Suspicious ^80% Download

File manager.vb

Unusual network file operations

Sends a delimiter-joined command wordCode references Windows Forms assembly

SHA-25610dcc4eda26bfa52e2dbddb305a7c97f4e083e17d9ec1fef75c2234547cfac23

Evidence

Code references Windows Forms assembly lines 6–10

6:25… Basic
7Imports System.Text
8Imports System.Diagnostics
9Imports System.Windows.Forms.PictureBox
10Imports System.Windows.Forms.MessageBox 'para manter todas as messagebox em superior ou forme na hora de ser exebid …

VBScript Sub procedure lines 21–26

21:29… |" 'senha yy = "||"
22#End Region
23
24    Private Sub Fm_Closed(sender As Object, e As EventArgs) Handles MyBase.Closed
25        Try
26            Me.ListView1. …

VBScript End control-flow block lines 33–39

19… tData.ClearProjectError()
      End Try
  End Sub
36
  Private Sub Fm_Closing(sender As Object, e As CancelEventArgs) Handles MyBase.Closing
      Try
          Me.Lis …

Sends a delimiter-joined command word lines 86–95

3…       'normal  arquivo
      For Each x As ListViewItem In Form1.l1.SelectedItems
          Form1.s.Send(sock, "normaldelete" & yy & Me.TextBox1.Text & Me.ListView1.FocusedItem.Text)
      Next
90
      'renomer arquivo ou pasta
      For Each x As ListViewItem In Me.ListView1.SelectedItems
          Dim a As String
          a = InputBox("Entre Com o Nome", "Renomear", "Novo Nome")
          I …