bd45080f306697447dfdacef6a4a078e

PE Executable

MD5: bd45080f306697447dfdacef6a4a078e

Size: 274.94 KB

application/x-dosexec

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

Symbol Obfuscation Score Low

MD5	bd45080f306697447dfdacef6a4a078e
Sha1	9e7cae81d778304631598e01c43dddbc9cd9ea98
Sha256	2c81ca279420b64a8da420b92c04eb56d801b883b25359c4cec764030d92c127
Sha384	f7e15673d53b66dfe98b03b5e6dc18c131d5d1116af9d42f1b59590d08b7cbe6992e754290bd20889f7151cff13c85e2
Sha512	1e7dbf1a8897f6e65b62687c7cd01801f3b29b8e72dbf7d52bc72e6b70e3fd0d031f2aee47655fbecdc2d3ab9607c711068c047a40e6c2d85a02c3ab5d6c80c1
SSDeep	3072:IS66sfFzkEkGPZSEmSCroP1zB9KFVpurTDGnWbFQY5sHVmY/Vgfi/bbY:8DNWiGnWbFIvb
TLSH	8A44B70A7FE88C10E2FF847692B59015C7FA742346698E2E5AD1F8163A3E6548F07F53

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:rsrc>bin

Shape pe:exe>pe:rsrc>bin

malicious 3 nodes

Path pe:exe>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	Remington.exe
Full Name	Remington.exe
EntryPoint	System.Void Remington.COVID19::Main()
Scope Name	Remington.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Remington
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	4546
Main Method	System.Void Remington.COVID19::Main()
Main IL Instruction Count	640
Main IL	nop <null> call System.Void Remington.COVID19::ClickTracker() nop <null> call System.Void Remington.COVID19::DelayExcute() nop <null> call System.Void Remington.COVID19::AntiVm() nop <null> call System.Void Remington.COVID19::AntiSandboxie() nop <null> call System.Void Remington.COVID19::FakeMessageBox() nop <null> call System.Void Remington.COVID19::SelfHidden() nop <null> call System.Void Remington.COVID19::OpenWebsites() nop <null> call System.Void Remington.COVID19::MeltMele() nop <null> call System.Void Remington.COVID19::DisableWD() nop <null> call System.Void Remington.COVID19::Restores_Disabler() nop <null> call System.Void Remington.COVID19::Taskmgr_Disabler() nop <null> call System.Void Remington.COVID19::CMD_Disabler() nop <null> call System.Void Remington.COVID19::Registeries_Disabler() nop <null> call System.Void Remington.COVID19::DownloaderFile() nop <null> call System.Void Remington.COVID19::ProcessKiller() nop <null> call System.Void Remington.COVID19::Browser_Killer() nop <null> call System.Void Remington.COVID19::CookiesEraser() nop <null> call System.Void Remington.VIPSeassion::COVIDSTOutlook() nop <null> call System.Void Remington.VIPSeassion::COVIDSTFoxmail() nop <null> call System.Void Remington.VIPF_Based::COVIDSTThunderbird() nop <null> call System.Void Remington.VIPF_Based::COVIDSTPostBox() nop <null> call System.Void Remington.VIPSeassion::COVIDSTChrome() nop <null> call System.Void Remington.VIPSeassion::COVIDSTCocCoc() nop <null> call System.Void Remington.VIPSeassion::COVIDSTQQ() nop <null> call System.Void Remington.VIPSeassion::COVIDSTorbitum() nop <null> call System.Void Remington.VIPSeassion::COVIDSTAmigo() nop <null> call System.Void Remington.VIPSeassion::COVIDSTXpom() nop <null> call System.Void Remington.VIPSeassion::COVIDSTKometa() nop <null> call System.Void Remington.VIPSeassion::COVIDSTNichrome() nop <null> call System.Void Remington.VIPSeassion::COVIDSTSlimjet() nop <null> call System.Void Remington.VIPSeassion::COVIDSTIridium() nop <null> call System.Void Remington.VIPSeassion::COVIDSTVivaldi() nop <null> call System.Void Remington.VIPSeassion::COVIDSTIron() nop <null> call System.Void Remington.VIPSeassion::COVIDSTChromium() nop <null> call System.Void Remington.VIPSeassion::COVIDSTGhost() nop <null> call System.Void Remington.VIPSeassion::COVIDSTCent() nop <null> call System.Void Remington.VIPSeassion::COVIDSTxVast() nop <null> call System.Void Remington.VIPSeassion::COVIDSTChedot() nop <null> call System.Void Remington.VIPSeassion::COVIDSTSuperbird() nop <null> call System.Void Remington.VIPSeassion::COVIDST360_English() nop <null> call System.Void Remington.VIPSeassion::COVIDST360_China() nop <null> call System.Void Remington.VIPSeassion::COVIDSTComodo() nop <null> call System.Void Remington.VIPSeassion::COVIDSTBrave() nop <null> call System.Void Remington.VIPSeassion::COVIDSTTorch() nop <null> call System.Void Remington.VIPSeassion::COVIDSTUC() nop <null> call System.Void Remington.VIPSeassion::COVIDSTBlisk() nop <null> call System.Void Remington.VIPSeassion::COVIDSTEpic() nop <null> call System.Void Remington.VIPSeassion::COVIDSTavast() nop <null> call System.Void Remington.VIPSeassion::COVIDSTKinzaa() nop <null> call System.Void Remington.VIPSeassion::COVIDSTBlackHawk() nop <null> call System.Void Remington.VIPSeassion::COVIDSTCitrio() nop <null> call System.Void Remington.VIPSeassion::COVIDSTUran() nop <null> call System.Void Remington.VIPSeassion::COVIDSTCoowon() nop <null> call System.Void Remington.VIPSeassion::COVIDST7Star() nop <null> call System.Void Remington.VIPSeassion::COVIDSTQIPSurf() nop <null> call System.Void Remington.VIPSeassion::COVIDSTSleipnir() nop <null> call System.Void Remington.VIPSeassion::COVIDSTChrome_Canary() nop <null> call System.Void Remington.VIPSeassion::COVIDSTCoolNovo() nop <null> call System.Void Remington.VIPSeassion::COVIDSTSputnik() nop <null> call System.Void Remington.VIPSeassion::COVIDSTFalkon() nop <null> call System.Void Remington.VIPSeassion::COVIDSTMicrosoft() nop <null> call System.Void Remington.VIPSeassion::Cookies_Chrome() nop <null> call System.Void Remington.VIPSeassion::Cookies_CocCoc() nop <null> call System.Void Remington.VIPSeassion::Cookies_QQ() nop <null> call System.Void Remington.VIPSeassion::Cookies_orbitum() nop <null> call System.Void Remington.VIPSeassion::Cookies_Amigo() nop <null> call System.Void Remington.VIPSeassion::Cookies_Xpom() nop <null> call System.Void Remington.VIPSeassion::Cookies_Kometa() nop <null> call System.Void Remington.VIPSeassion::Cookies_Nichrome() nop <null> call System.Void Remington.VIPSeassion::Cookies_Slimjet() nop <null> call System.Void Remington.VIPSeassion::Cookies_Iridium() nop <null> call System.Void Remington.VIPSeassion::Cookies_Vivaldi() nop <null> call System.Void Remington.VIPSeassion::Cookies_Iron() nop <null> call System.Void Remington.VIPSeassion::Cookies_Chromium() nop <null> call System.Void Remington.VIPSeassion::Cookies_Ghost() nop <null> call System.Void Remington.VIPSeassion::Cookies_Cent() nop <null> call System.Void Remington.VIPSeassion::Cookies_xVast() nop <null> call System.Void Remington.VIPSeassion::Cookies_Chedot() nop <null> call System.Void Remington.VIPSeassion::Cookies_Superbird() nop <null> call System.Void Remington.VIPSeassion::Cookies_360_English() nop <null> call System.Void Remington.VIPSeassion::Cookies_360_China() nop <null> call System.Void Remington.VIPSeassion::Cookies_Comodo() nop <null> call System.Void Remington.VIPSeassion::Cookies_Brave() nop <null> call System.Void Remington.VIPSeassion::Cookies_Torch() nop <null> call System.Void Remington.VIPSeassion::Cookies_UC() nop <null> call System.Void Remington.VIPSeassion::Cookies_Blisk() nop <null> call System.Void Remington.VIPSeassion::Cookies_Epic() nop <null> call System.Void Remington.VIPSeassion::Cookies_Kinza() nop <null> call System.Void Remington.VIPSeassion::Cookies_BlackHawk() nop <null> call System.Void Remington.VIPSeassion::Cookies_Citrio() nop <null> call System.Void Remington.VIPSeassion::Cookies_Uran() nop <null> call System.Void Remington.VIPSeassion::Cookies_Coowon() nop <null> call System.Void Remington.VIPSeassion::Cookies_7Star() nop <null> call System.Void Remington.VIPSeassion::Cookies_QIPSurf() nop <null> call System.Void Remington.VIPSeassion::Cookies_Sleipnir() nop <null> call System.Void Remington.VIPSeassion::Cookies_Chrome_Canary() nop <null> call System.Void Remington.VIPSeassion::Cookies_CoolNovo() nop <null> call System.Void Remington.VIPSeassion::Cookies_Sputnik() nop <null> call System.Void Remington.VIPSeassion::Cookies_Falkon() nop <null> call System.Void Remington.VIPSeassion::Cookies_MicrosoftEdge() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Chrome() nop <null> call System.Void Remington.VIPSeassion::CreditCard_CocCoc() nop <null> call System.Void Remington.VIPSeassion::CreditCard_QQ() nop <null> call System.Void Remington.VIPSeassion::CreditCard_orbitum() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Amigo() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Xpom() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Kometa() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Nichrome() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Slimjet() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Iridium() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Vivaldi() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Iron() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Chromium() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Ghost() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Cent() nop <null> call System.Void Remington.VIPSeassion::CreditCard_xVast() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Chedot() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Superbird() nop <null> call System.Void Remington.VIPSeassion::CreditCard_360_English() nop <null> call System.Void Remington.VIPSeassion::CreditCard_360_China() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Comodo() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Brave() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Torch() nop <null> call System.Void Remington.VIPSeassion::CreditCard_UC() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Blisk() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Epic() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Kinza() nop <null> call System.Void Remington.VIPSeassion::CreditCard_BlackHawk() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Citrio() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Uran() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Coowon() nop <null> call System.Void Remington.VIPSeassion::CreditCard_7Star() nop <null> call System.Void Remington.VIPSeassion::CreditCard_QIPSurf() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Sleipnir() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Chrome_Canary() nop <null> call System.Void Remington.VIPSeassion::CreditCard_CoolNovo() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Sputnik() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Falkon() nop <null> call System.Void Remington.VIPSeassion::CreditCard_MicrosoftEdge() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Chrome() nop <null> call System.Void Remington.VIPSeassion::AutoFill_CocCoc() nop <null> call System.Void Remington.VIPSeassion::AutoFill_QQ() nop <null> call System.Void Remington.VIPSeassion::AutoFill_orbitum() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Amigo() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Xpom() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Kometa() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Nichrome() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Slimjet() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Iridium() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Vivaldi() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Iron() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Chromium() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Ghost() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Cent() nop <null> call System.Void Remington.VIPSeassion::AutoFill_xVast() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Chedot() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Superbird() nop <null> call System.Void Remington.VIPSeassion::AutoFill_360_English() nop <null> call System.Void Remington.VIPSeassion::AutoFill_360_China() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Comodo() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Brave() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Torch() nop <null> call System.Void Remington.VIPSeassion::AutoFill_UC() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Blisk() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Epic() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Kinza() nop <null> call System.Void Remington.VIPSeassion::AutoFill_BlackHawk() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Citrio() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Uran() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Coowon() nop <null> call System.Void Remington.VIPSeassion::AutoFill_7Star() nop <null> call System.Void Remington.VIPSeassion::AutoFill_QIPSurf() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Sleipnir() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Chrome_Canary() nop <null> call System.Void Remington.VIPSeassion::AutoFill_CoolNovo() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Sputnik() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Falkon() nop <null> call System.Void Remington.VIPSeassion::AutoFill_MicrosoftEdge() nop <null> call System.Void Remington.VIPSeassion::Downloads_Chrome() nop <null> call System.Void Remington.VIPSeassion::Downloads_CocCoc() nop <null> call System.Void Remington.VIPSeassion::Downloads_QQ() nop <null> call System.Void Remington.VIPSeassion::Downloads_orbitum() nop <null> call System.Void Remington.VIPSeassion::Downloads_Amigo() nop <null> call System.Void Remington.VIPSeassion::Downloads_Xpom() nop <null> call System.Void Remington.VIPSeassion::Downloads_Kometa() nop <null> call System.Void Remington.VIPSeassion::Downloads_Nichrome() nop <null> call System.Void Remington.VIPSeassion::Downloads_Slimjet() nop <null> call System.Void Remington.VIPSeassion::Downloads_Iridium() nop <null> call System.Void Remington.VIPSeassion::Downloads_Vivaldi() nop <null> call System.Void Remington.VIPSeassion::Downloads_Iron() nop <null> call System.Void Remington.VIPSeassion::Downloads_Chromium() nop <null> call System.Void Remington.VIPSeassion::Downloads_Ghost() nop <null> call System.Void Remington.VIPSeassion::Downloads_Cent() nop <null> call System.Void Remington.VIPSeassion::Downloads_xVast() nop <null> call System.Void Remington.VIPSeassion::Downloads_Chedot() nop <null> call System.Void Remington.VIPSeassion::Downloads_Superbird() nop <null> call System.Void Remington.VIPSeassion::Downloads_360_English() nop <null> call System.Void Remington.VIPSeassion::Downloads_360_China() nop <null> call System.Void Remington.VIPSeassion::Downloads_Comodo() nop <null> call System.Void Remington.VIPSeassion::Downloads_Brave() nop <null> call System.Void Remington.VIPSeassion::Downloads_Torch() nop <null> call System.Void Remington.VIPSeassion::Downloads_UC() nop <null> call System.Void Remington.VIPSeassion::Downloads_Blisk() nop <null> call System.Void Remington.VIPSeassion::Downloads_Epic() nop <null> call System.Void Remington.VIPSeassion::Downloads_Kinza() nop <null> call System.Void Remington.VIPSeassion::Downloads_BlackHawk() nop <null> call System.Void Remington.VIPSeassion::Downloads_Citrio() nop <null> call System.Void Remington.VIPSeassion::Downloads_Uran() nop <null> call System.Void Remington.VIPSeassion::Downloads_Coowon() nop <null> call System.Void Remington.VIPSeassion::Downloads_7Star() nop <null> call System.Void Remington.VIPSeassion::Downloads_QIPSurf() nop <null> call System.Void Remington.VIPSeassion::Downloads_Sleipnir() nop <null> call System.Void Remington.VIPSeassion::Downloads_Chrome_Canary() nop <null> call System.Void Remington.VIPSeassion::Downloads_CoolNovo() nop <null> call System.Void Remington.VIPSeassion::Downloads_Sputnik() nop <null> call System.Void Remington.VIPSeassion::Downloads_Falkon() nop <null> call System.Void Remington.VIPSeassion::Downloads_MicrosoftEdge() nop <null> call System.Void Remington.VIPSeassion::TopSites_Chrome() nop <null> call System.Void Remington.VIPSeassion::TopSites_CocCoc() nop <null> call System.Void Remington.VIPSeassion::TopSites_QQ() nop <null> call System.Void Remington.VIPSeassion::TopSites_orbitum() nop <null> call System.Void Remington.VIPSeassion::TopSites_Amigo() nop <null> call System.Void Remington.VIPSeassion::TopSites_Xpom() nop <null> call System.Void Remington.VIPSeassion::TopSites_Kometa() nop <null> call System.Void Remington.VIPSeassion::TopSites_Nichrome() nop <null> call System.Void Remington.VIPSeassion::TopSites_Slimjet() nop <null> call System.Void Remington.VIPSeassion::TopSites_Iridium() nop <null> call System.Void Remington.VIPSeassion::TopSites_Vivaldi() nop <null> call System.Void Remington.VIPSeassion::TopSites_Iron() nop <null> call System.Void Remington.VIPSeassion::TopSites_Chromium() nop <null> call System.Void Remington.VIPSeassion::TopSites_Ghost() nop <null> call System.Void Remington.VIPSeassion::TopSites_Cent() nop <null> call System.Void Remington.VIPSeassion::TopSites_xVast() nop <null> call System.Void Remington.VIPSeassion::TopSites_Chedot() nop <null> call System.Void Remington.VIPSeassion::TopSites_Superbird() nop <null> call System.Void Remington.VIPSeassion::TopSites_360_English() nop <null> call System.Void Remington.VIPSeassion::TopSites_360_China() nop <null> call System.Void Remington.VIPSeassion::TopSites_Comodo() nop <null> call System.Void Remington.VIPSeassion::TopSites_Brave() nop <null> call System.Void Remington.VIPSeassion::TopSites_Torch() nop <null> call System.Void Remington.VIPSeassion::TopSites_UC() nop <null> call System.Void Remington.VIPSeassion::TopSites_Blisk() nop <null> call System.Void Remington.VIPSeassion::TopSites_Epic() nop <null> call System.Void Remington.VIPSeassion::TopSites_Kinza() nop <null> call System.Void Remington.VIPSeassion::TopSites_BlackHawk() nop <null> call System.Void Remington.VIPSeassion::TopSites_Citrio() nop <null> call System.Void Remington.VIPSeassion::TopSites_Uran() nop <null> call System.Void Remington.VIPSeassion::TopSites_Coowon() nop <null> call System.Void Remington.VIPSeassion::TopSites_7Star() nop <null> call System.Void Remington.VIPSeassion::TopSites_QIPSurf() nop <null> call System.Void Remington.VIPSeassion::TopSites_Sleipnir() nop <null> call System.Void Remington.VIPSeassion::TopSites_Chrome_Canary() nop <null> call System.Void Remington.VIPSeassion::TopSites_CoolNovo() nop <null> call System.Void Remington.VIPSeassion::TopSites_Sputnik() nop <null> call System.Void Remington.VIPSeassion::TopSites_Falkon() nop <null> call System.Void Remington.VIPSeassion::TopSites_MicrosoftEdge() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Chrome() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_CocCoc() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_QQ() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_orbitum() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Amigo() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Xpom() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Kometa() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Nichrome() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Slimjet() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Iridium() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Vivaldi() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Iron() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Chromium() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Ghost() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Cent() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_xVast() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Chedot() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Superbird() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_360_English() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_360_China() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Comodo() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Brave() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Torch() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_UC() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Blisk() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Epic() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Kinza() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_BlackHawk() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Citrio() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Uran() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Coowon() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_7Star() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_QIPSurf() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Sleipnir() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Chrome_Canary() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_CoolNovo() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Sputnik() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Falkon() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_MicrosoftEdge() nop <null> call System.Void Remington.VIPSeassion::GetInstalledBrowsers() nop <null> call System.Void Remington.VIPSeassion::InstalledSoftwares() nop <null> call System.Void Remington.VIPSeassion::TheWiFi_Orginal() nop <null> call System.Void Remington.VIPSeassion::COVIDSTOpera() nop <null> call System.Void Remington.VIPSeassion::WindowsProductKey_Orginal() nop <null> call System.Void Remington.VIPSeassion::COVIDSTLiebao() nop <null> call System.Void Remington.VIPSeassion::COVIDSTDiscord() nop <null> call System.Void Remington.VIPSeassion::COVIDSTFileZilla() nop <null> call System.Void Remington.VIPSeassion::COVIDSTPidgin() nop <null> call System.Void Remington.VIPSeassion::TheWiFi_Orginal() nop <null> call System.Void Remington.VIPF_Based::COVIDSTSlim() nop <null> call System.Void Remington.VIPF_Based::COVIDSTFireFox() nop <null> call System.Void Remington.VIPF_Based::COVIDSTSeaMonkey() nop <null> call System.Void Remington.VIPF_Based::COVIDSTIceDragon() nop <null> call System.Void Remington.VIPF_Based::COVIDSTCyberFox() nop <null> call System.Void Remington.VIPF_Based::COVIDSTPaleMoon() nop <null> call System.Void Remington.VIPF_Based::COVIDSTWaterFox() nop <null> call System.Void Remington.VIPF_Based::ThunderbirdContact() nop <null> call System.Void Remington.VIPSeassion::OutlookContact() nop <null> call System.Void Remington.VIPSeassion::FoxmailCustomContact() nop <null> call System.Void Remington.VIPSeassion::FoxmailDefaultContact() nop <null> call System.Void Remington.COVID19::AntiBotStart() nop <null> call System.Void Remington.COVID19::NormalStart() nop <null> call System.Void System.Windows.Forms.Application::Run() nop <null> ret <null>
Module Name	Remington.exe
Full Name	Remington.exe
EntryPoint	System.Void Remington.COVID19::Main()
Scope Name	Remington.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Remington
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	4546
Main Method	System.Void Remington.COVID19::Main()
Main IL Instruction Count	640
Main IL	nop <null> call System.Void Remington.COVID19::ClickTracker() nop <null> call System.Void Remington.COVID19::DelayExcute() nop <null> call System.Void Remington.COVID19::AntiVm() nop <null> call System.Void Remington.COVID19::AntiSandboxie() nop <null> call System.Void Remington.COVID19::FakeMessageBox() nop <null> call System.Void Remington.COVID19::SelfHidden() nop <null> call System.Void Remington.COVID19::OpenWebsites() nop <null> call System.Void Remington.COVID19::MeltMele() nop <null> call System.Void Remington.COVID19::DisableWD() nop <null> call System.Void Remington.COVID19::Restores_Disabler() nop <null> call System.Void Remington.COVID19::Taskmgr_Disabler() nop <null> call System.Void Remington.COVID19::CMD_Disabler() nop <null> call System.Void Remington.COVID19::Registeries_Disabler() nop <null> call System.Void Remington.COVID19::DownloaderFile() nop <null> call System.Void Remington.COVID19::ProcessKiller() nop <null> call System.Void Remington.COVID19::Browser_Killer() nop <null> call System.Void Remington.COVID19::CookiesEraser() nop <null> call System.Void Remington.VIPSeassion::COVIDSTOutlook() nop <null> call System.Void Remington.VIPSeassion::COVIDSTFoxmail() nop <null> call System.Void Remington.VIPF_Based::COVIDSTThunderbird() nop <null> call System.Void Remington.VIPF_Based::COVIDSTPostBox() nop <null> call System.Void Remington.VIPSeassion::COVIDSTChrome() nop <null> call System.Void Remington.VIPSeassion::COVIDSTCocCoc() nop <null> call System.Void Remington.VIPSeassion::COVIDSTQQ() nop <null> call System.Void Remington.VIPSeassion::COVIDSTorbitum() nop <null> call System.Void Remington.VIPSeassion::COVIDSTAmigo() nop <null> call System.Void Remington.VIPSeassion::COVIDSTXpom() nop <null> call System.Void Remington.VIPSeassion::COVIDSTKometa() nop <null> call System.Void Remington.VIPSeassion::COVIDSTNichrome() nop <null> call System.Void Remington.VIPSeassion::COVIDSTSlimjet() nop <null> call System.Void Remington.VIPSeassion::COVIDSTIridium() nop <null> call System.Void Remington.VIPSeassion::COVIDSTVivaldi() nop <null> call System.Void Remington.VIPSeassion::COVIDSTIron() nop <null> call System.Void Remington.VIPSeassion::COVIDSTChromium() nop <null> call System.Void Remington.VIPSeassion::COVIDSTGhost() nop <null> call System.Void Remington.VIPSeassion::COVIDSTCent() nop <null> call System.Void Remington.VIPSeassion::COVIDSTxVast() nop <null> call System.Void Remington.VIPSeassion::COVIDSTChedot() nop <null> call System.Void Remington.VIPSeassion::COVIDSTSuperbird() nop <null> call System.Void Remington.VIPSeassion::COVIDST360_English() nop <null> call System.Void Remington.VIPSeassion::COVIDST360_China() nop <null> call System.Void Remington.VIPSeassion::COVIDSTComodo() nop <null> call System.Void Remington.VIPSeassion::COVIDSTBrave() nop <null> call System.Void Remington.VIPSeassion::COVIDSTTorch() nop <null> call System.Void Remington.VIPSeassion::COVIDSTUC() nop <null> call System.Void Remington.VIPSeassion::COVIDSTBlisk() nop <null> call System.Void Remington.VIPSeassion::COVIDSTEpic() nop <null> call System.Void Remington.VIPSeassion::COVIDSTavast() nop <null> call System.Void Remington.VIPSeassion::COVIDSTKinzaa() nop <null> call System.Void Remington.VIPSeassion::COVIDSTBlackHawk() nop <null> call System.Void Remington.VIPSeassion::COVIDSTCitrio() nop <null> call System.Void Remington.VIPSeassion::COVIDSTUran() nop <null> call System.Void Remington.VIPSeassion::COVIDSTCoowon() nop <null> call System.Void Remington.VIPSeassion::COVIDST7Star() nop <null> call System.Void Remington.VIPSeassion::COVIDSTQIPSurf() nop <null> call System.Void Remington.VIPSeassion::COVIDSTSleipnir() nop <null> call System.Void Remington.VIPSeassion::COVIDSTChrome_Canary() nop <null> call System.Void Remington.VIPSeassion::COVIDSTCoolNovo() nop <null> call System.Void Remington.VIPSeassion::COVIDSTSputnik() nop <null> call System.Void Remington.VIPSeassion::COVIDSTFalkon() nop <null> call System.Void Remington.VIPSeassion::COVIDSTMicrosoft() nop <null> call System.Void Remington.VIPSeassion::Cookies_Chrome() nop <null> call System.Void Remington.VIPSeassion::Cookies_CocCoc() nop <null> call System.Void Remington.VIPSeassion::Cookies_QQ() nop <null> call System.Void Remington.VIPSeassion::Cookies_orbitum() nop <null> call System.Void Remington.VIPSeassion::Cookies_Amigo() nop <null> call System.Void Remington.VIPSeassion::Cookies_Xpom() nop <null> call System.Void Remington.VIPSeassion::Cookies_Kometa() nop <null> call System.Void Remington.VIPSeassion::Cookies_Nichrome() nop <null> call System.Void Remington.VIPSeassion::Cookies_Slimjet() nop <null> call System.Void Remington.VIPSeassion::Cookies_Iridium() nop <null> call System.Void Remington.VIPSeassion::Cookies_Vivaldi() nop <null> call System.Void Remington.VIPSeassion::Cookies_Iron() nop <null> call System.Void Remington.VIPSeassion::Cookies_Chromium() nop <null> call System.Void Remington.VIPSeassion::Cookies_Ghost() nop <null> call System.Void Remington.VIPSeassion::Cookies_Cent() nop <null> call System.Void Remington.VIPSeassion::Cookies_xVast() nop <null> call System.Void Remington.VIPSeassion::Cookies_Chedot() nop <null> call System.Void Remington.VIPSeassion::Cookies_Superbird() nop <null> call System.Void Remington.VIPSeassion::Cookies_360_English() nop <null> call System.Void Remington.VIPSeassion::Cookies_360_China() nop <null> call System.Void Remington.VIPSeassion::Cookies_Comodo() nop <null> call System.Void Remington.VIPSeassion::Cookies_Brave() nop <null> call System.Void Remington.VIPSeassion::Cookies_Torch() nop <null> call System.Void Remington.VIPSeassion::Cookies_UC() nop <null> call System.Void Remington.VIPSeassion::Cookies_Blisk() nop <null> call System.Void Remington.VIPSeassion::Cookies_Epic() nop <null> call System.Void Remington.VIPSeassion::Cookies_Kinza() nop <null> call System.Void Remington.VIPSeassion::Cookies_BlackHawk() nop <null> call System.Void Remington.VIPSeassion::Cookies_Citrio() nop <null> call System.Void Remington.VIPSeassion::Cookies_Uran() nop <null> call System.Void Remington.VIPSeassion::Cookies_Coowon() nop <null> call System.Void Remington.VIPSeassion::Cookies_7Star() nop <null> call System.Void Remington.VIPSeassion::Cookies_QIPSurf() nop <null> call System.Void Remington.VIPSeassion::Cookies_Sleipnir() nop <null> call System.Void Remington.VIPSeassion::Cookies_Chrome_Canary() nop <null> call System.Void Remington.VIPSeassion::Cookies_CoolNovo() nop <null> call System.Void Remington.VIPSeassion::Cookies_Sputnik() nop <null> call System.Void Remington.VIPSeassion::Cookies_Falkon() nop <null> call System.Void Remington.VIPSeassion::Cookies_MicrosoftEdge() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Chrome() nop <null> call System.Void Remington.VIPSeassion::CreditCard_CocCoc() nop <null> call System.Void Remington.VIPSeassion::CreditCard_QQ() nop <null> call System.Void Remington.VIPSeassion::CreditCard_orbitum() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Amigo() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Xpom() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Kometa() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Nichrome() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Slimjet() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Iridium() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Vivaldi() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Iron() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Chromium() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Ghost() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Cent() nop <null> call System.Void Remington.VIPSeassion::CreditCard_xVast() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Chedot() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Superbird() nop <null> call System.Void Remington.VIPSeassion::CreditCard_360_English() nop <null> call System.Void Remington.VIPSeassion::CreditCard_360_China() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Comodo() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Brave() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Torch() nop <null> call System.Void Remington.VIPSeassion::CreditCard_UC() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Blisk() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Epic() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Kinza() nop <null> call System.Void Remington.VIPSeassion::CreditCard_BlackHawk() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Citrio() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Uran() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Coowon() nop <null> call System.Void Remington.VIPSeassion::CreditCard_7Star() nop <null> call System.Void Remington.VIPSeassion::CreditCard_QIPSurf() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Sleipnir() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Chrome_Canary() nop <null> call System.Void Remington.VIPSeassion::CreditCard_CoolNovo() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Sputnik() nop <null> call System.Void Remington.VIPSeassion::CreditCard_Falkon() nop <null> call System.Void Remington.VIPSeassion::CreditCard_MicrosoftEdge() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Chrome() nop <null> call System.Void Remington.VIPSeassion::AutoFill_CocCoc() nop <null> call System.Void Remington.VIPSeassion::AutoFill_QQ() nop <null> call System.Void Remington.VIPSeassion::AutoFill_orbitum() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Amigo() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Xpom() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Kometa() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Nichrome() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Slimjet() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Iridium() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Vivaldi() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Iron() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Chromium() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Ghost() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Cent() nop <null> call System.Void Remington.VIPSeassion::AutoFill_xVast() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Chedot() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Superbird() nop <null> call System.Void Remington.VIPSeassion::AutoFill_360_English() nop <null> call System.Void Remington.VIPSeassion::AutoFill_360_China() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Comodo() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Brave() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Torch() nop <null> call System.Void Remington.VIPSeassion::AutoFill_UC() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Blisk() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Epic() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Kinza() nop <null> call System.Void Remington.VIPSeassion::AutoFill_BlackHawk() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Citrio() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Uran() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Coowon() nop <null> call System.Void Remington.VIPSeassion::AutoFill_7Star() nop <null> call System.Void Remington.VIPSeassion::AutoFill_QIPSurf() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Sleipnir() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Chrome_Canary() nop <null> call System.Void Remington.VIPSeassion::AutoFill_CoolNovo() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Sputnik() nop <null> call System.Void Remington.VIPSeassion::AutoFill_Falkon() nop <null> call System.Void Remington.VIPSeassion::AutoFill_MicrosoftEdge() nop <null> call System.Void Remington.VIPSeassion::Downloads_Chrome() nop <null> call System.Void Remington.VIPSeassion::Downloads_CocCoc() nop <null> call System.Void Remington.VIPSeassion::Downloads_QQ() nop <null> call System.Void Remington.VIPSeassion::Downloads_orbitum() nop <null> call System.Void Remington.VIPSeassion::Downloads_Amigo() nop <null> call System.Void Remington.VIPSeassion::Downloads_Xpom() nop <null> call System.Void Remington.VIPSeassion::Downloads_Kometa() nop <null> call System.Void Remington.VIPSeassion::Downloads_Nichrome() nop <null> call System.Void Remington.VIPSeassion::Downloads_Slimjet() nop <null> call System.Void Remington.VIPSeassion::Downloads_Iridium() nop <null> call System.Void Remington.VIPSeassion::Downloads_Vivaldi() nop <null> call System.Void Remington.VIPSeassion::Downloads_Iron() nop <null> call System.Void Remington.VIPSeassion::Downloads_Chromium() nop <null> call System.Void Remington.VIPSeassion::Downloads_Ghost() nop <null> call System.Void Remington.VIPSeassion::Downloads_Cent() nop <null> call System.Void Remington.VIPSeassion::Downloads_xVast() nop <null> call System.Void Remington.VIPSeassion::Downloads_Chedot() nop <null> call System.Void Remington.VIPSeassion::Downloads_Superbird() nop <null> call System.Void Remington.VIPSeassion::Downloads_360_English() nop <null> call System.Void Remington.VIPSeassion::Downloads_360_China() nop <null> call System.Void Remington.VIPSeassion::Downloads_Comodo() nop <null> call System.Void Remington.VIPSeassion::Downloads_Brave() nop <null> call System.Void Remington.VIPSeassion::Downloads_Torch() nop <null> call System.Void Remington.VIPSeassion::Downloads_UC() nop <null> call System.Void Remington.VIPSeassion::Downloads_Blisk() nop <null> call System.Void Remington.VIPSeassion::Downloads_Epic() nop <null> call System.Void Remington.VIPSeassion::Downloads_Kinza() nop <null> call System.Void Remington.VIPSeassion::Downloads_BlackHawk() nop <null> call System.Void Remington.VIPSeassion::Downloads_Citrio() nop <null> call System.Void Remington.VIPSeassion::Downloads_Uran() nop <null> call System.Void Remington.VIPSeassion::Downloads_Coowon() nop <null> call System.Void Remington.VIPSeassion::Downloads_7Star() nop <null> call System.Void Remington.VIPSeassion::Downloads_QIPSurf() nop <null> call System.Void Remington.VIPSeassion::Downloads_Sleipnir() nop <null> call System.Void Remington.VIPSeassion::Downloads_Chrome_Canary() nop <null> call System.Void Remington.VIPSeassion::Downloads_CoolNovo() nop <null> call System.Void Remington.VIPSeassion::Downloads_Sputnik() nop <null> call System.Void Remington.VIPSeassion::Downloads_Falkon() nop <null> call System.Void Remington.VIPSeassion::Downloads_MicrosoftEdge() nop <null> call System.Void Remington.VIPSeassion::TopSites_Chrome() nop <null> call System.Void Remington.VIPSeassion::TopSites_CocCoc() nop <null> call System.Void Remington.VIPSeassion::TopSites_QQ() nop <null> call System.Void Remington.VIPSeassion::TopSites_orbitum() nop <null> call System.Void Remington.VIPSeassion::TopSites_Amigo() nop <null> call System.Void Remington.VIPSeassion::TopSites_Xpom() nop <null> call System.Void Remington.VIPSeassion::TopSites_Kometa() nop <null> call System.Void Remington.VIPSeassion::TopSites_Nichrome() nop <null> call System.Void Remington.VIPSeassion::TopSites_Slimjet() nop <null> call System.Void Remington.VIPSeassion::TopSites_Iridium() nop <null> call System.Void Remington.VIPSeassion::TopSites_Vivaldi() nop <null> call System.Void Remington.VIPSeassion::TopSites_Iron() nop <null> call System.Void Remington.VIPSeassion::TopSites_Chromium() nop <null> call System.Void Remington.VIPSeassion::TopSites_Ghost() nop <null> call System.Void Remington.VIPSeassion::TopSites_Cent() nop <null> call System.Void Remington.VIPSeassion::TopSites_xVast() nop <null> call System.Void Remington.VIPSeassion::TopSites_Chedot() nop <null> call System.Void Remington.VIPSeassion::TopSites_Superbird() nop <null> call System.Void Remington.VIPSeassion::TopSites_360_English() nop <null> call System.Void Remington.VIPSeassion::TopSites_360_China() nop <null> call System.Void Remington.VIPSeassion::TopSites_Comodo() nop <null> call System.Void Remington.VIPSeassion::TopSites_Brave() nop <null> call System.Void Remington.VIPSeassion::TopSites_Torch() nop <null> call System.Void Remington.VIPSeassion::TopSites_UC() nop <null> call System.Void Remington.VIPSeassion::TopSites_Blisk() nop <null> call System.Void Remington.VIPSeassion::TopSites_Epic() nop <null> call System.Void Remington.VIPSeassion::TopSites_Kinza() nop <null> call System.Void Remington.VIPSeassion::TopSites_BlackHawk() nop <null> call System.Void Remington.VIPSeassion::TopSites_Citrio() nop <null> call System.Void Remington.VIPSeassion::TopSites_Uran() nop <null> call System.Void Remington.VIPSeassion::TopSites_Coowon() nop <null> call System.Void Remington.VIPSeassion::TopSites_7Star() nop <null> call System.Void Remington.VIPSeassion::TopSites_QIPSurf() nop <null> call System.Void Remington.VIPSeassion::TopSites_Sleipnir() nop <null> call System.Void Remington.VIPSeassion::TopSites_Chrome_Canary() nop <null> call System.Void Remington.VIPSeassion::TopSites_CoolNovo() nop <null> call System.Void Remington.VIPSeassion::TopSites_Sputnik() nop <null> call System.Void Remington.VIPSeassion::TopSites_Falkon() nop <null> call System.Void Remington.VIPSeassion::TopSites_MicrosoftEdge() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Chrome() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_CocCoc() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_QQ() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_orbitum() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Amigo() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Xpom() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Kometa() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Nichrome() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Slimjet() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Iridium() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Vivaldi() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Iron() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Chromium() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Ghost() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Cent() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_xVast() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Chedot() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Superbird() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_360_English() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_360_China() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Comodo() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Brave() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Torch() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_UC() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Blisk() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Epic() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Kinza() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_BlackHawk() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Citrio() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Uran() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Coowon() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_7Star() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_QIPSurf() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Sleipnir() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Chrome_Canary() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_CoolNovo() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Sputnik() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_Falkon() nop <null> call System.Void Remington.VIPSeassion::DownloadRecord_MicrosoftEdge() nop <null> call System.Void Remington.VIPSeassion::GetInstalledBrowsers() nop <null> call System.Void Remington.VIPSeassion::InstalledSoftwares() nop <null> call System.Void Remington.VIPSeassion::TheWiFi_Orginal() nop <null> call System.Void Remington.VIPSeassion::COVIDSTOpera() nop <null> call System.Void Remington.VIPSeassion::WindowsProductKey_Orginal() nop <null> call System.Void Remington.VIPSeassion::COVIDSTLiebao() nop <null> call System.Void Remington.VIPSeassion::COVIDSTDiscord() nop <null> call System.Void Remington.VIPSeassion::COVIDSTFileZilla() nop <null> call System.Void Remington.VIPSeassion::COVIDSTPidgin() nop <null> call System.Void Remington.VIPSeassion::TheWiFi_Orginal() nop <null> call System.Void Remington.VIPF_Based::COVIDSTSlim() nop <null> call System.Void Remington.VIPF_Based::COVIDSTFireFox() nop <null> call System.Void Remington.VIPF_Based::COVIDSTSeaMonkey() nop <null> call System.Void Remington.VIPF_Based::COVIDSTIceDragon() nop <null> call System.Void Remington.VIPF_Based::COVIDSTCyberFox() nop <null> call System.Void Remington.VIPF_Based::COVIDSTPaleMoon() nop <null> call System.Void Remington.VIPF_Based::COVIDSTWaterFox() nop <null> call System.Void Remington.VIPF_Based::ThunderbirdContact() nop <null> call System.Void Remington.VIPSeassion::OutlookContact() nop <null> call System.Void Remington.VIPSeassion::FoxmailCustomContact() nop <null> call System.Void Remington.VIPSeassion::FoxmailDefaultContact() nop <null> call System.Void Remington.COVID19::AntiBotStart() nop <null> call System.Void Remington.COVID19::NormalStart() nop <null> call System.Void System.Windows.Forms.Application::Run() nop <null> ret <null>

No malware configuration was found at this point.

You must be signed in to view YARA rules.