68e32c669a3a49782dc0152dba8bb3a2

PE Executable

MD5: 68e32c669a3a49782dc0152dba8bb3a2

Size: 274.43 KB

application/x-dosexec

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

Symbol Obfuscation Score Low

MD5	68e32c669a3a49782dc0152dba8bb3a2
Sha1	35dea6ffdbf7698b339dddb93369b18303686b00
Sha256	3f3638fbc3bc326a996c034b2def5c1067c31a9c4ced9518abd73a485660fcb7
Sha384	6d5481713844f6d75a49b7aafd9119809351fb6980f0d9a0fefe8abe907df09d625bd921b4a216d0d9e8075ebebb628c
Sha512	ad1c7699e3b245f00e37a0ec2accde43bd1d089bef439c582a9d9f411125d1bf72f492b7264bbf51abe8d34e308a67fc592bd7f736b3800e83c9891fcfacc354
SSDeep	3072:qQ+blXHC7k7WZuXRAnxXFrXIV+gEN4PSL66U10dKQnVb2QfDs0LZY/Vgai/bbY:pQWrZ4P3y1nVb2udb
TLSH	F844741E2BE8A810E2FF8973D2B69125C5FBB4A346158D3E17D1E81A3A3E540DE05F53

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:rsrc>bin

Shape pe:exe>pe:rsrc>bin

malicious 3 nodes

Path pe:exe>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	Remington.exe
Full Name	Remington.exe
EntryPoint	System.Void Remington.COVID19::Main()
Scope Name	Remington.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Remington
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	4596
Main Method	System.Void Remington.COVID19::Main()
Main IL Instruction Count	640
Main IL	nop <null> call System.Void Remington.COVID19::ClickTracker() nop <null> call System.Void Remington.COVID19::DelayExcute() nop <null> call System.Void Remington.COVID19::AntiVm() nop <null> call System.Void Remington.COVID19::AntiSandboxie() nop <null> call System.Void Remington.COVID19::FakeMessageBox() nop <null> call System.Void Remington.COVID19::SelfHidden() nop <null> call System.Void Remington.COVID19::OpenWebsites() nop <null> call System.Void Remington.COVID19::MeltMele() nop <null> call System.Void Remington.COVID19::DisableWD() nop <null> call System.Void Remington.COVID19::Restores_Disabler() nop <null> call System.Void Remington.COVID19::Taskmgr_Disabler() nop <null> call System.Void Remington.COVID19::CMD_Disabler() nop <null> call System.Void Remington.COVID19::Registeries_Disabler() nop <null> call System.Void Remington.COVID19::DownloaderFile() nop <null> call System.Void Remington.COVID19::ProcessKiller() nop <null> call System.Void Remington.COVID19::Browser_Killer() nop <null> call System.Void Remington.COVID19::CookiesEraser() nop <null> call System.Void Remington.VIPSeassion::COVIDSTOutlook() nop <null> call System.Void Remington.VIPSeassion::COVIDSTFoxmail() nop <null> call System.Void Remington.VIPF_Based::COVIDSTThunderbird() nop <null> call System.Void Remington.VIPF_Based::COVIDSTPostBox() nop <null> call System.Void Remington.VIPSeassion::COVIDSTChrome() nop <null> call System.Void Remington.VIPSeassion::COVIDSTCocCoc() nop <null> call System.Void Remington.VIPSeassion::COVIDSTQQ() nop <null> call System.Void Remington.VIPSeassion::COVIDSTorbitum() nop <null> call System.Void Remington.VIPSeassion::COVIDSTAmigo() nop <null> call System.Void Remington.VIPSeassion::COVIDSTXpom() nop <null> call System.Void Remington.VIPSeassion::COVIDSTKometa() nop <null> call System.Void Remington.VIPSeassion::COVIDSTNichrome() nop <null> call System.Void Remington.VIPSeassion::COVIDSTSlimjet() nop <null> call System.Void Remington.VIPSeassion::COVIDSTIridium() nop <null> call System.Void Remington.VIPSeassion::COVIDSTVivaldi() nop <null> call System.Void Remington.VIPSeassion::COVIDSTIron() nop <null> call System.Void Remington.VIPSeassion::COVIDSTChromium() nop <null> call System.Void Remington.VIPSeassion::COVIDSTGhost() nop <null> call System.Void Remington.VIPSeassion::COVIDSTCent() nop <null> call System.Void Remington.VIPSeassion::COVIDSTxVast() nop <null> call System.Void Remington.VIPSeassion::COVIDSTChedot() nop <null> call System.Void Remington.VIPSeassion::COVIDSTSuperbird() nop <null> call System.Void Remington.VIPSeassion::COVIDST360_English() nop <null> call System.Void Remington.VIPSeassion::COVIDST360_China() nop <null> call System.Void Remington.VIPSeassion::COVIDSTComodo() nop <null> call System.Void Remington.VIPSeassion::COVIDSTBrave() nop <null> call System.Void Remington.VIPSeassion::COVIDSTTorch() nop <null> call System.Void Remington.VIPSeassion::COVIDSTUC() nop <null> call System.Void Remington.VIPSeassion::COVIDSTBlisk() nop <null> call System.Void Remington.VIPSeassion::COVIDSTEpic() nop <null> call System.Void Remington.VIPSeassion::COVIDSTavast() nop <null> call System.Void Remington.VIPSeassion::COVIDSTKinzaa() nop <null> call System.Void Remington.VIPSeassion::COVIDSTBlackHawk() nop <null> call System.Void Remington.VIPSeassion::COVIDSTCitrio() nop <null> call System.Void Remington.VIPSeassion::COVIDSTUran() nop <null> call System.Void Remington.VIPSeassion::COVIDSTCoowon() nop <null> call System.Void Remington.VIPSeassion::COVIDST7Star() nop <null> call System.Void Remington.VIPSeassion::COVIDSTQIPSurf() nop <null> call System.Void Remington.VIPSeassion::COVIDSTSleipnir() nop <null> call System.Void Remington.VIPSeassion::COVIDSTChrome_Canary() nop <null> call System.Void Remington.VIPSeassion::COVIDSTCoolNovo() nop <null> call System.Void Remington.VIPSeassion::COVIDSTSputnik() nop <null> call System.Void Remington.VIPSeassion::COVIDSTFalkon() nop <null> call System.Void Remington.VIPSeassion::COVIDSTMicrosoft() nop <null> call System.Void Remington.VIPSeassion::Cookies_Chrome() nop <null> call System.Void Remington.VIPSeassion::Cookies_CocCoc() nop <null> call System.Void Remington.VIPSeassion::Cookies_QQ() nop <null> call System.Void Remington.VIPSeassion::Cookies_orbitum() nop <null> call System.Void Remington.VIPSeassion::Cookies_Amigo() nop <null> call System.Void Remington.VIPSeassion::Cookies_Xpom() nop <null> call System.Void Remington.VIPSeassion::Cookies_Kometa() nop <null> call System.Void Remington.VIPSeassion::Cookies_Nichrome() nop <null> call System.Void Remington.VIPSeassion::Cookies_Slimjet() nop <null> call System.Void Remington.VIPSeassion::Cookies_Iridium() nop <null> call System.Void Remington.VIPSeassion::Cookies_Vivaldi() nop <null> call System.Void Remington.VIPSeassion::Cookies_Iron() nop <null> call System.Void Remington.VIPSeassion::Cookies_Chromium() nop <null> call System.Void Remington.VIPSeassion::Cookies_Ghost() nop <null> call System.Void Remington.VIPSeassion::Cookies_Cent() nop <null> call System.Void Remington.VIPSeassion::Cookies_xVast() nop <null> call System.Void Remington.VIPSeassion::Cookies_Chedot() nop <null> call System.Void Remington.VIPSeassion::Cookies_Superbird() nop <null> call System.Void Remington.VIPSeassion::Cookies_360_English() nop <null> call System.Void Remington.VIPSeassion::Cookies_360_China() nop <null> call System.Void Remington.VIPSeassion::Cookies_Comodo() nop <null> call System.Void Remington.VIPSeassion::Cookies_Brave() nop <null> call System.Void Remington.VIPSeassion::Cookies_Torch() nop <null> call System.Void Remington.VIPSeassion::Cookies_UC() nop <null> call System.Void Remington.VIPSeassion::Cookies_Blisk() nop <null> call System.Void Remington.VIPSeassion::Cookies_Epic() nop <null> call System.Void Remington.VIPSeassion::Cookies_Kinza() nop <null> call System.Void Remington.VIPSeassion::Cookies_BlackHawk() nop <null> call System.Void Remington.VIPSeassion::Cookies_Citrio() nop <null> call System.Void Remington.VIPSeassion::Cookies_Uran() nop <null> call System.Void Remington.VIPSeassion::Cookies_Coowon() nop <null> call System.Void Remington.VIPSeassion::Cookies_7Star() nop <null> call System.Void Remington.VIPSeassion::Cookies_QIPSurf() nop <null> call System.Void Remington.VIPSeassion::Cookies_Sleipnir() nop <null> call System.Void Remington.VIPSeassion::Cookies_Chrome_Canary() nop <null> call System.Void Remington.VIPSeassion::Cookies_CoolNovo() nop <null> call System.Void Remington.VIPSeassion::Cookies_Sputnik() nop <null> call System.Void Remington.VIPSeassion::Cookies_Falkon() nop <null> call System.Void Remington.VIPSeassion::Cookies_MicrosoftEdge() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Chrome() nop <null> call System.Void Remington.VIPSeassion::CreditCard_CocCoc() nop <null> call System.Void Remington.VIPSeassion::CreditCard_QQ() nop <null> call System.Void Remington.VIPSeassion::CreditCard_orbitum() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Amigo() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Xpom() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Kometa() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Nichrome() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Slimjet() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Iridium() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Vivaldi() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Iron() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Chromium() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Ghost() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Cent() nop <null> call System.Void Remington.VIPSeassion::CreditCard_xVast() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Chedot() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Superbird() nop <null> call System.Void Remington.VIPSeassion::CreditCard_360_English() nop <null> call System.Void Remington.VIPSeassion::CreditCard_360_China() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Comodo() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Brave() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Torch() nop <null> call System.Void Remington.VIPSeassion::CreditCard_UC() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Blisk() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Epic() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Kinza() nop <null> call System.Void Remington.VIPSeassion::CreditCard_BlackHawk() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Citrio() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Uran() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Coowon() nop <null> call System.Void Remington.VIPSeassion::CreditCard_7Star() nop <null> call System.Void Remington.VIPSeassion::CreditCard_QIPSurf() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Sleipnir() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Chrome_Canary() nop <null> call System.Void Remington.VIPSeassion::CreditCard_CoolNovo() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Sputnik() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Falkon() nop <null> call System.Void Remington.VIPSeassion::CreditCard_MicrosoftEdge() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Chrome() nop <null> call System.Void Remington.VIPSeassion::AutoFill_CocCoc() nop <null> call System.Void Remington.VIPSeassion::AutoFill_QQ() nop <null> call System.Void Remington.VIPSeassion::AutoFill_orbitum() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Amigo() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Xpom() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Kometa() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Nichrome() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Slimjet() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Iridium() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Vivaldi() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Iron() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Chromium() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Ghost() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Cent() nop <null> call System.Void Remington.VIPSeassion::AutoFill_xVast() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Chedot() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Superbird() nop <null> call System.Void Remington.VIPSeassion::AutoFill_360_English() nop <null> call System.Void Remington.VIPSeassion::AutoFill_360_China() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Comodo() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Brave() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Torch() nop <null> call System.Void Remington.VIPSeassion::AutoFill_UC() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Blisk() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Epic() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Kinza() nop <null> call System.Void Remington.VIPSeassion::AutoFill_BlackHawk() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Citrio() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Uran() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Coowon() nop <null> call System.Void Remington.VIPSeassion::AutoFill_7Star() nop <null> call System.Void Remington.VIPSeassion::AutoFill_QIPSurf() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Sleipnir() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Chrome_Canary() nop <null> call System.Void Remington.VIPSeassion::AutoFill_CoolNovo() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Sputnik() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Falkon() nop <null> call System.Void Remington.VIPSeassion::AutoFill_MicrosoftEdge() nop <null> call System.Void Remington.VIPSeassion::Downloads_Chrome() nop <null> call System.Void Remington.VIPSeassion::Downloads_CocCoc() nop <null> call System.Void Remington.VIPSeassion::Downloads_QQ() nop <null> call System.Void Remington.VIPSeassion::Downloads_orbitum() nop <null> call System.Void Remington.VIPSeassion::Downloads_Amigo() nop <null> call System.Void Remington.VIPSeassion::Downloads_Xpom() nop <null> call System.Void Remington.VIPSeassion::Downloads_Kometa() nop <null> call System.Void Remington.VIPSeassion::Downloads_Nichrome() nop <null> call System.Void Remington.VIPSeassion::Downloads_Slimjet() nop <null> call System.Void Remington.VIPSeassion::Downloads_Iridium() nop <null> call System.Void Remington.VIPSeassion::Downloads_Vivaldi() nop <null> call System.Void Remington.VIPSeassion::Downloads_Iron() nop <null> call System.Void Remington.VIPSeassion::Downloads_Chromium() nop <null> call System.Void Remington.VIPSeassion::Downloads_Ghost() nop <null> call System.Void Remington.VIPSeassion::Downloads_Cent() nop <null> call System.Void Remington.VIPSeassion::Downloads_xVast() nop <null> call System.Void Remington.VIPSeassion::Downloads_Chedot() nop <null> call System.Void Remington.VIPSeassion::Downloads_Superbird() nop <null> call System.Void Remington.VIPSeassion::Downloads_360_English() nop <null> call System.Void Remington.VIPSeassion::Downloads_360_China() nop <null> call System.Void Remington.VIPSeassion::Downloads_Comodo() nop <null> call System.Void Remington.VIPSeassion::Downloads_Brave() nop <null> call System.Void Remington.VIPSeassion::Downloads_Torch() nop <null> call System.Void Remington.VIPSeassion::Downloads_UC() nop <null> call System.Void Remington.VIPSeassion::Downloads_Blisk() nop <null> call System.Void Remington.VIPSeassion::Downloads_Epic() nop <null> call System.Void Remington.VIPSeassion::Downloads_Kinza() nop <null> call System.Void Remington.VIPSeassion::Downloads_BlackHawk() nop <null> call System.Void Remington.VIPSeassion::Downloads_Citrio() nop <null> call System.Void Remington.VIPSeassion::Downloads_Uran() nop <null> call System.Void Remington.VIPSeassion::Downloads_Coowon() nop <null> call System.Void Remington.VIPSeassion::Downloads_7Star() nop <null> call System.Void Remington.VIPSeassion::Downloads_QIPSurf() nop <null> call System.Void Remington.VIPSeassion::Downloads_Sleipnir() nop <null> call System.Void Remington.VIPSeassion::Downloads_Chrome_Canary() nop <null> call System.Void Remington.VIPSeassion::Downloads_CoolNovo() nop <null> call System.Void Remington.VIPSeassion::Downloads_Sputnik() nop <null> call System.Void Remington.VIPSeassion::Downloads_Falkon() nop <null> call System.Void Remington.VIPSeassion::Downloads_MicrosoftEdge() nop <null> call System.Void Remington.VIPSeassion::TopSites_Chrome() nop <null> call System.Void Remington.VIPSeassion::TopSites_CocCoc() nop <null> call System.Void Remington.VIPSeassion::TopSites_QQ() nop <null> call System.Void Remington.VIPSeassion::TopSites_orbitum() nop <null> call System.Void Remington.VIPSeassion::TopSites_Amigo() nop <null> call System.Void Remington.VIPSeassion::TopSites_Xpom() nop <null> call System.Void Remington.VIPSeassion::TopSites_Kometa() nop <null> call System.Void Remington.VIPSeassion::TopSites_Nichrome() nop <null> call System.Void Remington.VIPSeassion::TopSites_Slimjet() nop <null> call System.Void Remington.VIPSeassion::TopSites_Iridium() nop <null> call System.Void Remington.VIPSeassion::TopSites_Vivaldi() nop <null> call System.Void Remington.VIPSeassion::TopSites_Iron() nop <null> call System.Void Remington.VIPSeassion::TopSites_Chromium() nop <null> call System.Void Remington.VIPSeassion::TopSites_Ghost() nop <null> call System.Void Remington.VIPSeassion::TopSites_Cent() nop <null> call System.Void Remington.VIPSeassion::TopSites_xVast() nop <null> call System.Void Remington.VIPSeassion::TopSites_Chedot() nop <null> call System.Void Remington.VIPSeassion::TopSites_Superbird() nop <null> call System.Void Remington.VIPSeassion::TopSites_360_English() nop <null> call System.Void Remington.VIPSeassion::TopSites_360_China() nop <null> call System.Void Remington.VIPSeassion::TopSites_Comodo() nop <null> call System.Void Remington.VIPSeassion::TopSites_Brave() nop <null> call System.Void Remington.VIPSeassion::TopSites_Torch() nop <null> call System.Void Remington.VIPSeassion::TopSites_UC() nop <null> call System.Void Remington.VIPSeassion::TopSites_Blisk() nop <null> call System.Void Remington.VIPSeassion::TopSites_Epic() nop <null> call System.Void Remington.VIPSeassion::TopSites_Kinza() nop <null> call System.Void Remington.VIPSeassion::TopSites_BlackHawk() nop <null> call System.Void Remington.VIPSeassion::TopSites_Citrio() nop <null> call System.Void Remington.VIPSeassion::TopSites_Uran() nop <null> call System.Void Remington.VIPSeassion::TopSites_Coowon() nop <null> call System.Void Remington.VIPSeassion::TopSites_7Star() nop <null> call System.Void Remington.VIPSeassion::TopSites_QIPSurf() nop <null> call System.Void Remington.VIPSeassion::TopSites_Sleipnir() nop <null> call System.Void Remington.VIPSeassion::TopSites_Chrome_Canary() nop <null> call System.Void Remington.VIPSeassion::TopSites_CoolNovo() nop <null> call System.Void Remington.VIPSeassion::TopSites_Sputnik() nop <null> call System.Void Remington.VIPSeassion::TopSites_Falkon() nop <null> call System.Void Remington.VIPSeassion::TopSites_MicrosoftEdge() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Chrome() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_CocCoc() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_QQ() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_orbitum() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Amigo() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Xpom() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Kometa() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Nichrome() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Slimjet() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Iridium() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Vivaldi() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Iron() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Chromium() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Ghost() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Cent() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_xVast() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Chedot() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Superbird() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_360_English() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_360_China() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Comodo() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Brave() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Torch() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_UC() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Blisk() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Epic() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Kinza() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_BlackHawk() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Citrio() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Uran() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Coowon() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_7Star() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_QIPSurf() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Sleipnir() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Chrome_Canary() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_CoolNovo() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Sputnik() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Falkon() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_MicrosoftEdge() nop <null> call System.Void Remington.VIPSeassion::GetInstalledBrowsers() nop <null> call System.Void Remington.VIPSeassion::InstalledSoftwares() nop <null> call System.Void Remington.VIPSeassion::TheWiFi_Orginal() nop <null> call System.Void Remington.VIPSeassion::COVIDSTOpera() nop <null> call System.Void Remington.VIPSeassion::WindowsProductKey_Orginal() nop <null> call System.Void Remington.VIPSeassion::COVIDSTLiebao() nop <null> call System.Void Remington.VIPSeassion::COVIDSTDiscord() nop <null> call System.Void Remington.VIPSeassion::COVIDSTFileZilla() nop <null> call System.Void Remington.VIPSeassion::COVIDSTPidgin() nop <null> call System.Void Remington.VIPSeassion::TheWiFi_Orginal() nop <null> call System.Void Remington.VIPF_Based::COVIDSTSlim() nop <null> call System.Void Remington.VIPF_Based::COVIDSTFireFox() nop <null> call System.Void Remington.VIPF_Based::COVIDSTSeaMonkey() nop <null> call System.Void Remington.VIPF_Based::COVIDSTIceDragon() nop <null> call System.Void Remington.VIPF_Based::COVIDSTCyberFox() nop <null> call System.Void Remington.VIPF_Based::COVIDSTPaleMoon() nop <null> call System.Void Remington.VIPF_Based::COVIDSTWaterFox() nop <null> call System.Void Remington.VIPF_Based::ThunderbirdContact() nop <null> call System.Void Remington.VIPSeassion::OutlookContact() nop <null> call System.Void Remington.VIPSeassion::FoxmailCustomContact() nop <null> call System.Void Remington.VIPSeassion::FoxmailDefaultContact() nop <null> call System.Void Remington.COVID19::AntiBotStart() nop <null> call System.Void Remington.COVID19::NormalStart() nop <null> call System.Void System.Windows.Forms.Application::Run() nop <null> ret <null>
Module Name	Remington.exe
Full Name	Remington.exe
EntryPoint	System.Void Remington.COVID19::Main()
Scope Name	Remington.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Remington
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	4596
Main Method	System.Void Remington.COVID19::Main()
Main IL Instruction Count	640
Main IL	nop <null> call System.Void Remington.COVID19::ClickTracker() nop <null> call System.Void Remington.COVID19::DelayExcute() nop <null> call System.Void Remington.COVID19::AntiVm() nop <null> call System.Void Remington.COVID19::AntiSandboxie() nop <null> call System.Void Remington.COVID19::FakeMessageBox() nop <null> call System.Void Remington.COVID19::SelfHidden() nop <null> call System.Void Remington.COVID19::OpenWebsites() nop <null> call System.Void Remington.COVID19::MeltMele() nop <null> call System.Void Remington.COVID19::DisableWD() nop <null> call System.Void Remington.COVID19::Restores_Disabler() nop <null> call System.Void Remington.COVID19::Taskmgr_Disabler() nop <null> call System.Void Remington.COVID19::CMD_Disabler() nop <null> call System.Void Remington.COVID19::Registeries_Disabler() nop <null> call System.Void Remington.COVID19::DownloaderFile() nop <null> call System.Void Remington.COVID19::ProcessKiller() nop <null> call System.Void Remington.COVID19::Browser_Killer() nop <null> call System.Void Remington.COVID19::CookiesEraser() nop <null> call System.Void Remington.VIPSeassion::COVIDSTOutlook() nop <null> call System.Void Remington.VIPSeassion::COVIDSTFoxmail() nop <null> call System.Void Remington.VIPF_Based::COVIDSTThunderbird() nop <null> call System.Void Remington.VIPF_Based::COVIDSTPostBox() nop <null> call System.Void Remington.VIPSeassion::COVIDSTChrome() nop <null> call System.Void Remington.VIPSeassion::COVIDSTCocCoc() nop <null> call System.Void Remington.VIPSeassion::COVIDSTQQ() nop <null> call System.Void Remington.VIPSeassion::COVIDSTorbitum() nop <null> call System.Void Remington.VIPSeassion::COVIDSTAmigo() nop <null> call System.Void Remington.VIPSeassion::COVIDSTXpom() nop <null> call System.Void Remington.VIPSeassion::COVIDSTKometa() nop <null> call System.Void Remington.VIPSeassion::COVIDSTNichrome() nop <null> call System.Void Remington.VIPSeassion::COVIDSTSlimjet() nop <null> call System.Void Remington.VIPSeassion::COVIDSTIridium() nop <null> call System.Void Remington.VIPSeassion::COVIDSTVivaldi() nop <null> call System.Void Remington.VIPSeassion::COVIDSTIron() nop <null> call System.Void Remington.VIPSeassion::COVIDSTChromium() nop <null> call System.Void Remington.VIPSeassion::COVIDSTGhost() nop <null> call System.Void Remington.VIPSeassion::COVIDSTCent() nop <null> call System.Void Remington.VIPSeassion::COVIDSTxVast() nop <null> call System.Void Remington.VIPSeassion::COVIDSTChedot() nop <null> call System.Void Remington.VIPSeassion::COVIDSTSuperbird() nop <null> call System.Void Remington.VIPSeassion::COVIDST360_English() nop <null> call System.Void Remington.VIPSeassion::COVIDST360_China() nop <null> call System.Void Remington.VIPSeassion::COVIDSTComodo() nop <null> call System.Void Remington.VIPSeassion::COVIDSTBrave() nop <null> call System.Void Remington.VIPSeassion::COVIDSTTorch() nop <null> call System.Void Remington.VIPSeassion::COVIDSTUC() nop <null> call System.Void Remington.VIPSeassion::COVIDSTBlisk() nop <null> call System.Void Remington.VIPSeassion::COVIDSTEpic() nop <null> call System.Void Remington.VIPSeassion::COVIDSTavast() nop <null> call System.Void Remington.VIPSeassion::COVIDSTKinzaa() nop <null> call System.Void Remington.VIPSeassion::COVIDSTBlackHawk() nop <null> call System.Void Remington.VIPSeassion::COVIDSTCitrio() nop <null> call System.Void Remington.VIPSeassion::COVIDSTUran() nop <null> call System.Void Remington.VIPSeassion::COVIDSTCoowon() nop <null> call System.Void Remington.VIPSeassion::COVIDST7Star() nop <null> call System.Void Remington.VIPSeassion::COVIDSTQIPSurf() nop <null> call System.Void Remington.VIPSeassion::COVIDSTSleipnir() nop <null> call System.Void Remington.VIPSeassion::COVIDSTChrome_Canary() nop <null> call System.Void Remington.VIPSeassion::COVIDSTCoolNovo() nop <null> call System.Void Remington.VIPSeassion::COVIDSTSputnik() nop <null> call System.Void Remington.VIPSeassion::COVIDSTFalkon() nop <null> call System.Void Remington.VIPSeassion::COVIDSTMicrosoft() nop <null> call System.Void Remington.VIPSeassion::Cookies_Chrome() nop <null> call System.Void Remington.VIPSeassion::Cookies_CocCoc() nop <null> call System.Void Remington.VIPSeassion::Cookies_QQ() nop <null> call System.Void Remington.VIPSeassion::Cookies_orbitum() nop <null> call System.Void Remington.VIPSeassion::Cookies_Amigo() nop <null> call System.Void Remington.VIPSeassion::Cookies_Xpom() nop <null> call System.Void Remington.VIPSeassion::Cookies_Kometa() nop <null> call System.Void Remington.VIPSeassion::Cookies_Nichrome() nop <null> call System.Void Remington.VIPSeassion::Cookies_Slimjet() nop <null> call System.Void Remington.VIPSeassion::Cookies_Iridium() nop <null> call System.Void Remington.VIPSeassion::Cookies_Vivaldi() nop <null> call System.Void Remington.VIPSeassion::Cookies_Iron() nop <null> call System.Void Remington.VIPSeassion::Cookies_Chromium() nop <null> call System.Void Remington.VIPSeassion::Cookies_Ghost() nop <null> call System.Void Remington.VIPSeassion::Cookies_Cent() nop <null> call System.Void Remington.VIPSeassion::Cookies_xVast() nop <null> call System.Void Remington.VIPSeassion::Cookies_Chedot() nop <null> call System.Void Remington.VIPSeassion::Cookies_Superbird() nop <null> call System.Void Remington.VIPSeassion::Cookies_360_English() nop <null> call System.Void Remington.VIPSeassion::Cookies_360_China() nop <null> call System.Void Remington.VIPSeassion::Cookies_Comodo() nop <null> call System.Void Remington.VIPSeassion::Cookies_Brave() nop <null> call System.Void Remington.VIPSeassion::Cookies_Torch() nop <null> call System.Void Remington.VIPSeassion::Cookies_UC() nop <null> call System.Void Remington.VIPSeassion::Cookies_Blisk() nop <null> call System.Void Remington.VIPSeassion::Cookies_Epic() nop <null> call System.Void Remington.VIPSeassion::Cookies_Kinza() nop <null> call System.Void Remington.VIPSeassion::Cookies_BlackHawk() nop <null> call System.Void Remington.VIPSeassion::Cookies_Citrio() nop <null> call System.Void Remington.VIPSeassion::Cookies_Uran() nop <null> call System.Void Remington.VIPSeassion::Cookies_Coowon() nop <null> call System.Void Remington.VIPSeassion::Cookies_7Star() nop <null> call System.Void Remington.VIPSeassion::Cookies_QIPSurf() nop <null> call System.Void Remington.VIPSeassion::Cookies_Sleipnir() nop <null> call System.Void Remington.VIPSeassion::Cookies_Chrome_Canary() nop <null> call System.Void Remington.VIPSeassion::Cookies_CoolNovo() nop <null> call System.Void Remington.VIPSeassion::Cookies_Sputnik() nop <null> call System.Void Remington.VIPSeassion::Cookies_Falkon() nop <null> call System.Void Remington.VIPSeassion::Cookies_MicrosoftEdge() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Chrome() nop <null> call System.Void Remington.VIPSeassion::CreditCard_CocCoc() nop <null> call System.Void Remington.VIPSeassion::CreditCard_QQ() nop <null> call System.Void Remington.VIPSeassion::CreditCard_orbitum() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Amigo() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Xpom() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Kometa() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Nichrome() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Slimjet() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Iridium() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Vivaldi() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Iron() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Chromium() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Ghost() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Cent() nop <null> call System.Void Remington.VIPSeassion::CreditCard_xVast() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Chedot() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Superbird() nop <null> call System.Void Remington.VIPSeassion::CreditCard_360_English() nop <null> call System.Void Remington.VIPSeassion::CreditCard_360_China() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Comodo() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Brave() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Torch() nop <null> call System.Void Remington.VIPSeassion::CreditCard_UC() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Blisk() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Epic() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Kinza() nop <null> call System.Void Remington.VIPSeassion::CreditCard_BlackHawk() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Citrio() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Uran() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Coowon() nop <null> call System.Void Remington.VIPSeassion::CreditCard_7Star() nop <null> call System.Void Remington.VIPSeassion::CreditCard_QIPSurf() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Sleipnir() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Chrome_Canary() nop <null> call System.Void Remington.VIPSeassion::CreditCard_CoolNovo() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Sputnik() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Falkon() nop <null> call System.Void Remington.VIPSeassion::CreditCard_MicrosoftEdge() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Chrome() nop <null> call System.Void Remington.VIPSeassion::AutoFill_CocCoc() nop <null> call System.Void Remington.VIPSeassion::AutoFill_QQ() nop <null> call System.Void Remington.VIPSeassion::AutoFill_orbitum() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Amigo() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Xpom() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Kometa() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Nichrome() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Slimjet() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Iridium() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Vivaldi() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Iron() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Chromium() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Ghost() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Cent() nop <null> call System.Void Remington.VIPSeassion::AutoFill_xVast() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Chedot() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Superbird() nop <null> call System.Void Remington.VIPSeassion::AutoFill_360_English() nop <null> call System.Void Remington.VIPSeassion::AutoFill_360_China() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Comodo() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Brave() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Torch() nop <null> call System.Void Remington.VIPSeassion::AutoFill_UC() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Blisk() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Epic() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Kinza() nop <null> call System.Void Remington.VIPSeassion::AutoFill_BlackHawk() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Citrio() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Uran() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Coowon() nop <null> call System.Void Remington.VIPSeassion::AutoFill_7Star() nop <null> call System.Void Remington.VIPSeassion::AutoFill_QIPSurf() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Sleipnir() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Chrome_Canary() nop <null> call System.Void Remington.VIPSeassion::AutoFill_CoolNovo() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Sputnik() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Falkon() nop <null> call System.Void Remington.VIPSeassion::AutoFill_MicrosoftEdge() nop <null> call System.Void Remington.VIPSeassion::Downloads_Chrome() nop <null> call System.Void Remington.VIPSeassion::Downloads_CocCoc() nop <null> call System.Void Remington.VIPSeassion::Downloads_QQ() nop <null> call System.Void Remington.VIPSeassion::Downloads_orbitum() nop <null> call System.Void Remington.VIPSeassion::Downloads_Amigo() nop <null> call System.Void Remington.VIPSeassion::Downloads_Xpom() nop <null> call System.Void Remington.VIPSeassion::Downloads_Kometa() nop <null> call System.Void Remington.VIPSeassion::Downloads_Nichrome() nop <null> call System.Void Remington.VIPSeassion::Downloads_Slimjet() nop <null> call System.Void Remington.VIPSeassion::Downloads_Iridium() nop <null> call System.Void Remington.VIPSeassion::Downloads_Vivaldi() nop <null> call System.Void Remington.VIPSeassion::Downloads_Iron() nop <null> call System.Void Remington.VIPSeassion::Downloads_Chromium() nop <null> call System.Void Remington.VIPSeassion::Downloads_Ghost() nop <null> call System.Void Remington.VIPSeassion::Downloads_Cent() nop <null> call System.Void Remington.VIPSeassion::Downloads_xVast() nop <null> call System.Void Remington.VIPSeassion::Downloads_Chedot() nop <null> call System.Void Remington.VIPSeassion::Downloads_Superbird() nop <null> call System.Void Remington.VIPSeassion::Downloads_360_English() nop <null> call System.Void Remington.VIPSeassion::Downloads_360_China() nop <null> call System.Void Remington.VIPSeassion::Downloads_Comodo() nop <null> call System.Void Remington.VIPSeassion::Downloads_Brave() nop <null> call System.Void Remington.VIPSeassion::Downloads_Torch() nop <null> call System.Void Remington.VIPSeassion::Downloads_UC() nop <null> call System.Void Remington.VIPSeassion::Downloads_Blisk() nop <null> call System.Void Remington.VIPSeassion::Downloads_Epic() nop <null> call System.Void Remington.VIPSeassion::Downloads_Kinza() nop <null> call System.Void Remington.VIPSeassion::Downloads_BlackHawk() nop <null> call System.Void Remington.VIPSeassion::Downloads_Citrio() nop <null> call System.Void Remington.VIPSeassion::Downloads_Uran() nop <null> call System.Void Remington.VIPSeassion::Downloads_Coowon() nop <null> call System.Void Remington.VIPSeassion::Downloads_7Star() nop <null> call System.Void Remington.VIPSeassion::Downloads_QIPSurf() nop <null> call System.Void Remington.VIPSeassion::Downloads_Sleipnir() nop <null> call System.Void Remington.VIPSeassion::Downloads_Chrome_Canary() nop <null> call System.Void Remington.VIPSeassion::Downloads_CoolNovo() nop <null> call System.Void Remington.VIPSeassion::Downloads_Sputnik() nop <null> call System.Void Remington.VIPSeassion::Downloads_Falkon() nop <null> call System.Void Remington.VIPSeassion::Downloads_MicrosoftEdge() nop <null> call System.Void Remington.VIPSeassion::TopSites_Chrome() nop <null> call System.Void Remington.VIPSeassion::TopSites_CocCoc() nop <null> call System.Void Remington.VIPSeassion::TopSites_QQ() nop <null> call System.Void Remington.VIPSeassion::TopSites_orbitum() nop <null> call System.Void Remington.VIPSeassion::TopSites_Amigo() nop <null> call System.Void Remington.VIPSeassion::TopSites_Xpom() nop <null> call System.Void Remington.VIPSeassion::TopSites_Kometa() nop <null> call System.Void Remington.VIPSeassion::TopSites_Nichrome() nop <null> call System.Void Remington.VIPSeassion::TopSites_Slimjet() nop <null> call System.Void Remington.VIPSeassion::TopSites_Iridium() nop <null> call System.Void Remington.VIPSeassion::TopSites_Vivaldi() nop <null> call System.Void Remington.VIPSeassion::TopSites_Iron() nop <null> call System.Void Remington.VIPSeassion::TopSites_Chromium() nop <null> call System.Void Remington.VIPSeassion::TopSites_Ghost() nop <null> call System.Void Remington.VIPSeassion::TopSites_Cent() nop <null> call System.Void Remington.VIPSeassion::TopSites_xVast() nop <null> call System.Void Remington.VIPSeassion::TopSites_Chedot() nop <null> call System.Void Remington.VIPSeassion::TopSites_Superbird() nop <null> call System.Void Remington.VIPSeassion::TopSites_360_English() nop <null> call System.Void Remington.VIPSeassion::TopSites_360_China() nop <null> call System.Void Remington.VIPSeassion::TopSites_Comodo() nop <null> call System.Void Remington.VIPSeassion::TopSites_Brave() nop <null> call System.Void Remington.VIPSeassion::TopSites_Torch() nop <null> call System.Void Remington.VIPSeassion::TopSites_UC() nop <null> call System.Void Remington.VIPSeassion::TopSites_Blisk() nop <null> call System.Void Remington.VIPSeassion::TopSites_Epic() nop <null> call System.Void Remington.VIPSeassion::TopSites_Kinza() nop <null> call System.Void Remington.VIPSeassion::TopSites_BlackHawk() nop <null> call System.Void Remington.VIPSeassion::TopSites_Citrio() nop <null> call System.Void Remington.VIPSeassion::TopSites_Uran() nop <null> call System.Void Remington.VIPSeassion::TopSites_Coowon() nop <null> call System.Void Remington.VIPSeassion::TopSites_7Star() nop <null> call System.Void Remington.VIPSeassion::TopSites_QIPSurf() nop <null> call System.Void Remington.VIPSeassion::TopSites_Sleipnir() nop <null> call System.Void Remington.VIPSeassion::TopSites_Chrome_Canary() nop <null> call System.Void Remington.VIPSeassion::TopSites_CoolNovo() nop <null> call System.Void Remington.VIPSeassion::TopSites_Sputnik() nop <null> call System.Void Remington.VIPSeassion::TopSites_Falkon() nop <null> call System.Void Remington.VIPSeassion::TopSites_MicrosoftEdge() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Chrome() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_CocCoc() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_QQ() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_orbitum() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Amigo() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Xpom() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Kometa() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Nichrome() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Slimjet() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Iridium() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Vivaldi() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Iron() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Chromium() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Ghost() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Cent() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_xVast() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Chedot() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Superbird() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_360_English() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_360_China() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Comodo() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Brave() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Torch() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_UC() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Blisk() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Epic() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Kinza() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_BlackHawk() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Citrio() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Uran() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Coowon() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_7Star() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_QIPSurf() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Sleipnir() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Chrome_Canary() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_CoolNovo() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Sputnik() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Falkon() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_MicrosoftEdge() nop <null> call System.Void Remington.VIPSeassion::GetInstalledBrowsers() nop <null> call System.Void Remington.VIPSeassion::InstalledSoftwares() nop <null> call System.Void Remington.VIPSeassion::TheWiFi_Orginal() nop <null> call System.Void Remington.VIPSeassion::COVIDSTOpera() nop <null> call System.Void Remington.VIPSeassion::WindowsProductKey_Orginal() nop <null> call System.Void Remington.VIPSeassion::COVIDSTLiebao() nop <null> call System.Void Remington.VIPSeassion::COVIDSTDiscord() nop <null> call System.Void Remington.VIPSeassion::COVIDSTFileZilla() nop <null> call System.Void Remington.VIPSeassion::COVIDSTPidgin() nop <null> call System.Void Remington.VIPSeassion::TheWiFi_Orginal() nop <null> call System.Void Remington.VIPF_Based::COVIDSTSlim() nop <null> call System.Void Remington.VIPF_Based::COVIDSTFireFox() nop <null> call System.Void Remington.VIPF_Based::COVIDSTSeaMonkey() nop <null> call System.Void Remington.VIPF_Based::COVIDSTIceDragon() nop <null> call System.Void Remington.VIPF_Based::COVIDSTCyberFox() nop <null> call System.Void Remington.VIPF_Based::COVIDSTPaleMoon() nop <null> call System.Void Remington.VIPF_Based::COVIDSTWaterFox() nop <null> call System.Void Remington.VIPF_Based::ThunderbirdContact() nop <null> call System.Void Remington.VIPSeassion::OutlookContact() nop <null> call System.Void Remington.VIPSeassion::FoxmailCustomContact() nop <null> call System.Void Remington.VIPSeassion::FoxmailDefaultContact() nop <null> call System.Void Remington.COVID19::AntiBotStart() nop <null> call System.Void Remington.COVID19::NormalStart() nop <null> call System.Void System.Windows.Forms.Application::Run() nop <null> ret <null>

No malware configuration was found at this point.

You must be signed in to view YARA rules.