Hostile ^92% windows Download

4ff863b60d5d5d4fb86764e6b6bb25677d2a3086c33fc.exe

Go PE hides path and resolves Win32 via SyscallNObfuscated Go PE with renamed main symbols

SHA-2564ff863b60d5d5d4fb86764e6b6bb25677d2a3086c33fccc3f09e707937b8d4a9

URLhttps://mb-api.abuse.ch/api/v1/

Evidence

Obfuscated Go PE with renamed main symbols 0x143a45–0x143b95

⋯5 more rows
0x143a9573437036383968734d7a6a694c000e2asCp689hsMzjiL..*
0x143aa56d61696e2e6c76365765514445000e76main.lv6WeQDE..v
0x143ab552696c5a694f76554f45777265000e74RilZiOvUOEwre..t
0x143ac548546e6b614873705149316833000e2aHTnkaHspQI1h3..*
0x143ad56d61696e2e77735a436d375456010e49main.wsZCm7TV..I
0x143ae5313743684541696f3854643136000e7417ChEAio8Td16..t
⋯11 more rows

Go PE hides path and resolves Win32 via SyscallN 0x1d873d–0x1d88cd

⋯3 more rows
0x1d876d444c4c292e4c6f61642e66756e633100DLL).Load.func1.
0x1d877d73797363616c6c2e282a4c617a795072syscall.(*LazyPr
0x1d878d6f63292e46696e640073797363616c6coc).Find.syscall
0x1d879d2e282a4c617a7950726f63292e46696e.(*LazyProc).Fin
0x1d87ad642e66756e63310073797363616c6c2ed.func1.syscall.
0x1d87bd282a4c617a7950726f63292e43616c6c(*LazyProc).Call
0x1d87cd0073797363616c6c2e282a4c617a7950.syscall.(*LazyP
⋯16 more rows

Randomized Go main package symbol names 0x1d9c1e–0x1d9e8e

⋯5 more rows
0x1d9c6e4756762e483563666a78667a44725400GVv.H5cfjxfzDrT.
0x1d9c7e6d61696e2e634d4a5466473463766341main.cMJTfG4cvcA
0x1d9c8e6b6d006d61696e2e7043736a6a696831km.main.pCsjjih1
0x1d9c9e75006d61696e2e72376b657759305341u.main.r7kewY0SA
0x1d9cae477449006d61696e2e64693171716545GtI.main.di1qqeE
0x1d9cbe6167006d61696e2e6b6a686e6b006d61ag.main.kjhnk.ma
0x1d9cce74682e4973496e66006d6174682e4162th.IsInf.math.Ab
0x1d9cde73006d61696e2e6d4b41584731560065s.main.mKAXG1V.e
0x1d9cee6e636f64696e672f62696e6172792e6cncoding/binary.l
0x1d9cfe6974746c65456e6469616e2e50757455ittleEndian.PutU
0x1d9d0e696e743332006d61696e2e6170644a4aint32.main.apdJJ
0x1d9d1e6774006d61696e2e7552777242496253gt.main.uRwrBIbS
0x1d9d2e7830694276006d61696e2e6d61696e00x0iBv.main.main.
0x1d9d3e6d61696e2e6533663138487041423836main.e3f18HpAB86
0x1d9d4e416571006d61696e2e6278356d685272Aeq.main.bx5mhRr
0x1d9d5e4857434b6d4970006d61696e2e683736HWCKmIp.main.h76
⋯4 more rows
0x1d9dae282a4c617a79444c4c292e4e65775072(*LazyDLL).NewPr
0x1d9dbe6f63006d61696e2e5258654531006d61oc.main.RXeE1.ma
0x1d9dce696e2e4c776e705a774241795371586bin.LwnpZwBAySqXk
⋯12 more rows

Go PE with retained symbol metadata 0x259fc0–0x25a080

⋯3 more rows
0x259ff000000000000000000000000000000000................
0x25a00000000000040000000000000001002000.............. .
0x25a010030000000000110000007a0414000100..........z.....
⋯7 more rows

Go PE hides build path with SyscallN dispatch 0x26eeb5–0x26f035

⋯7 more rows
0x26ef25756e74696d652e697461626c696e6b00untime.itablink.
0x26ef35676f3a6275696c64696e666f00676f3ago:buildinfo.go:
0x26ef456275696c64696e666f2e726566007275buildinfo.ref.ru
⋯15 more rows