Hostile ^92% Download

21e2e91a3cb4b600f75aea71d05bba1f42b183289f8b11d97b67bd03f192fc9f.bin

Go PE hides path and resolves Win32 via SyscallNObfuscated Go PE with renamed main symbols

SHA-25621e2e91a3cb4b600f75aea71d05bba1f42b183289f8b11d97b67bd03f192fc9f

URLhttps://mb-api.abuse.ch/api/v1/

Evidence

Obfuscated Go PE with renamed main symbols 0x21dce5–0x21de05

⋯5 more rows
0x21dd3566756e63282920737472696e67000e2afunc() string..*
0x21dd456d61696e2e7059446943396d49000e2amain.pYDiC9mI..*
0x21dd555b5d2a6f732e646972496e666f010e43[]*os.dirInfo..C
⋯11 more rows

Randomized Go main package symbol names 0x533858–0x533af8

⋯5 more rows
0x5338a848386b4e574d54292e504e71556d4f00H8kNWMT).PNqUmO.
0x5338b86d61696e2e4e4432484830704f36006dmain.ND2HH0pO6.m
0x5338c861696e2e282a435a3057765165744136ain.(*CZ0WvQetA6
0x5338d830292e4f304364695841304b5848006d0).O0CdiXA0KXH.m
0x5338e861696e2e282a435a3057765165744136ain.(*CZ0WvQetA6
0x5338f830292e474c7a787443506b586476006d0).GLzxtCPkXdv.m
0x53390861696e2e6733526d48495661777a006dain.g3RmHIVawz.m
0x53391861696e2e282a435a3057765165744136ain.(*CZ0WvQetA6
0x53392830292e44477443694800736f72742e490).DGtCiH.sort.I
0x5339386e7473006d61696e2e7267576b653041nts.main.rgWke0A
0x53394859355653006d61696e2e79316634445aY5VS.main.y1f4DZ
0x533958006d61696e2e6d53616c477a4b683500.main.mSalGzKh5.
0x5339686d61696e2e282a5266787750466b5529main.(*RfxwPFkU)
0x5339782e464f6f753242364f006d61696e2e71.FOou2B6O.main.q
0x533988645a6c526f4c78414e69006d61696e2edZlRoLxANi.main.
0x5339987a645a6f495865345a53470068617368zdZoIXe4ZSG.hash
⋯7 more rows
0x533a186c356f72006d61696e2e7a3947525778l5or.main.z9GRWx
0x533a286e4b006d61696e2e796c443846657830nK.main.ylD8Fex0
0x533a38665755715652006d61696e2e7433356dfWUqVR.main.t35m
⋯12 more rows

Go PE hides path and resolves Win32 via SyscallN 0x6090d0–0x6092c0

⋯13 more rows
0x6091a00b0a0a000fa90900437b090000000800........C{......
0x6091b03feb0600a2bc06006766060007060600?.......gf......
0x6091c05655050088d404004a92040000000400VU......J.......
0x6091d0398e0300ae6f030034330300040303009....o..43......
0x6091e0abaa02005d6702002549020000000200....]g..%I......
0x6091f000000000000000000000000000000000................
0x609200a0040100a904010001000000300d0100............0...
0x609210390d010001000000661001006f1001009.......f...o...
0x60922001000000f0100100f910010001000000................
0x609230361101003f11010001000000d01101006...?...........
0x609240d911010001000000f0120100f9120100................
⋯8 more rows

Go PE with retained symbol metadata 0x6291c0–0x629280

⋯3 more rows
0x6291f000000000000000000000000000000000................
0x62920000000000040000000000000001002000.............. .
0x62921003000000000011000000988c21000100............!...
⋯7 more rows

Go PE hides build path with SyscallN dispatch 0x65a19a–0x65a31a

⋯7 more rows
0x65a20a756e74696d652e697461626c696e6b00untime.itablink.
0x65a21a676f3a6275696c64696e666f00676f3ago:buildinfo.go:
0x65a22a6275696c64696e666f2e726566007275buildinfo.ref.ru
⋯15 more rows