoBrowserPaths
ConvertDevicePathsToDosPaths
DefaultPaths
sChromiumPswPaths
<>4__this
Microsoft.CodeAnalysis
get_Bookmarks
set_Bookmarks
bBookmarks
cBookmarks
WriteBookmarks
sBookmarks
SavedNetworks
ScanningNetworks
get_SavedWifiNetworks
set_SavedWifiNetworks
System.Threading.Tasks
Equals
cBrowserUtils
aFills
VaultEnumerateItems
System.Windows.Forms
lcDicordTokens
ParseDiscordTokens
GetTokens
domains
Contains
cLogins
System.Web.Extensions
ZeroPrivate.Extensions
ZeroPrivateStealer.Extensions
ParseExtensions
CollectWalletExtensions
SaveVersions
GetTelegramSessions
System.Text.RegularExpressions
rgApplications
nApplications
FindBrowserInAlternativeLocations
iterations
System.Collections
ZeroPrivate.Protections
DuplicateOptions
StringSplitOptions
RegexOptions
options
lpdwRebootReasons
GatherZips
InstalledApps
rgAffectedApps
get_Groups
get_Chars
ReadChars
invalidChars
GetInvalidFileNameChars
System.Net.Http.Headers
get_Headers
HttpHeaders
HttpRequestHeaders
get_DefaultRequestHeaders
ZeroTrace.Stub.Target.Messengers
ZeroTrace.Stub.Helpers
RuntimeHelpers
BrowserHelpers
ZeroPrivate.Services.Browsers
ListBrowsers
WaitForPendingFinalizers
copySubDirs
TargetDirs
sEncPass
get_MasterPass
masterPass
SystemInformationClass
ObjectInformationClass
get_IsClass
dwDesiredAccess
GrantedAccess
FileAccess
FileMapAllAccess
FileMapAccess
processAccess
_access
get_Success
success
CloseProcess
CreateProcess
OpenProcess
GetOwnerProcess
_browserProcess
GetCurrentProcess
process
add_CancelKeyPress
IPAddress
get_Address
GetProcAddress
lpBaseAddress
GetPhysicalAddress
ipAddress
get_Objects
AttributeTargets
System.Net.Sockets
get_Wallets
set_Wallets
get_BrowserWallets
set_BrowserWallets
GetWallets
wallets
VaultEnumerateVaults
clients
pPropertyElements
get_GrabberDocuments
set_GrabberDocuments
set_Arguments
GetBrowserArguments
GetAccounts
SaveScreenshots
get_Exists
FTPHosts
get_FtpHosts
set_FtpHosts
InjectIntoExodus
GetAntivirus
get_BatteryChargeStatus
get_OperationalStatus
AppStatus
get_PowerStatus
NtStatus
WriteWindows
ActiveWindows
arrays
get_Keys
Concat
Repeat
AppendFormat
ImageFormat
uFormat
format
get_IsAbstract
Extract
ManagementBaseObject
DeserializeObject
hFileMappingObject
hObject
Asn1DerObject
ManagementObject
cbKeyObject
pbKeyObject
NtQueryObject
object
Select
Collect
onDetect
flProtect
Unprotect
Distinct
CryptprotectPromptstruct
System.Net
get_BattleNet
set_BattleNet
GetShortcutTarget
System.Collections.IEnumerator.Reset
GetFileOffset
useOffset
ReadTableFromOffset
HeaderOffset
_headerOffset
_offset
Minecraft
get_Height
get_Lenght
set_Lenght
ConfigureAwait
op_Explicit
GrabberSizeLimit
SectionCommit
fpNssInit
WaitForExit
get_Salt
cbSalt
get_GlobalSalt
globalSalt
get_EntrySalt
entrySalt
VaultCloseVault
VaultOpenVault
get_Default
GetValueOrDefault
FirstOrDefault
pcbResult
IAsyncResult
tsResult
GetResult
SetResult
result
UnsignedInt
GetBytesFromInt
ZeroTrace.Implant
get_BatteryLifePercent
RandomUserAgent
WebClient
mailClient
TcpClient
_tcpClient
HttpClient
WebSocketClient
smptClient
System.Management
get_Element
set_Element
pResourceElement
XmlElement
pAuthenticatorElement
get_DocumentElement
pIdentityElement
dwIncrement
SqlStatement
GetComment
_comment
Environment
XmlDocument
get_Parent
GetParent
System.Collections.Generic.IEnumerator<ZeroPrivate.Classes.LogRecord>.Current
System.Collections.IEnumerator.Current
System.Collections.Generic.IEnumerator<ZeroPrivate.Classes.LogRecord>.get_Current
System.Collections.IEnumerator.get_Current
<>2__current
get_Content
set_Content
iContent
get_Count
CreditCardCount
CookieCount
get_HandleCount
get_iCount
set_iCount
AutoFillCount
vaultItemCount
get_IterationCount
dwPropertiesCount
FilesCount
ExtensionsCount
WalletsCount
vaultCount
GetRowCount
GetRamAmount
get_WebcamScreenshot
set_WebcamScreenshot
get_DesktopScreenshot
set_DesktopScreenshot
CaptureDesktopScreenshot
GetPathRoot
browserRoot
pPrompt
szPrompt
cBCrypt
StringsCrypt
DPAPIDecrypt
fpPk11SdrDecrypt
BCryptDecrypt
EasyDecrypt
BCryptEncrypt
ThreadStart
TrimStart
AppStart
JsonConvert
ServerPort
UnsignedShort
get_port
CreateReport
RemoveLatest
DiscordList
PasswordList
XmlNodeList
ToList
GoogleTokensList
WriteAppsList
ProcessList
get_AddressList
RmGetList
get_Host
set_ReadTimeout
set_WriteTimeout
cbInput
pbInput
cbOutput
pbOutput
get_StandardOutput
set_RedirectStandardOutput
MoveNext
System.Text
GetClipboardText
ReadAllText
AppendAllText
WriteAllText
pPlainText
get_CipherText
pCipherText
cipherText
get_InnerText
_cbMacContext
_pbMacContext
get_Ciphertext
ciphertext
ZeroTrace.Resources.hwid.txt
ZeroTrace.Resources.inj.txt
ZeroTrace.Resources.ip.txt
ZeroTrace.Resources.port.txt
get_PartIv
partIv
dwMaximumSizeLow
dwFileOffsetLow
get_Now
GetForegroundWindow
SetForegroundWindow
RmMainWindow
set_CreateNoWindow
RmOtherWindow
ShowWindow
nCmdShow
Datenow
GetFileSizeEx
ucchMax
endIdx
startIdx
_bufferEndIndex
UnicodeIndex
_blockIndex
_bufferStartIndex
startIndex
Yandex
FFRegex
TokenRegex
ParseWithEncodingFix
get_Tox
set_Tox
Stealer.Firefox
GroupBy
get_Day
get_Today
RetryDelay
get_Uplay
set_Uplay
ProtectedArray
ByteArray
InitializeArray
ToArray
InfoArray
GetDefaultGateway
get_IsReady
get_Key
set_Key
OpenSubKey
ReadKey
DecryptWithKey
strSessionKey
bMasterKey
ParseMasterKey
GetMasterKey
sPrevMasterKey
masterKey
get_sKey
set_sKey
ContainsKey
get_ProductKey
set_ProductKey
cryptKey
hImportKey
BCryptImportKey
get_sHostKey
set_sHostKey
BCryptDestroyKey
RegistryKey
ZeroPrivate.Cryptography
System.Security.Cryptography
get_Assembly
GetExecutingAssembly
GetAssembly
GetEntryAssembly
get_AddressFamily
get_HttpOnly
set_HttpOnly
get_httpOnly
PageReadonly
SelectMany
PageWriteCopy
BlockCopy
FileMapCopy
DirectoryCopy
bEntropy
pEntropy
GetSummary
LoadLibrary
FreeLibrary
GetBattery
Recovery
category
get_Directory
AddDirectory
CreateDirectory
DeleteDirectory
saveDirectory
CreateFromDirectory
sDirectory
currentDirectory
get_RootDirectory
CopyDirectory
directory
get_History
set_History
WriteHistory
pHistory
sHistory
FormatHistory
TableEntry
ZipFileEntry
CreateEntry
ZipArchiveEntry
SqliteMasterEntry
IPHostEntry
GetHostEntry
GetInfoFromRegistry
op_Equality
op_Inequality
get_Priority
System.Security
Identity
IsNullOrEmpty
BCryptSetAlgorithmProperty
BCryptGetProperty
BCryptSetProperty
pszProperty
AllowMultiple
Inherited
WalletStealer+<GatherAll>d__8
ZeroTrace.Program+<Main>d__4
(ZeroTrace.Program+<InjectIntoExodus>d__8
(ZeroTrace.Program+<InjectIntoAtomic>d__9
)ZeroTrace.Program+<PerformInjection>d__11
HZeroTrace.Program+WalletExtensionCollector+<CollectWalletExtensions>d__0
3System.Resources.Tools.StronglyTypedResourceBuilder
17.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
17.13.0.0
>ZeroTrace.Stub.Target.Messengers.Discord+<TokenStateAsync>d__4
AZeroTrace.Stub.Target.System.FileGrabber+<GrabDirectoryAsync>d__5
7ZeroTrace.Stub.Target.System.FileGrabber+<RunAsync>d__6
*ZeroPrivate.ServiceCounter+<Finalize>d__11
WrapNonExceptionThrows
ZeroTrace
Copyright
2024
$511e31c3-7502-4aa7-9315-7bbcf8ca66ba
Antivirus Signature
Bkav W32.AIDetectMalware.CS
Lionic Trojan.Win32.DataStealer.i!c
Elastic Windows.Generic.Threat
ClamAV Clean
CMC Clean
CAT-QuickHeal Trojan.Ghanarava.17457931919d24f3
Skyhigh Artemis!Trojan
ALYac Trojan.GenericKD.76268388
Cylance Unsafe
Zillya Trojan.Agent.Win32.4219411
Sangfor Suspicious.Win32.Save.a
CrowdStrike win/malicious_confidence_100% (W)
Alibaba TrojanPSW:MSIL/Stealgen.abb06039
K7GW Spyware ( 0056dd401 )
K7AntiVirus Spyware ( 0056dd401 )
Baidu Clean
VirIT Trojan.Win32.MSIL_Heur.A
Paloalto generic.ml
Symantec Infostealer
tehtris Clean
ESET-NOD32 a variant of MSIL/PSW.Agent.RXP
APEX Clean
Avast Win32:MalwareX-gen [Pws]
Cynet Clean
Kaspersky HEUR:Trojan-PSW.MSIL.Stealer.gen
BitDefender Trojan.GenericKD.76268388
NANO-Antivirus Trojan.Win32.Stealer.kwxwkr
ViRobot Trojan.Win.Z.Datastealer.256000.P
MicroWorld-eScan Trojan.GenericKD.76268388
Tencent Malware.Win32.Gencirc.11df6ad4
Sophos Troj/Steal-FDX
F-Secure Heuristic.HEUR/AGEN.1307370
DrWeb Trojan.PWS.Stealer.41994
VIPRE Trojan.GenericKD.76268388
TrendMicro TROJ_GEN.R002C0DDF25
McAfeeD Real Protect-LS!310C1B76FBF1
Trapmine Clean
CTX exe.trojan.msil
Emsisoft Trojan.GenericKD.76268388 (B)
huorong TrojanSpy/Stealer.gg
GData MSIL.Trojan-Stealer.DataStealer.B
Jiangmin Clean
Webroot Win.Redline.Stealer
Varist W32/MSIL_Agent.FTF.gen!Eldorado
Avira HEUR/AGEN.1307370
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Trojan.Win32.Agent.sa
Xcitium Clean
Arcabit Trojan.Generic.D48BC364
SUPERAntiSpyware Clean
ZoneAlarm Troj/Steal-FDX
Microsoft PWS:MSIL/Stealgen.GA!MTB
Google Detected
AhnLab-V3 Trojan/Win.Evital.C5728862
Acronis Clean
McAfee Artemis!310C1B76FBF1
TACHYON Clean
VBA32 Trojan.MSIL.InfoStealer.gen.D
Malwarebytes Spyware.StormKitty.MSIL
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall Trojan.Win32.VSX.PE04C9Z
Rising Stealer.Phemedrone!1.F3D5 (CLASSIC)
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Clean
Fortinet MSIL/Agent.CVT!tr
AVG Win32:MalwareX-gen [Pws]
DeepInstinct MALICIOUS
alibabacloud Trojan[stealer]:MSIL/Formbook.Gen
No IRMA results available.