microsip-portable 3.22.16
Signed MicroSIP portable with standard media libs
Hashed API polling keylogger with active-window trackingKeyboard hook builds a form-urlencoded POST
SHA-2566132e3383b46826bf5914c2c06f80ea1ccc604d274413fadb13e96422ed18928
Evidence
⋯3 more rows
0x3f000000000000000000000000000000000................
0x400558bec83ec5c837d0c0f742b837d0c46U....\.}..t+.}.F
0x4108b4514750d834818108b0d68c2460089.E.u..H....h.F..
0x420480450ff7510ff750cff7508ff155c82H.P.u..u..u...\.
⋯7 more rows
⋯3 more rows
0x25f42f00008b45d8a9f0ffffff757c817ddc/...E......u|.}.
0x2604efbeadde7573817de8496e7374756a81....us.}.Instuj.
0x26147de4736f66747561817de04e756c6c75}.softua.}.Nullu
0x2624580945088b45088b0df0a6420083e002X.E..E.....B....
⋯7 more rows
⋯8 more rows
0x80842e002000250064002500250000000000.. .%.d.%.%.....
0x80940000000049006e007300740061006c00....I.n.s.t.a.l.
0x80a46c0065007200200069006e0074006500l.e.r. .i.n.t.e.
0x80b467007200690074007900200063006800g.r.i.t.y. .c.h.
0x80c4650063006b0020006800610073002000e.c.k. .h.a.s. .
0x80d46600610069006c00650064002e002000f.a.i.l.e.d... .
0x80e443006f006d006d006f006e0020006300C.o.m.m.o.n. .c.
0x80f461007500730065007300200069006e00a.u.s.e.s. .i.n.
0x810463006c007500640065000a0069006e00c.l.u.d.e...i.n.
0x811463006f006d0070006c00650074006500c.o.m.p.l.e.t.e.
0x8124200064006f0077006e006c006f006100 .d.o.w.n.l.o.a.
⋯29 more rows
⋯3 more rows
0x8368000000004e0043005200430000000000....N.C.R.C.....
0x83784e005300490053002000450072007200N.S.I.S. .E.r.r.
0x83886f00720000000000ffffffff27484000o.r.........'H@.
⋯7 more rows
⋯3 more rows
0x25950740069006f006e00000000000904b004t.i.o.n.........
0x259603c3f786d6c2076657273696f6e3d2231<?xml version="1
0x259702e302220656e636f64696e673d225554.0" encoding="UT
0x25980462d3822207374616e64616c6f6e653dF-8" standalone=
0x2599022796573223f3e3c617373656d626c79"yes"?><assembly
0x259a020786d6c6e733d2275726e3a73636865 xmlns="urn:sche
0x259b06d61732d6d6963726f736f66742d636fmas-microsoft-co
0x259c06d3a61736d2e763122206d616e696665m:asm.v1" manife
0x259d0737456657273696f6e3d22312e30223estVersion="1.0">
0x259e03c617373656d626c794964656e746974<assemblyIdentit
⋯7 more rows
0x3b72aeff15e0f9db008bf08b45fc803e007595.........E..>.u.
0x3b72be5f5b5e8be55dc3cccccccccccccccccc_[^..]..........
0x3b72cecccc568bf2578bf983fa04722d538bda..V..W.....r-S..
0x3b72dec1eb02690f95e9d15b83ea0469f695e9...i....[...i...
0x3b72eed15b83c7048bc1c1e81833c169c895e9.[........3.i...
0x3b72fed15b33f183eb0175da5b83ea01741c83.[3....u.[...t..
0x3b730eea01740e83ea01751d0fb64702c1e010..t....u...G....
0x3b731e33f00fb64701c1e00833f00fb60733c63...G....3....3.
0x3b732e69f095e9d15b8bc6c1e80d33c669c895i....[.....3.i..
0x3b733ee9d15b5f5e8bc1c1e80f33c1c3cccccc..[_^.....3.....
0x3b734ecccc558bec51a120c0f70033c58945fc..U..Q. ...3..E.
0x3b735e5356578bf985ff751633c08d65f05f5eSVW....u.3..e._^
0x3b736e5b8b4dfc33cde8f6112d008be55dc38b[.M.3....-...]..
0x3b737ef78d4e02668b0683c6026685c075f52b..N.f.....f..u.+
0x3b738ef1d1fe8d4601e8c71d2d008bd433c98d....F....-...3..
0x3b739e49008a044f880411413bce76f58bfe83I...O...A;.v....
0x3b73aefe0472348bdec1eb02eb078da4240000..r4.........$..
0x3b73be0000690a95e9d15b83ee0469ff95e9d1..i....[...i....
0x3b73ce5b83c2048bc1c1e81833c169c895e9d1[........3.i....
0x3b73de5b33f983eb0175da83ee01741c83ee01[3....u....t....
0x3b73ee740e83ee01751d0fb64202c1e01033f8t....u...B....3.
0x3b73fe0fb64201c1e00833f80fb60233c769f8..B....3....3.i.
0x3b740e95e9d15b8bc7c1e80d33c769c895e9d1...[.....3.i....
0x3b741e5b8bc1c1e80f33c18d65f05f5e5b8b4d[.....3..e._^[.M
0x3b742efc33cde839112d008be55dc3cccccccc.3..9.-...].....
0x3b743ecccc85c9750333c0c38bd1568d72018d....u.3....V.r..
0x3b744e49008a024284c075f92bd65ee971feffI...B..u.+.^.q..
0x3b745effcc558bec8b5508568b750c8b42048b..U...U.V.u..B..
0x3b746e4e043bc1730683c8ff5e5dc37608b801N.;.s....^].v...
0x3b747e0000005e5dc38b028b0e3bc877e81bc0...^].....;.w...
0x3b748ef7d85e5dc3cccccccccccccccccccccc..^]............
0x3b749ecccc558bec8b45088b48048b450c8b40..U...E..H..E..@
0x3b74ae043bc1760583c8ff5dc31bc0f7d85dc3.;.v....].....].
0x3b74becccc558becb834100000e8d31a2d00a1..U...4......-..
0x3b74ce20c0f70033c58945fc53565768001000 ...3..E.SVWh...
0x3b74de008d85e8efffff8bf16a0050e861c949.........j.P.a.I
0x3b74ee0083c40cc785d8efffff0100000033db..............3.
0x3b74fe899de0efffff5668c0cffa00ff15d4f5......Vh........
0x3b750edb0068dc23f40056e8a3da4a0083c408..h.#..V...J....
0x3b751e8985e4efffff85c075148d43015f5e5b........u..C._^[
0x3b752e8b4dfc33cd .M.3.
⋯5 more rows
0x9bf020f1829500f0f07b00f0f07b00f0f07b00......{...{...{.
0x9bf03090457800d1fd930027ff930075ff9300.Ex.....'...u...
0x9bf0404e019400622894001ffb930040079400N...b(......@...
0x9bf05052329400201c9400f0f07b0097379400R2.. .....{..7..
0x9bf0600c0c94003f379400cafd930037049400....?7......7...
0x9bf0704d1394005f0494004f4a94003c449400M..._...OJ..<D..
0x9bf0808043940093499400364d9400b7459400.C...I..6M...E..
0x9bf090ff4a94006b4c940023479400f7479400.J..kL..#G...G..
0x9bf0a0c848940073469400bb4b9400ec449400.H..sF...K...D..
0x9bf0c00f3f94002a4e94002a4e94006d329400.?..*N..*N..m2..
0x9bf0d024fe9300df109400181a940059099400$...........Y...
0x9bf0e08049780090497800a0497800ce289400.Ix..Ix..Ix..(..
0x9bf0f03d61940008389400ae1e9400b8009400=a...8..........
⋯3 more rows
0x9bf13010c27a00f3fe93000dff9300f0f07b00..z...........{.
0x9bf14010c27a000000000066003a005c006400..z.....f.:.\.d.
0x9bf15064005c007600630074006f006f006c00d.\.v.c.t.o.o.l.
0x9bf16073005c007600630037006c0069006200s.\.v.c.7.l.i.b.
0x9bf17073005c0073006800690070005c006100s.\.s.h.i.p.\.a.
0x9bf18074006c006d00660063005c0069006e00t.l.m.f.c.\.i.n.
0x9bf19063006c007500640065005c0061006600c.l.u.d.e.\.a.f.
0x9bf1a07800770069006e0032002e0069006e00x.w.i.n.2...i.n.
0x9bf1b06c0000005c0bf500f9e79300f809dc00l...\...........
0x9bf1c00400000001000000080adc0000000000................
⋯3 more rows
0x9bf2009031258268846980e03687613d3ccf11.1%.h.i..6.a=<..
0x9bf210810c00aa00389b711401000000000000.....8.q........
0x9bf220c000000000000046740adc00880adc00.......Ft.......
0x9bf230a40adc00b80adc00c80adc00dc0adc00................
0x9bf240fc0adc000c0bdc00200bdc00300bdc00........ ...0...
0x9bf2504c0bdc00740bdc00880bdc00a40bdc00L...t...........
0x9bf260c80bdc00dc0bdc00f40bdc000c0cdc00................
0x9bf270240cdc00610063006300500061007200$...a.c.c.P.a.r.
0x9bf28065006e00740000006100630063004300e.n.t...a.c.c.C.
0x9bf290680069006c00640043006f0075006e00h.i.l.d.C.o.u.n.
0x9bf2a074000000610063006300430068006900t...a.c.c.C.h.i.
0x9bf2b06c006400000000006100630063004e00l.d.....a.c.c.N.
0x9bf2c061006d00650000006100630063005600a.m.e...a.c.c.V.
⋯7 more rows
0xb16048616c69643e0000002563000025000000alid>...%c..%...
0xb1605843006f006e00740065006e0074002d00C.o.n.t.e.n.t.-.
0xb1606854007900700065003a00200061007000T.y.p.e.:. .a.p.
0xb1607870006c00690063006100740069006f00p.l.i.c.a.t.i.o.
0xb160886e002f0078002d007700770077002d00n./.x.-.w.w.w.-.
⋯15 more rows
0xb75e204400aa0147657453797374656d4d6574D...GetSystemMet
0xb75e30726963730000bb0147657457696e646frics....GetWindo
0xb75e407700e700456e644469616c6f6700d301w...EndDialog...
0xb75e5047657457696e646f7754687265616450GetWindowThreadP
0xb75e60726f63657373496400004d024d657373rocessId..M.Mess
⋯4 more rows
0xb75eb041646a75737457696e646f7752656374AdjustWindowRect
0xb75ec0457800002f0353797374656d50617261Ex../.SystemPara
0xb75ed06d6574657273496e666f57009b025265metersInfoW...Re
0xb75ee06769737465725368656c6c486f6f6b57gisterShellHookW
0xb75ef0696e646f77000202497349636f6e6963indow...IsIconic
0xb75f000000b60253656e64496e70757400e502....SendInput...
0xb75f105365744d656e754974656d496e666f57SetMenuItemInfoW
0xb75f2000006a014765744d656e754974656d49..j.GetMenuItemI
0xb75f306e666f5700004301476574466f726567nfoW..C.GetForeg
0xb75f40726f756e6457696e646f77005b014765roundWindow.[.Ge
0xb75f50744c617374496e707574496e666f0000tLastInputInfo..
0xb75f605e024f70656e436c6970626f61726400^.OpenClipboard.
⋯5 more rows
0xb75fc000006d004372656174654d656e750000..m.CreateMenu..
0xb75fd0ff00456e756d57696e646f7773002003..EnumWindows. .
0xb75fe053686f7757696e646f7700001f014765ShowWindow....Ge
⋯19 more rows
⋯3 more rows
0xb7685a726561644d6573736167655700003703readMessageW..7.
0xb7686a546f556e69636f646545780054014765ToUnicodeEx.T.Ge
0xb7687a744b6579626f6172644c61796f757400tKeyboardLayout.
0xb7688a58014765744b6579626f617264537461X.GetKeyboardSta
0xb7689a746500005a0043726561746541636365te..Z.CreateAcce
0xb768aa6c657261746f725461626c6557005400leratorTableW.T.
⋯5 more rows
Showing the top 5 files — 9 more files (166 regions) not shown.